Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2353832s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 04:57

General

  • Target

    859f1f3e1fed530f8d2a5ebf7df53bc82e58d189fa8027408cf0a38bbbe6e0ee.apk

  • Size

    8.1MB

  • MD5

    c640a44d7fe6a4ed4391f69056dbad08

  • SHA1

    a90e02b7277699ea0311f2ebb9e96efee8560717

  • SHA256

    859f1f3e1fed530f8d2a5ebf7df53bc82e58d189fa8027408cf0a38bbbe6e0ee

  • SHA512

    d82fdd880ae422c56403f12641dfed07e47f4c6bca686bb44aaaba2e647125c9f3a1f57c95a24730c6341d3a5d3043dee52aaca881108e8af98aa6ecb6630fd5

  • SSDEEP

    196608:qONiSbkFEHEzYqCJgoMeiDkG4I2UaTRuK:qONiEuSEpDDr4I2Dh

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.wuyoudai.xiyikeji_info.handyflowers
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4610
  • com.wuyoudai.xiyikeji_info.handyflowers:channel
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4767

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.wuyoudai.xiyikeji_info.handyflowers/.oabugaij/.fsgkea

    Filesize

    1B

    MD5

    01abfc750a0c942167651c40d088531d

    SHA1

    d08f88df745fa7950b104e4a707a31cfce7b5841

    SHA256

    334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b

    SHA512

    d369286ac86b60fa920f6464d26becacd9f4c8bd885b783407cdcaa74fafd45a8b56b364b63f6256c3ceef26278a1c7799d4243a8149b5ede5ce1d890b5c7236

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/.jiagu/classes.dex

    Filesize

    6.3MB

    MD5

    b9a6c631753a0780ad7e21d22f20968f

    SHA1

    1ccfddd5ea931b07e6a6946c757c31a25cdf91d2

    SHA256

    4b40f65f57c92da7808d69482d0204bf67d684694be7d793235907c4bb09df54

    SHA512

    794c7dcec09fbfb8a49dc6b1ae1d73e8415323f5199d6a9e15f406e15add523725aef09fabc0eb977561a94ba79327783a8c1192f61322e78269d44f9a9fec18

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/.jiagu/classes.dex!classes2.dex

    Filesize

    2.7MB

    MD5

    4117252ab00fe8f576c56a4ab2d83f58

    SHA1

    355f7c6c51704b8ede0bbbc38d0cd7c5f6be310e

    SHA256

    6a69767a290cc323742f68e6e811c08f8633f69d69646be2791c48f67d8638de

    SHA512

    350bbac01315219b205e23fbcaa6f0ce42bee76864c174c99af7a6505baa456673dbcc8842602ddf0d94ffc7fc27d8ca6f5ad15afd5042591aa2120b100896c0

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/.jiagu/libjiagu.so

    Filesize

    491KB

    MD5

    940317093cc329d45cf45ea8713b1c1f

    SHA1

    3f9ff8cef8e41d03ea714b8d5f030ad1fcaec0be

    SHA256

    57f0ffa7062aaa03074648a0c9df78ed9d3f78c2f07fb846b11bb1b667e246bc

    SHA512

    3f40076d241bc3a2b83e56d01e826b8cb7d310a67128ac8b1165bdb93dd917c6a7219c1e65dbd8a40432fb38331828c7171e266e8474dfc69db2675e29e2723f

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/.jiagu/libjiagu_64.so

    Filesize

    522KB

    MD5

    a44c75172a12b00d8b420d9209fe2862

    SHA1

    a7f4b181857ba570d3942bf26e59cbd1ec445610

    SHA256

    1be9b3aae5673a5682250fb218d427aafe3ffb4e6f54ab701a025dafa19c4c20

    SHA512

    697e5d18f2278147f03df34c6d5065c34295188b13ccdba73a6ac48e3424b29dadeb96a9e35c3106eecefe49b6717ad2fc9a36ec4e85a2b2b8fda2de78943186

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MessageStore.db

    Filesize

    36KB

    MD5

    f1abc67cc72bf5fe66779fa5dd1dfeac

    SHA1

    660f6d1cffa2bf57ec29105e40d08ab103cf18ad

    SHA256

    a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a

    SHA512

    dfbe97f3c1f3a3ebd63fc5bcee1b1dd1b91dfe01ac95af8fe897f44079e852421fa0c4cf038da6e43264d50f3e612ddc2be9aa17bf47ef604ca428fafe0858de

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    0c9833749ba890cc52680b7cb7dc9e1e

    SHA1

    f5cd13660fcc8b52c6322f9b3dea7b1700951e26

    SHA256

    41b53bf9777ced311c0b3dbfd1819fc5a5ca0b9ced1d820b6b9eaec38d4a3134

    SHA512

    e67aadd59e8bd0f9cf15543548665012a2862cfb7aeaa9f4a8f20fa3caaf09f2cbf092517c09ea3f922a6c67befee42421305308346b8a3332e68a5102a890ea

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    242c73054b292984d51f5343ec1b4413

    SHA1

    245b4db3acda3afbb301435b81624333fd6079b7

    SHA256

    7313e1c09f0b4217692b7c01e25b6652acd7d2f525944500975246aa43273d3c

    SHA512

    9dfcbc219257b2eddfd7d36bf927713e6bc68b779230bb49eada7fe2f9b6be9233a46ca6f5166c57f175cf5d30a0f6bafda9b1e4f35c878fb4bb6b0f3995ebd3

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    7aace8ac8225458c0aefb7dbf9062ebe

    SHA1

    77e4c097d838ee8c9e7236c597ec383d9cf7a0e9

    SHA256

    5264a6b914d2bacd95ca823d326a2259928671b5c4d91837c5a30bc884584dd0

    SHA512

    43c20accd40ee2d02b36cbf7d6a8361dc2029956d8192885b8638f41f8bc02d8ffaf7d67b2ac1c855c656509f8847d7eb58f82e4af523f6e116ee2d1e964a642

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MsgLogStore.db

    Filesize

    56KB

    MD5

    a860ba3e3a648f73fc11269ff9ea9c16

    SHA1

    7167faf1666bdb05633e945dddc3d6af6c35fd0b

    SHA256

    4087524ad761d0669a39007849311b2b0a32c1a62d0a7ff04d4a77d702bfe27e

    SHA512

    279991548672e18e99522e1402ab96a3b1887a6ccbfa350cab5c5f5096807beb647b9cef0a5668755798f8032e243aab9ea5f1cfcd934671153d54fce48ef8c0

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MsgLogStore.db-journal

    Filesize

    512B

    MD5

    d3e4043fa4897d589d3e628c2fc2ac41

    SHA1

    7f6e65fa7756899cca2d2da8c80834eedaa12552

    SHA256

    96c44350176a6f4058da3416e571942dff40cf3a146f01dda708118f030f5a5f

    SHA512

    cf72fe4468613abe50dfa1dc2bad0fb3462dbfdb5a8d917078935fcaf64bcc55b78a32ed946dc300b1e2defe30d7d6497170930580c64d0fdfed486ca39d0898

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    8fe9367a562ee6ffce061cdeccbdfcd9

    SHA1

    19a0ef77137380bd96aa71415953a8fd9a69288b

    SHA256

    4532dff7296c220752bae8c615b8fab08854f8311c9ea04a03a097b9e418a001

    SHA512

    a132aec89738b51e2ca366d0352fd0868259dd538b0a9e5a4f48fcd2fb2b5947b0ff0b60a5a36796b6fcdc0ab89d5030c2f4ee0257fd30f5c72439ac829f8902

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    302e76e5bee183cc7e41a50625b28be5

    SHA1

    da39f02522497aa1bed6f018b39d255332337762

    SHA256

    2e03636e1ad7bc26e975139de3a7e8b3e1d95d4f4f7f80ac716e4c294381fc72

    SHA512

    8c054044a1c335ad778b070aa4ca46ffa182d5c3f1eb7fd3ba3e020bf0a2d003e838f5a86d228163faf923d769db906bd3dad27fab8ce56f916fc6841efcfb5d

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/accs.db

    Filesize

    20KB

    MD5

    f5c056e3fbe8a3c49b804b194b71345f

    SHA1

    786604b2a4d4f844a16d787ed5017e33a414ddcf

    SHA256

    70e2922ac978a52a807d514e0dfe4c7ba093eb8dd3a56ca9356b23ac173b3adf

    SHA512

    ae325f880e09f9ed0d23754b710111ac63cb5c23e8019be1c4e86b70bd2222f5a86606472fbeb910e02e556abcb32989b08142997ebc41b58323d8859ca2821c

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/accs.db-journal

    Filesize

    512B

    MD5

    2c659df4913974a87186deb18b936084

    SHA1

    86f9cca543bd2fa8789f05dec3281cf884272811

    SHA256

    201891e9fed98c7095e191fe88d698d2772aa840a3b6f54b0b8a2898b77de977

    SHA512

    e47344bd5b95c04105719603a3bb1aba330b60ce03b1283d1175aec2986e336bc4381cb553265bce33223143203d12f1db8cc82becdf34a5630d11fb2da922fb

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/accs.db-journal

    Filesize

    8KB

    MD5

    b14f4a479b5f89989cec08288a106b2d

    SHA1

    cc3ebfa7f8474629767ec21ff020f84df4e9107c

    SHA256

    092ef084f49e967f91d62ee46e7c11d5648de95c1bb43d11b503a3e92fb9a796

    SHA512

    e94051d8414737fc6a65c530ff43cf670f613a66fb6b4022b5ddfb99158b908772b8fb49121716aa68049d2bbe49630b4fb8c6f3fea13f5843146af0e5d9ba1c

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/accs.db-journal

    Filesize

    8KB

    MD5

    c0b3028c222295a0c5391fddcb7d6e34

    SHA1

    f3a326865ea76dc15ea5881360c649243cb77f37

    SHA256

    4f4a8ba9665b67d856cceda8c0ff5f256ccddac821c624ce2679ed911a0a669d

    SHA512

    7e8fb7540501a16c95a25abba22a32c2a0146c2ea4ddc58e2e33edc3be67a1490f2383ff2ec822490ed6fe8255a12eccf24a0ffab4388ee97435ada50f815143

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/message_accs_db

    Filesize

    12KB

    MD5

    f41f531c07d4141546a531ff9caffdcd

    SHA1

    9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

    SHA256

    bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

    SHA512

    e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/message_accs_db-journal

    Filesize

    512B

    MD5

    07d31ba8dd3f4bdb46b629f5587c5c13

    SHA1

    68ad768349c46672afd2e37f9bec6fb06e82eb1b

    SHA256

    50184816c671bb1275e920aa9ea388b92568163db096a782ad398fa83e5c1e7d

    SHA512

    99d065cc0b5d4bb3076fc8c08b153d5662adf914950c79f2678590c6d30bcf43a6776e019cde880f02c60a7e5196136468052c639955cd20d03990035d5d291f

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    4aac32097e271b07edd4dd824f96e267

    SHA1

    0ff97458dc88977ab7bc0bfeb13a4572682d19bb

    SHA256

    1c6c84f58362ca7a2c0c21c2ce743b398bac0cba04e022b15c80d8212f3fe68e

    SHA512

    2b4ee3156c025dbf83fd9a44e99ac1769d7e622699d3e9e8a32956e01bd22e93baa6f13357079c74fb2c15490fcbe85142e04b629ffc1d842bb796f6abdb3834

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    63742d91f069da83da710352c3f17cf5

    SHA1

    7b9a5932cb3564dfada83a903aa676382ff3f7b8

    SHA256

    81bcbac59eef115363cc25338eff45e5fc70e7b05ebf9ecfe9102cef49dd05ee

    SHA512

    f751f6f5654891575ac71be1c24ac331492b2f023a2c300bf8ac2001187443377801abfccb35199bdd67631e824db982a7fbf7cd6320156415a55157f05ffd3c

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    72be946c6961f29ae4f15b187fc75405

    SHA1

    630b42268b2227885781b39ff97c27bd57eba7a0

    SHA256

    8c5c86fa1caf3b14db852346abd68052603ffdc5cad995d978bdcb50a3c9cb3e

    SHA512

    71475ec9640cce7599e990525e0e968fb7b06f99390ae9eaa4d2fa646170ce7de7ace3b5e871161cf05df91c950888000827580d40c1b870020bb2a28aa6e6f4

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    1276fb6fcced51860a92083c93ddd2e4

    SHA1

    8e133e9568908525443db0f75b027fd5c5dc270c

    SHA256

    0b3d11b7ddcdd2cd75e352877238cb525ec651d6c42a5b2c3b5198d64c017e1f

    SHA512

    0f492f959bc712a402d36003af8054c13d156131b058f6e9b15fd79a3fbbd99318d1544b8ee89172cd159f9cf7e28d1b7d0973f0c07c1e655f55dd3c07a9c504

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    4b9157b04037565717cac6b44f158665

    SHA1

    f6144790fb2497e250330d63f38973ea97240777

    SHA256

    06934657afa85decedf2ab183079fd981e4babc9416e2fe966222ab936031757

    SHA512

    b1d8eb0d494f409579291066cafb62b3743c13edc8a4ed3c85af94f74e4ab185342924235af5511a82b7fc8e1b7930eef54d7bd95f0d1be8bcfada668796975b

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    596f010612d669af6574f66f88b52bf8

    SHA1

    9c2e346e11cee80875eb83d988733302be206628

    SHA256

    d73be55c1434231fb349571526ee93c1a1bbdc48ee8e8fc38575e03c40711aa3

    SHA512

    e030a38ec1ae1794de08266b1805ae7bf05bda97a7090f42ee4161a0d2ce19dd454cc45c9a62005c17da553fc7a336e43d9caecd929231fb62d1db6c4cefc8aa

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    feeb2616a0efa633f73ab12dc5c7deae

    SHA1

    9a7640e1a054b20c5711b55a3816e9627410d094

    SHA256

    10c5deb5c1ee86cd0b438cafee34bff0553584b52b6a0b7633379b872b9e53bc

    SHA512

    aecb5fb3fe8b1f69d0cd23f8133f3ef035a7f2424df8f7521dde3f47289dfdd6d19abf53c94e51f2f8a7e7b3ef28cab65963dc557952a6561ae2f9d30e1f8b5f

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    9fa603765bd1a8f4e1f7cd857ec748fd

    SHA1

    4efbb641b74fe1e510c4b984c66611e982b8b747

    SHA256

    4ff1879e837d8259014545a0a821f0916eff06d4b1123dbe78f54f0fea7f96b0

    SHA512

    c5b6bf613513653cc693348975c3111afa53a8846a1856824b6a74d9f9cb6c4d0e5c2a79ae654350f3625fb6b1f7b2cac12a66151d514f7b962f59274448c992

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    f506bf28c298f68696aef2e4e6c95009

    SHA1

    895ee0e139f3bb28c0b78c677110342b19e07eb3

    SHA256

    9eb3450d130fd9210cdc3c248ce052d208cb0ce02381898d7ee5c0c89c8e215c

    SHA512

    02c3d72bf23eadd0e952fb8a2f848bc2d4f3c73b5de9d8084b10351c6ca78487aa40f1ec40b0c08766c7055b908aeff56c9698de966541d71d3dcf6b7dee70e6

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.store.report_cf

    Filesize

    54B

    MD5

    65d3365691d76d7acb2ae983e2bbd70c

    SHA1

    0d03f540558af1f40b75ae18775454137c4459b1

    SHA256

    cc488c5e519810b5f58786b7f9eed9c152a9f58768ecdc15a0501c8ab401fb1e

    SHA512

    12eb08150cb99c55a57021f4b564dc970a3fea00df32059c2853cdb026e7f5b20ccf3c67524399176f0c28371da244f5a21cd7cf2592da04857b93a83736dbc8

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.store.report_cf

    Filesize

    32B

    MD5

    fcd78ac2d16e3ab5766d08bff628c654

    SHA1

    df156dd961fd9d92225f98e4003a623b72814ef2

    SHA256

    183674485b1069a5b82c02760d4731bb66dc05038b158d4c138bb76731d7bc59

    SHA512

    b4986a45251c91333a4a6109940487f11469e3b94ddb3a0986e4c2b4db0a1dccbd0723a19abc6c104d92275f7128c2ca09b18cf670e4b8c626b856d9f670f476

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.store.report_pid

    Filesize

    54B

    MD5

    b296aa80bf8bd13161cac2abbc8ae9f5

    SHA1

    e4cfb42557d75d088c348f205a5105e2e15eff49

    SHA256

    4ee5d40a76c861981ac204ec8a4557c4cf937cc847825d6c74422fc0777e15ab

    SHA512

    6a04da30557c5779eec3122e54449702963f5aea5be1d3399b42c56306d4ad83e01f50ebfef79fc3a4e9358e2238798ab12794757103624273094953d2cd37e9

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    a3d690b36706e11afee5bc808bcf333c

    SHA1

    e625b2a09b4967129279d899ec3834f50bbdf050

    SHA256

    e52f9e36b71362644d0c5183dc5916499e3058c92d50b47db7158d41a1e0299f

    SHA512

    dc259d11d8d3873cbbade55aa7afd5a596e073a6df1789b78a240a0c1359128695e38c036515daf43fc7c5ea52b38662fb7bb8aa4ade837db8c86d89300a36f4

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/.jiagu.lock

    Filesize

    27B

    MD5

    79ec9baba30dacaf9e4dd13605137392

    SHA1

    9213ffcae4512f44c50bbb168a8523663de146de

    SHA256

    e3732a04ade412f70843f4ad07036be3212f4572f839a9816fcba69dc037a828

    SHA512

    4cd2443f097278431bbb428259e6b7ec51fff662e0cc93b725061b65fb06b19c10e6325037ddf861653d3e89b2ac74e7ff49facee04be8249b7a0d65dd39dd22

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMTYwNzM2ODIy

    Filesize

    1KB

    MD5

    3b6ca815102bda23a581ed2f914346d7

    SHA1

    9740b88df25276999b1a7d2fbef5023ec4eee430

    SHA256

    a8235af6e1e556fa2609cd054f215a324a44de5424db3f4fb5de3a292b9df299

    SHA512

    58d3266c29d0444b95d6114e0f9a649daf3da6e079efed0c0c620009666955b50ecedf90647e62fe055f654314799d1a2235979f6c2ac16fb965748a84687e32

  • /data/user/0/com.wuyoudai.xiyikeji_info.handyflowers/files/umeng_it.cache

    Filesize

    433B

    MD5

    8152e1a3f09a1bc593324aeb45ef9f79

    SHA1

    29e86d68ae5d918e8077cad191c57d62a2e05133

    SHA256

    b081ab66322dc757f252161dc5a308317294f985696dfb41a84ce2c5e1de3aea

    SHA512

    af2c17e3559f748381c250c92249703c57fb38958af0a948017ca5c972658442b6a80009d49136311a991f928911f3930d5729c7f17fca3f3f6cd147dd201db6

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    79def06ad22c290fb524d78f77423ac1

    SHA1

    3a8fd0c8262cc6d2a2f27325732dfa3859be30b8

    SHA256

    3c7996d9a08ed717e6d001da06d3796c430a16cfe96a21c67d46519ea700c795

    SHA512

    ec891d785d4cf2d720cfebe31ebf0d9978c0ee6a93a7a09ebf3791a3345e804da27b3ee19eba7f9ebed77d4752fe668414edddf9d4dab267068fb16907454fbb

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    213B

    MD5

    9a0860d718b0b7e17369982cac303fd4

    SHA1

    cd3e4847708616029a79bf1f15332bf0ad2b9c79

    SHA256

    6a77fef39180efe56eaf7f3eff74c4e10f54baee1943bcf749c108ba6dcb94dc

    SHA512

    6eed2d073c3ef1367e3eab68349874176a6fea42ce10f4a5b59a2cb293e17c281038e72b2e9554d46593491a6475e5af57e7ffe3e651f2f1040c4e8786ed139e

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    38c3912afe06629cb90f3dcaaec5c6b6

    SHA1

    0901bd8823dfe8ce6000cce5d321cc9c735e239b

    SHA256

    ba7e4cc18d051ce3ad4a530ac0be4c5f4fc021135a8b50cb36137353d0580802

    SHA512

    9a08583a0ab041f8712c42a2ef316664b599f5dceed7846b770bb144c4be60ad3ba64250f09e842502e27e967440ea585af61dfbd19517478421a7ef8b74a0f2