Analysis
-
max time kernel
179s -
max time network
184s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 08:29
Static task
static1
Behavioral task
behavioral1
Sample
a8bcd3113c7d95dcdfa680410641083f_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a8bcd3113c7d95dcdfa680410641083f_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
APPayAssistEx.apk
Resource
android-x86-arm-20240611.1-en
General
-
Target
a8bcd3113c7d95dcdfa680410641083f_JaffaCakes118.apk
-
Size
31.5MB
-
MD5
a8bcd3113c7d95dcdfa680410641083f
-
SHA1
13c5feb02c42a424a53c9425183b71ac6069b355
-
SHA256
9a611d9cd9d7e92b675715d9c92bde40fb00e7478b0cc929416c21619b4d20b3
-
SHA512
1c62d823f71f748f26d9ee7102780d53bae062944d6182e9fc81e3dd93c56c1adafddc71e930ae02cc65b8120786800a7097d3ca8560fde3169134f437b291b4
-
SSDEEP
393216:cLb+QnkmerUCTe2S8vQq0pRrD6IVg1LgvLkCb5Zq7kxcLIbZQ5OYWwonIIlNq:Ub+Q3eICGi70p590gzek8gnIMNq
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 6 IoCs
Processes:
com.rjb777.rongjinbaoioc process /system/bin/su com.rjb777.rongjinbao /system/xbin/su com.rjb777.rongjinbao /data/local/su com.rjb777.rongjinbao /data/local/bin/su com.rjb777.rongjinbao /data/local/xbin/su com.rjb777.rongjinbao /sbin/su com.rjb777.rongjinbao -
Loads dropped Dex/Jar 1 TTPs 13 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.rjb777.rongjinbao/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rjb777.rongjinbao/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&com.rjb777.rongjinbao:pushcorecom.rjb777.rongjinbao:pushserviceioc pid process /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex 4312 com.rjb777.rongjinbao /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex!classes2.dex 4312 com.rjb777.rongjinbao /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4312 com.rjb777.rongjinbao /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4348 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rjb777.rongjinbao/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4312 com.rjb777.rongjinbao /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex 4387 com.rjb777.rongjinbao:pushcore /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex 4475 com.rjb777.rongjinbao:pushservice /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex!classes2.dex 4387 com.rjb777.rongjinbao:pushcore /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4387 com.rjb777.rongjinbao:pushcore /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4387 com.rjb777.rongjinbao:pushcore /data/data/com.rjb777.rongjinbao/.jiagu/classes.dex!classes2.dex 4475 com.rjb777.rongjinbao:pushservice /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4475 com.rjb777.rongjinbao:pushservice /data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex 4475 com.rjb777.rongjinbao:pushservice -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.rjb777.rongjinbaocom.rjb777.rongjinbao:pushcorecom.rjb777.rongjinbao:pushservicedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.rjb777.rongjinbao Framework service call android.app.IActivityManager.getRunningAppProcesses com.rjb777.rongjinbao:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses com.rjb777.rongjinbao:pushservice -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.rjb777.rongjinbaodescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.rjb777.rongjinbao -
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Acquires the wake lock 1 IoCs
Processes:
com.rjb777.rongjinbao:pushservicedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.rjb777.rongjinbao:pushservice -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
Processes:
flow ioc 13 alog.umeng.com 29 s.appjiagu.com 66 b.appjiagu.com -
Queries information about active data network 1 TTPs 3 IoCs
Processes:
com.rjb777.rongjinbaocom.rjb777.rongjinbao:pushcorecom.rjb777.rongjinbao:pushservicedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rjb777.rongjinbao Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rjb777.rongjinbao:pushcore Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rjb777.rongjinbao:pushservice -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.rjb777.rongjinbaodescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.rjb777.rongjinbao -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
Processes:
com.rjb777.rongjinbao:pushservicecom.rjb777.rongjinbaocom.rjb777.rongjinbao:pushcoredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.rjb777.rongjinbao:pushservice Framework service call android.app.IActivityManager.registerReceiver com.rjb777.rongjinbao Framework service call android.app.IActivityManager.registerReceiver com.rjb777.rongjinbao:pushcore -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.rjb777.rongjinbaodescription ioc process Framework API call javax.crypto.Cipher.doFinal com.rjb777.rongjinbao -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.rjb777.rongjinbao1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rjb777.rongjinbao/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rjb777.rongjinbao/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵
-
sh -c ps2⤵
-
ps2⤵
-
ps2⤵
-
com.rjb777.rongjinbao:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
-
com.rjb777.rongjinbao:pushservice1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.rjb777.rongjinbao/.jiagu/classes.dexFilesize
5.9MB
MD5537c76e4f18b0a59fe0eed8341a2cdce
SHA124e87eabbc77a22c4b8e1a51a275e546538c26dd
SHA256fc9383f0afc530901c3f105bada3f6bc5c21fdd423b81cc863b5d332e04f5e02
SHA5127a32022dd55afd4bbfa335ff96450e2b489358efb61164c88ab8efe14e55690519c8b06d6bfd1a11a7424a4bc0dc777eda6db7aa10784c1e6fdbfb4c5906e229
-
/data/data/com.rjb777.rongjinbao/.jiagu/classes.dex!classes2.dexFilesize
5.3MB
MD5e8439b7c5b9effd767e6322b03695c93
SHA18b5603c00f4ed0776051972c3f22b85d47c70065
SHA256198f38f9a1048f24d523ed6d3bd24f45388cd3a8d675df922d6fbec26a84041d
SHA512070c29281d4ddffe53b0979c834d7ab092eb5f87ee2fd78f72f704ebf9d2c91e431421e1cda79eddf95e8d95e31f7a4ebdb73732eefd18a3e2db7655ed1ac4ac
-
/data/data/com.rjb777.rongjinbao/.jiagu/libjiagu.soFilesize
485KB
MD52c1a490890ff15348d2fc3815b2cfb3d
SHA1922e1e5539c40ad5bed578a9cea9f076df02eaee
SHA2564a272d3707e61d656a95d20b944a402a4ae39b79013e3a47a93c0faa3eefc6da
SHA5123a910269e855c3c9a31e40d2d18d166d3c3dc08bb9b063e363be8e737181389e9cc67be8d9ef8d1a63ca0500d0d028aa2562e6fb979beb1a1cccf0fe4d1d1853
-
/data/data/com.rjb777.rongjinbao/.jiagu/tmp.dexFilesize
284B
MD56a4691c4d97fd146c77f9696663ce51f
SHA1a8a4e3aea6c4f3d525b748eda519102a467497d1
SHA25661d51746598b7af070723a3470fa3d3db18c7523d57d762c19101b47528b6d90
SHA512e5e3eddd26222747b874b0a232acb4331829279977a136a013052639c491804f534e642ee4b26cc036b4dca35bd408d755ee7b6c106f40c0bbaeb6cad7d03304
-
/data/data/com.rjb777.rongjinbao/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/com.rjb777.rongjinbao/databases/.ua/ua.dbFilesize
32KB
MD58ebcda9d7edaa5efd9f43c7e9eb9645c
SHA12bccc2fb38dda0ae847db8631e615a7e7feca621
SHA2565cf4880d422dab8b057f1e0f6b7b2226d65587e3613f3515e5e0eeb64b496fd7
SHA51266b490479d840a96d82ab36fe7b35387468ceb5b4f7330640cb0231f16a4a763d8c4f9da8ad62791360c6191e6762d2b29e4c4dd9c5eba3efeb5eb01a055d61a
-
/data/data/com.rjb777.rongjinbao/databases/.ua/ua.dbFilesize
32KB
MD5d604a3bf1f8d992cc320ea5b1f7609bd
SHA1247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA51267e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab
-
/data/data/com.rjb777.rongjinbao/databases/.ua/ua.db-journalFilesize
512B
MD52c04ea0637ed25e35a9ef7278f0e970b
SHA13c4c52f86d474914a0bd01299a3d979f9408545a
SHA256fb0c54514ee347a7b8f174fd1743c29e7e9ab41fc0faa5bdf8da3ba648288eaa
SHA512b857d8119ccde3e289eaee144758802e16625cc3311fc66e8e16acbbb554ee047279fcdfd6a0cbeadc9ed98e358eb92138daf937345940a5a7d7496c51d3a5eb
-
/data/data/com.rjb777.rongjinbao/databases/.ua/ua.db-walFilesize
56KB
MD50a408852b283d6df82055f206207afb3
SHA164b32e3d0cbe13a0f6d4a5fc834f7e18726dc9d8
SHA25615181fe0cd01227cb36a2998d2270c34b8414cbd3d34474afad6890ef0b1a0b0
SHA51226cd7bf3e66f69dda6a3fc9854942f52f39dd76dd98566143ae8a863cd1e2af221714ac1935f60e62757d566c58cd0e7977f7bb85c5eceaf4c522f901546c6d5
-
/data/data/com.rjb777.rongjinbao/databases/.ua/ua.db-walFilesize
8KB
MD5df4019aab081971de9b7bc781be58831
SHA18b431e0cae03ca8c94f46ba0d72a0cab969e0d91
SHA25666a2c501019fe9c8e30a77c270813c97c53411586cc371046f70e092fc3fd236
SHA51241b4d0074a1b88cbc275ca1c4c15ceb0405377eff22cb4dfd656125f2a0d86481fab9e092aa3df5f40489fad6dfb53b206a63edcf5f90fca4c94b9f9090446c0
-
/data/data/com.rjb777.rongjinbao/databases/cc/cc.dbFilesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
/data/data/com.rjb777.rongjinbao/databases/cc/cc.dbFilesize
36KB
MD5ce6135aa1b1fe4f2c2db2a546d2a5558
SHA179b59582154017aadab783dc266fcb158c252940
SHA2567b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA5122839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
-
/data/data/com.rjb777.rongjinbao/databases/cc/cc.db-journalFilesize
512B
MD5d5b5ab2c0110af622cf513da4d59b204
SHA1563f24fe8dc249c9ea1679ac20c365616a39f902
SHA256274b733b26069b2b321f5716ec99445d070dbde2cdcf4f28f0753beea046f81a
SHA5124cf732d312fe92da1a9c96a7f469ed3afe978e81ed34b345569fe146fe57682941567b4a3ffcdbe6b239ee8b2a3731ce5f71370e19ea7fbdfc434c099bf7fb00
-
/data/data/com.rjb777.rongjinbao/databases/cc/cc.db-walFilesize
48KB
MD58f1abc9fdf10e39e71283b9ec5d938cd
SHA13437d2730f60c1c33a7a02ed9427a4eeb15bb356
SHA25681a51973f17739b79efbb8158be6058bf725096c069163ae24bd8b3339f21734
SHA51248aabe018587ae17df2096c9a5ccae5c64a50c659cc3c7b687509a196c484e7a316870e4b565b552c0d0b1dcbfbff33f2c7e0db27327560b0249021c06e9048b
-
/data/data/com.rjb777.rongjinbao/databases/cc/cc.db-walFilesize
16KB
MD5a1c73837b9cf6f9e4ee9c4c65eb086e5
SHA13216512b0cf8fb055723ef2098bdecba7c4a1c85
SHA2563687d839abfc9e4d654b0128405ac6a775b7e453a9cba6dce21a2d65e8d67ada
SHA512c454d52151d2ddaf910b7fe8a07e83f32e76383ab54a248ac611e18e8b9e512d7b3ede107a010aba78ae982414cfcfb1b7ec65117df62475178a0d8dbf56e916
-
/data/data/com.rjb777.rongjinbao/databases/pushsdk.db-journalFilesize
512B
MD58888b0d01bb1d8e21f5a8132568dc734
SHA17e00976e4e2933623bc155f23670fe28e065d3ac
SHA256e86728fa909ba55e60d92d59c4994d1b2e4794b10dd556fb4039f74f3527ae92
SHA512271332f1fe07a02e1e73dd87e291d1ae42648c96823f170072227b0cd9faf638a5d8cb75ea4e0e64fbf4d499ce2c986887fd0e1237e9da471467cd2968bc1108
-
/data/data/com.rjb777.rongjinbao/databases/pushsdk.db-walFilesize
177KB
MD52e5e4f2d7352b8b83c22d0ad87640c43
SHA1d6a141e9a3e8b451673c2acb97df7b2d098f45fd
SHA2567c07cf3e497feb4efed6d33e77892741afaf2fdf744f6abd17b114e28a54be1f
SHA5124d1899d5a9cf4717d3dd6b6c3c31333b451428c4607d6f3699d977f2f2991f2bdc14723fa6d1206c485b3e7acf209afeccb20c87113330e51e0039aea2694bc8
-
/data/data/com.rjb777.rongjinbao/databases/tencent_analysis.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.rjb777.rongjinbao/databases/tencent_analysis.db-journalFilesize
512B
MD502bee55c35227e0c7567344f6178232a
SHA1fdc7df2fb4bcddb6e4f7e1705616ac05c55133ba
SHA25633babcf434932a41d5b4ba0a5eddfc9d4233083421f1016088b369770962f34b
SHA5127a5f4f169197db79138dc437695e4b86aae5f2274e540121c039a34d41e7f0febe09fcc2d63571895d810ffdf9f59668e277bdc7f2f1dbd9b28bad7e98eb481d
-
/data/data/com.rjb777.rongjinbao/databases/tencent_analysis.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.rjb777.rongjinbao/databases/tencent_analysis.db-walFilesize
76KB
MD5c9beb13177bd2f6d203aad6bfbc3d499
SHA158634b53c993ae323eff1c58910f03a032191504
SHA25666631bd17a596d9f0eec1afa1b54f227c40480e09c98d7d5ae4bda7e35550976
SHA512074cb14c0f5c99c5327c74df68f8ffa66b42fc76e20b775be577306d0c3a512cdc59a084aa9166f58bedb4384b9dce03657b1e8c02a1a595fc1860c11e2dcc76
-
/data/data/com.rjb777.rongjinbao/files/.imprintFilesize
997B
MD5ee38851389306e808d80864e77200f44
SHA121b14a2ecd3a2f098b17f2973af3c5bd4852dd5a
SHA2564f64f3cf049ac19bd5ce27db782a19d3e4589758dcaa79e812c87822a4653200
SHA51269bba40192f1a8fe56ebe6470dd693ca16a8aa5635538cc45978dbbd52ede3e873a5ca0c3c7a03af6ec6056f59563fc00129d212baecf91734627450691228d9
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.acFilesize
40B
MD50cccfd51c9d83b59315d70cb7bf7bb23
SHA1e5ea0666dfc3b65b66dd44db433ae72db1799a38
SHA25650b8cce0a4379e2b0fd60b69cba7a6444dd841f18c6df6d31516817ab12cba60
SHA5125dc365a8d0da3ceb432bc325410aefaa08396b76fe6aeac9abb931a6d5b4f76035cedca5d3f45001e1db0e1b5a3de00263b45ce4813611bb10b58dbdd0375606
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.acFilesize
40B
MD52f7f01cf36e900c5b4f14ddc84793c45
SHA162b86c112292e7d27420b4d5d406cba57331b198
SHA2567476c356aa90cba3e5bf94cfeac91a50d6df2dde319cad8e2d91d95c3e195479
SHA512644276bd3131ca74780f2e11f1e4bdc278ccb83658488ee7225c72ef68f4299ba668448822195e51abab08555dc84f1178493d98f4e2a0f89076f8d11d662500
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.diFilesize
340B
MD52b1ce588f138a9540dfd52781ea4bdc3
SHA109cc5093083be349a2cc8d94b47a532076c96d11
SHA2565476c314b09afda9887e3fa437c4842c99b877746cf20f7217c4f36cb2b6c587
SHA512a77f866c1891699bf54fc1270de6df702a005fe2b7173f9433f4451225247d9ede1654a4a2ba19707c18faa4ac4da786d9ce0047504e822f9ae334bf950688d7
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.diFilesize
340B
MD5e34c1a8ecbce84ca7fe6cfbc1903223d
SHA1a3f6e7197146f1d534c4d70a7dd2f6bd62777133
SHA256170d4daf51669b791575d244c8c9a4b601b67fb2ddff5243134fff7548428164
SHA512babb1a8b74645fcea5595447141c42e830fb57106daf2ba501031f82390d7032080764cb3782bc2152a197fcb80be54ad4c8715cc7aae6bd1b8b5b14badd8ffc
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.icFilesize
40B
MD5b9488bbefaa03c9307a7e06e734df246
SHA15b7b6b062e928f2066300ce0d96d60910c754443
SHA256c663102e6497012089f65d60389723e3090696451f9ac02c84e0d927a042cded
SHA51273444a55a186d6c283ede830a49ef225b106f6122ebc6e30078468d3ad4414685e49338bd0002f40ae7e6775f38cdbbc90e3e6e979e6b974b3d18d6d6f7f574c
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.rdFilesize
73B
MD5d75297eae6966aab63f9c8291e4120c2
SHA110b4387dbc575044b39c937481e9d1cc34ce7b14
SHA256b310150aeca6a1995445f4137a7f05b0f7c4cf589dd53334854aeeaed4332db3
SHA5126048dcff781464b0bb54e4ace3fd57217242eb675a2203686f16f98707e13ef6ba8df1d09997f4561c34a4c8320a38f087ac15752965723fba6ec35298da75ad
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.riFilesize
32KB
MD501d42da39000ffdf1b767ea4e93d6b55
SHA1e54359225562119df99b1848312d84ea4550fada
SHA256a4c839b940e0d682fb7a7535fe0c7f05dee431630dbd521f72fb3871e804b9bd
SHA512278e8c049d6b80813f66a573c6344cd6c8390acb7e8f4e600b3804220316f6db8d39890318df971a6f50c61540f67770f77b5c25201ed134cc0bca764f96c313
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.storeFilesize
127B
MD57b9483a1f2ac30a1a779304a669bcd4f
SHA12a5a44b5eb25411d8fba866d32499607fdfdf746
SHA256ee39168f36af9e6934955f0b481cf098919f7e39c5633e0c7fbd4234d97fad3a
SHA5128fc3740059b75b6cfd8a0d0984e8276cc026a5d9f3fbd6b63b6d79292440c79842f119ccbf8d42be5b2fc3bf0f76c4971b9c58b3530714856517d1f67adc4052
-
/data/data/com.rjb777.rongjinbao/files/.jglogs/.jg.storeFilesize
32B
MD5448e391c59eef34ee1defbe4dee4c41f
SHA1df1f890987371d7d8e6963c68b787856e42bc146
SHA25655612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
SHA512ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
-
/data/data/com.rjb777.rongjinbao/files/.jiagu.lockFilesize
27B
MD5236ca13f0ef86b91952684e4fd87599d
SHA1df494bd4b2bbb2d3e810b3a2aaa27ef7a2c19202
SHA25653f7d6edd3f9b35e363cd587a9d5eae95b9e9cb019046533e4b1aea487b6c3cc
SHA512cea8fa91cc92d1366b62a386d5106ed2c28f80c4335d8b1381548709f3fd4e6030093708ce176a0362a81a297fa2c2a4509c0a6dda7018a3c86f0323d0b6dd69
-
/data/data/com.rjb777.rongjinbao/files/.umeng/exchangeIdentity.jsonFilesize
162B
MD53c815c6fab3b8d80601c12c5dff1ea4b
SHA1f5fedfad0e324f0ad9d40a31aca557ce38d32854
SHA2561b1b03439b50ad11dfba974eb39da4bed71e837bdab4e4ddaa3a737a130129cb
SHA5127bc35e103552b3edb1816cc8985e3e34ffb70611fbf46ad48360b2bf244ca4b78c9c1a36690d18cb871592325fef38370e013b6bc4dd4d5a8a006ec9e0e17081
-
/data/data/com.rjb777.rongjinbao/files/__local_ap_info_cache.jsonFilesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
/data/data/com.rjb777.rongjinbao/files/__local_stat_cache.jsonFilesize
25B
MD52d805b13f2f28dc3ca9bbcc000f49bb5
SHA19eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA256c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
SHA5125db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
-
/data/data/com.rjb777.rongjinbao/files/exid.datFilesize
56B
MD5eb6840e86bad33c83586d0f396f8406b
SHA1bdcf7994ce5c12c9e7dc43fcf79b1535fef566b8
SHA256c41823db2d8fd1714dff82c110cbcf64783f6e5d4caa6233f1cb49035e8c4b8d
SHA51225e26ed3b40ce176a25844737738d9cf0f589de78507f44bb77945d3860450da6508c6f0db6ad11920df6eac1a20516d6448eb6e3597d86e67e61237e7a0d2f1
-
/data/data/com.rjb777.rongjinbao/files/umeng_it.cacheFilesize
415B
MD5942721475e977dda0c1d75b8922194bc
SHA1e26e43c9ae3187dcff0f64203bac241fd0da955f
SHA2564483267b73edce128d822848fc29bf8fdaa9a0b162ebd8ba205b2ce193998c85
SHA51278482f2083beffc192155c6adc9669c1fb6b27beae0df33204a7bd5fd84f310d19f3519fae1b95b24b18dbecce9b5241d2d6618b0ec56f29bf61c14ea17a5ce6
-
/data/data/com.rjb777.rongjinbao/files/umeng_it.cacheFilesize
211B
MD521e97d9c1a41e278d0d5503d345c7a0f
SHA1fc7ca8a465c885266f357397e6ed2ff5a2cb430a
SHA2561ba69d8fb729725f99ea33122aa047a7da947c75601c53590ecfb459a199fcd9
SHA512855bf8f5ef4602d4a7f188c0003556701526dbfde34167cf44ce8bac389819374009e19209fde28682963e22951675ee7ec6259895e5fe79a8c1b2da9b7b7146
-
/storage/emulated/0/360/.deviceIdFilesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
/storage/emulated/0/360/.iddataFilesize
32B
MD586903f69e181b2f0a38b834cd37069f9
SHA1f04e7caeed54ab58a61b2a9cd5c92b60ef44326d
SHA256fef68920ee60deb3327f4191d475ad29b302f5c806a2610789e634b4695fb8c4
SHA5129949c33b616c4b67f3fdfd6e420eddcd922f9e5eff65950eed95cc4086ae60d27ac3084d1f397ae72d7592954d8d52efc8d30fda2c14545baeb27aeac35092cd
-
/storage/emulated/0/backups/.SystemConfig/.cuidFilesize
89B
MD51e2d25229e35ec2fccae8f9f0393c807
SHA187bb9d6e418a7ccba47e9eb1700777ba6f1aecd0
SHA25647cc85a3799bcb639e73f7cf29d0decc3dd2b6ba062da18504c623f2f78c5fda
SHA51287e1d2de49fd8642886711a2a550b34f7ecf3708cfb11600c0557b32bfe50a300ecf51499991bda42ac22ba24c25f002e3da7a4ea85342ea11fe3de38c162f71
-
/storage/emulated/0/backups/system/.confdFilesize
20KB
MD5495dd31c5989554abb17c71c71e3a21f
SHA15a6ee4f6b5ec93b67b3cddbac9c6a913b49404bb
SHA2568854b78b1e098e088342da13de98f20c05cb322005690cbde46a260911bcdfe1
SHA5123f1ea08f3966e353039408b345d54d9e8971ccb283c48660a373b2894707973147c189874db06ca3375a3fc4998b2ed8fe201b8edf39f6712820b7d266e3ae6b
-
/storage/emulated/0/backups/system/.confdFilesize
24KB
MD517a10febc13f1fbb64169cef2862f842
SHA1ba2f1e775b464ab6ef3fa8112b43ee45105ae20d
SHA2560b330f620393c59b3fb71ea0e651b6e79d8614c228ad6e61e1ab01e83728cc97
SHA512dee50df43691256842457faa716fbf7af9459b9c7bdd87b513ca7bb23ff3265e4c4e540b898a29330fc812a28b12f0e2d949e0855fadc6a0e727c0061fc2cdb8
-
/storage/emulated/0/backups/system/.confd-journalFilesize
512B
MD5b7f542beb4ea6219e61f2713fc5cf86f
SHA17329d856f4812f8f2c993c0241f680e64e759027
SHA25674dc2baeeb53aa747e60ea8b836b6d9666c6cb73471fd747bd416d7598830cab
SHA512871ae2f828bbb931a43194f2b4d32cbbcd069ffcddc0dd75e4f1dc27be2138927e1d514df3d89a2bd72060524bf525a011256dd17ec9cb4a5130684fb17b54c1
-
/storage/emulated/0/backups/system/.confd-walFilesize
44KB
MD517fa864533773836317867f79d400a78
SHA1ec98ae4714e630520880d58edcfa1df1aa0fec2b
SHA25671a2f3a8384c8e04cdb5f4baf885468f154fc5f24a90f92df73be76356c8bf05
SHA512e25557b572db3f8bf955b053dd0a349d2398c1906eb0a150a78f2bd462c185edc377994af6cdf9562fc42e38a10f951d4b8431c246b0dfe715a70fe3f2609012
-
/storage/emulated/0/backups/system/.confd-walFilesize
20KB
MD5103435376252e80746717424d98f8890
SHA12de0f74a6736834281b0ec265bb2b508224beba6
SHA25658fc1341b6d02393c062bc30d96b3fc435e7e2e47aeff5dbc8ae399b3088cc4f
SHA512cf9273a073518a561b7c60bf0088f2ce1355671781bdbbbd2d7d8fb16f15cde5ac3b6db1d92b1025a734cfb1dc02081951a0cf39c41a30dc683e6a4550b4651e
-
/storage/emulated/0/backups/system/.configFilesize
25B
MD5a14ecfc29e8c4694975d394c04e9fbfa
SHA1906e973615ad3e48ef3da8a07af26280a414e7dd
SHA256ad5487f018fc8cbb9372b57d112efa37ed867e2311ff7195dedc96cf1dee8d25
SHA512b84230737fdebb478c4c87a15ef33c958e0567c78c680c08f2d0405ee13f063066d06792b431209def019cded61db061b4bed61eb416888a2e82f3e40b403850
-
/storage/emulated/0/backups/system/.configFilesize
50B
MD510f537e1df71e1227e2ef84ba5ae11f2
SHA1e1e48e4663f84aa413922c4d44e58c0ec326ca43
SHA2563535b3f81f7ce834d919e6ac136e3c09e355d3aeee39fc95d01d2a4c707fa973
SHA5124dbc27b92e9f26354fae4ea68349af23e4dd8847ce7b615952dc4a633c9bbd582aa88f57d9fd7523ec46fba6af8dded78777ac058f4e472a503cd7baa9fbf222
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD585261b37a53acf28abc9abc39ef1f926
SHA15ad940b91c5d8cdd3870c3d533f78e5c936a9755
SHA256c3badd36f2a61228ea1c89719522c1ec73fa28f76f29fb1842f721869f08ef5e
SHA51210e28f2aa5d21ab0e9b61173b3008fb32619594643f11b9ba11b3d5983c2f67e7b73f28c841c832ab25c91e3f70d8902877ef94dfd72cedbd0aee8d37f89527f