Analysis

  • max time kernel
    24s
  • max time network
    130s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240506-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
  • submitted
    13/05/2024, 07:12

General

  • Target

    YQrgDAsDehESdHIdUFKef.apk

  • Size

    8.1MB

  • MD5

    516a620d37b611967105bf9b3e99f74f

  • SHA1

    0eea46ad8522161e76bcf8ce1c86d6bb699f5ee7

  • SHA256

    e2e2190c93591af4ce26e300f801a3bde9ce9f4170bfb4e41a81ac6fd65f397b

  • SHA512

    6e1c378e060056f97c200bd77ef5440909561d91ff70b0ca6cf828653b254632b15f80f4cdd3acd06c58704243479041beb96769dde055f5fa46001958438557

  • SSDEEP

    196608:KCWkeyr0+nwyw+oqiRG0AFbbdRooCx7y/YAieQyix:K35A0+i+ssvRobygNeQJ

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks known Qemu files. 1 TTPs 1 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 1 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.duoshoumm.ttshengqian
    1⤵
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4767

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

          Filesize

          36KB

          MD5

          4cfe777c9f6e7859f5efe2197401d8e5

          SHA1

          bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a

          SHA256

          c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231

          SHA512

          6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

          Filesize

          36KB

          MD5

          86752a4be6564d8370f2f0e403995003

          SHA1

          29f7d50675f6e59f3b808eb6dcc8619384412115

          SHA256

          50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

          SHA512

          79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          adad786ab688fe2770d35e67ab273991

          SHA1

          f53e0d02415d34a8d33d7a4bae2e3005da9d0157

          SHA256

          8693d1a5c3d166b0215804e8bb3e169860fdb5626fd50522d176f82111cfba74

          SHA512

          63f9107dc30fbbce4f3f8d6f717d737871f5ff7e6775dc691d65a8a9c42514b66d560b16c374043d2658abb78a4d840f4d64d430e342b67cd1b6ce737335a39d

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          53076c0ae4194d1b342ace248ade7591

          SHA1

          1fc0610ac66162197ae41e382a263df9b4bb32a4

          SHA256

          fb2298cc434d29805535366d4e2127972afd1a340efbc35ca66a05b5f7c31f7b

          SHA512

          00cb4379505ec69f7ab8510b27aaf2fd3223fd1aafc60401e01829fa42717405d65d497746f6766be500afee1cb621ca0619d2b018aa0be3d08baf757cb89558

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          75fa434a6b767628a68811a7a7ce34a8

          SHA1

          c833181027434c8314838de1d9352f972d25774a

          SHA256

          852fea436ce9736dc257b56fdd2b6a1f7d45092a3b99da53fe9acf28fd9a415a

          SHA512

          4ade0934bd84120c0dda0c3560834239f08b27bfae1e63a55e674008c8b2b884804d393c8e06896b17648f3e5a2ab3a638cb4919c473cced158f2f754097f7d3

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          88b193a3a4c65dc56594f44d58df645d

          SHA1

          10113dc4b446e876bd74dfd5c3ceec1d16d4dcd5

          SHA256

          39edc8d4c8d3c3d342aad7bbbff6b9ff6785a23ced21ee1de77140a342f1d05b

          SHA512

          9aec760ad696d458e6750acd1e23eaa6f47a05953100da380ede4c116b08abb328bf90ff2e65bcc9e512cac8bf75ae480783d6bc3e7a1fdea17a2183a817e4ab

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          834b7961b35629372e9b628f2eaf6216

          SHA1

          e30bcbf9c5c014561516c231a9a811e0fac4dd95

          SHA256

          f2896db05cfa4da114deaebfa28df1a2d3aac8bd29fa4f9a7caf00941136dc97

          SHA512

          1b1eff96df472409d64cab0749b4ccb6b101ac0d00413f484279daa5b35d96d0fc3c22bcda21c5b56d2f6d44cee136b627cec14cc584a75095b098bbcc316bb2

        • /data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

          Filesize

          12KB

          MD5

          ca62d87eb21c0e5663e07b5110c7c077

          SHA1

          88c5a2dddde861a0b6ca0421c52a5e2372a94a05

          SHA256

          91a51168451b8b58b4315f5ecbf8887bcc6e38568e2f94fe623b99b939f70772

          SHA512

          7cdaf24c1ac63c5a421f3820ffce032ee528dba4ea557d4848124dfbd710845768aa8ebacbf933fd15976efa34a0284e0ead340317d532db69827b4db85e672d

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db

          Filesize

          32KB

          MD5

          d07d204c6b107eaeba26f5cce625b6a8

          SHA1

          ca16278e95ea96c1ac50d491efeb6b67eff49df8

          SHA256

          81817bd1f642bf2cc0e0537ec546940b4c602f4ff7ebcb3ccbbc65a6f1325c8e

          SHA512

          dd1ae1a5ebd0b61e697b071d8a81f9fa69f7de0df0df51dbe73e38a1157844d6587800de83ac4315cdd7451e47713da7f2c12c3888d811287753ea0a759e42e9

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db

          Filesize

          32KB

          MD5

          4cac7d31fb94d5c9581893537f64c5ed

          SHA1

          96bef3288546196ac3058b5eeddbe9da1d999fe5

          SHA256

          d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

          SHA512

          0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          512B

          MD5

          1b257dd49c09eec53cc1d35ad332fcb2

          SHA1

          831113c309cd0939711595985540ddd80d79e792

          SHA256

          13e45d44abe40b603a1a8d9b88e1506f2848b60d09ce783db43c91240e4744f9

          SHA512

          758c1b577da786f211c63b619196478bf356296c8b3885de2b99aa05aac7c0fb034f584dac43ead77f8129d3c8545b5ce297e83290bde66d206ecb8c5a8d7e54

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          8KB

          MD5

          a4bf9cc1a48ac415314841efb8a7e850

          SHA1

          cfdb575334e90b893685e2fcf766fca8616db4c2

          SHA256

          d095fb015fb271a96934c2f790721b3d52747ac7ce9a9a7b281dce95d4f3bf91

          SHA512

          b4952b3191e5193061666563d8df2c77c20f5e845e4695261727b0caef628657b3e87ac02d4325ab576b165246747a5e27eccb1d9e443ad793f2604c342b6ccd

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          8KB

          MD5

          7679f43aeee5e94d878ce5fc2e2f13e6

          SHA1

          2918eb90f57ebadf1cdb8de75e7482df2260d4f0

          SHA256

          dcedef3e49dcb2efd947a116f777fb2029d2c693fe71381217b9e812212968db

          SHA512

          ac17d8a8d810fba25823230c309b3c6a361ddb3554d8d5f2b30413ec8a91bffc461f5dd420caec4bc3ba67bd9e4940c1b473d6cd9d929539fba209bf765ec72c

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          16KB

          MD5

          f27089bdbd9dad1757b72640e4d778cf

          SHA1

          2c4aec5f6e076bcab2dddb56b6df3ad4b64018dc

          SHA256

          3dfcbbbfabb18840094ac5ebdbb5b0209bc0b8d4a202ce67940b8eb5532a5226

          SHA512

          14c3fb3584157eb44278dc7a089725416db54edf48b7eab6d4079dfdda7c20806cf4cf2567cefc8c8e95cb0e493b149894f0bab1a82019788384261ab5670016

        • /data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

          Filesize

          12KB

          MD5

          98b33f7b5aac9afd805c5a3714f8ba2c

          SHA1

          b3fb9cab0db362810cd88d6eeb7d9c60f4fcd816

          SHA256

          e036daaddfad2b4565de55f6b3fb4c573a3337e6819e4b539097204ac7b9a25f

          SHA512

          b740348e539dd9f488946a8e6f250f51d9933e882f5cab0e9f8f52d2dced64e42b8ebba463e5d3ba691f85e8b94a16c09008475e2844389945ee030fee2dd91c

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

          Filesize

          65KB

          MD5

          522947eaa37b029a247e3973f3be3621

          SHA1

          31c88e0d7c9b51904c0f598e80245bba41b1c7d9

          SHA256

          d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

          SHA512

          f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmainso-5.1.81.so.tmp

          Filesize

          576KB

          MD5

          cf7988110ae39ed28e1466a5a2238330

          SHA1

          3ea6838d5f2fb0e8925889483b2cd5313af6eb83

          SHA256

          defbecf65a7b91b076f4e8c0b6c33727c3f9fe281530157b81b25dda21aae7e6

          SHA512

          4f4ee887f4657ac504d54b215fa36eb6890641c54c21e7d54f1d19ea0a3698c2f7f6612bd25c73f700243cd02d0023db096ad0018c75d4d2ce5759431798e2c0

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybody_312768000000.zip

          Filesize

          10KB

          MD5

          f59597732a9069b73e16c027faf78d05

          SHA1

          e3558f4e5041a6c6d4372001bed847f2ef77958c

          SHA256

          9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6

          SHA512

          7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

        • /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp

          Filesize

          221KB

          MD5

          98cb77da3547ec582eaf79c499323c6e

          SHA1

          3129103b4c0000b81932401793cff6eebbf2e812

          SHA256

          5a1a7dcc90d7900c88862abb0134e01f275d869c2b796f56dca90611aaa87910

          SHA512

          77d3d3f7ebf01c3ddf9525960627db821839692db8ab07a840ef97a29c9010a51cd5b41afe1996c03ce68d537d25710e85cac8b0e87c5733693f50c3178301d2

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db

          Filesize

          20KB

          MD5

          75694e403dbc728c85b85d55d972d357

          SHA1

          346ce6fb424f486cc32f7f46649649470cd57225

          SHA256

          ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9

          SHA512

          591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db

          Filesize

          28KB

          MD5

          acb731006efddb788690818409ac91eb

          SHA1

          c3b2e7df5b3516032745ec141f83e6ff7150086c

          SHA256

          5ab4d02506d291b5544db6895acead9fcb4c4ae300d9c73880df7517ea305f8a

          SHA512

          918e078c4d04395cdecf6a78916dc51b995dbfa29751d8fabdf52b2f917fb736cb9b080ab6b5884b573a517454528c4f1001a0b6c7d3fdeb27214a6aa74ee450

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

          Filesize

          512B

          MD5

          6b80ba9a66b4fdbc7ae9252b900a7169

          SHA1

          c0bc7ae535f4f643fe8682cdf7b00243a6a3b968

          SHA256

          f8702af1fe65df7d41f6d37faf3ac64c392e6175422a31f75181f5f7a27109ba

          SHA512

          c1582c976c65c85b038e84ba4601de1d4de554bfd653373a3d96b80dac79c84ed214528cd3fe092b5320e3371dc52736368390c44bb315585a4481bbbd7609fc

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

          Filesize

          8KB

          MD5

          d7e416c20fbb96350c74ee80882052e3

          SHA1

          86cb7f99fa5948a9bddbcda044f49d9842c72b14

          SHA256

          359a1f3bfec1f23ceeb7308a98860bc5f3335fafcc7580da830fb9408b535f4c

          SHA512

          9674b239859b925291b30a6d71046c0c17b845f7fd9df177b2a938313f250b82f967f781250635254a2bde41edf76949ad9ef39b7e96b89b8ad09e9fe3aa93c1

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

          Filesize

          8KB

          MD5

          057bc9e0ff10c2ec32f03fc40a8b163d

          SHA1

          5e22086075525d50442187b184b22b1fb6835202

          SHA256

          11d9877da752e05087fe10e28e52f8b49fb63e16bc919402f7f218fd1ead4c2e

          SHA512

          5f5d2129f75796cff2a5bcd703849cf9e90bbab0d1a8f27eb5e5178e8da931945ead646bf06bb54448e0c9ab61661a353111be7b77b9605e7c4b7a20a8dfe1fa

        • /data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

          Filesize

          16KB

          MD5

          5cc90f1b8c81a38deee7d4f0104bc359

          SHA1

          6c7353fdd524c1c7e00be25f366f735d21bebed9

          SHA256

          f090ebf61983436a73c5d28e6443bba0ebc51b40a750fb59e1747b36ed17e649

          SHA512

          a1f91b6e237f18575f7dff57bf6ea45ae13e402d6f6343c040d1194032284d9c9b649efaddb117bb5b382de222da07463d5e40ecf19948ca565ea1498f2ce8e9

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BBeginSession.cls_temp

          Filesize

          79B

          MD5

          92cf538ef02250a3399f9a132f307b4f

          SHA1

          96f0c0c9a0da5d29a419a0d6002d2d15d60c4b32

          SHA256

          005a70d3809bcc965a02adf38cb76f28cea96977b68cca8392364f152d5d94f7

          SHA512

          1c2bd757dc44fd427038a4efbbff9b704d3238cab877830216fffe4acbf7e73666c3da20ed56dcca49abf321094a8eb8ee282e1637264d2b9c429b8499541389

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionApp.cls_temp

          Filesize

          120B

          MD5

          c1e1b5910624f0fdf2fe432a84694c52

          SHA1

          db696583352361a4ed95b9b0cb0a48fe934b7b5f

          SHA256

          ac089602923865fdebd1fb6127ab587b3d51f612d6cf16ba3fae94eb2c7854ae

          SHA512

          7185e5d3ee2dc6b2252ed86da00f3db2d4a7f2b93ecdf85a308427cf5637d1f1c5afd0119ac14fe9475daecca4e009fa886ad12c01b6b018dab702964e0d3af2

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionDevice.cls_temp

          Filesize

          88B

          MD5

          6fd4ff42e2d7f4af0875092eda3485a9

          SHA1

          0f9349c818b367c04556899a3b6c33efe2fcb80a

          SHA256

          7e0cc6429cf31791e797169a0b3b91e249346071232221fe285b519fd4ff3e69

          SHA512

          7090acfed9d80f932771ad330a8c8e8f380dea5ebbedcf37766ce6cf400e6bcfc08628ae77daa095f8a02ba1142bd393e3c8a5b51cd7e4df338984ab9607ba32

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionOS.cls_temp

          Filesize

          15B

          MD5

          b3d9541cc92a9153d14e5160f8d8c008

          SHA1

          2e1ac80eb381dd82a03795b682f92020348c0113

          SHA256

          1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

          SHA512

          78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          2KB

          MD5

          c4137d8261603061715661f5a6e63892

          SHA1

          35a23f9230e97e4a071d596848d96551fcb06bb9

          SHA256

          5a2089fd7d141d98643323822a955ab8a65016fdde73fd22502e756a2b0f261a

          SHA512

          849d3f939be5c9e98c6e896b2fb5d8434ad069c40bf6bed41b74adad1e515c62cb4fba531ff34771546ca6c586816116ac7ffe94682b3758cd5e4a074b237e4b

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          469B

          MD5

          ff62963e98675915f544af7624517873

          SHA1

          e603ba4e70abcaf7521995c2c2b22754dbfc4983

          SHA256

          6dd75d4f0a8c9160343b87e375d67369f561dfb1771121966b79540f7da6406a

          SHA512

          aa0c4a41bb39bfd7c21d9f87af04eef673fc7896b35a6a2d35d2eefd9793af176b1bb3031031d544846f0eed086d842d8f18ce2a1c724a1dabaf75e07750e008

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cda52192-ab05-4b96-b3ba-e103d5ab77da_1715584340421.tap

          Filesize

          368B

          MD5

          c6639ad70bfd8bcfc5ec834c7083dfab

          SHA1

          da3b4def3c1a62f74bccd381305312ca15993ced

          SHA256

          bc8bfcfff46f48f4ef5081a3a66683b50889105943aa8dba0f2a54949b932266

          SHA512

          50fe4ea260eeb421b093f28dc59d0985461020e3f7c3170b9574c542532fcee8a40bcf30594e68cf4147beb55ccbb7d82f5a38b0475555ff1ea9179d542597ec

        • /data/user/0/com.duoshoumm.ttshengqian/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          1fac69c1c481049cbdd4bb137842a24c

          SHA1

          afd907b4145d1e0af8ec6a312290f533957cf64f

          SHA256

          b64d78dd8fc9a3e10e69744b0bea0ee095350978912583988adf3921d595ebed

          SHA512

          58e2467bb0300d0983cd128aaf4f89c40e23bb808f95c1d290e95ad276061b982c4d0cff5b1396fc641363330516354a1105a36acf5e4701c47513dfba6795f3

        • /data/user/0/com.duoshoumm.ttshengqian/files/0a231bd8575dcf72.txt

          Filesize

          40B

          MD5

          52e0581c24ad729cd04904c771f76201

          SHA1

          bf717066ae77e0d33ba8dd4b1a1043d9c7ed2cfd

          SHA256

          a395a8d655ac344f0111e684081b302da44fcae31623b833f79b8d0179eea91b

          SHA512

          3e06cecbfb458ca55fcf4ce512a916b5fc063b6d5abc534e4e5dbb2c6be81e4f18e0f67e92422b6a0c75876824078854f368463b0262be00115b39ab7c995ffb

        • /data/user/0/com.duoshoumm.ttshengqian/files/21c22f492aba3de8.lock

          Filesize

          16B

          MD5

          ae4e9784cc8de166d849b3614a0cf8fe

          SHA1

          5472c3584476be174a89b26f283827eb04a9fae4

          SHA256

          1d1c7c6a542d617c9583ec8c676bb6ef2ba00cc7475d815d864d2b88c308be40

          SHA512

          39745380861fa9c6a01bfa5bb42b64f4ee2b1ef1b0b013073a7ad30e04803dce7dbc8dcc678a9690fa227ee834322de7745e797d1d965063d9270c94d604d777

        • /data/user/0/com.duoshoumm.ttshengqian/files/INSTALLATION

          Filesize

          36B

          MD5

          9f231297b9d47b4b2f57413a6c0730e4

          SHA1

          1ab0e331a4935b9023b4a8fdbbee805c58ccaefe

          SHA256

          68a46b8a5ae615f0937138242dba6fa8edb71618fcd95073a682c7fb996d863e

          SHA512

          d906b907e3f47a535153e27fca18cc812b96d657c4bd8b6066fbbc207b3a639dc3bbce2b4a6d0d5ae25be4b86130c78687e9a289dc4202b9781662d5fcb1f863

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          52B

          MD5

          634ffdc4637a8fc15b52181613be9b9d

          SHA1

          e2f6ceefe4d655fe6ac2088c4a45fb7f6dc2a979

          SHA256

          0f4f822f4ddc6faa46f3309cf1a1bf3c197bdebf430200d7ee7e6a67666f64d5

          SHA512

          235cc744352a8c06abc05e24cfb0eb0d1db56265b684be6d1184f09b5e8569052a29ba908df31656a2a610fec92a019f0362f8d67a233f8862b87885cc6537dc

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          98B

          MD5

          3cecf8160b52e66bd4ca060ec0ba6267

          SHA1

          c7239f47d0402731d87845968db49066a62432fc

          SHA256

          0b4d7184f73e5c688ccd14419bd9da2a73b27cbad922d32d18930e98ed6d173d

          SHA512

          7799eec8ecbafe5bb489b3b65408d347048701e09dc6bd314f55f72753cb5cc13967349d07e88a26f003575820003ba46178170347d32e56e0a44daabe9b6490

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          171B

          MD5

          ce016adcaf98125ba9bc940cb05367ce

          SHA1

          90b1a5c18dc952226293c75e046525ef36c6300c

          SHA256

          00fdf3f2f08c79a77e7d9b4cfe676e4cdc8b5ee7e99b6a6aecc8cbc6119c7d0a

          SHA512

          6480ccec6365e7473ab499ca7921505bcef34a5522a0a53cf4fc1c91967a914946eb7c246762005738f48764dcce6f1591354ebb263fa01f024ac04b39b09dc6

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          243B

          MD5

          cbb974e12f7f304d59da86bdf8e30258

          SHA1

          685d149ae4e3a3c413260e621b9bc96383322fe8

          SHA256

          ff88c03537b686212ca20a306bff8447c7f6db147205e84fbeaa8c84e21ddc6e

          SHA512

          3f9e649bc4734ced231050aff3cab4e657f7d93f09ea75ba5ea2d881f8e74796d8c31edc261cad45a693425cc83e45d82d7d784704d36e67c4bbf6a75cc2b3bb

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          323B

          MD5

          d64b3446f9426a336d5d7a78ee0ed755

          SHA1

          120e7383540355b8833a51f03341ccc696fe3533

          SHA256

          5dcf8c7a08b20596f75c917da543d904dcd486cf02384b0c1852a1d38c0a3012

          SHA512

          458cae38a4ab17d49809df463e2e864e6ce205be0bf2fc18782f97883b7e57880882faae71919ad96608860b8bcea304087d7e9e40cfd68e24ee0acde14ad3cb

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          439B

          MD5

          8699cdb8b117eff7ed00f4cfdfc8a103

          SHA1

          19b15f2e973d44e58e81c23ade04f4402decb027

          SHA256

          152bf976f7e8c58cf8ac63c248e886babf1d77c8de77a4dd8a91d005dd949759

          SHA512

          df46b30a9281fb5b617bc91dcabecabc2b03fe4c79f42c59539a653233a5fedabdc69e2cdb995c476c2c84e8b0fd5ffe4ada5b2fc2d01bbacd8c45de5151ea36

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          486B

          MD5

          b2392d961cf4284c5c98834b158a615d

          SHA1

          90a1f7599c24afa9012ef642e9c2a9438fada2f3

          SHA256

          6cef2c93707d03c9e7caa6d7e4eba9c313d871abd8e22060bebdbda6c257dc40

          SHA512

          6e728776a94d89a5399b86167cebd4be471fffa6c19168fe73033e79d4eb04a3acb76d397b15bed27c70005b3fb252661984e80da42f73b1717c0a04259ec1c0

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          517B

          MD5

          e348f6e120ade5186cb7f54519232486

          SHA1

          7c06d3ef0eb4022027fb049613a6848648104694

          SHA256

          8526a2d978764aa13835036e316eda884ed54f9c8e566df59a34fc4cdbae3bc0

          SHA512

          81df17357af4f05bf29d09f3c3de009957f56cccf71b1551e188499ab63c04e0382394f442af039dfca6eee194f98ec1c831e013633d6c58c1ebc92cb5088574

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          580B

          MD5

          664a5305065ebe866e00ab8a7dc9e85e

          SHA1

          1eff5b1096bc2bcf6bbfde4b03a9d930534253c3

          SHA256

          fc9fcea7f62f2030bbe417551ae09b1910d57934483270aef7d31983b483b4d6

          SHA512

          59d74b8ca696b08c9c2d239e61bf91edc8c83dada0329e6a96577b4cc3df43b7d3c24e360e4bb11f920092a31836ac1c15a82a1ed0a4f168552872fe1c8a435a

        • /data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

          Filesize

          821B

          MD5

          d1441d9972096254a095ff3be3be704d

          SHA1

          405b9674b26c3f4ddaff4384ec81d2dafdb02bca

          SHA256

          962334065224c74aa088338c4d9969d525b1279a2c98bf0836e3bc66f751a8b4

          SHA512

          2671faf777219cb17b1d5365dabc0c177e675e9a3f0a02d5f6b8c7ea61c2510b93a2971cd15230e51d8ab3af82eb328161c3e2f9ba22f0e68fb5a82336ff9cf0

        • /data/user/0/com.duoshoumm.ttshengqian/files/exid.dat

          Filesize

          54B

          MD5

          b52c191d5436efc4c6faf56fe926e2ed

          SHA1

          b0c174fbe13cc96bbd5a3ebfd19992a52c844394

          SHA256

          41e9b8a9698489fbe707380b7df5d2d368dba0ca4972fc3fe944902abcfc0e81

          SHA512

          1c0af7e6f89f6923a2136cb1c3192ed3bab54f914f6f6b3c79b0c4f9d72f4537bcbd2eadd5740e45b28f4ae45ced929a1fd195bde2621843ad854731ff3edc61

        • /data/user/0/com.duoshoumm.ttshengqian/files/umeng_it.cache

          Filesize

          433B

          MD5

          6ed8db86ab1c8931d88d6e0897d84b43

          SHA1

          9cdbb63adaa5b626646dc6eff0ecc3336d9916ed

          SHA256

          cc7aa22d94bf8413cb4537bdc36f92d0d290cf4dc533f2099329e999aa218365

          SHA512

          9b30d8f41a5abde84424791fe2289dc86364dec1c342c238ccc1568469ed4c55016edff1c465f1aba9e961faec7e85f528abb2bd3b7947c8f58fe438ac13fb37

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          beb0fe67fe4ed99f4f3d70a1012d4862

          SHA1

          daba4919f7c95886ebc4db2afa03bbb2769b92fc

          SHA256

          46a7a2d6ef71a1235ca4ad53933220ae78cd7a419a5d688cf5ec47a45592b7ce

          SHA512

          7b1ed04817ecee2c1b9aa8c171c90be24a41384db8f41f744cf01aad072fa212c7d6fc20e6399a63364b2a36114ce28efdf819ddc1e9adaab6b584a8cf9f75c9

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          213B

          MD5

          008c42abb475912befb7e4ab81593c99

          SHA1

          cc8bab183cfc4aef71c907bd561446378e074220

          SHA256

          ae0bcafec1acc07db0a912f7106fad4d25f21fa1a28e0db9d1d443ea7311ee08

          SHA512

          4ce197a2c5bcd598e53ed3d6b0903bde1d917817bf80634ee5cc81ee7080ea25688860df88f782379106c32258d36d7ddf09f03e8e058b6683947b5758fd6bb0

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          f75b7d3ba0b418af93311d2260dde2bb

          SHA1

          4e7d8e1ce2903084c0c3aa4f5a54801b120fac46

          SHA256

          373745b24f44d43e854f6894b4dd20c1ded3ed627d3700783b4ddd37eec14b11

          SHA512

          7a8a08a62255a9b52861ab8b06fca7cdedffc13a2aed9c8941f44c9d99b7004c7e67475423e684badaa901deaf23cb65c9ba8559949dbf81c72d6a6e7c4e8b80

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          fc721f842cd78fb89f23c854e4c18d2a

          SHA1

          41d565f04aaf78d8003cfd6cdbd4dd370f409c1f

          SHA256

          f5cd11947a2602ce24e2f417a5e05017125d6ecaf4a83619b19b00985207472a

          SHA512

          f6a4857ea7edb7612afa62d7e773d1824676aac83c51f847309d44f9e6d58a902698248f820562da3121c41d386253dccc7f9c60533646f441f9677285d27d52

        • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

          Filesize

          512B

          MD5

          b7f913a975de306efa05e97dbad34f9f

          SHA1

          9dd9c4c25bd228e001f61227e1661650a5c8dcd2

          SHA256

          ebed5996f61c9cc8b2a2ecb65776b11f3c3e8cb516bbef22452480823f475917

          SHA512

          1db5f4be9ec27faa380082a6036a7094ca7a98aaa98ce0c5eac13ca4bdc7b7d82fc581ae23cf442c0aa2df942ec215f99bd8788bf35c56e1c5d02aa57abd2f83