Analysis
-
max time kernel
87s -
max time network
175s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
13-06-2024 00:54
Static task
static1
Behavioral task
behavioral1
Sample
a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118.apk
-
Size
8.1MB
-
MD5
a33fb3c2821da01f2f3f957053722e2d
-
SHA1
7049c050d2df78826280f4bf19b0522c323108cf
-
SHA256
b159fe7e0e1f0a95177b1839da40dc88f122cd3a426df0c34fb437671a4365d2
-
SHA512
01660c7ed0eb95166dffe6b81e1cc9d2f0419f1912aeac165a55597a324932f70027185ac93f8aec5042014a182d42986986836fe627254c8fc2699da7acc8e2
-
SSDEEP
196608:d2CAGlCzYTvfkByY3C7OB56kv2AQ9EkoQ/vRMdBUh:8vmCKEBy8CE6kv2vSQXh
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
Processes:
com.shijiucheng.huazanioc process /sbin/su com.shijiucheng.huazan /system/bin/su com.shijiucheng.huazan /system/bin/failsafe/su com.shijiucheng.huazan /system/sd/xbin/su com.shijiucheng.huazan /system/xbin/su com.shijiucheng.huazan /data/local/su com.shijiucheng.huazan /data/local/bin/su com.shijiucheng.huazan /data/local/xbin/su com.shijiucheng.huazan -
Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.shijiucheng.huazan/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.shijiucheng.huazan/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&ioc pid process /data/data/com.shijiucheng.huazan/.jiagu/classes.dex 4266 com.shijiucheng.huazan /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex 4266 com.shijiucheng.huazan /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex 4295 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.shijiucheng.huazan/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex 4266 com.shijiucheng.huazan -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.shijiucheng.huazandescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.shijiucheng.huazan -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.shijiucheng.huazandescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.shijiucheng.huazan -
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
Processes:
com.shijiucheng.huazandescription ioc process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.shijiucheng.huazan Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.shijiucheng.huazan -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
Processes:
flow ioc 221 s.appjiagu.com 223 d.appjiagu.com 224 b.appjiagu.com -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.shijiucheng.huazandescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.shijiucheng.huazan -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.shijiucheng.huazandescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.shijiucheng.huazan -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.shijiucheng.huazandescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.shijiucheng.huazan -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.shijiucheng.huazandescription ioc process Framework API call android.hardware.SensorManager.registerListener com.shijiucheng.huazan -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.shijiucheng.huazandescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.shijiucheng.huazan -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.shijiucheng.huazandescription ioc process Framework API call javax.crypto.Cipher.doFinal com.shijiucheng.huazan -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.shijiucheng.huazan1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.shijiucheng.huazan/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
sh -c ps2⤵
-
ps2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.shijiucheng.huazan/.jiagu/classes.dexFilesize
5.9MB
MD5b6f33c124a8661c26dd7de6dcaa5fed1
SHA179025152c69e8ec0421975609e676eed704f27ac
SHA2565011264f90cf83414cec2d896ae73c755d03180e1018b90c0feca1828bf71d2f
SHA512271659da544efba7ff83a4c69fac582bd5dcaec139d5569435c35a6d19f733cece3b12619572c627c8e8723656ee4740bc1ca9316e411d8d83bd45db2bf94e65
-
/data/data/com.shijiucheng.huazan/.jiagu/libjiagu.soFilesize
482KB
MD5f380717bd1e3916c7b697fab8d46c5d8
SHA104f51f0d16097214e38be517d93be44cb0603a88
SHA2568455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
SHA512b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e
-
/data/data/com.shijiucheng.huazan/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/96fb6738ecea307d7d26aae43070215dabf7bb2f096fca680a039edce44d68c7.0.tmpFilesize
24KB
MD5787ae48af165d6f01f24f95659214ec9
SHA13f290aaa95a3486d2d9774e863ac690b9920ef1d
SHA2569e9ca832b85985475b6576ecaf1fd0377f17bc11ff67efe058bb11d3e322cf48
SHA5120ccdcf4263535f1cc1825edb23cf2cb432d1656e18ce076fc4b8624d6afec1e6268d7d2842a428b4963a7c8c3efc7118948610fe0c545353ff7fbbf3a28ff3dc
-
/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/97ac0abd95bdfd919a211689e3b5bf7ac5eb1c5b52331176d2c7c6e075cbce51.0.tmpFilesize
28KB
MD57dc57f6589f57918e785ab3ea9c712b5
SHA1d7e8b23852de5b0e8780bfa14e45cbe66b04d8f3
SHA256052e8fd668f9db7a475fea319869a5232471c9631dd77dfd265b50860edd549e
SHA512f53815df9dd040f0946f495145b73e274227a61fe7fbf5f30de3bdf397b468aafadfad3cc22689f8d48aa2df27faf94f460db3e7f86353d5b12e28d5af0b8ac9
-
/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journalFilesize
327B
MD5c72f2c178b13fbfd7010dbf5e1fdb5c3
SHA167a58ba74988d15e9a3e29c11f0815367a19e243
SHA25670230604140ab8967d6d0b4911a834fdafdc50fdc1120eb3ad04d73ab0234c50
SHA51283b132e391df329fd50e1a4b42e920b43cbc0810713a88215811558054771d956366fd63e3c8dc815dde0757d4db127616eb490ca3fcf1e4a444a8ffa469a132
-
/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.acFilesize
40B
MD57bd51a78837b851b95e53b0315fe68fa
SHA1ebf31cb7e3de33201fd9da49efecbf7dc6813305
SHA256febc540b49398eb4f099da1d6a6b82696bb8a0e5b17950692698b1c80ea7f632
SHA5126305b43ed6edd316b38640bb5ac12a331fdf4133c835932fac072a005421433c9964d2cc08a26cd7c9094690392f0beb9f4692e9f860ad13f8a6c5d8ae41ee78
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.acFilesize
40B
MD509c4790e6c2a509bc60c587c7e4d7b6e
SHA1becb6c9e53c2b5d4bd7d39b2f6ba528eacd6b2b8
SHA2569ea616b06c3b44e7ad1ffd3733be04b7795448e99bb2e361bf0da04472904963
SHA5127c17dab6647f4cba403bc9e6c1aa459e249b8cc00106b98ecb29a2e5def525e34697628e82bee90838088b3d921e2486f87e3c92cb909b3bb966f0b50937dfa6
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.diFilesize
340B
MD5c55520e92dee893c79e4052c163bc537
SHA184790f83c736b354aa1ef29bfa34c483959b152b
SHA256d7afa87b5d149384158bf52fe6ea91229fe4a02902ac90f6d005aeb148d69100
SHA512fb99e69529512bf069df72f3f565699dec7de3186bde10512d448bf33ec966e74b0dd55a57576bb30d8fa6fe535622eda75e8affc0cbd05c363b649ab7df58f4
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.diFilesize
340B
MD5f00ca36cd9b47964cfb2b74ccf57a3b9
SHA11f418c66844bfb01e68bf2280349b7ff47015e58
SHA256745a7c3c5c967813406c180be1af244d6864ffcea023eed6f212854b13ade890
SHA512cd991c9e9873ef192205279baa268cc021844f354ce944ac93f1e68959ee93242aa72ebb9713dacc7dba9b81cbb349791d2570885a655b59a5acbcb5bb1e5fa4
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.icFilesize
40B
MD5edfd51b122c7bac3cdccd2d1a58c4613
SHA1cccbd4b6d7def15f3b26cd1bec99219209173cb0
SHA25600e7176fc54a7cdbc62d987f4c46fe58fdeaa19c715af62cc5adcbce0401ef98
SHA5124e1d6df78828b9af01397c9a5b9b778a7e8b027231b58e7f9cae68649d471eb524b23ea8d02c90e29c735b84b720193f80b54ab93dbe6ae7309df0085474757d
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.rdFilesize
73B
MD556d0b6742bc601611ec90950e542a1d2
SHA161740f9ecf3898bc397930944ba02ebd819786ba
SHA2561741d64e0ebfd1ef344eab7723edebc3b7d6359869b9bf6ff576ff23ed320dfc
SHA512c0789e1574817441706bd1998798c4f25ccd6ee7c375b924558be49c083d0035f84602c1b48a7b5cdae462fcf7e1a6707bb3f7c20d1a732c1aa03bb682c92050
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.riFilesize
314B
MD507145ca6d8d58892da5413c53efd7925
SHA196e947493758d80a6649d341495a68372b7b2051
SHA25633c41caca2a70d5ed30c4c0d6188c714d9f109eb3c5af7c9d20ecc90a9084927
SHA512bbd93ffcfd5ce715ad28dfcd98cb895b899d955b5df30802255b45b06c1f70f7927c6eaea44374494ec4558acaddcdfcf63351b86cb0077edc47ec78bee502e0
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.storeFilesize
127B
MD5ed90f6cbbec74b59e614ac1b66a7f77e
SHA140e1346798f7358ccb443873fb0e084669bad572
SHA256bda3e149c1815075bdd0aa1a59f7dd49d922fe13e8be76b1cc12a90a976caee8
SHA512d88c233e854fcf21f99af7792d478f00b742b7e4b54e51bddde3fea8b986f2eacae5888b1f5cdd86bf6973d3e223f547c2c6e9dab800eaeb2d9c714db5bf4c1a
-
/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.storeFilesize
32B
MD5448e391c59eef34ee1defbe4dee4c41f
SHA1df1f890987371d7d8e6963c68b787856e42bc146
SHA25655612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
SHA512ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
-
/data/data/com.shijiucheng.huazan/files/.jiagu.lockFilesize
27B
MD5687225a1cc5d2b2349e56e3d4ea7a040
SHA1a11daa9f7b421c3204803792b58073a010cd49fd
SHA2566439e876bb8d4eb26b30af416cf26e5f2a64c098bc4d91144b7fcb3088e2db82
SHA5123bb660ae751beae515bab32bf64c7c67b08c683cca7aec5ccfdfcf23498e65768232cbb9dfefa94bb2fd50ec94decf6a66d4c0ae238e44579c08ff30b5e74ef2
-
/data/data/com.shijiucheng.huazan/files/Archimedes_p4Filesize
13B
MD5817d9fee005a75a18a9c238f632b1a4e
SHA18e85c6653e33f848d6dbbd5a890d62e70aba6f6e
SHA25672aa23a83acca2ef25041cd36b699e810957c62e89b4b7beaab27b3fc56e4cf5
SHA512fc4ff76bac15a15a34120a7db09fe42a0d312964cafd0a4f57cee824360cf964f5511da35455252be6a030b5d9e7f442063eb948ada13c295a539a78adb0cc74
-
/data/data/com.shijiucheng.huazan/files/Archimedes_p5Filesize
13B
MD5432c0b77c20f51570ce914199de96491
SHA1d0ff8a55efd7a0065eaefc284892628dbf06cbd7
SHA2563f8922a70ca2045bab6b5e408088520bb15d4aa47a9891211795d716ce750989
SHA5125090812c5071877c9ed38cb39a29e6272f7c22e6ba47597e1d4f12a9e3ab5d31c05e15b125cafa240c23275b2e172175d818438b3e7906ae9d03aa007d16d38d
-
/data/data/com.shijiucheng.huazan/files/TDAntiCheating_Switch_ValueFilesize
1B
MD555a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
-
/data/data/com.shijiucheng.huazan/files/TDCloud_Control_Cache_Param1Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p1Filesize
13B
MD577a46758589835fb53d05523a803a716
SHA163166c7314352d2cee66bf80ab31d61fb1d0d633
SHA25639303227324b23f87693c74df638a0ff5c3521ea0a9cc2e7a327ca326d2cd827
SHA512e4a71810f687aeef9b15315229a819f8d3bf2eb786f3b5aa38e9ba94b4b7d2d9d158568daf4486e09560387adf373b8eb5c42abb0fa99988cfbf0d640e6ffbf7
-
/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p2Filesize
12B
MD523d0f1330eda3ba3d8cc7287501b2346
SHA1405b9be417760571602fd50cf608b9f8f29c6a61
SHA25614807b31557cb8e6c21af156610936c0ed7028ae81da120b3d45c7fb72999422
SHA512711faadb1d137aeaf9cfffec387b5ce06c70822486540d4fd41f1b34806477055e7d84c6205ca36c1ab2659cc10a818d5840ad3d8bcdcb5019debcdcfeb219a5
-
/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p3Filesize
13B
MD52798b3e425e46ff1b7df43cf7e223ac7
SHA1cae329c21faf59c97ef8a3910e08408e15d74765
SHA25684177da7d437c386d1aeb11f72259f57724549861ded68638149219e9f15d8ad
SHA51292eb8554e238b9cebb2289645dbee9a704f78bfe1cec557f055526ca4d93024c87bef2ab1fc144341c58d18253235528d8542d812b53b853573a5c21d401ae01
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database0SaaS/1718240370730_4266Filesize
2KB
MD56adbad2c6203937923e01cd18ee7679c
SHA10b5657768f53969d9eb084901e7c407f9277a8da
SHA256dcc4377c0cb217b3552a388d7065aa55d413058401529b2c348e351d34a09bcd
SHA512b1e3b5fb49e63c10c2ed4138e7d19cb612876ee58d092e7d1e07c8b71daca6028c84b8738eed6dd8d620b3f851a100f16af3887a897252c389ffd7d582149b85
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370268_4266Filesize
2KB
MD52d49dc3f7d22601ad6fe135aa039dbed
SHA15402e6410c79a802bd78a00686b4b0ad662ecf29
SHA2561bd78f42bafd98577fcc2ab6fb5b81110be616ce6f90d03835589e19cfec0bac
SHA512741b4738769e773bdf2b2a90c01d6038dc61af0ab21b4596d2a11fe3788c22903c48d5cdcfd4b386928b8d47558ca73def7104a16cc791fc9acba41b47b05eb9
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370514_4266Filesize
2KB
MD55d237fd54357e10ae9e9ce11f04dbe89
SHA1659f2e9b9263de96758355b2b0a65cd56d6ee0fe
SHA256e0ce9894e4cf7ecc41d7cb39b8bda55a1e89ff93822f6356b9f4303313c29d86
SHA512a8a0c72b5460b6ac55664dd0baea3b7efd2ff1a5992cd4defcd2be240b6fd7c59ca79c780c5bb6cece0538b08172bc77558148e2382a0d9442dd11e21ad3a82d
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370932_4266Filesize
9KB
MD5c4897c5641ccab4958848c1e1aa92a61
SHA1dc6d1115f289cc10d7c47f6fe68cb51ef0ca6869
SHA2565f9bcc1d0d26b781e3f9f3934a93b1773d66c10478d1397557489e20e95af73a
SHA51254ae7fa810b89a7898972a568c3c08685d4e89612cdb12eec7951b57a443eba9d2c6576ccf7188e5102bc34f711a2af79507c7002f8e4764f19b00106e812dd3
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371074_4266Filesize
3KB
MD5b2de726756d7b5019757180765fd9495
SHA14d97e66721980b09747ac74ccb11f5a35c28b110
SHA256d67514d4aea0d59aaeea179b1ba4b873841ebee7765444ad4ebeb5a8d6438b2e
SHA512b29d6947a3b799beebe532c710e9be5c90952ff74634dffb24d783225b553bb049ae94c9984f471000f32b206ca4f0bd7f5089661b90bf55c008e74b965cc634
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371207_4266Filesize
2KB
MD548927cb6055bd66873a9413e8164c266
SHA150670d654124ebb1c2971d2f3a3f1ae632bf0b71
SHA2562aa28b31ea84c4660f10d3c28dc723116b7c2aaf83f650b451244650d939f88a
SHA5127f97b25b4ca808c4eb40de404da7591368f58c9c8fc1d76389dcc2a612c4be04fc09b715680a6bc54e85d0cd7b92112cd1fa6e9c7033e5655b7cd909b9c2554d
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240420732_4266Filesize
4KB
MD50adc6e0e3d64d5e21a9aab9c29309048
SHA112e26685e5f700cc3c5ede0caa2d71aca5152d83
SHA256cd5e519abd56f6f4a77e8bb2cb80f26afea0aa7a848ed942b98bc5966d2ec37f
SHA512e2f25b83a344005f9323c4d48dc4a88776207e7cf6a80f607bb3a5e94c8af8341aaeafcddc3a514c3bff7a7b1525c51f5d568edc59a72e1dbc559b5f701e65fb
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240425713_4266Filesize
4KB
MD522709f36b984ab336b0ccd20e0a164b1
SHA17b1573ce6d6cf4efdfa88848e9b6d484c936fe28
SHA256adb1856bdf049498b45cee6d1817f830bfe8ba161a02f32948c1477490915585
SHA5124f54ccb1fe533954dbc202a6c9560d20b85c4e9b20e986183f327823c1c4fa62d15cde0cac1c9c200617a0488133e2d21178d67c9c17ccf5ac0c621d06645dde
-
/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240430858_4266Filesize
10KB
MD510ca4dbc0f859f86d7c46823c19ed73a
SHA1ed31c1fc1fd135744b9da04b6666ba1020da1449
SHA2569d94d88ef80027d4a771d40a0f913682dc9866b2ef7fe551863e6e79a2d45ffc
SHA5123266672e1a0ebf86ebc819d91398b6bdaf960fd86a288e23bea62922bceaa3e73cb4f38dffb5286b4203d5cceaf5d13b05e87c04d31bf6057b199bd76ee91429
-
/data/data/com.shijiucheng.huazan/files/jpush_stat_cache_history.jsonFilesize
174B
MD507c1e26126799b9eded2a3fad83c2b1c
SHA1af5fdc2eb65c19e6c57857717a9cbffe788db1f6
SHA256ee5c35c0907be2f62fbc41b57918090324c69a9716348ac74ffc54099ff32d47
SHA512202ba9a0c6e78a44f893e0c7f0f9de040a56d4a5a569bd5bd3bf196987dc384897eaeaf91f8ec3c0afcf9530b1d55b1a954ec01c766f837d6f7fc5fb9fa3f167
-
/data/data/com.shijiucheng.huazan/files/mPBE/ivFilesize
53B
MD5f8bff15adbf653f4099fc4f2d576ad5c
SHA101dd40fea314622ff44f9d7b31c131e31ec0d4cc
SHA256a87eaf9e2e4e9d3934e8c0a7ce285063d2244156aa381f6e5f291d7bcdfa9565
SHA512092ce11a40c0060dc74354ee4918e8993b7de4fc326caa179928f1a9c21dbf32eda611533c6d801e3213cbad2abe6a50ed03c7c9d897927adfd5334956aabccc
-
/data/data/com.shijiucheng.huazan/files/mPBE/saltFilesize
120B
MD520da51f7ca91a1712370b148292ddebc
SHA1af070e9654ad882bb9ef36426f41f5b756281cc0
SHA256b54a6365723609b388da794b2a7bfaae6b00f5841db695512b208d29cb43d44c
SHA512a755e5a965aa6c6de6135b823f2adb0e6b5d9c90e36c0a2a8662b72ba7101783339f0ef65e4694694aa9a7b347670616c0a2abf1124ac1fe8b31d436a0067a65
-
/storage/emulated/0/360/.deviceIdFilesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
/storage/emulated/0/360/.iddataFilesize
32B
MD5bf826ad6bef11dab6a9e5c56ed2d8e4f
SHA1801d0904a4348aa1d88fd2a137fc577ffd0f4bd9
SHA2561b2e2bbd563303ec07ec466f1c45da429c179a7cab45e29d48f4065b571fe42b
SHA5125e3a9c4cef97c4ef040caad85840f8dded8d00cf0c941c7c1aca549010a77bf9f6cde4627c004a7293a8742a0b1ab8df79a685c7f9bc76dffc12968895430292
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD526570f65e6655b061e30f2052cfb19a4
SHA1a3786501fd0813652664faa8d09ccd8f02f947b5
SHA25611e304f224ca77f7495ca5526f2a5a3015d945555103fab2899d8ee4760299d6
SHA512cce95ff8d6d675e8b7f44a544f21d224ab047d485dbc87c31c3890f3aaeec3c1ae757846d2eca8adf6b1336b76f318b41b9bb2093e1d3e9dfcbd9a0a9b89e179