442840e266ef8cfdfc458831b776563761d05bc829479507070802526624718e

Analysis

max time kernel
179s
max time network
187s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 04:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69c4cd7d738d80bbf74ac3b25b55c05a_JaffaCakes118.apk
Size

11.5MB
MD5

69c4cd7d738d80bbf74ac3b25b55c05a
SHA1

0a4eebc0e66633ec852ae9630cc87131466197c2
SHA256

442840e266ef8cfdfc458831b776563761d05bc829479507070802526624718e
SHA512

296c31081bf3f6c8a3ba907852899d9c7ba5a9615c132af06cc81351780d9b6b4ba1a035c18b5184e583087e5b07391b38dd5c85c64e8b6f3bcdb3453d9b614a
SSDEEP

196608:U1RfoghC/ZdzRTgMDyduYUd5IVY2brrR/q5a2iI0g0qJN2aKapkNQdkuUz:UzxetDCuvIVnbfRi5JiIVNJxpkidVC

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs
evasion

System Information Discovery
T1426

Processes:

lande.com.hxsjw

ioc process

/system/app/Superuser.apk lande.com.hxsjw
/system/bin/su lande.com.hxsjw
/system/xbin/su lande.com.hxsjw
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

ioc	process
/system/app/Superuser.apk	lande.com.hxsjw
/system/bin/su	lande.com.hxsjw
/system/xbin/su	lande.com.hxsjw

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	lande.com.hxsjw
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	lande.com.hxsjw:pushcore

Checks CPU information 2 TTPs 2 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description ioc process

File opened for read /proc/cpuinfo lande.com.hxsjw
File opened for read /proc/cpuinfo lande.com.hxsjw:pushcore

description	ioc	process
File opened for read	/proc/cpuinfo	lande.com.hxsjw
File opened for read	/proc/cpuinfo	lande.com.hxsjw:pushcore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	lande.com.hxsjw
Framework service call	android.app.IActivityManager.getRunningAppProcesses	lande.com.hxsjw:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	lande.com.hxsjw
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	lande.com.hxsjw:pushcore

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	lande.com.hxsjw
Framework service call	android.net.wifi.IWifiManager.getScanResults	lande.com.hxsjw:pushcore

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	lande.com.hxsjw
Framework service call	android.app.IActivityManager.registerReceiver	lande.com.hxsjw:pushcore

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	lande.com.hxsjw
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	lande.com.hxsjw:pushcore

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

lande.com.hxsjw

description ioc process

Framework API call android.hardware.SensorManager.registerListener lande.com.hxsjw

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	lande.com.hxsjw

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

lande.com.hxsjwlande.com.hxsjw:pushcore

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	lande.com.hxsjw
Framework API call	javax.crypto.Cipher.doFinal	lande.com.hxsjw:pushcore

lande.com.hxsjw
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4313

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
2⤵
PID:4552

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
2⤵
PID:4570

lande.com.hxsjw:pushcore
1⤵
- Requests cell location
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4349

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/lande.com.hxsjw/databases/ThrowalbeLog.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/lande.com.hxsjw/databases/ThrowalbeLog.db-wal
Filesize
185KB

MD5
17603017a0c34875c41b1a796c15a1c1

SHA1
28cec369d7865e22edd461960814d90c3363c5a3

SHA256
8d1752dc2188ac8498bdf2c4075eba82ff6e41b3c06e2b02903db197e5a36559

SHA512
9d3d0f76b0db84c433ec3858a4a8b878e0a4883360db62778ceb2898ce49434efb85d12b33eba1a5e4a718e2ab2c2bd5192dc7be0a77222c3b02536a061b1166

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db
Filesize
24KB

MD5
294025e968a0abb9ee50ee3a64d4180c

SHA1
fcca708411a06809e4a3a41efd87a5f7a1ced807

SHA256
8d2cca0f61a1cbdeb93725281f3b7c932e51a88a94129dd9ac61fbb718a7eeab

SHA512
55bbc23eb9f64829d201528497697e906c2964c4e4d0ad4929c6c49702556a52b8383d6af6d61f117e382472e9829ca3a4417bafc0b8d8bb28c7fd769f89e09d

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db
Filesize
32KB

MD5
a170323b19b24ccfd9423fc54ce2db29

SHA1
2bf415861036da6409a952699c4461451f6e5eb8

SHA256
659df7cee0b801d9f107a45f005849c588997c527b7f0907904aa8ba97a7781a

SHA512
466f771077602a2a226508e47108aed3891b294189aed50d4a52a11d64db53e6f280064039b5f6cac7ab8d7efbc47f5720e9dbffa8c5a55bdf09359d04f5dbd0

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db
Filesize
32KB

MD5
c1f7fcbf094289e74fbc53889d4ad505

SHA1
6213ae638fadf0dcbebc501b2434c75d99fe4dd6

SHA256
2d14eb88f2340e8dbfc9c49f2bdf1aa4c3e899cf25a14775ef11be8ce0fc448e

SHA512
fbd7f15644dfe828818ca2b02c104db43d2dc82c178c4f34a513feab7fd457edcaef1defb48b91625f3b2a5ecb0c924f4b4b75b7043592e0414f14c67d2b9a8e

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db
Filesize
16KB

MD5
ead9c63026809500d752df9de865711e

SHA1
d99d9608a1da748c4942af3b00e46884ab5a9c9c

SHA256
b6fcaafdb4e9721d28a2913035b01f390d9ef29ce22e23fdca477821c7c331eb

SHA512
182531ba132e178e73b04c1fafbbb1bdd62638877b498b1080d757562b4ee9a9ce0c80c9ed2924d5684062b2e3adea1df7b99d928a2a72aadaecab210adb676c

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-journal
Filesize
512B

MD5
7419603c42c5a6eb50bed18b9d37c175

SHA1
9004c5d653bcfc752e00e3444efa8fd7ea75e96e

SHA256
9affc0a7aedd41d1682a2a3fe5f4c596fcebacde947e0d45e257491ccaee13dd

SHA512
decf906521f92474ac70604e6476b0e975bb2cf9b088bbb2e18038c430c58400b9d11984496f09341f23c72a849d4b45ee40452426fe514932b3b65cf90d6225

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-wal
Filesize
12KB

MD5
7beab807878fb1aba43f78a6dd4f6847

SHA1
b94a4c4c6960b86f041bb53a2a11ef5fe8c884da

SHA256
18bb3fad808c472eee848fe78d70c9400479b7424c4baf693d47722e88de8922

SHA512
3ee166c95c14082ba2040841e99d74f3883f412c1737fd162f1c6f2c966d0a1c8f04ad47fbdfc3ccaa59a85765ff7fad61137c069e0e67e5fe292a61c91ce723

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-wal
Filesize
12KB

MD5
c39ab9e0e4ba5fc545a9374b779a9eca

SHA1
b2563ab470a4869e81b083f8e52b0b8131362f5b

SHA256
bae8f2937ae2a0251761a324fe5953eb4b7643cf566b35157f10ba56dc0789be

SHA512
a2180e1f0a7af82bb3c2519528b69b240231e7bab3e0906fadd86e64fd072bbe398e21bdd6773884acc3f5db26e01d5ffbcb9e8b0132bcc2e0613c00fd236e4a

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-wal
Filesize
8KB

MD5
02c0dfca3d8ab745ac4bfe52b6af141d

SHA1
e788e7928c81bd8aaff64ad52c6fc6a41859a9f4

SHA256
726c6f1eccd7876134c1f29bddfa5e7cc28129af1069db3c806e34e241fb9e67

SHA512
475c0b0b9c8c05fc312824d14ab05909575e61ff68e985e9d92fc2fc004d6af0f4820a09d344b4c8403eb80488f714d224510daf88011c3872e56430c2e6681a

Download Submit
/data/data/lande.com.hxsjw/databases/ua.db-wal
Filesize
4KB

MD5
41fcca0c8948176db641acb0b6b8db94

SHA1
48dde3c815c9e8c0337e3d387e9aeb341523a77b

SHA256
b6e722bc82d4136221f1ce02287e6d96b79c4b5b927029af8d41024eb289b46d

SHA512
564db827abf38e6312839c8e3216a856445ce3d6ad99212710548d66771168810a193d71e11f976504dbbf7738803357ca9d9b5a7f68c268024ca65cf27aa052

Download Submit
/data/data/lande.com.hxsjw/files/.envelope/i==1.2.0&&2.1.2_1716439673526_envelope.log
Filesize
3KB

MD5
ab9dafce51ddff950a20dceff0a3fcff

SHA1
4d15bd682fd07a04b61d5a6ad29c00ac84477676

SHA256
eb724dc50fb73e7a7c7a5a7fe7d1a3db4b39420fabec0e05334d4eb680afdd8c

SHA512
499b11e96c156d47214944e0e4ead2303604176bc9d901fa06a4eb43c210ad878a42f7b45ac47e63691b085bc1da5247a8a3df7e7ecaa081bf4e9dd2cb22bf72

Download Submit
/data/data/lande.com.hxsjw/files/.envelope/t==8.0.0&&2.1.2_1716439671467_envelope.log
Filesize
1KB

MD5
fefb1c6add2e5cde40bf371e1e583c27

SHA1
c92814e88ce14999fa03da9c041d0b8b232a675b

SHA256
03bd16c28dd54cb6da22829330ece58ba7d9756f8c99b63f9206e4bd7fdda6c8

SHA512
c60e9408285869cd1dc4dac5df9d265f5f3fc7af07f897f49f825f170abb3fa5d179ffec5929fb53f3f74d09fa9643478610d6e6edacb9f24538d8bee370dbc3

Download Submit
/data/data/lande.com.hxsjw/files/.imprint
Filesize
732B

MD5
a75cffbada6a4bddcc5dc345ab88d0f5

SHA1
62dff4892c31fad9918ebd0d403bfe57f7d581fa

SHA256
397f3ce42645728808c8491cdbe7d31c23ecbd2864333ee9a3e2c9cafeedff07

SHA512
372ba3f3affc1d815fa6bdc53ea28ed4b9e830a636d4943d22ca0ca5f18ffeeea1270551cd1c57ce8f5cf1ad9d4e5c807bbb1a340fc0b4acece75816f76f85d3

Download Submit
/data/data/lande.com.hxsjw/files/.imprint
Filesize
3KB

MD5
080b83149dfa6c528d2f27e11adfc9d9

SHA1
b991f144d3f105149b42733c7cd4e6da81d269e9

SHA256
2514e2821ec47af68262eb076ab99a9be0f0619d8cc9b97da55db41222334322

SHA512
9a5c47ba25ddf4bc865932947fb0581afe21e4599f18a5c719561c21dda035e187c1632dab4f90d0e049fc91980e7c15dacba5a44a028c16294bf3f4f0fd2582

Download Submit
/data/data/lande.com.hxsjw/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
5cc13300a5c8064a5c33a6c49a9c571f

SHA1
bdc8769095c008ab053b4e25b0d2c8dc9b9e6dda

SHA256
c77871022ca7cceb57a8f10582a8d4764c54d45fb7d9f1e94022e3f44bd45d05

SHA512
173b0184118dda67ad59a648308a80579eef8da1a31a8e08ca9f795a0f5d344f1e68cef83c0a9871ded1a6cf9fd2d63d0212fbbadc73debec4afdf7be379fe58

Download Submit
/data/data/lande.com.hxsjw/files/.umeng/exchangeIdentity.json
Filesize
32KB

MD5
338b1e753058f249e2c681a8167e436a

SHA1
2ddb3cc56f29e8507aa448b92d6792b47a4799e4

SHA256
d573182711bbdc50c3c8e51ee3dad97c702fe260a0b2e2a970302bec0b2ba411

SHA512
e948bfb6022f1e0fef7316a78c22ad5b72b1ba74ab918527fe725b4a86b20760a7bcfd254a83e9bd305c61cc52e61228a207c5db65a8136450257ae8b634a0c4

Download Submit
/data/data/lande.com.hxsjw/files/Mob/comm/.di
Filesize
57B

MD5
70a42cba408700f9a6c01c7941a8829e

SHA1
eab01cc2c0671538795fb0b1146017dc099d0984

SHA256
499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

SHA512
8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

Download Submit
/data/data/lande.com.hxsjw/files/Mob/mob_commons_1
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/lande.com.hxsjw/files/Mob/mob_commons_1
Filesize
12KB

MD5
e4a1e26084c6d6d48f8bb005f989e8b3

SHA1
3d2acf050b71037a9c2fae6f7c4dc6a05facd439

SHA256
e1087d69ba59c5df01a28b8f5dc9b68b73a3f22703083584b77dcdd13f7170fa

SHA512
cf6a0b16e68ed57b4792f4d3680d62cd9addf830b142247e30ffea2ec7f60c79d20e2cf0ef89a5f48b780c1e475d31c6147ef48b04f06da94d937362e4461195

Download Submit
/data/data/lande.com.hxsjw/files/Mob/share_sdk_1
Filesize
298B

MD5
632acd49b0d7aab0938e3697e3e4defb

SHA1
9b875b444f3ef2d8ca335682c6ab7797cbe17f59

SHA256
bac8b323f429e453398a6e65d888363d8490c30e2ff2b9df56964d80b3523bbe

SHA512
50235c718ed3ce90cd2485c5ddb10775adb29f41b9835bac57328e0cbb4b9012cdbf498302143b57ab04d0eb84eda102d58285f5dfbfd68fd7b5085ba1f08476

Download Submit
/data/data/lande.com.hxsjw/files/exid.dat
Filesize
63B

MD5
a39e828ab9d8b962eb24b678b3d17db5

SHA1
4a78fc494ec3498982642f53f50689c759b97ac7

SHA256
0fa0fb40e2c4e8c39322e026ab0a39f2b374abf607f036cd5ebcda18d065bf13

SHA512
9ad9d1a8dbba3d3af1dfb85a2055a41ea82310dce108147d98cbc56ae5efeb64b422f00ea5d513c5a7da0ce52555b7e607e946b65423b250b7ae9f1841187bb2

Download Submit
/data/data/lande.com.hxsjw/files/exid.dat
Filesize
105B

MD5
4489100d797e2aa5a68e4d3f5a02424d

SHA1
ddf3560b73286247cb7e2e14d648d36a94a5a587

SHA256
91e992f50159ee6ffec991eb394f3dc2a089f68a30b920305a07d23f17e47c69

SHA512
0b2cc02a01a9da5ec2c28b372d89621bf511c29626823fcc45b9116bb09ef3a7ac213e1d6ec3367a8ad35893f6505423dc75fadcf032d6a97987ecce197684ed

Download Submit
/data/data/lande.com.hxsjw/files/jpush_stat_history_pushcore/f93e999e3fa31e41f213a2d2/active_user/nowrap/09524161-1d57-4b8b-a13d-97a26f11ed98
Filesize
159B

MD5
81ddf8876786b874c38db07b1c3d09eb

SHA1
7895f68f0d7d6f5c556b0dbe34acf35c17b0a032

SHA256
58ffcb9608de365747bebd87dc42d8a3b6c30a175e42c648961272d5977b0f55

SHA512
de76f5aa34a8ee1299b5873ba64b6f4619b13575a0b96fd27e392c996559710d13aea6377929e214c258bbd2e3fdb477487069452959fcb3d484857e4bdce23f

Download Submit
/data/data/lande.com.hxsjw/files/jpush_stat_history_pushcore/f93e999e3fa31e41f213a2d2/active_user/tmp/09524161-1d57-4b8b-a13d-97a26f11ed98
Filesize
322B

MD5
63d6739162a0ad4a55c4b80b08fabd76

SHA1
bc2a4246b902209f578aa7c67f69289c67186351

SHA256
65ae8fdc77f146d2fefbf68c93696ce9e6d453ba8ed49a87f01adc26063c12d2

SHA512
4b7055331b3b837f94b9a861b281e894f0596a532bba5d44b389545f11ec98ad4272490be5f7c87798409109cf7b275a835ff680e4c0c54d7534a52036051bfd

Download Submit
/data/data/lande.com.hxsjw/files/jpush_stat_history_pushcore/f93e999e3fa31e41f213a2d2/normal/nowrap/abc911d0-d82c-46ee-8d22-47c1824df762
Filesize
52KB

MD5
b4265391ba87bf692b1e4afa6e7e8513

SHA1
2f3921be12ed16c3b6f6c1e2766c3a194f3180cc

SHA256
7c04918dcc7a62a21f7b6cb967b6b63fcbca625daa711f1be156e703e6e5f849

SHA512
236849231028b3b6f4af8d5feef0f4cb65734da3caa11e867b10aa68b190ffdafa68f95acc84b6fe6a166fa584202ec09bffaf4b3251441862206c6bea9c0242

Download Submit
/data/data/lande.com.hxsjw/files/jpush_stat_history_pushcore/f93e999e3fa31e41f213a2d2/normal/tmp/216e62a2-53d5-42e4-94d8-28704f4d6c18
Filesize
699B

MD5
965f75046468940f753e8cc2eac6790b

SHA1
afdf0b566d83b752417bbda69a564f9b3bf92cf3

SHA256
9d3acbd5d8bbfc1f13d0a832a04262b2aaa08db456daccd7534dc4f614b20ed9

SHA512
b7aa5c50a353ef4cc9d4abc9740dd13cac3781ec9d1523f6780974848a0648509e15e9297551d824a523f6ec3a0ca8f8da05dcf2a094c785643b549e5122a7c8

Download Submit
/data/data/lande.com.hxsjw/files/jpush_stat_history_pushcore/f93e999e3fa31e41f213a2d2/normal/tmp/abc911d0-d82c-46ee-8d22-47c1824df762
Filesize
365B

MD5
b6598b67223691ca02d6320f75ad8f00

SHA1
bea09a3b536ccb21a3551748272e29853f2eb61d

SHA256
5ab0ea7efc06ab9889502053dc1061f144968f8c3663c08c3e67e3feaad0bb3e

SHA512
eacb2faae04ebcb17efb22f1de3ee27a5480844c79d36128ee0bdb654eea6eee798d7cef35b2498d37caf556650e9c770c0dffacf1e8220d90fa4930d7fd6cb8

Download Submit
/data/data/lande.com.hxsjw/files/push_stat_cache.json
Filesize
119B

MD5
e23fc1ce60bffc66eba950b961e493d7

SHA1
57787f0cce87e26add2f78eb85869efa0651e4d6

SHA256
95dccb54b9f1b826af87e4290a8640c6242a4b8af1bf4eb8a2659399b56c9b0c

SHA512
512aaf53f531c7e6b8c643e88028c30af6f9dfd46827d5908b4f1d9a5a98b340fa502b10bfedc5b5fa20d21f8c7ba7f3fe037d1337f5ef103053bc4c74a2a199

Download Submit
/data/data/lande.com.hxsjw/files/rl.catch
Filesize
536B

MD5
800a9adedf3f3fd38bc42eb07cf13b13

SHA1
b82452528f9eb9a7b8a98884cc49545e783a5310

SHA256
7ff52c0b66917f1c99b9643dcc73e61a702582d7d1169a4e2a4ee6c23a66ea9f

SHA512
db67494d0b7d4ea10552ad2cd49551f42689be5fdb58b60a2111cff3fa42d88a6d4167c63b1a5bbafb03aa20ac00a506c260dc92f2520a44e03aedb9c44439e7

Download Submit
/data/data/lande.com.hxsjw/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDM5NjcxMzc2
Filesize
1KB

MD5
4202cead0d5f269d6291aa324b0948aa

SHA1
3b1af8303f1b8c9b0d045149c9390544d9afc827

SHA256
ddf518e31b3bbfe058c5c7d5f59bf017d95eb63ca27253d129c1a09c57fc40c8

SHA512
943ec2bf8e1518f1dc37340b44656cdc40e979d9aed29140fe761f67b3fa342b65c53f1cb5c023dc8810fe3ce86b9ed5cc58b5895f81dfabeabefe9966531836

Download Submit
/data/data/lande.com.hxsjw/files/umeng_it.cache
Filesize
415B

MD5
dd94b48788b71c78ad5831bc73255138

SHA1
40256b44a307a3cb6e3e4da6a8746b1dc5e70dbe

SHA256
13df03ff189a7f8ffafdd76345aae6329d7e71d952ece239c83b3c058cb1e6c8

SHA512
171364a1f2932c90c0e88c11dde0095809ca95b1f8c7fd795b577f2bfc5de2940dc167e3a5fb76d258db56ba4b12e26170130af01af1c5718f3b916b23d4022e

Download Submit
/data/data/lande.com.hxsjw/files/umeng_it.cache
Filesize
193KB

MD5
b83d41d127b6458bdc3fcd52c17c13a7

SHA1
add1e385be46ef65467d3092629627e096887aee

SHA256
d2733d4d9f566128ba79d4d24e8dc539550aeba0b30b2dfc9198d19f9ee139f3

SHA512
e7810fbcb562acd9becad19f92b95fc6bdec0440d8a0140a9b79c8ccf17839d11b06a84e1f729cc33f719e1adb0158a2b12cd1dd78edfc01b52b0eee491b72b1

Download Submit
/storage/emulated/0/Android/data/.mn_234987532
Filesize
194B

MD5
c8e50a04c1ac86378610488be791f34c

SHA1
306ffafa429c956384fdd0f48e5b89defa634a8b

SHA256
a9daf1fe2962a5e541b1f790a126f2ecde62009605cfd7c1f84ed63649dbf501

SHA512
e8c8f6de505143bb5b7e1cb5898a770b9ee29b70bd5c00a418a3d8f09c250f35a0175974e2e446508795a4749dcfaccaa895fc31bcd07533adbda6ee4678f05a

Download Submit
/storage/emulated/0/Android/data/.mn_234987532
Filesize
146B

MD5
9ae3120b13474ddb1d3bfe3e9b0a6045

SHA1
232d770fa968e13d402fc137dbac4eb4e4b77972

SHA256
01122531e3724c47885c65cc76574927a2f30cfeca2374f8e13a9891d1df4a49

SHA512
f03170a1b7776333a9e0c03ac5c6ff53e74f4a6ed457c4b01433076318a915bcebd246fa4262141ef4afd38896273450e914f40323b673a5ea3e621313db7c66

Download Submit
/storage/emulated/0/Mob/.mcw
Filesize
80B

MD5
ac430b3bad93926f7034c74c100d331b

SHA1
98517f521f7106b88b54d775faf3a758909b8208

SHA256
b25d66912b0c79b8a4f8795d12f01ee0d069352f519a8497439bd45e947368e0

SHA512
b154f5ca40df98588c9a5c930b51e05abb847f12a4b83cff05072d265183edbfd508331b2c163a9f002383cb5713ee1429644665e87422292461dbe17b1dfd98

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
40KB

MD5
a2c8ea957c4597e5db4c0a0d8e0c5ed9

SHA1
60e20b2855a3cf0725332849c7717c6d98875e1e

SHA256
c821fbe5f760f9087a3e1618936eab77433afb71558cffc0624ba2999bb33866

SHA512
780de46a7729ff1aad53afb51388c1cea55a8bb2f8a9de6e76c979c4bae0f9d58c83e772c443a2cb8b8e507a9aa399f0ad1400bcdcdb916d17f6c73061172b36

Download Submit