2a548be0b878015a6b753dd590bdd39a35271c2d82df5a8a7be1117c457110d4

Analysis

max time kernel
179s
max time network
189s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22-05-2024 10:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

66e1e50874d0163f8d951f9107f6c40b_JaffaCakes118.apk
Size

20.4MB
MD5

66e1e50874d0163f8d951f9107f6c40b
SHA1

f0e0716e97c3fdcd218f274a33b7b17cc8c715ec
SHA256

2a548be0b878015a6b753dd590bdd39a35271c2d82df5a8a7be1117c457110d4
SHA512

ec75b9ed779c9bb1b6739a22787a12de426e9a7b0c65606769724f69f358590936e1a02d9530b73ff769f60dc31b157e6a468930399dcd6cd352a3bebbb8517b
SSDEEP

393216:6sxJHmtb1LbqMKRY4Haj/a7IBtb349MLKW7QOAsqnJzeu2tn0Vh8ps:hxJ4ZeMg/7m349NORqnZeu2R0Vh8S

Score

8^/10

banker collection discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.yxxinglin.xzid32690

ioc process

/system/bin/su com.yxxinglin.xzid32690
/system/xbin/su com.yxxinglin.xzid32690
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.yxxinglin.xzid32690

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.yxxinglin.xzid32690
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.yxxinglin.xzid32690

description ioc process

File opened for read /proc/cpuinfo com.yxxinglin.xzid32690
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.yxxinglin.xzid32690

description ioc process

File opened for read /proc/meminfo com.yxxinglin.xzid32690
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
collection

Stored Application Data
T1409

Processes:

com.yxxinglin.xzid32690

description ioc process

Framework service call android.accounts.IAccountManager.getAccounts com.yxxinglin.xzid32690

ioc	process
/system/bin/su	com.yxxinglin.xzid32690
/system/xbin/su	com.yxxinglin.xzid32690

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.yxxinglin.xzid32690

description	ioc	process
File opened for read	/proc/cpuinfo	com.yxxinglin.xzid32690

description	ioc	process
File opened for read	/proc/meminfo	com.yxxinglin.xzid32690

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccounts	com.yxxinglin.xzid32690

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.yxxinglin.xzid32690com.yxxinglin.xzid32690:mipushservice

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yxxinglin.xzid32690
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yxxinglin.xzid32690:mipushservice

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

com.yxxinglin.xzid32690com.yxxinglin.xzid32690:mipushservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.yxxinglin.xzid32690
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.yxxinglin.xzid32690:mipushservice

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

System Network Connections Discovery
T1421

Processes:

com.yxxinglin.xzid32690

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.yxxinglin.xzid32690
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
collection

Data from Local System
T1533

Processes:

com.yxxinglin.xzid32690

description ioc process

URI accessed for read content://media/external/images/media com.yxxinglin.xzid32690

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.yxxinglin.xzid32690

description	ioc	process
URI accessed for read	content://media/external/images/media	com.yxxinglin.xzid32690

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.yxxinglin.xzid32690:mipushservicecom.yxxinglin.xzid32690

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.yxxinglin.xzid32690:mipushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.yxxinglin.xzid32690

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.yxxinglin.xzid32690:mipushservicecom.yxxinglin.xzid32690

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yxxinglin.xzid32690:mipushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yxxinglin.xzid32690

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.yxxinglin.xzid32690

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.yxxinglin.xzid32690
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.yxxinglin.xzid32690

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.yxxinglin.xzid32690

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.yxxinglin.xzid32690

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.yxxinglin.xzid32690

com.yxxinglin.xzid32690
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5128

com.yxxinglin.xzid32690:mipushservice
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5231

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Location Tracking

T1430

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yxxinglin.xzid32690/databases/HlxFloor.db
Filesize
76KB

MD5
9d2a4c826a6d90cf9377c9b08e5cb25b

SHA1
994f9c2cecec59df4a80cc2092b64cfaa160d488

SHA256
44300d309ff4cd4ba1298d2429bb7e22c18790ece1979404d4b75b4bec1e6426

SHA512
b76bc3c9b9a2d014a2ad177377781c8db43d62dbfcd2304efc474ee91a664539ac066f5219445642c18658cada4138c8d5b4418516c72fb13c2825ff9659152e

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/HlxFloor.db-journal
Filesize
16KB

MD5
a556e4c85d0994c3aac9a52dd212cd64

SHA1
288ba053f462b38731bdfdda8a5b669c3ce93f24

SHA256
864c92648e10ad575ec8b6ba2e41e8b3a53c5619821a7714789544ef1563025a

SHA512
22bff3788f45af4610eb7c6264f04f6fb5fba3852f9e09e640b610eac067f1f4098752039e9b6a79408c196d96748b9ec804eef2799bca8e387158feaeaebd5c

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/HlxFloor.db-journal
Filesize
8KB

MD5
b66d038a9f7e391679245585043debea

SHA1
1e298a312cc7bb16b5353dda88c3d3125029b1d8

SHA256
888cb6b6d98275e1c325119c0885f0cde935f10e9d0a53ba895ecadb76855e62

SHA512
cb6ed92e4754960b5d0f20f66256e4f5b3812294eea9b216e8f330e80daacedf875d3ba4dc0c632c0aaadf843cada2fe6aa4cdf3d12c84feb0d642d069ba1383

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/HlxFloor.db-journal
Filesize
8KB

MD5
3086511fbc0a23ec0339743742fdfdce

SHA1
62baadef91c69521d2aa1d9288f1289f1454dc50

SHA256
00441a8f3251e914021e79a89c47eedfc5829bb74da8e684b3229cd98dd5a04f

SHA512
fb9bfe74e0e4c14ce2e5c58c9f865279d3fb5a63a2372e2f22c59a020d1d0fbd25de531361e26f1134c34baceab30afdbe439e6d24a66bbcc92100d6442b9fe2

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/HlxFloor.db-journal
Filesize
8KB

MD5
9c660eeabb410f53e4316cabf5ceb017

SHA1
45b55043cde32c9b247e0b1e08e79185ecbf7e93

SHA256
ef4d9bd4f2670eb37362ef23b2ae50a7c4cc428ccd4e1a1436b70601f4a8a891

SHA512
fed757b7f7dd3dbaf15f111663e119e7ea98e891e4c66a268b67a0d480a31433d53ce57e35bb17512a9b03bc334c566873c1cdb4e7b739990885b9cd8a2a08a3

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/cc/cc.db
Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/cc/cc.db-journal
Filesize
512B

MD5
fc87404a31bd6577a60f81796d28091f

SHA1
5e66c5f12c7ced63b2a2c583829a5ba30394c45f

SHA256
c4947cbc7fb7db8c22ab0cb8b05db84d5bda39c421ca0fc5227a418f9de8fbaa

SHA512
7d22648d24c0fc42bc4bc978288b727d2ad4e83437c170a5841e92a006f744946f91efc606019b3b6ba36af880600f8fe580780e42eb3c34249563048b95a61b

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/cc/cc.db-journal
Filesize
8KB

MD5
2be3e492453367c4084087ad0410fa41

SHA1
96ad368327a2eba48099b660d5c2f4c56f2013aa

SHA256
7b68532e428f2f63f69db4a7e3044d64cc371306bd6d756740e9c44476a955af

SHA512
408edc3cf03926ac143e3d7587cbdf9e7f28eaad8931be9adf8da092b3e30e20e64f003091357e6bede3ca330285ed20b62e992ca536b6deb6519125913c4f69

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/cc/cc.db-journal
Filesize
8KB

MD5
180b76ee3d82242714f457a714a7f62b

SHA1
51fb6b3f3c93b97e67ae883e075372172421ce1d

SHA256
2e34dc466e5a364912f06c81f324a9421b73d23c4134894bec56656f6cc4b8d9

SHA512
8fc061bd3a4cef39d40f19a7429987bf37f2628867f73c981158072fc5a23632cc9671d258579e843b63e192a4c7d99503e869b1eecdfe1fcd8e37306e0521e8

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hlx_wifi.db
Filesize
28KB

MD5
cfab1313b6bc4be5c38f024fba1d7195

SHA1
bd3988e3c05d66889d311e06cd577c05a88a4cb6

SHA256
bb849c39f9a2c72b4b34520ff09d1eef151a053e7c9b3874ca80e8d378a12b9c

SHA512
60394e4bb665c2c629bd5ba938858e896355de7850f958b9d9a1bb9beae3b17b281e937cf8868ae252f6dcc46d10985ffe00d2b7bd3adc8a3c30c2052db52099

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hlx_wifi.db-journal
Filesize
8KB

MD5
e6fe87422f9c264846ba9ce127fc40be

SHA1
07449472ba3627942f30ebde717a39a6cb076c60

SHA256
05b6068edd002e004ce0612363c44b444e4993187440788da25ab9518bd532a1

SHA512
876a7acceda38e74bef4d3874d76ce97a703d2670e5a95bcbd60361d56946170cd6e1ad0fc8917551e3597c34f2c61a6972ea7b4dd785be55e4097e0102155cc

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hlx_wifi.db-journal
Filesize
8KB

MD5
d3489a96ce1ac96344f9cbaaed84ce8a

SHA1
4ef01a69461f913b95460a7b839d9e3bb05c016a

SHA256
3df2df560f3ee8c65dff4386a7d4cea27d6900c2cfa56c6cc66328ad729fb300

SHA512
0151a09a98cfd3e9e64b0c2cd04cc97c4d65a9b875494b8bd526f36b6608a38c984251284630b8d3e3bb59ef9116347b3819c2cea6d7709d15107d725af28882

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hlx_wifi.db-journal
Filesize
8KB

MD5
f25499871c506eca589cc8873dc309da

SHA1
b6e4678fed6d6d144f4832677426f9f21196a947

SHA256
e1ff5f326658ca03b24d2edb79970adcafa0c4a4005a5fda37651d9e198cbd8b

SHA512
54f56d91ff26065c2b7353f7fd1dde5dd2541a11396cf8a549b991012a482ba4db6f2cf311da842bc18c93edfbb0d6f9579fc7988f2b9ba370a54a1b7dad57c5

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hmdb
Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hmdb
Filesize
20KB

MD5
31a943b538439d453cb0e89b99fe2605

SHA1
54ec835f34ebdd07ebac87b9b927726f3961aaa8

SHA256
ca3c1c316bbf59f4a1d28b5c4eedb727feae902bfc83d871615cc1577fd5cbd7

SHA512
6b9bd884f8b072753516d5ac01b9e265336b4fc484d05dc68995471222a1efecfe9d8abb1a3aadd5bb0869f8a173eec209522c3f3f8463586bdf75f9308c160a

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hmdb-journal
Filesize
512B

MD5
07c3ccf7368ffe52fdbfb85d2d4d49d5

SHA1
e9841eff7f35161ff147418196080f29e8701d9a

SHA256
9632a225b2dbc0386a77018417fa41896796c7d75341ba133cc2e47b6a9faed2

SHA512
40b8f2610dc99221746b2845e0e35f56295a3112ae86fdf54e9c755f5b23cd93aa52447d047a51bdb1979800c5105765e2f6269368088b3acefefbaebb2ee98f

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hmdb-journal
Filesize
8KB

MD5
517d437b54f2ed1ced20a469a9318281

SHA1
96bdd3014abfb22f532e27a322605c9df5368576

SHA256
d8a87183838a8a9b0c66b8b39be67c7622400206ff61b4e8ecfc20f87660470a

SHA512
f22c1d80fa1265477862031978940bd407d4d5ef35e9e97b302a9ee8272c958d61b99f4840b320c772a3f793faa4a486006806155817431241d65634793db420

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/hmdb-journal
Filesize
8KB

MD5
b2ed830a9fc5bb3e2c8be05373ba81d1

SHA1
78e6811c5571dfa6b872e68fe4b44345b7fd8c52

SHA256
930450b6b849255290287ba61a25426ec2df81c72f622871c4d14aa1f17848ca

SHA512
09998a50fe6e0f2ee3bfffee339d4f01d27f70a97614132d155763f16cedb85faa4bf22e267229b86c10d885b02821dfcbf710c7726ac97918bdb94681572dda

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
36KB

MD5
ad9fb6cff3dcb996f326ba727feac61a

SHA1
6079df4926b2575038c048eb5c5da89d928944b7

SHA256
7db0a9474dbabf4d3aefeaa1fbde6457f5ffefe3773c9df30c41675808393e07

SHA512
573591e0eee4d4614d0dcdc2369b9664c2cf58ec863ac85e7a148a9e4f3162e04c2a6dc83a8ad221bdf5b39671027b1a29cd5e6d00ac1d8ed6f046c226e29250

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
20KB

MD5
736d25cb8f9129b2a4f6268938213816

SHA1
7103da531babb2e38a420fd54e7bc4422000796d

SHA256
f360a40ad08802333db0b10a4332a75890e12100d24bceef4b58886369309cc3

SHA512
bcbd5e12c3c112c653196ff03b781f23796075debf0031bb5f38177318e442d60d0059954ed495b3ce37810a7e5526a31b5b9d2e60f7d54a756b2d8ef1d4014f

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
36KB

MD5
32ccf88c529feb00f9b87f5ebe85e3eb

SHA1
583aca0e4a6d96754d04994866a5a9e2e9720bab

SHA256
77169c33a3b780d881dde1f4b480ed0b4c7a521f30def8303c3c3c93981d6d89

SHA512
f3fc9804dce19ebb409959cdf85225aac897a62a0b4ba6e9e6186d970d6f832e4b20298aa6187daaad302e9e4252f33e1f8aa50f57923bae45e1ae21c45b2e08

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
28KB

MD5
995655d4963744d4f32d85bb40093836

SHA1
c5cd342506de1c8d276f8dd8b76d6a509e7a80f7

SHA256
7381494956dd65796066c972cf1e0595dbd892ae7ab8900d27e0f470d6b60917

SHA512
8b0ad824185172fe59ce98a1729a7b384e140137544fa862fca782d044b0c6fbac0f82e5cf22bedb4b12987bad9457b7856ee90277c458f725478fad941f76b0

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
28KB

MD5
03d7cf4db886c566f6f27b86b9fea944

SHA1
6d3f7b032dcb2a95663f7cbac5870b5dc79eeb3c

SHA256
06e9f4bb1eafdfa260dde2c5529a893cc1fe22be8f46a2d0e6a5b1d93f29201f

SHA512
8eab1ca3b676ca41fa4e8d539d8047494bb1645345c6fd8c37677f55ee49ae8af54eead0fce9971c5678eb33b8491ad07c4cf8ace84e16636d1dadb1735f0768

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db
Filesize
28KB

MD5
c06730d2d0544457ff24030bac47b1e6

SHA1
3ebcd05a20e762738fe9e197bfc2846e1baa27a5

SHA256
6602a2789d46c4c61ef12ce6f44fd769b597aa1ea552131d44be4ca68d8c4150

SHA512
7504841f21a4ea554378c37185d2f20258ec45a424024b31ddf9f4f0c9e92a624aa670e975ab95ff508a6e86e6a2070fef929c13b70b0a93450d44a8552d739d

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
512B

MD5
3085bc19d3007aef98ab001d2b3b1494

SHA1
02f971858fac7138393158136c300c771b64e2ba

SHA256
e8b2758d6a948f5c04dadd623aa61a21e9f3b4ea9ed1914bc9245ebfe2b6cc3a

SHA512
f77e67e494833e830a4a802155e185fe748388404cd2f6afdad8c68e7398df205a4bea371c6822f42afc54dded9b82aa48d3d9d71cdd815addb207d1d32f1559

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
8KB

MD5
30f64869225abfca1f62ac1d713e02e0

SHA1
3989cdd484a1bc49fe42ff35c0ed7ddd26a86cf0

SHA256
19d633380eece6129783aed14c693ac09e0a355a8c1b4fa8728f70195fe3e860

SHA512
22787e8874eba341f1a609eba3f9f1205561fbd5cfa70546bbb4c5a3fb91760acaef00cd95a66777fd4b6149eb84be48d8796b6547f52bdb378081c2964fbc07

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
8KB

MD5
14836323fdf9dc31f0460be4227e9292

SHA1
6d161107385a40f0fd803521480f47a6dc173bb1

SHA256
e7ea4c24488c28dc864d7eaa80da5823eb506efc3d0670b9d3463359de0028c1

SHA512
2ed1209981188bc120f33951d0034c95236d1865a2e96ac8128848ac9148998ae0b22f118175c1bba04e8b602070ee16485e00b7075eece4ce028f2f87632c51

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
12KB

MD5
f7de6e1e255081b49edf4005c6d76d94

SHA1
e214e581d9f59b6d64ad7e489e4e81b867f9aa01

SHA256
f003123695dff0dc485c46de7641879eaf466151b42bcc659ff883a72e67cb03

SHA512
07ce4b0b3241021d47f9d8e66e4d9150ebde2c6d46c1964b48ee5b314cded37e9b14da9154283913ad23e3a5396e48893d1c9b04c116bc5c2205fcde28389225

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
12KB

MD5
3762c548172ea84aad1171cb0c6ab08f

SHA1
ecc8ee3bb2bff933624a3d889ccc8883ab906506

SHA256
998708f19266825b28335f9cc5d2fccb78a3d7c2b20e7495d80fbc938c0a8ffc

SHA512
b8e88f2942e6df9b1c26f4165520b06777ac24a2533080d313d6078eb281fd6d3ed9c67b256c2b5ea823312d9141b6f5c03cdd5290ab9865c3cfe92ba4d02c8c

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/logdb.db-journal
Filesize
12KB

MD5
9382d19c172b08f4762943bce97de657

SHA1
c04450cca206b3b4b78d677e055b387d12df199b

SHA256
dc98961491136b241ce1ac4126abd58234fdd4a679d5130ca26ce86097b2c14c

SHA512
747df5f2937525190f66e1d54c1850224e495d43cf5f90744c18fab6422c834d26126e5bdbf2e580f8e33f6c8d21d4023a0456ac3ba7470079da454176ad182c

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690
Filesize
40KB

MD5
d56e8498a19ccc4dd643d4b2fc2e1290

SHA1
e50280ee3a450a946fcf84f4bca1d84c5ab0b223

SHA256
be460817fa81d2e0f3c86fe86704e61f17ce3fa8f2b3fd9d536f15e749570af2

SHA512
4e46925bd7eeb95e7106283a9f468b7b912e686d76bc6316a0c84698194018f8f46f9db267d8d3dc152b20d262921c108d6c7ee95e13b035a279448b3bf441f0

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
512B

MD5
1c2c9f7c9ec90c1fc4ae5c7c30525b09

SHA1
cbba352e43fd571571fa90e1108b82cb501f87e0

SHA256
e492c3322fd76cf038516ce7bca9d55dbb24e19cc89dcd21dc3807f5c49d3c04

SHA512
d7ca1cdaaee33664a634f26fc4cba5eb655843d8002353c7d515b7b058f0fd8354cfa4aaa097583ee923f0d199bc1a3110dfe6ef147cab2f7ac7a3994b9c55f7

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
06999b03462691bc5d89356abf16b208

SHA1
ad709b70ebb8125bc4cca762929575c737da3911

SHA256
4024f286e3fcd9b0309195c81aa0f4a735273dbf427e22c1d6feb1e4b6d5807e

SHA512
5f9480d0a54b01386839762312c843574ecd2b4d47c9e6b0f7bcde233b3de467bf8f1b3b5920d79d423735e5b61204c66c3f1710abaa259ecf768150e49782b6

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
c1910ef6cd1ed2a078f51f00091b072e

SHA1
e9fdf431f8f210e7997e2f849736e68156cf0e52

SHA256
e741899b67d84599f7f70060368479b1f7c3fb04b9a2ad509a93af7900be3403

SHA512
2688aac643951002790b456cc616ea3940827fc882c33b696823cf233f29bf3c7b86f448c1a0a639827e5f8ed0d78edc5b487090feb03c09f3f707bb3ed755dd

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
12KB

MD5
0e5954984df3ca47b6ff8b98f48069e2

SHA1
93a8d9fbc372966e5fb3ffd80314812369078b17

SHA256
6ef842265bd67dbdd7e76271594ca9d5fe80c96edf4b9c25c58ba75a35fdbc15

SHA512
caae1d5400100add8204f7902dad9170b74f58a26915392a3892cd2a3708853daaed487f55ccd23d123ee24f34c1fda954f2681e645c627e3f63cb79e4790eed

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/pri_tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
60159f9a330409de4203fcc76f2d33b0

SHA1
ffb4dcdb81b97901767e87124d242bf617fd55e6

SHA256
754cf4eb123eaaef9f485e99f4ac6ddbaf75082ff612dd915442ddf7417b69e7

SHA512
4c278db3bd5be28b8b552eb56e08db952bec7a7d97723d14f8869453fcce1f1eefb0c4b9c5182513037bb8b28a659a4b1432657ed60e9f96680f8e43f2607920

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690
Filesize
40KB

MD5
af40fcc858af737f6edc4edeb517057d

SHA1
870fa7fbe6b7848cbc72bd0fd2836f8c64ad5371

SHA256
963a70f1bb04bf9e1ac4ab04eb549643970498631acbda59db9913137a307886

SHA512
a09cdc945b86fbae1aea18474abe29521a7a849b678449bc39e3f941e1212f7886b82d545ec42a94ad52eaac8b68863aea1a4ba5a5f62470a09b8e4081fa1aba

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
512B

MD5
071a75e86939fef551abc4a28e78144b

SHA1
dc45782c3a2bdd2f7eae2ad08e3e57ab11c7b76b

SHA256
844bf15f9081952255b5c387ccd8567c26002963f51d67eab47e041ae42403a6

SHA512
c22776c0721f08b6c9461bf32e443be92e809e39d5761c3bde6e05137a96e7fffab454e29c0667bde4d9390987e5015c1fc737495de726a5e6a343db85ee7576

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
7e16a9de892e04c86546e26076941465

SHA1
837a452ddf5999b4477ae3061c32464b15866a42

SHA256
a7f81f54880917ae540597dfb77e4bfe5e917a801ca5895c5cb0cd6d784d9829

SHA512
47761408096ee2bab917b9720e0e6b5ba15c534c880096583f6f5a72da2c3aef52ef5e4729ef15f55eb6865b5d61a749c2ec0860e78d0d02005e5c7947b7f9f3

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
ef0f06e4f368166aaa94ef1c34513978

SHA1
a560ff05ec2ecc1368efbf849af6e09b897cd014

SHA256
17d9f241d938f14393c4e419c3155e9dfbea290eb7c9a1fb036be52b15be14e4

SHA512
5f3160cc9b364e6930ef2e45c850242c41ff6ef0daf8a0c71c09cfccd9fdb623264282a158dac9b1915878220ab5495dc0aa515bc3f367c523dc89151a63600d

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
12KB

MD5
3d9f91560ff6a41f447a769723214dc9

SHA1
762a57ae3fab35b0614c39d403779b54f11ffa3d

SHA256
dbaf1506c0ec8e43ed8ff2f516730157a13ef7f852ede3edd5ee002c115ba7a1

SHA512
4262b3babd93a5aa75769d852809790e8c0c7fc7ed33db271baba2fbb25c74c2d133bcf2f5f6353a93810eebd22f984a00e07bbe2c5425b877ef4bfd159766bc

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
8KB

MD5
712856641cfb78e813ecb9de05990b04

SHA1
6aea9ec3be88d644a6ec85285261c0be8ec9fe63

SHA256
5fcc16c8897f1ffb9f6ab8149a62865b6a1942b4872b9b5156a090c86fd18cea

SHA512
4dcf52613f37d5cb2d4ef2a501dcd1cfbdca74c077220bfa6d6417c8a9f6dc0b59e9e646a0eee7dd40294124026b19513f582c469fb045434771c59b9af368c4

Download Submit
/data/data/com.yxxinglin.xzid32690/databases/tencent_analysis.db_com.yxxinglin.xzid32690-journal
Filesize
12KB

MD5
f3487e2435e30f253f376ab7156a11f1

SHA1
a864130165a4af6544a2e866616366e6e4ba9957

SHA256
fec431c86848f353c07fb3aabfdd14809779b1d914e3b93d237d199d6ba8e69e

SHA512
70dff181ef57b868e3ed504dc121bb9b4a6a5eeff466ab11b2b4a0b3fbb267fbb4eeeb46001805594c9a8852492cc4dda6e417ce822a878bc038769ebdac5835

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/302ba74a656c04e34a61632854136ab2.0.tmp
Filesize
544B

MD5
95e7ee08a368c33622144ace53fb59f8

SHA1
6036881f52317fe48d8ed71473a4d5046d770c0d

SHA256
a06bc12095dba503bdc74cefed98fa0251196627e1a5a4b8bef460493caaa7fd

SHA512
817c80a918233bfe423eb1157536afdd93873af7027affe2903e1f8a035b70a2a7b6952dd9e4ef4944bd1b40a280ebe014127600adbcbec4ac9b3043e3218fa9

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp
Filesize
544B

MD5
9c3cba7727561d6e7a3d2cfc401aa5a8

SHA1
7f2c15e77c5aa443c76b1f3d077c37a40526d71a

SHA256
4b0e18b805289fe1b5ec947e2bfc2bac7eb0460644584ad06c72ee1c60b8da16

SHA512
2259698356f3e6329ce58f0f25bcca34d34409ef0e2141f0b291fe616baa40bf46b84964845c2aacd13f2ed7e2a097d1230163142e0ef42ed24a4a5f86588db3

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp
Filesize
544B

MD5
5503891c9a6d13725fba94fc4c5bdae8

SHA1
61fc430a0a57a08f497e235d7ba730470a2772a8

SHA256
9fb7e0fe419dee76db38c47a2988956b1b84565358b923eb6f1f3ec99301b799

SHA512
e3d01575f0b68a4be801bbde25b66713f4683194540e5553b6927328ee3f0f9bf5478da16f08b3fcb5689d80df90ba37c768d987795bc0cb6a3d671f7c8d02bd

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal
Filesize
113B

MD5
7de584b6080af3aa17c6512ea2b1e87e

SHA1
f028997dab670d16fc8aac6a5b0cc76280a62207

SHA256
95c9f31a21a6a536672e06d8d3316dda0c091ab4488f0772a12f85b653204259

SHA512
b97826a32bfdb4e610ef5d10ee7b76013d71a240c4a8753b1ef65cf36f7259577b4317b09127e896c7cf08977c77fe68be5c4b7baf97087f32a4fc76dc185b7f

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal
Filesize
38B

MD5
5e35c852bb1cd4d3321c28193e135856

SHA1
27b0569d4b298eeacb67d0399428c0eae5490b79

SHA256
54fe2f86841cff94835c1390c315464e40258c1b2486bda31251e99c29e9d364

SHA512
3ca12fb5e47ca8b77c75c23284719ee1aa8edad4d4124ccdb9c9e8fd21b2cdde4e4425ef9a6a31d41eaf0962345dd09ebea0664ad841bb97b9e70db1adb76fd1

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal
Filesize
233B

MD5
b4a68292adc49f804cf580ff9a860e6e

SHA1
199b2a3eb6924256108f71b6bede0c465624e388

SHA256
d2eb4e622527b120f225af43f4b594e4e529f10d67f1c97c00c1fa317bf5823f

SHA512
3b538f05737514dfd5c59967cd0513bca513be48d72212aa612f0aa9ff1d39a36d0279fad54471500c7399ef39b5a55a7b79192a8db1a8a952ad4415bf9a70c7

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal
Filesize
38B

MD5
6331c0b887554a0967a49f6bf18ae6b4

SHA1
6e8202bda4654e04615bb35b251485fb6de9ee8d

SHA256
1bec914289d4ef5095fd7c0b3dd743eb3b715d0d9c6609136a6bb6e1aae62d43

SHA512
e3db3fe673650074d1f2ab8b5e3f4e3a010360aa4fdc841d0ce1d9d3051ceee62023ff966a495843199c29cd136c8c56a2afa6a156e92e14163479b91d071e5d

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal
Filesize
3KB

MD5
1f58a8af066d3e3c5bb62d6555efd236

SHA1
f565a653793de78f13bd4e80fdd30dd3c6c136c5

SHA256
2922b1e520eeaac37f2ae00fd3363966ed492bf1c4276fad97ae95578388cb67

SHA512
9e69783223f90b1c15a14a583a6df5b8dd1ad4637d448adc4bc74c8abbf38b0ccf4a2781f7813aadab55ba27721c699ee91211ccc9c2bd591d3fb5aafbe23771

Download Submit
/data/data/com.yxxinglin.xzid32690/files/a/b/journal.tmp
Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/Android/data/com.yxxinglin.xzid32690/files/MiPushLog/log1.txt
Filesize
226B

MD5
df6761d5c546b13564229d574039dc40

SHA1
0e06b0173f842d505c7658b7b56ac99ea805e2cc

SHA256
e1ee279c2e4483deec1fbee956cbfd85529509dcfe42c98306de7a7390f834f3

SHA512
b9b1f60db869d5cc01242fff4c4ffa88dda6cb65c1cf117154fb2d5e6d3ca335483a77a01ebae035cedbab313fff9153b83079e09a4a1b504c62a7b2eb262120

Download Submit
/storage/emulated/0/Android/data/com.yxxinglin.xzid32690/files/tbslog/tbslog.txt
Filesize
16KB

MD5
a8e77392c913adf122307f1ec88ff06e

SHA1
938035d7ad6efdb77f9c17d6b7502ea9da22b462

SHA256
c3cfbe9212c56def7d727c012eb5a71cf4fd0fee0cfaf9cab28d6dc42ec9721c

SHA512
e84e839b8544a553e2847119b5cedf21c555a18b5e4f5f478f40e3ca34553e925c194075ab32d050781ddcfc45395e0e5ca8bbac31629fd3c2b82e9fccf6b797

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db
Filesize
24KB

MD5
e4eaabbc140472ce801c34c0cee9d477

SHA1
dc0afe5caa57e7d288f9600b6d6be75c153a8608

SHA256
8f30f34206db53c8a7c43d1d1ce2ed06c49562b21786c620df3fa885370d16b6

SHA512
ac0740a115ae4bc69527525c189e88eac9f06b5f81abdb407740c0e90844ddcbe3a1ab982556d5c73cb22999ad74fe17f37b6b1f6e6318d04ab5ebed13665875

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db
Filesize
24KB

MD5
79b83b18d7adb58c7757191faa0638fd

SHA1
bffc5cf69bdf135ada840f5528873925b67ec8c9

SHA256
7b6f385bf8f2215c25d2c51cec5c56e768f8aeb6a74d21f51544a2fd94b8520f

SHA512
b8d36b3c578b9ade9e38d96d10e4cec0d0be27c1eed5c4f7f60327a1aeb6349ce1f7dd4a0315e66767702762682c02e592e720b418d95829b74cfcbad6e5f807

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal
Filesize
512B

MD5
d4433775fc856b967a0bd939ca629a48

SHA1
6663c7b3d06834ca167d9f7f215e39a85a0e0cec

SHA256
c280a36ed8ca68bc4f425fa0827ede8c6102eb1c0f740cdeb7cc026dd991397c

SHA512
12603f6bc6eed3ce6ec392ceb48fda83d468c25f27c29e1d3e783b232a6e32cbdcffa6843f10a5c7119480e1519f55e55d6c348038ca874499f5023d8db9dabb

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal
Filesize
8KB

MD5
74bb375e138d5c1fd323a22c769826ad

SHA1
bd581c497a6596d14b64ddec722c51892bb89577

SHA256
96b26387a6657ace1e9a3d4ab02d202956fc5b769f623880c8065e1e3c02f409

SHA512
33bb103423f153d157a5c75b2d942d1452c82db7a96fb5d5a8d7b7868ec73b6725ff07e52b96d6de40be5aaf122fae35895eac7a71faa8b814d6f72e127b633a

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal
Filesize
8KB

MD5
4a9c03dd5c71f9764852add53b36d54a

SHA1
57137f9140514998a90019004da3dd31de68ebad

SHA256
a45bfcf744baf63563cc99e219e62394246d2c13be0aa566c8a9140cdd3ef607

SHA512
d3f5abfede52c1ae61094192282f6da3af81da16f0a92471296a284627772067d0da2bd3bca70db2d6afad3f285cf797eb270bd6e018049b691219b902348969

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal
Filesize
12KB

MD5
556bae294b91562a6a387b79d27d7312

SHA1
2bc75b5dfb56ee6a5edfd533ebab140da21af093

SHA256
2e1de81b9ffe7620df91a9e465bf692fe0dbbdb2a183063b03bf05a60db1d02f

SHA512
091825a389082188ac47df38263343657778ab1a9663a163c1c7eabedbba3216d857ead42a46e6201522907aca896068296a62a2bdd705bd10348cc1dacb98ee

Download Submit
/storage/emulated/0/huluxia/floor/http-image-cache/images-new/v2.ols100.1/18/cqeobz7CM8ar1dcW0yzk_lmN1aQ.6304360394410372409.tmp
Filesize
50KB

MD5
caab131dd9c84ab22def5f7dfc833d28

SHA1
90b53ffda40983477f1768afc6710f1b4e392ac8

SHA256
8abbcb73bcbc1f38a7d77cb7e99ce2794907d113c0f0267abd28d4d4657f4159

SHA512
fd6eec62d84367a68386b3ea6bba0c48cc8e1695dd400991554e6c5ef8921793c73b6891704c2fbaaf61ce9d02280d1eb42ca58c887308eed0f185ced3224795

Download Submit
/storage/emulated/0/huluxia/floor/http-image-cache/images-new/v2.ols100.1/32/ImbRjyB0oN-KFdcu32MO3UOMaGA.1386581678982773338.tmp
Filesize
16KB

MD5
29295705ec379d671432aa31c14347ef

SHA1
281a2e9401a83187d88217b712da6ad2ba74e8ec

SHA256
3685bd40abfafa9320380b736e1a67e76c1551c88cdd5b75f6dc511afcefc3dc

SHA512
1c35d4f1f1c4a86beba58471b72c7a85201e5971c46382a3f53d811a12d47ef0d1f10a889d7d3688c04c3731d42aad1757e0853d412d24fb277c5171e2e7d120

Download Submit
/storage/emulated/0/huluxia/floor/logger/HLX.mmap2
Filesize
150KB

MD5
06ae8a01d80da962c7987c264af64cec

SHA1
63a497994321f254b535a846ce89f076d4e378ee

SHA256
0c5cc90b079d0d9c1ded1376357d23a9782a704a83e01731f50ccd162e246492

SHA512
8720928fbe7cf8351c9dc45cb1a9c8243939c7e3c9c6957d24dbe18c0819d05ea7475e3953018f0365461fb2987ad68d8ec9f59b03aef3adbd3e4ae8ebbd0427

Download Submit
/storage/emulated/0/huluxia/floor/logger/HLX_20240522.xlog
Filesize
312B

MD5
298f4edb1d10a0f15a9aaf03533c3f23

SHA1
039eac3e7059d8b8064166323356143930a62472

SHA256
179cfc6a49500bc5885ecc6585c3554aa3d9c56021c00929d433ed7d41e8bd27

SHA512
1d8f8505977dbbfc46b82ec0a0441dc0ccbb63ead2b3ce062fabc834b7947e8038eda7f964653928d55e0f9319e35cd232218470b0a002004d72f1e54aadd426

Download Submit
/storage/emulated/0/mipush/lcfp
Filesize
41B

MD5
5439a7be0a44aca4a1d07c83b7307ad4

SHA1
4d3eef9ada8db95606cc09e6e2c60856cbad1568

SHA256
e1696c08c4bb982ce6c5534e6012590b3b98e6ba277d1240fd93e097cb7fa34f

SHA512
9b95142dd432dfea8c5cc37e4e4049029e5e73db30d007a7de512c908d978444640511a793bdecb2f88afad3363ef0c2d0dcd821d0944a99ba0cc7b91327b042

Download Submit