Analysis

  • max time kernel
    174s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 09:50

General

  • Target

    6a8b71a328406875da4a65c691d37724_JaffaCakes118.apk

  • Size

    29.6MB

  • MD5

    6a8b71a328406875da4a65c691d37724

  • SHA1

    66da74df5f3ed8923ae016f7500ad00e85b4e5b3

  • SHA256

    6947edf81888e388efdde1aef467f0ce36a531c0036bc1ed5a9c7eb63d8fbc32

  • SHA512

    c2e4068b27c42cf84321e872ef1840a64e37cc619fe024ee4a0ac860bbd5c7e02e54b14db229cf332e145895811c8d34ab955301d6a61eae343cd06abb79775e

  • SSDEEP

    786432:vddGtT6hz+czYK/VVK/VCja9MkQixU2uvUcLLlPOj/kDCioK:vDGghzlYK/DK/NikQMUDUGPwm

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 9 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.xyyl.doctor.xinyuyiliao
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4321
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4357
  • com.xyyl.doctor.xinyuyiliao:channel
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4554

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/classes.dex

    Filesize

    6.2MB

    MD5

    80ec9899c754206c03d4673cedc48d6b

    SHA1

    38f6526757508c0f244e0a587271f0f32ccb967f

    SHA256

    0a090aa852de94de6d1785681d2e4d8e41389dee99b4e9a9e2b4676dfaf4dac8

    SHA512

    baa53fe7eb7198542d2c54cabfd7486bb9798985d56e5d9a29ef13d9709b42be14ac49343950550c0d843e52e62dad6415c3d2f05f2acd04f52efd042a39f839

  • /data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/classes.dex!classes2.dex

    Filesize

    5.6MB

    MD5

    a561667e79c73de1be0887efd67c5c41

    SHA1

    fc56717bf603fd76dc553039bfb3467dd9cd2c1c

    SHA256

    0ce437ffcfb729b7749320cdccf093e450e723d389547d3d74e403cb64f5f1f0

    SHA512

    186e1d18be6149c8aa5bab6f91c6e282cd84cbffbe6d1f8c6fecff3659ffdbde92f5a82a5c6211e7d9efb6d7cedf3e0f4159f27e8afdea00d2c4e17c7beb3d6a

  • /data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/libjiagu.so

    Filesize

    497KB

    MD5

    e102893683a16d223c852ac584155d58

    SHA1

    5560d79d71fb1951d6ab0a464af87429a4933c2b

    SHA256

    41c76fbc6aabf843f22a1cf49a457bb99a7579b7260e46b2841c30afd82523c8

    SHA512

    3129498f917661361bc9a0eaba6b7b6490c2216e19dd7cc802b1f2f22fc16ae43b86a7ca97273cd2e2504a7e7e08a173daac34f5085a21ffd4ac1d84e76cb8ab

  • /data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/tmp.dex

    Filesize

    284B

    MD5

    f1771b68f5f9b168b79ff59ae2daabe4

    SHA1

    0df6a835559f5c99670214a12700e7d8c28e5a42

    SHA256

    9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

    SHA512

    dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/2dcee64c2344738b78525d2e85f27f5c36394023e19d7c0892989ecb381c4d38.0.tmp

    Filesize

    61KB

    MD5

    3290fcf5e320eb49caed7eb19ab01f50

    SHA1

    234a99e8c9b24cf874a1176c95251ce47ac4f1c0

    SHA256

    d7d0a6c387dbe004df14c9c50687a32dc1d7d282be20c10fcaa0669b1981acac

    SHA512

    0c70018066b937d6d67adefa32fe8b4959b7fa6d9a47e3b9609cbafba83e712d867a9b830764e3a51fe0b6655b6e5ce08accbafc032616c95996303f4c241701

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/d302f0d2538adb240ef49259507d9b4c2a3882dc7bb423969a573c277e5d83fb.0.tmp

    Filesize

    62KB

    MD5

    3d3a815303950622b9bf25c1593bf0bd

    SHA1

    b323dd3c1f2793541ae16ddf1983e47b8977c44f

    SHA256

    d370254908fefe67100101cbe8489ba0667e75e19b2e4d59fe485389eb5bf9e6

    SHA512

    dcdbf5493b04be6bd67c9fa88241af027a9565a523012f77baf180e255a56a1989c7a38617c167f37e20b8cfaedf6ed79bc8d8394353ca0adcbeee45ee1a844d

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/journal

    Filesize

    327B

    MD5

    17cdaf5e9a7a63fcb3e1e1e94b691a57

    SHA1

    76b9af4acc5bf929a893e7a7fc66e91f3cbb0e4e

    SHA256

    f5308ea569e35989edc45b0133355c048198e20d7ed9c08c69a8472cb3f75e96

    SHA512

    a97c3fe1a9b269e4cc81e13020faa95acc7d4ad09e970278592e7bd605b6b35c6d1f91bc1aa2ffc4a7c6219991d3e00d90343eef934ab72b7ce6402a96cef335

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db

    Filesize

    4KB

    MD5

    5f03c114194857fafa4f759575b66521

    SHA1

    04a333d3738f4c710763c94cb6e58416aa8e497a

    SHA256

    6d95a3ccc7a0b924d3ab3bef8dd64e59aa2716270f6d9124c2f0b43a0a620a42

    SHA512

    e7947d587eab48db0c153688dc46c26f7bd4d7e81bb0335c69e6387c7e0e2a45262efe26597be32d4a1a9a7cb8f42b0067281458d45ff0741f025167aee30474

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    32KB

    MD5

    6a400bf44c93509fa0f0eeb03bf91921

    SHA1

    643da746d32f4732cde37149412ad80b828f44c1

    SHA256

    5fde29d3f1f6b9c5557da4de707680742d312a8e734d5e262206353ff5d57f9a

    SHA512

    7574068d5b769169b30b89c43a4871f68984e0f65431ce71c24b0ceae576446806ea10f81f7ef4094e3583ac16408a7b0eb220f3daf2514ed2e5c3d44ebb62ef

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-shm

    Filesize

    32KB

    MD5

    a1187ecb72fa73f763a50bdd0ff8059f

    SHA1

    acae9ca7e7322e4aa8383edf7635db3b218f8300

    SHA256

    e99c3b31b30f28a4a131c13df4e17961693968b533cdfdf71d8d2f58f3f74225

    SHA512

    7e81570e643530d183189e77a398fc45a57faaec7b2706e84f664a063e40586bca984314ddb64740d5dd1b228778e33f91996d1a58f7d3d5676e8ae63b1b72d8

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-wal

    Filesize

    92KB

    MD5

    219a5fe18a64aac6ea9afb87ebe85b9d

    SHA1

    f2905bc7cde234e71c5896dd50ff8714f2a0c5f4

    SHA256

    05f0583584dd6ac5e064983eda0431284e96bb7f536da88454b3334b6378b33e

    SHA512

    8155568f9a3d36359496b5ad40120793c081afb9d06979bbc7838930ad2b8ae240130012a2752d3598b4a93f72b105a9f2d542ebca7767ed8e18f0dae19e8d4a

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-journal

    Filesize

    512B

    MD5

    91da8bb4b3f024cb67f09ce595d713cc

    SHA1

    3ab5b79bb887aec3b64d822f4c99ba88e033047a

    SHA256

    7b10558659ab496bbdfbbda4e8b70024f4cabb383430469fbccd5d8349640fde

    SHA512

    8ec0bdc3efb4e963414994844db35b41f01d8e76ac506555aabd7fe50fb0b240e660d535070d90ebe16145fd42924d7d1202b81050808a1bde36a3ba5fa95840

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-wal

    Filesize

    68KB

    MD5

    fe1feb2e1c96c4462c0402a724d43acf

    SHA1

    be1042e9ce3faa58972a2ba429f9b820fa3651ed

    SHA256

    993cbf685a24005db5ae10a942e0bcdbc4ca304756894d5acf50797512eb1314

    SHA512

    ed33a9abb64e4b308c82c743dd03a8d4304745464a764d294064a26fff907d4aff494356b1f6153c93c653ade1dbd84d38a00c45525c72445609456f1aed2e34

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db-journal

    Filesize

    512B

    MD5

    c5686c0ddbc94868dfdf2661aa953866

    SHA1

    ed5287e2224c12b0ab623bf612c63721d020a265

    SHA256

    222e0b954d2399228c382565dc54c01e0b701040084fef81615a0ff4252b32aa

    SHA512

    fcab87a4a2982212935816f12f6487b39b7dc7ee36aad3b22a8111d36c1420ac4c06af4cf0e24764a995473c5e9b67a280e1a242d14a22f3ffa4e43a4eb8d034

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db-wal

    Filesize

    32KB

    MD5

    470a7c35dda5470f633ab581f670cd97

    SHA1

    916ea334bb9024136ffdf64e08969d2270c9bb4c

    SHA256

    8e1114d7e1996f083b9b0436d590999048f354e41575326b14cdd6739c904742

    SHA512

    f81f8493244687adee0d9e6bfd8be81d77f045cac65feebff77dfad5bb2a60a84edd419b7e5f613f62825086161dc05869f908b149c38ef3dbc91494c92dbccc

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db

    Filesize

    36KB

    MD5

    5d7ea1a23af19b4340cc8d90f28297d5

    SHA1

    4cfe95b23a9e98378d69c4290af81b51fbe76aea

    SHA256

    474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

    SHA512

    33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db

    Filesize

    36KB

    MD5

    ce6135aa1b1fe4f2c2db2a546d2a5558

    SHA1

    79b59582154017aadab783dc266fcb158c252940

    SHA256

    7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

    SHA512

    2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    01397b9b304c9e903da859b6d2f5a04e

    SHA1

    56399146a6e3251bfaebe25c2a76450d601cacfc

    SHA256

    eb50f33db7d3effba21064bf7db43b1cd080422bfb7b4b67374e0b22fd306379

    SHA512

    984ab264a58e7be04a333f9d4d3c51173c70161d5326aca0874828aa4f9e83b01e1c54cb7472de15c28d68bf01fe9743f4ea71f14877cacda2af5de2adaefd5f

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-wal

    Filesize

    48KB

    MD5

    204aa8f224743b554fc8c7c3384b4139

    SHA1

    8ca6acef5e36f03bfe9e65ec24e1c51864abf57d

    SHA256

    6c5ced447ae38a0dad9422e6da0f286a157f7095e31bc831c91f8c8702338524

    SHA512

    d23b2447967070aea7965d5dd6f617c01b1f3d45f54ec9ce19dabd7cc12b7a0ffda7d4198c7d4ab07365bd971624916394c32f69d585687e12eb81da3e3762cc

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-wal

    Filesize

    16KB

    MD5

    187f9a3caa4e10e97f371a77fb0c8a6e

    SHA1

    886d9d57901a5b3a59565c0d659e0db8f09562c9

    SHA256

    37ffd8eb2fba650ddd2c6cf3a742d10ff2f9e50067387d47358cfdfb3230b9d6

    SHA512

    af144e9c658363435d7cca8e97ade75cd1487c5a5bf59be6fde20ada00a2e79c109e7383ba7aa27d53847a7546947b334316be3e3650ed15802053317f08171c

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    32KB

    MD5

    c58d444401cc181d0d5544c0698c6841

    SHA1

    b390439875ab8e0d22f8943b56122ae58d8e63ee

    SHA256

    dcfce84b5828764425616fe1ca49182aff834f26ae0d5330b197b30042edcedb

    SHA512

    8dc7865c1e9f3b56b9bab3f8eaaa1b60e6287729836620017acebd35bae91b488d3108acb9d5eca00d76b99c46b0e725c9a6da14bc7ddb375dd898dd6f74a2af

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    16KB

    MD5

    5d05c2b0385d118a2721fde24c5fbf38

    SHA1

    eff994256a5301f0a80fa3f43da47da38b191003

    SHA256

    3297404d73141c895d9d19f97b9214153d554f966a6e9d7be925fbeafe804d67

    SHA512

    c8dec52ed249070d2f1e9f2616b80f3bc5a1060edbc93be42ed2a1f7ffcd290fa9a321412ed11f70017d3ea8610e877ba10a35d7948b9b96fd52d06b9f5db901

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    16KB

    MD5

    bb230e1d4a4b047d10c19335aab63286

    SHA1

    a455322458e585d6a73d9ede1a924b918bc786cc

    SHA256

    ab81384795156311d0c7b6489dc28e587818f50c7991887485aeef824e4a6d36

    SHA512

    f5ef734bfaf66279d0237467ef43ad47e998055376f74fac34e13dbcaa770ed4262a158ef9e67c1f028b507180f481f09547418c126e4d76604e987cf062d6b8

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    32KB

    MD5

    d604a3bf1f8d992cc320ea5b1f7609bd

    SHA1

    247f88df0b55c7d523ea5398637711a0e4a483a4

    SHA256

    329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

    SHA512

    67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    512B

    MD5

    d3a892beb0f9a63c842e431e94a87ac9

    SHA1

    0236f66ed70ccd32b98e50400604beec82c7b808

    SHA256

    056238e9fad1253777ba8aeede1a35fbcccdbb1ae3966ac2ad9a5c02b3f0248f

    SHA512

    52f0e531872a9a4671ac7cd150595818aa1a334b393a236502b0c20eb1304623f80fa231d297efd4d8b4d1a3cc2c43c491549ad7252862c5facd11420b7d39f0

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-wal

    Filesize

    56KB

    MD5

    dc253dbdd0f16f654179cc0604bbc8cd

    SHA1

    95288628e75d366ebbd3fb8c8a214cb7e1dd5da8

    SHA256

    cb958ccb23276e23293679c4f3743a8f30784de01a0bba68c5dc6d94b7213d92

    SHA512

    e9576ceb0c471d885b8008cdaba24e75a6cc748c2fcda63ed2599cbb02075ebcfdf3b4606ce9cdc394485c0710ec116bbd60de33e50337ebf9c99c1bc717e3cc

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-wal

    Filesize

    4KB

    MD5

    e0f28c345193f8f9baf5391fd960e5db

    SHA1

    4bfb72c85c8ddde6a7b9101591879680ce37a3b1

    SHA256

    e60468fea2762261bb7811fde21453e7ef99a0151be6bc8be9f8e728c929bd58

    SHA512

    67c0583f01fa706f8b3e501414b7a510dc496535c4a0dee6cbc4ff4f2a221593d85b7cfcbf3ffa01843f047f2fd3528447137e935766dd6e362a250d638092ae

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-wal

    Filesize

    4KB

    MD5

    f796970e2255266d41d4b18801282316

    SHA1

    61e9ca9468f30996319f64101b2c9463e46a1912

    SHA256

    a438ec65e1a696adde0f00c5c2faf759b08ce2bac6db7edf8265740c25a163b4

    SHA512

    e5b6ec7bebd8b588b0d196f1ea9c93668a7b8ecf610c97bf4f84784b28aad87830e0f556ff2306e72cc218821c3305b26beabd9555aa1fb142f58baedc167d40

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-wal

    Filesize

    8KB

    MD5

    d416ee77dfe9de4ef706b87e40da75ca

    SHA1

    9e35c11d8b050ea5edf44148075de308f26560f9

    SHA256

    c4e63b21c2f6d4f8e61c7e2cf10f432af40388914de128e0941fceb3d6cb5d3f

    SHA512

    0a6c6d5a0285f6c9d0bdc994e142ee18065e43e72e1320a3f07a156d3d57d161e0f5ba6abcade0d71edb49a475dbf265aefd387f779bb09ad35a046a7ad914ce

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    615a06bc620d1fb1d97009c2294dc76e

    SHA1

    eb3d19d8f59d22ebbf580e98eb630ba8f3eec0ca

    SHA256

    db6e750db6b3f47e59eac205d30e6b9d2a8c39780b91a7cd5b5b2d9537a0538d

    SHA512

    c0c8d10e8d3c6ecb38fd721d28dec2091f477ef6386edbb4b6a14b2ef5256320d5e8b081e61d9a1772fcd1e9307511fc069257b2581c65af236f98e48b5a9190

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    670bb1e50c5307d308522fe07617183e

    SHA1

    c01118427f66ec73fd790e64d2c1f988955184ed

    SHA256

    d2a9732dedc98a5203ff7761fb3ea00b1651989effe2596b0ca0275865cf2dc3

    SHA512

    d679e7ee67cd443e600b07577f4cf4f00dcc41d768592d65798fbc363407c2ed06ea539b40c349fff429edca12609bb67d75886318de139c6194da14d78ee865

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.di

    Filesize

    48KB

    MD5

    6daa64cd0cb16404dc89732c51fb388d

    SHA1

    764bce8fa189822d28f0abc5ffdfb647f8c27a95

    SHA256

    a6c45e1e27d7fb8dc8d4981359fcc3901160f717f6a08f96a6c6106ed8e7d1fe

    SHA512

    56ea2b11aca6163da506a06da2d27b3b29894d08d006bcb05793c032948ae9b0c7008ef18cc32571e25327acd094304d2233202b38ed15dc27ca5fe86d51bc24

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    b34ff12f4ee932ca75a3a6fb30b81af7

    SHA1

    3e1c93b83fb81d5e07670dd44c673d007296884a

    SHA256

    e72d0ee9fa7517f625e3eec4e139addeea1e03d4e601e2ddfbd13513f32da9d2

    SHA512

    1fe311d8da1bf2d34b96642ea4c5d6e5c7ae44d84e9661173f1a05ee018655e03df00862c80ae4d9090f5611555cee9606578c928f0dab1beb82b1bf54e33406

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ic

    Filesize

    36KB

    MD5

    86cdc8d948358a0575ac296abcbd430a

    SHA1

    270d8218323a420d91944a16bd5ec1b6fbfffedd

    SHA256

    66b152214d8db2f55f1453dfe36ec93da433f031c197899d527530d7dc7fde25

    SHA512

    05b80a15848bb381bafbc7955ff38ccb9ae12d0e8e4deb94af7c241e7e5e1fda01dbcb4c840f3f2a8198621ba3d890d628d2a11ce0d98213925a3b2f85595257

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.rd

    Filesize

    73B

    MD5

    77251e4cf402f3b55a25bb1f95385526

    SHA1

    5cf4ac808820262b035aa44a4f82c3a73aef1f91

    SHA256

    2f099b686758ff25b81f0d9881e2d1e6260a0644a590f3398777b2a9264ed071

    SHA512

    2b6f2c804713cb8d4cc5f1688f3e4584957bf5777ecc196cc9ab7b32dbf67f898e78580221b0eeaf052756ae077d53824a8884d5d3133dfca7bb8f86897f7f87

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    478a5b788e9eaf08149c21a66f8b0f95

    SHA1

    c4093f1d9f049a3b97fd04e361191a2cef923a8c

    SHA256

    4c10c6291ee39d0d5d7817bfacce51aaea223846beb757f69ca7790d4fcd53b0

    SHA512

    02e74f5bd8e5afc0c8e28901e78f4169a168a9161cbed5ebd799314a8d02033ed20e2fd9370360c1290d6ca6d5884df561ce107ae78e8de16db99edc71fa821a

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jiagu.lock

    Filesize

    213B

    MD5

    b87d1bfa6549b3171ab4b924c6c565d2

    SHA1

    4d00d0090afa58cc959ea724b9226ccb39ba354d

    SHA256

    028fb7e6eca7e0a5dbb912d097bd2af01f4275674d904fc28c1da8f25705b287

    SHA512

    9f25d286fabdcc6b2f7a3388c6f9d166d99f8aec29c69c265605f0dd17c9ad08137e2a973ffc0c1c8daec645e13253933fbad182e919f54a346281310d5bb748

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.um/um_cache_1716457979042.env

    Filesize

    1KB

    MD5

    f56536194649c618c6e9b21ae4c47207

    SHA1

    a4b66a8305e7903a165986735b5243f7692bf0d3

    SHA256

    bad2939b22f2e734c78209e34b3ff05b1936c935f3f1699b6fe3f095d91367f8

    SHA512

    9cc241f5417e5978de0e0b1d8d38084eec8a1d3bcfbf9186facbca8e52e0ef5c1ab6b779b22736c5c7299edd851093e6104ef1a755923b081af81fea1784741a

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    e0982837e532d9c18204b3cb3bb9269f

    SHA1

    246c4373ce99d26387e8a5bcb4fa996a54a1e871

    SHA256

    4098cb9513f3bf106644dcca4e711b2ebc3e6956f36167162b90d1c97e093f5d

    SHA512

    45f832624f4f4a68b3f07352609373ece6031c354b15155ea48ed51fe2f40c7ff8148eef47219f37c8d8521ae0342eef4d634ab15924f605048573cfec2ab1a0

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/exid.dat

    Filesize

    55B

    MD5

    6584dcd8a9024cc66f0cb45ac44cebe5

    SHA1

    1bf1f96016d45702e88c581ccd31f56c49066a85

    SHA256

    7f1450c6cece76a670f2f07468f62c0a61de1f9690f2e30b106806a019604b26

    SHA512

    92355a2090f84da5b99132ac8667a949c2770075c3abc37399466f9bb6930d672afb3954517c703af2ca481d3078ee88ef3815b10ef2535fb966e49bc2402da0

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/umeng_it.cache

    Filesize

    496B

    MD5

    efad76b8a9fa7533a6fc9295c97b5fab

    SHA1

    6d6787d44df7054ddeaf2a5f208c932eafe34d01

    SHA256

    9e7ffb80a715be2fcf95cfab9d601ddec5888e4d6e90b1ea6657ceb9c03c27df

    SHA512

    75d1743d44168eb85efc6051bda3be60e896915bbc9e3c560e324d9b1650a758b1b06bb1716487e9a5c587712a596248abdc39fbdd4fbca12cb72613748d5ed7

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    26ba3ca83188714fa3f34669702e72b0

    SHA1

    0dd9b41273a1e9ad2bae72974ca8a7ec2360a89c

    SHA256

    ea795382755f0acdc05a2a13f258ae93932972a692d9465f50067f392a37d71d

    SHA512

    e9b20667d0cae3fbf07aeb7d044c5ce4b42ee539750e910c29f7416a0c0929095d307ed463ac6d5b53ecf600ffacb245436f992326d081ae17116c1a6e788c49

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    4c5a465767d9e5b5e3fae26500ec7aaf

    SHA1

    6745da23a5385b11a085fb2c5b9e2ff90211c6d9

    SHA256

    970b7eb8959a56d837bfdc4003d145d4b5b3b68ee00ed4772a27fd76cc99369c

    SHA512

    fe22b29c126a35947ffba633d757985c9a59293fe4296e4b1dec02b6b79e9b28ce7253063a7e6bc44b3fbd28f839d822ce8f0218618c0b9e844e54b22088b8af

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    72aa7b5592a9aadb16b65722190fceb2

    SHA1

    e53c229cbb69bbcc0a7e2f04e90c3c9ba6755067

    SHA256

    88d329b24f4bc4777c125873894a55d6ea26f8150f419c6c0b67fb8498aa9849

    SHA512

    6fda9adc584202ec3dd931d928ea447f3b778b6ad17f576fad4e60a771987c5c7efe208de4ddd246eab4020dccad683701e2e87750063b0cc34e1ad9d512c387

  • /storage/emulated/0/360/.deviceId

    Filesize

    793B

    MD5

    e7cdb3129194ba4b633ae9052c48ac36

    SHA1

    5c47fec430f1bfb4e9cc754a951d389c91a1160b

    SHA256

    76f9d4b62a665039956fa91669c469cf6af3f148e71b43240ac6fdffebb088b4

    SHA512

    a3ec569a611c0f64da702178b78d9ae5657376c06cafa92422a97df92b6924a7e79628e9be046b87850d1fe065888b4d7560269d7ea12fcd0b33323faaa28390

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    16978fc8a272f8f7c0be296d7d4dcbdb

    SHA1

    770c8f44b57e4e701d18c7164f9ca59d103ee5c3

    SHA256

    768426ea22aa47ab208853237ac955089ed6e9da94eb9c9b6337948d0b17118a

    SHA512

    15692a8120318184d8bfa0fc0828b99988dd9f28b8c9b8d72840bb298cde00ed71a40c5b76497e350bef5601d11c61864095a1ded3bcc16cffd1f509d05602db

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/1151170807115204#cnxinyuylxydoctor/core_log/easemob.log

    Filesize

    561B

    MD5

    f06b494763c7b3888835cabff2babade

    SHA1

    264f0cac39f4bb873ecb6fa3300f4467d977bf77

    SHA256

    c83cf1c3877820cde8a29a3dc2641213bd8dc441887e22fd18d84b64939e0a66

    SHA512

    0a455ee0745947b14b8ec581bd7b05e2f556c54eb700e0e2fbd03654d6df7bedee9bea689129f04bb1e5c88753bb9a16bd89c6892e06ae6fca99ee3c932df77f

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/deviceToken

    Filesize

    44B

    MD5

    176790de3155dec9afe36f466e409545

    SHA1

    9f44bb8f06368809e33bfc010219abd8b70a9bbe

    SHA256

    0defc080a92085f9bd1ec4518b8e64e51b914195f946109f99d39ad97ebda55e

    SHA512

    aceeffc8eda6bea2532ea3b349cd9f7b92c2bd1d56a88cec3c8beb306ed7e8ab9227c1debcb8d5d1b5a83998e328f9778157000672e5efd2844d07dbd919ebee

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/tbslog/tbslog.txt

    Filesize

    7KB

    MD5

    e971ae2da4758288505e9536b5353101

    SHA1

    88a0b705d5ebc8d3bd13b7c2a750451174530a6b

    SHA256

    f15d14a1cd209496cc40f957734062a964103d1b2936e080a5f35249afdd290e

    SHA512

    267af8aff5a7cf29cf543d69b7376432bd67c2442038321a33673b999db0f5830e3ca90fe0b7b088ea256c7748a9808128e903e76a5736756eb21aaf85b34334

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/tnetlogs/inapp_20240523.log

    Filesize

    22KB

    MD5

    45306f84ebf9db71f9f1129584a122fd

    SHA1

    9932d256e0b2c57d8b2c5611f194e92967eee039

    SHA256

    85a99fc74e7b74cbcb7cb868409eef834810a16e5c724269c7a63765ba6ff85c

    SHA512

    d0179e646f91b15c26ba1974eac2b91452d1fb78a72c85663c2a2c1e963f04459bd14f64c25ec660ae42ad14badbcda29d8b9f51f382c8f894420429eaede943

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/tnetlogs/inapp_20240523.log

    Filesize

    31KB

    MD5

    268f20beea3028f99da3b4e2a9b51ad7

    SHA1

    b5a5de156e03c28059e781fb438da4a3cad247fa

    SHA256

    2dadc262c7e269e6502fd491a0c9c1996241c5d9dc661d9ec5f783ef1f56fa2d

    SHA512

    39c41ecebba52c524615cf4687a79ee84d42f48b32d187cfcbe247656b0309d38340148ecb93980022f5d27017836f4b16757e7453e489f100af28d2a2a154f5