Analysis
-
max time kernel
174s -
max time network
180s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
01-07-2024 07:37
Static task
static1
Behavioral task
behavioral1
Sample
13f27e87576c3b7d5c688cdd83b1aa54_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
13f27e87576c3b7d5c688cdd83b1aa54_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
13f27e87576c3b7d5c688cdd83b1aa54_JaffaCakes118.apk
-
Size
14.2MB
-
MD5
13f27e87576c3b7d5c688cdd83b1aa54
-
SHA1
a2b7b9fbb8b2f08899d2209f04eb0cb814d777ba
-
SHA256
6f38b79a1cec49391030eecc0396e02b35c9ebe8c4b916c7d1e1e8fb40929b7b
-
SHA512
d6f178ae8a8330a79e8aad2c7f009cadb0e3ff030979e177d6ed453ebc4aafa8a3312841b1be4e9d29cfdbec984cbcd2da54818e791b2102c3cde61d5c55dc55
-
SSDEEP
393216:PBgNE1c/Ms2WXHF+hzhBiQ1xKy+Og+Ov9bi4xb2I5O:PBgNE1m9BIzviaxwVvRlnO
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
Processes:
com.juzifenqi.appioc process /data/local/bin/su com.juzifenqi.app /data/local/su com.juzifenqi.app /system/xbin/su com.juzifenqi.app /system/bin/su com.juzifenqi.app /system/sd/xbin/su com.juzifenqi.app /system/bin/failsafe/su com.juzifenqi.app /sbin/su com.juzifenqi.app /data/local/xbin/su com.juzifenqi.app -
Checks Android system properties for emulator presence. 1 TTPs 5 IoCs
Processes:
com.juzifenqi.appdescription ioc process Accessed system property key: ro.serialno com.juzifenqi.app Accessed system property key: ro.product.device com.juzifenqi.app Accessed system property key: ro.hardware com.juzifenqi.app Accessed system property key: ro.product.model com.juzifenqi.app Accessed system property key: ro.product.name com.juzifenqi.app -
Checks known Qemu files. 1 TTPs 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
Processes:
com.juzifenqi.appioc process /system/lib/libc_malloc_debug_qemu.so com.juzifenqi.app /sys/qemu_trace com.juzifenqi.app /system/bin/qemu-props com.juzifenqi.app -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
com.juzifenqi.appioc process /dev/socket/qemud com.juzifenqi.app /dev/qemu_pipe com.juzifenqi.app -
Loads dropped Dex/Jar 1 TTPs 12 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.juzifenqi.app/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.juzifenqi.app/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.juzifenqi.app/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&com.juzifenqi.app:pushcoreioc pid process /data/data/com.juzifenqi.app/.jiagu/classes.dex 4256 com.juzifenqi.app /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex 4256 com.juzifenqi.app /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex 4256 com.juzifenqi.app /data/data/com.juzifenqi.app/.jiagu/tmp.dex 4256 com.juzifenqi.app /data/data/com.juzifenqi.app/.jiagu/tmp.dex 4288 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.juzifenqi.app/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.juzifenqi.app/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.juzifenqi.app/.jiagu/tmp.dex 4256 com.juzifenqi.app /data/user/0/com.juzifenqi.app/cache/td_fm.jar 4256 com.juzifenqi.app /data/data/com.juzifenqi.app/.jiagu/classes.dex 4345 com.juzifenqi.app:pushcore /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes2.dex 4345 com.juzifenqi.app:pushcore /data/data/com.juzifenqi.app/.jiagu/classes.dex!classes3.dex 4345 com.juzifenqi.app:pushcore /data/data/com.juzifenqi.app/.jiagu/tmp.dex 4345 com.juzifenqi.app:pushcore /data/data/com.juzifenqi.app/.jiagu/tmp.dex 4345 com.juzifenqi.app:pushcore -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.juzifenqi.appcom.juzifenqi.app:pushcoredescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.juzifenqi.app Framework service call android.app.IActivityManager.getRunningAppProcesses com.juzifenqi.app:pushcore -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.juzifenqi.appcom.juzifenqi.app:pushcoredescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.juzifenqi.app Framework service call android.net.wifi.IWifiManager.getScanResults com.juzifenqi.app:pushcore -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests cell location 1 TTPs 4 IoCs
Uses Android APIs to to get current cell information.
Processes:
com.juzifenqi.appcom.juzifenqi.app:pushcoredescription ioc process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.juzifenqi.app Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.juzifenqi.app:pushcore Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.juzifenqi.app:pushcore Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.juzifenqi.app -
Queries information about active data network 1 TTPs 2 IoCs
Processes:
com.juzifenqi.app:pushcorecom.juzifenqi.appdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.juzifenqi.app:pushcore Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.juzifenqi.app -
Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.juzifenqi.appcom.juzifenqi.app:pushcoredescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.juzifenqi.app Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.juzifenqi.app:pushcore -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.juzifenqi.appdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.juzifenqi.app -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.juzifenqi.app:pushcorecom.juzifenqi.appdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.juzifenqi.app:pushcore Framework service call android.app.IActivityManager.registerReceiver com.juzifenqi.app -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.juzifenqi.appcom.juzifenqi.app:pushcoredescription ioc process Framework API call javax.crypto.Cipher.doFinal com.juzifenqi.app Framework API call javax.crypto.Cipher.doFinal com.juzifenqi.app:pushcore -
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.juzifenqi.app1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.juzifenqi.app/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.juzifenqi.app/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
com.juzifenqi.app:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
getprop ro.build.version.opporom2⤵
-
getprop ro.build.version.emui2⤵
-
getprop ro.vivo.os.version2⤵
-
getprop ro.smartisan.version2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.juzifenqi.app/.jiagu/classes.dexFilesize
5.6MB
MD55a6b914c57296fad640df10e8fbaa1af
SHA183e6d62466292622a27a3346532a7d4f773ac779
SHA25611e8536049438b1e5a627efe29549be46331f1e7570b0d170c40d983097fe73e
SHA512ee804a18d0b8cefeac3d45bbacbfd3615d1bbe15e05f3976e2ec80e6ff421ffc938a3dfee7f65d3da1a373276cbd5616afd2e0a3618fdbf77b8b03239d813db4
-
/data/data/com.juzifenqi.app/.jiagu/classes.dex!classes2.dexFilesize
6.6MB
MD5a448c89e1d27d8729f2b37efc0cfa057
SHA1ce8a29fffeae265336a98d1d1c63052bd2bfa40c
SHA256d78d18bdb5aad254891b3847c7e193e375bc57ca3a7cf3090cf5ad99c0bda361
SHA51216fb8a72e164da0a65d4e2fcef487046c7ab252ddd3d9108c7fec704c70f1e109902899253da3003a82d049a162e8d75363cb140d4952cdd017605144258ec6f
-
/data/data/com.juzifenqi.app/.jiagu/classes.dex!classes3.dexFilesize
1.3MB
MD5ccead5683b4a3c7e628cbc64f6be5cd2
SHA1e171085a291d43b27f8cfdcf06fda12e05470c28
SHA2564b95e722529260123ac269f1bbaff34843036a77d7348e48de44d9d1cb078093
SHA5125e1201aea4bd1e6a0b8c68041399ee605d88600d8e3b5153aba62fa1fcfaab8eac8434dba9a04a18318e373c28e3b40b478d42d30a54e41d2fb39d5dbdd0d49b
-
/data/data/com.juzifenqi.app/.jiagu/libjiagu.soFilesize
485KB
MD51da618896802fdb4b6f17c92703424f4
SHA1b48aa81ac014a5a7f6e95e618e4f951ee12d34c3
SHA2562cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f
SHA512620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6
-
/data/data/com.juzifenqi.app/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/com.juzifenqi.app/cache/td_fm.jarFilesize
37KB
MD535fa7d1a1cd2c91e8056b3653cfa850e
SHA1fae2d08228c0f7ebabe43dbd567786273421a7ae
SHA256af94b646f2b53426df6a775e2a9e049e9c8f69641bb9b200c266db609b947793
SHA51216beef01dbf00afb92f0b2b031af7f43057f903e54377ead07c84ad513f5c1cb372d2691d25e97296080ab1ac4c5d38eef26e6d859ae1c8f2e39349164d5bfcb
-
/data/data/com.juzifenqi.app/databases/bugly_db_Filesize
4KB
MD5d72350f74719bf3dbf86553348061600
SHA155ba27d9291b4fcc4d27e7086be10f30bed33999
SHA256e3f9d38fe770453197b2261234af00563174ddc1a854e86709d3a29dc9d5b1e3
SHA5127f2510cb9c8600600614a590deff153ec5bd8d53c20b85ea78503753d4306ab38cb56dc132ccbbddef2b85946cafe306b523645d1224c03dde0d556f2d3d917b
-
/data/data/com.juzifenqi.app/databases/bugly_db_-journalFilesize
512B
MD5daa9860644a8f9e09c868ecdd6bc736a
SHA13cfa0b3057f8dbd3594640ae13d829c59441129c
SHA2568ef0d7d0565ba0fb0473bc7051bd2b43683ebe48b4527ae84a82f42efac9c51f
SHA5129def09d3ef3817d63d0fddd7180805208ad6bbe480e2ce1cd872667603bc18043d36dd22ffb58200b786b1cf6b261bac06affe725d3a952bf0b40ef3be435fea
-
/data/data/com.juzifenqi.app/databases/bugly_db_-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.juzifenqi.app/databases/bugly_db_-walFilesize
52KB
MD5579f6ca5e8f3aafd002972a050fea67f
SHA1c6711bf1af2752d587cfbae7a8c16592cbaba50b
SHA256c1643d32bb8a1b08cf5889622b0391295bd3e60c6f324bc49f9fd0b6bd331dfa
SHA5120b90f755e7c22ac6c28aadfb136670a063c79542e9d87b12293dc9ada08834326c7b1020d89a53f4dcf2622d8329efcc7326c93245acd82efea33018c906d6df
-
/data/data/com.juzifenqi.app/databases/bugly_db_-walFilesize
56KB
MD5a9902ef8c18bc92a3d69b528007d8c26
SHA17eb910d826f6e9ed759fe221a9cbc4a0715884df
SHA25650e6f757a18601222d5597043d7f3523e54d7b6518b320878a26780c0fc3d7ba
SHA512ccd5bfe906d817ec343ca2686f8813d73566dc54d238bd468d501798ee05d954a00c222956a5eade8365e6946dedbe4081552f2c970f3428a023467497409e87
-
/data/data/com.juzifenqi.app/databases/logdb.dbFilesize
4KB
MD5767d07ebee28eee27b3f363450fac922
SHA1a5dc04a859c905bddf3746f5ec0cb6dd120ab409
SHA2567b5487145af955ff287d26b94dd08deede6a87248e19c30b4fd6fb6def16c389
SHA512ec36b8e8711af561bf4091b54ba0e83102fd6659f62fb81fc43a3f8aaf106139614b81c14354d77505068433d59b0b03af73b6a91539aa171e2a72641ef5fce7
-
/data/data/com.juzifenqi.app/databases/logdb.dbFilesize
36KB
MD5a7b5debf648af8527d38065f285c6754
SHA1ad8513c878ca1483a2472c7f8dfc8a416418517e
SHA2560d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5
SHA512c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4
-
/data/data/com.juzifenqi.app/databases/logdb.db-journalFilesize
12KB
MD5da250ef564e95bd70209d15d5c3cf4c5
SHA167f46f79427b7e5f0845bf6c3011f06826353dfe
SHA2563fb590725cbe164b568ef7a9abeaf9cd5f9e6fa49ae73acfda1869a0caa62e92
SHA5122f633a2d1559f308826bbe7b98ddc5c57c19109b2de8f7c11cf152c219cc3adb62721f0c59873312e1f857a334ca40dcad0258dadd0e8b0ca2bd4c24b5944957
-
/data/data/com.juzifenqi.app/databases/logdb.db-shmFilesize
910B
MD51948e411f9b69bcfd2ca2040153b9fd8
SHA1ddfff2dc1224f7a6e9bc3c1ac19af35c1428a409
SHA256c93fd6fb34366e617d6361c34492fed572f997865c386a3e077532a95f083eb8
SHA5120a7a98c32ca633178abeb8b3c9a600bb92e310ac3221af3f5d5ddadfd4a74add342b9eecd208fe0cba3849a0efca5ac0538a6d6a545760e28598ebb6cf9c24ce
-
/data/data/com.juzifenqi.app/databases/logdb.db-walFilesize
24KB
MD50d98f53ee8b11c7b8c6b0035d50686e8
SHA143c4b3dba78da9da6c1e7490e65e09f318c63920
SHA256de34d57ea101aaf5d95d5a19b48fe417f11b880570e4650abac0d78bb1ad2116
SHA512a5e83bac5f47d518b0372d6c88173eb90508820c51bb1aae5f016448ef7bcd9222606de9b57e0114c4b9bfb7426d3231569a267370660d003a980d475a776816
-
/data/data/com.juzifenqi.app/files/.jglogs/.jg.acFilesize
512B
MD5e4d9aada371666c14d84d6a2134c04ff
SHA16c28cf0a099649e44f16c83f9e8b550f4d08ca33
SHA256e4d7f212534b7ea690eabbfc772190717d4d3563e67c0fc72e1fd118f5397379
SHA5129e6fcbbcbb51f9bc14eee8be8ebbc4f30d35e76022b2a7c7feeb016daf1dfce8c142c78147df6574c5876299e7f0fda5b5b892dd5ab56503548eef202bc9d4cb
-
/data/data/com.juzifenqi.app/files/.jglogs/.jg.diFilesize
16KB
MD54cf4930366c8c0ad79a79ea685d2b9a1
SHA17240e8a68253c5eaa2cab3148480cf2595ebcccf
SHA25676b01c87c941df52e94e25677ffea327b0c4a56f25b94848ef735d6eea553ba6
SHA512d3783d55ac89133f4bd81cb18ae3aa730b0dff1485b5ca0799358e9e424fb4a46284741e168037dea5f346ff9c4ec3486b70b3634652b2af19305caa6a5f8937
-
/data/data/com.juzifenqi.app/files/.jglogs/.jg.rdFilesize
129B
MD588fdd447f671d54d509b64591eaff002
SHA100708f02681c13e67fb127fca9778f052d3b8fa2
SHA256f1a3fc739a82589b901f1063d6ed697d049d4f686415bfc996c3ab983a4b5329
SHA51208a80fedbc6b19117b28e7de3b070e0f2ac21e81fe2f03da1862efc1ed757f92a16b8215848f84d673e8f3f6c5c987c981832fc417dc79519a7e66c776cae7ed
-
/data/data/com.juzifenqi.app/files/.jglogs/.jg.riFilesize
314B
MD5d88ca55a0924bc60b2a69e2767beeb07
SHA177c8d9feb793dce10b226c0f0aac0c4a037b0956
SHA256d8c34bfbb41b2319e403e9965cbb2349767ad309a4e64a41778f86452c9f2a68
SHA5120d34730f9cd2161ae76bdb0dfd9c57984ec5b6c7dff271117048e75e49efd22b52b5dbb75f412140ad752b19a9cd602d21c7f346e3a1c9d6a0f00a1e5256eeec
-
/data/data/com.juzifenqi.app/files/.jglogs/.jg.storeFilesize
12KB
MD53fe30614d7e0d11db870b4624f6c50e0
SHA1053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA25667c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae
-
/data/data/com.juzifenqi.app/files/.jiagu.lockFilesize
27B
MD5d9175eefa966c1e48e939fe026325a3b
SHA130c94b56b1d4c912bf50f89ba893c47ed0e8ae8d
SHA256539678ae830a8c29a998dcefe550845c7956e892925089b7e7462bd2ca1e0e99
SHA512c9323a8c96b5da4f35960bc915522ca1c762f12ded6e4f6474689e3f6badf3396fda5ac5040a2e647d3066b92924eae0c2d64ea97647364e6749159c304cbb22
-
/data/data/com.juzifenqi.app/files/__local_ap_info_cache.jsonFilesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
/data/data/com.juzifenqi.app/files/a/b/302ba74a656c04e34a61632854136ab2.0.tmpFilesize
567B
MD532ccc5982ca4d9ee9fb275a97be1b491
SHA1b1838e3e738f4f3fc988a08ada7f9b36f6a7c412
SHA25617d58ff913178eed4b8686790ffbae3745f8b587cf4629a35e76f10a84ae4649
SHA5127832be470f49e15af9042ca8cc2447fd6405645a53055f9164c9471d218d056c2366cc9ae4ef47cba38e9b02653c48eb81e1a6ad7e7673ef33fd6b410b1ac34a
-
/data/data/com.juzifenqi.app/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmpFilesize
567B
MD5cabdd2d9642497130ddf2f538e1cf605
SHA168853901331dd71d34aa949144110d73c048b898
SHA2566b8448d372357f3eac14c1b7a25d187c4a5641605d75e060a252406d088e273d
SHA51242f4d1dc1ef3e9f6e732d230d9d9503600e949bc152c320a069782031e79c867419c66bb94ad0f179065438af194d24f89fe084cebe4d6c6ac422ea5d48bf233
-
/data/data/com.juzifenqi.app/files/a/b/7de3252ce9028657c0cf8392d54a6b72.0.tmpFilesize
1KB
MD5f6f1ccf9e00392705ac95e6bdbbec04a
SHA17e5f2fb1e7323c4e862b8444144ceca9eb275c08
SHA2561569428697588d5ffb4eb1c1e77b63b645498888c2c3d90b8c62b758986680d2
SHA5127381ac2e0a2171d61b7c80b4c1efaf60e1d51073ca8cb430cd0dac084871705cdaaa669032b2407bccf4d60596a457fb24a493fc3d3021fd79ac32807afc5673
-
/data/data/com.juzifenqi.app/files/a/b/journalFilesize
113B
MD50cf77f36c527abcba3e91da23011c1bf
SHA13bd240ceb6e24c9ceb3e2ac8cbaab6cec10cdfdf
SHA256a6bb2d97757402adee9ec84cd2497f9e23a9408d3ac4f09f2d8fd23066cad0b6
SHA5126e6e40d6ff7a2e539b81246e9176b4ee18937c9f7884592a91b7613f4eaa754c54c97dde39c6c7c81fbb6901231c3136a288c801bd3c654e58bf24a29112cca4
-
/data/data/com.juzifenqi.app/files/a/b/journalFilesize
196B
MD56d2364b0056a6e3b52009ab9043d0e0c
SHA1b6ceb4206c772bbf184627857392bf73e1efa5aa
SHA25655f2f695596fbb27693f46c5422b6793b4545e366aea03b98d2ddaecbe87dc21
SHA5124b624e2f810b5cb833f59ef80e903adfb5409b45f7e6f9d3e13573af78319b48d20060bd61a46164f0e4bdeff0d63afe6b656e6c5efe2240d5382eab782b652b
-
/data/data/com.juzifenqi.app/files/a/b/journalFilesize
278B
MD5af3ca01a532bfe458ebbefe69637f4fa
SHA14d2e57be64d3aaeef2465a974a40a8d7cae378a5
SHA256173c8c37426d7eed2f904e3af44bdde5e5d4c1375e2e458f3a6cd48a7ec6efd0
SHA512520bf2de3078abd8d7c2e3aeb19bbb433d243c2e4a0f425a4345a3f74108291397e2e22414091981c71ae90ef09ffa665d7369b17217d718ed7b6fcc42cd7aaa
-
/data/data/com.juzifenqi.app/files/a/b/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/data/com.juzifenqi.app/files/pushcore__local_last_session.jsonFilesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/data/com.juzifenqi.app/files/pushcore__local_stat_cache.jsonFilesize
722B
MD522aab82a7945ea1db3fd7b9357d8a607
SHA174faa2bb55a12ab6b94aa6eac40c81ac4d70bc5f
SHA256c178a0893020d03a8702d94ad094304c9a16071fd9c3f20769e759e1ded94191
SHA512bf8705a0569fbf48d491ee94eaf4ec65d9c92cbe2ce706a65192ed35609b9f8b2650194279c8b7972dd20dd848dabe685f0d881edf0078e114ff2725bfac52d0
-
/data/user/0/com.juzifenqi.app/cache/td_fm.jarFilesize
84KB
MD5b94b2179695252d2d9220e97d14e2557
SHA13a0278afd368d25a40670745171a1248590e92a5
SHA256a165fd6c0ae33cc8162e164a63b5e5abfafea84a4ef69b3a2845dec716046448
SHA5120ca17f898c9fe03cbd1cefd19a021b351a7f7432a8520f7527900b9b553dadc305ec2e8ae51ac6eba6deacaa1472ccbb01bafae98646158234ba29213da1c1e5
-
/storage/emulated/0/360/.deviceIdFilesize
32KB
MD51c56df0a0870ed1c3273c17e476a6f03
SHA1865db3b9119dd6dc82187d525c8b6be494484a99
SHA2567c6359bd9670bf186ea39c6e8f08f4120d033077a6167ce7d1e76f3dca6bca5c
SHA512f07447e0c243df2dcf050b93609f339a1d5cb61cd7a240b5bcc02a2bfd160a5783e1a69ada604c72ac6fded56a9607c4624f92794a052e9f2cabbf2c334cc246
-
/storage/emulated/0/360/.iddataFilesize
32KB
MD5b30b0657fdff979f1b47252f82bb82cc
SHA1759e65e93e15fd4e1a1c53566bfb0a5e42df97d0
SHA256bc1d5f6faea49cb4ea3d18b60129d1406707e42c40d0f5d635fe5a451dd69638
SHA51249e5472819e5dc59be28270021fe5c3bbb0d660d66d2df904aefe10393760b7b4880f45c71601d31937759bb331d58f7335d935f1688ee61dbd4694e7d48e171
-
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.dbFilesize
20KB
MD5731fba9d21f23915576ea5dc2ea3ffb8
SHA1d1fdbc209db8b71d1b4e5341e75b8cc88647146a
SHA25687510194f38897a04cd1f80bd6fffc3344fa8ef21baa61de020a2e790a7268ab
SHA512b643177cf3a30543342d3a521a2dcfce70df4ec450b040e2b61d8692bbed4b3cde2f9f304cbf496869b89455e3cc6a501e8ff720edbdf0f6898e6a5f31fec25d
-
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journalFilesize
512B
MD585ad43e0ea666a40d50caacb7f08e10b
SHA185d198e2214deabbcc29532bf86abfcd14ef99fd
SHA256beac0381e0e8248b57607f7b5a1eb13486c588f5b190a67cbc261fc2269cea7f
SHA5128121f980feaf155ae3dbd1881e8588576472e4fe2431625c588bc9bec4358fadbc2c60da28cf6a8025f4652541482e98bf73866a429403798e83301209faee96
-
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-walFilesize
32KB
MD5f1b6b0fa45f7752be4cf8621fcb91411
SHA10daf4910bc41735b7996cb053f537bf8742a55c7
SHA256eca32e85dc5a47642139b89e7b743bd8e005f895d7b495fa3ba6cfd319a2955e
SHA5127169a18de051f36fb018a1169c19814d44a8a67de1ece46179f206c154d2191568e0358b10e6ec0228b49ac08f5f645d1fdc3b76098eb5c74c140c96cdb666e2
-
/storage/emulated/0/backups/system/.confdFilesize
20KB
MD5249e034c9703afc1fd6062371c7f3da8
SHA19ca489179488e0fe5a35f7c0d5887f163e4890cd
SHA25618fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a
SHA512b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd
-
/storage/emulated/0/backups/system/.confdFilesize
24KB
MD565a1b8a75eefa4b35f7275e962d38b76
SHA1c3dbc7aacca88cbb09416bb5498d173f98d1be7a
SHA2568e2ef9f22a5f7935eb7379e62e509ceb7eba207fbd2958919b866bbda75c4333
SHA512f3ebbb138c008583279d2fd2edc2a62b90e13c5576a85b39c91e88fcfdaeed4cefdc4b92b4962766e2bf7dd0c748aea88d6561eb41c3e7bf938855501d3b0618
-
/storage/emulated/0/backups/system/.confdFilesize
24KB
MD54b30cd9143fb3c04f16a354493ce3e4d
SHA12369578263b5b7e3f6632fd7a52bae1d98cffe85
SHA25622ee06ee5fa6fd1ca5a591ac03d5c9060d37c4169f23f077ce460c6fc2e979a4
SHA512da29f036f424a6831ef30660174764670cff3dfc9b2afd34c4e1212a81e50f22a7bcd288e75133c1b707f3295825331c3b78de11fe0b2c6a108d2032cfa0e4f2
-
/storage/emulated/0/backups/system/.confdFilesize
32KB
MD51f78ae0bf65e4dc4ed8daf9dc40604a9
SHA1b313a47054c17afc28adc897fb5fe376afba1daa
SHA2560f08ee83841222c96cb93113e74d46a17c7fd5470f65995f42a3532a25bd64c6
SHA512114dee74b48cd604ab290c07f45b77c82bcc1fa60dfca6797d27a97101ac502c43714f939225a56c3c042d374f9259648b82794793196ad950e67fbe6c4d5ded
-
/storage/emulated/0/backups/system/.confd-walFilesize
36KB
MD5eeff25a81b5ce4c9d7b591a3220186ea
SHA1e1e722e91061d6486b2e5560efacfac73e76208e
SHA256d1e4a81b51217f1a7b6ba8ca7fcd1efc6a0a1e479d9f739008a5681a284631ac
SHA51268ce16785e7f71ad750bbed8ab2620850de7ebf6e08bd735f6a46336f743490ee6c88dde9cae2ab75d35c66f596f9f11e61b693637b2ea4333d67c42f6cf6c8d
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD54a76e3dd6ce75ecfea994ecb0f590fb4
SHA1a08093a372fbf2a72c37ea5e65db110d0040e0f5
SHA2563f9aed08f952e22719cd0dadc5a6b4dde3dc75661e6431b570d62710fb900312
SHA5123c70f88cbcfd779a3d7391d2ee801c8c6e6775fc4bfaaea53d3bb832249d1dc2df9a96fa0424df57f209ee784fc380d0491eb00526082ca63371a7b368bab16a
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD59ed62fa9cd8085effc3f7d61f4a79f59
SHA1dfedf288d8358657b8a660a2a06f85b2e5137c31
SHA2565834f79e915389266d961553f6c2f66ba7733ca3a80ddc249c100ee31c302645
SHA512c4843b6e3311d4faeb67d9e1d09777a86391bc2c753996cf17c46b7362bf57d782ab295108327414dde3debc8c312f04fd917d971723a3ead73e6546cbe6ea20
-
/storage/emulated/0/backups/system/.confd-walFilesize
12KB
MD5b447af2d576019d3b6ef1d2ced76fdba
SHA195904fe8f49a72a9bfe114650a350d7eab9fb3aa
SHA25653958bc5a4908841b25a00386fc7194b051d536259a7b90a784fefbae3371682
SHA512a9ec286f93b69195d8f3481c3e71e2876b00b8e14df3a475c92b145c3caf4257a0de0149f19a4723d20b49814b82172ec4a121e888ec039d33a331e2d38e7766
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD512bd74a9d78b9036635f3b7071cdc4b4
SHA1159998abed887baebb717d2d4f7f198fedef8748
SHA256166cfe683ecda0b797ced18b6a916fa0f99d64070a8d13fb056e080ab613bf55
SHA512c4ff152fe58d1a5f13ae9b0ff318d6a954110b89068540eba2c4c3b9652130e0ab9ca6c5dca133cbc0edbc391b3e729fa38b45ea824b90dbd130863d8f1c42b1
-
/storage/emulated/0/backups/system/.confd-walFilesize
12KB
MD58c9d35989c268bdf983134ea63e17472
SHA12cc979c7da0f3ad0e1228e9b19c232daade2dae4
SHA25649d5331e5d5043cbf9a0396eaff135c526646b2b93788884f07e537c62cdbb03
SHA5122a984b659ab54465ca7593a29c16b7049c94469be4c6c174f8465d601108c1f888ee5d5697f7418079b0015b26e908525ac8cc5b1cc32dd509b05504b8465c98
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD56b503253635c35d769de4b0982a41099
SHA1e77e4af9cab632620607dc76482ccf8c4fad8122
SHA2562dd90835a20c4c21d2e18e83ae74ad9c16f372eb90b18bcd23bc40837509b560
SHA5122a5a161416ee61b283235b7efd32efe34ef5e8ca706c6f347b534e21b027425965b6d63981f9a63c19ab7425f68a6482ae6535804018f95697d0e1fb63f405e7
-
/storage/emulated/0/backups/system/.timestampFilesize
55B
MD55a8e007de485107cf8ba554c642b1198
SHA1dd9288be52f076c3fb993b13f2e587e8b848dd81
SHA256ec73a64ae756b127cc78eb94bc3ee67110ca174f92fcb0d627ef23d2e52cda8f
SHA5123cb1b43ffef0f3a3f4310cdf2be0f4392d9a805b3b78884b712c595b4633ef89b0ccb5e3cc9734fc35f3a00b15406b4018e4baf7ef2f261a9c4bb34e0d3c7329
-
/storage/emulated/0/backups/system/.timestampFilesize
84B
MD5794a31b787eae519ab3e1b2052e6d087
SHA1b66b7f1be85539f2dc417cd77a9b758f2a657c79
SHA2567c30d878f9d54099080f93e633908eda17e91282de22024bbe9e59c0b66b919d
SHA512cd4616d0983d8bd2910aa3ab1e94a14dc270a35da7c7fc2b862ea49f2e090f5201617ecc9bac54491c8b934bb2bbca7736791434e92d9e6d0623c883d58c5408
-
/storage/emulated/0/backups/system/.timestampFilesize
114B
MD5f9bf3c0b94ae061c7b961d9a1bd33bb6
SHA1047f0504a38bdbf86dd0d2be3d4393926dc646fb
SHA25697f29e9f12aa4115ef3bb5593c37acc6fecd43521caf5c01ee85409dc2a19e9c
SHA5124f3333f281b3973261b4dd0dbc541808f5434677bb15a8dfcdbfea6915e4c473f46baa1e19068eabe456e4c404577ae0849518ed98a71ed43f23ad7efde425e5
-
/storage/emulated/0/backups/system/.timestampFilesize
138B
MD5b4a83b203e75ea2dbc42aa70802bb9a5
SHA10a362d10e1faec4d6c8a94496f07ecb4a08b338c
SHA256afee3a673fb5942ff3d209680206162b4db689c13e539c79bc5cabea7195fa7a
SHA512637fe71c3c698fda9c4e2e89b44ea32b377e6e56387ab57aecc9c06d046f7740882f14135380adb9b4aba40b7c1ad19d9e76919add1feabe4a5e2e01335ceea5
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD535c049dabaff4ed91495c1fb57eac038
SHA13198094189f2d8a5722c9913c350f0785c2090af
SHA256d6fb0f6ef897e74605895949450877c7e3314b350d0bc369176c8003b2e35617
SHA5128af2c617f68ecae596e37ce2863a4cbc7979add060c93d686d69c4fcaf588b97e3ccc9d58f8409d0d4aba96b09c6b3f40292a5dab049e83b26834ffa856892fb