80a1a9da3fdee9a38fc55b58b19bbf769bd808499742744cb94992ad95139b56

Analysis

max time kernel
178s
max time network
188s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 15:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

67b172e6012f096d10b3da344dfade56_JaffaCakes118.apk
Size

16.8MB
MD5

67b172e6012f096d10b3da344dfade56
SHA1

4e687059cd30da75d655bafbf170051905fa6c77
SHA256

80a1a9da3fdee9a38fc55b58b19bbf769bd808499742744cb94992ad95139b56
SHA512

13902afd5153daf6306db2f1c96dba1c26fbf99658d236528e748755648926b9d83a882a4b7ad74c3af4fa2191aa3795434b22e706f9ccedcb8f4a4bf3bbe077
SSDEEP

393216:BfeClFPcMiYTfb1KSof0R+9nAlm4ZEahkNCNw:BmClFP/iYTD1KZ0RmAfZEN9

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 7 IoCs

evasion

T1426

Processes:

com.duocai.caomeitoutiao:pushcorecom.duocai.caomeitoutiao/system/bin/sh -c type su

ioc	process
/system/bin/su	com.duocai.caomeitoutiao:pushcore
/system/xbin/su	com.duocai.caomeitoutiao:pushcore
/system/app/Superuser.apk	com.duocai.caomeitoutiao
/system/app/Superuser.apk	com.duocai.caomeitoutiao:pushcore
/sbin/su	/system/bin/sh -c type su
/system/bin/su	com.duocai.caomeitoutiao
/system/xbin/su	com.duocai.caomeitoutiao

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

T1430

T1627.001

Processes:

com.duocai.caomeitoutiao

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.duocai.caomeitoutiao

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.duocai.caomeitoutiao

Checks Android system properties for emulator presence. 1 TTPs 8 IoCs

evasion

T1633.001

Processes:

com.duocai.caomeitoutiao:pushcorecom.duocai.caomeitoutiao

description	ioc	process
Accessed system property	key: ro.serialno	com.duocai.caomeitoutiao:pushcore
Accessed system property	key: ro.hardware	com.duocai.caomeitoutiao
Accessed system property	key: ro.product.model	com.duocai.caomeitoutiao
Accessed system property	key: ro.product.name	com.duocai.caomeitoutiao
Accessed system property	key: ro.serialno	com.duocai.caomeitoutiao
Accessed system property	key: ro.hardware	com.duocai.caomeitoutiao:pushcore
Accessed system property	key: ro.product.model	com.duocai.caomeitoutiao:pushcore
Accessed system property	key: ro.product.name	com.duocai.caomeitoutiao:pushcore

Checks CPU information 2 TTPs 2 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description ioc process

File opened for read /proc/cpuinfo com.duocai.caomeitoutiao
File opened for read /proc/cpuinfo com.duocai.caomeitoutiao:pushcore
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.duocai.caomeitoutiao:pushcore

description ioc process

File opened for read /proc/meminfo com.duocai.caomeitoutiao:pushcore

description	ioc	process
File opened for read	/proc/cpuinfo	com.duocai.caomeitoutiao
File opened for read	/proc/cpuinfo	com.duocai.caomeitoutiao:pushcore

description	ioc	process
File opened for read	/proc/meminfo	com.duocai.caomeitoutiao:pushcore

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar --output-vdex-fd=96 --oat-fd=97 --oat-location=/data/user/0/com.duocai.caomeitoutiao/app_libs/oat/x86/ymdex.odex --compiler-filter=quicken --class-loader-context=&com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

ioc	pid	process
/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar	4420	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar --output-vdex-fd=96 --oat-fd=97 --oat-location=/data/user/0/com.duocai.caomeitoutiao/app_libs/oat/x86/ymdex.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar	4303	com.duocai.caomeitoutiao
/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar	4395	com.duocai.caomeitoutiao:pushcore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.duocai.caomeitoutiao
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.duocai.caomeitoutiao:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

T1421

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.duocai.caomeitoutiao
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.duocai.caomeitoutiao:pushcore

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

T1421

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.duocai.caomeitoutiao
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.duocai.caomeitoutiao:pushcore

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

T1624.001

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.duocai.caomeitoutiao
Framework service call	android.app.IActivityManager.registerReceiver	com.duocai.caomeitoutiao:pushcore

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.duocai.caomeitoutiaocom.duocai.caomeitoutiao:pushcore

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.duocai.caomeitoutiao
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.duocai.caomeitoutiao:pushcore

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422
Reads information about phone network operator. 1 TTPs
discovery

T1422
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

T1628.002

Processes:

com.duocai.caomeitoutiao

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.duocai.caomeitoutiao

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.duocai.caomeitoutiao

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

T1471

Processes:

com.duocai.caomeitoutiao:pushcorecom.duocai.caomeitoutiao

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.duocai.caomeitoutiao:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.duocai.caomeitoutiao

com.duocai.caomeitoutiao
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks Android system properties for emulator presence.
- Checks CPU information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4303

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar --output-vdex-fd=96 --oat-fd=97 --oat-location=/data/user/0/com.duocai.caomeitoutiao/app_libs/oat/x86/ymdex.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4420

cat /sys/class/net/wlan0/address
2⤵
PID:4644

cat /sys/class/net/wlan0/address
2⤵
PID:4693

/system/bin/cat /sys/devices/system/cpu/kernel_max
2⤵
PID:4726

com.duocai.caomeitoutiao:pushcore
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4395

/system/bin/sh -c type su
2⤵
- Checks if the Android device is rooted.
PID:4520

cat /sys/class/net/wlan0/address
2⤵
PID:4666

cat /sys/class/net/wlan0/address
2⤵
PID:4711

/system/bin/cat /sys/devices/system/cpu/kernel_max
2⤵
PID:4751

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.duocai.caomeitoutiao/app_crashrecord/1002
Filesize
243B

MD5
8e5e986e4ba308a322858da17d093a9e

SHA1
91e7ef9fa0b1ebf6a389b0570c926b004038ea15

SHA256
04e70a8343f58ede20cd6fd21852645cabeec18e8bad30f49b247a689c231189

SHA512
2dec7854127a75ca4fad7e3b7ea005bb0a31cf1c843cc90e5a969b84da1a7d8a0384194f3b7c6f2718e0ea963f5ef2f75961a494a96a57cd2a407925882c9b13

Download Submit
/data/data/com.duocai.caomeitoutiao/app_crashrecord/1004
Filesize
243B

MD5
9c8134114fd606c414f89f158f86a325

SHA1
02ad4fa9ff311e4d21092cdb3cca3f886242c3dc

SHA256
98dd339b8c5d02686b351cc4c51316522be7c0ed6969beb4e040f733ae677ebc

SHA512
7267504c40ca32eebe5bef8247d448378cf7d0805b6eacb43660b1ec8a60cb60637698f62853a1af493e88d173bc3c78708363a13458619d8a50d3ac87e78eea

Download Submit
/data/data/com.duocai.caomeitoutiao/app_libs/oat/ymdex.jar.cur.prof
Filesize
439B

MD5
8ecd9aa674ddc8fd04aa9880a55d34c3

SHA1
9c4f6d120d057028c35a044cf1f72ce51f04a3bc

SHA256
40750ce38e2464874ae91b5b967fca8f8361558d9780f9fa3bcb97f5f121fbd9

SHA512
7a9c99638abef5850120b875f735c551b05996c9c7be377bd5991b28e4a7079a94bd7453af26093f3f3347fe74d10093e520500a37c9fb50b8f78f52a845743f

Download Submit
/data/data/com.duocai.caomeitoutiao/app_libs/ymdex.jar
Filesize
322KB

MD5
a5a696dbfa69b0bd6281e6e6ca8761fa

SHA1
01e1224aaba5e5e438d2ab1cde26941a12957375

SHA256
e5c060d27f2febe64c34e6d74cd2a271d9c695ec996c789831a2251ee0ce9178

SHA512
63c0bd5ab8b91113e8b4045d722328481752d18667470bc2198a4d5e3a28104d422edee5db88a78833e1d6cb3c60b59de9bf2bf40e910a8a8e229a83fceaee68

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/0ac58fb5f33a1ace37a5bfcbe54579d2
Filesize
20KB

MD5
b1c1eea2cb20040b9fbf7770f9167780

SHA1
78b67070ae1f91e43005bf56f878d3570d190891

SHA256
a23810b4bd43fab48ff0e03f71a73462ad04b8ca7779ed8a5601cde528c13cff

SHA512
f31f9356c69147f140e41412e386f0457932848342e36c80f232ac1653bd8ceeb3b8bec132c25ceff4cdab73ad5c9449060699fe93b55ad43f254de4563ba98f

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/0ac58fb5f33a1ace37a5bfcbe54579d2-journal
Filesize
512B

MD5
1e96e01988b0d294d2c330df2becb419

SHA1
1cd7c1708542a795aa54ae1f64b573fb9d981e5c

SHA256
8cbc0af40cb6b3c9ce8a92a834ee0540d323a568d84acb70e05297f9ed457843

SHA512
08098750a0112dea3fb86c2355eb89b58625a4a675b3e2ba0f2c09fa4e855b285a858c75d5cbaef06f088eb01edf641a9359ca2d00672c008dcfdbfb05466238

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/0ac58fb5f33a1ace37a5bfcbe54579d2-wal
Filesize
32KB

MD5
1c0738608f232f3a82c06062ec2fafd4

SHA1
d5255e75640f0af3a568f92f858f1295bb82678f

SHA256
55ed830443101a651e52ff45b5d335d6a487edfc965ce5ffe0f0703ba5d4c945

SHA512
e2bb5b687de90b0f978cbc8b9e45c5b7d59d7e4e063edf822213cd41066af841eafa3abc61e9363824e10efce3459c753aae39ed4c8825a259f950d5cff8a5e1

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/91d786762734540815095e7843745947-journal
Filesize
512B

MD5
edce7b34a2d5a60f08ec79640c1c84c0

SHA1
303eeebc054281fe3b88ef4f4e8accbe34e0e8c6

SHA256
856ec200516bd622c606545e7648f7dd2c37b9deec2ae570055aafc19342ff54

SHA512
e2b75a2c9aca79d4b63372bf65222d8f3fe100afa181676a07d4b5ec2d38c6bed8831c42f74659447bd9f472d3aef806f7ac7fef5ce3282c9bbfb0a19873cccf

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/91d786762734540815095e7843745947-wal
Filesize
32KB

MD5
64c6b1bb153611f2d52ca69e52718309

SHA1
4b9a77b9b7ece698ce62c94bff6f5485cc8190a7

SHA256
20ea4e3bda6af710188ed9f78651452e6db338007518715aae10beb9695935c6

SHA512
348f9a1de65f4ebd0ea6de0190e97cd27651cbfdb1f12d10e5473ce90ba6104532b9ca48ad10c370d27d22aa06d20363e5286feb29735b3a27b03631f7faae40

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/P15pKIjsm64m
Filesize
24KB

MD5
032abd6bc70ad7c9484f10a7daf57bc7

SHA1
12e3c03375192814883d5fd1671e2b0c64b0ae43

SHA256
9cc41eaf3228c605583528005cadbf69eb145da3943e09e3732677423dcbe976

SHA512
aa28b2d8e87dd6364e15b1c99c52758f937585c126cda7db38cd2b4e5fb3c3e5775a92cd1d5ae68b03a6c59e7473766d670f03e3ee30e8ee53c2bba1b73f243f

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/P15pKIjsm64m-journal
Filesize
512B

MD5
efc975c1d8bd1d0a5df1ee0f513d1ff8

SHA1
902215ebb55254a54b3d0294d17c4a342865a10c

SHA256
5c4de54656e86d51e4b3cbe1afc5b2af5e7bbd75e46b34e2c422ac36fc85ed97

SHA512
bd31d5bcf9ef9595d66a280860cb4d9c7f2f7c42ff531085e0d54f2e3b5e1a1a6891da05388733e7ba8603bf856f2129abe15b66d9add164f5d288fce7d25375

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/P15pKIjsm64m-wal
Filesize
36KB

MD5
1ecb2d17f256006b87cb95c190e39618

SHA1
f87acfd12805a5884a9f6ae5b713c2bd2f087bd7

SHA256
09ae39197aadc74d74f452a814a2b7120cd911867ca3d9285268b1b2286006fa

SHA512
1a38b30b72931cc00f5574d46844c2e5324646225a7cfef776127efd0e1b858b1256ea4c7139f05597294d097b678aa504adb8228c52a75eab06bc78fd84e62a

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/T1oX0rhhuXWt-journal
Filesize
512B

MD5
53b3d684b2eff31dd075f2a3c95d98a0

SHA1
628e6acc9dba7ed1672a2bd2a243b946b431d2ff

SHA256
ac1f198e95ffea339449e1c3e1f827c390747651dee6b155a304f3f41b26463e

SHA512
6bcb42281c4463fba9ec2954d8936b78232b0128a764a2aaadaa1faa741fcaafc768de5293d760ace0745b2f486846ec39f549980f6eca1e49ece041a5cb268d

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/T1oX0rhhuXWt-wal
Filesize
36KB

MD5
d67b927bef47fb37ae3434945f6ce605

SHA1
443db58fd463f940a1246f5e999ac53af657c304

SHA256
0ddb1bda6a5f5897e73eec134f0eafb23c4d6438fb509cbbe4d894bbde3b0901

SHA512
9959b97657f65ba5828e6e5dfc6f306ab2e87cde547fe6af7e3f756ff7c6f7262628384c5b10fce68c903e60d378d801983dcc4f1ac36dc93baafc1c0aadbcb8

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/ThrowalbeLog.db-journal
Filesize
512B

MD5
b90988fe01e30a65a05140245d171fea

SHA1
751abf0736bcee528c27563b418b749afeb75487

SHA256
2ef99943fcf4e0884d0122ee689a00fb12b7bd11f16dcfd37b8561da6a78a9d7

SHA512
96e9400f1048ec89d3006c02504ae84b6ea8d1969ea801fb1c8f1be9eb20e7ae802f42e1942e87515374bae4d8cb855410dc4568e347dbdfa9c296fd5f7f3308

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/ThrowalbeLog.db-wal
Filesize
32KB

MD5
edf788431a411a40bb34938e22d20ba3

SHA1
52ea44af07a5c03736452a8ac1a9c3b4c19b3fb1

SHA256
1c02032dbc81dd56bb9541b50e096a7a5ee0150fcd32698726af13b5071c3092

SHA512
e389830f7f22e80365c1931b11d54b83f5e65cc991824c535bae930a87ad3fb35fc8c94f42f858d01b3ffdf94c8975d6dcaddc4df171f30fa8fae72da2fb08c1

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/XKwVoK0huy3R
Filesize
24KB

MD5
9c37108c041a67252d4fb5059436eb9f

SHA1
f65bdd652f9b2a098993d2aca0be2578e8eed20a

SHA256
f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55

SHA512
d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/XKwVoK0huy3R-journal
Filesize
512B

MD5
2e6011f5480caa9744992cfb6ecf6983

SHA1
adfa5ade4e5b821e9fb401a8c7b1cf491de53387

SHA256
30278e8af195682c68e77bf02e990848393b7b4f337f31461966fd2912edd103

SHA512
a5af535497385227a0536cf69af77d3e8edcfc48f89f0cb49c12e1c162a5faf85a96244c9850454328d2750184edc7954e9383001548cf9bfb51604ceae91636

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/XKwVoK0huy3R-wal
Filesize
36KB

MD5
8219ba29015c500c0d1f6b339bfc209d

SHA1
de633f4b308517151c3f26747de29e74f8ee6601

SHA256
d2ffb63670632be49a6f90bb3b3b663618a7ccc1a8628c8bcd920de1042e1f0c

SHA512
65df7fb76f3adbabf9bdb2d96fb900db682119a4396b56a294645d4de4588962c323f7b6bf284033de8ea1eed9749b5db8a783d66f9919820f437f4c6bc79585

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/bugly_db_
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/bugly_db_-journal
Filesize
512B

MD5
9b3dea38324be02599fbd11193f652c5

SHA1
34fee2c994e2e20e94179736eee88b220e090957

SHA256
2be6192b78a6eb3b33d38949182e73a612718099fa6f428bd079cb7f4ab8e13a

SHA512
083a1cfc78a4f58aaab057d556daf670bda0d9c259e29e82eecca6a98356ee2a86f4994e67a6f41e2c2cd40242e566e3e78af83e9d4b9d7e7f9e05bdddf595a9

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/bugly_db_-shm
Filesize
32KB

MD5
4e8994d4beda752e9d28c1d44f678185

SHA1
c358a00bc95882ef1d86ae8eceb90cc81a69ebae

SHA256
b8930c6adcfbcb867f6b5217c15eaa296c8f685e4273919b87994cc42a016611

SHA512
e19af09d8031e1a224e6da57bac1105a3987c59e06d9c81f8d6a1a18311b083fe525426cb96dc2f87632c8cbe3d18cd46e239bc7d548ada5126aeb0008ea0263

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/bugly_db_-wal
Filesize
96KB

MD5
5469f7a4a5261e19f787b23a03b0e9d1

SHA1
eddbe56394afb4e59fcd0ef7cfad9379ba06f083

SHA256
4e6c7142265ef99a41b802d858e679559c14aba9c9df2c6eec6e2032bda8e420

SHA512
9927558f4029ab9e4c39d26303f8b825ef608e59656e7aec9f318618f672c3ac17df5105542aa5fc90a2ba4be488a57bba9b2666c2c43b18464e21406685ca18

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/bugly_db_-wal
Filesize
92KB

MD5
33e80f4e6183b277b2380b462c6da919

SHA1
f867ce4e20fceec2863c555096b53d45b860809e

SHA256
43da4c3710fd5e69a473d53e028e7da712b62483e965e89831ff2042c886970c

SHA512
57a066a7fa5c85f3c21549bd89b57280bc59ad22bc15647b895bc51182f122cfd40efeb2fba560d0368ef683bf1ecb528fcac065496908e63c42074bceaa988a

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/d0b564ccef8dc2ee0e6972fe0d785956
Filesize
24KB

MD5
6c217ed0bac8d2f91b30b79d439f229a

SHA1
9ba63c2aff1bb2c70250a9dec1f4893d2ecf827d

SHA256
344d6a8d8632f380bc914af9dc9f0296429a0e9fc273e68e57870032bded5720

SHA512
fa9386f1a267171f8c80095633baa7aaad145986608f9bdf15c6708b2b50ed19359f98f9b9ff395ad26e361a85cc9e26495b23ccbc1befcdb03aacaf167d58f6

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/d0b564ccef8dc2ee0e6972fe0d785956-journal
Filesize
512B

MD5
f369627d0004a3144e032971b89ec110

SHA1
105315255cf1fcb21b0ffe4a4be0803d9a307b81

SHA256
022ee4cfbec896b141d384e8dfe08cb17c154e86ded4c95cb5e00c0c0af59dad

SHA512
251cf675649152ab3344cf0270184ff240457e55fae0ac501c4b176e798f726f934ecf804078888e46d498081164655960c7fbde32ea8941cfae5d44b68cf488

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/d0b564ccef8dc2ee0e6972fe0d785956-wal
Filesize
36KB

MD5
023e92042054573ef9ee851a77f63740

SHA1
1ef70e484d086d909431e29766f14340a3325945

SHA256
197ec3de095d024296b6d0cd9d93783b93b56efd560bde495f24fe0ae17fbadd

SHA512
865eb89e3081efd3c954f6435dc32a5b4547007041b6af83311988e8cf40ccdc6658e7faf45a41b3eea4ac59d8f1dc238af5d953645481d41899053c56b8735b

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT
Filesize
32KB

MD5
052e9c9fe1246bc13c5030a1c399e453

SHA1
f193863a5a50bd60ece7953f734378ba71b1f720

SHA256
1207a1d318b44ea3c8087d650480779cab52009e92f758c1b0720806430a3bf7

SHA512
e2e169e4120c3f784302a1850619ede74f5dd6fa9f313d056f1fcf246d291d27f02908de4cbc3f544791f1fffdf1d72f0335a52f5ef8ef8f976232c65f07a63b

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT
Filesize
24KB

MD5
3669cbc5066a3b473bf1f2590a05e8d1

SHA1
1556550af9bbd2a0c605640b578e68ad0d0f297a

SHA256
8f73de74b42c276a2a46b413738819665564f677311c268f162276b8611fbea4

SHA512
b49640cae31a46f25679ad016118d75be90623ed4630095fdf43f08cd73df286568879fb684de6303a077357bb8d985c01e8315289d4ad27faefc116337aa606

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT
Filesize
24KB

MD5
2daad348f41175112968833df2a2dddb

SHA1
dd0a8c3b3154ba2ecedaeb8bb01dec8348082a6f

SHA256
cfff94560d06ed9bd13a1d62509023aa69f7a9ec3000589bdb65251d69884067

SHA512
0d09535b4ff700b95ada6e0bd488972060523106aca362f56804718b48a7b74a869456831a12f286d2a6ade19879917a690d8dca87a9df9cc7db356d3f97b79e

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT-journal
Filesize
512B

MD5
95043df0a2a4ad8c6022d229fc58cc0c

SHA1
05deef2f96a185cd171b1259eb877a19ea489379

SHA256
a8537fd53ea7932ce384b44742174c94f6b20e1ff45193101f25491e2cc51b80

SHA512
d7e6fa0482ea74f22fbde240a028313d7c2db6f0ebb7e9ad116006233fc20d90c4c3e4a7d9980af118298d86c2fb9867e244693937491fa289536054b2dd2a52

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT-wal
Filesize
36KB

MD5
a1ffdfadc9f823de6066f6b60415b573

SHA1
bf333b42c8b48da7a4f513971616bd10d8916214

SHA256
11d49c18da23e5027b02191ceabaa6d4e9b645b0471fcf0446350aa1baac6e51

SHA512
9f1d9495bdf7d8e1e11248ea897b1eb89d1c7f82e983dd30ffab200a6d32d19d39f957d23bc273c62f93b4c43df2887b45881bb7e38a5ff037eadce7bc18e24e

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT-wal
Filesize
12KB

MD5
b66e1fcf2e70177497e1399e8afaa238

SHA1
9c353e4b7ece9e386e7849f517a77d66de431ff1

SHA256
6c2e2e6a4b024fbe8c7b39b4c9834bad097675b1fdde4b47d5909bde08393bc7

SHA512
8adeaae4c4e1157821397c9b4ca5e180eb3513cdae15da538bfd95df516fd631544cddd09ea15a3f18cef30b21f201d0d1d2e1a35c394b5469151f6e55d5f765

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/jqIqJYOT3JpT-wal
Filesize
20KB

MD5
df6a640db257ced580fff5273d9bfcac

SHA1
90bc3056118b8b07efbf6d2df9808e19e2cd3067

SHA256
039caf3aa2a4292c89b801ddf78bfa5edc7e0d91c4d3a8cd5bad45f60b4745e1

SHA512
4e6fe6f73b72634b7a73f0261a17757907df87a4128a170fc4d9a6decd4f43099e3196f5ccd30787e003878d576687d0271aa0c23a4fbb6bb181a8931840cf69

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa
Filesize
20KB

MD5
340f65e963170893a3dd77706831cc78

SHA1
ce76963ca6b1f7552ed52f877e35d8f188d27a2b

SHA256
062b972b8c4a1dc737f96d3af95be4cff8b5e4f50613a7968403f535f3479515

SHA512
86ba57dd7354f9af8ab916c9d7d339356b3b0dda7c6b3b6a7959b02c6dc42f4dcf56ea0a15e85cf29760883aaaa0051010ad469159c9b0aeaa9ce43fd8c8e50c

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa
Filesize
20KB

MD5
acc4c4f82b995a38c5e88aa8a06e78e2

SHA1
53b80ee9546ba128425de7a9e9c1e7aae3208c0b

SHA256
c9c8a751873f891f2ea71c905374c3147824f0dccbdc62631ab92b311a636996

SHA512
0e214fed75b3ce2e53802ded21ffbe562e02133aa397e548f27b6dd20c55b634dd4ab483b4a05b3451b16a1ab48de6dc687cc4eebbe7e90c1c49f253bb42973e

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa-journal
Filesize
512B

MD5
1f090eee49a86a37643f3d866ad2af57

SHA1
4b64b14fed46d80240897db8a3a71ec434f938f5

SHA256
4d0d4d1b56bc5b2e44f896076b689d4ca92dc0cb276f8409793582571b5a61f1

SHA512
f62cfdfb35f97d71e067dfa7beef0a3d40d0420975546d14aabd24b57e69fdfea52b82b09978d67b055e22f095839172695ea22318b2aae9c290a9f71592f406

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa-wal
Filesize
32KB

MD5
b32d04aecbeaf469aba655dbf91084d3

SHA1
8a9a1ff7d12b0351b4130b64c2f8e2170e55d294

SHA256
ebaaf7471661adef017c09d7bed50c9f12cdd0929e568ac902c6606773a81666

SHA512
a78331198fe4c57efc3ee4f7d52ef7a1427f9f7d7f68d9e3266b7d46e1b7b9e60a8d49550775600ebc05ae3da1f697e80e30c67aedfde027b1f42d8fd3dd64d7

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa-wal
Filesize
8KB

MD5
2db29881d831e2e8e1d72a42b45e3274

SHA1
3a384469efc975d5baa82221d7eb428aa72eda4d

SHA256
cf49091ff41cb45d26efd125548389be5e2efe7ac455266e61e7dded59c044f8

SHA512
f87ba8084750f971630388f774ac20e3b0614d79e41ee2da2b6a0e63c6022e75771763c8ef7a32225c92955b02eda2bd3848cfe1ee78bcc9268fd6462cd1e06b

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/usa129xa-wal
Filesize
8KB

MD5
c91f2f15dede78e0f17759b4ca13e0e2

SHA1
e79742ea04b39abe84a81304aa7246a27b024b6d

SHA256
51214b7ca428b1bcf95dd015f74a4224f43966fb8dc8b502fba1f664a5063a4b

SHA512
3c8ff66753a44499e3aec7a9b5948902dab54c13f99b10b9dae565c5aa6bfc31607a0198f7ff500471e48292a2a263ea2bb22a1b12d09af796dcc1d19edbd7b0

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wIU6pTyUBYWX
Filesize
24KB

MD5
3f46387c5a9161a06c35918e4715e9e4

SHA1
f03b4527b29495a3f50be85d6afba301e9e3f1c1

SHA256
687a930724a6054924254f945ae475e34ae87ebdc2054881c34317cd91d46ca9

SHA512
614fa11f57f1ddc2750185eb908a580f1ae1ea53d4f4ff6881610942a36554b918138af7103859821d90cef12ea68bcab1ca0e4548cc5a78ee7a3c658b37f3ef

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wIU6pTyUBYWX-journal
Filesize
512B

MD5
1349704570f24fd726b145c1f88444c7

SHA1
e033c99aa6504acb781302f8bca85656bcfeb97f

SHA256
f9a68d3155bd1a5091ab5c997c953f035d671ede951154e485e2adefb604974f

SHA512
b2ce9e8988ba6b8d4140928578105d24c34a3f97e1908457ce221301b499f766326334b6e3d7c0b5bb2cb01ee69826978fb7c91078c7038bf6c2eccd65194008

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wIU6pTyUBYWX-wal
Filesize
36KB

MD5
bab75cd8dcdfad5600aa7bbe1fdd4bec

SHA1
cb30b23afd4f2b7570960c16079acb01af6fd7ba

SHA256
0ccdcec4d9eb98f610a8ce371b33aecc54aaa3f6a04f1622f9770feceeed7b15

SHA512
8e1efa2b22443edb447aa936e3fffa2daec45767253292924641f6a3a367fdce75476e04b7babe72593c63af931019eacbb1169be23ad348d6a9d87021f5cb0f

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wsUL1uCdKvjD
Filesize
24KB

MD5
59413190ea19211285b5c0fed44c19c8

SHA1
ee67b7590047c3c17309f6e6eed48556aabe4c92

SHA256
3511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d

SHA512
6a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wsUL1uCdKvjD-journal
Filesize
32KB

MD5
a3065748523251434d4e3447fc0507ab

SHA1
9b7edc38633bbfe3dcc92b03d667d5c57a72c946

SHA256
4bca1bad56ef6adde915790cca3f8d7c400a13588055f6636424fb9f65351faf

SHA512
7ce8fbf89fd06b8bac1bd7e0c69fc07453146b992c0ffd01e72c66f2119948d1b5bbf81d0f653f66c29cae12e8222af7415a019917e093f66f6c0242901216f4

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wsUL1uCdKvjD-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.duocai.caomeitoutiao/databases/wsUL1uCdKvjD-wal
Filesize
36KB

MD5
656d4b7660472d2a9f2dc05ebe47000d

SHA1
ddcc1937587da5d14c2f810b604ff773b5b53db9

SHA256
c6cb3b0312dd16b6249faaef5bea3f7864f44a5201eff136737e2924ef24a023

SHA512
8dcae502ce2d4d33721fa2afcd115d37675c1c026c9f80f4b5bd0ed9a329a87bd38159adb82bf34655660fe7766af59d92cebc8161aa74abbccbc7b320026874

Download Submit
/data/data/com.duocai.caomeitoutiao/files/jpush_stat_cache_history.json
Filesize
500B

MD5
21da5b32d7eebd6aa58c43ac0362db28

SHA1
daeae26bfbe3604a4cfcc543269e43b5d62849a3

SHA256
aa6a700fee43a0e2142eb8e3b16d6df9764956ff249c182943c7c2a75c08670a

SHA512
78fdcb50284407e1fdacb28b3dcd10ac521d6e49e56c52c44d3522ad1692e0e65fe5872dfc34e345696fbeff05fcfff79a81b8b1da8214a6240af9f8be919b24

Download Submit
/data/data/com.duocai.caomeitoutiao/files/jpush_stat_cache_history.json
Filesize
174B

MD5
1b8ee31fbdd20bae257fc518d094f5b8

SHA1
642d0e72a221d9cc83181d731a3ce921b8f62b12

SHA256
4c57e1702c4e0e9dcb3e5b3abba253eaa07a4ee6075a7cbdcba40f6fadf06c66

SHA512
54b94856fdb26b1568cc6606a117c978ad35cfb42ae587e03dcee2eb7d010ef3882cbc9db588c64cd303db334bc6a836d0c9bb3ff93684c3c5a295c00c3614d2

Download Submit
/data/data/com.duocai.caomeitoutiao/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzkwOTE5NzY5
Filesize
32KB

MD5
42906440b8b10a4a0ef7b523c45d8113

SHA1
558a62b078e2e8b461555de7f18952cf214ffe57

SHA256
60c88cd04d4dba711f5f0d8b5cb400a529a7a7990b14f233ec17b595845db3d2

SHA512
96cfa2fd0e01dc247b7eff1050ff25ad97987882ab3c058e8fc17cb6892dcf6b79de6c19948ef662be393ae8299366ba58ec998e5c59f682091aca972ce867e5

Download Submit
/data/data/com.duocai.caomeitoutiao/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzkwOTUwNTcx
Filesize
1KB

MD5
8ed561b5fe6adc0b4388d02b3f8c72c3

SHA1
0ff010e078c10e50a7e1565da24642e7f9aa73d7

SHA256
3ad4d131a4f680cd96bfc08731b040073e22d0c6f253a971fb901c309ce45175

SHA512
5630a72324afa90835c3227e8e4c1afd50e5a1b1b7c473df58d8150fca2df35bffbe0d4eea0cd9e9b134e20312070c0524143959ededecdbfeee71d2a31887a1

Download Submit
/data/data/com.duocai.caomeitoutiao/files/umeng_it.cache
Filesize
415B

MD5
3fd4be17f59c1cbc2719af2bfc424c1a

SHA1
b56ba513056220b9d4fff75d223c28095f3d7f7f

SHA256
d54597893a314116d051000193b12408c522ccd03440cd7ee1c9ef2befe555be

SHA512
0e63be0bf22db22e6ed3160e6150364e355f1a6a676bd8e50ed759017bc3a2e8633cb22aa3e5ca132f5eac6562a7135a0f05b2ed84f42eef572913a0715bacb9

Download Submit
/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar
Filesize
742KB

MD5
2682530463436455ab3d56a98fe70db0

SHA1
bbe3862a50d42930112470dc631fe31ca2d4b84e

SHA256
1bc50ef06b0e6938cef752441051a60183277c9d3279d8863dc947256375a291

SHA512
a4a25918c0b48fae1faf5a56534a99aa15fa8f1af8fde061a09630d3fffea00c62d6bd66861075c5d9304535b19daddff07926dd1d464f7da38f830f31c17ba3

Download Submit
/data/user/0/com.duocai.caomeitoutiao/app_libs/ymdex.jar
Filesize
742KB

MD5
9daeada774305a8e182827ec87f39946

SHA1
e310284ce0990602951ae27527daf9466b77f315

SHA256
591486135eb9c5420007a46c8c77f5e125ca838d0bf665b0d79ceda43b090087

SHA512
80a10fca88222d0dfc098c5b612ec5309810ce54dd58d7da2a6faf5b8a8ececfc24dc47f9629288f3950c5d58b8836543b431fb03e1c742c96ab286ea49bdc1b

Download Submit
/storage/emulated/0/Android/data/.dataycache/i42d45df023jnkdd93la483f9xGFKXI
Filesize
26B

MD5
3c33e392d0bcb15294b1ad95f8c63ebb

SHA1
c421f448ddb928f9dc78f160cfb642b12cca03dd

SHA256
ec795dcf5ce8a6cbccc2078f0a90725cc74b4aaabca0a9535e99d752235d0e81

SHA512
1790a4d4303d805dfa8a6a3a5eaace03abe0cee255fc62b603c283901e46fedb36bc3fe466fb34f0cb181d4221043133a061e498b8c433513f315791e51d121e

Download Submit
/storage/emulated/0/Android/data/.dataycache/s92TjjdfoP2n3o9dfji2l9s1olkjf0p
Filesize
12KB

MD5
b94340adc7171f5615be2f5ce76ec42a

SHA1
5086d8cc0c9535f8d5870fed710266e7a14ecd64

SHA256
53a45e98e80143c8f5e89243ed19dc649c463943b5359729a96a0a00e93b0f96

SHA512
00fccf2a9ce92eeac9beace04edac5a367dea7f7249ec0a349bcae07bf0b009609bb896edecf80cea2e41c331d7f2dec25e57b7254215e63c2410fe511e5e26e

Download Submit
/storage/emulated/0/Mob/comm/.di
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
32B

MD5
a23f75c354d23f378b4e3f764ab21b53

SHA1
ad446ff15d4b08f587e48f0c2806d1babeaead82

SHA256
688b685e4e667cda7952e6b14a8261e12e5385465bb470c44e44d67ed9d4de51

SHA512
8b90ca5a616d6446a4e36d71797096807f9aadaa1a5f96a1ecac054c04e053576bf4ad4ee80479f59c9db288a00707db8a8c3870096f1f63aa42e4f766a8d7b8

Download Submit