Analysis

  • max time kernel
    128s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    13/05/2024, 07:12

General

  • Target

    YQrgDAsDehESdHIdUFKef.apk

  • Size

    8.1MB

  • MD5

    516a620d37b611967105bf9b3e99f74f

  • SHA1

    0eea46ad8522161e76bcf8ce1c86d6bb699f5ee7

  • SHA256

    e2e2190c93591af4ce26e300f801a3bde9ce9f4170bfb4e41a81ac6fd65f397b

  • SHA512

    6e1c378e060056f97c200bd77ef5440909561d91ff70b0ca6cf828653b254632b15f80f4cdd3acd06c58704243479041beb96769dde055f5fa46001958438557

  • SSDEEP

    196608:KCWkeyr0+nwyw+oqiRG0AFbbdRooCx7y/YAieQyix:K35A0+i+ssvRobygNeQJ

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks known Qemu files. 1 TTPs 1 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 1 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.duoshoumm.ttshengqian
    1⤵
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4287
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=65 --oat-fd=66 --oat-location=/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4342

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.duoshoumm.ttshengqian/app_SGLib/libsgmainso-5.1.81.so.tmp

          Filesize

          591KB

          MD5

          c85e8919765cc22095d1b8e40601e34d

          SHA1

          22d48933b9f30a028cf4c9d993f59c767f9e8e35

          SHA256

          f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e

          SHA512

          6715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e

        • /data/data/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp

          Filesize

          225KB

          MD5

          10760142380b34e358c396ca8d606a91

          SHA1

          b8d7f379c3e25bef6f24636fcb243d3baf2cbe46

          SHA256

          8a25b66e15f4054d677ad667d8eeb4db31ad09188884ae20cff78bfcafdd042b

          SHA512

          72105e76a0b2252434453074a966bb0f2ba849399bd9b3093004f3af47663003af614ec87ee3dd6d12cce0de9816bc1504a9859ced15c389c18601c36d66f9c5

        • /data/data/com.duoshoumm.ttshengqian/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof

          Filesize

          299B

          MD5

          975579398cf8d4b44132886625529bb4

          SHA1

          934be8e7dacdd7a2046bf291c129f091c07ce259

          SHA256

          38ce36a441b2ae8d104962b5b400842300f7fcf1d9721a64c917cf82e4da058c

          SHA512

          eb2e4b92ea8f15806f7ca5de8eed4d52ea2e1839e77b980be1860b22bff2994a8e8abafa53813b4ce275a1ea3a11bf2260493d63f7ebcf682e50a3f52786bacc

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

          Filesize

          36KB

          MD5

          5d7ea1a23af19b4340cc8d90f28297d5

          SHA1

          4cfe95b23a9e98378d69c4290af81b51fbe76aea

          SHA256

          474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

          SHA512

          33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

          Filesize

          36KB

          MD5

          ce6135aa1b1fe4f2c2db2a546d2a5558

          SHA1

          79b59582154017aadab783dc266fcb158c252940

          SHA256

          7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

          SHA512

          2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          ae147f1cc8f108d1813ff5a918a96418

          SHA1

          5f8154a4a651281fc72063199d4ea6e880f05b8c

          SHA256

          1a07c054da6b6e60cda01f8d0554a35eea4cd9b6ed985bd97698a67b64e7735b

          SHA512

          71caa2e767e8a2bd910cd0f4190344a2ffd0c0f0d8e706b23b208aa0c581fce56a553336155ff9a95b4a72c513d9090e46543da9e5bcf638d6002f77cf823426

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-wal

          Filesize

          48KB

          MD5

          1f42ee1bcd12ba43e935c0ab98ccacdf

          SHA1

          e510e4870abadb0554237703e0f4ff80c7027cf7

          SHA256

          07f7df0be0297f653f401087dc1772efdd9b3d3f7f06780e038db1acc02f062a

          SHA512

          28f71dc6d6ad327e5a3f78dca9d9e64b5ba6da55b72d32fed77a59003d59536d0dc68effb49882bb2f5ab7341c50425f560ad5af3483ff0ab6c159dcfe88c307

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-wal

          Filesize

          16KB

          MD5

          7aa951d498ecab49ffa12e2c46a03daf

          SHA1

          21d4c26e4bf5112b0bc0c455064c8cc74b0d9662

          SHA256

          05ab10f6e2e649e596ed0a6ad9ed0394e796408fb44e4fc363192e1dc338c8ca

          SHA512

          9adbe56f2aafd97ed5c4e68b6018313bdc53e6ca5a9c7ccc27ee67ffd022ac1e06d8418beee21afc774b50d8f746b7c8a8ece3c3f1d09843df99fc2585b18d00

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db

          Filesize

          32KB

          MD5

          92ff3e4651d8dc064b52067041a9a657

          SHA1

          7014c80992637d24a8abb94af51dc6da6ae78bb5

          SHA256

          e357416675d980596d1cd4a8e1cbfc649eb976e2bc3247782d6af5e522cc1c68

          SHA512

          b8bc5f01523590ec9f8c6190d0a83a0fe9146f9e87f3f661f791802711617a11d9b872725ad342bed73914cfcb3b659f2c963a7eaacbb78f237a825cd30fda22

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db

          Filesize

          32KB

          MD5

          d604a3bf1f8d992cc320ea5b1f7609bd

          SHA1

          247f88df0b55c7d523ea5398637711a0e4a483a4

          SHA256

          329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

          SHA512

          67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          512B

          MD5

          305d93d02504205d827dc151603c0b38

          SHA1

          1557d65ee3cebdbe8008323fcc838beb5bb948ef

          SHA256

          cac73f52ff0d62bfb5d0541f881d2db16b803e9cbe3eebdeca127d4bec73b9e0

          SHA512

          614912ae6ab4e5de16b5367490580f0487f75d820071beee7f661abdc9cad29ddcb0a65fc05317955c465a1a857eaa5f69a9daceda9558bf3edcb3a925ef2fc8

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-wal

          Filesize

          56KB

          MD5

          032026d7a9551b1d63bf0a3b8f20a5b2

          SHA1

          67907c1d6719a3e9267c12d16049e79c18e8d883

          SHA256

          66f7252aac631b9dea3b1f6a241b8a970fb68965d4eb0e5d5dc743d67c6d5f3b

          SHA512

          c3dd2888d8d0a1f142cc21fbb4c2e734b64e7bca70bf2559cafb3321ca3e3fdf276e211b24ed527b86509b7077d563dc18955c1e949cfc82c6eb18e2643971ec

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-wal

          Filesize

          8KB

          MD5

          6033d5692bec572ccb4134e1f32eb021

          SHA1

          4fdcc58011fbf231e0250066458c0caec8929067

          SHA256

          adddea9473c36f6aa29874f27c190bacee0336cbccd9e903fba8cc96884f4f2c

          SHA512

          dec0376f4d690d60616fa390d019d5ace85dfd7d497c0045a2a9d3eec16896eef784dc5b757b12e9fdf0bec1f3e6c3162fd8311e3e36506959f8571be6cba9da

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db

          Filesize

          20KB

          MD5

          38616785cca0600a03205f84fe330b4b

          SHA1

          6ac41a6bdcae297d56dac5fdde70be5faccf0832

          SHA256

          b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8

          SHA512

          7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db

          Filesize

          28KB

          MD5

          c1770b4b7e955692fd8874b3b80ae885

          SHA1

          b24dae2ef4e6492865f35041cdf31d03f0b6cdd3

          SHA256

          d8ba2f929f6cd870691b24115a403c587ed54f70eaae85995e1d59c0af4dae36

          SHA512

          2177b621a71bf611c0cbff4c7f5c7dd1b09e2cae283bb4b1f295bdb642ad15b8230140968795ba08197eb2a329a5b0ed56a8353b8cb9a55f69a95e7ec1206390

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db-journal

          Filesize

          512B

          MD5

          6de2d6a225657bd18c0903d5446b68e1

          SHA1

          6b1e287b794dba3d1b983be4d35e6f1a7e2924fb

          SHA256

          a4e778d8dff5356a7c17f4b1796c0e7c2e17c7b26a7dda9f842fc8b5c9dbb48a

          SHA512

          7404f7a09f8494af4222ac18ee819534b7a7e84ca4d1ec73510b70ec8fcc1f62be3aa007a347b67fd56c1b19cd69d461554ba771c5ac76aba6567671bdb65a81

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db-wal

          Filesize

          32KB

          MD5

          9dfa6447cef0832caf609e2c210e96b3

          SHA1

          cbb2669d30e3634c86828419ed50a7ce3b01363b

          SHA256

          1dd06332ee26a43773ffaaacfd2dea3900a5ef72d4b0baf4f9c78f598b94a074

          SHA512

          c2f617303b287bb67d196856cda752982b2087d3ece9dea05715455586ffda9959ff9e8c5e75273657923372d837efd6e8e5d79950df401b6fbad4e321bba7a3

        • /data/data/com.duoshoumm.ttshengqian/databases/ut.db-wal

          Filesize

          24KB

          MD5

          ef61f5d4df36d62c95dc099a90b5e3db

          SHA1

          872c4e05a6f9330b5b31713c60dc5a23282c5088

          SHA256

          c9b28276fc98ee3ef7b08598d2d1864324044327a29d02a5351ddcc3893b9e51

          SHA512

          fc73e07766f792f580c6e6e2f101be2ca1ed30a1b3cd20ab85bf3718401f40545769e42302890d02e5da4feea1322540259f83d8009a46002ba96bc0713a5e06

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74BeginSession.cls_temp

          Filesize

          79B

          MD5

          bddaf9faabe6d3c945fc3390317b5c9f

          SHA1

          705ffae4cb3fcdfda7f7382de8e0a175ec526c22

          SHA256

          28a0ceba0403b1b20245d3a1ef62d76c21761848056595b824a000bc28a749af

          SHA512

          339ca2cbcd900a4e0aed34cc70edf34d4380341e1054d92f2fea8dc07313aa97b07d81fb3732682121acadb4de15b728d4fe7b1a1fbbe4543fb525ed9d3982c2

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionApp.cls_temp

          Filesize

          120B

          MD5

          09cd69fe2e5e9233ef98fcfb81fe4316

          SHA1

          ed76f8a2c9c83aa1046677db20e011470245de78

          SHA256

          f016dea8e6d80e9f04f8e4db88665183a28a339dba6d950ce4501892e2b40817

          SHA512

          45ca35e4e4e6863014dd36cb280ac5e7a4e006fd711e68652916473c5129580fbdab12c32a47f5ea257f2b0001cbf42b6b09ec5c85df299a1f69390ed595173c

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionDevice.cls_temp

          Filesize

          88B

          MD5

          fbc537265828c27cfbee9b58726b1cb3

          SHA1

          65247c23b74bdd3cb31514691fb18c333d534910

          SHA256

          9506b16c6d8e1bde3a6f96266dbd628151e7fe635a92e8e61ff4711c86798e05

          SHA512

          e0733dda67f6cd22352ce0d9d6da1a29af0ec44eb57afeef23e783c2ba62e872be76e5a0366b8a2a825c3945d81149a49763560787ee37c8a410df695765ae50

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionOS.cls_temp

          Filesize

          14B

          MD5

          9b3d4522944ce6396563812bfdb92fa9

          SHA1

          6d2a6133c8f01938a48ccc77ef86ad8ca335c020

          SHA256

          d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

          SHA512

          091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          468B

          MD5

          376fcc9fb35269b8e40890c5b07dbf2b

          SHA1

          e446f5d5ed1f0821ac93231c3d4013b94b2648a4

          SHA256

          144e0d6c7c56b7e2784c022d406bd4efe497705ebef3f80cc80ca78557f5a006

          SHA512

          5838dfe49f04ffb1be5c51d2c3d4520856d6dbf9a28aee33b1a65d2f6f94516dbd0747b78ca84cf20665e0d411937c221e1c738816327bf7af6cfb315f09b2c3

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          2KB

          MD5

          92dcc4ef5c1a7554cd324b8617cd5520

          SHA1

          38d9bffceb06e026836f63ae6bc53b381cb492ee

          SHA256

          ebab7753d111248836c8530769dc2394a2ce2097a1a18a2d53f7c8b89cd7a011

          SHA512

          6a488545c715cbbc58f9996cd38c5a7d5d6d8c87abdd7e0ce62d7dee56f142c55b498b0fd97b21a016efa40089a664c18bbe7d88ec28377c1c419e388052f66b

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_e5f7b2fc-578e-4460-a36c-8d044b3b4f20_1715584338707.tap

          Filesize

          367B

          MD5

          4b766deb5a6dbb997656f8900ab032a7

          SHA1

          b7cca10a0a3f406ecc07ce3d1d2f109f5ac32d79

          SHA256

          a7b51a1ee6a7e66242508251219575377c2c31891b2950d83aacd120f8eebdd5

          SHA512

          f40fa4801ce0d89e246b70a37b0b89eb7af9fca2970871781f8fc9c2aac655cf2b5cb46f0fb64b9e9588a9906894c838aa99b56da0106c5c9d8a49454ce7fc65

        • /data/data/com.duoshoumm.ttshengqian/files/.um/um_cache_1715584464095.env

          Filesize

          1KB

          MD5

          5719abf58de10ecb7d459f97454e11d5

          SHA1

          5f773e14c241832a26824d7f5257f89b949bb0b2

          SHA256

          ed7ccc1f6c0e03bfebc676e84e566a157c2c5fbc31b80838ce641978fa07f643

          SHA512

          af074b6423ee70f1b55170e1b0a3a5871ab88d0f008c60370b021e737133bb95c0c15525910c44aa36ca6586be66153c16a7765fc8dab787932065c162d84bd4

        • /data/data/com.duoshoumm.ttshengqian/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          336526ac5c3541724759b56b2fe96eff

          SHA1

          9861b09dd9b1fcc3056fef28da0fe0784493caf9

          SHA256

          c4e90e98ecf7a004df04ad6df53a73cc8f1846f132e31f33ff16f44802c80988

          SHA512

          bbecb0de16bdbdf6a0fb2ece9a9d8fcf051ca9bb6c7e3a43c61e6888f566e8f4609d49bd714e1a6bcefd9fc812bf33f04ecc673787dd0e6695983c0e127430e6

        • /data/data/com.duoshoumm.ttshengqian/files/0a231bd8575dcf72.txt

          Filesize

          40B

          MD5

          42858a475878c7762cce5cf2709b14c8

          SHA1

          d71f9c5419942b826f560e0108889d76ffcf77e4

          SHA256

          93fe353b452cf0aad4cd6d08eb4becc05cdbbcc62abefa04655e82a45c164d32

          SHA512

          dae68b0426770772eb79ccb08e747afae517b22f45dfdf6258b2962f823aea2d31b9f5ddbdcf81acbc72a87b6cf5cee4ab26a76e359c13519b4adb4c087a88f6

        • /data/data/com.duoshoumm.ttshengqian/files/21c22f492aba3de8.lock

          Filesize

          16B

          MD5

          a8d7bd264a0c0f46393e92b1e386884e

          SHA1

          e5dc3ee5b423804f94b0d472f4e085be71ce9c29

          SHA256

          a054f4380f498f3307d9409dd7069338de611cb4da7c43da0cb5f1e947db7274

          SHA512

          b44f5104eb4f39991d1b5c36048b2a7fa628028a5d3697697e91ee3aa0447275fa54ef9c0c96078d3b9a00f1c0503d1f0fd68fdcf602cf491832ffcddfee7b0a

        • /data/data/com.duoshoumm.ttshengqian/files/INSTALLATION

          Filesize

          36B

          MD5

          882d84975921cfd0a1d4475387434cf0

          SHA1

          418ade291c51c5bd5839c5417751f7c616d922e3

          SHA256

          fe380b1c7a0a09a75faf7712711dedeb47d7846430d665bb118d4ae1e736a851

          SHA512

          5affe384ba5f4dfcf893d45371f056361d20c89c00d2aa670eb4af405a506a329e4d071668d1eebdee0c95b72ff714d98ff766fadb23867210c6ccf1bd0a21d0

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          72B

          MD5

          f58f13d0fc991322df1eec4c68481464

          SHA1

          fac54fd6dfb4fa6e0b0f548eb024573dca8cd259

          SHA256

          1d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396

          SHA512

          e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          143B

          MD5

          e226bf9446849dc009baa24a537ac74c

          SHA1

          b6b4de6d0febe5a29c94656ddbf85823f20d6204

          SHA256

          f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19

          SHA512

          0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          189B

          MD5

          6a8863dd4be7802445180fb86132a879

          SHA1

          318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768

          SHA256

          003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08

          SHA512

          21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          262B

          MD5

          0438489e26550304ace8e365664531ae

          SHA1

          cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4

          SHA256

          a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb

          SHA512

          6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          334B

          MD5

          0990b5ce9e53d81abb914b5469082a98

          SHA1

          81e80de96645891c0cdf32bbaae5e26719ab0684

          SHA256

          9fba5c2847e203141f974fc9a73b2ea06f40a53285a510f8ad36b1c1f1a52daf

          SHA512

          76f856dc8e2b6d95159475a7203048ac4d2ec44b495bc2a481f779031eff0f42cd1866a24c69610153f38e2b265abcc6580851b05b20f792e80ba0efc7664c66

        • /data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          981B

          MD5

          24d9b67addbfbf41288f6ae666ca706e

          SHA1

          61e45a3704523d03ed6beddf06e0c93af10635cd

          SHA256

          8fa30aa0b40f3a962ee260cfa05cc50266f12a27f4270ebda037274e85f98859

          SHA512

          a18df2004c041ac918f97f24196c3f63a04bb4bb60bfd2f78a12e9c9a5c40b316f3f6fe101ab3ddd4cad14f295e6f6f596e7359ca727ccaece7c3a46d554f6e4

        • /data/data/com.duoshoumm.ttshengqian/files/exid.dat

          Filesize

          54B

          MD5

          b52c191d5436efc4c6faf56fe926e2ed

          SHA1

          b0c174fbe13cc96bbd5a3ebfd19992a52c844394

          SHA256

          41e9b8a9698489fbe707380b7df5d2d368dba0ca4972fc3fe944902abcfc0e81

          SHA512

          1c0af7e6f89f6923a2136cb1c3192ed3bab54f914f6f6b3c79b0c4f9d72f4537bcbd2eadd5740e45b28f4ae45ced929a1fd195bde2621843ad854731ff3edc61

        • /data/data/com.duoshoumm.ttshengqian/files/umeng_it.cache

          Filesize

          498B

          MD5

          4ce731ed0fa8eb37a8d977f75fb6d017

          SHA1

          2198002a87e32c71d50e835ba4a36f1d01705c50

          SHA256

          9a4efc9a457438ad889e73cdb8c5ac8d25c25d051d05350d8abf44886d02da98

          SHA512

          1ede679f97586a53b52d19b8ced8f976a60626e748c8bc7a84919952df8bf422cd4a0d5043c83fb28eebef8793bd33bd6a5e693b9caf75928d10a48713da3e34

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

          Filesize

          65KB

          MD5

          0c2f2989749ff3910446998637c28286

          SHA1

          054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3

          SHA256

          f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d

          SHA512

          72acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

          Filesize

          65KB

          MD5

          522947eaa37b029a247e3973f3be3621

          SHA1

          31c88e0d7c9b51904c0f598e80245bba41b1c7d9

          SHA256

          d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

          SHA512

          f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          213B

          MD5

          26e872c7f904c2f290864fb029af8ed3

          SHA1

          7730eac4aa7416c15e6043a7522bfd72a83be932

          SHA256

          72b0cdebbcd4937d026543985d645f44b88b2cb726ede524841c372a35cdeb24

          SHA512

          e49a6da1c8ce5c4228d7bf54f908f3371930ff7a17aa25068703a2c91ebeefba9990f4ebf9ed2c3b57d1965a01ab2af516db19e6a5f6b91ea2fd03480d2b8f0e

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          cff0c5b532a274bc6afb2d176e7b6197

          SHA1

          73cba2ac7fb8c9314034a4cbc0b0202af932e3e6

          SHA256

          f6d4083d204b3445da3a8ba1ce70e6d6d2e289bfed928d820de58c33a1ef9d54

          SHA512

          9c3c1419e2ae0d2792c616a525b119bf00002b79f0856940a42b222bec7f24a626ccc02f2fa0f49ad17adcd81f1210013717173f3be5fab89a2e477a926e1fe9

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          d287dd603f509fee5ee5957df5c8bda3

          SHA1

          ce59b8682cb22fce62b91b4feac25280ae710ed3

          SHA256

          d767678b17fc63e56a35281ac8e331d43989105b757ac9a9c4592196c5566631

          SHA512

          78f8ca9edeab0398997267f60f8abab272cde0a0890813b23fd226c9a7e5c2bc301418a86a87f5df6087847d306f93498bfa746cbbc4d7aa87fc6c8f8ef900bc

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          4ae8126da6338d0dc868074bbd4230b2

          SHA1

          c9100fe1b8de0a1510e68a6fdd5e988edf67c43f

          SHA256

          ce8935da7df7cef6635df2891df545890da8dbacd9e95d80d5485e96e3a00e9e

          SHA512

          f891d70c30e0b7465896e89fa119faf5746af8119c1794aee206bc3bd6acc3e2aaef394d58651405633196b9e5ab4e64352ca8d73c693a3f6c679ff0fcdc318c

        • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

          Filesize

          512B

          MD5

          6a525c7b5a6d9f3c8ffb31237da73b52

          SHA1

          7cd53daec209a727434c32469c13f113138ded35

          SHA256

          6b80510c0eb13c085a5f4138682b3220b9557f8641a586286c1560b44cfc0ddb

          SHA512

          6eb7cd4f2c977ade8c6b0b9b431b0a3f8d2a5e5f67440ab3b796811c270462f92653977e1869ecaa9044446b5b371af16f24e9a38faca3df2889dfd7e03a5c1f