Malware Analysis Report

2024-09-09 17:53

Sample ID 240613-dx3f5awdrp
Target a3aa295354bed73d35f5d5c235fd9bd1_JaffaCakes118
SHA256 76f6608ac094df3a630139d56a60ed2574bc5f773540c916cfe1a85867e0b3d2
Tags
banker discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

76f6608ac094df3a630139d56a60ed2574bc5f773540c916cfe1a85867e0b3d2

Threat Level: Likely malicious

The file a3aa295354bed73d35f5d5c235fd9bd1_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion impact persistence

Checks if the Android device is rooted.

Queries information about the current nearby Wi-Fi networks

Queries the phone number (MSISDN for GSM devices)

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Requests dangerous framework permissions

Queries information about active data network

Reads information about phone network operator.

Queries information about the current Wi-Fi connection

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 03:24

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 03:24

Reported

2024-06-13 03:27

Platform

android-x86-arm-20240611.1-en

Max time kernel

168s

Max time network

181s

Command Line

cn.dxy.android.aspirin

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

cn.dxy.android.aspirin

cn.dxy.android.aspirin:pushservice

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 88e10fad61412929766ac6e342ac2c27.bugtags.com udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 dxy.com udp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
US 1.1.1.1:53 norma-external-collect.meizu.com udp
GB 43.132.64.26:443 dxy.com tcp
CN 183.60.176.112:80 norma-external-collect.meizu.com tcp
US 1.1.1.1:53 pingma.qq.com udp
CN 119.45.78.184:80 pingma.qq.com tcp
GB 43.132.64.26:443 dxy.com tcp
GB 43.132.64.26:443 dxy.com tcp
US 1.1.1.1:53 rds.dxy.cn udp
US 1.1.1.1:53 dq.dxy.cn udp
GB 43.132.64.26:443 dxy.com tcp
CN 112.124.103.79:443 dq.dxy.cn tcp
CN 112.124.103.79:443 dq.dxy.cn tcp
US 1.1.1.1:53 ask.dxy.com udp
GB 43.132.64.26:443 ask.dxy.com tcp
US 1.1.1.1:53 drugs.dxy.cn udp
GB 43.132.64.26:443 drugs.dxy.cn tcp
CN 121.43.176.163:443 dq.dxy.cn tcp
US 1.1.1.1:53 img1.dxycdn.com udp
GB 43.132.64.25:443 drugs.dxy.cn tcp
GB 43.132.64.25:443 drugs.dxy.cn tcp
GB 79.133.176.223:443 img1.dxycdn.com tcp
GB 79.133.176.223:443 img1.dxycdn.com tcp
GB 79.133.176.223:443 img1.dxycdn.com tcp
GB 79.133.176.223:443 img1.dxycdn.com tcp
GB 79.133.176.223:443 img1.dxycdn.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 112.124.103.79:443 dq.dxy.cn tcp
CN 121.43.176.163:443 dq.dxy.cn tcp
CN 121.43.176.163:443 dq.dxy.cn tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
US 1.1.1.1:53 sdk.open.phone.igexin.com udp
CN 115.227.15.235:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.237:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.7:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.231:80 sdk.open.phone.igexin.com tcp
CN 183.60.176.112:80 norma-external-collect.meizu.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.6:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.233:80 sdk.open.phone.igexin.com tcp

Files

/data/data/cn.dxy.android.aspirin/cache/_KStore_/cache_http_api/journal.tmp

MD5 fa79244c9fe70f6cc813c4bece0d1bd2
SHA1 becc80a0d952cd02e9ab07408136498dbc82774b
SHA256 aafeabed5f0062912cd9016f90617308e1d8e320f09ac7dd65383498dc868371
SHA512 049bff76881d28a757bb8a573d9bd75ad15b6a93e9ece52b90cf29b433aba855bd6b0c39b5dd56bd86abeeae13654aa58c29f9e9483ace0963dbe5c7c8f05a55

/data/data/cn.dxy.android.aspirin/cache/_KStore_/cache_http_image/journal.tmp

MD5 4c10b05dd8f2f344d00514b8200731d7
SHA1 dc88cdb5e10d790f6ee4b90b362e4bb8e72137d1
SHA256 7544a3bc788f4a619137d1f1016bf2f4dafb7ad7dce04c5c60b95dde2ad1db29
SHA512 da8a06f0a3820c25903541fe81ef6d0c855d04971ebf20eff23d1e3e80eba060a75bf319f0a292e0b4a301fd9e80afdc591db4427754576d4db2ff46455f84de

/data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-journal

MD5 14218a95eab5cfd74b7da352e342a450
SHA1 eef5658586ecc3df25a1fc5e5d0dbc0f68e9544f
SHA256 26094583a42fdbb9474b6bbd5652650f92f6aad598f0ff3fe500aaf2c35f6fb1
SHA512 2edeabfe4efef63f3b0a4a4a1ab9017f0bf23dab9e53992a55a9cfebdb5eb83a3b84eceb423decbc33004f53886881eedf8d9eaecd0c9d0d9a55f7ed4bf37301

/data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin

MD5 79344fda7caf57bddd2d7b00abbc05a6
SHA1 d2c498d1e1a2b7a19db1a18aae67568f5eae0672
SHA256 18f7e5c3a8fed3ad350298c8a45948565485a695e19a45b1556ee860f97cc5b1
SHA512 13737b1e6a84f1004a29777ba66cb8f30e5ed22daf0a8379d698aa2ed340b9ee22cb6abf2cdb5f7e5c0ce5eadc8592c043a2262c7dacfd442b11bfda5cf42645

/data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-wal

MD5 a6cf6a33dbb09ede19c47bb5e6b0db06
SHA1 45186662ae44480c3ac5a8ae9756e66544541443
SHA256 9a197ceb6fc6abba5495f7ed525adf867dd4a06a34c4dca3dcddb3beb7666531
SHA512 c1a6b5ac43740d6d026dda0370a91acf277b6213247b3ac2dc63f7380b0b7ab714a7a8c55156202071c5354808b1fd4f6e38d02b930578d25ccd3c26e4177a5b

/data/data/cn.dxy.android.aspirin/files/28f15bc1cf2872ed.txt

MD5 705c2ce0c91a9daeb1c35fc91caf6740
SHA1 caa712a59f7b4c2d3baa96ca116ece3e9a0087bb
SHA256 9f058f14dcee0a5dccabe1d28027bbbd4d92ab15a0927655b01c95c92cb4b0e2
SHA512 7448d2a7e6b876513fff4cf2bac09c7f88ff469cf4f74a36170b9c947f4729b1f741a3ce79e9fd8cf88e1834784754c9eefdbd4db95ba921dfb634c6cb532ae1

/storage/emulated/0/dxy/cn.dxy.android.aspirin/.28f15bc1cf2872ed

MD5 a92f3cb3fbac6c7e9102b26f388f74cd
SHA1 affc8ac0bbf36e56a37709c9d03148439ccc3e21
SHA256 83c43c942ee9d92bff7b3edb6581e4678c7771e57de7fa8d934904d19af08c44
SHA512 68e0dc600a611e41cfb755fda6b72a864c944cad8139787b3490768bdbcd12b4bad00a1e0c7f7d99aab44cac71211a6cae11991b66f52dc703b4839eb3fbe899

/data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin-journal

MD5 5f89885ff0971809a0c70346e887c6b4
SHA1 40fa55c2891553cb04fe7c254d05215843d4e3bb
SHA256 4be8f35edfd4d9ea632d6318000a2504deeade45c7a7cce488fa854c6f67cff2
SHA512 26023b64ae683f73477a435b588a587ed3e5a2e00a9d68c8a38dd3eefecc8707e002f601371f6745236cfb40994bdcf3d06b32cd0a4841b84453b5f3e38500a3

/storage/emulated/0/.28f15bc1cf2872ed

MD5 e9038b61e7da560e175098e9959495e4
SHA1 0a009ea3af773f3407a99609d38bcdcc67adf593
SHA256 82522d569e5c0110d29b3b89b3084597ef6154ccd87a8271226d5d2ed52b6cb2
SHA512 b415144b9022f1accd953d6578d4b6e6bf2550ff966a9cd2ebb88d2bbaa2933acd676f0d1007ee0335d3b72bea149935ab11b4070c850f6ed1b3e2a6e5bee736

/data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin-wal

MD5 56fb8f73f4de5f7d8b76a34e726d8687
SHA1 cab8deaae24d881348949692a60c621af08f6beb
SHA256 4a142522e8eff76174a8d4a080c02d4d4b864c41f4b6ccf907528c951e1efcdd
SHA512 c48b14578fb44530e0769100ec5301162709bddc8382efa81ebb7087ab6e196856afc2dc535e04864b3f16bfa48ed2eff6749fc007f9b40f186612fd4bec16eb

/data/data/cn.dxy.android.aspirin/databases/pushsdk.db-journal

MD5 ba1bc2e0fd4fec184d5c2259341b113e
SHA1 a248efa0c0b1ff4d2bfe3a5e3430ba8f5355b6f2
SHA256 3029234e748192a57556f24610ed26d166e618494648225b01e784588a6676bf
SHA512 b2359c51c54dede042549740ebe4a7fb709287cb5fe911ad9e313243f57baead68d82e3bdc3d07c672d8958eab270a1d4fd6a3b3c06e69ea0882312ae0cd0ee6

/storage/emulated/0/.dxy20180226/android.f

MD5 ef06a151d5d8132561a3589d820b7069
SHA1 8a771df6347a17be5293aad5387b422f5ac430d3
SHA256 2493c9659172137fc4e241072f362b16c7a36b8b4655928c52b49efd56f6fed7
SHA512 6296e7d637521e094ff563e19ca845c5deaa39f1bdec388fcdc4ae16a455c1df6bda4b3556e5471d6ca8ab73f601c67b867a9e0cdb60740691235c25601895dc

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/journal

MD5 d1344bf1fe32914d90d7bbd31bb988c4
SHA1 6d4a9701366d7881970e75340846797d01989ffe
SHA256 3330350b63950b1a2ed259b7d54123759bec3e595d2bba3b8e04c4d25a6bce3d
SHA512 a49afde22d0250556f6f12f1b01a6f9a4a0300cd095ad8258184dbb6911ccf03abbe6d883c44c3993f951f8be26473682e7788edb4a91ef056e37068d895f6d4

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/037eaa55b505997b19aa2ba769a58dc4ad74f5000caf3c98950c5b2d48148ea7.0.tmp

MD5 8c5ca6ccae4e3387d67083684591aecd
SHA1 96406b587a3e5397b54cd3027ec24a88a2247204
SHA256 924b670b93f47c5f232eb6aa22c18c9c56fd67e777a548a1831c42abe52e16d3
SHA512 2ba4426decc385383533bded5ac243c854b60a730809d0b8ef09888790e43bdba8a6e6b587d93c9e375f0a45a922f4a9c2ff73394bc8eef5f621f5e9bbd1c26e

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/e2af115ea9b1848ace2a30906c90bc57ef3cf520d9e41d799e1617c468a6a625.0.tmp

MD5 e4f67691b68f368640b8905ec1a292c7
SHA1 1e2a2601da200349bcc9430fd45b3ea4e6be8797
SHA256 b016c03ee7c509543f083279782986818c164042ef8fb13beed817f763c517b0
SHA512 7f97ace1a0fd8974a52befb188969e599f8025fe958557fbc0d6cde448f2e52ecaa4502e1f57e7ac304ee2efcca8b66c40bb2e6df99e20fdba00bfc780a2a69f

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/3a7b666952d03aeac2da0a0725b483e90334d2f39e566d0f65fe78a27322bc31.0.tmp

MD5 482706c12ed9e715bd646fc85553c42c
SHA1 bbf0a7ef16cb5a3ee71b8dcaff8b1f6f68a9c4c5
SHA256 4643295550c82059e7589d98538ff544367c8be5f5d1c50c4fb314b48bf88df1
SHA512 1d0de63c550faf8f90bf2c37fc3894272cf8363033a69e19b0c624dbee107033e6dd9b13e38382033c8a51f4d1e28366239fde57ce8b26088602d5075e6b5854

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/68633d471f2186eb0a37b2702077638ba0d64b6f5ba09fd5245bc1c374c94029.0.tmp

MD5 b6780a8518b28c60ecc5234330937e15
SHA1 cfbf5d92f27806c2544bdf7623c49c838712cdce
SHA256 a73c5e93297b33f939e444ba7bf893108ef55ecbfec2c554ffe941cf2b83f99a
SHA512 e1a2efc3408ead784a6dcf0a52e8338b94421c7d800d70e955aa1642e86274e429d151b618e92308fd9977bc25b0304df8b7da6e1f552c8616e32474a14df97d

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/5ffe02839b48e2ad62d63334f30894348d8bb675239e368119f32677821a3d7b.0.tmp

MD5 5bc119305b51fae1c4be3eb42deb5d50
SHA1 50eb69e1fbfcab9068f46a9791bec075037acd68
SHA256 c993b0a54cd8b856e793868aab37c5b866f0e6648f621c1d21950c99acbe9d40
SHA512 61a63223320965fc47164f4bfbaa5a8d3b7baf76cd03853811fb12b284636823e2f79e8b97eac231728a1c62017688893a083f85bb2f4a17c40d21e6f50011d7

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/adce154054f23d0bb64d51308b681ed00b55fd2e811b4bae233fe63942b076ac.0.tmp

MD5 4ff4f7639a997c5a165bae6f63341a7e
SHA1 c454f802587bf619952d77d698c1526fa199edc0
SHA256 851d88f664ea0196cedb7b10f27e8e3d77c6b4e6fc3a60fd65d3f9e7090fe8ea
SHA512 4c7f539d662ea6b510ea8a32b96b61fabc26931d788469fb1de25259836149db285fe54d1e844092b8d03e55cfa7e44f69baaffd6ea2f65737a73d35243c50c1

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/c7ac6e6517cf208536238974a634e69f194bc7bb19fc16b19a7456f60051e13e.0.tmp

MD5 b5dd3a65057c474b3029beb584f02b53
SHA1 f32eea19b7f55503b1f13cecc494040e419adc13
SHA256 5f523fc8face898d3eb8e787a5558269ac8c148691f6d0f9d891aa5154b7754d
SHA512 a824a9129d3696058261dd2b88a5e7c2ef00de0b21a5e92a0f36d6d55c8c25abfdcfdc575a066298b1d48d77c45a234748069b537a87b5b7f4472df9acb4cb0c

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/2fce72825997b7124ab5f7a767a2957372eb0c7f52d443a7a802f5f27e3b47a9.0.tmp

MD5 3533c34c84613d4e7de1e39857dd2383
SHA1 ea5ca1db39fada58b83df3e4ad3174af2ef637a3
SHA256 f9eb8a45a6062c2e9e07902c0a84ea86d189f428ba0fe3208ef2791775711390
SHA512 b2858a4e673f6d8c9822a14114e3f18b4442a6de3af36db7973f6eb9df6e25165a2b9a16febc8ca4f4c7e076019f97b566b733ac490106bfbab39a27fab167ee

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/7929669b5ec261e06387dcaa069d24e3d190bfdd1ee24b148d173fdd973ee97d.0.tmp

MD5 1fe17f0bc19af51bf6ce301de238a4b0
SHA1 59ee6b0619131809ea11f90c252b631758d53198
SHA256 bce53640b1954583385d37d2b90e5ce0cc26a370497df4db5b443309294510ba
SHA512 a7268d90207d568bf6869948e44a0b38c26dcb7e96eaf6d55c0510c04e18351c5b9be8eaf0204cac2199d3aa1e72cae6dbe88329c72c18e0417275665bc61251

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4f82a16d7e720e1ef9ac993d78ecfbd0947f44591b8fa7d058a07e855942c307.0.tmp

MD5 6995e5a42a225d9b93fa5c9e32caf22d
SHA1 d6e7c62738d077608074b5643c2eb269cbd04bf8
SHA256 122b573d73eb0a7e44e92c39d537726de02ebd4c14d0bbfa6dc763ecc14f75f6
SHA512 1c88abd341e79ffcec6a6c7c882a743fe5d2fc160aba5067117597ffc4ddad4c3ed226aee611fec010123f23c2a928fc8c35863007e9e8d9b63d871b52ff97cb

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/89895897ee5cb6851f4edd983e9d9a1d113c8ee1905c6939518c4fc89dbf53a0.0.tmp

MD5 add61dd1b9bfc678fef8f6284c4368cc
SHA1 b962f45f11a8b4b89fdbf10617608c9898f7e196
SHA256 64ee173c2b91af4f1aff002e66ab320530a7f6b7a8f0fcba29a7ee495ceb21c3
SHA512 2dfb7df41aad4db78b684c0a80af22b19d11097273a35019357784331539181f783b7d273cc6b4a529580e985740eb5067004b20a96e4b1ab0182b0d095ea105

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/8b7b65f0d1a4b4286743204fb5c70a1237ffe409f3c9d962ef9adf36e0960d6a.0.tmp

MD5 e7815b598d3591b2d97ade2369370a41
SHA1 21410de635ca7a003099983a4f08814b15692bf9
SHA256 bdcae776b71f70ddff60d9d923ebd4a215f84f1d94b38a90a62e75443d03cb8e
SHA512 344ecc080aa86d941f4c0ddc7dd3253af7157cec268afad2ebaf08763e80ba556b8e68ef585401b1f5ac125257a8543c8775c0f6322f592acd9760ec7f89e320

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/d7819d65d4398f7986e00b11f311db839c925457278af698e25431ee03a20fcd.0.tmp

MD5 c12b5ad0a50ab563aea0b079874bfe23
SHA1 c116ca448dcd9850ccec9efdbc7a80bde258dded
SHA256 81f794bfef74ef96e2b0529d0b31b9279026185d7b90bcf3180d4760c6c4d875
SHA512 d75485dfe2158108e878c6ab719e5666a68f38af8f74ebd793c20ca11c20279715cb000b78616deba5640e0d94681decca5f720e0aa3752ae555a36b6d24b74c

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/f7d9a830c7f70fa256357759e91523714c031f46d5e577d04ce66722fe98ba59.0.tmp

MD5 4d34e09962dd4566694b90c50f4f9a88
SHA1 b052cbd0e51e461ebfe240f53670b5097edf3b33
SHA256 697fb725c9a312d56d0008fcf2852c3adb067906b031e2f11b3c8a55eab89c77
SHA512 a0ad47d6031ac5a3c8162246afae97dcc7f6d2db4b7e112830036886586f5eea055007e11137a5e2d21bffbeebb620b27da379cf08798e8a6eed778f1d1e6f79

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/17c0c36711e97f04271a15a290d8249c75b2ec75351e194f66991869f538da2a.0.tmp

MD5 5072c5e898bde42ce8735e03e65dba09
SHA1 77b9026a690df4f840615755219e78f97afd1976
SHA256 13e2bfa200acd5bfb43d52ef4adfd1813ab6dad86387f57f37c282250e89ecf2
SHA512 33e17d8989fd3c7094d7a5b72fae20e98b10698dfc939166ef6a267deb83dd32dd15f2e3898ef46b901205a4aab852b8fbd5cdf427c78972d96707a921699911

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/e4dfdf306519dcddb27e2379a79770a4b7c020eebd303921fbce28635ceaf7ab.0.tmp

MD5 37e7810485ee9d61f714001dfe536ae4
SHA1 1b59cb49bb85f7aa4ba1591f8ecf25be544880b2
SHA256 327f9789c6cc0b5d3cd5a39e8e0ea0efede9073ca0b1dcc115ad8c658d130f7f
SHA512 f986b5e527cec07ab0fe30c34cc6aefad34154e281ea4992c422ebde680a724c2768d76a18e2977fbe7f7cd066659a9b04bc479c7f9bd77f3e6bd5e1230e527e

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4cc7f244fdcb0f15e7b539c9133b3d656a512e563892e4b1d7c2130f50a1a223.0.tmp

MD5 f5c40f078e7407842eafc212f0d4bf3a
SHA1 980c70ec2bdd91a3fa9fa515ae6f1e9646305e29
SHA256 9ecfc5df7600dcc8c1e4c85fb18918bc211c0543c45fa972218ef731a1514afa
SHA512 bf687bb85b0a29d7b6491e7f2805ed27530fbb9128b8464c68c431585338a051194585ec4d7a0dffb75d64ecf549ae76603cce3bcc9bf064ced9ccbc7a235699

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4cd245cabdeffd48ac288dd9fb0bb0d2d04b16c123acf11fe4588c2400b45c70.0.tmp

MD5 3dbb6421c4ac802a673f95f96d45ba62
SHA1 e7f986d439a712774dcd396c381625e69a8b83b8
SHA256 70ef80ec307449b9a7af0db01fcd5f02ff7b9722073e4eee5a62199b23c02219
SHA512 1909409cc25bfd558bd0be53b8f6d705e0961c249bf51d005d92cff98662f8cd6df7064863e1070a9f3ef51bebf7d92bcc1f62a0db8ec90a17b2ec1b2d827722

/data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/0f95761c5a765ac3741f1dcc83f25b9559b9d1fc3f3a492d3eb2b82f5f42071b.0.tmp

MD5 a04804d01327bb8f663287842b7eee57
SHA1 9fae117631782644e2aef222ebb3323d6dbda2c5
SHA256 8a3d0f1392d41396009a254f5eedc6a63261601bfc2354cea87d10e3f5eeba8a
SHA512 ad4387b5c24870af998396294d0342bf92f22253088478a4c7125639f110e2ed2ddf40e6d0d87428fcc0eb2371932b8bd3b0b4b5b935f3dba631351bf9dd0410