Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2923138s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25/11/2022, 10:57

General

  • Target

    Paint Art_1.1.6.apk

  • Size

    5.0MB

  • MD5

    ff88397d0fdd02e072a80f38358c4253

  • SHA1

    83333da8fc0f1dfb716dfa82ee7470702356ad76

  • SHA256

    7d517ea9bc152220fba74df5da9eddacb06184d38c79eaac2539c2f07d40f4e2

  • SHA512

    fd0e2185eabfdb873e4605f18ce0eacac08ed15a108881907bd6b346f4ead2790f40a99f2b40025d927ef9a0fdd4eae0665689406a2af9c5104cf152f9dc262d

  • SSDEEP

    98304:WMQZx/8p0wZKYkiViyXUm7OG+IsilxSiz31JqhVowaCZp8c:WjZYxNywOLsi031ojRFd

Malware Config

Extracted

Family

joker

C2

http://limited.oss-ap-southeast-5.aliyuncs.com/setout

https://cxjus.oss-ap-southeast-1.aliyuncs.com/af2

https://cxjus.oss-ap-southeast-1.aliyuncs.com/fbhx

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

  • Loads dropped Dex/Jar 8 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.noku.artpt
    1⤵
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4079
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.noku.artpt/cache/1633031840514.jar --output-vdex-fd=100 --oat-fd=101 --oat-location=/data/user/0/com.noku.artpt/cache/oat/x86/1633031840514.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4358

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.noku.artpt/app_webview/Cookies

    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

  • /data/user/0/com.noku.artpt/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    8efe7d14d40534e92f734805f97d39fd

    SHA1

    d49772f8a66815f307ac8044382cb15dc0e38c2c

    SHA256

    11c816de049fd4ac3c4a0da8d7a0ba6da636639cdea0ac8433237a0cb294f938

    SHA512

    9c0d7b89bcc0fa7114392e92884e04e0dc8b0835058928eaad9c7e2df5431aaecb66b42c3ae6896e1b6eabb3e09e62c00562b906b4d9fcc64b98ea98763776f2

  • /data/user/0/com.noku.artpt/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.noku.artpt/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    1acc9fddbe488953c914155678ef89ef

    SHA1

    c8f114b63a5d7231c095c1e6c313e67dbfd07c3d

    SHA256

    5abc2d61164df66fa9c5a3d4420335459c2f3b255fdaf3782992264f0afe8e56

    SHA512

    cfcfaf6ca5b17503fcf5b8b2f4953f71ead8668c47c9840f37456be40232559baec6ef9822f3c152b2ef3378b5db3c655c455d196f0265c5616944fa606c6b93

  • /data/user/0/com.noku.artpt/app_webview/Local Storage/leveldb/000001.dbtmp

    Filesize

    16B

    MD5

    46295cac801e5d4857d09837238a6394

    SHA1

    44e0fa1b517dbf802b18faf0785eeea6ac51594b

    SHA256

    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

    SHA512

    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

  • /data/user/0/com.noku.artpt/app_webview/Local Storage/leveldb/000003.log

    Filesize

    495B

    MD5

    74654f51127d06bd2505ff0bf8a1b1cd

    SHA1

    a800c83a786cc93fef4fceb3aea4af53605507c6

    SHA256

    52c649ee5951b01ecf98c09b7aeda1927006843e0dcfe7e301c4cd780b6c9c6f

    SHA512

    821bbd4a29e10f375c3deee146693f3590297f780e66af173de199fd8ba599d171b8a89bad4eca2c3112eb0cc14480a14fb5eaec2d1e382781560ea1770f0403

  • /data/user/0/com.noku.artpt/app_webview/Local Storage/leveldb/LOG

    Filesize

    70B

    MD5

    137327600c30a65377bc05f81a2503e2

    SHA1

    e210a67b7c28a6dea2c784a28bc5488905168a8b

    SHA256

    3decdd36caf42e2c4664457c032b064271ab5b45603cb7fe4acdb5da548a9490

    SHA512

    6e58725b43e7bd2d65af2ad6ca7c8b709af6ecdb57f2bd8a843aacf44cfb606d2869829a45d869a8a9fd5b939ed3a3ffc9bed97d9b9c1e26cedef0e7cb31384b

  • /data/user/0/com.noku.artpt/app_webview/Local Storage/leveldb/MANIFEST-000001

    Filesize

    41B

    MD5

    5af87dfd673ba2115e2fcf5cfdb727ab

    SHA1

    d5b5bbf396dc291274584ef71f444f420b6056f1

    SHA256

    f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

    SHA512

    de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

  • /data/user/0/com.noku.artpt/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.noku.artpt/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    abf41faa4ed77d82404084b1dea3dc1c

    SHA1

    7fc5e1370dbbf730ce5e6658891a05d58429485e

    SHA256

    c4e0e6244c00397490f23d7456dd1704e09339ea495313d7ebf78dadf7dd7ddc

    SHA512

    fcdd44aa7fe79963ff0a35372ab2ff7b75e7e3513b071dc1fa805343dcbedda5b733ecc700eb49be195ef974a969f66f4dde159abbaa10db65fd15b880418812

  • /data/user/0/com.noku.artpt/app_webview/metrics_guid

    Filesize

    36B

    MD5

    9079b124b0ea7273835a417f619f3b4d

    SHA1

    346655863b83653094c6da5e19872e211bdba184

    SHA256

    1e01f0c5e5af8dbb43021b2853bf88f88db4c9cc9678d3517f421d83ac6716b7

    SHA512

    aa5de4d6568b91acf9b1ba3976d8c48e24211a2ece99c00327f056fa17b7cce48af5bac48d37ca46c2841891f6a535c1f6c9a35660e91b195a25813628f7f509

  • /data/user/0/com.noku.artpt/cache/1633031840514.jar

    Filesize

    19KB

    MD5

    2f6650cd0ad5355df31420460e89aa8c

    SHA1

    1eacc497c24ab59470e401c4a32151c62a2d7591

    SHA256

    badb88bac82974410f36063f8762028ce5f12f739ae55d781a991c301a3d4162

    SHA512

    97967ec30c9808d613dbd372c9819f7d48ba9744d33db6b26301f5aaf6ab0986bfb422c5fa42f9c57ae9d11320bebf0c96a6fcd023997dec354751ee2b3c804f

  • /data/user/0/com.noku.artpt/cache/1633031840514.jar

    Filesize

    19KB

    MD5

    38c960945cceba468ee4f1772abb99cb

    SHA1

    c7c2d5bdc5d06a5f43c24809602d0f2d2ba8e62b

    SHA256

    b8d90074a4efd78bcdecc27a24d4249d53b0b76134590750733d1136d9ad964e

    SHA512

    efa6c5518308ded2af559bdf6276176be8f7067dd1a486dc7f23395435a2cfca4f40106275e38ae126b52d943fced8383f92469c734f3b721cfcc78db400e1f9

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

    Filesize

    6KB

    MD5

    a67ef39c61302a5c5c73b56d2eea0e9f

    SHA1

    d1108301f7ef33e579fbce2f4a88f35df6cb8961

    SHA256

    5c1023612bc9c40083d33facd402e2bcf604f5d4244f189e4cbcd29b19d7a64c

    SHA512

    9985766f59414de9f7c4e0583c858d8430dba0eb2a629d72f1434027559d02fc66150a92fb02864d3c1363c9f9011bbd64ef89b93e5dfa66647d90b639f0b422

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/f038e94cb33282ab_0

    Filesize

    123KB

    MD5

    05d4b3b57c4f720fdc9c3782ad0f13f4

    SHA1

    29982bce128ebb589cd3d7f1ec19b03ce6c61730

    SHA256

    53cbe6ea4f0501eee32743cf4486a23b24898dff9c3ef581939b7db6155f2aab

    SHA512

    6e9493fcf56ef79dcc2ea4c51d7d975e8dc63e438bca05b4884cbdf26173ea1f735b02815970ef08b5251ad6ec2355f211eb44c4c8da15d133a7a46749222844

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/f038e94cb33282ab_1

    Filesize

    196B

    MD5

    4cc5fd4837d218fd07277c7d7a9a83df

    SHA1

    99f5be59b49f1b4e6d794588adbfd49f550c530c

    SHA256

    711d8f8ee7e4ed493c150c742ed82d036470f4dc20de8a178144df0c64ad900f

    SHA512

    d1d44659ab1c77830612f9542f70f350f5d6a927397ab6c99595d13cda6964b6f812872bb7c9f2925b46cea0990d6bba14e441c0191271393c0e4ba594ad6d30

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    48B

    MD5

    93a0e535184ec7c186ab7065e57a529c

    SHA1

    1aece20ec5aa96917593a73eece22b8f27d78364

    SHA256

    772a125cdf670dccfacec70e9af68ee6e86da2c6a5af521e61c0b36922610d1b

    SHA512

    967b5cd469bdbb22ffc5c23bcbd6fa35e1e84220cca4bc0cc8647e7d91b9bce30d52da71580ea1540c64d635b56baff60d0efcd65425687d185e139da2c6586d

  • /data/user/0/com.noku.artpt/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    fef21609686905b2413b7850c7129161

    SHA1

    0d37761d0ea304991a1c44a36350081ea02535ac

    SHA256

    f6c5c364f57ccd421f92276e139e68665ef674df9129adb557d20c2428fbdd17

    SHA512

    6d709057e73b6a1c454b4aaf1239ffc132340956f28643254836d481150b93316bbe8d56baa8773950b81c1b5c72ae1e075bc62d24d3685c3ab40c8b5c4bdcbb

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB

    Filesize

    32KB

    MD5

    c2dbe60d92a4c841ffc4c9f9b6131aec

    SHA1

    50483e82d68e37d054d3c7ccdf812afeb6626f25

    SHA256

    23f8db729e1b9a205e42e197a37b7255d62492e3642e00476ef77c135d57b3b8

    SHA512

    4f1a9efae44fb658075e5d4ad41642e118562405248c2f5416bdcbf0f9e5f497d08263402b67186dff6e43550e9e9ab61ccaadbbce28c242197f6e2f5d7544fa

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-journal

    Filesize

    524B

    MD5

    0e902d8720f19794576b585a698bf076

    SHA1

    672e4a573e9e4dc53b4e844023b47c4f66a82d7c

    SHA256

    e571ece50559e954e19af28cc86504e78808c1ca9d48a38a6b6ec3af9d9dcaa5

    SHA512

    a0e21595387fbe767098046b5d7fb94d99cec8f7a42d8464df873356123dc8d61a4df129fdc38adf09c62b888a1d8a39ec9f472a037c589f428dff6ff233c042

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-wal

    Filesize

    40KB

    MD5

    0f9fa6931c32698a779adeed0d5a6aee

    SHA1

    81f04dd5861e5eea29867efeaa14b7c672f871c9

    SHA256

    55b603eedeae7f3cf847d2c0a1e8b2cb0c4d85160c942de4f2cc178c8b6faf0b

    SHA512

    ef354180e31e48d9c3613073b60ae5def516f7623fb4bdf9292d245a5879f773d41a2081f67c702cd3fbac565360e812110e48299c24212a9217555f752008d4

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-wal

    Filesize

    8KB

    MD5

    1c160536d2f3c606642b78ad894ba8bc

    SHA1

    138ecf1627c00c15a18b7c10b022950ced24b4b2

    SHA256

    4ebc3d7eed826c9b8abd35e45f62960098d9f2fa94cbd9cc6c18f888dc14c5e9

    SHA512

    9c23ca0745a9bb298fa5e34970f0d74dbea6ac93dafc2a3bbdda5d7a2bb4966955e494df2054a18b7d8e8282ef0115c1a17a50560f68148e3a8cd14e2155af48

  • /data/user/0/com.noku.artpt/databases/PAINT_ART.DB-wal

    Filesize

    16KB

    MD5

    3d05626a0ea1af724069436764d1c403

    SHA1

    cd8933ae637ac83315f076451a778c342195203c

    SHA256

    2df16d13a1c2fc211c6cee90fa0d561ab3400350373a255a969959eb5d4b3f15

    SHA512

    0e9008f4152c8cf2ffbef8041275fb5c22951458e9c456526a94114f65cc8b01ef052c7b6c320638edc37de35c386267bc41a3a533c6bf16d4754d6b16526cdf

  • /data/user/0/com.noku.artpt/files/bonanza

    Filesize

    9KB

    MD5

    fce9a9d497f2c2398f99709ef6304f88

    SHA1

    4ba32067efdd50072f3abb5d782bb26216f0dc27

    SHA256

    7a9031d2d973aa1e6cd92e9b42206d95474fcb256e8d7b97b098e5d735fe83ae

    SHA512

    f6ff56b871b3600a9bc7ee49c2570ae4fcde39b76cdadc8afac45585ee640aa93d5943c2d8bb0a8d558b5868a87834eeab29c35be183307c775edecbc14fd475

  • /data/user/0/com.noku.artpt/files/bonanza

    Filesize

    16KB

    MD5

    2d30709d22b9d420d541c09e8aa00d13

    SHA1

    6f2feb4561cf08fed2afadb3309c8c1a2444eaac

    SHA256

    9091d9d9efe1f52d18cb6b22b83b39babea10444552057699d3cf34b1eb666b8

    SHA512

    33132c3c931299bd0fbc6c318f9a9db2c2ba017f2bfeb9e30d823750fcc2ae11399832fea6a35ef388e5f46ef9d3ac74966d37c92495812b447cb3aeb12db373

  • /data/user/0/com.noku.artpt/files/bonanza

    Filesize

    16KB

    MD5

    2d30709d22b9d420d541c09e8aa00d13

    SHA1

    6f2feb4561cf08fed2afadb3309c8c1a2444eaac

    SHA256

    9091d9d9efe1f52d18cb6b22b83b39babea10444552057699d3cf34b1eb666b8

    SHA512

    33132c3c931299bd0fbc6c318f9a9db2c2ba017f2bfeb9e30d823750fcc2ae11399832fea6a35ef388e5f46ef9d3ac74966d37c92495812b447cb3aeb12db373

  • /data/user/0/com.noku.artpt/files/ionsxg

    Filesize

    21KB

    MD5

    df63f85b7c5506c22afabc5980079c96

    SHA1

    7f1701c8ad372955f25405d45f340ae31b35d256

    SHA256

    a64ba8f89b414e889d2ecca4f8dc0dee47984f0586fd8af2a073782975851665

    SHA512

    ea7272552f5b2750421d195bc9982d14dbadb3fa8b45d3d1cb5c6cb979a89de7c158e3acd00d058c1fb4171f2699c4b57abd0d95e1e6cccd99cd9d3eb14c5f75

  • /data/user/0/com.noku.artpt/files/ionsxg

    Filesize

    43KB

    MD5

    3d13a1c2d90322301122f0f451ec5d3c

    SHA1

    8e71493581e05a62efb633197fa5a6709c7fde1d

    SHA256

    2fc36a3881ab97d214092a47cb9217871a3536ed3d8d542c74e64b4c6135e488

    SHA512

    f7f9a054ea819c38a5c8a3835c84a20b6364c7d3c5968f61c0d96b8d338038ad381a8df82146e1f660b455ed7828e9839ce3b3a43ad176ac2022406c86bb1089

  • /data/user/0/com.noku.artpt/files/ionsxg

    Filesize

    43KB

    MD5

    3d13a1c2d90322301122f0f451ec5d3c

    SHA1

    8e71493581e05a62efb633197fa5a6709c7fde1d

    SHA256

    2fc36a3881ab97d214092a47cb9217871a3536ed3d8d542c74e64b4c6135e488

    SHA512

    f7f9a054ea819c38a5c8a3835c84a20b6364c7d3c5968f61c0d96b8d338038ad381a8df82146e1f660b455ed7828e9839ce3b3a43ad176ac2022406c86bb1089

  • /data/user/0/com.noku.artpt/files/temp/layer_1_1669370320273.png

    Filesize

    831B

    MD5

    aae4d28956b6b420bb7b24002b22b494

    SHA1

    b276ae47f151a3724340f0508176c35308812aec

    SHA256

    ee2355504e7096f63c4607e59a9081be9ab6ee55dbe4cda997e6ad128160df11

    SHA512

    ad222e81e4ecc53b1ba432237367316be04ec032902161fdf2f1c4659b16efdfccfb836a306006f124af2cd4d7de0eefa49c2f65534cda04e23e83f527957a65

  • /data/user/0/com.noku.artpt/files/temp/layer_1_1669370343854.png

    Filesize

    6KB

    MD5

    a4ee626c30973035b6317b61b22cb364

    SHA1

    608fecf91b0f31e8c0e4a2cfd0ce781630dc3bb3

    SHA256

    5da7435940b1427af9da6a1e48e3a590940ca2f97faa82f5f7203a4ff558fd9f

    SHA512

    8162bda94ee7aee3ce58fd3ca4d9b593cfae35c2baea7168149ea4c95205aa67b6bbf7ab4e49692121f4df814967d07e2e1bb95e3f7c77efafd0794724d80f51

  • /data/user/0/com.noku.artpt/files/temp/layer_1_1669370380540.png

    Filesize

    831B

    MD5

    aae4d28956b6b420bb7b24002b22b494

    SHA1

    b276ae47f151a3724340f0508176c35308812aec

    SHA256

    ee2355504e7096f63c4607e59a9081be9ab6ee55dbe4cda997e6ad128160df11

    SHA512

    ad222e81e4ecc53b1ba432237367316be04ec032902161fdf2f1c4659b16efdfccfb836a306006f124af2cd4d7de0eefa49c2f65534cda04e23e83f527957a65

  • /data/user/0/com.noku.artpt/files/temp/layer_1_1669370383856.png

    Filesize

    5KB

    MD5

    36260c49db18bda128b234300bae6d10

    SHA1

    5da3b736213b061a8665c456faf2d18f06b18cc8

    SHA256

    f01e043e62a580fc17aee9b70ec4b5adae75a837b19aafb90d53c68ec9e100ab

    SHA512

    a5284283f4713e2fc2877d401a3f63e424d4bcd1e4b5b6eb3d6e11daa88c5f85067bce489e5acd9421476193961494426a68f17cad5269e2930518bf042f775c

  • /data/user/0/com.noku.artpt/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.noku.artpt/no_backup/androidx.work.workdb-journal

    Filesize

    524B

    MD5

    ff709c141db211796b5172a5a0b04a6d

    SHA1

    da4942240ccedfa5bc5fe21c87317939c318bc04

    SHA256

    1a18381e26b95de579eea12d66b119f329a6ec71aa25c581c1b440122e19ae80

    SHA512

    17444fb57c121fb572df9ca9dc87a685ad7fce1b0b5e7ec314f3b6945f2ac71286e08ebb0b41206182dc764f7a18a79f86479fe01bbff3c17880742eb1aec3f2

  • /data/user/0/com.noku.artpt/no_backup/androidx.work.workdb-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.noku.artpt/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    0c01a8d1dc67080c8fb92e328a78f775

    SHA1

    3d40c741d790c2d3ecd73a12fcddbbd911da6e90

    SHA256

    451db719fbbee816d4689744522e05e76567b920fa80d5683205e90c9c12ea98

    SHA512

    afc3b80cb603b22d43b5966d0850bf0fa560a8ba795977a2cd4325bf3303f80acde4705df640ed62844be0528e79c3493f0dc335524374ac8f87c7355a37d431

  • /data/user/0/com.noku.artpt/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • Anonymous-DexFile@0xe244f000-0xe2450638

    Filesize

    5KB

    MD5

    e9cfb7ee45bfecdaef2fa54cfd675342

    SHA1

    98bc3ab8a5b82e468d2b3cdabef3944afa4f1905

    SHA256

    52ccf71190f0ad15cffe199cae8f1ea2c8ee7ac9c47106336f8e90bb362d1f36

    SHA512

    ada5590fb169035ba253ed9e45dcf877348f3f5bdcef0a5d2ebc56cb1314c23d37388c2577b87359122acadbbd816fd06a2c40bd81c7a96f3851177172b6a9ec

  • Anonymous-DexFile@0xe3e52000-0xe3e53638

    Filesize

    5KB

    MD5

    e9cfb7ee45bfecdaef2fa54cfd675342

    SHA1

    98bc3ab8a5b82e468d2b3cdabef3944afa4f1905

    SHA256

    52ccf71190f0ad15cffe199cae8f1ea2c8ee7ac9c47106336f8e90bb362d1f36

    SHA512

    ada5590fb169035ba253ed9e45dcf877348f3f5bdcef0a5d2ebc56cb1314c23d37388c2577b87359122acadbbd816fd06a2c40bd81c7a96f3851177172b6a9ec