Analysis

  • max time kernel
    146s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    04-10-2024 23:02

General

  • Target

    153da25c4b07c0dbaebed3fa601c9359_JaffaCakes118.apk

  • Size

    17.7MB

  • MD5

    153da25c4b07c0dbaebed3fa601c9359

  • SHA1

    9de26251ce4e4232642c8b4f2c41ac67cceaae9c

  • SHA256

    317c276c78024e063c00fd19ecb15c282680136a20c3ec1a7f822095db7f7924

  • SHA512

    a05f5234e56c35eb41ba78cee2b4960b2622a49700bef330f4dba8d682245603a58b9d05047965c5a0c3611f002ab28eaac87c583bfa6dc27960f5f9c98ea8af

  • SSDEEP

    393216:p0MsZb6Pq0aNrKhL0J0O9SdLjoVFYVkSoevrlrSY8nhw:p0l9KqVrKhL0J0O9o8VFY4sr/B

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks known Qemu files. 1 TTPs 1 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.eaglesoft.egmobile.activity
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4252
    • chmod 755 /data/user/0/com.eaglesoft.egmobile.activity/.jiagu/libjiagu.so
      2⤵
        PID:4277
      • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex --dex-file=/data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.eaglesoft.egmobile.activity/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
        2⤵
          PID:4400
        • sh -c ps
          2⤵
            PID:4423
          • ps
            2⤵
              PID:4423
          • com.eaglesoft.egmobile.activity:bdservice_v1
            1⤵
            • Loads dropped Dex/Jar
            • Queries information about running processes on the device
            • Queries information about active data network
            • Registers a broadcast receiver at runtime (usually for listening for system events)
            • Uses Crypto APIs (Might try to encrypt user data)
            PID:4331

          Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex

            Filesize

            5.8MB

            MD5

            15844208d3b9cf0db66c396404514df3

            SHA1

            ae214c6264d93448da17addffcf98fbe91434461

            SHA256

            48bdf5b3bf8d557636370d8d00318262d8631b44bf0aa2e5d06c86186d1f92e2

            SHA512

            98b2a6ca41914c71f25bfb3212a13cc9e8476275aa1e8aa53137fd696d7f3155c9be2c423cfa607eeb2510e09bf51886533ad62980fdeb0473bb5c0bbf1815b4

          • /data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex

            Filesize

            8.5MB

            MD5

            6e84a7c9fff499236e6d01a1e2a933a8

            SHA1

            344ab23c2592b638e0a62d0e5eecfedc90d78ee6

            SHA256

            a81447b26693c787135aa8340523cd99161dcddfd212a224b4c47815b86fa5c0

            SHA512

            ddc23af2b6fc2c7b87e32a6bb305d598a46f509c4ba495d557b5a19f89cb1266ba31a4f041462dbef15e58afbaf0f3a9be0f540ebddbf13583acf8d65454f9bb

          • /data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex!classes2.dex

            Filesize

            508KB

            MD5

            aaacb1fe795c9af9a549e7f9ff3e9a73

            SHA1

            f0cdd699fa05c7e675aaa9ea03e0fe76872828f3

            SHA256

            c1e70e00642b263d3130766e2b4f79e6e4a0746da4d660f9214218ce692f6de0

            SHA512

            a8dd8a12b2be556741b6b8789c27b1dacb77c1fa0b14c2e28273816a151c01586c3d258d30ea8943c273ed7153d336e3857a256e1d20b1efae5bb92eec1ff7e1

          • /data/data/com.eaglesoft.egmobile.activity/.jiagu/classes.dex!classes3.dex

            Filesize

            83KB

            MD5

            c4c33aa938a4acc25422972bd3889da2

            SHA1

            8f03c6ce06082ef5151e349d6a5b192af365453d

            SHA256

            970f4de256a3030f3a6ad45c5d2114f4407881c400c2bdb0048f9ceac73335f9

            SHA512

            c56fe8824ab07982fc43165d7e821dfa25169491fe490ebf9fd627a8cdcd6af5b0b05cf5be1a72d13d0eabc162de8f94be81415e5d54d91df9fe8fce0d0f71e6

          • /data/data/com.eaglesoft.egmobile.activity/.jiagu/libjiagu.so

            Filesize

            363KB

            MD5

            617fdad7ced202c5e49637efc1d4b245

            SHA1

            ec2ce0a7c1b3f6431ba0cdcd29d2779978216dca

            SHA256

            a9809621c33d6d337ca2695750d3340f0578b6743cf164a5b78f5b65e5b85fca

            SHA512

            bf25863e51409508283c0b15333d831a6da8e63b5365cd85f81ef185896925be9536a1ec5687f96e42ee810eb464ed85e267c30e0b5ec53f5710f91c7e109a74

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            24KB

            MD5

            7b1e93065f3b2d0ed4f74438208673f5

            SHA1

            2b5a7aaf876b7539c9287fcfcd270d4c3f38e091

            SHA256

            e192bf75f711639b8912888a5ceb11135ca2c605bb5e3a0a576aacb7de32791b

            SHA512

            2cda36fdd1132ed5b5bd67ec13388ac187d7be6369baff733bcfaa927152a0430ed7d1554ed71b09d9c2649003c51811e594989fa63fda29b6c62c8cea46db5e

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            20KB

            MD5

            a053a83166a7d051df8ebef7da0f78e7

            SHA1

            94f72253ca509e4b82781bd3a831b836c6a39428

            SHA256

            1d3030a44e1eb743583dd6987307e49dbd4d27bea24c8c9a018ce04a6dc3d5ee

            SHA512

            5a1ba07cfdebf9d301fe4df2af1d0218bb22664305489df3706c2925995b1e6f312176fd0ac04aaf1d6b0c301ed7acf79af0f0b209d811445073746e0f001ceb

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            16KB

            MD5

            d54dd3c5b5d7077f750326e4f6a9c818

            SHA1

            396bb3547ff9200f44e2b62108fa1eb6e561e05b

            SHA256

            79b1c04169fa6287153eeafe145056edeaeecf09c285b59a26c7b3f4f4b6f87e

            SHA512

            fc9f41e580596d7d516870f66445749624284aa3785f4e2bb1f494c7df9c6204ce6e4584702e54020292b48c47db294acef04f2a76f92fb9df360416fe41fa1f

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            16KB

            MD5

            ade0592b8aec5cd721ab275bf7264304

            SHA1

            4dc88a32d2981c7bfaa9fc3118688f853a1fc308

            SHA256

            aedcafba5fb05211939d3e1a996eeba86c63b0acb8151397e2d81a06831e11ff

            SHA512

            efed7e250671ec5b0002f6ded177a6dd43897de464dbb08c2f3e96db350b5f6c3eb048b1156d0f3fe71b7a1737e7ae0a20f318afa2dafe003c06d519ff655f7b

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            16KB

            MD5

            dd027f300a73a0e37768d73c692659e8

            SHA1

            4b932ce347a5ae17aa3c6a95b62e14a349a4fc28

            SHA256

            0d0356453a52889c0580c45e2c00355d5e95719c4ff3c9a0fb03eae37a25dc8b

            SHA512

            d96e335b955ede79f7b3284a413fdf052c94c5edf2024477a28a3332a3cc918faef80f3f86f8114cc279abf978bfca5bb2516b55c47022f28eb14b5ce73afe41

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db

            Filesize

            16KB

            MD5

            ec0ea3bd0b8761b4fb48084799355758

            SHA1

            ef843edac5e3f0d303ce5123f48dbb803b47bb05

            SHA256

            eacb27a3382f6ca68888d9e8a2855769e78941ca056fd034372dd59ef887771c

            SHA512

            36dbbedf9ee06a3e90086c164b93b03f4649f5a997c142f771e974cac94d38b436f0a77250cc6c1f846a709f8b28b4bbe7890ce7f6e0a1eb8906e20ff08ea4ab

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-journal

            Filesize

            8KB

            MD5

            a5860fb7302ded154a0aaa045ee6380d

            SHA1

            a6dd7519195b65b3148d915694cc7e7bbf3ea51e

            SHA256

            aebf04468da90e30a2b2a45a8de8a87b703c838d29f196bc4c7d233f9ceec2c2

            SHA512

            48e60c7f02acf60adbefc76428c83ceb8ed83b73d40aad5ba088da251897b84d392ca18c665fccbb591b35a798df4989fefe45c6eb96b4633e98d5c9abe461e1

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            32KB

            MD5

            2169cf043953fa5fda31e09fa1510f9f

            SHA1

            232371f9adb5db45f11dd0f21a9d733f6211d4ce

            SHA256

            0dab3e256f9806af8d8c1ee09047eb14c13b693cefeb50baa9e6ed99cd23cd25

            SHA512

            eab0b0371fb185ed5c788a7da528ef586f2d759b21ae22a0cb0cd2cfeba40bba4bc3dcc2bf6b85d3e4c803f118eef917d781f33bbc25cf4ec38d82d8b569fc0c

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            8KB

            MD5

            12a1c69e9e0a64278aee262072b6233b

            SHA1

            e8c4aed9c4cc4d87c51fdbaa3625bc4333271e05

            SHA256

            5097447b21be5e580debe9a24459494bb9d8919ace78bf2958087b73fb407afb

            SHA512

            ed985b26448f5a7e14ba27ddce7548e7d6cc137b58fd83c07e2b178a053365760f887df041d671a12491ae6f28ded6ff8185f2029834523c888fc357dd75500e

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            5e237660831a92b6cdee9a81790808cd

            SHA1

            2e6d9fd99163ff19bbd75654256384c6cb26af6e

            SHA256

            0ff1d5e5af7e5c349013956b64fdb2a25869468d3f7e6e79c12d7657bd297ff1

            SHA512

            549cd7c9797c23da08783151a7d44efd8257f7353c3fe7719aa7c395795f8712424b9a81aec58e84457195d6bff867793c6174621c91a5dd92c341bd45ba47ad

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            42ba58840c847568fb62b03744d238c1

            SHA1

            fe4cc7d0e3d856371fd927c22ae40344d7f39a1e

            SHA256

            94da015fc2f43a4b2ad8c94559f3365fe07e9667d82d370b31c61b248dd6c461

            SHA512

            2e1931270229e37ab986589a744c70b5bb7241b3650a6566b21826a2d1be8722b25e22ecb01ab9e59dca270f580388c72b54d9371526afefdc6b5fbf41975993

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            937f5f964a9d7d02924be2c07d18189f

            SHA1

            d4324cbd8589d83246b717c2c73d208ddfef4ab8

            SHA256

            6f3f8ce30fd7fb89ea2ba741ce17622f7ae9ade822e23e2bcf85d269429ef115

            SHA512

            ad2ddaaff927e052afeda305baf49e550ca20a4ecd42c8131ffbb22ab5cd671dc2c5e3a50d74753e05519b781c4125f37702c3b065e2d1aad87b132d0564605b

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            7193ae80435453fb5d954aff5a7ea436

            SHA1

            28da5852bcfee361198fa212c8cdcb64152df258

            SHA256

            246a6fd52070c340473632253396eafe87e493e0d180f4858f8506da331ec193

            SHA512

            f23ddeac35d787cf7692d69a60a47cb521930a4d01625393a171e0891419972556d4620caecc6e4b03df3d42b6b1af530d09b6130a6a6d86477e859ee1beb859

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            9d2701fbe7f222daf69294696348172c

            SHA1

            938593e7c7a548f99b930bb1dd37ca3e9b5d9e45

            SHA256

            f7abe463e4c1a3b66e08ee6a804c769a1869395a24bf31462c502a51bda8d889

            SHA512

            79cedeae8ff54ba56d2c7d322f1017f2c925c8733ac9c22abe89ccea9d384e4816a3ca03e3c0e20019d5ff27bcb33594028201fcf5c82c63f3593af079a752ca

          • /data/data/com.eaglesoft.egmobile.activity/database/pushinfo.db-wal

            Filesize

            4KB

            MD5

            5d15d4372658b5ec931770deb3cde97a

            SHA1

            46e8e682427eb669f40d8c4a5e88126534d83eff

            SHA256

            da6769e43caf4f18a2b91f478ec52f301fed846e3cd639b701b8785b9c6a4cef

            SHA512

            02cacd1be0c2ec99d7cdae53de4b1fb1090cf90e3e0a1b7a5a25110c710d0b20a2449e8eb03a101677f5e0166c8b5e3deb48feb97084361a90648d0421987a4c

          • /data/data/com.eaglesoft.egmobile.activity/databases/pushstat_5.3.0.db

            Filesize

            56KB

            MD5

            da45139b67b2dedf410e9edcbaed19a2

            SHA1

            b12f466391de9b25c4d58105468846dcdd774765

            SHA256

            16de53238ae015223f3089aeb2f28131fb7d620b01599d6b71294e069c54bb71

            SHA512

            4ac2d964915012edc71215fca1be4a25d34c42c0ccf5399d1354bd2d761b0bf5cd6675ec782154291f124795994600087bd851e5516032f374a5dc57a693f3cf

          • /data/data/com.eaglesoft.egmobile.activity/databases/pushstat_5.3.0.db

            Filesize

            44KB

            MD5

            a54689e5de9c1d48c3c03e3581c96e80

            SHA1

            2fc01368b5a82bc06a4deb55cb2a78e44a37e05a

            SHA256

            0039ec17b9acaf1230b1c1a3991de58c277bfc957c571741819491f9a1ef1f59

            SHA512

            b7b3b03dd29208b3d2597f5f594f5200401449f53ffb921a8658509a056fbf7ce12dc9b9994380e2b8e803da214001fa6e7b3e97f6a3258d0dbf02a274cb7e6a

          • /data/data/com.eaglesoft.egmobile.activity/databases/pushstat_5.3.0.db-journal

            Filesize

            512B

            MD5

            8ff0b472bfff4c895fdd84c9f7487fa4

            SHA1

            3c7fb7ba7aa5adaa68d955e58c80435c4efc7429

            SHA256

            07ca8dbc84fadc863c73e95f80825eb34c912e5831ca6f5b466ff59004a73681

            SHA512

            6bd3bbb3f83607dc3c56c437cc928b822b3735c100c629584c422ca7a4b69ba355c186383bbafbec0cba5a7b787ab9d5b77ca3626d56b05feeda16b2d28223d2

          • /data/data/com.eaglesoft.egmobile.activity/databases/pushstat_5.3.0.db-wal

            Filesize

            76KB

            MD5

            4d15c0105d95ef61e7b54593aacabd33

            SHA1

            1145df5075699b60bcd1a2d4ba6956c52428417c

            SHA256

            fe9449591b2698cdfafb8a94cc0f1c33d62ec93692096ad279d0dddf9e44c375

            SHA512

            9321910282343c30f89d89fa1d16c10c1dfbd0bf69fdce0441f1842c53b53c837b098ec64866365411a086f3d5ea9d952548baf554b0d485267260e764867f50

          • /data/data/com.eaglesoft.egmobile.activity/databases/pushstat_5.3.0.db-wal

            Filesize

            12KB

            MD5

            11736a79bc33d0a860dba27c9c13b00b

            SHA1

            15a83cd3349e9ccf76c3ada5d388074c4d23f68f

            SHA256

            be915a498566af18f2049de034fe75eb8ad5a87df3a8fc811f435c1cc1a11a69

            SHA512

            a6d3a94583790aba0b295f4e74c81301153610e3effcb03a5943e93a80407e18e3282e2385edaf4f344350b7c67d9a41266bf228a4fcae2b1c54774576ed3a0c

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.ac

            Filesize

            40B

            MD5

            38a14cb916335b47b007605ff38bdd2b

            SHA1

            ea563e4a40c547c618822fa1dbb1bccff0da8a80

            SHA256

            e18e61833a9e746fb3cf16bc470aed57f9d743f160e733185002e2c0ad17e75d

            SHA512

            d47c9eee65609157d7b40ca92860610fb7d5e7f0e1291fb0ba939ec864a18ceb9db6e1ba7a551b1284c2ef04b66229c3efca8c601dc5cb4ec19ae3d20226da94

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.ac

            Filesize

            4KB

            MD5

            654c12cf6d9256f487667f732a2ba35d

            SHA1

            4f0247065aacee5c3c17e79cf268de423ca6dbc3

            SHA256

            7a25448f18e511db5dcbdff9c97e07b95c7db48b9ba93f151394cef29b07623b

            SHA512

            89105c85f594c9a6049c628ae42f126d3b8c7f8a2f2f40b90dc66c89e14473aa3bc866788af8a0e85be4356d366d5e3c360ffdcfd4d7b071eff36bc2b2bf8ba9

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.di

            Filesize

            397B

            MD5

            0a9b24f76dd66ba6f0d9a616dc6789d6

            SHA1

            fdb73ea732c122c0d36e4d8e9743150bf9aff5b2

            SHA256

            7b50839f110b5730018a7da481344b39556454530a3ce34610922880634b76bb

            SHA512

            703cf4b44d1a8518f0ba1a79c9a89f94c66e3b03ba45426b3b05bb89cbf85fcad361007e6e52c522b53652ae1f4c0c65ff56b0a40cd371f535c193fc5407c01a

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.di

            Filesize

            340B

            MD5

            aedee04235f164502ae7689c20540c21

            SHA1

            c420b923c41261f805bd96d9918f9737baeabce3

            SHA256

            1f94aae9f950723dd695581f5b9b0b022a1498e86349a3fc73273986060fb213

            SHA512

            16b4789e5733fcc1bd55aeb8196bbb9ccd481e0a5fba3a04fa668a0fa702f85a1eedb27d8883e59dd11ef1c79673c3421f950d6c144571951646f59ec978c465

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.ic

            Filesize

            16KB

            MD5

            c4f56960a08c1534eca0110c84fb5d40

            SHA1

            c36014e972ff78312529e7491ed18443dd0ae333

            SHA256

            e71f78c648192f2192da9715ff5968f6d29c14817299bbbddf1e17c1e389581a

            SHA512

            8421a285657fbdd3516c9cdbfaf07533938415f613d4881e7e70bddb8112a22f9abac2c835b7585e8d44341ad738545bd83407db096f1c30288e3524618bf7ca

          • /data/data/com.eaglesoft.egmobile.activity/files/.jglogs/.jg.ri

            Filesize

            314B

            MD5

            bde04dd8583e87ad5ee8d9ee74c3586f

            SHA1

            0ea834817befb160a84052a9e56a5012451b23c2

            SHA256

            fbfd868127166fbf7bf1318c3bcc69578246b3c8c5c6b1cdd77b627dda216385

            SHA512

            caee64995234afa3a8c342da7dd89de747451d1f164fa7b5c8856f91758c0a7752958f4ff4deab130bf1a7d661224054c800c9caaef760e31d78fbccaea5ba24

          • /data/data/com.eaglesoft.egmobile.activity/files/.jiagu.lock

            Filesize

            218B

            MD5

            a44f6007d2b1a6dbea50fc427459f827

            SHA1

            8d7a1d9cd7abc866413dbfca8350cc85c78fd045

            SHA256

            90ac4769d6b8c29355f29d5f3f0401a75c1b8e782a7084a51531e5ecf5a3e60b

            SHA512

            f542e25e98995f56ebb7ad92a1de83095aadb3c84a7cadf5dd3f339e9e277fb4afeab13d65de302711ce756f058ba10984c3e4ecbbd87dde327ff7b1ebecb374

          • /data/data/com.eaglesoft.egmobile.activity/files/bdpush_modeconfig.json

            Filesize

            513B

            MD5

            0c95cad9c6a500c39059bba2a7a0cf42

            SHA1

            acf27900594d0f269b2362d1d20af0457be32e24

            SHA256

            f203768ae0e941b0ed41d698d8ddeabad3f3fc840e247b90007244c92a814cff

            SHA512

            bdc8c4a0c1032297a725981ac83fa9e358f508cf98bf509690760746d6b4c0b6adfa36d07c8be073ac1c8561ccdbd21064bd9dd88244087edb05ca9a3e8a9f02

          • /data/data/com.eaglesoft.egmobile.activity/files/libcuid.so

            Filesize

            129B

            MD5

            3c98a42860aba29becb829fd99bbc5c8

            SHA1

            75015611b1e7a093c5cfd244a23d6f1e2bf9a4cc

            SHA256

            05959c881119afcac36be9c171d6da9efaac52a01d1813ae11c1ba640a6376e1

            SHA512

            ceb229096fe5f382d5fec57be260c156d19f948fcc539101386b55dd0295a206709616e9788b0096ea7192f0f8cb96089a33830886c30ce77b06c2840e62f4ed

          • /storage/emulated/0/360/.deviceId

            Filesize

            429B

            MD5

            8aa9b3a0cf0292f779657f628e62192d

            SHA1

            0056a1742e565cac573648f2c26f9e589ba17753

            SHA256

            fcc686b417fc9bba3b44c0129ee87696ff0a2386091eb00deb327ec3d5791c6b

            SHA512

            914c288fda0ed0cff6e27ea7395f50beb9a52a206a0fcc6ebe2ffd1dca399e45cbb24fb2b65da4b6dc3c5c7435444c14d4dd83757c8ef3f9ba5f756e002720af

          • /storage/emulated/0/360/.iddata

            Filesize

            87B

            MD5

            8389e2203cfc3c75767902847380ab44

            SHA1

            78c8b9eb00d47557cefd8818cfd7c8c8b5c024d9

            SHA256

            b10614aeae27819365804648ed6efd22cb602bc514045ae3fffac863c2751e79

            SHA512

            6e98765e93e6f6b89461e51d82361b4fc788f7899c71281779e5f4a4d56a98066a709478efa049d663d6ff99f67c576ff0c9d42ce99a5bdfdbb794d327c83703

          • /storage/emulated/0/backups/.SystemConfig/.cuid2

            Filesize

            131B

            MD5

            fd73fe53b1e9127f2ebc8bd19ad2321d

            SHA1

            0a8981ffad40c086717bbeb2a3cae470e01309eb

            SHA256

            169cbac704ab68e960398d4489ed738b702214722c48f14ef07b55e6d2a5c1d8

            SHA512

            8a8424a8779bb9efc1667404ec0a911946ef2536f48b6f37bbe84bd58d69430bbf140a5ab5b715451655d1bd7b26cfe7c42c3a615d111c1aa8f6588821a0c09d

          • /storage/emulated/0/baidu/pushservice/files/.info

            Filesize

            89B

            MD5

            a8567b7a7b67787961573bf77d7b17fc

            SHA1

            ef368977bcf9bd5ece86f85e7e470ddb065bcd86

            SHA256

            0bf06a75091da1f6b7a06f9e3b7deb64487ac57a2368b4f3349e07b650753478

            SHA512

            1b65acfbdabd3a34d52806d8386ab90990343e070472adfc60cd9d0ca8752a9117f49f6c0c120f97da59e5a8edb2d6cda26dbdcc8ba2132112db49ef1f41c0a5

          • /storage/emulated/0/baidu/pushservice/files/msg20241004.log

            Filesize

            80B

            MD5

            c08b815935a17d68ec283b6fa31743bd

            SHA1

            7c34972df6477efb19386dc0f81aae27daa1b160

            SHA256

            959ef3e5a5b2cada94f8e0d93daea2c23e7a1fb5718f7332d9aa4d6859719b55

            SHA512

            96d9cba4ac1194ef8dcd242e7be563abe2c5b89d1ce367384eeec4c069a4b647514b1225a1139f974e7734a3d39e2b14852a07cd9b572bab931b8a3bef8c8a58

          • /storage/emulated/0/baidu/pushservice/files/msg20241004.log

            Filesize

            62B

            MD5

            08d1ca830a2881bd7bb1c4ce16a75210

            SHA1

            45bae062ebf757f28f5f87f29437af089a82c31f

            SHA256

            b724e164da5c4aa4db36390eac1551d34e7f6cea11cffbbf126987dd9fd56d6f

            SHA512

            d2b8b5dbd3e3678f41fe93d9e2a07d36180c6bca152ef7ef6748e369fd7a4385ba3fc88fc6c795745a69493c1213035e204eae8a4c0c6ac496a2a813ebfe2e5f

          • /storage/emulated/0/baidu/pushservice/files/msg20241004.log

            Filesize

            122B

            MD5

            1316ec69c9074c29b5faaed8fdcad497

            SHA1

            6996481ce4276838187b3ab071e5590f05cb6c92

            SHA256

            7bcf77fa17c5cf7e1d3b7b67234fc6369ab6bae684fccd76f703c884896c6c3e

            SHA512

            eb1164dad514a087e09c70648853a6e95b7b364a5a2375f9cf62e986eb24b244b0431f51339733bb2e8dc44bf4e9752b8611b0c6a8089c1204f646fda6d4ec5f

          • /storage/emulated/0/baidu/pushservice/files/msg20241004.log

            Filesize

            92B

            MD5

            b287f9a04eba6090bec434f650999005

            SHA1

            8aef9781ff808603ab49daaade5025f59c48fbe3

            SHA256

            5ee9b6fa38f7ec200b867a75363635dddce64fa6d11fa17f48e4062a804cd929

            SHA512

            24109d705cffbeec454bc9b84e013ce030b2fa4ea9ff55c6e83ee09da3c6e60838310f3b288d74c888271e8286c493e16bb0ded4b296002a2fc8fe81ddf41ebf

          • /storage/emulated/0/baidu/pushservice/files/msg20241004.log

            Filesize

            240B

            MD5

            46989efa9e10af731b4ecd38d0bf1935

            SHA1

            217caff82d239f0bb8ef1b459a405c5907d7a811

            SHA256

            d312e75b8567a885a908c1d11b472198526ee803a7d5d46bad9298afd09cc819

            SHA512

            b685c079f4c0474509396d8da1347e23583959fe0e08d7479441bb4a78948333d6ce3f20c4e2f13d8bd7538b0d46adc61c9ae41259cc0a330b6940dfe7f49da4