Technical information
- Adware.Egame.1
- Adware.Egame.2.origin
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) 1####.29.29.29:80
- TCP(HTTP/1.1) 2####.102.39.23:80
- UDP(NTP) 1.cn.p####.####.org:123
- TCP(TLS/1.0) av1.x####.com:443
- TCP(TLS/1.0) safebro####.google####.com:443
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.0) 1####.250.102.139:443
- TCP(TLS/1.2) 1####.250.27.139:443
- TCP(TLS/1.2) 1####.250.102.94:443
- 1.cn.p####.####.org
- and####.google####.com
- av1.x####.com
- i####.cn
- id1.cn.8.####.8
- pg.x####.com
- pg.x####.com.####.8
- safebro####.google####.com
- /data/anr/traces.txt
- /data/data/####/.jgck
- /data/data/####/EGAME_SDK.dat
- /data/data/####/EGAME_SDK.jar
- /data/data/####/GoogleBackupTransport.dex
- /data/data/####/GoogleBackupTransport.dex.flock (deleted)
- /data/data/####/GoogleLoginService.dex
- /data/data/####/GoogleLoginService.dex.flock (deleted)
- /data/data/####/GoogleServicesFramework.dex
- /data/data/####/GoogleServicesFramework.dex.flock (deleted)
- /data/data/####/Signature
- /data/data/####/TD_app_pefercen_profile.xml
- /data/data/####/TDpref_longtime.xml
- /data/data/####/TDpref_shorttime.xml
- /data/data/####/TDtcagent.db
- /data/data/####/TDtcagent.db-journal
- /data/data/####/apkInfo
- /data/data/####/classes.dex
- /data/data/####/classes2.dex
- /data/data/####/cn_egame_openapi_opt.xml
- /data/data/####/cn_egame_sdk_log.xml
- /data/data/####/egame_psh_temp.dex
- /data/data/####/egame_psh_temp.dex.flock (deleted)
- /data/data/####/egame_psh_temp.jar
- /data/data/####/egame_psh_temp_.jar
- /data/data/####/egame_s1281255924.tmp
- /data/data/####/egame_s1992782616.tmp
- /data/data/####/gameInfo.xml
- /data/data/####/kxqpplatform2.dex
- /data/data/####/kxqpplatform2.dex.flock (deleted)
- /data/data/####/kxqpplatform2.jar
- /data/data/####/kxqpplatform2.jar.lock
- /data/data/####/lb_amcfg
- /data/data/####/lb_packages
- /data/data/####/libepsh_private_ar1.so
- /data/data/####/libexecloader.so
- /data/data/####/libjiagu.so
- /data/data/####/libkxqpplatform.sinfo
- /data/data/####/libzmapk.so
- /data/data/####/libzvmhelper.so
- /data/data/####/main.dex
- /data/data/####/main.dex.flock (deleted)
- /data/data/####/main.jar
- /data/data/####/mcore_dat.xml
- /data/data/####/platform.xml
- /data/data/####/proc_auxv
- /data/data/####/qihoo_jiagu_crash_report.xml
- /data/data/####/sig_0.key
- /data/data/####/talkingdata_app.db-journal
- /data/data/####/talkingdata_app_process_preferences_file
- /data/data/####/talkingdata_app_version_preferences_file
- /data/data/####/td.lock
- /data/data/####/tdid.xml
- /data/data/####/tdlock.txt
- /data/data/####/tmp1018665766tmp
- /data/data/####/tmp1018665766tmp (deleted)
- /data/data/####/tmp1037937031tmp
- /data/data/####/tmp1037937031tmp (deleted)
- /data/data/####/tmp1044874703tmp
- /data/data/####/tmp1044874703tmp (deleted)
- /data/data/####/tmp1048597286tmp
- /data/data/####/tmp1048597286tmp (deleted)
- /data/data/####/tmp1055515736tmp
- /data/data/####/tmp1055515736tmp (deleted)
- /data/data/####/tmp1057282653tmp
- /data/data/####/tmp1057282653tmp (deleted)
- /data/data/####/tmp1059892751tmp
- /data/data/####/tmp1059892751tmp (deleted)
- /data/data/####/tmp108021196tmp
- /data/data/####/tmp108021196tmp (deleted)
- /data/data/####/tmp1089488593tmp
- /data/data/####/tmp1089488593tmp (deleted)
- /data/data/####/tmp1094033403tmp
- /data/data/####/tmp1094033403tmp (deleted)
- /data/data/####/tmp1105847272tmp (deleted)
- /data/data/####/tmp1112038658tmp
- /data/data/####/tmp1112038658tmp (deleted)
- /data/data/####/tmp1131027563tmp
- /data/data/####/tmp1131027563tmp (deleted)
- /data/data/####/tmp1184384107tmp
- /data/data/####/tmp1184384107tmp (deleted)
- /data/data/####/tmp11887642tmp
- /data/data/####/tmp11887642tmp (deleted)
- /data/data/####/tmp1190286675tmp
- /data/data/####/tmp1205661270tmp (deleted)
- /data/data/####/tmp1211822594tmp
- /data/data/####/tmp1211822594tmp (deleted)
- /data/data/####/tmp123160327tmp
- /data/data/####/tmp123160327tmp (deleted)
- /data/data/####/tmp1233443815tmp
- /data/data/####/tmp1233443815tmp (deleted)
- /data/data/####/tmp1233618814tmp
- /data/data/####/tmp1233618814tmp (deleted)
- /data/data/####/tmp1245153233tmp
- /data/data/####/tmp1245153233tmp (deleted)
- /data/data/####/tmp1278879172tmp
- /data/data/####/tmp1278879172tmp (deleted)
- /data/data/####/tmp1290726767tmp
- /data/data/####/tmp1290726767tmp (deleted)
- /data/data/####/tmp1302225940tmp (deleted)
- /data/data/####/tmp1364942790tmp
- /data/data/####/tmp1364942790tmp (deleted)
- /data/data/####/tmp1374797374tmp
- /data/data/####/tmp1374797374tmp (deleted)
- /data/data/####/tmp1393071888tmp
- /data/data/####/tmp1393071888tmp (deleted)
- /data/data/####/tmp1410205535tmp
- /data/data/####/tmp1410205535tmp (deleted)
- /data/data/####/tmp1430204532tmp
- /data/data/####/tmp1430204532tmp (deleted)
- /data/data/####/tmp1463149341tmp
- /data/data/####/tmp1463149341tmp (deleted)
- /data/data/####/tmp1516332483tmp
- /data/data/####/tmp1516332483tmp (deleted)
- /data/data/####/tmp1562933008tmp (deleted)
- /data/data/####/tmp1563220047tmp (deleted)
- /data/data/####/tmp1574159515tmp
- /data/data/####/tmp1574159515tmp (deleted)
- /data/data/####/tmp1576896759tmp
- /data/data/####/tmp1576896759tmp (deleted)
- /data/data/####/tmp1582047530tmp (deleted)
- /data/data/####/tmp1583126310tmp
- /data/data/####/tmp1594537188tmp
- /data/data/####/tmp1594537188tmp (deleted)
- /data/data/####/tmp1600766739tmp
- /data/data/####/tmp1600766739tmp (deleted)
- /data/data/####/tmp1612361524tmp
- /data/data/####/tmp1613708994tmp
- /data/data/####/tmp1613708994tmp (deleted)
- /data/data/####/tmp1621524146tmp
- /data/data/####/tmp1621524146tmp (deleted)
- /data/data/####/tmp1624248852tmp (deleted)
- /data/data/####/tmp1641165675tmp
- /data/data/####/tmp1641165675tmp (deleted)
- /data/data/####/tmp1697604046tmp
- /data/data/####/tmp1697604046tmp (deleted)
- /data/data/####/tmp1732048291tmp (deleted)
- /data/data/####/tmp1763327403tmp
- /data/data/####/tmp1763327403tmp (deleted)
- /data/data/####/tmp1771905126tmp
- /data/data/####/tmp1771905126tmp (deleted)
- /data/data/####/tmp1793537740tmp
- /data/data/####/tmp1793537740tmp (deleted)
- /data/data/####/tmp1797700371tmp
- /data/data/####/tmp1797700371tmp (deleted)
- /data/data/####/tmp180835169tmp
- /data/data/####/tmp180835169tmp (deleted)
- /data/data/####/tmp1849661778tmp
- /data/data/####/tmp1849661778tmp (deleted)
- /data/data/####/tmp1851685455tmp
- /data/data/####/tmp1851685455tmp (deleted)
- /data/data/####/tmp1854613936tmp
- /data/data/####/tmp1854613936tmp (deleted)
- /data/data/####/tmp1862961478tmp
- /data/data/####/tmp1862961478tmp (deleted)
- /data/data/####/tmp1863075179tmp
- /data/data/####/tmp1863075179tmp (deleted)
- /data/data/####/tmp1865793725tmp
- /data/data/####/tmp1865793725tmp (deleted)
- /data/data/####/tmp1874806246tmp
- /data/data/####/tmp1874806246tmp (deleted)
- /data/data/####/tmp1878080498tmp
- /data/data/####/tmp1878080498tmp (deleted)
- /data/data/####/tmp1894614449tmp
- /data/data/####/tmp1894614449tmp (deleted)
- /data/data/####/tmp1932760814tmp
- /data/data/####/tmp1932760814tmp (deleted)
- /data/data/####/tmp1938228518tmp
- /data/data/####/tmp1938228518tmp (deleted)
- /data/data/####/tmp1952204239tmp
- /data/data/####/tmp1952204239tmp (deleted)
- /data/data/####/tmp1981867392tmp
- /data/data/####/tmp1992635868tmp
- /data/data/####/tmp1992809942tmp
- /data/data/####/tmp1992809942tmp (deleted)
- /data/data/####/tmp2015375121tmp
- /data/data/####/tmp2015375121tmp (deleted)
- /data/data/####/tmp2029325976tmp
- /data/data/####/tmp21368982tmp
- /data/data/####/tmp21368982tmp (deleted)
- /data/data/####/tmp225341739tmp
- /data/data/####/tmp225341739tmp (deleted)
- /data/data/####/tmp235941669tmp
- /data/data/####/tmp235941669tmp (deleted)
- /data/data/####/tmp24062224tmp (deleted)
- /data/data/####/tmp242919959tmp
- /data/data/####/tmp242919959tmp (deleted)
- /data/data/####/tmp254070715tmp
- /data/data/####/tmp254070715tmp (deleted)
- /data/data/####/tmp256938871tmp
- /data/data/####/tmp256938871tmp (deleted)
- /data/data/####/tmp257573970tmp
- /data/data/####/tmp257573970tmp (deleted)
- /data/data/####/tmp266301329tmp
- /data/data/####/tmp266301329tmp (deleted)
- /data/data/####/tmp271672298tmp
- /data/data/####/tmp271672298tmp (deleted)
- /data/data/####/tmp281130329tmp
- /data/data/####/tmp281130329tmp (deleted)
- /data/data/####/tmp289698464tmp
- /data/data/####/tmp298256890tmp
- /data/data/####/tmp298256890tmp (deleted)
- /data/data/####/tmp308588117tmp
- /data/data/####/tmp308588117tmp (deleted)
- /data/data/####/tmp333820745tmp
- /data/data/####/tmp333820745tmp (deleted)
- /data/data/####/tmp361369686tmp
- /data/data/####/tmp361369686tmp (deleted)
- /data/data/####/tmp364676090tmp
- /data/data/####/tmp364676090tmp (deleted)
- /data/data/####/tmp366590816tmp
- /data/data/####/tmp366590816tmp (deleted)
- /data/data/####/tmp369068450tmp
- /data/data/####/tmp374891737tmp
- /data/data/####/tmp374891737tmp (deleted)
- /data/data/####/tmp415038271tmp
- /data/data/####/tmp415038271tmp (deleted)
- /data/data/####/tmp415377047tmp
- /data/data/####/tmp415377047tmp (deleted)
- /data/data/####/tmp420276693tmp
- /data/data/####/tmp430757136tmp
- /data/data/####/tmp453780585tmp
- /data/data/####/tmp484489164tmp (deleted)
- /data/data/####/tmp487699973tmp
- /data/data/####/tmp487699973tmp (deleted)
- /data/data/####/tmp492743415tmp
- /data/data/####/tmp492743415tmp (deleted)
- /data/data/####/tmp493107806tmp
- /data/data/####/tmp493107806tmp (deleted)
- /data/data/####/tmp494563969tmp
- /data/data/####/tmp494563969tmp (deleted)
- /data/data/####/tmp499474191tmp
- /data/data/####/tmp499474191tmp (deleted)
- /data/data/####/tmp515340409tmp
- /data/data/####/tmp515340409tmp (deleted)
- /data/data/####/tmp52943583tmp
- /data/data/####/tmp52943583tmp (deleted)
- /data/data/####/tmp550220957tmp
- /data/data/####/tmp550220957tmp (deleted)
- /data/data/####/tmp569676680tmp
- /data/data/####/tmp569676680tmp (deleted)
- /data/data/####/tmp573052744tmp
- /data/data/####/tmp574497467tmp
- /data/data/####/tmp574497467tmp (deleted)
- /data/data/####/tmp580566076tmp
- /data/data/####/tmp580566076tmp (deleted)
- /data/data/####/tmp591905440tmp
- /data/data/####/tmp591905440tmp (deleted)
- /data/data/####/tmp592351674tmp
- /data/data/####/tmp592351674tmp (deleted)
- /data/data/####/tmp603537175tmp
- /data/data/####/tmp603537175tmp (deleted)
- /data/data/####/tmp604560829tmp
- /data/data/####/tmp604560829tmp (deleted)
- /data/data/####/tmp607648690tmp
- /data/data/####/tmp607648690tmp (deleted)
- /data/data/####/tmp621615310tmp
- /data/data/####/tmp621615310tmp (deleted)
- /data/data/####/tmp625378595tmp
- /data/data/####/tmp625378595tmp (deleted)
- /data/data/####/tmp639675789tmp
- /data/data/####/tmp644917116tmp
- /data/data/####/tmp644917116tmp (deleted)
- /data/data/####/tmp666608212tmp
- /data/data/####/tmp675416538tmp
- /data/data/####/tmp675416538tmp (deleted)
- /data/data/####/tmp677837094tmp
- /data/data/####/tmp677837094tmp (deleted)
- /data/data/####/tmp683660069tmp
- /data/data/####/tmp683660069tmp (deleted)
- /data/data/####/tmp711623833tmp
- /data/data/####/tmp711623833tmp (deleted)
- /data/data/####/tmp723991637tmp
- /data/data/####/tmp723991637tmp (deleted)
- /data/data/####/tmp726116398tmp (deleted)
- /data/data/####/tmp746949380tmp
- /data/data/####/tmp746949380tmp (deleted)
- /data/data/####/tmp757382450tmp
- /data/data/####/tmp757382450tmp (deleted)
- /data/data/####/tmp761194957tmp
- /data/data/####/tmp761194957tmp (deleted)
- /data/data/####/tmp762177781tmp
- /data/data/####/tmp762177781tmp (deleted)
- /data/data/####/tmp797878156tmp
- /data/data/####/tmp797878156tmp (deleted)
- /data/data/####/tmp807129828tmp
- /data/data/####/tmp823531702tmp
- /data/data/####/tmp823531702tmp (deleted)
- /data/data/####/tmp833711982tmp
- /data/data/####/tmp833711982tmp (deleted)
- /data/data/####/tmp841228185tmp
- /data/data/####/tmp841228185tmp (deleted)
- /data/data/####/tmp841709477tmp
- /data/data/####/tmp841709477tmp (deleted)
- /data/data/####/tmp842761740tmp
- /data/data/####/tmp842761740tmp (deleted)
- /data/data/####/tmp8447681tmp
- /data/data/####/tmp8447681tmp (deleted)
- /data/data/####/tmp882538833tmp
- /data/data/####/tmp882538833tmp (deleted)
- /data/data/####/tmp895016410tmp (deleted)
- /data/data/####/tmp920054824tmp
- /data/data/####/tmp920054824tmp (deleted)
- /data/data/####/tmp933922021tmp
- /data/data/####/tmp933922021tmp (deleted)
- /data/data/####/tmp937942406tmp
- /data/data/####/tmp937942406tmp (deleted)
- /data/data/####/tmp94957834tmp
- /data/data/####/tmp94957834tmp (deleted)
- /data/data/####/tmp954621293tmp
- /data/data/####/tmp954621293tmp (deleted)
- /data/data/####/tmp957551126tmp
- /data/data/####/tmp957551126tmp (deleted)
- /data/data/####/tmp970009466tmp (deleted)
- /data/data/####/tmp971660815tmp
- /data/data/####/tmp971660815tmp (deleted)
- /data/data/####/tmp991218959tmp
- /data/data/####/tmp991218959tmp (deleted)
- /data/media/####/.tcookieid
- /data/media/####/am
- /data/media/####/compVersion
- /data/media/####/e3e8baa8280c718e9054264058d51c31.png
- /data/media/####/verinfo.cfg
- chmod 755 /data/user/0/<Package>/.platformcache/kxqpplatform2.jar
- chmod 755 /data/user/0/<Package>/.platformcache/main.jar
- chmod 755 <Package Folder>/.jiagu/libjiagu.so
- libegamepay_dr2
- libepsh_private_ar1
- libjiagu
- libkxqpplatform
- libzvmhelper
- AES
- AES-CBC-PKCS7Padding
- AES
- AES-CBC-PKCS7Padding
- RSA-ECB-PKCS1Padding