Technical information
- Adware.Dowgin.14.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) un####.50####.org:80
- TCP(HTTP/1.1) t####.2####.com:80
- TCP(HTTP/1.1) a####.pos.b####.com:80
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) gg####.2####.com.####.net:80
- TCP(HTTP/1.1) b####.s####.com.cn:80
- TCP(HTTP/1.1) c####.baidust####.com.####.com:80
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) 1####.217.168.234:443
- TCP(TLS/1.0) md####.google####.com:443
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) android####.go####.com:443
- TCP(TLS/1.0) 1####.250.179.174:443
- TCP(TLS/1.0) hm.b####.com:443
- TCP(TLS/1.2) 1####.250.179.174:443
- TCP(TLS/1.2) p####.google####.com:443
- TCP(TLS/1.2) 1####.217.17.35:443
- UDP s####.serv####.moz####.com:3478
- a####.pos.b####.com
- android####.go####.com
- b####.s####.com.cn
- c####.baidust####.com
- gg####.2####.com
- gi.xi.g####.####.8
- gi.xi.g####.com
- hm.b####.com
- instant####.google####.com
- md####.google####.com
- p####.google####.com
- pos.b####.com
- s####.serv####.moz####.com
- t####.2####.com
- un####.50####.org
- a####.pos.b####.com/abdr?data=####&_=####
- b####.s####.com.cn/s/blog_15e2e8ff70102wnoz.html
- c####.baidust####.com.####.com/cpro/ui/ab.min.js
- c####.baidust####.com.####.com/cpro/ui/cm.js
- c####.baidust####.com.####.com/cpro/ui/pr.js
- gg####.2####.com.####.net/avnewnukb.js
- gg####.2####.com.####.net/dyqhxgnqh.js
- gg####.2####.com.####.net/hculbkldr.js
- gg####.2####.com.####.net/idvmevcve.js
- gg####.2####.com.####.net/jewndmtda.js
- gg####.2####.com.####.net/jewndmtwf.js
- gg####.2####.com.####.net/kfxoenogc.js
- gg####.2####.com.####.net/vrtxatp.js
- hm.b####.com/hm.js?dd00c5a####
- t####.2####.com/css/m/chengyu/chengyu.css
- t####.2####.com/css/m/global/v2/global.css
- t####.2####.com/images/m/chengyu/logoTit.png
- t####.2####.com/images/m/global/logo.png
- t####.2####.com/images/m/global/prev_new.png
- t####.2####.com/images/m/global/toolsicon/26.png
- t####.2####.com/images/m/global/toolsicon/27.png
- t####.2####.com/images/m/global/toolsicon/29.png
- t####.2####.com/images/m/global/toolsicon/30.png
- t####.2####.com/js/common/function.js
- t####.2####.com/js/jquery-1.8.3.js
- t####.2####.com/js/m/android.function.js
- t####.2####.com/js/m/bottom.float.adver.js?ver=####
- t####.2####.com/js/m/clickCount.js
- t####.2####.com/js/m/common/top_information.js?ver=####
- t####.2####.com/js/m/detector.js
- t####.2####.com/js/m/footer-new.js
- t####.2####.com/js/m/header-new.js
- t####.2####.com/js/m/wsq.js
- t####.2####.com/js/m/zepto.min.js
- t####.2####.com/m/chengyu/
- un####.50####.org/js/meirim
- un####.50####.org/js/sycxtj
- un####.50####.org/web/meirim?uId2=####&r=####&fBL=####
- un####.50####.org/web/sycxtj?uId2=####&r=####&fBL=####
- a####.pos.b####.com/abdr
- /data/data/####/1618917933301b.dex
- /data/data/####/1618917933301b.dex.flock (deleted)
- /data/data/####/1618917933301b.jar
- /data/data/####/1618917935263b.dex
- /data/data/####/1618917935263b.dex.flock (deleted)
- /data/data/####/1618917935263b.jar
- /data/data/####/173d02280500b99d_0
- /data/data/####/23789037c3ed9d6e_0
- /data/data/####/24b5da41c70e2e11_0
- /data/data/####/38583ddd233a244b_0
- /data/data/####/3e275b42b72f325c_0
- /data/data/####/3e275b42b72f325c_1
- /data/data/####/40ae583a.xml
- /data/data/####/40ae583a.xml.bak
- /data/data/####/426094b0bc6b3f39_0
- /data/data/####/426094b0bc6b3f39_1
- /data/data/####/50077d0fa1c968e2_0
- /data/data/####/50077d0fa1c968e2_1
- /data/data/####/57dea12b4d6ce09c_0
- /data/data/####/5e19fe7e0782bd94_0
- /data/data/####/60ce95c49777fd8d_0
- /data/data/####/675c9e9399f3fc1a_0
- /data/data/####/675c9e9399f3fc1a_1
- /data/data/####/729ec1d407087de7_0
- /data/data/####/778eb7275b9a27fb_0
- /data/data/####/77c3435b0d23506d_0
- /data/data/####/77c3435b0d23506d_1
- /data/data/####/826c0594c7787916_0
- /data/data/####/881ae6ab40ac7b29_0
- /data/data/####/881ae6ab40ac7b29_1
- /data/data/####/8aa703db9310a941_0
- /data/data/####/8aa703db9310a941_1
- /data/data/####/8cadcfec881b0693_0
- /data/data/####/8cadcfec881b0693_1
- /data/data/####/93d9f4a766baeea0_0
- /data/data/####/93d9f4a766baeea0_1
- /data/data/####/94e4584ad8dc4ea4_0
- /data/data/####/9a1227105f9a1a9b_0
- /data/data/####/9a1227105f9a1a9b_1
- /data/data/####/9af2f6120ce2ab01_0
- /data/data/####/Cookies-journal
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/__pasys_remote_banner.dex
- /data/data/####/__pasys_remote_banner.dex.flock (deleted)
- /data/data/####/__pasys_remote_banner.jar
- /data/data/####/ab880cfefbdbd00b_0
- /data/data/####/ab880cfefbdbd00b_1
- /data/data/####/b09ec171b79c92e1_0
- /data/data/####/b5d5fd73ed1fcf72_0
- /data/data/####/b5d5fd73ed1fcf72_1
- /data/data/####/b73383d21d71b13a_0
- /data/data/####/b96745e239dbd282_0
- /data/data/####/b96745e239dbd282_1
- /data/data/####/bd1307b6ef771d8d_0
- /data/data/####/c8aefdba30be3381_0
- /data/data/####/c8aefdba30be3381_1
- /data/data/####/cf2ea373f09e10e8_0
- /data/data/####/cf2ea373f09e10e8_1
- /data/data/####/d124804057d37499_0
- /data/data/####/d124804057d37499_1
- /data/data/####/d9e34c106ebb8ca2_0
- /data/data/####/d9e34c106ebb8ca2_1
- /data/data/####/dsafno.eniss.jsaa_preferences.xml
- /data/data/####/e9a0ddde75caee11_0
- /data/data/####/e9a0ddde75caee11_1
- /data/data/####/eb92e765f70e7dc1_0
- /data/data/####/f2968d6522117aaf_0
- /data/data/####/f2968d6522117aaf_1
- /data/data/####/f34cb053e8475474_0
- /data/data/####/f34cb053e8475474_1
- /data/data/####/f4bf0e9c095e5370_0
- /data/data/####/f4bf0e9c095e5370_1
- /data/data/####/f7590cbae11be3a9_0
- /data/data/####/fe26dee0ef4b7d5a_0
- /data/data/####/http_tools.2345.com_0.localstorage-journal
- /data/data/####/index
- /data/data/####/metrics_guid
- /data/data/####/the-real-index
- /data/misc/####/primary.prof
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86_64 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86_64 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/1618917933301b.jar --oat-fd=47 --oat-location=/data/user/0/<Package>/files/1618917933301b.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86_64 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86_64 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/1618917935263b.jar --oat-fd=34 --oat-location=/data/user/0/<Package>/files/1618917935263b.dex --compiler-filter=speed
- /system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86_64 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86_64 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/__pasys_remote_banner.jar --oat-fd=76 --oat-location=/data/user/0/<Package>/files/__pasys_remote_banner.dex --compiler-filter=speed
- DES