Analysis

  • max time kernel
    179s
  • max time network
    187s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 03:01

General

  • Target

    65c930760ff1725296a5540b876f2d4e_JaffaCakes118.apk

  • Size

    8.6MB

  • MD5

    65c930760ff1725296a5540b876f2d4e

  • SHA1

    59fbd48e1e544236867fe0e56dc252d01c52a54a

  • SHA256

    7d3c97afbac25ca5e481e4b910f9692761386b988215a2a62cda5f405703eacd

  • SHA512

    ffd7a169258f78a6890b4398a88a6419d7d10fea3a862d82fd4ddc7cf94f00608550bea611e11b476f117081ab95a8a0d30a04444b8e790c25b3d302fe86e977

  • SSDEEP

    196608:xpB+OgJ1xn0QGy81oUrs5ngaZkswwSj+QPw2+:F+RHn0XVoUA5HZwVj+QPw2+

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 3 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.market2345
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4270
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:4342
    • com.market2345:PushService
      1⤵
      • Queries information about running processes on the device
      • Registers a broadcast receiver at runtime (usually for listening for system events)
      • Checks if the internet connection is available
      • Listens for changes in the sensor environment (might be used to detect emulation)
      PID:4318
    • com.market2345:syncdata
      1⤵
      • Queries information about running processes on the device
      • Registers a broadcast receiver at runtime (usually for listening for system events)
      • Checks if the internet connection is available
      • Listens for changes in the sensor environment (might be used to detect emulation)
      PID:4606

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.market2345/databases/blackandwhite.db-journal
      Filesize

      512B

      MD5

      9e68de0688076dc348433874f9d310fc

      SHA1

      8824e2686a195a24c0082cc9326b608d97fb7a6f

      SHA256

      eb941059957c797953aef59380f592f53454c908e2a1dac36fef3527964028aa

      SHA512

      d5c0140f1013a60fe4fc68dd3edd78812605ba5ecc3ce4712c1109455a7128affa63c8d8c262d50f75a9476bdef2f96e95d1e398e18bcce74ed605210e5ed916

    • /data/data/com.market2345/databases/blackandwhite.db-wal
      Filesize

      36KB

      MD5

      1130d4e576f6607141031f6a4fba507c

      SHA1

      93ea81533c121a8e32bc79dde7e10fbe5d20a83b

      SHA256

      974746ec3394b9ec912adcabb7f9c30cb3253ee770b4e7e4bf2649fbfd0ff2b0

      SHA512

      c5ccc68e93b681b798a0dca6f0ab0915f96eaa6eead81616e2fd494b05dbeb6ed5774a8a1c0b9a9d9df5d30b99bfbe7cfe8b5d28b849a77778ae8dc2363e0d54

    • /data/data/com.market2345/databases/cc/cc.db
      Filesize

      36KB

      MD5

      5d7ea1a23af19b4340cc8d90f28297d5

      SHA1

      4cfe95b23a9e98378d69c4290af81b51fbe76aea

      SHA256

      474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

      SHA512

      33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

    • /data/data/com.market2345/databases/cc/cc.db
      Filesize

      36KB

      MD5

      ce6135aa1b1fe4f2c2db2a546d2a5558

      SHA1

      79b59582154017aadab783dc266fcb158c252940

      SHA256

      7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

      SHA512

      2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

    • /data/data/com.market2345/databases/cc/cc.db-journal
      Filesize

      512B

      MD5

      804dcd0ce759f7c429ca5f1199f1832f

      SHA1

      cc3f5f49cc8129c450c65c530aa8d4c34d784df5

      SHA256

      fd113c6586dbd84d4e155ed9f98e6edcb9720cdf1f1fce641ef3e665a1a41bd4

      SHA512

      c883f2051801841c75ae9ee57d78e4803a558100dec55f750bdf6d5b8f8815ec6a3dbbd04ee5835b4b4f24a36938117de2a76bc4974f5e21b4175facb86bd6ee

    • /data/data/com.market2345/databases/cc/cc.db-wal
      Filesize

      48KB

      MD5

      60554e9eaa69e8044a1358a989e8f192

      SHA1

      b057362a08b8eb8f3e074d95901b5a73f4e34323

      SHA256

      c40d3fd8e5075525180a020a74e0ec5c466f60a604df3b2729372ed97b1d8481

      SHA512

      ce88be2420ccc683a5a221c2d45dffcdd4dded87ece5f0e000825211c74e85f2772b06b2e8058785f22ac3b04b1db5d507a910e3c4e8f7a8d444ac9d4be8064b

    • /data/data/com.market2345/databases/cc/cc.db-wal
      Filesize

      16KB

      MD5

      8d650a7070d3365d4c47b5dda10e0738

      SHA1

      fb4ddfd463dcace5b457d636caf4622ec87b49bc

      SHA256

      c3f1c21858c7093ab1671208ca3e314f46c8d2d8807e340e01e68f62b19bac8d

      SHA512

      20116e0ee1745d44b3fc36958deae13e5318d1098e97999ac4bdb6d17f35edd3de5fdccc7d4332358ae7e4b7badee92b93d7ca9b6efc934954356f29bdbebae7

    • /data/data/com.market2345/databases/download_report.db-journal
      Filesize

      512B

      MD5

      93af08bc1ecdaf4d51404cc934b9c4c4

      SHA1

      6b565334ad50b54021160627a5bf399f898e1a48

      SHA256

      632233f18b53c2f5f16bc97c0209ed667457e3e7e331b16ac0ea18fd30c998b5

      SHA512

      346d822f211db5527b5f4d57294eadf8c510f8d5e90b2abe5ea5093d8b26e1cef52fafaa09f9d1883c272e76428545957ae3fa982e6f32a2de3b520507b321f3

    • /data/data/com.market2345/databases/download_report.db-wal
      Filesize

      36KB

      MD5

      f830aec51528a60d1fabc3560fc447cf

      SHA1

      5f1354f215a8c82450ea79fd1dfb92d3787b1c1c

      SHA256

      beabb2a26c9309a6efb84af3924006c73192d91cc6007700000ec867b5662632

      SHA512

      bfa10cfe9836042f4e5f3fbf6b5a2d703f82f1b06abdbf13a69ea13534bb2fac1c00bf5832f731df678c5a4de36dc6d456eaabc52527445fecbb260e9da9371d

    • /data/data/com.market2345/databases/downloads.db-journal
      Filesize

      512B

      MD5

      7624763aa587aafe78ab18c358d5a1b7

      SHA1

      c7c636c600e2050f87e17a96f4bb433ffd092bb1

      SHA256

      fbb7785edbc401a788d95cfbd5ba115cf664ec6975ed2400fe5ba62b77cc6618

      SHA512

      a094f15ac892bd5a6ef7ccb2f65c6fa8590e9c838bf4c8cc19fb40d7c394767c74c0cec4674d7b105e576b1fc85037b9ac209c822fd3265a4157f4e35ae57501

    • /data/data/com.market2345/databases/downloads.db-wal
      Filesize

      32KB

      MD5

      29fc9c64cad3a41c017698db83c45033

      SHA1

      1e50620b35c6162aef2d09898462c4adc13557e2

      SHA256

      ab0f6286a4fb7d6a4b2259f2bd431776e3c0a56aad0b970c3de34a76aad0b869

      SHA512

      d357542301965bb5024c720fe50ac337dfd37b62ec755395826e759444ea74dbb4a3d43ce33c586c03634384b991a6344579539dd8c5396991f25fb19d59ed14

    • /data/data/com.market2345/databases/hmdb
      Filesize

      12KB

      MD5

      3fe30614d7e0d11db870b4624f6c50e0

      SHA1

      053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

      SHA256

      67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

      SHA512

      c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

    • /data/data/com.market2345/databases/hmdb-journal
      Filesize

      512B

      MD5

      9df25e372d27b6e13797ad430824e783

      SHA1

      0a49478ccd54759f255f741eb1f9097e8fab2e32

      SHA256

      1704cecb344492933abb40121aea99a2f6b8d937c054e72ed8f3764d19a2a672

      SHA512

      8c0419bed5ff56b769273db35fe971ce8f4680cc3dd68dfa85f823363443a343bc3774afb254dfffda402d3e2ddc7ae5f72948a055679ed31df5492c3b2aeeb4

    • /data/data/com.market2345/databases/hmdb-wal
      Filesize

      16KB

      MD5

      39581207e706c0b8d2116e6a0de440c2

      SHA1

      7a4be1009bae727ee5e3e68df50609479e46d4a3

      SHA256

      0542156195e38f96d6a5b4d1b1b8ca11eeb54eb97398d6f114ac6667a38945ae

      SHA512

      d2c53426f897f8048ede1ea264ef954b1d818ed0f9b5f0482b829c01644d088e424b2c5168edad5ad680cd7f2201fd57871534bf5db5e1e52b51e10f09c72a4b

    • /data/data/com.market2345/databases/logdb.db
      Filesize

      36KB

      MD5

      a7b5debf648af8527d38065f285c6754

      SHA1

      ad8513c878ca1483a2472c7f8dfc8a416418517e

      SHA256

      0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

      SHA512

      c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

    • /data/data/com.market2345/databases/logdb.db
      Filesize

      20KB

      MD5

      125e3d456d077c4c3cd3916e9cf5dc65

      SHA1

      934fb93f476814ade59c5c9a18de3f8f22406947

      SHA256

      a6d571e7b423fb2dab3ede260cb56832b750908f0a308efba9f96f498d943bf7

      SHA512

      f1e9f40d49291aa15e87d896d7dc17f182a49204d517ed4c47858d1585823afd8f2540ee673c7807233b4f1e2fe15347d49bf56de38b6b13ff6fde4b64677e96

    • /data/data/com.market2345/databases/logdb.db
      Filesize

      36KB

      MD5

      60e918a66670488ae5e111bdcbcfa95d

      SHA1

      ee81e2f5ad9a7301adfce5999095370e532a43d9

      SHA256

      0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313

      SHA512

      1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

    • /data/data/com.market2345/databases/logdb.db
      Filesize

      16KB

      MD5

      6145b1c2ab1f50a9b50c1d586c83ec3d

      SHA1

      378a40617df4d3dacfd2343e937bed9547de02ea

      SHA256

      5aa6061609f7bba92b475d340fda246394853a28584f1b029262eb13db26d284

      SHA512

      1d4df84fd6362176f491ca487a80504e7538005d83f19eb696a99794ad1936b4f6f32e10310e3bbb93b8fba80cf300ef296579d87f9f734a6eae0777f5482b4a

    • /data/data/com.market2345/databases/logdb.db-journal
      Filesize

      512B

      MD5

      3b88e392b9337aa7c8ae7057f41c5496

      SHA1

      9e6d7378ddc4b0cc2ca8735f6ba904f2cb43f0e2

      SHA256

      755e1b3648505b61f6d7ce4c314de5a0e2a1b0793ec9a5254e496eddfea80cf4

      SHA512

      78746904abf536558fa383f5024b1f78ae9b0ba4fffbbf4dbfc669ea1d1b2ec040e64cc603ffa8bf281eec045317291c87bf670a532d0b6db29c281d198f8f1f

    • /data/data/com.market2345/databases/logdb.db-wal
      Filesize

      48KB

      MD5

      e4ff6bafd8a1597c7e4de8e20fd63123

      SHA1

      38c8a55c95cf904506c3e975a189c7744868c050

      SHA256

      e18aef55b460d697dfd7908670eef7b16d560889fac34ebe856aab71365e3fa7

      SHA512

      0b95187ca8c558793983183081b37b4a9e102d627ae2d87df61d94007112a6f8f9f3cedb995f244e0b45e035b3cc9de25235cf6ddd9b26c130641b7cd9dc8ba2

    • /data/data/com.market2345/databases/logdb.db-wal
      Filesize

      8KB

      MD5

      da4ee5e0acb59989f4124b5614e5b333

      SHA1

      2aa906f6c7e4eb22d8176ce648c86328612e2d06

      SHA256

      e368dc98690ed29454b2396b613158319cc7f625ab61c2220fbc1884a13231f1

      SHA512

      52e591bbadd78c4835a4b949cd450a8f963fd0f33b2af60ada236b7c33d4887aa126e18f2a4453eed0d5d41923cce09deb227cc05a90f32e0f4027992d5d6743

    • /data/data/com.market2345/databases/logdb.db-wal
      Filesize

      8KB

      MD5

      e4bc240490ded5ea8f88788ec4edcc33

      SHA1

      2cc3f7352f878c43ef28859e51666672d0fe3be6

      SHA256

      c81539f33d32047ee371ba6d9a6cd4cad745acf4512ef599e6f2800f55e5d474

      SHA512

      ae0edf11fe019cac15a25a35ebb784e0aefbe230c9d63ede7479adc55058aceda60e2871a42154182b91011b4107a7920604595273bcd15910f0352ec59de5d8

    • /data/data/com.market2345/databases/logdb.db-wal
      Filesize

      4KB

      MD5

      80c8f4e551b4da8fc1efa164a2ef4d44

      SHA1

      821a6b86de15a130df95b51cb183e94f3722444d

      SHA256

      459214e28f8deb4da25e0a2372a886796c5bd3936a34c435ae67737f638fc721

      SHA512

      18ba7b16c27379b70f8e8e792d6dd2521770321c1311ec6101161456befbb45da8c8b7da45de08fe00e311511179ce22ed08dcc1ceed0cdb6ed75e4d74d85c11

    • /data/data/com.market2345/databases/logdb.db-wal
      Filesize

      4KB

      MD5

      b73c49f0215b79d0acf81d71e60152c6

      SHA1

      5d5e1563f465393e70392c933920b93d169158cc

      SHA256

      0a604038b00eb106f3cbe3894863831dca2dccc48af9dd9cd40fae1661cfc53c

      SHA512

      0feeeca03c50fbeca2770c5ee0ff53aad729ee29700735e0aca1535c611820bdf7c7a564096c9a3ae143bec4bd249468aa9c427d618a3f4443834cbffb1d6789

    • /data/data/com.market2345/databases/market.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.market2345/databases/market.db-journal
      Filesize

      512B

      MD5

      e13e65e12cb742deb66b82d9177ededb

      SHA1

      16169c815c42a19c2c4908e02f402927aee7622c

      SHA256

      1d1d53d6386e8d8fcf2503857298b7a7470fa32f4f17608ff381c085403e1224

      SHA512

      f2f35f91b2ae0ccc1225b54dba775c4b8609b2ccba212e9e59f1de0fe6c238d72f3ca4b80f0852a14aa48d51a0d7d322b9164f0092feb7b3c47ccf6ef0cbbe9f

    • /data/data/com.market2345/databases/market.db-shm
      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.market2345/databases/market.db-wal
      Filesize

      48KB

      MD5

      fc6076165619bfc181c2d31c8e02b024

      SHA1

      0137f04564b725d2a48127ea0ab951a376e4c367

      SHA256

      7b0de093e300331b33ae03965a72c2ac02b27ae8a191459275d979beaeafa23a

      SHA512

      b7d2c0c5150c6b9ca191f17c89ebf0c49fbf8d96e8e6631ef1b7e3153e65487409d2fa02269b7d0c0175afce710cbd7d05a3daf420a088d3efad526c49c6c392

    • /data/data/com.market2345/databases/tj2345.db
      Filesize

      24KB

      MD5

      04f23255b1566f768efddb881ef42fa2

      SHA1

      198d015f513423e92297770663bce410bcfad17b

      SHA256

      7f1a4a31f497a6d05dc96895c618eddb40d04e505dfd09871a9be3743540455f

      SHA512

      ad75b3bdc6b97b82d995471d195e9bda83b61d1b161079f32f19c35f0b053d16690a26d73ac76ed13fe2f7e7cdf38718acf79d4ead1abb7e22b2ba8c4edb6d8b

    • /data/data/com.market2345/databases/tj2345.db-journal
      Filesize

      512B

      MD5

      b8dbde76530b169d7857f68c8fe20b1d

      SHA1

      5a5eaf88f8ff3b654f677e750d0b8b6cd308a501

      SHA256

      c4d3dea0cad9b68a30d04fe5b31ba0b4678c623563131b12028c0d170df8c65c

      SHA512

      16447a1305b7c20d17fcd58cfa14fd911e2d2c5f375c26feb0f6d9b64651ab615a4e67548814afbed3147176bb8f911bde3c6e18f29deed5967f730fcfb4dd9c

    • /data/data/com.market2345/databases/tj2345.db-wal
      Filesize

      36KB

      MD5

      f667b2ea3ef453d3e83a4d02fec88b39

      SHA1

      7833cdf6a5497e97fd88711e240cad571ac127e4

      SHA256

      dcd9320fa28ebf2f42ae273e82e5c71a4592152633df9fbc71dc4f020aad6b87

      SHA512

      63409475a2b96ea0ab2cbc8bf48af62fda36969fe81e48c7b229610801e74c7c954749b144428b184554001ccb6d736f358927cfaa029c15cb862bb45de6e4b2

    • /data/data/com.market2345/files/.um/um_cache_1716346985287.env
      Filesize

      1KB

      MD5

      428a4ee4a6e34ca3dd7691c99bf37dcd

      SHA1

      52477dc6d53fd52ef0cd0c954363abcd66bda712

      SHA256

      394e506885a574d07531b22dbc703f109aea559f3218700d1a975c8339c6eb5d

      SHA512

      95b04d2bb379f318f30c4f33d998f793e6ff8fb13e34300fc4e5efcc8cbf35e6eb8bb0a0c17b100dccb6010dd2508e5ef0973e8b44a6b3a12d7a094e13d000af

    • /data/data/com.market2345/files/.umeng/exchangeIdentity.json
      Filesize

      162B

      MD5

      0021b20810395e569d8003016a5525d0

      SHA1

      144c5d0aeaa8f80a2d50b6f62de87e0137544741

      SHA256

      7be6776ef5a908780705516a01b0bbb430eb7a703dfca14351bbaa184fca9f05

      SHA512

      c2d8218ee57e84023885435a14417d12ed5175413ec447411a26d354eaf24a1a7d63fc4f4769a07ce1ec311c0e33abce614ca1b0df3c31bbca5a4df35bac5970

    • /data/data/com.market2345/files/a/e/3991042387600.0.tmp
      Filesize

      75B

      MD5

      39e4591c960e4b7dba7c8a21b2c7ab83

      SHA1

      7fc8896f4b955949a48d6f9a8b21ca1edaaa82dc

      SHA256

      894c6a0c22b33e132bb2e801f36f408265bed0ba34a7c65bad4932615d7440c7

      SHA512

      8a642b5fdb03f30f79490b2520e1daec9d934e8589b4ff1443aeb02c13feb07611a1976237c5aca8695ebe9a18f3a1a2b81384d7c5b82220aa0214f80fae9046

    • /data/data/com.market2345/files/a/e/5891017628600.0.tmp
      Filesize

      69B

      MD5

      c2d7cdaf6b060faf7b277b084e2589cf

      SHA1

      a4027603aedc99762a2cceef08ee92b38b64d6fb

      SHA256

      d6b354b0d8b3658e14b8a8f95ee7f806fb7aac44b3cdae07ba94a142932fc457

      SHA512

      da37178a70ac400656e737f47ec40a10e73873cf05da9731cee26fb6b95a271e6b9839b0577938f21c95c316571338cd736f8349292c7ccaa65ea7d7ba10c537

    • /data/data/com.market2345/files/a/e/9191077731990.0.tmp
      Filesize

      71B

      MD5

      bc53f64ea259fde6e8f2a26f577cc7b0

      SHA1

      13c8e04a41168a0b99e214a075515d37210a0689

      SHA256

      6cc284016b86071767413b7c4036f74853c4d8c1bf6b5826db16d0bcf38d7932

      SHA512

      e01b7230ee57a9cb9012b940bda45ace67fc56881622dc82d8ff5717769ff8b73c04ebd58c4bb29dae728a362c237bffb8d3d847a85034a234f259955522a555

    • /data/data/com.market2345/files/a/e/journal
      Filesize

      74B

      MD5

      3b53e65759bb6bfe13d8993bd35eba79

      SHA1

      774fa4774978c51403c7e42ba6b5a70ea35d8200

      SHA256

      a69c95d8753afa58290833a13949089fdafae067777168fda293383a26ebfea2

      SHA512

      424c1b83af69e69d398f3271b6ed351b363e00d64ea27d0f9b789f0ba854a354da385554919cbc06aa9883c4c1e1a698a06da8e021a86e72a815fdb112f7c0c5

    • /data/data/com.market2345/files/a/e/journal
      Filesize

      117B

      MD5

      0a8f3e9f25122ddfcfb40eee2857bc0c

      SHA1

      11c4cebd5ba8116637dc71a9f3c2b8a4671d99d3

      SHA256

      ac5dd559cba0b615fe927e94a3d67ef022460d9e0335fad972c317b60b390c03

      SHA512

      4cf6f39cb2b9e5bf9bd7c91d701d3f703648c22a17de8e8ec32e0f9f986e8da8c3327851ac9efe0d58a225f8cc3f0e6707be53c5b0eddee840fe9381b69108b5

    • /data/data/com.market2345/files/a/e/journal
      Filesize

      160B

      MD5

      42b95d2818ab8ce9b34f8618e9ccb937

      SHA1

      2e2409de7fa214e39e5464e7d9abd3d00c75e0cd

      SHA256

      dbc246e992d7cc7981c48076ec85afa02e90de090ee3bc54f94a03c3fb430c0b

      SHA512

      61b9508ab75b2b1e49cc28ea6dc4ce57e1a3af690d164ee33a00046966793454d1203d67d95837911a11ad93575aac6878d59b5d80ead9ee99251d817a562b7e

    • /data/data/com.market2345/files/a/e/journal.tmp
      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/com.market2345/files/jpush_stat_cache.json
      Filesize

      140B

      MD5

      c935a0fa08899c87cf6955b644df1656

      SHA1

      bde0842fba92cc502b92aad5316e1c7dae290e1f

      SHA256

      2196168c3fcb7e731f258743210caca8f9430568889ef246fbaf478d8a4c55fb

      SHA512

      e525e0efd02216b437cbcac14d01fd287e96b27e84fc9d30c0776ae150536648bf03328e5333ffd108798b5cc11409ec747053953cbba7174d3c5cd8ef0b96ed

    • /data/data/com.market2345/files/mobclick_agent_cached_com.market234598
      Filesize

      2KB

      MD5

      d88a8da7c45cc74f0fa2eb449ea001cf

      SHA1

      1082bda0b9c64e4429fce2a600800cc2005829d0

      SHA256

      f06996a8336c42c352d22536e6fc72cdb3d4c09a46978603a3f41464dafc5019

      SHA512

      b52f3a7f30e5ec41f0dfa9b6097ad0df3ba45f20e16c55f9d773f7139f90dbea839e49de3abd78d63c8ec78f730b216a3165cd977415593b3809ea5ac4ec8445

    • /data/data/com.market2345/files/umeng_it.cache
      Filesize

      415B

      MD5

      7333c88ab17f67eeaf18c6d1b95d0708

      SHA1

      31561f5d452c5e6a217310a6f183b9d14730eafe

      SHA256

      f445676643ea2de3cb2a68d94d24aa35e75e5bae00a3a1753d663727d666e785

      SHA512

      ae29b8156d2f3cc24d907526a21cb955ce48a0e4e87f38647ab63cd4441c103215bb32f10727766e32ba7df83b75857659fd8dcda5e8f3e7464bdb1256178763

    • /storage/emulated/0/.system_uuid
      Filesize

      101B

      MD5

      2cb9d4d3259ab8b7318b8f7c27babb9c

      SHA1

      fcda64208a4b52b343e22da671969f734bfd4522

      SHA256

      61ce6a762a9ff3149a58f8e2aa9e218d88e4f0cfde8bda23bf62c5e33734f8ad

      SHA512

      ad0082e7e51be9d7eca354780ac2a61be83075fd2fd3b361c164a64a2ed4e60fe35cd5a84840a3aea7e503672a74c821bf927cfd206b5aedcb22bdd0a59b3022

    • /storage/emulated/0/amap/openamaplocationsdk/als.db
      Filesize

      24KB

      MD5

      59c5ab8e6c1e336a7932e5cc8efb0e44

      SHA1

      e9c03df2110f8a877d97200453dcb45fcb49da86

      SHA256

      4995c04e3c78eb37f15ee66881c1f4849a97a9f3ed5458869f1160604f1ccc0d

      SHA512

      1372036f865ede81683008bcd0cdc14f755aa78f3f84f5fc784871e6ba00512bd01e726f6fe95d3daf99c89e1bb89519028e8e6c614d31efefd0d7b07f3bdba4

    • /storage/emulated/0/amap/openamaplocationsdk/als.db
      Filesize

      24KB

      MD5

      a22d9b53bda0f7778f3d24257fcf4441

      SHA1

      71a3202820a5d72b61c6a9185a225ad483faf94a

      SHA256

      888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982

      SHA512

      5e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08

    • /storage/emulated/0/amap/openamaplocationsdk/als.db-journal
      Filesize

      512B

      MD5

      6768fdc7f957572c70b6c8c780c012c5

      SHA1

      2851ff19b31646fe277f8a0ddf5f4d98e3eb31e0

      SHA256

      b5625144de1c9bce5a4b58304e6776507e2aa8cd97fb17a71eb9ac0599304304

      SHA512

      93fa78b6fa1fafa336cacec3b56a8e1afbb38499486149cfb2c07dc2d24d663b6e6f2c785937437fdf9081bf94eb7d76cff2531a4f6922e0b42db5566fb79862

    • /storage/emulated/0/amap/openamaplocationsdk/als.db-wal
      Filesize

      36KB

      MD5

      b77332df1d5dfc3508b39e864a81569f

      SHA1

      c56cf7d47ec115ac9bce8b02fc28de3b64e3dd2b

      SHA256

      b3d82c814cca24f98a9be98167ea772de187590600d3cda8a6d2aef26d6b4a91

      SHA512

      49744b8401d27f3c3972e4fb354a89646fd09e83344a44ee71a071a9c1973d51905384fedebd6881e64cbcf51677ed36d65f5f5fb4ac8a236939dd62b4073d18

    • /storage/emulated/0/amap/openamaplocationsdk/als.db-wal
      Filesize

      8KB

      MD5

      fef7c2a1c6e190bb2b42db6f5fdebd28

      SHA1

      f28f109e85bb28b351b519b642f31a49effe44fc

      SHA256

      b4d085bd55ab21826529366683414a611e5523cff69cdc799b0085810ccd4d82

      SHA512

      754c5db90fb1be41387e9111be8ae55e2d5c0574bed6fe694ed7af509ef1738ad03c4c5c268cd7e092960024d6d73fdff0235f161fc398d05eaf526fb4ef0fb5

    • /storage/emulated/0/data/.push_deviceid
      Filesize

      32B

      MD5

      dad9f1d0d0a001d00f767ad1079bf1bb

      SHA1

      a31ab023f841b17ceb207fcb773816a253b70f06

      SHA256

      0d80119d7fe319203b551c1e4934e9fa1f6fe3a0c1a238800739469e7c231d26

      SHA512

      206a495665ef4309bc3ae79fba0dca348fcacd18a67658b7191d5c8c09c213fe19971fe5ffa175db08bfda271f0b11473a0133c6c1390a7facbe7080012a36df