Техническая информация
- Adware.Gexin.2.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) q####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sdk-ope####.g####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) safebro####.google####.com:443
- TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) l####.huob####.com:443
- TCP(TLS/1.0) 1####.217.17.106:443
- TCP(TLS/1.0) bucket####.oss-cn-####.aliy####.com:443
- TCP(TLS/1.0) f####.gst####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) 1####.217.20.78:443
- TCP(TLS/1.2) 1####.217.17.106:443
- TCP sdk.o####.t####.####.com:5224
- TCP cm-1####.ig####.com:5225
- 7j####.c####.z0.####.com
- and####.b####.qq.com
- and####.google####.com
- bucket####.oss-cn-####.aliy####.com
- c-h####.g####.com
- cm-1####.ig####.com
- cm-1####.ig####.com
- f####.gst####.com
- instant####.google####.com
- l####.huob####.com
- l####.tbs.qq.com
- p####.google####.com
- safebro####.google####.com
- sdk-ope####.g####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- q####.c####.l####.####.com/config/hz-hzv6.conf
- q####.c####.l####.####.com/tdata_BAI450
- q####.c####.l####.####.com/tdata_Cye094
- q####.c####.l####.####.com/tdata_vGW305
- sdk.o####.p####.####.com/api/addr.htm
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk-ope####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.jg.store.report_cf
- /data/data/####/.jgck
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/154617851ea0d81d72ddbc47891d7e2b2fc9826856ee639....0.tmp
- /data/data/####/16282995ab46649f2af80720cbe2d462f532268a3a55908....0.tmp
- /data/data/####/19d0cf1ba3e3c657f4c410e32a190cf6dedc10a999c686b....0.tmp
- /data/data/####/31c62fbc2e757cc9e458a74f7efe8fab047053dae5450c6....0.tmp
- /data/data/####/3ba8791763b4b06e261ec3de00d4dbb1650b97cd0377156....0.tmp
- /data/data/####/EL_SharePrefence.xml
- /data/data/####/RongPushAppConfig.xml
- /data/data/####/a==7.5.3&&3.0.11_1571779906690_envelope.log
- /data/data/####/b62fcdbc5e877b8b450f996d31c7d275ec10ee70ee6029f....0.tmp
- /data/data/####/ba641fcfa9116133fc433a9eb3c825e9521fa54db6df85f....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/classes.dex
- /data/data/####/classes.dex;classes2.dex
- /data/data/####/classes.dex;classes3.dex
- /data/data/####/classes.oat
- /data/data/####/com.nuocf.yshuobang.BETA_VALUES.xml
- /data/data/####/core_info
- /data/data/####/crashrecord.xml
- /data/data/####/d==7.5.3&&3.0.11_1571779906931_envelope.log
- /data/data/####/d==7.5.3&&3.0.11_1571779937901_envelope.log
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTA2MzQ3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTI2ODY4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTM3OTIw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTQ5Mjgy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTYwMTYw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTcxNzc5OTcxMDIw;
- /data/data/####/dc97b068a908924a0f7d745c60ac588e6e692c46e72ef40...e45e.0
- /data/data/####/e08d0749207434dea4328c7a606dbb8090554640fa92d6e....0.tmp
- /data/data/####/ea17648c0c37352ecb34714e72987cd1cad6ca17d45fc80....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f7499ccc32e1104aa4561c1f072da9f900590da615dd757....0.tmp
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/i==1.2.0&&3.0.11_1571779906243_envelope.log
- /data/data/####/i==1.2.0&&3.0.11_1571779926834_envelope.log
- /data/data/####/i==1.2.0&&3.0.11_1571779939008_envelope.log
- /data/data/####/i==1.2.0&&3.0.11_1571779949340_envelope.log
- /data/data/####/i==1.2.0&&3.0.11_1571779960184_envelope.log
- /data/data/####/i==1.2.0&&3.0.11_1571779971038_envelope.log
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu.so
- /data/data/####/local_crash_lock
- /data/data/####/local_crash_lock (deleted)
- /data/data/####/locale.config.xml
- /data/data/####/native_record_lock (deleted)
- /data/data/####/proc_auxv
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_config.xml.bak
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_BAI450
- /data/data/####/tdata_BAI450.dex
- /data/data/####/tdata_BAI450.dex.flock (deleted)
- /data/data/####/tdata_BAI450.jar
- /data/data/####/tdata_Cye094
- /data/data/####/tdata_Cye094.dex
- /data/data/####/tdata_Cye094.dex.flock (deleted)
- /data/data/####/tdata_Cye094.jar
- /data/data/####/tdata_vGW305
- /data/data/####/tdata_vGW305.dex
- /data/data/####/tdata_vGW305.dex.flock (deleted)
- /data/data/####/tdata_vGW305.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/misc/####/primary.prof
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes3.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_BAI450.jar --oat-fd=51 --oat-location=/data/user/0/<Package>/files/tdata_BAI450.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_Cye094.jar --oat-fd=55 --oat-location=/data/user/0/<Package>/files/tdata_Cye094.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/tdata_vGW305.jar --oat-fd=56 --oat-location=/data/user/0/<Package>/files/tdata_vGW305.dex --compiler-filter=speed
- cat /sys/class/net/wlan0/address
- getprop
- getprop ro.product.cpu.abi
- ls /sys/class/thermal
- mount
- sh
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding