Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6

2d39867ac2...18.apk

android-9-x86

8

2d39867ac2...18.apk

android-11-x64

8

plugin-deploy.apk

android-9-x86

plugin-deploy.apk

android-10-x64

plugin-deploy.apk

android-11-x64

Analysis

  • max time kernel
    150s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240506-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
  • submitted
    10/05/2024, 03:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2d39867ac2c65ba6453321f1a173d310_JaffaCakes118.apk

  • Size

    12.4MB

  • MD5

    2d39867ac2c65ba6453321f1a173d310

  • SHA1

    e1d1ced4a50eb8bbff31f0ca4a44c55fa83ddb61

  • SHA256

    db8fcd239c68071e3107b7e6bef0bad9dda396642de34b3b5c861cefd5854c9b

  • SHA512

    f56abe44599fa25f5c3353229ca35d99629470a9cfe66d552c9d99a922ec31818c4b35b0e475e9681a2c5bfb0e979024782033a2c7990cafffcd6274ca9a850e

  • SSDEEP

    196608:KqO+21WlBPlMbl9wWWjE6w8EwgfF+B/v75J7b284uLBCQLD42K7j6:m+ZlVlMR9bWXSlQB/vthbTXR/9y6

Score
8/10
bankercollectioncredential_accessdiscoveryevasionimpactpersistenceransomware

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscoveryevasion
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Loads dropped Dex/Jar 1 TTPs 48 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 50 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
    discovery
  • Checks if the internet connection is available 1 TTPs 49 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Changes the wallpaper (common with ransomware activity) 1 IoCs
    ransomware
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 50 IoCs
    impact

Processes

  • com.uprui.phone.launcher
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    • Changes the wallpaper (common with ransomware activity)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4893
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4953
  • com.uprui.phone.launcher:com.uprui.phone.launcher.theme
    1⤵
    • Queries information about running processes on the device
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5142
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5170
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5264
  • com.uprui.phone.launcher:remote
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5299
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5365
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5413
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5455
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5494
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5662
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5701
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5740
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5783
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5822
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5861
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5903
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5942
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5982
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6025
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6064
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6103
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6143
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6184
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6224
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6263
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6305
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6344
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6383
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6424
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6463
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6502
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6541
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6584
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6623
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6662
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6705
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6744
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6783
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6824
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6863
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6903
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6942
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6983
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7022
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7061
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7102
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7141
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7180
  • com.uprui.phone.launcher:bdservice_v1
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:7221

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.uprui.phone.launcher/databases/local_category.db
    Filesize

    2.2MB

    MD5

    93ddbe793f1b4362ae4c159c22fece0f

    SHA1

    625b5c7f9049ebe1b0af103f1203585f78543e2f

    SHA256

    8c4b111cad34ebca88c12e39cc6aae262fe3bb7d4517f199785f18dd407d3d2f

    SHA512

    111d3542d06b8ad388ca29ebf908332d61f54ff0d55ac36967732631546412b91c0fee50ba4da20d3d10904fec35d1177bbc6d9e5b56c738fb682463bfe10e79

    Download Submit

  • /data/data/com.uprui.phone.launcher/databases/local_category.db
    Filesize

    2.2MB

    MD5

    b426f21ee32e0ef46b8a9bb85b00ff1a

    SHA1

    71fb9708c10ba67588c9d60069adbb4882f83b3b

    SHA256

    b491b534810002060734cb74d71fca99f73810ed6f7323e177ea4536cde35965

    SHA512

    a5c90dbf5d2b8847f9b1709fcd54df67b2c3ce6fc93d75b7b01c6ea849f0e974cdbd9f114776b785d8f099d335151715e184573cdf77168e1141f67452478c63

    Download Submit

  • /data/data/com.uprui.phone.launcher/databases/local_category.db-journal
    Filesize

    1KB

    MD5

    f3442054a8179f80ebcbba5f45e9f6e7

    SHA1

    eb32c6c09a0ba409e85dad2e33ba01215e989a73

    SHA256

    f16d79cd0bfbc7ac8b534563b445299d393de1157746f5a1a80fabd0153e299a

    SHA512

    53da5a2b9672037b7f1441fbd7663e73c2389d708455e176e84c410e4e84677f3ab27a4f76658fc676eb3cdf7ebbdfad487c4684ce66bc7c8fdfdf2574cd777e

    Download Submit

  • /data/data/com.uprui.phone.launcher/databases/local_category.db-journal
    Filesize

    2KB

    MD5

    59a53671624c9ba4940a74d84706ddd5

    SHA1

    930b4558dab45bb7f3ff1e98823e9aeb98c8977f

    SHA256

    0fa4bed7cc3b1960b369acd39795c638245aa51d666aaaf5e549b1a467e62233

    SHA512

    2c83f2194f9f36b3683bd4b0d881d13d156dc9d214b030502f1b43b387a2135a42c9e4f14130ec2193ea7471f816a20b4cc3265d22f056c08b6a358d52ecf2f0

    Download Submit

  • /data/system/users/0/wallpaper_orig
    Filesize

    129KB

    MD5

    225f53973aeb49eb1720bdf59cd17659

    SHA1

    65024ca3efb2d582118673773c8bdb0b6347dded

    SHA256

    ec4044081209b11f8939115acd3ebfd4845c1f472232e81cca78ec2f7a120088

    SHA512

    4a2b2f59bcfd85aedb264c893865fe137a501b7483e9560a6e5a90219bce15411ad30a68b5b4acdc86114a1e02c23deb4aaab671b99955ceff83e2dc49b67797

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/app_push_lib/oat/plugin-deploy.jar.cur.prof
    Filesize

    282B

    MD5

    5efe3ddcc1c0c2439585ca8c948cb315

    SHA1

    a2cdf851767f150b07a0a906be8ff9877cd2e9a5

    SHA256

    a3177861b0b4b7f0db91795fe7a1312ecba06215247087f500f2dffc68463091

    SHA512

    a261e3c0bbc5c0aa9dfebad230770d3ff3b31dab3ef49538e60a2838c5ba3aad05ac9859c6d2ee5e1d05b136073b3708c652b8d2417553b226e27c6cc3111239

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/app_push_lib/plugin-deploy.jar
    Filesize

    180KB

    MD5

    73221f224e5d32e4f130dbe57ad395c0

    SHA1

    1a8f63b73dede50dd56f469d0ee9bffa84eb9d63

    SHA256

    8911616ac34f9c9508d25ad55183ab06dd05f1f80793d70fdf225cd56bf4ad55

    SHA512

    58a1203866c0c376cfedfb493c21b8733f4796f6743414b810a63aa144b1af0acd9797d132684b8f255b9ebd76ba5405d0b5518c0c353c4a9b8839939a9c5c8a

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/app_push_lib/plugin-deploy.jar
    Filesize

    454KB

    MD5

    eb172940bb27c649684cc12131db7b7d

    SHA1

    d022b7d97614de236196d48c40e59625938626b3

    SHA256

    a641935e2fd81e51e844010c860337a14815605dcc78c96bfb6d8620c47bc55a

    SHA512

    989219b70ab58fd40111920151d87128c4b18b086074d1ee0d95ac73258f3155a9ca93fa74e702d57a3a881e9e408b5571c4db9fdae6faedce677ae50f2bdd9e

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/app_push_lib/plugin-deploy.key
    Filesize

    174B

    MD5

    098852dbe298f6b88ffd556aecc5d66e

    SHA1

    45855e20e654005cad8829e650d5cdc356816765

    SHA256

    07e73f6502b0aef1ae43d3ea34afb727eda29581670372f43bfb89a18184fa8f

    SHA512

    ee0ac72d34232b8b75caa71315686c2ff1efb659d83f4d306417f72b3d896bbe0e57e6b0515997b187d74466f05b1cd0fe2c163959a2a536932d65de9ffb06a6

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/cache/uil-images/journal.tmp
    Filesize

    92KB

    MD5

    5e25a7d51a3b2324426d6a34dba5880b

    SHA1

    3f652706a0c1aeac56882c02e8e3b937548b2ff9

    SHA256

    d2a037bd0d0db58686069958f4e207377c548e7f3a2863f53725bd1b049fcd80

    SHA512

    6880346d6e0988c86e3f5ecf972bdbfa54d1c50a872df646ee35bb989fb1245b64f5f1d6dc449c2198c9871fbd971764bba52505a07ceb427f90e17b5281848f

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/forecasts.db
    Filesize

    16KB

    MD5

    f3c13606fdd78f4989797e9ff51311d6

    SHA1

    2a5d3b5dae1dca61ead3b352a826201843d076b4

    SHA256

    06455f7ddbaf457fe0d97209ebc4f2131b249487fe69d346ec16243ea65982a6

    SHA512

    e0ad6cf9e1d8909d2a0516db51c2cc1bb45361c7660a7ec481780515be37b88b3b170d75c20082f61f0f1725603074ffbe2cc374ff0350046ae59b28f1f313e1

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/forecasts.db-journal
    Filesize

    512B

    MD5

    aecfbbdef02d1267d5217e9b4122087d

    SHA1

    6fe86fa636da7394bd3ba4271d742324905858d0

    SHA256

    633c4ad2de7eea9c6b1134c7df28f8f7f14e2947386648b72dac2877dab762e6

    SHA512

    f9dc85728764de3a12264ae22b8739aeaad48f7ec356d70d1f01c2426647d99a6d574694ba1072502e99b55c001108e0a13b0d4a5173e41939572cdf54e61ea4

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/forecasts.db-journal
    Filesize

    8KB

    MD5

    a590d2656f50e27c1ce26b8ebc1ee31e

    SHA1

    b2aa248533793d2a22bf48db9d6d03980d074d1a

    SHA256

    d64ce9c058f3d404eeb2d4cb3f6fef006cc07de593b9145f5bf321c4fa207507

    SHA512

    637bd9c2541e6e645ba2b6930225741d5a0e9f497cef1ff2a39fe56c1d996e043cf67290c13f40543ef80a40f6a648ddf2ba4aad4741da9598171e87ba5196a8

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/forecasts.db-journal
    Filesize

    8KB

    MD5

    1f51136e35966780c36184292b605eda

    SHA1

    d372d160195861700d9850200664f1228291d6ba

    SHA256

    08c5ce073aa4e367cbfd0f4ac4ef3a6741ae0b0c180b29120b19bd26f0759379

    SHA512

    d233eaeb338cd5bc0e7f9b03b71c26f0c1b8bfff92808315c6cb1e71c22e92a96a94172356a3415b224dae952756cb8332a4dcb7913879c7111c1f0e42662143

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/forecasts.db-journal
    Filesize

    8KB

    MD5

    6bb8eac57db1b8785d2f95730b9b9a42

    SHA1

    328a0c88e0c5c26c359fc9d3023a132aae12fc76

    SHA256

    d3919ce5881b68c515a827585900eae77a7b1bfeb73d7b13a7ca1d368597858d

    SHA512

    0bd30d57898475ba10bdc09d7e1eed4963739c05ce0fea5c68af0e95126090327f02f5e25e77a4b88d3161c1815a6c92b9a9a9010c1bc0731ae45968278f705b

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db
    Filesize

    92KB

    MD5

    4d371f29c2bd44780a707bb457efbbe5

    SHA1

    43952141a08db04ae8ed5e70c69ccc94376a3f31

    SHA256

    83172afe641ba7ba439bc8251b690e6cee00597e8df954337d16800d06caf1de

    SHA512

    1571cd8d129f8c245b53f78ad77f3c0fbce9b2ed9069b6d168a8031a3e805679dbfb8ac047d6854c67c03e55df76c096efd1d8bf1742d911d4549d8a1df2412e

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    512B

    MD5

    59e0efbccddbe3b69c671957e9a4c94a

    SHA1

    96db8b40a7ed6affc764441594c005c32986ade6

    SHA256

    f4fe66aba8d7e2be64489682bac37b7c13bb633e369547d241ad815675a8e748

    SHA512

    905f3a7d65a35ef65779ce834d3eb673e0a0ea0b2b186050c7c032460869f46c1cfe35e400bc25b1a8abbec7824230f1c8f4a361cac4b090edb63592923968e7

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    8KB

    MD5

    f3c5c83a8ea9734983b98db1b210687a

    SHA1

    497cf386c0538ce0c9644d54573fd2c8153f2ed8

    SHA256

    1ee027014cb497567c8055983cbf8f96ba0ef62893631e4d2537b48e6496062d

    SHA512

    a2618beaad2851b7ad2c8b56d573b11fba5df7c24a836ed3e0c0e0b627b75d101e08e42dad3aceda1df5db983c5d37faa1272808ef507ed1965e8f2f5d42171a

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    8KB

    MD5

    1827f438805eae9c40f49af18f596882

    SHA1

    fe06a84a34c4ab03dbb3d9de01ed31f22d8f24d7

    SHA256

    c8fb0d614d55a9fe6e9ac7f80fffd66f55749d54c8a621d715a642ede6bf100e

    SHA512

    f176bf4b0eb107cea048bc36b82fcb9eb2afc1aa1b37877d5f8e8f5f97185025171a01b58f9b87a17ee9d651a2373fc2f0189fe94d9cd258bf620bad2f1e5a53

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    8KB

    MD5

    b14e2a9d70ce48c587423b448e61b674

    SHA1

    e6a04af6adac4259b93d128dfbb9ca47c2dca5bc

    SHA256

    247d941274fc3a1ef4b69d4b09d84a9d1761e0770889b10f45aee49fd2806c6b

    SHA512

    cdc91bb324cb6e991a95c71c83ef67b101243b4fb0db5f2c78244dd0a752f098ca1b685328e3b0d7bf8f40c6c2ebdc7db8eae1c021315c12028340b3541ba7ba

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    12KB

    MD5

    db993bc40d6cfd81c318746736639443

    SHA1

    f43212df7e6c64d6c95ff854a565f9597a433078

    SHA256

    73833e96bd9051ba9420fd88fbf0f3c3eeb81759f56ae0f8378887a95e985d95

    SHA512

    8ed1212d5c792b867bbac86fc065d3bbd4eb876543e9c1999c996bc93a16b64af52b234b41a6531bd816378565c919828a8c687909f7a77ed37b9a647805a8ab

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/launcher.db-journal
    Filesize

    12KB

    MD5

    e2cf8cd060e7183805f84279fb6f6cbc

    SHA1

    1935d121765c4b7b24c679729db255e5a1ced0d0

    SHA256

    fe94f64ebd3c8016139086828da434791ee14b0b25979870406ac8a5781debae

    SHA512

    fd9776d11141c49420da9037c347e9aa052303ce3d28c9b2d59f02f04e79cb0b072d403775ff9b4565f4a3e1f84234051ad3de30ef14831643f3dbc2fce891ee

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/rui.launcher.db
    Filesize

    20KB

    MD5

    4f91410747bb2ba7a43ee7b298fc9417

    SHA1

    597e95133bff38aeb4154b8a79aaa0d31ee99fcc

    SHA256

    4e93ae7c16a145783f04d535aad7112b561b401ebbb01cee861aeb67f01984cf

    SHA512

    c13d30e367c948ac6899423954fdb0ec3a47b74bae428e0ebd8c7bd3544f21953d22a1632ce567fa5b7c999004d53add84a7bd0e226c40de41af04ef86a64ca4

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/rui.launcher.db-journal
    Filesize

    8KB

    MD5

    6fd17e6dd65ab9a415a8992df000caec

    SHA1

    45be0d2f62765228c2b7163062e85ab4216f4f2a

    SHA256

    cb69c9bef5567f0164b26d931a8362dd9f3891bb3c24d9949839a449534edb13

    SHA512

    876df1d5c7a2cd0575e81b738bd1d6bc600b9df3a5624f9a4e8fe1e5607e85ac18c6b289106720c3488cd3c624e0958487288e9faec993ba0289fa1d91efd710

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/rui.launcher.db-journal
    Filesize

    8KB

    MD5

    f9156fe9b9ae103401eb2a9fe335a1d0

    SHA1

    f95aec374781edf49c9ac781566e03123fcbc732

    SHA256

    4f00c76af9c708a15792695332f15e2d0d63c4e383ca7e68fe5ce33edac68eaf

    SHA512

    517c2efbc714ff1350e7d57de2101f2a9ede9b46dc6cfb38c07531493aee042a56ec1af5abbd44fb2869bcfd3700fb7c20f8a380b975b66c6bddf0097e1659fe

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/rui.launcher.db-journal
    Filesize

    12KB

    MD5

    caa9da7ecdcd39a05e853e9caee149a1

    SHA1

    e84dbede31534736fcf54ebc4a515b826b4a7fea

    SHA256

    506fbe9b6645153c683c41684e3276fb9577c68f672463aa00153f455a109e4b

    SHA512

    6046e5ae69c7a84112344d35f0a5b548f61e3be4d60dac96be0de3fedb4742e01216b6d4172733000fbbbfe53c742740fa5cde5618de8555ac55c5e26752dd2d

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/rui.launcher.db-journal
    Filesize

    8KB

    MD5

    7a2ae73d6cb1c76f29a37713a16c5753

    SHA1

    af475470ba57fc392cc8d9c7261a8e704f658718

    SHA256

    666cbbbcb2928ae986c6a6306306ae0cfa31c104d964f9eaa113a2d9521333ee

    SHA512

    4f41ae32c59f1fbfb9e52361d7805d9255e88e8f65a6d35efac7bfe8ad355bbe36ff313732cce938044b340f3f10128d17f4846304af37143680ae9333f0cd5a

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db
    Filesize

    40KB

    MD5

    bdd67e296e550fca937fed3ef31e4333

    SHA1

    65c121df83ff146e936842604f55db62a7c28364

    SHA256

    724ffdde70dc17f196eddb1b4669203196a06315a3f0ac328b3dafd06423c212

    SHA512

    92e8cf9cdb24beda60079008dfc7f4af3a1ae6818848c302864d5b6a92a1247580afc3214e43d5229a752558b41d0ec0f47f47ce721f504b267c773418559abb

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    512B

    MD5

    ffbd5c6164fbe79b6962f83fb920fa90

    SHA1

    c88152a380a8ca8b994fe9c6ab31453b80a10a98

    SHA256

    6fc86a1e777f51d07856f59a87aa5b94f92d6f6507e9ae642417c772c8dcb448

    SHA512

    c4b760f22da44462867dde572c2a3a7083ee49a60eaa4fe272c5f45c600c6e3c3a520d84f26f3caf7db23d5e19aeb57fa73bc6d7d9f430b1a14147370f31e58e

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    8KB

    MD5

    4276fe8de128cfda8b7ef2cfe89e7c86

    SHA1

    6ae39262be624b6bf95f4f65bddcca4e07dd86dc

    SHA256

    79eb80c6031d2ff5a01ff1b6f8a27d18d86bce51216a4f8c2817d97f4cc6fcaf

    SHA512

    2ec288754860aa9f3c937001530078780effcbf8fe5529f189ddcc666c9f576cc51df445953c21839c3ce6a944c999543b9f07aa4e28ecaa47a8ac12255c61dc

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    8KB

    MD5

    3f561a230323be9b45cf61cf17512b4c

    SHA1

    2a06a2f9a5c8c59f2f9ad08e5dd4f38509a3ecc8

    SHA256

    e0a9b03a8176f4463b6c9d7b1176de65f6caacee21f92be42d51114e8a09cb11

    SHA512

    61fa126cecb3509db851807de5b49d5e8720f175029f317dd8c0cf0c59a5e02c10248c56a6f09b1782e086efe93ee81fc01d8766f273e33637cd7ced21da1b05

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    12KB

    MD5

    61987fc313484bb82b3e95a1762d9e64

    SHA1

    fe2b2533f6dd231bc720347b4c81253f72690c67

    SHA256

    e4abb5950515e4e56784f87c3bd651ac5c337d6056dc840d907496511f8c7d69

    SHA512

    9ca061c46e6e15dc982ba3012911ae06371cfa0d6e1a80c2bf88ffc196f5863cef5eb41ff81490502310d43f7dc6323b578b32f8ab73b4455d73a1837ca6b30b

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    12KB

    MD5

    86c35778e9c15008aca41fb544f47219

    SHA1

    1d7eb82f31978bbf05a391848b514ff3b14e646a

    SHA256

    6b5f0c867cc727ab7deedc6b93dc3390cc20afff2405eb8d135cf7982202bea3

    SHA512

    60ee4eaaf9122a41b06502743aeecc37aaeb030493db8b04b7143232252f75e48637638a145cf0f64fef75e492be6a10d2318b892538e2b60317a802034c6c97

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/tencent_analysis.db-journal
    Filesize

    12KB

    MD5

    d9fb9afa11d8d7e6c7a4dfbef1fed3ba

    SHA1

    deab16ebf7f00deacded6c181bf9aa6258ea541d

    SHA256

    f6a6dda4ca49b6ef61aca5581fec208e9182f1f03da724e1947e69217c8d7a7f

    SHA512

    0b3b4557a1d8c1511d21624e2430a9e18290a97130f14f860a4a5282d2bba75fa3a8c0fb6b92f9429ce6b6d312183e70d81f8a1ef6bc071bc89520c74f3fd553

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/widget.db
    Filesize

    16KB

    MD5

    c39fdad1c22a0ad47fa899a4fbfbb546

    SHA1

    aa09e65e1fe5e029791b2b3e8aaabeefe9b72f7b

    SHA256

    a27ca5829af4cd1f9c177fa53bc8077a24498d228cbaf39f9eda4b8766f5aef1

    SHA512

    d3ae4b7d070d1c5a1d43a53b0d035ec8244689cb8de1925514c16590534dc76e8c46753c993857f093f29ccf547c6be9272ca484c8d4be68f39e3e09a1b04bf8

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/widget.db-journal
    Filesize

    512B

    MD5

    4d2df9cca5f75a6d279635156e56e6da

    SHA1

    f378a76ed7935363f4fb8e41e8e31f9db556d13e

    SHA256

    7b19f33a2d98f0f57c697e275708a7fe759da4f011dfbb61229ec949a8defc2c

    SHA512

    87dbd30e853ddbd3390b34a2e1047b744390badc77d196b43eb97433f0e00b9968257b1f1ee2d7962a30fe06fd0239c2ab5cb5592430a9351fe589edc27b2f4c

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/widget.db-journal
    Filesize

    8KB

    MD5

    5aa9c609dc49187a8bc2187b52b55319

    SHA1

    c8db95e36f603cc766988136ddaef0a8db2f7307

    SHA256

    b10f5fe41933527fd59ece639cbbf28b4a1e7613048ae30a3ca8eb592ce40e18

    SHA512

    9e7aeb7337e61999582f6b67f27d07322d88e49f4b3ef67477c476a6c802d3ad89100cbdb7fcb3d7c27dde2c0f38a9e896362f2ddcc8cecd167a0dfad8a2cf02

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/databases/widget.db-journal
    Filesize

    8KB

    MD5

    a9471db35d9a711061036ea7e96068c7

    SHA1

    ab4aee55fe86322899e33f74c9455442ac3311c7

    SHA256

    aa4db1fb78df290bec893c7f2d1e36c90ed7d651a5466a6a78135ca711351287

    SHA512

    69b5b9ace8f2b09708810c736dca7916c6b4134fefdba23ff28d6d733e4dae36cd38cde3d9b835aba49ce676a11d559e4ba6b96f870ee23654208c7a515259da

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/files/launcher.preferences
    Filesize

    15B

    MD5

    8045cecd3d5a4c893e3a75d47b17121e

    SHA1

    61f08d6c53ae857cfd4be1bf607a6c80e5e78b23

    SHA256

    9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3

    SHA512

    70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/files/mobclick_agent_sealed_com.uprui.phone.launcher
    Filesize

    651B

    MD5

    b2d1a7dbadd7ad6f1c414fff0a955dcf

    SHA1

    90dd08f35893de8beabcc0b5963f9cc6334ee2fc

    SHA256

    4b41bc0405a465640a2b00ab66615862aa4a0bd9343c4eda3a179dfdb5f4c6a1

    SHA512

    10af5c33a0b90345bf4144cf9c74cc2c8f4b3f1da7dd65a8828754928b8a9ebdcd887065d7be664be34f2021af9629727531227cabcd68f8afb926be7c02a2ad

    Download Submit

  • /data/user/0/com.uprui.phone.launcher/files/umeng_it.cache
    Filesize

    231B

    MD5

    aa5ad3318b5cc47be37289d0cbaddb29

    SHA1

    aa17ba4bc8252281d7d0558feb3b7409b42d0c7e

    SHA256

    f1a3d1560e3145d653d374c7ae38932f6f9bd022eae03638852d90ed8bdcb754

    SHA512

    08112c61bf31e027a03faa2aa3e23dbf9d3501b1383ab3ca1ba016866a0f0746b033dd8f13cc490a6ec3a89fe5ede0484b60da601c823ffdecd65320ed8dff21

    Download Submit

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    65B

    MD5

    f373b6df7adb2c5e4440a2da657f42ee

    SHA1

    3e7450a1266b247c0b22cce92b3823f6c469fab7

    SHA256

    d024772e5b700d12b8897c738bbf959004d5bec0e86c9c11b6d368e02d258ece

    SHA512

    c0d0868aaa291c7ae85bc60fab38629a1e5017a1c54c88c7c9a0423876dae7437e498fd98520dfa01979665259c302254d0c366611a56038070b01063847451c

    Download Submit

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    111B

    MD5

    a17f4f3aa76e6839d93660ce941157bb

    SHA1

    930a75fd73bb086b5a25fac3316efdaea9dccb11

    SHA256

    157900e83b0722bca6481d3e3cf42cc9dd622540c349ae5c50abe685e8c87613

    SHA512

    1db8baca90d1145c5ed8fd8f69351123d471222bdca62d990d3095fc8f1c38512ab49759176ab93f3739c2cb09f3f18b680117e8e8e5d410cae0abbf33a8c79d

    Download Submit

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    Download Submit

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    111B

    MD5

    61a1929adcb6d43bfdf8e2cc94d56fd8

    SHA1

    6302ac46b16df7050726d82877a4f65958ae3ed1

    SHA256

    78584699e869e7d1daf9503ca615ad66fb017701eeba6225bf97f18eeedd677e

    SHA512

    dab37a32b1bf72276728cb0a529a1d3b711f8e47e4904d439782f5228e31de3d7a03bd99a980fcd493ceef3076a30db4b3ae61f08efb1782afc99ca7673ebe99

    Download Submit

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    406B

    MD5

    efa14952ac32d0a20c214ba384ea9a06

    SHA1

    fe4503e0c9ae4508b091e70c31c8d448da3608f7

    SHA256

    4d52e651e4bb7bc7ac557f6de94dec2a47d9c3b8fec995302d8fd45c2bb7e1ef

    SHA512

    e0570428bebb6ca8cb73ec2a17fde6905ae2bc9a9a02c16f34dce3267f27a48622c8ca5317f6e6e2c9d2bb3ca89873336535a8f3ea205143304929c748a94229

    Download Submit

  • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat_3.4.db-journal
    Filesize

    16KB

    MD5

    ac8070ab3808712ce699e799841cae51

    SHA1

    7c9808f724075439d980f61c0031e7dc0d4cbd91

    SHA256

    99bb3b02cbddbaa6fd23b28c7ff6287f938b4aa709d1e4cd1169170a2714e2f6

    SHA512

    c5e853f36f75f1506a593055b24171239b9ee839fc64424f3f69c113808762502600acf25f1ccaf4e55b977f422c7592ec57b1beef48135e762196f6141254d9

    Download Submit

  • /storage/emulated/0/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

    Download Submit

  • /storage/emulated/0/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

    Download Submit