Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(TLS/1.0) fy.innot####.com:443
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) k####.eas####.com:443
- TCP(TLS/1.0) api.mengtu####.com:443
- TCP(TLS/1.0) gw.d.y####.com:443
- TCP(TLS/1.0) log.mengtu####.com:443
- TCP(TLS/1.0) s####.j####.cn:443
- TCP(TLS/1.0) 1####.217.20.110:443
- UDP 1####.168.114.1:137
- TCP sdk.o####.t####.####.com:5224
- UDP s.j####.cn:19000
- TCP c####.g####.ig####.com:5225
- TCP 1####.196.74.70:8888
- TCP 1####.202.138.15:7006
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- api.mengtu####.com
- app.mengtu####.com
- c####.g####.ig####.com
- c-h####.g####.com
- fy.innot####.com
- gw.d.y####.com
- k####.eas####.com
- log.mengtu####.com
- log.u####.com
- p####.l.y####.com
- plb####.u####.com
- pub-####.qin####.com
- s####.j####.cn
- s.j####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.u####.com
- t####.c####.q####.####.com/tdata_Jga153
- t####.c####.q####.####.com/tdata_Wqf010
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_duV457
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- ti####.c####.l####.####.com/tdata_EDT369
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
- /data/anr/traces.txt
- /data/data/####/.imprint
- /data/data/####/1004
- /data/data/####/203f07f4fb51
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/MultiDex.lock
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/T-2c2iP9AYjYBOHf4pM_sEwj9qaVeryr
- /data/data/####/T-TflzQuZITmvN5q1pOWYkaOL_JUbXCh
- /data/data/####/T0UbX3zzy6ZwB1grR4OalkM-qEk1I9wB
- /data/data/####/T0pFZQ4glyRLIu5JA5Jf4E2ws1WE7TDZ
- /data/data/####/T1dadgir7UFOSiLCpJte208acZn3dTjr
- /data/data/####/T1hNYbpYXTHn0pHq26ejakAyEjnnAndq
- /data/data/####/T2Gys_btGi29eL9kpqAr9UWDUiR6RCHZ
- /data/data/####/T5PmBQqZWewC4-O1uKqcLEfUvlsulB3C
- /data/data/####/T8dsZNr4eGivJMf5G4WCF02EmN71mNXO
- /data/data/####/T9f25LlHY7BcskOf95Tgp0xVlLsGqfBx
- /data/data/####/Tw2bEzVdChxFbX1r5bN93ETU5mDwSx9d
- /data/data/####/TwT3vgySJ0AwCtZzoKRoIUIVjJUfbWfB
- /data/data/####/TwVUKhtS-2LFNg4yq41OVkg4pWUaM4kN
- /data/data/####/Tx2dJk-Zzn5ldcs06JNgOUMkpZvbHP8l
- /data/data/####/TxqoGG24Kb2YrEE-upfnKUOJR9nUo4iW
- /data/data/####/TyLMQ2BJmKuel6F5jrBVo0RDnZDbXJR9
- /data/data/####/Tzq389CXJfMS3Ee5LYhSmU_OlY7MJmZB
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu
- /data/data/####/bugly_db_legu-journal
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/com.mengtuiapp.mall.xml
- /data/data/####/com.mengtuiapp.mall.xml.bak
- /data/data/####/crashrecord.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjM2NDY0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjMyODAy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjQ0MTcw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjQ2MDUx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjU0NzI1;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjU2MTIx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjU3ODAx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjUwNjIy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjUyMzY2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjY0MzYz;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjY2MDMw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjY4NTg0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjYyNzc2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjc2NTEy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjc4NTc5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjcwMzk4;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjcyMTMx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjg0NDc5;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjk0Njgx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjk3MTQ3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjkwNjAy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTUzNjMwNjkyNTg2;
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/device_id.xml.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/file_token
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gkt-journal
- /data/data/####/gx_sp.xml
- /data/data/####/httpclient-req--727531703.cache
- /data/data/####/httpclient-req--727531703.cache (deleted)
- /data/data/####/i==1.2.0&&2.4.1.1_1553630632912_envelope.log
- /data/data/####/index
- /data/data/####/info.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/innotech_push.db-journal
- /data/data/####/it_push_userinfo.xml
- /data/data/####/jni_log_1553630672954.txt
- /data/data/####/jni_log_1553630687298.txt
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/jpush_uncaughtexception_file
- /data/data/####/kefuinfo.xml
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mengtui_share_data.xml
- /data/data/####/mix.dex
- /data/data/####/mix.so
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushk.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sys_log_1553630672954.txt
- /data/data/####/sys_log_1553630687298.txt
- /data/data/####/tdata_Jga153
- /data/data/####/tdata_Jga153.jar
- /data/data/####/tdata_Wqf010
- /data/data/####/tdata_Wqf010.jar
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_duV457
- /data/data/####/tdata_duV457.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_socialize.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromium.db-journal (deleted)
- /data/media/####/.0ee8b178d3b70c385d801fa56d458eb6.cucom
- /data/media/####/.0ee8b178d3b70c385d801fa56d458eb6.cuid
- /data/media/####/.0ee8b178d3b70c385d801fa56d458eb6.cuid2
- /data/media/####/.2e1b3b35856a9a8b9e7626ee3afd5a3c.cucom
- /data/media/####/.2e1b3b35856a9a8b9e7626ee3afd5a3c.cuid
- /data/media/####/.2e1b3b35856a9a8b9e7626ee3afd5a3c.cuid2
- /data/media/####/.301d574ef42563b03638c8eae19225cb.cucom
- /data/media/####/.301d574ef42563b03638c8eae19225cb.cuid
- /data/media/####/.301d574ef42563b03638c8eae19225cb.cuid2
- /data/media/####/.31aa1b74de685d3e992b8b20b29277a6.cucom
- /data/media/####/.3f05ff2ee62166a5f2841b6f5991a729.cucom
- /data/media/####/.3f05ff2ee62166a5f2841b6f5991a729.cuid
- /data/media/####/.3f05ff2ee62166a5f2841b6f5991a729.cuid2
- /data/media/####/.411953e3b77ceb84e2e8249e1d92b570.cucom
- /data/media/####/.411953e3b77ceb84e2e8249e1d92b570.cuid
- /data/media/####/.411953e3b77ceb84e2e8249e1d92b570.cuid2
- /data/media/####/.43c699cacb221ac1f982fcaeae20d859.cucom
- /data/media/####/.43c699cacb221ac1f982fcaeae20d859.cuid
- /data/media/####/.43c699cacb221ac1f982fcaeae20d859.cuid2
- /data/media/####/.47dcbd834e669233d7eb8a51456ed217.cucom
- /data/media/####/.47dcbd834e669233d7eb8a51456ed217.cuid
- /data/media/####/.47dcbd834e669233d7eb8a51456ed217.cuid2
- /data/media/####/.494a800a9c78e905f4ab6b7d0e68904e.cucom
- /data/media/####/.494a800a9c78e905f4ab6b7d0e68904e.cuid
- /data/media/####/.494a800a9c78e905f4ab6b7d0e68904e.cuid2
- /data/media/####/.4999fa2ba973bf32fbaaec3713f36b35.cucom
- /data/media/####/.4999fa2ba973bf32fbaaec3713f36b35.cuid
- /data/media/####/.4999fa2ba973bf32fbaaec3713f36b35.cuid2
- /data/media/####/.51aa6f4a72cb95868533c23b3ed46280.cucom
- /data/media/####/.51aa6f4a72cb95868533c23b3ed46280.cuid
- /data/media/####/.51aa6f4a72cb95868533c23b3ed46280.cuid2
- /data/media/####/.54b53072540eeeb8f8e9343e71f28176.cucom
- /data/media/####/.54b53072540eeeb8f8e9343e71f28176.cuid
- /data/media/####/.54b53072540eeeb8f8e9343e71f28176.cuid2
- /data/media/####/.595b157df788ac0a270a61af4e82461b.cucom
- /data/media/####/.6829d1667526200f340b0ebbc50f1799.cucom
- /data/media/####/.6c017cebec8103c6a12acdf6e530cd40.cucom
- /data/media/####/.6c017cebec8103c6a12acdf6e530cd40.cuid
- /data/media/####/.6c017cebec8103c6a12acdf6e530cd40.cuid2
- /data/media/####/.7f1742e0d9ab7b82443cb870d357e085.cucom
- /data/media/####/.7f1742e0d9ab7b82443cb870d357e085.cuid
- /data/media/####/.7f1742e0d9ab7b82443cb870d357e085.cuid2
- /data/media/####/.801ab24683a4a8c433c6eb40c48bcd9d.cucom
- /data/media/####/.801ab24683a4a8c433c6eb40c48bcd9d.cuid
- /data/media/####/.801ab24683a4a8c433c6eb40c48bcd9d.cuid2
- /data/media/####/.80662e1f485e79d07ef4973f6b1b9f88.cucom
- /data/media/####/.80662e1f485e79d07ef4973f6b1b9f88.cuid
- /data/media/####/.80662e1f485e79d07ef4973f6b1b9f88.cuid2
- /data/media/####/.8290c29bcd88cef122f67d57ccfa328e.cucom
- /data/media/####/.8e8b27e522ed7bde563e85f73458fd7d.cucom
- /data/media/####/.8e8b27e522ed7bde563e85f73458fd7d.cuid
- /data/media/####/.8e8b27e522ed7bde563e85f73458fd7d.cuid2
- /data/media/####/.8f51db48bf0ea9f72de7a231ed8af2f0.cucom
- /data/media/####/.8f51db48bf0ea9f72de7a231ed8af2f0.cuid
- /data/media/####/.8f51db48bf0ea9f72de7a231ed8af2f0.cuid2
- /data/media/####/.90657585874c0020e3bee77e5d77a334.cucom
- /data/media/####/.9bf72350632fdc8eedb8dc474f164954.cucom
- /data/media/####/.9bf72350632fdc8eedb8dc474f164954.cuid
- /data/media/####/.9bf72350632fdc8eedb8dc474f164954.cuid2
- /data/media/####/.a.dat
- /data/media/####/.a274f4d4670213a9045ce258c6c56b80.cucom
- /data/media/####/.a274f4d4670213a9045ce258c6c56b80.cuid
- /data/media/####/.a274f4d4670213a9045ce258c6c56b80.cuid2
- /data/media/####/.a813fc513e2acbdc7dbb94a2b0444a01.cucom
- /data/media/####/.adfwe.dat
- /data/media/####/.b11ddc7e1671c0bd22dc89dd757508d4.cucom
- /data/media/####/.b11ddc7e1671c0bd22dc89dd757508d4.cuid
- /data/media/####/.b11ddc7e1671c0bd22dc89dd757508d4.cuid2
- /data/media/####/.b38b7579b17be151dba2d4ebf3594fd9.cucom
- /data/media/####/.b8d3178fff443ffb41bc400686331bdd.cucom
- /data/media/####/.c3418983f96107fb595049c67426dc08.cucom
- /data/media/####/.c3418983f96107fb595049c67426dc08.cuid
- /data/media/####/.c3418983f96107fb595049c67426dc08.cuid2
- /data/media/####/.c57a0b01fb1d0879195ce10fcfc070e1.cucom
- /data/media/####/.cb4cb2401e6e43cf74a54523b8da5f02.cucom
- /data/media/####/.cb4cb2401e6e43cf74a54523b8da5f02.cuid
- /data/media/####/.cb4cb2401e6e43cf74a54523b8da5f02.cuid2
- /data/media/####/.cc8dd1145e0a2d862cf37183282bd82c.cucom
- /data/media/####/.cca.dat
- /data/media/####/.e0db8f977ad7a2f31aa5a97ab89d0c0e.cucom
- /data/media/####/.e84e30b9390cdb64db6db2c9ab87846d.cucom
- /data/media/####/.e84e30b9390cdb64db6db2c9ab87846d.cuid
- /data/media/####/.e84e30b9390cdb64db6db2c9ab87846d.cuid2
- /data/media/####/.e85823b4e7db1064f4301e1c74978199.cucom
- /data/media/####/.f11ff3660b9da224b273ed1d720f22f5.cucom
- /data/media/####/.f11ff3660b9da224b273ed1d720f22f5.cuid
- /data/media/####/.f11ff3660b9da224b273ed1d720f22f5.cuid2
- /data/media/####/.umm.dat
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/aacout
- /data/media/####/acucomcu
- /data/media/####/app.db
- /data/media/####/axacount
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.mengtuiapp.mall.bin
- /data/media/####/com.mengtuiapp.mall.db
- /data/media/####/commonaacoutc
- /data/media/####/commonaxacountc
- /data/media/####/commonwcoutc
- /data/media/####/config.txt
- /data/media/####/cusc
- /data/media/####/cusc2
- /data/media/####/cusys
- /data/media/####/cusys2
- /data/media/####/easemob.log
- /data/media/####/gkt-journal
- /data/media/####/gktper
- /data/media/####/systemccu
- /data/media/####/systemccu2
- /data/media/####/systucomcu
- /data/media/####/tdata_Jga153
- /data/media/####/tdata_Wqf010
- /data/media/####/tdata_bca864
- /data/media/####/tdata_duV457
- /data/media/####/test.log
- /data/media/####/ucucomcu
- /data/media/####/wcout
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/netcfg
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/com.innotech.innotechpush.service.PushService 24915 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop net.hostname
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.serialno
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls -i
- ls -l
- ls /sys/class/thermal
- mount
- ps
- sh
- sh -c cat /sys/block/mmcblk0/device/cid
- sh -c cd /proc/sys/kernel/ && stat random
- sh -c cd /sys/class/net/wlan0/ && cat address
- sh -c cd /sys/class/net/wlan0/ && stat address
- sh -c cd /system/bin && ls -i
- sh -c cd /system/bin && ls -l
- sh -c cd <SD-Card>/ && ls -i
- sh <Package Folder>/files/T-2c2iP9AYjYBOHf4pM_sEwj9qaVeryr
- sh <Package Folder>/files/T-TflzQuZITmvN5q1pOWYkaOL_JUbXCh
- sh <Package Folder>/files/T0UbX3zzy6ZwB1grR4OalkM-qEk1I9wB
- sh <Package Folder>/files/T0pFZQ4glyRLIu5JA5Jf4E2ws1WE7TDZ
- sh <Package Folder>/files/T1dadgir7UFOSiLCpJte208acZn3dTjr
- sh <Package Folder>/files/T1hNYbpYXTHn0pHq26ejakAyEjnnAndq
- sh <Package Folder>/files/T2Gys_btGi29eL9kpqAr9UWDUiR6RCHZ
- sh <Package Folder>/files/T5PmBQqZWewC4-O1uKqcLEfUvlsulB3C
- sh <Package Folder>/files/T8dsZNr4eGivJMf5G4WCF02EmN71mNXO
- sh <Package Folder>/files/T9f25LlHY7BcskOf95Tgp0xVlLsGqfBx
- sh <Package Folder>/files/Tw2bEzVdChxFbX1r5bN93ETU5mDwSx9d
- sh <Package Folder>/files/TwVUKhtS-2LFNg4yq41OVkg4pWUaM4kN
- sh <Package Folder>/files/Tx2dJk-Zzn5ldcs06JNgOUMkpZvbHP8l
- sh <Package Folder>/files/TxqoGG24Kb2YrEE-upfnKUOJR9nUo4iW
- sh <Package Folder>/files/TyLMQ2BJmKuel6F5jrBVo0RDnZDbXJR9
- sh <Package Folder>/files/Tzq389CXJfMS3Ee5LYhSmU_OlY7MJmZB
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/com.innotech.innotechpush.service.PushService 24915 300 0
- stat /cache
- stat /data
- stat /data/app
- stat /proc/sys/kernel/random
- stat /root
- stat random
- uname -a
- Bugly
- InnoCommonSo
- InnoSo
- audioeffect_jni
- getuiext3
- hyphenate
- hyphenate_av
- hyphenate_av_recorder
- jcore119
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- sqlite
- ufix
- xsignal_client
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-CFB-NoPadding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding