Technical information
- Adware.Dowgin.14.origin
- Adware.Dowgin.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) cd.md.c####.####.net:80
- TCP(HTTP/1.1) appb####.com:80
- TCP(HTTP/1.1) gi.xi.g####.com:80
- TCP(TLS/1.0) ssl.google-####.com:443
- appb####.com
- cd.md.c####.cn
- gi.xi.g####.com
- ssl.google-####.com
- appb####.com/apps.xml
- appb####.com/apptags.xml
- appb####.com/promimg/birthdayphotoframewishes.png
- appb####.com/promimg/breakingnewsphotoframes125.png
- appb####.com/promimg/callername125.png
- appb####.com/promimg/changephotobackground.png
- appb####.com/promimg/coffemug125new.png
- appb####.com/promimg/customcollagemaker1125.png
- appb####.com/promimg/dpstatus125.png
- appb####.com/promimg/echomagicmirror1251.png
- appb####.com/promimg/feather125.png
- appb####.com/promimg/flashoncallnew.png
- appb####.com/promimg/friendscollage125.png
- appb####.com/promimg/ganeshchathurthiphotoframes125.png
- appb####.com/promimg/gardenphotoframe125.png
- appb####.com/promimg/happybirthdayphotoframes2.png
- appb####.com/promimg/honeymoon125.png
- appb####.com/promimg/horseicon125.png
- appb####.com/promimg/lionpf125.png
- appb####.com/promimg/locationtracker.png
- appb####.com/promimg/lovelyring125.png
- appb####.com/promimg/menweddingphotosuit125.png
- appb####.com/promimg/neonlivewallpaper.png
- appb####.com/promimg/nightphotoframes125.png
- appb####.com/promimg/periodtracker_125.png
- appb####.com/promimg/photogridmixer125.png
- appb####.com/promimg/scary125.png
- appb####.com/promimg/slowmotionvideomaker125.png
- appb####.com/promimg/snowfallphotoframes125.png
- appb####.com/promimg/squarephotomakermain125.png
- appb####.com/promimg/statusdownloder125.png
- appb####.com/promimg/usefultools.png
- appb####.com/promimg/waterfallv125.png
- appb####.com/promimg/womemtraditionaldresses.png
- appb####.com/promimg/womensareeicon125.png
- appb####.com/promimg/womenweddingphotosuit125.png
- cd.md.c####.####.net/offer/20171206/201712061752304.png
- cd.md.c####.####.net/offer/20181109/201811091511627.apk
- cd.md.c####.####.net/offer/20181204/201812041054103.png
- cd.md.c####.####.net/offer/20181204/201812041054759.png
- cd.md.c####.####.net/offer/20190425/201904251017382.png
- gi.xi.g####.com/vs/ggtc?appid=####
- gi.xi.g####.com/4dc5l
- gi.xi.g####.com/c5fek
- gi.xi.g####.com/ee46/gdc
- gi.xi.g####.com/ee46/h62
- gi.xi.g####.com/ee46/jc6
- gi.xi.g####.com/ee46/kc6
- gi.xi.g####.com/ee46/lcc
- gi.xi.g####.com/ee46/zee
- /data/data/####/1556868494229c.jar
- /data/data/####/19f0e8e.xml
- /data/data/####/8f715.xml
- /data/data/####/ApplicationCache.db-journal
- /data/data/####/_i1826265271.xml
- /data/data/####/_w1826265271.xml
- /data/data/####/ads217880012.jar
- /data/data/####/asfags.gght.sdgr.havf.jar
- /data/data/####/b4524737f9.xml
- /data/data/####/c2fc21f2.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f21ff5841.xml
- /data/data/####/gaClientId
- /data/data/####/google_analytics_v4.db-journal
- /data/data/####/index
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/076ac23
- /data/media/####/367b372
- /data/media/####/6e3bb96
- /data/media/####/fc000b6
- /data/media/####/mfz.d
- DES
- AES-CBC-PKCS5Padding
- DES