e0bea179f8d3fab81e71eed366eafe78638da426954429d8f7dba208b18679eb

Analysis

max time kernel
136s
max time network
159s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
11-05-2024 11:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3479a5930ac9cf6c11a8cb9365aba8e3_JaffaCakes118.apk
Size

19.8MB
MD5

3479a5930ac9cf6c11a8cb9365aba8e3
SHA1

449e15365778fd6f2e1515b14926ebcd79f5bbb2
SHA256

e0bea179f8d3fab81e71eed366eafe78638da426954429d8f7dba208b18679eb
SHA512

6991472d347466604a992e2ddca46385de8478f4d62132b1d745b67aa193216ad49e02650d0df20ebeeb3ffb699eaf44705d159a0eebffe7f795be854f61ab8d
SSDEEP

393216:71GuZ/KAfJfpsweES3RmdGyZNWL6jaU1YZNWL6jaU1a/LdR82YU8oySuM8e:Bp/KKTenA5n4SYn4Sa/LI21ynZe

Score

8^/10

collection discovery evasion execution impact persistence

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

T1430

T1627.001

Processes:

cc.ibooker.ibookereditor

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation cc.ibooker.ibookereditor
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

cc.ibooker.ibookereditor

description ioc process

File opened for read /proc/cpuinfo cc.ibooker.ibookereditor

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cc.ibooker.ibookereditor

description	ioc	process
File opened for read	/proc/cpuinfo	cc.ibooker.ibookereditor

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

cc.ibooker.ibookereditorcc.ibooker.ibookereditor:alarm_servicecc.ibooker.ibookereditor:remote_servicecc.ibooker.ibookereditor:channel

ioc	pid	process
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	5083	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	5083	cc.ibooker.ibookereditor
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar	5083	cc.ibooker.ibookereditor
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	5317	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	5345	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	5317	cc.ibooker.ibookereditor:alarm_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	5345	cc.ibooker.ibookereditor:remote_service
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex	5627	cc.ibooker.ibookereditor:channel
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex	5627	cc.ibooker.ibookereditor:channel

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cc.ibooker.ibookereditor:alarm_service

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cc.ibooker.ibookereditor:alarm_service

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cc.ibooker.ibookereditor:alarm_service

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

cc.ibooker.ibookereditor:channelcc.ibooker.ibookereditor

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cc.ibooker.ibookereditor:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cc.ibooker.ibookereditor

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

cc.ibooker.ibookereditor

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo cc.ibooker.ibookereditor
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

T1422

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cc.ibooker.ibookereditor

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

T1624.001

Processes:

cc.ibooker.ibookereditorcc.ibooker.ibookereditor:channel

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	cc.ibooker.ibookereditor
Framework service call	android.app.IActivityManager.registerReceiver	cc.ibooker.ibookereditor:channel

Checks if the internet connection is available 1 TTPs 4 IoCs

discovery

T1421

Processes:

cc.ibooker.ibookereditorcc.ibooker.ibookereditor:alarm_servicecc.ibooker.ibookereditor:remote_servicecc.ibooker.ibookereditor:channel

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cc.ibooker.ibookereditor
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cc.ibooker.ibookereditor:alarm_service
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cc.ibooker.ibookereditor:remote_service
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cc.ibooker.ibookereditor:channel

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422
Reads information about phone network operator. 1 TTPs
discovery

T1422
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

cc.ibooker.ibookereditor:channel

description ioc process

Framework service call android.app.job.IJobScheduler.schedule cc.ibooker.ibookereditor:channel
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

T1628.002

Processes:

cc.ibooker.ibookereditor

description ioc process

Framework API call android.hardware.SensorManager.registerListener cc.ibooker.ibookereditor

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	cc.ibooker.ibookereditor:channel

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	cc.ibooker.ibookereditor

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

T1471

Processes:

cc.ibooker.ibookereditorcc.ibooker.ibookereditor:channel

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	cc.ibooker.ibookereditor
Framework API call	javax.crypto.Cipher.doFinal	cc.ibooker.ibookereditor:channel

cc.ibooker.ibookereditor
1⤵
- Requests cell location
- Checks CPU information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5083

cc.ibooker.ibookereditor:alarm_service
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Checks if the internet connection is available
PID:5317

cc.ibooker.ibookereditor:remote_service
1⤵
- Loads dropped Dex/Jar
- Checks if the internet connection is available
PID:5345

cc.ibooker.ibookereditor:channel
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5627

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex
Filesize
6.1MB

MD5
dc455067bc5b6842806bb3f66d27344f

SHA1
d89619f6fff15d2e34476a220593ed2c632ac089

SHA256
f80fc989543100e7ef8649fbe6eb3b83f4f52be4ae015620b0b8255193814ac4

SHA512
a249a7df695a289cd700d747c664a18cb80e7de3e9caef317c55027784eda2c93e33ff326f364420a6debc095d9e3bd388411432f271845b538d41203241aad4

Download Submit
/data/data/cc.ibooker.ibookereditor/.jiagu/classes.dex!classes2.dex
Filesize
4.2MB

MD5
3c34038f35b92ba1e5448773fe79b2f9

SHA1
1de70488546b0b421386d0dcd386a84981cc0075

SHA256
5f73cd9e80d4df6a8b5a047d735bacda9eb3d552dc4e414a199ab3b1469f749c

SHA512
a51169d242ff9baa423e33543af104cb1072b53a10a770fa79b5303e01a8fa83927bc33532e6b58174aa5e9e502136275f1674572d91ad63eb2b0f2edd6bb8d6

Download Submit
/data/data/cc.ibooker.ibookereditor/.jiagu/libjiagu.so
Filesize
475KB

MD5
f0f9ef36b67807a253b5932f865eae7b

SHA1
6a8d66c6efa2750b54cb763f4ad044bba4154e0d

SHA256
646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75

SHA512
e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548

Download Submit
/data/data/cc.ibooker.ibookereditor/app_crashrecord/1004
Filesize
233B

MD5
e487f20fdb0aee9c3de0036dc3934b72

SHA1
03cdd24dda6ee7102cef88d1a5279a0187c947b6

SHA256
dac1c77d28c5c564f20127417999e78fdeb5bfffd5e1504ef1781b9bfa58da2c

SHA512
1db88a9dd4353bde82690762727d7ed67fa8fafc3be6a42f14909a17b9e0b745078f06be6bfc0f31b82e509d8d699e7181230c1017c633172352354ffcee54cb

Download Submit
/data/data/cc.ibooker.ibookereditor/app_crashrecord/1004
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar
Filesize
468KB

MD5
6bfe094580c89ba696ef8772de47a552

SHA1
210bc4afce84b6e6bb36f97f68f9d3d9d3432643

SHA256
a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4

SHA512
7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar.sig
Filesize
180B

MD5
71f1fe7ba0e414fd233f7ae92e328803

SHA1
b42aeb1be13ab429f0150c50351d43af5c17d99d

SHA256
2766621a98b9c58bf7131ae3658dbaf36336b9b893b2325877550c75555cfbba

SHA512
5939aac6f0cfb02c5ddbe5a4b26627c1bf7a82421c7c6d269a9fc2b4bea6f0e9920f103e685d60fbf7da5a4ea96f7411f26f3a3b24fb03cd78ad3ab3a74e8a09

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/update_lc
Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/cc.ibooker.ibookereditor/app_e_qq_com_plugin/update_lc
Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db
Filesize
36KB

MD5
1df4d8240b5a81c7b7841fd1ac6f7773

SHA1
d28d0edd8a6b4154c4ad1bb7a9518d2c1441ff25

SHA256
25617cd6759eed630bc43ce77063888aa2f7cf239be62a315fb7cee0c165822d

SHA512
bf1949e641d29f434c36d2f72f7ca3b377ac00cc6232d56e8d0cb2f045f9eda7ebee60cb5da8241af005ce4d63289360dd8b12742b19418795f6d2f1c335867a

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-journal
Filesize
8KB

MD5
9f5d1e4c3da8e84a9ecc8caa97ebec1c

SHA1
8ea25ced8aa646c4c7ff24334de6874dd4ff1a34

SHA256
7982cf87a77046f212b11f3cf547fc5074aac930c58ac6094bd1fb3759dfba79

SHA512
91da57556567d323cf98a5a95dce9dd4ed51781540e00e37a0c5ece5046328c2b811878451579de693aa78a9e04c4884afe0793db762143145c5c2b0307c4afa

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-journal
Filesize
12KB

MD5
4daf3552306247a86352cdc4adc66905

SHA1
7c8823600c2fb4af88480190dba31ad8b477d9af

SHA256
1de4548805efb9f1dc04f06c5686f3f141b9071983f1e83668038d46e9706f45

SHA512
3d481a7f287535ee16088b0c7155576bbb08c97376a62808b2656386675c935745d7cd1cc33d476b69c23cebc2b2c5d57eefe7526dcfa1fe173e6794cdc81d5f

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-journal
Filesize
8KB

MD5
49bd7a0576b4dbc2e512837bf6575cba

SHA1
dc3cf9928435e5e1e4de3ba6d068424df736f3ee

SHA256
182d51e940c6457f2391da59a3ce99cc6e1baf6db3a41889e6bd29a52d972d11

SHA512
f66a8fc83ddca3bc79bfd1b8e1323b22160a7c3026fcacd7a57e7697350d74126924df5be6f65de1d4e6523e944f4a35d43824364adc943a2e0018fa2296a1c0

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MessageStore.db-journal
Filesize
8KB

MD5
f88d32123289f4a49d62053f71f7d713

SHA1
16da917cc52f9430118a9273f40074b118e9251b

SHA256
7a4be6bfc3dc4f0a12694c3619ebf5507ba59773f03b2e6f60b64fc9a3a2b917

SHA512
cde91c7b137e2803526458f28160af8056c35aeb4acff7724fc90cc23b8b35c263027fced7818f411c0fa9c042f5357a9b53defc36cea4a5163dd8057e5d8878

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db
Filesize
56KB

MD5
9cec591e3ef91ae568f4cb6e7c2a8745

SHA1
ccf756b6b465ad9ad7ff6bfbeb4e8345ba3f6ff7

SHA256
05be88f05e9bfd4d6496caab584a704e7956fb87036529a0c8028f1e2bda309c

SHA512
f824b3268338787275c184bb740d152d53c1d8e57a044f587530735ef04d021a2671cc2aebb17ae3b497a0ad171060da484a565bfa62d32ed334ae5ffb538f51

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db-journal
Filesize
512B

MD5
63b5b6e5ae9264399211903153315d39

SHA1
f97b5e4c928c323d99a6d3bfdd6f5bfae0b9feef

SHA256
1b46d0dae2822e376f9be10c1ab3c3cc5c50baf8c27b8a0c1e2e769b294bdc0e

SHA512
d3718227d991f683ce053bb12d887ed9150555d5aea81a80b0b31bb060025021801b32eb650a72c030de2c9669159773a131c94a7a25a0a7bd359ac4a26f5060

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db-journal
Filesize
8KB

MD5
952ea14dc60251a6761120031c17f76d

SHA1
19b5408a734a14e7a55c36db54daec8f29e78bcd

SHA256
d266e9b64ead2b86eece63a1800c6a1edafdb9b8e82ead43508d7ab637a1bf58

SHA512
a774b6a4e258a92e2bf82eac35cd59e173abb09284e1647195f04ae98e7b9af45f2921ac45f18521f9f5ede1ad24a72f027470413b431accf19e2f6fb386e090

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/MsgLogStore.db-journal
Filesize
8KB

MD5
4d4b0e24627e2669f2127745ac46fd1d

SHA1
e5937f462582a4fd36e9dc02bfc00cdcc4339264

SHA256
e7de3ec01de16fe65d65808f31364ad9fe597e8bcfaeae8fc984d612ef0b7237

SHA512
490aa28b2fe30c8496e7262576cb33f3701b5e0c0f2c6a823f469bdfbb9f77e946d8d0b7f5d39599af213473f760d3d4147953cd854de30e20b1dee49e5e9914

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db
Filesize
20KB

MD5
d95e1280cc553509d7b5b7851398db12

SHA1
121eb76ea37f3407d0f3b56392f6f67893fbe649

SHA256
58e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c

SHA512
f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db-journal
Filesize
512B

MD5
f5f83954a4a506d8ef939b14e67962ea

SHA1
cc799a7b17c752d992fd475465154bac45caf934

SHA256
99f8bab1f1172fb7bd044152dbbfba31cef1172e75d7f0a509750dafdf754762

SHA512
f5362eeaaf7a2a72c1a73a3cfb65a9a575c5cf105554cb85717cdc6580aa35f52b55cbc74d2b068bcd120b2fe377d2e85976648199e5e330956068c578aa0a6d

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db-journal
Filesize
8KB

MD5
cec4884ff5aa7dbcb609fc3ede36bcaf

SHA1
b19fe38ab9b93bde2eeda56c52f26afe2db12b2b

SHA256
b11d84e9231806a7ed5a136c2d2014c57ede75496b806fc77abff8b6609b5f98

SHA512
4cddfdf079de3242ab768619da3781adf2d790c36ace2f7314ab328d65658f00ed3821d93b7cd513dce5baf256657d668fd43aec3ff519fe90dae1b9844dc0d5

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/accs.db-journal
Filesize
8KB

MD5
5ef44f8b2916c004b66846c73501ffa9

SHA1
7fc07fd4afdf87b1246cb5d7aa94b08a545279a6

SHA256
fb3c6db58cb7042a9d40b5e111bbb08ea45f63032991e0c8cfe39860716edcf6

SHA512
b6732a8f39c777b16c87e3d3de339ee1d2b258b57646a1a6e9c82b72a999e8e929b73516e39dfd2c0315317be3900ff48935e77e83d9b5a259cfa6e645ed1769

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_
Filesize
52KB

MD5
78031da645ee900455f70d2006ffb353

SHA1
abf453aab676b7c1b071bacfa065d0f1c12e8f72

SHA256
51e8980cb742b78e157ba304408d7fdba680f2551da344a4e1420f3e96078d0b

SHA512
a9699cd0bb03addbed7e59bd26c5883219758a100963dc083460c3288867bfce222b1be951b6c3ca843add48d8d3303b4688c6a7a30f6b8375439b2ae077b2af

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_-journal
Filesize
512B

MD5
e0280a9af2e170aacc16725fc9d67442

SHA1
2724483402ca3feb2ad9f7a1d8b76402f93b16c0

SHA256
0a9e6bce8e9d786261d30c94eb095c29272648d7319572a8d5b101ca8246894c

SHA512
89e4e3c81f13253bd47049e3f073bd62d8d15d1c39bfab56962a891544fde889265c3f942cb8e716d7aaad7615c9bd78c26290a7e7519fd4cbec7d063de40458

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_-journal
Filesize
8KB

MD5
4fa454c348aaa60157fc4aed7cbbfebb

SHA1
3d92256766dfa8baf89382ddf647a1b612c8b501

SHA256
92eda09c547da36cc94de7d267c2e45d09f06eceb630955464bc900aa9b17f1d

SHA512
3c87be7161d17363680a6d5e19b9c2b02409cf0d9e76fe659a15b23b59ff5e3efc953ccc76e7321631b1736ef6e3b3f310e8891266faae83b3d60c909d05543c

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_-journal
Filesize
8KB

MD5
d145a5fbd5d1375c4c1b191a2908b9c0

SHA1
03d72648b88e6699cb1a76523201c15b5776c6da

SHA256
6cfcd47e2d1ed4bbb48481958a0d78ab6cd58445725fb6de705f14806d8e5267

SHA512
5063b00c838f618dcf11e91e6f4e3be49b485e6c497d83f0963289b9dee3c27336b9df955a9fcc20560c29cf121fa559eb8857c308c93859d5b16a89a38037b0

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/bugly_db_-journal
Filesize
8KB

MD5
deaf69b2d52cbafbe7e229487c626579

SHA1
6586ba10ae69e029645412cc85bc2d5dbec9a44a

SHA256
e03ef8daca7db9828f9196c4df8d9cd8b12238771b24685b2f5df1b8f35aae9b

SHA512
77959b299cdb7537495a635f2e9c27152ca3ed3167713a2bc194de9fcf5b060fdc3f471de69d4efa929e1475d3be88adbd696191c3308572a54a646635b5e3c4

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/ibookereditor.db
Filesize
52KB

MD5
bce464c83e27db30fdf99a4e0ccc7c58

SHA1
7d3e47c9d7d980e1cc98d36d91b3075d202a3279

SHA256
4188029bc0e05fef13d9651a016a744c92e0ef9deeffea6e089fc1efe8b83c57

SHA512
51eb3041db01c5ec0ee213607b2f48b67c9e9e3d6a464328aaa31d6d6801e61eec0e34114f7c87196e7ae6081b069f091539cd2d509af0d3939d93b523504440

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/ibookereditor.db-journal
Filesize
512B

MD5
0c319853d9c8afac9b382cdbe77bcb90

SHA1
33031d6181426c29e9065be380441419531fb3b5

SHA256
edad478fd77a41433ccdb93aa5a6027f390cf3de9e774bd976a2bbfa34e0747b

SHA512
9d3f794a772dfbf5155d0abc557dd5de15d0877bc6e23f09eb85f1e944bf684cba1efcac31cba14a7b8aefe562260b1f2c4499eb396bf6953c4f1209e776b21f

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/ibookereditor.db-journal
Filesize
8KB

MD5
4ba4ae18cfc4cc84f1eb71dc89a92312

SHA1
0adc1bc672e4a6a44df21dc4fd0277561e6b40eb

SHA256
fbc3f652c2db833fe38f6093910fc8e2b3bef8f9583d4859c940cd115a33b4aa

SHA512
6b8ee1e1c69a3164b57ef6f56334ee7fad489e77098eccecde0663d69cb2193ae4607e14997f860dc71770a199894018bbba3e3db6631b0e1af3f43271a5904e

Download Submit
/data/data/cc.ibooker.ibookereditor/databases/ibookereditor.db-journal
Filesize
8KB

MD5
662cfea6463ffd5ed5da0ee0cee3009e

SHA1
1d39b1548de9d38432314fd84eddfb73196b261d

SHA256
ab14db76b8eb625674312a352fce503c72ce6ca65c6529e8f23bd9c341bd5b78

SHA512
e8d2b290cb1d7db8947a1722ba0198d57de2a3fac0a76a6f6faeb00c1c383560dbcfcd5b3c3642b9ad1d21f07bba2e99193c4b3bdfc645734813e31cfd276549

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ac
Filesize
32B

MD5
c3d0ffc5ebc468f603ec6d6665480687

SHA1
7baeabf6b5bdefe8fd62bd49d936bf36c8adca52

SHA256
3ad97c6deb5b74270f3e4af448b0aa91b322a1eb015fa4169c999dc4de515b03

SHA512
e6feb49bb7628da0021be7db5f854904cf6ed5630c54fdcd0c6bdbf63dc5ac63cc66a508b300370b099ab2b6990dc234df9e06083eac9a60803becd3c659856c

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ic
Filesize
32B

MD5
766ee5f294b47cc896cf8530527bf5a0

SHA1
bd04c1780324d949af0bdf7291f9b3149665c1fb

SHA256
eff9fa9af3b87a79bb49dd7462c34a7c008f59fa0475021972c879cf8eb01ec4

SHA512
89180534ad92519303d602efc6bb529609f192b994f631a5bcac58034defafca01f3698ce43c6b4acc51cfe6fa5e9d5e15c1b5e855475ef1593fc33b231ec234

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.rd
Filesize
213B

MD5
7bd325b83335c14f0378a8f9b3f449bf

SHA1
d681f7a61a7ab62f991ffbaa305c38b62028bca6

SHA256
643ba9c8ad9f30641ca9150747236d582daa06cb72ae27605980dd7ff577330e

SHA512
523c2bda2708ab0a649abba82d0f1b8bc237cd5ce110ca258a3baeb67df7317535351df4ecbe3c052a51a4f756f68e71287ae2e79dbed4e7af9159778aa71885

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ri
Filesize
307B

MD5
8b8af76d79b6b080847a5275819192ae

SHA1
74bb8c93588457158bf9e49b4b1ccf498b85ec01

SHA256
83b0958f4362cae01d855b6c32adff889c346a6bdc103ecfcfe885f465fda665

SHA512
5b60689a20c098852af35902f049eee8afd243c9c5cb4b3a4953d867fb8bffdcee8748ddb20b39383f9be757195848a399756494b9097dff19907ff025339392

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.ri
Filesize
314B

MD5
fd239fb1ce7e0b8b22ab4017c3ad450e

SHA1
010f59069ef299a141f5e0537bef4d41f120e96b

SHA256
743c1ef3f3ab07ef318419c589abc818019194ffebb4ad7901a4877dedbf3642

SHA512
e5b7b74305b87ce5ffc182044b11deeacab7460a0ab3ff3a21d169e18a12ca2e3bab4cf3a8535d33305a9e49e307463e1b1143573f424bef94bad40ac5d2f61d

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jglogs/.jg.store.report_pid
Filesize
36KB

MD5
50f3d63f4b9241e212be8ec20bf3e374

SHA1
10353f506f0aa9dfab398275482eb42da167232a

SHA256
be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653

SHA512
dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c

Download Submit
/data/data/cc.ibooker.ibookereditor/files/.jiagu.lock
Filesize
167B

MD5
ce05d0a21b7b5439447484fe1fdb933a

SHA1
652a28611ec599e30e7e43708b5f2aca2a15bb76

SHA256
7afa4076f9c7199bc58b901d7d96daee23bd6396911fe7ad15fe53c1097e0289

SHA512
268f1a9b487b7fec429daccd51ac1d6e26fb5d5dd645ead14f4c2cbe52a85e26f97d5d7bf0f1a40baf61e3750fbf32f3f12b60186e6f9d1cfa0aad8a4ea4b0ad

Download Submit
/data/data/cc.ibooker.ibookereditor/files/Mob/domain_1
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/cc.ibooker.ibookereditor/app_e_qq_com_plugin/gdt_plugin.jar
Filesize
796KB

MD5
9f03083b3faaf85ae204f9ba7d72ea20

SHA1
436601a861d1c0c6e61e0fa8fb83671fb88f4d90

SHA256
e3d665d63e435195a25726c68da20d322169c157304f7d6963bf02a7dc28ae58

SHA512
e42ab94d65b52fe006197fd81ef55251a2ea6b922bc92e47afbf2a7e14fc84685b112831bdc964cad5bf97f18b4492f9d51d5f85d2e67480a6401e5a9ae1343d

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
f005c6604084335766818870faa17ae6

SHA1
d17d71fd19e31ac468919ced6a554c78157b0137

SHA256
0dbef3cab2a38b061cf535cfbfe61654ac4abd27d1626dbf7f8d560c257f8c6e

SHA512
df76e47e950aa9099f25fd8c7bd6f64d9d54875c42c6b70d18040d4e94d35aff990d2d8edacde1b23acea5ba5aad84cc056ea4fe41ae0908519f78bfe233f0c3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
5a33352e237d1e483c3611fd1af24b47

SHA1
c0fbbd125f29a08cf6ae57086fc49d966694af83

SHA256
38d9cd6529f4fe3718c232a2e162a1d7620466bd1182072ed988300487bfb58f

SHA512
5dacefae4320da26a4f67c9548e63d35f0f3cf2372dfd416d033cfa23b003fb1cd3f7bb7f7b88b45f10bd53cb084ca0c7d8139d02733b03f6a05a0a5809e52ee

Download Submit