Analysis Overview
SHA256
30533dd01149aae9d1be0c7e6bff2535a4d4b16d73265057725a00249dad693b
Threat Level: Shows suspicious behavior
The file 540f70d9d68a6a7851a327b51a2e18d0_JaffaCakes118 was found to be: Shows suspicious behavior.
Malicious Activity Summary
Checks CPU information
Registers a broadcast receiver at runtime (usually for listening for system events)
Queries the unique device ID (IMEI, MEID, IMSI)
Requests dangerous framework permissions
Checks if the internet connection is available
Listens for changes in the sensor environment (might be used to detect emulation)
Uses Crypto APIs (Might try to encrypt user data)
MITRE ATT&CK
Mobile Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-05-18 09:28
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-05-18 09:28
Reported
2024-05-18 09:32
Platform
android-x86-arm-20240514-en
Max time kernel
7s
Max time network
131s
Command Line
Signatures
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Checks if the internet connection is available
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Listens for changes in the sensor environment (might be used to detect emulation)
| Description | Indicator | Process | Target |
| Framework API call | android.hardware.SensorManager.registerListener | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.yiwyxb.dk140255
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 172.217.169.14:443 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.179.228:443 | www.google.com | tcp |
| GB | 142.250.178.3:443 | tcp | |
| US | 1.1.1.1:53 | www.wfcaipiao333.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao555.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao666.com | udp |
| US | 1.1.1.1:53 | checkupdate.zeuspushwf.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao888.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao999.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao777.com | udp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| GB | 142.250.200.46:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.178.14:443 | android.apis.google.com | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
Files
/storage/emulated/0/JXCP/aff/com.yiwyxb.dk140255
| MD5 | 4fa7e26102afc285def55883c283d885 |
| SHA1 | ce1709a188ef1213291453f4751e3c5c5d048301 |
| SHA256 | ec600619d127b4524746c2668a7e5bf700042643d25951f1e6feb99bac4a4423 |
| SHA512 | c0191d0e19a0ececfb137fc102a7ce92b1f3b9d65c6e8e21f45cb9e9527b17b6a6e0bf68ef0216b69c3e0795556de29ffd7944d3dacf847b2b5f0e2813a5d3a2 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_state
| MD5 | 93b885adfe0da089cdf634904fd59f71 |
| SHA1 | 5ba93c9db0cff93f52b521d7420e43f6eda2784f |
| SHA256 | 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d |
| SHA512 | b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee |
/data/data/com.yiwyxb.dk140255/lib-main/dso_deps
| MD5 | 284b13d7abea8c7b06f681168ac44d6e |
| SHA1 | 938f6e288fe5fa641cbab5fe960a53b5e3ee0418 |
| SHA256 | 377f5ce3f7cf22f99d0769b6c0be594af18ba114af25e53fb581843eeef08bbb |
| SHA512 | 7bba4e2dad38af7cfea6aa1a134c9cab58ccb8c302ce7bf30bb10a5a5517879d82550b660ee2f1a29abeafc2d82c778690db555281a2594fab9745a1524dcdb6 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_manifest
| MD5 | c06857e9ea338f3f3a24bb78f8fbdf6f |
| SHA1 | c5a0a2529d2deb60fec041b4fbd722a2ebe31702 |
| SHA256 | 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027 |
| SHA512 | 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_state
| MD5 | 55a54008ad1ba589aa210d2629c1df41 |
| SHA1 | bf8b4530d8d246dd74ac53a13471bba17941dff7 |
| SHA256 | 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a |
| SHA512 | 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | 6834026af7d57349218c12f2492394e0 |
| SHA1 | 6f098899ebdb7ea5a947f124a3f00070d7f9878f |
| SHA256 | acc269c9b9d8da94ec31ad4cb6bb05b4b98a98d566b0a015fbac773602407377 |
| SHA512 | 966a52faca95304038a73fde8b9d88eb70858901fc15b87fe50e8e24c40059b0864db5d4a79f3051e8ee13fce43bb2166afd009d4b1f7da81163dd9ed2d17ed1 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db
| MD5 | 5d7ea1a23af19b4340cc8d90f28297d5 |
| SHA1 | 4cfe95b23a9e98378d69c4290af81b51fbe76aea |
| SHA256 | 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da |
| SHA512 | 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-wal
| MD5 | e1c7bd7d5f656d69709c712ecdf9494e |
| SHA1 | e67e89cceaf5a2d61469bdd312fe4e76ec23be1e |
| SHA256 | 3408c1423bf5a212f1c6a5db1d79851c956529b3b7f3c8de1559012faa14b622 |
| SHA512 | 9c1556592d5a1107d3cfbc90c43beb494dda9d87c2498c1b4e8dc85ab83b06cbe1d6c5a5a229f0624356b0599f6340ee7f33df4636bff40917dbfd879d7fa080 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | 376a2b67d278ce11e070d31ffc7ab3b9 |
| SHA1 | 3cf1f51919d37fa5cd7c107e9ac655f8e35d4cc6 |
| SHA256 | fd907ebf91eb3474119fcbff3e351ee79a344de014d9704c955aff44ae5c84d6 |
| SHA512 | ac5b01b7462900b149111d73373e68cc43d9d822ef288e1d9081e67594f12381403fd506ef16766e5823a2f660cfa60b6c3540a1db737f4bd037d16ea1ee102d |
/data/data/com.yiwyxb.dk140255/databases/ua.db
| MD5 | b25b9df4f4fc087dd278abd4af82f36e |
| SHA1 | a8da4d658dbe761f6bf56d19057af871618b377c |
| SHA256 | 244e3b6f1ae95ac98ebebea28784845679bd4dd68fa021b076aa299e56f96409 |
| SHA512 | 1d6e5a3f333f8f2884fba59c32256683537b09ee891448b44617d91edf405e1fe590cc4a04d973e667a542393ddc18c0f63ed634541c7bbd6fd701d8941212ba |
/data/data/com.yiwyxb.dk140255/databases/ua.db-wal
| MD5 | 3cd6ad6c29f14b042fb3ad5ca31b4290 |
| SHA1 | 28ffe098a0b63e9e53c243a5f0060347cf76427b |
| SHA256 | 28c5f85e59bddafa9b82699b19d7380be4af6acd9bc1b940c6c18e97c8978d83 |
| SHA512 | bf653303280edbd7899b9f6b896cab4271fcbb78db2b2fa39b54605f5d9cdab5544bec50aa978a937da9c5fb001e8ef00ca34b53bfd204efae83d855eafb4527 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 2be68e595c0b1e2d7a6523e02bb3311d |
| SHA1 | 968587d9132a45e6f1c678e99cfeefa3096b5b32 |
| SHA256 | ed40c86c4fcc12ea6ba3b14fcdde0c1dca5c901d7ed7902a814e5f9cb4879cf9 |
| SHA512 | 9eb6ca86e478a9e18c532d250cf838dbda0decf31d72968df1b3fb9f341ced708146762e3bcc32d32e3ce96edc0696d79afd6f0021c2beb74e9e706617ec8dc7 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-wal
| MD5 | ad91fdf01ab58c0ed7fe7668bfe95713 |
| SHA1 | d5ccac26583578533ca2a29d5a2266161e278b06 |
| SHA256 | a2b6535c775aa9de86ca98c5fe773df586c9b0ed6619c412718266747308edc5 |
| SHA512 | 016dedcc2a248d7f7e736cacf80605f6dc98df44162c4c1c4fb8b4de37e574ac984287abfe51fb291dc509dc22b3b90a21358664a8dffa38ff185804e366a939 |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | 9781ca003f10f8d0c9c1945b63fdca7f |
| SHA1 | 4156cf5dc8d71dbab734d25e5e1598b37a5456f4 |
| SHA256 | 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793 |
| SHA512 | 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03 |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | 296117b3c187a7ccf4c17b0989ee61bc |
| SHA1 | 973e59328ec56731ae7e822e1610b3dbc8562027 |
| SHA256 | 08ea3409728b1b6a1956b6d64f77d35af7281ecf725d45041b7bdde59456f0a7 |
| SHA512 | 4ca44d2ef1e04bd571bcd64034766e12087ef65c0e3b6b047f56299cd8ff7a40d31af2882d0ac3e6246be40b0462a72d5b1a078df69df890bef5af74bd405cbf |
/storage/emulated/0/.DataStorage/ContextData.xml
| MD5 | 4fe834b443af9ca9bc8dbf186a76c40b |
| SHA1 | 2f12ac09967ed4261e38cd122d492c6114a9cf8b |
| SHA256 | f27c3aedfd9baa02fe049e3cdfe503d699180aba5ca1d719257907d6dc55078e |
| SHA512 | ce798e69f0166bdc860bcbefd275084692d876f72ba769fad3ca42fc142aa5ee6fc629d99f980a52730733341e05321e02d6e44e973b32b9bae85b77ea22a70d |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | e8d341fc357703658ff5257b968ff74a |
| SHA1 | d7bd43a69f65fac6359069eb7580f1e70c076c3b |
| SHA256 | 2401cf1e1843788e460126616d34364fcaf0cc403dce35cc995e57d09b42c237 |
| SHA512 | fca6b997ef1d4d5071244d165f6fce49b66e82269ccacbdfaf44f650e233a7ae09e4851088d2f60d2a296838855acc8cf699ab24d769551057eb9dab13167b4a |
/data/data/com.yiwyxb.dk140255/files/umeng_it.cache
| MD5 | 3c1a5d05fafbdbcdf29796d48aaf0daf |
| SHA1 | 16c5a8d821ff447cf7334f21a33ab9ab8cf8d62a |
| SHA256 | 1e3bc0eb546d7d7921c0aeff9f727cdd705f3e236dd5f288410690dcefe4a523 |
| SHA512 | 215331207e0abb8f418c236e9c0956425b71bc630db817653228a8d656800c341615ca08dc389fa8474308e2181851f32219d68c58bc43f996d633c942992ebd |
/data/data/com.yiwyxb.dk140255/files/.umeng/exchangeIdentity.json
| MD5 | 13eb7f4ff2974fc242a76c7abd4e1934 |
| SHA1 | a98065cb4ae6ca64f1fe3dd72867d7ac53dce3e6 |
| SHA256 | 10c2c9164da3886e32840bd77f1f8a338b53e4d3e5f1edddef65d2582129f90d |
| SHA512 | 50d0ec7c6774d7c01d0dc9ae9b0600e151d9f08253709961732bc7d4a07285e300af735b320f6a97a3dcfa1d5518191d4d357d47658883b090eb32a9f3196341 |
/data/data/com.yiwyxb.dk140255/files/exid.dat
| MD5 | 8eca6f1cafc0b3b293d3d25476339bf8 |
| SHA1 | f0175a2a6c166ca6be7bfaf3a01e0073a28e765a |
| SHA256 | cf0563c7683abbf91edcb5b3f5ed516c6c544d2f4e05534757730a157e802095 |
| SHA512 | 76d0158b3d5861de62dd477f6421f0f60ae102752e43a45cbc26223d3d24a405db768562ed8c8c1fa661ef6634ab36763a961aec534c297dcfb8aa33f691c098 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-wal
| MD5 | 6709b19d5fac64adae688c839d1b57a0 |
| SHA1 | 0ddb5b9539e7de89ecc4382cee17d1deaf733fe4 |
| SHA256 | c73be80880da46b135877f1357851cc7856629c023df00bb6ea393080901a3f4 |
| SHA512 | 00bff8527fcd8b2150cd2a1eab38bf7038fedc996c685805587f29f2c8d7c9736c08c8dc482d146a4031d86a85e57861e9af37dc9ac068ae04758f0b0679bd52 |
/data/data/com.yiwyxb.dk140255/databases/ua.db
| MD5 | d604a3bf1f8d992cc320ea5b1f7609bd |
| SHA1 | 247f88df0b55c7d523ea5398637711a0e4a483a4 |
| SHA256 | 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17 |
| SHA512 | 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-wal
| MD5 | f63c77996c9186d2d53c4e048d78603f |
| SHA1 | 380cba6364464621d20bd97a94a815c070b0102a |
| SHA256 | aa8f4b4ab8a71b8cb68a9c366d08e24daaee93a969b609f1c56aa1fe561400a3 |
| SHA512 | 6fdce1b7d96cee68e3106608bcbdf5b0e944c38d34e81d2af640a3067d99e8b700c423886d435f3936040ad223398fb060240871cc83533307e9383ada421585 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db
| MD5 | ce6135aa1b1fe4f2c2db2a546d2a5558 |
| SHA1 | 79b59582154017aadab783dc266fcb158c252940 |
| SHA256 | 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c |
| SHA512 | 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4 |
Analysis: behavioral2
Detonation Overview
Submitted
2024-05-18 09:28
Reported
2024-05-18 09:31
Platform
android-x64-20240514-en
Max time kernel
128s
Max time network
151s
Command Line
Signatures
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Checks if the internet connection is available
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries the unique device ID (IMEI, MEID, IMSI)
Listens for changes in the sensor environment (might be used to detect emulation)
| Description | Indicator | Process | Target |
| Framework API call | android.hardware.SensorManager.registerListener | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.yiwyxb.dk140255
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.179.232:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 216.58.204.78:443 | android.apis.google.com | tcp |
| GB | 216.58.213.14:443 | tcp | |
| US | 1.1.1.1:53 | www.wfcaipiao555.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao333.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao666.com | udp |
| US | 1.1.1.1:53 | checkupdate.zeuspushwf.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao777.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao888.com | udp |
| US | 1.1.1.1:53 | www.wfcaipiao999.com | udp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.130:80 | alog.umeng.com | tcp |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp | |
| CN | 223.109.148.179:80 | alog.umeng.com | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| GB | 216.58.212.194:443 | tcp | |
| GB | 142.250.180.14:443 | tcp | |
| US | 1.1.1.1:53 | alog.umengcloud.com | udp |
| CN | 223.109.148.177:80 | alog.umengcloud.com | tcp |
| CN | 223.109.148.130:80 | alog.umengcloud.com | tcp |
| CN | 223.109.148.178:80 | alog.umengcloud.com | tcp |
| CN | 223.109.148.141:80 | alog.umengcloud.com | tcp |
| CN | 223.109.148.179:80 | alog.umengcloud.com | tcp |
| CN | 223.109.148.176:80 | alog.umengcloud.com | tcp |
Files
/storage/emulated/0/JXCP/aff/com.yiwyxb.dk140255
| MD5 | 4fa7e26102afc285def55883c283d885 |
| SHA1 | ce1709a188ef1213291453f4751e3c5c5d048301 |
| SHA256 | ec600619d127b4524746c2668a7e5bf700042643d25951f1e6feb99bac4a4423 |
| SHA512 | c0191d0e19a0ececfb137fc102a7ce92b1f3b9d65c6e8e21f45cb9e9527b17b6a6e0bf68ef0216b69c3e0795556de29ffd7944d3dacf847b2b5f0e2813a5d3a2 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_state
| MD5 | 93b885adfe0da089cdf634904fd59f71 |
| SHA1 | 5ba93c9db0cff93f52b521d7420e43f6eda2784f |
| SHA256 | 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d |
| SHA512 | b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee |
/data/data/com.yiwyxb.dk140255/lib-main/dso_deps
| MD5 | 57be45f71d31eda4871d3f022a5af65c |
| SHA1 | 428c05c6d1ebba6a357ccf8aab59c00588441e23 |
| SHA256 | fa1d51d703489cc74e953a24f3212f1fb41ee718a8d981b39bb786a9bc71b08d |
| SHA512 | 16a47952bce66d10dccef92f4fa0aea40005693c75e80656a87a2c91a1be9a70881cce069cd5f654f21ad112ded40ba27d60c126b54f6bbe10470faf85a2a386 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_manifest
| MD5 | c06857e9ea338f3f3a24bb78f8fbdf6f |
| SHA1 | c5a0a2529d2deb60fec041b4fbd722a2ebe31702 |
| SHA256 | 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027 |
| SHA512 | 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1 |
/data/data/com.yiwyxb.dk140255/lib-main/dso_state
| MD5 | 55a54008ad1ba589aa210d2629c1df41 |
| SHA1 | bf8b4530d8d246dd74ac53a13471bba17941dff7 |
| SHA256 | 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a |
| SHA512 | 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | 32b53e3bc7558191dbdf2b220dbb049d |
| SHA1 | fe5ddf2a8d5d3c25362261afb814a266bc3de7b2 |
| SHA256 | d0c485f43b901a32f767dfef73281aaa09a4f0796a454d1108011a021c938d1b |
| SHA512 | 370066f4898bab649e14673a5009faf763dc9bb14876bf921284ea1bad01b325c7eeb52b2b2d862b951fc5e2c4a7163522e2fdb7df3bcbc9649ff5f8fde1fe8c |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db
| MD5 | 0908e924aa236931dc7166fef6e00862 |
| SHA1 | 7782648d6d8f6e835bd47058d4852932c096a467 |
| SHA256 | 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f |
| SHA512 | 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | b41398dad64c236ce422399d512fff7b |
| SHA1 | 266b23c4d8572355f28b112a0c4e10372bdc6868 |
| SHA256 | a3138884af2462ca56ab16bcb321007d89b53bd5a64203f6bc8247099fd89462 |
| SHA512 | c5e62c09a150908f1ea9b9500549dbfda63d190d1e3a97a74d5d590e1fcfa3a7ce17e26355963bacc8094244fed52fd0281806e00af2e0a61f32bc7ec23da33d |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | 4b0cd8b6e33da480a6ac64fcc22a5e29 |
| SHA1 | f4ae0a1c21b657279f71bd8a0f235debff4400a3 |
| SHA256 | 208aac064f71ea9870013b484104951dc9d372cbfab128fab4b8e1eeb3f8556a |
| SHA512 | 61d74170ea7960664f7a33aad0db1a26680586ea1bae60adf087b2c397bd5d7b0212d84bf91780ece9d0b6507c0dc1a9eec6d7a694696f49f69212e0b331d8e4 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | 923a488cc2adb3eb46f5d2ac0646e400 |
| SHA1 | d27331f48539a5ab4369bf55d00c92b3916dcc3d |
| SHA256 | b6c20de70efe1afc7d66cae58ea1ce61c2cc1f3a87180699be538e4d16cc9e18 |
| SHA512 | 11fd290055105d8c66457a748c120a8ad9b778879dd296ab0c6c58962d9e97575ea65f692074d4d74d08a0054e7b403b230316ecc809bdb8a580a2e213d29624 |
/data/data/com.yiwyxb.dk140255/databases/ua.db
| MD5 | a69bfbc1997260c14c23e8f2886e41a6 |
| SHA1 | ed88b906a11468376402f57a02502dae72054906 |
| SHA256 | a32e963015da9b994f8fb4c4f8cf422444e0d8542790ba3fbee28c64a64a0dc2 |
| SHA512 | 1bbbe78c1938c45d46212db7be61c470c67366ee5f867658523a610b73aade6116df2fc331e469c239698a9091d035967f36286bd22c65002458cac426b938f6 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | c71f2b98f33555c34664614ab5429124 |
| SHA1 | 611e84c921d414a1ad6a1eb31d19b5395f9690b2 |
| SHA256 | 3ec9e4530843d64df57b64a0814ce74ab58b7e07db435c32f21687f4b4c84da2 |
| SHA512 | 0c3ecede87ca3a0f6153bba587488447da38d36d3f4ee31f5e5d1a69a3da1229b8e9da5d944698ea1044be4ed25cbe101914360392cfe4a08c9f4ef41ab4be11 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | 319d0ba1bd93c6b3d960bd8b15bdeeb0 |
| SHA1 | 4bfb17dc85a7f07893616a3dc82fd938c3eb6215 |
| SHA256 | 01de3f536d97b25098293f42404720f6bc7f11ac94f2b50911c7ed5c5b90d7e2 |
| SHA512 | 3630ba44bb9b61043ae6245cbcb02bd8513ffa4b2141f744900c6d8ac3ec00a3df5be5b5ee9faf08a7a1d4cf1b7a5b8c4aa69b13c6ddb16dfb3d128a652cf4bf |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 1192423b047b387558bd2bc77b5dcd2f |
| SHA1 | 27797c5ef8cdbe5c65af0ab5981d4d12e451970c |
| SHA256 | 8f21f9419da14c976a52cb42ae8310c661553ba5a6395fe41bd34d95636498af |
| SHA512 | 5c1f2695e69401d04ee2d559f90f72853386bb76d47df35280334876dd49f404a2f62f9ea3c413f41af3c560172e320af7edf19e8479bf19140290fb7a5e6431 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage
| MD5 | 8142abfb5ac55677d59f554a6dce1901 |
| SHA1 | 684558d91f3bca0627a7a0dd67cc207b0c096a6e |
| SHA256 | ba9017a8f1bc7844c0f6b1099926f914133d49d2c1bf77ab41cc2c3d4b6921f6 |
| SHA512 | 6de4f5f00511d9b2a1a868043ee37c23a76de836106951a4b22374e735fc3c59842289b84078598e24516f81a6268acfba02405019df277362ec663ca6d82d6f |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 40af8661dde3f2a69447a85b585bdd05 |
| SHA1 | 7880618ef774f4f9e96101064707d40df520ab03 |
| SHA256 | b296b4bf5610fe8d6d0809b11b1d64872f84231f9153363c7e713166a3de309a |
| SHA512 | 4fd2d92c9e158dca5edfc8b8a91e2b4ad357fdd48e9233687a675ebe4f6d06a3287c5e83f83d17aba566a42aeb47361703d1e20e54af77294d890309b5bbebee |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | 66b5e6d725401d8f6fee281f3a0d2a38 |
| SHA1 | 27d11d1874bfec97f681ab6b8946964247d168f5 |
| SHA256 | f370241459b7e3ab683ec92a4b76965d1382c5089f58d88edfd03f836c0e5232 |
| SHA512 | e5bd898c99510dcc0d6aae92ca0f1842fca8124c9fe51e034f0e4f3ee230ac391a044125d04f6117017cb35725f92d20309533c5c9ffbd53c4d23368f92d2621 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | d515ff5e5e1f33760f48e0cd523bcb65 |
| SHA1 | ecc61fdb2ab7742b042a387affaefacc3fcce272 |
| SHA256 | a413a973bc8bc4dd330538c4d00a538b73c9e9cb766bfe619b371a42035a248a |
| SHA512 | de76572577d22fa9800082a357ebcb579935028f25f36c04b009eb4e95e0e08bb3c1943a7de1044ec214c68a27cd0a7f039c328449559ce2a3b5082adde7ec76 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 3e526f3d9a90ce5ddb1ad4c100ae09d0 |
| SHA1 | 66cb8c9540b9fb2d140628fa8d7cf8448eb9fd87 |
| SHA256 | b87bd02af67e1e48040990f5d924d70e39c0dead237c6654b95223a2d730b780 |
| SHA512 | be8c98e6c1bf21806a26b3f99cd0901718c4088269bf937fb522afd7b8c743a47d9084280f5b26f5e5f0efc16e372c6ef2862ac1c8b8e4debec152bae9f7c0f3 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 626a9d02ed1ae947ee1e192e4ce92668 |
| SHA1 | 2531c0f1960e8b4eecd45b84f851092af38e0150 |
| SHA256 | d6f4c009d9485843b37f0a84adc630764f5978a84f100ecb5e1b253d8a805893 |
| SHA512 | 090625d93811e205d92683ed01930e2085ae69a4a1933a3b09b0c39d30ede19f898aeb8c636d187ea785fd17fdc8c55c146f3e6b18b4e7e09b0950d0634ad13c |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | 9781ca003f10f8d0c9c1945b63fdca7f |
| SHA1 | 4156cf5dc8d71dbab734d25e5e1598b37a5456f4 |
| SHA256 | 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793 |
| SHA512 | 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03 |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | b0ab42dce8bb9adead64571acbbc8ff3 |
| SHA1 | 2e3162778f4eaa599fb9fc5a5e7ac8854a90e749 |
| SHA256 | a22f9bf89d22109cd89594913c581fc6c2348ea17885579a3e2055d5a0f38c5c |
| SHA512 | 9b9c99ba690cd6b95375551fb37ff0ee72a9366c2dbb13079d5478fcc23aed5d47e1104f52d786026a6e746f94c7c3aa73ed5792db67227aefa2da565b224272 |
/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal
| MD5 | 2a2a6644ec61d1a82312da23a99d069d |
| SHA1 | 30062315909d49fae8865012d0f103dae83104e8 |
| SHA256 | 6f180bc66ecb6718d162df1356e1cc99d8aaa15b06374b4a6523880b1068c356 |
| SHA512 | b0c39275ea10e629b2dbfd725e0b89db01a48ccf02082d6e1391e80d3653737480803194c7e9f54b8fe54095b73adc2a65465da03133efaa47173d1cc770cc06 |
/storage/emulated/0/.DataStorage/ContextData.xml
| MD5 | 820d61d8b75653512b08908eff087490 |
| SHA1 | 5aa78997fca991c6fd59a66f938e2b1c3cea823b |
| SHA256 | 7e454de29d79a671cb54b948adb3afb9b2ddd753375bffd3b4b41ba5a9fc322d |
| SHA512 | 487cb506059f90322b20714299a0867f02650e7360deee9bbc9b6ee1c6e7874cb5b800292fd2af13d4b00c13dcfd13f5999b621762c3e50f8e3d87a7521cac19 |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | cddba744f76a516e66be42cebabba7c8 |
| SHA1 | e090f2cd772b4b6ecd66e62addb0a75210ea39f8 |
| SHA256 | 8dcdc606aba8aa0c8f27adb7e5441f676afd00c67ce902a7b2b7ed746f0cf0bc |
| SHA512 | 13a03db36869ee216abe3cd00e27e4aa7233a3c244bf882b26dc40af72b77ad5f967355aa9bf37ffac7978870bffa03b8f71c7a4129022693fd024a6cbcf2ff6 |
/data/data/com.yiwyxb.dk140255/files/umeng_it.cache
| MD5 | e3a64239ff4e9353168d11e8a2789102 |
| SHA1 | 24ab156b3067d24b1b7eb7d1fcac952ddd09af72 |
| SHA256 | 8188229abf6942eacb8d2b7803e2e3c4af3aad261b5db49cb48e27e631cdfefb |
| SHA512 | d926ee66736cb39fb2a64b2aff997b810855c39bcddb506f2c1148570bdbdf767c41a6b6d739d3fdb040f472f75208ca81382db8cb5f4f483ec37c1d0bf855b5 |
/data/data/com.yiwyxb.dk140255/files/.umeng/exchangeIdentity.json
| MD5 | f9f6dd0c9d750bca3ddb787a73098323 |
| SHA1 | 7bcfd31676c74c88f4d4a8b2e49347c3edcb8f6a |
| SHA256 | 1e44dd3a09e7601f706b820c74e720e26b8cb29b27578d4ea4694257aef333c9 |
| SHA512 | b1c1b054b5683910d19c0cda9b16bbce3c30a0366cb412599f0b89b040e901b6ea05b25e362fdfdf57fa36fd0e5d449be51074d7529a6811e2a8c01b5784bfb4 |
/data/data/com.yiwyxb.dk140255/files/exid.dat
| MD5 | 8eca6f1cafc0b3b293d3d25476339bf8 |
| SHA1 | f0175a2a6c166ca6be7bfaf3a01e0073a28e765a |
| SHA256 | cf0563c7683abbf91edcb5b3f5ed516c6c544d2f4e05534757730a157e802095 |
| SHA512 | 76d0158b3d5861de62dd477f6421f0f60ae102752e43a45cbc26223d3d24a405db768562ed8c8c1fa661ef6634ab36763a961aec534c297dcfb8aa33f691c098 |
/data/data/com.yiwyxb.dk140255/databases/ua.db-journal
| MD5 | c31acda427f172c31d78411780121ca4 |
| SHA1 | 61aa9b4ef4bf9c098765d23472941fd4628bb2c2 |
| SHA256 | c237226673c594e0af0efe9c04420917fdccb24b9c3f0e74539710ea277ad553 |
| SHA512 | a089a768f43306ee609a2a0ba418c1921d657542e9da79193fe5eb7dc78f3979677983634699b58f77c6b4da4893f719ce487f2e9dbfa5f3d76f522e1d53d6c9 |
/data/data/com.yiwyxb.dk140255/databases/ua.db
| MD5 | 38564ad4c73e5619bc2264b0c44997a5 |
| SHA1 | e55f6fe1b20347ad4cd58d77af0b0feb149f63d0 |
| SHA256 | 1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8 |
| SHA512 | 30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | 156dc9a62c4cbfd5246e03b2ab0e7639 |
| SHA1 | 6b21e8b02cd9f79970d14105164130fd8ab82e6c |
| SHA256 | e27f7c2dab793a9a1b0a43a027c965d062ce4c033b562512551b7adc3d27cae4 |
| SHA512 | 3796fbffa5057177749909e5875e2dc14fee0242d14a0c2bb1abf616fbd6fd1d5bb6d17684a3380cbf6ca619549ab832c62ebbfd9a11e2a32c1a7fc630b85fa5 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db
| MD5 | 67c12933d1e0e63d9801a6aa43092ce7 |
| SHA1 | b6936908554e4a1986b8eb08289e2d3545e8ff74 |
| SHA256 | abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40 |
| SHA512 | db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | e719dd538af5c49ec76beff881a1ef34 |
| SHA1 | 620765b12fa692e8ec52216e5520de8bb565cef1 |
| SHA256 | 9a94ff353e67b8ea61829c94985e96569947431c1fd5fe81e9d507e23c983aca |
| SHA512 | 03341d24147ed0c2e85329df8a0616879795571018d4af45a59fc3888203b0131b125011555fe6c061244e910e836c03149fcf23559b7c8572d5ea402e8233d6 |
/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal
| MD5 | bc20e63a5fca486d0219da03b6c09d86 |
| SHA1 | f4520a026c816bc9e8af4cac1374037f3d2b7019 |
| SHA256 | c0cf6a6f4c9816580bdb82ef063fc3a326bfc2fa6178cffc6dc3aa47c66b6de1 |
| SHA512 | d28c1775c684297f49424f2752661209bd45b340bd1f6650ec6cca94feb57d9558e0b44fe1d6b6d0f3b9a99a176070aa76742b8c5e32e76d6317d9eab3d35d0b |
/data/data/com.yiwyxb.dk140255/files/.um/um_cache_1716024632022.env
| MD5 | 90d33358bd80f9e227d04408737bce4b |
| SHA1 | dda7cf65fc3f1ddc8927d4b6e3f8bda1aa38898f |
| SHA256 | be0d3ab8da34f090ace525f1822daef9dc19847f247698c53fd54ffc8d008766 |
| SHA512 | 3037a7c02a1f3764ef80b6d37103ecb8426247216b8a4348c4ed4aa6ac98fb8baaceba81cdb7df0b9d35af3791d98611ffce5e138043f34ce5c60446216166a3 |