6f356d9a7877e5e63132e6038abc25806b2249cfe3271c2dc5bcef46b7b30b0d

Analysis

max time kernel
178s
max time network
165s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
26-07-2024 20:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

758f7a76b09c26ef3a0dd7c682179c80_JaffaCakes118.apk
Size

26.2MB
MD5

758f7a76b09c26ef3a0dd7c682179c80
SHA1

a9df70d4566158e8c54ebc35de74fe0851960fbd
SHA256

6f356d9a7877e5e63132e6038abc25806b2249cfe3271c2dc5bcef46b7b30b0d
SHA512

81f71f0bad2934cbab47523d695561be3d426ca7c87fb1e33e47b0329d5ed8cb90e1e716cfc3ab6c31f697a60dff88642d46a0558a473e0b90099ce82a04a7ee
SSDEEP

786432:KT4QnDonoyUmsiRw4in3nUuQj6KixRuwdwBG9bWOarxC7e8Etl:KMQnDonoyUL3nUDj6Kiewu

Score

8^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs
evasion

System Information Discovery
T1426

Processes:

com.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf

ioc process

/system/bin/su com.vzbg.yoj.aryqf:pushcore
/system/bin/su com.vzbg.yoj.aryqf:pushcore
/system/bin/su com.vzbg.yoj.aryqf

ioc	process
/system/bin/su	com.vzbg.yoj.aryqf:pushcore
/system/bin/su	com.vzbg.yoj.aryqf:pushcore
/system/bin/su	com.vzbg.yoj.aryqf

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.vzbg.yoj.aryqfcom.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf:pushcore

ioc	pid	process
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex	4320	com.vzbg.yoj.aryqf
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes2.dex	4320	com.vzbg.yoj.aryqf
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes3.dex	4320	com.vzbg.yoj.aryqf
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex	4459	com.vzbg.yoj.aryqf:pushcore
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes2.dex	4459	com.vzbg.yoj.aryqf:pushcore
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes3.dex	4459	com.vzbg.yoj.aryqf:pushcore
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex	4851	com.vzbg.yoj.aryqf:pushcore
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes2.dex	4851	com.vzbg.yoj.aryqf:pushcore
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes3.dex	4851	com.vzbg.yoj.aryqf:pushcore

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.vzbg.yoj.aryqf

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.vzbg.yoj.aryqf

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.vzbg.yoj.aryqf

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.vzbg.yoj.aryqfcom.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf:pushcore

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vzbg.yoj.aryqf
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vzbg.yoj.aryqf:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vzbg.yoj.aryqf:pushcore

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.vzbg.yoj.aryqfcom.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf:pushcore

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vzbg.yoj.aryqf
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vzbg.yoj.aryqf:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vzbg.yoj.aryqf:pushcore

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.vzbg.yoj.aryqf:pushcore

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.vzbg.yoj.aryqf:pushcore

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.vzbg.yoj.aryqf:pushcore

Checks CPU information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.vzbg.yoj.aryqfcom.vzbg.yoj.aryqf:pushcorecom.vzbg.yoj.aryqf:pushcore

description	ioc	process
File opened for read	/proc/cpuinfo	com.vzbg.yoj.aryqf
File opened for read	/proc/cpuinfo	com.vzbg.yoj.aryqf:pushcore
File opened for read	/proc/cpuinfo	com.vzbg.yoj.aryqf:pushcore

Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.vzbg.yoj.aryqf

description ioc process

File opened for read /proc/meminfo com.vzbg.yoj.aryqf

description	ioc	process
File opened for read	/proc/meminfo	com.vzbg.yoj.aryqf

com.vzbg.yoj.aryqf
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4320

com.vzbg.yoj.aryqf:pushcore
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4459

com.vzbg.yoj.aryqf:pushcore
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Checks CPU information
PID:4851

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.vzbg.yoj.aryqf/.oabugaij/.fsgkea

Filesize
1B

MD5
01abfc750a0c942167651c40d088531d

SHA1
d08f88df745fa7950b104e4a707a31cfce7b5841

SHA256
334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b

SHA512
d369286ac86b60fa920f6464d26becacd9f4c8bd885b783407cdcaa74fafd45a8b56b364b63f6256c3ceef26278a1c7799d4243a8149b5ede5ce1d890b5c7236

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex

Filesize
5.8MB

MD5
9d86b3d04f83e7f8ee18249772ac8ad6

SHA1
80cca5732582f4cfbf956214ea59ef894931f1b8

SHA256
e65ca167b2ad880e0fb5d58aea7efd191b9edfdc39cdf0b038e26301b6b7dbfa

SHA512
385f1b27306e87357a0e1ab0b9cc2ed46a847902eea999b1a5b14bd0ccaf025d9dd384371b17646f0aa33cbeb84f37bf6f6158a645229212ec6f26a687dcade4

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes2.dex

Filesize
6.7MB

MD5
46d5943e04ee8609304c1fda220207fc

SHA1
60b8181ef9d0ccb551b7975f7c98ca0ef93fa6ec

SHA256
f4b7ab4d96e1c9f38f4eba68d1640f530f3b2619b701c93d0cb74bb1d0cb82a3

SHA512
5ef6b0db7c1da576f2e384ff142574c7974b03a97425c6757f930f017d9b5e723721b65ac1da59af4a6452cfcaaf8f5bff2f11faf96c1dfca6e94bebf34f1e02

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/classes.dex!classes3.dex

Filesize
5.2MB

MD5
ba1eff4a6a5a42d06569a1f86f0abfdf

SHA1
97f2024618d8c28c2d3fc813a306ff5c83a64edf

SHA256
fc4778f096ec08e68feff1245f59b58f34d54b055dd98d3c3aa8f8cb56fedd64

SHA512
e6ff219b99bc878bfb8a49d9373004ea0ca9c25f75b4ccfcf9ca9e5fc9f563bef3539d49f0ce5e2253be9b991139b64937d69e7f948b12f0dae628d4f73dc62e

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/libjiagu.so

Filesize
495KB

MD5
de685970891708f6edfd18f03c6557ba

SHA1
ac50f88327652a72df73d43e9260faf169283c34

SHA256
b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e

SHA512
cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/.jiagu/libjiagu_64.so

Filesize
526KB

MD5
605d22ebf8e041341fc8b5ec4df3f0c5

SHA1
b9d638aad299289fdb58c643839e475b6c19bfca

SHA256
e44321aae2b4e0286a623c487d2466a88668c5d854f80b4c495b45f039cb3231

SHA512
e58bca95e818e008e007268397f007de23f379ef0e3e9a9c62dc3363e7f54fb724787306ac80e8cff255d759a4ac3d00afbcf0a006df9efdfd011009ee934cdc

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/4d1398af9314018efd7ef98f7c7f6ff89648d3951966e39748ac27d8f83446b3.0.tmp

Filesize
6KB

MD5
1c98eb65c4ded4852bc2c52e2d79f125

SHA1
998487b46486daf6d4e392234a89b8edc1c8ebe4

SHA256
752cb9da5d9485701af4ed9a9177d6b6c7d1a957a3765dab43c166df959bf4b8

SHA512
feec47495ba3c5f61a6f07886c499155cfd6345973c1a9da52624b14bd0fb2c2741b4563a0e45f45b315f2e95de71afd30b5fea2aa70275ec159bdcbe085b42c

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/585c7d9d1fc13da175490cd6a2c72e9087ff3e8aa9c1ea69e074d48719e7b9d3.0.tmp

Filesize
10KB

MD5
8897fb779fbcabf23785887c9a1edb09

SHA1
a3e17048088c40a83332029a697d570db293d42d

SHA256
94a28ba2bc6b34f3e9c6bfef77c930e91572e8302258873757ad0cf17d1916d1

SHA512
f03cc494046f2057455cd87143a64c54cdd78dfeeece31e2b0f4c73b71f2c90353e776fff22f8ad1d74ed667f6b30642dec9c99781448c6c9ec84ff5d4906310

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/6f00125f36ce0c76adff678ea96ab19313a3a138c931e282f4cc611ee9ab0982.0.tmp

Filesize
6KB

MD5
e20e58a411fd78aeec62ca3ec3b5ce85

SHA1
4342cab2afe88dba84471a2c635de1b4d30316c1

SHA256
b95b6b9f81381a66b263bc6d0a366badc1782736e1f880530ff47e1bc92e62c7

SHA512
e5447b2c0cae35e32652d14e600d2f8f73b639c997c0d046a50cf9f15b0d973bad98b9ed8067031b31f13102c6166c69f45df24e5f0b97fdee8acfdbbe6d2f55

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/944e7977a8248f46676fe553c9df708a96cb171065282e264e90e5d9320ab54e.0.tmp

Filesize
8KB

MD5
4d5ee08abbe29a3a4761a6e9ce7f1ab6

SHA1
e363ed3e0e336680598d8fb222874dcc57a4196b

SHA256
973cfbaec3068f80792daf0bb2640ddba559918d880c0bf7f03f1786406d4812

SHA512
73b40b8f593834aed7d2a62070fa98348509269160116fac84ebcf9f8e14d26e64be976343ec0aadd68a702a7b7be84d39a28ad6214f42da9e5589f5884344a3

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/fe6255ee5bb51a79cbf91b7b0ef2b551b525415826014a8fc040a1cda2af2d64.0.tmp

Filesize
7KB

MD5
2b53f9cf86335c0c8f49a658ccf614a8

SHA1
26db74c4073e4d6ee4e0b6c64484769d6cc43863

SHA256
71bb75509f02a5686812d78985457d16d3f6dd19cd4c54ec84a8164fa23357c7

SHA512
b2d7d3a0e3cb672da31ded829c43cb4d713f9fbf18290833e5a9267a880df77d281eff4bd944b0d6253f8ec7b7a3848a9fe2c53bcbd392707795f80f852e2064

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/journal

Filesize
767B

MD5
6fc6026b9a05b8a2b1628ebdf2db0f0d

SHA1
4b62cc17e04a6b06a2ebb66d7d1125eef68d82cb

SHA256
c3a8e3d681d5c0f302d33ac127c0f2cb7655a2386aead369815c45307e51eb05

SHA512
7dcc1d88e1f32eedfdd97e778a4a14a19767d06c654de12fe053c76ed49189a527745a1d8afc20c9f1dcd6727b6ceb126421e0de63882718453a4b7e309d07fd

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db

Filesize
28KB

MD5
321cca6a9cfb3d1d6755d25c4cd3e32a

SHA1
6920574274f27b40bb297f5f1a55af5f6d0329dc

SHA256
0174e53edc83c66e35327ebf174352d1edc432f6a133a47bb07b11718dafa347

SHA512
1ef30ead554da9e8c160ea056b2c8358efab19d7749ff31dae4a7c53f744bd4215bd0663f28380ee6c1484518e983a001a0af5273f52869c31192b327d26e957

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db-journal

Filesize
40KB

MD5
70c25c1eddfc5f86cf2b4d9e6ed9f1fc

SHA1
577f3e77fd0cb710fea921696fdd06cf23a4a462

SHA256
9df6c3dd72c17b2d5138b014de834e5b9106367faabf7e65a075a76ce5e4fb35

SHA512
45c64cc05d1097b17d05a7ab91a8836de57cacc21f1c4fbe834dc4ab6654d910d4871c1b67fa494d11bb539fd752d479eabd02ad07914e16956e3160e9e25e28

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
005bfc8162557acccb60e65a5202845a

SHA1
8fa338fb95285098968496b86f08b6a6cfa9fc9d

SHA256
6cc024cd44e4fa208941602ba532ef4bbc68abe051f0eea587cf03eb322ec44f

SHA512
b886d3020a19298b43c7adf779bbe266d4b5204a82ddde6b286dd7af06a08bef034bea9657f34b577d7eabf3fdc8991c74da27884e95654c0c980b3900591a5c

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
0e40ca61046b848bf0a3cc6f157ce20a

SHA1
b7e6fa957bff4a0cf82cc73a34443830c799d3fd

SHA256
99cb68a51b13db449038e43e7dff194672fe3f789d5275500c82fcf3203765cb

SHA512
4e3d383a76752cd1b29ba329f1c7f54e1331423fa60d2a644b41fbee86d76c6c2403802111caa05628a557753aaf9222d6001e662ef5b187fac01e4444741963

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
d6f20e0a53260e48705a08cf57f82493

SHA1
1c76af7a985d44097bacdad6dfab91088af657c6

SHA256
de204f1dcf8efb93b408e15427e86a9787db732d0536d30dc81e211684fd69d2

SHA512
a431ba812c0636058d78326d6749a4ce69da4c9db52ff80c5242e7ab43ceb72063d50d91abea58d446fa6a5f9696cca95a59a6638ad33704d222bb16a85da610

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
3bd52a2224e7587870336cbc63d0082c

SHA1
2c01d279db1e5ca0fe93c7521236476b8b2a1580

SHA256
164c024280e8170b231c2ee366f4a0acd3ccce31faeb1badedb0176299b3e393

SHA512
190dcc829b1f43ea9d14e9a81288aa9951bc179c9efb668080ea56ff4ad1562463d10a7230c7832840773903f4530247945142e87131ede407b4b00d891214ef

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/pri_tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
512B

MD5
724cc2abcd8c1ee079a5d267b9a57f5b

SHA1
db346710a7dc4b6e580bbf70c1118c3945d68c27

SHA256
801d4360c82c062ddf4937749fff397268ff3ff668a472c3c615b4997442d719

SHA512
6d80f5a52fa1192cb535ba3c66aeac5453537db952718d05cc6cd5915cb9a5c2dacefab88d20d26173737016e5805b4db820d8302ca3a9c753057d8756ae8ecc

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/pri_tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
8KB

MD5
e09e02bf1ffc734dcc21187ead297f5f

SHA1
fe2e9ff97731031458409acc9d5cbb6c6c096d15

SHA256
1a1a3cb2a29c613b084c16846086f4ce31dd8b6690b22340bd55ab92da19e5ff

SHA512
81c11f2bc13fd915d2fcae7e244f0b9e88519645980f7269809ff66afd5995ff122263d5865db9851b063e6af9fdb0b6b106c22a363d3ddd74fdf87aadf8e9b6

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/pri_tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
8KB

MD5
32d83a95e3afe9fd5717acabf604e962

SHA1
72098cd3e7f3b5a6db5e0c2dba8a0adbbc43adae

SHA256
aa6a5ef5a15597072f6d2ddc201c145843352e5b8ff93234b6d875d851054c11

SHA512
2bc25db97e7f91b3a07ff688e232305f93853b922881b8f0822ac60b63138cdb9b849e01a02ce222f900ff4f3cc9114df18ac98d167cd417353389a25ab771b6

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/pri_tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
12KB

MD5
271e8055fd17a3260285781d387288b5

SHA1
60a7c9aa5fc0d2e66637daa10cb5d4e1acb35e08

SHA256
2d363d641486adb15627e850b8298cab356ced80bb32c76240ce99fb4fdd7f04

SHA512
92833387c7124bd347f16a4332f3cb00d9b15c792c77f9281da19995037d624febcb108cf91bc406f2800d24589c81c0f4c93dbcaa8d2550a39ab646f00b006f

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/pri_tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
8KB

MD5
9f01672f24f2b03ebf1ee4cbbe4d951a

SHA1
f2fe508ff936ec73aa9a047af9a14b5f02553176

SHA256
14ecc9946b9cbdbe3525726c1f250dcb17fd4b96a8d7e9e76ab3310bd25188eb

SHA512
24a6266e097c31b94486bbf692b8fc7a90749a7d83c29dc09ccb445f605a09b90b4321bbc19c95c3d8a35def4bec1e2ef13be29a0577f6b46d85a9c6550cd9ca

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf

Filesize
40KB

MD5
6f7eef36b0ab752c3f9939f78f420dcc

SHA1
7ba0a280f0d7cbedfe69314e68f1be2fa1fcd654

SHA256
fc42cf492ccaf5ff6176beebaec782063b28fd3dd89ec74cee9605c95db255a6

SHA512
c27d9df6d5daa82ff540d20d1a1bcbbe885f0284fd2cadd034a33b54f86dab16e04b99cdc17dfa48f0a08a8fffa81d72da9555d4b7468c3f551edf1d6005979f

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
12KB

MD5
1176a274a1c3ea4787b224ee0d2f3f2f

SHA1
99af011fb89ced8bcf81ab02b6cbc5558f233d62

SHA256
f91cf24dde988195f0ea0dc85d924d28b7a85d4f499376e9a9af6e3cd6b82fe7

SHA512
eed592c3cc080f9289f3e1c4c063f26b6a2be54cae608443f56b6a7a475781c5a6cf08a5715001ff546b62c2c8bc9a6050b0689443eb46313d2fd97b310a14c3

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
12KB

MD5
9224d7b478ee459186a830f395f6a14b

SHA1
bb74b104675265c5524fd3f69bad1d51b7641b46

SHA256
d0922bcdbf5f8301dd26bb6e4a28c986abb32e2eec4b4b698a1a1b5cf11ab832

SHA512
eba3af59f18eda0d23b1b452473ce3dabd2ed8db01949316971f3bc9130776cb0b6cb193a116813b189e5c3c00aa5d7b88ae5859d86617e6ecff0a79647292b5

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
8KB

MD5
1722893c49ab95c9bde60aa80aea1a6e

SHA1
6287e6954d6e08cc27af16d4e321d61d99e4ae8d

SHA256
ebc82e4da77ea95d4e3b5f7c77df9ae8581879d1e61ac70ab2bcb35bd587e343

SHA512
b095fce86e6da2b8fdb07726643e37f279afae91369117b7be71a8785b71b2ab721a198eb0ebf43e6610a21fc2f2e82c02df44aaaa40438d73fa33fff694086a

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
12KB

MD5
45f36f9a19d0b5257f4163d01399fa8f

SHA1
509bdf9fb317ce8b3d0a613f373ae9d412f3e933

SHA256
ef54c7065bd8099847baebaf8fd66fc0d7054da341991e655a9cd8bc1bddf25c

SHA512
2eeab272c01692fb37a22b266e8c85b1e5dd407e81d490d98f2568d3028b3ad46829d0cb5cbf602d0be7d3d3b6141e390f86dddc1655c23cebb84f6ca911a195

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
8KB

MD5
967b0a05634bf99a0d755fea0a6a9dd4

SHA1
04290fb6d33cc11010a39573b815ab0893df6bac

SHA256
828804ef19f881a1350907a494b41e69ef25940f1ec1fe53ae6fb62db683d2c4

SHA512
b8841a955943c11b51c870476ec227054b3ec9bd6413edaedcc846347cd7745f463d32062f84d18df676bd372237819123595e8c55171ea5881ea4cd2f7cd9a6

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf-journal

Filesize
12KB

MD5
b6ab313bdb2209a5e477d1e023b52c71

SHA1
e1346c5cc159f72877690cf4b657dfb6bb0393d7

SHA256
d0102a8debb4412f02fb4428f3f56708086eead9265249e5026664052541b6e4

SHA512
5ff7df17449707da686553977a3b44242ad64f062831cc45b2624bd3e365ec31ceb5a11d5ae0d9dbc0d5165a3e08be5b56f0b5d5c3725e249491a0d5354c0813

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/databases/tencent_analysis.db_com.vzbg.yoj.aryqf:pushcore-journal

Filesize
12KB

MD5
8d91c3c5e10d74e277f9541121c2cf56

SHA1
650795aeab6d506707ad34fde56df87fc42e0086

SHA256
0429ae8daf0a2f392ad82d13a200ebe28d3aec1a2729f4985d0e36369509a2ef

SHA512
79fb88a7674d1f63b19a6275db712cac7cfa2359d804c69c11fc89d7c024aeb5705836fa0ec3ae1c668e6bea8bafa3042f3faa8325260d9383af7f3ef8fd513e

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.ac

Filesize
8KB

MD5
a5e3fbbef3890f99a549640cc3b30887

SHA1
69d2e78715e9e6d27af71e7361798c9f52c22cb1

SHA256
221a857faf4e3c2a4c97a927cb5e3ad2e59d94f9f79213956b2fa123e0c02c00

SHA512
76cf64bcb1a2654e1c26a7812ea5369d2396fa52bdbf931964002ae58317a225fb11daf2d8639c7019ae669c801129444bcbc0f54c67bdfba8d9d368827f59ff

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.ic

Filesize
8KB

MD5
574f86bc3d3f89648c5b9e871b25d64c

SHA1
9ab492c6087dbc9b689f0300b90ab832034cb6bc

SHA256
444083c1af1f997e293ec0483863b6d00f5740d2c2e6a03b67c3d19c9db83089

SHA512
e92f8c718f7253bef3af7136e386462096f98958ec2a1531af82d5debb86722e0841bff08c733593cb1fccc23bda4039f30e3dfe897d84a3bc9c7210ced813a3

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.rd

Filesize
40KB

MD5
6a67d47dc24de2bf96e952f2f7643116

SHA1
102b7bd4198cb88340395395cde525887139f672

SHA256
6149499eb8912c2bcc437d54f046b8f92b8535313334a8513903407f8e49963b

SHA512
a86d0c7a29ab7bb99e548446c4748c11de596381a963eac340cb04252e94a533650489151e4bfec49ac107d4e37853a86d3ed8bb062c9021a6d44d00b57ccc83

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.ri

Filesize
12KB

MD5
af786c8d2ddc6f9d09d2ec721cc79b9e

SHA1
e8681dda7894b76e750f592ee817a1d0190a9145

SHA256
923f79f116fe4787c9827b511544d8db7feb84ffa7d451714664793f791ecf9e

SHA512
f6f3af37bd9140217eb0998fa7640388f1962f786de6830c094c62e2629ad1bb2f03560bfdbcc4981f92eb70a0de71f6b779436f2d001934bb22a59f9ffb02bf

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.ri

Filesize
8KB

MD5
c740790a2dee80cac8899520ca990e47

SHA1
e0ccd8c61d9927f0aa4c6b580dee03cbd890d127

SHA256
5924c21e37128b676133c741ccfcec0730c23747c878072366fbc46c6b13a993

SHA512
64aec660aaff84dabdb34e2357f0d6e0d822ab28ddac95e2181b93f830cb5337efdda33bdac02259325492b9cb22111d0337ec8a23d2e397b21c35835b9fef54

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jglogs/.jg.store.report_pid

Filesize
8KB

MD5
74ac8c10c0db1a9669592a26507286ae

SHA1
a6158dc872acc17874a57c4acc777c576bbdf24e

SHA256
1610c5587bd979ef0fa91eaa9ec4707d80c7111971d7fa5df29e72e2e2cad264

SHA512
0cb2854f4e9c0d3ee455fadbaa64b83dacfc4788d40702d39c19bc1e41d5cf18057a2f929cfad1c7d5ab2168f90093877eac4978da8412d9b4908aa309adad02

Download Submit
/data/user/0/com.vzbg.yoj.aryqf/files/.jiagu.lock

Filesize
20KB

MD5
92f605c0c072e4787230fd3d30306239

SHA1
9e2a6348c5b0c3a3f6ea3fee5ee6eaed5823cbed

SHA256
2cb2f9773e63ae1cc879549680c1bd6a1b957202763a7623fbe4733bd890f848

SHA512
5481d544d13d0aa03cc20f5d868b6c6a0f1ce34308e59009e40ec0313dc302e2f90ee4dfdd31838f2a56ef66ce21c59f1b88fcd9719b440272263843f60e1eff

Download Submit