Technical information
- Adware.Mobikok.1.origin
- Android.DownLoader.607.origin
- Android.DownLoader.660.origin
- Android.RemoteCode.110.origin
- Android.RemoteCode.88.origin
- Android.Xiny.1.origin
- Android.Xiny.164.origin
- Android.Xiny.197
- Android.Xiny.202.origin
- Android.Xiny.73.origin
- Android.DownLoader.607.origin
- Android.RemoteCode.110.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) img.adti####.com:80
- TCP(HTTP/1.1) of.okyes####.com:80
- TCP(HTTP/1.1) go####.nl:80
- TCP(HTTP/1.1) 2####.177.13.68:8288
- TCP(HTTP/1.1) ssl.gst####.com:80
- TCP(HTTP/1.1) i####.cn.com:80
- TCP(HTTP/1.1) t####.upbn####.com:80
- TCP(HTTP/1.1) 45.79.1####.161:80
- TCP(HTTP/1.1) www.jp####.com:80
- TCP(HTTP/1.1) tra####.tc-cl####.com:80
- TCP(HTTP/1.1) e####.grip####.com:80
- TCP(HTTP/1.1) www.zfr####.com:80
- TCP(HTTP/1.1) www.okyes####.com:8081
- TCP(HTTP/1.1) 45.79.2####.163:80
- TCP(HTTP/1.1) s####.mob####.b####.com:80
- TCP(HTTP/1.1) 4####.79.77.161:80
- TCP(HTTP/1.1) api.ki####.com:80
- TCP(HTTP/1.1) api.bi####.com:80
- TCP(HTTP/1.1) ea.sno####.1####.com:18088
- TCP(HTTP/1.1) s2s.go2af####.com:80
- TCP(HTTP/1.1) 45.79.1####.48:80
- TCP(HTTP/1.1) www.koapk####.com:8081
- TCP(HTTP/1.1) mo.freeind####.com:80
- TCP(HTTP/1.1) akw.e####.space:80
- TCP(HTTP/1.1) sdk-112####.us-we####.elb.####.com:80
- TCP(HTTP/1.1) trac####.digital####.com:80
- TCP(HTTP/1.1) sdk.adti####.com:80
- TCP(HTTP/1.1) pg.x####.com:80
- TCP(HTTP/1.1) www.mmmmmm####.com:80
- TCP(HTTP/1.1) www.cu####.com:80
- TCP(HTTP/1.1) ali.f####.cdn.####.com:80
- TCP(HTTP/1.1) y####.to:80
- TCP(HTTP/1.1) www.admobim####.com:80
- TCP(HTTP/1.1) www.okyes####.com:8080
- TCP(HTTP/1.1) en.sno####.1####.com:8088
- TCP(HTTP/1.1) t####.m####.net:80
- TCP(SSL/3.0) formula####.com:443
- TCP(SSL/3.0) bestper####.site:443
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) c.n####.com:443
- TCP(TLS/1.0) formula####.com:443
- TCP(TLS/1.0) ga.x####.com:443
- TCP(TLS/1.0) bestper####.site:443
- TCP(TLS/1.0) sdk.adti####.com:443
- akw.e####.space
- ali.f####.cdn.####.com
- api.bi####.com
- api.ki####.com
- api.mob####.b####.com
- bestper####.site
- c.n####.com
- e####.grip####.com
- ea.sno####.1####.com
- en.sno####.1####.com
- formula####.com
- ga.x####.com
- go####.nl
- i####.cn.com
- img.adti####.com
- mo.freeind####.com
- of.okyes####.com
- pg.x####.com
- s####.mob####.b####.com
- s2s.go2af####.com
- sdk-112####.us-we####.elb.####.com
- sdk.adti####.com
- ssl.gst####.com
- t####.m####.net
- t####.upbn####.com
- tra####.tc-cl####.com
- trac####.digital####.com
- www.admobim####.com
- www.cu####.com
- www.go####.nl
- www.gst####.com
- www.jp####.com
- www.koapk####.com
- www.mmmmmm####.com
- www.okyes####.com
- www.zfr####.com
- y####.to
- akw.e####.space/index.php?r=####
- akw.e####.space/strategy/api/v1/rule/get?p=####&hp=####&l=####&c=####&pr...
- ali.f####.cdn.####.com/20180106173244-snowfox_v19i154et.jar
- api.bi####.com/sdkOffer?os=####&model=####&gaid=####&imei=####&androidId...
- api.ki####.com/click?tid=####
- api.ki####.com/express?tid=####
- e####.grip####.com/gpsLib317_n.jar
- go####.nl/
- go####.nl/gen_204?s=####&atyp=####&ei=####&rt=####
- go####.nl/images/hpp/gsa_super_g-64.gif
- go####.nl/images/nav_logo242.png
- go####.nl/images/nav_logo242_hr.webp
- go####.nl/logos/doodles/2018/doodle-snow-games-day-7-5701673484812288-l....
- go####.nl/xjs/_/js/k=xjs.qs.nl.ndKXeQlj7NM.O/m=sx,sb_mob,bct,cdos,elog,h...
- i####.cn.com/a/3cff577985556567209c8fa8131303f63
- img.adti####.com/upload/sdk/hotfix/nonename-97.jar
- of.okyes####.com/redirect?uid=####&sourceid=####&clickid=####
- s2s.go2af####.com/click?pid=####&offer_id=####&sub1=####
- sdk.adti####.com/hotfix?version=####&app_id=####&shellv=####
- ssl.gst####.com/gb/images/qi1_36e7b564.png
- t####.m####.net/aff_c?offer_id=####&aff_id=####&aff_sub=####&aff_sub1=##...
- t####.upbn####.com//click?id=####&aff=####&ost=####&click=####
- tra####.tc-cl####.com/?p=####&media_type=####&pi=####&source_type=####&c...
- trac####.digital####.com/index.php?offer_id=####&aff_id=####&aff_sub1=##...
- www.cu####.com/20180125141223.gen521_BdJarDex_adtiming_0125.zip
- y####.to/s/9B5?pubref=####&affpubid=####
- api.bi####.com/un
- ea.sno####.1####.com:18088/ping
- ea.sno####.1####.com:18088/sdk/api/checklib
- ea.sno####.1####.com:18088/sdk/api/regclient
- en.sno####.1####.com:8088/sdk/api/ad/hull_v2
- en.sno####.1####.com:8088/sdk/api/log/record
- mo.freeind####.com/detail/getOfferListNew?enc=####
- pg.x####.com/api/q/a/3cff577985556567209c8fa8131303f63
- s####.mob####.b####.com/cgi-bin-py/ad_sdk.cgi?ty=####&enc=####&bt=####
- sdk-112####.us-we####.elb.####.com/sdk/sdkClient/request
- www.admobim####.com/surl/api2_reg.action
- www.jp####.com/tracking/ds?sdk_version=####&platform=####&app_version=##...
- www.koapk####.com:8081/sm/sr/rt/ry
- www.koapk####.com:8081/sm/sr/sp/py
- www.mmmmmm####.com/osp/oaen_get.action?tasktype=####&imei=####&imsi=####...
- www.mmmmmm####.com/osp/oaen_reg.action
- www.okyes####.com:8080/sdk/cb.action
- www.okyes####.com:8080/sdk/td.action
- www.okyes####.com:8081/sdk/nsd.action?b=####
- www.zfr####.com/up.do
- /data/.xbin/api
- /data/.xbin/bkoatdump_pooj_radish
- /data/.xbin/cid
- /data/.xbin/disp
- /data/.xbin/mid
- /data/.xbin/release
- /data/.xbin/uid
- /data/local/####/api
- /data/local/####/cid
- /data/local/####/disp
- /data/local/####/mid
- /data/local/####/release
- /data/local/####/uid
- /system/bin/####/api
- /system/bin/####/bkload_jpoo_hd
- /system/bin/####/cid
- /system/bin/####/disp
- /system/bin/####/mid
- /system/bin/####/release
- /system/bin/####/uid
- /system/bin/.install-recovery.luno.sh
- /system/bin/debuggerd
- /system/bin/debuggerd_hulu
- /system/bin/debuggerd_server
- /system/bin/install-recovery.sh
- /system/bin/kcol_ysy
- /system/bin/oatdump_pooj_radish
- /system/etc/install-cm-recovery.sh
- /system/etc/install-recovery-2.sh
- /system/etc/install-recovery.sh
- /system/etc/install_recovery.sh
- /system/xbin/.kugua
- /system/xbin/load_jpoo_hd
- /system/xbin/supolicy
- <Package Folder>/app_DEX_OPT/10143881.dex
- <Package Folder>/app_DEX_OPT/17826033.dex
- <Package Folder>/app_DEX_OPT/41369733.dex
- <Package Folder>/app_DEX_OPT/51347191.dex
- <Package Folder>/app_DEX_OPT/69204723.dex
- <Package Folder>/app_bGlicmVz/nlim.bin
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/index
- <Package Folder>/cache/bb.jar
- <Package Folder>/com.init.env/####/AD_ID_SPINFO.xml
- <Package Folder>/com.init.env/####/data_0
- <Package Folder>/com.init.env/####/data_1
- <Package Folder>/com.init.env/####/data_2
- <Package Folder>/com.init.env/####/data_3
- <Package Folder>/com.init.env/####/debuggerd_hulu
- <Package Folder>/com.init.env/####/elfm
- <Package Folder>/com.init.env/####/elfm1510834049923.zip
- <Package Folder>/com.init.env/####/f_000001
- <Package Folder>/com.init.env/####/f_000002
- <Package Folder>/com.init.env/####/f_000003
- <Package Folder>/com.init.env/####/f_000004
- <Package Folder>/com.init.env/####/f_000005
- <Package Folder>/com.init.env/####/forever.sh
- <Package Folder>/com.init.env/####/index
- <Package Folder>/com.init.env/####/install-recovery.sh
- <Package Folder>/com.init.env/####/kcol_ysy
- <Package Folder>/com.init.env/####/load_jpoo_hd
- <Package Folder>/com.init.env/####/oatdump_pooj_radish
- <Package Folder>/com.init.env/####/supolicy
- <Package Folder>/com.init.env/####/toolbox
- <Package Folder>/com.init.env/####/toolbox1510834051471.zip
- <Package Folder>/com.init.env/####/webview.db-journal
- <Package Folder>/com.init.env/####/webviewCookiesChromium.db-journal
- <Package Folder>/databases/####/file__0.localstorage-journal
- <Package Folder>/databases/adblib.db-journal
- <Package Folder>/databases/bdownloaders.db-journal
- <Package Folder>/databases/db_snowfox.db
- <Package Folder>/databases/db_snowfox.db-journal
- <Package Folder>/databases/mc_cache.db-journal
- <Package Folder>/databases/mpush_game.db-journal
- <Package Folder>/databases/my.db
- <Package Folder>/databases/my.db-journal
- <Package Folder>/databases/plug.dataBase
- <Package Folder>/databases/plug.dataBase-journal
- <Package Folder>/databases/rtr.db
- <Package Folder>/databases/rtr.db-journal
- <Package Folder>/databases/snowfoxad_msg.db
- <Package Folder>/databases/snowfoxad_msg.db-journal
- <Package Folder>/databases/swith1014.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/files/####/-188828598
- <Package Folder>/files/####/-188828598.data
- <Package Folder>/files/####/10143881.apk
- <Package Folder>/files/####/17826033.apk
- <Package Folder>/files/####/41369733.apk
- <Package Folder>/files/####/51347191.apk
- <Package Folder>/files/####/69204723.apk
- <Package Folder>/files/####/dk360.data
- <Package Folder>/files/####/dk437.data
- <Package Folder>/files/####/dk940.data
- <Package Folder>/files/####/fiwmw
- <Package Folder>/files/####/ja201801152050.data
- <Package Folder>/files/####/journal.tmp
- <Package Folder>/files/####/pgbwaa
- <Package Folder>/files/####/ym43.data
- <Package Folder>/files/201711071150.apk
- <Package Folder>/files/c201711071150.apk
- <Package Folder>/files/cache_v1.jar
- <Package Folder>/files/d.zip
- <Package Folder>/files/dtemp.apk
- <Package Folder>/files/google.db
- <Package Folder>/files/lib.dat
- <Package Folder>/files/mesosphere.jar
- <Package Folder>/files/mpush_gateway_preferences_file
- <Package Folder>/files/mpush_version_preferences_file
- <Package Folder>/files/ncore.jar
- <Package Folder>/files/new_v1.jar
- <Package Folder>/files/ob1.zip
- <Package Folder>/files/snowfox_v19i.jar
- <Package Folder>/files/uvso.jar
- <Package Folder>/p.dk360/####/forever.sh
- <Package Folder>/p.dk360/####/krcfg.txt
- <Package Folder>/p.dk360/####/krmain
- <Package Folder>/p.dk360/####/krmain1510834052675.zip
- <Package Folder>/p.dk360/####/krsdk.cert
- <Package Folder>/p.dk437/####/forever.sh
- <Package Folder>/p.dk437/####/krcfg.txt
- <Package Folder>/p.dk437/####/krmain
- <Package Folder>/p.dk437/####/krmain1510834097328.zip
- <Package Folder>/p.dk437/####/krsdk.cert
- <Package Folder>/p.dk940/####/forever.sh
- <Package Folder>/p.dk940/####/krcfg.txt
- <Package Folder>/p.dk940/####/krmain
- <Package Folder>/p.dk940/####/krmain1510834082873.zip
- <Package Folder>/p.dk940/####/krsdk.cert
- <Package Folder>/p.ym43/####/forever.sh
- <Package Folder>/shared_prefs/20160121.xml
- <Package Folder>/shared_prefs/3cff577985556567209c8fa8131303f63...le.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/ActivatePreUtil.xml
- <Package Folder>/shared_prefs/AdsBusiness-data.xml
- <Package Folder>/shared_prefs/BusinessPreUtil.xml
- <Package Folder>/shared_prefs/LoginPreUtil.xml
- <Package Folder>/shared_prefs/LoginPreUtil.xml.bak
- <Package Folder>/shared_prefs/MobikokCache_Type_1.xml
- <Package Folder>/shared_prefs/MobikokConfig_Type_1.xml
- <Package Folder>/shared_prefs/MobikokConfig_Type_1.xml.bak
- <Package Folder>/shared_prefs/MobikokConfig_Type_1.xml.bak (deleted)
- <Package Folder>/shared_prefs/OfferPreUtil.xml
- <Package Folder>/shared_prefs/Q2hhbm5lbElES2V5MjAxNjEyMjcxODU3.xml
- <Package Folder>/shared_prefs/QURfUk9PVF9TREtfMjAxNzAyMDgxMA.xml
- <Package Folder>/shared_prefs/SpZvPrefs.xml
- <Package Folder>/shared_prefs/TD_app_pefercen_profile.xml
- <Package Folder>/shared_prefs/WebViewSettings.xml
- <Package Folder>/shared_prefs/adtiminginfo.xml
- <Package Folder>/shared_prefs/af.xml
- <Package Folder>/shared_prefs/all_info_data.xml
- <Package Folder>/shared_prefs/appKey.xml
- <Package Folder>/shared_prefs/appshell.xml
- <Package Folder>/shared_prefs/aps.xml
- <Package Folder>/shared_prefs/apsad.xml
- <Package Folder>/shared_prefs/apscomm.xml
- <Package Folder>/shared_prefs/cn_rs.xml
- <Package Folder>/shared_prefs/crash_log_sp.xml
- <Package Folder>/shared_prefs/device_info.xml
- <Package Folder>/shared_prefs/hunter_config.xml
- <Package Folder>/shared_prefs/isupdate.xml
- <Package Folder>/shared_prefs/m_cfg.xml
- <Package Folder>/shared_prefs/other_config.xml
- <Package Folder>/shared_prefs/pref_file.xml
- <Package Folder>/shared_prefs/s_sdk_pro_pref.xml
- <Package Folder>/shared_prefs/service_config.xml
- <Package Folder>/shared_prefs/snowfoxprf.xml
- <Package Folder>/shared_prefs/sp_cache.xml
- <Package Folder>/shared_prefs/sp_config.xml
- <Package Folder>/shared_prefs/t_ini.xml
- <Package Folder>/shared_prefs/td_pefercen_profile.xml
- <Package Folder>/shared_prefs/tdid.xml
- <Package Folder>/shared_prefs/upgrade_config.xml
- <SD-Card>/.androidsystem/####/gads.db
- <SD-Card>/.tcookieid
- <SD-Card>/Android/####/dev_f53bc04.txt
- <SD-Card>/Android/####/imei.txt
- <SD-Card>/Android/####/ua.dat
- <SD-Card>/LogG/####/sp
- <SD-Card>/baidu/####/journal.tmp
- <SD-Card>/baidu/.cuid
- .kugua
- .kugua -c id
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/sh <Package Folder>/p.dk360/files/forever.sh
- c201711071150.apk -p <Package> -c <Package>:crane
- cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- chmod 0755 <Package Folder>/com.init.env
- chmod 0777 <Package Folder>/com.init.env/files/elfm
- chmod 0777 <Package Folder>/com.init.env/files/forever.sh
- chmod 0777 <Package Folder>/com.init.env/files/toolbox
- chmod 0777 <Package Folder>/p.dk360/files/forever.sh
- chmod 0777 <Package Folder>/p.dk360/files/krmain
- chmod 0777 <Package Folder>/p.dk360/files/krsdk.cert
- chmod 0777 <Package Folder>/p.dk437/files/forever.sh
- chmod 0777 <Package Folder>/p.dk437/files/krmain
- chmod 0777 <Package Folder>/p.dk940/files/forever.sh
- chmod 0777 <Package Folder>/p.dk940/files/krmain
- chmod 0777 <Package Folder>/p.ym43/files/forever.sh
- chmod 777 <Package Folder>/p.dk360/files/krcfg.txt
- chmod 777 <Package Folder>/p.dk437/files/krcfg.txt
- chmod 777 <Package Folder>/p.dk940/files/krcfg.txt
- load_jpoo_hd
- load_jpoo_hd -c id
- logcat -d -v time
- ls -l /system/bin/su
- ps
- sh
- sh /system/bin/load_jpoo_hd
- sh /system/bin/load_jpoo_hd -c id
- su
- su -c id
- dan.yufeng
- fiwmw
- AES
- AES-CBC-PKCS5Padding
- AES-ECB-NoPadding
- AES-ECB-PKCS5Padding
- desede-ECB-PKCS5Padding
- AES
- AES-CBC-PKCS5Padding
- AES-ECB-PKCS5Padding
- DES
- DES-CBC-PKCS5Padding