Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) ti####.c####.l####.####.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) t####.c####.q####.####.com:80
- TCP(HTTP/1.1) a.appj####.com:80
- TCP(HTTP/1.1) oss.newairc####.com:80
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) h5.newairc####.com:80
- TCP(TLS/1.0) oss.newairc####.com:443
- TCP(TLS/1.0) s####.ml####.cc:443
- TCP(TLS/1.0) h5.newairc####.com:443
- TCP c####.g####.ig####.com:5225
- TCP sdk.o####.t####.####.com:5224
- TCP c####.g####.ig####.com:5227
- 7j####.c####.z0.####.com
- a####.u####.com
- a.appj####.com
- c####.g####.ig####.com
- c####.g####.ig####.com
- c-h####.g####.com
- h5.newairc####.com
- img.newairc####.com
- l####.tbs.qq.com
- mt####.go####.com
- oss.newairc####.com
- s####.ml####.cc
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- h5.newairc####.com/api/getArticleAdv?sid=####&cid=####&v=####
- h5.newairc####.com/api/getComments?sid=####&rootID=####&sourceType=####&...
- oss.newairc####.com/zsrc/article/201611/23/c766712.json
- oss.newairc####.com/zsrc/pic/201611/23/497fb7e3-3a04-4dbe-ad11-f2f2f6058...
- oss.newairc####.com/zsrc/pic/201611/23/93f51b74-91c7-4cd4-979c-2f0d836a1...
- oss.newairc####.com/zsrc/pic/201611/23/9a85ce42-70d2-4da9-8424-057a6bfd8...
- oss.newairc####.com/zsrc/pic/201612/29/4e8a9df0-e2f6-42ee-80aa-5e5a0b7ab...
- oss.newairc####.com/zsrc/pic/201612/29/63c61c26-e171-4d97-9980-b95bae7b1...
- oss.newairc####.com/zsrc/pic/201612/29/6c327cfb-2500-4991-a937-344e53072...
- oss.newairc####.com/zsrc/pic/201612/29/cc16c0da-2142-4cb5-9f10-89ea20207...
- oss.newairc####.com/zsrc/pic/201612/29/d7d29b20-910d-4b97-b7c6-3b6ea3e8c...
- t####.c####.q####.####.com/tdata_Soq141
- t####.c####.q####.####.com/tdata_vxj811
- ti####.c####.l####.####.com/config/hz-hzv3.conf
- a####.u####.com/app_logs
- a.appj####.com/ad-service/ad/mark
- c-h####.g####.com/api.php?format=####&t=####
- h5.newairc####.com/api/event
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/data/####/-1312716470
- /data/data/####/-1383973026
- /data/data/####/-1383973027
- /data/data/####/-464661836
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/.log.lock
- /data/data/####/.log.ls
- /data/data/####/12ddf25a48a6ce6783388639a80ab885e018f28a2f712a8....0.tmp
- /data/data/####/1389023919
- /data/data/####/1695857311
- /data/data/####/1864066650
- /data/data/####/1e60aa0bbbdb0cb65fe5ae6f9c20284129e73c8ad9d8404....0.tmp
- /data/data/####/2014204107
- /data/data/####/2d372fd1a39f537c55967deeac9ac24eb70108933e68ad8....0.tmp
- /data/data/####/312191325
- /data/data/####/337525857
- /data/data/####/343211132
- /data/data/####/36c8aed992dc9abc1df1248c09d8d1a6b0b92d46c77348f....0.tmp
- /data/data/####/386967948
- /data/data/####/49
- /data/data/####/492142369
- /data/data/####/57b659e3a4498a04fb4aa7022e33ee9992f89aef7e84e95....0.tmp
- /data/data/####/722549896
- /data/data/####/766712_article.js
- /data/data/####/7f2162ecb334f0dab0fed599dc075bcbfaf167ca1aad8e6....0.tmp
- /data/data/####/8754ec8b2c1c48dac56687742b5ac118259f2a6b1df2b88....0.tmp
- /data/data/####/881639fcee63c377385fd35750b7bc6d53c623c5244208d....0.tmp
- /data/data/####/89149bffe800b46172af03336e84c9d9aaf4fb84ab5d20f....0.tmp
- /data/data/####/97b03aded36e909c857e91c3f0b92289bc1bfd16b70ae42....0.tmp
- /data/data/####/9cf9c62f736c5e5d280fe6e3bfbb30925db977e81db76d9....0.tmp
- /data/data/####/FZLTXHK-GBK_YS.ttf
- /data/data/####/QQ_3x.png
- /data/data/####/a2eccd9c4b09cf45e5caa7ac56d711157027c4344a3dda6....0.tmp
- /data/data/####/amazeui.min.css
- /data/data/####/amazeui.min.js
- /data/data/####/angular1.4.6.min.js
- /data/data/####/article.js
- /data/data/####/b2d25286bea709709aedd2e9b26c0c2c1739b98ab176850....0.tmp
- /data/data/####/base.css
- /data/data/####/be7e1cdae57c21651ff1bac982db07defecd34b8208db5d....0.tmp
- /data/data/####/c832089967307952d57c1d3e9414473b8d4144470700d97....0.tmp
- /data/data/####/cacfaf9d05c36b8c8963d4fc100d9b3aa05cdfa90e3804b...92b5.0
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/columnId.xml
- /data/data/####/core_info
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/db_founder0-journal
- /data/data/####/debug.conf
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f0b1ac272e9e37a22938299eddda71c6d33b27a7c2719e3....0.tmp
- /data/data/####/f55d938e4f902f68ac85f72bd7dba7287269d53ac04f4e4....0.tmp
- /data/data/####/f77371221e4c2b477d7d378efbaa8965f035e5e306c0c3f....0.tmp
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/file__0.localstorage-journal
- /data/data/####/fontawesome-webfont.ttf
- /data/data/####/getui_sp.xml
- /data/data/####/great_button.png
- /data/data/####/great_cancel_button.png
- /data/data/####/helpMsg.xml
- /data/data/####/icon-images.png
- /data/data/####/icon_audio_play.png
- /data/data/####/icon_file.png
- /data/data/####/icon_file_down.png
- /data/data/####/icon_meta_voice.png
- /data/data/####/icon_praise.png
- /data/data/####/icon_praiseStar.png
- /data/data/####/icon_selector_normal.png
- /data/data/####/icon_selector_press.png
- /data/data/####/index
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/journal.tmp
- /data/data/####/jquery.min2.2.0.js
- /data/data/####/js.combine.min.js
- /data/data/####/libjiagu.so
- /data/data/####/loading.png
- /data/data/####/multidex.version.xml
- /data/data/####/mwsdk_analytics.db-journal
- /data/data/####/news_detail.html
- /data/data/####/persistent_data.xml
- /data/data/####/persistent_data.xml.bak
- /data/data/####/play.png
- /data/data/####/push.pid
- /data/data/####/pushext.db-journal
- /data/data/####/pushsdk.db-journal
- /data/data/####/reader.db-journal
- /data/data/####/run.pid
- /data/data/####/sanjiaoxing.png
- /data/data/####/shareTimeline_3x.png
- /data/data/####/sina_3x.png
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/tdata_Soq141
- /data/data/####/tdata_Soq141.jar
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/video.png
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wx_3x.png
- /data/media/####/.nomedia
- /data/media/####/app.db
- /data/media/####/com.founder.ruichang.bin
- /data/media/####/com.founder.ruichang.db
- /data/media/####/com.getui.sdk.deviceId.db
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/journal.tmp
- /data/media/####/localTemplate.zip
- /data/media/####/tbslog.txt
- /data/media/####/tdata_Soq141
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- getprop ro.product.cpu.abi
- getuiext2
- libjiagu
- AES-CBC-PKCS7Padding
- RSA-ECB-NoPadding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS7Padding