Technical information
- Adware.Dowgin.14.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ads.phone####.so:80
- TCP(HTTP/1.1) cd.md.c####.####.net:80
- TCP(HTTP/1.1) ni.ei.ne####.cn:80
- ads.phone####.so
- cd.md.c####.cn
- mo####.b####.com
- mt####.go####.com
- ni.ei.ne####.cn
- ads.phone####.so/ads/sign.php?md5=####&uid=####&pn=####
- cd.md.c####.####.net/offer/20181024/201810241644966.apk
- cd.md.c####.####.net/offer/20181204/201812041054759.png
- cd.md.c####.####.net/offer/20190115/201901151110667.png
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/e97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/p97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/q97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/r97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/s97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/t97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/u97
- ni.ei.ne####.cn/ha1eltsaCtsohGlivEdetnuaHepacsE/6399/w97
- /data/data/####/Castle1_xzj_so_domRConfig17.sxx
- /data/data/####/Spank.swf
- /data/data/####/__pasys_remote_banner.tmp.jar
- /data/data/####/_mjtaircomxzjgameEscapeHauntedEvilGhostCastle1ahp.xml
- /data/data/####/_msaircomxzjgameEscapeHauntedEvilGhostCastle1ah_r.xml
- /data/data/####/air.com.xzj.game.EscapeHauntedEvilGhostCastle1a...ef.xml
- /data/data/####/application.xml
- /data/data/####/curl-ca-bundle.crt
- /data/data/####/extension.xml
- /data/data/####/fdg.fdtgsdtg.jikuyi.jar
- /data/data/####/javaTrustStore.tmp
- /data/data/####/lGhostCastle1_xzj_so_domR17.sxx
- /data/data/####/library.swf
- /data/data/####/ntedEvilGhostCastle1_xzj_so.sxx
- /data/data/####/rbmmgex1.0.0.xml
- /data/data/####/uhaircomxzjgameEscapeHauntedEvilGhostCastle1ahqs.xml
- /data/data/####/zsair.db
- /data/data/####/zsair.db-journal
- /data/media/####/7711009e4da87823c6cacf8058b2c319.tmp
- /data/media/####/7fc000b614430
- /data/media/####/adf62147507b6
- /data/media/####/pr.p
- /system/bin/cat /proc/cpuinfo
- /system/bin/cat /proc/meminfo
- /system/bin/cat /sys/devices/system/cpu/present
- chmod 777 /storage/emulated/0/download/irco//7711009e4da87823c6cacf8058b2c319.tmp
- libCore
- libstlport_shared
- DES
- DES