agent_smith | 27da3ae5a64ccce808271c19db6d09c9d4d45ddcd6d481380f1a1d20b7ff02ec

Analysis

max time kernel
3764034s
max time network
179s
platform
android_x86
resource
android-x86-arm-20220310-en
submitted
20-05-2022 06:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

27da3ae5a64ccce808271c19db6d09c9d4d45ddcd6d481380f1a1d20b7ff02ec.apk
Size

25.5MB
MD5

d99c6463c6667116074ede6712cb09da
SHA1

ed2b2dcb5aab2f472cbc1104afa9a51f49fe5df7
SHA256

27da3ae5a64ccce808271c19db6d09c9d4d45ddcd6d481380f1a1d20b7ff02ec
SHA512

a403f2567d06790b50e640b7f1c00b4be0cdecd947f43f21ad56698f5c8380e26acab6b1ad979aee4e5e7b32882fcb7d06bab96821c5274b6918abb91cf35d9e

Score

10^/10

agent_smith adware evasion ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith

Checks Android system properties for emulator presence. 3 IoCs

Processes:

com.mars.hyperrunning.mi

description	ioc	process
Accessed system property	key: ro.hardware	com.mars.hyperrunning.mi
Accessed system property	key: ro.product.model	com.mars.hyperrunning.mi
Accessed system property	key: ro.product.device	com.mars.hyperrunning.mi

Loads dropped Dex/Jar 7 IoCs

Runs executable file dropped to the device during analysis.

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/data/com.mars.hyperrunning.mi/files/oat/x86/mt_paythird.odex --compiler-filter=quicken --class-loader-context=&com.mars.hyperrunning.mi/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/x86/mkbdcj.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar --output-vdex-fd=55 --oat-fd=60 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/x86/mt_support.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk --output-vdex-fd=136 --oat-fd=137 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mimo/oat/x86/mimo_download.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar	5341	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/data/com.mars.hyperrunning.mi/files/oat/x86/mt_paythird.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar	5288	com.mars.hyperrunning.mi
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar	5443	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/x86/mkbdcj.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar	5288	com.mars.hyperrunning.mi
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar	5543	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar --output-vdex-fd=55 --oat-fd=60 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/x86/mt_support.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar	5288	com.mars.hyperrunning.mi
/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk	5719	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk --output-vdex-fd=136 --oat-fd=137 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mimo/oat/x86/mimo_download.odex --compiler-filter=quicken --class-loader-context=&

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.mars.hyperrunning.mi

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.mars.hyperrunning.mi
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

com.mars.hyperrunning.mi

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.mars.hyperrunning.mi

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.mars.hyperrunning.mi

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.mars.hyperrunning.mi

com.mars.hyperrunning.mi
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:5288

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/data/com.mars.hyperrunning.mi/files/oat/x86/mt_paythird.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5341

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/x86/mkbdcj.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5443

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar --output-vdex-fd=55 --oat-fd=60 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/x86/mt_support.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5543

ls /sys/class/thermal
2⤵
PID:5615

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk --output-vdex-fd=136 --oat-fd=137 --oat-location=/data/user/0/com.mars.hyperrunning.mi/app_mimo/oat/x86/mimo_download.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5719

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar
Filesize
3.3MB

MD5
6a29fa9b36ac43e105bf9a1e1f24c7af

SHA1
35f8037a136f1ac9a9ff6fd7c6fde4ac4445978e

SHA256
9a01473d5a35eb0dd67457ad80eabe60e1468c1a06e5df16c351d8d2d136ab7f

SHA512
8b07c7e86273b3ed90aa174df1f133af99789f802643833f01ed1853119d6b3a236bd66fcc2d632aba712218787e1b27d42baf5425eee0a31aa692d1483499d1

Download Submit
/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar
Filesize
3.3MB

MD5
6a29fa9b36ac43e105bf9a1e1f24c7af

SHA1
35f8037a136f1ac9a9ff6fd7c6fde4ac4445978e

SHA256
9a01473d5a35eb0dd67457ad80eabe60e1468c1a06e5df16c351d8d2d136ab7f

SHA512
8b07c7e86273b3ed90aa174df1f133af99789f802643833f01ed1853119d6b3a236bd66fcc2d632aba712218787e1b27d42baf5425eee0a31aa692d1483499d1

Download Submit
/data/data/com.mars.hyperrunning.mi/files/mt_paythird.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.mars.hyperrunning.mi/files/oat/x86/mt_paythird.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.mars.hyperrunning.mi/files/oat/x86/mt_paythird.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk
Filesize
1.7MB

MD5
0e46d3c069f053174f520d0474e19a38

SHA1
726945b1400a7574825f81c769971f5e40d3cf02

SHA256
47ef13375dab15b0a6c4f2dbe1e294c6a2cb6c3000c523e0f81b7129f3d94af3

SHA512
58611e3a56fad0c3d455b60803e2b531dc0fec044ed0b8a90d99726516a079cd30c84dfd0c251d3ec41c380647dab0da3f954ef8e1f7006fb9b86f3c3ed34297

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk.tmp
Filesize
1.4MB

MD5
136dc9fd8215580553f0e3e22547e12a

SHA1
fe0543ce2546ec2b91269547de95dc9ce4126487

SHA256
8e09795fdcde323811052aa5caee5a62ec33d2170117cad6e240cfa9f6820da5

SHA512
f5c703d242aa32bc114df24fbb2eec0f50ce347196b1affe749641687b29fa7b7997fc6a1853415b67ca3865ca6b5ac2880bbd5c349d65b9e17a4bdfb1515c86

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mimo/mimo_download.apk.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mimo/oat/x86/mimo_download.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mimo/oat/x86/mimo_download.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mtDedat
Filesize
166KB

MD5
1f228b53161bb98dbaabf6e144db4f8c

SHA1
55a93b453aa5fd215843ad24f29e2628eeb4e959

SHA256
9f8a0360ceb52fa246960a49394be2b9590442507b3e97eb241227752037d933

SHA512
58777c27e7408f71e4ab2caeb7f96698c73400a9494dd6e97078d998c0904011b1b03921567a0bf6ca463b402d06e8af135cd652aedfd057090ee5f0f4ca45df

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mtEndat
Filesize
166KB

MD5
8ca205dd17f1621f2a7b89fbae8e6202

SHA1
b0d3caffedf04a65625e0f12de84814581eb5838

SHA256
5e19681177f378e50e7ae4eb5efeca7a7c9ea36aa1e2db0c616119b231635a00

SHA512
b40af503e600449c5b07de9a4f059203dfdf849c88a5017ec52d18f7a6460ce34e2d36a57109a8abde8533fad88e7e8e9d904cfaee6856655d5432d99dc986f0

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar
Filesize
167KB

MD5
f685f2652b594dcc7e9e92738c1d0fc4

SHA1
dcf7ca15ac9c41dcbcabc89bdf1c5b36fbd6fa42

SHA256
a7cb82102de5111fbb49cf61eb1d7f874ed32e877837c5b5dfd5754898d716e0

SHA512
4733d9fd0a1442777eacf0ce79b5ca59c620c00ac85c214a4e4b1814cd6a9b91bf6ceecf94d9d3ea2eeac5ed460cc94499afa4d9d6d0dcf109d581d8e140ece3

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar
Filesize
1.8MB

MD5
4ab4049d89a8d22e89d4be64194580a2

SHA1
4e83ce0c4cc9f33c9e1922e6214615f412d5db45

SHA256
c4af852f86474cf807766d43d7aff99bbf074f0bf4a754b1c4c5c5184d727660

SHA512
e66ec0796a3e89428c051131aae82b3def97d23d4db62f3da0005eddc0cc45093a047089e9ccd855a99ebdc312986c603b1664e431e45e6ae32fc3a11457dd32

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar
Filesize
1.8MB

MD5
5bfc6f8b802ed07910928df78fa08256

SHA1
e5eb401629e91befb384762e2b827a07f15f2d9f

SHA256
6920369d6bf99435e62dc2ec1aa46171f43acd869cea1eaa1685cf074c080cb7

SHA512
c4a5f48c9ba09b1bddf7e7cd6932d229d1e4e31a108f5a3e204f9587499d5486ea15497ceef84d60735de069ad5bfbe0905a1cc530f770ba84e741b59e314343

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/mt_support.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/mt_support.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/x86/mt_support.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/app_mt/oat/x86/mt_support.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/jsb.sqlite
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/jsb.sqlite-journal
Filesize
524B

MD5
44dea872bf140b03a386bb8e6ac295c2

SHA1
2cfe58d73f0fe5a726be16343530760cb375ee66

SHA256
46fbc2877cfc151a894860b4c74cf68939717b47bb0e58e7df3dd7d31b53e857

SHA512
e60f08dd2b7fb631bbc43804b7e45206120be23427d9e2c3037befc0507a05bbca307ca97e13863721e11a7fc91c13ef726e762fea03615602da6fbd31c74fb8

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/jsb.sqlite-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/jsb.sqlite-wal
Filesize
193KB

MD5
5358e4f8923f7f88aa21b826db89453f

SHA1
8d554e50a4056d8ade2f7c6ee4bdd7e8b9e8cf3a

SHA256
02bb831f2d1ea71ec41bbc52ff104a30ecb407f3075e9991da0f6312227a9110

SHA512
f31813a1c23ba6d59617a6f6f1b30590c9eef01b284b7fbb724e6554665034b5013733223e82e9f427ce3498d12f18d701ae54e5c733e63b8a2ab3870a34f6a6

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/report2.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/report2.db-journal
Filesize
524B

MD5
59f518e6f6ae1e5c91295c416f398e3e

SHA1
e16825d3fc180577d7516534971b8c757935b35a

SHA256
fb6243d482b695953bdf00554ac9fdb350708e706162a470700396d2856af65c

SHA512
edf4707c2b21232075f3da71521fe5b241792e5fc0165e3194a71c0635327f9bda6c2d885b9723ed1e871e7834b57d8aca204993d9433d0c4fe7e80d60c24fcf

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/report2.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.mars.hyperrunning.mi/databases/report2.db-wal
Filesize
28KB

MD5
11d2b37cd1f74bf0f3e2b7dceb615f2e

SHA1
27d720ad9eb94a8556b22bbb7932b515deb767a9

SHA256
0f7dfd4dedb7fdaf97d07c75acc97f25f485a88273c3ae2843f2ee36ca630f1a

SHA512
dba65359e7b4dfbe46e05d8eee97daa83d1acb286422e135d24b82e2dfc2c6a6cf78a387dd6b0f6ac4e00ffd958d6bdb66776c84ad9900d05a51500e7dc8b43d

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar
Filesize
11KB

MD5
3d4bbc794c90e38b51322cab5580612a

SHA1
22dc48c0b5bf4794c82438bedfb3b93642bfaa33

SHA256
1d2dac1320634fa5a45311882ce376ac1afef2e0728e35e00cb4c0170a8bd253

SHA512
54fb2421b78a868ef82ea0d82c732eaf880d67ca9d85fd8ab6da0a8346841e4e355cb464e65f01f6977e5d0274c528a74682d8ee9c1849f7384e772292f43d0c

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar
Filesize
23KB

MD5
84a87562cdbbfd2c9df15b13e04d48c5

SHA1
aeb2dfa887e263a6d7447b1305f3be4cd69bcaec

SHA256
62752cf0f62e536664d582b8eca6462b378f619bb246c403eb23e192ded795b9

SHA512
54f2502c0b6e54a0585cfde3022ba92e1ed542a748ae05e361a1c29ebc08574656c710f0ac4f9983b599f58eed9213792af9e790c49ab768e3f57021c0b26da4

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar
Filesize
23KB

MD5
28d7dc0e43d9cb1c1337e81766605df3

SHA1
d08e39447a43fc8d665a9e08dd82857a5a5c755f

SHA256
7973333972902c8808ac684abd7b5e19627ea584190b190a0e10963644985ce2

SHA512
82aeef84f6c60e384211a089a53a426bc0d61f46722e753bcc6ad2b3658a2b7bc85d4f1a0fe863410d1fdeccad47e953571b749f13ddd586b5aaa33664cf8ca7

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/mkbdcj.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/mkbdcj.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/x86/mkbdcj.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/Miku/oat/x86/mkbdcj.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/migame.cfg
Filesize
48B

MD5
340611b379e362128c71623c5e8da1b4

SHA1
0673cee3ec93948c5474f182f9bc0bf0dbc0076e

SHA256
ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69

SHA512
7f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/mt_paythird.jar
Filesize
1.2MB

MD5
8d613e60d85ffb1834a41a8541f57bbd

SHA1
9136dd12be57bad3e907f4b7ef53aa440a956fb3

SHA256
f44a76e49c9d914c3554d954f57704fbf3930b0eb9f894abcbe53d9f977a0d35

SHA512
6e7ec4482f4293175fbaa7e0c9854de33a801bebb6d71d6253b4d440660b3043d3f0d27c75b56320efc351e886684ef72de6eadd4e119de61598e8152d0fa994

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/report.log
Filesize
1KB

MD5
c4fbc880f1b38307a0d546879fbbcb20

SHA1
b2ffaa87a434ff480fb3d7e37000d9f33e7598ef

SHA256
272c403a0b5728a2dc7cf1a2f39e465d91b7bcb777722a17e60603f45d0c6f5c

SHA512
9b88cd8dc28e636627db771c33e48e9de954e74921ac1a2ada6a0a8be635965cbf0c49738e747cf197b50673cbe4b454f1c8e8137e69247dbd098d960c86eeaa

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNjUzMDMxMzQzNDk5
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.mars.hyperrunning.mi/files/umeng_it.cache
Filesize
498B

MD5
89881f340e3cae263ff18dc84033c0c1

SHA1
e24e8d59998eb8148b57e2416012e8907e52776d

SHA256
da98f5d6aac5aeeae90224cab55865640bf73667d4a82fb4006632fbbdb7c762

SHA512
18470ad4807be3bb86b7754139a4a959b5b7d2e2bb3cdf4e1fe0413bb320476e0e92fe09383294394ea8e47fa08c12fe69b6315e1201b7f60cdc534162819c70

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/_device_holder_gamesdkplugin.xml
Filesize
149B

MD5
7735d0ea1c6961e1cfd2235b833252a9

SHA1
9d13658715785eb0f898b600456589e908a619d1

SHA256
15b3f78e58b2b96e412e9b116a07b1669e3667bba79721c658126e3197185168

SHA512
67d22ca748898d20b9427317eb2cba86af7c16376f9aabae05ff64c322a629fb5375cdcf57d3689dd2f4d7b8b94fd253465b654d556d48848a18ec9510d13e90

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/_device_holder_gamesdkplugin.xml
Filesize
203B

MD5
64dfe0a6c2e46f677b520c706d743b36

SHA1
114777e9e9bb6b16f85e85a9b2c77119c1ae515a

SHA256
fe3143f216fbc7903a3130d0b69f86c0cc11220ff8950b8c5b3906686ab62d86

SHA512
06d975d90869fbb4390c411ca6952311c527d0baa1cef3e3d463a8785f98c1d3306a8af2e94fd6f15f28fa7dec81dd6a9c77c445ecc3e57ffd20d6133d6de235

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/adCache.xml
Filesize
157B

MD5
547005d70ddb60651bb478a97c0c2cef

SHA1
0db05eb6667a05c2a96279c809556e85ef8599a8

SHA256
337c7145d5b2d430421d659d2f415a3914c0c533eb99873cf316c37dc447e216

SHA512
f1d9c3739b94b8dfa8252c8c3ae3f26a0a0808f1617e5e8225f25274e9156970e5d35ffd3ed1bfab8bf6e0041d7016885370b08982270917f5844c4ae0ca1278

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/info.xml
Filesize
460B

MD5
52f81c6ea41a3e6fc1c65b20be6390a2

SHA1
fe7a7ccb5c9251df10bc85cc8e9ee5727e3ef48d

SHA256
8ecbb04b636806b132c5028d69a4758657e74f66e98e4c27f3f2c0deea148a9d

SHA512
2cd3d0ce0b7f5bcddf2be7cac080911354e20e741df3b2ed72eddac9ea078fff65fe4c62aa8f8fb519a891fbb51b010c7a338ecb550228426989897456bc3b6d

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/marsprefile.xml
Filesize
155B

MD5
f899f52d37c42ab4e93d7da79aabffce

SHA1
8c4d7b88e47772d3c79afcf0db01e409b0a70be9

SHA256
78931f5133703bb0ab75197e6f47c293f8e573277fe25c9f4eae620c61f7e57f

SHA512
a024665b65d77da8c670f0b31bde0f1ef5340f13b06a061f8a855bb3410f265de5f074feebbe038be22ff058292b6f76ac1943029ca0952c5c7d2254181f18f7

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/options.for.com.mars.hyperrunning.mi.xml
Filesize
186B

MD5
feef5e8cdd6eb50e9eb143f8c0f85f27

SHA1
de57286eabb61467d1c505efecbaa414c47d8adc

SHA256
a5f7dd1b24a32264ccb27d1e003e2f4d0679bf2ca5dea878aa5e56dd72f2ac43

SHA512
78afab249d3f3229f7f6a231a1d7f69a482970d149444766ebdac2818b4df4c23b40d174df725f6d6582341afad09ff7bff0794d2e2dec2c08b0b6e22fdcc9f2

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/umeng_common_config.xml
Filesize
115B

MD5
58247945cbebc4ae9bd0842eb04eb32a

SHA1
a5140443ae2f8f96caef9870d9958434ead0a37e

SHA256
0b27d1de6a86ca26f8f19ba07cd24557e175be7f63fcff7d88c443d052dcce80

SHA512
e36c58cd6b1d9ef7d8625bd3da3826d26891f0df2e0b2c5b17ddbace453a21368f6433fb3959653e81b82c60d4e137be0b5ec569b31bb70d9128d6136c4ea08c

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/umeng_common_config.xml
Filesize
175B

MD5
8c7517060c339acace4cefeca9d60828

SHA1
6ab4db9f11c08c5de4c54fe40a0f004bd2db10e1

SHA256
c755f4ea2a758f388f2ccf6714ebf38b071ef66e3f0455474ff8c2a98072544a

SHA512
bcc873df29aa65ef7803ba4411d7ca0a34b4699ff077d817ea3295ab4cbd3bd2833b96e9468602a7ee3adef0822dbadfea96d58b61291b5a76aff8765c1861fa

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/umeng_common_config.xml
Filesize
240B

MD5
71238ccfff2e3519bbf475f75142486b

SHA1
f304eead2eedfe794c89e45b979e2fc46efef477

SHA256
9fe6f8ceda62a61a83e03262b97cd1a77f8b6bf7e5c409e334cf76cbf544e4a4

SHA512
80fe1b06fe6b2e9b6eea4c8547ed806fa4948c083dc976319ee583fe3f73131223e7cc20eb1de4c920bbe931d8ed49eeaa6bb3b4d003a7d245b0f744f934b63c

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/umeng_common_location.xml
Filesize
390B

MD5
324cdd9e86b8fb412defc558b036680e

SHA1
8f54afa42baf41d538f0f02bcc9c4e8e0106723c

SHA256
234373510f164b28162a7b89b5ebe1d0955697d97cf2f991e269b10b1f80bfaa

SHA512
2b08cd705f8d22da534285b6d47a88b35d37b4d2bdc7207cfd65ae0493629d6feccc3bcf55791a27f40448e784d66e129ca8bd92e1a3bcf532b21c3a293e5fdc

Download Submit
/data/user/0/com.mars.hyperrunning.mi/shared_prefs/zeus_crash_info.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
c99ee8986a34a8febd71ae49fd448bbd

SHA1
010f8b77752355d42e528c71a4388ddcc5c80257

SHA256
475c32b0c0a4c6b5a4641a08398833365d33099053997dbe0aea90e8f41b1c38

SHA512
78dea4a8ba4b323580612e03e53f36888b22648b142a82dbe58c1354f490c6a7c5cb2b27e5abecd5e860555e63f995a01f5d1eccd491f59ea8943587fb75bdd3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
e2355a4388b19da151b47cac93cd75d7

SHA1
e23570ec17f23c7b858c27a91e2b41efc14b9847

SHA256
c426d3b79bf90928e81d9c761c6a489323ad5f710a55f72725e2aea0f0142ab6

SHA512
786387e9502d30edee7383de01195f673e63b5b24cc6ceb0dec4f4d9a9dc53dfdef3e689bc0b3d8904abc2a9ab2956133649e77a08e1996342399953f5ee00b3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
167B

MD5
41d02e1ab740ce69605fd69fd6f0a7cf

SHA1
62c735a42477d9658f62fd6aba22279d58003a03

SHA256
29864e1463ec85e5d41d459bcc76ff62727a3d42cbc523bd2b11f363b56b9a84

SHA512
16de281a367bc934c6f7325ae0c84a7eb4451ac73202811cd55a5fbc38b4222ebe6886b760702d2b1f7aacacf4fa691999f431f26fbccb0b7f623d270c5eb906

Download Submit
/storage/emulated/0/Xiaomi/misdk/logs/com.mars.hyperrunning.mi/2022-05-20/1.m.log
Filesize
162B

MD5
7eb283fff3de24c790841ed990ae31f2

SHA1
d3cef2619d205d15839d894251f2b65dd873accb

SHA256
7d35a3e70b5e604b29d4bded0143313213c2cc09b75baede60e4efd1b9f4c27c

SHA512
e580559b36c9e70bc50209bcda9d8e55dcd5e0ac544d8d8dc714f8989abfe73101fb8575f0df4448e993a353baf8641218f317efa433b3d0ca4516bbef1fba20

Download Submit