Malware Analysis Report

2025-06-15 23:14

Sample ID 241103-csjb1svmfj
Target 892896e8c9e68db8535e0a16b97341c1_JaffaCakes118
SHA256 dafd260c362bc72f1aaaa4abb627cabe86a0f0729fb5a23da3edc484539c88ab
Tags
banker discovery evasion persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

dafd260c362bc72f1aaaa4abb627cabe86a0f0729fb5a23da3edc484539c88ab

Threat Level: Likely malicious

The file 892896e8c9e68db8535e0a16b97341c1_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Declares services with permission to bind to the system

Requests dangerous framework permissions

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-03 02:20

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-03 02:20

Reported

2024-11-03 02:22

Platform

android-x86-arm-20240624-en

Max time kernel

125s

Max time network

150s

Command Line

com.yingyonghui.market

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.yingyonghui.market

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 1.1.1.1:53 oc.umeng.com udp
CN 59.82.23.79:80 oc.umeng.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 mobile.appchina.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
US 1.1.1.1:53 oc.umeng.co udp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp

Files

/data/data/com.yingyonghui.market/databases/downloads.db-journal

MD5 a977037de0e2945bdc83861eb3f80636
SHA1 e95b35979c75962e5842185fef03e6fd4640b158
SHA256 38379cd43818c518cd6e26fdfcca88c868fc0348ce59ff1b0ed7503fcca38ea6
SHA512 03923796710c8be147959050a9a20efc0edd2e2b7731c7a35040a41645b9f1e2a3a3960affa2b898fccb22d3de92242f220aedf3b5f30fa5d00ca1064d8316a2

/data/data/com.yingyonghui.market/databases/downloads.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.yingyonghui.market/databases/downloads.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.yingyonghui.market/databases/downloads.db-wal

MD5 62cd6946ea8d199b3e016cea404776fa
SHA1 6cead91a41260436b40abf3c3e27aa4e003867ed
SHA256 86a07f40ae19e453fd3a4876391ddfa2f395638aae784a6e6dad2dd6f8129e15
SHA512 ff353b9f4568c50dfd55ccf81ecfbe1edc1ca4dffc19bb6966b44d5b3bf6f2bdce24382cb664cfdf15e028862e55e19b92d8cd1991a3facf680d9d7efa498afe

/data/data/com.yingyonghui.market/files/log.1730600427486

MD5 008dac543f20e3bbd3f336c0d91e4918
SHA1 01df34d6bed159e935d2c443feb7822288f3a9c6
SHA256 cb38f1f1d57be2c6f2b25b44602a47e6a3bf204a16c22aa426d84467b0f48885
SHA512 9f3a180f4e460d13fe75be92c2752c4c43e0a911761172b7c390e3b71ba15497296b608a3a0825857d189bf65a2e41a0b61cef1e2849ef903e9a15929e563918

/data/data/com.yingyonghui.market/files/umeng_it.cache

MD5 2fab98f06a24d0f207ffe8a841554f5b
SHA1 656c8a79a32e8290096202cff7229bf6c18bfb27
SHA256 16b61d9d1f278789186a48666fd8eb6d67fdc9f29ca669ff56ff8a0df2fb9ac6
SHA512 1e5fbe48e3ed58704a235f002fc99cb30421258d38ab1b326da8652f948ffe4a29b4edad3571731f681cc7aa747e90c6a7cdc03cb277bd08d835e97e6e4f75dd

/data/data/com.yingyonghui.market/databases/packages.db-journal

MD5 9ed96be8871ab1a392a014f1ddbcaa1d
SHA1 0568619035ed1be717b73ead2491907b9e37fdd2
SHA256 88f619c02a8b6083881a8e35bb9b0e370292b08b3ebd12a07bbdb6e975bf0710
SHA512 44ee594f546afff0b9d4ae7d62723ff8a2fb0fe22a8b0edea2ae0de79831a5e405112f5bc48ea7dab29864dd38cfa941462eb0b67d78a0e0f2b2c461cdae7868

/data/data/com.yingyonghui.market/databases/packages.db

MD5 bfdc071f669fee4a1132865d30ad2bb2
SHA1 c787fe481e56e45dc8a73f897f4452f9eed4ac3e
SHA256 b83d2444d2fcac9b696026a020381869449d232f8349ee14bc7d8e62dd8326ea
SHA512 d6e192eb31a5b812e5631516bf95e3d732af9b0121b5db3f25274aafafeb55c441d2bce6e5f4b4b685f4aadbc4a3e36491a4b810074d8fad85eadf3369c7d6e4

/data/data/com.yingyonghui.market/databases/packages.db-wal

MD5 5f57200f52345bfe410ca1c0b27bf52c
SHA1 8b7ea318352a02c875cc9fee33f874afa6bf8586
SHA256 913b73ee5085bfd8cf8266604711a05b4dfdf15daf6256b0d2f2a8439c00706a
SHA512 8ffdde1806f9e0a1f24e8a549f1531845bbb840b900af001c24698f94d3490a8bbde8ad34b1951d03a2a09e85cc6f7708cbb0487e8650318f4fa75ca4a777e9e

/data/data/com.yingyonghui.market/databases/msg.db-journal

MD5 a9e52c014e451f4b55199fc1d5db7bde
SHA1 e3364951f3fb053f9820d57152b3eb13dfa755ec
SHA256 b6b124630b5ef36ae2a1bc078bb06bafe203c1d535003bb02c29cce8983336a7
SHA512 db7d1caf8728bd0be801b0065690854718f71079c105f64ada80e2bf2fb307be86af6cb693a370c3409b7031e06f5ba26b041b7235640400584a82690ed16f47

/data/data/com.yingyonghui.market/databases/msg.db-wal

MD5 b247d72d3fbfdc518987008e6e1928e8
SHA1 e27de525940614603810549a1e5cd87a853ecf7f
SHA256 28fcd315ff02e9f755058b39cc6c46235968d3603c4714a30a3e97769c547ce2
SHA512 50f190656c6f19edcecccef6ee2507f4be7c96a3e65c47e59a1feb77688f887ffff14dc1fd5e959d87d0497f36411301b8939238f2ce0f8b06c0bb11e702459d

/data/data/com.yingyonghui.market/files/log.1730600427486

MD5 5e8b98f4f6830995d60171be6028c03d
SHA1 a596a9cea5bba92de4c4fcdedbf81c6da24b35e6
SHA256 c39fd40106889be143b5e89110ee30bcc2fb43b12673ee15d7ad1d72b0840a40
SHA512 ba71248226f2f745ffe8163808f0adb5cd0ca1f1259ffdf5378ed534c44e77952b97378c3aa4b741b57bbbeefff72446fa7950e7912dcee5c3efd6d3837f2496

/data/data/com.yingyonghui.market/files/log.1730600427486

MD5 3a6fb356e0c92a4fd38058807294105f
SHA1 0797dc35ada769d5fe7d1cc63c656be53eca50f3
SHA256 6a8216cd4bce97bf6618e84ca986ddb196cb37dabec4ca00681449553e5c2ded
SHA512 9d4248b09cf4ccbcd5b3b4917c89a56bab696e6e13c6238195d17a8bf4667e0fabbe31da3162b2d3c7f6581d0b75732730553c5392c45064722fbfa8dedd5b86

/data/data/com.yingyonghui.market/files/log.1730600427486

MD5 a444765032ab2891846659246144a555
SHA1 cac279ab1983f57c58a7f47cd6bc947c7be523a2
SHA256 7a3e89b93d43a372956d26d157e361383157fe120316434021547b0288fad8a6
SHA512 f345aa004fd6fed24c36762a6a5c665be3727893a32db5b21b006cd2ad8d21e28b701c669cfab5b4bb565a86f3f854655388a9a775103a22165e73509a9de90d

/data/data/com.yingyonghui.market/files/log.1730600427486

MD5 c249e77941214fb9f6de85dd42d571de
SHA1 4b49a70d4ae13623bb63a8a3159841969ff0d050
SHA256 3b74e5790b05fa870dd21d4e0632f5204e25067621983d431c1f30ac2b004abe
SHA512 be61c95cbc55e51a4c183b275c034a549746480d291c8038aa41a2fea2808e0c2358d69afd65d4022af911ba23971e5c714001b7a17cf9a147d56aa96971fe4d

/data/data/com.yingyonghui.market/files/mobclick_agent_sealed_com.yingyonghui.market

MD5 d494713c187f0395c794fd8ca3325071
SHA1 9193fad4c3acd379f1402870bc884bc710d9eb40
SHA256 68c895ec794b0e450b2e458cf9993d2e1f0c2037c7a34963e7fc07f99838ba6c
SHA512 fe34fd9fc8233e9ee0dd8e5183dc0cb17563c8146c036e99a4a34306e3c02655eb677aa916c17696b482af5575489147cd99ec6e76759a027cf2d3dbc296d369

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-03 02:20

Reported

2024-11-03 02:22

Platform

android-33-x64-arm64-20240624-en

Max time kernel

125s

Max time network

150s

Command Line

com.yingyonghui.market

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.yingyonghui.market

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.201.100:443 udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
US 1.1.1.1:53 oc.umeng.com udp
CN 59.82.23.79:80 oc.umeng.com tcp
US 1.1.1.1:53 mobile.appchina.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 rcs-acs-tmo-us.jibe.google.com udp
US 216.239.36.155:443 rcs-acs-tmo-us.jibe.google.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
US 1.1.1.1:53 oc.umeng.co udp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
CN 223.109.148.178:80 alog.umeng.com tcp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 172.217.16.227:443 tcp
US 172.64.41.3:443 udp
GB 172.217.16.227:443 udp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
GB 216.58.201.100:443 tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
GB 216.58.201.100:443 udp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.196:443 www.google.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
CN 103.231.68.195:80 mobile.appchina.com tcp
GB 216.58.212.196:443 www.google.com tcp

Files

/data/user/0/com.yingyonghui.market/databases/downloads.db-journal

MD5 86e5562325b3b59c17dd1f4d01ace506
SHA1 9731d74696d4af5b8e0536f2d7071119036cb827
SHA256 81ccc09c71447f1ad0c7830029764ce7e3b5ac9b841ee90d42ccdd4873259ffc
SHA512 5fe1067398410549a5741dff936829287ede0c111421859f6f023addefff26b1e68d57ab5bd8296a8d90580a157f4ce0121b94805fa70b1a48fe67a5dbd68b9a

/data/user/0/com.yingyonghui.market/databases/downloads.db

MD5 19837725f05e4429986a5d62dcecee2f
SHA1 ea0dd831583d82a31dc028820af4a832085a5845
SHA256 6cefec19b6a5a80affea645bbc2c12ff2ef81f56970e1461ab0ae7f8835a4f08
SHA512 b0c41c24f653fd4a3977976af02be0d9f52d94cfc3cc404ae0fc78b85a7bb499bb7f591e4c3251f1c700683e1776421e9b0a3e8063a7a83b57a97e906bbc63d9

/data/user/0/com.yingyonghui.market/databases/downloads.db-journal

MD5 4fe358fab5c59f6231088d00ecc9c67f
SHA1 a05f133451852ff387f7b18ed1430eaf3f827365
SHA256 807516b250a734484efdd949b173ef45f50b4800fa11c7b60f64d2f3bd30287f
SHA512 2371c6a9cfa3b26824a1fee6998a1a9528b4bdef6d1b9e3b9c6ab63d47b1cdcb6a5597c3ce5ce39c3d7c2723f6d1b2931056797fd8b9cbefdf52c6121eaaada1

/data/user/0/com.yingyonghui.market/databases/downloads.db-journal

MD5 55cdeed805061b325196987c49eed858
SHA1 63acb3e5c989aba8bd3de39ed8b5205417512255
SHA256 37e93bd6deb352b08646f9e49c1ed9c5fb799cdc714cb06490bc295c038974ef
SHA512 3a9c2f29532521217ed9df5f4d25fa3bbe6520c3dfe00d511eb815f8003ccaf26c1f785b6671e801fad8d7ae382f022e4d7dcbb87a8749d68d201a3612d04ae5

/data/user/0/com.yingyonghui.market/files/log.1730600428385

MD5 ea5e4a8cfe2e9fa7d4e430b6a75c01ca
SHA1 7035f4919910e39d61c64265178712e0ed1611da
SHA256 b73fe8d14833cbcf753389fbe6276ec6181d207990a31273941ddeae66fc73ae
SHA512 a55162a4e3a4e172ab0e7c47253aab4079b07dc68850f5477e4384df55f23c7fff42936200ba489d45a5fd2f10d72ecf039ae0a129f62b7ecbbedf574f8b6291

/data/user/0/com.yingyonghui.market/files/umeng_it.cache

MD5 da7e93b2175bd25488ab7ff0bd1f0c6a
SHA1 bac7d01bd3928b2730f319fd230944193b5fa554
SHA256 e15c30739f1183a546269a7b6964bc74cc083fe68d2b3b65e5d3b9e8e6761ece
SHA512 f4be3c44574ca13d597a017873572185adef854c325b7d3dddc88431478f5312556c3f7c756a9b4f6c5686443d640333912b423f47d53ca32c12eb438977a707

/data/user/0/com.yingyonghui.market/databases/msg.db-journal

MD5 0b48804b016a9fcfb5d991cf18a594e1
SHA1 ee7b7372a78fd6f0c35872a3dda39e5d50f3e0f3
SHA256 c40a634313bebaeb151030db9257ffc8ea8a3b4a6256788126884af5065e90bb
SHA512 370ce5d3a256350e285eebdc51c1164f0a42e0a9fe0e5df6b32c90b1858a5362089732e3a5527eae55603b92c2d4bb0db4e8f3237bff41c9c6d6a17a62b64b5d

/data/user/0/com.yingyonghui.market/databases/msg.db

MD5 3ba306764897dfe63fd8ee55b1e36d06
SHA1 510011662e86ec56ef80f59d5c8ad86bab59e92c
SHA256 ade79d1c074451e68a1be3bde79a5233c9c2531ceabc69ea4f04416160f4bdca
SHA512 2af06583fd80d0302859ab80c092d45b49e1cb79305d527f94b670499ccd007e31510569084876e50f6b2f1e25c61ed2725eb13988a5155fd6aa53650ae4b05b

/data/user/0/com.yingyonghui.market/databases/msg.db-journal

MD5 b45a04336c972aefe0b8def462f5384a
SHA1 27d3bdb6e255d3e2923c27ebc58bed748b78fb3c
SHA256 8ae620d81353657b68c2f63da901b77436f460a6e10c960d2b1161fcf1213fc4
SHA512 765ea39e3adfb5d50c50397f129e164938080de4082190b24c63c93fae5765157e9e94c19696af4b2e9d2c392e4e3c40d627b3adc8accdad1ceedaddfc102068

/data/user/0/com.yingyonghui.market/databases/msg.db-journal

MD5 2206b51d609cda8595f7479186c90094
SHA1 8e0c93925df2dfeab4d21146b0fd482cf7b9de21
SHA256 dc4c9298ad32c52d03c9dc47cba6ab9fcc129783fe688fcc4e3798f2c18a63e7
SHA512 b32b97072ff72d5b8bf4293648fb25e6a4ed0bb2281aab911c425f24bd5dc6320274dfd5d100ddd08d50ad816fd24e9f549c8fc6bfd9e354962283b44e123f7f

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 10a59675e71965478f316b2fc5e0ac7d
SHA1 d4c6915ce267f5712b05ab5bb7e96763cb33e8bd
SHA256 0df613e06902505b107cf48abd501c6edfa18322198f5441449e2ec807c03c59
SHA512 d2c79e1ce186a7203f54a59226c4769e2342a70836c1fcf88b77947352a7d356f3fff74a6306d575dcb3e418ffcec58d4ac98a5558451be991d7c1dc2b944f24

/data/user/0/com.yingyonghui.market/databases/packages.db

MD5 d738ce507d5f37c4a474a3f6e5132050
SHA1 460896768d5cd3af86d386580d9495440cc2d0fe
SHA256 d953c59418d9607e05b7932a210e0e2069e670c42106bee6f014e59fd014ed7d
SHA512 41ea33f5348ccb6a561138fc4cc970275e12e39122572e3aa92717f12e7a9e660bdf6c251b60015f8421078fe45a958c23aa9ab87fe08e5478651d2a52721f67

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 e37c9179c63215749fa8174b854472ec
SHA1 7d20a144e616c61e090f5d162f1435d38e2e8511
SHA256 660a3280c4f32c56c94cce4daf06c6dcc3c9e6f8953dc1f27b677d9e4622dc73
SHA512 93fb320905c064f1d2faf291cc454b3e1d36f7434525eebb892c9cd17dd98a08d8f2ec7e29e8b80f56ada231970af13dba640ba740fd12e3ee9d0bba5c048cb1

/data/user/0/com.yingyonghui.market/files/log.1730600428385

MD5 642ee583a82504e63164b4874d6fe53c
SHA1 1c562ae8ce538973b65388f2394098b6ef6b8d0c
SHA256 dd9e70defd62edb10a9d6d484baeae77674380af622da873e6b78f71625e95db
SHA512 7dc1a39fc48adec2f3cfcbb53b66d5fca9339ebfcabafe835b0854c84c3cb1bfe66c6c471042ff2f92e428370f4c950e8cd369cbea890773c42364ae1a98e4c3

/data/user/0/com.yingyonghui.market/files/log.1730600428385

MD5 107eeccbd30cd03e98d33d8725499052
SHA1 d64edaba5b4d94719ff090cd3395bbc348f50b20
SHA256 f97a8da229224ccd8b9a6ac25e66bbea5a580c4841dde30b06d4d6a2415de44e
SHA512 db9de5c11106e6427ff277f8b1deba4ec5c49b25cdf65a518d8a7c81d203347aa3cfa74d5d8103ad538e8589975cc9774786a0d3f2ced05f6e9de644b4b55705

/data/user/0/com.yingyonghui.market/files/log.1730600428385

MD5 946d2bd4ca5443cfe3997cf489eb7be1
SHA1 2af5b9e7a3d05f53297b521040a77e2b31467e3f
SHA256 f5d938d1066a6f993cee3a3159a283fd8a231a24f3eb79a4dddce17f6215615c
SHA512 a901f8cf92a6d8f89880add3b39213b43774f503602a37ee94708f5e025bdcde1e170a11452b8c7b4b669feef8cd73007fc74b2aeaec4c50549196181f65b2b4

/data/user/0/com.yingyonghui.market/files/log.1730600428385

MD5 8cfc83acbe21a4b98b2d79deee15e306
SHA1 09f2c8101ac98340a0b65bfac9df83d892f925b6
SHA256 ec349cb8839f20169d3a0c54070e7dfc0f9d89d99b9019e8c8a44d97cdadc8e6
SHA512 2627456a064584bb2c46e0a83562b089c7b902fcf3cbd176504fee12ee7cf9480f11ec440c2e85e4d37d44a96846c0691d9db3017612e87580e2dd3e8b8561ef

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 54444cd363415bcc498b1c4b786ccc25
SHA1 06430d6ab1a3ba96acde72f49e4104e7e9ac68a5
SHA256 b55e3fa2fd8602f890dc292e9fa8c13a40dbb74325e32d269bbbbce1e9d29c82
SHA512 ad57067e3cfc0becf3881b442a8ab6ee131057f9d8c6bfb75d847bbebcd9ccbd130507e167d55af6ddceeb3292488c4f14e1c90b71d71239d805af20a1f753f5

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 2bf763033dfb37ac17eb875a2ac12dc3
SHA1 07a1e1acbb4a42ec3f3a81056d0832d4055402ee
SHA256 6de2ca2faaab8464e2fa020af4177da828da23b571068b9024f8e3c465b2a154
SHA512 76e67095584fbe751d6796924d14878bc8f639922facbd8e74c63e99f184aca09abae1285dff7818d7888dfea53ee977bc427f17e62687ce9edd3599cd502441

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 0c91b23f9ac572b51e24ddb340a9fa23
SHA1 f2d6d6256130a6dc1454b82f5009c8e9bcc13d94
SHA256 e06a52f42c8bb57153e9accca1169233fe1aa435da8ff880cf71b7ece35b25ac
SHA512 969cf6483eeb22e7b2c015c8f843f7a988cbb250bd699dfef42d7c4a46ed531e0708a7e6baee4e2d197c59a28070cef54877a24bb87f8e975e6cf5f594f4d8c9

/data/user/0/com.yingyonghui.market/databases/packages.db-journal

MD5 d612d9db8b15fdf2fa4298498fd8374e
SHA1 ce1a25b14ea49b8be9519ebd21fa7c6d0164cee7
SHA256 3cf9e6f9b9739d1283ab5098f1345c0ef1a84485337f0e11826f1f95f405c80e
SHA512 dc8fc7d29b8a73ded95a8dfa584085ef9b703d7ffb32e75ec0b92e88a9135ed0c13a7b9f8e3ff659619a8aff4ddf578917d4f953e35644f22f3af6a606750c37

/data/user/0/com.yingyonghui.market/files/mobclick_agent_sealed_com.yingyonghui.market

MD5 fd5adb927ad492b844b4af7baec2209b
SHA1 e0b5f57d0b86605505941c7ac36cba7b482b8af8
SHA256 96a7b5cb35bc8c3dab20e35f621a6937134cd41328af67f32f740b8893c80357
SHA512 f21d965479c7af920afd9b35f91477eb709bb42c516e5ac9232521c1cdfdfaba1ee3c66d5dc32ebef9e15d47951f154802ea2ee2ef0192ef8a90ca9216d8ae0b