Resubmissions

29/05/2024, 07:44

240529-jk595sfd9x 10

20/05/2024, 06:02

240520-grv2msfc7v 10

27/10/2023, 07:30

231027-jb7fvaef28 10

Analysis

  • max time kernel
    1880509s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    27/10/2023, 07:30

General

  • Target

    signal.apk

  • Size

    79.1MB

  • MD5

    76351b5e3b9487b0b39759dbfea5f0c9

  • SHA1

    19e5cf2e8eed73ee614b668bc1dbdda01e058c0c

  • SHA256

    549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0

  • SHA512

    0f858b36e47012737de9ca88399a4f95740f6ffc3639b5134aa418ccee441af905f1e503775fb741cd3def7931db18b517a8b2f07c4f0576f8f79ff9fb3f3fa7

  • SSDEEP

    1572864:U/u4rrAgdZh87ZlyFLSnI8LcejgNtwQYpxtIwTJSzslunYuTAO:UOIeZBI8LHUUxlT4YlSjTb

Malware Config

Signatures

  • BadBazaar

    BadBazaar is an Android spyware used by GREF APT group.

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • org.thoughtcrime.securesmsplus
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4526

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

    Filesize

    109B

    MD5

    59ea1b7e49e1ee71010f72626e8e694e

    SHA1

    fb21e9142b344dcb2334e880828b53def4d2cee1

    SHA256

    fc06131d669e79e2b0b9fb19037e402c63e79d0ff7053f0c010680b40579dcca

    SHA512

    a29d4ee45e21966152285147a2498fb6db15f30830aca162e6447b3c24ac4630133f9c7c9fb1091c69fbb3c1d8448c2208a0552eb9ec349a5f05d7bd472072dd

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    169B

    MD5

    0a3f826bca94630eb78211ce76ce337c

    SHA1

    3858d4d0adefa945c2b74cfa234f90b4c2f1aa34

    SHA256

    cc672e5518d5425f911edb2d72af0dafb9a9e1183e6a05f0b3fcc57b00a64284

    SHA512

    aa18e8a1546dd79498dad745718977e3cae7415534db365d2c3adae0103edd3ef1a35ce1424bb5835d2f2fc291ea8afec195215996b5d3f111a909caf44293f1

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    235B

    MD5

    6d3aea2fcc804f0c1c0500143d0c2f1b

    SHA1

    1d4e9d8b82aeaf18d32ed7c62dc2672dd693412e

    SHA256

    560c3a69a8a4cc2cb7f441c4961114aa2466ed3df3d5e632ead41c1316c5c6d7

    SHA512

    e755d98190b6e5f20c68b14bcc7e1beef6c285af4c94f7fb36a99dc3a691f3e617f29871f40ccb3a0c8fd99cad8065d597db7b5d2190d30067bc82124eccce8c

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    301B

    MD5

    0c5e1b276a620f92235926c974051841

    SHA1

    b77612263b3a24a0f2560aab2ee492327ba4e493

    SHA256

    d6c29b2f5103b3d1fe674359e534f165eda9dd066a1926ccb4988ed2cb1ec4f0

    SHA512

    dca7711fdd082ea42db8cb2d85dbdc4838bd24c5b4ceeb71120fe89df96944e786e3eb688ebc8681f5c6f9afc9e5013b4ffc46602fe62ec9652b37ef57f7ccfa

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    367B

    MD5

    1610abe31993f2862e1680c93411214c

    SHA1

    0bb99e7dd9e67281bb5aee2f4716ece3b11e2eac

    SHA256

    b67bc075caa754d644f0d4be9da66bd302e34dcc73dd7083f01c31982a90d282

    SHA512

    3bf51802e56fff570e9a0f9ecc37c02a78976ac52af07ccb4e6280f4bc4c6a3b631fd714661085590644a9065d887f596935fb402860fb961f7a916aae01f405

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    433B

    MD5

    3b19330d7f9b99758ca844983b74f592

    SHA1

    6ef1ffaac3765e38e28dc0907dabec1c9940c21b

    SHA256

    04c7323da0f47513f6c5abc62ae88ac6d8d8a44d0dbcf2a6602d570c8a791ee1

    SHA512

    f11a485748268ac7b183e59958bfa9fcb5cf6b4967fb33b31f3f61d6382ac69c105bf80ad37ca7453981f802ace7f1748eaf2ab62b9e5c1c73506e7f17071550

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/.names

    Filesize

    1KB

    MD5

    302bb168f28a42cddbeb91cc16f2c6c5

    SHA1

    be0c8f6efbf5c4a37b5a131bdb9aa24ff1631ea2

    SHA256

    8e8f926d2ea0a99e2e879c3cb7cc0d5a384384e92e03f0c0ef3fc5988ce1bb3a

    SHA512

    00aeb725b7d39a9bff708adf83384d94f2c4117c2b27f79ed9a6f31b55454f1d145dbc28ed7b67f2c09f3e8fdc9e3bda507a8ca8e5ea40b689f4980f633bcfbe

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/077ad4c4-87ab-4645-9801-9850822649f2

    Filesize

    170KB

    MD5

    d72e1a75651c6cccb27eaf4b0c89588e

    SHA1

    c012a6f4d563f8850e6fb0319853b1712c0380e4

    SHA256

    88e40f59170639ef6a1ee3891723ffa438e872a0485a642dfa54dabd9f363060

    SHA512

    fd584fe036aae4b6f15e1666a9824c942ca6fed4f40f0543331fd34071267edb25eedf46cec2d4857f646eb0c996dd05b904a3ca7467e764dc49b1656c6d83a6

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/0fd9760e-f020-48e5-9bb7-721e0febb8a5

    Filesize

    288KB

    MD5

    539bac54148ae6c04efcded8159cee2c

    SHA1

    f9104895de0e11fa65d5a51cdc01f10d074bd529

    SHA256

    904416f3fc8a48758ef5e3c7a6e2f445637a0fe4192d7285a156af87237ff6e9

    SHA512

    0585771e115dc194f92e8ea56a52f2ac75071fcd96dfc4fbb71f4eaebe0b1346530c89179fe3d6be54bbc964746294f14f8db4be17e21f766f3880726e0a525d

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/1a064c24-a122-4662-87b5-19918d6ff689

    Filesize

    238KB

    MD5

    632845c98227abb2d7fa3d9af25f1efa

    SHA1

    e174c358ed29e09bbceb92bc11b4d8da0498d794

    SHA256

    03ffc1d2c1e826d45f555024c9734438ec6712e5dbbc0520b784f1c4ef25897a

    SHA512

    d8f873e36743ad5b7fc3fab137ff6665718e58f6f79302679700514ecac81e508a4e6a5366577765fbe84c42b319d028c9592190e5dadb3156b0b370a11e0705

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/3edb8e1c-1eba-4db0-9562-accd7baedd54

    Filesize

    148KB

    MD5

    7b4512be6798a183cae8a7b7387639db

    SHA1

    99ba98866bfe5a68f7f53b0900c9c002008047ac

    SHA256

    bd008d7fda7899080fa5666b29443ead93159e3de5a421591debcf4f7ddbdeb7

    SHA512

    d1327264dc9e1b21ab4cff8a9ec7a4337917a9cb09365d90af7a6f11a163146b8c929e18c5043e4aab3a8c3d21547bba2dd0a7dadce33854140a442f689c2537

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/4597b75d-d204-49e0-9a6f-fec77754af50

    Filesize

    278KB

    MD5

    b64f0d27acf7576bd5305179fe76f581

    SHA1

    65c817b765c339938a9f169dbd3d1460cdad916c

    SHA256

    a2c118c556a17b11c67531d250f8a1c5d796bd52e5ec7bf21abd8e8b03dc96ca

    SHA512

    b1b417738891fa14a31a74244e12e282451017eff64aa65ce547ae6153a1effd82fd81867cc4b13f548ad236f662e6f7cd71a1d88bc11d60a995a816d876bfda

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/6cd1f2de-1175-475a-ab28-1642906c5277

    Filesize

    147KB

    MD5

    96e3036294e99e715b334e20c6f228f8

    SHA1

    264ef195b12fb317af3c97827799eae3b6dfc5ba

    SHA256

    0248eb9fdb9d80f5ff1d64944065c3b4818fa10625b223774b8ab3fb44b0cba2

    SHA512

    8acb6234d87113b33aa48435e4b81080869daa4cd1a3a5383be7fdf666b493dbd87661ad96605bc889d5979d255765b419889a62c82db10b62ab8a257430d41c

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/6d687d7d-d0a7-4ad0-8abe-ba803306e833

    Filesize

    214KB

    MD5

    d338d4ef0427d8d8223346d13794b342

    SHA1

    60c2b05162fe489d62b1405138de0f254c5c6d0e

    SHA256

    abc13fbcc60c07b036d13a1b335ab0db8885e238c77f862e0e88e52c308a3744

    SHA512

    e6abbfab580d9cbc74fe2c0399795ccf14c8b3d0e92dc447a5d9b8a9a85a6a846da247eda79e0b205996fa8422ee9b57d942c404beb6d98d6deeda40f2dc4a92

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/6faf2abd-509f-4f9e-9bd7-7d3fc8487eb6

    Filesize

    117KB

    MD5

    ba3bbd476be135bfce48f89b19d73999

    SHA1

    330848e2226235b513505ad1a48200162799a229

    SHA256

    f4a86afb5218e26b8f3da02a4f29297f0b940b8caf1b7673ed795d26198fb32d

    SHA512

    660616c1ab12a70d00d01abdc6054e872024d7b0bcc68903855579e7a4feb68a6d228d3cf2724cc267b6f0e99023f3fbd85cfd93e9160155872d424c79455cdd

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/73803266-7e1e-482c-a676-7072cfae06f8

    Filesize

    161KB

    MD5

    9f8fe0d98baef2dd38d46bba91ed678c

    SHA1

    c4ecd5f8cff27c35f4a08ce8ea701ad19b1c8c31

    SHA256

    965597173c56c9b6c5481f3e81f3cbc824de7b42c17345352834a7353bf8606e

    SHA512

    c3a2d883bd1d44c6465d57b68d8e51db8d67a2a8af1686c872510ac6d3ada4102d8982fed84da89a1e9173222e7f7f7e23efc31f1785cadd01a12d0cdef05f81

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/86608454-4562-439d-b1e2-a2dfb1399518

    Filesize

    228KB

    MD5

    fcd043c7893d9b28774977b053f8e497

    SHA1

    df9003ddb16cff0305c05ecc5c84c9c6fceffb84

    SHA256

    d91cf43715294a5ced7faa1b65a8f424be0678b92a4bc4e4c00a56e7419c2a20

    SHA512

    5abf81474f25596686b2ec9a797c5d2f29ae74dfd6a74afbf753a47cf33973a9e4dc5cbc8a89675db19c0c359ae4d9b739d8264fc057993b5477a380cef00b63

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/9a311c03-32c3-4abf-af00-959d1f672e10

    Filesize

    76KB

    MD5

    d585d97314cfa87060be5981d6135cce

    SHA1

    163a432a0f4097aaca253a9ece2e453127731fd3

    SHA256

    0566297fb9e5df14e8d3de706a05ff738fb2fd56596c8c0e775922f2fdbb2a54

    SHA512

    5cfe4d95285bc796e50c0e7f1e809592bbbc0d598c569c8880798b7e71f26467a7bfc3f5a5071c8a697cec182076be8bff34dac7f1a2d1a71f2e6daadfc408ed

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/9b2dc2b0-3bce-4a5b-8199-cb037ce26bd2

    Filesize

    161KB

    MD5

    7befcc4c23266bd3922b58671ac2900b

    SHA1

    2fe68241624148526881ceaa093043e1589000fa

    SHA256

    5877f83088dae47f3f9eeb0b85541eeb01bbab1926c6f3d1442bcad6485163a6

    SHA512

    45195bdf37c18f9416ef5bb14af52b5d36638db9567990139cdc75364895d64d1f2d38808d8bb375f96fdfad6564b1321dde8ebecca2e9935a6c418ffda27eb9

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/9f9de2a9-b544-4a93-8839-6043d3555476

    Filesize

    264KB

    MD5

    55cd724b27ea10eba6078dcd7b1f481c

    SHA1

    37dda84ed2f872fc4e9847aa75843ec911a7f98b

    SHA256

    452d644ede4da87676678e3a945187e62f9f521e53fb9968fda04d2cd9ac974a

    SHA512

    ba1bafa9d2d5782a662d435da3d6a7ee50f97f18444d45cc5d55f041f353f5ecf61280de617752dc9cd5dcf11edf36b60d91875e5d4249f2f8f18b3c410387b6

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/a4aa1017-9c25-4e30-862b-dfb63a9a121b

    Filesize

    144KB

    MD5

    16c1cc03d85341746369325332e342c0

    SHA1

    cdc596df06d07eeae82094083f8ace5e0246a4b6

    SHA256

    1619b794dd739bca21ea129bf4ef398b36239a618938a63178dbd0db999e72c7

    SHA512

    701c6980aeaba02ea91111669721605052ebf19f87e3c42196f3d730fe5a611056ce08e5e1b1cbd600bb7dae5cb1f337d6ceec9fb9f70f857971a24e8d37a21e

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/bad6379b-b9e3-43d6-9ff4-eb07fa52a9af

    Filesize

    246KB

    MD5

    b3db8d5f3a6862510dabaee404960b9c

    SHA1

    a9ad45b562246d690c10e50e143bdadebf98943d

    SHA256

    65d57f08209a869c87481827cc7c30555afd15ba6e0e4b9e7ddefa56909a0211

    SHA512

    7a38d5cf861ef9676be060f7715a2670b35fb0c3e7f4488a09150da08a16b82a63fb1b9dfc78734044db4485210e72d31588c03f650a813d9db16f147e55ea81

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/bb05dd75-4d0f-427c-b09a-b16b5f94463d

    Filesize

    161KB

    MD5

    cd386675350ff3450e4fa02691fd848e

    SHA1

    9854970ee8f6bcfbc3c98f79fe8bb2a72b2edda7

    SHA256

    31dceec703f4a5684a9967a6ef46994caa34e5d73a7ecd22e212294465d786da

    SHA512

    77528d24e294cfa6953f74eaba379ced0540395f6cd6623b0d4838ff7438729a67caf10b75701e1c142ca5ca36762cc0bf327dc9f156dee6b6b6af55f52adbdd

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/c1ff1758-b4b7-4d2b-83a6-e96862b56376

    Filesize

    157KB

    MD5

    6bfac05fd2f3cf09f417b64cd1cf2b6a

    SHA1

    6bb61d6d916dbe0ba45a974a00c744c698d66320

    SHA256

    db3dd595f330a74c44da3060f7128fd5d31d9cc8cb5c2dd31a275e5693b93725

    SHA512

    c8faa44fa19e8d46c993ef27799b8a0be42972b513a73724c274cd04c809de1f307e44fcb037b033bc2011f0154da30e23e699d5df4cd6ecf57d57215fa2dff6

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/c5d8db6f-190b-4edc-8d2c-41bae92f9813

    Filesize

    78KB

    MD5

    e4f0b93a6e9ab3351b39387886a16a05

    SHA1

    614d7d611deaf96cca18690d0490acbfd0bd2df2

    SHA256

    688081e9995f6c9e8770ffa8385ab7c5ac1617509c9a9fb4087028f11cbb05b8

    SHA512

    0fe63eed38b4f5f71fff8fab427ec91c462451b39db0897a0e5608ad5e0d8e4976289ef517da1560872c910b6e720f9fc74565888901f6fd0a9308c9fae271e6

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/d36d3a0f-4033-42fe-bc1f-bfbca3e9cc6b

    Filesize

    250KB

    MD5

    3cc3364b71df6e151d13c63c1e83d9a9

    SHA1

    3acb02d3f4f76a0f97731695eb41e3fecb18b43d

    SHA256

    1794d865b0f8cf1a50972b234bd5596b08efad420becb22f3094bf7d79fbd5d4

    SHA512

    817dc4b7fda48fdbaabc8b2561bbaf6da9b26c1b688eb3b0747b31d98efb1ce1705683ee9158294cd2be3aa229f0b9e14a1ca55d495649a5069b988bea12eaef

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/52b6aa56-a6d7-4eba-9692-8da115d03db9/feb30b64-4111-4510-a207-99cf9dcba0c1

    Filesize

    246KB

    MD5

    c7b042561ef4911089c705dfdae9b10d

    SHA1

    6590e7eef83730560b7eadaaf9d0350a77a7b949

    SHA256

    def37e6f81198e2d84744dc38b5759b6d4e24b03af06969630a6e69a3025d503

    SHA512

    1fc76cf26c5c753ad400fb778c5d3f0985cf2f38cf55259c016ecc6b4380e1207da95b314106b2046bb4c522140c8294c14ade0ccd5529f3e3c2cd14bc856994

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

    Filesize

    86B

    MD5

    9c12d55ed54b8ac647aee54a1bf8dbc3

    SHA1

    d37fb23594b93a9cf7796d48499c478dd4ef9954

    SHA256

    e48fb39bf26e071b4d36b0539098623d4c44cc8593c3e9035141b8c5bdf419dd

    SHA512

    1711fa8633748a0acf83f57b54a81d3c755b7478eb8e6915257ae1d6f82ef1c9c4f57348d75fffde919d989d15d58ae5ab13905327f50208fa408fd0c7aa31d6

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.manifest

    Filesize

    498B

    MD5

    09b7e372be66887adc6b1e9fa983c88e

    SHA1

    4f8df8e541bb7b17a419384f5a0cf6703e8ded4d

    SHA256

    e9defede346498ae95de3bb871441d4789d681facdea2020a7831378fa87f9e0

    SHA512

    8b82a4a0686aa5aac364811a97ebb4486e082165c27c164329b598699e4f0147ecce3f2bf8f1c17288e7a2a73d55ef9961b53ff196d2bcafe510166688ed79b2

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.map

    Filesize

    99B

    MD5

    4dd2410deaf32849d1dd8d844f30ba34

    SHA1

    f6cf7767248d44a4f3510fbe9bdf6f6b27cbe2a1

    SHA256

    151d2d6032187bc8c969f862c760d286e05acfef4b7fcded23da40b6b5450fdf

    SHA512

    120e1b7376a325f7b058a8b0821f97520ccc156bf2baea0de74ad40f233a9850faa353ff1d232f8f520bcf7535ea3a2ed6d7bd914234b0d913138e540d55c7ca

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.map

    Filesize

    105B

    MD5

    b6ce5e9275317ac71377369d9da04efa

    SHA1

    38a49e1bc6e9905f361e91c692d31208fee78cfb

    SHA256

    607bd39553cb298ff20938f3abb4625e1c168887227fb5a371f78cb182034c4f

    SHA512

    5fe16ca3f0a1b533a94f1def508ba6ed540a4d0eeaa3819bd78a22450adf51e1b332565df228970f380753d577250b3b4bf9c0a88ba35b3d1d97437ae2b55947

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.map

    Filesize

    156B

    MD5

    a268ebfdad73c35f2073e0a05d66c8d6

    SHA1

    6b9baed4245cd52a791bbd557617c2df423ae88d

    SHA256

    73a3fa10a22a0d0be3bfdbcf3ef26666af7802739108e5810a2158e89a170700

    SHA512

    63230d0c99803fc1126c9e9df88dedfef0b0dc45aa1c85ce2a861f8e3160fd4680bc43cd9f51a8c7ccd88ef66206b7e8c1fb038eb8556f6a41ed07f843c7f35d

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.map

    Filesize

    220B

    MD5

    3ffed7bd598ecf0b869645f2e9d991d0

    SHA1

    db611913b01bc1665233565fe02288f2598afc53

    SHA256

    3cec2d67d9078da9df6925a0ef67f56be0764debcc9acc015f99deda0912c764

    SHA512

    81e9eea1ce8431bacb5407ef18bb912db9058bea0a1b52be1f2fcef20aa489e89028fe30e7ac94295c18ff8033b185631925f62163f60599c6e375fee7779eba

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/.map

    Filesize

    288B

    MD5

    57e0a26bbc774a3dd6e06e6c224c8df2

    SHA1

    7fd2393f19b8ff99893b78ddd5016978baa86440

    SHA256

    5679720af692dc5ea1fedfa00216a1c2ed816501ca0db6c13cc290b8524784ab

    SHA512

    30f00a7dd6abb23c000fc05358d9aaf35b491e0dc0ef4f03905430b33ff7d8311a037895218c64ab43962236b29c233f1b82dae4dba733c80f20fa83fc18cb0b

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/3a431a41-7b0a-4f25-8f51-9e031d5bf0fe

    Filesize

    547KB

    MD5

    2367a2c4f94680d5aea44f06048fff3e

    SHA1

    41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

    SHA256

    aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

    SHA512

    0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/7992158f-b16c-4885-8f64-1b5e20f73742

    Filesize

    307KB

    MD5

    1aa99aa25c72307cb7f16fae35e8c9d1

    SHA1

    17ec5016a5f2b2ea4f27f7bce1df4192d3590161

    SHA256

    a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

    SHA512

    1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/cf33cc4f-e853-4a8f-bd9c-4440be9537e8

    Filesize

    95KB

    MD5

    44850ec0ba405c1c5620ff156b3d624e

    SHA1

    dda0533f8a46369c980550d9a9c4264d0c90b60a

    SHA256

    9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

    SHA512

    a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/e3617b10-d06d-48b4-8de0-6fa4cb94fba7

    Filesize

    308KB

    MD5

    c6dacb6bcfcd747bba440bf2fbd2c85a

    SHA1

    ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

    SHA256

    3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

    SHA512

    6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/97c89f82-d861-4d82-91c9-d78253d49b76/fdb07c6d-53d0-4b0e-aac2-bcdee2fa648d

    Filesize

    56KB

    MD5

    ad4cd34327721459c11a67b4332c945e

    SHA1

    9c0742c0bb82288d984a37dd2642f1246e599d17

    SHA256

    305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

    SHA512

    0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    1cf3f63c021d755a21623e6d0e86dbc6

    SHA1

    e40e0f1faa61abcca7ba3394c54c92ff7334b49b

    SHA256

    100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

    SHA512

    38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    96bc22f4983e54c893e6e2801c3f2daf

    SHA1

    cadf23109e7ef069dc1366b9a56d24908465ba36

    SHA256

    af6e56129c9fc4575357c4b1e0bce43131507aa9e4adaff301dad6dc58f37bed

    SHA512

    48add8323c11f9ee33e8fe53296aaaa9cd38dcb5ca90a80fff16101170f74f14ed56bb3d39525ff693f7da0c3707e1ee5717c6df4a02e7b6412d1f128475a6ae

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    2d9d0f389339cfa15eccbc9a349d4013

    SHA1

    24b6973401e048f4a647a3aaca48ca6a650a0a73

    SHA256

    bcc8218ff53151b262758db03465ff07602a6706467ef05719844b2e2a065dcf

    SHA512

    546094eb9b53cb88e5d3ad933a4a32931206243af124f19120a984d824a3f56210b7a6176e36087d748c0be1c53b674cf7b82d356956f9822929103d642f2938

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ba7c3f43a5f1eb5a50fcdb05cda7abbe

    SHA1

    05da7098ef9f58d7cb262e7a279fe4960e8cad73

    SHA256

    f43830e1574dc8c8211e80384c3aff53dca23048431b8b512cc447b25e04d747

    SHA512

    2b08da28bf035cd07f78dcfaeb566dd028ffa0538e2024a7ce4b09753e56d3cceb05536993b11b30fd0fc6702f21cc868e8e839ab8d71dafd864987a9ad2918c

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

    Filesize

    4KB

    MD5

    39c28a8d00b686523297b0aa4af4eac6

    SHA1

    faf276de12607b6d18af2b6f0e6a28ecb2f087f7

    SHA256

    85f381d13638057148c52d2b5302c59829388d8e316c44e6739bc68a915b9ab8

    SHA512

    5b90e473d889e279891b12ba21311352d4f451f05e5cd61a1f3aa64ac9ce076069885b672c8759a247b3242a4d14c27e2d8496f535960bb3e40327549ee1712f

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

    Filesize

    512B

    MD5

    4fc41eff8f285a83a53a1a30b64291e9

    SHA1

    61b3dbd2fec82998ffea76f15b13e64d6d9dbefe

    SHA256

    ebcf7e87beb00ac14b3b38e461d38eb4b410dc3d280caaf1cdac1775443eb644

    SHA512

    c7bc18aa3abd3fe72172b7975ede9bcee13bbb43d62548f6b11906afde8bc16c67cde7356a66ad937d04d2bd304711468edf719ce5cb482e21156fcc6beeaba0

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

    Filesize

    844KB

    MD5

    cde1b135c0f9249694b0a04a2a234cbe

    SHA1

    472a3a1dfd26f0918c5d97df9f996997de62d718

    SHA256

    05cf765784af6ea7d5f18216b99fabec512655c0267694a1ddd767fe84854c2b

    SHA512

    c93b0735efe1ed36ca1ded619bd585c01b93615bc59db8e7784bad589d7102b90ca19cb037e2d88137128f2e322a9ecb8d653ffb089cf84b49ef3ba5e9dd2f76

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

    Filesize

    4KB

    MD5

    367f25ead82fe910a15667a94ad6fb32

    SHA1

    35580c69121c21568325cf20f71303f6cc112b98

    SHA256

    626ddf502cbcd26ce2d2a00eceb86a6c89b1bf8a738997ae6535114bac7bef4f

    SHA512

    ed9134c0d0647cb71f3727b0e76102e3898a336e1d9db0dd83b234d1b6f2023e07ef582eb2da9ad89288465c45e20d272b1eb2f19ae3e76e234c20a3cec5750b

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

    Filesize

    512B

    MD5

    aae37bc616f3444eb521db08628c2ebb

    SHA1

    b24ef95e2d03978b79691e4c5ffed8547f74620f

    SHA256

    9f6473ad7de5dd19cb79c95caa5540618839890081f577cfa36681a5b22742be

    SHA512

    acac338e79dc24fee165bd0db726de579ae999bee63e17af1ab97e658ce925dd1eb3d064313cb5fd256e28f520f4dbd6c545a049af6bd95b2ac27981373785f2

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

    Filesize

    402KB

    MD5

    627baf179fb15cd90f5527e9ce751822

    SHA1

    b117d543e195378e402a8ccd3d0c9f8441431fb0

    SHA256

    d5d57e5b3503195fcef8deeba12862229d2e2072f87364f6cb858a817d78e80c

    SHA512

    b5e1d32c6b26e4216570f95b3d1c8a0532de862109fd119882bdf4f9d4bcc7882d91beb9c37309a31aefc85f376a8b9f620eace3f60a3d3c610ac140213ef7bf

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

    Filesize

    4KB

    MD5

    5d97ef61d9e8253a8c8db1dbd806515d

    SHA1

    1e4fb40cfee1ec23bef6ba86bc6169889db8714e

    SHA256

    585d82ed04290e64b812c8aca422b69f573fc2570e3b4316d9c220fe22d2b9e7

    SHA512

    4b653a66a13ded656afc4e7ebc6adb699eff47e62e82cc088b2cfff30219ec428ed9e3cba94850c0a377da75448589b231313466b0cf5e5637222857373410f5

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

    Filesize

    512B

    MD5

    581e64acf2dc73368d9a2a15c577449a

    SHA1

    ed6fb9a4bdd2b0f7c411d3d7ed4cee99e4c0c06e

    SHA256

    9fec8cf8748c703590dbd80ddb44106c5cc9cd31bef02d1ddd1d9bdf06e03a28

    SHA512

    66c6263a92fe757e16588322af5e5c48c3dd3a0afb5585fc1cc04bd2f82e1daabc6ece9675ceb206716c9023c215d00ed202d5ea560ac82ceb9b2efa6da2f7db

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

    Filesize

    36KB

    MD5

    741b7ca06599be0beb19fb2b14b528b8

    SHA1

    63dbdc444e8dfe28f596061f2b6a0d77f447b01d

    SHA256

    06c935b9eec1ca2daf4434070fc3600605c41541b8282e35f1f7ef04acc30c4e

    SHA512

    4334a15b41a94f9e7bf44e1c2f73cf6c153054a4610f95ec39e067d7f20e37d42feb097390cfcdeec7f9b37dceb1c07c312100ef29965c704eba4596ade8e6c3

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

    Filesize

    4KB

    MD5

    a9aa433a3ffdc0b9cd2bafcde3af93f5

    SHA1

    3f551dd76b1d75a5dd221d07aad5e922ab96fc9c

    SHA256

    f272c9f225855aec517ae304ef4f7083526558da749815ff1bc5d6a03cbdbeab

    SHA512

    3a0dbadcc4aa948eeedcf4b479e912f73c653faaef4ea4e671b8366cf1f59b493d726e082ccc7d82a1ecd1fb016be8fe21ee07529542510fa37ed3fefcfc3466

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

    Filesize

    512B

    MD5

    0780a9b7982472b045ed35a97c1d4b9a

    SHA1

    3a8ed00cb8115691f7a17943933c896100c49e03

    SHA256

    b473e32dc7e3edcb93706a659426b97d2bc96a0514df13383fa7d458802714da

    SHA512

    3145e6393de9709caae176ec1a4970357902c76d99eef529b6278462ef14355a06e579a2a39b284b7db7a3316fac4be367d92ec7ae22cb70dd3ae3b137ca655b

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

    Filesize

    2.1MB

    MD5

    8baa7d058d7306760c7429b72959c499

    SHA1

    3440d6eed6bffa029608138dea0e7eee1d8fd74f

    SHA256

    5628cd3888309a56476d6fb5ee40f5b235cb8ec164289d863af5ce232375a81d

    SHA512

    1abd7f6503a07e910221005e7526a1b5504a408e55f38bd56fb152f85293542053053fb4b97e16f199aa6f27c5ea6a8e212745443ed7d9f300fb8ce0245a7189

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

    Filesize

    4KB

    MD5

    e9d8bf800463db580a2dcc5ead302f4f

    SHA1

    d04886b9fe80f992888ee1ac9ff401754c71ba2f

    SHA256

    02ff1a9c9cdb0b90e469d6581a93c64a16fa7c16f6cfa9cb1d148e511feb8fb4

    SHA512

    36ff5fa6e9f6c44eed94d47100f7de9e9a4dd16dae8f302b901499eed16b5a79a1b9990b68a44452f2f10d8d1a1be5e9e447a6f4b104039de9730df0acf3dd1e

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

    Filesize

    512B

    MD5

    3a6e8b55a6ef857e85701d2c50a7b559

    SHA1

    490dfedd5b6a889aac0d431a3b7d483c5d167052

    SHA256

    fdd9c1056edfe41fa86d4a665eba09c9c295188587621487fa8e892814d4edb5

    SHA512

    8002ef5eeffd12fd333d01c1071cf01eb1f3f9795fc309f59a616c43ba0a1aba0a76d1ac43e50307e5d6b9618cfd95c3afb53163c02a12a81ed26027e345de92

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

    Filesize

    32KB

    MD5

    526e6b8815a445d776b3132e431e27ad

    SHA1

    9baf8013e71fe98ceefee91e928047919ee1520d

    SHA256

    e6d3b68b971c181e2bb38c983f7d7ff57df51c9a6ac7cfaf0dd93663bf0661cc

    SHA512

    3d5989ca94843cfee38ce1ae20f7b457e395405f91b80fd77d43d0517aa14317ec697da36baf3689a636a41eb51d36716f503db51f546fb86383ffbf65db36ad

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db

    Filesize

    4KB

    MD5

    e34b23757567412d816cc02e8cfa77b6

    SHA1

    f98d917350dcb41164b65115b8d11a725175c011

    SHA256

    62c035b2c53723cb6a952dab85d16a71ca145e1baf2613c4b4509bca4724b2da

    SHA512

    b0a42129a5976cfd3e377ec19b3e42b5066179394c10d135c24717176d23bd291c7f45eab67a4f31af63b178e5b20dcbd1c3e335beb3218c1a45cd0a8714c26f

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

    Filesize

    512B

    MD5

    48c551193bbed282f27e4c9fe832a9a8

    SHA1

    06b1736562bb936d4a5b44f5503de077e4887320

    SHA256

    ca3e1e84c04e1314de5750a7f9ff5ada7112ea648d7365fa579332eb026bdf76

    SHA512

    a75b0da2eacc1d3d535ad465737fe175057b898f0438324cfa2d7fc5f37782a1bb896b3a737d5d47dedf17a0bd518d7af7cf9c2ac624f9ddfcbc18fa835eca85

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

    Filesize

    1.0MB

    MD5

    9b7dd990caa9161e3c59d2bf00d6720a

    SHA1

    dc7cb4477f06a0062097d9498f96ff8c1e59bfbb

    SHA256

    f8e611db3e213302404e6774651076bb26a7f07ffde6c45c827986d060cc5fa2

    SHA512

    d5b0a650505b6ce721e54acafe38314d72f20a07c69ba99e84d42bee95de7369a1915ce8c5ee9c5be89d40a9513f6ae0bf36faf61a78eabb8ce001259b11f27d

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b