Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) img.newairc####.com:80
- TCP(HTTP/1.1) oss.newairc####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h5.newairc####.com:80
- TCP(TLS/1.0) oss.newairc####.com:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP(TLS/1.0) h5.newairc####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- a####.u####.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- c####.g####.ig####.com
- c-h####.g####.com
- h5.newairc####.com
- img.newairc####.com
- l####.tbs.qq.com
- oss.newairc####.com
- pub-####.qin####.com
- s####.ml####.cc
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
- h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
- h5.newairc####.com/subscribe/getSubDetail?sid=####&cid=####&uid=####&las...
- img.newairc####.com/pxrb/pic/201811/19/67cb3941-f235-46ad-939d-69baf071c...
- oss.newairc####.com/pxrb/article/201812/04/c5513524.json
- oss.newairc####.com/pxrb/pic/201612/23/3aa61db5-23f8-48ab-b34f-d6d1df9c2...
- oss.newairc####.com/pxrb/pic/201612/23/9b1c9fbf-fd32-4daa-b48f-222c89dfe...
- oss.newairc####.com/pxrb/pic/201612/23/e0a640da-7b91-4410-a935-4853a6c9f...
- oss.newairc####.com/pxrb/pic/201703/16/05bb4286-20dc-4617-89a7-d3852a30c...
- oss.newairc####.com/pxrb/pic/201807/26/59020694-852e-460c-aab5-54fa4ff52...
- oss.newairc####.com/pxrb/pic/201812/04/16881fa3-c219-469d-8163-66e90cb3c...
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- ti####.c####.l####.####.com/tdata_EDT356
- a####.u####.com/app_logs
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- c-h####.g####.com/api.php?format=####&t=####
- h5.newairc####.com/api/event
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1084274800
- /data/data/####/-1312716470
- /data/data/####/-1383974947
- /data/data/####/-1383974948
- /data/data/####/-457542810
- /data/data/####/-855609585
- /data/data/####/-886629392
- /data/data/####/.imprint
- /data/data/####/01e80fc5d96319af2d4f04853de71cf96bf4af66cb5a67c....0.tmp
- /data/data/####/074cca24c323c74e35c4c2b2956819f9618183589368fa5....0.tmp
- /data/data/####/0a374ef16fda566342e6d73f662d04d040bbe76c08a393c....0.tmp
- /data/data/####/1389023919
- /data/data/####/1695857311
- /data/data/####/1b856e30b867b687eb7db278ffdf372d5dc9b33a4c3ef2f....0.tmp
- /data/data/####/2014202186
- /data/data/####/2824b14041d5adb637996c874596945f7ee7f397a832079....0.tmp
- /data/data/####/2896e9a70f6c82a4eac4fa2d5d6c20ff4635b1eddfc7e78....0.tmp
- /data/data/####/32ae249bba8a919b102f0808fca0f61e1b023764b7bcc1c....0.tmp
- /data/data/####/337525857
- /data/data/####/373b9e8fea1d87d3d07b22bf5708b564d0d3a2cdecdfbb2....0.tmp
- /data/data/####/386967948
- /data/data/####/49
- /data/data/####/492140448
- /data/data/####/52eac4bbecb5a85708522b752ca4ce6a41a8da95da456db....0.tmp
- /data/data/####/5513524_article.js
- /data/data/####/57fab68b6fa815f5ac80fb61c37fdb7572274c9563abe11....0.tmp
- /data/data/####/60125311a6a92417adbf653ceb9857b0f0f03f5dc9bda17....0.tmp
- /data/data/####/61c400459d9e
- /data/data/####/633a28b5e696798be710019456fa296e360ba3a598f1d93....0.tmp
- /data/data/####/722547975
- /data/data/####/FZLTXHK-GBK_YS.ttf
- /data/data/####/QQ_3x.png
- /data/data/####/amazeui.min.css
- /data/data/####/amazeui.min.js
- /data/data/####/angular1.4.6.min.js
- /data/data/####/article.js
- /data/data/####/base.css
- /data/data/####/bca0e90a97c69bb9cf4b23a4ae394bfd854d25b9229da6d....0.tmp
- /data/data/####/bd062ab897ba4d183597a1ebf3f2daa535208fde4d14205....0.tmp
- /data/data/####/bugly_db_legu-journal
- /data/data/####/c589c0b6f7610c9a256a6918c8d019d06d7c60c50a3d80e....0.tmp
- /data/data/####/ca5a9b204f42040da147c6703468216dd9a0649f5703e1a....0.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/columnId.xml
- /data/data/####/comment_user_head_icon.png
- /data/data/####/core_info
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/db_founder0-journal
- /data/data/####/dd73cd0cf5016bda7a1fbe707a36e43c487da339a6b47e4....0.tmp
- /data/data/####/debug.conf
- /data/data/####/e4216f97c491269556c9d21c26519263060ddc0ffd063af....0.tmp
- /data/data/####/ea5a722a62f8dfe5faa4eaca6ee51643a156f2418919dd4....0.tmp
- /data/data/####/eddd6f940f9eead4685026d6a72c601a22018c76ae2b49f....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/file__0.localstorage-journal
- /data/data/####/fontawesome-webfont.ttf
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/great_button.png
- /data/data/####/great_cancel_button.png
- /data/data/####/gx_sp.xml
- /data/data/####/helpMsg.xml
- /data/data/####/icon-images.png
- /data/data/####/icon_audio_play.png
- /data/data/####/icon_file.png
- /data/data/####/icon_file_down.png
- /data/data/####/icon_meta_voice.png
- /data/data/####/icon_praise.png
- /data/data/####/icon_praiseStar.png
- /data/data/####/icon_selector_normal.png
- /data/data/####/icon_selector_press.png
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/jquery.min2.2.0.js
- /data/data/####/js.combine.min.js
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.10.6.0.so
- /data/data/####/libufix.so
- /data/data/####/loading.png
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/native_record_lock
- /data/data/####/news_detail.html
- /data/data/####/persistent_data.xml
- /data/data/####/persistent_data.xml.bak
- /data/data/####/play.png
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/reader.db
- /data/data/####/reader.db-journal
- /data/data/####/run.pid
- /data/data/####/sanjiaoxing.png
- /data/data/####/security_info
- /data/data/####/shareTimeline_3x.png
- /data/data/####/sina_3x.png
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/tdata_vxj811
- /data/data/####/tdata_vxj811.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/video.png
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wx_3x.png
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.founder.pingxiang.bin
- /data/media/####/com.founder.pingxiang.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/journal.tmp
- /data/media/####/localTemplate.zip
- /data/media/####/tdata_Soq141
- /data/media/####/tdata_vxj811
- /data/media/####/test.log
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 25131 300 0
- cat /sys/class/net/wlan0/address
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.10.6.0.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.vivo.os.build.display.id
- getprop ro.yunos.version
- logcat -d -v threadtime
- mount
- Bugly
- getuiext2
- libnfix
- libshella-2.10.6.0
- libufix
- nfix
- ufix
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding