29f076ac254466834d747ab7568ecaff3ec55f61b87d799dbbbd9b79fe1efc0a

Analysis

max time kernel
151s
max time network
161s
platform
android_x64
resource
android-33-x64-arm64-20240229-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
submitted
18-04-2024 11:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f7e1a7ac8b704528b095457ae0f9a69d_JaffaCakes118.apk
Size

30.4MB
MD5

f7e1a7ac8b704528b095457ae0f9a69d
SHA1

0fadf06a0fe3fef7eda39dbf543bbaad200c21a4
SHA256

29f076ac254466834d747ab7568ecaff3ec55f61b87d799dbbbd9b79fe1efc0a
SHA512

60e2cb7965a02eb6e0b30bc6849b640cb2cdbcd2df5c5ee7dbc18d939a281d8b2b02fa55ccc0e5b106c308da1de5c85b18021119988f2e8b5ef47ed21ca03fe2
SSDEEP

786432:caaaaaaaaQtev8CO2BmIq/tRkiemU9/wJErYoSDuRhkvNBfIG0:caaaaaaaaQXCOD9GbH38uY4v

Score

8^/10

collection discovery evasion

Malware Config

Signatures

Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery

T1430

Processes:

com.donews.firsthot

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.donews.firsthot
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.donews.firsthot

description ioc process

File opened for read /proc/cpuinfo com.donews.firsthot
Checks memory information 2 TTPs 2 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.donews.firsthotcom.donews.firsthot:channel

description ioc process

File opened for read /proc/meminfo com.donews.firsthot
File opened for read /proc/meminfo com.donews.firsthot:channel

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.donews.firsthot

description	ioc	process
File opened for read	/proc/cpuinfo	com.donews.firsthot

description	ioc	process
File opened for read	/proc/meminfo	com.donews.firsthot
File opened for read	/proc/meminfo	com.donews.firsthot:channel

Queries information about running processes on the device. 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.donews.firsthotcom.donews.firsthot:channel

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.donews.firsthot
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.donews.firsthot:channel

Reads information about phone network operator. 1 TTPs
discovery

T1422

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes:

com.donews.firsthotcom.donews.firsthot:channel

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.donews.firsthot
Framework API call	javax.crypto.Cipher.doFinal	com.donews.firsthot:channel

com.donews.firsthot
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device.
- Uses Crypto APIs (Might try to encrypt user data)
PID:4305

com.donews.firsthot:channel
1⤵
- Checks memory information
- Queries information about running processes on the device.
- Uses Crypto APIs (Might try to encrypt user data)
PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.donews.firsthot/databases/cc/cc.db
Filesize
36KB

MD5
b986a138e325f9ed31653e246087baa6

SHA1
1cda06c101efbf7c89305f44b552e38282225064

SHA256
6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058

SHA512
5894180006885af44962dcd92c6f33a640d6080060a51a38ee4e348ee2dafe9abdcf2a931cfad4c395ebe20e08b96f810ca54b5b1f584fa232cdabc76be0740d

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db
Filesize
36KB

MD5
1b77217d803a7c04af9466680b92d104

SHA1
0cb959f4773c6730e8aed5746706c0f3ecb35c1f

SHA256
66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3

SHA512
39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
512B

MD5
11ad63b437f5f975a5492691932fa5fb

SHA1
ea8a1379b136f72f98e685309561f82b2fd1abe8

SHA256
86dfb16997ad3c18abc1cde177f065a256d4a5ff693d6a9d5d610eb2a51c736a

SHA512
7484f456970a4155b3569c238759a72747da8889f6e503d1f5719a25faff6fa98ab1cbac7703633fa70ee760872f35e1359f33e70c65b3747040abc4f479b1a8

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
8KB

MD5
cb44dad3bd26a00d130eb9c9763672bb

SHA1
f7530e50cb86fe5ea8c693c36bac4f378bf9d648

SHA256
d0a5f2e4b9aec5a8f1d2f652f5dfc09e1f329c2ca8f6bfcfe1e7cfbf8406348c

SHA512
3b340a5ff27e83cf62fd1a9faabcb65b13080d8d787b70000c4546282723f490ef57c71c2c101ab0087258bc2176344181db50d55780bade47d50dbcd373dc1d

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
8KB

MD5
6bb3221ee2701fe4c7c93035867b6221

SHA1
d60eda04ead65f2e89b56c98233433dc291106e2

SHA256
d50f60ecb66a054c2cb1c5d55aeba55f26fb9ce9d913304e55463bb342541527

SHA512
9b5d727bb4cd3cd81e20bea2d1ecc66f426a88f83003ddb8fe203fcad38af61bd1aeac448d505e4023741f49ceb0a69a2467cb77b292da8464287959d94b7895

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
8KB

MD5
01bc41199efe8b63960ec6de4fc6f967

SHA1
4d7c25df185a7a80ca8a0fb60247f58bff2afb4f

SHA256
66c744b106bcce4d2dbb9d739a3a084767b71c58d1707e9c9138d4bce9e55d56

SHA512
5afb4f509899c8312573800740f0c241365b0b6d0c500830b4d62c53582b0c6046615b18c87516fa4192eeabe4564ec6e73ae5224009b00f62d798241069b6a5

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
8KB

MD5
debdf9f8eae76389fe9dcfbfe02ad0bc

SHA1
91bf4393eb0a1430af788b7904051a734273c580

SHA256
72300723c21d9dcc371cc607accf37e4c11875babf80e44cb593478a64a7f78b

SHA512
a823bf235774985e78415d5cd6436c3fd7d47bba06a574637fca1a9a279ef6e64bee2671b304e6cbb14a2fb23bdc942a565936a2ff35e9e67f42b7cac11bba4d

Download Submit
/data/data/com.donews.firsthot/databases/cc/cc.db-journal
Filesize
12KB

MD5
626bd011acaea34e071dfdc632ec0cc6

SHA1
2f2b0c49ea9bd733d82417a58cd9b32dcfe3993b

SHA256
eac71e9dd944435f0b3e19fbcec7d275c4390767b831fa2edc8c72f846be1354

SHA512
5cd1dd8f60dbceebd0d25b36966da1e2aeab18ab0d7bb5bf39eb4e4d5e192fe2ab401b5a615275a116df2ea37b4a8096bd72d0185bf6634bf205255061cf629d

Download Submit
/data/data/com.donews.firsthot/databases/ua.db
Filesize
32KB

MD5
ee06c6c79ad01a7d531a02886edf31fe

SHA1
e4b349f3a14f1b2a1d11e49ff1bff08f02149c58

SHA256
433f218a9d68d2493dc4f0448922ebe84bbb57e1bc07a018d91ad572641789c2

SHA512
04616fc705b3317a5a043b78eff03b4f2fecde222ecd3ced36b793d7e3c8e01cc4eba3406511ea6294f5c648bdc5b4565e45965436077cdacaa965832a6ee049

Download Submit
/data/data/com.donews.firsthot/databases/ua.db
Filesize
32KB

MD5
17bb57268badc491266a2729e57b37c9

SHA1
ebcb029dd3fc1f70e210d93ab3086bbd5d39e3c5

SHA256
eda21e9bb4ad31e62a195d99b6e8e7f361411de6ae8f3049537055c8e688f837

SHA512
a4a6b7ef13c6d81777bd583c1a96fdfc735b7aae8fa67d9502807d1e150784abad3fec756af3f59a0f9086447b89ceed5fdaa726e67682915285beb6d23f2182

Download Submit
/data/data/com.donews.firsthot/databases/ua.db
Filesize
16KB

MD5
2c71e4396493e8a5721076619a162901

SHA1
e5f8f3effb23ce986a276fe05fe6a68500c8d9e0

SHA256
1df703be5e6fafc3dc756d87498d59c977af6900a92afdda8e4d63f1151f7ad0

SHA512
9028d1cb93ebd658b96d1ee6e91b192102bb00f874f95e925cbfd6eb57d07a73249ddc80e87b41e1f80e6c3eda721c537a4fb466ab4ff4138401a0e0dfa21a5a

Download Submit
/data/data/com.donews.firsthot/databases/ua.db
Filesize
16KB

MD5
020147dab631c5d203d9374854480009

SHA1
558c538892bf494109134dc247bb96022fce307e

SHA256
78487308a25c68601400da4c1f383f07acde725f6a8eef977176b72695661b5b

SHA512
4f664bb302868f7327cd827fc55511cf833b543c8fa668475353b92d77d25689d5884f0f8b9473fc7ce826a6dacac1aa0cb637b69e7a9b61b242e7341ee7b3dd

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
512B

MD5
a62c7d9fedbdbc7ccfa8b1b097652a5d

SHA1
cbb8341a652f51ea571026d21228cd2388ad8084

SHA256
f88806832c4951cf7bdcc70ba26f2ad4dad7cc3dd65e96178d3afe4d6918ad63

SHA512
cdf66aa39df4306eb68678ce59aad9d2cc9ef75666bd8cf1141c0e8e2f9e8017af0b152827675b5eec96151778e540d6c01da84a110d4487bf359cc5d4031d87

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
8KB

MD5
f3861cd59ae329c97b298f56bbb8c352

SHA1
01455af2a83838a238def9a3974a96fd5cee225e

SHA256
db62e40d49e125149ac5af9fedb7c968c5294bb16320e6b8ae13124b48357326

SHA512
834299a069a21ac474e4c910b3ad71d511112e8f2320eab06606bf206fa646449dc3767c3015fe864b268e762dcd80bec524c957247cef16b0a9736cff4e1313

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
8KB

MD5
39d709ead3e7a8b174db0dc4ea62fede

SHA1
bdabaf6a9f02b2fb0ac6880c2d63a7f4dfd7c003

SHA256
9745605fc4e73443101be25d2efd54e2ee50744f396750b707e12d3c9154c86c

SHA512
120ca577516a6f2ad0312ccfc8a9c9ec74a33d83afbbea8b9588ac4dacaccbc5d45b74571a112f78c0942ea2a0422a3c8f1efbcdf79a2ff996cc49514508739c

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
16KB

MD5
72be6f7c42d953cd76c964f0da7da241

SHA1
9d01bba9315359c6026bf2244ee5880456b0185e

SHA256
3a77fa8ac56aaaa50588af101ec049416eaee6354761b2b06a31a3f23f1d5478

SHA512
26ee7c85538d94d25a012c9882f5eea40995436f27211f11ae465f82318f40e11960700511d6ec19ccedf6b6e7a4aaea9431979f19c1a134949d558448f4d06d

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
12KB

MD5
3ffd4559e7a1771b0ca02911288d89b3

SHA1
be7c1420c3b44c6f073752b0f7abddcb796ec4cf

SHA256
824f4aafa36bdcba8ce72927f405aaea95850d0c7926583816f52068a8d9904b

SHA512
2f016a55c81498a71b837cd6a366277b14e84bbf0f24a3c25c75ce0c49b7cab438e636f1e0f69118a3d1f1f8d131b49496fa3719a8339dafecf79aa3390ed5da

Download Submit
/data/data/com.donews.firsthot/databases/ua.db-journal
Filesize
8KB

MD5
b8361d04df7eaaa18b6d47c28bd5554e

SHA1
e1cba5fa663c0ae6da44821428da1b51dac151bd

SHA256
e820c8b4b610e031ecc0803c653f8619591a24bdfcb98e2d34400ba870fafc5e

SHA512
ddb6b1edab984727e55642461bfec4e535905ca49f7a2a6c67c6495244151333b10396802161b32db1fbeb2efd12176f0501cc02a54d95c2a468dd17c040c291

Download Submit
/data/user/0/com.donews.firsthot/app_crashrecord/1004
Filesize
228B

MD5
abd86cadb7d829a816aadd6a1d4ae23a

SHA1
8628dc5a81e0421f68365e3a8c33d3f859a933b0

SHA256
041f46576b2947fff174168f8a6529b51c904a18f1707f3839e06993b501cd00

SHA512
86b1a581cfd86beea746f1a11e65caa776e9f6b66dfdbe3d31492f9edcff319193789735d08c880e40cf02d96b96ec719b6e1d164e5f3dd52631acbce7e3d777

Download Submit
/data/user/0/com.donews.firsthot/app_crashrecord/1004
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/user/0/com.donews.firsthot/databases/DonewsSDKSql
Filesize
20KB

MD5
6f5c2bce57bae8b689c0cf9349cda4b5

SHA1
39488c17e6a1fab2918b0c38712898e50282fb73

SHA256
95cca4a5140bc0b11b151c752b97435e9dd24afb11dce7f7cc272019a87fffa7

SHA512
658b2eb525a26cce40f6655073feb68b21efec8d309222ac4bc12b5b5a32c8660e26d092bd38f309c62e4375a3065fd95b2d0203a0c07e80bc96a2d57a82085a

Download Submit
/data/user/0/com.donews.firsthot/databases/DonewsSDKSql-journal
Filesize
36KB

MD5
8667c540902807cb0150ee8fec9f07c7

SHA1
1a0cc595caaee104b2209d5e3f6757f2aca8b4c0

SHA256
4cbe86bf14b5cba7e82b4c126ca2d7b4e10fb1760936c3a785dcc360863003a4

SHA512
665e0106bd09c25d061b77acf933db23d8a4ae6a2f608a41a0cc1eeaa4842605e96b60dbbda1f5fb85f0de5523a15280a593e1f1562ad8e2bface32ab5ec9c62

Download Submit
/data/user/0/com.donews.firsthot/databases/DonewsSDKSql-journal
Filesize
20KB

MD5
ffb6ef6ab598a70dccfdddc6dea335ba

SHA1
bb241fe13c5aa7ebb1adc0535f201543ae58f6a9

SHA256
ca6130d66005d60d624f35da8d0afcbd546420b0f5b71b4564c17cdaa59249c7

SHA512
04511750f1ca92b01b7b4d73922b80284be75db933ac64bfe1c6aa727f1f8026ed6c7c12fb6617371ce6aba680c96bda5a654dee7b8976edd4b2a37d8202f4c3

Download Submit
/data/user/0/com.donews.firsthot/databases/DonewsSDKSql-journal
Filesize
8KB

MD5
fad2c45949f918ff2bf6776c6b9d7dc3

SHA1
8d0b1b6c784da3240298bce7ccd5d9ca6ac791de

SHA256
e97eff25ec21f79c53fa6e9dd39112ae743f9567ab8f9886c677414b03ef08cf

SHA512
281ed0b8aec746933ed68aff092941a9fd4d8d2bfc3586b69c2d67889cd28abdcd433dbf2b93d42249d7e4ab3dc4df7eea5648a46b7bfaa7a26609acb2a32cc5

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db
Filesize
36KB

MD5
ee1ffefc81d2fae3a5523d2f4df62f0f

SHA1
6f9d069a6532c646d11b6f30eb58ddba05391ee7

SHA256
bb0a720d41047628e5751b4b33529533ff0505638fe28f7cb0ebcad20e275ad2

SHA512
b6ef3ba2c4e46f20d055aaed654693a097339d9b0357fa8df1265e2a246ad7d962729a3ea542d86731e7c79c98c5431827e7aec6458c9169031054fd068274e0

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db-journal
Filesize
512B

MD5
53c4ce286b60d7a2c9ab850e7124bb60

SHA1
ee464a1bb2dfd3b21383350b3c005751a0512882

SHA256
486fccb6ba6ea60bc782a31902e4d4d1c7d904ffbf1d2fe46e0bec83291560fc

SHA512
8db71211188d08a7048c8ae281cc1804a7c3fded7597888806e91a7f26646e600b3e115ce5f933a87dec9474060506613045bfc2e2d47eb57ff818329b30ccec

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db-journal
Filesize
12KB

MD5
2d9f6e7685a0cec4094963ec386cfa52

SHA1
e369df44ebb3b61c17a1a2fdb53e8cb382d7fa8f

SHA256
57cea5d4dc3adbd9499e3cc179b2357e2a43bf128a11949a83639e36e3c5772b

SHA512
d2d525b1f2e63b2515c6e77663f033d047fea863c1df1afd7c51250103e801513f28795cb39bb3716911aea5feefcc7c442a815be8c416015ad451b74aee92b0

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db-journal
Filesize
8KB

MD5
676195fa7bd359f0761af86ea7c46feb

SHA1
308e1267a60f4d4fae042b9ab50df150cd63bfe6

SHA256
864335e241bddd3a2ea8eb365fc04af45c3c6b0b5bfbd92d679858c712e88d25

SHA512
f5dd1a5898d6755c5e9f19dfb54870e4ccaf16765a9c591a9c7b9f8b702da983cba758d28b9785ad966af8491cb6f668abc04cc297ba8c219f35fcf3cdb0f16f

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db-journal
Filesize
8KB

MD5
667b7d240f3ea28a526fa8b7dd540094

SHA1
87106ba11b53aa92360597aedbc90df4dd5d42c5

SHA256
c9d3ea85bb0ecb97da37dec55b26383848afbc63d0cc8b789370a40d7c74a31a

SHA512
535e763ff94b32d91ec9210502b6d67f23365ae501638dfa285e8bb23773e781777f6fd0dd130ecf4173cd2530b4dd805c588c13f90383e2257b7f2d0d5e9e56

Download Submit
/data/user/0/com.donews.firsthot/databases/MessageStore.db-journal
Filesize
8KB

MD5
7606355abab1f518e5037dee52993e67

SHA1
b65340de9117d0c8fdda200d22648ddbdfbef966

SHA256
0c9e5212065d62dccd39ab0de375971cf9ec825374f8e270906860fa66f5adc4

SHA512
a6f7a8424dd82d71c681292214715989e59e5e0b5df6f605d0a51f63436a2a9d591200520de2d8a31c7054c2ae385f6955e33a903902bd676f4cb00530648875

Download Submit
/data/user/0/com.donews.firsthot/databases/MsgLogStore.db
Filesize
56KB

MD5
e2187e054ed05d4742f5c8e85f2d2de9

SHA1
e510cf109b50aff0525cc19a046e7a359203c584

SHA256
72c3c21969de96525c30a73a1ff43a4ce69dd94f3b609cef5e5b8b98b7c5c129

SHA512
5694d5bbb35d2fecb45d31a9109a80a4e8da41dad3d739eebbd69e3ca0ca5bde06b4e06a7157205e85d1679ceff038bb2c939234932af116b3a63eec37c08435

Download Submit
/data/user/0/com.donews.firsthot/databases/MsgLogStore.db-journal
Filesize
512B

MD5
786974fc1a67b09ab5fef3c74f7fb413

SHA1
76b7fa8ed642720d506012da84b92283d0e354d0

SHA256
a07a3853a2f07352b3a504d68ca7d68f61e9d80fd7f77e25d8579fbc9f09898f

SHA512
1b5b26061465a3874dbb0095a3ea2d9712a894af9d9fb415f3bfdf6392f8990d5396eb36688d6fff639051184e9db80595f9f3fb73edb3d7152b67e7195433cc

Download Submit
/data/user/0/com.donews.firsthot/databases/MsgLogStore.db-journal
Filesize
8KB

MD5
9578761c8883b6d048a37545c0ecb4c1

SHA1
022ba3ba04f786d43adbea03906034ed23e66db4

SHA256
ebcf45627d59bc4060693988fba919696d77afe5516d971d7d05b6b42d5c6e1f

SHA512
3a631c9a29ab2519d5fc436ab168237511f8226c1987629ec3ae81d3d4f7c3882bffaa568ab12b517556365c5cb324f80ea572daf348f80605c043501e12662c

Download Submit
/data/user/0/com.donews.firsthot/databases/MsgLogStore.db-journal
Filesize
8KB

MD5
987002b4d8c09563bda1bc3064ee4424

SHA1
f9cad8b7a843197c239aca6451af02cef9498ea9

SHA256
14d0a2a9cea9c636ba2c410e2911f05c57cd7dec0690fcfab0e1fa97b61c973b

SHA512
44b7307e53c506a2c3de3254784076f2d9d259b0f2333736fc21b60d3ef248083cb23384adc533116ce4345051ab9eb13a2a247025f99247d141c583243038b4

Download Submit
/data/user/0/com.donews.firsthot/databases/accs.db
Filesize
20KB

MD5
558105926688c7d4f4788f6b593bcebf

SHA1
d16091461bb6ba14d9de002f0e32feeb35fda9dc

SHA256
51b2b66764ca441ef1a110abc89f5b8251be8522e0a9bda462a9375d18594616

SHA512
1e7c7947765f949be950a73be089c256b52def43f6621357548a88449ffb6cb128f99bee382cfe8c8c786c3e9ac2a907c08f38e2ff9e1e37fc9138360533b55a

Download Submit
/data/user/0/com.donews.firsthot/databases/accs.db-journal
Filesize
512B

MD5
7dbefa00280c857e410fa0697565546d

SHA1
5d4760bdb3bff5a15d6cdc2bbc985e75a408052a

SHA256
6fd0a4ca09fa6968f772e76610004776c9e6efde53b68dabfe5a1f44119a30dc

SHA512
50831bd9f76de8f84e83c80edce029832bbba42a296ac26bdeac2727fb9b85dfcbba2251209bb6e9fd8b5f9a2a6ff28b25cf315441fef9ef4cd317e06f4347c4

Download Submit
/data/user/0/com.donews.firsthot/databases/accs.db-journal
Filesize
8KB

MD5
888d1227a5a1403b744493bd44e35c5c

SHA1
2e3a8e9547e091f131327ff1d2b9abdd111497f4

SHA256
82c0bb3de9431d0bdea906e417726617627f69339aac45bc9cef35e003ae6eda

SHA512
4bb8dd6468347496790d2071cdb4331b677f392670029dcb9caddb2fe2bd7df833264636b372b932e044c7875e1790426d509edb8012419601049618e6b8fd7a

Download Submit
/data/user/0/com.donews.firsthot/databases/accs.db-journal
Filesize
8KB

MD5
4248f7cf7bbf4a75072c488766fbf386

SHA1
df2952cf634f8888d8bc0cc42a22ccd987edd6c7

SHA256
d45c6bac5029fcec182d43ff88dbac917095b5e40beb6647dba4718fe9f0fabc

SHA512
210f82d565c247890e2bed9212936bdf62c57a1ddf8af38abd7228a41f569a9160d89936ebecd8527682794e0479d1ae11770419f984934c6b738dd62ed64413

Download Submit
/data/user/0/com.donews.firsthot/databases/bugly_db_
Filesize
52KB

MD5
0edb5e8aba189af43788197c14589e35

SHA1
1b575b4d47e31e09bdd281cbd5e4122cdc05d28e

SHA256
2225d6a06446c9c4e3c82c02225da7811758f6b440de64ca30da1f7e9100d84e

SHA512
49bc553f497fe83117265f757c916788add6102a6b0670ec95f76f722437f483bd0abaea049ce47370ec8322c8718571654438d25996d3259fea1b8b205aea2a

Download Submit
/data/user/0/com.donews.firsthot/databases/bugly_db_-journal
Filesize
512B

MD5
fb56ab505be271d53a660c98cce6045e

SHA1
dbc208984a47be661f02f4059a42932c31af1166

SHA256
853471ee36b1e755e84c1d62f7fba4876d3b45af5d961e8cb43836ac3b22f34c

SHA512
5baa83cbf5a28cd2f49a054e8328eb59fed85766b46a1b94c4170a1974ff530d837dec7b89cd18072b0a6139e4641cd152b1f667dfee560d9b63c6b9e7bceb2e

Download Submit
/data/user/0/com.donews.firsthot/databases/bugly_db_-journal
Filesize
8KB

MD5
dd4ba74ffdec359f757f9f55ea6d03d1

SHA1
c21373891084e5aef170e572a691eb3cb0a3b3ca

SHA256
fde715db67d3a63ecac2b669c1c479ebb86cf93c839ff4fc11f3fcc877d0aa51

SHA512
3073a6eac8954fcdea69cc0c530926768534e142f1ea8e6ea54d5edc3c87dac56c0c249402309ff6f53b06f39addd373ca0df78a867a23c757c573ca21e7abd6

Download Submit
/data/user/0/com.donews.firsthot/databases/bugly_db_-journal
Filesize
8KB

MD5
0822261ae2481214417a03af476cad1d

SHA1
9214c680bf20531f78a4c5b118e9750b742f9620

SHA256
51fde5befa3e660bcc2110955014dcf18983761ec331d338df6b0647ada24ee8

SHA512
2c5c64e566a4a4474f57dcf2dbce107ecc97e66c0f96c2a264b8fe28d73c3a8a8ee24724264894c653ffa593730df5f71b036b01d1b3ea54d3c14fabb97720cd

Download Submit
/data/user/0/com.donews.firsthot/databases/bugly_db_-journal
Filesize
8KB

MD5
b9a428e2ad117f77b8d60d8c5b9a2e68

SHA1
09e138682a38e1a8089df85139f5099492a9dcd5

SHA256
0deba801847424a4b1925bdb52537f57828795c80bf881ccab1f84fbe178cbf0

SHA512
eaeae27f61674afd49efbc898f21f4d9efb75522cb59a2cfa36f5c4c35b47755af7daf9cfd37fc191f36495a48ef5f447c7bf015e85458ac144da97298000c83

Download Submit
/data/user/0/com.donews.firsthot/databases/donews.db
Filesize
12KB

MD5
edb655088d1ed9f33f9d0d499b7a3ef5

SHA1
565c4f4e43179dbfc285cd6331dc8ac75a901af8

SHA256
bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

SHA512
98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

Download Submit
/data/user/0/com.donews.firsthot/databases/donews.db-journal
Filesize
512B

MD5
22b7087de35bdddb84f17f8ef2d8face

SHA1
72bae2b56da354d8b528a7925a1b30038c9881a2

SHA256
6b971ba0f34bf9a796d60d2cbdfe96ec96d8c0f265f83f5bcf91833e2e78b6fa

SHA512
5f25d0d0cef5078aa9f00730edac7e8f0160e92591e8efa25c9ae68a0f2f12ae2b3cc33513064478f250c3bd018c1cd91dc35d7358700458d71868d880ddf815

Download Submit
/data/user/0/com.donews.firsthot/databases/donews.db-journal
Filesize
8KB

MD5
a10d6e4efb97a57fe70670ae96691e33

SHA1
b2f6e6cb37150d26808f3448422bf72f9b5aac7a

SHA256
a60ad78d24bd77fb2453dc1a284c89388b16a8c07968df9c893efca92d831890

SHA512
f0be7307e19c3c709b2ae788a267df61fa1df6c72bab44c6769c1a78959a9c36b99d6543c720a85a74176a2c732ef4245b80e66077d375e15e806983a997747c

Download Submit
/data/user/0/com.donews.firsthot/databases/donews.db-journal
Filesize
4KB

MD5
08e6494f8cda3fe62e3acafbcf3c211e

SHA1
b725d11d07712af65d0c24460e7b6ea3bfd03be5

SHA256
4ac3f545bbdd7f018c69e157fe270740de2592cb9a6917bfcbb5a94780af59d6

SHA512
d87490b85232a043d48f5fdc35826bb227d7de7c15857ffcdf4a6d686e595425802b1b0613cf9dc605866e85893857717b511380a0b42c39edabebfa6eef18a4

Download Submit
/data/user/0/com.donews.firsthot/databases/donews.db-wal
Filesize
4KB

MD5
0919224c23c9c5f34b2e2103ca33954f

SHA1
23c8b8fef3e3867c360d8e8bf9e45daf09e042e1

SHA256
39e6a0370f3dd214064a1a160180dd3590f5f11d4517c09f289ff04ff5e2479f

SHA512
aa730d37142579da5ba5ff8c8171c77eaaacd7b72989bf18a788cc84e7b870f29c2bfeba7663b6fde184788d389b3607a10e6edc239790b2e7e7079f29ba69a4

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db
Filesize
12KB

MD5
7e086bdcdc403f392247b32387943d71

SHA1
157afcd220c893363d1f4b776308a2cd56c45c0b

SHA256
a08ff2a19435a5a8ca1c4cd721004f5b024e62135cdf0d9138aea380fb449078

SHA512
c10278de41442ef70dd13a55074514d5da329d0f70465d898869440c665aa2f64a030377034f50391cae7ad3f5984816db30803c0ec114ef2c9d05b8db92f349

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db
Filesize
4KB

MD5
7999faa70c945e3e37e94a70e075f896

SHA1
c8ad790a45ad61055566c227d0dbbb58b42788da

SHA256
294b7cc1b51380f809b91dc31511bc110623b4965d3200caf4208815789134bc

SHA512
8f0d1aad91536404f28e176bc68e978a16f2e3512e432d14ade9282ceab757ed69480d3b8e8d6137006a4ee607bc3bff484b50ededfe5ac0eac457a22bca682f

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db-journal
Filesize
8KB

MD5
d42d8a8985aec759eef050e436a645fe

SHA1
2c448d11edfd4082985b18a405d01f6a09e4f36f

SHA256
dad0da68190cd8e3df3c0f02af8a24d35864e870b899c764c3f3a21980441081

SHA512
87e15f8a42b18b54c133f0eeeb5be5469d6100d70f3667668ef14235adc572b215edb84ee1aefb6595eacc99f62357d7cd3fa3f8a2175b1188e5f46c4a16b4a5

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db-journal
Filesize
8KB

MD5
043a9e02b6872eadc52cb4858ef85f2e

SHA1
08eddd3fd66913c02e9ad57be0c616429b6c8a09

SHA256
dc95af5749a0e9dbf9144fae55f623e266eedea336f711463eae4c5e99bb97fa

SHA512
36d91307ca503825f104a0a9c1550c2a32bf5d7804c64da80b9ec3c81278addfa576e1901c2135d3661f2adf13587dbbe8c71308d3287fc6d764c74f3332cc10

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db-journal
Filesize
4KB

MD5
1fb4ab5b3bbbd2f9fa24e7def36bb5bb

SHA1
08bac9fcd68267baeb5f6735cec396a4c988eeb2

SHA256
1969fcf08923cb88eb771894d966fdc3ad3622fe4433eb8ea6e0148d473b6406

SHA512
928c0aaa71f47429b2f022e711c54d091641a070e63c5180d8b94c4d01ba734262a575a721ffb7d5bae7080e65b018dd7016e20aba81422d601417c116789c67

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/com.donews.firsthot/databases/xUtils_http_cookie.db-wal
Filesize
8KB

MD5
5adab1d785765f3a7b624541aad66c6b

SHA1
d620abc53a294a18e08c20134e66f94e4c54aa37

SHA256
b6fc0d3af522d0599938a558ea1bd252c475ad39cdfea197fd9d520b488fe04c

SHA512
9d25c9857bb4c5b17921ba5bca85b13b8683abeced14e9a7f782ff2bdc048af7878ecd3fac23ec425d4b0f192c77c46994ef6a1181c542dc4ea4a128497e735e

Download Submit
/data/user/0/com.donews.firsthot/files/.um/um_cache_1713439143388.env
Filesize
1KB

MD5
9ec9ffbeaf0a8c00fdcb0036ce3f5e2d

SHA1
6efdcdfc27a7cf9278797301f92ab33832a71bff

SHA256
9080a56d6bc098de48004db1a87758fe2c15bc0e8cd12c3d6e001010985e6a0f

SHA512
1524ae9b527e5a0cc6a34d63e2eb2f1bd5dc1f1e5ec0278a31c4684cb87257566d0fece74d55261a095968d6fda2736e9c6554c8a86ebc6717fbb09d1799b42d

Download Submit
/data/user/0/com.donews.firsthot/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
501699c53287c4fd6b313fbb1038ce48

SHA1
e06d6867af47ef30b48d2a350cf6df3ad3b5ae67

SHA256
68997e5db6ecb2ab8929a435de8e28338aa7c390dfea09bdc731c49958d2d46d

SHA512
1017f313a2d172f7462e2d191411e4b7a231015bc940b3b1d01664f64f6082d2b9c8ad7f8ac3600aaab22140247c6de742954370074a8a800a8cbb490c15edbd

Download Submit
/data/user/0/com.donews.firsthot/files/exid.dat
Filesize
54B

MD5
0d9dbb39f3aa8cb766332eca82399161

SHA1
2af9d4bf638a8d664b520f0a3761853578381115

SHA256
c203c80c5704135c10f0708deef911840745788e04e8bfcb5cf0346b3d72366c

SHA512
ae5696605dcb976c47b59d26ad8a11fa0f27148b689544d52efb1e7a85711aeb98488cdca8e4f2d3e3d447301080c9252c1b89037c7d082e0986896e3c70d51d

Download Submit
/data/user/0/com.donews.firsthot/files/umeng_it.cache
Filesize
433B

MD5
ec58fd95818ed9fff362e22c74c5d1f6

SHA1
3294e99bc8218e7139b24a57d71cdbe374aeebfa

SHA256
c53d2f1afb23affdaa94eac2422900dce4a87e737c01e537f04a0bc69f2ba641

SHA512
1cc4cb24ce13c62a5e785015383ed08afbf7ec3d185a8dfb25ca14367bb136b2667aa4fede935651380295ade15126826d1c1290e81546e0f955a35ad3cef7bc

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
9437cc7e9492a0b0997b39768bc341bb

SHA1
38b312d1f56f45fc78df0b15be346019863c2d5e

SHA256
08c4ea2cd736c35eef35646b89625c9cf22e6542f697a2f219088aabbb1582e2

SHA512
a26f7358a2b7bf2845e76ac42647fc3f509c5d2981dba68f098bc9818414f9634ca632d08d293ae55cd5d4617220278d0323e05a1c0b5a3ad020c5c5f802754b

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
213B

MD5
2a052d041079145a5d2d6ff971e80b39

SHA1
05973a7a7c660c4f2a3e7f02e0d4f62060b0dfb0

SHA256
a5ab14fe91df0571850d9ed2e3c0f8fe85149f26a43056f9d0a0ae58a4edae27

SHA512
e75dbe19dc60a7d371a52c1f6e99f01e1c03bb2f3bced22a2729e6cb91d73ec4bf4f46bd0ff2eb0413b948d5ccb14fe1ace387791dd8bc66833b7808ecf456cd

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
04549ef421cc84c51cf26fbaacd6906d

SHA1
ab6e9434bc9a7fc4919129edf1ad102c5c6378c9

SHA256
5ed11d179516c2d8f08cc669e0351c931844873547ead078332d026c85525191

SHA512
746cd4a5e2f3309949e8bb6020a95b9a3a9dec2f4f35a77578b7b17bc0d68ed3f2d1183c3c314c8f082512ab1788e856a11aeff5883cb796e4b1f3b01d23acd3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
167B

MD5
2f0a15f8c8cb888319dafa39706c7146

SHA1
d312a3aa4f1375bfbe2f32f1c37c42147f53e385

SHA256
3420741f8449acc0cd7cdcbbe912c4c807ad90021aa1d00cfdb7df2605e25061

SHA512
da03568596d275f002351a8525bdabe32d2705f9031054d1886472dcb78ad2d2bb58aced15f387dd070c9c6dd5f6165f990819fdb7262630252a312e9b118888

Download Submit
/storage/emulated/0/Donews/apprun.dn
Filesize
395B

MD5
2969a89ef667a8c23b9560b2c0c67c6d

SHA1
eed4216a27b9d7acfdeb5071be1be98a13a989b8

SHA256
41c8767bc78171e3e177c734a3b288d54036f7b62014bf2a9b90c5efcbf5fada

SHA512
fafb82daa41d377623cef527beeaa801a56e6f75c2b4909b14a79f2fc8b2d446806f41aec196b9913797ebd4d5b0c389ed163f91582fd36d180ed4f1841f3672

Download Submit
/storage/emulated/0/msc/.2F6E2C5B63F0F83B
Filesize
8KB

MD5
2884d633d4567287852a78111ea440df

SHA1
7e9e30e95b62cd07b114778b3e31e42ec983e1b2

SHA256
0dcba01c9068de49df2fe197341bed2e1576e7258bc30d5743c8e1e9c66d9f05

SHA512
39d039d251871faf387796d229e89ec6964507882768a473dc4d81ee49da3639092d248d01bf3b1cc0560159a248c936bd85aa2d2892936f8046deba6c8d4b3b

Download Submit