Analysis

  • max time kernel
    4122278s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    10-01-2024 23:25

General

  • Target

    51e918c413e2be347f479de7240ead4b.apk

  • Size

    30.2MB

  • MD5

    51e918c413e2be347f479de7240ead4b

  • SHA1

    3452e734110fa970b8e8f1206036c09850f7f423

  • SHA256

    3f35d8f0c677db4e0ef5376de01af3057de9cc42562a37fd5db89f0a25489281

  • SHA512

    3fdf81bcd105f48fb2f179cae5fee8541283459e635fbf7ee1dbf12c017133b3ced2f262889e74007a3baabaa5abf24958bb7d5c0988841a4fb217dd17bd7846

  • SSDEEP

    786432:6oIDbExUVwUBRZcX/YF2fuu+otaFbrf0Pk:6hbExURBwRfuO0FbrsPk

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 8 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.lianyongsh.wan17
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4633
  • com.lianyongsh.wan17:pushservice
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4850

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.lianyongsh.wan17/cache/weex/libs/weexjsb/x86/libweexjsb.so

    Filesize

    6KB

    MD5

    9bb067cd33b490d30f2c88054c732574

    SHA1

    d95a11e2be5c7a1fab9820e34cdd9e482523ea86

    SHA256

    fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9

    SHA512

    0b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    e90881075884395b5d41ca075bbd3330

    SHA1

    10310d029cf5a338122858d2a446973444b6e96e

    SHA256

    29635a3ae47798f76cc9b59abeb2590b0a12dcaeb640a6ac0467419981d74e80

    SHA512

    f24df04d8114f6b9d5917b5ae8abe0b2282f7e8b064846afd7732b14afad88312118e9848ef4482bdda07901854184352eb4c810feacdee00a436bab928f0571

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    531d1182f155e7632159a148eae768a1

    SHA1

    a40cf4de37c8d0d9e6e01a8e5e8a37549a50ff2c

    SHA256

    f68a780d8b65c2b6a3263239b5ff5307bf0b93213d33ae6421fc74a4a1812950

    SHA512

    dca5c33ae9760200963cbdf1ee3fb6152b7a9a6645b64736487ca53107da4b935d33adf5401c1329a0973f270d1df8736643d094b5ed5d4ca3c86f5cc64285f5

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    5c1805590dc49bf941fa3a67253969b2

    SHA1

    78a168f6f4ea8f662578c9db52f9ee8a631b1648

    SHA256

    e802fa8add624cf908225573c9012fb656b75cfc2e6801a5da286179bbd29b96

    SHA512

    20dee1bb0c78625c86e225c7fa1beeea7d3285e88d2dd2cfc250c5dfd474e964db404f3b9361722fd783b17a6fee2c4c7b2f459f4e3dd054aea2529c369339d3

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    dad5a6e5cdadb4680f21d2095feca72c

    SHA1

    abb0174936c493042160d9387373e9fdab335c67

    SHA256

    df63d99ca9bb634d278fb4f521057eae067a5399bcf116273936d32a0eea35e5

    SHA512

    60283ac80fceb849e7dcbf5ff367ed70360ba10a1124169b07e2bb4a9ba494e93c98e0b0839e7efb1538cce160737fee1fac7b7e44a3d8b733366eff30cc25ec

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ic

    Filesize

    40B

    MD5

    0230ed62a583f2e2088229faa81037bd

    SHA1

    a20745e3c637b8d4029fe477f2d2ebd98217e060

    SHA256

    bf959a715da51a7ecc4f1dde615beb7b6652ef37bee47905189b96a07bcfec9d

    SHA512

    646874e7e98cc44c523f4305c7cc5a4a929aa5d4ffeda5c2c4b37baf6ed03ddf1d2c751e7e06bb5355f58a84a269a00f3216c6554bc46a0bd46aed8ae07889ef

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    28a10ccfa29bd76f5666ad34840555ad

    SHA1

    87f875200ad3c9046c5060bc58536707cdd16405

    SHA256

    30d2ebac34b684d095e6352c33734aee04787c9359e1e04308fb21e84338822b

    SHA512

    ef67374e9676c09b13282902e0db5ccdab0a9e0e82a51beacda0dd660d82dc67cb19705836a050e03e009d86eec372153e8d0e5ea7525f71bbc2c2f3ccebb137

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    2e4120b3ab7702cbc756e47ab159fe85

    SHA1

    25f2e335c0e497a34ef086baf157dc13a3c664ef

    SHA256

    8b13c2452032dc89c2a5da551d8c4f3dbf7c96e89c4cf72c42e48a15480423cf

    SHA512

    f62a3a4e1c3ae739b3b3cc7e4a1c903b904e7e654a09f46ba5d926fc23f04c0d2ce5437332d72150494413d5f4b1e153e0fd1425da3676b059126ae311c8ff23

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    d4aa0535d1d90e1f5589f3246772b5c3

    SHA1

    0b6f260dd25061b3d6cef8485fb77f7c12940844

    SHA256

    cf03d6c9e9cfc96e7bb353581ae595c470bbf9a90b8db98523830c9a477f4313

    SHA512

    88934842468c50c08c1bc8ed9ce8f34cc14dc053fc74f3c00390edf810cd18b8124bebeef27b8321217024fe73444d3a1a86b8791970dcf1295e4eefcf5c7ac4

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    97d23053d9dcc108aacf9043247577a0

    SHA1

    4448a0ee19c6c1130d92747f010287064b344914

    SHA256

    95ea4d6e91656c5ccb2433cfcc382383c630f5c83c4b41e380d85d17f01146e8

    SHA512

    31cf876c00b2ef1caa11cb84f3c237b2b884105ce355ed8371272e9d695b5bc2c1ee7abf82539403460bc2100f5d36df2e1130c9b23f892dc1ab89ba508a286f

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    666f613f4cbed4d6ce5d2d55d1a5515e

    SHA1

    60c8e0da8f9811e89e55552904d455887af48d88

    SHA256

    b7ee27a442c986a02624c2e4f029d8480597bc76f3febc7a66c5a1d96cf388c3

    SHA512

    d52ac89751e1693c3ad66d848af3bae4db82631584fc75bd289dfc79e939ca69b19025a167c28543b7ded53b002d92e1d9323494e2b0681996417b6a0a0019d0

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.store.report_pid

    Filesize

    88B

    MD5

    b1ea974ae40acfcc8ce2c1018950412d

    SHA1

    3119e26aa13583b25b45228e9ebd933c137b132d

    SHA256

    46f7060f9583a495c02ba772b4a998922a3095ecc207b807fa97a200975f41cd

    SHA512

    dedb78882654fe2f81251acc0c4dbf9931cc0494993a275bf564e1c9b26c94c808701a4fd5d100496d1aebf1e469b742f0cfa8887ac17503c0abe9152f389d83

  • /data/data/com.lianyongsh.wan17/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    9b94580c36823bb0a9e31e40eb97498c

    SHA1

    d15775ea04fe6bbec687be90f41719df629a9c67

    SHA256

    a73068a991237e649863684f59d9d804bd246cdde0e60f97688ff5dbbc3e521d

    SHA512

    00d2c2d705953ba0b4c33d3b9bf8580782a9af0b912224d107a21f411dcca85ddbe659836fb5bfc4df6aa69a292b45918fee20ac8f8922f5a03ef90aee551b5f

  • /data/data/com.lianyongsh.wan17/files/.jiagu.lock

    Filesize

    27B

    MD5

    b9569ff72a53cae248b6467cfbd0c725

    SHA1

    cff86b165d32b805c1c3857970635f9151bd62b8

    SHA256

    b0afbe5016650218a95b2378a83b7d42187b50caa6ec4a386fbbb16ecc9f1d6a

    SHA512

    9a2e0102edad00aaba9e5d53a4a5c8aab83d4ffc4cf7615a15d2b1436f87ea8f1a45af4379fd2d97d33da72ef5575f9db1cc1eb83e61bbbff5a96380ad05f19f

  • /data/data/com.lianyongsh.wan17/shared_prefs_ext/test_app

    Filesize

    29B

    MD5

    4f4a64fb7fbd8f7e379162f0c0de2994

    SHA1

    c5d5773e63de6bae1f3b103d3db863388652b8ce

    SHA256

    e85ae8cab4e8c29dc8a36e03ced4185cd4c1a00ceb3b3a429260fdc110b9cf8d

    SHA512

    7f5c5c9381235f3ca7e3a55b6cba8d7aaf1cf8203f3462cc8383df3b0cf6eff014402f0fc91bdecaa8eefaee0274fc8db449696ff6f6b4f6f06458f080a1bf16

  • /data/user/0/com.lianyongsh.wan17/.jiagu/classes.dex

    Filesize

    5.9MB

    MD5

    95ea54574ce9261acc78c1808186ae89

    SHA1

    a72c36f990bac0434b24208d93d208f1dfde4851

    SHA256

    24bf2b8b9bbce20be8edaa889c9f7b749e6b278fe5e6cf95f0801f3e398da7a3

    SHA512

    d1732c1f69f6a0854fa3e0efc4a1d21cdfbe83aa3c7f40f5ceddcd3a1b38746a8779e21c63183bc6d0fb81a50d4fb6b79c402c3e0e1fb6e20e8d545b2589a1dd

  • /data/user/0/com.lianyongsh.wan17/.jiagu/classes.dex!classes2.dex

    Filesize

    6.8MB

    MD5

    6cbbf05288f82e1a3556a2d86bcf25ba

    SHA1

    ee1f1c2c460a88525e103a5a96d01ac69e65e781

    SHA256

    a401b060abd7850683e4b7783b6172fde7e3f27f564b2a0b7f0a502d7e625520

    SHA512

    12acaef01f8cd695432a22b52b4954de5b84e4ebb7ba85c18a980478767d702b50c85792a0093a6586c4d623928914a41afbd651f243dd131722f3e6c1db40bd

  • /data/user/0/com.lianyongsh.wan17/.jiagu/classes.dex!classes3.dex

    Filesize

    637KB

    MD5

    e211ee02028fa3cc9ea92b11e9f03700

    SHA1

    db78e571624f7eadd05ae409388e5597bdffad36

    SHA256

    2cd118382fd2ea16dcb8c2e7785a56043f9eff68eedbfe82ab1ecc5421dbd649

    SHA512

    cb8c66a4ad15b54c8e2d1ce082e472a5dce49e5ba2969c796978ead9e5e6cce6b7d7ef71a6d14a2282c88af96f9dec52bf2c0a2587db7f1dcf2ba6f33a3dcd96

  • /data/user/0/com.lianyongsh.wan17/.jiagu/libjiagu.so

    Filesize

    495KB

    MD5

    de685970891708f6edfd18f03c6557ba

    SHA1

    ac50f88327652a72df73d43e9260faf169283c34

    SHA256

    b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e

    SHA512

    cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

  • /data/user/0/com.lianyongsh.wan17/[email protected]

    Filesize

    63KB

    MD5

    5061e4948844f7d366972ac8005e9f13

    SHA1

    a2b79a1c79afb095ddebf0f16a1f9db64482bcaf

    SHA256

    3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45

    SHA512

    223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/049c894b5fe6c38f240341f863131db78db3a1a21c9d3ae7d4e99bb22e08b7b6.0.tmp

    Filesize

    1KB

    MD5

    2447896e2a8953b6eae70a47251bea10

    SHA1

    9f16f0ccdca3f22df0a73617e2cc615934c4fc96

    SHA256

    82ea318744f3eb498eb8ca1fb9310bfcee4f86482b88015e16e3770ddc299e1c

    SHA512

    43c8e964e9add3ff75ba1b7b8c6c6ec37b42e22b5fad2696f750db90ed7784bae889e0e70c89c0db8f19497cd25ba2631bc2702b767aee8980949ca3b51f53b5

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/1b75ffc6742ac23abe78ab0464cbf8fd05f928c9ac525273d7529a173ae97139.0.tmp

    Filesize

    1KB

    MD5

    4e668d797df98298d1426e66d51a018e

    SHA1

    ae6a2de8b53a54f3fd92a2818b3033fc3d1f7244

    SHA256

    959a48f5aa9a9d2c62b080617b23159a087c94a62c22bef255300e00a134cc18

    SHA512

    3660d9c674a1cb87bc6a17cffa540f60f40a6fb3effed7818983ee697bc66444665e52f2e9b036a2b5af00d1cf53de5bd934bd219116d13ea2e10a159ac7f111

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/2b7c39467f55a8b40c093e5b9d15cdf68bc35f1bc58fdd218997d0ac23d2e943.0.tmp

    Filesize

    1KB

    MD5

    14f8b925e0976ef3c9b3a2975f375eec

    SHA1

    cb3ffc0b88e6290598597e244ed492f702994c5e

    SHA256

    862de47c14416d81dc409aff8e46b3934d4f43d923c29f75ca018d36a11ca159

    SHA512

    77ee418d7f6e061bcf5195d7af6e5b2ed6330114877ed46fcf441737a30142e43f5a4b210966119a7f92184f2e3346059ce8a59379c89f4d2cc0f6ed7a41634f

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/7a1b4d9577fd55bcd2c487b568fbd7cabe359288584ef99db330a8eaa615f6f2.0.tmp

    Filesize

    1023B

    MD5

    04a14a63ba921ea1ad4666d28b774a78

    SHA1

    e58e10b1d1704859424a1842697b4344e9c0980b

    SHA256

    200da55201b3ea91a7bfe01dc342f65ba43c64e061e02e36d064553e8f35b219

    SHA512

    f97a7d3e03a89bf42082cbef7381157d6764b93077f0de2ea5045a053070b2275365203c9897037265c4b737ab3230a680344c06a38134b66b5936a029b589fd

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/journal

    Filesize

    619B

    MD5

    178ea0e0cccffa1898f8d2aceb734e66

    SHA1

    66077571f6324de76a57c0180500621b25e083af

    SHA256

    a1ac4dfc064cb9dd875182b945d0a73db91e7180f1790615354e909f03056137

    SHA512

    a3f0f6d874ad8a7ee3347af8a6334bb523be8a4b51df7afbfd36090706f77c142e6a69a0bfdd33f4264336e55b79df7098cce47d5ef411270571a982fdc995bb

  • /data/user/0/com.lianyongsh.wan17/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.lianyongsh.wan17/databases/pushext.db-journal

    Filesize

    8KB

    MD5

    f715468d5c9fb578914e7da539355677

    SHA1

    1818f205770a21a6b6a9e9d8b6fc5d78bf12e3dc

    SHA256

    d8beee3b5f13989bfcca297735ec9872695460fa962c0cf8150d6c600b994d32

    SHA512

    b331bf0d35edc171f43452fe9708b1ee5e18c1fdba79123f8b522c95fd3e1e1826e444c69cf06eaa96bb50d5aa43e791afd1b3d753915772a6f231a5fbb201cc

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    512B

    MD5

    8cff09cdeb2270d0a6252d048976c437

    SHA1

    b3b446d8cf67ad3e46f9181b414261938b38c420

    SHA256

    cc9c7d978fdd2af17dc49919053fcb91753742125f0e4ed0c6c84f71bff1b10e

    SHA512

    077bfc6f27dcf258eaee0e820575ddb970d9a59aa6a0cc682d6bf0f318c9a4dcb4a27a8d7bd52747cb96f989ec82a149de732a909d3ea9bec45bc2884f1c53c0

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    8KB

    MD5

    a41264992323b3f5127bffb78f2d8079

    SHA1

    a356209239cde9ea4eeef8014c1794c60c83896f

    SHA256

    c790cc38b29038622ef072c183286a44090cd8c0bef5682239b0333ef4ae6e00

    SHA512

    db8f6971a641f75d067d8a0db355f3370837f73237fe20477f5fd0802c591ee69b1801072d0d1e3b579c4a04094a475ba5454da2f7b081ab024b1eb7fd43bba0

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    8KB

    MD5

    8bae3a657df0275132026d6e1d32ff57

    SHA1

    236d37af36f43df0637f8afc0c7840c17a4e8497

    SHA256

    3d0e6902fbcc416533a7b12cb901a450d8598496ca15c7d0309074c129cf4673

    SHA512

    0af6298fde866f72b6bd5d0e9aa414a2e1cc5c48dd768a4484c2e0d212850e3d45371b17f898d6163cf96edeb3e29515ccc0a63076e36870758b2f610c0334bc

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    63KB

    MD5

    943eb53771961cf12bad3072c4923f51

    SHA1

    cc93e3b6061aec5aaef131bd2600efaa460e6c5c

    SHA256

    270873f1c14b6586c4a7ae225bfdb320bd14eb05ddf43089c65469e5cd2e9ae2

    SHA512

    e18a85801d051b2b98c367466b3b603f1d50825e43db7a9be253a34df082387c5e251d80de8af1f0683634fb96ea025b783e87ce5417cb1c2e4a5e50bdd3af8a

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    8KB

    MD5

    fbdb2d3f1cb9a61ad924cccb1a085878

    SHA1

    f1ff1180db85c92dcdda495440bc68cb4803c967

    SHA256

    582dd973fd659c73e0a8a58d7da5e639927398999288cd1670fa499b096be5ef

    SHA512

    ef859cd0b8e05113c48676f5ff6cc1154f79e4cf5069da82d548c1bd1addee18f43a994a98ec1097f914ae5d4adc13aab2a50d4c60a35b15fc11785ff50eb914

  • /data/user/0/com.lianyongsh.wan17/databases/pushg.db-journal

    Filesize

    8KB

    MD5

    a73b07eecc00c03369430063a229b7a8

    SHA1

    8a0b1dd368fcd44bdd27f4cc43aae913e3871b6a

    SHA256

    78581e15e5fc9313d288b994652640d54deefc5953b9617ebc0887eaba982f17

    SHA512

    169bedbccf14bb710c790caa586a70022c19624a6d400c720c7d3ef79bfdefdd2924dc960d7d211e3d8c18eb6e4071773da6a2b64b83ce0700d092ae66c1df54

  • /data/user/0/com.lianyongsh.wan17/databases/pushsdk.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.lianyongsh.wan17/databases/pushsdk.db-journal

    Filesize

    512B

    MD5

    84e04f7ca93a021a5ec07db9fe6bedab

    SHA1

    785b164066d401de78fef03d23cb28ba0f2c7eb7

    SHA256

    2f6b3828957222ec676d12b77cc4d757d9ba061cacd3d34688316cb2743a589d

    SHA512

    23b834fd5bad7e41e61488b08a822ecf9aaaf4001b5814ac836cfedf35bb5b1b5494e66ee4087401af973682909f04bfa35628b0ef073338da2cd32be9b9a644

  • /data/user/0/com.lianyongsh.wan17/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    d24dfbb99005fba639674ac60d8b45e6

    SHA1

    d0cc7fcbd59b28e03aa3840ed9ca3f5756ef8f36

    SHA256

    3faf740ea2517d6593de3c810c3edbbfeb324c70561bf38ad59362487a3f9565

    SHA512

    23e2c06f32f41fbc36bfa373d3e02299e1ffcd95d77676f59322702f805c61fbc634cbe166168fb4af93e44dcb9cd66d09dc7f8426b3c741941138b4b75eab61

  • /data/user/0/com.lianyongsh.wan17/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    07a8b1330c7dc0da74163e7cfa9293d4

    SHA1

    dee408d3a53969e4cd12a3019ed0801b9fdeeef6

    SHA256

    0ff2164c9c9402e51a0451e6abb8452ce42fed5e03f824dec2e42a4b889591ab

    SHA512

    0fc17c90e4728ae09865552509925f2004ac3e07e094a7eb7396f2092b01499cb0c94ccaf2ad2b06bbd55f30f9db3fde6055a4ebb97bb2bdec41565c933bb588

  • /data/user/0/com.lianyongsh.wan17/databases/pushsdk.db-journal

    Filesize

    64B

    MD5

    d423ff86584593e4ec6a5a64c8c92eaf

    SHA1

    d8dc67ca4db722e2c7c6209f523edc7ee82b4668

    SHA256

    ca474d915c3f54568de5a6ca66ea5a08d383dc5daa2fe4a2c558d5052f3b5236

    SHA512

    d4ce30b63518ae0949d28a0da567d3c60e32870a1285bfe388245638e1e2d99db6dfd686d8ecb57a59e9b4d7a839a3bc01605fbf554b565c38fc7d0397a18ac7

  • /data/user/0/com.lianyongsh.wan17/files/.imei.txt

    Filesize

    32B

    MD5

    d3643c06932a16402aaeef14fe2ea19e

    SHA1

    87dbc15e9e80f39f5e1e015bde5a633b60005ada

    SHA256

    942eb960ba6f8e37da759d365a94e0e0d8bdfafb300c6a5e3ffe8b0f8cfd5d1e

    SHA512

    4513ac9ceaa0675c293ee17f5a26df31a9dfb0576fd3ca7975ccc48ea9eaf7f80e49966a2eaced53cc3eefd66c7ec63cfb726bb4b3f6f5292bbea7de511118a0

  • /data/user/0/com.lianyongsh.wan17/files/86cc7ecb2821

    Filesize

    75KB

    MD5

    81bd3406297235bb919b33d327d0ced4

    SHA1

    7ea5e4003faa7243e3aa981de0e5d6a7a59d417e

    SHA256

    991514092028b9b9c143c28c5f9fe413c1b1c7061221399363aa2ef6a55a2eb0

    SHA512

    badb69a8bbbdd577e0a54c5911d66dc4fe227a9c34a736cc554d4410df397e0a73b67f4b956b3b270bcab643f86c0640795997695b5377950c6230573f620132

  • /data/user/0/com.lianyongsh.wan17/files/cnc3ejE6/eje3cnc

    Filesize

    39B

    MD5

    7769d4507985f59116153463f09235a2

    SHA1

    b081e84d14300ac7a7947aade9c025fa83bc17fb

    SHA256

    5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf

    SHA512

    ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

  • /data/user/0/com.lianyongsh.wan17/files/init.pid

    Filesize

    853KB

    MD5

    5a496a91d11f62f94969135225a23d07

    SHA1

    d3440c7e575e01919787fe7b9abe4b9fd2012e07

    SHA256

    8627df0c4c6a21e095b2e7a05e032c8f2886179fead46774dfd9de3b324b7d21

    SHA512

    12bda6cc9ea498d1c9a205ca564a019629f607c1fa2dd5769adb5090d42b7a3c76e777bb6fe36467da3838209a4cd742abcf86ca4eaaaf4a0fd591ed8c570042

  • /data/user/0/com.lianyongsh.wan17/files/init.pid

    Filesize

    1KB

    MD5

    5ff7df7c92cecf3b1415c0e6f88c7c7f

    SHA1

    956597fd184bd0f5e98a0d20fe6e7b7d31f14158

    SHA256

    de583cae1b25568ac5f34725fca9ac1211dcdf38bfc48ca7fd7b6e649a14a8b8

    SHA512

    19e9ddbb902c9f01237cf0eeebdd647d4483117dd766bcb7e743907d3ca015c114556df9bf7b6d8a156d25d6d1b2dcc173ec367628a94504c6360f5e80b74322

  • /data/user/0/com.lianyongsh.wan17/files/init_c1.pid

    Filesize

    495KB

    MD5

    b5495baa8c1ba6bdb52dec8c4ab05ed8

    SHA1

    9019e541694d10cd73864920eefa1a6a41fa4165

    SHA256

    35b78c7ac055c91303cd3bbad1d09e95f63ffb5a2cb6c5196467f64c879f2397

    SHA512

    10df6cfaf4c7e2992b04e2b9490d45030c54221b7320ebc06801dcb825addb1f2c9401af15b601e5cb4bc7ee9dae103fa07b419ff11bc0351a0ff5c04455d4a1

  • /data/user/0/com.lianyongsh.wan17/lib-main/dso_deps

    Filesize

    404B

    MD5

    777da005d45772ca945884a799283057

    SHA1

    59fced3e65fb03e03f34b8365d2d3c9a2f50e806

    SHA256

    dc9df894656b05cbb59b17dc975f9f63bfda8fe3b7edf5a6a35f3bb591bd1919

    SHA512

    8b27880a1cf62e9029a91369f59720b2996ff27f2479c432c858a2a09b244e5b2dd6f4b8b777a2aaa006d3dca4a9ae8779344e70d96b29824bda67ac9022da9f

  • /data/user/0/com.lianyongsh.wan17/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/user/0/com.lianyongsh.wan17/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/user/0/com.lianyongsh.wan17/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /storage/emulated/0/Android/data/com.lianyongsh.wan17/cache/AdEnable.dat

    Filesize

    1B

    MD5

    cfcd208495d565ef66e7dff9f98764da

    SHA1

    b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    SHA256

    5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    SHA512

    31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

  • /storage/emulated/0/Android/data/com.lianyongsh.wan17/icons/-1506889764 (deleted)

    Filesize

    6KB

    MD5

    2cfcdb1a32e3e91c5958cb9941635c64

    SHA1

    82442972651377375f87f8b5c521c06b8e229d63

    SHA256

    e5a321015dd8af535b48adb677d6d480f44a9d26944a2dd8c4fda02594982f49

    SHA512

    b6e2b9db08cb8ac01d34da9f4618e3448eeed2b6d8ea6654eadb53d3b2bdb4020e314412adaedc0a237329a8b21ccbc9e4954a9b5ccca5f1ec19beee896e68bc

  • /storage/emulated/0/Android/data/com.lianyongsh.wan17/images/218577674 (deleted)

    Filesize

    34KB

    MD5

    06856bcad7179f076379f1bb614e23b6

    SHA1

    660017db48c1440bc7cc55690fa681b3d4c7985d

    SHA256

    cf5604a11a1c313bcd290ce2e635bf2809dea3b2618187dcc5d74ce81a2c4342

    SHA512

    ddb1bfc2c38a716ca3018965f891c120079e3544963c6417f090162fbc35bb44caa9bb045d72b1e42ea8590684ca1b296c2511b6b9cc7afa7b0401b64bc5fe25

  • /storage/emulated/0/libs/app.db

    Filesize

    619B

    MD5

    f6ba27d5f73446cd93aaedce64152897

    SHA1

    ff4d9518cf303e8a558bbfaadcea52c02420c884

    SHA256

    3d0f970669e30f770fd59715d3a03626f45ef7cdca0406baf92b3996fbea5b03

    SHA512

    db9187307a480c87c5e232a04980ab8754c700820f57a073104664a836f863cd3914ab388defff625f24ba002da0961fc646c3df5438d8a71d799d71fe45733e

  • /storage/emulated/0/libs/com.igexin.sdk.deviceId.db

    Filesize

    39B

    MD5

    4aaf9c5f70617c1697a977cc019e4504

    SHA1

    8481be99d752665ae9d4c6deebfa7d6bfea59959

    SHA256

    cec3bec13a330e7bcfe08c129be721cfa59acefd67377320279525f6ee7442c7

    SHA512

    f414bf02e87452c0a0af2d08be86fefd582e2ee05834015dc9efe74aa99909454c55144f53e84287b49549b1c44237e671573d5304c47aed5613c64df89b66ee

  • /storage/emulated/0/libs/com.lianyongsh.wan17.db

    Filesize

    83B

    MD5

    b46621f91b01bc35cccd1b824bd2d74e

    SHA1

    80c5d62c1142b2a9d2f1c6e703c4b0925cb08a85

    SHA256

    56f39898af5ece92bf59fb122594a3cac6c6ea1e949cb70133609493e4e8c677

    SHA512

    5fbb0e6db1313083cdc7f6b49b6a3571219611c84ab10c1295a5702aa7302ba3d87cf98995ee9135e81606383ae7b13a522caec3fb18b20d141f79f13ba3e031

  • /storage/emulated/0/libs/com.lianyongsh.wan17.db

    Filesize

    1023B

    MD5

    8b98c6bf02784ac3bf4f62206f8a7fbc

    SHA1

    59af01810d59fb162f00ba9e2b740b2cd901b5a6

    SHA256

    77ad84b0195474651c93d3bec4cb42c28b412327c8f5cb7e2a87ed9654ff3e0b

    SHA512

    fea78dadf759b36dcb6a337a8d581cc7f8ce78e57ed69d7b9b3171f937a1a27db67b7c05bd35075e99bd8038f6f0b06a02d088461115e22becf303b514490d91