88d81aa2ba62672aa63bc141e8d81a32c2d76b851b103e1d8695266c5b75891e

Analysis

max time kernel
173s
max time network
178s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 01:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

657e3f1ad833f5210a700163ce905094_JaffaCakes118.apk
Size

15.1MB
MD5

657e3f1ad833f5210a700163ce905094
SHA1

b649beede477813598c3be50c6640ca4adab7fd9
SHA256

88d81aa2ba62672aa63bc141e8d81a32c2d76b851b103e1d8695266c5b75891e
SHA512

db64c407396d18f2bfaabfd2d80654ca2c1adc77ce7cb9703d942b413b56960924ced82dd3a51c98e5f00560044eb90ac312d81a8a374566bb1de948a01a0614
SSDEEP

393216:qwisZezFJ6G7rUpsNO+NmRKVOXAjSG8VmUl3X2JGf3jszAPbTXv:3ZePTHvaEVOQjSGG3Xwm3QzATTXv

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.zhaoxi

ioc process

/system/app/Superuser.apk com.zhaoxi
/system/xbin/su com.zhaoxi
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

ioc	process
/system/app/Superuser.apk	com.zhaoxi
/system/xbin/su	com.zhaoxi

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

Processes:

com.zhaoxi

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.zhaoxi
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.zhaoxi

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.zhaoxi

description ioc process

File opened for read /proc/cpuinfo com.zhaoxi
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.zhaoxi

description ioc process

File opened for read /proc/meminfo com.zhaoxi

description	ioc	process
File opened for read	/proc/cpuinfo	com.zhaoxi

description	ioc	process
File opened for read	/proc/meminfo	com.zhaoxi

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.zhaoxicom.zhaoxi:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhaoxi
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhaoxi:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.zhaoxi

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.zhaoxi
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

System Network Connections Discovery
T1421

Processes:

com.zhaoxi

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.zhaoxi
Reads the content of the calendar entry data. 1 TTPs 1 IoCs
collection

Calendar Entries
T1636.001

Processes:

com.zhaoxi

description ioc process

URI accessed for read content://com.android.calendar/events com.zhaoxi

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zhaoxi

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.zhaoxi

description	ioc	process
URI accessed for read	content://com.android.calendar/events	com.zhaoxi

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.zhaoxicom.zhaoxi:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.zhaoxi
Framework service call	android.app.IActivityManager.registerReceiver	com.zhaoxi:pushservice

Acquires the wake lock 1 IoCs

Processes:

com.zhaoxi:pushservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.zhaoxi:pushservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zhaoxi:pushservice

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.zhaoxi:pushservicecom.zhaoxi

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhaoxi:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhaoxi

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.zhaoxi

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.zhaoxi

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.zhaoxi

com.zhaoxi
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Reads the content of the calendar entry data.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4328

com.zhaoxi:pushservice
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4388

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

Calendar Entries

T1636.001

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zhaoxi/databases/hmdb

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.zhaoxi/databases/hmdb-journal

Filesize
512B

MD5
9edb1a8d57805637e2f297148bd64613

SHA1
b987ed59c1e451178bb1e46592a5f240f4e23ff6

SHA256
540d572e53bb309fbf32411ca6bc13802df63bd7dbb471ab37d49a756d5042cb

SHA512
5fd8e72d53cfa546f2fbd3892b0726dd5563fb6ac6f1948414927456e2cdc34400741d6d851068bb01f49ea26f7797e968dcd1b19d812b64f962b01aa890116e

Download Submit
/data/data/com.zhaoxi/databases/hmdb-wal

Filesize
16KB

MD5
a66e92df0a2b9bd1da80fb3621434493

SHA1
af7cb582b0d2af3600ab881c95c83d17a4cecd8b

SHA256
2094e1d8c966b2d086146403c3030b295ee1deaeed04cab43a565159fb21980c

SHA512
c6f65ea22d5000c3016b853235d536aa6659aaf7d7cd95d29ee43cdfde34bc7a0ee6dd945bca07fb343aaa3cb90514fa3153eda911abc9b53719642cc80e3958

Download Submit
/data/data/com.zhaoxi/databases/logdb.db

Filesize
36KB

MD5
a7b5debf648af8527d38065f285c6754

SHA1
ad8513c878ca1483a2472c7f8dfc8a416418517e

SHA256
0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

SHA512
c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

Download Submit
/data/data/com.zhaoxi/databases/logdb.db

Filesize
20KB

MD5
afa1f7d9ff6cfc0668c01fb7323da79a

SHA1
766a30eb022613f6c6dd60082bdaad23b41c98ba

SHA256
3f558b47774e4eec41c38960126b40d1465a101d8e4fafd2956cba5b489f8f7c

SHA512
c5cd2daef84a2e652a6476814cc995941179b629541f75a50369640548023a79daa3a5a86ce32aa52cf4fb40f68b8b5e8b0b11ead7e05f552f479c3069518550

Download Submit
/data/data/com.zhaoxi/databases/logdb.db

Filesize
36KB

MD5
60e918a66670488ae5e111bdcbcfa95d

SHA1
ee81e2f5ad9a7301adfce5999095370e532a43d9

SHA256
0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313

SHA512
1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

Download Submit
/data/data/com.zhaoxi/databases/logdb.db

Filesize
28KB

MD5
88c9452656fc0fb6f6cce89b9a4b5ef1

SHA1
136ea6d22c839055d3375bf714b4fe6880ade9e7

SHA256
6ddefd69f126b48fe3ed677807e279a82ef89b3d35b8f7d991b10a69cb77e17d

SHA512
c5e04d40b1973db13811314b51e7bd1346facd3580cc1639cfffda51970f6254279e1aa21cb484bf703813fd1a648692d42c8edfa1c9326fc2a2689ec808749d

Download Submit
/data/data/com.zhaoxi/databases/logdb.db

Filesize
28KB

MD5
137adc28fd0241f784eedd54dbd8458a

SHA1
72e70daddd38e4ecd69f00279d80b4a18ecc6a29

SHA256
451ad5ba94b9600cae0f21034023257666f4853d063feee14a25f52e356a1415

SHA512
4840f6caf21931e0e236acb67695285510d7cfd0b06e96cf7f38db047a3861d75094dc081fe45a0e51b97fe27bb4a02982cf5553982cff0cf8a06901fb9411f8

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-journal

Filesize
512B

MD5
f9e335f5a341727c99746494215f02f4

SHA1
9c95195921267060073eb5a3189e2d95b2a4b839

SHA256
d0d9661dab37b1d6f02be8be84e74440df408c78455650123a6ddd68fa5b6eae

SHA512
a2b841ef46489e5bb6d8f821840395f4af9ad1c4c0e09661433e70ec09bcc2635cdae69630fa2a4657cc54f33ebe57ff8fb361a67eb0dce3164e037819fe31bd

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-wal

Filesize
48KB

MD5
a265943478b811bef261b39e5dec1e07

SHA1
158acae03b66ae4493a213098e99ad8dffb4bd09

SHA256
3163d79e3f57b36078bfef9d4d2e42d9d5868fe5015a8bb445b1a955130438dc

SHA512
62351761643ff6bc11edb494e4f9536ebd515d35615bb4b386a16855ea5ec32fd4398cbe543ae0783e14fc140d9bef01292dd62b746ca7062bf919eee6161bf1

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-wal

Filesize
8KB

MD5
077356297c572e1a2d01229190815e3c

SHA1
d5c97df75a1a37255a28ea054d61d943c4231d23

SHA256
dff1a973d590f95fae511a2aa53c5c16c9dcc5da396461e04ceaa2d67bd2face

SHA512
40ba3e9d74a65d438ed1229375f1347447df28d0937bcb001a23b3decaf036ca4c509a0ed88ba477830b4c99cc65f49a65e63312575006aef658062430856bd9

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-wal

Filesize
8KB

MD5
decfe2dc7fb5b3dafe437f705f8b6965

SHA1
c0c1be2d9b6cbe7e4fcb592d8c84b308d4eaf634

SHA256
eae4f1f090786fcdfb02d1d2ba02e087bcbf14a4a6818175ba0b170ab232611c

SHA512
de2d494c1e688e45d0721d89605c1d7cb7b115970bd670c010a8c2be99ce565517ce0bd210cbb1010d9b8398a1a05a1b0ebf507436d99dda1a5220ed53cdf55f

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-wal

Filesize
8KB

MD5
d308942e67cf8f01e79df7b4908404c0

SHA1
d9752422a4387be1acc9205a9501e5f42ab62029

SHA256
3452c94ef9f3c81751c170b215e0cba9b23cdd67359022fcd4fbb95f5f99bb84

SHA512
1dad8cd430aed53f85222578e6fae437a27b3fdfff95c11bd0521823c8bdbbe7d0676289b99854797d9f0560e3596dba0e69486f1ad15fde27ec549276a7e824

Download Submit
/data/data/com.zhaoxi/databases/logdb.db-wal

Filesize
8KB

MD5
1cad5eba94eb32cd590b85f1fb1f0113

SHA1
3d518d6ee9c67335f799db2654263b40c242391e

SHA256
e6d7112176b9544fdcddbd86155f21401d5fb8f0b87f064d850e1883e6ab07b4

SHA512
b2c88f62d09a2376b86ee6680dd759162f17c38dc424fe66506575e6182c16771ca3087aea7a0c4cfcfd67679203010ce41103c7b36bb1e2abd3cb0a6d12f7f8

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664D4802005C-0001-10E8-D8F02A258E4FBeginSession.cls_temp

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664D4802005C-0001-10E8-D8F02A258E4FSessionApp.cls_temp

Filesize
32KB

MD5
084c778cd103777ff290791df0a20e70

SHA1
bfa91711856277676aeb3fef147b9f67db39e823

SHA256
7d15e01a43db9f8788a25261f0d1c9bdcc665b554d6200f6131792736892d8f2

SHA512
683819f36a27719c57b808d2611f217868b48e29fee36948fec28b15bf630271ec7fcda8990cdf06967c64516e02ad3a29a6c706eaad20a9355815425cbc028c

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664D4802005C-0001-10E8-D8F02A258E4FSessionDevice.cls_temp

Filesize
131B

MD5
529a50752376c11f331c0e6053d762f2

SHA1
08dc78ddcbffa1399f7698305c211e2d5d6d0382

SHA256
43fb86e0ba71a791d2374b2584f4ee22fdd07f47661a2ada2a3b5447afdab61b

SHA512
b2a4f0fad3f54d526d9efe576b7506dbe50e95dfdebb56e65fcf413cf0474d5f74ea9a7e12d3724aed797f37439fb1c10df67346aa9a0849649374258ea5edd4

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664D4802005C-0001-10E8-D8F02A258E4FSessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-664D4802005C-0001-10E8-D8F02A258E4F.temp

Filesize
327B

MD5
6e423f59d8265f11bf87fed8c622f76b

SHA1
e7764a94b1ce92d4978989bdb3e564314bfd754a

SHA256
09f3104257dd82ccb085fea77806c416b87b317f73b34874610dee5ac1f9a427

SHA512
18025d3714f35437acb65d8b44b79cc9425dd6b61b0953f80a10b28345e619a64b957b3897b25607ba80e38962a4faf370f588b5665bd5b27e2f036a0d671d47

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
3KB

MD5
08d9f804457ce82a4fdcc059cbaaf3f1

SHA1
8372396b9967e969b4305d3283a593bd092aee9c

SHA256
185bcf34c026af1156cc259b835a24b6a9d3ffc334fa57d16145baf89031dd03

SHA512
5ebfcd75f46a11952f6a664395361e4f3e1116961a5a96965f7f6927b44fb86ba14019b4ca0e14b2377f441801fd1628e0c7f5fd0c9d2f2474652adde5309fc5

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
181KB

MD5
92748f3beb8bc5a833cfebe1d31b471d

SHA1
2146c830a509138e646774d32e8bbe8e8bdb44bd

SHA256
2da853f7e3b310c79647336f19b645c207b9acf119bf593ce3fa6f141fee6a6e

SHA512
e94b65e6f4a9fb43a20101f9e9419d5bb08afb4d7b906358c27acf463832015e030990058e5f6c0c89fc86f6aa83dd9b65675ad7cd76e71c36e36bbf3e25785f

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
80B

MD5
b00858d6f1c9dcd60c73d23a38159d0a

SHA1
4e67c54da9d5ecf80739b9d99a337836034cc18b

SHA256
512534b28575404f0e7daa679aed88683745413d078997e335de0694b2eb3834

SHA512
d06357a6987cfec12be14b3150aa514f0c64419ea950944f67bea7db2756f67f9ecbabf46ff504353f40e08aa76c4a65470fd05974dcfd373ded114264d5fe41

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.zhaoxi/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_ce082658-2594-4123-8a74-e74c7d724b4b_1716340738287.tap

Filesize
371B

MD5
8ed7c0248377883809f0ef3bfcdc8c24

SHA1
ef6b2e751b102d7715ccffe20650ecfb5a97549a

SHA256
f8f457903218345ab121010622c3316c827670c825a955dcf32c1075d8d855c8

SHA512
630916efab6400e8f5c5e27067525652f6673daf0886987d3c65f34b0db9714cca4f9d9f74aa0a4d17d0f2c958fab902de2fbefd5814589bf15a91668992a684

Download Submit
/data/data/com.zhaoxi/files/.imprint

Filesize
999B

MD5
bef6cb8118ee6ae41f4a881ca3139381

SHA1
24ff35f34a1c6fcc44b8dfb0f0b2b3e94198c030

SHA256
ae0c6feb110f99f2d1e600f80acd79b10feb315927d3b4839b0906f734ec3f27

SHA512
cd8480769095a4068e1ac360e5dd28b5ce3204bd38d79e64837af4c551082126b2dccabcc8dae26a261b5bad8af4fa23e7d98b467655cc92b180df5c42472d8a

Download Submit
/data/data/com.zhaoxi/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
49fbfeb0de8bf9d28fa000e7362351b4

SHA1
a8b0e19db5d5b3fb1f77622fd7e66bb17f669a02

SHA256
58a5d48076582476f4224852671d2a1311233592e587a978adb4f3fd859541ae

SHA512
6ad26bc6ad64a0245cd9fc1373535d5d2ff0a205e938a344990fe71eefea09bf89e91b306a71bb485459e8dac1514b9c273db2138d7f87dc3171e7e26f3c1cac

Download Submit
/data/data/com.zhaoxi/files/a/b/937e4ee2dc5c4b6d5906e441e29e6428.0.tmp

Filesize
1KB

MD5
34c9a05fd18b84a3947c02629ee96571

SHA1
7f1cf8be6293727c4985d21439c1f637d898c494

SHA256
9ef28e94bad63a5d6a071093a68a1747cbff3f8eb31230a924e8063600b962f6

SHA512
c238c238de7b0ece4e9fcbcba622e651e3ec252cb6666f8515b3bada96db9ba4ecadb8cee6973a4f0624281904b082bec8a149298101938735501801073a1f96

Download Submit
/data/data/com.zhaoxi/files/a/b/b1a3be632bfa9abb31f87d27994cf68f.0.tmp

Filesize
1KB

MD5
15fccbccedf3700ca46bb298e8cf23ff

SHA1
36a2dcb3e694809dced99e78b3e69fa7b44b30c6

SHA256
f4e6f5965551df41a953afd59566287764b6ef97b2a2652a691566efa964895a

SHA512
090128695287ef46f1c5ac43734cdb71e010e910222db3f42ecfaf6f74b89e2e56f35df4b2c3777860c698c64cd3c6e7494b992123dc45efb8120c0221f4fe8a

Download Submit
/data/data/com.zhaoxi/files/a/b/journal

Filesize
114B

MD5
44f9f7727478f00a9106f8e9ffbfe862

SHA1
925e3305e41afcfe71f574978c296304190577ef

SHA256
f90a2cd4514f9ec0fc3831a3b4c5a90c55cfd42516c397f9e716369735444cff

SHA512
29cb95de3936836cd91cdeda77be23668f61c85c66dcfef8f33dfa9644977ccae8f1e6813d5c54d4fdb5185d02683dfdd52e3325d97b45e6c74e809ca2bc8a83

Download Submit
/data/data/com.zhaoxi/files/a/b/journal

Filesize
197B

MD5
997f80a0e488a3af0d19721d39ed6840

SHA1
cc733176e071a9ae30a01df41ce7a4d77643db07

SHA256
2f622c2ac8b7c895a26f80a7c78f7c2741c7eeaaa7d15f20a6d9c5c272211989

SHA512
fd3abc92efcd3d31ab1d28a7261e00b0a663c5d7acf3e3c0e1ee8d5cd7156bfbf4f3b2c6c7effb181f41555450d9e69ba4a70badff3f31eabc63cda1e1743ed2

Download Submit
/data/data/com.zhaoxi/files/umeng_it.cache

Filesize
415B

MD5
9a0f51ed7cde49c682c82bd18cee6e60

SHA1
0888bd107ea1e69934903fc4ed650ff365efd464

SHA256
f1cf1e2861db4b76f9cd4598d2996e01656fa60f4292a8a271ec96260a37a355

SHA512
460ce65042c4b6a66fb0c13435a38e1eb23556afad8861571fedd78f6983904d19658e34a32959de71d6908b7ea0d1b6c137c7765b14643094fd6d73d57221f3

Download Submit
/data/data/com.zhaoxi/files/umeng_it.cache

Filesize
211B

MD5
523152f20608bdfa507a9d3c32b0036e

SHA1
ff2097f9f162d4472fc8c3bd0dd8751fe0965dda

SHA256
fe146e3ff0a5673a237c3af1433252002f61e3aa81fa67e6b053d9bf84248389

SHA512
e37b9df9cd139987049285966f8900c58a7d6f66298963d0eecc86d5d99f7145c51d2f3a9fcddf46f9eed36b0c7be02060c939aca1224143b67537f5abd7cb4a

Download Submit
/data/data/com.zhaoxi/gdroot-g2.crt

Filesize
1KB

MD5
79ddbef247aa4276e7c0e591772c2b5c

SHA1
dd1347c787256efe69747205b85c656993b3f2c2

SHA256
8ee5a22bd291a5f53f9dfbd68af8dbf1984b6b91af9eb2002ff433fc653a2015

SHA512
8c62980177462b1db248d34881a64f6003b8d4a669e6a20d7d3bbeebf8a700ef49242060bc3d0cbc0b3fe32257fab731eb1ebd3062480b0b9c66658a26d985e0

Download Submit
/data/data/com.zhaoxi/zhaoxi.db

Filesize
85KB

MD5
4d3e48692cf0fd16328c361a0d7369da

SHA1
a4a8d7bf9f044827ae10202f54c7e5bb76b3c649

SHA256
e1565b068cd92419657d1379d9541c93bd7d95cb3e474377f7e1c6cc9aab512c

SHA512
cec0206dba27c9180fb866a752c2068fb53220284a793695a29fd11e180b037eec068cdf05b71869d22040767050691864a4cba8af0ca25545b8432eb05a602c

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
512B

MD5
b14277a01510ba92f801e3c28f179899

SHA1
8846197d22cd87891bdf51ce1615b0990a68c089

SHA256
d3fb22fbc56fb28e9eac8761986f3dabcb9ecf5822e0401b98cfa85a7e329fed

SHA512
4bcdaba6e7ea471e30226c7d8c74d49b3ab3a886f2045632d2b677312418807d8f3c86d7b38dcdc650ed1c6ce63eec8bbef7906777cd5b46dd8b61825927444e

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
1KB

MD5
b1d72b6bbadd6a090b84929141ed047b

SHA1
ed05cc53dcdde184ad98e046016b4153fc948c50

SHA256
bff09570f998a6392c7c1e78b0ce68c46ae923e42d614e918a92a24a50710415

SHA512
2f9299ac492f3c662bee522b464e05ef9bea1ada08fce0c27da7616c41b06a4a2847f6ad714c16b2d7b30377c226f978ab5fcdd816a917588c69be7598027861

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
1KB

MD5
39c2ef80c03826bbf1b65f3f216a17d0

SHA1
784749b4f6e6177287ef03d273465cfa0a041afb

SHA256
d7ac8d9b1e4c86bdc1c91f8a134b5dc09c4a5155a2ccefbf2f7b4d92e3626185

SHA512
48e8ce39b06115e780f59c4c30d7eaadbcf85210a6919b5c1b82539dbe82b58468f93e8af0d5829ef724544530d799965df09bc6cd605a7c74dd2e0b65a76656

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
1KB

MD5
f55d2ba60717c61c088ad3943948a99b

SHA1
93e8cacf06a418267cf70db74aa64bdaf8196973

SHA256
c8ce382e925479921d7c1ec920d3362c2fea31593cbd171794b6c9a5291bd770

SHA512
e3a6260f026d3deee348b19ad62c70ae29bcc80a78457a9801433cfce2b9f82907ae4fc5da1de753c548c3084ae46947760e9a9b8b0916cd7616c3c3fd571454

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
1KB

MD5
1a1bad08a3d2d0b282b9d5817958559e

SHA1
e114d42dabd7fdb5603c9f991cc82f1f11d1ccf7

SHA256
3c54fa1c6128d65d960d628b27829abe2e2a2142cd7c06d3c3c15b4b0cf91bcc

SHA512
97a8e464b767111345db54c6478f4df0c6056319aa4fbf88784152ba3600cef4ab3d50b47967fbf3bf5a229b7b7501d2a9df56adf9d89e4354c5ba720f1c5334

Download Submit
/data/data/com.zhaoxi/zhaoxi.db-journal

Filesize
6KB

MD5
d2db6b129f58cd1d717c5079b622c6bd

SHA1
29e94c5c69700a3f4dbafe6ed532ab53efb6556e

SHA256
9ab270faf143567b2b25241e66f8c6fc649f717d18b9fb8260c00279a83b9366

SHA512
48c73959752c0e6e311446055347ce90ea2726c3799044e8b24f2a0d26110a4cf2cd331a3af9c89932b282006dbe013a8aa66186f2d5a80b45d52af78a0cbd5a

Download Submit
/storage/emulated/0/Android/data/com.zhaoxi/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db

Filesize
24KB

MD5
6999293712000d597b4cf4f0d42316fa

SHA1
ce64c005f5f516ec4c491eabd907423b0fbe2a1f

SHA256
3cd4e50816e59adfdddc5d5ea2bff7068bf6fe711302b4820f6a79f132f0fedb

SHA512
8638503a6e9c40c8025722ce266ca4314804c7d74546938464253a136f230921ecc990343541f481d317c6823ae519a5a33d279b363a1457bb105a6de49656e2

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db

Filesize
24KB

MD5
a22d9b53bda0f7778f3d24257fcf4441

SHA1
71a3202820a5d72b61c6a9185a225ad483faf94a

SHA256
888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982

SHA512
5e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

Filesize
512B

MD5
ba273fb3921e0ba9eeb049f58c4c52d0

SHA1
21cf05c1e290f2b61dd15e4aa4c9f6c54e7e271b

SHA256
b571851a955a295eef89611698c444309461888ab69eb627554ff7b41357f569

SHA512
77297e2e84b10ed422a06199e3e52e759f1e41cf861f8e8199b4ab3ac76652ce674f69d1a52577022bdeffef5600092258e63a60847c5a69309880b55a4fd24e

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

Filesize
36KB

MD5
418a94f3701324880ec5e947492eb6d9

SHA1
cbeefa12b910dd4b09d4b76a6c1af614ae4f82a9

SHA256
be550dfc278915591e98e6fe61e910ee08507b6d20bab5bd2052a656ef92a76d

SHA512
1974f4c6dc90d22653ab454b16972b589d10aec218520acc55ba1e746bddece60a114f9666547be1e8a8110abe49be30f31649492f36b8db672f4f8b5391c0f8

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

Filesize
8KB

MD5
243fd90598fb644238ff5610f82a3a41

SHA1
3ac108919b97988653d3dd9a7e3af9efe2241c52

SHA256
a90f83c9ef6269fbe737400e0570f03eb94d5ca1931aa73552101a22898c88a2

SHA512
9e734816e3aabe61058b0d2b54250431e656f5164a9fec12b6d942eea25647fd9bada72f041ca53974b96626697a5accdd8a3564ce15406b9cae45b675a777f1

Download Submit