Analysis
-
max time kernel
179s -
max time network
188s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
02-06-2024 20:34
Static task
static1
Behavioral task
behavioral1
Sample
8f569562061b82988b7172951ed8d559_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
8f569562061b82988b7172951ed8d559_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
bdxadsdk.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
bdxadsdk.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
bdxadsdk.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
General
-
Target
8f569562061b82988b7172951ed8d559_JaffaCakes118.apk
-
Size
13.7MB
-
MD5
8f569562061b82988b7172951ed8d559
-
SHA1
625d00c957fcb34b052dcbcdaf561c52321a4919
-
SHA256
2d15747ba2d474bcdcbd031dfd54e88ba69ca90404eb53a83db63a61764fa064
-
SHA512
25dee4d1046e69a165ba3deeb55c478b9fa291bbb69591ec5e67b9b89d025f8a1e14103445d79a23a8075b4bc599d1451fb13a61509a44a24907fc1b6542410e
-
SSDEEP
196608:p34J1EiDTP0lVJztTwNFQ9yuh2fTyPmZgxUy1RlcKq+7ZubkZaQFi72E00Sgu:pI7EUcx2rGoTqmZEXRurlboU72nTZ
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 6 IoCs
Processes:
com.mfyueduqi.boolioc process /sbin/su com.mfyueduqi.bool /system/bin/su com.mfyueduqi.bool /system/xbin/su com.mfyueduqi.bool /data/local/su com.mfyueduqi.bool /data/local/bin/su com.mfyueduqi.bool /data/local/xbin/su com.mfyueduqi.bool -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
com.mfyueduqi.booldescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.mfyueduqi.bool -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
com.mfyueduqi.booldescription ioc process File opened for read /proc/cpuinfo com.mfyueduqi.bool -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
com.mfyueduqi.booldescription ioc process File opened for read /proc/meminfo com.mfyueduqi.bool -
Loads dropped Dex/Jar 1 TTPs 20 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.mfyueduqi.boolcom.mfyueduqi.bool:pushcorecom.mfyueduqi.bool:iwanvi_read_processcom.mfyueduqi.bool:pushcoreioc pid process /product/framework/com.google.android.maps.jar 5147 com.mfyueduqi.bool /product/framework/com.google.android.maps.jar 5147 com.mfyueduqi.bool /data/user/0/com.mfyueduqi.bool/[email protected] 5147 com.mfyueduqi.bool /data/user/0/com.mfyueduqi.bool/[email protected]!classes2.dex 5147 com.mfyueduqi.bool /data/user/0/com.mfyueduqi.bool/[email protected]!classes3.dex 5147 com.mfyueduqi.bool /product/framework/com.google.android.maps.jar 5410 com.mfyueduqi.bool:pushcore /product/framework/com.google.android.maps.jar 5410 com.mfyueduqi.bool:pushcore /product/framework/com.google.android.maps.jar 5524 com.mfyueduqi.bool:iwanvi_read_process /product/framework/com.google.android.maps.jar 5524 com.mfyueduqi.bool:iwanvi_read_process /data/user/0/com.mfyueduqi.bool/[email protected] 5410 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected] 5524 com.mfyueduqi.bool:iwanvi_read_process /data/user/0/com.mfyueduqi.bool/[email protected]!classes2.dex 5410 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected]!classes2.dex 5524 com.mfyueduqi.bool:iwanvi_read_process /data/user/0/com.mfyueduqi.bool/[email protected]!classes3.dex 5410 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected]!classes3.dex 5524 com.mfyueduqi.bool:iwanvi_read_process /product/framework/com.google.android.maps.jar 6182 com.mfyueduqi.bool:pushcore /product/framework/com.google.android.maps.jar 6182 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected] 6182 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected]!classes2.dex 6182 com.mfyueduqi.bool:pushcore /data/user/0/com.mfyueduqi.bool/[email protected]!classes3.dex 6182 com.mfyueduqi.bool:pushcore -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.mfyueduqi.booldescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.mfyueduqi.bool -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
com.mfyueduqi.booldescription ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mfyueduqi.bool -
Queries information about running processes on the device 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.mfyueduqi.bool:pushcorecom.mfyueduqi.boolcom.mfyueduqi.bool:pushcorecom.mfyueduqi.bool:iwanvi_read_processdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfyueduqi.bool:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfyueduqi.bool Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfyueduqi.bool:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfyueduqi.bool:iwanvi_read_process -
Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.mfyueduqi.boolcom.mfyueduqi.bool:pushcorecom.mfyueduqi.bool:iwanvi_read_processcom.mfyueduqi.bool:pushcoredescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mfyueduqi.bool Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mfyueduqi.bool:pushcore Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mfyueduqi.bool:iwanvi_read_process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mfyueduqi.bool:pushcore -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.mfyueduqi.booldescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.mfyueduqi.bool -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.mfyueduqi.booldescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mfyueduqi.bool -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
Processes:
com.mfyueduqi.bool:iwanvi_read_processcom.mfyueduqi.bool:pushcorecom.mfyueduqi.boolcom.mfyueduqi.bool:pushcoredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.mfyueduqi.bool:iwanvi_read_process Framework service call android.app.IActivityManager.registerReceiver com.mfyueduqi.bool:pushcore Framework service call android.app.IActivityManager.registerReceiver com.mfyueduqi.bool Framework service call android.app.IActivityManager.registerReceiver com.mfyueduqi.bool:pushcore -
Checks if the internet connection is available 1 TTPs 4 IoCs
Processes:
com.mfyueduqi.boolcom.mfyueduqi.bool:pushcorecom.mfyueduqi.bool:iwanvi_read_processcom.mfyueduqi.bool:pushcoredescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfyueduqi.bool Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfyueduqi.bool:pushcore Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfyueduqi.bool:iwanvi_read_process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfyueduqi.bool:pushcore -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 4 IoCs
Processes:
flow ioc 32 alog.umeng.com 50 s.appjiagu.com 71 b.appjiagu.com 110 alog.umeng.com -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 2 IoCs
Processes:
com.mfyueduqi.boolcom.mfyueduqi.bool:iwanvi_read_processdescription ioc process Framework API call android.hardware.SensorManager.registerListener com.mfyueduqi.bool Framework API call android.hardware.SensorManager.registerListener com.mfyueduqi.bool:iwanvi_read_process -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 4 IoCs
Processes:
com.mfyueduqi.boolcom.mfyueduqi.bool:pushcorecom.mfyueduqi.bool:iwanvi_read_processcom.mfyueduqi.bool:pushcoredescription ioc process Framework API call javax.crypto.Cipher.doFinal com.mfyueduqi.bool Framework API call javax.crypto.Cipher.doFinal com.mfyueduqi.bool:pushcore Framework API call javax.crypto.Cipher.doFinal com.mfyueduqi.bool:iwanvi_read_process Framework API call javax.crypto.Cipher.doFinal com.mfyueduqi.bool:pushcore
Processes
-
com.mfyueduqi.bool1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5147
-
com.mfyueduqi.bool:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5410
-
com.mfyueduqi.bool:iwanvi_read_process1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5524
-
com.mfyueduqi.bool:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:6182
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
485KB
MD51da618896802fdb4b6f17c92703424f4
SHA1b48aa81ac014a5a7f6e95e618e4f951ee12d34c3
SHA2562cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f
SHA512620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6
-
Filesize
32KB
MD5b5127bce07bb8b613699db61a6d0cde5
SHA1166929c3baa7c73a04e008e196e2b880adb1a99d
SHA256e748dcd43e8c4c543f1bf36800435a0db42e2f5e5b7fb35dd2d8288423114366
SHA512ffa79c70d2b35c23edef5d0b72e59d2e7ea3c5a0f08375c3b3dfab007063343d63d56b2ab7b33dbef91abbd2634d8023668e6af1c689cd744b7cb4224e35d775
-
Filesize
32KB
MD5aa3b4af0e8cff3bee9cf0f3f4227b845
SHA1d4b4759790919a1aec3f487a2783a9e6fb177034
SHA256f017754818540d598be648e26ca4591a20576181f3e2acba6b7d4cda14f7c557
SHA5123ed28482976827c31209f1433fb909d4f0f8eb77aea743af43880db77e63f1d3128a96d2b335ee193160943e0c570e188599c348434f34e1b1ac1754f54a8bb4
-
Filesize
16KB
MD589aae6682ccd630efbec942541073016
SHA1e02947e46b9834f79af297dab885df4ca0d85666
SHA25664678f593d43adc6a847cf0a6379f0a7fd523ba3142c5c0ec0a9f09befb61637
SHA512d257f12e3130bff2f8900f19d6b30add88a0fa5d20d235cf0000607dc292cf947bb491e9e8e01e4024e3a8cf8f2774e199aa4810cbe76bb2e61e2fcc2c070d78
-
Filesize
16KB
MD52dd4ed3c36c3b79bd53c8fbea8cd99ac
SHA1cde585c39c5868e1bf2abbfe1c3fdf67095dc98a
SHA2568049537da580e7cfcca61d9e9c3f9ea25caf90121081fd28599a514cc25c33fe
SHA512f00c256271cc4c83b8e8ca4604e0843b170ed4833e0f6e30703df1dfcaf267390d48e48607eeea86d6d919e3c808cde4cca36fa6db89678300e7a45fb855a292
-
Filesize
16KB
MD53ac779d43f0ba4625fa9cbb433176add
SHA125a140c4563bcb9b486b69ce27320277bbc46da7
SHA256e707736a744b6cac3638d7f50e1c80c1c509390e2ef8f61fc37da9dc239d26bb
SHA51232ae74e1cad63ddb0b49bf8a38d8d0eb4dbc0fcbc0298112b11215a97a6557116714979a437af73f8eef2d58dc7a6d7227df2012f0092e563fe763b36adfe23d
-
Filesize
512B
MD5226632b77e21197f2966a08f007dcd09
SHA1d211a3f1f0f067c7b7f4857e81af551cebcd9d4f
SHA2568fa9ef04a377e41474d9dfb652c4478187f4e04dba17eed3be3c8cc827b5fe9f
SHA51247d1671de09003d7ba26a96525819ddc18a30132c85ea22a3f5d599acb16decd3480cb6e7a591c6a5c49fb2446e7208dcf4a930ee38e17104cbbf50fc70ed156
-
Filesize
8KB
MD54b22ed642d3997fd1517fd7e040084b9
SHA1ed9f89a401ac2265b6902a9bf9dafa53a6485655
SHA256f714cb1f3441e5f5a1a0952cb52215d800b6a30b2454342132e07eab8588f821
SHA5126b749451051269dadf9c3ba7ee284c863b370c45ac25613162ff3b7be67a4b23b9c8372b862a9ed773f3c08dc275b11d3469dde48c6631cbe2e10daf94fa1ff3
-
Filesize
8KB
MD51a1aa37229d91ae4308c86b794ba82af
SHA10245d380e2c6ce3089c471669918669cd78f2276
SHA256ea0c322c41a72881904c801697fb0a2f57d5640c41b239a86e5a76ce2cea3fc0
SHA5122e72d9b3f438d9f9e384fda21f82dd1d023024a205151dd979b56ae6ce247c76453aed5864d934a211b1020b99466bea6b0067600d933e95f0a5c423c0c8cdf5
-
Filesize
16KB
MD5308f1989852611ef85728e8fd3565716
SHA15033e49bbb6a468dd804ce9a705fcecbcd6fe135
SHA25624790dedb0fc528d78a03af4467c5f7ff5e0a598c94ff44ed307b9a85ff63119
SHA512ff439032e2779783e8c81ed5b2118c0776bfd9e97e742d307ba4c9688d58a00e2bb25c5463379f6b78d28129687243886ffa7bf124364def9f9b368edf4e8bca
-
Filesize
12KB
MD5e1ec79d1d7d8f90ba41e0698ff737888
SHA19207bd1917ba15eb0ab982c250ba30a3f786132c
SHA2569ee8be7febacde3900b5eb34c6293f800c20d55a3d4414e246c79974975cb1af
SHA51273d32885c87cb595b46862ce259d1797d96fa7f8e6e65c566862d1f0aa67dbaf8a1a24d2e09417ec47a3c4f841f51a6c7022812262b3b7d050984461e1564036
-
Filesize
12KB
MD573a7ebb558aa80651c3389a9f79516dc
SHA1d26f2a6202162862abd0eca1a23f88970ffa4205
SHA25688a0294b0db14dcfefb9fbd99dd721c5ade5e3ddb34488c78a382b3d2c5c62e9
SHA51265b9fe3afcff8b7205dd17b67037f0f15c4347dd08ba25c46d484908fdd17f1c52327db7d71fffa3a836eb2938d92d3e36ed60f11e2c513ef33adbc7fb86b186
-
Filesize
36KB
MD50908e924aa236931dc7166fef6e00862
SHA17782648d6d8f6e835bd47058d4852932c096a467
SHA25638f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
SHA5123c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
-
Filesize
36KB
MD567c12933d1e0e63d9801a6aa43092ce7
SHA1b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA256abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
SHA512db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
-
Filesize
512B
MD5bfe55235e0e60d3e67c5ca4ac6099f04
SHA1cf7ff81648689057edea4ef9cc326b86544ee200
SHA256427010c163533012b0366e1b901f656e3b42f73558e737601b38e67a730f9823
SHA51221674b4dae5dc3996373b90fd0374fc0f78c14cca39f1c7d71130b5c0578a35b191629d974d26a1f7d6027e09572ddb1e7ceb4e9cbf8f0ab7daf695417d5835a
-
Filesize
8KB
MD560e33ffa5278e5bae8aef3c747e125cf
SHA1b7b84d1013c3ea73ab6432e95a8589de8df96d66
SHA256f29fd076025be6953fca4e4f40c32f8268bec77a9d4720525c8d7f6e7d728df7
SHA512bd359fab683d73624ae139ddb8a072c4d8f2d3e168612134f3ffc85d232442bb580374669f7e3400ae2777f206f0f4ffb346e092c372b3d4d3138ed43045eb39
-
Filesize
8KB
MD52236aec01c63df78773dd83a441fce00
SHA1117741c34d570a62a0df69a51c328675cfc8e3af
SHA2561487c448dfe8d94f412aff37917bfff31c1cb4f3f7795991ff122991fe479d0e
SHA512918e2ed2466d8bd93287bff7cfb548555272bda92ca1c6847890775bd0cafe064a9789417b2cb053b4b98f618dd3637028c93380bb9bc349fb1e20716252f00c
-
Filesize
8KB
MD567dd02aee752936df528f11330435dd5
SHA1e20963e2429d66d18266ed3db77c406f0228b36e
SHA2567f3a9cb724ba16236c583e7eab0b9037419047acf30cc312c9d6f1fdcf582b43
SHA5120c4ff86f3ad5c9250b99f2264f55502f1c0e93f96ca56707daefe23ddbe30a3327a5b3b917a1e112798f7c25a29e7564dbf1d31eef475783d98c0de6d1dff769
-
Filesize
8KB
MD5fb45343ab540d5c8092f8ae0edcf6637
SHA1ea94e610b5d24f1dee88c1436e111769cb737020
SHA2569d31f93aedaba7d80c1eed6c68e071a0e0cd4cbce6702fd33760ef6303a09592
SHA512137e52c665da0ceb95e6bcbdc2bed27dbb4a43ebc1222a5b52373ad9e2e45350a8488ef514a5a60d1d60025bd03f2fe4bb3f843dd63463d650d9de80291935ce
-
Filesize
12KB
MD50e4fcbc2c22d7674c25d0921bf985861
SHA12458061ebe8a1503cc6fb5bbd0785eb9eb7da454
SHA256d16770b4a2a8abd6f3bfbefc0eafe33fa7e110c74fc0bf1ac4523f10179c872b
SHA512b2cc4f8900c5c10fc2da39e784b57aae83b36ff442b4c37fdbaffb2c519346f7943d332107393475b9fd7163dd187bbe2b947afdf93086218bc8fe6266b4e85e
-
Filesize
20KB
MD5600d724a598424fe6a9e8c30f407c6bc
SHA18a4f9073370bbd3030552d7595192c24f7419e4e
SHA256f7f0c3e8bbbf3835ed943557c570a78124755eea305d14a6e56340ff53ab30ca
SHA512f4a411efab7a676378bd8196c7603de41d9c7bb2d67a37fe2fd6ba78fc261f8f981e68d56c89d12c0bbdf44eee477cfe9880c28e5f1c734f951a6640d4afa71f
-
Filesize
512B
MD5cf182bb268d0e2c44cc552065d0615cb
SHA1dc1d41769573b7aa13d61871714c27596806a8e0
SHA256b82f3a532b6dea0559cb073593ecfc7357ad3149e00df575ea416edced67cd70
SHA512c47d437126dc2422e04be480478d98bc33e9d0f1dced65852b7b81668cd720a66b5cf67eba04f2aa0f16411ac792216b5d4c825b1ccce8d55fce4ee3ff5cc0aa
-
Filesize
8KB
MD5545c383c2b85a7131ef935b320fe2120
SHA1d6823bba6295174a46f05b8902fdf5fe1011058b
SHA2562016d7cf190c0745315519222bc2c429574a1d90fb98b3d3d60829b743e63585
SHA512669e2a178eb825a98c361be987cbb2d29d8cc938d3dffb2184510ffaa1f34a5896a0856e068001c5bbdcb09e0d46392f8bb22950f116e4bc3bf8aa7cb6ec1dda
-
Filesize
8KB
MD5724360e00113ab273d147a90ec2e399a
SHA126fa060b0d666424de144d15fbd1692e0a835c47
SHA2563d0c327aa7e8d11e20add90808624a3a65d7f178b7234c8fa1f4136a910aa94e
SHA512ed1bbf632255729cc390c2f27c84262608b7ed82b0621a80f47e4753d0617683ca083ecb6f46224b5096023a13a546538262576d9d5eb0b28b8129814ca81901
-
Filesize
72KB
MD539754fcd649d6b9dd240098be3344547
SHA1f2b4a0d884610ddbeddc24dfdc8e6149dbfbe26d
SHA256bc4bed33098055f241db59692abd13954cd7beea145e2e22042db5dc36f4f054
SHA512aa41cb7e0777115d5d21589e7f9ca73ac5efb7482bc490dfb324dc1bc47b5b50c6b6ae50d3ec98c534056bda0f75ed878259efb41cd826a77f48dae9aa88757b
-
Filesize
512B
MD550362ddca50ed27a0576b5e81c70a522
SHA1ba6dc318c7ec8c1ecba51ce8db12e9ad09a2f270
SHA2566a62a093da4ebc46d55bc40d806bf504a2ec15c5a5df85b4a5b36c8b10efefb7
SHA51203cda63e6602832796a7284000369b9c256f5a9ad3a2f62b1a546a3a8e9d794f9b2a76163ae2ca0d5a52ebca17a95a9cb2a8f369c052d9894027ead8c7734347
-
Filesize
8KB
MD5372565c7a1629d6619a6e5d7e6ae5159
SHA18c9d66137a758973898b371da549be32b04a5db4
SHA2568bed53695abfdcef30a61c36bd43fbf5a8168a10b08a03793c89648353d0579d
SHA5124a55038a33fdcd1f9140b8f170177d3ed625c0a6187e864a8c6e424cd9bfd458b976a6df13552935413e91af3ba3ad4305cb45ee6d68ab92f9e243b4a812a660
-
Filesize
8KB
MD5298cf06d56356708ac636b741f5ab9fa
SHA1b58f7d9f04273df85c599a8fea9d7950a6e6ff7c
SHA25677b9118d8a14c9e67d896b4ca92084e460b0059e1d077872c18ddfb28cdc4025
SHA5128065ceb88f6ff1fd09ff592be217d2269962e45475dc4dc10de3111f2a52cfe82d9814d0cf064ac3a1c49218e2df9748f652f642953e01fac44144beacfb80fe
-
Filesize
8KB
MD513bfc7fb33e40fba456429e8548a9f8e
SHA10c116dc6c3d9ccbae453044c083956f9f6a47dbd
SHA256192b5fc11c522d97d86485b552a1724c5f3b52748778df8483be3e3561e8c155
SHA512d74737a8a61cfa5d6e425550e89bcdc9d450fe5457b2a2fa3808d11e47c87a2631c1e30c905b5e880da7d1ac70b2c0d1b0f3acf1cee4b29bee740ace3fe5985a
-
Filesize
12KB
MD52ba99a3426cd08315f0a7dba8dcfe1ed
SHA14b3ab304f7e8e32fe83c981ca424d6325235130a
SHA25681846e7d42d2d76833bec1b9f416aa3de7da17572df0fe333f5aa9310d37328e
SHA5121a6674e34c50bb8efecc0f660dd33a3a88bbcc6efa747e533cf5c0fb600c0a1bc4e379b38fd5b79277bc685b38e6b56f2d0d85e19e57e357b3585f080f2f94d2
-
Filesize
16KB
MD565713c9d26a69e61d16199b1f678d3f1
SHA1e1a42b3f61729f4586958954082200c3dbe83948
SHA25677da33201734e5efd1b20aa3a25b0b291f317cdfc7d05213306c1c8a103fdc7b
SHA512045111f1eb306f1967b107cd00656cc13b13fc6557c87176df04cd61e6c1c60c33ac21b1ec66d52e8b0968dcbec448df7209cafc39bd240b58bc13e9c3b4a022
-
Filesize
40KB
MD5dfeb79846440c64da34c5a08d8055c13
SHA18b8c5612bee502554b916fcb3cb11be03c19cef2
SHA256e34423f765d83a2048b50ac1d93b194e67a70b74c6bfffa3696f7500dfb22171
SHA5126213782f6390df0a774384fd56b81f22f25cd1b954b7fd37d4b9b4799c5bf2cd5ce7001bec8f258d15d2dd907c07b75e4c9c107e84f64d9e7b680d76587c4e2f
-
Filesize
512B
MD5d3f69e2446589038b473eb6e4b06e0c7
SHA1806de2ae35d576d7bcc72d1e3f2637ebc255aa1f
SHA2569706bcffadf850f765148e443bcaba0f398f784dff09fd072504fcb080432719
SHA5127ced0370d9fae1bf573f7340cf97552500319e9a99c11e64f519fd7fcfc16c32730ea87d118ac5513bafaaf5069fb9088692e6f2ec31b0676f61c595df05b8f9
-
Filesize
8KB
MD5b64c1108af9d12ce49e2db74b0822573
SHA144654e6b804c9241de1b9750df9f3a297c5e8c69
SHA2562f67b43203cb0496c34a3894a05a1a7e7ce48fb15f0ea9804092c16dbe60e80c
SHA5129bdcf669fa4e46f36d764345b9c956ce727c8611becc97df8ada6f004b652d91f058550740426c6d6f30a07759e81e5d1c3ff50c97654850a8a560931cbc66ec
-
Filesize
8KB
MD5a11e7e33d4d588d38e2c7a8941fd76b7
SHA1a428f2dc11dbebfb8094024409080c085862bea9
SHA256febc510ab763d2b03759666a0a46f25e6b22b549d413586e1a9c37a719158c2a
SHA5128a3e411cf15caa4c84e024ec0254b8e86ab9b681f87555f402a91e06b3ae47adf824776baeb390f732bacb7f56b989ea36067d3b12b3a25e2316debe422e6471
-
Filesize
4KB
MD538008f60048503fe3e10ce461bedf4cb
SHA151e201bb3b791cfe014d5e913f6a7ce4dd0ae63a
SHA25677d710b8ef8ff62a89b6823bf2df4b54214381ae146fc9aea31e6c9a5af85a9c
SHA512f414f8c8c1f7c09ded9d3641e506cb30ceca12fd499be97b41b31808e46dc77c5503cb3669a88ff401abf3543c3e33f5e3b2af9c23c4396dd74e56b8c895d19e
-
Filesize
40B
MD533893c638840beaf45205cdc3e697693
SHA1e99ac52c1198a39170f305f25b56a98da9508a7c
SHA256263ed4296db609468bcc0a81750f761dcc9e3e497066bba3c4bb32ec9d8e2e31
SHA512279e3cb785640d4d85ef9cf19344e907c241053f306e3cdfefa1157055c7b88a49d4c1713db71dcdde24e7978f1b2824de7ab839a73fb80dc4f2bd35101dd5a0
-
Filesize
340B
MD55fd3b0555fa5e16415c0a8f0f046ee2e
SHA1c351b4f821381ead7de1c5b65b0620fd1ee0ed15
SHA25659eae9b56a2596190b7c2549d2ef6bb639df5373aa39e1eebb52a4b25981962c
SHA5125d9cf3ea040f8a6a21f79c2f9748a8214b9ace2d1d556546d40d1790334e072095be528fa6c1d6fa0667c0f0d6f352e82eb53fa4e5866e3285ade6efa32d159c
-
Filesize
340B
MD573a423355efac6a1377d059edbab3a6e
SHA1ee9bacfddcbe45db0bb2c9c17744782fc6ca36c7
SHA256a90bc07206857844d54e3292137693583722c1edc644cb9aff7cb119a9c8b810
SHA51287245a9cf04378feb89aa1ad90ac2e48779b3dfc91f6555e1a5024028ec7b9070c0500017ba88c1ab120c3adae522b57663ca2658a264a3dfd51a80b86543a5f
-
Filesize
40B
MD5d032a42fa69aff51120f74ae3b2b0d62
SHA1286d51e2556b2111e2c70d2feb05ceac81f50145
SHA25666119b76341a2b8ab73187408c25ed86ee83b7d789f872eea594df05e2233df3
SHA512d78a3d5871b4acda99250b07a9dd321462d722a33e5fdfa71295395041d778a127a6ac636a47d4e2ca2cb6564c578a47ce2e6fdcb406c36e84e6dfe52d8a1ae7
-
Filesize
8KB
MD572e90425fb96b187f01353ded4424901
SHA11a461aaac432284010f1e1626c408713a2c7f890
SHA256acfde005f5a8510d5cc71e2668268f507d5fc19a208317a3319f7f9d75a14c32
SHA512b307c98310fa14a633eb4ed4e54b4eb8b33acb4604101c747185600a09d4a5667a1728117c7b54f3cee2691b0e5957332b6ae215875c70d142968e6e1de3e044
-
Filesize
20KB
MD57a68dbd2a250675b126ae72cf250679a
SHA15a075095c8873a11b14f8fdaf78144fb240f4024
SHA256ccffba0743fce13e10795b9d7ac8d38931954eccb18eefe6b8efba99a82e12bc
SHA51253f48ac253cd76f1e6bc8d9660983623c3b565fd8a7b6efcb2fc4f8443bb89d3cab11962b0666a2e7dd822e5695fc62ee4ec10c841dab5ce744ea2e7e2a64d35
-
Filesize
8KB
MD51a65b67ae3836c6378fa3b4d7fe41831
SHA14812a68dfb0147431438ef0f68125ad220b181c8
SHA256d07cc0317e165b4edafb6a0fe1b9576193e7f3372a6eb575e21314cab660e0eb
SHA512dc951a37de981ded0214843964a42256f7d05aa9eb3669dc6d678f46e2dd9ba040ef3f6a3e3712eb2cd48c49d51a5bd1b641e7ef57d4b2ccc23000bf02fb2726
-
Filesize
127B
MD532038f4bf215a07fa6c57ca67b78ccb3
SHA1efe76cdca05677b13da765abfc1cbb0ecb75a0d3
SHA256fb4fdc3259aa739fcabd048587efc285a717c722cf3b5ae1d2656d85e71438d3
SHA512a152a81c2577c059b6f0ffdfc432c9c03a6380797c914bc8b9973491abc24b39b34e665fa6aa38841294dd423ba241cc70233ab5f38c1c53ef304a42c83032fd
-
Filesize
512B
MD5585ea116b71825bf7767883d5e237c2b
SHA1356623fd1b630e517389a408f709b0fa0c2ef80b
SHA2568c167346f2f7e96f1743a40fc2e331b3f1811f42fab39257f87d76dda86c0e8a
SHA5120161dc3d649ad0c2cdb1fb2863ee9891e62b06d6614bd5a6d00e11da3f698465cadab7c327f70eb9776d685ab87ad378be2802bcb79a0c67b5500bc5c320bef1
-
Filesize
1KB
MD5f047366997b6f5229afad89b1dc0437e
SHA1cc7a44057deab95838d1173a0578cb839f86a3cd
SHA256673b9dc51dc9535f842b645081ef51d2396c762afc6556ba27468962f8bbb30e
SHA51272948a9737b059c8ed128d102d746804f66e28a4091754535dc79ced777602119cf55c14ca4857843fbec4e15a7d97a7f12241f599d0b63b05451fce1b78ba70
-
Filesize
162B
MD580f2965d2a89af3f164e6a14a7e73443
SHA1165246bc58332ea44376c4b60ac98a5fee7418e8
SHA256d54a5ea7f7c0986bb06386a84abb9e598ba20b9be4feb6e24e60fe910cbf157f
SHA512298f3283100e9b594bca9dc12804bfc5a2844b4ad14d144dbcb1643224f14527468176c736a041dd5d8d72dcec33c978e9e28ed7f38bbe18865f89bcc55c55a8
-
Filesize
63B
MD5a403180139697548638a048d91e9fc52
SHA19fda21a582ebc36c98591780dd06827f72eb1cad
SHA2567c1022a63627e2907489521ecbb8ad505386dd36728d1ec99132ebe1596d947d
SHA512a268e8541725c50c8ae336e875e583655a155c2b30dee2f1f2cb2dfa22a5712611ef7a4a3ae4f26c0890cae1a563f726b3bc1794189b31266f26ebd476c43ace
-
Filesize
120B
MD5f5b97f1455842143d31c2d580c016d9f
SHA1b492d5f43b65193dacc1d438c4bdfb9c1a750cd5
SHA2569fe3fb4aadb4fe1bcf8977199fb5ec01297ee36a10b314397c31b5a4be725890
SHA512487d6dff369d232f0f32b8d410158e820e3c7c5d3d9155edec10da5b38a6b0b84051a86be5fbf3f9045c9fc74b8f4fd570cefd9709ff69437ddec0311a8f9dcd
-
/data/data/com.mfyueduqi.bool/files/jpush_stat_history/normal/nowrap/ada4eb65-de84-4177-a668-2a6a7d75fab4
Filesize159B
MD5b6406f820e854e07d4b4eddae8f3255e
SHA1d41bfdf43bdf409d5669454cd8c3d4be6f143bb1
SHA256acf72c40f617ca3deb250dd46520af37e8fa1cac93468cf53fec2b2e1cc54431
SHA512cbb57b4e1e6dd16e36e0ceb1ed806c0d3dbd6b53f65f537707ac25f3c9e66ced33a91c1735aa24bc493610a5ab55d8d63f323c788b230b8d40ed4a6b21f324e5
-
Filesize
350B
MD50bf0f48809ed4c29001a76bb7c527fa0
SHA1f6d8748b50afbb1aead3563033312d356b1c6201
SHA256d26f78568e15d0c97a7cd34343fef2a0140083b945858d2c0d1f016b9d68bf54
SHA512f4db08e7e6e092ae4d3669f39124a5555091faa16b3f8501edc3e10f84c20031a43005498e4b534b3b025b10d1efda28b0eb0affa1fc1f57754d779fb2d4ceca
-
/data/user/0/com.mfyueduqi.bool/[email protected]
Filesize4.9MB
MD54a533836dbb1b277a498f237a625f5d2
SHA167d1231fb131605174bb55404d91f5d16e8ca128
SHA256d3faa1dacb7fd48653575448cdb13ad45d552997b938718d98af1bbd9634f11d
SHA512a930393c216a0555a7a6520dcc98b38fb27e0e17ee906db84afa4b40d71ee1450a219c35a80fb95bcb901b2fbda1e5c0b1f84d15efc95c79164b87e69bda4e69
-
/data/user/0/com.mfyueduqi.bool/[email protected]!classes2.dex
Filesize5.1MB
MD58bafe4f7d13731508fb5b06e135ca253
SHA1ca6a1c5f3d22555fa11399697663f188e97b8dee
SHA256bd6b750daa09572c5defc7816dae21e3fd6a129702021db7cf9e1516e16aedfc
SHA512d85b7749c99d72cc0b6b9368cf9ba09024d42e1f547cd2b986c9153e2456d4145c59d7e5f6f993c7712a2432e607df6c6cd3ce15591f5c974ed291f5a34b05d5
-
/data/user/0/com.mfyueduqi.bool/[email protected]!classes3.dex
Filesize4.6MB
MD5526fa4ac8bb444c3f27cfee48c619b79
SHA1b6f9177c0cd8d6b439db928889d087f2865e2d47
SHA2567af26ea89ced69d157b0136058832a3761078afefa3728efe56fae08bfb5d49d
SHA5122760ff8f835315aa6e8131a52d6aa0962fb300670e78b169e8f66023d84dcb2537096a272c231aee885d3700946abf3799df6d4a66cf83e010e687c56246b6c9
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
750B
MD59cf7f58c378e629805a14a2c2ac77a39
SHA1a514ca1b8a048ef4e6594ed3fa1d3aa3f6149709
SHA256fdce2982eb085d9be6f7686f47c9fe14b501a60c18634fb686204c475d7fbff0
SHA5127fb94524651cc727ddd0dd1690d95cbf76b3eb06f28573cfd42469191133cc70ecabf3587163a4405cfd369fbfb109bf84a7e98696bf61b56ff54f8e65f91429
-
Filesize
32B
MD554b47411939defe264cd4eeb519e1841
SHA15f533ab5b3913ccdec1cfababecaeea171a94110
SHA25666c59a60162d6e95aef4b0ed47b6d35243d7514053d375f91cf4b68a22d6b907
SHA51292f91558a22e7040412a655a8fcc780827870e69b5d067f208756206640db70bf0dd911d705cc284c40146f0082b6b890440f76cf6f8d2afb8945999c31bc3e4
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
118B
MD518c32d1ab26a01a32cccfcd0c1c422e1
SHA1f69fed6d06f60359bbbc470a5b5765e4001a4732
SHA256072af3baf1e34711b432a03ec8f112e312a583b3428d213dfdd163445e6e3c1d
SHA51258f0d13e48f48afdfec0fb607a120f07eb9179cfd62c5967ee5c4e78911336bbad579c96cf7bd3a722abfe06dbb53bac7583c07666c5ddb4a4472c5751656f78
-
Filesize
107B
MD52612a9df401b8ec33ebc6127974cb869
SHA18a8e23295b011e7c74d219ba17820b00e10652a0
SHA25605a5745f5b917fb28d0f4dc399e9dddf12ec20306143b9969348a499a764e6a9
SHA51217b7dd0045ddde30e5ed692ca1559aa0d29b33bef550bd29bd24d08ec34bd2c21a7c84374b1e82b3d53c188c0851bda3ca8b5c810896f5411c97bbd9c1cb7df6
-
Filesize
32B
MD5de1c60aecce18756e704d74b27add11f
SHA10e355d4822ddf8013dd2e27080a92215ed84a3b8
SHA25602019bbc462fdac36eca9cba52c8043c6036ed89971867b7c5703fc6e35ed2e4
SHA512a7bd3001b57edad8bbff42175865502f45ab3496a3cb562baf54649f176251c97c7d566e36471da776c2f497302c99683086d19625fd7779c988eb3a4c3ee02f