4c8f2bd3a3d108d158e0ec8862b21404fc616d3d8ad0e5f8bf560089254a67c1

Analysis

max time kernel
129s
max time network
181s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
15-05-2024 21:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4828525495a571ba65feb6b0d941f42a_JaffaCakes118.apk
Size

13.4MB
MD5

4828525495a571ba65feb6b0d941f42a
SHA1

5ffe68c387293380c776ded8003d7edb0457ee6b
SHA256

4c8f2bd3a3d108d158e0ec8862b21404fc616d3d8ad0e5f8bf560089254a67c1
SHA512

ef53ed394f91fda4e13b00b6ff52346be6f861fe1764784a6b03a9216936f522431c4b111294eecb998d99279fdc64a9d060ed564f467a9d2a26a9a6868922e9
SSDEEP

393216:GX6TlNm+RP+4KPN9aJIn8DeRBeVLYX9wE2G5WtL:u6Tlt+fmg79wo5i

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

Processes:

cn.win888.banying.dpl

ioc	Process
/system/app/Superuser.apk	cn.win888.banying.dpl

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cn.win888.banying.dpl
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	cn.win888.banying.dpl

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

Processes:

cn.win888.banying.dpl

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.win888.banying.dpl

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

Processes:

cn.win888.banying.dpl

description	ioc	Process
File opened for read	/proc/meminfo	cn.win888.banying.dpl

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.win888.banying.dpl

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.win888.banying.dpl

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	cn.win888.banying.dpl

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cn.win888.banying.dpl

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.win888.banying.dpl

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

cn.win888.banying.dpl

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.win888.banying.dpl

cn.win888.banying.dpl
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4326
- /system/bin/sh -c getprop
  2⤵
  PID:4411
- getprop
  2⤵
  PID:4411

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.win888.banying.dpl/app_crashrecord/1004

Filesize
230B

MD5
3ae459611b1922b8ac8a2d52c2c059c6

SHA1
5398161c1a2e28cac19a9489250031e74e63bffa

SHA256
0b39a13c978b40d59b006ce9d5ff96b87f1c966b3fca1e93e9ea41848976fafb

SHA512
0d743d3bde4935081cbe2eaae42ab64f53ea04c81a8f31561cb802e37a09c73b2ee87a81171d0117baeb26da3860bce8fef789a1b0edea655d0b57c9030807da

Download Submit
/data/data/cn.win888.banying.dpl/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/cn.win888.banying.dpl/databases/.ua/ua.db

Filesize
32KB

MD5
987a8e79463f34fc757de76b42465e9f

SHA1
0e6d0e80b60ad9205dbfc7619ddedaaa8da38a04

SHA256
187d7b921c37d5db1f90e7f6e8576c6fc747168c8772572404b74b7028d1d4d0

SHA512
af0a18dc0f34fd8fa83f16fb64e1e3e5885625de31ab86365b8fb2fadeb61cfa01b2c2e677274abb805dda1e0abb5e15ea4b8d3fa3a1bc0d68cbace81e6e30c5

Download Submit
/data/data/cn.win888.banying.dpl/databases/.ua/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/cn.win888.banying.dpl/databases/.ua/ua.db-journal

Filesize
512B

MD5
b3013b11a8039bb0c96fb0351206efa2

SHA1
6b82b8e09c785f5cdbadf251edcfb774c8a51fdb

SHA256
9347121303f0c45d8975ce094ca5b507be480391e248b39de6843dc393899765

SHA512
c3cfd09f9cbd1eb4e56f4310e71ec6ce576236c7ee1a324d733dca7b8549e3d2d6bce098266e8d7849fd29d349c24f2407fe082b68fdb7826d36d75945342dea

Download Submit
/data/data/cn.win888.banying.dpl/databases/.ua/ua.db-wal

Filesize
56KB

MD5
71c5db00b58f9d49d7c0f631796fd747

SHA1
eebb5ccbf82e06ec737fdf47857e8622e57898ec

SHA256
326ce848d5d9ac42e3570440f04567a5b93ff933902ed0bff0b72474f9796224

SHA512
b1a5fba7b9c7a42e8249cd2a6ef5687364cab844abaef4fd910390cc0abd4bf31ece4330dee810b55b94351478b785b6e32471aa1f6ab533ac1018624f4ed337

Download Submit
/data/data/cn.win888.banying.dpl/databases/.ua/ua.db-wal

Filesize
8KB

MD5
0a023b0b12b0446e2361b2f83e98b1f4

SHA1
b04c530cf130049ca7e677a583b36ced6cfe72cc

SHA256
ca1c342f1043d35d4311410be4ac354970f1c74f8039b8ace1bac82ad8563995

SHA512
955d92c6bf8db8ab74ed51c6863cdc4073e6f86804add05b94338ff70e9b064ae1191a0cc609ba63fc167e419db86e05944cd85bf313f9b43d6619b5deefbb38

Download Submit
/data/data/cn.win888.banying.dpl/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cn.win888.banying.dpl/databases/bugly_db_-journal

Filesize
512B

MD5
15dd7f03af693a2df30c60f8bb5db14f

SHA1
92467f9cd38ebb9a10af4d1bda8b800da201bf08

SHA256
daf175b46776f83d46b8f7e4535b1a3a2cc8cf496da868c163903694eb2600b6

SHA512
a0bea9378b97dce83293fadbb5586f7b555d0f7a0220810969ffe038eca7ebebe8ab178bac86df2231b8ea53ec5771df411b7ad1a3c3cd533049542a2bd25529

Download Submit
/data/data/cn.win888.banying.dpl/databases/bugly_db_-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/cn.win888.banying.dpl/databases/bugly_db_-wal

Filesize
72KB

MD5
255028038aa4ef88c1fff5a3307ee813

SHA1
9a81c18084d6d11a4c30f5561c85c6a75d3bf79f

SHA256
bff14b3ea8e913aa1088164cda877b20dbe042a7178f7bba48bbabb64148fb5a

SHA512
8fa2cb6a151361a0d29a930319e17752929d4d5597b71cf5d7a6c59f75bba2eacb1fb58ffaab0c3ce7e41e136021f6f084ee8a08372c3ace4774a9de38cb613d

Download Submit
/data/data/cn.win888.banying.dpl/databases/cc/cc.db

Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/cn.win888.banying.dpl/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/cn.win888.banying.dpl/databases/cc/cc.db-journal

Filesize
512B

MD5
e5aa51a3c3514e47cb621908d76aab0e

SHA1
3408221a436dc74ac76a776a7aa09be86829fa4a

SHA256
82887bedec1ef3e403752b86c609bccba41956350423505f49ca776cb137310f

SHA512
084a295c1bea1300a07145ae40ac264811761d4738261f64aa3dfc4eb9ca94fb2e366022d788290a27fad39a42a52a9615980f9a14b54d95e78c75d396ee481d

Download Submit
/data/data/cn.win888.banying.dpl/databases/cc/cc.db-wal

Filesize
48KB

MD5
5703733f52298192e503fb10d7f6874e

SHA1
2b77e76397138c91d3d5927fb7059b1d6a84a4dc

SHA256
9ba5d94d731f50b6a711d268c786b90cd787d16e8299da651495ae5e955f5d71

SHA512
c3c9dc083e9eb7fa1579422752f065916a7a947415f94b27a7b85d5cabb6c05f0adb89c4b4e768cfd8364f1946a2401df12e13a8b5fd996874e3c7bbd9cc1ca8

Download Submit
/data/data/cn.win888.banying.dpl/databases/cc/cc.db-wal

Filesize
16KB

MD5
8f69995baa7b2bf668f4d4f698529a59

SHA1
144e54ecf2e294363415f8208b42047a3a3140cc

SHA256
a9ac02997160ce263181760db0f168de5a66e3e898f87a6cc2315f297cda9909

SHA512
8c29abdad881dbc41cbb199b79e59e52ecfa8099e5fd2f9845469189886457e43e080c94dfa8ecc74d01fddc42db282bd13029309abae0a8ae4872b691322040

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl

Filesize
24KB

MD5
0d383ca5327ad162f0cf8bff928f72e7

SHA1
c2e548b12bc84a1b19676030e11a83a51901dd53

SHA256
23065cf79440794ee403c10f1dae1d48155865baf9ee5236e6d8b5d4f3ca6b1d

SHA512
fa296c35a86ce362cbf208e5094e412dceb9d7613fb9b59fcf2c352e59f672db67cd4dd91d50f802009e419ede37e6b044d4980f9a25f9ae28e779ff7dc277ea

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl

Filesize
24KB

MD5
792bbffa1bb2383e310792051fae29fc

SHA1
5cc3143717febb8f6eb9dd636625c75cdbf4ecac

SHA256
b2f8813d536723260837a31b7244fc96dbecd7a8146fd69c99cf535a5754b458

SHA512
930e4cd5703c50b21029f358c8563227a0fc4361276b52fa121183bd5f335af70b361c3e97a9b681613565f0b437ef8be4ba68e6ede2b72bcb22d0724b9f894b

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl

Filesize
24KB

MD5
b9be2a79e1846bbf4aaeb90fbfda6f29

SHA1
0c21c79103381ea303b91ff8b021d2df0db393ee

SHA256
9fc5302d373ab58c9cac883633fb8554c656566f8445c7856cee116d19eb0b8e

SHA512
523035dfbf9a67eb5cb23f8b2a26849e37e83437dcfc82bb46e5e47050cc25c568ef547b5f9a7d124179baef8f994a0bf66bf6d3cdcc2e33bb823b5bfee05538

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl

Filesize
24KB

MD5
84e4ceb3d5bc5c7827ecaaa77d3c60c0

SHA1
521046b6d3289f5865955782ff128d013757e6c2

SHA256
ce60ea31234d1ae11620f7bbcdd3931f90ad1113b38798be6907fa6fb031f227

SHA512
25ba22d015787755b4e4816e9d97bd79fda46810104322905fc400bf37a2ba528c17f4932986d97145d957a9ac46264c4dc4d41f6b04fa0c1507899eee78c317

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl-journal

Filesize
512B

MD5
c83b106b45af50a2cdde1f318512aa4d

SHA1
84e4e2127e1dd6a4f2493d7d7c6f0f016f37b238

SHA256
e3e27af268d910eec07659c139a495204ed87b1ea529f9b5c212094f5898ce0c

SHA512
5517314a341c52ef737a83e4feca8be780810548acaf19593b6ce174265ec90962de477320947b218cd2b4fbf86ae2036c5688fc850b4d89b2ae6d243b07b345

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl-wal

Filesize
48KB

MD5
d7fb60dbc63e8dfe9967b23b9da7c156

SHA1
3f5e7911a9718c9c2f5409e9b1f0adf4425e2959

SHA256
0236e53b7f99124b478323f67410ad58d71ea4e6c162a1675e3997dc4fa6ffc4

SHA512
3712dfac1cdd98b0c8d66f826fd3709e5ea94604b271a3d5d7eafe74549c87b4787f765cb27c42497b67d38a855dc58cba3f0d8dcfd13c597a1785557c109c70

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl-wal

Filesize
12KB

MD5
d014b8b676af8b44b770e6676d91192c

SHA1
5f0d9b281fa35f559e072735262619eb8bc6fd9b

SHA256
33445b87f40aadf2eb82a69225ce6df1444649748dc3cc9b8a5f87da905e6608

SHA512
18312e76334e0d64a758ee7f226d18030f9b7bf63d31bc9dfd95cb1db8f68f23b09d18ab942f923420c713fbc4c467f700f0343ad0c9d226ec0abd68dca123b3

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl-wal

Filesize
12KB

MD5
6d15301a0f2414149ab95f81f5adcca8

SHA1
40e60e1c3740602b14baafcf13509587b5b57058

SHA256
70dea56f8d1d81161af6fcb114b5f838854c3871274a89f9c828902411451b96

SHA512
8b377296c2a2c333d189e9bf3ebbc6dce271e348a95f62f4b4a5ea4ed95c6ab89d2df28a6ba40760cf3921314319c9f2663359664809096ca4522eeff8a422cf

Download Submit
/data/data/cn.win888.banying.dpl/databases/cn.win888.banying.dpl-wal

Filesize
12KB

MD5
d14d903f83276b67c299a23966ec288d

SHA1
bdf998bdfe3762283e662d212ef346bacd88fc4b

SHA256
7eba59a19a8719104df5571a4971a3db21fec74fa485d7a6ea908d91acccf4c1

SHA512
99eadcd5eaf2ee1f360987e4a1f49a637714a5301d311f0d85c1f2a270a14265cddb18fa43aba8b0231a03e80997f31293faa539ce9ad387e788ff9bd0f175d1

Download Submit
/data/data/cn.win888.banying.dpl/files/.um/um_cache_1715809331220.env

Filesize
1KB

MD5
8cea0df75fff84889bd1e4e4d1ba8cea

SHA1
94b66cc6d8f9f471d5e6ae9bed7b4ffc65ce0227

SHA256
8d11b0e62a65a5b894b8fcc281ba79014e63936efdcf7a12f91bc5c91f1160a0

SHA512
ae536f9efc2c28e2364ccb26b6e35bbdfcde16efdf7ac0e74c9e2c4e4c77adba2dc6f6afbacfc463241c109ce47997380218b42946495af2bdee4d30e96555db

Download Submit
/data/data/cn.win888.banying.dpl/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
e84fb1190f4cd89a15ea2e62930eb378

SHA1
7a251ba6733858a88c79549764f689119ee92d67

SHA256
23b0909fdfacc18fee282a092aea6bfb0bf9fa5c13eb5ca66c3b55dd88412f4a

SHA512
e0216e79091d7f8519725f2126ae8c526a9b2987085e2f1abef2f30fb239a3cd740d0824dd86eb4653ddde955aec25835b6f0d212fe71a606b7be50914462c2b

Download Submit
/data/data/cn.win888.banying.dpl/files/exid.dat

Filesize
54B

MD5
f4f290a8dbcd01e61ac3f357f46db9c4

SHA1
9d8e7487cf58474778b3bc0c05cf76e975256d68

SHA256
a48dcf8e576ed21eea2b8ed54f7b7b304d0e85641f92f3fbfdc228beb538f9a8

SHA512
d0679df9dd3eb0230bc7a3c38eb11fee7e09b41a70db14332a83f2f83e7e418c01217e37bd284b99f8ac55c8d429cbe31fb7115679b885b3039d316b3ca7f8a4

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database1SaaS/1715809209366_4326

Filesize
2KB

MD5
730e84a29b89f8d973e517494b804ce9

SHA1
c04d25c1aebf566a6890d8bf987cf229fe230739

SHA256
bc30e3c34489c684ce6a275d076925a86ff7a620ce913ddf8e57bb3d4a1ce237

SHA512
2636bd94f97c7dbca90c617bdd461051a8fca984b6e49efc3d403a08d13fd549aa5edffa8d2e6764b37e734cdc5c7c18bf073ab4815539c15089f24e1434b238

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database1SaaS/1715809210215_4326

Filesize
2KB

MD5
2808a6d53a7d53fc86ec993fefeefca8

SHA1
92511491059dab5257b12fb9f1ca0bd4e4e9f88a

SHA256
e89b0fd4e3b28be52f8b3f9d37f44335e5b34d4d0035b9161465254c1357c23a

SHA512
0934ad69d707dd032848439504f79f683f94d2a29756f5bbb90e946758d1d417b854dba5da4ec5bf20d30eb46b594641e5dfba2ac0e090562ff2c8fb70f65f58

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database1SaaS/1715809210707_4326

Filesize
2KB

MD5
b7e6c1c3c83a8aa5c18a0e72a73bac54

SHA1
b592803e4c3deb32a8ec6723b83c47867ff4649e

SHA256
7e75fe501905c5bfd083c18957fcc3232c9992eaa0e30c47f3e7e4829a275a28

SHA512
e33d1c501e0efe18b78e58440aeae44725ec6445498286e0ba26e36b0225ac37d9ba996e79f864e1ac108dbbf6a5033d67347f2c427a602868e6866da4212e30

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database1SaaS/1715809210842_4326

Filesize
2KB

MD5
32b70c2b80eb70385563907f384ee207

SHA1
e29a463b32cfbd59f78bbd53fc3311f7ab7e7a1e

SHA256
f7f47eb7d50002444a4a3366242ccd41d9b75b519271da0537c80ec5df3de745

SHA512
adf80cc390e3be097fe939cda5ec07499cd17b57b3fea296c91d19b4ff2244dd9b732bacd58f39c3465c45f33dfc9d8b704ac8d77d3cec8d61bf8b68de78c121

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database2SaaS/1715809207952_4326

Filesize
2KB

MD5
b07a0b2ee6c6ba9e80a957960457b88c

SHA1
c4efb47abd3269cc8687b461690170642e053b69

SHA256
4a67f46dc11bea2086e8431c1af87ea4ae9b86d8684797a050a553d9fad155f4

SHA512
c9f4fbca46e16fdcdb8b6be4337dc83a56cc73fbbcc2bb74bb4d8f7ecf8917c3104e36b19478231a1475da796b9d71d565602921d5c50fc46945e268f14f43c0

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database2SaaS/1715809209098_4326

Filesize
2KB

MD5
5c4d437f8e3bff56c3d7e332ea22542d

SHA1
4b5d667d2025c3fb86f9d272fd29ec7356e1022d

SHA256
ebd766297d2dc0cc38d90fa829725965b7d1451a83bf8090817f9745378c1b5b

SHA512
bfd473a78ef8c122afcf7adfc74408b3f0909a1b562a4815f9497e0914957edb42908ed7904fa21a2abd8038f2a7f51700d64e43f3e9da570f9872dd18fcea7c

Download Submit
/data/data/cn.win888.banying.dpl/files/td_database2SaaS/1715809209857_4326

Filesize
2KB

MD5
e65a8f4bcd0e844038a6be6ca446144f

SHA1
c0b07bbb77a08b658db068e4d9be8e845f634701

SHA256
313dbbf003a48676f31636dae55f3e65616cb4e5a79c7b333db74eae2a8afaef

SHA512
c2d22b5d843202bc9f685443b4183aef80cb2f5a3973eb5ad19d99620dab90729405ebac85952d67cb4bbdf746c6b3a0fa519513468afd1b106fd8e1e93cb991

Download Submit
/data/data/cn.win888.banying.dpl/files/umeng_it.cache

Filesize
498B

MD5
9990a22ffec2f9b8889a48d1382a2a36

SHA1
6042da1a40ddb3f263162937af99c8279efc63f4

SHA256
715d014db503aa4357b63da26e20d06eb686124349b2317564a60743a5c9ac8c

SHA512
cd9de9df0de83e4af99e56bdef4c85d2db08fcf9eef007dc61a3a6783df01d8f571247bcd74d9d8ce36eec8bb542c3df688912bd70a666fda4cbc00898be6393

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
658465c0d8380359deab0ce0ee576a37

SHA1
f9f50e0d25a0a87e5e4a0bc49f1df69ec8992ec0

SHA256
68d3f39fc84cb32836742063fb85a2e47741046733147b762561acec3eebf02d

SHA512
d9a153a97c80cd6decebfc534d9ed822efee5b2d638c97ec587bb7ee403d24b079ae494365432d8ec8003b36677ef66c71b75812218c85ea2950a34d8822f493

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
f7c4e51c22ce58ade213f513d8dff1bc

SHA1
d5826260465b8ad1bd530fc5d85f488e78a4ed49

SHA256
c11d5effb05a9bd0a632710167ce1288c27a82fca2595de6ca1e193c0444c8c7

SHA512
17172376994b7587ac5e12f70c5173cfa26642baa997e876296a052d2605aa645c235f764f7cd5aeeb9ec138b8eb9b5fe38e45ba4682d7729f759895a2ba33b6

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
dd84d59721c778baddbbcce02cfcc629

SHA1
b03bce6eebaca0ba7927c8dc278d0a663c728597

SHA256
44f1689a5acedbf43d09fe4a0a1b68b91697b8ad0a3ebc7c7ad315aabc774eab

SHA512
14fabcefa3c555377ea9e43596b096f6e68f59667026061208a7e46f453e2bba4e5da64cae0bcf52ee8c1b76cf3b548e3b7139cedbb9a99276d18baa59f141e9

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
4737f04b4b49ac618f86340f1cd7cef5

SHA1
64fb24241b0bd7c048693c614a53240fca6774ca

SHA256
de7b92a7ee276150158e48d2c38d539530e438dc22f9e4491d12e7e4c3a461ff

SHA512
1bb5ec3ab1ddb93e0224904721fb2ba0605eedf09336742d21475f5a581695950b8a1d164bf981b4204db588bf83f48dbf080d05e73016e171a80242b58f94a9

Download Submit
/storage/emulated/0/.tcookieid

Filesize
33B

MD5
e75c651921cacb5e509f202a1c4df693

SHA1
b011449ea585a08ab256947ca981bd1efddb9ef5

SHA256
1e4acb00d953ce62d1085ec538f4e8d2f1082ebd63c1006e89a4b859ce1633eb

SHA512
1d8fab03ff6fe97daa74a98734db816c8a7104308347a85736a9e1d12e32644bce9ed87421e0722c3068f556c9a105f0828c58f8789f1634a827db768ea7888b

Download Submit