760985336e5146b9ffc0818ac51ebb8b38f2b6f385ae60c81f26a59cb3ebf081

Analysis

max time kernel
179s
max time network
190s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 17:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

680265d1244717422d9e6f8c9676ca77_JaffaCakes118.apk
Size

27.3MB
MD5

680265d1244717422d9e6f8c9676ca77
SHA1

df5a83d1070dba6b5b82e90a9644ab5f1e7b90bf
SHA256

760985336e5146b9ffc0818ac51ebb8b38f2b6f385ae60c81f26a59cb3ebf081
SHA512

77540618fe2a8ac886528ae8b732638d7d06cbe8d0c4085ef7f7893040a1f5277bb8404918a08e5b8f9c9df6751c8cbcc0d6e2ba5b8faaab66f5ef5b99086d17
SSDEEP

786432:jIBA3JzUO/h8aVCCBOJcGu4gFczCcdt14fg+:j4A5zU4hdVVOJcGgFwC2Cfg+

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

Processes:

com.myj.takeout.merchant:pushservicecom.myj.takeout.merchantcom.myj.takeout.merchant:pushcore

ioc	process
/sbin/su	com.myj.takeout.merchant:pushservice
/system/app/Superuser.apk	com.myj.takeout.merchant
/sbin/su	com.myj.takeout.merchant:pushcore
/sbin/su	com.myj.takeout.merchant

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.myj.takeout.merchant

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.myj.takeout.merchant
Checks CPU information 2 TTPs 2 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.myj.takeout.merchant:pushcorecom.myj.takeout.merchant

description ioc process

File opened for read /proc/cpuinfo com.myj.takeout.merchant:pushcore
File opened for read /proc/cpuinfo com.myj.takeout.merchant

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.myj.takeout.merchant

description	ioc	process
File opened for read	/proc/cpuinfo	com.myj.takeout.merchant:pushcore
File opened for read	/proc/cpuinfo	com.myj.takeout.merchant

Checks known Qemu files. 1 TTPs 9 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

Processes:

com.myj.takeout.merchant:pushcorecom.myj.takeout.merchant:pushservicecom.myj.takeout.merchant

ioc	process
/sys/qemu_trace	com.myj.takeout.merchant:pushcore
/system/bin/qemu-props	com.myj.takeout.merchant:pushcore
/system/lib/libc_malloc_debug_qemu.so	com.myj.takeout.merchant:pushservice
/system/bin/qemu-props	com.myj.takeout.merchant
/sys/qemu_trace	com.myj.takeout.merchant:pushservice
/system/bin/qemu-props	com.myj.takeout.merchant:pushservice
/system/lib/libc_malloc_debug_qemu.so	com.myj.takeout.merchant:pushcore
/system/lib/libc_malloc_debug_qemu.so	com.myj.takeout.merchant
/sys/qemu_trace	com.myj.takeout.merchant

Checks known Qemu pipes. 1 TTPs 6 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

Processes:

com.myj.takeout.merchantcom.myj.takeout.merchant:pushservicecom.myj.takeout.merchant:pushcore

ioc	process
/dev/qemu_pipe	com.myj.takeout.merchant
/dev/socket/qemud	com.myj.takeout.merchant:pushservice
/dev/qemu_pipe	com.myj.takeout.merchant:pushservice
/dev/socket/qemud	com.myj.takeout.merchant:pushcore
/dev/qemu_pipe	com.myj.takeout.merchant:pushcore
/dev/socket/qemud	com.myj.takeout.merchant

Checks memory information 2 TTPs 3 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.myj.takeout.merchant:pushcorecom.myj.takeout.merchantcom.myj.takeout.merchant:pushservice

description	ioc	process
File opened for read	/proc/meminfo	com.myj.takeout.merchant:pushcore
File opened for read	/proc/meminfo	com.myj.takeout.merchant
File opened for read	/proc/meminfo	com.myj.takeout.merchant:pushservice

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

Foreground Persistence
T1541

Processes:

com.myj.takeout.merchant:pushservice

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.myj.takeout.merchant:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.myj.takeout.merchant:pushservice

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.myj.takeout.merchant:pushservicecom.myj.takeout.merchantcom.myj.takeout.merchant:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.myj.takeout.merchant:pushservice
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.myj.takeout.merchant
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.myj.takeout.merchant:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.myj.takeout.merchant

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.myj.takeout.merchant
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

System Network Connections Discovery
T1421

Processes:

com.myj.takeout.merchant

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.myj.takeout.merchant

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.myj.takeout.merchant

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.myj.takeout.merchant

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.myj.takeout.merchantcom.myj.takeout.merchant:pushcorecom.myj.takeout.merchant:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.myj.takeout.merchant
Framework service call	android.app.IActivityManager.registerReceiver	com.myj.takeout.merchant:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.myj.takeout.merchant:pushservice

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.myj.takeout.merchantcom.myj.takeout.merchant:pushcorecom.myj.takeout.merchant:pushservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myj.takeout.merchant
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myj.takeout.merchant:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myj.takeout.merchant:pushservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.myj.takeout.merchant

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.myj.takeout.merchant

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.myj.takeout.merchant

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.myj.takeout.merchantcom.myj.takeout.merchant:pushcorecom.myj.takeout.merchant:pushservice

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.myj.takeout.merchant
Framework API call	javax.crypto.Cipher.doFinal	com.myj.takeout.merchant:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.myj.takeout.merchant:pushservice

com.myj.takeout.merchant
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4290
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4730
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4749

com.myj.takeout.merchant:pushcore
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4335

com.myj.takeout.merchant:pushservice
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4442

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Foreground Persistence

T1541

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.myj.takeout.merchant/app_crashrecord/1004

Filesize
512B

MD5
937ca2f3e5b2640b498f399f0f41854d

SHA1
378dc526ffa7102fcb8c8d425f5ae0ad0aadc484

SHA256
f780e570aa35e865133848bceed3fe5a7c53a87bd52999a01387abfa33552778

SHA512
137f9debe31e2881b411071f630ae4df6ac054902886b7f8811572078035b26a5140b0d38bc320839b2b3ea173fc6acb5c7f4424fa05e1095ddd67d52a2768b4

Download Submit
/data/data/com.myj.takeout.merchant/app_crashrecord/1004

Filesize
234B

MD5
cad61ccb63d9818a20d67ede93cc71df

SHA1
3db32046f8e7433f9295546c5c7f93f77a2e90eb

SHA256
639196ce2eaf9bf8fa9f4d12689a827a56b5a13a0dcf0dcd500e61f5ad2f72d6

SHA512
5c37e4c3763c0184278d238e187fc2c739996e38928958999add969a6feb17576b1984c0516499bcb5f69fbd73c327019f079f44ba93dc5219ebcd83baabaff0

Download Submit
/data/data/com.myj.takeout.merchant/app_crashrecord/1004

Filesize
243B

MD5
caa659475aab8f65aedf9eab0b6e27ab

SHA1
79a32586bba611e47d4e9c497f2f1b959261db62

SHA256
b142da70ffc0334cbd81d2e5f60dd110bf2401ba50235c34f6b05fc2b592264f

SHA512
65e889e4c73e4893f2dee2ef72766c2df26496cff5cd6eeac9d025f4951f404f305ac11ca598c8b1e4a1b11b9c0f121e10b85ca6877b1503d8f6b79fc5cc0f08

Download Submit
/data/data/com.myj.takeout.merchant/databases/bugly_db_

Filesize
4KB

MD5
a1ef51840ff68049bcf25c73f6276491

SHA1
5384ea22ca1207f339ac7cdb64623bcb71ef20b9

SHA256
b45450384fb04fd36247b2cb82d92786a94a358d8079f390dd520fd3e3e3db3d

SHA512
17ad3d55aebb7f00ee4f44957bdb9c8ed2b0c2bdef059cb91b0a0f3fcd923a3d1114b7c26a592b5751e0c50542e2eecec5309d8c006753d4938dafebe9ad2bdf

Download Submit
/data/data/com.myj.takeout.merchant/databases/bugly_db_-journal

Filesize
512B

MD5
8781b68e2fa688afd13ae4ee1cd35661

SHA1
a7ae5481c9fe2d227f46a7be052d2855605a7dec

SHA256
0d3815afdd909b799aea8db10e57706bba54e825eca97b332362f5405f1da392

SHA512
99bb56661aa84bd305f5a8838125a35289f141697788be7f525114bbcf5e797a29d5767c23fa48708e16c1476ad573aa7da091904356823a22f28b1ca26544ff

Download Submit
/data/data/com.myj.takeout.merchant/databases/bugly_db_-shm

Filesize
36KB

MD5
fd8f4972b4517e4aa0b8a0bccdefc2d8

SHA1
da5e0f8846e41f675a32f106296170385702684a

SHA256
4edf75ab9f44cadef6f2644c1dcd715a23bde87a0d6cd84a892ddacc57c4146d

SHA512
da606e7b33843a0e5b183a807ee06fc9b7925139a4016b24eefeab684582586d0d3d0afa17aacf3a0d10ac3c55a5b1d27ed745d67eaaa27f6f9608c5effbb2fe

Download Submit
/data/data/com.myj.takeout.merchant/databases/bugly_db_-wal

Filesize
164KB

MD5
e8d7b0c01d6b45d6e472f62db3956810

SHA1
9e7ba4f649eb1b0cdc4916b34126c52f1985e696

SHA256
599e3e22dfe50ab32e3eb5db4e50c50f6f5797d60ff72124ceb9e1c6ee300647

SHA512
30a1d80cb1f92b8367a342118a41f63c333fac741b7bc5eb2c247567024854004dd730e7d9ba91eca599eaf46475b1a7f4f6f8116724fe38613e93ce004edf8f

Download Submit
/data/data/com.myj.takeout.merchant/databases/bugly_db_-wal

Filesize
173KB

MD5
e489044fef4c41968283ff50129485e2

SHA1
cbaa2de935e6b5d74be746728067c49d45da0c94

SHA256
50628aefc0c6165d46879fed9a00821c2ac0a4c83cebbd5511a6b51580266334

SHA512
87b36e1a001a494bc595608ca63f38e1b06308387d4f05be02ea90c0c0913c1db7392b198fa8753f57ce9f37e691ad5411a12b287f81e023c177b889b4fd2472

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db

Filesize
36KB

MD5
0adda9c85a5e4808f5b1b74c0a8591a5

SHA1
5048107883ab1e345af9cf2e6849ce46e0e612bf

SHA256
1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

SHA512
646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db

Filesize
24KB

MD5
fdbcd628fe456b2033f66e0e66c8f143

SHA1
c6936305fd273558d8e9ef0736ed20eb09cbfe33

SHA256
29004e084fe9986e50abf55e75d3ff66da04e734f76854f36534f558d31ab754

SHA512
8b3229eb3b8ad0e69a1c32b9122c6e2eacaced2ef8dab4535fb443a8c71c53e413b98f37d12684703c5e698865d0dfb8d93bb6f27e183ab1a1ad1f5fd43edeac

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db

Filesize
16KB

MD5
76491cdbafc1a8bfce65806725625926

SHA1
b7c777ee47a736f70083e4494b701293bcc957a9

SHA256
9c6f0b9c30408d5d9fdc024014e22fb9e81f6df6c899040d042abd85bfc3837a

SHA512
65adc2036631284c4ba348f201ce1e973908f7d38127a0da8dcbffa61776cf4ca475331c6c1e38165913f885bb0e79fa8abac630ae3a0149a0216d49279b1c09

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db

Filesize
16KB

MD5
0f8e69ed5ee0d8062e85b6984da0f191

SHA1
fa569dcb43d8bde78f909d70eede01d314732a52

SHA256
dcea46c99b8229623a8f0434de5587c4bf5e839b4f928d59c1602e08adca1df5

SHA512
f2fa3e161a6c2291c6e54a8032e2a28ee553e2c37cbfb59e4faea6b8d71e5da97a6414f565de354fdac21f74b6835462c3c20854629cc6b0c8b533f0b016fb07

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db-journal

Filesize
512B

MD5
19855f591650381e836dc72b193bd7f0

SHA1
19f8f7a8df1953deb3cc814a663f4390c50ba1f7

SHA256
77112c23b4a53c9dedd6207b734f568b7513544467c1a13ba4aa165a481879ef

SHA512
f35853039b5dda061715ceb3b87c478013d6211ab119860c6707e71bb6d019b8e3b3bef99e691435c285976ae3e1ff71e6ff45c13b916a0e57019ca58f786a05

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db-wal

Filesize
48KB

MD5
a916460d05e91a8cdb75b241625d77fb

SHA1
98701ca556cb9eb146374db18e56a4ca3b6a0298

SHA256
810c9d3b3fcee23e971e3ca412990ae6ea0fe16bcbadaf6faac7170c1840a126

SHA512
d00a3c0f80a4f54af87805ba83a6678ead66f15889e9b36b40d7c8ba398a036e4209fbfddb729876d969b5d57043559b0dde9181caa595e5fea2f196485c0ae7

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db-wal

Filesize
12KB

MD5
9330884c26c27491b2c51fbff06dccd8

SHA1
59e7a33cfb2f96c673672775d4d8a491b2f3d9f2

SHA256
625a0db1669bdc8151863d08fe6e3a95413ad9aa120f1d0f87220f721e700a0a

SHA512
cbbd102e28631f56d970853ea415e29e2c618922221b013d30d504f175ab4b3e116a326938d261d390d3135dff710969f3a01eae743ff2a11b86c06dca367960

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db-wal

Filesize
4KB

MD5
df44fe8b10d3a6729a2c6055f14d6ca5

SHA1
c663591bbd17e446b33d325ccbb9e47d46bbe158

SHA256
3f875ceace04bf3c012a2e4376cf1bb51f76b88758945bba886b996d17068382

SHA512
77afc9c23eef11d4c118a5ba31227f6de2b8276fcf84d118ac275e23845622d1973fb311000b03893229de7821a52fec26517f56a004d1b89906e626a823c526

Download Submit
/data/data/com.myj.takeout.merchant/databases/ua.db-wal

Filesize
4KB

MD5
c469c84b74ad980df03ec4d5f19f446f

SHA1
eb2ff015e6da2690dd93a4f858b50bf8bd7a86e4

SHA256
6874c3317b6c3c9ad81f5f52a5e41ec83d2e3eaae54ccd506d0facbcc442c399

SHA512
0f39ec2b3a8e81ba64f36b4a1888988cec0dd72e2d8f3499a514a40b5681a2161856cd9d1c577ff339f8b272d18b16fdfe03d291358e0bb7cde5068bf742095b

Download Submit
/data/data/com.myj.takeout.merchant/files/.envelope/a==7.4.4&&3.14.4_1716398256732_envelope.log

Filesize
1KB

MD5
5db753e9c2443c81f2808f171b2b44d8

SHA1
2918e0da1e7c14e6cf34d7b30d6ce8ca92a13a3c

SHA256
f4a46ab080209fcb89abf76a307691ba901a61135e71037cc3adf344bfb27c63

SHA512
8fa49a74e466e752c1d98414e42c9bae8426f6cfd8b251d14d313e12e9acff042de7b06aeb92358e2feffff54b13b9084462bf5f3882dd03a308ab981bbaabff

Download Submit
/data/data/com.myj.takeout.merchant/files/.envelope/i==1.2.0&&3.14.4_1716398259827_envelope.log

Filesize
2KB

MD5
037122b0c5934f499ef9bf9cc5dbb4ca

SHA1
c316e43fe26e48327bb2b7ff45ff77b811016bba

SHA256
5b01c0448efdbd18877d5aab94ffb5a4fea73b5ae731a6709babceaebb492445

SHA512
96455ed5847b73a8e5f0a4c7f9e6807b95d1ad9df2861f09daaca5406e324f7cc01ec6e2a01d3c1a1a903f887a110f3ba5d5475e9abd3ea9b1312102c4cb8a01

Download Submit
/data/data/com.myj.takeout.merchant/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
247571589b1eeb55fc0c4df862d0a2a8

SHA1
9b49bcb9e42b65fda31b612e3bfa4e323e80601b

SHA256
8b0db0eaf80618104e72028921f800bacc125e72f0d53f23cc11037c86c0d918

SHA512
5c0aeee1d57186a263365b84b51dcf199529a648d25f4a220772552637ef6fa17298791b885b3f04a59804f2d41bec5ab172b50bec732a2afda3aeecdf636a16

Download Submit
/data/data/com.myj.takeout.merchant/files/__local_last_session.json

Filesize
142B

MD5
4682dc3821451310bc34883b1da88f98

SHA1
06801c5654a1d83a1ba8ca4695b1352b5623a478

SHA256
0e51a20380bc21698b59f81a8ff6b193e267ce6e9d07301e07dad4c5e74dd0a1

SHA512
95828cbd7851388e7d1870f43d10470ca44f14d53587d042685d9bbb54ea209b7f24c50760d7e64b5bfefdb0112a46e78afea8dabff47c1cebd9fadcc822c840

Download Submit
/data/data/com.myj.takeout.merchant/files/exid.dat

Filesize
55B

MD5
70dc7231e537540c44adc84b0a6d6ef2

SHA1
1e03f7fd4953db048953d49f2924aef3b669fa7b

SHA256
6393f85089503e4f4011874b0007bf2fa64b03bd43320bd913ddaf6ceadde669

SHA512
d7f5cb0ff71bd4328fc1a7893640aecc9832a512fd75f1e30a9f2cb064468ab189dc73ae81cec423e34b7e78603497b1971766078c359632293e00a8bba13f0f

Download Submit
/data/data/com.myj.takeout.merchant/files/jpush_stat_history_pushcore/67a33a788ab681c96589e868/normal/nowrap/b9c85549-17c9-4d89-a121-932ce0bc1375

Filesize
246B

MD5
da3060940fa77e956b419e02533d6562

SHA1
1b202a2522fd5bbb92b0aec9587a41c853bf96fc

SHA256
6614febbde4804aceebd0c992331f6bd9335eaac831fe96d947255fe9ce3d4e4

SHA512
5f15951b339021e55508f5ec44b68fabc76ac0f063fd52cbca35896a69792877c2c4374cdcfe12eebada03d0cfdc8f5dc7521f9716ecf81332016ae6a8628292

Download Submit
/data/data/com.myj.takeout.merchant/files/jpush_stat_history_pushcore/67a33a788ab681c96589e868/normal/nowrap/ed5bda2d-bb3b-4fa3-b707-ee454a084f49

Filesize
170B

MD5
828a065e0b73f2fd70cc3e6af772f3e6

SHA1
1a3fc1d66cf69bb3ef21e7770565cb403011f710

SHA256
6a41e37f12a2644786a7db21c956d7f60eb4df1f2f9b5ae9b84dff28f46571aa

SHA512
892e8b2103b9d0fb433d21bfe71ea955def2baac31b7253bed6d6bcc33d0f150450c1adbb30b8dd97a6fd9d7a1c89aa1cd6f0b6750ad80e02f89b917e962007e

Download Submit
/data/data/com.myj.takeout.merchant/files/libcuid.so

Filesize
129B

MD5
ef3fd753501704cb6e5bd0fb5bc7b7a4

SHA1
db68d741745c2fa28e3f3d57207c98d9dcdd4f40

SHA256
3ec692db4e1d97ac62343d2fdf82615269c56f5e89213acc916135e5ca588ebe

SHA512
9553fba9e4dd581ee91d8fd6711a3b5b5d85e0c27eb7390ecced4cac817082fd1b2a2e4a35980338981b1d1e424bcc45c41b6d21428b18df932f9281e978f7af

Download Submit
/data/data/com.myj.takeout.merchant/files/push_stat_cache.json

Filesize
119B

MD5
ecdf26b38494fbf13b3bcf72ace1d244

SHA1
edcac5fc9c45053ea9798a1e7eaa36ff7bd2ff32

SHA256
ac9b36dd77ab7106b0eb9d560077f3376dde6a0cc515de307f3fe67623cedd5f

SHA512
ddba2059109f4452ac39b7281af686666323838cd712b1b0320dfb62e9d853e01916cf4553534ddddea9e3b7c5dd0cc7fc206b4cb9bfec7bd10c1f942a2865e1

Download Submit
/data/data/com.myj.takeout.merchant/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzk4MjU1MzA1

Filesize
1KB

MD5
d4312588850f91254699ffff5819bc23

SHA1
19a1daab97730804867273337331a3082b1df4e3

SHA256
a1b38f8559d95b9e6a61adcdf50574e4c8cecb64eb0295758225e25be7a1e7cc

SHA512
1db372910dfe97776407ebd3efe686b412af41829c89b7637a15a917bc9849d54cdf7a8455afcb23054b62fdc2411a2998f8295e971a8214d8c4bd9aff59481b

Download Submit
/data/data/com.myj.takeout.merchant/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzk4Mjg2NDkx

Filesize
1KB

MD5
9c8d7e4a8878404d5d79510cb38304de

SHA1
89e87bf01f1458283bb2a30a9f6cc4f8e6adee97

SHA256
a17be537b9d63cbea6cf466f761d670c6b56aaae9987a7d0f8955b944d964e93

SHA512
b62f26b01e6dd14ce6c90e1e534af15bddc0f6b5c38f9f70a78c75c98a4cbd05b4259f041688c374e8d9f913ba592f6b29949cfa1ed6f4a04d56ed83d89589aa

Download Submit
/data/data/com.myj.takeout.merchant/files/umeng_it.cache

Filesize
498B

MD5
7bd9d7947a875a656df1fd163cbf800f

SHA1
e3f26d7df842ce360f8707a5bfd80cf6329b96c3

SHA256
c8f33f1e6dbda8dfd8ce6077a91bdd53dbe347721f9e037bdc57d0ee42bfcb3f

SHA512
af7d25913f8474ffc2f5b196ae4550e556731e34fe52db742f9227d0e98770ae135ae3b34bc3dab2f3b98ef905a588abb7c68bc116a930232a36eab06266323d

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
381B

MD5
b51c33cbd6d419d936221791f456c1b9

SHA1
92ea39636bd2759e41537dff35074170d92349b9

SHA256
20d8bf9ae3d5ca9fea53253346ca4489ae578dc9db94ac19fe3bb40a71ea5afe

SHA512
0eb064e99b40f1ed63e0158074bc18f2ca6cdb52f004765ac55f4a2e6dca250fdbba4d978172da9ec90b57f57f3fe36de8a024878a60b25d91e275485455db23

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
32KB

MD5
b15b00bf90b7c93b3665eda88fbc4808

SHA1
5d90cbaee0798753afcad7e6555a92d2567dd02a

SHA256
92882182a7ffae56437ee1b2b3a68ddc0594b28c1e3a4254920023015cb4b429

SHA512
cbea5c61e2043c01bbf5b0ba79e45106bf011e29447317a4bc66560afb52177f2268f5fd95d84868152b25b1aa4368256392d24eed3f4fb9a56cb2eaa1b27059

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
156KB

MD5
a291f7ae5f34a5be67a826fab9df8c96

SHA1
12f3487c1f18f398b0496ae547fcfb1a3b3ee6a2

SHA256
7b0824f013e678fddaf2896df4c68060e61f007faad4739149cd92def1159cf6

SHA512
80618457905da9a78f1446f2f30683f12f5da459a820e9195a53431f9896d667de7881f7fdbcded59e0d764f7c5e770fdf9d57802db8022eacdd3ff2da890e7b

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
57a8def5df31d0096dcfb750f42f9f81

SHA1
23e2738ad8a69cf119d5b734cda5b0e36da4a110

SHA256
b1355760ab1f57bd5fd326f1568ea4459d854032c1a5046cacefbf58c990930a

SHA512
5321f5b393f9e88591cad9cfcbe0d52ce2da8c23f34f5def696824f44e20d7a8e33dcfd2c246b6ff20dc6244b4f2402165efc84348f6e6b6e9fccc3b2619447c

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
46defdbb481b0b7fbbccf7be995354aa

SHA1
098661905845b7bda0d5d41845c45924e47dcb31

SHA256
e3ff32326c33988f86bf445e0c53630ccae6a9cf3e84883f23344946a9100775

SHA512
32a6436018801718fd492565152da57534ea4246a4151cac82e9a8e997c1da1e6568793aa09827bddc3dc7ed149513508b861a9d3ebac5956a8d06c5de6375f2

Download Submit
/storage/emulated/0/Android/data/com.myj.takeout.merchant/cache/uil-images/journal.tmp

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
129B

MD5
c534a30cd897df0a890190f935d8ed71

SHA1
36cc7e387c4da1d67dd37c18ba0d6d8ebad1fe0a

SHA256
49bb83c6a081c4088e390eea099a567fed725ffcbe9b87c10a90247ce93b3c90

SHA512
b8d3bba13bb914f01fe6103685e07fedf58e27c79e3b9370f959cb62e6ffb78bd489be5ef91fd943aa62e6f19c352be972d8b1cd7132ab0fc5fd18344d607f6d

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
048c73f536f234f0ad0d2fa8bdbda899

SHA1
dba2e666721e0b0988807b8bb3ce0452dad3448c

SHA256
f1a64586ce75e770e2f36a7ef6f7419e26ebb9e9e786df3c5adce50a196d2d07

SHA512
6ae398c682724f0008ce47cfc790a7ad3dd7cc801fb3a8a692d28da5533ea7ed830ea36933bd3e3219fc8cbade90f073c2c418611921bc7d6877d94b6745c4f0

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
20b4c5a4e7944c6575524b67929456e8

SHA1
8c00624e72d53734b11bbd36d92523e4d80ed5b1

SHA256
269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69

SHA512
c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
f494739e7acac4e20efc28c73580cb79

SHA1
d74b5f5b6555eba85ccf107cd1ff61ff67df1cf4

SHA256
eb9c48a936170f6159b690778e7654dbb194fa15f6878965edab0f05b7e9eb91

SHA512
318d7cd10b7b37e3fe9ad0ab82d32e9525b6f3b18e0297c9eb2f6b49298bc85808d59a2a6dfdd2d0f4316468ec78d5c44c6c0d3cd082aafee2ab11c6537cd1a9

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
28KB

MD5
aca9eb6f095d4e0e69b0cc14145b2619

SHA1
704304871ce4dfc6688e15f6615c72e30cff5865

SHA256
d4c53ce33750226cbaf9cbbdcdecf142218c2a4fa70296a696b737b6af7e394d

SHA512
ec6a13677f1e4f4f5c343518715b1fd56703972b22b8004663817d06493d79e81eab53af83af571376e7d2bb979a13d4ad5f345a419e9fb18c4b80403d969c8b

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
36KB

MD5
df3455ff22a24bb0fb7dc15bcabe7a13

SHA1
2306ee9a14f36e8f7547dae435031dcb5efa7c87

SHA256
c9675c97fbe3836aa361fed3de137c49648bd7bfadc0a03033aa943c3e0863d4

SHA512
bd91191c9d7a8d990b4ddd265e97de1c7639f32947a955078cf4aac7ee6eabfa97d8f9216b6a454faa7123d2e677595c759fc2b9a3895606b31b88c4a6c8654b

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
5f5ef7f22c3d1d6748b334681017fa93

SHA1
5e7179682eab70d0c38c848e360bc9ffdb9928ae

SHA256
fb00adfdf9b08a4643506681cc7e24a30ae20cebd3e97be42f93d5bf7e2b47ee

SHA512
3abbc76c45671c5a011c7d5130b1fdf95cfac523cd124f057f37f875dc0dd9a601b33472ad4e0fd3e53bae66beedff11335b1d5506412e2b30164f927f254d82

Download Submit
/storage/emulated/0/backups/system/.confd-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
36KB

MD5
63fad0edaa5ddf8b6316762e982787e6

SHA1
b468f73c3ed907d4dd0eb891b6e80affd0bca191

SHA256
4f5e862b9a5f830b7fa3968487ace15dabc38dc33d38d717ee69c56e6820d376

SHA512
32466ab0de46c6ede2954baf304f0828d19aa72c6f31f14b4d9279baa1fc2cf8302d4da5d0ef5e5f929091d301cdc54e1a97716dfa0e49480450c6c3ee4b2d8a

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
100a503a6f4d6fa3659e9358d0ae26de

SHA1
a6ecc12d803da9594a2e384e7de689ab79b971ba

SHA256
368de73c21819125a4ceee9b34948548caed6f24917726e76ab12dadf7844a0d

SHA512
884e3bd80c4ec01cf4c74dc2890bdb5daf4a6b37b0d2213785af31a98b892db79d17a508db37acee693db6e334c3f61705e3fab709f971b6f26c62338fa90db0

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
5a84591b8d31f7c28b17c90dc63ecd26

SHA1
0da373521ac280a74b7b077f5020f44d2ed94f11

SHA256
b57193bf47f7bede9cb8005c9ef8c52196da2d54489bca29b0bd728778c623c2

SHA512
0f468c5bbcf2a0e7e51e98f31a0a108350e5ce2f8d964fc2b02457b5de60f1e52021ec17eb004e6f1cf195e7e12e980b5dd390a61472a51a5aceda642b3c43d7

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
6974184e2920a4856cab759a0720c4e4

SHA1
98ac3e39e0c5d8fb878aeac1218e80e5f3f82431

SHA256
a6c3c0d14cadbddc5095e2c7810746bb464f21d76bb36e52a84072feb056ec51

SHA512
c5456e050100cde05a74175cd9123aa9797fe6882a2c82ec4d7881335354b314da9b879a7c1db787cffdfdf4f9df9c1f0b6c8a8119d4439946155cf00cf811a6

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
5686dfce7073bb0d5f2c0fbbc2f8ae50

SHA1
5e5d9d20d39f0da5985f124b8690c3c4b0063e5a

SHA256
3b1c555c200f4b3c30e1dda12da9080c3e03ec6d329d052c7bae40abb7233c87

SHA512
c32a3b941a9325489af91b1dcee67ddb80bb8df80ae63a9dd3e90ffe26c06845aa6a505396c921fd6fb611a6a2ec6d6bc47824428d9fb501f034227533fd0ea0

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
b51947a763204b7eab9395baf3529275

SHA1
f2c340dc6f9a44bbf78409c0c19b7aebc167078b

SHA256
e100dcc2f7e29b7bc90b0b160fc497903a1905a692262c656f7a4e391241b439

SHA512
0f4198b4d895a5b0475db4a6da75162de23db6b9275f1db7fe90c806e9d1e3d80eba07790261a53a60e832139525cd29c514b5f223c41b443e2dd799183c3789

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
1a37c222032c9008dbacb8256b3f0e8c

SHA1
b527d7785fbf121b9737c1db29f3130168b59614

SHA256
7c6fe62d0dddbeee1a3c3710a33407eda931ac76fe5c3294566074e12672e071

SHA512
ed977400f2ede4b61eb8f630d2a37089def073f20d0c0810a15ea9abf41a0e9b4ba52fe6ce160d4d441c46ce87e215ea892b2627e9295a7ef9445cd6a5763546

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
ec7c2087f5896d6f76151f34af971722

SHA1
ad0a73c10d4712ea96d6881ce3b41732d06f5653

SHA256
cfcd600790f20915236d3d79c1d34ff1295fd78eadb71c9ce1b99ce7651a4b2a

SHA512
6e69be8496910cef9d381e8c86d864dd850a1d6e5112a0a400bfa86787abb06d676edb550509e77ff4db13f34117dc675fd8f184b106a749eae4929ef18d3413

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
d6288c64e667871e974ce32a53d66013

SHA1
f0446ab0dab4e5791c8a9026f2466a7d95922d77

SHA256
9ee897f758427adac3c078d84cfd33924269abeb2e07a489a1553d43ed775e7d

SHA512
f6bc186b36020a0893bd753f30b40441a2d8df7346e02878e5500e917ec08cadf6866db5b5961b8b253d378d95a0fc697b187e97f88a59369ae8ccc124821b38

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
99e7e6046e814dac908405e95fcb6a7c

SHA1
500e662abe20dad8463868d2d0274708cb9edb22

SHA256
5ce4098e5475ca5ac5e8e9843964b42a1841661769bf1f6723b2ddc36c0f265c

SHA512
3a2b549420b281c2c88f8965f7a38c5e90a48108b407ad2638c998b62039a682c2dfcbb9658764966d913cfbb7ee64537ca0c7627e01010f0285b828ec9a8f38

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
7bc9464a6a671fc94cb80e1f0f735477

SHA1
1fa7e6a6a2b7447a8e90927e99148e34235c5613

SHA256
fe80f306fa6391a6b899eb64f21e8b63177be4d3470bad0d5803eb395bd75fc0

SHA512
8f3c8486b03c1820d84ef9397d17fa1761d581d9d4a86e7de4b6f62732a113c4cac4221ac34884f87c476eac4971ba18fd2efead506910ec8b05a0f3fa098970

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
7367e9bad27d3207cf6fdeffe83a1b35

SHA1
fca8055dc7a211567039eb724d10d6aa95e48d2f

SHA256
2f876d6a5a6e7735d5ce545afa08e2a97b51a22eade8bdea7d48f93ea414eca9

SHA512
c40ae75fd5951b2cf6ed020cece9e631990a257d9aafb8b85fd9b2c24f6a3ac5fb19b70cc1e52797f0d8b1f8d1da054a5ddcc8b14eb2a8408d3a8da943c7ad3f

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
138B

MD5
8260b8ebd0395c18a18c357e6dd6f59f

SHA1
0b79640fe8054120cf9f7aa37a1bd8b321083d5c

SHA256
7b4fd7e23d2240e061a377ef0be915d401a5c69496d6c8f3fd2cad5b0a36a0d8

SHA512
b8e41cae8046ab5b276540ce467880ddc7376e4c6e24e0aeb21e780508b4d3080b91635374e2bf8d3b6d70ac0e3de91ec58e605abe2fd49c217cfe05bf3ec2be

Download Submit