Analysis

  • max time kernel
    134s
  • max time network
    180s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    05-06-2024 15:38

General

  • Target

    9884c6feb3637276da862bea26922ecb_JaffaCakes118.apk

  • Size

    11.9MB

  • MD5

    9884c6feb3637276da862bea26922ecb

  • SHA1

    7388262c728e16a23afcc6d46d1ac1a0493f8612

  • SHA256

    6b8813d6a197908e07dbf43d696a4af8483ec8591ff08f27dddbaef64a75ddcc

  • SHA512

    7e3a3bacb90f299ca0e8ecd71a1550c191fcba4299e4bb866c86d40a762fa6fce118d58e2216741d7a0b3d80d38e34c753af72474656cdad670f0074db1e2851

  • SSDEEP

    196608:lKhdMGeojjIFSgtittPFXGMmYKziFbJnE4YbWYSwlc+z/ef4H2mid76iCXjCdBvx:4UGemgtittP57QzR40YyF2xyjCdbv

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Checks known Qemu files. 1 TTPs 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.tieniu.lezhuan
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4280
    • getprop ro.build.version.emui
      2⤵
        PID:4321

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.tieniu.lezhuan/app_crashrecord/1004

      Filesize

      58B

      MD5

      0d210bfb2a0e1f1b4c082a6a0f79de07

      SHA1

      bb8ed9e364db79d1d9f2fcde3f15091893222faa

      SHA256

      988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

      SHA512

      536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

    • /data/data/com.tieniu.lezhuan/app_crashrecord/1004

      Filesize

      228B

      MD5

      f82a7698c08826c8db0e29ce279136bf

      SHA1

      91f60e2c1a2dcb6ca81ca2836147e7f87732c01a

      SHA256

      31c5e5e1118dcd58b20fbfd35410e4fdff7daa42fffea452f7397b38fe284b56

      SHA512

      1ce2e2ccbb5f59e7bc771d5dfb877cf6b48cefe109653046690fda678923067f6ab3efe30b4bb2c664d4182bf3d1c1f21bb077ec2f222c73ef3e036d9838d8dc

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db

      Filesize

      32KB

      MD5

      46f0b69d8c3245b1490b2092bf981f61

      SHA1

      d409150f0bab6797359bc2cb83373f37a4f8bc8c

      SHA256

      c3be0c96e95912e8913ce875f03783065b98c7e4ee242a24085b02527a3b6a00

      SHA512

      e7053de650e090e54546a199e0260b7e3f262120544878be6f66d4e9e3a30e616801d480e1d9f514e4d455f01f9e134a8de43ffee80f5eed533382ec962cb0ca

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db

      Filesize

      32KB

      MD5

      d604a3bf1f8d992cc320ea5b1f7609bd

      SHA1

      247f88df0b55c7d523ea5398637711a0e4a483a4

      SHA256

      329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

      SHA512

      67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db

      Filesize

      16KB

      MD5

      90891f2a5df3ab66643fda244480ec95

      SHA1

      0ddbd6e5e59a2190b0201bc9acfeae210408043d

      SHA256

      ebf3ef029bf5d483683a7dff351fafea7fea3c9edb7170634067dbfc51844ef9

      SHA512

      9bfcba908db1ff6a2651800a9d9ead28ced15c9dd2a28ba86cfe9c6dc0e3ec0b489a23aa8a76c52ef365a6ee6bb4a5a9fd39c7df94490f7028def2e95ad73206

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db

      Filesize

      16KB

      MD5

      24e85d8337cf7c9ce57d6a1a0507da27

      SHA1

      53f1422be1cf8c7e69b10fc49c703475e39cac3d

      SHA256

      f3f7e419ac02439f2a48b7efc7707974f87023409bbc607c5f2e71c379e87b05

      SHA512

      23b1357f6ea1abf001219dc40102ef3f6df94ec6c33db1d1b4836715d237cbbd4598dc3a14c25785fbbce4454c60a16dffbdf96e924ac5f3dc3228a86e05a27e

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

      Filesize

      512B

      MD5

      37c12c7aecea7a6a3b7c252dc10e1750

      SHA1

      0039976f4909efb7709478722a42840ef3f76e57

      SHA256

      1ba62c0fa575d1be6b9bb118f6e9891694fe452913f3b8b0b786940e587aecf9

      SHA512

      a36dc98c4cda39d729904a65ca671026fc8f696005d642a6b6eb45c063d69cc8277667f0c0e6ffd68c497e2d7c443bc908e5ac1e25f1a1453489e4f87a345ce7

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db-wal

      Filesize

      56KB

      MD5

      15fdafad1fa55b2a40cfd3a5c962a48b

      SHA1

      10fd7abbf4d172b54110b959b21146510c7aa452

      SHA256

      3e838c8b92ed58ca379c6ba5f6f85d56a9791f1d46b3dbbf9e9c8aae30fcd902

      SHA512

      930417ef0f029cf1bc4a0123313df74eff1f144faaee5a36651e322ec6f6c9158a406d373b0756d93954860339fdef4723bfad82328d839574d8abf73e43d6ea

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db-wal

      Filesize

      8KB

      MD5

      f609bef6a6ffdc10fc3bd81dc274f48c

      SHA1

      83ea40d2651b22898ce446616257ea2464c98fe3

      SHA256

      0f885e804e1bf621511284fd72ed7baf83683debea702b2f87acae22fcff53e1

      SHA512

      1b0c1cb614f45c338614044be77d465b68c589f85b16408b279b20dd7b70b7025474e92c26e1e4eeedcf20f1f5c1066a5a19b6a443ae56e5d79e976755ed99ed

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db-wal

      Filesize

      4KB

      MD5

      40726dd0142641f2ae6951282027b303

      SHA1

      9fdad71f0a8ba0a935dbe7c59c0ffaaa32a23692

      SHA256

      f329dcf29e6058fd50fd0bfed4da08ff7993cbf936bf95a31b7e62346e2e32f4

      SHA512

      f3b2bf2e1cb43243cd61b04fbc612d94995a83bac13bacb5b2a353ad636e98dd47a01c0362e3739bddea326bc93dd4f4af9760f7f4e1d744f3dcec3ce09ac1f4

    • /data/data/com.tieniu.lezhuan/databases/.ua/ua.db-wal

      Filesize

      4KB

      MD5

      29495c552f99251e9937814a9606ef96

      SHA1

      b2da4fc3a955ff84ed9d86c1ec09619dfc0dc212

      SHA256

      9fe0a092aca222cc966a148f1a23e08c29994e0dcd8277206ef29cbf10a2b0c3

      SHA512

      9600bc691c06270295aac05ca8608b48c6b0368875840e7580a5eee4b7c12cfbad01014ad8f265f61570833df3c8704c61bb1a4db278c675a420f5fe23aae53e

    • /data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

      Filesize

      512B

      MD5

      3a7d801d2eadb86e921703a8c416c9de

      SHA1

      1dd64e5d20f0bad82f7b63d895e5d38932ba022e

      SHA256

      ecc6ed74760aefd860380aaa654d9f96695cb61747dc67001ba05ac561cd194f

      SHA512

      177d65030b93dc8262a8af2a2b4c3841636c3d93ef02474d190903c2434d0902d2523bd82339a7540efc6673840067de233b73d255573c460e8eee8a951d19d4

    • /data/data/com.tieniu.lezhuan/databases/bugly_db_-wal

      Filesize

      76KB

      MD5

      c3e3b26c3d7a05a7e73da0897570b775

      SHA1

      e9a44bce66ea64b3738844f6e3e07a53495d9e3f

      SHA256

      067dbb160c34dea4dc2867b4ceb430b1720c945f4763a2b4acaa293e6f67579d

      SHA512

      3316be708b784f5197ce0916bdfa04059766b26ea09dfc91c49cf4a0d4fd78491937fbc5ea6c6b2a1cb1fc7629918f404f355d1b84a3f21211461d275fa071e3

    • /data/data/com.tieniu.lezhuan/databases/cc/cc.db

      Filesize

      36KB

      MD5

      5d7ea1a23af19b4340cc8d90f28297d5

      SHA1

      4cfe95b23a9e98378d69c4290af81b51fbe76aea

      SHA256

      474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

      SHA512

      33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

    • /data/data/com.tieniu.lezhuan/databases/cc/cc.db

      Filesize

      36KB

      MD5

      ce6135aa1b1fe4f2c2db2a546d2a5558

      SHA1

      79b59582154017aadab783dc266fcb158c252940

      SHA256

      7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

      SHA512

      2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

    • /data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

      Filesize

      512B

      MD5

      8754014fa751741dc465de09bd0e3e9d

      SHA1

      a393d44fb89d0b65f72dceac1218c67be6d71603

      SHA256

      05a30b5212f340d9b99352ec68f3aa6e8ae8406593fd5cec016dbacdabb93f2f

      SHA512

      ccf69856fe08875c552acc806432acb15671a4052da764c55f7ee87627575067bf480a7692b9b3e11b1733a1d4f62a7c210c279a483b6592bbfc121907c922b7

    • /data/data/com.tieniu.lezhuan/databases/cc/cc.db-wal

      Filesize

      48KB

      MD5

      47aacc6796c19176745619061b0eb39b

      SHA1

      1455bdc43e457917ab15d35def319ac334a05f70

      SHA256

      8ac1b21e45dc38064c783a52dbe530988711e5189a1b93635fa2e2f979e1ea88

      SHA512

      b1b6da5ca2c86c135f448839941e64f423b501fa201361b1d5d52f4bbccb0601714a11ee576b8ef2e30986ae0b454412f068811d4ad88d62c0d30f224902a6a4

    • /data/data/com.tieniu.lezhuan/databases/cc/cc.db-wal

      Filesize

      16KB

      MD5

      00737609065850cd890eb6e3655a9217

      SHA1

      1f34ca9ec25e2c33e5281e91d21746b94987ba9f

      SHA256

      82e1ee4922772a4f80e870b33e9fa4c315ea823604f4e21adf710680560ec8a4

      SHA512

      aa7d85dd1ea35e1ef46be643514fc20384f32fd5c703e9cf9c186a1386f06fb6fe6f34206d7debeee6f315675d67f7fe50e74ecb55e1143eaa0318062a2d482a

    • /data/data/com.tieniu.lezhuan/databases/downloader.db-journal

      Filesize

      512B

      MD5

      59c654f89a957af807b060ab277b9de0

      SHA1

      f0f1e9c66ebeae1670780ebfd8d9f896cc40907d

      SHA256

      a2a9d294fbfa9ad69382293f6417cf0d54f7ab7959e5bcd6834948e8eb5ded0d

      SHA512

      a4e28b2edc3bddb870fbafbb8947f7767024a2ca359c4f0fb0e15dc8837a94b42ff701b66b4162b89e73cccd3e413d266a01eeb97d7660d8c0d6b5d2281c8d17

    • /data/data/com.tieniu.lezhuan/databases/downloader.db-wal

      Filesize

      32KB

      MD5

      92002578cefd622df26990a3db7152c3

      SHA1

      7bca175af7653c7f43a492cb4f6de08d10aaae7d

      SHA256

      bad3992ceefd7b28f5b7a99cb6aed7a8e417c9704839d4cc52f1df8c688cb807

      SHA512

      5bc426031d91ab8d915c186e74588625d0c9dfe009a46cd9c3f2fdc10c6513f9c3360f693ce0bb3afb669ea0159c600ee58f62387fae899f4c6aac9295460a01

    • /data/data/com.tieniu.lezhuan/databases/ttopensdk.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.tieniu.lezhuan/databases/ttopensdk.db-journal

      Filesize

      512B

      MD5

      5e9a3a3d42bae63adc7ecaf366fbc2b5

      SHA1

      231b89699787ae58f5da8c46e8d86aadc990de6f

      SHA256

      5946c62feb8b8df3261020163370140171b7bbe7778d3d71870ffe457154a7a8

      SHA512

      d8194d7d310a11def096d37b0467dde3c9abf83798b3a6c67debbb6d07062f508afd661d2f4927d7286b82da094c0b086654fbe0a6344fc5a39a6e68febb1a67

    • /data/data/com.tieniu.lezhuan/databases/ttopensdk.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.tieniu.lezhuan/databases/ttopensdk.db-wal

      Filesize

      60KB

      MD5

      9224fcfb90a00c130af1c2b7c77857ad

      SHA1

      c23ff1b54283390a6c3cd896e04ff0a9a2d22c67

      SHA256

      1de93b0532fee3fc767bb309827dcda7b6fd21ced6e8647e86346592067ba705

      SHA512

      c7b37c8f2eedfde1dab87e51dc174e1a66c24624248585c80013be67c8be8c2ab3eff1d24e60e17aba65feeebae34fa69e3ccc223591313d906a29c4889c0c6e

    • /data/data/com.tieniu.lezhuan/files/.um/um_cache_1717602050679.env

      Filesize

      1KB

      MD5

      c3d7c2f4c5723f735f7822da4099dfdb

      SHA1

      a48de75bf25593ab495f4a6e1960c428376e0857

      SHA256

      00d13798f4fc4ba436afa2036d0f481333e8514ee6a5c2ea80df2d48b1d4a11d

      SHA512

      06843643a15c98c7aeb5a0edffc82be281ef936cf8048e7b3c7875860b9188ecde5ba580dec0df3aab3779dce411ecaf92051527f3f09d8710442ed7729554a8

    • /data/data/com.tieniu.lezhuan/files/.umeng/exchangeIdentity.json

      Filesize

      162B

      MD5

      ea5731bf34195c8e33f2417c7864f7a1

      SHA1

      ab35db37c1a1572af9bb44c1f3953038e51870a7

      SHA256

      f3283553d75bde874e898ca80208df3d4b4d21afaf38dbeefe3da376641038da

      SHA512

      7cbaf9e4052186a7ad3801c0bf44594fae39ce77964d80c0dc05b34e256a04f0c1a93e725f1e1c66b9dd93e2ae888b289b71f3f95ea1e01b7c1d467f07b18672

    • /data/data/com.tieniu.lezhuan/files/exid.dat

      Filesize

      59B

      MD5

      34e8f8b1b59f94ad27144f5789865347

      SHA1

      0491c38d75754ce14c20ee5a03dc6da17914fb0a

      SHA256

      dbeab81ce0c45a85bfa87a3efe0d1f94790c3da37eb5aad86afc24f73a56c2cb

      SHA512

      ca698c62c45275dbb52a235450725482a3547a9c58d6c45bf4e895fbce24029aadb9c1fec8a7411d20e56fbcc757f3ac8c6ed88194552fbc0465e20e3b2a5c2e

    • /data/data/com.tieniu.lezhuan/files/infoc_sdk/batch/86_3ec4b328-6f1c-4a98-8ae1-a07f5864ab5f_1717601958865_0.ich

      Filesize

      238B

      MD5

      582a67d5983a1c36e87989a6ab8daba0

      SHA1

      13f90e0953f9e395025c6ef38d749c15772edf5b

      SHA256

      f5e3d058c068346c2d145441627acd121d294b2f3ecc6c7b03acebb2d15dd8b9

      SHA512

      2f1a45e3ed1dbd8c4deded39826898c7636c4659d501e722c29569e7efa998664d2d22e0aec328905a1d3d1997118c83ccc0fc4281d1c047dd4e344988b0fd26

    • /data/data/com.tieniu.lezhuan/files/infoc_sdk/urgent/83_b8db720e-87d1-44cd-955c-0491527d130e_1717601951260_0.ich

      Filesize

      200B

      MD5

      9e0c6c610a1cdb36a1d350f3a069975f

      SHA1

      3151a8ed320a90450d78aa69e8597947d68ff16f

      SHA256

      2911287491149f75bf4872534f6735a6f8c694f539bd6b04e4e26d83fc90cec2

      SHA512

      75c189cbc56b0fac3d80b2523385aed6db10bbed07f4fac3d854a3d509d6056871da3ae02ed279768ecb42850dc447b4ffb07f1cb72c265be7e26143489878d8

    • /data/data/com.tieniu.lezhuan/files/umeng_it.cache

      Filesize

      498B

      MD5

      7b051bec2c9b6267f637a98858933629

      SHA1

      3420c136a5aadf2d457b42281aa521776e79e06a

      SHA256

      83b7d5515757d60a4eb8b1bf6fd5f83e1fee6991f6db0543440bfd565d16139b

      SHA512

      266d040f76666a4af1099123d9fcbdb057056ad026e5947e250c4db0f1611bb86b67c4f5b307bc8a2b3fef0d7c3bb657a00e1dd9328a4af4cfe99b55e0434c48

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      7513bbaa9c7e4a7dbe7f5cf60edcc337

      SHA1

      5a649a5eedb0ff57c8cda21bc4db5f43243c4273

      SHA256

      ba57b641c9479e97844e8871254b1640a628828d530453a4eb375ceb1a705e2d

      SHA512

      227ef2c9dd0817e05fca611711d3b67bea3dfc2bf9ce27de7ea197d90dc3d5cf98c6f41980da787847647969bea40ec6feb54963eae77d97165b9835f12b5a2c

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      1c438a43ddb78366455b34e7e519ea3c

      SHA1

      8de15b5d879a7edcbf1cf87861cbebf53f6b20eb

      SHA256

      9eea3b9a22644723fd78501de9b362e4fc99a063e226f0a6a7e26eab2a69a35e

      SHA512

      49cc59ca6b64b04d07ab95bd1058476185ee3f35e882bd676b2c08cada9573fcb2b9d2c4b7dff2b195aabc6f4270c08c4d0a8e86279088491329241601338d55

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      381B

      MD5

      1fa260aa1a0a071e9aa5a0940c2a5697

      SHA1

      2e5c5e1d3fec765d76ba10e1319f2f389ae34f30

      SHA256

      830b9527e62824d87bc4f923b98a6992a7b3a6ecf1e85866c529498a4e703b12

      SHA512

      db6016fecc56fec9186b821bd423b30736253e1c28f765c4c6f95a7c6459b066b473048f7de91460f8065165b4db0312f5fcda68d0fec9cac2f95d6772bc8b4f

    • /storage/emulated/0/Android/data/com.tieniu.lezhuan/cache/tt_tmpl_pkg/template/0cc18b8098d970d2de9ad71216b476e3.tmp

      Filesize

      1.2MB

      MD5

      9cb74bf197a709c7e4679727642177b5

      SHA1

      ae53b8ff8e467656aac37ce4d2faf5133a3516de

      SHA256

      d59260959faaef2cb45e012675cb393fc4dd1634ca8b7cba776eead06b462060

      SHA512

      01af76a7f0320afd812347be4b5cec4caa02ea9e423c7223123a476c2c3bfe8c13e7a57eba84699ab09ef66961156b7a0ddb05bdfab91ea4f23438d1c12d0e5a

    • /storage/emulated/0/Android/data/com.tieniu.lezhuan/cache/tt_tmpl_pkg/template/e590283b7d720fa9fd13176d8d65f1c5.tmp

      Filesize

      143KB

      MD5

      3cb18addbd563508da9d8b24af3e9bad

      SHA1

      9b6ce986414cf209e720bf0f7515688df1101062

      SHA256

      9614a250c3921ab426426cf2df2a3f5d5741449de032a053e40ff056bba9d8d3

      SHA512

      afad51a9747680a5160defd977ddd4c75c7a05f851688c56b6acad284cf06077ea99eefbec9770f5c111d8d544af9ab43572ace5ac7310c350f77b22c7cf5379

    • /storage/emulated/0/Android/data/com.tieniu.lezhuan/cache/tt_tmpl_pkg/template/e83acb900275502e0eab20a7e89b0542.tmp

      Filesize

      151KB

      MD5

      3610043095edfae0fde800376f4f63b0

      SHA1

      c58f32ab313bc9c8b0a2a9d2ee7f445972973c8c

      SHA256

      b37b20aef8aedef7f952401b48d8d2da271ab65c8acbc1c6a296b244875ed088

      SHA512

      d9440d22eb1886705a8936d16585a9c0f439a04303a432818b61ec608aec9fb21785f2098fff0607c23a2f6ae1727c4103b350d82591d0c5bf470ac5d17555b7

    • /storage/emulated/0/Android/data/com.tieniu.lezhuan/cache/tt_tmpl_pkg/template/temp_pkg_info.json.tmp

      Filesize

      617B

      MD5

      8be957db31f115449c38041a12010a70

      SHA1

      9f2d77462d722156cd5fc55530b22d7ea7cc0afd

      SHA256

      49ee01811ee4af17511058ccabd7eca6ac279d46af748801e96967cf46021bd8

      SHA512

      e93639bd3a0f5f9571ab9e34a6be98b0271214100b41a4fb9953a90331248ad243666fcbf437a71d94709ade63f427bcfac6df2ae917d3618f33bff3b02d81c9