Malware Analysis Report

2025-01-19 04:53

Sample ID 240618-jdk1maxdkl
Target ba7944d096ba95ce06d5222467cdab0a_JaffaCakes118
SHA256 47090cbfe77e5ecd87eb06e274d9ef2218c50b03cba699e05bd447cbf9c21274
Tags
banker collection discovery evasion execution impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

47090cbfe77e5ecd87eb06e274d9ef2218c50b03cba699e05bd447cbf9c21274

Threat Level: Shows suspicious behavior

The file ba7944d096ba95ce06d5222467cdab0a_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery evasion execution impact persistence

Loads dropped Dex/Jar

Queries the phone number (MSISDN for GSM devices)

Queries information about the current nearby Wi-Fi networks

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Queries information about running processes on the device

Acquires the wake lock

Queries the mobile country code (MCC)

Queries the unique device ID (IMEI, MEID, IMSI)

Queries information about active data network

Reads information about phone network operator.

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-18 07:33

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 07:33

Reported

2024-06-18 07:36

Platform

android-x86-arm-20240611.1-en

Max time kernel

165s

Max time network

186s

Command Line

com.appbyme.app310098

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.appbyme.app310098/cache/__report_impl1168452371040396388116412112300.jar N/A N/A
N/A /data/user/0/com.appbyme.app310098/cache/__report_impl1168452371040396388116412112300.jar N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

com.appbyme.app310098

com.appbyme.app310098:ipc

io.rong.push

com.appbyme.app310098:KeepService

com.appbyme.app310098:remote

com.appbyme.app310098:bdservice_v1

com.appbyme.app310098:KeepService

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.appbyme.app310098/cache/__report_impl1168452371040396388116412112300.jar --output-vdex-fd=97 --oat-fd=99 --oat-location=/data/user/0/com.appbyme.app310098/cache/oat/x86/__report_impl1168452371040396388116412112300.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 1.cn.pool.ntp.org udp
US 1.1.1.1:53 id1.cn udp
US 1.1.1.1:53 stats.cn.ronghub.com udp
GB 8.208.102.120:443 stats.cn.ronghub.com tcp
US 1.1.1.1:53 logv2datapro.apps.xiaoyun.com udp
CN 114.55.9.229:9700 tcp
US 1.1.1.1:53 zhengzhoumuyao.com udp
US 1.1.1.1:53 cfg.imtt.qq.com udp
US 1.1.1.1:53 tdcv3.talkingdata.net udp
US 1.1.1.1:53 jic.talkingdata.com udp
CN 114.67.241.135:443 jic.talkingdata.com tcp
HK 43.135.106.117:80 cfg.imtt.qq.com tcp
CN 211.151.164.164:80 tcp
US 1.1.1.1:53 clientapi.app.xiaoyun.com udp
US 1.1.1.1:53 p1.pili-z1.qiniudns.com udp
US 1.1.1.1:53 nav.cn.ronghub.com udp
FR 212.83.179.14:443 clientapi.app.xiaoyun.com tcp
US 1.1.1.1:53 log.tbs.qq.com udp
HK 129.226.106.211:80 log.tbs.qq.com tcp
DE 156.228.146.3:1935 p1.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p1.pili-z1.qiniudns.com tcp
GB 8.208.8.123:80 nav.cn.ronghub.com tcp
US 1.1.1.1:53 p2.pili-z1.qiniudns.com udp
DE 156.228.146.3:1935 p2.pili-z1.qiniudns.com tcp
FR 212.83.179.14:443 clientapi.app.xiaoyun.com tcp
HK 129.226.106.211:80 log.tbs.qq.com tcp
US 1.1.1.1:53 gpwrapper.apps.xiaoyun.com udp
FR 212.83.179.14:443 gpwrapper.apps.xiaoyun.com tcp
DE 156.228.146.3:1935 p2.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p2.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p2.pili-z1.qiniudns.com tcp
FR 212.83.179.14:443 gpwrapper.apps.xiaoyun.com tcp
US 1.1.1.1:53 p3.pili-z1.qiniudns.com udp
HK 43.135.106.117:80 cfg.imtt.qq.com tcp
FR 212.83.179.14:443 gpwrapper.apps.xiaoyun.com tcp
US 1.1.1.1:53 0.asia.pool.ntp.org udp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
US 1.1.1.1:53 piliv1-sch.qiniuapi.com udp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
US 1.1.1.1:53 loc.map.baidu.com udp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
US 1.1.1.1:53 dp.mobcent.com udp
US 1.1.1.1:53 api.tuisong.baidu.com udp
HK 103.235.47.247:443 api.tuisong.baidu.com tcp
HK 103.235.47.247:443 api.tuisong.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 129.226.106.211:80 log.tbs.qq.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 api7.tuisong.baidu.com udp
US 1.1.1.1:53 android.apis.google.com udp
HK 103.235.47.247:443 api7.tuisong.baidu.com tcp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 sa7.tuisong.baidu.com udp
CN 153.3.237.248:5287 sa7.tuisong.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
US 1.1.1.1:53 pili-qos-report.qiniuapi.com udp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
US 1.1.1.1:53 1.cn.pool.ntp.org udp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
US 1.1.1.1:53 log.tbs.qq.com udp
HK 129.226.107.80:80 log.tbs.qq.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
US 1.1.1.1:53 report.mogolia.com udp
CN 114.55.9.229:9700 tcp
US 1.1.1.1:53 p1.pili-z1.qiniudns.com udp
CN 211.151.164.164:80 tcp
DE 156.228.146.3:1935 p1.pili-z1.qiniudns.com tcp
US 1.1.1.1:53 p2.pili-z1.qiniudns.com udp
US 1.1.1.1:53 userdata.andrcool.com udp
DE 156.228.146.3:1935 p2.pili-z1.qiniudns.com tcp
US 1.1.1.1:53 p3.pili-z1.qiniudns.com udp
DE 156.228.146.3:1935 p3.pili-z1.qiniudns.com tcp
US 1.1.1.1:53 piliv1-sch.qiniuapi.com udp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
CN 110.242.48.56:80 piliv1-sch.qiniuapi.com tcp
CN 114.55.24.229:9001 tcp
US 1.1.1.1:53 pili-qos-report.qiniuapi.com udp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
US 1.1.1.1:53 www.baidu.com udp
US 1.1.1.1:53 sa.tuisong.baidu.com udp
US 1.1.1.1:53 sa.tuisong.baidu.com tcp
US 1.1.1.1:53 api.tuisong.baidu.com udp
CN 153.3.237.248:80 sa7.tuisong.baidu.com tcp
US 1.1.1.1:53 pili-qos-report.qiniuapi.com udp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp
CN 110.242.48.56:80 pili-qos-report.qiniuapi.com tcp

Files

/storage/emulated/0/Android/data/com.appbyme.app310098/cache/uil-images/journal.tmp

MD5 9ce81db5fe79ae4f68051b6e1dce8b4d
SHA1 28b9b3e7c8ca17f1f81a9956398d46f399b18910
SHA256 a588689cc4203cfe4196c4ddba0c130464a399ad7df98b9321f28d806fee5978
SHA512 792949b9903e633b6e28b66d6612a20783f3e4461f344ab01e1bcd8eb5a43c5d8b4176284985a8b60197fc58fbc9274bbc72bfdc03fab8ebce1339baa8ddfaea

/data/data/com.appbyme.app310098/files/pili_qos_log.0

MD5 cf3b3893bd93f050c2b0a3827de16310
SHA1 caafe3577719642f33e454338115eee52cecec6a
SHA256 36ef668649ee60f8bbb34cc600a6d07924a3d0775a338aebe86765f2490539cc
SHA512 46cc78d3df2899f93cdb1ca928f356429b30f96892b7b599b48428f0fbfa28ebedce463561a7fe31df30c060399fc8139517b389f6fff3c6598e33da4bc794d3

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 d0a3d9bdb317a68d55a4577f12b295fe
SHA1 541e8977106f9188df7fe02f48dd3d253e57b383
SHA256 7bdab48b37162454cc21f477eaa3dbd197ba1e3ecf6b3c4a7bccb50d25f8c237
SHA512 4f15f88aacf79b49619dc11622b2ba5754aeb5cf0735c10e1b0bf3b9b8013a594fec434c7a636897db482ba1b2670c20fa44e87b51f7b6ce9743c2215657974e

/data/data/com.appbyme.app310098/files/pili_qos_log.0

MD5 f1695e623318af129235ea35f5e8da1d
SHA1 dde08256c968e582e2d5ac6106e1fb2130cf1f48
SHA256 24660765e3bc949a6c3143e289291a3391728b631bfcfda5370c90276e7bd621
SHA512 c8ad4e645752dca4236adef9c961a610cd6fc60a4594e1d9d61dd9b7c2bfeb56819bac364b2dd2bf66fa1735a4403343241654f1d21b24c270318d3fa94201a7

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 89847486a3aebeb23988478f1c19865e
SHA1 4ec03f24dc7267f2626c1536de8ab42faca45910
SHA256 93a2dee8ae2d3a7a3f74e222f6a49ce91378a7189a66128c62eee54cfa708308
SHA512 0140be3f15c8a5ba3f5557a9a605fd67a4f14cd483dbe6742620dcab35b543d2a4d2881feaa0fa83a68a1e21dce1aa9d8570be74e57e9773faa8024b704ca4de

/data/data/com.appbyme.app310098/files/pili_qos_log.0

MD5 7d83639e9124d35b1a4d1cb5c9e66e88
SHA1 70d894c7c1fdc598d95d1b94b30935474c615244
SHA256 bb9b083d77681b0bbcbbf6827f2dd70d0ea18f9200dbc1d27c622c126940aaf7
SHA512 29f50d5d019c4974046f9440fd78fcc56cebb1c404b41902663d349ae68f0b055d9f7cb6d31922ab246530c497c215020fbd14089695382ca4cf6741bf9e04a3

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 6d53392bc1fb0cf113aaa41af9ed9b5e
SHA1 9e0cf1cfccbc8b8522922b70e2563f72af817692
SHA256 043bccc142f53da320f83917af181e9a6c493cfaffc1833225c7a0519019d87d
SHA512 543b72be2419a33bf5ce7381532946a69c96b4fa85142e4cffb35fd1efa6045a3b4de30ba43a83b7c51b1be03e105fb1172dd05cbb31f269953ae16d0b910da9

/data/data/com.appbyme.app310098/files/TDtcagent.db-journal

MD5 80e68544f41431cd4bead814f1a0f74d
SHA1 b4bea8a766fc2394a5c45c280957118c18b22bf3
SHA256 645ce7fd6c38732d7b3757186d6fdc7fe4cad30e80b492ecc8bf9f0275ea55c2
SHA512 a2fd4a5b1af7c0183ee734cf78ea6462791b7c2a78d6dc02ac960efaa8d05c64ac97e4dcc8f8ed7013f327ff52c0bf7fbc01c7761433ed0a7d73466d6335c3bf

/data/data/com.appbyme.app310098/files/TDtcagent.db

MD5 98e5f85099c5dcf025ac943b8dc59cbb
SHA1 aff527eb46395b1beb66b71595cd3daf91e0ed12
SHA256 47c6355e51ec3333880da366a67059d86ba84e6a64ca51d6320f05d2473f45c7
SHA512 c14b0de86d5039e11dafd939712d48ca606b83a535ce29c5be90c9e11610024979e9b9aaec1bf6713811ad8c4960ab70e2616b40cc9f11a1f152ce112f9dc05d

/data/data/com.appbyme.app310098/files/TDtcagent.db-shm

MD5 e9f6ff14d1a0c65759452045b7a8b504
SHA1 518f8cb472b857275148d77ead3aa3f7c3cab5b1
SHA256 5f8be205d958d15fdd7194ef644a65788f790708a2d4eddbc3c191657ebdcf29
SHA512 4d196f7d9bcbc4a36d92f48feba8fd3897120785265a21683d72843217efb6c7e40b8ee1c4e3b1ca942a621af9fccdb977fb5bbb684644da08059bd3a28852ad

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 8503b27b1d89eef796e9d7bf3d4ebc34
SHA1 b700b0f36f8c0bf3db78410f296f84c6777b9d4a
SHA256 392c8dd5af5b4575500b04796db38913d431043716d460b6b7f4e34ea1440c8a
SHA512 fd9ecbd149b52bef7e0fe73340c404292ca669c7ca8c8e008bc0c89198c9632a66dde633130eecc262c4926505ef04633c12e7644fb0139247f59c15b222352e

/storage/emulated/0/.tcookieid

MD5 fe644bf9ae47accfbd71fa1e06969618
SHA1 2465930b7fdcafce7053a971db30604e0c930d9a
SHA256 0679994901623e8a1338396703863fe9945b809980146bd343ab13db096c4776
SHA512 7d7ef4767e5b27adf9ffed163ff2eff605934afd40ef04cb07a1e9257e2f9062632c77f8b3045e400dad9dee90db4a849438e6f2b1a17bc185bbcff2996cd886

/storage/emulated/0/Android/data/com.appbyme.app310098/files/tbslog/tbslog.txt

MD5 854cbf1766e07ad191fd8610996cd998
SHA1 b0d53f72e9989e503e4d3d82b36089fa1a74898a
SHA256 a6880db0f0789cd6000b680c5c415192732059ceb4b153e702ea2203a6b95651
SHA512 ac9a1b9ab45ead22a538909c4db433106f7bd1e06e92dc0078e920a3096916f9946c2a48bf70d9aa9e9a7d566bc44685b41de5956b07ddaed611e4f5cb5d47bc

/data/data/com.appbyme.app310098/cache/area.json

MD5 7d3ea51eaf48c6a3f508e7097f260257
SHA1 225bc0bd1a11f9b3f4caf7623861d99277d19fcd
SHA256 4dfc39d0c8bc413aad27f36f74c1c03b8ac6c541caf1ed160b99fae28852f1a9
SHA512 35f71d5a94b034728fc89ecababd7cf8569cc403628c728f1293cd65259d363c61b5f3bfc55c0e939eb8456d2e62349cd6686d8252f61655c38130a159b80119

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 de78d9e207cf977d9f55f9d6867d241d
SHA1 15a5de0f55a874582c8ddb19e59dc5687d71bbd1
SHA256 ce80195ecf9b2c6470ddddd674e64b2497fe9e38199635764e2e755d66d06e05
SHA512 f9545c861b1ce47ae6101e437d5d545a410b65b12b7b413316e21dcda2863da5ebae731074cf6dd0fe150a747f1a82bb110c70a6482f77416b8ac17c549f86dd

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 2b082473cfb8284720d67aad60abd8f3
SHA1 528344adb4926d513e64e75dcfc514f29d8ccc07
SHA256 303a1af3a7e35033231cd609f1fa5537b3f621e20eaab16919113ab566a9b560
SHA512 b5dcedd6ef6154e4ffbe5f78db0a9e4afc527e2c25a7531b222d2297527de2508207c92534fd423507c4e3d3e3352d989510079c79d17be5f5c4c0e50e005fbc

/data/data/com.appbyme.app310098/cache/area.json

MD5 b3e1fa10b48d58544a4f29e01f563096
SHA1 a10c390909cdb2eec64c58dd0c7941b8d7c8d34f
SHA256 a14d6ba46228888b7f85d1d4c6e8e6f5e3a0ed6be79df54b7fa26ad48406b896
SHA512 a4cd10b97c4b6b89c62f8cec25c2a433a381a3be878ab651506e215f38e61bf051276013c8efbbc3191f168551f04f913a641d44c30de344269085d1a2fc528f

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 fb9d8caa6092ed532bc0cdf715f4c908
SHA1 c4f7e3d05f40727d83caae33a6e73a33e39c73ff
SHA256 6ecdf167932efa52ad1f9f8bd7259bac6802a190160123e801b5e36574856f5d
SHA512 7f968c8bb211a030be13c6c31e6949b403749ed094f0e38e8e01c0a40138605e26aacb25e8b950c800c7b965527b46c2f84725bfc27c59eb4fd735fb30f2f700

/data/data/com.appbyme.app310098/files/pili_qos_log.0

MD5 1504e2dee048fcdcb6f80a417cd811be
SHA1 a3edde4da23464b5af84c79ce76a71a91a690664
SHA256 6255bebbbeaa65f4a02cd655efe4861a4ce2d502d71372f9dd02d8bb126cb9ef
SHA512 da4b44e6010d8bbcf0b6eee42359c30e7dff2e315a6c7c7d4181264a892525a0b45f8a760734ea187316726ea81a4d0f899a9ec51657b1f8a8a0247c3fa7705e

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 eb583d351a486df406c5f10cdd86824d
SHA1 bf75895aff26471d9386c43c8a684e54cd0b8b9b
SHA256 41f252a4c339d86f4c3fa3c5c0dff4f082f89eac1b4079b0081013971b19d59f
SHA512 fdf320481111772a77f505ed347c9c818dd269c28676ae38b166e5297d744e7ebbf05d53018918d3ea6cf5e4a21584085bb37c11f30fb9c6e1c519529fa0a263

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 20c71f4021fc1132b8b86802b301f38d
SHA1 58740904c4227972b521bb3e7a1a42b32c9884d7
SHA256 2b574527d79e220eb6e4a1de848dd96ca111be5e6ad4bda9c7807b1d2f23f71a
SHA512 622388147318f1d0d9630d102bf21aec71ebbeb6d67fbed3e7d52b2c5406e42fa43d1efae438c12636074c5f77151657888c42edb1bb4e02878a78cd6bfc9f30

/data/data/com.appbyme.app310098/files/TDtcagent.db

MD5 15fdcbd4c0ed94b4310ce8cd6c5648f0
SHA1 fd0b52fe9a49754ee7f7346fa1d3293c8939b3a0
SHA256 da42fcd9689bb91ade84f1ecf0e59f5957ba9bf34bbd45ee752696e6b64c0474
SHA512 9926d6e10b0adb61e84c503a61f9ba7e4e0b7aeefce1d14e79e8eaa7b4e73c35fb264ad28543e02c0c51512c49862911095ea799d7b6f2dd9af0bdb7ad0d29f0

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 e83a9bac3393de20cde0af78564ffdf1
SHA1 338cc5ddee6a46daf773e07dda348e93561027c9
SHA256 e18a9cca1d86417c291922b8365399c9af7ea24b9286eb58a16b097b17dd034a
SHA512 7da6023137e3e8e947fc92a90852943406688b11b1f7fbebe67f7373b4a01159b8c121282eba9f1380f2fb98d2c6cc113589b48b305ad6c0ea239f510ee3ae82

/data/data/com.appbyme.app310098/app_tbs/share/core_info

MD5 888f4f8d67446fe6500f02bd77f39902
SHA1 0c7be07a25b490fc234f8cce6536427161430eb8
SHA256 7c9c97ff29320620f75ee5b23cecc171d96f1d16e6b05627d3153880d85e4c5f
SHA512 c0eaefa8d772b096de5eea9faba51cc96ed7eadac13ce3feaa3c83d326456205a3e4d7a651f42417b0760efb844666d57d9eb7a2b175cd4890a3b8f2440b5554

/data/data/com.appbyme.app310098/files/TDtcagent.db-shm

MD5 8bc8185be2162588b5962c9132f1ffc5
SHA1 65767d3a5fe4dba61bf052fb2584c174bb21e1ce
SHA256 dd818a5ddcec10dcf95ead817b6c155f2d735610fe16cbd719834d513c4e0e4e
SHA512 3aa7075a9ee72a4fbcbbeb5f4e52ffb842c4d50bc04417a877cc9d7b396f6d1d851e3faa1d77bb4c1f3578eb67bb8928892b63d70b664c73cef21508ea4cd094

/data/data/com.appbyme.app310098/database/pushinfo.db-journal

MD5 844a0e076f58c8b1e4bc9f042ff2c089
SHA1 7a974c3f8adcb9576460d4bae47b1dd48f57daa9
SHA256 ba29e746f3d6968db37c2cdfbb79a2e7dfc7264fe20522f595c66f9db8e7d668
SHA512 1c1639b7b73934e514b4fb763e33d93f976308479d148cf0db5bba0d2bdf1e69b13a88435e6a41ba153c4e8928b025486bb4ef9769e637b13b896b58d022317f

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 25b8716b986edeb6f2032178bf7307c7
SHA1 cfdfcfec79a5fdefdfcb168e128623cf956c6db2
SHA256 6db689a49ed94fdbe8fe332946c315f25e4afceb8280b5f8b60f7450d6130214
SHA512 6b42bf41d1e808006f09ae6bd4a4ca99c9b556cff0463a855441ca7ea0c25279c6b4425fb0f390bf1fa8de6cd03cab8eb6ba3bbea79beffcac42c995d9887787

/data/data/com.appbyme.app310098/database/pushinfo.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 b02fe810ece6cbeb3ab36581289af09c
SHA1 9d23b5eb37e483ca9addfebc48a97dfb92842f02
SHA256 1cbd3d7bcb5b950647bd1d5b19688d8b2eefc97e82c63e04955303d5d80aeeb7
SHA512 833310a44986d832436c5399405c54c1fef6d3081834553bb589562277a90261268010bb4b0c571dda24066d57030c634a6d91780e0c2d2d7e739f403f0f3378

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 b52590684892363efdc015388d4f4848
SHA1 6cdd3ac12cf5d601d49fc7a6c112078eff333318
SHA256 4a6e32b52bd9208cea71a4feee0c5fb7900d9218f75f2328a299a91935156dcb
SHA512 ee5a631ff0c14439b452ed86e1119553846499c5eee897866a49db18d67aef480d86a84ed3b23e652d0afbff67d26014df3a8e17c2c4b052617ad9baf32bd6ac

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 40e87d225619315891261e0a22478d4f
SHA1 224261ba16ead564ad901b772b02bbe2790d8bd7
SHA256 5dbc34af67c79bbf85e380a0490fa3863955a09ba4be703ed78ec439ce53c398
SHA512 230905890c0b39488d83c8949c7b9b929fde8b3a584ab02265c45bd9e45f3fd76ff37352de791faf0d2a05e113af2ce3dac0ecff5758bf0cbc6daeb81446479b

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 36cc1ba57730d92d23d2e01fe645dbc7
SHA1 19bd5139a160930207d28d14a0696429bd430e08
SHA256 21e47a313850d0db34612137ea701306cb64a5b412233eb9e5c274aed21c4b8c
SHA512 bdc6ee0df394f32b029b01b760d60df9cb4a023b87b5306198d589d1edce08e928bdf098e5b5f9991471bd1444b1512721ddccf68bda8d013b7c7e8d4cda066e

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 65e8e1bbd323c44f8949b46eb9657657
SHA1 9a81b0471576c2190491fa4aa469efdbcc82bdaf
SHA256 7cc60d8e29b2ddbde5e53ac42cee52afe6b40a8ed04a29965a6b046d025434ab
SHA512 05196fcfd1f9b2aca2774cd7e42472ba7bdfcdf7ef848b26b42169a342315780e726bc64ee41812475548d47fa6d534c71b838a78165a46ee39ed3f1e82ef450

/data/data/com.appbyme.app310098/files/libcuid.so

MD5 e54d71985664f2db31825158e1438406
SHA1 1d7a20ecbda148664db1ab35b629414037e3f5b7
SHA256 17b720814c8545dd50df90a28148a36f4e66eb103120cd21b6acb5fb6ffa39d6
SHA512 ad7a64862fca4594ee2aec7c364a1de2db0e3a6d03b5d6af6a1a385e092143e9e4c0ee6e8af903deaa2364e3529c992d47c36e6ad97c95390b416ce1189d11c8

/storage/emulated/0/backups/.SystemConfig/.cuid

MD5 59a83c16ace9d3acbe55015f8a751e69
SHA1 1e06df415951bd9e066a374d40dfde0e05b4e577
SHA256 eb993680ebfc1db3dd3946af4bc303697de75cf60c1f34474d05df1322deede4
SHA512 a85d1a4dbd0bb4d433189bfe87ab8a210b33e7f4e2091776e574f97803154d5d6251ab50867133f186d5abc5868db1143bc57e9db7b9e7e327083e7794633719

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 587f502b999f7f01c8eca2fe5ea6dbcb
SHA1 b90cab548a4df7cc0f9cc9f16730658b520cb524
SHA256 225d1fbd3046f69e6e3684ee57f54c11dcb3db69854f8fcd07aff1dc9c998969
SHA512 77a285d04d9026994ed638eecd66f1d36d51f1c6c0d7f995f68941a3dba012329c41b8958bd1308f8ee5ead043c1af326a10c799677c77b14f527030572135e5

/data/data/com.appbyme.app310098/files/TDtcagent.db

MD5 5119c978d69518bfdbe65bae8c996ed1
SHA1 da46932de2f779c1bdfd0cc27f685aa85b2d9371
SHA256 9bbad925f0f054fba657faf2ff4123d9638dcebbf787543424a2e36c7cb92184
SHA512 b5c93101dbc8a45261296b48683e393b16dc67a9d7c18a08478dafa8a18300aeebe541cfc06f55e94b4e68a259b48ef90fed1b3abd2285d224b16f49c8851dca

/data/data/com.appbyme.app310098/databases/dzForum.db-journal

MD5 19439d4f1e26a1470d838e37fde49708
SHA1 f5912d10eed141b62b6caf38f1304a37e94ef850
SHA256 b54dffb45b59312f0a47600dfe6907ccc8d7d5ca2939c3aa0ebeb14be6304eb0
SHA512 58cce7b3be3155257c009f2dc2bca3368f96c38e71160bce7f8c6990f9cd27da87eea1ed985511e2f360e08996e9d7357757fec5c6d0784fb1dc4490a4962039

/data/data/com.appbyme.app310098/databases/dzForum.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.appbyme.app310098/databases/dzForum.db-wal

MD5 473b4de3fd32b20ed0e6f0b010df9a45
SHA1 afa5e63bcf2a2e4c872eb565457c2a89f9273638
SHA256 9cc5deb20401144a8fc08f374f61ce4e911fcf6847c755864ae3c464c06e6540
SHA512 4cbbc0ae5a8020b03c87829b77c40dd1a0dd0e3ac9b1a3a009fd774328e7dc55bda36700edab226c6ac1d6b5c7e7e5efaa2ffded8ad5e231c82f293875818cc0

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 d2d15990f2f6539a39760dd6b315f849
SHA1 23dc320f56da831f9e18eae9a3c9ddd943abd237
SHA256 54f0f2eccf97147bb871a4c07f7204e9dafd3cfbc3252a57f0b928be0d0824f0
SHA512 78108a20ccda2ba66305999c0dcedd61b3fdf97997a15c1e3a5e19b9da50993491535112d82e05e06cf89075342fa3f475e303dc329ee8c921b99f468e116716

/data/data/com.appbyme.app310098/files/TDtcagent.db

MD5 0c57f8b45815438e2d2ba97445d95336
SHA1 04e4d9d480cd207d0c897222372881d448cf0d4e
SHA256 71de733d60408ab473e3ba2d329a662bd3affe83fb3625330d49d86aaad414b4
SHA512 f1870984d688b3a29d25fd60a03fc1163893110f95eff370f8dc544ba19b02ef2625414851fd6945c63a99460731770ea81f15f126100dd05cab27870c7fdb80

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 708e1e7eab08831ce5f991eb3118613f
SHA1 e298d866fea8f7b7f492e84b621526245fee64da
SHA256 20b7bdee8106eee31088ecc56de6da6044d0ceb50e113f2b3a742a25152ceaa0
SHA512 7a1851a89680f87b48b65618dcccdd0e32a9ac03db56fc9695625afac6ce7b4497b8e64446d0ecda3274ed228bf2ee28e6075d60dcf83a50c9e71bda1bbbe0d2

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 877ae6b308e666b3a17e02d38a789352
SHA1 42752c72e12e7df9cc7deddaa8a0116c2a4cfd27
SHA256 d296595348fc875c9c50602620421ca93fa199713700c5f6ea8e4e27d3cf1030
SHA512 9e45448b88b259eec92c67230c803ba9205d13d82a0f30af78e5972fad07b40bf91cb026390a1e3b111cb840c1e330e953bf338650af93b29c387b8c098711ee

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 1c2a3bc68acf5d05d01072459c458777
SHA1 001d26f1d6f7d2166581e15c447ec12355860144
SHA256 f4781b14efb84f2e808ef155a07f4c78446a4a14472827bd9a67c0cd2ff96415
SHA512 fad336e6c50f8f5bc8b815707f8b8e8f143aa0b6be8b396fa9699f049e7df656ae29c871bc705a318f9198cb48ff84a239c0c032797fa0e7eee03dd65201a7cc

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 7d871fcc246b107c27a2a1e5f225be2b
SHA1 51ec8bae22554801d79d2c7c8f9cb8ca80902864
SHA256 a35a11f5d1d11adb7fd29f9a6749cca464cdc40a98a99c6bd6dc11c688a5f532
SHA512 b40fb137af8d76e0dc2c0deea8698fba2e46f195fce5db575ba49b698bcf58ea42a4678a1a2182b8842d550a6da1fc2b9256c1a2f4f5c5a83d59f0ec5ec67d7e

/data/data/com.appbyme.app310098/databases/haveAd.db-journal

MD5 744fd402182a53513032c95dd8776caa
SHA1 c811f0bbbc0c847fe87d9bcf2f93ad36b40240ba
SHA256 1bcb1e4cb1d63b7427cbab29718dda87e8ec98b4ba540baceec977914c7c0297
SHA512 97e27f04d2f8c1f2440348929c3bf8b5730b589cadc593cce790365430f050dec5a45808b811c6476b5f9c05af0980300b269a4a80ae127524fe8f60765bbb77

/data/data/com.appbyme.app310098/databases/haveAd.db

MD5 351dd88162aa0f4ed878cf2071037259
SHA1 0df5c926f134f13f27154d46661a21d9ad87fd24
SHA256 ad9fddcb5e48fb5baa5bb6cc0b66bec7322f0231822fa997e38fb9abb8098978
SHA512 cc42052704ad9d61050c8aec9d0cd89e7b8c2437620bb28ce3a012cb66566f182099c25e2b9b572ffd23a7a8b6202dcec0ccf6f963dc6f387e8924cfa632e0ea

/data/data/com.appbyme.app310098/databases/haveAd.db-wal

MD5 000ee6ea651f4d3cff37a0c30c04cfcd
SHA1 0c8ec1e68bb1ebac7a7ebb0ec008d31b717609f4
SHA256 b957beceaaccf39445a09c7bb885cf56536aa6157b4ce03b0007635a0add0eb8
SHA512 2badffdf23ec998a88e96f29d47432c6080c71c6ba6b9f5a5cfc169765a41de32315a6de47b19d5e2e37c98deaffb289f40f0cc968d1b11a9e79320201d6b5a8

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 bcb1ba0d5d61fc505958e89d3dc48900
SHA1 d65c7070fb99ada60b89108b88f8d2dd6e673d43
SHA256 fd4679c38ae587e6f62882516db1b667ba6347b4d913d2a28ec723f6540bbbd8
SHA512 58c26cfb6db65120b9ca85a802b756a633bb682598dfeee32e986c909285a33c55624718e2178b5ffed47258a019cfd73369d94a86e33f1789e660411ea12610

/data/data/com.appbyme.app310098/database/pushinfo.db

MD5 47a2d2729771768be1bdf9e0a71bed93
SHA1 3fbd119b39a8f54604ca28da665cf4bc3cb92748
SHA256 997c7a874ce7a3cdd36f4c7cba03131a24e32eefdc0af33875f129cbc0f6af83
SHA512 03cc795eb8e2fd5a3864b5ca96f0a32899a7ed11a1d53552563136c528ea6cf445d02b00f99249ee0850d8b09b290f4c326bcc958684e5d77cb616a413bd2c29

/data/data/com.appbyme.app310098/databases/pushstat_5.5.0.db-journal

MD5 86c1ef1c6059761324f3e4e5ad3b471e
SHA1 75599b142c4f63d09f7d0c592564c9038e01383f
SHA256 f5104c47b68a8742107a04fc66ba63401f49f5569ae5891ae9a8573dde2333f0
SHA512 f3e08b3db43840ffdd45176ccf6664d147f46c2c0ff9e2ed3fbbc7dc7abff067dcd8b75c774032b23bb21dc70df9acfdd87ed97e6514e5c88a8f06008b56117c

/data/data/com.appbyme.app310098/databases/pushstat_5.5.0.db

MD5 7a7d51547e1245680cb072ca754e5a6c
SHA1 58b9063f73fdeb6086374c97e847424d251438a0
SHA256 82b6bcc427e41a5fb165175c4ac7c591237670bd1468b7856ecd820b0320cc00
SHA512 907384a504405f275d38017c59cdbbfe9746137b7d4ea1cda2930e74749efd80fb5b89e5cdc65910dde4ff1e47b09712e7c3520c3689a66ef6ab5400229550a9

/data/data/com.appbyme.app310098/databases/pushstat_5.5.0.db-wal

MD5 75c45824b0e8284368c8299e3422a7b0
SHA1 0c1e3ddbc59662b358556296dc1624fb1b5ba47c
SHA256 a689741af6911a884a8db7223f35e26192dd1a9802d81f36a884314ce8e09714
SHA512 7d991e045ee82f4fa38f38c15cd72fa61a86de26ee5283ce71549c391703cb23e10606f0cc01b00f0995ebf6c7d405bff22014c08fe5cce32a6a69d044f71bdf

/data/data/com.appbyme.app310098/databases/pushstat_5.5.0.db-wal

MD5 3d3b2383e9c3a0e0547842b97a3d63ac
SHA1 9bec49115b727dd1b3e1f66b8d7744362f965849
SHA256 0236bea513baef81f86437d69d4301bfae30e83abe0e6104bf94b28b5816ed9e
SHA512 fb627a7835d6a5222984e3214bf3f598d1fc98c74b9bd9a2ce24446efe5b99ebfc66a881f56b00432ef221e295ba0f9189c8692a3dc2330c19492cffa5849687

/data/data/com.appbyme.app310098/databases/pushstat_5.5.0.db

MD5 e6c3bbb83e32778bdc3260490ded06e8
SHA1 a1c0014487d4a748f1561c02a51fb3af5aeb63ab
SHA256 2b803042724e53efcae79406afadd66cdd17aef57ef7e8b43fb129fab4c1ccd4
SHA512 96aeea19fb571fd2313400bcdf124cc70d592d97dfde35842790ae137400ca83a5ecc5b01893764fd0e6ab9cbf95222d0ebe4a4caa373636a2042aefc2e97423

/data/data/com.appbyme.app310098/database/pushinfo.db-wal

MD5 42b9c28326839e9f82f7dbe3f0e74be8
SHA1 1e865abec823fc9b2146dbd63753f1c5e615f2ba
SHA256 5eddb9575cf9c6cdb68b2bf81fc104a4cfe34fc85818d928212ca42c054ae3ba
SHA512 fecd0486ea07f00a9a4b564a2cefd58e4f49c262b976c1b364379d64bb267954c4f9204044923b8c20e8141de5d05c5b7ba65fe8d1c117b5b9ce61770f634462

/data/data/com.appbyme.app310098/files/pili_qos_index.json

MD5 9157084951c5087fd573efd50d010039
SHA1 bffab6ca21b007ffd55d989c2d6e45d74d8cd663
SHA256 23de464673b600d7e9e0161f5a4e4540ce660a008648a38eec3e1edc84e9f1f4
SHA512 bab32f66a72dcfa5c3a2e20e7d16852a2bb9eb100c389d8c5c41677c27356bea24e0a776181b6f9b5547f2b46666f48dac763a8ce38c5d9eb1d1c5d7e9e5c6b7

/storage/emulated/0/baidu/tempdata/yoh.dat

MD5 f222e707dac732e6ad88c9e1e0516f7f
SHA1 8b12d4a53421da24b908c2ebc4116027f039678c
SHA256 68224900ee4a82cae9303483391e23069d053ab4de661e55434b8c7676b611aa
SHA512 2307ce75560be3bd728d102aea1450c5540b6666f1ce0505d4998ae5de2ee06b70781261b684de9892bde682e0a5fbaaa54ccfa40cba4e1edf1f6e3aac060747

/storage/emulated/0/baidu/tempdata/yoh.dat

MD5 23617be93679425a1f60b494b7bfa634
SHA1 5c4748bd6a0117fe3ccdb1ecb1fc5b4a74e34e5b
SHA256 cdb8216c20414011946e60bee34b9d4756e7c8e4d6039431164c6dc34fee8eb5
SHA512 fdaf24644462e24e12684893aa956e47844941cd338481111265f9ef5ec51f748ed18c97d1c1c1d292960e0836ad6cbda7f48bc54830842ddd4773de955f5a85

/data/data/com.appbyme.app310098/files/TDtcagent.db-wal

MD5 7bc10b78af9d690714c007995abc8cec
SHA1 0e2e79a9e6b110fff2aeebb4bf73bbd3cba7b5a5
SHA256 db6ceffa301f50883133633436ef279b94aec9f1166c5b87573abfc04a74c50b
SHA512 31b5ca8f18665ebcfc6739ee5ce2ebedac08d08aae15b4bea9d59fd0a2da2264c05cb68004e4b32995df13a973da268d116b6137ce32d5907661db1e60964ba2

/data/data/com.appbyme.app310098/files/TDtcagent.db

MD5 393242f9549219e96ffb38d985aec650
SHA1 1a994e4711755ec2e419576d5ac2c84a4626369e
SHA256 721b6c712df9d2405c80e9628e94af82006a446c8532c123582ebb6be9618b38
SHA512 d5326eea9fc1832b679b9a01b1fedd362c82b97007a2e04829f6a675b863613d9b616d48bc87a7bf55281566da34baba30885f842ecac5cf88a6ff3ea9f45953

/data/user/0/com.appbyme.app310098/cache/__report_impl1168452371040396388116412112300.jar

MD5 471c4c874572e338649e33dcd5a889ca
SHA1 dc3421ed346c8b68d9be7189e24d7d54ce0e368d
SHA256 cfa92b29313c366c895b35693921171b87f682f027628d03d155f0a7495c8389
SHA512 f2c6eaaef6b27748613c0de70125398226659eae7a02b1496117913d5f7826e236c91a94749bff863e57d1f6a406e7df252e74d59cdf289a267cab9391bd00e4

/data/user/0/com.appbyme.app310098/cache/__report_impl1168452371040396388116412112300.jar

MD5 5dd69cbc889b52848dd674e248a759a7
SHA1 40f8f71b6316939385ed49931facde98b9a96edf
SHA256 15be352c89955c8582c45f9cb38a2a63d07d21a7a342678fe92c4c7d339b456d
SHA512 129872e2e3ba80725cedaad44c908df87c059629c402d463de09280c71f4b1509b6629358ee52d7242711cb6bc7005175ba11c9938f2fe42b563a4855f91407e