Analysis Overview
SHA256
2a341703b9ed7bbd8f91d9a46857773996effa7346913ee66f90075fd6cd167f
Threat Level: Likely malicious
The file bb57dadf7fe0fa3c7dc37cc913af429e_JaffaCakes118 was found to be: Likely malicious.
Malicious Activity Summary
Checks if the Android device is rooted.
Queries information about running processes on the device
Checks known Qemu files.
Obtains sensitive information copied to the device clipboard
Requests cell location
Checks known Qemu pipes.
Queries the phone number (MSISDN for GSM devices)
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Loads dropped Dex/Jar
Queries information about the current Wi-Fi connection
Queries the mobile country code (MCC)
Queries information about active data network
Requests dangerous framework permissions
Listens for changes in the sensor environment (might be used to detect emulation)
Registers a broadcast receiver at runtime (usually for listening for system events)
Uses Crypto APIs (Might try to encrypt user data)
Checks CPU information
Checks memory information
MITRE ATT&CK
Mobile Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-18 09:59
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES | N/A | N/A |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
| Allows an application to read the user's calendar data. | android.permission.READ_CALENDAR | N/A | N/A |
| Allows an application to write the user's calendar data. | android.permission.WRITE_CALENDAR | N/A | N/A |
| Allows an application to record audio. | android.permission.RECORD_AUDIO | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-18 09:59
Reported
2024-06-18 10:03
Platform
android-x86-arm-20240611.1-en
Max time kernel
10s
Max time network
134s
Command Line
Signatures
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/data/cn.nemo.video/.jiagu/classes.dex | N/A | N/A |
| N/A | /data/data/cn.nemo.video/.jiagu/classes.dex!classes2.dex | N/A | N/A |
| N/A | /data/data/cn.nemo.video/.jiagu/classes.dex!classes3.dex | N/A | N/A |
| N/A | /data/data/cn.nemo.video/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/cn.nemo.video/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/cn.nemo.video/.jiagu/tmp.dex | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries the phone number (MSISDN for GSM devices)
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Processes
cn.nemo.video
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.nemo.video/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.nemo.video/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | 1.cn.pool.ntp.org | udp |
| US | 1.1.1.1:53 | sdkauth.hpplay.cn | udp |
| CN | 1.14.243.123:80 | sdkauth.hpplay.cn | tcp |
| US | 1.1.1.1:53 | id1.cn | udp |
| US | 1.1.1.1:53 | av1.xdrig.com | udp |
| CN | 116.198.14.34:443 | av1.xdrig.com | tcp |
| US | 1.1.1.1:53 | googleads.g.doubleclick.net | udp |
| GB | 142.250.200.2:443 | googleads.g.doubleclick.net | tcp |
| CN | 1.14.243.73:80 | sdkauth.hpplay.cn | tcp |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.187.238:443 | android.apis.google.com | tcp |
| GB | 216.58.212.202:443 | tcp |
Files
/data/data/cn.nemo.video/.jiagu/libjiagu.so
| MD5 | f0f9ef36b67807a253b5932f865eae7b |
| SHA1 | 6a8d66c6efa2750b54cb763f4ad044bba4154e0d |
| SHA256 | 646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75 |
| SHA512 | e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548 |
/data/data/cn.nemo.video/.jiagu/classes.dex
| MD5 | 6bdb8a6ae2e7080f11a78ebae416f259 |
| SHA1 | 107edddf6e930be10ac34a4da64b508f0f90a823 |
| SHA256 | e948e189fdb4b455b564209a2992b075d3d6457482ad23d9a5d34f33aefc6d9d |
| SHA512 | a88b6d143cda0e6812eccb269a6120c060d5d0030bc4b8c5e6c64d6ebb4bd713e068f1fbb63a393b984c9185f2e2cf5fb8dc341a6f8b2a6d15bf744c45fbeab3 |
/data/data/cn.nemo.video/.jiagu/classes.dex!classes2.dex
| MD5 | c75c8b35441e2c758c26784420d65528 |
| SHA1 | 3cc3b2d553acf10426e9a554878370aae93d1aaf |
| SHA256 | 381f7a1e8f6d0ca1e97bfecb7fcd68e2d10edf5b990a621a62aa448ed75688a4 |
| SHA512 | 3fe026fe8901ad66d9220209f7550440ecbd0be3f3ee0c9df21bc17f542a00e56902ceb5222040132e2a7a040e585158fd8bf92d7157e58b856451662443b0db |
/data/data/cn.nemo.video/.jiagu/classes.dex!classes3.dex
| MD5 | 9f570d08e489ab7baac6f0a2282391c3 |
| SHA1 | 8d0158c012f87deced934989760bce1e77e7412d |
| SHA256 | 9736f47d880b6ba1a30e3921c2796c54a82bd9116d79f65f75d51f34491be46f |
| SHA512 | 89793409caa7de063f42b07ba327ca193cc3876e5aa4e738e926e7d4141b70cff6ad2139fa97076369d95734c6758f3c011bc622ba474f5db5fef8dbf0c0ecfb |
/data/data/cn.nemo.video/.jiagu/tmp.dex
| MD5 | f1771b68f5f9b168b79ff59ae2daabe4 |
| SHA1 | 0df6a835559f5c99670214a12700e7d8c28e5a42 |
| SHA256 | 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939 |
| SHA512 | dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d |
/data/data/cn.nemo.video/files/.jglogs/.jg.ri
| MD5 | f7bc4918c40bacc811a3952104e6f3f9 |
| SHA1 | bf2963dc4508e123d51af8990be45b43918c3a8b |
| SHA256 | d0dc6345709523c671b806b7e23e7c1c3616353af786f7cc76c1ddda5956155f |
| SHA512 | ffe43402a5f80418165a0fc3b13688dc36baa6c45918489a75114c22f41d0cc7d4206aa5ffaa4a56e8eaa511c78be3da7538550a90c858d89bb9322e3aec0e40 |
/data/data/cn.nemo.video/files/.jglogs/.jg.ri
| MD5 | bd35185e77531fbb4617d61879c76d59 |
| SHA1 | 3de1b46a911ae928c3fdeff83e64773269d10e6b |
| SHA256 | 0c147f8b67c53c69270cd45e96390ccbd97ab33792c230fe5b602910d7c732bc |
| SHA512 | 91c521dec94ce2616f042ade62688b8b3c2a1c897156ffb783ae424b11f4c291dfc26d9737cd74dc6b1a2e60f88988b8cb05c590cf3278aca537f780d60acbe2 |
/data/data/cn.nemo.video/files/.jiagu.lock
| MD5 | 746467234bd4a46f9b19fb2db9a136ac |
| SHA1 | ccf366a166cdce24a28f65c2da01295ed3f668a2 |
| SHA256 | 169f6b8ac05ba555ae8fdf20258b2396096268dd283fd45226c64e44877adf75 |
| SHA512 | 1c2b858fc2953a23437fb136b6c9cca55f09f8789accf042990a747bba108ede4393930deda59ff697b318fd8aa86c9e58ea9492ea8ec504489a106ae8442a63 |
/data/data/cn.nemo.video/files/.jglogs/.jg.rd
| MD5 | e9dd5724b89823f0d18fe0559da47015 |
| SHA1 | 4255013aa9c6f2ce471d54f3e75d6e234b0760d5 |
| SHA256 | 6933ff556876c098ec931a83192d924bc47ad9b7cde221eba40a401cdfcadb99 |
| SHA512 | 7de25d23ef036aeae8f32e8255639730e58094d3908ce4fbba38d681aa02f40356a8036845f0a916cc8824f6bc3e2e1675d71ca006f6fb21dfb0429e0dc3a1c4 |
/data/data/cn.nemo.video/files/.jglogs/.jg.store.report_pid
| MD5 | 58abb42959f81635e0633dc003aeeab8 |
| SHA1 | 8f1b845cc7153a04536ae5389a30777fa5c201bd |
| SHA256 | a81b9386a1288e9f5188b9ef09835f15f26de198f13dd186e373a87d724bf8c9 |
| SHA512 | fcea0cd494d54453d268fefff606264b87f29c553593b74e90d86f2a7219f4d7b7b1130c62360030fa99170a628a4bce71746fa5ccf1e7a0bf52f60b5a06c938 |
/data/data/cn.nemo.video/files/.jglogs/.jg.ac
| MD5 | c827813d03100a06126d2c96c281628c |
| SHA1 | 80b891050eae61521e51245b39431e2f4b560355 |
| SHA256 | b10695dd25e6dfb188e5987930b68b4de6f82de38dd5ee0d1757024f87e8fa34 |
| SHA512 | 9c36308db5cc11be1ca631a8912c6720b791d7e155fd51c8a0e51da3df44c26b7cd865143a5f2a3e82ecdbc96c84fe3ac98947e1fad88e89b1ea9196dbadd3fd |
/data/data/cn.nemo.video/files/.jglogs/.jg.ic
| MD5 | 997c17c78b8044e1f246e94b177fa433 |
| SHA1 | 202d324da949bb65d90b4c269338735bb8148ed8 |
| SHA256 | 83dc5a3b75b6aa9826ef48b760910f0a0b5388f9aadb98b11521e345e5d27d2b |
| SHA512 | 555cf6b2cf404189668d21866668da76fb3f17de981744cc2298a9bef40d74d5a7e621301220624a62f2b2df353046e8378b3a1c640f5197bcbff8a696792d94 |
/data/data/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 065f344ce9fa043ad436fc4e3f6232e2 |
| SHA1 | d463acf6a6b516e187c6eb7211dcda3084e2e15d |
| SHA256 | 647fa01d1531536bed3a1dba8914df097300d76fe856be4c330706231c750328 |
| SHA512 | e23ff6f9f73ce2cab055268e0cf1c2e6576aceeda10f32ea94beb764886b5653b06a66d0aa7937b38b65360b8b52ee6deb3f7df42cf7b212a1f36dea4f952519 |
/data/data/cn.nemo.video/databases/bugly_db_
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/data/data/cn.nemo.video/app_crashrecord/1004
| MD5 | 87a750ded08309e398aa58e5fff7cb3a |
| SHA1 | ecc4d1ffd2f89ac04fd4e7209236f76ab3cc0220 |
| SHA256 | ddd912705b726a4b4f7a5fb2c59f6e548968f6c86aba2de11a3ea6c84f75e86d |
| SHA512 | 940b0f178f0f142af240bf619f5f27d0b0a50e7df481db9edb093270c2b1456ca721b82ead556e6971542cab61ed4dea6d239db695b989398b7b7907540d5c88 |
/data/data/cn.nemo.video/databases/bugly_db_-wal
| MD5 | f5429f48a4fae354089bef25be48f66b |
| SHA1 | e80c69e3333bfe5cde455cf98c79ce8500178d6e |
| SHA256 | 7eaf7436c31816dffc0c5a113928e379f7574fab48750aae2751c503faf122b6 |
| SHA512 | c638800fec82e7c6d4b1e8c2dafddad26033acf678628e2de99a234fbf7fc7b867c45972f47e0b7915fe43c8110efdaf50650323e047016978780b46f797e1c0 |
/data/data/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 2b440a80e43498ea014f805970ae1c71 |
| SHA1 | 77a656d0200f367913d05b17760d90c458a15a2d |
| SHA256 | fa3dcd1ef6d7ca858c774a9472ee8000971ea4da62b2399a064e272c6b166330 |
| SHA512 | a583d729a6b9aba9a79a9de2724f2b9223b6157646b5fd25dc8500719ba82dfb9e8b99b4322976ab56e161bcb931d7ebba56f84aaf9970b2d4f0dd9de275d073 |
/data/data/cn.nemo.video/files/TDtcagent.db
| MD5 | a64ed0db240d3914f2690223fd92d8ad |
| SHA1 | 05611a85274356de18c74747de7f30df7f286ba1 |
| SHA256 | a0a6b263087fa8fb9d8d85ace11c0391b7cf399da8b4471c62c8b05cab975813 |
| SHA512 | 2ea50db3f02da45df15f983b0edc5ff060468f250293d09bd1bd9cb5ea37cf282a57cb69cbb6638dfbf5a161dcb002438895449364b636fa7849e5cfc883da13 |
/data/data/cn.nemo.video/app_crashrecord/1004
| MD5 | 0d210bfb2a0e1f1b4c082a6a0f79de07 |
| SHA1 | bb8ed9e364db79d1d9f2fcde3f15091893222faa |
| SHA256 | 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d |
| SHA512 | 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1 |
/data/data/cn.nemo.video/files/TDtcagent.db-wal
| MD5 | e4af7ae316831d5524a64386b5519cc1 |
| SHA1 | 1d190f77486909d595373ffe73a641845c0317c3 |
| SHA256 | c2ec9857d7e319a456edc2205971283ab9248fa0dfc77dc8d4914f7fc0809ae0 |
| SHA512 | dd1ab8bf85abc681791d0d8d18a1d2a8c498b311c25b4407c329cb21daee40d5277c46808c4379498e450f14be37a697bd9b08757e1e569f9220a20afac4a2b5 |
/data/data/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar
| MD5 | 60676ddd81ca171fe877178ebc276785 |
| SHA1 | 8b215665227943f07fa57d39c096c1c1e081b57a |
| SHA256 | 09f41bd9b4647e87d2886cdaa6d6bfe45bcd91ae8e80a73907cf74e11f41a7c5 |
| SHA512 | 35a4941fd0343b5ba6060fca872e5c110107d13a37ae223ae90930abdd94ec545a7a3f0a49604807132e7e455a8c022dd2339768f07e3b817456a96461fdce4f |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-18 09:59
Reported
2024-06-18 10:03
Platform
android-x64-arm64-20240611.1-en
Max time kernel
48s
Max time network
179s
Command Line
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/app/Superuser.apk | N/A | N/A |
| N/A | /sbin/su | N/A | N/A |
| N/A | /data/local/xbin/su | N/A | N/A |
| N/A | /data/local/bin/su | N/A | N/A |
| N/A | /data/local/su | N/A | N/A |
| N/A | /system/xbin/su | N/A | N/A |
| N/A | /system/bin/su | N/A | N/A |
Checks known Qemu files.
| Description | Indicator | Process | Target |
| N/A | /system/lib/libc_malloc_debug_qemu.so | N/A | N/A |
| N/A | /sys/qemu_trace | N/A | N/A |
| N/A | /system/bin/qemu-props | N/A | N/A |
Checks known Qemu pipes.
| Description | Indicator | Process | Target |
| N/A | /dev/socket/qemud | N/A | N/A |
| N/A | /dev/qemu_pipe | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/cn.nemo.video/.jiagu/classes.dex | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/.jiagu/classes.dex!classes2.dex | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/.jiagu/classes.dex!classes3.dex | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/files/plugs/qy_rx.jar | N/A | N/A |
| N/A | /data/user/0/cn.nemo.video/files/plugs/rd_rx.jar | N/A | N/A |
Obtains sensitive information copied to the device clipboard
| Description | Indicator | Process | Target |
| Framework service call | android.content.IClipboard.addPrimaryClipChangedListener | N/A | N/A |
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries the phone number (MSISDN for GSM devices)
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the mobile country code (MCC)
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
Listens for changes in the sensor environment (might be used to detect emulation)
| Description | Indicator | Process | Target |
| Framework API call | android.hardware.SensorManager.registerListener | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Checks memory information
| Description | Indicator | Process | Target |
| File opened for read | /proc/meminfo | N/A | N/A |
Processes
cn.nemo.video
Network
| Country | Destination | Domain | Proto |
| GB | 142.250.187.206:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 172.217.16.234:443 | tcp | |
| GB | 172.217.16.234:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 172.217.169.40:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | 1.cn.pool.ntp.org | udp |
| US | 1.1.1.1:53 | sdkauth.hpplay.cn | udp |
| CN | 1.14.243.123:80 | sdkauth.hpplay.cn | tcp |
| US | 1.1.1.1:53 | id1.cn | udp |
| CN | 1.14.243.73:80 | sdkauth.hpplay.cn | tcp |
| US | 1.1.1.1:53 | av1.xdrig.com | udp |
| US | 1.1.1.1:53 | 0.asia.pool.ntp.org | udp |
| CN | 116.198.14.14:443 | av1.xdrig.com | tcp |
| US | 1.1.1.1:53 | android.bugly.qq.com | udp |
| CN | 14.22.7.140:80 | android.bugly.qq.com | tcp |
| CN | 1.14.243.233:80 | sdkauth.hpplay.cn | tcp |
| US | 1.1.1.1:53 | is.snssdk.com | udp |
| GB | 79.133.176.224:443 | is.snssdk.com | tcp |
| GB | 79.133.176.224:443 | is.snssdk.com | tcp |
| US | 1.1.1.1:53 | googleads.g.doubleclick.net | udp |
| US | 1.1.1.1:53 | i.snssdk.com | udp |
| GB | 142.250.187.194:443 | googleads.g.doubleclick.net | tcp |
| GB | 79.133.176.224:443 | i.snssdk.com | tcp |
| GB | 79.133.176.166:443 | i.snssdk.com | tcp |
| US | 1.1.1.1:53 | conf.xdrig.com | udp |
| CN | 114.67.244.173:443 | conf.xdrig.com | tcp |
| US | 1.1.1.1:53 | ad.quwin.cn | udp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| US | 1.1.1.1:53 | rp.hpplay.com.cn | udp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| CN | 47.99.142.202:80 | ad.quwin.cn | tcp |
| CN | 106.2.6.50:8866 | tcp | |
| US | 1.1.1.1:53 | ez4q2.cn | udp |
| CN | 112.65.70.244:80 | ez4q2.cn | tcp |
| GB | 142.250.179.228:443 | tcp | |
| GB | 142.250.179.228:443 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.179.228:443 | www.google.com | tcp |
| CN | 14.22.7.199:80 | android.bugly.qq.com | tcp |
| US | 1.1.1.1:53 | api.km6868.cn | udp |
| GB | 216.58.201.110:443 | tcp |
Files
/data/user/0/cn.nemo.video/.jiagu/libjiagu.so
| MD5 | f0f9ef36b67807a253b5932f865eae7b |
| SHA1 | 6a8d66c6efa2750b54cb763f4ad044bba4154e0d |
| SHA256 | 646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75 |
| SHA512 | e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548 |
/data/user/0/cn.nemo.video/.jiagu/libjiagu_64.so
| MD5 | c26350f8b4709f13c7adeac3c1ec791b |
| SHA1 | 0d773039deffff4f2bcab5cbc2ac04c4a2e7de9f |
| SHA256 | 947093725142dabf77b01a8c9020312dc4544403c0a86e8a55d0174e6808e87f |
| SHA512 | 56a1d1b7255a311317757850bfc7f5b4e59333c386f1b17555a2f03090a5bd5db66b6da2c59e90ed674f9bba1c991956877b95da8d2a75fcc1b8f3f6b9a979be |
/data/user/0/cn.nemo.video/.jiagu/classes.dex
| MD5 | 6bdb8a6ae2e7080f11a78ebae416f259 |
| SHA1 | 107edddf6e930be10ac34a4da64b508f0f90a823 |
| SHA256 | e948e189fdb4b455b564209a2992b075d3d6457482ad23d9a5d34f33aefc6d9d |
| SHA512 | a88b6d143cda0e6812eccb269a6120c060d5d0030bc4b8c5e6c64d6ebb4bd713e068f1fbb63a393b984c9185f2e2cf5fb8dc341a6f8b2a6d15bf744c45fbeab3 |
/data/user/0/cn.nemo.video/.jiagu/classes.dex!classes2.dex
| MD5 | c75c8b35441e2c758c26784420d65528 |
| SHA1 | 3cc3b2d553acf10426e9a554878370aae93d1aaf |
| SHA256 | 381f7a1e8f6d0ca1e97bfecb7fcd68e2d10edf5b990a621a62aa448ed75688a4 |
| SHA512 | 3fe026fe8901ad66d9220209f7550440ecbd0be3f3ee0c9df21bc17f542a00e56902ceb5222040132e2a7a040e585158fd8bf92d7157e58b856451662443b0db |
/data/user/0/cn.nemo.video/.jiagu/classes.dex!classes3.dex
| MD5 | 9f570d08e489ab7baac6f0a2282391c3 |
| SHA1 | 8d0158c012f87deced934989760bce1e77e7412d |
| SHA256 | 9736f47d880b6ba1a30e3921c2796c54a82bd9116d79f65f75d51f34491be46f |
| SHA512 | 89793409caa7de063f42b07ba327ca193cc3876e5aa4e738e926e7d4141b70cff6ad2139fa97076369d95734c6758f3c011bc622ba474f5db5fef8dbf0c0ecfb |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.ri
| MD5 | 9bacae80b44c2d5aefabe521d5013d5b |
| SHA1 | 89fbd6fb66c1dafe6238d730c95d2066d9b21d5e |
| SHA256 | 35c541241938ec6d2123ae36b12315d94381912513352f91457dd90daa5800b4 |
| SHA512 | 025679f6e5352955ba785485673fdac95ff9b4b203ee750852d2464530fe475b5e3f2a7da32415c15b47c2e6ead95bd1eaea2cb59ce20c3832496c286425bc43 |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.ri
| MD5 | 594de2715a5faaba3df4fb3674fb7325 |
| SHA1 | 017ea87056dd4822d254827c446f407013fd0f48 |
| SHA256 | a512d8922355ba81047ae2a560f7d86cb6103456b032e71d22a11e028f3ab9dc |
| SHA512 | 09cf96218da31a6560bee73505105cbabc8d8caec2af758dcbb83d9759ed62aa930933e2333cca203947e0cffe4231eeb1dadfa76748cf291e77ce4c1425f8f2 |
/data/user/0/cn.nemo.video/files/.jiagu.lock
| MD5 | 6bf46030039a8f9efdbdeb792bb272cb |
| SHA1 | b8937cfb48e224780848fb6386c5e4672726b059 |
| SHA256 | c5e3739570d122a7af53fa677d404e9c9483301cbf10596739383baa53cc7458 |
| SHA512 | 3b889726444a72728f8fcb4011ada3134f8bff1d4dec0992c79f38a89cddc55dcdd5bc97ecf976100a4d35491e9aa64d5f0728dbb06a6b58b216d666887a18e8 |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.rd
| MD5 | 7e93b565ddea5a6c1c225e18ee7a75c0 |
| SHA1 | 5090aeb61a22e77abc4220fd81769b75c00c5858 |
| SHA256 | 82d7bbde0a93aaffc92202d667553cb88c558ab0a79a5f4657e36cc9bc8a952c |
| SHA512 | 012e5d29f5f0869b0440542ab46e8d40c75643763d1c839c17d9ea74dd4cd70e3de48b8d6ba32928e201626b0ceeb982b571388e4aab58cb27384fda22781326 |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.store.report_pid
| MD5 | 58abb42959f81635e0633dc003aeeab8 |
| SHA1 | 8f1b845cc7153a04536ae5389a30777fa5c201bd |
| SHA256 | a81b9386a1288e9f5188b9ef09835f15f26de198f13dd186e373a87d724bf8c9 |
| SHA512 | fcea0cd494d54453d268fefff606264b87f29c553593b74e90d86f2a7219f4d7b7b1130c62360030fa99170a628a4bce71746fa5ccf1e7a0bf52f60b5a06c938 |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.ac
| MD5 | c827813d03100a06126d2c96c281628c |
| SHA1 | 80b891050eae61521e51245b39431e2f4b560355 |
| SHA256 | b10695dd25e6dfb188e5987930b68b4de6f82de38dd5ee0d1757024f87e8fa34 |
| SHA512 | 9c36308db5cc11be1ca631a8912c6720b791d7e155fd51c8a0e51da3df44c26b7cd865143a5f2a3e82ecdbc96c84fe3ac98947e1fad88e89b1ea9196dbadd3fd |
/data/user/0/cn.nemo.video/files/.jglogs/.jg.ic
| MD5 | 997c17c78b8044e1f246e94b177fa433 |
| SHA1 | 202d324da949bb65d90b4c269338735bb8148ed8 |
| SHA256 | 83dc5a3b75b6aa9826ef48b760910f0a0b5388f9aadb98b11521e345e5d27d2b |
| SHA512 | 555cf6b2cf404189668d21866668da76fb3f17de981744cc2298a9bef40d74d5a7e621301220624a62f2b2df353046e8378b3a1c640f5197bcbff8a696792d94 |
/data/user/0/cn.nemo.video/app_crashrecord/1004
| MD5 | f5ece0c8c0d053c7e254f596a6d67983 |
| SHA1 | 85886fc96a7663729f0b22762b7138583070360f |
| SHA256 | 162c3b01ca35156cc27236e1b77b0392ba7e39044dd412f2784806956771f788 |
| SHA512 | ce281917009292d71e5bd4bb5888126040a2ca15318ae138d448ce399b512fd357eadb29d196c80af8d794d7617bb088bb37125dcb6b92016aae485a05201f71 |
/data/user/0/cn.nemo.video/app_crashrecord/1004
| MD5 | 0d210bfb2a0e1f1b4c082a6a0f79de07 |
| SHA1 | bb8ed9e364db79d1d9f2fcde3f15091893222faa |
| SHA256 | 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d |
| SHA512 | 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1 |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 5d293a63dbe76bedeafe863d84e35161 |
| SHA1 | 83a6f885ba3cd3f827bc454140f106848d885d01 |
| SHA256 | e71bfc61c8f46b2028c89ca8638c3ee4dd51d08777d5b185d93a6a627b73a99e |
| SHA512 | baaa0cd655955fc89e574381504ed36e54f6614afb64bb9b78bab5ee3c0e3f629055640f0e6180b65dc199aacfd95875bbe4e04b6cd36f3269b91351ee7ba164 |
/data/user/0/cn.nemo.video/files/TDtcagent.db
| MD5 | f382a52cf8568b9cf2673ed5ef041014 |
| SHA1 | c507f0a1052262ad5eb828b64190bd0422cfd76d |
| SHA256 | 978e10b07e91ca29ede5c387dfd9e501a19cc5a02675196d716962e7697de695 |
| SHA512 | d3c06ea93abc8226595452003d40d66b74697a921c74c87f5a0e22f31f27e842a85f9572d8a372549154feb6b564dedb516443faf02f6ea025db9aee5455fabe |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 5b0332892780c711001ca95544e2e8c5 |
| SHA1 | 5f1307c15cd0e24b44830854617fe74b14ee7412 |
| SHA256 | ed1f36b49f1e1dcb2bec4831b8d41777972e5fef2c7662bf2fe41aad23d930f8 |
| SHA512 | 51365844c39ec83cea9ba3959fa04d434eeb109b6d3f25f84db6b86bf17b69e5f90bea74b22df93af3524e2efad3cb1e077d0a831aea8863c34195e7569986c3 |
/data/user/0/cn.nemo.video/databases/bugly_db_
| MD5 | b590f094b09c1d3f0226565415d1b4fb |
| SHA1 | 46023a4b6a5565f21e17290a34d386b2e3f7e93a |
| SHA256 | 60e06fbc870410a5141ad8064898486883f4ec48bdde07cdf91bde059a1faa39 |
| SHA512 | 7a2e3ed176cd14344c439652a95f743a505142dc72ffdbf0f18546129a11eb2d68751201d6655b9b02ab49b3fbe4076f198d1f7bda67065c8b161810b24152f3 |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 8cff2b1630f05b4b9b6415a2a7141301 |
| SHA1 | d6f72df5f9ddd422fe3bd1cb58df2f4209ed7944 |
| SHA256 | 5e4798a725ef4fdb716e845a98f8001b6c5c413f10cbf0e58b39b0ca5b7a368a |
| SHA512 | f75ee383ffbfd3ec33becddf23cc217f182de2a0f7e2774b1fad9670ba2fa98045f89bc31f81c198467bf1d41da3e65102cd849f8f50cf1efa4d3abbb1802e06 |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 64c1e73d4fff96c4f6dbcfdc4065b351 |
| SHA1 | b1eb1d170df1e3b6f059ab77413d42105049d542 |
| SHA256 | 55a2f11a786662b65bf3a4b8d9aa00723865c73fb96b3f38e6e5751f634dc441 |
| SHA512 | 981b16d31c15b632dfb25a3c4b239bb1089a3bb9ce4c0e236f3b06407e909d4a107c38a4506cf62baaf284bb0a0c1b7dc8ad53719095c894a5ff652e0fbea047 |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 4c6a40081517bc610cd79de8713f581e |
| SHA1 | 9c477dbdaeb4b643f579100d9b2a7f452e2b3f34 |
| SHA256 | 6af25f77b315b758af37d69f4b6aef79b341629795c02c157a87a8701a8de764 |
| SHA512 | d37773b81720a374f9c9b58290acda6a4497a1003bd04937be87439bb31e1fa7b7360d7acf918393a1a9c851d864a3d354f810d063590e11ad99c44377afc4ee |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 30a8036ee19a1fb0a59775dbf81ad99e |
| SHA1 | 7f0103419899ff7c1d23f495be37c76b552371c1 |
| SHA256 | a7259dd5e5003713481dc219130e3a8407ed982a5d9af8d0e50f513d9fe43347 |
| SHA512 | 7781ab4bae389539cbfc5a555e7e67b642b4f27bbdd358f6918ce56034306db96091bfc9c80ad46a10da9ee222b4c06f45073e8eb5b5b19217d4d428e95f7475 |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 26d4ccfe95bddb113be386a1b47a89cf |
| SHA1 | e6c7872456c0caa4d1dc9ef4a3143855883a5c32 |
| SHA256 | 2aabf573a9ac4a4eb54796821715ba725b11d413b2eb8a717c0565e7359e69b1 |
| SHA512 | 1aa0d82512f14468b08ca84dd84fa262058abfe7d23fb090aaba1605f74ce4601ec1c8325f8c2cbb89b2775015138c982993fb03b2db8bdf37209673351409e2 |
/data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar
| MD5 | 60676ddd81ca171fe877178ebc276785 |
| SHA1 | 8b215665227943f07fa57d39c096c1c1e081b57a |
| SHA256 | 09f41bd9b4647e87d2886cdaa6d6bfe45bcd91ae8e80a73907cf74e11f41a7c5 |
| SHA512 | 35a4941fd0343b5ba6060fca872e5c110107d13a37ae223ae90930abdd94ec545a7a3f0a49604807132e7e455a8c022dd2339768f07e3b817456a96461fdce4f |
/data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar
| MD5 | a2ea137e9af9525308cd4191392a8cc8 |
| SHA1 | 8fc27bd1f60e967066032ba7fdd5c9596b1e7327 |
| SHA256 | a912da000f86e1a24732dc9783db1638a6041955800f595ac0bae83c29cf4ec1 |
| SHA512 | 0bc50fc4c913e3fe7a78936d6860566d5fad0d721c99120c39e7cd8629983a6d41768a5f99f8b9f61a23ea647ffa64492084bcd0daca9837d5ec6685dcc54d3b |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 3f118e88b58d7a9ea81fdf2baeb9d341 |
| SHA1 | 3149ef5a57e5e28723df532cd29a97d134389c07 |
| SHA256 | 1c8ac9507901dbb1130d48d2ba1a26bd2852c7bcded35714ed772d1c9950f39d |
| SHA512 | bf8a2ba9d57b5e13c870c7ad53818221d160dc6501def9a481928dd4197705a82f5f77715cbb8b3c085a0dfd643e605a23704ef2acd074601745551db1483a37 |
/data/user/0/cn.nemo.video/files/TDtcagent.db-journal
| MD5 | 08a9b3cb961551cab63a1a69956a608e |
| SHA1 | 948ea344c871ed1be0ca4f4047d117ec532a3bed |
| SHA256 | 0d28b2a03c2f9832d22ab456ce1134c0b7b78f0ec28a6b14294b7f25eaf41cf2 |
| SHA512 | 572e03702c2c371dc90c5ecf5c46b1e99179f6788d05dfbb79a212a59d845f159a28fc68fd290c652ea10971a3d90c7228bf01b6e0b360a44cfcfa928d95e547 |
/data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar
| MD5 | f4684dfb35fc0f653818fde3bd690a59 |
| SHA1 | 1f9b58fab12be5de7f7be04cb2d7261804527fe6 |
| SHA256 | 5694fc379fb421bc2043cd0983c541b6c725707576517f16a211f406114d66a6 |
| SHA512 | 163bbdb19f3cf5cdd3fc5d788a517fa18d4f822f92394aa4c43e3f1bcbfa6f85bdb6d8c1dc0b4580b25f60c0d190aa15fc9552aaf07fa7ec4b68d726e6bc5113 |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 217d32fe00a155a15f70a0b26a3673ac |
| SHA1 | a64538d4301a28b6408b30b139365494c1966dc7 |
| SHA256 | 8620f4fa7eebda75cf5145ed37f71dfe89a89e7304da85aae289ff33694835c3 |
| SHA512 | d3260c4868844943e18d0d04ed58d54359f302bae927f608460fa298b2834de50726429c5d46b7504bf92ce26e7754f48d7d2abe00e7a64abb094f079bcd281e |
/data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar
| MD5 | 7dd54da18e374951d02257dfb5497d13 |
| SHA1 | c5360fce48a8ee766efa47dbd400fed121c18790 |
| SHA256 | b3c2f314207f21870873ddf0ab3083429444397dc3a6785aba88d5b3ebc9c0ce |
| SHA512 | 410849331271af51fa6351e71b74c1b36916cf1e546aa83d2a0aeb77784012b41a43d3acd9ec5e4487fc95c59504a1c64c81c91f6813803e374dc29623f9360c |
/storage/emulated/0/.tcookieid
| MD5 | 180289282d6157acf328948c994a16a4 |
| SHA1 | 24d220c490d4223f848ad6e60f71d0bf305f990f |
| SHA256 | 133889e21310102c5d0284a536c5542ee981e5dfed1716672edd9ca36e7d9303 |
| SHA512 | 212cdcd1286638763a81eb72edb912caffec66b56d793927a716882337339323108177ff25df7d3d200021481dfa7f3e06c5c881cf1e07bd619e08c25298f9e3 |
/data/user/0/cn.nemo.video/files/plugs/qy_rx.jar
| MD5 | 1d09446939012b63fe8c234dd7bcde2f |
| SHA1 | a2d05fb0688c5190027eb6cd5419f01fad1c0f9b |
| SHA256 | 08f6c7d75c11b04ed096fbe434ff5535747ba183325018320a8b628325fde358 |
| SHA512 | 10a8826c54d3ada0242879c9c3ad9b78fc3161ecfdae52fb65e12e6439c49310daf07c9fe07932d0986d087c2d64198002153f5be951c80e471ead5fc5f1350a |
/data/user/0/cn.nemo.video/files/plugs/qy_rx.jar
| MD5 | ef49957529c6b3d540ef9f396d77690c |
| SHA1 | 6d05848cd76908e4915400359613b17db1e7a12c |
| SHA256 | b4b83a381f35fecf3dad1d8b53255bbfd8a17f0327079799bcaac615dd4273c6 |
| SHA512 | e58d524b78971218480bd68a230aed0d6e1fefbb34e1e00dd4bb8d105b62558461523274dc12d8c85f112858b8ec8315cf1556cc27a645bc01eacd0ca282fa4e |
/data/user/0/cn.nemo.video/files/plugs/rd_rx.jar
| MD5 | 55eff9c5a10d76dc628cd56e84600b3c |
| SHA1 | ab7d07ba5b42a9871f48da6bb1fb47ca39e4b05f |
| SHA256 | 630535a46f2e198a255d92398631e1ec3665e72a4f71d34c9e0258adf42b0ec1 |
| SHA512 | 26b68413612e6b6c942f54b2c042f5a2699e7a9953e43fc21d64e3476b128855cd0219a825ad3e3c518bddca468a03787859df89ce65006c0e7b876eb6899142 |
/data/user/0/cn.nemo.video/files/plugs/rd_rx.jar
| MD5 | 60d14559ff189148554dd71a3185436d |
| SHA1 | 76d63e09a33db9abc628c21937810e6c1142c946 |
| SHA256 | 543056c991dbe3bfd0ae71f9c8287628f2fd79caa5946277832231ecf4054ad0 |
| SHA512 | b1c9da42549c9cb5215d080224c4efccd31b669830d7d830ee797193f937304b9e1c3ecaeaa6c168cceffb4514d2adf2bebdd38b58ae5357d68209e093542420 |
/data/user/0/cn.nemo.video/files/gdt_plugin.zip
| MD5 | de1bca9b11af69d7c05cd14cd6ca0d31 |
| SHA1 | 9bb5400e03f8f3a152cfd99da458520ca269750e |
| SHA256 | 707f1acb77ccb3a758b60394df0de659367bdbfe13c50e60d312edbfbfab695b |
| SHA512 | df3cbd76812d5ff5905e0f9f3d5ae985701a1003fb7f69bac15fe80f8283173c676377e6fa8491b7e06480989f6622cfce0f2a1baa72137b8b1cd4a80ba6ceff |
/data/user/0/cn.nemo.video/app_e_qq_com_plugin/gdt_plugin.jar.sig
| MD5 | 0fddd6bed2bbdb1d9e283824f83e8e8a |
| SHA1 | 7758b58ab7b52810e09ed2d725cb959d1bfb2ead |
| SHA256 | 4c8ac02deacf9ab7a4ea1ab1d237ff3d4cbffb30b9ae13c5057323b578e124ef |
| SHA512 | 3a6d9d4899b241e10ae06e72ddabc1560efb1891dde3f497be18448ae8c9dfc2911a59b3820a3e6a0d21507ebf0793b6ad0da829a2943a2f3b78ada730456507 |
/data/user/0/cn.nemo.video/app_e_qq_com_plugin/update_lc
| MD5 | 41bd2262f893325edaefbd1bbab4537c |
| SHA1 | c25221d899e5464429e354d0042d2291cdd5177f |
| SHA256 | c5c041820625b9ce0544b3cae7d9e171324060f8a0db5a485bccfa433db54cc2 |
| SHA512 | ba107dfe2af0472d35f1c6e28a0e500e59a54a2be010ef69c4e86cb0b2f4614786a64e6c4f59d028eaaa07b9e4342118e5d7632c8d76ace590b3bf1982687451 |
/data/user/0/cn.nemo.video/app_e_qq_com_plugin/gdt_plugin.jar
| MD5 | a20b450b9eddfc89b600595f52e69835 |
| SHA1 | 8fac99e31e63859f9779ce28e526b7a7bd5e1033 |
| SHA256 | cbece95c97f4e62939f1623c2cbdd9c3271a6600d35d756a0cd9795bb264b690 |
| SHA512 | c135b78fa9105bcd61807c52fb3bee327bf000b8d88676be69f6128062cc53fcb2ebb866e8cfabfb2afb3fc96b06ca9394bf60648eec7e783ecdb7862bd45a59 |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | fdc84f46d9f7973817a8b3ae88521a41 |
| SHA1 | 1fd49a40be6843efa45cc79517677a716c992d01 |
| SHA256 | b31c656ee58dbcbefd5586ec402439c622a58070242d4b42055c4181d16aaea7 |
| SHA512 | 230b4bdda1c2088211505de5d0d967e1b6d0611d6cde63f449624911933a124f59adc57569a26951fee4dd1bcc6030c9e8ea44e3eec5a943ab84261bf0ed4ded |
/data/user/0/cn.nemo.video/databases/downloader.db-journal
| MD5 | 4b24f6e8258614d81f0fc8f2f88291ec |
| SHA1 | 02cd62e0e0db9c8b75541046b85a60b78071aa49 |
| SHA256 | cae5cd699d87c2ce9816794d58e694f32945698d38d2be03bc83c9810578956a |
| SHA512 | 1390979170f4270a3730f92e590c59f4849c71d8afc57c5bd96e4cef1fc62fced8bb5658328d48acd53af9ac25585e5f193bda0f9429a1e1e3ab84c20710fc94 |
/data/user/0/cn.nemo.video/databases/downloader.db
| MD5 | 40b7d099fc8c4320b1bb8dbc6e03151f |
| SHA1 | bb556886aaa719ae155b8e499f530fe970e6e5c9 |
| SHA256 | 02fec0e756afa49755e14043766cf3ff533addef9567b0243e06beeab805ec0e |
| SHA512 | dd476b16caee9c451571a95c98fda38496c8a75a4f5e778b4900e122ce34a7b474831c6ca84d1b42e83af4e6cb0b693ef0fcc8fe5c3e4162f7effc6c85f6fe3a |
/data/user/0/cn.nemo.video/databases/downloader.db-journal
| MD5 | e0229bb5977cf5455555979b354b5a8d |
| SHA1 | 1c22c9f680c1fd6c29bc5a36bdf02e38c0e18075 |
| SHA256 | 6e58b26cb8f33aa5bbf9183fe9c0170ef7ac8b658057acb202df09b8e02fa39e |
| SHA512 | f307a02644e17cd48d4c15354bc519817450706858a49aed09aa2b81c9651368eccf418a27d4d9c56433fbde9d554089e948ae422fe5d0965ea7b6e22b2a78f1 |
/data/user/0/cn.nemo.video/databases/downloader.db-journal
| MD5 | f448f19de4be6512af0bcc9aebe74a20 |
| SHA1 | 2a1559119ca3386c230785f48cd132e6b2e6dc80 |
| SHA256 | e86b44e983eadc28b2974f76e3b7c9aadf53c019017312c3f5d947830fbb5a16 |
| SHA512 | fe035a56afa0216c25801a260e9db2a90ab60c82959b76a65029193dc1dc08ace3f6ca324d48d847d57f510b2f566af13901334db326098367454ec94da76adb |
/data/user/0/cn.nemo.video/databases/bugly_db_-journal
| MD5 | 02267fd4419ab985816942f93b71582c |
| SHA1 | 9dd8d2ceb7dd27ea0b63b8c7a4004bc245c3b51e |
| SHA256 | aa44b6a81ffa65a72466838b98cceda4d19a32c5cff3dd710d101f1c2b188e22 |
| SHA512 | fee9c5562467298ce871dc80364e1b07d62683d6239fce538f64ef874daed2ae922cc06f4f2fbcb556bc51d6756540cfa0f776864eaa1183a4aadae9a8a387e0 |
/data/user/0/cn.nemo.video/files/TDtcagent.db
| MD5 | 46e1eddcc9a90441ab6886d1da1b2787 |
| SHA1 | 360e02a8565916166f624d4a5af5efabb61725c6 |
| SHA256 | eaa194def90576eeaa03b5709af3d6a9bf2ff12956d330e43b0aea9b54ffd263 |
| SHA512 | d3c265d2cc40fc26d2a2b8c90537af3400ac4c1e769f5ccfab77941b73b79c9dd8e4e370324f72053e2ebabf55b2c7960f4d129270d252505f85d10c128016e1 |
/data/user/0/cn.nemo.video/files/apps.qylog
| MD5 | 8c9ca0e1fa84086d47bbd786685ccd73 |
| SHA1 | cf15ed448f0bb103b443f8ded803f07776f51786 |
| SHA256 | 36f36b38b498ffa622beb8d1c59f3e94efdfc72724bbef0f32a5b7cb88fa2c5e |
| SHA512 | fcd3e694e86e22c7accbdeb702b06946a1fb6091f4918055dc5ef30f2601d438b553a5d28c9e39a6b4f0f40fd0b647aace6ab2f1cac798ab029a20558fd106f2 |
/data/user/0/cn.nemo.video/cache/tt_crash_log_dir/1718704849112
| MD5 | d27afc1f4b84f3f1b4595f88eba2aa3c |
| SHA1 | 5aa2167ed222db66df2d1c8f181653a940f5f7f8 |
| SHA256 | 9c67749f2de43a118ae758745f2dce114ea85925a8cff13b764b229becbb360e |
| SHA512 | 4b0dfbfd250bae767a860d77d5e015c273960756291357e8e248092dc498c430d65406fa85e336aff888ae5a64829bf4faa021b35348fea93673fcc76713c828 |