Malware Analysis Report

2025-01-19 04:50

Sample ID 240617-zntnhsxgpl
Target b9fd56d15e8e84a61db46525957f076c_JaffaCakes118
SHA256 af353eac4fd960c853b61f4f28fda32764af6104f07924df1843c3d0549ad711
Tags
banker collection discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

af353eac4fd960c853b61f4f28fda32764af6104f07924df1843c3d0549ad711

Threat Level: Shows suspicious behavior

The file b9fd56d15e8e84a61db46525957f076c_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Loads dropped Dex/Jar

Queries the phone number (MSISDN for GSM devices)

Requests cell location

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests dangerous framework permissions

Queries information about active data network

Queries information about the current Wi-Fi connection

Acquires the wake lock

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-17 20:52

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-17 20:52

Reported

2024-06-17 20:55

Platform

android-x86-arm-20240611.1-en

Max time kernel

179s

Max time network

130s

Command Line

com.sawtwe.dkddzeis

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.sawtwe.dkddzeis/files/jni.jar N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/files/jni.jar N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/app_oiuj/zkl.jar N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/app_oiuj/zkl.jar N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip N/A N/A
N/A /data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries the phone number (MSISDN for GSM devices)

discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.sawtwe.dkddzeis

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.sawtwe.dkddzeis/files/jni.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/user/0/com.sawtwe.dkddzeis/files/oat/x86/jni.odex --compiler-filter=quicken --class-loader-context=&

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.sawtwe.dkddzeis/app_oiuj/zkl.jar --output-vdex-fd=51 --oat-fd=52 --oat-location=/data/user/0/com.sawtwe.dkddzeis/app_oiuj/oat/x86/zkl.odex --compiler-filter=quicken --class-loader-context=&

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.sawtwe.dkddzeis/app_zxlk/oat/x86/bvfg.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 csapi.adfeiwo.com udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 api.map.baidu.com udp
HK 103.235.46.245:80 api.map.baidu.com tcp
US 1.1.1.1:53 api.cp.guiji.com udp
HK 103.235.46.245:80 api.map.baidu.com tcp
US 1.1.1.1:53 ad.lanjingke.com udp
HK 154.86.204.72:9999 csapi.adfeiwo.com tcp
US 1.1.1.1:53 zp.veegao.com udp
US 1.1.1.1:53 ad.veegao.com udp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
HK 154.86.204.72:9999 csapi.adfeiwo.com tcp

Files

/data/data/com.sawtwe.dkddzeis/files/tempjni.jar

MD5 53c8a982af0615f126be430ed18f0107
SHA1 f72dcd6d17b369e21d012a9e6f645cfe15f410e2
SHA256 d93a6702a55aee0209a7e39987aa1212072cb1b35f77a94d1372eb7a67433cc4
SHA512 98fa5bbed5017da36169bcca5ed66ec67c5ef567933c53e4f8707ca563d64aeb04f936bf278ba9b4e5b04307f6b65a005e86ac2e3cd7df483e666f0ace798d73

/data/data/com.sawtwe.dkddzeis/files/jni.jar

MD5 42345a6bcccddf0a1b0c6051dbd2589a
SHA1 c8c735444c83d9640a17488ffde2ce65b54043e2
SHA256 a907256b09cbadb4ad65b483c744047fd42bd2b9e0e21c54bb19f929052f66f0
SHA512 3271f645a09f6dcdb9922fd64cbfd6b060d3fbea9e37b3ac4947267d91e3bb42c9f55f87e3b5e23100f8851d8f027bdbc25ca2af25d4ad3939976f561f409449

/data/user/0/com.sawtwe.dkddzeis/files/jni.jar

MD5 86222fb116b90670a94fdace5ae4c0a5
SHA1 5bb5fb55248e4747422a0af9a001c419a80ea657
SHA256 eb2697c38a37c7c07fed611d03e19aea77109cdff6c02cc13da61faf0de0dc57
SHA512 29de1b29e8dc70276ee369e3043a27b24a13e6a08df13369bebc01c5ab5e77d90459b4b94e7594669e1ab8e64604413d1582e5aa7cbbb1ff03363eb86a0aaafa

/data/user/0/com.sawtwe.dkddzeis/files/jni.jar

MD5 8ddad900b492bf1401d80afcbee5748d
SHA1 8f064c43b6f68914121ba07ce1b04090dd86d1b1
SHA256 9d0cd452742a1936543ae73c79cc1e26a153fd5d16767b7f53a1566ee496b200
SHA512 7982cee445a9e9cd9dfb3f769b84717b63ba7053b13e04355d33d923415f8025e795e3466bd62480656c9e9986e72debcd80c07a4a9fca9e3bf5e8fb86a219f6

/data/data/com.sawtwe.dkddzeis/app_oiuj/zkl.jar

MD5 e3d3999873c0f4c67b08c6b9015cef48
SHA1 10dc320eee3051b272c60dd5d311090e1e97b6fd
SHA256 1962b0bd5ed7d07b207cd7a6dfd9acb16d979ede1d6992841e7f9e30ddbb7bcd
SHA512 ed7dd135737745ffae14a7d953abe864727b2f780ac429467779a3237793e0d72c08cfb586986cd71828f7f3abfcf8f175f5f684475cfb5c8863999625d1a902

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_adwords_bg

MD5 4b9b64c9dc6d13733a9ac3320ac9f53f
SHA1 a02218ada2417dd85a3f3a22db31d30c150440bd
SHA256 35dc398b4409f3037ef52c21e4674a283e1cc0f71894704a4583752b91fb0cf1
SHA512 b819d1ca851815549bff946c1950539db7d199b3b04be0f6a6aadb1602225e895ac7283c525733e9e421646a6f2da2b732ce3cccb8461e93574c04e5d64b31b7

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_appsc_an

MD5 58dae109b45c2378d880225e9f746240
SHA1 e67b37d47c009a11c9b365d38a3692f6e67c606e
SHA256 afc834307f4d1bb9eaba3f3ed85aa32a616ebef7b32b14ba234926312ad0f2ce
SHA512 ca3c5caffe9340d2a39e84c8e7e2ad495640338a6d1d6ecafb4b935578b334fcbfdbbdbdab983c7b6559387cfd197cd8fd33c243d6c06eb9368c6f7e4ccf76cc

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_arrow_down

MD5 db45ab95930456e6baddab4e6fcbe712
SHA1 fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8
SHA256 5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a
SHA512 d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_arrow_up

MD5 20c4a831398dd9ebd8dba380a2e7857a
SHA1 c6db26860686a65f5f402d29d98b358630c10e40
SHA256 03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d
SHA512 85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_bottom_bg

MD5 ffe93c95f1ceef187397bb763c992ccf
SHA1 6b082b7f6c55acd0987611b3b9a5aac9a5b06d67
SHA256 06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9
SHA512 10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_bottom_btn_cancel

MD5 a7481cc1f04ff397669d5313711676b9
SHA1 6a8a1755f8bae8c1c4236420de731ac5e6479df1
SHA256 7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b
SHA512 6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_bottom_btn_install

MD5 6a976eab4bd6a204fff19f363a3e0fad
SHA1 7815e2d7905bb25ecec99c6491e05e498baefefb
SHA256 a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796
SHA512 8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_btnbg_blue

MD5 cd03c81961866339359a8862cd420751
SHA1 4356e958c4b333453a187b13cfb8e4951e85b5c1
SHA256 5d81cceefef430d84abee2aee1a655e975e638eb6e90d9edeaf70df18f761453
SHA512 29c6a83607ef938c8d74031781008075f9e29f28381893ce565d0d0e5e2193657264deb7752709f124bac8a7625ecda18a90763f8b8cccd48868105fde62846b

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_btnbg_green

MD5 b61c2cbfc113d3080881c1a6c805de7f
SHA1 8bfb29fbebab3ff36faa5f6d19bf7bdf57608dad
SHA256 740a7a55675de72a6d165dd1aea7f15e6744f08e5131c2abea7e6e02ac4752c9
SHA512 7cb6ca09b180adeb87552b9b814ec50723d2f8e909a5aa1c3c63526bfe90043c0f6f97696b0e40d33c045a6d7f4b4df711ecda2a93839b9409f69c84491b3151

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_btnbg_orange

MD5 144bfaa9628bdc547f92dd8ce04960db
SHA1 f60797400afdb88cc1a7b26eaaf5c18b7d34e3c3
SHA256 56707731bc7b76b806d9db7ec7e73173d0ba7c5acf22c8c040fb1bbb0d07090e
SHA512 071111562423e811333afd56dbd18fb68e0720f41936c42d266f70d041862560b363aa202ae24af40e9ca611d7f3eb996ee4184834097e85fbda1e2d36291f4a

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_btnbg_yellow

MD5 c56a569d3e2cc40deb8ef6dd9c8273df
SHA1 fcdfdfa5f883afe7dea8a08b4e22d66b243065c5
SHA256 0e603b7797d42f1eadf5ea14499460e84e6525df6bdc4ee1464e00789c10c057
SHA512 b1549f4667c2765feb11d38469a5bfa4f599609ff519e65b73fc01521886cd57e7f30c2c43655d2b3af8665c77cde4f3a07e1e21f7dded059dc22ac60cbdb4b8

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_btn_install

MD5 135b4b02c06ce896c0289c06931523d7
SHA1 219d7fcb9a47b14dc724030a5b22b00e4912c419
SHA256 7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc
SHA512 e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_cloesbtn_top

MD5 6edfc3ccf80c5cb2c25bf82dd5e78c46
SHA1 0f71fe007ebb0479e42905c6a78f80b0a109a03b
SHA256 2225deaa4204ae88206589b390dd277c9e24ab0a68338cec19eae600b854fe32
SHA512 a8e4adcc0cd0867e8bb2cfe43a04c3a8e8a84de99ad7150c339c4dab1e81c8dab87af17fe7b7bbea41d54c6acd6214224f07ba456a8dc0fc8c33b3782e83ba4f

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_cp_more_btn

MD5 a0314cf413a6efe118ce49aabe7d323d
SHA1 a8134a8d8506f5d44cf084b501a73fddd194fb8d
SHA256 3d723fa2d6bef03b2f44e09486edadd7eee392e14da4bc9435521fdb9d5a1537
SHA512 e5decc76e4461aa063571e45e9d1e47fcd8586311b726c1d1bb60e327c43ef8e104f4e1614e9ac656d5ae0e9095042e230f7245c7a3f0d89d515a2fad78046d3

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_cp_other_btn

MD5 5b1fe1609131bc828527fc35dc4c7353
SHA1 39b6169e1e2a7fee0e56e421184d81f071d3693b
SHA256 ebc4e49b42208680f7d5b9ebae07bed1712a1ecb6443dcf5b09171faae0e0eae
SHA512 74ebfb919c0af6fabc52228d7b501c632c95d28b91e0ae87109d9da5f422471f96190858f26d097bc502a8e673ccf31e35ab2b15910f7a43e8c48fac64a0c8e7

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_default_bg

MD5 67d8c02c18a4eebb21aa28ebd88d7a8b
SHA1 f31fe91485bba4da727e9a0d0525c7417d6c72ee
SHA256 7b341f9b1ab0a691029b44f9b1d64cf74fd72ad0c74772964645c79f687402d0
SHA512 73c14d96680105ce3e24ba0667cd2452848f9c7d2549e937667c25bcce01a4d9207a78f2dcfc7c09cdb39f87f079c7847ceacbed36cfae55013126ab3bdbf5fd

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_dtop_closebtn

MD5 82da041f51d1ac5bb8def1a7b43d23fa
SHA1 6bc0fa16bfa87398bb17922ee2f6bb1dbd9a4b6a
SHA256 0bc4050b837665100502e255107b5e1521c7012b03fcf41eeb92b2bb8c95ca5c
SHA512 1e558cc54a7f5900ca418ce7a64866273a533a25d23a84ca4721277528949836079472c7fc0e66cb5c41548ef2c06d412a1e8538fecbb02ceecf982e10c238b5

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_img_bg

MD5 089965b9fb96326ad74e361a9a524e4b
SHA1 528cc6c7a10de9f525919a477c9e20d6b6e93d55
SHA256 d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46
SHA512 b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_install_btn

MD5 c64af13b874ab8cfdac99f000c29a3be
SHA1 e5274173c7721f8c77bb5da46fc94f195abb4924
SHA256 67af721ddafee67f3eea6241bcdb5b8c1315e8ed1b8dc852646cde24fe040516
SHA512 d59c85b4576152848427a74214c7b979c576f5cc6978430b9d7076f50cdf8957d8256eccf55aaba2bf7f80da2a7a2b445a26758aeaf3e889ae1c84a3fb2185c9

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_listcloseBtn

MD5 6fb767d2563a35f3c0e362a5970ffe1e
SHA1 6d3a8fdbd7ced06a363517cd6cea7a7fea16c269
SHA256 534fe818efbaa752826c53f1b63d3ecc1b647c8a9f7970012e316cbce5fb5ae2
SHA512 ab989e8b01b9d397cb2968dc8191a9c2c6fdf19947b30b96cd5266afc6fc330a318de8c914d34adef98caffd151a0bc29fb130bf11c5638e97b3ff15c723fc2b

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_listview_bg

MD5 28554ef38f282f89a2f3b298157fc984
SHA1 08147f2b5a83fd07f5acadb43598480a13d3fac1
SHA256 b4034e26cfd742433a0b59676bf73a78d93d413decc891abf3d34486160d307b
SHA512 cd31cd81a7c37155f540c1b636cad9ea198860952d79f8b3d39dac661c2e7fa82e1398830c7aacfa6904e4d4cffa6f5f1d906dabbf97091f3e38a65fb5fa51da

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_list_title_bg

MD5 c34bb6ce3d7def12e8af79e87a6b5173
SHA1 99e8103027a7bba73b736fcded9d0d91b49e4ed9
SHA256 daf75ee4e642b335cf1918ac9678502bace139f76645eedde7eaca4f296b7e57
SHA512 58735b6034ff6ce1974aa0a48952100345b6bdf74a4dd083925aa87b0882e1931ff8608d03d0854c9de23ca409e5726ddc1e8313339181f57312bee0804ee2b7

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_m_star

MD5 590dd3230f50ba57b7a828cf1ad04aa0
SHA1 d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee
SHA256 d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7
SHA512 449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_page_normol

MD5 2bf3d7d7ffe4a54396979c2802e5a0a7
SHA1 631def5dc6bd48080d51d3482a85c470b291c316
SHA256 ec1601e7e19b69d6d6bc8f18738698a6b4483a4f1ac546215dbcff9cc74acf7f
SHA512 2a9a95a9298c59a90b7234343f01b70219653e4d43217c83dd3dcafea84b96727d1e5f40ba035c36fb4dc6a83478fa66d545a2cf8221aa2da1ab9565b3deae79

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_page_selecte_blue

MD5 1c4e3c1de688a5cde892bd74eec4bfc1
SHA1 bade0d4743822214421dc664449c0b0d94d69aae
SHA256 ee7abc5886a058b4436aa0a53c6be535fc0bd3a6832f2b0b0e611473667dca5f
SHA512 ccf419b266d7fcdf4c6696963c657f7138a59b06a4fdd900effebcaac0b162ddb5e9135f5032a33e2b3ffc17642065600d9b9292005e200f5cd8e79b17968f24

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_page_selecte_green

MD5 9dfe941765a15b163eeb46b49cb4e89b
SHA1 caad3358c1706f28624e10616cf6d26a45b2dd5d
SHA256 d92d42135d59f97d35cc2d553b7bc79f19397a40cae9ac971a86def6fbc9167f
SHA512 0a38e4a6187fac65999a9a27ff4a917ab6dd023587ae5b0e33c95a502e7e93626ac3cfb48affaacc274b5f7fa118f483a627e70288757308041ac67e3337a4f1

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_page_selecte_orange

MD5 ffaccc20bf244076988df00a6bc20b06
SHA1 4a7176527cca9e9a862cb12485cf02c49c228913
SHA256 71d16959b999e8251ea5ffbf0075a43724b02f85ca34e3ee82b31935537c9a9f
SHA512 dba973767cc9e9eec698232e9f7d057bdf5464c8d70fcef3e6631ad72d9e62ab4cc08169db2e3927e2f3a870787ee60bfb4b26ec1ed8c3fd30e84aa38afd65c2

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_page_selecte_yellow

MD5 8487656fa992a7c3603773e0b1b1d7e0
SHA1 ac740cc2ce2ff0729b70c26c70ac0462072d1b81
SHA256 12b5a8c075e94cfd69d4a3ea6e62552d7e3e7e2ae5f6e69b7fc4ab5a6c9635a8
SHA512 b6be96693719978dabdaf05e3f733925b126959bf8ec0096775d76eeb08a6a5fd56c2ddb4697d81a8da9ef1e00524348c0ec7aaa36ac5302d89dd51db6f08fad

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_pop_back

MD5 64e607b18ceed3c184658ad0bead2c87
SHA1 ce0da694a61264c3dc52a42c5e4eef67c267330b
SHA256 ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad
SHA512 a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_pop_bottom_btn

MD5 153c4a358fd2029b62d88c5abc8315f8
SHA1 b8db469b4ed0798040ed2cd7618fb31c143bb733
SHA256 6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945
SHA512 7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_safe_icon

MD5 5101a78d00419574d0dcc0eb1f4b75a1
SHA1 c4142d79270fddb27f24d6e8e8b61e9837b3de48
SHA256 abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999
SHA512 cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_safe_line

MD5 1533f88b71966664017deaa78437e057
SHA1 7b68a5bc7a6808a041c05ac7adc5da0fd378aecd
SHA256 ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a
SHA512 f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_sc_circle

MD5 e50c867a1725d1a77477d0a3931266f6
SHA1 1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67
SHA256 0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be
SHA512 88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_shortcutad_bg

MD5 66cfa171762dc97679085b770d8a1a24
SHA1 0ea4278905b9beff4cf8ab932955e720b7efd200
SHA256 7742eed2fc4c8437016dddf0af8b6b7ab44c8cb67dc2adb13f44ebd959cccc0a
SHA512 04c3b023abb743dbbf4a856c51d08af43d9fcc9f128073336ba4bb8149a9ce4d70f7cc50cc2989e59cd82339371345f02a341fb7abdfc53b0cb8c0680c400ceb

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_tj_line

MD5 83f9aabf34554a65a8f47514703ea69f
SHA1 bc3097db92c0f1821d60779d9b1f712cd0cc7866
SHA256 a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d
SHA512 11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

/data/data/com.sawtwe.dkddzeis/app_imgfile/d_top_bg

MD5 17f5c25477711a64b0dac419b8d68c0c
SHA1 475301f9d8143ba1548114d1de9272a18298a5dd
SHA256 b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8
SHA512 09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

/data/user/0/com.sawtwe.dkddzeis/app_oiuj/zkl.jar

MD5 e5bc8e366206976c03c01b37668a4901
SHA1 2e6b477ca543853647bf58d2638503f92f7a46f9
SHA256 0fb4aa0d4c4493c23ef8fb57cb197913c8fe930eef644abf79c3aac8f1e1d108
SHA512 ed7da038ed35d200b633beb9b641c37f846138a8815868e86e31d9c66e90038a6428c6aa6bbc7d3587b85c4316f01be4ed876686b849dd220611eb352d39d9e5

/data/user/0/com.sawtwe.dkddzeis/app_oiuj/zkl.jar

MD5 a973c356084d6d981e6ef45ea7121d4a
SHA1 19a2b455fef053fde7342ed87013861172e8539d
SHA256 be966f072aec49410f288451ede08748ab5ca34863def87dc7a10131b043dc92
SHA512 c71833ee4efb590ee40f0d284acabc5fde1f17ed65a5486c4ebcda338762b289e7f4fd88628648d2804739c99d686e0def6d90aeea7e5d5433d4233bea6c6ffe

/data/data/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip

MD5 008768704498777c338952dd205ca895
SHA1 2575b5be9568faf3cfb2fb2b71abc511ab44a5a1
SHA256 56e4a967bc3c6b7c5bf2f77e5ad5710544815003cde804a7077efa6179562d2a
SHA512 8c9804ed9c7382de86d6d59e0d319a8fd099083fa98bb7f194e0153ffea8e7c61c6d174a57885a049f0f72086b76f6ef60fa4b5e48c56ffaf8ef9be09e5bfd0b

/data/data/com.sawtwe.dkddzeis/app_psimg/bottom_btn_cache.png

MD5 b08b3f807464a79d8a28b44eec61d5a0
SHA1 7855100f98a14220cb24a8e097c1aed778bf855f
SHA256 adda17ece90d03a44e3f15970f62c0aef32dbf3459fc47eb72914975397adace
SHA512 a20b7781df1b6636c4266011315b602b1a69a03656206232fee54e5ddfe85bf431301f9fd1727c6aacd0e2ecd3b9ca18c0c7880613bbb8ef7660ee864bbc6ae9

/data/data/com.sawtwe.dkddzeis/app_psimg/bottom_btn_cancel.png

MD5 d2135ade336215f3510780177806f569
SHA1 42ab579d5c377f0674fd749ce99efb20dd57351e
SHA256 790801d8fc1b026b2b1c919ee915e776a3bd77a231861d8cff5ce7812565096e
SHA512 741b4c2c730df14c2d9d61f3eb01a87fa06ef89e1c1b91da27b03c98a20ff7fe01fb47cd08234316abf597bec03ea3e4a770ff8799c9347ddd4e9e916e9f367f

/data/data/com.sawtwe.dkddzeis/app_psimg/bottom_btn_install.png

MD5 7f10a1d9c5e514050e22138d70d842ad
SHA1 2a58f5fb306f4f4d071b845baf84c0bb39ee4ad7
SHA256 e7758d23bd9ad789d81e7f9eef7e948a403609a4a28ba53d9b3124135ad796ab
SHA512 cc3186cdd32448ecd35b052b6aa7af6b189644611518f711bdf8ad1b29acab3c8a0e65fa736af500153ca281b1147e2dc005fa6799417799fc185ba6fd64fcaa

/data/data/com.sawtwe.dkddzeis/app_psimg/btn_install.png

MD5 dd18221de23603b78f421d0ba0f591c7
SHA1 c1806e627f1e71612fca6638e93894a00b092618
SHA256 aa4077aa3cc99ec30f27c07fcc11f8e8d48e5cf0cf786335c89a459a5a8949c3
SHA512 8aac08f0e222bfdf4d7800c90eafbed96ce47a93e71ec04234031da33b3aff981d3463a6fb8e66122d32848225fadb759e4c0b58f374873fdee2d9d157354e93

/data/data/com.sawtwe.dkddzeis/app_psimg/item_btn.png

MD5 c273f481a2774797a0f67a6f4a042bbe
SHA1 2858e907a559742835b1d820c8fc635ec5f7d094
SHA256 bb44dacdbda4803c00d0d7ef98376a2c3ad17d4c8b33084918a4986c744135ac
SHA512 75ee76ba31b62d0fbf0d17da7db4732664bf083e3848a1c38d82aca70d8fdeda54b3bef06c6df833fb9a4459c7789db2240dc886e52f2d82b50c464d505716cb

/data/data/com.sawtwe.dkddzeis/app_psimg/pcheck_n.png

MD5 1bbaeec81e97f3734c45574017b92488
SHA1 dc916c37bc512ca035adbf4504fad1a53ad1f6c9
SHA256 25db9414151862fb15fb24ec8530ecf1dd0c8b53664d2e153b042c24fc14e37f
SHA512 d630ba8b634d7ade563eda37b5c887ddc0582ff99346f19f6b1b933a8282a435cbe469f769788cdeadf35ee899f6fdb389222847eda76f3e101115901ad07675

/data/data/com.sawtwe.dkddzeis/app_psimg/pcheck_p.png

MD5 e0a4ce2b09acb7c9e83fc656348ba99b
SHA1 9713de8c7f8c3d8631bfe91a57738dc4627c72c0
SHA256 b41279960593d3a9212d4e3b34a712d957a809f6c0003f1c7b86445581d675f8
SHA512 ef5e23caa800f35cab588c5d0880727d7acb0ecfac1b274873ed313935d2f0f79e79ff72852b62e6956f7c1bb55de74dca75600b073002aafc498a9f5a9fd49b

/data/data/com.sawtwe.dkddzeis/app_psimg/pushapp.png

MD5 ab7f8efe5cc8cd8979bcc02000ab881e
SHA1 6e78655557838b3515a922aa7df1bf44f13ef567
SHA256 d749e36c1f6410195fa647b7b92137685bfe64a20b32e14283fe31217c4c3f77
SHA512 5410549889161c58e706e882befed71b2511f31e0196eaeb487fba4113f848e61110fe1b3edffd0318b010d9ff60179db861a4f55ed10c149c6aa6ec283802e8

/data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip

MD5 10155ae5660e7ef577319af5e6cba5ae
SHA1 a79f377e748cdc8df9c06dd5c80fc53091b58a58
SHA256 6a3f5b24f70297cf73e17f63e9598531291d4b37936b84eca84ef352b0668bbf
SHA512 b6cf92458b819fedb134d8a1e2341dcda010636712759c8e7371d36302fbacf0056c0082676e0bee0b57b50f0007a4482bf91c37aaa38953bed739ea5b7aa4fe

/data/user/0/com.sawtwe.dkddzeis/app_zxlk/bvfg.zip

MD5 93b6a61ecaafd12ab8db6b68b089b025
SHA1 4300588eb2560b7bf4769f3f4181a2a680cfcc33
SHA256 cc3aa41180455af632914b98213f7215a2f838170fac3f6c1adf82a82704575c
SHA512 4e2d3e4886d73131fab46ea2f5a002c2ce100b6a4d3cfa58bb133560f67a497c3551656a3a9974120e2698e4988f1999e3f88d368aec549eacb5069d9beff0f2

/storage/emulated/0/ddad/error/com.sawtwe.dkddzeis/log.txt

MD5 92740fc2a0caa66946eba95ec46b7ff4
SHA1 b137752b5f7e7cbe5a19ad9aaa683f388e8bb78e
SHA256 7f756b817bed82bb19d14de07d0a9535d56e82d17ce0e218ac2af260b1018e95
SHA512 f161a964bbb1914a29fd8bceaa691fa2ecde47656ee76e53cda359b7b2c65e328232687d6bf4ca6719fd46299dc1b334059e1cd57b79de108a11587657c34c85

/storage/emulated/0/ljk/capin/time.dat

MD5 b61b4b109a341257507460558b8c5210
SHA1 f2a2e63861f8b84452243cb76e886dac9d729091
SHA256 032a30905f743f2e4b861681b33fd53753fcaad42084a67a7de14cc7c3841252
SHA512 dc5cf62663496ede1221dbd15483ac30bbc79053a947c1a363ec1f7adb65960e3cabc5c80389605119ebac5da75b0a215b1ff7a8f964be8eedd94ac3aca26dd7

/data/data/com.sawtwe.dkddzeis/databases/lcdownloads-journal

MD5 8b057295cf4bdcf91aae4f67951c0a0d
SHA1 03d9e41c97387ce6e4c5286ef7da43a70f5471aa
SHA256 029bb00d69ec8e57df86cd2d7c8b460350086f92072de5b21a3ad17a619a7a77
SHA512 7b81c68ce5f6a8bc3d5adbc71ecdc276a9f4f69799b053ee0cd8f677d5ca32e92cad7a519937fdd45bb6f2aaf26850f4babdb54df6026709b2e0ef2725e7b49f

/data/data/com.sawtwe.dkddzeis/databases/lcdownloads

MD5 6ca4c80b6e0b32ca5f60cdc2d4b1bf67
SHA1 d939f62f7fe5db2e0f6df769f355074da992e3eb
SHA256 0ebbf2a00886478a3bd3ebc030e111137b755a16eb45b3f2a79f892ab9b4f134
SHA512 faf15a863636fb2f1f101598f7cfea1de0c2e28b27d9589d7e0fc17d918bf503f86de7119bb54d1f8a930c5933f0fc22a6e73a654169a31a7fd9d9f23e6b1dc1

/data/data/com.sawtwe.dkddzeis/databases/lcdownloads-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.sawtwe.dkddzeis/databases/lcdownloads-wal

MD5 a0af206dee0e311a6439c808ea483199
SHA1 3242ae4694b95d02a54817e560b9e96b901c9cfd
SHA256 6236b18dcf8dae5927dc77a9f53b29861f3b1f2ea314f74e57565af32b3c1b01
SHA512 8f86eb53ee01ebeddb860844b9d766b69cb64fad43931da6e9ebfd5a68d58b9d6a5f229dcacae9849b32f166aa464c142399809571f8f22d47edd769dd57ea6b

/storage/emulated/0/Android/data/code/ljk.dat

MD5 2b53b6b030d7bdb5da6ea0d501b6a165
SHA1 fa4e9e8d724d91963a3fa3def11790559cac11c1
SHA256 d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc
SHA512 dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

/data/data/com.sawtwe.dkddzeis/databases/vdownloads-journal

MD5 e5f054f6256a4a4c2f6a965663377c16
SHA1 49431e3e55b41b05c6ae739667cd0680dde074ea
SHA256 aa366b16cfe85d3480025d15c41d87e397934a4515472895826edf28ec6201f4
SHA512 4fa686d03825b9f047619b0b41f17e27eeaaa972121824698637e8a1c21c46bdb076a5f49766f4cdff632294bfb1e4b71523a517076a29710c142ffc084cb311

/data/data/com.sawtwe.dkddzeis/databases/vdownloads

MD5 b650c1704bf6f94436a2b78d4adaef87
SHA1 43606ea25bebab5890c054022d9f2a94fda1de78
SHA256 bd7e7e4d760df9b9af1630d8ecf631dd2eef401aff1f317ec4028cb0b5030a4a
SHA512 e00c2aadec473fda3dcd184d85de09fc7df3acd7a2089d88d659b5fd706ca5bcf7ed0738e0b53fa54496b0036547a9fdca9f1a687c0b94b08fd201de3ff4f772

/data/data/com.sawtwe.dkddzeis/databases/vdownloads-wal

MD5 0d04ee6cf0e39a28c09fbae2ea09f575
SHA1 b84508e6eddd18fc47ba9dfdb02467b6d83dd4fa
SHA256 5aa85334f0b92c0cacbbc444351d45550438ed132104f570bd49f37e733ad7b2
SHA512 b87a2f4367b8fa859ffad8f38deda35f4510a87c074012623cb7df31e84be615efad2f0f963276130c363c9c424584a743d1ec16f3e105065677166c54c6c8ba

/storage/emulated/0/Android/data/code/.vapp.dat

MD5 7e52531f68905443db7a7fa730f1bd22
SHA1 59b39a7cd74cc9034ce9a391f60bebc9ba85e25a
SHA256 492c39e044906a133f4acad3e79b8bbbe6ab6747b8deb090aaacba87c18b0969
SHA512 9355506155928a62ee5a9a3e4c07fd728e976237d17a89f757b4a026f4eb7ebda82b7e50a426528cec1f762be759bebe6f01a6c1561d8a003fcd5a88deff5fb6

/storage/emulated/0/Download/vgp/clearT.dat

MD5 44899825ce7afd438bb044dd35b3e4f3
SHA1 c2fea03a184ee715ea06d0b3a166cf0e52c8800f
SHA256 dd86bf20a21f2a1dfd405e177cb4b8e10063321fec39f2802637a56322888351
SHA512 ca8286240e1c553cef60568e6b0bd3e324f0fde5cb87381036bc50454fe3342c7de104c0af582d8f49e8e6c2e9d932b2f53446327bc41c40b1c7c901bb1f8070

/data/data/com.sawtwe.dkddzeis/databases/cpdownloads-journal

MD5 5afc761de82bb9ecf99f5b3983f6a395
SHA1 cc5316a2fe33a24ee87109655cc1523402388e7b
SHA256 edec315d7011e97ccdc52a1250b07c3e6a0ea2935d4477d418b1b26199a6baec
SHA512 0dc72b9cb3f253d0aece8e23a3e4d7daec8adba8c7052ab599f0f329dddc9c3d4d9f5a0bcafa9e9a31a29c7019af2a797bc1b40ec37187c978ba9c738e312a3e

/data/data/com.sawtwe.dkddzeis/databases/cpdownloads

MD5 816f2a491d08c9e99744ca6af5480aac
SHA1 c03dee200e8065d8b862fd7156d47e7f616db6c9
SHA256 6df36c5e602130fb1b3b84184eda66473a221410c6abb7a514ac938b9fa3de5f
SHA512 fa6a7c040ec08a12d250a53f53e86e1e6a6bd7e309744d5b517548d5dd7f660a7ac710c31d606923de11e1fd786418541cf41837d3d04bf766248ae17162dd6b

/data/data/com.sawtwe.dkddzeis/databases/cpdownloads-wal

MD5 9c275dd1c1978f9928025399b40b309e
SHA1 be6aba079a2653493b0ce737a0c03ca2f8523bab
SHA256 f338a62201c30097962da10d0963503520f865565e9d518a4fbe50b599d5a909
SHA512 d4ba9aa35b457f556c71898c54f37479cacccdaf141ae2fb7fb751eb6550f9320fbd43ea5be794823075db9c49e16b0f726eebf68c4670cf98b3470e1a539711

/storage/emulated/0/Download/cp/time.dat

MD5 d4ecf0bb1195e43fe9edc6e6bf5eff7d
SHA1 3583d85e4a4c3b4587a601a895c834b4875fbda1
SHA256 4bd5de8c3f9ea97885f56979fe50ac1add2cf5a180a55c51d2992c855842a38b
SHA512 6350d614290951b861f4fd7a4b6c21d3db099d7c3e99a5cd9784ff703c3388c5c09f3ca92282d6e29b0f7f8099c7f81e10c92e9a68cb83b2b0b2056e32085177

/data/data/com.sawtwe.dkddzeis/databases/sldownloads-journal

MD5 34624269a2d78fb5b7802c51dc6e92b9
SHA1 d5f30d3431ff99bfb63ca02c555bb1826708f364
SHA256 cb93b7a81f1567ad9e8acef0ccb7152f1cba39d0572cad7595990cfbfc9494b3
SHA512 4e2cc40c7519fb6edfdae6b1b6c7b531bb0c36927ccf40cf6ba048dd5a5507f17ca42e9e358aa90aa00b3bb9f36e27a6151ef97e3edc1267ca55f031af0436d6

/data/data/com.sawtwe.dkddzeis/databases/sldownloads

MD5 1e78f41ef578072d13ce93688d8d7af9
SHA1 63bc6efb3252d0bff61a493580eedebb28946e39
SHA256 e5eae21a038b284ee56907c37bf01c33876f6fdaa31b0d62f6783a75d667e6c0
SHA512 4376d5fad1ab8e8bc4ab820d5982a286a3f1d94a904dd380e01768efd2d19e226ca3132d136b9bf21951486b1890e410b726bcb7ccd5a09594b62a809b014dbf

/data/data/com.sawtwe.dkddzeis/databases/sldownloads-wal

MD5 7de555bb758b143e6bda1b732636975f
SHA1 8e32899a1a90158794218f161118b8a072df427b
SHA256 439f245a8aa624ebcc4389a3ea4e85be0849b87b5ba28dde03c439192b056454
SHA512 2baf93ce573c8a318712670da14c2ca7437114371e351f82e1ba1c3541b1adf14f29f5478934f403a42ea469e2297d17aa2b6f695ba6ce32d1484658decdc5d8

/storage/emulated/0/ddad/error/com.sawtwe.dkddzeis/log.txt

MD5 8dc116d802b0dc88b7b5b2ce3204d386
SHA1 ec87ee13f74a26f7596485a3c601e1848be15242
SHA256 d5c855106e16915b042674853bf1661df5d45e68ed8efb3112a236658d06c562
SHA512 fddd215329d2b3a59ea975c99fc2739f3bd2142c8488ec102eb4347058f5eb4c5a3061aff14b4d3af0d003e67a6bbecaff4f16d53fe3d29f9029162e6911fd91

/storage/emulated/0/ddad/error/com.sawtwe.dkddzeis/log.txt

MD5 fda7a43edc11ae36979ab3f670ab579b
SHA1 641d67842d44bc108563f28bd3680ae348a84ffc
SHA256 99c88946ee371196a49be5d6ab56fcf32a6ef6d71ccdb1879176e17f572dcd8a
SHA512 b109bc05fdfe59b25fb4e86a448862cc7687fdcd89fe45f4e30b32780161680dbfe262b10aa61cc9135c4ce09281f1dd11a4e68956125008fce564fb83696443

/storage/emulated/0/ddad/error/com.sawtwe.dkddzeis/log.txt

MD5 c2e624d6b1a26c432f34ad58acf8f9e2
SHA1 8bc5cca9c250ec597d90f6d38e302ce6ff991501
SHA256 bfac3c98da36ce61cc3863caf4ef8fc6a067ac71f2b40ce238f6aed24cca0aa6
SHA512 64026a698e1a08a7be0b0bbab5487f221a99e41d1c68e891f6ba5c2a44570aa610f215c5589fa79ad464cd5a47cc434f6dc1d4918f46dbbcfa8b0c38676b8c4d

/storage/emulated/0/ljk/dl/reqt.dat

MD5 50e029b369b00268aa9f8299659317d0
SHA1 be8c8bd687c79086d99e390611e685bff96f1776
SHA256 203430c3b0def8b18eae7c29af2d3b6fe6caf9a52126b46c0bce9afd45608d73
SHA512 5488d11ab3355ad4431c2e299b037112b9132f4b7ff460af78ff48ecaba1a89002b1e1c3a8b49ebd6bc8c474d87985457bc9405c70b94f23066303debbfa7407