Malware Analysis Report

2025-05-28 18:45

Sample ID 241103-e28dlsvfqj
Target 89a27faf567988c161fd972f278abbf1_JaffaCakes118
SHA256 6483a9112ee80365c8ccca79c459454014f57c87c35c8d775a7c3fd78cfe9c87
Tags
banker collection discovery evasion persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

6483a9112ee80365c8ccca79c459454014f57c87c35c8d775a7c3fd78cfe9c87

Threat Level: Shows suspicious behavior

The file 89a27faf567988c161fd972f278abbf1_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery evasion persistence

Loads dropped Dex/Jar

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-03 04:27

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-03 04:27

Reported

2024-11-03 04:30

Platform

android-x86-arm-20240624-en

Max time kernel

3s

Max time network

131s

Command Line

com.xdnstudio.usfmod

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.xdnstudio.usfmod/app_oiuj/zkl.jar N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

com.xdnstudio.usfmod

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
US 1.1.1.1:53 api.is.139199.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.78:443 android.apis.google.com tcp
US 1.1.1.1:53 api.push.guiji.com udp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp

Files

/data/data/com.xdnstudio.usfmod/app_oiuj/zkl.jar

MD5 ff1608d2909f2ff6b2d7a3bddd54640b
SHA1 d67b35b63efdf86cfe52a0e960d8c90a0ec97dc2
SHA256 d9c17a4ff8514beb3225b0980db510f4ffe85abc25604a003aee1c75e0887dde
SHA512 0c6041ddaa52b139770a853a154a2a7d34b0f8e6c60d7e383ba04061697027d09b570a21267c1452599daa22ca1f02ad34c4b076156d0a3612ec303d0eed9b69

/data/data/com.xdnstudio.usfmod/app_imgfile/d_adwords_bg

MD5 4b9b64c9dc6d13733a9ac3320ac9f53f
SHA1 a02218ada2417dd85a3f3a22db31d30c150440bd
SHA256 35dc398b4409f3037ef52c21e4674a283e1cc0f71894704a4583752b91fb0cf1
SHA512 b819d1ca851815549bff946c1950539db7d199b3b04be0f6a6aadb1602225e895ac7283c525733e9e421646a6f2da2b732ce3cccb8461e93574c04e5d64b31b7

/data/data/com.xdnstudio.usfmod/app_imgfile/d_appsc_an

MD5 58dae109b45c2378d880225e9f746240
SHA1 e67b37d47c009a11c9b365d38a3692f6e67c606e
SHA256 afc834307f4d1bb9eaba3f3ed85aa32a616ebef7b32b14ba234926312ad0f2ce
SHA512 ca3c5caffe9340d2a39e84c8e7e2ad495640338a6d1d6ecafb4b935578b334fcbfdbbdbdab983c7b6559387cfd197cd8fd33c243d6c06eb9368c6f7e4ccf76cc

/data/data/com.xdnstudio.usfmod/app_imgfile/d_arrow_down

MD5 db45ab95930456e6baddab4e6fcbe712
SHA1 fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8
SHA256 5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a
SHA512 d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

/data/data/com.xdnstudio.usfmod/app_imgfile/d_arrow_up

MD5 20c4a831398dd9ebd8dba380a2e7857a
SHA1 c6db26860686a65f5f402d29d98b358630c10e40
SHA256 03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d
SHA512 85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

/data/data/com.xdnstudio.usfmod/app_imgfile/d_bottom_bg

MD5 ffe93c95f1ceef187397bb763c992ccf
SHA1 6b082b7f6c55acd0987611b3b9a5aac9a5b06d67
SHA256 06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9
SHA512 10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

/data/data/com.xdnstudio.usfmod/app_imgfile/d_bottom_btn_cancel

MD5 a7481cc1f04ff397669d5313711676b9
SHA1 6a8a1755f8bae8c1c4236420de731ac5e6479df1
SHA256 7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b
SHA512 6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

/data/data/com.xdnstudio.usfmod/app_imgfile/d_bottom_btn_install

MD5 6a976eab4bd6a204fff19f363a3e0fad
SHA1 7815e2d7905bb25ecec99c6491e05e498baefefb
SHA256 a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796
SHA512 8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

/data/data/com.xdnstudio.usfmod/app_imgfile/d_btnbg_blue

MD5 cd03c81961866339359a8862cd420751
SHA1 4356e958c4b333453a187b13cfb8e4951e85b5c1
SHA256 5d81cceefef430d84abee2aee1a655e975e638eb6e90d9edeaf70df18f761453
SHA512 29c6a83607ef938c8d74031781008075f9e29f28381893ce565d0d0e5e2193657264deb7752709f124bac8a7625ecda18a90763f8b8cccd48868105fde62846b

/data/data/com.xdnstudio.usfmod/app_imgfile/d_btnbg_green

MD5 b61c2cbfc113d3080881c1a6c805de7f
SHA1 8bfb29fbebab3ff36faa5f6d19bf7bdf57608dad
SHA256 740a7a55675de72a6d165dd1aea7f15e6744f08e5131c2abea7e6e02ac4752c9
SHA512 7cb6ca09b180adeb87552b9b814ec50723d2f8e909a5aa1c3c63526bfe90043c0f6f97696b0e40d33c045a6d7f4b4df711ecda2a93839b9409f69c84491b3151

/data/data/com.xdnstudio.usfmod/app_imgfile/d_btnbg_orange

MD5 144bfaa9628bdc547f92dd8ce04960db
SHA1 f60797400afdb88cc1a7b26eaaf5c18b7d34e3c3
SHA256 56707731bc7b76b806d9db7ec7e73173d0ba7c5acf22c8c040fb1bbb0d07090e
SHA512 071111562423e811333afd56dbd18fb68e0720f41936c42d266f70d041862560b363aa202ae24af40e9ca611d7f3eb996ee4184834097e85fbda1e2d36291f4a

/data/data/com.xdnstudio.usfmod/app_imgfile/d_btnbg_yellow

MD5 c56a569d3e2cc40deb8ef6dd9c8273df
SHA1 fcdfdfa5f883afe7dea8a08b4e22d66b243065c5
SHA256 0e603b7797d42f1eadf5ea14499460e84e6525df6bdc4ee1464e00789c10c057
SHA512 b1549f4667c2765feb11d38469a5bfa4f599609ff519e65b73fc01521886cd57e7f30c2c43655d2b3af8665c77cde4f3a07e1e21f7dded059dc22ac60cbdb4b8

/data/data/com.xdnstudio.usfmod/app_imgfile/d_btn_install

MD5 135b4b02c06ce896c0289c06931523d7
SHA1 219d7fcb9a47b14dc724030a5b22b00e4912c419
SHA256 7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc
SHA512 e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

/data/data/com.xdnstudio.usfmod/app_imgfile/d_cloesbtn_top

MD5 82da041f51d1ac5bb8def1a7b43d23fa
SHA1 6bc0fa16bfa87398bb17922ee2f6bb1dbd9a4b6a
SHA256 0bc4050b837665100502e255107b5e1521c7012b03fcf41eeb92b2bb8c95ca5c
SHA512 1e558cc54a7f5900ca418ce7a64866273a533a25d23a84ca4721277528949836079472c7fc0e66cb5c41548ef2c06d412a1e8538fecbb02ceecf982e10c238b5

/data/data/com.xdnstudio.usfmod/app_imgfile/d_cp_more_btn

MD5 a0314cf413a6efe118ce49aabe7d323d
SHA1 a8134a8d8506f5d44cf084b501a73fddd194fb8d
SHA256 3d723fa2d6bef03b2f44e09486edadd7eee392e14da4bc9435521fdb9d5a1537
SHA512 e5decc76e4461aa063571e45e9d1e47fcd8586311b726c1d1bb60e327c43ef8e104f4e1614e9ac656d5ae0e9095042e230f7245c7a3f0d89d515a2fad78046d3

/data/data/com.xdnstudio.usfmod/app_imgfile/d_cp_other_btn

MD5 5b1fe1609131bc828527fc35dc4c7353
SHA1 39b6169e1e2a7fee0e56e421184d81f071d3693b
SHA256 ebc4e49b42208680f7d5b9ebae07bed1712a1ecb6443dcf5b09171faae0e0eae
SHA512 74ebfb919c0af6fabc52228d7b501c632c95d28b91e0ae87109d9da5f422471f96190858f26d097bc502a8e673ccf31e35ab2b15910f7a43e8c48fac64a0c8e7

/data/data/com.xdnstudio.usfmod/app_imgfile/d_default_bg

MD5 67d8c02c18a4eebb21aa28ebd88d7a8b
SHA1 f31fe91485bba4da727e9a0d0525c7417d6c72ee
SHA256 7b341f9b1ab0a691029b44f9b1d64cf74fd72ad0c74772964645c79f687402d0
SHA512 73c14d96680105ce3e24ba0667cd2452848f9c7d2549e937667c25bcce01a4d9207a78f2dcfc7c09cdb39f87f079c7847ceacbed36cfae55013126ab3bdbf5fd

/data/data/com.xdnstudio.usfmod/app_imgfile/d_dtop_closebtn

MD5 6edfc3ccf80c5cb2c25bf82dd5e78c46
SHA1 0f71fe007ebb0479e42905c6a78f80b0a109a03b
SHA256 2225deaa4204ae88206589b390dd277c9e24ab0a68338cec19eae600b854fe32
SHA512 a8e4adcc0cd0867e8bb2cfe43a04c3a8e8a84de99ad7150c339c4dab1e81c8dab87af17fe7b7bbea41d54c6acd6214224f07ba456a8dc0fc8c33b3782e83ba4f

/data/data/com.xdnstudio.usfmod/app_imgfile/d_img_bg

MD5 089965b9fb96326ad74e361a9a524e4b
SHA1 528cc6c7a10de9f525919a477c9e20d6b6e93d55
SHA256 d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46
SHA512 b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

/data/data/com.xdnstudio.usfmod/app_imgfile/d_install_btn

MD5 c64af13b874ab8cfdac99f000c29a3be
SHA1 e5274173c7721f8c77bb5da46fc94f195abb4924
SHA256 67af721ddafee67f3eea6241bcdb5b8c1315e8ed1b8dc852646cde24fe040516
SHA512 d59c85b4576152848427a74214c7b979c576f5cc6978430b9d7076f50cdf8957d8256eccf55aaba2bf7f80da2a7a2b445a26758aeaf3e889ae1c84a3fb2185c9

/data/data/com.xdnstudio.usfmod/app_imgfile/d_listcloseBtn

MD5 6fb767d2563a35f3c0e362a5970ffe1e
SHA1 6d3a8fdbd7ced06a363517cd6cea7a7fea16c269
SHA256 534fe818efbaa752826c53f1b63d3ecc1b647c8a9f7970012e316cbce5fb5ae2
SHA512 ab989e8b01b9d397cb2968dc8191a9c2c6fdf19947b30b96cd5266afc6fc330a318de8c914d34adef98caffd151a0bc29fb130bf11c5638e97b3ff15c723fc2b

/data/data/com.xdnstudio.usfmod/app_imgfile/d_listview_bg

MD5 28554ef38f282f89a2f3b298157fc984
SHA1 08147f2b5a83fd07f5acadb43598480a13d3fac1
SHA256 b4034e26cfd742433a0b59676bf73a78d93d413decc891abf3d34486160d307b
SHA512 cd31cd81a7c37155f540c1b636cad9ea198860952d79f8b3d39dac661c2e7fa82e1398830c7aacfa6904e4d4cffa6f5f1d906dabbf97091f3e38a65fb5fa51da

/data/data/com.xdnstudio.usfmod/app_imgfile/d_list_title_bg

MD5 c34bb6ce3d7def12e8af79e87a6b5173
SHA1 99e8103027a7bba73b736fcded9d0d91b49e4ed9
SHA256 daf75ee4e642b335cf1918ac9678502bace139f76645eedde7eaca4f296b7e57
SHA512 58735b6034ff6ce1974aa0a48952100345b6bdf74a4dd083925aa87b0882e1931ff8608d03d0854c9de23ca409e5726ddc1e8313339181f57312bee0804ee2b7

/data/data/com.xdnstudio.usfmod/app_imgfile/d_m_star

MD5 590dd3230f50ba57b7a828cf1ad04aa0
SHA1 d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee
SHA256 d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7
SHA512 449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

/data/data/com.xdnstudio.usfmod/app_imgfile/d_page_normol

MD5 2bf3d7d7ffe4a54396979c2802e5a0a7
SHA1 631def5dc6bd48080d51d3482a85c470b291c316
SHA256 ec1601e7e19b69d6d6bc8f18738698a6b4483a4f1ac546215dbcff9cc74acf7f
SHA512 2a9a95a9298c59a90b7234343f01b70219653e4d43217c83dd3dcafea84b96727d1e5f40ba035c36fb4dc6a83478fa66d545a2cf8221aa2da1ab9565b3deae79

/data/data/com.xdnstudio.usfmod/app_imgfile/d_page_selecte_blue

MD5 1c4e3c1de688a5cde892bd74eec4bfc1
SHA1 bade0d4743822214421dc664449c0b0d94d69aae
SHA256 ee7abc5886a058b4436aa0a53c6be535fc0bd3a6832f2b0b0e611473667dca5f
SHA512 ccf419b266d7fcdf4c6696963c657f7138a59b06a4fdd900effebcaac0b162ddb5e9135f5032a33e2b3ffc17642065600d9b9292005e200f5cd8e79b17968f24

/data/data/com.xdnstudio.usfmod/app_imgfile/d_page_selecte_green

MD5 9dfe941765a15b163eeb46b49cb4e89b
SHA1 caad3358c1706f28624e10616cf6d26a45b2dd5d
SHA256 d92d42135d59f97d35cc2d553b7bc79f19397a40cae9ac971a86def6fbc9167f
SHA512 0a38e4a6187fac65999a9a27ff4a917ab6dd023587ae5b0e33c95a502e7e93626ac3cfb48affaacc274b5f7fa118f483a627e70288757308041ac67e3337a4f1

/data/data/com.xdnstudio.usfmod/app_imgfile/d_page_selecte_orange

MD5 ffaccc20bf244076988df00a6bc20b06
SHA1 4a7176527cca9e9a862cb12485cf02c49c228913
SHA256 71d16959b999e8251ea5ffbf0075a43724b02f85ca34e3ee82b31935537c9a9f
SHA512 dba973767cc9e9eec698232e9f7d057bdf5464c8d70fcef3e6631ad72d9e62ab4cc08169db2e3927e2f3a870787ee60bfb4b26ec1ed8c3fd30e84aa38afd65c2

/data/data/com.xdnstudio.usfmod/app_imgfile/d_page_selecte_yellow

MD5 8487656fa992a7c3603773e0b1b1d7e0
SHA1 ac740cc2ce2ff0729b70c26c70ac0462072d1b81
SHA256 12b5a8c075e94cfd69d4a3ea6e62552d7e3e7e2ae5f6e69b7fc4ab5a6c9635a8
SHA512 b6be96693719978dabdaf05e3f733925b126959bf8ec0096775d76eeb08a6a5fd56c2ddb4697d81a8da9ef1e00524348c0ec7aaa36ac5302d89dd51db6f08fad

/data/data/com.xdnstudio.usfmod/app_imgfile/d_pop_back

MD5 64e607b18ceed3c184658ad0bead2c87
SHA1 ce0da694a61264c3dc52a42c5e4eef67c267330b
SHA256 ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad
SHA512 a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

/data/data/com.xdnstudio.usfmod/app_imgfile/d_pop_bottom_btn

MD5 153c4a358fd2029b62d88c5abc8315f8
SHA1 b8db469b4ed0798040ed2cd7618fb31c143bb733
SHA256 6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945
SHA512 7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

/data/data/com.xdnstudio.usfmod/app_imgfile/d_safe_icon

MD5 5101a78d00419574d0dcc0eb1f4b75a1
SHA1 c4142d79270fddb27f24d6e8e8b61e9837b3de48
SHA256 abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999
SHA512 cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

/data/data/com.xdnstudio.usfmod/app_imgfile/d_safe_line

MD5 1533f88b71966664017deaa78437e057
SHA1 7b68a5bc7a6808a041c05ac7adc5da0fd378aecd
SHA256 ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a
SHA512 f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

/data/data/com.xdnstudio.usfmod/app_imgfile/d_sc_circle

MD5 e50c867a1725d1a77477d0a3931266f6
SHA1 1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67
SHA256 0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be
SHA512 88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

/data/data/com.xdnstudio.usfmod/app_imgfile/d_shortcutad_bg

MD5 66cfa171762dc97679085b770d8a1a24
SHA1 0ea4278905b9beff4cf8ab932955e720b7efd200
SHA256 7742eed2fc4c8437016dddf0af8b6b7ab44c8cb67dc2adb13f44ebd959cccc0a
SHA512 04c3b023abb743dbbf4a856c51d08af43d9fcc9f128073336ba4bb8149a9ce4d70f7cc50cc2989e59cd82339371345f02a341fb7abdfc53b0cb8c0680c400ceb

/data/data/com.xdnstudio.usfmod/app_imgfile/d_tj_line

MD5 83f9aabf34554a65a8f47514703ea69f
SHA1 bc3097db92c0f1821d60779d9b1f712cd0cc7866
SHA256 a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d
SHA512 11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

/data/data/com.xdnstudio.usfmod/app_imgfile/d_top_bg

MD5 17f5c25477711a64b0dac419b8d68c0c
SHA1 475301f9d8143ba1548114d1de9272a18298a5dd
SHA256 b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8
SHA512 09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

/data/user/0/com.xdnstudio.usfmod/app_oiuj/zkl.jar

MD5 15d94a95adfa611d6cfaa9770c52796e
SHA1 a0db338ac1043113cd342c8b83ce1269dec8d601
SHA256 05b52bc316c80cf9810834923d70d0e2d22f982a2093d3b974640c218a9cfed4
SHA512 1fad81b637304c490e255a460e2565836f9e17eac2f6dacecf98ea92350f3f0546ba254a51a35a805d088c418ec9572a6b4922dac1e0123df8e56732a3cc0f0e