Analysis

  • max time kernel
    2932771s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 01:29

General

  • Target

    b348d86888b2cf19c6c7eaf9548dfb0d01222febec91e3b35d88239bec0bad01.apk

  • Size

    31.6MB

  • MD5

    0e01254944f04ca635ea7a336b31da2c

  • SHA1

    92b03eec2b8bac2d686ebb847b650da8d26c9a74

  • SHA256

    b348d86888b2cf19c6c7eaf9548dfb0d01222febec91e3b35d88239bec0bad01

  • SHA512

    8223004bf5e83e1098afed593591d973ea498080d2637abfa7734421c1a842bf9551c0f639507dabf1d48692273d24411063ed0f409ec4426791f37e038eb962

  • SSDEEP

    786432:a9wKsR9X5Q+dPPGJvbBh4y12J2D69WEVuuP:a9w7PVPOJz/4y12WoVn

Score
7/10

Malware Config

Signatures

  • Checks known Qemu files. 4 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 3 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 12 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.physicmaster
    1⤵
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4461
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.physicmaster/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.physicmaster/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4521
    • /system/bin/sh -c getprop
      2⤵
        PID:4596
      • getprop
        2⤵
          PID:4596
        • ls -l /system/xbin/su
          2⤵
            PID:4686
        • com.physicmaster:pushservice
          1⤵
          • Checks known Qemu files.
          • Checks known Qemu pipes.
          • Loads dropped Dex/Jar
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4635
          • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.physicmaster/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=53 --oat-fd=61 --oat-location=/data/user/0/com.physicmaster/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
            2⤵
            • Loads dropped Dex/Jar
            PID:4765

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.physicmaster/.jiagu/classes.dex

          Filesize

          6.2MB

          MD5

          31836971fa407ebef50ef8b69906a2f2

          SHA1

          978c404cd1c88d7032040ae582d53fbdb45a7659

          SHA256

          ae78d2fb97098b3ec8b9f46d9a0160f4a17333dc6801c703f49be15733f67c8b

          SHA512

          7c6beec0ebdc99aac9a2153d502c7e3551fb9031ff5cf89cbe661fba5d3051f3e6df72e29de63098910f596a9e8d299d7afafeedb127a622ae8e44034864e0b4

        • /data/data/com.physicmaster/.jiagu/classes.dex!classes2.dex

          Filesize

          6.5MB

          MD5

          b9fe41f20f396ff366b03af29fe57e64

          SHA1

          dbd2a45b42167adf861035d7c547ae1643c964a1

          SHA256

          11d7198e35018c0f26fc88411ed5767cba01465e41d29b30a597ad127674f5ba

          SHA512

          5dbe9b76f3c1c4664b2558218f817a39127918c5d3e0d25551dad019da0c8395ae0a12588ddb6597919086cf0f9eb1ccba02187503a2a1410da0d41d3ffdb667

        • /data/data/com.physicmaster/.jiagu/libjiagu.so

          Filesize

          495KB

          MD5

          de685970891708f6edfd18f03c6557ba

          SHA1

          ac50f88327652a72df73d43e9260faf169283c34

          SHA256

          b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e

          SHA512

          cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

        • /data/data/com.physicmaster/.jiagu/tmp.dex

          Filesize

          284B

          MD5

          f1771b68f5f9b168b79ff59ae2daabe4

          SHA1

          0df6a835559f5c99670214a12700e7d8c28e5a42

          SHA256

          9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

          SHA512

          dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

        • /data/data/com.physicmaster/app_SGLib/libsgmainso-5.1.81.so.tmp

          Filesize

          591KB

          MD5

          c85e8919765cc22095d1b8e40601e34d

          SHA1

          22d48933b9f30a028cf4c9d993f59c767f9e8e35

          SHA256

          f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e

          SHA512

          6715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e

        • /data/data/com.physicmaster/app_crashrecord/1002

          Filesize

          116KB

          MD5

          fbb2ee04a8a8e20d55b8ec1817ce1c86

          SHA1

          2e5a80ca3706a03c51eff1b50420366520e13990

          SHA256

          0c09644149081146abbbabdd1ac59ac3a0cc6dcf3eb672277bfba852d797f93d

          SHA512

          6a37ac54ce46d98e05a0e3eb2570608db1ec9799a3ffcd4cc665d3e8909f1a8c7dc06b854b972b9536e569025d120328c687970d97de0c356aee1f4b994a9388

        • /data/data/com.physicmaster/app_crashrecord/1002

          Filesize

          226B

          MD5

          b950916541dc97f9354e51632f4976ed

          SHA1

          60eda01a63f97e9596bdbae3572ef320d16c4151

          SHA256

          1cc54666a74fd842d5dea915f78e9a7b53d4bc7396794752d20c0ef9b3638679

          SHA512

          be3c41d90a4bd5d1817689f195fef50417b75b5db7b99066c0e6db8a2f11a0e87f0d0059e57123d585f479f287353c3c5bd4fccc80fde6b604fed2ad47b82878

        • /data/data/com.physicmaster/app_crashrecord/1004

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

        • /data/data/com.physicmaster/app_crashrecord/1004

          Filesize

          284B

          MD5

          efde6fc19d25115e44a1ab89a82a8134

          SHA1

          96e424ad879a08ed99ae8cdbd7576c17838c67ad

          SHA256

          48f99c97ce3eb5a766bd4572f7e499780442d35c63c9c1964e6440a5bdd861d6

          SHA512

          8a5b13601d1e7f81692efa601df030c839aebd4e4e87266a6e331db499de91dcfcc23ea924dd0b0342c74201df8d70947351a9d55071ad514e94044895c50293

        • /data/data/com.physicmaster/app_crashrecord/1004

          Filesize

          238B

          MD5

          be1f130d1c9f035b8b8484ed65c7718c

          SHA1

          25f6cc9d04a75e355d8093bec34f4585a02f37d7

          SHA256

          1dc3a4113c7258bf7520ae93790876fcb37f121b5a36afab5984f1bcbbe0fb5d

          SHA512

          c9b80cea723b7c1696c2f1ab3b497c3cdb71ceeceddbe8761f879f656015586428760d013183b245b60600034253d3bdbc09b9374e7111c1f1542986ffdad246

        • /data/data/com.physicmaster/app_crashrecord/1004

          Filesize

          226B

          MD5

          7695affc852d1bc7bb7946e5c19d7fb6

          SHA1

          6539f79610ed0bdf2d339806cef1ea4ebf0ff698

          SHA256

          68ec200359d33c5a4d9bc17900a73c52d354c782b2e55958f743d1aff92b8870

          SHA512

          f2ae337da5871bbe5495d1b5d22153de7158f1cf548ece2ee5c8b8d914c6cd900a09af7dcf7b45cc96c551927ce5ac9fdc930ffaf552456d15970e4c0e4bc511

        • /data/data/com.physicmaster/databases/bugly_db_

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.physicmaster/databases/bugly_db_-journal

          Filesize

          512B

          MD5

          177ef0692988cca48e76a4363c0c3e45

          SHA1

          f9d7ba396ed8015425ad9a20a01a3100597388b3

          SHA256

          145751e3d37a6a92a390027f6317eb9eb8d0883829dd1b18e27cbbc3a9be2112

          SHA512

          aedca405e1c304bba235bf2d61c72e83db89122329ab972b5a50122d242474dd4a5d90774bd929ce7dbcbd8177a6bd9eca62f98e50c47d09ba1c367a1ff60663

        • /data/data/com.physicmaster/databases/bugly_db_-wal

          Filesize

          16KB

          MD5

          44e7d0116b72e512a36b594549245c7b

          SHA1

          8016c0813d89fd79480c54fd2cd4075c94873698

          SHA256

          4124ca539e6a1c486e6ce0c0c39910a46a8fd69bc31bcd9aa4686668b17e589d

          SHA512

          3b5d8833c750405ba141af2e729024d72d61e55cac91102d6745cbf14c06858ea586b11bc9b85bd4c5610eee5910164007cc2a3ba0a133e7fdcacaa943cc0502

        • /data/data/com.physicmaster/databases/bugly_db_-wal

          Filesize

          120KB

          MD5

          db149215f00542f8c9e0542cf60371bd

          SHA1

          9a9f63ecfb8ede83312ac02ae8b94a98f5228c6c

          SHA256

          31a4a24c13fe3573e9ab055492ed631df7f7bf926f69af14039de0c52567d5ca

          SHA512

          b0f5c1128967ca00cdfacc8524216afe02d7c1bdea34df2b7bbb304866432f0c7c29338e882eb18982a8800f2ccff4209927438a5e98c703df1fd9e02b2b846a

        • /data/data/com.physicmaster/databases/geofencing.db

          Filesize

          28KB

          MD5

          1deb6b895a2280f63ea2f3783f0a5ebd

          SHA1

          c01eee51a200d2007d3972b551e2515fc8f96d95

          SHA256

          c14b81f1de9ea7414f9ab576df19d63c1d4f22750ab37f0800a7a0ee6a15a70d

          SHA512

          269affd56d83a323141c44f786128a60d501d4e0ede0c4b7d9b5757a2e40851872c801dc1355c62c0607b95b1e42e2bf0b824d0230e1455655d1bb020c6a45e4

        • /data/data/com.physicmaster/databases/geofencing.db-journal

          Filesize

          512B

          MD5

          3b1b979b37278a699c0e4b171ff2df1a

          SHA1

          0d63ab0a0252c07d246ea6dfd81830bbf29b11e1

          SHA256

          806bb47d04d8523d75fd31704f2f91d5126de85d7b2b2cf2836e6e6349f1501d

          SHA512

          131947ba42e9422e1ebf2c47c0e1d11ace170b393ac8db152b8bea3bec24b8745f63a78d143fd96f1138e6d8ba24da287a9fe34d59d730803221b7dec2ea86e4

        • /data/data/com.physicmaster/databases/geofencing.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.physicmaster/databases/geofencing.db-wal

          Filesize

          40KB

          MD5

          51a5d161fbe51b46396d1f468029b4c9

          SHA1

          9992d52c7cddca01f087d107d8c4f6a6eed4118c

          SHA256

          daaaa95265cfeadbba570c07f001a2e100c5496948068d1be36cb6480d352421

          SHA512

          026410e134b0d9b78fbaee6b81322a045026c89a6560757ebeecec4d7d2e9862888f12e520d8f1c245557b9d9c71713422e59e8b631854f6ed15b406f842d220

        • /data/data/com.physicmaster/databases/ut.db

          Filesize

          20KB

          MD5

          dbf01ad8af0c3db6ba1d63509cf95eb3

          SHA1

          e035751b33f65a9e8c45604671c9c1e608a22bf7

          SHA256

          72cab6e7f29a7a9e619e5fcf82fe7defbad17aafac139010b3e9578435c99f34

          SHA512

          50b6810f8cff47a090c48c0f8ccba4c21f4b04a8137d1652e8c4ab4a89f4dcd8054fc296760eae24fa6a27a8541ff2aaab882ec2fc4aee16feaa7bd0c3088fd4

        • /data/data/com.physicmaster/databases/ut.db

          Filesize

          20KB

          MD5

          0805adfd1702db0e354b580609b95dba

          SHA1

          26022e7a1e27b2cfbc0bc83f9862f9bfebc47ba2

          SHA256

          7f9c27b8597e01fadb33d1741b28bfd1fcedfc23cebe607a6dc735c26d622def

          SHA512

          3b115567a80e5a9d9714c683e86f4b8f5c0a0f2037333ff6b489a01d97001205f3d55ca711a80137996c73d6cca42efdd9962b7a84dae3a3397adf884fef4515

        • /data/data/com.physicmaster/databases/ut.db-journal

          Filesize

          512B

          MD5

          54e3cb66ee1e382da2531a343440f838

          SHA1

          6c00f692cb08c1352a57ad6f635dbc7f23788bf1

          SHA256

          8ac9fd1fe3113dd0332264c17927018a27e848905959e9b67086f995f4ae99f6

          SHA512

          75d6da61bc4bffc95d9d584503c0ffc450190295bbbce772ef2770377fc1edb5fae68dffda97ce80cec29ed80db32b5eb9c0ecd8ad3c775d54dbfe31c19b8c56

        • /data/data/com.physicmaster/databases/ut.db-shm

          Filesize

          196B

          MD5

          a70eb6146589b581e652cfd0224a015f

          SHA1

          caf9698d48bb0dfc1c493b1f67e72fd5aa32a921

          SHA256

          70f637262ae29f0dc463e66032e3da30b9c145cbe67d92b99a80f9be39ba6c49

          SHA512

          82692cc861b050be541ed8ee805ea50b934c2568645aaba1178400799ab4dc939f2b146379fa0ba59964a35e7f03a898b20133cb18c4c4ee933313639c9c2d87

        • /data/data/com.physicmaster/databases/ut.db-wal

          Filesize

          8KB

          MD5

          73e0c4111b516056b86b2216b7dfd005

          SHA1

          54c51785058bf51ac9891b3cc7f9c28f2fdb6559

          SHA256

          ec2d21888a098c5c2b514fdbc74d8c20e3e5090a2041eb7edfa38a10694e15a1

          SHA512

          6deaa001f84fa2bca3eba95452429bd96eda9c1c59a469774ab0f9299a3656c3ce0f0fe4098bda420f664ee8520201b5758bf70a71047a565942577a3b14a073

        • /data/data/com.physicmaster/databases/ut.db-wal

          Filesize

          8KB

          MD5

          d8b805a0bfdea166440a097afb4d9729

          SHA1

          cab3aa4da72afbb4f73c43c6110ecc1d6a43a929

          SHA256

          9a347ed125003aee607ec1e496911b11bf056a69839b2c460620e07d939dd00d

          SHA512

          38d65ea07a907b42e6db45c1ed884901c66d35c6248e7d6d47e5f76c6e99591b1a8535a14be85e41867bfbf2f9418f18dfc84902cd341ea92b96454da8bafffb

        • /data/data/com.physicmaster/files/0a231bd8575dcf72.txt

          Filesize

          40B

          MD5

          02d50cb5a5b6ad7926328456d0e73998

          SHA1

          2eb604fdc44fc9498b501f4eb66e73cc643ea4e0

          SHA256

          031770473899c189fc9de402937bc13546a06ecd57326a41080b34c763138368

          SHA512

          5a22aebf3a3f8799eb2f404c8a3342e66536302e7ee8fc5c087b10686b5c879ad9469e084aa610888acc3ccdb5e81f3095fd3ba6a18c4e41143a75e23e74a3df

        • /data/data/com.physicmaster/files/21c22f492aba3de8.lock

          Filesize

          16B

          MD5

          03451492e5562ce94764dbbcadaa186c

          SHA1

          8c8532d064baee1c33a74801a612df79b0a6fb5d

          SHA256

          52f1e485a075c65a988d5c87cea07e876add45ff4ae2b870d9ff17f22795d966

          SHA512

          8dabb61c9d947c0af474baf8cac84b824795b6554077eaf84b4975dfe89cf85501b03e874d7fdfaa64cb856d62f3f8eec8715d4755a0ed28cd542daa1573c5f2

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          512B

          MD5

          4bdc888a2b8c10465dc3a9d58b9bdb9a

          SHA1

          cfbf9f424bb85c312574d0da91620263acf9c12c

          SHA256

          f57a1066eebbfdf8adfb37f95b2189fbe23388735b075eda067a161359bcfcf3

          SHA512

          6e5502466501fd1391e76c4a14e2e1a66527c1479343e9b50bc0e7c7e96052562658a1ed0bb819332625dd6649eca64b8d1576d70dc706e1fe04148f88aea397

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          32KB

          MD5

          52d53b85a1791dd1730becb17ba9ae5d

          SHA1

          32f295b70cc2e2cce5821c8799ec76c781dd77c7

          SHA256

          afb85046251faa2a35e0cebac04eec804a3b93c64830d3b8f37ddcde9f639197

          SHA512

          ecc71a0ae0548587a929132540d38b13d85b068b1b52fdcc6c688be78973e9c1578c9e8a9b3a63b505d11d58d1fcaf7abdc98ad160b9865f8de2a6cfad99ebf9

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          32KB

          MD5

          bd6a3fe1ebfee754a37704d32ebd51df

          SHA1

          e648d6d05f2bea97d82440658e4142c870224384

          SHA256

          4784b68010a955fad9ab6ffa2c0750acd481c2ccccfaceb8b24dd6a709d37fed

          SHA512

          1250a61cc5eadf96c5d98ab382ae64ad96447f7f3befc03e0f43201c2f5ffd583b82fbac32cd376558cd3a8f58419ed03f0176b4138f63989f777a17da170e0d

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          20KB

          MD5

          13771daa9606d79663981986603443c4

          SHA1

          837cddc945b573fac4f4de17bf764a753f6f07dc

          SHA256

          d1147257739a546d0fcc78f99abe532d9d19693e4b428d3d13d153f9286305f8

          SHA512

          baad5fa044dcf701eb62dfb1e244c0758fd2d1a88f47f6e73371f2748141505d9b26c24d4f93fbbca9b8af864ca4c8eaa9978f7c8a54c58b7a57f7ccfb6e1c00

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          47B

          MD5

          0899aa05b9d8a59e8d1027476b536d2d

          SHA1

          25a22757375484e5cb0bbec77753c7aac2f9c736

          SHA256

          0570ba037e75ccb90dcf22df752c08ef57c0d0a140dedc80d17c0b9ef872c554

          SHA512

          11ca565da39743a1acc2ad177097bb0cd1a1ddaef350cfaab2ed78639689564e30511eac83acd6ab48ea339017fbb669fb83e7dc8140c711a1103c94dd53f237

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          120B

          MD5

          cf5ff2d59747c5e4fdd61b6ccb8f732d

          SHA1

          8f40083c560ba62856820e20335274a008302e10

          SHA256

          f6e198375799555b7ebcc7128a0d864c29fb11577ddc748e5babbcff4eb18309

          SHA512

          d67a10de5a31d83c14a3e9068696ef239b499b97cf6078fae8abefe7da97a49ef1e2251bf5d7734c6bc8066a0817689152fa4052a97c7f435f8526abbd884b53

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          192B

          MD5

          a8c70caf8e5d76fbd0a89ceb47dbffde

          SHA1

          4df442b44f69ea724b57b026e880f13fd52e5e7f

          SHA256

          5c2c34289d83c5bd6d101263cabb6433bfbfe847eb64714e7c96f008e0f57e4f

          SHA512

          b7cb1c46512931441a4a8d0e8e00358e577bd6069aaa00f2f8cda6650075452da700455ea4704d8aab809ad5d37fb42d20943f6f0a6afa240fd6b5fb61bc8e4a

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          273B

          MD5

          162682316761019730a5ed5fcbe0e570

          SHA1

          50e26a08d353d9d6ef99d5e6dbac54de3449ad68

          SHA256

          cb75d5393ddf8e11c5fd6e1b147f324b24cee97cba5a0fe8b224324b5e431826

          SHA512

          a84d1264eedc5b6d679add7f9b53aa4f53e6990a0e984fb11d3339ba7925cb0f57bcbf499603b27d2ee9f9d17edb450cdbebda715386a60d45518ea1ff780a56

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          388B

          MD5

          7f3a4952abec9cfd0deab66de5fe6940

          SHA1

          00ade1aada66fbe8da3f56b68877c820a58301d6

          SHA256

          cd52f3ddbbe4c069ec410257483e5199f4d120257c5cfeedad7a859db68fba4d

          SHA512

          80dd5a3044e3bf6e14d9a3b31ff0c27cfc03d737a602f62742a19db0fbd6dc4526dcd2b32481194c6c45fa993a4899e90b628897066286b76824f3182a3ad545

        • /data/data/com.physicmaster/files/SGMANAGER_DATA2.tmp

          Filesize

          466B

          MD5

          0a8234d6cb0b8c0b43335c90566c055e

          SHA1

          2b8851b4e5b2bf4fbf09566ae832a344cf733391

          SHA256

          cc18dffb40a2ab5471be2c7b715b2787b4573d083b3b43f21073aadf871fdef3

          SHA512

          85d5c8731aa2d46260a3b21f74db57a6963f4d942aa43ae2f972c1e4d33aed17c104d14fa454023830f673b317e3e83b3de78d77c414c7092d1b32654814c1df

        • /data/user/0/com.physicmaster/app_SGLib/libsgmain_312768000000.zip

          Filesize

          65KB

          MD5

          522947eaa37b029a247e3973f3be3621

          SHA1

          31c88e0d7c9b51904c0f598e80245bba41b1c7d9

          SHA256

          d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

          SHA512

          f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

        • /data/user/0/com.physicmaster/app_SGLib/libsgmain_312768000000.zip

          Filesize

          65KB

          MD5

          0c2f2989749ff3910446998637c28286

          SHA1

          054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3

          SHA256

          f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d

          SHA512

          72acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          a69f823aac324961b45535e126569513

          SHA1

          d640866f4c528c033084cac7b5fc1df816f04b5e

          SHA256

          4ee4a5315ff1b0e3eca97470e5b2b3bbbfbe6c33349ab65dd491520db48f5304

          SHA512

          697473b5301513894b2216ff67ab3ad69a958515be224a10c52888a7e9050ca0ae878062c3f902082bbe755006ae70e61a4f0b0aabe1b30f472d8890b3513ef4

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          213B

          MD5

          6fcf109f3f433665a15e780197563862

          SHA1

          5f94cf309ce40eadffa2e9a9bae37c6419ed20fa

          SHA256

          392108ab759e44759de433993a30fb01eec4463024b8c46f5b2308ecb9e64efb

          SHA512

          1b754aad2babedbeacdb0f42ab01f5b8761fb8117e3df84525a4957efe32d49b9a47cea9b793b4e904aa523f1b73bd67c7a29ef8d45fb1c3ff3edfe94c97a2b7

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          128ef5a8e1ab1d7c8b0c09b434a8c8ae

          SHA1

          28fb9bd9b9e7b578c78484387e70c1d6a92b1c29

          SHA256

          d1708274d4c724fdfffc467f857ff2fc5cbd96141f6d8adb81eaddc6aae95dc9

          SHA512

          6ca0e7a183d69af7da73e685dd62fd338836b6a5ab17f39fc7d38299eff585a4d47fa983ff25ce99bc5750502b59154566cd11872af39b7b9927dfc9ae890e56

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          58c56ce18d18c29a4321e4f2ed18c7c9

          SHA1

          e4a7f1c07c002c3e52dd8e6fd109d36d1a91b366

          SHA256

          07ac1aa3f117e02141f5c0991b2ca5f5d6f6259b58b9486bc9cf469786cfb719

          SHA512

          10875697df92fadbaf8af0ca455ccf207fb24a5120c385e4937c021c3a544bd53787e139a1e393de998e54a10a239dec681072bff0e7bc38957e4d6c9eebb2f2

        • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

          Filesize

          512B

          MD5

          4fdf5aa22804ceba4f87248283093a16

          SHA1

          35f4d287bb4a40bead3608d6d643b776a6249e60

          SHA256

          66402f3de97317a9100023cce4626ee00e9d24568385f13595e9b736fabf9752

          SHA512

          2970aae9e0a2ec853ec092fc4e878be354f8d1627ce6daf0ec6e5cb1e2a33e84f40bd62120e4b838074b55a257bd45f144f52cfb9f96090d9427c89535a30023

        • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

          Filesize

          512B

          MD5

          ad148e1e0cc243193713f80a55bfd22f

          SHA1

          d288b9c5576c6fa26f629c1e5299b911d37f703c

          SHA256

          b0605cb435839136e5ffcfc9894602a223cda74dae9f48059c91bc7729c04d9b

          SHA512

          4656976612da0661abd81941e4db2049e9d18906e8a38c121efb078d2412b483ed457bb09a63ef17fb1e55502bb4efccd3798c2275704cdb5f0c21c47dea5abb

        • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

          Filesize

          512B

          MD5

          ceecfaadf11b43a9eebcc99fd619b62c

          SHA1

          70b0f0e491df2afe0a719fc114ed0234d3da1369

          SHA256

          9b4d95d6282532587b378e51b05a4108f7a90e6f84253c28f489eaf07370b35f

          SHA512

          d656fe59454f2c6bcf674cda66e606a432792e5fbf4b33f311e485e2740ba585ff7c957c1807be328b736fe2bbb27e7b17789ee024063c04894a4c07e98e5328

        • /storage/emulated/0/Android/data/com.physicmaster/files/MiPushLog/log1.txt

          Filesize

          617B

          MD5

          0d2113e241f11341de3126f5dccdfc8e

          SHA1

          916b9a537e568d2680473570f7508651de7df4f9

          SHA256

          0675c9c365b3027980c458580b5c10ceb9b488c380d5dfffb5b11b0a2f95ef1b

          SHA512

          fdb554f147c068ced598c68e105530f87036c4ff8b98dbbbe85fe2162c5f8d5a8d76c53dde2cef9c5fca4ece8fd9ae3be3a1f29a8ba75b0aed855c9ca963a927

        • /storage/emulated/0/Android/data/com.physicmaster/files/MiPushLog/log1.txt

          Filesize

          72B

          MD5

          c9a24edeba946c58284bf4e757dd1676

          SHA1

          e1ee8fc17be8cd6c4d8db8bee1b4d08a08369f06

          SHA256

          038d9f86f7f0bcaf21c7afc9ec88160807350d072878ba3101130dfbabfee0a7

          SHA512

          30921d3966344ca0743c6fc76762bf9bf8509d8897041402cb0bf447587efe1c29020d6500168c42f680181d0d5ab776b0ca6e160b1e9d41f82a61e2a4053743

        • /storage/emulated/0/Android/data/com.physicmaster/files/MiPushLog/log1.txt

          Filesize

          241B

          MD5

          eab34e620b63e2a676c95d0117ac052c

          SHA1

          3ec9f4c042352b8867706d8fe6e2bc418c0ac46a

          SHA256

          b99e736692483ff3cdee52435a6d6f134369d514c35b5e34b7142961d757f5cb

          SHA512

          32c8b8d808749b939459cf17bc3f4db06c28297bfb93db535f57b0b6e1ed697d4c45dd85a0759f7754ca58301afdf584706c7763200eb9ddb72684708060f949

        • /storage/emulated/0/Android/data/com.physicmaster/files/MiPushLog/log1.txt

          Filesize

          423B

          MD5

          a2f210e0debd015a0dcd215ad5924e21

          SHA1

          788ddf9aed2ab8417471feaa20d829e483ead3fe

          SHA256

          acdf9708888a79adb60de6051f4455a992c92fd55d68b7a5cfd818b588ffa321

          SHA512

          3b09ac77808faed2503f7a159c9a2b14e61dba92822e74765580bb4edf47b16089b90733113d2acbac88f47b55d401dec5ac2b254c0248b4c2f01721a087cae9

        • /storage/emulated/0/mipush/lcfp

          Filesize

          34B

          MD5

          fef78868c594f0da6ed12f1113fb8637

          SHA1

          bf0d0db39d5937dab18907f94a0701a61ded3a0e

          SHA256

          b582b624fc4b7e29a22ab329a4b45ad40d9891cda14699c3b38125084db83075

          SHA512

          94635533ed8d23be863eb34a58c2bc5e8383a62aa6972ef8317e22231e90fdb07006cf8bb3fba93618fabf78c5813d103455de20e5d0feee1d5db6f2ec285687