Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) pub-####.qin####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) s####.s.360.cn:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) bjdt####.b####.com:80
- TCP(HTTP/1.1) sdk.l####.360.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) p.s.3####.cn:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(SSL/3.0) p.ssl.q####.com:443
- TCP(TLS/1.0) p4.ssl.cdn.####.com:443
- TCP(TLS/1.0) p.ssl.q####.com:443
- TCP(TLS/1.0) api.app.b####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) c####.b####.com:443
- TCP(TLS/1.0) p2.ssl.cdn.####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- amap####.cn-hang####.oss####.####.com
- and####.b####.qq.com
- api.app.b####.com
- api.b####.com
- bjdt####.b####.com
- c####.b####.com
- c####.g####.ig####.com
- c-h####.g####.com
- p.s.3####.cn
- p.ssl.q####.com
- p0.ssl.cdn.####.com
- p0.ssl.q####.com
- p1.ssl.cdn.####.com
- p2.ssl.cdn.####.com
- p3.ssl.cdn.####.com
- p4.ssl.cdn.####.com
- p4.ssl.q####.com
- pub-####.qin####.com
- res####.a####.com
- s####.s.360.cn
- sdk.c####.ig####.com
- sdk.l####.360.cn
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- bjdt####.b####.com/
- pub-####.qin####.com/tdata_EDT356
- s####.s.360.cn/ak/a0a080f42e6f13b3a2df133f073095dd.html?m2=####
- sdk.l####.360.cn/codec?model=####&pid=####&mid=####&ver=####&bid=####&sd...
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_YYn966
- t####.c####.q####.####.com/tdata_eOt091
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- p.s.3####.cn/pstat/plog.php
- p.s.3####.cn/update/update.php?p=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/092ed35416446e8b663fbf8c91efd7c7
- /data/data/####/0e2fcb3c432e124e12a544c6d0895ae0
- /data/data/####/0e9ea157fe8da75700fa306b54ba6439
- /data/data/####/15c2c797cc572f7d2b6f75308e83f714
- /data/data/####/176eb1beb9fa0f2440366d89af03ec5ad8fc08ed0704393....0.tmp
- /data/data/####/1e7fedfff67225cd7f03a16003f9b7850cf90df6d64f512....0.tmp
- /data/data/####/20310e09d254e976b8ea1ee35d409965
- /data/data/####/2228d41e861d71691391b77709f4822f
- /data/data/####/2aef53172cd81a45b22fae8a94b74d25
- /data/data/####/2f2dbfae8617174a0cbf74fe16f99690
- /data/data/####/2fba5aa32ad316ca0c41b821fec36f2b
- /data/data/####/31002ffd33da8a0fa9250d5b64c6c910
- /data/data/####/34106031654051.0
- /data/data/####/3d17935c5a6fc6ff02624de4af00c8993c83584572c87e4....0.tmp
- /data/data/####/4064a4bb036e28e057d3643295e906b7
- /data/data/####/49c1a8362d61b1a26e80f029b9d5d3a06a5c10f3fa4efa0....0.tmp
- /data/data/####/4e240c16c8c4e06cbd1cd12dad2326f1
- /data/data/####/56136617563114.0
- /data/data/####/589952de9cc9294deb8f71ca665cf8af
- /data/data/####/6097baa8ee8842e8d1c1ceb7e7fb335d
- /data/data/####/694b12f879ac8a7b83323737d7c1ebeb
- /data/data/####/6b9c86510e3ce36081d082b4ff45476d
- /data/data/####/75d5f94d3aac6edeabc35ec4b012ba74
- /data/data/####/77741805818251662629d32d96954f78
- /data/data/####/79aeccdec85e3800be632c7b4171c65a
- /data/data/####/7d98bb836eb39628b42136fdc46d0bf7
- /data/data/####/7f2d5d889886744928bcb603af126762
- /data/data/####/7fb6238643fb25a237a6a2a23e74390147d364385cc0436....0.tmp
- /data/data/####/845b70a53b242e96804147b663787d7eadebeca40f8ab1e....0.tmp
- /data/data/####/86d76f1319ec
- /data/data/####/8ba5ecc910d8757e971cd5f4b38a1af5
- /data/data/####/8e4bd2f46b2904995afe4ae751d462816802c8e5141c625....0.tmp
- /data/data/####/90778a7b889da899c6fbe7b64ca37d5033674a0a5889418....0.tmp
- /data/data/####/97f00ae68be51a3db65b00934e7172fbcc6ad3e61ac2ea9....0.tmp
- /data/data/####/9cbd4dc3ed7b1503703816b871d19c43bbe8400bf47c250....0.tmp
- /data/data/####/9cfbef6c115ead6fca1b29e2c33d21a9bcacb3fbbbe21fd....0.tmp
- /data/data/####/QH_DeviceSDK.xml
- /data/data/####/QH_SDK_M2.xml
- /data/data/####/QH_SDK_UserDataa0a080f42e6f13b3a2df133f073095dd.xml
- /data/data/####/QH_SDK_sessionIDa0a080f42e6f13b3a2df133f073095dd.xml
- /data/data/####/RefactorNewsItemDbModel.realm
- /data/data/####/RefactorNewsItemDbModel.realm.lock
- /data/data/####/WalletPlugin.apk
- /data/data/####/Y29tLmJ0aW1lLmJqdGltZQ==.tick.lock
- /data/data/####/aa920c9267507c1f2c8cdf49dad5c690
- /data/data/####/access_control.control.mx
- /data/data/####/access_control.write.mx
- /data/data/####/adcf1b54ea0b9db779bb10fbdb8c10440f7484827bba197....0.tmp
- /data/data/####/b48017a91c26de7c02262cd3addbabd0a7ad8129fcb3448....0.tmp
- /data/data/####/b93850350ca16e342816964917b39241
- /data/data/####/bcaa32866e756561d21400b49db3fbe0
- /data/data/####/bd6e2e1ba025cbd21f37913f71431149
- /data/data/####/bfe5db9b6ddcaccbbbc683f2c9e25de3
- /data/data/####/btime_multi_theme.xml
- /data/data/####/btime_netmode_debug.xml
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c01d1665b328693518812a20621e527612df0df63e364e1....0.tmp
- /data/data/####/c118b51048d4f268bccbfab451378d5e
- /data/data/####/c4cd0a2faaadbd9fe9bab5c8bc11fd5c
- /data/data/####/c59b012c016c1b54613d828c084d9d70383d2e3a1f4195f....0.tmp
- /data/data/####/c6ef302c348e15678fb96877da2f15c81d75b53d02b3c62....0.tmp
- /data/data/####/c86663a1c64ecb57aa8eb6e87ecac5525e17e9b5e1c0287...7cbe.0
- /data/data/####/c8c26f58922974bf95c87a9cb2d495e9
- /data/data/####/cba5cba342767da6d099f051ad23fd4a25c4c45a7bf3f53....0.tmp
- /data/data/####/cc20a9d0e4c1f50da7d1f648f53e405f
- /data/data/####/ce5c08713ba5c6c345d89e6411b0dbab833af7690bda9cc....0.tmp
- /data/data/####/d07112a1d9a2769755134c80f8838e76
- /data/data/####/d612dbf36d1f44600648d50a88ca83bb78d546264e29213....0.tmp
- /data/data/####/dafile.db
- /data/data/####/dafile.db-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dda05f427dcc8abc9546a32c31f7edbe
- /data/data/####/e2d29ac3ae65622d75266512f6c6a55f
- /data/data/####/e5fb1ffd5e0735a6eee29bd1dfdd8e4c
- /data/data/####/e783337c6b831be3f9cce8cc90e2f4e3
- /data/data/####/ea58b2fef69a43c2b6de93a14dc9fb42d0659eca3bfe946....0.tmp
- /data/data/####/fd104a93c8d94df60a8076533df62f1f
- /data/data/####/ff5a064388db74b16900748beaf53c4a455c9ac2c6940ab....0.tmp
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/pref.xml
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tray.db-journal
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.deviceId
- /data/media/####/.iddata
- /data/media/####/UHw
- /data/media/####/UHw (deleted)
- /data/media/####/Y29tLmJ0aW1lLmJqdGltZQ==
- /data/media/####/Y29tLmJ0aW1lLmJqdGltZQ== (deleted)
- /data/media/####/a0a080f42e6f13b3a2df133f073095dd
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/app.db
- /data/media/####/applog.txt
- /data/media/####/com.btime.bjtime.bin
- /data/media/####/com.btime.bjtime.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/data.lock
- /data/media/####/logs.txt
- /data/media/####/report.lock
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.btime.common.push.BTPushService 24575 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- Bugly
- dvrender
- getuiext2
- jplayer
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- openh264
- publisher
- realm-jni
- transcore
- ufix
- viewer
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- desede-ECB-PKCS5Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding