94b1ed669d687f74d3f6e18fcc86bdc458dc39e4656d752a58e0e4bc287afc54

Analysis

max time kernel
2785248s
max time network
157s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

94b1ed669d687f74d3f6e18fcc86bdc458dc39e4656d752a58e0e4bc287afc54.apk
Size

4.2MB
MD5

fc5d96f59c7d2fca86de59c7efb29097
SHA1

f74b742c70ff3d15d09002e5e3f9cbb5289d1dd3
SHA256

94b1ed669d687f74d3f6e18fcc86bdc458dc39e4656d752a58e0e4bc287afc54
SHA512

d37fb319efc09bf6fc22f63147d8e71558340459dce61f4e5868d16aeae7dceebfb3c7c18d792029db5f8c064364802270af08b4366c458cebd5d17bd2c92b46
SSDEEP

98304:CJrd7KbXBVRXGmEQC1ShHROvxXm4+FN8h:CRdrQCsgXbnh

Score

7^/10

Malware Config

Signatures

Checks known Qemu files. 6 IoCs

Checks for known Qemu files that exist on Android virtual device images.

ioc	Process
/system/lib/libc_malloc_debug_qemu.so	com.zhangyangjing.starfish
/sys/qemu_trace	com.zhangyangjing.starfish
/system/bin/qemu-props	com.zhangyangjing.starfish
/system/lib/libc_malloc_debug_qemu.so	com.zhangyangjing.starfish:filedownloader
/sys/qemu_trace	com.zhangyangjing.starfish:filedownloader
/system/bin/qemu-props	com.zhangyangjing.starfish:filedownloader

Checks known Qemu pipes. 4 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

ioc	Process
/dev/socket/qemud	com.zhangyangjing.starfish
/dev/qemu_pipe	com.zhangyangjing.starfish
/dev/socket/qemud	com.zhangyangjing.starfish:filedownloader
/dev/qemu_pipe	com.zhangyangjing.starfish:filedownloader

Loads dropped Dex/Jar 7 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.zhangyangjing.starfish/.jiagu/classes.dex	4245	com.zhangyangjing.starfish
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex	4245	com.zhangyangjing.starfish
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex	4273	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.zhangyangjing.starfish/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex	4245	com.zhangyangjing.starfish
/data/data/com.zhangyangjing.starfish/.jiagu/classes.dex	4353	com.zhangyangjing.starfish:filedownloader
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex	4353	com.zhangyangjing.starfish:filedownloader
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex	4353	com.zhangyangjing.starfish:filedownloader

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.zhangyangjing.starfish
Framework API call	javax.crypto.Cipher.doFinal	com.zhangyangjing.starfish:filedownloader

com.zhangyangjing.starfish
1⤵
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4245
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.zhangyangjing.starfish/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4273
- /system/bin/sh -c getprop
  2⤵
  PID:4322
- getprop
  2⤵
  PID:4322
- sh -c ps
  2⤵
  PID:4475
- ps
  2⤵
  PID:4475
- ps
  2⤵
  PID:4500

com.zhangyangjing.starfish:filedownloader
1⤵
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4353
- /system/bin/sh -c getprop
  2⤵
  PID:4413
- getprop
  2⤵
  PID:4413

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zhangyangjing.starfish/.jiagu/classes.dex

Filesize
4.6MB

MD5
09096a39d1b3bf722bd77e46aa5fc887

SHA1
0b1cab6941f4cca1ce5b59a9d8d5f7bc48f2d5b6

SHA256
48355e11a2c7235871ca31cfc72fa06fba2e342f15d434b92a42a6b8384424a8

SHA512
f4b86deb63cc233977883ca1507b1e5efa0316c249ba78a71bbc6bcaf192875fe4c2902c2dda1e67b57a3219e693e7573b0e3b8ca7ee8fb9810a6c602c4cf859

Download Submit
/data/data/com.zhangyangjing.starfish/.jiagu/libjiagu.so

Filesize
480KB

MD5
6e8ea47d2d8500b7fb8855394fdf0526

SHA1
d3c719bda605cd787c4acf30507edb76b7fb6070

SHA256
cc3b55086867ed7136d474a21b1359f49e6afed3b74fbb4ba5f11b36ce1f4d46

SHA512
385241f905c46ead517e4e0bcaf2fe00160ba0f7f40c6926ba288bf41d46e77a8bd63ec0a97d57a5b65cf6fb1f93b5f86f51d9cb24809ae934ebdb2fd49c0b70

Download Submit
/data/data/com.zhangyangjing.starfish/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.zhangyangjing.starfish/app_crashrecord/1004

Filesize
236B

MD5
a13f46d295c8f23fbae57d66ce4f6c17

SHA1
b32d9491e3713465242e7c9ff1ebba98ed7f24f0

SHA256
79ce87e623ba3649674b49e77e6c0d35e6bd73a7bce8fdc434f6e3774ab8cebe

SHA512
bb2f276b1f5a6b7f0c18d309c5be0b34cba308e8ead8b2ff54da7da82b88fe4f105e9c0052f6c5b28b5be79de53723d2267783e4ffdedcad0e7b487aa2f39ca6

Download Submit
/data/data/com.zhangyangjing.starfish/app_crashrecord/1004

Filesize
284B

MD5
efde6fc19d25115e44a1ab89a82a8134

SHA1
96e424ad879a08ed99ae8cdbd7576c17838c67ad

SHA256
48f99c97ce3eb5a766bd4572f7e499780442d35c63c9c1964e6440a5bdd861d6

SHA512
8a5b13601d1e7f81692efa601df030c839aebd4e4e87266a6e331db499de91dcfcc23ea924dd0b0342c74201df8d70947351a9d55071ad514e94044895c50293

Download Submit
/data/data/com.zhangyangjing.starfish/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.zhangyangjing.starfish/app_crashrecord/1004

Filesize
251B

MD5
a6e25af56bba93497d1a252cf515ec5e

SHA1
6229e3750f284cd41e28c3ed9569995031fdff77

SHA256
9d99a3d65db581f3c90d97444e61e71ec4eaf35156ae31b65348a9bdacca358e

SHA512
4850f0b38683a93e23704ad3e041de216bee5dc1719f6298aac76bd27ddb1364675c07eedeb83d2f2c39461e25f0439527617c09110aac9907c4b68cfee9dc04

Download Submit
/data/data/com.zhangyangjing.starfish/cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.zhangyangjing.starfish/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.zhangyangjing.starfish/databases/bugly_db_-journal

Filesize
512B

MD5
c2b6866bf1e43ea02b48d951a3af7665

SHA1
529c7e84c18ee650a25f0efa0fa4edbec554b418

SHA256
7d302fdda205e18b101c777fa9a3c13e812a50bd889a859086c57b1a081cc182

SHA512
baac077155b517a433867537b7370130e639aa2e21534dc2e5e16ffcdc682003acc34a43ce07cee8ad790c41dcd13fff4b2f41f3ff21f5a41b2bd6908793fd69

Download Submit
/data/data/com.zhangyangjing.starfish/databases/bugly_db_-wal

Filesize
16KB

MD5
ec20adb13f240de6af6e20f4d45fd52e

SHA1
9506b09ede281473d220f65be49ec805c3ab6e97

SHA256
5708027a9dfcc3e7bbb186341e4e4b9134b87a8d505157acbfbe422170b72061

SHA512
8835c0a315c503b655346d19b900a37eb8ff9893ba838350c4145d1cc717df9a5ac624791121de02853c95b99ea5f48bfbaebbdf29e684952f601a78aca98b43

Download Submit
/data/data/com.zhangyangjing.starfish/databases/bugly_db_-wal

Filesize
80KB

MD5
c7f2bf486adb33be406362e21d619518

SHA1
a7227b0bf24d22e4eeaee1925c617c41d62ed94e

SHA256
b0e4c6f0f9690c692e127fb780f1d7d86e0e33e7454f35055f78820ea054b414

SHA512
737af9d270f7c7dd011cfa919597d60cc2e331647f3ca3742c597c9e6fc5285c95c36df1307fb7df4964729028face2e16fdf1abaa94fe6cb411be204b5e422f

Download Submit
/data/data/com.zhangyangjing.starfish/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.zhangyangjing.starfish/databases/cc/cc.db-journal

Filesize
512B

MD5
c35c60b1d1c688cdda100e714824797d

SHA1
297c1e7cde46fe721afbc23b02062dba4c08ed5d

SHA256
387461501692d43a176f1703a137f1e93d0e1b4b058bbccd7c91d81019ad0ecf

SHA512
bb7523a95e6a18f64ba3e049a63ff0853728f35ad810f46365e483edf037160ac3e795a49e987e703efaf7836991fbd2297616761d175e079c89b949b276d7d2

Download Submit
/data/data/com.zhangyangjing.starfish/databases/cc/cc.db-wal

Filesize
48KB

MD5
d1f59481eb8c614d98fb60569e2dbc5b

SHA1
d122e09461b3cea800b378405faac7689a0fdeee

SHA256
ace13934f0ad951d691fb1c40f672b5bac36aeb6c3a3b0b96fe757e3ce8f8239

SHA512
6a186bbcb6d70ec179bcf5fc8f58b90bd2b981ae94444114167fadf97d33ac8dd31b9a5de3f315d3c0dd533c51de5448accb8d93c4e4853a7f64b561adb73d48

Download Submit
/data/data/com.zhangyangjing.starfish/databases/cc/cc.db-wal

Filesize
16KB

MD5
448338ccd2feb05777db00e29932ae99

SHA1
0e93366f39195022f4c13279fdedb0bf53dc116e

SHA256
b489bbf124a1a8244a0f618b4e18aec6f47c9245e27446b5b0712e0c3849101f

SHA512
beebb04ec9f8aa65bd0104b59490f45f4fae1b8d77a918eae6e2ddeb217abb6f9c267f6248eb2d82808ab78d54f08bca037ceff494fc8d7a686569de3edd03ad

Download Submit
/data/data/com.zhangyangjing.starfish/databases/filedownloader.db-journal

Filesize
512B

MD5
71907d30ce8db1130e5179339dba2e6b

SHA1
f2edebcb2182fb9384082d1bb9e12f5296967381

SHA256
a29f265ab2723a980d756b3f898347a8df74640e8461d9827e2d18d731b605a9

SHA512
fee5b91f046d0ee92510649aa0345cc72121f774599ab66680ede515435a17487946bfe3af48266251ffc581ba9192053d06d6b89bbfd1f7c276d9d69732a34c

Download Submit
/data/data/com.zhangyangjing.starfish/databases/filedownloader.db-wal

Filesize
16KB

MD5
97ec1a76f93c31fddcf7a905376ca4d4

SHA1
a138f852bc1b62a0864ca017d92a6a9d9f368a51

SHA256
66e099f3234ad821db119ada11ecb66f4e850a785cbd9f2def61c7306dad4cba

SHA512
1ac63623939c64b59046519c8487deee04f7d6036e86ce96c0dc80fe910caa9b0c1ce3f14876accc6c8b0bd4efeb23f78f128f82e0576472aaf35ab4306b810e

Download Submit
/data/data/com.zhangyangjing.starfish/databases/starfish.db-journal

Filesize
512B

MD5
4fc21badd7fc65be1e30e88902729e9a

SHA1
d725e99d6239770863787560b8abd735f513df61

SHA256
e902a7663b52fd4c101af9d6747389d97202a40390acd39fab2ec6db83ef98a0

SHA512
1b3b0c3154f993dd72791de41f451c69cb564cc34a878fec28e166ac191479b2bf054240c77ba01c919e09b897e4d95567e3b4e54a7734c75bf77f56efbc1a28

Download Submit
/data/data/com.zhangyangjing.starfish/databases/starfish.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.zhangyangjing.starfish/databases/starfish.db-wal

Filesize
52KB

MD5
0bac142d212fd6ad5227313557fe20fb

SHA1
f26848f6db870fdad9da83bb9d226d7aca5188e1

SHA256
727aa4fe36daed66e8edb6034c8365e45bcda006e0c2f6664dad3b2e709be7a5

SHA512
16f6a11f85a92dd811319e7f816d056a656bcdb155e15c81bd68e0bc48b20a8bc7a1a479306305bbac095f2c6294c91198937d822da2bf40ceaf4eb0751ee322

Download Submit
/data/data/com.zhangyangjing.starfish/databases/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.zhangyangjing.starfish/databases/ua.db-journal

Filesize
512B

MD5
6a2ce1199882d3ac917a58e9736bafcb

SHA1
f7014b3761d83a3d64ba267e7cb84d9f211a2add

SHA256
59fc2a5a000be265f9ea08510fa5284ba20258ac4f53e5fb541ddfbcac056b93

SHA512
c06b77c642349d647e7c5e706164ec16609315db660409b1d8a16aff2df1ca6856d8b278d878ea13800e13f1410b3d33d6e284ed438f85edf0d3aa62d9e50b25

Download Submit
/data/data/com.zhangyangjing.starfish/databases/ua.db-wal

Filesize
44KB

MD5
614d9ca38bd8109ab0a4a8d1010094bc

SHA1
aed2473411ecdf45cd7553ac5a587a5ff98064e5

SHA256
b10c487cb926d62d44cb92f5b794c8180ea1aae2956dedec9592921320592c17

SHA512
764d1014e4463599140aa4395f524b75fe55a51eb199f888b175af7b6ee7c3839a785fc96b6c36796eb195347d9e82eb0112cfc4696b1bd840032cd4814d5157

Download Submit
/data/data/com.zhangyangjing.starfish/databases/ua.db-wal

Filesize
8KB

MD5
3af63b4282edf981d6b93330032a9555

SHA1
95b3cc5fd498f114bc76b8695e2394fb598d7e0b

SHA256
b1ac7538e7a44ba04ed4e155734af870a613e55a9db378e05f79144bb3fafc6e

SHA512
40d8c2168331fa0ca646ced6e13177531acc5a41ac62491633a9e72f694e6d8fb356eadf87eb287d8fa9cf0c4a4a8cf9d6353085eff488167d97e404fe34f95f

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.ac

Filesize
32B

MD5
01559829d6113039a7108af3eb712811

SHA1
f7c3d7aee87b20231ea1d80f6df1a5716903f331

SHA256
646dcb402ee04b823dc0c8736d57a6781144568ddc9922471f9f6e62758374db

SHA512
a5668d850495ef8627ba0cd352bd3138eb242c22eea1b6b62b47b2d531685b4e68a2f285ba13b59705ef8ebee8cab2df6d41ecfb709a61fd627456cb28d6badc

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.ac

Filesize
40B

MD5
7288b74c5cd34de035f4ef2135cc70b7

SHA1
d38b93d2afe80ed8c4462187daba9634e82e6ca8

SHA256
fde9acc1c151386ba8a7841b7b67cf72e271bb9db65f9e2c810fa4de4428e45d

SHA512
ea50d2b04e7be81d520a33b23d05628eb01b11545d8b46aff88db087041580bc4ff3b531c8158faaa8a8c218f26418d0113e3ff3bc9c8aea9f58bd65250dc5f4

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.di

Filesize
340B

MD5
6c44d1e662ee309c0e2a1170f74f47f5

SHA1
6728005eed089f3480165990aa4c631a0c09c202

SHA256
7f6dfb05a762f12c1e0b41cb5c5c92219be0302d90d886fec5b3461abb862753

SHA512
7401b3c233051c216eabb29c4d45c53e2b2d428bd38b53b436412769788ab0dfbfc1d5c080d942a5dc43c6d8b085c2e77ff1d00cd502482670cd14b37ce4e77c

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.di

Filesize
340B

MD5
416ced9014a46f36490d8b92566c55d1

SHA1
372ecb80ef5eeb0945cddb84866aa6cc776feb10

SHA256
81615ff441c5d4d8f3cbdf6626d507e8cc85ca0aa6b7ef141c69f39dc7cd7f76

SHA512
fb51f5c6172dcc1a8752125010612fb080c411642fd6e8cc4e6740d5a85862399ac0683055ffc6bfe332cbbabb91fc4a17dfa627920fc045b8dde287c8b7e6ff

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.ic

Filesize
32B

MD5
70e9cdf76cc6ba2eeb8329ab450475af

SHA1
49c3892aa4f04fc9f85fb09dadaeb71cea2743ef

SHA256
841ee0ea807466bed7bc361273a55147cca8b5bcadf81e18894d68aa39279443

SHA512
bfbce64763ab6e747965d2d65199313d7dbaa5628b64a68d5a45114e9e1681cb6f0420afc7ba5848cea588e616de92ed40667ba8c88de39cb1fccd62bb50e777

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.rd

Filesize
73B

MD5
1c0ffaacad812b2decbb2729e46accde

SHA1
b492c35b23597bdf8e9c73ac8b6e4a305cc567e6

SHA256
c44c8a3d16e3a17f29b2aac1c4e1b622100bc0b1b47281464407d069e24e5944

SHA512
136a4b320e728c91f3f02cdf69eaceda887e38eae5fe0340e563add53dd27c087a39cff68ca5cf51175a4f2b1b8aca2035b50205a9fb662f46c7977e9a7c2352

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.ri

Filesize
314B

MD5
90eb0bffc15dfd4b64a3818105c2782f

SHA1
d7026e79c5ea1f6bf00be21431b42df28f49b85f

SHA256
2a40266cb043b28773a7c09de58ebac1b922f7208546e6498626d8a822717933

SHA512
26cae9a8ac72fdb98ebe58c3eece5a2782dea426e019d56f0127085d175c371fb4de7d3ae802000bf158cfc25baabb3157bcfa9b07d6e78ae3ecd609a2f3c922

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.store

Filesize
127B

MD5
2dd9177f00aa25748181e16e921d9ec0

SHA1
e64c51a2c1568487a6ad230a84d2e9b7dd3cf1c4

SHA256
bf0cb1ffca3deb3e5aa0efbe697c3f33ee39ef07b1d90752c62a75b58461016f

SHA512
e55fee2752bb1ceaee3f2d3571d66860ffed72e34eb1ff2dfd8c1f7ae1a6c3f48f04594a17c284f6c8150b614245e93320b6e045db15b18fea49e74dbca53888

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jglogs/.jg.store

Filesize
32B

MD5
448e391c59eef34ee1defbe4dee4c41f

SHA1
df1f890987371d7d8e6963c68b787856e42bc146

SHA256
55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

SHA512
ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

Download Submit
/data/data/com.zhangyangjing.starfish/files/.jiagu.lock

Filesize
27B

MD5
0842738a68c322828ad4a8503481805c

SHA1
c1f5634a3abfa39beb85d065e2260f9d45834b30

SHA256
6b6e7237cfec77350c5b8274acab4f76ab550553e9bf5a396e21582a99803470

SHA512
673d1e8dfc2ae76ae0d0a6a1ce20fa98cf4adbc7fe17298bf3f0c251d540f86b4044c56ff2601e67074a7aa3da0c7d1d45d3308279a242770b879081bbef0fda

Download Submit
/data/data/com.zhangyangjing.starfish/files/.um/um_cache_1703592297690.env

Filesize
1KB

MD5
6f3f77b03154d06622d38b2d7bdf725f

SHA1
0f06423d2bcfc6f9b1d54ca49c36777a390ab240

SHA256
0d7d627d623698adc0a38656567ce8f3b80eb4f1042c71c5844be7a77824cd1b

SHA512
e182dcc7536cd0828d52acbe90491df3ad1f2577d4bb8dcdbf5e235379b833601c2fb366792da98ada10d77b69ae7a1eaa495423ac351d6b297d1b1637fc1510

Download Submit
/data/data/com.zhangyangjing.starfish/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
fd69bc8e9f952de73d34663b318c849b

SHA1
52407baa0e915e7022eb282558ba212773f923cf

SHA256
6f3a29b54c39f4e317b4e541b1c2cbec915f79c117ff2f67c1df7724b8b337da

SHA512
98e42c065486ce2ea65e36cd2cd093156080f3b4746293d40df3033d9ef1817a2099aaad1fe0d4e7c5b6d802f02e4ce6cc1537822e7d51517eb0513de0ab7b44

Download Submit
/data/data/com.zhangyangjing.starfish/files/exid.dat

Filesize
57B

MD5
5417ca0f5d42ce347c9fdc2516d2c9ec

SHA1
a76465ed0a540fcd44788c302264ec2290ec5c3a

SHA256
ca2b7fd92195c3beee0fae9f8db159703f7b63daa4fadd48527b7d90b04dfcb7

SHA512
ed56c89f96b7220382b1dcbf370abd6b45a33bf2814c3ec03e56dcfa28aee5e771bace9abdfde5274dc817d23022a56dff2994f546584549333c880b4e192e6a

Download Submit
/data/data/com.zhangyangjing.starfish/files/umeng_it.cache

Filesize
413B

MD5
a24d0b6bcc5e6d7661b44abb3a2ae033

SHA1
a4aaa8b187b6f741c84528122c0decaebc0a9c28

SHA256
42f5a2e8937290848a088b6f6f19e0121d276ca66b5253b656ecbb6eb0efc688

SHA512
ccf41fc3523fb276e5ff7ae334bbf40410f12a690e5f92f362356458f8ba27f4736c9366f7bce7ba632558ed55178f5ac9741c98d3786848ed78ddef05db5247

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
73cd8a086319f3b319707a825d3c7e19

SHA1
33cd9050cf2a37477f6c8444583eb5d2a77f003e

SHA256
0b72a16416618d2bbc5f3f6cc83752496c4d5c67bd9ebcf1fbd572943542ebbf

SHA512
6b843f3f4c1eccc23704e6276c5bc0ab94d24b190b9980e6245db613baf28fbcb8090bf4f93e783f0393715dc5f7e4c21665e7583e6dcd3c51df3074c8507102

Download Submit