Technical information
- 106912114000372329: u3#5IyAXCZBixMRlpRa0HAPNQ==
- Android.Backdoor.613.origin
- Android.Mixi.16.origin
- Android.Mixi.33.origin
- Android.Triada.236.origin
- Android.Triada.244
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) v####.a####.eeric####.com:80
- TCP(HTTP/1.1) www.goo####.software:80
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) v3.ut####.cn:80
- TCP(HTTP/1.1) i####.api.zhifa####.net:10003
- TCP(HTTP/1.1) sdk.api.zhifa####.net:10201
- TCP(HTTP/1.1) 1####.29.183.230:9613
- TCP(HTTP/1.1) 1####.76.26.88:80
- TCP(HTTP/1.1) hc.z####.today:8082
- TCP(HTTP/1.1) dev.pu####.com:80
- TCP(HTTP/1.1) 1####.75.56.106:10201
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) nm.a####.com:80
- TCP(HTTP/1.1) 386.disp####.spcd####.com:80
- TCP(HTTP/1.1) p1.i####.cc:80
- TCP(HTTP/1.1) hc.s####.top.####.com:80
- TCP(HTTP/1.1) 1####.129.132.111:8001
- TCP(HTTP/1.1) re####.api.zhifa####.net:10001
- TCP(HTTP/1.1) ji####.jieme####.com:8152
- TCP(HTTP/1.1) sdk.qipa####.cn:8088
- TCP(HTTP/1.1) v####.api.eeric####.com:80
- TCP(HTTP/1.1) re####.api.zhifa####.net:10002
- TCP(TLS/1.0) av1.x####.com:443
- a####.u####.com
- av1.x####.com
- dev.pu####.com
- dsp.san####.com
- hc.s####.top
- hc.z####.today
- i####.api.zhifa####.net
- i####.api.zhifa####.net
- i.t####.com
- ji####.dl####.com
- ji####.jieme####.com
- p1.i####.cc
- pv.s####.com
- re####.api.zhifa####.net
- sdk.api.zhifa####.net
- sdk.qipa####.cn
- v####.a####.eeric####.com
- v####.api.eeric####.com
- v3.ut####.cn
- www.goo####.software
- www.san####.com
- 386.disp####.spcd####.com/ap/898edet8.dat
- gd.a.s####.com/cityjson?ie=####
- hc.s####.top.####.com/gpfile/pfiles/gofile/des_V17041702Aj1so32.zip
- hc.s####.top.####.com/gpfile/pfiles/gofile/goplaysdk_statistics_all.dat
- nm.a####.com/jieplg/jzfdat
- v####.a####.eeric####.com/fileupload/df55fb9c608c71fe.jar
- www.goo####.software/cr/sv/getGoFile?name=####
- www.goo####.software/cr/sv/getRecord?eids=####&appKey=####&flag=####
- a####.u####.com/app_logs
- dev.pu####.com/mvc/network/get_info.do
- hc.z####.today:8082/spdumread/service/rtLogRecord
- i####.api.zhifa####.net:10003/v2/chis
- ji####.jieme####.com:8152/ryf_webserver/payment/checkupdate.html
- p1.i####.cc/index.php/MC/HB
- re####.api.zhifa####.net:10001/v2/bag/monitor?app_id=####&t=####
- re####.api.zhifa####.net:10001/v2/update/check?app_id=####&t=####
- re####.api.zhifa####.net:10002/v2/sdk/init?app_id=####&t=####
- sdk.api.zhifa####.net:10201/v2/sdk/order?app_id=####&t=####
- sdk.api.zhifa####.net:10201/v2/sdk/report?app_id=####&t=####
- sdk.qipa####.cn:8088/a.do
- v####.api.eeric####.com/api/payment/mobileInit.html
- v####.api.eeric####.com/api/payment/updateinit_v2
- v3.ut####.cn/utopay/api/sdk/init.pay
- www.goo####.software/cr/sv/getEPList
- /data/anr/traces.txt
- <Package Folder>/app_Wyzf_plg/5.0.9.jar
- <Package Folder>/app_ass/ass.zip
- <Package Folder>/app_ass/lib.zip
- <Package Folder>/app_dex/utopay.jar
- <Package Folder>/app_e_qq_com_plugin/gct_plugin.jar
- <Package Folder>/app_e_qq_com_plugin/gct_plugin.jar.sig
- <Package Folder>/app_lbb/libcrypt_sign.so
- <Package Folder>/app_lbb/libdexinterpret.so
- <Package Folder>/app_lbb/libva-native.so
- <Package Folder>/app_mdex/abc.zip
- <Package Folder>/app_mdex/classes.dex
- <Package Folder>/app_mdex/classes10.dex
- <Package Folder>/app_wyzf_plg/wyzf_plg_5.2.2.jar
- <Package Folder>/daemon.t.tmp
- <Package Folder>/databases/347781996620052-journal
- <Package Folder>/databases/cc.db
- <Package Folder>/databases/cc.db-journal
- <Package Folder>/databases/utopay.db
- <Package Folder>/databases/utopay.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/files/####/1510835479531_2083
- <Package Folder>/files/####/1510835479558_2083
- <Package Folder>/files/####/1510835479632_2083
- <Package Folder>/files/####/1510835488205_2083
- <Package Folder>/files/####/1510835496969_2269
- <Package Folder>/files/####/1510835499481_2269
- <Package Folder>/files/####/1510835499825_2269
- <Package Folder>/files/####/1510835518033_2436
- <Package Folder>/files/####/1510835519427_2436
- <Package Folder>/files/####/1510835519766_2436
- <Package Folder>/files/####/5jn2<System Property>46
- <Package Folder>/files/####/<Package>12<System Property>2
- <Package Folder>/files/####/btmp
- <Package Folder>/files/####/exchangeIdentity.json
- <Package Folder>/files/####/onib_clz.jar
- <Package Folder>/files/####/tk
- <Package Folder>/files/####/tmd
- <Package Folder>/files/####/tv.jar
- <Package Folder>/files/####/tver
- <Package Folder>/files/.imprint
- <Package Folder>/files/1510835482083_V17041702Aj1so32.so
- <Package Folder>/files/1510835496877_V17041702Aj1so32.so
- <Package Folder>/files/1510835517927_V17041702Aj1so32.so
- <Package Folder>/files/<System Property>112.jar
- <Package Folder>/files/Plugin2.apk
- <Package Folder>/files/hftJcw46N.jar
- <Package Folder>/files/jiepayplugin.apk
- <Package Folder>/files/jiepayplugin.apkdata
- <Package Folder>/files/log.dat
- <Package Folder>/files/md.tmp
- <Package Folder>/files/new_md.jar
- <Package Folder>/files/umeng_it.cache
- <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s
- <Package Folder>/files/yf.apk
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/LANJIE_Utils.xml
- <Package Folder>/shared_prefs/SP_REPLACE_CLASSLOADER_CLASS_NAME.xml
- <Package Folder>/shared_prefs/TD_app_pefercen_profile.xml
- <Package Folder>/shared_prefs/TDpref_longtime.xml
- <Package Folder>/shared_prefs/TDpref_longtime0.xml
- <Package Folder>/shared_prefs/TDpref_shorttime.xml
- <Package Folder>/shared_prefs/TDpref_shorttime0.xml
- <Package Folder>/shared_prefs/abc.xml
- <Package Folder>/shared_prefs/com.ee.a.xml
- <Package Folder>/shared_prefs/config50092.xml
- <Package Folder>/shared_prefs/g2755020j2D6i6p9b9r118p7v77463.xml
- <Package Folder>/shared_prefs/g2755020j2D6i6p9b9r118p7v77463.xml.bak
- <Package Folder>/shared_prefs/ino.xml
- <Package Folder>/shared_prefs/jiepay_config.xml
- <Package Folder>/shared_prefs/mm.xml
- <Package Folder>/shared_prefs/pref.xml
- <Package Folder>/shared_prefs/sp_name_config20647207.xml
- <Package Folder>/shared_prefs/sp_name_configcom.wyzfpay.plugin.d.g.xml
- <Package Folder>/shared_prefs/tdid.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
- <Package Folder>/shared_prefs/wyzf_config20511462.xml
- <Package Folder>/shared_prefs/wyzf_config20647207.xml
- <Package Folder>/shared_prefs/wyzf_config20647207.xml.bak
- <SD-Card>/.tcookieid
- <SD-Card>/Android/####/pkg.tmp
- <SD-Card>/Android/####/uu.dat
- <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2083
- <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2269
- <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2436
- <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s -h c97ca27086ed8644646abc9d4506b786 <Package Folder>/.syslib-
- chmod 0771 <Package Folder>/.syslib-
- chmod 777 <Package Folder>/daemon
- getenforce
- getprop
- rm -f <Package Folder>/files/hftJcw46N.dex
- rm -f <Package Folder>/files/hftJcw46N.jar
- rm -f <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s
- rm <Package Folder>/files/hftJcw46N.dex
- rm <Package Folder>/files/hftJcw46N.jar
- rm <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s
- service list
- sh -c /system/usr/toolbox rm -f <Package Folder>/files/hftJcw46N.dex > /dev/null 2>&1
- sh -c /system/usr/toolbox rm -f <Package Folder>/files/hftJcw46N.jar > /dev/null 2>&1
- sh -c /system/usr/toolbox rm -f <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s > /dev/null 2>&1
- sh -c rm <Package Folder>/files/hftJcw46N.dex > /dev/null 2>&1
- sh -c rm <Package Folder>/files/hftJcw46N.jar > /dev/null 2>&1
- sh -c rm <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s > /dev/null 2>&1
- sh -c rm -f <Package Folder>/files/hftJcw46N.dex > /dev/null 2>&1
- sh -c rm -f <Package Folder>/files/hftJcw46N.jar > /dev/null 2>&1
- sh -c rm -f <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s > /dev/null 2>&1
- sh <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2083
- sh <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2269
- sh <Package Folder>/daemon -p <Package>/daemon -r am startservice --user 0 -n <Package>/com.amb.uk.main.DmService -e key daemon -i 2436
- sh <Package Folder>/files/us.908GhK3z1XIE6J7u3B4nRKlfEI88s -h c97ca27086ed8644646abc9d4506b786 <Package Folder>/.syslib-
- 1510835482083_V17041702Aj1so32
- 1510835496877_V17041702Aj1so32
- 1510835517927_V17041702Aj1so32
- com_he_jn