Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2802980s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    24/12/2023, 07:31

General

  • Target

    f2b4bbf2b4289cd0751b41fa5244c881f9c1f0253e8582e6fc89afef5a381863.apk

  • Size

    13.9MB

  • MD5

    8855b77acf189b631b656baa3dbb92f9

  • SHA1

    9ca3aa1182c51f7a542832988ba334f215ae9f65

  • SHA256

    f2b4bbf2b4289cd0751b41fa5244c881f9c1f0253e8582e6fc89afef5a381863

  • SHA512

    484de1d0f67cf21b09dde0e3fe0d1652277260dfa2c540327d18698d1a1008316864dc6910e8da1f1b978b63b380685bbfde19e52cf11b40a18c1316882dd5a4

  • SSDEEP

    393216:oLOG2ENl4aSppIQ4y9QpUHJwIanMDzo/ysZhS:lijS+Q4yrHJwIEizoK+S

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks Android system properties for emulator presence. 1 IoCs
  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.lushi.zhuanbao
    1⤵
    • Requests cell location
    • Checks Android system properties for emulator presence.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4623

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.lushi.zhuanbao/.00000000000/37CF018B.dex

    Filesize

    48KB

    MD5

    75d46252620a12dd7343e91c8ba209bb

    SHA1

    6615b67e21963e5689685f8494f442dcd729d4d1

    SHA256

    c433c8e3f847da2b98ee8b704ea3b7d0f38d6249626dfe26a22bef0c08e5fa71

    SHA512

    9ae5f0ae0a77bc8c9a27a43252ba01d4bbb69a326eb028d2e887d701b202b66a7065765f2f0214d2b0701493634ff33c2104becdb80bf7e8c2657175857b7af8

  • /data/user/0/com.lushi.zhuanbao/.00000000000/37CF018B.dex

    Filesize

    48KB

    MD5

    4e93a7a07efedcc6e3c741526d2d89a7

    SHA1

    e25833d7a51783c17978a7c5e7953d7cf1df80f5

    SHA256

    26fd97dcb56a0ae4ffee7b9514cb697de101ad39e3b2af2933b1eadf409b740e

    SHA512

    94a5e0b50c0efc69b79fe9b46513537b798a45d00234a7fe1c529e7d5eb153704ec9966a0e0819983f726260579707d7b82e7b31f845fa7602e06c078b98319f

  • /data/user/0/com.lushi.zhuanbao/.cache/classes.dex

    Filesize

    9.1MB

    MD5

    fb486f505367d208d369c5966a5b2890

    SHA1

    b83c2a6ceb7c34733f5d6b4f126eb649d949446d

    SHA256

    8269e03881be58f07ec8e6a6ef34959fa21e118300d7d9c98303396108ceb06d

    SHA512

    bfc5a05fa93b3b547f31a91e9bf938cddbd15374f7017ea32303b4a895164f01ca966036883c3b990e4f7d348c1cdadf767610ed65d2751a66ae3d00e6d9f15d

  • /data/user/0/com.lushi.zhuanbao/.cache/classes.dex

    Filesize

    3.6MB

    MD5

    0586dc02a4d8a63d350ee7797c2d4b12

    SHA1

    3c368f9bdcd6a99729a9d4a0d1ee1a567c394111

    SHA256

    0157d405f9e631d85fc4bd6ad918d0e30ea586ea14c6765437b87397a237fc28

    SHA512

    1ef774629b48aa2effa1835eca24b5fe43dc150abe474f12ea2a4822de309c31048391dc64549abcf42e09fe5b6df56d74041c93de64c423081376478f8e17f1

  • /data/user/0/com.lushi.zhuanbao/app_crashrecord/1004

    Filesize

    229B

    MD5

    3b93ab2cd46f29941dd2811eed4995e4

    SHA1

    c9c5ff8f511acdbdf80df4304e6f58cb25ce3bd1

    SHA256

    857561d221431558ad9c73db0e2cbf0496c9914bf0687ad0284700d9c3335fb6

    SHA512

    852e0340206bc60d301f041db5fb11269b7f838ca38f58cb9191b10d89c3dc3985ce6e3979f933502fab75005f0a04dd59b8887f8326673b7bc9852652970515

  • /data/user/0/com.lushi.zhuanbao/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/user/0/com.lushi.zhuanbao/app_tbs/core_private/download_upload

    Filesize

    56B

    MD5

    66729e9cacce216d47b9b59a1b9c6a39

    SHA1

    c711c5ae4ef7bdb698b36b3d3619caf3717c1494

    SHA256

    a2ecda1a33ebc7eb87e8043063d80370f25d0f77e2ed6d73769b119aaa1f6f82

    SHA512

    4b5c7a0663be78c14002ef6d3462b31ae69fce097b0c3800b5cb712f0089b1c36a2e14f2fdb1cd135dd84f5fc853beb1f27175f91dd7df4ec0d5e044ba828ec5

  • /data/user/0/com.lushi.zhuanbao/app_tbs/core_private/download_upload

    Filesize

    56B

    MD5

    87774b925547e99b2a6817b92f912c29

    SHA1

    002c221fb421ffaf332d3d9de197a3dc347ccf57

    SHA256

    3b052286495f6d2e3369921bafef679df3880f87eb3e0967e4ce772677039efa

    SHA512

    d52ce0c318c09a44bf381652c0f5b2d229181bb9350322dafd99a71ceb0f281a774d6829dad8ebc14830c70eb03f2a02febff21cdf34bc556c9dc1bee06fc8c1

  • /data/user/0/com.lushi.zhuanbao/app_tbs/core_private/download_upload

    Filesize

    84B

    MD5

    e745de68088040dae88818e52c35d4d0

    SHA1

    44e2bc9eb74fb266c6946362ac04c4b484c54f58

    SHA256

    cc9a5ed30d8388518af9af21b8ecbb7b0592b604649130f42c13422a0f998511

    SHA512

    7703af2c8f2125a681d61859dd4d2c7020faa9af7cdd59155b615b6bc9e90b15aa5b2187ddde9f2009645dc47805bdfc3f1f2656a7f8ba4313f0b84372ef5e4d

  • /data/user/0/com.lushi.zhuanbao/app_webview_com.lushi.zhuanbao/Default/Web Data

    Filesize

    60KB

    MD5

    536e58581641e767a8bf8eca3b8cde9e

    SHA1

    750a88189322e36147068f1c585f02163ff3a388

    SHA256

    3ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0

    SHA512

    498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319

  • /data/user/0/com.lushi.zhuanbao/app_webview_com.lushi.zhuanbao/Default/Web Data-journal

    Filesize

    1024B

    MD5

    f70d85ad61db332c078538986f13d0ab

    SHA1

    a85db3995d4d775b8a21115e715cd9dbaf3c7f6f

    SHA256

    a052ba1d4cccca73485602966d476624bd685cfeedd34aab63687ffb69c8f985

    SHA512

    26f4fd12145fb97a4d387759784b898357f9530d8589b9b1519de5a75d458c7b32b34c778cab1dd5036c8a30293fdcaeeb75a46039a2d9893d0b760845fc8598

  • /data/user/0/com.lushi.zhuanbao/app_webview_com.lushi.zhuanbao/webview_data.lock

    Filesize

    24B

    MD5

    c63a9f7cdb8da7bddde88a7e09f5a577

    SHA1

    505841822be27ca29caa69325c09d8ac1344a8a3

    SHA256

    af1aef4a9d7fb34c70533c10a5e370f0a8ddeb81112c9eee8e36468d696afdd6

    SHA512

    06079e12805711faeeb0f62cb5a97210f742591fae9a83e1ae83028eb2a8c6b457028e307d74a75cf128371b0f5e1c07a20ded27a9c84c3d26ac7a8e947e80ea

  • /data/user/0/com.lushi.zhuanbao/cache/webview_com.lushi.zhuanbao/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    48B

    MD5

    45ac01831a0ddab6dfcca6154d502abc

    SHA1

    8be3d21b98c4d54eb236bb5789d802e24f964cb2

    SHA256

    954f65004a33b4050b646073333ad2ab4e9f8161d2f02af537ff3ba459c825ee

    SHA512

    11651f5c5f71e5806628ba365ba9edbf15f2a68f81b7d50775d0032e118e47d4d56413ffe001b5e46b0d8c13102108966f8b8ad47438893f37148c9f405f334b

  • /data/user/0/com.lushi.zhuanbao/cache/webview_com.lushi.zhuanbao/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    20B

    MD5

    d1190d7c96bea958becb76ec7d6ee3d7

    SHA1

    f347d3888e58fe4efad3057827e447b1e0f7ea83

    SHA256

    e1af476290019dbfb22037eab4298ad03540c791b1d4c533192534179b290385

    SHA512

    71eec1afe7a6fc56aa0726c05941dbaba7a18f3cad2cebef8d8feccd4fb6057d639e17a6edc1c146910f8f4b74f7754e3cd94655d5edeb49830458c9ebed70de

  • /data/user/0/com.lushi.zhuanbao/cache/webview_com.lushi.zhuanbao/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    48B

    MD5

    18a8d28fbab1bb8336710e8685b332b8

    SHA1

    1ee5a2174ee48887bf6bab0677df2b4668f30fa1

    SHA256

    2560add6853001a5740fc84d918e8ea8bc6f85e8fb2841d6fcf2b76e36536899

    SHA512

    06c7c52b16dfc0f35b2610f00c970c4f72fe83c53a3dcca2877a0f58061afd5290116612acb05ecc5d1f15f19e519d24cc6bbb9acbd7d05e649eb0d1637ab91d

  • /data/user/0/com.lushi.zhuanbao/cache/webview_com.lushi.zhuanbao/font_unique_name_table.pb

    Filesize

    28KB

    MD5

    9147f3c70cd68eca82079554128543fa

    SHA1

    3fac96cb4b59ac89a9ff4ef4b91d9570342d66db

    SHA256

    fd0e0c4e89444a88d27118b6eadbf01cdc5debc762d9b6ba8b51022558702736

    SHA512

    ba6c2ec755c4e49b5f31fd4acc4d19318352608b87b1e1ea90cd7c30c7d41fae4437a6a6bf39df31d862b2b193f43924abc22ab0998045d12e380999e43ddf98

  • /data/user/0/com.lushi.zhuanbao/databases/bugly_db_

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.lushi.zhuanbao/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    e316c832b742f49acf63d68fd35e4369

    SHA1

    3d33cd8f644c9e4e6fa49c6c48c8b36852e525a8

    SHA256

    d5febd1ed0cc3770a82b0284e544a484ab80ab51095ca03624fdec9bf6ef56f7

    SHA512

    afb2b5858ae89f0dc0f2f1a18c21172595d591f7dc68140fae694c17f0ebc22a161c2eb14bd934fcbad324d45eafbf5f80ff4e85b4770940ff6559407b034822

  • /data/user/0/com.lushi.zhuanbao/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    009810cc3444a662142390c903354cfc

    SHA1

    5584cda76dc459450c713b98f4a616abfca76adc

    SHA256

    fbf8d70b45ee57db9faae693ccfbd1b4f0ff0263aef351f38dccd78a815731a1

    SHA512

    2ff7acdc7eed26cc9a85768ab1c6bae8a1f8d924263c6cda76d3c7f912cd4cc138f56534c580edb60a0bc406e16b3bdeb4bf17fd48063672f22df709e57ceae3

  • /data/user/0/com.lushi.zhuanbao/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    85ea02f25b1c38122ee1b60f63abe662

    SHA1

    7fdd0f068908d2a7a1d1bf9f58555e323cb9e1c8

    SHA256

    1ae828cc2bf6528831d11e6685b32b6f2cf059760aefadf705a8089cfc99cbfc

    SHA512

    c6e53ef744f62dd43dbb8740a7341bb20c45d564b8276a9f0a8a641b2a8bd3e1b2cd538348cf13f4a7347f88cb34ee48b51e2b42021d6d4c9c2a9971b85ce1e2

  • /data/user/0/com.lushi.zhuanbao/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    9a5fea53f0f17192fcb316778c7a2bf3

    SHA1

    c92a9b958e4f645c472f9bc4d41c07e4f49b1fe3

    SHA256

    aaa98dea93cb169c2a7c87383b1b34cfca2e5c5785ea31ef2361163a3d1a502d

    SHA512

    40a22f3c8afad904c88cfaec5036723ae0a7adcb2e1e64107bb8482ce4ecbedf3d12c196f7e6f5322fd01b7ae47029ef8d87f7bbef43a0ca717ed651c552e4c3

  • /data/user/0/com.lushi.zhuanbao/databases/bytedance_downloader.db

    Filesize

    20KB

    MD5

    40b7d099fc8c4320b1bb8dbc6e03151f

    SHA1

    bb556886aaa719ae155b8e499f530fe970e6e5c9

    SHA256

    02fec0e756afa49755e14043766cf3ff533addef9567b0243e06beeab805ec0e

    SHA512

    dd476b16caee9c451571a95c98fda38496c8a75a4f5e778b4900e122ce34a7b474831c6ca84d1b42e83af4e6cb0b693ef0fcc8fe5c3e4162f7effc6c85f6fe3a

  • /data/user/0/com.lushi.zhuanbao/databases/bytedance_downloader.db-journal

    Filesize

    512B

    MD5

    b8ae8cfc4a1cee22bf244aeebbe8a72d

    SHA1

    42567698fbdac019d562e83e9a599271de4bf7dc

    SHA256

    be7350139afe566af8d8addba67228711920ed71b38fefdefd5cf2122c38e551

    SHA512

    61cc6c78dd7bead59c8389f4efad154e45b25c752224f79fbf33f43b5cda4a7c4cd43fd9d80568f2a1405726bb4c4a9387ab693af27e040a9bf00197193421bf

  • /data/user/0/com.lushi.zhuanbao/databases/bytedance_downloader.db-journal

    Filesize

    8KB

    MD5

    e56ea3100d3c107af0dc7421f558d313

    SHA1

    acaca6f635809222cd425fe3d387de8623cfcba1

    SHA256

    e36847d973252fcd30745fdf1e53c0f957afb4adb76160d55d483a5499f69770

    SHA512

    16e75bc4b597ca93c0caa8a20873191b65b17e4da0ac34a0298ddef1d75aa82a963a3e7674bf81a4d14f61ab45f778b2b782999182cec7a48a072d8bff37caca

  • /data/user/0/com.lushi.zhuanbao/databases/bytedance_downloader.db-journal

    Filesize

    8KB

    MD5

    ce8523047d07d67d893bdf175dddc509

    SHA1

    1677848fab1943476b49aa7e23336bf581563a0b

    SHA256

    9c316c693c2271e82c1ed9bae46682411ab9dbcb87613dfa373b1929eac1d836

    SHA512

    a1a4793823cdca1ad274de9f68da2d721a52952b117d7e1fbf43278d66f9184f1bbc7e942b03affb97e9e05652507a00dbedefa5f431a0373677f096bcf4a6d9

  • /data/user/0/com.lushi.zhuanbao/databases/npth_log.db

    Filesize

    20KB

    MD5

    8dc03e147a44099e46adcc75eb340610

    SHA1

    4e087fa92230d55aba4de0ea71719afaa66ec108

    SHA256

    e7a10f4213b91e5144fc5e5d61ea6b81484ec79506ad7f7db35ca992a9634a7e

    SHA512

    d823aac6b0f8ecd90106e1b10b8fc5399798dfc09e63729b88b525a8a43ea301fdbc3977eed3a1fd21723c0e1f4c78585db9f9fb3402787eead6c724087d790f

  • /data/user/0/com.lushi.zhuanbao/databases/npth_log.db-journal

    Filesize

    512B

    MD5

    d0d02e7272506cd7f67c4980b94e7296

    SHA1

    ce03a146fdbed503c98905499a15b30206d52204

    SHA256

    2dbc0dcd46ee26a97f1ba53a826c5d2723e617bdb59283bfb85df212d0f86f03

    SHA512

    6d737ee7a9492569efe0e5809c92fc6683d5d0acbb5813980d8a3b0e168912daa9e45d7e55ee9aef3ba9a14a96ea81d35c27f0d1cb996e63696ba61564c028a0

  • /data/user/0/com.lushi.zhuanbao/databases/npth_log.db-journal

    Filesize

    8KB

    MD5

    471b3945bbb262f0972e45bc35b93d5b

    SHA1

    ef1bf6a797ec1081c8b47ef0bed028ab83ea298a

    SHA256

    8d4a70e53923c5a6f793f1f0fa5f2ff4a53d5c5f11eb63c5fb6c12b8b2280085

    SHA512

    c964e8dd09f5b1aece74363c49f31f4d097fe667462d41031b021dc1e2091892c6b8d8b8e3c96b2a2d2e0d601f86f5e8c95f0dd96c57a1561934bc304b71b28a

  • /data/user/0/com.lushi.zhuanbao/databases/npth_log.db-journal

    Filesize

    8KB

    MD5

    8493032e512a5a547fc9f1bfb705df4b

    SHA1

    5f003c809fd63ce06f5b5b41d99831edf6846ec1

    SHA256

    953082db98aa15fbd70f77c3fdba58b9e3832bdd5d68753d8a06889db3e460a7

    SHA512

    8e4e19ca27c5e1f409707252064d10bd7c1970267f2f2095f05559f97dd3d4feb952b7ebda27120458406488802f9686b4e096e699bdd241a10162bfe2853c6f

  • /data/user/0/com.lushi.zhuanbao/databases/ttopensdk.db

    Filesize

    56KB

    MD5

    8a86a19a1ca231ab7a6dc004c817c8fc

    SHA1

    56b88350a7fea73de2150b2b499167e15cf35c69

    SHA256

    d489e8fab49b8fa2decba4663e5018c6cf365cb2c124f5d66a986a6c035cf149

    SHA512

    b50e7cbf9f0a9a224d3f93c959171ab9e5f9c68d2bf1da0a65772e9af96aeca32993ea9f0ac9584d0bc27b80c210f810f1f4eabd1cad7e8e48b226a22430db49

  • /data/user/0/com.lushi.zhuanbao/databases/ttopensdk.db-journal

    Filesize

    512B

    MD5

    a5a10ddb38e51ebc7c1b9e4b1b2a56d8

    SHA1

    f53dfe36123fa924291531f60570bca4055bc46c

    SHA256

    dab06c64c64637fe94170fd4b9853cb4e9d20d96614bc69ac5bb775199fd2ec8

    SHA512

    e7638b83253e07123d3835ed66ef476a6a5a52b3e9bd0b4d79de92d0ac28741fcdd2d3f922c6ac071f055e48c84c82dbc4845981b19b45acf26c59885881b309

  • /data/user/0/com.lushi.zhuanbao/databases/ttopensdk.db-journal

    Filesize

    8KB

    MD5

    c0334a17b291dbc14bf49fb6fb4cf284

    SHA1

    a0e357959871bdc4386ff59391261e089ae1328e

    SHA256

    80858d31d99a8bca8f6e09649b904169cc680c3b41baa161d0e3afeb1b0bda38

    SHA512

    06bab8dc16d9c43d8f913900ed2dc927f1adf294b254d1b18edb488d074896fbe2ac4d107a74227ba892a9a0ecb3c4e3b62e1d6c14e2883925bcf5dcd6b37fde

  • /data/user/0/com.lushi.zhuanbao/databases/ttopensdk.db-journal

    Filesize

    8KB

    MD5

    05e090ac71fa4dc8f70c48de76a8e440

    SHA1

    0101e97789dc1e61047cf109e5d4fc1e2bd9dab0

    SHA256

    4d9e62d9c550f997402f008d6c45cccfd7594538cda18ae4b335e02242df90eb

    SHA512

    9f9968cf9d7e693de326324b28a9a675fea56bc400f883d0a428c8a8e4169b38eab00bdc981caff5c23bae16ab2aeaf998eebc2a7618c1bcdf0d70a7a40a57bd

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db

    Filesize

    20KB

    MD5

    75694e403dbc728c85b85d55d972d357

    SHA1

    346ce6fb424f486cc32f7f46649649470cd57225

    SHA256

    ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9

    SHA512

    591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db

    Filesize

    32KB

    MD5

    ad6b728245afedaa5e27d6bc444b1684

    SHA1

    8923313dfd4ca70d3e53ea849a8d04f8f260db50

    SHA256

    f1a47952e963d4ae09d755486a5db0e9f189e52907cf6ccc9fff9451dca16a01

    SHA512

    567098c250f0395f29d8ab69d6689db4b9a77609dfdea79d287adb6d8913d7408aa0b2b9113fc371499375171baeb28d3cc0f1055d8fbd4093e7cc5d3dc6e9f8

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db

    Filesize

    32KB

    MD5

    c47a8267b13dc01b3b34ac5079a3ff32

    SHA1

    9e5353ed91963512a71d208798455460b3a65477

    SHA256

    752a6d81a5207de08338bf914f3cf0930975663b91a7a0227e57a543279e8f14

    SHA512

    fb3f152f195c4682c0f08ffce5cdb72dc8f9594acae2dd2f7ed6d2ba372dd1c3dac2ab0b1eda0ba0e6d8ba80896eb68a3d14683fa143f4f9df43c90df363e6cc

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db

    Filesize

    36KB

    MD5

    6a9a504eaff03a11785534cc8aa1348d

    SHA1

    463ca9bceafcdc329e1bee317504aef0774206f9

    SHA256

    061db80091dd884130bcd92e5f4c69225a456be980db5c056795a2beb47bd987

    SHA512

    32da500ace8943911f3e63cdd00fdbb8d7416d99a0421a11a813e4a805e1f78378047ac4f6814579be033bd9af63211a2c88fde46f1fabaeff54ad723d7969e5

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db-journal

    Filesize

    512B

    MD5

    e5e9a17327a2221ac237e778cf8b0386

    SHA1

    26ddd5a1f860d0a046eefde8fcd5b2481393c10a

    SHA256

    a34f99a0288ae4ab1e2f3f39637c9f839326188ff838028eb2193788ea77b821

    SHA512

    c8f5ec2b6f9231ec341aee852e99a86b2ed501870cadfc534af95270e3e4c80f5152d51d846ccdbb8fb690ba2acf8fe9dd9b2284c5c14e6cf454ca882deccd14

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db-journal

    Filesize

    8KB

    MD5

    8f8a891704fda68cd09ccae66c6bc7c1

    SHA1

    89e2635df3252a46f02b377755b5ef9af99b477d

    SHA256

    ad157a653252ca6317958329f7ec166a4b7d2fb8a3f2445d9bbca1739d5d1b64

    SHA512

    43dbcf3f72dcbb4584541bc34860e95af096e2d0cd951fcac964cab25373cfebe1b74296f03847db1f35cd55d25bf7617385cee73e52da6f766f5fc1272cfe6d

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db-journal

    Filesize

    8KB

    MD5

    81cb2fa3798b5e93c9792d1219ca5a84

    SHA1

    638c7615bea36223ebba7759d57585891e55f9ed

    SHA256

    54e214796272e719052cba01be934c83ac5d5169b9b9f920f26c99335ef8d2d0

    SHA512

    feb8a1d0338f135654767fc0362c40032ce12f211d7b827ea8f4145f7001242a704bbfa2ea3183ada3d5ca9959c06ff36ffab2087ba35a8d12bfe7f68b9315ea

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db-journal

    Filesize

    8KB

    MD5

    73cfc558efe62dc4b39f760be4e4b4f0

    SHA1

    55875dd6da409aa0ad4bbd72f54d818be44e3df4

    SHA256

    09ce67e1fae0cf2ae9a1a0c1dd68bd4adcaceef2ffe203726372a8ecc2c588eb

    SHA512

    bd1f7e6ca8701b41427a8c3a41547986274450998b7a52b2b9e7a830cc8b5e2593bca1a7e47b380c1bef6655245cbe13b2e80824edb47a61e152fb706efb9c69

  • /data/user/0/com.lushi.zhuanbao/databases/ut.db-journal

    Filesize

    16KB

    MD5

    ddf692f1c465cb8e92eb7d3edead70b6

    SHA1

    00c367670106f7bcb752801a114913d47e3aeb49

    SHA256

    2b57d2e22443370b1aa14ea1e5ba9594148e8d66625f57b20d687dd01c6b4b3c

    SHA512

    b1ff30304835afea1346c5cf89593cbbde70bbb4fcd8b183e2403b0450340626372812c7e67631f592e89b46179e90fd5dc759fafb81fb9722af83b55ce6898b

  • /data/user/0/com.lushi.zhuanbao/files/.envelope/i==1.2.0&&3.10.00_1703609899097_envelope.log

    Filesize

    2KB

    MD5

    283ba7938ef9346115d7fe72de0cefb7

    SHA1

    8d41c813c42bb3530009320cd4af03eda848d3c8

    SHA256

    28472eed111bad95d1f903cfdc90606a64aee90acce397c53a8a2d3ec940dbd8

    SHA512

    e95905aab77aaae55fd79531ddaf059a3c11e660be9ba9adf5dc8efab47718bf2a3b46f027cee92becadde3cd7aeede919f85ee570167a9333d34e056ae26602

  • /data/user/0/com.lushi.zhuanbao/files/.envelope/t==8.0.0&&3.10.00_1703609903791_envelope.log

    Filesize

    1KB

    MD5

    90a76ce52b841d06bcccf7ebb2da70aa

    SHA1

    411bda82f82fdc639d54f55e6346be7c7b3dd50d

    SHA256

    8aa576ae74a0958f100118459ab21fe8b7c7bc1d862d7957367156cf3f551f5c

    SHA512

    4275b9350eefefcfe9fef47d553c95e0993acb2f1e093ba6ea1d7a4208eaec4b1cf4ed5aef3b557cefa9ce8d1e57bf43210e2fd971c16c0c5f70e314270f6a65

  • /data/user/0/com.lushi.zhuanbao/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    47cb991f060d8c2b584d642de91bcedb

    SHA1

    d7d6ccc32ca6c367cb2dffae1a745cff141e8dcc

    SHA256

    106a2a80b289bdd1166c9c318f9b12e4d946dfa2449ff79ac6a08ccecd80d060

    SHA512

    b5da4db04b160f4b998c8a621aafbed51e4ca09f14c4f1f7eb817cbe4561ec85bd001eb6bdba4975551f1a100f4c556d4e97f5c9bed2ba74b4f6fe679e2166cd

  • /data/user/0/com.lushi.zhuanbao/files/com_alibaba_aliyun_crash_defend_sdk_info

    Filesize

    225B

    MD5

    79768c6de250420a5a94735ef789fad1

    SHA1

    f8a2a7165d753a09be79b84d5c853db068c707ab

    SHA256

    2400296de26c13a81f8cb4a060ff3596f95cf02fac3228513756be20f7d232dc

    SHA512

    8de2221403ed3168d9f3e33a7faa4e4206978d31131cf2ab9018208c2c3d518a0ec379451dd4a129bd704e1ebafcee4c69d3e0e2d7c06829f6473a4f6afe2515

  • /data/user/0/com.lushi.zhuanbao/files/exid.dat

    Filesize

    60B

    MD5

    1ad9d9c895c277283313d17634c488e5

    SHA1

    1a6981ba6cf27ce74d46b6cebd471e938f42c4bb

    SHA256

    090662cc9dad2e3456582c73dee587da82707683d1e3de4650c8046755afe606

    SHA512

    28b9c9131cce0b066782a0d7c609f2b99b615c375309b40fa70be1068f3b1e0e0d90d871b24354c90b02fdead8b7a937964aaf1a37078fcb912b98d75d32b711

  • /data/user/0/com.lushi.zhuanbao/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNjA5ODk4ODcw

    Filesize

    1KB

    MD5

    ab76f909e1eaafcb0016706e95b72c17

    SHA1

    c54b3e93a5c5531c09a43abb43467b66e3d7ea2a

    SHA256

    02c98ad6cba57fa9e90671a455139f03558a901e9791de89a48d09c65655da01

    SHA512

    941069b8d63fcccf6c5e02af339ef47866bea362e282d6314729460f7ce4337a5af610097acac0e2979cb21a6e2ffb120f1ddb6c4d17ab12f8d35c56c5d6c3fb

  • /data/user/0/com.lushi.zhuanbao/files/umeng_it.cache

    Filesize

    433B

    MD5

    6003cdd934a59f6207c8885151564905

    SHA1

    32b2884bb000b85682fad77753fca7378ef0c610

    SHA256

    e5e1ad3014c146b7798b850821325b8cac8a090d0afa3d834beeb81c695cfc33

    SHA512

    4b33d0029cf6774aa466ea64112ec8df95ad2304474b2d6677f0390c3196308885c64eaae8f1888797f64b82f99204f9b265887709f5cedd80c493f8430f619d

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    8133dc58d8f560d89602d3c3f225ff41

    SHA1

    afa6ce0cb927e0ef4c82ba894a98ad3bd0d86628

    SHA256

    1d17107da4a72f6180a513ec0a949e06d417008a9cb45db61e8abca0d2162b9a

    SHA512

    ac722ef89562c7f1b39105010a84ef2d8d01152b030322b1a3f24690066af7ec9a04bb279f3d6bac0972209b8a43c262fb38aff50231c28de3ccfeee7992efa9

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    408B

    MD5

    808277651145f5f6c7b21db2d2635d5b

    SHA1

    5135223bc7b45dd8c3f06948a86358d89031a657

    SHA256

    d278a2bec01e542e877a3fcadcbb2cfbb3328e8d651a40c3056d88fb98259b1a

    SHA512

    627dceef6a0b00f52bec16010c5c61dd1f9c2c12af65b7976ff30bb5eb4a694b65af90b56dd7f05f181cc9abac3bef746416d53fe2ab269932a3dd67e754a242

  • /storage/emulated/0/Android/data/com.lushi.zhuanbao/cache/tt_tmpl_pkg/template/ad6bd3e6bc7eec226d76280544f2ef19.tmp (deleted)

    Filesize

    20KB

    MD5

    2938d7e218f2f20c3b76d4c476f82b28

    SHA1

    0fdf075a089e9a63dd2ab13deac1d976251aae39

    SHA256

    a657fe52d28763da50464cc735076958f78a1821f07ce0540354a7370c9cbce2

    SHA512

    4a5ee1fa8e0b7e3b4230c5f2d0d105d2e7ee99576cc6af2d8c70a8bf444c35772fe833bad8e8f4f59efa24ca46f23acaf6d8fa2078559af962f48a25249e7148

  • /storage/emulated/0/Android/data/com.lushi.zhuanbao/cache/tt_tmpl_pkg/template/efbcd986c1fee7f430303b1db3ac9661.tmp (deleted)

    Filesize

    18KB

    MD5

    809f2e13cb5f72997bb55d6710608db2

    SHA1

    8bf548f8b1b522e2690b1317d952786e6749c877

    SHA256

    a9d80b8b0dcda0a40deade5827ffdb6f52dfe5d2016a337dd1125f803bc6a07d

    SHA512

    3ddf2212adbb8c1d35325f38d59af50a63016313eed17771ce25e5912062d957211ee6bd1195595b9f14e7d301cce059624cee9d7e734f7629884405aebf5460

  • /storage/emulated/0/Android/data/com.lushi.zhuanbao/files/tbslog/tbslog.txt (deleted)

    Filesize

    2KB

    MD5

    5333ce5d68c360e9af73107fdb9bf824

    SHA1

    5b9db4104a772e2de824c0f002ffbd2fefc95ea6

    SHA256

    c0b51149ddb54b693d2c8af59354f6ba595dac25df82e7642ee979e882666aa8

    SHA512

    a66a6d504e40d3d80113d97515c42d1e38fd95856a7f6aec859e762f3bb8c3301d1c52545925e927e3a33b7fa4e13711623c18b3075dec11f25059bbf0085bdc

  • /storage/emulated/0/com.lushi.zhuanbao/config/5ac714da7be6d534dd74c84a097f98e0

    Filesize

    344B

    MD5

    4ac291fd990a7997c603129c524cdb10

    SHA1

    8445b41c0033079bb9227cadc3744d3b7f9a4d19

    SHA256

    bad46e50382b73c66bc73a63a90c66f198d7a387ebb890279eb8ed1960e5dbf5

    SHA512

    f41a4b242355e4108cd04f2d66b5b3f7ed94383c4a18b1a47e0ad4b7c3edaf4649721130ba3cbdb8252e5854d5914fcf297d56d1defe9bf71ea912695005f695