Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

20/05/2024, 06:03

240520-gr8yhaeg33 10

20/12/2023, 10:33

231220-mljpbaadfp 10

Analysis

  • max time kernel
    2261576s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 10:33

General

  • Target

    securesmsplus.apk

  • Size

    77.4MB

  • MD5

    30bfd388592873d836f5907c236f18a2

  • SHA1

    606e33614cfa4969f0bf8b0828710c9a23bda22b

  • SHA256

    58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72

  • SHA512

    95ffebc8a14ab7d1030aae6e1eba77423a08fb5f1f64a66af402841358514e462a7e23642e9efd1973a24d9fcd6a313a99f69eb8d1e24436cc3da403964400a0

  • SSDEEP

    1572864:jof7Q89n08GFOS1CqTKliPbRZY3IxKlgLOe2NGv3Qvqm4t4nHq4i:jC5dpKO5qtRZY3Iu22m3QF4t0qL

Malware Config

Signatures

  • BadBazaar

    BadBazaar is an Android spyware used by GREF APT group.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • org.thoughtcrime.securesmsplus
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4569

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

    Filesize

    169B

    MD5

    f32242ee33a78f58f57f921c6ff19221

    SHA1

    41ba788a8ddadb07d03868324322721ee2558ee5

    SHA256

    bdff4a558fa2c0983842b66b65373123e8a6a8b661d82dd8f2b90f08a78e03bf

    SHA512

    3c34187ab3a49dda47a25b338b84d03fb4fc40c868be34edf1e4ecfb7c1a67fe08aabade1f16a2e1c34e829eaad10d7af60854a1604ac2d70399915d65456f91

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

    Filesize

    235B

    MD5

    97ca0a8e6714588390c7d36160a685b9

    SHA1

    b1b820ada140021fd51746bc9a1827a8f9b16730

    SHA256

    408a80fe7eeaa898fb0439d038099544abf7c9403e57ab0c38d91319e28f7074

    SHA512

    ece33174665d17d10f6e035d096111d2902e3788ac54cb095cfc5ef76768c1107e714c03ec78699a1e3e3c9830e0c7a7f1837985c07fc2d36c95c24c31caa519

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

    Filesize

    301B

    MD5

    83e9371da1165ebd2d9fa19946f2596b

    SHA1

    7f3b21f6f5e4af1f8b78e2b2d2e467bd534ef9cc

    SHA256

    5dc34a8b28a203d71b9aafd9550ca9514ebdc42ecb39c1ff1ec0db9f7c9ec46b

    SHA512

    20a68517a969a2f428e89160979fb1beb466aaca484bc255c627ecf926c0b1fd67e8c09f9ad5318d5f201c0f823df214363f10a46a936107552d02ba2df500d3

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

    Filesize

    367B

    MD5

    2990d4bd501b6999df9ba7dc3191696c

    SHA1

    207c1a5bbcb52781bf14c4fbb08bd24884d4ff77

    SHA256

    862404996e758543880022f49fecf6ad16d35ed171ddb12025dcdc89e23a0c68

    SHA512

    b25945f1f7dee9fd2c4325a89ada39d624f6cad097ec7d57c0234239e9f998c84c5492af2dcd4ea9fd4ad41ff378cd208fe0be7810e4aca7f96ed2a3c75b44c0

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/.names

    Filesize

    433B

    MD5

    95539965d84792733aaf6536ac8c00f4

    SHA1

    9141d893396ebb9bebc8539eab29bbea21489817

    SHA256

    386c722f08228a08e402691c4709d53fcd70c2a93df6a9b2cbffc9f0f4ee0ef6

    SHA512

    65c43603809e39065aaf7d4ba622d54b0bea548e27ae90449dd6b5d80bf67b41727fbf172ed54f5795b5f493520b616009d95de7f3bd36711dca1f3f3237a83a

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/04a19380-6c64-4ad7-b335-0c180437336a

    Filesize

    76KB

    MD5

    3dbf960a0e8d55b066e64b6c2db30ab8

    SHA1

    fe4301f285cd3eaaa1012182d40fe89343c00769

    SHA256

    f0dbce6e68cc4c00749e479e0e68a12fdd8c45caaee67a8f226c77c015df50b1

    SHA512

    dc326f1493ec6fcf9ba1ec0b98a474b85d75bb62b14a5b185ec743f24bcd930641b3bacc53a6386d72520991b69d4f3d56043fc4c525222f20492c440c9694c2

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/07ba1fba-485a-4d80-8991-0aef372dc0d0

    Filesize

    159KB

    MD5

    fb1e5325289ef80e0eddc14b77f41ef8

    SHA1

    cb345a6259999c5e5e2c3fed863ca3ccc2de6f25

    SHA256

    6d94afa74b98cbe51d3a0570dbfb8f4e0679ab6dd5492bcae73e053f36b53d70

    SHA512

    45fb259937e0ac878df7ab440e4c9d84e1f7e8605a93b8edcfa81ce8108a3c17d6934ae6ad67e16f753e1bf9b0cb87d4ef347caed8d3766de2cb3085dbbe50f0

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/4cae921e-f75d-4726-902d-ad2cff6ad526

    Filesize

    264KB

    MD5

    64bc8d6247e8798c0f1f9a9c25ba25cb

    SHA1

    ba35d15e75766606553e843f2d39f645be95320b

    SHA256

    ac2ee7b8a91a16e0936519aabf7e1cf3e9fe96926419ca313fd57c1af48f32c7

    SHA512

    308b2610843581a524c31dc2b0691c77bcb3235d1e04beb89f366266b23b95786c7dd346d75cc3c068feec3980fc853e2bcc09cf95b011cc214564f5cd2b5b2c

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/55cbc40c-2db7-425e-8d7e-769ec04d81aa

    Filesize

    161KB

    MD5

    dd6e0ca531cd87ba5657dd9922d69e0c

    SHA1

    149f483a15f4e9e0888bd8e29804db754aca0669

    SHA256

    70b5e124a58a0c346cd80c7e8a37799b8f9c9502c12d94717f0af684093e2256

    SHA512

    c0219a06178ebb298616f73b8264ee5fb3cca9dae7d092ef162aa983c2e0acb4b2d11be30289495f0b22faf70075075a497dc357c5b8280f21c41b64916e45fd

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/61afff82-f095-42b4-bc42-3d89eb5e5967

    Filesize

    238KB

    MD5

    1375ced64abc297f03dbbba4217a9562

    SHA1

    dc8a11e51cf8127351a89908055a68ee74967467

    SHA256

    124210ad0e9e28c118e7e6de20640f294a0714226049d53b082d7dd9ebedbc76

    SHA512

    dcf4015b2419de2fd9f3e324aca1cea76daa9bbdf6f9828d4f0a0da7dafdcbd4d918372ce2b2e5f6e1e95f7b2b9252b194cc8f9329335a1874ca50cec7eac0ca

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/63f47e5b-ef04-4971-8070-293a55759dac

    Filesize

    144KB

    MD5

    904cb8b6fbe0695c9146ee107535cf2e

    SHA1

    6c4f92cefdd07afbbfc53e85c5f1da822900a71c

    SHA256

    77422d601f732be90545704037725f4401945bf7f2914cfd684861780c729730

    SHA512

    66aa70821e89ec653b247b05f4294193b61215da71a1c24d515e44d6e86e3d2d03d60502fb0f018f73f96168be15ef44afd5d2dee59b38591bdb2565dd30cd1d

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/6f79c208-08cb-4fa6-bb98-6abbd7150d49

    Filesize

    161KB

    MD5

    48b19c86e1929128229eeb4d2eee188b

    SHA1

    2f757b86b51fedf729cdf6db3db7b2f0a535cb75

    SHA256

    32f7056e5157dc42816b6bb1a9bb70d647f9895ce3c9b369dcffab008e9b1e49

    SHA512

    c6c1928a8db4df78cc4e2a477bc78903348ffda65e5398539412e775a6e85ab22a1d82add8be1792e6164a58589d15e01622401f06205af8de5185d31ec6d709

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/7b9a4040-4f97-487c-9e67-70dba27f8649

    Filesize

    78KB

    MD5

    34d66c631c14f18b3ff921bbcd964ade

    SHA1

    6af020be363b70416392e5d40040a25193126955

    SHA256

    99c8ae6680d78eb14bdeea465fab177fd7a1930f045a30a2104ba2e80f3829da

    SHA512

    f2b687a2cf31351f78f48c5d4ca07b56033a93603414a75c04a4548a62a2328d57761de3e5fc019ef16b149df506a74c928982b442e5111fbc3b107253289885

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/7d2ab1c7-4679-42dc-a27f-b4271ed4353f

    Filesize

    161KB

    MD5

    da005e26bf3151f678d381d34306ab44

    SHA1

    6c0960f1b0420af59d83cbe6f83b604a43f8b3f0

    SHA256

    b19501dc326c4e9b2105809d633acf178f0926549cc4d990ca280447a16fc851

    SHA512

    5264cabe55fa1d7cac0c1173aca802008252debb229121b5656814183780e2835aab3d1d9b4187ece6c7c5363b4395f2892db183f60a9c2d990026818726fe81

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/b903d14e-df48-45b6-8458-ad56122c5f8f

    Filesize

    170KB

    MD5

    6bb8b896824bf403e053698eabaf23cb

    SHA1

    0277b66c1fa5445017080561461a1fa9c6d7567f

    SHA256

    a6e3e87073a0638186a49bac7770f22ab0ab85b9cfa58181629d8218be25b661

    SHA512

    bfb1eac214e2ea2dcff25b4cae5bd0e27abe26a609b15471b68e85b01cb2b0a92fc6eca0b2e91265f7365da3a4a5b226677a3ad96864265c1977bf3f9d487c5c

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/ba92f1d0-e40d-4b34-bb56-d21ace6bd440

    Filesize

    117KB

    MD5

    164f1a758929e3661c9f9bf839caf943

    SHA1

    57c1d98ab4f23dcb3e4a44c77e543b619afebfbb

    SHA256

    8b28547bff5f82160abfd553e6794d96aed6c92531eeca5a241ba938e4598d7a

    SHA512

    6603cd2a254c0f58545f8cf70b250f2135c2d29358acc0a1f9ac28e7746dd64f69e7bf22d52b150a440496f2077b92e483d6161a738e930b9c3ea58801d57d90

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/bdcae8cd-51c1-43a7-9a4b-5e2cd4f9741e

    Filesize

    157KB

    MD5

    6a81d9df9aaae0ec85dd9be167e801e8

    SHA1

    d8b810833cf5ce4b6f404e8cc6bd14ed24728948

    SHA256

    af2e88d0eccf8382d2f087d8cda3f03babcf4a64a0b45fea424937bc844f7eaa

    SHA512

    443526a4239d7120ad87aaf3235a5e47eec6877fda60324ebaa2bdf6cd8fb35758da53ddb61df8941ac5e35e986156f7ffb3943c82e25be8bc486850c92e12a5

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/c53f9690-291b-4830-a7b6-09a970022f39

    Filesize

    228KB

    MD5

    6b70d8c919afabe42535a983308fc971

    SHA1

    2610860856340648c1895c2c95a0393864167bb0

    SHA256

    bf5570b23807b89e043bda70e31b9c364d386cf698ce2b15e61aa5445550755c

    SHA512

    f645c00ed2a1a096d8e1aba4aee6aa709f1e12b766e16bc9c986b240e595821ea98d9d5a7157aeec79a6a29b43c181fda5a78aabd33896a6d437eaad0688bb8d

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/c716eee2-647b-4ffd-9578-4978122d7d7a

    Filesize

    278KB

    MD5

    c4c7d2d59a97f7cb58c21ec0afb61c94

    SHA1

    4b30c7bcaf46f811ee5faabcb3b726f806adac34

    SHA256

    66182510159da35e0ce19d10eacdea9bc0edf49ada9d41df643ad711b0105857

    SHA512

    7ac1024c183f81283fda47e8364af71bd56d54c976b806907dbef2ff74b0a64e50ade9dbb9fad24a06856ccc6d7c7735edc9200165144845a079d39cc460d22b

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/cfa6808e-5c52-481f-88ee-8977c3fc2917

    Filesize

    246KB

    MD5

    c4f782da27e5372b18ee86530899a153

    SHA1

    3e0d5a4d3bace483218f3e7a9ffd4a5b33595d89

    SHA256

    2caddf3a73654b9cadea00194606b430b945a85d58affe07ca911622eb37bb41

    SHA512

    a4dc48be232d846dbd65a294cdd29fe746e0d7001dea62716b8887f2c59583aeb1419a1429b946552676a55193d7965443ae8370f05fd3386c4fde3f15b450d1

  • /data/data/org.thoughtcrime.securesmsplus/app_emoji/46853fb2-71bc-4a39-aa02-6ed3ee5df1df/f4263afe-fb37-4536-9e8b-e237768688cd

    Filesize

    147KB

    MD5

    4b20fd1960c68f8e0333a60376f68d24

    SHA1

    0f6372c771a1f123698ffc0ab462892c9e887892

    SHA256

    6a4bae34afee2f4e94b69604a93cb51aaef2051d1913a746897321ea09d325d5

    SHA512

    c59a5a4271239bfce3329f449e11fa188ce241855a9f422908ba36db8405e934875763c6fa9c8e688b113cee57d32e8cdf6ba6adbdb5540e19b32c5e5ce8991e

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.manifest

    Filesize

    498B

    MD5

    5fc3459c7aa474f8e9cc6dd46b4319d8

    SHA1

    1f6e6eb8f6e25596fe3dc41269c87d6e722c3940

    SHA256

    db61eb78030920b75ba48b5b2d660b70f1b2e868fb23509deb1add694fb49cf9

    SHA512

    9c1b40e9b7dd0da9bf78f16c5e243d7819a235c48642e9691e39c4ca0277cbc03bf0b1bbf7f666e30be359960c0587117bfdd9a287abce14ca364547f49672bc

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

    Filesize

    99B

    MD5

    b9fc40be789167040f2366662a47a667

    SHA1

    92f1b3555b5b103a30fac01af2963c91425619f9

    SHA256

    9f34dc74c81777f66c295b46b9e29d416cfff1facb90ba509da6093b0fdc38d2

    SHA512

    23f112d49c4e31f24d3299546afca345a5e500d88cc2138a46fa2d16e755451b80b9fcb3ca3ff6c30890c4c93064e7520e51bf31af1800d765d1d71a9b27d65e

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

    Filesize

    156B

    MD5

    a1ebc8a8b6e877578f8cd77fad1ec09b

    SHA1

    71ded57dbf9815bb1f957c81208f65aa357bcde4

    SHA256

    7dac087922101269d9c68e14923bc025ad3208a40cef1e5a76a9d85a2b755dd5

    SHA512

    8e2695e3d3e2ae1a3ad929ba2b088048222b6b09d7129ec7670ae9c6cb669abfb7b2f97fda3a186130256404acc83770a2056113d2efaedb3df620586ef01b7e

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

    Filesize

    163B

    MD5

    87e2e4f61d9b576db4ae3e8625b9cb59

    SHA1

    a623bdf292e999c160af86201ca0e88c7deabdb3

    SHA256

    d427179ca61eb2e0062134e4796a91f51fc619a64ec8f86d2849c6281ed26b20

    SHA512

    1fa79f737d94584f1b99ba07ccd1a7bf0c79a8e291698b6feb1a9c837c59aa7fa1a4e2804b017de999fe70c7254ad2d74338ac82b2a06155548730b0494e4fde

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

    Filesize

    231B

    MD5

    4c312413b75627335a11b7d64ab5cfcf

    SHA1

    9fbad3053d445adc55ef043b845872f79d1fed84

    SHA256

    6c2a290cac1dbb1bc6707f400f9bcf790eab5e2db454c35715a1dd3371645129

    SHA512

    aae00202145d6076d7fba9beee24be982722ed8921b621482fe9e1a94bc781fe1bf689aba21cd728bb3b0d628d52245c6a8a5b8cb330e88a3b3b85543c38c95e

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/.map

    Filesize

    295B

    MD5

    3e559e9b98c1a493bebe5693df510adb

    SHA1

    7a6838915aa9fa963786dcf14c58d8583933939b

    SHA256

    f56c7827754501c7405de91f0db7d6a27b5cfbe9d7c2ab5551966e9e36cc3ac2

    SHA512

    82143bb2ada5bed24cc3484322fc753c06dc54abe40635029cf95c31f90fadd8832d96f38e9248371463893b993dc4c4190633755d5bfd1f1c8ad53a1e0be778

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/1331e838-873e-43de-83cb-dc7dae9ee6b6

    Filesize

    56KB

    MD5

    ad4cd34327721459c11a67b4332c945e

    SHA1

    9c0742c0bb82288d984a37dd2642f1246e599d17

    SHA256

    305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

    SHA512

    0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/143bec47-7db2-442f-ad9f-27948242efe3

    Filesize

    95KB

    MD5

    44850ec0ba405c1c5620ff156b3d624e

    SHA1

    dda0533f8a46369c980550d9a9c4264d0c90b60a

    SHA256

    9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

    SHA512

    a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/94afe3be-6d60-440b-9b4c-6b3cc27389a0

    Filesize

    547KB

    MD5

    2367a2c4f94680d5aea44f06048fff3e

    SHA1

    41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

    SHA256

    aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

    SHA512

    0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/a8ff0525-a36a-4f80-91b8-4800c7e944eb

    Filesize

    308KB

    MD5

    c6dacb6bcfcd747bba440bf2fbd2c85a

    SHA1

    ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

    SHA256

    3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

    SHA512

    6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

  • /data/data/org.thoughtcrime.securesmsplus/app_story-fonts/6e1f750f-0a15-4960-a6ef-25a9e0fbbbba/b7c81e42-de07-4ad6-ad55-92040975896d

    Filesize

    307KB

    MD5

    1aa99aa25c72307cb7f16fae35e8c9d1

    SHA1

    17ec5016a5f2b2ea4f27f7bce1df4192d3590161

    SHA256

    a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

    SHA512

    1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    fcf48a32a51f4d09a144272fe5951b1a

    SHA1

    06499305fbdef89db297ef0c7bd624edbc51376a

    SHA256

    92629dbaad10ef4581cfd6f94b24bc1a5cf8776696b15ef8cfe1d5c3ba71d992

    SHA512

    e0e9af1296e1030694202634b15f2840d3b7176a4a2321eb6bb9f4c186335567301034c487d4aba0acd90f1ac7eea8df1250358a6aa9407c8bdf19384cc1bd95

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    32b7dc97791ff32dd73cd2fe4c849410

    SHA1

    acf1b29b28da934a4f48c1d36c40221f70932e73

    SHA256

    1458fd8bf2a7c4faa5fb6b4921a11133db4d39f358a86d9a3c524150ca0185e5

    SHA512

    b9518525f2ad67c37794e109534fb979f2eb72693df833f0f1df59d84bb619bda99c3740b98904a6e3cc264889126dc225e99b57e3306d0e9f0f9a49ea673609

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    6c2c5aa556a9c031497ee9114372afda

    SHA1

    ebd75589e87d2cd053922ee659f72abc856c2d94

    SHA256

    dffe7e1bc2337d9847558a2d3a2c8f7e15e05ca1e50481f1dd78718cc6f8ef29

    SHA512

    3f532b872f20625325a9e6afc649c32ceda2559baad3a5004cbb7208f7658076b5ed7f4bde62d11378e27708b2cb48a1cc6da317aa8310d933021cd69fa9907e

  • /data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    4fe6ba0d4bd1b5b89369301a76e336f2

    SHA1

    683df2f21212d642d0cc29aa16fc93f52c03eb0d

    SHA256

    011f6d3c6a8696d4131ba601e549b0cd156a3722ef16deba237c7084ab448869

    SHA512

    9ac9772b19f33de650a1e34dd78abe433c7ada7b04acde5344664eddf30daea902749b536ed3435304d90661a3a462b57743fd757219633fc836218a5056403c

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

    Filesize

    4KB

    MD5

    59a886e2d57e9ab8e1c9316f2e823643

    SHA1

    066c2c90923d589f4abafe00228625e8778c667c

    SHA256

    db9edac3bed90d4dd2765715caa16d79f8ad62ff3f3c8c427c56c2c63db11988

    SHA512

    240081f2385de49221d766214884d8de6206068f314e16509863d5c7f5627557726b6832d95db77ed5ac5a904f21d02faaf878a06be43e3b9f2d8fef707c53ee

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

    Filesize

    512B

    MD5

    6019def5a469a52f0d25d2060d902c69

    SHA1

    86438dec52f7479c29fac47611577e47ba7b8847

    SHA256

    fef89ccce1da4c0c342ec6e2e3c557d9e9056e7e3bd11e9bc7d48022404031c1

    SHA512

    1fee006cd964f12b339613fc66826741190f73a9e2f74f9bf12337cc159c4aff83a252cd1984863d15d883782f2d9ab13a603341eb1671ea08f6bab0a67725f8

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

    Filesize

    44KB

    MD5

    625eab9e7837cd0245f55100bb7c7763

    SHA1

    75308a80d8812248f9ce622ce0342b5a4b8fba4b

    SHA256

    6ab330ea16bbbc88875759b787ea4fbbf4854b41a26a101ea48df29bc662f274

    SHA512

    b265c7839ebbceacc3d80c54043b7aec4f4a71b67a83ea86af0149ebd5fa3631767e150c562a93c8335e5dcf9a2fd00c3dbd3d270b670aaf18690e5c8f2bfa03

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

    Filesize

    4KB

    MD5

    a84d850ef97c404473dcf6352cf1ed5b

    SHA1

    137b6f8df7f24dfdf298dec0605142c0b875da49

    SHA256

    54f5b7ace018a01cf86162925c337b3f2e1f75c739edaeb72fd24062e7742a43

    SHA512

    d55a781d26b378aed4b51be62e231c6090e4eb481b28f734dbee716ddebcdb36bd02e1ee72fdd3f54862d9c573d5c4e6dc5db251b4cc0887f0546c4ee90b9d74

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

    Filesize

    512B

    MD5

    a64b213d24ae9e5102e197a089cf93d3

    SHA1

    a7305453aa6cc3ac045bab939692853ad4d5c7e7

    SHA256

    47d23269582e25afb5615ce912250f03b90d58f4e800066835fd359b40a19a3d

    SHA512

    f270232a35be656800698eeb8fb2eda1bed9725803de5684be3cfec0c2a8be7df419a9268f1330db3a2c88346f633caf474402bde535fe03d082fb5932fae07d

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

    Filesize

    293KB

    MD5

    d1b5cd55484c80265b28d5fad2cb1ddb

    SHA1

    6dfaac055c21d22f205a59fcf86d325381ee1544

    SHA256

    f76f74af57ee11d8c7dab9760dc3ff32d9f38b245f65afd19abe98f1259a1e7d

    SHA512

    32df9db30f80e4a7f3a58e452f03dd6d5f1de755bb4d991a7987546b586c2f49dda4684f39d47aba3fe54357196356c8acdb1cde6157632fb34604bd19cab090

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

    Filesize

    512B

    MD5

    de9fea9d58dafabba6406813bcb0c883

    SHA1

    b46e1cbd344357645e9abebb176f2f6655bcc914

    SHA256

    8234b64b514dec331836b8a5f81d298ea50acc9da12c3bf0d8f22e30b346e222

    SHA512

    fe1e8d7aed76e1b001960d91d0dd8537339039ae9dd2f7e7935a1787e84e4723cd0f986b18cd123331eccc4300f727dc0933c08680bdae23a3c9a80426a46610

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

    Filesize

    4KB

    MD5

    4fc13f0c8ab265cc8459cd3f4e3423a2

    SHA1

    31f594c214bdaf409c055276d3220816ebac67c2

    SHA256

    3e791534bc4a4c867fe6a62fbb601eb2aa30556717ad118fb61fa9f02b7fad12

    SHA512

    28fb915903438ec09abc89f319b494cbec0f2f58ef914dd9e985c9c86f8a66f675cdbc6cacf085d0817d25f5092197631e1acc3268a4837f885a09eb1dce806e

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

    Filesize

    512B

    MD5

    b7f2062c50de74b05551444ad3ed50fc

    SHA1

    2361ccc3fbb1a366c647b09dd49428d19c1027ed

    SHA256

    fb3fe76c8c21128ebf5a6e40b26236b4da8c967c72588c9e175a795588dcdb99

    SHA512

    47e5ed92ed98de22c7cc5d09be30e7ca8286712c6241f640f08d19e540695c43f250d1f43df6a67cb4f744e713906eef36c35194584367dec4ee3782cccbb604

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

    Filesize

    52KB

    MD5

    161ecc51e0ae250211b1656f746a00e1

    SHA1

    b7a0c68bffd2fa2fa6a1decc6fa8f2f33ddbecc8

    SHA256

    c2da792d469c078f782abc62aa32f2f16fcb4658ca421e3fd459ea9699d84cfe

    SHA512

    51cde99315d53c124f776b535930e5f379402f3ba574702ec72108df71c048413c4749ccc5a3959c717c366ef175a01e972b6205957bed481e5cccce2878e157

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

    Filesize

    4KB

    MD5

    10c8f43e998ce82212e0ab4554e316be

    SHA1

    c67d2a8c040a0be2db4c52e23f78151075a6aceb

    SHA256

    7c0ed427e9c843bc7f6a674668a0dca025270390ae8847d2dd7ce2f80fa0fedd

    SHA512

    b1892d3423dac929e4a96cb3bb768352fc83bdc05dff800753e4f2d9591c388c87d1917012f24ca202c315487c066d89c156d4fe6df31a1939103d0d9801c199

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

    Filesize

    512B

    MD5

    0ec3a0e327467916b363b8c172dad44f

    SHA1

    4d4a3f906ab65d2006084aff225a4a42033fde2f

    SHA256

    9e27c9ac089b3aefd74038f70e06dc976a3880865992643a7a3cdb2978ac0ef8

    SHA512

    666262292db02b67c00070d5cd70e90e19e984a7729403c809fd7f4c7ab1f856614b77be714f45de5bafdf0c51d264a4d43bb71128087d853b9ab309fd694f69

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

    Filesize

    32KB

    MD5

    cada3673be8ab2081b9bf4ef0a727c0d

    SHA1

    7a05d672433234c2669d37d18fd34b2cf727a66d

    SHA256

    9dfb5ff2f3c6911ed871b085c4dbe809330007ecd90b5491481d3e1643a674c6

    SHA512

    579040edef10c952526510039dd450f3dc49ef8a0019c961e01970f30a987c455bdd6f7a4c6eda2025fb44bb1590a281e278604a2982d15fee6d5ff3fb883dfc

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db

    Filesize

    4KB

    MD5

    f42cdab4f46049204905d89e593e45fb

    SHA1

    f57fb064d80a27b32c6925e30cd06641ce136f53

    SHA256

    e9f88e23716f8dd80702ec2f987ba0ed857803c850dd852cce156684e0c30ae0

    SHA512

    953ed43e9a4b87e95cd605650a5e36ee602d4ed629025b05b9bebe0f0b160ef9d6d263fa0165605d28e69bedf6dc56928b08000440f372848bc2003092668520

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

    Filesize

    512B

    MD5

    d8031a2a7791616e27f35523a3947262

    SHA1

    b3b12da3a1855fad04fe60a5268ccb7ad8a1fd6c

    SHA256

    ea3ad8a43d494daaa4b34ca64735888b9dd94af60c474cf0be0ecafcd5c48347

    SHA512

    c2bf77c3da9cb9469ba355ae6764b08b8527efe238679025181f34c4937bb8928adec673df28508d39e4a0a3f4c7459fa64f9d83b403e53ad5856d104285b420

  • /data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

    Filesize

    563KB

    MD5

    39aa781a54347738175c50807bbfe91b

    SHA1

    4fe72fefd41a88361512cca18ea71e1becc53542

    SHA256

    b175d4e4b164abb529ac0f91968259f0da115c09bd1bc0a34da956180aad6033

    SHA512

    f434724a42fb6eac033a970eef549e993261c98bf4a4126fd902fd720ac2ddfa18293242df4bdd5e8a8c226936e115ddc1cf40ef636cb0a0c4d6a823e0e751e0

  • /data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation4619829912242580672tmp

    Filesize

    90B

    MD5

    151b87343fbf18e4063d3ee3af2d5790

    SHA1

    e964235c4823777e3ba01b9b9a806132f51fc827

    SHA256

    67f1f4432bda132ffb6787a2e1cf535b8b0b9f6720cbcb28b83c539fa67e9952

    SHA512

    cdc99044c0dc97ae291cea7ccc96faafd23b878fc92590139bc6191134afa336f1ee4923142ec6d3bd1a0afebd4287c58dc0d3c797f0a014f63b97e06e1eb0b6

  • /data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation5583498221990497319tmp

    Filesize

    559B

    MD5

    dec3ef7d244d709d69b8e03f3b714426

    SHA1

    99bc8c38e826a91f1ea6e8f812a5b75fc4142681

    SHA256

    2abdd95cfb2f1299e6b86a2684ae5acdaa107666e8304250aed43a25a7e86410

    SHA512

    677d86dbc5400335e886d26240238142dc06dbef4e14b5aea1ad5dbe8f2694d0286613f3141fad44da8a64b89e93187b9c2a3d965405ea813011c869cb1d11e6

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b