Malware Analysis Report

2025-08-05 19:10

Sample ID 240518-ts8ekscc38
Target 55a72fb1b8a8e144012840d0d3e63d82_JaffaCakes118
SHA256 b229e10a82ac52b760c069f94754df2850e21fcd92a5652b9ee9feb5740f298f
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b229e10a82ac52b760c069f94754df2850e21fcd92a5652b9ee9feb5740f298f

Threat Level: Likely malicious

The file 55a72fb1b8a8e144012840d0d3e63d82_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Checks if the Android device is rooted.

Requests cell location

Requests cell location

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Registers a broadcast receiver at runtime (usually for listening for system events)

Loads dropped Dex/Jar

Queries information about the current nearby Wi-Fi networks

Queries the phone number (MSISDN for GSM devices)

Queries information about the current Wi-Fi connection

Queries information about running processes on the device

Checks CPU information

Checks memory information

Reads information about phone network operator.

Requests dangerous framework permissions

Checks if the internet connection is available

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-18 16:20

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-18 16:20

Reported

2024-05-18 16:23

Platform

android-x86-arm-20240514-en

Max time kernel

170s

Max time network

158s

Command Line

com.tuokio.soccersumos.kyx.m

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar N/A N/A
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.tuokio.soccersumos.kyx.m

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/x86/dex.odex --compiler-filter=quicken --class-loader-context=&

getprop ro.board.platform

getprop ro.mediatek.platform

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq

getprop ro.mediatek.platform

Network

Country Destination Domain Proto
GB 142.250.200.42:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.200.42:443 tcp
GB 172.217.169.10:443 tcp
GB 142.250.200.42:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 api.mobbanana.com udp
CN 222.73.33.236:80 api.mobbanana.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
CN 222.73.33.238:80 api.mobbanana.com tcp
CN 222.73.33.235:80 api.mobbanana.com tcp
CN 222.73.33.222:80 api.mobbanana.com tcp
CN 222.73.33.234:80 api.mobbanana.com tcp
CN 222.73.33.240:80 api.mobbanana.com tcp
CN 222.73.33.241:80 api.mobbanana.com tcp
CN 222.73.33.237:80 api.mobbanana.com tcp
US 1.1.1.1:53 xiangjiaossp.hz.taeapp.com udp
CN 101.226.26.147:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.236:80 api.mobbanana.com tcp
CN 183.61.38.168:14000 tcp
CN 112.90.140.213:14000 tcp
US 1.1.1.1:53 dispatcher.3g.qq.com udp
CN 180.163.210.30:14000 dispatcher.3g.qq.com tcp
US 1.1.1.1:53 adx.mobbanana.com udp
US 1.1.1.1:53 lbs.map.qq.com udp
CN 222.73.33.236:80 adx.mobbanana.com tcp
CN 101.226.26.196:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.238:80 adx.mobbanana.com tcp
CN 222.73.33.237:80 adx.mobbanana.com tcp
US 1.1.1.1:53 ue.indoorloc.map.qq.com udp
CN 101.226.26.148:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.235:80 adx.mobbanana.com tcp
CN 222.73.33.237:80 adx.mobbanana.com tcp
CN 222.73.33.235:80 adx.mobbanana.com tcp
CN 101.226.26.146:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.222:80 adx.mobbanana.com tcp
CN 222.73.33.235:80 adx.mobbanana.com tcp
CN 222.73.33.222:80 adx.mobbanana.com tcp
CN 101.226.26.197:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.234:80 adx.mobbanana.com tcp
CN 222.73.33.222:80 adx.mobbanana.com tcp
CN 222.73.33.238:80 adx.mobbanana.com tcp
CN 14.17.41.159:14000 tcp
CN 117.135.171.182:14000 tcp
CN 180.163.210.30:14000 dispatcher.3g.qq.com tcp
CN 101.226.26.145:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.240:80 adx.mobbanana.com tcp
CN 222.73.33.238:80 adx.mobbanana.com tcp
CN 222.73.33.241:80 adx.mobbanana.com tcp
CN 101.226.26.201:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.241:80 adx.mobbanana.com tcp
CN 222.73.33.241:80 adx.mobbanana.com tcp
CN 222.73.33.234:80 adx.mobbanana.com tcp
CN 101.226.26.200:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.237:80 adx.mobbanana.com tcp
CN 222.73.33.234:80 adx.mobbanana.com tcp
CN 222.73.33.240:80 adx.mobbanana.com tcp
CN 222.73.33.240:80 adx.mobbanana.com tcp
GB 172.217.169.66:443 tcp
GB 142.250.179.238:443 android.apis.google.com tcp
CN 140.206.160.242:14000 tcp
CN 112.90.140.216:14000 tcp
CN 180.163.210.30:14000 dispatcher.3g.qq.com tcp
CN 222.73.33.236:80 adx.mobbanana.com tcp
US 1.1.1.1:53 info.3g.qq.com udp
HK 43.135.106.212:80 info.3g.qq.com tcp

Files

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/version

MD5 5ab63864ba72b69090787ee506b5250e
SHA1 975082eb1122eb272a8c0e1bc891672deea30911
SHA256 53b858861d020c3a566b74397cbf669ef6cfc650bb4776dcc7765db6d3e3fbc9
SHA512 484e474c0a49a1c1ddc883b8994af3b353ae2b532822a18d62e65a4ac3cf0e0b6ac385842bbbd348b353a4d6c9d18aff9ba8d5f792a1a4f095d8c62a8fca1fd9

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/md5

MD5 2665d60dd191a1ed2c5c45ae7ef19b12
SHA1 063186f2e0a1948d3b0ca7b69d24be2b0a624756
SHA256 8fb38b187912e8eb63e8e04c59389c2052c76a50629e9c29fb55348a4ec2bf55
SHA512 59d938fea82f741090c42ab0cffb090adc6a4aaf209abfdaa590a36ee15bf978c4958ebe269e20ced44c821dce5045cb7f986d43950b01f94ad6e9b853304f0c

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/update

MD5 2a27edf786c796357fd9cee3255a370d
SHA1 e1042699b1820a22670fd3fc3b54df50ceb3db1a
SHA256 070455b25f8784ae7a886f95f0128ef40c993d84917efa3c969c594b5f858a9d
SHA512 eea2db3a0caca6b481253401daf0dfa562b1f9fb9105b48d4f21178d51eb2dc57edc9809a357f23ca15b1f11ab55e9d262db45d60af5972da0fe9db27fcae418

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/pack

MD5 ec56d2f1302684654fc0598f38f74623
SHA1 a9fea68f1ff2e003a90b91d7d7d6a0c3b209b46f
SHA256 86de77500c377943548d94491da92cd61566a3a52bdba51ea8b05b6998b493de
SHA512 8b89bead1c2db1ff7affdc216947e0629ff214916b2615eb23f4115ff0099180904a7e0b318f0eb5626950426a0d0cf9df83fde3eefdf5da7d54fcb2c7c610c9

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar

MD5 3a977e9a0e54b402e8f1eb3d17a4862f
SHA1 a4504afa50a91730b90ecaca529e1b79a7297b68
SHA256 b26c7cd26ad5c4cce725a49d3fa9df5d437bf552f7cbc49619d04e612ee14476
SHA512 a94b35a112322a9aff74d9cecf19b858ed7288b33ddad468a5533380106cf3e1a128b9bb78a9f441fe90e5b5a991de90432b9ea2c79f2cc4f905b7d85d144b3b

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar

MD5 6a1c58e8c5ecdcc94c35b4490f03daa6
SHA1 9f941772f27524a95c443e2142e2359011fbaed6
SHA256 9d7c2786ef5b0b0d60ed43cc3be3da2f3b43c1309dd3fb2532745164711d166e
SHA512 7230b900e6c520387348bd26f858144258be9837e8f75411a41f3b56021b9889a01c5e4b3622654457329f2a8e22b52f4f4977ccf9288283e0ef7b7f8c4129b9

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar

MD5 efd480af8085308a1cd65c7cd1978285
SHA1 43e39f89370bcef2bc0765cc06ea59eca8846f61
SHA256 fe983561da059a1f24414f780bac0a823ef4459d5cb0ec1b5c3f2077c44e67dc
SHA512 eab3033c556a36637b953b350c20e2afd59e5b0bd7d0af4c2c4b92e73ff2e386287b5197963f555f1fe152be8550917711c5fbf9101e8143e571e4db24cbe1b9

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/checkupdate

MD5 1b54ded1ec2d9cd11debd1a36d1577e4
SHA1 b3f7a7c87cf512ec1e82f9e9586a874e22689147
SHA256 3bb56c47022af0b96c7c5cdf5d1f79857681815a8d3eb464590f3110258da079
SHA512 72a40b9bd4b6c00a360d5f4c58c698b6537e99e2d6c93599195e8a444569d82decb4a0d7fb063b2d4c666df57bfff3b3e9d773f6326663ad967720abbd89eb47

/storage/emulated/0/.rwtest

MD5 13c8ffd977013703a701cf8e11deac65
SHA1 067d5096f219c64b53bb1c7d5e3754285b565a47
SHA256 e7cf46a078fed4fafd0b5e3aff144802b853f8ae459a4f0c14add3314b7cc3a6
SHA512 527cff2b6fdfbc0f54fe092b17d6d8c7e22500242635fa56981e85a64da6ce8a12a3a66cf69fd48f588bcba9bad141b8e351a0cdd4925ae57289933eec1fc153

/data/data/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal

MD5 66b07798c083758eff514701554248f1
SHA1 e583657fc1109ad67bea8455e6b217df1e2861ac
SHA256 50e21d506f881fdf12db3e7a05425a6dbaee1262e499edd824f19db6a7c22488
SHA512 4d2a270206943cf4da10f4f8347807738476219b047233cedf6888911bd48b64428f70707a55ad18f3064f322b8f32848eb760a862f2b099c8e78449ce3573cb

/data/data/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 1d7579993361fb331bbf3e1c6975dd2f
SHA1 ba845e9e7a84c21a3b0684a78ba63da99cdfcabf
SHA256 e58adb7699be15eb82cdd314eaa88d14fbc577908dabcca70a60ce68feb9fc56
SHA512 04685f9b691a91ce18ac88d68e31aa07825a4003db3ea4fa0aa5c1213f6bbd0da9e03d73c61985d321e603ca69dc01193ec9e51a9ddc2b43df4c7af208185972

/data/data/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-wal

MD5 fbbe98dc79588c360321d0093fad5a2c
SHA1 8a6c5286dcd52d839063db024dbb2d88812a3a24
SHA256 2ddb6566b16aa277718422cf285abe80a492bd9fe9eba0b8d4c60c0a7b1b1984
SHA512 401fd9d93853803933f2b1e59806469e7aa8ba4e9d1e34bf82ce20cfdfd78d07d4667970e5ff05d39683d6d7f97df72645a0a6567d6dd0291ec19fa522cfaa76

/data/data/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-wal

MD5 86febfaae1af34c9a1c92186ac934e81
SHA1 48ec0d3bb9698a229ac7f8174545c3971c33fb2c
SHA256 c0af92967a1dd44d602b3b1a8ce218cd9f68e10542f0e1fc6ea5ae1bc121ada8
SHA512 03feee242af857705f79737c8a593404e1c6223934b2415459ce0d5048c3650b45345924bf260cd6e27379e380a6865d04cd2f15d63858a4e2600d0f3e50df4f

/data/data/com.tuokio.soccersumos.kyx.m/files/libtencentloca.so

MD5 2c1ed75b42b2e5fe45c87cc3729a4ec7
SHA1 60e15d8d6e99d144d99cf8936d4304272e0c3782
SHA256 7e713c464d2e1285098b82953d2103e43e43bd42dfcdbdeaccc0cfb115b9e155
SHA512 d681a6f3870b1960968d6633c2351ce67ebb0b4b1bea2926d4154dda10826f71d1529507bf32aefe436bb21f5b6682203dde61150c8ffb68eac3b50172343710

/data/data/com.tuokio.soccersumos.kyx.m/databases/ownad-journal

MD5 9f2c3aa6e256b3f0f31ab850bd5431ac
SHA1 a4eac89113f21ce9aa74394d4b6209b8d809e39f
SHA256 34f27f5b5a46565f83a943ca0a6c075879af0b0f78ab805b3a03d8efc8e4c267
SHA512 ec2b0a0aa9979ead286a4ea01fc3f1e60d11a25d9d83cf6896e12b8acea0b52d66268b77ed01ec0613379da664df29ddf9433782ee81a66e8904c681eada2f29

/data/data/com.tuokio.soccersumos.kyx.m/databases/ownad-wal

MD5 94fb1d8061c1e2d66be839e896f725aa
SHA1 15867c84b9a5b18f018c670033d245d51f4b835e
SHA256 9bf55aaccf54601daf68d0e716adc00b4760b3d3e5b21ac388648c18c67326b9
SHA512 aefc8e26b41841f9f746b1a561f0912c4dc505acc01db8dea0d88ff9d972185b2dede8b6a2f0ef9d2e9d4a2b596331cf5b396b95919663154ad4569ce85447f3

/data/data/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 448937f1440f32e8aa20990d7bf5a605
SHA1 c173e6baa5a8174a90de04f894bfed74e7bbbe32
SHA256 976064db7e8adc11776a0f0464f4cf500a9991a253a395c5c30b7a38248bdf49
SHA512 ef6cd89e64508435f1bb56c00de0655854705477fcca21d41360051ad3e5b30452b15ab7961c74544a9a3f58ceb8fb718fe11e540f30382dba83fd855999d667

/data/data/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-wal

MD5 c4d9b730d5c073f512c121c6709bfc95
SHA1 18dd38c70650084cd04fc359ef9865b6a9c50064
SHA256 6a48d27fd1c939c9dd5f2645e3db6fc8f914be86481b6e18d5b0319db1a40ae8
SHA512 1393b8c07c93fc1fbe88bf3f6d66e612b6acd14b9ca2bb3f1bb83c8a6fe65ebeb55ab17c852e49d91ca06f1ad6c8f429009b91568c72affa6f7c1a0dc9cc032a

/data/data/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof

MD5 79995832a1e8b57843a94a215a59ce2a
SHA1 fe022eaf3de0b7aed364ab64ac1766d532b6355d
SHA256 73f120bbe2b91ccf9ae90b5dbbe41b9360de69d9dc2981f4cd0c9037eac74533
SHA512 386a07e560826849d37600679554dcd729b3207bfb95e75749c2dc522a4c29b5f88c2f87ca18521c76af237f77a39fcc57104a1f7a74d564bbc8998dcd6ecb67

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-18 16:20

Reported

2024-05-18 16:23

Platform

android-x64-arm64-20240514-en

Max time kernel

179s

Max time network

157s

Command Line

com.tuokio.soccersumos.kyx.m

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar N/A N/A
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar N/A N/A
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar N/A N/A
N/A /data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.tuokio.soccersumos.kyx.m

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
GB 172.217.169.42:443 tcp
GB 142.250.200.46:443 tcp
GB 172.217.169.42:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.mobbanana.com udp
CN 61.170.81.236:80 api.mobbanana.com tcp
CN 61.170.80.226:80 api.mobbanana.com tcp
CN 222.73.33.236:80 api.mobbanana.com tcp
CN 180.163.207.102:80 api.mobbanana.com tcp
CN 101.226.26.145:80 api.mobbanana.com tcp
CN 101.226.28.239:80 api.mobbanana.com tcp
CN 61.170.81.237:80 api.mobbanana.com tcp
CN 61.170.80.227:80 api.mobbanana.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
CN 222.73.33.237:80 api.mobbanana.com tcp
CN 180.163.207.103:80 api.mobbanana.com tcp
CN 61.170.81.238:80 api.mobbanana.com tcp
CN 61.170.80.228:80 api.mobbanana.com tcp
CN 222.73.33.238:80 api.mobbanana.com tcp
CN 180.163.207.104:80 api.mobbanana.com tcp
CN 61.170.81.239:80 api.mobbanana.com tcp
US 1.1.1.1:53 xiangjiaossp.hz.taeapp.com udp
CN 101.226.28.240:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.236:80 api.mobbanana.com tcp
US 1.1.1.1:53 adx.mobbanana.com udp
US 1.1.1.1:53 lbs.map.qq.com udp
CN 61.170.81.238:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.80.226:80 api.mobbanana.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 222.73.33.222:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.236:80 api.mobbanana.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
CN 222.73.33.222:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
US 1.1.1.1:53 stats.unity3d.com udp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
CN 180.163.207.107:80 xiangjiaossp.hz.taeapp.com tcp
CN 180.163.207.102:80 api.mobbanana.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
US 1.1.1.1:53 api.uca.cloud.unity3d.com udp
US 34.107.172.168:443 api.uca.cloud.unity3d.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
CN 180.163.207.107:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
CN 61.170.80.230:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.26.145:80 api.mobbanana.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 61.170.80.230:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 101.226.26.147:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 101.226.26.147:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 61.170.81.239:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.237:80 api.mobbanana.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 61.170.81.239:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 222.73.33.234:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.80.227:80 api.mobbanana.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 222.73.33.234:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 180.163.207.108:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.237:80 api.mobbanana.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp
CN 180.163.207.108:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.4:443 www.google.com tcp
CN 61.170.80.231:80 xiangjiaossp.hz.taeapp.com tcp
CN 180.163.207.103:80 api.mobbanana.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 61.170.80.231:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 61.170.81.240:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.238:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.240:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 222.73.33.235:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.80.228:80 api.mobbanana.com tcp
CN 222.73.33.235:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.234:80 adx.mobbanana.com tcp
CN 180.163.207.109:80 xiangjiaossp.hz.taeapp.com tcp
CN 222.73.33.238:80 api.mobbanana.com tcp
CN 180.163.207.109:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.241:80 adx.mobbanana.com tcp
CN 61.170.80.232:80 xiangjiaossp.hz.taeapp.com tcp
CN 180.163.207.104:80 api.mobbanana.com tcp
CN 61.170.80.232:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.239:80 adx.mobbanana.com tcp
CN 61.170.81.233:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.239:80 xiangjiaossp.hz.taeapp.com tcp
CN 61.170.81.233:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.236:80 adx.mobbanana.com tcp
CN 101.226.28.240:80 adx.mobbanana.com tcp
CN 101.226.28.237:80 adx.mobbanana.com tcp
CN 61.170.81.238:80 xiangjiaossp.hz.taeapp.com tcp
CN 101.226.28.238:80 adx.mobbanana.com tcp
CN 101.226.28.235:80 adx.mobbanana.com tcp

Files

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/version

MD5 5ab63864ba72b69090787ee506b5250e
SHA1 975082eb1122eb272a8c0e1bc891672deea30911
SHA256 53b858861d020c3a566b74397cbf669ef6cfc650bb4776dcc7765db6d3e3fbc9
SHA512 484e474c0a49a1c1ddc883b8994af3b353ae2b532822a18d62e65a4ac3cf0e0b6ac385842bbbd348b353a4d6c9d18aff9ba8d5f792a1a4f095d8c62a8fca1fd9

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/md5

MD5 2665d60dd191a1ed2c5c45ae7ef19b12
SHA1 063186f2e0a1948d3b0ca7b69d24be2b0a624756
SHA256 8fb38b187912e8eb63e8e04c59389c2052c76a50629e9c29fb55348a4ec2bf55
SHA512 59d938fea82f741090c42ab0cffb090adc6a4aaf209abfdaa590a36ee15bf978c4958ebe269e20ced44c821dce5045cb7f986d43950b01f94ad6e9b853304f0c

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/1339/update

MD5 2a27edf786c796357fd9cee3255a370d
SHA1 e1042699b1820a22670fd3fc3b54df50ceb3db1a
SHA256 070455b25f8784ae7a886f95f0128ef40c993d84917efa3c969c594b5f858a9d
SHA512 eea2db3a0caca6b481253401daf0dfa562b1f9fb9105b48d4f21178d51eb2dc57edc9809a357f23ca15b1f11ab55e9d262db45d60af5972da0fe9db27fcae418

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/pack

MD5 ec56d2f1302684654fc0598f38f74623
SHA1 a9fea68f1ff2e003a90b91d7d7d6a0c3b209b46f
SHA256 86de77500c377943548d94491da92cd61566a3a52bdba51ea8b05b6998b493de
SHA512 8b89bead1c2db1ff7affdc216947e0629ff214916b2615eb23f4115ff0099180904a7e0b318f0eb5626950426a0d0cf9df83fde3eefdf5da7d54fcb2c7c610c9

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar

MD5 3a977e9a0e54b402e8f1eb3d17a4862f
SHA1 a4504afa50a91730b90ecaca529e1b79a7297b68
SHA256 b26c7cd26ad5c4cce725a49d3fa9df5d437bf552f7cbc49619d04e612ee14476
SHA512 a94b35a112322a9aff74d9cecf19b858ed7288b33ddad468a5533380106cf3e1a128b9bb78a9f441fe90e5b5a991de90432b9ea2c79f2cc4f905b7d85d144b3b

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/dex.jar

MD5 6a1c58e8c5ecdcc94c35b4490f03daa6
SHA1 9f941772f27524a95c443e2142e2359011fbaed6
SHA256 9d7c2786ef5b0b0d60ed43cc3be3da2f3b43c1309dd3fb2532745164711d166e
SHA512 7230b900e6c520387348bd26f858144258be9837e8f75411a41f3b56021b9889a01c5e4b3622654457329f2a8e22b52f4f4977ccf9288283e0ef7b7f8c4129b9

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/xiaomi_jm/checkupdate

MD5 fa26a545bec86f77929e8b2f6baebb40
SHA1 890084ded2e9b66e84aa956dd8fb58bb3573dfdf
SHA256 6043f17d6402bf237f74a611ca900a1f3f79543a2e3d2240558cacfc43579607
SHA512 5e9e1b8c5a36a3d8ce4c5038a5689a48bc6cf1944eb5095603b93f3f9faeee5ad4d23f48da61f43cd4c1dad73acfe402fe3293e29fd4e431867e0325b6e003c9

/storage/emulated/0/.rwtest

MD5 13c8ffd977013703a701cf8e11deac65
SHA1 067d5096f219c64b53bb1c7d5e3754285b565a47
SHA256 e7cf46a078fed4fafd0b5e3aff144802b853f8ae459a4f0c14add3314b7cc3a6
SHA512 527cff2b6fdfbc0f54fe092b17d6d8c7e22500242635fa56981e85a64da6ce8a12a3a66cf69fd48f588bcba9bad141b8e351a0cdd4925ae57289933eec1fc153

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof

MD5 450aa77a801c2c49798aae054c33ea34
SHA1 36b5e1d7bc87d2b868f96ab210af47c2da4de12e
SHA256 ac601e6210515128d269de91f2dc6078dbf08bec0fbd1b669542e7d9e51d1f9c
SHA512 c4abf01ceed50038fed00b2e8adf364f7400cc13fba61fa9204880e73038bf18d0c725ce49dc9388e052143f107f456f351b4e9ac0f0af6f2014fc0f5323e6c3

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 f7dfaaaafe9eb09db0a40802cc68f702
SHA1 82ed0c93cfb5043cb309e4cd8783159c8d434ebf
SHA256 4bcd4738971e5bf522bf3457d772540b94a6623594d7d99cb05eeef091080190
SHA512 2da3163f9d2d3ce07aad294c6ba496dda4b5fe5a637aabcfdaa4e4914744402cbd2234a0a7094a0e263d4e60bf138254f0627944a0590f0e8a454fdcf62572e8

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m

MD5 98d90374c877613ebb93f585109ae0b2
SHA1 2eef710b0e346807e6ab8a21493c8ed8897636c6
SHA256 ec62041940c01e9508bfd594a97eb406a1c9a0db60c41dad86f6f0305e3a058d
SHA512 58f1d1eb7c833034baf59fb830878d1a30f44ccd632f5a205fd0e72dcf043456782ae8f8ffb6f2f98aa92865af51aec9984b824b0b4964b54f6dc6830f1a488a

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 49a6ffc823242c5f72b1e7e362fdeea6
SHA1 291528a0a4ec88e32049ec2416779f308d9679e7
SHA256 2f55c2507918d3a4aa89e68a4fe6ba3ab159473c5737adb4f00b2bead7758e5f
SHA512 4929f5647c03ed2f7634c9d9c75c6e71aa7c6d6361536358853592ec83ef7740a44ef142cb751ebc8849a385439556c40362a32f7dd58c5cff7360627ce2f049

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/pri_tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 1e64ba4a8eb9ee2255ef4e12e2d22499
SHA1 6ee131b70e610b27fb3b5d7bb8e37b19837936b5
SHA256 35af7bae76cd4af30a310b47167b99b6845f7f643ec7dc0a7ac0a392eb334812
SHA512 d0fdeb8d0ecb47d527c00c18b0f303f1794324a38464c49c6cf16a528b2bd8baada50d8bc6f093c86cfab18e8ebf84f7a7bd1f7af3855938e8dc21e2300d1895

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal

MD5 44db33eedeb0dbd62f4f25c59244ce04
SHA1 fa3ba39a9a5f0e61bb412b811a8ee5dc241cc3ae
SHA256 ca11ac4c88e1260ad2b0ed7e16c6ba9e2472c477aab4c0062128b27f101c8e6c
SHA512 00e7f12918e663fd8b5f615ee64cff5503fb31f1818834339417151f32369c76f470265f00a2457c84db5eb9080193f2ac790a12aecedec7009b12c383d0c3fe

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db

MD5 e8a3cf1519f76f90fe66482692fb2735
SHA1 de43fce34992dbfeb9d216b1ecf45e489c7a67f5
SHA256 950dcb46fb427d6c603ddf7b05954f5dcd02840e0a0657a40b71d0d6ebf488f0
SHA512 21b0c416e7ad89bb460aa7e8211c626aa20df41bdf46afd10877c6234649bd0a4de301c88af57a7000750a208774e06e2a30340cd9f96947b962f6e9ba112651

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal

MD5 d0f2d39902d1edccd72860481b90cb17
SHA1 d241612fe94ab8606a1218c01e67bf695e6e4642
SHA256 f2ecdf40e4e64ebd3fd97e054e5e3db81f56fc9375dd7e2c0cb3f6dcb10c23b7
SHA512 691eff73e6c279e1797805139595a6461bb9117fc18d2ffc742ef5d862104685e3f08215ddccbaeaddd6d8febb27fefe4a016c3d143d026328dbfe37446fe2c6

/data/user/0/com.tuokio.soccersumos.kyx.m/files/libtencentloca.so

MD5 2c1ed75b42b2e5fe45c87cc3729a4ec7
SHA1 60e15d8d6e99d144d99cf8936d4304272e0c3782
SHA256 7e713c464d2e1285098b82953d2103e43e43bd42dfcdbdeaccc0cfb115b9e155
SHA512 d681a6f3870b1960968d6633c2351ce67ebb0b4b1bea2926d4154dda10826f71d1529507bf32aefe436bb21f5b6682203dde61150c8ffb68eac3b50172343710

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/0M3006CS7U0ZC2K3-access.db-journal

MD5 3c1969dada9e189eca90998e9487d1d9
SHA1 d0d3d27ad17dbf620aab2f7333cf6874860df842
SHA256 8e1c2a46867aa8fcb61843eea1ae65e236e462ddfe7172bd938bab388c64fb01
SHA512 da3b5f1acb504943609df5387dad3f78b5862e1c209ccd6d263a2696b6f1ce35e7038efdfc9a35b6c9c28a77c03a24ea076be01092912b9ecc174dad3187ce1c

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 63aa74639b17e8275d290c80fa6ac3ee
SHA1 f8ca4eb1f21a7015a6018a798297b708fc67c707
SHA256 1073143df1cf5b3e856393e4b9735e4a3528271f033ebba57aef6ccf1cb38e69
SHA512 913a12c911aa14f419bf9fbdfcc0863841d706722365c96fa683422d3e88f35b9bfa9d6daadfa92177a15744e2061eac6d3a6be7263b54e6b42ac4842a36aa4c

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal

MD5 ed16d6af93d128b03c5f234f7c447e1e
SHA1 4f6368a865e829c2d6b4a7735f8e61b56fa62d91
SHA256 12ab76f50b282d80103a2f510b4f878831f755d115293091428be1eabcfba639
SHA512 74486001384e03c28c1a78b37b678ab7691fa5e6ad00960885a25212e17b9f43ff4902445d6dfd7cffe372235f579824917a7c7b255a1dbe1d90d13544b2161d

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad

MD5 f0e8abee57f702bd0e2a823a262041ab
SHA1 9d18ff633347d64e1adb0674dafd2794ba22b6d5
SHA256 6d517767b4a447861cd669c54712a899c27c90e1729621326ac2476071225b81
SHA512 6bb4ddcac407af57cad9232b38bac6880a22f9b1ae06beae60e0e3ed8a933f725f2a4fd6686ebcc09a07ac1eafe4594de389264ffd963db98a6f2c76fa48cf11

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m

MD5 4441ef23770fe1f97acc0a536af6c6e7
SHA1 b16134017fe593967f2d800038b0f5083737dc70
SHA256 d4deca0914ec7552429596bcca75d858d98dcb81c76d6164276d1d18e1af5bf5
SHA512 0eb4f756c448fdd3904a48b05724cda79648789b1128749fcd113da739a2e10ec60426c1b12c5b2ed24fde9c2b42774186ee3edd8f6d7a4fde7ecb23c67e1b85

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal

MD5 f3fed22af5bf79af1cf9522603b3b802
SHA1 2c8d5367f755bf4005aba6cbc42871594d195dac
SHA256 61a9d7d3afec32aa949f9b3e54b90ea5b5b38cac6b87db69bb59da3b60a3bbac
SHA512 d10b00d22c55ff152339ae13ed8b01dccc711470214428f55cdca314298775237391279feecceb0c6d48022a7a1c4063c2ba7cd89ca7ccdcad1542731df1381c

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 d6b8336ac06a4cbf7eff252ab9ee9923
SHA1 748c5f23885c449b3a698605b913b861aebcfeb1
SHA256 f85f8e49d3020a98b53cdf734f5d00a2396014d9224fe1b9a8762856e9787877
SHA512 e653a8097d36965419e5e752fcd14dba5b072c460ae151c64a70490b6b7023ad5059534f2897b468baff92801ce53911c87f2e104c016c50dce3d4ee4ba9d1ca

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/ownad-journal

MD5 06c0c5801e9d592ef63df25204c18862
SHA1 3c5de7a2fb0b26ceb33d6ebcb351aae7cf2b5771
SHA256 d27c8813c2a3fa87e294767cca42f136687d0d43c36d3a024618ee09b9ef240c
SHA512 b63ef7b6741451fb804aa12389568a2ff2a3a15fa534b4b097fef189f0d6c646f8798790a00c2c1bde531ea21c767c7789328125884ccf2dc636cae505896e9a

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 80cc57b4106050fd78133773e1244127
SHA1 bd414afa0f7e4de6ffeedc822ffa658502ca27f8
SHA256 2c731c64059f9ca39c43b86d8a86d1f9b5071bd6deb7b487d43a6b3c3336ad52
SHA512 16e2de7c7a06c16d9d461daceef639a627660e05944ef73dd032d37452897aec25862a8b835aa24052c8b356e69da3f9ab84476555922219e426bf67f33bdad0

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 a867825de05266840a15e01a86da3525
SHA1 32448619678e4efc20ab11b18870c63d669f9bf7
SHA256 3a736f4a2ce8831b66ab0655a2121a2f5cb5ea92598c8c002cb2f82721cfa977
SHA512 0a567e1f692f7a33d88daee9c9adfda7fbf16e470f637e0e6bf1bc1fcdc2233d9a55467b64cefb8421728dd48a6c635229e29a8c30a53c117d96d71e8c493163

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 ff208d4a2c872787df557760731fcb5c
SHA1 0bd895d75aceff243a5186f3a5a7f89bcac728ff
SHA256 73a5173cb2ed393f0b7908edbca5e818b0953f1641f1c114687826c4f4457ff4
SHA512 9ba1d1d6598eda9fa3469cff033bb554870afe4e30a4b481ae64944a335b64da0f30ef15a2296f1a5e55305a5801fadef937a87de3518de9bf01ae79a642dc0f

/data/user/0/com.tuokio.soccersumos.kyx.m/databases/tencent_analysis.db_com.tuokio.soccersumos.kyx.m-journal

MD5 755be4e4d73a6e98cc74183bd46246ac
SHA1 d305f0bad9922216de20ebb45da5a8140dac78ec
SHA256 786916195615d60e791b41fd7c1d879776eb44ea01e3da48b2b10e465ae8c40a
SHA512 e176a701b5254d608c87a799e8a8ae2471246c05ca633219297fbeb188ef7e5e136e5c25e3ca2f9a6380055a5ac29757b9868bd0bf1b49cfdf6478375ec79b5f

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/Resources/mscorlib.dll-resources.dat (deleted)

MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/SymbolMap-ARMv7 (deleted)

MD5 daf9db9c01546bdb261b76ecfc809698
SHA1 2fccf9859ddf17364299f78dbfe44ce3a619e7e2
SHA256 ae44695f1cd0a7dc62482f7f547755331a27250b015c5f8bb903fc7e6fc492c4
SHA512 c600bcaabb8ce92941e9455d9f9e0b720496e6c2624db7cc7e0371eb1a82a2501dfe36cac7ea9d6cd3b1276ab934940020cc28b877f52a38e6e8eb4a9c727548

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/mconfig/config.xml (deleted)

MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/browscap.ini (deleted)

MD5 378be809df7d15aac75a175693e25fbb
SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/1.0/machine.config (deleted)

MD5 4bad452a2ffc4c6f982e2f43fb44f6b9
SHA1 4445d53dc755ca2f977b01bf9d77357b3dfb0cc7
SHA256 eded908c507a7a230ee7ad3146d8893cf140638e6eaeab58bff05c95c2f3a7e3
SHA512 1611968d2c19f3c9472a43d692a4451fd140dec1d6d5da6b819d33e62936f1d69d69e65c13b893158aacf985093bd7167f50d9c80c0789a79303fe66a9ad956c

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx (deleted)

MD5 66fed2411c14a0fc8ce4c593ef601bfb
SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/Browsers/Compat.browser (deleted)

MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/web.config (deleted)

MD5 2b6303c4f12762b71051db6e947f90a4
SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/machine.config (deleted)

MD5 433d143955ab359dff61c0bff982a176
SHA1 7eab623c58d853d733c0a5e586a47e09c4e3efdb
SHA256 531d0d5bc30466a8a7ea6c032639721d7f16aab57c9701ef0afab5fdb432792f
SHA512 914e7043806fcc2788dbe388f94a2c9cbc6b0d5eae59609ee411a4815926d879b05ba8f338ee07b88e95a44304ebc9cbefa19a948fa52ffc0f786957c9729c39

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx (deleted)

MD5 3b3452c399f27a24ea5a589c7bfe750b
SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/2.0/settings.map (deleted)

MD5 55dac562878b7dd98ee8a7ad203a26e6
SHA1 d16baa15e7d3042bcf9d7318209c696f4daf2cb0
SHA256 ca89036b7d7f1ae9311a6a2fbcf05fc5b997bd43fd21dd54e11c18018ef65f08
SHA512 987c5cd86a9825953de670e5c15404694feb15cd5fa9afa8af4c2d5bda9d805839c9695d44122b32e0ffafe08d720c3df58000e89c8822fd9a5eb28eaf2ad478

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/etc/mono/config (deleted)

MD5 f95c345c1c53b820487f6b72e62d5485
SHA1 957e4e50e74c50347af92abf240c2c7aab3f3f79
SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
SHA512 6b06434d07ee51be064a3efdca65b73e6c8e7560b43fb61633b08c7d2a0d792fe0670e57088c1dabd23929e0b7f7a27f65f503f2b640587042c8bbe98946368b

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/SymbolMap-x86 (deleted)

MD5 b405139bc2fe77580a009a6353c8e443
SHA1 335aecc975129bbece1e361d2d4113966ce7c351
SHA256 81faa4b9a2a0ab499edbc32aa4b773ce2f03957018b563bfabe8162b81f98a1c
SHA512 922211a1f2d9be2595d6301261080deff359cd2c89d0ca93dabbf90066c997754413329e4ab13d0a0e1e8a12280f58dd6bc114da13740675451492683bce3b1a

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/il2cpp/Metadata/global-metadata.dat (deleted)

MD5 5eabe0fc83c81c80f28d492107a3b2ee
SHA1 6996812555b41df4ae61e974660525a80faa5ed4
SHA256 1c9d3b7333f27d6305f8555096bb044d493f2a77e8c121e0e5c08d0509af4a8a
SHA512 0ca0a2ecd14898a382a593a629a99c9422da756a303c36215a3c6b5eb3fa88e3e72b56c91c42c9690e178987674a0683667c6cad215eb38a1f24cf81f91ac845

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/Unity/492f4e86-3eeb-42d3-b9e9-09e5375aff76/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/Unity/492f4e86-3eeb-42d3-b9e9-09e5375aff76/Analytics/values

MD5 d4f8acab2e57d90ce4a3eb61d95f7f2b
SHA1 eef7c2a6aad3984c70e238b344babbece9bc3229
SHA256 de438490e19a5604a36ea592ebd95ad02e954a7a0adaffe80e4161b03fec6b81
SHA512 d9254ce8c1dccce982147e57f1d8fa8045349b5807b2426a76e1807fee7020cdfb2d70cc935bf1a7db741883746d86468462291f092d0423f8f2aa99e652432e

/storage/emulated/0/Android/data/com.tuokio.soccersumos.kyx.m/files/StartCount (deleted)

MD5 d4d236fae8a4a5489aa1b1ec708c6bdc
SHA1 c626324d8b8f56468f0619d8c2ab79b94ee9e75b
SHA256 aa473895d5317f403d1725d2db23221c753fd20c01e09ad138d05b654a087792
SHA512 9d749f17383cee98d49db85f466ce24d3c2b336ff072e66b59f45a32bc5897da79199029e736f8c88e6bf5b809027d60ac9d85f8441cb39d3ded0a4203586ca0

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof

MD5 6628f181559156449862f171f7a7cbdb
SHA1 c4f418bf177704c89f963065c6c594374560ff56
SHA256 51a5cc807800158a8fa5412f89e4c072cd9ffec242248b86dc369b49a2a8117c
SHA512 cf555b5dfaa3977011c4cc40ae0046de6e0b7ad55e978d14e7cb4241af3834dd587ff78d4a67190fbdab7ca9f598a05bc8ed3b88f6171fdaf9e62ae6d66a9876

/data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar

MD5 2d34c4117e755911c02a440f4acb0f62
SHA1 f38856e64b6a89e8e238614fdd888a17fa1640fe
SHA256 d9b02c86d74519a646dc7a56f6bf89f0394ccade23cacd7ebc08d080f5b927c1
SHA512 12e692706226a6cbb2d0c54e937219a9590cab7c3f44df5e1b6387df76893e3c71bda43ca2b7720e34fab4af67d229244d9aa7be06984e8aca1c9e31d1f87000

/data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar.sig

MD5 2f6832876cda27233e401c5e488a4464
SHA1 d159dc63dc9ab87d0642ec83b0b19cca7f7f79ec
SHA256 c8d0a365ddce81dab25f8d3143ae7e58a46199d744462fb51488db697656e248
SHA512 5d7a947f0c20ca0d73c0d77076d88589f4d67aec8cde1ca7457808a1cfb8ca291b2323ae0ed6d44d783f7971d82057dff9786ae6e351c8c1250180dc5ee33b24

/data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/update_lc

MD5 dce7c4174ce9323904a934a486c41288
SHA1 e117797422d35ce52f036963c7e9603e9955b5c7
SHA256 0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f
SHA512 d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

/data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/update_lc

MD5 0bcef9c45bd8a48eda1b26eb0c61c869
SHA1 4345cb1fa27885a8fbfe7c0c830a592cc76a552b
SHA256 bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec
SHA512 91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

/data/user/0/com.tuokio.soccersumos.kyx.m/app_e_qq_com_plugin/gdt_plugin.jar

MD5 6bb7213a53c9f9e74676eed940e84b99
SHA1 e927deca437637e551541cea2924093280181184
SHA256 4f1113e0affae6b92c252e70f4b93bd74589e46f5dd2d475199b7a6ad00778b5
SHA512 eee2c887e2a4145638e64896bcf383a8536f8868b4fa9aaf6835e147b9e16b1b4c9fb4c20fa1055655d7663b641a880c32e0f413ab8948ffdce9100ac596a4bc

/data/user/0/com.tuokio.soccersumos.kyx.m/files/kuaiyouxi/datas/res/1339/oat/dex.jar.cur.prof

MD5 fd2b879c2dba1615737ab93bba46700e
SHA1 846575ffb134462427bbb5b8ac47e60d051104a8
SHA256 00767ac96db66b7a3883649b5357dd8a716f3c174d8e2917f0b7c3d80827c1ea
SHA512 34a9a54d3bc4275c28d541e162323bdd3c8eea32d1d814c6e780d8c3b9bd1d6c800428c0aa332f1d4d51acf8f7fbb308255a1fef0a1b3c24bebbb9de35ca03ca