Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) 0a22####.cdn.uc####.####.cn:80
- TCP(HTTP/1.1) loc.map.b####.com:80
- TCP(HTTP/1.1) api.wh####.com:8080
- TCP(TLS/1.0) api.map.b####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- api.map.b####.com
- api.wh####.com
- h####.b####.com
- l####.tbs.qq.com
- loc.map.b####.com
- u####.wh####.com
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/banner/20170208091130619....
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/banner/20170208091251093....
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/banner/20170221163449232....
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/11wawadeshou2.png
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/13yiqilaitiaowu...
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/buaixitoudejiaj...
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/c2.png
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/h.png
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/s1.png
- 0a22####.cdn.uc####.####.cn/upload/PictureBook/cover/180/z2.png
- 0a22####.cdn.uc####.####.cn/upload/icons/avatars/2018/04/19/mp/201804191...
- 0a22####.cdn.uc####.####.cn/upload/icons/avatars/2018/12/18/mp/201812182...
- 0a22####.cdn.uc####.####.cn/upload/mathgame/banner/20160905164319129.png
- 0a22####.cdn.uc####.####.cn/upload/mathgame/banner/20160905164332228.png
- 0a22####.cdn.uc####.####.cn/upload/mathgame/coverimage/20161102172738432...
- 0a22####.cdn.uc####.####.cn/upload/mathgame/coverimage/20161102172752932...
- 0a22####.cdn.uc####.####.cn/upload/mathgame/coverimage/20161102172801610...
- 0a22####.cdn.uc####.####.cn/upload/mathgame/islandimage/2016090511183821...
- api.wh####.com:8080/web/VersionCheck.ashx?platform=####&ostype=####&vers...
- api.wh####.com:8080/web/service.asmx
- l####.tbs.qq.com/ajax?c=####&k=####
- loc.map.b####.com/sdk.php
- /data/data/####/.jg.ic
- /data/data/####/00a1f63fc247a295d0a06cad911550f583814537c6b23e3....0.tmp
- /data/data/####/09eb01dedba843ffbf8c6e8d5203bffebdbae4b32a800f6....0.tmp
- /data/data/####/1069dc2e7a417f488df8568518f88c87907b5fbfe5919ea....0.tmp
- /data/data/####/12404c229b7e0d236b033ea0c109a00aa7aeeb17fc27a69....0.tmp
- /data/data/####/1e6660080162390b6f66f0a459b9cc4128cdaf94e8ffd77....0.tmp
- /data/data/####/215f61b6122dc6c691aa0008dc31578b476f98b9e367c78....0.tmp
- /data/data/####/23596055b4f050239ae3e7179d87a9c347a4926d93f58d1....0.tmp
- /data/data/####/31d249667b3d1b20a540182c2a1a1ac24c7a49d9c3c4660....0.tmp
- /data/data/####/3d9345dae961bffdd644290b476cd36d9fd311ec1670beb....0.tmp
- /data/data/####/4f409696c0c636ca0c0e61d139806d94bda6099183f1452....0.tmp
- /data/data/####/57230385e6bb4b97977f71d3cdb6f37921ca25738873979....0.tmp
- /data/data/####/5c30b3174c83ed8e025d0741e309fb55fa56cf3250eac01....0.tmp
- /data/data/####/5da88608baff651ee36970bdc727bbda3a8edcb7bffa575....0.tmp
- /data/data/####/62db61ad90d489ca2be569a7d2cbda7842c09a89da4ff49....0.tmp
- /data/data/####/70c2bc38a25cccb6c4c760ff716407f71abdef6d4bad2d8....0.tmp
- /data/data/####/7a92eb045645f5a6b812fd73308ed951988200d4682b052....0.tmp
- /data/data/####/7cda8b50a96ce8f9ff57c6b8153820d31619da6185306ce....0.tmp
- /data/data/####/834cd0beb4e7b7b2260ede1fc802c624d859a2f312e93cb....0.tmp
- /data/data/####/8ab08ce99f251adee2ada3d1e3e0aa493a44971d3989df7....0.tmp
- /data/data/####/987b1d9b1c6567dd9f2bca2e1ef647ac38a9845574b3f06....0.tmp
- /data/data/####/9bf287bb0449ebeb562cc98e6252b55393d3ec5003240c7....0.tmp
- /data/data/####/9fdbc7425a0785198348a3ce1ee7aacb9bc68706855eea2....0.tmp
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1566842265278
- /data/data/####/a66409cdce870e2a3a80f1188cff0c29910d647395130db....0.tmp
- /data/data/####/ae001278cecf7c56a4d38c78c17575499e044636bbc5391....0.tmp
- /data/data/####/af8d5bf5da0fc4086fe4260b908cbc6a61aa8e3fb8297f8....0.tmp
- /data/data/####/af8d5bf5da0fc4086fe4260b908cbc6a61aa8e3fb8297f8...7438.0
- /data/data/####/authStatus_com.rjwh.dingdong.client;remote.xml
- /data/data/####/bd7180a3e73201263bffc88cce552ebc775e78820a6e57e....0.tmp
- /data/data/####/be43e1ee2018cea8f53fa5d431883b33be5dd7db42a1d63....0.tmp
- /data/data/####/cc90375b8ba19bcc52ef0f805cc3114208f162a32591947....0.tmp
- /data/data/####/core_info
- /data/data/####/d5e4c2826d00f8f6aefb8b096639cfd3d8dcdf665ed0b4e....0.tmp
- /data/data/####/db_ddbb_1-journal
- /data/data/####/f6b449ab4a5a0f740fe432979e3d40baf4ee60148f77082....0.tmp
- /data/data/####/firll.dat
- /data/data/####/journal.tmp
- /data/data/####/libcuid.so
- /data/data/####/libjiagu.so
- /data/data/####/multidex.version.xml
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/webview.db-journal
- /data/data/####/whrjwh.xml
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.timestamp
- /data/media/####/test.0
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- getprop ro.product.cpu.abi
- crash_analysis
- libjiagu
- locSDK7
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- AES-CBC-PKCS5Padding