Technical information
- Adware.Dowgin.3.origin
- Adware.Ninebox.4.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com.####.com:80
- TCP(HTTP/1.1) u####.v.tr####.net:80
- TCP(HTTP/1.1) googl####.g.doublec####.net:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) api.kt####.cn:80
- TCP(HTTP/1.1) an.ca.15####.cn:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) qzones####.g####.cn.####.com:80
- TCP(HTTP/1.1) api.s####.mob.com:80
- TCP(HTTP/1.1) b.nin####.cn:80
- TCP(HTTP/1.1) s.nin####.cn:80
- TCP(TLS/1.0) googl####.g.doublec####.net:443
- TCP(TLS/1.0) 1####.194.222.100:443
- a####.91.com
- a####.u####.com
- an.ca.15####.cn
- api.kt####.cn
- api.s####.mob.com
- b.nin####.cn
- googl####.g.doublec####.net
- mi.g####.qq.com
- mi.ny####.com
- na.ac.upqian####.com
- qzones####.g####.cn
- s####.e.qq.com
- s.nin####.cn
- api.kt####.cn/2/game/general/baseinfo?os=####&platform=####&channel_id=#...
- googl####.g.doublec####.net/mads/static/mad/sdk/native/sdk-core-v40-load...
- googl####.g.doublec####.net/mads/static/mad/sdk/native/sdk-core-v40.html
- mi.g####.qq.com/gdt_mview.fcg?posw=####&posh=####&count=####&r=####&data...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/images/a...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/images/i...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/images/p...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/images/t...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/intersti...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/js-relea...
- qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android01/js/lib/r...
- u####.v.tr####.net/download/apks/appflavors/72.png
- u####.v.tr####.net/download/apks/release/72.png
- a####.u####.com.####.com/app_logs
- an.ca.15####.cn//zib
- an.ca.15####.cn//zie
- api.s####.mob.com/conf4
- api.s####.mob.com/conn
- api.s####.mob.com/data2
- api.s####.mob.com/snsconf
- b.nin####.cn/admin/sc.action?requestId=####
- b.nin####.cn/admin/scs.action?requestId=####
- s####.e.qq.com/activate?queueSize=####
- s####.e.qq.com/err?queueSize=####
- s.nin####.cn/admin/sc.action?requestId=####
- /data/data/####/.imprint
- /data/data/####/9j_recommend.xml
- /data/data/####/9j_sidebar.xml
- /data/data/####/Cache.xml
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/LocationType.xml
- /data/data/####/_acostickman3z.xml
- /data/data/####/_cocostickman3r.xml
- /data/data/####/ads-1053487729.jar
- /data/data/####/ads-1851562364.jar
- /data/data/####/ads-1982588270.jar
- /data/data/####/ads-21865793.jar
- /data/data/####/ads-768177330.jar
- /data/data/####/ads-785420527.jar
- /data/data/####/ads1067922723.jar
- /data/data/####/ads686304929.jar
- /data/data/####/bj.dex (deleted)
- /data/data/####/bj.jar
- /data/data/####/bmob_sp.xml
- /data/data/####/cachetimesha.xml
- /data/data/####/cachetimesha_sidebar.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/dij.xml
- /data/data/####/dim.xml
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/fstickman3.jar
- /data/data/####/gdt_plugin.dex
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/http_googleads.g.doubleclick.net_0.localstorage-journal
- /data/data/####/index
- /data/data/####/j-id.xml
- /data/data/####/jh.dex (deleted)
- /data/data/####/jh.jar
- /data/data/####/ktplay.xml
- /data/data/####/ktplay.xml.bak (deleted)
- /data/data/####/lo.dex (deleted)
- /data/data/####/lo.jar
- /data/data/####/mid.xml
- /data/data/####/mobclick_agent_cached_com.mgmame.stickman34
- /data/data/####/share_sdk_0.xml
- /data/data/####/so.dex (deleted)
- /data/data/####/so.jar
- /data/data/####/stickman3oc.dex (deleted)
- /data/data/####/stickman3oc.jar
- /data/data/####/time.xml
- /data/data/####/type.xml
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/webview.db
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/wh.dex (deleted)
- /data/data/####/wh.jar
- /data/data/####/xy.xml
- /data/media/####/.cuid
- /data/media/####/.dk
- /data/media/####/.nomedia
- /data/media/####/12.dat
- /data/media/####/ApplicationCache.db
- /data/media/####/ApplicationCache.db-journal
- /data/media/####/BaiduAppX_Log.txt
- /data/media/####/MID.DAT
- /data/media/####/d
- /data/media/####/egnaro_etceles_egap_d
- /data/media/####/egnaro_gbntb_d
- /data/media/####/ehcac_ntb_mottob
- /data/media/####/elcric_cs_d
- /data/media/####/enil_efas
- /data/media/####/enil_efas_d
- /data/media/####/enil_jt_d
- /data/media/####/erahs_ntb_mottob
- /data/media/####/eulb_gbntb_d
- /data/media/####/gb_datuctrohs_d
- /data/media/####/gb_gmi
- /data/media/####/gb_gmi_d
- /data/media/####/gb_mottob
- /data/media/####/gb_pot
- /data/media/####/gb_pot_d
- /data/media/####/gb_sdrowda
- /data/media/####/gb_tluafed_d
- /data/media/####/icon.png.dat
- /data/media/####/kcab_pop
- /data/media/####/kcab_pop_d
- /data/media/####/lecnac_ntb_mottob_d
- /data/media/####/llatsni_ntb
- /data/media/####/llatsni_ntb_d
- /data/media/####/llatsni_ntb_mottob
- /data/media/####/lomron_egap_d
- /data/media/####/n_kcehcp
- /data/media/####/na_csppa_d
- /data/media/####/names.dat
- /data/media/####/neerg_gbntb_d
- /data/media/####/noci_efas
- /data/media/####/noci_efas_d
- /data/media/####/ntb_erom_pc_d
- /data/media/####/ntb_meti
- /data/media/####/ntb_mottob_pop
- /data/media/####/ntb_mottob_pop_d
- /data/media/####/ntb_rehto_pc_d
- /data/media/####/ntbesolc_pot_x
- /data/media/####/ntbesolc_potd_d
- /data/media/####/nwod_worra
- /data/media/####/nwod_worra_d
- /data/media/####/p_kcehcp
- /data/media/####/pot_ntbseolc_d
- /data/media/####/pu_worra
- /data/media/####/pu_worra_d
- /data/media/####/rats_m
- /data/media/####/share.dat
- /data/media/####/tnetnocppa
- /data/media/####/wolley_gbntb_d
- KTAccountmanager
- KTFriendship
- KTLeaderboard
- KTPlay
- cocos2dcpp
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS7Padding
- DES
- AES-CBC-PKCS5Padding
- AES-ECB-NoPadding
- DES
- RSA-ECB-PKCS1Padding