Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) dzc####.a####.tv:80
- TCP(HTTP/1.1) njdx####.d####.tv.####.com:80
- TCP(HTTP/1.1) appac####.d####.tv:5000
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) f####.a####.tv.####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8011
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) aexcep####.b####.qq.com:8012
- TCP(HTTP/1.1) zj####.d####.tv.####.com:80
- TCP(HTTP/1.1) f####.a####.tv.####.com:8081
- TCP(HTTP/1.1) cgi.con####.qq.com:80
- TCP(TLS/1.0) s####.his####.hic####.com:443
- TCP(TLS/1.0) api.w####.com:443
- TCP(TLS/1.0) ap####.dban####.com:443
- TCP(TLS/1.0) dxp.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) dsa-s####.his####.hic####.####.net:443
- TCP c####.g####.ig####.com:5224
- TCP sdk.o####.t####.####.com:5224
- 7j####.c####.z0.####.com
- a####.b####.qq.com
- aexcep####.b####.qq.com
- and####.b####.qq.com
- ap####.dban####.com
- ap####.his####.hic####.com
- api.w####.com
- appac####.d####.tv
- c####.g####.ig####.com
- c-h####.g####.com
- cgi.con####.qq.com
- dxp.b####.com
- dzc####.a####.tv
- f####.a####.tv
- f####.a####.tv
- h####.b####.com
- njdx####.d####.tv
- s####.his####.hic####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- zj####.d####.tv
- cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
- dzc####.a####.tv/5.3.0/css/iconfont.css
- dzc####.a####.tv/5.3.0/css/index/indexRecommend.css
- dzc####.a####.tv/5.3.0/css/mescroll/mescroll-option.css
- dzc####.a####.tv/5.3.0/css/mescroll/mescroll.min.css
- dzc####.a####.tv/5.3.0/css/public.css
- dzc####.a####.tv/5.3.0/css/swiper/swiper.min.css
- dzc####.a####.tv/5.3.0/fonts/iconfont.ttf?t=####
- dzc####.a####.tv/5.3.0/html/index/index_ColumnList.html?c_type=####
- dzc####.a####.tv/5.3.0/images/ClipboardImage.gif
- dzc####.a####.tv/5.3.0/images/banner_v3.jpg
- dzc####.a####.tv/5.3.0/images/lloading.gif
- dzc####.a####.tv/5.3.0/js/fastclick.js
- dzc####.a####.tv/5.3.0/js/iconfont.js
- dzc####.a####.tv/5.3.0/js/jquery.base64.js
- dzc####.a####.tv/5.3.0/js/jquery.md5.js
- dzc####.a####.tv/5.3.0/js/jquery.min.js
- dzc####.a####.tv/5.3.0/js/mescroll/mescroll-option.js
- dzc####.a####.tv/5.3.0/js/mescroll/mescroll.min.js
- dzc####.a####.tv/5.3.0/js/public.js
- dzc####.a####.tv/5.3.0/template/index/style.IndexColumnList.js
- dzc####.a####.tv/5.3.0/template/index/tpl.IndexColumnList.js
- dzc####.a####.tv/5.3.0/template/pub.ColLabel.js
- f####.a####.tv.####.com/20171026/ef3b0615fb1a4a920747f5839f2246a2.jpg
- f####.a####.tv.####.com/2018/03/30/3fec6a76c4c0232a3d354e47cc500eec.png
- f####.a####.tv.####.com/2018/05/08/41767b4047b01a46fda368666a413f02.png
- f####.a####.tv.####.com/2018/05/08/4232d77fa4aceb80a9a30615c4dbbd62.jpg
- f####.a####.tv.####.com/2018/05/08/a8bdc8d3fc6fac871d0990b0644570c5.png
- f####.a####.tv.####.com/2018/12/05/6790358fd77d8e6787a62ca910a4ae18.jpg
- f####.a####.tv.####.com/2018/12/11/9cd58c0c7eed06f486e13f2c1cd45884.jpg
- f####.a####.tv.####.com/2018/12/21/14e713ab9b9598840cdfa196c114c394.jpg?...
- f####.a####.tv.####.com/2019/01/10/673882708cb7f30da97495e1f6195e31.jpg
- f####.a####.tv.####.com/2019/01/18/083950d444558e66d10d92300ccfb806.png
- f####.a####.tv.####.com/2019/01/18/0f9a96111cf9bbf986f4b448d1ea1c54.png
- f####.a####.tv.####.com/2019/01/18/21dd599ea18cdadc2ef127e59fc9c39f.png
- f####.a####.tv.####.com/2019/01/18/27d68fdc8a67742e29cb55791ab326be.png
- f####.a####.tv.####.com/2019/01/18/2a2bc86379d86ccf449f6b81583eb336.png
- f####.a####.tv.####.com/2019/01/18/30ed87cab83bdb5f446163ddbff1a423.jpg
- f####.a####.tv.####.com/2019/01/18/5fc8c85c5672c37f9bf160f51336a13a.png
- f####.a####.tv.####.com/2019/01/18/67b8f72d95a11e3bd49c90d757206a15.png
- f####.a####.tv.####.com/2019/01/18/6da1b25ed98c8bdde074fcef72aa14a6.png
- f####.a####.tv.####.com/2019/01/18/8818ac3b922a43d043b814b5c98cb133.png
- f####.a####.tv.####.com/2019/01/18/8a5718e51f01e691fb9bd0c494ca12cd.png
- f####.a####.tv.####.com/2019/01/18/a7df2165cbfd826f997a382dba45ca46.png
- f####.a####.tv.####.com/2019/01/18/b8a9f9d5ce2cb9f451602703b13510f7.png
- f####.a####.tv.####.com/2019/01/18/c0e5d8c8722027df03b9bbd186c55e37.jpg
- f####.a####.tv.####.com/2019/01/18/c914b73de94df304309cdc9c634968b3.png
- f####.a####.tv.####.com/2019/01/18/ce5e7fddea5614336dbe40381eec5998.png
- f####.a####.tv.####.com/2019/01/18/d15a6c4c2c3adfc16ee1d264ead7c562.png
- f####.a####.tv.####.com/2019/01/18/d49232d400995350c8bfc63352f0944c.png
- f####.a####.tv.####.com/2019/01/18/e75479a14a920741aeeecde594bdf40b.png
- f####.a####.tv.####.com/2019/01/18/edf63ea83512b20db812bc7792ba25cd.png
- f####.a####.tv.####.com:8081/useravatar255886/20150923/useravatar255886_...
- njdx####.d####.tv.####.com/aniuapi/api/v2/ad/getadvertisement?id=####&de...
- njdx####.d####.tv.####.com/aniuapi/api/v2/menumanager/gethasmenu?platfor...
- t####.c####.q####.####.com/config/hz-hzv3.conf
- t####.c####.q####.####.com/tdata_bca864
- t####.c####.q####.####.com/tdata_ynp969
- zj####.d####.tv.####.com/aniuapi/api/v2/transcript/query?channelid=####&...
- aexcep####.b####.qq.com:8011/rqd/async
- aexcep####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- appac####.d####.tv:5000/api/useractionmany
- c-h####.g####.com/api.php?format=####&t=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/38e47de8d85eaf0744886899896247d6.0.tmp
- /data/data/####/38e47de8d85eaf0744886899896247d6.1.tmp
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/DeviceSessionUpdateSDK_V1.xml
- /data/data/####/MultiDex.lock
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml.bak
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1547791962341
- /data/data/####/baidu_mtj_sdk_record.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.huawei.hms.update.DOWNLOAD_RECORDcom.huawei.hwid.xml
- /data/data/####/com.huawei.hwid-1.apk.classes-222104523.zip
- /data/data/####/com.tencent.open.config.json.101081844
- /data/data/####/content.db
- /data/data/####/content.db-journal
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dzcj.xml
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hianalytics_global_v2_tv.aniu.app.dzlc.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/libufix.so
- /data/data/####/local_crash_lock
- /data/data/####/mix.dex
- /data/data/####/mtj_autoTracker.js
- /data/data/####/multidex.version.xml
- /data/data/####/native_record_lock
- /data/data/####/preload_ad
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/rqd_record.eup
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/tdata_bca864
- /data/data/####/tdata_bca864.jar
- /data/data/####/tdata_ynp969
- /data/data/####/tdata_ynp969.jar
- /data/data/####/tj.db-journal
- /data/data/####/tomb.zip
- /data/data/####/tomb.zip (deleted)
- /data/data/####/tomb_1547791955430.txt
- /data/data/####/trace_circle.data
- /data/data/####/tv.aniu.app.dzlc.BETA_VALUES.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/weibo_sdk_aid1
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.timestamp
- /data/media/####/app.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.huawei.hwid.apk
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/tdata_bca864
- /data/media/####/tdata_ynp969
- /data/media/####/test.log
- /data/media/####/tv.aniu.app.dzlc.bin
- /data/media/####/tv.aniu.app.dzlc.db
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.common.push.PushService 24551 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.display.id
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.smartisan.version
- getprop ro.vivo.os.build.display.id
- getprop ro.vivo.os.version
- getprop ro.yunos.version
- logcat -d -v threadtime
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.common.push.PushService 24551 300 0
- Bugly
- crash_analysis
- getuiext3
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- ufix
- weibosdkcore
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-ECB-PKCS5Padding
- AES-GCM-NoPadding