Analysis

  • max time kernel
    174s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23-05-2024 09:50

General

  • Target

    6a8b71a328406875da4a65c691d37724_JaffaCakes118.apk

  • Size

    29.6MB

  • MD5

    6a8b71a328406875da4a65c691d37724

  • SHA1

    66da74df5f3ed8923ae016f7500ad00e85b4e5b3

  • SHA256

    6947edf81888e388efdde1aef467f0ce36a531c0036bc1ed5a9c7eb63d8fbc32

  • SHA512

    c2e4068b27c42cf84321e872ef1840a64e37cc619fe024ee4a0ac860bbd5c7e02e54b14db229cf332e145895811c8d34ab955301d6a61eae343cd06abb79775e

  • SSDEEP

    786432:vddGtT6hz+czYK/VVK/VCja9MkQixU2uvUcLLlPOj/kDCioK:vDGghzlYK/DK/NikQMUDUGPwm

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.xyyl.doctor.xinyuyiliao
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5161
  • com.xyyl.doctor.xinyuyiliao:channel
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5352

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xyyl.doctor.xinyuyiliao/.jiagu/libjiagu.so

    Filesize

    497KB

    MD5

    e102893683a16d223c852ac584155d58

    SHA1

    5560d79d71fb1951d6ab0a464af87429a4933c2b

    SHA256

    41c76fbc6aabf843f22a1cf49a457bb99a7579b7260e46b2841c30afd82523c8

    SHA512

    3129498f917661361bc9a0eaba6b7b6490c2216e19dd7cc802b1f2f22fc16ae43b86a7ca97273cd2e2504a7e7e08a173daac34f5085a21ffd4ac1d84e76cb8ab

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/2dcee64c2344738b78525d2e85f27f5c36394023e19d7c0892989ecb381c4d38.0.tmp

    Filesize

    61KB

    MD5

    09cb93726fb695a266301182e5576f32

    SHA1

    342e76711210b8ec09d08d72453078a42cc95cc7

    SHA256

    5c8e0dfe077a8b0839c49e59279b13bf4566849080225963b5c27e41a58e9c8f

    SHA512

    8b7ba9c2ab8e09bcfabe2998f17c136c585e750bb5d57fea7ae6ecc24ee53a039130022334aa7e1b6e9f85aceffd16415f4d6bc36a4e420804cffd29a50f66d5

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/d302f0d2538adb240ef49259507d9b4c2a3882dc7bb423969a573c277e5d83fb.0.tmp

    Filesize

    62KB

    MD5

    e3260da9b8f1af813e40375610d7703a

    SHA1

    e27f2e1e18818d596783312c79a1d0f48fe426f2

    SHA256

    0a754af6ac64bafb3856593f0e068961f5fe270cf106200ae296e537e4db0874

    SHA512

    fb6bd01087b95240901c512fdf775dbd94903204555cba3e7861bd9248344e2ebc1c71829d16bad43218a200e75c3811f311e89653ae3fbfe7932c1e8e1722d3

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/journal

    Filesize

    327B

    MD5

    a7f27a09a8e40fbefd5dcc6cf1d5aa92

    SHA1

    af7a1505763c43fa2396519e4672713fca005cf9

    SHA256

    be6a78cc8d9c6aef3509b560c81e943485bb7d2b9fe5673211dabb72cc6455a4

    SHA512

    b1e2a7ae553fb6af8fea3ac4c0eea98867b696c4f6ced37662921a6213d92472f12c3db6cdfed55faa7bab34dac1c17ffd29f863f6f21148ab100037ac976d1c

  • /data/data/com.xyyl.doctor.xinyuyiliao/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db

    Filesize

    36KB

    MD5

    53b9e0382ccaa2d04d8d0baef4abe9f1

    SHA1

    1d34b3d0263444e8b40421eb238df5ab09046f3a

    SHA256

    8d079081f2c10f192d26fa72662c27e58e530e23c2cc35ddea1ae4623bae3ec9

    SHA512

    8cdc637854e87d2d91f64db47bb82fb33ad3e79f56e2c65d37f4bf561f3d3fa0e29d9bec71175a2432e3c1363d12970273cb5486ec30267330f70d63dc7f4287

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    5a2dcd2e29f1ad5c7fe23a4e0d86dce2

    SHA1

    9139b756e05e7acd1b900bd0f683ea86e0d14018

    SHA256

    cdbd8bbb0523d56dfa8b2004d7eacc88c7dddf1e3751a3ecff4b2d40fd4028e7

    SHA512

    a04e7a98625bc6a5401040844ea1f4ed0b06342288b2c294ea1e098c8aaa8be67895fba0bc1d21f8141fe71ac391d5cbb1753bc046a855d9ed3f898d14275dc2

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    cf4ec245b6eb5a3a3bf5a3ed9bdce823

    SHA1

    29f883d80be67b958790403de868d4393d10b75e

    SHA256

    dd717a0995e93eacba0538bb4fe846e80a01cf1f873e7cb9d17174a88610ae0e

    SHA512

    c41e040e80ec1b1f79e8b7d15ca317a5c2c393019daac6707538c94fa1318829f7d21d2dcc1c76d67e5ff3283ad5a098c764b435863928e9bab3f7da8830f446

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    47f497ca4fc47d104dd76c147220eeb5

    SHA1

    658fa48c1da725bd9cecbc7ca75aa0571dfe7b58

    SHA256

    61ab3c5913f44217e3919eb93873f50d8a88408658bb60251c43bb315955527c

    SHA512

    cb31244df4a0e9597fc43b20ec7a47b5ea355529b0b3004a7b2cb23406cf88c5d9979a4df247b637842af148915ec26c55a91e61a5882c6941b97e9e72f67b53

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    12KB

    MD5

    4fae4505f520b04fb6fe320d79e08ec7

    SHA1

    f962657c43cb3e98e363ecc263f27d9210b29f78

    SHA256

    57a963fbdefaa4b80fab2636f559f44b78ad3705a8eee87f2edc9babb6430a1e

    SHA512

    5509e1f49baba028940a4bac2d12ab0e075a270f92bdcadf5ed457fc587fce70ed070d2bf858c2f49dbf165a302be76f057d78c09aed811a04d12b0541a65f30

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    12KB

    MD5

    857e3f9e655b75dfc5b72ac93b6b9369

    SHA1

    c277ef629a36528c1d3bbfb2af3b5c987a06b74b

    SHA256

    871faee16c21e38193386d13fc130601a3e8ca2800e64613d9701a45088effdf

    SHA512

    8cd6177fb8f36a63bc7041d3e82cf937160fbd7956447b33cf41bc78bc2acfe06c0b262b54a0c4322cdbea60fccaecd2d1d0a7a2691f1051c5c8156571191a32

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    b870f8cb6520a84199f5c5a8c2061db9

    SHA1

    2ab2a4cf89f114650ba0e7288c6c3c089c2efc2d

    SHA256

    639e2fc8a262ee9362f59476d0bd549836706b4c6fcb71927ab194e17745e084

    SHA512

    75527ae4fbd3afb1f98cea41a52c5c5bf64da4277bf732b6b996fac493d14f320d44ba493c7c4e68e6552c568b40d8a5c52e892fc5287f01b698129a38f000aa

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db

    Filesize

    56KB

    MD5

    73a4bc0d2e3ad828ac1ef352c6f9b0e0

    SHA1

    a34fe7fad594b424c1df690303179212877b6f74

    SHA256

    93d0994fe9bb8bf4907f10a068e866dfcdae7ee8b9fcc2c9ba478267e64fa68e

    SHA512

    af91bc94b187426ba950a158804ff025b8a0ee122337be41aeae18fc8e19ba1f3e0422ef1a4502d2728daa21b1ef025143a7ceaec4f0978ededb3b19778fa3b8

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-journal

    Filesize

    512B

    MD5

    4103da809de70744c7e57e51b96df989

    SHA1

    b6703bd60c92783aecf8628f8baa8fc451886e76

    SHA256

    7d24f49bda659945c06690532d8a549ead383f1c6c147762ec0e45682c27c5f6

    SHA512

    2afd9dce101e6c36d450469a39aa20d506368a834dc9c0c5c5070c69b97efca4955f037ecf453d9fb5760e29d94309b1f995f279ad00237f04fa86d9fdb37962

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    e4c3011694072e653e16289dfc3b0e37

    SHA1

    5f06eac060c898f82fd90e1f961a5d2fee95f699

    SHA256

    0cfeb52944de9eedde8c3b2df05903d376da159f7cab21c091450eaff19a91f6

    SHA512

    4259f2cd13da8432880be58792c46a1c0e93c31e2dbe6f77871c46f6e6ce910c9209eb1164effb71b509db9e3d17414144ec380d04b288023b3f21e4fcf58d2e

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    685b792fbcf681f367e2b8273ec1a5d7

    SHA1

    4da6edc808a79430bdd7700b1091b3b9865b9f12

    SHA256

    201c839857b8a78e50f9003322a7bfa31fca59dfb1b0ad460b7de525b075f7d3

    SHA512

    324c7877f9b74b0ef5546d09a0b4febb3a726fd427772d38e3dd9121140297697389c88885a7763df20bf6ef75818fd27f47bf1a2eb716bf124b1787b66e7d25

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db

    Filesize

    20KB

    MD5

    d95e1280cc553509d7b5b7851398db12

    SHA1

    121eb76ea37f3407d0f3b56392f6f67893fbe649

    SHA256

    58e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c

    SHA512

    f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db-journal

    Filesize

    512B

    MD5

    78bcdae5cbeed817a9c5a071366f69f8

    SHA1

    1c8877ab9b73f06f32de757e5870f2f4ebd1fe1f

    SHA256

    c64312b76cd93605a7995eed2f7ca8b968a4951f19eb917cfff319e1e57a1a57

    SHA512

    45135435453813a64d09e672890fee70cf068f9d5e63bd6344b1bcdfe2da878358c54ce89a62cb35bf32e6b6f5107aad7fceeddac793a629f4ce68437d98d71a

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db-journal

    Filesize

    8KB

    MD5

    8292b9a6dc60841b23be59ac28ec6e7c

    SHA1

    4ea15c0294867d6a07dfc177f1ac691e0045d972

    SHA256

    9fd62a7f5b7fe722df0e20177c653e20b8bcaef3ada042dc8f5040a9d44b83b4

    SHA512

    1a43261d7724b034ea6f300b0ae6b887ee0334a42b549c77bd55849a97d3ef756bf257e119189d4eabca38e6da4da2efa3fb9b5cc74013cf10ed4b0352e528bf

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/accs.db-journal

    Filesize

    8KB

    MD5

    9d49a96977c4508378a4c485726c80a6

    SHA1

    de6211095915556ac8d4952ae6bc90a2d2b8c755

    SHA256

    740882dc53c3d88e07885fe371d182789e529bd09e7ac5224d2f6af459e02089

    SHA512

    cd5b3107696a34e52b6752c64a0b4530a95b9d116413c8e9ae99af7188cd5c0485778bb6972bede1da83255376a4b9f399c73f46724f444af311e0ebb1495438

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db

    Filesize

    36KB

    MD5

    0908e924aa236931dc7166fef6e00862

    SHA1

    7782648d6d8f6e835bd47058d4852932c096a467

    SHA256

    38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

    SHA512

    3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db

    Filesize

    36KB

    MD5

    67c12933d1e0e63d9801a6aa43092ce7

    SHA1

    b6936908554e4a1986b8eb08289e2d3545e8ff74

    SHA256

    abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

    SHA512

    db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    392cd905ed0d57f28f99ec3f8c57f8e5

    SHA1

    78288c4070084f2352b0b6a81b4996bfde4e7ead

    SHA256

    7c4b488fb8aebc74f9e85fd5a644212e9c065cd0edacfc966ac18916e950afb0

    SHA512

    82e19e5fc2520eb6250758c14d4869a5124909ca176d6dae3318d7caa33639e54ddfa9b769a8da663fd89ff26cc95f7ff4008f25451bc39018bf667497c3b0c8

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    ff4dc031c31025789720b7de39a5c871

    SHA1

    88af3de89ffb37a492287e3a0afe841c3b78b820

    SHA256

    d63fe7e63a018613d6773f1bad029e5548efbfe6d01f4c035168cc3f2b08f653

    SHA512

    6df3491728a4f532e5892df70a87cf16a130894bd5e934a548a866264277018e59d9e2b04102f9896de243ad8404d1107ba61d416b11096f441fa8af2f8b9379

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    46ef135ea2d77307b08fff68ca4e33bd

    SHA1

    49bf119890fb1a80f674e4caf8b83fe084ceb11e

    SHA256

    25a56fef86e19aed8b9be62473dd7480d2df3f58e4304012512071204aed0683

    SHA512

    59cbb28dfc5abb82eb7c7d0ab62149b4f4807d809246a4ac604aa3dfbfb4cd574b88d18815ce0b775df2c71ac7aad07048e3e52d11366f9062afabf08b191ae3

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    2ad88735061f0c1686fd3adab383b6a5

    SHA1

    4bac8a27587fddaeaed236f9be9fc5bbfe5e9fce

    SHA256

    8f751ed4109721ec299a9af335dc6fbba4492395293cc9cbbc1b0f4d38234d2d

    SHA512

    396a9b1c4b383b777172585e4a1149abe0302654e069a469e5f3f5dc7672c1c1cc9b03d16a654ebb5fb22c8a90d7198104fcc9e3dd9ab231d577739410da46bf

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    da176dea8a2fe79f33bf8f71ff5c26e4

    SHA1

    044121947b582334a1b5cb1a3a2bc2140384ab82

    SHA256

    a2fb74faa0970b0b7fcf69e7dba4fa9e04c6a277b2d4ed389901d0517fedb165

    SHA512

    5c3708c1af8e5b8ebbe09844b09515cc55febd131fa2f473c3a7072269589168c3204ac2868519ef4ca2f27dc0ba748813f813ac2fa113268a45a224848a8969

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    61d410d4378e7cd4f769edf4ba10b349

    SHA1

    02e302be3b38531753f7f66b0484c43beaf3f630

    SHA256

    392f6a5867dcce2b3337883748b021cb6c64f72009566b45767249fcba3d7cee

    SHA512

    eef58b75c4e3263a85c861ef063cc46d1ac9f0e472945390ec1ddcb43deb48b77b7626e47fd98538479be971e93d9b156d0d99f5310990bd8c9bb0cd453aca12

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    32KB

    MD5

    b68f5d61e82c9978283b455f9a6ac4d1

    SHA1

    0fc86a3923c4245c5f2a9df4845821a19043e689

    SHA256

    270f6dc67f1043fe29c25829c22ace7cc6c080a6fbb3f3d93a35efdd5b9189f6

    SHA512

    956218d1161ab23485405442b8504cf26b54b8481b6a80898771c3c147c62e65ee52990118d70c6158204897ac3c81cd066a4ee643a5c2969f1133d6be6b7c1b

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    16KB

    MD5

    f36432af2fe3e0b96c84a68f29e80c93

    SHA1

    55e0a3f26c9944fe9ea8c473c3d8162adf676efe

    SHA256

    8dde972b9a7e9fb8deae62933ab599bfc20fdc4699fa221d1895584804274fca

    SHA512

    5fec3c0f09c1ca55e40f37add774a1a6ed1af4e34235fdf3b4f48402b8695691bfa7553dcc493ee240d16dada16bbb413f3e14593884cceeb79b727d815e57f2

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db

    Filesize

    32KB

    MD5

    d4aa9ece6328579081b1e15d1987d3fd

    SHA1

    a2b5afe9c0ee7967336d55116f5d23335c453878

    SHA256

    fa5140568beb67357c0a441eb4decc9b64a015c2d7c4ea441d1cdc32057dc6d4

    SHA512

    e018c93d36712de842cdd381fc58fd16acf8e975e89338080fae903b67a2224a8081e77318a89d906e9a5f3b3c596d66c9824ec4f5f169e8eaa52fa74d587a97

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    512B

    MD5

    039605da69210977fd4f4d6f575455be

    SHA1

    bd8dddda5ef6e80fb15b0c311fad9325d2175b60

    SHA256

    41960b090aeecf6393fa89caa31d25a8dbbe8228533db79685fd23ea328dc0c3

    SHA512

    8db5d15a9d457dd3c55cadf6945a15a3b4b4676bb3bf0b9e8f2d71a9513c8fea3faaa82749e9b85b676ffa56d06c582f8c049941c29e9b3bffcebb6b86901d8f

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    8KB

    MD5

    0530c0f73210b166227eeac1ce933061

    SHA1

    f6a6090ab6a3f619d44707e5a79cc6ad1dbe1f4d

    SHA256

    116bb9dcda79dfa31a39076624f539059ae8ad09ce3e12b58a3f460f255b4b9e

    SHA512

    81a44d76b45aa8abb4829d0280e422d95aea56cb0c90389b61fd31b1fb0d468dca7ed8158cf38fbd67201c2f8799de5a75de8864e7eba7d4e85b5c785155ac80

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    8KB

    MD5

    717f637fdbf75a32a30be196d2b2aa65

    SHA1

    7b821de3076ca71773a87950219214c13740996f

    SHA256

    19050fc0b0f4bc019c0fc041f44f5ce14236ac9b1436b3645763437a73fa668d

    SHA512

    4e52d360809be2caf5fad3180b172e9abd5d591e033c21f7a209afeae98aa54dc821651970fd275cdc210c30e9c3d65485ca437c95c739a3d8438df657a524ac

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    16KB

    MD5

    38cfe4af7ff811809c7bae6c630a4158

    SHA1

    927198a4823d3aa7b82eb4eb549386af92816c0e

    SHA256

    fdca1ffdac4030ecbd5f66df6935a9cbc5ce6b2221ca813894809fcb1a781f8d

    SHA512

    822fa90cc11af7b95783ee644cff41a73767ee62b99edadf1ad4a583567748ceb07c05b1c9be471b60e7bdb4d40280fce7e70f76a06bf717ad4a9463bc77c961

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    8KB

    MD5

    59f19295e474cdd719b4e0d6c2f10c87

    SHA1

    f3696e784646521dfb75fa6c7b383bae2b698a00

    SHA256

    f9b278ba4bfaae2f53b9ad8389c6e16cd6529cfe2cfee284c23d1e0ebd6131a6

    SHA512

    9b097a21dede5e4b35bf65d6f1f53244077771226abade877f05cb3a60592d626b716d058203693c0d3f05af50a6df3a2a3bf6790a67607bbdd3965eaad7474e

  • /data/data/com.xyyl.doctor.xinyuyiliao/databases/ua.db-journal

    Filesize

    12KB

    MD5

    a63cde0e6dd18d8f3d731539abf97785

    SHA1

    2c9cd6248e3859c90faa47c28cc0cf0958d3250c

    SHA256

    8fcdb8e1ac7d31ff6f5e7c6d1492d8deb8746e3c1e1891d033b33c9b7f8d47fe

    SHA512

    c6f7b9a96323846ecde210954d22ebe7138091ea9aa669d98525117a7818c372315916c787ef6cdeaa1dfc3a556727686907dec7230628fb149224ba3e59b95c

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.imprint

    Filesize

    927B

    MD5

    a7909c436d0741363865bb90053a1063

    SHA1

    0ff4e8e1b1cd94fb234038c6d312de0312fed498

    SHA256

    31d6c85aceacc652dac964d2e7df6c22734168a8ccae801546e84fccb11026ab

    SHA512

    0c879336e61eb271a514d0c9d771fde37ca9e4a016708597030d87a6b97962ea504e508f65660dd8fac6761533925abcbc486ea1c21f45d86b66e57a88a9aa29

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    670bb1e50c5307d308522fe07617183e

    SHA1

    c01118427f66ec73fd790e64d2c1f988955184ed

    SHA256

    d2a9732dedc98a5203ff7761fb3ea00b1651989effe2596b0ca0275865cf2dc3

    SHA512

    d679e7ee67cd443e600b07577f4cf4f00dcc41d768592d65798fbc363407c2ed06ea539b40c349fff429edca12609bb67d75886318de139c6194da14d78ee865

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    615a06bc620d1fb1d97009c2294dc76e

    SHA1

    eb3d19d8f59d22ebbf580e98eb630ba8f3eec0ca

    SHA256

    db6e750db6b3f47e59eac205d30e6b9d2a8c39780b91a7cd5b5b2d9537a0538d

    SHA512

    c0c8d10e8d3c6ecb38fd721d28dec2091f477ef6386edbb4b6a14b2ef5256320d5e8b081e61d9a1772fcd1e9307511fc069257b2581c65af236f98e48b5a9190

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    2a781416dc1b57c8fb9b37d593ab7638

    SHA1

    38540814ee20f49e035304283b9ad2c289562a40

    SHA256

    f3ab633f640e05e959a32fd96cc646a03367668b904c286285d5de8b46c123fa

    SHA512

    075aa35a4d9f9c1d4f6b98864bbcfb314370a5ac9c29ef0f5a9c3eb60cfb50a9bb30a3cd6c0a26c4c59e04e072b6c41d8753ae2564f999575cc7e303b0dc6dc1

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.di

    Filesize

    36KB

    MD5

    50f3d63f4b9241e212be8ec20bf3e374

    SHA1

    10353f506f0aa9dfab398275482eb42da167232a

    SHA256

    be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653

    SHA512

    dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ic

    Filesize

    40B

    MD5

    18eae6883c1f276cc5800c70d4755251

    SHA1

    a14d4628b1bf4dc1c22417e992ad1a42daa9a082

    SHA256

    24978c04110e655c66798235d6bc512077fa76a28d8d447651dc12b9f74a132f

    SHA512

    f6786a94f0f1baab805ce5cdc899087ea01ce64ec825eb3124e410d2574fe73366318a45c69ee9246699d1ec1357046a9020ef2c0f12cb9c83a75db3348569bd

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.rd

    Filesize

    213B

    MD5

    e8376b3de4b5152928bdc1ff50c7b7a2

    SHA1

    b165ebc16a812699737a9d0ee8721da9ccd01b42

    SHA256

    11ec1aabfa6129e658747e296bc0fc6c15dce4da71e209f8955b59f1c3f819dd

    SHA512

    16ce4211f4b4e018ddf0925eaf7c123dcfbaa16db90b09409444ad9f002c7c255d4c2fc1bef5dad1afd44e168a6502e5f4124af76476dd1dab10ac26dae4506c

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jglogs/.jg.ri

    Filesize

    80KB

    MD5

    cda49d26bb708feb66b5bcfa5b9d2886

    SHA1

    ce249ca52a4c12d93adaeb36cc11a7ece0dcea01

    SHA256

    a79c6addaa613ece3dba0b15e43e6030016dea74b5b38ff2f0bda5f709f988b7

    SHA512

    dce99f314416cce3e59915d7247f5a9b47c825f6f546d79499abe3f86d51b652a60a0b82a307e36ff9226ee8c81c4633003a3f507e6a26f955ce6067d692fd30

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.jiagu.lock

    Filesize

    167B

    MD5

    31dfcd5ddaeb9db9d9e0d174012be880

    SHA1

    fb2625b5ba77bc9cc3a1eba3c88211feec16cb4e

    SHA256

    ef35c3f9fc993fab75d02b691732a79242ee38e98ee54538cd8e270ab71e8feb

    SHA512

    632161cc20e4a6501e8c1537fdab524df34eded8b6825add838319d9a318cef96ee362d9f2a76f2117a64fcc36ad85b7b94bca22127f75e0c6673c3d44ffe1c6

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    8519a19a6713a5c6391766c7d95de2b9

    SHA1

    1be702fc5c7e509d63a932672bf0b1229b3fcfbb

    SHA256

    3ba260e14c510360a64807121f68dde9df94f765e68e6d4c0dd63e096563ec5e

    SHA512

    ecb4ec4d062e51cad907a0d17a9ff6f584e334605aa2a411b8700c2c2a25b47cc362b0e0f44efe4927cfb7f096543c1e7d025c5f372647a1d3efa21ea623c339

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/exid.dat

    Filesize

    55B

    MD5

    6584dcd8a9024cc66f0cb45ac44cebe5

    SHA1

    1bf1f96016d45702e88c581ccd31f56c49066a85

    SHA256

    7f1450c6cece76a670f2f07468f62c0a61de1f9690f2e30b106806a019604b26

    SHA512

    92355a2090f84da5b99132ac8667a949c2770075c3abc37399466f9bb6930d672afb3954517c703af2ca481d3078ee88ef3815b10ef2535fb966e49bc2402da0

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/umeng_it.cache

    Filesize

    433B

    MD5

    559243c1e8c1e56817a93c62c9cfa983

    SHA1

    c14c762c1b5e2f7687d791c0b5ce18861a4e6300

    SHA256

    cfbd8f27e3a04811cdd5da966d38fd61b8836239fabe0bb844226f94c1d4f804

    SHA512

    04de4b48830023f08e9c3e34dc73143a163d53c7a40a26aa203629e422407e1d22f94f2710d3f2ddcce99e79cf40ae3e1386179d0ae4914713288192a3a74c7e

  • /data/data/com.xyyl.doctor.xinyuyiliao/files/umeng_it.cache

    Filesize

    220B

    MD5

    b114d98951cf6de847c44379bad61bf1

    SHA1

    abf3d51d682ca85a908e641b642a34318f208bb7

    SHA256

    f861c0d477838493115959acd7077ac8138c591b897f23381032f3eb6bad3e4c

    SHA512

    d6dc17cbb42ef3799f6d20219a989c33e71d00817782d95a42d488cfd7b01ac1ec08e73515048765c38114d6ffc0075bcd0bfe199fb7b46fe63ee3930640ad46

  • /data/user/0/com.xyyl.doctor.xinyuyiliao/[email protected]

    Filesize

    6.2MB

    MD5

    80ec9899c754206c03d4673cedc48d6b

    SHA1

    38f6526757508c0f244e0a587271f0f32ccb967f

    SHA256

    0a090aa852de94de6d1785681d2e4d8e41389dee99b4e9a9e2b4676dfaf4dac8

    SHA512

    baa53fe7eb7198542d2c54cabfd7486bb9798985d56e5d9a29ef13d9709b42be14ac49343950550c0d843e52e62dad6415c3d2f05f2acd04f52efd042a39f839

  • /data/user/0/com.xyyl.doctor.xinyuyiliao/[email protected]!classes2.dex

    Filesize

    5.6MB

    MD5

    a561667e79c73de1be0887efd67c5c41

    SHA1

    fc56717bf603fd76dc553039bfb3467dd9cd2c1c

    SHA256

    0ce437ffcfb729b7749320cdccf093e450e723d389547d3d74e403cb64f5f1f0

    SHA512

    186e1d18be6149c8aa5bab6f91c6e282cd84cbffbe6d1f8c6fecff3659ffdbde92f5a82a5c6211e7d9efb6d7cedf3e0f4159f27e8afdea00d2c4e17c7beb3d6a

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    3e5bdf01a30771bba58704cd4357a3b1

    SHA1

    37889581cc023cae95fb8dbfeae0d5847962b5e1

    SHA256

    f53985a15023fc5bacd69b2e4448a4afcc26c87a84bd21ae1847ca14e7587cb5

    SHA512

    2db9ffcd8bf5b82d4f70bf974b75b7666fb2b999c3b371ac6ef173c2632e54211f63fad3b1b016f56d1071d685848f2de2cc9d024fdb35001526c8b9ad93baee

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    48fd2fa54e20e47f5ad65ced10427007

    SHA1

    54aee8f160aa68af3f09b63692e89185e7e39774

    SHA256

    129aacf282efbaf0af8f55810ea6b7a93e6a8cf2cea9a193e2ea60f648a8d19c

    SHA512

    9b02a607d99cb6bcaebb8262e5be394d3d3015018832eb2c2d7e4022c72920e6ade9ac36a9b33f64bc69181c111df497961ea53da59d8401be67ba75ccd0678e

  • /storage/emulated/0/360/.deviceId

    Filesize

    8KB

    MD5

    a0dd1409dcd85fc4d47b6df9c843f0ff

    SHA1

    9d27effad7e70f5293e4ba5cb59381bffeee83b6

    SHA256

    16e69ad601939e53b48a80d4319a4e20793168a30e828c66c32e88606f5ddc0b

    SHA512

    d7c1134a1fb7fefbaaf34de865abb4a0a8f8168d96153780a0f9f7df9c961b5e3301b945a7e521b0138c7736c56123b1fd1ee1ec512813b6e3057dc0668a1aa4

  • /storage/emulated/0/360/.iddata

    Filesize

    512B

    MD5

    52461ec1f732ee4452965a294790190d

    SHA1

    aa9215eca04090a3788a8792030c138c833eb65f

    SHA256

    b55684d12e3abb368e398915bee3f450134a134ef2bf441580848f12cb06f328

    SHA512

    d38d846bec139f11df424d15d9522f13dc45ed9c1cbc818a90b65bb151797ab18aaf0c4e42c8633ac5877d2357706b138d1ec09fbaae47fa9176fc89bc31533a

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/1151170807115204#cnxinyuylxydoctor/core_log/easemob.log

    Filesize

    561B

    MD5

    a2b873ef9d93eb398ecfadb4253a178b

    SHA1

    26bc53ae418552c5a3bc2148652df77a75611c9b

    SHA256

    86a35ff62e1ebf251e7ce4d919bf890f94c514e4e23cb186867707522c594115

    SHA512

    804c9450d21cb1f68e43e69beac261868ee8b99e4fc062ef057d8f51ceac835397d7c06d304f9b77e881a49a18e9e58e7686aaea6e9745cb2e3113da1d6f1cb4

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/cache/2183b795f5f84b2c9f0a688c906e09e4

    Filesize

    4KB

    MD5

    a92eb2974a2ade4af1f7b212c82e0b99

    SHA1

    fd4b99d9873b5148cd172c29be80bf61347dfc0d

    SHA256

    ba72016bf48c30110482d14cb192219ada8f2c1700b1ee6cdb36fcf1521c74b9

    SHA512

    6906dd417fc13f4b4ec711c0b9589cadda157e5844dc550e1cecf3964a3f8f04f773382913cf2d33481ce987a1ef2545f54755b349ac54be4f400a1a971e2cf9

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/cache/fe2c4e065a3742768550744f9aa8dfe0

    Filesize

    1KB

    MD5

    4013f922d6e2b5127df7532c533abfa3

    SHA1

    d2c113e1b1527a8525d50ac571499d2cfb04eb1e

    SHA256

    8592bbbcb58d5d04cd7358acbda5fe0488fcb60a101ca6a36e9f7f0f2f0ec00e

    SHA512

    99103ad0ed45dceae56810e570ffc612d69a7713fbd85208301fdd0cca77dcb12e4d61699b9431836e6cc239375eb22d5499fcd16802e60d2ac0c49c168709d4

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/tbslog/tbslog.txt

    Filesize

    7KB

    MD5

    58248ed73ab892bad6edc4df81de948f

    SHA1

    1fa30b2d9830cb6bfae6a8c9ee8838a22d29dd73

    SHA256

    308cb60763fdc96e43e95a46756ad4fb3a961e596dc48b031e806e5c8938435f

    SHA512

    b618153917b01c2ab6bcf34db507b9e935d403f1ff3d968227e4c67f72253c6c256af0b3c846a349a0cf3fa887227735c3686e74603e51a9e124c609e04b458f

  • /storage/emulated/0/Android/data/com.xyyl.doctor.xinyuyiliao/files/tnetlogs/inapp_20240523.log

    Filesize

    71KB

    MD5

    1c0ad0ab9a2943ce7652adc42389bcdb

    SHA1

    5f6bb09f2dcb1194ac5e9b02eba7bc859f2cde49

    SHA256

    efe25ef6c86b4cebbf11c1a1796105744e74791b7f416d3d99481f2545768d7b

    SHA512

    285842d8d5bdf4dc2d8a0c52a010967023563e02f937a5aeac2d1f95fd75c1dd5cac76526bdb69a738fb1c94a3c08f7a502b35e4f1e25fe6730a3fa4738cf7df