Analysis

  • max time kernel
    2753588s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 20:21

General

  • Target

    88cbe79a749326e5359cc8ac966929e06346665a3f033e7d928b780e5cf510d1.apk

  • Size

    12.2MB

  • MD5

    bc4fdd6ff313bbda26adf5f25f7a9807

  • SHA1

    57949f8a9706ab0e2774e51f90d52dbf1edcc3d3

  • SHA256

    88cbe79a749326e5359cc8ac966929e06346665a3f033e7d928b780e5cf510d1

  • SHA512

    75b6e69262d602bf0f51056957c79ef529b9634a8c147a6489c2cd8a5d23bdfc04a9cffd49353114111d1005a85aee96d7c1b1e6055f1fde15fdec864607d8c9

  • SSDEEP

    196608:4eAXHSHNbiA5CKFgG7JowOIrAPrRPuKpgDZ7Ygps4Yf414I0q2wTKYKI6VfAbWed:4eTbvg86AM5GZ7ap5YSI6VfAbWN2j

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 7 IoCs
  • Checks Qemu related system properties. 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Loads dropped Dex/Jar 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.cm.weixiangji
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4233
    • chmod 755 /data/data/com.cm.weixiangji/.jiagu/libjiagu.so
      2⤵
        PID:4258
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.cm.weixiangji/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.cm.weixiangji/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4286
      • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.cm.weixiangji/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
        2⤵
          PID:4476
        • sh -c ps
          2⤵
            PID:4514
          • ps
            2⤵
              PID:4514
            • ps daemonsu
              2⤵
                PID:4562
              • ps | grep su
                2⤵
                  PID:4587
                • cat /sys/class/net/wlan0/address
                  2⤵
                    PID:4613
                  • cat /sys/class/net/wlan0/address
                    2⤵
                      PID:4632
                  • com.cm.weixiangji:channel
                    1⤵
                    • Loads dropped Dex/Jar
                    PID:4447
                    • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.cm.weixiangji/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.cm.weixiangji/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
                      2⤵
                        PID:4652

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • /data/data/com.cm.weixiangji/.jiagu/.jgck

                      Filesize

                      4B

                      MD5

                      2d56b31fcab9487bae81e2150f922680

                      SHA1

                      bd53b158552675e6eeb3e8f4feb5bef7c25b3d34

                      SHA256

                      90b834abb03449b8584b40c4f4601f4c10f5896ae8c8885f29684a79e3ad4b62

                      SHA512

                      a5a0eab2330a05860e4397a8eb87b519c058eeee52bd90553474ec0e7323723c46856c3d5c2c8500c919dc5f6697d0017ebb757eb7d7fc84c3eeeacec9937c33

                    • /data/data/com.cm.weixiangji/.jiagu/classes.dex

                      Filesize

                      7.0MB

                      MD5

                      cd589af262cb3835b63100a7e6ddbc63

                      SHA1

                      6d220cab7f8be9f6b3b6726942012c513b2f98cd

                      SHA256

                      706b2c5ff4f677d04e500c7bc45ca77b479ca224b985981422d7814d64ab4bf7

                      SHA512

                      5af52d62b1f0d97ea3b6940c40c7b191141e3bedbea804c923b6ef13f6d48cdfd13ea34a5d60c393e8d6fa0ada563eb5ad7fca30e3050eb9f1264fa70d0d9dcc

                    • /data/data/com.cm.weixiangji/.jiagu/classes.dex

                      Filesize

                      5.3MB

                      MD5

                      8b181b93c36194c68a071964e6984f12

                      SHA1

                      198a7869d59c2ccf6c3843216f716c990cf59748

                      SHA256

                      27bc0b5d1fd5b289c20dc7f8d439e9c79afa64ab70f0bac0e8b21f8e41d55576

                      SHA512

                      dddd9df51fe00167ac636d0d5d0f660d7965b10b0689d697504be865d9e601503c9ea9856d6b4dac8b3cabc5d9ac3eb23af70c321138dc6da7c7795dc628c5ec

                    • /data/data/com.cm.weixiangji/.jiagu/classes.dex!classes2.dex

                      Filesize

                      6.8MB

                      MD5

                      ae983173375b2bc470b718e04b5f32e5

                      SHA1

                      9d9fe79fad1b0bd079a06ad86f5c803e8a5e9cee

                      SHA256

                      650343b22d242cc5a1ab693e364a0e98b8bbc7ef29f2b52d6bf8e23963c7f43c

                      SHA512

                      64d5196c13585a6f0b6dc7810b7002d00edc3c747cba5a63678ea31d92a67b362d6de23a18c32628c34aa97c89a1d4edb4ee37cf18fe0bbbb46336fda4273edb

                    • /data/data/com.cm.weixiangji/.jiagu/classes.dex!classes3.dex

                      Filesize

                      2.6MB

                      MD5

                      62a199afbd9959ccaae1cd00d4ed52b6

                      SHA1

                      7508e8a7c90451abe27b56c1a31607b04e576c0b

                      SHA256

                      ddeeb778c64279ce8ef47e1cb96f83cd1c8f3a34143cd50e926121597dccc5bd

                      SHA512

                      a38541d74696b945f9963ef5247ef57f4974d71ec6f69a043ada344a48e4bacd0bbb0303ed9256ddfd59ad6893f5690764e33f49b880a9cea7cb49617c15b214

                    • /data/data/com.cm.weixiangji/.jiagu/libjiagu.so

                      Filesize

                      455KB

                      MD5

                      e5a53000766ebc433b27d6a66ec4f555

                      SHA1

                      2c8f53f1c03aec2005bcad67d731f07261dabde0

                      SHA256

                      78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

                      SHA512

                      370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

                    • /data/data/com.cm.weixiangji/.jiagu/tmp.dex

                      Filesize

                      284B

                      MD5

                      f1771b68f5f9b168b79ff59ae2daabe4

                      SHA1

                      0df6a835559f5c99670214a12700e7d8c28e5a42

                      SHA256

                      9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                      SHA512

                      dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

                    • /data/data/com.cm.weixiangji/databases/MessageStore.db

                      Filesize

                      4KB

                      MD5

                      f2b4b0190b9f384ca885f0c8c9b14700

                      SHA1

                      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                      SHA256

                      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                      SHA512

                      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                    • /data/data/com.cm.weixiangji/databases/MessageStore.db-journal

                      Filesize

                      512B

                      MD5

                      27fc4f3e95ab420780d23a138f99bbae

                      SHA1

                      3a9759a2e64243c23db25b4031b8688730cf6393

                      SHA256

                      4669d026172bbed8ef54b6a3ca7cbd28d1cf911fc40c65a20e433cafa195e0e6

                      SHA512

                      2ebb6a55c6097dd1c8ca3ab2ac5ac22a0fd76787ef09e1d9238e7d44395b8fa4f6d2f46d2d4404e42ef2426ad661805caf865edd7d3c41ca652246d7d6fa4fca

                    • /data/data/com.cm.weixiangji/databases/MessageStore.db-shm

                      Filesize

                      28KB

                      MD5

                      cf845a781c107ec1346e849c9dd1b7e8

                      SHA1

                      b44ccc7f7d519352422e59ee8b0bdbac881768a7

                      SHA256

                      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                      SHA512

                      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                    • /data/data/com.cm.weixiangji/databases/MessageStore.db-wal

                      Filesize

                      48KB

                      MD5

                      76d90f25909089ca32c2c638e46a6947

                      SHA1

                      bd3812e0687856d8a6b4e776fd9f9f9b335ff0bc

                      SHA256

                      8ac7031512047bec555a7d851245a01cd0c03c1d333f90cd8ce7cb5de9426e2e

                      SHA512

                      d2b17d9c5e7e92901badce1992fec66651c06c7f7778d13b6f5893b0628c4b769ac6dfa1ce188e06f460c7fec0842837ea316720944af4331d00fbb01ff5a143

                    • /data/data/com.cm.weixiangji/databases/MsgLogStore.db-journal

                      Filesize

                      512B

                      MD5

                      98d3dbe00b83e5d0f9f989c675a20a2a

                      SHA1

                      989fab72369c1bb5bb5dfc1f9214db3aaa76ce98

                      SHA256

                      48a39a984a193e224166b2b009dd6b29c958c0b5d3ead00d79c7d80ebfcd1516

                      SHA512

                      82973124d911bede6ba853d2eb03e9e0d2612857e45a264f5dadfce6b14964a9a13df24e209dabc07166cb4a6491f0ca140addf078930fedd86c8cdc5b696430

                    • /data/data/com.cm.weixiangji/databases/MsgLogStore.db-wal

                      Filesize

                      60KB

                      MD5

                      284c7b150662065a744a473b777b87aa

                      SHA1

                      55523df7e272b179ebe98868479685a36cfb5692

                      SHA256

                      75817182a7b92677a977fc14caf4019812ba44ddbec348ae044c39e7c382c6af

                      SHA512

                      160a97746cb94f52e2c3ea03fbc6125fff167c33d5a4fb5bee6e53b62b56462ef488b51427b5a815a151dc38e9ae99ebc6213db1108edb424094201dc21f77fa

                    • /data/data/com.cm.weixiangji/databases/ThrowalbeLog.db-journal

                      Filesize

                      512B

                      MD5

                      041d0b46a92dda36d6ce0a34c1db44ab

                      SHA1

                      2ebb805a28b44ed0a1d9c5cff45fcc79ac92a8b7

                      SHA256

                      19320822cc94f985f7d49202f7a0ea5d357a8547c27c1ba81666399ae829e8f8

                      SHA512

                      00958c633c823cc2fe7b4282eaac1dbe125aaae12a348e8fb7eff31bb336208fcf158db3a3ff785a8e6353fc1065043893a3849a6469c823fd903db737598b35

                    • /data/data/com.cm.weixiangji/databases/ThrowalbeLog.db-wal

                      Filesize

                      32KB

                      MD5

                      b328ea1e713b8fe2f94cb1e7dd7262f8

                      SHA1

                      0211f4d9f08235199c5d633f1a32729b8df8c010

                      SHA256

                      39a7fce6fb4c57dda9326a632d3da5ce04bd4b005e8c02a3b6aa5ec7ed2ab17f

                      SHA512

                      b3d2a82c2ba884ef72c0837db04720d758e6552678b613ad009676de2ee152ae3bb54f57b3f4ff8964e9e020c730c783db3cc946082804730e34370511389f7b

                    • /data/data/com.cm.weixiangji/databases/WXJMedia.db-journal

                      Filesize

                      512B

                      MD5

                      82c2008c37401dd33bfe70811c6ae922

                      SHA1

                      53b14b749e8654b1989160b18a8824537370b5ea

                      SHA256

                      014220d521e458e85dd8a565b98b14da14d8a31cf49f55daa309b68103c3c433

                      SHA512

                      13c08660e152581ed09506324a875736d25c05310fb974246cb7c12446af85f5d09f721d53c5d50ba5e0527d47e6429f33e3b2167977793ad0b2d98e9b61783b

                    • /data/data/com.cm.weixiangji/databases/WXJMedia.db-wal

                      Filesize

                      20KB

                      MD5

                      4191a391e2f2ef1446566ac2a9cbe299

                      SHA1

                      0d5a699a120913464eba5fe01e740c29d4899b1b

                      SHA256

                      6d39dc34d0679d124697d60606ef54bcacaf7b1bb93e9a658e5ecdf86adb7c0d

                      SHA512

                      30d24ee1ffa2de387b31d2477f6a3e24399de43de95e6e2ef5634b34352e103dc23374e253d7ccef1cc791fbddbdf24fbc60cd5e10f9faf291fd641891804676

                    • /data/data/com.cm.weixiangji/databases/accs.db-journal

                      Filesize

                      512B

                      MD5

                      01140d3457beea31df366fc74613a99c

                      SHA1

                      3e37f956bab047902f73d54f7d491d0d915fce4a

                      SHA256

                      1f28219828dc05f573ca1f6b28a60e37d797f52cc1e315d8fa3699029a943dab

                      SHA512

                      ff68aeccad0cd01d2a6b371b9c9f27bcd7a0d73940dd470137db2391a900f8593743ba5c9fa3358090717bf278e9cf82532da593d984d5e568644688bc82af98

                    • /data/data/com.cm.weixiangji/databases/accs.db-wal

                      Filesize

                      32KB

                      MD5

                      7bce9d960a39767cdc91e3ea15551060

                      SHA1

                      6079eaef4e18a4e008fca6c24c448ef6182c82a3

                      SHA256

                      f2f2e3a554c9f4a1cf6c8064411bbd09136ae0f766854c1bf46897644f701c81

                      SHA512

                      be3c5184d2290c0512d94bd8924f48d14d29a09a7455aee62d3ecb66bebe94629589abf8a64d5872f1b0a5efe59e0eb65b3efa7fed75802ab718773237eb62a7

                    • /data/data/com.cm.weixiangji/databases/download-journal

                      Filesize

                      512B

                      MD5

                      90e49d7315a653a028e6d5c726b48006

                      SHA1

                      e1c36bc83efd4674906e90263c9f5049b19a2d99

                      SHA256

                      587f5812d22c064375947bc89430283a9adf41502086f735300c05df7dc57ae7

                      SHA512

                      42a96c1d2589b2f71b35fcbce58f6acb52c2ae874ce2d2dfa1ac6ac1bb8d343afee7fb9e3c5353aeadaaf5c6d471e756043ccd08f7fda543d520bc96bad1272b

                    • /data/data/com.cm.weixiangji/databases/download-wal

                      Filesize

                      20KB

                      MD5

                      d4df358961d131ff1a54778a802ea2f4

                      SHA1

                      7cc97eec1594d7d7ce35f603b323cb0fef1f0445

                      SHA256

                      4b8703a971a1bd2c76015a83860ae9d65873dad8c72dcfd70b6648cf0307d638

                      SHA512

                      8d0454a98850487dc416a55fc727ac373f4e1450043b0b1d8614296754525bc0a96e63c3ff47a31b0a3b0c87c4892263b04b669762521b090aa6b23a0c625d86

                    • /data/data/com.cm.weixiangji/databases/message_accs_db

                      Filesize

                      36KB

                      MD5

                      486e2bac2b3e9e1cb411d2838a4854bd

                      SHA1

                      81dd0a7537f4af319b830ae834908986be85da8b

                      SHA256

                      5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

                      SHA512

                      c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

                    • /data/data/com.cm.weixiangji/databases/message_accs_db-journal

                      Filesize

                      512B

                      MD5

                      f63ac72c4fea6e4560208d577f6de8a4

                      SHA1

                      0505865c4d8a383e4fbe34b2c4870453848f90c0

                      SHA256

                      57a6af22ea225b6ebed540a105984ca8b8182cdd0a9df2671a37222925928a6a

                      SHA512

                      327207c4b58f067dce94ab803a75b51f9372a7ae5c7dc71cf58339224d4a5f95135957509c3f490654ab54bb9da2bcafaa7e1dfcc2bb5a91b3eeec7e5e9b7f0a

                    • /data/data/com.cm.weixiangji/databases/message_accs_db-shm

                      Filesize

                      28KB

                      MD5

                      ced25a7dd7ad2338022baf324da460cf

                      SHA1

                      ef74159552cb6e8643f5b6472c3721fd4998a02a

                      SHA256

                      06d47dc72fb04659436f83eca4a46b4ae2828a3d28286d8415f7b2340ab7055a

                      SHA512

                      1d85160682846feb87235c202984c76e038111a78be98c5e64a568892ce56c1aebd2a2fbacd12847c2b40f688448f1a703d22db5e80ab577ca93c1e052024921

                    • /data/data/com.cm.weixiangji/databases/message_accs_db-wal

                      Filesize

                      48KB

                      MD5

                      8154ef6c2526792f46bc2eb54e0c903b

                      SHA1

                      ac649d7d1ea3c583e9bd8641911fd7d9b32f714b

                      SHA256

                      06ab74a18de586759a254039fed3ebfe624a530027c1efbcd401a03c6697bea0

                      SHA512

                      368d9005ba32729f44aee48c2290a5db86ac1e7018516d9602427f76a48736bc0092e602453c248edf5afc4860aa3e7b2afb798a12c7072afbdbe78206832883

                    • /data/data/com.cm.weixiangji/databases/xUtils_http_cookie.db

                      Filesize

                      12KB

                      MD5

                      3fe30614d7e0d11db870b4624f6c50e0

                      SHA1

                      053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

                      SHA256

                      67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

                      SHA512

                      c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

                    • /data/data/com.cm.weixiangji/databases/xUtils_http_cookie.db-journal

                      Filesize

                      512B

                      MD5

                      6fca669db46b9d1f06cefe8590abe648

                      SHA1

                      c7e731b5fcd72c52bdf51addaa7d36fea0af4977

                      SHA256

                      1b4a8e964d825a5fefdfe742bb9edb7f665ed9f230a6f5446cc468724ffcb595

                      SHA512

                      0f5bf26c0d9fa2075b4d559e5bc18f6d051190e5690021dfa3fdfdc9b94664d376d73f588d487a96501d7269ae4ad651fd98946ffe5b81f0aea747965ec67b04

                    • /data/data/com.cm.weixiangji/databases/xUtils_http_cookie.db-wal

                      Filesize

                      16KB

                      MD5

                      bec55c535a22abab7f4aff6a2c5b906c

                      SHA1

                      07dbea6c25eb10d303dc6d54fe29c93de2ac3702

                      SHA256

                      0df02261c70a45fa33ec84bf33ec014b3f7b3d841e221d24e064f3e2240020bb

                      SHA512

                      14b1a5cfca1c9f5ce09662349c5a3102ce24691d968b27a1269138e425a708d933ad521bbf16cfdcae727a7904cf135a2f4c45332d6b0f42e644d63ba2fd0cb5

                    • /data/data/com.cm.weixiangji/databases/xUtils_http_cookie.db-wal

                      Filesize

                      4KB

                      MD5

                      3501869efa6c468bb5164102d581d16b

                      SHA1

                      a7637d1a814ebe2c80ac1fdf7a1853a2478f6989

                      SHA256

                      f62a97a714a094cf8f984f0cb07dbd4b23dd0576dafbabcca1f6030d47bdf346

                      SHA512

                      da838f13dd9419398c4c976783535195f0a926f958b8b54b183ba0fdac1bb9e8e5f0d2a02c511b021ad45cff1f7fcf8be1ffb036bf09869115a81cad196a5297

                    • /data/data/com.cm.weixiangji/files/.jglogs/.jg.ac

                      Filesize

                      40B

                      MD5

                      cd05e396e69300363214cbb5e0cad746

                      SHA1

                      847b35f4bbb04c07c10e073b3bdba92c0936ce20

                      SHA256

                      92fea1d5bdb51fa91125668239dbf1b3b32135ebb9162c508b83d4ca264e713b

                      SHA512

                      19ea888e0e068d1cd6f1297e3a9062218392140916253898316faea69e18307968f838c66b8b81ad98cd3430e73cd776e9797383a01cafa1b53b8c3f1619509b

                    • /data/data/com.cm.weixiangji/files/.jglogs/.jg.di

                      Filesize

                      340B

                      MD5

                      ff02fb2bf401024188e8aba44245f1fd

                      SHA1

                      38aea96080609001a0294fda80756214aa5eb800

                      SHA256

                      39d0fd0f54a370e58107ef9d9b1bfb1edf097b50c39236000f93b16e94b1dda0

                      SHA512

                      d7a525aab1a0ef280200255c0f068b288940a78dd1ea4ff9ccdc5cf287794230afbea831f820525cd8745d46e55e7d15f1f06ff336e302612561f7dbb025d15d

                    • /data/data/com.cm.weixiangji/files/.jglogs/.jg.di

                      Filesize

                      340B

                      MD5

                      9c7f8d2f7d8b4c814bc9db71fb75c39d

                      SHA1

                      68f965aab8b92b1af8bca9550dd1349ef1315191

                      SHA256

                      dd58faa6dacf2f053197a4f772e2cd129deede05d5da88b84fe85e67db8398eb

                      SHA512

                      b0c8c8dc11dfba14cda875d70fda48875df97cc820f9a87ba415e3f7dcac86006a4bf331b1e22f27e3dfbc42e31e79c54d4487db9a7b4746db81e25c2f5e65c6

                    • /data/data/com.cm.weixiangji/files/.jglogs/.jg.ri

                      Filesize

                      314B

                      MD5

                      f2d1b654f2ac13651e8b6021a4f01e24

                      SHA1

                      d530692a215c735ccf1496224efbd351ec06d644

                      SHA256

                      16b7844e3e1eb24dbcfb415af49bf0703014051718d9dfc6696ebc6aca90b791

                      SHA512

                      f76abb18e3b3a50d7c097e8c4d5c5f738810537aaddea03f4210b1445f41ce45793a8e053d1c3a0eb77f494d3d472798b9e09a2615794d82a09b869be22fb579

                    • /data/data/com.cm.weixiangji/files/.jiagu.lock

                      Filesize

                      27B

                      MD5

                      a22a7069878a0a4d822a2d4ff812d14c

                      SHA1

                      222743ce4377b28a032e28f98ba499684d110e0d

                      SHA256

                      f0727bce927a8a55970d2e33a9d65c497444d98f12965c3cadd0fb97c22479c1

                      SHA512

                      1c2a6b7d56dedb267982cce274e52c4b6d9ea67776512278dc193a3c3f8f7e3bee367da2759510173c19a5564b04655721cd5ba4ffd26488e7e52f74be3d940a

                    • /storage/emulated/0/.DataStorage/ContextData.xml

                      Filesize

                      111B

                      MD5

                      7f6c6429c155895b4d0a9fe3d3660bbd

                      SHA1

                      df13cb907de479b8592d29be4dbefcc8e4cdbb82

                      SHA256

                      70f9197a3d3d16b3d8ffbfa320a9f5ecdf9b5febee372cce17bf4273216265c2

                      SHA512

                      bd210ba36d82ab302b82d65c8fa8a033b008b0f11f4ebaf5ff72c2eb8ae531c5c8220bf7812ffedf1c4330c87b7a691f92665b9c92875452bcd41145bf762f98

                    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

                      Filesize

                      340B

                      MD5

                      9083845c4638f940b09117f9cb5cd8e4

                      SHA1

                      c7fede4f7025cbe7489c072cf0631e8d6b393b79

                      SHA256

                      7c72aabf0ee1b01b32ea628ab059d5591cf7306ddf92b04f49622f02010772d1

                      SHA512

                      ae7aa36f57f87f0a42072605e92bb8720a4c22fc32da6eba643c2260d15b91c8b377f5befd51f3f91069c24751f95cb9f3297adcddebb63e8477a9c57053ab60

                    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

                      Filesize

                      65B

                      MD5

                      9781ca003f10f8d0c9c1945b63fdca7f

                      SHA1

                      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

                      SHA256

                      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

                      SHA512

                      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

                    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

                      Filesize

                      111B

                      MD5

                      6947a2e6cc6e06b1addbfb82f65a2065

                      SHA1

                      933bd403b702bb9cb77f241054ae0b8dc8171135

                      SHA256

                      33223e5104862d26717518af7ee8dbd1cc9ded98b7486e0125bbd9d0258ed209

                      SHA512

                      edf47a0538f3649fb590327e68f4723c1ed0cfc70eaa664b8c8c4412f354c0fb5e57351e664620f84bda7d46ff6e910e42dad0a23c730c1b9b87dbd7f41f9052

                    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

                      Filesize

                      167B

                      MD5

                      d970294f57d2b7082d0d1b4505ec1613

                      SHA1

                      62e380435687bb86b99afcf6fceba0727db2db4e

                      SHA256

                      9291c782dc8e62d4b442f03c969fd668238f1dec61659da8c6c642bde9c92769

                      SHA512

                      2a1a73d6789ba37ff1791507f86694d3a6738e6134483ce5a445b8b4c29c543b8773c0f269504fa4947712cc59bed87409ee61f202368a40122a705dd15e7912

                    • /storage/emulated/0/360/.deviceId

                      Filesize

                      48B

                      MD5

                      1d8d16c4e3b19ebf18988530d9b9a757

                      SHA1

                      bc94c1cce05cd848a53271ecb9c5311e27ffebf5

                      SHA256

                      abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

                      SHA512

                      4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

                    • /storage/emulated/0/360/.iddata

                      Filesize

                      32B

                      MD5

                      a439b84c5eb64bd02412b37bf8b21372

                      SHA1

                      2870e510aa7ae5ff75d9c2da6ea0513ab286de65

                      SHA256

                      df451285098760701198ff2593051071863d8a4da91ac808e12045b3c1e59226

                      SHA512

                      2ddc6ce366cc2326fa00aed9cfdce33d70c50286e677f93a6ea2e01c09f47498b594105e9014ed0a0308e556992237a828edc94f5c65b2b7322c11bf7d69cb4f

                    • /storage/emulated/0/Android/data/com.cm.weixiangji/files/tnetlogs/inapp_20231226.log

                      Filesize

                      544B

                      MD5

                      b0d93ee904b41b9a40d060011fee01d3

                      SHA1

                      4f923f94d64e214ccf3d9c5e28fbf2cc13fd2a36

                      SHA256

                      f37c4dd26981060fb0e33d5f7e0e56cffe289351be9a5cb0e2cda7107ababe2b

                      SHA512

                      faf82d04b16b711cc713cce2bdfc16f4b32f31af4cadf9bd40f2975c1d2bdbc5e026d522034c85bacc98a985536200b40a41e3f5b6944e1b79dcae235e23ade2

                    • /storage/emulated/0/Mob/comm/dbs/.duid

                      Filesize

                      458B

                      MD5

                      4a7af20a86aac9cb4594a673fac4affd

                      SHA1

                      d4129ac928e7316602f41b410f326fbabd0323a5

                      SHA256

                      14a36ec7fb2a6aaad100725d4d9662ac45f9e7199a0a1c05586a5b7c79992c8a

                      SHA512

                      0ba43967c041dc85fa4c05bd643a770778c4f012b97de7fa5ff41b82d5fae40e2e0645224bb9b53b4c194b276e522c148a54f9ac874649dc9ff9106a7b189026