Analysis
- max time kernel
164s - max time network
185s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
13/06/2024, 15:55
Static task
static1
Behavioral task
behavioral1
Sample
a65dc4619f17c2e969f5259b30185a14_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a65dc4619f17c2e969f5259b30185a14_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target a65dc4619f17c2e969f5259b30185a14_JaffaCakes118.apk
- Size 20.9MB
- Sample240613-tcxcdazalm
- SHA256 ef923ed8a901bfaff4636cc27b62a50d17839af30e96eb0350e3bb7f95b73a39
- MD5 a65dc4619f17c2e969f5259b30185a14
- SHA1 3562e52d608b45c9c819ad60394eb93daf2bd8ae
- SHA512 9c5c1dddca1a10076cb978dfa274935d6c76d657c42be59c746d7b6fc909cf90bc6958eef2af5ae3a03ea65845e4f63cc5c69e5175c2ae0c5ec2d4dd43561d51
- SSDEEP 393216:DIQKDOXoyX9LeTJ/12DKQvBVhlUXTj0w0rl/tyuJziQHc334MI7eU2ic2wVAKD:0cByTJ/AnJVOTIrl1yqiQ8nf2eYDAD
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.xisue.zhoumo /system/bin/su com.xisue.zhoumo - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xisue.zhoumo Framework service call android.app.IActivityManager.getRunningAppProcesses com.xisue.zhoumo:pushservice - Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.xisue.zhoumo - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.xisue.zhoumo Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.xisue.zhoumo - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xisue.zhoumo - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xisue.zhoumo - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 2 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.xisue.zhoumo Framework API call android.hardware.SensorManager.registerListener com.xisue.zhoumo:pushservice - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xisue.zhoumo - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xisue.zhoumo
Processes
-
com.xisue.zhoumo1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4653
-
com.xisue.zhoumo:pushservice1⤵
- Queries information about running processes on the device
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4731
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 40KB
- SHA256 5dc7460e67ed8400bb5706b1f4c7338ec6f4a76767a725c4b48ab73680bffc95
- MD5 4a7d7a879469bee7fdadfe97aee8c722
- SHA1 cf7d1142800de9b07f098787b16b601bee9f803c
- SHA512 4e0e2cb7f3dcae5587a0e31d71efa46bfd8cab6447faf2c0d98fba57f830525f374d87ee4c1e7a5ca27c366f8c6269bab41bcaa6dbf7b88cf32eb973f9312053
- SSDEEP 24:TLxqRrL4PDiP/b+cLglJWcKbEGSvIQeQ:T8pwDeT+EsebTS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 24KB
- SHA256 55582e03cc195158477257090be584193e673e304045accf8c9d492da2f67ab7
- MD5 54585f52d66251c784a3b1babfb92ed8
- SHA1 b2a207524a09686cbaec83e14b176fb8aba8249f
- SHA512 52313d066c6cf46193d9eca8dd382c0e787428484eaa1dfc85da5a752d233a22b5fc73a388cc74c55022f3dcc4bc56ce9cdd7d69f8773f26d1d627d08bdcb383
- SSDEEP 24:TLBqRrL4PDiP/b+cLglJWcKbEGSP/T1N0Cn:TspwDeT+EsebTSP/TXx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 32KB
- SHA256 ed082092f0e694cd0d70df4a38a0b52ea2f1c82bdb23ab4a6b3354ff894ef583
- MD5 550e4a291a581f6748d386ebc4540bc5
- SHA1 fc77f871425eea2cd9c20e7f56d9111f4ec9388c
- SHA512 3c5f8d2109612c5d052c820855258f0710f3b198a16345b292bb595f802a6725952163b6b299949fb1b298817cf7fa2285a08bd5b5c246b8d3fa392bc5fcc9a8
- SSDEEP 24:TLdbqRrL4PDiP/b+cLglJWcKbEGSP/4nTX:TJepwDeT+EsebTSP/STX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 32KB
- SHA256 d177640c4c49926b145f1693a9e0e64f9f5d508f30a1d623410064d04913f1ef
- MD5 899dc6f969a6800591aac21dd1a3964b
- SHA1 23261167cfb6ec089ac185adf34835af836a191e
- SHA512 550b718d5f47e1b541c1eb1be1a97c57a84a32618fc899b3620c10b3f320884213ecc218cfde6ab49606aa586d57331dca554ead3081fe053bbb096640169f8b
- SSDEEP 12:TLhSQwRr+o4PD65N5PPJhb9gBcIkJbglTSF7VAWWpNtI7MJ+bvRmBEyPbP/W:TLhqRrL4PDiP/b+cLglJWcKbEGSP/W
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 36KB
- SHA256 a78d4b1c84bfc25ffbe3e21e4bd04df9561ab35bf74482848a838ce3cb65d8d6
- MD5 cbb7ab7b275e2c3025b5ed5eba8eca2c
- SHA1 a21f2b1f2e2887432fdd02eae9b46d7a461f5e7a
- SHA512 5b61780e6e99b114c5ade1630b8a22a31733a50e17c8ed1ae8287c556db1afdc410666057279c17005e49e654ff2aa7917095c26e746ca6079d540eb3971a3c5
- SSDEEP 24:TLxqRrL4PDiP/b+cLglJWcKbEGSP/hGXhPEtcwkAAdm:T8pwDeT+EsebTSP/hePcuAAdm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db
- Size 36KB
- SHA256 0a4f0a5a3f503d164f6d38c9f9cf349bbb5003d952f6d81e153f0b5d7d5446a2
- MD5 d6c1bd78fa4bd54861935cc1c5cf40e9
- SHA1 9f7bbbe3315dbeabfd69da46a5bb643d089fd7df
- SHA512 8f0521e0f40b517af8f0cea5494982c7202e273f6e77f2af16d5b2e613cfae62eb074f577bd16569403deb8c77ecc12d49c45134d4b9d3db9c8d7b0158f9d970
- SSDEEP 24:TL6eqRrL4PDiP/b+cLglJWcKbEGSP/9GQnMaUd+3:T29pwDeT+EsebTSP/gM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 512B
- SHA256 981b5e05c89e3b60aea3ffe57b403c0eec3de90558cb67e659d4496e9244fb5a
- MD5 372af0bb5f36b41d00d787dee7babb95
- SHA1 9b576dcb01b1387fa2273261357c20976453e39a
- SHA512 69bd10deab21a428a1eb3c36f7586689632c6914715558cfd6b1114bb0deaa5ef19eafda938aec2bf5c8bbc7cffe09bf3764abee25bdc3da0b12ad3110613676
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 8KB
- SHA256 960ec27f7a4ffa044beac3017978f9de0fdf8e71543a97aef5a0a2460cb2babd
- MD5 d76eefe914112b997f0d162d9c2e0e66
- SHA1 e6d982a82252b49fc6b45adf526c324b6cc88f63
- SHA512 419fb6d389d5d0fb5967fa826a71f3057fe127e3bed254cdad65fa0e7dc7a449dc8cd85f03faa97075fbfa63a37b6a450584bfbc13320bf0599ae4c00358f26c
- SSDEEP 6:7+/l92n1tXg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKy:7+t0qLiuWdYRmBEyPbt
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 8KB
- SHA256 96dc63444eb31adfe4679d62526d85ce1faac7486c0e1796701713cbb8417640
- MD5 ac04b446f7b28a71448a584ee82c8e49
- SHA1 868a56fa72ce69bc3b43c5307f570f5b478dd7f7
- SHA512 966a3b61e36423c7ef19e8f6a8eeff6f4fb50b977467f35925fe573405075c3c07d134f0f1e4020cf538486d6900454cfacb91bc0022c68bfebac6a0052abe3d
- SSDEEP 6:7+/l9UPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKo2/Z:7+t+qLJdeWRmBEyPbHmZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 16KB
- SHA256 28e8d141fceb663f0a6dc1da7bfa1c52e2c87d444d98dab2d91c0809af1a6440
- MD5 b4e0eb70cbb33a86c9331da59459d7ae
- SHA1 b931b87707bc83f8bc516ea7d519a7b2f474d0ac
- SHA512 3253fd76edc174d576ad3eace90ed7d6a5995cfe0f94da7c55074460ee72f86a2eb33f603a7c1bd578b5f30f75f6950936c783123265f60b34bbb4e8862bd90b
- SSDEEP 24:7+ttC6OXRqLxqRrL4PDiP/b+cLglJWcKbEGSS:7MtC6OXRq8pwDeT+EsebTSS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 16KB
- SHA256 ddcfc2bd804208b1441025781cc72123ce4e2ab64619565b010efc0a9f9b736b
- MD5 fc26884cfa41b5291d65178af02dc152
- SHA1 c14e922a896a6a423825a701b9a3d7ad94812e3e
- SHA512 ab231a8bdf4ad1d8595c2062d0b2a3dc6ace215eac4c47e9f8bacde558609049e50728afb8de6e4c504b08ca0c1fe1ef72503cc0c996c79862a5d80ffefc18f3
- SSDEEP 24:7+tzvfqLBqRrL4PDiP/b+cLglJWcKbEGSv:7MznqspwDeT+EsebTSv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/ua.db-journal
- Size 12KB
- SHA256 2ba2199ab401c4341669912e53f2dd58d549acc97194c4e69f0616be25a076dc
- MD5 9dd2bf7db997519955d732a8e79418cc
- SHA1 c69e3026fd60aca8993be46b4917faeb50f47192
- SHA512 dea3766551a92f1abf20e69f0404013234601e3ed4f90e95e5b0dcff6579abe4ff1cff820e01349af19ce467d83c32c3d253d67deaca5f1e2a8679c01e1884f1
- SSDEEP 48:7MLtqspwDeT+EsebTSIqMpwDeT+EsebTSZ:7kJpwyiERbWIppwyiERbWZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db
- Size 52KB
- SHA256 dedfa5a736985d82a291376639459d60108fef7643e5a849c2e38133fa463ae0
- MD5 ed6431d31ad1b4172ed676fca3739889
- SHA1 7b6e4128b8822a7f0c07edbe390d965b47776e11
- SHA512 219c8996a0e9e1db5260451686de6bdce83fa7057b6fa602fee7e65a20acc5d3599924d0d11f8f66de27771549da12a42d3bd392523528d759717177b12fb4b0
- SSDEEP 48:T2Nt4zuwveus30/qvDFJaR39ID02x4gXOKMS:vzu0evvDu94KY
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db
- Size 52KB
- SHA256 0b5b27bc0c4e85f09095a48bb53ffb67e53e2d392de5c01aaa3cab692f7b1ef4
- MD5 1ccbc80acdb81d5d4ec7aa5895d8fc05
- SHA1 80e986279089366bdf932e4e9cf2fc63478fd94d
- SHA512 24aa2706010aba0298f1bcc5da4218c5711f92b38e07fc22d30059acda18544ca4fdb178d40d098ad7a391aa7082dc8576072a5f35eca1cf0cbc3b0c89e97ad7
- SSDEEP 48:TGNt4zuwveus30/qvDFJaR39ID02x4gXOKMSP/3/Zm0rBuVXe:/zu0evvDu94KYPvtduVXe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 512B
- SHA256 7e49b1afca549a2fef6377efa77a0af9fc1df7f2f46eaabb9571e53624e210be
- MD5 d4fd0a92fd7b624efb361e60e7922448
- SHA1 0d7f8992aa2bdbaf17cbad26e0e998316d699a42
- SHA512 2edae583e95158359098259edcddde3c4d7a11a031d9dc5d537e0ad947102d026a6af9c3149e69251bb232a08eb623a259c5bada0e620ea46ac87e866308ec0c
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 8KB
- SHA256 2d306295a9ea5d162199082e4973d0a5b2e6cc99fb97343c456c620bb8a53e93
- MD5 8bfb78d6fb4bdc8174ef5cd7b6f55eef
- SHA1 8c799811d876b058f30d761edf3039462818af6b
- SHA512 aec1a4b06c30facc3cacb6d2f486d87b5aaf7f897a4024025934a67717d4c5abc66b2d3e79dc2d8c64fefa4a94bf75ead83533e5cadf55e73494fe5668593670
- SSDEEP 6:7+/l9cHn1kt2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKyp:7+tnt2vqLiuWdYRmBEyPbDp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 8KB
- SHA256 8d7e582608a377e862f6c396dc0b90617e221e8cc01e3d6f534b8fc2f36bc804
- MD5 028769b6fa2187de4055306e7416cc75
- SHA1 ab420fc192250766df5366804598492de48a5c42
- SHA512 5c630fcee8ba54826c23363d52daa31a6994fa271c96441fd8e72a635c82a325fabb0fea8f5508d9a22edfe3455132a39ac22f9013967f58ad015890c1bb7893
- SSDEEP 6:7+/l9ExPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6s//8iB:7+tqqLJdeWRmBEyPblsX8iB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 16KB
- SHA256 e44352c6597e024a25c6a7b1355a851d32652363641663f7b8ef805a091a376e
- MD5 2c4d2fc97a857634b7fe23094b9cfa4e
- SHA1 ec41dff1823a7c19178bc67cdeb4b5cb028abf19
- SHA512 577fe96c4f8b903aaa16ab0fc4e04e9901907a9b60a3157c71173a177ba8e2be7999232a26273181712334b2e4eed4201ed3d2357f4b2d2255c4334be953bad9
- SSDEEP 48:7MWJuq2Nt4zuwveus30/qvDFJaR39ID02x4gXOKMSU:718Szu0evvDu94KYU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 16KB
- SHA256 f466f20e31c1657761f86c842930e2111ba290b72a68c16de295fe7635af0a4c
- MD5 b5b3107288510ca6003669a3571a6154
- SHA1 6b1c99c4981c7469eecaf41f00364fb90b86cdda
- SHA512 b45dd03c512511a74f10f5b1950e8029499cc78fc5b0d6b2df34482beabcaa83c78711c23efdb3085415b93027ced9113c4825b3165f5cb33c9a1eb2de4043fd
- SSDEEP 48:7McT3BuLVmnqmNt4zuwveus30/qvDFJaR39ID02x4gXOKMSm:7pTxuLAnizu0evvDu94KYm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/databases/zhoumo.db-journal
- Size 16KB
- SHA256 45f13fe4865922bd296413d1bc3f8d821675247a539bebffefefe42ab786afc6
- MD5 d375d2fb81e8a0b7ff5abbc0465acdb4
- SHA1 3b1ca00dee864b34bafc8924da44c878ee34737b
- SHA512 ae549d3f0810159ce2ca72424d016f4a70d4cd08866dcb5d99d94440c846184d3ce4d54d73d6c82bd6e9d805dee258326282f532964abce0d8f86c0d96d0cc8e
- SSDEEP 48:7Mgs4BbrBu8UCeq7qNt4zuwveus30/qvDFJaR39ID02x4gXOKMSr:71Vdu81eyzu0evvDu94KYr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/.envelope/a==8.0.0&&6.2.6_1718294151217_envelope.log
- Size 1KB
- SHA256 af272d463921bbd754ef33f47e0d533eaa481943c4aa1bde535455b94157ff5e
- MD5 f5d272f027d088200f547f4ae702b88a
- SHA1 6b36ab1173d37bf2122e53e7686c39e2c8adf489
- SHA512 13513b922fa0d59a7dd17fed7d52f305fecd4a7130b404547e6e351c337a8cfe09a44e03b9274da711c0a223aeef63a897dfe5a4520b0e9ca6befd505a79f32c
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/.envelope/i==1.2.0&&6.2.6_1718294151977_envelope.log
- Size 2KB
- SHA256 2b9784ce4ff9441e7798fee27052d9395f2e439a5113a740e576f19a9988d817
- MD5 f475bf48b84987412fcb318f32de938c
- SHA1 5bf53b781595fd693304c48f343d9ba61015a729
- SHA512 7b1dd2a98d9aade83c5ee29e44d058704ae1e5d8c7699d8e9283bef48ab62588e63c38d34a4101dc8c989a364631a16a1b7677bc269a9f1ac74460f91f5f4096
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/.envelope/t==8.0.0&&6.2.6_1718294149882_envelope.log
- Size 1KB
- SHA256 6281361294a39a5148bb06604520e2320d3911aefc5aab359a1beb6cf3c24802
- MD5 205c961434e501c6a809f302f7302267
- SHA1 e6630536813a6d5eb4adfd4808372a17ecdb9697
- SHA512 a7f8cc70f368ed3e1887b74d754aaffc19c5b7517cf2e0b348f3bb3980c8217ebb08e2e9f6d0e6f9ed9e9191e401ba24a228f2826d6125e10f8c459d459f175d
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/.umeng/exchangeIdentity.json
- Size 162B
- SHA256 0ec4972c13d3f013de80d7924c1c42623c90d40741eeb66787d88a6e352bc0fa
- MD5 455f7be4dd2fdaaa45a6a797c2335b65
- SHA1 f5957def816162e437154776d3ba9a2f2ea9d0f8
- SHA512 f7354c369abf9f1de5b1548b6efe74fdbfb5914679cbd7a7599d2907b671f002aebe81eb85928bede87f1138ed05c0be82a2ea545b5e994f30911596a17a372b
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 20KB
- SHA256 f821b15bd7f478da36bda62f1607d40e80b0540dd6c14e11e9c37b66866e8ed6
- MD5 5e826aacd36dba4d3c45571595e4cbba
- SHA1 2ac3ad99ce6ec39db6238d9fd891e5ab382a4b80
- SHA512 ec02e1d5c771f5b5edea77653ef4c133ca5cef5caa2ab516f1093cbcef13c9876a72843b042266f77857573a76518755c4f36ba2c9fd2ee379141bfb60b31893
- SSDEEP 24:TLy3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSP/Hx0:TexeYTDHY8qlBaUd/gpTSP/y
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 32KB
- SHA256 3d0db07334f474275cb063c5dcfcf30cf4d7e6c5f47c966cf05950b627143f59
- MD5 f97bd3e4ab9de8fb5857911db5b487cb
- SHA1 a1b06e784a6d4f4f3b8a6799a6b1c86775003919
- SHA512 bf4d24ef35a9dc2857e1ea3d1c21c344303ede80a5e691e39694aeacf43004ef74778c34dd727af0e2b701b73fb00593db55a98469da3cfbe89ceeb7cc11a855
- SSDEEP 24:6EGi3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSZGQQQ:vxeYTDHY8qlBaUd/gpTS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 24KB
- SHA256 0b21fb1258a5cb805d533bcf1ada0e5354d143f560f74eedde20503213c921d2
- MD5 bfd86f68df35251a2ec0ba7e89f05a91
- SHA1 8b61c8edd2fd94f866a6f89973da68912aaffb06
- SHA512 79662df7f1dc1e6732910a3f57f733e5e74ce8b2afaa57c3b1a9f048e3a93ed54b1051577e629f2ffff5d38776f2eade1c43222d725b6337dea56c4cb9b7a378
- SSDEEP 24:TL0Z3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSP/hri4Cqc9:TuxeYTDHY8qlBaUd/gpTSP/hr4qE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 28KB
- SHA256 820d1baee966e39f7acd1a87c6a616dc976606423e3b762ae613b1009937cf28
- MD5 ebe8212fa448f59844f2336e7333d282
- SHA1 bc455de3252c59e39301c716ffd879c219fbd7d9
- SHA512 cad7c15c0646daa8881aa25b280a45be79db91a5362587edf42546309de68d3f646c6e5ce1fb386aa443883f2dd6d5082e6e52a0bd6fb48a869243703ef235db
- SSDEEP 24:TLtlC3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSP/hriGO0exYr/kzE4Kn:TLixeYTDHY8qlBaUd/gpTSP/hr/28n
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 28KB
- SHA256 045427862f70ac2dd064fe2e0258676bf2fc5e7147ee86ac73a045a2c4aa981f
- MD5 a3363530433b15797358749bd729b080
- SHA1 ce1cab2a3e09b61e2102c86a28871a34a72aaaa6
- SHA512 61ecc66163d8d16f100022c29dbb175305c90b2b7e3c5932336d0397d64e37a7c1f6c8ff5f48b150632b7137bed48d0066ea18fbf525c271d82358bf4471928b
- SSDEEP 24:TL233nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSP/hri1Q0exYr/kzE4Kn:T6nxeYTDHY8qlBaUd/gpTSP/hr/8n
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db
- Size 28KB
- SHA256 d42dc7e32b4964faf3102f2bc674d386ccbd989ad6c09b7d4e670dcdaf3b4a97
- MD5 6e645f809a647b3a199d68740ae74ba5
- SHA1 a74307ee65ded1351dad21a8aa6715aff563f970
- SHA512 06964a7fdc7ef8b9749426b6abf30568cd9407255709c4e8e8e99d780e5aa8d423f8ebc48227680bb0fe48a6c7e2e44416de83b157284113d6489383efe60dcb
- SSDEEP 48:TOxeYTDHY8qlBaUd/gpTSP/hQkq8qprg18n:6tg8ql8Ud/gpWPGkq8qKKn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 512B
- SHA256 dc602eb507bc65201b2683c32bfa157d19b3d47f8054e0150281af46b2ea585a
- MD5 f363c4d5115696c108f3e78a9383a5b0
- SHA1 13034f1e3b5fbbf5c34439c256dd0af0d8295206
- SHA512 cf74f0b5de857ce259b2688a350a0306eb245732067ba4cfb568d7d302cf8278d29155af2fc5be98aa2a6593a7f86dfb41e37b644d2ca35a4434a2ab54d12ca7
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 28KB
- SHA256 bcb7edb790b1231a3ef383fbce8942404edd87e6231097bb16872bb1448e4c61
- MD5 7af45cb7515e477cc63e55df2f1faf5d
- SHA1 ed87d4acfb7f84db8c14f041a7ae97bcafb1c9e1
- SHA512 6e177e4b0fb14705b9737d02a8e46c128d9d733db28e1aa59d27ae9afa680f72e978232c46496c25d9c7952d2b32cd0710d70f73236e0e12b57b0fc0793e39b1
- SSDEEP 24:TL6z3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSP/MqLiuWpGSMOKn:T2LxeYTDHY8qlBaUd/gpTSP/MqZWsSun
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 12KB
- SHA256 c95ce9141f01079e5a3ec3c4662ea399a04bd49d4314f835ac3c9af4aea3ff9b
- MD5 3fa804680a4e22220d7c1c3d5bddf714
- SHA1 5c8f1a962028cc111daf6d2c9907deed94c405d4
- SHA512 7d57fe867d1ed8e1a854ce0b15811dd35f7ce1784d0a0b8cff1893530083a21c86e159004db82e8d8b4d03d1e3ede29294d2974ef03097495fd972c0bfac15e0
- SSDEEP 24:7+t2RqLy3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSR:7MGqexeYTDHY8qlBaUd/gpTSR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 12KB
- SHA256 e73e7d0725ebb1c88605fd9560e09a2064d12a3da71ac21f28f3f15148244e38
- MD5 d3c0dd7df37ef233620ed90adea364ea
- SHA1 7ee63314452f1bd250cd3ec6c748cb63c0c0a7c4
- SHA512 4e951d1769aefcebb4908d179b89907a1fda494bec4cf6627522333ec293a026953d3afcd3758cc0d9d72cf71a899825b71aa60d93a916d6d3e05d8be9ac6813
- SSDEEP 24:7+tDxKBVqL6z3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSy:7Mkfq2LxeYTDHY8qlBaUd/gpTSy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 28KB
- SHA256 49caa2141971dd933149d4fa63460207f9d33edb297ee84441c2fb43b35765fe
- MD5 21065eb0b007cff455a47e00a5533118
- SHA1 a93f8cb99945d4c96e0356e140b367f71481fb70
- SHA512 460651b0d6b873d006a64a219c539701f4abbc93452d85579975c7b76a34777820c78d9c9684dbc43b7c41a023e62fc22c79ac75f36b3ac57309974c51e6b87b
- SSDEEP 48:T+xeYTDHY8qlBaUd/gpTSP/ZaUd/gpTSa08n:Ktg8ql8Ud/gpWPsUd/gpWa1n
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/TDtcagent.db-journal
- Size 12KB
- SHA256 fc8b702082df17a36b44807cabc405ef5e43e6f8c723eb5e434f7194e15b8a93
- MD5 e63ccd0153cbea9793aba87605cb6b75
- SHA1 7bd32351be00390a2323c078cbc213d7b5ac6727
- SHA512 af7d3e6e6bbac4152b9e0db362bf69bb10fca661352dcec79665d860c0eda1b62dd59d9d28063f0c807e58800ba3621e0981689c681e42cb853570cec6f30f3c
- SSDEEP 24:7+tHogcQ0exYr/kzE4KCwxr/JvqLS3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSR:7MIg18CSxvq+xeYTDHY8qlBaUd/gpTSR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/exid.dat
- Size 63B
- SHA256 85649c6b02223b76a8a7f842d94724481a55084ad03e3fbec293c9f779a735f4
- MD5 a31cdce580a5c5014607f38cba4a7ba2
- SHA1 891796d078b33e5e134100140658e3c3b4ab75a6
- SHA512 c82fca366246660a4edf0a91c6d698c0cb9b917b66b3eb9896c4b26761f4c4d3f077067e763b3cbc3ad8b59a8b3b47ec2334c0e9be3c5910aed6f34288c2213e
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/index.android.bundle
- Size 1.1MB
- SHA256 449074004f61c6b5e8dbbeba0b326f10b20ea6f0b12cc975102629fe5794f758
- MD5 363c594a11c286f60a968cb5e66c277c
- SHA1 bc1e527474cb8b6eefff3476aec617f678061542
- SHA512 d44b55421e9204f48e89348c34244673bcf651bf178c706eaa45607a168a1d082e0125a7262a030d5f7ef7bb8eb7f8bddefc3c9711783c553f27bb1a0476a47e
- SSDEEP 24576:js7aPEA6ItDWA6dMf7vAo77aRsW28hfYBi9NcvgJs+Dp3AijNxiFP7/2VddwYh:js7aPEA6ItDWA6+f7vAo71W2IYBi9NcW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/init_c1.pid
- Size 14B
- SHA256 03345568e4b1e9cd456a4433db9c349f578b67f0b3f58db009dae236c3c140ca
- MD5 7eb9ed4e4ccc2d51fb8bbe3cd9d83cde
- SHA1 99f57fda36eea32f8468017e8f804945c6ff0045
- SHA512 96b6c050fe6a79e84ef3b2caf842b817ee9bae1488f8430300d80aa0cd0a3bbf74ae701d5e6d1f8a042a938805901ed3b4201a235c036e579f9a58f448306501
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4Mjk0MTQ4OTI2
- Size 1KB
- SHA256 b5051bccc4ed123fb94d5ca5dc92f0996d2a90c5bd95057aee225e21a287ffd7
- MD5 67859ee767cab5f581dc95c26ddb6325
- SHA1 b1e7fa486cf90950d4252c73908fd100a0fd20c3
- SHA512 851c1fa1d82945feca01291e1d9bcf67b6f7a6fec01f309e86998ae39ca9183d6cc115f654f1ff0b49083a9d3e3ddcd34cd40111050d750da298a1a9273db2ee
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/umeng_it.cache
- Size 350B
- SHA256 015d47ac3ccc7b034638f1287795c293e3139119a469881d93a161c7e4298f91
- MD5 25fa6ba46c62b4bd6701dea221b352bd
- SHA1 27bf38181b7f5da3eb4c69bf0b4492dc9e9bb750
- SHA512 907b3df7a6248827215b521cb9a5f466b0fc2373c680268394a42453bf065d0c7dd3483f0640bb6de24a46d2113c5df91c5b7dbfdbf0ee0e14f0d3b2f7e8f519
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/bundle-all-d9c923c565.js
- Size 670KB
- SHA256 c535873ba376c849d823d7257a4165ebd90ef2ed8a3910cbea5a9b94467b2ee8
- MD5 d9c923c565e240da9e6b08fb8b884f31
- SHA1 b006c2ca5beb38c2cc0e386e5a9327eef8504ffd
- SHA512 0c72fd172af45961c71cb4d2c945f6153660c53d89ef950fd15e5016841c65066e0e676c4e55ef4b4692b6dc3deea2c25e3884f3422f46c5cb85d1d3f21664b2
- SSDEEP 6144:UyvliWIkDrfQ73ey7PyFEiJliWm3ysliWGPnJrfQ73eylPVlr:ExwrfQ7VLKHPJrfQ7J
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/common-78c65107ea.js
- Size 29KB
- SHA256 4e6427be15b8290052ae6b2c110beeed5a4576fb3b5ec55f1b479737f9e32911
- MD5 78c65107eaf7c2bfad8c1600138c6237
- SHA1 80d271bce7d2e608d68aef6bfc54204dbf33a064
- SHA512 116f99b339a110223ed8e86406abfc41536f6f8196ad7ba9c1d3efcf8831fa8f71fe6cbf2a444fa3932fcfd05797f13523e19f58a407db1a28e0fc9e7ea70541
- SSDEEP 768:gnYXkDbud2O2PFbzQ20BZ0NPftLhrpIWnZ5dEUg:oDbudTIzQ20+P5/g
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/common-bb2cf9c5e6.css
- Size 39KB
- SHA256 c18e900b3fa91da0a1dc1aa3b33a8c67d356123eef6a0a9ca13dd0bfdeaa252e
- MD5 bb2cf9c5e6ffd7404069eaead633a101
- SHA1 5bb9be8e57a35f4d2e6c4e9ba2a6a688c455d85e
- SHA512 0293e84873da3f1d8cd7b698b43ed1f14b52610efb273478e47ee68cf73c01f5c44dc49df881f460559c62d84f6120ec4bbbb1b85ad85743ef671ac5dd2e3942
- SSDEEP 768:tSJPGMfDbPErHhyN8jBTEfQv+ILbGVwYmxuaFSbZXGu:2XnMTi8jBTEfu+I/GeYWxFS9XGu
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/components-bb6850f505.js
- Size 4KB
- SHA256 df256e414856bbb90790f7ddde65ff2e305224a634cceba74221d85fa5f0783f
- MD5 bb6850f505dbcd803c73ee4aef5c8dc6
- SHA1 6575db323becd1ec175054569a31b9c192c9ab2c
- SHA512 449b44016c736d4393694e2ab407284e3fe0b22cc42f8ffe0536c2e463ac324cbcfde467e39ac8f2749f6a638b14a2b70950c95eb07a060e6dfdf1175d41f22c
- SSDEEP 96:VV8ld5VUhLx9WNf2PNh8cT4vGrxGqS3TTSDVrgD0u5B5ZA5K9yV5NXinkeZLkL04:VV8tVUdOh2PscuTTSBrgt7FZPFLu
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/index-3addd60c58.js
- Size 6KB
- SHA256 392b5976dcf99c66a92e75ac20fdb39e84fcb6024aee26fe963e0e6a7c7fd15c
- MD5 3addd60c582871d855a6708dea11320b
- SHA1 b5663b00be6db11f5d0faeb8150a75d68eb39c25
- SHA512 923653d1ad82573fac3d1387d69f502f3ad0bb6fa63c55ab793b3d9e56466fb19d82236bcb7b5e154a59e26e17ddcdc0c7a6f8e6c3b8fe90c6c33e06b35121b4
- SSDEEP 192:fKrvOhDcaKZ2rXjVFLy+3p16wcpk3cp3zjx:SrvONKZGXTp3p16VCcp3zjx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/index-ca064cac4f.css
- Size 1KB
- SHA256 a3ee814f38625d4f2bea30450fec1aaf4485c5cc824d16e93b21a872798b4582
- MD5 ca064cac4fd83520095c85ee7efa06aa
- SHA1 992c5e99311ef472f34b1c81e22e3acd31fd6755
- SHA512 266a401946ea52a40ef3ff02d0f90f2f9d41bddc7d96d160008e608094b1a2e4df5ca035f59f7c9fafccad3d1551cf15dee53ecbd126b1ec633c23ec21312fed
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/ratchet-1f0626a020.css
- Size 19KB
- SHA256 411c3a5b998b69e6507791f525f149b0b90d3635b0e43a6c3e7aaf8fee08efb4
- MD5 1f0626a0202e6d6a577720fc4d5a3211
- SHA1 47f275c6f90942e69c75e124ab45227718120baf
- SHA512 92cc59860a069cfa1e5c5a5781b97053ca0b7c43c9e183f78bbe45603b2d63eafc366288a0fad457ef27d50d7ad954e836c4a6e70b2c99c674bbb40f1ddb0013
- SSDEEP 384:Sp2u7UOyzx6Ohlkx3srCRMCARXu/rL2kzu8whlF426DXoJNNQnk7OUDtPs:02u7UDhhlkxcrCRMCARXu/rL2kzu8whS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/files/web_offline_res/tj-cb998fb3ed.js
- Size 6KB
- SHA256 6b020dd39a7e6d6b77ff6708c20b95b4c53751931b8b64092754ec185b1bd8bd
- MD5 cb998fb3ed4ae48ac23fa9d8c288f181
- SHA1 cbae63e174413dee4dfda7fcca8c742373617b7d
- SHA512 ab03d9163ab322701c473fd091368b059c86641010f75f06d296e97bc88705c22376436c335cc3ab55f058706cd2fdb6f636b68ea6e1ce3239da1e70a79c1f7b
- SSDEEP 96:GudxlVb3+hDZe6Tm2ROZHDdlmYKZOOobWYVGtQGcFY68B:GQ+hDU6TfoJYjt7cFc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/lib-main/dso_deps
- Size 388B
- SHA256 a1537868bcc1aa329ae15e37d1d38742ed69d79caf9c4cd5fbf8956dafa641fe
- MD5 68ecbf3635c0a0511be073c0ec18f503
- SHA1 0376354b60fd27f65fcc07ea60a24baceb7a06b2
- SHA512 3f10655ec640e004cdccd79caa84eebbb2e7dd1d5508b5a875453e21bb509e57602b6a48ed1fb14e45c69b106916131754226e786388fea7114930845735611d
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/lib-main/dso_manifest
- Size 170B
- SHA256 4000251c80efbbc9e4a97b9a2d0910ef3ec0065158aa095e5c78ee32d5e3ffd7
- MD5 692b5d07f4b368b6ea70af8925cc924b
- SHA1 e485f24afdc6f08bc3157b3f2bbb53a41a598bf4
- SHA512 48422adcc437569da05cde17007e5d09391781f0d00316c1290226a58743347912845d835f11d357fecdfe252ad7b5bdd1ced4978a7a45841e40cbdd5fb43acf
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/lib-main/dso_state
- Size 1B
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/lib-main/dso_state
- Size 1B
- SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
- MD5 55a54008ad1ba589aa210d2629c1df41
- SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
- SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
- MD5 SHA1 SHA512
- Path /data/user/0/com.xisue.zhoumo/lib-main/libbspatch.so
- Size 56KB
- SHA256 2b25118e643c09801877a5b3c94674c083880f906e219e4b0f6990002f42fab6
- MD5 631f258d19df94dcb7a49888d4171f83
- SHA1 a0e99fdf7a75846442966fb2712e61a1ae686c92
- SHA512 8542d2338bb4378ee2a4e72160d757c53b8e9650e8450f35fefb83260d93ca3ccbc074ecbdf6ab218862eb8be99b57efa7553923586b0436d2ba21be506899ea
- SSDEEP 1536:dm4wIAYQog4wIAJBZRph5xJBZRph5xJB4EHEW47zDjJ5v2DFNmleUGr2O+/K2Y6e:k4wIAYQog4wIAJBZRph5xJBZRph5xJBh
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xisue.zhoumo/lib-main/liblocSDK4.so
- Size 31KB
- SHA256 86d081062f482ef15257fe875eebe0eacecf62c53254369f3761d9a3ddf1d83a
- MD5 426c7af656ab071c144138eeefb8f5e9
- SHA1 82982d55ede42571383949a3cb4b112437b0b866
- SHA512 f74b656fd4226c61d618aaf0d498cb3344c251388890b936745c27c2cbaa1163ef7833713695621479f11f76498b5f1dd71356f8f6d3fd4e568cdde5d21eabda
- SSDEEP 384:MZxVncuXjQRfE8U4yb2jbc/UAoj/EqB67PfTxBuw9VqJpNr5yQAnWPZp41QOAZj1:MZTndQRz6S/+7ewTAZAYXO+88V4
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/com.xisue.zhoumo/cache/newlocationCache/journal.tmp (deleted)
- Size 31B
- SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
- MD5 8c92de9ce46d41a22f3b20f77404cc1d
- SHA1 8671a6dca00edb72be47363a7071be65cf270373
- SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.xisue.zhoumo/files/carrierdata/1718294157
- Size 378B
- SHA256 1d2f85e3da54c827789102022f09341f9b857754838ab82914c963fa742f0319
- MD5 205818f6612a3f46ce5f3c1f1545dcc4
- SHA1 b9e28f3ed372cfffb63eae7c73be8b46175c5b95
- SHA512 785294f98d645913f3373af6d1a31a06328089c5b4af0e2fb578986e2614dabca9cf2c87b0c9ff2ae6455be68a8ab575d47bf49af3ca5f28010f9e5d01d6e1c7
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.xisue.zhoumo/files/carrierdata/1718294157
- Size 2KB
- SHA256 af074f539f7d43e3a7207de2ba89a05afe615b683936f4770a8637e48415e8a8
- MD5 c1065798450b2c13e09b057aa31108f8
- SHA1 e15cc1634c5e08cbdcf16831fbcc9b3f30849dc5
- SHA512 41a265f1c20749e0806e5188fc4582797df77a89b49ffe10edaf7c2e42d7b63a2327bec4ac62ec6493a44982ce0693e96182107dc2572d09beab58b1c4a3dd2a
- MD5 SHA1 SHA512