Technical information
- Android.Spy.127.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) ip.ta####.com:80
- TCP(HTTP/1.1) u####.umengc####.com:80
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) 1####.205.203.105:8024
- TCP(HTTP/1.1) msg.umengc####.com:80
- TCP(HTTP/1.1) oc.u####.com:80
- TCP(HTTP/1.1) t####.talking####.net:80
- TCP(HTTP/1.1) cosm####.b0.a####.com:80
- TCP(HTTP/1.1) api.m.ta####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(TLS/1.0) api.cosm####.com:443
- TCP(TLS/1.0) secgw-i####.m.ta####.com:443
- TCP(TLS/1.0) cosm####.b0.a####.com:443
- TCP sdk.o####.t####.####.com:5224
- TCP cm-1####.ig####.com:5226
- 7j####.c####.z0.####.com
- a####.u####.com
- api.cosm####.com
- api.s####.mob.com
- api.y####.com
- cm-1####.ig####.com
- i####.cosm####.com
- ip.ta####.com
- mo####.on####.com
- msg.umengc####.com
- n####.cosm####.com
- oc.u####.com
- sdk.o####.i####.####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- st####.cosm####.com
- t####.talking####.net
- u####.umengc####.com
- u####.umengc####.com
- api.m.ta####.com/activeip/?agoo_apn=####&app_version_code=####&agoo_netw...
- cosm####.b0.a####.com/FhlZSEgjDxEqhRkwzc4KMDrLCUYF?imageMo####
- cosm####.b0.a####.com/Fipaz9y80HHHuc-M7C8JigVUGJm5?imageMo####
- cosm####.b0.a####.com/Fj3ukTmyrAJgwlkVKOloUmZCcRvQ?imageMo####
- cosm####.b0.a####.com/FjOMNz0tr40r4rSY8chWzmA1uN4o?imageMo####
- cosm####.b0.a####.com/FkDXVNCl34_Zb8IaAJ8NQ2UlSKlg?imageMo####
- cosm####.b0.a####.com/Fn2f8G_eOLb2-LL6DNkc2p4v0z6O?imageMo####
- cosm####.b0.a####.com/Fn98QZ_Ez7no_yS2AeZ1zqcpUweu?imageMo####
- cosm####.b0.a####.com/FnUVX24Y5uYG1Jnq3eGJ6JQx-F_0?imageMo####
- cosm####.b0.a####.com/FnolqxJZNJOjVB4EBfznxfSAOAKr
- cosm####.b0.a####.com/Fny3qL-ozyLKKBCpSuGsLxiu4ObW?imageMo####
- cosm####.b0.a####.com/FpNrSZqcfmM4GJar-1YA8JS4VCDo
- cosm####.b0.a####.com/FpVC-nbSilc19NN-zOG55y1tHFFi
- cosm####.b0.a####.com/FqFuFGrjwvFAuNqXDd6EiJtGExxh?imageMo####
- cosm####.b0.a####.com/FrY_N4gPKAF2x3jfHDt6SLejYUkb
- cosm####.b0.a####.com/FuDFajhRanm2JfV_Yicu5QFvMuD9
- cosm####.b0.a####.com/Fuse2HnAKz_iG0NHiv2ExUO4-K0Y?imageMo####
- cosm####.b0.a####.com/bbs/upload/FgCEBDx5mRM0XipS8_haiwx27pid?imageMo####
- cosm####.b0.a####.com/bbs/upload/FmdizkoQxzj4yfBUy76CZF7VLLfc?imageMo####
- cosm####.b0.a####.com/bbs/upload/FmqAmcpmQEgqcM-UPdGZHUnmWXB7?imageMo####
- cosm####.b0.a####.com/bbs/upload/Fny3qL-ozyLKKBCpSuGsLxiu4ObW?imageMo####
- cosm####.b0.a####.com/bbs/upload/FoyyBe5U_xI908CXHBWEGRUNvDcD?imageMo####
- cosm####.b0.a####.com/bbs/upload/FqKy0-yBwHUgXytIJQLMa9wKGKhz?imageMo####
- cosm####.b0.a####.com/bbs/upload/FrmUIBO8FFfo7pZgn3y39Zn0klP5?imageMo####
- cosm####.b0.a####.com/bbs/upload/FvBnQFhVpojFvYOhQUaWy203Lo8q?imageMo####
- cosm####.b0.a####.com/cosme/logo.png
- ip.ta####.com/service/getIpInfo.php?ip=####
- ti####.c####.l####.####.com/tdata_gbU702
- ti####.c####.l####.####.com/tdata_jYz574
- u####.umengc####.com/rest/api3.do?ttid=####&t=####&deviceId=####&imei=##...
- u####.umengc####.com/rest/api3.do?ttid=####&t=####&imei=####&appKey=####...
- a####.u####.com/app_logs
- api.s####.mob.com/conf4
- api.s####.mob.com/data2
- api.s####.mob.com/log4
- api.s####.mob.com/snsconf
- msg.umengc####.com/register
- oc.u####.com/check_config_update
- sdk.o####.p####.####.com/api.php?format=####&t=####
- t####.talking####.net/g/d
- /data/data/####/-1510074530
- /data/data/####/.imprint
- /data/data/####/.jiagu.ls
- /data/data/####/1958f09e85377a0e63146295806a464303895570b2a59de....0.tmp
- /data/data/####/2022218191
- /data/data/####/2060118002
- /data/data/####/45e0176ed57a5b27f16f6ad72cfb6bcc03b2d2981be08d7....0.tmp
- /data/data/####/AGOO_HOST.xml
- /data/data/####/Alvin2.xml
- /data/data/####/AppStore.xml
- /data/data/####/ContextData.xml
- /data/data/####/IndexDB.xml
- /data/data/####/PlayerUIApk.apk
- /data/data/####/TDtcagent.db
- /data/data/####/TDtcagent.db-journal
- /data/data/####/_appcode.xml
- /data/data/####/alarm-journal
- /data/data/####/analytics_agent_header_.xml
- /data/data/####/com.blueware.android.agent.v1_com.buykee.prince...up.xml
- /data/data/####/com.buykee.princessmakeup_preferences.xml
- /data/data/####/increment.db-journal
- /data/data/####/init.pid
- /data/data/####/journal.tmp
- /data/data/####/libjiagu.so
- /data/data/####/mobclick_agent_cached_com.buykee.princessmakeup7100
- /data/data/####/mobclick_agent_online_setting_com.buykee.prince...up.xml
- /data/data/####/multidex.version.xml
- /data/data/####/pref_longtime.xml
- /data/data/####/pref_shorttime.xml
- /data/data/####/pref_shorttime.xml.bak
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/share_sdk_0.xml
- /data/data/####/sharesdk.db-journal
- /data/data/####/td.lock
- /data/data/####/tdid.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/umeng_message_state.xml
- /data/data/####/webview.db-journal
- /data/media/####/.ba
- /data/media/####/.dk
- /data/media/####/.nomedia
- /data/media/####/.tcookieid
- /data/media/####/.test_princess_readonly
- /data/media/####/13i2f3arju6uy1k3msm3drsqs.0.tmp
- /data/media/####/1cfbvyku0q00g64mwywzvyi95.0.tmp
- /data/media/####/1heisbpy7ci59yfefzbli0trr.0.tmp
- /data/media/####/1ijf0hkmv5lzghokgmg2epw06.0.tmp
- /data/media/####/1kame6m5ibsq13tuwgf6ul2gu.0.tmp
- /data/media/####/1olrya2zchi51wbko7kd3f6dn.0.tmp
- /data/media/####/1vs8dmqediuraluoqnc2w1llr.0.tmp
- /data/media/####/241c9lzv7c4q1a9am6gv1e86w.0.tmp
- /data/media/####/2ddk2gov4jzzvyvi06cbljyz5.0.tmp
- /data/media/####/2drpsxqoef89p0m8hf7vrqt85.0.tmp
- /data/media/####/2tkjiu5w47m2yqfe45u3h9fwc.0.tmp
- /data/media/####/44th3euvza704niuwbcd97szo.0.tmp
- /data/media/####/4ajkfujl21rr6nyw2nlal7zg3.0.tmp
- /data/media/####/4kh4byyb1uo56jt5jyeythret.0.tmp
- /data/media/####/4svlo5d17dxuxdbc6notg2dwn.0.tmp
- /data/media/####/4vp01h1a6z6fq065ldq50jnwi.0.tmp
- /data/media/####/58wbmocdr7479wxfwpr0em22e.0.tmp
- /data/media/####/5k3rqwv69oe11kvp4uzr80poj.0.tmp
- /data/media/####/5qlytr8nkjlt0xdkyfk8n5vf0.0.tmp
- /data/media/####/6e7k8ei053imyudiwngd8gp2j.0.tmp
- /data/media/####/6ixj89hinrv2gqdiapo92n8m9.0.tmp
- /data/media/####/6uv8ik5ub4db20y1ecgrzqi8q.0.tmp
- /data/media/####/7e4u6y4b9aht3n0azly8loj3x.0.tmp
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/app.db
- /data/media/####/com.buykee.princessmakeup.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/i26tlipa196a991nmw9f7xq9.0.tmp
- /data/media/####/journal.tmp
- /data/media/####/sobtth425a2iqvff8mx9abtb.0.tmp
- libjiagu
- luajava
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS7Padding
- AES-ECB-NoPadding