41d201d3808f58997abbcfdf5ef5bed8551c77e3b239477445b1a2557fed9e6f

Analysis

max time kernel
179s
max time network
189s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 12:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6e918c71724d5485748d97e93b9dae86_JaffaCakes118.apk
Size

18.3MB
MD5

6e918c71724d5485748d97e93b9dae86
SHA1

6c6485034d35bdaa608b4253b06be19cb0d89696
SHA256

41d201d3808f58997abbcfdf5ef5bed8551c77e3b239477445b1a2557fed9e6f
SHA512

3707666fc52552bd314dcc2abfa4064445249cf4a9301b80b116603f17733efaaa7cc19e578cdcb3b1f03a992158e93fe01f2a4cff20c20da0edaeaf62a72c7e
SSDEEP

393216:xLtKL28Du23iskc7scZUdQ3LnEH1x70wP5ODGWy23uMVr+WN6:Kbosf7soH3TEHXBh8wkuMVrm

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.yuebuy.nok

ioc process

/system/bin/su com.yuebuy.nok
/system/xbin/su com.yuebuy.nok
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

ioc	process
/system/bin/su	com.yuebuy.nok
/system/xbin/su	com.yuebuy.nok

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

Processes:

com.yuebuy.nok

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.yuebuy.nok
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.yuebuy.nok

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
evasion

System Checks
T1633.001

Processes:

com.yuebuy.nok

description ioc process

Accessed system property key: ro.product.model com.yuebuy.nok
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.yuebuy.nok

description ioc process

File opened for read /proc/cpuinfo com.yuebuy.nok
Checks known Qemu files. 1 TTPs 1 IoCs
Checks for known Qemu files that exist on Android virtual device images.
evasion

System Checks
T1633.001

Processes:

com.yuebuy.nok

ioc process

/sys/qemu_trace com.yuebuy.nok
Checks known Qemu pipes. 1 TTPs 1 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
evasion

System Checks
T1633.001

Processes:

com.yuebuy.nok

ioc process

/dev/qemu_pipe com.yuebuy.nok
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.yuebuy.nok

description ioc process

File opened for read /proc/meminfo com.yuebuy.nok

description	ioc	process
Accessed system property	key: ro.product.model	com.yuebuy.nok

description	ioc	process
File opened for read	/proc/cpuinfo	com.yuebuy.nok

ioc	process
/sys/qemu_trace	com.yuebuy.nok

ioc	process
/dev/qemu_pipe	com.yuebuy.nok

description	ioc	process
File opened for read	/proc/meminfo	com.yuebuy.nok

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=168 --oat-fd=169 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&com.yuebuy.nok/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip --output-vdex-fd=186 --oat-fd=187 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgsecuritybody_312768000000.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip	4795	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=168 --oat-fd=169 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip	4302	com.yuebuy.nok
/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip	4849	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip --output-vdex-fd=186 --oat-fd=187 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgsecuritybody_312768000000.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip	4302	com.yuebuy.nok

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.yuebuy.nok:remotecom.yuebuy.nok

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yuebuy.nok:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yuebuy.nok

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.yuebuy.nok

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.yuebuy.nok
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.yuebuy.nok

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.yuebuy.nok

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.yuebuy.nok

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.yuebuy.nok

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.yuebuy.nokcom.yuebuy.nok:remote

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.yuebuy.nok
Framework service call	android.app.IActivityManager.registerReceiver	com.yuebuy.nok:remote

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.yuebuy.nokcom.yuebuy.nok:remote

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yuebuy.nok
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yuebuy.nok:remote

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.yuebuy.nok:remotecom.yuebuy.nok

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.yuebuy.nok:remote
Framework API call javax.crypto.Cipher.doFinal com.yuebuy.nok

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.yuebuy.nok:remote
Framework API call	javax.crypto.Cipher.doFinal	com.yuebuy.nok

com.yuebuy.nok
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4302

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=168 --oat-fd=169 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4795

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip --output-vdex-fd=186 --oat-fd=187 --oat-location=/data/user/0/com.yuebuy.nok/app_SGLib/oat/x86/libsgsecuritybody_312768000000.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4849

com.yuebuy.nok:remote
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4391

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yuebuy.nok/app_SGLib/libsgmainso-5.1.81.so.tmp
Filesize
507KB

MD5
bec24c3968fd14fb7b61cac9e34e42cc

SHA1
049a01508d829c284ff08e61c819e9c5b4c18b6c

SHA256
783b491a29835cdf0f400e954b15bef25597f352c833092fcdb9016f34bce0d4

SHA512
dba83f01291b4eec66af6074d85e7a680926dc1b19e3f9f520ff846f3845b6b53bd56b8b72374daeebd37133785b5416cea0754dad5378838f493bf9032fbf35

Download Submit
/data/data/com.yuebuy.nok/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp
Filesize
169KB

MD5
dc8ccd573300e869911b4cb9f456bf46

SHA1
492abe5cc85dc00cd37aa09e1787f561bd556b8a

SHA256
a15ff3c3bd74dce6e24400d9a02b2a44d0ab9153ef0d3e755dcabec784cdc1a2

SHA512
2946eedc57b77697b7efb38b2097eca4e2c1a6242d8624a8b8e34ab7814cd8c4166984d0f324aa767b25f1d4dcfd9264b7ff70d298fc66a1f1159bc7d3173792

Download Submit
/data/data/com.yuebuy.nok/app_tbs/core_private/download_upload
Filesize
108B

MD5
80f7825e04fbf628d7214f407ec3e25e

SHA1
f91ebe4f54177e6f0474d523171db48734d03890

SHA256
656df7b71039e6b71924b13c0b531572e21adaab4d36975934a51215bed9e795

SHA512
9193c306c47f91d0829bb3e23171aed547a66f08c66a7daaeaa9725b59461f8c237f2b10c88cbc2ae192c8ff8d57b3e96542cb9045b8c2d28fd05f738a000070

Download Submit
/data/data/com.yuebuy.nok/app_tbs/core_private/download_upload
Filesize
160B

MD5
8225fa6b8b6420f1558ecb66d4520a97

SHA1
fbc41bc0b33f435c53bc4be702ea772727330e92

SHA256
898f595fddf69e01d8d0b9b8d40abe6bc5858ee93704f5f8d9e53d7be09ba36d

SHA512
1c78e774c5044eeeca3c3bdd14264e580878fc552bc64e3a14a0939271bda072d365f8b6af57b4f1a90f6da2076de2797c714022026beb8dc4f261a527e4020f

Download Submit
/data/data/com.yuebuy.nok/app_tbs/core_private/download_upload
Filesize
56B

MD5
283dd9d81ea599a74bbf97ff7204430e

SHA1
9501bc89599e7aa411b8ba73246689782544fc3b

SHA256
003100cecb485f91f2d79786f71d7ded8e69d2129b228b4f26a768ec58637603

SHA512
2f5bd10d08287172e35874c530041073ff0ebf1de6e36eedde2dd309c135c5ccc98d8e673ae32a531f9eda68f463e10738365de687cea9b1011caa963801a940

Download Submit
/data/data/com.yuebuy.nok/app_tbs/core_private/download_upload
Filesize
56B

MD5
b75d08eca8f113d713b07904de295074

SHA1
7c3b777638ca8fe33eb50383fe830015bc259e81

SHA256
0ea1001bf928970bcbe73ffde6a07f20e60ee09cae41e22c538ff54004a73571

SHA512
998870024d9ba027b8bb2619d32c9125fa46a62c66161a57b5df6b0e57295139605e45cbaeeabc3e69ebd566a43560fc3c9c560ef7b0737fcc673cec7a0487be

Download Submit
/data/data/com.yuebuy.nok/app_tbs/core_private/download_upload
Filesize
84B

MD5
e662ab6f341473bc9f75a5b50bcafe49

SHA1
2b826547fc2e1b3f9666d9f54b753acf6c4999f1

SHA256
5cfab0c864ffefc9f7f72670db50df0a8275963d94987ee503e780ef64b7e738

SHA512
e196971b4d34889e9ce8e7d3eed5336af15cb53619e7401255e4b947bc357f2aabec746ffa633c0c4c6a6aca68f1223440bc4dd976dbb9848172aafa89ade350

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db
Filesize
20KB

MD5
38616785cca0600a03205f84fe330b4b

SHA1
6ac41a6bdcae297d56dac5fdde70be5faccf0832

SHA256
b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8

SHA512
7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db
Filesize
20KB

MD5
5a10181281f07c7b959cb93f1daa46ae

SHA1
9c71e3e8dc0cadef71bdf2288c5710b7e7324a33

SHA256
064285b9edec23533acc1937eb45fdd85c0128036927e7d21e76081b18829b0f

SHA512
c93d4afb1012e389440b675aa2522c395440a338ad5beb18188cae0f7e24a88416788c3f49d40dfa92dff69cfc891d44e4429c92c10798b8d3c8cbbe141ec674

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db
Filesize
28KB

MD5
0cf5cdf98d7572aef161b0f8e1ec2218

SHA1
ca1b1c6df08336cc9c071eff9a3bfc492ad355df

SHA256
421577b252bca455c52fae5200e399434595dff439b13255b78244c630a84535

SHA512
a644cfe1201ae6821aeca591869ab35814e529600bd65ab3a25e0b447f626713551bfc8ba87f9a06c7c7eea9970cf28e701588aa997d670b78814eb218ec8ae9

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db-journal
Filesize
512B

MD5
bfd35cccae654576b56ea8889c87b612

SHA1
a3fe0c2aef4ee1b53f8c35bedd6439c09d41c7d9

SHA256
c3be8f8821293007474ecc1a65f37b4a787756e7340a5620ef2fea105b6a8955

SHA512
a46ffb1a51d81a9579e36334799fa33bd0527d78ed778682d80ff23ecddc03f58a5dba6ffaa50169d37f57b46b8f0eaf42c56a408817d5eb1755762e6dfd12aa

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db-wal
Filesize
32KB

MD5
cb7dc574b1f00d70254c38455b9b8cad

SHA1
ac171ce8b6c532117f2856cc4899a729e51df4ce

SHA256
382d4832cfa40d981b17ba4f1ef39c2123292c91267c54ef5003de1c6563a629

SHA512
f608a1606117118b4c41e619eaf1436937c1a5fa1a12325a09696fecbfbce8cf4c0314cc65b18b42062c2c1bd6b056f310750f3e8da025423f3ca64e0b251322

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db-wal
Filesize
8KB

MD5
43a3350897ed131ce60f72211fe246ac

SHA1
8abde0f32fbfb67266ffb96856eb283aa44119d0

SHA256
e09150fed375dd80fdbf6b5beb092eb65d2f0c06c53adb45cd9665486283569f

SHA512
8023cbcaf85ea63f993d1db6f33561a1020ea908f20d6fce74ea01e11bc13080594a7cb34967c8978b1e661570d0ce7068b44451fc1912131bc0b1bb1727cd1d

Download Submit
/data/data/com.yuebuy.nok/databases/ut.db-wal
Filesize
24KB

MD5
d687e42aa29026a4cf648f763eb8340a

SHA1
88c707b7e08793be499cf1f6e05ff616d2cd215e

SHA256
321a1f4ad69aa8ebe84e2e76ce7365b22ec8499d904ce0ec79588940a186e5cb

SHA512
2b9db5fe45a88d2b613251565fc0796ce62ee1ad052d5b3638a9cf4c725a59dcadfd14aff490f0c146e813bbfc894d5f0b92f4c2a1d8368c7f230ef61159d13b

Download Submit
/data/data/com.yuebuy.nok/files/0a231bd8575dcf72.txt
Filesize
40B

MD5
c457f4afc4489090b5d7daf77f45a6de

SHA1
7f902620e428f49d7f05b69fcfc19a8124ea1dca

SHA256
d7ec4997b307c284279cb0da262aab2f9ceda974054cb28de192708b5e145161

SHA512
b99b2f3ec1ba67bf7f228b0cbd5d8097c143113451b3f7bb7224a2c6516cb6a18fa977826abc783286b44efcfd31b53e9f8d83a43cc44693439daa10e714d3c2

Download Submit
/data/data/com.yuebuy.nok/files/21c22f492aba3de8.lock
Filesize
16B

MD5
5d71be37a64e391a6c606e3df97471f5

SHA1
0b79870e122b59818d4accef777814f751eff80e

SHA256
1a7a76bdf8f91436995c4beca325cae994dcc2b2f3be2352d89610b7807d439c

SHA512
92baa2d425076e364466be93af4772412294441b9f15fd4297eef0ed932736583712be09d2ccfda2c14353074682bde0d35e050d29961b20400b5f7a8eb7d2c9

Download Submit
/data/data/com.yuebuy.nok/files/Archimedes_p4
Filesize
13B

MD5
9069ae83b7d414f909f38244f1c6faac

SHA1
3a7b0a515ad99f3bd47cb605c8a29c873765d995

SHA256
f83f2a0be9f70bda1a8c0e1c5c5374c2717434815452cc27fd5af42329db59a5

SHA512
afd0c1aa08c67b2b7e4dbe6a2da08457fae401e2ec6fe6b64cfe275e6b6f1c873bc2541da7dceb46c14288b96d4967de212522c8da95a7b07c9d6f5275e3a99e

Download Submit
/data/data/com.yuebuy.nok/files/Archimedes_p5
Filesize
13B

MD5
e18909ccdb438f64d8dd544653cd89fa

SHA1
2dc74fa635173a8e63d8484e4abe5da0e1753c2e

SHA256
086219550bc290ce09de0de323ec015c1800591dc3cb09875dbd581604c09a23

SHA512
d0bc95799fc05039e255f7ca53f0974c0bd4a1ed7c409466bab712591874c40e1e44279f9c732ac8e64e7f4d05a1741b6f97128f8c94f344aca0664844d914f0

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
72B

MD5
f58f13d0fc991322df1eec4c68481464

SHA1
fac54fd6dfb4fa6e0b0f548eb024573dca8cd259

SHA256
1d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396

SHA512
e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
143B

MD5
e226bf9446849dc009baa24a537ac74c

SHA1
b6b4de6d0febe5a29c94656ddbf85823f20d6204

SHA256
f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19

SHA512
0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
189B

MD5
6a8863dd4be7802445180fb86132a879

SHA1
318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768

SHA256
003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08

SHA512
21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
262B

MD5
0438489e26550304ace8e365664531ae

SHA1
cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4

SHA256
a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb

SHA512
6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
334B

MD5
69b4911e86ac94bfe8f67b79f772f707

SHA1
16607a1abddefb7960c66d76e3a5d36e2fefa782

SHA256
8d556fb8fc75a9f795a89f61ecf0c83b704f8452c8551c7c7d477c2aeb242d95

SHA512
24226ff54e115f95ff62e044b56cf5d3520d0b476e7f895fec689cc10243d3bac31bc75068c605b2086db49b959ba10a4bb48f17624543c8bcbc5245e68a291e

Download Submit
/data/data/com.yuebuy.nok/files/SGMANAGER_DATA2.tmp
Filesize
982B

MD5
b0fe335efadfbbc6773a3a43c370e5c6

SHA1
002baa5e53e9c2a377d0e3e24eb0ba27f7795167

SHA256
8cbfae43eb261f312ece303c01cd0ec9df38bb23bab4e23064d424c1a55362db

SHA512
636778bd2dded38655ace27b74138712684817f80fb8cf28acf897f534ae52f97302537fff34d002aeabfefa7e74cfc8d976c1eb8cb8067bbb41316dc4a80cc1

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database0SaaS/1716557898159_4302
Filesize
2KB

MD5
1b6e7cd962e9c8f5d2f38a146c5a2401

SHA1
c1cf4172e0e3b21565fe0a73525e77e5c68dbe91

SHA256
6f977b4c360c9db6d433a7e70c9789801c0f228c34d18ba2fe295646fc9834e0

SHA512
763763399d59a1da61f2c8c878bb7723f7b8a050de4d41917fcd0f71303baba0977838e613ed03b6d2df2108b4ffe371bdcc1dfa15e96790500f0eec32a009f9

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database0SaaS/1716557899195_4302
Filesize
2KB

MD5
11718103ae3139ef01c7055c6e13c954

SHA1
06cca75a26816a05880e1ddc44415dcab4c12861

SHA256
ccf200dfa7fc82a89aa573d7973abc3ce3d06fe38c0c8897ae673492caf1af10

SHA512
4ddaf0a977e6c1e7d8de3ed4fa71063e897f3c9459f16dd414eb6a3e4fdb5911d2545b5a90d9e2ce12b963bd321706e50a95ff4a53a286e048cb38396c963e8a

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database0SaaS/1716557929467_4302
Filesize
2KB

MD5
7f4d7c2ab081254128e1fdf0866ee7e0

SHA1
1084fdd5c235bdadfd9be92e5e8063caa04e4073

SHA256
bb72626e1f23ce2264e8c31ae17fdff9ef41448e078c6e2f4c6d85dd62a69193

SHA512
f5e0bacd78f58478e06326d32567ad7a9527bb30d9156d999d053d0874ffa259b4e3ca5e4a50ac5cd7d6f9a6edcd8bb34c5007b92eb4335ef9db7484881768bc

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database0SaaS/1716557929841_4302
Filesize
2KB

MD5
de28e3ba6e5cbf998e43f6104d99c45f

SHA1
798de8a6c327c7e93d4f228db311f1c8b1746903

SHA256
9a8f75d7078c5a3c5613a03e76009ac818b1d13b1ca773b2334b8f8acd7e4ec9

SHA512
011c9031c0c07819d02f1045d93ca8dad3f9fdfb92811db263a9dd7bea9d113285d4eb64875d27757b85ad3bc7b48f148e09c1e45489b275c4efedfcbb75b969

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557896446_4302
Filesize
3KB

MD5
8f2348a1fbc561b26dfbed437286fdbd

SHA1
cb085ce2e6b95d343041bcc48f6bbb3c6a7c5d60

SHA256
0a48bf3bc2f28a1f89b646ab32a9d8751ccfe8aeea5cf00cb210a9a28cd82bc1

SHA512
777e05d9fc145ec750a871c62676145aeea20cf37589fdcdfe466dc8d6b4410fac1dfc4ba45aeffaee7abdbb18178d070b2397e6da3477d862a6343da071ce7f

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557896723_4302
Filesize
4KB

MD5
65e6e9d6d110b6c9ecddea27068abb8c

SHA1
e015e5d0374ea81e3a1ca3a14a87d67457a69787

SHA256
b74edbf6fe151592942b5fdd1032b947278109712fd9da888b4b6d3e0fa0c57d

SHA512
383e83ce4bcb3e2daa1d2c581de5997d682f4172db4e65e9b6d5b7695b0bdcf8e5ddb0268db94b3e1fb174c1ef212ee45a4ec5763a7b75b9233cba953b789fd8

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557896938_4302
Filesize
4KB

MD5
27c8ba400492372549d64e0b5a85ee0c

SHA1
5fedb22a84c6d28c0df4dbef16e6e646fafc052a

SHA256
4e03ace68e5e0222e5babde28bd9a560f72234f032154c21c3bc50f0846e7a69

SHA512
8cb5768025202abc15d8eb15b6b3d57909243caecde10d013d25e515e9c631accbcafda5df2596ea75dc64b203866174378a234718cded6cfad9c76e45e16290

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557897123_4302
Filesize
4KB

MD5
465cd50f95ffe9c65827e8966ca8e9d3

SHA1
126a8cef6b58ae493fb0c3e0ef4e103e9aabd70f

SHA256
10a27391596506f7ca706e854648d278f57996dcc255cb8bc51246429636df33

SHA512
04aa0a3751e02405dae96a63df5cf14d4fc545b4532943f3db7c77392898c6dacfe6cff254a8c6e35e47e1e52f1df14977746175fc5cb6ce3edb915b4db230b9

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557897230_4302
Filesize
3KB

MD5
6f85ead6e312e41d64e542a884ff89d1

SHA1
a81e7199bd7e1e83d857b03c40db2c2c0f4c7e27

SHA256
b68f2aac5d4d859e75fc9ca15d1b168867e1d47a0acc1c03fd3b7011287d866b

SHA512
5e9e7f7f169026ba672cbf1f6c601ad707dbc69f72df3bfe570736388cb9c0d07f1e96291581ee78d5eaedc482b95ec1d6a2e529ec555ef3e760d98477830308

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557897300_4302
Filesize
2KB

MD5
c98d42594fed942b261222f436f7ad10

SHA1
b14c14e0555aa9397d79c5b8e3f92d607a9636bf

SHA256
7e7b52f27571f17a2a04cd447030bd62832e37c5def6e0bbdcb1990216ac2590

SHA512
5da749eee5304cbfeffbd132c1af720b47d119bbc257c8ea50e25921aaccb5abcdd96080083d5ed3d5202b7a591913c0aa14d8de073707679521c03dde68859d

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557897501_4302
Filesize
3KB

MD5
dc13698eb46216b65ad042aae677b4f7

SHA1
1f6eb97d554a496e9b84a2fd2f0094f3a61f7cfe

SHA256
dd2960aa302a971b93268adf2b1270c65b76337f462ab4a33b5ce232aaba15d5

SHA512
f51d534185c517875e9fbcea157a63d6ed629a28b742a111d822136bb8ec67e72a0e6f1d405ba862ef9343bd296619b9b9007d532049b8ed3fe40807944af21c

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557897784_4302
Filesize
2KB

MD5
193874379ddc635e408cf231d3f3106e

SHA1
1c5f17b10ec0c9c987ab426e6820026a6b10e102

SHA256
26a1db7190918e2528cc9a830152aa9d0ea7d8e662c07471f17d5da1e3540507

SHA512
be5ac5393944322cf02257cb09beb7c69504f64d7e9e4077ace0c5f28c512ff84aa15a832aa83a9219e6c9ca1263dfde085805a93bf76d704f7d7ffe2efaaabc

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557898759_4302
Filesize
2KB

MD5
cca2e524f98e29d93df7a53ec24cd223

SHA1
43ee9de6efbe2e80ab93fe75cb2dd58760111bd5

SHA256
fd2aacd67c421d7e5944ecb1b5b2d988c917662ce8b8460d07adec38fefd4609

SHA512
33e1f58e254b439a3e1c4027169ca9798ca777715f584fce2bcf612f14daddfd128489218cca692f3d3bf6ff793a6792fcdbcecfce500de8d185806d8fdc5338

Download Submit
/data/data/com.yuebuy.nok/files/__database_reborn_January_one__/td_database2SaaS/1716557945413_4302
Filesize
4KB

MD5
4911d89d4b279f97ff7ad1aa79c8e6df

SHA1
c8f7a1f4f2541fe575ff61af79185e64a4a97555

SHA256
a87a8f71b5021fcce50cc41cdd3a6d1d25475b556425a1194206c964cb7fcfc9

SHA512
3f50831b89d3489633037b578071f5d667d923e3143461ba0b4e854ff1552277ece36c37197d751e9ccf0d794eb544adae935ec829ecfe15f7908b9c3408b1a5

Download Submit
/data/data/com.yuebuy.nok/files/jpush_stat_history/active_user/nowrap/04a31503-a101-4212-b64d-6e841a68e7ad
Filesize
159B

MD5
4ef987780f0f74b5dab865a079d1674b

SHA1
e469a4480a4d7bee25f3b0045d7eeee78819a0e6

SHA256
5ae84ca578c1348fcaa366f2d613491eaad1868f0d0d51b110c00621d3524b85

SHA512
bcb22b9853f78c19096bb093b757d6e7971879e961e85151d617527c3e35f805dfa8a3062f4ad4cc2e454173b948988d2eb40fc89ff95bbf613f4ec51a356cbc

Download Submit
/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip
Filesize
65KB

MD5
0c2f2989749ff3910446998637c28286

SHA1
054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3

SHA256
f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d

SHA512
72acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f

Download Submit
/data/user/0/com.yuebuy.nok/app_SGLib/libsgmain_312768000000.zip
Filesize
65KB

MD5
522947eaa37b029a247e3973f3be3621

SHA1
31c88e0d7c9b51904c0f598e80245bba41b1c7d9

SHA256
d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

SHA512
f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

Download Submit
/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip
Filesize
10KB

MD5
3204fcefcc0eefb1fa76bc6f0fda6264

SHA1
b5a5fa1723ecc6c531d7728163489d72ab20cf6e

SHA256
15da7c769b4a6b8c48e85a27c3e052d6b2c88c53e4098ff4713f5afbc591102c

SHA512
a7ae4bcc5dec798d8b6934a361068698bba74aaae0e4443b73ed31f9696ca6f1953349e385172a5630f587ed64a17801ed3e1651c3a20d7b20ff3b6b33711a2b

Download Submit
/data/user/0/com.yuebuy.nok/app_SGLib/libsgsecuritybody_312768000000.zip
Filesize
10KB

MD5
f59597732a9069b73e16c027faf78d05

SHA1
e3558f4e5041a6c6d4372001bed847f2ef77958c

SHA256
9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6

SHA512
7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
3a07616bfeda964c0d068645538f0a6a

SHA1
16111d053ddec0892b9d4e07d9b51f1ffaa52cff

SHA256
2426f26151b0ae3df93182ea29fbef36d0f83cc1d56af34913e056165f77e709

SHA512
0040e9df060f593f3a232555c6047e8be9ec9911bf3a9cdf90496a110fb8ebc43741e618da7676cde24549320cee3d752340c18dd34e93d5e4f606b7096cdac9

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
213B

MD5
6ed5c32b7a46abd1131b18f4991e1018

SHA1
b58ca0a691daf19c3638dd542159a7ab25c995dc

SHA256
2f006ffe6d4e669631755f642ee998447f93db4a81e5ffb1462fb238bb6dee40

SHA512
be917ca954697e0ebac4fb42fc3a0ee39c1123f76f43bcbb0f86cfdb25b00f18d67c07f32654d4baf4466032ede0fc56430e4462290df654c124d9d0aa22ca37

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
a0e52461b11c3b7deb3881c469aac653

SHA1
fd73505e669cd2c8b3cde12991b31a9ed034c9ab

SHA256
8b843447037dcc5626be8178356f8d12f7f2fb15a874946eaee6a9ce404c871b

SHA512
36aa724ad310165fb481cf5bd2ed70b1e0ff514269dc074e0f555fb31a1b84cb4976f682a8a498bb106ebb561e537146bc4f2ab487b6bb887cff46fd75c31826

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
167B

MD5
d5d5f1631689dd4faf1cd23981ff6b13

SHA1
0d58c15d28b2d691e90f941f39ca6f06eb49bdef

SHA256
56bdfd2212d16d4a0a81e00b5f98abd54af47f99bbcbd57bf54d267e80150c5c

SHA512
5adaead1bbbdda956fa37502aa1dd6ebe7e38d2fda13861af50c04a0055f0d37ddaad8b9bd656b8693c708b9a172575a76afed758e4d72ca08e08127abe84950

Download Submit
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3
Filesize
512B

MD5
d935280c5ba4b593c71593f05d0ec38e

SHA1
72bd2bacf351885cf3ff078a14ac56ebfc97ef0a

SHA256
1cf95ec1c46061b7de0724672d29218e22733826d3c61721579f3ea7f27ec944

SHA512
d85f4010bc6079c9fd90321924b24e578e4b16208481a7a13dcfac8513983514b289683611de042eb1f33eb27e2b70ea7b2c92d9c671c75d8f2298dc642da3c2

Download Submit
/storage/emulated/0/.tcookieid
Filesize
33B

MD5
ae6c3312818e579d111df85886a75562

SHA1
44f94687fc5915a3571b8042f9f0b49f022fa805

SHA256
a115ac3812b61bd4ad5c542f1b45bf94e5dc425f745d10095d060d63d44cb5b5

SHA512
267bbe509a56f3b0d78295d98449197383c60e25a9868e3fb5bdbe056f1d126dc15fe025ad2c14a374750888c7603853b42e3210fca6c3ae8e12d75e1cbcda5d

Download Submit
/storage/emulated/0/Android/data/com.yuebuy.nok/files/tbslog/tbslog.txt
Filesize
17KB

MD5
fbdad6cc6670451d937a02c2630f0502

SHA1
e62e92f45897b9819fb5623e857966d0836ccc12

SHA256
39627bbfb92afccfe4b47d36c1f79f802da90e1afe28821568a1be17d0078507

SHA512
650bb2531a1482a746f6fdef3adb129a0cb0302fd82f432dda09022949018c35731eff08dc356e115475c3838d8233380eb43a593c0ff277034e2d946a4ba2f8

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
32B

MD5
76ba0a17b4528560902e061aa7df0670

SHA1
6adf730348fc2456a03ec9cfe09bce55d141515a

SHA256
fbf64408ed6927751be2d58548d514ee543380b8e5db055c97ba8edf471b04ca

SHA512
cf83436c07a19d7c79157ea22ff2f7af1c96155afdf57fee949d9fe484d276fe4417b7cfebe2bc01b95ce64a2010261d69126d8b2f5fe56993da51beb7dd56ae

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
32B

MD5
8a83af7cad03cd8284a810633def0e19

SHA1
1f5fb873cfee79fee872331b06d271068c5328f8

SHA256
9219f2154e0f63cf8d357bc2a47e7d2e532321023d3b4e9c6fc6771d94d97ac0

SHA512
aa353fdb94f4c5d22e62d47f2a023ae2851c4910ff65f2f5d1e93ba13d079684c3051925fde435a44609ab6b3d1673be93f9649f221d90551f06c8621cafe237

Download Submit