7d23fe5c2cf6684ec455611a362c140a3d580788ac4752fc161912c2c238684d

Analysis

max time kernel
177s
max time network
187s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
19/05/2024, 00:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118.apk
Size 30.3MB
Sample240519-a7k32shf59
SHA256 7d23fe5c2cf6684ec455611a362c140a3d580788ac4752fc161912c2c238684d
MD5 57bab1c633ef8aa0f2ced2bcceeb98fe
SHA1 f402ce4c804184561036dbeb3349a4e190d2f69d
SHA512 18a0ea4d714bc22c8d77da0652e38532b76932fc5afb5d4807e495482f7a2fcb8faf1e30fa53a7311cbaea92af29dc5c37ef09242ebad410668d0a9fbb489621
SSDEEP 786432:3CzlyusNsEso/vg/VzvgQynNZ4o8cG65YMjZvR3:3CzdIHHg/ZglL4vMT
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 5 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.iflytek.oshall.ahzwfw
/system/app/Superuser.apk	com.iflytek.oshall.ahzwfw
/data/local/su	com.iflytek.oshall.ahzwfw
/data/local/bin/su	com.iflytek.oshall.ahzwfw
/data/local/xbin/su	com.iflytek.oshall.ahzwfw

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.iflytek.oshall.ahzwfw

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.iflytek.oshall.ahzwfw

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.iflytek.oshall.ahzwfw

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.iflytek.oshall.ahzwfw/[email protected]	5087	com.iflytek.oshall.ahzwfw
/data/user/0/com.iflytek.oshall.ahzwfw/[email protected]!classes2.dex	5087	com.iflytek.oshall.ahzwfw
/data/user/0/com.iflytek.oshall.ahzwfw/[email protected]!classes3.dex	5087	com.iflytek.oshall.ahzwfw

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.iflytek.oshall.ahzwfw

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.iflytek.oshall.ahzwfw

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.iflytek.oshall.ahzwfw

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.iflytek.oshall.ahzwfw

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.iflytek.oshall.ahzwfw

com.iflytek.oshall.ahzwfw
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5087

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

libjiagu.so

Path /data/data/com.iflytek.oshall.ahzwfw/.jiagu/libjiagu.so
Size 496KB
SHA256 f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913
MD5 f07656a2f51ecb23edc102003c32b764
SHA1 3ef18f74b609313887b9e825c56a54b5a9eef20e
SHA512 34b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238
SSDEEP 12288:x6fCZt8efyLY41GZ7/OA62kXzcb/Mk1mJAaixPCw8U6dP7:x6fwX4QJYHDcb/MkMFACa6B
MD5 SHA1 SHA512 SSDEEP

Submit Download

1004

Path /data/data/com.iflytek.oshall.ahzwfw/app_crashrecord/1004
Size 234B
SHA256 168f80a14bf96403077154899c2190170ca1615d21e7592b5e1ef5581a75ee6f
MD5 334d61121c5b8c650bdc8a208dabdd20
SHA1 650e9d8c14276b6d4ecdef43a26714c27af0474e
SHA512 36f675f24cff2c0e14b5ada3b1cab94c925ad1cc323b53d5b421e001e433598bd28ea1cb4cfcde5b4f106f927b61067cf06b6167abc15ee9076da393280dae47
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/com.iflytek.oshall.ahzwfw/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

ThrowalbeLog.db

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ThrowalbeLog.db
Size 20KB
SHA256 256fb4171fad95478a5a6615ef2bf8cdbb9948eb7f60ee6c909cf5480436128b
MD5 a852ebc3321d2bc807b23175a6a71edc
SHA1 645a7fd33cf75a23628d576e6c6fa5b454d16f13
SHA512 145ecea475401cc23e175ae5410fe8bea6f2b2aa7f9dcd40ea048cc60f57f48395cf6aab3681c35a3d275d20e79a342de3e8e2302ea2ee234e53ec9f34b5a831
SSDEEP 12:TLmcOyNTSFbydJexF4bb84riiKj2OVRmBEyPbAVOwG:TLPTpexi+TuGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ThrowalbeLog.db-journal
Size 512B
SHA256 e4817b9ebe785e751174651a2a6c85e89af58f4fb8698061cad9816e80102e9a
MD5 5d742a9e7e49e77f4ad7329610903c34
SHA1 d7a6257f7e90c5b3f5146eafa5b5976e4a80eb78
SHA512 e0a6a07ed5cd47a3f6ce9878f850a2417b52edb11be3fd3c4abacea539de184ef05719f0355c0b02cf92859169e360dfef3b6227bbecaf2b5945d4bafbb785da
MD5 SHA1 SHA512

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 37cefa5c92484dd26289bbd188a8e59c7dbc6dc17bc7c4bf95e1710560da36c5
MD5 3b0d1fa100e1d77345b50fdefcf59c8c
SHA1 2166a70d9ca71a67080cbc2b71055d3b5a86f895
SHA512 6d0d7e4033e30ca6656f11dfd8c5b93636c4cf63fee0b725ae84e692853eff33a2d47b1bc06d4c99c31342857d42ff227d38afd0c94cff8fd671ddea67ad561a
SSDEEP 6:7+/l9/7Hn1X5Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKV:7+tp7mqLiuWdwRmBEyPbu
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 cb0522d63cf0d15a9871098046c9d3700f56afe6cdc96689f20baa8f898a69f6
MD5 a985c64a64ce7e0c49aefedd6eb0ebc7
SHA1 b72f7aa68be79708a1f4562b1b47555533390644
SHA512 e081ac9e1b3cb84b02fe733538f91650cdc98300a4fae03263765cb3874fa0f6e05510243b4d5685b7ba00aab22fe78f99c94bbf1010d14bfb628a8afff10408
SSDEEP 6:7+/l92Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKT//n:7+tIqLJdTRmBEyPbkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_
Size 52KB
SHA256 5ccd65131458dadd51b3cb7952b0251454eac4d85a53ca0eede6a073fbf5a5d9
MD5 9c657a63d5bb58fb9632c595c4cac2a8
SHA1 5d73606174d055707fd1b9136eeaf25e46a25471
SHA512 2354d955fbada658bd57df52d52004d6675115feb1d598b59259371dd4fd51769acd67d8580f14f6128348885b05ae2051898f1ca470751ccec7d114c087fc2a
SSDEEP 48:Tk85WuAriStwwuMN5meposSgtkSlk+a/8vCidKX:r53Azwgtxi9/63dK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_-journal
Size 512B
SHA256 d9c26d3cf2a06c1d74a21b35e55cde8139f1e5184a4f5db5345b763583d9eafe
MD5 779b833691b6adab3a43eb17a943662e
SHA1 e46883a8204d09cee1b44ffda899a34219ca9a79
SHA512 56a178a3f4302aef8f0dee7943235690c91c5789207f87c75430739509d99578df2277a86c78469f339f8416ebe61aaea692f61e38ff8ea793da88576ef967a2
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_-journal
Size 8KB
SHA256 102251161c62037013495cb03bfabbe0654acf5e1d8cf745aa5856b4c83da328
MD5 3fc56685e10781d1b1c49edb5cb5ea84
SHA1 0d93f4a55752341ee42e880a88b33865d202c87d
SHA512 ec392c9d2ae855eb7edbe7110b8e9d33cbdfde23b0b976db33bd46eb3cf32e9cf573c25715dd44144657276d98f30bbbbb7005d4b540e9cc9dd79b6a86e6a694
SSDEEP 6:7+/l9GOn1+Rg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8vun:7+tMLRqLiuWdwRmBEyPbkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_-journal
Size 8KB
SHA256 d8d47216e6185bad0bb41b131331cf03533f47f0d625fff9e012f9af5a853ea7
MD5 c9cd993651b3c73d4df455d1f0ace886
SHA1 f8526635bf3f3ccfa081849cb670195e515bd17a
SHA512 e0cc204c7a77e7a17c2ba63ffd7d95833fae6c4c8b6e2d9baf40e0ee93110520cea4a0d5c582aead526c612e5c3d0ed4ce644bd12a448bfa5e5072142b222192
SSDEEP 6:7+/l9HhSFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKSkt/b:7+tlhSBqLJdTRmBEyPbXsb
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_-journal
Size 8KB
SHA256 246c44c4b7ee3367f2c740c6a0e3d3ff4b7d836896a0cbd9a77a816c90c3d9cf
MD5 aea347923c14a2ab09d1076368845c6e
SHA1 543b096f64479268a62227e0dca57421618b1abd
SHA512 cbca0fa9af3159094207a19ac2e5a7e020d89cef1319edf5e0aff8855d561a062b26399906f5a605d003f32fb324eb4bfea9d8087e3cb13e975e5e95960f9a38
SSDEEP 24:7+t7qLLQLBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSb:7M7qE85WuAriStwwuMN5meposSb
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/bugly_db_-journal
Size 8KB
SHA256 a67a2b457730d4b46015ecdf0ee5276c520bc80a507d3c0ef64ef5a1217d6c1b
MD5 f7bf902c2ed88d8e2d50c539a36b6104
SHA1 465ccfbb3dbe6ebba4b39dcbd08a26ee0d871d77
SHA512 f23f36ffa5937312bce1eec0daacd2413000c495df352999b3a0b8196ac7a94108e9d36523f40174c54e98ca3a248aad755c1fb7f94249cb5e531c74eb11d679
SSDEEP 48:7MUF/8vCidKXAqOJ85WuAriStwwuMN5meposSQ:7JF/63dKQr653AzwQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 512B
SHA256 96734318049cdd699ab45de9cc50759a427c0b3825a0166cdf7a68b9b09792a7
MD5 aae7e2d69993d373bd210c7178a3fb64
SHA1 9eb81492edfbbf0377a30be5b318563a39a62966
SHA512 217eac79d35642bc1d1710dec02f14d5ca5e486b3b180c300a87880d0a7ca457fe362b96215bb9499d14a8bbe9e1d2a7efb7d235097de30835893e76b17f4a4a
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 8KB
SHA256 59180f44dcb8c859281373be8ae13a0643049651d051d740dd82675cd2cada07
MD5 1c46c2ae145037553f065ff2cf1cdba4
SHA1 e2c3dee60d65c06eb1109714190fca10a19cb41f
SHA512 52d64959bbcd80e52b7fd3d6683cfe50eee8c8251720685f814423af1d89e9479b36753ab3616848d40138ff0732e689bdc36cf13f9260cd231c9ca33440f168
SSDEEP 6:7+/l9XOn1fRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKacO:7+tFWRqLiuWdwRmBEyPbZ/
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 8KB
SHA256 77afd15dc482298759894000d5da1fab10de36ac135c487bad6576b2cc7be0da
MD5 f1d30fe292b1a3c8407208d380baebdf
SHA1 2a2d04c92b5c5bfffb9c759b9878538a6aa737f6
SHA512 edd874a9a9aa73d06239162faaa6ce1287c6306fb613849370b942360c47c48fa20a6d019aee10b25f060297652e2ec22a7569b62ce5f7c7cf349918ea96012c
SSDEEP 6:7+/l9X5mHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6lM/T:7+tHmvqLJdTRmBEyPbvsT
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 8KB
SHA256 c71608125dc78330ed4c2e1caade94c0e2e434bc7e3e6c5cbd45dee7aee9de64
MD5 7e26d313092c6dd3477d9a299f25e127
SHA1 6065d0c3f4a929d43bc8099dd116787b629362f0
SHA512 2b2d72c18dc92ada17fa6bf7cf781fbfd9a77c0b3d9242da5621b24dedfc7eee345580686a135cace6f9e37f6e40ef011071d09ff9265d6dfc65c46e3071fee6
SSDEEP 12:7+tUFHmWqL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEY:7+tU9hqLd7sL7yot3BVrHotGGSP
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 8KB
SHA256 ea5422dc54cd63f84453b55c00c29ec3b4f7921a70521c62bdaaeff372027adb
MD5 50ddd060ebd2a510a88ce9a6ecc2f838
SHA1 0c169f01773921a3d4c3bee2a27b50062fabc9bf
SHA512 800f43aad09162be8a704306fc84609e6c03a8b1981079ad53c8f3bef6b720d9ac9b18572fcfd3ad282fa554bb731f3afa630a348c17c6fc6544e9b46494e590
SSDEEP 12:7+to2vqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEP:7+to2vqLpr7sL7yot3BVrHotGGSfI
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/cc/cc.db-journal
Size 12KB
SHA256 2aefb9ad6538a54b22dab26303692fc67932a34da2e14882bc5c0ebe02f73419
MD5 15487cd8cfa11332b98cd6f0d32beeca
SHA1 d4715acab0082f752b07d1290f5816ce1010bc0f
SHA512 382ed673ffaf615e0fabbadd5b57b258d6159182f89a80e4b27c321983493cca9c7880eb7d6b29eee291f59956b3a7211065a154da835fc66595d6679eb77dd1
SSDEEP 12:7+tEFmaGEfqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5w:7+tEFNpfqLEe7sL7yot3BVrHotGGSf
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp
Size 24KB
SHA256 34f4d36313dcbe823f223ea9b6edc55075f218df7d865b55a6b33649ed190095
MD5 202a61b1733e9c30e1d94c00e902300e
SHA1 a8fe69c152a9d587fb73a56d60c265ae3bdb5565
SHA512 e2004af5aaeab8aa646d256001543d982f5b7cf6345385e24c1f8a9be6b1e6e1ffe70f6723c06e4ad7b4c0e2c03b1789bc8f2f03d01b1e6d504d972c8a8eaaef
SSDEEP 24:TLPLep8XNMkguSWYFroE7lyclgsreGSzGQ:TXG8dMk72BoE5ycCslS
MD5 SHA1 SHA512 SSDEEP

Submit Download

mp-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp-journal
Size 512B
SHA256 288893837442960b7f662164247be1062fcbb6a05c511d037b0542971ed772b8
MD5 5d44f918eb902fd3efc7dbfda647d776
SHA1 ae41555665d5ca60a98556850f7beaa1dd682b93
SHA512 f06b21da8316a9b99e15aaa34298eb1d844b390b49dcefe1902b58719286579bf0469088a612ccab216f1f0f155d262a1ff754e5204b16c519d67176d325cb53
MD5 SHA1 SHA512

Submit Download

mp-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp-journal
Size 8KB
SHA256 a2bddaac688a6c8d8701a215f33bc1eae200a25be171b0a5075f5fdea98c01f5
MD5 bed86100ca2747525f9392c7a0226966
SHA1 d5642d379f6a480efc687c899991ec246f92737a
SHA512 a0550184f7ad186e9ee6e519acc8474d018f04ae8889ddffab198f30312f02720ca5e9c07d6e6d84f6b1484b05d968178d5c6c1a2be7ce003f421b35c6723e4e
SSDEEP 6:7+/l9g5Fn146Ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKm:7+tb6NqLiuWdwRmBEyPbx
MD5 SHA1 SHA512 SSDEEP

Submit Download

mp-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp-journal
Size 4KB
SHA256 6f4137b8712e9851ef695d8b74d920a40ca0aa56f7cacb521725a3bcbc428b3d
MD5 a9f767e151abe42bc57ecfb777b079da
SHA1 d4e7bec98b00770775dea5427a9602dd803d1c79
SHA512 bcb9db1ff88d518252ad06f8070347eda9adeb59255491eaad5c14aaed29a2bff210ec6153c703f83f39abfa2bc1d27571398df5260a549850b71279ce569bde
SSDEEP 6:7+/l3FPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKa5:7+t3BqLJdTRmBEyPbd
MD5 SHA1 SHA512 SSDEEP

Submit Download

mp-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp-journal
Size 8KB
SHA256 a4fb3e6473d3bd81028f827a7cef14b12fe5ea8872c9337ece66512b722db8ce
MD5 5335a712854404373e2efdcabe7b51cd
SHA1 3795cbf16cf144c2876ee54498b39e8138798d6b
SHA512 d52a49f52abb5a6f98c3b263ef454f0453411dd04f84930e17c467ce3f7cff68dfa6c157ca7f00f43b93ed1210e2d79a3bbe02e1eb0313d12d5ba0322d5f814d
SSDEEP 6:7+/l9J4Pg9bNFlqhr4lOERX4PBX4ogLugMBX4suuK3//r:7+t4qLmWRmBEyPbEr
MD5 SHA1 SHA512 SSDEEP

Submit Download

mp-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/mp-journal
Size 8KB
SHA256 d985266e235caa3775da85c307aa4c5cb68fd5c0513578a4ffc1ee0066e9f2c1
MD5 dc6d09244a13308840104baaf674e5b9
SHA1 6c27c7caa1a72944ff8bc3a6d7a43fa98bba8588
SHA512 5c54a2139536e2ccaab5df2f52246714614de661d7cfe2492c08b4a1af31cd89be20f96f46bc18b9c21994833a3166bb450c6301f7181c1c177aa918d1d449a7
SSDEEP 24:7+txgGqLy4rMkguSWYFroE7lyclgsreGSpN:7MxgGqe4rMk72BoE5ycCslSj
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db
Size 32KB
SHA256 961a25c454c3dd28a207692363816add03d7a850c1b0f222030b9e6bdbde76d7
MD5 af55c523700074d53aaeb9e5580a9c48
SHA1 f28d3b323d935d80115da13ad8114a6a2c74d763
SHA512 2318fc3497fe5286ab5227c3ac1a5f6f717e3b9ba3ed84e11d72fb15d4d4fbf7ba697cfebf90562adc910380ab7a56179b92a8cfa39fe0cfe66a6ca01d9917ba
SSDEEP 12:TLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+WJt/6gzJttoPP:TL6K4PPvP/BlmqygGSZQoJtQP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db
Size 32KB
SHA256 1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8
MD5 38564ad4c73e5619bc2264b0c44997a5
SHA1 e55f6fe1b20347ad4cd58d77af0b0feb149f63d0
SHA512 30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d
SSDEEP 12:TLWXOJuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TL/T4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db-journal
Size 512B
SHA256 cf24b6a56cfe5f4f7f90f2fe00b8413c976dd4a53cc5903e8ddcf6630447958b
MD5 fa0b85904cc6a2ee391ae423f87d2fa2
SHA1 c64632b39758dfc669484de15a346c25f5918551
SHA512 a14ca4361a4f0576b2d4093276a3e01f9c5e13b936bd04ac21df1380981c30c2d8c2121eee90631f636270c1eeded99fe99790e94f5ae0f7796a4a0aa9222d6f
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db-journal
Size 8KB
SHA256 7929bf2ba5ab678ff3fd175fe2da762099863740f1972e7ed7986b3304236460
MD5 1b32207fc7c968aeb8046a97ae864ddf
SHA1 e36abce737bba2857f78ef859439f5b8acf56de6
SHA512 d31a71a2729bfa66ec9488341a9689b51d396d47f9a6c24632cc5b1a50f7f4c5458bb4d1af9fc5eeb6eb650b6486a02e4d898ace6eb0c8b383763196e24683f3
SSDEEP 6:7+/l9Q18Hn1I1+Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKXP:7+tvevqLiuWdwRmBEyPbaP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db-journal
Size 8KB
SHA256 4ac35fe35c4ba61818e329170e0b8a8c433f7578a54d2bbb232d8540e0260de7
MD5 5f0f56ed25789ae75398f26dd512908a
SHA1 89a2138f8394a1011e654b9fc5d7ca9d4552eaf7
SHA512 b886d419b94f1572295e3e377796c864b317c7feafa7ae09da3989097d3985b002193904036224b1d0d8398974c0c3cf922becf7b5dc563833ea39239eeb821e
SSDEEP 6:7+/l9xYgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqYs//2:7+t84qLJdTRmBEyPbbYs2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db-journal
Size 16KB
SHA256 bb0ed64fe2c9b92bbd4520298f85d10ce97cba8fbe796d7eea5f2d5ffb3a0b87
MD5 412096c24615603cb1077bdffe642134
SHA1 ffcc7b5eabeb658be6aaae966ccd9cfc60ba1f47
SHA512 2c55745ddc89d6e4537222047b4483c968ee3a00d941d86479016847671de7ccabda991b1364e3e35ef9f26d88872abb692d36513db7f4fec671a6b08961410a
SSDEEP 12:7+t7O/3JOwRqLseuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbi:7+t/YqLb4PPvP/BlmqygGSi
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.iflytek.oshall.ahzwfw/databases/ua.db-journal
Size 12KB
SHA256 900b728ba7d6b682b2c9967f68c8a39f5c450d7ab89389809d3d34ecb464ca98
MD5 7379649388d8b658396e086f460dd4d7
SHA1 7d77faa3ab617f451d196337baef7566d18a5c2e
SHA512 98fd25a012a6601592e2ecd16713c204fe5631105420ab5868fa17a27ad3c7805a4e80112ad017ae1b9f07dca366009677e8f0b6f3ecb2fd32dee5a6b0e5dcc6
SSDEEP 12:7+t5gAqLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPb77:7+teAqL6K4PPvP/BlmqygGS77
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.ac
Size 40B
SHA256 b7e70eabb018b5ce96ff93383bd58f439f3707d13d1566726c19afd3b41be0af
MD5 68e4f4f66dd8cade3f84a767ac4175fd
SHA1 0695c51f19673312704943f565a172f404ca2bb1
SHA512 7fae31d0083b3403ed2fadb424e6edb981e6029ca22e4b0bfdad18a75ad3fe19225a3cccab587ae9398121bf88b510d93eb9de0e0551f624fa4e12df7b889b72
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.ac
Size 40B
SHA256 5810d711ccb5fe9ed4d91dd0382148dd12070e900b9130da293284f9168425cb
MD5 9c4e64904b3248d0e177adbea1bc567f
SHA1 35834291af2244f0c184722950f40e2b02956c03
SHA512 cdae741c7a07e881c75779a32740f3f26c7fd8783738792f17a351cad0cae7b48baf7f95302e830edb5235894c0759545bd70fadfecf44d49a6049a49ef9c85e
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.di
Size 340B
SHA256 79be9b0d25970a464597fa09d21c7cff0775e5c45926ad31d0aa4fd8267e6ea6
MD5 68e674b73302a0f2060b175b21809ade
SHA1 cd494bf29c3cedc8f7bae02cfd33438625b6c2ab
SHA512 21769e89a6fb9bb51bea0d500160218841c2bae98e9dd9de5d0e03b7c49608321419b68a002e6fe973c7476bffc2ab581a36320936f1519ee42572da91272e8f
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.di
Size 340B
SHA256 8ff80e81a2f87123bbb4a8622d76ed8476b5baa7a9f517fecd0af92a2f84fa93
MD5 f6d64fdc70c5ea387ff7e7ece5b813fd
SHA1 287b4b1cb70280fe9b08f4cebd83a2062685b3b8
SHA512 7141fe96bc3b62f95902484a39fe9b7396162f58a9b0460f6ab03a2b27aa7ff6974d40ccb4ffcb81b6122d47522b29f9c35e700174347ff774c943699efe6315
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.ic
Size 40B
SHA256 ffa1360a505db6dc42b699f760926e52c8c088ef53f8ab3b0c6bab8932cd7dc5
MD5 4910e6f2b0e5c9ae63b192b5579d7a8a
SHA1 0737fb783383a86eb644a06143cb253e73ab4c5a
SHA512 608348a2d60f9d47c0784ffc8cddffb6f4f1cc356ae348303bad058755c8ffa5c334eff06fb13bc953b83ea9bbf4e6fca3b7862168472855240f644f80ab14c0
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.rd
Size 32B
SHA256 565deac1269d8c4c3e3dc99203028030c29e9ae8beaf46d4815b9cd1bdda93a9
MD5 ad2a2d90c5d3608e3ab9daf20d174332
SHA1 a930db6fb8f9740882a19252878ced8c549e9129
SHA512 e7ccfaa297d137113b91e5022c5ffe325617ca705b272b68094fdee6069420390a205285aee19f1d0ab79a9dc538653938e0de8b546c2b5534e408a6de3654f8
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jglogs/.jg.ri
Size 314B
SHA256 0e91e860d3b00a05c2abe79e7854d31f777599effb63cece19879e87349ac633
MD5 3ce13bc2dff321a2f49a563e8cc2cecd
SHA1 3da5d5592447192d30282ffe4ad37059902a9cba
SHA512 e0e278cee043e3f798e7a39f06876a7d74e1118f25834dcc148d5c66add01dbe326b68f821e7357b1b97fa28dbbc40433e3f79a61508df4a0c2ac147c3bab8d3
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/data/com.iflytek.oshall.ahzwfw/files/.jiagu.lock
Size 27B
SHA256 7b1703413242527182c1f5e070de32d2e3d87baa832d3956b7716c89b52f6000
MD5 ea3c89f6265db59810e6f251756838d4
SHA1 cd4bc109fcc8b5ea775e9e887798540bf69eae3a
SHA512 5d9c66fd1a7560f3574005d0bbd095c7d9676a6d09751ce42f82dc55ee272bd230316cf66dccd327a2406b1ae2579287c1b3bac3e6e3de992d0c4a7b6b7389ce
MD5 SHA1 SHA512

Submit Download

um_cache_1716080035135.env

Path /data/data/com.iflytek.oshall.ahzwfw/files/.um/um_cache_1716080035135.env
Size 1KB
SHA256 4cc7eb4fbb97d54af901794ed974af4086fdf9431f6d4b17e33621299e467314
MD5 74eea1abb24dc0757784ac452f78b789
SHA1 88560afed065899858bfcdb182255b09dc0e01f2
SHA512 c451b970304aa0dfac985bb89414b21a972c9febb36bded0ea68daf418a3ff60ca19f5e075a20e98dd733f662d7e5c8c555779a82c6daacb370aaa66f62db357
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.iflytek.oshall.ahzwfw/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 88c2eff7aa131c7a0a17b9ff5616a658dbecd7b2d1f3661e93548fcd2a143cf3
MD5 2b000d5f61164df7993c17f9ce3f6077
SHA1 f0bbdc99920ac34b2642c2d6e29689d4b553f9f7
SHA512 966fdba357e5462ed06377f356b6cede1c98c33ded1c7344d01221ef0fd6ed5c7baed83ebf0e5ae7f462b2e5f30ad6283c1d938e3c0f2773d51bedc6eb7284f5
MD5 SHA1 SHA512

Submit Download

domain_1

Path /data/data/com.iflytek.oshall.ahzwfw/files/Mob/domain_1
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/com.iflytek.oshall.ahzwfw/files/exid.dat
Size 54B
SHA256 a6008c7a5fd8c5ce46b06de6f43f4ef0b508680c46033a7cdd2dfdf9b9c44e79
MD5 77aac3d10f23e63d0a057799ce831348
SHA1 9b4ecb9cae42a02b9f94babcab683361125ecd4f
SHA512 7c70200ab0ef980655cd1ffd8c5d0a40763ab72ea1ea43c1dde8bfa445433a044869595cc659093b33991cedd35696850c6c4cf2f88ba354ba7c33b59f3555e3
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/data/com.iflytek.oshall.ahzwfw/files/jpush_stat_cache.json
Size 119B
SHA256 6b29a67154f571a0dab57a848d8667e028a4aa9d2a71347f01989c1be11df40f
MD5 bba717918933e4c6c5cefa79efa03992
SHA1 6da9cca3d02910b754d4e2b01a9328c8eeaf8294
SHA512 c20e2a70bed27b4d9cb7a8487aa990f61456ccb6e3062f2e2e2048db06d3ec5380e1a9e7cee20ba69c9955ed458ad030f80db8a5e6b40aedc25aa0a4293203b4
MD5 SHA1 SHA512

Submit Download

0b688468-a9b3-428b-b1b5-48ce7115ff23

Path /data/data/com.iflytek.oshall.ahzwfw/files/jpush_stat_history/normal/nowrap/0b688468-a9b3-428b-b1b5-48ce7115ff23
Size 187B
SHA256 430ce6875c9d03fac31a250eb829c186f4ec7e147ab548420de5bd87899a5742
MD5 886b9bcddf6677b7398f1297428e66fd
SHA1 f133017cfb6a4c6445a01bb10acf73ea21378f23
SHA512 0e86bc5d8c4ef98a1f077535100f24e2152376f9fb9aaeb8fba9ec8dedbe9c915b57b3c84ecd07edaa332419102c12ae8db4fccde3a70e114d79d7c1cd137e78
MD5 SHA1 SHA512

Submit Download

eb58de40-0eae-44cb-99e8-495e5538fb47

Path /data/data/com.iflytek.oshall.ahzwfw/files/jpush_stat_history/normal/nowrap/eb58de40-0eae-44cb-99e8-495e5538fb47
Size 159B
SHA256 1c9fd52f08c4fd1e2aa467769a87957f1a7f11a33d13b1ef75f376784abfdb8e
MD5 32e065cfd4fa67a08cd020c0198387f6
SHA1 261097d5955757fa10172cfc45d2d013614ad8f4
SHA512 ee7abd6b5bedb582464e86c99dc31b5faafeed7463bb41e42fff68f2a20cd1dd35c981b330458538293b02643338c7fa77c9da3aaea876c8ed642386247781db
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.iflytek.oshall.ahzwfw/files/umeng_it.cache
Size 433B
SHA256 238060b0a2d088c0a1467e30507deb387172cf5c1d2d6bfea5c8031d6896ee1c
MD5 a85e2016385dbf341fdc7eab65b3e856
SHA1 de492797bbf24a006d63e83112808ce546cb1b7b
SHA512 88170a4cd808bb343d51ee91901df37cf9322af2417db14144cbffe624e8d5e6233873e98f9a07fc0cd7163b860173c73983ba667af3b335a5e0cead94e629bc
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/user/0/com.iflytek.oshall.ahzwfw/[email protected]
Size 5.8MB
SHA256 75a206bf469f64592734012576f9dc42e984fcb5609acab85e1aea3a10e82d60
MD5 bef762cebe1851dff6d3b8372b6b5fed
SHA1 eeafa06d158b2504bee0bae16b9e8fa0c8b5f86f
SHA512 1a2985356624c6499b0887c35b0c4e0d074bcffe2006efeb261c24054f659a3a7926860c2a2043f6bdebf27a3f0bf5be56bac364c3d4f7999d90a1dda64c83e5
SSDEEP 49152:eWrGpnJ7qJvtmfnsK622ljaGm6vglXkhuIDovui6ZFIe6r0r6WbtPhchsF9w2/3X:eWrGpAvLK62SeG0GHU4Phcy33GMH
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.iflytek.oshall.ahzwfw/[email protected]!classes2.dex
Size 6.5MB
SHA256 dda097071e27945360ad6c73bc6462461dea14835b21d4c22fbbeb13a6fa3518
MD5 14bc98ae3f1a0149b4a02e147bc1cd3d
SHA1 dc6b0b8be7ddb4e88ac34fb56dd8ee761a535c7d
SHA512 23a8c23001b413b8e885187cd3b6f824832ed53f0cf102987ea1cd74349362a7ac349daa208e771861b0f4667244dcc53889c16574300a67736a0862d9f525e4
SSDEEP 49152:nhpZDFSsLJ+JH+nbmfjsajIo+8/6SkE1kxjSKciUA+J7o/qnF7cSssc2alySMa/w:nhpZDQs0y+V74DMa/ABD52FS
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes3.dex

Path /data/user/0/com.iflytek.oshall.ahzwfw/[email protected]!classes3.dex
Size 1.9MB
SHA256 4f8d9bb095ec88282de1fefa5e29d0f235977cca768f8ec598bcf8ea899646c5
MD5 9aef793f4e422e3db555271c55fa42dc
SHA1 ed428e9fc0565b9d8bb58ff9b41431143029ff0f
SHA512 1a693df40285303260099a28472c71d6dd2a05fb792ee9bf80118727d0d7628e6627a4b5a7318dedce50c82fdb4c95bd48a92ef76c795e3f249e8fc72b18996a
SSDEEP 12288:5j1olbUvlx06gAT90dN64zPVqWxb/RHSm7FAGZfob8XA07U9nh/4LxYSW0xGuqyP:5aK90dj3lHS+6i64LaZiqFe
MD5 SHA1 SHA512 SSDEEP

Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 a6ba20bc04e2408b9330bf60a4453d14c3c4acfb2801ece0b0ef919b1026ad56
MD5 0e8984dcabc0fef3573dfa14c7040b6c
SHA1 b7016deeaa3a70628f207dbb342238480d68ac51
SHA512 57b515596b6f38cb07ae55e18e1fa5fcb9af0d7931311005df284a498a49f0b71d95700f69997871e5178b9898215e8d64667622b52edb396f7666d643cce356
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 213B
SHA256 541a54f17c4d3af4277561696e4335e292e205042acde098154c2ebfb57d061c
MD5 37d656bd6415deb68461d7af7e186710
SHA1 600f1d9f7a10c1a771c39c6354bdb532ea81b0b6
SHA512 e05d013ee361ea1604a821d2cae5424f1e70e806cb631ac446a11fba18b36e85e8d97be4aa751599828c806659562e1b95b87d45c60d3159695e3adb8268f902
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 95b3be935409a827771e0c49b9127680861f6d799c58e429d2cd489ab83fcb33
MD5 e6696659922bb90a5587501d28e82ede
SHA1 0114608400cdfef07ed71af355e8aa2fea8089ab
SHA512 29427bb1fb3d15529bf262460e2b72bed7043f5052209ade89fd3263a68474817712038bd4353ad4fbc291dc3da6bb9da8fa5182457e3847c4c88a75b5542959
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 6143bdf42838523a9a516513375a6b3aa3cd68247b6a7a20faccc318aa1f9f21
MD5 66d42ee5d339a1cade276b3cecdfa468
SHA1 13d3698512ae64889dbe006db400f2f86f10f13f
SHA512 1a9dd45f69edd1da6d709ba21e9c9c6d808a3d2f6a635d43c8498ecefd9c67eaffda60effedc5d7ad2ded605f66ad6d347c5f69c34d144d3f2905a46549983cb
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 f68a7b6b9a39b50ff7a4e25417ed41bbd7a5e67f325c50438e7f6a24e3e76de1
MD5 fcfd14f8b56cc8b91a149fc2d8c29848
SHA1 52980dfb6e2a90b753ac60fdf7c17c35b6b957d3
SHA512 db3a09cb46b56946651f5d4a875385522829931444522669dfc28f612152e63633934e0e73219c666687c87e49f5374c8dec5c768700b011f42b94899104c1db
MD5 SHA1 SHA512

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 32B
SHA256 8fe890f6f07bb8e3f14c2a2c5e182ed067ddcbdf0aa8ee9b3403d2ab63b29b3b
MD5 cf25f8798e6e9357f310189112554d1b
SHA1 b64fe8a53097c0a46ac889a9a12deec6b1c3abb0
SHA512 b7e8fe08ba25dac863776f3f9f10bd93aba2261ea9ec9a92bf5d77735ec14b26b7e3e89b0ab0c4e68af86fd6fda2cdb6eb8cd4df523d9348e51b17d7ddcb6cb2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads