Technical information
- Adware.Egame.1
- UDP(DNS) 8####.8.4.4:53
- UDP(NTP) 1.cn.p####.####.org:123
- TCP(TLS/1.0) 1####.250.179.206:443
- TCP(TLS/1.0) 1####.250.179.202:443
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) growt####.google####.com:443
- TCP(TLS/1.0) pla####.google####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) android####.go####.com:443
- TCP(TLS/1.0) p####.google####.com:443
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) connect####.gst####.com:443
- TCP(TLS/1.2) 1####.250.179.202:443
- 1.cn.p####.####.org
- and####.google####.com
- android####.go####.com
- av1.x####.com
- connect####.gst####.com
- gmscomp####.google####.com
- growt####.google####.com
- i####.cn
- id1.cn.8.####.8
- m####.go####.com
- p####.google####.com
- pg.x####.com
- pg.x####.com.####.8
- pla####.google####.com
- www.gst####.com
- /data/com.koolearn.english.donutmultiplayer.egame/####/TDtcagent.db
- /data/data/####/.sdk.lck
- /data/data/####/GoogleBackupTransport.dex
- /data/data/####/GoogleBackupTransport.dex.flock (deleted)
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDpref_shorttime.xml (deleted)
- /data/data/####/TDtcagent.db
- /data/data/####/TDtcagent.db-journal
- /data/data/####/apkInfo
- /data/data/####/classes.dex
- /data/data/####/classes2.dex
- /data/data/####/cn_egame_openapi_opt.xml
- /data/data/####/gameInfo.xml
- /data/data/####/kxqpplatform2.dex
- /data/data/####/kxqpplatform2.dex.flock (deleted)
- /data/data/####/kxqpplatform2.jar.lock
- /data/data/####/lb_amcfg
- /data/data/####/lb_packages
- /data/data/####/libexecloader.so
- /data/data/####/libjiagu.so
- /data/data/####/libkxqpplatform.sinfo
- /data/data/####/libkxqpplatform.so
- /data/data/####/libzmapk.so
- /data/data/####/libzmnp.so
- /data/data/####/libzvmhelper.so
- /data/data/####/main.dex
- /data/data/####/main.dex.flock (deleted)
- /data/data/####/main.jar
- /data/data/####/platform.xml
- /data/data/####/proc_auxv
- /data/data/####/sdk_load_info.xml
- /data/data/####/sig_0.key
- /data/data/####/talkingdata_app.db-journal
- /data/data/####/talkingdata_app_process_preferences_file
- /data/data/####/talkingdata_app_version_preferences_file
- /data/data/####/td.lock
- /data/data/####/tdid.xml
- /data/data/####/tmp1004579910tmp
- /data/data/####/tmp1008000252tmp
- /data/data/####/tmp1008000252tmp (deleted)
- /data/data/####/tmp1038126091tmp
- /data/data/####/tmp1038126091tmp (deleted)
- /data/data/####/tmp105979220tmp
- /data/data/####/tmp112181175tmp
- /data/data/####/tmp112181175tmp (deleted)
- /data/data/####/tmp1154767361tmp
- /data/data/####/tmp1157410481tmp (deleted)
- /data/data/####/tmp118807001tmp
- /data/data/####/tmp118807001tmp (deleted)
- /data/data/####/tmp1207282999tmp
- /data/data/####/tmp1227033885tmp
- /data/data/####/tmp1227033885tmp (deleted)
- /data/data/####/tmp123861347tmp
- /data/data/####/tmp123861347tmp (deleted)
- /data/data/####/tmp1272183785tmp
- /data/data/####/tmp1272183785tmp (deleted)
- /data/data/####/tmp1353773431tmp
- /data/data/####/tmp1353773431tmp (deleted)
- /data/data/####/tmp1395263963tmp
- /data/data/####/tmp1395263963tmp (deleted)
- /data/data/####/tmp1396880632tmp
- /data/data/####/tmp1396880632tmp (deleted)
- /data/data/####/tmp1426837518tmp
- /data/data/####/tmp1465025553tmp
- /data/data/####/tmp1465025553tmp (deleted)
- /data/data/####/tmp1581988725tmp (deleted)
- /data/data/####/tmp159405576tmp
- /data/data/####/tmp1595380463tmp
- /data/data/####/tmp1595380463tmp (deleted)
- /data/data/####/tmp1605651717tmp
- /data/data/####/tmp1606571144tmp
- /data/data/####/tmp1606571144tmp (deleted)
- /data/data/####/tmp1634517089tmp
- /data/data/####/tmp1658304128tmp
- /data/data/####/tmp1658304128tmp (deleted)
- /data/data/####/tmp1694507715tmp (deleted)
- /data/data/####/tmp1746655799tmp
- /data/data/####/tmp1746655799tmp (deleted)
- /data/data/####/tmp1761050101tmp
- /data/data/####/tmp1768386993tmp
- /data/data/####/tmp1768386993tmp (deleted)
- /data/data/####/tmp1813504398tmp
- /data/data/####/tmp1824421451tmp
- /data/data/####/tmp1856871734tmp (deleted)
- /data/data/####/tmp1885693901tmp
- /data/data/####/tmp1885693901tmp (deleted)
- /data/data/####/tmp1901724930tmp
- /data/data/####/tmp1901724930tmp (deleted)
- /data/data/####/tmp1910291275tmp
- /data/data/####/tmp1910291275tmp (deleted)
- /data/data/####/tmp1912057736tmp
- /data/data/####/tmp1912057736tmp (deleted)
- /data/data/####/tmp1926980440tmp
- /data/data/####/tmp1926980440tmp (deleted)
- /data/data/####/tmp1943193422tmp (deleted)
- /data/data/####/tmp1952031328tmp
- /data/data/####/tmp1952031328tmp (deleted)
- /data/data/####/tmp198826298tmp
- /data/data/####/tmp198826298tmp (deleted)
- /data/data/####/tmp2018996179tmp
- /data/data/####/tmp2018996179tmp (deleted)
- /data/data/####/tmp2083514352tmp
- /data/data/####/tmp2083514352tmp (deleted)
- /data/data/####/tmp2109843437tmp
- /data/data/####/tmp2109843437tmp (deleted)
- /data/data/####/tmp2111112543tmp
- /data/data/####/tmp256331650tmp
- /data/data/####/tmp256331650tmp (deleted)
- /data/data/####/tmp279082738tmp
- /data/data/####/tmp279082738tmp (deleted)
- /data/data/####/tmp430322543tmp
- /data/data/####/tmp430322543tmp (deleted)
- /data/data/####/tmp43195181tmp
- /data/data/####/tmp43195181tmp (deleted)
- /data/data/####/tmp45211774tmp
- /data/data/####/tmp45211774tmp (deleted)
- /data/data/####/tmp524182680tmp
- /data/data/####/tmp547651239tmp
- /data/data/####/tmp55629393tmp
- /data/data/####/tmp55629393tmp (deleted)
- /data/data/####/tmp580175584tmp
- /data/data/####/tmp580175584tmp (deleted)
- /data/data/####/tmp608452203tmp
- /data/data/####/tmp608452203tmp (deleted)
- /data/data/####/tmp695359583tmp
- /data/data/####/tmp702008794tmp (deleted)
- /data/data/####/tmp756401936tmp
- /data/data/####/tmp756401936tmp (deleted)
- /data/data/####/tmp813163023tmp
- /data/data/####/tmp833020798tmp
- /data/data/####/tmp852102395tmp
- /data/data/####/tmp852102395tmp (deleted)
- /data/data/####/tmp885127331tmp
- /data/data/####/tmp898699872tmp
- /data/data/####/tmp899164843tmp
- /data/data/####/tmp899164843tmp (deleted)
- /data/data/####/tmp953687862tmp
- /data/data/####/tmp953687862tmp (deleted)
- /data/data/####/tmp989756808tmp
- /data/data/####/tmp989756808tmp (deleted)
- /data/data/####/unipay.dex
- /data/media/####/.tcookieid
- /data/media/####/am
- /data/media/####/compVersion
- /data/media/####/verinfo.cfg
- /drw/crypto/10065.4434.decrypt.AES-CBC-PKCS7Padding.b22b5092-7b...a.dump
- /drw/crypto/10065.4434.decrypt.AES-CBC-PKCS7Padding.b22b5092-7b...ck.txt
- /drw/crypto/10065.4434.decrypt.AES-CBC-PKCS7Padding.c9f0f895-fb...ck.txt
- chmod 755 /data/user/0/<Package>/.jiagu/libjiagu.so
- chmod 755 <Package Folder>/.platformcache/kxqpplatform2.jar
- chmod 755 <Package Folder>/.platformcache/main.jar
- libjiagu
- libkxqpplatform
- libme_unipay
- libzvmhelper
- AES-CBC-PKCS7Padding
- AES-CBC-PKCS7Padding