Analysis

  • max time kernel
    175s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 02:47

General

  • Target

    697e138ac623994a29243ae05bb7ec9a_JaffaCakes118.apk

  • Size

    27.6MB

  • MD5

    697e138ac623994a29243ae05bb7ec9a

  • SHA1

    0e305f940e0a51b7ccfc88a573fe6d409e685896

  • SHA256

    80c33080af032395fa2408385aa4955d393ac5aaa5c93014b65617168a0bf58a

  • SHA512

    d4a193aa7ccd3d244ae6bb0b13c178beb8d93022aca88d264757ccd4a0c39fa8b940712b2dfb58c8a19ec4de3751fd547ce2915af646287ef5d02db8c9c2b66f

  • SSDEEP

    786432:ET5XzxIIPi/dr3NVORp3PzYGxMQWUO6MmbEpy:ET5XmierdkR1PUGqQWpy

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 2 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the mobile country code (MCC) 1 TTPs 2 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.smingizazkz.taiwanlodge
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks Android system properties for emulator presence.
    • Checks CPU information
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4297
    • ls /sys/class/thermal
      2⤵
        PID:4333
    • com.smingizazkz.taiwanlodge:pushcore
      1⤵
      • Checks memory information
      • Queries information about running processes on the device
      • Queries information about the current Wi-Fi connection
      • Queries the mobile country code (MCC)
      • Registers a broadcast receiver at runtime (usually for listening for system events)
      • Checks if the internet connection is available
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4504

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.smingizazkz.taiwanlodge/app_sslcache/api.growingio.com.443
      Filesize

      11KB

      MD5

      327d0671853791aee3b907abc0691dec

      SHA1

      cdeed5ea56460f58a414c3b9ddd22a6f49e9f1d9

      SHA256

      5485d602752bcd672e07ef5a7ff8019371636347bcd1f2089a47a3d88d0b1dc4

      SHA512

      ae5d1044aed75dc41dd06627aaed2811ca9fdf8999a5fe72a38896d8ea0499f0a80d81d7a19b72c9f90024da2141c7a4b8910b85592f33d9db6429fa1e62e042

    • /data/data/com.smingizazkz.taiwanlodge/app_sslcache/www.easemob.com.443
      Filesize

      5KB

      MD5

      7c0431e6a633aa4ede0fbc1e44c6a42a

      SHA1

      6ae2d407aebf2db6bc2ce720c4271ae53a66410f

      SHA256

      c83d7b74eb5ab8b3c0cb1705c0f8535ab320114c5e781899e8af2c83b4d05b8e

      SHA512

      a1c8653935ad75079ad01dad7ce69f44ac008b3c31b1b65cfd9c0a386ef7583d7426229b5edc99fa8525e0edcab65721d652044652a187116672c76b88fd5781

    • /data/data/com.smingizazkz.taiwanlodge/cache/com.parse/applicationId
      Filesize

      40B

      MD5

      a689895f98eeba3ad54c857fb7d3d491

      SHA1

      7b4bbe717287a91a5a6ab19a0bfd0a314fcca556

      SHA256

      898acf5a8ab518b0b83c6df22462def9085de719e0f25dbe6097acf4fd140206

      SHA512

      6e3594e8dd35521f5b8aea180ec54b6a09365a5f418241a0eacbd131cb41883b3a60f23fe0cbaa216ade13b29e73a35283ded1c5c4330c07e85068af0e17b803

    • /data/data/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal
      Filesize

      512B

      MD5

      cee49d61c99a274ca125ed73e0641d6e

      SHA1

      d8870bf43715c41efbc095c3c1acb429fe03751d

      SHA256

      ce356ee30e36d04716920b0a71e50658f70ca5dabcc860ee5ce7cbf2e42b3d54

      SHA512

      329d0fd4996326ac42c62b6f45d1256f4be1d68fb353863027f908730577b73f4ec5dad0897020a09ec2bc674368fe7376fd737716fe96e583fdd1b9b85ba568

    • /data/data/com.smingizazkz.taiwanlodge/databases/MyCollection.db-wal
      Filesize

      104KB

      MD5

      ec8c48850a054bc2b1b145c3ed23afc8

      SHA1

      8e694ec3001bf600de87ca28bdc0d0e6d8a8f46f

      SHA256

      661f1efafe13bc2738344c9aeb534218e3c16924450587a83b7ac675fd22ae16

      SHA512

      3ddd004135523fc4202b5507449ba21f1b456226bf225f5bdb57436c40120521e697bb7a765399771a727e64c1df913ccace00ee8fe9c21389918dba81a6b04f

    • /data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore
      Filesize

      32KB

      MD5

      cb82aba1c84a4838189ffb3e839f0424

      SHA1

      5b56390c9bdae34787a06ef93a4e72a4db218b54

      SHA256

      2010e5743590b7c98cba19d7fd5241fca270cbab520e1c8fbabe51fe540972c8

      SHA512

      f2d29795c2f979a6f19fdbd136d639912e3bb1d945409a4bb1275396d5aa163eec0ecdf14af077f3edde260330a8eed42f204150b4238b7801f7462173efef75

    • /data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-journal
      Filesize

      512B

      MD5

      7e374383d25181988ea223fe7655f047

      SHA1

      7a10aef7a66f09ce4462d6a0006bfcec10a4e77a

      SHA256

      fb704d8d2d08b69c1fc7c740144e297cd25a56bcc06bdfd5e841d5b32416bc83

      SHA512

      57949d1002133521a3c86cc767d8e7ede740b56a8db764afcf975c485799c1b3d7cbbdd67508806c841065ceb300adf933e7c9001a5f22c4148168cdc4b3555b

    • /data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-shm
      Filesize

      32KB

      MD5

      f098c51629ae27ff033640a27ecc8a48

      SHA1

      837303a3411ed40329fb08faa733df4df6199cb4

      SHA256

      29f58ef651524b1e69a31e907f6a001d9e108b2a335afb9662e4853abc95fbdf

      SHA512

      6bc109ca55b4bdbcefc22b9ce7be7752c9f34b7fbc84e17ead3fab585554aa97952076e3686bc0116dc0cfc41a363e8405d0dd29ac81bcf56fa661ea2550104d

    • /data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-wal
      Filesize

      44KB

      MD5

      fc19240604717c69863db5c1d552e51c

      SHA1

      49b34ef694f8416c4acfbb55d35ae3349aad5eee

      SHA256

      e7166bfea028b3dc6269313736dab97956158bd1a67c61c3ab5dcca020f5fb6c

      SHA512

      d88a046854a72f37d30ee22407be72d08a83a2e05e4ea3bf77e8b80d6d33d883a5125ca59da5df2e52221b1d19d5cecf5ae8e349106772555d4583c26dd13bf2

    • /data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db
      Filesize

      36KB

      MD5

      5d7ea1a23af19b4340cc8d90f28297d5

      SHA1

      4cfe95b23a9e98378d69c4290af81b51fbe76aea

      SHA256

      474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

      SHA512

      33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

    • /data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db
      Filesize

      36KB

      MD5

      ce6135aa1b1fe4f2c2db2a546d2a5558

      SHA1

      79b59582154017aadab783dc266fcb158c252940

      SHA256

      7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

      SHA512

      2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

    • /data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal
      Filesize

      512B

      MD5

      e9fce65bdda019a38d67451ee57dd0c1

      SHA1

      c8b035c7ef94764dfebf94d26cc3e2bdc91d52ac

      SHA256

      6b0646e3bda735e78e800c1290c1464f4d1df26ae1208871cc5becf055c08774

      SHA512

      32e1e2b2b38dc5f3b67d6c9d5c570b0786785ffe431167cd83859a1dc8868c3bdada0b8c015f8f7d6f7460ce64d2495f2e89e8b4bd418a416f3a6ac2e052eba7

    • /data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-wal
      Filesize

      48KB

      MD5

      effec38d738821cba1ca86d31858daf5

      SHA1

      b89df9017a71b78f1dc603ae34ffa3804c13ef57

      SHA256

      563051a8b51b1af7eeef0b9a725d2141383a2d2de6205f45093f9d2b5d50533b

      SHA512

      b25e92107616d5517fb565fd4a866b6d0277c27dced90e1fa9dfdbd9f718f87298d82907c5539706ebd03ce60e543d04fc8a83c8d19f1bea2ec3e8f2a41a7b46

    • /data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-wal
      Filesize

      16KB

      MD5

      dc585f53cd1c72407d73fb8e1b83fe4a

      SHA1

      804227d652b21b04ea41e2cafe49220d8e73ae1c

      SHA256

      6df23fb4842eaa715689b65ab1ea0ae53b2f881e950ff72c0e56274c0f956862

      SHA512

      ba8c82f5734e017bce3835732642f549fb00edb591758680c226a7f5dc43989499cd0a4d6bf2067a4ff0c7ffe7c231562c8c210c9ab0f3844f1af77f5bc31356

    • /data/data/com.smingizazkz.taiwanlodge/databases/com.smingizazkz.taiwanlodge:pushcore.growing.db-wal
      Filesize

      32KB

      MD5

      af1be0fd337c0b81b456e5bb35bbcbf6

      SHA1

      06551c24c394a09d606a084efac656f63621e40d

      SHA256

      04493ed810f9bf59fea8a22a5fa626b1c7d0e06410a095983967e812992d6aa2

      SHA512

      ad3a3b147a34e9ca4c07f333f4e97669fe06021db73e1e5b8decc507af81ab8084b1e4f6d582ae5b550d5c6e7e89d176a5b3bdbd8ab88a8e4f370358f45c8a5c

    • /data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal
      Filesize

      512B

      MD5

      bad3fc2c6ff72046d946b51992c724bc

      SHA1

      f8224309583c411a11cfd94fd02184036822fd4a

      SHA256

      9339fb2e99f1f5592b928af6117a8bb309a4f32a850d01703c59f96b74821939

      SHA512

      010a4b05edb0b9e66da5fe114256528ad93d84a740ca089bafce5f99c4a96b2f889444d77aacfd511972821b6839688266ae809c4d4ee468842477e859ebbd0f

    • /data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-shm
      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-wal
      Filesize

      116KB

      MD5

      1a1907e0052648046a6b7ad2c7527e8f

      SHA1

      bb734d88f065a0b10137d77d2f62cfebf93e68bb

      SHA256

      65b96c9ef436d19e40def856e9f15ba8d1e5efd826a7890b6e37cb6cc37738a9

      SHA512

      691cfd06295fbb9f3b68c1aef16d34ef947981239992435da42c106add727f93ae601d9d656eac414437f11d6153a3cbc88a9c537ab0170e1979adfd6a93df19

    • /data/data/com.smingizazkz.taiwanlodge/databases/growing.db
      Filesize

      20KB

      MD5

      08c3bc650f47a29feca1c291ce9b6f55

      SHA1

      76c4119d39986ffd228b720108b05d8be44b7416

      SHA256

      327b487e324fd66a1100591265520ffcdb90e8933ce96c2b81011149bf5a06c3

      SHA512

      9a6cee7dbb5581ac0bac2a54d13acb3d8d210a4dd172928a2e404dd379155a3adc4f414d8e8550b16cddead6bdc398630276ac55566dcc1893b94d832f9896e3

    • /data/data/com.smingizazkz.taiwanlodge/databases/growing.db-journal
      Filesize

      512B

      MD5

      922239780857e1ee5db59ac9064f9134

      SHA1

      057e4c91cc7f932cb3ef5662a295d3411c938e70

      SHA256

      5d84e74d94a4b0c067e9ebf5db74ef0f689192acd1a71ffefd48b61773195995

      SHA512

      5eeaf7ba7a771968417f9e31bf0f74374f5da7008328b0a8af2018bc25d533049b4e13f868aa96f4e880839edb4234b2eb512e782d8e947862a8ec9e641ad3f7

    • /data/data/com.smingizazkz.taiwanlodge/databases/growing.db-wal
      Filesize

      164KB

      MD5

      f6c305d7f94772ce72a6ba882c2a5989

      SHA1

      413f0a18db1e70d5160206b95e9c4730fad1af9e

      SHA256

      ab907855cde353cc174c3bcbc99b2ddb0b07e0083841d52bf24c897729f56028

      SHA512

      1907d5ea7aeaa7cbf938a045de72fd6278cfdcfc043389f42532dddd041ae3a674fcded0e234fa82af370d429468ba13610f83059f51b90e372fa5d15ab83913

    • /data/data/com.smingizazkz.taiwanlodge/files/.imprint
      Filesize

      997B

      MD5

      7bc9d06ae0e1d4f539c52fa2c5f13970

      SHA1

      c8df4dba42289bec2e5df1646eca01dcf8b20734

      SHA256

      43aac6824a7fbcacd357222f89e82d40c42873e33981e1c3351ef47cead3327e

      SHA512

      f17dfaa2e63d8b04996646d370245ac6709533dbdca3e816eaebb06372f46f62d89aeb00e787896e509caf3b23cc485f736e3cd308c24d03a54a272043f664f3

    • /data/data/com.smingizazkz.taiwanlodge/files/.umeng/exchangeIdentity.json
      Filesize

      162B

      MD5

      2580ce32ce72a6258bfcf710935eeb6d

      SHA1

      6e4cac47447d3e1f32ab8f3ce756ed4ac5eec7da

      SHA256

      3f8d7259fa4c1cea6875f88e0370ffd571f86795c622d1ee480282bd6746c247

      SHA512

      ad854d64f50ba6e705dd2ba5c2779b40474a99cd68718c3c037f3fefe3d9e9c9e22cced7241d96afcc53b8dab678688d5dac3138c2dcc3c911004427ca69d6c5

    • /data/data/com.smingizazkz.taiwanlodge/files/exid.dat
      Filesize

      56B

      MD5

      6fead0d1d1df26ae369b744ef2585aaf

      SHA1

      5249a7668654792e7ca5eef967d21e7b765f9fd3

      SHA256

      05bbb11974a40539069c3f3de81512ab9c9a6284fbe85c01d96ace994d112549

      SHA512

      95716e43de59a468fad0e332be1051d66fec0e7024a868113f6fb29417d8f2507689aed2745ac069c321ecd290e8ab53ad031f7db1fe061706a2bfd9849f7ba6

    • /data/data/com.smingizazkz.taiwanlodge/files/gaClientId
      Filesize

      36B

      MD5

      dac4312974b2286640a1f44656a3e64e

      SHA1

      af1ab6c53ffbb9e30622bc6bc8ac89501a8b696c

      SHA256

      0b5de69ea542a1f38a8bc5a0db2bdc6c4ba02b6f6361191a6074496eab062588

      SHA512

      0c34e5b500e4d5107797f75ef5c3403cb04e8a700cdc2ee766eeaa99496b2a6d15952cd03bb86ed6f777dbb6407a6ae6924336942a2aad62bde145fc1639f82b

    • /data/data/com.smingizazkz.taiwanlodge/files/gaClientIdData
      Filesize

      32B

      MD5

      bcbed8cdf57facd6b3f6fc56dd3abab1

      SHA1

      dded116ed19b82bfcfeaa8e45bd959169ab99434

      SHA256

      5499b6cabd498b0f220c6ae7cbe75103250bdc2b59ef2f9c07020065e66b4113

      SHA512

      c5fdd29cc2dd4b0406d215c1cea1ddceb306a41df3efab8e2de3bcfc42ca819b66191e7f55f01d39cc4d646e5368905f138f66ed971ef93e131607e27e245068

    • /data/data/com.smingizazkz.taiwanlodge/files/jpush_stat_cache.json
      Filesize

      119B

      MD5

      552c4ba28975d98ac410a2e3dec26030

      SHA1

      0a61179d03dd4c7bde81b99fd47830c68fbacc99

      SHA256

      d19caa5f7d82aa439e7e8da0766071e9d71104ca2787269ae25383cf97f4a6d4

      SHA512

      6737e1698fac3f8d21ed7e309642929a60601e74906a47a6abae01ef2b40050892bcf02e0affcbb9cb09bb3f32f28f26c759506e14e22e5862ca5d94028ff32a

    • /data/data/com.smingizazkz.taiwanlodge/files/jpush_stat_history/active_user/nowrap/25f876da-8360-4bb2-977c-f331073c3000
      Filesize

      159B

      MD5

      0d840e678ac72f86daf714d53909859e

      SHA1

      ab70738fc3405249b066e684449320af8a1641a9

      SHA256

      7e78d7fe227ec2704381d19698b5bc4a3783e510597766b2cb64c96d0964e32e

      SHA512

      f195421215658edf01c08926452a35bb196083417cc21ea50dc909f3548dd0e8cdb89936ff7de6bf2f27364920b32bde8dc62ec90f3f4f464e10d1111fa7ac1b

    • /data/data/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNDY0MDEz
      Filesize

      1KB

      MD5

      27914409b1a30a9d102d72a3064681c2

      SHA1

      f019543c7e8c9334a48719355d6f196832ac53d1

      SHA256

      7fbd9772bf26909898c9206bc5c076820001bf0a247991c4c395ca246e064c15

      SHA512

      3bf6c3a4a6784557e0224a0534ea69568b1d3530c4324d69bc0572155a5032c82b58dd125e148554e47be77f68360987043ee0fe6aa1f166196cd32672b57dd7

    • /data/data/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNTAyNzg3
      Filesize

      1KB

      MD5

      9fc5fc6d13b81216e959e2f707fa4b6d

      SHA1

      a393b97cc77aee4024e7ba3d42015183ed46bf96

      SHA256

      9412f9b8c7756557f288cc7dd759204b25d04b5bfbfd791bdc07261e2deeec0d

      SHA512

      0761737dd71f2c12d7acdb032df0142c85092bcee8fe5f81eb02577546b0b301dc291d11204c09920796b8b9c22d5fa89832d61963266fbc8006096a087d6f6a

    • /data/data/com.smingizazkz.taiwanlodge/files/umeng_it.cache
      Filesize

      498B

      MD5

      a9d8cd836f18733f9c985567ae1a6b63

      SHA1

      cb630b3cb932dea65fe6a9b1b589fe530148b8ed

      SHA256

      de41a9f07993b8e6b67708d071f4aa344920861389fb41f32a035947971af9ba

      SHA512

      1e963cca2a9dd257f821047eb3946e85d96a2cf730dcd845009337bb1f491eaffcadcf1b0295a9ceb91941261745820514d7c53fb29c9983697874dd05404a39

    • /data/data/com.smingizazkz.taiwanlodge/files/umeng_it.cache
      Filesize

      253B

      MD5

      7ccf207ada0111fee8e113faa06b53a7

      SHA1

      6399c981678ca37bf3faa5bbabf025e2fb4eb3ac

      SHA256

      8ebc0b2d0dc157d0c511d7f5e1dded1353c3d89ee92631e7f20993954cc99884

      SHA512

      f25fb3314b98de983bf56ce7d3162369a2a2e641417229987d06bcb6a9d010c257f4886d661e920c0f08ead159bc4faa0267bb6d8dd18b6e9e59e9bd9e1edef3

    • /storage/emulated/0/.DataStorage/ContextData.xml
      Filesize

      111B

      MD5

      bf86e0c6e72990754b61a5fc95979fcb

      SHA1

      d41f4710e6a6eec4c8e30ef0d9844bd3086f403b

      SHA256

      b2d88657d55d1fc69d507d81015642e03693949b4a579af3c75c1d5d0c45f895

      SHA512

      f362617ebbac7d2c28ef3a67791151444aa05e354e54f83595d8fb9dbe3e924ddd492b70028424584b266925cf9be46af6f646fb65ca2fff015abc0e8742f787

    • /storage/emulated/0/.DataStorage/ContextData.xml
      Filesize

      213B

      MD5

      3eb6577e207950c018afbb505ab2520c

      SHA1

      c2c3b695e4a47d9714edc5e32fe25c274e1f80ea

      SHA256

      b485cfc3d29f96d19a4797029d6a61416749a73860bd14d79f237f1569b429ee

      SHA512

      ff09a18d0c1699772dbc7c4bc62425393771107e363b8e339e1e33c6ffc449c822a6115fe5093a56d333d021f53fb1669309e1e64382bab49f559823af7903d8

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      111B

      MD5

      1cfe6daa7e58deb04cb17727fdfeba51

      SHA1

      7485b8ed5fc2afb85d332efaefaf359c68e843be

      SHA256

      e769b6d33f135430ebba662fd330cd99b1deeb22c01a820a01c69c627ce0482a

      SHA512

      c87c33e2983af7bc34126031d6094236877b0da12e0cc09bc50e472e555f5ea00bb62532fddf77e3195a589dff4484fd2ce7f2558279a3a455b174af171f37c1

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      167B

      MD5

      07d8a23c48b77939a3e15ce78567ae73

      SHA1

      17793bd8334638ced316d74f2887d44615ed4e84

      SHA256

      2926bca03475ce7e9def4af298b36218e8148ec8634b144d601677a542db14ea

      SHA512

      0c9873eda0e40cc27936d0e0950c991cfd81ad4fd3f01fdb7f6c21a9f6ace2d263e3c2adf632c354185033866a8c55fbfe599ce2dc284051977c0174d0339622

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/cache/mw_cache/journal.tmp
      Filesize

      33B

      MD5

      eac6d01c46d8b7d63d7ce6644e32b3d0

      SHA1

      f9cdb00ebcb9a27e880002e1e8142ba1f4f1fb10

      SHA256

      b7a7eeb7eb3b4338070ea8f164e9803ba6261378857acdcf0ebbf7b18bc22e44

      SHA512

      86061638fe99acd78bbeb1015a50fb991a991ee5bf3bb4b7fa38b40d8afe7ace5af9e2df1557ea95d45c4085aeb2952fafc9fb791ec357316ed2f367247d3bcf

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html
      Filesize

      113B

      MD5

      e21c79569bcd33d0d5c2f9fc277ca043

      SHA1

      ee45864be50b4e41cd856099fd1cc9a0f35d5a35

      SHA256

      4f9197b7bdfcdcc2f1f3ae5159fd3abdaa54d4a004b83e001f805c8ca03db9e7

      SHA512

      2370ea52962dd4e0b08881c543d88879e43bf2b4ab6c64d4303f56928dffa610dd9a04768854da7bcb607e6ea1e89d9f6ee97548eafcd0d38de9ea9b696cc2fa

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html
      Filesize

      10KB

      MD5

      c64775f263cd43679d1ab2dd91485624

      SHA1

      2f56ad506f69504720e4ff575d0196de8204349a

      SHA256

      aa788a6af186472c16e266750f710ed02919c3351e92da32b7b20b1dace4e0de

      SHA512

      bb12a9f0723c44c05e5a79424c68c9e2a07f8d38a470988cd24e2b3db326e400f00abe4b4a0ff6c925564aab49af0c6eb6b61a6afe5bbd7a0db64b6c962ca8d8

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html
      Filesize

      32KB

      MD5

      2800cfa37fc03fe10cf104ae87e1b0d8

      SHA1

      1dfef36ad65e441a8a5447b2da380f599a3f9326

      SHA256

      ce5d1464038904d035f80ea474490e68763045578306bc7f2ab8766f68f9e406

      SHA512

      f87aa82d0376d8f15822e568beb7681b1e50fdcea4341bbfc4b06fe630e9781ba7f9b78e9356736893fbfe344f3eededc9658bc952b4f25be1dec54fbf97006c

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html
      Filesize

      85B

      MD5

      a0d684ba943a86cc3d4b686b15ab16c9

      SHA1

      dae54a41c09588689fbbed791ae4027bac2d0265

      SHA256

      c249b7282aa8e734cfd0de837a5db4ce88076ab24c863690c7367a20c2866dd6

      SHA512

      1371f4f335212b49d4e8b5db009ba1fcd8426910a109bc0a4818ba5360156b4017c8103fef710c87494fa0c585f89fc1d613afa3ef3ba4f946f6f037c80eacd6

    • /storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html
      Filesize

      72KB

      MD5

      0cb303952360de94f5de3bec1ba161da

      SHA1

      f995b8b31803c6a1491bd4f431a97f3b6be69a3e

      SHA256

      2d71547c02ed1d046ac658afca0d35ab5479b7450fb4fae4330bcaaa79782a93

      SHA512

      7dc4dd73a54f744e4b9b9a7d501d9e93933809c5c83f93029febe1de14f8a0c70fe6a6e8c4bec6c5813aa7a8c0f7b118df16544da4ddca0e47ba96bca877ab72

    • /storage/emulated/0/data/.push_deviceid
      Filesize

      32B

      MD5

      3648a5b992ac18fae847d5d7368b27d8

      SHA1

      31ad56a8d26f50a513c781387e1eaef9406f81e4

      SHA256

      ce8837a0d8fa34fe6024a9af1c043eed6939cb875c44ec28d432430e44cef568

      SHA512

      35282396c04533c8075b5d2f2601d18fcf3cd198434df266542eb9a7e5b141f091add9ad816b14b2c6c643b7db1e904f58d4631ec3cdd092e87487059442b144