Malware Analysis Report

2024-09-09 16:23

Sample ID 240610-p3p9jawbne
Target 9ab8bc3270b68cdf42fa521febd05540_JaffaCakes118
SHA256 c08a1e418a097d33a58d687d4f0581e739d76b207fe0d05a7ad9ce9cdd3502b6
Tags
collection discovery evasion impact persistence credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

c08a1e418a097d33a58d687d4f0581e739d76b207fe0d05a7ad9ce9cdd3502b6

Threat Level: Likely malicious

The file 9ab8bc3270b68cdf42fa521febd05540_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection discovery evasion impact persistence credential_access

Checks if the Android device is rooted.

Requests cell location

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Reads the content of photos stored on the user's device.

Queries the mobile country code (MCC)

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-10 12:51

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's calendar data. android.permission.READ_CALENDAR N/A N/A
Allows an application to write the user's calendar data. android.permission.WRITE_CALENDAR N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 12:51

Reported

2024-06-10 12:54

Platform

android-x86-arm-20240603-en

Max time kernel

166s

Max time network

190s

Command Line

com.hotbody.fitzero

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Reads the content of photos stored on the user's device.

collection
Description Indicator Process Target
URI accessed for write content://media/external/images/media N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.hotbody.fitzero

com.hotbody.fitzero:filedownloader

ls -l /system/xbin/su

cat /proc/cpuinfo | grep Serial

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 m.irs01.com udp
US 1.1.1.1:53 app-router.leancloud.cn udp
US 1.1.1.1:53 api.leancloud.cn udp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
US 1.1.1.1:53 stats.magicwindow.cn udp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
US 1.1.1.1:53 router-g0-push.leancloud.cn udp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
US 1.1.1.1:53 apipool.zhugeio.com udp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 39.98.34.44:443 apipool.zhugeio.com tcp
US 1.1.1.1:53 chat.im.taobao.com udp
US 1.1.1.1:53 idmgr.ww.taobao.com udp
CN 203.119.169.6:443 idmgr.ww.taobao.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 adash.m.taobao.com udp
US 47.246.137.207:80 adash.m.taobao.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
CN 203.119.169.6:443 idmgr.ww.taobao.com tcp
US 1.1.1.1:53 redirect.networkbench.com udp
CN 123.206.5.129:443 redirect.networkbench.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
US 1.1.1.1:53 api2.hotbody.cn udp
US 1.1.1.1:53 alog.umeng.com udp
CN 106.75.21.136:443 api2.hotbody.cn tcp
SG 47.246.109.109:80 alog.umeng.com tcp
CN 106.75.21.136:443 api2.hotbody.cn tcp
CN 203.119.169.6:443 idmgr.ww.taobao.com tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 14.22.7.140:80 android.bugly.qq.com tcp
CN 203.119.169.6:443 idmgr.ww.taobao.com tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 119.147.179.152:80 android.bugly.qq.com tcp
GB 216.58.204.74:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 apipoolback.zhugeio.com udp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 123.206.5.129:443 redirect.networkbench.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
US 1.1.1.1:53 api.leancloud.cn udp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 39.98.34.44:443 apipool.zhugeio.com tcp
CN 123.206.5.129:443 redirect.networkbench.com tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 119.147.179.152:80 android.bugly.qq.com tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 14.22.7.140:80 android.bugly.qq.com tcp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp

Files

/data/data/com.hotbody.fitzero/files/installation

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.hotbody.fitzero/cache/CommandCache/0a0548aab910f3358fa3db2dc2d28058

MD5 ea49d8f7ed0aea19ce0397c947875508
SHA1 acd00c5ca9812863c8ad4a33dc7137e6aec6ccff
SHA256 1c54f504ced9b3936cbc3dce73acf450a40722fd98b9a147babd9ddcceee556b
SHA512 36f2919694998515c981723b3d57367fce17612dc42d7c9ca12d8317e241bd01b1f698ab58ff1c29eefbbe8d1994fbcc504abe042670c692dc84087640c82098

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 abbe3a91ff33dcdc301b1fb2fc07ab4e
SHA1 f8f1de4b9c1081d81847d6baca34163679168459
SHA256 6627d7378a557689b7581ac04c1807c19baa08b1540232f092948ee089e13f8d
SHA512 a59c1c1dfb4ceb38c3f36cae3bb75b25735773234403ce6d74bdc7d7945f78549f9816ce3c9d2e023294260ab8ce17510f3efdca36621fcb2e9f90a925325d72

/data/data/com.hotbody.fitzero/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.hotbody.fitzero/databases/cc/cc.db-shm

MD5 4c3078d947c745ad740407362e636ad3
SHA1 67ea7bc441b90ffb704844903eadf3757d503f5a
SHA256 34e630227669da0f03356541e77cef1b4353d826c22ec3ac08756961d8fb918f
SHA512 865b979c0b8bf97b57adbba849f459c8959b4fcdb0d2ff0b0c0f6729b876d31ec01588370e4fb9776e2a1ca0ff01b2d5c3279263e9b1ff4a508684316e451598

/data/data/com.hotbody.fitzero/databases/cc/cc.db-wal

MD5 4be41b6df05ca11dfc0238c00efa4e56
SHA1 774a7d061136b8bcbb55964c11cc0ecd8c7c542a
SHA256 b2507f2e0119cb2cf9278c313277550d5a35b1223628d285437e335d2b839849
SHA512 6f942e09e1705f3d00f6fb4c02524a2f51a33e80710ae96a64dba1e84a7c59a060f89ef4a199514c0252024b55d68f714d4f29a5f2f45c2b41ce14f04ace5915

/data/data/com.hotbody.fitzero/databases/zhuge-journal

MD5 ff600ac65299b22bf942b6a96fc2f3d8
SHA1 4fdf41ef39c39118adabcc91bfaef71f3b5bf763
SHA256 78b12cfc26e5472b9fb50bdc9bfb4203419aae31fc04f580bdec5776f71791e5
SHA512 c685e8db53099ed07e305bcc91f3032476f3b3ceb70e04a2123eb712b5294155c52f4a02267100c5b1cc08a0df045e72621ad5011b936b542b24ebcfcf9da629

/data/data/com.hotbody.fitzero/databases/zhuge

MD5 2a533dafdd9c66008e0362b601490292
SHA1 f8dc8a8254aba2d04fab7fb9ef377a2c583a7cab
SHA256 c9f089e0972e43572bbccb42e847e19b1ad28f2da453f86bab353185dc77b7eb
SHA512 20b3a6462baf46362096866335f194f65429e0298f5e459d73ddd6180d6dda0ed4d898e769dc8b921dba7fd4a025f2b689b45241b1b9bfd5d27702a70a444f1a

/data/data/com.hotbody.fitzero/databases/zhuge-shm

MD5 a61eacf0f260ea2bf2d54af437b9de23
SHA1 b805e1851eb4d213f043cddaf94276b06017dc96
SHA256 42af09e77366dbe056e658f24e0b87106454057c6c0c3a6993e9123610ed35d2
SHA512 4498b0cdc00f129ac7845189c4ce30bb73a3b8795b7a4affffcd523f3b47d5958f9bee4dcfcaa6629c51d7e9fd0f41c74235777dd3d03a8f21e43cd756b10f74

/data/data/com.hotbody.fitzero/databases/zhuge-wal

MD5 f2903035ce3273313d0303e213eab2a7
SHA1 fe5aea79d02350ad9c66c0af30926c48458c32a1
SHA256 849842d3cd1c840214a29c4a6b7711159951ee7e27ad4f8b244f53a47e9be937
SHA512 ecd81b7bc632621eb8e3b8b01f2535bc6ef8bdecf689c38a7b78d69aafb2a060cbff20411dda1f7b498f7010bcd7ebaffecc00e588d64019d9ad85288d0b046e

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 27519f46a61bf7e5303b50b5bf264072
SHA1 77cf6cae6bcfd685513977f4505805e0a3e7b15f
SHA256 33bc5287eadab53760c1b85bba44422a2c08076e2776a0750c4b44949ce857d8
SHA512 0dbcaf72ddfa2b2f6ed9455cf3c55b20f3be292139fac66f2dfcdf2d99d58b2cb924d15a35ed31a109ba7b1802c2384db59b6948474ec2f21117ad95a187e39b

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 e3ef13096e66e17c3fd9d76d3a21d02c
SHA1 da493fcc86ff79a754b5f8a2c53ad39f61b71016
SHA256 f724e85362adc97c5cc8572b1879be7994fbbfd2646501594cb504219a6dcaf5
SHA512 259570ad13a88f9903c496ec48f09029b473529ad5c0e650e4541549cf8c9f8f05961805605532e5a5081e571d32a064315a2f15a295951ca023b3e7a7fdb0aa

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-wal

MD5 d4aac4639088072974b538d69e5d9502
SHA1 a89b24b5549d742ec16ad443617f255f9436cae4
SHA256 331d96ad787b4914f4d47f5ae1ccd67b4b4edb4a0fcb612b10d3024a0d4ff0b7
SHA512 7f4c77243999075da924352de4c2a87e799516d93f28bf6ebad292ce5b3dc8b12d01735032c0dc22f2570eccac81d655e308d1f5faef53b5892261c71316872d

/data/data/com.hotbody.fitzero/databases/hmt_analytics-wal

MD5 d38ddf67d8b533f6996b4e7099cf0538
SHA1 7a1cc8ed28b06039d672c13cc5f9773d608c25f4
SHA256 4c6f9a5ce98e5e77c18f54f4b6a3f05e3a088bc675122d85921540d7f54e279a
SHA512 071f15aa401f767cfebb25ef9ef67b68180f13f70c1b540b029b17f7096fa9bacb93b01841efba322c4d36e709791c0d249cda40ab2d59f7a680cd501911ca2f

/data/data/com.hotbody.fitzero/databases/bugly_db_-journal

MD5 4753c781de92af41875aa890d5ff1686
SHA1 1cc7623f8d0bfff7736e7010cea33a5188a80b6b
SHA256 afbab9d1da9c221dca4225e3ed2ce8f0d43dde2ba55390490c00f9a98e5ad92b
SHA512 98ed0ea73c77216ef32d806e94393b8d3679ce3cece408207ba72468675fe4350a0358072bc07bf4ad25547c7ceb1557d43d692a2bf8f9515c81f544344813aa

/data/data/com.hotbody.fitzero/app_crashrecord/1004

MD5 9bfd5582dffa894f06ed533af5e16c38
SHA1 5cf3a009178223dabc544963f161d8dc655f4a42
SHA256 f3145098c61944db743cea93f902cf3141c10c1fcfd7a3c0a565b9d75291bb88
SHA512 724dc52055962f28b1ca0059f2ca9a0042d46114547899fc75cd7bf5e9ab978434fc32b3643dda9bf6144bca85ccb4742707d485b9d817dbaf1e9488bc8c1ce4

/data/data/com.hotbody.fitzero/databases/bugly_db_-wal

MD5 02ffcd35a3e2f0f40d513c9da742f86d
SHA1 0ebb448d8480647573dba174b6216710066c7cea
SHA256 ce58028c3e1cda42dc613bd6f0f8f4c80b9c31ef4d119b4f5f95d4e0c8b3a417
SHA512 96e8c1707abd91db9b992154b2fe843de78952b12ba6046e0ffad25ea65b86392c7711ec35528b321b8a951603c48863ec647f8eca7c564335adf3b1d872e40e

/data/data/com.hotbody.fitzero/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.hotbody.fitzero/databases/hmt_analytics-wal

MD5 60fdf2e48ac45e8e4050ae9e174e8479
SHA1 4a523b79416e6244b45cd9d559c71ab8afda1471
SHA256 4e5836a226f93ee0c1875f167305dd5fb8480b8f73629c0895f76b59875aa13c
SHA512 33c68390322494999243817a812a9bbae425dc73aa3fb38872946b7b5128ddce4a6dac88aaa67867300de58fe159fa5bc5117831e85ea0e5699aac4c68c47804

/data/data/com.hotbody.fitzero/databases/hmt_analytics

MD5 ae50935fc98b4522e0905c952fec25e7
SHA1 e6f38cc70fbc3998cdcb3d0687c5ded00e52c57f
SHA256 c2a0ce180b7dbbe6fa4c7c01637e32a6edb5a0df708e1d065085caf5407242ff
SHA512 5a7c2fda762c13ea0651f2be0f4592805b83bb5eac191800a817ed70de76d74fe000fc422b500e4e47f5bea39e70db0ec8892563c1ac3e4b35f2bc64f5b1277b

/data/data/com.hotbody.fitzero/files/libsecuritysdkx-3.1.27.so.tmp

MD5 4b97df244d8027c60fee624355e1c59c
SHA1 565d81dccc3c53ad6ec3a63abcbd57b63beb4248
SHA256 e428013ebd9d991a22b459c4900e59856f713b09119c68d9d0a1428ed66ec44c
SHA512 b193a46ec6a0d2184b6bffeff2c5e01e86d0e9ec201ce8da9f3fdb716e9330f084e9dddf583282d4bfafac3e058619eb748dc891f52dd6f3750a5c5cec50e27b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 8dc5bc6d7750aa94f186c9fb09e98723
SHA1 77f354c2dcd7397e9db0e9033b6538f88d26004e
SHA256 db31802a3a02e98c188cac09d3c600fab60b1c8d3d73cff79a9d6d891a3619ed
SHA512 e73f589cd3f84659f7485596e7007f7cef14dc1d284585eb52de3ea037490be165a5387f273eeefd4aa555212e0bcc9f599569a41deeb773938acd8f3955f0a2

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 8994d6f033f3030c129ba1a29781aaef
SHA1 3ca733d51cf76cd82ca2b222ab9db674cef1b068
SHA256 46d4d54d65701d22eb87d2f3b888bdaee64636625c3c1fecdc00f5ba207a89fb
SHA512 a6713852e7a89cad3a4b75c6b17f09321232e93c24ed52206600624071acca9a7db47b1292d1f084bc764079b212345ac79c836cf4c1938fed9c814bfdda97ee

/data/data/com.hotbody.fitzero/databases/mwsdk_analytics.db-journal

MD5 b132cb036314710394e129626839651e
SHA1 02233198aea1b0a65f50899083c3dd98092871f9
SHA256 e518840569fabd2064f2b27959610f52f3c6867953293ca6fbcf4d495c469b35
SHA512 1b37e75c28c916ee9563759dca8a9f69fd49c2aa2309d2050a28f70320da1b8217e028335b2c8abf14bec30f25bb1238906aab93ee2ca8bb18aa13405536774f

/data/data/com.hotbody.fitzero/databases/mwsdk_analytics.db-wal

MD5 3dd4cfb202120d5a3d1f35d94311a447
SHA1 2e421070f37a90ab15527ddbeaee7c2f42f0b006
SHA256 02dadd78e67dc1b842761f4769bd3dbe5546d9257efe8b893e1e809ae6691f46
SHA512 ec804580673e582cc0d7f67f5854d63dc18d84649af86834c278f6d139e2a6be234b532019cca037b2e411b2010901b1eeadc852f9adcd9e6e1bd5c4ec68eebd

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-wal

MD5 f5fdfaf85c227165fb6eef8384d2c5b3
SHA1 c40699f3cf575ed03767b52c154232d36e9c7806
SHA256 c79eb5ae566e6328d20fa6c7a81013bb9cadb55c27b0f307381219ef0bba95a7
SHA512 fdb2ebf72b1edad5de3a941916c3dba53dbd7dfdc230d8d8df6ee12815f868c76f29f31297c9c491f1d4ea30d2da83f5d5cbfff618b408f3ecbd1164877f2dec

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 4d610f43bf91ca1994d62b3955141399
SHA1 fa9bb9e5f6eacefd2769208aa610504b9a8da0ea
SHA256 bd9b8341f72aa043cc5cee1d49a9db6d18a68391bdf1a21023ddc2eba5772d57
SHA512 106b5f0aeb54c19559c6267b82754238120ec90329f4ade7cb6e3cfafd4f4dc5e448fcb3148715c7acc6ee993c1eca1703b29dbd2ccae8212fb4962c7996a8dd

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 61055987ae789d6d780af290ed78ce4d
SHA1 639c0d3fea0b2cb42f8c7ed42565af47e5dc8123
SHA256 39770d294e8c402d02a4f8f84b0d7f0371a6957290e7fe54512b1f8f6741d274
SHA512 04eea6fcdd6afb46df9486c6bfd0e6bc8a589e9768e6a47d0acde10295a6b4aa61d7ae24194c80fd62110a6070846486117080c2f3703dbabe9295c63ff52d39

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-wal

MD5 0d4b064f1d0fb3e8a91589393827c44b
SHA1 6916edfcccb05607e14629248352e9571a36c1cb
SHA256 670f2988cafb07889503fbb641368d5e500fe35e74187e52a5e55ab6fc634154
SHA512 5ce477686f054d7b604e751b39a53ac1dbe2a0a909c8ef8400b990879e89962b41679aad1bed7fcc280049d7d797e62dba577e1101eb1e93b0a939dcef27d8f7

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 553aa9bd9531621f3faa3f0eee795dc2
SHA1 43461a6c7cc67c8b3196561c0feb1bb4362ac456
SHA256 dc79bb3f9866f3417c0733ec41008b3e4ed6d54285b334fd9cc1826c42f4c633
SHA512 5924c637e278e36e964af5cbe8da0ce291ce8c63bf2da4f8bc0928aa4c014d50a146184bbf90bb3a75d5bd7a80e56c494df63a686ee262ef58a2ace9d77b244c

/data/data/com.hotbody.fitzero/databases/hmt_analytics-wal

MD5 2426a1ac46a12d6aed0a03ecd74d9931
SHA1 e3fbdfd4800acbaa5250e4ab35d9b08fed1ae5ff
SHA256 d11d3f195d274f9b112ce787e153ba7efdedf51a3f6928f265b8fbe6528db21d
SHA512 25ddf9fb221582e6a2f18fbe32a79086a4eac10957acbdb237d7ce41b5ee135294c2fcbceb576e3ae2413b0b377f62d64ef8796bf6651d90cbc3528ae0fb4ffe

/data/data/com.hotbody.fitzero/databases/hmt_analytics

MD5 74682e0914c2de079dcfedd7945d9357
SHA1 e15427131882fc2fbab8b5ee682b5d91a812fc5f
SHA256 84d832efc5543776fccc2e00b3739f2c36a335df11263e147bdf982f208a4a60
SHA512 8a2f4d82012337ecb58a2c5ae2bf2fff1a9e2021b0c09846da3bdad0fe71fc447c94c1a435c40991d80223d7a9752d9102bddb9c5a41ad521ee7da3ab9a5fc85

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-wal

MD5 62dbb5b8851b8bcecaabdbd13fc15b90
SHA1 a8ea4723667203a14cf14cbc3f2ccae40a84743b
SHA256 de698437e15aed791b79c7bf79154f99e61bfeaff3c18be1dea30aba754b2d95
SHA512 ac5162a7eab0fda1887759525d73b8e046c1f433689446681e2c36f66f3876e2dd51107c0e5ec760c7c734e82e3175b9536646ec15f0599fa7dae39e4db9042c

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 bfd53dd8647490b8cec856a8903e16c0
SHA1 215ec30fcbf1c9983471afc5fe2c210b988f05d7
SHA256 f6e03595f52e6e755d3ec6b824af79578dc0d32d8b06e9bc08ff6601da634ca3
SHA512 29cfcb6f8458e458a1ac778baa2a5e59d39bb38e7c0a471573b9e2d87b76d6a4ef07e950f8c22a5ecbcbb2c3dae33f96652668232a974b04d75fc424d3cffcc3

/data/data/com.hotbody.fitzero/files/umeng_it.cache

MD5 0dfbf19dcd086182f1810a86830b5901
SHA1 068d3b37c8d9af0cb5980d2968266a74a96b94af
SHA256 e7030979da6185b688150d417946ed71e43cf950a9c4ffa9e94bee0f6209c2a4
SHA512 dd9d6a5cdc96c79c9a7b718dbc06d54511ea3bff0338d48784361a42a077823843a3bbfa0b04b26b2ba456f0679025af4d16f708c170a222471a43c30006bebe

/data/data/com.hotbody.fitzero/files/.umeng/exchangeIdentity.json

MD5 b54d004e4c096a8bb38cb604e444f8f8
SHA1 7d437d828119bc33575696d9076db6b2fdb0eb36
SHA256 90d0c3dd8b176347f5b38fe2a00734721623152b1b562668a62260ee43a46fbe
SHA512 5ce762196b1c298569fafb2f01729950bb37ce418c7a96180a8adbd644c389f8ffff6df5eda39fac57438389b706105c749f07e74319a19001df56fb0c478a19

/data/data/com.hotbody.fitzero/files/exid.dat

MD5 2bca06ac2e63226a4c9c7b462067fdf2
SHA1 031c96208f923226309514007385f6d0a9a90f66
SHA256 16a8ba945dc4769decf0edf26d063bb6111d40c97572a7c2a6960e8de7ab09c1
SHA512 682a6baf74fbfd3984af30668fdf5b22284ecf471806cb7ae70abd2ece27378f53d0ba000efd61cec9574d3af285dbf6a5fdf2f101f036bf1cd5975f20a2f982

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-wal

MD5 29a26429bed982b9ed676471e070c18c
SHA1 7d31858cf56fe0a6d4b39e787f26bb3d0d760325
SHA256 0632d84149e03fb37a368b549a7e2ac2d2fc1e1e3b50b8670104cd02caa6050a
SHA512 9b83eb03b1afcdebaf5db25878cc190d3298cc9b3daf2c5a890fddb7b6f50f99e613b5b6e6c97e908cfe08a4c4027f26bd725917bd3b90af766cd6b0c5ac3ba9

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 d604a3bf1f8d992cc320ea5b1f7609bd
SHA1 247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA512 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

/data/data/com.hotbody.fitzero/databases/cc/cc.db-wal

MD5 9caa91738c214c9ccd7df13339517ec4
SHA1 0dd0b8cc9b09753113dd5e69597b32132587cd28
SHA256 1094ed26e27a7d80424d04028b5577d71b15f6d2a996b1f2db8c74e519749fba
SHA512 9e346ae4703b63f7643bb58481a88bfdfe2c0c387486d4de781c47a5a203b3491f5f05bc54f6e78df3b295f30a9eda8f7ac6b6ef0b47da3238ed2fee71e8ede9

/data/data/com.hotbody.fitzero/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/com.hotbody.fitzero/files/.imprint

MD5 c89b990af7502ceccfcd800b73bce982
SHA1 5562afefc667ab36986c9e90df8c990cc86dd1ca
SHA256 ef894ec173610b747f3a64ab5cba00f5062a0f657bfdc93f45c08a3fce63157b
SHA512 449a3acafc48a1a671bb04549448c5c32c38090c04bc8943cc4bf0adfde9929239f1e78838a476c40e3ce159188fa52eda15dea8775d1547d0f01efebeb032f6

/data/data/com.hotbody.fitzero/files/umeng_it.cache

MD5 cba8ef1303eb25b97bd034da9ab408f5
SHA1 8bb1cae456b3aa996944c297158ab0509fb9a9e2
SHA256 6dc974babcdb1c71ffbbae5a0cc85b526abc9b8952212b8019baed1b9b1bb5ba
SHA512 c7759298a1e880cb6f5652fc9ec29bc48e35a077e083633cc0cfc6eff25eaa4908b642cf36286d758334f8bf3b09a8b412a2ddefc1d31149b0104f82fe998009

/data/data/com.hotbody.fitzero/databases/zhuge-wal

MD5 66fb16f94f5c021b889bca02a844cfbd
SHA1 f95c12eaeca2a01f87b93ce4166532f380ee4638
SHA256 80ae85b8976173e817939dab77c30ec6f954f218e149fe638d684c41a571c009
SHA512 6779285a23b30a8ad38cc0ff2406cc70ca53ae28c33d93af348c4310247b229cf2513753b855a4c435df6185d76fe2d88858fb2604968c537e5b45ca6e2c8d53

/data/data/com.hotbody.fitzero/databases/zhuge

MD5 a156982a19e331c97fb0570ed995e9a8
SHA1 c6f6e6b0ed602e0f5e9f8d46abd42f27f56b9977
SHA256 6c64b25d27825c3ee3d7b697218199d3660cd9885d1e4112ca7f364c91d16089
SHA512 3cb8b19bda2951eb53299b7f09afcfe7af7d93cf71cb58389c498375485e21c5b06983b44a42b439df47dba7fe3b33b4b636be7a88e64f003196d62420682b98

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-10 12:51

Reported

2024-06-10 12:55

Platform

android-x64-arm64-20240603-en

Max time kernel

169s

Max time network

187s

Command Line

com.hotbody.fitzero

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.hotbody.fitzero

com.hotbody.fitzero:filedownloader

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
GB 216.58.204.78:443 tcp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.212.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 app-router.leancloud.cn udp
US 1.1.1.1:53 m.irs01.com udp
US 1.1.1.1:53 api.leancloud.cn udp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
US 1.1.1.1:53 stats.magicwindow.cn udp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
US 1.1.1.1:53 router-g0-push.leancloud.cn udp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
US 1.1.1.1:53 chat.im.taobao.com udp
US 1.1.1.1:53 idmgr.ww.taobao.com udp
US 1.1.1.1:53 apipool.zhugeio.com udp
CN 203.119.169.89:443 idmgr.ww.taobao.com tcp
CN 39.98.34.44:443 apipool.zhugeio.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 adash.m.taobao.com udp
US 1.1.1.1:53 redirect.networkbench.com udp
US 47.246.137.207:80 adash.m.taobao.com tcp
CN 123.206.5.129:443 redirect.networkbench.com tcp
CN 203.119.169.89:443 idmgr.ww.taobao.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 203.119.169.89:443 idmgr.ww.taobao.com tcp
US 1.1.1.1:53 api2.hotbody.cn udp
CN 106.75.21.136:443 api2.hotbody.cn tcp
CN 106.75.21.136:443 api2.hotbody.cn tcp
US 1.1.1.1:53 alog.umeng.com udp
SG 47.246.109.109:80 alog.umeng.com tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 203.119.169.89:443 idmgr.ww.taobao.com tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
US 1.1.1.1:53 apipoolback.zhugeio.com udp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp
CN 106.75.100.17:443 router-g0-push.leancloud.cn tcp
GB 142.250.180.4:443 www.google.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 123.206.5.129:443 redirect.networkbench.com tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp
GB 216.58.201.110:443 tcp
GB 216.58.201.98:443 tcp
CN 118.31.214.104:80 stats.magicwindow.cn tcp
US 1.1.1.1:53 api.leancloud.cn udp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 106.75.100.17:443 api.leancloud.cn tcp
CN 39.98.34.44:443 apipool.zhugeio.com tcp
CN 123.206.5.129:443 redirect.networkbench.com tcp
CN 154.8.188.31:443 redirect.networkbench.com tcp
CN 139.129.39.206:443 apipoolback.zhugeio.com tcp

Files

/data/user/0/com.hotbody.fitzero/files/installation

MD5 5eccf2e3457c70a6a2028ce86095f2a0
SHA1 801a2c5182daafd8a6f5adedfe98b8fdecd370bd
SHA256 f71b0426d85da39f48caf684f7c29796ca6ebb93b6e701d208141b1f4f4903b7
SHA512 ae9e16b6403a7702c7ff157d30dd8ea6dcb97aa94000db75c0da9982c76bbe385dd0ba497910f49dc0a2c3288237ca5c271391473f884d7b29a7e4fd0ebc05bc

/data/user/0/com.hotbody.fitzero/cache/CommandCache/a900f18959c43ab82ce4d925483bf295

MD5 953a42ce64aa26bac82b80af402190ed
SHA1 0e1060ebe00f289a35b5eed64bf1b40272a662d4
SHA256 f6425365193e01ca5a8f6bd540fbaac068a93ad049b2ecfaac7332f3d4960a18
SHA512 82c1c784764570e43c25629e242f93f2a913484133b8dd9776a00a0304d7f2b26d711a620332ff6e435af3293a87b5fd0abfada7f1804bb6c7644f39a7db0587

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 14868dff207226d8726f167142151f54
SHA1 ec2bb712f5ec1aee79ed45a3bf2bed3da13430c2
SHA256 05014c52d050e75bbff17792afe8b083ecab546499469f40ade0789a8824dee6
SHA512 303fc6c8c4c128a0bd0606d84fad3bb677be47488a55b531ebf73d1682152df755c69c5175a0750ce883dd47e761b145a62b8d2c2c8ce5834ba33ca21ce77dcb

/data/data/com.hotbody.fitzero/databases/cc/cc.db

MD5 2e77f435110ae13f50447a34e1ef8559
SHA1 8777e8ead108b7991df5a1d0c48e4e2e6757357d
SHA256 9adae8eb31586a70ef5aff8b12d3aedcae3ef2e451326a8c37a758cec7f8ce1b
SHA512 0fec046cd03879797cc6d0d283211526e551dccdf204876a09f1177c67f1daaf83360c5feeae875cdf326e4686bf47b9d2f5923d50e0112e0f78b5000cae9bb3

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 a6d831a814f9b07aba7dc445e05daa55
SHA1 b693a95b682e3df6ab8953b8720cb580b399069e
SHA256 34cb2034842ba1e1284ee129cba73b6337e05e5b5c09555c6ae7d37214ceed2f
SHA512 1f0e127b7dc74cde73434853e94d1d0a302ff6389aa98e17c4c3905ce423d80785b3b4468e8d1d3f7917a83a7555944ee38a07fd00a26ac7375ace797c63ba7b

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 3e3b5f0de16ffe3b0e23a7230b197cbb
SHA1 361d5dce50167f313524b3d29bc077643354be14
SHA256 e4ef93e363fc4c3c9a97302294b041ad99063f04acce628f87c6c0480694cb8f
SHA512 b3b6d4483c80d55a0e0f15480105edd7f28661a1577b416798c40beac5d25a34a1a1eeffaf5d47a79a9a31286f39e12b1bb19f589ed290b70530ad7fe1fa2897

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics-journal

MD5 be9bc0e879ab7ec27c6e269ac947f31f
SHA1 0db4d89e7da7fe1796c3d5a96e4347b128b5f796
SHA256 af5647cb2246ae93503d296ec27d7c1e05d216b4f6a55002d0aac72c14cc6b9f
SHA512 6ff51f89cf8f528d220a5387166c08c02fb0a5077ebe57ccecb223d64d3c1d96e7cc2eb696aeab378038d8f7e9f076e5f39183c1feeadea14aa00795e4511d6b

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics

MD5 901cf3dd517f817c547b5bab1e3b5323
SHA1 a14e164b7b54458084ab1fd76ca94ad23706bd2c
SHA256 eef39b67e109378827f0273a208a4c3bbac4786bc45dd2c80e5625d7741725e1
SHA512 33b6cc0915da1490fe4fa5ad10006d34e5fda4aaa22e060421e95445934f80c47f67a1910a9ff22a94153173d2462718e1ea720fbb1fa21274e0e86f5b86a4cb

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics-journal

MD5 06937985d63ff4de7acc6feb85d99836
SHA1 2a2c1dd6c5d6f9a914c49c5a86d34a89647125a5
SHA256 10fbb77e973fcb385b130e080f3cdaa8d9e8c55b9b2c00a658ccae2f16daa072
SHA512 d3d2b9cda33228aa9e2f17ffb3baa6bf25c3cd44ccdf9dc4611f5c796278c78be9c0527300ca92f09ef8e916aa44bf6bc9fc251dcb64961ee3348420556b428e

/data/user/0/com.hotbody.fitzero/databases/zhuge-journal

MD5 eb1d30e3be516d6b4b256f36a4a9b14c
SHA1 152d1439b4ed409cb41eb75ac90b6a20d49d8d5d
SHA256 f1e4bdc5f7a469f8ef35b6b34d5ea2be33d4265534084a925269588e51cbdae0
SHA512 5e236c17293d9639a20e4055893dfa70d4c81ec96349cf0682da453c5933c8576411e6f5b54240035ba7357ba6af786d7366fe829ecc9f60d3080d5c933b7949

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 a7a902c62c36c05cd7b028dd319d48e4
SHA1 fceb84d52a92c907ab4d47e2a7d8a15242f28b00
SHA256 129fc8ad97569b26b24b9948dd4cff53f6226018386a3d663874053fe0c9a43a
SHA512 447c32c7689cd76b8549af623b903930876f8cf2db81ae8b89a46578ff4d9cfe2b1aba12a8d3ef1ac83c71766df0e29930e438cfd18dc0c567e5df6b42faf894

/data/user/0/com.hotbody.fitzero/databases/zhuge

MD5 a9c045ede64b333632f66397014bc9d8
SHA1 afac71b5a9b76c1b5326cb3ce45d7b6dbb5acdd4
SHA256 827a5206388efa87d22aa23f8371e045c0e9b0856a3a6535038a81104338cc1f
SHA512 f4c060c3bcb02f617e129d1e9e89eac4673459cf7a26024855dc35c80546edca0844af2825afc2ae63eaa25fcd0f40c4cfe03e8a86977b807b50fda59c99655e

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 b317a07a767f1a3d1b74040fb96ed4a9
SHA1 cdb7a0934366082af8d08614293f21b60ebb2f39
SHA256 54198481f84e448e34ff146142fbb8b2fa012c6998ecf6d178d177dee699ef82
SHA512 31ad173707d486b75ba62c91291edf21c8165089189a20d58b37ce9d518c7adaa3bed2d3715db5f55e629561d7b54e4446b6c507d68fa1da264715069a29141d

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics-journal

MD5 9cff0730446e309df7b4f240aa3ffa81
SHA1 da9764e885d0c2ca59b8a72b47e4ed5d729a0371
SHA256 36fe8e7a99ee9e91a05e8078673bee251e44588063d268a0162a4f9b01b1eb61
SHA512 1976d8ff93129ab901f1d92ab1e949fd1fc83e0fcf7b599b4a5eab8418db086146aa16b0d3502edc09a5d0541717b97e7853bdfdc67f60419a1e951de8de1d5b

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 2a99b0fafbd536986771feb3c5477b81
SHA1 f6155c3b33b399b781d71abab1345281abd8fa07
SHA256 108a04c8671915b7eca15925252c3ac2bd5ab4a5c5792798f93ab7cd29bc4f16
SHA512 905a012781b524ca3d8eaf996d50b3f7b994fece2a0de99411fa0b7af87719978ccc125b48addb68bdb764b32cd9e12c641b1a8eec717bf41192dabe44ed1c92

/data/user/0/com.hotbody.fitzero/databases/zhuge-journal

MD5 185b38982f805bda40cae0aae3ee00db
SHA1 2d41fb9ae7daefc03519563cab70d31b2bc2d0a5
SHA256 411dfae623017977a6f8a5300e0b6ed51a89f2b620ea5232512410433faa9d88
SHA512 2990509bde425d5712bd4d42a26fc956d9cd4ea0d1ecbddb7a25ff3d73d56bde995f2286d7ebc8618d1c899781fe72b1baef572d65e643ef56949b6b0f47ac79

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics-journal

MD5 3c061c0c87cde35ee889afb6553bb9ec
SHA1 c59701e5a4e7ab0b6a3060f0be18c0dd3d9b6573
SHA256 a7de47d7d4ceeff4863f3a8a1afb934e17a23653bdc2e685676e6fa18b7f33f3
SHA512 8f794a533bd88929244531959eaa609127202aee9621536a49eb79e2aaa46b94f9139eabe5d673ba9cf2cd08547d64aad8d3c7528d4eb4b5c67ffe829eddef8a

/data/user/0/com.hotbody.fitzero/databases/zhuge-journal

MD5 3f46f5948dabc1c726413078fcc47c82
SHA1 b189168d8d3f9690424a7d03ae74a9eb1dc102e8
SHA256 f1769b96cfe9b90dba436c5d42b1d0094aacca4662701097391e66d4a3364681
SHA512 d1271713ceea479d65334549fda810cda24b499c4bfba8d112a5a21c29aa4ae24363c6a7e264da17fc0c35d3c258fa584cc02172b6ea9090e54cf352e969255c

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 3fafd2720d4838f1220cb69fa285362d
SHA1 0fbe9a8fb95823e19074d0b6d466b8bcea3fafab
SHA256 98961c9af621dd1ce81e161b33317aaf8a5d3004e8a8d720e445c808a6ee9760
SHA512 25d4697eb5ac099e59b5405806022401f8300af6309b7b06bdf584bf99e8b0e765cb06e9c3786177f16330dd36722a0113501197adecabfcd1791e9334e53397

/data/user/0/com.hotbody.fitzero/databases/zhuge-journal

MD5 fdc85df3111e81ff0803df3ab70ed4fb
SHA1 1cb1022279b424cfbd3e2c905274693969f0354b
SHA256 6d244072a9112bf1e6ffe947d30a2be4c0d287f14834af4f61aee99a62fb7f2a
SHA512 afe776906c0acf4c427592beef754aee7f51730a817fab6638c3026e65dd7cd53cf4d9898cd1e5f308026910a9105609892bad3ff01f2a08fca0246c5bbbb5b1

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 e4c9431f4293b05afa2178fb4bcd3458
SHA1 3a4581767f51bcfaedefc459aafb6d87a4a9f437
SHA256 f55cf092a10f249d678a16012cc8b367cb8dfb4a9dfd9fffcfdd2fb6e9f1876c
SHA512 9ebb622c943d34bc8f859946c561a5dcf245699bf80b6f681c71f4e687088274f53cd18efbcbfbde2a759037d3ff59de3e6421e2af5ccf3015f6ec4132e56455

/data/user/0/com.hotbody.fitzero/databases/bugly_db_-journal

MD5 934f42045b3118dd961c4d36d308a1c3
SHA1 ef3683ed6895a1bd48a800290e05e0e3ca46d9e8
SHA256 48a93809c19dff586bbc3b8ab910dc42e642d3983b40321f3b69e2155dc24e70
SHA512 c497ff347d7d1e89adde764d03acf2693a11c5a21ea3133b027681ef1a7f901ebe413ace8661751ff12d170ea2d527bb180d92bcbf1882849e24aa53dda6e246

/data/user/0/com.hotbody.fitzero/app_crashrecord/1004

MD5 9df3dce5140b98414900fbdc0ee73637
SHA1 bf74b6561a7035bbf2eca3a8edab39eb792a62ec
SHA256 0d7dca8f5f655a46cdf2ae07c7f7b5a88da82d3c15890acfcee797fbd5008280
SHA512 a1acfc547e28ba1bd3885a25fe9bd9dc56f6300b5a46a1fce95125336055ba03cdbff0261dbf1b1f9bc6d208836431466c5efe2ff4e2d9e185286e7fcc54c196

/data/user/0/com.hotbody.fitzero/databases/bugly_db_

MD5 ab8de0d97915521e8e535c9e85f5f6f5
SHA1 0085697a6f6c9c08f0d7cf5a64c990c4892d29ee
SHA256 0b014ec4f84ae34418902944a6ac6ad63dfaebcea00ec0cd44a9a11d7a33964d
SHA512 d42d00b1f763e7c71bc9334b70baf254904474ae6bc6e0891d9366ea721ecac05c9a0e9284f0cbe1f17b1fae289d6ec51b7662d28ebe47644a72b21da2ee7bb8

/data/user/0/com.hotbody.fitzero/databases/bugly_db_-journal

MD5 ded306a5fed4fa7abab9aff387096cd8
SHA1 13f445662ad46ebbee19130e30b7c0aacb379ed6
SHA256 2d8ed0e116debde053109147bef471bda39a78f53d794f88618938dfadef57bb
SHA512 974df6396d4aa73a19bc44facb90cb763433a84a0d46cfa285fa217927306d3c51a8a945cd11ab6557c5fa8c53196ffb578b1ed427c72c58fb797f94bea94de2

/data/user/0/com.hotbody.fitzero/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/com.hotbody.fitzero/databases/bugly_db_-journal

MD5 b6010ce3a58c662d9359269348a7ce9e
SHA1 e39a86b1023e9c1dde3491e077dc12cbd7ed2f63
SHA256 d83eaccc15572474b6bd949aec07c63b289013f7e9937a0e457af6a74c7bb70b
SHA512 8b1722ff61b7da9799a63fcd6676da1d458912599f9efa552d760450ba8ba98563f7a44c93700360a7d3a2e7d621584d23005757b36de7be20bb8d36c18a492c

/data/user/0/com.hotbody.fitzero/databases/bugly_db_-journal

MD5 f12ec5bdfbc7ce9a863740148e7a1f6d
SHA1 b1b1889f9c91b5a8e8951b1ab38e67a8ca6992f2
SHA256 42f1e37fe741129917da431bcaa4757820d5150f49d8109f0b837831dd2e861e
SHA512 decd625940ff986c5865b0bb7d3f677ee24d518853e47db89623802ac15e710a01211d1f0c74f513f94bfee9f3ef71b48292a33c9546a8582514049e038caf8f

/data/user/0/com.hotbody.fitzero/files/libsecuritysdkx-3.1.27.so.tmp

MD5 4b97df244d8027c60fee624355e1c59c
SHA1 565d81dccc3c53ad6ec3a63abcbd57b63beb4248
SHA256 e428013ebd9d991a22b459c4900e59856f713b09119c68d9d0a1428ed66ec44c
SHA512 b193a46ec6a0d2184b6bffeff2c5e01e86d0e9ec201ce8da9f3fdb716e9330f084e9dddf583282d4bfafac3e058619eb748dc891f52dd6f3750a5c5cec50e27b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 4b72201f2a7a8213d78d1479d2783fd2
SHA1 d28cd3809e81ad1fd4519d7af206b7245f55bd74
SHA256 7ea6cfca0cd11ed6f18d81f9ecca65aadec262db8a7784516a671f4b0e47fd2b
SHA512 3deba31153adffda7fa3202c55215fc33d25177840fc3037869520be2ef17cfe15f3ec6aeaf10dd1683756fd9d1eb31ef010a380e69687f814c3cfe4c92dbeef

/data/user/0/com.hotbody.fitzero/databases/mwsdk_analytics.db-journal

MD5 ac13cb203d0a3b19b094b861b87ca413
SHA1 9d89c779f41f0c7aadbd257407755a05a3ad0482
SHA256 e4eba19bb03b37c4df117ac2b1e10cd3f2f7cc017455847a91659c901c864cca
SHA512 ff48371060b4714fd99e3cbe81f219794eb0af7981021e31afc6a7f43ea8b0fe2882f6ffd26478bcedebe0d5d5f9017a69efa465f956c7249ce2e3115225b88d

/data/user/0/com.hotbody.fitzero/databases/mwsdk_analytics.db

MD5 e7391a6f60cb017c7f7af6d0f8998f55
SHA1 8aa49b18563ef9512105dabe37594600f5857aec
SHA256 75e19d19f15dba6725c0ce75316e468587085ebd5daa7fb456dcc15297824355
SHA512 5b082c695296bf5f4cefbbfed0403540a7af5d72864efde9fc4372b77102106940387022781604c3c259e30d44a5bb773c5c739b8690d1b6388dba0d12327479

/data/user/0/com.hotbody.fitzero/databases/mwsdk_analytics.db-journal

MD5 cd7015fa84833201660cbf37b0c8dd27
SHA1 3976872ae35237689a5376235a3cdeb293b7d0d5
SHA256 4e67d9c44290e536911f20b9b9c6638d9668d145c39c50bb6b9953aee049951b
SHA512 e8137401c0739785cef9b4f5ee2e30224b16f9d8e9a7cf12e99c9b5925ea03b465748541c3a8c5bcc6dd45c2fa9fb0f3e5024f9ca76d0c84666c882ecadf3d4f

/data/user/0/com.hotbody.fitzero/databases/mwsdk_analytics.db-journal

MD5 825af7d1283f9540a4c80c736c758f34
SHA1 ac2ce80c78c422d4e0feab6889e5f3d34e390730
SHA256 fd8d0d9a44963ab4e05fe249c01fb068484a332cf94f355b41a06b08552fcc57
SHA512 a2caddd02221ddfe5135b02dc30564d1758e1f6ef85c163f0752f2ccf127e1892a1e46cacd86f94daf7d4f9fa2a73ca54efcfcd75cb6af4cd40afd23c1f5bf26

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 e75f0d21ff3a17dc575d11ad936cc357
SHA1 5948c40f9aaa37aa380189bc2dfb8b1b8cec2c86
SHA256 915586e15e754a86c380850531b2b299f5d03f0d9d15d5d1d9868be65547bcc0
SHA512 6f038720bb76cbf75ea864469c61da5aac50e3aa1704b8effb5051fe4c8a392cce585ff87fbe64f433014403478fdd9fb1fcc461b9a7b67f3d59a26c14361b36

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 3a78b50f43555793d83f89f26eb1adcd
SHA1 5e80950d9fd1dcb89b0794f39ab532078c44f920
SHA256 a81b1ef5adfd8d35f06602bfcc8a6f00092a8f65eeec7aeab75b600081e92efc
SHA512 792c8dab78b2230a4a083fd45391bd976c928f56666e44023282698144edd1c34b87ca7352a8f92d3ca1d17abf5715e326f801a82ff7ab3cf0f9589979a122e3

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 f5e483499f49a98eefb243422e4706fe
SHA1 7be51db4a8e9918bb61cca2f651356e7c2599186
SHA256 efcadd9a7e5f2afacddbc3ffde2ce60ab1cbc9f1884db9abea01631a28549fe4
SHA512 8091a71c1d6bdddcfb0687692f713539138fba0b155e3006eb31c0714787819ed820ef9585cb3517b30fbfb4bfb7c9b766059ff7d866f415a5d4c9fd5ef0b410

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 db2f3dd727126993409d1c28f982776c
SHA1 f826c5821eab2229313a35e285185c2b02e5a96f
SHA256 2e120d801d1e9dce0b24211167044a3a396876477e5eeaa9f5d533f9cd2cf1b4
SHA512 db4fc79517da564542838c1efdde48e6a59d965aa89db7a8a43f6762f971d7a6a035a2717b2c13166990a5ebc8bd026c2adb81064bc9398ae75acd05900f63e8

/data/data/com.hotbody.fitzero/databases/.ua/ua.db-journal

MD5 e38fb6f8ab892bcada23ed7ff8b91288
SHA1 6685ba763aa20f3a1f6c3866149884d61702cb5e
SHA256 a45a49cf8a35b64fa30b547bc8834dbef36bfc2725579da320383f35f8fee670
SHA512 d005551a4d993bbb7425635dca2435143a13425e071f71e1f7ae18601efe7f75a14e58478334d56710bfa302e413c6e5f8ba61ddb7cf4298a947ba3fb3809107

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 a34d8c879cd736d572ec8b6f589a910b
SHA1 7671de7b686c0d486673e62ab0879a567e97c356
SHA256 af9552198dfaeb4e5b68bd6d5ce092d7178381afab0e39966c2e29d52be932da
SHA512 5d3e41a053b1f23b4df0090b164efc225e3043c1908a1c583cb8272c045a9bc10b083562c83074b961c340b0d5b95492560b14b1fb540d9d1bf2f305fe6c3266

/data/user/0/com.hotbody.fitzero/files/umeng_it.cache

MD5 9396b9ec4e41bdf0cefc6360dd07fad7
SHA1 356dddbee27c45d0f5862a15e701a892141e95e5
SHA256 c146d461b1d228b8bf2275847229458578219fe3b692ec6cc1dd75e726cb7a53
SHA512 81718a01622798ce181a08e7f2ec4129559af3ceba8df7fa0bf3d2f8c4574327e284b9dced55d69ad0d3fbfe3e12b10db7e717bb8a42c78d4a38bf658f699343

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics-journal

MD5 8e3e872faeb410214dbaa9e139cebde3
SHA1 3e5dc2ec6873f049002e7afd65ef4b1deff218bc
SHA256 c4b7f79efc77cb15cbec954e656bfce7fb1fe5d17625ea61e9df1e7226ee6e8d
SHA512 9b6ff9e7bbe17814f7d874a557fba43613d1d2524b0dc655e97f9521e196cff9034e7a79f84cdafcdef474eb9ade9b9124a6dd0d9bf159785532f3acd48cb1a1

/data/user/0/com.hotbody.fitzero/files/.umeng/exchangeIdentity.json

MD5 2445cdaba7299c6a7f0b7d9d93159098
SHA1 6444f6e50f96a001e4a9b37e31fe13643bae3f31
SHA256 922aa36ab2b9e6b28aca0f6356b1ee9fd37877581ed904be4202332561eaaeed
SHA512 29e804e73dca749be6e831d96e6251995eefd962fe2f2fba4d3967c37a0cab36ae8cf2b816bcdac2fdade839da511bcfd03530d06cad216d48f25762c9f5e121

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 e2915ac140aed1533e3be21be4c00ab8
SHA1 51476d6fbe7c7d7c7d6f792cbb57e4f0cf85b7b7
SHA256 dfe44157149d9a3f141f853dbec70f496bc0da81659a6d86515515b45b6ae6ce
SHA512 934d72174ba7962cd217adec4fe35f9da63e93497d6777b91ec011f3e0731f23793b15f09d278573dab382c655e265ea7d9738e0601937f578ddc903424f8301

/data/user/0/com.hotbody.fitzero/files/exid.dat

MD5 2bca06ac2e63226a4c9c7b462067fdf2
SHA1 031c96208f923226309514007385f6d0a9a90f66
SHA256 16a8ba945dc4769decf0edf26d063bb6111d40c97572a7c2a6960e8de7ab09c1
SHA512 682a6baf74fbfd3984af30668fdf5b22284ecf471806cb7ae70abd2ece27378f53d0ba000efd61cec9574d3af285dbf6a5fdf2f101f036bf1cd5975f20a2f982

/data/user/0/com.hotbody.fitzero/databases/hmt_analytics

MD5 b406f515f29094d165b27e236af5afd9
SHA1 0194d229902cda3587b4d3550b20d9e85efb1596
SHA256 fbf5b5c0cba517e03ff9ae9a7c24e144af3512e3cd564011f8f61f12d76b5ca5
SHA512 07dfb5217cda5ee8465d73cb76d0cd727f48148a931667f176d8b39f3d7f81b18fd37eb792d4712c069619017d94678e0198c5be115dc56b64582a8d613cf134

/data/data/com.hotbody.fitzero/databases/.ua/ua.db

MD5 36d7728dcd45b611ac3454ea90991343
SHA1 02f38b8ddb7d8f9a460bab76192c8620e1a9d76f
SHA256 949c594ac28e39bd7c1592cb87625acdf8672a415da1728e79280ad0cb6c4b33
SHA512 1231fe3a8ef026aa7080fb9739c1c92618fd3915b8ca63a47df890ce25f5dd9367d3b82bf8970d695c5d13e3771cdd1bf2fc27903c0e8565d70d354e38bc986f

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 0ac31cc94aeee79e34634bc143b1fbb6
SHA1 f781c1d976ee7358285d0953b9db0e44caa36f7a
SHA256 f6c5160434a16518c7f83cce573a0c15a1e031b197c66d0735674fe266a7a584
SHA512 5cd1b521e7dd774430b0f3d3201ff062f1d64cdad5b030e075a321fa7ff9496ffeea974af671ab1f838759528c10709f275d2653ecaca7cded8a1654109b2c09

/data/data/com.hotbody.fitzero/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 87dd3d23b8df38f291bda554e2e89ded
SHA1 571ad55b4dd6e891bf328a27b518cd010a8426d8
SHA256 8eac71b9a98a846580692abaa2293b7fb1a9d7a298ca9bc2560526d136af7632
SHA512 b3e5343829b82e7c665db391cc1aa9b1b50dd58722c70c8c98f79ee74375ce1e901833bd3beac4de1f6c26590396adc952d65688945f183456fc5e2c8e945c8f

/data/data/com.hotbody.fitzero/databases/cc/cc.db-journal

MD5 458474cefe9f03012c530ab33ca50bcb
SHA1 c493ad4e41e47acf8c88ba339e033a3c7c74cc06
SHA256 bbceea1a8451d27f3e4f7573676b364b69e699034ea025c91b2025a32fa38348
SHA512 f0564eb23c166c837915f319f440b26793ed6879d67ebf17347383274a38c4d497341ee461cea917ef9dca3d8a6de5d2190d760e95f78aac1a09a2c801758cdd

/data/user/0/com.hotbody.fitzero/files/.imprint

MD5 f2ef84ce329dff552a4ea1fe64ad6cfa
SHA1 bf5e22e67eae407f9796cb3dbfeff12376367431
SHA256 bf3c085a1228b0032a6a3190a0b703f4fdce89707976c7a75acbdc2da1f7ea50
SHA512 263779fed3f6afde91cb0b96d49b98510c086e04619082c50174ee641a30bb83fcaf47a7663fa8fb98f4e9b92b09bb7bf2dee11dfffc9259f6520904008b982e

/data/user/0/com.hotbody.fitzero/files/umeng_it.cache

MD5 e87670eac4c7cfe4575b62abc3939703
SHA1 53d22b57bd22d762970394da58d9044db742abbc
SHA256 4fb7eb010424d1c1e5bb958f8ac7709fff13335068e7537ec2e570bacd0e6107
SHA512 2d8d88cd12ca13ffaf2cd50759ec5e3500ea766a8823612ff766d8b0e598050c45261fe1a8db0993dec89b9f40503556fc99b9368fb7c02d00adf346b88c1ba0

/data/user/0/com.hotbody.fitzero/databases/mwsdk_analytics.db-journal

MD5 8bd186ccbb27d9bd02667172c66a2fd9
SHA1 42d93c3cff33e92b225eb78453b921a95dcbcb9f
SHA256 d8f4830b9dfeb913a8ebf7f89fa02877187a6bf563db585899924e22a071b8e9
SHA512 74eb250ad1c43c1803497ea23f7c1bf9da0dca953cbce2704be6cdfe084aca6a3bf19cd9aeae251382e1af2abb5da0f8aba74a6d729eac1859156a5e70ac21d8

/data/user/0/com.hotbody.fitzero/databases/zhuge-journal

MD5 990061bacf1abf004a855e68ac2f526f
SHA1 1589c819ff7fd48ec7e9aef9c1c67aedeee3e618
SHA256 e4dfa09c6fa113955361320fd3ac19e219b26e335d7ae490854a45f3a6b88f29
SHA512 6e67f50c3932f86d05a7574b0ed9439ffa7952ff0f20d4c8eead967531285758523d06152539736c3c5c95bc196ab2235c92f904a9c9dc40111a9a7588278493

/data/user/0/com.hotbody.fitzero/databases/zhuge

MD5 1be037157564e921cadcd638fc20bff0
SHA1 5b118f3ad6d9052197930023be08030e49d23557
SHA256 5afbe9156146c5464bac313fbe9ea6b2bcd104f97a3298dccdcc1314581e8f1c
SHA512 bfd37722582d761feadf482dccffe421b3040d51d4f464fb89bf77c41ae9aacb1c7b5b94cf3e60c91f24f5358c1713a9e07122812c70c09584ae755416aa1967