Technical information
- Android.Spy.2442
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) adash####.man.aliy####.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) a####.exc.mob.com:80
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) m.d####.mob.com:80
- TCP(HTTP/1.1) 1####.254.116.117:80
- TCP(HTTP/1.1) img.xiaoxia####.com:80
- TCP(HTTP/1.1) l####.cc:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) d####.opensp####.cn:80
- TCP(HTTP/1.1) h####.opensp####.cn:80
- TCP(TLS/1.0) rr13---####.g####.com:443
- TCP(TLS/1.0) 64.2####.162.95:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) hotfix####.aliy####.com:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) api.xiaoxia####.com:443
- TCP(TLS/1.0) res####.a####.com:443
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.2) 64.2####.162.94:443
- TCP(TLS/1.2) 1####.194.222.101:443
- TCP(TLS/1.2) 74.1####.205.95:443
- TCP(TLS/1.2) www.google####.com:443
- TCP img.xiaoxia####.com:443
- UDP www.google####.com:443
- TCP cdn.xiaoxia####.com:443
- TCP api.xiaoxia####.com:443
- a####.exc.mob.com
- a####.man.aliy####.com
- a####.u####.com
- and####.b####.qq.com
- api.s####.mob.com
- api.xiaoxia####.com
- av1.x####.com
- c####.x####.com
- cdn.xiaoxia####.com
- d####.opensp####.cn
- h####.opensp####.cn
- hotfix####.aliy####.com
- i####.xiaoxia####.com
- i.t####.com
- img.xiaoxia####.com
- l####.cc
- m####.go####.com
- m.d####.mob.com
- pi####.qq.com
- res####.a####.com
- rr13---####.g####.com
- t####.qq.com
- www.google####.com
- c####.x####.com:443/sdk/conf?id=####&p=####&v=####&sv=####&cv=####
- h####.opensp####.cn/launchconfig?t=####&p=####
- hotfix####.aliy####.com:443/u/70441-1/ZD4trpNO3aEDAGdzx1H4fmRD/1.3.0/0/
- img.xiaoxia####.com/image/90x90_934249394552619008_fixed.png
- img.xiaoxia####.com/image/90x90_934249394745556992_fixed.png
- l####.cc/i/sdk/is_gal?sdk_version=####&imei=####&android_id=####&device_...
- m.d####.mob.com/v2/cconf?appkey=####&plat=####&apppkg=####&appver=####&n...
- a####.exc.mob.com/errconf
- a####.u####.com/app_logs
- adash####.man.aliy####.com/man/api?ak=####&s=####
- and####.b####.qq.com/rqd/async?aid=####
- api.s####.mob.com/conf5
- api.s####.mob.com/conn
- api.s####.mob.com/log4
- api.s####.mob.com/snsconf
- av1.x####.com:443/u/a/v1/60757628
- av1.x####.com:443/u/a/v1/77a11926
- av1.x####.com:443/u/a/v1/897d96a3
- av1.x####.com:443/u/a/v1/89846dfe
- d####.opensp####.cn/index.php/clientrequest/clientcollect/isCollect
- l####.cc/i/sdk/install
- res####.a####.com:443/v3/iasdkauth?key=####&ts=####&scode=####
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.lock
- /data/data/####/.lock (deleted)
- /data/data/####/.mrecord
- /data/data/####/.mrecord (deleted)
- /data/data/####/.mrlock
- /data/data/####/.statistics
- /data/data/####/.tpns.service.xml.xml
- /data/data/####/.tpns.settings.xml.xml
- /data/data/####/0837c743edef0a2cc037dcc845c128e7e1070c7c75f576c...feec.0
- /data/data/####/0bf2f82aab10b36245553093cc474d7619c69f95506e4cd...e82b.0
- /data/data/####/0eedab6c7600b5f28357701fdfd76ab3a7fb9ec08807f4e...9337.0
- /data/data/####/1004
- /data/data/####/1681796521318_3506
- /data/data/####/1681796521433_3506
- /data/data/####/1681796521512_3506
- /data/data/####/1681796525159_3629
- /data/data/####/1681796525307_3629
- /data/data/####/1681796525437_3629
- /data/data/####/1681796535091_3629
- /data/data/####/1681796535285_3629
- /data/data/####/1681796535505_3629
- /data/data/####/1681796537145_3629
- /data/data/####/1681796539285_3629
- /data/data/####/1681796539403_3629
- /data/data/####/1681796539814_3629
- /data/data/####/1681796539892_3629
- /data/data/####/1681796540320_3629
- /data/data/####/1681796540602_3629
- /data/data/####/1681796540733_3629
- /data/data/####/1681796541041_3629
- /data/data/####/1681796541438_3629
- /data/data/####/1681796583908_3629
- /data/data/####/1681796589256_3629
- /data/data/####/19cd44c7dcadf028e2e46de48bead5b8e0e9fc154640e86...9350.0
- /data/data/####/364fb703dd69e3a782df9aa6e456e6456056f0eb2961636...7551.0
- /data/data/####/3be330ce47fb4e5258f764c09dacf7ffad0035f828e42cc...bbee.0
- /data/data/####/3e6373063eb056f61dbbf0e6c73bda8689da2a2293865d5...7770.0
- /data/data/####/4ab2ca0770b5e5aa552933cb9e99c94d75decb19ac9be12....0.tmp
- /data/data/####/62438339d23f1aff7cff4f047f4491a61afb439384f6cd5...b9f2.0
- /data/data/####/68a3393f1ad799c42e2b6b9e0902cca3a325634f0d99fc1....0.tmp
- /data/data/####/68a3393f1ad799c42e2b6b9e0902cca3a325634f0d99fc1...97a6.0
- /data/data/####/6bdf1f71b6c7bf63fef21e54bb87337149ad6bea870aeee...3a6e.0
- /data/data/####/7343fa7ff48a9d1d5a79dab6c4f774aa8c6898e848e1581...bb21.0
- /data/data/####/89777b6f8da81a3635db3a2492b50a246a2fe20500907fa...218b.0
- /data/data/####/960113786d86a1eb9fd25908e279a1ddd6c790dafa23b50...b248.0
- /data/data/####/Alvin2.xml
- /data/data/####/ContextData.xml
- /data/data/####/LKME_Server_Request_Queue.xml
- /data/data/####/SP_AROUTER_CACHE.xml
- /data/data/####/TDCloudSettingsConfigD6061AAE5168653277DAEB311FDCE49D.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/TalingDataConfigD6061AAE5168653277DAEB311FDCE49D.xml
- /data/data/####/ThrowalbeLog.db-journal
- /data/data/####/a28e490a0aa0d3961e62dbebbd068b38233db990933e664...4538.0
- /data/data/####/a7bf49a0761b0daca9b1d6387afc80431853b5b7dc48e19...c58a.0
- /data/data/####/b5c37094951d5af0f657b021739b452349d8d91d5fc5224...f291.0
- /data/data/####/bsd.xml
- /data/data/####/bsd.xml.bak
- /data/data/####/bugly_db_-journal
- /data/data/####/c3f6e9b39f008d69e5fe3a9013566c8a801849510aeeee8...9995.0
- /data/data/####/cacd711183718fd8576ec1419448f1a7362feac91ca322e...8f70.0
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/classes.dex
- /data/data/####/classes.oat
- /data/data/####/classes2.dex
- /data/data/####/classes3.dex
- /data/data/####/com.basestonedata.xxfq_preferences.xml
- /data/data/####/com.iflytek.id.xml
- /data/data/####/com.iflytek.msc.xml
- /data/data/####/crashrecord.xml
- /data/data/####/da0326f86ae7de197efb195219d04ebb73b7bd5a8558244...ce92.0
- /data/data/####/dc3636d60d568f524a365c1cac285113fb348628e174b55...f54d.0
- /data/data/####/device_id.xml
- /data/data/####/ec31828fed61578b50c0f0e4baa733404802b2721856420...acfc.0
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fcfb56d2246a75c125030469da3af2aad2ae4e32b4c75a8....0.tmp
- /data/data/####/fcfb56d2246a75c125030469da3af2aad2ae4e32b4c75a8...44b0.0
- /data/data/####/hmdb
- /data/data/####/hmdb-journal
- /data/data/####/ifly_launch_lib.xml
- /data/data/####/ifly_launch_lib.xml.bak
- /data/data/####/ifly_launch_lib.xml.bak (deleted)
- /data/data/####/iflytek_state_com.basestonedata.xxfq.xml
- /data/data/####/journal
- /data/data/####/libjiagu.so
- /data/data/####/linkedme_referral_shared_pref.xml
- /data/data/####/linkedme_referral_shared_pref.xml.bak
- /data/data/####/local_crash_lock
- /data/data/####/logdb.db
- /data/data/####/logdb.db-journal
- /data/data/####/messages.xml
- /data/data/####/messages.xml.bak
- /data/data/####/mob_commons_1.xml
- /data/data/####/mob_sdk_exception_1.xml
- /data/data/####/mob_sdk_exception_1.xml.bak (deleted)
- /data/data/####/native_record_lock
- /data/data/####/proc_auxv
- /data/data/####/security_info
- /data/data/####/share_sdk_1.xml
- /data/data/####/sharesdk.db-journal
- /data/data/####/sp_sophix.xml
- /data/data/####/tdid.xml
- /data/data/####/topics.xml
- /data/data/####/topics.xml.bak
- /data/data/####/tpush.shareprefs.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/media/####/.dic_lock
- /data/media/####/.duid
- /data/media/####/.globalLock
- /data/media/####/.lm_device_id
- /data/media/####/.pkg_lock
- /data/media/####/.rc_lock
- /data/media/####/.tcookieid
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/alsn.db
- /data/media/####/alsn.db-journal
- /data/media/####/iflyworkdir_test (deleted)
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- /system/lib/arm/houdini <Package Folder>/lib/libxguardian.so <Package Folder>/lib/libxguardian.so <Package>,2100207932; 55570 119.45.78.184 [{ idx :0, ts :%d, et :2000, si :0, ui : <IMEI> , ky : Axg%lu , mid : 0 , mc : 02:00:00:00:00:00 , ev :{ ov : 25 , sr : 461*561 , md : <System Property> , lg : en , sv : 3.0 , mf : <System Property> , apn : %s }}] 0 25
- <Package Folder>/lib/libxguardian.so <Package>,2100207932; 55570 119.45.78.184 [{"idx":0,"ts":%d,"et":2000,"si":0,"ui":"<IMEI>","ky":"Axg%lu","mid":"0","mc":"02:00:00:00:00:00","ev":{"ov":"25","sr":"461*561","md":"<System Property>","lg":"en","sv":"3.0","mf":"<System Property>","apn":"%s"}}] 0 25
- <Package Folder>/lib/libxguardian.so <Package>,2100207932; 55570 119.45.78.184 [{\ :0,\ :%d,\ :2000,\ :0,\ :\ ,\ :\ ,\ :\ ,\ :\ ,\ :{\ :\ ,\ :\ ,\ :\ ,\ :\ ,\ :\ ,\ :\ ,\ :\ }}] 0 25
- cat /sys/class/net/eth0/address
- cat /sys/class/net/wlan0/address
- chmod 755 /data/user/0/<Package>/.jiagu/libjiagu.so
- getprop
- libBugly
- libjiagu
- libmsc
- libtpnsSecurity
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding