Malware Analysis Report

2024-11-15 09:55

Sample ID 241110-c2g6bazrhm
Target base_beta (1).apk
SHA256 f827ff2efe540ac07d2b4b38ad2142424e7a4f7fc4013a260b271d8dbf85fb91
Tags
discovery persistence evasion collection impact
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

f827ff2efe540ac07d2b4b38ad2142424e7a4f7fc4013a260b271d8dbf85fb91

Threat Level: Shows suspicious behavior

The file base_beta (1).apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery persistence evasion collection impact

Checks Android system properties for emulator presence.

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries account information for other applications stored on the device

Reads the content of photos stored on the user's device.

Queries information about active data network

Queries the mobile country code (MCC)

Declares services with permission to bind to the system

Requests dangerous framework permissions

Acquires the wake lock

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-10 02:36

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers. android.permission.BIND_WALLPAPER N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker. android.permission.READ_MEDIA_VISUAL_USER_SELECTED N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES N/A N/A
Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO N/A N/A
Allows an application to access any geographic locations persisted in the user's shared collection. android.permission.ACCESS_MEDIA_LOCATION N/A N/A
Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO N/A N/A
Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-11-10 02:34

Reported

2024-11-10 02:43

Platform

android-x86-arm-20240910-en

Max time kernel

3s

Max time network

301s

Command Line

com.zhiliaoapp.musically

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.zhiliaoapp.musically

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 142.250.178.10:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 mon-va.tiktokv.com udp
NL 71.18.73.0:443 mon-va.tiktokv.com tcp
US 1.1.1.1:53 reqhfg-cdn-settings.appsflyersdk.com udp
GB 18.245.158.212:443 reqhfg-cdn-settings.appsflyersdk.com tcp
GB 172.217.169.74:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
GB 142.250.187.196:80 tcp
GB 142.250.178.4:443 tcp
GB 142.250.187.195:80 tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp

Files

/data/data/com.zhiliaoapp.musically/files/keva/global/keva.gxi

MD5 f09f35a5637839458e462e6350ecbce4
SHA1 0ae4f711ef5d6e9d26c611fd2c8c8ac45ecbf9e7
SHA256 38723a2e5e8a17aa7950dc008209944e898f69a7bd10a23c839d341e935fd5ca
SHA512 ab942f526272e456ed68a979f50202905ca903a141ed98443567b11ef0bf25a552d639051a01be58558122c58e3de07d749ee59ded36acf0c55cd91924d6ba11

/data/data/com.zhiliaoapp.musically/files/keva/repo/compliance_setting/compliance_setting.chk

MD5 620f0b67a91f7f74151bc5be745b7110
SHA1 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA512 2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

/data/data/com.zhiliaoapp.musically/files/keva/repo/compliance_setting/compliance_setting.blk

MD5 0829f71740aab1ab98b33eae21dee122
SHA1 0631457264ff7f8d5fb1edc2c0211992a67c73e6
SHA256 9f1dcbc35c350d6027f98be0f5c8b43b42ca52b7604459c0c42be3aa88913d47
SHA512 18790c279e0ca614c2b57a215fecc23a6c3d2d308ce77f314378cb2d1b0f413acd3a9cd353aa6da86ec9f51916925c7210f7dfabc0ef726779f8d44f227f03b1

/data/data/com.zhiliaoapp.musically/files/keva/internal_repo/aweme_ported_sp_repo/aweme_ported_sp_repo.lxi

MD5 3b5d3c7d207e37dceeedd301e35e2e58
SHA1 c8d7d0ef0eedfa82d2ea1aa592845b9a6d4b02b7
SHA256 f5a5fd42d16a20302798ef6ed309979b43003d2320d9f0e8ea9831a92759fb4b
SHA512 7be9fda48f4179e611c698a73cff09faf72869431efee6eaad14de0cb44bbf66503f752b7a8eb17083355f3ce6eb7d2806f236b25af96a24e22b887405c20081

/data/data/com.zhiliaoapp.musically/files/keva/internal_repo/aweme_ported_sp_repo/aweme_ported_sp_repo.mmb

MD5 e3c4dd21a9171fd39d208efa09bf7883
SHA1 9438e360f578e12c0e0e8ed28e2c125c1cefee16
SHA256 d4817aa5497628e7c77e6b606107042bbba3130888c5f47a375e6179be789fbb
SHA512 2146aa8ab60c48acff43ae8c33c5da4c2586f20a39f8f1308aefb6f833b758ad7158bd5e9a386e45feba446f33855d393857b557fe8ba6fe52364e7a7af3be9b

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4424/cmd

MD5 50ef9f5a0f3fc24b6f0ffc8843167fe4
SHA1 cd9b2558bcf52078c64242e751017419651181d9
SHA256 47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104
SHA512 351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4424/app_start_time

MD5 3379ca7f12540357dc2c7b936169923f
SHA1 cad16bd480d3f2108ed16d70ef3e5deb00e592bc
SHA256 bb2baacb0841d0b124ddfd97fd266c3bc4bc7aee707cfcae5b78f8462ce3bd95
SHA512 50128ae4fba783d4d8125b7590879f31f6a49fd1203d07a9e91fd42cadc8240483ae57ba562e48fd2baf0a29d3a1dc568c1ccc43284263be2a5afd55193f6b6f

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/pid_tid

MD5 c22bab0d64a16bd2f2f4f3bb45819cd2
SHA1 e95b0b282b4d238a881418b2d0dea8d57fef2b9b
SHA256 83034909f8c74cb3c8cce6e7fbaa9fbf82e4f74325b4cb0fb680667a6b2d2880
SHA512 837594afa91fcce1f81e4e312b73ad9dd5ce2d7297df952f602de68479a1140b02d4338543070c51eb8bf4c79e0fb93a409bcd02785a1218f505c1db9936ca2e

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4424/procHistory.txt

MD5 1aca308647f6caae32d565dd397c6b07
SHA1 d437e45039bea6172ab049e7fb7d4694763e29ae
SHA256 07df5a97a745ff2975058b981b06472c32dcc8043b8fb16e061610410905af38
SHA512 4684a2e2b0c22cf14c146cf49d2b260555ecf41ea3d12282cbc5c1b894253495871ea82fc6aa34adcac7f99f7bb186f72bb3d8f69f508e49dab35049a2698caa

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configFile

MD5 fcf3e64380052c185ca460e4c99bd743
SHA1 750adba009a241fcaddce38f7b92eccbf2eee0f4
SHA256 446750907fa8d4cb816f60abd3947bb4d0e2c3d4f74148ece2fe6b7526d58141
SHA512 574ab44f25ee08028efcff8f5ca1b5ef603f44e5c807b0c38b45e18abbbebac565ed70671ac3900d7a2cc1c975de6c0d70246166cf37c27b89751deb835fec33

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid

MD5 23af373898c300ee3b499f5ebd409c57
SHA1 4fc400e3ae606e68a4a9b534b98090183ff145d7
SHA256 043bd9cb0302c5305ef150ff3be13c4f5571733213ad56800af12eabbb5c668e
SHA512 44fc855b04a1c1c554f661294644f20d5f15adb248a37cea0dcac773ca4d1f1c34b725fc2cdf537608588f3456e19262bd1ddf9f8c788fbb1d93649f1eaba7b6

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206277050-1731206277756.ctx2

MD5 52a9accfa979bb5170c97caa23d43c02
SHA1 032dca7a64129f7ea695315c2917dc22d212752c
SHA256 45d8cc3d5014728b798a30d8ec0176648fe067168161ecdc9d5cdba3fefe119a
SHA512 1393d1ffb18d2c292fe959f7128946297a1e327595c62b1de8500c5824cee3e501d990b15cab6baa2c2ee60f015bcaab25f79d95022b7f204a39f303c92ea826

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206277050-1731206277756.allData

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206277050-1731206277850.ctx2

MD5 997d567bc0671c6a14f96a17ce22e63e
SHA1 ddc51eb2694b2bd29502d8cc6ccd5bd7e2e21959
SHA256 a6f721e572c99b41afa4291c322cb0a0a986784218810b14f47aa993f3a7ddba
SHA512 3d1d43319cdb207ed638f4074a954ba92c49d53068fa81d6dae7b9e8c77beabf8bc71bf334b6e20a137abbae4982701821566bab52ecf816bdf08e2635d3fe24

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-10 02:34

Reported

2024-11-10 02:38

Platform

android-x64-20240624-en

Max time network

10s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-10 02:34

Reported

2024-11-10 02:43

Platform

android-x64-arm64-20240624-en

Max time kernel

7s

Max time network

346s

Command Line

com.zhiliaoapp.musically

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.zhiliaoapp.musically

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 142.250.187.228:443 tcp
GB 142.250.187.228:443 tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 172.217.16.234:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 mon-va.tiktokv.com udp
GB 71.18.45.193:443 mon-va.tiktokv.com tcp
US 1.1.1.1:53 reqhfg-cdn-settings.appsflyersdk.com udp
GB 18.245.158.212:443 reqhfg-cdn-settings.appsflyersdk.com tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 172.217.169.10:443 digitalassetlinks.googleapis.com tcp
GB 142.250.200.2:443 tcp
GB 142.250.187.234:443 digitalassetlinks.googleapis.com tcp
GB 142.250.187.227:443 tcp

Files

/system_ext/framework/androidx.window.sidecar.jar

MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

/proc/4726/timerslack_ns

MD5 d46bf94e9eb1d22281a71504685082ac
SHA1 e4e0629aef7425ba63e897bc471f8625de44edd3
SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
SHA512 68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86

anon_inode:[eventfd]

MD5 33cdeccccebe80329f1fdbee7f5874cb
SHA1 3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe
SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
SHA512 991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4679/cmd

MD5 50ef9f5a0f3fc24b6f0ffc8843167fe4
SHA1 cd9b2558bcf52078c64242e751017419651181d9
SHA256 47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104
SHA512 351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4679/app_start_time

MD5 d22c49d23f8149c8e8ef631a420e20e9
SHA1 4fdd53f31a1722a006c2c4897ac65066d6c2b3e5
SHA256 bd2708c2791515c7d431d53574e88b8396617f5ae96c9ad75360e36668fd9ae7
SHA512 5f8fdcdd140aed3a8a4bb1125e28405bcd3f7257549784559e20d4a8d3c5e5cd4368573d53cd4a39c9d50b272f43cc7933c9c5b5c8759b2f64fef587f502076f

/data/data/com.zhiliaoapp.musically/shared_prefs/key_language_sp_key.xml

MD5 fa22ee6bbe623af1507f03bd6d92fad3
SHA1 f7629ccf0ede95c044269c748a0a839d907d782e
SHA256 64b63ed9c08e7bc28931f6ebcaa1bb87da32a99089869a7ccf3b45408e893fb9
SHA512 a4f5dddcaa160763d414ac0990c33a15a2f1ac9a1713187f2f51422e8603a4fe3e1ad030a1f4c6fb5afcfd8986190f1d62f19f2550287e316c8fc42b695115f9

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4679/procHistory.txt

MD5 05eb2ba2f527ce8695725b0966e84e97
SHA1 57028c8fc80638f3fea05a958f886a8d224e9924
SHA256 7f3f890e7eca829b402fb0d58d673ee4598f56a9813f37d72fea08b4ea9258db
SHA512 d7181cbc04b5593663a854ea3692fd57a34453779e2be589ce276c0676f4d45c14a47f3cc1859f805a4eb3f16cf82eeb4110dcf52bfdaf7f10c5208a7e749a4d

socket:[75329]

MD5 f9b7c32a9efaf166a301db1baa991248
SHA1 b0030c1dd14b6f2b5b9fed4a4958780d82486959
SHA256 3b98db52e6cdccf92dd4af7729fdd808d70f7dd763e35fb7f92dd90a3def6c7b
SHA512 917567706bed0bbd3bff5b6b7b9a775dfe78e758439649383827e1ad97c99060b03e8cbd5c5beb77cee8cf9216dbb13b73d36bf13837c1a70d57dc7b06857f60

/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

MD5 d425d7eeaf35a1019f7a0993fd345cfc
SHA1 4dbe5bfbd2f8e6de4a422f43171d9cc40ba693a4
SHA256 a0e9921f28a40ec9502c67e592f1177e69c000ca3947bf0804b9d69099ed394e
SHA512 9b0bfec45ef9bd1d0dce3ba1bb2024f757eaddf13bed41b349aa44b905b361ddf5992be6e8b122ae37fabbbdae0a4f33edd960623f68d31947331aa8c0096fa2

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configFile

MD5 fcf3e64380052c185ca460e4c99bd743
SHA1 750adba009a241fcaddce38f7b92eccbf2eee0f4
SHA256 446750907fa8d4cb816f60abd3947bb4d0e2c3d4f74148ece2fe6b7526d58141
SHA512 574ab44f25ee08028efcff8f5ca1b5ef603f44e5c807b0c38b45e18abbbebac565ed70671ac3900d7a2cc1c975de6c0d70246166cf37c27b89751deb835fec33

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid

MD5 381f99746004599fcdc5a9a3e8c7e4d8
SHA1 46865551a889a898911147a95c645eed3fb4468b
SHA256 5879e2b1885704129f90285ea94c9435c446459bd3377741431c1eeb91e2f03d
SHA512 4eab5dcb74a6001eb8d9ce771f39516fb784cc4c0c672228193854e87ff54ecde42751f1b937ce96b8b2b1775a4a45c28fa2fc0bba5b8db5694afca3d239a33e

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206298919-1731206299658.ctx2

MD5 1166576e034164e06bb6d90be8825e50
SHA1 eb098713c6c43c2f8161884c12d0d6dc88ffb2d8
SHA256 2f4721912525c0fd0c1692c2232ad385e4b0f367e501f66321bacf3c3220d4cc
SHA512 e8e997315ca68b52d9dcd536f09faa354f9ad98d10478cbf48e96a286007ffb8c3e5fa8705386af9f4746e7fdf7bd81d68c7daab5d8f111ae437d90738148e41

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206298919-1731206299658.allData

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

MD5 b6ed0901101b4bd2b386543b7a9bcfcc
SHA1 c301a706aff933f8a494a740bd34dddbb9b7f635
SHA256 ba0107f1af2b0a4c8f949cec96ff044b939e46af6deea576fc3a244e65feec31
SHA512 c549f4864d5dbc956ad1f0b8ccc013cbab1e7a023fea5675d0750bf70c2a7451953da55bed56b76a2f7c380d39d337ed5df3a13d9617d8abdadb08e323e2f12a

Analysis: behavioral3

Detonation Overview

Submitted

2024-11-10 02:34

Reported

2024-11-10 02:39

Platform

android-33-x64-arm64-20240624-en

Max time kernel

60s

Max time network

101s

Command Line

com.zhiliaoapp.musically

Signatures

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Reads the content of photos stored on the user's device.

collection
Description Indicator Process Target
URI accessed for read content://media/external/images/media N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.zhiliaoapp.musically

Network

Country Destination Domain Proto
GB 216.58.201.100:443 udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
N/A 224.0.0.251:5353 udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 142.250.179.227:443 tcp
US 172.64.41.3:443 udp
GB 142.250.179.227:443 udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
US 1.1.1.1:53 mon-va.tiktokv.com udp
GB 139.177.227.225:443 mon-va.tiktokv.com tcp
GB 216.58.204.78:443 tcp
US 216.239.34.223:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
GB 216.58.201.100:443 udp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 172.217.16.234:443 remoteprovisioning.googleapis.com tcp
US 1.1.1.1:53 api-boot.tiktokv.com udp
GB 2.21.67.19:443 api-boot.tiktokv.com tcp
GB 2.21.67.19:443 api-boot.tiktokv.com tcp
GB 2.21.67.19:443 api-boot.tiktokv.com tcp
US 1.1.1.1:53 vcs-boot.tiktokv.com udp
US 1.1.1.1:53 reqhfg-cdn-settings.appsflyersdk.com udp
GB 18.245.158.28:443 reqhfg-cdn-settings.appsflyersdk.com tcp
GB 95.101.143.80:443 vcs-boot.tiktokv.com tcp
GB 2.21.67.19:443 api-boot.tiktokv.com tcp
US 1.1.1.1:53 cp-rp.tiktokv.com udp
US 1.1.1.1:53 mon-boot.tiktokv.com udp
GB 2.21.67.48:443 mon-boot.tiktokv.com tcp
US 1.1.1.1:53 log-boot.tiktokv.com udp
GB 88.221.134.49:443 cp-rp.tiktokv.com tcp
GB 88.221.134.49:443 cp-rp.tiktokv.com tcp
US 1.1.1.1:53 tnc-boot.tiktokv.com udp
GB 95.101.143.90:443 tnc-boot.tiktokv.com tcp
GB 2.21.67.33:443 log-boot.tiktokv.com tcp
GB 2.21.67.33:443 log-boot.tiktokv.com tcp
GB 216.58.204.78:443 android.apis.google.com udp
US 1.1.1.1:53 gecko-boot.tiktokv.com udp
GB 71.18.4.241:443 gecko-boot.tiktokv.com tcp
US 1.1.1.1:53 log16-normal-useast2a.tiktokv.com udp
GB 92.122.54.106:443 log16-normal-useast2a.tiktokv.com tcp
US 1.1.1.1:53 mon16-normal-useast5.tiktokv.us udp
US 104.77.153.56:443 mon16-normal-useast5.tiktokv.us tcp
US 1.1.1.1:53 p16-sign-sg.tiktokcdn.com udp
GB 88.221.134.106:443 p16-sign-sg.tiktokcdn.com tcp
US 1.1.1.1:53 mssdk16-normal-alisg.tiktokv.com udp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
US 1.1.1.1:53 api16-normal-c-alisg.tiktokv.com udp
US 1.1.1.1:53 libra-sg.tiktokv.com udp
GB 92.123.26.90:443 api16-normal-c-alisg.tiktokv.com tcp
GB 2.21.67.10:443 libra-sg.tiktokv.com tcp
US 1.1.1.1:53 api16-core-c-alisg.tiktokv.com udp
US 1.1.1.1:53 mon.tiktokv.com udp
GB 104.86.110.49:443 mon.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
US 1.1.1.1:53 log16-normal-alisg.tiktokv.com udp
GB 2.21.67.41:443 log16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
GB 92.122.54.96:443 mssdk16-normal-alisg.tiktokv.com tcp
US 1.1.1.1:53 gecko31-normal-alisg.tiktokv.com udp
US 1.1.1.1:53 bsync-sg.tiktokv.com udp
US 1.1.1.1:53 webcast16-normal-c-alisg.tiktokv.com udp
US 1.1.1.1:53 libra-va.tiktokv.com udp
GB 92.122.54.111:443 libra-va.tiktokv.com tcp
US 1.1.1.1:53 api16-core-c-alisg.tiktokv.com udp
GB 2.18.63.35:443 api16-core-c-alisg.tiktokv.com tcp
US 1.1.1.1:53 frontier.tiktokv.com udp
SG 71.18.255.146:443 frontier.tiktokv.com tcp

Files

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

anon_inode:[eventfd]

MD5 33cdeccccebe80329f1fdbee7f5874cb
SHA1 3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe
SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
SHA512 991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4528/cmd

MD5 50ef9f5a0f3fc24b6f0ffc8843167fe4
SHA1 cd9b2558bcf52078c64242e751017419651181d9
SHA256 47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104
SHA512 351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4528/app_start_time

MD5 ec890a559b48f26ed0fa42445f1e4ce1
SHA1 7e349d682bdb1b87c4572101f71a939a56997653
SHA256 9b078bdc14438d408b0e8252c4d8b0af8cbb93c2820e61cbe13ab96dec4d5dc1
SHA512 175479d418b3e610280fdd501b0cd286382b047787e8441360a01437de1781bf2c33aee1086e73e0f08e5c663afb618287111c1089059239ed668d5aa2100076

/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4528/procHistory.txt

MD5 c915f2b15687e79bee309951f5ba956a
SHA1 1f74b17c498813031e622207e0dbe407c230df41
SHA256 1ad434cd11dd111955a261e09f2461749b9f5bc2937ae9f63c083588b99145c9
SHA512 8f1a61774cefbb9f09a979218a8242baae9037398c237d276713848bef7714f83a6527caea7faa0cc5a2b80605b8e609214a0cbe767d1112e34a2e726ea217da

socket:[61106]

MD5 f9b7c32a9efaf166a301db1baa991248
SHA1 b0030c1dd14b6f2b5b9fed4a4958780d82486959
SHA256 3b98db52e6cdccf92dd4af7729fdd808d70f7dd763e35fb7f92dd90a3def6c7b
SHA512 917567706bed0bbd3bff5b6b7b9a775dfe78e758439649383827e1ad97c99060b03e8cbd5c5beb77cee8cf9216dbb13b73d36bf13837c1a70d57dc7b06857f60

/data/data/com.zhiliaoapp.musically/shared_prefs/key_language_sp_key.xml

MD5 fa22ee6bbe623af1507f03bd6d92fad3
SHA1 f7629ccf0ede95c044269c748a0a839d907d782e
SHA256 64b63ed9c08e7bc28931f6ebcaa1bb87da32a99089869a7ccf3b45408e893fb9
SHA512 a4f5dddcaa160763d414ac0990c33a15a2f1ac9a1713187f2f51422e8603a4fe3e1ad030a1f4c6fb5afcfd8986190f1d62f19f2550287e316c8fc42b695115f9

/data/data/com.zhiliaoapp.musically/shared_prefs/SP_EXPERIMENT_CACHE.xml

MD5 b63f0f4b33db794e21a8622e47d8ae23
SHA1 78a1caa4989222ad7d390be2b22b115a79869ba0
SHA256 70bc7085a1e1801522e300467a6ca5ced14eb16ee38ea5991fbbc209f7fba850
SHA512 bfca9bbff6a720bfa57620e8cf347422bf59aafa4961486273cbff9ac80e9c9204a546b7a4fdd8cfba9f5584aad1bab9b90b024f6e2cffd7d20f0d167af4a25c

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configFile

MD5 fcf3e64380052c185ca460e4c99bd743
SHA1 750adba009a241fcaddce38f7b92eccbf2eee0f4
SHA256 446750907fa8d4cb816f60abd3947bb4d0e2c3d4f74148ece2fe6b7526d58141
SHA512 574ab44f25ee08028efcff8f5ca1b5ef603f44e5c807b0c38b45e18abbbebac565ed70671ac3900d7a2cc1c975de6c0d70246166cf37c27b89751deb835fec33

/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid

MD5 c000c4599c62029df7b5a1d067992953
SHA1 90fcb0d317fc6e72385469037408903c01c0384b
SHA256 6ff78a95abb9fcc95f7c04126866ebe9e817d8e226b2c6db8f8c74ad98722e83
SHA512 7872aa8167f608b8653f14d57f3f7175fe813f867ff46e61706491948d064ce3642edd62a1994af2a4a22ce278edd427676c9c939a30f4909eac4d39a3232978

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206285418-1731206286569.ctx2

MD5 ecf1024cddf9b9cb7fcbeb9b3a56994b
SHA1 1553599ae11c0eb7c847deedcb6568d87c89dd5d
SHA256 376b373faee0b2daeda9ba2ea318bc26043c0d373e63df65957feeed5df8dfa0
SHA512 4535aa86ef6930b6acfc9869470b39a7cee945f7bb37bf7bea4e775540fa5eec20c3afc813e8f6da20368c1887aef4f830ebf1c030d63ffce5da64c14ac674ba

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206285418-1731206286569.allData

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

/data/data/com.zhiliaoapp.musically/shared_prefs/aweme-app.xml

MD5 02cbf9d34e6b2f4cbc32f272233e0be2
SHA1 0962ce277bd1028369193492dc71a1eaa01cea99
SHA256 080d0a4422b66349430de81fc78e429b4a2eba3871a9b587a6bba143a4e426de
SHA512 ab43fbb347340e8fc992e8a99f137d85e2f0cb8a7bdfbd773403a317db4e5c7e79b5a47dbac9a55190fd05daa70be0e1f0fca70146c35ce05923bef28e8104f9

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1731206285418-1731206286776.ctx2

MD5 563ab17af615957eb83e4c9e71c2161d
SHA1 9c9a0e7f3cfb286ce0a7397dc0461067283a2f69
SHA256 aeb1a5257e28f2fd5a63c790b2274735490d99ee0195eaa08b69600e61e026ad
SHA512 107fae7cbe583f73ebaaf44d2cc3d3bcbc2bb7b542cdc146aa11ea73545e7041f74ae65bf86541b7b00752ff4bb7e17dc5837b899131217dec5f903c42ca607b

/data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal

MD5 4061358341c864d6c9bf879cd40ceb21
SHA1 d8c1468494d5158cd740746d4a97cf073f534b55
SHA256 6b9b8d4a3692ad079361e1dc2694dddf7422a27bffa5a4801994b800f1909705
SHA512 9abba18858d36637d68cc33c80c789cded4dcc06f3fc5bc4b0787fc06a45696026c65f94feb208083ae1a7d453db6f52e28585875c885bbee6a6574b66a9eba5

/data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events

MD5 40de7e1cbf717236fad8f6f911194a2d
SHA1 827f4b5c4f77fbd7aa3ce9c2b20980349811b83b
SHA256 1f1d8a368072c79c308dca3543b848a08865752e4020d72f83fddef4534c886d
SHA512 5640eab2f344467fe05c3d72f4e95c8b71115b815aab13df42e7a8561fff51ad75dcc34fa2ab2cfdf2854ae8e07dc3421e33c58ab49dd0a74641f00cb619a3eb

/data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal

MD5 d424aee3584da85f41bd77b2889a6c30
SHA1 a913ba17458b4e0b81039450d20d1a09e395be68
SHA256 e3a61d5588439ae8d525f8167b1750d98e8c10ba2b67abf25df4cf422e0b8086
SHA512 1c9c9dd4171605020839abc02d63f7734f1b7e6faf469b2e20fd1d4a77cf304876bdf8219eea69d0bacd787ed1d5e83a379c0d08fd0b7f8b29f864115761458d

/data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal

MD5 33fca43b3cebcfd02502cae424465cd1
SHA1 81aaed5e05a57197dd19f15713091285c3815ebc
SHA256 18b4ce776e9e7ab6657cbce24fd1867204c6ed58d54111cb73fcb96f2b993d5f
SHA512 3328ee3e3a5294573055816ff3634954c9bcafff40bde9ec6b27e43ff67a1ecd3d14aa22c2954b9403bf5974e0ef25dae00670dea9bcac2ad080dcc3eb57fb9a

/data/data/com.zhiliaoapp.musically/databases/verifystorage.db

MD5 99ba8f17bd00714beedfdcde9c7d5ba7
SHA1 bf46e27cc62cda79699855a6e67b88582c1c93b9
SHA256 3d619857185586c9440dbce3b08da7870196e704b64efc4145dc4f5df4bca5ab
SHA512 799b1f98229fdf6df24bcc444c1f0f36162f153599c7fe1830cf3eac4c9b45753b17480fb67d6a3c2f55faafa1c803d106f2f938b8a0d4dfe9273f8649d811a2

/data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal

MD5 6fda1daa26d84a71f2c7eee31931c357
SHA1 58c49fdddab7b16297d8706855df65fcc543d0bd
SHA256 2f2c8e0c3284fafcb9d184e69821b4242654f7fef1909189ddafad0a120d4d71
SHA512 6f8ad18f1fdd830bbffb5a3cbcdc82a09b9763471d368e86344f82610b4554480bea34d15c7a9f8528d03152c75314a88a194b781d7a0037fe708d3c14f28dc0

/data/data/com.zhiliaoapp.musically/files/PersistedInstallation1838670653792678018tmp

MD5 6cad4fbb52ec35fba84dd94fd901e633
SHA1 2878d1847c3f6262e2d74b40ac686dd6d881eb63
SHA256 ab8cc8531202f706c5c2e0bce45f62c96b1e323fdcf8ceca6ce37bb5a43b861e
SHA512 2b769bf2d883753482f885174be5b48615993d486a17a55c7ee5a7385b58d0132476d14c8010809a5c7ca8587c832443c0813804f3c687302da534ecd39bb9e3

/data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal

MD5 7557dfb704f597e6957e612d62e3adde
SHA1 8cfde623d2914e2a52f373367ef24023d04430b4
SHA256 abc30fd287e1525e6f4e3a92a6ccc6ee69bde4ab3d6e70c44d2ea8951bee06c5
SHA512 a071f7e1c7a1826fe28d44f9e6876527727f1a8593f1998e10868d12e3143621bf25deffb423924bb2c6bb0597377ace78987a4c9defa160cd795176fbc775ee

/data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal

MD5 cbf67de386d7ec02f2840506d6004a77
SHA1 f705456b7a4fb42a1e3ec828021e322cc10b0084
SHA256 9938d9d64983a70f4be280690e2c9977a31d1d4f11d42f153d2c2771fc5a5a00
SHA512 252929cedf694c1e9122e6ea38687dae65af94afe09bfafed27cf1739f6f07408cfaacf46f76dca026d9c037d515fc5a4efaf254350432df53773f7149de23b0

/data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies-journal

MD5 3d511d66d4f89e297b3c7e361c041a47
SHA1 f9b00f186cf079c426c8de131c6d3d20da624b18
SHA256 25554fa9a20a3a396d2ed061c1bbaf4995b9328ba989c40d08b2ec86b4e1eb3e
SHA512 7ea75d390503bafb8990b55e0d2f79bc1762a91e1192e1e96f4d212c0d824e6ed9078d65d35c417fb5d52789a680e3a0795414ed1a12d6f5ac2c259d2e75a064

/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

MD5 bd9614a5c209290905f2d79199ac0027
SHA1 fdb88a79b98dfa352bdf8ec7f09a247b7da504d7
SHA256 ba72aae9f43255dba310ba41596e6941aa35b54e549ddd984d75150c9994345d
SHA512 f32052ab78a76a478f3b922bf9302af8296279535e3d8c61f953cde449cc00e82aa6385abd2019f58b86043ebb2f05d7c51ede1e3e9ef45fef5b9ed8efa3f07e

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 b90a57c2bed3d892b6ab4865bd555c16
SHA1 1c1e0b25119670ac14d73b8b4acdd4ceb0f244af
SHA256 7241cd4b714035fb84c2debadc064a0b39f4f31b469fe4b0268193e094a86a49
SHA512 f93aacf2335e4343e6409334b78251087d50ec8ac469901fea0275800eb93a04263c6ac60cd99f348e8c9cb934be0e7489d25191eb3f6f503cae0c9727a99410

/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

MD5 923d4bcd6b48e220f7d4159ac75228f6
SHA1 4c9ec3efeee5051b4527bfbfb88f99c4cc6df06b
SHA256 7f817bd35f242f175065168f9774989e15b7a39d9f2587e70ce5be23c93dec64
SHA512 888470b59fd9565dd67ac5c6c35fc45b4a9194b6e01538e654ad5245728e6a107f5400b49aca2065543a131f9dadf02cf04828616dcbf1643d1d5058be25f411

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db

MD5 3586ccb98763e0aaa89180f60c573659
SHA1 253ca4ba50699317f9c60f89971dc9722a9d4c13
SHA256 702ab76ff476c4f2a5dcfd7c449bb5fc1dfea01d3f1923efaa3f00977857c805
SHA512 4839fb1855618416f4ab02fa366a54406ab239c2b2f954613756acdcbeef5f13bb548ac1c7907bc3b78769e8df850ada9367ce07e5257f140179918a3f740b66

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 a4bc1d6984b398dafca2144a22d3b3c3
SHA1 b379dbb8748ee917f9b3bbb43cd99020878dc7ed
SHA256 cd477247254709b51db0d1887822d99e9f01f6abcd2a2a67f965cc532cf38232
SHA512 0c283e01d7301a97f2dbc13c6237b84739dc5965c2759e336a52fa2a64406895d12fed25f65c506966879c28262ceca4e2ad1598095966cfe2e825dc417e411d

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 03c0a1bb3e2e91da2afc7f229623613d
SHA1 c126e242d504b42028a33c0204b9990e2d3f2d33
SHA256 cd094781fed1b6ab7b63870dfde3d01b66fd017c98af8e52c73f1c28e48f2c79
SHA512 67d554f3d47f8813101072aa3598b3e8e2564cfcc98de9d3962e40dbc4593f016fbea67b94d61a1c8c86673789341e832e3c2dff198b9e10e0ac4983ffcf8e02

/data/data/com.zhiliaoapp.musically/files/PersistedInstallation5301254621012235934tmp

MD5 b7854a5d2c5e79e775190972c54daa3b
SHA1 5d9057e4a24bbea85e6e2202496c56661b9bb6ce
SHA256 a3dd54bcdea405244131313c467191b4f13bff92d8e3487b6d8321314521005a
SHA512 1719e01cc6a22e389547433e8c40334d9d277c4c282b79a54a19143d4d8a36d69f32d081d78d5d4b71c05c77d8cb04bd604e9d48fc9f1b7f7a4dd839c1667118

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 a59334ef1ebc7b36ee34daa01c1eb290
SHA1 2d7446035ad933202f8b0ab08c6749ccbc8a2b8c
SHA256 81eef6a1a5a3ffafb20d970454d586bffe8bcb20a846a9298c2fb266e5fdc308
SHA512 5ba14b821e28206d582fb458628b53dde7c4aecea9bd4c0082ed627e0b6ba0035f8a9d3fdd684a653b046d9426e867c8190fbfae6b341a9ceeaf709afd733255

socket:[62851]

MD5 fdea467670aae025588f6ac6daafe871
SHA1 bb035f398d58bec766bdfeace9a88616478fd0a7
SHA256 f7f36d459732941005800332578f9f07e96e6f81c503768a046845a7f8b11a28
SHA512 2f1b8738c49ea5281ddb1e0d92f61b35605a67fe7ba23beb1ae28be84f6effd285dc085347e3dab00ff24cfaabff8ab094e5bcbaa15660602a7af1ce4fe3cc4f

/data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal

MD5 eb019ce7411c47f37655b1ff698b6809
SHA1 7951643e067da04ed38c35e3a384a5479b94877b
SHA256 b9e85d17b98ecd15f086c4d277c253a79df9682458c436e4987704d100075030
SHA512 b829a457a8a3a56f678ad43cda9d1c06ef267057239b53d9fea9cf2feb00aac02982b7db04c5861d4a315078464f6d9b74ad22bddc85fb63e9eb209bb0d04df4

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 6bb7de74ff62e26e8593d66e694d791e
SHA1 6872b7b1a133f17bf4765dff18f036cb85c0c79d
SHA256 7f7eecaf4f3f2d4ea0043f1a6fbb5a3ad4bf397fcad2a92d5727d30e10fe46c8
SHA512 58e71fac77ff63996f1f2fa6db431e1900522c47921e15b019a1b5d63e3f808157c917dc8352a7af9f7986edc3b6732378cea719f7e5a0c64687ee61da9444d2

/data/data/com.zhiliaoapp.musically/databases/ss_app_log.db-journal

MD5 2893dfe9154fa09414d4600e3c8bc65b
SHA1 bb448e31d7f5170a5edae2ccf12b98d8e91cb80a
SHA256 3a1c56e5d378fc9dd9420fc95cee8c5cb12bfe4251dbf157bce1f9cf3b631885
SHA512 8623b0d8c8b323d321719a667d99a000b0fcf2027e79ea9f5beac0bae016b4bb2eaaca167dd01284f4bb4c5f933be3631f6f66b0c117140ebd41ae9323a3efe1

/data/data/com.zhiliaoapp.musically/shared_prefs/applog_stats.xml

MD5 82dcd705bb27d98e413179badf4e6410
SHA1 ba417baabe6b80bd5f7a7c216d2e3d7c5bb169b2
SHA256 c36d42d6122639d32bf9b8f1448bf7eba21f50c84b5dc4c9a84048ac2ce0de22
SHA512 1504c254f781f2d2dc138bf741880539813b1db39c964cb743492c46cbc0fe401050c5402d6019cb0e13cbc0ce04244e1d523a982cbffaecd4b9b051fa3b35cf

/storage/emulated/0/Android/data/com.zhiliaoapp.musically/cache/picture/fresco_cache/v2.ols100.1/63/NbSCgoL6RjjLTn10EmbG8VOGb0k.7627965473457440489.tmp

MD5 958baaedcab06a3edb9852d28a03ba4e
SHA1 f7ee97ec6579692b513d4cdb4217e4123b3143a8
SHA256 5fe465476ae6ec07a7e5a42c1e3bffeecefd2275bb4ac63135ad569c0514e35f
SHA512 b4538a956c5b7e1e9d593f36964981405dacc9bb05b69f5c391670a01c432879a399254ca796e06874a390cc4e6d0b74426749ffc226a83ad35b3ed7396db763

/storage/emulated/0/Android/data/com.zhiliaoapp.musically/cache/picture/fresco_cache/v2.ols100.1/81/_nQnMOedm9kVYbSkR0OuYu94ooM.4360437808276267651.tmp

MD5 fc1f276b14bc2b2c0913cda4badb7169
SHA1 7b04cc802c8521aed3535cd1f95ce5f892bd9c03
SHA256 aad8c4168599f3bc613caa1ff7e6e911681705cc8d26b982ecd02e3094297498
SHA512 41d8e6d134c2db6feb461b9cec398aa9541d561ed00e8d9fca29d21b26f1d95c15a12a2ff76ee0f8176fb763844a57ac3e57e73ac14f97d4b4c28671fc18478f

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal

MD5 d05f87698adef3a62ce75a6a0b9058fe
SHA1 9fab4ccbc6a1ec0d46df1390f42ffdf22030fade
SHA256 051364976023244e54a4027f22605772476f09c919fe4003a01b4673c5c40eae
SHA512 3b6be5b5bce648d52616079b82fd5ad4237e10e2d0ce59ca7912e1c34e662cce51a5f535502a60e2ca1a466522983bf3495912eefb78e79709df230e45e22f4b

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db

MD5 da4c81d9a032121236a4ed034c0cc9d9
SHA1 6ea1d3d14a34c4dbe056fc4380747d3970cb3498
SHA256 30b7dde5771b5ef3cb6cd033fa2b1618a0674f41f47c1441855f3da24887a0ff
SHA512 e61d8e6af3d48cc6e95e34568209bc24308db9d751dd1451538907df0e7caa67e329c4615911b0c6614275f3e5cfb2a8a38288f5818487c5d292c18dd857849f

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal

MD5 0d16e4a3bd6bd9eade3f603d6b7db998
SHA1 6fd4da130de337b05cfc092751f060e3ec0149bf
SHA256 88d4f5313b13f5bc2b68dc0a638dddd3e335084e408493df4744291da1fb5e38
SHA512 af88ee29aeb2cb4c852af28262ff27186f993f6757293ba61f604eb11c0c009d3d03f20cce7c04de94649bce6a431237c9a9361914c0634510142e05d3fcce87

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal

MD5 c179ae501a24bf71fc4afe374b725833
SHA1 3aa38bf6650145d7913d2a44a7b256ec15f2d512
SHA256 af6f289ed5b5edd18b4d1e2891212aa983764a883bf429b6806fad12e07a6053
SHA512 f23277f134c793832e094d4d6111181012505b43761c32d1aa6a749c4fede30113bbf4cfb94f4fe3f0b55f154d190805963a934061d256c7a58e6766665bd1e7

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal

MD5 7d28a51b62174450c5529a82003dfc9d
SHA1 9891b97396252bbe512767855f9a164c8806c3fe
SHA256 4e8eebc5773ed3874e983be58a0e8cba58d9e4c6dae597310211bf90b83e1c7d
SHA512 b876e8e235cec5ccded0e1dc8e49a957172db995cee4613680c391064b0067986300a1a688e830e3f8c7200abeb3724c20bd9756a7d3e620b817a0f965226b1b

/data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal

MD5 3d3001fc5050c14855130daf578e35a1
SHA1 8e965a6b2f454ed97c7bedb1432386f31c9b5187
SHA256 58b6c6d29f5846c5cbbb673c4dfed74c570b4108c43bdb4eeb60b700f9ac2f9e
SHA512 5dd28c63260e72c7aefe65c02f64473efe47fd0c52519d7f2b302db024437d9ddc5c2ab4b31f2dd3711206c49bf535cd990250aeafd48de414f2dbb2819c69bf

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/did

MD5 fd3070645b5b4887378a92c82b95df61
SHA1 ae8cd8df94cd89c0984b952bce397516d0fbdb49
SHA256 d3067034fffcb1dfdca92fc93e9b4314e66fba18fc1e02730b8cb3927fbb76b7
SHA512 c85ebd6dd40e240c5939d7c3f7902038c4064d29d13d084331e476cf6af2190252cec5853c925833a9c20992d9b73294c6a554dc8c0ca0c532ea7b00e8d4d05f

/data/data/com.zhiliaoapp.musically/databases/bd_sync_sdk_v2.db-journal

MD5 b12b4bb6eb64416ec0d3c02d396367ff
SHA1 e24adbc9797beb9974ff5580a47a4c0d68a5069b
SHA256 0c5ef38a492718f5a5fd0b010f278dbb8e7190742dfd3f58adc6956242620f35
SHA512 ef0c2b7be67f82fdae70656201b317df9c642f84b625bbe78018284836f30da2e95101a42e205da7136f00dbc4afa0204106eeb3326c6c6196d110c626aff31b

/data/data/com.zhiliaoapp.musically/databases/bd_sync_sdk_v2.db

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/com.zhiliaoapp.musically/databases/bd_sync_sdk_v2.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.zhiliaoapp.musically/databases/bd_sync_sdk_v2.db-wal

MD5 ca0385726af9e85486b35d404e5a19a6
SHA1 5ceeb31e77f5cf6ddca117b62b7b910acf1b0d46
SHA256 0f8c0abf12b35d6fc60bc202d6f3b6947860b60c58be81a9383d3f3fc4ee4ee3
SHA512 fb5eedf2db113fd4ec0ae05e8cde999fc2e2d3b873a083e05a068f54e1fb96cda1c0370d300ede188082c2193688628d88a3794467c1952ee2315c17231ca7de

/data/data/com.zhiliaoapp.musically/databases/bd_sync_sdk_v2.db-wal

MD5 cb6abc4f3fca9019364e95895315d9ea
SHA1 d591627a7cbd8a661a523aa5cb4d4f3078accde5
SHA256 4d16b2568cb6fa89a3c902cac9920442589ebd6b4660b825ec66066a2e87c817
SHA512 78ddd77860a50b2c2bc53e58cc25c1c7c695ac3d95e0d83ca9637b07f5c361eac7d33c51db976c61c25d248279c79f83f5dde8eb4c3d46b20640cdb0824cbfbc

/data/data/com.zhiliaoapp.musically/files/.msm_cache/.mast

MD5 c4366c8a65116a8ad4782fa6fd7c13ab
SHA1 de4e134555ca2a66c2eb1086585bf86cf50c65df
SHA256 28dbbd1448afbb0f8123147958a8fa9678f9c315589b0f2aedd2e18059c81b28
SHA512 0f46981ac896cfe0662856b6b91b4b1eb892ba3f83886c855bc6dab01d38d6c2e038da99ba5d9a80f4404ceb45541173aec172141900361bafb63b062e34d29d

/data/data/com.zhiliaoapp.musically/shared_prefs/splash_ad_sp.xml

MD5 e54f59481ee330ec531f9d4df89a16b5
SHA1 366c3b09394601649a6846309fcbf85e035a1e11
SHA256 d6a1da7ddc1c810b8aa1bd95d21c5e4873438ee0c23a05aeb035bc2c59466d50
SHA512 6efa27b705417117efb029cadfe3925fef1a69608db4af8f84c3c738efec7b41bac8e93ef39aed894b4f7ce87c8095df9a7c6efe255aa5c779789ecac8eacf09

/data/data/com.zhiliaoapp.musically/databases/aweme.db-journal

MD5 3989ba4767fb38fc38bea0bd1fd51ae3
SHA1 32f0abf8d09706380019b0229d6c8bac4dcc9515
SHA256 0229cb3a3bae2d47fced682e53b65b1dbf43161f552d76c7e432073af6736d23
SHA512 831e8ab3c981b6255755f7b33e38dd1620a0fa9bf3bfa347f09239d475b76c0aed642f16f1a1329af5ac84d665812782d2f4f12e412206d8e9b96331ab28c1ec

/data/data/com.zhiliaoapp.musically/databases/aweme.db

MD5 d59ed211579bc9f7316bc6747161a818
SHA1 a036a692e1fbaed43bc0f21ff86610674cfd813e
SHA256 b9a13b85b84d27bdf6178bb730b083b5e93dd1f3e3bede6b2a497942ab4ed8b7
SHA512 706df4df11edfdb3c22c7963f9edc64d26633f619365894cc270505d0b54cbb1660c0162988d562cfe935df6865c4d166a3a97d82321651fe1544bc4c581918a

/data/data/com.zhiliaoapp.musically/databases/aweme.db-journal

MD5 8afe63767e4739aeb416f9ea324f8e5b
SHA1 7fe7eb69387836c41ca695ee9c83df91f4892b15
SHA256 be5fe1eaa1a291a77b92e9a4f443c1fc7f298cee5f6360be1247d81a05c4222d
SHA512 0272085cbc69762fbbf9c3c37546c70bf378f7a7db7e1ab923d252767591e5a7797c7d9c119937578d39b1cb1f71893b4f9391fc406f199a2548e0107e61a253

/data/data/com.zhiliaoapp.musically/databases/aweme.db-journal

MD5 f1d8a2f7a720848cfc782c2649036f88
SHA1 70a4d593115464fa7db5630bded3016e136e3d13
SHA256 d98c5b72c18445a52005df4a6776d8ce16a98a1a63d5bc6555857ce67a826994
SHA512 768de8d9913328c5e63dd89bbfd37757418b51d8e6f1de8786524a59121583dc5a04c728bd76db5084fa51367d5e6111265f7c6cfc87469dc010514ede57e3f4

/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

MD5 723bb759dddf27cd3284b746a5a52957
SHA1 32caf6604822941c60ce9018aba1d9cbaaa27409
SHA256 ed05816213a47cddfbe9f3581ce1e35c0117656120a3cdcd06583f09c0a8d93d
SHA512 02189d1f3419ae043d38f87b435f2c59e9d1d1b13b393e9995bdae267ef939da49ceadcd927eebcf33ba41c5ec827d374c59c21dcf238d64c46a50f06797380c

/proc/4528/task/5329/comm

MD5 fe8ea9fd2f39bf91b566c768acd627ae
SHA1 c2affc807a55d719968d63c4d450fe893dc1dcb3
SHA256 79c62779c59b884b90c8c53dff6f7c8ebcfb10e444dc1c66fa268a3395eaa63e
SHA512 55ed6a3a0295328d3f8ed43e87d97077ac7e64787974caa02fc66780d0b17ae312efb0e9e095c6d4fa27725f8e1c841aaaa37c4dc7d0273f9cc8d04a807936c7

/data/data/com.zhiliaoapp.musically/databases/bytebench_db-journal

MD5 38b1d76837e8d59fa9826d05b8c57f6e
SHA1 295454b96ae9f874375fa2787668e7f7250b3390
SHA256 2ef4e9327fea0b6f3729fade02673ad8cf3aeeab4fbd1ba7f2acce98941c5263
SHA512 4fdab04528d00a916ad16e6d0008e2a37ca6ca4dcfb68734c4f0850b7070b739c4a33f317a9f250039977fc405c680803a1e30d093c4cf068c113d9884feab6c

/data/data/com.zhiliaoapp.musically/databases/bytebench_db

MD5 b993df2caa25deb652f74fc72dcc529a
SHA1 d55247321ea653420ebb6a6894360adb83bb6dc5
SHA256 2c8c0baefc3f50839fc0ccb8b18d0ebaa3b89614e501ee14e4f4a524a9692c52
SHA512 7949f270aca0971996d8ff4aada835ad03df1572d4292ca50f7d234a82dffaa482cb9db9d233e6489f978839f3ad0bc9f2bc2e67d2ae785c1570f4f39b0e806e

/data/data/com.zhiliaoapp.musically/databases/bytebench_db-journal

MD5 05dcddcb990a2bb7573e966ac92db162
SHA1 c92f2c33b7c1150560d792859f5cb448cd87776b
SHA256 a05e457b654799d98cafafca63435fde98bbba18282cddba2bc0c8a7d155f2da
SHA512 cb26b91edf354fcf7d0905948b515a9f7ad408694573d6db8373fe6127b7f010d55557e0ef158add31a229b0a335949405ec273a5e5914c66227b7a768fcc281

/data/data/com.zhiliaoapp.musically/databases/bytebench_db-journal

MD5 1c057938203574104ce4a1409b823653
SHA1 4056d2c007c1512772002dd3b60e5fc0c6fd8819
SHA256 233c2bde711baba444d86d2920c0065d5ccf060adeff0dcb2835baf4df7ea348
SHA512 056c18c33fa27c9b5dd6d6e57f6656fea858d873614934f81efda0f952a1e91f78feb23426cd5cd91b9e1931b79db5bce597112ca1db7bb8e70f03dcc14af850

socket:[60257]

MD5 36e11f65f35f2996938ac479df4add43
SHA1 05ec072abe1619585378bce197dadf99af4e6e1a
SHA256 a74c336c3409bab4ca82ed4a8622ca69b9d4aa632e3524e0c5cb9babf1849e53
SHA512 1c63aeb7b17602095cfdd678150fa2cf43d9102d29b00fc895ac32ee42c5a0e77cc72d8c31838ac23f2a120b41c9ca143dfd1a4628d67a45ab6902b3a0de2ba1

/data/data/com.zhiliaoapp.musically/files/effectmodel/journal.tmp

MD5 8c8bcb7d36cb5a71729c00c4e7f2d330
SHA1 a352667c61dc45f43cae74a7102fa692fba98d3e
SHA256 fddce724f39edc9ae1df4f8920e512cfd0fe3a9017b32031f1ca0e9ec06a1150
SHA512 4589f9c835a12ddaa04617822b93aba809aa85b392dc8596d47368a31648c542a0eb96643ca3a8d21d31aa1a790580a3258afdc3d202d31c5a324a4b591ccb62

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/event.lua

MD5 f332139efa7efba13638e6ae7821af45
SHA1 fd5afe17d997238fabe2605412e4930585b3ee45
SHA256 4fe55ba81f4a63ba9eff00f16df0af507a228655c27507a09fb3340965586a1a
SHA512 dc81fc806b8428a4966bf05b9339ef71df2dcb025298e376e505b9e7a59308253f9c8d5a1f797c461123978c3f49eadf7ca26b6fda164bcbf4f1cbffd2a1a58e

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/config.json

MD5 f8d041457ccfc6485ca8409037669bbe
SHA1 dc3e2e9b8f507074ff58f2aff55503d7122defdc
SHA256 83b0986d37b155f3423341b9c239eb7bcc1b4c8fb8754943d40c9719f9ade127
SHA512 688d98548c0d694d69dd3d92c1a3f731a9dec33c4badbf8d0e46f8137677acd52ec345e21ec4f5c71c2c8ab615646b067820b26b98a94cfaa0ca03b212323162

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/mesh/Quad.mesh

MD5 74999987051172b699ca89a0a8c5ba2e
SHA1 696cc6488d9ae2e99fd79574a116258d8bfbf40b
SHA256 f369b123ee8bf09a0b71a5afde8a3ccc24041c6411d01a1c3b24f54d83862d42
SHA512 59ea099f0edce433aaab640508802f9ed4a25f9169135cd3f70157508770b545fc131adfdffe18200c5862e2374bc435eafc38cfaf4fc060b488af59cf28fb16

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/content.json

MD5 abe4a98d76be9c14a6eb470b38c8e85c
SHA1 5b0f4eaa92366b9963381c4c191d2bc4aedcd2d9
SHA256 11bacd9d91bca583701e58cac37b5e1be99f2e369c92a1e3f8a042fc38b8b495
SHA512 1595e16d04de69cbb13d547cc4a812eb84455e9bb96f955c97ef6614b7dcd354bdf8b00aa48a2527f291036ee349d01dfe07d75bec8cf273d68919be1a3ee3fc

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/scene.config

MD5 23a75b757db6b1a094ba73d624101b7a
SHA1 9a922c9294d6f1856911b84d7f376e903164855a
SHA256 e9315ca9b675cb8c0ad8615d5f4eb5e2755dd9a7c681da5e73faf3a36af1596c
SHA512 f6543e9bdb8a445831f486188e347eea83df71558f97051beb9d297bf4685bed2348c991a6722da48d4d19452409558ca25fac535b1c90363e16f31fbe6aff9e

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/sticker.config

MD5 65e7a4bc80301322f5a3ab439af05359
SHA1 2de828bb99d20bcdfa84a3025e564097ba1960d0
SHA256 645ffe4167c84a2cd3d9571692f45f33bedb9363a5ec88c5a170e849d273f8d2
SHA512 5e10a25ddf49cc8875af4b0b108a3b88b9e39d9aa62cee672b03f80699e2125f6c4bc033983660ce0c8ac175f40d4e01233b3c838a718a566e533a971f34982c

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/js/filter.js

MD5 87a2b441c971a1410688183245e77770
SHA1 5f2f73041ec55eff909becaa80af431d2ea4f091
SHA256 72ddd227efb6ebc22f91d27f80c861c9a7da2b5db5062a08d7f49f664fb1c5f7
SHA512 6605fe898c9a597a21719c2c6c5e82a114356da78b574d131bb2dd0cc8c339a3dac78a3105eff415c0624325cd3a5e39d8438bb48f5ad4f53d85bf1ee44a7882

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/xshader/filter.frag

MD5 db261b3c9fdc4157610df3d3835ab12f
SHA1 c82059b11e75c5dc26206879035d09a91a36cd7a
SHA256 ffd7b71cde07d4790ba55c34e6bf5f7dba11fef26388779c36881aa94d22f897
SHA512 4e3293b07d16eaedde9ea504d89b29a9d8382f287723508483d5f30cc228f50ff9e1ca8854694df6dc55b35299d4dbd35f591d5f09caf164f473d6309cafa317

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/xshader/filter.vert

MD5 99a9bb3edd2f1ae4d7ebce93839b258f
SHA1 79b0c16752c1d42d126405412329b6ab655f5913
SHA256 c2c2bac60a35213dfbb789e8c8447279c0dd694406ac42ced79ccb9690b6d75e
SHA512 358649c009e42c9f3d7e6b4c04e216a4876a868d19891ca995df6d0491bd0eb752c542159933b7b4712b6e4e25966048bca3d480608f9767e4c95571e76fa871

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/xshader/Filter.xshader

MD5 80c8843e606e5d316b6ef65b32ee72b4
SHA1 8e581557f915e3810f15852c8c5e3c33fccefc3e
SHA256 35ac36d9e5f33e3182e3c8e8ee01c30fd5b34ed547a3e3f0a1a39b343f7b5b51
SHA512 3cf264ce0df4525e3ebfa36460b210821346eb28a3920b8cfcc5385fa23f45d71258f3e4277763998647ca06af9fa4aff60eaf1e564889eae044c6fc236c8ffd

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/rt/outputTex.rt

MD5 702554bb1176445daf255fd35f17a94b
SHA1 e72db4514d00aaf050cb2f052c4eef398ebece0c
SHA256 e27269229ebfc67e6acfa1710d63c6541b579458bf95e01e46182b5193de88a0
SHA512 debf48f454a92c727068865d1c612299bbc1ffe17a802ec1f0a1313c405b0dcb04333eb18ccc6c09600b1c8ff3957055a7a43733daa9541016b2fadef19e8893

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/image/lut.png

MD5 85c71ad5d9c41c8e95a66cbd0854a25b
SHA1 661fa16be6cb6b72673e20379e04ae1393c6e7a6
SHA256 308e737a9fedf343ad38a33c16d1a40a86919f94ad365e0eb84c4b0f93768961
SHA512 0e06cc432e2fd912d6e3aa765912d1b24ba1314b3b8ca00c83160647409c0b1affd6e790dcc055a5c025d2dc52220b4535e0c7a1b7ff9384b69cd37d9bd97476

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/image/lut.png.meta

MD5 3d0138acf778128b81817a8c0f9319e2
SHA1 1f3892342ddc537609771e4c9588a75d8bbb731e
SHA256 cec6bda5ff2b21d73cf89e3f3b0af8b8c1316b677e089b5076b638b47682d582
SHA512 187f1ff5ca3902a10b6fc2305ca569d744497555d5130f346d6c4f844e69cd239077c5274e5e0aa5a9ee341ceac70112cad614f6d4dda485bd56171a978ac496

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/lua/filter.lua

MD5 29851b8df1c8f296e949f2377aa66a13
SHA1 7ad5946591c7dd5c2f020e6f7de9b054288c8755
SHA256 365e1b453e74bb216dede626eeaabcf936598e28863dee6ab5dfce425638e949
SHA512 c54bdfd8e690c5a4436b542705ac04b2b49b5ce6e13e9ce7bb8fa33c2acba5b8bd4d8692e8f12dcbde275406e166ecd7b458a964a0491eb02a13b5e9408cdd9f

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/main.scene

MD5 3602d3014ae24b6f90f27938b4dc2da9
SHA1 21259a5023ce4887370be7c9176141436c863aef
SHA256 fda57139309c47a7678da9e0302f874ed248d35440daed299f658b66ef60dff7
SHA512 1f65f3bfc93658e62c7430cdc1e0bde56509c4a5eb473014a295ab76fb712c7ac7e19e9bb3eab5a1464a0d86a52315d1042642f8af0603daad778c9f93826a3f

/data/data/com.zhiliaoapp.musically/files/filters/Filter_00/filters/Filter_00/AmazingFeature/material/Filter.material

MD5 2a01b4853991170d0a773cd25bdd319e
SHA1 7cbad2e9f53b3e3c7db6eb7d5591b1e532757519
SHA256 9045e02d0f40d09cd76189853773e1a46cf2f8e19ab797e1e2a774c6593f8734
SHA512 835b5b52f9bd40a66a2efcf2aa96238006d035645d538e40947fa01679445bc3fbc83998734de20c428957b99a2f0d29429c8cdaea564800d6b1d19747d162c2

/data/data/com.zhiliaoapp.musically/databases/aweme_record-journal

MD5 58e18e45ac300f20aeb48db32f307036
SHA1 1dded55e0a38eb180b34813dfce9dfc5e33169b3
SHA256 7832c07f209a780eca8bc6fb2dd2f311c37224ef32c23eaf2a24bdd241aeef0d
SHA512 aa341ad37df1c045d6d1ca08f3611f752810de30a7ee587029e8c05a37782a44c15189d289f751719ee3a5e418c0910a3e77680ac2cb2675ccd2c8c1b2853a71

/data/data/com.zhiliaoapp.musically/databases/aweme_record-wal

MD5 0333b0c2762d5af6bc90b500ef872f10
SHA1 ba463bc3342e36958861e3b9293277dc165b49ac
SHA256 1e12bdcafce6a5a26bfd1f94f07e2abe14ad9af60cf9f6fa6bd3fe7aa2693b41
SHA512 a2c06dd4369b027194d79a076523c001ea865f0baa20e85a3e4e96f0e8bf5e82b00ab1f6827983bd379993b46d23e617ef482b3b89a530b5519c5820795088b7

/data/data/com.zhiliaoapp.musically/databases/aweme_record-wal

MD5 78dfb0e5899b48e9b76a0f8ffc8d057a
SHA1 d00495850c65b81252429f60d74a67360825a269
SHA256 fbeda239807eb2734ef235f7284c89743aa1857d8ca4d67957f5fde7e18b55b5
SHA512 091fc3894ee795ca8194de629c9734db27269536e5d90ff1597f97f9aa0cdc328f9a439011bbc1bee8fec79f3ff290bf0683ddc80ca2da421d2e910d31ac5107

/data/data/com.zhiliaoapp.musically/files/apm6_sdk/header/8398_113456337554051504.bin

MD5 755a704c81ce8aead8fcfcd6282d1423
SHA1 bf984fd2ab44d7948dcff8ab472131c495105b3f
SHA256 f80412e162eb358132a5853c24ba764510d2fd729b5340a50cda00952b7ccae7
SHA512 e9fef547681382ed467a2d17efcc9ee021bc4c30c841602858c4b9dc49b2eeb4825b52a2c48f9276db06498de998e19cfd8cb36f1b861a607d97d482c53ffd25

/data/data/com.zhiliaoapp.musically/databases/aweme_record-wal

MD5 05246e87f1481c46c11bb4fab43c8b63
SHA1 41cbef991843eb5354388c53fd56ce2e148a2384
SHA256 d1173ebb0e3b6c2b96267f6bfb7b9d42818cec13d398c6a3da2379569617f223
SHA512 754a88b48a7dc9aa7f898078632e43b2926f52803954252d66198df12eff20fb28c7ba554c17ccd3f0e70c541fd5992bedbf39df41da62b487ea8fad353a92be

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 4be33a33d43a8203c9c5c602bb4ae793
SHA1 e1725347b2129621c4d3364aa37fcf92f41387cb
SHA256 79489ffa83d202f8669f821d5596ec8f63e06e47bd73fff02d0ca92b05700c03
SHA512 9d6f6de2396387592829269487802656a59216b5155cdbb128d9dc2e662855675a5064eee032ff8e4d4bd223c060d70267f9db9c559ffbeff1f8e6aab2986b91

/data/data/com.zhiliaoapp.musically/databases/downloader.db

MD5 355f693f2c9fa35f9b1f9df9e309ddd0
SHA1 d9dc8ef209c825af749902cb28d76160607bbae3
SHA256 c4a209106dfbc39807d25e64293d6b6eb2590cf6516027ef9e1315b9c8bb0c9e
SHA512 1c9e091610edb9d1279a063ff70607851a62b540ae284fe42cd43cd108142e50915cd447ee0e6248af967d5ca71abb0ba80ada4c6d4f144096e24dea3a86ba52

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 8ba497a0b022bef9d9d3a5f29596444d
SHA1 ced8611efbe93a287e59d581e5ff9ad085d80229
SHA256 ae37cd17327259b563211496f1e7a0a48bab71279cd40e45aa8c5b105f16476f
SHA512 a1a9d86ec87bc4e5efe8becf0a968ddd33d63fe57f44bc7e1faaa0a50de3342e77eff6c8680fec1ccb6eb9bcf6f69c075ac60935cd068b3ca3f7f5b629c67e9b

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 172ce7cd69bc350c6854be9376308640
SHA1 0575f636f0a75c93ddd494569c1087bcffe72181
SHA256 852279e566e8fb1b866e846f276a4049a5b116f56e6c155c17e1731f180c6c2b
SHA512 bb647a51bcec65ece5b1ff49984b721c8056a7490088a19ac903f453120a9737ebe0d577d75007ea76bac385e54581b37847b6398047614f517ce64cc134dc99

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 6b5c2f710f5a96b53a416ac4ba39d802
SHA1 bab71798fe4fe640462a39ee3d389c6a21bc9354
SHA256 b7cbd8271f39435175c5c7934120f9b4e612e9de18bae8fd951874e8f59f3565
SHA512 cf68b76339da8c88de5350493263b9037428db5b6a05d80dafd0b369182b9557b32e6494e2b89701b5c83633177a2d72b309c0606282dea62aba2412459c9b1c

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 cba3ffb6363391666e0778736b9cd68a
SHA1 767014e393394218c178a9bfccdb62cc053f2a89
SHA256 3d0598141ecab2cdf94b83b88e2075a68f789096b4245cebf38d93b6ac83fdff
SHA512 63ebe27f5865a804fe347a4562b48bdfc747161197004d0cf03d585484f9d0364bcaede146e43d1d08f19cc1d06bc7e6352415c50dbba5f6a4c5f5904dfb91ac

/data/data/com.zhiliaoapp.musically/databases/downloader.db-journal

MD5 6e9034484e631bfccf238d32f482b463
SHA1 659e6358774424c93ffcf676c6380984689cf43c
SHA256 fce55f00735d1f180ea7a5b2043133e52474de4eb4d9507d3dc4a01d9d5ddaf0
SHA512 a0c1203aecd984c6f30fe110e9dc9ccf7a80dfdbfee34aa8f6764aa18e5a94c92bdcc526c52af634ba6c3040a1e6aa56388af48495a975eeae1f2350ea2d6c2b

/data/data/com.zhiliaoapp.musically/files/hybrid_settings_downloader/0bad5399aa5255b14d4462fa7174f101.tp

MD5 c0e85fedb126fe21b15a429094d606ac
SHA1 ffd8a26a60c2a842674c6fb7c5be93e3d92ecfa6
SHA256 f802fe96d0c2afa25553f0887d95d71dd534cab3b2f3c8da2f199bc4acf607f7
SHA512 2c101414426ef1903940203f59449ffd5dff302462e5009f97821bdc047b63660b0bdbbcd0678dfce53486875f3cee68f92e318dfe307593a4ed188058d1f80b

/data/data/com.zhiliaoapp.musically/databases/TIKTOK.db-journal

MD5 abaf1f1540b884b0770542f00830aabd
SHA1 c59022de21beee8ee30c2c4ef4f9f33b3c1845c8
SHA256 6e5f352759b10976db20c802ae172b2a975b3e58f1b713472c86b9a86f892f1f
SHA512 7e23e120b94071201b0e8d320b384f0f86d1aceede0bb7bde40d90344a2cbc867fdd781bf93876aa8a6d3e3370974b476d92fe6fd5c53372ec07a69fec9afb4b

/data/data/com.zhiliaoapp.musically/databases/TIKTOK.db

MD5 7007ed766a24a142a77eb5f8736bd541
SHA1 a1aaabaab722eca921466407ee930c3b5962e0e5
SHA256 2404afe07a38e914c5ff8c22bb34af30d3ba6782bc54f485465c9ae4f7edfe26
SHA512 7037d7d5f15f616564d2f47ccd45746413ad72f3376d081584f269992a5d06c3868085e94aa32527dd066b7ce1bf98c4903bfe8d2e6d6473bed463097c9e6540

/data/data/com.zhiliaoapp.musically/databases/TIKTOK.db-journal

MD5 10b536a899fe692d4f969a9cde52a5be
SHA1 11ebb13a6fc39a88e7f13486cd0b0e6a86317b95
SHA256 87398b2c8d252c1e6f752a015e5b0e40da37368efe09030f515090f64f68bcc4
SHA512 f51c61f6d5ce4782cfb7f8ed49c57295a0af2d5eca4d2a7e18eba840cf9c36d16672713092a5487a617bc27396dcf78d0a361adf21d303fa67b612f6c2bbdc47

/data/data/com.zhiliaoapp.musically/databases/TIKTOK.db-journal

MD5 0b2b4f267a45bc9eb466ea0b53dc36bd
SHA1 d767ae0bb0aff9df7b8abdeb016323d0b93f28d1
SHA256 5ff8cac55bc717d356b9edc0a08df0036ac851824dfa10ab105a278aaad7578c
SHA512 21b65e76a66d72774add3fe0342e749d8f10a03f83858b74002da5ee202be62a83d2b007a8e07a04937567038335947e959524f218bbdd98e9801c7385608a04

/data/data/com.zhiliaoapp.musically/databases/TIKTOK.db-journal

MD5 9acc98b639ecd171d84efb4d0ba5c630
SHA1 6071bb48326bd37aaa2d70ad0338e058a732d2f9
SHA256 c54d82b2e0373fd7a6e48400724e39f585747314834f451acf345262c0bf18c4
SHA512 607810c6022287ba5aed9ab05d9da34b99529b283d2f8404501f03f066d7202e7ddadc4125101b0faa805b1ccf7285950d6f6f19f7c779bab8c33dd5f8f4e9a8