8f46b045209a925fbd6f38ca69f6c43df4e153ecba4cc35210b498ec508d26d1

Analysis

max time kernel
2530539s
max time network
158s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
20-12-2023 07:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8f46b045209a925fbd6f38ca69f6c43df4e153ecba4cc35210b498ec508d26d1.apk
Size

20.1MB
MD5

de4c9f77a8f58b72d824197b578b5638
SHA1

e2fc03c1b6135765aa0c033c429c1ed14a6cbd00
SHA256

8f46b045209a925fbd6f38ca69f6c43df4e153ecba4cc35210b498ec508d26d1
SHA512

81d4c84318b0db22ecf990ef3a3aa51fd339c3921c5f5ef238aaa4623877e721357dc2618ead1447d80c1b82c84b88419a9f7fb028dbefb0b9dd2c6ac6b9d420
SSDEEP

393216:J17C/zDYsvH8/y6k/I1DfeAevF8FW8DFE+EXjyE7uYTzdK77E:77Cnnn/Ixxed0TjUtZXdK7o

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	net.duohuo.magapp.bblt:TcmsService

Loads dropped Dex/Jar 13 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/net.duohuo.magapp.bblt/mix.dex	4225	net.duohuo.magapp.bblt
/data/data/net.duohuo.magapp.bblt/mix.dex	4292	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/net.duohuo.magapp.bblt/mix.dex --output-vdex-fd=48 --oat-fd=58 --oat-location=/data/data/net.duohuo.magapp.bblt/oat/x86/mix.odex --compiler-filter=quicken --class-loader-context=&
/data/data/net.duohuo.magapp.bblt/mix.dex	4225	net.duohuo.magapp.bblt
/data/data/net.duohuo.magapp.bblt/mix.dex	4225	net.duohuo.magapp.bblt
/data/data/net.duohuo.magapp.bblt/mix.dex	4225	net.duohuo.magapp.bblt
/data/data/net.duohuo.magapp.bblt/mix.dex	4324	net.duohuo.magapp.bblt:TcmsService
/data/data/net.duohuo.magapp.bblt/mix.dex	4324	net.duohuo.magapp.bblt:TcmsService
/data/data/net.duohuo.magapp.bblt/mix.dex	4324	net.duohuo.magapp.bblt:TcmsService
/data/data/net.duohuo.magapp.bblt/mix.dex	4324	net.duohuo.magapp.bblt:TcmsService
/data/data/net.duohuo.magapp.bblt/mix.dex	4807	net.duohuo.magapp.bblt:channel
/data/data/net.duohuo.magapp.bblt/mix.dex	4807	net.duohuo.magapp.bblt:channel
/data/data/net.duohuo.magapp.bblt/mix.dex	4807	net.duohuo.magapp.bblt:channel
/data/data/net.duohuo.magapp.bblt/mix.dex	4807	net.duohuo.magapp.bblt:channel

Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	net.duohuo.magapp.bblt:channel
Framework API call	javax.crypto.Cipher.doFinal	net.duohuo.magapp.bblt
Framework API call	javax.crypto.Cipher.doFinal	net.duohuo.magapp.bblt:TcmsService

net.duohuo.magapp.bblt
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4225
- sh -c getprop ro.yunos.version
  2⤵
  PID:4267
- getprop ro.yunos.version
  2⤵
  PID:4267
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/net.duohuo.magapp.bblt/mix.dex --output-vdex-fd=48 --oat-fd=58 --oat-location=/data/data/net.duohuo.magapp.bblt/oat/x86/mix.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4292
- getprop ro.product.cpu.abi
  2⤵
  PID:4350
- logcat -d -v threadtime
  2⤵
  PID:4490
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4568
- getprop ro.miui.ui.version.name
  2⤵
  PID:4568

net.duohuo.magapp.bblt:TcmsService
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4324
- sh -c getprop ro.yunos.version
  2⤵
  PID:4418
- getprop ro.yunos.version
  2⤵
  PID:4418
- /system/bin/sh -c type su
  2⤵
  PID:4687
- sh
  2⤵
  PID:4701
- - cat /proc/net/xt_qtaguid/stats
    3⤵
    PID:4742
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4832
- getprop ro.miui.ui.version.name
  2⤵
  PID:4832
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4864
- getprop ro.build.version.emui
  2⤵
  PID:4864
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4953
- getprop ro.lenovo.series
  2⤵
  PID:4953
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:5024
- getprop ro.build.nubia.rom.name
  2⤵
  PID:5024
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:5075
- getprop ro.meizu.product.model
  2⤵
  PID:5075
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:5115
- getprop ro.build.version.opporom
  2⤵
  PID:5115
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:5160
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:5160
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:5190
- getprop ro.aa.romver
  2⤵
  PID:5190
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:5217
- getprop ro.lewa.version
  2⤵
  PID:5217
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:5241
- getprop ro.gn.gnromvernumber
  2⤵
  PID:5241

net.duohuo.magapp.bblt:channel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4807
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4881
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4904
- sh -c getprop ro.yunos.version
  2⤵
  PID:4922
- getprop ro.board.platform
  2⤵
  PID:4881
- getprop ro.miui.ui.version.name
  2⤵
  PID:4904
- getprop ro.yunos.version
  2⤵
  PID:4922
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:5005
- getprop ro.lenovo.series
  2⤵
  PID:5005

net.duohuo.magapp.bblt:TcmsService
1⤵
PID:5276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/net.duohuo.magapp.bblt/databases/MessageStore.db-journal

Filesize
512B

MD5
d7b685dcdb1e024f88f267b39a40d9fb

SHA1
2534c1121ef21b35baf11e72bb05e5eb929b0cc8

SHA256
1a6df8aa6a511647bb1881d13baf48224d86ffdc53785bddab82f67f76566632

SHA512
416ea303145147bf39ce04160f92012393e878cdae0e0f746ac375db23c1261672f53c211e53c96a100ddcb8ae476964477dfc4368e82d165095ab69b0f9df71

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/MessageStore.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/MessageStore.db-wal

Filesize
48KB

MD5
8a0f2eedf6264fa8f5143c52d96ae765

SHA1
7821e6a421497a388b70ef373b0ea2fc8f6ee377

SHA256
cbfe3024b922e27f5dca3ed5c8c3d55e6ec2c04a4cec264820ba60895aac5740

SHA512
2ea663b5c84dafccd003facee8919155eaa4ce8407662c033dbbf8c31e2f7e519206ebb1f4c731a24c826b068cfa4a7137d0052b58e0244eabbf9eb4e82ce622

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/MsgLogStore.db-journal

Filesize
512B

MD5
bcaf7fa6f26a6a80fda1941a505fddc0

SHA1
305f705eb019c09051cc48922d765c71d4334fde

SHA256
e2d7f3a8c27aad15e913856d3cb2a27158409dc3a5113cfb0cabc818eadc7450

SHA512
10d0729b511010203fe46ca5e66432e65a9386fbb2ed65cc73e975d0122a76017b9dcf1faf04eeb1b27101c090b5d1de9f2158013ad01b4fdb72414b3cb33f09

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/MsgLogStore.db-wal

Filesize
68KB

MD5
dd6337d5ef2c7f30b62634c98b7c69c2

SHA1
5a2a594c464e0ae0c08519fb882c975e5dd3e639

SHA256
d8577ec62e6f3c0feb916b78fc61039401106b39466beb490f7094dc49c99580

SHA512
f8818ebeba61a535042001f3ccfc888bf1f328d381e1093cfd8945acdcebd81637de6dd17f74eed44e0be6a48be49879a492ea4ae89c08a7cc7337ad09ee4191

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/accs.db-journal

Filesize
512B

MD5
05b01fe9cb12c3269c5bdc875ee49abc

SHA1
bcb6ce6929bb2239ad335934e5eaca3e4ed72dc6

SHA256
3bbad22ebf2d1cc3b0ca04cc983112838f4d67894dd1c33da7b2300a10884212

SHA512
767b0646e76a76e58eb863fa6bcc71df2d45207c144a600f1eddfd7b474853162b94c3881bed20de3eef088ec2cf7dd8325dc4cf2998c4a32bb2f88c82f1598b

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/accs.db-wal

Filesize
32KB

MD5
4c0696227625a56ca5e4c3cb69e80c7c

SHA1
e49160e485f2bf4563bed8ccbb1bf4ad9d5bd4d4

SHA256
67008671365efe8379b24de6eacf8d1828b76351be5d9e44b9e8551511b1572b

SHA512
ed83573cd5f07fe992f315c90d05d14e57d6380e3517bb25286d79330c68e658c3b88979575a6aae3fdce06622cd9a98280aa0c17760fabbeae94ccefbdda840

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bblt-journal

Filesize
512B

MD5
d0f3aa4ce1eb5ab5f38eac308b3d219d

SHA1
1f8114d4f92ff3011a0403e2b2ef944dcd6df781

SHA256
094143e6fbd6d34f346d22b56c08c68ed2b949f35ae98fa9cf208ecd57fcf56b

SHA512
d9cd0d1610b0e0f2c3a2f3875d5081333ddcf40cf3f5aad3dd8a3bb944be4014d6a19f43fa1ba377a6fd9164736b79a9aad4a1bc1e40056bb59a60593afaaabd

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bblt-wal

Filesize
36KB

MD5
71bf079ec25e7c0e42faca0cad391b4a

SHA1
8878783a3144afbeeb7981c551558a8b28920e8d

SHA256
b0a213fbde74994bf523d6b5f2d0d979c9deb4d3514c4d284d8d2b5292f70d33

SHA512
c2d3464560ce0ee466d5d57cd64ca9af538c8a7d86b9aa27e0e1c05a7f10d2bb4f6b43ebf06c5207b46d95fc1f97adc9dda2162e068e0fbf442685f916859d2f

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu-journal

Filesize
512B

MD5
87a264cd5092f3a5e949686f44ec54f4

SHA1
0d3f10a06bc1411e4cc01d2c2d2062b8ff7cc93f

SHA256
db2d501eec4333f1e63e495b0f50b6ee63a7b321a911b1a46286654e2d330d09

SHA512
fe4dc9331c7079215e89352a26a4067af856932a04b9a546a9d7c2bdefde778a9ccf571907a53cab2f2b230e6f4fa67324ed800fec97fedee5f53212a83ec500

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu-wal

Filesize
120KB

MD5
be60ffa17fb17169c1f4d352f91cee30

SHA1
51aeb5c1c3e197c58b41aa1b055d4aefbb151c9b

SHA256
0d7b753a7b526250e1dd7ea75fe5ddc8abafeee9aea7ff24536e48a654dafc37

SHA512
844d538e3e2373b5e36eb20364a82dcf7fd744171f0cf42370fcc03578cfacf0ef4965fd05f335f226f2fdc0f114cd13bdbe34dcce0046da5af1c86d5f04e4b2

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu-wal

Filesize
177KB

MD5
be28c6820900dace9290c36090bccb1c

SHA1
dc7197e6c932ee4c6db1ec764a234f65300d5042

SHA256
6ab25ea6f96157cb0b920e4f465e5c0494e6dc66e7b112f9ebf675ffba352d2a

SHA512
8288f141547e32188db9ee8b36ffd55c8072c3eaa718179da7aecb3fa78ab27a3d4cf06b6bd6c532537ec87cc1d660262349ea3b5604498394d0ad9dc7e0ad3d

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu-wal

Filesize
205KB

MD5
223548d149a188a965a1fc971a3702bf

SHA1
53d5a9e5be9e33f063289dc53e6863739038566f

SHA256
a12ae7ca4ae22db2ca9934017a8e8572c6500c6c96e4c93e0356bc6399d4d1b6

SHA512
7885567ef87c3529a9f6d1cc87a4adff1b1ea0291e4bbf44c8a7f6a640d89d0263d325876300f2eabfd60927c99f7ed021650b5e83ee784e8f1e4d2bc6724d87

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/bugly_db_legu-wal

Filesize
16KB

MD5
29c2007096cce71ed7830cf48535ed9b

SHA1
3456f5496d4772e21c7f9544fa0c7d1a126eaa56

SHA256
a1b28084f94f4aa7553ac862d5d10fda3c252f94777aa8f7f681fae30cdcd53e

SHA512
25734842f39c407a158ea81f26173fac12a1c00ceb67962288c9b1ff6577ec3e897bedfddbaf2ea76e52634812986c56240a9d1d7d2a75dadb2e285d750d4673

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/message_accs_db

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/message_accs_db-journal

Filesize
6KB

MD5
eceff710cb0c7f164ce71b18285ac3c0

SHA1
9900f11deb7ac9840c77790432bde301f35ac9d2

SHA256
97f95c241aeeb0b7c6525e78ac09d48565c80173a02caf2b71a7aed6e466e734

SHA512
b988de3127c7cffaf2e2859b1da4d608d630f4af56b0cc19ddf40bd6de3844a505729cfcd80faeed27c6977e6e7a41144cff37c1d4d4e2a0b824e6a2469a2f71

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/message_accs_db-shm

Filesize
28KB

MD5
670d8bc46551c40a1fb9ff8ec4b72092

SHA1
82253b089122b4d8c7ae61dbbeabd9d037ddd49c

SHA256
ca2684e4da544d08c906c70f147d8dbc91da3a7972d255e6a00e1c99419f78e2

SHA512
4977d35230c533e26162cb0e4da38345a23a87ff41510685e755a52152fc78d0b027e8e8942fe10ae28fe332b16bb9a7ba0c0644ec0efd635d579515c3d5df67

Download Submit
/data/data/net.duohuo.magapp.bblt/databases/message_accs_db-wal

Filesize
48KB

MD5
675a7d2f00ee20b38aaccfc1ea32bc46

SHA1
e3886f6563329a3b3bac3ab4a2f19911eae5b0e9

SHA256
71813bdec16901ec21d90fddb61ee2ae96937e7a00ecbedad79b68bbbe8e4d5b

SHA512
04f68633f69d75a732a498db84a14cf5dc6347e7c3d80c9720763c6cae1ec1de660064ff24a7b4fd9f9b6e3721abba93a266fc58f37d6aa5e8145e404afb1a77

Download Submit
/data/data/net.duohuo.magapp.bblt/files/WXOPENIM/openim/12-23_13_17_net.duohuo.magapp.bblt_4225

Filesize
4KB

MD5
cff0facca88be37b5be8f039771f48a9

SHA1
9c2ea1d084c6bdc471661bd17cd07482b7a0c9f0

SHA256
fbbf9a2df07785f141e0312420c8cf66295f56de39420311135b1b359519505e

SHA512
f5d23c158c192271f025fde5538f5b1465459195642e15d663c0ae9de114d0af477be5a19f0d10564acace215e29a6e67eb89a0bd791ffebb1bfc1801bd80bd6

Download Submit
/data/data/net.duohuo.magapp.bblt/files/WXOPENIM/openim/12-23_13_17_net.duohuo.magapp.bblt_channel_4807

Filesize
512B

MD5
1a1f81c5de8a762a20d354631cdb68e2

SHA1
1b70a8f9b157675de72d5c26a873a76e226879a1

SHA256
b1346372029b0cbb13d4e792cb1d1532cfddfdcc6e72fc73d1f8a48cb747be97

SHA512
7ecb8282bb41d1cd22fe14da2207f06c2583abd031aee0b32249c5377a9d8be2d0ab0a390e65037b203c9edd70aa643c4247304ccc37e9387afc835f0a10f44c

Download Submit
/data/data/net.duohuo.magapp.bblt/files/agoo.pid

Filesize
32KB

MD5
13db9c3e224f39a4fdae9c3db87b011c

SHA1
b9aeca95b5d676b2a871ca7aa3ee201d5adcf9a7

SHA256
33ad71a79aa6e93e4a3d87bbba07ed6adfab7a05b44a26a0a327de2d2b00a2c2

SHA512
5d31bc5381395cbff520c8aaf79e6e24238e2b8d63e312104bb6b60b12a83dd82a5177544075eeaa6d8da0d627dd6d40b79cfed1daa5ec8a9785e964b8aea261

Download Submit
/data/data/net.duohuo.magapp.bblt/files/libcuid.so

Filesize
129B

MD5
af67d6f3a625591d481c87d7183f93b5

SHA1
749ffb6ed365c6fe9cfae69c3b380afa7192e0b3

SHA256
37908c01b9c678e2d3da3f063610e2dde2771a7fce1ab7fc642cb9ad5c602534

SHA512
7de4e8437f1bdd1badc507adf6389ca622e0b186579e3e8feba30ed88876eec68e123923a920a97b06b4b54c5c9775f95d21a5b37fd7593e577bf0f9a8143703

Download Submit
/data/data/net.duohuo.magapp.bblt/mix.dex

Filesize
292B

MD5
63f77f99bd2c2b772a479923bde11974

SHA1
c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

SHA256
4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

SHA512
3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
68KB

MD5
3fe50cc81831d9bbe05f8a3643498b67

SHA1
7afad8bef3973d050e2734d62c3c5012eacd77a5

SHA256
4434e1cde14fd2a609a2dedef33c821c8577d7f32704479fcb75aa9f9a675f1f

SHA512
ed976e01238263c9bd6fbeea65afcc5e7a64a3013e9ec8da272844aeab5aaa29929acde89e5fc9ca1bc1908223e0de1f43a890e5b97d27fed02e12f91e203942

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
72KB

MD5
bb8f8bdbb4789cea07f7d1c65d63ba2d

SHA1
c9b0181a6c07cb155db6d02040077cbb4f00f5e1

SHA256
3b7f39dcef2313af75fb6c8ee4e21e76f017471af75a1a4784aaa85d1fa3b7a1

SHA512
1f1819434712471abcb495ebdc66c41962e8bfa5f94e4c457acde886896979abdd95ba5bec3b818d28cdadc86a889c59c5c98c0c5b329959559a000661c993cf

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
e3226b058b4d56eeb60624f3750370a8

SHA1
a7c2ce8f99e050234d5d46ef3af50b4bb7d97993

SHA256
42d34bb5ce2277eb9ccbd172bc844e27edc383066bea9c56150305fa42ee32ae

SHA512
c32a60dd11c37e1b9e2cc096e16976b544db0919197b18885672b16dbba6b61419184695f929d10625ed39e7c161283d66338a17734e551bdf2d24a338a4691a

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
8877e3c251cd51585d7ae204ce874093

SHA1
a5c2e53b576e1b40513545f6aa38c2fbef42e1fd

SHA256
dcf56fb6b53d50016d93ee74ac3276b540861b39f72989065e67cec45f05c398

SHA512
fa48f3958598ce2fb8d98cf2600f09adfd69df0fc7832cb939437b7f63d5bacc8fbff5df4ec9eaa1607cd18154a7281d6ccb88f11ea77548979377e29a00df03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
512B

MD5
ba9a125e6ea8746499248e948f264f87

SHA1
d4bbd3cdad4f7dde52d5bc16331a575cc53754d9

SHA256
1bc3436ee5fd7386cbfd4e9840948a6119d0128e31982d3f01229c72d63bbd94

SHA512
59558f239b41a1f4d3f09ce398cfdec45f7f468f35f801c2aaea2632124ee6d79ec5f037f9d42cacf1b2f33774125a7ed41ccaab939095700b072d083a0a9f41

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
7c7c0bc57ec4feac5547888a03e2c9f6

SHA1
fc1c222d5dc31a97555e26f4ab9eea10f1bb6682

SHA256
932be853fe5411c94b6bb8b7c688c5226b8f9900eba7b5ce482d6101e66cf9ac

SHA512
e1a3d66e255343f3b2832f2986be677d44fddee36fa1fb246c9b1c2d8d1aa323d5b9a050755b2b078c496b699ce89ee2209468ac33244d141046bb8d62b6514e

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
35bd39200066147cfd23a3f7e3afdb5e

SHA1
f2c6eacd8fb99fcf7f609597811ffad6d1474a71

SHA256
b1cffb3a3c1020f6f683bca214836ae826fd7562c62c5df977e11ad6085fbfe5

SHA512
bf05014decd07ec695f02a37441ca34eb39815ab436e38d3a480e5dab8864f0d1caa50a8ca082d7a612a08914f401543bba3be0fe69c5868f9d4a7a8e224fee8

Download Submit
/storage/emulated/0/Android/data/net.duohuo.magapp.bblt/files/tnetlogs/inapp_20231223.log

Filesize
10KB

MD5
4a3b619260ce3916a891373751915f98

SHA1
21a64f20e4a9b89369826657eb18bf9452cb0d15

SHA256
bbe5d8674f1b73e4fe239d52a776e54cf8389052c15a6e23f5de8bbf34672db7

SHA512
c4942bf51bbdc2b9e2b42f3393fe28d7cf442ed922c1596869bf6d8a65d696fdaac1201af2d697dbed1262b962b38df3d0c0d933a891811aad543dd8288883e1

Download Submit
/storage/emulated/0/Android/data/net.duohuo.magapp.bblt/files/tnetlogs/inapp_20231223.log

Filesize
541B

MD5
6bfcbb04aae6987575152f3547415a48

SHA1
d1cb872442dfafd67a1d8433de09c1de4730cfbf

SHA256
1d94682089cbf78daf62735f5b4e93484a46a014713295bb715ce16d808e37b2

SHA512
4329bbe55add7cdbae6c2c1248fc41c49eeefa37e74e94a844c1ba3dc0a6441093207fbe0d7f624842b219e50e4dcba604aa7108ba7b851b7f19381d0d06259e

Download Submit
/storage/emulated/0/net.duohuo.magapp.bblt/WXOPENIM/tcmslog/userTrack/2_20231223_r

Filesize
32KB

MD5
ae88d636e8f7c8d4d9703bcb5387e530

SHA1
c092425789625a26a538d92f8e3ced2d8aa52783

SHA256
c2566b830784141f99444e32cbfee33c895a14d66bb525ca548e508e34075b28

SHA512
20dd0deb01851f3bf15dc099929f5b0202256b7bfdc84b07fa48cec24be252bd6591828fce28dbddf5122d12dc3ecd9b132c52ee426708fc4e755bafdb3e3c93

Download Submit