Analysis

  • max time kernel
    3896410s
  • max time network
    145s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 19:10

General

  • Target

    60258fe1482fc6968c0d0c2dc5cd7da0e8ce9b88bbf749dd0a648b0839c22120.apk

  • Size

    21.1MB

  • MD5

    6c44f70b5e5c988940c81d64e9f572ba

  • SHA1

    b1f6250e627b81d0e6c85ba1a89f4a27db17b2da

  • SHA256

    60258fe1482fc6968c0d0c2dc5cd7da0e8ce9b88bbf749dd0a648b0839c22120

  • SHA512

    a3c29384c1f9fc6fa5e8a3b33fba871688f1ed78caa5f0dafbf711454bce714b1f680c5c44632e288a91d7c403ac37cb94cdf05dfc30627f32ce801b0e391784

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.funplus.fun
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5157
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.funplus.fun/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.funplus.fun/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5319
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:5457

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.funplus.fun/.jiagu/classes.dex
      Filesize

      5.8MB

      MD5

      53169cd6039eed0e6e09e51eaf334b68

      SHA1

      dbae7b18efa263d78d739ab64a9796dd5e647166

      SHA256

      5122d214c1f9fd8bc74877c53729041e5fef942f48a029fca5628ba6eba15976

      SHA512

      138ccb06104675a6bddfd1d2fa3414cfef488caa36f3a9e1e80de5f2158b50736d75eed2069c1615b4a5f55027957a527daad3f39902ced13641976245483a9c

    • /data/data/com.funplus.fun/.jiagu/classes.dex!classes2.dex
      Filesize

      1.8MB

      MD5

      b9f6af5ade447ba94f8226e876f47a8d

      SHA1

      cef6217a93e5b482df1a6684907453256e7bbd32

      SHA256

      5cb2a9eb3568ce8af4e9300627cf82c024126f5638c848eabc66d51c267b5ba0

      SHA512

      6229447bcc23a6971d778142ea47ca9376bad4fae0bde081f9eea379c4c7cce7f07980eee928870617640498c1582db9bd168a7ef6087b539ab080df12b10d0f

    • /data/data/com.funplus.fun/.jiagu/classes.dex!classes3.dex
      Filesize

      3.2MB

      MD5

      0d30bd7dc8432d1c0bd46a34ab5db088

      SHA1

      7ad8a057b126dae53e14998b30326c5a48e1cdb9

      SHA256

      c55fb7699e933d0a36fec28de762a7a6ac0c094682a658c3e0c299b28c4d1422

      SHA512

      5285557e943bb03695705f11877402f556ae0e7d4457c15ac0ebf99a6f7a454442843ed9d536c8eeafb60330c190f8d652bbead4b4e360dd9318a7697924004a

    • /data/data/com.funplus.fun/.jiagu/libjiagu.so
      Filesize

      496KB

      MD5

      f07656a2f51ecb23edc102003c32b764

      SHA1

      3ef18f74b609313887b9e825c56a54b5a9eef20e

      SHA256

      f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913

      SHA512

      34b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238

    • /data/data/com.funplus.fun/.jiagu/oat/x86/tmp.odex
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/data/com.funplus.fun/.jiagu/oat/x86/tmp.vdex
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/data/com.funplus.fun/.jiagu/tmp.dex
      Filesize

      284B

      MD5

      f1771b68f5f9b168b79ff59ae2daabe4

      SHA1

      0df6a835559f5c99670214a12700e7d8c28e5a42

      SHA256

      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

      SHA512

      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

    • /data/data/com.funplus.fun/.jiagu/tmp.dex
      Filesize

      284B

      MD5

      f1771b68f5f9b168b79ff59ae2daabe4

      SHA1

      0df6a835559f5c99670214a12700e7d8c28e5a42

      SHA256

      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

      SHA512

      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

    • /data/data/com.funplus.fun/.jiagu/tmp.dex
      Filesize

      284B

      MD5

      f1771b68f5f9b168b79ff59ae2daabe4

      SHA1

      0df6a835559f5c99670214a12700e7d8c28e5a42

      SHA256

      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

      SHA512

      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

    • /data/data/com.funplus.fun/.jiagu/tmp.dex
      Filesize

      284B

      MD5

      f1771b68f5f9b168b79ff59ae2daabe4

      SHA1

      0df6a835559f5c99670214a12700e7d8c28e5a42

      SHA256

      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

      SHA512

      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

    • /data/data/com.funplus.fun/.jiagu/tmp.dex.x86.flock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/data/com.funplus.fun/files/.jglogs/.jg.ac
      Filesize

      32B

      MD5

      d57d1551d535f8e37beabdb042bd98a7

      SHA1

      f9e49c47af74fd7ea7fe8d42cf7fb4e62987995b

      SHA256

      5cbe771ec515d0042374d86004c81a9da6fcc8427346c764d71aa9e2116cdb63

      SHA512

      2e5a665eca444a609708da8443aeae0b5de70f1180bf78c1746eae4bcda16286d5a408598dfeec61cc00be9326c75c4bcbdbb5680093f704f9baab65ed33de6b

    • /data/data/com.funplus.fun/files/.jglogs/.jg.di
      Filesize

      712B

      MD5

      b2109ae5b9cc69cde8ea879a2679f8a5

      SHA1

      4eb62a8e3078d43f913c987ce7fab54d49b2cb28

      SHA256

      d8e821541e6ff5c9d57104f6d99fc17967971ed095e58111431ec50f872585ec

      SHA512

      e6550c095461616663c542c970205122fdb837520d8c91dd1f61aab6093dce8df184971da872dcdb3f9745eb71b2b78c81d41484d09f004fa90c0d1efbc57ab8

    • /data/data/com.funplus.fun/files/.jglogs/.jg.ic
      Filesize

      32B

      MD5

      efdc4d2368b94e320a4ed69e031dbfba

      SHA1

      e7a487cddcc8bebec3f3ad239acb78d013713d2a

      SHA256

      eb72293c76c753e884a4825acb100135aa2cd7126e7a3eb3717d1eb19dce1c0c

      SHA512

      1f26642b586fc83a32df3a3478060bb4ae67e8815cd4924bdb328e02390727908b46f54b988371c5f975b6b091ecdabd44732f6673fe9cdda10270a40eeb4097

    • /data/data/com.funplus.fun/files/.jglogs/.jg.rd
      Filesize

      105B

      MD5

      d15a003533bee9ddbe47d35c0ead74f4

      SHA1

      811148e7f1b12cd4b845a123e58d15e0af53bb0c

      SHA256

      10c30f1139cb6f38ee805885e4bd673ecbe309842738c04346a033f536ae7f30

      SHA512

      51fdfb1be5c663667464165c3e4adcbee6e04ddece669792cbe45c19d4771d28db10f9cc65ad06390c27d191be30d3dd5bd3adbe7dc4ebf8511aac62eab8ec2f

    • /data/data/com.funplus.fun/files/.jglogs/.jg.ri
      Filesize

      3KB

      MD5

      58ed6e677fe1d1d533c9082974bafc6b

      SHA1

      c3c7fce912fd7a5d0b8b5fadcc2cfbdffe78f03b

      SHA256

      52295828bfd294588138c39b752a62ea803f48473e7195799c434cc4ee22a8a0

      SHA512

      52cba8d0ddff5325daf281855faeddcf03a8ff8e970ce6c46766dc9db242fa026f042c7031124ef2e0f46dad882bc1f410a3775e83fadc180e72bfcfae660aa9

    • /data/data/com.funplus.fun/files/.jiagu.lock
      Filesize

      38B

      MD5

      a3083668da11cbc2e69a3c43c1baa844

      SHA1

      d6cdf64cf1a0b714a39e723747dcbaa73af81825

      SHA256

      bcab53df16b429ec7e9d62901f9ace4bd6b133d5d1d9775fd1ca30b9c02ffe7f

      SHA512

      71a444e2b7c41baf28f4722e2d6e9e80f9eba5d2c124abbfebf1b4c4ca6c4076242509508d52d01a170f5a831d4cad6b441fe348425dbbd3046b6780fa6c5dc3

    • /data/user/0/com.funplus.fun/app_bugly/jni_log_1653163844500.txt
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/app_bugly/sys_log_1653163844500.txt
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/app_crashrecord/1004
      Filesize

      224B

      MD5

      416c8e3ec2349b0f367b8cc392371637

      SHA1

      86ce7ebe87c63a4eb3011e8be5e201e816ae1321

      SHA256

      ef56ea166c77c4217717025f2a06351fd96ab6b5dc631014f5dbd2e3a966954e

      SHA512

      c15292d704c1385523e79442f7984e26e754fdb0b31ae652a30c942e31856ae87543fce116bf43f3b130ab45882984c9ad5b036c4770cac0a339d19539545d21

    • /data/user/0/com.funplus.fun/databases/ThrowalbeLog.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.funplus.fun/databases/ThrowalbeLog.db-journal
      Filesize

      524B

      MD5

      b67300d4695223bbf3bc32ca0fce18df

      SHA1

      b05440e55218d1f9f7302fbc0dd0e19f9f613bf4

      SHA256

      512a4755624f5ca282472b3124528fcd4c186e10cd4df140a53abb2f77fb8667

      SHA512

      33b3934f6d646063a8858056188d27df9e0e8d85cd7be5cd77fb178fa505d1b49b14a6ea38a46093db9546dd8f4f4080163f9ac0c4d42dcf916169ab8972893b

    • /data/user/0/com.funplus.fun/databases/ThrowalbeLog.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.funplus.fun/databases/ThrowalbeLog.db-wal
      Filesize

      32KB

      MD5

      1d863b6530135b8c50c904df3622b571

      SHA1

      c8a2634b4a904b0710dec8f4fc82d10f40ebc731

      SHA256

      7c84aa2583c029f3589c51a1ec939e4216a0807812fc77929c6c673ffe0daa7e

      SHA512

      b018b447ba1a44090dc9b4e7a66d985ce24ffb723200bdf57e4cac5ee72ccf7ae7a77c3fda80dc3045ca9f62c31f3d100f8fa1003c5cf6ca2085c1c42d1d0fe0

    • /data/user/0/com.funplus.fun/databases/bugly_db_
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.funplus.fun/databases/bugly_db_-journal
      Filesize

      524B

      MD5

      f9911a30d69dae1a2e2ca6a72b339402

      SHA1

      c8232ffb41a9de5d61a9f7040f4b98d31e81bddd

      SHA256

      3ac362114abfdde968a1bd7373504994e85d09cd6c692e081ff763a376a21d1d

      SHA512

      d48cd6122183f7696a46d8654e73be80bda6babeefb1465a12b6c61d1cbf7a9ad1575e1755b1802e7c8ac7729fab6fd465733c3ec4dc833d550803049a55f86f

    • /data/user/0/com.funplus.fun/databases/bugly_db_-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.funplus.fun/databases/bugly_db_-wal
      Filesize

      72KB

      MD5

      4e45c402f3e75e2895c506534c25e644

      SHA1

      130dec0b07a051f45e12eef338c6c45dad0cde88

      SHA256

      9a011604ff7f0cc98aac0b8f496fb73acd84daa5a6a705dc268eee5e68481904

      SHA512

      15e9beabe3abaf2e808c4285841ecb06fea32a883105f47a5b67202702c742977788b746cb02c5bc774b1455eaa30f70dd63189c205f69ca2bebd57d87553c7f

    • /data/user/0/com.funplus.fun/databases/sharesdk.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.funplus.fun/databases/sharesdk.db-journal
      Filesize

      524B

      MD5

      13fff65871134321bed8ebde3b9240a3

      SHA1

      acf23f866e6b09d8a38ebcc746e3a73a92272203

      SHA256

      add3c6822eae34ccf0f451108b53f05cd1398579533a1cd2e6f283252ada2bec

      SHA512

      e3cbcaeb20aa925f05d9c7d6c1ba5c358412b7ae72189c28ccf0b60127a9dbb55e5a49982c5bfd5ea13af5f51671e333c736eab592da28db618ee331c743bdb1

    • /data/user/0/com.funplus.fun/databases/sharesdk.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.funplus.fun/databases/sharesdk.db-wal
      Filesize

      44KB

      MD5

      6831605c90684e1ed81dcc903d1f47d4

      SHA1

      73198199c542ac72254a13051f9cbacfe3dd7725

      SHA256

      8ba8b85c52369f0a91c9865fb9af398fcd042546e8866f9162cf585a6bfd5adf

      SHA512

      ddce97019a32b83fb0f6c6cdc14b5728db772b48178fe4665f45a730cf20f27c9d14e4c7661ea5035b6e627d21a1c73236a66f14db0114e35ece2db891b0e9bc

    • /data/user/0/com.funplus.fun/files/.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/.mrecord
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/.mrecord
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/.statistics
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/Mob/domain_1
      Filesize

      2B

      MD5

      99914b932bd37a50b983c5e7c90ae93b

      SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

      SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

      SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    • /data/user/0/com.funplus.fun/files/Mob/mob_commons_1
      Filesize

      2B

      MD5

      99914b932bd37a50b983c5e7c90ae93b

      SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

      SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

      SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    • /data/user/0/com.funplus.fun/files/Mob/mob_sdk_exception_1
      Filesize

      24B

      MD5

      11353647b68b566a6aae20813e48bcd1

      SHA1

      726d17c4fe9c9160ed994220d9fce049e1074308

      SHA256

      b0c9ff6f3be9726a8c258151cdfc23325616dc8e36df3ebccb2804944ce4941c

      SHA512

      7e66b36d49f40f6c8c572d8eb290781a80d015d7775139a97e28a8b74705b3477994f88d777b6f72f62226f20f16f07bba368bb93c2e2db9c3045f5cb0c27b7e

    • /data/user/0/com.funplus.fun/files/Mob/share_sdk_1
      Filesize

      20B

      MD5

      589bad71aa74f05fe0831c6478ead095

      SHA1

      e5f264e46867e2c8adf6425272ef220fa9421487

      SHA256

      2b55dc02a1971c326d9cc9c9feeac0e6f6d1d667d5d5c55507476a9730227256

      SHA512

      647102f8551bc9579d380ebfd142ee9b36408eb5c4ed2377865990440440bdfec34ac059031aa3a40a377e2767a3a87ae7fd1577a84a6aeff507fd91c3854244

    • /data/user/0/com.funplus.fun/files/comm/locks/.mrlock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/local_crash_lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/local_crash_lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/files/native_record_lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/lib-main/dso_deps
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/lib-main/dso_lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/lib-main/dso_manifest
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/lib-main/dso_state
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.funplus.fun/lib-main/libentryexpro.so
      Filesize

      113KB

      MD5

      90139415047c1da426b390c54d1475aa

      SHA1

      594f0e3c9a0ce76aa3947c8f8abaa28daad596a3

      SHA256

      312fcec39ed377932e99f5da4436b03b018364eee095499a2e9fb9a29bd33b9f

      SHA512

      7b86876da50819a59e4af8f2c33dc4d3411e3efd6a7bd7e4a373e56c0867a2cf610141c2faea04b4338e2a3202e7ce537bbc1ac7915c2e0870e9465e26c9b2a5

    • /data/user/0/com.funplus.fun/lib-main/liblocSDK7a.so
      Filesize

      41KB

      MD5

      97b9ed3b970a77dd12e19e3b5c44255c

      SHA1

      514ebb99afd40f882940346f21665e4adc76ff9c

      SHA256

      0687c2632038814b6ccb6698c351861a0f6b9906a3a82bb55b30d07aa94aa7d5

      SHA512

      965afb0f9c8ef467b38ce77ac3f6a2c1097f94e0a816031c3fc90404a2a4657c78ac496d5cd0a39d8343e713ddd6f6a0ce926897905d04e7e523f2c9a37ce93b

    • /data/user/0/com.funplus.fun/lib-main/libmpos.so
      Filesize

      242KB

      MD5

      f9b0768488bc321b840013f413fc1c79

      SHA1

      01f97a1a3bb73306601f92474b9bdc80be026da9

      SHA256

      039e9bc0012e349c61fc3071a28b42bcead62ce51001445414b7b57cc211b6e0

      SHA512

      9b8a95107f89fae858478571f078d2faec5e7778826dfa26a4daea6b1e47b8cb18d1bbe192bec1b3ce053834a9199b19af0eae7ecb43a2ad212e11afdf22eef8

    • /data/user/0/com.funplus.fun/lib-main/libsecuritykeypad_jni.so
      Filesize

      853KB

      MD5

      ba741fa8309cf39d5a5887576e1547e6

      SHA1

      1cd81be4fe3cfd98e04e5a2ad1bc9f530f3d8fce

      SHA256

      a124dc838be8a552e10d26ce0c1472dd1d297461e9594f40a0c42a0558c22e84

      SHA512

      a8a30721704216f75e4a3880804632ad3f4720b0d0c9ff7ccbacddff9e990033675a07992bb08aa49b2593692c4101b7d32f65195d94d238ebb834664205992f

    • /data/user/0/com.funplus.fun/lib-main/libuptsmaddon.so
      Filesize

      461KB

      MD5

      e61a7386e3ce6f1c96e280c8c6857461

      SHA1

      aee44c9f68ebf891836f7821927ca122a9529bff

      SHA256

      9aa41681f7716f8251053ff3dbc8b29b1b9058f205b8a3ddce387ee03411ce59

      SHA512

      36f117a667a1738d2290c0e57202c426c56870b2a15ad95325dcd75bd9366ff3f1c4f35e481343bb519cf3ba111d89b349054425ace32468b99f153bf41d6453

    • /data/user/0/com.funplus.fun/lib-main/libuptsmaddonmi.so
      Filesize

      461KB

      MD5

      14906c1249989339a1eeb532cc233d93

      SHA1

      b6eba82312a0fccf632ac315875bc8f2ff0ecb6f

      SHA256

      62fbced0e732f63455015572b48d802023a4ade5b4cba7a2cd7442f4efe6290d

      SHA512

      2370de4d2b876acc947691107e627cac4454d0c2bcecbd1adc5f1b26a4e04376ad87b50de14a5d5a2c033c4b9cbbb664073ea93ef56f0b88aaf68768d83172c1

    • /data/user/0/com.funplus.fun/shared_prefs/SP_AROUTER_CACHE.xml
      Filesize

      2KB

      MD5

      60d6575b5fa1e7dd7b955f774f10a082

      SHA1

      2a0eb4d26cbd4590aea2d6276ff34f7d1e92ba26

      SHA256

      b6ec9726741c92345acbc18b11ab17a4e3c5f487f3f52cd7294c9755d2d57f31

      SHA512

      68a2f236a0903feb1433e9314548d6e4123068beeaab2e0d9a93bffee2d193a5c194e13e648c059df89dfa223fd2186c657bbf70af87c3af1b56774ee210257a

    • /data/user/0/com.funplus.fun/shared_prefs/SP_AROUTER_CACHE.xml
      Filesize

      2KB

      MD5

      a88ea63e57867148009aec6f866153b4

      SHA1

      95c78a24c7aa0d9c950f96f9ab6077e7c608b25e

      SHA256

      0e5776926c72da66d6438339a01567401730f7cbad39da7c6952f6aa533e7d9b

      SHA512

      9e7a6b64f041e0f766d188ef0b176afec56ff3b3d7e16148a03c7460f4b3fc721770183b691963d61c373dea65fd583137dcd44f0c2a028d8ef5423dffbe849d

    • /data/user/0/com.funplus.fun/shared_prefs/crashrecord.xml
      Filesize

      127B

      MD5

      22a690007e1184aa9795384976ff12af

      SHA1

      b5f7fe50fb486e7a7536b3220f098152b7dd51fd

      SHA256

      dbcc76d90b777198fae361b4c1928cf27c085af51a8f65fd6fb143c35a92a237

      SHA512

      dfd08b58ab9e8e249832bce92c0e96f07307d0f132fe1b9a1333a1a52daa1bc3e8d219684bc8e2687e72bb55ca025efd00dc240e1119511b198ab122028a01e9

    • /sdcard/360/.deviceId
      Filesize

      48B

      MD5

      1d8d16c4e3b19ebf18988530d9b9a757

      SHA1

      bc94c1cce05cd848a53271ecb9c5311e27ffebf5

      SHA256

      abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

      SHA512

      4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

    • /sdcard/360/.iddata
      Filesize

      32B

      MD5

      752c57e1da5b64a8f1eb794c94e27dd5

      SHA1

      e37036c99b3156f5d4c6475178d452021dbbf24b

      SHA256

      ee2ab15c4aca09c70c12c80ef177dfebf0f153468a120bff0e776289efac0b62

      SHA512

      79a2981d926cf1bea96a8d4d47ad2f8f32a689103bbf11ce449c715fbefc44c3101fb76f18fd24f27dd3c253307a51fbae5f441f77264ebacfa641883970b982

    • /storage/emulated/0/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Android/data/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Android/data/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Android/data/.mn_410185822
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Mob/.mcli
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Mob/.mcw
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Mob/.wkl
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Mob/comm/.di
      Filesize

      57B

      MD5

      70a42cba408700f9a6c01c7941a8829e

      SHA1

      eab01cc2c0671538795fb0b1146017dc099d0984

      SHA256

      499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

      SHA512

      8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

    • /storage/emulated/0/Mob/comm/locks/.globalLock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e