Analysis

  • max time kernel
    2938787s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 09:20

General

  • Target

    4570f15c81ebd9043d82560bc80008f78f59fca9754415e67b52a045511c1a59.apk

  • Size

    10.4MB

  • MD5

    8205837d1fe12e2488ebce5152f6f567

  • SHA1

    1246804eea6f68eb963751ae0118cc3b8f697611

  • SHA256

    4570f15c81ebd9043d82560bc80008f78f59fca9754415e67b52a045511c1a59

  • SHA512

    3479223c4f95f6be9ccc4b90421e0f84722df5b4314806a8e37e8c5b8d9b241050922330e1d9f6f30e980c6fda82995dd1e1e257eb9f84923b10ed8197a1de92

  • SSDEEP

    196608:kEMf0ItfsmJXybK/36RAUBfu+d6PZAUx5wiq9qRs5PbjoqRpcpHllAdHYjsazr/U:/Yx2mJCbK/3UAUhnd6P/WiqwRWbj9cp8

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.kuyinaidianxi.fhuu
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4087
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=134 --oat-fd=139 --oat-location=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4470
  • com.kuyinaidianxi.fhuu:service
    1⤵
      PID:4191

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/4087.yaqcookie
      Filesize

      8B

      MD5

      e1cbf8de1cc18e94dfe46a8fda2b632a

      SHA1

      35c179407459c399fdc3c96eb4318de2cdd0a827

      SHA256

      4c93621496f70c1c9c5b391fc4ef88173bb965bd6031cdaf844bd5463370ae26

      SHA512

      0a17a1d11c6e3936a311d628db402856dd96f3e9c01e7154be99025740f4376664f20a1abb1c2d49257f94612363f47ce2ed63e348f128444ec82a2a984a5d68

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/dexMethod.82560842.dat
      Filesize

      15KB

      MD5

      61c2a9b3ab06706f531cdaca9644bf9d

      SHA1

      3b742630fe31e22f7d890e6edf0ee9354ee4d1ad

      SHA256

      db9da36f3af0af2f1ceab64d4f2ecc20f10a6e78560782e7170e7cfaefeae511

      SHA512

      88af1117acf8895ca36b1726c065f88b6f0d867d36cf2344b4c3a4692c2080c1a6412070981c42f12dd3e935a6e310150f644db5bdd2efe2520d6c2dc7084826

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar
      Filesize

      395KB

      MD5

      48fc7312c48a8d2cb26b203406239a8d

      SHA1

      93d1c493e53d208200749c7f050a217826c1d2ee

      SHA256

      86ed9d1157bd3d2211b9fc2cf132ada60a7350fc74a6f52c6ae8d826259b75c2

      SHA512

      cae08950b2be005b3fb2c22ba51d0e752f6156012afdd0f47be7e5656c9aadaa2a6e1b7e94ee49af088e7143a61fa744922ddc4cd94b2cef0da9de85143b920a

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar
      Filesize

      671KB

      MD5

      f33cd96af660946aa40d4942b9bc2e37

      SHA1

      3d99e7538d5ab712df74b0fa9080594f8525ba97

      SHA256

      37ff5da6acb1f68f44b5c56b287c4dd9b2540a51a42d826276c01ffe972f992a

      SHA512

      59e80f5300ea36a4a6aa722cc0285cfdd08bb11456ec7852776a4a9a81f4f5781cad19846acac7330c681f17b712fff83b7b5fc4b16085a7536ea5221700be69

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar
      Filesize

      671KB

      MD5

      403e7e695545e66e0de7213a10f3a601

      SHA1

      c1bb797b4b891974a79be1bc720e85f22269d38f

      SHA256

      9d96c8440ff8359104fd7e1589d47939fef7cacc6b0c5610e7df3b2b8e74c166

      SHA512

      326413397737b7d7d81c46b11c5e12218cca8a39e4908079151333cae18b7f12dc18ca91764f76a68ef39d706a4a9cfa3e3067e82ecc061594dce2028da7f4b8

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar.sig
      Filesize

      180B

      MD5

      611d0374e676767b718d9b2cb6fb8b77

      SHA1

      3bc57d08e06f90734aed8b12d3cbdf3dcb46c563

      SHA256

      213d171a6a16d13d72b49ae5a9d558479cc468ec18aafd465249e87b3f009904

      SHA512

      07a355dcfec65eb59618eeb85ac4ce2cafac99c38cd8d32f5bd5ec751893e0107d9ff1b848e38732900c155b5823989e9d967c2560396f4f85a537fe7815169f

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar.x86.flock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/libyaqbasic.82560842.so
      Filesize

      63KB

      MD5

      ef807eef9a86eaf2b3f0f6161f97a5f9

      SHA1

      3d5c38dca967d0f609a0b02827e7024bbdf8eb0e

      SHA256

      1615452e2bf6c9ad92834380d8f102b27e1708c0e3f10f5240270e5c189159bb

      SHA512

      5ce7f1cdf240294b37c1deafabbc81f39b7b3511b51e2ed16f5f97f0ec148edda6b1412c70f1110c0c65c581489ddcf47a0a64b85f4ea3c1ebc87f2cf7804f95

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/libyaqpro.82560842.so
      Filesize

      53KB

      MD5

      eb044d4f1a9c5bd759baeb4316331478

      SHA1

      88f314ba678ca894f88c5e6f822f5623d7ca09c3

      SHA256

      f0ba39e8ebc0b161015db167f6e74017557273647da740cd8b46be7d1d9a59fe

      SHA512

      e88734831ade103b3bcfa391e3b9705df442502f44355ebb057bcee5bd3d5a963fc65f26774d3d3d31cf6a7a7459eabc81cb70dc14d7267e267e1ac53264052a

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/gdt_plugin.jar.cur.prof
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/x86/gdt_plugin.vdex
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/update_lc
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/yaqsdkcookie
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_permission.json
      Filesize

      17KB

      MD5

      8fc67d707db12823acf821598c94340c

      SHA1

      f7d6c8ba690e4de0333d14c4e063dd77377c0a3e

      SHA256

      904b058c8ed4885c28ae33d55270d368e7f3e29f9e1b58dc4829bcc96f9ea272

      SHA512

      506eac15f0415018a6c3b65da335d0b785c933c24df93e392037ee5020511e113a8c05ed805646c32946cfd3231c68165f49277f224478825d3a9ba72a500a25

    • /data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_permission.zip
      Filesize

      5KB

      MD5

      5f441f4589bbc4cfba295ecb0db7c6ce

      SHA1

      127e06e99b82086c4b33e4446a63e634405617f0

      SHA256

      4cd713a010ee92e249ef5e66d9e3d4d3c44800efa17270df0546fcd0d548f405

      SHA512

      544d43557f47618cfda36899d813cd100aa47b476025cb584dfb42569456612c7e6a382c83c39ea9495fb67f59c0643f2fdd85721351d9ec35310c85ffcc7d76

    • /data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_scenes.json
      Filesize

      79KB

      MD5

      ee6c53b81e4dffea2e16b01c06b06d7e

      SHA1

      b019e6ae3814515178a1ba99212e0debe40d6a56

      SHA256

      5bd45ae6899ce3eff81ad574185a21e85507bfe3f672acc71d2b4caf8768085d

      SHA512

      7e874d7dd5be5081b9be578ba996467f2d53e3bb869765e6c12da71f079f69a49c82ed8d5ab12dd1a7cfc5b2aee50146cce4de8829e19a42a9caa361a6bb8e0c

    • /data/user/0/com.kuyinaidianxi.fhuu/app_tbs/core_private/tbslock.txt
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-journal
      Filesize

      524B

      MD5

      7f821f16be70c060c137f35fb30ec54d

      SHA1

      d43d51611d85a05bb49bdbad40a0673f101213ad

      SHA256

      8368cd387b18d202e92cf1629dbb96ad63e11d15c46d3df007811ca281ef0be0

      SHA512

      07ffeebab924edd46a1fac06468d8cb0fe2be58c04bd23f2d8b99f0960bfa56526d9211de551e763ec64e48c13502ab535fc9a6ae0901c19ec9dcee26f56a0c0

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-wal
      Filesize

      32KB

      MD5

      21b2ea69d9e07fd65eabce12d466dfd2

      SHA1

      a60021aae32739062182531c7f25b4f688377e3a

      SHA256

      4eb5bb227a6508942b35a924c7c6a42c0946a184e88c4f9cbd3c7fce602d9579

      SHA512

      f38badbedad6749a2d8b5a30a415c9c5db920b23b0896f2149c072ca882ad1ce66bb17789c3dfe5c059e7ed3af6289458d9bca3980781f4142a0ca8902a4ad44

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-journal
      Filesize

      524B

      MD5

      72012395890f454cc8e85eadbc929adb

      SHA1

      24da2243cb751b8adefb9bd5e4c670cd63ca5999

      SHA256

      a950b473a57d5db8ac524a790c2e832f7daab9f33394f7c5f77299355fe778bf

      SHA512

      eb5a85274360ee014dee0e4ec24f9d05d6485285895d180bd34c8e2ceaa032c2d822ef346582588425c7829c114f29a7ccbffd408f36f05b646ccaae8b15f542

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-wal
      Filesize

      60KB

      MD5

      d110600c2607b8a99bb90c95cf981900

      SHA1

      8dac56264289193a67db69f67e76e88227ffa930

      SHA256

      a69f059a7a95f2eb596722c951bf3706b66c876953dd8fd8c76bfc3881cbff41

      SHA512

      31b6d6025d1dc570c80ca3f3f0490e231599e7edfd07a8c7379978d89a8192d7e6267fe127cf130100d6007513c89ee9c25d0ee5a39b246bfe7d5b5c4fc3fc63

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/share.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-journal
      Filesize

      524B

      MD5

      3f2753391dc81f4ea97894925951003d

      SHA1

      91862e0207c8ea6e163a88b322f38f62b0ce62d1

      SHA256

      94944e2555e2c2f85445b072e5a59c514266d1d384060f6cd4368d673de05080

      SHA512

      74987196f6cfac3bfc98168c29ea3fe380c7f87070e84c6ef5bfc023cd75e1fd31773e97ea0ea89c238056f480c16194030b87f8ae181195e7a1ae661400e669

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-wal
      Filesize

      60KB

      MD5

      16293020cee84b2fd909fc1380de47d8

      SHA1

      4a9faee5ff0dd6b2e147b530dae0522109ee0621

      SHA256

      3afb010220367acadfba67731e4b5baa5669682821bd5f2685686fd8c07bb2f9

      SHA512

      c19fed539c3a70f9e0b15b3f8143eef5561993f014e78eb7bf5fd0c22746ac99d0454893c9e49417c1aa140a5442ae3cae668409c5f0eb4e2904771cd78991fd

    • /data/user/0/com.kuyinaidianxi.fhuu/files/fileLock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/files/intro_video/intro_video.mp4
      Filesize

      1.9MB

      MD5

      e5535dac571d4054963ef2dbec7bfa77

      SHA1

      6ef35bccdfe8219746190678613344bd700adc78

      SHA256

      a2b6552fadc7d043b57462d7e86a2ecd633eb94a2e5298aa561969a46d2c7d9c

      SHA512

      c02764fdd22e590f66fe250de24411476298fe423df148aa4e3d6f464eb9940c954d9efdacab30787c28cf84f2d1d810ab9200f79ae24235eb50049faa8e852a

    • /data/user/0/com.kuyinaidianxi.fhuu/files/intro_video/intro_video.zip
      Filesize

      1.7MB

      MD5

      43068654679b5a5a7d57234fbcb65fd6

      SHA1

      c50ae8653c2b1bfa88ed362e9e1c003bbe995e27

      SHA256

      d845d51bfc3340fa88871d86b32ebe7f77a6afc88828ad44abbc4a735cdb0243

      SHA512

      647a49b07f0a5894aecdb4643aad82844fd64cbb8e9f9e72d17d4d4aca3e7194a52032e2b89ebff9ee27b7bc7b15a60541561bf4718032588a7da6ef235ce4f9

    • /data/user/0/com.kuyinaidianxi.fhuu/files/kctrl.dat
      Filesize

      109B

      MD5

      66437951243fa5a129c1979f605fad41

      SHA1

      cade495d13366a5e9fab9f2ad4c0d5f6c9edf695

      SHA256

      80ef6c098f47750ea9eab30d91fd61d5451fe3bccf9c79a1a3e067b90dc2f2fb

      SHA512

      61bcef1935f120effa8c7a5a3439dcb2d8d4d4a56fd7b1d9d017249d03abc53c3c4fc68e8ebbfb5f47144f88df28b867215194a0fbae307f2e108ed3f871d6cc

    • /data/user/0/com.kuyinaidianxi.fhuu/files/kfmt.dat
      Filesize

      4KB

      MD5

      5c63915eb384d35fb2607e940ffe8699

      SHA1

      9e9434f8994c763ea2d81aad000bed4e973e7e58

      SHA256

      e8ae0c20d83b24894f4861100a3b41d08f8d121e6c38614dff7b0dffbb4e4eb4

      SHA512

      aba3dc55d5e568b3ce8027980ee3503b69c4203c8976a20b8122af0c1dbae0e88614736f3d0875e680429027cabd071870a5ee72ef823289b2c0a39b4e334953

    • /data/user/0/com.kuyinaidianxi.fhuu/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjY5Mzg2MDkwOTEz
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjY5Mzg2MDkxNDg2
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kuyinaidianxi.fhuu/files/umeng_it.cache
      Filesize

      415B

      MD5

      d743507b467c1a28ae162a0038e2ee32

      SHA1

      0f2539476d604e8acd2adbd697dbbd43b1ca80b3

      SHA256

      793146373f35422a67f407ff7ce559bc96d26675c36a847cc57f29119858d81a

      SHA512

      5e5ac0e36e4e46bdc6c15db7f930b77ee7c19158bd77a328a21258455d5dc0388671044b0be9f33b84f366cbaecbbf6c902064cab3c250d7a098fb8336c75e82

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/CommonConfig.xml
      Filesize

      144B

      MD5

      546f173854d0b51811f42ffc18f2ade9

      SHA1

      d0625ef694ec8f7e8422e8068c5fdbdaad1f20eb

      SHA256

      d574fdc31ff3891db622a268d183ec84dbe310097c417ec0690f4b11ac138edd

      SHA512

      5b486aabd2ea236a6bda4256fb0cab68b1370f47f4b7742f3660f5ac44aaa3bb8922a4738e745ecedd78727cff3265be89a269f8b1cdcc66303257e50af2cb35

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/NetAccess.xml
      Filesize

      113B

      MD5

      d03f7c337a3398b11887e7fc4cfb3fd5

      SHA1

      afc882fdc3d34508782a8b209e379dde284b3ebd

      SHA256

      469e82370d9f7e3e57cf4097f7f55e5b920c20106f604dffe7e33154c4f20363

      SHA512

      c735b71c616a06b7e9b287ebaa359cff7103ae69d0590ba50d08f7f0e08e0161390cab9aba12759902d113d7783773ba82526ecbeca39b38d1b355a5c5113a53

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cloudconfig.xml
      Filesize

      138B

      MD5

      f3d90e681c60de91538a9a0a8f12015f

      SHA1

      3b4a10dc5a30304fae5c978f8eaa0b523977b8d7

      SHA256

      2e5e841e4d336270b3bbaee841d2a843a5533e855a195a118cd7dfed85b48a59

      SHA512

      66ae1ecdc2a7d867e199ec967e00e3d038491fb332db1246dd90f4c620cef2005cb76044bff331985e02735ad8b9d144a444bc6e59d711811902a19fec08c314

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cloudconfig.xml
      Filesize

      212B

      MD5

      84874d4ca80e6ca8dd9e68f1d6d9ef7d

      SHA1

      d9b0ea5b6a5214dabf955bb17dd5f9d4a576d97b

      SHA256

      52a61ec68bb10a43af3a92cb740fabc67547f6a15e7f9bab78994db71fd8ae33

      SHA512

      ef909060d2c2051836efa086bdee468b86cb14f6b864bc967ecf521d6ae7d7934445ca516d81dc179d1c63c1b31e988a76b6b82bb713bcea5b7332d2e2dd2a75

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml
      Filesize

      133B

      MD5

      06c59dedb4a63087a4d8f83b99fcd7ca

      SHA1

      6dc9007c3a959c885e54578a056ac05e9dc82125

      SHA256

      6480584d856e4e16c8fe07c64a5426ebc6c808e1ffa86fd71ede5344a044c2ff

      SHA512

      c24d7bb5203446ee19a75e750483490b8805adb9a217cf95540e234458058dcc1f8fb10dd556ccc4e4968c5fdf8bba081e30fedc130e0f0aa2c6360d811d9791

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml
      Filesize

      184B

      MD5

      aa9e37bfb4a6c19013f991a95798a160

      SHA1

      3ff1a50c2854368550dcec0862bcefef7e7580ba

      SHA256

      878e8183141dc37b74cdc8b8e89aa5ce0dd197ad0d45781b34180e29913418d6

      SHA512

      2dca58df0c110bc181bd8b17c7d844047c90287afc8868976a765021732cd5efb64731d1c931f9c063d4cfc58a9721c424a04401e92bfccdcbb3dec343f3895b

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml
      Filesize

      243B

      MD5

      14f6aeb894f56b0e48f1f51b714dd124

      SHA1

      177a1248b6d5543f214863f7f87e38543d124d7a

      SHA256

      1e729ee99b43c815f017b723b3bf4899b04fa219f467faaf92c48b1cda493e91

      SHA512

      0583c55350fe5da139f8896d9b6a5556838a9e780c493b7235defe230fc270f0d3cff668e656101d8f457c26c9ea395cecbc58ec933b60072366b25d6e419a1b

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml
      Filesize

      113B

      MD5

      69b1ab57018c103e1fc37909f29db655

      SHA1

      707d5c4283ee205c28ebc995ecb4c7c1d1ea480a

      SHA256

      2f9cd24f1626d06139e7d80bf97f3825dd5baf9be3daacd6f13c74df614640a4

      SHA512

      18b4a8bc932dff894fdb89a6e6eccbfe32d871e3fa510e7d58a29963109f4918ab26ce9106bbd0075f002468fb356ba0c50838f0133ff787046d53f9240e3e6a

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml
      Filesize

      176B

      MD5

      3f860f71ad42d997252809be69127a8e

      SHA1

      41e6c4cc1e74abd1bdab59e75ee816b924a23598

      SHA256

      2153e5f88834684ad32738a59df6438b94c6ffbe09dc2e07a0d4447f4bdee4e4

      SHA512

      a70ccfd63377bdafa0cc3d4fa3c0e089f159e3d42251593768b15066c7d225f8721ea08030fe0aeaaeaa852e5ffc3d77c25b4caadae534c571ced0eb5acff643

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml
      Filesize

      241B

      MD5

      3b30c3bb4644ae965e6db1af7610f3f8

      SHA1

      7f906ff6ca71dac29a1e6fad38cba85b6969d815

      SHA256

      e78127263c733de1ddf47ea558212f253c16af9815efe6fb3952153dadbd02d8

      SHA512

      dfd5072eefac0024e77a0334b20459925ecc320f429830c48af8da583281dc9e01794d3f1ca746b517aff0629e67883c1f697625f6d3d6875b065bfade079662

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu.xml
      Filesize

      120B

      MD5

      959ebc6d340942d1faae6f157c6bec53

      SHA1

      7b2cc690f938ea2bc583a9344e10a80252b8c230

      SHA256

      fca76a5acf16c355646cd637a0bddfa96b81e69e498c3dd6061723a024577a54

      SHA512

      e12d6de56751dd0fb767cb844b3ec56e35e842eafc3d47f3017d8e1f548118107995b2052ada09aa3d879a7baec0feaf2c41d65f3a32e2edd58d60454cb38de6

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu.xml
      Filesize

      331B

      MD5

      0d8e4ce44d4148a5b610be1a8142fbbc

      SHA1

      f90e48aeab664209c52c8de57918f580c209d3c9

      SHA256

      659c276f953295c3de90cab4b367dae5d9f3efb784a3f2b1537a6fa10ab66163

      SHA512

      c911ae83130b304837fa39d2e0d38e84ce5c4de1602e035423599f8192672ab147deb54b830ce8a7efc126b366db935761a37033fa59df44d7ca0c086d62ca7f

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu_preferences.xml
      Filesize

      132B

      MD5

      fa3b3f6001b2efdcaa0fb25dda34363b

      SHA1

      a32d086a38842417c4b6d58c6aa6e5ccde8f45f7

      SHA256

      4238033423b6fc6c57b6828e4ee528c280c8d426dcb2e795a375cae6d88d20da

      SHA512

      42ef6383c1fe9399896a839e543664272196a946b80fef5b22c52df2768d1811deb1fa509ec34eb5836c14523a70cd7672750398290778eebc3c2b8d95ce859a

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml
      Filesize

      200B

      MD5

      d1cbf7bcfb5c08305544d3d935fd1167

      SHA1

      22e9c316dec71286f3aa0589bcbc0923a23da78c

      SHA256

      21e1634a5f4c43365cc4473883ffa024d50064b948eb53c0610e557e2079fcfb

      SHA512

      3d786fe2590b81c93ddbb781c3e469d214b7222b8f342c77caa686e536152aa3f47496116ebf6f25d38a4c99ffd78fefb0675a2d35302c2b05f90a714f84d949

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml
      Filesize

      248B

      MD5

      3a8228accd6d424a826bfa4c17243f31

      SHA1

      9f67539ed4f18ff14aa77f8b4e4ef00a06965f13

      SHA256

      164be8df6aa30ee44482749ec63fd1f4345531b78afaf957a3da1cb735eb872b

      SHA512

      dd396fb4d995e03c2ab5d34cd2cf7486e8974aae2a0864a5358ace59c8b64633473d16fe4613269625361b7a97875b3581f7412297ee6638df8b38c85fb235d7

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml
      Filesize

      248B

      MD5

      6d50b5821d59e9e7917d0b12238ffa9f

      SHA1

      cfd252887d1be036533cf0f7590200bfb41538f8

      SHA256

      9b14559efbcc7497fe776a0425e90e5763d2fe8e71776c185213f18b880f9a8c

      SHA512

      2f688339c094f2f76036cd39fe48e8a3385f9fb37948b107600655e4956c1112b40fd4670f8ebeb71bd0e7c081c2392f1d92c47cd7166b17e0bad39f7e53329f

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml
      Filesize

      248B

      MD5

      6bf8482acc732963a5304f10c0169662

      SHA1

      2d954defdb3cd773bef6c6c5a2e87da70041b308

      SHA256

      78812f28ad4ad11471bf000f710b58149be98f95bc48db891b59a108a225863f

      SHA512

      d3cbad73a90d90360fae649ebf4915392f3c4362e632cecf744b1f861ff1e6b01adab549b841520aad7f95ab6319f12830e890a5b3abb07943261ea3e2db9caf

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml
      Filesize

      116B

      MD5

      02c4fe518a7dd611485179eda11e4a32

      SHA1

      ab1d49a40e952fe8185eaeb21a66d0e87233b891

      SHA256

      fe794c8c9850dd3176ff5cc78b57f249fff3b1b418256fe048964f48c783b143

      SHA512

      207e569078be4e0ec2415eb6a1320ab9f6dca76973a64b20cc04e9109393d79bded5f419f6247bb3b044b699a49336fcb37deb15cf7709209972b81795cc94e1

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml
      Filesize

      176B

      MD5

      18a28aa4e578f1e965c502bdcb453dfc

      SHA1

      74889d932ab075c463ccfe8f073529548dc36bee

      SHA256

      eb71349c4a20c6dab1f771c7d1249dae7c44b13de6d375acb9f773c30caa2264

      SHA512

      3f02bf2dc163793e3fb8d26ed586c16d954f7ea07ff29e5d349a7d51d17d40d70ce9bb753ec50324a984aab92e74a9fad187dbc1d9e9b959f42f57c718c64045

    • /data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml
      Filesize

      241B

      MD5

      89def997220a6a97f0d6bdcc38536086

      SHA1

      6d5ff19d4fdccaf8945510158d154108de0cecff

      SHA256

      3e921212cb37c68779bd44a433609bc0afe833aa2122ffa1edd2447fb62f56b9

      SHA512

      3d356f82b7ff1bd755d75e3942535536821569bea7a9c1b8146740309da671990330c916f660d5f56b19c68376685126f3df4676b41a7ba27637e17f08972e77

    • /storage/emulated/0/Android/ANDROID.PERMISSION.TEST
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Android/data/com.kuyinaidianxi.fhuu/files/tbslog/tbslog.txt
      Filesize

      2KB

      MD5

      8cd5d31cad5aea2c5e1cf382918c2e7e

      SHA1

      0be567ab7a4842571be2fe4bf88cdb45d8412247

      SHA256

      15d8bffc31380294cd5cf3875fe3300b0443d30d2fdfc6121e6e85418f9bf208

      SHA512

      8a95bab2a1585993b98d2798d9d7ad0af4dee63f9f55fa5d2d352cef4db21feb34f0ebff7db0497a66a2288f91c667f294b55a02966084c703dd5c40ce20a205