Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) padn-ac####.pi####.com.cn:80
- TCP(HTTP/1.1) pus####.pi####.com.cn:3000
- TCP(HTTP/1.1) s####.magicwi####.cn:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) free####.pi####.com:80
- TCP(HTTP/1.1) pad-app####.pi####.com.cn:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(HTTP/1.1) sh.wagbr####.aliyun####.com:80
- TCP(SSL/3.0) pad-app####.pi####.com.cn:443
- TCP(TLS/1.0) m####.pi####.com.cn:443
- TCP(TLS/1.0) x.aut####.ca####.com:443
- TCP(TLS/1.0) 1####.250.48.9:443
- TCP(TLS/1.0) w####.pi####.com.cn:443
- TCP(TLS/1.0) usedc####.ch####.com:443
- TCP(TLS/1.0) pama-####.pi####.com:443
- TCP(TLS/1.0) pawf-ac####.pi####.com.cn:443
- TCP(TLS/1.0) padn-ac####.pi####.com.cn:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) pama####.pi####.com.cn:443
- TCP(TLS/1.0) dn-maam####.q####.me:443
- TCP(TLS/1.0) pa####.pi####.com.cn:443
- TCP(TLS/1.0) m.ch####.com:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.0) sni.c####.q####.####.com:443
- TCP(TLS/1.0) pad-app####.pi####.com.cn:443
- TCP connec####.pus####.pi####.####.cn:6000
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- amap####.cn-hang####.oss####.####.com
- c####.g####.ig####.com
- c-h####.g####.com
- collect####.ch####.com
- connec####.pus####.pi####.####.cn
- dn-maam####.q####.me
- free####.pi####.com
- hm.b####.com
- m####.pi####.com.cn
- m.ch####.com
- odxuw####.q####.com
- pa####.pi####.com.cn
- pad-app####.pi####.com.cn
- padn-ac####.pi####.com.cn
- pama####.pi####.com.cn
- pama-####.pi####.com
- pawf-ac####.pi####.com.cn
- pus####.pi####.com.cn
- res####.a####.com
- s####.magicwi####.cn
- s.aut####.cn
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- u####.ch####.com
- usedc####.ch####.com
- w####.pi####.com.cn
- x.aut####.cn
- free####.pi####.com/pawf-core/rest/v5/checkNet?t=####
- sh.wagbr####.aliyun####.com/sdkcoor/android/x86/libJni_wgs2gcj.so
- sni.c####.q####.####.net/config/hz-hzv3.conf
- sni.c####.q####.####.net/tdata_YYn966
- sni.c####.q####.####.net/tdata_eOt091
- c-h####.g####.com/api.php?format=####&t=####
- pad-app####.pi####.com.cn/g/d?crc=####
- padn-ac####.pi####.com.cn/access.php?m=####&sdkv=####&os=####&source=###...
- pus####.pi####.com.cn:3000/api/dv/3c1e0985093cceca4f16f5f8da551f103/alia...
- pus####.pi####.com.cn:3000/api/dv/3c1e0985093cceca4f16f5f8da551f103/scre...
- pus####.pi####.com.cn:3000/api/dv/3c1e0985093cceca4f16f5f8da551f103/tag
- pus####.pi####.com.cn:3000/api/q/a/3c1e0985093cceca4f16f5f8da551f103
- pus####.pi####.com.cn:3000/api/statis/3c1e0985093cceca4f16f5f8da551f103
- pus####.pi####.com.cn:3000/api/statis/3c1e0985093cceca4f16f5f8da551f103/...
- s####.magicwi####.cn/config/v2
- s####.magicwi####.cn/dp/dpls/v2
- s####.magicwi####.cn/marketing/v2
- s####.magicwi####.cn/tracking/v2
- s####.magicwi####.cn/ts
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/.jg.ic
- /data/data/####/1d2b904cbeadfb72ed9546111a231c85.0
- /data/data/####/AD_OBJ_FILE
- /data/data/####/MultiDex.lock
- /data/data/####/RYMskyEye.lock
- /data/data/####/RYMtd.lock
- /data/data/####/SaveSsid.xml
- /data/data/####/SkyEyeRYM_app_pefercen_profile.xml
- /data/data/####/SkyEyeRYMpref_longtime.xml
- /data/data/####/SkyEyeRYMpref_shorttime.xml
- /data/data/####/SkyEyeRYMskyEye.db
- /data/data/####/SkyEyeRYMskyEye.db-journal
- /data/data/####/SkyEye_app_pefercen_profile.xml
- /data/data/####/SkyEyepref_longtime.xml
- /data/data/####/SkyEyepref_shorttime.xml
- /data/data/####/SkyEyeskyEye.db
- /data/data/####/SkyEyeskyEye.db-journal
- /data/data/####/TDRYM_app_pefercen_profile.xml
- /data/data/####/TDRYMpref_longtime.xml
- /data/data/####/TDRYMpref_longtime.xml.bak (deleted)
- /data/data/####/TDRYMpref_shorttime.xml
- /data/data/####/TDRYMtcagent.db
- /data/data/####/TDRYMtcagent.db-journal
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime.xml.bak (deleted)
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDtcagent.db
- /data/data/####/TDtcagent.db-journal
- /data/data/####/anyDoor_preference_push.xml
- /data/data/####/anyDoor_preferences.xml
- /data/data/####/anyDoor_preferences_loginingo.xml
- /data/data/####/anydoor.db
- /data/data/####/anydoor.db-journal
- /data/data/####/anydoor_msg-journal
- /data/data/####/baseWebListUrl.xml
- /data/data/####/com.networkbench.agent.impl.v2_com.pingan.pinganwifi.xml
- /data/data/####/com.pingan.pinganwifi_dna.xml
- /data/data/####/com.pingan.pinganwifi_preferences.xml
- /data/data/####/com.pingan.pinganwifi_prefs.xml
- /data/data/####/com.pingan.pinganwifi_prefs.xml.bak
- /data/data/####/com.pingan.pinganwifi_shumeng_id.xml
- /data/data/####/com_pingan_pinganwifi_action_database.db-journal
- /data/data/####/config-journal
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/file_pa_wifi_dtd
- /data/data/####/file_pa_wifi_gc
- /data/data/####/firstLaunch.xml
- /data/data/####/gdaemon_20161017
- /data/data/####/getui_sp.xml
- /data/data/####/gx_sp.xml
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/home_ad_guide.xml
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/journal
- /data/data/####/journal.tmp
- /data/data/####/libjiagu-214295926.so
- /data/data/####/loctemp.so
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/mpush.db-journal
- /data/data/####/mpush_gateway_preferences_file
- /data/data/####/mpush_process_preferences_file
- /data/data/####/mpush_version_preferences_file
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/pa_data_cache.db-journal
- /data/data/####/pa_manifest_cache.xml
- /data/data/####/pa_wifi_config.xml
- /data/data/####/paanydoor_resource_3.8.0.22.jar
- /data/data/####/paw_sdk_core.db-journal
- /data/data/####/paw_sdk_tree_oui.db-journal
- /data/data/####/persistent_data.xml
- /data/data/####/persistent_data.xml.bak
- /data/data/####/persistent_data.xml.bak (deleted)
- /data/data/####/pre_mw.xml
- /data/data/####/pre_third_app_config.xml
- /data/data/####/pref.xml
- /data/data/####/pref.xml.bak (deleted)
- /data/data/####/pref_pa_wifi_sdk.xml
- /data/data/####/pref_xlog.xml
- /data/data/####/push.pid
- /data/data/####/push_config.xml
- /data/data/####/pushext.db-journal
- /data/data/####/pushg.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/skyEye.lock
- /data/data/####/td.lock
- /data/data/####/tdata_YYn966
- /data/data/####/tdata_YYn966.jar
- /data/data/####/tdata_eOt091
- /data/data/####/tdata_eOt091.jar
- /data/data/####/tdid.xml
- /data/data/####/time.xml
- /data/data/####/vpnConfig.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/wifi_in.xml
- /data/media/####/.SkyEyeEventRequestId-875737526
- /data/media/####/._android.dat
- /data/media/####/._driver.dat
- /data/media/####/._system.dat
- /data/media/####/.aio.dat
- /data/media/####/.nomedia
- /data/media/####/.tcookieid
- /data/media/####/.version
- /data/media/####/0651dc55f6865c67bbe76b111ca9eb22.0
- /data/media/####/0651dc55f6865c67bbe76b111ca9eb22.0.tmp
- /data/media/####/1532832942629.db
- /data/media/####/16bb306d542555c0c8a5925c60d7d095.0
- /data/media/####/16bb306d542555c0c8a5925c60d7d095.0.tmp
- /data/media/####/1d03f1c0c4e91da5fe3861d18e3ecd4d.0
- /data/media/####/1fd0d5657cec859d7991e0773c286886.0
- /data/media/####/1fd0d5657cec859d7991e0773c286886.0.tmp
- /data/media/####/2063c9e82914654e2e5d39bb680c1012.0
- /data/media/####/2063c9e82914654e2e5d39bb680c1012.0.tmp
- /data/media/####/2253053e6c065ad44d459e3f21372b6e.0
- /data/media/####/2253053e6c065ad44d459e3f21372b6e.0.tmp
- /data/media/####/27bda652967b18be212dceec6bb3d53a.0
- /data/media/####/27bda652967b18be212dceec6bb3d53a.0.tmp
- /data/media/####/34fbb9981cfad7f473e632cc047e366c.0
- /data/media/####/34fbb9981cfad7f473e632cc047e366c.0.tmp
- /data/media/####/35b2eae133f3dc2b6f9215ba73d5ec53.0
- /data/media/####/35b2eae133f3dc2b6f9215ba73d5ec53.0.tmp
- /data/media/####/3dc69743fddb7cad9d136ebde83b0c15.0
- /data/media/####/3dc69743fddb7cad9d136ebde83b0c15.0.tmp
- /data/media/####/4039605cb5f64cf9e8a47f76293ed3c4.0
- /data/media/####/4039605cb5f64cf9e8a47f76293ed3c4.0.tmp
- /data/media/####/4cfd54eacdd7f267d9e315912d791ad3.0
- /data/media/####/4cfd54eacdd7f267d9e315912d791ad3.0.tmp
- /data/media/####/581054553ad5200951892ea7adb863c2.0
- /data/media/####/581054553ad5200951892ea7adb863c2.0.tmp
- /data/media/####/5b008eb9957263d30429f84526b62f3c.0
- /data/media/####/5b008eb9957263d30429f84526b62f3c.0.tmp
- /data/media/####/5f3c331e98ad95f755cbc829b33f6b91.0
- /data/media/####/5f3c331e98ad95f755cbc829b33f6b91.0.tmp
- /data/media/####/64bc709df75a99ef97bca70b8b95cc52.0
- /data/media/####/64bc709df75a99ef97bca70b8b95cc52.0.tmp
- /data/media/####/6854486526e2613c3183739c186bf667.0
- /data/media/####/6854486526e2613c3183739c186bf667.0.tmp
- /data/media/####/6dfca03050621e552b0dacea1cc2bd70.0
- /data/media/####/6dfca03050621e552b0dacea1cc2bd70.0.tmp
- /data/media/####/771c77bb08771bcfe8460c557e2c0762.0
- /data/media/####/771c77bb08771bcfe8460c557e2c0762.0.tmp
- /data/media/####/95c98f8218e8516427b298045050db6c.0
- /data/media/####/95c98f8218e8516427b298045050db6c.0.tmp
- /data/media/####/PAWiFi-APP.mmap2
- /data/media/####/PAWiFi-APP_20180729.xlog
- /data/media/####/_android.dat
- /data/media/####/_driver.dat
- /data/media/####/_system.dat
- /data/media/####/a9379ff817bab1591f0d8cb341a1cc12.0
- /data/media/####/a9379ff817bab1591f0d8cb341a1cc12.0.tmp
- /data/media/####/aio.dat
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/app.db
- /data/media/####/bd2bea66f7167dabcc828068eab288ff.0
- /data/media/####/bd2bea66f7167dabcc828068eab288ff.0.tmp
- /data/media/####/c4bc2baa6e046141d6f5537a0bf18525.0
- /data/media/####/c4bc2baa6e046141d6f5537a0bf18525.0.tmp
- /data/media/####/c638871827f1d90075cf3dd9bd78b26b.0
- /data/media/####/c638871827f1d90075cf3dd9bd78b26b.0.tmp
- /data/media/####/c770aa7943d6d7f394dff5cf72166013.0
- /data/media/####/c770aa7943d6d7f394dff5cf72166013.0.tmp
- /data/media/####/ca87548bc3dbda0c6120f11818edf336.0
- /data/media/####/ca87548bc3dbda0c6120f11818edf336.0.tmp
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.pingan.pinganwifi.bin
- /data/media/####/com.pingan.pinganwifi.db
- /data/media/####/d1d4fb40b6e0fc042e07f7e83d0f078f.0
- /data/media/####/d1d4fb40b6e0fc042e07f7e83d0f078f.0.tmp
- /data/media/####/d2a07009a25bb7780a6cfa88548ba42d.0
- /data/media/####/d2a07009a25bb7780a6cfa88548ba42d.0.tmp
- /data/media/####/e243c38f67856219747c75ec433acdb1.0
- /data/media/####/e243c38f67856219747c75ec433acdb1.0.tmp
- /data/media/####/e342428045a4b30d3652e32c95859507.0
- /data/media/####/e342428045a4b30d3652e32c95859507.0.tmp
- /data/media/####/e65849dbb0e369751225ce98eb1eb9b4.0
- /data/media/####/e65849dbb0e369751225ce98eb1eb9b4.0.tmp
- /data/media/####/e68fb68d1547b2f4e841afdb9ff5da75.0
- /data/media/####/e68fb68d1547b2f4e841afdb9ff5da75.0.tmp
- /data/media/####/journal.tmp
- /data/media/####/tdata_YYn966
- /data/media/####/tdata_eOt091
- /data/media/####/test.log
- <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 25116 300 0
- chmod 700 <Package Folder>/files/gdaemon_20161017
- chmod 755 <Package Folder>/.jiagu/libjiagu-214295926.so
- date
- df
- ls /system/fonts
- mkdir -p <SD-Card> .. .. .. .. .. .. sdcard Android Data System local/
- mkdir -p <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/
- ps
- service call iphonesubinfo 1
- sh -c cat /proc/meminfo
- sh -c cat /proc/sys/kernel/random/uuid
- sh -c cat /proc/uptime
- sh -c cat /sys/block/mmcblk0/device/cid
- sh -c cat /sys/class/net/eth0/address
- sh -c cat /sys/class/net/eth1/address
- sh -c cat /sys/class/net/eth2/address
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/..ccdid
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/..ccvid
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/._driver.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/._system.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/.acc.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/.aio.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/.ccdid
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/.ccvid
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_android.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_driver.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_system.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/acc.dat
- sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/aio.dat
- sh -c cd /proc/;cat cpuinfo
- sh -c cd /sys/class/net/eth0/ && cat address
- sh -c cd /sys/class/net/wlan0/ && cat address
- sh -c echo MEY4QTU4RkVEMDU2ODhCNkIwNkNDNzg1MjQ4REYxQzg4NEM1Qzg6MDc4QUI3OjBBQjE0MA== > <SD-Card>/../../../../../..<SD-Card>/._driver.dat
- sh -c echo MEY4QTU4RkVEMDU2ODhCNkIwNkNDNzg1MjQ4REYxQzg4NEM1Qzg6MDc4QUI3OjBBQjE0MA== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_driver.dat
- sh -c echo QjU4NUVFQTBCMEQ3MkI1Mzg5QjM5ODQ1MzQ1NUNFMDMzQzdBQjU6ODg2Qzc4OjI3RERDMw== > <SD-Card>/../../../../../..<SD-Card>/._system.dat
- sh -c echo QjU4NUVFQTBCMEQ3MkI1Mzg5QjM5ODQ1MzQ1NUNFMDMzQzdBQjU6ODg2Qzc4OjI3RERDMw== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_system.dat
- sh -c echo RDRBRUMwODE4QUE0Qzg2MThFMTM4RTlGRkQwNjA3ODUzQTY4Q0M6QkY4MTE3OjREMDVFQg== > <SD-Card>/../../../../../..<SD-Card>/._android.dat
- sh -c echo RDRBRUMwODE4QUE0Qzg2MThFMTM4RTlGRkQwNjA3ODUzQTY4Q0M6QkY4MTE3OjREMDVFQg== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_android.dat
- sh -c echo RjU3QzNERTBDMkIwMjIzODE1QTkzOTRDQzZCMTlGQTIxNTMyODMyOTQ4 > <SD-Card>/../../../../../..<SD-Card>/.aio.dat
- sh -c echo RjU3QzNERTBDMkIwMjIzODE1QTkzOTRDQzZCMTlGQTIxNTMyODMyOTQ4 > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/aio.dat
- sh <Package Folder>/files/gdaemon_20161017 0 <Package>/<Package>.push.GeTuiPushService 25116 300 0
- WiFiSecure
- du
- getuiext2
- hfenginelib
- libjiagu-214295926
- marsxlog
- nativemodulelib
- pl_droidsonroids_gif
- stlport_shared
- wifiin-jni
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RSA
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-NoPadding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- RSA-ECB-PKCS1Padding
- desede-CBC-PKCS5Padding