Analysis

  • max time kernel
    87s
  • max time network
    175s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 00:54

General

  • Target

    a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118.apk

  • Size

    8.1MB

  • MD5

    a33fb3c2821da01f2f3f957053722e2d

  • SHA1

    7049c050d2df78826280f4bf19b0522c323108cf

  • SHA256

    b159fe7e0e1f0a95177b1839da40dc88f122cd3a426df0c34fb437671a4365d2

  • SHA512

    01660c7ed0eb95166dffe6b81e1cc9d2f0419f1912aeac165a55597a324932f70027185ac93f8aec5042014a182d42986986836fe627254c8fc2699da7acc8e2

  • SSDEEP

    196608:d2CAGlCzYTvfkByY3C7OB56kv2AQ9EkoQ/vRMdBUh:8vmCKEBy8CE6kv2vSQXh

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.shijiucheng.huazan
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4266
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.shijiucheng.huazan/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4295
    • sh -c ps
      2⤵
        PID:4433
      • ps
        2⤵
          PID:4433

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.shijiucheng.huazan/.jiagu/classes.dex
        Filesize

        5.9MB

        MD5

        b6f33c124a8661c26dd7de6dcaa5fed1

        SHA1

        79025152c69e8ec0421975609e676eed704f27ac

        SHA256

        5011264f90cf83414cec2d896ae73c755d03180e1018b90c0feca1828bf71d2f

        SHA512

        271659da544efba7ff83a4c69fac582bd5dcaec139d5569435c35a6d19f733cece3b12619572c627c8e8723656ee4740bc1ca9316e411d8d83bd45db2bf94e65

      • /data/data/com.shijiucheng.huazan/.jiagu/libjiagu.so
        Filesize

        482KB

        MD5

        f380717bd1e3916c7b697fab8d46c5d8

        SHA1

        04f51f0d16097214e38be517d93be44cb0603a88

        SHA256

        8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc

        SHA512

        b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

      • /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex
        Filesize

        284B

        MD5

        f1771b68f5f9b168b79ff59ae2daabe4

        SHA1

        0df6a835559f5c99670214a12700e7d8c28e5a42

        SHA256

        9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

        SHA512

        dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

      • /data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/96fb6738ecea307d7d26aae43070215dabf7bb2f096fca680a039edce44d68c7.0.tmp
        Filesize

        24KB

        MD5

        787ae48af165d6f01f24f95659214ec9

        SHA1

        3f290aaa95a3486d2d9774e863ac690b9920ef1d

        SHA256

        9e9ca832b85985475b6576ecaf1fd0377f17bc11ff67efe058bb11d3e322cf48

        SHA512

        0ccdcf4263535f1cc1825edb23cf2cb432d1656e18ce076fc4b8624d6afec1e6268d7d2842a428b4963a7c8c3efc7118948610fe0c545353ff7fbbf3a28ff3dc

      • /data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/97ac0abd95bdfd919a211689e3b5bf7ac5eb1c5b52331176d2c7c6e075cbce51.0.tmp
        Filesize

        28KB

        MD5

        7dc57f6589f57918e785ab3ea9c712b5

        SHA1

        d7e8b23852de5b0e8780bfa14e45cbe66b04d8f3

        SHA256

        052e8fd668f9db7a475fea319869a5232471c9631dd77dfd265b50860edd549e

        SHA512

        f53815df9dd040f0946f495145b73e274227a61fe7fbf5f30de3bdf397b468aafadfad3cc22689f8d48aa2df27faf94f460db3e7f86353d5b12e28d5af0b8ac9

      • /data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journal
        Filesize

        327B

        MD5

        c72f2c178b13fbfd7010dbf5e1fdb5c3

        SHA1

        67a58ba74988d15e9a3e29c11f0815367a19e243

        SHA256

        70230604140ab8967d6d0b4911a834fdafdc50fdc1120eb3ad04d73ab0234c50

        SHA512

        83b132e391df329fd50e1a4b42e920b43cbc0810713a88215811558054771d956366fd63e3c8dc815dde0757d4db127616eb490ca3fcf1e4a444a8ffa469a132

      • /data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journal.tmp
        Filesize

        31B

        MD5

        8c92de9ce46d41a22f3b20f77404cc1d

        SHA1

        8671a6dca00edb72be47363a7071be65cf270373

        SHA256

        68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

        SHA512

        30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ac
        Filesize

        40B

        MD5

        7bd51a78837b851b95e53b0315fe68fa

        SHA1

        ebf31cb7e3de33201fd9da49efecbf7dc6813305

        SHA256

        febc540b49398eb4f099da1d6a6b82696bb8a0e5b17950692698b1c80ea7f632

        SHA512

        6305b43ed6edd316b38640bb5ac12a331fdf4133c835932fac072a005421433c9964d2cc08a26cd7c9094690392f0beb9f4692e9f860ad13f8a6c5d8ae41ee78

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ac
        Filesize

        40B

        MD5

        09c4790e6c2a509bc60c587c7e4d7b6e

        SHA1

        becb6c9e53c2b5d4bd7d39b2f6ba528eacd6b2b8

        SHA256

        9ea616b06c3b44e7ad1ffd3733be04b7795448e99bb2e361bf0da04472904963

        SHA512

        7c17dab6647f4cba403bc9e6c1aa459e249b8cc00106b98ecb29a2e5def525e34697628e82bee90838088b3d921e2486f87e3c92cb909b3bb966f0b50937dfa6

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.di
        Filesize

        340B

        MD5

        c55520e92dee893c79e4052c163bc537

        SHA1

        84790f83c736b354aa1ef29bfa34c483959b152b

        SHA256

        d7afa87b5d149384158bf52fe6ea91229fe4a02902ac90f6d005aeb148d69100

        SHA512

        fb99e69529512bf069df72f3f565699dec7de3186bde10512d448bf33ec966e74b0dd55a57576bb30d8fa6fe535622eda75e8affc0cbd05c363b649ab7df58f4

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.di
        Filesize

        340B

        MD5

        f00ca36cd9b47964cfb2b74ccf57a3b9

        SHA1

        1f418c66844bfb01e68bf2280349b7ff47015e58

        SHA256

        745a7c3c5c967813406c180be1af244d6864ffcea023eed6f212854b13ade890

        SHA512

        cd991c9e9873ef192205279baa268cc021844f354ce944ac93f1e68959ee93242aa72ebb9713dacc7dba9b81cbb349791d2570885a655b59a5acbcb5bb1e5fa4

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ic
        Filesize

        40B

        MD5

        edfd51b122c7bac3cdccd2d1a58c4613

        SHA1

        cccbd4b6d7def15f3b26cd1bec99219209173cb0

        SHA256

        00e7176fc54a7cdbc62d987f4c46fe58fdeaa19c715af62cc5adcbce0401ef98

        SHA512

        4e1d6df78828b9af01397c9a5b9b778a7e8b027231b58e7f9cae68649d471eb524b23ea8d02c90e29c735b84b720193f80b54ab93dbe6ae7309df0085474757d

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.rd
        Filesize

        73B

        MD5

        56d0b6742bc601611ec90950e542a1d2

        SHA1

        61740f9ecf3898bc397930944ba02ebd819786ba

        SHA256

        1741d64e0ebfd1ef344eab7723edebc3b7d6359869b9bf6ff576ff23ed320dfc

        SHA512

        c0789e1574817441706bd1998798c4f25ccd6ee7c375b924558be49c083d0035f84602c1b48a7b5cdae462fcf7e1a6707bb3f7c20d1a732c1aa03bb682c92050

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ri
        Filesize

        314B

        MD5

        07145ca6d8d58892da5413c53efd7925

        SHA1

        96e947493758d80a6649d341495a68372b7b2051

        SHA256

        33c41caca2a70d5ed30c4c0d6188c714d9f109eb3c5af7c9d20ecc90a9084927

        SHA512

        bbd93ffcfd5ce715ad28dfcd98cb895b899d955b5df30802255b45b06c1f70f7927c6eaea44374494ec4558acaddcdfcf63351b86cb0077edc47ec78bee502e0

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.store
        Filesize

        127B

        MD5

        ed90f6cbbec74b59e614ac1b66a7f77e

        SHA1

        40e1346798f7358ccb443873fb0e084669bad572

        SHA256

        bda3e149c1815075bdd0aa1a59f7dd49d922fe13e8be76b1cc12a90a976caee8

        SHA512

        d88c233e854fcf21f99af7792d478f00b742b7e4b54e51bddde3fea8b986f2eacae5888b1f5cdd86bf6973d3e223f547c2c6e9dab800eaeb2d9c714db5bf4c1a

      • /data/data/com.shijiucheng.huazan/files/.jglogs/.jg.store
        Filesize

        32B

        MD5

        448e391c59eef34ee1defbe4dee4c41f

        SHA1

        df1f890987371d7d8e6963c68b787856e42bc146

        SHA256

        55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

        SHA512

        ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

      • /data/data/com.shijiucheng.huazan/files/.jiagu.lock
        Filesize

        27B

        MD5

        687225a1cc5d2b2349e56e3d4ea7a040

        SHA1

        a11daa9f7b421c3204803792b58073a010cd49fd

        SHA256

        6439e876bb8d4eb26b30af416cf26e5f2a64c098bc4d91144b7fcb3088e2db82

        SHA512

        3bb660ae751beae515bab32bf64c7c67b08c683cca7aec5ccfdfcf23498e65768232cbb9dfefa94bb2fd50ec94decf6a66d4c0ae238e44579c08ff30b5e74ef2

      • /data/data/com.shijiucheng.huazan/files/Archimedes_p4
        Filesize

        13B

        MD5

        817d9fee005a75a18a9c238f632b1a4e

        SHA1

        8e85c6653e33f848d6dbbd5a890d62e70aba6f6e

        SHA256

        72aa23a83acca2ef25041cd36b699e810957c62e89b4b7beaab27b3fc56e4cf5

        SHA512

        fc4ff76bac15a15a34120a7db09fe42a0d312964cafd0a4f57cee824360cf964f5511da35455252be6a030b5d9e7f442063eb948ada13c295a539a78adb0cc74

      • /data/data/com.shijiucheng.huazan/files/Archimedes_p5
        Filesize

        13B

        MD5

        432c0b77c20f51570ce914199de96491

        SHA1

        d0ff8a55efd7a0065eaefc284892628dbf06cbd7

        SHA256

        3f8922a70ca2045bab6b5e408088520bb15d4aa47a9891211795d716ce750989

        SHA512

        5090812c5071877c9ed38cb39a29e6272f7c22e6ba47597e1d4f12a9e3ab5d31c05e15b125cafa240c23275b2e172175d818438b3e7906ae9d03aa007d16d38d

      • /data/data/com.shijiucheng.huazan/files/TDAntiCheating_Switch_Value
        Filesize

        1B

        MD5

        55a54008ad1ba589aa210d2629c1df41

        SHA1

        bf8b4530d8d246dd74ac53a13471bba17941dff7

        SHA256

        4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

        SHA512

        7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

      • /data/data/com.shijiucheng.huazan/files/TDCloud_Control_Cache_Param1
        Filesize

        2B

        MD5

        99914b932bd37a50b983c5e7c90ae93b

        SHA1

        bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

        SHA256

        44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

        SHA512

        27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

      • /data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p1
        Filesize

        13B

        MD5

        77a46758589835fb53d05523a803a716

        SHA1

        63166c7314352d2cee66bf80ab31d61fb1d0d633

        SHA256

        39303227324b23f87693c74df638a0ff5c3521ea0a9cc2e7a327ca326d2cd827

        SHA512

        e4a71810f687aeef9b15315229a819f8d3bf2eb786f3b5aa38e9ba94b4b7d2d9d158568daf4486e09560387adf373b8eb5c42abb0fa99988cfbf0d640e6ffbf7

      • /data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p2
        Filesize

        12B

        MD5

        23d0f1330eda3ba3d8cc7287501b2346

        SHA1

        405b9be417760571602fd50cf608b9f8f29c6a61

        SHA256

        14807b31557cb8e6c21af156610936c0ed7028ae81da120b3d45c7fb72999422

        SHA512

        711faadb1d137aeaf9cfffec387b5ce06c70822486540d4fd41f1b34806477055e7d84c6205ca36c1ab2659cc10a818d5840ad3d8bcdcb5019debcdcfeb219a5

      • /data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p3
        Filesize

        13B

        MD5

        2798b3e425e46ff1b7df43cf7e223ac7

        SHA1

        cae329c21faf59c97ef8a3910e08408e15d74765

        SHA256

        84177da7d437c386d1aeb11f72259f57724549861ded68638149219e9f15d8ad

        SHA512

        92eb8554e238b9cebb2289645dbee9a704f78bfe1cec557f055526ca4d93024c87bef2ab1fc144341c58d18253235528d8542d812b53b853573a5c21d401ae01

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database0SaaS/1718240370730_4266
        Filesize

        2KB

        MD5

        6adbad2c6203937923e01cd18ee7679c

        SHA1

        0b5657768f53969d9eb084901e7c407f9277a8da

        SHA256

        dcc4377c0cb217b3552a388d7065aa55d413058401529b2c348e351d34a09bcd

        SHA512

        b1e3b5fb49e63c10c2ed4138e7d19cb612876ee58d092e7d1e07c8b71daca6028c84b8738eed6dd8d620b3f851a100f16af3887a897252c389ffd7d582149b85

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370268_4266
        Filesize

        2KB

        MD5

        2d49dc3f7d22601ad6fe135aa039dbed

        SHA1

        5402e6410c79a802bd78a00686b4b0ad662ecf29

        SHA256

        1bd78f42bafd98577fcc2ab6fb5b81110be616ce6f90d03835589e19cfec0bac

        SHA512

        741b4738769e773bdf2b2a90c01d6038dc61af0ab21b4596d2a11fe3788c22903c48d5cdcfd4b386928b8d47558ca73def7104a16cc791fc9acba41b47b05eb9

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370514_4266
        Filesize

        2KB

        MD5

        5d237fd54357e10ae9e9ce11f04dbe89

        SHA1

        659f2e9b9263de96758355b2b0a65cd56d6ee0fe

        SHA256

        e0ce9894e4cf7ecc41d7cb39b8bda55a1e89ff93822f6356b9f4303313c29d86

        SHA512

        a8a0c72b5460b6ac55664dd0baea3b7efd2ff1a5992cd4defcd2be240b6fd7c59ca79c780c5bb6cece0538b08172bc77558148e2382a0d9442dd11e21ad3a82d

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370932_4266
        Filesize

        9KB

        MD5

        c4897c5641ccab4958848c1e1aa92a61

        SHA1

        dc6d1115f289cc10d7c47f6fe68cb51ef0ca6869

        SHA256

        5f9bcc1d0d26b781e3f9f3934a93b1773d66c10478d1397557489e20e95af73a

        SHA512

        54ae7fa810b89a7898972a568c3c08685d4e89612cdb12eec7951b57a443eba9d2c6576ccf7188e5102bc34f711a2af79507c7002f8e4764f19b00106e812dd3

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371074_4266
        Filesize

        3KB

        MD5

        b2de726756d7b5019757180765fd9495

        SHA1

        4d97e66721980b09747ac74ccb11f5a35c28b110

        SHA256

        d67514d4aea0d59aaeea179b1ba4b873841ebee7765444ad4ebeb5a8d6438b2e

        SHA512

        b29d6947a3b799beebe532c710e9be5c90952ff74634dffb24d783225b553bb049ae94c9984f471000f32b206ca4f0bd7f5089661b90bf55c008e74b965cc634

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371207_4266
        Filesize

        2KB

        MD5

        48927cb6055bd66873a9413e8164c266

        SHA1

        50670d654124ebb1c2971d2f3a3f1ae632bf0b71

        SHA256

        2aa28b31ea84c4660f10d3c28dc723116b7c2aaf83f650b451244650d939f88a

        SHA512

        7f97b25b4ca808c4eb40de404da7591368f58c9c8fc1d76389dcc2a612c4be04fc09b715680a6bc54e85d0cd7b92112cd1fa6e9c7033e5655b7cd909b9c2554d

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240420732_4266
        Filesize

        4KB

        MD5

        0adc6e0e3d64d5e21a9aab9c29309048

        SHA1

        12e26685e5f700cc3c5ede0caa2d71aca5152d83

        SHA256

        cd5e519abd56f6f4a77e8bb2cb80f26afea0aa7a848ed942b98bc5966d2ec37f

        SHA512

        e2f25b83a344005f9323c4d48dc4a88776207e7cf6a80f607bb3a5e94c8af8341aaeafcddc3a514c3bff7a7b1525c51f5d568edc59a72e1dbc559b5f701e65fb

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240425713_4266
        Filesize

        4KB

        MD5

        22709f36b984ab336b0ccd20e0a164b1

        SHA1

        7b1573ce6d6cf4efdfa88848e9b6d484c936fe28

        SHA256

        adb1856bdf049498b45cee6d1817f830bfe8ba161a02f32948c1477490915585

        SHA512

        4f54ccb1fe533954dbc202a6c9560d20b85c4e9b20e986183f327823c1c4fa62d15cde0cac1c9c200617a0488133e2d21178d67c9c17ccf5ac0c621d06645dde

      • /data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240430858_4266
        Filesize

        10KB

        MD5

        10ca4dbc0f859f86d7c46823c19ed73a

        SHA1

        ed31c1fc1fd135744b9da04b6666ba1020da1449

        SHA256

        9d94d88ef80027d4a771d40a0f913682dc9866b2ef7fe551863e6e79a2d45ffc

        SHA512

        3266672e1a0ebf86ebc819d91398b6bdaf960fd86a288e23bea62922bceaa3e73cb4f38dffb5286b4203d5cceaf5d13b05e87c04d31bf6057b199bd76ee91429

      • /data/data/com.shijiucheng.huazan/files/jpush_stat_cache_history.json
        Filesize

        174B

        MD5

        07c1e26126799b9eded2a3fad83c2b1c

        SHA1

        af5fdc2eb65c19e6c57857717a9cbffe788db1f6

        SHA256

        ee5c35c0907be2f62fbc41b57918090324c69a9716348ac74ffc54099ff32d47

        SHA512

        202ba9a0c6e78a44f893e0c7f0f9de040a56d4a5a569bd5bd3bf196987dc384897eaeaf91f8ec3c0afcf9530b1d55b1a954ec01c766f837d6f7fc5fb9fa3f167

      • /data/data/com.shijiucheng.huazan/files/mPBE/iv
        Filesize

        53B

        MD5

        f8bff15adbf653f4099fc4f2d576ad5c

        SHA1

        01dd40fea314622ff44f9d7b31c131e31ec0d4cc

        SHA256

        a87eaf9e2e4e9d3934e8c0a7ce285063d2244156aa381f6e5f291d7bcdfa9565

        SHA512

        092ce11a40c0060dc74354ee4918e8993b7de4fc326caa179928f1a9c21dbf32eda611533c6d801e3213cbad2abe6a50ed03c7c9d897927adfd5334956aabccc

      • /data/data/com.shijiucheng.huazan/files/mPBE/salt
        Filesize

        120B

        MD5

        20da51f7ca91a1712370b148292ddebc

        SHA1

        af070e9654ad882bb9ef36426f41f5b756281cc0

        SHA256

        b54a6365723609b388da794b2a7bfaae6b00f5841db695512b208d29cb43d44c

        SHA512

        a755e5a965aa6c6de6135b823f2adb0e6b5d9c90e36c0a2a8662b72ba7101783339f0ef65e4694694aa9a7b347670616c0a2abf1124ac1fe8b31d436a0067a65

      • /storage/emulated/0/360/.deviceId
        Filesize

        48B

        MD5

        1d8d16c4e3b19ebf18988530d9b9a757

        SHA1

        bc94c1cce05cd848a53271ecb9c5311e27ffebf5

        SHA256

        abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

        SHA512

        4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

      • /storage/emulated/0/360/.iddata
        Filesize

        32B

        MD5

        bf826ad6bef11dab6a9e5c56ed2d8e4f

        SHA1

        801d0904a4348aa1d88fd2a137fc577ffd0f4bd9

        SHA256

        1b2e2bbd563303ec07ec466f1c45da429c179a7cab45e29d48f4065b571fe42b

        SHA512

        5e3a9c4cef97c4ef040caad85840f8dded8d00cf0c941c7c1aca549010a77bf9f6cde4627c004a7293a8742a0b1ab8df79a685c7f9bc76dffc12968895430292

      • /storage/emulated/0/data/.push_deviceid
        Filesize

        32B

        MD5

        26570f65e6655b061e30f2052cfb19a4

        SHA1

        a3786501fd0813652664faa8d09ccd8f02f947b5

        SHA256

        11e304f224ca77f7495ca5526f2a5a3015d945555103fab2899d8ee4760299d6

        SHA512

        cce95ff8d6d675e8b7f44a544f21d224ab047d485dbc87c31c3890f3aaeec3c1ae757846d2eca8adf6b1336b76f318b41b9bb2093e1d3e9dfcbd9a0a9b89e179