b581b283b7f1c54e27a00bfa10478ed5e51bd941fe08d0da2964652cbd29f57c

Analysis

max time kernel
55s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 01:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

658bc88006c62fc22c73a65b11a8259c_JaffaCakes118.apk
Size

29.4MB
MD5

658bc88006c62fc22c73a65b11a8259c
SHA1

4b447808b4f54f289a0f9e79d0c31190dc83c55a
SHA256

b581b283b7f1c54e27a00bfa10478ed5e51bd941fe08d0da2964652cbd29f57c
SHA512

0b407c333a3a1f1aec9c05fc971580c06b93cc818a7fd1a1c15ec9b2b14febfab7c7d720a94ff7436d80f447b0cdae87e36b35703c9f07b353f8390ac90870bd
SSDEEP

786432:uYpy4FqAAC8HjYaB9AwG4hi0Fmsh8OHJ6mhlaOXBllzt:bpyoUjl9A74histBhMullzt

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

T1426

Processes:

com.temple.escape.runrun.mt

ioc	process
/data/local/su	com.temple.escape.runrun.mt
/data/local/bin/su	com.temple.escape.runrun.mt
/data/local/xbin/su	com.temple.escape.runrun.mt
/sbin/su	com.temple.escape.runrun.mt

Checks Android system properties for emulator presence. 1 TTPs 7 IoCs

evasion

T1633.001

Processes:

com.temple.escape.runrun.mt

description	ioc	process
Accessed system property	key: ro.bootloader	com.temple.escape.runrun.mt
Accessed system property	key: ro.bootmode	com.temple.escape.runrun.mt
Accessed system property	key: ro.hardware	com.temple.escape.runrun.mt
Accessed system property	key: ro.product.device	com.temple.escape.runrun.mt
Accessed system property	key: ro.product.model	com.temple.escape.runrun.mt
Accessed system property	key: ro.product.name	com.temple.escape.runrun.mt
Accessed system property	key: ro.serialno	com.temple.escape.runrun.mt

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.temple.escape.runrun.mt

description ioc process

File opened for read /proc/cpuinfo com.temple.escape.runrun.mt

description	ioc	process
File opened for read	/proc/cpuinfo	com.temple.escape.runrun.mt

Checks Qemu related system properties. 1 TTPs 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

T1633.001

Processes:

com.temple.escape.runrun.mt

description	ioc	process
Accessed system property	key: qemu.sf.fake_camera	com.temple.escape.runrun.mt
Accessed system property	key: ro.kernel.android.qemud	com.temple.escape.runrun.mt
Accessed system property	key: ro.kernel.qemu.gles	com.temple.escape.runrun.mt
Accessed system property	key: ro.kernel.qemu	com.temple.escape.runrun.mt
Accessed system property	key: init.svc.qemud	com.temple.escape.runrun.mt
Accessed system property	key: init.svc.qemu-props	com.temple.escape.runrun.mt
Accessed system property	key: qemu.hw.mainkeys	com.temple.escape.runrun.mt

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.temple.escape.runrun.mt

description ioc process

File opened for read /proc/meminfo com.temple.escape.runrun.mt

description	ioc	process
File opened for read	/proc/meminfo	com.temple.escape.runrun.mt

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.temple.escape.runrun.mt

ioc	pid	process
/data/data/com.temple.escape.runrun.mt/.jiagu/classes.dex	4311	com.temple.escape.runrun.mt
/data/user/0/com.temple.escape.runrun.mt/files/ebody/res/6600/vva.jar	4311	com.temple.escape.runrun.mt

Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.temple.escape.runrun.mt

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.temple.escape.runrun.mt
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.temple.escape.runrun.mt

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.temple.escape.runrun.mt
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.temple.escape.runrun.mt

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.temple.escape.runrun.mt
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.temple.escape.runrun.mt

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temple.escape.runrun.mt
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.temple.escape.runrun.mt

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.temple.escape.runrun.mt

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.temple.escape.runrun.mt

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.temple.escape.runrun.mt

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.temple.escape.runrun.mt

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temple.escape.runrun.mt

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.temple.escape.runrun.mt

com.temple.escape.runrun.mt
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks Qemu related system properties.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4311

chmod 755 /data/data/com.temple.escape.runrun.mt/.jiagu/libjiagu.so
2⤵
PID:4336

sh -c ps
2⤵
PID:4474

ps
2⤵
PID:4474

ps daemonsu
2⤵
PID:4500

ps | grep su
2⤵
PID:4519

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.temple.escape.runrun.mt/.jiagu/classes.dex
Filesize
1.4MB

MD5
e03456160acf6e5de3ba8cbd2c4d174b

SHA1
6d571958e3098f800ead5a8faa131c5cf73bfcc1

SHA256
ec28284ac149c90b81cbf8ceb25c98041febce271fa4c7bb5428cb3885f3933e

SHA512
ddf52c08c97da10986ef74dfc1ced7de9879da75e9f91dc14475423d9aac93d7cefd74cb35ad965ef09ba5c3d617a8f6b5eecfc3b81771d4043c7104f8ed1b0a

Download Submit
/data/data/com.temple.escape.runrun.mt/.jiagu/classes.dex
Filesize
5.1MB

MD5
c04a8871b4bdc2f4014f07551f8efc50

SHA1
55feb31d24549e26be17303e4559794dbc7b291a

SHA256
3afbec0d12f299e669568d2cd834fb62fa92e0e1ce20e90d198f53f3bfc891d7

SHA512
950befa1f0fb28be7f8760d54be9aa5df503e8a043efdbd4d82d06dd87d7c279f3340687b5d1aaace0bfa7e5b186783584328fae7c28da02c769850359895cdb

Download Submit
/data/data/com.temple.escape.runrun.mt/.jiagu/libjiagu.so
Filesize
455KB

MD5
e5a53000766ebc433b27d6a66ec4f555

SHA1
2c8f53f1c03aec2005bcad67d731f07261dabde0

SHA256
78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

SHA512
370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

Download Submit
/data/data/com.temple.escape.runrun.mt/app_e_qq_com_plugin/gdtadv2.jar
Filesize
142KB

MD5
ce0f508c6335a0f27f412774c447e177

SHA1
37e5567b224e0a4af8c00fdea41f1dc00ab4ea4f

SHA256
365f148e463ef91e0f8d8e6a2050449a5a69019bcc7d96b54e3985e61fa99b53

SHA512
cdf4ec112bc01517d29480f660d97ef583cec811b7bb512d2ff1dac51177b173d648ec267858f14ceb4274565d432d1b739ac3a95ca49624b18bc2e16cd18bff

Download Submit
/data/data/com.temple.escape.runrun.mt/app_e_qq_com_plugin/gdtadv2.jar.sig
Filesize
180B

MD5
b6eaeba6a1c84dd2404e195e68470847

SHA1
a5412849f19316b371dd7e00d76f90801c12e4ca

SHA256
6fa69f99042de4deacde22922488977dc3602d0aa8c86ea86e693ce938feadcd

SHA512
e6ae9ff6b2f5afc3e362ceb9b357ed48611f4de091cc2e7695046a83ba10f2e90b33b37e29b3cd1be1aa4e254184d64e8b3e98331c43b5ad3156f11f302e0c4a

Download Submit
/data/data/com.temple.escape.runrun.mt/app_ebody/res/xmtok/6600/uuloi
Filesize
1.1MB

MD5
8222b799d26503b7045c5a5550d9df36

SHA1
aca3d011bbb80a1ef640aa07cd625117dbb37152

SHA256
ab5a0c6e8a1be2731bfae6635810549358019c3c6004b8ba6433164aeb83a238

SHA512
51ae62464c78023a41b4f4fc58443fef23166c505115a7c2b1c20a04c08988c4489a23be55cb9ddab254bbdcc20ea07d2e597559a6dd187af99dff9154ff0948

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/.ua/ua.db
Filesize
32KB

MD5
a01d47c4f3d7797ab8019ef98addccf8

SHA1
dbaf4a0632e98eda9b9d31460b34acbf2e0363b4

SHA256
846a8f3bfa5b5b7f1bf12211550a5ab8f7d601c47386dc712d10ac2410814fcb

SHA512
d637a917ca83c2207d1965a14eaf39d20d6dfe74037e32ec85633cedf523435431d83455e632dfc91f367485779103442a765497e6df28195f01b2e82fa62948

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/.ua/ua.db
Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/.ua/ua.db-journal
Filesize
512B

MD5
eb8031bef1d25d1ab6f621c5df1f1018

SHA1
c57228fbc29379fe3cc0c1f0c9f9dba930d223bb

SHA256
e36d6856391eb68f9bbe13cc70fbd689ba78dbdb9446e8a42dd6c64813cdd0d9

SHA512
31c2164f10f2e9c6d4e4035df0ec66fe594267a3bb2b5638d89c5b0398454faa443c29a786bd4575a55fb1edfbe81b533e6815fe8fe794b0bdf097c7d49e4e0c

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/.ua/ua.db-wal
Filesize
56KB

MD5
884ce04b130bd7d2526b2a492195c7ac

SHA1
5ef53126a40a9912027eec1cdd0265ef7011623a

SHA256
69489538f6a9e247585a8960ccb343c898c8e5c1d1ab073c6d32ef37e5d8281c

SHA512
1a05314edda8f3e2760e92ddeb9cc6d1a02300ea123232d80c493543ca1686513a9caa916b47f947d4dc394163ec6fb9aff067d3ca507424b14dc084a57c9a44

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/.ua/ua.db-wal
Filesize
8KB

MD5
cd1763b1b26683e518782eeddbe09f71

SHA1
54fa7c4648687560a77e574eac7d8b63ea483ee0

SHA256
199f2d7e6c0a57d33d8d0e1008d37d86e07804d0e011a41a01bbb473eef2b9f3

SHA512
71a54b265077acba3616e7445994a905e12387818eaa41b1ce49ecaaca26ba12a2e7e48d38b46871a9c13198df1203bab397e2a178209ceefc5145a62cd20873

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db
Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db
Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db-journal
Filesize
512B

MD5
b500f2cbabbc5ef5716e7c4d06dae62c

SHA1
69146946f1d086583e2cdb403e2d53a64d018626

SHA256
52d59af6262e619949febc69944660fb1db1f7a9ae1ff251e7810332750b34ca

SHA512
139a290003fd343979f5ca9b5968675b6940cdcb0493b7b481dc7f60d4d287b650638f18893afaace172ab34712d916efb45977b7070f0c27ed0f7b1f31b5089

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db-wal
Filesize
48KB

MD5
33a2c8144055e4953a37a276915862d2

SHA1
fa61863618c1e26bc73bdd8fff9ebdb94ffb5ded

SHA256
8e16832c259086a8a1164ce31180b6e9dfcc02c9611453bbb0875a6f0d7d5410

SHA512
302ba1f6d795a1636a9ced1f2bde8ac838e33d6e70b6650e60a1cb150539a04f6237a2713201a8b0f7f41fac0159b98d580044097d5b89feadf23292e1e4680b

Download Submit
/data/data/com.temple.escape.runrun.mt/databases/cc/cc.db-wal
Filesize
16KB

MD5
40c19804fbb017ee1d66ae9dc5f477e2

SHA1
245ae83a619564c90e3266d178950b130fded071

SHA256
cd92a63f284c30b27d865b6cc7a03bf06b6dd3ada2ec77b787025e5fc5aeea57

SHA512
b12e07e3cbe806ebbb6328233cfac590dba4b1792ffaea41a4693d03da430b26188a23aae68faf3dc006bdf77cd089f2911e273ce661bf2ddb5796f68f1dd80f

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.ac
Filesize
40B

MD5
8b78a9b480905f4469f4ef1d34a95784

SHA1
cc3e699bb0e69faf4a69515c872867bb4369e777

SHA256
d516665c5343faf1b99caf527697a805a66435e2b978a66d44d229afaee1113d

SHA512
cada04e05f925393825134cd4a1708baa5cb6de4cfc68da58892d601a34b914164a4faa53f1a0a06b8b4d82f33218c45ce1f8a3f5995fdacca74f713a69afb75

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.ac
Filesize
40B

MD5
90c6e2fe7daa1c821dd7e80656299c16

SHA1
811bcd5c50d86b663c1235813febb55b23188bc1

SHA256
f350ae9fc342c9e86307d28786ada6e1f8764361a6ffbd663d6b437656bac40f

SHA512
2d036f988b587d075a2ca34b23a5959a1f9f9f96059395d45d3c3ea46897f4f174703237be95bde5d5b449b2d49b8ab8511f11bd5b4d10b9e001838d0fc6351a

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.di
Filesize
340B

MD5
e8e09599bf46f4b41262ca6901d9fee0

SHA1
632fb63f39bab625b70790f163f2a61850601b14

SHA256
503a59b78025492621a2081e5c8e6378b9e4d1c23950a1c21ddf596f2b88bf26

SHA512
1cdd1753304d94529edb2a1c8a500c28696a8da237242eb6ab01687016cc61e3f7f4ced1b8216ca07665fc46c05c9d0d9f451c380350e160a1113a47225d7e71

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.di
Filesize
340B

MD5
d9c2962ba6b6724a6483ecd6a68f9041

SHA1
e5cfc22649bd397f3e1f2b2dda14359cd431bcf3

SHA256
b0a4d58aaf278707cf10b05122d0ffef97e204746ced71e2e06bd93099014d76

SHA512
cdb396a2a90106a818fca8cc3b520166ef093bf1614e912911f2b5c0081f579b58056a67804130df9241e99995591b41c9ee9a27a888059be9703520ead0973b

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.ic
Filesize
40B

MD5
c49ca1fb08dd3d7794535bf0ec7079c6

SHA1
31e927060a02c279ee8d02cf11ab4be60929632f

SHA256
e258fd718abc7bf1707873b3085eeccd8b853c1d9962860f254a320f35be375d

SHA512
1a38c47e7e8d2a36a03896a47d3506bf8a48ff9b69c3221288e69c0e294a63aa320447db0eaa65cbd8170fc82fdc0a4a7065158f8c535eac820de3548572bfa9

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jglogs/.jg.ri
Filesize
314B

MD5
f8c73ea04e5d527ca17784d3e44c5f70

SHA1
240e1e25d5e5e83f519cbb3941a74d2b06e04f4a

SHA256
4ea4c33742c00ec84fad5cafc6c357257639d8295f67df811847df6da42d7dbc

SHA512
bb9b630dd046ac46238bbce11ca794873dfb9b1855f8089ec49765d79501123b152faee2d787e73c7ad12a138d5e9400efab92751feaeac7e6c516459351d933

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.jiagu.lock
Filesize
27B

MD5
4a01ef69b7eb4b732858bdcf4715889b

SHA1
ef06139a3abbfb48f40274851991b966fb543b67

SHA256
a712ccf3623b5cfdb5c8296e60a4abe8453169d57e2d830fb17af99fbc0c8ba4

SHA512
7b6bbbfa68d519054f84b35a3554e2dc55bec381589744d8b7c3156365d869cd918b4789d59c0d40c56ec00f9bb33e59411da0173d59e6e777a48b5dda61e2fb

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.um/um_cache_1716341827944.env
Filesize
1KB

MD5
87f02039c7d46a0f379ae2d56e69d658

SHA1
aa02de11ec205e0ca6134b26ea53b6064bb58adf

SHA256
2623f2ffa7687a4d6fb9cfa37c3e36c77920126fef552701764baebbedb335a3

SHA512
47c964ef195d9e1bdbdafec61720f5fc24e0ee382fff7484b823403355940aecbf585bf367ae719c37e7243e3b8ca1741d0a41f1b64c3da7e62339bcef9c7ea7

Download Submit
/data/data/com.temple.escape.runrun.mt/files/.umeng/exchangeIdentity.json
Filesize
170B

MD5
4dad21ff267f8747002e8b5cb565cc65

SHA1
c290efd177bdd0ccc7b5d4c569821de2af5461fe

SHA256
7cc9b9c612f0100b9cd27d2fbc3654eb1d495f74f0164f3cd45d0b2facadfd20

SHA512
a1f42a5d002df0bcbe9f796ed8ba16da18809bcf26fff9a16d9da93d0ac55e6fda75759998035f2a1f0979aeaa76df590cc284cb0e804c2c4174ce08d9275c7c

Download Submit
/data/data/com.temple.escape.runrun.mt/files/ebody/as/cheuu
Filesize
8B

MD5
cad2e581de16883ec08f6138dd107a4b

SHA1
a04fa6da0d02faed97616de8b500b374246cd046

SHA256
d85b759616548a5fc4d0288e479a843b39120f95c8b8f92af65458d8ad05d885

SHA512
2ed6bf274efb5b5399372258d7d971f0f3144c1b2581d3ed83574b7f4b067a9d9770b09e5cee57046d059eff8b3dbad847e15e9e76be37d7cccb822b945c9044

Download Submit
/data/data/com.temple.escape.runrun.mt/files/ebody/res/6600/vva
Filesize
1.1MB

MD5
2460e8e6f5c26eb2f46f76f7bb1d046c

SHA1
ef2e478ce0c197301ed2d353e8806fa869b0778f

SHA256
cc26f9de16a19362ab24365fcbf5deb82a9d33267bbea2bb1e54a046af36d980

SHA512
f9461dbfa2f956428438d67558f64f1851a456f9adaddc35a1286f636b2262d22b6a902da0773200e5d95de15f8441f05d15b7af1e8a940a1360b78e14cb3a46

Download Submit
/data/data/com.temple.escape.runrun.mt/files/ebody/res/6600/vva.jar
Filesize
365KB

MD5
5d452f1c00451bca5f2b667bcaa10119

SHA1
063991097e880fae98a65c358b23fbe5e55df651

SHA256
0496dea2240489aa98c44d4519f1d583825100fcf00665741c73fd7b8f0d2515

SHA512
9dd69e6b91f9df358ce6723a9fc9bcdacc9ced838c8901a3d77cbbf614555fbc3c5b41c27dcac7f53eae61219379a26a40869580f829137b28416af97c1cddce

Download Submit
/data/data/com.temple.escape.runrun.mt/files/ebody/seey/tmd
Filesize
32B

MD5
a381ec20a34bb463fe62ff88b3d19972

SHA1
6d6c5f4335d311bb2732dcb73e120ff52e4792de

SHA256
15f705d0658d5615dab87075b030a620eaa66a815f5c4005841793d3e6b63bec

SHA512
e208be870264a04b23e815f0cc85ea5afe557a9c0db74ccd778e3eec862e4385a0c574e6711764547d11004ddfe5d2167e7c8f124b254a7789597153312423ed

Download Submit
/data/data/com.temple.escape.runrun.mt/files/ebody/seey/tv
Filesize
4B

MD5
136c2f0599b3a0175c544b72e4861b9f

SHA1
3800454a7eb70976c1899b2808a4f8984c8ade24

SHA256
1ff474b06c92dfea39c7c1a93f238f385ce3f9ad4cd634ccef22f66c3129b3cc

SHA512
1a74b2f94842f615b7b697b8628859b5e8c136c71c370d174e4a9166c7fb7b622d88e4959b415bec7a3736aac84bf1dd5b26825d9ec342d82bee00731c69f251

Download Submit
/data/data/com.temple.escape.runrun.mt/files/exid.dat
Filesize
63B

MD5
d526f24efaa60c1e94f17f09b5184bb1

SHA1
c99efb4879fa17ad7df77c32035b2d71d2e22b84

SHA256
05da3b9ae7b86d40d6dbe96b2e93fa2a9130656752a131a6652119b18b7a0a0e

SHA512
4950c4d7c45708a38c05f0d8929e7858555540a32e6d6384710da705103691a6c3d0bf1c898b69319e8a9333450a014b506d1d39c4e99ee7c2e51d3a67d3233a

Download Submit
/data/data/com.temple.escape.runrun.mt/files/umeng_it.cache
Filesize
415B

MD5
39e7f68e8c7d766a1d3558bde94e51a1

SHA1
07b59a8016f3112b78f083a706702ef5669f1e0a

SHA256
1268cf828449cbfbb4eaca0a254efa5a4b36016d3f86a3bcd018bd7ad482667c

SHA512
309c03b6acc193c44384312a7d9df24c03828df73e6997a963e3ed0e5142683b8152c82798572b854f15c06664c79413b4185f766bd3a9f126af2f540c9169ae

Download Submit
/data/user/0/com.temple.escape.runrun.mt/files/ebody/res/6600/vva.jar
Filesize
1.1MB

MD5
62e15db25a117dee2e4f3bea055ed4e9

SHA1
b65033d87154f5787d5ef7c4115d444bcab1f7e8

SHA256
563becdcb3a98f7c736e22ad6645ab1e1d8085af03d319e2d2ae9724af6c8a5f

SHA512
683f968e852688770dfd824817779bf720e6e4ebac6b03f40db83adaad4c664bec9eacf7898703dc10175d54e24a9f5984bfb2be3b0cb74c9922673253a60e21

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata
Filesize
32B

MD5
5269cd197340edea9c0046c6cdb6bdfe

SHA1
1b7264d8f79daeec50595ea20ff3dfe628609941

SHA256
86163c5d9a0e93232bf5133e4353f2b1ef8c32b9f42e185994b3a4c797422680

SHA512
41dacd156f93bfd487eed81e888484cac084ad127cfbf5ea269f15facc78c9ba8c9dd2a26ecfcab680205ee13efec62ccf62de2069cbd3c5b8bf9cad84a5102f

Download Submit