Technical information
- 1065800830195349: 100#GxXMLD
- 10658999: DH410224
- Android.SmsSpy.677.origin
- Android.SmsSpy.677.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) iekf####.gcj####.cn:80
- TCP(HTTP/1.1) 1####.55.16.91:8080
- TCP(HTTP/1.1) q####.qi1####.com:14302
- TCP(HTTP/1.1) 1####.55.17.147:8080
- TCP(HTTP/1.1) sdk.qi1####.com:80
- TCP(HTTP/1.1) q####.qi1####.com:15302
- TCP(HTTP/1.1) zxc####.wann####.com:8200
- TCP(HTTP/1.1) z####.wann####.com:9500
- TCP(HTTP/1.1) p####.nj####.com.####.com:8080
- TCP(HTTP/1.1) 1####.124.104.179:8080
- TCP(HTTP/1.1) qyc####.qi1####.com:8200
- TCP(HTTP/1.1) hangzho####.oss-cn-####.aliy####.com:80
- TCP(HTTP/1.1) z####.wann####.com:9600
- a####.u####.com
- hangzho####.oss-cn-####.aliy####.com
- iekf####.gcj####.cn
- p####.nj####.com
- q####.qi1####.com
- qyc####.qi1####.com
- sdk.qi1####.com
- z####.wann####.com
- zxc####.wann####.com
- hangzho####.oss-cn-####.aliy####.com/qiyi/client/sdk/so/libzxvps.so
- iekf####.gcj####.cn/all/40063-C01
- p####.nj####.com.####.com:8080/png/ic_jyyy.png
- p####.nj####.com.####.com:8080/res/novel/app/content/1.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/10.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/11.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/12.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/13.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/14.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/15.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/16.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/2.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/3.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/4.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/5.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/6.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/7.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/8.txt
- p####.nj####.com.####.com:8080/res/novel/app/content/9.txt
- p####.nj####.com.####.com:8080/res/novel/app/icon/1.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/2.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/3.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/4.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/5.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/6.jpg
- p####.nj####.com.####.com:8080/res/novel/app/icon/7.jpg
- p####.nj####.com.####.com:8080/sdk/dp_1.6.2.jar
- p####.nj####.com.####.com:8080/sdk/spaycoredex_so_2020.jar
- qyc####.qi1####.com:8200/sdk/file?a4KAcqK####
- qyc####.qi1####.com:8200/sdk/file?xkqhF5M####
- sdk.qi1####.com/qiyi/client/sdk/PaySDK-1.2.16.8-UR_yx.jar
- a####.u####.com/app_logs
- q####.qi1####.com:14302/sdk_login?t=####
- q####.qi1####.com:15302/sdk_login?t=####
- z####.wann####.com:9500/
- z####.wann####.com:9600/
- zxc####.wann####.com:8200/qy/acceptSdkFileReq
- zxc####.wann####.com:8200/qy/getOnlineLoginHttpReq
- <Package Folder>/PaySDK-1.2.16.8-UR_yx.jar
- <Package Folder>/app_payload_odex/<Package>.jar
- <Package Folder>/app_payload_res/####/._logo_img_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_0_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_0_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_0_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_0_3.jpg
- <Package Folder>/app_payload_res/####/._mm_show_1_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_1_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_1_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_1_3.jpg
- <Package Folder>/app_payload_res/####/._mm_show_2_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_2_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_2_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_2_3.jpg
- <Package Folder>/app_payload_res/####/._mm_show_3_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_3_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_3_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_4_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_4_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_4_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_5_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_5_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_5_2.jpg
- <Package Folder>/app_payload_res/####/._mm_show_6_0.jpg
- <Package Folder>/app_payload_res/####/._mm_show_6_1.jpg
- <Package Folder>/app_payload_res/####/._mm_show_6_2.jpg
- <Package Folder>/app_payload_res/####/._pg_1.png
- <Package Folder>/app_payload_res/####/._pg_2.png
- <Package Folder>/app_payload_res/####/._pg_3.png
- <Package Folder>/app_payload_res/####/._pic_bg.png
- <Package Folder>/app_payload_res/####/._pic_mm_0.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_1.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_2.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_3.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_4.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_5.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_6.jpg
- <Package Folder>/app_payload_res/####/._pic_mm_7.jpg
- <Package Folder>/app_payload_res/####/._price1.jpg
- <Package Folder>/app_payload_res/####/._price3.png
- <Package Folder>/app_payload_res/logo_img_0.jpg
- <Package Folder>/app_payload_res/maan.so
- <Package Folder>/app_payload_res/mm_show_0_0.jpg
- <Package Folder>/app_payload_res/mm_show_0_1.jpg
- <Package Folder>/app_payload_res/mm_show_0_2.jpg
- <Package Folder>/app_payload_res/mm_show_0_3.jpg
- <Package Folder>/app_payload_res/mm_show_1_0.jpg
- <Package Folder>/app_payload_res/mm_show_1_1.jpg
- <Package Folder>/app_payload_res/mm_show_1_2.jpg
- <Package Folder>/app_payload_res/mm_show_1_3.jpg
- <Package Folder>/app_payload_res/mm_show_2_0.jpg
- <Package Folder>/app_payload_res/mm_show_2_1.jpg
- <Package Folder>/app_payload_res/mm_show_2_2.jpg
- <Package Folder>/app_payload_res/mm_show_2_3.jpg
- <Package Folder>/app_payload_res/mm_show_3_0.jpg
- <Package Folder>/app_payload_res/mm_show_3_1.jpg
- <Package Folder>/app_payload_res/mm_show_3_2.jpg
- <Package Folder>/app_payload_res/mm_show_4_0.jpg
- <Package Folder>/app_payload_res/mm_show_4_1.jpg
- <Package Folder>/app_payload_res/mm_show_4_2.jpg
- <Package Folder>/app_payload_res/mm_show_5_0.jpg
- <Package Folder>/app_payload_res/mm_show_5_1.jpg
- <Package Folder>/app_payload_res/mm_show_5_2.jpg
- <Package Folder>/app_payload_res/mm_show_6_0.jpg
- <Package Folder>/app_payload_res/mm_show_6_1.jpg
- <Package Folder>/app_payload_res/mm_show_6_2.jpg
- <Package Folder>/app_payload_res/pg_1.png
- <Package Folder>/app_payload_res/pg_2.png
- <Package Folder>/app_payload_res/pg_3.png
- <Package Folder>/app_payload_res/pic_bg.png
- <Package Folder>/app_payload_res/pic_mm_0.jpg
- <Package Folder>/app_payload_res/pic_mm_1.jpg
- <Package Folder>/app_payload_res/pic_mm_2.jpg
- <Package Folder>/app_payload_res/pic_mm_3.jpg
- <Package Folder>/app_payload_res/pic_mm_4.jpg
- <Package Folder>/app_payload_res/pic_mm_5.jpg
- <Package Folder>/app_payload_res/pic_mm_6.jpg
- <Package Folder>/app_payload_res/pic_mm_7.jpg
- <Package Folder>/app_payload_res/price1.jpg
- <Package Folder>/app_payload_res/price3.png
- <Package Folder>/app_payload_res/story_btn_read.png
- <Package Folder>/app_payload_res/tab1_0.png
- <Package Folder>/app_payload_res/tab1_1.png
- <Package Folder>/app_payload_res/tab2_0.png
- <Package Folder>/app_payload_res/tab2_1.png
- <Package Folder>/app_process_lock/1122146421353.94
- <Package Folder>/app_process_lock/1122146421353.94 (deleted)
- <Package Folder>/app_process_lock/1122146421421.47
- <Package Folder>/app_process_lock/1122146421421.47 (deleted)
- <Package Folder>/app_process_lock/1122146421430.22
- <Package Folder>/app_process_lock/1122146421430.22 (deleted)
- <Package Folder>/app_process_lock/1122146421451.33
- <Package Folder>/app_process_lock/1122146421451.33 (deleted)
- <Package Folder>/app_process_lock/1122146421661.08
- <Package Folder>/app_process_lock/1122146421661.08 (deleted)
- <Package Folder>/app_process_lock/1122146421827.14
- <Package Folder>/app_process_lock/1122146421827.14 (deleted)
- <Package Folder>/app_process_lock/1122146421975.84
- <Package Folder>/app_process_lock/1122146421975.84 (deleted)
- <Package Folder>/app_process_lock/1122146421975.98
- <Package Folder>/app_process_lock/1122146421975.98 (deleted)
- <Package Folder>/app_process_lock/1122146422036.85
- <Package Folder>/app_process_lock/1122146422036.85 (deleted)
- <Package Folder>/app_process_lock/1122146422256.02
- <Package Folder>/app_process_lock/1122146422256.02 (deleted)
- <Package Folder>/app_process_lock/1122146422316.47
- <Package Folder>/app_process_lock/1122146422316.47 (deleted)
- <Package Folder>/app_process_lock/1132.30089999093
- <Package Folder>/app_process_lock/1132.30089999093 (deleted)
- <Package Folder>/app_process_lock/1132.34542065845
- <Package Folder>/app_process_lock/1132.34542065845 (deleted)
- <Package Folder>/app_process_lock/1132.38994132597
- <Package Folder>/app_process_lock/1132.38994132597 (deleted)
- <Package Folder>/app_process_lock/1132.43446199348
- <Package Folder>/app_process_lock/1132.43446199348 (deleted)
- <Package Folder>/app_process_lock/1132.478982661
- <Package Folder>/app_process_lock/1132.478982661 (deleted)
- <Package Folder>/app_process_lock/1132.52350332852
- <Package Folder>/app_process_lock/1132.52350332852 (deleted)
- <Package Folder>/app_process_lock/1132.56802399603
- <Package Folder>/app_process_lock/1132.56802399603 (deleted)
- <Package Folder>/app_process_lock/161.918512514603
- <Package Folder>/app_process_lock/161.918512514603 (deleted)
- <Package Folder>/app_process_lock/2325841308118.98
- <Package Folder>/app_process_lock/2325841308118.98 (deleted)
- <Package Folder>/app_process_lock/2325841309003.96
- <Package Folder>/app_process_lock/2325841309003.96 (deleted)
- <Package Folder>/app_process_lock/2325841309485.46
- <Package Folder>/app_process_lock/2325841309485.46 (deleted)
- <Package Folder>/app_process_lock/2325841310004.07
- <Package Folder>/app_process_lock/2325841310004.07 (deleted)
- <Package Folder>/app_process_lock/2325841310180.22
- <Package Folder>/app_process_lock/2325841310180.22 (deleted)
- <Package Folder>/app_process_lock/2325841310610.44
- <Package Folder>/app_process_lock/2325841310610.44 (deleted)
- <Package Folder>/app_process_lock/2325841314730.14
- <Package Folder>/app_process_lock/2325841314730.14 (deleted)
- <Package Folder>/app_process_lock/261209168443.192
- <Package Folder>/app_process_lock/261209168443.192 (deleted)
- <Package Folder>/app_process_lock/261209168542.581
- <Package Folder>/app_process_lock/261209168542.581 (deleted)
- <Package Folder>/app_process_lock/261209168596.657
- <Package Folder>/app_process_lock/261209168596.657 (deleted)
- <Package Folder>/app_process_lock/261209168654.901
- <Package Folder>/app_process_lock/261209168654.901 (deleted)
- <Package Folder>/app_process_lock/261209168674.684
- <Package Folder>/app_process_lock/261209168674.684 (deleted)
- <Package Folder>/app_process_lock/261209168723.001
- <Package Folder>/app_process_lock/261209168723.001 (deleted)
- <Package Folder>/app_process_lock/261209169185.674
- <Package Folder>/app_process_lock/261209169185.674 (deleted)
- <Package Folder>/app_process_lock/2965447692147.24
- <Package Folder>/app_process_lock/2965447692147.24 (deleted)
- <Package Folder>/app_process_lock/2965447692325.71
- <Package Folder>/app_process_lock/2965447692325.71 (deleted)
- <Package Folder>/app_process_lock/2965447692348.84
- <Package Folder>/app_process_lock/2965447692348.84 (deleted)
- <Package Folder>/app_process_lock/2965447692404.61
- <Package Folder>/app_process_lock/2965447692404.61 (deleted)
- <Package Folder>/app_process_lock/2965447692958.91
- <Package Folder>/app_process_lock/2965447692958.91 (deleted)
- <Package Folder>/app_process_lock/2965447693397.75
- <Package Folder>/app_process_lock/2965447693397.75 (deleted)
- <Package Folder>/app_process_lock/2965447693790.72
- <Package Folder>/app_process_lock/2965447693790.72 (deleted)
- <Package Folder>/app_process_lock/2965447693791.07
- <Package Folder>/app_process_lock/2965447693791.07 (deleted)
- <Package Folder>/app_process_lock/2965447693951.94
- <Package Folder>/app_process_lock/2965447693951.94 (deleted)
- <Package Folder>/app_process_lock/2965447694531.13
- <Package Folder>/app_process_lock/2965447694531.13 (deleted)
- <Package Folder>/app_process_lock/2965447694690.88
- <Package Folder>/app_process_lock/2965447694690.88 (deleted)
- <Package Folder>/app_process_lock/3660380.04099951
- <Package Folder>/app_process_lock/3660380.04099951 (deleted)
- <Package Folder>/app_process_lock/3660380.34145408
- <Package Folder>/app_process_lock/3660380.34145408 (deleted)
- <Package Folder>/app_process_lock/690286143581.21
- <Package Folder>/app_process_lock/690286143581.21 (deleted)
- <Package Folder>/app_process_lock/690286143843.861
- <Package Folder>/app_process_lock/690286143843.861 (deleted)
- <Package Folder>/app_process_lock/690286143986.765
- <Package Folder>/app_process_lock/690286143986.765 (deleted)
- <Package Folder>/app_process_lock/690286144140.684
- <Package Folder>/app_process_lock/690286144140.684 (deleted)
- <Package Folder>/app_process_lock/690286144192.964
- <Package Folder>/app_process_lock/690286144192.964 (deleted)
- <Package Folder>/app_process_lock/690286144320.649
- <Package Folder>/app_process_lock/690286144320.649 (deleted)
- <Package Folder>/app_process_lock/690286145543.335
- <Package Folder>/app_process_lock/690286145543.335 (deleted)
- <Package Folder>/app_process_lock/889.37042982576
- <Package Folder>/app_process_lock/889.37042982576 (deleted)
- <Package Folder>/app_process_lock/889.414950493276
- <Package Folder>/app_process_lock/889.414950493276 (deleted)
- <Package Folder>/app_process_lock/889.459471160793
- <Package Folder>/app_process_lock/889.459471160793 (deleted)
- <Package Folder>/app_process_lock/889.503991828309
- <Package Folder>/app_process_lock/889.503991828309 (deleted)
- <Package Folder>/app_process_lock/889.548512495826
- <Package Folder>/app_process_lock/889.548512495826 (deleted)
- <Package Folder>/app_process_lock/889.593033163343
- <Package Folder>/app_process_lock/889.593033163343 (deleted)
- <Package Folder>/app_process_lock/889.637553830859
- <Package Folder>/app_process_lock/889.637553830859 (deleted)
- <Package Folder>/app_process_lock/889.682074498376
- <Package Folder>/app_process_lock/889.682074498376 (deleted)
- <Package Folder>/app_process_lock/889.726595165892
- <Package Folder>/app_process_lock/889.726595165892 (deleted)
- <Package Folder>/databases/a.db
- <Package Folder>/databases/a.db-journal
- <Package Folder>/databases/cc.db
- <Package Folder>/databases/cc.db-journal
- <Package Folder>/databases/qy_db_pay
- <Package Folder>/databases/qy_db_pay-journal
- <Package Folder>/databases/ua.db
- <Package Folder>/databases/ua.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/xUtils_http_cache.db
- <Package Folder>/databases/xUtils_http_cache.db-journal
- <Package Folder>/databases/xUtils_http_cache.db-shm
- <Package Folder>/databases/xUtils_http_cache.db-shm (deleted)
- <Package Folder>/databases/xUtils_http_cache.db-wal
- <Package Folder>/databases/xUtils_http_cookie.db
- <Package Folder>/databases/xUtils_http_cookie.db-journal
- <Package Folder>/databases/xUtils_http_cookie.db-shm
- <Package Folder>/databases/xUtils_http_cookie.db-shm (deleted)
- <Package Folder>/databases/xUtils_http_cookie.db-wal
- <Package Folder>/files/####/exchangeIdentity.json
- <Package Folder>/files/.imprint
- <Package Folder>/files/exid.dat
- <Package Folder>/files/getprop
- <Package Folder>/files/pid
- <Package Folder>/files/umeng_it.cache
- <Package Folder>/libzxvps/####/tmp_so
- <Package Folder>/shared_prefs/umeng_general_config.xml
- <Package Folder>/shared_prefs/unknown.xml
- <Package Folder>/tmp_jar
- <SD-Card>/.Systemp/.cfg
- <SD-Card>/.Systemp/device
- <SD-Card>/Android/####/031f04ef44c86d37888b9206208ab7ff
- <SD-Card>/Android/####/110b6dcd7a403d3581b21c2d9d50f95c
- <SD-Card>/Android/####/1bac544a00a61d3f555d07dc007f6bfd
- <SD-Card>/Android/####/2e223112f2117e1691077462a4834d4b
- <SD-Card>/Android/####/300f50dfb16e035d7ba2ebd4753b36b8
- <SD-Card>/Android/####/4161d82cef464bb563bb8f7ebb34a74c
- <SD-Card>/Android/####/4e624c64a78974ab3f36cceaf01f4fb4
- <SD-Card>/Android/####/5cab9cf2e1e7675fe692b5106add9d26
- <SD-Card>/Android/####/614b01e4628d6b78f36743a3105948fe
- <SD-Card>/Android/####/641396e85bf54468fe7cee3296fab1be
- <SD-Card>/Android/####/7b330454405029ab1e970613a080f7ba
- <SD-Card>/Android/####/897f47697ee1e6f740a2bff65a9d1b9e
- <SD-Card>/Android/####/8acf08558ad9a62966ddb70b9a7b29a0
- <SD-Card>/Android/####/928c092482b26812142666513b7e50ed
- <SD-Card>/Android/####/a150ed67376ef226fb1040051c8a85ae
- <SD-Card>/Android/####/a3f9b1717d0c63e184a41a6aed3da16c
- <SD-Card>/Android/####/c833db11faa2b52990a616e792c8f1ef
- <SD-Card>/Android/####/fc1c327ecde2516d8c9f74f2f571fbb0
- <SD-Card>/Android/1.txt.tmp
- <SD-Card>/Android/10.txt.tmp
- <SD-Card>/Android/11.txt.tmp
- <SD-Card>/Android/12.txt.tmp
- <SD-Card>/Android/13.txt.tmp
- <SD-Card>/Android/14.txt.tmp
- <SD-Card>/Android/15.txt.tmp
- <SD-Card>/Android/16.txt.tmp
- <SD-Card>/Android/2.txt.tmp
- <SD-Card>/Android/3.txt.tmp
- <SD-Card>/Android/4.txt.tmp
- <SD-Card>/Android/5.txt.tmp
- <SD-Card>/Android/6.txt.tmp
- <SD-Card>/Android/7.txt.tmp
- <SD-Card>/Android/8.txt.tmp
- <SD-Card>/Android/9.txt.tmp
- <SD-Card>/Android/com.molove.mobile.sjwwx.png.tmp
- <SD-Card>/dp.jar.tmp
- <SD-Card>/updateApkDemo/FrameCore.jar
- app_process /system/bin com.android.commands.am.Am startservice --user 0 -n <Package>/com.google.android.gms.analytics.CampaignTrackingService
- cat /sys/block/mmcblk0/device/cid
- chmod 777 <Package Folder>/lib/helper
- dd if=<Package Folder>/lib/libhelper.so of=<Package Folder>/lib/helper
- df
- getprop
- ls -l /system/bin/su
- ps | grep <Package>
- sh
- libhelper
- libsmsmanager
- libzxvps
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- DES-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS7Padding
- DES-ECB-NoPadding