Technical information
- Android.RemoteCode.907
- Android.Triada.248.origin
- Android.Triada.464.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) c####.hyhon####.cn:80
- TCP(HTTP/1.1) i####.api.qiazhiw####.cn:10003
- TCP(HTTP/1.1) 1####.55.93.104:9004
- TCP(HTTP/1.1) bf####.8p####.com:11039
- TCP(HTTP/1.1) sdk.api.qiazhiw####.cn:10201
- TCP(HTTP/1.1) wn.qiazhiw####.cn.####.net:80
- TCP(HTTP/1.1) dn.tc####.com:80
- TCP(HTTP/1.1) apc.wjm####.com:80
- TCP(HTTP/1.1) gdv.a.s####.com:80
- TCP(HTTP/1.1) 1####.78.31.198:8030
- TCP(HTTP/1.1) oc.u####.com:80
- TCP(HTTP/1.1) q####.a####.com:80
- TCP(HTTP/1.1) z####.heyc####.net:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ja####.huita####.com:10091
- TCP(HTTP/1.1) c####.jzp####.cn:80
- TCP(HTTP/1.1) nc####.6tf####.com:15032
- TCP(HTTP/1.1) fy.bigb####.com:6099
- TCP(HTTP/1.1) ji####.jieme####.com:8152
- TCP(HTTP/1.1) l####.bigb####.com:6099
- TCP(HTTP/1.1) v####.api.eeric####.com:80
- TCP(HTTP/1.1) sdk.api.qiazhiw####.cn:10001
- TCP(HTTP/1.1) ny.liz####.com:666
- TCP(TLS/1.0) if.jw####.cn:443
- a####.u####.com
- apc.wjm####.com
- api.ila####.com
- bf####.8p####.com
- c####.hyhon####.cn
- c####.jzp####.cn
- dn.tc####.com
- fy.bigb####.com
- hx.wjm####.com
- i####.api.qiazhiw####.cn
- i####.api.qiazhiw####.cn
- if.jw####.cn
- ja####.huita####.com
- jb####.qh####.com
- ji####.dl####.com
- ji####.jieme####.com
- l####.bigb####.com
- nc####.6tf####.com
- ny.liz####.com
- oc.u####.com
- pv.s####.com
- sdk.api.qiazhiw####.cn
- tm####.dae####.com
- v####.api.eeric####.com
- wn.qiazhiw####.cn
- z####.heyc####.net
- z56####.evh####.com
- c####.hyhon####.cn/OK/QWE002
- c####.hyhon####.cn/OK/QWE015
- c####.jzp####.cn/op/masrvot.zip
- dn.tc####.com/dnfile/wmp/WG3N20181029LD31020.jar
- gdv.a.s####.com/cityjson?ie=####
- q####.a####.com/jieplginf/djmdeta29
- wn.qiazhiw####.cn.####.net/update/up03169499
- a####.u####.com/app_logs
- apc.wjm####.com/core/user/initPay
- apc.wjm####.com/fetchMobileService/fetchMobile
- apc.wjm####.com/inte/upResult
- apc.wjm####.com/inte/upSdkCrashLog
- apc.wjm####.com/inte/upSmsCollection
- bf####.8p####.com:11039/fevqe
- bf####.8p####.com:11039/qysvz
- fy.bigb####.com:6099/aps/
- i####.api.qiazhiw####.cn:10003/v2/chis2
- ja####.huita####.com:10091/wisdom/marking
- ji####.jieme####.com:8152/ryf_webserver/payment/checkupdate.html
- l####.bigb####.com:6099/aps/
- nc####.6tf####.com:15032/down
- nc####.6tf####.com:15032/install
- nc####.6tf####.com:15032/quest
- nc####.6tf####.com:15032/run
- ny.liz####.com:666/slsdk/getdata.aspx
- ny.liz####.com:666/slsdk/settings.aspx
- oc.u####.com/v2/check_config_update
- oc.u####.com/v2/get_update_time
- sdk.api.qiazhiw####.cn:10001/v2/bag/monitor?app_id=####&t=####
- sdk.api.qiazhiw####.cn:10001/v2/sdk/init2?app_id=####&t=####
- sdk.api.qiazhiw####.cn:10001/v2/update/check?app_id=####&t=####
- sdk.api.qiazhiw####.cn:10201/v2/sdk/report2?app_id=####&t=####
- sdk.api.qiazhiw####.cn:10201/v2/sdk/report?app_id=####&t=####
- sdk.api.qiazhiw####.cn:10201/v3/sdk/report?appId=####&t=####
- v####.api.eeric####.com/api/payment/mobileInit.html
- v####.api.eeric####.com/api/payment/payDynamic.html
- z####.heyc####.net/getlist
- z####.heyc####.net/xlogin
- /data/data/####/.DEVICES
- /data/data/####/.imprint
- /data/data/####/1553478954558
- /data/data/####/1553478960197
- /data/data/####/1553478963128
- /data/data/####/1553478969482
- /data/data/####/1553478983703
- /data/data/####/1553478997616
- /data/data/####/1553479010482
- /data/data/####/38DD8B96194AE9A9E42BDA0DE378C3BC.xml
- /data/data/####/786ehZNXngxy86mP3rwDTA==.new
- /data/data/####/7KDmIsEsRE7syCNg7MG-bA==.new
- /data/data/####/8JzUP3CjHhWUQH2a_ZdJCHoZ5Pc=.new
- /data/data/####/BB329387E35EC64A285EDFFB32DC6E12.xml
- /data/data/####/BE64377A23A0130F6C5A82350310E31E.xml
- /data/data/####/DA71801AE4546BE0D909948137905ED9.xml
- /data/data/####/EF1F19F5DB18554471C7A30661B046BC.xml
- /data/data/####/Eo3gAsUza7W6AqDu-HeLvMClt_uZj-gl_69TQMpWsuFz7hwNi-journal
- /data/data/####/F29B5FE74986CD64B2DDAEDD2A58B7AA.xml
- /data/data/####/JiePay.xml
- /data/data/####/KgTJjFaFPSCPgkVoCFhpZGwEa-Y=.new
- /data/data/####/M2ed2sNFQTmJQf9DJwH-1g==
- /data/data/####/PiCdz2atW9ltKlpcxSkiAHxqs8o=.new
- /data/data/####/Sg-AvzuXzsjvMiOLkyCEqRJzRSQsxBfJ.new
- /data/data/####/V2iC7b4RAP6xYvQpvgJPww==
- /data/data/####/WYRAlZX3uJPWsYiG3J_Lm0wMoM8=.new
- /data/data/####/XinZF.xml
- /data/data/####/XinZF_conf.xml
- /data/data/####/XinZFsmspay.db
- /data/data/####/XinZFsmspay.db-journal
- /data/data/####/YR21h8HIhW2f25PVZnNfzpm1RpI=.new
- /data/data/####/action.db-journal
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cddxfvkn.jar
- /data/data/####/com.pzpt.ytyhgrhjf.com.one.sdk.c.amsg.db-journal
- /data/data/####/com.pzpt.ytyhgrhjf.com.sdk.a.a_mseg.db-journal
- /data/data/####/com.pzpt.ytyhgrhjf.xml
- /data/data/####/com.pzpt.ytyhgrhjf_preferences.xml
- /data/data/####/config50083.xml
- /data/data/####/config50083.xml.bak
- /data/data/####/dpi
- /data/data/####/engc.jar
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/g3xePB_GyUaWYLRS.new
- /data/data/####/game_res
- /data/data/####/game_res.zip
- /data/data/####/ge_mAgGD6EfFCF6kueskww==.new
- /data/data/####/gxuobg_f.zip
- /data/data/####/hid.db
- /data/data/####/ht_VpMbeX65848Ln.zip
- /data/data/####/jiepay_config.xml
- /data/data/####/jiepayplugin.apk
- /data/data/####/jiepayplugin.apkdata
- /data/data/####/jiepaysmspay.db
- /data/data/####/jiepaysmspay.db-journal
- /data/data/####/js_ad_bundle_data.xml
- /data/data/####/libbjhre.so
- /data/data/####/libbjhre.so-32
- /data/data/####/libbjhre.so-64
- /data/data/####/libzddin.so
- /data/data/####/libzddin.so-32
- /data/data/####/libzddin.so-64
- /data/data/####/libzddin.so-64 (deleted)
- /data/data/####/loccalCache.xml
- /data/data/####/new_md.jar
- /data/data/####/onePay.xml
- /data/data/####/onlineconfig_agent_online_setting_com.pzpt.ytyhgrhjf.xml
- /data/data/####/prdopt.xml
- /data/data/####/rdata_comuflwhzd.new
- /data/data/####/rnbnr.png
- /data/data/####/runner_info.prop.new
- /data/data/####/s4iE5v02pDKgNar1OQlNeA==.new
- /data/data/####/sbc0L0Y56mVvNtSW
- /data/data/####/shunpay_config
- /data/data/####/svygf.png
- /data/data/####/tdargs.xml
- /data/data/####/tmpbl.jar
- /data/data/####/tools8977.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/uid.f
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/up03169499
- /data/data/####/up03169499.jar
- /data/data/####/uwapgixu.jar
- /data/data/####/webview.db-journal
- /data/data/####/xZbSBlo6-JV5iaYDWWXc8tusZWY=.new
- /data/data/####/yd_config_c.xml
- /data/data/####/zdfc.jar
- /data/media/####/.bsgo
- /data/media/####/.nid
- /data/media/####/.uuid
- /data/media/####/.uunique.new
- /data/media/####/2BAAE4C6E55394898E6143512B2111D4.temp
- /data/media/####/2BAAE4C6E55394898E6143512B2111D4.zip
- /data/media/####/A4C02CF39CD95E518E9D827E7EE1A05E.temp
- /data/media/####/ACD6A93C1D94AC8B4260F22ECCEF912C.temp
- /data/media/####/C6179E2B50154E9F7AD9CEBA24BD35FF
- /data/media/####/log
- /data/media/####/msg
- /data/media/####/order
- /data/media/####/status
- /data/media/####/tag2.dat385a46b0-98a7-4aeb-9c25-48480c1e8157.tmp
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh
- cat /proc/version
- cat /sys/class/android_usb/android0/idProduct
- cat /sys/class/android_usb/android0/idVendor
- cat /sys/class/net/wlan0/address
- getprop
- getprop ro.board.platform
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.vivo.os.version
- getprop ro.yunos.version
- ls -l /dev
- ls -l /dev/block
- ls -l /dev/block/vold
- ls -l /dev/bus
- ls -l /dev/bus/usb
- ls -l /dev/bus/usb/001
- ls -l /dev/com.android.settings.daemon
- ls -l /dev/cpuctl
- ls -l /dev/cpuctl/apps
- ls -l /dev/cpuctl/apps/bg_non_interactive
- ls -l /dev/graphics
- ls -l /dev/input
- ls -l /dev/log
- ls -l /dev/pts
- ls -l /dev/snd
- ls -l /dev/socket
- ps
- cocos2dcpp
- core
- libbjhre
- libzddin
- n24b61
- shunpay
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES
- DES-CBC-PKCS5Padding
- RSA-None-PKCS1Padding
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES
- DES-CBC-PKCS5Padding
- RSA-None-PKCS1Padding