Техническая информация
- 106901332942: rg|302|AhB3j.S11wiZPLfC4voMlAPLf5l4OMLO8Og5z74T385P,mOWqq4ckPtLpVZ43sNPPyR,WyhlPmAqvSehaNTm8QA9Pf9SyZSq.lRJ2e.sedk!
- Android.DownLoader.363.origin
- Android.DownLoader.691.origin
- Android.Triada.248.origin
- Android.Triada.464.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ot.grb.qin####.com:80
- TCP(HTTP/1.1) k3####.u####.cn:80
- TCP(HTTP/1.1) 1####.159.152.136:8090
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) 1####.159.103.205:8090
- TCP(HTTP/1.1) dw.winners####.com:80
- TCP(HTTP/1.1) qq####.top:660
- TCP(HTTP/1.1) 47.1####.131.164:6600
- TCP(HTTP/1.1) en####.tui####.com:80
- TCP(HTTP/1.1) j####.o####.com:20193
- TCP(HTTP/1.1) 1####.15.2.156:6700
- TCP(HTTP/1.1) 1####.78.31.198:8030
- TCP(HTTP/1.1) 47.1####.78.161:9004
- TCP(HTTP/1.1) 1####.224.16.33:6600
- TCP(HTTP/1.1) 1####.55.161.68:29092
- TCP(HTTP/1.1) yun.tuit####.com.####.com:80
- TCP(HTTP/1.1) q####.a####.com:80
- TCP(HTTP/1.1) 1####.159.180.48:8090
- TCP(HTTP/1.1) w####.cns####.com:9005
- TCP(HTTP/1.1) 47.1####.131.164:6700
- TCP(HTTP/1.1) ji####.jieme####.com:8152
- TCP(HTTP/1.1) xz####.zhan####.com:10011
- TCP(HTTP/1.1) a####.on####.club:80
- TCP(HTTP/1.1) ot.prs.qin####.com:80
- TCP(HTTP/1.1) 1####.15.2.156:6600
- TCP(HTTP/1.1) lp.lapia####.com:6099
- TCP(HTTP/1.1) fy.bigb####.com:6099
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) api.qiazhiw####.cn:8888
- TCP(HTTP/1.1) www.3####.com:8081
- TCP(HTTP/1.1) 1####.224.16.33:6700
- TCP(HTTP/1.1) www.palmfun####.cn:80
- TCP(HTTP/1.1) as.ju####.com:80
- TCP(TLS/1.0) yw.suma####.com:5600
- TCP(TLS/1.0) yw.suma####.com:5500
- TCP(TLS/1.0) raw.githubu####.com:443
- a####.on####.club
- a####.u####.com
- api.qiazhiw####.cn
- as.ju####.com
- dd.bigb####.com
- dw.winners####.com
- en####.tui####.com
- fy.bigb####.com
- j####.o####.com
- ji####.dl####.com
- ji####.jieme####.com
- k3####.u####.cn
- l####.bigb####.com
- l.ace####.com
- lp.lapia####.com
- ot.cor.qin####.com
- ot.grb.qin####.com
- ot.m.qin####.com
- ot.prs.qin####.com
- pv.s####.com
- qq####.top
- raw.githubu####.com
- w####.cns####.com
- www.3####.com
- www.palmfun####.cn
- x####.bj####.cn
- xz####.zhan####.com
- yun.tuit####.com
- yw.suma####.com
- a####.on####.club/fileupload/4c6854cb292b3bae.jar
- as.ju####.com/ss?m=####&b=####&action=####&v=####&k=####&c=####&pkg=####...
- dw.winners####.com/img/20190107/455987/720-1280.jpg
- dw.winners####.com/img/20190304/333560/$7BKISJBC2SXHL{FG21T7C0.jpg
- dw.winners####.com/img/20190328/323548/720x1280-2.jpg
- dw.winners####.com/tem/ad.html
- dw.winners####.com/tem/js/WebViewJavascriptBridge.js
- dw.winners####.com/tem/js/jquery-1.8.0.min.js
- en####.tui####.com/index/image?appKey=####&adslotId=####
- gd.a.s####.com/cityjson?ie=####
- k3####.u####.cn/u/pnpdv
- q####.a####.com/jieplginf/djmdeta29
- q####.a####.com/znewxinzffe/zxzy75
- yun.tuit####.com.####.com/mami-media/img/lb61i6xuoe.jpg
- a####.u####.com/app_logs
- api.qiazhiw####.cn:8888/v2/api/report?app_id=####&imei=####&imsi=####&ha...
- fy.bigb####.com:6099/aps/
- j####.o####.com:20193/h3wkt/
- j####.o####.com:20193/jgflw/
- ji####.jieme####.com:8152/ryf_webserver/payment/checkupdate.html
- lp.lapia####.com:6099/aps/
- ot.grb.qin####.com/ei6VRb/ZJnAba
- ot.grb.qin####.com/zIFvYr/uaqmAn
- ot.prs.qin####.com/7ziimi/QriUva
- ot.prs.qin####.com/7ziimi/ieuYzm
- ot.prs.qin####.com/JBVZVr/niyaei
- ot.prs.qin####.com/ei6VRb/ZJnAba
- qq####.top:660/d872c/5521
- qq####.top:660/o27a4e/b2670a8
- qq####.top:660/s0a899a4/5402de
- qq####.top:660/s1cda/cf0e
- qq####.top:660/s502/7a29
- qq####.top:660/s5e85752/273
- qq####.top:660/sa82cc4/9746467
- qq####.top:660/sb2880/4b45d2
- w####.cns####.com:9005/csk/c_s/g_f.json
- w####.cns####.com:9005/csk/st_c/cn_i_sec.json
- w####.cns####.com:9005/csk/st_c/cn_sk_Order.json
- w####.cns####.com:9005/csk/st_c/cn_sk_login.json
- w####.cns####.com:9005/csk/st_c/cn_sk_specialVersion.json
- w####.cns####.com:9005/csk/st_c/cn_sk_tj.json
- w####.cns####.com:9005/csk/st_c/getst_tegy.json
- www.3####.com:8081/e/mmc
- www.palmfun####.cn/fee/active
- www.palmfun####.cn/fee/searchpc
- www.palmfun####.cn/fee/searchpcNew
- xz####.zhan####.com:10011/zxhypay/action/updatexzf.do
- /data/data/####/.dex
- /data/data/####/.imprint
- /data/data/####/.jar
- /data/data/####/1001.jar
- /data/data/####/1556701183929
- /data/data/####/1556701183930
- /data/data/####/1556701184801
- /data/data/####/1556701187758
- /data/data/####/1556701188422
- /data/data/####/1556701190398
- /data/data/####/1556701192468
- /data/data/####/1556701198953
- /data/data/####/1556701199033
- /data/data/####/1556701200559
- /data/data/####/1556701202422
- /data/data/####/1556701202869
- /data/data/####/1556701204324
- /data/data/####/1556701206343
- /data/data/####/1556701208497
- /data/data/####/1556701214096
- /data/data/####/1556701216275
- /data/data/####/1556701216442
- /data/data/####/1556701216602
- /data/data/####/1556701218370
- /data/data/####/1556701220598
- /data/data/####/1556701222023
- /data/data/####/1556701224035
- /data/data/####/1556701226648
- /data/data/####/1556701226741
- /data/data/####/1556701228905
- /data/data/####/1556701229194
- /data/data/####/1556701230683
- /data/data/####/1556701232840
- /data/data/####/1556701234516
- /data/data/####/1556701241922
- /data/data/####/1556701242007
- /data/data/####/1556701243212
- /data/data/####/1556701243992
- /data/data/####/1556701245784
- /data/data/####/1556701247473
- /data/data/####/1556701249730
- /data/data/####/1556701251370
- /data/data/####/1556701254518
- /data/data/####/1556701256758
- /data/data/####/1556701256956
- /data/data/####/1556701257227
- /data/data/####/1556701259152
- /data/data/####/1556701260446
- /data/data/####/9WAUU1ZYoDHD5PIs5g4WEJx4kTTDsyD1_fqHV7HTfHc9ey3Tz
- /data/data/####/9WAUU1ZYoDHD5PIs5g4WEJx4kTTDsyD1_fqHV7HTfHc9ey3Tz-journal
- /data/data/####/BYgRRwysjOqjnFF
- /data/data/####/FQmJ6zUMLCZaCbHSJOp9Um0ZxOc=.new
- /data/data/####/JiePay.xml
- /data/data/####/NGvxxmdAOQ5GW3pew-9e1yHAn59V_Xsq.new
- /data/data/####/NorPay_SP.xml
- /data/data/####/NorPay_SP.xml.bak
- /data/data/####/PcCEdNePj9vAUqeB.dex
- /data/data/####/PcCEdNePj9vAUqeB.zip
- /data/data/####/PxG6h4VFXkAmVqxTUBwgPmj583Q=.new
- /data/data/####/RPs-WMAh4zKFeJg1qbr2oA==.new
- /data/data/####/Sh30_apXxHl0DLbfrfXnqg==.new
- /data/data/####/XinZF.xml
- /data/data/####/XinZF_conf.xml
- /data/data/####/XinZFsmspay.db
- /data/data/####/XinZFsmspay.db-journal
- /data/data/####/YV92X2dkdF9jb25maWc=.xml
- /data/data/####/Ym9vdF9pbml0X3NwX25hbWU=.xml
- /data/data/####/a_tmp
- /data/data/####/aedu.xml
- /data/data/####/app_test.apk
- /data/data/####/app_test.dex (deleted)
- /data/data/####/brushs.xml
- /data/data/####/c8ef51bca7c6ca597d96a5924f5daec5.xml
- /data/data/####/cQMoEZ9JDxK_G5JMmBK5R_iD524=.new
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cds.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dr.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/fIwJAUKywhWNYjwQjK_DEQ==
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/fmoonStore.db
- /data/data/####/fmoonStore.db-journal
- /data/data/####/fplay_arthc
- /data/data/####/hKfCAejbkazrqgcS8ywNQQ==.new
- /data/data/####/hufag_f.dex
- /data/data/####/hufag_f.zip
- /data/data/####/index
- /data/data/####/jiepay_config.xml
- /data/data/####/jiepayplugin.apk
- /data/data/####/jiepayplugin.apkdata
- /data/data/####/jiepayplugin.dex
- /data/data/####/jiepaysmspay.db
- /data/data/####/jiepaysmspay.db-journal
- /data/data/####/lSUmCK57pZeC-kx5HiXDvaZx4L8=.new
- /data/data/####/lXSDvUKzMRynqU6IXNJTTg==
- /data/data/####/lecw.xml
- /data/data/####/lecw.xml.bak (deleted)
- /data/data/####/lpdf.dex
- /data/data/####/lpdf.jar
- /data/data/####/nr6NqrQecec-LeC7
- /data/data/####/one.dex
- /data/data/####/onePayV3.xml
- /data/data/####/order_sp.xml
- /data/data/####/order_sp.xml.bak
- /data/data/####/order_sp.xml.bak (deleted)
- /data/data/####/qs_LcCache.xml
- /data/data/####/r24ZCMB1BZ9rbU0iEGnq_V6AkeE=.new
- /data/data/####/rdata_comapvnbwyyz.new
- /data/data/####/runner_info.prop.new
- /data/data/####/s3T_xvvOY7mw6Mhc.new
- /data/data/####/uDFFgqFNYBuygsl4kKkAhQ==.new
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/uhZpiZuuJvAfLzhVgoXQo3cklXU=.new
- /data/data/####/uid.f
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak (deleted)
- /data/data/####/umeng_it.cache
- /data/data/####/userData.xml
- /data/data/####/userDatas.xml
- /data/data/####/vv.xml
- /data/data/####/webview.db
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/yIB.YgRRwys.jOqjnFF_preferences.xml
- /data/data/####/ydutl.cf
- /data/data/####/yunUid.f
- /data/data/####/zdfc.dex
- /data/data/####/zdfc.jar
- /data/data/####/zxxinzf.apk
- /data/data/####/zxxinzf.apkdata
- /data/data/####/zxxinzf.dex
- /data/media/####/.ewf
- /data/media/####/.uunique.new
- /data/media/####/C5B8700F452D882989032316F1FB4DFF
- /data/media/####/C5B8700F452D882989032316F1FB4DFF.jar
- /data/media/####/C5B8700F452D882989032316F1FB4DFF.temp
- /data/media/####/ayv
- /data/media/####/sys.lock
- /data/media/####/ws
- ./fplay_arthc
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- cat /proc/version
- cat /sys/class/net/wlan0/address
- chmod 777 <Package Folder>/BYgRRwysjOqjnFF
- chmod 777 <Package Folder>/files/fplay_arthc
- dd if <Package Folder>/files/fplay_arthc of <Package Folder>/BYgRRwysjOqjnFF
- dd if=<Package Folder>/files/fplay_arthc of=<Package Folder>/BYgRRwysjOqjnFF
- getprop
- getprop ro.board.platform
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.vivo.os.version
- getprop ro.yunos.version
- sh
- sh ./fplay_arthc
- NewBeeSdk
- engine
- fshrimp
- n41207
- popstar
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding
- RSA-None-PKCS1Padding
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES
- DES-CBC-PKCS5Padding
- RSA-None-PKCS1Padding