42f503dfc8349ef61609876e91752c8af07007aaf2578646dffc663979436524

Analysis

max time kernel
178s
max time network
194s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 20:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

687d704bf95db91db2890a14d49d4157_JaffaCakes118.apk
Size

20.5MB
MD5

687d704bf95db91db2890a14d49d4157
SHA1

02f803418495be0534c67f74d76f88a22612a397
SHA256

42f503dfc8349ef61609876e91752c8af07007aaf2578646dffc663979436524
SHA512

77fcb7f773743493078cb6ee0422d59f2be657f91dfd1dad27db3c2fd95e434336ea713f0e208e4537683291bcc2adceffe616fae9f7f9b27e5e625c77cb15e2
SSDEEP

393216:NCV/YoUuUJs07pcm1gg8ZnMqZp6FzFaHx/WTc/oDkUFH7ew/bhaUa1sBiPKVLZGG:ECuW7NcIwnMqZp6vaHx/H/f+7ew/bham

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.xiaoshijie.sqb

ioc process

/sbin/su com.xiaoshijie.sqb
/system/app/Superuser.apk com.xiaoshijie.sqb
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.xiaoshijie.sqb

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.xiaoshijie.sqb
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.xiaoshijie.sqb

description ioc process

File opened for read /proc/cpuinfo com.xiaoshijie.sqb
Checks known Qemu files. 1 TTPs 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
evasion

System Checks
T1633.001

Processes:

com.xiaoshijie.sqb

ioc process

/system/bin/qemu-props com.xiaoshijie.sqb
/system/lib/libc_malloc_debug_qemu.so com.xiaoshijie.sqb
/sys/qemu_trace com.xiaoshijie.sqb
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
evasion

System Checks
T1633.001

Processes:

com.xiaoshijie.sqb

ioc process

/dev/socket/qemud com.xiaoshijie.sqb
/dev/qemu_pipe com.xiaoshijie.sqb
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.xiaoshijie.sqb

description ioc process

File opened for read /proc/meminfo com.xiaoshijie.sqb

ioc	process
/sbin/su	com.xiaoshijie.sqb
/system/app/Superuser.apk	com.xiaoshijie.sqb

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.xiaoshijie.sqb

description	ioc	process
File opened for read	/proc/cpuinfo	com.xiaoshijie.sqb

ioc	process
/system/bin/qemu-props	com.xiaoshijie.sqb
/system/lib/libc_malloc_debug_qemu.so	com.xiaoshijie.sqb
/sys/qemu_trace	com.xiaoshijie.sqb

ioc	process
/dev/socket/qemud	com.xiaoshijie.sqb
/dev/qemu_pipe	com.xiaoshijie.sqb

description	ioc	process
File opened for read	/proc/meminfo	com.xiaoshijie.sqb

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.xiaoshijie.sqbcom.xiaoshijie.sqb:corecom.xiaoshijie.sqb:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiaoshijie.sqb
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiaoshijie.sqb:core
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiaoshijie.sqb:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.xiaoshijie.sqb

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xiaoshijie.sqb

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xiaoshijie.sqb

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.xiaoshijie.sqbcom.xiaoshijie.sqb:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.xiaoshijie.sqb
Framework service call	android.app.IActivityManager.registerReceiver	com.xiaoshijie.sqb:pushservice

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.xiaoshijie.sqbcom.xiaoshijie.sqb:pushservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiaoshijie.sqb
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiaoshijie.sqb:pushservice

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.xiaoshijie.sqb

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.xiaoshijie.sqb

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.xiaoshijie.sqb

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.xiaoshijie.sqbcom.xiaoshijie.sqb:pushservice

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.xiaoshijie.sqb
Framework API call	javax.crypto.Cipher.doFinal	com.xiaoshijie.sqb:pushservice

com.xiaoshijie.sqb
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4279
- ls /
  2⤵
  PID:4548

com.xiaoshijie.sqb:core
1⤵
- Queries information about running processes on the device
PID:4312

com.xiaoshijie.sqb:pushservice
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4409

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xiaoshijie.sqb/app_SGLib/SG_INNER_DATA

Filesize
59B

MD5
c55a28faa138e6d4b1d89abd81dfd3c9

SHA1
73d906e4c931bb1a9a62b34bec060efd5e5ccc05

SHA256
f59e3a0d3aa0e6bb010396cee099d80c1a9c29e3feeee5a975b355998d86639b

SHA512
21282f556610515d867fb635e41648915d5a80bf77cfc8a6dfdc4d8f66585b7e8a7f158ae65e95640dc60ffc025e577159ccf222e2145d4233b3f8344b1be4c3

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/avmp_312768000.pkgInfo.tmp

Filesize
224B

MD5
83d68b47ec607116d3753bbec873e8ae

SHA1
889c27ea05084eb170b256da097c54c13e0dd0f5

SHA256
88e15bda0960b24540e6c9960d47a9ae4c0c47c721047edc70336d4f71803df5

SHA512
57e5186c400ed6ea06a6233c26e01e4d3864d7982b6934df0f4f3fbeb3ff131d8cb949a9d5b703cab0379b9006f38ca065c3c140d7d89db58cc085fbb3e1f67b

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/libsgavmpso-5.4.36.so.tmp.4279

Filesize
258KB

MD5
27034b68dd370aa28b1f0ff7c9c3954e

SHA1
5191b4b5169268320bd3485df19bbd35b613ae4e

SHA256
e7c785df6645a8cb99485d29c10dea215fc36bc1bbcb21db268933c57e64f42e

SHA512
4f9784083ab356ce3d371768b3f5152ecac9d6a07e10fd9f8e99b19643dfaffaa36b957c30a819c111457aab1247b98a9c25bde5224c827bc9d0db9171ea81d2

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/libsgmainso-5.4.171.so.tmp.4279

Filesize
1007KB

MD5
2cd9af5ae86c55578682f18e97b91f6a

SHA1
7c6a2b642b39873a4987cdfd725dc53e3bd6c369

SHA256
00c7bc1a61f4e2ba88026f802be12747636bc5c84de7d85154877b58c368c32c

SHA512
89826d78007e9817f45e304d5a3c905d374d96385f774239bf87ee37864dbc03149ff50c6006e4d87b000ed4a3b4ccca54747ebad70216a20bfa67df1a49029c

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/libsgsecuritybodyso-5.4.99.so.tmp.4279

Filesize
259KB

MD5
77faacea6d767834a55867e9f465bd2c

SHA1
4d296b21be8c24022db795fac8f72090b52dccb8

SHA256
f9919bfdd50469a279392c255e971dab0304138bfbe09108deb3f0510e686dba

SHA512
7003bc16967c01676f533de1967876328c35543aa13ce5eb9e8232c940e672319ad3869d64763dac786600b5d0f5c4e23bd4e7603df32c53e842821f42d5160e

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/libsgsgmiddletierso-5.4.7.so.tmp.4279

Filesize
21KB

MD5
92208754a21b36a47e5ae8c657f5fcf4

SHA1
e895b7d77d8f6c53f150c18b01186aef955478e8

SHA256
0eb2343650f921a8c652fd4cd43036aef1d85accbc234c7b2061a4760d261130

SHA512
d5163d4b1d6200f5cd796ca522531eaa0515b43971aa1b4ddbb30d43171c761c784aa5af6d5462a81c2e7874003f2c6a0c0bf7a0bbbe5b34a37edab2a14d3e01

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/main_312768000.pkgInfo.tmp

Filesize
296B

MD5
8b9a070a4756c4e75a9c094c16c2fba5

SHA1
684bf86ccb234e587560e22aefc2b659998ef149

SHA256
7de9841149d5bc7f2ac97621e366806b30d42967a9e23ef1ee438ff087087d1a

SHA512
2effa207b703bd3aaa3c2e780a39205dd33c07a45dcd7052ede4d24b4ed820fdc1c9f8712ee7f9c18be4846ec4d1c7b9eada9e2bf0157a4a51445b8ec04ce30b

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/securitybody_312768000.pkgInfo.tmp

Filesize
223B

MD5
2962e3ea9187a8fc1f66d77eda2c766e

SHA1
20fbffb2687124a8e8733d9a766275fcc4289aab

SHA256
dc5f7701ad3b726d180b0fe0278cbbd4fb4b665db9814af2f8de70d6ba2bc785

SHA512
44aebc257188c34b7f57c2578378e95d73db0e35cd76420bfeb85fd28fcbf0b9a5153482ddada35ea35887365de7429299fd13e15be609d74da1ee287361ff41

Download Submit
/data/data/com.xiaoshijie.sqb/app_SGLib/app_1716409077/main/sgmiddletier_312768000.pkgInfo.tmp

Filesize
254B

MD5
c235e74ea719e9a6f773b8d8352d99e1

SHA1
f31095aef8e9c3286edad127293ce700b1fdfd75

SHA256
feee3cfba46a15b807bfbf99c7fcd85bb8ebfb6862a9f5b476d67241e3ce9993

SHA512
a448f296cb9d3b3a25d898ae0485199f7bdd7597fa75be719a16bb30bc90fc10f636c805830a8c53add346b12a556e71155536febb9801c847725c577dabc384

Download Submit
/data/data/com.xiaoshijie.sqb/app_crashrecord/1004

Filesize
229B

MD5
ef92bdf7a5e9b26f91a9524e17bb7cc2

SHA1
81ca03848c2d40761a64e6f53ea65e13d6f66485

SHA256
1ad8b15a092ebfeb17235c267f1a41db891122ac88c92196debf5ca85b8e5552

SHA512
efa2847f414ded22e0e0e13b45fe204cce07b940992b5f8a91f342d30be7d5aa05c23a6f1096f3c4b95baea8f727bf4fd112d8481cbe000cd0f20e1223d61969

Download Submit
/data/data/com.xiaoshijie.sqb/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.xiaoshijie.sqb/app_tbs/core_private/download_upload

Filesize
56B

MD5
ef5384016c405e6b9424e24ac7b25347

SHA1
9fa09b2d5e97622ffff189f3667d4ba2251bac8a

SHA256
c237b63e4a1706ce1f2803126dc447fca0b34bd877fdcfba5604f27065208b96

SHA512
f642e30391f4dff06121d80c67e693cb2401095ce5b875019ee7b49460afcfe6dbf9774f2309a44ce95ffbd2cb70849ca49a96c808d09d45a721f76f11745918

Download Submit
/data/data/com.xiaoshijie.sqb/app_tbs/core_private/download_upload

Filesize
56B

MD5
9a15bb250b7bdc2c4a19992f7e945742

SHA1
64c73b89ef5813d05578e047deddef4d4252ef18

SHA256
80d7d52249ec93ccd40a223efbb28b157001ffe2c564fdae1c7f4ceb1218b108

SHA512
b59ec6841f00d7bd977331efa8dd8f51f515b9cc8a515241bcb010bc2118b5e0936164be8dfcf53dd93e824aa7c07fe3b0fee2476bc18701a1af0734ffccc90c

Download Submit
/data/data/com.xiaoshijie.sqb/app_tbs/core_private/download_upload

Filesize
84B

MD5
2e29c092b3b4712c1bacfbd4b79fe28a

SHA1
425a2b85265b294b95799c8a6f223e8bbffb2f34

SHA256
9dde2ae1ae56ecdf3e32a456dbfc27f2a8989de53f0f718fca8d7186a3e09bc5

SHA512
bce61e6f58d49c96a7f1a85f3d7be786b49a596a4da142b788bfb27684b941bf27075b9ed1f5ecc9b0eb26b0555220c73669bae09709df3a69d1b7ab6bcf3d36

Download Submit
/data/data/com.xiaoshijie.sqb/databases/XiaoShiJie.db

Filesize
189KB

MD5
15a7f3eea5fc5f8b5b571219a60f2617

SHA1
430619e486165cfbdea72c1d2c081be0894c64fc

SHA256
25827769aae9a8ce5f56b8715677d290d3c8c5da32845c41b3407b77acfb708d

SHA512
e0179797085a86c0fcdc693cb1aa178b3c35483a6f423def817f00de4b81baa8dedfafc70a5741250f9dfddf0ad7d7534607409b29f57eb0a801fb5eafc17a99

Download Submit
/data/data/com.xiaoshijie.sqb/databases/XiaoShiJie.db-journal

Filesize
32KB

MD5
cbafe4214f9b837d68dcf263f90a36a0

SHA1
8f3c0607f4ad9541ee9251d2610d06261989c7df

SHA256
1b9ad9a7534508c4f6520354cd1a2a5399b7dbb6d008157743c1d825683756e6

SHA512
f163a140fb5d076fd6540e303c548bb191b7f3f4000f055eed5d2040f1481a7bbae7c0c0ff0c9fd53574413af4086c6c9b4fcca216ee036cda712a617b7b993f

Download Submit
/data/data/com.xiaoshijie.sqb/databases/XiaoShiJie.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.xiaoshijie.sqb/databases/XiaoShiJie.db-wal

Filesize
56KB

MD5
9cd4392f015233048f489505ee12837b

SHA1
5da1804a3e44bba4beb0897484a562d3865eb48f

SHA256
51f6998488b36468de9b6ea1b9adad3f468d16a74954e8c8d9ea774a82b6333f

SHA512
963d2ab5ffefe8f52ca00f731b4779158ee0db1bf273ba67927ddb39be5bc88bb77e7452e2a4b181130ebab2b5451f03b89a84ff59d894bd89fa79cbc8494ac0

Download Submit
/data/data/com.xiaoshijie.sqb/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.xiaoshijie.sqb/databases/bugly_db_-journal

Filesize
512B

MD5
d852c2d99498402aa9cba27789d91de6

SHA1
3baf2617f473bf3a37f69e3a69c49efabf30b11e

SHA256
366d09b03b7b5f8014b50d9182085ca042951749510a7994d3492efe880fd7b5

SHA512
03ee08d6f6018708dd4835fa82c2e45ffd4e25278a47223371f67fa4900928f7696fc5b5f668656908b221ba856d331e3cc2fdca25c30a60b453114c652ef050

Download Submit
/data/data/com.xiaoshijie.sqb/databases/bugly_db_-wal

Filesize
72KB

MD5
61cb0f2fe6076691d8a32e41ca7086bb

SHA1
f5e68ea0f50cccf8b1032949eb76b740a33c3eab

SHA256
ddd1ecba60bf4cd0735707431ad3f3857c15fc781484378f4295dbf6777c1611

SHA512
d2c9cb5437e665fae9f1419f03098d3d695e8948166175183158603efc8b84a4b7911f767af2d05be32d49ed088c36f86be6f2561110e7b19c751fdd98e82fe8

Download Submit
/data/data/com.xiaoshijie.sqb/databases/jscript.db-journal

Filesize
512B

MD5
04145ae401a434d05a6b2e9299511029

SHA1
d24eee3a33c03a49453969caa1be53883a3074be

SHA256
821732c5445748e87de1c1b64c2160fd23ce5c88257a3e0dbbac124972ffb668

SHA512
1e0aefb016fd96cd6a8d8d4928d05fc1868d27123e14a91115d0cbe0700d1b9dc1daff8cd9a02cdf3850640ac5a823cf2ddbb16a800c21b3b1e2457262bf7249

Download Submit
/data/data/com.xiaoshijie.sqb/databases/jscript.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.xiaoshijie.sqb/databases/jscript.db-wal

Filesize
32KB

MD5
25fe691bf17d1a0aa705a5d5ff5c06d2

SHA1
81b821f6d3719a0cb9c3e088a03d2be4698f9334

SHA256
ecd71c62468546e7d63794fc370cacc18fc77d7d7b6d4fcd6fdf023a716ce739

SHA512
2420a44934dafdd5fd571715dc4465545d602177eca00c4fd49dba29ddb84cbc01ca3e8728eb1232f242c4007614b4ee799a85b5565661bdf4e31367d0481f0a

Download Submit
/data/data/com.xiaoshijie.sqb/databases/ut.db

Filesize
20KB

MD5
38616785cca0600a03205f84fe330b4b

SHA1
6ac41a6bdcae297d56dac5fdde70be5faccf0832

SHA256
b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8

SHA512
7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

Download Submit
/data/data/com.xiaoshijie.sqb/databases/ut.db-journal

Filesize
512B

MD5
d7c77fbbf2571801a9ac1d099c0393d4

SHA1
aaf863c3e1170c2714711a25cb76304beebd46bb

SHA256
361d8ad58fc1b9a1949a28c26f64e552b9366a4ab6de7e0658b17f8ea9bc7080

SHA512
c0ce42ffe1e88c6128c4961d1e2284231d14db78a0fbe94b51ea2a49f91cbebfc200d479acdaae938961970bd11e329f1755d9eef658a3a84f33566440330a5c

Download Submit
/data/data/com.xiaoshijie.sqb/databases/ut.db-wal

Filesize
32KB

MD5
ac289bc7faafc405bb60da6a5705151d

SHA1
4cfdfeb3462482cf6c643050cbe891b573dc6601

SHA256
8d0046f1bafd3be3a04df9e693c45794ca53fecf2efb01bdcf16865ac7b6526b

SHA512
52cd78891bd5eb6a9dc5a1ce69e209d5308d656f732d308a5438911b09acd6480e2e4ba5873975e6179cf91ccebfc98d88dbfaee483eb2beeacd6d8ee85d551a

Download Submit
/data/data/com.xiaoshijie.sqb/files/JX0WDG83P1ZN.txt10b7

Filesize
1KB

MD5
14ed53ac13d929a1ad5c70d2c523a2b9

SHA1
eaa9b765298bed626d3e9eebdf3e3354686b08f2

SHA256
820509de881d58aa4c655e88774b3e1676e50266072cebf2d741df6dbbcb176d

SHA512
9937267b9a39d50eee44fcc2889a1bd9defc97b805c6c273789563bac053264ef93bcb45eaeaddba72f58438dee560543030105827bc1d3bb64bf4f441f31bb8

Download Submit
/data/data/com.xiaoshijie.sqb/files/SGMANAGER_DATA2.tmp

Filesize
45B

MD5
7a998b78fe65cba66a88c4c1e94b71dc

SHA1
bbdd1c3178175f1e98ae668fabf8917d07851ed0

SHA256
e74b883276a5d8f0aa6a467cb53f9033a77b4c8311d22559fe7bd5c86a12326f

SHA512
31a774e55eab72c9365314f31cdec2c7328ed0dd896a85e89786b57bf92765dce6a339afbd47468b396202004f590e97ab7d0a461420b79cc664d091f1b51113

Download Submit
/data/data/com.xiaoshijie.sqb/files/SGMANAGER_DATA2.tmp

Filesize
89B

MD5
a81071c83d9069d7783e586438bb42b3

SHA1
1b31875b860405b19eceedf7ed4aeabdba1ba836

SHA256
c74b527cc40d0f2e0955bf68cc9b4b983250d694c64970fc50dbac40d8476a6f

SHA512
41a26d6394ad87b2aa477754965d881f577eadf6a3bea451bbb22c7bd0879844eeaeb2b718ca93d980281a0c67ecd9e3af6fbfc0135d60fe4bb80ab337ba6a61

Download Submit
/data/data/com.xiaoshijie.sqb/files/SGMANAGER_DATA2.tmp

Filesize
152B

MD5
bf039af2d528d21dd64b980520123252

SHA1
ce34e49f491b4158d9639f070bd7d83a2a07be1f

SHA256
bc0a266ee2ea15d1ad2cedd89ac629077f0fc1dd73580c113a3337f8f7172647

SHA512
fa36e3575f471bd765aa0030cdf1e234a91fedf3b82a1553f95eb92f5577512c91a1aeee0e11a90ca853cc120fc47eee1c21ca3e9f64535dfc06f7c70ebe28f7

Download Submit
/data/data/com.xiaoshijie.sqb/files/bc_config

Filesize
8KB

MD5
01ecc0515623d9ffbbc1844d05d753b9

SHA1
1c83765d8f8b72c3f154109b0ec42874e58a2ac2

SHA256
839e200e43e99e986690280b8b5a2dc2206759a049899a509a83747c4192ab22

SHA512
c84da263c6998a44e350294f03613b88429eac4c2e66b98232639d5416911f43bd76a71074c401dc43c3b6e08a93eabd632ea11c61d72389b3bd8d92f1dd5216

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/dso_deps

Filesize
288B

MD5
03b2603122d2a043a17d7fd3369afac9

SHA1
32ecdd10a231a0978f4c95702abb70ac59440dd0

SHA256
d00228fed1ce8fee868ca01dbf60fd88ab0dce85837c43169ef4ccfe15beae8e

SHA512
22e0938be277482eda234a2d1021f93624d3f25a5f487a981bd4b5e74ab0bf9a7ae2ae5f202f22a0ecb687ecdac15e53a6fb05843a4aee98e2e09e8e51b26cb5

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/dso_manifest

Filesize
502B

MD5
d4ffa8f2cdda805dc45b5bd1ab21f544

SHA1
a5cbf37c53ae30fcf863cd459db6a4d338f1f03e

SHA256
ba260835333b91990ff0cac15a6f4c46cc35fc80d1168fcda721bd4267b3e660

SHA512
0968c358618450736a5e68c97328d572aa453046c815afdbcb543282c897c64c92dea39909711103e9a55c00502cd519f3a9422b1b0206069a725f34dc57b78c

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/dso_state

Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/dso_state

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/libalivcffmpeg_player.so

Filesize
4.4MB

MD5
2fa599ae5a36448ca4a6bac15afb76aa

SHA1
abb8a909e90654a1bb3668c7136abc692dec08a7

SHA256
368d8bdfc5af3ec77257147ed8c1f5ee266d8986864d20828c1344f74a3b3481

SHA512
0ab5a53f7868d734130b0092604f199e28b300365c905a4bcbdaa5bb7403f58b786561255b5fb466050cd40498fe1e51f41ed080549fb69828c94fabeaebb473

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/libdata_source.so

Filesize
737KB

MD5
ac476a8065539d37ebfe4bb895c85512

SHA1
7935055dd130791aee430910b3c3317e3e2b04aa

SHA256
e325341089cbbf96788d4f2d8bd6a420f4bf4d905e9f86ad35dac3e0ca3879ce

SHA512
3365b3f9ff4222c031c0359bb056460b39747986e83850228176752c870b636a170f1457b53a83604655bb6d83ce307eec8ef17a6d618342f5742cc347f3dbe6

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/libtbDownloader.so

Filesize
157KB

MD5
6246b579efa6ee36fa450a25111bf9f7

SHA1
7835c8a22e17a2e2ea3c463f50c2e08edc90b695

SHA256
d85bf0fc05f37fdbcb4484cbd1c6605672ee8d9066ab4efe70ddb32aeec39d3f

SHA512
d355a723c47d53ebf7943c4e4fb390d6bebae22ce39fe064c98d3ddf311093f8c11e4bf3e1140bfeb85c00291342865b0608f68d63585027c209ddc38ea414fa

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/libtbMPlayer.so

Filesize
546KB

MD5
51829d4d321cfe49ee2e03abfe26c906

SHA1
65b1e6c52e16835ee220e1bc20b25505b35ffec4

SHA256
afcb698d6ee73a6e57bd5584342ac7846c784b5d4f803ee4630ca929921bd6bb

SHA512
ed8b0134408da11ce7400585c0d4d0c57fc0a683ee3742a8b8e0c3f79c9668e858e9a0f66461d669690e9a76bbd65b030ce2b75b1707c69a934b56a6cafa01b7

Download Submit
/data/data/com.xiaoshijie.sqb/lib-main/libtbSoundTempo.so

Filesize
373KB

MD5
3837de7b58cdb0a7b243250f9a784369

SHA1
9754ce744021a2d3e6d96030bd420c24ffce5d5f

SHA256
563a0f05be6cae73a9cc77f7a12f5479e5f0cdf6292d5dbafa84680ec1335831

SHA512
82a8af3caa830316419a48cdd3c6d41ece5dea98822ddf11e2abf5ff75d0442a42273d2aa7da2b76db0e2741a5a26e33726d03343f5e7ccefdfc7c15e4351c6b

Download Submit
/data/data/com.xiaoshijie.sqb/unicorn#cheese#

Filesize
64KB

MD5
c2f217b9f8e975831006ae404348fcc3

SHA1
8876f5a1d6183143128fbefe3005c70d7855fe17

SHA256
960212e09f4231788a5a5bc23e76b85f108b85c9668fd45fbd82e582e96733a9

SHA512
e14103f095cebde784f77b8cc0493c7997d38cbbc447ea3b5d9aeb950b1d1a3e13e7be1974108e2b4012f52bea15642bd48c097a1370b6c5ed03c9236e6c5ecc

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
f10661da7d7932fc66cffb9046989337

SHA1
08216020c1757e34c133e2136829ada8141ba05c

SHA256
1e9213e1e2a016256428fbd56d28826292154b10f3f075bb58be788efe94d585

SHA512
a6d7c8fd0fbbc76d7adf8b6e8ae601251e1ed3c468de8860c40dd42ef6f7e3aba390604a5afbc0f6587bf2c7f7b9cbdf2473420a56f5a3e60f645af0d80a6fa6

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
9d36631af1306736ace962f83e59b584

SHA1
7e9a3a9edd97d3c6bf81f7af9f5115ce7dc0270a

SHA256
83ae541436410ab0fc26e15a36ad370024b0115e59e31e24f8bdfcc52d35dd72

SHA512
2c534c7288b12803edf2e09989dce5ec60861c298dc77564d80ef0f690e4fa741f2ca8eb45ead15b6edea87931af7f9d29197e1e2905119f63cd1306d151a4e5

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
758ff59527e180e88900e8c1a149e532

SHA1
471d09cee32eba716be66bcbd393ac413eb1ce6b

SHA256
8f1ef3575cfb0fe81c0cf73d7222333e24fea95a543571a95341a2574494c327

SHA512
d812071a10fbe10cc6ee7e3e55640acb6422b619bc78933d83f0058054046388b417be16e049203384d9f0dc491f05eaf342349c4702ce10081fc2cd990f20df

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
47b6d01d7d9829e0f5c8f1acf7dd32ea

SHA1
69196ebbdf28306bdf9530cf7991b477a40fbd59

SHA256
074277df4fabd4488a28d09346d740f68ba42b44019455a00eb7dfea8cdc33f8

SHA512
f439756905c5870f4604ba429c8746c8e7259f36e87bc77a185e2720f7cf4bf08e4a04e5c6fb4e1d764aafc362c0a7d1185d475ca169394b4d24d806524198db

Download Submit
/storage/emulated/0/Android/data/com.xiaoshijie.sqb/files/com.qiyukf.unicorn/log/tmp_u_20240522

Filesize
64KB

MD5
8c3b486391f9df10da209aa58e807b35

SHA1
370948edf4744d071df664d2ccca62f73f594d80

SHA256
11a923b836d5e4f1193b825344d8146f7abf46827abc1eef9f22b32a6e9ecc32

SHA512
8a13cb9027395796c223f41c683858818e18c9851bcba9fa82d374efaaeb5d07a002f5ddf8942a4af13402b40d48473a7be5e231c415d2a5946e2ebd1ab4a8f7

Download Submit
/storage/emulated/0/Android/data/com.xiaoshijie.sqb/files/tbslog/tbslog.txt

Filesize
2KB

MD5
c9739d82da021c0a6fdfcc268c94f70c

SHA1
d4f677f2f46cfcd1306e247f794c05f6e0fdd46f

SHA256
14f0e8e5c5ba72f4f1d9df4e016023d66e95a72c39e29ecccdd5199ba00d8d93

SHA512
ea24b7cf72ca32eb01881c54b10ddcced1e75c2636ced080bb6619754dd1ce5965553765d05e7c6de0feab32a22ef7df9812f44f2d715e66f8a61688ab72a0e3

Download Submit