Analysis

  • max time kernel
    150s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    19-04-2024 17:24

General

  • Target

    facda20a68854afc6c041379a2438d84_JaffaCakes118.apk

  • Size

    8.6MB

  • MD5

    facda20a68854afc6c041379a2438d84

  • SHA1

    55659c64c8af48071f3d857818ebf7d67a4725b7

  • SHA256

    67c7a6a4342690dd32de77e06b9df2b4977b3dd538314029a9dd476c39b21f6a

  • SHA512

    598302413b55177c6665a4e9ad6428850e56fa4fd9233c19768bb16843db7242755a63c6edb0777f3a666d7fb28dedbf8091a8a822e00f0175940a4a1e1df7e0

  • SSDEEP

    196608:gpTzMBtLY4FzW++ZxrzzucQsxua8WTqp4M2NIq9HYtGlIgc0E+S:gpTAt04Fz+Zxrzacdxua8WTqp4M2Nv83

Malware Config

Signatures

  • Requests cell location 1 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks Qemu related system properties. 1 TTPs 18 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 3 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Queries information about running processes on the device. 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection. 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

Processes

  • com.kuxun.scliang.plane
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks CPU information
    • Checks Qemu related system properties.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device.
    • Queries information about the current Wi-Fi connection.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4310
  • com.kuxun.scliang.plane:pushservice
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4348
  • com.kuxun.scliang.plane:remote
    1⤵
    • Requests cell location
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kuxun.scliang.plane/databases/kxairlines5.2.db
    Filesize

    40KB

    MD5

    b99b0898d110971ceec8a8dce1a341b4

    SHA1

    6d3731453a2f431e421015ebf71c7d5ff3994aed

    SHA256

    6107727c5559b7d5f4814890480289bef7535a34a92d455d22d9b2554352fb34

    SHA512

    291293def42c31f34a03589a59a1b855e196e4681bf04512f301fa01201f46f3a3b8d3b7da0abfb2241a0b6bd783aeb095cf96ab07bbff15d3de719b996dc442

  • /data/data/com.kuxun.scliang.plane/databases/kxairlines5.2.db
    Filesize

    4KB

    MD5

    9bd90d6db816addeda0ac5bbd5d328ff

    SHA1

    f5e38ee7b319a8db03e3f35321db8b92114d612f

    SHA256

    c9fe8eb7a849a1bc22f19ec223e0e13b29b7a402773ce19968aff4904a67a45f

    SHA512

    271b3eef0c434ef7deea160dd85e84a81e64254a0a54b670db0fb3878928df7da9c125367e961b6d8bcbf2d728fb3ae2cb98f27d3aa32dfec756be51a2947816

  • /data/data/com.kuxun.scliang.plane/databases/kxairlines5.2.db-journal
    Filesize

    4KB

    MD5

    666642ca07cdb36e727f7977a1de5e4d

    SHA1

    3978eb90cee761b67366fb7b31f1899cf569d51a

    SHA256

    24609ba5514e0244e28b99f20126b56352c67a25da47076b86c2ea2b7feea712

    SHA512

    33bb4a4b3c37b5fc0b4e8e4ac7a0b5cd0debf9b6e102a9862e6cbc0ec79a80fbde32e9c932016b691b7a81035f2b490310bcb83b0240ad6a73f951d66a813479

  • /data/data/com.kuxun.scliang.plane/databases/kxairlines5.2.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.kuxun.scliang.plane/databases/kxairlines5.2.db-wal
    Filesize

    4KB

    MD5

    a09bcdb1444d8ed833e98536c6adf921

    SHA1

    bc2820abdd9539410a4d65da784d1de95feb286d

    SHA256

    6e777832153391a1dc9260fc2bc2f7a75d6413beea186ca8fafbdbf9874c2429

    SHA512

    c41f29afe7bb65fd04f4c153fd1760a949fa52bc53ddee083fd0f8089c197b9fd06179aa34a6f54d191d216c40f433ac3c1d79f8bb66d2cd1c9a1f426b06a7f5

  • /data/data/com.kuxun.scliang.plane/databases/kxairports5.2.db
    Filesize

    32KB

    MD5

    2ef43671598e91a4477890504bd5f878

    SHA1

    c4a1fd28ec43e9bc22c2582b7f833c05355d13ca

    SHA256

    2b9a66e2743ff6bba9ab2e1649b32877111b3cd4c4ad33b7ddda53930b7a61ba

    SHA512

    c4a91573e09ba586a92954cbaf54f385e33492dba1dfe4f546d00f2c9aa9c0d2df087ce21ce046350facbbd97c1696e552e41f88508f04224f0ae370c86004bc

  • /data/data/com.kuxun.scliang.plane/databases/kxairports5.2.db
    Filesize

    4KB

    MD5

    6ea3c00d9dce99ccb483d4b9ef12cbf3

    SHA1

    bb84847e2e83a5b50e0d1b769c2c1644cc0e7564

    SHA256

    a86acda5173f9ac9f961601367c7d6612ab3736f113a91803962184ab9e3246e

    SHA512

    8ce8e8b53afc348e6be768fe3c2ca90fd52337f1df20bdf10f41af29feeedafdfad2c2be79871781e02e89b3d995ad1c34251be011048f648de7ad8503c8baa2

  • /data/data/com.kuxun.scliang.plane/databases/kxairports5.2.db-journal
    Filesize

    4KB

    MD5

    9930c2423bf3748dc66515dc64c3154e

    SHA1

    3ad0e3d8b0bd79eec7fc9524ff36984484fcebc9

    SHA256

    a43a60f0771df2960cd9e7c3e9dae8b40cabb20b76c7afedb85ded1a4e7767af

    SHA512

    e51f8db9888f6c4df48111e4c3de52f92552c1862d164af1f359e989dddac634b2095d9c3d6093c5b69816c2ebe4bfe72374a41e38892e6e7d80c7f877f441ce

  • /data/data/com.kuxun.scliang.plane/databases/kxairports5.2.db-wal
    Filesize

    4KB

    MD5

    d00ef90377d2f1ca57ba18adbe75d816

    SHA1

    4c6faf1823d2423d67d7454e9ac10127eb637808

    SHA256

    141521473d683a0c66e3839f716162e84f11b70915446ae50fd0a67fc0a34463

    SHA512

    2ed817cdacf938ce6f5ab79e267fa9993008eee2ee176e2080ecd404c1dda2d7de8af6474cbb54f3971ac84076d9a95643d13464d08481d6bcca55aab8644321

  • /data/data/com.kuxun.scliang.plane/databases/kxcities5.2.db
    Filesize

    32KB

    MD5

    77132581a7a2b3c5710cc90cc251cca0

    SHA1

    60aeafa134ee114d102f5f837e92bbe2d8d330cb

    SHA256

    621a9e9ca87f54fec633daa56f515c601897063f7d5ff53334d9e31264997d7b

    SHA512

    d936a5421a5930e56b6b8a51d303d330f1ce3a53619cab34a20f7751aedcf219700c33f2091bb09688372782d7593eb601ff8685b8ca60dc4ad8bb49af38e5ab

  • /data/data/com.kuxun.scliang.plane/databases/kxcities5.2.db
    Filesize

    4KB

    MD5

    f15215f5702b469369500f65bc642943

    SHA1

    81fa45799b7290fb1d8d44ab35ee79232cac4080

    SHA256

    aae9678ee23035dc15e6e44a9e542904b659b75d70cd090f40aff24ea401f40a

    SHA512

    61195bf6505cfb05d773c1d8f5af8e448adbb0bb0133deb9128d242cc2fd853cb8ee8a21ddd5da6ff357c8bdb4559e2790ef3da1b92234c3e9acc6408d9895e8

  • /data/data/com.kuxun.scliang.plane/databases/kxcities5.2.db-journal
    Filesize

    4KB

    MD5

    c2060ca34b897bfc11dd19fe060f21eb

    SHA1

    4b8617338097292230c7346256ddbdb8db1bbdc0

    SHA256

    8fee71fc8d39c4f11032d8289aaab43a3d1c71d3ac977818ab13c5a25fb8ea54

    SHA512

    8809daada8c4b5029655629f06c9553c34985bd0ecaa5a72c81fa485cf07a9d8762e21ca36c9ac2ef1d1ded8d98e1cbdfd87acd0497709661ca4f7c00f048c39

  • /data/data/com.kuxun.scliang.plane/databases/kxcities5.2.db-wal
    Filesize

    4KB

    MD5

    ef184e6a02f22c4810052f50ba41118a

    SHA1

    a4caad03f2620e97fd38a6d2e87c0c2a7cf37dbd

    SHA256

    3f69cad265b32057583239e7fcc41b408e7a7c0adfaae16dc7ddd7428097adb3

    SHA512

    e58e06bdf997fdcdff32428b0d4bf79e8fabcf8d359bfe9b4544d50a8518cfc8f50443f3474cafad4b6e1841a4f9eed967fe1c31b4105dbe09d4425ed42af572

  • /data/data/com.kuxun.scliang.plane/databases/kxregion.db
    Filesize

    144KB

    MD5

    1d0c76b8827249f7a7de01602e0bac07

    SHA1

    dff86057832bb0cb3e1ebe10a3a912e225b1fcfa

    SHA256

    375ee0a75e588f2725a9101005a03a8359a60c07206ece2f8db76251788f683c

    SHA512

    c2842eea746156f4a1e7602ace7473df4b982073327a730da4d0c7cc9572664fa2141a975c1acd36de584e74e15d7d942022a7ffdd7342f8c1bfe1cc46228cc4

  • /data/data/com.kuxun.scliang.plane/databases/kxregion.db
    Filesize

    4KB

    MD5

    0d60eb964b7357ea7f51faecdf04eea6

    SHA1

    c70f8d9a184462d4790b6b7bd9bfa9a6fb73e936

    SHA256

    7a59084ae335e42725e1a7ad6a4b101bebaccdf459452d51b52f4c3b628509d0

    SHA512

    2f64f1815fcd434612238da5665d7213a5b832a7f1b17072cde056a907339bddcc5eae126a134067119f60143e49987d1d5895186b7459dcf910d9bca297f042

  • /data/data/com.kuxun.scliang.plane/databases/kxregion.db-journal
    Filesize

    4KB

    MD5

    8710e1751123cd41f761ffa5cb7dc3f7

    SHA1

    e598f58fd7e40c86df54ee31815187b20d812e50

    SHA256

    e4bc8ffe73bac8195d191fe50bc769d1f3bec0367aa477bc23a94cfc282ecfd4

    SHA512

    9cbe56404bcaec1d46adf1578fb344040b848e8ff2a83b569e13f523dc09d217ac8c539af689a3f85f9ffcd83875a24b8d7419910f1cde8499b7b539cee714ac

  • /data/data/com.kuxun.scliang.plane/databases/kxregion.db-wal
    Filesize

    4KB

    MD5

    91d21948b6f00631967c5fa8f58f9e4f

    SHA1

    8c2b477a35010b01299c6feadada161260ce2682

    SHA256

    e59942772428660cc0fef67e9fda3c77cd51bf58934221239cb77d0946096c83

    SHA512

    57808b2f41732927a863e4b3c9513a386acee51626a1fd1671ab6cbc3b5776233a8d6389848e1632ec1a379792cb0cd2afc32849c6b43299daf0d97bfb39acea

  • /data/data/com.kuxun.scliang.plane/files/CMRequire.dat
    Filesize

    1KB

    MD5

    c6b4183134d1326d3cf9f0ee279bf698

    SHA1

    ff06609662fc54c746c0c04a966de9b16deca435

    SHA256

    91d0e64387b52f57086a09e7aa21a88a28b95a00ba7d5cbf9cabb58011399c50

    SHA512

    7cd5b2855164731415dadba50404beecfe0bdad6b2ac22d8eb6c2fcbe2a30cb62c50a59a774ea103fbc3ee86a40b620a0d522d1d1b18ea93cf034916c8024a5d

  • /data/data/com.kuxun.scliang.plane/files/VerDatset.dat
    Filesize

    172B

    MD5

    caaa975d7bf4952bd5dd695ade33f1da

    SHA1

    119373fbb2db036712df72ec9b26c0c2840dfbb1

    SHA256

    d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02

    SHA512

    db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/DVDirectory.cfg
    Filesize

    69KB

    MD5

    4387420494429045bbddc8dbc8036a57

    SHA1

    d00c920c88acbd73b1b09c4e36f947fb1cbc43b0

    SHA256

    c0def80bdd08026af800c61c476cabc9f1cda4d754e5e7a30d8dcd6ff0ac44ad

    SHA512

    200d360e00ae1d6f95f6fb57b217da7618a0c60abb8e17e5d2d2a5bd19434ce7ab001dd195f57bfb7c9f63a1802fb1e4e9c20f94773a772474c63485086b7ab9

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/DVHotcity.cfg
    Filesize

    1KB

    MD5

    64f064a4742aa3a40f537edde8d6b3d9

    SHA1

    f84045d96e72582238d8b35e6d508ea9129ae348

    SHA256

    905d87c66b14980402afdc2736b80d8fe108246e44f76e573291a852bd105a63

    SHA512

    5f0df60c3bece73b319b4e7c057ee8a218b0b7a9f710bf9725845fa621a4f8a53bda2d55c962e940f01ae6a81cd76af55116be55c7f196ac2dc09e86ae5e73dc

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/DVVersion.cfg
    Filesize

    93B

    MD5

    fb6694479700218b7eeb8e595dec6b83

    SHA1

    5ea06f1b529de035fcd8e4180c58f84c9d4eb49f

    SHA256

    ee862c09ac9d43be689d03a6bd29005dda386de845690f7cd369ab8ceb723514

    SHA512

    630c010a78772a3449ba0667121c743e1994f09be3b75a668e50d7340423414efb11528072efa1d630e2581ee45c49f03ddbea5d2af6ae68dfc1ee95b3ded652

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/ResPack.rs
    Filesize

    448KB

    MD5

    fc611808bd9b0edd8348d92490481ef1

    SHA1

    602fece48f0aac9835443bbe83c19ffc91fccdcb

    SHA256

    92dd9ef7734a6b9b68cbaac963d52dba9bb1a12ead615f860177577d89a40130

    SHA512

    309a1b878cf62e232e8d15bdd6ed0e7cc0f3122e6f70851a8b93016a31b4d40e99413afcd07aa6301b85c44689b88f33302f3ecc7ba7d4efddbad0b3c4a7c8ba

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/mapstyle.sty
    Filesize

    99KB

    MD5

    042f8bb92192b33fe881cf680db79d5f

    SHA1

    17b1ab10e0ffa30f3534d3f0a0240a631222ba54

    SHA256

    6f4205cb972c0c49c9480951e4d2decde58df5c7555be18b274507dbb25dfc1b

    SHA512

    4cc20908f12ec0b41fd1ea1b6e0f0ffb3fa003ab6f574a6b40f3a6ae2a7db07313ab57a9714d9891f3b798046a47e6bdc0da9ce1f4f91b7a966ed96e9b7d885f

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/satellitestyle.sty
    Filesize

    107KB

    MD5

    24b50fe4886b6d6f4011464e9a6238fd

    SHA1

    68b5c9b9345870b4f4d1b6a09258840ecc82382b

    SHA256

    c7eba9052ab1dc3c1d70541270688d63a7cfdd6cca9b0b5d62f5872413974dd5

    SHA512

    96217a781d8d23c298372ff7d005bad7e4d9528ea607bb28148f7b249be028ed0b5f0c1456aca0d78ce06335ba252790ada81135810bd5861bb74e25499aabb8

  • /data/data/com.kuxun.scliang.plane/files/cfg/h/trafficstyle.sty
    Filesize

    3KB

    MD5

    1e4b535871c4feb2010b614713def5c7

    SHA1

    4c5dc67838d12b795b6882c6dbbcc6767e42184f

    SHA256

    efa3ec85127a21a8c8a74640acc5fe1d992952964d4f257682f832f63c2ad3fc

    SHA512

    0c5443dbfdafab2e6cb7740587f48ca9a2c971b93afafcebccd17691edaa7c7fb75dfd1b6c939dd591a5aa65977f55e64b6c3690ab0a660432269fc43bf3133c

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/DVDirectory.cfg
    Filesize

    69KB

    MD5

    200b74c3ebb374f1e2ca0c2d77418cba

    SHA1

    23e52a22fcbb020f4613811bde49f145657657fa

    SHA256

    8c0ad1afee4e26ed64ef30d34e612edf1e9a3ac0e78e426dab3ffbb803bf7f1b

    SHA512

    d30e07942404993b6fce92e411208e6c971712bb2efde6c0817c6e4f46dfd53bcfe2de7ffd374bba7350ee83d0a4ebacca0f1ce27480c2ba6649ef9d66f8874e

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/DVHotcity.cfg
    Filesize

    1KB

    MD5

    f389dd3b20a99988cafb81fa9833d51d

    SHA1

    601208ba2cf437be2490ce14ed3cf4cc3943a7c8

    SHA256

    dabd641f5931761bc3f202daf16e560c023b86314123fbda7bfe9428debc8db4

    SHA512

    0fc49984da0a3a681ce08a91ef1e849c122ba9f34dff29b1c3f952eb82ca90f3b6c6f4d0f47e537cd17c00b5c2f89eea411f7a2f3f9b2d674e205b95cd438292

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/DVVersion.cfg
    Filesize

    93B

    MD5

    901e9e58cb056bc895fee4f19173ae4e

    SHA1

    d5ca46f40f8b5e833a8491d8d2fdebcd91e33d4d

    SHA256

    cc73778e36a6677cd6de7ccfb5c605dfe532acebd039843d82ef3be295b73567

    SHA512

    5891cdaff2de481f98b0247748c036447bf73b0f1b1186e6cf2b05d27f39826da496d87cac93feef142f3c47bd6f37753116b18194f49064b3fc9dd6fd3ecab4

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/ResPack.rs
    Filesize

    372KB

    MD5

    8d183d412478e62d2ec90152beeb3a0b

    SHA1

    55fbb0b0808fa25deafc3de9fd26dcad5f5ec278

    SHA256

    9d26787a9fcc52d18ef6fb98b6bc4853107258ad235351116ec8ae7ee908185e

    SHA512

    9e71ebb78bd03da1a11d97ff98a3c64c1d1ddc4e1009b1ad847168f31c44eb9b4dfa1dc62cf2b020db8a10b6f1037560671ad3c07e218b0a910b98648078e074

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/mapstyle.sty
    Filesize

    98KB

    MD5

    affb6ab297e0a28c70e290bc7b0f79fe

    SHA1

    994cfa22aeebba487dd7fa4ff81fcec17d011801

    SHA256

    6e0e16c5ee516f49c30e9db4d470d57c964dfc38516f3b7ae459ceb4411a076f

    SHA512

    b94d1c81b7419dc75a158f0ba67f129885fd60438f8b31f97d5ae2a20d8069f5d60a3e5de9090493e503b41c78a981b38433b8d7c99ffdbe0a0313a79b4be2a2

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/satellitestyle.sty
    Filesize

    107KB

    MD5

    9f7410e1680f5b7cc5ee5b306e1679f8

    SHA1

    28a8c4bf92e9347b536eee59b314dd4bdf27644e

    SHA256

    110694528641874bc9b9dae26d83e701b36e18996fb91b4d249a08931942e73f

    SHA512

    297ceefc94b84092dc7c039c2cba110dc97fadbaac5fa6f2d73cc5ee1ab557813b5cea43574a84478d443097890df3ed85ead0e90851d24cd47c81b2aa022fa1

  • /data/data/com.kuxun.scliang.plane/files/cfg/l/trafficstyle.sty
    Filesize

    3KB

    MD5

    ea1255472c3feae81239f87996544ac9

    SHA1

    9527474aeb5833e4e268aa55cb233f8193624bb7

    SHA256

    030529b5a75b50d5b4cbffb5c170f6ec5a9a00695dcdcc8c9918909eb5ee4671

    SHA512

    e8658bb8b37931b349dfc9e911fc6f483dd08d659ac917526ed05cc70271b97c13def353ad841436696c71a2f8794cac5d8035b0064d99d590c9b4f2db2b6c67

  • /data/data/com.kuxun.scliang.plane/files/imei.dat
    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /data/data/com.kuxun.scliang.plane/files/imei.dat
    Filesize

    24B

    MD5

    df1907e446b11eca05060a546b457131

    SHA1

    2ee4e56b0c6e3fc6978f12d09d5998702db54df1

    SHA256

    3619b5c7d56de055ea4e5eb928b9067ad52cdfd25b960e846ea6fc18653fc830

    SHA512

    e93fd151765774ce3846ed2616587472720361c7a7f906e4519f3244b6661388b796c1ef349f432cd2316c226ad6f8b2ce436c0e7e9c5ec4b25cb1354c2393da

  • /data/data/com.kuxun.scliang.plane/files/mobclick_agent_sealed_com.kuxun.scliang.plane
    Filesize

    588B

    MD5

    ec018d1b5a203838a5fd9b5ba51b5732

    SHA1

    3eacca53deb8bae857528764d13410f4890d5880

    SHA256

    b3b4b7fbf0dc0ecf9bd534b52a75cb3d29b564a5dc00d43a2479981ff2a8a893

    SHA512

    9fab78d3bf3082151239ebbb01daf6f0825585bce5f5a0ef363f7e57c49c28ec22af93126b53969d98cfe1bf59d4dab446a45a0afdcd72cb866d673484314447

  • /data/data/com.kuxun.scliang.plane/files/oem
    Filesize

    5B

    MD5

    bfe279945c6109d067bcd295b5189d86

    SHA1

    9969230fa9c65716f6f82a97c9ba7c7007609014

    SHA256

    a89151ba4b5ac0f22e96b71b963db927791d3808f5175f06ae4a60de5891bf0f

    SHA512

    c843adbb98d263d02ce3f9d3d9c684b9cfd8e61e8b155d8349317f122fa9089119e8eeced1a0f0f134db68a0b88ce095273acb863c86c1be6f9b8e4682eb00e9

  • /data/data/com.kuxun.scliang.plane/files/umeng_it.cache
    Filesize

    211B

    MD5

    98af28bcd1f9d40b3059591031a1afaf

    SHA1

    3864a6bdeac4e753c6bf70099bf1bdea53cc795c

    SHA256

    7685e95b2117e942d927b0c425c765549d41d5e3fbebafb46971734ae432e9f7

    SHA512

    c49b517f79f48c015996fcbfb6f0c8a8792b3983e349de77e7b6107adce8cc9a9eb9ea2cdf8bf123f292a81264e8cfdaa05ea99229e136cec5f6377f839f70d5

  • /data/data/com.kuxun.scliang.plane/files/ver.dat
    Filesize

    24B

    MD5

    de4b6ed34da6fed0cf6c2709c1f9b19e

    SHA1

    9c8b1567f0fa791d9815d6fe81db566f9dd6cba5

    SHA256

    a6c3f156d562a8cff954d5f4b8de8275adeb9009aba8b925d24b39fa71749fd4

    SHA512

    b62a26c8d33be66f9f25a876093c590327da9d22e335b1bfd2fccd099d8f3ee2fff45ed9601d6b430223bf767869092bbf73c7a93b6c494bc7105716a45d1691

  • /storage/emulated/0/baidu/.cuid
    Filesize

    89B

    MD5

    f3b46d8a9d100d9ebdff4946f50dcb19

    SHA1

    65e2b4c297c6736e7f0c923268cf9579785a0dd2

    SHA256

    a884e1762ac271961bce2ba4ee681addf953e2de6ec82e1abd0c33d4eea263df

    SHA512

    64a5e7f13f31b2ac91bd7b6ef817c201b3e726de553a06d23edc98fb67993bc0dc03558c5c83d549d084bad440ea0fc779db6954e3fd7a519637ffed2af6791c

  • /storage/emulated/0/baidu/tempdata/con.dat
    Filesize

    160B

    MD5

    776742bd155b40cc2b3cc9062787a43c

    SHA1

    b0f2c5082b01e140c1d19dcc494d6bea8886ff6e

    SHA256

    36f2bbdc8b5fc130efa36a87b481e16a617d19c90718ddc895cb5b0a24c8e7df

    SHA512

    ca191ccb0cfe3eb8aa926b3d4de5c8899a3a6a9ae5b47327638a25151424158ceeea49ffdc1f3bf8ac4f41c4590dae4c3bd60ead8510c728fe97ec5fe48165d2

  • /storage/emulated/0/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

  • /storage/emulated/0/kuxun/deviceid
    Filesize

    36B

    MD5

    ba3cb6984d9b1e300bdc97f691728409

    SHA1

    621ac0f70af8c49def1899c92c31445d25e523c6

    SHA256

    f3b32996d90bc530e58b93ee20139a4732508991b6b8dfb748e66fa518356b6e

    SHA512

    242e3833a76f10f6099477d72b49770260d5aaffdb08b3f2067c228754f90c844137547d4103f0df0fb7c2e4fcacb59e11e0091db1214f65cd419425096bf181