> Decompiled code and the blacklist use "Ad" in naming a lot
It's a common tactic for spyware to use the term "Ad" and other terms that sounds innocuous at first glace. AdUps is a great example [1]
[1] https://www.slashgear.com/adups-chinese-spyware-still-on-and...