Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    129s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    09/09/2024, 07:37

General

  • Target

    d5e1f3ff3bdc1694db89c16fa5a99248_JaffaCakes118.apk

  • Size

    11.0MB

  • MD5

    d5e1f3ff3bdc1694db89c16fa5a99248

  • SHA1

    a162a1c4c3aed92b35f22147a6e5bbf5f62a01fd

  • SHA256

    1509ce10b3640a4996571a12770c244653d66202ba7c614571ee4aeeb1ca946f

  • SHA512

    276039f07949fdb52ebcf86e5aa97674b4b5d6e91995838779971d285a90dbe4bab2e6bb843de85c2b233d8f9e85fbfbfc806a29473b398fedc8d70d95a63f15

  • SSDEEP

    196608:uifshTxmAu3/qaQRKv90wQAzyF5hfYTr8my3LR4AWmLmN4iMIA+yR1neJL7oBrIh:uXhTnu3CUv+w1z6x08d3LRtq+iWR18Ll

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.njjijjjpjjjjjpjnji.aasss
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4621
  • com.njjijjjpjjjjjpjnji.aasss:download_server
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4928

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

    Filesize

    36KB

    MD5

    4a8120c91e3143b2db43971dbc77cf8d

    SHA1

    37c5700d35059c4e0a718ced73b3d73ba5d2b277

    SHA256

    1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb

    SHA512

    465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

    Filesize

    24KB

    MD5

    9368fc73e9ac87d66e05000427c1e4ff

    SHA1

    625907febb69810d68efe9032ed365b33f9a93f4

    SHA256

    c3687ac797499f3b004f40d093e5c00ce582ed6407ff18edec2e7ec06b86bd17

    SHA512

    9484837673107d7707670c3d370f554ef91723caf48a1eb6b335a77720b4f7e8e606b731402d0288607f005f76bfd2e36877eb6823057d2d4d1cac7c7881cc46

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

    Filesize

    16KB

    MD5

    0f77f4977611a6fc53ddeaae00447515

    SHA1

    59ae74dd135745db0da19d3d982aef765f555f34

    SHA256

    086a0159592471d0cdcfe61a3f2cf6935636778638b915ecd04ec2d5eefa2513

    SHA512

    3466fb7b579a42cde74e8ec614c26efb65f6baebf0261c7a7d1428489de3ea797d76e990ffa26bb44ab8863d4ce5c021563977b955e8c3864c9b7c81e9b02ac9

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db

    Filesize

    16KB

    MD5

    972798b0cfa34314d884e3cc8165e803

    SHA1

    76fb116ba3b6be9bbcb33105239c35b13c8ec7a8

    SHA256

    c0992509add6dfed6998d39cc3d0861e5800d0eccc4ab4194f64fa5b7d8eb9c0

    SHA512

    f2cf29e3c7ca0490232db592fcb6fab89223b42893714a823c861b96f27cd6c27501d8f928dc08d98674ac0db593515781c4054f68ea3ef70cb84f09926a5931

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    512B

    MD5

    325ec56a3a318487e1014d8bb2f1ce3e

    SHA1

    39de9d7f050c384172fb2d580032c7f3436810d6

    SHA256

    8f75dde22b32d5d5c361834df91ff856938ab2fc174d73a16d6f0cf89fddc6b6

    SHA512

    a2eae9279491b5386cc096a45a2a54898d826ce741180409e5c674960dc3c2b5d3088a38407d7723df6f712f6ccf244254f091523caf7ed05fc97b5edbf72819

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    8KB

    MD5

    19511c5ba4fc421f10fdbd19e0e5521a

    SHA1

    624e16e176f03b73e0fbeadd1cd9570e66d334c4

    SHA256

    88e5ecb7fd55cd2f4c5ece6f74f69be819993874f1e74aadbe1fe4f230dc03d3

    SHA512

    d9f7f4ea3476c09da76ef51effb310095028cf8c761568cb6750af017dc6643f50f34d163ae91f1e9e834e44eafa481e02b8556c4efac7f537f807f5d6cc0817

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    8KB

    MD5

    27a0a937c57a49f8c773da18dfd677f4

    SHA1

    e88d3b0015a95aa1fc1b30fc336102a5d71d0da2

    SHA256

    4a3e16dd29671d239bd1c5768556097bf353c95a6376b57888161981383df1dd

    SHA512

    2b9c8b0c5d68a98857322f30936356a4bcc49e43d76b93c54cabf48106451a02055a0a8c4d26907b7fbd234dbef3b4b5e52bfe21473cc1607dcd52457e9c38fe

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    16KB

    MD5

    091fda4af11addc3834566f6523b6753

    SHA1

    efac977903f0f9546564be2dfbe08e0ca3e392d9

    SHA256

    7651100d2e39128b4effe111b17a3b6a530466746bf7e9a99ce686ec6f39683a

    SHA512

    3f59392e0ac3cd025c6ec19e845ad20da690c2f38a338e1cbe32183fbf546c1a2f83077eb9f78fc8604d8c706e56f58b80c8ad4e92f0cf3fd3991bb2a387ebfc

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    8KB

    MD5

    ef610b2351dbf90c946b82536675f504

    SHA1

    bdb8d8b8623b03c0d90170132cfddb118777e03c

    SHA256

    ab531e226e3282b9b9ecbcfaf678f12aade7484eefac9364323d11dabbc64a7b

    SHA512

    e3ec7c84d04194cc2eb6ce953aa2fdbecdcb67ac15e17c7c6d8f50184e0220f64447ff7182eab2134d9a71a4356012e8087ec407adb451f1deb58f3b82bdfc10

  • /data/data/com.njjijjjpjjjjjpjnji.aasss/databases/ua.db-journal

    Filesize

    8KB

    MD5

    3c119a870fd18fde75c8542ca7882519

    SHA1

    0e87aa30f94f39f66efa516f8b73c27714d03626

    SHA256

    c065110e115c9acc360a1b755a2d61dff87a4c0366171c889c85b75719d8b62a

    SHA512

    858d52c250dbf97f33a088358debd97bc1a9a9f3c70bbcf721dbd5164f3180d3cc08678ab91981e66321b814fcdbfda059698941828f3d4c8ec2567b0b28a3bb

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/app_model/TinyCnnModel

    Filesize

    987KB

    MD5

    f97413f4f666085c652d8d3d2a8846b3

    SHA1

    9b6de4999ceec83f5f2a688419dda596858dda2f

    SHA256

    c370451dfbc29ad910c14696fe96400f0a363311612db775e444c303319dc11b

    SHA512

    0c32d0ae404113f631c488215520ce8a9c281b8a02d5b7b92fd1671b8e33f49a948a5ccff467550d10c962975bc01a0ba3d5460f44206e26f752db0aaac10be2

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db

    Filesize

    20KB

    MD5

    fec8c8cfa116a961050457212504af4b

    SHA1

    0c6f501dd8f31cc28848d25c5ee287c6601a006f

    SHA256

    6489663f23bc774199e0ece97259fc0342b3c5c1c98b6d55d1f808b1c52bd599

    SHA512

    fb4430149ebe5dc01aba3e0a4bace8cd060eb2192e024517eee51feb538f5b699ece5e1915e261059b4c546346adb81402dff7a38aedd07956945dd5263ca6c7

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db-journal

    Filesize

    512B

    MD5

    d889581e2a1b94f97eef4df04e50bc1b

    SHA1

    262454e547c1f5a6cae8254ed0d236f91e92f831

    SHA256

    08cb4558eef748e99306322af35c07c1179c4e0311600a9e229b06be9384e0cf

    SHA512

    a8c97237624405dcd17c8755b68c6f51c54d9d71ec2d27de66e16550ccd5ea366ec7d2cfaff7af5bf4a60fd61de9535cceab41a726b247408a607912dfaff7ac

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db-journal

    Filesize

    8KB

    MD5

    9f4ae7816a7169d7986badd5e83cce22

    SHA1

    4264f2c8760d1fa714d6cb7b9729d2a0b5fee385

    SHA256

    6edf8f4094bf0ff858d7c79046cd1ab2083e699d57a6c9ac71b3684d87ce783f

    SHA512

    6cf3c09e08785beda864cb4b2d9d67234a8c410ad73e52f95ddb4a416a0d418c589ba8b5b204aa13afac30ddc64e6ddbe28823d660f96c4af2a4c8f2fc160168

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/databases/MESSAGE.db-journal

    Filesize

    8KB

    MD5

    22ffee44a4165b1c6588a68ac0d62e36

    SHA1

    f8f8a05923c59ddf91600e60bd2d6ba92e79d616

    SHA256

    61b9635cc238fa16d57cf1b649083f2ba0981d48b20f9f245ba7d13171dfbfdf

    SHA512

    13832e70e4ee79e546f7d967dd36b8a4b5cf7a2a0f94296974af1667d6b5eb04e504fdef6a87ced4d1c2e56c63cf7f17672bd53d7a5aa215e8e01f817db28e76

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/.envelope/a==7.3.2&&1.4.7_1725969015942_envelope.log

    Filesize

    1KB

    MD5

    23e71f4058be2906298688663eb4b0a2

    SHA1

    22468efe42255950d0c7bc8223f6754de5f52b9e

    SHA256

    3cd650dc9a2c83554bdc6a74364328c0e2f6b041377fa365be30b220154250de

    SHA512

    3c9bc22b1f2b03da039f9b7f8199e30f2e292bdb5f0bce50fa30960b8f0369e530190cde7fcc03f184766eae30518090578a267eafd8d6aa6c3743e79672055f

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/.envelope/i==1.2.0&&1.4.7_1725969014478_envelope.log

    Filesize

    2KB

    MD5

    f18839d72589c327cb864a1b85b6eaca

    SHA1

    78115e297bbd6443efc8be08da0a37e0d1e49af4

    SHA256

    64135efb81c9bd24c48da0c791bfe713c80c70e51c34aabfdf13298a9addfcf8

    SHA512

    871fc739f38abafc2b115ab42fad99fa282acd59d4e3225f03808267132c2565a15d93e5b3904b218a34f031c59bd783464aa166ff65ac8ce71d990769d05193

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    e1cbdb63bb5c354020b69c155af017e2

    SHA1

    0347bd757c0a44e4720784db32a28f1e2fa55b9e

    SHA256

    fb1e97df8654e99d79df2d7bcc3c9de4c83921aa2f851387c5c947164015b807

    SHA512

    95a7d43569b2034dcca999f602a9fe19d6a10771a5115618edb6ae2a9eeb7fcf7b40e7cacbc42a405af977add1e4169500e3c4ea6c89913031d1f72c05ce5e2b

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/AdDex.3.1.0.dex

    Filesize

    253KB

    MD5

    10fa1b1b8cbbc0caa5689fc82304d144

    SHA1

    1dbd7f091332c5b518ac8ed6b76c0c0f271830cd

    SHA256

    238951944bf5c0ea5d7d0b7ce79c6cf262341918150d01893a69c45efbce627d

    SHA512

    521ae455e6ae0388d344f479305758e0e4d6acf1daffc7ddb2bbe4bd499ab1d9a2113e86e3d70bd3b86acfc6a423c3e4d00a39c8fc47418f0a7a3a9008b1a6c1

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/AdDex.3.1.0.dex

    Filesize

    253KB

    MD5

    2429e2c4eba58edb99dfd431dd5d919e

    SHA1

    465f3d22eafabf71fd30fb2266fb92e3c880738f

    SHA256

    4f9492e8020e6c033d14652ddeeac7267984484c28fee90b8fdbcbdc477eb1f4

    SHA512

    67b32138d265da3b069d0251cb1afff76f5a1570645982607b1bdd9c35100ec6d50558ffab1c30f81ab17ca5bb48b8056f6fa651fca06e408ab17149d939db99

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/elfinject

    Filesize

    13KB

    MD5

    a97746c2dc86397304dbe4668597c507

    SHA1

    9e73822b093d3ebb0a1c8c69be0e77fd4a70dcac

    SHA256

    7104fcc3b76277826095e036f20b5a9378fb73a20127bc8982b4d10683523888

    SHA512

    90fa7439d2d0de19c3a4e002b19779c4398903ddfa7aa31954d820f53c2eaa5cdda140dd6c7f4ea9dcc712366896cb99a6b28d4e4857d79fe5ba1b25cbf54b58

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/exid.dat

    Filesize

    55B

    MD5

    3221e990699ab6b68dbf4cb41d5ba57b

    SHA1

    7d7d029358389b17dff7b942adbd8e29344d4241

    SHA256

    9d0c9d665eab6867ad71fec795a74b878d0e68ee6d20102427c6d4b0d745141f

    SHA512

    53887fa66c50210ccff5f312d39f80c742b4a32449bc6dd7b58cff7581e9d7dd4f832160f2c7f8079c24571dbbe9de7e9515df702bbb9cfa7d415bc69350076f

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/oat/AdDex.3.1.0.dex.cur.prof

    Filesize

    163B

    MD5

    60b6bb68f5de3b4ff92ffa72086f3fbd

    SHA1

    2e71c78a1cc3e254cdaa8c330945e21b856c11f1

    SHA256

    2bd3d6315b11b5d8d72f42f0ad3a3709a010b6323815b6f5a79703e05a987d85

    SHA512

    707503a46ece466b62c7289d6318221e65d9603eb09c0f4a0c356118a55de5df73439613f757294c684775706429dc5633b00993ec8bd19f5465ef723dedc850

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/script.atc

    Filesize

    56KB

    MD5

    c74e805a917eb0183730feb3979e39d1

    SHA1

    2cfbf7eb9ca46878e0f3f333f5183eb973cb6de7

    SHA256

    6fb6b76f30defd7d357b03dc858407d15db084ecf35e6a6f5becc6ef4699d048

    SHA512

    076f8720e5f2cdc8a43ef83456a5bb4fd19d2c8481ea555190c47a2585e6a4b9320d150b61af5e4ed59e84c9b88ba104e2e10acdd65142e5ff071906c8976896

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/script.lc

    Filesize

    457KB

    MD5

    900988b3fc2343d118e943f8b6319e8a

    SHA1

    a4984c623fd0c2a390dd99bb98034c8059effee4

    SHA256

    82fed50405cebc6dca228657e6bfa0e422752a58fdf66728bccd2594ba1ec194

    SHA512

    b8b347eb7411c5ca0c67287201dceda9097f33d101ba7838fb612ec5ea519e6435518df8d93096b303e86b318b30c29b5aeb8f71847c9ab9a07b71a8c1d2c79d

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/script.prop

    Filesize

    335B

    MD5

    57dda5ddd6c290c691ce217d79550a1d

    SHA1

    1a2be0c9d063174f567e0904805acb319663c168

    SHA256

    5c523e26612204d9f97b5899529c5a8257ed266a23d8bec538c2cde3de1e8400

    SHA512

    7f926b293fa86dcb3cde5142682b334982630e8b34b9f9f75d2d433e7fe3b2fc2eb4dd0ce910e5a91ec31727c38cacd0ebd1947031a10ebf12478c82448b3f6e

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/script.uip

    Filesize

    138KB

    MD5

    623f66be0679db80bcf0cb370434c307

    SHA1

    6e29bfb29639aea71edfeb9144405ffbb13fb1e7

    SHA256

    8a02e92f5ea40bdd5631006fa62ed1398bf3bc66bf85d4fdc52f6e1f004a900a

    SHA512

    0231061297d24d4e9a4a479bbc767b2b270b0f2d9b09f2bfb3709eeece7484968766204eb8911cdfd2ecd94e498bedc8592b48662d588a0f6bcd040090f819d8

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/start_eventsrv

    Filesize

    415B

    MD5

    955f91c396d265fda969e32ff5e39334

    SHA1

    0e4fea6ca815872ae647e17861f41f1337dfeb60

    SHA256

    a704bbf02725c4257a30b7897469df5e9ee8dce209fe86bd974fedf41221e07e

    SHA512

    e094de8e4929ed120013ab20abc221ec96f9a7ca3f5b1d385d588bcff5d6fa6917f405f69a96057bab213313618cf0174a7b48c7e827c4243a1e087d1a11d677

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/start_eventsrvR

    Filesize

    345B

    MD5

    05e49852f64c847bd4ea86a6b7fc1b0d

    SHA1

    3af320c7220523181529df9dcbb276e118b39de0

    SHA256

    62cae7a55feab822f10c3ea66974212c1986ff2bdc2003d032f43f2d188ec47e

    SHA512

    0199798a45ca08e5003d511955fd03dbdf0626b624b427eed853eac01acb7ded09237cdcd0382412eff4eba501bf97355277722f5a994bfcbf479d83594a5ea1

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MDE0Mzgz

    Filesize

    1KB

    MD5

    38c78bb751afb517b2c29344b688123a

    SHA1

    32a6e9d7e60497dd9097d1838db63d8319bcb013

    SHA256

    e3b792b0e5c11857821be49546617ba7a08d455fb0b1e88f6bfcb2a0a705f863

    SHA512

    7a00a090345de4a2826f6e44dc643f84426feb6d522ca1d41169726908ff739e40f725d3772c5ea77ba73a53352ce06f082294ba389a188862915da254808dc3

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MDE0NDQ3

    Filesize

    1KB

    MD5

    06cd50a9b5ddea258a2d789b24813f40

    SHA1

    cb8291857e972e53bcadd715c274050e61487381

    SHA256

    618ffe2f961bfa40c8f9eb01b251876690ee0ef68d9dc631e0709e9cec989a9a

    SHA512

    c189eacf3cc83ee0cb536cad54a2d2b444c07e526d866affe00287cedf8754e213cc3553490dbad603d153f53ee39380748da7617784f9383e10c644219549af

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MDQ1MjMw

    Filesize

    1KB

    MD5

    750a1d919deab0e4f4abbc9363e90391

    SHA1

    cf60df9359b3e9013d3d6bd1e22a4d3eb8f208af

    SHA256

    61f314faa66bdeeebfe8fddac2e0c1c2e3821ffd2ef1c843ab5f642abe3ec742

    SHA512

    67a85eb75f4ebaaff9c7b8a03348ed6879774cede1ab93930c538b4a15419a4564232b091ca380a60d5d13dce3e53df15433f48a09aab0d64baf58e356baad93

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MDc1MzUy

    Filesize

    1KB

    MD5

    493a3b7f7376326fcb25927e95fcef69

    SHA1

    170e20f5672d77afbf027e6e4eb439068d23f0a0

    SHA256

    8d2d2cd5a5f8f003eda3ad1e68c5885ead3a7aa6eee69ce643b6711f8d9e8a48

    SHA512

    aacd77ab07db125a06d5f6aab8e9c312e20c935e936aef87a61bceefba75210bcec877507e26d19063d3fec50a9f691a75ce10740bf5a02e0c1756d1fca4aaf0

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MTA1NzE0

    Filesize

    1KB

    MD5

    cabaebd8b038a8bd795181f155333ae5

    SHA1

    4268dac1d641f18bf01105d0d16396f8b6df3d70

    SHA256

    8b9f2fdf908b7f9a8812f3079099ae9595d5f8075fa6637c7aff24fed7185b75

    SHA512

    066ed136ba7d12390d2e3b33b0591604916ccdad4d3dbdca4f078b02c590ee7333d29fb97bf4e344862836cc056b3669b00b4b39f285e368bfeae11ad96cad85

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI1OTY5MTM1NzQx

    Filesize

    1KB

    MD5

    70b18d746d717a5409355a8d39a109f1

    SHA1

    072e35cdaa2b04e2739c988fd9fa1efc34404e04

    SHA256

    ebbe40292407bbe1643fd772df606e609a091a99f7986b3c82662062b86593a0

    SHA512

    ed57cb49b16cd59912235bca7d68fc375c1ca05613922b46a29687666e2d35ab4138c3076a00ffefa8c1f3b93ddb67fef08cc23960a5d596908d4f23d9b1ad74

  • /data/user/0/com.njjijjjpjjjjjpjnji.aasss/files/umeng_it.cache

    Filesize

    433B

    MD5

    cd484ddf128096adea2b70dcd21e03bc

    SHA1

    e0a7ccf56f3138be4c31d512c2a90973eff8af5f

    SHA256

    a8813f2812d777b68745a6612b0ccb19a38f2d0532158386c5eca0bbf831c61b

    SHA512

    83bf31100596b4552f0d7c6ca8ac560a64e02a8d2dca6b30cccd102d87d96a896666816bf6d14dce233ac624dddb2074656adccf724c3b06099e038a37581d83

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    1KB

    MD5

    d3ef21d5e560a5a83b0970df1fb452b3

    SHA1

    0522cc3f81d92deeea29b8cbf02be77c6b4b04e2

    SHA256

    d5ee161fbb77a6a54a72b41acad924bac938d3c1db864bbd2079f525c90735b7

    SHA512

    a97907db475cf29c0143107fbc2bf492223bd9669ea40fb13ab067bb08a147361fa6c070476ebeef0a173fd2662c6f21fe252749f2bb17e41a7305090ed8c9c8

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    1KB

    MD5

    e11ce04f00f50f3920f56fcb97a44de1

    SHA1

    25337293dcad579f687c7ecb65dc03b6fa3bc6a1

    SHA256

    69768d6fe92d2700d94b142efac3535e0aa2bfb5a035a9c1b776aeeaef648c71

    SHA512

    1ba71cb62ff4d4d6083ac930fd7c1da0766b501ae81deaed3b8d460139e8914116d59357b9f5a8d10f7e450fcba4fe20d8e2246264c9cecb5dcbea4261c356f0

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    5cf67aa921c832e5b7d859a82e25e58b

    SHA1

    e3b6f110c50e17f4802c7ab7e9de42af42f4de81

    SHA256

    b5eaec244246f9c3c242be86ea0dda2e7108fb1ae6e16a1101611c557870a5ea

    SHA512

    285a37d8e87596690c49cd78c5de4336e781f591956621776b0ea5a96f4ccc4b647809d1012c541cd6139ffbe2d6477d17ff37defea4335252326ccdb2732fa7

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    213B

    MD5

    1b693a9c7d8ebbd7520e255945a62b8d

    SHA1

    d7d6323b01fce8bc1cc559969fd2ea7401024215

    SHA256

    11d175185bbb7f1334bb419a74ecedc69ea59479aae0e2ab01dbcfbb057c27e8

    SHA512

    c4da129f59b928a86845a34e6761811f7d52f9da103e8ba57082138394d490ebc518c1a8b1dc33398906375a9b166c5a2c012388f04fb2d56f160a20a871bf28

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    62d653ffd31b2b6238931d7530d381ec

    SHA1

    ad2c4731ec2aa07757caf8986e11e7e9e6986634

    SHA256

    bbe41bfbb9b3c50e7bafe5cfcccde2876e9a3057d7abd7508db8177d9d0c01ca

    SHA512

    32e79d87fdbe316876dd47cc6d2d4ecc848fb579c2a96c27a9d2bd0d3ab70801ec92fe092a4674e932126c927bb6d6cf73c5b807910f0fb129bc2b193e22fe1e

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    1KB

    MD5

    0dcd4e71c32f1bbb5add3d6e1ae705e5

    SHA1

    575b4d4b8af18bd3f37ee115051831efe3049a48

    SHA256

    cda0855b0dea070417d1fbe21e60e236698bf317017815c77e9945744ede239f

    SHA512

    9dc53ea11e375c56f64e2c78eb2072bc8ef6253f1fe3ad2eaf0fe3f3206a4c2b89aa610070bdd5c94c2b961c82923814023e6acd33fb91be2cd25894f01a8791

  • /storage/emulated/0/.uip.config.json

    Filesize

    8KB

    MD5

    85e52b095fe9e66ca9be0863ae480b23

    SHA1

    7e00afcdf80ff533f64fddffc2c6bf0ca94687a4

    SHA256

    85fd0ec10726af4f2e4d76d22cf39bdb2a85739fd637490631db52fa5c78c247

    SHA512

    94f19f3b45703293903d3c5d30aa8b9220873618325e3ce4768904626cfa3bebfa98119715118456ab6032bd67ed4bbbe1a49f3ef8fb540e8a9a384c9145460b

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    402B

    MD5

    f8b4320a5122a0e88176f8624d524df8

    SHA1

    beaf8778ee06536c81ab6d8a475bf9c6a49b6b00

    SHA256

    02b5c87a09394d3808578580948a1af65290c47dac691c49df4435ce8495ac56

    SHA512

    4f2ff91381d2df4bfbb27752e51080bf95d6f4cafe8ab2f4803e184477708bfba73a2f07a233dc2698c40a936e1932b5af1611086724c6da655504d47a3caf60

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    402B

    MD5

    d9fe073d3a4a1fafa00a97ec1671eb12

    SHA1

    b6a437f766ac631a57f53285e6b10f1729706f0f

    SHA256

    74a3bad80114d443c4ba8345d10cfd55815201671c2bad3e5c2f5800045d59ef

    SHA512

    ebddc566ec47da4333c6bda46cec09286c8db1f5383b1b65a8c114b2912dd80e45161c8d6f3c6058ece204fa6ed50389e0f75a612f8177063fe6d3d7ddc804f5

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    402B

    MD5

    37f284148484afb599dc8ef1bcacb21e

    SHA1

    d6f1a11aa911b460f6a7231677236f3aa5653ff3

    SHA256

    68f81e0f36f03a850bfb0a6a4e38af668d33c984568d030b4c2cad6fe45653b7

    SHA512

    1a34d0c38ce58deca601cdce611984decf5fb04365e0adcb6010e5e0d50798d7c1fca75c3c6eda994331e1dd1f5bb65585294e80da8432b6f19a103eac406f71

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    402B

    MD5

    c460ef8685a15d5b29d0cadd10c3b8cc

    SHA1

    6c6840609d67d0ca38ed4f4a67b13278456388f6

    SHA256

    feef3701c404f44d5bf33a983230e237c7f67bcc3dbf78865e77312ede4663e7

    SHA512

    ec9a95dfd96fafda13228233dad6c5baca74d3cf78a3987a6d8aa0119ffd504525eb574b812426bd0ca5c5353e413ba35fbd7d68b2c502b9a8d49d217666ed7e

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    401B

    MD5

    1882e60f2b0c954599a42114ab490248

    SHA1

    04c891e71bb6e7de7f4f08e5259c821c7c93db57

    SHA256

    fb7d6516fef5763fc355c6dd54165bc16fbc1b1b30adbbb92aea890293c52d80

    SHA512

    955fdb1529fbcde638328f5ff99bf70b914909fa86144433b63d546107cddbd732250a7ede295fa5c09d1317a36a4b0b4fd328b07bafc63e9d26a454435d1e28

  • /storage/emulated/0/com.njjijjjpjjjjjpjnji.aasss/NetworkMessage/NetworkReqLog.txt

    Filesize

    403B

    MD5

    29c0580b3e0f3937a39e942edf86c374

    SHA1

    93a1aa311165eabca81dc405d91debcd656c70eb

    SHA256

    e4c8a0aa287d9310572da15fcb485e84b29582c43b158d69efa5926d6df3214c

    SHA512

    70695d67a97fdcb2ae442f887c30bf22475f5a53b618269682a30fe1073cede956998d2c0680796f5d43b73a307f4b5ebd2e2faad01fa050ee81ba3289f2afb4