Technical information
- Adware.Dowgin.14.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) 4####.90.73.162:80
- TCP(HTTP/1.1) cd.md.c####.####.net:80
- TCP(HTTP/1.1) ni.ei.ne####.cn:80
- TCP(HTTP/1.1) m####.a####.com:80
- TCP(HTTP/1.1) api.336####.com:80
- TCP(HTTP/1.1) 4####.90.77.31:80
- TCP(HTTP/1.1) www.mba####.com:80
- a####.u####.com
- api.336####.com
- cd.md.c####.cn
- m####.a####.com
- ni.ei.ne####.cn
- www.mba####.com
- cd.md.c####.####.net/offer/20181024/201810241644966.apk
- cd.md.c####.####.net/offer/20181204/201812041054759.png
- cd.md.c####.####.net/offer/20190104/201901041528710.apk
- cd.md.c####.####.net/offer/20190115/201901151105265.png
- cd.md.c####.####.net/offer/20190115/201901151110667.png
- m####.a####.com/sdk-core-v40.js
- a####.u####.com/app_logs
- api.336####.com/mbstph.php
- ni.ei.ne####.cn/xzseton/54f5/e97
- ni.ei.ne####.cn/xzseton/54f5/p97
- ni.ei.ne####.cn/xzseton/54f5/q97
- ni.ei.ne####.cn/xzseton/54f5/r97
- ni.ei.ne####.cn/xzseton/54f5/s97
- ni.ei.ne####.cn/xzseton/54f5/t97
- ni.ei.ne####.cn/xzseton/54f5/u97
- ni.ei.ne####.cn/xzseton/54f5/w97
- www.mba####.com/mbappss.php
- /data/data/####/MBSTPH.xml
- /data/data/####/MbappSmartSystem.xml
- /data/data/####/_mjtcomcoconoteszxp.xml
- /data/data/####/_mscomcoconoteszx_r.xml
- /data/data/####/ads-505344409.jar
- /data/data/####/com.coco.noteszx_preferences.xml
- /data/data/####/cvgbdfh.vbnghj.cgbdfhgtdh.jar
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/http_0.0.0.0_0.localstorage-journal
- /data/data/####/index
- /data/data/####/mobclick_agent_header_com.coco.noteszx.xml
- /data/data/####/mobclick_agent_state_com.coco.noteszx.xml
- /data/data/####/note.db-journal
- /data/data/####/uhcomcoconoteszxqs.xml
- /data/data/####/vacomcoconoteszx_w.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/zscom.db
- /data/data/####/zscom.db-journal
- /data/media/####/18a33337edb53175e50608f9c982e6ba
- /data/media/####/2245023265ae4cf87d02c8b6ba991139
- /data/media/####/32acf101e4104
- /data/media/####/4b4b79ec1757b4cd3c759caf86e695c9
- /data/media/####/59188028a7daedd96d8000297dff3c80
- /data/media/####/7711009e4da87823c6cacf8058b2c319.tmp
- /data/media/####/7fc000b614430
- /data/media/####/869ba1c5a384587400eae679fb17d2ec.tmp
- /data/media/####/97a54ac260168a6803365199e5f95d34
- /data/media/####/adf62147507b6
- /data/media/####/bee2502e1488c5e455cf1cf5f2d16bfe
- /data/media/####/dee0351813adfa1d67f49db382f977a7
- /data/media/####/pr.p
- chmod 777 /storage/emulated/0/download/omco//7711009e4da87823c6cacf8058b2c319.tmp
- chmod 777 /storage/emulated/0/download/omco//869ba1c5a384587400eae679fb17d2ec.tmp
- DES
- AES-CBC-PKCS5Padding
- DES