Technical information
- Adware.Dowgin.3.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) qer####.jp:80
- TCP(HTTP/1.1) googl####.g.doublec####.net:80
- TCP(HTTP/1.1) cd.md.c####.####.net:80
- TCP(HTTP/1.1) app.w####.cn:80
- TCP(HTTP/1.1) a.m.15####.cn:80
- TCP(TLS/1.0) www.game####.net:443
- TCP(TLS/1.0) ssl.google-####.com:443
- TCP(TLS/1.0) googl####.g.doublec####.net:443
- a.m.15####.cn
- ad1.n####.netfk
- ad3.n####.netfk
- app.w####.cn
- cd.md.c####.cn
- googl####.g.doublec####.net
- qer####.jp
- ssl.google-####.com
- www.game####.net
- app.w####.cn/action/account/getinfo?app_id=####&udid=####&imsi=####&net=...
- app.w####.cn/action/connect/active?app_id=####&udid=####&imsi=####&net=#...
- cd.md.c####.####.net/offer/20171206/201712061752304.png
- cd.md.c####.####.net/offer/20181204/201812041054103.png
- cd.md.c####.####.net/offer/20181204/201812041054759.png
- googl####.g.doublec####.net/mads/static/mad/sdk/native/sdk-core-v40-load...
- googl####.g.doublec####.net/mads/static/sdk/native/sdk-core-v40.js
- a.m.15####.cn/12c009/9egdoltsohg/ba
- a.m.15####.cn/12c009/9egdoltsohg/bb
- a.m.15####.cn/12c009/9egdoltsohg/ia
- a.m.15####.cn/12c009/9egdoltsohg/ib
- app.w####.cn/action/user_info
- qer####.jp/qg/ghostlodge_info.txt
- /data/data/####/AppSettings.xml
- /data/data/####/CHARATIPS
- /data/data/####/FILTERS
- /data/data/####/Finalize_Flag.xml
- /data/data/####/GRAPHICS
- /data/data/####/ITEMEVENTCONTENTS
- /data/data/####/ITEMMESSAGEDATA
- /data/data/####/ITEMTIPS
- /data/data/####/MAPLAYERSDATAoutsidelodge
- /data/data/####/MAPNAMEKEY
- /data/data/####/MAPNUMBERKEY
- /data/data/####/MAPTIPS
- /data/data/####/ShowAdFlag.xml
- /data/data/####/Start_Tag.xml
- /data/data/####/UIANIMTIPS
- /data/data/####/UITIPS
- /data/data/####/UnPackage.dat
- /data/data/####/_gghostlodge_r.xml
- /data/data/####/ads1638688972.jar
- /data/data/####/com.gamedev.feng.qerozon.ghostlodge_preferences.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/gaClientId
- /data/data/####/gamefeat_sdk_com.gamedev.feng.qerozon.ghostlodge.xml
- /data/data/####/google_analytics_v2.db-journal
- /data/data/####/http_googleads.g.doubleclick.net_0.localstorage-journal
- /data/data/####/index
- /data/data/####/libexec.so
- /data/data/####/libexecmain.so
- /data/data/####/pcom.gamedev.feng.qerozon.ghostlodge.jar
- /data/data/####/pref.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/201712061752304
- /data/media/####/201812041054103
- /data/media/####/201812041054759
- /data/media/####/AppPackage.dat
- /data/media/####/CacheTime.dat
- /data/media/####/UnPackage.dat
- getprop ro.product.cpu.abi
- libexec
- libexecmain
- DES
- AES-CBC-PKCS5Padding
- DES