Technical information
- Adware.Plague.1.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.0) th.pen####.com:80
- TCP(HTTP/1.1) c.appj####.com:80
- TCP(HTTP/1.1) adf####.b0.a####.com:80
- c.appj####.com
- s.pen####.com
- th.pen####.com
- adf####.b0.a####.com/1488270907362.jpg
- adf####.b0.a####.com/1489632550672.jpg
- adf####.b0.a####.com/1497405690002.jpg
- adf####.b0.a####.com/1501583532726.jpg
- adf####.b0.a####.com/1505285552647.jpg
- adf####.b0.a####.com/1516609995667.png
- adf####.b0.a####.com/1516609996839.jpg
- c.appj####.com/ad/splash/stats.html
- th.pen####.com/a
- th.pen####.com/b
- /data/data/####/.jg.ic
- /data/data/####/ad_show_time.xml
- /data/data/####/app_nexgclasses.jar
- /data/data/####/com_umeng__crash.cache
- /data/data/####/dbgjdr-journal
- /data/data/####/jg_app_update_settings_random.xml
- /data/data/####/libjiagu.so
- /data/data/####/mobclick_agent_header_com.nanoha.magicparticles.xml
- /data/data/####/mobclick_agent_state_com.nanoha.magicparticles.xml
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/scdqi
- /data/data/####/webview.db-journal
- /data/media/####/1488270907362.jpg.dat
- /data/media/####/1489632550672.jpg.dat
- /data/media/####/1497405690002.jpg.dat
- /data/media/####/1501583532726.jpg.dat
- /data/media/####/1505285552647.jpg.dat
- /data/media/####/1516609995667.png.dat
- /data/media/####/1516609996839.jpg.dat
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- libjiagu
- zctf
- DES-ECB-PKCS5Padding
- RSA