Analysis

  • max time kernel
    7s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 19:53

General

  • Target

    9610cf7ad09ab7ad1a12f0a55bcf375b_JaffaCakes118.apk

  • Size

    7.8MB

  • MD5

    9610cf7ad09ab7ad1a12f0a55bcf375b

  • SHA1

    99cf2e8f42a687d5dd5741473a8303c2ec391396

  • SHA256

    dca9676cfeebaa665d4787dcefecb636b56c14892afe90687aaebae8a4212953

  • SHA512

    c4e4d465218f5baa06aa08213ba6140b7518338737444bf04319354779c30002895f18e35f3ae01697e30417af4128f0f08990eb0ec1a153fc7b1bb4eedcb3a1

  • SSDEEP

    196608:WCPXJO+ECYEMaAhjmBs1rF8lJ9YQdBh1yW:W4NYpaAhjmBs1rkn71yW

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.zdhjvh.allztiay
    1⤵
    • Loads dropped Dex/Jar
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4234
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zdhjvh.allztiay/files/jni.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/user/0/com.zdhjvh.allztiay/files/oat/x86/jni.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4301
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zdhjvh.allztiay/app_oiuj/zkl.jar --output-vdex-fd=50 --oat-fd=52 --oat-location=/data/user/0/com.zdhjvh.allztiay/app_oiuj/oat/x86/zkl.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4333
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zdhjvh.allztiay/app_zxlk/bvfg.zip --output-vdex-fd=54 --oat-fd=55 --oat-location=/data/user/0/com.zdhjvh.allztiay/app_zxlk/oat/x86/bvfg.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4367

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_adwords_bg

          Filesize

          1022B

          MD5

          4b9b64c9dc6d13733a9ac3320ac9f53f

          SHA1

          a02218ada2417dd85a3f3a22db31d30c150440bd

          SHA256

          35dc398b4409f3037ef52c21e4674a283e1cc0f71894704a4583752b91fb0cf1

          SHA512

          b819d1ca851815549bff946c1950539db7d199b3b04be0f6a6aadb1602225e895ac7283c525733e9e421646a6f2da2b732ce3cccb8461e93574c04e5d64b31b7

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_appsc_an

          Filesize

          3KB

          MD5

          58dae109b45c2378d880225e9f746240

          SHA1

          e67b37d47c009a11c9b365d38a3692f6e67c606e

          SHA256

          afc834307f4d1bb9eaba3f3ed85aa32a616ebef7b32b14ba234926312ad0f2ce

          SHA512

          ca3c5caffe9340d2a39e84c8e7e2ad495640338a6d1d6ecafb4b935578b334fcbfdbbdbdab983c7b6559387cfd197cd8fd33c243d6c06eb9368c6f7e4ccf76cc

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_arrow_down

          Filesize

          979B

          MD5

          db45ab95930456e6baddab4e6fcbe712

          SHA1

          fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8

          SHA256

          5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a

          SHA512

          d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_arrow_up

          Filesize

          970B

          MD5

          20c4a831398dd9ebd8dba380a2e7857a

          SHA1

          c6db26860686a65f5f402d29d98b358630c10e40

          SHA256

          03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d

          SHA512

          85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_bottom_bg

          Filesize

          1KB

          MD5

          ffe93c95f1ceef187397bb763c992ccf

          SHA1

          6b082b7f6c55acd0987611b3b9a5aac9a5b06d67

          SHA256

          06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9

          SHA512

          10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_bottom_btn_cancel

          Filesize

          1KB

          MD5

          a7481cc1f04ff397669d5313711676b9

          SHA1

          6a8a1755f8bae8c1c4236420de731ac5e6479df1

          SHA256

          7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b

          SHA512

          6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_bottom_btn_install

          Filesize

          1KB

          MD5

          6a976eab4bd6a204fff19f363a3e0fad

          SHA1

          7815e2d7905bb25ecec99c6491e05e498baefefb

          SHA256

          a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796

          SHA512

          8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_btn_install

          Filesize

          1KB

          MD5

          135b4b02c06ce896c0289c06931523d7

          SHA1

          219d7fcb9a47b14dc724030a5b22b00e4912c419

          SHA256

          7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc

          SHA512

          e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_btnbg_blue

          Filesize

          1KB

          MD5

          cd03c81961866339359a8862cd420751

          SHA1

          4356e958c4b333453a187b13cfb8e4951e85b5c1

          SHA256

          5d81cceefef430d84abee2aee1a655e975e638eb6e90d9edeaf70df18f761453

          SHA512

          29c6a83607ef938c8d74031781008075f9e29f28381893ce565d0d0e5e2193657264deb7752709f124bac8a7625ecda18a90763f8b8cccd48868105fde62846b

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_btnbg_green

          Filesize

          1KB

          MD5

          b61c2cbfc113d3080881c1a6c805de7f

          SHA1

          8bfb29fbebab3ff36faa5f6d19bf7bdf57608dad

          SHA256

          740a7a55675de72a6d165dd1aea7f15e6744f08e5131c2abea7e6e02ac4752c9

          SHA512

          7cb6ca09b180adeb87552b9b814ec50723d2f8e909a5aa1c3c63526bfe90043c0f6f97696b0e40d33c045a6d7f4b4df711ecda2a93839b9409f69c84491b3151

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_btnbg_orange

          Filesize

          1KB

          MD5

          144bfaa9628bdc547f92dd8ce04960db

          SHA1

          f60797400afdb88cc1a7b26eaaf5c18b7d34e3c3

          SHA256

          56707731bc7b76b806d9db7ec7e73173d0ba7c5acf22c8c040fb1bbb0d07090e

          SHA512

          071111562423e811333afd56dbd18fb68e0720f41936c42d266f70d041862560b363aa202ae24af40e9ca611d7f3eb996ee4184834097e85fbda1e2d36291f4a

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_btnbg_yellow

          Filesize

          1KB

          MD5

          c56a569d3e2cc40deb8ef6dd9c8273df

          SHA1

          fcdfdfa5f883afe7dea8a08b4e22d66b243065c5

          SHA256

          0e603b7797d42f1eadf5ea14499460e84e6525df6bdc4ee1464e00789c10c057

          SHA512

          b1549f4667c2765feb11d38469a5bfa4f599609ff519e65b73fc01521886cd57e7f30c2c43655d2b3af8665c77cde4f3a07e1e21f7dded059dc22ac60cbdb4b8

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_cloesbtn_top

          Filesize

          2KB

          MD5

          6edfc3ccf80c5cb2c25bf82dd5e78c46

          SHA1

          0f71fe007ebb0479e42905c6a78f80b0a109a03b

          SHA256

          2225deaa4204ae88206589b390dd277c9e24ab0a68338cec19eae600b854fe32

          SHA512

          a8e4adcc0cd0867e8bb2cfe43a04c3a8e8a84de99ad7150c339c4dab1e81c8dab87af17fe7b7bbea41d54c6acd6214224f07ba456a8dc0fc8c33b3782e83ba4f

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_cp_more_btn

          Filesize

          1KB

          MD5

          a0314cf413a6efe118ce49aabe7d323d

          SHA1

          a8134a8d8506f5d44cf084b501a73fddd194fb8d

          SHA256

          3d723fa2d6bef03b2f44e09486edadd7eee392e14da4bc9435521fdb9d5a1537

          SHA512

          e5decc76e4461aa063571e45e9d1e47fcd8586311b726c1d1bb60e327c43ef8e104f4e1614e9ac656d5ae0e9095042e230f7245c7a3f0d89d515a2fad78046d3

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_cp_other_btn

          Filesize

          1KB

          MD5

          5b1fe1609131bc828527fc35dc4c7353

          SHA1

          39b6169e1e2a7fee0e56e421184d81f071d3693b

          SHA256

          ebc4e49b42208680f7d5b9ebae07bed1712a1ecb6443dcf5b09171faae0e0eae

          SHA512

          74ebfb919c0af6fabc52228d7b501c632c95d28b91e0ae87109d9da5f422471f96190858f26d097bc502a8e673ccf31e35ab2b15910f7a43e8c48fac64a0c8e7

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_default_bg

          Filesize

          3KB

          MD5

          67d8c02c18a4eebb21aa28ebd88d7a8b

          SHA1

          f31fe91485bba4da727e9a0d0525c7417d6c72ee

          SHA256

          7b341f9b1ab0a691029b44f9b1d64cf74fd72ad0c74772964645c79f687402d0

          SHA512

          73c14d96680105ce3e24ba0667cd2452848f9c7d2549e937667c25bcce01a4d9207a78f2dcfc7c09cdb39f87f079c7847ceacbed36cfae55013126ab3bdbf5fd

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_dtop_closebtn

          Filesize

          3KB

          MD5

          82da041f51d1ac5bb8def1a7b43d23fa

          SHA1

          6bc0fa16bfa87398bb17922ee2f6bb1dbd9a4b6a

          SHA256

          0bc4050b837665100502e255107b5e1521c7012b03fcf41eeb92b2bb8c95ca5c

          SHA512

          1e558cc54a7f5900ca418ce7a64866273a533a25d23a84ca4721277528949836079472c7fc0e66cb5c41548ef2c06d412a1e8538fecbb02ceecf982e10c238b5

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_img_bg

          Filesize

          2KB

          MD5

          089965b9fb96326ad74e361a9a524e4b

          SHA1

          528cc6c7a10de9f525919a477c9e20d6b6e93d55

          SHA256

          d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46

          SHA512

          b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_install_btn

          Filesize

          1KB

          MD5

          c64af13b874ab8cfdac99f000c29a3be

          SHA1

          e5274173c7721f8c77bb5da46fc94f195abb4924

          SHA256

          67af721ddafee67f3eea6241bcdb5b8c1315e8ed1b8dc852646cde24fe040516

          SHA512

          d59c85b4576152848427a74214c7b979c576f5cc6978430b9d7076f50cdf8957d8256eccf55aaba2bf7f80da2a7a2b445a26758aeaf3e889ae1c84a3fb2185c9

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_list_title_bg

          Filesize

          9KB

          MD5

          c34bb6ce3d7def12e8af79e87a6b5173

          SHA1

          99e8103027a7bba73b736fcded9d0d91b49e4ed9

          SHA256

          daf75ee4e642b335cf1918ac9678502bace139f76645eedde7eaca4f296b7e57

          SHA512

          58735b6034ff6ce1974aa0a48952100345b6bdf74a4dd083925aa87b0882e1931ff8608d03d0854c9de23ca409e5726ddc1e8313339181f57312bee0804ee2b7

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_listcloseBtn

          Filesize

          1KB

          MD5

          6fb767d2563a35f3c0e362a5970ffe1e

          SHA1

          6d3a8fdbd7ced06a363517cd6cea7a7fea16c269

          SHA256

          534fe818efbaa752826c53f1b63d3ecc1b647c8a9f7970012e316cbce5fb5ae2

          SHA512

          ab989e8b01b9d397cb2968dc8191a9c2c6fdf19947b30b96cd5266afc6fc330a318de8c914d34adef98caffd151a0bc29fb130bf11c5638e97b3ff15c723fc2b

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_listview_bg

          Filesize

          2KB

          MD5

          28554ef38f282f89a2f3b298157fc984

          SHA1

          08147f2b5a83fd07f5acadb43598480a13d3fac1

          SHA256

          b4034e26cfd742433a0b59676bf73a78d93d413decc891abf3d34486160d307b

          SHA512

          cd31cd81a7c37155f540c1b636cad9ea198860952d79f8b3d39dac661c2e7fa82e1398830c7aacfa6904e4d4cffa6f5f1d906dabbf97091f3e38a65fb5fa51da

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_m_star

          Filesize

          1KB

          MD5

          590dd3230f50ba57b7a828cf1ad04aa0

          SHA1

          d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee

          SHA256

          d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7

          SHA512

          449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_page_normol

          Filesize

          1KB

          MD5

          2bf3d7d7ffe4a54396979c2802e5a0a7

          SHA1

          631def5dc6bd48080d51d3482a85c470b291c316

          SHA256

          ec1601e7e19b69d6d6bc8f18738698a6b4483a4f1ac546215dbcff9cc74acf7f

          SHA512

          2a9a95a9298c59a90b7234343f01b70219653e4d43217c83dd3dcafea84b96727d1e5f40ba035c36fb4dc6a83478fa66d545a2cf8221aa2da1ab9565b3deae79

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_page_selecte_blue

          Filesize

          1KB

          MD5

          1c4e3c1de688a5cde892bd74eec4bfc1

          SHA1

          bade0d4743822214421dc664449c0b0d94d69aae

          SHA256

          ee7abc5886a058b4436aa0a53c6be535fc0bd3a6832f2b0b0e611473667dca5f

          SHA512

          ccf419b266d7fcdf4c6696963c657f7138a59b06a4fdd900effebcaac0b162ddb5e9135f5032a33e2b3ffc17642065600d9b9292005e200f5cd8e79b17968f24

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_page_selecte_green

          Filesize

          1KB

          MD5

          9dfe941765a15b163eeb46b49cb4e89b

          SHA1

          caad3358c1706f28624e10616cf6d26a45b2dd5d

          SHA256

          d92d42135d59f97d35cc2d553b7bc79f19397a40cae9ac971a86def6fbc9167f

          SHA512

          0a38e4a6187fac65999a9a27ff4a917ab6dd023587ae5b0e33c95a502e7e93626ac3cfb48affaacc274b5f7fa118f483a627e70288757308041ac67e3337a4f1

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_page_selecte_orange

          Filesize

          1KB

          MD5

          ffaccc20bf244076988df00a6bc20b06

          SHA1

          4a7176527cca9e9a862cb12485cf02c49c228913

          SHA256

          71d16959b999e8251ea5ffbf0075a43724b02f85ca34e3ee82b31935537c9a9f

          SHA512

          dba973767cc9e9eec698232e9f7d057bdf5464c8d70fcef3e6631ad72d9e62ab4cc08169db2e3927e2f3a870787ee60bfb4b26ec1ed8c3fd30e84aa38afd65c2

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_page_selecte_yellow

          Filesize

          1KB

          MD5

          8487656fa992a7c3603773e0b1b1d7e0

          SHA1

          ac740cc2ce2ff0729b70c26c70ac0462072d1b81

          SHA256

          12b5a8c075e94cfd69d4a3ea6e62552d7e3e7e2ae5f6e69b7fc4ab5a6c9635a8

          SHA512

          b6be96693719978dabdaf05e3f733925b126959bf8ec0096775d76eeb08a6a5fd56c2ddb4697d81a8da9ef1e00524348c0ec7aaa36ac5302d89dd51db6f08fad

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_pop_back

          Filesize

          1KB

          MD5

          64e607b18ceed3c184658ad0bead2c87

          SHA1

          ce0da694a61264c3dc52a42c5e4eef67c267330b

          SHA256

          ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad

          SHA512

          a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_pop_bottom_btn

          Filesize

          1KB

          MD5

          153c4a358fd2029b62d88c5abc8315f8

          SHA1

          b8db469b4ed0798040ed2cd7618fb31c143bb733

          SHA256

          6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945

          SHA512

          7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_safe_icon

          Filesize

          4KB

          MD5

          5101a78d00419574d0dcc0eb1f4b75a1

          SHA1

          c4142d79270fddb27f24d6e8e8b61e9837b3de48

          SHA256

          abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999

          SHA512

          cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_safe_line

          Filesize

          1KB

          MD5

          1533f88b71966664017deaa78437e057

          SHA1

          7b68a5bc7a6808a041c05ac7adc5da0fd378aecd

          SHA256

          ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a

          SHA512

          f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_sc_circle

          Filesize

          5KB

          MD5

          e50c867a1725d1a77477d0a3931266f6

          SHA1

          1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67

          SHA256

          0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be

          SHA512

          88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_shortcutad_bg

          Filesize

          2KB

          MD5

          66cfa171762dc97679085b770d8a1a24

          SHA1

          0ea4278905b9beff4cf8ab932955e720b7efd200

          SHA256

          7742eed2fc4c8437016dddf0af8b6b7ab44c8cb67dc2adb13f44ebd959cccc0a

          SHA512

          04c3b023abb743dbbf4a856c51d08af43d9fcc9f128073336ba4bb8149a9ce4d70f7cc50cc2989e59cd82339371345f02a341fb7abdfc53b0cb8c0680c400ceb

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_tj_line

          Filesize

          934B

          MD5

          83f9aabf34554a65a8f47514703ea69f

          SHA1

          bc3097db92c0f1821d60779d9b1f712cd0cc7866

          SHA256

          a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d

          SHA512

          11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

        • /data/data/com.zdhjvh.allztiay/app_imgfile/d_top_bg

          Filesize

          1KB

          MD5

          17f5c25477711a64b0dac419b8d68c0c

          SHA1

          475301f9d8143ba1548114d1de9272a18298a5dd

          SHA256

          b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8

          SHA512

          09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

        • /data/data/com.zdhjvh.allztiay/app_oiuj/zkl.jar

          Filesize

          70KB

          MD5

          e3d3999873c0f4c67b08c6b9015cef48

          SHA1

          10dc320eee3051b272c60dd5d311090e1e97b6fd

          SHA256

          1962b0bd5ed7d07b207cd7a6dfd9acb16d979ede1d6992841e7f9e30ddbb7bcd

          SHA512

          ed7dd135737745ffae14a7d953abe864727b2f780ac429467779a3237793e0d72c08cfb586986cd71828f7f3abfcf8f175f5f684475cfb5c8863999625d1a902

        • /data/data/com.zdhjvh.allztiay/app_psimg/bottom_btn_cache.png

          Filesize

          3KB

          MD5

          b08b3f807464a79d8a28b44eec61d5a0

          SHA1

          7855100f98a14220cb24a8e097c1aed778bf855f

          SHA256

          adda17ece90d03a44e3f15970f62c0aef32dbf3459fc47eb72914975397adace

          SHA512

          a20b7781df1b6636c4266011315b602b1a69a03656206232fee54e5ddfe85bf431301f9fd1727c6aacd0e2ecd3b9ca18c0c7880613bbb8ef7660ee864bbc6ae9

        • /data/data/com.zdhjvh.allztiay/app_psimg/bottom_btn_cancel.png

          Filesize

          3KB

          MD5

          d2135ade336215f3510780177806f569

          SHA1

          42ab579d5c377f0674fd749ce99efb20dd57351e

          SHA256

          790801d8fc1b026b2b1c919ee915e776a3bd77a231861d8cff5ce7812565096e

          SHA512

          741b4c2c730df14c2d9d61f3eb01a87fa06ef89e1c1b91da27b03c98a20ff7fe01fb47cd08234316abf597bec03ea3e4a770ff8799c9347ddd4e9e916e9f367f

        • /data/data/com.zdhjvh.allztiay/app_psimg/bottom_btn_install.png

          Filesize

          3KB

          MD5

          7f10a1d9c5e514050e22138d70d842ad

          SHA1

          2a58f5fb306f4f4d071b845baf84c0bb39ee4ad7

          SHA256

          e7758d23bd9ad789d81e7f9eef7e948a403609a4a28ba53d9b3124135ad796ab

          SHA512

          cc3186cdd32448ecd35b052b6aa7af6b189644611518f711bdf8ad1b29acab3c8a0e65fa736af500153ca281b1147e2dc005fa6799417799fc185ba6fd64fcaa

        • /data/data/com.zdhjvh.allztiay/app_psimg/btn_install.png

          Filesize

          1KB

          MD5

          dd18221de23603b78f421d0ba0f591c7

          SHA1

          c1806e627f1e71612fca6638e93894a00b092618

          SHA256

          aa4077aa3cc99ec30f27c07fcc11f8e8d48e5cf0cf786335c89a459a5a8949c3

          SHA512

          8aac08f0e222bfdf4d7800c90eafbed96ce47a93e71ec04234031da33b3aff981d3463a6fb8e66122d32848225fadb759e4c0b58f374873fdee2d9d157354e93

        • /data/data/com.zdhjvh.allztiay/app_psimg/item_btn.png

          Filesize

          1KB

          MD5

          c273f481a2774797a0f67a6f4a042bbe

          SHA1

          2858e907a559742835b1d820c8fc635ec5f7d094

          SHA256

          bb44dacdbda4803c00d0d7ef98376a2c3ad17d4c8b33084918a4986c744135ac

          SHA512

          75ee76ba31b62d0fbf0d17da7db4732664bf083e3848a1c38d82aca70d8fdeda54b3bef06c6df833fb9a4459c7789db2240dc886e52f2d82b50c464d505716cb

        • /data/data/com.zdhjvh.allztiay/app_psimg/pcheck_n.png

          Filesize

          3KB

          MD5

          1bbaeec81e97f3734c45574017b92488

          SHA1

          dc916c37bc512ca035adbf4504fad1a53ad1f6c9

          SHA256

          25db9414151862fb15fb24ec8530ecf1dd0c8b53664d2e153b042c24fc14e37f

          SHA512

          d630ba8b634d7ade563eda37b5c887ddc0582ff99346f19f6b1b933a8282a435cbe469f769788cdeadf35ee899f6fdb389222847eda76f3e101115901ad07675

        • /data/data/com.zdhjvh.allztiay/app_psimg/pcheck_p.png

          Filesize

          4KB

          MD5

          e0a4ce2b09acb7c9e83fc656348ba99b

          SHA1

          9713de8c7f8c3d8631bfe91a57738dc4627c72c0

          SHA256

          b41279960593d3a9212d4e3b34a712d957a809f6c0003f1c7b86445581d675f8

          SHA512

          ef5e23caa800f35cab588c5d0880727d7acb0ecfac1b274873ed313935d2f0f79e79ff72852b62e6956f7c1bb55de74dca75600b073002aafc498a9f5a9fd49b

        • /data/data/com.zdhjvh.allztiay/app_psimg/pushapp.png

          Filesize

          4KB

          MD5

          ab7f8efe5cc8cd8979bcc02000ab881e

          SHA1

          6e78655557838b3515a922aa7df1bf44f13ef567

          SHA256

          d749e36c1f6410195fa647b7b92137685bfe64a20b32e14283fe31217c4c3f77

          SHA512

          5410549889161c58e706e882befed71b2511f31e0196eaeb487fba4113f848e61110fe1b3edffd0318b010d9ff60179db861a4f55ed10c149c6aa6ec283802e8

        • /data/data/com.zdhjvh.allztiay/app_zxlk/bvfg.zip

          Filesize

          63KB

          MD5

          008768704498777c338952dd205ca895

          SHA1

          2575b5be9568faf3cfb2fb2b71abc511ab44a5a1

          SHA256

          56e4a967bc3c6b7c5bf2f77e5ad5710544815003cde804a7077efa6179562d2a

          SHA512

          8c9804ed9c7382de86d6d59e0d319a8fd099083fa98bb7f194e0153ffea8e7c61c6d174a57885a049f0f72086b76f6ef60fa4b5e48c56ffaf8ef9be09e5bfd0b

        • /data/data/com.zdhjvh.allztiay/databases/cpdownloads

          Filesize

          16KB

          MD5

          a33f9d3d942100baafb0ce2853794398

          SHA1

          3ec882331eaa9085b1c5a3abc8b32c86109ff2d3

          SHA256

          cf64e4a9227e07bc7f12b962b948b80a528e1f933926b1d31464b3f13013107c

          SHA512

          686665b426afb4e8c8235f73895e62c4ff73681238b52b02decfd70538a776dc627aa15687f2a5c359726de75cd923e7e5d93247aabe16855cd809c426046263

        • /data/data/com.zdhjvh.allztiay/databases/cpdownloads-journal

          Filesize

          512B

          MD5

          2f5b96033470d2a3bf14cbdecaef2dde

          SHA1

          9aa5e862c9fa3649853ba4c6897c7de9bbeeb8bd

          SHA256

          862cf71260109362f1f068edf194ed2c2432556d72ce26d26d3c5440ecb62f54

          SHA512

          962aeca32fa8e6a72b4317a429bd82ba97c8f976e682c2d3eaa84ca0b5a616fbef825eb06aedd860cc4bf9cfbe36c1535e7a845759828dd59a4c7d71a1650421

        • /data/data/com.zdhjvh.allztiay/databases/cpdownloads-wal

          Filesize

          28KB

          MD5

          92d3792df12f84652077d7fce87095e7

          SHA1

          20b14d4c6c8c47fde3482aaf2067807cb05f6201

          SHA256

          94281b8352d024946252ae8f0f00e1b773f9e15bb809d5463da235370b2c1f0a

          SHA512

          052a289781073d7101e7caaff473d5cd3e59dc60c88c97f41c2e9b58b26803deb3fcbb40d14f4742b53f0cb96b69032083bcd187214798f862c1e2579d8fb13c

        • /data/data/com.zdhjvh.allztiay/databases/lcdownloads

          Filesize

          16KB

          MD5

          b330f8c1f57cd84a9a44cdbb0eaf37a8

          SHA1

          78db9864c154b98664d34dee623ccaa1536e4f78

          SHA256

          b416d66409ab1a4d37e7bab2a5739f887c81a341cf42695845eaaa014f3387ae

          SHA512

          1648f4e4551e86ef2a07c2712fd402ec4830d45a92975770bd995b74fa7e31037a28f08648bade1b6e5154fb6916da7c06e7a4a8de5f3030bed9d7108bd5b48f

        • /data/data/com.zdhjvh.allztiay/databases/lcdownloads-journal

          Filesize

          512B

          MD5

          665631d8dafd296f3ef31b27271ebf80

          SHA1

          794bf6e2a92ff4968f3bf15bcae6248176721a12

          SHA256

          0c91cd526912cd7c024d38994c90be46a5608ed20cd8fc317037cb0e9de833e2

          SHA512

          62a3a1ca9ca95c7f3cbe0bbaa982d26c58ba7b0874937532134503c477f2804f4d9b358699bb666e8fdd5eea66f19a54d5abda6c1dde7dbb96a64a8a2a28e3cb

        • /data/data/com.zdhjvh.allztiay/databases/lcdownloads-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.zdhjvh.allztiay/databases/lcdownloads-wal

          Filesize

          28KB

          MD5

          a70a4b862515971e55dc4ded47f4da7a

          SHA1

          1793443a305faf0aa1479cbd97f029d365de92b7

          SHA256

          5c8de13e88147013e95ad26e1f8289725b43b7c4c2ea05e69e51f48cea2a84d8

          SHA512

          4a347fa9234a6be5ba4a5901115e2e38ec7fd6c7fc4f81162171d8ff32caf003284f4747f3e7d7f9d0c1dd24a029eeb1aebfc37a36189754c813ecc3787d1408

        • /data/data/com.zdhjvh.allztiay/databases/vdownloads

          Filesize

          16KB

          MD5

          e25d334bb1ddccc1c84e5a4140ad371d

          SHA1

          1f3a8deb814dc002e548e39dade4900e8a9ad4ac

          SHA256

          14b4d9273f63a895b53d8e0f2f956db08b8b7dd3cb3ac1684b7327d4938f77f0

          SHA512

          0543a273578dfc8c3ea173f92a9be08a36dbd62b7eb8feb73f13490d8ed40da85acfd73501de0d95573bb3f254f8f15d6e02674fe8e7605cc17363a196d636da

        • /data/data/com.zdhjvh.allztiay/databases/vdownloads-journal

          Filesize

          512B

          MD5

          639d13d6f85eece87abf8d6e242d2b90

          SHA1

          c78b97f686761f6b8ecb98c3c08ed0e7e33f2551

          SHA256

          a6e50defacbb5b5638c24e60434d15aef02089ce2718415f549bd9c45b811fd4

          SHA512

          502b98b2726572ce20593ae508fc73cd20f475d4133d4a015129bc9b851047f78c6144bcab7af3aaa01937aca930e89e46ed8bcce2d219889db78f9debb72de4

        • /data/data/com.zdhjvh.allztiay/databases/vdownloads-wal

          Filesize

          28KB

          MD5

          e2db7f8335c4d1a0bccead38abb3850f

          SHA1

          a12bfaeb1e731a9a241cd05f3dfb7d13623a9e9e

          SHA256

          937dc5cd219fc3a377bcd1ae0adccc49ab01b9c5ec89aade49b3ce84914b5ed0

          SHA512

          313f53dabb2633075f2d515bcc68a5df6d05d12ba6ec5caaebedced82287613806da10b530c336f03af7f665a5e7a814d0662cbe51ba2aaab968fc7446ecf46d

        • /data/data/com.zdhjvh.allztiay/files/jni.jar

          Filesize

          287KB

          MD5

          42345a6bcccddf0a1b0c6051dbd2589a

          SHA1

          c8c735444c83d9640a17488ffde2ce65b54043e2

          SHA256

          a907256b09cbadb4ad65b483c744047fd42bd2b9e0e21c54bb19f929052f66f0

          SHA512

          3271f645a09f6dcdb9922fd64cbfd6b060d3fbea9e37b3ac4947267d91e3bb42c9f55f87e3b5e23100f8851d8f027bdbc25ca2af25d4ad3939976f561f409449

        • /data/data/com.zdhjvh.allztiay/files/tempjni.jar

          Filesize

          287KB

          MD5

          53c8a982af0615f126be430ed18f0107

          SHA1

          f72dcd6d17b369e21d012a9e6f645cfe15f410e2

          SHA256

          d93a6702a55aee0209a7e39987aa1212072cb1b35f77a94d1372eb7a67433cc4

          SHA512

          98fa5bbed5017da36169bcca5ed66ec67c5ef567933c53e4f8707ca563d64aeb04f936bf278ba9b4e5b04307f6b65a005e86ac2e3cd7df483e666f0ace798d73

        • /data/user/0/com.zdhjvh.allztiay/app_oiuj/zkl.jar

          Filesize

          157KB

          MD5

          a973c356084d6d981e6ef45ea7121d4a

          SHA1

          19a2b455fef053fde7342ed87013861172e8539d

          SHA256

          be966f072aec49410f288451ede08748ab5ca34863def87dc7a10131b043dc92

          SHA512

          c71833ee4efb590ee40f0d284acabc5fde1f17ed65a5486c4ebcda338762b289e7f4fd88628648d2804739c99d686e0def6d90aeea7e5d5433d4233bea6c6ffe

        • /data/user/0/com.zdhjvh.allztiay/app_oiuj/zkl.jar

          Filesize

          157KB

          MD5

          e5bc8e366206976c03c01b37668a4901

          SHA1

          2e6b477ca543853647bf58d2638503f92f7a46f9

          SHA256

          0fb4aa0d4c4493c23ef8fb57cb197913c8fe930eef644abf79c3aac8f1e1d108

          SHA512

          ed7da038ed35d200b633beb9b641c37f846138a8815868e86e31d9c66e90038a6428c6aa6bbc7d3587b85c4316f01be4ed876686b849dd220611eb352d39d9e5

        • /data/user/0/com.zdhjvh.allztiay/app_zxlk/bvfg.zip

          Filesize

          138KB

          MD5

          93b6a61ecaafd12ab8db6b68b089b025

          SHA1

          4300588eb2560b7bf4769f3f4181a2a680cfcc33

          SHA256

          cc3aa41180455af632914b98213f7215a2f838170fac3f6c1adf82a82704575c

          SHA512

          4e2d3e4886d73131fab46ea2f5a002c2ce100b6a4d3cfa58bb133560f67a497c3551656a3a9974120e2698e4988f1999e3f88d368aec549eacb5069d9beff0f2

        • /data/user/0/com.zdhjvh.allztiay/app_zxlk/bvfg.zip

          Filesize

          138KB

          MD5

          10155ae5660e7ef577319af5e6cba5ae

          SHA1

          a79f377e748cdc8df9c06dd5c80fc53091b58a58

          SHA256

          6a3f5b24f70297cf73e17f63e9598531291d4b37936b84eca84ef352b0668bbf

          SHA512

          b6cf92458b819fedb134d8a1e2341dcda010636712759c8e7371d36302fbacf0056c0082676e0bee0b57b50f0007a4482bf91c37aaa38953bed739ea5b7aa4fe

        • /data/user/0/com.zdhjvh.allztiay/files/jni.jar

          Filesize

          280KB

          MD5

          8ddad900b492bf1401d80afcbee5748d

          SHA1

          8f064c43b6f68914121ba07ce1b04090dd86d1b1

          SHA256

          9d0cd452742a1936543ae73c79cc1e26a153fd5d16767b7f53a1566ee496b200

          SHA512

          7982cee445a9e9cd9dfb3f769b84717b63ba7053b13e04355d33d923415f8025e795e3466bd62480656c9e9986e72debcd80c07a4a9fca9e3bf5e8fb86a219f6

        • /data/user/0/com.zdhjvh.allztiay/files/jni.jar

          Filesize

          280KB

          MD5

          86222fb116b90670a94fdace5ae4c0a5

          SHA1

          5bb5fb55248e4747422a0af9a001c419a80ea657

          SHA256

          eb2697c38a37c7c07fed611d03e19aea77109cdff6c02cc13da61faf0de0dc57

          SHA512

          29de1b29e8dc70276ee369e3043a27b24a13e6a08df13369bebc01c5ab5e77d90459b4b94e7594669e1ab8e64604413d1582e5aa7cbbb1ff03363eb86a0aaafa

        • /storage/emulated/0/Android/data/code/.vapp.dat

          Filesize

          904B

          MD5

          40c6c5e9f2c01665202f4f20e182d706

          SHA1

          ed052e53d2ee7a623c5b6f135f62a7861f2e56f9

          SHA256

          619e6709f483d55224e5bb6ba648315c9af63f2f5231dc5812b59e52f168313a

          SHA512

          d40fb00fc3654ec595a0bc80e11e3d8cdda68bb71f4df4b660fe45f2a2c3dcc411c046bac958f36741ecec0ac61bd1ba313be5d0d31454f0cdfb96c0b09a5ec6

        • /storage/emulated/0/Android/data/code/ljk.dat

          Filesize

          58B

          MD5

          2b53b6b030d7bdb5da6ea0d501b6a165

          SHA1

          fa4e9e8d724d91963a3fa3def11790559cac11c1

          SHA256

          d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc

          SHA512

          dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

        • /storage/emulated/0/Download/cp/time.dat

          Filesize

          15B

          MD5

          2b8634dd8d6352596cd1dfd0c29b8468

          SHA1

          d0d401357287f9e9a1eddd51cd50348abcd83671

          SHA256

          d69a17b545764eeed2d428b0bb2c1428d3efd708dc1c9fa02f5a499036ece8ae

          SHA512

          999738c0acd02f70de8a5f9c7ad360062db7535f45df2d2d18ac7e0bd14e318f9963247ed6497794acc25593abaaa010abecec8a77661f00849bd614fff3eeb8

        • /storage/emulated/0/Download/vgp/clearT.dat

          Filesize

          51B

          MD5

          01979073f780eab9d674321f81affee3

          SHA1

          bc9ac53fffa982ef2fd7cc3c88747d1262ccd514

          SHA256

          60d47e7033cfd515977b5d15325f55c92b5472d01afca1c40389ab7e686164b5

          SHA512

          151685232c206b0ab2e1ce013e73122fb9c5345c6726c6030a78c4fb4c3772f3255f034446c1c6d9b5fd9721ed68f5c10ed9f2e9f1ee715d4b1cb60f9e359424

        • /storage/emulated/0/ddad/error/com.zdhjvh.allztiay/log.txt

          Filesize

          94B

          MD5

          d786f062a9329ddaf921f603c76925ba

          SHA1

          694f69c40b0515e470b737e2eef7be183b77e725

          SHA256

          b9652842a1226dd2659255ad9216313d41d8aadacbd3dd20bc5020006434cee0

          SHA512

          d844ae9ee25cae6e2eefcf980d46a9c4f09e6a3d787447c619b2248ef57e563bb9c18ffe9aaee023070058f82547dfe6b29aad6416410e70965877b61a954f7f

        • /storage/emulated/0/ljk/capin/time.dat

          Filesize

          15B

          MD5

          181a7ba2316b46dd0cb68c1bf99e318f

          SHA1

          2ee9f6a4bf1cd5d53847ec59902c88aeb15b09bf

          SHA256

          9d24a2106bcb494c22152ab84cc1abc3b14846ae45918e7f0b0008db2b4736b0

          SHA512

          69684219f189dd74a97352ea3d14ef1ae231472c00553dc8b6ffb074cf0506fbfc1c533842e383d7071979aef8977a612a5ed56f1ba7d94d66c07ca15f817c3a