Technical information
- Android.DownLoader.363.origin
- Android.DownLoader.691.origin
- Android.RemoteCode.4145
- Android.Triada.248.origin
- Android.Triada.440.origin
- Android.Triada.464.origin
- Android.Xiny.240.origin
- Android.RemoteCode.4145
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) l.ace####.com:80
- TCP(HTTP/1.1) api.ia####.com:651
- TCP(HTTP/1.1) a####.b####.qq.com:8011
- TCP(HTTP/1.1) dn.tc####.com:80
- TCP(HTTP/1.1) gdv.a.s####.com:80
- TCP(HTTP/1.1) a####.b####.qq.com:8012
- TCP(HTTP/1.1) 1####.78.31.198:8030
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) t####.top:899
- TCP(HTTP/1.1) q####.a####.com:80
- TCP(HTTP/1.1) z####.heyc####.net:80
- TCP(HTTP/1.1) pa.angs####.com:8003
- TCP(HTTP/1.1) w####.pcon####.com.cn:80
- TCP(HTTP/1.1) e.angs####.com:6284
- TCP(HTTP/1.1) s.ace####.com:80
- TCP(HTTP/1.1) fy.bigb####.com:6099
- TCP(HTTP/1.1) ji####.jieme####.com:8152
- TCP(HTTP/1.1) api.qiazhiw####.cn:8888
- TCP(HTTP/1.1) ny.liz####.com:666
- TCP(HTTP/1.1) a####.on####.club:80
- TCP(HTTP/1.1) dn.gogo####.top:80
- TCP(HTTP/1.1) d.angs####.com:5284
- TCP(HTTP/1.1) yuey####.ld####.com:80
- TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) if.jw####.cn:443
- a####.b####.qq.com
- a####.on####.club
- a.bjsd####.com
- aexcep####.b####.qq.com
- aliyuno####.oss-cn-####.aliy####.com
- and####.b####.qq.com
- api.16####.com
- api.ia####.com
- api.qiazhiw####.cn
- d####.top
- d.angs####.com
- dn.gogo####.top
- dn.tc####.com
- e.angs####.com
- fy.bigb####.com
- if.jw####.cn
- ji####.dl####.com
- ji####.jieme####.com
- l####.bigb####.cn
- l.ace####.com
- mt####.go####.com
- ny.liz####.com
- pa.angs####.com
- plb####.u####.com
- pv.s####.com
- s.ace####.com
- t####.top
- u####.u####.com
- w####.pcon####.com.cn
- yuey####.ld####.com
- z####.heyc####.net
- z5.c####.com
- a####.on####.club/fileupload/b102eb6f0aff7e3a.jar
- dn.gogo####.top/dnfile/image/bxm/wg_021_11.jar
- dn.tc####.com/dnfile/wmp/4ed27496-4a85-4ec3-8a61-20620a008778.jar
- q####.a####.com/jieplginf/djmdeta29
- s.ace####.com/ando-res/m/jN9oNr*cHSjNoWXUfGIcLd5PkjSh2JnXM2fqRdP3mWXr-Xd...
- s.ace####.com/dnfile/wmp/4ed27496-4a85-4ec3-8a61-20620a008778.jar
- a####.b####.qq.com:8011/rqd/async
- a####.b####.qq.com:8012/rqd/async
- and####.b####.qq.com/rqd/async
- and####.b####.qq.com/rqd/async?aid=####
- api.ia####.com:651/slsdk/getdata.aspx
- api.ia####.com:651/slsdk/settings.aspx
- api.qiazhiw####.cn:8888/v2/api/report?app_id=####&imei=####&imsi=####&ha...
- d.angs####.com:5284/android.frontserver/pcsvc?r=####
- e.angs####.com:6284/android.frontserver/pcsvc?r=####
- fy.bigb####.com:6099/aps/
- gdv.a.s####.com/cityjson
- ji####.jieme####.com:8152/ryf_webserver/payment/checkupdate.html
- l.ace####.com/ando/x/liv?app_id=####&r=####
- ny.liz####.com:666/api_yi.aspx
- ny.liz####.com:666/slsdk/getdata.aspx
- ny.liz####.com:666/slsdk/settings.aspx
- pa.angs####.com:8003/pps
- t####.top:899/d19291d/8d397f
- t####.top:899/df60/2f1aa2a
- w####.pcon####.com.cn/ip.jsp
- yuey####.ld####.com/channel/paymentHandle.action?requestId=####&v=####
- z####.heyc####.net/getlist
- z####.heyc####.net/xlogin
- /data/data/####/.imprint
- /data/data/####/.jar
- /data/data/####/0x6-t1qdLtQUlnayuL7RtmCqEc0lJSS8.new
- /data/data/####/1004
- /data/data/####/1B3A2967E5FD862EFD957606C65C8122
- /data/data/####/2887A00B589C85A5FF5607D7EB45E7C8
- /data/data/####/30592A6B8B0C769E3F7FDE6E1A033DF5
- /data/data/####/AnnudTckrgAoMY021IX0xG61b-I=.new
- /data/data/####/D99494BB10D048C393648C204AF8AA38
- /data/data/####/Eua2zx1pdFbvyMjA.zip
- /data/data/####/F85C58A2196623557E8A00D8A4680702
- /data/data/####/GqFt0hKVi0cqcd5WUS_aflchekE=
- /data/data/####/JiePay.xml
- /data/data/####/JodJTm1E0yRyJyJM
- /data/data/####/JodJTm1E0yRyJyJM.temp
- /data/data/####/KRTd2fUSW7gaI9L1k0eGFw==
- /data/data/####/KRTd2fUSW7gaI9L1k0eGFw==.new
- /data/data/####/L7hGCUIfUUKPaujUCv3F4xtYTAv3cc7i.new
- /data/data/####/P03k_9OapGjv2Sq8YcGqwA==.new
- /data/data/####/RcKZQcmvkZg-IWRiat_7oQ==.new
- /data/data/####/UVQfd5wkR1m3qyKMjTuDhsEh4uU=.new
- /data/data/####/UlQj7Hz22qnaJEQWGHXMUw==
- /data/data/####/UqO9YGzb_Flv4DHrM15vaNn0gJk=.new
- /data/data/####/XinZF.xml
- /data/data/####/XinZF_conf.xml
- /data/data/####/_xsDfhSe-JNlnYUN1UApsKDqHhQloueM.new
- /data/data/####/a==7.5.3&&1.8_1554896818136_envelope.log
- /data/data/####/a_tmp
- /data/data/####/anlangaoyuanlan
- /data/data/####/bugly_db_-journal
- /data/data/####/bugly_db_legu-journal
- /data/data/####/com.gaoyuanlan.gaoyuanlan.com.one.support.c.aOn...ournal
- /data/data/####/com_android_command_nn_v.xml
- /data/data/####/config.xml
- /data/data/####/cqxcZsOwCkbTMwKHg6608C6hfVr4hWvU_S1-RIsXqVnJJzEGE-journal
- /data/data/####/cqxcZsOwCkbTMwKHg6608C6hfVr4hWvU_d7IOcNwP7ql1_U5--journal
- /data/data/####/cqxcZsOwCkbTMwKHg6608C6hfVr4hWvU_ehaem5bj9Kpq7P...ournal
- /data/data/####/cqxcZsOwCkbTMwKHg6608C6hfVr4hWvU_ehaem5bj9Kpq7PhHUfCYJA==
- /data/data/####/crashrecord.xml
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODE3NTk2;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODI1NDA0;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODMzMjgy;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODQwMTI3;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODU0MDUx;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODU4Njkw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODY0MzAw;
- /data/data/####/dW1weF9pbnRlcm5hbF8xNTU0ODk2ODY5OTY5;
- /data/data/####/dpi
- /data/data/####/engc.jar
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fgzde.data-journal
- /data/data/####/fplay_arthc
- /data/data/####/gkipuw_f.zip
- /data/data/####/h0tJ2Hbuz7SoHQGy0d_LpIz78a8=.new
- /data/data/####/h9cXiDPwI8SF4g6F.new
- /data/data/####/hid.db
- /data/data/####/i==1.2.0&&1.8_1554896819147_envelope.log
- /data/data/####/i==1.2.0&&1.8_1554896825520_envelope.log
- /data/data/####/i==1.2.0&&1.8_1554896833381_envelope.log
- /data/data/####/i==1.2.0&&1.8_1554896840314_envelope.log
- /data/data/####/i==1.2.0&&1.8_1554896854085_envelope.log
- /data/data/####/info.xml
- /data/data/####/jiepay_config.xml
- /data/data/####/jiepayplugin.apk
- /data/data/####/jiepayplugin.apkdata
- /data/data/####/jiepaysmspay.db
- /data/data/####/jiepaysmspay.db-journal
- /data/data/####/kb_idle.ini
- /data/data/####/kv_cf.ini
- /data/data/####/libnfix.so
- /data/data/####/libshella-2.9.0.2.so
- /data/data/####/local_crash_lock
- /data/data/####/lzzhe.xml
- /data/data/####/lzzhe.xml.bak (deleted)
- /data/data/####/mix.dex
- /data/data/####/myEdLIzbI9fgGAqAv2umUx1qSEI=.new
- /data/data/####/mykernel.apk
- /data/data/####/native_record_lock
- /data/data/####/nn.jaru
- /data/data/####/nn_app.xml
- /data/data/####/one.dex
- /data/data/####/one.dex (deleted)
- /data/data/####/onePayV3.xml
- /data/data/####/onePay_SP.xml
- /data/data/####/prdopt.xml
- /data/data/####/pretw.xml
- /data/data/####/qlbQX9W31HUY9DI3WidTAA==
- /data/data/####/rdata_comrhavuyzb.new
- /data/data/####/runner_info.prop.new
- /data/data/####/security_info
- /data/data/####/tdargs.xml
- /data/data/####/tmpbl.jar
- /data/data/####/tools8977.xml
- /data/data/####/twc.xml
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/uid.f
- /data/data/####/um_pri.xml
- /data/data/####/umdat.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_common_location.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/userData.xml
- /data/data/####/userDatas.xml
- /data/data/####/webview.db-journal
- /data/data/####/yy.dt
- /data/data/####/yywda.apk
- /data/data/####/zdbja.jar
- /data/data/####/{6109AB2B-769CFABF}_{F3D941B8-9F59C5E4}.P2
- /data/data/####/{BE2355DB-D785E335}.PC1
- /data/data/####/{F3D941B8-9F59C5E4}.P1
- /data/data/####/{F3D941B8-9F59C5E4}.P3
- /data/media/####/.a.dat
- /data/media/####/.adfwe.dat
- /data/media/####/.cca.dat
- /data/media/####/.nid
- /data/media/####/.umm.dat
- /data/media/####/.uunique
- /data/media/####/.uunique.new
- /data/media/####/I7HE1pd26tdvkjhloLWlx5UBeDOAmh6M
- /data/media/####/I7HE1pd26tdvkjhloLWlx5UBeDOAmh6M.lk
- /data/media/####/WyyyCrashLog_20190410114700_2298.log
- /data/media/####/WyyyCrashLog_20190410114706_2649.log
- /data/media/####/WyyyCrashLog_20190410114707_2649.log
- /data/media/####/WyyyCrashLog_20190410114713_2868.log
- /data/media/####/WyyyCrashLog_20190410114715_2868.log
- /data/media/####/WyyyCrashLog_20190410114720_3088.log
- /data/media/####/WyyyCrashLog_20190410114721_3088.log
- /data/media/####/WyyyCrashLog_20190410114722_3088.log
- /data/media/####/WyyyCrashLog_20190410114723_3088.log
- /data/media/####/WyyyCrashLog_20190410114725_3088.log
- /data/media/####/WyyyCrashLog_20190410114727_3088.log
- /data/media/####/WyyyCrashLog_20190410114728_3088.log
- /data/media/####/WyyyCrashLog_20190410114729_3088.log
- /data/media/####/mykernel.apk
- /data/media/####/mykernel.apk (deleted)
- /data/media/####/mykernel.apk.tmp
- /data/media/####/sysid.dat
- /data/media/####/tag2.dat6d202d16-7e9b-426b-9a67-ed6db6b9f0e4.tmp
- /data/media/####/tw
- /data/media/####/yydd_3009_2344.zip
- ./fplay_arthc
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
- /system/bin/sh
- /system/bin/sh -c getprop
- /system/bin/sh -c getprop ro.aa.romver
- /system/bin/sh -c getprop ro.board.platform
- /system/bin/sh -c getprop ro.build.fingerprint
- /system/bin/sh -c getprop ro.build.nubia.rom.name
- /system/bin/sh -c getprop ro.build.rom.id
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
- /system/bin/sh -c getprop ro.build.version.emui
- /system/bin/sh -c getprop ro.build.version.opporom
- /system/bin/sh -c getprop ro.gn.gnromvernumber
- /system/bin/sh -c getprop ro.lenovo.series
- /system/bin/sh -c getprop ro.lewa.version
- /system/bin/sh -c getprop ro.meizu.product.model
- /system/bin/sh -c getprop ro.miui.ui.version.name
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
- /system/bin/sh -c type su
- cat /sys/block/mmcblk0/device/cid
- cat /sys/class/android_usb/android0/idProduct
- cat /sys/class/android_usb/android0/idVendor
- chmod 700 <Package Folder>/tx_shell/libnfix.so
- chmod 700 <Package Folder>/tx_shell/libshella-2.9.0.2.so
- chmod 700 <Package Folder>/tx_shell/libufix.so
- chmod 777 <Package Folder>/anlangaoyuanlan
- chmod 777 <Package Folder>/files/fplay_arthc
- dd if <Package Folder>/files/fplay_arthc of <Package Folder>/anlangaoyuanlan
- dd if=<Package Folder>/files/fplay_arthc of=<Package Folder>/anlangaoyuanlan
- getprop
- getprop ro.aa.romver
- getprop ro.board.platform
- getprop ro.build.fingerprint
- getprop ro.build.nubia.rom.name
- getprop ro.build.rom.id
- getprop ro.build.tyd.kbstyle_version
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.gn.gnromvernumber
- getprop ro.lenovo.series
- getprop ro.lewa.version
- getprop ro.meizu.product.model
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.build.display.id
- getprop ro.vivo.os.version
- getprop ro.yunos.version
- logcat -d -v threadtime
- ls -l /dev
- ls -l /dev/block
- ls -l /dev/block/vold
- ls -l /dev/bus
- ls -l /dev/bus/usb
- ls -l /dev/bus/usb/001
- ls -l /dev/com.android.settings.daemon
- ls -l /dev/cpuctl
- ls -l /dev/cpuctl/apps
- ls -l /dev/cpuctl/apps/bg_non_interactive
- ls -l /dev/graphics
- ls -l /dev/input
- ls -l /dev/log
- ls -l /dev/pts
- ls -l /dev/snd
- ls -l /dev/socket
- ls /sys/class/thermal
- ps
- sh
- sh ./fplay_arthc
- Bugly
- cocos2dcpp
- libnfix
- libshella-2.9.0.2
- libufix
- nfix
- ufix
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES-CBC-PKCS5Padding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- DES
- DES-CBC-PKCS5Padding