Resubmissions

20/05/2024, 06:03

240520-gr8yhaeg33 10

20/12/2023, 10:33

231220-mljpbaadfp 10

Analysis

  • max time kernel
    2261576s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 10:33

General

  • Target

    securesmsplus.apk

  • Size

    77.4MB

  • MD5

    30bfd388592873d836f5907c236f18a2

  • SHA1

    606e33614cfa4969f0bf8b0828710c9a23bda22b

  • SHA256

    58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72

  • SHA512

    95ffebc8a14ab7d1030aae6e1eba77423a08fb5f1f64a66af402841358514e462a7e23642e9efd1973a24d9fcd6a313a99f69eb8d1e24436cc3da403964400a0

  • SSDEEP

    1572864:jof7Q89n08GFOS1CqTKliPbRZY3IxKlgLOe2NGv3Qvqm4t4nHq4i:jC5dpKO5qtRZY3Iu22m3QF4t0qL

Malware Config

Signatures

  • BadBazaar

    BadBazaar is an Android spyware used by GREF APT group.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • org.thoughtcrime.securesmsplus
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4569

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

          Filesize

          169B

          MD5

          f32242ee33a78f58f57f921c6ff19221

          SHA1

          41ba788a8ddadb07d03868324322721ee2558ee5

          SHA256

          bdff4a558fa2c0983842b66b65373123e8a6a8b661d82dd8f2b90f08a78e03bf

          SHA512

          3c34187ab3a49dda47a25b338b84d03fb4fc40c868be34edf1e4ecfb7c1a67fe08aabade1f16a2e1c34e829eaad10d7af60854a1604ac2d70399915d65456f91

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

          Filesize

          235B

          MD5

          97ca0a8e6714588390c7d36160a685b9

          SHA1

          b1b820ada140021fd51746bc9a1827a8f9b16730

          SHA256

          408a80fe7eeaa898fb0439d038099544abf7c9403e57ab0c38d91319e28f7074

          SHA512

          ece33174665d17d10f6e035d096111d2902e3788ac54cb095cfc5ef76768c1107e714c03ec78699a1e3e3c9830e0c7a7f1837985c07fc2d36c95c24c31caa519

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

          Filesize

          301B

          MD5

          83e9371da1165ebd2d9fa19946f2596b

          SHA1

          7f3b21f6f5e4af1f8b78e2b2d2e467bd534ef9cc

          SHA256

          5dc34a8b28a203d71b9aafd9550ca9514ebdc42ecb39c1ff1ec0db9f7c9ec46b

          SHA512

          20a68517a969a2f428e89160979fb1beb466aaca484bc255c627ecf926c0b1fd67e8c09f9ad5318d5f201c0f823df214363f10a46a936107552d02ba2df500d3

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

          Filesize

          367B

          MD5

          2990d4bd501b6999df9ba7dc3191696c

          SHA1

          207c1a5bbcb52781bf14c4fbb08bd24884d4ff77

          SHA256

          862404996e758543880022f49fecf6ad16d35ed171ddb12025dcdc89e23a0c68

          SHA512

          b25945f1f7dee9fd2c4325a89ada39d624f6cad097ec7d57c0234239e9f998c84c5492af2dcd4ea9fd4ad41ff378cd208fe0be7810e4aca7f96ed2a3c75b44c0

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

          Filesize

          433B

          MD5

          95539965d84792733aaf6536ac8c00f4

          SHA1

          9141d893396ebb9bebc8539eab29bbea21489817

          SHA256

          386c722f08228a08e402691c4709d53fcd70c2a93df6a9b2cbffc9f0f4ee0ef6

          SHA512

          65c43603809e39065aaf7d4ba622d54b0bea548e27ae90449dd6b5d80bf67b41727fbf172ed54f5795b5f493520b616009d95de7f3bd36711dca1f3f3237a83a

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/04a19380-6c64-4ad7-b335-0c180437336a

          Filesize

          76KB

          MD5

          3dbf960a0e8d55b066e64b6c2db30ab8

          SHA1

          fe4301f285cd3eaaa1012182d40fe89343c00769

          SHA256

          f0dbce6e68cc4c00749e479e0e68a12fdd8c45caaee67a8f226c77c015df50b1

          SHA512

          dc326f1493ec6fcf9ba1ec0b98a474b85d75bb62b14a5b185ec743f24bcd930641b3bacc53a6386d72520991b69d4f3d56043fc4c525222f20492c440c9694c2

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/07ba1fba-485a-4d80-8991-0aef372dc0d0

          Filesize

          159KB

          MD5

          fb1e5325289ef80e0eddc14b77f41ef8

          SHA1

          cb345a6259999c5e5e2c3fed863ca3ccc2de6f25

          SHA256

          6d94afa74b98cbe51d3a0570dbfb8f4e0679ab6dd5492bcae73e053f36b53d70

          SHA512

          45fb259937e0ac878df7ab440e4c9d84e1f7e8605a93b8edcfa81ce8108a3c17d6934ae6ad67e16f753e1bf9b0cb87d4ef347caed8d3766de2cb3085dbbe50f0

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/4cae921e-f75d-4726-902d-ad2cff6ad526

          Filesize

          264KB

          MD5

          64bc8d6247e8798c0f1f9a9c25ba25cb

          SHA1

          ba35d15e75766606553e843f2d39f645be95320b

          SHA256

          ac2ee7b8a91a16e0936519aabf7e1cf3e9fe96926419ca313fd57c1af48f32c7

          SHA512

          308b2610843581a524c31dc2b0691c77bcb3235d1e04beb89f366266b23b95786c7dd346d75cc3c068feec3980fc853e2bcc09cf95b011cc214564f5cd2b5b2c

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/55cbc40c-2db7-425e-8d7e-769ec04d81aa

          Filesize

          161KB

          MD5

          dd6e0ca531cd87ba5657dd9922d69e0c

          SHA1

          149f483a15f4e9e0888bd8e29804db754aca0669

          SHA256

          70b5e124a58a0c346cd80c7e8a37799b8f9c9502c12d94717f0af684093e2256

          SHA512

          c0219a06178ebb298616f73b8264ee5fb3cca9dae7d092ef162aa983c2e0acb4b2d11be30289495f0b22faf70075075a497dc357c5b8280f21c41b64916e45fd

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/61afff82-f095-42b4-bc42-3d89eb5e5967

          Filesize

          238KB

          MD5

          1375ced64abc297f03dbbba4217a9562

          SHA1

          dc8a11e51cf8127351a89908055a68ee74967467

          SHA256

          124210ad0e9e28c118e7e6de20640f294a0714226049d53b082d7dd9ebedbc76

          SHA512

          dcf4015b2419de2fd9f3e324aca1cea76daa9bbdf6f9828d4f0a0da7dafdcbd4d918372ce2b2e5f6e1e95f7b2b9252b194cc8f9329335a1874ca50cec7eac0ca

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/63f47e5b-ef04-4971-8070-293a55759dac

          Filesize

          144KB

          MD5

          904cb8b6fbe0695c9146ee107535cf2e

          SHA1

          6c4f92cefdd07afbbfc53e85c5f1da822900a71c

          SHA256

          77422d601f732be90545704037725f4401945bf7f2914cfd684861780c729730

          SHA512

          66aa70821e89ec653b247b05f4294193b61215da71a1c24d515e44d6e86e3d2d03d60502fb0f018f73f96168be15ef44afd5d2dee59b38591bdb2565dd30cd1d

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/6f79c208-08cb-4fa6-bb98-6abbd7150d49

          Filesize

          161KB

          MD5

          48b19c86e1929128229eeb4d2eee188b

          SHA1

          2f757b86b51fedf729cdf6db3db7b2f0a535cb75

          SHA256

          32f7056e5157dc42816b6bb1a9bb70d647f9895ce3c9b369dcffab008e9b1e49

          SHA512

          c6c1928a8db4df78cc4e2a477bc78903348ffda65e5398539412e775a6e85ab22a1d82add8be1792e6164a58589d15e01622401f06205af8de5185d31ec6d709

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/7b9a4040-4f97-487c-9e67-70dba27f8649

          Filesize

          78KB

          MD5

          34d66c631c14f18b3ff921bbcd964ade

          SHA1

          6af020be363b70416392e5d40040a25193126955

          SHA256

          99c8ae6680d78eb14bdeea465fab177fd7a1930f045a30a2104ba2e80f3829da

          SHA512

          f2b687a2cf31351f78f48c5d4ca07b56033a93603414a75c04a4548a62a2328d57761de3e5fc019ef16b149df506a74c928982b442e5111fbc3b107253289885

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/7d2ab1c7-4679-42dc-a27f-b4271ed4353f

          Filesize

          161KB

          MD5

          da005e26bf3151f678d381d34306ab44

          SHA1

          6c0960f1b0420af59d83cbe6f83b604a43f8b3f0

          SHA256

          b19501dc326c4e9b2105809d633acf178f0926549cc4d990ca280447a16fc851

          SHA512

          5264cabe55fa1d7cac0c1173aca802008252debb229121b5656814183780e2835aab3d1d9b4187ece6c7c5363b4395f2892db183f60a9c2d990026818726fe81

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/b903d14e-df48-45b6-8458-ad56122c5f8f

          Filesize

          170KB

          MD5

          6bb8b896824bf403e053698eabaf23cb

          SHA1

          0277b66c1fa5445017080561461a1fa9c6d7567f

          SHA256

          a6e3e87073a0638186a49bac7770f22ab0ab85b9cfa58181629d8218be25b661

          SHA512

          bfb1eac214e2ea2dcff25b4cae5bd0e27abe26a609b15471b68e85b01cb2b0a92fc6eca0b2e91265f7365da3a4a5b226677a3ad96864265c1977bf3f9d487c5c

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/ba92f1d0-e40d-4b34-bb56-d21ace6bd440

          Filesize

          117KB

          MD5

          164f1a758929e3661c9f9bf839caf943

          SHA1

          57c1d98ab4f23dcb3e4a44c77e543b619afebfbb

          SHA256

          8b28547bff5f82160abfd553e6794d96aed6c92531eeca5a241ba938e4598d7a

          SHA512

          6603cd2a254c0f58545f8cf70b250f2135c2d29358acc0a1f9ac28e7746dd64f69e7bf22d52b150a440496f2077b92e483d6161a738e930b9c3ea58801d57d90

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/bdcae8cd-51c1-43a7-9a4b-5e2cd4f9741e

          Filesize

          157KB

          MD5

          6a81d9df9aaae0ec85dd9be167e801e8

          SHA1

          d8b810833cf5ce4b6f404e8cc6bd14ed24728948

          SHA256

          af2e88d0eccf8382d2f087d8cda3f03babcf4a64a0b45fea424937bc844f7eaa

          SHA512

          443526a4239d7120ad87aaf3235a5e47eec6877fda60324ebaa2bdf6cd8fb35758da53ddb61df8941ac5e35e986156f7ffb3943c82e25be8bc486850c92e12a5

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/c53f9690-291b-4830-a7b6-09a970022f39

          Filesize

          228KB

          MD5

          6b70d8c919afabe42535a983308fc971

          SHA1

          2610860856340648c1895c2c95a0393864167bb0

          SHA256

          bf5570b23807b89e043bda70e31b9c364d386cf698ce2b15e61aa5445550755c

          SHA512

          f645c00ed2a1a096d8e1aba4aee6aa709f1e12b766e16bc9c986b240e595821ea98d9d5a7157aeec79a6a29b43c181fda5a78aabd33896a6d437eaad0688bb8d

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/c716eee2-647b-4ffd-9578-4978122d7d7a

          Filesize

          278KB

          MD5

          c4c7d2d59a97f7cb58c21ec0afb61c94

          SHA1

          4b30c7bcaf46f811ee5faabcb3b726f806adac34

          SHA256

          66182510159da35e0ce19d10eacdea9bc0edf49ada9d41df643ad711b0105857

          SHA512

          7ac1024c183f81283fda47e8364af71bd56d54c976b806907dbef2ff74b0a64e50ade9dbb9fad24a06856ccc6d7c7735edc9200165144845a079d39cc460d22b

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/cfa6808e-5c52-481f-88ee-8977c3fc2917

          Filesize

          246KB

          MD5

          c4f782da27e5372b18ee86530899a153

          SHA1

          3e0d5a4d3bace483218f3e7a9ffd4a5b33595d89

          SHA256

          2caddf3a73654b9cadea00194606b430b945a85d58affe07ca911622eb37bb41

          SHA512

          a4dc48be232d846dbd65a294cdd29fe746e0d7001dea62716b8887f2c59583aeb1419a1429b946552676a55193d7965443ae8370f05fd3386c4fde3f15b450d1

        • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/f4263afe-fb37-4536-9e8b-e237768688cd

          Filesize

          147KB

          MD5

          4b20fd1960c68f8e0333a60376f68d24

          SHA1

          0f6372c771a1f123698ffc0ab462892c9e887892

          SHA256

          6a4bae34afee2f4e94b69604a93cb51aaef2051d1913a746897321ea09d325d5

          SHA512

          c59a5a4271239bfce3329f449e11fa188ce241855a9f422908ba36db8405e934875763c6fa9c8e688b113cee57d32e8cdf6ba6adbdb5540e19b32c5e5ce8991e

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.manifest

          Filesize

          498B

          MD5

          5fc3459c7aa474f8e9cc6dd46b4319d8

          SHA1

          1f6e6eb8f6e25596fe3dc41269c87d6e722c3940

          SHA256

          db61eb78030920b75ba48b5b2d660b70f1b2e868fb23509deb1add694fb49cf9

          SHA512

          9c1b40e9b7dd0da9bf78f16c5e243d7819a235c48642e9691e39c4ca0277cbc03bf0b1bbf7f666e30be359960c0587117bfdd9a287abce14ca364547f49672bc

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

          Filesize

          99B

          MD5

          b9fc40be789167040f2366662a47a667

          SHA1

          92f1b3555b5b103a30fac01af2963c91425619f9

          SHA256

          9f34dc74c81777f66c295b46b9e29d416cfff1facb90ba509da6093b0fdc38d2

          SHA512

          23f112d49c4e31f24d3299546afca345a5e500d88cc2138a46fa2d16e755451b80b9fcb3ca3ff6c30890c4c93064e7520e51bf31af1800d765d1d71a9b27d65e

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

          Filesize

          156B

          MD5

          a1ebc8a8b6e877578f8cd77fad1ec09b

          SHA1

          71ded57dbf9815bb1f957c81208f65aa357bcde4

          SHA256

          7dac087922101269d9c68e14923bc025ad3208a40cef1e5a76a9d85a2b755dd5

          SHA512

          8e2695e3d3e2ae1a3ad929ba2b088048222b6b09d7129ec7670ae9c6cb669abfb7b2f97fda3a186130256404acc83770a2056113d2efaedb3df620586ef01b7e

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

          Filesize

          163B

          MD5

          87e2e4f61d9b576db4ae3e8625b9cb59

          SHA1

          a623bdf292e999c160af86201ca0e88c7deabdb3

          SHA256

          d427179ca61eb2e0062134e4796a91f51fc619a64ec8f86d2849c6281ed26b20

          SHA512

          1fa79f737d94584f1b99ba07ccd1a7bf0c79a8e291698b6feb1a9c837c59aa7fa1a4e2804b017de999fe70c7254ad2d74338ac82b2a06155548730b0494e4fde

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

          Filesize

          231B

          MD5

          4c312413b75627335a11b7d64ab5cfcf

          SHA1

          9fbad3053d445adc55ef043b845872f79d1fed84

          SHA256

          6c2a290cac1dbb1bc6707f400f9bcf790eab5e2db454c35715a1dd3371645129

          SHA512

          aae00202145d6076d7fba9beee24be982722ed8921b621482fe9e1a94bc781fe1bf689aba21cd728bb3b0d628d52245c6a8a5b8cb330e88a3b3b85543c38c95e

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

          Filesize

          295B

          MD5

          3e559e9b98c1a493bebe5693df510adb

          SHA1

          7a6838915aa9fa963786dcf14c58d8583933939b

          SHA256

          f56c7827754501c7405de91f0db7d6a27b5cfbe9d7c2ab5551966e9e36cc3ac2

          SHA512

          82143bb2ada5bed24cc3484322fc753c06dc54abe40635029cf95c31f90fadd8832d96f38e9248371463893b993dc4c4190633755d5bfd1f1c8ad53a1e0be778

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/1331e838-873e-43de-83cb-dc7dae9ee6b6

          Filesize

          56KB

          MD5

          ad4cd34327721459c11a67b4332c945e

          SHA1

          9c0742c0bb82288d984a37dd2642f1246e599d17

          SHA256

          305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

          SHA512

          0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/143bec47-7db2-442f-ad9f-27948242efe3

          Filesize

          95KB

          MD5

          44850ec0ba405c1c5620ff156b3d624e

          SHA1

          dda0533f8a46369c980550d9a9c4264d0c90b60a

          SHA256

          9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

          SHA512

          a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/94afe3be-6d60-440b-9b4c-6b3cc27389a0

          Filesize

          547KB

          MD5

          2367a2c4f94680d5aea44f06048fff3e

          SHA1

          41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

          SHA256

          aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

          SHA512

          0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/a8ff0525-a36a-4f80-91b8-4800c7e944eb

          Filesize

          308KB

          MD5

          c6dacb6bcfcd747bba440bf2fbd2c85a

          SHA1

          ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

          SHA256

          3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

          SHA512

          6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

        • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/b7c81e42-de07-4ad6-ad55-92040975896d

          Filesize

          307KB

          MD5

          1aa99aa25c72307cb7f16fae35e8c9d1

          SHA1

          17ec5016a5f2b2ea4f27f7bce1df4192d3590161

          SHA256

          a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

          SHA512

          1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

        • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

          Filesize

          56KB

          MD5

          fcf48a32a51f4d09a144272fe5951b1a

          SHA1

          06499305fbdef89db297ef0c7bd624edbc51376a

          SHA256

          92629dbaad10ef4581cfd6f94b24bc1a5cf8776696b15ef8cfe1d5c3ba71d992

          SHA512

          e0e9af1296e1030694202634b15f2840d3b7176a4a2321eb6bb9f4c186335567301034c487d4aba0acd90f1ac7eea8df1250358a6aa9407c8bdf19384cc1bd95

        • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

          Filesize

          512B

          MD5

          32b7dc97791ff32dd73cd2fe4c849410

          SHA1

          acf1b29b28da934a4f48c1d36c40221f70932e73

          SHA256

          1458fd8bf2a7c4faa5fb6b4921a11133db4d39f358a86d9a3c524150ca0185e5

          SHA512

          b9518525f2ad67c37794e109534fb979f2eb72693df833f0f1df59d84bb619bda99c3740b98904a6e3cc264889126dc225e99b57e3306d0e9f0f9a49ea673609

        • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          6c2c5aa556a9c031497ee9114372afda

          SHA1

          ebd75589e87d2cd053922ee659f72abc856c2d94

          SHA256

          dffe7e1bc2337d9847558a2d3a2c8f7e15e05ca1e50481f1dd78718cc6f8ef29

          SHA512

          3f532b872f20625325a9e6afc649c32ceda2559baad3a5004cbb7208f7658076b5ed7f4bde62d11378e27708b2cb48a1cc6da317aa8310d933021cd69fa9907e

        • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          4fe6ba0d4bd1b5b89369301a76e336f2

          SHA1

          683df2f21212d642d0cc29aa16fc93f52c03eb0d

          SHA256

          011f6d3c6a8696d4131ba601e549b0cd156a3722ef16deba237c7084ab448869

          SHA512

          9ac9772b19f33de650a1e34dd78abe433c7ada7b04acde5344664eddf30daea902749b536ed3435304d90661a3a462b57743fd757219633fc836218a5056403c

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

          Filesize

          4KB

          MD5

          59a886e2d57e9ab8e1c9316f2e823643

          SHA1

          066c2c90923d589f4abafe00228625e8778c667c

          SHA256

          db9edac3bed90d4dd2765715caa16d79f8ad62ff3f3c8c427c56c2c63db11988

          SHA512

          240081f2385de49221d766214884d8de6206068f314e16509863d5c7f5627557726b6832d95db77ed5ac5a904f21d02faaf878a06be43e3b9f2d8fef707c53ee

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

          Filesize

          512B

          MD5

          6019def5a469a52f0d25d2060d902c69

          SHA1

          86438dec52f7479c29fac47611577e47ba7b8847

          SHA256

          fef89ccce1da4c0c342ec6e2e3c557d9e9056e7e3bd11e9bc7d48022404031c1

          SHA512

          1fee006cd964f12b339613fc66826741190f73a9e2f74f9bf12337cc159c4aff83a252cd1984863d15d883782f2d9ab13a603341eb1671ea08f6bab0a67725f8

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

          Filesize

          44KB

          MD5

          625eab9e7837cd0245f55100bb7c7763

          SHA1

          75308a80d8812248f9ce622ce0342b5a4b8fba4b

          SHA256

          6ab330ea16bbbc88875759b787ea4fbbf4854b41a26a101ea48df29bc662f274

          SHA512

          b265c7839ebbceacc3d80c54043b7aec4f4a71b67a83ea86af0149ebd5fa3631767e150c562a93c8335e5dcf9a2fd00c3dbd3d270b670aaf18690e5c8f2bfa03

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

          Filesize

          4KB

          MD5

          a84d850ef97c404473dcf6352cf1ed5b

          SHA1

          137b6f8df7f24dfdf298dec0605142c0b875da49

          SHA256

          54f5b7ace018a01cf86162925c337b3f2e1f75c739edaeb72fd24062e7742a43

          SHA512

          d55a781d26b378aed4b51be62e231c6090e4eb481b28f734dbee716ddebcdb36bd02e1ee72fdd3f54862d9c573d5c4e6dc5db251b4cc0887f0546c4ee90b9d74

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

          Filesize

          512B

          MD5

          a64b213d24ae9e5102e197a089cf93d3

          SHA1

          a7305453aa6cc3ac045bab939692853ad4d5c7e7

          SHA256

          47d23269582e25afb5615ce912250f03b90d58f4e800066835fd359b40a19a3d

          SHA512

          f270232a35be656800698eeb8fb2eda1bed9725803de5684be3cfec0c2a8be7df419a9268f1330db3a2c88346f633caf474402bde535fe03d082fb5932fae07d

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

          Filesize

          293KB

          MD5

          d1b5cd55484c80265b28d5fad2cb1ddb

          SHA1

          6dfaac055c21d22f205a59fcf86d325381ee1544

          SHA256

          f76f74af57ee11d8c7dab9760dc3ff32d9f38b245f65afd19abe98f1259a1e7d

          SHA512

          32df9db30f80e4a7f3a58e452f03dd6d5f1de755bb4d991a7987546b586c2f49dda4684f39d47aba3fe54357196356c8acdb1cde6157632fb34604bd19cab090

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

          Filesize

          512B

          MD5

          de9fea9d58dafabba6406813bcb0c883

          SHA1

          b46e1cbd344357645e9abebb176f2f6655bcc914

          SHA256

          8234b64b514dec331836b8a5f81d298ea50acc9da12c3bf0d8f22e30b346e222

          SHA512

          fe1e8d7aed76e1b001960d91d0dd8537339039ae9dd2f7e7935a1787e84e4723cd0f986b18cd123331eccc4300f727dc0933c08680bdae23a3c9a80426a46610

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

          Filesize

          4KB

          MD5

          4fc13f0c8ab265cc8459cd3f4e3423a2

          SHA1

          31f594c214bdaf409c055276d3220816ebac67c2

          SHA256

          3e791534bc4a4c867fe6a62fbb601eb2aa30556717ad118fb61fa9f02b7fad12

          SHA512

          28fb915903438ec09abc89f319b494cbec0f2f58ef914dd9e985c9c86f8a66f675cdbc6cacf085d0817d25f5092197631e1acc3268a4837f885a09eb1dce806e

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

          Filesize

          512B

          MD5

          b7f2062c50de74b05551444ad3ed50fc

          SHA1

          2361ccc3fbb1a366c647b09dd49428d19c1027ed

          SHA256

          fb3fe76c8c21128ebf5a6e40b26236b4da8c967c72588c9e175a795588dcdb99

          SHA512

          47e5ed92ed98de22c7cc5d09be30e7ca8286712c6241f640f08d19e540695c43f250d1f43df6a67cb4f744e713906eef36c35194584367dec4ee3782cccbb604

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

          Filesize

          52KB

          MD5

          161ecc51e0ae250211b1656f746a00e1

          SHA1

          b7a0c68bffd2fa2fa6a1decc6fa8f2f33ddbecc8

          SHA256

          c2da792d469c078f782abc62aa32f2f16fcb4658ca421e3fd459ea9699d84cfe

          SHA512

          51cde99315d53c124f776b535930e5f379402f3ba574702ec72108df71c048413c4749ccc5a3959c717c366ef175a01e972b6205957bed481e5cccce2878e157

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

          Filesize

          4KB

          MD5

          10c8f43e998ce82212e0ab4554e316be

          SHA1

          c67d2a8c040a0be2db4c52e23f78151075a6aceb

          SHA256

          7c0ed427e9c843bc7f6a674668a0dca025270390ae8847d2dd7ce2f80fa0fedd

          SHA512

          b1892d3423dac929e4a96cb3bb768352fc83bdc05dff800753e4f2d9591c388c87d1917012f24ca202c315487c066d89c156d4fe6df31a1939103d0d9801c199

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

          Filesize

          512B

          MD5

          0ec3a0e327467916b363b8c172dad44f

          SHA1

          4d4a3f906ab65d2006084aff225a4a42033fde2f

          SHA256

          9e27c9ac089b3aefd74038f70e06dc976a3880865992643a7a3cdb2978ac0ef8

          SHA512

          666262292db02b67c00070d5cd70e90e19e984a7729403c809fd7f4c7ab1f856614b77be714f45de5bafdf0c51d264a4d43bb71128087d853b9ab309fd694f69

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

          Filesize

          32KB

          MD5

          cada3673be8ab2081b9bf4ef0a727c0d

          SHA1

          7a05d672433234c2669d37d18fd34b2cf727a66d

          SHA256

          9dfb5ff2f3c6911ed871b085c4dbe809330007ecd90b5491481d3e1643a674c6

          SHA512

          579040edef10c952526510039dd450f3dc49ef8a0019c961e01970f30a987c455bdd6f7a4c6eda2025fb44bb1590a281e278604a2982d15fee6d5ff3fb883dfc

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db

          Filesize

          4KB

          MD5

          f42cdab4f46049204905d89e593e45fb

          SHA1

          f57fb064d80a27b32c6925e30cd06641ce136f53

          SHA256

          e9f88e23716f8dd80702ec2f987ba0ed857803c850dd852cce156684e0c30ae0

          SHA512

          953ed43e9a4b87e95cd605650a5e36ee602d4ed629025b05b9bebe0f0b160ef9d6d263fa0165605d28e69bedf6dc56928b08000440f372848bc2003092668520

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

          Filesize

          512B

          MD5

          d8031a2a7791616e27f35523a3947262

          SHA1

          b3b12da3a1855fad04fe60a5268ccb7ad8a1fd6c

          SHA256

          ea3ad8a43d494daaa4b34ca64735888b9dd94af60c474cf0be0ecafcd5c48347

          SHA512

          c2bf77c3da9cb9469ba355ae6764b08b8527efe238679025181f34c4937bb8928adec673df28508d39e4a0a3f4c7459fa64f9d83b403e53ad5856d104285b420

        • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

          Filesize

          563KB

          MD5

          39aa781a54347738175c50807bbfe91b

          SHA1

          4fe72fefd41a88361512cca18ea71e1becc53542

          SHA256

          b175d4e4b164abb529ac0f91968259f0da115c09bd1bc0a34da956180aad6033

          SHA512

          f434724a42fb6eac033a970eef549e993261c98bf4a4126fd902fd720ac2ddfa18293242df4bdd5e8a8c226936e115ddc1cf40ef636cb0a0c4d6a823e0e751e0

        • /data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation4619829912242580672tmp

          Filesize

          90B

          MD5

          151b87343fbf18e4063d3ee3af2d5790

          SHA1

          e964235c4823777e3ba01b9b9a806132f51fc827

          SHA256

          67f1f4432bda132ffb6787a2e1cf535b8b0b9f6720cbcb28b83c539fa67e9952

          SHA512

          cdc99044c0dc97ae291cea7ccc96faafd23b878fc92590139bc6191134afa336f1ee4923142ec6d3bd1a0afebd4287c58dc0d3c797f0a014f63b97e06e1eb0b6

        • /data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation5583498221990497319tmp

          Filesize

          559B

          MD5

          dec3ef7d244d709d69b8e03f3b714426

          SHA1

          99bc8c38e826a91f1ea6e8f812a5b75fc4142681

          SHA256

          2abdd95cfb2f1299e6b86a2684ae5acdaa107666e8304250aed43a25a7e86410

          SHA512

          677d86dbc5400335e886d26240238142dc06dbef4e14b5aea1ad5dbe8f2694d0286613f3141fad44da8a64b89e93187b9c2a3d965405ea813011c869cb1d11e6

        • /system_ext/framework/androidx.window.sidecar.jar

          Filesize

          12KB

          MD5

          bdf3529e80318eb14e53a5bf3720c10d

          SHA1

          25c9ace4b1af6e80ebb2572345972c56505969ba

          SHA256

          bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

          SHA512

          48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b