Analysis

  • max time kernel
    2808079s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24-12-2023 07:49

General

  • Target

    f6845b6c9bc462c02162ad069caf362021c36f14da912732011c7b570e295c60.apk

  • Size

    26.5MB

  • MD5

    5bcce599013685a00c09d1a72e4f0f3d

  • SHA1

    035bba14d37ec7ae513b481f3fb2f96bebb7c8d3

  • SHA256

    f6845b6c9bc462c02162ad069caf362021c36f14da912732011c7b570e295c60

  • SHA512

    9e4f452d0d249bf788ccd8562883b56615e2a3c813864f4f1e7a2377236570b6c91af0ef5bd68f7c9a3c4bc7b18f1952607f94a0c80856fad3927ea8e1e4d0a6

  • SSDEEP

    393216:yacFRPrxh1zHrqEAhos4quKYO2UriUNlGZUc514ybOh5ZKZnNieMfw4edrNdlTLk:OFP3UudUOUN+1b6TeM44edRTOsm6QOCx

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell information.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.yueguangxia.ygxknight
    1⤵
    • Requests cell location
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5126
  • com.yueguangxia.ygxknight:pushcore
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5267

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db

    Filesize

    28KB

    MD5

    ddec3ed5734e000fcbcb9880ea076e45

    SHA1

    9a08d8c6fda5d460ea6e08fbbeef5a581d05db72

    SHA256

    2e3eafd5da06845d9fcb4a4c6a980a42730efba467212d640db1315b63f5e095

    SHA512

    a85bce1ff2aeddbf5e21e2d108ee2320ad0d0fdaf76111f77d725a255ab228ee0d602e39b31ba73917aa1eeb531e33c6a5ba4df6b038a88d1101b70d28a45762

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db

    Filesize

    12KB

    MD5

    58008e55aa10a8e3a5a3095fea366eaf

    SHA1

    2168637503a9dc9838a9e0d95b3a54c91caf53da

    SHA256

    df1ccc18c7679144d5a5d6370283c5a438ec6d951928f689ac0c605b4a2bf0e1

    SHA512

    156fed56448ed030e38abcbbffe4d287921457b6356ccffc668dbd6c32687195575b79f948e59a7f305556353d0ef6bd822dfc3712b2ce746c79b5d9e8b76d41

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db

    Filesize

    28KB

    MD5

    ac5ee804759641c0baf960d2e0840527

    SHA1

    d995b3d98e1d4cf031e6288cd5589ff96f44fdd1

    SHA256

    98e800ea99163bde54c7347ec0c9d03fdf31bfd1670cc48b8bb2286570654c8b

    SHA512

    1198ee76c5229de2cd2fd7642f49db35b57bb7fc7d0e85e04fb36ccee592b581ed6e2e4f6e2d1338327aed0dd37ff6c48930c20e1d41d900beaf2762dbdc9e47

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db

    Filesize

    32KB

    MD5

    513aa58102156d193602873bdd2d62fb

    SHA1

    16e010142077293c27fcaeaacfc9924208a19f60

    SHA256

    7ffc62e45c209477de4b092e72a7a9c4d837f0588204e78b88686ffef3f6a9cb

    SHA512

    4fa1f79fa619b61d57f25852332a1f5ec3743c49bfb7c55d47f3cfb3a99c7817de8e33b284a55381e2ca6477ed049c02c966d7420202b9b63430cdc9f7853f01

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    12KB

    MD5

    99fe757ed3b4d318736d978adbb11e39

    SHA1

    adce40401be2d3b3b832a55332f6b8dce2a2cb01

    SHA256

    66edede5aed21660e283b323c5bad45d023cc71ee149d5964756e87a73ed48a3

    SHA512

    c3a9fbfef34537a95e9402f75e621f6e38fb705a8fffc6c053a5599648e9b95201973711ac9c92b8c645909dffe99a7b4e83ff7af9ed1963dcc83d44b64d9d97

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    8KB

    MD5

    a46007f85840f121b7867da9a5e67c81

    SHA1

    5e54ad4ef8ec31f7698938596a33e7581566f4f6

    SHA256

    b863adac70fde98465b6a3ec49c908370c464c9aeb710df5c83038f3187c639b

    SHA512

    47e44d1959b8fa1897d888cbda3630b0e5cb19f726d21a900f8023077dd2449816c99c9433e5e80a1aff71d4ab7d83d3528e2f3001ec06ba0be91edf8c3a8eca

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    8KB

    MD5

    c34534a9ea6f72e0cbc558c10bee55b1

    SHA1

    9959d4e99415a4c5412e847d947cc0e2e964e34d

    SHA256

    00d9f356992c7600e2bff8c384da78c7d7fc2d91c89e7c29717f16923a7b83f5

    SHA512

    920bb2f8d25f5844687ad3c566e2273558e61996f1b47215fe542406b61078da2944475d2b152e4812b598decfdb55eeb3ec82a73ec44a9d959c78557e3de6b9

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    12KB

    MD5

    e71e1db3a1692baa0c2c0aaa2450356e

    SHA1

    f9e4e6ccd4444ddf36cb487d002e8f2207f89b12

    SHA256

    3b5f272565ee828392981d1c3c2448935bda9d13234d52400ec1ac1d4a331986

    SHA512

    7b8f9d497bfeb463f4984201bdf6a57bc4846848138e271408adeeafc04f850970c1a860e74ff45f1f4326921381a83b1df6477d12392611a3f7ecfc4e39cb03

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    12KB

    MD5

    7ee9eb43bd61212bd7bd52eb2fad8a77

    SHA1

    3a55a5db77d057353125031d37443e511f7d10b5

    SHA256

    67c851a941e41851f453e5f2dc2563db9c4ff2408875446ce03f193506ca95a9

    SHA512

    fe337025ff19c7bf799341c566d5a240abde2830fa130208262a0bbdedac5dd096ffc00348342fe2cd1b901ff78983985da09a5376ef3f74b6461a432a27fa7a

  • /data/data/com.yueguangxia.ygxknight/databases/chuanglan_report_2.2.1.db-journal

    Filesize

    512B

    MD5

    cb22e82c336b962f890dccd8d459f41c

    SHA1

    f7875dfdf3b772bc46ef0571b023299f3fc8a505

    SHA256

    286815ede346eff7bf57fc39e72bcf562a455fa6216d59f2cad4514f816e467b

    SHA512

    76064c4786b1a21acb9e1a4f16b9697494a8e2e8d147bd7fa1a054239987b4b57a114848b73a75f3943bc8651f8672319c6200decd300ed7dc2fda6f89ff6e86

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight

    Filesize

    24KB

    MD5

    08a6f958f02a04a77b83a522be409e32

    SHA1

    6fff1bf85c2876f26381b70238940dcf72b3619c

    SHA256

    f35d3e8c2d0c3904d010a93859a56df3be54d38faf654238cb100f70ae741ce7

    SHA512

    04d6f0e6624cb6c172a29b9a881cadf73fad93a84c3896eb583aac8823120009e43d009dc7888b59a726cef55a7f2a9b00dfa8cb1fc8aaeda2c6c78ed17a773d

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    8KB

    MD5

    6110f8d45fb867f6b4e27bcce21556ed

    SHA1

    270931359c24f7555bc30a9ef6340650b97892bd

    SHA256

    583a8fbe9ebb3898c845d4f89cb7d1338d26557eb8214c98c78f9386e6bbcf88

    SHA512

    77357e8f17c1a3b6b896577dedeba2aa8c3567dd12890d9f043f467f4ed2e2660bbbee4b219a9a54b3ced5a7b68b562b2e562ea025e51f1ba9b7c9832d3f3662

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    8KB

    MD5

    91493501c0bb1945efc334fdf9deaf08

    SHA1

    ed6172df8d4074a2b5fbd67b602850e4af40a36c

    SHA256

    232dc7e73a882555ae4cd0ab2f541c5ceeb9105ab39d91d41bd318523cd24094

    SHA512

    3d004323173c342a489ffb140cb6cddf04a5348c1599bfa277768066dd8f1d5e5e9c601f0ecee33f72dc2bdbff5883eba2b29c208b85b4aa4f4655f19084bb8e

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    16KB

    MD5

    e0fa6ed19f908d5fa00de5871dfae60d

    SHA1

    c5bbc5c1fe38530070ba249ea5600960b4305160

    SHA256

    9eb24bb27c48b933cedb3dee7063c3e700ef0bf6f4b88c6aa6b847f218006dc8

    SHA512

    c3bd753b9eef27d028e0a92d8affebb798f19dc097b25d363af3a7d904953576b36d9f667c4957b65e01f9831ee191a6871f509e00fd8e8446d7c394f040aa99

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    8KB

    MD5

    3d973035e127c4db3dd6229417384fb1

    SHA1

    4e2dd3ac21ebaef57d392b846897445e9ee29571

    SHA256

    736c8fe64ce55800459b3ea2d30a2683c399e4cf08129226b943f997bfce3801

    SHA512

    f25122aae3640bbdf5d9bef740e4fa046dfec0ab34256c7da1ae6ec45c32bbfdf5823a5bc4bde7043785b0066516aa37abf4106d396b6e2f8326fc24704b0e4d

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    16KB

    MD5

    57acfccafc782c0c9fa60e8acbb13d13

    SHA1

    6603d070c892fe41794d8ed658e15a3111500aee

    SHA256

    3fa1f5837722dc0e039e3d874f7292dbdbea988ee66fdc257b14550b1da8095c

    SHA512

    efe5f5e0162dd14c9ec20b8136f5945d9202e5318847bc228ecb16ebe56f9821508e2d5db9ef1392e7eb9beeabd7ad98a63ec7d9c85ec909dad8c98a6bc40215

  • /data/data/com.yueguangxia.ygxknight/databases/com.yueguangxia.ygxknight-journal

    Filesize

    512B

    MD5

    284cd12bc95ec63c247ade104e8ab97c

    SHA1

    cf79ae334fb19812b26d4b29b3dbaa506214da7d

    SHA256

    5be757d35abcb2f17402e976c6d98dfbca1b2fb607cf5f64e45025d2256f36b2

    SHA512

    7d04761b97fdf35f209da03f844656768a6fa7a66eb2c405b0d1810673908564429bc1a9896bd6f3f258cd48b74804c727e947c3821dfca29db8b60532b1aa18

  • /data/data/com.yueguangxia.ygxknight/databases/hmdb

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.yueguangxia.ygxknight/databases/hmdb-journal

    Filesize

    512B

    MD5

    e616cb663cb3358f367de9b5d643bb94

    SHA1

    4d7ec90586a3d2006edea600d71910d27fd5ea08

    SHA256

    9e20a1c08f99213ae89f2fa6670687bb07d0012deb1d6b53ee79157a2d27b8a5

    SHA512

    57a5285844952eaf8e620e9ab790ae54b9592ab4c1fe39bd65ddac3b6d2d704b6b7240f0872ab287c29cb2a2b6a285a9bf1d6e5cba411bc6e6f5ea56e51be04e

  • /data/data/com.yueguangxia.ygxknight/databases/hmdb-journal

    Filesize

    8KB

    MD5

    4c2302f1d0667be7e65fd32b1e7974f4

    SHA1

    4361684374526367938d85ddf1f29152b2a1b415

    SHA256

    7885c060e8c9f9585be32625cdeac4d52949f9195311a823f434852f7263ae56

    SHA512

    ae98e2855da77323d056dad9f40bc2f989fc0e2102ff94a8348f831841f0be34a789af279a0b7fb447e5d224cc8e4825d6e52605f62f0b23ade7d0679f3a37f4

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db

    Filesize

    36KB

    MD5

    ad9fb6cff3dcb996f326ba727feac61a

    SHA1

    6079df4926b2575038c048eb5c5da89d928944b7

    SHA256

    7db0a9474dbabf4d3aefeaa1fbde6457f5ffefe3773c9df30c41675808393e07

    SHA512

    573591e0eee4d4614d0dcdc2369b9664c2cf58ec863ac85e7a148a9e4f3162e04c2a6dc83a8ad221bdf5b39671027b1a29cd5e6d00ac1d8ed6f046c226e29250

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db

    Filesize

    20KB

    MD5

    646c000e662b9bb4782f0e282d3f624f

    SHA1

    2175899d1e7660b6985535c638134f09b584db48

    SHA256

    af0ff69da944235ad619b4496fbcb6f7fae3e095716af04b6ed06c5319c2fe55

    SHA512

    69016c3c09a40a0625766abacfcd37a1d121404507d2f69f1dccde930db44eab2480e3acdab7b2caea97743f7ab3db7b72873376c06ce13b354bfae34a16817c

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db-journal

    Filesize

    512B

    MD5

    6feb9707f77c5c2f3e84907f25576547

    SHA1

    737b0a3741d4f1f58cdf342056f3b1b39ec5a2ac

    SHA256

    1cc9b03172e612ccc0e3880986fa9d2085458ecd09f1a694b33cd1dbfdf19c2b

    SHA512

    1645c91627cc152e4f9b69a170479f66759936e3e7eb305fdaf6e88aebc8af2be9c41cec08a225859ddc93879947aaa530e20b0dc28821ab5bac893205bd9bdd

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db-journal

    Filesize

    8KB

    MD5

    13c0d1f2507759bf532252469fbcf1c7

    SHA1

    f7197ab3df72504deadc900e27be6be1f868e844

    SHA256

    6c13819dd64bc02a3a6f36848a0068eb768c94e5607797b2f7bb2222de3aaca3

    SHA512

    d71b011b1b308a05954fc015e98bc0d2ea6293503722d2407f14a8fea4cfc713181d44bca85d6a9a183cd3e7619d9f1f26f776ac353ad6bdf0f57c73e4688567

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db-journal

    Filesize

    8KB

    MD5

    87f63c2d8114bbff8d008d2ac897d924

    SHA1

    055ec58be20ed270f5090c2294792d9cf5c5c799

    SHA256

    b52bba33688c4720af114e003574dd220057a61cdf437bf480b386a83bac70b6

    SHA512

    fb4a5f8bed09a3d872265d8d962ac5557b58846e2aa4be2567fceafc8cc535d439a9cb375254fedfaaa35fd7b9c53a3467ba77830c49fd9937837e2afc1a72ac

  • /data/data/com.yueguangxia.ygxknight/databases/logdb.db-journal

    Filesize

    12KB

    MD5

    f9cacbc7149edf38c5740b57940b6520

    SHA1

    a42ba33805874c12df9a997c8bf277f4d34058c2

    SHA256

    e7e072d19204e590c001d92c1d3792a24a8de6256ad0350f362d2437fe527623

    SHA512

    34c6ba33d58719e3c26348a25af8c2877d943ba5bc34fd6658d19cf5971a4f37eb625dd62a3058e2f59392b37cba7eaff666b7da3ed0547d61dd90bcb9f247e4

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db

    Filesize

    36KB

    MD5

    b7036131b84bdf2b66c67fde18d62308

    SHA1

    18b1e5a358d68c846495cab5cfef7c6679659093

    SHA256

    c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295

    SHA512

    256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db

    Filesize

    24KB

    MD5

    64c41c230b6b606a7e4054f01576b9d6

    SHA1

    6e0e3ea5f1067f8b91718d21c2a4050a72905c60

    SHA256

    87fb8bb2da0a8d2c9cd4660f49a71d7f5efdc1c37c95ebc72e0735a551766541

    SHA512

    110a4eb6a23d2ec9c4fba1fb364b74574507fa6b690f2f4e2e7bbceff309159ed9d0a872ce2e71c7bf7efd47442e5b82ca7a3f0f3a55e0bc826250233fd24b82

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db

    Filesize

    16KB

    MD5

    cacbb26e22bb87730a53da2eb2ac5ec2

    SHA1

    189a4dd27fb5b6d994aad19d0210223bb8d55da7

    SHA256

    67c0357ccbd0d6d88464fec59a817e5f94924a19a596ffbfb140c9f98dce5fd2

    SHA512

    eef802621ab8b1baa84f7dc3dc90f59c951e2d7af937281d2cbc235386ca2e6259fc076d16d76eb469a5a440524c55dbaea753a6b73f2d231dcc0e30a201ed7f

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db

    Filesize

    16KB

    MD5

    26bc40dc033840d9074c4f18a9cbb6bf

    SHA1

    30dcb8718b8afcb6935403d37ed298cbcd94b7df

    SHA256

    e7c805fb6fe0fb0997728a5b7ad55450c387cc9010b582fbf3332899502579ae

    SHA512

    4f4517d4b2f1fc982261989d599346cafa7f009b232973a813a47489e9b56f83b673de6881c5ffe5dbf5c0c08485a5f9f78632f07c4939906d4cc3233f89ad74

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    512B

    MD5

    48a6f84483fd36ef96e3582e770a2bdb

    SHA1

    7a5b9ded5946516870b5e040671b0985f33b14c5

    SHA256

    31e7ab26ae3573994ad57d922fd774739fa5b278de1f9ae210789abef0bff17a

    SHA512

    d0db9b0d3834387124cbd26cc2c6b75e02c97b24c2e6e814971c98c816701aaeffb928fc582a4ca2a7b23e82094ab2c3a7ed12b255f9b6f4005610c6cc557524

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    8KB

    MD5

    2a98aaae5bccf43275d5741e968c6a52

    SHA1

    0d2c567074cfdd3de1b0857e356ed8c3f2bc57b8

    SHA256

    6658f31f023dae4b96ec79424ea5f32e7911a5feb7b6b289be77e3db340ed76d

    SHA512

    58ab2d29edcd1e5f3850240604c7be3963105224ea5d6c0d07656c702700d0605ce08fd1224ac76e6e5607aa6809b75470e281cecf6e9ce3e7802235298a8e0b

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    8KB

    MD5

    2feec004fb5fc0e56ffe3395c7460471

    SHA1

    d0065145238cf3ff5fb78cfe8a315d92f67bee0a

    SHA256

    8f13f0f152e13049a4fb979da4feb6f35a8746604646cccc7c52e178e1af7c1d

    SHA512

    0ce4d94f997f96263f57194e8c15602f8d0753ac17daa8abca8d24e5c08c5851bd9030617e6c6285fbc0512b9355a7ab071dabe9690b2c8a34a37d44b3519cc0

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    16KB

    MD5

    e146ed92539b3c4d3eaaad848bc579e8

    SHA1

    a902f9be8397391bf68ced2cd5969eed4020f8db

    SHA256

    c33e14d1eb6d09ae1705d5b11924a24a88be093380514e8000dc2ef9b6e1388c

    SHA512

    affb7ebad6e67376c7d12353114f931d03aa746302c59215d9ad26f623a07ea5a17f40806f6c9c514aa0344d5d23cbc06bc8836f61a095b667b244f8523da288

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    8KB

    MD5

    8988f4f091bf57000251a581cdd806d7

    SHA1

    44903ba0c705d15c4802cf274efc31c0bb2e7608

    SHA256

    0cb8357a73bf2c0c0ee354467533198a8afd44f635eaafd3c5bf3f8eca2735ca

    SHA512

    7bdaf6f45c4940395b6536de666ef438b12d2ca090a207487a135dd9b78b8cc9239a632bf042b4bb1c50a087f2f767b8efa5bf6938cf79b32ddee1e03c83aee0

  • /data/data/com.yueguangxia.ygxknight/databases/ua.db-journal

    Filesize

    8KB

    MD5

    5436c0c2dc21a0437fc1b15fabd4ab19

    SHA1

    be6afb1110c31418cb8efeb91c04ac98b36a9ca7

    SHA256

    b7f24d7e75e139b4c8b3a4008ae24e4121d65e3594cf0bb6a7a6cc43d753e857

    SHA512

    28e841da9c083563b20e379cafdd994328dfd4d926de8dbdf429062e8f2d1b64bacd791ff4971f0d222b7c6e8b7999f3179a5323c72e612e32677f9b04cda440

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db

    Filesize

    32KB

    MD5

    38d57e278bbd4eaf661f9f33937882f2

    SHA1

    e763351d4f630a77b1a7c5df8e548e684ea0f768

    SHA256

    259e8e770ae8479a6967fc0fdbf597ade837cad6cc97d8acd268af24a3a2c7fc

    SHA512

    6d54721d3fd04cb17aeb2dfcd475b0577ce784d4af2e5a653cdd47cf264e2134d4010565b54f2a3546969d656e274a4f1e0047dc8f382c225f0d41ed2e24c38f

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db-journal

    Filesize

    512B

    MD5

    f1093b5c643e5009cf55996620ca3600

    SHA1

    44c49b8fe9f723591ddf8abe1e44f7d5483f5546

    SHA256

    ef2ee1ea1df7b568e646ce1de8b8310dbdfb11a91a6e1e56ac3720710bca1cab

    SHA512

    eb7037cc02c3843e05d7d0ea765fd7f7d0acc9c0af8ca772b9a047776e2807ab1ee53258e95b879ddf39f58bb7182a58e835b80d76ce2c591da2a0bb648d998f

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db-journal

    Filesize

    8KB

    MD5

    46bd0457014e6c737b1ea8991a15c1e5

    SHA1

    5afdd4bb448c2c3cb0be219e570bb9ed24a5a4d8

    SHA256

    6490e5779c6befd1851a09687db1e20cfacf8c6d2331bef1ee1aa1903587b0ca

    SHA512

    3d9e452dfbd821c74c9d446df1f9c9fa4fa01a74eec60c4df7da40a05c31837f72213b5eec33bb059bf150ec9d81f242a5d0c8ba2f1b8ee6f184a569df488e13

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db-journal

    Filesize

    8KB

    MD5

    af068bb3129ca617f79e10a737cb774b

    SHA1

    d14b5c3f5e5e22ca92bc6f59c73b29b4ff150622

    SHA256

    2c9354c466591f29ebefc67983342fde45fbf2adfa85473d2039e6e0bafc303f

    SHA512

    16d98854e87f0295a164a64c9e265551f2deb3353f86952155e7c0165da17fb58fb594d8e5a69b2b56456ec2b82fd4e05ae42b3128663f7909383421ae2cbb26

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db-journal

    Filesize

    12KB

    MD5

    920e39c8d04a5db99e096935f459cb85

    SHA1

    c18d00526a111215acb114dc7a7a725946ad07e2

    SHA256

    187b8d96583697df23636a32ac1757cf5708a9207b24f6891adb5c9d646a21a7

    SHA512

    5c72618053c3aa766c156ed00e7f857be741f4fedfa75c3e8edbc565368bb7b6a9847ca0930b961af9a0c64a041f27ce0e2e5899a7b19e25f19cfe839876d44b

  • /data/data/com.yueguangxia.ygxknight/databases/ygx.db-journal

    Filesize

    12KB

    MD5

    2e9c46ee123d06a19af4debff3fb1f27

    SHA1

    99969847722a3763e955912d76acdd5407ff0a5a

    SHA256

    fbe963d0fb7d0e4fba06b73c7a9dc4a5c65ac76ba3e6d78fcd923364c1e7c17b

    SHA512

    091ff9e83f909e0979678a8c99b59846fd8d1b0ed8dc4c56e9194d918c0ff6ab5114f0186583104c2833e9864b20d3a623142fde6a3e12f4251c1babdd2f29f9

  • /data/data/com.yueguangxia.ygxknight/files/.envelope/a==7.5.3&&2.0.0_1703614986229_envelope.log

    Filesize

    1KB

    MD5

    d27f121fb12986a042cf1da2966d41e9

    SHA1

    f9e1eac87184f3d237c026ca1ec957f218333256

    SHA256

    69e8efa5df1de75610dd3bbda7d02b64a3faa750dd69878dd902bd177e61fbfa

    SHA512

    bebef3a2724138172094df6a4cb6ba3bc2a29d2b73d243a73c0aca6b6fae77f81424a5aa253b454d92cdbad4c797db273f7f36b3f2355ff7efc4a56ebb5c0edc

  • /data/data/com.yueguangxia.ygxknight/files/.envelope/i==1.2.0&&2.0.0_1703614984574_envelope.log

    Filesize

    2KB

    MD5

    5ff73a7d75cc188aa85215f451284fc3

    SHA1

    a177dc0f515fbf721308e00580c91eb4acf384a5

    SHA256

    917ab80bbfd90d62b31488ed57a9aa116a2a9ad981e372e9703588e2ea53be02

    SHA512

    0899098e1e3ef41c3b950b8ed492f245d43d2e4ad3e66098b8eb8e5e18999d5cbba4b711f8834adf8abd0db5655c1def25cbaef1ee5cc047e418f173d0c56b7f

  • /data/data/com.yueguangxia.ygxknight/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    e244c93ae599cf6102f8e5824e99da2e

    SHA1

    2da8f6f82b35ab198d8d6f2e9f41be2a8aa51df3

    SHA256

    6f1c9e85b45eb502c6a4dc36e790a26897dc3d84ec33dc2c9663d59857bc3866

    SHA512

    7c2885871e780b761935bf869506ce0b492a7f934ffc44642835ef6039f1ef700b600a854374fbb509f4c97bca1010efd246aee6c1d64f8d6c802add0d173165

  • /data/data/com.yueguangxia.ygxknight/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp

    Filesize

    547B

    MD5

    c95be8b38dd0a59bdd12ad882ca7d445

    SHA1

    e5826994575e042a39557f4189e0625144ac26fd

    SHA256

    f41b44206b6903b60dc8732dd360430ad7778a2d46000ac12d4c2bec69f0dc3d

    SHA512

    a1265e56f24999c5d887365ff1c011e92342b80a5608960fbac6406d69ea73904fad7733b6ff888e54814beb529f15b2cc8fa78930d06d0ab2ea5ba1b4ddc1bd

  • /data/data/com.yueguangxia.ygxknight/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp

    Filesize

    547B

    MD5

    de29e2fab044644eec93b9cb1454bfe1

    SHA1

    708388b40f2b164ba25a76ccf5ece85d5db77f61

    SHA256

    87e1ff6a26e3d24e7b4103438ca09b6ee98ee51efe7bf164303e54eec1c74549

    SHA512

    66863e1b0a5ff5b2555f38d5b593402e52848f2a076b4bc8f821849fe4c2956503d35164ec0f235e4537562c20eac7b2949b544edda517f91057b889e3d669b8

  • /data/data/com.yueguangxia.ygxknight/files/a/b/journal

    Filesize

    39B

    MD5

    607a6e9c92a4d1b146790bb49a0eb2d7

    SHA1

    bacceb34b65e8db3cdc6112846c42d44ed4e4d79

    SHA256

    60c31f262afbf447138fbd0e31e6609c619d2f4c596901c542bda2a53d53ec1a

    SHA512

    416d530ec7f3ff6a8f62d9c2e762995e91963f4100aff4c64360d9774173b21060f1cfc5d2d264ff33e27106a84ac139c96af6690b9ee62ea2ab0d76c6c64725

  • /data/data/com.yueguangxia.ygxknight/files/a/b/journal

    Filesize

    195B

    MD5

    4c36568f024e351d18fef3eb856bc13e

    SHA1

    46ea2ee737cac459607bffd86cf72044726ca65e

    SHA256

    df62894c08968ff667d8dceab87d74d6275595c04ec78c2e989c082effdd475c

    SHA512

    dac463d217bb10a674de0ec17cc74054238e7e8ba0bda3088fc18d30455b1640d03488f983ffbaa925138866a5b6db046055a1fa050b6b1adcc74a3240f2406c

  • /data/data/com.yueguangxia.ygxknight/files/a/b/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.yueguangxia.ygxknight/files/a/k.store

    Filesize

    32B

    MD5

    ac10da5a6990de6e5439cbe8e0caf3e9

    SHA1

    98eb6d3c1d624385bda649a8c1cdec92a202d7cb

    SHA256

    e3943e5091a92279162c41dbab7ac5caf4784637615c38e1cff59f7a02869900

    SHA512

    670dee49878ca1fe1ae16866d6b51a6669d5fd4b8e02be92d4ab0d4f2791698433b38477196d19c6cafb28e958f312e6fe518b8c7bc45f5d02ffad900b1db28e

  • /data/data/com.yueguangxia.ygxknight/files/exid.dat

    Filesize

    67B

    MD5

    53712839de86b2b5ed1b8b9c107d7cc4

    SHA1

    130c01c4883cf32ef4e1eb20ec3aa3e7df55b73c

    SHA256

    3f1f4396362d2d01dcc24f0cd935043e4325dc8b3bcd1b968228937450bf1b7a

    SHA512

    f2f646dacb00eefe757e7e3b9949775de87bd8b89d2a5dfe5246d49df4c45cfa2b3a8c5be4629117c363ab6eb2114462841463f203da42e90990bf3feaba0f91

  • /data/data/com.yueguangxia.ygxknight/files/jpush_stat_history_pushcore/71e5fafa51f21074702104bd/active_user/nowrap/3b1ae8d7-fa44-41b9-aa84-195dc37cbd6d

    Filesize

    12KB

    MD5

    3b64f470f66d9caf155e820df3bb2d0b

    SHA1

    46239db7372d5934ff863da79ea260c198b6862a

    SHA256

    9d30aaf8e597f78878e4b0a6abcad4f41ce9f03088459b6f242b9a7b1f6265e7

    SHA512

    0dcff6d79321b3a3d78440623c09650f8354d3db28f5b5bc180e0e35306e815abe5412d167cc7ccc7b631e8a5b0d1ac66079b0686af3cd1e7c9e7593b9fad208

  • /data/data/com.yueguangxia.ygxknight/files/jpush_stat_history_pushcore/71e5fafa51f21074702104bd/normal/nowrap/14fffc62-f364-4e85-bf91-edb26c88bc9e

    Filesize

    8KB

    MD5

    f0788e36ea3b7ce8e4516dda35297aba

    SHA1

    97d8f5ed9bcf398220acc5232e96cd5f10f8030d

    SHA256

    ed4aec7f6159ea0f195661a038be1980867b8c359ac45587bc8dd9c0eb8c34c1

    SHA512

    ab7bce83ce76724cc79fcd8738d1e8fcb3ab65f7d0fb7263235678121188e51fcf59c046d848d7c4c603e2a7241f86e8e8e120580471c0e01442cfc1030586a1

  • /data/data/com.yueguangxia.ygxknight/files/push_stat_cache.json

    Filesize

    119B

    MD5

    5398167d8a571382e8e5e1edf2ffd1ca

    SHA1

    c57d62abfeecfca0e011d8f260b97b1c0de12a3e

    SHA256

    eb26d5ed8004b3612245d4a39a197c13e7aee57e434acc0a2ddffddab8cb95a7

    SHA512

    7a9f14070989a4715ed520044ca41c7f70e7ca1b07c36cfe09134402799d80dbb2b778f0540cb3cd7855682eceaa2aa9e59af6ba6d9ee79150fbd9a56b8a7286

  • /data/data/com.yueguangxia.ygxknight/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNjE0OTg0Mjcx

    Filesize

    1KB

    MD5

    356fbdb062349c4ca9ded9af46b23ebf

    SHA1

    646121c04882bb33cb6606de569b4c7ac102ff74

    SHA256

    aa47bf7b67b73d8ffede7da4416895d56506c56c6dcd316e9497bfdc7ca11a3b

    SHA512

    bd77262ad4b8938f141b74e26350db53ba58ba5598702423d3004ce39eef334f50adda0d99f12864a97fcae6eca37aed3b459020dd758363fe6d81fd7a2f4fe4

  • /data/data/com.yueguangxia.ygxknight/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNjE1MDE0NzEw

    Filesize

    1KB

    MD5

    a18c33d75e3aa2f31a81499a4285478f

    SHA1

    dcb0d775ff36e8dd25c6c94045e3082948df5583

    SHA256

    c1f2c1b2295b257038bd5577721d574ebc24b9abd045b43889005ab3c8e75e43

    SHA512

    4dea7c539443807aed0ecc78c3d876b7eeae280b1a97bf9bf98c40f988af5927050b62d91cf2ed8ca849401ce53be89a5632a11380dcd64922d7b27ece5d871a

  • /data/data/com.yueguangxia.ygxknight/files/umeng_it.cache

    Filesize

    350B

    MD5

    b075d663eedaac9528a637c0c01a1f36

    SHA1

    c2b1f5daf0634aec8aac034b2aa60396ea6cb586

    SHA256

    053c254c3ef918fb78a440a59e92a93283f0c3a197eed7b0bf48d5ec691cad64

    SHA512

    3e94aa0624f17f329b5d654e26d8b427b239ae5291d19ad8d333966682ff29109f2054e15e24dc39100ff1e3924f7eb27d5fe4ac77b7e4a3b7f3f076276233a1

  • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db

    Filesize

    20KB

    MD5

    aa6a64326024eb67d3d31f8f7bdf9e8f

    SHA1

    3180b97c12df443d082faa414ad6709bf704231b

    SHA256

    a943e84d1da0a56f1be0705c5cf2acc5fad7e8995135308ab23b66cee38e6b44

    SHA512

    a8308648d7bfd3d2312eb96638dd7948c30722ed9bec3b4d04d430ac4ac47df36717f8b6ca4468acd482a72a4970874e26d48180aaec0d31bc8cc15282d2bfd1

  • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

    Filesize

    512B

    MD5

    6601ce36c01e7d31f1d49e695e3a83ae

    SHA1

    3df50904b28c358e3755e8686b92a7751027d4b1

    SHA256

    8fc7f01710f035a3cf18399012ad95f0463c837cfe52dee32a959b1af09e4e57

    SHA512

    657960828171d3a91002f346b0d51fe2a46be6029254408285c83d0523bfa138edd11c7e118d15c245931710aa1b93a790704fc56c967463233baeec067d523b

  • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

    Filesize

    8KB

    MD5

    7aa71eb3bcd7a650eb1a226073141fad

    SHA1

    ff6e92fb4d828bb8e3e5961767168b0ec913df08

    SHA256

    fde0f8356c9175abf6f37d2a34ba98e47e008afc5c90a6d7c26c69e9b4a97e67

    SHA512

    08d2431955a2f051cd93edc97f48f367117cd4da8882f1340c33f02ec0208d9d2250a5bc96f367cfe22d37265bdc50caad31a6a6654fe33001dd5ff8f96d098d

  • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

    Filesize

    8KB

    MD5

    106cac1ad3299c2379256d902d56dab9

    SHA1

    63bafd88fac26b8509105b2417c52f6453fccb6f

    SHA256

    76d91ad981d53b1b474b8ca9cef86f24e72c5b1714649664edbde3e2493deda0

    SHA512

    94e975e87542e6c04d9f4b654789c4acfb2aaffcc5eaf865ed8f5cb85352891e74e145eedbade61c2748944078dd375cf85f7e4c039d80dd8ee185a351eeba5a

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32KB

    MD5

    3edc1b3c2105a3a6d19c26583e510fa9

    SHA1

    964860030ed789ef6071cffd7307e51afdfdb538

    SHA256

    f86aa80cc2bca8c395a18be70586ed2d3ba2c86f4dc9587c15ea8bb5e1590c13

    SHA512

    008e3100cb5fd62682481712680e1ffd2e5ac80625b089aa9acf4adf515e4a7fe306e8d231f13b60c38f70857d970f4a735672aefb85dc9fb6e0bc9ad447cdfc