Technical information
- Android.DownLoader.589.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) h####.a####.com:80
- TCP(HTTP/1.1) kvt####.m####.a####.com:80
- TCP(HTTP/1.1) cdn.img.fly####.####.com:80
- TCP(HTTP/1.1) www.a####.com.####.com:80
- TCP(HTTP/1.1) au.y####.net:80
- TCP(HTTP/1.1) ip.ta####.com:80
- TCP(HTTP/1.1) nb4051-####.a####.com:80
- TCP(HTTP/1.1) qs.lago####.com:8982
- TCP(HTTP/1.1) sdk.st####.y####.com:80
- TCP(HTTP/1.1) g####.a####.com.####.com:80
- TCP(HTTP/1.1) aos.w####.y####.net:80
- TCP(HTTP/1.1) a####.a####.com:80
- TCP(HTTP/1.1) fs011-####.a####.com:80
- TCP(HTTP/1.1) s####.gw.y####.####.com:80
- TCP(HTTP/1.1) fu1.a####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) nb3200-####.a####.com:80
- TCP(HTTP/1.1) a####.m.ta####.com:80
- TCP(HTTP/1.1) nb3201-####.a####.com:80
- TCP(HTTP/1.1) t####.dmp.y####.net:80
- TCP(HTTP/1.1) nb4510-####.a####.com:80
- TCP(HTTP/1.1) app.w####.cn:80
- TCP(HTTP/1.1) c50.a####.com:80
- TCP(HTTP/1.1) s.y####.net:80
- TCP(TLS/1.0) c####.im.ta####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) w####.che####.top:443
- TCP(TLS/1.0) i####.ww.ta####.com:443
- TCP(TLS/1.0) st####.suiyue####.com.####.com:443
- UDP 2####.0.0.1:9998
- 8####.nd####.y####.com
- a####.a####.com
- a####.m.ta####.com
- a####.u####.com
- aos.w####.y####.net
- app.w####.cn
- au.y####.net
- c####.im.ta####.com
- c50.a####.com
- cdn.img.fly####.top
- cs227-####.a####.com
- fs011-####.a####.com
- fu1.a####.com
- g####.a####.com
- h####.a####.com
- h####.a####.com
- i####.ww.ta####.com
- ip.ta####.com
- j####.a####.com
- kvt####.m####.a####.com
- m####.a####.com
- m.a####.com
- nb3200-####.a####.com
- nb3201-####.a####.com
- nb4051-####.a####.com
- nb4510-####.a####.com
- policyc####.a####.com
- qs.lago####.com
- res.we####.cn
- res11-a####.we####.cn
- s####.gw.y####.net
- s.y####.net
- sdk.st####.y####.com
- so.a####.com
- st####.suiyue####.com
- t####.dmp.y####.net
- w####.che####.top
- www.a####.com
- www.go####.com
- x####.a####.com
- a####.a####.com/atiws/atiapp?category=####&platform=####&appver=####&gam...
- a####.a####.com/atiws/atiappcommon?platform=####&appver=####&gameid=####...
- aos.w####.y####.net/v3/zip_upd?s=####
- app.w####.cn/action/connect/active?app_id=####&udid=####&imsi=####&net=#...
- au.y####.net/offer/dist/aos/pkg/2.6.1/offers_2.6.1.zip
- c50.a####.com/user/919/65822919/1006/card/47662549/47662549_400.jpg
- cdn.img.fly####.####.com/upload/201711/29/img/20171129172413161.png
- cdn.img.fly####.####.com/upload/201803/15/img/20180315182111709.png
- cdn.img.fly####.####.com/upload/201803/7/img/20180307160715784.png
- cdn.img.fly####.####.com/upload/201803/7/img/20180307160926003.png
- fs011-####.a####.com/user/611/35647611/1006/card/47663558/47663558_400.jpg
- fu1.a####.com/account/15/9872015/account/9872015_normal.jpg
- g####.a####.com.####.com/aipai/page/pic/15215466492176875d9021521546649....
- g####.a####.com.####.com/aipai/page/pic/152154675082052802c241521546750....
- g####.a####.com.####.com/user/15/9872015/1006/card/47660949/card.mp4?l=#...
- h####.a####.com/user/100/3390100/1005/card/47660363/47660363_800.jpg
- h####.a####.com/user/15/9872015/1006/card/47660949/47660949_800.jpg
- h####.a####.com/user/15/9872015/1006/card/47660949/card.mp4?l=####
- h####.a####.com/user/15/9872015/1006/card/47660949/info.xml
- h####.a####.com/user/491/62987491/1006/card/47660426/47660426_800.jpg
- h####.a####.com/user/611/35647611/1006/card/47663558/47663558_400.jpg
- h####.a####.com/user/767/2606767/1006/card/47663047/47663047_400.jpg
- h####.a####.com/user/919/65822919/1006/card/47662549/47662549_400.jpg
- ip.ta####.com/service/getIpInfo2.php?ip=####
- kvt####.m####.a####.com/kvinfo.php
- nb3200-####.a####.com/user/919/65822919/1006/card/47662549/47662549_400....
- nb3201-####.a####.com/user/15/9872015/1006/card/47660949/47660949_800.jpg
- nb3201-####.a####.com/user/767/2606767/1006/card/47663047/47663047_400.jpg
- nb4051-####.a####.com/user/15/9872015/1006/card/47660949/info.xml
- nb4051-####.a####.com/user/491/62987491/1006/card/47660426/47660426_800....
- nb4510-####.a####.com/user/15/9872015/1006/card/47660949/card.mp4?l=####...
- qs.lago####.com:8982/loadtime.shtml?clientIp=&st=android<=10932&fip=18...
- qs.lago####.com:8982/loadtime.shtml?clientIp=180.97.171.121&st=android&l...
- qs.lago####.com:8982/notify.shtml?saddr=aipai-android551112&definition=4...
- qs.lago####.com:8982/notify.shtml?saddr=jhc-android551112&definition=480...
- s####.gw.y####.####.com/aos/v3/initf?s=####
- s####.gw.y####.####.com/stat/v3/udt2?appid=####&s=####
- s.y####.net/stat/aos/v3/pkc?s=####
- s.y####.net/stat/aos/v3/pku?s=####
- sdk.st####.y####.com/core/aos-dex/1701/7011/6f830529.jar
- sdk.st####.y####.com/core/aos-so/1611/7000/ad389c56.so
- www.a####.com.####.com/api/aipaiApp_action-getCommentNew_mobile-1_type-2...
- www.a####.com.####.com/api/framework/adConf/36?platform=####&appver=####...
- www.a####.com.####.com/api/framework/jifen/enter/36?platform=####&appver...
- www.a####.com.####.com/api/gonglue/list/1106?appId=####&platform=####&ap...
- www.a####.com.####.com/api/hot/bannerItem/679?platform=####&appver=####&...
- www.a####.com.####.com/api/hot/titleItem/680?platform=####&appver=####&o...
- www.a####.com.####.com/api/hot/videos/1106?appId=####&xifenId=####&platf...
- www.a####.com.####.com/api/jifen/firstInstallInit?platform=####&appver=#...
- www.a####.com.####.com/api/specialTopic/itemList/682?platform=####&appve...
- www.a####.com.####.com/app/www/templates/cdn_policy_telecom.txt?platform...
- www.a####.com.####.com/common/img/upload/xifen/1483088096_324.png
- www.a####.com.####.com/mobile/apps/apps.php?module=####&func=####&app=##...
- www.a####.com.####.com/mobile/apps/apps.php?module=####&func=####&os=###...
- www.a####.com.####.com/mobile/apps/apps.php?module=####&func=####&platfo...
- www.a####.com.####.com/mobile/apps/apps.php?module=####&func=####&test=#...
- www.a####.com.####.com/mobile/apps/apps_module-badDomain.html
- www.a####.com.####.com/pc/operator
- a####.m.ta####.com/rest/gc?dd=####&nsgs=####&ak=####&av=####&c=####&v=##...
- a####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=####&...
- a####.u####.com/app_logs
- app.w####.cn/action/user_info
- kvt####.m####.a####.com/i.gif
- t####.dmp.y####.net/v1/android/packages?rt=####&sign=####
- t####.dmp.y####.net/v2/android/pkgtime?rt=####&sign=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/07f1b1cc9c9caa2d1eb2a8a06433621abd1a5f0afb11e1c....0.tmp
- /data/data/####/1331bddd7e2db7c8ac43f792d7edff78.0.tmp
- /data/data/####/1331bddd7e2db7c8ac43f792d7edff78.1.tmp
- /data/data/####/2dfe5a9d69700925438a2a0a515bb99e.zip
- /data/data/####/3c2aaf218848dce44290822037a48e3ca47cd2d1f1da08d....0.tmp
- /data/data/####/3edc6ae652e5832e15e35da66eb8368662851de4852f714....0.tmp
- /data/data/####/48ae7dd52c818e562c5f1279d760875a.0.tmp
- /data/data/####/48ae7dd52c818e562c5f1279d760875a.1.tmp
- /data/data/####/4a8b906a352a3bb6ab74813ac45e90d7.0.tmp
- /data/data/####/4a8b906a352a3bb6ab74813ac45e90d7.1
- /data/data/####/506372f9661fd6bf53f506b1e832b52cc29da150dd886a7....0.tmp
- /data/data/####/61f77eca98c1615f2890f4983526a1a47e7d62191024ea9....0.tmp
- /data/data/####/72884f815505943b02a7e0c44baee9e6.0.tmp
- /data/data/####/72884f815505943b02a7e0c44baee9e6.1.tmp
- /data/data/####/770fbbd06ed6a8d9932ddc3246441cf7.0.tmp
- /data/data/####/770fbbd06ed6a8d9932ddc3246441cf7.1.tmp
- /data/data/####/8d7d3d1b5876a072adece95b2bc9a45b.0.tmp
- /data/data/####/8d7d3d1b5876a072adece95b2bc9a45b.1.tmp
- /data/data/####/95c022d02ca09799102b7e96af4640c0ceece0bfdb2b948....0.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/AppSettings.xml
- /data/data/####/C0XKJAO3JLZKJPDKJFXLINQCJIOAOD.xml
- /data/data/####/CE94557724F842149D690D0E8CBB1CBD.xml
- /data/data/####/CacheTime.dat
- /data/data/####/ContextData.xml
- /data/data/####/CookiePersistence.xml
- /data/data/####/OFFERSCONFIG1.xml
- /data/data/####/OxgHkj2lz09F
- /data/data/####/OxgHkj2lz09F-journal
- /data/data/####/P15pKIjsm64m
- /data/data/####/P15pKIjsm64m-journal
- /data/data/####/RptKVStrategy.txt
- /data/data/####/ShowAdFlag.xml
- /data/data/####/T1oX0rhhuXWt
- /data/data/####/T1oX0rhhuXWt-journal
- /data/data/####/UTCommon.xml
- /data/data/####/UTMCConf-1064849340.xml
- /data/data/####/UTMCLog-1064849340.xml
- /data/data/####/XKwVoK0huy3R
- /data/data/####/XKwVoK0huy3R-journal
- /data/data/####/a.xml
- /data/data/####/ad_system_config.xml
- /data/data/####/aipai.btconfig
- /data/data/####/aipai.db
- /data/data/####/aipai.db-journal
- /data/data/####/aipai.guid
- /data/data/####/al.jar
- /data/data/####/ar.xml
- /data/data/####/arrow-left.png
- /data/data/####/arrow-right.png
- /data/data/####/be10311eed4af408d3b8e7e5659af877f6096048a79db47....0.tmp
- /data/data/####/blank.gif
- /data/data/####/close-icon.png
- /data/data/####/com.guangrong.cn_preferences.xml
- /data/data/####/config.json
- /data/data/####/dd84c685502faea63f68f362c8c62244
- /data/data/####/dd84c685502faea63f68f362c8c62244-journal
- /data/data/####/default.png
- /data/data/####/detail-wx.html
- /data/data/####/detail-wx.js
- /data/data/####/detail.html
- /data/data/####/detail.js
- /data/data/####/dsi.xml
- /data/data/####/e0888850d29ef11a195e5b377efd4265.0.tmp
- /data/data/####/e0888850d29ef11a195e5b377efd4265.1.tmp
- /data/data/####/e4b56caad86d6da0f9c401fff25582e7d9319d7ba2f499e....0.tmp
- /data/data/####/e5cb765c4de9f81400ab144c401b1d85-journal
- /data/data/####/ea36ca79f58723af0926367390399d8f32ef4d845cb9bed....0.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/feedback.html
- /data/data/####/feedback.js
- /data/data/####/ff2ebe36912967dcb7e6dbfa246822d6
- /data/data/####/ff2ebe36912967dcb7e6dbfa246822d6-journal
- /data/data/####/form.css
- /data/data/####/global.js
- /data/data/####/isfirst.xml
- /data/data/####/journal.tmp
- /data/data/####/jqIqJYOT3JpT
- /data/data/####/jqIqJYOT3JpT-journal
- /data/data/####/libabcdefgh.so.new
- /data/data/####/libjiagu.so
- /data/data/####/lists.css
- /data/data/####/lists.html
- /data/data/####/lists.js
- /data/data/####/md5.js
- /data/data/####/multidex.version.xml
- /data/data/####/nr.jar
- /data/data/####/pic_m.png
- /data/data/####/pic_tips_01.png
- /data/data/####/pic_tips_02.png
- /data/data/####/result.png
- /data/data/####/rule.html
- /data/data/####/rx_sf_account.xml
- /data/data/####/rx_sf_app.xml
- /data/data/####/sdetail.html
- /data/data/####/share.css
- /data/data/####/share.html
- /data/data/####/share.js
- /data/data/####/sp.lock
- /data/data/####/sprite-face.png
- /data/data/####/sprite-icons.png
- /data/data/####/sprite-icons2.png
- /data/data/####/sv.xml (deleted)
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/wIU6pTyUBYWX
- /data/data/####/wIU6pTyUBYWX-journal
- /data/data/####/webview.db-journal
- /data/data/####/wsUL1uCdKvjD
- /data/data/####/wsUL1uCdKvjD-journal
- /data/data/####/wx-step1.jpg
- /data/data/####/wx-step2.jpg
- /data/data/####/wx-step3.jpg
- /data/data/####/wx-step4.jpg
- /data/data/####/wx-step5.jpg
- /data/data/####/x_h.db-journal
- /data/data/####/ymdex.jar
- /data/data/####/ymdex.jar.new
- /data/data/####/ywPrefsTools.xml
- /data/media/####/.nomedia
- /data/media/####/373240561418738c721572c1da14b85e
- /data/media/####/373240561418738c721572c1da14b85e.ymtf
- /data/media/####/52861e60fa854
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/82773f175803c
- /data/media/####/Alvin2.xml
- /data/media/####/AppPackage.dat
- /data/media/####/CacheTime.dat
- /data/media/####/ContextData.xml
- /data/media/####/DXTX902KJZX9JASLDJF
- /data/media/####/DXTX902KJZX9JASLDJF.ymtf
- /data/media/####/SOX90123JSOALK2098SD
- /data/media/####/SOX90123JSOALK2098SD.ymtf
- /data/media/####/UnPackage.dat
- /data/media/####/a1b663bc2b4ad
- /data/media/####/android
- /data/media/####/b.tmp
- /data/media/####/dd7893586a493dc3
- /data/media/####/e31d6ddd2f153
- /data/media/####/i42d45df023jnkdd93la483f9xGFKXI
- /data/media/####/s92TjjdfoP2n3o9dfji2l9s1olkjf0p
- /system/bin/cat /sys/devices/system/cpu/kernel_max
- cat /proc/cpuinfo | grep Serial
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- ls -l /system/xbin/su
- abcdefgh
- libjiagu
- securitysdk-3.1
- xifen
- AES
- AES-CBC-PKCS5Padding
- DES-CBC-PKCS5Padding
- PBEWITHMD5andDES
- DES
- DES-CBC-PKCS5Padding
- PBEWITHMD5andDES