Technical information
- Android.Spy.2442
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ifconsu####.htba####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) 5b0988e####.cdn.so####.com:80
- TCP(HTTP/1.1) gdv.a.s####.com:80
- TCP(HTTP/1.1) l####.cc:80
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) c####.x####.com:443
- TCP(TLS/1.0) s####.j####.cn:443
- UDP s.j####.cn:19000
- TCP 1####.230.236.21:7000
- 5b0988e####.cdn.so####.com
- and####.b####.qq.com
- av1.x####.com
- c####.x####.com
- i.t####.com
- ifconsu####.htba####.com
- l####.cc
- nfs.htba####.com
- pv.s####.com
- s####.j####.cn
- s.j####.cn
- sis.j####.io
- up####.sdk.jig####.cn
- 5b0988e####.cdn.so####.com/images/20190320/0b9e008c7a6544d092ccc5a6249fa...
- 5b0988e####.cdn.so####.com/images/20190320/367d3ef483ed4031a11cd75f70186...
- 5b0988e####.cdn.so####.com/images/20190320/40b0ac4c04ee45d6a5d15c2bb7f39...
- 5b0988e####.cdn.so####.com/images/20190320/acef182c2a244d988eefb86db96a4...
- 5b0988e####.cdn.so####.com/images/20190320/fd36356af7ee48368829118412c29...
- gdv.a.s####.com/cityjson?ie=####
- ifconsu####.htba####.com/android/carsourel_img/392415584106655744.jpg
- ifconsu####.htba####.com/android/carsourel_img/395509454856073216.png
- ifconsu####.htba####.com/android/carsourel_img/555073366332092416.jpg
- ifconsu####.htba####.com/android/carsourel_img/555073555197407232.jpg
- ifconsu####.htba####.com/android/wx_img/34a93b9d-ac69-43ae-b1c8-bbf92ba7...
- ifconsu####.htba####.com/android/wx_img/3ae4e37f-d5ad-46f8-a068-b273eb5a...
- ifconsu####.htba####.com/android/wx_img/6b83178c-bcbd-473c-9bb3-d7fccfb8...
- ifconsu####.htba####.com/android/wx_img/75eeecff-fd7e-4231-b4a2-a9cf4543...
- ifconsu####.htba####.com/android/wx_img/8736eec9-35aa-49e9-ab91-564ece34...
- ifconsu####.htba####.com/android/wx_img/ca4501be-05d4-4e5f-ab89-a3513a4a...
- ifconsu####.htba####.com/android/wx_img/db428a74-7614-4aae-94e4-c549a77c...
- ifconsu####.htba####.com/android/wx_img/f4229134-9253-485a-be3e-50f2b874...
- ifconsu####.htba####.com/app/getWxConfig?url=####&_=####
- ifconsu####.htba####.com/app/home/getCarouselImage?locationType=####
- ifconsu####.htba####.com/app/news/getArticleList?userId=####&articleType...
- ifconsu####.htba####.com/app/news/getArticleTypes?userId=####
- ifconsu####.htba####.com/app/news/getBasicNewsList?pageIndex=####&pageSi...
- ifconsu####.htba####.com/h5/css/common.css
- ifconsu####.htba####.com/h5/css/mobileSelect.css
- ifconsu####.htba####.com/h5/css/reset.css
- ifconsu####.htba####.com/h5/img/chang1.jpg
- ifconsu####.htba####.com/h5/img/moive2.png
- ifconsu####.htba####.com/h5/js/api.js
- ifconsu####.htba####.com/h5/js/apihost.js
- ifconsu####.htba####.com/h5/js/common.js
- ifconsu####.htba####.com/h5/js/jquery-1.8.3.min.js
- ifconsu####.htba####.com/h5/js/jssdk.js
- ifconsu####.htba####.com/h5/js/mobileSelect.js
- ifconsu####.htba####.com/h5/js/rem.js
- ifconsu####.htba####.com/h5/moive2.html
- ifconsu####.htba####.com/h5/watchMe.html
- ifconsu####.htba####.com/img/sys_img/prod_img/552455905396994048.png
- ifconsu####.htba####.com/img/sys_img/prod_img/557965598013861888.jpg
- ifconsu####.htba####.com/img/usr_img/default_img/app_default_img.png
- l####.cc/i/sdk/is_gal?sign=####×tamp=####&android_id=####&imei_md5=...
- and####.b####.qq.com/rqd/async?aid=####
- l####.cc/i/sdk/install
- /data/data/####/.jg.ic
- /data/data/####/0a922b715300a94e05ba4be4b6d950a487b3957c488af70....0.tmp
- /data/data/####/1004
- /data/data/####/135a0aa6896f5794376685e60fefba5d08b32a3d1299952....0.tmp
- /data/data/####/1553096307932_2310
- /data/data/####/1553096309657_2310
- /data/data/####/1553096310658_2310
- /data/data/####/1553096311607_2310
- /data/data/####/1553096312396_2310
- /data/data/####/1553096313000_2310
- /data/data/####/1553096314159_2310
- /data/data/####/1553096314530_2310
- /data/data/####/1553096315192_2310
- /data/data/####/1553096317145_2310
- /data/data/####/1553096318484_2310
- /data/data/####/1553096320642_2310
- /data/data/####/1553096321614_2310
- /data/data/####/1553096322425_2310
- /data/data/####/1553096323353_2310
- /data/data/####/1553096324017_2310
- /data/data/####/1553096327087_2310
- /data/data/####/1553096327899_2310
- /data/data/####/1553096329435_2310
- /data/data/####/1553096331426_2310
- /data/data/####/1553096346722_2310
- /data/data/####/1553096347724_2310
- /data/data/####/1553096355332_2310
- /data/data/####/1553096355643_2310
- /data/data/####/1553096356069_2310
- /data/data/####/1553096356312_2310
- /data/data/####/1553096357416_2310
- /data/data/####/1553096359502_2310
- /data/data/####/1553096359732_2310
- /data/data/####/1553096360423_2310
- /data/data/####/1553096360639_2310
- /data/data/####/1553096361140_2310
- /data/data/####/1553096361491_2310
- /data/data/####/1553096361988_2310
- /data/data/####/1553096362442_2310
- /data/data/####/29b0c93183fd205ac003fcb1c68301fa7480f4bfa604e8f....0.tmp
- /data/data/####/3d28eb336aaf7e8f4723cba11d269a3fefead022a86a8da....0.tmp
- /data/data/####/465562db011e0795c69c5bb307bf9a53f74e97fbf911a79....0.tmp
- /data/data/####/53d176308196cb85abcf29b1ef9860863230c860085be7f....0.tmp
- /data/data/####/679e36e12eb74b898c32755d5a7b0cab05480785b2381a4....0.tmp
- /data/data/####/6a68b638b70e06840882479cc33241f2562300d0cc0a788....0.tmp
- /data/data/####/962997d59135c610f41b9d93b16e72aaf3091222186015d....0.tmp
- /data/data/####/990041ca7c8ea5e2650d9a5646c7a6118db385e72087bee....0.tmp
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/Archimedes_p1
- /data/data/####/Archimedes_p2
- /data/data/####/Archimedes_p3
- /data/data/####/Archimedes_p4
- /data/data/####/Archimedes_p5
- /data/data/####/JPushSA_Config.xml
- /data/data/####/LKME_Server_Request_Queue.xml
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_cloudcontrol1.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_longtime0.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime0.xml
- /data/data/####/UserCache.xml
- /data/data/####/appPackageNames_v2
- /data/data/####/bd79ce4b8307985c2276efa69fe15bfd8618b7b1874bc24....0.tmp
- /data/data/####/bf8121c8f5b20cbf906c14fc860ee70f758c529778c2263....0.tmp
- /data/data/####/bugly_db_-journal
- /data/data/####/cn.jpush.android.user.profile.xml
- /data/data/####/cn.jpush.preferences.v2.rid.xml
- /data/data/####/cn.jpush.preferences.v2.xml
- /data/data/####/com.dolphin.insuranceAgent_preferences.xml
- /data/data/####/crashrecord.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/index
- /data/data/####/iv
- /data/data/####/journal.tmp
- /data/data/####/jpush_device_info.xml
- /data/data/####/jpush_local_notification.db
- /data/data/####/jpush_local_notification.db-journal
- /data/data/####/jpush_local_notification.db-wal
- /data/data/####/jpush_stat_cache.json
- /data/data/####/jpush_stat_cache_history.json
- /data/data/####/jpush_statistics.db
- /data/data/####/jpush_statistics.db-journal
- /data/data/####/jpush_statistics.db-shm (deleted)
- /data/data/####/jpush_statistics.db-wal
- /data/data/####/libjiagu-275804198.so
- /data/data/####/linkedme_referral_shared_pref.xml
- /data/data/####/local_crash_lock
- /data/data/####/native_record_lock
- /data/data/####/salt
- /data/data/####/security_info
- /data/data/####/share_cache.xml
- /data/data/####/tdid.xml
- /data/data/####/wakeup_cache.json
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/.lm_device_id
- /data/media/####/.nomedia
- /data/media/####/.push_deviceid
- /data/media/####/.tcookieid
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- cat /sys/class/net/wlan0/address
- chmod 755 <Package Folder>/.jiagu/libjiagu-275804198.so
- getprop
- Bugly
- jcore119
- libjiagu-275804198
- AES
- AES-ECB-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-PKCS1Padding
- AES
- AES-ECB-NoPadding
- AES-GCM-NoPadding