6da84996845fde20db45391351da159855ea071641b079eec3ff8b9b5f396e61

Analysis

max time kernel
175s
max time network
182s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17/06/2024, 04:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b6ce7d4d35d5cd390b1d71b6585de8db_JaffaCakes118.apk
Size 12.1MB
Sample240617-fa28ysvdla
SHA256 6da84996845fde20db45391351da159855ea071641b079eec3ff8b9b5f396e61
MD5 b6ce7d4d35d5cd390b1d71b6585de8db
SHA1 9887f7a1f4f5a291564b820c907a90290f2f6246
SHA512 e9ccf5942d3c57ab5ecc172fcf6675e6cb1b5be51fee43c1b9f820471a9196eee910a8c223ad08c28217342e1f398e207f32f3e77ac4602f514c14624edcafa8
SSDEEP 196608:b3pV2CSLaRgD2gfHoSYPRidWLJClArucbPUOHZanYHsgl+/HLo:b3pE7LN2gfscaReOoYHAM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.mfqbzs.reader/.jiagu/classes.dex	4270	com.mfqbzs.reader
/data/data/com.mfqbzs.reader/.jiagu/classes.dex!classes2.dex	4270	com.mfqbzs.reader
/data/data/com.mfqbzs.reader/.jiagu/tmp.dex	4270	com.mfqbzs.reader
/data/data/com.mfqbzs.reader/.jiagu/tmp.dex	4319	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.mfqbzs.reader/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.mfqbzs.reader/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.mfqbzs.reader/.jiagu/tmp.dex	4270	com.mfqbzs.reader
/data/data/com.mfqbzs.reader/.jiagu/classes.dex	4350	com.mfqbzs.reader:GuardService
/data/data/com.mfqbzs.reader/.jiagu/classes.dex!classes2.dex	4350	com.mfqbzs.reader:GuardService
/data/data/com.mfqbzs.reader/.jiagu/tmp.dex	4350	com.mfqbzs.reader:GuardService
/data/data/com.mfqbzs.reader/.jiagu/tmp.dex	4350	com.mfqbzs.reader:GuardService

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mfqbzs.reader:GuardService
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mfqbzs.reader

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.mfqbzs.reader

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs

flow	ioc
46	d.appjiagu.com
54	b.appjiagu.com
41	s.appjiagu.com

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mfqbzs.reader
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mfqbzs.reader:GuardService

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mfqbzs.reader

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mfqbzs.reader

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mfqbzs.reader
Framework service call	android.app.IActivityManager.registerReceiver	com.mfqbzs.reader:GuardService

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mfqbzs.reader

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mfqbzs.reader

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mfqbzs.reader

com.mfqbzs.reader
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4270
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.mfqbzs.reader/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.mfqbzs.reader/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4319
- sh -c ps
  2⤵
  PID:4600
- ps
  2⤵
  PID:4600
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4747

com.mfqbzs.reader:GuardService
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4350

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.mfqbzs.reader/.jiagu/classes.dex
Size 6.2MB
SHA256 401c07f0e4920106d6038ec7efb1dd7bf2cb27570786c26bb803ff668ac04ef2
MD5 813f78c0c336708f25053c39e2aae3c2
SHA1 f8f8523a2a95970a62dbea8834c4bbeedbca2fe3
SHA512 0adeb448137e9fee1eaea58b50035e02136eb029d26fdad236d4dff8fa3f944c82c68a350d165fe8370cbb3386b4e43eca86c43f1f0add10585da4c92290185e
SSDEEP 49152:LRmhaj7082QfC0K62b7xluczNKZGepDpmkZ4z86WAtW80LPD5UkArFm4k:LRmhajY8VLK62JU/pJU86RtWbPt+Mp
MD5 SHA1 SHA512 SSDEEP

Download

classes.dex!classes2.dex

Path /data/data/com.mfqbzs.reader/.jiagu/classes.dex!classes2.dex
Size 4.9MB
SHA256 5a3c371cfbaf87530ec097a2d6c1822e21654666abfee6e0ce0e43f7296ff2b1
MD5 06e7dc09904e96a5941c0c19d7f685eb
SHA1 a2ebcdda0e00a56d84ea801f73ab902c7bc721b9
SHA512 2e7e305799299e61e056fda6d3a6db1eb5512d95d6fbefdbb425c31c5071524241a7ef26c20d7d84f1f11ea84be5ff074e1e90c71bf5649061c9bddf9966cbf7
SSDEEP 49152:a/KUn74abisny7iLHUKBB/zUrkKFdB/15wz7PdAc3mxqxoVZbX+AUx/nijh/j:aSPiLHTXzUrkKLVY/niR
MD5 SHA1 SHA512 SSDEEP

Download

libjiagu.so

Path /data/data/com.mfqbzs.reader/.jiagu/libjiagu.so
Size 482KB
SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
MD5 f380717bd1e3916c7b697fab8d46c5d8
SHA1 04f51f0d16097214e38be517d93be44cb0603a88
SHA512 b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e
SSDEEP 12288:1U00fCZt8ej46h8oQaik5P5ci1tUDTDakfmpjcjkDGaT:1UzfwJP8oQgRZ1S/avfC
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.dex

Path /data/data/com.mfqbzs.reader/.jiagu/tmp.dex
Size 284B
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
MD5 SHA1 SHA512

Submit Download

btechainh.db

Path /data/data/com.mfqbzs.reader/databases/btechainh.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

btechainh.db-journal

Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
Size 512B
SHA256 2525e76d8ff28835e530bee2b483dacb55b28e31fc0b504efedabc958041027b
MD5 771085ba66f99fd6fe3215a5d8f88fbb
SHA1 2febb39bd0a7dfeb0dee74349b9387d9028431b5
SHA512 5c7129b03a4518e2702a1de0e627b174f1a9ffd2643c2b3f00c30011fa2cbc218e3b85fca1ac40f9a201482ffbf88923c589b6f898c40834b1d51407ad25d99c
MD5 SHA1 SHA512

Submit Download

btechainh.db-wal

Path /data/data/com.mfqbzs.reader/databases/btechainh.db-wal
Size 32KB
SHA256 c787541310ccd086393e94e6b5e6934b7480357dbb1580ab974511982fe71b21
MD5 6fb333146303aa7b894cb1b449d0b5ae
SHA1 246529898570527325e12bd988e97f868f7b5736
SHA512 71c616146ae9f533d4dfca84f07f45b75afc57c7a26fddd0dd1041b760e89d000c6e955d6bcaa26568915f9edca005dd447884fe694f55addb6f8d86a7d82311
SSDEEP 12:K+8OlzdTRmBEyPbP/YW8lNV4OwClTnc0uFv3mBG2MjJ27RmBEyPbP/Yr8N7:KKzyGSP/BkVCsc3R3OG2MjlGSP/V
MD5 SHA1 SHA512 SSDEEP

Submit Download

easouBook.db

Path /data/data/com.mfqbzs.reader/databases/easouBook.db
Size 36KB
SHA256 574b34f8bd3f8fe2b2e1ce4f7dbc3f04e0ec96404bc9d64e236188d897ca77a7
MD5 ed5a7a63b573eae86d0b77e60a263626
SHA1 18fcd8d46d0d1ed2aaf402b8fe6b3e949f4aee4a
SHA512 ae02380483581e44886b3a250c4a0718dfc73ed3922f1afe494cfd16b735b1e0a8e594fcc791d08175f9292dea1f0249face83807c5de3b13d2aace6ee6a6a79
SSDEEP 48:T+zNs5GBgc5zQgiS1GPKfelqzNximO518IJK94BqcITS:oB2gizTZmV8K94Bf
MD5 SHA1 SHA512 SSDEEP

Submit Download

easouBook.db-journal

Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
Size 512B
SHA256 1a9a834b867a7e6c1994b85a1c9d888c6d6582e379727bf8bfcd623d8a6fb2ba
MD5 8f913ec4caa0b70df9a49e21b8068a05
SHA1 55a879588054a6769d505c0061d5d1ad5fa95006
SHA512 7bac711ffe891899cc305443171b1c9397dab7a027f22a34751a5cb19eb92fb66d99f14f67cf89cefbb1413e5ec72ab59d5b54956cbf6245781e47c607e814a0
MD5 SHA1 SHA512

Submit Download

easouBook.db-shm

Path /data/data/com.mfqbzs.reader/databases/easouBook.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

easouBook.db-wal

Path /data/data/com.mfqbzs.reader/databases/easouBook.db-wal
Size 48KB
SHA256 fd055ddef741b6cb2e53b1290a356da8c8b1eb2b6022186c311fcfbfadc1efc5
MD5 ec2ec89e511e2419bacd580b4ddc9314
SHA1 5e24cc394dcce53c4b63cf9faf9b61f0da2dfe00
SHA512 78ad83cb06c200d0c51bca79c906ec0e3263296b14e3bb5ad1c5866f1eed45282a408664f84cc4fbc5e5aad348cd6e6b66e46e6895b6f6f8ccabc40420854dbe
SSDEEP 48:d8zNSP/qU++zNs5GBgc5zQgiS1GPKfelqzNximO518IJK94BqcITSP/T:K0PlB2gizTZmV8K94BfP7
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.db

Path /data/data/com.mfqbzs.reader/databases/es.db
Size 20KB
SHA256 61d50595229cf66b791bbcc066ab175098f745c66700361957c8b974a194789f
MD5 ea3aa6fb8d9973497ece1f2cb4bb7878
SHA1 a0578081d82c1e833a8d73d0ba90372cdfc7ac4f
SHA512 587da63d14dd7a4ce3992d92e2774d1b4e5e207bb4f51d095f1030d863a029e60ffcc6add7ed320291f009e75bd13334fbb075f3aa5352c5ba46cddf57fba315
SSDEEP 6:l9Fwynq5rkSuO7tLuSTIOey6/SUlmERX4PBX4ogLugMBX4suuKfpqiOw:TDWrVUYu5/S89RmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.db-journal

Path /data/data/com.mfqbzs.reader/databases/es.db-journal
Size 512B
SHA256 8fbc697b506b85162bff06be2cade9b001cb727f171baa24a60ccc845b04ff9b
MD5 eac8cc943016605d152016ebc2fde89d
SHA1 d744430df74338f844043ced59e5cf34a8ec82cb
SHA512 9f1be96fb59871d2b342e95ad993750ebd21a7536cf44c190f9ac52bd970341c61a9df0adb55ae6057645283cd273ff8bad4688fa82b8908161ceebcdf0f2acf
MD5 SHA1 SHA512

Submit Download

es.db-wal

Path /data/data/com.mfqbzs.reader/databases/es.db-wal
Size 32KB
SHA256 cde9bde6346a8a329e2490a4fa5dd859119a607b8c5ed9f9b86e4741e799bdc0
MD5 aef500694013fda5ba3cc70795aca021
SHA1 895598f86e8261b2d7dec0ea5a1a656e5f914c00
SHA512 0adffe661d157fc6825fab9d080cbc4b32facc7d77ade566d483e223c15816aa45fef39a3dea5b3b28454c88347c13b2f400e15f7715b756ee89339f282a270c
SSDEEP 24:KNc/uc/0zyGSP/vc/Xc8fc/FDCu5gGSP/vc/1zwtc/:GOuO0zNSP/vOXtOFDCASP/vO1MtO
MD5 SHA1 SHA512 SSDEEP

Submit Download

eventInfo.db

Path /data/data/com.mfqbzs.reader/databases/eventInfo.db
Size 20KB
SHA256 83907449b9ca5958181a1d17b7c59f0569cc9bf5877714dfd0707f789cef1a38
MD5 772112fe048c0dcccd1440ad546190f7
SHA1 250048d8810962caadd0d63c3d082e8d60082952
SHA512 4be09e12933da1e369f8874edd601a86c722ee944bd5f85a628d3867f7162921b1f28b1ceec27b249ed27fb942fb00fdeccb2e0cbb416433217e86c21deda967
SSDEEP 12:TD0yNTSFbyrXARXPUh9qR1zRmBEyPbAVOwG:TVRw4IgGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

eventInfo.db-journal

Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
Size 512B
SHA256 fb50f84b285c2dafdaf9a3c23418fab8dfb7fc54827f795085089214b896c448
MD5 a052c6b92c3a47b81720852aad0247ec
SHA1 3264d7e492d5814045f6bfc43cb1db8d6333c55a
SHA512 0d9d8a45649e258b92cf2a93c61b02eee3824efe889b5b95d208c148ebcf7452177444be899b04529b036ca1e03327381ccc8e57ea5ae4ded3d6da51b4746437
MD5 SHA1 SHA512

Submit Download

eventInfo.db-wal

Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-wal
Size 32KB
SHA256 89d9fe50a85634ed95c9f6540175f18627c162466af93b5d0effe2f067808e28
MD5 550d769354ad7419b124a1e1cca13864
SHA1 74ab3b9063c1d062f21c43f31b550440f3458420
SHA512 47c242266854ab845911590a94dcdc5e0bb41bf10a543694556142aa8b0eb5c574767e2351d074a1df8a14e06b8c9ac329f0c3e09c036ef091536fbca4530bd7
SSDEEP 24:Kkcw4VzyGSP/CxbhVx4s8VRw4IgGSP/ClOKREyx:78VzNSP/CxbhEFVRdI3SP/Cl0
MD5 SHA1 SHA512 SSDEEP

Submit Download

local.db

Path /data/data/com.mfqbzs.reader/databases/local.db
Size 20KB
SHA256 78d8f689718e894f087e56dffdf565f70587d96db83daf31e326698f4f463766
MD5 0886e1e4e9e13ad467fed5e6387bbc20
SHA1 a1ea02f457dfb31c0bd183092ab9ef53b860b848
SHA512 d705041d9a8a7a8838330511bffc5d8523c5b0efa062d1f0034aa36887f7d34bb8d6270ee093fc03a274672dd961f70dd35e7d5cb2ae30c0414429b8ff837a14
SSDEEP 6:l9Fwyl1hwCOlHW/Lu4xkAuyCACflWERX4PBX4ogLugMBX4suuKfpqiOw:TDhwBF4SFaCf/RmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

local.db-journal

Path /data/data/com.mfqbzs.reader/databases/local.db-journal
Size 512B
SHA256 88a04dfe01ad67fa14bb363844fa5a11b623e74830436383049b3d7859b721e0
MD5 cbb4bb2ebf33115d5d2705eefc124e76
SHA1 4d59efe26062d6340749f39ddb0b81f81a006164
SHA512 7c1ae6661f51d7c58d2ae27b379a080c890323ba804012fb6a65a09dd0d3df865d0d7f7c61f6d98381d4cb1f75b9731a985aeaf5aacfe77bfa3843b8b3f2b85c
MD5 SHA1 SHA512

Submit Download

local.db-wal

Path /data/data/com.mfqbzs.reader/databases/local.db-wal
Size 32KB
SHA256 ac8461d69620e59ce271ee575abf690ca6197db4a61256b1742167e7930f4f27
MD5 c0c013d37ad55ff9638816a4e7c24acb
SHA1 180d9e8c6f09e31ef6f3b9e4fd5a16e0bb6d0209
SHA512 a27b9c4eb1e89dd83941ef914ecc3ce78051937bfe6b2dabfc7d2b5911919024a3d32d70710bdddb7f15155fbf367334d3f9d831d4f9cb04eb2e4cd6d5adae14
SSDEEP 12:Kc0HSvVlzdTRmBEyPbP/RCaRrOwClubDhwBF4SFaCf/RmBEyPbP/RZnS01tU:KfHuzyGSP/RjJhb9wB1aCsGSP/RI0H
MD5 SHA1 SHA512 SSDEEP

Submit Download

localEasouBook.db

Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db
Size 24KB
SHA256 999154a4ad6c28534b577705b3d26bae32cddafc4f2e599c164e549bd4c1a8dd
MD5 a2803d106194a082003b0f5d7038f9cd
SHA1 3940a183cff3bd6365f1c9f46802c07c89033ddd
SHA512 ea73b2f9cad170d7766a83be81f10763f494262ff5efadeccffa128bc7e4f49a56cb109d6808b534155475637dcf328aa24f89a8943461afd5046215215e3076
SSDEEP 24:Tm4e4fmwmDB+qbC+RQwj51YlK/8n2EGSzGQ:TqqmbDBm+mwj5GkU2TS
MD5 SHA1 SHA512 SSDEEP

Submit Download

localEasouBook.db-journal

Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
Size 512B
SHA256 e6038223990b6592b526d01f1dd9319029218861ba5677ae07f39debe6d5e2f4
MD5 fb16ccf522d2ec40d8093561110cbc95
SHA1 331573aec001364fda8473ba0e5efd07c0567070
SHA512 0cb6e680c0bf5107cfaeed33f057de313d1cd0277628e36836babbf44c78b7798d39ba4133b4d2ddbd57f0ad42333d9c79fa1f6604041db32f619ee6ec03197b
MD5 SHA1 SHA512

Submit Download

localEasouBook.db-wal

Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-wal
Size 36KB
SHA256 dcc779a686e799d94edbfc93fd740bda328948ca8446cbb8e9694e8e3241d28e
MD5 9a479302c8a62a7504aae78b5b763dc0
SHA1 c7b7cbc55e349e0377d9b712df705b0372edd016
SHA512 18f0df71002e85332622c21bf84e2cc79082e63595c8a3e80eb3210b39eb31c4e55e7cfbae81c89bfb4aedcba5a7acaa2ad23e1eece604e49e4b9b0b05c1599f
SSDEEP 24:Ke6zyGSP/Kxm2m4e4fmwmDB+qbC+RQwj51YlK/8n2EGSP/iw:t6zNSP/m3qqmbDBm+mwj5GkU2TSP/i
MD5 SHA1 SHA512 SSDEEP

Submit Download

techain_d.db-journal

Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
Size 512B
SHA256 d6ed84b868185bd6e11b44fbf2d65e737bdb36661d2417ba33ee86f98ace9f87
MD5 0c13c866c4395968a72b04aa9f9bea24
SHA1 8c8eb23ae52c15e123b90b4135c75ec9ab775ff9
SHA512 0ee78d9122153cdea35d81f3f69cfc159957853879630cf6c7219957e56c2ebe992f15527ba50a4169b8cfe5ee444dae35b6a33ec473218788cdbd52ea626d28
MD5 SHA1 SHA512

Submit Download

techain_d.db-wal

Path /data/data/com.mfqbzs.reader/databases/techain_d.db-wal
Size 68KB
SHA256 fd8d923c703858f707836d6b9d1d793e4973a825569e729f5d4e77af13e9cfda
MD5 1c607f60c24200530ec738d2ba66f609
SHA1 188000177afdc9b79b43f5acb3f075153771c61e
SHA512 3cab6380ace2334d1d7a23df00c49e5d5060b2994f8265048679f59377283cb1cca6a502bc43947109435ce34d65e7d0c51781440b5c2b862e6bc5126d3d6588
SSDEEP 96:L0Psm4V2bPjm9QGrT58Um91S1WOTrT58Um9N:k9bjXUPnuUo
MD5 SHA1 SHA512 SSDEEP

Submit Download

u.dbv5

Path /data/data/com.mfqbzs.reader/databases/u.dbv5
Size 56KB
SHA256 d3eab05e41cd4c8a43bebc6ff23c3cda4d0eb571562c4d648d102c3bff68d620
MD5 4d111a2079a4057141327c7204c90e10
SHA1 c2eb516f3d09d047865547cf520b63d60cac8257
SHA512 4dbd64c23581f1afdad497b468e9c466fb611a630e54852726d0c5806afd7157c6b0c00454df2fe2040933ffefabf4bc1c3f03e2bc90c0578793e9f9ba78e81d
SSDEEP 48:TYdy9EVRX8vp45iqbWN9F8AVSLrjRKSLqBLe5IS:4Yvp4Yqbe930LBKnW
MD5 SHA1 SHA512 SSDEEP

Submit Download

u.dbv5

Path /data/data/com.mfqbzs.reader/databases/u.dbv5
Size 20KB
SHA256 4766c1c2aa16af803af1ebf9bea89b93d3c5bdc79a1b809da1899479444e7930
MD5 8fd7cda044212069b638834e0e823d30
SHA1 71ba515f629c4019a171e4c8fc34533c2d9ea6fd
SHA512 9d5631a0a2754e9c9c3de92196a61f22900977cc7c993cb9555194a0e7757e0ffb7150007b152ffcea0d49ba267d8e281bf7307f037a0ae8a0490f03d95a3a96
SSDEEP 6:pqj+7N/PJ14eGTfdjXOlJWnjQjBPqEJJ1z:IKNHJ1ITZOWS1z
MD5 SHA1 SHA512 SSDEEP

Submit Download

u.dbv5-journal

Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
Size 512B
SHA256 7c2a2b7292c950105d635a11e5bb9b61510c3d1febb18e796383e3695e03b0e1
MD5 badefa7d03303f395673941ab3aa6e95
SHA1 d4a29e144aabfe8957c8f57c4628f183ee4f1c6a
SHA512 ea4c97cd2bd03f4b54432d27ca332564bc8349d9d6f1e477f3493d40c18be951605b39801d406e4b724de752fa77f9603caaf72d98adf2abc337c35c946b9449
MD5 SHA1 SHA512

Submit Download

u.dbv5-wal

Path /data/data/com.mfqbzs.reader/databases/u.dbv5-wal
Size 76KB
SHA256 6cb7f8c6ab44cbe4e12b83a920eeee6f1303e8ac4372f2750bb229f88604dc5b
MD5 a6c6b9ada3d530c6ca60f1e1019f8c29
SHA1 7a16fd782d97c43600b03762b829b6e15216433f
SHA512 c5554c9aa019c86c06293eaf905378383ee4b6cdb57f9ca86a75abc7640280024ff2d1aa08b28fb59828048dc491df2963c7c4d6fdab73fb6907f42ca75649e7
SSDEEP 48:uzNSP/pYdy9EVRX8vp45iqbWN9F8AVSLrjRKSLqBLe5ISP/on7Y2O:m0P+Yvp4Yqbe930LBKnWPAn7Y2O
MD5 SHA1 SHA512 SSDEEP

Submit Download

u.dbv5-wal

Path /data/data/com.mfqbzs.reader/databases/u.dbv5-wal
Size 8KB
SHA256 703609c5cf7d503951b2f1ac21552883bf4a89334a75c65dc4f5ebb206f12656
MD5 06f4a3730d844e28610afec3019aaa0d
SHA1 20b0476b6541d7c2d00cd2c1ee9361597183749b
SHA512 4540dae5b6a5330e68df4183bbd9e452007efb65eb076b71fd4850336886604c1a272b15c005e7789fcb2ac1f62afcb1e776e8653789ba202fc6c3d1434dc07e
SSDEEP 6:KavYVaWvYAqo5+7N/PJ14eGTfdjXOlJWnjQjUl+60jotFqEJJ1z:Kmyay3T5KNHJ1ITZOWS2Giz
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
Size 40B
SHA256 33358cc194f107aa52c479750c31a10904507bde9b956aeb04a0c3f89bd70acc
MD5 06f1667ace5cb6b6d295a95acdf88902
SHA1 2efd6d91a3241eca3fe9fc1da23a433a8e16bbb1
SHA512 f10ead0973b82d536d782c3639fc7bfd7dbb735d2af4317948f7755d0106ca79134b2f4be4612b8136b474dc52e59ba9e86ace9b4f5bca09aa0314dd57462e13
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
Size 40B
SHA256 a8a94379ec004cfbd457767dcd516667a024e428b4c9f4d1a5af9c3eada51b50
MD5 279f2b2aea18d56e5f90a989c4069844
SHA1 b0a6df0a389515e1e502117af241e75f2ad0b703
SHA512 cad34edd73d30c97853e64aaf3ebd6a8ddc78655b22af59d98713a6b89e30127254725945c7ba55894c843d5ac49a5e5c89fa7ea3aa9be61016bfa9f54b95a97
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
Size 340B
SHA256 8bbb6380b6082d12351845fd16b09267c850664d4261bbc0044d9378dcb782cd
MD5 37fd59c34c8ea8be6be2641ff0be4e5c
SHA1 26a969811bc515641a4c1faeddd4a537377e8acf
SHA512 973f31358e5d20b6660debad2d33b59b0fb8f01be32fb6afe332f9753f9437a35b19dc5bd86583c953dc31570f8203c23df9e7bd05ebe7b5f55eed24aedda8fc
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
Size 340B
SHA256 14f0bacb322725a9c7fcb55f60b449551a6c0f3c2c6e85cb0957daa064c7bda0
MD5 448be00eb58c82931f9cd7309d50e3aa
SHA1 b9cef12988b204f89d10cf32edaa776c1591ffe6
SHA512 1f6924e2f42b9b73f687ed08e6af7e7b4508f7705adc25338fccef1076c81fe7384144edcc23260ada6bde258d5855ecd340e6ce65b3d26681088594eb96e7f2
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ic
Size 40B
SHA256 394a02bb2c0488812c07ef7c5e9ae7d280d89a1e0324e3588c3e80cc82c429e2
MD5 df45e3b484767854bb698b37f4928522
SHA1 cc31424ee51c738e45923ed22d79a4fea4661b32
SHA512 255bb42a7aa82156e8791fac7e41fc4a89bd94cfd4df3d453814f846e7a3cb55fc47cba4f1b24e0e74bd888df084bf8644fa830bf5dadeee524bffff3bf0f78d
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.rd
Size 73B
SHA256 9b7266eeb2b39bf12c2b21cf4aa9ec5ac2d5f16508ff0a72c48163fd9472b8ee
MD5 00262bae238d1cadf728e9248440cfbf
SHA1 13a3390631dd03c7a509c61e6d868e8e2b2d875a
SHA512 81d5bc7ae6db1d2a20f3f259fdc38a6f03a9b557f7d33c4bee354735a86bf98b9a5f764979857779ff1aebd5326f07c2f09085e09f66fdb4126eb6a4b5727986
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ri
Size 314B
SHA256 0782baf90bcde52913b2475b9fa81a9d49ed73e414d3dae1236e28463fe93479
MD5 fc6f72a9504a2034bef394cde1309393
SHA1 af31d9fde2c78123db5049fd4cc21f0bc1fbac0a
SHA512 a373a1cdbf7493ab53138a9c72e2b5db39994230b7a8d9510667257b277071768f7d91d9b58e24f682971b75d53b12173f6c6560b0b14ee4ebf5bdfa2e366c61
MD5 SHA1 SHA512

Submit Download

.jg.store

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
Size 127B
SHA256 a8a652548bf9369ab70a7186093dafca22146fecf94cceeb9d1c4c07a0993244
MD5 68ca19cca04164ef10f75fe50946744a
SHA1 41f8fddbd08a42761b8358096df32199bf82f88a
SHA512 98ed581c5dea0ad1b59b9867bdf295f933d3b53d53d255a1ce45b9d2530874fef9be86c7dfe9679d3845555c1b6ac6349def5369c205a6d72ba4757ee6aebb12
MD5 SHA1 SHA512

Submit Download

.jg.store

Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
Size 32B
SHA256 55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
MD5 448e391c59eef34ee1defbe4dee4c41f
SHA1 df1f890987371d7d8e6963c68b787856e42bc146
SHA512 ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/data/com.mfqbzs.reader/files/.jiagu.lock
Size 27B
SHA256 f0a92686add52bdcd330bd8269ad28e371d74f47405ef89fc80bf9f016039911
MD5 4a0e940027ff30a29a41f47c50477a29
SHA1 66896103a7d6fc8c902dbf3d83e39d6f27c3dfef
SHA512 c29253725d4caa033cb008298a71230e8e7c9bbaf0c5f02807e3310b22df3e10c320187196d5b5d0edeebcf440924eb17c0d7cd63d901296516bea8d594cf5c3
MD5 SHA1 SHA512

Submit Download

__local_ap_info_cache.json

Path /data/data/com.mfqbzs.reader/files/__local_ap_info_cache.json
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

__local_last_session.json

Path /data/data/com.mfqbzs.reader/files/__local_last_session.json
Size 129B
SHA256 ae0120ac9ec12c3e9c6dc029cfb693d4a0448dfee5d357cd6a649a61fbe06cb2
MD5 380660838235f9ebafa8629709d6d46c
SHA1 6948fc9a44b452c61e6a2426e825508feaac15ad
SHA512 b9ce4c5c7263b9ee32c8341bd07441dbdf09b1d6c805d05222bd863e345dcc57e1ffa9e2ba032743b270258bfdbaf6a7237eb2c6eb2d72ab6ff8b94ac2f82ee6
MD5 SHA1 SHA512

Submit Download

__local_stat_cache.json

Path /data/data/com.mfqbzs.reader/files/__local_stat_cache.json
Size 507B
SHA256 35e45b6856f4589db2b3db29266cbc8e09318e60d77e5e997417b8ba18def89f
MD5 fd1b40e29989d090f43fdfac69dfb267
SHA1 96037dd1774423616de0033c86383a397ac9fa0b
SHA512 4000427fcd4aaab735ed68edb695c0e923d75b9f78175e89f6159f6333dc275a77ada75a5d656b03e10e30d03720bdf9636632515638787f4337955ab186744a
MD5 SHA1 SHA512

Submit Download

__send_data_1718599294969

Path /data/data/com.mfqbzs.reader/files/__send_data_1718599294969
Size 543B
SHA256 a70418ed926523ba6f78ac87471471d90c12989ba7c5f999b09cc81a9e3966ac
MD5 42ad1f27b879384138a0c972246d3ccd
SHA1 05e0589d5ad031e35713f7df4ba91d126aa476b6
SHA512 5ed731ff9671bc129129d669fa548a37e9810c8ad33fbaf35a30dda8c5b2459f37c773e0ab6f2d9912d765c25c5233bed29a1b44e4b675a6d2aa41e961c32dad
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/data/com.mfqbzs.reader/files/jpush_stat_cache.json
Size 119B
SHA256 ad03f42ea9993bf62fd5afd7d1d2fbf844e20846e60dbd635337be0222d24bd7
MD5 b97eda429eb8ffce71000876e7192a8c
SHA1 c3e27ae391d4c9f39fa7e9f42c2496eb959675ae
SHA512 930bb30fd93d9326d378aee29d6b238d16e7b41cd5ae9fe32d95162be88405052cc08ea14909f9453a1a649c3c348563c777379607800176f3ff73b59dd673c8
MD5 SHA1 SHA512

Submit Download

ccb32cc6-93ee-4547-9221-c339ec2603ef

Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/active_user/nowrap/ccb32cc6-93ee-4547-9221-c339ec2603ef
Size 159B
SHA256 19c9b0cdd04b45115c57ff6ae7123aac61d1b0caac591919131771df56133ff5
MD5 fc4da5029eda8372163239b6fb878eaa
SHA1 f68d68d04e0500c8eaefd402729f793db4a16f55
SHA512 1cd5ef1f82b7c187876bf421c90494186cc986d519377698c793c48d4542cfef925f3457f7ec6fc98e3e80f06e030cab4c03168d54e7d0508a5c8305fb52277f
MD5 SHA1 SHA512

Submit Download

4105cbaa-3c9e-4f7f-b186-e4c9db1cbfab

Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/normal/nowrap/4105cbaa-3c9e-4f7f-b186-e4c9db1cbfab
Size 202B
SHA256 2d37d274c002a10d079d7dea89c2f8732ea60b7ccd7d6d6a3735733b7803fe51
MD5 4bd5463b07dc4cd5394a84c1eac33e1e
SHA1 b7db0b021df5b50d7c550aaa165482e528d24a73
SHA512 fda6b39c9114c9455cf910984f5880b89b569612c07ca7868d8820acff96af12f7f6478c8ee1749a715a4f8975991793f12fb66e54bca13f043e1a4bec9d6e60
MD5 SHA1 SHA512

Submit Download

user_log_0_002ef_1718599422813

Path /data/data/com.mfqbzs.reader/files/user_log_0_002ef_1718599422813
Size 458B
SHA256 373dd3af396b8deccede5dca0800b00af13514f3456c1c6b42159639bbe4c654
MD5 fbc4c455e8915d0f8c5d8d07b16bb9a5
SHA1 befe9a54ba1a9494daec3fac0be10ad757fc538c
SHA512 f77638404d517a08e03f17006ef1c2e4acd6c8673d30288b7c873fc32b9fdc79316889ac450991bdbf0648c34e4a5bddab376f86e316ec29ae0fb71e07fcc91b
MD5 SHA1 SHA512

Submit Download

.icosc

Path /storage/emulated/0/.zp/.icosc
Size 34B
SHA256 4aa4c3eeff2f6af4be1b3a7e055132c87a01b3d292d9aa14a336d77f3265d593
MD5 64a517da72d633afc28b869a3edf4339
SHA1 563cc70e30a86786fadc1cfed39ab26aba3f93ba
SHA512 f591b6f0924d54a640f88d43577decd24e457fb2cbfc259a67c461e5b3f8de64f6ca3e6f6ac2510d7115236961dae4574b42d8d258b4ccc7c9024f3d3d5d77cc
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
MD5 1d8d16c4e3b19ebf18988530d9b9a757
SHA1 bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA512 4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 5045e4ab50e004e746baf67803fdbd5f0a34f96c5cd9867cee4296a7fbd5c4cf
MD5 4ebbea1d01d2347a35092a1f2aceab02
SHA1 6b86ba6465a3bb1ef23e08c962a4ed0e1d2f85e3
SHA512 4249dc6da7f40f07c23b0d05237c7b95654f5a1f87e5257f64555490c8ddfe1dab5d86c196ea2061f7f76659b84fa676d3551979f2cc7c63f4ee58da9f39ff71
MD5 SHA1 SHA512

Submit Download

.cuid2

Path /storage/emulated/0/backups/.SystemConfig/.cuid2
Size 129B
SHA256 5f44b7f35cdcc8b2cb0f94fe87be70d7f5507df8cb0a994fdf06725e7cd96a3f
MD5 ea6ea80102a3f4af51ca9486c147e123
SHA1 e4497585c974eb6a84ed74d7c15e8810fa1f4867
SHA512 b18b47bf2143b119ee34a1f34f78571d06e0e9231701b3b12ed0bece736f58cb946abd5f86d122cbf785bb58079151ecc3f6ba76f6ea5cf57a0a0d931b483250
MD5 SHA1 SHA512

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 20KB
SHA256 f1a64586ce75e770e2f36a7ef6f7419e26ebb9e9e786df3c5adce50a196d2d07
MD5 048c73f536f234f0ad0d2fa8bdbda899
SHA1 dba2e666721e0b0988807b8bb3ce0452dad3448c
SHA512 6ae398c682724f0008ce47cfc790a7ad3dd7cc801fb3a8a692d28da5533ea7ed830ea36933bd3e3219fc8cbade90f073c2c418611921bc7d6877d94b6745c4f0
SSDEEP 6:l9Fwyl1fllUy4ATSFRdLum4uPRLu47F5syXxKnERX4PBX4ogLugMBX4suuKfpqiu:TDf/UyNTSFbyRxw59YERmBEyPbAVOwG
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69
MD5 20b4c5a4e7944c6575524b67929456e8
SHA1 8c00624e72d53734b11bbd36d92523e4d80ed5b1
SHA512 c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa
SSDEEP 12:TjAwfrXFUybnl9YurNTSFbyRxw59YERmBEyPbD+:TEwDXF5nYuBSrY/GSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 7e94d9d1cf58d3dfd05dde466262455748996f32a231ed68e966781fe4f27103
MD5 f904c09abf9c9d6948f0bcdf1c2df37d
SHA1 ee7b95996994088d9134faf1a7ecf9ee9b3a3859
SHA512 9a80aa7fe89e65d55c7ad16b6034db605e4311c14a281295d1c6e12fe0dac22f10f05067adb546a4ae2a04277ae0e27b60562875c4f171d859d656b54af21698
SSDEEP 12:IlhGluM5MFVhfS5Awh0p8UhG9mBRuKryoiykDdw8K2hQaudWRIdI4xZkh:mGQdDfSGrgKuhxczDwudI4zkh
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 28KB
SHA256 2b78bbb38e2fc75ea0299b199290eee1d4dc8153bc3aa0f00b087b0812abaa7f
MD5 5cfa9e0086fca8527e8b238e158177b9
SHA1 39e5fbf6430d14799a23b5f172095e45f89c13c0
SHA512 9be22fce7c4e1668c46bd10989af063d078b14f009d74a0e9264b5090e6f0f92eb75420fdd0eb165309b75156cd3353098afb4176f1f09f51fea2cd766f9d5bd
SSDEEP 96:ChFL4x3nYX9jczzRTAXnsM69RRQeRmKkWe4fAF4I2IASToQnaT6WsN+Gh2M:uIn6hczNkc7RJwWe4faQ/QaT6WErQM
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 36KB
SHA256 a1bfa6c134c1e52ae7582fb815891b628f0bf80d27ee74ce59b3c748cf01e96a
MD5 593036fa66e9b70600cee60df6eb1011
SHA1 eae07d86a8c11f0d686392e9bcc33c9c8e296517
SHA512 85dc454a6feae68f680ffc0e312fb7ab1dfeeb8a75eda431fdcbef889527f388e03a6fcb1ad2be6170cdcc2e09af5995e2f6b7eda9e9ba8edff000c5302b304b
SSDEEP 192:o0gInUhczN/Jq8Vi3c7RJwWe4faQ/QaT6WErQM:IhcJg8XTwqagQamX1
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 512B
SHA256 fda90b507507d26d4b52c56cf82f3813cc1c20f4aac8b162793a7dae2145ea07
MD5 9a8ab0df567d2c36f6724574a005e49c
SHA1 49214d72a66bcd5936366d88d3a5f3707d8094da
SHA512 7cf94fcfbbeef8fa632079f9c1cde1dbec8a0d8790ce2da93d8793a7678680c122a9fd8ea2eb2e6964cb766506443cee3ca5a4af2ffe0c492b48f5ee0a2776bb
MD5 SHA1 SHA512

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 36KB
SHA256 3019ff09cf16b6e2a8efdedb7d40ba973f90c534ecf58b35ae3926504c3a9cdb
MD5 091ba05d18c92631763b0c8849fcfb05
SHA1 5e8432b7439d4ca9e9df0f8436f8146abc9349e1
SHA512 443dce38cab8cfd7fbd01a798dce4ea45b82d6e91b1b638d74c250c85f6cd12abef049b2bd8d4effec6ead56d5184f54be60fd0482b84d80d1dc59e42c28146a
SSDEEP 24:KFfXzyGSP/8KncOEA1zDGSP/29l7BSrY/GSP/R4:M/zNSP/8KnmA1z6SP/29l7BSrpSP/R
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 12KB
SHA256 ace5c666e7c44b898d229fc4f9eff00166038c647fe0338a24c1a6e4dbb72f4e
MD5 49d8055f4e1b6becbbec36b83bd71720
SHA1 5e9f0db750bb11dc4082ca924cc6d704e5b72e25
SHA512 55ccdd3d3b23d97bd652910716754c24d947f640e7f95a7081b43ea726e997fc44c211ffbc6a9af9373beafa74591ca169378c5fcc2724ef6fc08d221fbb3560
SSDEEP 12:KzGu/PLjAwfrXFUybnl9YurNTSFbyRxw59YERmBEyPbP/pT/Qzp:KSuHLEwDXF5nYuBSrY/GSP/1y
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 8KB
SHA256 c7bcdc9543a8b0f9ef3f1427f33d5b376434e94cbf056142b1f16ffa97c993be
MD5 9571e2827efc8fb449001f9735a4064b
SHA1 2f85e4e3b0815b4597f585aa3fefca8abff97777
SHA512 f411c5857f104e51f9a03a2197eb6d326ee50a65ea90250a65ca1459d16afd20b0e2b8ca6df738bebd9cfcf1c5be9c4b6895687e80ade8f4ee8420c7001a2d86
SSDEEP 12:KgE1lUluM5MFVhfS5Awh0p8UhG9mBRuKryoiykDdw8K2hQaudWRIdI4xZkh:KnUQdDfSGrgKuhxczDwudI4zkh
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 20KB
SHA256 7b76fecb69b30bdca238d65503b61142a42cfd8ff91ea2583986ba45b85c7067
MD5 db28ee357582d31a1a75bdbe44dab37b
SHA1 27c4c9342a55858176d8f5de46f615bdc68bbcc4
SHA512 9e02aa3216d8883af63daebb5ce0597e6a9ac3553ab05cfd7f3aa4d1b6fbb993d0984ea99aaf75166889f76deedf5a1ade240a45d1f66fbdf89f3a5e5cd6f312
SSDEEP 96:hmhPZ2L4x3nYX9jczzRkAXnsM69RRQeRmKkWe4fAF4I2IASToQnaT6WsN+Gh2M:aZuIn6hczNHc7RJwWe4faQ/QaT6WErQM
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 20KB
SHA256 f1b22fb8e65036955bc5bb1c785bae6430278a585468b454b82d115bbabf1d2f
MD5 817a31e8c5628b35bac005486ccb9cba
SHA1 dd73393d918b3eafbda463632cd25681aa8f187a
SHA512 66ef29bc4ba9c8600a0a72610439f1d53a0de13e7cf98b682f2445865ff4920329caa802d0d5f23a585e3eb0997627029c207cef8a79b18b17edd28c2c335f75
SSDEEP 192:0m5In7hczN8fc7RJwWe4faQ/QaT6WErQM:0hcJ/TwqagQamX1
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 8KB
SHA256 b52a985fc8c8e9f2041bee087ef9f8b3f18c13192628e6cfbe6b8a97a7241028
MD5 bd3eda428250b614985786b32aaa1b42
SHA1 36cd75f40ce77a526a8aef28a415da3de5eefdc2
SHA512 d1fc8b704b5aca486c917d489fda95e46db307e8a9e6ce44c0a1fe0877cd51a1ba0fa4060a0cec599f98b9eb8b56e0a516d342c5d779367b365cd5005d98f1b5
SSDEEP 12:KWzJDF28Uzw/lrgcZEaIv5mg0zCdB4FHBOReDwiePsB45VnBHzPOb7:K0JDScrZEaIvMg7dyPkiePsByZBHI
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 20KB
SHA256 8da561a16ef39e4549e9de580ec2b40f4bd1d32e04e1f00ec691215ef63ee4c3
MD5 81e934ee53aafc576d4ab1c729459469
SHA1 c8e55cd765f61818d9fe48d19c23499177b4731a
SHA512 8e15a6cf14c7c429bd06e53c5659e6237bdf97631e00ddbe2ca21ac7e34795b9c8bf51f0a65657c03c5f2e8127b4aaa7489467ddb3089494f4c2ed728228354a
SSDEEP 192:R0mLInUhczNvc7RJwWe4faQ/QaT6WErQM:fhcJcTwqagQamX1
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-wal

Path /storage/emulated/0/backups/system/.confd-wal
Size 8KB
SHA256 23d764b6e74f8797739ec677060b3f0a6ca5096762eb782de4fae8b5da97a5e1
MD5 e0047a92c8515a29168b61e8cc51c784
SHA1 1a4b67bddd9cade6d647b143f567020715aa398c
SHA512 d74a1386d4bd9d96e2020da9f226ddfc3e88cc7bbfc2347606e5499dcef8c8941c36a7f76453459389ec5285fd29193017efd71312a4d21b9d905f2f273b97b7
SSDEEP 24:K/BTWRTG+Qdn6EP+gzSl4k7YNPSLbUe8lb:C0RTG9n6EPxSdYVSLbUNlb
MD5 SHA1 SHA512 SSDEEP

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 25B
SHA256 c8763e154978af70862b1a911e488728e5aad8e4d010f39fb54d22e5ed8ee03a
MD5 6b42a30c63ab53d6a4f59bce02f5df06
SHA1 10423196762d18c4990e4b46658478d0ce332a17
SHA512 cb99d8f7421116453b74c7b59c74afb6878eb0772766ebd2d0b6dd8e8e9fa5cce6285e5ecc67051bdb97e1c414b366a05d329d3cb98205925f0a5ec2086d5db6
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 55B
SHA256 a8c1f08a72c732ee03719c4f8d8cefbd335f0a0d8de7560eb389b9defedd3bd4
MD5 4e10ab255ac06145ad7a86f7880092f9
SHA1 5cab382be92f0bb132af03a27f366cf086951589
SHA512 f4e956030efc444e5185aba2437e9cb0a93edf6bfec036b46a404f05fa1de47dc035a182a04a3b0d3c0ae60dc85d2dcc1d969579a0f65017f09d90ca31cab8a8
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 84B
SHA256 ff4186917772a4f7b61fcb059dd51d84b8e2e4ae75ccb62a2be2720c7a82619f
MD5 a74a3666b306bcb68ad18f7345f2c66a
SHA1 3d46465cfe33e168a3f8c0c960fbb065f8843e1d
SHA512 f64b0bc7a406d72edc667da0ec7ddec46446c6a3c6d1c408bcedf042329368c9ad4b16427a103fbf996f5d0a283bc59d0bde5a5135d1e502d007c457de2ccab0
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 114B
SHA256 d4a3caf9576970a65c73d3fe4a1021915581e32cefba97c6e2d4970238817761
MD5 fb327bc117f39efe02fbe40df575dfd6
SHA1 2aa006cf6d15c733134bb3155354f010736b8524
SHA512 48a8fbd2be25711d66fc9df32403a8d7baa644f598da85012af7c7b48f77fa853ee20dd78af85480320ee3ff15c982305f190f009bab034da06a95bf1aea5975
MD5 SHA1 SHA512

Submit Download

.timestamp

Path /storage/emulated/0/backups/system/.timestamp
Size 138B
SHA256 f8f54577ff5487971efb8908c919730a278cdadb527936d37b95e8c8e2a43f94
MD5 fffff739be89abc00563bb06d1769ed9
SHA1 1effd3b2f5038380d08beae2bb7c5bd722510495
SHA512 6e7a474be785b79e9c64d6c3c246048322b86b5c1e2c19df18233c603e7a0668cacfbf8d7dca6787806f55ac3c1d1e77eaa713b533bce591bfa93ba4515a5957
MD5 SHA1 SHA512

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 32B
SHA256 e0c020f3c2835a31aa52a8d8bdb1aafd1436d584f7a6014710d76c05facbf314
MD5 6cbe77b992b644ab74a3b8530d8470f6
SHA1 2a9722b80de8b360347f6264e05713c1cf919971
SHA512 076e440bcbe87b0596d2d0fdbdb4f67290a3984422a2183acf2b232ad795c5902ce6d8ccfae519ec84c761e8e7a15125f70a3420eecf86f2103676cb1d72ee4f
MD5 SHA1 SHA512

Submit Download

alipay_msp.apk

Path /storage/emulated/0/mfqbzs/cache/alipay_msp.apk
Size 748KB
SHA256 76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1
MD5 d06ea38e4210a87d6b96f8b0491df677
SHA1 3ba573396398757088e559a9d372049a377eb05a
SHA512 3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30
SSDEEP 12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads