Malware Analysis Report

2024-11-13 13:29

Sample ID 240604-bfj74sge67
Target 933a80a5bed9442e26c924b9702835cf_JaffaCakes118
SHA256 35de678d878131d2cc49e8e47c95b00959a2ba28965ebd898ed2cf9593d8f2bb
Tags
discovery persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

35de678d878131d2cc49e8e47c95b00959a2ba28965ebd898ed2cf9593d8f2bb

Threat Level: Shows suspicious behavior

The file 933a80a5bed9442e26c924b9702835cf_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery persistence

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries the phone number (MSISDN for GSM devices)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Reads information about phone network operator.

Requests dangerous framework permissions

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-04 01:05

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-04 01:05

Reported

2024-06-04 01:08

Platform

android-x86-arm-20240603-en

Max time kernel

159s

Max time network

184s

Command Line

com.suyuemobi.zww

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Processes

com.suyuemobi.zww

com.suyuemobi.zww:core

cat /sys/class/net/wlan0/address

cat /sys/class/net/wlan0/address

cat /sys/class/net/wlan0/address

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.exc.mob.com udp
US 1.1.1.1:53 lbs.netease.im udp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
DE 3.73.114.249:443 lbs.netease.im tcp
CN 180.188.25.42:80 api.share.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp

Files

/data/data/com.suyuemobi.zww/app_crashrecord/1004

MD5 c4e98dc401b2f02c394bd54391c6e64a
SHA1 a8a9f5d2a44bacebd4b0908089979592bcd6d042
SHA256 f9d9cd7e76507f4aba75b15f05f9d633868ad2171d5fc514f354a6003e7a14f9
SHA512 988080b1105a2bf5c2e9df52c930261576aed82ffcb7b6ab40cb08d16abf3ed2a3194ad8e3f390266580ebcb7613a758bf7ebd440d2173bbc089d111e937f119

/data/data/com.suyuemobi.zww/databases/bugly_db_-journal

MD5 4ff9feea07afa1dc503b081c2412bc67
SHA1 545d7b874500416cc7e7e705bbdb0881efc4780d
SHA256 62dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c
SHA512 ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce

/data/data/com.suyuemobi.zww/databases/bugly_db_

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.suyuemobi.zww/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 bdfbaaac77ed6479ad63d6315a85f15c
SHA1 1398da9890f709c56fb5c26cde7856e3f2d18e2f
SHA256 2e9facece609561d558fbdc9ae44f7e4bb83e9d361ac3675eb94eac25f51ec91
SHA512 12310c0958f6f49f199efa29b05dd665551b00b63743465ee04708880bf5135b36efe5aaea631e80a818e02ab8b2f02473b311642823edd1a62397a2610a2d8b

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 f064503f2e363b5f017bb6a2f8dc2817
SHA1 5f10365de53cbcb5da3326463e302492c4f3183b
SHA256 f4b94c567b41d2662621565edc4a0885d22e47860f6d5636c536036d2143fa33
SHA512 d8ff4fae0d1054c21412ae207e9c04053fe6f476ad3837f3fd58f0bb7e338032c13d9a52de5d0121e371f5662f506c05d65628d37587ac724ddcd420aaf10b0b

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 42dbc2811e8c0c1adc5156f06be42d83
SHA1 826fd91a2fb1208c07e04df053834451a4e4acf5
SHA256 faf68d56fb0fe787f1ecc8f904e758e2fe335d37fda2ff292ee873d2a7248aa2
SHA512 6bdff5e560a263cc34249077a9c3328a52569e46f0f014a5d046a5bbf9428e5df8cadf900ff33a5e4dec1a659c6cd221ab74ab82c453cd0f9732519fda463280

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 e7579b4e48a2ca61dec1a99b230a76fa
SHA1 7949d8ed45cf34fa162f3c2741f7e8a0f0031a05
SHA256 3ea0be25d56f7a423c34d2a069e2f157ff7764da4795f43f3d8f81bb7ddc4315
SHA512 f456850ef16ed6f7c7714c453cafff9e9c911aae23e52fb12488f4c49f173ee6a72f2020ae67ff22d73d2d40d2d18d9c1bc2ce64583f648a527c6a1fd0dd32fd

/data/data/com.suyuemobi.zww/databases/bugly_db_-shm

MD5 d284e7c9a0b7fadb73fa34530d082e36
SHA1 80b7e78d48f0804551c0ad52f7402d0ba01af7d9
SHA256 d4d082dd8c5974f3e64f766ef31ef043453adc9907f8c20ea28aa41cd67216c1
SHA512 cee6894040da8fd6dee98526530680bc659b0f138ad724d007040ad0ef76f3eb7b8a6556532b259da838b27b5395935899a5a0a280e3c68f3e5a66a2ae4b7dbd

/data/data/com.suyuemobi.zww/databases/bugly_db_-wal

MD5 56d3d63caa782f7abe51163823bbba6f
SHA1 0f5986838580dbf8c8a9221b9aa849761fb4c57b
SHA256 f025926be9b2c78957f1a93ec150adfa6c8e2577a887c44d640cc8e748f61616
SHA512 5d2b3713bf1ca3071b90c9d5ab9803096f82996b8d81b637326a8e55377dbb5560a3139e3d88bebf1760bed6f0fccd599361bc18f8dcab6fe0df74313d64fd1e

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 acb70396710d977e9afed0b8e6018f19
SHA1 e79fdd8928c034a3aa9c4d8e623e6c6b92aacf93
SHA256 e189637d02817d8f6dd9a18b31649ed811d9cc293a24e8c3499f389610d7a3a8
SHA512 471683220fd85d498307d0cc2aac72464670fa3361772ed5959961afb820f5551961a8e941b095680ae239219438c168fdc4b4d14c549f690f2577c840186008

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 e51ecca129d12b603e6b00bf5b995798
SHA1 2c8aa785508e393cfb2d7dbb9f82fcdc8536d662
SHA256 81fc99eac73929ce02c780400d24d162654a5ab9d2d57babb385ab0cdbc4e271
SHA512 62aeae3a8e2f3b41bfd6a083a62e5a409c87ab062dd0d577ce8bc546bc0ce40c4bd65e15d4f4a3ff67a8ae3924ec47bb2b70178ff0be16a18887b4419babc753

/data/data/com.suyuemobi.zww/databases/growing.db-journal

MD5 67544ed246b9ce31cd117f4da005d513
SHA1 e0fb910ee3ad55e387c95929e1b37c339f3fd979
SHA256 0c0cfdc9a394d8bf1ddc32e02c0710d60010d40a5afc1f3cff4f64915fd15417
SHA512 e10f61bc5af028990321d32506c0551b3106104275f02fe67a086b6f0f9a81a037e3aa41cf808dfe3ee6b0ed1400cbd97d737f12242b24858ba809b519e82048

/data/data/com.suyuemobi.zww/databases/growing.db

MD5 666442ccff7868c58773cd56afea33d5
SHA1 b1cb8bee7fb7cea081de68d7b21bb52fd0344184
SHA256 98cef5ce1fef8721e2f69d5a6dc31f961df35ecf5a4237cf351a378ca7887293
SHA512 d2501d05a6e97ad004d11a870bcd512ee4c7425300241276b1be3b2a70d1545485e6949e2b42c09f4d99ab0cbc17710c1ebe599d6776c6ad644547a1cccc6260

/data/data/com.suyuemobi.zww/databases/growing.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.suyuemobi.zww/databases/growing.db-wal

MD5 eb1c0220b13eda9822a42cf39fad100c
SHA1 85c5d34e465297cf091b8621890f28e50ddb4820
SHA256 6d14cf684bb8fefb15e1e81bcd6597cb2d7abfe5b5f4720a34d710440386e794
SHA512 8b3bb82c0b4fe69bd923a9eebc2e3012a01bf2d539e5d9f42abfd698d3efd5d0280d0e2b52776889456bb82541a04cc87d1f785084a67095578620ef9363d7a3

/data/data/com.suyuemobi.zww/app_crashrecord/1004

MD5 6a57f3f81ea53e9abe27386c38adb341
SHA1 550d4139742264e6522d7194c19b5f3a08bea137
SHA256 8cde4bef325affea457cb5615715790a7a47861b0867fbd70bb505b081ae6d19
SHA512 4873652254fca632b562d9fd6ca98f55aadddb5ffff4aa979a90f9b463a992831e814da270ca377ccbcb0db46376a0eae505342ad8f309b3e7ca2fe558e04d59

/data/data/com.suyuemobi.zww/app_bugly/rqd_record.eup

MD5 75b7982b5bda9989c8482ee147e1e42d
SHA1 caf8a37dbf6cdb347d45958cf2c42bd9524d0170
SHA256 03e64769d52ed9e9138fff5159b05c3beb55e6c873c75f68f1525926eb4ebc16
SHA512 948d1181919163860b479b2a1604414f04f758cbfbd69e97622b6f5933aebd515cb79b0401c5e469d341b7f62c243d1d79f584755914eccdb66bab57da237d6b

/data/data/com.suyuemobi.zww/databases/com.suyuemobi.zww:core.growing.db-wal

MD5 d497c211d0d6966a5a3eafcb173ec090
SHA1 00f6884199b5f87b06259163267a811815d9f428
SHA256 82877861bdfc6b6550a052594a0b598ed1cdcc58fe11344841605faad74393ee
SHA512 e94baafc8265e5776e07e37bf5cda091f79bc645214284dd061a07edb4b9386ea85e7a7b9e7a87640179c8d98d8ec9be1a9e0ca236aafece7a73b7dbee1e30ac

/storage/emulated/0/Mob/comm/dbs/.duid

MD5 bef6c019b8ab1ff076f03c4f6a5b1b39
SHA1 b3640fae7407115ed8a5ef4d789ffc5f7adb69fc
SHA256 5710cee7902c6a02a19db6c79d4b86a8c8a70026bed1371b3579304091048cf0
SHA512 ac273213585b522495b583b56e0c1b60c072741fcc3f5ead6b1ec0abc80f37290d1c060b82cf2a1c4af6f92448711a683e2191e91c2f6a53d2a8717d22ed8a4b

/data/data/com.suyuemobi.zww/databases/ThrowalbeLog.db-journal

MD5 e0de1df2017b7adeba037f85e98a703c
SHA1 9a04a418b9204dc05817e02aff8c653dec9506c5
SHA256 e4aa20b1c2ea559e697350c9f546a5122d83c1c2874c11860edc655c0d1ee904
SHA512 234ef3f01ba80e17743e0027f874f9720e74e6d4c910b58d7591688fb04fd06746e14b593958cb4beeb3e68f3e414b76dd4c9a03c9387530710e44545180e4ea

/data/data/com.suyuemobi.zww/databases/ThrowalbeLog.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.suyuemobi.zww/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-04 01:05

Reported

2024-06-04 01:08

Platform

android-33-x64-arm64-20240603-en

Max time kernel

49s

Max time network

182s

Command Line

com.suyuemobi.zww

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

com.suyuemobi.zww

com.suyuemobi.zww:core

Network

Country Destination Domain Proto
GB 142.250.187.228:443 udp
GB 142.250.187.228:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.exc.mob.com udp
GB 216.58.212.227:443 tcp
US 1.1.1.1:53 lbs.netease.im udp
CN 180.188.25.46:80 api.exc.mob.com tcp
IE 54.73.57.121:443 lbs.netease.im tcp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
GB 142.250.187.228:443 udp
US 172.64.41.3:443 udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
US 1.1.1.1:53 mobiledataplan-pa.googleapis.com udp
US 216.239.38.133:443 mobiledataplan-pa.googleapis.com tcp
US 1.1.1.1:53 nwp.t-mobile.com udp
US 45.60.1.206:80 nwp.t-mobile.com tcp
GB 142.250.180.4:443 tcp

Files

/data/user/0/com.suyuemobi.zww/app_crashrecord/1004

MD5 bf76821524112a74a54df8e2ec291ba9
SHA1 5bc93b9f38e9006f925937a29ef331788ed5dd42
SHA256 041f2ff0c329959f1eca2e8ee87baee5d443338e556daa1600505c1849086d1c
SHA512 0b0cf73e6b7bff983f086089bd1d580e63243467e92cdc4d686fac7742d268e545fb122e07c3cc7d3457295dc069ea398481f290e70b3d7773b32c3b64f892dd

/data/user/0/com.suyuemobi.zww/databases/bugly_db_-journal

MD5 e40ecca83488cb10ff1e96143149fc8f
SHA1 2eb8eeb8e3c4d393218717c864b827a5674fcbdf
SHA256 231c48ce1b07f249bc5c23dddafe8ff4b2a763511948e882a7bd81a0b1f8d063
SHA512 884baa2572acc9b1cb4260f654fd97d1cb284ea0eab30ec92709e75d696ee472b03ea6c3f62624303e369a6160298088f8c50bb0e6624949f806cbc6a5db976f

/data/user/0/com.suyuemobi.zww/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/com.suyuemobi.zww/databases/bugly_db_

MD5 b18f6a91ea4914bb11e752e6992755c0
SHA1 0cfa533909aea170c3c867e9e63a8b7961ae29e8
SHA256 6f9be97e57bd2b48728831c9bf34814befbed2021f0729fdba235a787da6784b
SHA512 bb501d696ddef2e670cf9a148477bff50da74f50f7ed72fc551870cc4a853901bd4dfe77c17389c3ab009d47b9bbf6d99024c9e3d799cd6eefa60179593a2c37

/data/user/0/com.suyuemobi.zww/databases/bugly_db_-journal

MD5 06d0ece27fad0fb2668cab9d94d9fbb4
SHA1 aa3fa6583dcd23e798997d6e39abf40d7dff39ef
SHA256 3310a06272cab2f0804cb782891175ad0f41df6fd6c5493428c98ffac6c80eec
SHA512 47514ffb7b7658151c7b0414befad2b7790b4c71c523a73d2ac71d808cd36294938dcdd6bae8cba7bacd2b39754b225081a40828901f6dabdcda9df439c0cbc6

/data/user/0/com.suyuemobi.zww/databases/bugly_db_-journal

MD5 b906778d63daa71e9b3e79de46f53470
SHA1 ca4a22eedaed29bfa7021abd34c64f2a21c394fc
SHA256 1f9291b4cc12dd118caaf98952026e6a7d94b4b3aabd4ef7a54c3c65c572fa8e
SHA512 37e7745598b9d90525cfd220bb710ba7522b26a053f7c23e1c713dba6cc20a4fd6a6243d3c63fc6cf5479a49613de57a7746c126772fb47f24252b3d4d072794

/data/user/0/com.suyuemobi.zww/databases/bugly_db_-journal

MD5 106ecfe7c63295b619404ef4f51cbc60
SHA1 ecc5ae592e60c09e5f639559cad9615bd6088e09
SHA256 f1ff3838b602e4c20b5da35378440e51889b143cc2998816f895fd731668e519
SHA512 79f64206af4b6ebffbff05c3870ae770528e3f39af8d4c6a1f0f065380b9cdd17f24151f0a2bf208a4023a64ac659e6827d40fda1a68fdd4bd1d8922bec04cac

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 9e13e6cdbdc89478ada7c1e34a076b66
SHA1 100a4727b85e8655476ddb74eb721013007ec6fd
SHA256 685b61596d861de2b166d30edac2a57b95251d5d87bfcdbcbc5ed38aa16054af
SHA512 993981000389d77ca31c13cfec1df2e3b1f674b59cd48ce94e1eec6a59904f57b65dd30a40d095378bc2914d2ea26c3aa8914ac5e4eb43bf20d955d27d636817

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 e7f3bd89c9e37d4a4848ae7e68cb4ac6
SHA1 cc5569dbf68c5e8f0c2f1d5eb1eacb9ba3c482cf
SHA256 cb854eb4ad67b32c6aed5661fc9d8c1a9e4023bd1915ee57a89222dd632ffafb
SHA512 5ebd2e0f2d84c9273df7f050e00d4581bc7eb422a110917f123701475448aa5b118d9250d18d70f55dae070cfdf5fad994adf06b980a1ad01a39a4247e3ecd35

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 25855523e489c8bd1285f23eee5d81ff
SHA1 d55475e3aee57b194f2dc309e2207c89d05d0a8b
SHA256 1804a59383536f24ad1353feef38dad6dc89f218f3375df88f28394cd181f83c
SHA512 126ebcb3353d00cbabb30337a096866ca6135e9287d814b00da54ac76ddee93a6d185f069657f7d8767cb0edaf5cfcde1230c5b32e83d7608e21d7bc79c4dc55

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 4b81cef9a3fb9421342db9e4554f6f68
SHA1 ea218c7349cc8061407dde5c54d7a035beb30553
SHA256 7e9073f9778a937688aa803cff2175d26c73202514d70e36427051fa884847a0
SHA512 5e9f3c18a699e6da51072eee2e02f41519919653255833b6fd6553b0798bc0ac1e54ea89e9813a6d371e677e3756e3c057007e8339215fc2513d522685e65a0d

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 12c17228ed64cb015583437f37500750
SHA1 9c15e450bdd89ec1aa40cfb48cc5192518452b83
SHA256 bc89c6610774929251fcb87290ab7105c4606817ff0e8d231c8b925465c685c2
SHA512 01cfa964c5cd7722db51768d3335d2c47d04a023a0d6b01268888b7f58daf51ed51eb228584d650375d9923b8bdc0a76262297420edc1b8d01b07e259f599867

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 ad9729ed79d2e02dd22f8bc62169c527
SHA1 d3f2ec5f68e5e13852ad686058e8600804ec928a
SHA256 76689c87f395b83ab3ce7d1a1df990e09f28f0f7eaf68baa71ef8ef52a037230
SHA512 bf266cc34bfe56c619ec68ba575786a8f676bf6aab46719d420e88a552442c8fe4499964e5dcead6f59215b7952fd0fd08815ffdce743c96b42d3a73ef8ecd1a

/storage/emulated/0/com.suyuemobi.zww/nim/log/nim_sdk.log

MD5 c8bcec0371de85bfa976a1eca24ce265
SHA1 e234d758bdb3faa0d589afcb433837fe518215e3
SHA256 151167fd02f9ccd0d58825cf0aa47a9f25957af92f9b76108fd45fc73b063f12
SHA512 e3c044fd8454f22ce74ae5e2d0bcdffe087aa64986d92120d0e1dcb1163c75436516829183ce8f2fb97d6b879777ee6d94c2d70909050245934ec4ea42af404a

/data/user/0/com.suyuemobi.zww/databases/com.suyuemobi.zww:core.growing.db-journal

MD5 ac0f59a5ccc41ea9b70e32c4a18418ac
SHA1 e29c9666afd9c04e66bb6c268ab1fd577f897983
SHA256 f229b6244c6cebeafda2cda363a510e011afaf6add9cc8563cc94e5a1517d679
SHA512 1b295bc5576ab114f3079171c2c34d79a8395e61fe2b0492507b13d68292a97c661f65b134ed37f2ce01eff8a4e405cf2f13451aa81cec06aad69650608ead29

/data/user/0/com.suyuemobi.zww/databases/ThrowalbeLog.db-journal

MD5 2b1bb358abbbd22170b1b6cecbc42d92
SHA1 6642a60be3025274efd1edad66f40d6f10ba2f0d
SHA256 6027722c3ec21a912fadc6f9e0ced88354fb1a2c6dfa0eb6d46fa26195deee54
SHA512 7deb035f6cf79e0fcd483d5a568b41b833a53196e9c350a55c2c33e2a95b821a92d5d18f9cbca7a1d23c2ce2abb93b2d3aebec8d269c5987b0a57f74253871e3

/data/user/0/com.suyuemobi.zww/databases/ThrowalbeLog.db

MD5 b249d45262863dd03e0454d610bf9a9f
SHA1 162bedd75d61afd2b34206d8faf857e409af15d3
SHA256 a0da6eb30919b02be8ccb83a9d38d1b0cfbece15284443d438f9295309b7ccf4
SHA512 acc59ff84ada4ec0c22766088961cc80af79940cc55d0fd55d3ae046aff70f5fdf2eef6d225fd4f74de4ee0febaa1b32351e08fe16d1de655808b9d70e7f0a5e

/data/user/0/com.suyuemobi.zww/databases/ThrowalbeLog.db-journal

MD5 6af29f2a5d47aa19450d43aecdf876f1
SHA1 b605b1f560bb4807a033b4ce60a0862f008fd154
SHA256 e767c6e9725500d62c4a8f559679c9fd3c6c7e5fd7c57d6ea9314607267222cc
SHA512 3541b2b89a2b6ed8855143462089ff7195e1d6b54c3d7bef8f4295a4529eadf5ffbfeb36546d6a0bb418bd7f6b5a0f1a0a4cf70c576e3a959b20059aeaa944bd

/data/user/0/com.suyuemobi.zww/databases/ThrowalbeLog.db-journal

MD5 d1c3fab111272f155319bd6ce8f701eb
SHA1 21fefe6807ad4297fff930668c6a00d22b476ce0
SHA256 ad00ae20b4c9c70ea8918a99d1c1d50421962a3da0d93975ff2ab108d4e21465
SHA512 e1c1be96cde7e9d1750954d98655225e5e454ecb1c4d3c32d89d21c9babdc38c8d34a996aa4dcc661fb3de488dcc728eaf647f0c71b6b76f20a8f58b95711033

/data/user/0/com.suyuemobi.zww/databases/ThrowalbeLog.db-journal

MD5 703e87f9b5e00a53bbfaf2e973260d8a
SHA1 5685b64929150ffd4f280f55ff6d416f29f5104c
SHA256 2d4ec557fd0de0fb0867f001cfc45ca0f959a40cb0017982326f82ff3c0c4c54
SHA512 a644dc9a10b3d13fec288a00d2a10c151539a39f1dae3d86f5a42cb39c9f818b3e1e97b5f75699e2ef29f8fe5078ce4eea7ea1103eabf135412dc7554e3c0b03

/data/user/0/com.suyuemobi.zww/files/Mob/share_sdk_1

MD5 8e24e79baab91c4d0604eaa9006a0cb3
SHA1 e427afc94a4b957a7096f73e395a10ea404c076b
SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA512 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae