Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    13/03/2024, 19:32

General

  • Target

    c6b1e34ec43d944ad355c60394435784.apk

  • Size

    6.7MB

  • MD5

    c6b1e34ec43d944ad355c60394435784

  • SHA1

    4397aa9cca9f373e25729f2fbb48022c52785783

  • SHA256

    d6df59f9260439b806c6336d7ade1c8f1822a11aed126e76d4468d9b815df3b8

  • SHA512

    4dddeae5f64a57885dc7dd502329c55e34e001dad1a2a35972dacd2fab95a3423d7ade720b1541ac68c4361a4419fe24b2160c7a57ffc28665f17771f0092b91

  • SSDEEP

    196608:d0gjNdZiIxUiePMyZiZmCCIXIPWBMtJiP:ZPyLI8STBJ

Malware Config

Signatures

  • Requests cell location 1 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks known Qemu files. 1 TTPs 2 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.uc.infoflow.video
    1⤵
    • Requests cell location
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4262
    • ls -l /system/xbin/su
      2⤵
        PID:4377
      • getprop ro.product.cpu.abi
        2⤵
          PID:4431
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc.infoflow.video/app_SGLib/libsgsecuritybody_1479409694000.zip --output-vdex-fd=155 --oat-fd=156 --oat-location=/data/user/0/com.uc.infoflow.video/app_SGLib/oat/x86/libsgsecuritybody_1479409694000.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:4473
      • com.uc.infoflow.video:RemoteStatService
        1⤵
          PID:4450
        • com.uc.infoflow.video:TProcess
          1⤵
          • Checks known Qemu files.
          • Checks known Qemu pipes.
          • Loads dropped Dex/Jar
          PID:4496
          • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc.infoflow.video/app_SGLib/libsgmain_1479409694000.zip --output-vdex-fd=67 --oat-fd=68 --oat-location=/data/user/0/com.uc.infoflow.video/app_SGLib/oat/x86/libsgmain_1479409694000.odex --compiler-filter=quicken --class-loader-context=&
            2⤵
            • Loads dropped Dex/Jar
            PID:4545
          • ls -l /system/xbin/su
            2⤵
              PID:4589
            • cat /proc/cpuinfo | grep Serial
              2⤵
                PID:4613

            Network

            MITRE ATT&CK Mobile v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.uc.infoflow.video/UCNewsApp/1710358400644upgradedata

              Filesize

              69B

              MD5

              366e3d5c3eb129d465637a720ca7fca8

              SHA1

              9aae5968777016103796a967f207eeb55c5f5a7b

              SHA256

              0ba807ba12441125dc500ebc24805c987045afe246547b876d06769a98c45ccb

              SHA512

              2dab72be3f6d48cdcbc70ed35bf7bd2359eaefd197c84c6efb4f38044bb07a1abd2cad111b5751acbdb16efbb48dee4a4e173a5be6b770ca282108011462f68a

            • /data/data/com.uc.infoflow.video/UCNewsApp/1710358403545upgradedata

              Filesize

              85B

              MD5

              804071a78a4b2b08c08607b67f01523f

              SHA1

              1accfc0d6b8f313080e909a0c87ff4a7aeea76f2

              SHA256

              d0dbefab6d68c8aa232626487f4557f43cf718791e6308de3782199abfa1f9de

              SHA512

              a800796d68a051a28de4609fe11f2c266a1a842c9cc3ef1f328d02c87e7b630bded234f11b39f35aace78bd7e4892af6845829ca3741428ad4da4ada834338a5

            • /data/data/com.uc.infoflow.video/UCNewsApp/1710358416425upgradedata

              Filesize

              85B

              MD5

              d673a8fa9c0945e09a4f7eb8c75c2e8a

              SHA1

              20b3e41f260706565ecb4f275fb1638ba611e06a

              SHA256

              d7a214875f54ed65ce46c4f1db973641dbf8acd02d2e0dd910bfc64cf8d4c0a1

              SHA512

              e568c5fd056b431e102fd61f75e7a917efe5133567af1191e4f2f6f6f8135ab772dbd35fd4ddc7299cce9ed0b3af1f56bd5fbd2ecbe853be2d01e23e1aa827ee

            • /data/data/com.uc.infoflow.video/UCNewsApp/configinfo

              Filesize

              55B

              MD5

              802ac3cee3fc02f5b2b776cdaa3e29a9

              SHA1

              e6a40580583c0cfab50ce281ed0e19fd3e6ba7e6

              SHA256

              526b40f64ccf4717dec24a4cb5766b14d25b4c6146f2c396dfdb534aec190fbb

              SHA512

              940ea6c3602956bde3ea4d1d751d12759c84e5f918e0c52935a74e60a7d3f4351c71d36e3eb695b59fff24eb72be6d948695bbbc655f7f4bddbb39912a4d60ad

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/adblock_app_rule

              Filesize

              592B

              MD5

              e9aa03a390415cfc814e4463c288fd5d

              SHA1

              de969eddbd452e0bb4bdd422a067e52164306ee6

              SHA256

              75e9de355deaa5db366ee53c5184eca9933c4ee51ddcaff6df41784655dfcadc

              SHA512

              818b8d589c5be1c0916efe38b5aa0b9e5e77de06fd5950a67d016b4c2957ee410e04b242696a6c1cceb59455c714fce40485e6f52c07483a8e39004f9f71e43e

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/adblock_app_rule_android_core

              Filesize

              526B

              MD5

              d1d289fff949bd97805082f824064b95

              SHA1

              e6f284b8c30eab4513d6923a3c0516a0bae6fd44

              SHA256

              4728e2e8f07ab70794d439dc32e3e970d252b4fb7ea94845b936895e63862d04

              SHA512

              79a0c963e3a0268b823320506b3665dd4623a8a0027b0a656b2dd84a3d28cd9a7ccd5c8f08e7b8556e5f4a1a111f3651b60762c249322abb12b8be04c61de356

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/apollo_forbid_rule

              Filesize

              256B

              MD5

              3dc6825dfb80d6711c99b2b9c91d84c1

              SHA1

              ef385ee66a19c89baaa72cd0198ab7f4e839024d

              SHA256

              a90c0c9a2d156a1c094e4f989e46bfeb54c469f7237fec0200d2ff409b404f6f

              SHA512

              f3f3f02ccf58b55832f9553766f2022f0b3141a5e3caf99633505f28fdbe3c994a679a67f22fd363853469d25e7ba2969d7e3f3f6f6ce22761be34f4026b8e25

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/autonavi_pianyi

              Filesize

              228B

              MD5

              5ae02ec4d42598c6c40c5c82b6fdeaf2

              SHA1

              18f5d1ed2affb6281490ff4e2eeeac9b95b7b284

              SHA256

              8d3e3ab4291927ba91953184c6e23645f77f5097fd35d8cb193dcf44f4cc97c2

              SHA512

              b14afec5fe247370e3854a5411e5c09e0638917dc0c80083370c5e3f36ba5f68b5877735d2d385919f603a803740d40bdbfc842d918e5d6ae1acad4ccd65ba5b

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/biz_framework_style_1

              Filesize

              1KB

              MD5

              57adb4d0debbf2b2ac15fbfeb090f445

              SHA1

              ea28ca8358bbcebd66ab653cdd0478605a9e930b

              SHA256

              0c0b9ae290ac598b218ece27bf6af849effffbded942334e7db1eaee4c3aaa9a

              SHA512

              1681a4b2798130e4fdff5ab20745148838c84fcd8b3d7263abf9d25b90a7b959dc3a8ae8cef3db7d949549d35fb7fc2d4c932218e7ee5981ce81eef24ac875ec

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/bizcustom_configs

              Filesize

              4KB

              MD5

              e8b008f4cdae2291e479719920c87fcb

              SHA1

              413d96b032e02feb2cb6b4f5b3176d8f2f64391f

              SHA256

              bb05a8681a8000ee0f23a6ff74cbbd739ea8f6f753863e15fe6ef6a9f7633104

              SHA512

              465da7fc2905ac2c6540075982205495c3d76b2e413096383c8c257ca37e4bc26554aff0b62cac7ec0d2e3aec4700c528e2fe8b43eb411e7d41d620f01f17474

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/bwlist_bizcustom

              Filesize

              1KB

              MD5

              0c1277f3f91af4cbd66ba45d46c223fa

              SHA1

              ae14e173fda0d6122f4b77133044794497c97197

              SHA256

              c5986ca60ea64bba26d80f5caf11bad44ae67bc6309be57dc2913a52160abcd1

              SHA512

              1778eed40f5897d7cd27ce6faf439c8bff8a255f3af18c0a1c48f89c0e6a93b104802dd850100db298d7460ba61169df9d67c6a7394aeaf12c88cef0ab614c6c

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/change_source_dlhost

              Filesize

              90B

              MD5

              3768af0e04e4bc9a7e0fffe620cf41c5

              SHA1

              7ee276beee1e1f2b30366caa65cef6d7b685b734

              SHA256

              02c64b3567c456d49b190c5479ec7e13fa08d577941a69c26f6fd190497a9477

              SHA512

              f0a7f3859d890b8283106f9c78fd7d0256428b179664c8c6f1e8e4af321d8a021fdd97b8d6bc90e2d205ca0335902a6762114d3eda729728a05e993270b00066

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/cp_set_param

              Filesize

              139B

              MD5

              058172d3ec15f2fcf64cf6e37ef46c29

              SHA1

              1ad92de8950d420dfb50f5e982c0d9d3ff4227b6

              SHA256

              4064fe9c54b3f0aeed089404faed45e2988c3c05b16ec66fef0c618c84c46bec

              SHA512

              b0ccbb1685e051c5dcfa25643c21a32aa0f01bb2e6aa2b19ad45174f058e657c68cedd4177550dab7e1c420d77346812c022cf71c1651a4bc7f35c077d7cd458

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/hdua_domainlist

              Filesize

              2KB

              MD5

              a01a11a7a58ef0eb5d41f3d39f2f8429

              SHA1

              b9b7f729ab39deafd5f2e50157cfa766f26af000

              SHA256

              03c5e2afa7b0f3ebd1acab98bf38ab0ad161db9cb877d258c68ecf43fe7325a5

              SHA512

              68e3f80e946dd5b446e2da55d4285b3e8b4ccaca23b4ce0d772f934fcfdf8e9fd18f6a16e028dd3f3566b24d7fa5b894cb800fe7d5d5a77fd48f54b44531c39c

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/hide_domainlist

              Filesize

              3KB

              MD5

              10c2c2f4fb5f37e86fc0a29c6b3ed060

              SHA1

              23af5e9c4f09ca665d2312294ea73068b7cda9aa

              SHA256

              5c4b208dde2d8e4691b1f3ceadb4cff9632a046fae715f3ffab1ac6281f684ac

              SHA512

              cf06e5b35c3b83804b225f72aecd59ce15f6654dd6cdd407f55c6038df6367f5371fe4bdb113c9f8ae03f1b02a51becafe8c3b201c4c09ade3d8f271516d9c41

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/infoflow_directed_js

              Filesize

              2KB

              MD5

              52787cdce9793a81631eb001a77c934e

              SHA1

              08e7a3fde9ac3c1ec232e7c07b3e392226eadf31

              SHA256

              1b1957f3e974b0ef6fec9c510fd812b0a332a8c85e3a57cd7795bc4588ef4b2a

              SHA512

              a3e3d306bc6ce6ae7d5acd9c89670baf12b4fb1229013b49499f8a3583529c73ee825ffe6004b10029594bcbc76090c60a3ecd179bf23cd0e13e5f29800d9d98

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/jsdk_common_whitelist

              Filesize

              120B

              MD5

              8104ef7215be13760cabe95458792309

              SHA1

              2dd840a14451ba12e6a5d0133a248f8c712f37dc

              SHA256

              657810b6b871f08b4823def0a3c5460269b69a19dba7a916499a1bc8c2e56d6c

              SHA512

              b6ec74d2ea0f6004f9f8f98d28d203dba9a8a7ced515714f11909bcfbfce679829dddfe44c0201a2fdfae996a2d899fcff1f39df1d38c23f5ee51c08bd0ec790

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/jsdk_custom_whitelist

              Filesize

              374B

              MD5

              620432d2ecd31d9bdddefb5efdf660a3

              SHA1

              8731f03d89a8abb8b19013214f3c5823715f4b67

              SHA256

              81c8f53052b56201b21fe00c61916d50f145752978b8f90f20360163f73b13dc

              SHA512

              89452995bde9615cf585674f4fb9a6e71dacf30256e6c77050ade65512e285ef506fad0b20d0751876eaa979dd121d348de046e201961b5676309a75ae297f6d

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/lp_navi_book

              Filesize

              32KB

              MD5

              4a7c26a4f460511361d13c21e3e7d902

              SHA1

              a41b7fc109984e57f48ad473dcc68a997f475ac2

              SHA256

              3a381b06c46aa4e26f7a47785a097aacf68fd6fd481fec59cff88238d901dda4

              SHA512

              7584a7e9191a132a69c3a4dfbfd9a5b99389fa2b18c777a2a6d8230e3e0c64cfd66090e5ea53cfa9fa8c50eb4c3ac8019c4107e90944e5dd5b798dd808f87cbe

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/op_cooperate_acnt_gw

              Filesize

              2KB

              MD5

              975d87c56cc002029ac9e7101ff2bc4a

              SHA1

              efe2cd5def548c5b5bc92f82aebd3ed82ac0be73

              SHA256

              49e6be9c97d832899e5c9e7364d0b8326dbd54e947add0e65137e1830fa1193c

              SHA512

              aa83db0fc2823623d92478809b3a7354253dc94a26ae8cb4aa6caceb11c9da6accb45f0e08a4e08562463c8ad89420e53512cccaf5890a2f3976fbc6b9b515d7

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/scan_otherapp_configs

              Filesize

              661B

              MD5

              e6712da487b45103506141075c65578b

              SHA1

              c1c04433949ff1a0ba2aec9a58085cb7560dbccb

              SHA256

              2c11d8205ca0be50e84de687ec3b9bd9d1f7d6e4d264cdbc8dbdbab10356d627

              SHA512

              a031600d719dd29a0035069ba1ef549b2914a0f3664d90093d1f9bdcc4c0b6df3b24f8d02d76ca35ec41534e00f98246e15fe1d79268aa744481358dba8822b3

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/share_url_tc_backlist

              Filesize

              3KB

              MD5

              9ae360f73de46a9abc3f9a8abf878817

              SHA1

              b79335605198f03ba9b864d46baecac84f024d82

              SHA256

              1ec4c3711bcd4d434ff64dd151b78d42928ec2250ecd3cb0cd2e857d92f2c373

              SHA512

              88dccb0ccfe308bd0c73ac4b7f048dd7efeff96499702529cb0279cebe43550f8989df7cc1aa4cc1a7a792d031c8903d0c6e67c36972c11f44565e23e09aa950

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/share_url_tc_whitelist

              Filesize

              3KB

              MD5

              d383471f8951110bbb3c51d4246cf168

              SHA1

              61d1e4c6b6371c3e0c84e50f8ae1dee84699f7e0

              SHA256

              6fa9e218683ce536239484d2d8afa147bf8f1f93fe2f560927ef9223f8d95830

              SHA512

              69bb8c9f4d49cc4af2f2a798b9c4386ef28e05982b35d6946c1a68c0c357cc83cb6201604bd1d8b0984605c2675ba5ee93033f8277c29f761864e55a39129b4f

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/ua_domainlist

              Filesize

              2KB

              MD5

              e689360ca41801782dd3b3c30cbbef50

              SHA1

              869b7062e7740f26357b7c00855b6f575b9c4f10

              SHA256

              44918015bb03652155dddbe96e33b828cb2bac15a570d8604eb3743782e13d17

              SHA512

              ff1ab05308d95721f42398a8a8de17e8fc0c1d5493f64d46f344b0efec920fa8723bc8f4f14b6a3cbc4e57b2caeb39ddca26d5ce4e9001dcb53902ac9159401c

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/v_flvcd_whitelist

              Filesize

              2KB

              MD5

              619561aa573eff55a50fb3ce77642ed7

              SHA1

              98e1bf9e3109f41e01131e90ec14fb112540cf75

              SHA256

              4ca84b4fffeb493ae2f7b7a9a39c4546c4dec2538f2e5f7ca21cf537e5a5b747

              SHA512

              e485632525e630feb7ea4c739919c0f1ad969bea1f8b7e44ec5151113fcae75de03be17c8385186a9c81adeb6fed0208532d12cf974b809722b26412d0716459

            • /data/data/com.uc.infoflow.video/UCNewsApp/usdata/v_so_up_rule

              Filesize

              254B

              MD5

              18e7e71328fce877449478d5b1b79790

              SHA1

              9b601b1f5c75658d1f8a51448258991642ab30a2

              SHA256

              95d4373e1d6e106238d4f2b33b1d9a467509b29cb4c119f6e6933836270bc077

              SHA512

              181153dd21ba63aa1865068251cd7bac9aead12c3479dbdffe0e798459399d577687435c5bbcbdbe632091f897b4be5558fd086c7a2453e8ba5f90543f4eccf3

            • /data/data/com.uc.infoflow.video/UCNewsApp/userdata/17103583862258B277D535A8C846BDDD370A589B9D93C3B2B6247

              Filesize

              17B

              MD5

              df44af898727e989d67300cf3017e1d7

              SHA1

              25dbcfe57cbdba7b753cadce34a8c49acaca0287

              SHA256

              27535525c88cb8ee48967418b48a9f51be7f3db79a383d8bbcb19f8ed3060152

              SHA512

              c2818510799bf4453702820eab4e1bb899177180f5ace0a7773b3f21407665dafd920305e35407b68dc48a38c91db037d0a8b8a0d603af5e993e9b5212ea6145

            • /data/data/com.uc.infoflow.video/UCNewsApp/userdata/upgrade_firstcheck

              Filesize

              13B

              MD5

              10e92d4b774165f88fcc6dfcb7cfeb05

              SHA1

              3589528502414c1a6c1eb9780c62463481fdf12c

              SHA256

              8130e9c8c677507243cf6c2c6d6e36a4415c4dc0cc226ac045aa8706e7e46854

              SHA512

              63e517bb74a17994e7fe7d726c61d7f1a0781aa81b32208e82b26836bdaa32c53b8e4595a648607047679fd3a55b86897f1dd0e8f03256a2c452704e8028766c

            • /data/data/com.uc.infoflow.video/app_SGLib/libsgmainso-5.1.38.so.tmp

              Filesize

              455KB

              MD5

              7435d516a4244ee1f14a09e348d20fed

              SHA1

              9d1503af9cba7a48398e713bf177ddfa06fd0520

              SHA256

              043e74c88f8b97bf01cbfd793e5b82aaf0b8bade2ba7cf710650f05c73abb7ed

              SHA512

              a66bb1e0e26a8ff21c4aa1ac257d71592ae2f66b58b31a4fd4654b168a577c110659b4c1ab0b43bef1dbdfc5a09bba142f3cc56fb35446cc08dc1c747140c985

            • /data/data/com.uc.infoflow.video/app_SGLib/libsgsecuritybody_1479409694000.zip.tmp

              Filesize

              110KB

              MD5

              46e4dedf5c025b47d975082e7f03e0e9

              SHA1

              f91fe4bb795fc9e6d50bbaf519a8a54675447713

              SHA256

              e5364e4357e9a2cd4bca7ffc2675afa40cdd0338ea41c237e76988a936be9f56

              SHA512

              125068be606d00ce51552e03a7ff61c38189144a9d4e8c83a0b293c362e2991bf5711f422deb451e0a65dc24bc1fdb1d4897f9700dcfd2ecf46ba65c0e880292

            • /data/data/com.uc.infoflow.video/app_SGLib/libsgsecuritybodyso-5.1.15.so.tmp

              Filesize

              153KB

              MD5

              8e710232feae32314e03f42f7abdd6cc

              SHA1

              a911fb2950c08593c732fbd27cb0af7a33e761c7

              SHA256

              4e1f0c16963453e9eeb7ce224b14be8475b71082dd7d04f800df0271af74d413

              SHA512

              259ea3e1e2000f571ce46ce64f34a920374104f12b69d2f3f86ba92e89cb766f616bed525a67fb432de13757b1eb30e94d4bffe37c714ccf9e1c75fa7dc6b48c

            • /data/data/com.uc.infoflow.video/crash/UCNewsApp_1.1.1.111_161117190816_Pixel-2_9_1710358385792_20240313193305_fg_ucebujni.log.gz.en

              Filesize

              210B

              MD5

              0e48de88e650e147f2ff1d0c357fdc71

              SHA1

              c3af511b447a1acd551439f96110c88c1aa021ec

              SHA256

              6c46b3a121aefa239b01d9f18e6641b885f549d189e96cf847ed83f3bca9c6c0

              SHA512

              99a6ef1408e934393a71dd7c7b0d927721b107b3e5e04b727f0c8746cd7c117fbe6be7982b87e914bdf9985524da2df283118be4bb0090fccb9cdaa2f61ef8e4

            • /data/data/com.uc.infoflow.video/crash/tags/OEDIV0WOLFOFNI0CU0MOC.meminfo

              Filesize

              331B

              MD5

              a1a0cdd0e47f827f85509ec5b2f984a1

              SHA1

              b4dee786009d4da7ebb4d16d715b5fc37761242a

              SHA256

              80579fbacf004b298024adbb83387d564c449969dfed9b56fdc641476c8cf217

              SHA512

              b748af01ecb7b73a37b6536bed39db01124989bdc707f76cd066b89e5bddcfe0f80bf251a72cc185e3ad9ab4b4af9f0bee98c3fb664cef306d3eb9aa752d426c

            • /data/data/com.uc.infoflow.video/crash/tags/OEDIV0WOLFOFNI0CU0MOC.pid

              Filesize

              4B

              MD5

              5d0cb12f8c9ad6845110317afc6e2183

              SHA1

              275dc65644b29251f4a77d6bb801d7f63f4ffec1

              SHA256

              cf7dee3443a859943d9ecf558fe5cf260f9acb4150b5d18d8b2e04be1cc3ca54

              SHA512

              1b422cf9a6e36a7204135ba7e9d0a401111679ec54f45a50cf0063482974bbb48fd588dcf3f7cb73b9fac9bdeaecf70dea98f8fb3e2137abe2371489b8f59b89

            • /data/data/com.uc.infoflow.video/crash/tags/OEDIV0WOLFOFNI0CU0MOC.start

              Filesize

              25B

              MD5

              a5921af701045779d5ff5f83c8e2188e

              SHA1

              34d6ee628d8b0635f0728edeb361d5ac2afa960e

              SHA256

              0af983f2a05142b38aa57ea892029cb6b90d1b58cffcb2d833a900ad4928c297

              SHA512

              53093943aa5c325caaa76e746db601e17f735cbce3d941a5e2e1cf392649916793a6c2c240ce9a562b146fac4640653dd5b0eec8f139c3b6c8bc4e2336d1e408

            • /data/data/com.uc.infoflow.video/crash/tags/OEDIV0WOLFOFNI0CU0MOC.status

              Filesize

              276B

              MD5

              d3cf432bd2d555e86f5abdd49518eef9

              SHA1

              814f8ae6a04fb9886bafdaf63aadcf6d0a4b757d

              SHA256

              d91a8b8683580d1f3d36153d0e8d18a40f256d87518759644b60d2378796a71c

              SHA512

              9d89020633b7d66db97a1ccfcd404f249602e17fb7d07890ee04ef72c73f9adc3e5a20e8fcd3df13ab704cfb2da2a6ba2633e23dd2e1d86d2b815ec96bfd7cf3

            • /data/data/com.uc.infoflow.video/crash/tags/OEDIV0WOLFOFNI0CU0MOC.time

              Filesize

              14B

              MD5

              22d3d683765dc171d830a6939391f4e2

              SHA1

              de6929bb838ab416ede7b59bdc011638065c353c

              SHA256

              230faaa3dbe23173a4fd75f52c9e10dd15aa5cc7f5e71949f48fc4cf2f6bd181

              SHA512

              c8b63a8181f20e7020c05f931f9a8c30101b9feaea89db417ced12a3b053dee1098bb43b66aeebbce84d022d4c54e5cf2bbd743bd1a32cd7bdcd8c661fcea111

            • /data/data/com.uc.infoflow.video/crash/tags/SSECORPT1OEDIV0WOLFOFNI0CU0MOC.st

              Filesize

              47B

              MD5

              da2890706388d8c192c6a178822f0835

              SHA1

              f4f0db5efe44ac3e57ffd0c0cb9175b11af7005b

              SHA256

              35381931a41b1a6d55a73a41cfbcbaf5da801ff655afa459d8d1ab09cbca828d

              SHA512

              c593c76b04352cf4f3fc41452e48a157ba61e89216df4a41d03daee81bc06da1902c4bebd7ab8d764520a08d42b1185ec96d13c09d6c394fde4f8abb56352e23

            • /data/data/com.uc.infoflow.video/crash/tags/unique

              Filesize

              36B

              MD5

              72d8ad4344f8c3f30a1b195bbf395686

              SHA1

              a2bc884202555c1166a76dbfbfbaf7fd6509a447

              SHA256

              d9189ed82a6e4e0c76a138a6e8cd2b4d8609d3ab732dc9e6e6732d084a14c321

              SHA512

              973602edd88a7fcb94ce8024ddbfbffa3fd5f860c759f4e9d42f246926def7a7ef5b37e09ea565cb7f47078a7dc42305abf7493c420e69f14614584615a897d3

            • /data/data/com.uc.infoflow.video/databases/dynamicamapfile.db

              Filesize

              20KB

              MD5

              d5950b4302984c62ae015c70f8359000

              SHA1

              44de2b51c2942afc6706cfd591bd17e0b22732a2

              SHA256

              b25855280d949ff775756116e72d78ac73561352dfa33866835ccd355d037f9d

              SHA512

              39c732e681ba5913a12d78056a128a2f7a2cf3b78f5735727e629b15bd5f498ea22ca1bee6bd0c7580c2443cc08e4416c454679bf52ca34fb91366f6374b334c

            • /data/data/com.uc.infoflow.video/databases/dynamicamapfile.db-journal

              Filesize

              512B

              MD5

              2f6c3faf4ed3b8fc398b35747689ce7a

              SHA1

              5c72df62c6365ea95663453bce8937f6f8adf6e4

              SHA256

              c431e94c0aea9639c931fbf67040578d69ad128dd4443e5b5f2ea4d98b36aebc

              SHA512

              c4a84aa57e193fb679e091e9bbdcffab56de3936d11e7e91191d67c87dea3276da4d9e759d593a6438c41ff9edbc83c378e67c847fe6bce492c24064b2f62a3e

            • /data/data/com.uc.infoflow.video/databases/dynamicamapfile.db-wal

              Filesize

              32KB

              MD5

              3f322ba03ddabd3f47deba0bd5d129e3

              SHA1

              d21394bf80ad29f690f7212a472a1b31a8922838

              SHA256

              83395716d964a9b4dd1446e27c998022bced888e04ce94516016cc395c17252a

              SHA512

              a820e1731d2ff0d0c3bca1bab6da653ab9feb17fe6ed12d43fba40c7ed886001b2eeddb5a7ba092d7a3f628e08e6fbd00095ed68187c49abe6de1b56dbaf29fe

            • /data/data/com.uc.infoflow.video/databases/info_flow

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.uc.infoflow.video/databases/info_flow-journal

              Filesize

              512B

              MD5

              49fb274b908f5b2b7ede07eb1f36c26c

              SHA1

              a4604808876db3b456688876bbc6b1addae6c286

              SHA256

              757db564705b32b6234391edd501f963ca6194d55b80159a0e0447c1116a1576

              SHA512

              405ce3364c21e91c9f8464dbc7bef599d142e5ad36e561ff1809046de222674a13b01dfe14701c98cd9085b9c6ef60f34f6bb5d986668ca608ee155b7c388711

            • /data/data/com.uc.infoflow.video/databases/info_flow-shm

              Filesize

              28KB

              MD5

              cf845a781c107ec1346e849c9dd1b7e8

              SHA1

              b44ccc7f7d519352422e59ee8b0bdbac881768a7

              SHA256

              18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

              SHA512

              4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

            • /data/data/com.uc.infoflow.video/databases/info_flow-wal

              Filesize

              68KB

              MD5

              b7a9893cb21a6989ecb03b49cbd5168d

              SHA1

              3aff456588e4ec72b84397f8799dd3e51dd181ba

              SHA256

              0b7f73c85a250554027a5caf1f6b1b527c35844112aa8ef7c6a03f20888c6636

              SHA512

              89f6ef70ca3b9b4b64f718f554a3e9ed90a6265d976150338d6fa4d4b0750e02636a48e11c3adeeb10f65e37eca8ee30fd9de0430c281c0ae3358f280d9aac4e

            • /data/data/com.uc.infoflow.video/databases/uc_loc_db

              Filesize

              12KB

              MD5

              3fe30614d7e0d11db870b4624f6c50e0

              SHA1

              053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

              SHA256

              67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

              SHA512

              c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

            • /data/data/com.uc.infoflow.video/databases/uc_loc_db-journal

              Filesize

              512B

              MD5

              39f378dfd255cf6c1fff19391df1169c

              SHA1

              b2cfd52922f7c4d053947ca41d368b8149cadae6

              SHA256

              6d12d5279e035988c434926445c17c29db49e5d7c2bca076bc99407a585c78a2

              SHA512

              cbdf72d205c803448a81b9f375594d8ef7903253396f9000c4bd85397c73f53a9563f2f4ae15020ff5576f20d5006ed0bd0e41923a18ebd4ca6b0dce830015cd

            • /data/data/com.uc.infoflow.video/databases/uc_loc_db-wal

              Filesize

              16KB

              MD5

              9d76cfd53890cbe3561942b55a465588

              SHA1

              c382004b37b79a5ecdbcf51996d83bce9fd6a410

              SHA256

              3d42798b73812dd1ef171be9725358ac922e222bff6fc0d908f1084ba8356d25

              SHA512

              c0f5ea50cda141e2e5166a686c0f16e1187b9695c5a659a241b36b5211e5c1e7d9c22b20faca8162a0bd5be86e1c4ef5e22ae1aac932ddf0a76e250557f9a608

            • /data/data/com.uc.infoflow.video/databases/wemedia-journal

              Filesize

              512B

              MD5

              fdc02ad2de8bcc36d1139444ecd76c15

              SHA1

              69c342b32ce0c44d0a5f583a1b7ecad4d4299dcd

              SHA256

              51499cc522a2f1fd55429db5493881e9bb1c102dc31d035fc2bda6ec7d5b002e

              SHA512

              3ea000cdd8f94abf11899cf476bc0694d70b1ae39079733b09b9068190dfa93514acb5957d1600094b1d7b16241ed535b8d097f0a697cc05003080ad7e6b331c

            • /data/data/com.uc.infoflow.video/databases/wemedia-wal

              Filesize

              72KB

              MD5

              53f78231018312dd3f7f2f0ea4be3197

              SHA1

              175a8169e9704d1c8b9dfca772d8fa80394e0eb9

              SHA256

              b3fdf87ff2d2f8476d170f871246fac4ec3d08be650c89e378a29aedfe6c7e4e

              SHA512

              f4ff9076998a1c1b9ffdb65d8bb93f38716920cb4f222e633562232502a9c16a0e870730e540957e6914a7b703626c28bd1b757061b827b758ef2445b5728449

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              328B

              MD5

              16de1422eb116b2e5766401d7d5aca91

              SHA1

              298ca64625a5909338b1fde7aa7baa8f50ccf345

              SHA256

              4bcc09a0be9477b851a4700e67d601f90e91b800405292d9379f6bb22546a522

              SHA512

              29eb12b97f64111f37da2dc089cbe3649d0b346fca6906478555c33f784e2e9ffd744d5173124655cd8c3a14728d4bde1f83ddbf6b8000511119932cc2804952

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              379B

              MD5

              42e1a146590d17f24c018e9f58bd96cb

              SHA1

              ae85eb984765b8b278de5b1a6d0a0fd194a9f479

              SHA256

              7e5be84796e36a8b4612b7773d22b50cc294040e0e468eb2df41f7aff0606cc1

              SHA512

              252fa573e14ea73be641cd174f3493b69e6f06a2086f15318bb53be0f20c748fde3c46213797d0b59931acbb986e19a68c01211831e7c95f9cbdb7611bc22091

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              448B

              MD5

              8177211ce0e00fc95e15814040f04112

              SHA1

              f744fc9c9429637bfe03dc620db2cd6ef6a576a4

              SHA256

              0668fe7081d611e1814d9a79fa0dc412ba6dbdfed28847f788ef4fab339c0977

              SHA512

              614ec7ed559556fff1bbab8cc3fcf868ab604bc84da768a72804839fd233196a1bc5372d8fae0a0374e5c4e1b3087d9e4c435a20f36c93d8bb968b4d5ffe842b

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              76B

              MD5

              32e9a868ced8501b8ad1b8f414b5b17d

              SHA1

              ef5221d375ccac33ce706edada3ecce74160c028

              SHA256

              df5302f9dea45be15372227c4726a63fd52cffff86be141010de71816024ab28

              SHA512

              a0748e51d91a1a2ce02ab5d72198390105119f00d792876dfc8c9c23a7a3c9bb6b308823ee0dba0b177d82bd58764f22a7a8dbfd3d973c62ff7cd9273f5f1f50

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              273B

              MD5

              bf6146d48cc54945a2518476c1b5e24d

              SHA1

              2c5a951e4012775ac69fb55e96753d76963f217b

              SHA256

              2dd59c2ebd619c8e57b23199e582a64fc903286006b7dcfbc8fdb28f2ead1998

              SHA512

              52793146184ab8a53ad8d6c1b0f5c1131adacb63588d0874e33bea1e671f162c3bb16470f14442182236d85d043d568daa8c725a4d3b68e61280f0dfa7444ae8

            • /data/data/com.uc.infoflow.video/files/SGMANAGER_DATA2.tmp

              Filesize

              319B

              MD5

              c7734fa5b583b53b834a7aa722a49a4b

              SHA1

              d847b4efcf57f5fda8c7533d88f4e99838671f86

              SHA256

              d4d25920f85cbf9f5d5da1a31739c39f7843ce44fc63e1f2372b5f3a4c4084ec

              SHA512

              3e698bd897c207cb768bfe11738645526bc7c3e433ebd2ff6173db897cd1866da8fc543fb2f7260be650a39a3eaef5912787efa774f730c71f36cbc0ae34e53f

            • /data/data/com.uc.infoflow.video/files/idis031s3331ddsn.lock

              Filesize

              17B

              MD5

              051b0a03c5b5def8808b320f72d71ac8

              SHA1

              6c2f89b1e6a96e7e6569bcca2428cb7a254f98ce

              SHA256

              42fc2bacbb52f3d76f757e9a4a257c794a2b380dbec6fdad431f6f14d999729f

              SHA512

              67be01ab78c4f089bd95806cf82ed86fbe9aca1907735aee3daf6748f2491991b5419381e7654d8044ab39eaec3b1dd10f3d05c9dd3806b19b9d1737ebab0e3d

            • /data/data/com.uc.infoflow.video/user/base/1710358416223baseinfo2.ucmd

              Filesize

              1KB

              MD5

              7ce08260a253b055ea4af474881b05d5

              SHA1

              9a2c07f27ef9d8278d8bdc9549682566e95d8b9e

              SHA256

              49dd76a99cf5a6c3063f0be950efced587139fc32a2e1759decc4e4d69f28af7

              SHA512

              a5e18f548ce18bb4d151e2035300017af8b53a082a80bcf5bc626d5bb91c7f1e563f563ac04b2f0d6cfae44c1e41a93e40c4a9a45ba38d210a72437e15678bf1

            • /data/data/com.uc.infoflow.video/user/us/1710358400031ucparam.ucmd

              Filesize

              11KB

              MD5

              ec8a1269366c2534fff9e6f34d659c25

              SHA1

              5abc68e15b5004d364dbfa1f93f76aed06474141

              SHA256

              e2198f3888c5e48240bf3a83663549e426c0228326b0edc77c0a61cb0dfafac1

              SHA512

              e4e4a4ed7147f5e8f451439d21f6a98b1bbbaa67019d41a5f58c10c8b030b01b23551f5a42cf8e95098a177a681cd7fcb42a39272d6dfcf3f7f9602eb5475448

            • /data/data/com.uc.infoflow.video/user/us/1710358400589resdata.ucmd

              Filesize

              1KB

              MD5

              5b2cdfe0f25301ac10663bc04a7acceb

              SHA1

              fee87eef301ae9f2f2306db3b1c5d54c16089429

              SHA256

              2a7cd750b25b58db15a9583148407f99c0c488cb52ba83fb37d780e6337bf39a

              SHA512

              9890b137afaf135b9cf8980e6c1d63f36f9c5b9d871efe2b0eb3dad9afe19a4dda83f6cbf1ce209ea9194aad5a46357b0934a3e787bb0d34af8e86670bc9189d

            • /data/data/com.uc.infoflow.video/user/us/1710358416324ucparam.ucmd

              Filesize

              12KB

              MD5

              f6274d3c31f9d48241ad27ea06adfe59

              SHA1

              3b780b274c3b4862c031923bf31fb71678478abf

              SHA256

              287d158c1c44c458f081215dbf5c13d90e6df14922e7323a908e9c61d56139a7

              SHA512

              04de314bed80a0edb2201d7c0aa2c4bff2a4c1411feffea065cd55b6615b7d56317428ce00b92fb084f59427ffd3461da87dbcc797f672c5d815eb5d59c93e91

            • /data/data/com.uc.infoflow.video/user/us/1710358416439resdata.ucmd

              Filesize

              2KB

              MD5

              29cbee4eadef0a10ffbc3d770537b9df

              SHA1

              b650134ecc7b0afca26ce4669db87a46e53d0874

              SHA256

              2a3423d4d6aa0f6a327523b92049fc60ede592353b6bf15436c6f5e111cac358

              SHA512

              dd3917c9cceadb539db065c80d22af8fe239c6cffc319064707b9fe782120d1e5d08740f032336f47812f498ee336e77800a4b2f681bb0d9b58d4af8a5b56420

            • /data/user/0/com.uc.infoflow.video/app_SGLib/libsgmain_1479409694000.zip

              Filesize

              92KB

              MD5

              b825afe79e10213903407c3732a3a73f

              SHA1

              acd850afe2629166ac999513e6acae9e11074bb5

              SHA256

              7ca6ea3f7fa5f6c41c5f9a75f4450b437ac3ef74390774df3b1cd625bd74b099

              SHA512

              94159d781013a4d671686a999a714374daef64c697b8f38d7ebca6e54ee66cf607eac298c1a69745678443fe2c882806bb396c947b752d61988419800f14cbbd

            • /data/user/0/com.uc.infoflow.video/app_SGLib/libsgmain_1479409694000.zip

              Filesize

              92KB

              MD5

              b19d471f030a601f843d56f53580c3b7

              SHA1

              e5c43f6450dfdbcd9eca051fe416d170e016d531

              SHA256

              ca5aab6cc868bf22624c66912bd1d0f2bd8641c0b2bffa07cb9ae51d5fe8b310

              SHA512

              f09fd13353ed296a0f6c421b944125638c25482b45e8e494ccdf4e52007d387d816f2bb236efdbfd650bd40063317f55b39a07b3764592d1b09cf0e093ee9918

            • /data/user/0/com.uc.infoflow.video/app_SGLib/libsgsecuritybody_1479409694000.zip

              Filesize

              10KB

              MD5

              825207550803f4fc4540669fe37e873e

              SHA1

              09f99dcdb1f5d63daa20c523f88e1e8c414e0050

              SHA256

              558ccab0eefd577fe24ce4a911bd4f6cd51f24c62eb5f77759e476041ba8648b

              SHA512

              4b66739408d8d0273e2756180a43077e4b25132a2c9a53f749fcefd4756a8b02d2a3279d249852491d40e724ad742be168be6ca8223614963419517aff09ce6e

            • /data/user/0/com.uc.infoflow.video/app_SGLib/libsgsecuritybody_1479409694000.zip

              Filesize

              10KB

              MD5

              7761d4bbe2d30f9f22fd020e7b0f84ad

              SHA1

              c2e0cc1aedc3480c10bc7d7190788145c69d22ad

              SHA256

              de8d774606308e66bebb47ac73004e5486b7539921e9d93f46740107ce635eba

              SHA512

              83ccf13dcc9091c6fb8af5fc087c4d197ff8a69aa5d330aed6c516f0b09f7049442416f8f1349655bb3d3a531512fbba37531741060323775dabe92a5b60a6b0

            • /storage/emulated/0/.DataStorage/ContextData.xml

              Filesize

              111B

              MD5

              0e8dbee992843808fb347ee920ed5e09

              SHA1

              b0043c5d3c5fe6c2090d8047e09d570fb659fc14

              SHA256

              64d97d1e21356d38a4bb435cfaad472c125a00ee588bbce6efeafed128249d1a

              SHA512

              18f7c2aedb5cab35d946f704af924dfcccee8d423aa6ea1fbfa3aff0116bf5ff7f7776339e71ff83a26205ac6106f182801b9446006276bd680908e5d2312e34

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              65B

              MD5

              9781ca003f10f8d0c9c1945b63fdca7f

              SHA1

              4156cf5dc8d71dbab734d25e5e1598b37a5456f4

              SHA256

              3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

              SHA512

              25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              111B

              MD5

              5944378c2e0405d5c0e2a5bd24817d9e

              SHA1

              95acb08508776a910fdbd28fba00642fc0bd173a

              SHA256

              da47b56422620f45435ddb801027f02b440d3fe2c99434d76ffe56077ab9d4ff

              SHA512

              b8dc97f8e3412c4fee699bb4fe15e46483c6b522a8409520da5c03c34fb3bc3d794d6379babfebe13abe15a61aa138652e4205494e701a91a3a433b7cafd0b2e

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              167B

              MD5

              69ecd9b8e4874b62285a8789bfeb131c

              SHA1

              ffa4363a5dda390bb34076aab7c14de9d0f57784

              SHA256

              2757b5d0a48be69cdaa61884820daee608e8e3e27b2c0f6e601a61206d6906c9

              SHA512

              bbd5151ab978333c753bc73db9e758f1c7981feea25d5323165313e513dcaffc50d1e265800496a34b309f326599529d878c93a79ff340d8b9bbbaa99bee24c6