f329fb291f7cbc5e14af91c7667f4bb44207df4f4755a7345e0603cb8374e08f

Analysis

max time kernel
178s
max time network
184s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24-05-2024 08:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ddc07166e1a11f061fdf35ea7ea47a3_JaffaCakes118.apk
Size

7.5MB
MD5

6ddc07166e1a11f061fdf35ea7ea47a3
SHA1

cca498b0007f795e62340180df134963523e2df3
SHA256

f329fb291f7cbc5e14af91c7667f4bb44207df4f4755a7345e0603cb8374e08f
SHA512

358cd858e21efb8407cba49a62b6b43a7edd63b0eda260eee6aec89c4e58c44673f7eb74ab1db286b2c819e8dc612fe05d9e6e914fa52aed47e34ec050800d83
SSDEEP

196608:uyz6eWtLXVI3zEytrS4FPbmHWJBCiWg9a7PjNkz:uy+eWFIjEeBFPbFbCiI7LN+

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.bbs.yg02

description ioc process

File opened for read /proc/cpuinfo com.bbs.yg02
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.bbs.yg02

description ioc process

File opened for read /proc/meminfo com.bbs.yg02

description	ioc	process
File opened for read	/proc/cpuinfo	com.bbs.yg02

description	ioc	process
File opened for read	/proc/meminfo	com.bbs.yg02

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.bbs.yg02com.bbs.yg02:pushcorecom.bbs.yg02:filedownloader

ioc	pid	process
/data/user/0/com.bbs.yg02/[email protected]	5118	com.bbs.yg02
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5118	com.bbs.yg02
/data/user/0/com.bbs.yg02/[email protected]	5250	com.bbs.yg02:pushcore
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5250	com.bbs.yg02:pushcore
/data/user/0/com.bbs.yg02/[email protected]	5317	com.bbs.yg02:filedownloader
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5317	com.bbs.yg02:filedownloader

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.bbs.yg02

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bbs.yg02

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.bbs.yg02

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.bbs.yg02com.bbs.yg02:pushcorecom.bbs.yg02:filedownloader

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02:filedownloader

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.bbs.yg02

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.bbs.yg02
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.bbs.yg02

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bbs.yg02

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.bbs.yg02

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.bbs.yg02

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

T1624.001

Processes:

com.bbs.yg02:pushcorecom.bbs.yg02:filedownloadercom.bbs.yg02

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02:filedownloader
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

T1421

Processes:

com.bbs.yg02com.bbs.yg02:pushcorecom.bbs.yg02:filedownloader

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02:filedownloader

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 4 IoCs

Processes:

flow ioc

32 alog.umeng.com
72 s.appjiagu.com
78 d.appjiagu.com
91 b.appjiagu.com
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

T1422
Reads information about phone network operator. 1 TTPs
discovery

T1422
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.bbs.yg02

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.bbs.yg02

flow	ioc
32	alog.umeng.com
72	s.appjiagu.com
78	d.appjiagu.com
91	b.appjiagu.com

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.bbs.yg02

com.bbs.yg02
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5118

com.bbs.yg02:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5250

com.bbs.yg02:filedownloader
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5317

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.bbs.yg02/.jiagu/libjiagu.so
Filesize
482KB

MD5
f380717bd1e3916c7b697fab8d46c5d8

SHA1
04f51f0d16097214e38be517d93be44cb0603a88

SHA256
8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc

SHA512
b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

Download Submit
/data/data/com.bbs.yg02/app_tbs/core_private/debug.conf
Filesize
101B

MD5
e54000c75c1b3bd61f2cdcc176870634

SHA1
dd2cf603e630a209cbd4d01492555551d513fe9f

SHA256
a6fbbd3054cfb4c6f2819e70167573fd5be8cb911e3b04139305d645a3a5173c

SHA512
bfd1bc16b130284532db7cd17548e57487e096d5382932008f4aae36edeade987cc15c85c7be0144301aa15b7d9cad76179179475c9531b5dcc9b9130a0740b5

Download Submit
/data/data/com.bbs.yg02/cache/image_cache/v2.ols100.1/98/h13Tazv_aHMQUASUJwqx0swtLFU.8464474692458026136.tmp
Filesize
107KB

MD5
fb67a3872e9b1f327e499dbb1f198a7c

SHA1
d3280c96e865207c80a4e66f4749a34f40ef3e40

SHA256
aa60efd0d29af13dfd257ee1e3548a721231c6c53339f9bbdd23e73def6fad0a

SHA512
eea1b3eb40c1d82334e9cf8bcdfad72538d4afbda028b2b17d4b2b9bf3c7cca185963d82d7503d7b15b99220f7871d424d31acacfd9d673f5211b9e73d84556b

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db
Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db
Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
512B

MD5
9ef3148033d55661d77a15cb672b5f4c

SHA1
f0dabc517f7d02cfbd323ac8d9d7ccdc2dbb0cbf

SHA256
18997495d0425126fef6bcfc8769ba64fb0b2b03b8087eb690771e3dc13c117c

SHA512
ef9e467e0ce32dcfb857a464f9e1e9f698109b8fc37ad91219721a6ac99427d96cc6af298dc53c761bf0677e31b9ca9fb61c573a1b4e6d21e0e8c65fad5623bb

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
8KB

MD5
90b3212dc312b92cff86d4e7b674bf45

SHA1
a2aa46c5928a467f01adbaddc624ece4560b6833

SHA256
875afd79f56752b1406afb1eaf38845becb08842b2b889d28bfe77f8c4daa8d4

SHA512
9ba5ed071550a701b5e07724452422940d9360211afb04dd3a4b11f3e4e55fd2cd4c3d0f439ff2ef9425a2745968879f19f1a228a2f8c2c9869eba78406d1c7f

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
8KB

MD5
fe47e591ca68a66edae918a9104eb422

SHA1
09e750dd2b63866744b9e5dd4ed531fe080072c9

SHA256
fb0b76646aa51f332ece77b8572463ef5af8e7614153b6865263c54faff12300

SHA512
87a51e9a65ee42a1fdb2bc49f35d5870c91a40dca3dcc3b367e130576d5431e1b277bec9a1a266e0e89da04b5b96398d6af041ce835f01a043b9b533a8fcdd5c

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
8KB

MD5
d7e0ea6693275283760477a1dcc6f23d

SHA1
0061275886aa0171ec6edefb4e11c34a7aa72892

SHA256
801ab20185ed286955f77608ca36a1cf3ac5b57840fa3f16a12d4bb1309c348f

SHA512
02cbb1d25edb8b7b23e7c489ad3b687b6bf6784a5d3453eea120aa21e7deb9141f2392909016e181a7a63b0be168816f8b60860a84f9672c4543365f2125f545

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
8KB

MD5
e6861f5bbcc1092daa496b0738197444

SHA1
44d838370ee8d34dd97476dcf5fafc8a90cc70bb

SHA256
8771169ae51d3b44801288083b369d9e0e234540b02eded6bf33d67b34e3e865

SHA512
2dc390e888415fbbeafb57a5ae108f052ef359aa315567d9d1d77fb4d753af88fd4f16c3db09045c64f0b0f774b43118f176d122b2df50496295aab6b2c34862

Download Submit
/data/data/com.bbs.yg02/databases/cc/cc.db-journal
Filesize
12KB

MD5
369f57862f25617f01f04ab6a5519258

SHA1
7f43137fd1d6eb4fd6d13001d3256241b5a4ae95

SHA256
4fc6cca35ed7716563572330733e71d1c9cedfb54bcc832e9aaa51040468a2f5

SHA512
595caefe1254d14336f21f32b91c273880dee113fc895864d8655d78c27b06262bd538e0276339eebcff4d345ed42449bbb95874e3060616e6fae3af4c9d9471

Download Submit
/data/data/com.bbs.yg02/databases/db_weixing
Filesize
12KB

MD5
7741319185f1960f6fd9fdc35b37082f

SHA1
157a0d319cd66e2d4f6828ef466ebf0fdb382976

SHA256
0a9630e5a9f712ba8b0816ce443553288537e29ad92cf071f9c713496854ab6d

SHA512
7576e28231ac1fc4f7d1e8e3d5a1573bdfc1fc50986935a6e0464ff2cff23d1c39248d0e77c918fa5734ca15278aa75ea3d8bfe089506e3c65079c75d012a6b3

Download Submit
/data/data/com.bbs.yg02/databases/db_weixing-journal
Filesize
512B

MD5
73c5a56c07f7efd9c4ff6fd2a749999d

SHA1
a9e66c558f6915645ced2169d44bf1120599b2a5

SHA256
c742865262402313bf9d544e63450ba0e00daa4a2253a9d42f8eebf7159364ae

SHA512
b21d1d3aeb4eaf4481c330050e4d92437a289168cdd7bef356389655ca034ae2db9ff475f0d9b81f59b849a8b165e41fe28e6f4152ff3eeb70cdf498b413c5bf

Download Submit
/data/data/com.bbs.yg02/databases/db_weixing-journal
Filesize
8KB

MD5
edc00b0722b0647e250233e5ad5f55b2

SHA1
39d77bb5f983ada6673859a4498f0d657cb80f32

SHA256
cf9bbf1e121ce04a2acb11a711bf856d3728a6dc69ea35ea855389b0b3048bfa

SHA512
af11e2391b18ecf653c19886365629e34122aac3093629a3a72bed55e11fb8c9e62d9f9821f4574745140c399f79996742d0f947624c0f38102dd6aa7b9fa626

Download Submit
/data/data/com.bbs.yg02/databases/db_weixing-journal
Filesize
4KB

MD5
f95c6864c4d2786d942ac0a89d2897eb

SHA1
f25b409c1ef84faeb233626e774ac6eb8984e55c

SHA256
d1cb6c0ebf5d6db8b58085fea3d50581a280e2f5c4da420265d01edcd610e982

SHA512
9b6064bd0323734a7b93c476491339b8b2a9652a3a5d05b9040b0a606a06d73eef37e8a50277f942b48762d0c5575c7bada610ba25869c08e0fa39ad2f80aa47

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
32KB

MD5
173a7e74566611ce6825510830ca2bca

SHA1
27f956275e2246235564c6f17d45deea80a8f55c

SHA256
6816412c6245ee7bfae83651c49e18965a96ddd23930b9c1235791137d43d58f

SHA512
c8f67fa1c8edb58cc810a33cf3afc0ab91052bf126fb3c0d9085da2805fdb81571bf8c7205ac1a6711015ab372b484124b7489f164658622833b8b88fdb096a8

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
16KB

MD5
e92f0a84c73a4c041856d79a6016f0b3

SHA1
d5e1bca613e9cf16c520e3cc55022991a400d9dc

SHA256
c2ea5fe08f02cbf1d3a998bf7206a6610f545b768cfea6461a1277ba262a4af3

SHA512
b51deceb35332c5590efefca7c5c2fc14c2e3044588f9f90e97e542a89c4064bd8e4d1ca9d654e6e2d471f1c9081f4e6daafcd097fbbedf3d9b293553f046bf5

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
16KB

MD5
50c09d319e3f8f3c07e0c1213af9cc54

SHA1
06ab61e03e68b0b1bddc43c52404bf6c4a5da9a5

SHA256
dc50d6a398e125a7e7944a955753abbe9e49980e04acfd136724488d8bdea4fb

SHA512
9edda7186547a261a69c28253d24faa07a4de7ad71200ac14c3ad15da2efd0430005a34403b58a97bacef26552e09e984e7cfa4e76184510f814665479b53c62

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
16KB

MD5
e89a1eb443f711f72394d7ed40562a19

SHA1
d25af6a0ea5c79b4e38c2ffff2b8ba89df00ddf5

SHA256
74280457b3fea208a33d6cc55e8845aa4855fb7e9a3c09976304db468d07e4ab

SHA512
d38d548bfc87c772608b50aec8ea73f74bebb2f29e9b4bad9412efa0bcadd09c544d9bf13a94a7afb0602e38ae12a1502cc4d219c0046f17ea42642fa937a3dc

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
32KB

MD5
5d13d0408c4cc85b51c979bf1f75f9a8

SHA1
36ad596aab0a08ff287fad1e24365e69642caa65

SHA256
06398f26a4313f8cb4dbd91ce8a367f9fd3635a4cd380716c96ae90d9b3a3851

SHA512
696f55c4eaf1b402699382a411cc571aa56e01a3b915f3a68fac0af6d59e667e49107234b450d376ca7da8bce6a8c5c431e0381fc719e075bea122bafc678b5c

Download Submit
/data/data/com.bbs.yg02/databases/ua.db
Filesize
16KB

MD5
d3e2b92c11c1fc7378b51e09375b7ebd

SHA1
bf5495b0b74fb2aa8caced0f5afe73ea314b5531

SHA256
66f8928fad56159abd620802e350e3172525a5669dde0554047ddcd797e4150d

SHA512
ff29f09709da0161faa8b52fa50b1482a1329da47e372b5e215af889cdc8f1dcb1d96a97c8c0b74d7159504105108e223bea243f3b3a295aa66cab16eb18ee38

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
512B

MD5
d63fb84c71879e08f6029a75bad3fd62

SHA1
867ab18b994ab2b80750b729a6aa78577a6c4777

SHA256
afe8aae082ff5ec691457bee1acf22d25077f7f302009932292198a25cfdd43d

SHA512
e78ccf703421892de806f05100258332c65cee83cbcbc715d9c1b6a1107eb5f9e4241c74e06ef6134a7e08b5cf1771d89cc85c032e8602410b02b75f57542674

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
8KB

MD5
29430c56a2f81ec52b539af0d4da83da

SHA1
1e30ce9b8e3576cd950febd7d19c1db8227fd8e4

SHA256
b205eb67620064b2d7fd3c4e021fa203341f445d597920da51ca4849841031ea

SHA512
94b2899641c3a752122dc1cbd15fc20c65e5ed1473de08b9fa9fa748973b5fda5258fc04851cdcb6fe560f38143d0f20a8fe812cb7f9ee286f14abbd53b0a4eb

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
8KB

MD5
16215926f24a455a85b874ce40b746f2

SHA1
a32d8e5f3aa25868e55ef8ce1ea1b7b2d7b9827f

SHA256
93a0790932fab5912204419acd26ab0a87dba77bac95fd1a4140334b55293224

SHA512
33fdeb1fdf0105b021bd974408171bfcad62f5eba7177f9848a79ede9ced08c9a23b84d588679e85ea78264d38726b87612183843ffef1edd6939be9bfbac265

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
16KB

MD5
41769a7af5f7461bc9ac3dc07b9b91b9

SHA1
1a800c8796ee8fa8e7a50428d67491c2fe5585ca

SHA256
561afa39cf2ebe67f11dc5f6a483a880de1495be29fffcfb93eb40d8b0a16e2e

SHA512
445319bb9cc12bdbc6736bfc80e7284edef1c7ac2fb14726b32665447b0e10b8429d5e5a71054204b614bb53666a415d2e2b2de74a2ab07a5192a846ea4a678f

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
8KB

MD5
876b470bc195f6355d15f12112ca998d

SHA1
daeedcb4237e12551327cd16b52d366273a269c0

SHA256
9ff72ed82332d6272bf45e4381e5c39493f063dfe8dc893864c753aa87d5c5ea

SHA512
32732b6e9043b107626e3c4c6fbec9023d94655bf7841e977b493798a191d8a7c2e4156c534fc7b65f06f708ba37b0036a0163d86f1c19b59669d6e3c00b927e

Download Submit
/data/data/com.bbs.yg02/databases/ua.db-journal
Filesize
12KB

MD5
3f68e7b2bfc7e07d05b785c227701581

SHA1
5047640149ee6a4ab2d539ca9caa936d1f7dbb91

SHA256
590318eb5b29bd3736a3da6bbfdbcb9a4b17c3ddf5478441ac0b8ab19b16c76e

SHA512
5b3dd629e06ae3d125a33c36f17150396c710f72a146fcacc98c0cfa4e6a9cfee691342bd3dc7c7f179d8455429454a8751daa7e2e55eeb00cc3477a22e15971

Download Submit
/data/data/com.bbs.yg02/files/.imprint
Filesize
934B

MD5
65cafdd543292a2803882a79dc7e3e08

SHA1
d300e01ae4f79d1f2d4f92113c93504e3a11acbc

SHA256
7b61ba2e675fc788f9f792148810b346c24a21eb8ea9eee5346717bf33d941ac

SHA512
6bd14e893c05fccafa420cac89f18c79feafdd123a2991171f82489380f9d14b5d4721f66048dbdf519d019d2dedd907a9c1a3fe96b908e0eacc28ec6740ecf3

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.ac
Filesize
40B

MD5
faa5fd319923aa60f60b7af0039f3a03

SHA1
468018cea65b8a3b7cb110e11e0c32e37ad45d55

SHA256
e0a60c3839d7ab31480e9f224ecea657fd7632961a6dd170f555102c4ffd4264

SHA512
5f8d5f121746654e9f5f2d712bc7ca7b1896f3902343acc771373b2fdbb67a0e9f1cfbcf52a8397b6d721da3f4e77be2711d154f818132fd761db41e23637b4e

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.ac
Filesize
40B

MD5
15f50c4c241c5b1d258320c02e19d6df

SHA1
55f5fbf8933caa9d1138227f3d89222105321af6

SHA256
035ebefd9aa26f8362efbfcf6f0621927a3697b2f8586560a6a5537c17362d66

SHA512
884a8eaac221ccf7bd7637f6b1910f52fb7ef84f1088c7ae3468f50f6246708a3b31120f14d241d0ebb7028712e68ac9857f21e5526c38adee6bd9fd4e6a9a21

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.di
Filesize
340B

MD5
4a0d74e14a246de85d0136d2d10e6212

SHA1
a23d1784fd6062f5d9c71f851049ce9de8ef6ff3

SHA256
6e67066f330a65b9c67d406d87feafba821f7004892e9f1632049871db166ea7

SHA512
f39f7995305cf35915cf985fa54d7981f24e3a528452736d31270b5e2c6ac3c389e4ac4f2103622eefa879a3eb81aee4951fc3d5d26451795dd6b38fb69a6bac

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.di
Filesize
340B

MD5
27d0997979033946898e2856ff829615

SHA1
4849592d423a1a5dfad25802a9622c2193db3532

SHA256
ed298c9733e46c4467d2eae70cdde58d7470eeddadfbb0d83f97dbd0638bfc8d

SHA512
952498442a8d5d60c5bf3dc076319179a208e5a73c74952d04143b60d761b98eab56721c8b1db8af0648ff71845872cee9d0876feecd20981734f28a00decb95

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.ic
Filesize
40B

MD5
282b0ec86a1d1fc709f1810f83cdff27

SHA1
ee3484f3a62f95927bb86ba3e3103a6afc10c2b7

SHA256
39ff1eb84d0e61052e15e62a904c59cbfef3733a2a4ec07e0fc125214d4d2b25

SHA512
7d2a62ca400667a70dd4d8950ea81de03063d33116c474cb98a3967c9a57e5dda42e775e9a72d22f4ba9fa2191c9c5b06b4fc368f6977a58bbc28840225d3531

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.rd
Filesize
8KB

MD5
4529b79c93f9bb9ecb1dc02e41b64cc1

SHA1
8fb101de2db8a3643f90c2691f26808c94f89317

SHA256
c477b6901912d62bbcc51e86380aa7f8a5ea55533480cf991997a6bd0659f167

SHA512
2baa0825462c45698c0b676926e1aa90383314ba08c2a010cb71babd2d7845939594ddcdec3d4c60d6cef1e5a9adbb338b105b555975b73bb976563d0696852c

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.ri
Filesize
24KB

MD5
0e97f0e9e1b8390bafc82e8c85a5eb25

SHA1
3b4ef2af5eca55f2cc08753a4432c3acaef4d573

SHA256
7a473d00b47e1c8447d497b3dd18f8a6ba5a063e0761dbbe648ba530a74fa24a

SHA512
ef1518ccaba219a40f85218cb31d8c65ab0e7647fc92ca648b0b811f6acbffd6e2d29743490c4baeb7fd1a694279e1ffb04afda3b94c93a459eaec8bb87a93dc

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.store
Filesize
8KB

MD5
3a2690521a6dc80a9b335d413f2c4962

SHA1
6107bbe2c35210e69c59da3bc28718cfee2eb653

SHA256
25070ccec0ae388dd3a631b98e8e9091a69f53df8ff80e1097aef402c297c136

SHA512
b8bcd745ad6c47c882a63405670f35d99294545e5a03427abf0335b4e4ed5773a9eff83183bc93853bdb875cc4ac61a3f48104cdbc5cb62b4517e9c891222544

Download Submit
/data/data/com.bbs.yg02/files/.jglogs/.jg.store
Filesize
127B

MD5
edf014ae7fd7545736328bf5e7785b6f

SHA1
66b9d73f7672270c156edfd43b0f271791c26e5e

SHA256
18e7fc5a173ca12f262824f2a517b807d1a7ef60677d1c18ea4916e6813101fb

SHA512
f2efdf67a36898ef635b26cc34ebe874f3b3ba841c9d43b6354341c0831d82758df9e7679568cfebfb0bdae632ce1ca97eac91ff55031bda7e55f449c17d4433

Download Submit
/data/data/com.bbs.yg02/files/.jiagu.lock
Filesize
512B

MD5
c5d6b5d2c4b017e3b999432108213aad

SHA1
24fde5c6ef13d57d311f2f7f2d21cabde8215abe

SHA256
7d51322c5774968bc1ba78eca7ae48187f62e43f7aaceef5e0047c0f9599c0fd

SHA512
e7ee7ae1a0744446e2585e0ef6c3e013b1304fcfa79fb629178d5637a53eac64547f9fe15de30d003be8be501c180c0b90c665f4032fcfc22c80203f9d90c5bf

Download Submit
/data/data/com.bbs.yg02/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
3f006930340afb040a75e796c989dfef

SHA1
3da985dd07d5679e7118627879f4d8e6434b8f57

SHA256
4211a99af22abbd0e63fc29219325d58e88d043f5cec596022b33518cfb1501f

SHA512
85b09049970e28a34ece1de06410e3b7b1522b9594f2fb2ec9979dc84316e9367c9495466393f5fa45be44614e1c51cab074c9a5a1dc9e0fdc471248c6778109

Download Submit
/data/data/com.bbs.yg02/files/exid.dat
Filesize
57B

MD5
e3290e5497ac57ff2af26689e0aa2d92

SHA1
fb8774ad6dce8d7f01f46089ebf33cf6f5bce993

SHA256
aeab79ccbb0a728fd457122be05aec7f54f635b265b9c8ab35a25aa1af4342ad

SHA512
3d35107e86bceb3691d1c011ff05b89f53f7e61b2e6c23c5003dcf1f3900f323d8f2b585237e84e9b6e8e1f2415aabca4f3aa300b3a8046b7985d372f00c8943

Download Submit
/data/data/com.bbs.yg02/files/jpush_stat_cache.json
Filesize
132B

MD5
cdfcb38cdf7610e6936e701696b4d7fc

SHA1
fc03b996f6853ed05ca7ccbcccd901839a503563

SHA256
1f981269a144328f2ae52a8dcec528ce7dcd79c7daa1e7acfb7dcb255667feef

SHA512
2a0be3807b7d8acc3fd28bfc9d4291b13a63fb649336dd4ec7e06b43169be29288677dd8af3b5e24d2bdddd21e65db5d4d10d23dd7fbea1bb95cf445b55ea863

Download Submit
/data/data/com.bbs.yg02/files/jpush_stat_cache.json
Filesize
173B

MD5
87ccc10e1953f08f2b30e543082f2870

SHA1
1b1523ed50bb639d5505e566a4e7b788b91aa173

SHA256
febc6ef45b4709267ca5cdc3de94d503aa457115ffdca579a9e10f9b5382ecdf

SHA512
40ab8029b8e842d9524c731e9b4dbc41842d46dc0c0da7f43ee40b8d4448b2d37c85b1f785521c44a54f2646b1d9ce911739107f86005536c59303ca307c3452

Download Submit
/data/data/com.bbs.yg02/files/jpush_stat_cache.json
Filesize
217B

MD5
58701cc9a613bcc42a6066bc92d75e22

SHA1
92da4d5e3e1ea464ac66767e34e473a7d80b535f

SHA256
a1b53d6840df7ac8d28c326d1c3f89ba00e70a4cf35238b7ba1100efb58d4424

SHA512
b1b9477a4347c6bbd815e86426b54a395bd4c31b060769a074c9cede298bee3166e5c77a8aa4ce887d478d7a031b95da4e47d4dda099586f8954eccc70692776

Download Submit
/data/data/com.bbs.yg02/files/umeng_it.cache
Filesize
350B

MD5
2f0d46710eb7d883980b80c2b08e2f8f

SHA1
b5a7031c690dcd68926efc50961c28b07fed158f

SHA256
e9b19daf023c61c32e3a040160ba3f33b15577fa2aeda5e8b0d2aaf66084d502

SHA512
2bdd7baa57155d546b8369658880d78f9d9021bb31bd0d44f184442dcef72b0375fa8a4e427610ea4a3a78995d4ea1346dd9822f4f557700c8977967ecbaac93

Download Submit
/data/data/com.bbs.yg02/files/umeng_it.cache
Filesize
178B

MD5
0e2ef01e78d1c5f11625242d5ee60ce1

SHA1
385f62c2198f9e9f998fe0bce3065b3db67787a6

SHA256
d35c8d3ded83924a262360994447157cab81c638541fe87aeec1104afa62c5ee

SHA512
1aa0edb7bcd3a18a4015d33abd5c411f7a9165ba3213f3ce3061924a4f69ade07ba54b8c67599569cf8a83e1045324d3cd79eb7941f54903ff40fbd299439922

Download Submit
/data/user/0/com.bbs.yg02/[email protected]
Filesize
6.1MB

MD5
d8483d973010eac4b07d8642faf1e997

SHA1
d3ddb1a5866a87ec5e7ea428526499033fc94032

SHA256
077c2fbebe645f2869479f20e4055dbb64ed3482bad057f827b09c3c7608d164

SHA512
f668b6573301f02ffbd60028c50f8b0c9096c428bdaf19f37c858d520d7d1c55444944c77e9801ef5d4423ff4f9cc5a9344319a52d34f91fba7dcc4266ab1e2a

Download Submit
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex
Filesize
1.4MB

MD5
7e90f1b9a446cd90ce8a70688575ce61

SHA1
3a9300bc8d2d6c5e8c926158689a2c76d5c61fe0

SHA256
603d12519055c24144c01dc4570dd450dd3807b753843f77d3c55949949a2ffb

SHA512
740b7f2568e23ec6da2baeb9a560463e7c4ab49368209f92bfd2532a0cd7a6b2f4fb7e3728f6de215b5eacee3d91af2b428d70befad9a14e026a6e631decbef1

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata
Filesize
32B

MD5
011b5f6d00a8595d088bb681aa7b6ef2

SHA1
e4fcfd86c6b26a9bd79b05194f34eaa6f745fb92

SHA256
1791c5f5454002077984c63583696568433d761a649c001f251170c4d89c9a37

SHA512
b5594a2bd792ccb34cd35b448d00744d23833087da46c888a056fefa3cf09d1f3549f375bea643a8d03ef810551ab87f82d74b815e9916e657478dd2e10ceba3

Download Submit
/storage/emulated/0/Android/data/com.bbs.yg02/files/tbslog/tbslog.txt
Filesize
10KB

MD5
a206ea5442f652720aa3c757cd6c4379

SHA1
5863c4f896a54faf0727bd69541310cca5ea0ae9

SHA256
98232f78de646418999a04faca2269acf90a6f48d8031472c881a20daf888011

SHA512
ebb4a12a0ee31e178ce8fed09f27ca7f95f622d881107ac11bdef6326edb427eae6a7df2181a3a4ebc9f6de443c7d5b88b7878a0a6a0f26fd3b92131dd2f93b8

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
32B

MD5
096b9135e6083b8777d3847ba9a903a6

SHA1
6617fd8be93a0c1ee8014e7ef84854d7daccb0f7

SHA256
4d8a6a747825523125d27ff11c81adbbd27996722aad6ed8a0ba0b8bcb4159a1

SHA512
ec5547fbecd0c349c29a3aa63990d14a094f1f98a1033b2ba547847a5a0f3b03a4970b442888ef1873caaba121d50be06a6a7403e9a67ffe3f98a6c2c8069cd6

Download Submit