7aa0d59e9bcdd2d1a3a08fcd53a24c5781abe68f3ce86798b3d619eb91b67cd3

Analysis

max time kernel
2717210s
max time network
159s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 19:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7aa0d59e9bcdd2d1a3a08fcd53a24c5781abe68f3ce86798b3d619eb91b67cd3.apk
Size

15.7MB
MD5

988fa1ce804e49789453798f770adb8a
SHA1

917b723c072aa22260d5d4efaa37c5e1a200972e
SHA256

7aa0d59e9bcdd2d1a3a08fcd53a24c5781abe68f3ce86798b3d619eb91b67cd3
SHA512

781622ab38a5021d6c29bba90007847f50d169792d9b186da15a26697413b0059eb067d120eb8cf68dfd13954969828cd50b780810c8c2352242af887f663d8d
SSDEEP

393216:/bqHxht/y0bYpO/qLNN9nEy/l7QC7z7ZVp5d8JcAhLeUwg4xOvpk+kV:/eHnRzbYpOwEy/l7/d8iA6pLV

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.leduo.elsxxl.jrtt

Requests cell location 2 IoCs

Uses Android APIs to to get current cell information.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.leduo.elsxxl.jrtt
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.leduo.elsxxl.jrtt

Checks Android system properties for emulator presence. 3 IoCs

description	ioc	Process
Accessed system property	key: ro.product.name	com.leduo.elsxxl.jrtt:lebian.dns
Accessed system property	key: ro.product.model	com.leduo.elsxxl.jrtt
Accessed system property	key: ro.product.device	com.leduo.elsxxl.jrtt:lebian.dns

Loads dropped Dex/Jar 9 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar	4270	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbmust.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar	4211	com.leduo.elsxxl.jrtt
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar	4302	com.leduo.elsxxl.jrtt:lebian.dns
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar	4362	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbsdk.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar	4302	com.leduo.elsxxl.jrtt:lebian.dns
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar	4437	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar --output-vdex-fd=49 --oat-fd=50 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbui.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar	4302	com.leduo.elsxxl.jrtt:lebian.dns
/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar	4486	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar --output-vdex-fd=83 --oat-fd=84 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/files/oat/x86/runtime-dex.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar	4211	com.leduo.elsxxl.jrtt

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.leduo.elsxxl.jrtt

com.leduo.elsxxl.jrtt
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Requests cell location
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4211
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbmust.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4270
- getprop ro.product.cpu.abi
  2⤵
  PID:4380
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar --output-vdex-fd=83 --oat-fd=84 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/files/oat/x86/runtime-dex.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4486

com.leduo.elsxxl.jrtt:lebian.base
1⤵
PID:4240

com.leduo.elsxxl.jrtt:lebian.dns
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
PID:4302
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbsdk.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4362
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar --output-vdex-fd=49 --oat-fd=50 --oat-location=/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/oat/x86/lbui.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4437

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar.ext

Filesize
75KB

MD5
8ef5e5a0eb04bb111023892f3c8f7cad

SHA1
302ece4221ffc78475597fbcca05eaefc24b0eb9

SHA256
1c9f075ef176720a131ccfc3d08a26a83d58a1ed87d27f662929b2a5629db70d

SHA512
28fc9642867d3c4eaa550d89ceb28b1c3d97dae374c35902df9b650217d68f4e8be170561bde75d7681b55e48b9c672ca3fe97eb27b7cb3df0195ad56ff2aa4c

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar.ext

Filesize
812KB

MD5
06c2684581f3a3bcdd4b83cc8ddd9de9

SHA1
c4cd6a5e3137700f81f1f0e13627518e8ddd04db

SHA256
4a72918a637d878db6f334bbbac0cd7a411cd5d27a8cd3c95db77ca810e1e7fd

SHA512
92147034e0f44dbe7c257e7032df94525ba4e2950aa4af8affea9d7aa8c71d5f500e2147f161a62cf0c3410ed831e7b8c28f39dff4d0a8e709b93f7fda2cee82

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar.ext

Filesize
280KB

MD5
e771340a0dd35b758ac58b6a61e00ccb

SHA1
a5ded835dc5c6e876058425c749dd2a35c469d98

SHA256
83233d9c33f1eec93f10257dbaabfe06742923f0b2f8a9ac977a077252c19d0f

SHA512
d93dc8b6050957560f20b1109ec4a8e401ac46bb171611d00fe9853e3089268fec99677a591f568dca4bd0d929055fdd526b337ce0ccba6159bd9978603d056f

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/lbvmrt.jar.ext

Filesize
1.5MB

MD5
5b6d9d2314fcba724b8fa7de4b147d37

SHA1
7a7864bdeab063fe784b82f998323fe89ef819ba

SHA256
92b4ea5f6d1eae48c8eed58ea2c2f299ccea3bed1deedbb6d811e075a9d87612

SHA512
76efa368719d925a612129034bc4d3524bf1b13e6c981be2d996573074b3c1b5efd53e39227e13831acaeb35bb1b8735e243bff5e39bf6b1ec315e8c7933083d

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/liblbsdk/.lbsdk.jar.newsinfo

Filesize
280KB

MD5
42ba7e611e581042ff1c845a504e019d

SHA1
7f3329e47dea575f8690eb89a0234c7aba9e1156

SHA256
16f7fdfe962b2f4c61fac5edebb1d7dde9849d25c2deedffe3f4f82713d14cc5

SHA512
280b4c7951d85afd1a6d0a12aa533638d290e914fdb9b69313c90783004b9ca85014cad944d46b196652e02d2dbec94a8409babc9e0e0a6e93dff10ef6ed37d8

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/liblbsdk/tmp2991403487956387702tmp

Filesize
1.5MB

MD5
b1d8b4defd68b5b4b73014b2add3c2a3

SHA1
161661bce2cbdae7a044a367bbcbb321fe7cc937

SHA256
e2a7400ee2f3ad41d76a4ebc71f7ed1070d28e3cf187c965224b005ae6c65403

SHA512
8e610024bb5702ef9ae35ace4ca453a5e56a38032ad4d84133569d42bcddd61bb5e56bbb1e4337b5d70c1c6362975f02c76bb24fd40e3998bcef2cb5a7a401fa

Download Submit
/data/data/com.leduo.elsxxl.jrtt/.lebiansdk/oat/lbmust.jar.cur.prof

Filesize
191B

MD5
65a2e43625ae8007c8f2264f1edb4151

SHA1
a99c1fd3b5df7863a1c3c7ab6793a367cb976595

SHA256
f66aa5a4ddbdefd80cea4f8446ef90d70b7b1dcbca99e2d38662687aa09b799d

SHA512
0458c36f8781952eafe746b44dd27c23697a858d744f6f5e065369074cca6ff6465b4f0801ee3e810cb23ee520a8d8ed27fa6ac4fe5875e6de9b15137282c8b7

Download Submit
/data/data/com.leduo.elsxxl.jrtt/app_crashrecord/1004

Filesize
231B

MD5
875d475ba64513903c8289935c80cb1c

SHA1
9428998d114af7918f2eb4fec878996375f549b3

SHA256
f5584639bed49a64b5b53d1e28f10a2baa5543c537830b6250b64428c77a9c58

SHA512
2ec41553bb010fb545405bfe7ff877816629f059c2856e4c5362bec4e5c13ac5d3eb05d127c70ea3b8022217273ea5b3c69db589b6bbaf27cc2539d1bda11d4c

Download Submit
/data/data/com.leduo.elsxxl.jrtt/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/Reyun.db-journal

Filesize
512B

MD5
b9df3b5a90194178279cde167f2a5a86

SHA1
b9227d79a427d09df1a50cda1b0d0a693de67120

SHA256
4e023f40e5a44086eef59cf66d0475a762dcd5ed908f061a8dffbfdeae8bb6e8

SHA512
c6b2d9c8e5094ebfff31d36786cb50375e56d638468d8ceffb3b2d6be13026f08ed0a201eef63406578a127dc32bc204f9f499c1d2121e98e1f2fe56d9def0c4

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/Reyun.db-wal

Filesize
36KB

MD5
16b8e26bdeafaf76a2688c1ffc7f9bb9

SHA1
8a20265bfc5010fb838494f86e8523e464770cb7

SHA256
9a9ed6393e2eb25bf4fa9a8f7e0ce3466265e2ae121e12fe4554375bca65a0b7

SHA512
5cc61a82062b03d30dc7b6c3665d79e40427c85c252cfae450cd517caf079633d8ef2c1e987118409fb95bfe334c6d61f3910b81f6b269226f393e6737e28293

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/bugly_db_-journal

Filesize
512B

MD5
ddabb8ce8f6764b4b27588027a270bed

SHA1
95ed3d2951ef7ea44fae0fd0a833d14adecd4a5b

SHA256
00f89c7a021bdb041cdf4607375e60889f51e5f77ce01df9d18f2ed453e27702

SHA512
855e9f52b3c3c9fe49e2762ee747ad70338aef89dc95d58f8d9613b74a5dd98f324b8c8f6af2118b86c26488328abef3e5a3325dda41b1624c187efdeadfb691

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/bugly_db_-wal

Filesize
72KB

MD5
8e5461ee0aa04c7b44bce79ccd7ab9d2

SHA1
c79ed83272ccca31c1fc3349afb5f8c2426093bd

SHA256
961dd2c67acb7c83335043ecb233a76c23a4e827e1bee368d9e027d427b89e11

SHA512
3321c4a31f5076e5d638128fb771a54e4f1e24d705c93c650acd6a685b87bc92c63d54d50e55567e8cb22a3ca53924549bfa49253fafdcf378f4ff0f54e8d5f1

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/halley_schedule_100__HttpSchedulerClient.db-journal

Filesize
512B

MD5
b86e39ad7b4fa34c4fa3e154532f9d5c

SHA1
82a5509613152c470ac698ce18987e9858d5b448

SHA256
e25ab00bf65ca2e5bb449ac2bcf365f3935f7e8617e5fcf81d6834da75b8a299

SHA512
0e44c434b543050d2dc2b0605deba52c4750086fa0d20fb1b1f6dc3acc6f7934e911c00f7067d24419fd1f08cd1d3f9ddc829905a9e91f645c6e6c633f3ac532

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/halley_schedule_100__HttpSchedulerClient.db-wal

Filesize
32KB

MD5
b75ae40147416c5ed4e6df0280422071

SHA1
cd0d653fcab70a7e6d83b5b18f0f12e819b6e8bc

SHA256
cf7a5954890601dfc41d78f5c8a25ce54c7623b5697aa4567ccb61d0d24ace08

SHA512
cf246a306f312519432d4f7f762ffc29301dc33d268d6e37550094190ae9f1145e21b3c7aba57f78d781e8664bac5ac8e7b4912452f10f8daccc0b64f97bea60

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/halley_schedule_100__HttpSchedulerHandler.db-journal

Filesize
512B

MD5
e1686dd9f2964820800bf7a5cd3acf72

SHA1
b840c124abd81a37b09cb8e351cf5ccccfb80f98

SHA256
989caad1d16c6f73fedc6acaed09661e629e513655d6b3f5c36e321b424b514b

SHA512
4e0a5aa88ca69ed6cd5306bada7cd93ac3124dff6b94fc964e8026adf8f18a6824a6f330de2cf2553b4f4693df66f3d8cfd24fd157d00c4cd9c8e74f8a965e72

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/halley_schedule_100__HttpSchedulerHandler.db-wal

Filesize
32KB

MD5
a26f534cd260fd897783647ac484fe01

SHA1
e41236ac42ddf591efac181b36720cbf7a0ebc49

SHA256
96042136c06edbc9063ed5e3574d79574183d9186a353478e1b49adb6d023645

SHA512
dcd903a5a591e67bfae22856b37c9a23df8e49291c7d52b3d867eb2b48d877426cf25faee80b933f2ec1087ee6d73be32813d5e05f8dad307d64c7caded9e645

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/lebian.db

Filesize
7KB

MD5
e013e98cf3c7b34ca4bc08ae285e0bd4

SHA1
0edcb01bc4213bf31ffaacb954f6ccc8f6e24772

SHA256
975564f7d9a6f738a7f2808e4691ffc5948e5fa71ae46c039d3cfa812abe665d

SHA512
9160653f91d64f0af5bc974a76cbefc67db1e4501289f47575c6da6f115978d84b1505d7cc004899aad3f209527e130e37f1aa9c4c61b935c15c93a2a9990751

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/lebian.db-journal

Filesize
512B

MD5
5574e2db17e3c8a05ed00753cccc4c21

SHA1
57929f6d157f862b318850d843881d71929196ea

SHA256
d6111d781722f2976ec548a58962d80453746e11822d410800295f002d1d0504

SHA512
7c1290a859441869f5626d7833a6116170a2b40097770746195102093190d2188d6adba7fabd12f7e2b3fe2a6f99ce237cdf3872dfa7e86ce4242c82cda3d014

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/lebian.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/lebian.db-wal

Filesize
56KB

MD5
8f286d3a41e8cedee7ca267201b04b8d

SHA1
cbfd86fa2100eb7d6c2d3671009460ca5c74babc

SHA256
35f27f654d6ac027b6f9fd8304ef466bf48c40479cc715a0bb04119d0efbdd6f

SHA512
07a3871e8e8be9aa3afdc6a8bcd81c672e79d5a9188c28bc52e70438c59ba4ce0399810e5f7bf2e98df57b6ab1fbad35dd72a476d497edba6a1ad1ef27f854fd

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/okgo_server.db

Filesize
24KB

MD5
2e60a8ab0b7ef4889e09af34ff80e134

SHA1
d601ff5601bfd256a5b2a53d53019c58fe7b6726

SHA256
e0a6df61ec00a2986bc500aaae290fb9af4b77213ff10537ddb61e86b9a63a0e

SHA512
269ff57285515972b97c40d71899876f6fb6a46959ac7d17baa01ec83ee246c2cb44a87409d0c32ed829f69336a8757700f24335709d2ced7332c0bfc0f23397

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/okgo_server.db-journal

Filesize
512B

MD5
7d5cb6bd87d4a467a6c9d3561a209c67

SHA1
49f9c736c4bfa6593c0f18cd11204d87b0b4b89e

SHA256
5e267278e42a276064f1bee6bde315b09e987c38a624dda9d54cfbc3ac7f54a5

SHA512
403b39804697820416a3b75ee4b54e6de4bc59a31d0c0c7eb87a1dbd67da80eb154e5a5fa607a9f7b19fdd9876c873dceb7218240cdfdefa5a43f41216b82c45

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/okgo_server.db-wal

Filesize
36KB

MD5
f32b7af3736cf03b12ffb3d1482286da

SHA1
ee9261f5f1b42670923dc4a79ccfadd605917f11

SHA256
86576e62c39063d41781fc14344b952c2fac8656a895efbbcd6e4156c8c0a24d

SHA512
48904eb7ef4a0413e7bafbbacc2ac0e133b3768c621544ddc5b39f34f3e22521ffc0a0496cfb4d4016fc89cd2c42e0c657d0a8582933b2be23ffbbf6b4bd31fc

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/report.db

Filesize
20KB

MD5
817f79d9af95b154e5575b6d00c03002

SHA1
3fad8a41e75d835e5e9d6b05d887d236ba60e181

SHA256
7b21750d15a34c0b70cfb5a3b6a64fe3e1995210871f703f686fe0b665774eff

SHA512
7094c630f9ed7974016066ef14d1cf5709ef7481a3a49adb9ab1bb5ce3c4db5c412b70c8fcd731a68fd2557bfae605744527d473317634139d616ad5859885ec

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/report.db-journal

Filesize
512B

MD5
00a1d078ffd770cd53b70217fe3e10ad

SHA1
64874fcc27da8b556b43bfb0c2c1528a4098c807

SHA256
42ea2a563552d9a30e7cdf0088dc5f37976aece5fc30316ad2dab78d6df811c0

SHA512
0866629554813f1b74db0e0a69c197459864a3083b5f5ac3f6b8f7a209177d942d6937f067f5ec912bfeaaff89a7cfdfbf629d179370e771dc0f8364cbe371b4

Download Submit
/data/data/com.leduo.elsxxl.jrtt/databases/report.db-wal

Filesize
32KB

MD5
899d93b18eb66a96ce781cce7d0f5b55

SHA1
cb089aceb64d6ef14c3f2c9334f5add7790cd702

SHA256
3cad8377c16c319ecde2e9b55268c11ad32e8a2f0a8418f012f33b5e8ebeca8c

SHA512
24c9c214343ee7dc40fb3c8e74c0e8a39fbcd0f2023c5fd5a11eaf2f3798cb9f71377d07b0e09e0361d0dbd3315f938c2efb731a3bb830f070436ab4d446a5e0

Download Submit
/data/data/com.leduo.elsxxl.jrtt/files/GameDataCache

Filesize
128B

MD5
7525d5c60a4dd42ac9bfad13e78327d9

SHA1
02557f32cfe75872663ad775f034a60bc21b55df

SHA256
7e78205b8a267dddbaf7d9676d5a904c0a20108e7fca2bcf09286fdd449ea26e

SHA512
9c441961d53e5b44b51419f6d7b06dc387764de82c894d13e88c6d85be030dfe85fc18d6dfc08fe08146003c0eaae5fd81f55703b917f6effe95ea657da2f2f0

Download Submit
/data/data/com.leduo.elsxxl.jrtt/files/GameDataCache

Filesize
128B

MD5
206967e8068191ab10f399157e1284ed

SHA1
3c2e8603d37e840dd154d6b92fe404df5226880f

SHA256
a664a8126f50a3c3f41b3edb5310a3ab28cd01389f5b1c9dd00b8291477cb1b6

SHA512
e0c6783e1883d1818534e21ff704e96cdc4b81e74c4ea3fa1ed8efe8a30a0561d84547304b6620896275d9a79b781696f8a792e17da5a0e326b7d61515dc3aa3

Download Submit
/data/data/com.leduo.elsxxl.jrtt/files/GameDataCache

Filesize
128B

MD5
b4501ff541c6739146df06364cf43865

SHA1
2bcbf0964ddc11dde60d8d47ffd5b2865d7194c5

SHA256
8145c3921ae60affde24df668b28beb2772b0f71ae773edc419f77620bebe51d

SHA512
c3278b3f7cb6924fcf33375cbf1454632454c50fa3ca11468bc9c47b101944cf05e58f091c6f6c0cd2cb1b2458250459ea50678374b0434330d4fd4c943e7f8c

Download Submit
/data/data/com.leduo.elsxxl.jrtt/files/runtime-dex.jar_temp

Filesize
58KB

MD5
9753ec4032ed4429e20a5d456024356d

SHA1
5b778ab59cc05f141bcd4911ec3cef612336b1e4

SHA256
bfee8180295407f2afcdb07b8a497391c09bc45a1364da54b5e65732a79a1ea0

SHA512
f7691d82712a1d989e338e191a994f13e29141f0b9d642320198d70e5e2db48979844d7d5d6d1646b59784761ab30b425d22956ff3ee45a229616d41766d1d3a

Download Submit
/data/data/com.leduo.elsxxl.jrtt/lebian/lebian_main_background_normal_0.jpg

Filesize
44KB

MD5
21e909506a2f267bce06a33b633758c9

SHA1
cb6b23e8e38821e652356361880b1f6d348559af

SHA256
4ec840fe129339a849c3e6b9264dfd2f5ba6bf38c4afacff9af9ed37b9da5fe9

SHA512
6cef46d5f7acd58204985a5df3691671f9d2f6a7e6851f818dee915b5a2005fbb95a6ad1b4e7fe03988c1e5c8fa6c40a609be03458c7e5dff79b191a43f74ff9

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar

Filesize
151KB

MD5
f2cf516a774f5e019da0a13e80efccd7

SHA1
9f373f62913bad02b169a7ed63aa72fac1cea352

SHA256
dfa38cf97831d5a091f1ed70269754d768d642def8728a99104621a13e80264a

SHA512
f0db8b4891291017977ec405d46deeaea7c7fbe9e3cc47fdcb6f51c95342b6c24617d41106c7462b2d390db84182a3fbec08ec9c5205dea0ca872f6d3730b804

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbmust.jar

Filesize
151KB

MD5
947d7c5431451110704f7a6ac194b390

SHA1
e873de6731173268fc3c750ac05979c842f3a52e

SHA256
0bd130e1f3a6e35d7e4a45ae3811c16adf79ffb68ddf29517bed05c8c93d469e

SHA512
0efdd8e76e4c498b7bce5da52058671067b1dfbae221ff49eb7baf95f722984d2acaa8a71ea17a1b4e8ca783207f0410f4b08989c1781699a3b2fac3cc10aa1c

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar

Filesize
367KB

MD5
28627afd1ecd10ea099d9bcd8e564742

SHA1
fb990d0b01783176d2c78f572223330f63760d64

SHA256
7951662d2e93e28f1d655cda2a5858f4b6bb553cbc5c0c9dde3bd284d7284049

SHA512
8538bac23e185b0adac3e294bca7f015d316152ce366b3818aca0a4319249db6b35062bd9a8891fba5fd39b7ae367a1f8201b26d4937b2d21475a3b098412b72

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbsdk.jar

Filesize
367KB

MD5
e66d1185ca190ca36f1264a36dcb3d18

SHA1
bc6c66052e5c82cca4f0c6ab28a7946544d22096

SHA256
a60a240894af460e383ba44959522c375b59b7858bcdf3a29c532f898fd6b388

SHA512
59439afa089ec4cb5e25da2b178dff4719bef68a13c099172094807f29003955300ac92787063b8cf7013cad53a9f72049e058a1b6c3209298854adc8486e29b

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar

Filesize
137KB

MD5
d525084ebbf36380970813fb085605d3

SHA1
bd40898c33acc97d394c7ed4fe536040342c8e93

SHA256
3430f443a94fe7d25311f392306f76ec5b1e2560ebbd6cb5191b041a6299a4bf

SHA512
5dd91f1198c9511b82f8829ac64e731420622547013a21bd526ad662851d35b07996382f95ce068945d9232c50c3ccb4cfacc3c2507af30cd5eb143d464c0a16

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/.lebiansdk/lbui.jar

Filesize
137KB

MD5
bb9f1ef28fb124ca04f6194594d87058

SHA1
d25e05730e733c4543abb63b7b12d7c3185a4df9

SHA256
3b77220d155d25b069a414c6464ac324a5164bf2b089d0454f8bef897964bec6

SHA512
bbe13982415051426098d4482d8bf06dcdede923ffdc944d4458e65bfb336152efb4bbadb4e8b4a448ee3e59d382cf76dc2d3c9fa2e8c33d452b5d8f18e20639

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar

Filesize
127KB

MD5
0ceb8b4385c4be30025837ceeecd7d1d

SHA1
21974c6655df4b0aa1c7ce96ec6ee3be530f8179

SHA256
16f7accf2ada772befe10605f9b7d76a2128a4a4969c32ddb7628fcf2ea5b74b

SHA512
fcb4df63ca96c945abec69ee350d295b6a4244a6edf1e9e1ad768aca4d1d54f5a1fc69fcb787972d1d58488b941d9424284e686c8e4d7d12e810d741fdaa0ea0

Download Submit
/data/user/0/com.leduo.elsxxl.jrtt/files/runtime-dex.jar

Filesize
127KB

MD5
01ec8617dc7b7371ba57c04474198ee0

SHA1
0f69d864bb5ebf55f67746b66ae89c87aa7e4960

SHA256
1993eab09aeef5ab6f8bd892360c55c07f746c6366603cd28ba9823b223756ce

SHA512
b996e7be4e03c26e901d2c5d9b217c39d664e2601567d900ab265bf9d6b8bcecc6c5114cc298e29ca739e0b4fb4c1a9fa3c837a37d0b2b212fa5aa19c3440145

Download Submit
/storage/emulated/0/.sdk/.zgsdk/guid

Filesize
32B

MD5
51f392d8fd5364fab376a10cf191bb35

SHA1
575ae791f532665b89d9b3f5c1cdb6c8de70d517

SHA256
a84d8a35004eea658ccdbd91c2ef17d8c4836a16d27b5feeb2479ef0d2a61179

SHA512
56df7cf8a225c2f0c8702e9570c09cf6831f5fbd2eff022b5fe5264fa16ab4d99a2f3cc2c55248e45af6ddeaa32b390dd7314ded5c2d07b19eca24ddc6efd050

Download Submit
/storage/emulated/0/365youGame/data/shared_prefs/365you_sdk.xml

Filesize
121B

MD5
3ad337c567dd9c7bab2b03210a7c8ccb

SHA1
5763c50c7fb58b6d2abd4b09806c7a166fec39c8

SHA256
5ce0fc74d4d0fbf856b04672ee51e3c47943dfea7fb88ac47344a79252929bd9

SHA512
1771c93960aff19c8467547eaa9f90cf1009ec8c187d88819bc4797c98f7bc2fd1dcd9ce3c1a0456e208e8e60d59ebd1eb4d8e50dbea51c4443ebc38df0647f0

Download Submit
/storage/emulated/0/Android/data/com.leduo.elsxxl.jrtt/files/tbslog/tbslog.txt

Filesize
537B

MD5
dd0c3e6efcc6ae61032b997d43e0afc7

SHA1
ab3a2725a2e1cbca0cd73ec99c161c082c4a9729

SHA256
9a31643cfb7e22b988f3ff3b05cfd3050fbdb4821a15060bf91cabf2d62c4e63

SHA512
5dc5fc9899f1bc5dfe8fda0162f431b6f0b379fc9d48f7f61746cccc9168c01744671cb88089dc060d7429f31b36ca2152a0bf399db7fe29b068f2b370bceff3

Download Submit
/storage/emulated/0/Android/data/com.leduo.elsxxl.jrtt/sdkinfo_v2.txt

Filesize
27B

MD5
059f9dbecb99ed5d710f5e51d6d2c02c

SHA1
5a1557cc09fa308513c2b5cdd5737c5ebb7f099f

SHA256
4de3264952184bcf57675e60790ae6368da73f350a4fc948d3fe01ce3f4d3734

SHA512
62cb07cc72f4fda38acb14f99d9dd216c823ace5a053e451a9242c17a457bc0a4f472f1afa3525b8f09f1b2b61ba6e6a562a7e489e42d38c7f8675ff50e9a7c2

Download Submit