49da71be8dd4a3cd3e3c9bf7bb06bcee94eb408e7ac88e386969ffb2b824b0ba

Analysis

max time kernel
2550444s
max time network
156s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

49da71be8dd4a3cd3e3c9bf7bb06bcee94eb408e7ac88e386969ffb2b824b0ba.apk
Size

16.7MB
MD5

fa01f5a83797076ecd87d6e8c92278e1
SHA1

5027c506a3afcbd4ca7d54252a36e0c5c7a3ae76
SHA256

49da71be8dd4a3cd3e3c9bf7bb06bcee94eb408e7ac88e386969ffb2b824b0ba
SHA512

a7c2d31dd4d1aad25f92b114b19737d44be4bcf6c11dd117997a44b5f070699fd306af8f8eaafb781e1c817952f267470faa512a235eac9778d70a8917841911
SSDEEP

393216:UQmGHQ+ibVd+e37HFzHZnU+51cmE9dl2aG4a8Umr447AVm:UKHjipBpZn751cnPG4DHH

Score

7^/10

Malware Config

Signatures

Checks Android system properties for emulator presence. 7 IoCs

description	ioc	Process
Accessed system property	key: ro.hardware	com.xiangzhan.rhsr
Accessed system property	key: ro.product.device	com.xiangzhan.rhsr
Accessed system property	key: ro.product.model	com.xiangzhan.rhsr
Accessed system property	key: ro.product.name	com.xiangzhan.rhsr
Accessed system property	key: ro.serialno	com.xiangzhan.rhsr
Accessed system property	key: ro.bootloader	com.xiangzhan.rhsr
Accessed system property	key: ro.bootmode	com.xiangzhan.rhsr

Checks Qemu related system properties. 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

description	ioc	Process
Accessed system property	key: init.svc.qemud	com.xiangzhan.rhsr
Accessed system property	key: init.svc.qemu-props	com.xiangzhan.rhsr
Accessed system property	key: qemu.hw.mainkeys	com.xiangzhan.rhsr
Accessed system property	key: qemu.sf.fake_camera	com.xiangzhan.rhsr
Accessed system property	key: ro.kernel.android.qemud	com.xiangzhan.rhsr
Accessed system property	key: ro.kernel.qemu.gles	com.xiangzhan.rhsr
Accessed system property	key: ro.kernel.qemu	com.xiangzhan.rhsr

Loads dropped Dex/Jar 9 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex	4231	com.xiangzhan.rhsr
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex!classes2.dex	4231	com.xiangzhan.rhsr
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex	4231	com.xiangzhan.rhsr
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex	4281	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.xiangzhan.rhsr/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex	4231	com.xiangzhan.rhsr
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex	4481	com.xiangzhan.rhsr:channel
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex!classes2.dex	4481	com.xiangzhan.rhsr:channel
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex	4481	com.xiangzhan.rhsr:channel
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex	4481	com.xiangzhan.rhsr:channel

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xiangzhan.rhsr
Framework API call	javax.crypto.Cipher.doFinal	com.xiangzhan.rhsr:channel

com.xiangzhan.rhsr
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4231
- chmod 755 /data/data/com.xiangzhan.rhsr/.jiagu/libjiagu.so
  2⤵
  PID:4258
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.xiangzhan.rhsr/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4281
- ps daemonsu
  2⤵
  PID:4612
- ps | grep su
  2⤵
  PID:4630

com.xiangzhan.rhsr:channel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4481
- /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex --dex-file=/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/com.xiangzhan.rhsr/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
  2⤵
  PID:4647

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xiangzhan.rhsr/.jiagu/.jgck

Filesize
4B

MD5
0fd11a97b2d96a89578cc119608952f4

SHA1
3ca12b9b41da01a340ac1bf381e7934a2d86ba8a

SHA256
9b12d331f027aeaad80456800298a60b2e4993e72ec94a291caba0646fac12a3

SHA512
7bf24111b20bcba848a1820a6863d1e308e915826d520a93382ab0915235dc686be91d52a8ab953982331ebf6415c3a870b86765493209f35a3d8ecd617ce4d4

Download Submit
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex

Filesize
6.1MB

MD5
34e622a395658f38a145b81bf08501e2

SHA1
ced302ad24d7b8a79aac716d476bfc954771eb0d

SHA256
edad2a905b5d23934926a4dbd3f4d6d0a52818a8375ba94685d98e9957048869

SHA512
2f2f3a6a0c94f502e1665b949fc1907b37ef7bc767361e85c4262416a584b9ca70f8c17f7dc2ee0e9605b08b2dc148cbd9413fe992b74cc84905c26c8a26784d

Download Submit
/data/data/com.xiangzhan.rhsr/.jiagu/classes.dex!classes2.dex

Filesize
4.1MB

MD5
6d8321b84cc542128e37305d024d9adb

SHA1
f687e2ff68a17b9f8488d35e6f726eab33a7165a

SHA256
aa120511c1d3a47ec051b48780dab4c610af4e9ae81654db1d1e323f7156be3c

SHA512
bb25e2f3ce48bf08006db50c490b0a0d76f693b5c42e4e58ab54168129370ad6e8adad5c5264353d77a5f1ec2563f1c04851736bc520d70a7b11b1ae531b1d92

Download Submit
/data/data/com.xiangzhan.rhsr/.jiagu/libjiagu.so

Filesize
105KB

MD5
200f8e7f3fe82f0f22e7c342535c09ae

SHA1
7b1da7f1a10510b58f55c2413877d241bf1ae3a6

SHA256
fb34052f250feebe54311361cbadba89ceeb88d251d4564f2aabe104b3f713af

SHA512
d25a336907e87a61e3e5a057dd9f51f4c954049223270fa426f40037f4d6d1bf99c8bc2738d87db220db9fbb6eb8a93d5f1571dc2609be818901b99a6b7a965e

Download Submit
/data/data/com.xiangzhan.rhsr/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.xiangzhan.rhsr/databases/MessageStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.xiangzhan.rhsr/databases/MessageStore.db-journal

Filesize
512B

MD5
fc07102ca8dca30c6079b035436f6616

SHA1
1fc7aed3ef68de4e11eee8b79f0e0c026cfae0bc

SHA256
eae6addfa8b668c22fba5d83c66f74ec4f348d61b8b9d14b88c19c49ab79345e

SHA512
094ea8d8690d5d9455bf0d854d25220e1034b463cb9afddad54f4f91a671fbf713631eaaebb3df54ce4246b9b26362080b08bad2476c45bb8b6704b738a425db

Download Submit
/data/data/com.xiangzhan.rhsr/databases/MessageStore.db-wal

Filesize
16KB

MD5
8a5a9dbaf50d993e6f81f4b1ccbcfcd7

SHA1
b3366531b1d6b22e4e78bbc1ad975752f36b1b8a

SHA256
15fe31a890223feae84367801ae0e6fa99adc836148e891887a13bb448fea8ce

SHA512
45218bada58971639705a4dc671d84504b306fe9457c29a9b0fa5b502d386e51090807730a58e029980d5f283ec3ff41fd449529ee59e2a24fc46ac997329eac

Download Submit
/data/data/com.xiangzhan.rhsr/databases/accs.db-journal

Filesize
512B

MD5
2a7b3f7517c66c477a343d5827d6b2ef

SHA1
f1209dcc52709d13416ba84f367130fc0233b131

SHA256
d9a41f3c9f0bd5a77037efb06273e47e27fcff1cb9d5330e15c5675ca8efc9ed

SHA512
d050e9f4ed8b6e3d8d8a62bdbc5d9d4f8c3499e624b36ab2d56aa384981e56c67796f98c2666aba226f8b86241a43a89cbf1faeef781cd1f9e7ad68bc4b9893d

Download Submit
/data/data/com.xiangzhan.rhsr/databases/accs.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.xiangzhan.rhsr/databases/accs.db-wal

Filesize
32KB

MD5
d7a1ace15c193d3645f81184cc6437f5

SHA1
66acd4943b5e846149d2e5a1d1e9577beb23c10c

SHA256
da360bf3f86d41436c5d85a97cce0bfcfb8ada23679dc0659cfb262597652090

SHA512
5ff0b28d38f408dde8b47b7fba5a1399f40c38dddf5a3b6bc03d73741493e3764d7f8c2f221b3bd0de75d6e594499cf9d19714786ce0b05550ec5a322eacb443

Download Submit
/data/data/com.xiangzhan.rhsr/databases/message_accs_db-journal

Filesize
4KB

MD5
1c1d4e38c89e1241d799b2e35c78ca49

SHA1
b85a1a480b2a316c2a46cf87575e1a39e32d6be6

SHA256
28974bcbc7af837759117df2f56927dcda7ebb11767e7a0dcd7faf839331a867

SHA512
0721fbfbaff032682c5cd16150d01d898b435285f1b18f545228aef044fb2f5f251839a620b2c035557038f042340bb57e0877b51acd8d7897e50938273c196b

Download Submit
/data/data/com.xiangzhan.rhsr/databases/message_accs_db-wal

Filesize
48KB

MD5
c106bc967c6717cace50e767955d4ce9

SHA1
469fcef25ab835b8ded2268748934b45b57074a9

SHA256
9702d0c8fa0f1bd215f6ff665dc3e88c518dcab32f516b6a2239f30d55509ead

SHA512
2dfe5f433608555be9da1138249da3ebcd0b744086f5b69f51b9c88b1dfdf7c6016fc27461a72801f4b64f5571e0ca3dacf4b6a4f3bcecfd825f1f2e5dfc46e2

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db

Filesize
32KB

MD5
88f0db203f8dfae39134db737c0caa15

SHA1
809bb39e250f1e4a44590531f397502c19844481

SHA256
e592798428bb9a383a374d36c999ba016525bc47c3dcd13c59e29ef51a2b138d

SHA512
b7aa2f843c120afc21a44c7bf15b67e6e8609cfb18945a9854eec1062db142a7154b1c59ccfee2418d6650dbc898e940b16e5f234e2ee065767506f5b39cf6cb

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db

Filesize
16KB

MD5
a6060d2c1abf8991959ec3426a83de46

SHA1
f6a618950c13acb7900f7495eeb40c0900247b17

SHA256
49159e65ca87537a99d97103be730fb873233c3cf45d872e96322204b3814e3a

SHA512
f0090c381a43f16d4801a0ec9ee84e724c8277412ac3e24386a497c7429a77a818eed65dbf99ea53777a0a478eff950febfa2e2baa05c63f425dbd27ca082413

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db-journal

Filesize
512B

MD5
ac4af7d22ebd65209c30d28868ed6c08

SHA1
5f6a9b6f2fcb3ce3e3a956a1695b5679c4882f72

SHA256
de6741c04e55c5968b4d90c790a9b842ed5e6dd32832f7da43ef2fdeeea7c196

SHA512
21afbcb996535b7e3e7731286d01ae858ee624e6f9dfbde564b17090cfc684d47f4153d58dd5321dd56b627fd328040d2ba53d488bc653e5134d312738833aa5

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db-wal

Filesize
56KB

MD5
6ba75ec27404487fe30c37db854e70da

SHA1
ceaae5e5ecd6bd5ad7802ae04703bf4e80f0908d

SHA256
f1a082b666a0a3184dbfb67b4be50243efe3c4baf03ec1930095153aecca704f

SHA512
c564499f95aabff289d0f77d7fbbeb3f24ef48608cfae6648ea47005f3b7d74bff2afeaabe8b275ac72153f06a5b9a49f451d6fe5224d6dd2cea28470a26469f

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db-wal

Filesize
4KB

MD5
072e64eb9c2bad411280940d131df6b8

SHA1
9c4532ce02775428558fc1cde0524596931aa175

SHA256
e14e440b71ea73a7ff04e7b35b62a82d4e7cdfe789ebd6555369242939d5758f

SHA512
f16d1cf5afd364b6adfeec430ddc8e6895b5bf11f00a2eee16c820bd14a7e74460ec6722b7ce679eaee2b1e6120274cfbeedb380477568a88b2811edbcd821b2

Download Submit
/data/data/com.xiangzhan.rhsr/databases/ua.db-wal

Filesize
4KB

MD5
34682997083559681280235e826c2e3f

SHA1
e0229bc8475147f38d9ef712f0deac97809c3b73

SHA256
a2ed233f381d4e1041a4d005ada161143381de40b3d8493a0852cbfe10b9ae8d

SHA512
a61c4d8c1003b85112f72226dfae5d754fd4bf3ce1147dd07487ae018013be29a9e5ade362d139f9a5738b4c40fe8c0ff2f0be52896bbd8b9775b81e00feef52

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jglogs/.jg.ac

Filesize
32B

MD5
ef754b276178c50c321f337291ec5aa2

SHA1
bfb2cc3d1624404989c44e39d269ea9fe05633cd

SHA256
362463c5c25783ec5e3bd37e2fe4459a73ec4e4b835809bedde4dc7574d9c28d

SHA512
34508dbcde1351b7f56fb152510572c37503b3f1b084dfc23a2133b874fb10ced613a52df31f3b6fc82ae904ce7806c90e73af3f260ac308478eee36249bf826

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jglogs/.jg.di

Filesize
340B

MD5
9101bdb72c68f65f452c388cb816750e

SHA1
4695d8ee1041aff690b0d71f22d902a089fbbc3a

SHA256
a595dc160a2e0987ab40fe9ca96a2b12236af735ba5df115388fd748e2e745d4

SHA512
2b6b4756e427da1bed548eedc000657e82d49fe61368c3cb547861eeef21f315b8609390f416841748aa9dc4f839e56128602ab29c49e50e0f6543cff2ebc812

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jglogs/.jg.di

Filesize
340B

MD5
e69d5a8cc66c76499aac95241cae2db5

SHA1
31e11b9d5f15bd19fe5098f7d5b9fe0427f29dfc

SHA256
6892cec11b000fe5f4b7bb33def68ab5ad23c5a7e1b8401a3ec68497351c35ce

SHA512
1a539ef400c9fb04d4d1a050f348dc606c2c5d5756e054b0a3d4b666c85bd27fb2772642e1da59e756a421df88904b01933dcaf92918c980289bb6ce290fd765

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jglogs/.jg.ic

Filesize
32B

MD5
3f7847cd6a2470f7d5690b666273ffa9

SHA1
286dbd02d06ada80e6b14a687cb90e4948b6f6d8

SHA256
ed584583f5c42cbd5a58bc18a68ff05655d72fdf4de19a87152fbdcc516ab95a

SHA512
08257a82db535680517b64307794690ec32f8ed2c8709e59de8414939341df5426a4e7f2c731c2e633fcda52e5ffbad2badddb0e589ed25408284ecc7ed0fbc9

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jglogs/.jg.ri

Filesize
314B

MD5
899e6999a0bae160b512bdd3c9e965f9

SHA1
a735fb1090186af07dbb587ec7105f5250a9bba2

SHA256
31b6beb4264a7cc7558dd6e4dde23b65d064d07e1f6b028af180c82396ddcb3c

SHA512
924b1c7fb4c2ca961a30e0123b9a600653d29363f6aa46190efe87a08134c1790a40ee0c8ee5982e0b159bbc49889adb92dee9bc7d59084f712cc0f2d19dd41d

Download Submit
/data/data/com.xiangzhan.rhsr/files/.jiagu.lock

Filesize
27B

MD5
8268ca1a98d45f41c719f4819459f93a

SHA1
ea5ec6b23cd901cf54bee1aac7207f0f861c8ba1

SHA256
ea1ce07b93258b15c6804bacdb9837c337693520cecc291abee141b9f6814b92

SHA512
6fb86a470138e6b8c5078e8dbd53d06a60ccd70786f6fd1c5dc055f852beda3c6c985f9c3658462b575af4bb6c2d4456b49868e5a14e3a6def68fbddd6976771

Download Submit
/data/data/com.xiangzhan.rhsr/files/.um/um_cache_1703357492851.env

Filesize
1KB

MD5
97174499bdec38a26406bfe9bd366f29

SHA1
b0bc4c700670eff59f6591593292fe5953421f04

SHA256
520ab096cbad0634a0ef4d871615b4153662cc060e475a2dce9f1700d86fe8b4

SHA512
b5771da61e9ec25ae9c5e799e9dfe2bb6fb16ea0be03f55924667cafe6544ab067f9464f89ebaeffb7b9ef3d5de7251c6ccab7e753e656ba699cea8192bdbdcc

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/page.phtml

Filesize
2KB

MD5
e7883f66b6a9cdad763096c889a8570e

SHA1
c95dfc1a17793d55b2b1aea2fd4fed14dcae4df8

SHA256
01234820b6a02f1b77649c4619623b3566b135924f3e171e67b1370da27356ea

SHA512
268375136044435d5fd32baba78fd89bece63dbdd2436af8a0b2747227dd05033673f628ddded1763569004c5dd310d8ae144ff988fec82b8b08c653413e06f6

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/css/common.css

Filesize
79KB

MD5
7661679ad7d6e54897748b9166a7af32

SHA1
9360644e4dbc9a1da8426d443389c8da6eb4eb15

SHA256
8162d6daae7fa18c3cd745b74758898d4f1adb988dc62bc4f13760cdcc1e82df

SHA512
60d4daeb7f9c04bb5b3ee0854792fe6b2e973e1a76ff5d5a31785186a731e25e41d578abf35cbe13b25487f5d82997f3ebc7f60970bd820fcfb9fdb7ed651850

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/css/dialog.css

Filesize
18KB

MD5
5297553cddf05eab162c4ab5ad280248

SHA1
4d21063c7126d9d9c3993525794cb7c05295540e

SHA256
6ebe6b38ddc6913cab808f85702da6cb80ceaef7c464c5a2de2b4214bb2ec5bb

SHA512
ed556e3703d7fbc64d575bdc649d59a95fb7358e6d20b5907ac134b9e15fa59693e34e8084ed7c5d9f984a36c90a6bf1cf89f446cb0188e2292d910c6b855ced

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/videojs/video.js

Filesize
11KB

MD5
b08a6de4035e42958c543faabd02ca4d

SHA1
6efb0489a640850d87264b895ad96c3373d03dd5

SHA256
db31b036f7169a87a4597a3430cb1996bc4837d9e124f3bc1bfe8895e7fcf723

SHA512
4cdd97350cf8032463a92aa4b57409217ae5848049a5ced51a680bd9f9020e51439326392016890f5f0d21f201bb15377f2ad07cc34af39c1e564c0a08bd338b

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/audio/message.mp3

Filesize
36KB

MD5
1e3f66074f516f77569fd5106ccea126

SHA1
828770f5e43159137038067a07c4375fe4a01a47

SHA256
ac4847bbedc5b3c3119e9210ce054f27058fb88ff9b193846da90504c25de056

SHA512
8d2f94e032157d601da47fc0baa141e98e7fcf7adcbadad6b876043be25f03c0c5082c6706868b1336e16195bdbcde7f4caf85d41bd5a3c5b73ad665debed600

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/audio/message.wav

Filesize
52KB

MD5
8317c417a5b6201606be58b68859d334

SHA1
c3fd8dcf309510070bfaaa85ecf29c00c160113e

SHA256
60d724f9179c34d98ef86e756fa73c2eb6488ee9d14190088a9bb13eacec48a4

SHA512
809180b0da6bc4bb29a27ca54b3487ec29fb56c5c0a88eadd1cc2278fb3b2a2931d37188c4b945d07f728b11bc78840972805010a756d760d8779a5213fd0e24

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/audio/online.mp3

Filesize
16KB

MD5
b6812ad0e11791fcde7c3e42d8dc3e70

SHA1
6eaf324990100bd1259aae4544b4f372e91d17e9

SHA256
a7ac64c4b1d1c41dadbbdada7d10ac5c7cd19005e9bc1615690324e38dcd9466

SHA512
6f012408effbd64fd79bfd727942fa0b5545203156d9eea997b686b6daf4256c5ecfb1c9e21a65648dfc0ad56cf5e1d41d3794d308894288fa331df348732c55

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/audio/online.wav

Filesize
29KB

MD5
5fefbdef165286f16e2a9c06436185c8

SHA1
56e64367f3154af0c9e75ae846176b509913bc25

SHA256
8f232f882a8bfc65d100d3ab01127cbe1ac2b6ab4980fd37e122ea0b5c53c0c7

SHA512
64229b65f818c56bc7a0dc1f3e49c55d37fafadb7593116f14c7b51f820780f15770e2f59bc4956e2752d496879c9533f3ec7dc28d04db9ea489d0763f47d5bb

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/css/chat.css

Filesize
14KB

MD5
0c526ce229cf27a63263ef4762a2bdf1

SHA1
cecf12b5279506cdd0c55dfb7579debf1f5f9f02

SHA256
426684be1df39f5a7374bee39cc710da68a1729e0fde42cb4adc45bfaea684f5

SHA512
7788e514a872a898139bb78ef1cdf05ec0b1322ad764a9027528882b7b39e22bb7e4b9e70b1832e24808355c0a04deb4286dfce6c2bac944a3f2ecd4b660c95e

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/css/xzCustom.css

Filesize
5KB

MD5
810967a761888a8d5d9893dc8328ae45

SHA1
ab04140fb93f76b37d901ac0e840558d7c7e46a8

SHA256
9138eeb315b4ea5e58f9f3165200e5a612a294977fd5c5ac7fc13d80f416d0dd

SHA512
4d56b2d8bd8db7529df8d47186eb5efce6c1c2f3c7f1f59dab856cffed5f1803781b5d30ec6cd728481ddad89e0d238ee17f1259549a2dfb0cf2b46561eb3e94

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/customerServices.js

Filesize
3KB

MD5
df20042324e927b9190326cea28f2ca0

SHA1
c35e93e735ef4b0e80df8971520ef35c208a6b3e

SHA256
c4521cd7d9294dbf4e9f282b96e674c9687829e23a38ab7f459b706eded81a74

SHA512
e56f778446f186738b1b5c502bcbd865ddcac2246a37ea2fd88a1e8a5ca4f04ac8fcbdb313b8ab55f39f478b66f3af7c4c16e8124b4e70e70fac44e33e0e59f9

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/fileMsg.js

Filesize
773B

MD5
254be3d94e4b227ac222cfe33c4e3049

SHA1
f33ca931c81789b6b79138074ce46a0823bf4065

SHA256
b94b3b15dd855ed8539f92554e7746b648de63b1f9ee461fb2508136da226381

SHA512
4eba8cd6ff47f719d939bab8db83b1b4038d1816b7e8f3b85fa3205b5ac52333ce17a785fa1af361a31a449ab012902c6b5b9773498e17ac80db1277be43006b

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/xzAppcs.js

Filesize
10KB

MD5
e650eb544e10440eeef452ac8bfcfbfe

SHA1
e8eb7b51214c18933d782ae06f464cac25fb506c

SHA256
5bb9a23e9b4269ebe002b6cd6a888122f2967d75a0a2fa86040162f4545fc3a5

SHA512
fdc864cc98151eec03d7eff841bc1c2c163493b94af87b466c119886359505a50871cfce5db0286a2369882dbe566da7c72e96c3166c29cfa4984ceb97cec2f9

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/xzCustom.js

Filesize
12KB

MD5
f39b8559020bcf6ee2e023678f751392

SHA1
c1ce946474a72f872e74755c4f60c83d7dfd9cf6

SHA256
92b73c012ca9bdcc8d24c73d734f78276c80813e13b295da3658f73194c3788b

SHA512
9083710724424f824205cf719c68e2d7fc3ff93c00b4928862161982fae93bb9cc30d85d5b47ca142628ac13874c2986b28db1803826565c9fccc8feef37b7e4

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/xzMessage.js

Filesize
23KB

MD5
8b031e8c004fe3e1409bd11eecd62348

SHA1
a8308e2552e124a73dd7ca3410d97012131d9b9b

SHA256
377f553057aa9da1f92f215fb72861c91704945dbfd2deef01d38b0d79581449

SHA512
7bac9c16b05095f300b663c9918b78d9ce832613cf43cdcd7bc3a9cd0a29b23b664ad38307c35959b1a5dc0817f3fdb3a6d1ea948564321c6ad969d3a3f5b3fe

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/plugins/xzcs/js/xzServices.js

Filesize
24KB

MD5
4639bf92ecbe58357a37e27a4ebb58e1

SHA1
bc0e93cc37876a62d3a9724042e67d2f7406a941

SHA256
920169502182e6f144c3824e49cc1c1b03fffce7d6aa0df862d63b52f6ff165f

SHA512
157ec16fbaeac9930236d41fc7cc4f35d44cd32ecb7759623df79003f91781f0306cedff7e4a674bde4bf19cfd0ae854d7bfe152378407b308eaf3fd5e959fc5

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/baise1/css/style.css

Filesize
38KB

MD5
3788174703a46f4a7c20783fd368d32f

SHA1
8d17caaaf3a4b3315a78fc1cb724e7d91e356987

SHA256
dc260feccd94e4a0ad8a3ae81f461787cdf737196e7bf67d868e1a836a5f0d00

SHA512
4ed5abae9ab4c2d1a590607488876bd7c441faf222666339da39d6c62d16933cd9ce35bd1ad04ff41dfc5704938ec8e80e35ee517f017cf3d436049c84eb2e6b

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/baise1/css/style.css.map

Filesize
25KB

MD5
135304324052d695880bfcc0fa2d7c5f

SHA1
f104adceeb99a9f15883f7e54f17ec8a08646cfd

SHA256
2885bf3edd3b982195d125b9b42bb77353e719d795935b525c1a1f12f297b8c6

SHA512
4911643a0085a1eabf80585691bad3e856c3f1a1dcec3e5c929697e1be3a564cbf2c737f3380b63dc2a5b4b4b3fafed006c7f54817625705ba9dc719667b8921

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/baise1/css/style.scss

Filesize
31KB

MD5
bbb2c9ead360ceb1399cb635d8ebbad4

SHA1
417ea10afb12b696edde8a5f6cf6a6863d687913

SHA256
5930c912c5cb7efaa4a591837bc9613a779537fea52458f73528c4f5b6fb0c4a

SHA512
5cdaa1dd539889144ce58009cdc230675ad714667a5ea830955283ce1a750016573a06a7df857bbdcba2c231cc1996bc6df9c74bc374579a84eef93d390cc1dd

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/grey/css/style.css

Filesize
46KB

MD5
d43e5a0259e76777267edfb566155990

SHA1
b011a9184fcfdfd19a0f46476c54131351dc1354

SHA256
9d2990049b8479b9759fd1137091fd3830d8fcf76cd90db81ab0674c05a83c0f

SHA512
bc93d385e9c4d312a24458596f1ac052fe9fb3bd11be4469db27bdafac3ac1ef633de103024c089e66f59e5e5d7787a8be5f12bd477383050f9c6d9f73f168fa

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/grey/css/style.css.map

Filesize
30KB

MD5
65a04567dc04c22cf7b1ff0c35c96511

SHA1
3ca9c5808468989dbf3824dab53a8c275008787d

SHA256
f220d980d1a8daf47ab0e552e6ddbd8cb56fea0ba97c403206fc2042acf6a45b

SHA512
a753ed02fa118600b4929c928f66cbfad8b23f51513904f33cbec80cd1920785a2e33f3791d6fb4464cf3ec540816d869eb1b1f60e1eefa2b82e55744d5b1c99

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/grey/css/style.scss

Filesize
38KB

MD5
56ef2c3ba3fa93f03639b1b8000f5042

SHA1
dd0af45527692826b0108576f8efa4b583602585

SHA256
7cddfc9d1162c9b2750252597edc87ae563b2900ca8487e6871bbc29fce4cde3

SHA512
9804173a2cc199ec9b814443e614f5854abcda59f75f0fd683025f9d456cf94e454e738f4b83f7ee4a87b5b4fda4472659493d357dadf6516d77200ec36a692c

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/orange/css/style.css

Filesize
46KB

MD5
d3c4637e6c82c902ddc895bdfd23ac58

SHA1
0b86aabc3148b2ccb62022c15a7bebc909529b94

SHA256
b6e5eb785590c1a6afb95cfe45abd1e653d2199d7cdf90fe9f54f1b7c8e89a08

SHA512
364edb783e4dc1e5ddc5d7f9c48b00627b6d36aa7cdde0ecbae35961cff92a04b308a84807aa6ea067067e2a101d1acdbfef1b6af3135ee83faabc505f8ccfc7

Download Submit
/data/data/com.xiangzhan.rhsr/files/manifest/static/skins/orange/css/style.scss

Filesize
28KB

MD5
e261bf48a6e3f5ea2c397a76a79e71f9

SHA1
f7f22ca954a118efa3c580fd046d745eb098f4a0

SHA256
155870909ae99c1c556fd51dd249e8edc49dd7292235bb36fc0a441447031bcd

SHA512
50a0992ba84804644f894ca065dd5492fd151eafa050b6281ff59c5cd8430354b6a29171de056e07db77ed8245ac6893b86f84d90790a4c9288aeec6f22d76b3

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
489be6f10dd9fa67c9062cea941219ef

SHA1
552e1f468a36e2f534b4b0042069bd2da93e5a9c

SHA256
98c67903a0427d9da7a01c8254e5aca96b546452321f47722d57ec94381e755e

SHA512
f40e3b3df1ec5e03822479ac9f98c363f73e65284d85fc864aa1ffe1dde12433c4861bd95a609abbfd0c23b5a75dc55a05f42ed762983a1d085c794d5e548d59

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
73816addd38aa84722d83dce129e2f6f

SHA1
f83daa0cbac42165927a12ad8b8c1d46ae3b0be1

SHA256
6367f1a954b2b30ad01d17ddb2cd3ed5b948c2b58dece075419c716d0fb98eb0

SHA512
b52853c03b5a40d0b3594da555726a88810f15f008993c041dc8d5d0c5630e38c2a8eea566e75cc43a3b42f8cd99aad937b7ab868cc943fb630d099fec7774d6

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
d0b58ae2d335aad3b94d7d1ea49ab748

SHA1
aa7625149af65e749ef717d64d80eb7f98195ee3

SHA256
44bc94ce81ba96503cf7b21adbd07c5e75663f90a501ea1802c4e62ff8bbb51c

SHA512
68e113e88c3191db29f56de986a29a83b787508fb156f519a7db1099080e7d0c9c8693ec674ae3d36c85c50de65843d9f5e8b5a45eeab98acc57f299609b3648

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
314B

MD5
e1e5f972f02ebd7ef6d0ad4aefe1236f

SHA1
3e681ec615a0cf4e359fc1b710eee685d4e0b97f

SHA256
03a28fa7aa42916cc0589907ba96071dd1c72182140fa1be96c31e630ba874da

SHA512
9852a5484fa9f7725a3e0460b16321c70b41e50dcc248a8b2f76918f5ef5ebe400eb8752d6e6cea8f90165cb37eddb62d974f66a98b9f1652b9969cccf807c14

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
fcb7fc04f005de9748dc1ed47f03d81a

SHA1
2e5247da6f79f2182afdf918ee99f4233c7fe62a

SHA256
3790699f7583015fcdfe8450f42db8a90bc688e55ba687c837f24b219b4249cb

SHA512
ac5d629cf9763dc901982251ade64e8cee4c0d0952f4c3d4e295200d99ef9916efb7c93b018478b4652ce849586fef4d674ed5441d6275ea152329720173123e

Download Submit
/storage/emulated/0/Android/data/com.xiangzhan.rhsr/files/tnetlogs/inapp_20231223.log

Filesize
547B

MD5
9a94e7171f9d9c0bdfb1ea3e60ff4f31

SHA1
0801acc452a6144231ca5fe39fcc551c7cbd31fd

SHA256
dd7df3864b4e578f182ba9bd1130381ce0c22c840a91a79aeadedbd3ab7e8e62

SHA512
2982ddfddc28e3dce9293525a6342eacf3011e2343f56658ca603efd7d43f58780c0be32bf01e65c770717a8d8672b51ed3949e8d319f68c46f66cb203c8d8d3

Download Submit
/storage/emulated/0/Android/data/com.xiangzhan.rhsr/files/tnetlogs/inapp_20231223.log

Filesize
10KB

MD5
6d6ecd195655c458cdd359b9f7edfe85

SHA1
15e5fff9b49bdfe3a1963bd8201b4b38724e1330

SHA256
a119daa192667356e3656f11914fc70f821c877a9c8619da0bf303083cb8c44c

SHA512
871e8ff0d69fdfb80a8ae74a2b482f5fee9ef1951989f9ada4c2a64924aab5770417b8cfed4828b4d6be74612475bc3e05abd8c3b22860d5d97d1c9b51c0418a

Download Submit