Technical information
- Android.Triada.584.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) u####.b####.com:17267
- TCP(HTTP/1.1) sg.simen####.com:9100
- UDP(NTP) 2.and####.p####.####.org:123
- TCP(TLS/1.0) er####.u####.com.####.com:443
- TCP(TLS/1.0) u####.u####.com:443
- TCP(TLS/1.0) hy####.ray####.com:443
- TCP(TLS/1.0) na61-####.wagbr####.ali####.####.com:443
- TCP(TLS/1.0) mt####.ray####.com:443
- TCP(TLS/1.0) sf16-mu####.ibyte####.com.####.net:443
- TCP(TLS/1.0) new-####.u####.com:443
- TCP(TLS/1.0) sf16-st####.i18n-pg####.com.####.net:443
- TCP(TLS/1.0) pangol####.isn####.com.####.net:443
- TCP(TLS/1.0) net.ray####.com:443
- TCP(TLS/1.0) d####.s####.com:19314
- TCP(TLS/1.0) p####.ray####.com:443
- TCP(TLS/1.0) d1om9zn####.cloudf####.net:443
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) api16-a####.pa####.io.####.net:443
- TCP(TLS/1.0) rr1---s####.g####.com:443
- TCP(TLS/1.2) 64.2####.165.94:443
- TCP(TLS/1.2) gmscomp####.google####.com:443
- TCP(TLS/1.2) 74.1####.205.138:443
- UDP 85.1####.117.141:443
- UDP rr1---s####.g####.com:443
- TCP d1om9zn####.cloudf####.net:443
- TCP fk-conf####.ray####.com:443
- TCP analyti####.minte####.net:9377
- TCP hy####.ray####.com:443
- UDP 1####.194.220.95:443
- TCP analy####.ray####.com:443
- UDP gmscomp####.google####.com:443
- 2.and####.p####.####.org
- analy####.ray####.com
- analyti####.minte####.net
- api16-a####.pa####.io
- cdn-adn####.ray####.com
- confi####.ray####.com
- d####.s####.com
- d1om9zn####.cloudf####.net
- er####.u####.com
- gmscomp####.google####.com
- hy####.ray####.com
- m####.go####.com
- mt####.ray####.com
- net.ray####.com
- p####.ray####.com
- pangol####.isn####.com
- rr1---s####.g####.com
- sf16-mu####.ibyte####.com
- sf16-st####.i18n-pg####.com
- sg.simen####.com
- u####.b####.com
- u####.u####.com
- ucc.u####.com
- ut####.u####.com
- d1om9zn####.cloudf####.net:443/cdn-adn/vn/22/09/27/15/19/b9061cbaeba9af3...
- d1om9zn####.cloudf####.net:443/cdn-adn/vn/22/10/12/11/38/b26e7d057803c67...
- d1om9zn####.cloudf####.net:443/cdn-adn/vn/22/10/24/16/42/f62d1d37a4e90c0...
- d1om9zn####.cloudf####.net:443/vm/22/10/18/00/d1e2527d-26ac-4a1f-af3a-ac...
- mt####.ray####.com:443/2021/0629/confirmDialog-2b9fddb88412e09a244a9bb41...
- net.ray####.com:443/openapi/ad/v3?app_id=####&unit_id=####&placement_id=...
- p####.ray####.com:443/pl/22/09/20/m_de_xh3d2048nb_omye647hl_p_an_ty-5ee1...
- p####.ray####.com:443/pl/22/09/27/m_en_A838DEzhuanpan_hoQSK47q3_p_an_ty-...
- p####.ray####.com:443/pl/22/10/24/m_de_A838DEwanfa_8l88j771n_p_an_ty-08b...
- sf16-mu####.ibyte####.com.####.net:443/obj/ad-pattern-va/renderer/packag...
- sf16-st####.i18n-pg####.com.####.net:443/obj/ad-pattern-sg/renderer/12ea...
- sf16-st####.i18n-pg####.com.####.net:443/obj/ad-pattern-sg/renderer/pack...
- sf16-st####.i18n-pg####.com.####.net:443/obj/ad-pattern-va/renderer/12ea...
- api16-a####.pa####.io.####.net:443/api/ad/union/sdk/get_ads/?aid=####&de...
- api16-a####.pa####.io.####.net:443/api/ad/union/sdk/stats/batch/
- d####.s####.com:19314/c1p146
- er####.u####.com.####.com:443/apm_cc
- na61-####.wagbr####.ali####.####.com:443/v1/fetch
- net.ray####.com:443/openapi/ad/v5?app_id=####&unit_id=####&placement_id=...
- new-####.u####.com:443/api/postZdata/v4
- pangol####.isn####.com.####.net:443/api/ad/union/sdk/settings/
- pangol####.isn####.com.####.net:443/api/ad/union/sdk/stats/batch/
- sg.simen####.com:9100/advertisement/simengads
- sg.simen####.com:9100/application/baseinfo
- sg.simen####.com:9100/application/useless
- u####.b####.com:17267/3k7ugi/
- u####.u####.com:443/unify_logs
- u####.u####.com:443/zcfg
- /data/data/####/.dex2oatlock
- /data/data/####/.imprint
- /data/data/####/.updateIV.dat
- /data/data/####/.updateIV.dat_0
- /data/data/####/.updateIV.dat_1
- /data/data/####/.updateIV.dat_2
- /data/data/####/0000000lllll_0.dex
- /data/data/####/0000000lllll_1.dex
- /data/data/####/0000000lllll_2.dex
- /data/data/####/000O00ll111l_0.dex
- /data/data/####/000O00ll111l_1.dex
- /data/data/####/000O00ll111l_2.dex
- /data/data/####/00O000ll111l_0.dex
- /data/data/####/00O000ll111l_0.dex.flock
- /data/data/####/00O000ll111l_0.dex.flock (deleted)
- /data/data/####/00O000ll111l_1.dex
- /data/data/####/00O000ll111l_1.dex.flock
- /data/data/####/00O000ll111l_1.dex.flock (deleted)
- /data/data/####/00O000ll111l_2.dex
- /data/data/####/00O000ll111l_2.dex.flock
- /data/data/####/00O000ll111l_2.dex.flock (deleted)
- /data/data/####/0OO00l111l1l
- /data/data/####/0OO00l111l1l.lock
- /data/data/####/2ff88b603c100f6dce737a4d582b86ca.temp
- /data/data/####/90_A3440048_1070578110
- /data/data/####/Sdkq.xml
- /data/data/####/UM_PROBE_DATA.xml
- /data/data/####/Uvv.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/Y29uZmlnXzYzMjAzYTUwMDU4NDQ2MjdiNTQ3MzNiYw.sp
- /data/data/####/Y29uZmlnXzYzMjAzYTUwMDU4NDQ2MjdiNTQ3MzNiYw.sp.bak
- /data/data/####/c3caa619d988c6e8709e4cf659174c84.temp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/cconfig_sharedpreference.xml
- /data/data/####/com.manmaster.junksleaner_preferences.xml
- /data/data/####/config_info_def.xml
- /data/data/####/cool_mic_data.mp3
- /data/data/####/cv.xml
- /data/data/####/delayed_transmission_flag_new.xml
- /data/data/####/devyok.DATA_PROVIDER.xml
- /data/data/####/efs_launch.xml
- /data/data/####/efsid
- /data/data/####/efsid3581
- /data/data/####/exc_log.xml
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/file21
- /data/data/####/file21-c
- /data/data/####/file22
- /data/data/####/file22-c
- /data/data/####/i==1.2.0&&1.2.5_1666955255141_dW5pZnlfbG9ncw==;.log
- /data/data/####/itconfig.sp
- /data/data/####/itconfig.sp.bak
- /data/data/####/kdp_app_ad.xml
- /data/data/####/kdp_app_req.xml
- /data/data/####/kdp_device_info.xml
- /data/data/####/mbridge.msdk.db-journal
- /data/data/####/mbridge.xml
- /data/data/####/mbridge.xml.bak
- /data/data/####/metrics_guid
- /data/data/####/paconfig.sp
- /data/data/####/paconfig.sp.bak
- /data/data/####/proc_auxv
- /data/data/####/sendlock
- /data/data/####/share_date.xml
- /data/data/####/share_date.xml.bak
- /data/data/####/sp_Lmvpu.xml
- /data/data/####/sp_Lmvpu.xml.bak (deleted)
- /data/data/####/sp_last_ad_show_cache_show_ad.xml
- /data/data/####/sp_replace_flag.sp
- /data/data/####/sp_replace_flag.sp.bak
- /data/data/####/sp_reward_video_adslot.xml
- /data/data/####/t==9.5.0&&1.2.5_1666955252551_dW5pZnlfbG9ncw==;.log
- /data/data/####/tosversion
- /data/data/####/tt_ad_sdk_sp.xml
- /data/data/####/tt_ad_sdk_sp.xml.bak
- /data/data/####/tt_sdk_event_db_ad.xml
- /data/data/####/tt_sdk_event_db_state.xml
- /data/data/####/tt_sdk_event_db_trail.xml
- /data/data/####/tt_sdk_event_net_ad.xml
- /data/data/####/tt_sdk_event_net_state.xml
- /data/data/####/tt_sdk_event_net_trail.xml
- /data/data/####/tt_sdk_settings.xml
- /data/data/####/tt_sdk_settings.xml.bak
- /data/data/####/tt_sp_app_env.xml
- /data/data/####/ttopenadsdk.xml
- /data/data/####/ttopenadsdk.xml.bak
- /data/data/####/ttopensdk.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_policy_grant.xml
- /data/data/####/um_session_id.xml
- /data/data/####/um_umcrash.xml
- /data/data/####/umeng_common_config.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_general_config.xml.bak
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_policy_result_flag
- /data/data/####/umeng_sp_oaid.xml
- /data/data/####/umeng_zcfg_flag
- /data/data/####/umeng_zero_cache.db
- /data/data/####/umeng_zero_cache.db-journal
- /data/data/####/umzid_general_config.xml
- /data/data/####/umzid_general_config.xml.bak
- /data/data/####/unique
- /data/data/####/ver
- /data/data/####/z==1.2.0&&1.2.5_1666955237175_emNmZw==;.log
- /data/media/####/.Sfn
- /data/media/####/.nomedia
- /data/media/####/1214089107.tmp
- /data/media/####/1960090047.tmp
- /data/media/####/1a0970f0080f11acb473ca9fc1f744f4.zip
- /data/media/####/327e5cc9cd827f8befdc74f3e4a580ce.zip
- /data/media/####/3388639e4f330a650e2bb73a7e26ccae.html
- /data/media/####/6dc579963e0170a1974dc52e7c959c02.zip
- /data/media/####/855087772.tmp
- /data/media/####/8801731da259f04802a5826c1bc7fb6a
- /data/media/####/925500817.tmp
- /data/media/####/Btzua
- /data/media/####/DynamicLoader.js
- /data/media/####/Hrn
- /data/media/####/afd1707ad76c449f9c1ce4de75dac80e.zip
- /data/media/####/c5b8b87215ae615981ae5e9141b14a38
- /data/media/####/c985878b47fdfa054d196720059a46b4
- /data/media/####/ccf177280903735b8e3ccbed6043b9cb
- /data/media/####/confirmDialog.html
- /data/media/####/confirmDialog.js
- /data/media/####/m.bundle.js
- /data/media/####/m_de_A838DEwanfa_8l88j771n_p_an_ty.html
- /data/media/####/m_de_xh3d2048nb_omye647hl_p_an_ty.html
- /data/media/####/m_en_A838DEzhuanpan_hoQSK47q3_p_an_ty.html
- /data/media/####/mraid_js.txt
- /data/media/####/mtg_offline_package.js
- /data/media/####/mw_config.js
- /data/media/####/om_js_content.txt
- /data/media/####/package_loading.js
- /data/media/####/webAudioCheck.js
- /data/misc/####/primary.prof
- getprop ro.build.version.emui
- getprop ro.letv.release.version
- getprop ro.vivo.os.build.display.id
- ls -l /system/bin/su
- ls /
- ls /sys/class/thermal
- sh -c type su
- libAOmkGH
- libPglmetasec_ov
- libcrashsdk
- libshell-super.2019
- libumeng-spy
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7PADDING
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- RSA-None-PKCS1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- RSA-None-PKCS1Padding