Technical information
- 106901332942: rg|423|AhB3j.S11wiZPLfC4voMlAPLf5l4OMLO8Og5z74T384LfHcDOB.A.sgB2TcK40q.T51VDYdbzte0yidxboadSiJitEMyX17RpwZmQFnwmn4!
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) 1####.159.180.48:8090
- TCP(HTTP/1.1) w####.cns####.com:9005
- TCP(HTTP/1.1) api.qiazhiw####.cn:8888
- TCP(HTTP/1.1) ji####.jieme####.com:8152
- TCP(HTTP/1.1) g####.mc####.com:9013
- TCP(HTTP/1.1) bl.f.numbero####.cn:80
- TCP(HTTP/1.1) 1####.78.31.198:8030
- TCP(HTTP/1.1) bl.r.numbero####.cn:80
- TCP(HTTP/1.1) www.palmfun####.cn:80
- TCP(HTTP/1.1) ifse####.mc####.com:29092
- TCP(HTTP/1.1) gd.a.s####.com:80
- TCP(HTTP/1.1) 1####.159.103.205:8090
- TCP(HTTP/1.1) 1####.159.152.136:8090
- TCP(HTTP/1.1) a####.on####.club:80
- TCP(HTTP/1.1) 47.1####.5.162:9004
- TCP(HTTP/1.1) q####.a####.com:80
- TCP(HTTP/1.1) daliu####.c####.qini####.com:80
- TCP(TLS/1.0) 1####.217.168.238:443
- a####.free-ey####.com
- a####.on####.club
- api.qiazhiw####.cn
- bl.c.numbero####.cn
- bl.f.numbero####.cn
- bl.i.numbero####.cn
- bl.r.numbero####.cn
- g####.mc####.com
- ifse####.mc####.com
- ji####.dl####.com
- ji####.jieme####.com
- nfsjar####.funu####.com
- pv.s####.com
- w####.cns####.com
- www.palmfun####.cn
- a####.on####.club/fileupload/4c6854cb292b3bae.jar
- daliu####.c####.qini####.com/uploadToEnCode/1552360112375157.jar
- daliu####.c####.qini####.com/uploadToEnCode/1555915218447743.jar
- daliu####.c####.qini####.com/uploadToEnCode/1555990622420742.jar
- gd.a.s####.com/cityjson?ie=####
- q####.a####.com/jieplginf/djmdeta29
- api.qiazhiw####.cn:8888/v2/api/report?app_id=####&imei=####&imsi=####&ha...
- bl.f.numbero####.cn/SlAybZh1/rXfV
- bl.f.numbero####.cn/q3265Xdk/E60g
- bl.r.numbero####.cn/J7Izocp1/FMc7
- bl.r.numbero####.cn/m3fb2crQ/MSfQ
- bl.r.numbero####.cn/m3fb2crQ/a4Xd
- bl.r.numbero####.cn/q3265Xdk/E60g
- g####.mc####.com:9013/nfs/nf_s/g_s
- g####.mc####.com:9013/nfs/nf_s/r_f
- g####.mc####.com:9013/nfs/nf_s/s_l_i
- g####.mc####.com:9013/nfs/nf_s/u_j
- ifse####.mc####.com:29092/ifServer/gtmb
- ji####.jieme####.com:8152/ryf_webserver/payment/checkupdate.html
- w####.cns####.com:9005/csk/c_s/g_f.json
- w####.cns####.com:9005/csk/st_c/cn_i_sec.json
- w####.cns####.com:9005/csk/st_c/cn_sk_Order.json
- w####.cns####.com:9005/csk/st_c/cn_sk_login.json
- w####.cns####.com:9005/csk/st_c/cn_sk_specialVersion.json
- w####.cns####.com:9005/csk/st_c/cn_sk_tj.json
- w####.cns####.com:9005/csk/st_c/getst_tegy.json
- www.palmfun####.cn/fee/active
- www.palmfun####.cn/fee/searchpc
- www.palmfun####.cn/fee/searchpcNew
- /data/data/####/1556791031721
- /data/data/####/1556791031917
- /data/data/####/1556791033820
- /data/data/####/15567910341555915218447743_.dex (deleted)
- /data/data/####/15567910341555915218447743_.jar
- /data/data/####/1556791036083
- /data/data/####/1556791037716
- /data/data/####/1556791039700
- /data/data/####/15567910401555990622420742_.dex (deleted)
- /data/data/####/15567910401555990622420742_.jar
- /data/data/####/15567910411552360112375157_.jar
- /data/data/####/1556791045241
- /data/data/####/1556791045612
- /data/data/####/1556791045661
- /data/data/####/1556791047223
- /data/data/####/1556791049164
- /data/data/####/1556791051176
- /data/data/####/1556791053172
- /data/data/####/1556791055174
- /data/data/####/1556791059192
- /data/data/####/1556791059532
- /data/data/####/1556791059581
- /data/data/####/1556791061250
- /data/data/####/1556791063279
- /data/data/####/1556791065202
- /data/data/####/1556791067204
- /data/data/####/1556791075528
- /data/data/####/1556791075870
- /data/data/####/1556791075896
- /data/data/####/1556791077518
- /data/data/####/1556791079492
- /data/data/####/1556791081558
- /data/data/####/1556791083507
- /data/data/####/1556791085503
- /data/data/####/1556791088996
- /data/data/####/1556791089359
- /data/data/####/1556791089398
- /data/data/####/1556791091096
- /data/data/####/1556791092965
- /data/data/####/1556791095255
- /data/data/####/1556791096950
- /data/data/####/2094700396.jar
- /data/data/####/Cocos2dxPrefsFile.xml
- /data/data/####/JiePay.xml
- /data/data/####/NorPay_SP.xml
- /data/data/####/a_tmp
- /data/data/####/ad.vv.sdk.xml
- /data/data/####/alias.xml
- /data/data/####/app_test.apk
- /data/data/####/app_test.dex (deleted)
- /data/data/####/brushs.xml
- /data/data/####/c8ef51bca7c6ca597d96a5924f5daec5.xml
- /data/data/####/cCache.xml
- /data/data/####/cds.xml
- /data/data/####/com.nnpfyo.bwapo.com.one.support.c.aNorPay_msg.db-journal
- /data/data/####/com.nnpfyo.bwapo_preferences.xml
- /data/data/####/com.nnpfyo.bwapo_preferences.xml.bak (deleted)
- /data/data/####/comnnpfyobwapo
- /data/data/####/fmoonStore.db
- /data/data/####/fmoonStore.db-journal
- /data/data/####/fplay_arthc
- /data/data/####/jiepay_config.xml
- /data/data/####/jiepayplugin.apk
- /data/data/####/jiepayplugin.apkdata
- /data/data/####/jiepayplugin.dex
- /data/data/####/jiepayplugin.dex (deleted)
- /data/data/####/jiepaysmspay.db
- /data/data/####/jiepaysmspay.db-journal
- /data/data/####/one.dex
- /data/data/####/onePayV3.xml
- /data/data/####/order_sp.xml
- /data/data/####/sp.data.xml
- /data/data/####/ugmarsad.db
- /data/data/####/ugmarsad.db-journal
- /data/data/####/ugmarssp.xml
- /data/data/####/ydutl.cf
- /data/media/####/15567910341555915218447743.jar
- /data/media/####/15567910401555990622420742.jar
- /data/media/####/15567910411552360112375157.jar
- ./fplay_arthc
- chmod 777 <Package Folder>/comnnpfyobwapo
- chmod 777 <Package Folder>/files/fplay_arthc
- dd if=<Package Folder>/files/fplay_arthc of=<Package Folder>/comnnpfyobwapo
- sh
- sh ./fplay_arthc
- cocos2dcpp
- n3d78c
- null
- plugManager
- s6msuxo8
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES-CBC-PKCS5Padding
- AES
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- DES
- DES-CBC-PKCS5Padding