Malware Analysis Report

2024-07-28 14:33

Sample ID 240613-q5976awarp
Target a5e11b572f220b2d51cb2cee0bf062d2_JaffaCakes118
SHA256 1d2c5d118b89ce90a0f25a0780a319b99eb48b7705f50f08284f355933aaf085
Tags
discovery
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

SHA256

1d2c5d118b89ce90a0f25a0780a319b99eb48b7705f50f08284f355933aaf085

Threat Level: Shows suspicious behavior

The file a5e11b572f220b2d51cb2cee0bf062d2_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery

Queries the unique device ID (IMEI, MEID, IMSI)

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 13:51

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 13:51

Reported

2024-06-13 13:55

Platform

android-x86-arm-20240611.1-en

Max time kernel

64s

Max time network

131s

Command Line

com.dm.mmilive

Signatures

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.dm.mmilive

getprop apps.customerservice.device

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.mycool.xyz udp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
CN 223.109.148.130:80 alog.umeng.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp

Files

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 9b3e2b43c68e4a2d325885585180f191
SHA1 50ca33d51f5cc41cc48a5dbd8d30a96db630f7d0
SHA256 e67c0697cc1d930012b135dbda5f7a659cded8931320024f47a34459a1f7a770
SHA512 ee1dacd13f270123fa3c5aae7750b2824f45eeeee8dd777aa36a4cef869ec69090888d949bcfd6078ee0c04b49b04e07e320ba597330e02959d9f22e33705138

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.dm.mmilive/databases/cc/cc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.dm.mmilive/databases/cc/cc.db-wal

MD5 66340190d04fff1b3d6bda4a923bb013
SHA1 8e61474dc39481df23e4c60b1f6ec8147f30f3de
SHA256 03af5e85f319bbb612aad5352280748b8a5f4244ac2a66327e107670a808deb8
SHA512 7d406151a7b8ad613b8775886741f296ffd9eedccb22ce3c74df8bf3baa00fc11b31ea362031fd0b0bfe84f9be99db9ae1618c3fb6d2e977bfd6b79b592aa50e

/data/data/com.dm.mmilive/files/umeng_it.cache

MD5 9899cc59cbf1d2e377d25d65949a6be2
SHA1 d6254cbf9961f048cbd4dac997a638a1918c6736
SHA256 fd4e5a883d17e5b767eb792a1ba6b943e4c8c21cbb4325b82059e429f88ba6cd
SHA512 08c4a1caa8bc1e867a83f9dc421ac207f2a254a3bfe5f2687c3360a6b21b33e7025e65d246ac068283f2183cb492202af1317bfdb05370e32627a8a88f41dfb1

/data/data/com.dm.mmilive/files/.umeng/exchangeIdentity.json

MD5 1ee9b752c402d65dd0434b3486c66096
SHA1 bcdb7e68896ba9508457972a9f982387650536fd
SHA256 246ab960a4bbc9823dab438bfd0b16f2f337ea07b879276f809d9cd86bec4582
SHA512 f190cb8e0e93121b5f77ff985316bd1281c1f0f14f1afa68775e11fee65461428884ef3ca542886f17c34412536c4791aeca094f0fac5f8f33064b4915812b4a

/data/data/com.dm.mmilive/databases/cc/cc.db-wal

MD5 8d2dd66696f772f2099b61a250fcc640
SHA1 237be192f5b5ebecb3ed89ddc2c114adbcd846fb
SHA256 f85b5b68050203ecea0dd24f24cf0a809c78a8659c8fd14386486682a7d81e08
SHA512 cfbd90e5457aaf1fd6824f5d581be23b680d8e7dd5de470313278f00fbd274c77639093c0d7cb40c134c2495b5abef477a8c677fa3d9117994c6b6682403f471

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/com.dm.mmilive/files/.um/um_cache_1718286783956.env

MD5 ed6ed968aaa59efa60ab73bea686ea17
SHA1 a73804389e54b5e85a235e6cb51feaae71de9507
SHA256 0629c619accce7c332a5dfd38f336f9fa366940f1e44ae1689a873d140917809
SHA512 3c8eea9009cf70923d1deb788d6f2975af9490b0791791a0e44d85acef3527f869797c055c35532d833e10361878d3b944d69de0bcd3862e58e5f5b5f7c54b7a

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 13:51

Reported

2024-06-13 13:55

Platform

android-x64-20240611.1-en

Max time kernel

65s

Max time network

149s

Command Line

com.dm.mmilive

Signatures

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.dm.mmilive

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.mycool.xyz udp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
GB 172.217.169.10:443 tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
GB 172.217.169.78:443 tcp
GB 142.250.179.226:443 tcp
GB 172.217.169.14:443 tcp
CN 223.109.148.178:80 alog.umeng.com tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
GB 172.217.169.74:443 tcp
GB 172.217.169.74:443 tcp
CN 223.109.148.179:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp

Files

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 b8595c26ef6a93297831a51c55d67e1c
SHA1 8676d11cdd7353d8537c2ee9c8f100aa681c81a6
SHA256 9249ebde07349cc391df8010032734a237cd3a8ae04d4b204d1ee9a7ffd23929
SHA512 bafeeb478fb5855bffcec2e190546d46024e55a9f3d277ea4389fc8840660841b7dfe41ae1c646c25267f84b3026ca71e779762f347f5b6d44156167402909af

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 ece3e1344dbfde000d35a4e76870b964
SHA1 f0bbe665e94db9e74dc8dd9f5fd6237e48a1585c
SHA256 75b3562ef7091e513968638d2f79ee433b830c0ba771eedcaf553bac9fc1e562
SHA512 6512f3f9db640c34b6fc9e272509347946ee761f8d873c72c55ac22a106c49b6d886c7ac82b70aa82589a4feb8242817d98d1d4d3f9d41d910edf2ceca132372

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 970a4a08c461dc52a5eeb89217e190af
SHA1 34832d1f84078e512b0861c7a12712a098866662
SHA256 4b3e04321c84ccb2dd7c1ebe1666021ed410acea86438e72fcbe311d74736cdc
SHA512 4c88f3d72db664796131fc7e36cc9d8c8b84753c476f8e4bc715e60d0c7698647a87a5af30e5e2827e8ce2136e294f551871e0fb4e544f15da1a13f6119ebf51

/data/data/com.dm.mmilive/files/umeng_it.cache

MD5 9ec5c90659daf484382515962e98be4a
SHA1 98156c595bd6d44cfeebf75fa768a14e54bc6807
SHA256 d09c1ed41f55c10a48dbbe471fe675671c7646d51112a7221d6e90b973dcf6e2
SHA512 5844798b082b476d73ab5b2e0e2ec24bf8026e4e3f908888675dda6874a928a247b58cab0e8ac195c8e31beb181056327c3676403a0b1f6cfcdf2f2f94ca6977

/data/data/com.dm.mmilive/files/.umeng/exchangeIdentity.json

MD5 95e34204004b80c7841f7d1aec59a16f
SHA1 89000679e93ac415a27f434e1cc3669d7a0374c0
SHA256 88422036a10eb8afd1d7b5ad1851b612e3a5aeef7435d7e284f65f5d6ddb76fc
SHA512 3ed7ce4a53e63f2abe1298cdbe130ec94f0d2d1b59b21389df0de773883632365b93e71e3868ea15511e74d301959b5faf0e1668c36e7b89036c9848a298fdba

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 2a73b79a5b900b88d489e5c4da54d220
SHA1 f411cc35f250d28f534466994800fdb31319053f
SHA256 66ab38e80c1f0c70ac40c2247ed60608e1a4d6a880d9dc3c224332dddc670a1c
SHA512 c8bcee887b18debf07cc9ebcf0cafecc33953f9c0ec6353b90293c44c1d2b8516c5d08e691a5da7b61aaeba0610c4fc817c4c08095bbe5d2334fcc67cc032905

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 5c27e2ce957a06a893e7509e46360cc8
SHA1 d4ed1cdad070fde5d55c9ce0981ecd18167d6547
SHA256 198c946c868adfdfbeb137db76a803f991faef4be8509d3c2825d2c28c709b19
SHA512 d191f7f1853361db5fdbf4611da6252f00be9ac68b9dd8db246ca72c556be9486f3c90b365eccde2e1e430e2291013ca9efbbe10b1d3405b46d772679176d54f

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 9ae8cebf5715a87101f4375c310521cd
SHA1 bb1a427ec83ffb80bddf8747ad0378230b1ff619
SHA256 df811c5c55586e4471a2bd0f5d5b418ecc1890e42bb2e044758cd26e95b67cad
SHA512 6ec4aa7a935ff5900e90707234ce2984a2d46c919d55710fa4078b707c34dacd55b90b19fd8f28ef56fa5b185e0872816fdbc871ac454ce03ad465ce0b1476b8

/data/data/com.dm.mmilive/files/.um/um_cache_1718286784681.env

MD5 021147ac9da166a3d988ef0d4aaf4a26
SHA1 7bd620542d50f23b63b8eb66a3228f6811ad75fe
SHA256 1d532cc15f09be6e46e4732f7b81dbfb5e27660398fd0f0083578dc89e15a2c0
SHA512 855b051d2b99e38b0b98c6f65000ccfee252b1952cf62a15024233f6059eb25b448f6ea5299a21d019bbdf87c79b66de9d2148bcb2bede54995a7cee0170db70

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 13:51

Reported

2024-06-13 13:55

Platform

android-x64-arm64-20240611.1-en

Max time kernel

65s

Max time network

132s

Command Line

com.dm.mmilive

Signatures

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.dm.mmilive

Network

Country Destination Domain Proto
GB 172.217.16.238:443 tcp
N/A 224.0.0.251:5353 udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 www.mycool.xyz udp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
CN 223.109.148.179:80 alog.umeng.com tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
DE 3.64.163.50:8091 www.mycool.xyz tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umeng.co udp

Files

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 2dfb461a465e00a08864d72be5b3c42c
SHA1 e66a8daa994e74f5859dcd13d367c9f06b015304
SHA256 e60497320e10cc650629a0fb40568592383ab77671059ef8a98e1c7d4f60a0bc
SHA512 18b0507d717f78e9af63f1a3cc51da5750c9039aceb08068c45d8f974301d83aa88e9e57e09b3f61e4d3b6176946059bae9781278ea47a3cbc586a6543741fb6

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 b3f2b629e0ca2e1b5fbfd8def6391a28
SHA1 094e314f9ab00b141a5375b950943efb2d1b0967
SHA256 fcbcba2e974401f58e47bce00ef91a0eb3320c3f0c0624353bc5e059371cf366
SHA512 db79bfd9f2c973f1b36c75fd042f45c104f8b40658a767adb8a17d6ca7480208a14e64a6c63a15f419ab4b9b757422ebd61605082e90ff3782888d851ab1aff6

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 49c67ab908acff9f95601ffa1bd0ee69
SHA1 60bd0e22b6cc3f183cae1d127b15b9f5548caf62
SHA256 132c7cbd9ea1bb92c599ec4020eb7c83e9dc4dcfec2e4a57c676d71ce0e93a60
SHA512 6614bf3e7f64bc624879ddc94ed995b2e53464afd4a32f5fe9f0f6734fd0e685f561f5210d0b2ebd080c8555c5f8918e538fdad4b636cdf661b3185a542cdc7e

/data/user/0/com.dm.mmilive/files/umeng_it.cache

MD5 7cb717938fd9609a142e044714f45ea3
SHA1 e1048eeb258385f5fefc680d2b2ea188232426f3
SHA256 22d8ae57975726ee6ae67ef1b2a45d47bca2db8baa51f33f42a6f4095cbed515
SHA512 ca682c90a78a8f68eac4bc2ca71edf1869202ab9f3ed6c07b79dc3d9fc8d2efcd5a2a4c957c155fe117749132f381ccc6827f70701629a95bf4fcf46a4c5c12d

/data/user/0/com.dm.mmilive/files/.umeng/exchangeIdentity.json

MD5 47e552d7036f9d338c4a2cc6bb7a3ad8
SHA1 291b7d0551b4004fa3b5f90c03d160d529821cee
SHA256 b396aa39d226514be00062fd50d76b831b7fb70b0d09395f769e82bb2bc096c2
SHA512 9c15230aa8270099edd0bdca08e10fdf98f30b09bc6469650d444720c50592fe1f74d388550f0e0e0e918915b7fe2a1a9d95a78ebe1ca01d10fb4cb67fec72d8

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 a0c6a070d916e9571e8f2b41379534a9
SHA1 829447ce74c116bb8866fa9a56298754ea3a47a8
SHA256 0286478e503b260415b9b0468ff8d55178fb0c3a0e98219a28095dfabbf305ab
SHA512 58bd1f1537c015ab87d2293cd040b046841acea79af956d45bcc487f31efb4e585ef8b253a059076ff54bfe840eadcddcd353457648d59333ac3d7e7629c9cfa

/data/data/com.dm.mmilive/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 474ec37fe1bb562388243e67102f0902
SHA1 2a0d91bdbe414c72ddff2e1249422372f24d9872
SHA256 81bc3b7c6e62ad3d9bbb3a4f635c84f0941587b602c38392f70d7ad6ec16966a
SHA512 da2070fb65d4ab9282ed48f21ef64c06dd9d253df0d22cdf2761f69a8ad2ec72897e72cfd1b818716ea710d6ca7da23439e514037e926314be2527ccfa862fb6

/data/data/com.dm.mmilive/databases/cc/cc.db-journal

MD5 5297f30722682cc39f460d1a3c69d595
SHA1 e95f6bf81291556869820aab82d76f571a9e7614
SHA256 cf39b0cd343598bb9f3b758c1a2918cc40fb003406267a57f730696424a34fda
SHA512 94acc0ff3677eae687312602f9f1d355b95ba3b3ffbf208d3283058d4cce814e0288305774b0e0ad6449722e11b9f889c5118fccabef156a92bfcf4864d1cc83

/data/user/0/com.dm.mmilive/files/.um/um_cache_1718286785713.env

MD5 3c8b7c2934b123c95b9b6285a8dedcb1
SHA1 e6ab5f3160a4b05948f784c391ef5ec76e2149ee
SHA256 b5e0cad2bceb81362369b848a87465855d3ebcf89d54d4655f91c1cfda8d601f
SHA512 53be18787d88f01f46860a561ad9121f131fb3bfff46a93e8d64742c546ffb045035d51a398c1358cffd1938bc9890e0642c24dfe81098fe4cafd2e8d9305f3f