11386bf71529443b75dcc6aea61d9405d85bc73a626e0cd6ab83eb1ec7e75ea4

Analysis

max time kernel
3022397s
max time network
27s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 01:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

11386bf71529443b75dcc6aea61d9405d85bc73a626e0cd6ab83eb1ec7e75ea4.apk
Size

29.5MB
MD5

54ff8673dead8c332794fc8f32a70307
SHA1

6f28d54e05125624978e2b200b1dac9996d71626
SHA256

11386bf71529443b75dcc6aea61d9405d85bc73a626e0cd6ab83eb1ec7e75ea4
SHA512

8f2649b895b8b1fcdff07776a81eaf36961488ffc398eadbed16e2338512f28d4a1572d71a747f754fab5172d713ce9599cdae6ba255b3a7eb6490b37b826938
SSDEEP

786432:ryDjh0MljpuiV4YyMu4+CsWqHoFHZez8/B:4hLjpuiVPTuDWlN0z0

Score

8^/10

banker ransomware

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
banker

Processes:

com.bf.sgs

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications com.bf.sgs
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.

Processes:

com.bf.sgs

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.bf.sgs

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.bf.sgs

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.bf.sgs

Loads dropped Dex/Jar 6 IoCs

Runs executable file dropped to the device during analysis.

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar --output-vdex-fd=156 --oat-fd=157 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/oat/x86/baseSdk_8.odex --compiler-filter=quicken --class-loader-context=&com.bf.sgs/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar --output-vdex-fd=54 --oat-fd=55 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/oat/x86/woaSdk_5.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.bf.sgs/.ucache/classes.jar --output-vdex-fd=69 --oat-fd=70 --oat-location=/data/data/com.bf.sgs/.ucache/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar	4284	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar --output-vdex-fd=156 --oat-fd=157 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/oat/x86/baseSdk_8.odex --compiler-filter=quicken --class-loader-context=&
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar	4084	com.bf.sgs
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar	4365	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar --output-vdex-fd=54 --oat-fd=55 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/oat/x86/woaSdk_5.odex --compiler-filter=quicken --class-loader-context=&
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar	4084	com.bf.sgs
/data/data/com.bf.sgs/.ucache/classes.jar	4412	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.bf.sgs/.ucache/classes.jar --output-vdex-fd=69 --oat-fd=70 --oat-location=/data/data/com.bf.sgs/.ucache/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.bf.sgs/.ucache/classes.jar	4084	com.bf.sgs

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.bf.sgs

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.bf.sgs

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.bf.sgs

com.bf.sgs
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Requests cell location
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4084

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar --output-vdex-fd=156 --oat-fd=157 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/oat/x86/baseSdk_8.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4284

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
2⤵
PID:4338

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar --output-vdex-fd=54 --oat-fd=55 --oat-location=/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/oat/x86/woaSdk_5.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4365

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.bf.sgs/.ucache/classes.jar --output-vdex-fd=69 --oat-fd=70 --oat-location=/data/data/com.bf.sgs/.ucache/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.bf.sgs/.ucache/classes.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/.ucache/classes.jar
Filesize
357KB

MD5
1ad21d5c815ff462fe87754e4385b8c5

SHA1
331f715998475a80784c14a5b9037ecce8a910ea

SHA256
8c3cd230cf46e416ba8053e68ee98d3fb981eda99f1d65d2ad7cb415e28d54fe

SHA512
aaa3f520aed9deb9355ada5cdb9cafc02cc436f5781d54288fda4cb851b0c9ab7f7e11f712709643da8d54ce41ea5248ca5b9826b084a3e0355286965d31aea5

Download Submit
/data/data/com.bf.sgs/.ucache/classes.jar
Filesize
357KB

MD5
3ba676f78029abf349b56f472beba13b

SHA1
c1ea8ecfc69b60390a617b224f7e2886fe64c3b7

SHA256
eef52f292127d06ec53db21744443174c71793e01a21539cc57b3ff9d91a0896

SHA512
f2f146463606ccaf6aacc2cd05978ff9fd1886405b020ccfa85766f801d1ef0077656c017f16df29aff6975c8a9524f21a42b327439f83ed3951b21c02bbdb14

Download Submit
/data/data/com.bf.sgs/.ucache/classes.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/.ucache/oat/x86/classes.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/.ucache/oat/x86/classes.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/.ulibs/libunicomsdk.so
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/ExeLog/com.bf.sgs/com.bf.sgs.log
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/ExeLog/com.bf.sgs/debug_2022-11-26 14-34-57.log
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/data/com.bf.sgs/ExeLog/com.bf.sgs/net_2022-11-26 14-34-57.log
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/app_push_lib/oat/x86/plugin-deploy.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/app_push_lib/oat/x86/plugin-deploy.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/app_push_lib/plugin-deploy.jar
Filesize
143KB

MD5
eaa664d6c4ebcf5c9a8ba9d5a6b27108

SHA1
1f0802577c7b0aa74ded5116351a36df3c9a4fca

SHA256
21bbaa7123351b3bed567118942fa3b81a5c9ecbd4dccac51190bd38870a4d22

SHA512
49ec0d99d81df0dc082d64c88873db39b39fc731cdd1c2390bc33bca27e90a9185a15d59b1eced182f384c18746e572f971fee2a7411a5b39cb0d5878b113993

Download Submit
/data/user/0/com.bf.sgs/app_push_lib/plugin-deploy.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/app_push_lib/plugin-deploy.key
Filesize
174B

MD5
0322709705bfd468abd4214469279d4d

SHA1
4d347b52618043b00062a778222cb04eaf7e2bda

SHA256
95f53aaf50edf838eac36c8f5c28bcd1c261592b9033ea4c96c139218740b23f

SHA512
7f9c2383792ec019cd53971a3abf29437ceeed37c99437c3a20e6892433ea3c5c601bef235ac10bbc4f7c54fccf96e83e16e405781a09676893ec5055af5bd8c

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db
Filesize
28KB

MD5
b4c213506873086e0c24c8b6fdbd052d

SHA1
31cca628059ebe90bad3b610221f0d4812da3032

SHA256
1b31c6911a59ecaf4cc23a79cb8ae18d9c9f3b14ea6c275533a8b37dc927cf80

SHA512
a8a1a49a5e0fddb62a56bee9be9020d2fbdf03097454b4dbf63919571819aaeece56aa441478e77a52609773008ff5db58488db20e6da63878925163d917c73d

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db-journal
Filesize
524B

MD5
931756b174699e9fa06c092d9d2ecdd5

SHA1
2286b11b9ba1b845c248b1626acc9594e1ff1210

SHA256
c59b1360050d483af01e91041c73513175e4674dfe3ee6e0467437d694e50006

SHA512
a23e61952e3ebcf92caf36115a778f17e4f1d57a0318ce6cc3cbf2736baa7b877826fc20fe87b1d4376c2ada89820b7b6009f2ba0e563c29a101d6d4810b885c

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db-wal
Filesize
44KB

MD5
7f5cd63f13f2cb8d2a111ae0d4b5df1e

SHA1
fa4bab3c7d7689fbde20b0466bdbe1d6c4acad4d

SHA256
584ce44e3248e50819a419cc4108193357c51717c41616f8012d7b71bcb576f2

SHA512
28de96d4f31b141aa90360871634fe85aa22d5bbf2f947430d0b8ea275a82dd3b352559d0212b49bf31d238d5a6fc3386b7b48b090e13a8414507a2549328dad

Download Submit
/data/user/0/com.bf.sgs/databases/TDGAtcagentgame.db-wal
Filesize
20KB

MD5
68a8029cb59b5bf66d128eed5755c4bc

SHA1
6aa8a7d222a7337ecf86c27b319034b0df0e981a

SHA256
c477b48711b6f61fb557b48d91b653c5beca37dbb3e0b6215302dafef064aba8

SHA512
d541583a139521ad22bf1a3889ec26c524d7a03bee40a255429b8263ef7b8ec8b050a125a1051c94548dc71c977e8c81bcf746cbccebfb777465d7bb562f94e3

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db
Filesize
36KB

MD5
3367f6d55659777743d3a076a6bfdccb

SHA1
37573f56b356b5c34936ca2c06ab8add96cbae4b

SHA256
c2067d7afd618579c1114277ad31063850226b978e712ae4367447b9740d289b

SHA512
abb230ec85b8ea8e02b4674f8a1d84a99a0e0bf88a5a5bcd92909c2b3e3a381e2078faa83789879cb6f39ef09a9820f64a295f9bfc311caa24006cd72c5f87c5

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-journal
Filesize
524B

MD5
d296f0e50c6a7608f30d2e3dd3b5aec3

SHA1
e471a0c2d6a4597072716fb3dc04788088cb6779

SHA256
9d08d65a60b6ac573d40c32bb5eab32b292f5e6281e6233640cf54addc9f545e

SHA512
6eec0c853c3edfc6419c5d153644ba07f55661f0fa02700c76cc83c3dcfc909d3e50a6113b435bcf9d3ad568894f537205c2ddf32d0aff261db5cdd443aff42e

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-wal
Filesize
44KB

MD5
9cf7188606124540a04a82bbf7a3fc3e

SHA1
53f286242c23e8b9cf589272fa443acfcf9f637c

SHA256
de742474941ac6a85c5ebdd69abf6c4bcf3ff29c989ef8f73c5b218c078c7500

SHA512
b57b767ab47ea19bf703e54ed09df996cb9110c030e25a9307b4befc60fee3466ed3df8bdab711038a613a2fd555624d960cb8ec443f5d1deea958901445ea41

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-wal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-wal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bf.sgs/databases/collect_data.db-wal
Filesize
8KB

MD5
4661546e6cfa15f03bfb52a43303098e

SHA1
9b233a48b9a1639afe21c20714f6971d68005bee

SHA256
8056703e893bbae271454cf1cec37ed2d96eee684e4cbae0dce79b97b0d84574

SHA512
579eaeba8dc9fb4d4f638a3085df82a5031c1a529e0744c3461521ac99037d32b2b80d1df90bf03fcf59df2657e892a7c2492fb2f0d01da5b4994065dfc59b6e

Download Submit
/storage/emulated/0/.iapppay/app_flag_v72
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.tidbf
Filesize
15B

MD5
748d9beeaa1899252a7365b780b95fb0

SHA1
2158cbe9044f2b138df0094615afe6616e526c9d

SHA256
59290d2d5a77605f8140feb82e44e8438115fb2f93dc56ed4c225b88c21baaa8

SHA512
cdeb0c4cebf1cc96ebda6940763a940df76120ee991bc7f003480caf055a970f16e4a19ef2ba2c56fa056d539b981e16542ec7239a7b91dd3828585bc2d1e440

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar
Filesize
78KB

MD5
76a655fd17670e28b809c372b2e19b38

SHA1
676ff14387e3078838062f825955a83273d4b8cd

SHA256
04521e31d6336c9113e95aac118e2526cc3c73325bfec1bfc4a79b3f625f2ab5

SHA512
b392bccd4f94ea9a3369bd6c9f68b4a5780766e75eab1f5b20153e6f01000431c5090c5d2e49364db4398264222118fd07d9f0cba82450cfae0d2868f978ed25

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar
Filesize
78KB

MD5
56924d654419d58e0b526090bfdcd788

SHA1
729bdbc4300b6486dd5037142a68fefeb711c4f2

SHA256
bf6b4993519b9fd8a7e3087948bdfb58db6ad6a0cb413233697f785c01262192

SHA512
1200b1d4ab180c6442c9b6c053459464e4c11e6a0d5e7cf66de9c0cc8d72acb36ffa32772bcc71bf6e01623dc5e3c3c64e554db8e509238c04a408f0141aa124

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/baseSdk_8.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/oat/x86/baseSdk_8.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/baseSdk/oat/x86/baseSdk_8.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/oat/x86/woaSdk_5.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/oat/x86/woaSdk_5.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar
Filesize
45KB

MD5
fd4a55569c5b0ba289dfb72598ccdcfd

SHA1
eeb93eb92c1674d569380776d95137478ae8a027

SHA256
6f21a0f4a992bb926851c0ac0f1c6304e9429bc73039fb3db78a561a1be4a2e3

SHA512
1ffc91f20177b0ae45e628a048543b3508a1fda5715308296f2d8e0d177b0c98fcf359c0d05ef960f3634b8f278968a3ffce86474d3aa7b3522484b08e677d85

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar
Filesize
45KB

MD5
2b0945616f12c0542355de3f371a0228

SHA1
cc514e3da5f1701f1ae5c25e9600d9c69eba6c8e

SHA256
8eb7ceec39cf488844e60bf04df8edfb6dd01c8d69379b470ff1c1d714ab895a

SHA512
f530c4c4aa5a0925e95b0a88be0cb244da8df64ec8fdeebfe908607eb66da00b25075ff179ac757f33b92d66383def81942433eec790fe7fbbdd7508b3b27156

Download Submit
/storage/emulated/0/bianfeng/sdk/plgs/woaSdk/woaSdk_5.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit