Malware Analysis Report

2025-01-19 04:52

Sample ID 240618-j87swayglp
Target bab5d42b53ec74520963bae81c28f268_JaffaCakes118
SHA256 b10205e54b174c49e51d3b57e44caf81e6a47f232c75b1bd4809c68c652ca065
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b10205e54b174c49e51d3b57e44caf81e6a47f232c75b1bd4809c68c652ca065

Threat Level: Likely malicious

The file bab5d42b53ec74520963bae81c28f268_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Requests cell location

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks known Qemu pipes.

Checks known Qemu files.

Queries information about running processes on the device

Reads information about phone network operator.

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Queries information about active data network

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-18 08:21

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 08:21

Reported

2024-06-18 08:24

Platform

android-x86-arm-20240611.1-en

Max time kernel

10s

Max time network

159s

Command Line

com.tianyancha.skyeye

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /system/lib/libc_malloc_debug_qemu.so N/A N/A
N/A /sys/qemu_trace N/A N/A
N/A /system/bin/qemu-props N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmain_315532800000.zip N/A N/A
N/A /data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmain_315532800000.zip N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.tianyancha.skyeye

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmain_315532800000.zip --output-vdex-fd=52 --oat-fd=53 --oat-location=/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/oat/x86/libsgmain_315532800000.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api2.tianyancha.com udp
US 1.1.1.1:53 t.gdt.qq.com udp
CN 39.106.232.36:443 api2.tianyancha.com tcp
NL 43.152.42.165:80 t.gdt.qq.com tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:80 log.umsns.com tcp
US 1.1.1.1:53 umengacs.m.taobao.com udp
CN 123.183.232.17:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 data.openspeech.cn udp
US 1.1.1.1:53 hxqd.openspeech.cn udp
CN 114.118.64.119:80 hxqd.openspeech.cn tcp
CN 117.48.148.47:80 data.openspeech.cn tcp
US 1.1.1.1:53 api.map.baidu.com udp
US 1.1.1.1:53 ynuf.alipay.com udp
HK 103.235.46.245:443 api.map.baidu.com tcp
US 1.1.1.1:53 openinstall.io udp
CN 47.93.186.175:443 openinstall.io tcp
US 47.246.136.188:443 ynuf.alipay.com tcp
CN 39.106.232.36:443 api2.tianyancha.com tcp
CN 39.106.232.36:443 api2.tianyancha.com tcp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 216.58.212.202:443 tcp
GB 216.58.212.202:443 tcp

Files

/data/data/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 016adef8e2398c897cde5575ca80e8e3
SHA1 75ebef9d43fc43f5c7434ba60dc1bcc7f93bc037
SHA256 4463a2a42ca3f658885a43bfed22bc8e871766369ec5c9f537ae3621f0387092
SHA512 0b63fb2a4761c111cb3dfa9c628c3ac8a9f1585dc9d9675ad9e4351ea748723778f5a3bf8e009f290a706bde1719a49b15e31735bd01acc3cb84af5b474d5fc6

/data/data/com.tianyancha.skyeye/databases/MessageStore.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.tianyancha.skyeye/databases/MessageStore.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.tianyancha.skyeye/databases/MessageStore.db-wal

MD5 31cbdba8b543291caee540f8cc040cb5
SHA1 17f9d914c13137fe30198bd06688af510e10c883
SHA256 c27b30afb44378d24000f2706580b3cfc7cfe6a27836468ea30ce762aea99bed
SHA512 0a8f91855e28eef642c477bd4d273a5b6a48d3facf8d4e7e66b1e70f460180859b5d332da777be8ef46af5f0c4a5b5d7b98310b7c20fea7d35265b086ac95592

/data/data/com.tianyancha.skyeye/databases/MsgLogStore.db-journal

MD5 4169f1440b10ead437dd18c590e61f4a
SHA1 2fd109ab7afa488a56112ad806be90a802feb215
SHA256 6e97aba6f9b143127b6c1bcf5127c31a5dfee01ad1f7aaa577cfc5ca9e9b80e2
SHA512 55b0b38d1592f3706024c110ad1cddabd4b63d50c400c3f690b78d5153a68cc27e11e16cadf6e58282d8f3d33502d46a2c1e91b0e6225896005b1fb56ddf7e46

/data/data/com.tianyancha.skyeye/databases/MsgLogStore.db-wal

MD5 7533cbc4a7458734e583cd3ec95cc6c8
SHA1 df635532597ae18db4c0a93e533441653978dad8
SHA256 55b2ace6b28ccc84b75c32795659f0c8ae12af072e9c2d4e57f4f5bb41bb08c3
SHA512 332880aabcc5a8b238536d01d7422a25cb95c5c923bac3b61448ff41babadc37b8048758f7622a71703ce6dab5da1e2237a5f52e3fd021e58560fbb29107a369

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/bitmaps/journal.tmp

MD5 358877bd793fe572d6d8ba53898b16e6
SHA1 a379607a9f99917ee66bc29866081f102c9c2917
SHA256 630e1a5f4c615295de5c88e74d8bf7843697648532f87b1c6aaddae78b2acfa9
SHA512 20889beac2109bc3449112815e68a533fdac08b1cae3dd796ab0f7f2d67d50a8d27da3d8ea4f598565360097c34adab0c7511915fa2a860d8dd08b9bd400b000

/data/data/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmainso-5.3.38.so.tmp

MD5 b6d7de43e4d60e024f42578162c7fa9c
SHA1 3f3885f92ba62eb8cab8dfb9423d798db74eea7f
SHA256 602b99f7b1ab79bdff69ca1c62b812c9b6a147a918555a4eb2c016d9480c960c
SHA512 99b9a032f244168e4ea23ec3c814d43e26eb21572f728abbc4785297fb15d9267759786c2cda3f04d1268c3b4f57de3e5f602e07edb046b652e7418b1a43ecd3

/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmain_315532800000.zip

MD5 35de523a099f595cf4d81f59bc814589
SHA1 5475ba030f12e8fb33c37c62b88e1aa3990fd5b5
SHA256 a7efc7906dec7d56f4da8b2fa825f2441c34ad35f6c957ddf219daaf47b9a5dd
SHA512 91cade289701b929073559b9b6c141d975ee0e7f7d637978792e9121e48a36eddcc0aceb399b33672b408662d63ee5cb1f97c2ef795e2dac3ca32fadd3af2ae0

/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698899/libsgmain_315532800000.zip

MD5 a68d59acdbee7a7d433fd3069fa4abb6
SHA1 ab87930c3ab0f5917a5250258be22417fa67f31f
SHA256 20ae88230906f1efc8e087c824d5ed98ea7dc98c55b31df9134df577d0b639db
SHA512 a07a889f9772fff8fe14cd185cc3c5fe50b4bd718c1b5d8929dfd5705a8896237d92c295f9bd1d3a38e1c80881fd31d7bf7682658ab7db827e150a14ef21aa2d

/data/data/com.tianyancha.skyeye/files/Q0VSVC5SU0EK.txt10e4

MD5 9774c895bf445f669c737988978e9ccf
SHA1 dfe0d42a2447763d12c28b5742069a7ece5034c0
SHA256 75271d4ae170a4a62e05ebbc2933b816dacdc948d0a0c488cdafa81a6af58635
SHA512 3cd5daf892e67bcd005bc3760fbbb36ae1d97dfda1172d0e278cb409fd3e266a974e3e4f6138a3b13abb0464f3545e3c2423666034ac78856b89cb52792883a6

/data/data/com.tianyancha.skyeye/databases/accs.db-journal

MD5 19b26acb1f29661ac1b8124d5029a279
SHA1 ecf09673ff2a06147dcf969cde2214c7f24ae166
SHA256 4450371be5d327700f56b534c37ad24198254071ea135c82bd762f989d10e461
SHA512 d3bdd9ffb0beec514ee6d91b1b306531683230a6481931360dca724208931b7dedb38aeff9e4122b43214efae32f79815b24e64a3f88c3d5950cb1264f8e7196

/data/data/com.tianyancha.skyeye/databases/accs.db-wal

MD5 020b8ad0f949cf919805da99c05f66fd
SHA1 748536f2c429c3edf02ccf4b410356980126c550
SHA256 8033894e15f0e0677d490a518094733df94f60ce529c47d0eaf9899efab4f06c
SHA512 117f64ede9a3c7b197f8108e7c25c1a3fe1ef4fb5df6e7296b7f76d0b5460fe2f4b4336e5e0c83a4bd07baac55aa1caef2672ca04daf3279cbe8f4a0ed0e5125

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 0f2aebbf08a1309dcdf7cf27c96f1c58
SHA1 cd4927a196956580ca33b85807af5871a394b0e1
SHA256 3afd37d10a12889501d8b522cbc816750c5d660bef4d563063a1f7ea627987f3
SHA512 617d649c1705db823984495f06d8b853a19ff46c979c6474387d648a7eb158f15199c8c4b075bdb8fe53ddbae697f1424fdbcd5e98f085eb5d3b2b345654dce2

/data/data/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 ee00f6f25447e7840fe84f4984948250
SHA1 9859a85e1b827205705342af92d85186a2967c03
SHA256 0cdd30d59995d2874099414583d64a3aefb028570fe7db0f194fba03c649a5ef
SHA512 bc5bf4dd53d7662490ec9daea21a5e3eb4b04bf62c87a1faaf05d66d83314de911a137ff7a6b50ebedd2c4f8e8e62479bace4b5fb5ab124fdcc361648399e8e9

/data/data/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 95d48ba4b6dce8eb33f02cb778f9e4a3
SHA1 51200738630912a997d89128d9c13b2560eb918f
SHA256 13ba6986f0868fb96fdb8bfcbe03375bda3dc5f32f4ec0d21aa636fcabcdde53
SHA512 dea1743c20d1315f2e0be629f717acd6a937c70935be7966fe80ad8ee0004ce85fa2dcfec017fc47881caaab1cdfeb1c4613deb0736aed6f57255b6dd8a9f6cc

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 b3ce93ab3a68d955c0b1cd97d6996a60
SHA1 0498879de51499006264a8b7d599111b9106d560
SHA256 ea32d0e8cf21fbf06e6dd2d8799fa1732182a76da0f776af548540a9d3003a88
SHA512 bf978cdcf1cc1c7a0935c515918a95f876b5e88aedda2eecb83849db147db9e5afd03c7a93d6274c6ece2b03761e3e9770ffe032c5943b67554623b07ca23b3f

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 4af622e0cb2631bdec00c2454e3df490
SHA1 e7131d964f4647151d4ac3837db6ad7f6efc3346
SHA256 97e966d113354ebc4dbe60894e471588e208706e3361f78d5e0ced3053dccc6e
SHA512 292055467341b7849c71453f5ac1c5e3a1468aedafe397cf5c8ffa59a350767797637483f60c1f42d5ddb35841df74d3171b8ebd101495bcef48c83bc565cf52

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 b18dc2a6512d8c1464cc89cc4822a94a
SHA1 dfe9340fccd3d21fbbf4722d2666e799b6b9a046
SHA256 fc6e866d656b183426ccafd3f8acdc4a9df1d4f2f108b4997d168e0810a857bc
SHA512 f3adf7ea684f46600ce6b94477f53fe0728f83d00dcf0c5920272f9ab77a627b0f803ee7aa50e70b7bbf78983f81694fc81a21744bc0ed48660e9761e5a2b6ef

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 f58f13d0fc991322df1eec4c68481464
SHA1 fac54fd6dfb4fa6e0b0f548eb024573dca8cd259
SHA256 1d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396
SHA512 e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 e226bf9446849dc009baa24a537ac74c
SHA1 b6b4de6d0febe5a29c94656ddbf85823f20d6204
SHA256 f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19
SHA512 0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 73eb6d1cb14066126b51cdfb8f3ed02d
SHA1 09fad6de09c1163577b4184a9fa043d525231223
SHA256 e13b9864332e59867ff17aeffd6b816814c2bff480c1a6c25570bb700312a250
SHA512 f14156c82fe50b2fc693029695c39e9cdd19b72fa5a307e5e235abb8bef42063ca7dc415903ffff9d4f9ae1c7257a87bb495227dd91b1ec1441133e52e5be4a8

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 001562d6b17d75c0fa4979ea5ef99d60
SHA1 674a619f00d93d6dffc6f12d1ced91d576591f61
SHA256 8591bb6db7749ac1fe8f95113351fd7c7754f6ed3e68b892f6bd14f32ee99105
SHA512 f678433f692f8d8a2d9627a9ea98eb8a17745a162a68fc07c291de87ec90a8a601aba4fd8efb27eb06dadccba22b654eb5784163174630513e1d018a73d8a665

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 b88cc5213f837c566db0d8faf30cfc76
SHA1 0f9be12c7edfa76ae19dc5827661effc578362ca
SHA256 0de396ab314ea61be17d01ee6f08a18e33f6634d28b878d5edcb4ddb152b463b
SHA512 7f90267183eb29dd72507e38ee23d84409e4582325e9cf911fc94a7bee2ff0dfabecb6348e56b541864803d38c458a5531df266d3512a4ecd2a26fb3cf24349c

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/uil-images/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.tianyancha.skyeye/files/libcuid.so

MD5 dc05effc000ff6db3339474aab7cd211
SHA1 33ed0c1f97b2cb4716d0b4a6268075e0f85cf486
SHA256 55d1f0b2e4f707296ebb9c5f37e08c48dbf8321bca5c6bfd23a561cbec305741
SHA512 d3182c04706d3e0577ae24e2b9ba7e122d10de9081ea2654f9661e2b60bbd2c4839d67b86302fdb3b2fbcb5659e974c102291cab2e5878b9f2076d693b4dca1b

/storage/emulated/0/backups/.SystemConfig/.cuid

MD5 9d5beac0fd4141d3fea2158c13e7a0a7
SHA1 06026d05c6c203b20d0cbd9fdc5baa9d7371b19c
SHA256 d187b93c6a5fe487669b5b6ab698ac529709fa5f1499b1c2d550d17412e3122d
SHA512 0d73954660de4f87102d0f6cb88c72131228dfbd6c611c8bd2d0e8e8ad6d596e71d9b71ad28506752e57c6dc2bd191a932febd1028e7fab15860d684f0326d4d

/storage/emulated/0/Android/data/com.tianyancha.skyeye/files/tnetlogs/inapp_20240618.log

MD5 acdb3d6ae1d3f9c44362c9f94ed21ad8
SHA1 a4e51c7a0863f0c717c62ac262b4023142a08d8a
SHA256 1329442fe2809c645f5a13b6a5a331325af87f7383bd37cecf3cce7d3c64dc68
SHA512 c021b9c2ef198d9319bd8a380f5bb37aa5e28e0b6af28048830c054dda7df0068903d1d229e193ff49d01c14441b47acd2a988e6eabf4f1c9bc8568bd62456e3

/data/data/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 554bbebb88683440476e163e26085206
SHA1 6751201025109a85755b56a924bc689ff98ac6b2
SHA256 59b90928682857239a0679fa5f8e79016d2033857822be292856c485340e26f4
SHA512 9fc3331da9f38fdfed0f1ce8cef40cb442b9a04c10fbed0701c1f0b949b67efcd67473250202f0db89f24c3f4d325eb1c6bc4e504c1c3bae0b457112d7bffd4b

/data/data/com.tianyancha.skyeye/files/21c22f492aba3de8.lock

MD5 fa2ccf4209b7bff57f40e3496d76e7af
SHA1 de445909e65b30711301f050df3cd0a5215fe0f7
SHA256 5aa070c9699eb6702f1739e6ca5a76585d076a16686e8decb055bd661b02a425
SHA512 156dbdb430b6ce27b7b6ba38db806dc9883ebdf20a457938be020bc730aa06094e4036e989e5c7561dc6e0f8ed19018d4e55512163f86a86456cda10045fa35b

/data/data/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 e60bee4498c914a487eac914ca67e7f7
SHA1 f1487d9fb4817b58dbf0068a2c3bbd4c380f560d
SHA256 febbbb527cb7ac0e7994da773ddf37517978f72b10f2e79be0474d6a925033d5
SHA512 2fbe99dca217c3748f221696969482b9a0613d57921ed0d16b763e87813fee93701fb17297be0fb52fc3de2c080f97f287c2fa8ea45bf40ed1183388492a8791

/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

MD5 8ccf5561938210a446b2f43fc84a8e27
SHA1 66f4a5b30ba38b14245a7b230a2a20006c2e29c5
SHA256 631921568485318e4ed0ad0f080d88fc5607bf54f7692c961f40f4304ac6a131
SHA512 dcd85e4ee0a5f5599ccd1f5579f3c779ffab72005d7a81edf2ba0f171d8e79d9a1b0e4b00d59ae30291bb98add9deb052293581503fdc97c40f9c30ee98275dc

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 2d24479c64fbc5534bec572d83650c26
SHA1 4db208a76981d6ef5b4127548610fc477f0dadd0
SHA256 1f85dd3795139f685f2b26c94ed6d361240f172bcd76c3edc1305437cc5b0306
SHA512 a757c70db784b9559ffc7e7340d117e27688663f7f4785666ed78f79f6521cf4110fa49d0d6265ce6e67e5357a2e0cc7c464e5cdfcf6e2b8fde92f25c6b1883b

/data/data/com.tianyancha.skyeye/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-wal

MD5 d60414d15c0145fcfaa0cd283e63c31c
SHA1 0197439648affa8fdd83236d9dce21827ab4afdd
SHA256 47465209b82eeecf75b25b00c2d745287a0bc966d71ea6f49a213a0a1131f382
SHA512 9ea777ac7edb50b40a985f363e947d1f327ffdb562adf9cec29a40192538e1bcdccd617ef4fa18a8a3d2154df6316ded466a65d006004a1d567ef4f3d4d07eb9

/storage/emulated/0/.com.taobao.dp/hid.dat

MD5 3ab5523f5d0f0f6a46c69220d4218633
SHA1 3eb5d52d569bd94ceb7d4b7a6f09f7ba4d6421f5
SHA256 3e179c107ee791cf212dfc7df9104c33de5ee4f4e0f17706340a73b942608eb3
SHA512 10421146702058eac0362eea220a694ddc4b84f90cb647f2a8ae8a59c77e0a38d9afc809f1014810ec4e9655c6dff3cf8e53c9fcdafc1d9aaae70b189d483b2c

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 4cac194ca111c43f309206f32ae57790
SHA1 09757ab605d853b2072d21e33ae06ce419c165c7
SHA256 60e06922d4c47b8b2e238999cb70d0e1934cd0a6947f639aaac53fc275d0493f
SHA512 6f8803caeba03206fdfb0a74a5bab2021d68bf3bdcbb532d84958d0051d2033edbadde800c29dfc5224725e5358803c9b843b2f522aa09a61932ff17064454a0

/data/data/com.tianyancha.skyeye/databases/ua.db-wal

MD5 aed58dcbfbdcb396baa32fb43664c3ce
SHA1 571038c4e3818c92461ecc81e5ca438bc5c1ceaf
SHA256 1b7b9af23e3062c0b8119ba406388ee636c8c8f220dfcae2cd66dfc74d768e40
SHA512 6ee8bace76cf7f77647909e0b45d5bfec0f9d956a22acdcbbbe05d6e9b4190a19ae080c0989b129afaafa972a7eacc1fdaf2db4ff642c8b60c94375b96a47dab

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-18 08:21

Reported

2024-06-18 08:24

Platform

android-x64-arm64-20240611.1-en

Max time kernel

169s

Max time network

187s

Command Line

com.tianyancha.skyeye

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /sys/qemu_trace N/A N/A
N/A /system/bin/qemu-props N/A N/A
N/A /system/lib/libc_malloc_debug_qemu.so N/A N/A
N/A /sys/qemu_trace N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698905/libsgmain_315532800000.zip N/A N/A
N/A /data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698905/libsgmain_315532800000.zip N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

com.tianyancha.skyeye

com.tianyancha.skyeye:channel

Network

Country Destination Domain Proto
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
N/A 224.0.0.251:5353 udp
GB 172.217.16.234:443 tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api2.tianyancha.com udp
CN 39.106.232.36:443 api2.tianyancha.com tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:80 log.umsns.com tcp
US 1.1.1.1:53 umengacs.m.taobao.com udp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 hxqd.openspeech.cn udp
US 1.1.1.1:53 data.openspeech.cn udp
CN 114.118.64.119:80 hxqd.openspeech.cn tcp
CN 117.48.148.47:80 data.openspeech.cn tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 1.1.1.1:53 api.map.baidu.com udp
HK 103.235.46.245:443 api.map.baidu.com tcp
US 1.1.1.1:53 openinstall.io udp
US 47.246.136.190:443 ynuf.alipay.com tcp
CN 47.93.186.175:443 openinstall.io tcp
CN 39.106.232.36:443 api2.tianyancha.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 amdc.m.taobao.com udp
HK 47.246.103.9:443 amdc.m.taobao.com tcp
CN 39.106.232.36:443 api2.tianyancha.com tcp
CN 59.82.29.162:80 log.umsns.com tcp
CN 47.94.92.163:443 openinstall.io tcp
HK 103.235.46.245:443 api.map.baidu.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
US 47.246.136.190:443 ynuf.alipay.com tcp
US 1.1.1.1:53 umengjmacs.m.taobao.com udp
US 1.1.1.1:53 umengjmacs.m.taobao.com udp
HK 47.246.103.9:443 amdc.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
HK 47.246.103.9:443 amdc.m.taobao.com tcp
CN 47.93.186.175:443 openinstall.io tcp
CN 111.63.206.54:443 umengjmacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 59.82.29.163:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
CN 47.94.92.163:443 openinstall.io tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.196:443 www.google.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.29.163:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.29.248:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 111.63.206.54:443 umengjmacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.29.248:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.29.249:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.29.249:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 111.63.206.54:80 umengjmacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.31.154:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.31.154:80 log.umsns.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 123.183.232.33:443 umengacs.m.taobao.com tcp
CN 59.82.31.160:80 log.umsns.com tcp
GB 216.58.212.196:443 www.google.com tcp
US 1.1.1.1:53 umengjmacs.m.taobao.com udp
CN 110.253.189.144:80 umengjmacs.m.taobao.com tcp
HK 47.246.103.10:80 amdc.m.taobao.com tcp
CN 59.82.31.160:80 log.umsns.com tcp

Files

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 a173378deab6b3b9502d289950b08df6
SHA1 d9f8dc79c17d79603f334f6b9339912d018efb34
SHA256 43edf46a374d242f3bf1db7305b3ba3ecf23809844d54ef8cc9bcc7d50af02f1
SHA512 7b7b439b77ffa59bc8718b35186207ead27eb08dfb7a85868698d19ab6e0ebe70e514df14cc9c54b5266c81346f4c9820f861941025662a37248cc6b8875ce9d

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db

MD5 15f934479fa26f7c6a3c9c557170b131
SHA1 2807e4087eec4f2b59b975aa6923369c0461f9b4
SHA256 26079ac621ad2324ef0485a266635ad8b774d0ae3a365ca83dbf327d9b75c819
SHA512 28dd6814b182d298a97660d40c62fe0914402888fb67093aedb28ed9284af1ff7716f1df10abbafeabd87a5d7a31f334809cd843731a134827e12b53af066d77

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 97cd69f2a1a0cf243c8d7a63b960c699
SHA1 c5e7831a8ba47f8d491356339b6e0d11512a21a3
SHA256 b64fcbd526f7aa5210504fcfc849f3680e522a3cca3070d2c071d6139044a8bb
SHA512 1a6e426a577eaf45c7b2cf135500e8a4401380ee5bdc5d15b8efa98350e296ded8af7f375fd14c657bd97ce1e935e32c78f8b74e872408dc8d460ef10256113d

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 a5bff24113647665b91dca3f47ecfc38
SHA1 a6e1efe73c712b5ae37f7742e5720f3cde252874
SHA256 bc633f7cdd6de70c7e62cb467fed61647777f940fbc6b71b50bf5d7e5a2c4118
SHA512 15df74a872173973b1adb0add2188e8f6a2ea04f129344581dd748acc45b86819bf70e8ef1bca9072e155774e5ee5b8627c8e1d09d2d107eccfc978ab626f320

/data/user/0/com.tianyancha.skyeye/databases/MsgLogStore.db-journal

MD5 b483797ed347ce4e1885bae5d8746914
SHA1 af2d0f46188b221ff1779b5d3ebc0b01e8ee7977
SHA256 baa6583775afdd4f9404a470eeff73ae9f3fc53f643b4224b22a12bb34877715
SHA512 c204d716d8129e5dbaa113c6022ff24576d31ca878733056510b609dcbc86bff794670929c0769a40ddb3db4b914bfea541495ebf61fb4d16ccc4def16ccd790

/data/user/0/com.tianyancha.skyeye/databases/MsgLogStore.db

MD5 2bb342ba3d0d0993431143d482e69ecc
SHA1 a4d9fb0cd6a986e67d93fa53207e918d340570dc
SHA256 5e80103f2213e77ccc630231cdfc65cf6b0cff9a86d3ccaa10e502c8907ae4ff
SHA512 458ffcfced2689cd0c83e54dc5ccabecf7f664098028f22d2e5a8dc50416039afc835a2349fff332756cfacf052a732fd2a26139f00693fa5d5957cfdf528ec0

/data/user/0/com.tianyancha.skyeye/databases/MsgLogStore.db-journal

MD5 64d22604f04044dbb3e67f782d280968
SHA1 e39390f68202a4d8ea93d8b3f4994e3a64648e75
SHA256 5ffabc1ea8d8d9a3c19565d98070cee8d52644bebe46cb1f6adbb874e72421b8
SHA512 986487a4f2c54832990464891f2ef77c226d6c22ccd4a201331a51821d9fbd887f09c45164338758626bea9eb0c6d3a26609f7da86e92d9e7e8816f501582c5d

/data/user/0/com.tianyancha.skyeye/databases/MsgLogStore.db-journal

MD5 702b3f190f4764fcc73f3dbf85bb45cd
SHA1 885b89f856803f0e14a3e46a388e269a43c181c8
SHA256 dd4b591b205f9eb0fbcd4da9587f058c3aa67f9b0ddce032c7377ce5072cf6f6
SHA512 587bd0d5ad4ee22dd17a2ebd0546b91058a172f3ce2d6ea13dc3cb8b1666f505b75c2b6265a96aeab3690574d1c05e7df9861685233a1f4a66d0917213a069c6

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/bitmaps/journal.tmp (deleted)

MD5 358877bd793fe572d6d8ba53898b16e6
SHA1 a379607a9f99917ee66bc29866081f102c9c2917
SHA256 630e1a5f4c615295de5c88e74d8bf7843697648532f87b1c6aaddae78b2acfa9
SHA512 20889beac2109bc3449112815e68a533fdac08b1cae3dd796ab0f7f2d67d50a8d27da3d8ea4f598565360097c34adab0c7511915fa2a860d8dd08b9bd400b000

/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698905/libsgmainso-5.3.38.so.tmp

MD5 b6d7de43e4d60e024f42578162c7fa9c
SHA1 3f3885f92ba62eb8cab8dfb9423d798db74eea7f
SHA256 602b99f7b1ab79bdff69ca1c62b812c9b6a147a918555a4eb2c016d9480c960c
SHA512 99b9a032f244168e4ea23ec3c814d43e26eb21572f728abbc4785297fb15d9267759786c2cda3f04d1268c3b4f57de3e5f602e07edb046b652e7418b1a43ecd3

/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698905/libsgmain_315532800000.zip

MD5 35de523a099f595cf4d81f59bc814589
SHA1 5475ba030f12e8fb33c37c62b88e1aa3990fd5b5
SHA256 a7efc7906dec7d56f4da8b2fa825f2441c34ad35f6c957ddf219daaf47b9a5dd
SHA512 91cade289701b929073559b9b6c141d975ee0e7f7d637978792e9121e48a36eddcc0aceb399b33672b408662d63ee5cb1f97c2ef795e2dac3ca32fadd3af2ae0

/data/user/0/com.tianyancha.skyeye/files/Q0VSVC5SU0EK.txt1140

MD5 90fc4a18e34ac24af4628b1f76e1255f
SHA1 efbc89767af6958874c932e739bcce06772227e5
SHA256 576da331a32d2dd3141ea6781c1c7b84e93a71a626393e4259efe0e5e05590b8
SHA512 37f054bc7b55e81755fd355e79a9064903b9c1eee55cb6039c9d67bfd063c5494d6e97319f80af93fecf07c6452994ff8865daa50e6007e3d90c783dee8935b6

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 60314854dc15342f525459950497dca5
SHA1 f2838c8bf4e9a404b6d41fc0e36d7eafd06830c1
SHA256 54c1e4f047268e3cd59a9c611048bd0a456bbb14bb80b0d61078475dc4864e36
SHA512 bd465233f03d958bf1a7b73b4afd2266e5025f47e0f1276ac3ca200001e7ee7d3392b0898d1add25f446953d102ae7a9927a120aba3640c7d9a955f01e8a3d0c

/data/user/0/com.tianyancha.skyeye/databases/accs.db-journal

MD5 28ab0b37f113d7a190358e4a3cc926a2
SHA1 cdf429e5737c116c3c1d07961a92708c44095d38
SHA256 23f8b72137a402ca0c2321d36fccfd3e2630cdcbe052cd541903a4eb77031828
SHA512 6777f4f6ef708b413d1fb0cf8efc2850799950b99cfd3c5688f1da3a78734c2ecaacb15ae1fd9cd7f1938da9ac10bf44d23625d0f2c30aadeaff759837835ed7

/data/user/0/com.tianyancha.skyeye/databases/accs.db

MD5 a96fb72d5101588720a3188c2805058f
SHA1 0fba2efcadbcfd58bf3fa8462ae60e2ad766d851
SHA256 cfcc5b9b023c201bc88374938900a0b1617468f6312c490568392734be825404
SHA512 551d41600df980cc5c98e9553bfc27e1025f040ae0aec6f58bb7a9956f22bbb304aad4f370eede38e18de91eec286ec2ae03801d94497dc9d88f87f6cd4436eb

/data/user/0/com.tianyancha.skyeye/databases/accs.db-journal

MD5 33808ca80f957bc0377f8792879abce1
SHA1 b416759e77fc1cce27aecec0c85a1302cd1f3a03
SHA256 55270a63f9cdbdcb8b53f1867a96a3fb2458ec1b16f91762e1656a79de3eb013
SHA512 ec65d22f89c2e267915dc321eb2c45f0e22cc7d9c38d0650f9e94b732ec4fa2588f2b890ab01510e97a21cb1f0a3028dce3c2def4b0e28afb3156f2f29e8e470

/data/user/0/com.tianyancha.skyeye/databases/accs.db-journal

MD5 aff9903963d1608ce3321243081896f0
SHA1 28bd1d4c255c9df37b40f41fb38a27ff672c690f
SHA256 0235e2a379376e10db627d62e410a12b454965c69af62bb48dd291c4613e2897
SHA512 66299b8d2be55ec7f90502bca1eee4ce716ea2b09b1fd9c0ba23aa6d0730af0118f95f487bf731a408e19c45bce637710810f9a7595943356f0ee884ada65416

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9abc742c5d76cb6c5971bf73778bacb0
SHA1 aab8f60cdceea5d40e0f99ae5a8295e6f906a3f1
SHA256 c60646e1b17c5f598b1f381d9e0a2e919a42d50da98c1c887abae13bcb0d69bb
SHA512 a5de86f3151ea34641db537c2ef59c1b736f34954336df22894a1b701e742bc9fe2ffb47cd38e6b1d396b23e8179c2f35c4c7a5f31c34a30af619c5708abccab

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 192f1df6feea0c96dba7f578b303fb2b
SHA1 b6da37e0ac66168ff32683e4ecca6c8c01a2f0a8
SHA256 49d107587b60e58d1a3f8a23b0fd2df140848b35ac9f06da61a4a0fdb1fc2bd7
SHA512 40d158632e2570477662a737c878b680958c8477c1e129f619ac54642cf9cc6b502e1c4489e90ea7a054854a33299530839bafffcdd62e3c47b09edb9c6b5747

/data/user/0/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 7e053b9ff60cae27ae8ad21d21632932
SHA1 674652aeea091ccc87e35cbe782b4c597c5e305f
SHA256 9573c317dab83c2c53eb65fe9b054b7888c116aa35f487ab26746e3ec383c9b3
SHA512 75dafacaf80780cb0140f5320234af957ed75a3af837069b52b1dbc44e67bb2e08f14dfafe1c3ca276e75b228c47b39f62a5d482fbdfb943d99f7e22ce5f4c8e

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 6374e7b09d3f545c3789ab02c92339b0
SHA1 ff97563244b3ec4dea55cf7cdb9021f0cc940868
SHA256 fadb711589a338a5ed7049d0914912027108b7315d5c63f183b6758ac9748a6b
SHA512 e4d337e92d25db6f1b40af577384079bb612c8fd13cd3b2bb1fc814df93508b0e6f0f18b8eb46eac8592556bf3b3b75f27ca81c0d1e599965cbe4339f9aea969

/data/user/0/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 8bac5d5c636a87b26e3bb24f00c5fa3a
SHA1 d831bce26046d6b71f361d9819963975a6595331
SHA256 d96b506412e2967874f28dd5fe8e531ff7ef9ade3d3e49720f16b51cbae2782d
SHA512 bb050331347582d2d250867b14d35e98e0022baa41605a890db4c31f4af6cb8424c1609900d2bb8fbfafc18648cf08a16ec8bc1ae8913baacaa4b94a837b25df

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 89a77003585c081f2fed8775bd3ef4dd
SHA1 2e98811e3b8c176d475a4771115f57a685164194
SHA256 7b7ccb3e7710fde1233f2ca85258bf33fc663b4bd5c6518b7975921e36410a35
SHA512 847c0c5eebd288eca9d944dd8898f67a5f4b313c432a116855de81a7b5dccaf1cb517694d7132146b35095db3123a018c380e4b32d5a72ec1803ce4bbf240699

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 e2abccc3ef31807755b04c58b350692e
SHA1 5b214c9b8b191dca60f32c88b46b312b2e2e2f7f
SHA256 6012eb81f8108b1bc46929b9ed1ed9a62215edc55eb8f5c337a8989cbf8f3e57
SHA512 14b0638291095901c5ba823cb1dca5ad0101addb65fc80336056d14aa821838e62633934a6aebe076cfa7a368c7d9fde68f7bf1cd9a0e6167dd0127e66710043

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 c628c5279709beb2bc713c96e7198079
SHA1 c2de8b1645b9ab2fc9bdc5826b301efc43a4939c
SHA256 25a4442ff8f9bca0ae2ecf10292ff3329c260843d962be91cd2cd92e1fb4d435
SHA512 498fb96be2313a2520cb1fe252ca05a9af0c36929d3b89c908243cfed4648cf5956b9f825b912bff8565ab9e83a9e512fefea85d19f11dff77b6b5bde3646537

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/uil-images/journal.tmp (deleted)

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/user/0/com.tianyancha.skyeye/files/libcuid.so

MD5 472e15e1229449e2b0fec11cbc30f309
SHA1 0b145efde17e59f6a2cf56f5f296606ef228a212
SHA256 6241cdbe7e42fc8228944c31a1ee777ce21f6399d28af8fb19ba4286de43cc25
SHA512 5c54ea10932a8dd30716a787f0d5a0405337f42cdae582c48b7e1e483f2001eca3a3effc8162085b5976c262b2b1ff7d4ece650ded8efac0e78d24d180c8c6c5

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 3717b4d6f1bccced0a374dfbbf30881e
SHA1 5c46138906cb074c962a46b997af1352a45fc89e
SHA256 8bc1e592b8ca1333c24f9506525cd4191c7ca380f01f2919f7b749e3faba78c8
SHA512 a6c09c130a04a7ad949b803d33f98b0b2a6d59de0ec17a6482cd0e1bb935397bdcd8027dcd21a3cec7d7096413788fa5b47a78b4b5b656098677201635f447fa

/data/user/0/com.tianyancha.skyeye/databases/MessageStore.db-journal

MD5 c74e1f2e82465a72abcaa30217cfae08
SHA1 63a21afa30379e3936609e06415bf83efb4d56f9
SHA256 be6462c39f4d8330c417c5b900c34b2b51beb007bcea9a3547ed74dad9341da1
SHA512 046895a9147c25c527a1b4e0cf4fd3949aacca8dd1cb470c2d375b8a7a7b733d1e4b23c447dd0a4e867b62c567279c294be5e2202fd391fbebc6327941c67e47

/storage/emulated/0/Android/data/com.tianyancha.skyeye/files/tnetlogs/inapp_20240618.log (deleted)

MD5 f9991f494b025bbc75da2e3b4ff3b662
SHA1 e2bda9eeb0da082530b59e6ab61db0fe26cfae29
SHA256 0cb405532997fc74c54ab0c174eacc71f700e95564304eea879ffabf0ed15886
SHA512 41574655281903feda89d8df6e5aa5504379ead3474a70dc344c2cd6b6054064233a8636cdd90f2dc0b704527f9d6ee2d67105bb86c1a8a9c3128910210ec44e

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 9260357156dc112364113c4ee65e6cfe
SHA1 22fd67c31e80039c8cdc6b6c44d9a66b1ce0d183
SHA256 213fb509f441d282df6f82aefd1ba0850d228dbd21704232860ed78fc20d4113
SHA512 b71f1db43f11641521c55d9d1287c6acf49e8b10c666551084641b9c72bfd85dd0082f139a74a6cc140c90d25570d08345b3d6f4a4d5e11c88081e21c4163b80

/data/user/0/com.tianyancha.skyeye/files/21c22f492aba3de8.lock

MD5 a45f112f3a51f51f7f1b6693432a4be1
SHA1 b6c613209d8b3a85c2b8bdcfd557da6cc580921a
SHA256 b4b13c200d8b4a756db57b60a25db2f83ee4c7fe50c014469e782ef04bed9241
SHA512 9613aa90c14615750a30ad043e5134b8b785b693f7c52e0f9409cbaef083af0bae8acb6f29bb77f1997f4a7793f0e1796591fed05a1cf9d8a61fe78597f69e53

/data/user/0/com.tianyancha.skyeye/files/0a231bd8575dcf72.txt

MD5 0712b810845aff49e20e2445980feee6
SHA1 30153850e3280915cb5c6a2d3d3832cbdeb82f61
SHA256 2bdef2a6c6f3eb6ae8fbbdba4760a23d103d8209f930be5902de9fc1312c5d8a
SHA512 05e359bcb46fdcefe31b36b174daae80bd49c4c95bd01c7f8665e000e293d3e73ad3b6e7e4953264211b387c169974f78aa6d43fe99a732498c47fd3f3b6b3d7

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 debef5f52bf9bbd6b9476a74ed4a4d3d
SHA1 71776568de3b37e8f16c43351a1aa4da26688524
SHA256 c4b6e153313428e3b789f01e32baaef5ada6c41889f4c7c85285a8c468511129
SHA512 6f3026fa32ef7b47c7a2b86aef6c1a48963a16b2ee5c579f4cea90f13256f914e087ec62dc9825becd2f07e42fae2fb975ffbe86aa8ceba0f8e649e1894f82f1

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 59e1e3bbcf7f9597ca44b43b0a058ffb
SHA1 6955319cc36df9b2b3e4b6a09f3adabc3cdf8821
SHA256 f8d5f29241606b43660938b81d4bbe96513293ecd3342477673869f5a1ff057f
SHA512 befbf0502a61fc230aaffa2411f19849c078297d7aa9c2f91e5294f05893438a0beeeb175979ea26f4a13ceb0e41f738db23325d2cbe5c3d90e2aa562f97896b

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 ac9f053b367db4d5339be4f839078129
SHA1 a9ddf6c3e158eebd1a5ba80348617a0395a26fdf
SHA256 fd627371d1f4526f129bd1a3b9980788791caec94f589de03d29e858a57eee2c
SHA512 424ba4bf5d58160c457d922c4f6cc0695f0daa181d3b71f2da72e989add21b38c27ea5c61d2c9d5f6094e479e01105567851982136321575d2f8074880bd9bee

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 3a43e35ea26acebaa178447460bd5e86
SHA1 ff293c2b325ca7e4c13469ea7e55d49b0455f8e5
SHA256 7c50f5a3e1c81b2ce33b88ace35e306beed684bc579a9a3d7eaeb25046dc5cc2
SHA512 4d2246f1e423de1f411b1f177339dd01e521656c30e5ed604f823a0cb1cf5c927e97ca9eeccf76ae2441c5b50145966c97e239c694c84dbcd0d260879c732163

/data/data/com.tianyancha.skyeye/databases/cc/cc.db

MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 412b2171d6af7f25643e35229938706e
SHA1 8ad17ce68a43ade3037201270facd285c2e5c812
SHA256 338c8ad0aecd702b117532e0d2ec9c4c897c2ff57658097cd4ecef85cefde7ec
SHA512 29b8494460f6c9c8ab1aab0d9181abaf83997e03153ded65c8f494425a482766e4289aebfb7950b9ff107ad06f2e22f544f11b74c2c1d93544c4b7880adcf19c

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 85032d9118b7a01bd45034af9dec581f
SHA1 5fd329bd3cdbd511eabf5c478db748bccfc4e11e
SHA256 64f2523d389d27bbe0ad395315c92f0e340b09592b9f60fb9bac9e39041e9607
SHA512 a3ceb5967b978d70365ff6d038f5a1a7a86dc717a9ce03a6e46ce6969234940760de27c9573609b7e1dd60057fa1e6363b309c3cb048a1dd2bacaee850bbef22

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 3ac7ce691bd2f04c9f8a0284443158e3
SHA1 90c9bd56d0e8b3e44b341ebc8a544fe1aac55bed
SHA256 a5647af9cc81608e193f993b5247fa41fae4afd7cd6f32ef47575d9b8e9e42a2
SHA512 b4f49926b664fb1977191995d90db9f2f16b5e671b6bb72d3ed909652fa05a8a9ad7e1d4d6a22f97b37e321858d25bcbfb5bc779e2f83a606daf32210657a078

/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

MD5 59917e00b8f3dff6a22b5a378740a5c1
SHA1 b19926618430d5a450856cace26876b4e7855b1e
SHA256 4e353009942be9d015cef62b61ff13368a299b1c74fd138d4b9d46475a365c75
SHA512 482d1a218ed033c8bb102f8a7e0662d821bbaa5a53b831a8ee031a6d08612778398bf3b69f406e1b56852c269abf6234075a8501413beaf8cdf3c89f41c3dbc7

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 b34837bc16622a4f9f4cf84a1fe53757
SHA1 334c7f6befea99a360a9697fd505d5d36d1c1aa7
SHA256 943444c95a67c10b1ed5d0301a7a32ba82a3371408e90ab1d3acd316dfcc0585
SHA512 7b252aa19bc72e2ab23e859ecae3047bc9ad080d7eb5f2bf9825cef8e2d48ae4406c1acac3de0e6d59cd71c583201380b37daddf19c319853b7e085e89f81b6b

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 c0636e79b36dd5097c38c60b3ba64960
SHA1 4cfc14fe1cef617b4eb673544e76bbe9ee2124e4
SHA256 1dfc53e8ac1a5bede672e2233af6b2281a75615895abfb6206e44d4ee431b142
SHA512 e4a9ff60ad46590473912750c9197816e9f0a9e433873877c2f0321e6fd7152cbafb8e2552ff19d405cd3a19d6e6405009dee7430dc0baa78b92ba41f689c79d

/data/data/com.tianyancha.skyeye/databases/ua.db

MD5 90a74ea337ea80d5bb10b7b5307b5654
SHA1 ad30482f3cc9f2f85de595448b9f14a56b8a49dc
SHA256 ab016dc557fdab1224f1c90449b97bcd24d952c5ce749ed2c0082303ddf71731
SHA512 fc590c308d6800ff780be89a8d3faff1a2ece7dcbd6de61221cc32445cec21a097d89cc5f7b49deea7fc246ed28d4a7b431ca6205cd0f1b8ee622e3a7bdfa247

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 929f117c6819914f69b70f7add047581
SHA1 027a22fc8abe9c81811a0e62feaf3a86ca7679ec
SHA256 2ed1436ee7e24a1904cb48c53bebf7415ebfa911144ed944ceff4d042423e662
SHA512 428994b2cfd277383690bb5af9bd20e175d98bbbd1bf41e7cdd1cdf22f5491f3fa95cb3ed697eaab3dab9be90aaa06384cde5a02640aece9ba8e06db34b5f9e2

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 b80955aa81ff59bd314027af45b465c3
SHA1 31b2adaaee69063ffae84ea4a4b6b0518e02bea5
SHA256 292510e1d64f3755888e1a1cb2fef160f94e739cf6a51945ca18da6904a2d5ae
SHA512 9c15aa2a59b1c0d50c13d2f2139a259673da0293445f4f4795fca829f47afeeb7d78a9c391639ee758246cf51aabef0a65389c09893ed7835855b76ce778d45f

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 ef36425df2df8f57aa2b07176522a51f
SHA1 40c51d4c7928ae9f27c4d09284a1e518ee42b4da
SHA256 da0b9e9ca702fe5d56340328c534fdf9f3b9f7210c70c1aafc3a3285553d8ace
SHA512 6c8c78dd419e697f404a6a0fb06e189250e8d943e4b51fe8d31bca9de41bf07c5c18b7ffb9817348562ad72509c54411ef600d1fa0c9ba9bd6059025e71c70cd

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 0e95c7d0ba33db722305d7382a13f486
SHA1 4221fac0cce835f9a4fa0d3bfe92cec15ad96105
SHA256 3c5453503d6b43260b3381e06778611dee97546edb43c348da3f98a77dbb3174
SHA512 2a23c8af959382ceb43bfc15da75009d5e86beee5c8aab29129fbe318d1b9ffd991a9c185649d0f314be2f4f26b373aed3a5b2c9a987100b082f6932fb0e1a66

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 4ba93239aec61f185adb757a10a8b8b3
SHA1 3071da152fa05f6cea435c3c0f341fdc829ea93c
SHA256 b969ae6712b77ffa39e068efebc5f145beff1153bc69d76dd80959f7d448238a
SHA512 2322d62a991e6aa8bd240cc6b1e56b9cca331e97caabc6df5d4ef762115963be8345e38d4a8a99c3d6c4fb87991a7ed9975a195a58bee4176668e332f5e7b92c

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 7cf5be0d81b8a26e31593caa56857891
SHA1 e4ff1498759a178e8e36bfee25f6242c928911ef
SHA256 29273b0b4194cbe44e5082345cbbd1229e18d51204024a16de41b1c6b2cfbdd2
SHA512 a47838b4eed2f9330864b8f4597025c3f19e265a7cdd53c0e216edff47d46f7219bb6c381a4b9717755b6652e8697fcfd28d2a6fbc39399fbd318be9602d760c

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 715200b7c105b4d83f9427d476715fc1
SHA1 cf8b1632020214ed3ec6e752a7b1fa5f3c08d76b
SHA256 c5ab5b41f17ae2a5423c2a82f43684a760cb0e3f2f3910d840486c89f5168931
SHA512 40cc288878df417f1d7e8d73dd34fd33d4a4cfc1d87f432bc3449e996f99f24a66dcdb9be6d9ffbfacfea37fa1a64ada5e2047970b5f9c6285d03cb67ccdbbf5

/storage/emulated/0/.com.taobao.dp/hid.dat

MD5 521bb063c60948077acc40efa4ab026a
SHA1 81f2bc01168f3369fc0259938ef2f7138cbe05c4
SHA256 dd2277cf624002402a73ad9ec5d2093a39906e553f6531f12402a11da9301bcf
SHA512 94b8fb6549e87864aeba3f9da4052271a5f65a932d49f08c520f007a7491010c453a4a2276435eed9221a31c03b0a841bed90e0ac4b2a46306ca68f9d7d34947

/data/user/0/com.tianyancha.skyeye/files/SGMANAGER_DATA2.tmp

MD5 040f13807bb775da158cedbcc49c59bf
SHA1 c8a92275e8e74d1dadb0770ae456532f22125d00
SHA256 1d8823a100bb4321b288972317455f5e42b88e46a56a0cf757860ceed12d7451
SHA512 c83ec93c30eb90539ceb66ffaae78945e8a3a0801e6aa01d282e53a7081c5866bafa66fff0796b96770334510ebefd24824e9bc5cbd550e8d574777ff45408f2

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 a2ab932f2feda9c42b8199fbb75f24c5
SHA1 c3d3345a4a56fbabd5642cfd8dcd7931a8f9926a
SHA256 b71f7afc2cd48d2d3ff5507b36492e46a04a6367ecaec81a2f5c40891700ac60
SHA512 94479445c95c60011d96b9b1f1bbd4e64e42842c6b52feca439b6fbd741e6f98e5a7ae4c78aea0124c99a795709403373d649458bc877bb702fb4374280bf3eb

/data/data/com.tianyancha.skyeye/databases/ua.db

MD5 e6d9954aa8f007cc3a13e78967bcc955
SHA1 37c36c3e98153ebe6bc0e9fcdb2bb0bfcee6de08
SHA256 97feefbbc9577b2cf94f33af1e86048adf33839e2daf3531177bb474c70ff2d6
SHA512 51bbe548030ebf4a218d395ebfae31fcd259eaeebadfb42c9af65148771ce1fc7513022d11a64fa2f678235e8da3501d5ad084512cf7eb55e9935b3ddaa4413f

/data/data/com.tianyancha.skyeye/databases/ua.db-journal

MD5 73d43275abdca0a943a6239b9275f823
SHA1 a453ca8328243110471322bc4049a9f80205b3fe
SHA256 387109eb7e5fa886b15dfffe10951e67e2b97d6961bd7d81a37373035cf5117b
SHA512 8b85ceeb6ee008713d0323c1e09e8f916027692c790af7bd4e51a88f6da449b29221744e7cba6f66ab8c0e1eef06ebede51c167950344b7ed532217d33447b15

/data/user/0/com.tianyancha.skyeye/files/umeng_it.cache

MD5 dc28e678661616551b560d6a851fdf11
SHA1 d7f2f988b0b7a359c710e7d175fc80f47f60d847
SHA256 60b3718f45082eaf3687ca14754f25cf4f82ce332e8781bccad4985fa1825d6b
SHA512 93005315de553ac7ef96994541d8837d5625a6034b2a74e6c36c533087433f16778c57a53c7b50ca8c5acb3c2fac117858a5a92458bb962b859a92a8bcecdc9b

/data/user/0/com.tianyancha.skyeye/files/.umeng/exchangeIdentity.json

MD5 70f1605d6a4658834eff4dfa7ccf5323
SHA1 8214d0003ac44f47c44f0aec7a35de472b620b14
SHA256 d1410051cd3d07b46c75517b846671bc50deb596ad612707bd8d56e422923397
SHA512 2270d0253de27ea3d39b9c6f45eb4738fd85b5511815620f4b80dd741aaf321ab9a682991f5aa9e6546a2a463675ad67a4bbff8c4813ee2bbb143dd44d259ef8

/data/user/0/com.tianyancha.skyeye/files/exid.dat

MD5 9522567c6850275b35f990d1b6c18631
SHA1 00b699f916935e742a447dd4085b9c02fb508889
SHA256 0b02e064a912a921bfe84d4bcedba267db2e1e008ac60af1aa71d6bcc15ede9f
SHA512 27865a8a3ee10ac45218e09e4763fb8c8f0067a84adb0ef5be2a7f7b965b2e0a81030bb8e09057fed436d498fffb8bd3aba32bd83fc39efcc105469f31f98158

/data/data/com.tianyancha.skyeye/databases/ua.db

MD5 4cd141af5f5f1ff6416e42d1aa8fd169
SHA1 121bf46cb4857e644ebf1d78fbda4c226cc9d028
SHA256 0d025277ecc531093a863bbbf75b61f5c22997f1e70fd5f8d70f3c0ec66630cb
SHA512 c2362199eb6452beb82042280a58c7cf60143881673120f7029e461bbfeccf0c3f0b668b40cd93c5fb4b0dd2eb9a3fa41307bb19f276fe3729ccfa4db12c03b6

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 bdd031418e34ba8ab79b1861364a73e1
SHA1 0571ed2d2a364aa40f101e8634b02fcaa977bc80
SHA256 9d4c87e89db6b967212f496e57b58ab798af9237018e68b1aa0289f2fcdec154
SHA512 e2bfb17b1d894bc064d4bf7e52fecdab32d05d8172436caf0cac8cbeaebffafa8f9d24e30db47e91542eb2b5792ead62d49e6b2e83fc1cda563c5ed3fe4960b6

/data/data/com.tianyancha.skyeye/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 82f5895f891191f6b0c82e0531756724
SHA1 5a5bc87b614b076f2ed7be541df330b8767f0a75
SHA256 3f33b9cf12d65bd1fe38452d6b82bd84f1594b6e47fee27cacef32d32598bfdc
SHA512 d9d0ce155d0db80223e175b6fd71b4bf0e7b37bbf51cd1b911f70aa75bc62a0a2d8ea33bb4e3b5f2762b2411aa1048174922fc55809e0e6746fc791fa7156783

/data/data/com.tianyancha.skyeye/databases/cc/cc.db-journal

MD5 819a4712709d1312b168f62f7aaa0f1d
SHA1 6812cef1f0a9e20d9d8fa8a8b268e52a13c52087
SHA256 e64f412abd9abd53eae22d0655beabe823eb8f7620d8ceab447d6e7b6ea297a4
SHA512 d1fe4a8292191f82c9f1c020dbb4ccfa06e1e74009a2ae0358ec674694efa89fa0de0ebf7c97c7e3717502197cdd4e5cde17c3c60c7b4f556b8fb659ae6c12a9

/data/user/0/com.tianyancha.skyeye/files/agoo.pid

MD5 3b9d6e5e779c8f46c5765c194a04b59a
SHA1 58a270d7c993b0145f70b1f24d6c61ebea370b22
SHA256 9f1d68d37ee45034544337839f98d9d0d1035f2497d447b1b8bebaf16d0517fe
SHA512 d879e526c308637da6465f4660c0f4d5922780fab8e9d0756141bdd1ff7b789ea6ca6815f107b25b65cbe3cd325e86d3e5c07b0a494243956696da2da7b648b3

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/1c7e8d806cca49fa925d19c5a1cc65f3

MD5 59c168b25d9154dd4e9c8308be596470
SHA1 2f3f1c65989c33d9c6524947e67effe2c62cccbe
SHA256 6e273756c951aa35a52f73a51a6736c39b5e330e8d2016d2b8ce6c761c155369
SHA512 9a6ffd2505a7c0c4822adc6c9386f730bc155e8f4bda0c92d81d1aa2d79941c7bd9cbacf7c07d730ab8d5639c12c40d983e9d5b3b03aeb825b86f3da0976f127

/storage/emulated/0/Android/data/com.tianyancha.skyeye/cache/28845f2f29ec491597f790664f1fafa5

MD5 4013f922d6e2b5127df7532c533abfa3
SHA1 d2c113e1b1527a8525d50ac571499d2cfb04eb1e
SHA256 8592bbbcb58d5d04cd7358acbda5fe0488fcb60a101ca6a36e9f7f0f2f0ec00e
SHA512 99103ad0ed45dceae56810e570ffc612d69a7713fbd85208301fdd0cca77dcb12e4d61699b9431836e6cc239375eb22d5499fcd16802e60d2ac0c49c168709d4

/data/user/0/com.tianyancha.skyeye/databases/message_accs_db-journal

MD5 5835c2911a26f5611e99340505622f3d
SHA1 532368f7a83dc1a74355138096f095a59e6bc609
SHA256 6c15107a81a8a5d10021f8461a3eb5201c1e76868cf10a1ae03df537561e50c6
SHA512 b04914399d85d30ec0d0c3039c4fdc9bbc39132cbab48078efdc9946055015c8f60da67df468bf9c603e3a8052433f68c59cedac8decf540f2b0675f44ead87c

/data/user/0/com.tianyancha.skyeye/databases/message_accs_db

MD5 7c0b5c6d1120bf3635cb815eb5e29f28
SHA1 cbb58092e164d3d098e750a608f3833f85a06476
SHA256 f2434b69ad5ddbdeb3796b9e34fa428cf6fc31bf987dee42c12816e3632a128b
SHA512 151d69445e8311fc78f40b5781e2e1f1d631e879e87a08d1076ac69d7ad5bbb8ee017fa4d5be934f9eaf1cd3a0aea87c40be405c2a601a845820d73705ec7a36

/data/user/0/com.tianyancha.skyeye/databases/message_accs_db-journal

MD5 672448a2efe3f53cef6cdcab17b34a7d
SHA1 cb73d1352b6a32ea76b9aa8fdf5ed1ccf289e552
SHA256 39e17166407492b64b3f7f6ea065a762a4bc2e805bcee78bdce6953b35831d3b
SHA512 04600c355199dc9aa33bbabb98cee62bf3c2f9ed4a4890830621e5968cd2e783c51d974b868f621d328522bf589e966e3daec275d3c781c9a2ca776d50a97429

/data/user/0/com.tianyancha.skyeye/files/.imprint

MD5 297ac92535af7072a04a3d2af3a4b05a
SHA1 eaf27917e52997c8b4c6eaade3f661db2150ce73
SHA256 ac18c0d9fc5b2048f112792239e6103424c3c2f1e22a3d750b76ea3c0c01e35c
SHA512 4ce0d60ce8935f67c5690639013bb5ecfe73250468d1897649925ff681b5aeb2cef7a4d5758a321ba01325edc1cde997f1024bc260f60f8c4c35e5edfe6a2b89

/data/user/0/com.tianyancha.skyeye/files/umeng_it.cache

MD5 65264747a9a07668fa72a196dfece30f
SHA1 6c532c93f976222c71b2f5905d066b1907f04bb8
SHA256 db0deb078836f557ce1acfdce2af5b03b625ae4de8ee4cfca456d8e897d64402
SHA512 90c98276819b5df813df0fc6845409f5fc0389fb07ff4054dc48a45a7f736980b2e5b9c08ae4848e41bd785631452f66a7def6454917904ee1d214849c804a32

/data/user/0/com.tianyancha.skyeye/app_SGLib/app_1718698905/oat/libsgmain_315532800000.zip.cur.prof

MD5 d594697b36cf6b6be8e0da65504f3a4e
SHA1 ff060d23cdee974e88fa0285d3ce006f557e1436
SHA256 12357ce52749722d2504a2f5b2f3bbd165bc703c26e03a4545e16630f2b4e16f
SHA512 806a24abe0ef2b8690ee3db1a463a280a1ab136428a8e8c9626b09e9c9bdad217adec81132506d183f8fc6e29572086305d8bb4d7cff820f05aaa56c4b64ff10