Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2361184s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 05:32

General

  • Target

    87d5a4d7cf1d13059ea0d37691a60254fa77c23e032fe14e479fbb346f37a19e.apk

  • Size

    27.2MB

  • MD5

    f6dbc5ed3450c6d25a905b1c5341a12a

  • SHA1

    49b674384e8947f468b07199894823f62cf487e2

  • SHA256

    87d5a4d7cf1d13059ea0d37691a60254fa77c23e032fe14e479fbb346f37a19e

  • SHA512

    7fa7186e39da915282bfc20a058bb05557c95c96ccd7ca130b3442507c7bc65e6eb39f7776a4cd4635903ee43a7f72a1380b94aa88241e3997ffce01449ac8a6

  • SSDEEP

    393216:5UCVBPeD8AewslGgMGQCOHoARnOWCIN9Lim+KpSzmKMeM:732DfmtQdtRnn9Lv+CSKKMeM

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

Processes

  • com.hh.DG11
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5002
  • com.hh.DG11:core
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5177
  • com.hh.DG11:channel
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5350

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.hh.DG11/.jiagu/libjiagu.so

    Filesize

    482KB

    MD5

    f380717bd1e3916c7b697fab8d46c5d8

    SHA1

    04f51f0d16097214e38be517d93be44cb0603a88

    SHA256

    8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc

    SHA512

    b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

  • /data/data/com.hh.DG11/cache/image_manager_disk_cache/ba89dd150de6234a4a1412ac4ed1802baa60b36fbdfdfbd8b74d1bb50bf3f1f2.0.tmp

    Filesize

    36KB

    MD5

    a766795902807cc45ee722b45642a832

    SHA1

    ea84845f46897a4fb5d37a993440f9b051fd7db5

    SHA256

    27d9813e502ba48073acce4c46a3c3a9784ba6dfe5177bdf2e2c1464cdc7aeb0

    SHA512

    9f8f5663183f73ec787b8389824a73cfe639f505ec9389bd564ae276b53dff8eaf18a1d5d32cb7cec6976a637c25ef26f25987b8a94ad69710a661047b9a5c3e

  • /data/data/com.hh.DG11/cache/image_manager_disk_cache/c8a73316120cd0c84331cc296d64f01d1534e1f36ee3d294a15c017f45ce7664.0.tmp

    Filesize

    30KB

    MD5

    579369e17f37bdedfe80f1b8a57c1f2f

    SHA1

    a71791cf7e56d99d93ac1b56d3b743e45d67cdc5

    SHA256

    1f4f475cc9d957273ff1f115f22bed98cbef50859aa060413604358fae9acc3c

    SHA512

    1cbb0df36162fa7382203a0fdee2b07c17bbd9d5ddf94c267871e0d5abbe39cfbb58ea365d9af3a86513742d1f34f01f834761778101531d6104bc797b0535ee

  • /data/data/com.hh.DG11/cache/image_manager_disk_cache/journal

    Filesize

    71B

    MD5

    ac10f147fb966efb9555c67c0adbea22

    SHA1

    dd1fe4568af691a79321d06790cca0dbe5d5f05d

    SHA256

    d39d0ba4373b2ff6c321b04bdf850340042095d7de47b845ee5c5829380edf87

    SHA512

    7b69f5cfb0b86b0484b97f51de85f3e0b97a2a431ef0a7cd359d4a3c9a20371cd3f3bbf0f565ebc0ff7992380d93c47b860569a40496e7f00cba8d792fcb9b28

  • /data/data/com.hh.DG11/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.hh.DG11/databases/MessageStore.db

    Filesize

    36KB

    MD5

    15669eb47bb19111cb64fa7508b227d7

    SHA1

    c7585424afeb0fc7051697b771eb3d81e0e3aae3

    SHA256

    ecb0e8c93a782292a1dfe20a90e204d1c1c804e2773f1831c9ca34826aa62071

    SHA512

    13c2cb45912090ba0b670b36050eab5954e22d57b79e141d2236035dc1ea2000960d93ebc544fc4dee48765335a3d52baeb5d31c8a40407224c624fffebbc11b

  • /data/data/com.hh.DG11/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    951d5db8c7300236fad40ba764f4e6e1

    SHA1

    576bff8629695524ec504aa40ee8e5e0d8b72039

    SHA256

    f68690b723fd9a2fdb11f9f292b40cfaf6e277acb37003fc4aefa41c38b6c86d

    SHA512

    59f3b29363a8450da1b934f5629903086bc6b59f3e1595a766db783373f4bee70529ea36f883489463ff4d5493436e4dbe78164b6b175e61b56995ce6627cc66

  • /data/data/com.hh.DG11/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    0018cc34ab4297426fc33ab3d6c0ddfa

    SHA1

    511bb9db901528545e7a03f435f1d0e93428dba2

    SHA256

    5499129fec7ac32781493afe8718b960db13eba2198d96696ea3c0abe31b162e

    SHA512

    811eb9d5a439a8490c01ed3fea3e4b0ef66c4b4466c67a8308dcdc0e41318485f17cf54c5119193d89c796853ed4366050f050e31ded7f6feed2b88da17f0074

  • /data/data/com.hh.DG11/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    233a91956a438fb66296fe524af6df32

    SHA1

    31a90c0579d70aa2208f8fd2edbe1b291f0c234a

    SHA256

    002b69114ac7b35c31e979695839603d5bf6bb311a3e5388892908999b9ef850

    SHA512

    0f72b5ee379d93009af4603022ce929a1d70771d1e34f1f256dd09da59add73303de683d8cfafed2f9aa16a5988438df68aaa0edc710978269880fe32be6bfd9

  • /data/data/com.hh.DG11/databases/MessageStore.db-journal

    Filesize

    12KB

    MD5

    297b8ef5ea720163e1dcfce79a726f8d

    SHA1

    1e5390e0221739ef4a284f4819500a540d6fe74f

    SHA256

    d5ae66790f3da62197ee579a45a67eea516a9d023286786e72ef1d407b26a97f

    SHA512

    f69e52175cd8682ad2ef4a20fe45f041d5b1c0c311f7f69f3b920b73b7e0d8f70ee17ee06bd5e707cb448da9657f5f220369f2a6d6a45a91ab3c67c34ffc77c6

  • /data/data/com.hh.DG11/databases/MsgLogStore.db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.hh.DG11/databases/MsgLogStore.db-journal

    Filesize

    512B

    MD5

    67d3f8d7f4195f5c7fc98a01e99f36ae

    SHA1

    c59a2dfaaf777423ee172ec1034755e0dca64052

    SHA256

    a6a8f62fa4657f60e3be7d58bcf75ee98dfdda09140896c13b8a7cf10730a767

    SHA512

    45f5a3c6b835495ea2fb29e25d16f266c5fca161af02dbb676767a7335970529113797eeb88f0549877b5d0f9c72cf3e383bfff8777e9bf935a2c70199cf0b7b

  • /data/data/com.hh.DG11/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    ac31610426e4d90836b1685fae8aca70

    SHA1

    2a37eda9368607f788e171fc8e9953b6e27e4745

    SHA256

    56c1b3eae9aba64823eefff3a80f9cd04312a0f4ad1e19c9cfabb009d3b7206b

    SHA512

    ece9a9b5f7df0793990c3960086849f76147d62e27ae6f24a53968623ff30bc5f7bda781f4df4e09c5e4c50461908a738a898263be3ac2d13d88787c62aa5afc

  • /data/data/com.hh.DG11/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    24dc5dd361a04e6d9dc2236c4b645996

    SHA1

    16cb8c4577dbaa94d395f39f3f675f192129f1f3

    SHA256

    85e5d4ba01130e367f035d2cdc2a2d6304682bcdca9af83d802e7a79cdbddcef

    SHA512

    76730687505c30e353ab240bd751b1fc378dd3d87a90ef21b6efcfe3edd370684d7e167f545326addc5e59143a3486351bf75a1b3a2bdc5941950ef6e98ad847

  • /data/data/com.hh.DG11/databases/accs.db

    Filesize

    20KB

    MD5

    d95e1280cc553509d7b5b7851398db12

    SHA1

    121eb76ea37f3407d0f3b56392f6f67893fbe649

    SHA256

    58e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c

    SHA512

    f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284

  • /data/data/com.hh.DG11/databases/accs.db-journal

    Filesize

    512B

    MD5

    204e4be9e17c7c2bb1b1990b10201fe9

    SHA1

    e322c1e6a09c7cd0fcc9e0c4d83e21b543b15fde

    SHA256

    0a0c20fc4f07c11c7b376c6ea804f18e053daa3aacfa4e066132adb8cc218d02

    SHA512

    5a5049ea774232d2047112817a932bf6863ff91f6a04fd5016aa88a0de36815949c49392bec9c8afd44594f1b76c53bdc50bba4c8b249941c1eb687ceaa5b833

  • /data/data/com.hh.DG11/databases/accs.db-journal

    Filesize

    8KB

    MD5

    0a8bc1aba2910a86984d15de2a56fa55

    SHA1

    ddb092cfbf8644047b7729d153bb6f1e62b0eb1a

    SHA256

    c751921ea9ddc23452ed98c30be113ff484805cb8e61b5da214a5d640e00c64f

    SHA512

    b5f956f83f0440ffd8c2ae33149e34e3f8e3075fa60a95355eb8d42ba7cfb92d6809a85b18c8f1437fda5cee5ace5525c36ce5f995788494dd7d70ee649517a3

  • /data/data/com.hh.DG11/databases/accs.db-journal

    Filesize

    8KB

    MD5

    5c3dc58430985f432d440a7a0188bc0f

    SHA1

    2baf478648c143aa33ba8a86f3f185d7e78003d2

    SHA256

    2e621e1d39079720d73cc3ae81a45104b3e6d659f69de04720d542838de08384

    SHA512

    9da03e0531de8b9886aee05364485925221d0ce8dabe43522382923c1ac61e7a680f3342d40ed4c6f217363041c1e905e4de49d0f4e28c4da2d4b75bb99b18ea

  • /data/data/com.hh.DG11/databases/hmdb

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.hh.DG11/databases/hmdb-journal

    Filesize

    512B

    MD5

    03031e1176c43ff077e0582137af8b7b

    SHA1

    cec5c40cb9507162ba4d5c1437f279ea53d78e4c

    SHA256

    8d716bca9fe19a58979cbd1406cb7f4bdb47f83d0b094dee43c1df8de5d81236

    SHA512

    2f5af1af3327744ca6978a0f00a9cc2bab68ea4da49672c7f5350e8b0d1d7dc26dddc8f3936d4fab7e70fcd20d06008dd640b7e3c1153188fa8bcef9c4228770

  • /data/data/com.hh.DG11/databases/hmdb-journal

    Filesize

    512B

    MD5

    daf1f8c496aee08d60009924dfb399ed

    SHA1

    0df33296bee64d5ae90c237639c1680d3ea60f66

    SHA256

    64b66918aed177007bae8d462d41d259c6313b24b927373b9a1023e89a4d67aa

    SHA512

    92b536c35dc1dbfafcbaccbff8d9235d8262b2668f8bcb65ce0f33d06720a8fc1e027082de732d584c48fcb15d2d6f23972c33560f56d72d7edb495c80a83eca

  • /data/data/com.hh.DG11/databases/message_accs_db

    Filesize

    36KB

    MD5

    50f3d63f4b9241e212be8ec20bf3e374

    SHA1

    10353f506f0aa9dfab398275482eb42da167232a

    SHA256

    be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653

    SHA512

    dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c

  • /data/data/com.hh.DG11/databases/message_accs_db-journal

    Filesize

    512B

    MD5

    e64176504f2c6dd5b0034bc38586d1f1

    SHA1

    1fa7e6f73ba410ae529c37fd94dd88891d2bde0a

    SHA256

    9b4a3bf8eb4d4ee76a3ceaf03c9fc4304a339d0f3aa641fcf6010864b7751c81

    SHA512

    6f3b264595a13a1980af8cc7c20be4887032a8b6b4c12ce7125b448df33c97cdb28dca69f84a2357bef4f2ab6f15498c5661bd845e6ca7791841ed1dcf546b2d

  • /data/data/com.hh.DG11/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    12fdd83727c419c2fbbc00e6a0535ac2

    SHA1

    bb7c5c26c4ac5a4fb95124b143ce2271c87f7f69

    SHA256

    e8f46f3cc0de0b35cded195423c3068f853330f730ea0859f71070dcf2e511b6

    SHA512

    a155d39350b440f2437bd2eb6ad8f9fdd04252d646e8aee46f637b8b8f30b4e3de8f4dd3ccb90dcb6fbd79a0de680fb45bda827a6e56a5b76e082416ac21bb66

  • /data/data/com.hh.DG11/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    f2930d839e1c0e2992936a246731eee1

    SHA1

    f3576b9d732434a0dd9b7c40ea733024af5130f2

    SHA256

    88bf67745938ffe81f061a0606f0511026254b1fa45dfdb5d9d5fb66f55ad84f

    SHA512

    0d5f13fcfdc2dc5cb575c7347fa52bb47012c5178fdf0804bfec418879ee26bbe98c0ad5ca308e3d6b6307ec9f1dde4c2e14302ef5a50422e7c07ed395756c2e

  • /data/data/com.hh.DG11/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    e92f60f605c98ed70e1ab8256d123b0e

    SHA1

    9808153866ac5ae8415cdd8db317ec6f76ec2bd5

    SHA256

    70d4d9ee9daf8655247ebb484ee449579245300e6948f6a34a827a023299938b

    SHA512

    122b1615eba09a51ae414633fc2cddb91b5ff5efe7ce63ae4229b57fbd4dad14f6078315091dfb987049fb6bfa4a10cbeab7c12edacbf7cde642302ec1b58689

  • /data/data/com.hh.DG11/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    e0400b438f69976f207b1689be4aaf0f

    SHA1

    b0980dab48c84634d671703381cbef335a09a853

    SHA256

    ab131964914dd0934f97c72b1741779d3cca6bfaff8ec29590cda540c3bc4260

    SHA512

    ab76178bdb38b8cb57828cca0107849db232693464e7528331abcc6cfae40af14ca5d6014793537d4afcf04ce68c477ecf2be3c0d46b0dadac41c24be14bc5db

  • /data/data/com.hh.DG11/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    a92cb3c85f9047043e380035e93d97f6

    SHA1

    02636d0c9079994b32166d46bd3202a0ee648188

    SHA256

    f8d09a2bcb0e1a7b7461912869c6e8fb79fcda0e6235ab86345c685107d1496e

    SHA512

    279f3d4ad6f14955e46eeb993fed99bbb610ce303d30fc1624e252d89917c187dbe43db3ba37ce16010258222f65f183631c8bc5c6e101fa1d8c8fb7fc0ebd2d

  • /data/data/com.hh.DG11/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    7ae9f4a56c6f1eb050e2e9c8b1553d05

    SHA1

    7eec746bbd96205fbcdfbc494dbfc4a8c5b1f76b

    SHA256

    a3a2146f8e7486fb4dd251f2284837d317855a52c05e98bdd44a40e2398aaa8f

    SHA512

    d9fe07bcc8b9ea69e0f685fb9dd82f0cb9cf05b5fde02ee34fa0566dc9be5a06db907ccffdd52adf5d42cc505eb2b4059b62d0bf9c2a8945fc7fb142d55ee0e0

  • /data/data/com.hh.DG11/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    501b89b6eff8ee56b31a00e47f56095a

    SHA1

    f59a03a86601bb27908ba8ffe21af5b3f4377fbd

    SHA256

    f949c063201051402f07232eec7ddf9da8b773a7100565d73600323fbb6fc4af

    SHA512

    824fc36d4945c32d18afdfc50e3f42bb3a9c4e9c1a0d0f37dc90ad17ce82cd1226de63612664a7fb122fc0172d3305a780d451a3495aaa23663e6dd0333a02b3

  • /data/data/com.hh.DG11/files/.jglogs/.jg.store

    Filesize

    127B

    MD5

    c3271c6075121c116149d4b71dfc63ef

    SHA1

    696b831a9a62f31c3c632202b11883ca793af6b3

    SHA256

    c399f40a38f19e4a370324c2c746ab30b6ebec30fd5788faa89686d9bdf87b78

    SHA512

    5787b7678de4cfb7972caa85be752323b27767c08fb55a184c5ea7fe1b5744b3789ea306b0b048b2354169aee6f3cf64b6cab1c067df1e3d0e3e461eb94077f4

  • /data/data/com.hh.DG11/files/.jglogs/.jg.store

    Filesize

    32B

    MD5

    448e391c59eef34ee1defbe4dee4c41f

    SHA1

    df1f890987371d7d8e6963c68b787856e42bc146

    SHA256

    55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

    SHA512

    ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

  • /data/data/com.hh.DG11/files/.jiagu.lock

    Filesize

    27B

    MD5

    6d5c8a05293639e0e7586e2ca1d84581

    SHA1

    00328c7d3b0b3bfccf90c40e07b3ccd75646a542

    SHA256

    1d7aec9f3a6ad4d9bc17a8caff57efaa7a75e12e5b6518d7e6e526a2d5930aeb

    SHA512

    1f718f8feb9b0b2a35136873cdb9c685b6d1b86d5d0be8f61e169337c7128ffa7ec90dd403b3d85841b434b85dc169c610dcb266b3158e54d1b1d23e225e5408

  • /data/data/com.hh.DG11/files/agoo.pid

    Filesize

    32B

    MD5

    42eaa1cd2321396da2488e90cd9c784a

    SHA1

    b20bd45baa7b89b219e15eb26c2235c8f1f79eb0

    SHA256

    d1e4acfed88c126080c7178fe0faedd2fb702a6d0a4f44787fa173d7a50d8f9a

    SHA512

    2be37bdf3eb334b35af58884afec1d6a6292211b58ca7045f179125f33c7db2c2ba7f5c78e6173992f52fa95157586fe2051573ba0ae70b0a0a4654bc3859779

  • /data/data/com.hh.DG11/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMTY4MDk5Mzcx

    Filesize

    1KB

    MD5

    1668ea30baf6c5f4b093a225b26c331e

    SHA1

    e6ba65cd6e7ff9331c234e1bd6382a0d30d4f84d

    SHA256

    e715049b04ae2e15939a12dad826940d75697b667b3dc28fd95cc7f6087f31e9

    SHA512

    3f8c5e10c3712d08f96b10778a651577e1dd71dd14e8728946605b0102a6f1379bd11ba9e5361a2848068d49aa4633ce5c5b953662c2def34b4575da5dcdf3f9

  • /data/data/com.hh.DG11/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMTY4MTMwMzgw

    Filesize

    1KB

    MD5

    d4087b5f32e3b1e14076474e1fab9cda

    SHA1

    7643ae89bc14db8aed2ab29f9e71b4f3b0123014

    SHA256

    4a6af08d2e5d6451496fae3cffe573974729cfadfce15066b5f1ca8a46ea56a7

    SHA512

    dec3d9b82b80dc107a5383f947dae1b2075e68500aa608d8364a5412e24d25d6a644fb7e1f3ee3648b96e9c85d07aa28298dd2f8017a1a044ef370fa7581a576

  • /data/data/com.hh.DG11/files/umeng_it.cache

    Filesize

    433B

    MD5

    ca2efd5c8fd2059e680f3422af8d815f

    SHA1

    5976224b5c6aefe68ec366a6f704fdb7b7df337b

    SHA256

    5596af36cfae0d09002a11f5d7e784e30f14135a793f52910a77c7c11563dea0

    SHA512

    42f20490181e13fd5c48d1646f10f3216b9959a71bee9bcf23226f24e59b35302bf4c8bebcec5576c5ad7906433df95254285761c2b3679ae52f2aba6129df25

  • /data/user/0/com.hh.DG11/[email protected]

    Filesize

    6.6MB

    MD5

    186b453cbffb6f9f6eb4a2f411ac5639

    SHA1

    5df0c56048bda82d4503385407a32fc7edfb62e7

    SHA256

    6258bcf9b4d16a12bbceb9500ce7d441788aaa01bdfcd396b24fe67ad0a76529

    SHA512

    ec80a69ce5ce7d188bd7b018295feb7f696b17d552b4683ce90bd2ed91d2baf50ccf04f9eda20b90625152219efca6d9c5cb1b77d33f1508b650061bda01b1b6

  • /data/user/0/com.hh.DG11/[email protected]!classes2.dex

    Filesize

    5.6MB

    MD5

    2a2237443fc6d1e78b362567b34252d3

    SHA1

    ea434c1b06b7ca1b408c85374e275a950bbe974c

    SHA256

    a9fcd1979438444285c430b685ce7678a63324bfa4e9ca076738fbffdfc84b6c

    SHA512

    dccedaa81122f7f5e2737f3bba135b126866d02528cdd190b6002ea10a78aefa8ae3c6fa0f800308438870f7fd23c88abb324ea22fa9a138c33c7a5927a1bb1c

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    314B

    MD5

    cf028230d5578e6e8c378739675a9aba

    SHA1

    9f08ccf07a1ccf8dc4cc8bae7e1a4e06966173a6

    SHA256

    a3c492152b5bccdcc3ee0d3c78ae9766541a9de2e6a386ea303a262e0edea6f6

    SHA512

    244c5898242330733d628763635578249054ceb92958d5a70b1c62afeff7c1b43bebc70e9521d1d15b98d168a831f86d5d3b2ee195b81c0873c33caa150691ca

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    314B

    MD5

    1d8847aa3096171f39f3e1c8fb59e7af

    SHA1

    03390ca3500fbe9496efe66ad6f6282f665093fb

    SHA256

    0daf3a508be03467348b714947be3891032862108ca97a8b393e6fef00ca2cc5

    SHA512

    def41df345c00892f2f26cf8f7d3f758f59e1da1baef97388236d46f86fd417ae32db6f7ac131b7085dcb5bc1a44a9973a382308f5d3f5f8f4d04deb29ec5d68

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    4d50c26769fce2a959c8929d6c2e389b

    SHA1

    a0b55d92ff647fa2d6280b768396d1eb3fa1c5bd

    SHA256

    5cd1550c22adca5a69d41169fe782528af67f298f287691e0272e2d2dc400dba

    SHA512

    1cf9427b9b5e482cb7dce5925567ed4d75333a29cbcaad2ac048fd8bda04b058e89150d1ebd71d9b9a9ea5a6946c6b8c8dbbe3dde27f103d63b9da98a59107f8

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    213B

    MD5

    73de4ad368df0cc14de0d71ebf76705d

    SHA1

    fc10c4af35d1c62def364af24d25cb8caa310196

    SHA256

    17b622d27a02861849469d156f8662c5daa77b117bc2e08257cb71de40ea6b32

    SHA512

    177b32ec9adec424777e0589a873302b3d647a58272a97a580741c7eb35f14849747af93fa4d5085cc4367376a1c06f2c5558b2b11dbc7f9b0ffdc040ea5f3ce

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    482KB

    MD5

    6bde665b819d8414e4f0f8e8e62bb889

    SHA1

    e95ff42f391e4e8af7a25894beba92d3477e0ec1

    SHA256

    7778d07e3902403c2dc73db1066c0d70ed497ebd43cd1a189d6b0bd519e88788

    SHA512

    fc72d82fdac61affb2145190633212ce33ec57c2ecc8fbcd7f0d63fa432085938ed4cb90491e44318640821c269c279dd19e0eed2c9400c287d4e51149b64389

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    b056d666f25cb094339b65d4303e9da2

    SHA1

    197400cc0193ec1689a4c201c906af84dfa030cc

    SHA256

    7143e0fbc188c8d318cecce50e564d1c63d431d1617bd196d3513bcf21fe6a7b

    SHA512

    44d9c0947d016dbb58d1af96c3a94df78c3f97c91532ed49405f43e481fd67c349fb3828f4dc880aa42f945b6acf211e895fdf8c1c51e8e0fa352cea85df038e

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    e391b8463405c99845c35751ce606e13

    SHA1

    784c83e60bb46e605f042f96062d207b3a36839d

    SHA256

    acec18f942ef40cd21533e071ae8d7d3c61c4ae29acaffbcb8d78c5824da13ae

    SHA512

    4db515b059355318a07566463c5e80e6fb81768e9c32835fa58baf257f8f1cc89e6a647ce57626c8a238d50701f4189d124c3e3d1b71c8623ddddccbe53c68fb

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    0e3f255c7161875b57aefd8ce78ef90f

    SHA1

    28529882a4cee7ac18b502da54ee5cb8cf606b01

    SHA256

    b1630b9bccec006b3c500f62e11b7ee9a14f891d51e6fe692a09948f485320e1

    SHA512

    a2d697ce0adcc910fc4a4737eebe938dfe4e5f7283fc171a378e32dc7348a0352c76d1af84886c3ef79b149e9156242f76d28a0da5434111cfb4ba5b8f550e7d

  • /storage/emulated/0/Android/data/com.hh.DG11/files/carrierdata/1703168175

    Filesize

    885B

    MD5

    7dc953b1a596752379acea9f675723e1

    SHA1

    193589c6bb2414ba98d7708b84709b15196c8bbb

    SHA256

    c9dd833ac8dc5b77a635830a80e0a1de65fa697d817866f7b3d5b98aabf8c2d6

    SHA512

    12575615d2793a41b397a7b800f689fa8713d41744227f5bc4ee772db8475a5fdce2cf6732bb568679bf9ef35e7e01d4bfc2cd29ccd465de7d70e270ee636c84

  • /storage/emulated/0/Android/data/com.hh.DG11/files/carrierdata/1703168175

    Filesize

    772B

    MD5

    919bd76c51cb1d9cb379901f055a24bd

    SHA1

    50aeb0337250ddc313b306007bc314a06d32fc83

    SHA256

    3e05aee97a15ea010e067dc8b4f14cda4866fadbd03854d2e6c7efc058bfc941

    SHA512

    fd9148c4414a6903eb7c843fa980a34ea0a2890e281133a82c906dd7a425dbedfb42638a2f0c8b30de6e477441c1b5f05ab47f889ed24f4f8c10f844718f8d02

  • /storage/emulated/0/Android/data/com.hh.DG11/files/com.qiyukf.unicorn/log/statistics/record.log

    Filesize

    256B

    MD5

    1e55fa269cef8a398f0db6e02982eba4

    SHA1

    0c5e84c02afd91de69c1ad6643b630e4634da783

    SHA256

    5bc3f2a79ac39bf0f88fc5ff4d6c286a0be4d58d5825893b10a4b4b850e96e61

    SHA512

    9b2acc3a0ff39e8c03ebd3e1b6921f95bb35323437fb5d1dc0d909c1023406bc10d26c1893df31fadc538d6b991a9f0afa120e901ca66261f40ce1f0fd7704ab

  • /storage/emulated/0/Android/data/com.hh.DG11/files/com.qiyukf.unicorn/log/tmp_u_20231221

    Filesize

    64KB

    MD5

    fcd6bcb56c1689fcef28b57c22475bad

    SHA1

    1adc95bebe9eea8c112d40cd04ab7a8d75c4f961

    SHA256

    de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31

    SHA512

    73e4153936dab198397b74ee9efc26093dda721eaab2f8d92786891153b45b04265a161b169c988edb0db2c53124607b6eaaa816559c5ce54f3dbc9fa6a7a4b2