Analysis

  • max time kernel
    174s
  • max time network
    180s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    01-07-2024 07:37

General

  • Target

    13f27e87576c3b7d5c688cdd83b1aa54_JaffaCakes118.apk

  • Size

    14.2MB

  • MD5

    13f27e87576c3b7d5c688cdd83b1aa54

  • SHA1

    a2b7b9fbb8b2f08899d2209f04eb0cb814d777ba

  • SHA256

    6f38b79a1cec49391030eecc0396e02b35c9ebe8c4b916c7d1e1e8fb40929b7b

  • SHA512

    d6f178ae8a8330a79e8aad2c7f009cadb0e3ff030979e177d6ed453ebc4aafa8a3312841b1be4e9d29cfdbec984cbcd2da54818e791b2102c3cde61d5c55dc55

  • SSDEEP

    393216:PBgNE1c/Ms2WXHF+hzhBiQ1xKy+Og+Ov9bi4xb2I5O:PBgNE1m9BIzviaxwVvRlnO

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 5 IoCs
  • Checks known Qemu files. 1 TTPs 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 1 TTPs 12 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Requests cell location 1 TTPs 4 IoCs

    Uses Android APIs to to get current cell information.

  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.juzifenqi.app
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4256
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.juzifenqi.app/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.juzifenqi.app/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4288
  • com.juzifenqi.app:pushcore
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4345
    • getprop ro.build.version.opporom
      2⤵
        PID:4570
      • getprop ro.build.version.emui
        2⤵
          PID:4607
        • getprop ro.vivo.os.version
          2⤵
            PID:4627
          • getprop ro.smartisan.version
            2⤵
              PID:4660

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.juzifenqi.app/.jiagu/classes.dex
            Filesize

            5.6MB

            MD5

            5a6b914c57296fad640df10e8fbaa1af

            SHA1

            83e6d62466292622a27a3346532a7d4f773ac779

            SHA256

            11e8536049438b1e5a627efe29549be46331f1e7570b0d170c40d983097fe73e

            SHA512

            ee804a18d0b8cefeac3d45bbacbfd3615d1bbe15e05f3976e2ec80e6ff421ffc938a3dfee7f65d3da1a373276cbd5616afd2e0a3618fdbf77b8b03239d813db4

          • /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex
            Filesize

            6.6MB

            MD5

            a448c89e1d27d8729f2b37efc0cfa057

            SHA1

            ce8a29fffeae265336a98d1d1c63052bd2bfa40c

            SHA256

            d78d18bdb5aad254891b3847c7e193e375bc57ca3a7cf3090cf5ad99c0bda361

            SHA512

            16fb8a72e164da0a65d4e2fcef487046c7ab252ddd3d9108c7fec704c70f1e109902899253da3003a82d049a162e8d75363cb140d4952cdd017605144258ec6f

          • /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex
            Filesize

            1.3MB

            MD5

            ccead5683b4a3c7e628cbc64f6be5cd2

            SHA1

            e171085a291d43b27f8cfdcf06fda12e05470c28

            SHA256

            4b95e722529260123ac269f1bbaff34843036a77d7348e48de44d9d1cb078093

            SHA512

            5e1201aea4bd1e6a0b8c68041399ee605d88600d8e3b5153aba62fa1fcfaab8eac8434dba9a04a18318e373c28e3b40b478d42d30a54e41d2fb39d5dbdd0d49b

          • /data/data/com.juzifenqi.app/.jiagu/libjiagu.so
            Filesize

            485KB

            MD5

            1da618896802fdb4b6f17c92703424f4

            SHA1

            b48aa81ac014a5a7f6e95e618e4f951ee12d34c3

            SHA256

            2cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f

            SHA512

            620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6

          • /data/data/com.juzifenqi.app/.jiagu/tmp.dex
            Filesize

            284B

            MD5

            f1771b68f5f9b168b79ff59ae2daabe4

            SHA1

            0df6a835559f5c99670214a12700e7d8c28e5a42

            SHA256

            9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

            SHA512

            dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

          • /data/data/com.juzifenqi.app/cache/td_fm.jar
            Filesize

            37KB

            MD5

            35fa7d1a1cd2c91e8056b3653cfa850e

            SHA1

            fae2d08228c0f7ebabe43dbd567786273421a7ae

            SHA256

            af94b646f2b53426df6a775e2a9e049e9c8f69641bb9b200c266db609b947793

            SHA512

            16beef01dbf00afb92f0b2b031af7f43057f903e54377ead07c84ad513f5c1cb372d2691d25e97296080ab1ac4c5d38eef26e6d859ae1c8f2e39349164d5bfcb

          • /data/data/com.juzifenqi.app/databases/bugly_db_
            Filesize

            4KB

            MD5

            d72350f74719bf3dbf86553348061600

            SHA1

            55ba27d9291b4fcc4d27e7086be10f30bed33999

            SHA256

            e3f9d38fe770453197b2261234af00563174ddc1a854e86709d3a29dc9d5b1e3

            SHA512

            7f2510cb9c8600600614a590deff153ec5bd8d53c20b85ea78503753d4306ab38cb56dc132ccbbddef2b85946cafe306b523645d1224c03dde0d556f2d3d917b

          • /data/data/com.juzifenqi.app/databases/bugly_db_-journal
            Filesize

            512B

            MD5

            daa9860644a8f9e09c868ecdd6bc736a

            SHA1

            3cfa0b3057f8dbd3594640ae13d829c59441129c

            SHA256

            8ef0d7d0565ba0fb0473bc7051bd2b43683ebe48b4527ae84a82f42efac9c51f

            SHA512

            9def09d3ef3817d63d0fddd7180805208ad6bbe480e2ce1cd872667603bc18043d36dd22ffb58200b786b1cf6b261bac06affe725d3a952bf0b40ef3be435fea

          • /data/data/com.juzifenqi.app/databases/bugly_db_-shm
            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.juzifenqi.app/databases/bugly_db_-wal
            Filesize

            52KB

            MD5

            579f6ca5e8f3aafd002972a050fea67f

            SHA1

            c6711bf1af2752d587cfbae7a8c16592cbaba50b

            SHA256

            c1643d32bb8a1b08cf5889622b0391295bd3e60c6f324bc49f9fd0b6bd331dfa

            SHA512

            0b90f755e7c22ac6c28aadfb136670a063c79542e9d87b12293dc9ada08834326c7b1020d89a53f4dcf2622d8329efcc7326c93245acd82efea33018c906d6df

          • /data/data/com.juzifenqi.app/databases/bugly_db_-wal
            Filesize

            56KB

            MD5

            a9902ef8c18bc92a3d69b528007d8c26

            SHA1

            7eb910d826f6e9ed759fe221a9cbc4a0715884df

            SHA256

            50e6f757a18601222d5597043d7f3523e54d7b6518b320878a26780c0fc3d7ba

            SHA512

            ccd5bfe906d817ec343ca2686f8813d73566dc54d238bd468d501798ee05d954a00c222956a5eade8365e6946dedbe4081552f2c970f3428a023467497409e87

          • /data/data/com.juzifenqi.app/databases/logdb.db
            Filesize

            4KB

            MD5

            767d07ebee28eee27b3f363450fac922

            SHA1

            a5dc04a859c905bddf3746f5ec0cb6dd120ab409

            SHA256

            7b5487145af955ff287d26b94dd08deede6a87248e19c30b4fd6fb6def16c389

            SHA512

            ec36b8e8711af561bf4091b54ba0e83102fd6659f62fb81fc43a3f8aaf106139614b81c14354d77505068433d59b0b03af73b6a91539aa171e2a72641ef5fce7

          • /data/data/com.juzifenqi.app/databases/logdb.db
            Filesize

            36KB

            MD5

            a7b5debf648af8527d38065f285c6754

            SHA1

            ad8513c878ca1483a2472c7f8dfc8a416418517e

            SHA256

            0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

            SHA512

            c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

          • /data/data/com.juzifenqi.app/databases/logdb.db-journal
            Filesize

            12KB

            MD5

            da250ef564e95bd70209d15d5c3cf4c5

            SHA1

            67f46f79427b7e5f0845bf6c3011f06826353dfe

            SHA256

            3fb590725cbe164b568ef7a9abeaf9cd5f9e6fa49ae73acfda1869a0caa62e92

            SHA512

            2f633a2d1559f308826bbe7b98ddc5c57c19109b2de8f7c11cf152c219cc3adb62721f0c59873312e1f857a334ca40dcad0258dadd0e8b0ca2bd4c24b5944957

          • /data/data/com.juzifenqi.app/databases/logdb.db-shm
            Filesize

            910B

            MD5

            1948e411f9b69bcfd2ca2040153b9fd8

            SHA1

            ddfff2dc1224f7a6e9bc3c1ac19af35c1428a409

            SHA256

            c93fd6fb34366e617d6361c34492fed572f997865c386a3e077532a95f083eb8

            SHA512

            0a7a98c32ca633178abeb8b3c9a600bb92e310ac3221af3f5d5ddadfd4a74add342b9eecd208fe0cba3849a0efca5ac0538a6d6a545760e28598ebb6cf9c24ce

          • /data/data/com.juzifenqi.app/databases/logdb.db-wal
            Filesize

            24KB

            MD5

            0d98f53ee8b11c7b8c6b0035d50686e8

            SHA1

            43c4b3dba78da9da6c1e7490e65e09f318c63920

            SHA256

            de34d57ea101aaf5d95d5a19b48fe417f11b880570e4650abac0d78bb1ad2116

            SHA512

            a5e83bac5f47d518b0372d6c88173eb90508820c51bb1aae5f016448ef7bcd9222606de9b57e0114c4b9bfb7426d3231569a267370660d003a980d475a776816

          • /data/data/com.juzifenqi.app/files/.jglogs/.jg.ac
            Filesize

            512B

            MD5

            e4d9aada371666c14d84d6a2134c04ff

            SHA1

            6c28cf0a099649e44f16c83f9e8b550f4d08ca33

            SHA256

            e4d7f212534b7ea690eabbfc772190717d4d3563e67c0fc72e1fd118f5397379

            SHA512

            9e6fcbbcbb51f9bc14eee8be8ebbc4f30d35e76022b2a7c7feeb016daf1dfce8c142c78147df6574c5876299e7f0fda5b5b892dd5ab56503548eef202bc9d4cb

          • /data/data/com.juzifenqi.app/files/.jglogs/.jg.di
            Filesize

            16KB

            MD5

            4cf4930366c8c0ad79a79ea685d2b9a1

            SHA1

            7240e8a68253c5eaa2cab3148480cf2595ebcccf

            SHA256

            76b01c87c941df52e94e25677ffea327b0c4a56f25b94848ef735d6eea553ba6

            SHA512

            d3783d55ac89133f4bd81cb18ae3aa730b0dff1485b5ca0799358e9e424fb4a46284741e168037dea5f346ff9c4ec3486b70b3634652b2af19305caa6a5f8937

          • /data/data/com.juzifenqi.app/files/.jglogs/.jg.rd
            Filesize

            129B

            MD5

            88fdd447f671d54d509b64591eaff002

            SHA1

            00708f02681c13e67fb127fca9778f052d3b8fa2

            SHA256

            f1a3fc739a82589b901f1063d6ed697d049d4f686415bfc996c3ab983a4b5329

            SHA512

            08a80fedbc6b19117b28e7de3b070e0f2ac21e81fe2f03da1862efc1ed757f92a16b8215848f84d673e8f3f6c5c987c981832fc417dc79519a7e66c776cae7ed

          • /data/data/com.juzifenqi.app/files/.jglogs/.jg.ri
            Filesize

            314B

            MD5

            d88ca55a0924bc60b2a69e2767beeb07

            SHA1

            77c8d9feb793dce10b226c0f0aac0c4a037b0956

            SHA256

            d8c34bfbb41b2319e403e9965cbb2349767ad309a4e64a41778f86452c9f2a68

            SHA512

            0d34730f9cd2161ae76bdb0dfd9c57984ec5b6c7dff271117048e75e49efd22b52b5dbb75f412140ad752b19a9cd602d21c7f346e3a1c9d6a0f00a1e5256eeec

          • /data/data/com.juzifenqi.app/files/.jglogs/.jg.store
            Filesize

            12KB

            MD5

            3fe30614d7e0d11db870b4624f6c50e0

            SHA1

            053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

            SHA256

            67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

            SHA512

            c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

          • /data/data/com.juzifenqi.app/files/.jiagu.lock
            Filesize

            27B

            MD5

            d9175eefa966c1e48e939fe026325a3b

            SHA1

            30c94b56b1d4c912bf50f89ba893c47ed0e8ae8d

            SHA256

            539678ae830a8c29a998dcefe550845c7956e892925089b7e7462bd2ca1e0e99

            SHA512

            c9323a8c96b5da4f35960bc915522ca1c762f12ded6e4f6474689e3f6badf3396fda5ac5040a2e647d3066b92924eae0c2d64ea97647364e6749159c304cbb22

          • /data/data/com.juzifenqi.app/files/__local_ap_info_cache.json
            Filesize

            2B

            MD5

            d751713988987e9331980363e24189ce

            SHA1

            97d170e1550eee4afc0af065b78cda302a97674c

            SHA256

            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

            SHA512

            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

          • /data/data/com.juzifenqi.app/files/a/b/302ba74a656c04e34a61632854136ab2.0.tmp
            Filesize

            567B

            MD5

            32ccc5982ca4d9ee9fb275a97be1b491

            SHA1

            b1838e3e738f4f3fc988a08ada7f9b36f6a7c412

            SHA256

            17d58ff913178eed4b8686790ffbae3745f8b587cf4629a35e76f10a84ae4649

            SHA512

            7832be470f49e15af9042ca8cc2447fd6405645a53055f9164c9471d218d056c2366cc9ae4ef47cba38e9b02653c48eb81e1a6ad7e7673ef33fd6b410b1ac34a

          • /data/data/com.juzifenqi.app/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp
            Filesize

            567B

            MD5

            cabdd2d9642497130ddf2f538e1cf605

            SHA1

            68853901331dd71d34aa949144110d73c048b898

            SHA256

            6b8448d372357f3eac14c1b7a25d187c4a5641605d75e060a252406d088e273d

            SHA512

            42f4d1dc1ef3e9f6e732d230d9d9503600e949bc152c320a069782031e79c867419c66bb94ad0f179065438af194d24f89fe084cebe4d6c6ac422ea5d48bf233

          • /data/data/com.juzifenqi.app/files/a/b/7de3252ce9028657c0cf8392d54a6b72.0.tmp
            Filesize

            1KB

            MD5

            f6f1ccf9e00392705ac95e6bdbbec04a

            SHA1

            7e5f2fb1e7323c4e862b8444144ceca9eb275c08

            SHA256

            1569428697588d5ffb4eb1c1e77b63b645498888c2c3d90b8c62b758986680d2

            SHA512

            7381ac2e0a2171d61b7c80b4c1efaf60e1d51073ca8cb430cd0dac084871705cdaaa669032b2407bccf4d60596a457fb24a493fc3d3021fd79ac32807afc5673

          • /data/data/com.juzifenqi.app/files/a/b/journal
            Filesize

            113B

            MD5

            0cf77f36c527abcba3e91da23011c1bf

            SHA1

            3bd240ceb6e24c9ceb3e2ac8cbaab6cec10cdfdf

            SHA256

            a6bb2d97757402adee9ec84cd2497f9e23a9408d3ac4f09f2d8fd23066cad0b6

            SHA512

            6e6e40d6ff7a2e539b81246e9176b4ee18937c9f7884592a91b7613f4eaa754c54c97dde39c6c7c81fbb6901231c3136a288c801bd3c654e58bf24a29112cca4

          • /data/data/com.juzifenqi.app/files/a/b/journal
            Filesize

            196B

            MD5

            6d2364b0056a6e3b52009ab9043d0e0c

            SHA1

            b6ceb4206c772bbf184627857392bf73e1efa5aa

            SHA256

            55f2f695596fbb27693f46c5422b6793b4545e366aea03b98d2ddaecbe87dc21

            SHA512

            4b624e2f810b5cb833f59ef80e903adfb5409b45f7e6f9d3e13573af78319b48d20060bd61a46164f0e4bdeff0d63afe6b656e6c5efe2240d5382eab782b652b

          • /data/data/com.juzifenqi.app/files/a/b/journal
            Filesize

            278B

            MD5

            af3ca01a532bfe458ebbefe69637f4fa

            SHA1

            4d2e57be64d3aaeef2465a974a40a8d7cae378a5

            SHA256

            173c8c37426d7eed2f904e3af44bdde5e5d4c1375e2e458f3a6cd48a7ec6efd0

            SHA512

            520bf2de3078abd8d7c2e3aeb19bbb433d243c2e4a0f425a4345a3f74108291397e2e22414091981c71ae90ef09ffa665d7369b17217d718ed7b6fcc42cd7aaa

          • /data/data/com.juzifenqi.app/files/a/b/journal.tmp
            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /data/data/com.juzifenqi.app/files/pushcore__local_last_session.json
            Filesize

            2B

            MD5

            99914b932bd37a50b983c5e7c90ae93b

            SHA1

            bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

            SHA256

            44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

            SHA512

            27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

          • /data/data/com.juzifenqi.app/files/pushcore__local_stat_cache.json
            Filesize

            722B

            MD5

            22aab82a7945ea1db3fd7b9357d8a607

            SHA1

            74faa2bb55a12ab6b94aa6eac40c81ac4d70bc5f

            SHA256

            c178a0893020d03a8702d94ad094304c9a16071fd9c3f20769e759e1ded94191

            SHA512

            bf8705a0569fbf48d491ee94eaf4ec65d9c92cbe2ce706a65192ed35609b9f8b2650194279c8b7972dd20dd848dabe685f0d881edf0078e114ff2725bfac52d0

          • /data/user/0/com.juzifenqi.app/cache/td_fm.jar
            Filesize

            84KB

            MD5

            b94b2179695252d2d9220e97d14e2557

            SHA1

            3a0278afd368d25a40670745171a1248590e92a5

            SHA256

            a165fd6c0ae33cc8162e164a63b5e5abfafea84a4ef69b3a2845dec716046448

            SHA512

            0ca17f898c9fe03cbd1cefd19a021b351a7f7432a8520f7527900b9b553dadc305ec2e8ae51ac6eba6deacaa1472ccbb01bafae98646158234ba29213da1c1e5

          • /storage/emulated/0/360/.deviceId
            Filesize

            32KB

            MD5

            1c56df0a0870ed1c3273c17e476a6f03

            SHA1

            865db3b9119dd6dc82187d525c8b6be494484a99

            SHA256

            7c6359bd9670bf186ea39c6e8f08f4120d033077a6167ce7d1e76f3dca6bca5c

            SHA512

            f07447e0c243df2dcf050b93609f339a1d5cb61cd7a240b5bcc02a2bfd160a5783e1a69ada604c72ac6fded56a9607c4624f92794a052e9f2cabbf2c334cc246

          • /storage/emulated/0/360/.iddata
            Filesize

            32KB

            MD5

            b30b0657fdff979f1b47252f82bb82cc

            SHA1

            759e65e93e15fd4e1a1c53566bfb0a5e42df97d0

            SHA256

            bc1d5f6faea49cb4ea3d18b60129d1406707e42c40d0f5d635fe5a451dd69638

            SHA512

            49e5472819e5dc59be28270021fe5c3bbb0d660d66d2df904aefe10393760b7b4880f45c71601d31937759bb331d58f7335d935f1688ee61dbd4694e7d48e171

          • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db
            Filesize

            20KB

            MD5

            731fba9d21f23915576ea5dc2ea3ffb8

            SHA1

            d1fdbc209db8b71d1b4e5341e75b8cc88647146a

            SHA256

            87510194f38897a04cd1f80bd6fffc3344fa8ef21baa61de020a2e790a7268ab

            SHA512

            b643177cf3a30543342d3a521a2dcfce70df4ec450b040e2b61d8692bbed4b3cde2f9f304cbf496869b89455e3cc6a501e8ff720edbdf0f6898e6a5f31fec25d

          • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal
            Filesize

            512B

            MD5

            85ad43e0ea666a40d50caacb7f08e10b

            SHA1

            85d198e2214deabbcc29532bf86abfcd14ef99fd

            SHA256

            beac0381e0e8248b57607f7b5a1eb13486c588f5b190a67cbc261fc2269cea7f

            SHA512

            8121f980feaf155ae3dbd1881e8588576472e4fe2431625c588bc9bec4358fadbc2c60da28cf6a8025f4652541482e98bf73866a429403798e83301209faee96

          • /storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-wal
            Filesize

            32KB

            MD5

            f1b6b0fa45f7752be4cf8621fcb91411

            SHA1

            0daf4910bc41735b7996cb053f537bf8742a55c7

            SHA256

            eca32e85dc5a47642139b89e7b743bd8e005f895d7b495fa3ba6cfd319a2955e

            SHA512

            7169a18de051f36fb018a1169c19814d44a8a67de1ece46179f206c154d2191568e0358b10e6ec0228b49ac08f5f645d1fdc3b76098eb5c74c140c96cdb666e2

          • /storage/emulated/0/backups/system/.confd
            Filesize

            20KB

            MD5

            249e034c9703afc1fd6062371c7f3da8

            SHA1

            9ca489179488e0fe5a35f7c0d5887f163e4890cd

            SHA256

            18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a

            SHA512

            b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

          • /storage/emulated/0/backups/system/.confd
            Filesize

            24KB

            MD5

            65a1b8a75eefa4b35f7275e962d38b76

            SHA1

            c3dbc7aacca88cbb09416bb5498d173f98d1be7a

            SHA256

            8e2ef9f22a5f7935eb7379e62e509ceb7eba207fbd2958919b866bbda75c4333

            SHA512

            f3ebbb138c008583279d2fd2edc2a62b90e13c5576a85b39c91e88fcfdaeed4cefdc4b92b4962766e2bf7dd0c748aea88d6561eb41c3e7bf938855501d3b0618

          • /storage/emulated/0/backups/system/.confd
            Filesize

            24KB

            MD5

            4b30cd9143fb3c04f16a354493ce3e4d

            SHA1

            2369578263b5b7e3f6632fd7a52bae1d98cffe85

            SHA256

            22ee06ee5fa6fd1ca5a591ac03d5c9060d37c4169f23f077ce460c6fc2e979a4

            SHA512

            da29f036f424a6831ef30660174764670cff3dfc9b2afd34c4e1212a81e50f22a7bcd288e75133c1b707f3295825331c3b78de11fe0b2c6a108d2032cfa0e4f2

          • /storage/emulated/0/backups/system/.confd
            Filesize

            32KB

            MD5

            1f78ae0bf65e4dc4ed8daf9dc40604a9

            SHA1

            b313a47054c17afc28adc897fb5fe376afba1daa

            SHA256

            0f08ee83841222c96cb93113e74d46a17c7fd5470f65995f42a3532a25bd64c6

            SHA512

            114dee74b48cd604ab290c07f45b77c82bcc1fa60dfca6797d27a97101ac502c43714f939225a56c3c042d374f9259648b82794793196ad950e67fbe6c4d5ded

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            36KB

            MD5

            eeff25a81b5ce4c9d7b591a3220186ea

            SHA1

            e1e722e91061d6486b2e5560efacfac73e76208e

            SHA256

            d1e4a81b51217f1a7b6ba8ca7fcd1efc6a0a1e479d9f739008a5681a284631ac

            SHA512

            68ce16785e7f71ad750bbed8ab2620850de7ebf6e08bd735f6a46336f743490ee6c88dde9cae2ab75d35c66f596f9f11e61b693637b2ea4333d67c42f6cf6c8d

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            8KB

            MD5

            4a76e3dd6ce75ecfea994ecb0f590fb4

            SHA1

            a08093a372fbf2a72c37ea5e65db110d0040e0f5

            SHA256

            3f9aed08f952e22719cd0dadc5a6b4dde3dc75661e6431b570d62710fb900312

            SHA512

            3c70f88cbcfd779a3d7391d2ee801c8c6e6775fc4bfaaea53d3bb832249d1dc2df9a96fa0424df57f209ee784fc380d0491eb00526082ca63371a7b368bab16a

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            8KB

            MD5

            9ed62fa9cd8085effc3f7d61f4a79f59

            SHA1

            dfedf288d8358657b8a660a2a06f85b2e5137c31

            SHA256

            5834f79e915389266d961553f6c2f66ba7733ca3a80ddc249c100ee31c302645

            SHA512

            c4843b6e3311d4faeb67d9e1d09777a86391bc2c753996cf17c46b7362bf57d782ab295108327414dde3debc8c312f04fd917d971723a3ead73e6546cbe6ea20

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            12KB

            MD5

            b447af2d576019d3b6ef1d2ced76fdba

            SHA1

            95904fe8f49a72a9bfe114650a350d7eab9fb3aa

            SHA256

            53958bc5a4908841b25a00386fc7194b051d536259a7b90a784fefbae3371682

            SHA512

            a9ec286f93b69195d8f3481c3e71e2876b00b8e14df3a475c92b145c3caf4257a0de0149f19a4723d20b49814b82172ec4a121e888ec039d33a331e2d38e7766

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            8KB

            MD5

            12bd74a9d78b9036635f3b7071cdc4b4

            SHA1

            159998abed887baebb717d2d4f7f198fedef8748

            SHA256

            166cfe683ecda0b797ced18b6a916fa0f99d64070a8d13fb056e080ab613bf55

            SHA512

            c4ff152fe58d1a5f13ae9b0ff318d6a954110b89068540eba2c4c3b9652130e0ab9ca6c5dca133cbc0edbc391b3e729fa38b45ea824b90dbd130863d8f1c42b1

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            12KB

            MD5

            8c9d35989c268bdf983134ea63e17472

            SHA1

            2cc979c7da0f3ad0e1228e9b19c232daade2dae4

            SHA256

            49d5331e5d5043cbf9a0396eaff135c526646b2b93788884f07e537c62cdbb03

            SHA512

            2a984b659ab54465ca7593a29c16b7049c94469be4c6c174f8465d601108c1f888ee5d5697f7418079b0015b26e908525ac8cc5b1cc32dd509b05504b8465c98

          • /storage/emulated/0/backups/system/.confd-wal
            Filesize

            8KB

            MD5

            6b503253635c35d769de4b0982a41099

            SHA1

            e77e4af9cab632620607dc76482ccf8c4fad8122

            SHA256

            2dd90835a20c4c21d2e18e83ae74ad9c16f372eb90b18bcd23bc40837509b560

            SHA512

            2a5a161416ee61b283235b7efd32efe34ef5e8ca706c6f347b534e21b027425965b6d63981f9a63c19ab7425f68a6482ae6535804018f95697d0e1fb63f405e7

          • /storage/emulated/0/backups/system/.timestamp
            Filesize

            55B

            MD5

            5a8e007de485107cf8ba554c642b1198

            SHA1

            dd9288be52f076c3fb993b13f2e587e8b848dd81

            SHA256

            ec73a64ae756b127cc78eb94bc3ee67110ca174f92fcb0d627ef23d2e52cda8f

            SHA512

            3cb1b43ffef0f3a3f4310cdf2be0f4392d9a805b3b78884b712c595b4633ef89b0ccb5e3cc9734fc35f3a00b15406b4018e4baf7ef2f261a9c4bb34e0d3c7329

          • /storage/emulated/0/backups/system/.timestamp
            Filesize

            84B

            MD5

            794a31b787eae519ab3e1b2052e6d087

            SHA1

            b66b7f1be85539f2dc417cd77a9b758f2a657c79

            SHA256

            7c30d878f9d54099080f93e633908eda17e91282de22024bbe9e59c0b66b919d

            SHA512

            cd4616d0983d8bd2910aa3ab1e94a14dc270a35da7c7fc2b862ea49f2e090f5201617ecc9bac54491c8b934bb2bbca7736791434e92d9e6d0623c883d58c5408

          • /storage/emulated/0/backups/system/.timestamp
            Filesize

            114B

            MD5

            f9bf3c0b94ae061c7b961d9a1bd33bb6

            SHA1

            047f0504a38bdbf86dd0d2be3d4393926dc646fb

            SHA256

            97f29e9f12aa4115ef3bb5593c37acc6fecd43521caf5c01ee85409dc2a19e9c

            SHA512

            4f3333f281b3973261b4dd0dbc541808f5434677bb15a8dfcdbfea6915e4c473f46baa1e19068eabe456e4c404577ae0849518ed98a71ed43f23ad7efde425e5

          • /storage/emulated/0/backups/system/.timestamp
            Filesize

            138B

            MD5

            b4a83b203e75ea2dbc42aa70802bb9a5

            SHA1

            0a362d10e1faec4d6c8a94496f07ecb4a08b338c

            SHA256

            afee3a673fb5942ff3d209680206162b4db689c13e539c79bc5cabea7195fa7a

            SHA512

            637fe71c3c698fda9c4e2e89b44ea32b377e6e56387ab57aecc9c06d046f7740882f14135380adb9b4aba40b7c1ad19d9e76919add1feabe4a5e2e01335ceea5

          • /storage/emulated/0/data/.push_deviceid
            Filesize

            32B

            MD5

            35c049dabaff4ed91495c1fb57eac038

            SHA1

            3198094189f2d8a5722c9913c350f0785c2090af

            SHA256

            d6fb0f6ef897e74605895949450877c7e3314b350d0bc369176c8003b2e35617

            SHA512

            8af2c617f68ecae596e37ce2863a4cbc7979add060c93d686d69c4fcaf588b97e3ccc9d58f8409d0d4aba96b09c6b3f40292a5dab049e83b26834ffa856892fb