Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    123s
  • max time network
    150s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    09/09/2024, 07:37

General

  • Target

    d5e1f3ff3bdc1694db89c16fa5a99248_JaffaCakes118.apk

  • Size

    11.0MB

  • MD5

    d5e1f3ff3bdc1694db89c16fa5a99248

  • SHA1

    a162a1c4c3aed92b35f22147a6e5bbf5f62a01fd

  • SHA256

    1509ce10b3640a4996571a12770c244653d66202ba7c614571ee4aeeb1ca946f

  • SHA512

    276039f07949fdb52ebcf86e5aa97674b4b5d6e91995838779971d285a90dbe4bab2e6bb843de85c2b233d8f9e85fbfbfc806a29473b398fedc8d70d95a63f15

  • SSDEEP

    196608:uifshTxmAu3/qaQRKv90wQAzyF5hfYTr8my3LR4AWmLmN4iMIA+yR1neJL7oBrIh:uXhTnu3CUv+w1z6x08d3LRtq+iWR18Ll

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 2 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.njjijjjpjjjjjpjnji.aasss
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4261
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/AdDex.3.1.0.dex --output-vdex-fd=99 --oat-fd=103 --oat-location=/data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/oat/x86/AdDex.3.1.0.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4448
  • com.njjijjjpjjjjjpjnji.aasss:download_server
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4521
    • su
      2⤵
        PID:4587

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/app_model/TinyCnnModel

      Filesize

      987KB

      MD5

      f97413f4f666085c652d8d3d2a8846b3

      SHA1

      9b6de4999ceec83f5f2a688419dda596858dda2f

      SHA256

      c370451dfbc29ad910c14696fe96400f0a363311612db775e444c303319dc11b

      SHA512

      0c32d0ae404113f631c488215520ce8a9c281b8a02d5b7b92fd1671b8e33f49a948a5ccff467550d10c962975bc01a0ba3d5460f44206e26f752db0aaac10be2

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db

      Filesize

      20KB

      MD5

      e1ec154ac73462848d88acf5fe13100e

      SHA1

      aa424ec018536b7b149170a81e881c111170c3d9

      SHA256

      b9f30140fd3e7b326461f2c38f6c1d8fd5c4d61258427832a0d725dfacfef666

      SHA512

      1d6fe8ef90dc56bf5983666754f11cd03044a3237e5490a44b278fd192f35404016ccf1b422162043f48622f0847e1183ba1eeedf6597309766088c8849f0b7d

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db-journal

      Filesize

      512B

      MD5

      5bb488aeee25ee9c24bb9f64f5a91247

      SHA1

      1e01b85ad713c76c18944ae26cc3a5c34f2072c7

      SHA256

      a6817e5927a2fdebf8f45478a2c9e9cd8f227473fbc668429699483368cec07e

      SHA512

      cb4aed3cd7f2fcf0cf3b00182187d01f0d8a91f32c4e364bae0ae15527c6defbc26ee3a9723d91ed155b67c3cc300dd76b24f9e7ea6b427d24dec0a6f1370b1e

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db-wal

      Filesize

      32KB

      MD5

      f9b715fcccd6b0aa80c74d5c653add74

      SHA1

      7cc79ba1471b2d76281563bd96b44f49f95938d3

      SHA256

      a4000420ef47e6bfdc61e699698eb373daec214ce0585f2186220014146c52a1

      SHA512

      29cb480b2838c253f5474cd44fcf73f2e13914bff52c63d880c10517f32c652dec07f0e1643e46e3696e9f32a1780712e966e49baa80db0c55bce1f30f5b5b7b

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

      Filesize

      36KB

      MD5

      0adda9c85a5e4808f5b1b74c0a8591a5

      SHA1

      5048107883ab1e345af9cf2e6849ce46e0e612bf

      SHA256

      1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

      SHA512

      646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

      Filesize

      24KB

      MD5

      37a766b9c30aa1ea3fd077c619ef7b27

      SHA1

      55adfe53ef15d92210b6bca20bcb5abc37992887

      SHA256

      d3a6918841a443bb53018df42818d507fae8f7473409d539cee11f33d03ec08c

      SHA512

      3dcba5c861aa23e0dcff0e35f123187a6d5f09bf7825124377c7138d9ac6a2924b139dc8ef8442a7d855bd62ea42cffb17df2c9f1f72637c4ca88aba4c8ab873

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

      Filesize

      16KB

      MD5

      5fe6a509b94fa3c8099006443eb434a2

      SHA1

      49fda660a916dec906ef83604e0cf3c2cfcd8adc

      SHA256

      3b28ae91d968be8f218854499d2141bc262acd9c064577bcf73552737783d128

      SHA512

      c3f3aee134cedb88922aa11ae4dd618394659585fffc90bdc67c67275c5595aae79c4e578435ba9ce817ab1fc4da46a7b0cfe22954fe5c5d5af51357a9f01f49

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

      Filesize

      16KB

      MD5

      66e084afecccc2a9b5d76690a69a5155

      SHA1

      0e98ea062c630cc742e435971b77470659bd56e2

      SHA256

      6dece0260d8cb528fc4cb705d045cfc29880d4af7a2ff2bd84b61fc6111c389c

      SHA512

      49cba19e0a31181def67fd7d935c0bc61e970ea7a7bc0e701bf0bfb7324f5d46f8e434876395125aab3b764bc9d4238a42e71268a712874c4c62d2dbc1e9a369

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

      Filesize

      512B

      MD5

      d4548b96abe4dcfa541a07d3374466e6

      SHA1

      147cc86ce7b2a5de993711644286ede38ddccbe7

      SHA256

      89d7558b44389d1046ec71bde602f96384ca4b64ee4df3c6df7ff09c66cbbe38

      SHA512

      a124ac321dbcef3b6b889dc8574ee9aee47bbad3927461ac30eb7aa143771b56a6cf5c29fa12fbe0cf71893bcb9a2ef7f4a71a0cf5244e5d6e58d47caf28c67c

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-wal

      Filesize

      48KB

      MD5

      6da43f86762652713fcb87e9e21d75f3

      SHA1

      54738484c450650aa90210d177e80baf05defaf8

      SHA256

      9aa4ff57596e5910bd24593f7b5c1ef8920b978b87157fbeb9e686d8b1abeaa2

      SHA512

      3e5e7b70f7398fb9ed4e1f34230b26cc8ce5ca4feff9fb7a22ce23050a1c392b5c06d53f4babefa3f57a6a2306894933f449f235eaa3e035982e23b841c57576

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-wal

      Filesize

      12KB

      MD5

      35ab7c000f3ccb4e9f049b07089e29c9

      SHA1

      9a019e49337d9f0ac85a9762c21345b8a0b8a1e4

      SHA256

      ba7c779b28b39bd69913b40bca210119694cd3ab51607797543090c1be379ef5

      SHA512

      7869131393dc8884fadb7f10a00ed49a675244a6a7594ea13d4ae745eec635a6aff4cf104d4d8b8a226c4ce756c22d156219d5cae86ffef0cff470c8672ea7a1

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-wal

      Filesize

      4KB

      MD5

      968f7502cf98ad5ff925e6272773d0fe

      SHA1

      d4bc376d79d99d58e928729f1e282e7df1376715

      SHA256

      08b32b57e41720b22229664213e6a3158057cc0b0d546b6d71b7e1d2cceb7701

      SHA512

      35af367570d52a08a12ba898ba7a0b706a9297d653f1356e1717245e9f8fac7294e23c6df4ee2fb9778c9969a4807027791e2aa65e5e38b17a534af084a576b7

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-wal

      Filesize

      4KB

      MD5

      a5e5f4441430c0f0897aad935996bb1e

      SHA1

      f1a6a9af3455bf39c1dacba0b14db97a6a63b07a

      SHA256

      4fd81158031f1bf825cb532a3c13f7f689aac5285e4805a367d9dd3490fda71c

      SHA512

      b362fb0d55dd83d37cf85b22b88c4efea068762f9e135207248b8bc57346597487f1f450a21dda9b8e7796d2d95ec6d6699af32d4f1605f0c2552b220b4f880f

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/.envelope/a==7.3.2&&1.4.7_1725975653355_envelope.log

      Filesize

      1KB

      MD5

      c19c61baf7808049c5d2d135dfcf024f

      SHA1

      3564875b7c313da7a5572936029192744cd7373d

      SHA256

      3164178c3b8212fb900ee3874325cdfebd58c8a158cc7ceeff90708f504180c5

      SHA512

      7abe765957c30913038f53735698e809cf859c956ee74edd1c82648688d32dbda9aa2a46abbc2034c8966d4211d06f0e329aab9697965615045f743842ac4005

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/.envelope/i==1.2.0&&1.4.7_1725975652664_envelope.log

      Filesize

      2KB

      MD5

      b744b605e8920f32c4437de14d4740db

      SHA1

      5789ea924f22433929d97668901c51ec7aaac577

      SHA256

      da971150732b9f110d7818849c792831ad1a0a6ed448cdd2decc3cb324dae9c1

      SHA512

      56eae4a655e8d5202458291d7cd06af996d78f59be4cbf81efa1c319299beab5c94c6f3e7e9749ffdebc9cf90918077a5e0aa5f219128eed3e94654f3cdd95b0

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/.imprint

      Filesize

      486B

      MD5

      c821f7396a2dda3c80f797de8db64587

      SHA1

      9bb48e9c92500522f30ee07f1955e5a1ccc9c748

      SHA256

      fc11c14430240f28442c8d4adc9599d5a3bee62b27497174d24fd9d1b59c31ac

      SHA512

      c721a8ddd4d1cc722c35601d5a92c2346bb7d4260e271fe94ee16bb9c2e5f32e92830c355976b0d73df96a95b92881b8a80af0195126a7ea2175a722ec489cb6

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/.imprint

      Filesize

      995B

      MD5

      5d53936c1dd8e282e16d1d75499e49da

      SHA1

      5746da2f441ea79a5c72c24ed838a61b773f7a48

      SHA256

      c8daa779cb9dd5164d8c24a0689bd63f09a14c17347a28e7e9efb5a90c988600

      SHA512

      1df1eda9dad1caf4313c925464b0621abd14a9ef3397eb7a6c619227bbf18bd040e46a330ac7e93caa77e61ab340690c38da4a31e34281812a2c840eb27d9445

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/.umeng/exchangeIdentity.json

      Filesize

      162B

      MD5

      6af430e2e3f36c9ce98807ad32972ed1

      SHA1

      a57fae08a8972813e6843248693f0cdf524d5968

      SHA256

      3fd6542156f3a51084553640236dff570fa391801151b81f2e52da2916aca830

      SHA512

      1f2b685282e2898fce25974b9a22e741b292182a05bda7b739f68c3d546348ecef6a6d32e90e683d18db3dc2e4f9fd3a85caa63820ce3e1b245aaab526e07cfa

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/AdDex.3.1.0.dex

      Filesize

      253KB

      MD5

      2429e2c4eba58edb99dfd431dd5d919e

      SHA1

      465f3d22eafabf71fd30fb2266fb92e3c880738f

      SHA256

      4f9492e8020e6c033d14652ddeeac7267984484c28fee90b8fdbcbdc477eb1f4

      SHA512

      67b32138d265da3b069d0251cb1afff76f5a1570645982607b1bdd9c35100ec6d50558ffab1c30f81ab17ca5bb48b8056f6fa651fca06e408ab17149d939db99

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/elfinject

      Filesize

      13KB

      MD5

      a97746c2dc86397304dbe4668597c507

      SHA1

      9e73822b093d3ebb0a1c8c69be0e77fd4a70dcac

      SHA256

      7104fcc3b76277826095e036f20b5a9378fb73a20127bc8982b4d10683523888

      SHA512

      90fa7439d2d0de19c3a4e002b19779c4398903ddfa7aa31954d820f53c2eaa5cdda140dd6c7f4ea9dcc712366896cb99a6b28d4e4857d79fe5ba1b25cbf54b58

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/exid.dat

      Filesize

      55B

      MD5

      3221e990699ab6b68dbf4cb41d5ba57b

      SHA1

      7d7d029358389b17dff7b942adbd8e29344d4241

      SHA256

      9d0c9d665eab6867ad71fec795a74b878d0e68ee6d20102427c6d4b0d745141f

      SHA512

      53887fa66c50210ccff5f312d39f80c742b4a32449bc6dd7b58cff7581e9d7dd4f832160f2c7f8079c24571dbbe9de7e9515df702bbb9cfa7d415bc69350076f

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/oat/AdDex.3.1.0.dex.cur.prof

      Filesize

      169B

      MD5

      16faab766dfe6f8a5087c0d06f4183a5

      SHA1

      14dc39587ef44080752965925a5e9bed867fbaa2

      SHA256

      c3cdbd072f651f742f52376ce1ca242ecdf0539194e232ce4438b466860d25b4

      SHA512

      e07830b54e8bd4ee1f469dac9cf5a836ef857f6f5b34462cbeb7c67598e5ecc89c17ff9708571d16261f7addb5c3f902381d40bb043ef41a6834f2fca5c05f8e

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/script.atc

      Filesize

      56KB

      MD5

      c74e805a917eb0183730feb3979e39d1

      SHA1

      2cfbf7eb9ca46878e0f3f333f5183eb973cb6de7

      SHA256

      6fb6b76f30defd7d357b03dc858407d15db084ecf35e6a6f5becc6ef4699d048

      SHA512

      076f8720e5f2cdc8a43ef83456a5bb4fd19d2c8481ea555190c47a2585e6a4b9320d150b61af5e4ed59e84c9b88ba104e2e10acdd65142e5ff071906c8976896

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/script.lc

      Filesize

      457KB

      MD5

      900988b3fc2343d118e943f8b6319e8a

      SHA1

      a4984c623fd0c2a390dd99bb98034c8059effee4

      SHA256

      82fed50405cebc6dca228657e6bfa0e422752a58fdf66728bccd2594ba1ec194

      SHA512

      b8b347eb7411c5ca0c67287201dceda9097f33d101ba7838fb612ec5ea519e6435518df8d93096b303e86b318b30c29b5aeb8f71847c9ab9a07b71a8c1d2c79d

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/script.prop

      Filesize

      335B

      MD5

      57dda5ddd6c290c691ce217d79550a1d

      SHA1

      1a2be0c9d063174f567e0904805acb319663c168

      SHA256

      5c523e26612204d9f97b5899529c5a8257ed266a23d8bec538c2cde3de1e8400

      SHA512

      7f926b293fa86dcb3cde5142682b334982630e8b34b9f9f75d2d433e7fe3b2fc2eb4dd0ce910e5a91ec31727c38cacd0ebd1947031a10ebf12478c82448b3f6e

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/script.uip

      Filesize

      138KB

      MD5

      623f66be0679db80bcf0cb370434c307

      SHA1

      6e29bfb29639aea71edfeb9144405ffbb13fb1e7

      SHA256

      8a02e92f5ea40bdd5631006fa62ed1398bf3bc66bf85d4fdc52f6e1f004a900a

      SHA512

      0231061297d24d4e9a4a479bbc767b2b270b0f2d9b09f2bfb3709eeece7484968766204eb8911cdfd2ecd94e498bedc8592b48662d588a0f6bcd040090f819d8

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/start_eventsrv

      Filesize

      388B

      MD5

      789a1315411efa2690e537621a33444d

      SHA1

      6317053a0bc6770138e4e2f835394a2892e9dcc7

      SHA256

      0c9686786c096fd8209e9f4f71ecad79996055d4568599759e3444bbd468d659

      SHA512

      4b7de239d84cef524c180d8ff7971b5bd6b9ef82aabfca2b9c8e9494e0e948ab2f8cd5df62a1f09e88f3a1eedec3096232e94f96d5f4bcb471418bb2c43fac99

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/start_eventsrvR

      Filesize

      318B

      MD5

      259401326d5cca938e4c6c42a4dfff9d

      SHA1

      ae2da67afc5133d19073a6d465c50db78d1e4345

      SHA256

      fc8f25ac5acbade09885a2ac6d7f62897635a67875ebad80d420d75dad4506e4

      SHA512

      8bbdd9f7d47e68fe8f49ae2c7c823bdc1001feb07260fd28941b82ff8cdafbf10b81fecaca84c76d5221d2b20ec352160a210c983b64245e898e2dc81131ecb4

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTc1NjUyNjY1

      Filesize

      1KB

      MD5

      cc67a072ceb79a4d91f6e13b7d4e5c42

      SHA1

      8700781cea607d4643d7190a04af15f598b9937b

      SHA256

      b341c42604b8b6b32b4c71e6cb16302df772308da62fdf222d471c352a4943ee

      SHA512

      19041b5fc8fe2d26b8a75aaa8d8a4ea38e47bf69c1bce082896804f36ea5b9991ad18cdbe02fddc5666d3e751cc27667fcd096ac0ed5c67a0bc0026c66521019

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTc1NjgzMjI1

      Filesize

      1KB

      MD5

      1955b38b5e25fd7ecc074faefe0fb57a

      SHA1

      bb9875829ff01047754d6f060436620e585a706d

      SHA256

      c57c76fe47d06647b58d38e6437a34806b929133625777f894f13511ecc55aa2

      SHA512

      1043635f1b3e3aea47adb401dc5c2563acbcf2d7f9dd614364c596624940bf51c86cdec392f3188eb554542b6c36477536ebd0eb47d4fad5726182223904c99c

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTc1NzEzMjg4

      Filesize

      1KB

      MD5

      464ba19c0e1fde4766b704107b17b3cc

      SHA1

      0df092c835a9d8f78f8e6839170379fb09f0d35b

      SHA256

      0feee0e61ed8c747b4a2de268079ad1623a079b5fa22d5cd31c935fd25e86416

      SHA512

      35630a984836fc9ecb358269ebc5a848f97fe2f5a5f92cb720c2f68db21696809427f99a3e0522988b279f50b0d9d97c0df5353696c44154f0a5b69220a68595

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTc1NzQzMzg0

      Filesize

      1KB

      MD5

      8cad0bddf11eb4fad741fc7750474319

      SHA1

      c9ed64969c0d4813f21b485647edfb500dbec88e

      SHA256

      62c447057ea0fc63f46102aa4afe6c3c1290d973c0f4a883aa2d828700d58569

      SHA512

      1aecca38cda98eeb5ff276d064863e5adba924fb53071544342d9df607bb4e750198b41c7f679fd1258c01258e9e68ac3f22daba8e97a6cece4ff221beb3c5f5

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTc1NzczNDY1

      Filesize

      1KB

      MD5

      d564b337985f0eb75a54bc9aebe47079

      SHA1

      897e6e84343845c3dedb835c8300e95317ef8307

      SHA256

      5090d1599c97f84281bd7d1614c5ebd6d6c8ecaf685d782c346090ebe477fb70

      SHA512

      043d1275e2ba53ed43922927381be53e45f3e26292b0b987faf20e5983a1b900a67ba15e3c798a7a24e19c0115cf6c4882a0f2fcbb74b53fb2232432c3ff9189

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/umeng_it.cache

      Filesize

      498B

      MD5

      1b88e98c2740e005566b599c36c80db9

      SHA1

      1d790898a2a9c558287fb02c595e8e821626cf92

      SHA256

      a1d10ad61942d76cee90423d4a353e8c48a089ec34ce1232543304e580e7fea5

      SHA512

      ea5134fcb0aa07188df8a98759839f5525cb3ef092bb0c639b244cd63c13b9f32c90f85ba03394f545ac25595072e1af73a6dc19631dfbfbbf0628ba6a187608

    • /data/data/com.njjijjjpjjjjjpjnji.aasss/files/umeng_it.cache

      Filesize

      253B

      MD5

      80cbc26fc4d0ac00e21a696595ab6954

      SHA1

      844a8fbfccd6a6805a18ec752575f7aa6b6643fe

      SHA256

      f701abdfa2977ff70d011ce1ff8ec6f72665b41245410f8988745c049983b2e1

      SHA512

      1b06b468b5e8a2ddf6c07d642cf57877bb12a6b93f1d99016de7b7faff3db57da99abf9f5a40c3f4141906b50263bbef540f343d8e799cdb119f69a290f77fcf

    • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/AdDex.3.1.0.dex

      Filesize

      253KB

      MD5

      039c6eb852553b6208a3aa65e71c5e29

      SHA1

      cdda4bdb4750e36bedb83ba984e6932fa842ab52

      SHA256

      8ef88378601b32e316397914e4dc121e53d037e53f660e4b3dc97093589f0e77

      SHA512

      c47d49b9de01c45b0066166ab47d8ad7f98baf597761b5efc79d06ae1e0e0608dd925a0d8b5b8d0f63f7879cdb8bc9d20e09e7ec0407bd4639d600bac26c72c3

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      37e235aac486e91c72988798c138d372

      SHA1

      7cfaa1507c60aa22b05c869b82c98c9fd6e9fe6c

      SHA256

      f70a03c2007202bdb61c7f0b5765330ce089dc9eac12bb503a619b789f67f0ac

      SHA512

      e6d155e9fd45e32422930d89faefcdc38cd339f2723cd3bb35bb408f594776417a8283f8344c5c70ab9374d01fd15e67ae0febb753f7bc436ef68393981d18f4

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      213B

      MD5

      3bb0e489a612333a8b7312f2d31d2ff4

      SHA1

      c9a0a0f4c393b6c33d3b32b9b4a432cc4e075241

      SHA256

      e86095a84aa6fc7f2c7e01a5f0242ef6719f398b169f14b992899ee66f7fd8db

      SHA512

      629cb1b107ff538888b03bc350aa9d2f89b8d8e6c750120c4ec9f5d3e82c167f918a30eddd611c006870b712cadeccf0031fe248ea1e2d54d842f4a3bdecab02

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      37e6dd1e58c9c80879fa94cb434919ba

      SHA1

      624a76ba0e0b1da4d84fa47061cd22f0f44d3eaa

      SHA256

      abddd0f8d8b8b769428a880dbe8bab567d1af783c0981b1e3aaa002bb78babee

      SHA512

      355ac4889380b1c11e0a139004b11d09adee4d53673b36c01d9807a694086c046e268951c64c8c07890dcab322a1e08d89ec8763e827ee0396c27c1c4342e862

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      167B

      MD5

      f935074eb7a730992af3e7932e46049c

      SHA1

      655e5f317348a7475ef7c7801474232699f0b88b

      SHA256

      0868f4968337e8efe339fbd2e337937b183ce9993a993bdcade2b958af3475e2

      SHA512

      52c46d6e453cb3e894ac443ee665e8ef49a8dba7d2df09655c1f2076abad86f796c503d89ab1120497a21050cb6e816f81ee32a3930855062300f192772c881b

    • /storage/emulated/0/.uip.config.json

      Filesize

      8KB

      MD5

      85e52b095fe9e66ca9be0863ae480b23

      SHA1

      7e00afcdf80ff533f64fddffc2c6bf0ca94687a4

      SHA256

      85fd0ec10726af4f2e4d76d22cf39bdb2a85739fd637490631db52fa5c78c247

      SHA512

      94f19f3b45703293903d3c5d30aa8b9220873618325e3ce4768904626cfa3bebfa98119715118456ab6032bd67ed4bbbe1a49f3ef8fb540e8a9a384c9145460b

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      402B

      MD5

      8002180cc19f37281be17cc62e44900f

      SHA1

      1219955b04b9b010a41e2c856ea42486e777d797

      SHA256

      d04d4722f2c0dd912d41ea7d22ce9a40b4435c1a0adc637f44a4cf24bf63c228

      SHA512

      8b229644f3d8b7346994960b47d5afddcbd9170f642ee2aa0ed8d3c0273c2b059bfce404794bcbb430bb8d2f961daf26f52e36c07427a3ad92f6900358d89d09

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      402B

      MD5

      4049bb5668bcef9682fafb2c8261a7ed

      SHA1

      4e9822f61fcf7020928e1e692532fa87074c6605

      SHA256

      cf13187f917ba227a18845e0ce6a175651c08f09d860e7073467ffc685cb2c5c

      SHA512

      184c8d35051d5f105a5c7d4d05c1fb8b423c6cf0814283f6479f8e986e5067a11d3ea1723e21ea020f0d576c79fd2b9d9081133f1faa668248a4991a7c5e43c9

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      402B

      MD5

      6ab2551c98f1f9869ad454e1aa266817

      SHA1

      f08fbde7c3cd5ac19f8151d3368eca997c467b46

      SHA256

      07acd5c48cd141450707e0b95b0e3dc3f5fb8d2e65f16bda3479447bf11ec262

      SHA512

      a98c6d64b9cd858fc2685247b2458dd670feea52532f3176a8fd1c39b7833155de631dfda6322be49b9736c62317c27b69ca17ace4917e18da0979f963c768eb

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      402B

      MD5

      78ffc131d967a130b1e3c5a695d256cb

      SHA1

      214e259e4aa6d881de85c2d1588872250ac6c787

      SHA256

      e942c0aadcf46710b9fb1ebf6760aa9a971a2695ffdf173bd846ced7ebba3eab

      SHA512

      d9d17f2199464c51eadb07fe7985f9bcc4bffceac92eae3d48810bfd15023643528c1a271e0cc99ebb64064a741372fccd9ac30f982701a8c33f14682d3fbc38

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      400B

      MD5

      05df32f463c318c1a131f3b78e46f8ec

      SHA1

      fe9b6fc0098e8b2d93f834ea45e2725dd1c53ca1

      SHA256

      d9fc468f3bd55284264bfab77cb0cd28cc5a690ee484820f9ff557e0df0c9aef

      SHA512

      e738e15410ec6aace01397112d197ad95e095e5c080e07bd29604f2f53baf3ec8d7a21ab131e0687ee38dcfd3e9bf817efbbc9d736baaa9de00653c617da8f14

    • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

      Filesize

      403B

      MD5

      818512651aa5b795c4fbc0a002a88b7e

      SHA1

      f3f8025acd6fccef308e1c939508d9b422776c65

      SHA256

      fce3e65151cfb5b8a74659371c93b1da99e3e46554eb15b76b695a4d371205ff

      SHA512

      188354eda8e10a6fa1ad3619485f17482b13ff3a666d24d5aa4024651767b2656ae14f47fc9e48ac1b36661359626a5703f8b6d91684a4478910e1d85edd664e