-
Notifications
You must be signed in to change notification settings - Fork 14
/
Copy path000203b866b09c3062599ccca98bd212ba0647a0031054d3d99c0be8fdde11e6.json
970 lines (970 loc) · 59.9 KB
/
000203b866b09c3062599ccca98bd212ba0647a0031054d3d99c0be8fdde11e6.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
{
"sha256": "000203b866b09c3062599ccca98bd212ba0647a0031054d3d99c0be8fdde11e6",
"droidbox": {
"dexclass": [
{
"path": "/data/app/com.yr.sx-1.apk",
"pid": 853,
"time": 0.314064,
"processname": "com.yr.sx",
"tid": 1073870640
},
{
"path": "/data/app/com.yr.sx-1.apk",
"pid": 891,
"time": 11.150545,
"processname": "com.snowfish.a.a.bg",
"tid": 1073870640
}
],
"recvnet": [
{
"data": "HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Fri, 29 Jan 2016 23:10:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 564\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\n\r\n<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body bgcolor=\"white\">\r\n<center><",
"tid": 706443960,
"time": 15.433764,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "count.lingte.cc"
},
{
"data": "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",
"tid": 705541080,
"time": 21.581376,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "sdk.wiipay.cn"
},
{
"data": "HTTP/1.1 200 OK\r\nServer: Tengine/2.1.0\r\nDate: Fri, 29 Jan 2016 23:10:09 GMT\r\nContent-Type: text/plain\r\nTransfer-Encoding: chunke\r\n\r\n640d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a566172793a204163636570742d456e636f64696e670d0a436f6e74656e742d456e636f64696e673a20677a69700d0a0d0a32650d0a1f8b0800000000000003ab56ca2c50b25250323432d2333431d1333436d633323653aae50200e608f9d81a0000000d0a",
"tid": 705770400,
"time": 11.92653,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "sdk.wiipay.cn"
},
{
"data": "HTTP/1.1 200 OK\r\nServer: Tengine\r\nDate: Fri, 29 Jan 2016 23:10:08 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 143\r\nConnection: close\r\nDPOOL_HEADER: tyr105\r\nSINA-LB:aGEuMTIxLmcyLnlmLmxiLnNpbmFub2RlLmNvbQ==\r\nSINA-TS:OThmMjk2Y2UgMCAwIDAgNSAwCg==\r\n\r\n{\"ret\":1,\"start\":-1,\"end\":-1,\"country\":\"\\u8377\\u5170\",\"province\":\"Noord-Holland\",\"city\":\"Amsterdam\",\"district\":\"\",\"isp\":\"\",\"type\":\"\",\"desc\":\"\"}",
"tid": 706443960,
"time": 9.939686,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "int.dpool.sina.com.cn"
},
{
"data": "0\r\n\r\nHTTP/1.1 400 Bad Request\r\nServer: Tengine/2.1.0\r\nDate: Fri, 29 Jan 2016 23:10:09 GMT\r\nContent-Type: text/html\r\nContent-Leng",
"tid": 705770400,
"time": 17.521477,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "sdk.wiipay.cn"
},
{
"data": "HTTP/1.1 200 OK\r\nServer: Tengine/2.1.0\r\nDate: Fri, 29 Jan 2016 23:10:17 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Enc\r\n\r\n",
"tid": 705541080,
"time": 19.203272,
"processname": "com.yr.sx",
"srcport": 80,
"pid": 853,
"srchost": "sdk.wiipay.cn"
}
],
"phonecalls": [],
"fileswritten": [
{
"data": "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",
"tid": 1073870640,
"time": 28.38189,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "7f454c4601010100000000000000000003002800010000000000000034000000600102000000000534002000070028001700160006000000340000003400000034000000e0000000e000000004000000040000000100000000000000000000000000000084e8010084e8010005000000001000000100000028ed010028fd010028fd0100e81200003562000006000000001000000200000014fd0100140d0200140d0200f8000000f8000000060000000400000051e574640000000000000000000000000000000000000000060000000000000001000070f0a90100f0a90100f0a90100980d0000980d0000040000000400000052e5746428ed010028fd010028fd0100d8120000d812000006000000080000000000000000000000000000000000000001000000000000000000000012000000100000000000000000000000120000001d00000048b3000000000000120007002a00000024b4000020000000120007003a000000d5700000c000000012000700480000000000000000000000120000004f00000000000000000000001200000054000000000000000000000012000000590000000000000000000000120000006000000088b701004200000011000a0065000000f4bc000008000000120007007c000000957100001c0000001200070085000000b1710000ec00000012000700930000000000000000000000",
"tid": 1073870640,
"time": 9.884122,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "19ca8ce2c0ffbce500c68fe219ca8ce2b8ffbce500c68fe219ca8ce2b0ffbce500c68fe219ca8ce2a8ffbce500c68fe219ca8ce2a0ffbce500c68fe219ca8ce298ffbce500c68fe219ca8ce290ffbce500c68fe219ca8ce288ffbce500c68fe219ca8ce280ffbce500c68fe219ca8ce278ffbce500c68fe219ca8ce270ffbce500c68fe219ca8ce268ffbce500c68fe219ca8ce260ffbce500c68fe219ca8ce258ffbce500c68fe219ca8ce250ffbce508209fe50010a0e302208fe074ffffea409f010004009fe500008fe073ffffea309f0100f0b587b003900e1c081c032104f032e90321041c301c04f09ce9cb17591ac90f6418a4000134201cfff7d6ee051e06d121487844fff7d6ee281cfff7daee221c281c0021fff7daee2c1c00222de000210591181c01e0b24207d0039f1b020130b95c01320b430328f5d10327391ab9408b40124902931227794409680023944601914022984203db029a3f213a410a4005a9ca5405aa9a5c0199063f8a5ce2540133042bedd1624604340023b242cedb07b0281c2370f0bdc0460100c09c010000e0101c0378421c002bfad101e0013001310b780370002bf9d17047f0b5cb179b0f5b189b105a00d31842180e1c511e0d7887b001903d3d69424d41911e0978033a12783d39484241413d3a6d1851424a41ad18dc1c022d03d09c1c032d00d01c1d201cfff758ee00900028",
"tid": 1073870640,
"time": 16.082075,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<string name=\"startTime\">1426266940700</string>\n<string name=\"channelCode\">200000</string>\n<string name=\"startTimeString\">2015-03-13 18:15:40</string>\n<string name=\"appId\">0632ca88c540d9fed56002796c721030</string>\n</map>\n",
"tid": 1073870640,
"time": 5.666903,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/wiipay.xml"
},
{
"data": "12000700670d0000059200007c00000012000700a20d0000819200002800000012000700e30d0000a992000060000000120007001f0e000009930000ac00000012000700560e000079ae0000f4000000120007009d0e0000b59300001c08000012000700d30e0000d19b00001000000012000700e70e0000d19b00001000000012000700fb0e0000e19b000010000000120007000f0f0000f80302001000000011000d00200f0000f19b00001200000012000700340f0000039c00001a000000220007006c0f00001d9c00000e000000220007009b0f00002d9c00001000000012000700af0f00003d9c00000c00000012000700ce0f0000041002000400000011001100d80f0000d1a200006c000000120007000d100000c5a70000b4000000120007005210000045a9000048010000120007008b100000c9aa00009c01000012000700b810000065ac0000cc00000012000700df1000006daf00007c0100001200070018110000e9b000005400000012000700641100000000000000000000120000006a11000000000000000000001200000072110000000000000000000012000000791100003db100005800000012000700b7110000000000000000000012000000bd110000000000000000000012000000c3110000000000000000000012000000ca110000000000000000000012000000d01100000000000000000000",
"tid": 1073870640,
"time": 10.581315,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "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",
"tid": 1073870640,
"time": 19.528566,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<string name=\"province\">Noord-Holland</string>\n<string name=\"channel\">sxmn_FE300578</string>\n<boolean name=\"first\" value=\"false\" />\n<string name=\"mac\">357242043237</string>\n</map>\n",
"tid": 706443960,
"time": 10.147367,
"processname": "com.yr.sx",
"dataleak": [
"TAINT_IMEI"
],
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/settings.xml"
},
{
"data": "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007400000004dd01000300000004dd010003000000000000000000000061000000d8e001000e000000d8e001000e000000e8e001000900000062000000f4e0010011000000f4e001001100000008e101000c0000007300000018e101000b00000024e101004600000008e101000c000000690000006ce101000c0000007ce1010031000000b0e101000d0000006f000000c0e101000c000000d0e101003100000004e201000d0000006400000014e201000d00000024e201003200000058e201000e0000007cdf01000b0000007cdf01000b0000000000000088df01000400000090df0100070000000700000098df010004000000a0df01000400000000000000a8df010006000000a8df01000600000008000000b0df01000b000000b0df01000b00000008000000bcdf010005000000bcdf01000500000008000000c4df01000a000000c4df01000a00000008000000d0df01000d000000d0df01000d00000000000000e0df010003000000e0df01000300000001000000e4df01000c000000f4df010008000000020000000000000000000000000000000000000000000000",
"tid": 1073870640,
"time": 46.176092,
"processname": "com.yr.sx",
"pid": 853,
"name": ""
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<string name=\"setchannelwithcodevalue\">sxmn_FE300578</string>\n<boolean name=\"exceptionanalysisflag\" value=\"true\" />\n</map>\n",
"tid": 1073870640,
"time": 9.465404,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/__Baidu_Stat_SDK_SendRem.xml"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<string name=\"setchannelwithcodevalue\">sxmn_FE300578</string>\n<boolean name=\"exceptionanalysisflag\" value=\"true\" />\n<boolean name=\"setchannelwithcode\" value=\"true\" />\n</map>\n",
"tid": 1073870640,
"time": 9.506961,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/__Baidu_Stat_SDK_SendRem.xml"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<long name=\"start_time\" value=\"1426266944651\" />\n</map>\n",
"tid": 1073870640,
"time": 9.577184,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/upay_pay.xml"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<long name=\"prefetchTime\" value=\"1426266940797\" />\n<string name=\"startTime\">1426266940700</string>\n<string name=\"startTimeString\">2015-03-13 18:15:40</string>\n<string name=\"appId\">0632ca88c540d9fed56002796c721030</string>\n<string name=\"channelCode\">200000</string>\n</map>\n",
"tid": 1073870640,
"time": 5.727807,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/wiipay.xml"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<boolean name=\"exceptionanalysisflag\" value=\"true\" />\n</map>\n",
"tid": 1073870640,
"time": 9.330553,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/__Baidu_Stat_SDK_SendRem.xml"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<long name=\"start_time\" value=\"1426266944651\" />\n<int name=\"update_enabled\" value=\"0\" />\n</map>\n",
"tid": 1073870640,
"time": 9.587271,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/upay_pay.xml"
},
{
"data": "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",
"tid": 1073870640,
"time": 10.892911,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "504b03040a0000080000556cb946000000000000000000000000090004004d4554412d494e462ffeca0000504b03040a0000080800546cb94671c4bf185900000067000000140000004d4554412d494e462f4d414e49464553542e4d46f34dcccb4c4b2d2ed10d4b2d2acecccfb35230d433e0e572cc4312712c484cce4855008a01252df48c79b99c8b52134b5253749d2aadc04206f14606ba4946660a1afe4589c939a90acef94505f945892540fd9abc5cbc5c00504b03040a00000808005c67b946a947769e040000000200000008000000434f4d502e56455233330500504b03040a0000080800556cb946dd4b393cd3940100cc7f03000b000000636c61737365732e646578849d077c54c5fbf567b62421045842111030092df4000141414251ba52420d202288460809127a176901044540400cbd187a557a952e22bd97d0420dbd26ff333367930bbfecfbe2e7eb79669ee93377eebdbb93a453e73ebe21152a8a492f0f17b99cebded2dabb827f2b5f72e7d17a4bdb84ba3aad5c7760b05d440b21fab408f517fc971371e3bc848edf2b85989b4f88e7d03d8142b4b00bd1b38a10dde12f1c2ec45da4993112694fdb44db7942e4df6d1305411028028a8332a002a8063e014d4004f80a4483be601018057e066bc001700c5c0249e019b0ff6d1359415ef01e0802a54008f8007c0cea82d5e02fb01dec05ff80",
"tid": 1073870640,
"time": 17.810375,
"processname": "com.snowfish.a.a.bg",
"pid": 891,
"name": "/data/data/com.yr.sx/app_Sonnenblume/res.apk.u"
},
{
"data": "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",
"tid": 1073870640,
"time": 57.067221,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/zhifu.zip"
},
{
"data": "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",
"tid": 1073870640,
"time": 10.085514,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/app_zhifulibs/libunicompurcore.so"
},
{
"data": "<?xml version='1.0' encoding='utf-8' standalone='yes' ?>\n<map>\n<long name=\"prefetchTime\" value=\"1426266940797\" />\n<string name=\"startTime\">1426266940700</string>\n<string name=\"startTimeString\">2015-03-13 18:15:40</string>\n<string name=\"appId\">0632ca88c540d9fed56002796c721030</string>\n<string name=\"channelCode\">200000</string>\n<long name=\"serviceStartTime\" value=\"1426266944154\" />\n</map>\n",
"tid": 1073870640,
"time": 9.072467,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/data/com.yr.sx/shared_prefs/wiipay.xml"
}
],
"dns": [
{
"hostname": "sdk.wiipay.cn",
"ip": "122.144.133.237"
},
{
"hostname": "int.dpool.sina.com.cn",
"ip": "180.149.136.219"
},
{
"hostname": "count.lingte.cc",
"ip": "122.226.102.99"
}
],
"cryptousage": [],
"filesread": [
{
"data": "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",
"tid": 1073870640,
"time": 6.797341,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "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",
"tid": 1073870640,
"time": 5.922621,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "504b050600000000bf00bf00743c00008db31d000000504b010214001400080808008639bb46983f92408c1700001f4100001400000000000000000000000000000000004d4554412d494e462f4d414e49464553542e4d46504b010214001400080808008739bb46c272b1db08180000984100000f00000000000000000000000000ce1700004d4554412d494e462f5a5a572e5346504b010214001400080808008739bb46efa3e94a0e040000ee0400001000000000000000000000000000133000004d4554412d494e462f5a5a572e525341504b01020a000a0000080000807cba461e2febb8de960100de9601001a000000000000000000000000005f3400006173736574732f536f6e6e656e626c756d652f7265732e62696e504b01020a000a0000080000807cba464e32740e65000000650000002e0000000000000000000000000075cb01006173736574732f536f6e6e656e626c756d652f7a795f636f6d6d6f6e5f636f6e6669675f6c6f63616c2e64617461504b01020a000a0000080000807cba46ee429bf03d0000003d000000310000000000000000000000000026cc01006173736574732f536f6e6e656e626c756d652f7a795f636f6d6d6f6e5f636f6e6669675f736e6f77666973682e64617461504b01021400140008080800807cba46853aa0b676e90000f80402002f00000000000000000000000000",
"tid": 1073870640,
"time": 2.63733,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "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",
"tid": 1073870640,
"time": 14.316858,
"processname": "com.snowfish.a.a.bg",
"pid": 891,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "MemTotal: 604776 kB\nMemFree: 344372 kB\nBuffers: 0 kB\nCached: 136200 kB\nSwapCached: 0 kB\nActive: 140352 kB\nInactive: 101496 kB\nActive(anon): 109316 kB\nInactive(anon): 0 kB\nActive(file): 31036 kB\nInactive(file): 101496 kB\nUnevictable: 0 kB\nMlocked: 0 kB\nSwapTotal: 0 kB\nSwapFree: 0 kB\nDirty: 0 kB\nWriteback: 0 kB\nAnonPages: 105660 kB\nMapped: 48916 kB\nSlab: 6188 kB\nSReclaimable: 1652 kB\nSUnreclaim: 4536 kB\nPageTables: 5248 kB\nNFS_Unstable: 0 kB\nBounce: 0 kB\nWritebackTmp: 0 kB\nCommitLimit: 302388 kB\nCommitted_AS: 2486016 kB\nVmallocTotal: 360448 kB\nVmallocUsed: 27704 kB\nVmallocChunk: 322564 kB\n",
"tid": 1073870640,
"time": 9.117645,
"processname": "com.yr.sx",
"pid": 853,
"name": "/proc/meminfo"
},
{
"data": "504b03040a0000080000556cb946000000000000000000000000090004004d4554412d494e462ffeca0000504b03040a0000080800546cb94671c4bf185900000067000000140000004d4554412d494e462f4d414e49464553542e4d46f34dcccb4c4b2d2ed10d4b2d2acecccfb35230d433e0e572cc4312712c484cce4855008a01252df48c79b99c8b52134b5253749d2aadc04206f14606ba4946660a1afe4589c939a90acef94505f945892540fd9abc5cbc5c00504b03040a00000808005c67b946a947769e040000000200000008000000434f4d502e56455233330500504b03040a0000080800556cb946dd4b393cd3940100cc7f03000b000000636c61737365732e646578849d077c54c5fbf567b62421045842111030092df4000141414251ba52420d202288460809127a176901044540400cbd187a557a952e22bd97d0420dbd26ff333367930bbfecfbe2e7eb79669ee93377eebdbb93a453e73ebe21152a8a492f0f17b99cebded2dabb827f2b5f72e7d17a4bdb84ba3aad5c7760b05d440b21fab408f517fc971371e3bc848edf2b85989b4f88e7d03d8142b4b00bd1b38a10dde12f1c2ec45da4993112694fdb44db7942e4df6d1305411028028a8332a002a8063e014d4004f80a4483be601018057e066bc001700c5c0249e019b0ff6d1359415ef01e0802a54008f8007c0cea82d5e02fb01dec05ff80",
"tid": 1073870640,
"time": 17.327344,
"processname": "com.snowfish.a.a.bg",
"pid": 891,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "0000ccd6ab8ac8d4fdd9ebe5d97081d4735f9b98792ebd781c22757e9731e5f48938daab75d72133236200cc799478ab3fddb2b9985836397a8e347466f2b145bf6e2b2d440d0596cb97a0e00719ab919725da8d7b67e6dd7707908b392fe1119b863ba8a597c8",
"tid": 1073870640,
"time": 8.997243,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "504b03040a0000080000556cb946000000000000000000000000090004004d4554412d494e462ffeca0000504b03040a0000080800546cb94671c4bf185900000067000000140000004d4554412d494e462f4d414e49464553542e4d46f34dcccb4c4b2d2ed10d4b2d2acecccfb35230d433e0e572cc4312712c484cce4855008a01252df48c79b99c8b52134b5253749d2aadc04206f14606ba4946660a1afe4589c939a90acef94505f945892540fd9abc5cbc5c00504b03040a00000808005c67b946a947769e040000000200000008000000434f4d502e56455233330500504b03040a0000080800556cb946dd4b393cd3940100cc7f03000b000000636c61737365732e646578849d077c54c5fbf567b62421045842111030092df4000141414251ba52420d202288460809127a176901044540400cbd187a557a952e22bd97d0420dbd26ff333367930bbfecfbe2e7eb79669ee93377eebdbb93a453e73ebe21152a8a492f0f17b99cebded2dabb827f2b5f72e7d17a4bdb84ba3aad5c7760b05d440b21fab408f517fc971371e3bc848edf2b85989b4f88e7d03d8142b4b00bd1b38a10dde12f1c2ec45da4993112694fdb44db7942e4df6d1305411028028a8332a002a8063e014d4004f80a4483be601018057e066bc001700c5c0249e019b0ff6d1359415ef01e0802a54008f8007c0cea82d5e02fb01dec05ff80",
"tid": 706203256,
"time": 20.934207,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "00000000000000000000000000000001 01 80 10 80 lo\nfe80000000000000505400fffe123456 02 40 20 80 eth0\n",
"tid": 1073870640,
"time": 5.406635,
"processname": "com.yr.sx",
"pid": 853,
"name": "/proc/853/net/if_inet6"
},
{
"data": "0ffc038e8133e002480437c07df01ce4dd8fb682e9e004c879c026de018120045407e1200e6c07ff0179d0264a8232a03ce80162c15030128c0793c16f602eb802ae819be03e78085e0079c8267c4036901b140001a0082803de0761a016a8031a8356e00b10097a824160149800a68115200914fd07f3007e02674122b80d",
"tid": 706203256,
"time": 37.815211,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "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",
"tid": 1073870640,
"time": 0.409745,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "00000000000000000000000000000001 01 80 10 80 lo\nfe80000000000000505400fffe123456 02 40 20 80 eth0\n",
"tid": 1073870640,
"time": 5.327149,
"processname": "com.yr.sx",
"pid": 853,
"name": "/proc/853/net/if_inet6"
},
{
"data": "504b03040a0000080000556cb946000000000000000000000000090004004d4554412d494e462ffeca0000504b03040a0000080800546cb94671c4bf185900000067000000140000004d4554412d494e462f4d414e49464553542e4d46f34dcccb4c4b2d2ed10d4b2d2acecccfb35230d433e0e572cc4312712c484cce4855008a01252df48c79b99c8b52134b5253749d2aadc04206f14606ba4946660a1afe4589c939a90acef94505f945892540fd9abc5cbc5c00504b03040a00000808005c67b946a947769e",
"tid": 706203256,
"time": 48.387376,
"processname": "com.yr.sx",
"pid": 853,
"name": ""
},
{
"data": "3\n",
"tid": 1073870640,
"time": 5.378176,
"processname": "com.yr.sx",
"pid": 853,
"name": "/sys/devices/virtual/net/sit0/ifindex"
},
{
"data": "00000000000000000000000000000001 01 80 10 80 lo\nfe80000000000000505400fffe123456 02 40 20 80 eth0\n",
"tid": 1073870640,
"time": 5.237328,
"processname": "com.yr.sx",
"pid": 853,
"name": "/proc/853/net/if_inet6"
},
{
"data": "2\n",
"tid": 1073870640,
"time": 5.29159,
"processname": "com.yr.sx",
"pid": 853,
"name": "/sys/devices/platform/smc91x.0/net/eth0/ifindex"
},
{
"data": "504b050600000000bf00bf00743c00008db31d000000504b010214001400080808008639bb46983f92408c1700001f4100001400000000000000000000000000000000004d4554412d494e462f4d414e49464553542e4d46504b010214001400080808008739bb46c272b1db08180000984100000f00000000000000000000000000ce1700004d4554412d494e462f5a5a572e5346504b010214001400080808008739bb46efa3e94a0e040000ee0400001000000000000000000000000000133000004d4554412d494e462f5a5a572e525341504b01020a000a0000080000807cba461e2febb8de960100de9601001a000000000000000000000000005f3400006173736574732f536f6e6e656e626c756d652f7265732e62696e504b01020a000a0000080000807cba464e32740e65000000650000002e0000000000000000000000000075cb01006173736574732f536f6e6e656e626c756d652f7a795f636f6d6d6f6e5f636f6e6669675f6c6f63616c2e64617461504b01020a000a0000080000807cba46ee429bf03d0000003d000000310000000000000000000000000026cc01006173736574732f536f6e6e656e626c756d652f7a795f636f6d6d6f6e5f636f6e6669675f736e6f77666973682e64617461504b01021400140008080800807cba46853aa0b676e90000f80402002f00000000000000000000000000",
"tid": 1073870640,
"time": 11.165442,
"processname": "com.snowfish.a.a.bg",
"pid": 891,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "\u0000\u0000",
"tid": 706203256,
"time": 16.599321,
"processname": "com.yr.sx",
"pid": 853,
"name": "/data/app/com.yr.sx-1.apk"
},
{
"data": "1\n",
"tid": 1073870640,
"time": 5.21768,
"processname": "com.yr.sx",
"pid": 853,
"name": "/sys/devices/virtual/net/lo/ifindex"
}
],
"sendsms": [],
"servicestart": [
{
"time": 5.816579,
"name": "com.bx.pay.WpaySmsService",
"pid": 853,
"processname": "com.yr.sx",
"tid": 1073870640
}
],
"sendnet": [
{
"destport": 80,
"data": "POST /cn/prefetch.do HTTP/1.1\r\nUser-Agent: wiipay.cn\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nHost: sdk.wiipay.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\nContent-Length: 814\r\n\r\nscreenHeight=480&sdkLoadVersion=10&model=SAMSUNG+GT-I9100&networkType=EPC.TMOBILE.COM&appId=0632ca88c540d9fed56002796c721030&packageName=com.yr.sx&tel=15555215554&iccid=89014103211118510720&versionCode=1&lac=0&startTime=1426266940700&paysdkName=5.4.4.stable&sdkLoadCode=201&deviceId=357242043237511&localIp=fe80%3A%3A5054%3Aff%3Afe12%3A3456%25eth0&sdk_int=16&os=android4.1.1&startTimeString=2015-03-13+18%3A15%3A40&channelCode=200000&paysdk=54&sdkChannelCode=100000&imei=89014103211118510720&user-agent=Mozilla%2F5.0+%28Linux%3B+U%3B+Android+4.1.1%3B+en-us%3B+SAMSUNG+GT-I9100+Build%2FJRO03R%29+AppleWebKit%2F534.30+%28KHTML%2C+like+Gecko%29+Version%2F4.0+Mobile+Safari%2F534.30&versionName=1.0&cid=0&screenWidth=320&sdkAppCode=201&manufacturer=unknown&brand=Android&imsi=310260000000000&sdkLoadChannelCode=100000&",
"tid": 705541080,
"time": 11.51044,
"processname": "com.yr.sx",
"dataleak": [
"TAINT_ICCID",
"TAINT_PHONE_NUMBER",
"TAINT_IMEI",
"TAINT_IMSI"
],
"pid": 853,
"desthost": "sdk.wiipay.cn"
},
{
"destport": 80,
"data": "GET /IsInterface.php?ri=sxmn_FE300578&op=install&mac=357242043237&vs=1.0&tm=1426266944474&key=16b478e0056a4595cefb3bc0ca57bad1&dq={\"ret\":1,\"start\":-1,\"end\":-1,\"country\":\"\\u8377\\u5170\",\"province\":\"Noord-Holland\",\"city\":\"Amsterdam\",\"district\":\"\",\"isp\":\"\",\"type\":\"\",\"desc\":\"\"}&sc=320.0*480.0&os=4.1.1&jrs=Android&ss=1&sd=0 HTTP/1.1\r\naccept: */*\r\nconnection: Keep-Alive\r\nuser-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)\r\nHost: count.lingte.cc\r\nAccept-Encoding: gzip\r\n\r\n",
"tid": 706443960,
"time": 11.047402,
"processname": "com.yr.sx",
"dataleak": [
"TAINT_IMEI"
],
"pid": 853,
"desthost": "count.lingte.cc"
},
{
"destport": 80,
"data": "POST /serverIP.do HTTP/1.1\r\nUser-Agent: wiipay.cn\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nHost: sdk.wiipay.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\nContent-Length: 93\r\n\r\npackageName=com.yr.sx&sdkChannelCode=100000&sdkAppCode=201&paysdk=54&paysdkName=5.4.4.stable&",
"tid": 705770400,
"time": 9.516596,
"processname": "com.yr.sx",
"pid": 853,
"desthost": "sdk.wiipay.cn"
},
{
"destport": 80,
"data": "GET /iplookup/iplookup.php?format=json HTTP/1.1\r\nUser-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.1; SAMSUNG GT-I9100 Build/JRO03R)\r\nHost: int.dpool.sina.com.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\n\r\n",
"tid": 706443960,
"time": 9.677048,
"processname": "com.yr.sx",
"pid": 853,
"desthost": "int.dpool.sina.com.cn"
}
],
"libraries": []
},
"cuckoo": {
"target": {
"file": {
"md5": "f9c8e3424a55fa5538960565f98b31df",
"sha512": "81f736f171d9dc5090cf232b33a451fb954ca09d3029e36bd8583fb64b6f63722837e1f25d047ed2e89e4ad8674ef36af4a871ee3aed53340f6029d08f45cbc7",
"sha256": "000203b866b09c3062599ccca98bd212ba0647a0031054d3d99c0be8fdde11e6",
"ssdeep": "49152:ZH7kJbKuiS/MvRPZkcjb8r7uvtktesBQa04sgGtJ:mJdiS/0DjA7c8GaV6J",
"crc32": "A9C81BCB",
"sha1": "0807fb1d396b8a11d2da0bb8dcdaa26e4cc8eb16",
"size": 1962007
},
"category": "file"
},
"network": {
"irc": [],
"domains": [
{
"domain": "sdk.wiipay.cn",
"ip": "122.144.133.230"
},
{
"domain": "int.dpool.sina.com.cn",
"ip": "180.149.136.219"
},
{
"domain": "count.lingte.cc",
"ip": "122.226.102.99"
}
],
"dns": [
{
"answers": [],
"request": "sdk.wiipay.cn",
"type": "A"
},
{
"answers": [
{
"type": "A",
"data": "122.144.133.237"
},
{
"type": "A",
"data": "122.144.133.236"
},
{
"type": "A",
"data": "122.144.133.230"
},
{
"type": "A",
"data": "122.144.133.235"
}
],
"request": "sdk.wiipay.cn",
"type": "A"
},
{
"answers": [],
"request": "int.dpool.sina.com.cn",
"type": "A"
},
{
"answers": [
{
"type": "A",
"data": "180.149.136.219"
}
],
"request": "int.dpool.sina.com.cn",
"type": "A"
},
{
"answers": [],
"request": "count.lingte.cc",
"type": "A"
},
{
"answers": [
{
"type": "A",
"data": "122.226.102.99"
}
],
"request": "count.lingte.cc",
"type": "A"
}
],
"hosts": [
"122.144.133.237",
"180.149.136.219",
"122.226.102.99"
],
"smtp": [],
"http": [
{
"port": 80,
"body": "",
"uri": "http://int.dpool.sina.com.cn/iplookup/iplookup.php?format=json",
"user-agent": "Dalvik/1.6.0 (Linux; U; Android 4.1.1; SAMSUNG GT-I9100 Build/JRO03R)",
"method": "GET",
"host": "int.dpool.sina.com.cn",
"version": "1.1",
"path": "/iplookup/iplookup.php?format=json",
"data": "GET /iplookup/iplookup.php?format=json HTTP/1.1\r\nUser-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.1; SAMSUNG GT-I9100 Build/JRO03R)\r\nHost: int.dpool.sina.com.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\n\r\n"
},
{
"port": 80,
"body": "packageName=com.yr.sx&sdkChannelCode=100000&sdkAppCode=201&paysdk=54&paysdkName=5.4.4.stable&",
"uri": "http://sdk.wiipay.cn/serverIP.do",
"user-agent": "wiipay.cn",
"method": "POST",
"host": "sdk.wiipay.cn",
"version": "1.1",
"path": "/serverIP.do",
"data": "POST /serverIP.do HTTP/1.1\r\nUser-Agent: wiipay.cn\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nHost: sdk.wiipay.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\nContent-Length: 93\r\n\r\npackageName=com.yr.sx&sdkChannelCode=100000&sdkAppCode=201&paysdk=54&paysdkName=5.4.4.stable&"
},
{
"port": 80,
"body": "",
"uri": "http://count.lingte.cc/IsInterface.php?ri=sxmn_FE300578&op=install&mac=357242043237&vs=1.0&tm=1426266944474&key=16b478e0056a4595cefb3bc0ca57bad1&dq={\"ret\":1,\"start\":-1,\"end\":-1,\"country\":\"\\u8377\\u5170\",\"province\":\"Noord-Holland\",\"city\":\"Amsterdam\",\"district\":\"\",\"isp\":\"\",\"type\":\"\",\"desc\":\"\"}&sc=320.0*480.0&os=4.1.1&jrs=Android&ss=1&sd=0",
"user-agent": "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)",
"method": "GET",
"host": "count.lingte.cc",
"version": "1.1",
"path": "/IsInterface.php?ri=sxmn_FE300578&op=install&mac=357242043237&vs=1.0&tm=1426266944474&key=16b478e0056a4595cefb3bc0ca57bad1&dq={\"ret\":1,\"start\":-1,\"end\":-1,\"country\":\"\\u8377\\u5170\",\"province\":\"Noord-Holland\",\"city\":\"Amsterdam\",\"district\":\"\",\"isp\":\"\",\"type\":\"\",\"desc\":\"\"}&sc=320.0*480.0&os=4.1.1&jrs=Android&ss=1&sd=0",
"data": "GET /IsInterface.php?ri=sxmn_FE300578&op=install&mac=357242043237&vs=1.0&tm=1426266944474&key=16b478e0056a4595cefb3bc0ca57bad1&dq={\"ret\":1,\"start\":-1,\"end\":-1,\"country\":\"\\u8377\\u5170\",\"province\":\"Noord-Holland\",\"city\":\"Amsterdam\",\"district\":\"\",\"isp\":\"\",\"type\":\"\",\"desc\":\"\"}&sc=320.0*480.0&os=4.1.1&jrs=Android&ss=1&sd=0 HTTP/1.1\r\naccept: */*\r\nconnection: Keep-Alive\r\nuser-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)\r\nHost: count.lingte.cc\r\nAccept-Encoding: gzip\r\n\r\n"
},
{
"port": 80,
"body": "screenHeight=480&sdkLoadVersion=10&model=SAMSUNG+GT-I9100&networkType=EPC.TMOBILE.COM&appId=0632ca88c540d9fed56002796c721030&packageName=com.yr.sx&tel=15555215554&iccid=89014103211118510720&versionCode=1&lac=0&startTime=1426266940700&paysdkName=5.4.4.stable&sdkLoadCode=201&deviceId=357242043237511&localIp=fe80%3A%3A5054%3Aff%3Afe12%3A3456%25eth0&sdk_int=16&os=android4.1.1&startTimeString=2015-03-13+18%3A15%3A40&channelCode=200000&paysdk=54&sdkChannelCode=100000&imei=89014103211118510720&user-agent=Mozilla%2F5.0+%28Linux%3B+U%3B+Android+4.1.1%3B+en-us%3B+SAMSUNG+GT-I9100+Build%2FJRO03R%29+AppleWebKit%2F534.30+%28KHTML%2C+like+Gecko%29+Version%2F4.0+Mobile+Safari%2F534.30&versionName=1.0&cid=0&screenWidth=320&sdkAppCode=201&manufacturer=unknown&brand=Android&imsi=310260000000000&sdkLoadChannelCode=100000&",
"uri": "http://sdk.wiipay.cn/cn/prefetch.do",
"user-agent": "wiipay.cn",
"method": "POST",
"host": "sdk.wiipay.cn",
"version": "1.1",
"path": "/cn/prefetch.do",
"data": "POST /cn/prefetch.do HTTP/1.1\r\nUser-Agent: wiipay.cn\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nHost: sdk.wiipay.cn\r\nConnection: Keep-Alive\r\nAccept-Encoding: gzip\r\nContent-Length: 814\r\n\r\nscreenHeight=480&sdkLoadVersion=10&model=SAMSUNG+GT-I9100&networkType=EPC.TMOBILE.COM&appId=0632ca88c540d9fed56002796c721030&packageName=com.yr.sx&tel=15555215554&iccid=89014103211118510720&versionCode=1&lac=0&startTime=1426266940700&paysdkName=5.4.4.stable&sdkLoadCode=201&deviceId=357242043237511&localIp=fe80%3A%3A5054%3Aff%3Afe12%3A3456%25eth0&sdk_int=16&os=android4.1.1&startTimeString=2015-03-13+18%3A15%3A40&channelCode=200000&paysdk=54&sdkChannelCode=100000&imei=89014103211118510720&user-agent=Mozilla%2F5.0+%28Linux%3B+U%3B+Android+4.1.1%3B+en-us%3B+SAMSUNG+GT-I9100+Build%2FJRO03R%29+AppleWebKit%2F534.30+%28KHTML%2C+like+Gecko%29+Version%2F4.0+Mobile+Safari%2F534.30&versionName=1.0&cid=0&screenWidth=320&sdkAppCode=201&manufacturer=unknown&brand=Android&imsi=310260000000000&sdkLoadChannelCode=100000&"
}
]
}
},
"androguard": {
"urls": [
"http://111.13.91.31:12000/feecenter/api/create_order",
"http://&domain/function/ping.jsp",
"http://121.52.218.66:8011/request_v2.php?",
"http://int.dpool.sina.com.cn/iplookup/iplookup.php?format=json",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTDetial&id=",
"http://$ip:10789/cmcc/g/online/s2sAutoChargeSMS?taskId=$taskId&pid=$pid&version=$version",
"http://117.135.131.209:808/baidurdo/noti_url.php",
"http://count.lingte.cc/IsInterface.php",
"http://$queryurl/$sid",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTListAll",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTListUp&typeid=",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTUpdate&terminalType=android&version=",
"http://link.yida558.com/update.php?ri=",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTFeedback&execType=update&body=",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTList&typeid=",
"http://121.52.218.66:8008/request_v2.php",
"http://$ip/normandie/first?cpparam=$cpparam&imei=$imei&imsi=$imsi&ctid=$ctid&cpid=$cpid",
"http://$ip/cmcc/mm/single/chargeSMS?pid=$pid&imei=$imei&imsi=$imsi&chargeId=$chargeId&payId=$payId&version=$version&channelId=$channelId",
"http://api.upay360.cn/api/",
"http://mobads.baidu.com/ads/pa/",
"http://link.kssgx.com/kb416.php?ri=",
"http://117.135.131.209:808/xiyuerdo/noti_url.php",
"http://down.upay360.cn/stat?pid=",
"http://down.upay360.cn/stat?",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTType",
"http://tipsdk.baidu.com",
"http://wap.cocospay.com/order/add/001081",
"http://$ip/cmcc/mm/online/s2sSubscribeX",
"http://api.upay360.cn/function/client_notify.jsp?cmd_key=$cmd_key&trade_id=$trade_id&mobile=$mobile&price=$price&result=$result&error=$error",
"http://111.13.47.76:81/open_gate/web_game_fee.php",
"http://ospd.mmarket.com/mmwlan/applySecCertForAPPThird",
"http://118.26.235.115:8080/rdo/services/rdo/shortNotify?channel=$channel&feeCode=$feeCode&schannel=$schannel",
"http://$ip/cmcc/g/single/s2sChargeSMS?pid=$pid&imsi=$imsi&imei=$imei®ist=0&version=$version&payId=$payId&chargeId=$chargeId&contentId=$contentId&channelId=$channelId",
"http://sdk.wiipay.cn",
"http://cdn.upay360.cn/pack.dat",
"http://wap.cmread.com",
"http://111.13.47.76:81/open_gate/web_game_callback.php",
"http://imgsx.lingte.cc:8080/MTProject/vidio?action=getVidio&sourceURL=",
"http://api.upay360.cn/function/modem_pool/log.jsp",
"http://sms2.upay360.com/geturl.php",
"http://121.52.218.66:8012/request_v2.php",
"http://121.52.218.66:8009/alipayto_v2.php",
"http://xxx",
"http://121.52.218.66:8009/alipayto_v2.php?",
"http://fee.aiyuedu.cn:22000/feecenter/api/ver_confirm",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTListSerch&title=",
"http://tz.hdys5.com/zhuanti/20130410/?sxmn",
"http://ospd.mmarket.com/trusted4",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTVodList",
"http://$ip/normandie/last?flag=$flag&id=$id",
"http://cdn.upay360.cn/upay_properties.json",
"http://$loginurl/$sid",
"http://$ip/cmcc/g/online/s2sAutoRegist?imei=$imei&imsi=$imsi&chargeId=$chargeId&pid=$pid&channelId=$channelId&userToken=$userToken&payId=$payId&version=$version",
"http://$ip/cmcc/mm/online/s2sAuthX",
"http://121.52.218.66:8011/request_v2.php",
"http://hmma.baidu.com/app.gif",
"http://imgsx.lingte.cc:8080/MTProject/MTContr?action=MTVodListUp&id=",
"http://pr.sppro.info:8887/sp?a=1",
"http://221.179.131.90/0903?http://111.13.47.76:81/open_gate/web_game_fee.php",
"http://m.kgame.com.cn/index.html",
"http://$ip/cmcc/mm/online/s2sLoginX",
"http://fee.aiyuedu.cn:22000/feecenter/api/create_order",
"http://notify.java.jpxx.org/index.jsp"
],
"functionalities": {
"imsi": [
{
"method": "<init>",
"class": "Lcom/upay/billing/UpayContext;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSubscriberId()Ljava/lang/String;"
},
{
"method": "getUser",
"class": "Lcom/upay/billing/utils/Util;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSubscriberId()Ljava/lang/String;"
},
{
"method": "onSuccess",
"class": "Lcom/upay/billing/utils/m;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSubscriberId()Ljava/lang/String;"
}
],
"runbinary": [
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/service/Service_BindApp;",
"code": "invoke-static Ljava/lang/Runtime;->getRuntime()Ljava/lang/Runtime;"
},
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/service/Service_BindApp;",
"code": "invoke-virtual v2, v3, Ljava/lang/Runtime;->exec(Ljava/lang/String;)Ljava/lang/Process;"
},
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/common/e;",
"code": "invoke-static Ljava/lang/Runtime;->getRuntime()Ljava/lang/Runtime;"
}
],
"iccid": [
{
"method": "<init>",
"class": "Lcom/upay/billing/UpayContext;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSimSerialNumber()Ljava/lang/String;"
},
{
"method": "getUser",
"class": "Lcom/upay/billing/utils/Util;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSimSerialNumber()Ljava/lang/String;"
},
{
"method": "onSuccess",
"class": "Lcom/upay/billing/utils/m;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getSimSerialNumber()Ljava/lang/String;"
}
],
"socket": [
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/a;",
"code": "invoke-virtual v0, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;"
},
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/common/b;",
"code": "invoke-virtual v0, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;"
},
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/common/e;",
"code": "invoke-virtual v0, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;"
}
],
"mcc": [
{
"method": "getOperator",
"class": "Lcom/baidu/mobstat/CooperService;",
"code": "invoke-virtual v2, Landroid/telephony/TelephonyManager;->getNetworkOperator()Ljava/lang/String;"
},
{
"method": "a",
"class": "Lcom/bx/pay/a/d;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getNetworkOperator()Ljava/lang/String;"
},
{
"method": "a",
"class": "Lcom/bx/pay/a/d;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getNetworkOperator()Ljava/lang/String;"
}
],
"SMS": [
{
"method": "onSuccess",
"class": "Lcom/upay/billing/utils/m;",
"code": "invoke-virtual/range v0 ... v5, Landroid/telephony/SmsManager;->sendTextMessage(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V"
},
{
"method": "a",
"class": "Lcom/bx/pay/a;",
"code": "invoke-virtual/range v0 ... v5, Landroid/telephony/SmsManager;->sendTextMessage(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Landroid/app/PendingIntent; Landroid/app/PendingIntent;)V"
}
],
"crypto": [
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/common/c;",
"code": "invoke-virtual v0, Ljava/security/MessageDigest;->digest()[B"
},
{
"method": "md5",
"class": "Lcom/upay/billing/utils/Util;",
"code": "invoke-virtual v0, Ljava/security/MessageDigest;->digest()[B"
},
{
"method": "getMd5",
"class": "Lcom/upay/billing/engine/dm_ddo/Main;",
"code": "invoke-virtual v0, Ljava/security/MessageDigest;->digest()[B"
}
],
"ssl": [
{
"method": "<clinit>",
"class": "Lcom/a/a/b/d/d;",
"code": "const-string v2, 'https'"
},
{
"method": "a",
"class": "Lcom/bx/pay/netx/core/c/b;",
"code": "const-string v0, 'https'"
},
{
"method": "b",
"class": "Lcom/bx/pay/utils/n;",
"code": "const-string v0, 'https://'"
}
],
"phonenumber": [
{
"method": "a",
"class": "Lcom/bx/pay/a/d;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getLine1Number()Ljava/lang/String;"
}
],
"dynamicbroadcastreceiver": [
{
"method": "windowAttached",
"class": "Landroid/support/v4/media/TransportMediatorJellybeanMR2;",
"code": "invoke-virtual v0, v1, v2, Landroid/content/Context;->registerReceiver(Landroid/content/BroadcastReceiver; Landroid/content/IntentFilter;)Landroid/content/Intent;"
},
{
"method": "windowDetached",
"class": "Landroid/support/v4/media/TransportMediatorJellybeanMR2;",
"code": "invoke-virtual v0, v1, Landroid/content/Context;->unregisterReceiver(Landroid/content/BroadcastReceiver;)V"
},
{
"method": "onCreate",
"class": "Lcom/upay/billing/UpayActivity;",
"code": "invoke-virtual v6, v0, v2, Lcom/upay/billing/UpayActivity;->registerReceiver(Landroid/content/BroadcastReceiver; Landroid/content/IntentFilter;)Landroid/content/Intent;"
}
],
"imei": [
{
"method": "a",
"class": "Lcom/yongrun/app/sxmn/common/e;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getDeviceId()Ljava/lang/String;"
},
{
"method": "<init>",
"class": "Lcom/upay/billing/UpayContext;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getDeviceId()Ljava/lang/String;"
},
{
"method": "getUser",
"class": "Lcom/upay/billing/utils/Util;",
"code": "invoke-virtual v0, Landroid/telephony/TelephonyManager;->getDeviceId()Ljava/lang/String;"
}
]
},
"cordova": null,
"permissions": [
"android.permission.CHANGE_NETWORK_STATE",
"android.permission.WRITE_APN_SETTINGS",
"android.permission.ACCESS_COARSE_LOCATION",
"android.permission.INTERNET",
"android.permission.CHANGE_CONFIGURATION",
"android.permission.ACCESS_FINE_LOCATION",
"android.permission.SEND_SMS",
"com.android.launcher.permission.INSTALL_SHORTCUT",
"android.permission.WRITE_SMS",
"android.permission.ACCESS_NETWORK_STATE",
"android.permission.GET_TASKS",
"android.permission.WRITE_SECURE_SETTINGS",
"android.permission.WRITE_EXTERNAL_STORAGE",
"android.permission.READ_EXTERNAL_STORAGE",
"android.permission.RECEIVE_BOOT_COMPLETED",
"android.permission.INSTALL_PACKAGES",
"android.permission.WRITE_SETTINGS",
"android.permission.READ_PHONE_STATE",
"android.permission.READ_SMS",
"android.permission.VIBRATE",
"android.permission.SYSTEM_ALERT_WINDOW",
"android.permission.ACCESS_WIFI_STATE",
"android.permission.RECEIVE_MMS",
"android.permission.WAKE_LOCK",
"android.permission.CHANGE_WIFI_STATE",
"android.permission.RECEIVE_SMS",
"android.permission.MODIFY_PHONE_STATE",
"android.permission.MOUNT_UNMOUNT_FILESYSTEMS",
"android.permission.RESTART_PACKAGES"
],
"services": [
"com.yongrun.app.sxmn.service.Service_SaveBrief2DB",
"com.yongrun.app.sxmn.service.Service_Update",
"com.upay.billing.sdk.LocalService",
"com.snowfish.a.a.s.ABGSvc",
"com.bx.pay.WpaySmsService",
"com.yongrun.app.sxmn.service.Service_BindApp",
"com.zhifu.service.AppService"
],
"displayed_version": "1.0",
"dexes": {
"classes": {
"sha256": "ff0a67aaba82e82b582fa1c572dd1354b7d9a22c1cfbc4edf5b422ad237b71ac",
"ssdeep": "49152:v/obdzqncVRaz8brfZn1jchAbqORYLqqf9FOTxNfYUm7IfjwJ7:vQk"
}
},
"min_sdk_version": 9,
"certificate": {
"not_before": "May 26 07:21:00 2015 GMT",
"serial": "21076D04",
"subjectDN": "/C=y/ST=y/L=y/O=y/OU=y/CN=y",
"issuerDN": "/C=y/ST=y/L=y/O=y/OU=y/CN=y",
"not_after": "Feb 26 07:21:00 2070 GMT",
"sha1": "535DD053F5F762E89946C4369910B20E333652FB"
},
"max_sdk_version": null,
"filters": [
"android.intent.action.ACTION_SHUTDOWN",
"android.intent.action.PACKAGE_ADDED",
"android.intent.action.MEDIA_MOUNTED",
"android.net.wifi.STATE_CHANGE",
"android.intent.action.MEDIA_EJECT",
"android.net.wifi.WIFI_STATE_CHANGED",
"android.intent.action.SERVICE_STATE",
"android.bluetooth.adapter.action.STATE_CHANGED",
"android.provider.Telephony.SMS_DELIVER",
"android.provider.Telephony.SMS_RECEIVED",
"android.provider.Telephony.SMS_RECEIVED2",
"com.zhifu.action.TASK",
"android.net.conn.CONNECTIVITY_CHANGE",
"android.intent.action.SIM_STATE_CHANGED",
"android.intent.action.BOOT_COMPLETED",
"LOCATION_SERVICE",
"android.intent.action.ANY_DATA_STATE",
"android.intent.action.MAIN",
"com.zhifu.action.SMS_SEND",
"android.intent.action.USER_PRESENT"
],
"new_permissions": [],
"providers": [],
"package_name": "com.yr.sx",
"app_name": "成人快播",
"version_code": "1",
"libraries": [],
"target_sdk_version": 19,
"api_key": {
"com::snowfish::sdk::version": "1",
"com::snowfish::appid": "{DEB07441-7F3C6194}"
},
"activities": [
"com.yongrun.app.sxmn.ui.Activity_Detail",
"com.payeco.android.plugin.PayecoRiskControlActivity",
"com.yongrun.app.sxmn.ui.Activity_Classify",
"com.yongrun.app.sxmn.ui.Activity_BootImg",
"com.payeco.android.plugin.PayecoWebViewActivity",
"com.upay.billing.engine.alipay.AlipayActivity",
"com.upay.billing.UpayActivity",
"com.payeco.android.plugin.PayecoPluginLoadingActivity",
"com.yongrun.app.sxmn.ui.Activity_Boot",
"com.yongrun.app.sxmn.ui.Activity_Main",
"com.example.sdktest.MainActivity",
"com.yongrun.app.sxmn.ui.Activity_Deal",
"com.yongrun.app.sxmn.ui.Activity_Player",
"com.upay.billing.engine.tenpay.TenpayActivity",
"com.yongrun.app.sxmn.ui.Activity_Setting",
"com.payeco.android.plugin.PayecoPayResultActivity",
"com.yongrun.app.sxmn.ui.Activity_Collect",
"com.yongrun.app.sxmn.ui.Activity_Suggest",
"com.payeco.android.plugin.PayecoOrderDetailActivity",
"com.yongrun.app.sxmn.ui.Activity_Search",
"com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity",
"com.snowfish.a.a.s.PA",
"com.yongrun.app.sxmn.ui.Activity_About"
],
"main_activity": "com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity",
"receivers": [
"com.bx.pay.SmsListener",
"com.snowfish.a.a.s.ABFlt",
"com.zhifu.receiver.AppReceiver",
"com.yongrun.app.sxmn.broadcastreceiver.AppAddReceiver"
],
"signature_name": "META-INF/ZZW.RSA"
},
"status": "analyzed"
}