Analysis

  • max time kernel
    179s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    30-05-2024 12:59

General

  • Target

    843ac15f4fb024e10b258bdc23de0755_JaffaCakes118.apk

  • Size

    14.6MB

  • MD5

    843ac15f4fb024e10b258bdc23de0755

  • SHA1

    986c655abf3370945af2c8da904af770856a0105

  • SHA256

    8c93c50dca8d8e49e612bf5ed10f2381c3281e9683050b873288607d3cfeba6a

  • SHA512

    fd6f20b16021ecf54d26912c4f75d6917b86cde2cd38385fee0104b28f0ba890dc74fa05ceb27b5a0c08a73612472f4b54ea8fc190912c9cedc70b3a2780c706

  • SSDEEP

    393216:FyslJIEyXFl9xVxSMKDxgKDtpNjTCsr/3/qeYM5PqUb:HlAX/9xVcMEx55TTrrXPv5xb

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 10 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 4 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 2 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.news18a.wangshangcheshi
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4507
  • com.news18a.wangshangcheshi:mult
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4581

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db

    Filesize

    36KB

    MD5

    4cfe777c9f6e7859f5efe2197401d8e5

    SHA1

    bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a

    SHA256

    c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231

    SHA512

    6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    6728640db4b6fce5cbba9825d44aa508

    SHA1

    21b4633b41c1d8f5e4d734a1796b8070a484b3fc

    SHA256

    dc06e62563a03ccfdbb4241cf45e0e17a60a08f83cf9df8b9a372f81e36faaeb

    SHA512

    2f7b5d9a3502e0a447f35819015d607bee659fa5e89164d8c78c014130cbe960d4d8b921bec0930a81b5a9c3946850407cb3cbf711dc4142e579c1f685cf9738

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    217b778c12b99d2e18bfb084473e3719

    SHA1

    4c81177a3135ef64d76ef09acc1d6c76763bbd46

    SHA256

    c46125f5185004ecb28177166dd6f5e4c565b3810cd803e1a3f65a951c940d45

    SHA512

    ea16f0b6cae90593e3f6d0025554f1140f3423d2869a03226c3cca12500b6af0ed5de1507fd76f4ede69d1257080fb0b5bb525f5efac63b34b16d01aa0e55d88

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    2453b99173de53a6f73fddb325234472

    SHA1

    9395c352d372777df9902deddd3db84d0136e51b

    SHA256

    ef1849945d9e5a57a01959cf21d823ce390de65187dd8774878300ab0e04c02c

    SHA512

    c9042fbead5b5f18060732e9148b734b85f1b22f6bd4a155d3cbe5ba9a709aa7ab537e4fba0df940cd5f6dfafe6998c8429047ac6ed6424909913eeab3c18a40

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    43743dd8eae26e3827bb13fd7811973e

    SHA1

    d93ab9bcbc7d3a2beb5d30ee3e22cf259239fe02

    SHA256

    4ad61338ac7d21389b5f940aaff596d845ea43d8eb393f508fe891e279bf9bac

    SHA512

    6b325471178db2567f02546187a8cbdf009b3cc068409013a8f24ac8aa0b0fe8b49d6ef780ff312f2da2d2471fff3239e60981e9b451884dd5e8f02770acf0f4

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    63f34465c78065b054da9303e699081c

    SHA1

    d583998966b56ce32293c49049a375e6076e45b3

    SHA256

    60e1122a7ab51cae29e36df9645db9a96c0444024a10932bd674fe9bbf22ac0e

    SHA512

    5a2174775aa4c01e25432ac04d6967e70d108462f3adefd7e20812c83a58b357dabbfc9d2790c06273a4f193076ef571b2100bd55bc8d22cdf5c54c81df61846

  • /data/data/com.news18a.wangshangcheshi/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    fc3f3708b23b553b1368a5c7488fac61

    SHA1

    f83a3d5d108b66d049639ebb6fe763cf379ac557

    SHA256

    f0d98f3e4063d7bd287393cf4c709364cb4c75741615cfc342d087714f30f94c

    SHA512

    44fc5d9231b12f6f21d51326b1ea9d604d16ace8cdb1c6f6bc41ed7099250bfce9b28113cdd296da6c0205657a9e761e93a34dce7ed3024d80e4b317068a16bf

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db

    Filesize

    32KB

    MD5

    31e31c20383d7f53ad62e64f2a8a6723

    SHA1

    673bae0cc1c9818cd01800bbf8ba3b89efd5f6e3

    SHA256

    95c5f844e5bc835b9de66971a46a75ff1fc59507b30ef02496ad89fa26df6de7

    SHA512

    80625692b411e39ae319af505cf5a2eb9c7f2dd07c74cf53f6760eea7c7256040edd44b2d6bcd4f3dccd12fc77132cf67b1c80dd25c6a70d392821fff777b891

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db

    Filesize

    32KB

    MD5

    4cac7d31fb94d5c9581893537f64c5ed

    SHA1

    96bef3288546196ac3058b5eeddbe9da1d999fe5

    SHA256

    d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

    SHA512

    0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db-journal

    Filesize

    512B

    MD5

    75620086730d286932b4310db19c835c

    SHA1

    72a71e4e830b039ec4857d2abf1e9ff99a9d968a

    SHA256

    b88b03bf1e79f14abbef81aef68ca89540f8e5f8206677ae03445d88960b1ca7

    SHA512

    7bda8116adfec853f0aba877cb5eb2ea224a386d4b99480ccc50f0871e5de3bfeb996dd1831b90a5f4fe091616c890ccfbd504264b335eb3f4ce41f73a6c3bb5

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db-journal

    Filesize

    8KB

    MD5

    8583ed13a7e5baa8fdca564e4cac8650

    SHA1

    04d10097845f2221c360a8a8857b3133b968be97

    SHA256

    619d2e1cb8920deaa55a33e7223bfa1c2465234ba7d4991746559af21d584eb7

    SHA512

    93434ed2d4b654df2ea6533e54cefdf9119fe0ea7502f4d9114eb01ca5117fcedb38c272ba5888b3c1c2f728ddb80c195929000a8032f824785cb4ffb81b522f

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db-journal

    Filesize

    8KB

    MD5

    68536b49ecca32154315eb38b4c43c61

    SHA1

    a710468c03e9dfb0c5486e082e1e5d455500ad49

    SHA256

    fe1b4548900137f34c87fd564939d6affacf09bb311f2dd58d3cee08a0b8fadb

    SHA512

    3b25ebd171c055ad9286b62c802d13e3053aea554b1e748c87c860b27cb4c1f1c5d6941d4e399919f0ed7c5aa51c4709c07a538ab51289f9d41bf8b98ae56e33

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db-journal

    Filesize

    16KB

    MD5

    2d6f5cf233c759d7cdbff565f1785ff0

    SHA1

    a838c630a2ff65f7c95aa033ec33188c98792825

    SHA256

    50f95d173ef1fcba55615baea0ddb403ce30018a160fb47c9372901483792f89

    SHA512

    5b2de43c60315930b0fae63c8fe126244942d8e0cf5d9334ffd82da01c5daadacde88e7a4edce5ebf1d831815d97cc12218a2d560ae88c2ac18442797dfd74be

  • /data/data/com.news18a.wangshangcheshi/databases/ua.db-journal

    Filesize

    12KB

    MD5

    c115381a6db84ed3c88f4f26e4cd0b40

    SHA1

    23922b6908112b5998591c421e4bb92b8751b135

    SHA256

    451477c2b5aa0fb5b1ee90cc822c06234bc258caf4de057d3e9fb1ff6bc8ac6c

    SHA512

    f41c4610bbdc93f162bae2223326c089b56f831769d4223cd51af6c108e9a4ee365e506a3cb20365cb6a620f3087948bc88a794e511c3520244a55c71920f865

  • /data/user/0/com.news18a.wangshangcheshi/app_crashrecord/1002

    Filesize

    237B

    MD5

    dfd58b3445216c01e6c0dabe894cfcec

    SHA1

    1c01652f1b37fed7b1412a13c475d083f3d2d50e

    SHA256

    15a26e3c153c2ec41f1357afca8152a03a319e3fb1b6658d55dd92c26ae1a95b

    SHA512

    88d74eef7743aa013ffa39db904bb73104fbaa9a68c7a838164057197950de5da66906418c2d9d49b2165633c83084700d72a84fb0214ee2e6c48e683e5caab0

  • /data/user/0/com.news18a.wangshangcheshi/app_crashrecord/1004

    Filesize

    237B

    MD5

    8b9d5e162d20d1919c62aa95ebe6e7d6

    SHA1

    f0495580aeb701790a049485a9a2e93c009ec3ec

    SHA256

    d38d37fe4e341a3fe1707f696694962341890dc2568d304ad33371a78c6e9056

    SHA512

    4ad78fa00b8252407de2e713aff3a0dca1885e6f59f5e3e1c03eff72f7e4cf670f76906c9f30272b3db4bb56e1bb3f295e1dd0f29ca7bded433ac839a8da0655

  • /data/user/0/com.news18a.wangshangcheshi/app_crashrecord/1004

    Filesize

    242B

    MD5

    d9de921c1688c0bdc3ea15cc6b422c52

    SHA1

    8c714f8665917ab23f05d4c3d357e54f1759a727

    SHA256

    823af3ccfa53ba0e51b2c32177b06c88a9dbb85c4e7ca53b20e2b7cca8774c2f

    SHA512

    5dde2137fe8ed6f4eab54260842d108866cc29b203741511043de59b408397aec76e98ab17235bcc159e82a2c43dfcc356c8ef0c424cf9d5e613e56d682e5300

  • /data/user/0/com.news18a.wangshangcheshi/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/user/0/com.news18a.wangshangcheshi/cache/-24-10387-90105-11179-112-68-96-18105-19-11762-27

    Filesize

    347B

    MD5

    11529ab272c81ab5aa7f1ce2e168d52b

    SHA1

    ffde68dd4fb9cce40f1dd98960f97d440a08163c

    SHA256

    b1888aae98018e1cbf98206d8be9c17defbb0f5a55be8f8504e31dfaa2466426

    SHA512

    968e0347def67f9e0ef511003a83f0646476a2e104680e3d16389727c552fb47cff5ac6c0c2cd6d8e5096156c4e47deaaedd5b528e7710af530a0c8e1ec7c9a2

  • /data/user/0/com.news18a.wangshangcheshi/cache/-6-98-1109818-9256-89-61-99-108-44112-9837-82

    Filesize

    214B

    MD5

    e2937b57f9207e67af8e3e0263d14df0

    SHA1

    2626d87d8bf03771acc16b8a43c335c66a171d75

    SHA256

    df5cab54b71b3bf06b87c0f52d01f4352f208ec6ad7b54f6418ce7747498863c

    SHA512

    008bf08fb35736358dd812fcc8dd5670c636abeb507375668c5b2e31cc70663ccbf67ab6151c607d717307b1842f604643a0544f9b04d0e650987cb2c1624cbd

  • /data/user/0/com.news18a.wangshangcheshi/cache/66-8673903-28189126-7154-90-20323-87

    Filesize

    1KB

    MD5

    0c03171b6b0ef651ff8c003374b683a3

    SHA1

    b965fd6caff5061a79706c46430c67c93655de4d

    SHA256

    10a1b57eed2d84921349b06345a24ba0d5bb3b2bd0fb8c78edc37bc39888cfb2

    SHA512

    b1aced4387ff3f8c9f963dd10778d947caed4b56d5f735a56614359738272552bff000cfb2c3bd2077af89ae2de49af3ce945b1ae80f77c170dc63944a119d83

  • /data/user/0/com.news18a.wangshangcheshi/cache/uil-images/20703129450.tmp

    Filesize

    717KB

    MD5

    860252201ae595d31b2b09a79250300c

    SHA1

    768372cb4653ad54fb6c8264c5149ccfdb003a6e

    SHA256

    9ae632f41f58b8de0a92100ceef35db5d68e972c6e7fa24a4a215d15ffa5c930

    SHA512

    0a7a12371015cd1ece3e6abc2e1df34b16b4cd139b219f154f966b42dfcc9b19589dcc57ab0ab04905f01da6c8c916f545cbc717aadd35f828a03c24971861c8

  • /data/user/0/com.news18a.wangshangcheshi/cache/uil-images/20712364660.tmp

    Filesize

    678KB

    MD5

    e3e520c697e361436373b083ab049c6b

    SHA1

    f76c7ef440e03445c5e5ee633b61b9d3fc5cce2e

    SHA256

    3459578c272e864508a9845b7efa31ac1976115934abc54d1c1171638092bcc7

    SHA512

    493315474708e6eb791363d762760e17e675b5f39b7d10cf97cc004ecb24d6c22764ef85b5d696f7c6ce13ee8f1df251fb362c3104aa99fe2cf21b61d19f3030

  • /data/user/0/com.news18a.wangshangcheshi/cache/uil-images/20721599870.tmp

    Filesize

    671KB

    MD5

    864b41bf4212246eb9fad901fd7ea800

    SHA1

    ca25f4dd1221671a7a78ffbef1b168626768319b

    SHA256

    10694a0056279560b29e7ad0d754257fef4d17eca760cf5323ac86291c4995ea

    SHA512

    835d352cbae7c5d37ba53b148723793db288b54b6eb73ca906648e198e411f6bf1e977dceed64d55955258122db1b1d67de93105aa5f6e530c41d9c4742695e5

  • /data/user/0/com.news18a.wangshangcheshi/cache/uil-images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_

    Filesize

    52KB

    MD5

    ffa57b721260726f1d6166a46109fc9a

    SHA1

    5c1d1e613a3a43335b82e6bb36c4ce27d8b5d403

    SHA256

    10cd1b96fac9fc81b9e39489aedca0ad7609c766e751c1593c13a7f7ef0a8ddc

    SHA512

    022ef7b90735cc7a796bb0cb8ac05f3543efef886982652b7a1b576d635ebfcbbeab68026bcbf6bae0dba9d92ae4a8d588bffd5c344719687f67479cd90b2bd2

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    1e1ef3c3280ee6036ad8dc606b8777b7

    SHA1

    7573ba8c9d49d156039fc68644ba56d183f9d738

    SHA256

    8b392206169e5c695959197ba1bb4c06203b27c07b600e3c24b1960b3821b8bb

    SHA512

    ae0aaee1a533fee2871554935eb811afef6bc588029abce846f87fe4a859b473a646082d4535471d0b5939fcfd92bc1b55496620b3e128e333b73ffc7da918dd

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    37d0a7ed864f614d2668cc4efc80ea23

    SHA1

    fb3d9250b28c91f61eba15c9fcc1a050c17cc8c1

    SHA256

    160c3e0d347ca3e13a38c5f8a3b679e9747043f39bc15cbde4f0a04b20345138

    SHA512

    43f20be1b458607aea2de7dea244a712c0ee400d79a72df66c9cedc99bfa12664cdb49448958387cd70669db08591cbc7fdeefaf2bf5ba92e97963cdfdb830bd

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    fbf1e34bf34b66a1aaa02f8507f42ec4

    SHA1

    fde70cda01696c41baa8958e4ef06be4a7af9cee

    SHA256

    7d8b46fa7e7af43a7ef17247f2e8d63a32a5c24716c5ebfc06b0e3b4933fac94

    SHA512

    4e6beffb58b7347998b81c67f668c5ca828620d457607251dcb36c4121f1cc399a2a722f9de97071b59f2481708edc3da84adab0c0313b7d67b25a001e028320

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    340da3beb46b5e3021800a3bdd86ae55

    SHA1

    95939bf34fad6473cd891757caf9cc92ee566faf

    SHA256

    2e8fcc40ed20ad94704b6fc97fb553e1de0229c6f717357a0a15bd655aaf9c8a

    SHA512

    3a8ac662dfeb4a254327aa130790477985a6ed64b853025dc0f83b2a7b1fe931baa2464ed243e559593552951633c59c6f6df6a1de1e542c3b2b71f4f6bf1363

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    4144463cf130510e98e9f131fe552a95

    SHA1

    86e9cd67785cd5f4ef9909a2d858645ebcd3fdd9

    SHA256

    5f52ffaae26cb0f48014c2ac5f2eeb483f3a5bf25fca56419d34e6a3d2a60590

    SHA512

    e614a1d9a562ac1fa76dce8e1a570b59560bc69d9b74869b8cd929bd858408ce49a2f88a09f380cda480727fc4a9ad7080296cf7645c4c48acf3230762190ba9

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    64c32b4eb9d23286fbe7fe5c251b2d0a

    SHA1

    f204f4861eba6638e3ac12c8fa35e3e749c75789

    SHA256

    71d51f5d75013b66868ff516d9fee381fa6ac3142c0d7db56096422746d38836

    SHA512

    236c81c5d687cde21345742336d3b0198cf09fcba7ba443e97d7dc042d6b244a18888632eb1295dbac561d11782141f1ceb7dd1b16e448b6d8272137cee34c75

  • /data/user/0/com.news18a.wangshangcheshi/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    45b0ff018e221ff2dfbc7f00986ebc18

    SHA1

    5a9e3d66ec2476fd2374c9a0f3068ba39c83c3b6

    SHA256

    29e1aa4418dbbda54a4bb33a5ba679dc5398af0129f2ce7a6d76be64b54286ba

    SHA512

    90514a1e6d9ef24470be0ff3a8519fe1543a46cefec80033da47623105a46657a0c8ab5901d9f63e3a6b8c07af3c61ac9700bc9535d9f133aa4a915b83c81e04

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    2c8439b2aaac52646bacb845c3469d90

    SHA1

    d058f225527ea86adc064abaefafa708823088b8

    SHA256

    9522a07dbdd70cec65c81c3f7f3ab3c4d804e1a6cab83f8bdd1408d051aab22e

    SHA512

    fe98cebbab5f406ed18f9855f9d48871850797ddc463e105b581e0964d570ca645cbae5e9fdac303a67dedbfec8151aae8c31efe7201fe0c4df6614a16656938

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    6236c6b6108f9c46a4e062966a081db0

    SHA1

    75a0adf468900390ca549b0b68ff0898a25a9f3a

    SHA256

    d62af323b5d53d873ebe2af4ab32abcb99528a601ed76d27c1ad08c9e1a02a1c

    SHA512

    8b49f1cadba18fa4cffa24d147dcfc83f3e77a2c2fa56171437e85a3d6a7d44bf8c8abeb651fa721f388635c5d00ea58ca07f6be181b4660de70c85716e70c7c

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    e2802c3b82c4a5cde022cacc21bd5bfc

    SHA1

    0f64188213de0be544718f2987aa937b1ea98b87

    SHA256

    430266a9e87d7a7e17bcfc8f75c7e67a6e03b8dfcd610645b754fb212e9d9561

    SHA512

    e2f233aa3fc37f4f012e0dc7e9c09da4034d756cd24316eef1b80abc32753cabf5e247c926e9392cfc97d8f7a6e6557a9e72d396fb26109a0d3998152bdce135

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    0075d0e6bfe631879b45bfd8b7236eb7

    SHA1

    fea32162b8551c4e101ccd7f4e9d0c54eac0c4f2

    SHA256

    863bcfbac9082062e5a2045b5a3dd91e7f55df74ad7c60bd215397f70b552c2a

    SHA512

    f6cf803f58ee138d15e36fb128eca83e34a26ddadda5e4673aa8971f99895da6ee6d3cf3f4021e8c6957a2d3d5c30718f81abd78b1bfff71e021f86ece8b8346

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    60681633eb635f65133d67ff1ab80e8f

    SHA1

    96b6470e07bd1e26567982f3b60d0388f8b067c6

    SHA256

    059b8087dff9e50cd19ee9b3d7992958b4dba87950fabefe9af338242516b536

    SHA512

    7b9d44a145c70571a3e9177e1234dacf1ece216e5203439ca9c7002d9d16f5651422bc6b1167ac355a89ac4083b5483fc2050f1ab10e98540ab18f3ebc5d804a

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db

    Filesize

    20KB

    MD5

    fdeda97ea30f8a8ce09e793c638e1199

    SHA1

    7a05b646f37bfb7b96e0f0a3855269b930312425

    SHA256

    5240b0e488875c092cdad0dd9773ba259ded767d97b0d710e7715fdb8d42b503

    SHA512

    5059e848b1756754705f49061bb413e0d5a2ce8fcb71da0bff85a0a6ee6323025e66074fc871eaef029b9b9145df8f41ea3f935a6caabf5b84f7a2d17f37e2fb

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    512B

    MD5

    5bf7bb89a36fa8c4013f9ed0d56eac41

    SHA1

    82183b800a491c7f4b8c4aa4888a158ec3260f8c

    SHA256

    e473d5d602b82d276780a84b1142d9c0fa9127782e78428914393ee88590de32

    SHA512

    d3f37bba01fcb4c1453a4ce344858ebc012d4bd9838ff5d97f08bf7008130ab670ec648ddfca9738e945c3aa2558f8c4df512ec7031d84bb64675d9fb5abb482

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    8KB

    MD5

    d429f08e61003be734d1ec939bde63b4

    SHA1

    5fc0dc78d0eb38d24b0e8a529f6edfbfa4801b16

    SHA256

    5a07f6d0458307cf8310621a55b4b82d23b6dbf1044c36510e9287397d9661dd

    SHA512

    a06625e0d650c5e8ee1a098be001ec8f18df6d3f14b8fe9cb64cbf49b141bb0eb85b4531f647374be33950a9e30877292ae064cdd69aa0663d95f5d936f2381e

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    8KB

    MD5

    efedb35f19e90f4130b341b396b84bcf

    SHA1

    d302aa9d34196ae3b2bb46a480679e0489c0ab00

    SHA256

    fcbd4bb7bbe7c41f621cadb9f05800d7ccc97cb74fad25bdc0ce5009fc82a45c

    SHA512

    e8f4cf90ecebe47808b52173c3798f4b3521fec4a5a42e44cab103b8d67a3b1ea06c67f57e60f393d7aafe05d370095d27e0e483372c931af403caaeef5b3c52

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    8KB

    MD5

    f87fb5c978c0f2fe4cc1c0fa26cb41d3

    SHA1

    f20716e5bfa055a3abcfd208752ba06f971cdd78

    SHA256

    b86d79e3174f0700dae4b49a2c2205a384a0789363177c19568f1beb786ca8a9

    SHA512

    03e07ca676abc1769b278a9244abda27d2381f3f70b6cc3a064caa011da77dd52a9060fc4e7ca5c12e4e91b80471b900abc6f2306a0e2fcf381f0d30f92cdbc6

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    12KB

    MD5

    16291fcf41befb6f2ab708bfa919179e

    SHA1

    30fd4ba63e1dd6c7376794c7989ea8401b551094

    SHA256

    a34786c270d459d4bc750977e0a95399e19b001e7fbdaefbca58b6411e5617bb

    SHA512

    7218ae32b831bffb9cf6d917a40e85c1a6ad1ea089dfc4cc808a4634d01e0a34b164807a52c14195a42e88dc6f3fbe9f65e46e4061f8b75464865ecec624f14b

  • /data/user/0/com.news18a.wangshangcheshi/databases/database.db-journal

    Filesize

    12KB

    MD5

    bdaeb7e49420361947810b248752e064

    SHA1

    ab8844bc25cfd92bd6825f489cb80bcd614501a0

    SHA256

    e6e5182933a8aa95a3eaf9af51bec7d5c6411b5886710af4f6a66a50fa72e563

    SHA512

    78fff28424bc4fc238edf129fbc45dca1536c73e7169f312133203b852f3d96c37cb91eee93c5ef62944cc0f7f23488f589843c42da509d5a59df7be8ad878cd

  • /data/user/0/com.news18a.wangshangcheshi/files/.um/um_cache_1717074133267.env

    Filesize

    1KB

    MD5

    99854053b1b5bec0f8978dca79346ade

    SHA1

    0a9bdd8bfe28b1b0286be574ab3a0d590692216b

    SHA256

    ddc962306c37997232f11abd43b37a6edfa68b9839a53a6f70f67891b20db564

    SHA512

    a355a7f8dcfdb086ed93a6cae7878f6a2986d0b4f9b2c211f773da6eafaceb916691bb18b1276788e6b9a96d650502e30459eb5e12854cc3bd6c9606247a1e4d

  • /data/user/0/com.news18a.wangshangcheshi/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    71120adf3a514ff96fced662ad75c594

    SHA1

    b5b2dc0a22ec42fd28255e81ec6597acc7a5963d

    SHA256

    7d1277a028c7493fa7617645ebf531d58767c956034fdff31940f9dd7d6afdfb

    SHA512

    1649c8da38a6031809904999cf16582419fc02f8b96f868240418ebee7bb3b2adb804032f28c7a0f684f75175e44adb26e28b9bf7acaa3cb5c7b78b751c38e4b

  • /data/user/0/com.news18a.wangshangcheshi/files/exid.dat

    Filesize

    56B

    MD5

    33b7e098e51a6045c012cbb8347ac337

    SHA1

    d1ea1f1ea86efc2fa4df94bd6d7825837fc1a600

    SHA256

    ba38bbf9ec0ed12d5a3ceff25e1a5e2b922ac26975d28d05c1841355b70f9d51

    SHA512

    dede2a400ec89a0dfcfd3efbc9289e6d7c2834ee5723eeab9197082a948901941505d8a123d226a3cbed620211c2273bb1cab1ebcd85601477aedb185061996a

  • /data/user/0/com.news18a.wangshangcheshi/files/jpush_stat_history/active_user/nowrap/a15daec5-5071-4be7-8339-400150405637

    Filesize

    159B

    MD5

    9383a7f49fc231f75686d70619e97b3d

    SHA1

    379fbf698bba047323385bceeaff27e8aeeec668

    SHA256

    49b86a254e373a6dbaa105440a1f5841bc3a17882cdf2a77ead2ccf8e2800b3d

    SHA512

    6628072d1def4fe518692fe7c37e7b7d40ef2ac9907d77886ef7f39f9a5f2b90269562c60b273e046534179425f11537d0ded82f34dcd39b7087dce043d9feef

  • /data/user/0/com.news18a.wangshangcheshi/files/jpush_stat_history_mult/normal/nowrap/6fb29f13-ce51-49a2-8306-85cae18b6a19

    Filesize

    187B

    MD5

    eff44269ec76dedb25263f1a9d732b66

    SHA1

    a81e2a9d24fadeacc0dbd29b82dc99bc9326aaf4

    SHA256

    815ebb91db12eaa482589be2dd91b8969714e74885e62b29c54ed07591d7fbaa

    SHA512

    9b31de36ced38c6f79e35af6930064c6fe39149f60ea42dde3b6207697188021b93e4a12d0df59d7c3c926a638deb8de7dacab6839f3c57ffbb8092cadbb6129

  • /data/user/0/com.news18a.wangshangcheshi/files/umeng_it.cache

    Filesize

    350B

    MD5

    5e3ddaa6d484c6f343202ff07c7d2b45

    SHA1

    b03895dd5d9eb415bef816d91ade810a6dbd463b

    SHA256

    36fe964c375074f424555bc0c859276671fe5c462d4ca78b0d4485fe70e4aa49

    SHA512

    4010b4f51e4eccdd5b4bdfd0ca6ef8d659b669848159f72bef846dcbe0fc14b8cc20162f379279d938e4712625a7005d3a92ddeba3d47c04f9aa8b5c4d9ccd1a

  • /storage/emulated/0/Android/data/com.news18a.wangshangcheshi/cache/bitmaps/journal.tmp (deleted)

    Filesize

    8KB

    MD5

    fabb7589aca079c9aaa45c3b93dc6c12

    SHA1

    5d3c8b4d4380b891423e49e2716eb909cd196386

    SHA256

    4df67d3be76f0fbc49cdafa1f7fff039919c89f22693a03753f2e0e90738d361

    SHA512

    384cc49a7c1045bcfef2b7c320f06b49360a07e9c09992ae2a1ea86f83f1a54d90197d4abdc609cc7f9e96b8d3b5f960833f1cad5c4342b8856a96315e143cb2

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    8533906c2f8fb18c5ce19f6db814e73f

    SHA1

    090c0a56335a9463beaed641164ca6fc63ee5e1b

    SHA256

    74fe80de79bdb38b007f31455b0a838b99030de83c13b0cf23f902409acecaa9

    SHA512

    35d1a1518dfd3d1a6e4b24f607617b083ccf616dd84ef91c5b48501b6ef1de8306d628cb5a46f8b32691a3fd1cf04e2ba921783d777a4ec7a3b81043ae7fdbbe