9fe7a9fbe335ba8125869dd59d6ef1a3de4a5327ab6f1dd69d8eee70880164e0

Analysis

max time kernel
154462s
max time network
158s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
14/01/2024, 18:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5b85d6e397f02adfc2242786f3d7ea9f.apk
Size

26.1MB
MD5

5b85d6e397f02adfc2242786f3d7ea9f
SHA1

50c56b39e3d0bf3835951f3319ba62544d3f9441
SHA256

9fe7a9fbe335ba8125869dd59d6ef1a3de4a5327ab6f1dd69d8eee70880164e0
SHA512

bf720760ced54a6fb48bc04d132a601911c71e41bdcd79854992decf44af61eb0801d4390ac7fd61cc0475fc85d15a722f2f3f37b0412d8b29da53795ad5b333
SSDEEP

393216:B5IL2/+Oj1AYBYGESRtpnZZoDlR5VpJCdqyf3pwCxWlCSXNaD3CtBjNwFdZwD1zQ:Bb9XpEQpZqDbxulHmCWO3CLKwDR5cmy

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 2 IoCs

description	ioc	Process
Accessed system property	key: ro.serialno	com.lhzyyj.yszp
Accessed system property	key: ro.product.model	com.lhzyyj.yszp

Loads dropped Dex/Jar 9 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.lhzyyj.yszp/.jiagu/classes.dex	4264	com.lhzyyj.yszp
/data/data/com.lhzyyj.yszp/.jiagu/classes.dex!classes2.dex	4264	com.lhzyyj.yszp
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex	4264	com.lhzyyj.yszp
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex	4297	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.lhzyyj.yszp/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex	4264	com.lhzyyj.yszp
/data/data/com.lhzyyj.yszp/.jiagu/classes.dex	4469	com.lhzyyj.yszp:channel
/data/data/com.lhzyyj.yszp/.jiagu/classes.dex!classes2.dex	4469	com.lhzyyj.yszp:channel
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex	4469	com.lhzyyj.yszp:channel
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex	4469	com.lhzyyj.yszp:channel

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.lhzyyj.yszp

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.lhzyyj.yszp
Framework API call	javax.crypto.Cipher.doFinal	com.lhzyyj.yszp:channel

com.lhzyyj.yszp
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4264
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.lhzyyj.yszp/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4297
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4632
- sh -c ps
  2⤵
  PID:4651
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4671
- ps
  2⤵
  PID:4651

com.lhzyyj.yszp:channel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4469

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.lhzyyj.yszp/.jiagu/classes.dex

Filesize
6.4MB

MD5
a0c486750971990f1892ebeabe9b6e91

SHA1
05b43a011bbcdadf1ddd3e3b320d5dc16b457435

SHA256
bdc35e26a0fd8eb3fa5d27cb00cb2b2c4af08480886c4943fa1c684bebad1766

SHA512
5abc2bdcff99ac419e5f17e889827980e5945d5a30e370c5273abac958a97d144258556a5e9c353918547aaea3a8a7ec5ab52eae0f9f3e9869526f89fb7bc68b

Download Submit
/data/data/com.lhzyyj.yszp/.jiagu/classes.dex!classes2.dex

Filesize
6.6MB

MD5
46cf469fa137d2686a45e763de44702d

SHA1
5cca94109e0328e5f966864f15b26db102611112

SHA256
9ab71fbf06edac6b1c471882d4182cebaef3257e0142a78f0ae0f27de1ea1e90

SHA512
27520de70b5d96455f2ebaec038e0dea3a0f8a466d4b5b6a3cdf09ce65d5dfc5bd2ee90dbeb3827ffb2521432ca8d49fcf35224523fe980447c5b9d2f1438b7c

Download Submit
/data/data/com.lhzyyj.yszp/.jiagu/libjiagu.so

Filesize
497KB

MD5
e102893683a16d223c852ac584155d58

SHA1
5560d79d71fb1951d6ab0a464af87429a4933c2b

SHA256
41c76fbc6aabf843f22a1cf49a457bb99a7579b7260e46b2841c30afd82523c8

SHA512
3129498f917661361bc9a0eaba6b7b6490c2216e19dd7cc802b1f2f22fc16ae43b86a7ca97273cd2e2504a7e7e08a173daac34f5085a21ffd4ac1d84e76cb8ab

Download Submit
/data/data/com.lhzyyj.yszp/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.lhzyyj.yszp/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

Filesize
94B

MD5
6136d236662ad6278a740ef3bf033778

SHA1
a60d2e88b824519f5063f1f27f2bc77015ed8385

SHA256
ee5886a2a9e052d83cc8d5fc0c937022d1e3887b4cb984e6ab48f809151c0ac2

SHA512
c08616281ff8014df09461f7a3456d351938fab1a0d0324277a03a6a8f9f1ad5f528594b68cfc57b264aed7b750c767ba13a16d0afd2983a80067935e24491c3

Download Submit
/data/data/com.lhzyyj.yszp/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

Filesize
3KB

MD5
6793ae8c328016237dbef9bc5d9630eb

SHA1
19e09e7dc00d76754e1e09abde066ab9be77e3d0

SHA256
6496838547fc62038be8039abaf6cc48beb478e9c9a696bb77a30cdc453fdc3b

SHA512
44993b4054205c5d9f4533bfa26e0fd2df9a44bdebdb26375ef526bde7d00c8c8e20398be6431d018573c0a9f8a57fd1445f299784a76fbbe6fafa03d5f5d940

Download Submit
/data/data/com.lhzyyj.yszp/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

Filesize
3KB

MD5
b45d31668943ed0742fe49e5b9d96e8b

SHA1
a7768f9471ad7d00d369f47debcbb0f0e9c4400a

SHA256
5711f574d8497dc5b1607e5e0d5150bf54fbddd5b249e43bb31989ff4b231fad

SHA512
ed858e30b30becb548e995ca69b30857696a5bf618cf1086c7568153fd4d5697c68956d5c93ebee82ce50fb709e51e7cbf5f744ce7fe36de867e6a94670f27e8

Download Submit
/data/data/com.lhzyyj.yszp/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

Filesize
3KB

MD5
64492f69dac48e1effb78248eca8ca1a

SHA1
d241a0c990fef71bde16d03026d1504ae8d7968b

SHA256
f6b57a94f3d8d58e241aeba893c116d635b79496c6913ac54478067c57c9466b

SHA512
f3628bae1ba1f2182dfcf415ad8f16a6523ad359b2c85ad564dd51b7f5904e063baf63008c6846a2ae5377a81e98e8da106fb3b3829095abdfa86cc126cfae18

Download Submit
/data/data/com.lhzyyj.yszp/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

Filesize
3KB

MD5
057b2b1b1f844d97dd4b9c00f2da3c3d

SHA1
c57290dcfaed1d9d29c6a5a2a4428ad55ec36733

SHA256
07c05761debf4e4e61f740d7139b457a55c952f6312d6eea4928a76818943960

SHA512
e5775d305609ea142f5bfa022440cdfbb809b36dd73a3ab4e71c089e2b633c4bd7481a940033fb92964f10bad63d9ff5d457712e9c0da28de7c27d5589999f17

Download Submit
/data/data/com.lhzyyj.yszp/databases/accs.db-journal

Filesize
512B

MD5
0e2fe6dcc1a785e1a29c1f77bf1be21f

SHA1
5e03e70ca9f32f7c48f53cb804699f4ed8cd255c

SHA256
4125e86557a02ee018a5d1f6181611c89c199c2619e769b599d53e65b2dc366c

SHA512
58e906ebb22506842fa4de30190230f1b0971078e80fc66fb40397fae2c241dd993e35aed2ea8ca0eef5e4d2fad1701537c81cd57faf7fef023a261ec59ee70e

Download Submit
/data/data/com.lhzyyj.yszp/databases/accs.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.lhzyyj.yszp/databases/accs.db-wal

Filesize
32KB

MD5
d119e795d6455543178b04cf5464fce6

SHA1
1e1facbf690da86847e9c44a7c945822152c4298

SHA256
915417c29ce23e45de031fe1e55e194e93e333f05be97c44d16446a5efa1cf41

SHA512
52dda02869be35f6a8bf41b3b16a49c71ed73e5ec8035b08823f6ae7374df009deff6ac013049f27fc8ba1dc3095ac76232b5740b03afb6b6105533d4f89856e

Download Submit
/data/data/com.lhzyyj.yszp/databases/message_accs_db

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/com.lhzyyj.yszp/databases/message_accs_db-journal

Filesize
512B

MD5
c57b0e625bbdf2375418716c7e5c5a84

SHA1
bb94600f886695c77d4e7a15afb6c8ceb9381b80

SHA256
7fef2f46c610042a70a36acdc5b3ed73b9cdd7291ed3cfb10bcc2993ac855d2c

SHA512
f9838d942d8f10f46504d5302962a2cfabe22d3d01ac5eaac376b5f2cd80a6e5f308ed446913953b7d0886099da45ab22a8cbb40deaaf9a3ae639ce4e68c6654

Download Submit
/data/data/com.lhzyyj.yszp/databases/message_accs_db-shm

Filesize
28KB

MD5
572bfabb3e4e1b31697d57bc0b4bb15b

SHA1
ebf2fcd94e150b86289972d7374c9af70289a405

SHA256
57b15fafe8fd2706a65a3e75479fd4603ae9bcce54c6cb964cc6c985beb663c6

SHA512
62d7b975ff9c1deb91fadf397e24f1cfa385800b8faea3894ed1d2fd17914f44bacc547cf736071328749a5ef829bd441bd08de2de9ff5a49a612fd820e4b997

Download Submit
/data/data/com.lhzyyj.yszp/databases/message_accs_db-wal

Filesize
48KB

MD5
c73c8ec01b322b90f1c3b90089dcfce3

SHA1
b478b17d6f2303eb490a47e766a88dce33dffd5b

SHA256
ccad5fabbab512c062b8da362450fa063a3570b33f339abe302831102e5752b2

SHA512
9d0949eaa82eeb6c76709b28e6fed0f60d7ff0ddfcf7ae0a7c51ff00f6c640ee108f7220c1e470b24fb033951c1f8fa0b759370a73595e256720103fc8eeda7d

Download Submit
/data/data/com.lhzyyj.yszp/databases/share.db-journal

Filesize
512B

MD5
655b27d2063e0cd75c453fab2a7dcdb8

SHA1
b79ddd87fdc1bf71aa8bc6690cd9c948ead53204

SHA256
413c80e4231810f65daff68ea4fa5386ccd83af3261a677bce5ce6b08b0260a1

SHA512
3f64cb7534b993d35e9c42dc2df26299aa8cfe17c3473d10245146e971da1a19e385bad34a83ff9f7b0d1c1523a5276c40b58db91d36cbfe00bbc913735b779f

Download Submit
/data/data/com.lhzyyj.yszp/databases/share.db-wal

Filesize
48KB

MD5
0e1188d73764a36a3dfccda755871927

SHA1
639505f44e39272c075f92d5cc1e06f10f0ac0a3

SHA256
4f82ef715e7dcc80d7bb53ba7882f8aacb0f36d9f44265adead4782480c163a6

SHA512
1b770c4f1c360ccd5937ef6cb5062f82b8db876ec5896203d5980fbdcaa7c319c2941ebdd0b74277f03b0be384e38b0e14541f0d90b785d64517d2b930f2ecfc

Download Submit
/data/data/com.lhzyyj.yszp/databases/sport-db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.lhzyyj.yszp/databases/sport-db-journal

Filesize
512B

MD5
30c3435af0e0e4589b141d0c3dca816a

SHA1
659b1b098dfaca96e7bcaee6a1e4b888411f7c09

SHA256
89aa24c437911393ac33ac0bbcc6c2a2154f7a2d8aab1c9c34e64b67ff4150b8

SHA512
cb34d2e8ac62862503ea33ecae0ff79786f6f580b9f7507a6a609345d6d4468523793ec011796c455abfc383c630e331902366903b3ee515ee1fd56751eb340e

Download Submit
/data/data/com.lhzyyj.yszp/databases/sport-db-wal

Filesize
16KB

MD5
db8f34a187c6bb4b0be5458b487b5e1f

SHA1
fef7af0603f4c882b70da6f06f918ae6ca88340c

SHA256
33533a278a0c874ae61379aea897db8a70566b4dd577c7410f11dedd2d015aa5

SHA512
362e6d70312198d21c522daf424f932b0e63ca85c36e44d4691011fbde1d2840f3860123cbf7f0dac746cad9527daccad9e752314a77123ca2c1c3e86a017346

Download Submit
/data/data/com.lhzyyj.yszp/files/.envelope/i==1.2.0&&v1.0.0_1705256390555_envelope.log

Filesize
2KB

MD5
75a7283bb74a75305d44b09ec36f19cc

SHA1
9cb081ed82830e599c56901e59cf6bc2dff0b3ea

SHA256
fc969d46c3fce18ef609053f9817fb8df68f6469fb5bd47f6fc0a1b2fb63d0ec

SHA512
033183ee5460e88db833a6f579cffe0c03ad9653cfebefbde18169e4f0579f6ba2d628deb5fab6c73de1ac8b9069c4ec3f7fcd98277adffaa768e57e887bd987

Download Submit
/data/data/com.lhzyyj.yszp/files/.imprint

Filesize
486B

MD5
4151a078f2aca36748cf782d41a6ea5b

SHA1
e7f8bb1b19d40905ffa48c65c65ef1f0478f75b2

SHA256
ef9aa787d9da3d88e9c519e4fbaed6b5510e4c426fddbf70199a934049179707

SHA512
637d95b8c087b453a66d63f3e56a029168c7d61d5c0598472c1ca03dd5effedc4419c5e19c1767f2b5f5d8b2d3294f00de7a7dff4cc15f7af6daf7562343cd43

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.ac

Filesize
40B

MD5
8de089375da2850a5177ad2a06294e0b

SHA1
99af813d94becd37ce1a8317cbc6c045669ce576

SHA256
51e4259a3d85ef054c590d112896c10b4b7e3ed207b0fe616d3db49a64ad2d3c

SHA512
5b522c402367906be7fe8a3fb4b314923830c55a70b789a4f89097927ec99555e177e6d1a3571a4c53337381c3a47f25bff3902722edfbb7c2ec5497b1dd1c9a

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.ac

Filesize
32B

MD5
c16a9235fd8defaa7916f263eaecda8d

SHA1
cd51358802068f851ffcf15055ab50651bc2bdab

SHA256
30c4038a9356ed967c07e3fce131e571f8cc40ffaddfbff2f269561e2a728d20

SHA512
f7c8ee6fd1d90cc93a192991ec59902fd5943eba2e96f492be5c598213d7e3b529531373989c5b12599255ee5d92605933c39519baa8ae83b2ec5ef7b4da7611

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.di

Filesize
340B

MD5
783c39baa560f8eac032e73dbaaa3b1a

SHA1
b99baf2b5e716c41d7bb2f7abf0ee415ede48f5c

SHA256
a3b7556ffe355f33d1984e5f07e44dfab60264c7eeb93b431469c8cea7445a57

SHA512
19628e5f25a47b08200a27324a8a6b82b0f7efe20c975fd60ba3cc231ea17f1f63f474d1b8715800e45d136b319a4e8a186a18b7a1278cd527d725765f09eefe

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.di

Filesize
340B

MD5
47884ca70961860608028b0c3fd3230c

SHA1
35c09af38cb53f53ce4c66e4c145e4c5d3bee9b3

SHA256
15f1561d0b1e10fed21eaa587af958bd6f29623926a26a18f9b0f6b609c20e20

SHA512
172136be133ff317441fe2ff8e64374cf0d1a45c938d79b36d4bf487c078c591db5086d5675d8abbec80ca967fe3ded1a9e4cab73f50135bcd0dd363a355ca9b

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.ic

Filesize
32B

MD5
65e2d9920c65c930c9cadcffdf62ae57

SHA1
855e523a02e1fd6035501d9bb557d48e630a7b65

SHA256
d0cff06e48735954f652162c5ffd09c89fd1d6738f8fb7f43ae1bebf69dbe082

SHA512
5e38119489b040131757f2ce4643a020d350e217165c6e0f3d18e71d1541bab0b6f0df2e3ecaca8e4adb2af8819d46bcbc59a01e78eb29aa68afafa6f59efa0a

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.rd

Filesize
73B

MD5
59c96893081fdd83947a2b04bbeddfd3

SHA1
ca0779ef4e0f0120263e6bdc008e7b7a1200ef61

SHA256
860a0c2d2aeaeef04aef9901ca8d250fe1e39b01369f27ea4ea36d1c5391664c

SHA512
46f62c38230c2ba5c6db6758c44a653c4cb46572ec69f7e66e60fc926671c234e968f9c58b8e14bf21af042e85711022e2c7a3ea58f8fc7b56e06231463706a8

Download Submit
/data/data/com.lhzyyj.yszp/files/.jglogs/.jg.ri

Filesize
314B

MD5
836824ad0c669fb1c8998ef3373650b3

SHA1
fa014f0deb47f8590b3d657ea1930b407f17faa4

SHA256
56685198f71cc01afeb9b38afbe385a915b15d499c4c1fee168e9fcc02222add

SHA512
ef686f0ebfb13e8ad143d12625bab287486d97be82ae6bf379cdfef3b852749a22d97a3299d9133340475e54ce71a1750229167a6b7efdb8a9924fa1d2cdb3b6

Download Submit
/data/data/com.lhzyyj.yszp/files/.jiagu.lock

Filesize
27B

MD5
0b87efb15c0a361cc7d5f0046bd7709d

SHA1
ab0df6eaffded1d805c2ecdb386a8b817620cde1

SHA256
72e81d6a78328e0d732535d59d977dd8b1a7648628f0350220f37afefd6ad824

SHA512
405dce86b347e0ba22f1e08975192351828adf532c97c312c78664a7373fb8dd3f6912d80198cf580fba500533dc8f1e9d2aac62feeda95fd0074a6806418d21

Download Submit
/data/data/com.lhzyyj.yszp/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
0758508e4871c397837d778ad8cc74f0

SHA1
9bca47bf1ddf024d482d34f1ad890498bb27a1c5

SHA256
98dba1a1882eb5573bda553e3e88265b5165e2c15df86531855ca2f61a6aaf46

SHA512
4c8734ed0f9454798be673fb4426052bdfa6b5df38be23ed583e993f57e8df091a231d3781a300811b54f7edd7ffcf09da1451d5f5d5f22c81d61422e2cd1d2c

Download Submit
/data/data/com.lhzyyj.yszp/files/exid.dat

Filesize
55B

MD5
329a64259ad7dbf89fb416a1493eb869

SHA1
036160c879799be7b1ddab9ba8a15fd6032e12bb

SHA256
fc159ed0d3c0cbfc279edc0404fc814e2aba482143440fbc4efcd61fa899c0c4

SHA512
1a312296c6222f78252ca5fcde4624a3420a66ea684b12e3795d0d295f6d624ee8aed06ac84a795a257b710b804f57af1257751a9361aa8546062c7ea5f283e4

Download Submit
/data/data/com.lhzyyj.yszp/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzA1MjU2Mzg5MDQ5

Filesize
1KB

MD5
ce74dc936012c94fd2c9025e241316b5

SHA1
a47ab6b5450de94dedfcb711db760465d9553dd7

SHA256
014bd4208e4b55e235d955f54fb349d09beb0cbdb922850dc9aad045e8e353e2

SHA512
afc2884d41f02ca00c256d52d9b1d59829e9e8b1975688ae15603b6d86775bb47667d86d4760df35201a8fcd2d6bc895656072fb21952a0b1c1f9e5bb762ea0b

Download Submit
/data/data/com.lhzyyj.yszp/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzA1MjU2MzU3NjAy

Filesize
1KB

MD5
aae771052bc711e7310404b5b3aed50a

SHA1
4f5fa2c8cd38df00026c48ef348fbdb1195d4275

SHA256
6fda03c39c1e261c9e41f09ee6d9e53990f18f4fe953e7b8fa5c1686903fdf99

SHA512
dd20e683f322f7cc2e8df9c1390108721c99543ab361670f98485bee5a39ce4ebdc3930c2a545f21145f8e7a68301033b5787cde7b4e76c8ecdd21df54b6d198

Download Submit
/data/data/com.lhzyyj.yszp/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzA1MjU2MzUzMjgy

Filesize
1KB

MD5
063d237111863373a18cffe5f14e99c6

SHA1
5fc89e407119d268802df510b02f7c43e29c1f42

SHA256
917ef9e3593d4c1be580d54b19b8d637651ab4673d1629e55b2189738f4eb5ef

SHA512
f2b09c57e6cb7dcdf3b752bab028e5d5dddafd1423220926c75d8dc1bfccb60e94b6c5dc188500d8114f7b4f06d412a2147f762f069d6e0283572c1aa668be34

Download Submit
/data/data/com.lhzyyj.yszp/files/umeng_it.cache

Filesize
498B

MD5
ce9d6e9d42a6fe5ced040b97e18de982

SHA1
9e7bf4457443e850f2df1b52f2e89db6be844e5a

SHA256
abf12ba18063bcdb21b9d81ee6a3f0f15a4298c0d0f29c98ea9c1069dbb015dd

SHA512
9a85631caad5777a001dddf6434c4c5502f32bc45612b5bd37068d1798aecc2a2711e4989d880907049d6fc8be5d2dfc947e1b8d76afe871da5a535777d4039b

Download Submit
/data/data/com.lhzyyj.yszp/files/umeng_it.cache

Filesize
253B

MD5
1f563896c7dad515a254957f4ac4c0d8

SHA1
c17bb44fc0cbbac663238d9fc37ae903f6bd9a3c

SHA256
f86778a9707387460f69acee4d8420ada415839fff668870e7ed15e56dad184f

SHA512
3fba3e2cba90568ff7adc4ca687d9d055b6fe161cfe8812dd00fd89f63bc730e14ddf9fad01415e23d9521c1544945e72b6521a328af1f89c5d22b7e24e3d0f7

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
cb4e60d11279d22871b5fa9b7fef64fe

SHA1
60e3e4d59840fad70cbd159ce4aaa359a6333f33

SHA256
d74ad98e75868b0f18579c5c05ebe066fe5193777d417ffdc4688ac4fa9e0efe

SHA512
3dc107b9a7456d771d6667dff062c414aaaeec01d15e21b91724f450c3efdfe897b844b8b7016b7328a63d22617ccc9b9708265aab62bca218f5ed9cb9530d15

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
c909e6daca48362a491cd3407868838c

SHA1
0909d77cadd0fcb36ce8159a181e4f0d5a10ebe7

SHA256
f4218457d7cdc29d6b1fd54dd13786047bfb50a3d702452bb7990063e36d42d0

SHA512
19baf0f795dad9abd0a97ddab08b28762ff48dae676f7e649dbd58ae4820e839a56cd24db64e0e1054bed26d444333e331f9e62a4d0b381b9f2fd587226ca0c5

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
314B

MD5
bb39f108506278794bf86b797d28f2ba

SHA1
c258bd18cf5885bdbfaff96873cee8c19007b425

SHA256
804c4059bf43636cf5a469429c0b2c4aea1527fbf54585a110806a9f25533517

SHA512
f266a66fae8d90b2b5189c21caa3a1475dd6ab015d0ff2103602ffb3dc406b76869cb450a4578822d343dceee6fc11b2ea8c65aa093729ce60210e7cba7d7048

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
f9b250a66659f2b2583409b740040ddf

SHA1
0cf036654319e04c2068d669e4eb17fc0679fcfb

SHA256
7404e549fabebdfe3b4555a6f52f8b11690ac547182600147daca336a89d4770

SHA512
2f4a2cdb047a18f311011c5bd535e4df81eefb0997595d90cb59c29ae71ae0c044e3f12a63caabe1456fc85940ff23211dc5d58397927c1d57ac56f6dc803f6b

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
bb80497d27d7c9484ade778a4c682946

SHA1
25eaff5b42dfed54a402c6524995353df00d6a2d

SHA256
a11a57d6caf6fb952494d0d9750d3fd41812177d7b2838ee4c40057d51c098a6

SHA512
e753137dbda9fb72af37c0abd2a8c82e6727ded8d4e7c106424e389691f77d9fc23446381d9ba004e380498ed1ca81b2152be260ed2edbe19653a2c15a16c4d4

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
e38dcf71c428000b2cdfb4d8d2112994

SHA1
e5f30ed6f2239cec6af67faef29d5731e22333bf

SHA256
bb3730b7b9bc114694faa9a9bbb2ac424c5832ec1e43fb735f3bae47906b8694

SHA512
71055a509f905ccace9c68e3b28a05232b5f2c3b1df041fcfa4b1962af84851d87ac8fc5b964ac81e7459b45f4fd9a5c5b7efd5b2a2820180f5a716466156030

Download Submit