Analysis

  • max time kernel
    2875521s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:14

General

  • Target

    3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a.apk

  • Size

    27.6MB

  • MD5

    6ca4f063b478b96ae93ed890d669ffb2

  • SHA1

    14a71c2419f4fc86e5fd7717225b0eaaf52eb647

  • SHA256

    3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a

  • SHA512

    db02efbe6a1561f76bc23718d47ec09f9cb16fbb514cb30242a501f7d0be359041db332afcbf2512bf911093ed7c84fc506f96f531d8c4f68ead2a6e221545dc

  • SSDEEP

    786432:YIjAmC1C+WVWTJHK586I+BwBjZpbzi5EtnLSqA:PjXyC+WYVHK5pI+BwBjTq5EtLtA

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 9 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.daojia
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4306
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.daojia/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.daojia/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4420
    • sh -c ps
      2⤵
        PID:4814
      • ps
        2⤵
          PID:4814
      • com.daojia:bdservice_v1
        1⤵
        • Loads dropped Dex/Jar
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4465
        • netstat -ant
          2⤵
            PID:4712

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.daojia/.jiagu/classes.dex

          Filesize

          5.0MB

          MD5

          476368829dd3cd7167e08d29082ce81b

          SHA1

          074e9b249bf02c33fe7e3716c05a9574955df966

          SHA256

          b59016b412e7276fc6d7d69ca78794c4641cb42befa59091a5e28ef55663810f

          SHA512

          988a463e52b847a5a1233d1ecc90e5ef70a33a74f44478b598c7464f8d08cfb609a9d74c7c094c329af0080ab1d2460af5b5419f1f29d76cbf57ee3a649fea0e

        • /data/data/com.daojia/.jiagu/classes.dex!classes2.dex

          Filesize

          5.9MB

          MD5

          1aa4e6fab5eaac1841b3cbf70df8a75f

          SHA1

          8d304dec5807cb0d8c87092451067d96a98ac0f2

          SHA256

          8ac682ac1098b349893058182e37135b10a80cce3805862f3aa8aa4f7226d989

          SHA512

          013c32de9d91f566dfa6ba40b628f41f8c4c7ec39e77241a850f1f306ebc8129c2b7713425aef17dfd067b0a4d5efa659a120644ef3b49484577878d9ba878ae

        • /data/data/com.daojia/.jiagu/libjiagu.so

          Filesize

          482KB

          MD5

          f380717bd1e3916c7b697fab8d46c5d8

          SHA1

          04f51f0d16097214e38be517d93be44cb0603a88

          SHA256

          8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc

          SHA512

          b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

        • /data/data/com.daojia/.jiagu/tmp.dex

          Filesize

          284B

          MD5

          f1771b68f5f9b168b79ff59ae2daabe4

          SHA1

          0df6a835559f5c99670214a12700e7d8c28e5a42

          SHA256

          9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

          SHA512

          dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

        • /data/data/com.daojia/database/pushinfo.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.daojia/database/pushinfo.db

          Filesize

          32KB

          MD5

          924ce8f102493f47c70abe15ad9ab13a

          SHA1

          e6eb8581a51708b081eb0aa6ef088f7d874abb8e

          SHA256

          2daeb95ba18b16597cc510e3f6c3c498c24f57cc0375ab0bc87a663daf65bc13

          SHA512

          21d7f92ac10b3e49532c82b052b7933261d67a96edc6eb1160c06a7f230ee7fceeb6af1905af0cef878ae80e44b5dc97ac232218e660aa6472ab6ebec86d1a13

        • /data/data/com.daojia/database/pushinfo.db

          Filesize

          20KB

          MD5

          76427bd2055226f115740f8c080005d0

          SHA1

          afd35d86bc4147b3d5886cf57a981d6885d188d9

          SHA256

          df2ff57f705ebbb1451104327c5cc00b7c037def5080989323cc42dae3f6f273

          SHA512

          b94e8687b24e50cfaff2a3db78fcf02f680413572c9f6d392ff1ed381e628b6fbef7ff724eb9d30ef9b2477ca1f59a2f846a895af519d087ea7843e0e39fdf4d

        • /data/data/com.daojia/database/pushinfo.db

          Filesize

          16KB

          MD5

          722e56fe531df34f7248be218dba3363

          SHA1

          21bafcb698e4ceebd6c357d440891a76e1a5bb48

          SHA256

          3b06b78a2517ca032897564a47aabf69d1c787b3608b377e8a7600c77a5ba102

          SHA512

          847123925bb175a2129a4140856095fc0818b6627dd468a7ab399616e45598becbce07d83e835950f78aad163f21811f68a8e0a3ea13e99834b614b2fd05c333

        • /data/data/com.daojia/database/pushinfo.db

          Filesize

          16KB

          MD5

          4908cc3a0ba8c39be881e926d1617449

          SHA1

          ad98cf45970a3af3f292c488245748374d556846

          SHA256

          26788a1f967846de65ed4ea76b2e1b9d3be7a37507b5648ac7bf48113f6d1968

          SHA512

          65d027ff9f2bd686c3db318e65d3ed539ba5dd3a75def8ebd1844a62b014886dfcbd523b7ac682fdf59290a54e3ea89744562fc53ceccf971571f7571b3de4e5

        • /data/data/com.daojia/database/pushinfo.db-journal

          Filesize

          512B

          MD5

          e39e5506941356a4a06e88cc1e91e0ba

          SHA1

          4c732b24f9ded98c76ba9d01bdc395b86a0597de

          SHA256

          55f2a0693b8471fef3666e6314b7bf6e3293ffbbb87977d9cd9ebf74b32072ad

          SHA512

          8c5e17575e3eed94f66c0dcf97120066d522cc7a72f1be72580d80ebcb92312c9fb3c3435b85d5ee6d78cf8f23600fbebbfaa8b9bce1639e19320d6d2aa57a33

        • /data/data/com.daojia/database/pushinfo.db-shm

          Filesize

          73B

          MD5

          7786b66e3857db3404cbaec73c7ed583

          SHA1

          2a4fbe9791b0d3cbca753f7f79e540610e97fcc9

          SHA256

          fe1aa6025a10a9ebaacbec7c064605d490000a19fc381e25b3f7fb1aeff7dad6

          SHA512

          7c0fa11c93442889210e4efd8870e0ebe4ee6af272675b020a0cca8275593f6c12eae3e978cdbcf1515fcd5a44e134566cff825a470728483bcdf6de3eb6ffb7

        • /data/data/com.daojia/database/pushinfo.db-shm

          Filesize

          32B

          MD5

          448e391c59eef34ee1defbe4dee4c41f

          SHA1

          df1f890987371d7d8e6963c68b787856e42bc146

          SHA256

          55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

          SHA512

          ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          44KB

          MD5

          985adc2fe4dc44a74f03bb83c4561cbd

          SHA1

          a26b0c46fb7a6227154c6cf5b4de6f5969908c14

          SHA256

          fd903187d403b51733221caa88769a452f3b4aaf68a7249cecfed8984209901a

          SHA512

          8e5ec32d3bc0cac28dceb3abf9ca77359446a022890c071aa77b3bc3d309d083b81ed818dd756f55caf3b0971f216debe0b1c3a2db813f1e1a3a227fc91ea7b9

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          16KB

          MD5

          13bdeceb92d2b45e7d8e0e7e354ebc03

          SHA1

          5f50ac0911ee9bf37d8dbb0369874c5ba0b5ec38

          SHA256

          799181627910ebc11b03bc363a814d7cf7e17c027d199af55d0aa40f6a2a3d93

          SHA512

          0b60d67fccc8a6169fdc5a1a937cb7cef84403a70ad330e08e71c9c18fa7ac47fe76d18664a253b264c0626085fcc475f585669bb15dd5d4f1462b9fb1bb673d

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          8KB

          MD5

          c8b38dbc233bccee7aaf623014559193

          SHA1

          5dc39cab61c71f4d22decaa665978606fe110f42

          SHA256

          408a44682e9621988fd9f162ab773bd70440c1888d74b3066e000388aba551e3

          SHA512

          5c97805bf973e0cd25c04a170d2494e984b794315cf59cb3112c655300f4577445f01ca7da6f869142f05039c0e2af0ee637b7fca5fad120f13d3da65eefa7ca

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          4KB

          MD5

          55fa8296b14376ba63815925fe8e0246

          SHA1

          6567e825ae47c3190e09c326cfdcb86d80d9f7ad

          SHA256

          bdb21de66259b5ca9f5c3962e98fd567ad4ae7bdf940c55e1eb58c08e164cacb

          SHA512

          91247e65e783b22b0b09da3e6270c1ce5d13613f040661e973b7190b35ecd8032e11b36d7043e1d20ea997daa093b93eb214c4e05354a275d5cd6f84993ef5e0

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          4KB

          MD5

          b343087d576be2cc6dea82eb74595f76

          SHA1

          25dfb3a2858ebddb3f28c537443e67efbcd09372

          SHA256

          3a2a4345edd2209c343b4329f25bc4513aaafa03a646a55df9eb7384e710addd

          SHA512

          b508992b4593e44e3fcc967b599187eb6d87b5c5f515405766d8eb8147da7503294bf4921c98553887759d6f04896ac6e379406b5f51c916b35181ef2b50d1ec

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          4KB

          MD5

          a2f041751629c6827e448aebf7930771

          SHA1

          51478cff6801e52f660c46600d4150cfe7931fa1

          SHA256

          df16a9413f925814ac8e75bee93b2d9ad0620a71e6ccb0cf4b5e656129ae293d

          SHA512

          cfdcbd9639cd67df4e51f1baf15232145d81e00128ff55bcdf837cc152dcdd120504b0a1d562d2db63cc61069f3068c9dbee3cd203c613d580d6dcfe5ad11367

        • /data/data/com.daojia/database/pushinfo.db-wal

          Filesize

          27B

          MD5

          2a492fb2830bf81495218b3a30e51fc0

          SHA1

          78640acc3e0e1d7bb4fbe50315d1b0a0b77e349f

          SHA256

          bdfab1a0865ab3ffd15ed8e31e6ffda7570434551d08533f5f69a0bed759440f

          SHA512

          e14821939fa0147c550ba67fee10fb78fe26ec8089bedf3f206dd38a4b11e68a8fb1d34f502b5c292b59b0f059db4acdbaaba2e252659fcd2200c418a70c673d

        • /data/data/com.daojia/databases/daojia-journal

          Filesize

          512B

          MD5

          b6c05d5a52dc9417a9b04a5c68eb0236

          SHA1

          6b9b745925a5586254360299270c894ddf549a5e

          SHA256

          33a5415c68d007a2eec7a6af25f8631fac7a0c77b09541bb305be265300f47a8

          SHA512

          6b6b61d4762457b2368a935b9b0c8b1621c2ac0eb7ba1ff77252a46d01f2e3090c5ff2421f971ae9a36f1801e0923d94cb73acae139cdef477c46ba9658b606b

        • /data/data/com.daojia/databases/daojia-wal

          Filesize

          16KB

          MD5

          e6f8b21cf17ee6cf4020092579fb45c9

          SHA1

          efe951aec5d02660904466562fd1c734554107ad

          SHA256

          4e7b98daa047bb6069dcf2dacecfa8e07d4b898d86b1d1d1e8d4f7d953719984

          SHA512

          b638bb8be0b68d428f1eab17c6cdca2b085bcf07d099ac69e7ca2df23a0b8b22866849d043df806d048eb2d4a3a32d4abfb2dcaba43521ec49a1ec9b43b90c25

        • /data/data/com.daojia/databases/hmdb

          Filesize

          12KB

          MD5

          3fe30614d7e0d11db870b4624f6c50e0

          SHA1

          053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

          SHA256

          67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

          SHA512

          c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

        • /data/data/com.daojia/databases/hmdb-journal

          Filesize

          512B

          MD5

          2a5175a1509dab7d7f0385cb1c14b25b

          SHA1

          c773b99b9ce4254a938b3462258210b87d9a00f7

          SHA256

          4f16755de8efc448164b8d7d3113b495b1291eb76c43750b57a85fe884e4b45e

          SHA512

          42c9a321bc9baa70921182dc007b0dbd07f39911773b171db060bf233b625a9d7ef54880ba2ea593a41863b341941127fa74a89feda673c1198814f643d7ed97

        • /data/data/com.daojia/databases/hmdb-wal

          Filesize

          16KB

          MD5

          1774002688766dc0db0481e087178f50

          SHA1

          cfb76e10015e4cc7e4190df38a98925e4ae6ab70

          SHA256

          8b223b5bdc91a835271caa6b5cee20c9e6e51ba3437ae875f29cd24e937c5e38

          SHA512

          4ba233f0463b0c4bda780046384c6dac8f002dc28777f1d7fe3b8329c53f13af6f958908d7cc76465ab6898ba1760cec1b45dae6a7a86d38e517861220f1faf4

        • /data/data/com.daojia/databases/logdb.db

          Filesize

          36KB

          MD5

          a7b5debf648af8527d38065f285c6754

          SHA1

          ad8513c878ca1483a2472c7f8dfc8a416418517e

          SHA256

          0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

          SHA512

          c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

        • /data/data/com.daojia/databases/logdb.db

          Filesize

          20KB

          MD5

          cbc6c319b2e3ba05db2ee2a6d0793c2d

          SHA1

          42fa52f856184314eec5ff98b06a92a52d958523

          SHA256

          e62512f1a76d5023a51369c784a2ccd5fa19e836f9602efe12f65379fde86046

          SHA512

          d51b639edc6dbccd7c40da47b18c1747fc85bc6cacd90b8daeaeb5a691339640a64bc251b532f45fd10d8da7b6a88ac8e8e09a4d946481973a5b23ff94a152a3

        • /data/data/com.daojia/databases/logdb.db-journal

          Filesize

          512B

          MD5

          325913038e062f6365bc2b9fc68ab5a7

          SHA1

          2218cc82a8f93b2da71747d5bccffe15c0738385

          SHA256

          7d0d367b0768d289418241c34a230d37b5f13071e3cad484a69f86f77fe976f8

          SHA512

          00a07a26ff82709eff417e4cf5b9b60dabffa58a70b74b6ff44d51ba0540c8f66eee9a40d441c61d7c754fc29dfa67dd3bb91e62cec03a991a7993d577620a98

        • /data/data/com.daojia/databases/logdb.db-wal

          Filesize

          48KB

          MD5

          86179047cce33c892a72350626633dc9

          SHA1

          711c58c3d94f04a12c098044252fece7484b2868

          SHA256

          1f27bd81041e62389c3df3cadf0a9a1c674970a551b27eba2fd96395d5cafad0

          SHA512

          ac7244021ca81ff0ed64358fd57a3a9bbd473146de239cbc0a8682072c57af61c36414abdeb515316c92c37e152863e64a4d6bd440b468b9d60dc4922b556be0

        • /data/data/com.daojia/databases/logdb.db-wal

          Filesize

          8KB

          MD5

          c80cddfd6e7e294bbe8cacb1590b8471

          SHA1

          3de2fdcc4b5eaec50b3c0bfc6ed7b322d6c609b2

          SHA256

          262813380d8b2b6d2d169ffb160e7f7bf073aad667b9d4fcba8e0cc858da4805

          SHA512

          c7e2f5f493af359ccf377be9eb843754ad611e64b855a59cd5ffe51715bc503a9f417a2f0eb97c69270ce8a5f8ea2175031783eac4c79f9a696d325482ec6e8f

        • /data/data/com.daojia/databases/pushstat_6.5.0.db-journal

          Filesize

          512B

          MD5

          e83d8f2f01eb981c973a0b6f8cdeabbc

          SHA1

          20fbcc610fd74243d6d8b716393917d79cb72992

          SHA256

          809f9e56003daf3c37afb163fc8a3668833c0a363ce092f0f08384a1a22629ec

          SHA512

          0f6b39d84398f7182e2465db6cd69312fc510b98f613e6a4c9e087c115df48433d980503c987e7ebb8e4825f0df5da2eeb35a8225f431cc754f906795ac9e533

        • /data/data/com.daojia/databases/pushstat_6.5.0.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.daojia/databases/pushstat_6.5.0.db-wal

          Filesize

          64KB

          MD5

          9cc7761278d140d53c10b4390fc9143b

          SHA1

          78481408db79ee2c88a7248a6b24f78ef0b828e4

          SHA256

          2f1c3a64ff01f44b6fbf590e84ed07687d309f3a69d61a585440ea953c49f796

          SHA512

          b496b502164c84c9438b8a012740afa339b52598474470e6878d7960796f4ac363a20e3258f85a06ef8b637da2b81001a7fd1b3ef6c3e4aca2e76ac9cf58ed7e

        • /data/data/com.daojia/files/.jglogs/.jg.ac

          Filesize

          40B

          MD5

          5537057aec86ce531356cf5d3af908ff

          SHA1

          9f10184585467d0be7ab60bdeae21a211ee8b61c

          SHA256

          20e51bd3cd5f8175d3c4f5cfbf015877d68d72ea8ff0e2b702ffd622678d152a

          SHA512

          14779b72b030d87002a8c56d22ac7859a75b097e602c2219309b11a9dbbead4bd230080f72343362da89c2c574cb65bca74867be4514e8b3187c72d2289e32f0

        • /data/data/com.daojia/files/.jglogs/.jg.di

          Filesize

          340B

          MD5

          b47b090015f5a9a620201fdc05603772

          SHA1

          e88b96c715c0e3494adb0ac53b6b5044a5a4c3dd

          SHA256

          cffa3f5c3ba4a12f3fd640d24ee5178b55d260350cc252d1161252d988ca1dea

          SHA512

          a37d5dc4e73e0de0c9db916c81376b2b6939d25e520848935c20679024fdf785290a3cff2aca5155c1aa91e95773896242d64059ec856c95c68941ba86c9c88b

        • /data/data/com.daojia/files/.jglogs/.jg.store

          Filesize

          127B

          MD5

          1ca9327dd7aa36aaec86d9043b720587

          SHA1

          d8f652887f521675834095cb18cd0fae0d3f67dc

          SHA256

          178a89c8a85763e9e3aa4751b636a6a8c50b286b6bd61b73175422efcbfa674f

          SHA512

          c9fa34ad3aea01b6ac436566fb3616b773e9d1fe225b939d718007768f8bf4696d52de9e8c9e8dffd5a5f6d67bf24c463f1d08239140b0e39bddc6f26dfa33dd

        • /data/data/com.daojia/files/a/b/302ba74a656c04e34a61632854136ab2.0.tmp

          Filesize

          567B

          MD5

          d73b679645e5387deb8dca17da6bba9b

          SHA1

          95d3825c1eccfbb5123d0ee49df62f02189bbe15

          SHA256

          0bf528452701570a6ca7d5784e23ec0356eceec183ad09cfaea8ff629e0f5faf

          SHA512

          f90c9c60ffe0851ff5b7a8e21b5af20cf38c857aabad6fb84adf3e8a5f8b6e537a89508aa7b290bd3f9f242b8be1b517c507b5c70e7a9a36a8c6e50dae58bb14

        • /data/data/com.daojia/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp

          Filesize

          567B

          MD5

          c7be0c4ccf47c77df3024cdfa9659c01

          SHA1

          c1a4ba8c17978520b082e88fe350edcec6dbf628

          SHA256

          17a3c4f9b86cb6f38333b067f3acef16cbe6eddbc3573b1b28e2b8c8bd9af23e

          SHA512

          e8cc7b243da53412f0e65992ff56e380295380efad69bc8af173e97c4de403d727ff303add8d16a5ab45c4df57ea67d7fa2eea2a5428228c9e5ef13ee536ea21

        • /data/data/com.daojia/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp

          Filesize

          567B

          MD5

          b902cfaeb976e31f66cfcc66e65f46e2

          SHA1

          884b4e5c04663a7b03708205f3f26db595014c3e

          SHA256

          d121222bdd2aa076a945437aea0845a8d6378cebdbd16883571e0c1dbfc89aea

          SHA512

          5645f5544137d17a6935ae8bf74340e93997c64a41bbb7a37a8bfc954c7ad4697643068ca91a92559c0813afec3755a7ddadf3d5dce82d08f6d8011deb14f970

        • /data/data/com.daojia/files/a/b/journal

          Filesize

          39B

          MD5

          607a6e9c92a4d1b146790bb49a0eb2d7

          SHA1

          bacceb34b65e8db3cdc6112846c42d44ed4e4d79

          SHA256

          60c31f262afbf447138fbd0e31e6609c619d2f4c596901c542bda2a53d53ec1a

          SHA512

          416d530ec7f3ff6a8f62d9c2e762995e91963f4100aff4c64360d9774173b21060f1cfc5d2d264ff33e27106a84ac139c96af6690b9ee62ea2ab0d76c6c64725

        • /data/data/com.daojia/files/a/b/journal

          Filesize

          39B

          MD5

          c556a30c5426d358dbebcbb0e5318f28

          SHA1

          6921a64aa64e3e3966a0551f00be290c6f8ba15c

          SHA256

          c870755090032ae099e69b47886c6697565ca26f833de9b3e4eb6221773866ed

          SHA512

          e012a2255414670a183aa7ef9649922cac51a0da019d99c70123aeb9f982148704981d68ff03d5f1d64e0e2c060aacd77d68a417c54038c82d8bb770e76e275c

        • /data/data/com.daojia/files/a/b/journal.tmp

          Filesize

          31B

          MD5

          8c92de9ce46d41a22f3b20f77404cc1d

          SHA1

          8671a6dca00edb72be47363a7071be65cf270373

          SHA256

          68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

          SHA512

          30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

        • /data/data/com.daojia/files/a/k.store

          Filesize

          32B

          MD5

          eda6f9c6b1cd3020629de2bcbe7c13bc

          SHA1

          a5394cec0564b1331198c8f55839a601cedd9c63

          SHA256

          86e043cad766c6fa5476fee9f19bc26f707947b08d6641ab16d1eb2dded13012

          SHA512

          9a8ae74e43857317e60ea9308054c851fe6d9e9fcbd27b176c63048c69892677b881aca52b7ac9bd641ddd3d57c141b4ff0fe3c7cfa67723bb6e3478b957d2c9

        • /data/data/com.daojia/files/libcuid.so

          Filesize

          129B

          MD5

          701ca69b1f511d5dc575e753d7132c64

          SHA1

          4ae024add16154b7138938ac518badd68be01cc6

          SHA256

          7e629ef4549305909244f9b56e7e8407bfbe7d5eadc296c05e8764f214f79257

          SHA512

          71aecea80ea4853a366fd23ecf4e5e05b7ccaa0a61830744f56b9be84d142977d93853e7ed3fe3ed00fadeb2b33db27667efa127ce808c08b0c9e656b520b8db

        • /data/data/com.daojia/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNjgyNDU1MTYw

          Filesize

          1KB

          MD5

          60223f1069a08fd1b08c18bc0d4e4088

          SHA1

          605c01122d1a621e302eb1898f9fdde6faa80f1e

          SHA256

          0d46bb87ae733f0456931d9987273c127c1997739444f2d08ca13437d92eda0c

          SHA512

          1f4f01d8df4522cc58f43a059ea9731a86aebab852cb054d5c9dfb787fb450235e8cb80a7491161f764d0224910a489283774bc6e2eece05eb66026b61c727df

        • /data/data/com.daojia/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNjgyNDkwNzUw

          Filesize

          1KB

          MD5

          73be50a73ef06c18a7cc4125197c3459

          SHA1

          1bb345887cd89db33f335c6c37f66ebd317a84cb

          SHA256

          2aebad9b05818f4a7714cc50b443b935c5e8d87ed28b36a9cb06e771f4b544c1

          SHA512

          486f3da6dd3190456f69e96f7b13e471fa4ad1dcd1c7c57a0f9f2ed059282b60874239b75bb328e09e5b1c00ab9afde951d7afa7880a0027f7a8ef0e81845b60

        • /data/data/com.daojia/files/umeng_it.cache

          Filesize

          498B

          MD5

          24b342fce52e95109d1bbb58b88db917

          SHA1

          d684a383ed15eb2c0b088d904274eef04ed9d8cc

          SHA256

          7e0a7c93dca38522a39ccfb72dfc55312399f6658b92221318162832d07a02ef

          SHA512

          e47eb0a6a797254fa6d3cc42579b3184cfb64537bd05dd78a46682fee02a40fc7081acaf2bd9dc5f3180d75b889ee6b9ad6e3b50db1dbc4f920b214c9a166046

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          6a93478f62404f66f1185f4de65a386c

          SHA1

          04231594b83b31efaa34940f91a4eb738a0c9f33

          SHA256

          a372b8c656a56ab4956f9f6f1030f743c9a50bb096e17b640c421016a6745289

          SHA512

          8223449891da866d3cd2dcc74794e1a951f3ec9cb0fb3da4da329adda812432d4ad6f603e6c6fe5742c1b9e80ff4113262c6c5947c791999df8268e3265c6c12

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          64d3a7902d0fd3a038b767f8a5779479

          SHA1

          38f9be9daec218556ce35860823dc1636cc0b8f5

          SHA256

          da981006ed14991577467fffbe70a27e4bbe6bb8ce343ea918ae5e0b8ecf13c0

          SHA512

          8852c33995bbbb959e8ccecf7e9dc5aa7c8d2dcb65ab58cda4e5f4c00167c3450de95fb500271183d7257869346b12dd81ff5bc9f8ccf3fcb33eaaa027e47011

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          8ec20f84b765ed6bde4c59cc7b2356a0

          SHA1

          d83103f7e25d2f446204f114fd05b03e1a001a67

          SHA256

          b3b9d57cb79848a41a337f4c900674994cfd98501457e6380ce220db484893f4

          SHA512

          ec0d712216dc29a0eb232abc709a9a63afa92ff769c669370f85ebe8ba17581db56d41717cb15319581c379a359e4deb92e4b1ab0957454b5157bbb761a8b417

        • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db

          Filesize

          20KB

          MD5

          731fba9d21f23915576ea5dc2ea3ffb8

          SHA1

          d1fdbc209db8b71d1b4e5341e75b8cc88647146a

          SHA256

          87510194f38897a04cd1f80bd6fffc3344fa8ef21baa61de020a2e790a7268ab

          SHA512

          b643177cf3a30543342d3a521a2dcfce70df4ec450b040e2b61d8692bbed4b3cde2f9f304cbf496869b89455e3cc6a501e8ff720edbdf0f6898e6a5f31fec25d

        • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

          Filesize

          512B

          MD5

          a8c0b2a8655f8bd90f3ae5d3fa8d902a

          SHA1

          d792aa0a751ed293b20a8a4dfaaeb6844093cbe3

          SHA256

          92d210f1b59c2d9042760c9690585c6c0a25892acf4cfc66bab44904d1176bf2

          SHA512

          09d04edc8c844d5aceaf19a43099e55d10da8d613507799587fbb4b2551b7aa453573ca5453fc9b768a43a681c52b99d7d2a104910bde1991cbb68fc445f4c68

        • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-wal

          Filesize

          32KB

          MD5

          2d4a6b35179a74c3130595bc1bc8669b

          SHA1

          0b9d958cba4e7e993c0f19689880e8824fe96306

          SHA256

          d85b2a89370a101901d7061cca02ae0e1967c91ec87a234c304f8537920166e5

          SHA512

          0df35020a6332948b7b504355d395d9ea4b7034a694751464912b3583addc52f8fe06206d2ae3c1e05f36fe13fa9ded9a8c613d5745abc57b4c747f67e148808

        • /storage/emulated/0/baidu/pushservice/files/.info

          Filesize

          20KB

          MD5

          e9d3982a235aa84a26a8ef58f9b368a4

          SHA1

          3ff6118fd52605bbe39fc6c79f73a3bc9b4844f1

          SHA256

          d106a01fc558439c1c7418cc775944d2beb5bffade99c06ec626c6870c6232ac

          SHA512

          23648e954f560d2ecf7bfa036b389944aa04b326b633f8e93835b879acbc0293d177f857214533a5add9b18765cec24267ab93333b3e7f425916dba53a3c0b69

        • /storage/emulated/0/daojia/log.txt

          Filesize

          48B

          MD5

          1d8d16c4e3b19ebf18988530d9b9a757

          SHA1

          bc94c1cce05cd848a53271ecb9c5311e27ffebf5

          SHA256

          abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

          SHA512

          4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82