Analysis

  • max time kernel
    170s
  • max time network
    184s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 10:59

General

  • Target

    670772656ba6f0599f8b55ab6906465a_JaffaCakes118.apk

  • Size

    15.1MB

  • MD5

    670772656ba6f0599f8b55ab6906465a

  • SHA1

    fa1ddc4f94895fef328266ce428e9e7227fcc1ee

  • SHA256

    6195fd96c37649ad45891e927eeb550698d0aa1cd59958109bfbf29d6fb26dca

  • SHA512

    b96d27bd2f38f714811436df1a97b4a0ce3eb57aa20806507aebf8e3a6d559bad98b8df383359f1a70d4b5fa2576b786471ea8472d41d2f96f76d9fcb7d98a5c

  • SSDEEP

    393216:3nJiN6wG3PYRIywrElnKbshM6KXZTrcmlUkR/64CaasJwImES0:XJigrQKywwln6sy6KxrL1QajwzES0

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 4 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 2 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 9 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.jiaoyu365
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4322
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.jiaoyu365/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.jiaoyu365/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4367
    • ls /sys/class/thermal
      2⤵
        PID:4485
      • ls /
        2⤵
          PID:4513
        • sh -c ps
          2⤵
            PID:4805
          • ps
            2⤵
              PID:4805
          • com.jiaoyu365:channel
            1⤵
            • Checks if the Android device is rooted.
            • Checks known Qemu files.
            • Checks known Qemu pipes.
            • Checks memory information
            • Loads dropped Dex/Jar
            • Queries information about running processes on the device
            • Queries information about the current Wi-Fi connection
            • Registers a broadcast receiver at runtime (usually for listening for system events)
            • Checks if the internet connection is available
            • Schedules tasks to execute at a specified time
            • Uses Crypto APIs (Might try to encrypt user data)
            PID:4680
            • /system/bin/sh -c getprop
              2⤵
                PID:4728
              • getprop
                2⤵
                  PID:4728

              Network

              MITRE ATT&CK Mobile v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.jiaoyu365/.jiagu/classes.dex
                Filesize

                6.4MB

                MD5

                f9d922368aa3b34aa8f433f2880684e5

                SHA1

                5f300228ed0e54965c3745afd046ff40b812692b

                SHA256

                96d39f052bd44e78746d364f935be20b45dc18ff7f95dc234dab3f40afed12ec

                SHA512

                1850958f0f30953df8c58304dd567083fd842a205291361c570a6a6059200e365ffc8d1084bbd3be9acdb19f71491971ad7fe74dbffabc95f867856ee25c1a01

              • /data/data/com.jiaoyu365/.jiagu/classes.dex!classes2.dex
                Filesize

                3.6MB

                MD5

                f3e528280a8778514f89562d988e5d24

                SHA1

                109cdb07255d1f5b52fb0313a40fd6fc6f8b9109

                SHA256

                880f086ca8d2f831f756bde68d58b9b71307180b0c660a13f7caca0c9da05981

                SHA512

                955f23f68332aff7080ddbd7d0338fedbbacbcdba843a011b4d5501a12162d77f2830f294481629e8048eb464dddf8c9f27948531aaad86a254aa53e11af4d6a

              • /data/data/com.jiaoyu365/.jiagu/libjiagu.so
                Filesize

                485KB

                MD5

                015df5724b50b4fbc6dd0caf7ccb817c

                SHA1

                980780e98c9958aec97ab7a0de8d28a4c5fd9429

                SHA256

                183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6

                SHA512

                fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

              • /data/data/com.jiaoyu365/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                efde6fc19d25115e44a1ab89a82a8134

                SHA1

                96e424ad879a08ed99ae8cdbd7576c17838c67ad

                SHA256

                48f99c97ce3eb5a766bd4572f7e499780442d35c63c9c1964e6440a5bdd861d6

                SHA512

                8a5b13601d1e7f81692efa601df030c839aebd4e4e87266a6e331db499de91dcfcc23ea924dd0b0342c74201df8d70947351a9d55071ad514e94044895c50293

              • /data/data/com.jiaoyu365/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                f1771b68f5f9b168b79ff59ae2daabe4

                SHA1

                0df6a835559f5c99670214a12700e7d8c28e5a42

                SHA256

                9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                SHA512

                dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

              • /data/data/com.jiaoyu365/app_crashrecord/1002
                Filesize

                223B

                MD5

                b3c491f33bf8c1a9cea1eb3d00a19614

                SHA1

                a385e0e28b28ae05d6a108f9cb74ff53532682a6

                SHA256

                1604f85c737a1e90d48ac033f4b03ec7dc25a96f0c52204142ea327ced062bd6

                SHA512

                2b300d7824868d403d1451392281a67ad83f7b264bd7dfdf94995e52defdeea4713e63b0b25ef0cbc21fa02e3e4cb99f2959a64a2cb46ed503e08b700637d824

              • /data/data/com.jiaoyu365/app_crashrecord/1004
                Filesize

                32KB

                MD5

                1830c05b5a5e8a4a8b21f327356a9924

                SHA1

                a00fe798f1b0f5597214205de04006287c2477e2

                SHA256

                2009d495536313d8d48261a949713808123cf41d1937043df9b0bee362210f0a

                SHA512

                e6506cee84078cbff27904852557a7f463141003eeeba58fb09d7c14373c82efdf1cc5de0292cb4532897e4547457fb7ab450c221511a18b50beff0525f67b8d

              • /data/data/com.jiaoyu365/app_crashrecord/1004
                Filesize

                231B

                MD5

                56028ea8760569c2baed1be53c3437aa

                SHA1

                7c6d23213e6b3206f8228f776593f91f205bb172

                SHA256

                5ab42ab9730f38a80acfd1501ecf3052ce1a4c4fa7da4a359b66d20972e6a4c0

                SHA512

                b5553145c48c5295deae826799c8e2a567bca92e1661788c879a5864e146e6a18feeb8cf66fd40ad1d0e6e15e7c44e7845fe84a8a30327dfc458ef44bf9eaac8

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/02ffe73a253e683eeccd3fc096b5e28ba795b7ae728e16915c51b54d73ae7a8c.0.tmp
                Filesize

                2KB

                MD5

                f50e794bb45eaa4c781bad94dd7b1f0b

                SHA1

                1bb876847ee7c4dfe9d2a6527102129ef230a83e

                SHA256

                b8d9c703e35d805416321992fd7740ebf754813973482f8591a923ad3b04ea71

                SHA512

                e231a78f663fb52b15da3f8d0e428a2c019f1d334eff84ada20bee0c1b52275f43f26fa605a89cd659482833ea3e81f767d7afd4ea0754d760e33011134e3b5c

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/183334dca7bb68df7083cdf8435fd9fe5ae553612f4a94e6785925648441f675.0.tmp
                Filesize

                9KB

                MD5

                fcf0949d1d125192d798a55559dc522b

                SHA1

                d2cf9262413a509863ab134cce2f5f919b36236f

                SHA256

                4e3ab4542cbd5f186c180b3f9647379fa8cd4c8c40260f912aea415d06951eb8

                SHA512

                0dedf37bcf53b063a9fe95f9cb6ab3bdcd0aa4767ec83f676895def1fa628782b0aa2aa35a8bae8a873c63fcea1b2b94189c46676730989605978c0767131a69

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/1ef5bf2bb58164b7d77da8fba9406a8d05d6b5e57f6ff931772b107f2a850213.0.tmp
                Filesize

                30KB

                MD5

                3f6d4313c51c2d8689202b5cc844b1bc

                SHA1

                037949e6b047d49aeb89505cd464b6577be2f778

                SHA256

                50b62d1ece0354d0f6ec68f2ee31659ad61b77c86d2be8e4c66c500cd3a222f9

                SHA512

                7fccbe6ddf6a208a5b55c01c0506ddf7b6b014efd930c9223009ffe18026b4245f726bda5263cbb6e9270b07cd32e197194858a8a1aab3207570c57223d09e5a

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/356862feb2d23e0b8fd4ff9d15926c9a6d15b414a1c01df0943e0246330792f0.0.tmp
                Filesize

                18KB

                MD5

                c5a3823b30f3b6399d0816fa8e94fbcb

                SHA1

                1f546b0723b655a37c96fecd9c463ff6c7d01165

                SHA256

                e96eb25c0de153621af156097991c6ea7bcda7534f68fa6173497355c0142167

                SHA512

                2ff458af861fb1e3f3c61999367bceadca2fd0fff6b0c1009f26b0ae78c146b3f4a411f4ac8669421a60bbf701ce9d4ff6bd97653d672ec7ef085400c152c511

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/443c945d2de97699eb21a7b7256678da3b0022518214d0cac8ffaeb24f1cc589.0.tmp
                Filesize

                21KB

                MD5

                8f108253179dfdf6b1081ebca5ff10d0

                SHA1

                bc157cad3559eb6e5dcfc6591f41b197e7298a37

                SHA256

                2fff6642694d6a0fe8ec09f5f62251072d3757ab528675e83601c63991401bbf

                SHA512

                156db53e25c04e5669882cb62e7c64a3ea354331a1f8cbf90a0c6a42154961c5fe23b378402c95435f8608c42763c36227985164f2a0f6b32521c1319838cdcc

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/8acdc214949ec5542bc5843aac9dde7bc2e46985a06c8600e2c94bcb1e17524f.0.tmp
                Filesize

                17KB

                MD5

                cc283826900b5a918e24bc05df581cd8

                SHA1

                ae9daf61ea1309d09471c1bb6e64e20b5f7d5b33

                SHA256

                19ec833eb885f02872ce15e79b5d611408a2565284dcd30153992795cc801155

                SHA512

                d601a60b47350760b5f2c2b11954a7c828327197fcc6227f23bff5beba60ca56c97e997ccd989ab27de7c73b0c15804b06e8641415f7e77ee62bf2629f1e2da7

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/9e8760623e9146119e7211805c838db92d003dad82bbf272cab8fa5de19da4d7.0.tmp
                Filesize

                8KB

                MD5

                242b2945cee9b32e1460fc7ba6e4eb1f

                SHA1

                87cc5f7bfc61ebdd22207b80ce7fb28d57a7c26c

                SHA256

                03e8d5260c3c5613ff947164bd8fa5fd835e9ffdc244ed5f2027f1350dd79ddb

                SHA512

                c48cef25fee636861f95cd43f031b792b64618d5fa19e4f008c527e71983b464489c1d5ac57beda0869bdb12a19ae9f8351e71f931d945dd3b7b3d5113b7bdd4

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/c7ab90dec9233458f984ae6f06239ff59bb5e225fcdbc5059a7c980892beb451.0.tmp
                Filesize

                2KB

                MD5

                be2e130ac5f4944399ea520bb95370aa

                SHA1

                55e7b1e46cc0822b87924102d76d4d969bfb268c

                SHA256

                c95e360afcd38bb9618fdf6acf3f8d735ab9d52b8e58893dc8d0430fe3692af1

                SHA512

                c4109c1f6e7b9c38ffcd1a13f79e0e56d3d545ccf5a47052238a3e3d55f1514400dac82fe07bb88a53356593a4941c77e0700b7948ed9801bc46265cc04ae66f

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/eb7d99f8722fccdfb4617bdc79b4349bda352ad9aed7089aa9cb2788ee8ec45e.0.tmp
                Filesize

                5KB

                MD5

                d3c4664d7a863f8b940382aa8e434863

                SHA1

                903faaa22496e2fee85b480a7eb4930d701aa8a8

                SHA256

                7186b3b6457a3a9da5df4b824cf8cd35659a39c0650629c065ac0a3cbd2da7ff

                SHA512

                29c6e1eb545d7f7151e35c8dd6f5f5d021ada51f8b050ac782a29c700e2d50b57f1dd4b506b9454a543076a3a5ef60c00ab45aed495a56cddade7aede724e526

              • /data/data/com.jiaoyu365/cache/image_manager_disk_cache/journal
                Filesize

                1KB

                MD5

                be3df78009eb650deab8f46cb9eda0eb

                SHA1

                08fb66bf90344ce887ab3e8a25193f27b9792f3c

                SHA256

                b890bff81863c1181e542dd3e8856ed6fba45659abbf2cd4ba04171539702bb8

                SHA512

                e06a9befb293169c69281f9fae34fc7a2cd213641670e3b213b63abcab64637216793a6a68ba316b9f230f395a4af03009f9452c8853b90f442dbc1151ff3d38

              • /data/data/com.jiaoyu365/databases/MessageStore.db
                Filesize

                4KB

                MD5

                c43bcf3c6c7eb53963898ea6d95b1f87

                SHA1

                0a2961dd9c4d3dd52d8d54936c693ae0ec3d7171

                SHA256

                effc5b99eba54cb23ac4c2a63bb167dea416e43dc16fdcc9eb98b4cc09c15ef5

                SHA512

                3b281de03a1c801cf0e7cddf830e702d288772f5ce9df8f30ec3b554456ad4b5638155c95eac65b2bdb3bc1f7d9cb045018721d081128bfab70387fb4006d7b4

              • /data/data/com.jiaoyu365/databases/MessageStore.db-journal
                Filesize

                512B

                MD5

                d236ec80786e8dbc5fb59752eb32ae79

                SHA1

                90f67d454bda39be971dd2475ec4b67494f07185

                SHA256

                988d0a1430f5ee391b5b0d7befce04314b778f8763bcf3cde0547be18e4e4871

                SHA512

                4577b388e4f4bcf68bbf1a6c258b00aa673b0a2b73dcffacd6d8aeadeb0540c0769cb055488384262e5b905be47fc6920fca3a769f657ccf5992484718fc954a

              • /data/data/com.jiaoyu365/databases/MessageStore.db-shm
                Filesize

                32KB

                MD5

                c4c95bbb6ecd86dd91f13afad896a0f4

                SHA1

                1d213daecb4810aedc56e1e7dc1802fa92061670

                SHA256

                2875d159563cb830c07c8367ed48b7a15fe9612f076c402cc2b4d14cfaa01621

                SHA512

                22cc7923f754f09c23fd81a3cff0b569eb72761172076b897fb2a86e502f7551435f61c7fd253094d4e4518cfd5a7b50ced399831feada9e84ec7b542b986fb2

              • /data/data/com.jiaoyu365/databases/MessageStore.db-wal
                Filesize

                48KB

                MD5

                62787488ce53314c91b62e4e0c3281c3

                SHA1

                5754a872018fd3a466f957a8e75b5c3c24f575f1

                SHA256

                d90abe6389ad899822813ad3c86181515a34c06b2bd13a6c355b472804484ee9

                SHA512

                195b5bafddb5ed99324cef54c0e16662591242d3c0d4580869793c9a06600e82e4fde4439a9a0ceefef29903f84c81fad5be2faa5a0db31ed41678226fe589f5

              • /data/data/com.jiaoyu365/databases/MsgLogStore.db
                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /data/data/com.jiaoyu365/databases/MsgLogStore.db-journal
                Filesize

                512B

                MD5

                3d41b3a9c31eb80c0004129095db42f7

                SHA1

                2f5c3281bdb86190df56cb9d2801aaeeb677cd12

                SHA256

                156ab8d0405e573f99ee328f21b30bab8607fa1054e24c6514cffc1862e26401

                SHA512

                fd61dff6fbcf421e09e1ca9eebb93bd49a7e4aff4d478029fe0b735131677b9670a4a0a2bc8b252ef2ef7dc4ef7e7d66a235f715379723bc4a36d9439e58ff3d

              • /data/data/com.jiaoyu365/databases/MsgLogStore.db-shm
                Filesize

                36KB

                MD5

                486e2bac2b3e9e1cb411d2838a4854bd

                SHA1

                81dd0a7537f4af319b830ae834908986be85da8b

                SHA256

                5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

                SHA512

                c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

              • /data/data/com.jiaoyu365/databases/MsgLogStore.db-wal
                Filesize

                68KB

                MD5

                9fcc31b64bd64bd523669d3b5cdffb89

                SHA1

                0da0dcf3a34102b4b7fab193150ac9383af352d7

                SHA256

                4c2bc7d2cb85fa79e1b28ac411c49bf0778410fa8be68539426102ddb6d1330b

                SHA512

                89697b7b8a8107d0c468c1db010e9d9bd80914eb18566c0ba63e67136a6a15f012aab1f46d5312e56e7da5cbad290956e3d576a4e4b7f0984aa2ef0a62c0d290

              • /data/data/com.jiaoyu365/databases/accs.db-journal
                Filesize

                512B

                MD5

                76dcbd38b1539f9abb66813b4d5a9ed0

                SHA1

                547d2a00d0aad8948d5b8e742c5bc7a4538a7819

                SHA256

                9c300be21dff8d72f5a4c26d89af68212ec32048f8a5df44dad87f12d783f38e

                SHA512

                6bf06c3186be4ad60e320481117b8cd3af69894855bcb28ee50eae5254737ac234a8700c0f2e9a7070ee4412aa849733d03d391991ad3b9454d6f723bfa4a202

              • /data/data/com.jiaoyu365/databases/accs.db-wal
                Filesize

                32KB

                MD5

                c0769d6320f024c112466b1d47c42284

                SHA1

                285bc111ac6316141122f83437e18ddbdd68ec95

                SHA256

                e78f0626ce027cb73b67d56a6cf3424de2fcb3eb10ba155caadb8334fb2db731

                SHA512

                beeb400fe41baec1907b86a161ceba61502ea66f48cf286f9f9c8a14f4ee5aae0690e5a4bf2d672c5eb218e400ff9cd52b8da13ceda93a4dfa3f3b09ad7c8852

              • /data/data/com.jiaoyu365/databases/bugly_db_
                Filesize

                4KB

                MD5

                ea751d0f2d5f46209908c0f2e2ae71a1

                SHA1

                af47b1f65a1cc51d9db12fa1ed6e42bd88f53784

                SHA256

                f65880bedc8eeb3d15b2badc97d5c7d6f08ccdd2375e1774d8f6457ac3f652a0

                SHA512

                0b96d94be8603d37e777cdd13e0a4395a6e820a21d2e1bb2c5452ba5ecd7a2cbf29e213575df1d504b99afbdd21e111b46cebbdfb703e8a90653c107bdf5180c

              • /data/data/com.jiaoyu365/databases/bugly_db_-journal
                Filesize

                48KB

                MD5

                5e45d6c7f16ae537d93be4c045a95f54

                SHA1

                317f19e3b5c80233103e11549d87c15070026c15

                SHA256

                30b68d14c8df708f96ce64e52f1b493d22e46d8017d9c18b9fb8a525bbbd1821

                SHA512

                422b63bc99381a4e83f9456d05ac9339791ae472e6f704f00e2dcf7104733d6338f194a6c1ed9d19c9644f9a5db12b367dcd1e6d1b62bc67e31fe9e7ea0c8a1e

              • /data/data/com.jiaoyu365/databases/bugly_db_-shm
                Filesize

                32KB

                MD5

                bb7df04e1b0a2570657527a7e108ae23

                SHA1

                5188431849b4613152fd7bdba6a3ff0a4fd6424b

                SHA256

                c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                SHA512

                768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

              • /data/data/com.jiaoyu365/databases/bugly_db_-wal
                Filesize

                76KB

                MD5

                28fbedb4e937fcd4c1dc44f1bd8eee1d

                SHA1

                5fac055bba19f1132a6d1741e0ac807ecae5a219

                SHA256

                fd02c7f4792860c6bac7e2f8302cbd65216394f4195eb417afad41e888b21843

                SHA512

                6dbf1738c7818f6e83801610a4ea2926cb6a22177c7f7871723ede0446876014af54b052c48a501719bbfe379999a4f3a4aaf0d39694ba9d8e213c9928a57f10

              • /data/data/com.jiaoyu365/databases/ua.db
                Filesize

                36KB

                MD5

                0adda9c85a5e4808f5b1b74c0a8591a5

                SHA1

                5048107883ab1e345af9cf2e6849ce46e0e612bf

                SHA256

                1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

                SHA512

                646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

              • /data/data/com.jiaoyu365/databases/ua.db
                Filesize

                24KB

                MD5

                a6da32f68708c13ae8f9b2fbbeef36c7

                SHA1

                a1ebf5139f821a787adbd6402a23df4b624ebed2

                SHA256

                189133c692f3346f3b97f7299a17f4db8b45cd4f43e281547945a3ca1742baec

                SHA512

                988fd70101c3f9076e57de1f53110394c811002dbae445119ad09f548ffe1019702d5da820dc385ec1c17675d26c2133f30f27ca01186c7844af0e0d34d25e3f

              • /data/data/com.jiaoyu365/databases/ua.db
                Filesize

                16KB

                MD5

                5e5a611bf89ee7bb0183b8c0d483afa8

                SHA1

                4358420e8242fea3a51926bea71b3c3845922eb4

                SHA256

                994c4764c8c44bde984ed7fea92cd38e58053cfa378ce24bc6c3d9d3dc748e8b

                SHA512

                fe3ed383500214d323567ef3ef2edd14371f03226ae59aa2f612a610f9778136cc5d685ea6dafe79a4e982e94bf6b54a898c1670a7741d9c5a5ff7df4911256b

              • /data/data/com.jiaoyu365/databases/ua.db
                Filesize

                16KB

                MD5

                c88dbbe07ddd8b1f96659cc525da8bbf

                SHA1

                e81d447ae56eb9dfa9d5495f4ca255e5bf89a94b

                SHA256

                76099ae4e4d0e7163f6d35d62a02c3f690f806318a6a231e4b897c7fba3c0792

                SHA512

                0c25106729e604f0362bcae6654a4805904508b564c1972a7f1e2d37c85e8ad05f43b342ce3554f9d019acf06e81ca01144f3b11f6d55352399aee3420c9af32

              • /data/data/com.jiaoyu365/databases/ua.db-journal
                Filesize

                512B

                MD5

                d96676e9fd74acb6b6f9c326081f436a

                SHA1

                6652e8c38c0bcb28b27ede276fe4e0676c5795a8

                SHA256

                3ed14d6639c2c4afea74e9ccc4df792c42a9a354c4adb9b54ac6f96f77d74806

                SHA512

                a54d4761592c7bddfdbb325efa7efbe5ac8e185bef244a274e9cb06ac48f940c63a4d2a930971aff2500aa60f9f950ff5bfacfabc8f7bd0286743ed1fe01209a

              • /data/data/com.jiaoyu365/databases/ua.db-wal
                Filesize

                48KB

                MD5

                9722423f7b0b02927928ae079d067308

                SHA1

                19675228e05ac04c30bb9283231bcdeb7621c5b9

                SHA256

                d57659b72f5a47ccc43ee2361defc0915cfbba594d68d63ca8c5d6783a0f206e

                SHA512

                ed1c018a4eb9b9f6ee0fad269825bb70cf52f9654b8cda072be3afad179a699b4f734b52a803008635c71bcb5c7feb43aa5ad702b08b76efe1d323065315a74e

              • /data/data/com.jiaoyu365/databases/ua.db-wal
                Filesize

                12KB

                MD5

                a0ed9e04043726c9569bc1be4ea4f065

                SHA1

                18c8fae5507b4cc396e9bd6f0f21ea0a2a848181

                SHA256

                9a18d73cdbcb8a1f2752ca356783c0004785ea0fd935a2ac03aeaab38727eebc

                SHA512

                95f72dd9a668743d3c1fc15a84cdd48e5619ae26bc4845ce2b17f650446b85ecbe299d1f446dfd4e6d3ad5f75ea41d6877b6a801062e9450c0b06004492c8f94

              • /data/data/com.jiaoyu365/databases/ua.db-wal
                Filesize

                4KB

                MD5

                f0e878ff6627426fdb51f7993549cb2f

                SHA1

                9906b71b7e9fba52ee94217f8dab73be46287d4e

                SHA256

                a16ba1add6cfb9a389de7a3e52b7306a5c131b6b5527d0ef832e5438db3e49d1

                SHA512

                ee88da6386765b469899b5d44cabc682a8cb514c11c806dffba2a1fc4278d45b33f040b5ef1722a084ef2ce602edc3b0799a04174c875cb3fe8df45b5a63ed46

              • /data/data/com.jiaoyu365/databases/ua.db-wal
                Filesize

                4KB

                MD5

                052f59249af2d57aa4ce8a01f7abaabc

                SHA1

                8c679518bbb76206a0c2ac898141a66780e3e49f

                SHA256

                1b5cf96286ba979513b30b9805ce9c671f8c0651cbd70a7c812ebe04057eefe5

                SHA512

                d5f994ba96af05746dbefbf41d9ec9f32606ebf36c6b55de6efeb8d233021a97b604e313e9eda9db0fdd741c569b0fd45bf6d5472049ee57ede1a9fbc7194f18

              • /data/data/com.jiaoyu365/files/.envelope/a==7.5.0&&3.3.0_1716375614727_envelope.log
                Filesize

                1KB

                MD5

                2153897ebc3f498c451779eeea0f936f

                SHA1

                82178693c10d6441e0c81302adea259305384743

                SHA256

                2b61b9ba33f9012326cea927838ac5967b888ab284fac06bdce13a34d4079d2e

                SHA512

                1f341d2deeacd588c10a6d2642319e1e6f0de6717d525f496e35c5f854bb8b1571a7f7c95dda34892d8302131ddc512c151c9bb0947af54e69240ab6e351936a

              • /data/data/com.jiaoyu365/files/.envelope/i==1.2.0&&3.3.0_1716375612689_envelope.log
                Filesize

                2KB

                MD5

                6b440d199ce36a66eddbcddf3dfadcc3

                SHA1

                2d7a1b6f09ee3f369180f5319b7e5f43012ff61e

                SHA256

                77b34da5052e60553bcaca443830ab691efc7da9682f2ed48dc851b12c4ab9f4

                SHA512

                9081865fa36ab99463c435e83bda09a45859542f3e2d5ddb17049660ba3393548122bb3ba0adb5d80de644953f2d161b30adc2e05b6e4a844e08dd5f042628fc

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.ac
                Filesize

                40B

                MD5

                137ecd94ab1901c1f90547ec84dcef61

                SHA1

                1c3619d4185fe6842ef45e2831630869d66f6f13

                SHA256

                fa43963fcb5a831b115468859aa6f3eda0d6604b63b88307f354fc3158338e27

                SHA512

                5019bceb66615509499a10b8067f2994211f8ee8ed231376e79cd90611d922f4915c6e8794685f7947b7febcdaa3ec32aa14cb7af9f2e1bdcb6224d7588781cf

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.ac
                Filesize

                40B

                MD5

                15eec04c12da873c56c802e8ba7d625a

                SHA1

                0741be62fe6ae78b86aa7c97e3aac69583922a03

                SHA256

                48c6757a91c26a0ee176e8e87ee41c63272364e7146e700adf6818833366241e

                SHA512

                57a8dd43ff068acfa0fc6b465a4a300eda02e26aec269f63b4e1872719bbbc88f207b5563fd1392b190ee8c2d5e9aa0347e01436a2c6b82959498d4c11248e46

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.di
                Filesize

                340B

                MD5

                8c0208fb061a128d147988e2a9da0622

                SHA1

                aee134ae0981434d230d973f72a9288db8098a30

                SHA256

                9fbfac2744ed876a952aca9929c4663484c244b3b82d2f73d5fbffd3a979b849

                SHA512

                7faf38745ff428eee5ebdb27a3500ab52081d577cf57a41759cd5715f9ec9784056d93ad516d1697a3e111e77503208f6d7f2aadf7201d770a58ca7fe4444e31

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.di
                Filesize

                340B

                MD5

                c206a41bb4d89cff534940c10909daa9

                SHA1

                415c3cf75a08692a6f5b6116e623f2a9ceedc3a9

                SHA256

                9b1ce377bee64580f27c3efab99e727650ca0be959ee1873b4b90bbab1f8042d

                SHA512

                861220148e9338d5ab13fd68c462657cc9d60a953bb768479fbeb6c8519e1b2e4183a632f9f615564d7bdbee79b39e8cf3f01d073913bacf0fc7ee0c680ae4b6

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.ic
                Filesize

                58B

                MD5

                e127796b91618f7a49ebc98ef8962031

                SHA1

                44e6e79dbe3d0d189746eaf17f80db4203842a97

                SHA256

                f01ec2ca22f209991c3c560fbb0eb3606dcfc0c1862fe4459a538f0f5be76c45

                SHA512

                b228c8337ed932c223237bb6f65f967ff0c1efd52f4de5f9625d2af45118e8f003d8cf43df9c73ee19b26720f54a02773cd39506dc4c28deb63fc495ce6e83fa

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.li
                Filesize

                100B

                MD5

                c0da8b07ba7d6a89671c00cb41d867fc

                SHA1

                71af412be4d55a988f2ee05712d9ba536a965ceb

                SHA256

                7e5ad933f48016e5b9f2242f59916cd9d39c93b95f50c2178f5c824876d41104

                SHA512

                440db6a4064b623916befaf7c89e25f7f680ab81ba6a4c79e8a33c725c7b525b57c58e479302c98e9c70463d2e48ae387ef847ff6cd7cc1595d8dac1f49b46d9

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.rd
                Filesize

                84KB

                MD5

                f6fef0677c6ee35bf86c7b134b2ed131

                SHA1

                899d0f683a7c53c2a51f87c5f2533eab4b4c6cb4

                SHA256

                96595385b8fdfeab58a7db03b1a8037f07e5590246573bc24d3dfda18203fbc9

                SHA512

                688082b4f80af639692b316f2276f460eaa983dd3dcc87d9cf1691ed4f75536b0c25f9a20b7d260cd88acf8f03ae272bbd9352c19a97850f2ba52318132df232

              • /data/data/com.jiaoyu365/files/.jglogs/.jg.ri
                Filesize

                314B

                MD5

                f971b5f54b5df365d6e047841c0fc761

                SHA1

                6b397d4f25a3d67987e2d0c25fb002fd58791ac1

                SHA256

                26c3f75aa44916b1db55c526b17f17a320b0390ecd1f7a052dad8d92dd65928f

                SHA512

                b55ab81ab27e5892621d14221c41ac2a7c26e8a95b27c237672d2432c9d4b122e1bcf0fce6c5f54f5195dac099f549c4b886a0131ad6fa85a4b3bfdc63304df2

              • /data/data/com.jiaoyu365/files/.jiagu.lock
                Filesize

                58B

                MD5

                0d210bfb2a0e1f1b4c082a6a0f79de07

                SHA1

                bb8ed9e364db79d1d9f2fcde3f15091893222faa

                SHA256

                988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

                SHA512

                536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

              • /data/data/com.jiaoyu365/files/.umeng/exchangeIdentity.json
                Filesize

                162B

                MD5

                f2569b7d8fbb856939d9711062e9c5b2

                SHA1

                9452cbc79bbdbced091b94a971bd46f3118b5857

                SHA256

                5940194646b70a66e549939d738e2efb2e261790c3ed734c79e6d8997b7042f3

                SHA512

                ed5faf83c114835ae92ea570ac5f1a3b8e4dbfc8ecbb59fd1b2365550afb4a7e897850007a0dfe66e0e63b0f59d679dadc6d62d6621b9287e6356c685327a192

              • /data/data/com.jiaoyu365/files/exid.dat
                Filesize

                60B

                MD5

                4212fd25c25c5c639d172d5618839f9e

                SHA1

                22e25be8e3c876dc26b90e82812186a5075e209a

                SHA256

                35c1f9e93940d11cf14d2b0354c612a733f2e31557814f5b5d31a04bd9b455a8

                SHA512

                95bedfb2227bd73505b8b144cc3e406a45b7f2ba9bb2a8456bbfb5d0ce75629117ae0d398e20dc82c80ce0e079af1c31b59a66951059f0cab7dc864333a7ceb6

              • /data/data/com.jiaoyu365/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzc1NjA4MDY2
                Filesize

                1KB

                MD5

                75983bad8ae1b4015962a2b01812c91c

                SHA1

                e11329bacf9ac336df97dfac4e565c88c4943439

                SHA256

                62fcb8e7d79226f6ec1927cf9a3a8323aaf7ef797366a73b6fdd097f1be769f5

                SHA512

                27d0d453d042bf00c78739346ab4679109d2bd2fb153e10d11d4bb623721c51bed0fe61b4fe23110e988c8728610ae77814e996e0b1db3700a6f68614b9b8c39

              • /data/data/com.jiaoyu365/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzc1NjM4MzI5
                Filesize

                1KB

                MD5

                961951216ceaa6d9ee8175a4a2cc520a

                SHA1

                dd69401f7a91e546ffb6189286c926fa15217bfe

                SHA256

                281f8340f748748f8def954b78d2c7b5a2832dede4afc31e9026aa50505392f6

                SHA512

                4329f098670b22d0f8aac756234d9d1b8f1ddb19168d991fe6d2213eda538847bc49fed0fcd4013aaef59b82fa56647c3059d6ad7bb2397bb5e491edf822ac67

              • /data/data/com.jiaoyu365/files/umeng_it.cache
                Filesize

                498B

                MD5

                6dba96456762e855b5cd7803ee05bec8

                SHA1

                bcb01ba7c3ba23274bfdfd8d36bc2948f40630d6

                SHA256

                ac2f511ee3689195ec35721ddb076ee277538cd8378e15c487990bd731b4acd9

                SHA512

                a2b7c8592483dc9275ac1e4cb541bfa896320f099c5bedc5fe741b5d81709583ba4771114cf675478bb0da57aa14b4212187c9427e3db662623dcbb2b98a3fd7

              • /storage/emulated/0/.DataStorage/ContextData.xml
                Filesize

                111B

                MD5

                b41c855e11d8782a3d81d13a86ea970c

                SHA1

                8abffc084f235dc9f7fe53e6535c68f48a21f456

                SHA256

                2bc43ce71717ff1a9046f41285109e4052673eb16f8c18bf472d223b17f94912

                SHA512

                0f2e06a34726861cf13d82e9d9eaf6fcfa88887c2d4e51bbed48d651e4321c7bd86fcbd1c7c28096d1c2b53f8c21b8ac928ca43b78cb00bf6ae9e002d9bf2728

              • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
                Filesize

                65B

                MD5

                9781ca003f10f8d0c9c1945b63fdca7f

                SHA1

                4156cf5dc8d71dbab734d25e5e1598b37a5456f4

                SHA256

                3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

                SHA512

                25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

              • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
                Filesize

                111B

                MD5

                677d078b3c9e1845797c8a408ff8fd62

                SHA1

                5cd5996853246feb853b9c65392aedd7a98f3850

                SHA256

                736ed6265d36f65d075431c890b1e9b8d1d9cdadb77d7bf1611e711413a6e4a3

                SHA512

                39cef0179c12e82bd3054b88ceeef858dc0eb7a470366c670ef07421907aa8b423dc6a46d29d4b9a9e515c46359349cc8229c3b4893bd6a0523b10c02f8fd9e2

              • /storage/emulated/0/360/.deviceId
                Filesize

                213B

                MD5

                c5917fee0e197691433cc780f3c86e46

                SHA1

                dbbfef4aac270491c155e9f639627ece9fdbda5d

                SHA256

                3ea8f6e0d7e240594b03433290a6635efd4cf11959147b1f790d121cac537c00

                SHA512

                b8dc6de1126b18bef37db53cb4c4c0a1f10a746cbaf5b3c705047ace73d4523d04678cf69ce55ab3958cabad3301dd4d7d6c5957db8fe555453871b68ed8f40b

              • /storage/emulated/0/360/.iddata
                Filesize

                167B

                MD5

                2c16f8f4d6b5cd063a0f57fc4884606c

                SHA1

                46409e743fe95075095a184cabd4c18927d74bbc

                SHA256

                236b5da17e93fb7f9de42f4d6e8d5369f55e535af3741c944c1d1ff10e5ea2dd

                SHA512

                3a22d786a25f7ffa864cc5ac68c6b13b71fee226aa1aa6c6ec4530aecea4d3a0f67b47a37513e888a4aa3147fc3f531375fcc1ff54e07a7d615bb8f8af2d6aa4

              • /storage/emulated/0/Android/data/com.jiaoyu365/cache/uil-images/journal.tmp
                Filesize

                31B

                MD5

                8c92de9ce46d41a22f3b20f77404cc1d

                SHA1

                8671a6dca00edb72be47363a7071be65cf270373

                SHA256

                68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

                SHA512

                30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56