Malware Analysis Report

2024-09-09 17:54

Sample ID 240613-pc1mksscmk
Target FlashCast_1.2.2_APKPure.apk
SHA256 68a42cc171c91bd585e3355fdde8598b897396af9cd54aa712b9ed53a46d7cef
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

68a42cc171c91bd585e3355fdde8598b897396af9cd54aa712b9ed53a46d7cef

Threat Level: Likely malicious

The file FlashCast_1.2.2_APKPure.apk was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Reads information about phone network operator.

Makes use of the framework's foreground persistence service

Queries information about active data network

Requests dangerous framework permissions

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 12:11

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 12:11

Reported

2024-06-13 12:15

Platform

android-x86-arm-20240611.1-en

Max time kernel

177s

Max time network

150s

Command Line

opasc.flash.cast.yusou:AppMetrica

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /sbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

opasc.flash.cast.yusou:AppMetrica

opasc.flash.cast.yusou

opasc.flash.cast.yusou:AppMetrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.200.3:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 yandex.ru udp
US 1.1.1.1:53 mobile.yandexadexchange.net udp
RU 213.180.193.198:80 mobile.yandexadexchange.net tcp
RU 77.88.44.55:80 yandex.ru tcp
US 1.1.1.1:53 virtuous.flashcastapp.com udp
US 1.1.1.1:53 api.anythinktech.com udp
US 1.1.1.1:53 da.anythinktech.com udp
US 54.204.168.214:443 api.anythinktech.com tcp
US 1.1.1.1:53 hologram.flashcastapp.com udp
SG 47.241.109.64:443 da.anythinktech.com tcp
US 47.252.0.251:443 hologram.flashcastapp.com tcp
US 1.1.1.1:53 firebaseremoteconfig.googleapis.com udp
RU 213.180.193.198:443 mobile.yandexadexchange.net tcp
GB 216.58.204.74:443 firebaseremoteconfig.googleapis.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 1.1.1.1:53 datk.anythinktech.com udp
SG 8.219.118.113:9377 datk.anythinktech.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 1.1.1.1:53 aa.birdgesdk.com udp
SG 52.220.166.167:443 aa.birdgesdk.com tcp
GB 216.58.204.74:443 firebaseremoteconfig.googleapis.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.7:443 app.adjust.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 1.1.1.1:53 pitk.birdgesdk.com udp
SG 52.76.64.106:443 pitk.birdgesdk.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 47.252.103.4:443 hologram.flashcastapp.com tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp

Files

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/opasc.flash.cast.yusou/files/.com.google.firebase.crashlytics.files.v2:opasc.flash.cast.yusou/open-sessions/666AE247028C000111A20F0BC51816F4/report

MD5 f574fdee04e52b949524fa874f7352e7
SHA1 39628047f3d2aa7a551f608aff0e456506dd6432
SHA256 fa995a1fb898812ed8b0beba1956cb3424c478a9b526cccb98304084fef21d17
SHA512 ca97018d9b4082b702fcb07f464469925dc85af5a1848c9eea54944e6f089ad724aee4ebb18283412f14da3995be56ee80c794802f86fa623b4526dd7ee9a437

/data/data/opasc.flash.cast.yusou/databases/anythink.db-shm

MD5 9d18cae1f76fd8c9a7886e1cf31bb661
SHA1 1da5ff1c505997176a379767bacb07362485fb26
SHA256 e4d2bc64acf1c931381d8d0d5e5eee88e024825f98d96f1d71fbf284ebe08703
SHA512 86074a25b2bff0801c69473293af31c1b6eed25717d9156a573b84e20f61cfda849f546028955be844bb22dff9daab5206d138b6ea8303a63887b9c2403db825

/data/data/opasc.flash.cast.yusou/databases/node_db-shm

MD5 1b606a86ca789b088d17f389668c27dd
SHA1 28afebf2f7a6863ba4d77853fce498adc90aefb2
SHA256 916b02bf26e591f620b936e81316810ed59c450ce286e7c7a50e5ea617492e87
SHA512 a262d69fb0734ff2da16654c3143d5d232837ccaef04b584d36047fd4e1ca66567fc10b8c0251f2ea9610a909bd063c028ea12428de9a0da97967d59dc9274d8

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-wal

MD5 c337398fc8bf14897b4c885687e83abf
SHA1 6d78879baa3b2dc3a643c677e7b1d9f82d413c45
SHA256 358df708bb6ebd35fa02f900a59c54cfb51294f4ee96b95d59f25a87b144fd21
SHA512 dc572896664378d1f00306834c88efa574aa908d28ec4faeb7b76769396e004492cc50df522e2404cd7a3612f65179860ba69f4b1ef2cccfb2c956e1f4cf9754

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/uuid.dat

MD5 3bb2c7f51217f04478db3dc083f14aa7
SHA1 257d23accff10f3b6929a590c8dbbf7ad3e809e8
SHA256 28da9c40bf35c5b90c1d26a27d7c4f575e8d72b8b6f496c2663fa68ee927f880
SHA512 215a8e2a3b3ac1945e4b841e93eb794930519239093fcf0c04c2a92c73e5d6c7a1e000a90f3b49db35be87b99d868449f278b043b2abcf44f819fbe4a5af6d37

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-shm

MD5 c324a7635c21da23716139202f707b10
SHA1 6aa67fb8395652ca5c3d22b7fef2281602e1238e
SHA256 10cd29ceabd0cd2a082779a4c5b9633cc5f02c890973cd1657e60e352bae754d
SHA512 df70acf3fd00ebcbc3ab0a5ed14c535685ac3e2bc0ee4a64c129f90774eb0dce789c753692e92550f608ff036496c04472632d92d16befbc627a9692e3850598

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 a2a05271560f0b44172db558c66a4559
SHA1 7908c12f55950e3685eeb9f3c26f365ed886414e
SHA256 ef48624441e11fde8021c069baebcd566ddc7d9ebcfcd40b371a8d262d188d92
SHA512 4489fac66bb5b7644a4e4158a2f2b576263069754cae8ff121589c022e105cdd784b9e5589dcb531da82b98d9d20d66467cdfa0b54b17c507ea2c14a9391707e

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 936078de5af28d7fa3d96ed1769b0c1f
SHA1 44bcace7f4d6a290a0b8984451b07387a4f16a5a
SHA256 b52497b845e4997751c7331272655e65360a8c768e0bbfde77853d9866bafc3c
SHA512 b68c604cd08041d7d2e2ced0ec9b25d7ef28a32d5cc125a630b27eb4d89460d7351aca0eadc9f22282985ddd1e9a1e4986be5d92bc654fa4b62d7e3766fdfe67

/data/data/opasc.flash.cast.yusou/databases/tramini.db-journal

MD5 72b3af5e63db2a216bc9a384043a764f
SHA1 d88969ffa17bf95d123c343de25bb357aa8de60a
SHA256 a3590f6231969cb0280ac36ab4f1b6780f1947bc394e82889793a90613ebb575
SHA512 940b10943fda755a3e5a649f5b293e5e427c7fdb2c6ec0de4920d306f14d78f21c026d24c4aa8edef8983ab4f04b450a7a769f1e5786bc8178121b4ca7bbe186

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 3d5bfa13d420b2e925056074ae7bb71e
SHA1 3b72caeae96540bce1cc6fbb6e1a26ef6a2f7ee8
SHA256 35f82db3a004c28be3782a3268c811979a330b89da0408d2187ceb6afa2cda90
SHA512 ec6e13e2defacb5c4ca837354570ab500bdf7a84ec7f9006fd468152f1edacf26bc792fd88c8ef421e48fe5a5309f27cbd34ff3dde114de71a6194e2fdea02f7

/data/data/opasc.flash.cast.yusou/databases/tramini.db

MD5 1923166def729d2deb43ae6bcab17a3f
SHA1 747cc6806e019aef5a4cfb2741c931b7d5197644
SHA256 5abc3cfeae135d09d31b304968389dad3f18854d8abd3deb6060287250e26de6
SHA512 daa3073c735560faed4d697b493a14de5fb4afcf007e8543251ed163b7e1321a6aaf1a801d70ee9e41e9b0e1d1d0872945c84cec8cd1f837eaa4cb2b6c9c7087

/data/data/opasc.flash.cast.yusou/databases/tramini.db-wal

MD5 8aa7896a76b935477b69063993f5d979
SHA1 345d9a03b727970ac9bcd49eb8145a9a76333c5b
SHA256 7c894f867cbd3069e7679c33309e61035be6d7e57f6a99e0e6076494d43fa1d8
SHA512 88f1674bd3aef7c2da5d5b870df516b4e5bf440689f8e7b42334126482a0e2399546aa421282ca44e8c8cbe567bb5209314b9a19741d5dc360fbbccee5db1aa4

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 aba0d51bae95723dac044b437dcae2fa
SHA1 e0235e44d61db9556265af7494060e638e663c4b
SHA256 241a4e12bca56a90a1e6d8642e991c79745e0e639640c7cb55afdbd976951262
SHA512 8a970ea933b420a199bfff45aaecec53da15e926eb6fc04bdd2f053f2ab90966acb571036b2e2eee95132a22d3a31c6d85abb0b9029de746a981c12471f0dab9

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 8e9293c2fd7f424fab1f860294a8f737
SHA1 3930cee82b3eac00bb595bce854b1ee484084b8d
SHA256 ca96840448323c7a56e550fbd0108afbd4e4bb3a46fcdf2e3c4d130ed5f08778
SHA512 a40ffdbb846d8bac1d1fac8d7f62deccb68879f59cbd590350a63a39e0bf55ae71bcc6811b84c7d4176a0bbaa537280c995947c88f4dbd5616ea32a56f5572c9

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 9da42dfabc3801a6a337a522d9f7c9bf
SHA1 870378c963ad3502ddf5be1fa84b3309a8f8120d
SHA256 4cd6fb24c4fedb939a2d2b88bf4263a00b5b2faf8a83e057a6eda866fcbe60b4
SHA512 03212781f4c04b175c56ba5d3c053dfa4929a04bcbfef72d040a72e50ad17ac91d9316ac9667f75a26f8b9418e5af4655670b3ce3956555459bd4e211fb96e28

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db-journal

MD5 27846914acfd589c1cd4cbbc001dd505
SHA1 5e9b6812ec931a56eafa25405e8a58013b447e06
SHA256 86fc68a954548eda2c7330fc1944415000e80789910382f0132e7ad9a6871362
SHA512 5b37039cd2e7796128d8e6f3161b80a740e0b8e4268d568039e6abc482c7ee97fe3fba1ff980429017b29c4cc9429b44894196cabc3e6665f4b0a012a87bdb5f

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital.dat

MD5 5c04b121747857ee634f7538ef1a1e0a
SHA1 3ad098afcd46e57cde68bcbb46ab1e021930f2d7
SHA256 d60d9714dd0e3bcb0b426420f08f9fa6676da479f866ff085608bb92d32e6ee5
SHA512 34f2fecc8875b0b83657a37e9eb068a9ea9028bf61d8d269d08b465691bb7b62306c128f2530c27f78dd55425e6bf925b4e8c1c87db3f565c8266e9741de13db

/data/data/opasc.flash.cast.yusou/files/frc_1:480232125834:android:2e10a31700977f346b8473_fireperf_fetch.json

MD5 80d6b9d0626086f0a25cd79f7dbe4171
SHA1 c3bf8b3e95768ff765e9d07ccce47daf4e6268a1
SHA256 e9be607a31926a06f8e7c8a863ee1281cf566dd701b4601c8adc30d1c231f33c
SHA512 920b92533527a994cd794219d56c3737e59d7cf59e0668b7448e90e7092452728c651523e424a7293f4b18ec53e24f44091f3bd6e6c20cffcd7ea183a26ce2e5

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 71cda0838661fd704c4d1fb06b3baed1
SHA1 e6b81d6d6a29543c725a4266e93369b9fdfe6f77
SHA256 5009345897f0d422415c3269fee2f73032a01a3d3d56241e68c5ae1594b2fde0
SHA512 733705222233904f109f5f7d0aa645e5c3c38a5f69d9575e633718e298cf45fa9ef94a3e9e6d23c4780aae217ded450f8ea55b986136b72919092cc540c7a65c

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 f4f9862eb3477625dd409b634c00acce
SHA1 d040aadae73a93d926737c6dff86c272cdb369a6
SHA256 de041a1ef73a9a1ac77e472630caa86702cf359b760a3c86dca9d8cab1366a82
SHA512 834acdb4db6ba41630d6c875ea9e9b59ea92e7fb1f7dfe9f0adb46e12a3f98eed96b5dec79e5c45cdd6bcf6582319662eca8bd68ecf7c27ae786c29dcc5a84d8

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital.dat

MD5 0e8b903325f661bec1d2ead221ef0e94
SHA1 cd523422d09e10da60f6a2df62a208d1a63de4e3
SHA256 e4cdfc3b5f26f5460ae18db980449a39dc44cf87e71891353857336c13b73d14
SHA512 4fb7a6564907fb24f7c6e0df826a7fb1bdf86c8cb9fe35da1e00990be0e58e971b5cf1b06a47a33a029b1e50d6fb306c8777408dcc247270b62963cde2a085fc

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 1724fefae52bebacd0f728ce63114e75
SHA1 f698ec3fd0cefc4f9ee88b4ba63c9fabcede9fa7
SHA256 ab5c51223a9742503deb571a2083a6a7e2ff121dc94b7333882ff417dd6a3698
SHA512 e24731220ad7ab79141b5fc3df3021418c2add3631abdf57aa4502e7673b7d7735940f128309760d1feb9a7009f6de0cf5e1f5c07ed5230510ce2136f2194475

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 cb561bba7e6d6d6fe41284b9df083efc
SHA1 52adf9624084099878172beeaff33b7e6061750c
SHA256 490e4e5abf360326656ba19b3c8e4697ddeab361537f7160c9af0c81f5eb025a
SHA512 dae576c865abf8ae0415e171165218239482781bbea4dbbe768f3d0f08af9915cd0e78ec05713cd9c66c52a5443649b859c01958bb4ac013b551b6b254895cb3

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 48e72f96b042ad55d22ac0e258e9aa70
SHA1 9ef30f3094e482ca0d3b7b3da0355c769d0637ba
SHA256 f6d2a8466c3c286ba86c9370d8389b07122b68f795ca030d317bf5a5eed3667b
SHA512 0f633eb2de525efe17c9eaaac8c5ce51c950ae6003ae43d597013897bec4514a6f83f415d319e13be7fd2b689d5201c042e804645ce69c509c1678329b834ee3

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

MD5 e5080b49e90f1643dfd8ceb844100088
SHA1 f1ca8e6e721e32d3de0a93cafe24c00276ba87e2
SHA256 882fc44b2ef06e74f79242c9e52459f3ea75812d75007930251d64006f912246
SHA512 ac40e6246521de3f37b10c3ce6786d353449f01d86c8d6e646f6a7a4391b0d733895fa37bdc7cd93d7d58c483362666eac46c64cffe239d6e53df987aea611f8

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-wal

MD5 d4de98e54970e841dda096e3992b3865
SHA1 e3ceae11eb25de7c2201681450ec2d7b3ce36352
SHA256 4cbab4c47a4fcc14fe405a8fe512a327d7602d51a128e1a4614bd1a974ee1e85
SHA512 be4c1a73a9d786a7a7c18c502e3f4bec6b6c0bd1f04e9dbdf88630a23a001e0447ddea4e4bd56b050490edf8a9a8e2c76894d4f8029bba8ce52b3b9a3d97f410

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 19f42af9153029ad36713ddc1bb07e71
SHA1 cde202bd0987a9e9e59aaf1c5cad525402de6e0f
SHA256 bf832c78ae899a63314997e4bbe13c43085086c819c0abad350c62b5471caacc
SHA512 a56385e516bc5b15187c645b33479e36c50271cb176fdeb8b1d4a68de714b9aabdd7e8d407caaf56bfb7f4d62fcaf6338b950341216990e802f7665a2cc812fc

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 fa0bd763ca46f687494e76471cde6c90
SHA1 3d07f927ecf006316697f0f3cf892c9b2e8d3e3a
SHA256 2ed631276f2c76b5c13fd2585f14dc91041ee5dcd28aa38b228ec76924fcb162
SHA512 01a829cfbe4b84436749818293b0438e8b7adca5b3ee8e45fa93932f82f4d09287d7d2da3dd44926f178bcd91a7ca88041c9a0c68639261763b32d8354d13fa8

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 8b617b73a7c0c06bd393868fa8eaf5bb
SHA1 372b9366ff1acbde439a833dabc08c85aefba82b
SHA256 c5ffe4055bf9d736da3e14dc8279de9c272fbe33fb56493a54f1c3e1e803e632
SHA512 cf9dd7f82b0be3dfa14d0c1064552f0f1953feeda9c22c6a8b7050847ecf1d121982bd03284381cc5f72efea020f8f9bfcf8b5b4ba3e2e00b9021b2a85f92d6a

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 3de571cd8d05b71e47e5f2ec095a2d27
SHA1 b3fe731c9f82f5ce2319397be7949465428de3d3
SHA256 3ba3e8e0b18be960a47b20fbb9f2306ca08de231b91e46cfac06b61f7fc306dd
SHA512 95de04d435a06eabbf3fe87c0080ad96d1d079acced79b0220077c6a9a5e46f28482d8f00cdd6263364b88fa232b8e671eac7ebd03c64dc72c4b804a0ba080b5

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 e0211ddaf47414d1af1b2f81138f5885
SHA1 196c40b9ffe9dda4e8ae8ae9c8ac8df231d566cc
SHA256 3372316b788e3de92ffc02a1c6d1e0e7c07a45abd3b18b98faa9e3734899f925
SHA512 e2064e512a9330b832b6e7b6f8a320c52ae4d15d584fc258661520ed406a8a21f58fbab3bfa49d18198b0a932bfc2a470c8b836a0fb5d5536487c3a51cf4f8bb

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 4277c9e1c42b11f5df763a4a216f9ff0
SHA1 e7e67071f8a72a4ce9dd1ffa137c1f2df7df924e
SHA256 f0747cd8a413b27e3e6ff8f3e5b5d0991c7b9247fba2f6d1b90bd96651e6c205
SHA512 7cfb7f6d591ed3185ef7bd2af129fa36a7f7aaf69f24b3d22429efc3e3ae34cc76208870c6f907d6a08f1a4b27a5c1b422eb70fb66f107f176683732b9cd1d65

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 673eeac2af099ae1fc14a899877d1c29
SHA1 22e6945acecef6aaa2c363ec63a8187e5491df15
SHA256 ff92ab6aa282c849b922f2422dcdb93536421fbfc2f2e8c23f2678f3563e9dc6
SHA512 35efbecc75fbd155802c02870827aca6eba1cf1fb8587a6396e9af6fc942823329f2a77e45f4b06dfa2ff5d3ed7112ddb4dedb3c736cc34800fc4768533f0fd5

/data/misc/profiles/cur/0/opasc.flash.cast.yusou/primary.prof

MD5 f96fbf532e16530de6cb25ee37805fc8
SHA1 b3cca05f470dfdf03ba5d6c4d7a5ad19d690d114
SHA256 2dae0919245d76ddf4cd0b4a9d21468728b2138b5356b5af7dc240aca81752fc
SHA512 f301851d3d2f7bcd304437f462be0b1475200180f0fd2c5a7e5202e30b1161eff7dc5c6265481547352fdd072df86309b28b5e383a2e3368a43edbc62d184c46

/data/data/opasc.flash.cast.yusou/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 4703ff2a0b9d74fb4df5dab76d21163e
SHA1 e0e292e0c396fbb302e7a0dfff51db80f392dad8
SHA256 610c10abf23e07e82250719ac24d2e69413ddfea2170464c06afa385dfdd4abb
SHA512 b8a9b00958bb9596db557566fb138879f578419d01178d201c98372f6de18b3f9a11902fff32ec7f69d1bcf7ed0307e323d19ac2d3fa433c491a670c1058eacc

/data/data/opasc.flash.cast.yusou/files/profileInstalled

MD5 d49b8fac535993773e97d10d25942257
SHA1 db5e191e5f99547932d5abe579c0320ed1fe50b8
SHA256 11ecb91899037efaa91fcd7b35dbc105d74a585c86c2c9f0aedd819dae5a7535
SHA512 d85a91618a8f714765bd5e1d3c63e105ee4437cec6fb52bc8b4ab5cf88ebc5fc45f8df4bd1111cf1f8ae00cc82a7c87c41cd9760b2aefa503b929263f680878e

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 6b4e35ae5ab6645797935db7f94423ee
SHA1 26dc56a8e8efc6355be85427a8175bba18943d94
SHA256 304cdfbee23fac8e3f1d3fecc87fdd3e12c57c3e6c646c8f88a6a1285e14b3b0
SHA512 dc0f45817549eb1ff9153f3b36671727c5451755ffbe3caea7c58e62b7102e5fbdef534cfb8573b23533b9534c9a2135ca6ea9373b4f5e4d8e623dc1684a1272

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-wal

MD5 6342a2d4ab32578c452d237252f2ff45
SHA1 b65c6b6b19bac42d3088a51cd95f5a2e87ff6646
SHA256 d5617e64c80e63271b71278d11c95d0d72c53885f8325e89c0653658308703cd
SHA512 eaac02b93308b760cd61c22ac1db8453534c08d04cce02fe8eb06589701607e145ca72133d4cd71c9999f570a28525de84f0efc1658c0a0572a93797ac5b0340

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 b7c4ffc72f1a95647af4d431e7cae7d7
SHA1 3251c020cc4dc0b46da41a7270e15830d1603c98
SHA256 a68f5e681d1c9d6db79e95d79bd635460fd2dfa2fbd3dd1f50e90690ffb6b300
SHA512 a4dcfc65f2a1add85cafd1151ac6d228a12d125f14052547fe0c04c4bf13e9fef541cb08b2cf9af44f092407072ea62d6b698791fc2b3f9f7cd4e4c13a266971

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 50fb445af35603400692a8b123fcd03b
SHA1 fbb9be5687c48fb59b939fbd30e83a68601ef7c6
SHA256 b1385a16df7916a24913b4fa90dff0f8adeced8ed7b2432316dd9f216b23d9e1
SHA512 04a70ad5374d39832ef437318bfb6570e20dbbb4f68df9b392b057e66bd83b60a409b15e23476719c2120ed36deb579a1fc33476268f3d96295cba76134aaf76

/data/data/opasc.flash.cast.yusou/files/AdjustAttribution

MD5 a686ff4b3bc1c4ec7676652b5b0ff109
SHA1 9cdf4123d9a1d8b39bbeab21ce50eda963b768eb
SHA256 5abf64cf99a13e341d0703e3f830f44048af0702cd37f703130b6c7a16d3ee05
SHA512 aabe57137a94b39a960973cd7ebd42ca669a00dfc0df4639059ae9a681cecaaf4882d3d6117fd8a7d174fe91131066e52305520dc7bad586ef8f6d1c2032efbc

/data/data/opasc.flash.cast.yusou/files/AppEventsLogger.persistedevents

MD5 9e9d19cc92e28de355eaae2aeb058c96
SHA1 5e936457c4aaa435550165559226555ca24abb0c
SHA256 5e71faa6b172489bb76376052930264db5afc68ba32b9acf8e8ae664ef179fa3
SHA512 b2bc13431659037677c40f0f0cbe4b623066c9cb85ff751c4480473fdcb158acab7ce7ef3930ee986e6bc7d9caa050ed5933ffce7fc04b72471e02e075b12eeb

/data/misc/profiles/cur/0/opasc.flash.cast.yusou/primary.prof

MD5 a13980e8aa6451cd8cb59f5eddd5770a
SHA1 d7247858a31711bf8589ffb1c38ea98b0f26992c
SHA256 812836be6cd8870927a454df37452d45c489812e8e4604d1d4b4db463138bf6a
SHA512 c07e1ee5b3cd00ff0058faf737e602ac1b122a86f9445135d03fdeb24f9719f77d68c6049fb62996de594d4f58cb9edef3ddf9b0e0c65e6c9a5a5c42569530f9

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 12:11

Reported

2024-06-13 12:15

Platform

android-33-x64-arm64-20240611.1-en

Max time kernel

177s

Max time network

178s

Command Line

opasc.flash.cast.yusou

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

opasc.flash.cast.yusou

opasc.flash.cast.yusou:AppMetrica

Network

Country Destination Domain Proto
GB 172.217.169.36:443 udp
GB 172.217.169.36:443 udp
BE 173.194.76.188:5228 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.234:443 udp
GB 172.217.16.234:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.200.3:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 mobile.yandexadexchange.net udp
US 1.1.1.1:53 yandex.ru udp
RU 77.88.55.88:80 yandex.ru tcp
RU 213.180.193.198:80 mobile.yandexadexchange.net tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 hologram.flashcastapp.com udp
US 1.1.1.1:53 virtuous.flashcastapp.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 api.anythinktech.com udp
US 54.167.205.39:443 api.anythinktech.com tcp
RU 213.180.193.198:443 mobile.yandexadexchange.net tcp
US 1.1.1.1:53 da.anythinktech.com udp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
SG 47.241.109.64:443 da.anythinktech.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 1.1.1.1:53 datk.anythinktech.com udp
SG 47.236.140.163:9377 datk.anythinktech.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 1.1.1.1:53 aa.birdgesdk.com udp
SG 52.74.222.201:443 aa.birdgesdk.com tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
GB 216.58.212.206:443 tcp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.7:443 app.adjust.com tcp
US 216.239.32.36:443 tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 1.1.1.1:53 pitk.birdgesdk.com udp
SG 52.76.64.106:443 pitk.birdgesdk.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 1.1.1.1:53 firebaseremoteconfig.googleapis.com udp
GB 142.250.187.234:443 firebaseremoteconfig.googleapis.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
GB 172.217.169.36:443 udp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
GB 172.217.16.227:443 tcp
US 162.159.61.3:443 udp
GB 172.217.16.227:443 udp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 47.252.0.251:443 virtuous.flashcastapp.com tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 142.250.179.234:443 firebaselogging-pa.googleapis.com tcp
GB 216.58.212.195:443 tcp
GB 142.250.179.228:443 tcp

Files

/data/data/opasc.flash.cast.yusou/files/.com.google.firebase.crashlytics.files.v2:opasc.flash.cast.yusou/open-sessions/666AE23B02650001121C86ADE2D3A197/report

MD5 a55261e0d611a84c4375af77dd44cfa2
SHA1 16a2adeb85de075b5b39bdde5e7ee43f46f594f7
SHA256 ba989b3ba63a2f419c4ad74da74bf346bd9681ffc9b662fbb1b05dfbb0177e33
SHA512 df5c6361f81c3880965e62299b0620441230aba14a7f1d855b633951ea384b76db6c38bf2b458e0e49e462d831472f7de4d99e07d95282df9749a995e085fccb

/data/data/opasc.flash.cast.yusou/no_backup/androidx.work.workdb-shm

MD5 8e4d3f8f48cea872fd24de9156068a3b
SHA1 4c595741793f8e379df1d65362339ff2436212a4
SHA256 40fd381b34bbd4ba761818145764839a56805e93078ee9e8868f62599949c7ed
SHA512 e156a7840b2cb05ee4022801abfb4278a1e1a851e14d25d7777ab8cb488ece0d7de63ef253492bc22269e50bd54d88b510732245bc8c6f2e9485fa87eef76f24

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 3b9ddddc2808d6bb1725411645836380
SHA1 a61b5bbe253f4714947701f58811dd855744f558
SHA256 1c5be40c85e2dad124c88ddeb8c1e5e57437dbf6b81659db67677ea609091755
SHA512 ee9374e799842156775a289c1666bcdc47719f150bbfc75deb08c41cdeca7cd4d7e3767f6ddb3bde4dee680acd09a77a9b0aa3e1263b2e09fac81693adfaa5ab

/data/data/opasc.flash.cast.yusou/no_backup/androidx.work.workdb-wal

MD5 2d2ddee4a19fca97845197840df82921
SHA1 ff140b00aecd81456e41db751e8fe1b17badbc22
SHA256 a225f96ebd657bddf517176d1595c8d1355b577f35bbbcb367e7f8408dad7c78
SHA512 853455346da16c5d1152d81c84ee6739c170f1c84c55be95e29aa249dbcdbcf8ecfc6afc90098ccb61d340d0eec63d709d5c39556d2cc2967ab17fab1d408c98

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/uuid.dat

MD5 eb39ce620dbaf9e1cfb71c8c5bf2c17f
SHA1 a61b4f76545b59f2ba3f1341702805856b1e01da
SHA256 2234090a0a04ddce8eb9b271816f30f42be1c87b7583b509bf3ec8140f9cf79b
SHA512 d9a04a7cbf29b50e296eeb45e9f2f3864a9fed5671778b7b8d4b51e4c595e85e3c1383f8a6b5b3ced7f38a1b845e4a5466edfca2e0a2927e75622a657e939c21

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events

MD5 bd72f1b1122edd60ff7b607c3693df05
SHA1 56562e64faf893244cfefbc8eb2cc1855335ca27
SHA256 7a23825cf50398701de9ff09e7dbea42699d901e973399c90c417c3db2e38bdf
SHA512 e2718e8746463171991a3d0f8258ca86637fe0253cec30e42dbde2eb5e4e33f7176119fed1ec2c47e8236acf46435d5dd72f119d33f0f2763bee1db789f269c7

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 c2931bf090e0d2f31074e66c3f4f5087
SHA1 62b8fbe4c4e8959ab03f4c796b192ae883aa6c2d
SHA256 fb8264b84912bdc4cc0227a94874961ac3689ed4f15249cab3c45c3d5eaf202e
SHA512 4fa8ba7b76f043da62fb035068d732e42a5b0d1c04f46f2b7d2bbacdead735721c13420c09337bbd318f76c36c28d25c622bb4d14619c34ef848ff042cdc5fad

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-journal

MD5 baa1708c1eedc6a3c93c19cee47d1e6c
SHA1 58663e054ac86d309671b134b674d4b9118e5c71
SHA256 d30f6c838417d3a765e7fff4ccc071938ae75ba88fa86b4478b08b84d47a3562
SHA512 b4b6bc97832e0914e4de855799b1206bdf31d82f75e18d0e01fa56581a7a2bef9463d546309c0b31d000e941d764efee83903c11ceba35108e40725bce7f0c38

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 4f8819fc9825c79c5a50127752e218ed
SHA1 e7099c889e222c4e0d7c3cf0efa5e9b1a68db8f4
SHA256 3a4d5c4d14b7bffa7357fc702b90a7612b57c888263c60038df934a8d7e58a6b
SHA512 26dbe818516ba4c1c7af7ed52f0752b5bb380dcb49668b994abae92faa035ec09062a447db1bbe6339b5dd3afe8189db5b169b28576e4769cf63ebd877427f4f

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 6d7dcdfc0456a15766a0faaecdfceeaa
SHA1 326208d9d28e638e1a4d5ebf4bb58fb170e73262
SHA256 280a558b940f43919115125dde057ca8d7415bddfb0576432f304316fbbffac4
SHA512 6cd93703642d705f09ed9bca983485907ef74e37080244b9ebb786e25bda26daada4c8c74f719aaa6748f231fd38a46f194eaec5b93c4f974f38e8d7cd071925

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 c572d5da414292517b984b02ad1ba4bc
SHA1 0a2f097e30f53560ac86bdd731b2cf4efed580e7
SHA256 67f22c409bad6190193dbe493fb7d69d8bac26d6401f356b0f342ea75da3b781
SHA512 55ab5fc1acd0ce0822cc6b67c1621bd1f52ce9ea0ae8d3a27a9d3ecf20a350241949da6cd2d70afd3463814a2dc3700c256e5687e0cf7f1d136fc62c5929386f

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 8810f9ec6dee6d941fee543b26dbbb43
SHA1 1d64a82f741a6d18176da9e4f6e405e9c5943885
SHA256 797da9ef77030304602482f0b6b5a669b9a418707493a50e4c7f85dbd614cd09
SHA512 b3e349fa4bb7f82d9d641a4bd630e1a28be4b2877157d5872b005a96f529e1fc14c6fbc919b3428800d780ff4e8699744e83dac12e111abc4c396fd4e2f8c679

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db

MD5 938bcbbd907f24d391c5878802eec9c3
SHA1 c472277d9546d200adf811008f04c25f0858eb39
SHA256 1fb56036a815387c4e8c745b391bd2508986963fdcb1a750ef2347550560a21c
SHA512 862b7f54fc63f0af2a10fb274c7cac0744acd581005568a8c13eed496869163fa2ee9ac141b98a01bf3dffb3cf5238c19ddf46696f44bacf5bea3924d029971e

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db-journal

MD5 ec22d81aa5caf903cf7c14e524531bd8
SHA1 a8d57151fb1bf834c3d8501dad27d106be690da0
SHA256 a8d451eb82c3c37f13decb37e41d4cd5e686ecea69c89348401f3fe116303410
SHA512 8bb57f302040d8d641a43387e2c039cdfd7615b564577b9687d833b6e99cf4bccec427055c864560b25e9ba3a5e73b03cd0909b32839badc530c18677002bb27

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 b47301c86fb7062a7a53c03b6f3bd1cb
SHA1 55f08334d18c279b29999e9cefa9733d0b4b19fa
SHA256 79cb179500ab2ca218215c7cb006e0b5d7059041334956a312ecab42f4fa8087
SHA512 c9e3cdcb3dbce1db41bb79a4a77430e07fbf1eeff18fe7497e1fd3be6ab18217cbbdeee14c64c220c2d647522d7a70f7e9dfa470b8fedb5c043df09e6268e46b

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital.dat

MD5 625a8cbe7cda46dbd8c31fb9749ac329
SHA1 bd36cb8547686339d91aa00664bc4ee123bc6cf8
SHA256 73ead7f6d60d9dc0d5de3e4ca86001406082aa2c91ae23e0a067d1ebccfe9486
SHA512 331fdac127e01d98fbf1437c46268732a0b136ad36e23d07b2ea53e8e5d93fec93866decc9c79275f8c3505e8d0db4b59249691029db800577ca00a5d8eb8e51

/data/data/opasc.flash.cast.yusou/databases/tramini.db-journal

MD5 4206030fce1ab377a566c6c40d0ef179
SHA1 fb2161dd46e05f088bb296b17f37820e47f52dac
SHA256 5b9e8e07d12539f842554f09a2f032a4e1a77d4bd21cb0673873522ce2d86330
SHA512 a5338c00a0d521b7c59a768b22cd217642dbc48ff2370d50becbc0feaafa7e95e5ef49c0b2937b299f2272f4c3f893029320f3e5d9fb7ff8aa3ef461d8c4620c

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db-journal

MD5 220c994fc7b8c76ac8c203f11a54d0ed
SHA1 7c6e227a80a398e797dac729b32a1b8a1d12e305
SHA256 a2820e9891ed20d89089846bde6c531244249299f0c816697af18670332520b0
SHA512 a00c29a704a527a7855ba595081e70af8c3bd8c8ae910929912d6a57a595d454110bcd7b296500c1ac8ebc37e3d53dfcef3fa678e749f87ec0efde26257f460e

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db-journal

MD5 12d738e20b6d589b08326e0477d4e783
SHA1 4796f929cb6a7c117d9b4dd4ef81bbedc1ca31c0
SHA256 3f89cc80d1b6f8438689c0a0d9a47917345bcd2b3165499c332eb9d27813fae4
SHA512 a1346fa89604386c5b2970cb7e88d03152734737d0a8962262b6df08284c2ce0264240ab8a06a327de001046eae1cd6cc4d852177a7f45f9de78ed530031afe4

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/service_main.db-journal

MD5 1a91aeb2ffbf67fc968697b54f4f10bb
SHA1 49f5e2c598253a718f5b169fb30830cdad63fedd
SHA256 74d93d1ee48e7ac143ade5a1c08f75c65988377bce53bfcaf8908844c4726e02
SHA512 640e489f29a89c617ccbc1c5804ecb730a22568cfaf771d93c12e35d35b060cb409b3033f26aabf4cdc3782bb2bc4883cb5d95a4f4563f996edcc7b2e22b797e

/data/data/opasc.flash.cast.yusou/databases/tramini.db

MD5 577dcf05e5426885ce5c31313868a476
SHA1 4071973585d026d978540c1ddb31c50c51d4960d
SHA256 b4bf8c8aa46d967e99391a6001099a2c0d1b23278fb5c727823813bba66bb16f
SHA512 58585f4dbdf9f1558e43250981ee8523d1ba09fb048247070087f62c787dd9ed4ba584bbbc85fd564885c29c0b44758ff873f15d6d55d8526e6df8c61a8c6b7d

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital.dat

MD5 5c04b121747857ee634f7538ef1a1e0a
SHA1 3ad098afcd46e57cde68bcbb46ab1e021930f2d7
SHA256 d60d9714dd0e3bcb0b426420f08f9fa6676da479f866ff085608bb92d32e6ee5
SHA512 34f2fecc8875b0b83657a37e9eb068a9ea9028bf61d8d269d08b465691bb7b62306c128f2530c27f78dd55425e6bf925b4e8c1c87db3f565c8266e9741de13db

/data/data/opasc.flash.cast.yusou/databases/tramini.db-journal

MD5 5e2f59a0bc26446f92401ea88b27698f
SHA1 63394bc530f56a666438d88ff140e1b19527b920
SHA256 62670d0bb75c3ea67e40c68fd62dc91a37acdd80fd61c1e7d72a1a5b95e0bfcb
SHA512 453a6f3d995d4998ba94a256aecd385d651559e85c8633024b6d3d9697c95e36a1a8d04722f0183f1be6ca5700c7f63b9d04e0a9b6068419a62d0d2390593bb9

/data/data/opasc.flash.cast.yusou/databases/tramini.db-journal

MD5 60da61aac03392df6e87c2829781f053
SHA1 7df027828210dc6676fb2c765a33a640dd89dd58
SHA256 5a4af980518926e6706c36e79baeece3f2a8c7fba413bd074dc440e263449bb1
SHA512 666f67b917e42c2eeeeed62e6cc36bdc74aa9145b3310a7a2549433289e5e366b58d1055e5a87dc79bfcce8d522d63f17f37d014c5ab068b5990c6be5e67419c

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 661044b6b7b51fb26985720fdef239b0
SHA1 8825e15e62639a5c4d2ac4af42f6e95b4872ed4b
SHA256 c799551a3b4ee2184ff5115270ae791c43f7ba34e66590b8a5e9b0471e7fea44
SHA512 4f507edc6544e297ddb2d10bd8b23f227054e46bef97620b2f64eff70a8c0268406bd5ced512833bd9dca1f49c476f2397a3470bd22e0acc9c2c8727646fe594

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 dcccedb7e508212c97948403aada3c2f
SHA1 41a08574e02d97ec4232e72f89a68b7705036da1
SHA256 23506a76fb181ab80c3c9cef5eed1bd5146555cb1357dfc943e2ffa47e9614f4
SHA512 3e0342f0ea94e5858952a290bf84d4f846d2227eb0b440474061fdfde2a3bf83a95a9e9a39ceaf175f8d8310565a5d2d685197e812efdb859e4cec534c4944a3

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 ecc66e80560d6fd9ee00c6eebf3ab168
SHA1 aff481a8fb660eff3ad3a78aec8b9740d799ecb0
SHA256 b0a6bb6140e1dd17fa36e8b6b87a96d4eea7ce57868c78fac897f8f22ee4b13b
SHA512 283a5e61d4c1f95baf35e76c9437c8efc6e9df8a70f4e65c1728808cf8b9f3ade74ec62fb794c486d098bf8ec9d8ff310873feaa829f4e004461b4a12eecc5a5

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 7b09569d626a2935a6eff0c31cffd849
SHA1 8e9a5897e0dab7af93a8122857a6630c3bb26285
SHA256 8c558e41d166d22c7581d975ac5f19fd4d19052888679d5cc5f994b37f76f31a
SHA512 df7536a3be58b65e197e06aa4eafe1c3fe1f61c8371e601f2889f803c054925a6476fd81de955f8a39eefc01c458ff97a4ff75cde58dab9bceab5edc85668eab

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 c8dff291ab2c77467a41480061ee92ee
SHA1 713bd698ac953343e6ad8a5195274563e41c92b1
SHA256 0f465fa3310dd5afe6f6bcb9fc49c6cd9ea71d6ae8f7202b4c94ee0f4f289579
SHA512 3d40a1fb7fa36db22114256b7a6f943ac9688993368ed59e785d65cf8887697771e109db7e85060f89f0686cd6a423f16d3aa686714647c3165b607f8571fd27

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/appmetrica_vital.dat

MD5 4360660e53aa8dbe29304e64ccebb11d
SHA1 edc00d3643dfb855a5f93e50eb9d3f0f017c2706
SHA256 50d939ab19ea16cda926f4997a28260df59ed7e36e7d20f4f3534e18376a0752
SHA512 021d95c513dcdfae08bbf1dd3dc21f9e53fbd066473008efc6bcb462a0927c18da4c5199b191849893e9c36cea6e8d1ca7322c62c6f53cc92a2a6b76590afb96

/data/data/opasc.flash.cast.yusou/databases/com.google.android.datatransport.events-journal

MD5 e7d05e705efe10c2f10c75ab0dc2bf12
SHA1 f2ac7851b852a5fcfa5ba527cacb53d5a5acb23f
SHA256 20e9512e737544bf1c6f55413ff3fa94b5aaa9414df55e3954eaa182876f774a
SHA512 5463f01c0a286307eda89e1364ac172caad861564d806c468630b7ce621d3fc544459a862dd0209bf5feff1b72ee5e953514e9034700dbd6ea26da34e5c9c311

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-journal

MD5 c45834cc55d6c0a5b9616e2c53f84837
SHA1 8d1e07a8bc3c3b2bf559cadb2178b80d0a30ab3e
SHA256 ad55bbc7a1415c9835da897e69428c3c26cd7cb66f00440b26ca1f141a22b602
SHA512 dbe6e4b28da46cfd3761ca8c107c26baffedc54562c45472dff9958df7578a8fb874db727ccda676fecdd76288061beb8990a5311fa1c7acfdf3aea8aed2f66c

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 1be16c89f0304e5191973f66aa4bc6a5
SHA1 8493cd00ea3a049f5215d1cd7403fb0bb191fdc2
SHA256 f19e3f99e99111b154437c5d2a71b68b9f6734a488b7b05bb5cd62a2818c098c
SHA512 af028cc83da5782655fb2cbc1ebd99527689c27b823b7b9d37d5a89dc63d61d813e234f625d60f79728db2d77fd44e9d2eb104d2a3eb2f0d70e2edb2c5779121

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-journal

MD5 99fa78e04ed1ec83a5fbb6169476f7f2
SHA1 13c53b9f25c3e08cb5c028aff3af5760c3bc8763
SHA256 4e934c890297521a1ecdd947dfd01f1b857a701193735ae4216ca45aff8c247e
SHA512 bfdb3c4d5d58045c02fc77c4679d35ed674df1c8a1c66ccc43a6a60372928b02a9b8ecfb2caf938406ff5b63f42040d14c196138e175d2f9205f861dd57f2c57

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 cf308dec3d580d0c207b9fdd5910aa58
SHA1 765b00a3f45ac932263c59802da499cbd58683ff
SHA256 06757ef1d009bb425b707cf27920f6565424c4771c3730db5d8b26f2b6a907be
SHA512 f59e4fe77f6bc5dc1399554a87e1b664c793ab871ffe7d6a6b834736660941956770945f0a132e2666233f32290b22c0207a4015304360c3ce819898c6336765

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 724ca906d114106a60728553fd879f41
SHA1 659e65317bd8a9be5902349991116055cc70bf84
SHA256 637e31f9e3e6358d7e6724a43cb98edbe917d4859d5babf4a35ac740b2fca698
SHA512 f5c1c70777b0e2810d3767ea98aa43337f8b5e95ca53eb4feaea24352a198b924ea4919ca00666a4baf8b99e5e59074cc33d08725a91e0b9c64138bbcd9aef70

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 065b4aff3f57bead1ee15c374a2f09f2
SHA1 552833a3b7e8c9819c5df1e8cc26e572d1f3bbbf
SHA256 1063ae402fb75ce24f0d5a31e90e502ec8ccc6f60f31f521d0344b2c9e719483
SHA512 c215a2ffe2f810e9b6bd956b81d052fba37d3b80976721b3cc3d4ad37ca7eb8662ba80060f2a715645f0fef0caf43ce2d288dc7c9d95dd1370b988f39763cc6b

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 5fc703ea98815d3e4df2f979829ad8c2
SHA1 7046f169ffee5053a975d17dacab04b674918e77
SHA256 a50eb788429d77c4f8c0e5ef1a5b921a81f2e9d58497f62afc62b36db5a3380d
SHA512 30913137b2dab40ea2d263d4038b99794d54d2f45b37359fcda7ef417d4bc37393beb4dcfc4a80371145b2722a8f237e783098e3eaa488d242bd9f697e75477d

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 293c6d241729958a888421721681b5f2
SHA1 c815977e416530609b5db772f349f80a34710aa1
SHA256 0ed53c3378f99d9f61c530409d53ef197d89aa10b973e54e2cf2833cd9fc64ef
SHA512 574bfb8b9434f90e70b67d38b3fbcd9da5d54994eb7b8b768cb5ed0cc2081d86d8195ad4ae3cc16bce66fd5acdafb5388e8b39c0108d20f190be986032053110

/data/data/opasc.flash.cast.yusou/files/.com.google.firebase.crashlytics.files.v2:opasc.flash.cast.yusou/open-sessions/666AE23B02650001121C86ADE2D3A197/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/opasc.flash.cast.yusou/files/.com.google.firebase.crashlytics.files.v2:opasc.flash.cast.yusou/open-sessions/666AE23B02650001121C86ADE2D3A197/userlog

MD5 fccc97d1b4857bad743da7f4a5efd578
SHA1 142d8fe5b12cd724b237bc4162a33433e70a54d7
SHA256 28f3c0524dc68f32afa82729db1a6639e2cec746a78013e4c059fccb7cd76c49
SHA512 b2b6b2f6b8836d4c52e00b49edc61033b756b4f6e0421cee9fb2293b95943f0538d6b555a344475c01c5650d32fce7058c41fa77c58b4b2f0159c27d87dbf879

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

MD5 11b2c9e27eda8647a96980a699b08dc8
SHA1 eab0619b6af7c3251a8b92b823e64c04f5aa7bfd
SHA256 ab5f52edb847c235c0e17998b66be4a4f01ad87f806da223d515afbf0f0fa7da
SHA512 3a6140ce0118586482b7ada4908576a6672e21e3629c3fc626df664f9d8f22f10de5b0a11ace65954d1792d5f3b24d98c7537ce80461f11de25b0372beb75ebc

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-journal

MD5 6bf94eba7d0b2c31e842266b975d53d3
SHA1 696bfb6a38bac62ecd89b235b90f6c6f01dd407c
SHA256 6c253dc18449a7f63bf9fdfd97b5732b7fff1badbe5033e9cbc8e94cef0d7999
SHA512 fe45cb118147d708baee53f2a34e4c9857aa8339e623b8c406cba3b9733fa363ab29e1e89a1aad78c18b4756f040c0a49d695d2316e64a2abdd3f07ef45ee3c1

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 ef3dd1c5772746b705820e90bb41572e
SHA1 ed37d97e46051dfb537a2cf8fac70c209593be46
SHA256 0b300210673fd65a5d01354e95a0d0b1f2b81774a4eec71e1692669a523ba1c6
SHA512 8edee3b6568fae0a86647c19595ab4556195ff1da91afd1cbd8531e83ffa0ebd51550edf955e2f56e2d3fa3eb96b431fdb2647bb764a7112ff1d20bdf2993412

/data/misc/profiles/cur/0/opasc.flash.cast.yusou/primary.prof

MD5 93de0c7886adc1eefab7367521628eb4
SHA1 00930646669c1f987e2188601575d74da1d9f6b5
SHA256 9943444714b3e02fec2b49732b90165afb8818211fc02347719aa23c3d9a9c3a
SHA512 d008ca72e1b5a676f6c6624684ef7067bd898cae8d4b0e3cc474f90605cec9f116f6763dbe4ab4fca2c50864cbf10261ea5adcc0ef33256e89662d5cf7ff78ee

/data/data/opasc.flash.cast.yusou/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 d999802b66a207f29e44331cf19b33bc
SHA1 22930a5da3edc697b34d7e08de1d8bedd535509d
SHA256 4154d3c9af240356dd2ae08c83510533fdffeb81c6c2cdbf25969a222e6783b1
SHA512 4d559c69e9d29f22fcc6c73b9051a00039b4ca1bced8ab176679680f6d6cef80d3f9e04b4d30794838ded7881dd06d63f679a7c64337b7670ecd31e70163795d

/data/data/opasc.flash.cast.yusou/files/profileInstalled

MD5 0a125a795529af7a411de6f3e4c9426f
SHA1 5f646fc8024c8b495044f7a9bcf31d2566187a38
SHA256 e8b2cce2621b7eb34b08b63d0f5303d8831713e818602edccf2d0860945b53e5
SHA512 8b2f5d42c4eb304f7963c4a4c9293dad089bfb83ab362752c6548bac90ff249cb495ffb1882130563840094a1a94f9bd1856f3b8668700d9cb7e83a11486abc4

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db-journal

MD5 9b27332fe9fc946b04f15cfacd29c5a7
SHA1 2d3083e91b935d96dd019145de9cde1885c34c37
SHA256 f067b9a8fb5c26eff624f2319604a6431b8aa9a8547c7aee3a97558186cf2031
SHA512 12667f655e72e71df3e43428ac133bd7369935061b03a9f6d25800eca2f642b537529e42ed8674dd7ce278f7884a6ec60cc59c83a420bd336363c45879fdb3f1

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 28be000112e6997ff32be036980a452e
SHA1 897761762ef67ea1f91664b6bf9084d782a484e2
SHA256 a60646a710bd0b33da7fd8663d95d28bc2af43a356bc9d50e0a20ad1d0fa4aa2
SHA512 2112b87f690da187c6b43fe6109dfabe332a10a455fe76a4f99544d5f5fa07f717fab08a87a3e3b7ac1e77aed3f1c13348fd31e91f4bff0896ed66a1db8da0ed

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 30a0247acb16fc240d3a9b783992ceca
SHA1 72757e8511c552f74f4a0b9a339eddd6dedd5c04
SHA256 b4c19797078572fb96b93ae3bbd3b83cc06f4af100e1b74725822cdc34c055bd
SHA512 855e02d663bb32a41d153c17dc6ed39c7e7b985a64863c9c3aaad279d6e4fe0ec881b321c02fd1052ee719450bb3b7d4038a476f8d18978307ccea021eb7b398

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 7a104a71b6d9b7d1dd8b5db4c6d62844
SHA1 546dae5036ad3cbe2d07ed0f8f524fc9a472b18a
SHA256 1ed22aa3c3b257dc1c9d9b1c56989db876758a8953cec0365b604fbe5090f5d6
SHA512 e01982f26297d7ad2b13a42e29aceadac321e0331bdda4d6198c806eefe638b3c64a96096ef40d82c2041d0d85da0fc5b2492b25ed50d02c4f47dbb7b2239266

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 9b85a47d40fde67500c4f03af7c0a7a1
SHA1 f19e323932a328c41a485cd61660a73b370c7dc4
SHA256 c2f64b8a3a4e8688573dbf8f67f24dbe926479f66c079641c87c03c5edeff06e
SHA512 d98b177440a57002b790f07f0dad7fdf8328393af5058b392ea3bb5cc86406412a5505106bb57f59d87c90da2ed1dfb1dedf7902208a3ed049e4f9c0025018e6

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 f8fe4b2f015e2721a687b14285e7e12c
SHA1 10710510250dc6ef4e6b505035eb83503713e51c
SHA256 a94903649a3fe0a2a6e49e54c2cab8e6a58fcbc40c3bb193d7c8dbd0dfcf0e18
SHA512 8d2682f544270b2150bded4ee8dad85385baf810714fc15e5f78b65510a40f3d41b9ecd222760c6843813dc80b22a46a531d00ab208f81fefe4ced6f850c2661

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 360eadfeefeb6a9ab09b7cdfd50d3a7d
SHA1 9a8e6b8b85ff442256b824d4ca7fbccedb491f15
SHA256 e79ac0db543d190ec5fb869ebb6b3dccf1577d158cfeb0742f54205d1c8bcc93
SHA512 95ea5a936807c656342ba9391749a6639543d7aa30f123a4375a2fe1640c221a0eb68611affd369e7d979c09904ef65fcd7681f343884868a9fe87f684275e0f

/data/data/opasc.flash.cast.yusou/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/opasc.flash.cast.yusou/no_backup/appmetrica/analytics/db/client.db

MD5 85ed09bda93e2f443e5a6fe43c14c02a
SHA1 bd944dfb567135c591c240e672030b46c724550c
SHA256 e907ca13f0c326f4dc9e40225fde829ab362789bb631d33f6cd30d6fa1ac7715
SHA512 da780b1e549c17c6bb00faa7e2355fcff39c5220e3c9eddf3fc97e445ef18df81ebca7b2b571a3829ecbda609b2f85cb20678250d246b343612e9446ee2af376

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 be102b49768f41b9c2c1be28204cc419
SHA1 43fae721d4e0db63198b96ec8c7ab1c1631f718f
SHA256 cf108c902e43889d0a17f42908194141b97ec68e40cce67054cab06c31221146
SHA512 06a8acfbcb3aa52570549cf59e2a77572d9645950268028650b818f390b2b284fe0aed4c8080efc8ad7c779ddfc38d115095c9fdcb786381feac32a0a00c1649

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 06fc177c84d5e4c69dc69719a4f4b2b4
SHA1 c47e13e4dbf484063385eb0d7bf9ea85ffb7b019
SHA256 fb7d73cfbbed8ae5f6dd5c992feef62d4be5202e057c27ab332116ebfac967a0
SHA512 47a6d315527728c20afb72d4ae12c0ef8653564cc56bbb3f45af31a887e7d0d0f474a0ac435ef13f17fb9e2b7cfb52c67e093087efc520dd4e95cf50d5c1b7b9

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db-journal

MD5 1f93b2ba383852c1c160dd8d93d4d54b
SHA1 c637f063fb49373c4f18db47d85b6a30e49cae5d
SHA256 44a12eda78ea2892efa4cd832f9850e2a844b3666fcd54c3cb3424f247f18cac
SHA512 f744fe4ab808efb645c1f17adecaa83be47866d89b8abbb348d811bb4b7a9723002996d840480b0e24e71a26bf4829abbcdba5cd8ccea8bd6e4b77de053b4cc2

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 f87f1452bad181d35840674c830e0d2a
SHA1 29dcb8687a8b7c5bb8229a35dcaa949eda1fb251
SHA256 957aa66635edd3c1a89c7dfcd2c2cbecc413b1112eb3875c16fc8564fd0e4c44
SHA512 97665a86db4446806ee9911397547dd4901b20d440ba50fab1607927b3bfe5fb2a9a035a0e6ee2f6c461a0e006f2bc61e4ecedbe1efc4faeab855440de2150db

/data/data/opasc.flash.cast.yusou/databases/google_app_measurement_local.db

MD5 e496d430065fa7e9bbae6b08d750408d
SHA1 a2acebf32e32d8fb3ae1b586c4f180346d6375e8
SHA256 bd61fef6b00bfcb841219088e9d0e0433c6e260a05c830f077034110c0223c11
SHA512 b5c684986f132a566feb24264832891ffb1b509a6e0f51e096a3abec09cd58ff3dcd5b7412b580cd26ce18ab42661276cd4ee43dbe07c30a8ccd7a111ee3b299

/data/data/opasc.flash.cast.yusou/files/AdjustIoActivityState

MD5 d1594a03b463c7f223c5f62ca8a8fd10
SHA1 50366a2837b5ae3150a862b6974c14617b822496
SHA256 03beb7afbcfb0a8f7a4b90da9a61bd72ab4e6aafb9aa304ed0fdc590047fb8fa
SHA512 cf93aa97834f52f6cbabfc8b9780b0299880e17109642f18537ddc99c4d5715d39324480848c3b452b600da60fbd4540cf396b8663a14fd31e24019a5aeae683

/data/data/opasc.flash.cast.yusou/files/AdjustAttribution

MD5 87cc063e7c5d50ecfa547afd45d63ee3
SHA1 67ecf9ba2dda1638d959bf2948a510f1df5228ef
SHA256 87b0b888d4755184e37f2e44c6e684db338f8036f3e7179856788cf5d3e6b55a
SHA512 5cdee21bf74d6a1c7f540c8f38c75770c06558fad0e5bc8b046fa19336dd70a4b83b5bfcb84ed1a06c60dad81b136c02d3772a141289b3fa989eb3500a2e99af

/data/data/opasc.flash.cast.yusou/files/AppEventsLogger.persistedevents

MD5 9e9d19cc92e28de355eaae2aeb058c96
SHA1 5e936457c4aaa435550165559226555ca24abb0c
SHA256 5e71faa6b172489bb76376052930264db5afc68ba32b9acf8e8ae664ef179fa3
SHA512 b2bc13431659037677c40f0f0cbe4b623066c9cb85ff751c4480473fdcb158acab7ce7ef3930ee986e6bc7d9caa050ed5933ffce7fc04b72471e02e075b12eeb

/data/data/opasc.flash.cast.yusou/files/frc_1:480232125834:android:2e10a31700977f346b8473_firebase_fetch.json

MD5 de913df4afa659d94edf14940c535483
SHA1 08ec6e0e85bff09aede4d6b9f0608b0c0ea603c2
SHA256 7e13e8340afb2c4ebb393bef23148fcded2dd67919dc4367d356c46e7ba91115
SHA512 6035093523a81c76124d2f16f13dc34fe6024435ceae56db6910a67249a33fed0c7641317ddc0175c747c47b2aaef40efeea1b4157cd55571432ec8f8e85db7d

/data/data/opasc.flash.cast.yusou/files/frc_1:480232125834:android:2e10a31700977f346b8473_fireperf_fetch.json

MD5 b71b8d3e83a6b73372f288401fc1608f
SHA1 efeac4e739f7d6b63df50fac93383b3adc85c1af
SHA256 a0b3b820398742c5a1903d1e3b70ba6e6cff9e6bb0a3f3f91305e945c7ac295f
SHA512 fbda88a2fb05f2d81ec556821a73304d564e23b4413579e26684bf357b4d5342084d3c7f061cfb96a61c0b5f95800cbef3164a070f5f8f0ec124bef04144eaea

/data/misc/profiles/cur/0/opasc.flash.cast.yusou/primary.prof

MD5 79a2e237eaedef44e12d510f0ec387bd
SHA1 e9412eb1f931c44d05141f383e83aa9d96f177c2
SHA256 206405a1ef592100ceda0b93f13fd16d45fb46384ebcb3da02b2511c469647b5
SHA512 0846d6555a17e2cfebcb12b7eeee5d0674987270791770af4fec2f4d7972df5024c55da94c13d496bb07dcf6399ccaaee1892f250030fd21dc1a3a2d37d1a78b