Malware Analysis Report

2025-01-19 07:01

Sample ID 240523-c9w97sbd28
Target 697e138ac623994a29243ae05bb7ec9a_JaffaCakes118
SHA256 80c33080af032395fa2408385aa4955d393ac5aaa5c93014b65617168a0bf58a
Tags
collection discovery evasion impact persistence credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

80c33080af032395fa2408385aa4955d393ac5aaa5c93014b65617168a0bf58a

Threat Level: Likely malicious

The file 697e138ac623994a29243ae05bb7ec9a_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection discovery evasion impact persistence credential_access

Checks if the Android device is rooted.

Requests cell location

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Checks Android system properties for emulator presence.

Queries information about running processes on the device

Queries information about the current nearby Wi-Fi networks

Checks memory information

Obtains sensitive information copied to the device clipboard

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Requests dangerous framework permissions

Queries the unique device ID (IMEI, MEID, IMSI)

Checks if the internet connection is available

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-23 02:47

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-23 02:47

Reported

2024-05-23 02:50

Platform

android-x86-arm-20240514-en

Max time kernel

175s

Max time network

186s

Command Line

com.smingizazkz.taiwanlodge

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.smingizazkz.taiwanlodge

ls /sys/class/thermal

com.smingizazkz.taiwanlodge:pushcore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.3:443 tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:443 log.umsns.com tcp
US 1.1.1.1:53 www.easemob.com udp
ES 163.181.49.232:80 www.easemob.com tcp
ES 163.181.49.232:443 www.easemob.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.250.179.206:443 android.apis.google.com tcp
US 1.1.1.1:53 a1.easemob.com udp
CN 101.201.233.110:80 a1.easemob.com tcp
US 1.1.1.1:53 t.growingio.com udp
CN 106.75.118.58:443 t.growingio.com tcp
US 1.1.1.1:53 www.jlckjz.com udp
US 38.163.166.196:80 www.jlckjz.com tcp
US 1.1.1.1:53 s.jpush.cn udp
US 1.1.1.1:53 api.zizaike.com udp
CN 1.94.9.210:19000 s.jpush.cn udp
CN 106.14.120.78:443 api.zizaike.com tcp
CN 106.14.120.78:443 api.zizaike.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 120.46.131.222:19000 sis.jpush.io udp
US 1.1.1.1:53 plbslog.umeng.com udp
US 1.1.1.1:53 zizaike.com udp
CN 36.156.202.78:443 plbslog.umeng.com tcp
CN 106.75.70.154:443 t.growingio.com tcp
US 1.1.1.1:53 stats.mlinks.cc udp
CN 106.14.120.78:443 zizaike.com tcp
CN 106.14.120.78:443 zizaike.com tcp
CN 106.14.120.78:443 zizaike.com tcp
US 1.1.1.1:53 alog.umeng.com udp
DE 8.211.35.113:80 alog.umeng.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.251.36.40:443 ssl.google-analytics.com tcp
CN 123.196.118.23:19000 udp
CN 59.82.29.163:443 log.umsns.com tcp
CN 103.229.215.60:19000 udp
GB 172.217.169.14:443 tcp
CN 47.95.246.247:80 a1.easemob.com tcp
US 1.1.1.1:53 www.google.com udp
NL 142.250.179.164:443 www.google.com tcp
CN 106.75.118.58:443 t.growingio.com tcp
US 1.1.1.1:53 api.growingio.com udp
NL 163.171.245.214:443 api.growingio.com tcp
CN 117.121.49.100:19000 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 36.156.202.78:443 plbslog.umeng.com tcp
CN 106.75.70.154:443 t.growingio.com tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
CN 124.71.183.120:7004 im64.jpush.cn tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
CN 59.82.29.248:443 log.umsns.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 106.75.118.58:443 t.growingio.com tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 106.75.70.154:443 t.growingio.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 120.46.131.222:19000 sis.jpush.io udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 59.82.29.249:443 log.umsns.com tcp
CN 123.196.118.23:19000 udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp
CN 106.75.70.154:443 t.growingio.com tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
CN 124.71.183.120:7004 im64.jpush.cn tcp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 59.82.31.154:443 log.umsns.com tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 106.75.118.58:443 t.growingio.com tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 106.75.70.154:443 t.growingio.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 120.46.131.222:19000 sis.jpush.io udp
CN 59.82.31.160:443 log.umsns.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 123.196.118.23:19000 udp
CN 106.75.70.154:443 t.growingio.com tcp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp

Files

/data/data/com.smingizazkz.taiwanlodge/cache/com.parse/applicationId

MD5 a689895f98eeba3ad54c857fb7d3d491
SHA1 7b4bbe717287a91a5a6ab19a0bfd0a314fcca556
SHA256 898acf5a8ab518b0b83c6df22462def9085de719e0f25dbe6097acf4fd140206
SHA512 6e3594e8dd35521f5b8aea180ec54b6a09365a5f418241a0eacbd131cb41883b3a60f23fe0cbaa216ade13b29e73a35283ded1c5c4330c07e85068af0e17b803

/data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-journal

MD5 7e374383d25181988ea223fe7655f047
SHA1 7a10aef7a66f09ce4462d6a0006bfcec10a4e77a
SHA256 fb704d8d2d08b69c1fc7c740144e297cd25a56bcc06bdfd5e841d5b32416bc83
SHA512 57949d1002133521a3c86cc767d8e7ede740b56a8db764afcf975c485799c1b3d7cbbdd67508806c841065ceb300adf933e7c9001a5f22c4148168cdc4b3555b

/data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore

MD5 cb82aba1c84a4838189ffb3e839f0424
SHA1 5b56390c9bdae34787a06ef93a4e72a4db218b54
SHA256 2010e5743590b7c98cba19d7fd5241fca270cbab520e1c8fbabe51fe540972c8
SHA512 f2d29795c2f979a6f19fdbd136d639912e3bb1d945409a4bb1275396d5aa163eec0ecdf14af077f3edde260330a8eed42f204150b4238b7801f7462173efef75

/data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-shm

MD5 f098c51629ae27ff033640a27ecc8a48
SHA1 837303a3411ed40329fb08faa733df4df6199cb4
SHA256 29f58ef651524b1e69a31e907f6a001d9e108b2a335afb9662e4853abc95fbdf
SHA512 6bc109ca55b4bdbcefc22b9ce7be7752c9f34b7fbc84e17ead3fab585554aa97952076e3686bc0116dc0cfc41a363e8405d0dd29ac81bcf56fa661ea2550104d

/data/data/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-wal

MD5 fc19240604717c69863db5c1d552e51c
SHA1 49b34ef694f8416c4acfbb55d35ae3349aad5eee
SHA256 e7166bfea028b3dc6269313736dab97956158bd1a67c61c3ab5dcca020f5fb6c
SHA512 d88a046854a72f37d30ee22407be72d08a83a2e05e4ea3bf77e8b80d6d33d883a5125ca59da5df2e52221b1d19d5cecf5ae8e349106772555d4583c26dd13bf2

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html

MD5 2800cfa37fc03fe10cf104ae87e1b0d8
SHA1 1dfef36ad65e441a8a5447b2da380f599a3f9326
SHA256 ce5d1464038904d035f80ea474490e68763045578306bc7f2ab8766f68f9e406
SHA512 f87aa82d0376d8f15822e568beb7681b1e50fdcea4341bbfc4b06fe630e9781ba7f9b78e9356736893fbfe344f3eededc9658bc952b4f25be1dec54fbf97006c

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html

MD5 a0d684ba943a86cc3d4b686b15ab16c9
SHA1 dae54a41c09588689fbbed791ae4027bac2d0265
SHA256 c249b7282aa8e734cfd0de837a5db4ce88076ab24c863690c7367a20c2866dd6
SHA512 1371f4f335212b49d4e8b5db009ba1fcd8426910a109bc0a4818ba5360156b4017c8103fef710c87494fa0c585f89fc1d613afa3ef3ba4f946f6f037c80eacd6

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html

MD5 0cb303952360de94f5de3bec1ba161da
SHA1 f995b8b31803c6a1491bd4f431a97f3b6be69a3e
SHA256 2d71547c02ed1d046ac658afca0d35ab5479b7450fb4fae4330bcaaa79782a93
SHA512 7dc4dd73a54f744e4b9b9a7d501d9e93933809c5c83f93029febe1de14f8a0c70fe6a6e8c4bec6c5813aa7a8c0f7b118df16544da4ddca0e47ba96bca877ab72

/data/data/com.smingizazkz.taiwanlodge/app_sslcache/www.easemob.com.443

MD5 7c0431e6a633aa4ede0fbc1e44c6a42a
SHA1 6ae2d407aebf2db6bc2ce720c4271ae53a66410f
SHA256 c83d7b74eb5ab8b3c0cb1705c0f8535ab320114c5e781899e8af2c83b4d05b8e
SHA512 a1c8653935ad75079ad01dad7ce69f44ac008b3c31b1b65cfd9c0a386ef7583d7426229b5edc99fa8525e0edcab65721d652044652a187116672c76b88fd5781

/data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 bad3fc2c6ff72046d946b51992c724bc
SHA1 f8224309583c411a11cfd94fd02184036822fd4a
SHA256 9339fb2e99f1f5592b928af6117a8bb309a4f32a850d01703c59f96b74821939
SHA512 010a4b05edb0b9e66da5fe114256528ad93d84a740ca089bafce5f99c4a96b2f889444d77aacfd511972821b6839688266ae809c4d4ee468842477e859ebbd0f

/data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html

MD5 e21c79569bcd33d0d5c2f9fc277ca043
SHA1 ee45864be50b4e41cd856099fd1cc9a0f35d5a35
SHA256 4f9197b7bdfcdcc2f1f3ae5159fd3abdaa54d4a004b83e001f805c8ca03db9e7
SHA512 2370ea52962dd4e0b08881c543d88879e43bf2b4ab6c64d4303f56928dffa610dd9a04768854da7bcb607e6ea1e89d9f6ee97548eafcd0d38de9ea9b696cc2fa

/data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 922239780857e1ee5db59ac9064f9134
SHA1 057e4c91cc7f932cb3ef5662a295d3411c938e70
SHA256 5d84e74d94a4b0c067e9ebf5db74ef0f689192acd1a71ffefd48b61773195995
SHA512 5eeaf7ba7a771968417f9e31bf0f74374f5da7008328b0a8af2018bc25d533049b4e13f868aa96f4e880839edb4234b2eb512e782d8e947862a8ec9e641ad3f7

/data/data/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-wal

MD5 1a1907e0052648046a6b7ad2c7527e8f
SHA1 bb734d88f065a0b10137d77d2f62cfebf93e68bb
SHA256 65b96c9ef436d19e40def856e9f15ba8d1e5efd826a7890b6e37cb6cc37738a9
SHA512 691cfd06295fbb9f3b68c1aef16d34ef947981239992435da42c106add727f93ae601d9d656eac414437f11d6153a3cbc88a9c537ab0170e1979adfd6a93df19

/data/data/com.smingizazkz.taiwanlodge/databases/growing.db

MD5 08c3bc650f47a29feca1c291ce9b6f55
SHA1 76c4119d39986ffd228b720108b05d8be44b7416
SHA256 327b487e324fd66a1100591265520ffcdb90e8933ce96c2b81011149bf5a06c3
SHA512 9a6cee7dbb5581ac0bac2a54d13acb3d8d210a4dd172928a2e404dd379155a3adc4f414d8e8550b16cddead6bdc398630276ac55566dcc1893b94d832f9896e3

/data/data/com.smingizazkz.taiwanlodge/databases/growing.db-wal

MD5 f6c305d7f94772ce72a6ba882c2a5989
SHA1 413f0a18db1e70d5160206b95e9c4730fad1af9e
SHA256 ab907855cde353cc174c3bcbc99b2ddb0b07e0083841d52bf24c897729f56028
SHA512 1907d5ea7aeaa7cbf938a045de72fd6278cfdcfc043389f42532dddd041ae3a674fcded0e234fa82af370d429468ba13610f83059f51b90e372fa5d15ab83913

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/zizaike#zzkhx/log/20240523/000.html

MD5 c64775f263cd43679d1ab2dd91485624
SHA1 2f56ad506f69504720e4ff575d0196de8204349a
SHA256 aa788a6af186472c16e266750f710ed02919c3351e92da32b7b20b1dace4e0de
SHA512 bb12a9f0723c44c05e5a79424c68c9e2a07f8d38a470988cd24e2b3db326e400f00abe4b4a0ff6c925564aab49af0c6eb6b61a6afe5bbd7a0db64b6c962ca8d8

/data/data/com.smingizazkz.taiwanlodge/files/gaClientId

MD5 dac4312974b2286640a1f44656a3e64e
SHA1 af1ab6c53ffbb9e30622bc6bc8ac89501a8b696c
SHA256 0b5de69ea542a1f38a8bc5a0db2bdc6c4ba02b6f6361191a6074496eab062588
SHA512 0c34e5b500e4d5107797f75ef5c3403cb04e8a700cdc2ee766eeaa99496b2a6d15952cd03bb86ed6f777dbb6407a6ae6924336942a2aad62bde145fc1639f82b

/storage/emulated/0/data/.push_deviceid

MD5 3648a5b992ac18fae847d5d7368b27d8
SHA1 31ad56a8d26f50a513c781387e1eaef9406f81e4
SHA256 ce8837a0d8fa34fe6024a9af1c043eed6939cb875c44ec28d432430e44cef568
SHA512 35282396c04533c8075b5d2f2601d18fcf3cd198434df266542eb9a7e5b141f091add9ad816b14b2c6c643b7db1e904f58d4631ec3cdd092e87487059442b144

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 1cfe6daa7e58deb04cb17727fdfeba51
SHA1 7485b8ed5fc2afb85d332efaefaf359c68e843be
SHA256 e769b6d33f135430ebba662fd330cd99b1deeb22c01a820a01c69c627ce0482a
SHA512 c87c33e2983af7bc34126031d6094236877b0da12e0cc09bc50e472e555f5ea00bb62532fddf77e3195a589dff4484fd2ce7f2558279a3a455b174af171f37c1

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 bf86e0c6e72990754b61a5fc95979fcb
SHA1 d41f4710e6a6eec4c8e30ef0d9844bd3086f403b
SHA256 b2d88657d55d1fc69d507d81015642e03693949b4a579af3c75c1d5d0c45f895
SHA512 f362617ebbac7d2c28ef3a67791151444aa05e354e54f83595d8fb9dbe3e924ddd492b70028424584b266925cf9be46af6f646fb65ca2fff015abc0e8742f787

/data/data/com.smingizazkz.taiwanlodge/files/gaClientIdData

MD5 bcbed8cdf57facd6b3f6fc56dd3abab1
SHA1 dded116ed19b82bfcfeaa8e45bd959169ab99434
SHA256 5499b6cabd498b0f220c6ae7cbe75103250bdc2b59ef2f9c07020065e66b4113
SHA512 c5fdd29cc2dd4b0406d215c1cea1ddceb306a41df3efab8e2de3bcfc42ca819b66191e7f55f01d39cc4d646e5368905f138f66ed971ef93e131607e27e245068

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 07d8a23c48b77939a3e15ce78567ae73
SHA1 17793bd8334638ced316d74f2887d44615ed4e84
SHA256 2926bca03475ce7e9def4af298b36218e8148ec8634b144d601677a542db14ea
SHA512 0c9873eda0e40cc27936d0e0950c991cfd81ad4fd3f01fdb7f6c21a9f6ace2d263e3c2adf632c354185033866a8c55fbfe599ce2dc284051977c0174d0339622

/data/data/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 cee49d61c99a274ca125ed73e0641d6e
SHA1 d8870bf43715c41efbc095c3c1acb429fe03751d
SHA256 ce356ee30e36d04716920b0a71e50658f70ca5dabcc860ee5ce7cbf2e42b3d54
SHA512 329d0fd4996326ac42c62b6f45d1256f4be1d68fb353863027f908730577b73f4ec5dad0897020a09ec2bc674368fe7376fd737716fe96e583fdd1b9b85ba568

/data/data/com.smingizazkz.taiwanlodge/files/jpush_stat_history/active_user/nowrap/25f876da-8360-4bb2-977c-f331073c3000

MD5 0d840e678ac72f86daf714d53909859e
SHA1 ab70738fc3405249b066e684449320af8a1641a9
SHA256 7e78d7fe227ec2704381d19698b5bc4a3783e510597766b2cb64c96d0964e32e
SHA512 f195421215658edf01c08926452a35bb196083417cc21ea50dc909f3548dd0e8cdb89936ff7de6bf2f27364920b32bde8dc62ec90f3f4f464e10d1111fa7ac1b

/data/data/com.smingizazkz.taiwanlodge/databases/com.smingizazkz.taiwanlodge:pushcore.growing.db-wal

MD5 af1be0fd337c0b81b456e5bb35bbcbf6
SHA1 06551c24c394a09d606a084efac656f63621e40d
SHA256 04493ed810f9bf59fea8a22a5fa626b1c7d0e06410a095983967e812992d6aa2
SHA512 ad3a3b147a34e9ca4c07f333f4e97669fe06021db73e1e5b8decc507af81ab8084b1e4f6d582ae5b550d5c6e7e89d176a5b3bdbd8ab88a8e4f370358f45c8a5c

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 3eb6577e207950c018afbb505ab2520c
SHA1 c2c3b695e4a47d9714edc5e32fe25c274e1f80ea
SHA256 b485cfc3d29f96d19a4797029d6a61416749a73860bd14d79f237f1569b429ee
SHA512 ff09a18d0c1699772dbc7c4bc62425393771107e363b8e339e1e33c6ffc449c822a6115fe5093a56d333d021f53fb1669309e1e64382bab49f559823af7903d8

/data/data/com.smingizazkz.taiwanlodge/databases/MyCollection.db-wal

MD5 ec8c48850a054bc2b1b145c3ed23afc8
SHA1 8e694ec3001bf600de87ca28bdc0d0e6d8a8f46f
SHA256 661f1efafe13bc2738344c9aeb534218e3c16924450587a83b7ac675fd22ae16
SHA512 3ddd004135523fc4202b5507449ba21f1b456226bf225f5bdb57436c40120521e697bb7a765399771a727e64c1df913ccace00ee8fe9c21389918dba81a6b04f

/data/data/com.smingizazkz.taiwanlodge/files/umeng_it.cache

MD5 a9d8cd836f18733f9c985567ae1a6b63
SHA1 cb630b3cb932dea65fe6a9b1b589fe530148b8ed
SHA256 de41a9f07993b8e6b67708d071f4aa344920861389fb41f32a035947971af9ba
SHA512 1e963cca2a9dd257f821047eb3946e85d96a2cf730dcd845009337bb1f491eaffcadcf1b0295a9ceb91941261745820514d7c53fb29c9983697874dd05404a39

/data/data/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNDY0MDEz

MD5 27914409b1a30a9d102d72a3064681c2
SHA1 f019543c7e8c9334a48719355d6f196832ac53d1
SHA256 7fbd9772bf26909898c9206bc5c076820001bf0a247991c4c395ca246e064c15
SHA512 3bf6c3a4a6784557e0224a0534ea69568b1d3530c4324d69bc0572155a5032c82b58dd125e148554e47be77f68360987043ee0fe6aa1f166196cd32672b57dd7

/data/data/com.smingizazkz.taiwanlodge/files/jpush_stat_cache.json

MD5 552c4ba28975d98ac410a2e3dec26030
SHA1 0a61179d03dd4c7bde81b99fd47830c68fbacc99
SHA256 d19caa5f7d82aa439e7e8da0766071e9d71104ca2787269ae25383cf97f4a6d4
SHA512 6737e1698fac3f8d21ed7e309642929a60601e74906a47a6abae01ef2b40050892bcf02e0affcbb9cb09bb3f32f28f26c759506e14e22e5862ca5d94028ff32a

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 e9fce65bdda019a38d67451ee57dd0c1
SHA1 c8b035c7ef94764dfebf94d26cc3e2bdc91d52ac
SHA256 6b0646e3bda735e78e800c1290c1464f4d1df26ae1208871cc5becf055c08774
SHA512 32e1e2b2b38dc5f3b67d6c9d5c570b0786785ffe431167cd83859a1dc8868c3bdada0b8c015f8f7d6f7460ce64d2495f2e89e8b4bd418a416f3a6ac2e052eba7

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-wal

MD5 effec38d738821cba1ca86d31858daf5
SHA1 b89df9017a71b78f1dc603ae34ffa3804c13ef57
SHA256 563051a8b51b1af7eeef0b9a725d2141383a2d2de6205f45093f9d2b5d50533b
SHA512 b25e92107616d5517fb565fd4a866b6d0277c27dced90e1fa9dfdbd9f718f87298d82907c5539706ebd03ce60e543d04fc8a83c8d19f1bea2ec3e8f2a41a7b46

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/cache/mw_cache/journal.tmp

MD5 eac6d01c46d8b7d63d7ce6644e32b3d0
SHA1 f9cdb00ebcb9a27e880002e1e8142ba1f4f1fb10
SHA256 b7a7eeb7eb3b4338070ea8f164e9803ba6261378857acdcf0ebbf7b18bc22e44
SHA512 86061638fe99acd78bbeb1015a50fb991a991ee5bf3bb4b7fa38b40d8afe7ace5af9e2df1557ea95d45c4085aeb2952fafc9fb791ec357316ed2f367247d3bcf

/data/data/com.smingizazkz.taiwanlodge/files/.umeng/exchangeIdentity.json

MD5 2580ce32ce72a6258bfcf710935eeb6d
SHA1 6e4cac47447d3e1f32ab8f3ce756ed4ac5eec7da
SHA256 3f8d7259fa4c1cea6875f88e0370ffd571f86795c622d1ee480282bd6746c247
SHA512 ad854d64f50ba6e705dd2ba5c2779b40474a99cd68718c3c037f3fefe3d9e9c9e22cced7241d96afcc53b8dab678688d5dac3138c2dcc3c911004427ca69d6c5

/data/data/com.smingizazkz.taiwanlodge/files/exid.dat

MD5 6fead0d1d1df26ae369b744ef2585aaf
SHA1 5249a7668654792e7ca5eef967d21e7b765f9fd3
SHA256 05bbb11974a40539069c3f3de81512ab9c9a6284fbe85c01d96ace994d112549
SHA512 95716e43de59a468fad0e332be1051d66fec0e7024a868113f6fb29417d8f2507689aed2745ac069c321ecd290e8ab53ad031f7db1fe061706a2bfd9849f7ba6

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-wal

MD5 dc585f53cd1c72407d73fb8e1b83fe4a
SHA1 804227d652b21b04ea41e2cafe49220d8e73ae1c
SHA256 6df23fb4842eaa715689b65ab1ea0ae53b2f881e950ff72c0e56274c0f956862
SHA512 ba8c82f5734e017bce3835732642f549fb00edb591758680c226a7f5dc43989499cd0a4d6bf2067a4ff0c7ffe7c231562c8c210c9ab0f3844f1af77f5bc31356

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/com.smingizazkz.taiwanlodge/files/.imprint

MD5 7bc9d06ae0e1d4f539c52fa2c5f13970
SHA1 c8df4dba42289bec2e5df1646eca01dcf8b20734
SHA256 43aac6824a7fbcacd357222f89e82d40c42873e33981e1c3351ef47cead3327e
SHA512 f17dfaa2e63d8b04996646d370245ac6709533dbdca3e816eaebb06372f46f62d89aeb00e787896e509caf3b23cc485f736e3cd308c24d03a54a272043f664f3

/data/data/com.smingizazkz.taiwanlodge/files/umeng_it.cache

MD5 7ccf207ada0111fee8e113faa06b53a7
SHA1 6399c981678ca37bf3faa5bbabf025e2fb4eb3ac
SHA256 8ebc0b2d0dc157d0c511d7f5e1dded1353c3d89ee92631e7f20993954cc99884
SHA512 f25fb3314b98de983bf56ce7d3162369a2a2e641417229987d06bcb6a9d010c257f4886d661e920c0f08ead159bc4faa0267bb6d8dd18b6e9e59e9bd9e1edef3

/data/data/com.smingizazkz.taiwanlodge/app_sslcache/api.growingio.com.443

MD5 327d0671853791aee3b907abc0691dec
SHA1 cdeed5ea56460f58a414c3b9ddd22a6f49e9f1d9
SHA256 5485d602752bcd672e07ef5a7ff8019371636347bcd1f2089a47a3d88d0b1dc4
SHA512 ae5d1044aed75dc41dd06627aaed2811ca9fdf8999a5fe72a38896d8ea0499f0a80d81d7a19b72c9f90024da2141c7a4b8910b85592f33d9db6429fa1e62e042

/data/data/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNTAyNzg3

MD5 9fc5fc6d13b81216e959e2f707fa4b6d
SHA1 a393b97cc77aee4024e7ba3d42015183ed46bf96
SHA256 9412f9b8c7756557f288cc7dd759204b25d04b5bfbfd791bdc07261e2deeec0d
SHA512 0761737dd71f2c12d7acdb032df0142c85092bcee8fe5f81eb02577546b0b301dc291d11204c09920796b8b9c22d5fa89832d61963266fbc8006096a087d6f6a

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-23 02:47

Reported

2024-05-23 02:50

Platform

android-x64-arm64-20240514-en

Max time kernel

175s

Max time network

185s

Command Line

com.smingizazkz.taiwanlodge

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/bin/su N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.smingizazkz.taiwanlodge

com.smingizazkz.taiwanlodge:pushcore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.251.39.110:443 android.apis.google.com tcp
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.168:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 log.umsns.com udp
US 1.1.1.1:53 www.easemob.com udp
CN 59.82.29.162:443 log.umsns.com tcp
ES 163.181.49.235:80 www.easemob.com tcp
ES 163.181.49.235:443 www.easemob.com tcp
US 1.1.1.1:53 a1.easemob.com udp
CN 101.201.233.110:80 a1.easemob.com tcp
US 1.1.1.1:53 t.growingio.com udp
CN 106.75.70.154:443 t.growingio.com tcp
US 1.1.1.1:53 www.jlckjz.com udp
US 38.163.166.196:80 www.jlckjz.com tcp
US 1.1.1.1:53 api.zizaike.com udp
US 1.1.1.1:53 s.jpush.cn udp
CN 119.3.253.130:19000 s.jpush.cn udp
CN 106.14.120.78:443 api.zizaike.com tcp
CN 106.14.120.78:443 api.zizaike.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 1.92.77.21:19000 sis.jpush.io udp
US 1.1.1.1:53 plbslog.umeng.com udp
US 1.1.1.1:53 zizaike.com udp
CN 36.156.202.75:443 plbslog.umeng.com tcp
US 1.1.1.1:53 stats.mlinks.cc udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 106.14.120.78:443 zizaike.com tcp
CN 106.14.120.78:443 zizaike.com tcp
CN 106.14.120.78:443 zizaike.com tcp
US 1.1.1.1:53 alog.umeng.com udp
DE 8.211.35.113:80 alog.umeng.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 123.196.118.23:19000 udp
CN 59.82.29.163:443 log.umsns.com tcp
CN 103.229.215.60:19000 udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
CN 47.95.246.247:80 a1.easemob.com tcp
US 1.1.1.1:53 www.google.com udp
NL 142.250.179.164:443 www.google.com tcp
CN 106.75.70.154:443 t.growingio.com tcp
US 1.1.1.1:53 api.growingio.com udp
NL 163.171.245.214:443 api.growingio.com tcp
CN 117.121.49.100:19000 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.119.173:7002 im64.jpush.cn tcp
CN 36.156.202.75:443 plbslog.umeng.com tcp
CN 106.75.118.58:443 t.growingio.com tcp
CN 139.9.119.173:7000 im64.jpush.cn tcp
CN 139.9.119.173:7003 im64.jpush.cn tcp
CN 139.9.119.173:7006 im64.jpush.cn tcp
CN 139.9.119.173:7005 im64.jpush.cn tcp
CN 139.9.119.173:7008 im64.jpush.cn tcp
CN 59.82.29.248:443 log.umsns.com tcp
CN 139.9.119.173:7004 im64.jpush.cn tcp
CN 139.9.119.173:7009 im64.jpush.cn tcp
CN 106.75.70.154:443 t.growingio.com tcp
CN 139.9.119.173:7007 im64.jpush.cn tcp
NL 142.250.179.164:443 www.google.com tcp
CN 119.3.253.130:19000 easytomessage.com udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 59.82.29.249:443 log.umsns.com tcp
CN 123.196.118.23:19000 udp
GB 142.250.187.206:443 tcp
GB 172.217.16.226:443 tcp
GB 142.250.200.42:443 tcp
CN 106.75.70.154:443 t.growingio.com tcp
NL 142.250.179.164:443 www.google.com tcp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 139.9.119.173:7005 im64.jpush.cn tcp
CN 139.9.119.173:7007 im64.jpush.cn tcp
CN 139.9.119.173:7002 im64.jpush.cn tcp
CN 139.9.119.173:7006 im64.jpush.cn tcp
CN 59.82.31.154:443 log.umsns.com tcp
CN 139.9.119.173:7004 im64.jpush.cn tcp
CN 139.9.119.173:7000 im64.jpush.cn tcp
CN 106.75.70.154:443 t.growingio.com tcp
CN 139.9.119.173:7003 im64.jpush.cn tcp
CN 139.9.119.173:7008 im64.jpush.cn tcp
CN 139.9.119.173:7009 im64.jpush.cn tcp
CN 106.75.118.58:443 t.growingio.com tcp
CN 119.3.253.130:19000 easytomessage.com udp
CN 1.92.77.21:19000 easytomessage.com udp
CN 59.82.31.160:443 log.umsns.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 106.75.70.154:443 t.growingio.com tcp
CN 123.196.118.23:19000 udp
CN 106.75.118.58:443 t.growingio.com tcp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp

Files

/data/user/0/com.smingizazkz.taiwanlodge/cache/com.parse/applicationId

MD5 a689895f98eeba3ad54c857fb7d3d491
SHA1 7b4bbe717287a91a5a6ab19a0bfd0a314fcca556
SHA256 898acf5a8ab518b0b83c6df22462def9085de719e0f25dbe6097acf4fd140206
SHA512 6e3594e8dd35521f5b8aea180ec54b6a09365a5f418241a0eacbd131cb41883b3a60f23fe0cbaa216ade13b29e73a35283ded1c5c4330c07e85068af0e17b803

/data/user/0/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-journal

MD5 dd1076cfaa7ba0e20761573a686319ec
SHA1 b1cf1f3044a278cbb45ecbfa3f1dab2ad17d11cc
SHA256 289c98ac95df0d143999add2a88915ccada6f1e546ec1210eaae5298738e4628
SHA512 808d1fed9cd4f2f911b90776b296f782386f8ff0672a83c89f13c7a4a065d5cfaae8a6fc31e934bd094df88b22aaa50127cb57b7ef2a34a5aaa497e03991d475

/data/user/0/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore

MD5 b60c88e7be211acb11310749be5ec35e
SHA1 3f3720a6b9b350c4048ce1602da4b58fcc89358f
SHA256 e4aca3f250c4af4e3b66f66d5121318d5c1039c9f0a9fe53c585942e37b094d4
SHA512 ae2720a7715816109d01333bf9b7e383d70ff8a93a16cfde6b7dc9da37d1340bc8789fcf780cd9915266e0f8231a192cd2847d3c085eade5e52ab70086f2100a

/data/user/0/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-journal

MD5 3858ab7b88efab7992ea3b551a186034
SHA1 0bbd388884647c48f9a3cfae8dd079be922ce333
SHA256 b6ae7712a26b64a921bc80fda5e5adb4130f3521bdf764b4255be1673a68da54
SHA512 a21266d5adc7117a0842945b56c7026f347ace09e72f3ae13e083a95d57a0b948b4ed1ff1c426aa5dfc8f9e64ae477e00f31c836f0ee067292d2c4077bc9b65e

/data/user/0/com.smingizazkz.taiwanlodge/databases/ParseOfflineStore-journal

MD5 6603f4a3c0109961ee6d9c37063697a6
SHA1 4563dc477da065a512f990859b212c2ab42dc61a
SHA256 f432cab46bd14931369fd5a97cf5d84af97029518756d0645f6ca65bb88e7f85
SHA512 d74dd03d5ba1059a36fd665cd18fbbb5c12d67f88a343ca21ad1632789b9844bfa58466d8e7def0b443323728ea0b2bd053b8f08acaf510d3b76bf1af00a5682

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 569b37b77d6d429b2b7b11b48bc9e457
SHA1 09859e8da7374743d2a35c58cc34dcfd73d4f05c
SHA256 4dd6b3297c067df63f008ad93b2f3d8c260d96e37a87d0d9a903e0fa223545bc
SHA512 2196748cf80f8b853a30819244febb1ba09596d29b2d917ca9356498ac0ea50a4bd1d094c7b7f2719d671d0e1329df9e1ea2a4c3dbcf9060bbd074b31307c66a

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db

MD5 9ec0d0235b2600063e5fbc1bcee26fcd
SHA1 229590df886e5fcc37e82f7c6499a6664533efaa
SHA256 f6fcdaa3bac1e4c2885b1491598a5456a34141166084a65c619139ac9f4b926e
SHA512 fe7834dad95a57814a28d7c5a81cf7029d70ddbf28a9956c7aa348a13837f6a73dd33b890dc82624e3b6ee256c94b8293f98b6c4b1076bbad338a31e5a504607

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 7516733ff57ea42216e5101b61aa0227
SHA1 e24921564db2114e8c797b03c849ea612b321b27
SHA256 7faa24616c075725887de3debb54919b57f99ba72d060ce387e702ef7afa2263
SHA512 8df159a9cd6c282d83efa0c3416db607f5f2306936c7eabbee1e1747781a055df82c1345429786642bc7502438e8f6b9937b5ab77daad7171f6b9f95b78d1413

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 6d1869401a86a14c24e773a12bb34537
SHA1 740910d7f6082737f3521a862e06fae27d5cf463
SHA256 35319e59bd9ebc26156cf7af7e43f523fbbc48583221915da26867a7c1f95348
SHA512 144346d9e0dd696526392f942c9f43904d0599e16411c1794382f97a729635fef4ad4073b96872c811769dbb2849a00e55ae9e0c37e7e65e9eeae772f414c5cd

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 c2cb5ff83ed09818ce2fa0b564243441
SHA1 f0a749adfc3135b0d052b99f59eaac0f3af23517
SHA256 7c125d8f21064e8c50a9bcf03b55c5976817ab6706f8538baa795d96a2837128
SHA512 1b1294a4706cbdb199490b04930779e309dd7ef9d6ed5250506f004b1a16205658227254a02606e73293651ed6536a1982fbeff72ea3b9c02f747dcea0edcb64

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 08e0215f57ac72a51ada85230164a920
SHA1 d6024578de3561e9c22b24e45ac6cb69c5efa15b
SHA256 b2e26184eae6c78af39497808affd7622fe0f67c02004b7d9e2c1e0e9c90ce06
SHA512 a80e71108411db193e5360bc1dc1d4715617b0167992c3438972f9fe16a01f830cd3d145084a5814d1c92caf318d4af8d324e7a5d3956cf348566d6433dc9378

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 0f784b3f490b425f2d3bcf79312d31b2
SHA1 9845ae7b6816528189c8d6517571148c5d692788
SHA256 eca039620f96133a3d1783c2a13b736f9cb8238b49a5079c65d9d226d79a428d
SHA512 f1b6ecece37ddad27c0c5bd1eedc4c02f7a59647cb687bd2060f375810a0623e465161ce7570b8e0f0098fc82e2de517f47f8a110b6a3e73da7b7c4c0c1e16af

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db

MD5 66d245f92a0e1c4442578b7abe97c5a4
SHA1 be00bc33cd8b0aa6bcfebd07ed98ade4e17950bf
SHA256 4f8e0c37f1292caf71ceb5376bd66200acedc8c912e46f6334e25348f0648e11
SHA512 b31066765a0730e4ae466a244790c4fcc524b07bcf129649fe48323e01aaa2c4ba81b8747c6b5fda8012112ed9017e026bd0243b68063a3c3645776e39be1208

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 81f382f67c57ba5f2e4c21d02dc37f93
SHA1 14b58738d1fc6965c334f2f58c165f9d4401eff3
SHA256 387c159f3ed4b8ce44c90e7f8998e25d59433be62908eaa735fb0777ff62661f
SHA512 5d6a6ed488e4e9b76dbf6ff15a2251c15e338436730359bba5e537b0c7170fcc368e2ac1c5c6f35e018114dcf359740a5a79737c44860b863230e995f20b7134

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 d3f05adf1b3bc05b8f57aa3674b2cb14
SHA1 8c8cab40518f80a381a0cf62e084690cd4cd79bc
SHA256 1c8268463040e6946da62639eabf7e9bd9581aef4d0ae318b47f9de6ae7c2208
SHA512 9a2169532cdbaf3870587f6b95cc7c23a3d380abaca6fc0f6a9d1e0aeb0a01cb1e7c54fd2dce3e96b479c369b271499ce367f867811daa09c6488d426c9df675

/data/user/0/com.smingizazkz.taiwanlodge/files/gaClientId

MD5 7051abf2a7153b3e4375706e2662f042
SHA1 48ff8de56e18beef817459fd8e86247a3d4991f0
SHA256 6b1b52ab4dc88408e30dbce7be6c47a8fe9b29634b7940eeb1f588064d3fb777
SHA512 be17e8d39749525d746c201b9fe2543b74d0cde4c89590452d9625a6aa671efdf9ec7c9233b00d9466ee243a1795be8f6550583f3cd33b1a869a3fc3f5f6bf3a

/storage/emulated/0/data/.push_deviceid

MD5 0c20541d65b5b5208fa93c92892996f2
SHA1 d627b045d82e9ea1a8380357c2940659b278a05d
SHA256 4cdfce5051e481beca69f1b47c1b8ebe6b783052971ebdf48ff30ffbb0989617
SHA512 170fbdfcacc7c44db04ae155c678a730f5a42637a94d6e045552a3c1d1fe67791e27ee97fbcec04ee82957b15f38fc456e1f2aa8e9ddc66f2ced430a42effafd

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 2853481ada9bbec33a3de4db175c8394
SHA1 2930458a8da2af19709aa8bda9fd8867b489f217
SHA256 04c04cfbc69133b7a995cf66eb2d51e996f14c5c526c973adcf90d1ef62d9e8d
SHA512 567ff2da5088bfabdcdf3d323e86a28ad0bcfacc61b5b662d34c66fa8ebe2071fc1f3a494a75fe94e1af39b1ed8cf4f791aa5fc01032584f7874270436e90d94

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 479416db836db816f8bf8b2f768839e8
SHA1 4cc17bffc1ec86f3110aeb265d85a231f45750d1
SHA256 9283c7079a532aeeb4ab92cde277a455a8026821c7f8e906fa7acc6c6f05945b
SHA512 62191774bda82e033655b7bc7966446d45a2e98e53d4ba47da29cc4d5911516149db7cbe676eb195c236aaebc24ff0f2cfbcc5af9d0ee9a191a4dfb991d27c09

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 81dd52d9846e0ba286dc7adcb5e47442
SHA1 a1d4f50709ca214491829014f496874cb1401a39
SHA256 e8cc6b2953afd4007c9d236bb0729b9e210beae84effc84e80c8d24b229d5ce8
SHA512 77f7d555564f6f053da41bf962b378f6e41b26963c8c65e764c16babd3e9a8ad90690922fbb804355b5ae2ce8090ca4b0962f3063192d522f5055862a3eb8827

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db

MD5 56475f45cd9921faf342346f36d2066e
SHA1 5b130d93fbaf71957eb90c5b24c38bf1a0278187
SHA256 4c1e3279328c6d44354bee88966eba6e284bbc7a1116c22a52ac5b18583b3518
SHA512 93849ae22ae597f1f6fd8ede247916716099740303d23a1c95abf4cf19c4ed985c0e60c9580029273d16676aabd901a18147c2b06ebcbe2a27654c9ea33c1e2c

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 fdfc72920be59f157f5e16066ae263a9
SHA1 a7abe98b1b9abb54af04c213f2a149ecd968ecb7
SHA256 6742c538922c363e7ad74a0c1ddf59b8524d0999eda8df69171f8f3520363fe7
SHA512 a998cae967ca09f652157497fd38ed8d69d4e8de314767cfcac5d0ef17c52b0e89ce90d691e227b7184d128b86ef49bfc54c5c0447dc7efdb9b91208d11d639c

/data/user/0/com.smingizazkz.taiwanlodge/files/gaClientIdData

MD5 20cad677542b93dff4a910a1d24c0924
SHA1 639b97dd4cec8f9c585d0db8f98ff37acaea4a69
SHA256 0db170f4bee9f630c25c3a88e5615ab054dc3062d124c297ac03aa09c0661d02
SHA512 0514609de344172b643f39caecdfff63586ff85d02b98dfbbeea40ebe2a1d91e24e4b6eef94ac9a85da97f56a6661d8759a4179ac324011260fbb865fe0a3d51

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 7e96e1bbbc0569675fcdd2fb64b897f5
SHA1 5263154b422efa610b0141807d7d34ef32b42480
SHA256 c8193f2f968bcba780431315b4e5fae3d376bd15cb50c04c650e0cefacabd001
SHA512 24a366f69a4fa095bc8de7852933f5a7827085aa6b6d76235423b49ad954c484860c7f3e4cdca7babeba70c85699e4a92235173a1b6a944ae1e0e05ae09dcdf8

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 caaef69f388b67d1956ab29070668db5
SHA1 c4b73cb164a664186ca10ba26cc5ced158e86b10
SHA256 10310aa9bf9afd86a12faafac08211cefbfd8f73e3f0627a69393f61b0132cf5
SHA512 c99a5c8baac7345e57ad1983fde400f378dffcb27cee693fadd710c20051f3e7e3fe0c110907a9e996df2886070d290d29cb6737da33d559035b7ddd657d5270

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 e5bd9b8919db340ea160ff5a4783075a
SHA1 b5f4916102c94b56aecc481328cab491a653d1ab
SHA256 aee9dec845cd4d960a1853c796e99483d68b895c9c42b46d2455e251f95f9e5a
SHA512 40baa804e67609be6992911689dfd7007d7f98843b7028fc4b2c4cb5c3bc90d96b9b5d07820e560d8e1a20b6691393cce1e6d1935d474ee37fcb2ce64d7a7600

/data/user/0/com.smingizazkz.taiwanlodge/files/jpush_stat_history/active_user/nowrap/fcbc4762-e58d-4c81-b713-0f5ea95cdc20

MD5 2bbfa75bc62e2438e050cf985ebfe4eb
SHA1 f05f98115846cb82f98457546699105e8f08a801
SHA256 e653aecd0299eefb6a4f564204a3deadcd47c60cd3571fb61ea773340965a6eb
SHA512 2a1f54e239e3715a981cec2aa116799a2d10c05c1458f8ae68d3090355e3fc2099d9e734659f733be2c329084b93356a6b06ac2b59352e9e70ae9f56b3900eff

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 eaec8d8805188f2fbbc57e3e8a9a35d4
SHA1 59d8c06fc21cfba6261af621925e9552fc517559
SHA256 856a2fddcd770f02245aca6d846aa8f17ffd1f29d23d721e66cf6282604bbf20
SHA512 7a831d01dc057799101180503613825393e2d0d2433f9308b9c239ae0c314e178338e64400e59dde78d443d2695349f7a4889bd303d59576b352851bcaafc2a5

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 5d528931c6faa1493725cfb3003defdf
SHA1 bd30eb8442e927190d0b825a07eff70ac2cb0dfd
SHA256 762df375028984e427a843ece2843341766415c2c50485cc09a2690998753cca
SHA512 7532d7fa3e3c217b76102cc253694bac69e6d65e133b416f3edd4fe85e99a36502beaf9b301cd12bc1ec92bf6865f5dd0413868f42aa0ac1749fdb07aaa65048

/data/user/0/com.smingizazkz.taiwanlodge/files/umeng_it.cache

MD5 cdacbaac4abdf4995ee1401f5962b7d0
SHA1 e6eb5bf69e18465250e5301377c14f28f343f887
SHA256 bc7ccb744e440be989764571d608f1314e754c89cdd6a8d992aad5193e5676cb
SHA512 9d83de77b738f44637dc7d7b8d529b7016247dc7ccfb8eb4adc063db6603e942861dbe26cb3b483c6521ed4605e4006a3ded0a8c08e1aad25aeeb62f9ae03748

/data/user/0/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNDYxMjg4

MD5 2bdfc07b25f7f608b4bc47aea986599d
SHA1 750b4288e903e3491a88e92a609a13a1aa02613f
SHA256 85bfd984641670bef6767b81a0328b21d2135fc7ea06c3f199490522d4632c84
SHA512 31261b8edbde2291d3a87692bf8abfc126b33390f5556c2a84b08d137b4691ccb2e854d34b4016639a892fa430dce00b3b7cfbb8058aa8de230fbf1a0dbb2f6d

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 f76425b416bc758c3e9bef9b3474ee28
SHA1 440abe75984f84270f56482cc78adf743fb7ae26
SHA256 1b7b4128ec4411bdc492d86264f0fbbd689d1c51c5e9b5e80d7f7d55db2cf6f9
SHA512 76b4515140d98a09af7a317c2373fd4903c49afe0ed12618364c01840404787036cc4796ff3df6f492e612f88b53be0a66936918c4eb52d7ce81ce3b4321137e

/data/user/0/com.smingizazkz.taiwanlodge/databases/google_analytics_v4.db-journal

MD5 f60314ffb327a274b03c8956205d4da3
SHA1 1492498ca9e7034f2ebed35a4502e4e80332f116
SHA256 fb036ae223f6e0499e2a2b3af43c2f8b484e973f3d350dda86f1501f9bfcdd2f
SHA512 d9853d407ccc47aeacb829dffdebb577fc708c882bc54daeafb1aa8f7fe2317091be285701600ebd5b789f22f21cb2ec7563f6bc53b8a79e5e3e69426d9bf750

/data/user/0/com.smingizazkz.taiwanlodge/files/jpush_stat_cache.json

MD5 de75a5dae74a06e596b8f8cce8ec5b17
SHA1 884d6848bbd16741dce258921d0536dcd8597016
SHA256 e2abe55a4a8c8c81f7c6aaf6c0df6096f639b7da561a84e2910097e27d8e83ea
SHA512 edd78b17077e5a82946e42feb16e4430a91edcd848cfb1874a90dcd519008a4bd7db59e6a429d04515083312b187275023c163806e426f167e91ae85a4907119

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 dc5034befad76c9e89e0d09d09f76921
SHA1 89f6c1bbbc3569d8aa7ef21e29e615b0638cda92
SHA256 e25dba4640de032733ad9bd28ca799f589f6dc414c1ecd52cac63065efde65b8
SHA512 27c4dc6ac4894de1b8180a1949eca5dc5bc1f89db53da48e9bd9e6e3375446b36c113f20fb71546183379727eef0f5a4a3a17d8b46bef3c153fb0950b5028e88

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db

MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 9a20c7c8dfdce28258e90ff2f8d84ca9
SHA1 7356cb292beff222cce178cec196d4f65ca06478
SHA256 615dfb8d8ed2c5b8e6d938431f3228a507e48d91c5dbb909c9fe246bb491f826
SHA512 4d0a60e4e2695cfca21448f22309a86cadf41de08d9ad34e0e23de7fd62e53bbe24ff7478dac17b33dcd961cddd58f9892c5ec099af873df5be8c6cd68fb022e

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 c680a6f9dbaaa4236e5cbba04ef4e29e
SHA1 d4ef8d94c385152a7099e0f233bcc0f865b42b85
SHA256 b3eb340b522c270fad4b0e236b49c8196ab0a2df6a6e9fad0a6e5a65ea7ce96c
SHA512 00169e34e4aa23b0ce4ea6e632b3aead1bc6a38c379261c91d90a86ced393fb8260d2c258a977f10d95c3bfe380b96e19b112ac2c4c6c72b9603fa6dc80fb286

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 a8c3cbfe4cb299e45c2c98d9a24a92f5
SHA1 16bc89258a5342132e1c5ecdbea835df6c809cbf
SHA256 818684b643b17ef2b0e6c919cc7704f687d9a85bc7d2d4db42a25499cdbb42c5
SHA512 2bf424f980d4c1eb26e45a3ac82d5e5aec649b7ddeaaacdec9785fbf1ebfd26aafaacee78530d52ce0d43e60814cf43b823ffe41df7a2e680cd904e623a0644a

/storage/emulated/0/Android/data/com.smingizazkz.taiwanlodge/cache/mw_cache/journal.tmp (deleted)

MD5 eac6d01c46d8b7d63d7ce6644e32b3d0
SHA1 f9cdb00ebcb9a27e880002e1e8142ba1f4f1fb10
SHA256 b7a7eeb7eb3b4338070ea8f164e9803ba6261378857acdcf0ebbf7b18bc22e44
SHA512 86061638fe99acd78bbeb1015a50fb991a991ee5bf3bb4b7fa38b40d8afe7ace5af9e2df1557ea95d45c4085aeb2952fafc9fb791ec357316ed2f367247d3bcf

/data/user/0/com.smingizazkz.taiwanlodge/databases/growing.db-journal

MD5 2637a8672506f18f9e705b60824a3a7f
SHA1 b99e8cc599f24dabe13699b8a8315f3f92d3a1eb
SHA256 70d97596a7efcbcd07ca169f9ec2babf3bc36dfd44ef50670b4ceca133ec15ad
SHA512 dec4b19ef62e13d6ff23e86893f1acf9be99175df8535d49f55bea79a6e818b4da365b09a293c05101124baf0700d1625d8c8f92f252e787db182cd71129866c

/data/user/0/com.smingizazkz.taiwanlodge/databases/MyCollection.db-journal

MD5 32ff43f498add80366be183965fea22b
SHA1 93cb436d50fd5d60c181bc964767bd4dc3fd6e71
SHA256 61be301fb47e0d0956e7f7851aa0c2403970b544bb8f58c8e4e314135abc404f
SHA512 3d12a7a2cc8a9fbceb8a1bd3f42979e52c8aacb43e75f6a1c899a246420d289509efd513a439ad094b8477c9980b078d4cf02f9fdd48fdd977d3cd2022b53047

/data/user/0/com.smingizazkz.taiwanlodge/files/.umeng/exchangeIdentity.json

MD5 39d1cb3d10c28c4ddaf7720d02a7c69f
SHA1 90950a8ca0a0800d581d22dd6267a117f7a50f20
SHA256 b9f5fcaf157351c2fab6a8d0b7b50a58e72f412c5ef85073e0e61b259d4547fc
SHA512 15028a0455af511792bfe7e6d5c7fbcc86c2470a6b15e463951db878f42ae9841db73c342d6463e9dd109cf3cb0f677783226f5b672a86fe9363c28f7b0ccace

/data/user/0/com.smingizazkz.taiwanlodge/files/exid.dat

MD5 6fead0d1d1df26ae369b744ef2585aaf
SHA1 5249a7668654792e7ca5eef967d21e7b765f9fd3
SHA256 05bbb11974a40539069c3f3de81512ab9c9a6284fbe85c01d96ace994d112549
SHA512 95716e43de59a468fad0e332be1051d66fec0e7024a868113f6fb29417d8f2507689aed2745ac069c321ecd290e8ab53ad031f7db1fe061706a2bfd9849f7ba6

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 1821bd30db1156a95d9488ac370814ba
SHA1 213ec09f6ffa81cb5ae99ee998552b235172d8e5
SHA256 2e003e403716f5915f812d67ba78505becad6a8d77edfc6484a182234072887a
SHA512 970314c5e0cfd39d35c00be18e7fab51568d1c10a1b0bcadc6223d8f2cc0fb79b61f778308b4ffc35255959ea355c99bd759e8950658eb9e9a115727adcfce38

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 17b6e14a85637c1c1c505e2e8eb9fa5a
SHA1 77f638ee1bc84d5884bc7c789a6058bd0587de8d
SHA256 35a395d2ed28a1bc744e8ce3eff180017fdd67aad07cb63c01c8bc6e9aa3ad70
SHA512 d20343d9098d4ec40d83e727a440ed1d409fc37ed7d10bcfa3302b25aa28afbbebfbabaa43fd56e3794d9fe572a803cfbf46bc129b08dbb86e1d80186f54713c

/data/data/com.smingizazkz.taiwanlodge/databases/cc/cc.db-journal

MD5 1cdd80eb162c655b30e608126f5d22f5
SHA1 92956b42e06cec13c0fcdb77d6c2615aa2ab8cb7
SHA256 b6b16ddaadfec721084d603b0af4d11fe475137f85a91f48b4c2553504f92b58
SHA512 dae299f0b88c6495088dbc15f45b96f94c7531ea58333ba0bbe4e747d4b575c18c941651260913d7701b3782b38683b9f7203fc8500af029e7f74acde9c6431e

/data/user/0/com.smingizazkz.taiwanlodge/files/.imprint

MD5 5906466eeb6784b137a7d64a6e2897af
SHA1 e4dcd808198824ffa25d1ac4a38c51c24b7109b6
SHA256 9730dd24bca6cbe878964814548545e0eee1847a1ffaaf145b864b963d0fad84
SHA512 3ea00bb1a7dd11d7a1cedb5ffb5e12b3af237a62bc5107b046180f6fcab23f85bcd1b5f1ea432a0f816a6a1716846d06f87e3717b6960d67125647211b2aace6

/data/user/0/com.smingizazkz.taiwanlodge/files/umeng_it.cache

MD5 0acaa1f2dda111b9c64be37899fce642
SHA1 09cf0c2fe7ad72cae4791b142797273df82ee658
SHA256 ffb127c1567f0c8f70f8daee284af5d4ace879dfb32f8baa0cce3b5f264cf017
SHA512 9bda1c12bfe87bb8e09b6d62cf4a82dfc64f3a9a0a326e8d737d0af308079434a3c7d452d5aabfd84ac5274a4e5ef7aa1b14a0edbdb552d0cf159c3d507dff5c

/data/user/0/com.smingizazkz.taiwanlodge/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDMyNDk5OTMz

MD5 ff1ee64d0fd3927a32d3fcfbe7b2ee9c
SHA1 f0d89858c0d540e48c4dd093152ea326261d076a
SHA256 0535746367780c5f3e5fe379c5d8cc24b00873f8031ce62828e3e661724cf151
SHA512 52e151761ba8930c03255cc564796d1675279c3705613150ef8c6f50a17d87f71d94ba7802ec482a081111701dae5677a18f9149a6eafbce8083864a8566bb84