agent_smith | 28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb

Analysis

max time kernel
3733374s
max time network
30s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
08-07-2022 08:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb.apk
Size

2.2MB
MD5

7b498e695056b304c6cea22dccfa3048
SHA1

189962ecb9c3bef7e33331057ad106310228dccf
SHA256

28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb
SHA512

58d9f2d0cc6ae9e84ecd7931022ef2d74d84c76e408a459ca0b62fd956ff1035ee4deb897e14342b7b4442b8c9b6cb1c25a6d1c817507578dd03f0110ef18f4e

Score

10^/10

agent_smith adware ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.

Processes:

com.duandai.aa.yx

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.duandai.aa.yx

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.duandai.aa.yx

Loads dropped Dex/Jar 5 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.duandai.aa.yx/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar --output-vdex-fd=51 --oat-fd=53 --oat-location=/data/user/0/com.duandai.aa.yx/app_jar/oat/x86/lpdf.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/files/one.dex --output-vdex-fd=63 --oat-fd=65 --oat-location=/data/user/0/com.duandai.aa.yx/files/oat/x86/one.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.duandai.aa.yx/files/one.dex	4650	com.duandai.aa.yx
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar	5069	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar --output-vdex-fd=51 --oat-fd=53 --oat-location=/data/user/0/com.duandai.aa.yx/app_jar/oat/x86/lpdf.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar	4650	com.duandai.aa.yx
/data/user/0/com.duandai.aa.yx/files/one.dex	5133	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/files/one.dex --output-vdex-fd=63 --oat-fd=65 --oat-location=/data/user/0/com.duandai.aa.yx/files/oat/x86/one.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.duandai.aa.yx/files/one.dex	4650	com.duandai.aa.yx

Requests dangerous framework permissions 8 IoCs

Processes:

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.duandai.aa.yx

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.duandai.aa.yx

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.duandai.aa.yx

com.duandai.aa.yx
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4650

ls /sys/class/thermal
2⤵
PID:4822

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
2⤵
PID:4883

ls /
2⤵
PID:4976

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
2⤵
PID:5024

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar --output-vdex-fd=51 --oat-fd=53 --oat-location=/data/user/0/com.duandai.aa.yx/app_jar/oat/x86/lpdf.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5069

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duandai.aa.yx/files/one.dex --output-vdex-fd=63 --oat-fd=65 --oat-location=/data/user/0/com.duandai.aa.yx/files/oat/x86/one.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5133

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.duandai.aa.yx/gooogle/yunUid.f
Filesize
169B

MD5
6e264eb01d972119937ab570fa1fc2df

SHA1
5219b8de6450e77c6c1294da29f6b78c4b916277

SHA256
9191e07a60341fe2bcf8f1e9c854a830251bbfdbc994c3cb3c9014294cc9eb87

SHA512
95c2507aba823a84cb04d462cfd6eb82afea5f1494256835a737c52d823bc923c06e59b3022eb69e5fff323c316a236f751ca060d2a38dc23013007b97bec557

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar
Filesize
35KB

MD5
e1ab911d4b585a26aae02d8540575013

SHA1
ac148f7bdf95edddc97d9224ff51a771f1070520

SHA256
8a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca

SHA512
983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar
Filesize
69KB

MD5
efa761137b704871d7e20876e397d398

SHA1
8b4c431f2387f66b220391660b9d9898e4c16c2e

SHA256
19d0968e122acb3d0a19265cd4c890fcae065e609ff6baa6d217d9a7fa1524ae

SHA512
aeb9696fcb3dbee53862529cc80324eda1e3e0f78f53178f9f2254e165d14e9f82b661e3be11a630a2f7f586ebdeb1c2cd6385100d23db2578d6f70b674e1829

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar
Filesize
69KB

MD5
61503c78bfaed115dc65f007a7461ed1

SHA1
e989f0a0abe36a164feb51d6419eb1d10db3fcc0

SHA256
f9eede33f737a4287b1412412c47a8eafbfb732f764fe18cce955c4a28d3d2e4

SHA512
3c59c6deaf0c0d0aa559beec62fea04a8021d471ba92af656983f6ad72f1a07af25a3d886b1c2783cecd802bf865c6100c459eee83e963cee95d834e643d2014

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/lpdf.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/oat/lpdf.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/oat/x86/lpdf.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_jar/oat/x86/lpdf.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/Web Data-journal
Filesize
1KB

MD5
d827b76035b006112f6400c918a818cc

SHA1
451ada0acb117fa0fd6ffc74a04e5f96b74f28f1

SHA256
7e6e89e875ca7a46e8fbe673da6cc2fec490503bbe47c368964a670154b4d8e7

SHA512
b431f4bf7140ecf93eb63b404ad9620b5e6e07cab6214419608fa9fe7acf931a5d8c38f4350029023643892ff4a986e6595b80249bc39c1a373095129b2deb9f

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/metrics_guid
Filesize
36B

MD5
c28b1034c152957ed6bd88a107d679fa

SHA1
5c35da4a0a6cb1d299cc6e05c8f27be612373cdf

SHA256
cd60687b92c0218515eb21d2f6b3724081d4a5ffe5fb449ce33704e8eb6a2330

SHA512
19db6abe703319939d53649480aebf323d60dbccf4e27af07ba3ab8bfd91c211ad8c6c678b27508b68508f54dd29fe6dacc6d631d0dc081b469ef8f73ef463a5

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/jiepayplugin.apk
Filesize
45KB

MD5
c83e81f064fbbff6870210fcc9abcf6c

SHA1
65f94be4a62160065ff192b9baac02da3a293031

SHA256
fc37a898193dd0b37c226a5841936c88bc51a02bf99abe3f17ab84951a3aa1c9

SHA512
100c617de8aadb73da780a8e16eccde545b9717bc0e77823efbc1d9831f13a2592a1a14d9e68ba49a364cf2a8029f6fee42d7268925da7f0112c18a5e9412164

Download Submit
/data/user/0/com.duandai.aa.yx/files/jiepayplugin.apk.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/one.dex.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/jiepayplugin.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/jiepayplugin.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/one.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/one.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/yywda.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/oat/x86/yywda.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex
Filesize
59KB

MD5
1b5c4ae7e385db4551ced8c19386abe0

SHA1
12d4bc9728c4f1deec1b9b8aacbfe71c3ceeb4d4

SHA256
8211fa61bdd647dc627a182c4e2a763024252dfd94d14f1f12c9c9b4df045d70

SHA512
f56d74aa9a3c150034866b12abf7ed233fcc2bd03d7f34bfdfd61cd054952189311669892e91dfcbf5000f509210d56d094abff99371e4897bf7943ef5a2764b

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex
Filesize
59KB

MD5
1b5c4ae7e385db4551ced8c19386abe0

SHA1
12d4bc9728c4f1deec1b9b8aacbfe71c3ceeb4d4

SHA256
8211fa61bdd647dc627a182c4e2a763024252dfd94d14f1f12c9c9b4df045d70

SHA512
f56d74aa9a3c150034866b12abf7ed233fcc2bd03d7f34bfdfd61cd054952189311669892e91dfcbf5000f509210d56d094abff99371e4897bf7943ef5a2764b

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex
Filesize
59KB

MD5
1b5c4ae7e385db4551ced8c19386abe0

SHA1
12d4bc9728c4f1deec1b9b8aacbfe71c3ceeb4d4

SHA256
8211fa61bdd647dc627a182c4e2a763024252dfd94d14f1f12c9c9b4df045d70

SHA512
f56d74aa9a3c150034866b12abf7ed233fcc2bd03d7f34bfdfd61cd054952189311669892e91dfcbf5000f509210d56d094abff99371e4897bf7943ef5a2764b

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex
Filesize
59KB

MD5
edd86547c2f3d608b2e52ee4fe17f732

SHA1
81304da30d2a4233b440fcbcb1a34709c50c61b9

SHA256
98bfd29e133724a8541f23dc40c197a6b463d12c602439698079bb63e9e6b452

SHA512
614f4a6fdb9b0cb87848d4015a86f1124c0a81bf02b8ccc10c1cc65fbecf4bd25a1293f355442c5b3134f9ad6c64d1e8b5db729ebb8623acf8051259b4bcd20d

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex
Filesize
59KB

MD5
1b5c4ae7e385db4551ced8c19386abe0

SHA1
12d4bc9728c4f1deec1b9b8aacbfe71c3ceeb4d4

SHA256
8211fa61bdd647dc627a182c4e2a763024252dfd94d14f1f12c9c9b4df045d70

SHA512
f56d74aa9a3c150034866b12abf7ed233fcc2bd03d7f34bfdfd61cd054952189311669892e91dfcbf5000f509210d56d094abff99371e4897bf7943ef5a2764b

Download Submit
/data/user/0/com.duandai.aa.yx/files/one.dex.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/files/yywda.apk
Filesize
35KB

MD5
e7f60d676d27306924ed35124698dbf2

SHA1
3aec5caf42c0cd6b262e7a9b5fe3da29ecd1f958

SHA256
82491bacfcc1fba3c0c425b37b1152e2e428255df1321ba1714b1403bd08563b

SHA512
e6d49fc8c233068756782e1c11b28b4a8b6a5717c65e6d3caad6a0967ff999cdce9298f090ab5d6f1098d591382ca24eb80baf0f4f0dbe37464ac46df152f401

Download Submit
/data/user/0/com.duandai.aa.yx/files/yywda.apk.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/UM_PROBE_DATA.xml
Filesize
193B

MD5
0923c864649a36b88b029de5cb0b2a61

SHA1
89392358e84d26d38af55fda59ffd11ca4fa3e70

SHA256
db9fdd30a312a32644b64fad492bec4d2a43a6a96a0d3ac83df1168a9167d180

SHA512
8975bf1acfc0622a866c5492d28b6bf16490dfdf14951849dfc7db78d2cbe737a88d2088a9af6eb90253cd761c42322c8e28600cc348b3bd0d317f808cf8d4df

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/com.duandai.aa.yx_preferences.xml
Filesize
143B

MD5
7232b8f996960049e1e391e43f56c324

SHA1
9d240379e8a63650ffd0a750c8eebb8314ec4e56

SHA256
7469018c851c1142763921f3a90b2f66adcb7744afa9ccdfdedbc0548f7f1c36

SHA512
ec0a274dd00d88d1774cfd40e3922e77336e829a6854d7e6bf05d3cf02af54531871432b9e3c6698a4cf75db236b9e4471a8e7314f0d184f2824a7b2d0dfe724

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/com.duandai.aa.yx_preferences.xml
Filesize
200B

MD5
3afa5cfb6fd436137aba0b17928977c4

SHA1
c1df2a06962f38f5f9c221dfd0a5981c0a4e0745

SHA256
9bd52054d302946323dc64ae0c6d54ab0688220ec4558aa29f06963431ef05b3

SHA512
83ab72dd6974080a8d53fddd32faf3d630958d0ee68a7a38f0f3058f365a5bc874e0fea2ce837ac48ef3b547fdb6f1ee2ce4903b2d3e971d68e3e8e2848e653b

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/com.duandai.aa.yx_preferences.xml
Filesize
241B

MD5
432842163f6837b7cf74c695d0333d7f

SHA1
2477cb33563a31ade9d9378d118974a5cbca8220

SHA256
9c441c3d986c9b10a76c7bfdced775eab4dfff2e96ad500f92196be5fc0b3982

SHA512
0d14bd8e2dbae3295f48a6926042cccbfcdf60c3d54226e413b267de16575c8aaa33d6839f53a6dad257f69d8ae70905372432b428a900800a722a0921deff6f

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/info.xml
Filesize
400B

MD5
5dd61d356dd00ec717204a25cb5a077b

SHA1
b1ab9987dbdcfcdc53c79c4790836232f28c112c

SHA256
f3e9580f02e9d91e8c6542b094789167ec00535d988cd7b377cf1f7d7d383847

SHA512
51e48bbd482f01b96657d209bf3e277a9675aa1722b9088f3f95b0a5a50d0f22c0faec7fa76ad1479eac3dd82822d87a2750af21840ba35563879e3e05a7834e

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/onePay_SP.xml
Filesize
125B

MD5
24b69c8f35ecb747d525229acc45481f

SHA1
ca9058811829978cf65edae36b9a32c1c84c234d

SHA256
de1797b8a889f6e30be294acdf7980cf060e70e7b48a2a39f20721418d3dcd34

SHA512
46184c7c2d28a81f57f81acb9cd6205ea289e6a42061af029c7c541e543f9c06a81c7c6a6706bab1af03f4fc077c76ae927f81045085585a6e33860dbcb21b0c

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/onePay_SP.xml
Filesize
180B

MD5
b60547b4b3cb89135a0e42d1135b39fc

SHA1
dea96d18fcda45a8274c6dbfa3a6ae066d57bb3c

SHA256
9b2ef2859da862a0b3fa2dca215acc4a36ab1fdbf242d0034750b9f249a1113b

SHA512
6915bbcd4ff7f28e2885091af17c73926f0532cfe0789b6bffbe1643b1333c1ef25b560fa146ed9369bb6d55b217bc1f5884b93675876e7f39e291870c4210dc

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/onePay_SP.xml
Filesize
238B

MD5
d972aca50ac698da077752b801e09093

SHA1
729ff12776171cf1f76198be53e68225f40c9160

SHA256
594c3d36a3dcb67f44763640eabd3f7e50e2294f6e38518cac82c3c6c8892613

SHA512
99614d2f2a3ffcc45c59db7974aae001434704a16c9879ccb2babfa7a194d85f27d8a6c9959d169c399d3c783eb72cf60195508e563b2b49ab2246801fd97320

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/onePay_SP.xml
Filesize
284B

MD5
f428cda9b1450a8f25e63931ba9afe66

SHA1
90ec3bfaa59ba75413d3872b9fcb18439329b452

SHA256
d69a3c8df839b5ff32e03aa1ef1fbc46f47091a9bd366d8b5913bc422d9815c2

SHA512
5429f52dc2fcc9f7fc2c0fc6a39c63309b106e43461a54528e0323c244a8c47d0ab51ffa62b5f6403a2aeca49594808aaf268fbc5a5950cc5ea191526affc29e

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/umeng_common_config.xml
Filesize
111B

MD5
0e4f8c888ae2d3a91d065da4f9ca926e

SHA1
8864a22eb190920746ec928b8b916736c1f4aa11

SHA256
58c3c021875eae0d6067605c1721ab632d11ba1b7eff4b7f3a8420429b97ca49

SHA512
df28ae3e59b5a1faf66c1b007944ff274a0aaee63e7f74a7dd5d98529f361193af2b00be1e358f6638f8bf6f9f80eb187a36a6d104640137393a30933cfb9bd6

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/umeng_common_config.xml
Filesize
171B

MD5
16b6210981477d305eb6dbfb466086c7

SHA1
9a74159bdc263ffdabbc83f0461bda54d9a76eab

SHA256
bb6d2b5bc67645ffce5a72f371d6158bc71a584a00e1cfe37b963d18c3231577

SHA512
8b7afe596da6236652e7d81294aecf708bba53e193205b9d3e26f7d18b6ceaab80a388e062b16f22e2385ef4b863d667e460b3301e170617466e1287794a70dd

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/umeng_common_config.xml
Filesize
236B

MD5
a010827f8f0e0adbac9429efb8a22a94

SHA1
4a54a9a6176f31d4d080279c6acb2f83d81e7f9c

SHA256
632e5bd0ee3282ea9a75c0e6a4830dd5e32ee6c1933cd20627576fa10bd70496

SHA512
fb7684ac567c39efe7decb8ece4fb7968062a160e8810b11f25b6e76b847d12048f777b5d3f4d83c06ddc4d4c54455cee9e41e8d4b127f6388aa4f163b721a74

Download Submit
/data/user/0/com.duandai.aa.yx/shared_prefs/umeng_common_location.xml
Filesize
390B

MD5
3570af2cf1f44a1777a30ee6ece4bbbc

SHA1
311107c145554935f869ab907f3bec923d594ad6

SHA256
de26d42ac51513a52eda4ae7cbcc1bac618d76924abc19719dd6d5fb7233b143

SHA512
4bc621e06249278887ad91180c3bba46cb8e7739db94ddb9f88ffb0b405844d6bcf6c3a88cd3731db9bc13ac9acefe01d3c1f0ce265de581163a0bfa1210faa1

Download Submit