Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3002649s
  • max time network
    162s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 04:08

General

  • Target

    cea7aa9a42ac0cb6c986f14a0a97b61ff273405768af1b3f2a31fbe1d80f0eb2.apk

  • Size

    27.5MB

  • MD5

    46bb8996fb8159bd3c67a41c1b4b1397

  • SHA1

    99695c3697a9e643e61974d9bab18e6fee035cae

  • SHA256

    cea7aa9a42ac0cb6c986f14a0a97b61ff273405768af1b3f2a31fbe1d80f0eb2

  • SHA512

    8a9a8d7fa3aed26282d61b5f8a1aba8059a83e7a279ee70c306c678c4ccfe6e7eebb9d18b785b949053863d182cb3a94140dcddf80b4bd1543b372d72f8ae09f

  • SSDEEP

    786432:rUJhjmM7BlM7G3teR6Vc9fDBi9swfa3k6Vym:rYhjmM7BlMi3tY6Vc5jH51

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 4 IoCs
  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 4 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 4 IoCs

Processes

  • com.yibasan.lizhifm
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Requests cell location
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4268
  • com.yibasan.lizhifm:ipc
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4302
  • com.yibasan.lizhifm:push
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4318
    • /system/bin/ndk_translation_program_runner_binfmt_misc /data/data/com.yibasan.lizhifm/lib/libdaemon.so /data/data/com.yibasan.lizhifm/lib/libdaemon.so com.yibasan.lizhifm/com.igexin.sdk.PushService com.yibasan.lizhifm:push &
      2⤵
        PID:4471
    • com.yibasan.lizhifm:player
      1⤵
      • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
      • Listens for changes in the sensor environment (might be used to detect emulation)
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4573

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.yibasan.lizhifm/databases/_ire-journal

      Filesize

      1KB

      MD5

      652bfe995071ba38efd673fbf303b680

      SHA1

      0e37224b7be2a87a6ea1d1ea92cb6ed4c8f2bba4

      SHA256

      fac3e1d54ef3e0d3de4d815d316cec8c6af869a253d7072adab781bbae8f7503

      SHA512

      66307c6f71f296da8fc225da80731f98e2a6d0701f1bc6b575ee6271507e56716e22b505039bd92f3fd83ad0c8b88fd310bc5f905b2942df2f685fa747e41272

    • /data/data/com.yibasan.lizhifm/databases/_ire-wal

      Filesize

      44KB

      MD5

      1c31307c27ad02818380881328cc4293

      SHA1

      c447577daf603f599f2296085e1354c0412b8fd9

      SHA256

      d3460874bbf683f43c2d38821e770f67ef8149aefe177422fa574e35b03b2bca

      SHA512

      95e76d4826bdce1cca26b6922718e93e315568c464811d64985eb5a29c615c4542e0e720c9702169a439f76cbe1b96aa62f39d5659ec2c7a501cb4c92dc8e429

    • /data/data/com.yibasan.lizhifm/databases/_ire-wal

      Filesize

      20KB

      MD5

      ff869189184d32acc6116417fb518bdb

      SHA1

      9ea82b479a0262a47639f919a5884a8b3bfac304

      SHA256

      fd00ea77fe9a7d01c9cbf49068d154f04b28f5aca8e0a32283279f8d619fcb39

      SHA512

      861e18f6f4deac5a705d3d5444edf1b815921945d18cd0a6d0ead0d23cc9fea6f5759d97f94cfbf2cb0b15f6d58c03c422826da4b6a2c4b88e5691ba8f6bfe95

    • /data/data/com.yibasan.lizhifm/files/.um/um_cache_1703809623192.env

      Filesize

      608B

      MD5

      5ee019f11c96a9523d384dfcb6047cc3

      SHA1

      a44f7207c66d6d09c2e4027d6bc19e68eae8295e

      SHA256

      f5f4e6a98ddfcb5f5c8e258716b66f61bf35d6d352964036f04fe46d73e74f5b

      SHA512

      59cd57b09ed2bee587941be33f3ec5dd97bf602d55ef22b905baeafca654c693bb0a368756cc48c7386eaaba838d7e165768057a814fb5f69a318474c847c75e

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/LizhiFM.db

      Filesize

      500KB

      MD5

      f7ac9cd615fc66812275fc4f1011c14b

      SHA1

      90eab579bcb4bb604b151a1a49f27b594297549d

      SHA256

      49b8620231fff9478c8dff4b5760060f08de5d590aa967bc9ee0780b22614a00

      SHA512

      a5decd1113f0314d004b7eaec75b869389913e7a5053352ed8e79b9f3547c4445b01ace70f8cb6559ce33f9bec370b35683b614e029e4ddef36b01505e87312e

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/LizhiFM.db-journal

      Filesize

      512B

      MD5

      03271b0e5a4d32fc0626c27ccd834f58

      SHA1

      980b2a5b5b94940ce11605b6f6c7e9ed3e1cd3bb

      SHA256

      16d307e3dde1cbf4c3094d9962df30ae1d19179e5a6ee39e50c82dd582a80d45

      SHA512

      eb8fa768c7dc1d9c39de56bf8333726482091585664fefab749d11fd7c5ace76fee33b42618ec53cfea45c56352b6fd2219dd7f270a2d3c793f9513ec1cd1a03

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/LizhiFM.db-shm

      Filesize

      12KB

      MD5

      4072783b8efb99a9e5817067d68f61c6

      SHA1

      7cb41fea50720b48be0c145e1473982b23e9ab77

      SHA256

      f3cc103136423a57975750907ebc1d367e2985ac6338976d4d5a439f50323f4a

      SHA512

      b9b362ac8b88c1eaae1fa87f8498050450d7aa6c7d07698c3aaf8a355b603b6d535e74b47f6da4b4798b04df58b3b6eb1dbc4782fa07756bce10933ed86017d3

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/LizhiFM.db-wal

      Filesize

      16KB

      MD5

      d782799ff202785316ed72e5933da5b0

      SHA1

      69a48cd002a6edffd6e0af01c053d9e429688d60

      SHA256

      dbd9a50db5a7d1adb4548e3cf6cec9b58d430958c04fbcf64c296629d1841545

      SHA512

      ff383e5c05ce1d5f0b7910063748d077aedb7cbfcd7830e6ac2d01a595b3d7c677bc941564ce4fb125d21168e60cb72bec155eef5287e99c84c032efdbafca22

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/LizhiFM.db-wal

      Filesize

      498KB

      MD5

      1da61952e666e917747d1e92b69d0d4a

      SHA1

      695f565e870fe475d8d0ab08412ac432ffea26c3

      SHA256

      753fc24a4fbc616e9002ea364d8eb572b738c889f20f8e0a50dda86e7fbb5ad1

      SHA512

      caad9acf791f0bea41a85543cdb919c950fccf99b6df156208c13ebb4420e797748b7c88b18ec648af9e60830f3cea31fb28068d675fcb05bf0014b53ce3f3b0

    • /data/data/com.yibasan.lizhifm/files/LizhiFM/config.cfg

      Filesize

      177B

      MD5

      a439a0ab02b052f87077f0a126ec9994

      SHA1

      3588f4eb11dcb72d6955f8b3bfd125cba5f4511b

      SHA256

      45d56d607524cafcb549f2a1943cbda1c76592cbb6fc0e71e06b6f6e593723de

      SHA512

      0cca2411bf59fa8fcb0d99ff5bc7251cbb3f5b9ea3194491670cf9b7b418c8ab04f668bf1315a27b7eb78ed57eb9f69ee7a9c8b3d1242ac1c5a68f15c4569c6c

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      12KB

      MD5

      f44da330df71da5e9b09dcb347d5ef54

      SHA1

      adf4a5c3788d1e2281e54dbb97272bfafcd1dc2e

      SHA256

      161e50895d0e2512fb160d1d47f12b8ed1255101c6872f25c4b56e7b89a68591

      SHA512

      3cc0e3076f45350cb23bdd63e54aeb7226ccc80c6f30422ce984279e5515452c837e7778e51f8496b28443b29d821f612e76a593f8ff5bfadbe908e6d776fa45

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      32KB

      MD5

      799dfbd6d8d72906d051702f3b96bef2

      SHA1

      657a8f54da87c1cffd886126fb80708c44695633

      SHA256

      909cb375aa324056f1e86fae1ca9dcf336e1e39a796ae0b2ebc10dc665753151

      SHA512

      3ed6bb3b5833ee0ef7a2f0f7c5daf0b3154d08e41bcb70a4a598072330c9f5eb2ab75cd14a981786a174f19dbcfccf863f5ccee729741083b0c08a1976ce6d78

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      32KB

      MD5

      0fcb31920c258bcb52a89d3acddf2d4a

      SHA1

      dd764d611e087ef4e43f0a5cd3f3be85e062eb17

      SHA256

      b455bb6d9ca4b802054f6f1e72d66184b37897ba60a1e5b5de456454ddd07828

      SHA512

      009f5d30aedf58e5c88835cee9a6b87a073660627beda8a09070eeb9139be05f78d11677ce31152f57a988ff132a469d9231140fea3f4c7cb078d39fa55509a3

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      12KB

      MD5

      7366a3e11c5eaa3441e4e78a64712e86

      SHA1

      4a7e92d798ae5d76234a19e0e0c871288cd7f477

      SHA256

      2aa5673088289df1ff391ea642e190eba49775dc9d0f34cea8e60813427f63ca

      SHA512

      2d7c1ab2d44c945360a2450cf5974ba24acd7676db102ac37aff96dba5365a42c9767d2aeaff32c49d2c8612453feeb3868653c72a923c0a13408c98a23e903d

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      20KB

      MD5

      054e7ca462104e37bfc4eebeda3a2ef5

      SHA1

      2f81c363a8ff9ec9c0c5023c59a2095ca703b9d2

      SHA256

      de2f5ab9500c63a4248e0c7e259ff4ad899d7e82ba55db48b2d96e5f2bd3c6c3

      SHA512

      a31eb729c20077e0c3096a999a62945295853c17b50394371e6b90adcfc74720a9e2f42c9bcf9dd270fa713480829efd084f0afb6c7cc564e6d7cec458f26aab

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      24KB

      MD5

      09c68e353faa0d2ebdd0a45de7cce59f

      SHA1

      97dce888fee9930c3a29f84f5c435e4f3bdf5745

      SHA256

      1503a777751a8c428fada2da8c5b1f55fcbc77fc4e9c16e04712b1dc97f0be17

      SHA512

      670d8809bb50d51bd835b4dc663dc9d0fe2c13d4d5dd2ec8f96cd403f3b612f0d4656736fa028f0080f21b4318e4ca0320a576ae47bc6d9a07e589e99733aa54

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      24KB

      MD5

      e787b289dc0ee77555c31168283d3997

      SHA1

      479bc0be3782b047016a67fe1d089232deb1a428

      SHA256

      980406b0acb476edee9281651b19bb11fd578a6d2a01adf08333805178ba2da3

      SHA512

      8ab7f8bb39848aabe8362ad48817719cdb704dbfb48f8b4275d25a0d96f27a80119f669e30baf7e53605598a0e17ec22652d8715ec3e518b9f6dd89ed7f367af

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      28KB

      MD5

      2b73f78ceffa89d12a25d88d365d9fc3

      SHA1

      ce873ce89164aeb243c00acd3e00f5375a3f8376

      SHA256

      5c0b7961d08ca84eeb640f40d79bfcbe71aaefd020409112666c2c7c2f4ca2fd

      SHA512

      e01218bd1c2fa5043a7f59109e07cb4f341ea2ff85856ae9044170caef04d51d2debc21cf559e2e31b076563ccaa861b34ee961c27f5d3dfd7996ea9fd1d3fbf

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db

      Filesize

      28KB

      MD5

      555a2ab54727fb6457c99e2652840d61

      SHA1

      fc95be9556c3c985d972a8a5507bc30186ef5099

      SHA256

      f36dcb28e1f511b1cc28ce42ee1a06e8ca354353023d186a0977a5fa5fcf070d

      SHA512

      7ffdc518f80218f50a86a0b56ac293c605b991013e51cf2eadf4745720b2721733dbae5c96c94ea6f912bcb1bb9763f52eb4a19e73f25df050cc84492a9aa1dd

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-journal

      Filesize

      12KB

      MD5

      86332d3005d4fd4d842dd05c2fe50c00

      SHA1

      e8a013a4e77289fbd93058792836d8dbb7dc51d0

      SHA256

      0e11fd9f8a140b11b374932c9832a6f75c6066ebdd49322406011c393b3f7887

      SHA512

      02aa3ee4aeed7f1bbbd1830fd542a8ccb852d36f69d32620e68f3889c55c606946eb042ca4547d89587a8015c9a5a8d2bd8e33cc46d115bfca745966574964fe

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-shm

      Filesize

      28KB

      MD5

      dd8eb38e5edebf983254c62b33421e2d

      SHA1

      b92b6f09b2c605b71811ea9a0ce29dae95f9cf38

      SHA256

      0ac51a7debbc5334cf051593842f80eba28bd36e9b64f44817d771c67371602d

      SHA512

      c805c6f3f716e01bea9f03dcedfdff3b66a335f9d8bd75c334c207fdae1dc247737037f8b84bf8433ad5c2b6c4de860708594f8ddec5ebf055d4d6ecb3781fdb

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-shm

      Filesize

      72KB

      MD5

      339dc58ecdfd339f6754d50227b17482

      SHA1

      e4b188135995755eec9e78e5fc22f2ec992dcd35

      SHA256

      543de7a14b6de91e7687180be040c8bf07158bf36de213e9c1c0639b7595c8c6

      SHA512

      5e43b3cfe1eff41e70b471ad4f46e733e1269cb630ccfb22d55526b44b1196327902c46b80add64bf271d2ebb28712394e1c707510d0e847b1e9e82dd402392c

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-shm

      Filesize

      28KB

      MD5

      670d8bc46551c40a1fb9ff8ec4b72092

      SHA1

      82253b089122b4d8c7ae61dbbeabd9d037ddd49c

      SHA256

      ca2684e4da544d08c906c70f147d8dbc91da3a7972d255e6a00e1c99419f78e2

      SHA512

      4977d35230c533e26162cb0e4da38345a23a87ff41510685e755a52152fc78d0b027e8e8942fe10ae28fe332b16bb9a7ba0c0644ec0efd635d579515c3d5df67

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      4KB

      MD5

      d9cf91540507180357d06350d0a24ae9

      SHA1

      4b88547828584e0af32ae5e5097ccc0b0665f38f

      SHA256

      dc33e21e1ecbaa09ea05d26bfdb6de44c4a5376b6a56c0be7baca59d58183007

      SHA512

      a8d4931e5b5ccf7c1156ccb151d6d60be3a8a873fa8a0eae41af43503a15ade60fc81aba9e22d2af7b25f62912789f797c34152f74ede0c18d9e7f2d1cf1f6f8

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      12KB

      MD5

      34329bf20e8d19d179e8e9c83f154857

      SHA1

      05eb624cdfb6b4e94d7a6826f295e240bd11fa2a

      SHA256

      8764323c325d2e598b56ca2367ea948ccd3cab3969a125235db82480bc5e0ccf

      SHA512

      5c4444bd5e5a274876a87360e8eb8e9f163c78a8ec12559b8adb07f4a59a11c0d97f7e8455eeb8ecf6c5188a95fbf150b8e26df835e37687c8d33f7f12af5b85

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      8KB

      MD5

      4b44973903063f6f4a01da340f2eda38

      SHA1

      9a93349b1b57a446782f7f8880fc0e6acba1e90b

      SHA256

      fdc29b6c769f56f98bf4fe7294aeb3c4e118dfea91c47b23f275356a0faac2e8

      SHA512

      162e88739224f5800419307f9e5323c380cae36d8e01e64cc34cc7e31d2fc7fa4327f4c58330023d2bcfaa28c4a93ccb192c76141c741b1d3d341f410483330d

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      8KB

      MD5

      e2579c3b7c1c0f711b9b0b98647addfc

      SHA1

      3e4a87d6d4b783f2a99816762da2e46f36a22e02

      SHA256

      4185de670009a2e91ba277e8552a07f8bd200c9295b91a1fce4f13d4b03b1d5b

      SHA512

      d42f02e08ef9f02b9133fae7e2d26cef4061454ae54cb9fa2ecb867be4937ee1603db13f2ad18dd707e73103174af6516d6f770c9bb476fbb2415395533af5be

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      8KB

      MD5

      8604ca8c603125e623c697b89b137d42

      SHA1

      8009ea6a4440e7cd822043211b3e6b0b7bd65969

      SHA256

      792b440e8b153e4100df62f851cef181f033055f511d868bc8b8207b399801c8

      SHA512

      61558f9ba8d4478f84be98bc71d84b0053ee40b291b866a3d7df06a60b0f383f205c32e042c1fa1db27ea1199b2a7168506375a7092298e3f670fb36c1a2e6da

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      8KB

      MD5

      38b93fdabc149b26fac5dadbec77a090

      SHA1

      5053724dabf874e43dd94b9a8124635b751a9cc0

      SHA256

      bb649a7057ac0432818ff10b40fd1919d5346e5b900b08ebd54924a8e841ac2e

      SHA512

      cdeece8fa227309b75096c6186b4abcba18baa1fc5bc5efb66a4309834a880541efc42736417bde27dfcd4b2600624ab2e3d91f5d4ec3e77b0861486f5c83e57

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      72KB

      MD5

      24ae2e84fffcdb958e5cba44e6980782

      SHA1

      5f733f14b3bd0438a1905b9c1464dfc3cc338cf1

      SHA256

      f304da4fc91eafd85fb3f8df0b3a52c66032e52b13162287916e38693c73489e

      SHA512

      0ddee7d144af76d191f8f874c945b47a00df4acc703b7817bdd48adc56588a419c8dc32982f867acd360e56d867caa1854e42e37b7815d04962c6c39963610c0

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      32KB

      MD5

      4d250221041375a0e49da5a177aa7ed9

      SHA1

      658be03bf3f09ff0aa7ce6fb992d57071ffbf412

      SHA256

      05018a5445aa8ec7d7630dd9a33c5f878d745b37cfa34b97e8dfe66192bce244

      SHA512

      317fa578b530c31460dc651c7b6af4f1442713e759d76f14086434f23af85a0a569a77989d2c4a00c0044dcc84a9244d416a9a8b2c8dd330074dc3b26c538c4d

    • /data/data/com.yibasan.lizhifm/files/TDtcagent.db-wal

      Filesize

      28KB

      MD5

      1f368887d9d86415edf98e347b00ea01

      SHA1

      272bc22f58b842ed596004fced61c697ef7adefe

      SHA256

      34e9ecc33113e7ed0925062b3761146c33eff3ddcde75889fa14a6832f738e75

      SHA512

      31e416cdc37c223c2b347cc91052c72b9cb757f6eb3903e7a517e66687640e014a48ef5f9f29216d010609ecb7add6501a73f7357b7832ad903747bbd7d3d591

    • /data/data/com.yibasan.lizhifm/files/umeng_it.cache

      Filesize

      310B

      MD5

      5585100bb442e82793f985c4fcc01010

      SHA1

      37a71b1a111fb5fec8fbbdfc1e8a743fbcf6bab5

      SHA256

      b75d96905cdf2da4eda1921934028db07270340ab6a5f5275484a451b555765c

      SHA512

      36e4affe23ba32e7304de7fcc96b2a6324e4a3f4f4332f65af872a8078b61dec6bbc6cfaca82ccd593e30d59b9bcdef90bd486fb57ab29fa8264a3f57524d99b

    • /storage/emulated/0/183/LizhiFM/Backups/backup.db

      Filesize

      12KB

      MD5

      3fe30614d7e0d11db870b4624f6c50e0

      SHA1

      053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

      SHA256

      67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

      SHA512

      c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

    • /storage/emulated/0/183/LizhiFM/Backups/backup.db-journal

      Filesize

      512B

      MD5

      8d47e7797871cf2cb5af2fcff7f20668

      SHA1

      7f292686afc9fab32ce913fb01cc8cefe537fc2e

      SHA256

      137892b0250b96fc7715d543240b69376e79e5595604723c654a801e162cc6a4

      SHA512

      ee09f5caadb53a802933a42db15487deb1c7c6268547c10fff3f85bec1fc127b25c59e01c5b596b0f6b69cb1b92eb86e567752e2ff9d03ae50b2736740cdc00c

    • /storage/emulated/0/183/LizhiFM/Backups/backup.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /storage/emulated/0/183/LizhiFM/Backups/backup.db-wal

      Filesize

      28KB

      MD5

      128b9be6c996d6e9d09e603cc211ae10

      SHA1

      bd79f6110e36e1c34ab3bae5b013448bce51be77

      SHA256

      e6389659ba8cffca78ff470d420318bddaf8e9b49216b153684062221ac93aea

      SHA512

      b724ab76ec86246fa8e9049a94480ca83556c811ce65a45a9df778c4c2b0da5aadfcb5a9ee244fb3af800f4c949b7b19bae4204f60ee37b62fe327e115fa3964

    • /storage/emulated/0/183/LizhiFM/Backups/backup.db-wal

      Filesize

      16KB

      MD5

      dd6786dc0dd022e97a99b62096d3bb61

      SHA1

      e6ab7d28ebee0c31ef7438678ab6d48fcafa5423

      SHA256

      609cc0c5246076d60bf2cf2fdaf8eb39ba06ebc34e18813ef6527e233bc58587

      SHA512

      1ced4c31d6a790d6b39a15083a62d34ce90b919f62817492a0e834af43502c3758afc637223514e7bbee9b8dad0346cac4956f021db62fe340860dc32c93af7b

    • /storage/emulated/0/183/LizhiFM/Files/guideSound/guidesound0.m4a

      Filesize

      28KB

      MD5

      888fdf06e791443a380a886bdd9bd641

      SHA1

      53a6d786a48fc4b8f869ba2cb7153953322577d7

      SHA256

      79d06aa931215faed659a9939d07cc15d9853b697d35f3744e10825c3b886544

      SHA512

      0b7dba8c883ae3ec409ce70f82783ce958895f633154324b429ec6e446677835064ab7a24320b0d6f16744496243a868d4b82d6d205fde70efcfd554b14c8bee

    • /storage/emulated/0/183/LizhiFM/watchdog/lz.ini

      Filesize

      12KB

      MD5

      bd725900d3b337c9c6ad07296f1d050c

      SHA1

      02645caa98fc63d7418cc95718779f592a9b01f9

      SHA256

      bcf764651d1241872066a7b6c02e3ab81b529139aa0a7f2b0136062475efb9c3

      SHA512

      0d61cc0749884d9d77e414d0f6d39572bcd4949c3fd37e67a537af4954087ada03cad0781ec37ce6ea5ca9986e13d28aaf0bfde469ea325d124e5393a46b55f5

    • /storage/emulated/0/183/LizhiFM/watchdog/lz_1703809553355.bin

      Filesize

      512B

      MD5

      682d892e98b5c55050ac851913ddeedb

      SHA1

      d8123b3215a92eb20f330a95fd7b0d3d4fc6e10d

      SHA256

      7c4f035f900b35903aa821c779269728060b1c48f658d3a22971bc59e0ade187

      SHA512

      730ca380b3b0590d44c07a746060c9511f091b583e0581a98e8f70dba5153ae689cfb8dc715cd3cad30dfde24dd425aac2b6295c03c4d0b4b42d82805db08420

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/cache/newlocationCache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/files/MiPushLog/log1.txt

      Filesize

      738B

      MD5

      ae933184e7278f1230da743ab8e51ccd

      SHA1

      ac9a9e23dc20ae0cbb4f84571df3ee3fd1f213d5

      SHA256

      43183627ac180dfe89a9bd95a136398bc02fe79d2dfafa4d6e9adfc556bf4fd5

      SHA512

      7ce66dac04c95e636999d11afd96b598b2ec08c0cb92a3e10acaa7a4fa804a1913780c7352dbce1c59db2a897eec2818c7e50842fee28256ac52764553dd727c

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/files/MiPushLog/log1.txt

      Filesize

      232B

      MD5

      68147f8e3b041ead4a96919cf29552e7

      SHA1

      cd4931c3ad9150f44ae8871f4a37a5deb3fe255a

      SHA256

      a44ecf42a27dc1d55f8aa0618f4b4992e51ecf4354c4a2f7da751a7b75b2ccbd

      SHA512

      c59d18907dfdfcc909292ea45befdb13b519a3772c42bfbf22a801c207384afc27476b30dd85073119f8faf048afc0a49d009ccaa6f0f24eb8c657b68cf6f9b9

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/files/MiPushLog/log1.txt

      Filesize

      1KB

      MD5

      9d6d9688aa91c3a3ba0f45db461ba10b

      SHA1

      248ccf656c362bdb08bb6fdae79b1e25d69dc064

      SHA256

      3639a1c9ea36dbbc87ac9153b05691ffea9e08cf6310d3725cb99ef2e4d29838

      SHA512

      eb86ba00b9414d43e22b20227604616b193447e7bcd1c6b48ce77a6c144512de342d948e27cc7d5d1e641922d0013ed0a63f94aa7d225a672168f7ced5834cd2

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/files/MiPushLog/log1.txt

      Filesize

      1KB

      MD5

      e49e59de3184b10067782727faf2674e

      SHA1

      7659da5394d77bcc1ed61ee3ebcb93d90c722b12

      SHA256

      cf96f0038398ce3ac97f860f5525edccc23f6be71777ce22ee3e6f0bdd6f0050

      SHA512

      4ee4d5becc91bc2bcf034f9743873b1fe8486a8b892c6f784cc616268807b9185e3e3a7058490f736d9942ad575baea7e16633174ca2cf7b67e976b9ca9f4354

    • /storage/emulated/0/Android/data/com.yibasan.lizhifm/files/tbslog/tbslog.txt

      Filesize

      1KB

      MD5

      ff9198d203526174e0129192cb5928ce

      SHA1

      e45d9931734eff22581651607ea583e5e5ea7fd8

      SHA256

      82b67ad210d821e92077f0dfa98d88fbb76ac953701b2dcecaa5295ae55a9007

      SHA512

      a7ddc0ebd0ba9c1ede7db6df7a5c8c3be4507dc1d67a85e065b3074d2592f48900110d58f237749055b8e59676133d4670b58d03feba27ea990ac3e8c23a0aff