Analysis

  • max time kernel
    2632455s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:22

General

  • Target

    65c2030ab84d04b37733b9cf302baab70c495b5b404bd0857e24264715471953.apk

  • Size

    24.7MB

  • MD5

    3afba53478d334dce167d9190e290ea9

  • SHA1

    ac23f5aa429d1c8f6a980d54e24d67827cc1c681

  • SHA256

    65c2030ab84d04b37733b9cf302baab70c495b5b404bd0857e24264715471953

  • SHA512

    00c2d81f6dddae4dc084784164c40462d1084babe3429796676f9d4b5f99e2dc9278fdd4758ef9ba3742521c736e9a24c1fdaebe59034674e40121b184bbe4cb

  • SSDEEP

    786432:Pp1z0wOekltERaXQJ65qKebQzEEu342X/SSPnrCCGF0rat1HkGuj:R1z0wO9tERCQbMRUW1EGuj

Score
7/10

Malware Config

Signatures

  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.ydfiwyxb.xg21766
    1⤵
    • Checks known Qemu files.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4256

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.ydfiwyxb.xg21766/cache/http-cache/8dc50184627514874c9a57cd66350aca.0.tmp

          Filesize

          10KB

          MD5

          51b76cdf0e35a1fcd7b5a857b59ce917

          SHA1

          288efe55745c920f671e7439aaa7dd21a0a04894

          SHA256

          59dbcc1fc2b1e411f18934de4298095581bff0d35b58d31c65fda3ab37857b2b

          SHA512

          e6e2bbd7009f1c38d75fc00a401f4ac06c104d47fb6f2983d3073e40791abd8e6f6fa0fedd35d7a0e8f5df3fa2654c6c9fdefc5f9a209cf0fa34ae6fbe3ec83c

        • /data/data/com.ydfiwyxb.xg21766/cache/http-cache/8dc50184627514874c9a57cd66350aca.1.tmp

          Filesize

          276B

          MD5

          89e6fc85afa8816f935b6a82ba8ca6ab

          SHA1

          dbf93c38e4f53e91199fef04850e9d657f5e83e4

          SHA256

          be81b99975298c063fb36c17119af5fc51d25239dd7b94311db0160ae049da8b

          SHA512

          823c66c1f27dbcfd0c8e95ff8aacdab7c7e2f7d90d4d87135e0754703a515851a96c5aa83af7e1238f51db2f4394aef827cfbe94acc3ae9b72dd9215e4fcb073

        • /data/data/com.ydfiwyxb.xg21766/cache/http-cache/journal.tmp

          Filesize

          36B

          MD5

          37e8e716e0e2f4a0b05cd9571d95b84d

          SHA1

          f8d068f6931707bddb8cd69f706f2224ad1fea3c

          SHA256

          7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

          SHA512

          e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

        • /data/data/com.ydfiwyxb.xg21766/databases/RKStorage-journal

          Filesize

          512B

          MD5

          7664d25718462d4432826e79c686c04f

          SHA1

          e2feaecf6c363ad12d1892f01b57747c9cd237d0

          SHA256

          e17baa32f7b3caefefe612c2abe846e621b2b2a0f6e440d78b99b696af78efab

          SHA512

          b26db261eaf3aae71dd99b74277c3c436d3629d55b593db09a2b212ce6c4199d6c2ae1e56d9a7b470e9daaa0d6e52137a9ced9c46f8f35d90694f69401aa6eaa

        • /data/data/com.ydfiwyxb.xg21766/databases/RKStorage-wal

          Filesize

          48KB

          MD5

          c6eba92dd9c58e587dec173db38e512a

          SHA1

          d5a9289560750e7f8f012c05d2deb3a3878e0914

          SHA256

          269d633cc39bbb6c16ba53aa749525f413f2075a99a912446b290abbda761417

          SHA512

          1b73cc3c8e89a1d9f163dfd40650962415f74d9b0ed33ff318f382cf12ac788e5a26657604cc62237136a2784d165173863790eae14b2be6ba852dc997638cde

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db

          Filesize

          24KB

          MD5

          cb5d4779b1537668ecfb872cfc8a32ee

          SHA1

          75426cf607cdaeec075c66325456d3ff1da77047

          SHA256

          66754f772143842907fb1a70f27d2bf2001721561f696e0104e89ebf59c887ed

          SHA512

          6bb076ff33fec848fa252c523993e2aed6e45eef154b1b8970338d27b7ab1d16b4a988e14c9042857153f432b1c49da3acac92084fdca7608e1406830f8526eb

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db-journal

          Filesize

          512B

          MD5

          dd0b50acd7bdb010463a6c63204ddea6

          SHA1

          4054fb3a12e72af6022b3b9db6b342e7bac238aa

          SHA256

          cf7624e5b8cd15cb8541bcd03cb5915512d6225bc4a6b7e564e604c73d9a6e9d

          SHA512

          eb4e78243e96b51b57f0aed3c89ad139378030ba6956c2b13b2e1163e82db55e0d331ebeee4756fd9807207ae4ad4dda2073afc1b4d3e9b1fa599423691f15a0

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db-wal

          Filesize

          48KB

          MD5

          3a6fc179903978befcf0f84a4a300b95

          SHA1

          2e74d8194a5b5923159974d2ec9cf45cd6aaef77

          SHA256

          3b9f57c31d8ca5016ce1bb8b00067af143c70f4ea355025b4ee90313f686efa7

          SHA512

          4eb18035add5388c32e86f3795033b50857f814f6cd96d1d83a6a208f2543cb08f85ed826e888457560804f2eedae838c0a5975c955c60cb10c6c633dbad57ba

        • /data/data/com.ydfiwyxb.xg21766/databases/ua.db-wal

          Filesize

          12KB

          MD5

          5a7ef05ab887b4c499466091a44818c3

          SHA1

          2bfdd232b0f5c7ca6216dee7ba1763a24015ab27

          SHA256

          108c55b2d3abfcf351fc73c68d84ea4a29d382c020f1c5f6a15989a7e535c70e

          SHA512

          0dda5b7ed9c21ab5a901397280116869af3520fe731ec98d9f2f2de12a71e707f8ee2a5b97fb9a6e38d76feaf09e4c5a5263de36b0e3e325b09acc48cd86a920

        • /data/data/com.ydfiwyxb.xg21766/files/.envelope/a==7.5.3&&1.0.0_1703439362186_envelope.log

          Filesize

          1KB

          MD5

          581420d06127189e654dff49dc5fb93e

          SHA1

          b13ef9b22dddc3e115390333ed87ac594b41f6d1

          SHA256

          c031452d3a260749eb1e19229ff3298e69af9fed69041fe1ee7d12e46ac7d2af

          SHA512

          66b7eead706f9ac68588d23471648ea4d67850de6cc474b76f2a0c07d0f4006b8b8d2fcab66a087082ff2e90c9f7a23b5a8e01a11769eb4afa7928f101086cb1

        • /data/data/com.ydfiwyxb.xg21766/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          b4fbb20e0d0dd9d526ac3c26afccac87

          SHA1

          2ed3de2cbbe0063c45d5c3c9e3bc21cf5418fdef

          SHA256

          ef331ac03701c767498eab46001bca1f1683b718f114b40524aa52a67e9b10a9

          SHA512

          d8ec5d75de843a83c4046c75eb8235c3edbc043783cf40b59e997b449cc6556e13225ff2063d7f2f7a0637477686b47cc0b251a3391f5150f1382795abe323c6

        • /data/data/com.ydfiwyxb.xg21766/files/exid.dat

          Filesize

          67B

          MD5

          05e5e79bb11ea7535969901d1cf4b79e

          SHA1

          971342062f19829e111fa8fd9ecaa07e59ae689b

          SHA256

          7a038fe10f6cea9a963bff5163be46b179fcd3abe1a054157768044761cfc8f2

          SHA512

          54c226a8153c2a9a6e6f12283205667fe36d12420ac11cd6f97ce8023d7296a244f4399456f0c4679ceb20a6c1cc0e6a3a7a855b225b99599915682e6d608a05

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/assets/raw/bgm_lobby.mp3

          Filesize

          998KB

          MD5

          633633f60a40f3702cfab7b8aab049af

          SHA1

          d3f3b52f7825e2d896719648bbe324d12037c72d

          SHA256

          9475e022fd9dc2f9bc83fc935605c7fccab7f1881047e20ed840cb78cd2cdab9

          SHA512

          bc3e7dacaa8f7d340c23e7ff42b7111d8e62850c95c0f112e53cc8901248f8f044b6048f02bf4b031eeb27630836eec6e75405f24bfb5e90a6882df79ee3ba98

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/brand/login_icon.png

          Filesize

          206KB

          MD5

          86779f4d272e36768216b565c7ef7457

          SHA1

          526ef117be9c6407bb5563a504613aa1390c3acb

          SHA256

          15f7d22e214f4eca0856e938a9ed40b4599066b07eac668f8a3c9f25eb84f589

          SHA512

          9818e1d57e4bc472b20f17b7fbc7e310975aadf86da55ad5e93bf16c86f4d9fae43bc99bb6dadc8614ebc313692564a5b2c91b24fe3e42cf338b8aa03c401eb6

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.ani.js

          Filesize

          83KB

          MD5

          a7f4b06f300c2b26aa40f96ff4cb40e1

          SHA1

          4a42d4da8c341f232cdd7faaaed41086531bb30e

          SHA256

          7a268582bb4e16bf2941d8ddb587d22a48424b3fb0c4710562c4ff09a4e6eb1a

          SHA512

          6e13912660a9306348a183b84d8b8b5e851bf0ea28febb01518ed3e5a312d51586f750b67abf1875306ca5fa0fc9f7a188790360d792873ae9929d3e9e2c305b

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.core.js

          Filesize

          280KB

          MD5

          734e908c1b74dd1eec32fd65e8cde3bc

          SHA1

          0bc0f84320eb6701d870627a13302ac45ea97d94

          SHA256

          1ec0e3f9e343b9fe26f3145d3a8f38c07fd15cd0c93349e215567a5e3827379a

          SHA512

          ab1629fa7a2e11ac72a109f5014766986da03315688fd047a89101ac3724d3751dc5040858c81b97f97f6fd48902d25f09cb853e61993d377847e4748558f86d

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.filter.js

          Filesize

          4KB

          MD5

          731bbd84131c1e8efca9a751f69603ed

          SHA1

          26ce1b0e0424556954cdc9f9dcc4cd686a00c2e7

          SHA256

          c859a8d68d3e99f9426241dab1b123c82e6981fcbd60282ae65f06b73d397221

          SHA512

          ea7d34e45ed401855b138af339a452e9fd37472106552eb62d9df9d545887a13bed2cbc2785b5e085d5ef253a4d3b962c5985a8f73a9ae4957d9a21e6a3a7408

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.html.js

          Filesize

          14KB

          MD5

          990add636fdeebefa0378779d814b8ee

          SHA1

          218d0ee672fd005083bc89666fb7a0f40740d4e1

          SHA256

          0d6635e7e2040a36e6c3484b1b88e6d8a3f51e7fb797220d7699fa23a540b2d1

          SHA512

          b646b5e57020472a184b8a715fe1a90845415e6665c44f1ac25eb796b20c302f47f3af6916ff517c518247f3a997a27b600279d85fc1144651b2aa0e457edc1d

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.ui.js

          Filesize

          113KB

          MD5

          4f7e236bf55d39bd1eb6a09559b84952

          SHA1

          0a98dc898979531ecf8d8bf27ce5dd5410c528d0

          SHA256

          a19068f9f336ce1b49bab1b40d1a5dbe4651ff4773063562c29a560b93eb5d09

          SHA512

          7075d3080338c7244cfda0cff7d6b6de7bf370be56618daafb0f7eebd53d7ec289b2c0afd0caf5a593f5a933430081c3955be70997d377a6e86acf53dca82d8b

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/laya.webgl.js

          Filesize

          172KB

          MD5

          e6e30589572bf6171f368fe9786ab94c

          SHA1

          e4b9bbe968f5af3907318904a3b978cef74d2dec

          SHA256

          999900a085104c922ef865d526e1b5b958f495da5e2b522c096ab57776398425

          SHA512

          d7ba82b191c94f7bff1cb7671bf19ad5e8fd4f8822b80dfb15ccef7a39619c17aaf39434b7213d127cfd47673f19265027e8a9f163ace7398d88cdf781c92da7

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libs/worker.js

          Filesize

          15KB

          MD5

          a3c7f3ba52e6d1b6d5ff70e24bac540c

          SHA1

          f0795e8a596e3c501f8eab11ace6efd61d5902c5

          SHA256

          94970cbbcb8936e0776ccd6bfad1c2db818d33c3887ad2b0fe797b90201677f3

          SHA512

          ddee3f72ca381eaf9e3a670bf9c3f9b67546fa24d72d4b58566297441fa518a5f3ad90cc57fcc3ba92da8f097cf96dc886091e70d336596c9039539b0629b7a3

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/Base65.min.js

          Filesize

          1KB

          MD5

          4065830e2c5c5d28bef2e7573a0ffeb4

          SHA1

          ce7985eaa2fb9c40f65b176701ce887a41598ecd

          SHA256

          9c6f05326ccacb8d68e22c9a83dfd02af7ca5cd7a60c2118ab0216aea7b26e70

          SHA512

          64ffeafbba9262d6cc51bf4dc84b281f834dd684a3ef0bedf71b07262e692e0531d9dc3f9f8ea45e8ca5e5a0e20c8ade6441478ec0166ae418042a605e729090

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/SecretUtils.mix.js

          Filesize

          11KB

          MD5

          1cee68768723ca46295d020904f6fcfc

          SHA1

          64e9314ab6f3708f613e45b99d23d749764c9ef7

          SHA256

          897b46e71bd0d7c4b5a6ab8a8756485d74895252eedae219f3477710da79d868

          SHA512

          f272d3c3a5102968698da647ddf2061708c8e58665b12e8a6b3909d6ee013724dc6550ce1302572f1549e9879d5ff93509c33c4e8624849fe623638325fe8b65

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/gt.js

          Filesize

          8KB

          MD5

          2dced47c498205552c3f0cbefd5918c7

          SHA1

          32bed665149742a212f4760e8b9bf4dbd833722a

          SHA256

          2e127c14462ae162cb6145e74659079b8cec2ef205d6d7e2fbfb375bb4e11aa4

          SHA512

          8d6ff2e995a06b9c9d04807344f2c82cbda3864d744beefc2072cf48c9dd179ccb9741b84a7e35a01a8458f8c188f4f7ef6d06f39ba129acf26653b899ca1fea

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/md5.mix.js

          Filesize

          38KB

          MD5

          7d44afdf0af243b957055d75108f226e

          SHA1

          99d55ecaa7b45f6ff76b6d477e2d200a890179b0

          SHA256

          c64d6f91d2be319a3c9368f1d987ead8e69253ffb7a51dd3281ad8cf05e2d7cd

          SHA512

          c4257a7f30258d05614178426684227dd008bc5c0121b0b2e924af39368197663e9343d0406e684b9aba750e1633f10a668b7330785ef6caa0c076733e407ff0

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/qr.cb.js

          Filesize

          16KB

          MD5

          a593596260a6da254e317c071d94c90e

          SHA1

          d2c73ec4f09dea462c397dd040623d1d402e9a08

          SHA256

          ce34036a5e9c2835973d12208abd59cf640a2d55e79ee5b8b812f7ac56355d2b

          SHA512

          471ca04145f72bbd36ab3546525babaecc38713bac228719c8579bf3ef253d76245553021054d81003a690291050c275a45f6ad1bfe7bda5e4ee4f094451b629

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/react-native-bcrypt/bcrypt.mix.js

          Filesize

          163KB

          MD5

          5e3715b25054621bb7e595b8baf824ea

          SHA1

          0d07ec95db089f5d2eb8933e94bbb0fc215741c4

          SHA256

          a8ec465f793679b90019334499b9b1a302a16390be690994c06fb8a7501401f9

          SHA512

          cf26d77443959cd81c4747689e30176ba979acd91ab33784011ad3f3203ed8ecfda0c9edd87f9b39b6b16ee184ebf584d91500099862e0145b71fe6eb014f390

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/react-native-rsa/jsbn.mix.js

          Filesize

          114KB

          MD5

          4d6d0523aaf7110248d55aa76e07c887

          SHA1

          9f7ab2013435eaeb553afdc12bbbaaffe925b262

          SHA256

          8e1393c4f6eb6b060aa07e229fb0849b0a9983b18f6188113402efe2721e8001

          SHA512

          4aeabac4dc7946d89d817066b4b5711e07d2d55acc71c51ed9d79c53fda9473255843961dea4c5020740738a6b5e53326d69c5b832cc7d7038ea28be295d48b5

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/react-native-rsa/rng.mix.js

          Filesize

          11KB

          MD5

          c7950cdf659ef4d7ef12dc4e1212b45f

          SHA1

          71861d979e15f80d0e616cea6b68c3af039af600

          SHA256

          5ba67f17bc82c24c7ccf758f709aba95cea37f581377be708ce1fa9e4deb2d20

          SHA512

          e1aa6b844bb38a991677320957f2ad204516c2ea19c22729b9c185b8e1f68de6f1833b7743266b4a46cf888738cc8bb6c22a26256c06174fa3e4d2d62bfddabe

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/react-native-rsa/rsa.mix.js

          Filesize

          28KB

          MD5

          70c02f908b30d2432518a4fcfb094a39

          SHA1

          d5412fed688172a03ee217c35097410d34e8b579

          SHA256

          ec2bb391270fad56df2cfc76c3c1de7ee81a2cef16a2a3ec5b8fd709550d94a1

          SHA512

          81e4baceefbc4b4fe37f9e9ada41c9c3044616d1877b867fbca6ea81e89bdda1f38e9444377045387d600954f1820fb18eaea39e151e3e30e2cbf272a3b4b832

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/screenfull.min.js

          Filesize

          1KB

          MD5

          38ba8ba0a1b92b3c06f20b7380e0b91f

          SHA1

          01d52cc59382150455b00460b783917f8591441a

          SHA256

          50b2b41b637e728f934f80bad040749c49523357beb48d841556be6d1ff88ee5

          SHA512

          5c325d420df1034af4c39ae7b23aadb1ba250b9688548e05cdd92c6356845f2f65f569ea4078f50b30f037e653e6019ff52808075dd28a3dbafb312ca13f57ca

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/libthird/vconsole.min.js

          Filesize

          76KB

          MD5

          bac6b63f324b1279662529339227cba2

          SHA1

          d116f3452ba4fb34a4d84203a462e942b9577f5a

          SHA256

          5f454a9df2b69796f5c30ab07751cae8b8e3e3f0fe926b94e8b1a6a68d68d902

          SHA512

          9968e8badeb9b02793c367e430cd00750dd745332505d616ff21113556312406ab9bbaaa5d0afa1b1be5c4b86692386e384bffc4962b0a75764db05c65979170

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/js/LayaSample.js

          Filesize

          987B

          MD5

          f53b403e4dc38a389eaef05dfab58aab

          SHA1

          7d2b11f713d0e2b2f5c6f24668b7d3eda756c31c

          SHA256

          b39a71ea776a55c652f74fd550e939c377c3fcf3c4b7797a4bdd38404d370777

          SHA512

          310279ec94b19eaecd6bd04da7575ccc42c79de5ab2fae8f0a88b27cc19d4c46780a63e79fe5996915e0fe33cc3a08a99deb6daff0b40773ce9f413b005a6cb4

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/js/loading.js

          Filesize

          3KB

          MD5

          cd44c11024507a0967b8f3b120893def

          SHA1

          a246f3283a59054bffafa659126d0d4c175c7e91

          SHA256

          e4a3770050b505b8c705c0be939d8a3ec378d6c87038fd98845fbe55df7d0cf2

          SHA512

          82bafc0f49bd860515bb1afba6f5e9f4c8f87d37e57ce83d0cc10fde3cd8646b8107bc3b42c5d2779121d6ca7e8f47b1828025274bcd1c10b6931129ea63219c

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/libs/laya.ani.js

          Filesize

          165KB

          MD5

          615b36ca882715683f4cf60550d227de

          SHA1

          ea0149e8746b20e0c5aa4ec09a407cc45fbcd5f4

          SHA256

          603d9175fdd48dbdda1292524ac16de642db8c934e276085210eb78e81941163

          SHA512

          c2def03739b8c3e66fd3527f7816612c8f274052b4eed13f491f42f6e8613ea2fd909b676ddbea72e51df1cc92f205a49de7e3ab472fe1ec1db4323e593ba47f

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/libs/laya.core.js

          Filesize

          599KB

          MD5

          a34ca6bf184f55a988e9f0cd1c4ac832

          SHA1

          4a3bd11c141259a98219d394b4ec0d44043e6813

          SHA256

          bd3558f8d9afbe8ee247bd32df965c89aff879b689739f7a88579ebc65d57c39

          SHA512

          91646b969856709179e15431543f65947c4927260800d2dd878d0923870af14754579c0b9cef8757a9ccf7047fb3c6c5e0f67148ce2c9c51e50362553a5d9891

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/libs/laya.html.js

          Filesize

          27KB

          MD5

          044c2d4b19ac30c4245911309ff8ceab

          SHA1

          866ffa7242d73ce3170cd566fd1f98ade9f4e5a3

          SHA256

          bb9e396939ee8cecef76ce235399b4e5b7f644b7def73d6143b1ed7dc977f68f

          SHA512

          b0d7d018dc3bf9021e2bb01f591fb5a9a8927e9d5412acf7a112e276d4be4fc604995fbf3645740d4e56491b11206ff01e532d47cd0d530c813564a66fb522f2

        • /data/data/com.ydfiwyxb.xg21766/files/gamelobby/loading/libs/laya.ui.js

          Filesize

          230KB

          MD5

          0b9a2bd7e2d73bc1e772df19f4162ca1

          SHA1

          e11537025d0078d0c88636c4e387ecd9a79a64ab

          SHA256

          2e188fd45a73246e29e79a700da78f0a79648e9d879061c9f22f8d4ff0b33cff

          SHA512

          f1e505bbc09c32e412b68d8b85982fcaa2401ba4bf6558be425578139fe1f4a4de518d7325183afdb9c64c1648b9f2697c284152f17bc34232607df1221b35f5

        • /data/data/com.ydfiwyxb.xg21766/files/jpush_stat_history/active_user/nowrap/280c242a-24d4-4625-9185-96f11f7f559b

          Filesize

          159B

          MD5

          68650318c1193d80c1f97a45716745dc

          SHA1

          c4a983d36d23ed1d20d16368df9f42cd8d737ddc

          SHA256

          756fd22949ee2715b6cd0eb183c5e3c90df5a998d85a11d4c3d74e1a080ac8f9

          SHA512

          cbf6a80fd4a13d9a0fadca789faab7c7a293580b2e701989ba56fd1e4f7a60b4ef1e5d30be9b6d3a054110777487c146076a664edee08f9a4ac19b01a203b76c

        • /data/data/com.ydfiwyxb.xg21766/files/umeng_it.cache

          Filesize

          415B

          MD5

          220b18a0330e41656cb5db8f52093f0f

          SHA1

          e167cce3a0b5dc108fc8edd8e8b45e01aa4d7055

          SHA256

          70ad109ad4156593e1b22c51e40148d73d45f2aa7cf1b443e7af4e79f92fc159

          SHA512

          7c873b50e8df1de5f72f63bad48751c0deaa7ad3adc4cf7c23a8c207f6ca93deb85335e2118f3cd231ec07d1707500394a313dbab37e0ceafd58effd92f87656

        • /data/data/com.ydfiwyxb.xg21766/lib-main/dso_deps

          Filesize

          296B

          MD5

          56a265b0473177b216a7923eab57196d

          SHA1

          009f0167fb072dfe1e9c1a583d10860f11998827

          SHA256

          57c7e64870fc38f7d9a877183113b52a1a7e3a8afcf01892f7f42e10257ff3a5

          SHA512

          343e08f8cc81d4baf1cbb5d2c950bd65f3daf3614871cdf8b32f89860615a75a4d116ce1617d24fead84694110e1003c24034fa878861a44065a83490ca66944

        • /data/data/com.ydfiwyxb.xg21766/lib-main/dso_manifest

          Filesize

          95B

          MD5

          dec921d7b5bf19b1e64c32eaddcd974a

          SHA1

          ef72af96f3e1596036ae9fc7e4befb2f9bcf3d96

          SHA256

          ed1f5543355f958b1d3dba428e55c51480a3cc705ea3a18e163d2e106370c286

          SHA512

          d6b8557e1b67a46380d47f03d086978cbe1bc06bbad059587ea7ee8604ec485b042d28e4a2f5b3eee073c2fe8caf2bb5d3d6f108666ade8c12c2876fcdbfef22

        • /data/data/com.ydfiwyxb.xg21766/lib-main/dso_state

          Filesize

          1B

          MD5

          55a54008ad1ba589aa210d2629c1df41

          SHA1

          bf8b4530d8d246dd74ac53a13471bba17941dff7

          SHA256

          4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

          SHA512

          7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

        • /data/data/com.ydfiwyxb.xg21766/lib-main/dso_state

          Filesize

          1B

          MD5

          93b885adfe0da089cdf634904fd59f71

          SHA1

          5ba93c9db0cff93f52b521d7420e43f6eda2784f

          SHA256

          6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

          SHA512

          b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

        • /data/data/com.ydfiwyxb.xg21766/lib-main/libyunceng.so

          Filesize

          1.2MB

          MD5

          6ea6834fc22c3040ae1ee582d2993846

          SHA1

          6f3b104f0bccd57872b1d9cbc871a4aa869f4201

          SHA256

          72a0b80ca98346c3b7f4ad0926c8752a4e55f0524bf0ee8890e85eed934ebfaa

          SHA512

          f55432aac7c7a58a9dc6e74b254d4037f7fd929390ba2b70b20c0d492850fd675efe7469c361e5ad96103f3ee8573433d311b86a77cd1b495ffdc45307e07540

        • /data/data/com.ydfiwyxb.xg21766/no_backup/com.google.InstanceId.properties

          Filesize

          2KB

          MD5

          daeb5d16300a96dc89863732f0f6e693

          SHA1

          77948d22c2b4265f866466acc57070a297e02b83

          SHA256

          b77422981f908947c3abf6f7934b8253805ed2ea9c3f67b9e5317559327ae718

          SHA512

          dd647e66c01c169c449fd185e33883fe9faf69c8e6e823ddd812f5643e56c82535035a945fd21e86418f41f96d57a82ad2bc47fac53f6d3f5ac77f34e98473cd

        • /storage/emulated/0/JXCP/aff/com.ydfiwyxb.xg21766

          Filesize

          7B

          MD5

          baaf592e91328a199c56641898245348

          SHA1

          c19839e4e3e74324aa32bb6dd0b035436e0ec74b

          SHA256

          a9044bfb37da05a95ef37c9ced322e365fa8dc677a7063cf4e08b06c6860244f

          SHA512

          57d95a0a98ab67262248816017b3ad7d923a8355069ba0bac96be70436d741e1b5d2e4bfa59bb4e31ccfcd086e9c5d1005fe8021d1bf3c8cdd422f9d6f1b6f8b

        • /storage/emulated/0/data/.push_deviceid

          Filesize

          32B

          MD5

          5865231b9fe5e5f8cddc0335a474f3ce

          SHA1

          1a0c10e78aa692b0a0d4cb793b368c1f6db24392

          SHA256

          ecc56757c73d135f7cbe083ba58acea09a702a071c13b0c0e3459d27da8a29ad

          SHA512

          5fb463ca74e4f7ebc93a62f95a81d86c89fe05ca77f9adddb129d9cee05d74ca755b829cf94d3e77ed6ea0b618e23c042d9adc6603348e7461b3502a41274e59