67f44030f3cf48c748ec971c0b69e39f74cf9e1a6f8811dc67e5bd96795aba71

Analysis

max time kernel
178s
max time network
187s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
10/06/2024, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9b4aad42335cab7a51c975ac94ff3d7b_JaffaCakes118.apk
Size 31.1MB
Sample240610-ttxdpstcmp
SHA256 67f44030f3cf48c748ec971c0b69e39f74cf9e1a6f8811dc67e5bd96795aba71
MD5 9b4aad42335cab7a51c975ac94ff3d7b
SHA1 b4667b14c87f67c32c866c00c960a4668921fa6d
SHA512 4d3b15f308be2bb5207a97eb3c1344f7da57ca412534b9608d4231a02752b2e1c89f75708abe8bd02ebec6d053889548c2110514ef688cbcff11fab191a05625
SSDEEP 786432:SGIj9BtQQ+8JPb6l/Qskvlla2yIPiU3zlZ+9t:SXBvQb8lY/XsDVzz6
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.juzifenqi.app
/data/local/su	com.juzifenqi.app
/system/xbin/su	com.juzifenqi.app
/system/bin/su	com.juzifenqi.app
/system/app/Superuser.apk	com.juzifenqi.app
/system/app/Superuser.apk	com.juzifenqi.app:pushcore
/sbin/su	com.juzifenqi.app
/data/local/xbin/su	com.juzifenqi.app

Checks Android system properties for emulator presence. 1 TTPs 4 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.juzifenqi.app
Accessed system property	key: ro.product.name	com.juzifenqi.app
Accessed system property	key: ro.product.device	com.juzifenqi.app
Accessed system property	key: ro.hardware	com.juzifenqi.app

Checks known Qemu files. 1 TTPs 3 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/system/bin/qemu-props	com.juzifenqi.app
/system/lib/libc_malloc_debug_qemu.so	com.juzifenqi.app
/sys/qemu_trace	com.juzifenqi.app

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.juzifenqi.app
/dev/qemu_pipe	com.juzifenqi.app

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex	4592	com.juzifenqi.app
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex	4592	com.juzifenqi.app
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex	4592	com.juzifenqi.app
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex	4654	com.juzifenqi.app:pushcore
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex	4654	com.juzifenqi.app:pushcore
/data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex	4654	com.juzifenqi.app:pushcore

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.juzifenqi.app

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.juzifenqi.app
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.juzifenqi.app:pushcore

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.juzifenqi.app:pushcore
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.juzifenqi.app

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 1 TTPs 4 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.juzifenqi.app
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.juzifenqi.app:pushcore
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.juzifenqi.app
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.juzifenqi.app:pushcore

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
117	s.appjiagu.com

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.juzifenqi.app
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.juzifenqi.app:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.juzifenqi.app
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.juzifenqi.app:pushcore

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.juzifenqi.app

Reads device software version 1 TTPs 1 IoCs

Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).

discovery

System Information Discovery

T1426

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getDeviceSoftwareVersionForSlot	com.juzifenqi.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.juzifenqi.app

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.juzifenqi.app
Framework API call	javax.crypto.Cipher.doFinal	com.juzifenqi.app:pushcore

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.juzifenqi.app

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.juzifenqi.app:pushcore
File opened for read	/proc/meminfo	com.juzifenqi.app

com.juzifenqi.app
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Reads device software version
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4592

com.juzifenqi.app:pushcore
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4654

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

.jg.ac

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.ac
Size 8KB
SHA256 68d675ed725ec09a47a255f38d4f860791919d5390dedddaf61fb01f22df0534
MD5 379f9d33e47f8f55509f12e677d5d444
SHA1 94dd4527d6af8e0167ea91c4c4637f66dab7d6b1
SHA512 c33480fa6dc4fd41ed85d7a5a48320b87174a6ef6d20f52a0474fe83330fe24725ac70e32d822d7e1a05e3fb0f876a38a8bb7c5a07a60949f2e086042ca507e0
SSDEEP 12:7+tBjWqLUVR1Ec6KwBUdTB1RayMp4ouNBKRmBEyPbW:7+tBjWqL6KnKwm/mpLwBpGSW
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.ac
Size 40B
SHA256 f76863e96bb3f9b5ab4dfcc073e4ee922719bfd10ce0695af6a1f57600174805
MD5 90d37da02de8060d561eba13c3d447be
SHA1 67363798e5472dce856995e7c2340a46dd4e706e
SHA512 151915d1e182487fa23a3d7745a2aa23841604ed540f07b6ae9819bd8b7989c2044e35ab534b55234b22d4a427b7b99e6a67f2a18167f75304de332d35b8ac88
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.ic
Size 36KB
SHA256 1a9d1584b68baba77b0a79831757a3b129fdb7ce77917db493275dbe3cf94d09
MD5 91735eb606ee945fd43ab1a3a8a19c56
SHA1 e1e97c75ae52a782a876872973f039c201be3a49
SHA512 d606cd3d2d6362b6308286954017055a0b8f32e6a5dba7464226ee6df93b641dcf5e69bfa9e3be40f606f26567e222cb7d60a2a9b9c6466e3a640f3e7105ec3a
SSDEEP 24:TLQviX+5l5NnS5KvLF9i/SXXGS7QQQQQ:TIia7NnGKri/SmS
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.rd

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.rd
Size 8KB
SHA256 98434026ad9a33c96e67f239c245b5e8208158a68127a60e0b49a8b5e183e018
MD5 e081ec359c87748046674b1acc8797bb
SHA1 e8141e12cdf9675352a3db0fd89939f88b76cd75
SHA512 84afb96e4f18ae4cd5b5af059d9de5e4bc14268d0266b49e027524926819ea0d75f2a67faa4f8c79a6de6a0641f31c2b5d0d7e31ee2981d5bb20b6546ca3608c
SSDEEP 6:7+/l9+ztgn1Ct/vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKv:7+t4x7/vqLiuWdYRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ri

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.ri
Size 307B
SHA256 849c1ad097d8acb2ddc1693179cd9fadc6b2bbf84dc647fce5c6ea66e51c6837
MD5 eb8bfd9cfda1a6ce811ef7857d5a8545
SHA1 bde8af01276ee1f9fb2cd60cdaf68746db99d395
SHA512 3dd16dc1995183294a524b92fd6bb9573559395a1f9b27d6f5d7370d850cf7f59bed3329890d0b13d403bded016536609e04bc4410cc7618759d589a7cfb916d
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.ri
Size 32KB
SHA256 9f773df1eaacdb2e15d098f3d2a0d434e2dd313d86953116b79910f79ee9f3d9
MD5 947ffd6bd58a08248740267ad243b6d6
SHA1 f178ff257a773d44beadee0f90648601e5ade10c
SHA512 0e37dc1970a2af5b166309304f4fafec20c5742cca47a98c88de6f9f64a196426618ac5adc9e2404bd90d02fd9458ae099ace21f9db1cbc4f778c54720e161a8
SSDEEP 24:TLKKnKwm/mpLwBpGSZgchEytc/dCi8KXe:TWc5meposSimmFCi8K
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.store.report_pid

Path /data/data/com.juzifenqi.app/files/.jglogs/.jg.store.report_pid
Size 8KB
SHA256 0f250bbbd86b40a810fbcd9fabf17e795428e3dab6890f8be3167cc6cf4760e8
MD5 10b11328c55e482186b186e57235bf2d
SHA1 64b58f65bf3a63ef8457a72a420e9c710f191eb0
SHA512 dfc22a06486bb6d7102ec33dd2820450b1838c39bf5bc678b3581d8b72738143460179912a7732e8c2596337011df633c7497bf1679c35e33e5caf845eea68a2
SSDEEP 6:7+/l9UgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKDnM/E:7+tpqLJdeWRmBEyPb8sE
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jiagu.lock

Path /data/data/com.juzifenqi.app/files/.jiagu.lock
Size 512B
SHA256 7d5ebf5f4e4f2d2d531245034f80b8eeeab69455b2f6e0223df4147d3a82adfe
MD5 c5f7ad1150a60f1c33af74c53e660553
SHA1 ae79a9d5f6a380c8ed314e99f8bb918c102965e3
SHA512 1b82f1550eb4b96318d2e6e831d7d57e409dbd25c684e3c18e5fbb736b62bccc6a3a93e0cbf65a16bee951558563c652abfc3ec348225e520ad0cc120bfd46e0
MD5 SHA1 SHA512

Submit Download

classes.dex

Path /data/user/0/com.juzifenqi.app/.jiagu/classes.dex
Size 5.7MB
SHA256 61e973f3880f11f5e2cc40ef9fa02a65aa43c3dc654eec190a8f50f153972dc9
MD5 47264f01a77bc5e0b9aa9da9006e4fac
SHA1 e73b2a125db32d2e99f0fc2fc61fe0f7c1e1319c
SHA512 7d36113292d19fcd03cd790bbe02c2372fc49d8bfb8ff19b331af49dc7db98bf6bf14579e3c0ed5d35461f2bc6159fd4c92610f17adf5749ff704c7a074ce027
SSDEEP 49152:noSi2g5JWCzkoNqyzivK62ecJckmRPt2X1j+wR62mBtk0x8r76:NicK62gwZ75S
MD5 SHA1 SHA512 SSDEEP

Download

classes.dex!classes2.dex

Path /data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex
Size 6.6MB
SHA256 11a6c567453575ccfa2c66744710fff50996779c349c45903d6bd3006237be57
MD5 7e9467b5478e0b443fa19631afd9e63d
SHA1 13e7c01aa9cfbf2c1996ecc86c7f36b0e03e451a
SHA512 e3e70a29735f720ec095eb1f416609494414cde83a82476e2e7b45caeac5e05dcad0df6c060ddb0d2057b6d4108686bcbc05e645889b23ec2aa2b3a15fd5f86e
SSDEEP 98304:8uBmgEkzWb46eDQAunpol1l3m0d9w/ifW8P:8uggEUWbTAunpoXIC9w6fWY
MD5 SHA1 SHA512 SSDEEP

Download

classes.dex!classes3.dex

Path /data/user/0/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex
Size 1.9MB
SHA256 cb5f7b1254c294bb752d912231cdd6db00ce62c56656354db8bd052f432e10bc
MD5 6e980eeef009cb1a890a5f895cd82214
SHA1 147d7216d7a00c066856db4a3ba129f61a0e062e
SHA512 5dbc6206dcedba15464a3650f9230e57530730e58c1625cd2a5623e913b699644067888f021f298ca9230fc731ee870c261927b709339717a1c4064bc1b054c7
SSDEEP 49152:+Nr2kW4p3aaBYMoGLqq66APjqpsba+80tS5xFIpuwW:ChppsbVA
MD5 SHA1 SHA512 SSDEEP

Download

libjiagu.so

Path /data/user/0/com.juzifenqi.app/.jiagu/libjiagu.so
Size 475KB
SHA256 646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75
MD5 f0f9ef36b67807a253b5932f865eae7b
SHA1 6a8d66c6efa2750b54cb763f4ad044bba4154e0d
SHA512 e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548
SSDEEP 12288:jl54fCZt8eH6QYzrv0Qn+IuQscA+mIuNPZVMcmjvyQvq:jlefwNiU8+IuQJA4u1DSaQv
MD5 SHA1 SHA512 SSDEEP

Submit Download

alsn20170807.db-journal

Path /data/user/0/com.juzifenqi.app/databases/alsn20170807.db-journal
Size 512B
SHA256 63a30e2daf1a8f97275e16785c8553c664bf80683355e5e8124debe9c8ef9102
MD5 82ee962c17ead3eb687f57898b6b5df5
SHA1 afdb069369e49b490e4725ca8c71546140b0a0ba
SHA512 43b1adfb740cf2b50d14e86213ce7f3130cecd8deccb43c2530d818904106b42d2f6cddd3db77034dea4d6ab5caa6eae6403e7571ed69217cc1a0a2e7f869425
MD5 SHA1 SHA512

Submit Download

alsn20170807.db-journal

Path /data/user/0/com.juzifenqi.app/databases/alsn20170807.db-journal
Size 8KB
SHA256 4994190478b7a1f5aff55163e6f7262826f28a50311393c003a55e38688937b4
MD5 50e5c3f2dda79a73fe60e9448f36ee0a
SHA1 d69b86e5342cc5e20f83c5d7aa0fb978e66d5c9e
SHA512 cb510112ddabf05beeca29eb068b29de0c6a40066944a77ae34acfdda807e7da6be96f09c32e4231e6010a5cc5d47db90c3344c4a331f91df30a68ef453d9bda
SSDEEP 6:7+/l9KPl4n1qRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKfn:7+tMdTqLiuWdYRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

alsn20170807.db-journal

Path /data/user/0/com.juzifenqi.app/databases/alsn20170807.db-journal
Size 8KB
SHA256 49c1d1871cda371fbb5723be4cc1b85c876a3d957caf7ac26fa4151158cc624a
MD5 a2eff946b4a7b226afd6210d22a0ee5f
SHA1 b76ff1613f1cc646d440c7b2dfc930746573495a
SHA512 66ce55a9fd38ceaaf689bfadac4cf5b4c340ece2d62784a02d0b358ae18c2432e89d8148db221a4e65c195f9eb592808fdf3e8b35cefccb3bc832f7c0de4466b
SSDEEP 6:7+/l9/3Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKTU/U:7+t9qLJdeWRmBEyPb7U
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/user/0/com.juzifenqi.app/databases/bugly_db_
Size 16KB
SHA256 9cbf6d6b53b607a288d3c1ca62f443af5e63930b02df2d0bef366fe48a61ebba
MD5 b77649ff06cc036e9de4bb0d4752915f
SHA1 74c00f2da61b2a56996b46088e920e402f36e78a
SHA512 34f84c3c6aab07331d7f511775cd175f28cd32d2d40f8cf4205b854877c13e0d523abac3715ab6541bfbfe0bcf04191046bb7b4daa69d4eb066f42f06090964d
SSDEEP 24:TLqKnKwm/mpLwBpGSP/kGSX1q3LHaSHZKsOakcVCi8KjSchEytc/dCi8KP:T2c5meposSP/zSXjRcVCi8KemmFCi8KP
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.juzifenqi.app/databases/bugly_db_-journal
Size 8KB
SHA256 b5cd16224705b2f8dafca2dc3ba9b7c9c50a161a171368987c64e464532d05ae
MD5 96f06a902f3188dfa17ed3c143718044
SHA1 3cd68acf336200fa0706dd08256bd96f59b70cec
SHA512 0c3a5591457c3fe539d39dcc62aa3325831d84d24e52b5815fc9b3c46c8c4f7a2bfc9a8328da00569696806424050b6b6ea615f341ee6b65c16cd0741882791b
SSDEEP 12:7+t57nqLyKPXDyNTSFbyNHUP9YERmBEyPbD0T:7+t5rqLy2XuLwY/GSO
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.juzifenqi.app/databases/bugly_db_-journal
Size 8KB
SHA256 7aa9c8ec7d46ab0b5168e04081097122ae1823f9e45517b8df575ba5776423c5
MD5 f785aa5524ef829f15f7feef56db5d46
SHA1 d05ef15d2aa644fa29bdcb662d140691464844cb
SHA512 8eaf562a6adf0851c4808557f60a6affda34d0312f6e254069b4436f37f439eded50691dee9c3c6fcc0509d6e32daa0e7dee053ff679a49f4318f0209a9247de
SSDEEP 48:7MpglGcVCi8KemmFCi8KnnqLSc5meposSn:7ZEcV38KeT38KnZn
MD5 SHA1 SHA512 SSDEEP

Submit Download

hmdb

Path /data/user/0/com.juzifenqi.app/databases/hmdb
Size 12KB
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
SSDEEP 6:l9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdeWRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

hmdb-journal

Path /data/user/0/com.juzifenqi.app/databases/hmdb-journal
Size 512B
SHA256 5a867b85232f580cf99d61fe963a5afded31c53aabfa438a620aeb3f176bdc6d
MD5 32b0f1be6038bb0b18531f01fb153a11
SHA1 787e410bedcb68e3d93b5d037949d8570b1e6974
SHA512 0bb3e9685ee13661561f75dc1427bffc1e0e21bf4cd9073a6dfdb26b2956d982b7ab228e7ea5264b082d672845ed7565858990c02eab6ef172c5c1a9de9ce9fb
MD5 SHA1 SHA512

Submit Download

hmdb-journal

Path /data/user/0/com.juzifenqi.app/databases/hmdb-journal
Size 12KB
SHA256 71933d6fac96d49950a05c8ed2ca718e7ed73253ac5ca5454da15b1288653f3c
MD5 d813f45dc49e99478a2ee2a15d14b9ee
SHA1 a9a5201817baaf0a83bbddd4e73b94ac6aa1b59a
SHA512 b44c5e5f04b4b69fe90b08f26e666c4c8a1f367daa264e247314cceef433934c1273175aa004004986bb402774b35cdbf5042e96a5dde32100f076bf56d80449
SSDEEP 12:7+t/geWnnqLE4gFydBl9Ye42aqX9YIIkya9YurNTSFbyNHUP9YERmBEyPbRy:7+t/LInqLJfnYe5Y0YuBLwY/GSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

logdb.db

Path /data/user/0/com.juzifenqi.app/databases/logdb.db
Size 12KB
SHA256 968726991631a641ac8a30d826c1b72dea959c35b70dde589fe058fa9ff8363f
MD5 272c9eb9a3670016ffca8a43eb13d5a4
SHA1 1d57145f98669c9b75668ed59121ec8acd00b2cc
SHA512 4dae5fb941c19f5532aaf05ad98ac95d811c8373245a1f372caddd11db5b5ff8e4d4982c282792757cd24e513bc7cd6a451ab937c82514fc83f6a7af58179a36
SSDEEP 6:7+/l9k8lFPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKdXGl//mOw2:7+ti8lBqLmqKRmBEyPbQiXmOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

logdb.db

Path /data/user/0/com.juzifenqi.app/databases/logdb.db
Size 20KB
SHA256 365216e10a84db0c50ab5d77e49d6e7287652b8be9285cbdbd83bb1a09fdaf3b
MD5 9aee8423125ba5397cb9244bead68f33
SHA1 faf96cc1db8245c96da123ae2bd76998cbfcaf15
SHA512 9c5f17de101b27ad2592f67436a169b2030efcf2c154b8a82502796b008a0ede1d9496ba2fe6bdce95288ba2189203fc84f93d030a38fd37dab605c279647f38
SSDEEP 24:YOfiyypP4rFBtviX+5l5NnS5KvLF9i/SXXGSP/M0RNGLZmJg7RNGLZmJfg:YOlC4Dlia7NnGKri/SmSP/M0iE27iE5g
MD5 SHA1 SHA512 SSDEEP

Submit Download

logdb.db-journal

Path /data/user/0/com.juzifenqi.app/databases/logdb.db-journal
Size 512B
SHA256 61c4ed61b8fb54fb350cb8dd87503bbba8140e57b33781b405efb4da28196637
MD5 a42494fc6c8803f892e5e4d8e7baccbe
SHA1 e5da5d4d0ca2161a1f1002b6e02f9790588b764a
SHA512 f092acb6a3631246fe6ad1a35a315a8f0b0c30e64293a8ae0fff298fafeffaee1a8c9b51543e4c2c32940aa852fe42fcc72fe1cef0e92852d62f637922a85f47
MD5 SHA1 SHA512

Submit Download

logdb.db-journal

Path /data/user/0/com.juzifenqi.app/databases/logdb.db-journal
Size 24KB
SHA256 f8e8d1f5cfa5f323b00b30849acacb1cf11fd03ebe09778a68060443d5c9b78a
MD5 fe76c9309e2105923628f3fe5452f1e4
SHA1 a4e83bc96c23de96c8028be2947fff6ea4bb7188
SHA512 cd2557578827f4a8e30fdbe17d5b96f9549f49197c345fc511761b60b1d00828cd8214926813601353583b7d0e3e346e5dfd1b7bbe39f6df1a31234f24716c89
SSDEEP 12:TLWemHWzkya9YurNTSFbyNHUP9YERmBEyPbDHRmBEyPbDs:TLu28YuBLwY/GSYGSDs
MD5 SHA1 SHA512 SSDEEP

Submit Download

logdb.db-journal

Path /data/user/0/com.juzifenqi.app/databases/logdb.db-journal
Size 12KB
SHA256 e1e35755d994800e74485a9372a623d9474a2eb11e54e4c118be3c6bb8c71af5
MD5 0398b3e312039996383eec00d5fa9f7d
SHA1 183313d11fefa501b8de8ff3abd0a229013a8414
SHA512 710a5f276a3c685d3219201784e4f94c46ce1f9014190a9af9b2f011235bd31e67cc636f7c5137b0539cd6c8d081ccd161753f2cc0f1792caf71f8110ad5e5d4
SSDEEP 24:YOfiyyph4RNGLZmJZwqLgviX+5l5NnS5KvLF9i/SXXGS6:YOlViEAq4ia7NnGKri/SmS6
MD5 SHA1 SHA512 SSDEEP

Submit Download

logdb.db-journal

Path /data/user/0/com.juzifenqi.app/databases/logdb.db-journal
Size 8KB
SHA256 44b0721974eeb357df9fbe584e05e6f5a11f53bf8efbbe249e82eae9791abc63
MD5 a5c1b0b8168512c07e711e6e91212fc3
SHA1 def062dc9022d41b6e6fc0c1d6f367393074c346
SHA512 e744dfb75472892ba552c927620087ed018107feb0d8b23eb0253155450777810d66f0ef13c67e36ed6d1d2fd1c97f0127efc01b60e40315e2f0807a01c1f0df
SSDEEP 6:7+/l9bC4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6X/6:7+t5JqLJdeWRmBEyPbF6
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata
Size 24KB
SHA256 4b154a8679f95947b0092e34ae0556d4decf41bc2d856addd755acfd0432203e
MD5 c849ee5946eef9bfa7d82b2eaecbaae8
SHA1 3ac1fbb0f40bd931b0b6cc1d13cbe9ff8dbbac12
SHA512 f9368b69cef238a2368b0b63969c7024a8bb320f40f381f5d2f9ef44d99e8dc903bbcb5ade7d043f7f8c67f6e20c63d19406f7f44a86d178294d5fe49f3ec963
SSDEEP 96:67Pxg44mOPWvXj34mnNPWvXuNk94mnNgWvXtNR4ml/4mlrWvXI:6Vj0WbjnxW2e9jnGWlzjdjBWA
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 512B
SHA256 81049943be36555b4d65d2baa8739b993889a621a30643393f2c8bfc91173943
MD5 e49f874d07dd8b527dca98e7cf1e585e
SHA1 ad05165600558e271bfa72bf7001ac2a2fb01cbd
SHA512 542dd2222f3e9810fa1566e2e574888d2d270fa45c02b8f298da7ccc707d2585507c95e757800411b5c635a684790c456f78199f13d2852526c987776f7ecfd1
MD5 SHA1 SHA512

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 24KB
SHA256 efa4a6d6a0e871a6841642a98adac54f887e2feaba25f132f0005843d354d454
MD5 13d609bd5505135b2dd05ae77b2e4f56
SHA1 af6a2cba01cb21842125a8a00eec5ec1ac9eb225
SHA512 22cd213ca06bdf8ee9519750b3653bd059a3d3ca8e0d0002a779595499a486c48ee33a6707095f6e12b4a2cc51dcdec85538e858ac337470e915eac1e9b70a71
SSDEEP 96:63BPzpyWNNZJA2Ak3HGQdvbVnNGdhHT7DFhI+P5Aa:65dlADkGQjNCV/vJhd
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 32KB
SHA256 f8d1dd451410db6cbedb97740c933bc2b096814cb6818956ab7591fe7975dec2
MD5 18d88a220e4332ba70651ca8e7530a50
SHA1 ab48506b7133a617c49d438491067e89bd61c24d
SHA512 b0a57c0ca4e6fe44e65865ab47a8d47b0baa6e23f86276236fbf5a1860858e1661bed552d6e0baf483496c114de79dfda7b4b4cb823073fec8b14ebc82a56c7d
SSDEEP 48:T515VXBLwpSqMzZ3Z4aTZDrORjdqzXCRn:ntB3pZF0R0zXYn
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 16KB
SHA256 b91290b34f12c48b88a2b448b6501db8964c2ccce5c9f73edc72b1cdf07b7c9d
MD5 c8767ebbbbc9a045ea2c511dcebfde78
SHA1 98510772bb862c21ae20fbc94cb1040fd128af7e
SHA512 f01cae402f3acfcdb44a1e9936088d50526a4ba1055521a20d759acd7f29be8e7691705569652fbf730a525029f85faadf0e27e6572c6e1cfea94b1517c1eb97
SSDEEP 12:Yrpsfiyypi84O8sxXlPqLCXTJhHhTSFbyjLH9wzbhRZfRmBEyPbv:YOfiyypP4rstlPqLCXTJhHhNR+Z0GSv
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 16KB
SHA256 876dfcc2dc63c608675e452914c818f10cd43298cf6fdbd21678eea422187c26
MD5 c0be87b6f6ed3ca223af232617774c30
SHA1 ddb445fb69a3fc8b465c727fc60b0eea17f216f7
SHA512 17f25231c5cda48ad31498f7feec2e53be9cce8c31ca5c9195189b8351301b021015640e19817c0afb266c70aead6a577062863c63b6d2e39bf543816690c2ea
SSDEEP 24:U3Z3Mk8Ofel8c2Dl2ndEbSOjrGkqLzWTJhHhNR+Z0GST0:UK4mlrWvXGkq3WTJvzuST0
MD5 SHA1 SHA512 SSDEEP

Submit Download

sensorsdata-journal

Path /data/user/0/com.juzifenqi.app/databases/sensorsdata-journal
Size 16KB
SHA256 665bbc79198684c2209cbe848bcfa64cb749799efa9fd23997370b5a096fd190
MD5 f2278d9c07f9025dcf2db454d82f7e24
SHA1 d496b12acece2272b8b209ac7e89d70ff1036fff
SHA512 3274bca12f3feaef001e95759ec239b0576003916e58ed7d5bda1d353a06120dcc02bed71a9b5a57d16e849700671a50cc6d54e963e1d3d99ae15b40ca5323a9
SSDEEP 48:7Mz4mnNwPWvXtN/rd4mll0m4mlrWvXIuq9cTJvzuSv:7m4mnNgWvXtNR4ml/4mlrWvXZsoxv
MD5 SHA1 SHA512 SSDEEP

Submit Download

.td-3

Path /data/user/0/com.juzifenqi.app/files/.td-3
Size 96B
SHA256 6e050bd707978968be85fe8ad5638a013083eda2977f26631d779b97fcbf1626
MD5 3d79f3ce744bcbef681fb67d9ef2d335
SHA1 0260cfe50c1cf7f06a2efaec1dd98e8e7d59d445
SHA512 b16daefd16fc733116e622786fab827290c8ce116cd207adfd2bdf1ed497abbcf1ad1f996038a714ba735130e0a699bd654c7501a1ba19c85fc5c96d8c6f0ef1
MD5 SHA1 SHA512

Submit Download

4c984fe24161907e5b5b9423ecec3163.0.tmp

Path /data/user/0/com.juzifenqi.app/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp
Size 547B
SHA256 09c0281415b6f71daf8f7002bee335585cecd80e8aa3ee96254bc2766129930f
MD5 a0e3d277b05a0adefe82cfd7388f15bb
SHA1 3b168e572bc75b4e687fd5b451576b276449a1a6
SHA512 1edbb2977c4654a0b0245aa428d9e4159f21a4aab4b8e9e9fa937bfe5072b7a33d15d5b1bc703c2afc814edcedfb2a92c54ddd8a5f12fd95aee8dc778bc2f764
MD5 SHA1 SHA512

Submit Download

4c984fe24161907e5b5b9423ecec3163.0.tmp

Path /data/user/0/com.juzifenqi.app/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp
Size 547B
SHA256 5b7a06314a4a76de910ea5c128803e0aefb816b24590ebe9eae26685df402d92
MD5 e492c22b711955f7a154238823c0090b
SHA1 33f0d63e7473308161616637d5550d0c28af6717
SHA512 2e2df9085176641aacb60dc4da2a5d1a57aea0f9dae63aa8ac44c46e023a1a1e12bc8c6742f16795b9b56befc6913b485b5281e2721742762a7ad733cf5b5172
MD5 SHA1 SHA512

Submit Download

5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp

Path /data/user/0/com.juzifenqi.app/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp
Size 547B
SHA256 7b214c7a65c3a474c909285c0ef0203e2b77fc2c382a3e16a31503165993d7c4
MD5 1b8aa3b29cb4b399d3cdfb03ab38f48e
SHA1 8a07a4f37b51e34c0497c5a3be684ec0e97f6311
SHA512 99267cd0274f94f763483dfcc978b156fcece43ecf5c14704999c1d3f5937bbd7db62f51c2aa2f9ae4553a01f601cd941174141bc25c82535ad1d4711e5d468e
MD5 SHA1 SHA512

Submit Download

journal

Path /data/user/0/com.juzifenqi.app/files/a/b/journal
Size 195B
SHA256 151fe4a69a19709f6bec4e14057c2c17bbefe8bfe0154e18ffc20b3945c603c7
MD5 d988e35c44259e3e2eb24cf321183ce3
SHA1 25c4b06b45763e5745c019032ce1917f1fe48d47
SHA512 6926c28370221e3ed927c0589e1063275aa22b692504c7121741b29a45dad865b9f26f00a7d9171536454450da86419422622ffb26be6b3a25e98e0c213364a5
MD5 SHA1 SHA512

Submit Download

journal

Path /data/user/0/com.juzifenqi.app/files/a/b/journal
Size 277B
SHA256 484dcbf216faae5605aded05bec01c2e19a415772dfa92a1ca81c826fc1e8795
MD5 08fef6331b3916ae24767e973c108c33
SHA1 95d0cd86b079a6f5e5e7dc7c878a0b556e641f1c
SHA512 84fbb94181a39abf0d85d43ae7355a069ec760ca8f738e7b4ce7502b584da716c843daa8adb6818f6bbe4aab681b8aa41dc4a1da564c45fcb28fed2daaac1281
MD5 SHA1 SHA512

Submit Download

k.store

Path /data/user/0/com.juzifenqi.app/files/a/k.store
Size 20KB
SHA256 8f341157c090835d6bf14a770bb188eb3e05cfc4ed1bb13ba90d2bbbe8d331dc
MD5 7ab674da0f9818e9144f8b2c8169ead1
SHA1 318a4b8137ad932b0e1e61c540c4b4a4a536837a
SHA512 0d06a65cdffcd5ad23bbc1a542fa3aec1b8fa94f864a3e510c03e262268b56271b46a06b679d0eeae7bc4a7b783132e81641d64e3b683138b02537cb6dd07e32
SSDEEP 12:TLmafrMyNTSFbymnq9M4IWHWd5RmBEyPbAVOwG:TLXfFARQKqGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpush_stat_cache.json

Path /data/user/0/com.juzifenqi.app/files/jpush_stat_cache.json
Size 119B
SHA256 46b8904461d8383892856d9d2da4eb0064d768f8175a5eef8847d853c1c42a4e
MD5 8a2b41e3bc19fec2dc6bfae80a20abc8
SHA1 b2cc5e20d28deb0458aa9c9264a17e8fb70b55d6
SHA512 79317e005d1aa7c3c4f86bb6325c08c670fa6837cb83f14f0f5ecce804f133d6e937ac1f2bbbffdfc0ea99126205eeddb5b68e859550bea6eec89dd6492bf0bd
MD5 SHA1 SHA512

Submit Download

6ef4c394-361e-4462-88ed-5a3da73f5197

Path /data/user/0/com.juzifenqi.app/files/jpush_stat_history/active_user/nowrap/6ef4c394-361e-4462-88ed-5a3da73f5197
Size 8KB
SHA256 be68707185dfee57087f961c6ffeff2a3e601ac28d1c6395c61f7ac0334fd06e
MD5 0acc884766269639fbaab0696c7ed7c4
SHA1 a55f5fac56857522648303143d2576ade770944f
SHA512 18d5cd4759ded8347f867f85db3e7f15351b97a432780f221799be74223d9cefd90703d49a7dbd426c0735d3509a52b059d643cbc5e1e63289a790f863aafe46
SSDEEP 6:7+/l97cYPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKgJ+9M/g:7+tZnqLJdeWRmBEyPbv+9sg
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcuid.so

Path /data/user/0/com.juzifenqi.app/files/libcuid.so
Size 113B
SHA256 4ace5e2e266bd748b15e0e43950a2e3070484d4a016c9fcfc95e7d2063ba9d88
MD5 f1d8016ff27afad5c97f0050cb6e47a9
SHA1 09774d2448059ac6ecd887ce7c46713feceeb031
SHA512 657cb8de2ac7366da87d50a4c791b7e64b86887272af3666df684279affb5455ae80953928530049e17af6dc8864d86c41f9be80f632f84c2fe7815512bcf001
MD5 SHA1 SHA512

Submit Download

.td-3

Path /storage/emulated/0/.td-3
Size 12KB
SHA256 42731719e55e26bcc550994ecebb0e1c647003bd0d260e42e0db2c0c6b358a37
MD5 ddaf39e8c0a4cd23a379b0c3b3ed77d0
SHA1 b021e89ee09af345dd647c9ae36935a0acd440e7
SHA512 7c2fae1febff09a6ac70fcf9e8450b172d104443d85c71c45317cbcae365c55ba568751288e3d5fcf8d5bb99231d1149fa3d912f46dea9b811fc5f6c3044e8c2
SSDEEP 24:7+t71+oqLQviX+5l5NnS5KvLF9i/SXXGSd:7MpRqIia7NnGKri/SmSd
MD5 SHA1 SHA512 SSDEEP

Submit Download

.td-3

Path /storage/emulated/0/Alarms/.td-3
Size 20KB
SHA256 72d1e0672f5346f5904aaa5cb09085dc2b71bc594034760bce25fe973fccb80e
MD5 1c8872cc763afb2f791a9347e8dc895b
SHA1 92d9e156ea2640bdaf7e883cb8e4e11264e381ab
SHA512 58327074c8b6442221caf181c2f979714d98240c4a8e43ea41b10eb11f67d3941731ad0ac0a6edfe49f2fab2081f4e8cfbb22ffc2652648ecc594054c15d8e00
SSDEEP 12:TLyKPXDyNTSFbyNHUP9YERmBEyPbAVOwG:TLy2XuLwY/GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

.td-3

Path /storage/emulated/0/Android/.td-3
Size 512B
SHA256 ba34b8606f87be45f6edea56a696ada15bd04c43677612b3ea3149a6e819d9ee
MD5 ff5a4ae34bbf19145b1103aabb0b643b
SHA1 282ca960e5ce7ac66cf98bd8c9ea23354785423b
SHA512 c8035d6c683448bb7db1d2d79a35aca9e09511c74a1a3817d4d9ce7804ce6765d225e1a56695acc4363bb76db350066f936c8c6547b67690b0a6301a7949bc6d
MD5 SHA1 SHA512

Submit Download

.td-3

Path /storage/emulated/0/Audiobooks/.td-3
Size 96B
SHA256 21b88b712cd20ae7e587b9277e192acca26a92d09352d38a18eea6856838cf8b
MD5 ed5b740cd37685b9eff68c69fc577a91
SHA1 1625fe5ff52690967e143e2f2359b6f342a4466a
SHA512 820496b2dd288384d0337bd61f9bece8a7f6617f090d92108424d39f08f4927c790948c7737baac9bf2ff6a25437fed20bd899582aaadedd24f71bca87836e70
MD5 SHA1 SHA512

Submit Download

.td-3

Path /storage/emulated/0/Download/.td-3
Size 8KB
SHA256 11a836156bd92b78f91b05cccbaca9ba5db27d43d5f45566623c92b3dbc7a833
MD5 1b4c088251341968aa6347a78689acbb
SHA1 2d7077c8ed32dc9b38b0903df76a012f67f242fd
SHA512 26d9291cdc93c951e106bc436ec246587f2e2ef2f70c48831d67d519b43c41bcafde4bffc0d9c09e002bc4822f4234a2fc805e6e1f5b33d461de1524f9a428a6
SSDEEP 6:7+/l9J8Hn14Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKKR:7+tP8hqLiuWdYRmBEyPbJR
MD5 SHA1 SHA512 SSDEEP

Submit Download

.td-3

Path /storage/emulated/0/JuZiFenQi/.td-3
Size 96B
SHA256 a52b1bc58a63facd822f9373f43d40f915f63275837bbd98672b53029d183dc0
MD5 150301a943a20bac013a6c1cdb7c6d58
SHA1 bff908c3018de2a27aaaea87af97c6d79ae5d91f
SHA512 4cb5c265d5e15158e8c5abd0aac976b38917cafcd73424726d4dc04877cd37c5f1850004d17aab17dd072e2c28c2cec5a221cdc1772c45845ed768e755dfa384
MD5 SHA1 SHA512

Submit Download

.td-3

Path /storage/emulated/0/Pictures/.td-3
Size 109B
SHA256 804d4cf5990f6e4a4283301b69191fdb7254c1a2c54aa54f60406f0f6b6b778f
MD5 fe7efd3df0864077ae64867cb238f96b
SHA1 5503f29cf70d925dd0a42ec3994f55e6564cb023
SHA512 7beecd9bec8cc8315cda86471d522e941f9dca309ad014c9b9b2a1e19a9183af085f305134d51442edbe808a657c02481d271bb394f13b9499c5ccf2d3b1a920
MD5 SHA1 SHA512

Submit Download

.td-3

Path /storage/emulated/0/Podcasts/.td-3
Size 20KB
SHA256 8f8d9b3c1c220fa968de1b2e9607bebd047492efda33ee37e3c71c8e6313608d
MD5 3bd7e396b6cda248f2841d5d0aab38c0
SHA1 aaf0f6914f0a998084509ff85cbb4d593819fe0e
SHA512 5ceca05e033dfc7ee0f164ecf951be691f1715da6aceb05b9f6011eb2f93bce07d12ad453084369275a8d4c8d8318ed63ae6c4071a302904e4cc24ff972663b6
SSDEEP 24:TLgviX+5l5NnS5KvLF9i/SXXGSP/44RNGLZmJfWo:T4ia7NnGKri/SmSP/TiE57
MD5 SHA1 SHA512 SSDEEP

Submit Download

alsn20170807.db-journal

Path /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal
Size 8KB
SHA256 9f6d254abd4836649e31f18412e6666b235db3b980e2392fda5530ecaaa9a084
MD5 f79310b50b6ef4623776ca5f7f64cfdd
SHA1 282a113cb7b8b3e950ada11b8bdd49b411049cc6
SHA512 942c6034e0bf3ec0185e8689a0464707b422dcd5452b617decbfc2e075ccf2eb07ee6d337fe6f1ec6f8e9879dd58af03092ec86a95189a117adfbf209256fce9
SSDEEP 6:7+/l9mn1Flpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK8VR:7+tQlpqLiuWdYRmBEyPbHR
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 40KB
SHA256 b127fa6ec8ed48b6fe9441d9465ae375be6fa9e00b2ee2770a0c24ab3978ca6f
MD5 49f65de14426c5c4daee2bd0c8aa7593
SHA1 46cbe7556cb76b09cd918be87674194ddd51fe5a
SHA512 5b97010570b100e3b6e845ee4c52aa6541805ad5cdf669ea3e71b8efc94c0e30f328e0ed9cfbe40fa25a44f420d884809315f7685cf82d98bae566020d2147db
SSDEEP 96:dtBgZJA2Ak3HGQdvbVnNGdhHT7DFhI+P5AN2p5zll:dwADkGQjNCV/vJhuG5zll
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 40KB
SHA256 c60cb59051fe64e399b329a766dcd647fdb595807920d613b02ca49953c9df82
MD5 1a3ec29d206fd6fb82095ddc53ec4b47
SHA1 88c0dd0e8eef313f7a5e05806652e7479f1ec975
SHA512 c8ce3df414fb67321fbb5dff88883d921dddc3313a5df6a47e7c691847356304fe44eb63e57fbe0df6110a957a13915c5c5cb820b3362f97259a89841b565cbd
SSDEEP 192:tf0JtoxEVBAYmYcb4T8ByJaFkP/jiZG5zll:6MxSBAYfcbLcaFkWZUzll
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 28KB
SHA256 ce51d8dc1aa980236ed3914d6299b12c7591db12d14101754e34cf1e88baeddf
MD5 26f1f3f09da84b6a4606aa717c71847b
SHA1 7668bf2717f8cb0807766056e2c012158caec572
SHA512 542b63b23d92132468e694bdf04d01ff7c105c7b8765268889563c4dd7bb1bee13044c5e6a2fcac4a33858c252d43548e83afd0a62cb886a6bf65ae116a93b90
SSDEEP 48:Tz15VXBLwpSP/JPjTSla6KNCdoqABJmzZ3Z4aTZDrOV:9tBPRPx0CJepZF0V
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 32KB
SHA256 a4f44cb9fee8233d57ae94f9fd44365a8a1ba73dfa111c0b1fe74c7c656d44ad
MD5 a2940f42358b4559c4015785c2de727d
SHA1 d3583b7f174f8602ac5637cff8b3221720006ca2
SHA512 b19e76becf2f2e880eb10fab0357a46dc1102df58aceaa5df7f4edf54ddf024eecc7a295e3262bd34a325f524576d38368a456b92f57531414408bd865d6ce4e
SSDEEP 48:TD15VXBLwpSP/iEU4BkTyWAEJTljdqzXCRn:NtBPKT4BEecTl0zXYn
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 16KB
SHA256 d0e17a137b2925b83849310076cce86449c68f08e7cc34116742b62436a3d0e3
MD5 8c72361a87d9c416f4f345855b7f55dd
SHA1 29d96fac87cbc93827f04944c486e9cedc7d8a77
SHA512 d3205d61313b5f5230895f73e263a131d8a38a1397f6a476983b5dc9b54840c6679f4ae98955ea643ed161fbd0988eac3ab3149ba1ee07f88dc2a1c949066691
SSDEEP 96:7BZJA2Ak3HGQdvbVnNGdhHT7DFhI+P5ARytBK:7BADkGQjNCV/vJhEy6
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 0fb7a17b8c832fce9b15a48edc4d719c8e1116c903a0166a6524c58deb637037
MD5 5a21a92e1141c8b4b5fb49c0af9eaf11
SHA1 ed69b76f4fb81c456dfd2a35ec82cd04d6e5db50
SHA512 91f1f16adad7acb4ba5a1c8a6e0233c0ae531dfc3b0afa9b1f431aeea2f62c33e640295b9035a10d01ff56df9f9f2443fc5ac37eb674bd3f8bc1843e47b68f71
SSDEEP 24:7+t5g1FnrR9Gp5jiDEpKsV4abeW8qL3l1fnYe5Y0YuBLwY/GS0:7M4r2p5GDEpHKqBB15VXBLwpS0
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 1591fc59f3c9eeaec0b91d40b055b43e904c8f9e051bb1e34257a04f1384a490
MD5 1ecd58bffb6eedcb94950a9f917be0fc
SHA1 85640888c7564e4ecc92ff2576b7f6d43b743b35
SHA512 8135fa4040b7727bfc24081060ec818194639d86dbe42be123fc0ed2546fb38d8a5074b5ca20db32a1e7ed737a0868f2b992e33702ebe4eb0657b4cc0b21baa4
SSDEEP 24:7+toEzZx1Z96wXTZDHlVO4qO6qL/fnYe5Y0YuBLwY/GSj:7MNzZ3Z4aTZDrOVqj15VXBLwpSj
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 f3710e00528d7629e37bac40e4cd2ebaa043c627f9dbbfde60a46fa16b96da21
MD5 b3788ed41627b3c8b87863f35563f359
SHA1 096e69c53c73375db5155c3e9a65e47e58678863
SHA512 fbb9246d138266cc4fe1da1af2ad888b51eea72c9f826edbe1b3843fe633bb61778c18746a5f64b4e25b60ed9a3af20b3791d0f5f24675b4dad7ae7adea98842
SSDEEP 24:7+tQLDjTKTiBOsWcYX2tXhtvWqLvfnYe5Y0YuBLwY/GSbC:7MQjdqzXCRtvWqz15VXBLwpSu
MD5 SHA1 SHA512 SSDEEP

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 25B
SHA256 12c6c72103b27face3fbff0fc8bf4c6d0593482fbd1549ff40f6a8e59e1db3ec
MD5 2632a7c4f925483114c0031ace1a4b1b
SHA1 d296b5f725f497c2137e67b84fadbd8b8eb46f94
SHA512 f6a35cbc44f91181285a84692d15a88377c76d3f4a9a3f97f7eab68dedf77aadeda2b2faeec65a6fce5ba6855d1ecbb3669fae7bc45c627c9cc01edc3a07af33
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 55B
SHA256 093ba29d888c2e940d8abaa2953db027e9e2a98bcece5d774111cf4d6e792ce6
MD5 91546ee136abc8c4bd865bcf17191d26
SHA1 6d6ced8db24e832d84011d0e0aa53d1c50a14bb8
SHA512 4eff4db81beb1b3a5920364428a9373405cb43544159eb16325207363d13b87a845bd07ac215b0b6001a9124f3b798e665619ebfe603ad6053d18edf58a2597f
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 84B
SHA256 f0fd84edb68729a17a88e67f9a6fa4eb7acff858d931115016cfd57bb0aecbf6
MD5 21916b76fa9bf22ccf67da098de6d3cc
SHA1 455e596a5c8d0f0c9bda66b989f1177fbb3bdafb
SHA512 747c8981f38d3c4cf7b97d980e1b99f23e53a5033aea21d66729361eb5ee896f2bddf1105999363cdd8085b0ac84b6e450801001ae48e3589dd1f3f87086369a
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 114B
SHA256 0237cbadf814a2568c395891bb7539b862899a5154f5480e8859d813343270b3
MD5 c0ba7763f2ee72f8f118722b17527896
SHA1 a6ffa66bb9e2acdac75e23d138f76be050a5ecd9
SHA512 f6a9798fa33ff3ac842902b4595786730c64bbb671d72e90443f0c0a369718979e15d1c56dc802c7349bbb0cd6569dc2626f464e9bf06bf9e772190a1e565a9d
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 138B
SHA256 f94c568e58692f0a71ea8616ee046bc176de7691e8e28b2fc75c4b8e454fda94
MD5 ededca24c912b186f19aa4ab443e94d1
SHA1 84883f7561de82e811d649e4f00cc73709703ff5
SHA512 8339b7f5f11e2eee8584ce527ec8860025f62cf0622c4d82cdbf4a63ef7254dcfb5965565c3f213bb7ceb9fa8ffe6485b1749ee1ea85c0b2d7b9df5396e728ac
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads