88643916b39fa7340be73e68361d5e73b674d0f8ea17de7a3739c7e94b3e073a

Analysis

max time kernel
2752438s
max time network
158s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 20:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

88643916b39fa7340be73e68361d5e73b674d0f8ea17de7a3739c7e94b3e073a.apk
Size

17.3MB
MD5

77b90396810c6b5cc7f8f20b758e7f88
SHA1

423cbc2f4790ea78a105c74dc39bae44cf2742da
SHA256

88643916b39fa7340be73e68361d5e73b674d0f8ea17de7a3739c7e94b3e073a
SHA512

130544102eec2a294cf9a51e67c41d30683cc58f4b1364ae9ddb0824a494338482f833277233bee931d1a890d64b393b231d84cf0db778029114b4c4c6e71f0f
SSDEEP

393216:JZ/PKAf5Jj6SmegAYnMZNWL6jaU1YZNWL6jaU1a/LdR82YUgR:fKK5wpdMn4SYn4Sa/LI2+

Score

8^/10

evasion

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cc.ibooker.ibookereditor

Loads dropped Dex/Jar 19 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	4222	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	4222	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4222	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4253	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cc.ibooker.ibookereditor/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4222	cc.ibooker.ibookereditor
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar	4301	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=64 --oat-fd=65 --oat-location=/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar	4222	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	4422	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	4443	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	4422	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4422	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4422	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	4443	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4443	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4443	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	4705	cc.ibooker.ibookereditor:channel
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	4705	cc.ibooker.ibookereditor:channel
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4705	cc.ibooker.ibookereditor:channel
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex	4705	cc.ibooker.ibookereditor:channel

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	cc.ibooker.ibookereditor

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cc.ibooker.ibookereditor
Framework API call	javax.crypto.Cipher.doFinal	cc.ibooker.ibookereditor:channel

cc.ibooker.ibookereditor
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4222
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cc.ibooker.ibookereditor/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4253
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=64 --oat-fd=65 --oat-location=/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4301

cc.ibooker.ibookereditor:alarm_service
1⤵
- Loads dropped Dex/Jar
PID:4422

cc.ibooker.ibookereditor:remote_service
1⤵
- Loads dropped Dex/Jar
PID:4443

cc.ibooker.ibookereditor:channel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4705

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex

Filesize
6.1MB

MD5
7c86b0b1e78ae96eaf90959f01a276a2

SHA1
b9bd1590caf68db42c14fba4ddcffa97eeec5221

SHA256
dc2cfbf72db8f1a2d415184b2d3d22d5b62448c93bec8ac38472580c9151d199

SHA512
0124b9f0c7b18dd3a10fdd2a1c2ff02281c8050d266b0bef00965be5845c290d478ff367dbfcd559635439624a5d1158c7ee8d3007a37ec086474a648848441b

Download Submit
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex

Filesize
3.7MB

MD5
e76c4a5b931ff5634a6a6691d89d3dcc

SHA1
385e4afcfe19c4aa48ceb51de7f7e66461c880e9

SHA256
d2cc66436823ecabc810948411ccbc58ad8f73fea89870a024404f4e4c38bd2c

SHA512
4fc37611c9aa89dd782da672373cb24fd55ac0621413fd649ac752f67fd46c9eef258669ddad7619d99bd851f51563d76219518a969e8887829777321c1b1041

Download Submit
/data/data/cc.ibooker.ibookereditor/.jiagu/libjiagu.so

Filesize
485KB

MD5
1da618896802fdb4b6f17c92703424f4

SHA1
b48aa81ac014a5a7f6e95e618e4f951ee12d34c3

SHA256
2cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f

SHA512
620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6

Download Submit
/data/data/cc.ibooker.ibookereditor/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/4222.yaqcookie

Filesize
8B

MD5
899b6ed477b4ce76b2810280a9ff629f

SHA1
c8115b911dc60abaae0ba4e356561cbb8e5bc640

SHA256
6884885d86e5f943bf3047f5f790ef383cf5d580285cea8827ac05d70449cd85

SHA512
cc47c5e50effed80288d4fb8cf569398bc39e78a593c6354803031145321e20fa2c8c0c0a1bda2f4a2e101e8cdf711199cb61f62b77f4f0f4ad8cf8559cd2c7c

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/dexMethod.36117467.dat

Filesize
23KB

MD5
f3651e2baf89104ae96da59498f02da8

SHA1
67679866b23e4f49e05f319a7bbf572a9b20d03b

SHA256
ff24b64724c3480103fdb7ecdebfb5af3b0b2fba205c311f5f44e7e1c9e7bfe8

SHA512
31797d7c61e3e6d366ec3dcd53c5e4920a6e3b610b2a9d1451c136820aa57f4369063c5aa1985cb475fe7618e9ac98301011eb5a8c9819c0bea6788a9602ede4

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
468KB

MD5
6bfe094580c89ba696ef8772de47a552

SHA1
210bc4afce84b6e6bb36f97f68f9d3d9d3432643

SHA256
a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4

SHA512
7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
71f1fe7ba0e414fd233f7ae92e328803

SHA1
b42aeb1be13ab429f0150c50351d43af5c17d99d

SHA256
2766621a98b9c58bf7131ae3658dbaf36336b9b893b2325877550c75555cfbba

SHA512
5939aac6f0cfb02c5ddbe5a4b26627c1bf7a82421c7c6d269a9fc2b4bea6f0e9920f103e685d60fbf7da5a4ea96f7411f26f3a3b24fb03cd78ad3ab3a74e8a09

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/libyaqbasic.36117467.so

Filesize
84KB

MD5
b6e6c7cd7f3c254b98763716fa98fee1

SHA1
49cec240bb50f33fef8a1865e3c2c7055ec1bcb6

SHA256
7352abf94529b9e51bb5be62bf34b4a1f788676d5ca8d08328988f51cf04f140

SHA512
51d40dac8264578a98f6cdb5f8aaa022981562a6959d480f3dea67c1cf7153e6b5e2c6668fb644fea8b012d507056df68b7d2b0ff7c6f892c8fde1e25cffd0e5

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/libyaqpro.36117467.so

Filesize
57KB

MD5
0282eea6954ad2fc7f833ef0bb9a0372

SHA1
0300c9cd7000831af0ce6ec5e09f268ce629b20f

SHA256
90a8f7e58a17e416d42b686e9864ee4a2ec4710a043c22c349dd5e55bf0084ab

SHA512
96e30e773d18227ef7cc4332616c2d317b1a79ff1522928aba5956b916c4167c65fec4a8fd4b369d671f55016d0a21ad6ab3692a5bd0d25be2355f88c366fe5a

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/update_lc

Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-journal

Filesize
512B

MD5
aa7100f71e3043764e9acd5658e63640

SHA1
aa1bf2a0c815512336d021b7b13708a8fbb37ee6

SHA256
6b395f631244dcf4621be3468c96162dfcc318dd9a33e0a0e6f2c1b402c25511

SHA512
4da4fe5df83b9904eecab58173b93223b1f7eaf9cc8f553add6573d0dcac91e3d8e9850370e8d33a9b8f7a5087af2a614a949f5dd351245f2fc3a3dce3afdac2

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-wal

Filesize
48KB

MD5
49b92722b0b200c2651a532fb0ab6079

SHA1
ae41019a37507255d100701456470eb541565923

SHA256
08fb03b38a70d6953e7e1018a7a66d0f9f080efb20a7d28388fe80379c3ffa4a

SHA512
0764ea8eb172f1be18abb1ff602eb38c88cd4ccab63122f3228d9fc95c312b8656f13cb23b5cfa20211978eef2f8137372dbbe9563d413c8e46cb6d71d7b2853

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db-journal

Filesize
512B

MD5
eefa42e97003d24926ed0d6d440c5c40

SHA1
fc68b6226d7eed4ae12594b7f6d16021ac5a307e

SHA256
ae41630eca48dc260b63dbe54302ec02cff1caacc94f35ec15b7fc49e89f4674

SHA512
35e21ac23df7f6ad67fe11cf50c3474b2af89879bca7e37594b32019c297ab8aab8ca3252e89021753ed487dc4a7f9d42508deaf94d26e0f7bd5d10f2e2b7afc

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db-wal

Filesize
16KB

MD5
52dc12124c2fd0fdbfbabfa7dce472a1

SHA1
aaf31a6f790f70a91628c79adcbd58cbf8036608

SHA256
56eda2c4c46748a3a4f04aff31afdbaaca6236664f6452e3f226ab8ef16b0a83

SHA512
b77dc291299fec31bc50b8376cd978b00e2b2cf1c8cd4cdaea2833fe093f72aab0d50f6462ebc5ba6e3338556d312c0ac2f8ac90568e0e4f978838bd60e3f996

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db-journal

Filesize
512B

MD5
03ee8e45605fa53efead88ba45edcad9

SHA1
4295459961fbd0d9f87ac4cacae15d4f1e620577

SHA256
e7a85d20af20b67b0115cbccbb980a43edef89d689600a0bcf9051249f759ba3

SHA512
d29cf3118dcad9820d00e7576252266144cbb8ced194c7cd06f94fad69a547af51f76a3af058260d0cb8371386f7310cbc5b717faa0a14e63568a239ff95345a

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db-wal

Filesize
32KB

MD5
1af544d8b718d6f61c3a4c90f5c314c5

SHA1
a68f69e339d6cdb5cc5c4f283e7c3d1f052cd6c4

SHA256
a6f49ad79c716ffe665de2c2aa3bd7482a518096e385abc62bd88fb202e4348a

SHA512
a04f955cfacd8121ae08d06515791a5b9293516b07e0cd86f606d83743d4cf316d205c32a72700a6814c5a0c24498f6156221af079d0761ebc45201b7a217fc2

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_-journal

Filesize
512B

MD5
6cb611831039c53dd3da07ee89ecbb86

SHA1
c8671c5a46a935775db470ccc1ca71e9bc3a3631

SHA256
af4b44ae954f37cee71bbfac98d289d458120b48012d6195e041415b1364e9e5

SHA512
63e1fc84d0aba937680c4df5fd679b9dd1fe95f07ac286c3ca92e136dbc925a39d17bcd0b14b16ee0b197e54f422b3ac93cb9a7b8ff970095447486c0875e2c8

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/ibookereditor.db-journal

Filesize
512B

MD5
749009be4a85c717941d3a3bbed4dc5d

SHA1
d00ee1417532101a1b18eb2a8cc5db5cfb235c6b

SHA256
992fe3e260be8b38f828e4f40cff8783f546713b6fd568a20d1e080d65ef8d6a

SHA512
c85bd327f8e60d6ef40fb0ea021ed27b8feacd314da5ec64bdbb6546d25af48dcb887f27b2743c2083dec3c8518e6c19d1cf78f9f44257e47fb7fd5bf1e6a2b9

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/message_accs_db

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/message_accs_db-journal

Filesize
512B

MD5
63f12ef299dfd77221e949c0d43ff906

SHA1
ff7a03e3eb42119c200c42c984a4a1fd286e34bd

SHA256
65c5264414928f019f37c425fdf411f88a6611c020d6770744adf98764ec40e1

SHA512
8ad31d69e96b59eb5d628b6b97b02fe97df4a047a3926934fdb1d7765d54b2a3ca8c3150f3b257c8837ff6e310936d948e55e5094d29b5174ec43f69dda46456

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/message_accs_db-shm

Filesize
28KB

MD5
670d8bc46551c40a1fb9ff8ec4b72092

SHA1
82253b089122b4d8c7ae61dbbeabd9d037ddd49c

SHA256
ca2684e4da544d08c906c70f147d8dbc91da3a7972d255e6a00e1c99419f78e2

SHA512
4977d35230c533e26162cb0e4da38345a23a87ff41510685e755a52152fc78d0b027e8e8942fe10ae28fe332b16bb9a7ba0c0644ec0efd635d579515c3d5df67

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/message_accs_db-wal

Filesize
48KB

MD5
8a71ab719c1ebad0486c106c68d4dba9

SHA1
2da40791ca0784777de5468385b396283c961992

SHA256
5b05fc6aaee8b4ca8e97a2475a520609b1a1b2ac278e57cabcc9c52f8a7530da

SHA512
3a6d2e7d0019c965eedec90e8509ad9d1b35dab8eff87b0237276e2a19b75716c7b76b7fba5f5bbfb05253a029bfbda4e4b5518b3a533fc9c58ab111674a9e4f

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ac

Filesize
32B

MD5
c3d0ffc5ebc468f603ec6d6665480687

SHA1
7baeabf6b5bdefe8fd62bd49d936bf36c8adca52

SHA256
3ad97c6deb5b74270f3e4af448b0aa91b322a1eb015fa4169c999dc4de515b03

SHA512
e6feb49bb7628da0021be7db5f854904cf6ed5630c54fdcd0c6bdbf63dc5ac63cc66a508b300370b099ab2b6990dc234df9e06083eac9a60803becd3c659856c

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.di

Filesize
340B

MD5
393435e91fe600cfb100556089b44326

SHA1
c7764c0a699da21d8db9d0ea02ee27111f61fc7c

SHA256
b6b64b4f6b2bffc41705c3c345b276794c67b280c6e3a9fafaa4abae9f69615e

SHA512
235f3e4bab8ce7cb5e440384e883ae7e7b10eef5930443be292fe841ff6322ade135f3a06edcadc41a7fe274e13bcd3d7d7f4eec9d18bae472e6c42b973698c4

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ic

Filesize
32B

MD5
766ee5f294b47cc896cf8530527bf5a0

SHA1
bd04c1780324d949af0bdf7291f9b3149665c1fb

SHA256
eff9fa9af3b87a79bb49dd7462c34a7c008f59fa0475021972c879cf8eb01ec4

SHA512
89180534ad92519303d602efc6bb529609f192b994f631a5bcac58034defafca01f3698ce43c6b4acc51cfe6fa5e9d5e15c1b5e855475ef1593fc33b231ec234

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.rd

Filesize
73B

MD5
14033c3838aa5043093dd175e9af6b00

SHA1
a32d53fa455a73da3a591894d6bfd40d70da4e66

SHA256
92e8288faa524a9b69069d4d4af9e6b827146fdee03dc4e3ca8ec99e4b7e3549

SHA512
1611937a5914d86c7de4b96c1d44c97c24be1d1dbbe88a8351e24f4b8401bf3290159b0fa0ce2656c92392f2125692c2bebe0e44dd04e0cffb7db79a30464307

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ri

Filesize
314B

MD5
61d4560d6d7874cf3490f3fb2aa2f2c8

SHA1
7a88786d6c7938415d2bab902fa83b7b32360b4f

SHA256
38ba350c3dd7cd4f3c2fea0793f1b5a33ea77cb4451eafe2febb11c219a41c72

SHA512
918ba0ee822b6dfa8772223c875ce65a4166666953718f93c4f1bce43d4f353528d409f84f5b932c0af4d1e7870dec1eaee6c4953817cf973ace61543bf02607

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.store

Filesize
32B

MD5
448e391c59eef34ee1defbe4dee4c41f

SHA1
df1f890987371d7d8e6963c68b787856e42bc146

SHA256
55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

SHA512
ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jiagu.lock

Filesize
27B

MD5
4caeccadd7650d6e4619170054e7793a

SHA1
eace64cce965a1dd05178ce8b3e7df1ef645c086

SHA256
b7e4b34505086a6c4a9970db9e6eec1c13ecc43e8d765a73a575c67873f3ebfa

SHA512
138e1519f04113fdf1b9b5007edd25a5e172adafbafdb3c0085c2a0dfbd180644e779e1e5a10de111300bb35b00381d5e33f7d4575ae1fa34fdb31eb10992f4d

Download Submit
/data/data/cc.ibooker.ibookereditor/files/Mob/domain_1

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/cc.ibooker.ibookereditor/files/agoo.pid

Filesize
4B

MD5
d33174c464c877fb03e77efdab4ae804

SHA1
2593eb46bbe289dd515e9d65430756c3f339a8e1

SHA256
94f237831755112ed6597937ea6457d45f8ddffd0f538fd761dff18d0343f3fa

SHA512
6f8523532537594eff1c083f28a6737fddf242cb16fe231b23f00db91660b8b328d9318926c2d0aa0d146e4f52e7f126610eed41106624bb11456dab4d8be188

Download Submit
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
796KB

MD5
9dc5495c4f2df938c7929812e91e23a6

SHA1
c5da6987927f1a4286d4a78d6f7b55903d42c6aa

SHA256
82a8c7e9880f7a5f464328167e76270b3a07886fd3f42930cb4907f90114495c

SHA512
3cc344093d092ac8a4505d5c4ab3e4c0afa48c3b7fb6909e8e5de0a216c30c2b69b09105a410c54e14f983516b1ff70715ed38866a867f37c0441f7d7b5f359f

Download Submit
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
796KB

MD5
9f03083b3faaf85ae204f9ba7d72ea20

SHA1
436601a861d1c0c6e61e0fa8fb83671fb88f4d90

SHA256
e3d665d63e435195a25726c68da20d322169c157304f7d6963bf02a7dc28ae58

SHA512
e42ab94d65b52fe006197fd81ef55251a2ea6b922bc92e47afbf2a7e14fc84685b112831bdc964cad5bf97f18b4492f9d51d5f85d2e67480a6401e5a9ae1343d

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
9f5a31a2bc289ea863d713f99ae45bda

SHA1
7243c8bb5750dd809ce4b66790bf6d5550bde64d

SHA256
252bb67802c66259427e4569ec44a0b979a060c74c8622aa2edee530191d48c6

SHA512
95e6cca8108c622b5286352ea4645ff64673deff12c01f80e831c3d11c61738cd5181f03c735801c698f5cf6c1d5f493dd2679d97f1e43441925d315c4af40e8

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
7cf3d1a2e6dd7be1390ef892b35431dd

SHA1
bfaa12d7e151029897277c5176a240dc6b1010fb

SHA256
756183a22715205017a2d0c8b04cb04d5573b14ac9233fbf76015dc8573ffe47

SHA512
6aacc1065db9382e139c673e24ccdb8c012d89209d6401d86e5dc6f7cdd20bf5ea53f9e0e542a50b880ae209710a06e3b6de2ce4e2e1f47e507d2c32ef3aa42e

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
79f27012e1da33b758b14f6499af1913

SHA1
adc62c00991cc31e421eb80b4a2d9891a7142d50

SHA256
671f5467533badd347703b48c00d8c2ce68b4ab4803c2db81604200a6c6384ff

SHA512
217533a3df1f820819f6304fd9057be3ee4c5c493f58e7bed47e7c7b3d1b131b687c2b8ed8834b08bc9b91ac949896d0fe9e659df798784c41cfb674e8cb7c49

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
2766f50eb055a0d35428eadb9d24fd7a

SHA1
dfd327d7b03ebdf88ab4a1e4413f3ce97b6d3221

SHA256
b21959de20f6adeca026b69dd19dc889d1f166c4b155aa3a21a083727e497bb3

SHA512
fed18a6328227d925de20bc2ab6d2bca033ce77f79d5a23068fc4680b7b3ad2d01f929cf3f9dad395f47caaf766c1a708e0dcac9857bbfff6172aa8b41686963

Download Submit