Analysis

  • max time kernel
    2547865s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:24

General

  • Target

    491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e.apk

  • Size

    15.8MB

  • MD5

    4124cd43bb8acc62bfed5c6553c0f3d1

  • SHA1

    0f251d5794f54cb043502dc20941fa7e7316d01d

  • SHA256

    491779be7f05d9fb3433f53a9688534e16add49e86b3ad01dc19d9d937c0470e

  • SHA512

    2ad4bce576f0c471a1e6a5fa5bf191b4dea3baf0f84a0740e868a397058bb16030d174523c43560dce76eac702607189d9c5f2abeb82ad314a68129762dd5bcb

  • SSDEEP

    393216:7Qa8RRSaum+aRfNsiRP6tIQdHGLpzrQ+X0oMAkOxRgYj2O054fo12KA:7P8SaEaRfNLN6tIQdmLpdXxjrw55UKA

Score
8/10

Malware Config

Signatures

  • Requests cell location 4 IoCs

    Uses Android APIs to to get current cell information.

  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.Multigold.CunJinBao
    1⤵
    • Requests cell location
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4236
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.Multigold.CunJinBao/.jiagu/tmp.dex --output-vdex-fd=43 --oat-fd=44 --oat-location=/data/data/com.Multigold.CunJinBao/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4304
    • sh -c ps -ef
      2⤵
        PID:4732
      • ps -ef
        2⤵
          PID:4732
      • com.Multigold.CunJinBao:push
        1⤵
        • Requests cell location
        • Loads dropped Dex/Jar
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4512
        • /system/bin/sh -c getprop
          2⤵
            PID:4636
          • getprop
            2⤵
              PID:4636

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.Multigold.CunJinBao/.jiagu/classes.dex

            Filesize

            5.7MB

            MD5

            494b2d7e64baadd79934c32cc2e8c1fe

            SHA1

            08f4865309037622d3db59167ee5f10b68548029

            SHA256

            ab5ca19197dc93e5e424900d79879e7e9affe115577a681780e57714674c5707

            SHA512

            5c2bc0a5b8df1eaac04adacd0599993112d535984a3ff0ecada052c544d91a817f57fcc0f527898b6799bdbb5b01972984cbe5e4bb4b4e61b7ac5df81628f578

          • /data/data/com.Multigold.CunJinBao/.jiagu/classes.dex!classes2.dex

            Filesize

            6.3MB

            MD5

            a50ec94b7563dfd9d8ac459bd7779acb

            SHA1

            fc5694cdc31c367073b0f4b578e7800caa25cc88

            SHA256

            2d1d1d6cd890bcb31eaced93d5e972420e1d0df0cd3d37262412c2dbcc9a1023

            SHA512

            20d2d40559474dc98da70569d39fe4f196111eed4cf7c8a19ec960454736110f56f6afb04ffa7bbca34d89b38e6aa008cb3081ab74c7fda44c60c968c25465f3

          • /data/data/com.Multigold.CunJinBao/.jiagu/classes.dex!classes3.dex

            Filesize

            4.9MB

            MD5

            b355dfdd3e42d9380dafad884c93b684

            SHA1

            1cb690227bd9ac6d9d3dc4e954de2e4b75787224

            SHA256

            c18688196880dfffd518fb1e5d41892920b32fd4812463f577f3875593a1d64b

            SHA512

            8b56891c095795ec68ed41b312a40b98fbf93c46bbafe73020d6ad33280ca37057b00684e6770c6de70060e3b70ff1eb44ed817d6873b01b9e4916868c471c50

          • /data/data/com.Multigold.CunJinBao/.jiagu/libjiagu.so

            Filesize

            487KB

            MD5

            610a895c4a71bbeeaea16eddb1422bbf

            SHA1

            9f919de42ed1e80bfadfef48f8202b202166f869

            SHA256

            baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217

            SHA512

            ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2

          • /data/data/com.Multigold.CunJinBao/.jiagu/tmp.dex

            Filesize

            284B

            MD5

            f1771b68f5f9b168b79ff59ae2daabe4

            SHA1

            0df6a835559f5c99670214a12700e7d8c28e5a42

            SHA256

            9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

            SHA512

            dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

          • /data/data/com.Multigold.CunJinBao/app_crashrecord/1004

            Filesize

            232B

            MD5

            2dea452b7d41793ccf127ee79f559fac

            SHA1

            892758fe5541f55d680c8d47ad87cf261117f031

            SHA256

            3cb2cbda1d9955b3b83335614cd81becd5acf35b65d4bdc9115360970f27119b

            SHA512

            09b06431021aa8983cc1e4f44444ed57c87839f20d89191f5b032f225829dc291f2f3e5559429b7d8b464a5d41bb856e11a274df7de72b9a7734daf856c9933e

          • /data/data/com.Multigold.CunJinBao/app_crashrecord/1004

            Filesize

            58B

            MD5

            0d210bfb2a0e1f1b4c082a6a0f79de07

            SHA1

            bb8ed9e364db79d1d9f2fcde3f15091893222faa

            SHA256

            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

            SHA512

            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          • /data/data/com.Multigold.CunJinBao/app_crashrecord/1004

            Filesize

            28KB

            MD5

            cd58a467494ac8fb53af054aa7814c64

            SHA1

            ba2b9c2200bce8e9fcb7215c3479b3d55e4b5408

            SHA256

            d2a79572cc9defab3b0eaad54ccc88003c799e65bc8edbbf4633cc14e17deba4

            SHA512

            22911808b73d3b7a4a777021fc46b8495294e89ac671875436c82516c085b22d631ef7904c914070d9a28c33861f22835644e20c19637e1d04497db6bddee434

          • /data/data/com.Multigold.CunJinBao/databases/UmengLocalNotificationStore.db-journal

            Filesize

            512B

            MD5

            e6ce2e6690433a2a90df88debd52fa79

            SHA1

            d841ebc5aefa7071a21b9d64bfd97b3c89c7e245

            SHA256

            b2c68f406d2c26e06f913ebc5b213db31388e9839e31f7719cf65afab3498b3a

            SHA512

            c740952e375bf7f8450b1a56a632c82576a8c7b4d9de47b03e39a9626e81ca820b8cee095e2622dab0d3013a5e1766c232720e724b5dab2399da5fa810ccefb9

          • /data/data/com.Multigold.CunJinBao/databases/UmengLocalNotificationStore.db-wal

            Filesize

            40KB

            MD5

            ea0360dc71aac5e0fbdbeca79bcf07b6

            SHA1

            b79aa4908ca4678bbd6db318215bbedceff12885

            SHA256

            6bf5dc9a7a096d06c1ad7edb53c8f521d5648bc7e17f9549f0c7fa694e002fab

            SHA512

            a057678a9ecb78ecbb516df79a203791ed5ad4b806939b7f4957caaa00b5dafffe2837346e7ba84a2efde961e7b2f56f3e2a90e9dd63d12f2c25aa04f4d975df

          • /data/data/com.Multigold.CunJinBao/databases/bugly_db_

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.Multigold.CunJinBao/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            0c56be428ec1a092c467febd03f4657a

            SHA1

            10912cff523420c2574a3910f8b6627cb32969da

            SHA256

            cac491a900cdbdb8dfd47be4bc70b3daa901815491633e37f029d6bea21879f6

            SHA512

            5eb142f5c7ee7ef2faeeef46e251f2a36983caebfd61d9bb15eec02684453e18c617249993514476cfde1b05284b97e849f1fded6944c238049418313610eae7

          • /data/data/com.Multigold.CunJinBao/databases/bugly_db_-shm

            Filesize

            4KB

            MD5

            620f0b67a91f7f74151bc5be745b7110

            SHA1

            1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

            SHA256

            ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

            SHA512

            2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

          • /data/data/com.Multigold.CunJinBao/databases/bugly_db_-wal

            Filesize

            104KB

            MD5

            5cf44d73c33044167c4a6e88ba1e0109

            SHA1

            4f4718ed1d2a080e672b011413253064f91df01c

            SHA256

            1afc69fd90324a7f019847193a52e72783d65610d71abe8e27f18e5b7edb982e

            SHA512

            e6da11c756bd4d2dc914413a6ade897a67a01ebcbafed8238508ad3b37ce57e77e4da1f4c5d570fec749d34a2e6d4a0fe2507c801da8f81be7242d1470b626e1

          • /data/data/com.Multigold.CunJinBao/databases/bugly_db_-wal

            Filesize

            24KB

            MD5

            a42adcc62be485150fc90f8adf24ae2a

            SHA1

            15745ef7f24e8da564b42c08470588dd74a31a2e

            SHA256

            f15715573c704d626b6b240e6965c692d426192b8ec407e5e5f76f3204a77977

            SHA512

            97959c47e5a382645cbfc9b3272e3f1f153080f3dfa1afd6ced0788196b67651a5269f9aeb05fe26555c6ebb330ef654927cac730089053316c0d10db8018fc5

          • /data/data/com.Multigold.CunJinBao/databases/cc/cc.db-journal

            Filesize

            512B

            MD5

            c83e41f3aae21281f37cec178de5a93e

            SHA1

            aae584ebfcdfe5a7751cf0069257c55d5569ba40

            SHA256

            85ce6f1cc393c997cea9ec696888738a2c4e5926e497d04e8f6e3c503cdd9275

            SHA512

            edadb6562e69a03cb31f3774738019555c2d3330a79b2f83a94aa9b1052f5fac26c47c2b8d26fd3ca092c801c4ab2a7c90073d1f271b3697fedfbd85ace95f7c

          • /data/data/com.Multigold.CunJinBao/databases/cc/cc.db-wal

            Filesize

            48KB

            MD5

            002a0c5c1eaa3196487b785ef3d0a013

            SHA1

            a6c530ef37dc90cf753c955e103ea1e7ce4801db

            SHA256

            f234a2acdfc9ac1e8bcec5bf34b5df3b063fd014ed58ca4a8649347715b378b0

            SHA512

            a5512373228d3f057a1a61676a6dfd65a065e5a6d93948c4ed40831a69fcf612772f54a7dd811adc0ee0e6a7cca54c33cf08d688c5f99a6bbd87f75119b3d66c

          • /data/data/com.Multigold.CunJinBao/databases/ua.db

            Filesize

            32KB

            MD5

            d604a3bf1f8d992cc320ea5b1f7609bd

            SHA1

            247f88df0b55c7d523ea5398637711a0e4a483a4

            SHA256

            329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

            SHA512

            67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

          • /data/data/com.Multigold.CunJinBao/databases/ua.db-journal

            Filesize

            512B

            MD5

            c3ae4b22c71a58b95429fb897450e243

            SHA1

            77a1607ce6f9d1ffbf748bf1e9a940cd37c2036c

            SHA256

            b6b598be567bba96983f75ef1f1276d330d9b73763f2902dd66699e9e1544936

            SHA512

            5b9d3de333d1897aba44040bae0ab7811e3e0c5072f32309fcf797d7283f91d73698789be0d14da457db52f7a9d76a177560026c13a163a7fee4bfb2fa82577a

          • /data/data/com.Multigold.CunJinBao/databases/ua.db-wal

            Filesize

            16KB

            MD5

            8b54eda573c57333a09417cfee66a20d

            SHA1

            8c611d38fe00db9405454e2a286c825ea20e5274

            SHA256

            34a688b2bbdb1ceb0978e86a1b2c0b44c084ea42febffedadebeb496264b45eb

            SHA512

            6c98a3522ffbdff1b0321408ccc753cb80bfe6c79c2601954314efab12e6cd939cd56544dfd25cfa6df0a580bad4732cfda10e6a6362ae3247c7951b425ef320

          • /data/data/com.Multigold.CunJinBao/databases/ua.db-wal

            Filesize

            8KB

            MD5

            30213038c5fcc6c07873a14a74354239

            SHA1

            814aa0e15bf2e811039a29f27c14a82dfaf89ef4

            SHA256

            6436d3dce71894ef034e3418d11021222d06d3b59418efcfc89d94eab1948f9f

            SHA512

            6c40c1289cb9cd7a616c97d7deffc5306f237f3bfc520cbc8974a0764d8d5afaacc436238aadc304b1259f09b9ff8a358799f41f493e2b05e7364c9d91b72493

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics

            Filesize

            20KB

            MD5

            1b3a318abf70afd5076e81c836fd2da3

            SHA1

            487fcf9c52fd5bc001455ee208591115b8c619d2

            SHA256

            e7e4d5e44acef0c5318390a4fd823068073f4f1ff6d745afb26029218f6b1c77

            SHA512

            7e3aef91ae32167cb9b53f942dfc8b85e8fa1de701bb876b78188e329594cf8670333f5c26546ee49dfb870192fbad506cc0b2188e3f1bed1f36e2796c2a3c47

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics

            Filesize

            20KB

            MD5

            0e10382f6cd79979f89a892681d52ebf

            SHA1

            abbe0381843be661608fd67c3f0ff28e52f1380c

            SHA256

            988da2412a4e630fa40157bdfec4d15931841e12f5e5496c25b169fc3aa82420

            SHA512

            e1ba77e5d29319f15012982765a939e1cdfb66a582822c75a52b5843ad0d9c12bb65b565dee0c05ed52c898e25521dad36e9c8f14f4931f59808539b5a927595

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics-journal

            Filesize

            512B

            MD5

            55770cfb3db7e42cbc2e5d8253bd3e36

            SHA1

            10c8be01665c899b3dcdc48fb15a4803b657e26d

            SHA256

            01f7d6f1db5ffe7a03224fb8ab77b76d16b8656dac5fc69d5f8ed88a0d4f55ae

            SHA512

            606d879a0a5236307c8e32067735fccb059fd0e5f23f8276bce43de28c780ba70ce19fb823cc4409758c786c565c6b4947e0a8c9e18bd2329a3129b499408bc4

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics-wal

            Filesize

            8KB

            MD5

            cd09c6d85e9e2765fab5f13a57c36434

            SHA1

            dbfd84ba694163f744021b2758f90a01539d1b7e

            SHA256

            68f1978cbe6523bc08d11c5ba246b3aa23194effc548bdaf0d62ab4440dc6525

            SHA512

            8ebd7aef488c9d1a3309a0c15bcd4db4b1ad1b1b968c15cad2197ced0b07fe962b272856cbabd30b3dcec99ba21dda09d36eb88ddc0a5184932329bd9d9dfbf9

          • /data/data/com.Multigold.CunJinBao/databases/zan_analytics-wal

            Filesize

            8KB

            MD5

            d042fd68559909aa6cc8841c76a5b7d4

            SHA1

            fa7a5e200a56256eeb081cbdf1ee54689be0ee4b

            SHA256

            470ccf958b8591dacdc9081607b02c53b1a07bdb188101e019b44982e8eaa0fa

            SHA512

            906ce448cd34109a128ed6815ecc8c662090bc10f74e613006849c8566e0a3b0cca7559443e894535ec5b7bf1d17f10099f1f4713a62607ff198bbc962aecb6a

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.ac

            Filesize

            40B

            MD5

            6842a9a6fc14d8f79c6ebd51629038d4

            SHA1

            67e17ed110cde9533c36c0ef098c85f84be237a2

            SHA256

            dd90e1473addf6c84bde6380a41eaa160a912c2d214715819d92fb10e16638d9

            SHA512

            ae36fd123472232e6dea7ec34f77db1b1b11ddc087f524b3539e19ca574925c60434fa0f8a060647b698b9d4a4beaa883ad030221f85e8e204c9a615a54809ac

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.ic

            Filesize

            32B

            MD5

            36197b3779ca34b9b336763e6aea6d4c

            SHA1

            288ed39c46f1b8b8cfa188ccf159c97cfd1e74b7

            SHA256

            500254973b45c9c4a8b86333edc06d47db1dfc0d2a9e659fb438ace1be73a986

            SHA512

            32befd79fea2e6b7845b8d92c1dbf5fd71857d25bfd22fc1a163b8ac9ce98ed5c7b25fa435ab503dda9469f3ba11fdc91be5c579974a634861d38ed900ad683e

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.pk

            Filesize

            32B

            MD5

            66e6b34d4fb552fb5a37752c71ddda27

            SHA1

            1e8ed50831f0249b0d270fe403de7fce0b62e46c

            SHA256

            f19293c8b30934e70ccba93ca7481ffbcf53c8915deea568e22981420336614e

            SHA512

            79d5242d236fec4c328b7873d9f2dd30b867b9c1497709f6296add780721ec660deb3abd8d8735069e82cf0af954174c187314d108226440b6be4485560db1d9

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.pk.h

            Filesize

            64B

            MD5

            b95afef18f2798d8e363e973da4dd3ed

            SHA1

            737b5075f30c0c88d284834366f608ff2c2ced04

            SHA256

            21c3a260047b0c5bc8da287ea788821e627808a1812e0725635f915f0088a080

            SHA512

            34413f99f95affcc9371508d527861c9560b97d5006bc9f7ee46fcfd990f98c80f05607fd3a8e2ee73dd558ef44744c3dace7b3c19b3a15aa6db89e5cd12e8aa

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.rd

            Filesize

            73B

            MD5

            1f086c7a417388d9b9291702cb910169

            SHA1

            63042efe0c9210914f3a19d6cc6c3c97c6ec380e

            SHA256

            0d16dd9213214a156b391ad20e7a1103ce660ce7dc48096485bcd7fa5d5d5eb9

            SHA512

            dbd0878039c800929d6cfe891d20d4107b950ad96f3a2937b27867e38f36567ab33dff9ca1ee063094e9ca1c5060937adbdadf1d9229621f64bc9655ff11da76

          • /data/data/com.Multigold.CunJinBao/files/.jglogs/.jg.store.report_pid

            Filesize

            54B

            MD5

            5cc1a4da099052d0d4de017bf389ca8c

            SHA1

            986529f5d041bb3ebdf7f3ccabcc08ce90a7afdd

            SHA256

            8794cf326d2c7c3eff6592b5c5c8bc5210ae1f61064a2779dc275594facc62e3

            SHA512

            4e951b3a9b87415936b5220945ddf6bba0529e67d4ada276a9b7d936938fdccd886737e5f3fc82294dbae4b0d0806a6c8bdfed41b8e674752ee10ee38f055d57

          • /data/data/com.Multigold.CunJinBao/files/.jiagu.lock

            Filesize

            27B

            MD5

            e811a30badaf286f8489334e68b85d86

            SHA1

            4dd9ca2e1c4bed20277b2c729887825338be56cc

            SHA256

            91c8e01b2fa63b3d4da21be0748d7744272083d114d2405b86998fb1e7804a9c

            SHA512

            a6a12e759889f1952f63ca98ba1d209cdd02420a244c8124cc29f41c2a9141c368667759b536b08d0d1ce8b1766856b14ba4f70c59aacb66d316489e469fff0c

          • /data/data/com.Multigold.CunJinBao/files/.um/um_cache_1703354914352.env

            Filesize

            1KB

            MD5

            64413ea2b531db1ebb626de54c9a0204

            SHA1

            71437051ad0989e2ef4deeeb0994f1b3d009bfe4

            SHA256

            6b86942784fe7dfbadb23e80c3de42412a6b36fe3dfffc170cf29231d7eb1fc3

            SHA512

            a317558ef683bc31cb78334356bcfb89639435cbf88b18e0623b2ee0e2e5a399cc2949dd33f2c4922343da4d6c425b60b89e0651814f8a6f925a66c16765cd47

          • /data/data/com.Multigold.CunJinBao/files/.umeng/exchangeIdentity.json

            Filesize

            162B

            MD5

            c03760c9a78ab27e70bfe49f8f71e6fa

            SHA1

            186522008a70dd9424262421409e9503adecad60

            SHA256

            1bd28392239597e1f51aa4c70d966937de8871e3e2ec7fef725d36ca3eedff54

            SHA512

            842ad478dd7d9d07f2abbad77ec94ccac6a43ca5f3ea1e8f506fb436c719941bad9189dff9eae22e7e8e3256c8944a51241354ca13a0ecab8d75ed0e8335fdd1

          • /data/data/com.Multigold.CunJinBao/files/Archimedes_p4

            Filesize

            13B

            MD5

            abe747a3e7d7509d3a1c9ba48c143fba

            SHA1

            88312f30fa0c90f7e14ff2745ab46fc79f7dde83

            SHA256

            610c73953e920555a79dd35e59bf5783942b10d7bb5b910e9422b1278d67c6f7

            SHA512

            67eb2db82e422ed9632d7253dbe9e7cca3f96a8cf8b77e54aaaacfa5ab9ed1d199e2d73c3f6bd51e9ca61416804c1026c384d68d66e768c68c8b206f7a6371b9

          • /data/data/com.Multigold.CunJinBao/files/Archimedes_p5

            Filesize

            13B

            MD5

            2c8e098690013a0f19a71586871b6c5d

            SHA1

            8672bbb2e8ef1fc10756a151dffbc8db3a9fdac1

            SHA256

            9e538b621af5bbd0a2362187fc1bf346359249ca02b880a1909449ec52442ea4

            SHA512

            728f8d77a0d6995aa17bc38452f5541e75456be8f85d997f4ca77c7780e2802a2dcb67a7a7c128d89cdb658b4abfea6f1b326d4a33a7962f024dfae6f198e45d

          • /data/data/com.Multigold.CunJinBao/files/_Ladder_Project/Archimedes_p1

            Filesize

            13B

            MD5

            4e38ee42dca89a4c3908c7c02e4a0c9c

            SHA1

            bca1361946f786cd57374a521ada66c1b6a93944

            SHA256

            06b2334f230afec6eab3c6dc4cb040bf80c2b8d92171deead8f60fe91df9dd8e

            SHA512

            81819c321de55ce3bd534efa02899b184df78fbbb792c667bfa68ca4484db6a0dad8a32062f0e4d1424fdc37c5c5ba33e98e38a6b52e5ebff202bd739a40ee60

          • /data/data/com.Multigold.CunJinBao/files/_Ladder_Project/Archimedes_p2

            Filesize

            13B

            MD5

            aa89b59205a376d0fc314c95aa67ebe5

            SHA1

            48764abe8931774d94a037ae03fd957d4673a177

            SHA256

            07623cec23f2599df1a5394749897bc922b7ffd4ce7543ab9de9c7b502074aef

            SHA512

            5e9b5a52ae24dafe11064a304bcb6da4119f01e3182e702d7abb1dc783b662b51d72cb836c19f9ebad664976c689898630b002c9270bb213ec84d61840fa43ba

          • /data/data/com.Multigold.CunJinBao/files/_Ladder_Project/Archimedes_p3

            Filesize

            13B

            MD5

            e3c82c464e928c5314fef18f9cb2f6b9

            SHA1

            a5f2ef9bd026f27d92536423802e9e4999c48848

            SHA256

            c4e4cc20153243666980f0ca519a286b99888fe5cdd909cae483dc6cd3a5d518

            SHA512

            0eb31f92959bcb17fab69352074f9c092991cceb2dfd95ba7b38b6078ab863d668463a6c2dcd6b5f1e2c7c1a8a3d05381af18da9d75dd31c107f3e89dcfb77dc

          • /data/data/com.Multigold.CunJinBao/files/__database_reborn_January_one__/td_database0gomefinance/1703354781969_4236

            Filesize

            1KB

            MD5

            f4d3bef50c5019a4cc980dbbb8d2439f

            SHA1

            a092d734d2a7ca52b2631f1d7a728335a35f0960

            SHA256

            2eecbe3e7c43b253761775970b29947b0fc8df1d2d596bacfa1664556da0cf46

            SHA512

            ea7879123f48b762d8d031a995ab2fc1e39414a8fa77ccf016635366859571d9811860315f89f00308439a2db02cdbf113b54a369e478167e37b85f56dbb3e21

          • /data/data/com.Multigold.CunJinBao/files/__database_reborn_January_one__/td_database0gomefinance/1703354782389_4236

            Filesize

            1KB

            MD5

            a8ec79b7ef28d7601cff10d909292840

            SHA1

            0148932892e1887d9b2bba27e2a757215fb910aa

            SHA256

            e0d329032ce37f658d3179f00e815f90aff940f90f15861d27794c0d0d159ba1

            SHA512

            09ff3646a61411caa44c7a47d4ea732769ad5e0821d2a953b76eba832282620c59f82f41d2828f4378294b522c8ad78cbb2f3ed789436f9272c03cdad7a66ec9

          • /data/data/com.Multigold.CunJinBao/files/__database_reborn_January_one__/td_database0gomefinance/1703354782667_4236

            Filesize

            2KB

            MD5

            770a73862f98becfdf3aaed65e949a32

            SHA1

            b4dd4f83cc8f821a2d7f54184f1f2756d69863e7

            SHA256

            2d69b27b2a62cc3f64df745ab48b76ba8c8fc534a194d7c8e3d1b0c70d4344fe

            SHA512

            3c646fffad290409d6bda97df9701692a78f4ce40946ebc0c5c112cceb44420c3d7ed540cb44a4fa9c7533f2d91c41a87f6c6febe3db37061f8e115c0247c22d

          • /data/data/com.Multigold.CunJinBao/files/__database_reborn_January_one__/td_database0gomefinance/1703354799067_4512

            Filesize

            1KB

            MD5

            e8ded8013bdb018176cf881a375d41d9

            SHA1

            36b46a20ba443ad4b6b7afcded536d53eddaa3c9

            SHA256

            26fc69b7f010c3f372e390e039fe1ee1bf51ebe6db70667f586bb1fcd6cfa4ab

            SHA512

            056a464d4d642e44a95b4c5affdb1fa80c3bf6bb092cbe960c4e856ce511de9d3c535c7ee49fd59ddada278b9d74371fe75391faaf8ca6ab2b0ad731a356951d

          • /data/data/com.Multigold.CunJinBao/files/__database_reborn_January_one__/td_database0gomefinance/1703354799634_4512

            Filesize

            40B

            MD5

            eaa23c8a7d8886c8e546bbea830ff12f

            SHA1

            2adc3f119a6ca80b7b6431a6747bebeb6af2a6fe

            SHA256

            4ed7a1642586555d2a2eba8472d31ec850fbaa26cae27d7f88d51ad350bc492e

            SHA512

            ec6580f8e3fb8cb847a8f64c754a54094ee6d1adfb665322a28dbc7ce3a11bfbff35143e72f2a1d2ac6d3e49a8c761199be8baf999ef72a18231bae0705cdcad

          • /data/data/com.Multigold.CunJinBao/files/exid.dat

            Filesize

            66B

            MD5

            cbd4382125e91e290fc21bc515974bfb

            SHA1

            5c21cc3de6bf942224e65218ce4002da549afe3f

            SHA256

            32471cf7879f4de55d67cbec967fade3cb198b4531523621a4229bf807628084

            SHA512

            bc2ece5b061a6476899cdedff0fecaa04560a62980d1faaae5992dd97b9a2bc81e4f4ca694e636ee14b3071a68c3d8103de6a97b4ba76f1bd405ddcfd8880de9

          • /data/data/com.Multigold.CunJinBao/files/mPBE/iv

            Filesize

            60B

            MD5

            7ef2be7f64e2602406030eaa965f9928

            SHA1

            f90d9a68301e8934048449e024dc40cfaae366be

            SHA256

            233b6b3046dedaf1c7266d7e699770d47414b563c15f8a5a83ecb81f9ada29ed

            SHA512

            fc82ee7c8b69de717d853b2b3767d9c39fc3c89be62caaa1bd168ca047edee484f82edad21bc81dacfbc6081cae9b4eb063b42fd26775c3d5b06f9f62bb46707

          • /data/data/com.Multigold.CunJinBao/files/mPBE/salt

            Filesize

            122B

            MD5

            0cd923c9f1f365bc6bed6130ef820885

            SHA1

            69278b290464d0538bbcfa41e2c1cd3eb7128818

            SHA256

            5de5c97084c4e0729250d03c3da4ce4d2fb9349bee5ee0f3532e5a56220d3023

            SHA512

            50de9fe57e4f6dac883c4bef70c37414638e316e8cedad84cfac4b1b6bfeedf64c2b5549f765eb11a02b3412baa71e09086ee33df21325b2c31d6f5e95430644

          • /data/data/com.Multigold.CunJinBao/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMzU0NzgyNDMx

            Filesize

            1KB

            MD5

            540f7aa477da21e4f844b94f4f725780

            SHA1

            30cdcb3adba98d9254e31cb26dec7f66e057df79

            SHA256

            788355913e39f2043a4876742320c52d1c4eab253f6b4b274422385046074fed

            SHA512

            03a64091c712205c0be1f062712d4f8cbeb92e28ea01af6e995a89929b796dd65e73a3c41a01c9eeb1cecac113317ee65b2ec65a80f821f56984395d1ea61326

          • /data/data/com.Multigold.CunJinBao/files/td_database1SaaS/1703354794639_4236

            Filesize

            2KB

            MD5

            3f919e19e37b39eb54c8530027787153

            SHA1

            e80945c22166a81c423e4509865fe87665f8d16f

            SHA256

            e3d36dab6fdf107ec99663753330ae1b6fc314107adb77436091a533259d0ac0

            SHA512

            1d059b2f5a577dc658fcf430965b685f31768a5a98c39d1fd4b7ab881632887765aff2d8fa7d3c3044628063fae4c70e8c5dd88844654af02e47e217751a70c7

          • /data/data/com.Multigold.CunJinBao/files/td_database1SaaS/1703354797329_4236

            Filesize

            2KB

            MD5

            d8d1fc690ed6aaf07d6af87dec59161a

            SHA1

            544525b82dfcdae8247bb3ddc06387a7d3bc2eee

            SHA256

            b4a93f000e451e10ae1e762f03b0ead4aa75bff9b6854bbc3362e927bdcb25b8

            SHA512

            6d27ff8ff4d9c9a1953cf968583873bf65f8fab13ea3fa802eede3970ac6fdc3691d3914e24e74ade1747151cd4197fe7f2121e62d6df9d4402c3930c0cf6220

          • /data/data/com.Multigold.CunJinBao/files/td_database1SaaS/1703354807284_4512

            Filesize

            2KB

            MD5

            84eec8df03ffcf4e1c1d51043c583ea4

            SHA1

            62c7f0149eac025acb659699beb7633d0b559069

            SHA256

            00a133dd8a0f28aa01fd89a99ebf022bf886f777480181338570a5c7b8963951

            SHA512

            e228dbf388d08085b41dafa3b5a26df2dc13f31dcc5a9d32fd0b6b865a32dd16d193f262ba0f2e3651e111fdd0c0238467dd2d539f315fa492ac21f68cc5e22d

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354792567_4236

            Filesize

            2KB

            MD5

            5fee4cbab03b4abf7f86afb9190eb944

            SHA1

            843603c43cfe40b771225df7f5157dd528f091a3

            SHA256

            170150a6b1dab9b80f1f5a8163f45889d95d2f3a9907f26fe471bca1536dc9ea

            SHA512

            b83ad81d17fe7f0e0b79ab0e1df39f5d7b81095e93df6f00ddfa1a7ef6ef5ff6817b818b1735710785575d4ffee059495adcbad0a3c6d9a4ecfb9055e8245973

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354793413_4236

            Filesize

            3KB

            MD5

            aea8605861db1bc53db9f97f80d865c5

            SHA1

            0f661ce9cfac952935f6c450f488044f4f7e6f40

            SHA256

            483083e579238646bf8715b7ba83c729f23944177fc348b88ea0916c181e5a8c

            SHA512

            1ac70571942f34d98100356236a3df272df3ff72da7c0bdfb3ccfb3c3d312088126412f9574250d32f33a45ca63c39f1e30fa8b2bb5746a68551c53a6a4c2bd6

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354797125_4236

            Filesize

            2KB

            MD5

            a89221a7fedc09d1a6e552dc5c76dba9

            SHA1

            1139d87de68698cdd571cd4cd9699252575f117d

            SHA256

            329e016ed4f7e373880feb1cf8e1977747cd33284a3eb4e6726b89aa1375f720

            SHA512

            61be5aa0fa9b2ecef0de9ddfb8f10714f17dc711326a98227c75f0db2e1020b3474a78ddd23d41cc0135a86c7f0dd010727ba067a161d43247c98d9fa75588fd

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354806942_4512

            Filesize

            2KB

            MD5

            01467e3f1c97016a1b9e0b89e0caa05d

            SHA1

            e462806b4b5daedd4c2ce3f37bc31ece731affb7

            SHA256

            e4657ecd9a4812bb9fffd5d25005786efa1e22cd41c0a034eaedb15596c7b905

            SHA512

            20a17039003f6eae12282ab6281c16c177b83584949c98447ec93e9ca39d3c4025fa45f03255b0d46ed5fe7562d4647c2efa52f360ff4f9a5fefd1eea2aeeb4d

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354807063_4512

            Filesize

            3KB

            MD5

            da004e4df9f4afe9252cd9f1b8452913

            SHA1

            e4d11ae7f98a74ed7f4f117a2ab378df0f336514

            SHA256

            082fe200da7cb40b910ea123b7f16969c3bcf14bc221cd8bbcb325d37f441511

            SHA512

            fd5680a526bcecd872b935a1c54465d3bb232c9925bbcd9bdc3e20e0276c0ffb9affad9a56c5b5081ee9f1ca6226840b5908d63a7756d9195ee89c56a051ffa9

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354807166_4512

            Filesize

            3KB

            MD5

            e9b86982dcb506ee42e325c89571940d

            SHA1

            38505cb9c9f7ecf565523899bbaa07da1d11e7d3

            SHA256

            2a94d819d59a8c8f6335da6f24edbc100bc7d41946c6bf36cdbb9e2bde66dd19

            SHA512

            ece7ca922bb507475f1bae26f8e8a87af509f73c52dfafdc39785da1a878c2eba098f58d3851ca6806c69dffcbf9dfe44bf1cb75e049be3d4f67cfdee9a88c82

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354841953_4236

            Filesize

            4KB

            MD5

            425b5c22dd8556e56ea6e5367e35d872

            SHA1

            d6f3e1b4f14b545f8d2cb2addcb50d4ec38f716e

            SHA256

            70ab167e8a50935c8e6c5dbc0582676374f5cd460b16c0c1bb417a1415820628

            SHA512

            2e738f51cfebd30fb1f232b0755124fb5ae3cb1fda8510e3b81fb95347e3ae2919716d225edf0100515c8afb0ce558afe9156f5478d36e98826cc79e112888cb

          • /data/data/com.Multigold.CunJinBao/files/td_database2SaaS/1703354860188_4512

            Filesize

            4KB

            MD5

            6e5999cf0257fe6b88fad85c239405f8

            SHA1

            548c33da9b64cd4e40b4e10358f9d3825415b306

            SHA256

            8f74184f6ff9b9cd0a7c6a540a2a7391c832bd713ade770f810704efeed09e59

            SHA512

            f1ac20c0743a572ff46b46c3ebcf9c0de632b5e9ddcef18d9c26b3a4b0a06fcb27014535bef5e6eee4003ff8c0cbabaa74fdcf106ea3af7c68badfb16ed895e9

          • /data/data/com.Multigold.CunJinBao/files/umeng_it.cache

            Filesize

            415B

            MD5

            4c679f15b49eba4f523c249ce1d0e955

            SHA1

            499bb81985cec9cc2a1b225ef4c4a33a9c74c448

            SHA256

            4babf758a41dbc88249e7e69f1e1bfc729ac4118ae2c1bc410104f906a33c94d

            SHA512

            bacfa21eb1dcb80d07fa594da12f9c87d2a951d162921419814a1965c7e5fa308e1aa1e225f54022eb40db569ad9fb948e10b7a260df91147f663da0b7cf8e7d

          • /storage/emulated/0/.tcookieid

            Filesize

            33B

            MD5

            afa514697ab5609b889530526b239479

            SHA1

            23323929d6f57fc965b751207bb3c5d2c666d691

            SHA256

            0ff4d6eb9fd2feaf43e971a12cb589d7c1460f530b8449638c44c84e2d87af51

            SHA512

            26ed393fff5e037448c6c0b3361fd3e1354e344742050aa75592612f576837fa4ce1f90b3809986d14781751bf8c388ade31e6de2906f961c64999ffc4d2ed43