Malware Analysis Report

2025-01-19 08:03

Sample ID 240610-tk1d1asere
Target 9b4112706700608c8a71e7199c92086a_JaffaCakes118
SHA256 168811999813d9172eaa71965efeeb0cc47c3ca7e8d50fff8e67eb87859f3d38
Tags
banker discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

168811999813d9172eaa71965efeeb0cc47c3ca7e8d50fff8e67eb87859f3d38

Threat Level: Shows suspicious behavior

The file 9b4112706700608c8a71e7199c92086a_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker discovery impact persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 16:07

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 16:07

Reported

2024-06-10 16:11

Platform

android-x86-arm-20240603-en

Max time kernel

179s

Max time network

174s

Command Line

jp.app.syowasyokudohh

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

jp.app.syowasyokudohh

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stat.gw.youmi.net udp
US 1.1.1.1:53 aow.dmaow.com udp
US 50.2.245.44:80 aow.dmaow.com tcp
US 1.1.1.1:53 sdk.mofang.com udp
US 1.1.1.1:53 a.dianjoy.com udp
CN 42.121.118.238:80 sdk.mofang.com tcp
HK 101.33.32.95:80 a.dianjoy.com tcp
US 1.1.1.1:53 t.youmi.net udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
US 1.1.1.1:53 oc.gw.youmi.net udp
US 1.1.1.1:53 track.dmp.youmi.net udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
GB 172.217.169.74:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.169.42:443 semanticlocation-pa.googleapis.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp
GB 172.217.169.74:443 semanticlocation-pa.googleapis.com tcp

Files

/data/data/jp.app.syowasyokudohh/files/umeng_it.cache

MD5 3a50eaf17a760b4ebf76229c7e0cd0c8
SHA1 6f95bd03e9500a081a3a3d8f604dfa4960cf04a0
SHA256 21e8bd8cd4ed067bee7086833934b9ba9949051b546eeb3ab159d811e633aa7b
SHA512 2b7e9a5174386a67d1c3f8d80333d6bba26030014872183d3911fc6f82edc2bf37ca9b4235be62042d6cc76d7f3ea7ee1e9904a7dfc5a0111d8a79cb5a6fb82e

/data/data/jp.app.syowasyokudohh/databases/wsUL1uCdKvjD-journal

MD5 3ceb26c27d9e4624778afc6f03cab5f6
SHA1 c023e4ea0971610065e11e58fe5f40ca8986872a
SHA256 eeb91f942cd4854c433f7cc7f55983c65d55eb524022d0b36df4c07f1c0c1b15
SHA512 4bd0fdf6dd95b1da53dfb7f0780eb4d99c38ac273c0ccf1f230853741f13d270a493ce53f1406f2c9a066e4828ec0db3da31572bc84502eb72368421cbfb80cf

/data/data/jp.app.syowasyokudohh/databases/wsUL1uCdKvjD

MD5 59413190ea19211285b5c0fed44c19c8
SHA1 ee67b7590047c3c17309f6e6eed48556aabe4c92
SHA256 3511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d
SHA512 6a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e

/data/data/jp.app.syowasyokudohh/databases/wsUL1uCdKvjD-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/storage/emulated/0/Android/data/.dataycache/i42d45df023jnkdd93la483f9xGFKXI

MD5 3c33e392d0bcb15294b1ad95f8c63ebb
SHA1 c421f448ddb928f9dc78f160cfb642b12cca03dd
SHA256 ec795dcf5ce8a6cbccc2078f0a90725cc74b4aaabca0a9535e99d752235d0e81
SHA512 1790a4d4303d805dfa8a6a3a5eaace03abe0cee255fc62b603c283901e46fedb36bc3fe466fb34f0cb181d4221043133a061e498b8c433513f315791e51d121e

/data/data/jp.app.syowasyokudohh/databases/wsUL1uCdKvjD-wal

MD5 610d87ed87ad3f1a28fe5693aef8d9bd
SHA1 e0b77a1c1b67b3f8b11d811081653235f0a3fca6
SHA256 cec03f93d38c593f4fa497791fa1062a5aaae1146f0f595d35ba94584bec1897
SHA512 8711ac461096962fa0f9e1c2b088a65068c93f7aa967312195a7230cbb3b398e4e3aefc87e2877817a4a249a08c692ed84edf1f898f3460b9ea7a1df4a2afb3f

/storage/emulated/0/Android/data/.dataycache/s92TjjdfoP2n3o9dfji2l9s1olkjf0p

MD5 95058d3fa3076e4fdbc058e18d566e0d
SHA1 f6082f93a9c0ce4565c1228e61099d1b3b4f1c6b
SHA256 a079ab1b81730bd46de6049424ff404e37db84d47c48c5dae619911c9647f299
SHA512 2bee197091f0e83989094b48f1fbcda3d9af8f9f5bdeb2716f3d659f99e97167e3863d1cd2e4b5e1537b866860ba016f4d7f9005e03e3f2d0c1dc3b2a0b264bf

/data/data/jp.app.syowasyokudohh/databases/jqIqJYOT3JpT-journal

MD5 261fd0e5ad01efa0b0e2db58d516f86b
SHA1 971f80bc07b4411a8621853cc524d75c38491e9f
SHA256 3b2aa3d37cbc3a4750738051e33d0153686e4ecb0d6d5996cb45dc0290604fb8
SHA512 09f09e2f3d1b8254a973e3880593b80987714d4e35dbec1e7762774e008f6a8a9682e4c3d353e781fd1433fc9be8e013eb5efbc2d768606fc2ce20cd9a4e97ef

/data/data/jp.app.syowasyokudohh/databases/jqIqJYOT3JpT

MD5 9c37108c041a67252d4fb5059436eb9f
SHA1 f65bdd652f9b2a098993d2aca0be2578e8eed20a
SHA256 f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55
SHA512 d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548

/data/data/jp.app.syowasyokudohh/databases/jqIqJYOT3JpT-wal

MD5 ce7ff49df7fa889b6a93bcc9bb0e33f6
SHA1 53b3fd51ab9dbcc3864c77f4f422ff907d546e86
SHA256 bcb417fe5e0ccf5eca401cc98b43f70ea02d2604c71384bcb389ac018577c540
SHA512 e6904cfe3fce945835796f66a11a67ba8db71af4aa39c5d1bca313b280ef98d921063b79a1858ba84603a986c92b5b9a24fe8943e61438b361bd2cd5cc9f2c50

/storage/emulated/0/Android/data/.dataycache/m929bb76e8110d1a70260af57b446ebc

MD5 b59f7f521008e55e9592aafa4ce3ae36
SHA1 3696a3e25428639f58fdca352138b57cd796589d
SHA256 00dae9faab5a999144141684ab00fe0d34136bf967b8be2573ef1027e6f3bc72
SHA512 aaf6505afd366e58af9e9e9811e67f7784e7d1258e962d81b9e83bd8e8b507bd840644364f34bfd2a21537efc71c8d00e460810ef73ffe6c258e7f83498e5bb4

/data/data/jp.app.syowasyokudohh/databases/T1oX0rhhuXWt-journal

MD5 f7decdb78b7b2f50d96c50979b1e6d18
SHA1 6ac3c70328ca6fe3b2554e5a427070829558b0e6
SHA256 285da083caa10f9c6af8171877a2f18e2a64cd7687cb417f17498486bc074fc1
SHA512 bc7d7b64fc42c2df0b25ea3057c782a866e79a01f6082c845e0ca03e0dde111a7ae9dcdedf20282e01407b959d7f8e0f432702ed24913174930aef3be0b9b907

/data/data/jp.app.syowasyokudohh/databases/T1oX0rhhuXWt-wal

MD5 b66bbba85fc7c5662fb8b389bb5176c0
SHA1 50e089948e690775de2e25cae9b70f373f3657e5
SHA256 2f0d921c7bb9995255cab390326ccb914cf832c3d51790a1b7a032a698df8ee9
SHA512 ebf9b1f077973d1aa23c2b2db2f6b125c70403ef4f053f1f1b396f36e388c320f09a55633705bf691a891514d9b404ae15a9b17f0559f53691d4f22df5aed4dc

/data/data/jp.app.syowasyokudohh/databases/P15pKIjsm64m-journal

MD5 2269511d01b7f80e0a364909e70816b9
SHA1 faaeb333ac0c85c22078dabf7a1e3cea420f49fd
SHA256 f6c2e1a27b5a09b6345fd80217985688b621f59412f842e0387c69c9ef88e245
SHA512 c9c0ffa58bdf49848254325aec0b3315ddcf8d8d9c2a83e5cd243abe0d9184a1465845dab72c4041e26c8cf541f60eee918aaba7f79af8204f3004abcab4eca3

/data/data/jp.app.syowasyokudohh/databases/e39786e5bf09b744a8e9981310830e35-journal

MD5 4fdd2c688775a9565e685eae6ae83100
SHA1 01d1bc01996eeca62929f4842c8d599baa0eec4e
SHA256 390ab9d0c376d7a0d14a7a751f8efee02e91a5132c0c36d2a43959071d761c43
SHA512 8b346c7168527d83780bb37d87cac0d794849234ba40cba4c0f08fed065cb23849ba18481c416ec5dfc87663bf4ba150577707c4c51e0677c9b690adc3b6321f

/data/data/jp.app.syowasyokudohh/databases/e39786e5bf09b744a8e9981310830e35

MD5 4bfa314d6b151570c9f90e87ffa41ac4
SHA1 170294d4982e69ae6c72cd405fdc1f96b155ce4c
SHA256 4a8f9b899d6fc77a3a948f17cfd86a1a58171569578a7bbe4430267fcf7bf2b8
SHA512 ff2df162eb60b3c2aa32ed3d58092e192b3f6bea4c14705d226a2e5a5d3ac93dc428e26d0f28d2b75509b1b34f6439ba79ada49523b4d8a4866f79b518376e7b

/data/data/jp.app.syowasyokudohh/databases/P15pKIjsm64m

MD5 032abd6bc70ad7c9484f10a7daf57bc7
SHA1 12e3c03375192814883d5fd1671e2b0c64b0ae43
SHA256 9cc41eaf3228c605583528005cadbf69eb145da3943e09e3732677423dcbe976
SHA512 aa28b2d8e87dd6364e15b1c99c52758f937585c126cda7db38cd2b4e5fb3c3e5775a92cd1d5ae68b03a6c59e7473766d670f03e3ee30e8ee53c2bba1b73f243f

/data/data/jp.app.syowasyokudohh/databases/e39786e5bf09b744a8e9981310830e35-wal

MD5 e17ae5c4a283f8b63a239ad9ad0e3d94
SHA1 d578da58548a607b7e62539ce943f973d2c95993
SHA256 8e3f2699e0233778ee04c9724746674872cfac25d1dba3cbe63a1b398a4987d2
SHA512 ddb5daa43f4a5b03cf35093faaa1047b9b76486fd7e1f9ea07910f9df8b681284bb96b4d310506500dfb046cbf2798b98956f5a65a13f7d7ed712209c255e735

/storage/emulated/0/.system/system.bat

MD5 11846eb8bd99035d933c879e7980d2ab
SHA1 475c748679e548d2a04a45bfcd339b550ce0f907
SHA256 976324126bbe9d330d08e994c13e8fffb4961344101b03ed91d29a1209be5631
SHA512 4604be3b1ad50924f3fea5e7760cba3c34bd538c3e2383d1db5cebe2ee216fbb175dcd841e870a40e3aed4de9acceb1d851a20604a3f4207074c816b6f9d182d

/data/data/jp.app.syowasyokudohh/databases/P15pKIjsm64m-wal

MD5 26546b53b3579b4be38a76af6297f076
SHA1 3cd54a6cb6b169a5c1338a8c43eb77aa25c66658
SHA256 5ef761ca789d2f827dfa5863b8898f82ad9d70687ead21f5307f53c75ef62912
SHA512 6ab824b23d19d75dc525d3e395e1cf5129326810d57620c24c063040d080169bdf4e46ce6d1a32840634575c974b46bbff9ef9aac89bb2024ee95f2a541d3b22

/data/data/jp.app.syowasyokudohh/databases/XKwVoK0huy3R-journal

MD5 158ba07b7e9c408fb4e37e5e507a1ec2
SHA1 01bb3ae5c9f4d6ea9dcfbb680ab4b0d244a76ae5
SHA256 534e094c6e12f328fb85aea6bfedb0fb8e64f555174cbf0c2294bfeae055b98d
SHA512 daebeef6962695116dec4adf5e03608df391b19a71daab6724c47b0c87aeac2bd006239e382f157ab0a42d3cba513ffe9fd157cdc065059953578f2f61047a1f

/data/data/jp.app.syowasyokudohh/databases/XKwVoK0huy3R-wal

MD5 0134c4140c048f3004ae482fa09b7f21
SHA1 ad69ed517f5e643a02b9082799eb5ee9862a4557
SHA256 c549768c85d89ea3f91a74aba1f3acdad3e41e0f4fb445eb5093421f17024081
SHA512 f466eb89c4c9aa3b104db894c85c34adfcc408591f1a76b116ad42f8fe9af931fb498a0263cefa06bb9b02034d46fc34fc624504338fc98f8206cb6e2b94a8fa

/data/data/jp.app.syowasyokudohh/databases/e39786e5bf09b744a8e9981310830e35-wal

MD5 d41880d18cdc4f326e1933cea9def2c5
SHA1 b713269ffc2da4b99050abc6e37e2fa1cc825b29
SHA256 1255830d1ff7159479c0f87b530c886d8a1d4e73bd1028fa1d85b42a8040c974
SHA512 d5709fcb5811073187958a01ab61e34e335500e44899d65cfd5506f94041ce2176cfafb0615d50f97bf04e6efa67e81ff5394f5642e02f8a7ef559ba37f904d9

/data/data/jp.app.syowasyokudohh/databases/e39786e5bf09b744a8e9981310830e35

MD5 72717a6217dfde225c6c18f557f71679
SHA1 24423f2c79426afc054481492163eb30294e609a
SHA256 e10bde0facacce8f20e8e00f5cb15a0d309c4af8a37c0024086881d171200f37
SHA512 84663342ab33a046f5ae05a65541bf0cee8558125bb6e8002236eb0fcec0917a2510c05624b935e010cfdd97e0c49c4f55e8f82325f6c830e7a06add35fcb824

/data/data/jp.app.syowasyokudohh/databases/faabfef12442aad292f2afb4d9c0b64a-journal

MD5 29820edffea88f21730fa9e16ee808cc
SHA1 5f7e759b04d9b8f20a68923a1578c01d5d27e3ec
SHA256 2d4fd5232b9bcb7c0b5bd0b0ab42d1ed6211764ae52f1cc227a84dffcaf4a1b1
SHA512 99f5b0f96fec44159d4973baddd7f38ae8ebd5619815ec2bbe3b4f6fb6bebab802d48f4aceac9e93abd9e3f43b27f642b9d16ed3b1e34cb3213a550d76f69262

/data/data/jp.app.syowasyokudohh/databases/faabfef12442aad292f2afb4d9c0b64a

MD5 beb4c508a4df2830da2f2d544b1d99b1
SHA1 b6f9823ddf70312bafc612a5debc20bf57775939
SHA256 c74dbd035038d20c8754ad9961c80257b13c996f2026427bd5054ee136d6677e
SHA512 f17424c47e58564131bed815f8943f928b10b7b44d418e085d7bc418adb5f6402570e09d6768ebff654cff8700672949da6d32d64f019acc91b869db62e49de4

/data/data/jp.app.syowasyokudohh/databases/faabfef12442aad292f2afb4d9c0b64a-wal

MD5 4407c59a1c404b05522145cbd6fb1b04
SHA1 1e4b2d94ff25797355bca4c46bf331eeb6595cb4
SHA256 bc953fc1a19e08d86b981703efe8ebb30f6d9f7c39e80586765a71ecc722e983
SHA512 f922b34e1e63166cb7886479f68e0a628b7023a5f7de28934e27848fc4cfd661b7cdd581180a59bd5177029fc04a1500ddc4a850f50db55151b422caaa75234c

/data/data/jp.app.syowasyokudohh/databases/wIU6pTyUBYWX-journal

MD5 ece237fe2a426a3c86f8fd1f42f5dba8
SHA1 926069bbe9dd23495dbe9ef726349d67842ab471
SHA256 e9a7a248a401e80253801ddd8c744469faf4dbfd24a3d923c5c24bddd62f703b
SHA512 183ebf5c11ddfc1c01af318976353d7f76445cdbd92deaeec59494f71a60e635221c9c94c37725343c3e7e71e96ea1529a26507a2d73ab3f34ea7f32264530cc

/data/data/jp.app.syowasyokudohh/databases/wIU6pTyUBYWX

MD5 3f46387c5a9161a06c35918e4715e9e4
SHA1 f03b4527b29495a3f50be85d6afba301e9e3f1c1
SHA256 687a930724a6054924254f945ae475e34ae87ebdc2054881c34317cd91d46ca9
SHA512 614fa11f57f1ddc2750185eb908a580f1ae1ea53d4f4ff6881610942a36554b918138af7103859821d90cef12ea68bcab1ca0e4548cc5a78ee7a3c658b37f3ef

/data/data/jp.app.syowasyokudohh/databases/wIU6pTyUBYWX-wal

MD5 f6bc6f3eeec603ff54bbeba4379798c6
SHA1 042ad968f3742668918b67b847b7c18dfe60b142
SHA256 3c75b65ee604d3eb324a2be33be9f6a0edc3a3395024582bcac4a3fcd5fe396c
SHA512 e53ee0d9f3621fe71174def6a771e6ea33e9094ee25b3432032c9a42029c41e7fcd1d4c7948b71695d598498d92ee610c36038602eb38040ab9ee65270beeb35

/data/data/jp.app.syowasyokudohh/databases/jqIqJYOT3JpT-wal

MD5 fadac760b4f8e66a68510df0d2dfba6d
SHA1 f41a551750e625d9e09356bf9cad03fac2a43d87
SHA256 7043c9987e3702aba7f1df1585b67aabad4c724f4c0d8f29a8b97db6220c1341
SHA512 01f611a6cec1ab43687eeeae6bc52c41085bef6bf88eb747142c41adcbe46dc25b45426ee88da2e72e39925c6a46d4759be44db0988e6fee6502c05881dbc269

/data/data/jp.app.syowasyokudohh/databases/jqIqJYOT3JpT

MD5 7e9f683baf3a30c310500c5631acbff5
SHA1 83cd03d422149a4bd835e3fc7332d1c505490465
SHA256 d70b0e0276f3a0cd91ca1507cf2810495adaba8811da63911ee3f45428d6cd80
SHA512 284e2c41dad8ff45405a5b654c11f13f37c01861a8bb7b6f03f67c2fbafea83c584e54465d291d11e4f6989effe98cc311ed91b7b5520592ce32f77f99cf327d

/data/data/jp.app.syowasyokudohh/databases/d6798fe6554d29e9c1c70245733e37d2-journal

MD5 dc2994d5d381e26d4ae60963c68aa110
SHA1 f1b811f4488ada16239b7f72867003150957c592
SHA256 e4cafb01335f367fccc2a0865d85727bd9dbe2976a5189f123c6f331222a0e0b
SHA512 9b28793d843b1a47018c624f0389d2976aa7e27bc10c272bad45fc77e1a9e2a0b313975c360f7c277819dda7e1f6df56b1bd2ee7b7b78ba0a22d1a812988a807

/data/data/jp.app.syowasyokudohh/databases/d6798fe6554d29e9c1c70245733e37d2

MD5 9c35f685b402f750b3335dd59905364c
SHA1 b6720b7b836d3621e4966cccdcef26c56c75d3b7
SHA256 f08968e696f9c4005b6cfed615b9a86acb4a31059a4b785ba014f1f3d5b1b7ba
SHA512 daba504a3394a9e1c6c9326bab92bbf494ca90b444e703aed5fa1c643b3993b987c10c64d397bacfa373e25efbb587e617a30e79a5ade3d13fedbb01b732ef35

/data/data/jp.app.syowasyokudohh/databases/d6798fe6554d29e9c1c70245733e37d2-wal

MD5 84adc732b40a0d175d4906271b15a181
SHA1 97f88ed38f9a84742263c85119056b18350e2fd8
SHA256 72b1839b189f640c5fd6d5ee593de511a8d44e13008b99183ee55db8f9ec4c04
SHA512 4fa0c35799a5935fc11932b8ba596d3637a7a600adec4ac9455a335306877d25e9e5c47f0ca394274355e99eadc0cfb02671bdf95c57933fc76103133b4e5cd7

/data/data/jp.app.syowasyokudohh/files/userinfo.plist

MD5 f97798ee0d4f7e402df3c3faf74250da
SHA1 9d58e6d2a9869b5cd6f73dedccc7759abf67aff2
SHA256 f589acfd4ab2e953b8eef1869f097de9aa3951f9c524091880b68a870f838c8a
SHA512 946df8a537b2539798956fd4c596f8b26dd36ecf3608db4f47e41e83142a0af12bbdc5c61ea1ddbed3a9fc32a84935641b67d434913820ed4d2d7d6cd62ea07a

/data/data/jp.app.syowasyokudohh/files/mobclick_agent_sealed_jp.app.syowasyokudohh

MD5 d89b5ad9ba013b8f05e4f4729b8f020d
SHA1 90b72088c0ce340e2b5970cb5c8aab862ccf3edd
SHA256 09b071d5cdd0bcf73636138a1f84d0d62a1047b41353c690e2f379ad5ec7a47a
SHA512 5c5aa0b481590d222e1376324f7e5ca026de0cf17af9c7f1faa63c13300203ede0306381decdceb9adacbf65e2cf3c0f6b76827c7a8dea434a40c286af5af56a