Malware Analysis Report

2025-01-19 05:04

Sample ID 240605-tqmp4ace75
Target 989a73bcb31834ff7f7c8c6c4d8d777e_JaffaCakes118
SHA256 25bd204c49eea67a0d2547548ad8ad90066a37d8c59feac85659c39b960e1a47
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

25bd204c49eea67a0d2547548ad8ad90066a37d8c59feac85659c39b960e1a47

Threat Level: Likely malicious

The file 989a73bcb31834ff7f7c8c6c4d8d777e_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Queries information about active data network

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-05 16:15

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-05 16:15

Reported

2024-06-05 16:19

Platform

android-x86-arm-20240603-en

Max time kernel

159s

Max time network

131s

Command Line

com.cnxad.jilocker

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.cnxad.jilocker

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 aow.dmaow.com udp
US 50.2.245.44:80 aow.dmaow.com tcp
US 1.1.1.1:53 api.android.dianru.com udp
US 1.1.1.1:53 a.dianjoy.com udp
US 1.1.1.1:53 data.jisuoping.com udp
US 1.1.1.1:53 int.dpool.sina.com.cn udp
N/A 10.79.217.129:80 int.dpool.sina.com.cn tcp
HK 101.33.32.95:80 a.dianjoy.com tcp
US 1.1.1.1:53 www.beiduoad.com udp
HK 154.208.105.140:80 www.beiduoad.com tcp
N/A 10.79.217.129:80 int.dpool.sina.com.cn tcp
US 50.2.245.44:80 aow.dmaow.com tcp
US 1.1.1.1:53 s.youmi.net udp
US 1.1.1.1:53 aos.wall.youmi.net udp
US 1.1.1.1:53 stat.gw.youmi.net udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp

Files

/data/data/com.cnxad.jilocker/databases/advertisev2.db3-journal

MD5 7a8b1c56e8f4e4efdfff5efafae80d81
SHA1 1b398a19fabd8ed043ce4685a1a09b1c89c40504
SHA256 eb242373d28da0a5817068c052d6a78b1faeae587d0cdcf7a7ac1b05df4de425
SHA512 db387e5b3e018581755dfcd395be6cda557277beb436062010a41a5f3257e51964448adb3a46a766df8b4b6d438888fe67eafd2941cedcbd00b7d77113db7257

/data/data/com.cnxad.jilocker/databases/advertisev2.db3

MD5 a7a7695cb2bda8c219b615bb25e2d4e7
SHA1 63af51cff9f0554c76000c7c8a117d02fa9ecde9
SHA256 dc02f82f86a0d3b82e08214642ef3f66d57a20b1f068c41ea211c7ab337000dc
SHA512 1a8692439850830cca445d29fa8f15dc9678205eea5c555ed4cf284dad49ca28f766f5828ad5336ea2b36c2affcef71988dda46566c801345f06e35796b251c2

/data/data/com.cnxad.jilocker/databases/advertisev2.db3-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.cnxad.jilocker/databases/advertisev2.db3-wal

MD5 75799447853ff52a9a4882723a995afc
SHA1 3e19284d33eb696c01ee4674f436ba45ff24da2a
SHA256 40a21798b117b9c44ffd0dfc1d44e2cb68bbf84c3b1d879a22e8af576b73868c
SHA512 12748d441116f643e3498a8b540c8ad4611e1f7e4a73ae7970dfd58553d233f7129113a17416c9fbc8a955e902297e796ff287c7d6d34d2b99e408d018aa4475

/data/data/com.cnxad.jilocker/databases/earnings_record.db3-journal

MD5 adf2fefb94a667c3c8c2bdf53167ab1a
SHA1 35c026679e4de003e61df49012aeca5cf4b87dce
SHA256 eb1a8e0c63bf38d31cd947aa7dbf06a52c6c365a2c7e7cb67eed569dfc544e76
SHA512 eb483cc597f8b2990c75d63bdc147137094f6e4acd7b5d4119680f1234beeb294b0fbb48c5e03d58e48a16d0e0a13919fbf3351bbda38b80cc399365d1e19a3a

/data/data/com.cnxad.jilocker/databases/earnings_record.db3

MD5 2226f052eebd0b81117baa0638c4f2f2
SHA1 8fc9ab6fd461418622d645ba94aa5a49ea0d5895
SHA256 0183d8232e42d35b47b2cbf588d212f1d5a54ee8311658e2857d59766f08f765
SHA512 7e794f16c7cbd50a4c4fc76b26e24851145221d6f7baca08404876382b2b7bc2cb77b399fdd7262c76b1090e0b39b565074f18da344cb4fb3843edc112a46438

/data/data/com.cnxad.jilocker/databases/earnings_record.db3-wal

MD5 299b38f330dcd2538c7ec5f81e6b9de9
SHA1 f3efa2af7725338de3dc8e72f9961022d2158d9f
SHA256 c7e361e7289ecaa388a1ce65975e0f77af08b701b2869e092bb6538116d191e7
SHA512 605419be05f03e9e5315276608a50dace7bc484c39433cf3bb29dc2b8d72cd5756b93aaa2bc38c9e38bda18cf5f48d9ac655364b1e95d00ed9032ed7972b890a

/data/data/com.cnxad.jilocker/databases/task.db3-journal

MD5 a44e00981574c713a0c08dbb4b22756a
SHA1 b3c9f845d25064d62a720e86080d6f91e4fceb17
SHA256 3f2638d9fdccc87d90bdceb46640700e17cebcc6a5a7b82656aa43798331f7fd
SHA512 12ae8bc9c1ea5a6d8e5a5b3fd15eea9b05b8c3a055ff2e1f3f31dfeaabd12db3cd220a314688a40ba878926605120010a7efb0218c4289426e4875c272d91185

/data/data/com.cnxad.jilocker/databases/task.db3

MD5 e1f172ac23c10b92a8e43f740e8c050c
SHA1 7e64214e6b5cde360a21ba57c478e75ed527beb5
SHA256 7c04b2d4d2fb4a5f50db48d3b36ac467e071298d54d437e3f5ba5105df244a7e
SHA512 a5ddc6f2b83a183fad6cf5785cf1b629e86ded07274e9971ab840a85047b61f85635305c65605235abb9d75871b5b2c1ac3719ed2a535d2d39429be5a9e93154

/data/data/com.cnxad.jilocker/databases/task.db3-wal

MD5 91896dbb19d1ebf8b2f2b0c9bf824731
SHA1 9004479b9626337bf187c97c756ead02fe4eec44
SHA256 66cf857c17e33266d3aa1de6e8d93f05c6aacf7bd702cdd56314599c3d7c6721
SHA512 b3695aa2837ea58d3303a5fb124a43334f7fb90726407c2fbdc6bceb23bbd9f29ac7db4e607b218ad9de8ba3f1e554fd4566a665749fc7022d00871b4a588c02

/data/data/com.cnxad.jilocker/databases/profiles_addr.db3-journal

MD5 e583ee31e412ffacc6bd04e3b00d4921
SHA1 38b9d3961e21e1780c8b507df0a2f616ee2e8183
SHA256 a0a617d0218a6ff564753668640dd9255da6e0f8168b7465378a87bd32d6b7ef
SHA512 cec8f44f32c56e7aaab82c054991ee30e6b26068a9da7fdb6b92cbfe729b11828f418c1b0f4ee978a933a2bcb1627c4e7a93bb72b51fd3b45263a34785af9e6b

/data/data/com.cnxad.jilocker/databases/profiles_addr.db3

MD5 c1fe67c0e9a9295a87d4bf543b6b246c
SHA1 0c745a89f0b08dcbc6150ec1aacc3dbd215a8ed6
SHA256 4bc11502ee1b706f194285775b2897b8e2d74b3e4e3aaab06decd5067687db42
SHA512 fa79950ce3ac46ab5a586f333f1f3aa36b54f41e29932f712ed36a8e5f17a8576062953fff38a25a3fb6395a25c875b4e2a39178360584b874923703c7954d5f

/data/data/com.cnxad.jilocker/databases/profiles_addr.db3-wal

MD5 13477b8c3f10c440b035036fbfb6ffe6
SHA1 9f2657c098f97b61834c7ea0fe5ea4556c601ada
SHA256 5fef93921d8ccf6ac88698a1d714ab095627ff77970c69a8d20d75a70040e30c
SHA512 b4653b94bcb24047f7ee3025c2fb523e0d39797d7e7283df20b1d7904618311aca8c62e8c98823bae5764f3787ce4e726f195ae3a0883c93c5024517884df9fc

/storage/emulated/0/JiLocker/LOG/JiLocker.log

MD5 987f789e78e6ba89fe215808d8f59f2a
SHA1 a810d87edf0037ee47ab1160b2e970824c51f383
SHA256 baf47a602af5a2a225bba9bca9a8833f0b0c8f5ac7e2e532d7c26b6436aaed37
SHA512 c68a04fd0cb08b5fa47df5b0e259f8b18ea455406fb12d83d4efe6e0790001869cf6d5b1b66e91309b3c61dae72451da8e5bc5cd5557ace169f2a023587af065

/data/data/com.cnxad.jilocker/databases/OxgHkj2lz09F-journal

MD5 b7b9a78deec6a1fbb1097b3082bbf07b
SHA1 b76ad4c7d2b65d9914b5ded6e5af321b84e6c489
SHA256 ef7cb5f5a71168c27d07b5e8fee45e2cfa8701beb27eb7f687ecae95774d0ae5
SHA512 f81678b838224fa644a2cc3ec272bb5bc2d76fd0891fbfde83301078c31ac8479f981fee35f25384f5b55b0d8e18beb77decc297c30e2477f6839c96340a0843

/data/data/com.cnxad.jilocker/databases/OxgHkj2lz09F

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.cnxad.jilocker/databases/OxgHkj2lz09F-wal

MD5 f46d3acdd64ef984147f12b7fca1f614
SHA1 9bd08066fe7d4bd1473e153325e1ad61826e2ce4
SHA256 02b1d9b30657561c5a37121ca37a12107ddd17ea2104c0244695c894a1ed3322
SHA512 7c1386ffc74cf4b24aa179b9bf9416b83eb61761a2677998b096ced8e7f60e2ec20e4f07f3368adee82719f79d21c658d1e7272edcb13143c67579b907dd3e26

/storage/emulated/0/Android/data/.dataycache/i42d45df023jnkdd93la483f9xGFKXI

MD5 3c33e392d0bcb15294b1ad95f8c63ebb
SHA1 c421f448ddb928f9dc78f160cfb642b12cca03dd
SHA256 ec795dcf5ce8a6cbccc2078f0a90725cc74b4aaabca0a9535e99d752235d0e81
SHA512 1790a4d4303d805dfa8a6a3a5eaace03abe0cee255fc62b603c283901e46fedb36bc3fe466fb34f0cb181d4221043133a061e498b8c433513f315791e51d121e

/storage/emulated/0/Android/data/.dataycache/s92TjjdfoP2n3o9dfji2l9s1olkjf0p

MD5 95058d3fa3076e4fdbc058e18d566e0d
SHA1 f6082f93a9c0ce4565c1228e61099d1b3b4f1c6b
SHA256 a079ab1b81730bd46de6049424ff404e37db84d47c48c5dae619911c9647f299
SHA512 2bee197091f0e83989094b48f1fbcda3d9af8f9f5bdeb2716f3d659f99e97167e3863d1cd2e4b5e1537b866860ba016f4d7f9005e03e3f2d0c1dc3b2a0b264bf

/data/data/com.cnxad.jilocker/databases/wsUL1uCdKvjD-journal

MD5 84530354500fff15640efd01c627068b
SHA1 2d73f443459bb34a2d7e9d0e1fe46fd3ff83836b
SHA256 8703b68debb1efc003bf36e32bdf1da56f63cb2ecc1da2847e06c01d7aa339ea
SHA512 9f5973d8d3726a6cfb387a5b957a266bf8f37e4a3c35a1addd0f6bb5ae13497aaddf38a0b8f174b32b0dfce11dfa1300dc1dc08d53fdb3e1fb6978036ac3372b

/data/data/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd-journal

MD5 db066115bfc86617f067ac06ff837034
SHA1 9f3fe9397fc6dc64cf8ff4302da09e7082dfcb71
SHA256 2660afb1aa6a9b7650728295e8dda501f82c5f14fefdd585c1bff6a11128d499
SHA512 653f2746b7efe7b3d416841a0a5a11cd053e980e222e2d7b570e38d960fad843a84d2525ddaa8e8c10b58b70a476ac2224814d84108940de4ddd9e60225807d1

/data/data/com.cnxad.jilocker/databases/wsUL1uCdKvjD

MD5 59413190ea19211285b5c0fed44c19c8
SHA1 ee67b7590047c3c17309f6e6eed48556aabe4c92
SHA256 3511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d
SHA512 6a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e

/data/data/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd

MD5 6c217ed0bac8d2f91b30b79d439f229a
SHA1 9ba63c2aff1bb2c70250a9dec1f4893d2ecf827d
SHA256 344d6a8d8632f380bc914af9dc9f0296429a0e9fc273e68e57870032bded5720
SHA512 fa9386f1a267171f8c80095633baa7aaad145986608f9bdf15c6708b2b50ed19359f98f9b9ff395ad26e361a85cc9e26495b23ccbc1befcdb03aacaf167d58f6

/data/data/com.cnxad.jilocker/databases/wsUL1uCdKvjD-wal

MD5 16e3d6d5d9294e4f4e69680b30b1aa64
SHA1 9291e22880ed657a27f69ca7405cc1136d69a5ac
SHA256 a8b690490e9a86fb558e52a66067e456fcc274906a66cf263e1d5882b6288f9e
SHA512 14c9ab4e98d7e28ef41666ccde6c8f704172e950941f1915f3cc426ec2d982699115b6a0aeb70e1d7db38e9daeee3b9ffa5d1e9c259d55ec24a954779c37b6e9

/data/data/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd-wal

MD5 7463ea11ad85e2c687d8f4e80eaaa5c4
SHA1 bc491a8fc660a1c5dd1cb38c2abcbbf3864dc139
SHA256 133438b24109ac1e19be110dfbdf0e7b22c7686b2e55aeb56cef265e7c1a6d36
SHA512 a9ab0c121c6d0570ec46c1524a6e6df075f61723d4a6f2302e7d0e4c2adff189c306c0073239420dd3cbe7acbd47ae57201d95bea47e07c084d242e0d1bae149

/data/data/com.cnxad.jilocker/databases/jqIqJYOT3JpT-journal

MD5 73c8d997315aa82eb1de8256dad7d751
SHA1 13e94a5a1e51e851997dac6bbbec66570ee4bd6c
SHA256 c4a05f8868b0c304bc2f665fed5375e24c4bfa13a448ee090b067d7d33bc7164
SHA512 a853eae5281250ba85d5875c8e41dd22c8d0029af81c248760ebb1ce5bae5202b1bebd5710eb2158b855e3397a44926dd1f1f64e7f42a7d9586b06eb373d90a4

/data/data/com.cnxad.jilocker/databases/jqIqJYOT3JpT

MD5 9c37108c041a67252d4fb5059436eb9f
SHA1 f65bdd652f9b2a098993d2aca0be2578e8eed20a
SHA256 f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55
SHA512 d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548

/data/data/com.cnxad.jilocker/databases/jqIqJYOT3JpT-wal

MD5 7de1318b43140a649cb79c645983ef2d
SHA1 7d8076b2ece8a2b5bd044bfc17aec5c79beb411a
SHA256 5885cc1f0d0830714cfa974b78de476836102524642b826129278db70dce60aa
SHA512 c117d0ef032f0328f4a55623935a8b8affb46da73b78e5e4be9c22b0a401f0793cfb48e950b55093dd9123a59606acade00d4f7376d9336ad431d8a00018835a

/storage/emulated/0/Android/data/.dataycache/m929bb76e8110d1a70260af57b446ebc

MD5 b59f7f521008e55e9592aafa4ce3ae36
SHA1 3696a3e25428639f58fdca352138b57cd796589d
SHA256 00dae9faab5a999144141684ab00fe0d34136bf967b8be2573ef1027e6f3bc72
SHA512 aaf6505afd366e58af9e9e9811e67f7784e7d1258e962d81b9e83bd8e8b507bd840644364f34bfd2a21537efc71c8d00e460810ef73ffe6c258e7f83498e5bb4

/data/data/com.cnxad.jilocker/databases/T1oX0rhhuXWt-journal

MD5 3a648c499eb35a0789da192a89269059
SHA1 f34059d7b2281ff17ffc897d13f2d309c19b556b
SHA256 8d10d567fe8aa0fad76824b9b1455cff9d3fca2651156c91e432c61d8e2865b8
SHA512 4715bb6ad23f3e4e33c0ea04b6737a7966cd204cf8abb543aab04beffe7d08c7b1da91292572ff36ee17e71106ff79695fdba6d5114c915fa354f51bb137e233

/data/data/com.cnxad.jilocker/databases/T1oX0rhhuXWt-wal

MD5 320ca6b1d81ab0c29bc8574b375c3bb5
SHA1 2df41e495bf3e7507374d5b5182ca0c14cadaca0
SHA256 ef24282eed9e46cbed1c7abbf67284f04b1833f1a2bbbce579ef68f6d27fc6a7
SHA512 438cb804138357079f987f6fa4935f15883671065699fe77b1f3da4dc4fd2cc2173ff0edcdc68ce4ff8fb533067057f346414b447f4a3bf162c3970e9301fafe

/data/data/com.cnxad.jilocker/databases/P15pKIjsm64m-journal

MD5 8c7ddcc11b3133db67c894a541201b45
SHA1 abb80f204b95601bba7c4b734d5c9b1e4947b9c4
SHA256 9e602a136f2b72c5d1acac35c749b3015cff821ed63a03d5cc498584c2c0d171
SHA512 9a63fbe45f9518da128cda8f4c78af249e3f85fcc13499cb3dd927cf64f8fc4bedc82fb998c201b3bcdb71417e58bb785d1592eb246f138ae9c9a64bf0fd79c2

/data/data/com.cnxad.jilocker/databases/P15pKIjsm64m

MD5 032abd6bc70ad7c9484f10a7daf57bc7
SHA1 12e3c03375192814883d5fd1671e2b0c64b0ae43
SHA256 9cc41eaf3228c605583528005cadbf69eb145da3943e09e3732677423dcbe976
SHA512 aa28b2d8e87dd6364e15b1c99c52758f937585c126cda7db38cd2b4e5fb3c3e5775a92cd1d5ae68b03a6c59e7473766d670f03e3ee30e8ee53c2bba1b73f243f

/data/data/com.cnxad.jilocker/databases/P15pKIjsm64m-wal

MD5 917b7e0d0ff69aab442e0c4cc3168b1c
SHA1 153ef6845d05406be53f8ebef4e81209cc8fd66b
SHA256 a40182538de135fe1d1c138f7818f8e11ff2e0c7a4562d86f220eb98446b1222
SHA512 5444d2b8b345038cfaabf64ab2e6431f7441b03d058a938c3a452723b8f1d26fa9e80a25f1b96058e2754c250bde9413e7057a41078ced26ec7ca13410a71aa8

/data/data/com.cnxad.jilocker/databases/XKwVoK0huy3R-journal

MD5 3a4b33a3ed0ee58f8075116b54db3dfa
SHA1 59115654aa83550a477d51ee2badf49d74f408de
SHA256 ec05e89bc778723484c23d561c827050484a14c82c7a23760c0e7afe7b842edd
SHA512 517ff0a4b4168911fb03dd295885bbdf1172296b14d2b397d2eae01629c02018758c39f9f8ed519b79ab746562b09ee2a6542febf9634204ea7057e796a0613c

/data/data/com.cnxad.jilocker/databases/XKwVoK0huy3R-wal

MD5 21a468a67ba80b6f27c6b607b8a6243f
SHA1 c3162604de57503258ac44c0019b70d80518351c
SHA256 ad2db68626f8e8e7ea3ddb385fb108cbba86c94057753edf5c5163265636ec36
SHA512 2ab8f2f2584a1c88a9a9e2ca9189297aef680991fbbe14da6a37702a5feeda501e4939de6de2f3ce1c2209cd890b2f7799092068e30fd055fb33c66f6f117b09

/data/data/com.cnxad.jilocker/databases/china_address.db3

MD5 12765edab0cd2c5071b57fc6b4fa5d47
SHA1 4b233249123abcfa9b89b7ca964024b848aba015
SHA256 d69d0a68589b45735417c370b75abe809293aeac0073d17048bc8d281b9a88d2
SHA512 23a7c12f45b378ea717da5dad9206eb87fbe07c7858b4fc286f2a328d3d88f7c90a58aee437bd594e4839d6b0ff7ff10fe10475edeeb92ad02cf2f2f7816d55c

/data/data/com.cnxad.jilocker/databases/wIU6pTyUBYWX-journal

MD5 21e9405706f9c1b89e8e24bcdcc1f3bd
SHA1 c1221282fb8a9ab3a0a1a466bbbc1a63a5358414
SHA256 2553ce4c106ff2ba4ac0621a2b6057699099c930df4fd66f5e7c4694d45efd65
SHA512 e40055ddad6a9e15fb647486ce72808f145952c2bd75c2eb2551031a890702ebbc7fb0518ab198e0345b6a36a21530ecc3c45e0385a4049138f0e42b35f31874

/data/data/com.cnxad.jilocker/databases/wIU6pTyUBYWX

MD5 3f46387c5a9161a06c35918e4715e9e4
SHA1 f03b4527b29495a3f50be85d6afba301e9e3f1c1
SHA256 687a930724a6054924254f945ae475e34ae87ebdc2054881c34317cd91d46ca9
SHA512 614fa11f57f1ddc2750185eb908a580f1ae1ea53d4f4ff6881610942a36554b918138af7103859821d90cef12ea68bcab1ca0e4548cc5a78ee7a3c658b37f3ef

/data/data/com.cnxad.jilocker/databases/wIU6pTyUBYWX-wal

MD5 6bfdff60f4ea3998f6f96392282c88b2
SHA1 54349a03744f24e189b084a449bcbe82ef9ffbc7
SHA256 64b3bfb7b74312748f5cb3e5833bd972c7f9d142f95127d9dc8bbfea6878abf1
SHA512 b528377558f105495b36c38667ed3cc93a1eeb62a1cdc825badae8d0d1b29420dbc68b3ab2db98fa8d4dbbee7d0870d3907ba4dd11cf927a8aec0822805a2676

/data/data/com.cnxad.jilocker/cache/92960530.jar

MD5 3ebc77f510a9f597a5f7176333e2e8b6
SHA1 6a9e5a20c5667c069a1d1b3f759f6c8e41b26d86
SHA256 3708cfa14e4735791e48210bd15f3ddcff74bbab32bc4ff547286fcf4f06f448
SHA512 5368b1b3b1143d73f1058c642803c110135ce71b0c1ef7a6eb95358181ef0dd454be6ca060a75c935b0790b5803aa36188793be4e4a8ceada0d1646c067f4923

/data/data/com.cnxad.jilocker/databases/jqIqJYOT3JpT-wal

MD5 5e503491ffd61ee7433fad9bf67fa448
SHA1 a330bf5c076f6f84aa1ec86cecc76f54dc9c419c
SHA256 2a2e1564cb80f22fd404f68c84f6933dab238e46135cdfdeaadfe0e60ebdc79d
SHA512 beec87e1f560f48018c01599638c4b4c702a63b4c346064c8c91307b526cef789dcbb9da48d42711e5ce4c7f2b66a1d599a49cce6f73b05aa136276a82e77960

/data/data/com.cnxad.jilocker/databases/jqIqJYOT3JpT

MD5 96e09040d699156056e559b8636acb8b
SHA1 d0bcf1733b8a80154623adb57d038d71fb292ea8
SHA256 8c085d736507ac1c5894b3dda16a61d7b19b8cbf1f27426a90cf4226af6bc96a
SHA512 f70b51fcc8254681e8f8949176494edbaf8a52df99507bc9f4fd7272d3a1f998d1e37c710e9d5cde2e1e54af154c17983b94a84df96b9b66457bf677531330e6

/data/data/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695-journal

MD5 133d2d7326c436bf8b8ce6b452785dad
SHA1 d86149534455f231fe8d31d648d0518b66cdcf2d
SHA256 8ea7f50c3568d278dcdd8c3b962b93b5cd0e1359c9bca17bd7411871af173e86
SHA512 684e05481ca26ad95c697ed18e650cb5bc105c15f0c39380f72a2e1fdab78c2e08929c0014b9136315d8ebf7c67c971227ba2bfb37d1063aeb9ae0d45c7669d9

/data/data/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695-wal

MD5 dfe8047510fa8c0bbbac6b95a30d5f66
SHA1 c773f9c61495ccd7c215bf4cd9bea8c8e3c13ff8
SHA256 a9c5e9617517fb6b9d7def862a0bd1e727e51b60f750aaf5723cd001b874d877
SHA512 4cdba4b720aa73cce73149cff998948339ad14367727877091bdbe6b82f1380ca035bf7c22d3317652a482cd64691e907cca1007060e92174cc36b4ebb988f6c

/data/data/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b-journal

MD5 956b8b10ed851a3387fb90bf37184c1c
SHA1 813f747708c11aa02af5f9311bc53cd76417c938
SHA256 5b7e059e18416eb788f54fe9fc369f6709dc83bc20cd9f0ba14b939f1ba14f6d
SHA512 ec9a0805022c209b009bc2bb5884a9b87814238ca908944300eb891c514e2628ba00d9e800522d6ba599f170c2e2cd8c42f672b2d16b96aba58836fdb82d129c

/data/data/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b

MD5 b1c1eea2cb20040b9fbf7770f9167780
SHA1 78b67070ae1f91e43005bf56f878d3570d190891
SHA256 a23810b4bd43fab48ff0e03f71a73462ad04b8ca7779ed8a5601cde528c13cff
SHA512 f31f9356c69147f140e41412e386f0457932848342e36c80f232ac1653bd8ceeb3b8bec132c25ceff4cdab73ad5c9449060699fe93b55ad43f254de4563ba98f

/data/data/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b-wal

MD5 657588b4e69926f50bfc1d1a84b0bf45
SHA1 d1e3a92438debcc0e126c6dc0252b450cfcf34b2
SHA256 66423860429d5c04c34d791b57b8b17ed7191e318748ff407167c4b8a1d6bd9b
SHA512 4b65cfc48eaada44f5a5fc2451745ce4e4eb1c5971bd3aea605b4fb64090b63ad0f3b7ce69ae6b91ca65d71d3f23d8ec2a49d3892fb611226cf4e91d1db66d62

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-05 16:15

Reported

2024-06-05 16:19

Platform

android-x64-arm64-20240603-en

Max time kernel

157s

Max time network

135s

Command Line

com.cnxad.jilocker

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.cnxad.jilocker

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
GB 142.250.178.10:443 tcp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 aow.dmaow.com udp
US 50.2.245.44:80 aow.dmaow.com tcp
US 1.1.1.1:53 api.android.dianru.com udp
US 1.1.1.1:53 a.dianjoy.com udp
US 1.1.1.1:53 data.jisuoping.com udp
US 1.1.1.1:53 int.dpool.sina.com.cn udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
HK 101.33.32.95:80 a.dianjoy.com tcp
N/A 10.79.217.129:80 int.dpool.sina.com.cn tcp
US 1.1.1.1:53 www.beiduoad.com udp
HK 154.208.105.140:80 www.beiduoad.com tcp
US 1.1.1.1:53 aos.wall.youmi.net udp
US 1.1.1.1:53 s.youmi.net udp
US 50.2.245.44:80 aow.dmaow.com tcp
N/A 10.79.217.129:80 int.dpool.sina.com.cn tcp
US 1.1.1.1:53 stat.gw.youmi.net udp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp

Files

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3-journal

MD5 5681959191fd9923cd6fcf6b7979ce0a
SHA1 737a598f2a12dd09aa3efccf3d7f119936ab48c4
SHA256 8fe6cac89d71aa47f2e01c6888f24c120dfb29a74d9b92fb30c939adc333b8bc
SHA512 c4c91cb4b90faf0cb0e162b862e7436e66d117909d9662e0b142390a500fe76e16bee8fedf6a6e77ca39679c12c7256e0094a3d45fb61b6ac1dff08b34403223

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3

MD5 fb78d8ab3ca11f0677bb6b3dff00786a
SHA1 3ab2a7f2940f4541a42e1b31a3bd4501e8f2a3ab
SHA256 871b7042c621cd70392832b808d0073737773fe21db27cb47b57c05dbd3b5849
SHA512 4099a38490f3a53b6bb0fd35763a682e472e293db9bf67a44140fb37c025be819550d37d2da597ed848e56877089a41466ebe9a8608375c2d4525b186e808724

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3-journal

MD5 f8aced2ec6c987edb9dbd7f5c97c77e4
SHA1 3093d6eb2493228acbb3654222e632b766721adc
SHA256 c591f5f09c9b4e896fba37a16f3670a34622b32e8acbc0006049ef6b1daf7f4c
SHA512 25d4a4ed9ca48864fea98191ad7e4b0e3c0ff0e9518928484aba1541e2dd1cb206b99f08322f607e97d701ff69315bf41ca026cdd0a3a74d5e7f654b59ee1231

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3-journal

MD5 5aa1f3e6edfb3da6c05afd3dc9fbae8b
SHA1 7e0983fe7823366f8c5bcc2b95c905950f355317
SHA256 a484c7ea0c2ba3547a387c2765e9ea3212c0b61cce2d577cdabc98298e495f0a
SHA512 ed376c3f4ca134fd89ae6e776bd33855cc37a430df83a9792b7f9d277660a4690ca4a38553227718afe52c101d4148d6a67caff1a0eb830b24e61fc6d7493bf0

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3-journal

MD5 171e70626eb01ce84865edbbd2e07e47
SHA1 65d4b5d2a0f2f8a01ea16f97b48fb8f36c3f8b86
SHA256 efc2e1ba4b46f8bdf9c02168683e4143393fb6fd28e9c5437f4b4967ca36076d
SHA512 ea176c727934a82575768ac0a82972bfe47d244e1d74289863a5e14e32ae56ee5a784a93998d1a8ca346df0d44cc524f84b4b925ed17d5399428eb68193a7ce9

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3

MD5 b3a8e5cb4164b567042f65de0e18a44d
SHA1 d6ad0d6c78f26c3573b927de65a45f4af6c3f54b
SHA256 89bac1ac5d285bef7251db181a17230b4e721584e0aa36a3f2bb020502956ee4
SHA512 aa61b6e9e6c80f9a2ef4f6b14563548be345504c42fecde27541fb4a8ecc7ee32e29556d802ac1894565a5c88a80db4286a97dbe4ef46c6ec7956e0143110f31

/data/user/0/com.cnxad.jilocker/databases/profiles_addr.db3-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/com.cnxad.jilocker/databases/task.db3-journal

MD5 edfbde6efe2a6d0920c4ebfe4849c150
SHA1 cde3895a4a84baf3ec7377febab40c913ed70914
SHA256 9b9570586ce51d5d1ffb5c319fa1452e7210a8005d7da73cf71548dcc547677c
SHA512 8bcc6484a33ba95e05fb874e311788e832bbc1b8707e504cbd5e80070c9dfa2c9dce230b89d9ee12344011be23faa0195df6038ab08283d8fa1861a5d048ddba

/data/user/0/com.cnxad.jilocker/databases/task.db3

MD5 218927f61b2e26b92d623c17fafb243e
SHA1 7e97d0be4cf8bdaa8db8ac61936756efb569a1fd
SHA256 c3ea15be19de567d2a458fbf9c853fb19ba4f2ef807a11871e70ff716c3adc9c
SHA512 698f14c1f215ee593c9fc6e04c1ee913a5c5404c438c7d091980474c378e54cb25492634d94b1258d92f37f7d1c818591075069fe2745d692f12a448589f7ea4

/data/user/0/com.cnxad.jilocker/databases/task.db3-journal

MD5 e73186e0e2627eae705340748fa94e2f
SHA1 2272f3ef369d512a03756b7a7a678ebd81524a14
SHA256 5b7b744cb1138c74a53705505d1eb403914f4ee58c13e72988b38e135b9dc8b0
SHA512 6592a03edeceeb7296366d86688e0dcdc2832f89eee5f46320566316cd74fd0649174f21d401ce2804c8484bb8b6b5ebff13d83b69f2d3ed32cfdf418379303c

/data/user/0/com.cnxad.jilocker/databases/task.db3-journal

MD5 60e8da7d2e3e12a22dd4bfe9bfc26d57
SHA1 74e778e076373200d3d7fb4fae3f874d450d4487
SHA256 b7ae246921f4a0de5accdf41b1617521eb80f96dbd5945129678d943f27d7378
SHA512 bdad5c84912e5c0190e0c698ccf3533a6a014712a31e716143c766eebaf54a05d689e0aef322fa0c1008a499875825f09b309bb4dcbfc63e547b24fae34d12ef

/data/user/0/com.cnxad.jilocker/databases/task.db3-journal

MD5 14d7bc22d1e4259325f0fa900f38c0a1
SHA1 1a64ed0da06aed22d4b3175d581fff73c9bbdc5e
SHA256 f287857c0d1a1cb63426ca7d0355b17e34c61e7688c5d664612ffccf378f7c71
SHA512 b4fbc704c5825da3c8f649ca8a3d5ca353208d7e7f3c35ed64fe39a1f52221ab2152db6de94637cfefbcb4386d4ab14e011a39cd490e109110cc2dc619468ad0

/data/user/0/com.cnxad.jilocker/databases/task.db3

MD5 b6eafc75e88157bcfbe2ba7868160186
SHA1 ae07513fd57c68ada012064e1fd2e6914e45532a
SHA256 905290c0ec582ebfede58d3a68bae8b5e9eb3b38cd344b683e7cf722a958a7df
SHA512 e2b3fe65dcc5f4c54281c72f8b10f469b036fdc7fd511fe9da283deda14fdbe0c77aad70119d48dbc17cde23654192bbbcdff9f8a5565fdc3458b7407cc74abb

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3-journal

MD5 fe1778a9f3a40578c6c67b3381ead7ec
SHA1 e14862ef9b751f8e1af06f3e5001fef153604c7e
SHA256 9d48ad4121531734c147354a0d74a7ecae666710c2cda6ee3d8d63d4cd7d8b2c
SHA512 74432970ace9053b15fe8bb7f085f482bb25633cc32f8c143301814255aafb8391962f9a7d9793748a67a8d66709e732ce3823e6187984d3e2f21cb27b8d3d7e

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3

MD5 7c77dfc925f93d01fcaf968326d4a786
SHA1 6fc5aa5eac500f4026b756143f603bd057310e32
SHA256 80d00d0831d99a2fa15e183dcbda53fdfcdad15571bf336f7eab87fcc0364489
SHA512 c9ae1a32a219375f24887e70ef4585b17eee5e9e6aac76e0a703e91d4182b6ffab0418374f6b9ffde50a1448fdbdf927aa9e46c368458516af3c6a14ada107c6

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3-journal

MD5 58d86618e2749710f586be4038aad8c9
SHA1 9d4b269d0735fb13f83a7e08aba9829de946bc05
SHA256 49a741915eb6a66e039c5161a1e790b767728532033010518b3d0429fb8e55a9
SHA512 eff3c99415b6bb7e2c637f7a7007cbbd93ec84119e97fcff5608b0db7e9ad17179e93fbba61385649b578482170e02dd5f4c29f25157adb79d0557ee20b85389

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3-journal

MD5 4140c40e5c34513356ed291a5602912d
SHA1 5f9c8987b18644c80bc67a7c2addeafb5041245f
SHA256 3f807550880e9c6374a2b0195aedb6e40c4584997f4375efbb48f5a3251fbbda
SHA512 273b1d8af6f207009736d7bf5f840c7aeec59fdc48673d3d979c0c14a9e968ba880875debb30d93f9ba333d91f68fd5199ae3e9d272f1773b995be5dc78d0d95

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3-journal

MD5 6ad9f104067f0417c63ab8a98989524a
SHA1 970389aca4d4eb6c2459bc5d1110d399a9c5aa33
SHA256 13799b2e567006f5f56c6bf6019cfbab9aa2c8dcda03dc721748a70d407e3735
SHA512 7b2f87b9922a0bac7d41f2791637dafc7f836a6c75cb82ca1c916541e24684b4200f7ff06d1d8d566c28fbce5f599851305a628a7a4184b107f9e146fdf98064

/data/user/0/com.cnxad.jilocker/databases/earnings_record.db3

MD5 7b46451279a2cff0d453d7cdcecd72b7
SHA1 9eec9e8001870a6df8a2ed59d8e43e19df6e160e
SHA256 3b3ec09c9e0d81578a3dd7ba7cdf47cb181c583c0a15478cabeed8bee72848b2
SHA512 f9372c7c9ce334dfc6256e715acf8084d6cb03e783257703415a568f75fe81fe5dc4078329dd9776fefa295760b170346db11211c70d7154c2ab7c7ddc4328a8

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3-journal

MD5 964c6027053bb0916ea4102b470b07c0
SHA1 1bf78526d2adeb923c2a3cd7e72a8b7189ee4e47
SHA256 8efaeb4986f6ba5fad18b76ba6fbc48295302c98bf33d0d619807fd2e84b2af5
SHA512 6c26811d47eb201732765e5875a97f7975067c403d7f9a91627750778e17156f3e841506e7938d85a750ad27275b7e79527f2abe639d1335aa3d212614fe609b

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3

MD5 bf5a56b1566a78b95785b3152f60cb74
SHA1 ccde72a07589bb35d0bf51d7a44b97c9d34f6e7f
SHA256 5c565b4960649053f2889ae9c93bff603f89274d59be94a82aa8adf95dc00b8b
SHA512 74383d0a12cc53c0f84a35bab23cfabc1a5c6a4ad4606a408ca0986c48f9db7b1e44f29ce342c7ba7be7835f88370548e94b84c7fcaff687d119089541724fd7

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3-journal

MD5 5a9d9d4533b06e4f8895a727e955de6e
SHA1 d69692be3a21a911e1c2cc5ee6e5b41759690687
SHA256 3c9362140a043ee8b70c47c1c2bc9707adfc928897eacbafd7a00f9a63cccc95
SHA512 88ebf816db85e0201f4577ac91cf29a5360a70fb56ff6f81ede239ce56ed065d50366c920cae85c6c1bd10135516fc115d9f352201f014bbcdc1c360a92e8e17

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3-journal

MD5 59d8bde88c68f23f155cc63c2f49e732
SHA1 51f8c04ec50445dd5351b86cc8d8181a49e65e92
SHA256 46e619fe9eed1b7cefa150d512f0c6c0f61d74e8f57c791b9a410fbeec882002
SHA512 27fdb78eb30f22424d236e5ca0a5f843761648e03cb8c16d818b22f8c4e75b7179777baa229d2c3b6a8bbfc48c1958f31a25e957516a18bd23abeac879daa666

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3-journal

MD5 2b0e148feadd2fbf2e149b319cf071fe
SHA1 acce6407dfe88ea75845de282756d3edaea12ff9
SHA256 a84161b09c8c5b66205da5a34b203c117ed0a24ca28ddfd08bb61b7a648abe8f
SHA512 ff2996270c2195ff5e444789b7aa55e0e0649794136e32cfcbe9437797754d4aed46707bb6a4d816d5034442bbc06eb3231ddaa643f735da7fd74114c35f0108

/data/user/0/com.cnxad.jilocker/databases/advertisev2.db3

MD5 e695b0a65febcb4660ea89805570a2a2
SHA1 31a63a52a0cf31b383f6cc4a11baca7621ce4d32
SHA256 255ddbd59e251c12641bd0f1c2dd3479a4df65ce6ffbdf2c7a4fca1086a68f3e
SHA512 03a310ab9fd16f9051a1c28e139253fcbabc53e3320ad234bc471235e75757f022bb65326034c80425b19b174aca301554da43891406e01dfdab555b281af198

/storage/emulated/0/JiLocker/LOG/JiLocker.log

MD5 8f3c53f83a444613183d920a99a7b8a6
SHA1 03eb36b1c29dde9e95146a1adaa7c47a1b5b1d00
SHA256 64ec8cc0fe2fedb7d57ce03068a74deb77c4baf2783ed64be9e314b86794874f
SHA512 c739c8524c32d98bb0337e7d29110fdf8bec5ec1ab567008226973bd87e304b7d9374dd4230f3429332a1d53186f032f669bd6c3caf874753e206767f788c7ac

/data/user/0/com.cnxad.jilocker/databases/OxgHkj2lz09F-journal

MD5 29dd590a531ac7248bbebcead6f4b4c7
SHA1 eaae4e6fdffccb117ea2580ce14905bfe8559f6e
SHA256 07f46660eab7d5254a9b0de2a97aed870746f0d1002634ff64b4ab784fa9d5bd
SHA512 26215951f0cc0d753cf8f114fd9ae50f321ad528f3aae43484369c3ee5f25839afd939c4a9b61d68e4a89c2099fe1ce5ecb6f58860d12560ba8c470d0e546c80

/data/user/0/com.cnxad.jilocker/databases/OxgHkj2lz09F

MD5 ee404ee50b0a8b608431c827eb7412d5
SHA1 2fcd5f95d113dc1ec7cef52833d0d86d31a7c183
SHA256 0f76a9ccbfd5c1ead7caad5059bc8e019f65d4de05a449bd494c9bcc89e1043b
SHA512 e33289ba9977eef8ff85098786b523cd2e1e7799af8cdbea36961f870ad717b63947c4dd7829b1219616b2ce0858fff2a181d8e4e52213f5ffd6894270741e0a

/data/user/0/com.cnxad.jilocker/databases/OxgHkj2lz09F-journal

MD5 692db2099a5c16ed927c005a7d2fbe1b
SHA1 f50ce2418381942f8164f0ba3f18811772daf636
SHA256 bdf90db6e8f09d97817abfe674cb3609fe9a8e978e9338404b864cd4dc9718f5
SHA512 efebd0468303bfb2f4db26ced36472eec9a8a2e68d287d15993570e7ad479b14709e2ed66285e38f63338a1257a98b8261d6d78fc95c1bdfd629fb566642a6c1

/data/user/0/com.cnxad.jilocker/databases/OxgHkj2lz09F-journal

MD5 5d1751aae6570de71320bbc66b05b2e4
SHA1 849d471d047d03adb7479a0482bdba0fe22a283c
SHA256 f7824aa3fabcf091d7092af78d5c22328c4f5618cce6070ce0136fd843c03947
SHA512 e92b65e0304567ecfe78de8a70724dfe14ae1b7b6a00e7d1939ee992b07ee50ce51a911a71ec141cc9a196fcb1fda2ed5e5a9f4a43bc531395f46cb3b3dcd059

/data/user/0/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd-journal

MD5 27e46f7f72561591cbb25a3996b8c0c2
SHA1 2c624de50eb29432a59c104257ce56476c9fec95
SHA256 47942d660e19bead378ab4a5ac09834cfae9bf35328e15fa6e204d6ef3327b87
SHA512 017e1f09d4a2cdfa891bb36bdbb6b4d3a4cfc970519291d11344448149ffb95cb850b39c80756d4fdb76b29f6122baa3b33eaa070ba3ac7b6a740634c46f78a1

/data/user/0/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd

MD5 9e1789511fc6783ed88d6cb2ed11ba7b
SHA1 1975b064be48e20da6e3758a0c8c5bbb803c6261
SHA256 50f079ecebfc9165d98b71b404e904f7a9e2b85cd03aea5544ffd8ebec3a5817
SHA512 9e92d0a0cb2fa9b7ceebd3e30c04df491d9e93bdef9ae539ffe42c99b154b552f76a0874ae8abb7f7e0fea33073e7af7ffff8abcfb1cfe56dbf1a11c66f064ef

/data/user/0/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd-journal

MD5 caa82c8cead39b008548ca6fc8b5e8c2
SHA1 35c035a92e23f2bfe87ca36fc5522d82dfd1ce2d
SHA256 340542e3acac0544fa89ec126fc7cac6895d3e57624c8dbad8ec0ba1c2b22496
SHA512 03277b318a650e88cbdcda2734f8e3f04ac26d8eafc411380ed3b70e434bb18dbd8ccdb1e9c7b68439623aa4a7141a1461e1c6ddcc53b1b82ba216aca4c6f0e2

/data/user/0/com.cnxad.jilocker/databases/wsUL1uCdKvjD-journal

MD5 09cda37bb3ce22bc69d154bba499452d
SHA1 566deac69c03d6d38e92aef0a05ab5fd390382f9
SHA256 f788a17309cef88045484950dbb99add30b9e0ead673e36c316ac0dea2502400
SHA512 349fe6ea6ce68e71b60550af79e77bca0ae7d998a03dc7f664b775eeef01cb0f45293aadd2d827a4e4d9603186ad5b8ff4235930935c42f578756eebc1123fe1

/data/user/0/com.cnxad.jilocker/databases/wsUL1uCdKvjD-journal

MD5 641d04c8fb962394833953d1af16c251
SHA1 f274ffdac7144c328b90cb3a5bd9ffdea464534e
SHA256 b2b7958f0e811f147363a014f35ce60da5ca2c4083cc44260634c4ba391e2fd1
SHA512 f0a376ab8273b59a83adc681cfd96b1cff9f9e37923362a89a54d5f7894ab10a42f3d602213fad07229356f34d062dddb5dc17c41ffe0ff447c04aa3b71d6ea1

/data/user/0/com.cnxad.jilocker/databases/1b41fbe47520485fd05511e25b4e35dd-journal

MD5 b34e52c12a9cfecaaebcd72f14cac81f
SHA1 837fa27d1553a5f3e16c711a073a5026f94d6f56
SHA256 e3b1019a07df98d46eca318c9c2c98dc67e4716b93f204f6b37607818148de9d
SHA512 a6c707f3570816536ac99532c8865d96ecff84f96cf417bdf7e92505f811eaf6a59e273cc2e361f7262f026dbd93932244c3ccb9a37cb65637d5d90fc3e71811

/data/user/0/com.cnxad.jilocker/databases/wsUL1uCdKvjD-journal

MD5 eea18f6ae8f22f057744427e160dca56
SHA1 35c470a13da2ddbcd0a9e4fda67feb13683b8432
SHA256 59e27c77c5bd83b8a7a4368bd630577b52db9126b67e4700264b119f984d9da3
SHA512 1e1845ea407fdbf2a1a32ae7aa152a630fb84b6dfe638e5342507fafff94b95a59d06f9c0870e1ba4bc1d1650411533d780481c8b1caa6d0360f7b25cd4bcae4

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT-journal

MD5 747b2d6cb9b0715fd85318c9a0b83693
SHA1 50cc26dc7c4cff45aabad74502ba8b09343ed126
SHA256 bdbc5b5ed6e21c867394ad6dec3e2c3db299d8c40d38e3e6cc900fa39a62683f
SHA512 71387328d3e153f51e4fadeaf4d56edbe881844950776412956c3297f226b6dea70f7bef1439ea6c90349e5a58975a46c1b8cb39b78b7067323685a78ed800e4

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT

MD5 025e56e140a8ad94151c4a5afd61593c
SHA1 bf9b5c8d9d7d7cf08821fbcf8f8dda5ce7e06eef
SHA256 ae00e644099f56a6cc0d1a91767c2633209a0bd06c7224a0d5abc0a2131816e1
SHA512 045a870d4d606dc7bbbd022b013c11c2f6ba2231fadbfa68a8496965ee80d324f737b00173950316eb43f49dfa2b9f4d1d26dfc0dc4f71d0e8459f60a32effb7

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT-journal

MD5 7edcf04326a1bec2914ff55c7c870527
SHA1 ae183fb76c2c4514ff971cbae16fe8918558b874
SHA256 674fd5bff7353f87983cabc27470addcbc09a6ba66e537566d4c07d432525dc6
SHA512 cda6be1ef958b17a9672f110537d8b3420e6ba22d485d5f81490dfe09a3f788f1553d4012714f84b6e32ffecd6bfb159a2c3e36d9baee714a89724d075da30de

/data/data/com.cnxad.jilocker/databases/china_address.db3

MD5 12765edab0cd2c5071b57fc6b4fa5d47
SHA1 4b233249123abcfa9b89b7ca964024b848aba015
SHA256 d69d0a68589b45735417c370b75abe809293aeac0073d17048bc8d281b9a88d2
SHA512 23a7c12f45b378ea717da5dad9206eb87fbe07c7858b4fc286f2a328d3d88f7c90a58aee437bd594e4839d6b0ff7ff10fe10475edeeb92ad02cf2f2f7816d55c

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT-journal

MD5 b1ad836f68e07a3818d2c92ba6d55b86
SHA1 d94fd4b986fdfff7c085cdc1de5ca7d942c8db45
SHA256 e1c682115e59f40bb2c7385971ba701bad0346f0c3a348ae6e138d2d517f3a8a
SHA512 33427a02f02cf4069e3144da1126cd7d844070b297deff4d79becd55d43ceb2fb44abffe44d6fc6acfdb3f61b156f29c728abacb3b831a7fd92ca104287ff371

/data/user/0/com.cnxad.jilocker/databases/T1oX0rhhuXWt-journal

MD5 3089d2c541c5e5f8028fa9da65beda47
SHA1 1d91867165616577fcfdb7cd45ed1006537fcb4b
SHA256 5fc7ac90a765ae00e30bd6778bbf709dd09c62ae5ac5192c84fc021b1748dfe6
SHA512 1838391800a4fb0b530587d67db93b5d79b3c9cfd3f0adc59ba99a5ec55ede3e9859be6d07a21c9aedaf12c637a975398fa97f917d535bf41709fff708c066e4

/data/user/0/com.cnxad.jilocker/databases/T1oX0rhhuXWt-journal

MD5 09bd0e8730e7d2ab1e01f8921137fbdf
SHA1 69a3dec2ba47da833f56b69ac0b5e15878bb58c8
SHA256 173741743fc2db4d184031d4595247312901150abf8a16cf5ffa6b89bdb0885f
SHA512 81fd9c37e25ab97ec423ea4544d32a3ce82af623c1c9f7daa0265f2e7d6d9ec486b68f520c4546f1f845e878cb1605ea1264f7eb37e36e1f2ffdce19c88bea23

/data/user/0/com.cnxad.jilocker/databases/T1oX0rhhuXWt-journal

MD5 a4caad326847a8150812db47867bc749
SHA1 f463c3e7c15a43d5a8c4b0d1a06823050e8f5929
SHA256 02faf6efae0eceee0e60e03b436b785ad4e6438958166b5a119e635999166516
SHA512 9ad8c8d390f109301da7efd2fd01a81dbdfc70e4d11c9633cf3585e3edb352c50d5ff4fe62316464ab498587dda37bf8575873642956d867dba3a2fdc71f5820

/data/user/0/com.cnxad.jilocker/databases/P15pKIjsm64m-journal

MD5 60010a9cdbd00dc4b989042990c05d1a
SHA1 2f537919482962a382f956136d4f7b9d8eaf728e
SHA256 374d801a48cdd28e5465bf155ae02c518a86514aceff1ada76b43a20500ec4de
SHA512 b27afcfc74db8c6fdc4cb2e137d3142fd9450f2b57ee23acee11acad0768ea7f5d21671ba0b495661bd0444a99db8d51657903cc0e0632c8c1ea6ef9a5859dae

/data/user/0/com.cnxad.jilocker/databases/P15pKIjsm64m

MD5 e293bd58700e15a3e37051b1e22c05b8
SHA1 9ec1b070915b7ead90620e7c148ffad3a40c9ddb
SHA256 862663fa28a6147d3f73ada313e5471bd4da61592ce3ef63adc149dd5eb3852d
SHA512 ecc35d41e676a1f3b7a7c2577a92f3bb0d521ef371cfef94e0550d4a32a42dc0b0af0ede5cd1dadd378c35f0b9140d2850f7519ffe50f18bb109bad5f88539ec

/data/user/0/com.cnxad.jilocker/databases/P15pKIjsm64m-journal

MD5 64515d1e505ef8e8914460aad663123d
SHA1 531e3eb1dcb15d30ed33ff1d8ef0ffd92218dffe
SHA256 bbf75e840a4ca7b4b42da85b7269de843b6114b53bc007f2261974fe22e9f9af
SHA512 932730c720cd8a03b50ea64cc03876e763494f979243f127b7b7bb81ef75c1abdd84e22ba918fd3ccb28c6edfc2256e9310fac4d0fabcca4ce7f184169825d0e

/data/user/0/com.cnxad.jilocker/databases/P15pKIjsm64m-journal

MD5 95d1ec381c59bf631ca1f95b1192e2ac
SHA1 7037b3c09390c24089bd3b879af69375b6fe3166
SHA256 6b113a1c24dae9a37e337e09c05b37a0f711ca6e1e1f1e5096939c8291b38996
SHA512 f4c77dc2267b871d165c83871aa7f211ed6529f319a46c5a6d1b40425414a5356ee703b7694a314f375b01b00a149e7f2c2fe4e0f882cf2eb46502fc37877450

/data/user/0/com.cnxad.jilocker/databases/XKwVoK0huy3R-journal

MD5 80688e324032163a5f5c61ad533d23c5
SHA1 c8cf4e2895c52d68ce0c2dae27f58b4c231fa588
SHA256 5c7b62eed44d262c5e0287b9f8ee3992eea3d48c847f14ea5c7550886650da0c
SHA512 4d2fb788fb0ee9847be32993b6d55f95a9f4e78e24808b00f0afda12ddc2759c51eb9180d8edbf3605a5a111e4698cddd1d5ee50647f62d3f82e6f3ee46ea743

/data/user/0/com.cnxad.jilocker/databases/XKwVoK0huy3R-journal

MD5 2d6b424c8e644a9b8d3f8b2b89945ec9
SHA1 1045bb55507ba401f642fd7c9181d77067c562ee
SHA256 3b8439099218949cfad1d63b2d8c554f0af64303a66f8102e51fb29919a80138
SHA512 aaf5d254fb081922c15f302ef52009a73a3d5986930a1228fa79ee723cceaa7215426d33839063d2d24c4ab9873c70d4fa1b1efcacd4480db628bc55464dc641

/data/user/0/com.cnxad.jilocker/databases/XKwVoK0huy3R-journal

MD5 2f9b6ede6bb6ae11588cf71580f7bdb1
SHA1 031f7a384318ea4266c058d271e035ecfa1b4ba7
SHA256 a60c386991cf7366c161c6db794db5b406528b54667c151878ff65b27040fbbf
SHA512 cd3b6504bef85e5199a9813e73c7517226a05b4d74046b64f3bd8de487d46d84aca798c47d359d40a031e53fbc25847fe7cf3c31d17c21b9e85333642dc41ffb

/data/user/0/com.cnxad.jilocker/cache/92960530.jar

MD5 3ebc77f510a9f597a5f7176333e2e8b6
SHA1 6a9e5a20c5667c069a1d1b3f759f6c8e41b26d86
SHA256 3708cfa14e4735791e48210bd15f3ddcff74bbab32bc4ff547286fcf4f06f448
SHA512 5368b1b3b1143d73f1058c642803c110135ce71b0c1ef7a6eb95358181ef0dd454be6ca060a75c935b0790b5803aa36188793be4e4a8ceada0d1646c067f4923

/data/user/0/com.cnxad.jilocker/databases/wIU6pTyUBYWX-journal

MD5 5a0be88cf40285f224364920344e59f2
SHA1 cb0a2bddc81054a18a30bb70ec7192069995cc2c
SHA256 0a6d2ec3b477cdb999812bd03f18bb8d28e9a17ad47b5a100578ba97fdea2810
SHA512 4d2310ff9fe1a5f600bb41d2ce8b330f8cbc4e9ffd4bd0af609bb89cc2957d595a52f30b4cdf3938c3aa026d96b2133b41c8cf286ff9f7c8f9fde1b655c9776b

/data/user/0/com.cnxad.jilocker/databases/wIU6pTyUBYWX

MD5 9bc818834bc3f0c969b4cfeb8541c982
SHA1 b9503bce4e2f77ceef0f1b9d430b750bdbef8647
SHA256 51ebdbfb7608ebbcc8a409c55d1bbc82b884480a12666540e8d9c96b368876b2
SHA512 b98335dc9164b7067956f311a94d2de9911f00de90c48f118c20870014f56df415acbf2b3b2619bd40a7cb33b4011d0ca1c6ca9af1d51519aa5136ecabbe5894

/data/user/0/com.cnxad.jilocker/databases/wIU6pTyUBYWX-journal

MD5 3ffd155348a0f0f8e9e0fdebc4ef0d6d
SHA1 19374cf9a70a2718080692085d4cbf17bc16843f
SHA256 892f51517127cd986351957e1b00cbaba9db164a140e1383c2f6a8b416e2563d
SHA512 7c32490cb7ae147014a8045a8e08454a53b4af8867d31be604d77b1e5602875688acf0f0505f02a335f821babacb105676366230d460988c377260e8751952ed

/data/user/0/com.cnxad.jilocker/databases/wIU6pTyUBYWX-journal

MD5 623042f2d1a41e3b8c2ae7d27fbb57d2
SHA1 c4e1d8ed0b020733ee47cd6c74e3a319aa03667b
SHA256 5c6d1943c025226565c5f977241c0faf0d723e7375b85f47699cf9acaee0991f
SHA512 0e76eb3100697584d81a7d2558311bf86fc3a8c1581bced97df4836b27345358b93944747f630e99a4da91091c6ca8ca6f346a5a47ca7a1281d278f89d0c6504

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT-journal

MD5 57274564c9db9d9b6a954d5fca673ee7
SHA1 6cfe642b8a27a2da3b600a7c1d080b896973742a
SHA256 a4584be8a9e2f8dda311444a5583d16364953bf9441294b1b83271b8f046e954
SHA512 b6668d0da1976e0975aca5272f8cd6cabb700fcef161d303fce887cf17a8409234498296a03a9dc7923f8a6f3626b6da37dc42fe44da3299c91beecf4471f1d5

/data/user/0/com.cnxad.jilocker/databases/jqIqJYOT3JpT

MD5 bb29802132b182b5bb1024d80b1509e8
SHA1 367d92b5df8b5dc74c59f5d900f35b80e7bbc353
SHA256 c526e4166e8e4d7ec52809cca2eeef623d73af6dd8962e9a643caf0efb7b6f39
SHA512 6202f620b20bf11055626fdcad893615e79b63da5b5184b276ff5eadaea297a672387b19ae004b97ab71d94a39fd946b44381ad043345defeb9d21d1ec6502dd

/data/user/0/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695-journal

MD5 d106b60f8ea626697bcf6cb6139d6750
SHA1 2f28b7578a3bfd3a6e9a01e9a1b054bc8de299fb
SHA256 05abacb6690dbd8ba82786ebdd94bcecf9e5b4a5f83f37a6c0a7786a31778959
SHA512 bfc2440be81ef6aced5dc05cc580d747f2b610a456e3bf4d262fe2cb412a4640d6a2a1b549b0730baca561a8cf63cfdfe00837a9eebbb030c2dbd8fd8edad6dc

/data/user/0/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695

MD5 336678c62c9d5f6d42aab05f6c1d8c53
SHA1 e1ab84b2dfe833b5d3042a03d9368073f8527569
SHA256 c833362832f275d58987510b7898b3fae051ba19ed759430468d3e5f72053dbf
SHA512 36d784b4d098c3fb752973e906a68e30721468697ba2fea0247d3729e86a03b479a4bf6fdd865de207ed48fc89ce4be7a770483b0eda10eec22cb7af2ffd697e

/data/user/0/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695-journal

MD5 5d392bde1ff54dc2a83230ce5f43ad53
SHA1 475b496fd679825d0d980723250ddb9c8d32159e
SHA256 afb66721abae030f9ab8e8af408e3e50e5ed8541a16006f639b61162a489806e
SHA512 f14730078211f9742707f15df3325472676797d3e0b9ac2ad8d401cf5acf495899b1deb431068638b568073b8a028c87b7d1533974a6db061f040a4349494b88

/data/user/0/com.cnxad.jilocker/databases/baa58254829ccd2abd44c39030e71695-journal

MD5 19138f8c26d615f3d886c219dd529c8e
SHA1 da8e3d0288de4aedad2047d8000fc6789f5e3979
SHA256 8e394590c3f17d60690e78d0180e03ed6aa545799205f416b3b56fccc96dee94
SHA512 0a53c647286a69a3bdfdcbad8a2da88a73e5eabae88abc95f5c207c6a6ea8f6e38e1918fc79f80360e4f48f0fe1509ab5fd4b047a3002238b797c3a818cbd4a3

/data/user/0/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b-journal

MD5 fefc62a7f2f825ade67f0e88fbb1087e
SHA1 0977c4324a130af812fdf76f700b71073c3b3dce
SHA256 6f04aa65f82bbfd5b5ab3114a032494a1c1156aa8405dbb5d63bd5083131b68b
SHA512 bbd5d3aa2a1f444c6eeb4fbf1fbc6733ad3cdcbddda03a2804901af9feb2ec71f2747f824d17356facc19138a94d2163bf52784bb8d851345b461a75fad493aa

/data/user/0/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b

MD5 f73b0b28d78c7c3bc3f20bb094367a09
SHA1 2f247eaf7c1ccc35efc4873e8bf811a9f4bfc5a0
SHA256 f9b4ab1b08756e8b308843cb842da9e50d519e503030858f2101abfc9ec53b90
SHA512 f0cd7d33f43051f9765708f54e0d219b58382b28cd19666aee26f74f09ec0d4201736d75a234930107c6662117bd362e85ac4a598728e954e99d87ceb7b6954d

/data/user/0/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b-journal

MD5 58fa4996c81db5befb64f0a70f7e3726
SHA1 e0cd1ceb8190093a9f5f075f05c32a989d39f278
SHA256 157de240e61adff16efefdb91a17fe93ef72ca5d0c11cd28b1609bcbf5c972b7
SHA512 d8428f74f216031acc71578950858c821fd72f39eaf1e7e9d9b5d8490eb3e903e146f39111c07cab812ff2b5c230ccabb87fbd9973dcfb4ee09ca335825cc25f

/data/user/0/com.cnxad.jilocker/databases/7fc66ccb0e1b61217f3294149852a94b-journal

MD5 19ae1e24273c4958b9d899e1a8622d4e
SHA1 9555065e03a8b8c5e9b7a8c2b2446a409b06a86d
SHA256 b35e989fab46e6488975daf05eb7cefe7273ab7bc003865af25c756f9b7cd139
SHA512 936e5883c58d6cc303b3a254427cc1f57fd69a009fdcad3170ad48ab8acaf3f4deb9cc62f278ac0e1abd6a765cf17593e85e08fcc95e729eaffd2da8fb3b709a