Analysis

  • max time kernel
    3830934s
  • max time network
    49s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 00:41

General

  • Target

    a14c3b50628d3228124bb0f7f4f0307f1f4a991e6205b5ec8851fdc5e1d505c6.apk

  • Size

    3.9MB

  • MD5

    88de4f4a115c61938878849afb8308a9

  • SHA1

    9315375f2a31bc938f7d90762754a2eae41f075c

  • SHA256

    a14c3b50628d3228124bb0f7f4f0307f1f4a991e6205b5ec8851fdc5e1d505c6

  • SHA512

    81faa9d6e41fa91cb54df79ff2cf53b2f0226b0094a2391445617a9e410f727558b75b59509b89ef70813d95f68c0924944b1bee2cef9a2e208db7b467a7b64e

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.shgiaf.zsyy
    1⤵
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5110
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=67 --oat-fd=104 --oat-location=/data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5611

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.shgiaf.zsyy/.00000000000/A3AEECD8.dex
    Filesize

    63KB

    MD5

    ed73a80eb949bacc52428b8d5a087fa5

    SHA1

    07e973549a2cee61ffeeb6439abc419cd8a489a9

    SHA256

    f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76

    SHA512

    4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/5110.yaqcookie
    Filesize

    8B

    MD5

    263453ba8bcb7bc854514b5c51a5eb9e

    SHA1

    c75c4082ae62807e0e4d4c1245b70d931f80dec2

    SHA256

    cb9fdbc3d285bbfedcafc5236eda55910866a5857c6ee3a4e3b5f3c872443f02

    SHA512

    ff7c52ea3bbd71a71b07b3b04845b8d50798fdff10c380e818f4da8b5bcc55f56d2378d1a1264e46d01e895d41a0c7cb9eebe180c9594419c2ed35340b4a465e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    650KB

    MD5

    5eaa0ab055f88d1710a1c680cced039d

    SHA1

    3cd78c640c175d8f41c981dec45da2e0671659fa

    SHA256

    629ce3d46af2e307c50aa0a8b6a4649c07f15c9bb0ab074dc9e3c42d452223c5

    SHA512

    fa0e514c183962c89a2f27d680768542628a031312300de7d1574490920057975f227fe9e95e2a1c3cef399f755686b40ca926a4db6e582f7c5a07277f072c13

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    1005KB

    MD5

    d9b299055d60b03c9e195cbc46cadb5c

    SHA1

    b44f770fd562ce6f8adabac7bd5880546ac10a20

    SHA256

    88e596aeb9640a98a349a1d18bddd735bf440160fef3837ec8b67208d583bad3

    SHA512

    55818f68ad2d4cab68a1be6fbb4d63623a6b8ca968abef68127ad4a444dafe63e28eecfee30d283f3b08998414993e3ddf919fdc8a9630c0a88e0876923ee659

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    1005KB

    MD5

    40a808de7da3c6b50166532f69208323

    SHA1

    93970ad18c81ce2dac6821ac81bf4a96756ad958

    SHA256

    bcec590e3d7a1d6a6e8d50af7dfa6bc3590933807c69cb4a065c0bfa8df3a264

    SHA512

    6abcd4d059581dbc39004858fffa8e8333a50212d3eecb5cf095a61355db48106e1a01ed73dcf4528076891d86d82ceb18eb88f7f86eb75801449110023553db

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar.sig
    Filesize

    180B

    MD5

    2b07b813ff2d497e8ca27f3448fed165

    SHA1

    4ef5bb551771e3f40654a5e255b4e8c6ce499e79

    SHA256

    5608022d024890b4db9f6a002780f379fe40636bccf58b0c9b5ee00ea40565ec

    SHA512

    c1f8515e064bafd7e370fc674132b9c8a30b670addc15290fbae8e61d578a3010e6b3a72dd13b9ec5ee09e43ccce79e029ac0196afbb0821a61a231c16bb8462

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/gdt_plugin.jar.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/libMMANDKSignature.7e06ec82.so
    Filesize

    13KB

    MD5

    a8dd7dd8ab7002cf9ab3f19ac9fb455c

    SHA1

    311d25212f08ccaccbb67c567096874a5cc1c632

    SHA256

    ce25c9f2e82eff62a175bd4f7b617266be35cb88746b2502b6afa82853bf9f43

    SHA512

    18a239874eb4fd552e3e5b822c788944277e8af2b8e18a0cce7250c1cd49162b5eed3101ab15e1da2a2473a168242834ac762558770bcd8bd93777bfb417b787

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/libyaqbasic.7e06ec82.so
    Filesize

    123KB

    MD5

    e53ea5f5ca3c7d3bddfc8546ff0f259f

    SHA1

    fa78eb119bd303466b6f4d93bee97e29b3c77035

    SHA256

    843da96dd1fce6718fc8ae0d51f0f6d74cc1874f4e78eeee064738cf1724ad2a

    SHA512

    8ddf99722dcc0429d6c1769865e45a48a490c56b35e2ac0877c9c69e980c719204535ca07d49f7f1c445944f7b1e6ca87850315fcdf542140e26df26cd70e510

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/libyaqpro.7e06ec82.so
    Filesize

    114KB

    MD5

    ffd38c1fa353f524867a72c2feaa5673

    SHA1

    58c0d382712899ef523a3b9e46178f1124850e3e

    SHA256

    b2a8198a3d2468e21d94e4420045727d9be42529eed36788d7a8f91870fc7745

    SHA512

    7e116252174f3b9592f310ef94cbe2e9de275a33facf46a180b122e5d9fe6002773fbf06d58ee178b67d05f1a3255e0ba53efbdbfb93c80c6afcd4d43b1793b7

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/oat/gdt_plugin.jar.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/oat/x86/gdt_plugin.vdex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/update_lc
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/yaq.7e06ec82.sec
    Filesize

    37KB

    MD5

    d268489681e5e5ca5ca2943e48543410

    SHA1

    20ac03a55c5032feec31e535289ea84a0ca0a97f

    SHA256

    7c5b680ce51cf3a5c608c89d02a09de67aaacd97e58d1a15d7479bac9309c2e2

    SHA512

    c5452388e282e62f45cc90853d7015d637ecccc872c707bbe152c0bcc9379fde7758dbe16a8f7ee9557d78caed7f320fa300eb5e247f8e5a5f06129fb049074e

  • /data/user/0/com.shgiaf.zsyy/app_e_qq_com_plugin/yaqsdkcookie
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_webview/Web Data
    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.shgiaf.zsyy/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    d400da3b6b9c27874c80dbd70662ddcb

    SHA1

    851662e0d75a30a026f5a0a2ee4603a465fbdb4e

    SHA256

    8ab0b64e092a1ea20888c3812d026a2e611278b9c5e5e652a5d622eef68e6921

    SHA512

    9a0849ef0636268b08d8ff7a488dd790982cd44f81c0d35856cd4b6104fc1e56761b99a9c8d1782cdaa3d9e7b4d2371f396f9aa745f504747873619567837717

  • /data/user/0/com.shgiaf.zsyy/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_webview/metrics_guid
    Filesize

    36B

    MD5

    2f31dd948ca73c6662340c5ebe5ac66c

    SHA1

    429c48f9455c3d5ef220f27d7d6b2e6fae533091

    SHA256

    08b8843a05854b31a80d9a4ea0de432f90254016186577a961218b4ada3c8d73

    SHA512

    70f0b53f8cf1f68125a910530ee1f1f8b71d204b1e2c2498c06d57c7769ef5e08266b8c4cf9f10c5dbfe415d522135b1f1f16662a4790c5fdd601001f496fc3c

  • /data/user/0/com.shgiaf.zsyy/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/databases/db33.db
    Filesize

    24KB

    MD5

    570963a489d33ae7af1369b91556b0f3

    SHA1

    7e590cdd53992ee4f61669417134b8c345ded5db

    SHA256

    ac96f925f9bb61129f069a0b8169c876b3cdafa0ecf6cdb5f51c78d96cd321fc

    SHA512

    5b455a1b72a4b2e5dd802042435939e3db374566ba5f11a19c7810920c60c9bc504ff0424a9b0c358789a4818bb6a10ff3b2cdda2839d46ca92fb1f0480cbc7c

  • /data/user/0/com.shgiaf.zsyy/databases/db33.db-journal
    Filesize

    524B

    MD5

    e96fae559bb2dfad5656ae8c880a7aff

    SHA1

    c6f823a2ab06cf8c1b96109c4ac1428381274689

    SHA256

    415771672ca0ad223c3c08850492452f4e0097e9e6ee07914103f84b8ed94434

    SHA512

    5061c854a8adf50d948e5f0f4f3b5bccfce41f7825199f9cf98531368988749bf786be6ef7091b3a08b224bff59ce3bc96e881892ca523a002a09e9e800da507

  • /data/user/0/com.shgiaf.zsyy/databases/db33.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/db33.db-wal
    Filesize

    32KB

    MD5

    0d982d4a18c79ab4fc14cf1819defa6b

    SHA1

    83eb41073e4cc3a81309991f26db331860146ec1

    SHA256

    d8ec983873248638fc6c9885a173fa29159c963de14ce6e23cd61429b44356b7

    SHA512

    c050590ad55d2df3969641eeeddac13f20dd56126942b08cc04bef54ec65476d58326b5370aeffe319fa81dd268458f6aad83992684524512fd3d085212b7ab7

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb
    Filesize

    16KB

    MD5

    defff2d2526945fbed0ccaa8643c7623

    SHA1

    3428b42c2f5941f226fdc237365b7ed456cab6bd

    SHA256

    49220e13346febc4ebee1d76a8f9c49f32ac5f2b9e9271bbdb7ea5bc8229b00e

    SHA512

    694e0bbd928ea3a3290ca06ea608a80e080c238966d7f86185634538527b09e8a952d121d2447f6ac00cb5ac39c6346435702127bac5380818127e2ae7c56364

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-journal
    Filesize

    524B

    MD5

    181f00ef2dd6347d739e3142742cf0ca

    SHA1

    c6215fdbb650b38b5b4f2360b27d6a5a806603d7

    SHA256

    72bc41daec11f7ea5dd89a502d989a27aa829efc47536ad72315a9b29546993c

    SHA512

    a1ecd0873c3e79c126646e4fff672e2b6d6c908da6f351959ae2adf727980904c24ef39381a82b8250d33b5ac597884252503f9258fee8aef10ba9a253bd4c91

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    Filesize

    16KB

    MD5

    403f1798ecd936de183e2ec029dfade0

    SHA1

    be69f2242e5f19ff8fc20d2e27ce359260ece501

    SHA256

    9a8ddb72c84f9a8d27f80c817685e463ffae494dd84a213b7eb17a42064bfaad

    SHA512

    e026a64cf2a830ba09904c1964cedbb028ced1e4e6c6004d39399abe671ca4fe2be25943a9d305f8a82e1b721943c4206373f1dd6a4b0b601e575b3cf740e231

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    Filesize

    12KB

    MD5

    b2a6f99f18baaef7255f682408cef28b

    SHA1

    51204c290fbef68a293b66a41d49959d04109a3a

    SHA256

    34d064860cbc6b7d96b5cb3aa914e9edb681f3bf13e7769070a5b6fc14b40191

    SHA512

    8d959d2f02336906815fb212b6bfe889edcfdce7e089104f3cb02b6f4b8deba65caeb26209f5d0f4d98376d98e58c55e706bc49867e14afc4e5f3796e938202d

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    Filesize

    16KB

    MD5

    3a450cb885b8d0d391198bbcf9834587

    SHA1

    fc2804d178875a66d58644de0b6c2c9a55e5cba2

    SHA256

    aaf453e9be9cdc61def997eb3cda7665ab6a69c370bfa03d7df16dd7b2a9173c

    SHA512

    5df4ba035be32540e0adf22b3514e241e823a04edc6eb1afbbb98620676c1a4f6de70a1ea188616137e9de9202db7637eb4bacc618758e4175f06b9da2b3c2c5

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    Filesize

    16KB

    MD5

    b23e83bcfea04bf672419f2c9f25abe5

    SHA1

    8ab3ff72e1690def3c5427a24bd55aa70769ac40

    SHA256

    b7258fe629ddbd79280875fde79cd3308a761b49672c7d3bf44b02d7ffe9f2c2

    SHA512

    8109c1f2b39de49172a7b4402286dedb796680c3628527788e2781f25788e6e3366223a6afa027ad7776e569a1c054c6433d59e627d7fdddc2588ada329f1089

  • /data/user/0/com.shgiaf.zsyy/databases/dictcn_gdh.ddb-wal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/files/mdata
    Filesize

    1.3MB

    MD5

    bff0ab30f2923180477af9d5579688fc

    SHA1

    2ceb0673f44820621a9b072f46fb8ef4c8605c63

    SHA256

    684b6de402f6b1567883e9940883ce29ccb31a606e353aa8109607f938c38be6

    SHA512

    f322dce3bee1defdf82950de20a2b48b66e33ae9f356a00c50c80592cd08fa0836d0b1e8f53c3810eaa9ee455e89490f44d68d98330d1f1a99db02d9e32116ba

  • /data/user/0/com.shgiaf.zsyy/files/mdata
    Filesize

    1.6MB

    MD5

    8501705ba7a94ca18740191e347fdfee

    SHA1

    a4de84b74e363a6bc86c8f146ed55f856298c48a

    SHA256

    011d62ef96f16c74b1e8d29ca017150f6e4f6abf42e5f2f598e607b776f4aa0e

    SHA512

    0fcc4f0c9c6ce424f68cd3f8485f815b10910888812479d9124099ce093e4c70fc394dc46153676d45a57debfc7a635fb3695e3f9f502ca7bd77eaecda85e10f

  • /data/user/0/com.shgiaf.zsyy/files/mdata.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/files/oat/mdata.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.shgiaf.zsyy/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • Anonymous-DexFile@0xcb269000-0xcb278e88
    Filesize

    63KB

    MD5

    5061e4948844f7d366972ac8005e9f13

    SHA1

    a2b79a1c79afb095ddebf0f16a1f9db64482bcaf

    SHA256

    3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45

    SHA512

    223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299