Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    179s
  • max time network
    185s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    29/05/2024, 13:35

General

  • Target

    80ead0d39d47d393c07ba271df1074f4_JaffaCakes118.apk

  • Size

    19.9MB

  • MD5

    80ead0d39d47d393c07ba271df1074f4

  • SHA1

    453896f7e37f63db28fdd78f8f5978b729efb3c2

  • SHA256

    afdc72d0ef22bdadc3cc8f011ee7a7f886b47983909724f797582e024609f5ae

  • SHA512

    e91cdf53664ed7100658dc83c2658a8df87be4d92ae55ee8405b1b6f58f34657808719db5f529ce19c86a72ba4416ab07671f2f835825d8b30de358378eba480

  • SSDEEP

    393216:60AuyWOLFvwezeOGghVJGZLyOYHViJBoQZkk:brULFv5qOnhHsyOYHVWO6

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 2 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.appliancesworkerclient.app
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4257
    • ls /
      2⤵
        PID:4484
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        2⤵
          PID:4581
        • sh -c ps
          2⤵
            PID:4755
          • ps
            2⤵
              PID:4755
            • ps
              2⤵
                PID:4781
            • com.appliancesworkerclient.app:pushcore
              1⤵
              • Loads dropped Dex/Jar
              • Queries information about running processes on the device
              • Registers a broadcast receiver at runtime (usually for listening for system events)
              • Checks if the internet connection is available
              • Uses Crypto APIs (Might try to encrypt user data)
              PID:4514

            Network

            MITRE ATT&CK Mobile v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.appliancesworkerclient.app/.jiagu/classes.dex

              Filesize

              6.0MB

              MD5

              87a7c35f469290c484b426cd2ec3c83b

              SHA1

              a9b39709ef02196bec288b85a65d09180fc60609

              SHA256

              5dbece9b28c5bb0400f8dae57d4d47c79f54e7a068452519788047dfe8ffd7f0

              SHA512

              48b08be2cdbe8bf43ca69525f54ae9c7e56e45e8e36ab491c9356f758e18dfab75e9c4e35c77d3726636f30ba609c9703183523abebae8eb96012cd0f138d84f

            • /data/data/com.appliancesworkerclient.app/.jiagu/classes.dex!classes2.dex

              Filesize

              6.6MB

              MD5

              36f18258d0418d0f9e340e668c23aaa8

              SHA1

              1d224a9855fbb3cb5fa8c3023db65c461917060d

              SHA256

              f3e47e6cb160c10c23da3af42668261e7959d688365424a7720bfb063f9acb81

              SHA512

              c54a32489d8cccc9009a17ef41ec5f95f419dad769f3df7656a4ee402e383d79f4f56055e71be30ce24b4f4d0706945c64b28fd390ea0ec79d111b4764a89ce5

            • /data/data/com.appliancesworkerclient.app/.jiagu/classes.dex!classes3.dex

              Filesize

              4.1MB

              MD5

              0d11c5d06be6fd6ef9b3c78d5cfbfa92

              SHA1

              e0cd7ff8755f8aca962806a1e709648b71465601

              SHA256

              c2a45cb3828bf1d119050ce5f771d6c4531c24924ad0eee24c3135bb67b690f0

              SHA512

              1ae84b1bf8b05b49789621b8bc162b6061552cd3ea893b8d6af666a0817db6fec3c709f1546135a79fcac64095075cc09fdb0b6d8177569d810ac03996b4d8a5

            • /data/data/com.appliancesworkerclient.app/.jiagu/libjiagu.so

              Filesize

              480KB

              MD5

              6e8ea47d2d8500b7fb8855394fdf0526

              SHA1

              d3c719bda605cd787c4acf30507edb76b7fb6070

              SHA256

              cc3b55086867ed7136d474a21b1359f49e6afed3b74fbb4ba5f11b36ce1f4d46

              SHA512

              385241f905c46ead517e4e0bcaf2fe00160ba0f7f40c6926ba288bf41d46e77a8bd63ec0a97d57a5b65cf6fb1f93b5f86f51d9cb24809ae934ebdb2fd49c0b70

            • /data/data/com.appliancesworkerclient.app/databases/appdata.db

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.appliancesworkerclient.app/databases/appdata.db-journal

              Filesize

              512B

              MD5

              f340b6217e3d131ba6e8dadcbb31ea2f

              SHA1

              cfe662b42386571bde2ff0fc12c16cb3c9060608

              SHA256

              5c366e5d7a1b261b19e9eb784bf4df8d4556125148972f9197db728b045ed8fc

              SHA512

              3dee57f536dde36b9d80feaab1a3b1691fc61ef1d4b7c4a8546bb7cf5d3192af114b4ca8c72692e914801e2071ee2992ad254fc019a8c51ad10ad80dac5dbfe5

            • /data/data/com.appliancesworkerclient.app/databases/appdata.db-shm

              Filesize

              32KB

              MD5

              bb7df04e1b0a2570657527a7e108ae23

              SHA1

              5188431849b4613152fd7bdba6a3ff0a4fd6424b

              SHA256

              c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

              SHA512

              768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

            • /data/data/com.appliancesworkerclient.app/databases/appdata.db-wal

              Filesize

              44KB

              MD5

              14d3dd6751113e07c0415449de791512

              SHA1

              c5bc035ffef043c38283d5615084cf09c62c9460

              SHA256

              5bf663f8e47b8f8fe74bac9545dd839bea6d28b6c1ad40742e5a3218f4c0fd08

              SHA512

              b4935df6de543b6ca90fd0cf07ca13d019a6cafd43b7011a314fe5dbaa7ef5587edf78e2790a52e322fb1016bf7d3c1b43ab341d7dfadeb9016f5f0107c38df2

            • /data/data/com.appliancesworkerclient.app/databases/ua.db

              Filesize

              36KB

              MD5

              0adda9c85a5e4808f5b1b74c0a8591a5

              SHA1

              5048107883ab1e345af9cf2e6849ce46e0e612bf

              SHA256

              1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

              SHA512

              646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

            • /data/data/com.appliancesworkerclient.app/databases/ua.db

              Filesize

              24KB

              MD5

              8cefbd1a5d05424e694bca8ad92ddba9

              SHA1

              77093cb7e491bd8e8739cdd43503f4fbce4ff6da

              SHA256

              f487dfc4d70e6911afd32685056b86c631920020604578c7e3b5d2521d1ac73f

              SHA512

              6a463471657c20b5b9dc5ab562ef46670743e39ce650662d4c69d2ea8fbe94563f0192aa7a4c35a815553dbf9c6d88875f1f53a102b180ab3451b49a77b42988

            • /data/data/com.appliancesworkerclient.app/databases/ua.db

              Filesize

              16KB

              MD5

              3d66c39512f87176eb30275759d14f40

              SHA1

              99a3ad4337e58c4c26f13b7f2f7fe58e5515b73a

              SHA256

              041ba4a1ef2dd47b559c78966cca3fe6fed46eb3ec8acd5901f3de105a3a53fe

              SHA512

              133d0a5b4c3a6f0b70307740e99b737d48494cd72a7c04927775b838512873b4b026c74e72001dafe1ce38d4bfe7ca7e847462860d5a610ab78890901046b9dc

            • /data/data/com.appliancesworkerclient.app/databases/ua.db

              Filesize

              16KB

              MD5

              ea362d659787a11e71e74347dc0c9986

              SHA1

              235312039ad32cb690601bbfee19f135768bf4ae

              SHA256

              16230d7ce67ccdbcae3330adec7824fec642c97888857a08a205fd8dafac429c

              SHA512

              d63cdab2ae7544f480d713e1db61bafcd9ae46e031e62c1cec94996a8e52931780f2142ee776a6ea6ac0d4cebeadcaea6ea4ae514839f5f15f0970c35ecaa5f7

            • /data/data/com.appliancesworkerclient.app/databases/ua.db-journal

              Filesize

              512B

              MD5

              8d9dc7993a5c329646cb9331bc283d4e

              SHA1

              ff8bcb28567a9c96d25a889273a2b880ed046c7a

              SHA256

              bb59b384c1cb7cbff679cb91e045794729e02bf7e822808f2e614eb7abb37697

              SHA512

              5d21b013aa2380e8ee755c49d8d19ec17edd4a5c782481de4fab3dc9c95562728312fe04c6952e78502db0f1284f443483655db035eaf1ac6f6533e1e73330da

            • /data/data/com.appliancesworkerclient.app/databases/ua.db-wal

              Filesize

              48KB

              MD5

              455b7127fd8e09fa57143328334dbc62

              SHA1

              8c97b3b752e5a620924253ff2ce32585050eafc8

              SHA256

              32cf459826c733309e4cbb289ddda1412b2d774d029d4db4b8f8c78889502064

              SHA512

              4c7a7e1eb3ae09503e41345c15af036d4869ae82e729aff3fc00c7a03ba6fb5694e37f7f46e560393ed4171ea6930e7ae9fc490c0ae0de4c0441c4ba2cd2b7dd

            • /data/data/com.appliancesworkerclient.app/databases/ua.db-wal

              Filesize

              12KB

              MD5

              98141ce3d9d40dce6631c4b1e652c2e2

              SHA1

              0056bbc6b2c9b9b30a3ee6d48eabd08631670596

              SHA256

              48a4d081ed3040745d6da17de72fe2ce6d074bf66d799236d2866c20fd1127ee

              SHA512

              38bd9ee4d8ac386548ca0eca24469886a695b84fbf21622256fe580f8a2fbc3ccca1f3c938a8502069dfb13b2d751e4701348d50bf3ef5d09f2977a1c8a3ab2f

            • /data/data/com.appliancesworkerclient.app/databases/ua.db-wal

              Filesize

              4KB

              MD5

              b27c7022ecb26d15cccc09358cfdda2c

              SHA1

              07e46c810951dc70bf2edf3f9e21f6cd1d0a42ec

              SHA256

              e869a55b07b903625598eba17a0ff00d7c4bc3302df8120f008a3e39e0ae52c7

              SHA512

              accd6fc727df57b13e76a3d5128840d2d6ab7a7b6c22e34c9ba201fcbf4bdde72d8137d9b716b3f31617f8ec6b855628f69ef3f9620ab544eb05da5647071d6a

            • /data/data/com.appliancesworkerclient.app/databases/ua.db-wal

              Filesize

              4KB

              MD5

              a56f96020d1de76f3c4fc430c3f26bb6

              SHA1

              3136bf2bbda0214a361aa3fe95aac5eacfb7c63d

              SHA256

              5a94d75f000cd130d4ef8775b85ad6c7d2801eac8e2d09d0448a1bf181f7e006

              SHA512

              0ae63b24299657085a23ecf4cb08b9576a03d190286f2acce5ca47457d12ba0ca02877b81f569d867bb14fbd47aaf93094f4a25e4ffc412b21094d8889ea123d

            • /data/data/com.appliancesworkerclient.app/files/.envelope/a==7.5.0&&2.0.1_1716989784944_envelope.log

              Filesize

              1KB

              MD5

              23b39ef4ceb6ce127f0911156ed61698

              SHA1

              b738cfd36c2b5c7f3eb8098fdbd20613e33ed2bd

              SHA256

              026dbc21f7ee7f09d5277f2e6e4b1397b57fd2873f6090ca26bd604158c1dce9

              SHA512

              90dbf53a9884d554dcdf9feb4636fda66348eaf23f448314d28747aa3934ff0380a1d3a1b190af0b3060d6133eb20455f4ac1ab24e282c41e686c5a756a46954

            • /data/data/com.appliancesworkerclient.app/files/.envelope/i==1.2.0&&2.0.1_1716989782611_envelope.log

              Filesize

              2KB

              MD5

              312184a41c76add88e754c2f1f056651

              SHA1

              e3dd2a194858c0944abc264de395448dbd0045d2

              SHA256

              d8fff63c88d2ca054e07582bc8dc6081013f6e1ba39fc564da2bf8bf98e0e91a

              SHA512

              7a7a1303de343b3bd9f9d7b54841f4c0f0fef4b64bf7ed9a5a0c6a0eb7f5261992c5181553c41deb921228a1040ff127cc3033d8f96d5798d817b3856a5e192d

            • /data/data/com.appliancesworkerclient.app/files/.imprint

              Filesize

              486B

              MD5

              f620919b7b836b75df5ec6dc6914312f

              SHA1

              fc66d014ace24550a69f7bae4505b4c36fd2ab7f

              SHA256

              444b7af23c2d37791cd72df7eb069395752e6fcc1c3f9e388c5f175320973429

              SHA512

              2d0838bab3b67a859695d6ec88d2aa13c54dfc00bc1bc25c55d587d20251491b8c2ab9402a4ab6e10fe3d10535dea03265a07c79ad56003431ab4643e7bf8270

            • /data/data/com.appliancesworkerclient.app/files/.imprint

              Filesize

              1006B

              MD5

              7d2feee5b64c2f92de4b3ad2cc28b4cd

              SHA1

              f9b87b6a4864572e2630752401ddd042802b0939

              SHA256

              fd8cd3009bdf0c363a1b03169ced03b8a82945876dd83b086dca1e8ee66802d0

              SHA512

              33286c88f90268752ce060d57063a7b6a1eb4d3d29486b5e70143e65d84045bf63b463e942dfa3deeb2d86835e3e89a916c0021ce61c9b2021f127c3c22fb569

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.ac

              Filesize

              40B

              MD5

              eed4d994897b0b18026491aeb4bd8cf1

              SHA1

              e250acd0a38de164c5bf84ff687a66f715cac9c9

              SHA256

              876a0f303b82065f578f71fd1c983a19eeadb80fa6586098a8f577fc2f6ce043

              SHA512

              5352f318fb05ebe2598c38fbba7addf3ac2591da74a12f2ddda1d13f674c64622088d77d376704b0fb0b1b574ed9c6312587534e80f14f1f60304fc853d4530f

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.ac

              Filesize

              202B

              MD5

              631c91e67024bf561f464c136cd9572a

              SHA1

              59f4b9d9c10f068fbaf67dd4ea855cf42ce77345

              SHA256

              af6ee1670372d89061486582ebca9b34362ce4a1c69ae3827284eb41ca35da9b

              SHA512

              33c56c4771c827d308d67626b9de4eab4d7998ca0bbf0bb744432fd1a0e7d3e718a51aff707f09991ca7d8104659bc952784dfba6a38fb24b1490bfea36fd49d

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.di

              Filesize

              340B

              MD5

              6fb782f1887f8fc3b38d715f6721b6de

              SHA1

              48b6b0e67e4ba9f7fa5375540d882e5c3e1888c8

              SHA256

              6ca1eef6015f6e3f1ae69d5ad8a37f4f0723001668a72c6513ca1c894d29c5a3

              SHA512

              c724f54392d7a41a9f09de3db06b7369d9825338eb46bd78c4f5bb88a0402a4b6a4ca16bf481abbbd458422bd3484188cb9aa1629757fbfd157d0dee2d97460e

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.di

              Filesize

              340B

              MD5

              b9507dbeff3f3ab7181640560a18e474

              SHA1

              ffc8beaaa1c1351c737ad95fbdb721bbfbdb3434

              SHA256

              9ae09a35f436a66bf25362293bc10ca374a066aba164efe9a37af43bf9efceaf

              SHA512

              47a2aa603ccf6fd905697e65be38147bf4fcda0d26105db5b3cf7536d78f4bf4642cc7a965c8a4ba864ccf4ab6032bf61ee674ffdd651c90f8e020617bf8a0e4

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.ic

              Filesize

              40B

              MD5

              2a56b2002d7fe8f56511fc243fd5f40f

              SHA1

              d1b408ea1944d7f88639c4ab91c7a3281f34aab6

              SHA256

              05f96b683f47ffc0f1c0f7e75251714d8f1c039f60bd577be1b5972642347017

              SHA512

              9f588c0776db4f71fa33586ca6d90f033c7186cc2007ec5a8e2897a489476fcffb0e6b2cc670d2bc8eb2cd3b616da478702b4160f0a86c2d125e0bc33c1c865e

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.rd

              Filesize

              73B

              MD5

              d94a901116c8c3aa2bc349ef8850e682

              SHA1

              74e6e2e21fb3bf096edef345d14e5ce0b82ea130

              SHA256

              31ba067c7fda513ad6f8d3ff0d929e9e309d139f8c7765b03bde38b3c6539499

              SHA512

              743d4b2df5c5eed10640d2612447051f76114bb95478250765de21db72988a2fe96da80ea8ea1edc87abdf6f1ef0425cb5d6a3652e99972a9b073bfb521c1bd6

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.ri

              Filesize

              314B

              MD5

              6e28d6506b5fb9a713c34fda65293d31

              SHA1

              c9167b90ce84ca31e3be597c707e295d17c22776

              SHA256

              a6515783c73236916aeb39b5e27a5e3a9056951a6d99609ef3cc32026ae5a043

              SHA512

              f03a759b1d4ac3114a9cfcc0ee481d0a60749c8970db10be2e2d28fa44fd91e47ba9b3fd0a78144372b8b0897a9e3841580934c51da005bc6f50469c403bef3e

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.store

              Filesize

              127B

              MD5

              5009a41a5a7f4e69125e8bc5bd11a407

              SHA1

              3e46b08da48d913bc98840c566278a6b2cd8c0ec

              SHA256

              eaa3c5b3397f461539851f9859d920e1bc94a5a90b96db8a1f9d6ba9628a5901

              SHA512

              6a6b2e65ec960f27e0e2498c5a71c6f73be7dabf9989dcd96c6bd43a0085ea3b217f55811307a3645fef8ddf88e61a7b406a32d707af66e29fdcfd54fb3cbe9d

            • /data/data/com.appliancesworkerclient.app/files/.jglogs/.jg.store

              Filesize

              32B

              MD5

              448e391c59eef34ee1defbe4dee4c41f

              SHA1

              df1f890987371d7d8e6963c68b787856e42bc146

              SHA256

              55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

              SHA512

              ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

            • /data/data/com.appliancesworkerclient.app/files/.jiagu.lock

              Filesize

              27B

              MD5

              c2c628937c6fcd763b0c2d1bccf81c9b

              SHA1

              1ed88ff013ec24cb6d86bd9273f95cf64ce43a58

              SHA256

              8c4b0c1bd80a60f38a3ac7217cf57713c34919e4c732f67ef84c1d855032e407

              SHA512

              c29ba894a0690de91be4035030256711e3e0744714c9624d7adcf184b61b161ffded8f53c2650ee380d8e0c84f4224101ed676e28f70ad1b46ae817549091afa

            • /data/data/com.appliancesworkerclient.app/files/.umeng/exchangeIdentity.json

              Filesize

              162B

              MD5

              55a893c67c2bb25d625e692d7da4ee3c

              SHA1

              242c3f4b9a38b3bc13c425aa951dd503103bd845

              SHA256

              e5d179171779afe49995d307a8d5b2cd623012033a081603f4e4ff2d2226a907

              SHA512

              16c7076fa0e69e322d8e59c70a0056fdd55a954dec6426e84017ca34321619bfd8fd7dbef660ce06fcaa43e41bdfb96aaebc981746a542d9bd41cc50dafb3e37

            • /data/data/com.appliancesworkerclient.app/files/exid.dat

              Filesize

              60B

              MD5

              539d45f6f32d165a973778f9f3e599b1

              SHA1

              143b28da6e38aa4f6ee27e7488dfbee1c7147947

              SHA256

              a831f87686e1809d18bae032cb498b8c8adf839effc283a376323c1bafd8042e

              SHA512

              5350393d59b9258771a4d10cb96ec83b50505dbb288c367aa5a2617d540a6ed88626d5f8488b40f0226cdfd349e5c11eeb212ff52176106ca5db35e9a3caeddb

            • /data/data/com.appliancesworkerclient.app/files/jpush_stat_cache.json

              Filesize

              119B

              MD5

              2c02acb57be928d7eb0b987b16fca35c

              SHA1

              0e1eeb2a8f19d1e0de8688380a731e25db632908

              SHA256

              677160571f055a063e6cf4dc4bd070ce7a5a00177c39e2359d44eb4cea1750e6

              SHA512

              c470482fb557636cd1a087724e8b149f6f3bc12e3b56f9bb02a706cc917d05a308e1aebca9fb75120824cd3845f78e20ca31cc813e45d2e52102cb1fc2cc8463

            • /data/data/com.appliancesworkerclient.app/files/jpush_stat_history/active_user/nowrap/944c1301-cde3-4b36-aafb-bce869f78657

              Filesize

              159B

              MD5

              16b2772140a665041fe447a3857beade

              SHA1

              8d5d69eaff575d0fb0995899e31d3a4bfcc3081b

              SHA256

              07da20b92444d2c5ea713956ee298e7d47e8eec152b4e012216598220c1eef0d

              SHA512

              5f92fbb55363c8223eabd735e2d0d620c56d5fd09adfb2a9de0a01acd7aa9fe580cd4e473e3334b8cea440ba513c30ae8718ae599774060a28f210b2ebef06d5

            • /data/data/com.appliancesworkerclient.app/files/libcuid.so

              Filesize

              129B

              MD5

              688266b7cc90fb6533ff0fdbc39c7743

              SHA1

              7cf5ea826cc12685a04710a1e856b4e7697e9d32

              SHA256

              e57c57b0286a51563c4e5f4114dffa4e1df3856827ce772d552ac2829ac8969f

              SHA512

              26e3827f159f581a4e5574afcdac5626e9355c53927d466db3da1155090d5c1d3d27ded788c2b2cfafe0bbd963f5cbf2f3c707a3129514a17a06d306bd7d813b

            • /data/data/com.appliancesworkerclient.app/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2OTg5NzgyNTI0

              Filesize

              1KB

              MD5

              a70259151825cad5dc3fcb9a133eecc8

              SHA1

              c66de1936b922694626ad6472e90dcfbdeb107d4

              SHA256

              cdc11b583e54bc75276f30ee660151beca041429627a0e8cf2d55229df082f5d

              SHA512

              10bcb6ca69f37c97860b32d2653203efba3f2078f60c5bd614d4db8b9b2dc331a19716ecd00042d6b64553f4ec04dc731ad95d40df2071f2d4861a892f09dd59

            • /data/data/com.appliancesworkerclient.app/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2OTg5ODEyOTIz

              Filesize

              1KB

              MD5

              3e4f317669527cb3cf267a4aac6e2496

              SHA1

              f8b6a173e591ed365b42942ad2abdc290a841382

              SHA256

              b94830168804dd7056307d077705eabc944d86ef8454f656104e5ca40e8f16ff

              SHA512

              00dded85b24251e3d34bddb04c63339d7d5a03249e73d2bc628e2609eee5b348b185518ab91e8a7871d245729c696ba1e24ff97978c1ad49c8f18bfca1c16b3c

            • /data/data/com.appliancesworkerclient.app/files/umeng_it.cache

              Filesize

              498B

              MD5

              37e78c01202c8636a5e4aab3b328dfce

              SHA1

              08d235deab618dc7f5acfdcdaf8730807c387bb4

              SHA256

              0050e22583cb30ed60cd8989b642886327c875fc95858662ee7b9b2f5c8e22b5

              SHA512

              9f0d03e1ec383f2aa075477b752b803c0b7d2c67d8b44ae37b563862e7b516cf42b68554fc2292e102d8a2efaeb8726e67619ab25feb50320639fda2ed1e50ac

            • /data/data/com.appliancesworkerclient.app/files/umeng_it.cache

              Filesize

              253B

              MD5

              6fca8cfb50d20d9aa2a8c6de94cf9f96

              SHA1

              10d3e8d2722a24a5dc142e080b31d932253aca1d

              SHA256

              734f01589f0ba4459ab269d9a7612da905b2aedb69c02bae1ab0f385448c4b43

              SHA512

              880232b8e50d3ac590d5f1a0751b6d4d31ed148ce80db20ce686f65a63ccedc8c750a10faadbc2c7a372fd79460499cccae231e34686917e0b77d8af4ae2bd13

            • /storage/emulated/0/.DataStorage/ContextData.xml

              Filesize

              111B

              MD5

              06dedc053386a1a2a4f070058782fabe

              SHA1

              246b06ab84e6adbe38ccc68158b6bae49536621c

              SHA256

              153a6c11e1cb4866f521082c10182349d45c8b81fb45550b8011743733e81771

              SHA512

              87a096006e04c1c9c185b4096229fdd38a7393e9a9cc75a792fd9c1bc9c4c99ea9e30b37bf5ba5ed635298ab892fdab408afb268ce3fd23942ea345029216f0b

            • /storage/emulated/0/.DataStorage/ContextData.xml

              Filesize

              213B

              MD5

              05337add3feca49cb775af682ebac8c9

              SHA1

              4455e3805ccd2676b492192d2ee819e3409dfe79

              SHA256

              2e65801b63f17c0ff4d31be56569535183def9e5cf556f9234a9f69a72762946

              SHA512

              1b81794a3f201ab364d5eb6e5dc6e283bd38af5f4f56d61cd24065ca41229e76cc7274ef90c7055bc476ebb79acf7a89a5e5d509492cc8e9878f5fda263afa50

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              65B

              MD5

              9781ca003f10f8d0c9c1945b63fdca7f

              SHA1

              4156cf5dc8d71dbab734d25e5e1598b37a5456f4

              SHA256

              3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

              SHA512

              25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              111B

              MD5

              9275694251462198d3e5d0204a836421

              SHA1

              c5fd71d614d6ee1a2e25f02be2513deb17daf399

              SHA256

              c080faf06eb607c476c906533215994cb81a291b8d073abe210047bd95ceeac3

              SHA512

              d89e6b6a904d77ea08b75a0c1ac0a238a3f8204d5315601f696b3b713fe7dd703b25ddbff839ec1e948b76542f368bd1153a6dd4eadede47a59cc00470c7518f

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              167B

              MD5

              adf74176c26ae8c7b594ee26b5f9ff20

              SHA1

              2a59b1be277e648d0adb2e7144a5951eb6f541d2

              SHA256

              5d948d8a1558f0ed03b5f8aacbf5b998fb3bc48cb03fa52b8eb460b8197de437

              SHA512

              68dfc448e7aca24acabf4c659a992259985fe82b0a09cf48f9af57e1d4ecaac0732f2e29c84b59917f5955711064c5c4c62b68c76259d11569a49c57fdb5b018

            • /storage/emulated/0/360/.deviceId

              Filesize

              48B

              MD5

              1d8d16c4e3b19ebf18988530d9b9a757

              SHA1

              bc94c1cce05cd848a53271ecb9c5311e27ffebf5

              SHA256

              abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

              SHA512

              4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

            • /storage/emulated/0/360/.iddata

              Filesize

              32B

              MD5

              113fc5a1a3232eeb7b616e47bd4143f5

              SHA1

              6f0faa0f772c2617beec0091ebad134924271ba1

              SHA256

              b8b5667b54268e1c0375a0e774894dbcdde4f74dabdcbfaa896d7348e64d1edf

              SHA512

              ceed2cacd4fdacae6263efc48e8fff687654a425bc4c299e3afad0e36b2f0f4b034e5bc89dda6a451688046de25ff26fbe5ef586e34248e3d5309fa597078a73