Malware Analysis Report

2025-08-10 23:58

Sample ID 240518-lfd17sde4y
Target 540f70d9d68a6a7851a327b51a2e18d0_JaffaCakes118
SHA256 30533dd01149aae9d1be0c7e6bff2535a4d4b16d73265057725a00249dad693b
Tags
discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

30533dd01149aae9d1be0c7e6bff2535a4d4b16d73265057725a00249dad693b

Threat Level: Shows suspicious behavior

The file 540f70d9d68a6a7851a327b51a2e18d0_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion impact persistence

Checks CPU information

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries the unique device ID (IMEI, MEID, IMSI)

Requests dangerous framework permissions

Checks if the internet connection is available

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-18 09:28

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-18 09:28

Reported

2024-05-18 09:32

Platform

android-x86-arm-20240514-en

Max time kernel

7s

Max time network

131s

Command Line

com.yiwyxb.dk140255

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.yiwyxb.dk140255

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.178.3:443 tcp
US 1.1.1.1:53 www.wfcaipiao333.com udp
US 1.1.1.1:53 www.wfcaipiao555.com udp
US 1.1.1.1:53 www.wfcaipiao666.com udp
US 1.1.1.1:53 checkupdate.zeuspushwf.com udp
US 1.1.1.1:53 www.wfcaipiao888.com udp
US 1.1.1.1:53 www.wfcaipiao999.com udp
US 1.1.1.1:53 www.wfcaipiao777.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp

Files

/storage/emulated/0/JXCP/aff/com.yiwyxb.dk140255

MD5 4fa7e26102afc285def55883c283d885
SHA1 ce1709a188ef1213291453f4751e3c5c5d048301
SHA256 ec600619d127b4524746c2668a7e5bf700042643d25951f1e6feb99bac4a4423
SHA512 c0191d0e19a0ececfb137fc102a7ce92b1f3b9d65c6e8e21f45cb9e9527b17b6a6e0bf68ef0216b69c3e0795556de29ffd7944d3dacf847b2b5f0e2813a5d3a2

/data/data/com.yiwyxb.dk140255/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.yiwyxb.dk140255/lib-main/dso_deps

MD5 284b13d7abea8c7b06f681168ac44d6e
SHA1 938f6e288fe5fa641cbab5fe960a53b5e3ee0418
SHA256 377f5ce3f7cf22f99d0769b6c0be594af18ba114af25e53fb581843eeef08bbb
SHA512 7bba4e2dad38af7cfea6aa1a134c9cab58ccb8c302ce7bf30bb10a5a5517879d82550b660ee2f1a29abeafc2d82c778690db555281a2594fab9745a1524dcdb6

/data/data/com.yiwyxb.dk140255/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.yiwyxb.dk140255/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 6834026af7d57349218c12f2492394e0
SHA1 6f098899ebdb7ea5a947f124a3f00070d7f9878f
SHA256 acc269c9b9d8da94ec31ad4cb6bb05b4b98a98d566b0a015fbac773602407377
SHA512 966a52faca95304038a73fde8b9d88eb70858901fc15b87fe50e8e24c40059b0864db5d4a79f3051e8ee13fce43bb2166afd009d4b1f7da81163dd9ed2d17ed1

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-wal

MD5 e1c7bd7d5f656d69709c712ecdf9494e
SHA1 e67e89cceaf5a2d61469bdd312fe4e76ec23be1e
SHA256 3408c1423bf5a212f1c6a5db1d79851c956529b3b7f3c8de1559012faa14b622
SHA512 9c1556592d5a1107d3cfbc90c43beb494dda9d87c2498c1b4e8dc85ab83b06cbe1d6c5a5a229f0624356b0599f6340ee7f33df4636bff40917dbfd879d7fa080

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 376a2b67d278ce11e070d31ffc7ab3b9
SHA1 3cf1f51919d37fa5cd7c107e9ac655f8e35d4cc6
SHA256 fd907ebf91eb3474119fcbff3e351ee79a344de014d9704c955aff44ae5c84d6
SHA512 ac5b01b7462900b149111d73373e68cc43d9d822ef288e1d9081e67594f12381403fd506ef16766e5823a2f660cfa60b6c3540a1db737f4bd037d16ea1ee102d

/data/data/com.yiwyxb.dk140255/databases/ua.db

MD5 b25b9df4f4fc087dd278abd4af82f36e
SHA1 a8da4d658dbe761f6bf56d19057af871618b377c
SHA256 244e3b6f1ae95ac98ebebea28784845679bd4dd68fa021b076aa299e56f96409
SHA512 1d6e5a3f333f8f2884fba59c32256683537b09ee891448b44617d91edf405e1fe590cc4a04d973e667a542393ddc18c0f63ed634541c7bbd6fd701d8941212ba

/data/data/com.yiwyxb.dk140255/databases/ua.db-wal

MD5 3cd6ad6c29f14b042fb3ad5ca31b4290
SHA1 28ffe098a0b63e9e53c243a5f0060347cf76427b
SHA256 28c5f85e59bddafa9b82699b19d7380be4af6acd9bc1b940c6c18e97c8978d83
SHA512 bf653303280edbd7899b9f6b896cab4271fcbb78db2b2fa39b54605f5d9cdab5544bec50aa978a937da9c5fb001e8ef00ca34b53bfd204efae83d855eafb4527

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 2be68e595c0b1e2d7a6523e02bb3311d
SHA1 968587d9132a45e6f1c678e99cfeefa3096b5b32
SHA256 ed40c86c4fcc12ea6ba3b14fcdde0c1dca5c901d7ed7902a814e5f9cb4879cf9
SHA512 9eb6ca86e478a9e18c532d250cf838dbda0decf31d72968df1b3fb9f341ced708146762e3bcc32d32e3ce96edc0696d79afd6f0021c2beb74e9e706617ec8dc7

/data/data/com.yiwyxb.dk140255/databases/RKStorage

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.yiwyxb.dk140255/databases/RKStorage-wal

MD5 ad91fdf01ab58c0ed7fe7668bfe95713
SHA1 d5ccac26583578533ca2a29d5a2266161e278b06
SHA256 a2b6535c775aa9de86ca98c5fe773df586c9b0ed6619c412718266747308edc5
SHA512 016dedcc2a248d7f7e736cacf80605f6dc98df44162c4c1c4fb8b4de37e574ac984287abfe51fb291dc509dc22b3b90a21358664a8dffa38ff185804e366a939

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 296117b3c187a7ccf4c17b0989ee61bc
SHA1 973e59328ec56731ae7e822e1610b3dbc8562027
SHA256 08ea3409728b1b6a1956b6d64f77d35af7281ecf725d45041b7bdde59456f0a7
SHA512 4ca44d2ef1e04bd571bcd64034766e12087ef65c0e3b6b047f56299cd8ff7a40d31af2882d0ac3e6246be40b0462a72d5b1a078df69df890bef5af74bd405cbf

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 4fe834b443af9ca9bc8dbf186a76c40b
SHA1 2f12ac09967ed4261e38cd122d492c6114a9cf8b
SHA256 f27c3aedfd9baa02fe049e3cdfe503d699180aba5ca1d719257907d6dc55078e
SHA512 ce798e69f0166bdc860bcbefd275084692d876f72ba769fad3ca42fc142aa5ee6fc629d99f980a52730733341e05321e02d6e44e973b32b9bae85b77ea22a70d

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 e8d341fc357703658ff5257b968ff74a
SHA1 d7bd43a69f65fac6359069eb7580f1e70c076c3b
SHA256 2401cf1e1843788e460126616d34364fcaf0cc403dce35cc995e57d09b42c237
SHA512 fca6b997ef1d4d5071244d165f6fce49b66e82269ccacbdfaf44f650e233a7ae09e4851088d2f60d2a296838855acc8cf699ab24d769551057eb9dab13167b4a

/data/data/com.yiwyxb.dk140255/files/umeng_it.cache

MD5 3c1a5d05fafbdbcdf29796d48aaf0daf
SHA1 16c5a8d821ff447cf7334f21a33ab9ab8cf8d62a
SHA256 1e3bc0eb546d7d7921c0aeff9f727cdd705f3e236dd5f288410690dcefe4a523
SHA512 215331207e0abb8f418c236e9c0956425b71bc630db817653228a8d656800c341615ca08dc389fa8474308e2181851f32219d68c58bc43f996d633c942992ebd

/data/data/com.yiwyxb.dk140255/files/.umeng/exchangeIdentity.json

MD5 13eb7f4ff2974fc242a76c7abd4e1934
SHA1 a98065cb4ae6ca64f1fe3dd72867d7ac53dce3e6
SHA256 10c2c9164da3886e32840bd77f1f8a338b53e4d3e5f1edddef65d2582129f90d
SHA512 50d0ec7c6774d7c01d0dc9ae9b0600e151d9f08253709961732bc7d4a07285e300af735b320f6a97a3dcfa1d5518191d4d357d47658883b090eb32a9f3196341

/data/data/com.yiwyxb.dk140255/files/exid.dat

MD5 8eca6f1cafc0b3b293d3d25476339bf8
SHA1 f0175a2a6c166ca6be7bfaf3a01e0073a28e765a
SHA256 cf0563c7683abbf91edcb5b3f5ed516c6c544d2f4e05534757730a157e802095
SHA512 76d0158b3d5861de62dd477f6421f0f60ae102752e43a45cbc26223d3d24a405db768562ed8c8c1fa661ef6634ab36763a961aec534c297dcfb8aa33f691c098

/data/data/com.yiwyxb.dk140255/databases/ua.db-wal

MD5 6709b19d5fac64adae688c839d1b57a0
SHA1 0ddb5b9539e7de89ecc4382cee17d1deaf733fe4
SHA256 c73be80880da46b135877f1357851cc7856629c023df00bb6ea393080901a3f4
SHA512 00bff8527fcd8b2150cd2a1eab38bf7038fedc996c685805587f29f2c8d7c9736c08c8dc482d146a4031d86a85e57861e9af37dc9ac068ae04758f0b0679bd52

/data/data/com.yiwyxb.dk140255/databases/ua.db

MD5 d604a3bf1f8d992cc320ea5b1f7609bd
SHA1 247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA512 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-wal

MD5 f63c77996c9186d2d53c4e048d78603f
SHA1 380cba6364464621d20bd97a94a815c070b0102a
SHA256 aa8f4b4ab8a71b8cb68a9c366d08e24daaee93a969b609f1c56aa1fe561400a3
SHA512 6fdce1b7d96cee68e3106608bcbdf5b0e944c38d34e81d2af640a3067d99e8b700c423886d435f3936040ad223398fb060240871cc83533307e9383ada421585

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-18 09:28

Reported

2024-05-18 09:31

Platform

android-x64-20240514-en

Max time kernel

128s

Max time network

151s

Command Line

com.yiwyxb.dk140255

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.yiwyxb.dk140255

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
GB 216.58.213.14:443 tcp
US 1.1.1.1:53 www.wfcaipiao555.com udp
US 1.1.1.1:53 www.wfcaipiao333.com udp
US 1.1.1.1:53 www.wfcaipiao666.com udp
US 1.1.1.1:53 checkupdate.zeuspushwf.com udp
US 1.1.1.1:53 www.wfcaipiao777.com udp
US 1.1.1.1:53 www.wfcaipiao888.com udp
US 1.1.1.1:53 www.wfcaipiao999.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
GB 216.58.212.194:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 223.109.148.176:80 alog.umengcloud.com tcp

Files

/storage/emulated/0/JXCP/aff/com.yiwyxb.dk140255

MD5 4fa7e26102afc285def55883c283d885
SHA1 ce1709a188ef1213291453f4751e3c5c5d048301
SHA256 ec600619d127b4524746c2668a7e5bf700042643d25951f1e6feb99bac4a4423
SHA512 c0191d0e19a0ececfb137fc102a7ce92b1f3b9d65c6e8e21f45cb9e9527b17b6a6e0bf68ef0216b69c3e0795556de29ffd7944d3dacf847b2b5f0e2813a5d3a2

/data/data/com.yiwyxb.dk140255/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.yiwyxb.dk140255/lib-main/dso_deps

MD5 57be45f71d31eda4871d3f022a5af65c
SHA1 428c05c6d1ebba6a357ccf8aab59c00588441e23
SHA256 fa1d51d703489cc74e953a24f3212f1fb41ee718a8d981b39bb786a9bc71b08d
SHA512 16a47952bce66d10dccef92f4fa0aea40005693c75e80656a87a2c91a1be9a70881cce069cd5f654f21ad112ded40ba27d60c126b54f6bbe10470faf85a2a386

/data/data/com.yiwyxb.dk140255/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.yiwyxb.dk140255/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 32b53e3bc7558191dbdf2b220dbb049d
SHA1 fe5ddf2a8d5d3c25362261afb814a266bc3de7b2
SHA256 d0c485f43b901a32f767dfef73281aaa09a4f0796a454d1108011a021c938d1b
SHA512 370066f4898bab649e14673a5009faf763dc9bb14876bf921284ea1bad01b325c7eeb52b2b2d862b951fc5e2c4a7163522e2fdb7df3bcbc9649ff5f8fde1fe8c

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db

MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 b41398dad64c236ce422399d512fff7b
SHA1 266b23c4d8572355f28b112a0c4e10372bdc6868
SHA256 a3138884af2462ca56ab16bcb321007d89b53bd5a64203f6bc8247099fd89462
SHA512 c5e62c09a150908f1ea9b9500549dbfda63d190d1e3a97a74d5d590e1fcfa3a7ce17e26355963bacc8094244fed52fd0281806e00af2e0a61f32bc7ec23da33d

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 4b0cd8b6e33da480a6ac64fcc22a5e29
SHA1 f4ae0a1c21b657279f71bd8a0f235debff4400a3
SHA256 208aac064f71ea9870013b484104951dc9d372cbfab128fab4b8e1eeb3f8556a
SHA512 61d74170ea7960664f7a33aad0db1a26680586ea1bae60adf087b2c397bd5d7b0212d84bf91780ece9d0b6507c0dc1a9eec6d7a694696f49f69212e0b331d8e4

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 923a488cc2adb3eb46f5d2ac0646e400
SHA1 d27331f48539a5ab4369bf55d00c92b3916dcc3d
SHA256 b6c20de70efe1afc7d66cae58ea1ce61c2cc1f3a87180699be538e4d16cc9e18
SHA512 11fd290055105d8c66457a748c120a8ad9b778879dd296ab0c6c58962d9e97575ea65f692074d4d74d08a0054e7b403b230316ecc809bdb8a580a2e213d29624

/data/data/com.yiwyxb.dk140255/databases/ua.db

MD5 a69bfbc1997260c14c23e8f2886e41a6
SHA1 ed88b906a11468376402f57a02502dae72054906
SHA256 a32e963015da9b994f8fb4c4f8cf422444e0d8542790ba3fbee28c64a64a0dc2
SHA512 1bbbe78c1938c45d46212db7be61c470c67366ee5f867658523a610b73aade6116df2fc331e469c239698a9091d035967f36286bd22c65002458cac426b938f6

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 c71f2b98f33555c34664614ab5429124
SHA1 611e84c921d414a1ad6a1eb31d19b5395f9690b2
SHA256 3ec9e4530843d64df57b64a0814ce74ab58b7e07db435c32f21687f4b4c84da2
SHA512 0c3ecede87ca3a0f6153bba587488447da38d36d3f4ee31f5e5d1a69a3da1229b8e9da5d944698ea1044be4ed25cbe101914360392cfe4a08c9f4ef41ab4be11

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 319d0ba1bd93c6b3d960bd8b15bdeeb0
SHA1 4bfb17dc85a7f07893616a3dc82fd938c3eb6215
SHA256 01de3f536d97b25098293f42404720f6bc7f11ac94f2b50911c7ed5c5b90d7e2
SHA512 3630ba44bb9b61043ae6245cbcb02bd8513ffa4b2141f744900c6d8ac3ec00a3df5be5b5ee9faf08a7a1d4cf1b7a5b8c4aa69b13c6ddb16dfb3d128a652cf4bf

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 1192423b047b387558bd2bc77b5dcd2f
SHA1 27797c5ef8cdbe5c65af0ab5981d4d12e451970c
SHA256 8f21f9419da14c976a52cb42ae8310c661553ba5a6395fe41bd34d95636498af
SHA512 5c1f2695e69401d04ee2d559f90f72853386bb76d47df35280334876dd49f404a2f62f9ea3c413f41af3c560172e320af7edf19e8479bf19140290fb7a5e6431

/data/data/com.yiwyxb.dk140255/databases/RKStorage

MD5 8142abfb5ac55677d59f554a6dce1901
SHA1 684558d91f3bca0627a7a0dd67cc207b0c096a6e
SHA256 ba9017a8f1bc7844c0f6b1099926f914133d49d2c1bf77ab41cc2c3d4b6921f6
SHA512 6de4f5f00511d9b2a1a868043ee37c23a76de836106951a4b22374e735fc3c59842289b84078598e24516f81a6268acfba02405019df277362ec663ca6d82d6f

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 40af8661dde3f2a69447a85b585bdd05
SHA1 7880618ef774f4f9e96101064707d40df520ab03
SHA256 b296b4bf5610fe8d6d0809b11b1d64872f84231f9153363c7e713166a3de309a
SHA512 4fd2d92c9e158dca5edfc8b8a91e2b4ad357fdd48e9233687a675ebe4f6d06a3287c5e83f83d17aba566a42aeb47361703d1e20e54af77294d890309b5bbebee

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 66b5e6d725401d8f6fee281f3a0d2a38
SHA1 27d11d1874bfec97f681ab6b8946964247d168f5
SHA256 f370241459b7e3ab683ec92a4b76965d1382c5089f58d88edfd03f836c0e5232
SHA512 e5bd898c99510dcc0d6aae92ca0f1842fca8124c9fe51e034f0e4f3ee230ac391a044125d04f6117017cb35725f92d20309533c5c9ffbd53c4d23368f92d2621

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 d515ff5e5e1f33760f48e0cd523bcb65
SHA1 ecc61fdb2ab7742b042a387affaefacc3fcce272
SHA256 a413a973bc8bc4dd330538c4d00a538b73c9e9cb766bfe619b371a42035a248a
SHA512 de76572577d22fa9800082a357ebcb579935028f25f36c04b009eb4e95e0e08bb3c1943a7de1044ec214c68a27cd0a7f039c328449559ce2a3b5082adde7ec76

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 3e526f3d9a90ce5ddb1ad4c100ae09d0
SHA1 66cb8c9540b9fb2d140628fa8d7cf8448eb9fd87
SHA256 b87bd02af67e1e48040990f5d924d70e39c0dead237c6654b95223a2d730b780
SHA512 be8c98e6c1bf21806a26b3f99cd0901718c4088269bf937fb522afd7b8c743a47d9084280f5b26f5e5f0efc16e372c6ef2862ac1c8b8e4debec152bae9f7c0f3

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 626a9d02ed1ae947ee1e192e4ce92668
SHA1 2531c0f1960e8b4eecd45b84f851092af38e0150
SHA256 d6f4c009d9485843b37f0a84adc630764f5978a84f100ecb5e1b253d8a805893
SHA512 090625d93811e205d92683ed01930e2085ae69a4a1933a3b09b0c39d30ede19f898aeb8c636d187ea785fd17fdc8c55c146f3e6b18b4e7e09b0950d0634ad13c

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 b0ab42dce8bb9adead64571acbbc8ff3
SHA1 2e3162778f4eaa599fb9fc5a5e7ac8854a90e749
SHA256 a22f9bf89d22109cd89594913c581fc6c2348ea17885579a3e2055d5a0f38c5c
SHA512 9b9c99ba690cd6b95375551fb37ff0ee72a9366c2dbb13079d5478fcc23aed5d47e1104f52d786026a6e746f94c7c3aa73ed5792db67227aefa2da565b224272

/data/data/com.yiwyxb.dk140255/databases/RKStorage-journal

MD5 2a2a6644ec61d1a82312da23a99d069d
SHA1 30062315909d49fae8865012d0f103dae83104e8
SHA256 6f180bc66ecb6718d162df1356e1cc99d8aaa15b06374b4a6523880b1068c356
SHA512 b0c39275ea10e629b2dbfd725e0b89db01a48ccf02082d6e1391e80d3653737480803194c7e9f54b8fe54095b73adc2a65465da03133efaa47173d1cc770cc06

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 820d61d8b75653512b08908eff087490
SHA1 5aa78997fca991c6fd59a66f938e2b1c3cea823b
SHA256 7e454de29d79a671cb54b948adb3afb9b2ddd753375bffd3b4b41ba5a9fc322d
SHA512 487cb506059f90322b20714299a0867f02650e7360deee9bbc9b6ee1c6e7874cb5b800292fd2af13d4b00c13dcfd13f5999b621762c3e50f8e3d87a7521cac19

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 cddba744f76a516e66be42cebabba7c8
SHA1 e090f2cd772b4b6ecd66e62addb0a75210ea39f8
SHA256 8dcdc606aba8aa0c8f27adb7e5441f676afd00c67ce902a7b2b7ed746f0cf0bc
SHA512 13a03db36869ee216abe3cd00e27e4aa7233a3c244bf882b26dc40af72b77ad5f967355aa9bf37ffac7978870bffa03b8f71c7a4129022693fd024a6cbcf2ff6

/data/data/com.yiwyxb.dk140255/files/umeng_it.cache

MD5 e3a64239ff4e9353168d11e8a2789102
SHA1 24ab156b3067d24b1b7eb7d1fcac952ddd09af72
SHA256 8188229abf6942eacb8d2b7803e2e3c4af3aad261b5db49cb48e27e631cdfefb
SHA512 d926ee66736cb39fb2a64b2aff997b810855c39bcddb506f2c1148570bdbdf767c41a6b6d739d3fdb040f472f75208ca81382db8cb5f4f483ec37c1d0bf855b5

/data/data/com.yiwyxb.dk140255/files/.umeng/exchangeIdentity.json

MD5 f9f6dd0c9d750bca3ddb787a73098323
SHA1 7bcfd31676c74c88f4d4a8b2e49347c3edcb8f6a
SHA256 1e44dd3a09e7601f706b820c74e720e26b8cb29b27578d4ea4694257aef333c9
SHA512 b1c1b054b5683910d19c0cda9b16bbce3c30a0366cb412599f0b89b040e901b6ea05b25e362fdfdf57fa36fd0e5d449be51074d7529a6811e2a8c01b5784bfb4

/data/data/com.yiwyxb.dk140255/files/exid.dat

MD5 8eca6f1cafc0b3b293d3d25476339bf8
SHA1 f0175a2a6c166ca6be7bfaf3a01e0073a28e765a
SHA256 cf0563c7683abbf91edcb5b3f5ed516c6c544d2f4e05534757730a157e802095
SHA512 76d0158b3d5861de62dd477f6421f0f60ae102752e43a45cbc26223d3d24a405db768562ed8c8c1fa661ef6634ab36763a961aec534c297dcfb8aa33f691c098

/data/data/com.yiwyxb.dk140255/databases/ua.db-journal

MD5 c31acda427f172c31d78411780121ca4
SHA1 61aa9b4ef4bf9c098765d23472941fd4628bb2c2
SHA256 c237226673c594e0af0efe9c04420917fdccb24b9c3f0e74539710ea277ad553
SHA512 a089a768f43306ee609a2a0ba418c1921d657542e9da79193fe5eb7dc78f3979677983634699b58f77c6b4da4893f719ce487f2e9dbfa5f3d76f522e1d53d6c9

/data/data/com.yiwyxb.dk140255/databases/ua.db

MD5 38564ad4c73e5619bc2264b0c44997a5
SHA1 e55f6fe1b20347ad4cd58d77af0b0feb149f63d0
SHA256 1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8
SHA512 30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 156dc9a62c4cbfd5246e03b2ab0e7639
SHA1 6b21e8b02cd9f79970d14105164130fd8ab82e6c
SHA256 e27f7c2dab793a9a1b0a43a027c965d062ce4c033b562512551b7adc3d27cae4
SHA512 3796fbffa5057177749909e5875e2dc14fee0242d14a0c2bb1abf616fbd6fd1d5bb6d17684a3380cbf6ca619549ab832c62ebbfd9a11e2a32c1a7fc630b85fa5

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db

MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 e719dd538af5c49ec76beff881a1ef34
SHA1 620765b12fa692e8ec52216e5520de8bb565cef1
SHA256 9a94ff353e67b8ea61829c94985e96569947431c1fd5fe81e9d507e23c983aca
SHA512 03341d24147ed0c2e85329df8a0616879795571018d4af45a59fc3888203b0131b125011555fe6c061244e910e836c03149fcf23559b7c8572d5ea402e8233d6

/data/data/com.yiwyxb.dk140255/databases/cc/cc.db-journal

MD5 bc20e63a5fca486d0219da03b6c09d86
SHA1 f4520a026c816bc9e8af4cac1374037f3d2b7019
SHA256 c0cf6a6f4c9816580bdb82ef063fc3a326bfc2fa6178cffc6dc3aa47c66b6de1
SHA512 d28c1775c684297f49424f2752661209bd45b340bd1f6650ec6cca94feb57d9558e0b44fe1d6b6d0f3b9a99a176070aa76742b8c5e32e76d6317d9eab3d35d0b

/data/data/com.yiwyxb.dk140255/files/.um/um_cache_1716024632022.env

MD5 90d33358bd80f9e227d04408737bce4b
SHA1 dda7cf65fc3f1ddc8927d4b6e3f8bda1aa38898f
SHA256 be0d3ab8da34f090ace525f1822daef9dc19847f247698c53fd54ffc8d008766
SHA512 3037a7c02a1f3764ef80b6d37103ecb8426247216b8a4348c4ed4aa6ac98fb8baaceba81cdb7df0b9d35af3791d98611ffce5e138043f34ce5c60446216166a3