f050f091afb6a4c4a87ffd69c75ca7a71987c5f4225087ec0170b5d8b4f95509

Analysis

max time kernel
155s
max time network
182s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
23-05-2024 06:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69fc964407a7f1e64a9c91a0ffac3af4_JaffaCakes118.apk
Size

7.1MB
MD5

69fc964407a7f1e64a9c91a0ffac3af4
SHA1

ab01e92cabd6b98a233882b4817c212fde327b5a
SHA256

f050f091afb6a4c4a87ffd69c75ca7a71987c5f4225087ec0170b5d8b4f95509
SHA512

02f8ec5b9b8d0fbd3a37e5bed65aaa358bbbea95da051a273c2dc1075606edb6073b1422916469692aa1d1bd22aecdbf653eef08bb829715351dd370d35a0a94
SSDEEP

98304:8H/VhnRhq3ZbPf8s4GnmsyLvm9NWcvy/ByqsBqdTj880wbzvUuFv+u:8TR6RPU9Gms7WWzqdj880wfv//

Score

8^/10

banker discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs
evasion

System Information Discovery
T1426

Processes:

com.youloft.IronNote

ioc process

/system/app/Superuser.apk com.youloft.IronNote
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.youloft.IronNote

description ioc process

File opened for read /proc/cpuinfo com.youloft.IronNote
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.youloft.IronNote

description ioc process

File opened for read /proc/meminfo com.youloft.IronNote
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.youloft.IronNote

ioc pid process

/data/user/0/com.youloft.IronNote/.jiagu/classes.dex 4672 com.youloft.IronNote
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.youloft.IronNote

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.youloft.IronNote
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.youloft.IronNote

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.youloft.IronNote
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.youloft.IronNote

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.youloft.IronNote
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.youloft.IronNote

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.youloft.IronNote
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.youloft.IronNote

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.youloft.IronNote
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.youloft.IronNote

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.youloft.IronNote

ioc	process
/system/app/Superuser.apk	com.youloft.IronNote

description	ioc	process
File opened for read	/proc/cpuinfo	com.youloft.IronNote

description	ioc	process
File opened for read	/proc/meminfo	com.youloft.IronNote

ioc	pid	process
/data/user/0/com.youloft.IronNote/.jiagu/classes.dex	4672	com.youloft.IronNote

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.youloft.IronNote

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.youloft.IronNote

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.youloft.IronNote

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.youloft.IronNote

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.youloft.IronNote

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.youloft.IronNote

com.youloft.IronNote
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4672

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.youloft.IronNote/.jiagu/classes.dex
Filesize
6.2MB

MD5
b123ba33712a835d1be1f03ddb9adc91

SHA1
4a0e5f0f84b738c715b7c93ff15ea79462d5a54a

SHA256
78929abba0b285d482e3f1f0a0c6f4f68454ffd93b073a3273fe77b6819d7747

SHA512
53d281b8453088d73d17b24a6b521aa34a1b4692096d9de47b8b08f93919875a6a6137dcfe68c850811877e1ed9126e3b36cbe118c5e72793726d41aa35427be

Download Submit
/data/user/0/com.youloft.IronNote/.jiagu/libjiagu.so
Filesize
480KB

MD5
d280346c134f75655acd484c75745d6b

SHA1
7d1ea0d71824ce214d4769981ed68b0ef86f1b0b

SHA256
344f4d98accbf8ad8a3ab052a649231f9ff1c9e7324374a6ec79d9de89dd9b55

SHA512
11ce3fc3f1a52900f140813a5362cc9bf4b9954139c3447a61fbc6c35c8eb75e454feaffdc043e999a167fb21bfe0ffeedb6b71359a5fe0867dcc44c7e14d16b

Download Submit
/data/user/0/com.youloft.IronNote/.jiagu/libjiagu_64.so
Filesize
519KB

MD5
71002bb503b66d70f1c2b531184ce749

SHA1
c1a8f0e8b5f636b4df360f44227f078a4d147f88

SHA256
231cdea86dfd340f7fd36f30508eca5c4e90a82d006714101aecd57ed04ea7e6

SHA512
03fc8072925c4b497a5b6aabaee94acd90b773d266e5ee55a1127147691d43697077932d6faaf8e05b9d0502b455856e049e65823997fb62297786615d808276

Download Submit
/data/user/0/com.youloft.IronNote/databases/body_part_db
Filesize
16KB

MD5
4e6e30e5c9134fbdd933b9780679b7a3

SHA1
9976c17f235052e7360563f30d8d80bf60ac00d3

SHA256
2abe5a73776bcec0e2d0a97cb8ad43c23bff6da0f9d5ca1a634d1cc025f6f513

SHA512
12c7cb10ec02df7a9b407d94045c5336293466bba122e041088da04b49e13b1db4e0be64b264e2dc770690fb7b9580fa7f98b75a774c15f7a0e346ed6088d9bf

Download Submit
/data/user/0/com.youloft.IronNote/databases/body_part_db-journal
Filesize
512B

MD5
52768e9ede6eed8bfc69a35fd9a9da9a

SHA1
38204047212dd7616889d349c31b549c7311b745

SHA256
916b38c57c57855f2142e66c804967bcb23fa7a2f5b3f0fe3614a20ff9003863

SHA512
efceb9985779243aabfb9bf07fadba789f28c50fbe40fe603ecfac4a0545c2b811534e1471906bf4c3b322360215c062a6118680d2ca7e526bd59f68d367d719

Download Submit
/data/user/0/com.youloft.IronNote/databases/body_part_db-journal
Filesize
8KB

MD5
9700e463cba7ccd38c669bf80b587c33

SHA1
ffba7352487fe3de7d971d1a74071b988d51854e

SHA256
6626aab40d338b4318a1a242f0c927ec2036ef5750799d0573eb4ea1c813439b

SHA512
fcedb18e0a748b962f46cf49fdd1fa127eb4889355b439c95ab2114596a14b28ea172c4fbe7c07c933323ced1c351b02aab298dc597d62305c77c321999f56d1

Download Submit
/data/user/0/com.youloft.IronNote/databases/body_part_db-journal
Filesize
8KB

MD5
c54840126f88bb8b2df52636fb6c2383

SHA1
354630aceeb406571aee2adacd85e5ffbca2b681

SHA256
15d97ddbe7420410a16c70c0cdb1024272f10fe15eb7070d1eae8303bc9ef139

SHA512
443c3ae58d7a03ccaa39c2b28b2cf1d856bc79556a29bc9f3b6631eb337fe73e0d904e7683b3ed73b7f13fff9ec5aa8867bee4e5ebe4d5ab486c18963d93574e

Download Submit
/data/user/0/com.youloft.IronNote/databases/body_part_db-journal
Filesize
8KB

MD5
83d47ed9c2a3bea1eed8538b7656743d

SHA1
574db565d98ee33b79f5e2e145d50e6808dcee66

SHA256
5aed601825a196b4dd59c2350381419300a28436082c8e0bb4601a5dcdd7d5b5

SHA512
6c0c72a7fd6df03f94694f5b22646cfece67cee644f208a37199d55756f90be0b909838db4f34852874e29a2695c22b39523b2a4a32b352c6dd79e78e0b9194c

Download Submit
/data/user/0/com.youloft.IronNote/databases/motion_db
Filesize
28KB

MD5
01964afe35015331a97801c12d0aeb81

SHA1
87e77f651ae0d57cc42937420a1f457d78edd71a

SHA256
2b405ecabeea41753f27c4dab0b5741e48aa76359fbfabef9c9f9aac935c922c

SHA512
ba940846dd8659e0bafa11a7daddb739d7cb51a569176e9c8f81d4eae2a31ddcc1c5d11dec7f99cb438338a7247b11f57a48bfcc58c91bd139b6b79af771f7a6

Download Submit
/data/user/0/com.youloft.IronNote/databases/motion_db-journal
Filesize
512B

MD5
f8c14da26e82ef9b7eb7373ddec2502b

SHA1
1dee7666484eedbdb73abba52519ebc19c7a28ef

SHA256
669e24cf0e5efba4555ddeb058184addb60043645e895ea29d0b4a6a97e1e01b

SHA512
37f66641580e1976399d50dcd5865afcd3743e62198760f8b3dd33058cc5e81afd58eec8a9c3c080d1b49b5fc967cfa916bb8e3c3e58c9f3b9f98ac692d22d53

Download Submit
/data/user/0/com.youloft.IronNote/databases/motion_db-journal
Filesize
8KB

MD5
dccf0a9efa13872bfe15c6e3bfbdf5ba

SHA1
ab4494156c405c35ca6b4d1eff5145fe0928c2bf

SHA256
e7a99d3b7603547da97e8eef527800876ab253fba4725ebff3957698ef6a04d7

SHA512
6f133112c4b97294eab404ee0aa778959be1ffa6bd9fe4ec15717563497593968aad2ba92752a903576a5e5faf23cc88f66aae246840e143ad7a1b716153dff9

Download Submit
/data/user/0/com.youloft.IronNote/databases/motion_db-journal
Filesize
8KB

MD5
46ab3cd38b99979dc3bee96f43498caa

SHA1
11061121ced85b594527b5ff09ea4b94b0d8a6eb

SHA256
760a854c5d3aa33f1f08d60601d1a150c3e5fbd7659c1338f8c430c388ccbe96

SHA512
7f4ff2ff824e217e9b76473cf7752127f0f8e631bc5418f386dd1a776afc45dc61c7890498fad3342f9d1cb4d51bc8376aed3017b1bb080f3888c57de1de0289

Download Submit
/data/user/0/com.youloft.IronNote/databases/motion_db-journal
Filesize
16KB

MD5
72098c542a70b11b38926cec9e0bd35a

SHA1
aa0f687fa65c169b8ad5c59a595be65afb2de37f

SHA256
30abb9654bce062a25b8e120714259b776bd65660490122b57dcc04cf4e89515

SHA512
6311e070b2d0b98408097aa4b09b30f0deebde615e3b580fd484c5901b8f82fe548724017da803fbe4c2220c92fd258d72a6bb2f284fa20eaf8127806b66d25d

Download Submit
/data/user/0/com.youloft.IronNote/databases/train_db
Filesize
24KB

MD5
de60a344df0b60dddc9307147dbd8af2

SHA1
a4c75f04b5b41cd6c5bf926bed1a9eba1cd017da

SHA256
9e98bb6cbe684a88e19efb94c940b67c4e76fc02d686dc84734d9281a887b789

SHA512
e535928492e51a6cad1b13942442253c569228a035938537c789f52a8c7d03383132cf3d4388f7f13b7020f199a4d312a228b1727044466187a5cdee33bd91ad

Download Submit
/data/user/0/com.youloft.IronNote/databases/train_db-journal
Filesize
512B

MD5
e6151fb4005884d49d88ec5246354a57

SHA1
c09e87243e2e6b8748561d90c55efb463007f583

SHA256
9e6ef9042ac62d2fa37d482f620f55995c964944e2d78b807d4c7a3873da5fd7

SHA512
3b766d7fa00ed637c6a4669d7abeac249cc30622e33e323e9b2c0a21f0cdcf7f463c83287ab54941f8e13c3f7103d42fe031c9c94090efa3ca11e6f5d396b4a4

Download Submit
/data/user/0/com.youloft.IronNote/databases/train_db-journal
Filesize
8KB

MD5
ad3742e808e9dbc0c50cb43fb1394aa1

SHA1
648d2f7f7d7ab18a53d4172ce6afaf8e252a0df9

SHA256
119fd7c3ebe89545d912cce9940c3d776210cc6d7aaa589a2a3ed1053d1fea6c

SHA512
c1a1d58da37a231c87b3f0afa687d0acbd4744d92ad2a1920490dbf33ca01d6173ae12f776838ea4d357b4c4ddae68fb59f58feb6f3b62575d5d018d1f527db6

Download Submit
/data/user/0/com.youloft.IronNote/databases/train_db-journal
Filesize
8KB

MD5
c00361c208471b1fbb0b77c69269d422

SHA1
a25d429e4afd49b3b445929f8563d7a25bf1bb10

SHA256
3f54a1296e422aef993c7b7b752da2acfff3ac272339162f9c2f457b60118463

SHA512
1b990eb6d349aacc28607389b0258a8a31a0ecd4ba6d97f6bf80ffff689b712b0321548e3d5c72f0c3889e17837b0093ee565156e06d1732ce23c1185d4cab19

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.ac
Filesize
32B

MD5
b5ff7e03e4af0a73b8e81c90b3562657

SHA1
c21ed0fa491645012d3421a31504c4862ca49e6b

SHA256
f88db7a3fb71f357098452aef47c7c41b2646dfc8b5e623876206524b61f5b00

SHA512
5f1df26f9393d88c18c0b0c77f858fe026bf34870d89f3cb7e2d359f977165b9ff5350397e92db5961324aae07e7ce3c333a8281fa7fd643b99d3ac8fba1e5f4

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.ic
Filesize
32B

MD5
e1674cea28dd196d64e9421b60fe07e3

SHA1
7de7a87a3e110cca72c429f839c9e5eb1037b304

SHA256
8e699492c6ad8529ad4c3d79dd2f82e89edb6e64d1417dfd7902c3d2c79bb6f2

SHA512
4074a2c8c712d5cdcbe570834ccc5e6f34290dc7eeaaa2e806518b9ecc7d5d48272f4dbc3327f4caacffe40bea9f3e8aa6a37d3916740b497ce47a3d96ec398b

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.pk
Filesize
32B

MD5
ffcbbdcb6c708105b692d2a49214dc5f

SHA1
fb32cad0441d04656b91e45bd7af5f0a4f701eb5

SHA256
53deb30d8ffa0cf4d252eca2a5dee501b1dc8b652285117f7f97237f392ce1c6

SHA512
d1e30ce9c4eb3121625dba7a0237ecf10b845f2e3209e7f74bfe6e56086c206996c926ef4df728866315036a160ded0957ca962e9f13e680c607cc687c98d2a4

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.pk.h
Filesize
64B

MD5
49c99dae4b90d945b052d90de53c8f65

SHA1
a90a0278ea0b5a57801f2f30284496108621179a

SHA256
9a428b0b652803fb1333c3d7fd39c83ab88f46d0efb46adfaa325064b8abd334

SHA512
35c2aa2ea259f0245ae9b31cbab93cdd21fc8e2712d808c13e0d45b5a1d5f161b9662d49231320598df3d7d396713ef8ceed85b1fd422dfb06604e8da2ca3d1b

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.rd
Filesize
32B

MD5
b346dc998b4dafe0e3bd624f94daf9f4

SHA1
8b2aa5b0c32e8705f715fc4103c4905c6caadf27

SHA256
708876eb4b6770667d0f114e5d8dc06596dc30b62a4c4910fd80312a69700d2e

SHA512
3ded60228c1af6ed7975da62d0c301767d197d4d95e329991168c8c711d95e130c7fcd0c57740f239c584d2ebb7a498b8a641a35fee40aa5e5994faf9d0188e1

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.ri
Filesize
307B

MD5
8167bb6bb73d1f8ffb9bfa9981d7806a

SHA1
8a0172313ad30f76dce12ffb7560855561482855

SHA256
cfb8d24bc42b5f28be63283c33107c9d2c8c53133b3e585627a49c9829a2c379

SHA512
eb2705c4f500166997b2b06bb4c7448acae69a4e90a0c985a5e1d2806621d11e68f8242bb6c9ca25ae4d8b663cfe7464a7efb1b2e9fb3fccf3d7587cb2a916fe

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.ri
Filesize
314B

MD5
e6246c57138e067617ea0f00060efb76

SHA1
5a453ad57049b4aeb713da7a4248022f4d05a1ca

SHA256
5cd0791b415528382c8fcd1043aa9110a42e89c7212f6fce13a2c97387ca7f10

SHA512
a6cc9f23e19837fba881d0b53f8ed19f6b58d846456e0d1c55c81a7e28c356cec2374e1e151863ad1d09565b0a27120b5444c94c9d456ae7d03c3c5cfc8906c5

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.store.report_cf
Filesize
32B

MD5
088fbd73643d5d786731aeecf82df33f

SHA1
ee77dd6701fd9e02a6d366a1e9d764ee836cc450

SHA256
7de8f76180b3779c8f0717973eeeb26bf3bd58b0c446ecd06532090ceab8879d

SHA512
9c6a2e65929dcde0f5ac1115cd5a9e4d84cee3109d0d203ded2b2cf2eb4d2b8aceaa0cace547a4e93732dad7896cef5761b48dd01b829086a6bcbe76f7de9b30

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.store.report_cf
Filesize
54B

MD5
33eb54284340ab283ea72fc4541beb87

SHA1
86cbeca77733806320d4086a253cbda082fcc0af

SHA256
1d8339a075b7019cfdaa755231311ba6bc2ee86f49ffbaf31fb2a681cdf0a3a9

SHA512
72ac165eba2d0fd2d4ab3e0f43908b4ce1099f32b7b433b2c42f624f9b71a6fbd768d0f82020c7531894eb787e6e8ec12950877497bb4ca06010097a66629040

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.store.report_pid
Filesize
54B

MD5
552312176f7e48c464943976d0a52644

SHA1
e9962fefcb358fce659f15f38cf5b25f02c602ae

SHA256
158873add2e2e11d8f32e048f6cb13ad0d5070ac3facc57bde26aa3e01895bc7

SHA512
24f4fd81aa85f0c4e8c60aed5b1035ee53d1ff89802040366356e5ed34d17fe8aefe1e585a5ece7463ce0d4d0d0eadd6630e1ad8f1c9ea0c89ea05956ceff223

Download Submit
/data/user/0/com.youloft.IronNote/files/.jglogs/.jg.store.report_pid
Filesize
32B

MD5
5d4921e4338cd9f32fc42dad0a314a91

SHA1
9655585a16bb0de4b2106d4b17f81afa0625f5af

SHA256
12d9b81eb26b8cd5aa338393d3c657536115988b27802dbd9324f0cdeb097c8a

SHA512
5578d662af2e82025d745b00e8f81a77a0b363f69a8c745ba55d4ce3fd0b1377f1ad5e07fbc20c3f7470808a236fb7d0e0559699d7db6df2a7df980e678339b5

Download Submit
/data/user/0/com.youloft.IronNote/files/.jiagu.lock
Filesize
27B

MD5
04bf0f8ce51d83c75a0aba7879dac3b4

SHA1
cc8c176c7eadad27c40b79e24f1c70ed921d13d8

SHA256
275600546a0df5f5949b64c677c876dedbe5333a968f5f54b026656ad999668e

SHA512
147f7e14a7b7942adb1a746a1d9ed6e35fb5ff776efff1369a3846dca8642d5fcb13ed0d1b30044f44756cd35c9590504dd86c7f5e7bcb48413a4e3553818841

Download Submit
/data/user/0/com.youloft.IronNote/files/Archimedes_p4
Filesize
13B

MD5
b1e44397794c244845e21d6c6e1af16e

SHA1
16b90b27dc011eb22f3516c12f4d440502e9e458

SHA256
2343cdd1cc1ad079f9c10a8b5e862a22bf0a3dbfaee51cbdf27ff9479756b782

SHA512
9a0aac2c5fac5a92aa92466c6d65217bea5a4788322395bcb6ee4a7d3be29fb3f360bc940ecf09f89906515e44c3acfe26ab69a017931741e4e01dc1ec9fd9b1

Download Submit
/data/user/0/com.youloft.IronNote/files/Archimedes_p5
Filesize
13B

MD5
002d8d9271edcadaddb7650296ac003f

SHA1
3ac6aafcdb886ad86a30492eafc1ccb8c4cd6735

SHA256
36d3582eb1292a3289f676c392f30e0d1313fb9c6ca5e17944c7f955560560c5

SHA512
ef80908f39860fee168b34e39610c93a16b60cfa0084eb2659489984b9afdfaee9dc9bae6efb593a40b1e6bc34ccbcff7c323aa07b61faeeed85acdf3e48adc2

Download Submit
/data/user/0/com.youloft.IronNote/files/TDAntiCheating_Switch_Value
Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/user/0/com.youloft.IronNote/files/TDCloud_Control_Cache_Param1
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/com.youloft.IronNote/files/_Ladder_Project/Archimedes_p1
Filesize
13B

MD5
f23aedf0d7946262bbb647e483bf7ccb

SHA1
7d0cc4d198f6709421b972fe64f57ff43e5004e4

SHA256
71fa52940724f645236df2cb4470264d155c53d4b6f137a2a883eb5b320640e9

SHA512
acad25eef06a22cd5d81de0d1aed88d7ee37959c339f6e3bff6053c60f36cb7efa3a7f1f12d8f97456839e2ea09ef99319efdf626977a14ef5fae069604ecba0

Download Submit
/data/user/0/com.youloft.IronNote/files/_Ladder_Project/Archimedes_p2
Filesize
13B

MD5
033c09e0ef439a2409bf3bf9ba22567f

SHA1
3871231c8bb1109568ed547202756ae9ddac416f

SHA256
c9012ddc3487ee58ce7fe261fa85889a56e2fa163bacad805c4aa518fa15ba2d

SHA512
96ed9b446164b33280b7fbfde2d2d7059a1b51960f95622269a7627f43bf182cca9ae3a57bfa84d82a13bf015da27a0dc0acce07efee449eafd59b9e9b90e99a

Download Submit
/data/user/0/com.youloft.IronNote/files/_Ladder_Project/Archimedes_p3
Filesize
13B

MD5
01bb2a1df5ffc306484a288fcecd1f6e

SHA1
185c43e17eb4ce29b9c63020bffa9e20e8b752cc

SHA256
c398df5045f7e94e2fa279199261cbea1db583873937f9af37af6ba8871171de

SHA512
73cc4580c66f1e2df6289871c18e80c38618cb8cda84d3793e7e5feaf76b06e230a64ab87dfe3a788db16bba362e3a542d6cb16d0d4da92468550b21dcbb0b76

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444577271_4672
Filesize
5B

MD5
b44c1812d029bdb9c65e77bb861b5666

SHA1
3fe3d5a510dd2b001d5c69d7e6956425803a6ff2

SHA256
51b74586928888cdd5d31ac42ddbb6533242d563621d15ef79ba51f58c0fbb09

SHA512
4cb907d1d4f5b7c4047da99cedd41b8ac291d0ae55587487d8c4f59559ab36f58a77f944a3715cb3080c8d6d0eb81d3793c2c15fa0ab6d187efc51a76095c377

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444577271_4672
Filesize
2KB

MD5
af22fca3b2998a3244ddfd4beeeba1b2

SHA1
fe779ec8da979b01a2705b3d8c6167c1406062bb

SHA256
27a79aac0257fdd4574705d2b6aba6b72e09e06ec0fbb845ecf911f76496e023

SHA512
6393073532814bd399c72ad3788c4f6bf6cc51b18ae4c73d895e01b742f0abadd7d11a0f7db194a2547634bc575d1e1b30c25f7f0dd92390c8a7d2b52ab7767d

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444578495_4672
Filesize
4B

MD5
309b14ba491cd310f5c81749521a8e78

SHA1
fd9efeba59dcb36002ab1d60568bdcc906705e91

SHA256
00373a6a04a95d426ee8f0f741e7e63ad21b297557ebf48567ef684bfe5b38a1

SHA512
d8818f89562e84bb0292e773035fa8af0b77814394a1fd22a59b4acac2773b0e5eabfe260666326605be533fe2c71c6badbc0a9f48295d58b76a3cbdfce3307f

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444578495_4672
Filesize
2KB

MD5
b7c215566e3037c6f536f34b567ff0d2

SHA1
d13072c83cdb5ba9f35b8ad743f77e67e863cb00

SHA256
d1ffbcfc71ddcddbb149dd853768a24dde2c7b5cc5a1313572c2d216b6bb0ad9

SHA512
9ae13f92b469691fb24db8afeebef464ca89c228d95a4bf65398643ea7d48e01c2685d062e5f28f328e292df45875a62017ef377844f32c0f8f7a7ee963c169c

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444578722_4672
Filesize
2KB

MD5
ac3b59a1ff4d84323160c819f07963b4

SHA1
c0efd784458f420e89785200e977593f6e8e8193

SHA256
448cf2c7c368aa2f3e6821d82f67329ec39edb8fb1b9a4a6ffde61b3be97ff2d

SHA512
88bf7e3810dc20d540b026370d029929a6dbcbf7138a5e48ec10d12f456d3e05b96562580ca1e05710eea63b12b2ceb8fb902d988a8f8f586b95e980a5888b35

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444578824_4672
Filesize
2KB

MD5
632523c73393b1b7a00177c739d255c9

SHA1
0cea21fa322b72ec0e9ad1083388106fb33af65c

SHA256
62a4feb9c174c5a3f083d98eadfc80dc923fd562d07d9be11021e69b5585007c

SHA512
b18e2ebe408ec1474cb8552d647f74c1f3a0f50917d6dc106466c311faeec0d8b1ed23dffc8cf55cab2a4a4acbcf7f4b6932e70642cb2409955ad901fc586a0d

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444578951_4672
Filesize
2KB

MD5
e7ff3c0b3910a193414d0b598ece6032

SHA1
c6ef6673c5c4ae257c35859ad566e413d8738732

SHA256
94217326a6b134e729712e25f6df050853232dbd11a7b6380fa445e0ba30c20e

SHA512
359991119bc8ecb4af05aa051d43a3a8f87ec3f5d864c6634990d86642ad375d0a04f80eb6b59e6239d6ed58e28557325d67b15062b447bd6639393076d9b01d

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database0SaaS/1716444579087_4672
Filesize
2KB

MD5
135e2d2f480bcf1b169ed5cacb1d745b

SHA1
d52d00b57cb59fbf33e8be8ee10976a9b2d401d9

SHA256
dc6fa0118632de558418e4d6c29d197aed565fe5389831f5bac468cee1187715

SHA512
674d92d125379b1e9d0c26c896e2c565cdfba33b9e120ef6f01a1e680fb00efbd5773a5b84f88cbede77789fae8293df6cf3a06436f52fb826e49d33d11b735d

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database2SaaS/1716444577095_4672
Filesize
3KB

MD5
9d29641756bce15c7065b4ce36aa28c5

SHA1
5ec93b8fdbec62e5e48ed2ac71f420562efd6549

SHA256
74e83ac3909a2fb4798b7bd03064a7f4ea65ba022e2b824bbe6bad86f337f3c6

SHA512
45b46063185bbbee4371162d0196767121afeb4bd233254477692bbb548f78d57ddc912e6d55cebfbc54b8385b7ac4b1c0d458ad71ecbaafea0c2f1533a8f8dc

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database2SaaS/1716444578200_4672
Filesize
2KB

MD5
9f7b4e0f83dbafaefb3a4ce25579eb9d

SHA1
b517418d9a22d1a58535e97344cf5040f1bd6279

SHA256
9f44dd61eea190b17a2bee9a4b90075581bfdfb41a8913c5d6e4cb4b63fc4471

SHA512
456bef23489f022fddebd5b647d9b69ac07be9fad4cf9a8735556934745fca641f741be8422db151c80f0468cac76474eb51259c2b04d799ad878f7eb9ecbc70

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database2SaaS/1716444623203_4672
Filesize
4KB

MD5
239462e062f080f238cc61807229c9f5

SHA1
7258db897fae2e6aa5578bddb7c500292e21be56

SHA256
682509461c9a631d95ad61b2503e26d1a6e56e0a36f2db3416e37beab2d8c94f

SHA512
c4bea2a1c35d90eef3a782b043a1ee2f38929ec77450ebb7903e50203d064a44a0734f3c2327e564720121aa70a57688451b1b5731af4b2ef084d99c9d6b1e48

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database2SaaS/1716444623261_4672
Filesize
4KB

MD5
24ad81da4f9652ccf91fc7d3688e819c

SHA1
437c573d54bd7b2153d7e1d366c4e06873c145c5

SHA256
ddfbec03100832d59313a57e64e3676bfead0f72af8d2f0566f671e30f22b6d5

SHA512
809d01394504cdc76d58b3c64b9f765ce500a166018eb2715c8800e4715a67db6404e90252fcd1eecef9ed0af6e637dd358a0327ac9e8531c00f1da771f47439

Download Submit
/data/user/0/com.youloft.IronNote/files/__database_reborn_January_one__/td_database2SaaS/1716444683262_4672
Filesize
4KB

MD5
73cd422ab5a99bf385eb2a83569a66c1

SHA1
dc3e0c86a801d42155ec89bea6c5e8da4a4c0428

SHA256
7f89ea4e6c4f792a7de950fa7b9237d063602fe95377295bf640628db455c296

SHA512
49d41009582bc5f07b1433e0a5959027ebf3d4c97d01211027f3777bae35b996242ac4bcdcad868ce16d1a5cd6b40ee0ad306a2f5d5466acb0c853ac1e5414d1

Download Submit
/data/user/0/com.youloft.IronNote/files/mPBE/iv
Filesize
56B

MD5
10aed72979144577b844c7220fddd3a5

SHA1
3fa8cad7de0ca1f3f3b5ce699f2d4459df309c61

SHA256
8764ffbcbb8fd79abbb3fc50f830781c66987e0f32809e0ef22dee75d5681e0e

SHA512
3c52f13961b502c3a1c2fbdfff909c28cf3ff138448a5ee01e0ce7642a2d18d6d7b74ad76c2b91c4247e64186c44f5b9ab9edb3eb5d91ad8a0d1d5ae4c8cc4f6

Download Submit
/data/user/0/com.youloft.IronNote/files/mPBE/salt
Filesize
115B

MD5
1086657f555e93b3af9380c19e1e8522

SHA1
cb1d1620217dc30c4dee890ff8eef7da3de05caa

SHA256
cbfa02c2a4152ac9c6320a16ece2bedb8d15f8d778c2a191d8de2de75641fc21

SHA512
303d9aa6e909eb0d45b0513109377f0a2f00f5805fe7e85bc7e41c0877e5ea13a00d18042cf2458b8a74039c616916e9dbe9d54b696107b9028a8873fe8cf05a

Download Submit
/data/user/0/com.youloft.IronNote/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDQ0NTY2ODAy
Filesize
1KB

MD5
fa07b1cd001e743ad746817e2d5dca9f

SHA1
d75d82eed79cc759259a2eddd7e563f3d3e00659

SHA256
b16d2e80c7f9960d59abd34bbe5ecef8fb5a8fd6c91aa3a141f996b9464a354f

SHA512
7af6c83ff60a28963b24f6fa66a0e770809fffb9701381da7027426ceeae99e83ba409ea9312b740c69c32f45f3e71eff58e94a3dc79850ab927019718e2b0d3

Download Submit
/data/user/0/com.youloft.IronNote/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDQ0NTk4MTg0
Filesize
1KB

MD5
405ca9245eba3cfe14cc8a7fc6e5d3ea

SHA1
ecd7928d45fc12f5892376af693b7cc6c011fc5d

SHA256
d009baf6a7132dc6ccfb7b1c01041b3c8c6e2ab28a5dfbd4938b1ecd4beea423

SHA512
ea3ec703a7576a0c17ca38f154a0efa097804a657e342630716422b6ec715b984efe84637f643c216adce62bb7624a02143e69193077a99d63cffd34fe7ed1e5

Download Submit
/data/user/0/com.youloft.IronNote/files/umeng_it.cache
Filesize
433B

MD5
14e07cb71d86404e815ad4c8d3a62997

SHA1
b52b88ca8dc55caa170b9ad708ffebc1814d7bc9

SHA256
bfc6b2b5ad768a03f8f2dcbef3a5d295b342230a02916330de36a1f84b3ca6ac

SHA512
9eaca45119f2a19ee3d1d49f66168797955f3a75cf4b1c8f8c62a31e439200b9a9ec48f87472521b4a14fde5552029e330af9f93c980ecc06a96242c7e99efed

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
87affa887583edc58fae58a60f3f3132

SHA1
cf4c44c27574a87dafa81a1086580f937079b9d6

SHA256
c52bf8c831bc4e41e46753c3175a6339091e930940c95fe26ccc00783ce647cc

SHA512
180a302ca31ba25895c20f71da980e3227c578fc06d0b8d2da22ab3e3a6e01becf92adf384da8209e5f080f5262e20a3e901ab910f6f01a5003eaa70cd08fdbe

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
213B

MD5
26a28394de24ea40ea28b81e91890d72

SHA1
d3513baac0e3b14d3dad0f05468c2355eecbabe2

SHA256
8a08f812f64834a492c7301d5f89b3d89e25a7ef8f92f880108880e01f003ae9

SHA512
9c35ed1f5541e9efb5dc7a124cfa3a62ae81cec5d27caca30205d640744d15a161ff99ad06ac9429185b7bc76d7299f86f0c4d0c4d19e390ea58f53ec8395dee

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
c1710f7744e3d988581c719e7d8025d4

SHA1
db4220c7f6ef09885bbbfbae94dbef3a91acd5de

SHA256
33294de177e6e5f875604ef8ae899a8428438cbf6bc4760bd4f5de7d929bf66c

SHA512
fbc28bf5ecfcff421ee3e2f5c467cfbd330bb8d29448bec767e9cb9ae15e22b0bf893c764773ae86c5efe37b1c2ed888b8c2f02eab18335cd6236f76e30f2ce7

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
167B

MD5
57c9f3d636cd2820451cbfa69a058de6

SHA1
54f49237866a15cf94b2c7b1cbfae513e3e635ca

SHA256
7556e292bb5e9aa10ad2d88fe44201caab24c691d6be8682cdd96b467d840b9f

SHA512
fb267890709354ccbed0536ba64c24b5b0a7b76cdb0f44bf5a62e4e9da8aa9356923ed93b0324d4c835510644f3b9cfc5e62f0882d1578407548f98a8abc801a

Download Submit