Analysis

  • max time kernel
    173s
  • max time network
    187s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 23:07

General

  • Target

    68f2a40202be22d5f59df0c5adcc8023_JaffaCakes118.apk

  • Size

    13.7MB

  • MD5

    68f2a40202be22d5f59df0c5adcc8023

  • SHA1

    199ab6977833f177a93a6cdbf2a3ca5d3166d316

  • SHA256

    c25975706fb87d8ffa3363c8ac80e6ad9ce660b01c076ba6fff2034dc9a2bfb9

  • SHA512

    e2f6bdab2dcb9e2eda1998a8859f18e9722a007db146e9f6894e86cdbec047d86a48843780ecbdb1ed8b7d65edf6b82b72c1d9b8cc001178271cdb377b76ba93

  • SSDEEP

    393216:CWktctLI8kwCD+EsqJ3mm3mc/KcaF6TuD+3BV6oJJWFt30iCXhtF:CbQkniG3mkdi6TuDqBZj

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.china.hunbohui
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4345
  • com.china.hunbohui:pushservice
    1⤵
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4469

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.china.hunbohui/databases/JH_DB.db-journal
    Filesize

    512B

    MD5

    1f6bae075f44385e75083c40a416376c

    SHA1

    0db6af5858a6438064102d2e1c457558db406696

    SHA256

    0988c088f33931ac78b363c97a8760f3778a829af16d82b6c6cb20b858d3c3c7

    SHA512

    52f80f65ab1a5dfcaf9c84624f29c1014d5f8a0d8894a9eb64044fef4072a9e8fe9e923570768fabafeca9e832dfd8f08f807bda83590962f608adf0bdc31387

  • /data/data/com.china.hunbohui/databases/JH_DB.db-shm
    Filesize

    32KB

    MD5

    6be0c564220937936f6eb5d75e0f2e88

    SHA1

    7e288c7665c76c3a55e5a495231068aa526999ba

    SHA256

    a756b922ad302acfbd43520d3ab4740470725aa5825466ade0c9c732d01a20c1

    SHA512

    e944f7b9928c6d56c5de6797185de0ab8e961cb4697183cb22f7991d09a531553710c0d4f0b5180f90236789efd4b9311a97792c7c35da77defb105baf281a66

  • /data/data/com.china.hunbohui/databases/JH_DB.db-wal
    Filesize

    72KB

    MD5

    89796559df8975db2b31d7736fd51be6

    SHA1

    e2c5968f3408e2af13633fe1f638b5e38e6acf39

    SHA256

    490dabda32a2ef55669639503178d57578a44d9702e873feb90e1116ed6bb7ce

    SHA512

    812a943253e227facead0c3ede45b3308eefe5efa85617f7ae6da30082de78a42463fb28aefd3645bb8b509d2042680a153ee06fed02dde69881239062c5762a

  • /data/data/com.china.hunbohui/databases/google_app_measurement.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.china.hunbohui/databases/google_app_measurement.db-journal
    Filesize

    512B

    MD5

    ade532856b51947e50bedd3b0109fffa

    SHA1

    0283ca9dec7481d293d51a517649873bc7aea734

    SHA256

    70d4e028ccec9792432b16ec8c8f33c1205bef8cc30bad7fb6a0b32354bf8958

    SHA512

    d78becc0b9f368873076122a4fb865db8f1c9c0b2fcb78cad63709e747ec7b0509831cec3574dd079078e572329f110ca29d15c5b5b6e48707734ba33ef6c832

  • /data/data/com.china.hunbohui/databases/google_app_measurement.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.china.hunbohui/databases/google_app_measurement.db-wal
    Filesize

    342KB

    MD5

    5f78afc78d4baf31ac8c5d878cf06d45

    SHA1

    af4b15679eeba8cd7d08dc42d3a443576fe168c8

    SHA256

    0f487fda3aed89981b1019d04c7c633202ee4186a15c32b8e495c991a406b3a3

    SHA512

    eebc57d69bd53b5ca9b48f32de66bca9832a09a229f02d93dcda057fe0e13c9fa461735769f080dcf5fa9b9caa2cde33aa285e2b66f2c8c9a2f381215f8132cc

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    007836a66406f6e938d998a1c4279963

    SHA1

    0f18fc6db692c6e7587d8c627868752f32df9e5e

    SHA256

    36b9d289343ad6432d4fd56681d8b6a42852d654eafcb2141e34c09a7d5bac6e

    SHA512

    55caa3662049345657f9038dac486bc91ab56bb3ac009195d0c4d0ffb39bb07c34f0c9c4528f14f2a3de1ff3b3f5d2bc14ef74f15a2677a15d1893010f62471a

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    41172d46ff8888be4cfc7da9dc7d75bd

    SHA1

    83758a810bc86c52f60c838acebb9bd0c541be19

    SHA256

    7c27b82cb8af372763b0699274222450a8311bcf96cd8e876b717d4ead2a4c9c

    SHA512

    6d2556fbd104bc18366276346a8fa3d36992b5a7e98b2dc43683912ab4322dfda0ddf76c43b20710f8b5a8018655e731e5a52b2e573fd62f0ba0767b868c3972

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    48dcfa56d7bbd80c7c1f9aaea193d2a7

    SHA1

    432c65f7f9302367cba54ff4413f19558b47f46f

    SHA256

    c9d6cc49d50d4d8f179acc9e1ed2574c6dbaf9c3f1830adde229dab48b43649f

    SHA512

    918a89f13ea00f03ddb876d93759ec2a1352ef5a07228520c5f2e3b98261dfdd4493e86cb3380f5b3a89428e43e5a67db8d770b23e02f701e79dc667b5ae2b4d

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    44ee644b7f8f7b0380f573534799f075

    SHA1

    5bb1643aba35090e14e9533451fd64975571a69a

    SHA256

    83491e3544185bc931a04dfe4f2d4dfb6c146f531c081ffb9f941ca63c8a3977

    SHA512

    0486b573fde51de70096c6da394dc4b14d4ea226ba3e096400928b72deca194bb0c7fa719c89c9192f7dfc9777d43196813497c16ae391d15a3160815a1acc19

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    e26527079dabf81c04d3b3cc1facc3b1

    SHA1

    e898114e115acdbffe772b7976f74fdd2e7f420a

    SHA256

    e5834ec1787bc815da7f195c7ac733d6550d610708105dd4b2302f358f97960a

    SHA512

    0043dbc0f45428a10b60d525866bf4baa1a8b0786df2fef99c26881674af5166d03cea086440c39e4784601317080c697e7f4763a157ea9f7a57f2ce9b09d2d6

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    79e25c2825cbd07c206ceae195b8a7e9

    SHA1

    75267eecdc4e135b752a2caceed85ad94adacbf6

    SHA256

    3c5dd3f1cda73dab92c90cc12164818d8436e02627b79b494080d175d4d9eae7

    SHA512

    b794baf2945ee56dc01ab9041a2ee4ff2403d367baa91c82e5e96b0b4725986b2f88aba4ffe3e7f61ef7d08b6f6c2f0da56c70fcf828a32b41fa1d2246f5b1fe

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    7732924475a8d6c39fc5578c7a8f1c6b

    SHA1

    9dfa152cafefd0b0e2072034d1b3073327e750be

    SHA256

    4fefc164e8dd72470c558accf61df19983fdaa6512812dd9176139aa8bb3f609

    SHA512

    6f7fd12a09c6fa2698481ceb402e45bf216b0ed43d2172222c46eb69ce46dab393029f35bb6dfe422891fb9286e5a8601f8ae12fe42cb19f89127ccf7e628ee7

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    2da51182d13a92605c1faeafda213236

    SHA1

    a5d577419415d116289d95b41f5806c56377a6ea

    SHA256

    3dd43526dca1d51525f4eeb4dd526b4703a0556a5741c2af90dec025af669b22

    SHA512

    75cd1e89dbaa78f1a8a30193eca8dbdc830d818a651e5af28aadb5125a0823d4c84f081e5e61f4056d2804877388181b15a1c33e5134dd6b2e5e3ac515aee7e6

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    a081a789104bf3d05cceb895cd607e21

    SHA1

    69822ea9e08ab76436cc509ad3df7f2daf10b8d2

    SHA256

    2707b3c201114a8f00b5ac6d24d9e6d6faf9047881391fd052bdb51b25fecea6

    SHA512

    dd44ee2e961b1ffa9fb88c0726edc0c722653e9ecf9e80127ff193ed1201ac7f598043f99e6fd9bcb707a71fd9f3c2e2b3145f811144f730ec5330bc38781673

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    30f3e9789d2cba4ff687c02a4e432541

    SHA1

    d50ed89e39502ffff497d4188954b62cc129e5e4

    SHA256

    333d75f6328040102c85df172c18191349678afe676a937a7dcfaa4599d058b9

    SHA512

    dbd1259c4b05d8d9482c0e75454171db4ed1cf707078152ff6fc0642985865eb4ed8dac809cded2c0b5f44e335538982f82a44e5d069e4574f270e6c9d787bf9

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    f20201c2b55d91d0c4c578b279b1b688

    SHA1

    3fb81fa5f6985f04246e0b6270b7664bbec560b9

    SHA256

    624f760513c9e583d93279ab85d887d7d80d85dbbd5283bfd2d7f4a70d84f33c

    SHA512

    d0e4b6b5c18d6bb501c66323a9836a008bcc0a1c28582050221d8e48cd21888cbb6d19951579f102a2ccf71508cadc6a087d0cf91cbefdf1d4e55c6d08a81dab

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    25b372165cc709e1dfa936b6ec007b30

    SHA1

    02bc0f1242a2e8fae25fd7ba7ea03f76b21afe4c

    SHA256

    954777fe5e306e8a72b15da23a9b054d2018fbe11e4482d4f7d2f7ee8d793337

    SHA512

    ecc10bba7f2fd07fdc7c47ac3bfe28dd434e9f810988571b49c0b5bd25f73674650ff5851a03f14ae97d96649b103e444d4d9202fb11f1b3029eb7400047280c

  • /data/data/com.china.hunbohui/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    ef1d297eb7b3980c677015088dbd8151

    SHA1

    6c5ac078fea49b6a8b25e2dbd8ea814887b07c06

    SHA256

    22e9260a40e86684c29080fa0b54d12973c30789af714223ea1df7b2f538c80a

    SHA512

    e4a8c196936b557f2a1c0f6d8c5db83046efc7f44c441fd4905a30844586970e0c308387b3f9ebdfb082fbb8a7df39bd45c5f7b8f970dd7a5fc1a335436bc1c9

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ABeginSession.cls_temp
    Filesize

    77B

    MD5

    7e2fbf935162ee260f34b7b29d1deef5

    SHA1

    077e05a1415d17f56a858e3583898be2e88cf466

    SHA256

    938ee9695c1376cece3765785f47aa7ba7dde73acb38724a27cf950edb01739c

    SHA512

    e7ea8562f1f7be6a08ada85ab66e11a903a9fdb5f95eca61fcba4ae7f90247ba154c1898f71163971b1554210e64a554e7ebda839a7cd91a028501286f425abe

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ABeginSession.json
    Filesize

    132B

    MD5

    c26b69829a60ba75cabbcd6a6f3347b4

    SHA1

    9e86adcfdf755fec6fa76361ba14cd4f9d47c531

    SHA256

    a09cd0f3784132e82c53f25c64da22a6d44de2e1bd9960aedd7a8eac26ee4600

    SHA512

    f1d76502433adeb2a017a04231e6b5c897c1a46854b0622e2675258953938fe247ecda29d222f5d961097d18f08de1e7586d93182b1fc517336c0e15fb4b4678

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionApp.cls_temp
    Filesize

    114B

    MD5

    7faac455d41caef77a54c2b940312454

    SHA1

    c08c966da7a254c8a457c5572ee68f1f9ce5ca09

    SHA256

    85f7850afbbc8cfecca63c6b8a441cf3354efa62e12df2482f9076c802c0004c

    SHA512

    1859bc5bde3c5d0a63ffbc494f18b150675d82649239056986b1fc3ebea76a6be672b8a919e9379f4a772a359d360c661effa62dd805183e055ac4c3aa8607c5

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionApp.json
    Filesize

    228B

    MD5

    99267705cf4af25e49274f6768ee885a

    SHA1

    a4648ee1b69b5871800795e4aa6d0029d5aa5dec

    SHA256

    7a9bcc47dbb7d43c9106653868f07dd07404b620a42e67657ddb69a8fc34aade

    SHA512

    5710cd683ab63e9d86993f1910fcc57a816b0fafabf76d5138ecf164f745970ee73073d01ebff44d7cbfb93e44ac69f1bfc60cb1a1b4f1fd9865b1625f116658

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionDevice.cls_temp
    Filesize

    48B

    MD5

    1259ecf4689f83376bf373856c23d57c

    SHA1

    19507a1426d938dd77930f194bd65779565f5982

    SHA256

    2861892e8f098662c173abcaf15b2480496b48dc1e96eb777cd6a3124dd63e17

    SHA512

    0ab328ff2fdbb8b4778315c9ad769b3205a29c39771162529bd5598a5e370468e75edb05b89cf0d6f3e18d226fa2bd19fb70e68fb59023a80fe49f8e3185b230

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionDevice.json
    Filesize

    202B

    MD5

    bf39402cec32b3b22f45932e330f6403

    SHA1

    d90fe34fc808631ec2d5f76dc2220be1d4aa1796

    SHA256

    96d1b75a26e06e0bd0eb99f517829437f210c282e3fced029cf6fed57679a221

    SHA512

    1240ec10e14123dba77449c3820b1e44c1210dd624f74c3b8ff71ad74ae083321244a3196ee3c8365626c335f30ffd1551d17c0a60c1ad224bdf9d8401554f42

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionOS.cls_temp
    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664E7AC301F8-0001-10F9-472A7D01408ASessionOS.json
    Filesize

    54B

    MD5

    93023624eb8dff5c20050da136aaae0a

    SHA1

    acfd1ffed752c28fb135ba83c0c6345ddf2f6995

    SHA256

    968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

    SHA512

    bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    400B

    MD5

    c949e7a2b7f4b5f0b2abc76a144777f8

    SHA1

    6a90e0c78c969075194abed49af933c888240995

    SHA256

    6007cd18fd63a71e6c5bac4b7f74d1d44d1ff02e79fb92f2e8a84f83bf5a6681

    SHA512

    2dd96cdbeafd64080c920321379f033d9b48d10cb3dab8f81d8aa8cccbe5d888df2532cba235fbbd5d477e5a67c7d962ae7a8fed9ba714861210e3a2eb00c6a4

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    1KB

    MD5

    ac4044afe1c56139cc34bf937415b917

    SHA1

    9cfa341e3fffbb66d46cd142b408e20b83113dbe

    SHA256

    4f56c44a3eba188394aa1230cc486770967e6f67da18dd7ebaea2508ad287966

    SHA512

    dbcb0b7ef8efd396b9e41092a905bfdc8e30a327ef5d2c71c6f0664b8caffc6d9d9c6557bb7469fceebc0427e2675193ba0e2620221dcbeeb0f8ba326542abb1

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.china.hunbohui/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c46e9c13-c4d0-45b3-8a07-78c8fd17b5e8_1716419275275.tap
    Filesize

    320B

    MD5

    5a70b7ca1aee1b89c35cecaa1befe3b1

    SHA1

    e7de401290def90d51f78ffc4338b645271e9af2

    SHA256

    fb74e83ebfe37c4fcba4d352b277e7f05c0f574f4f182333e30350ffe90b0c2d

    SHA512

    374ba0730ffa389f4ffb3bf18e1885410bae4a6d9aad345a9e06200245d74c3c4056acd0dad46c49a2cf3c43822e0375557de64107147055b0c48f676116b370

  • /data/data/com.china.hunbohui/files/init_c1.pid
    Filesize

    14B

    MD5

    1f886d21613c73b953f8c4b6ac802dc7

    SHA1

    9e2161912b12073d4b7fed65e3acd0af4bd1b479

    SHA256

    a19e1a473b4d673c1588b8484fc9420158e568d8a6fb738e0d77c998f3a6e786

    SHA512

    15fb0299fb047f09a98fcb579a2e433173fd01198a2c5957268bb3a50ef11e1d084ea3e4cbb0851be60f55be656e65045a15a635c2577294094587a9fed1a8a5

  • /data/data/com.china.hunbohui/files/libcuid.so
    Filesize

    512B

    MD5

    33f0dbfe6a0b6fa0109b1915d57d3ac6

    SHA1

    03a2fa125aca32007fdead858f956a2d58cac246

    SHA256

    e33b02a6c135933f9356b7f7d3443cd6486001b980f62813582e004cdd9bfa03

    SHA512

    b29c4eeca64f4063430e4d40a6df97c1a6a5d6eef183a9d0ad6583521bb56d76e11d2aa83091c3a43a81e4e6ccb8187f459c4a6111bdfbe20860a0e174f41034

  • /data/data/com.china.hunbohui/no_backup/com.google.InstanceId.properties
    Filesize

    2KB

    MD5

    9736f73f81b186c7618ba3231f9d59dd

    SHA1

    c18d698a74ae864dd2c737bb3e1c457fd1e7c5cb

    SHA256

    fd070b6a81031413bf179fa5fe0da72e6cd4b418bcd287848625d00df96b8f94

    SHA512

    18e32b310271e82fad953ab4febf856b0aa15212419710bed8bc2d7885926221de8ff7dc195349a20f2f4655a10ef66158796ab2cf614b16912dcb91f20c17e5

  • /storage/emulated/0/Android/data/com.china.hunbohui/cache/HttpCache/journal.tmp
    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /storage/emulated/0/Android/data/com.china.hunbohui/files/tbslog/tbslog.txt
    Filesize

    32KB

    MD5

    4978538a135d0f14b1eeee7b2b02c30a

    SHA1

    23b89e2f6962ddbd5279681f3386bca02102df78

    SHA256

    3065eb346978cdb96407579a02c1cf916d2c097b5f44555eb60c1c6549515fdc

    SHA512

    39dbdbeda2ef4012117ca7b2dc0879b73050976003061e9a6151516e0552bacfa1a4b16a8880e3af7cf91006c2242f973e5f5a05bac6b23e58c378ac0907aec7

  • /storage/emulated/0/Pictures/jiehun/journal.tmp
    Filesize

    38B

    MD5

    c47a3aea99b0a021448b835be32ddefa

    SHA1

    0c97672c8e51a2ba1df968519d6424c5733a2440

    SHA256

    cfcd6fe4a1827ea3ca0a92ebde12922bc8ff0125ad3ad60675df8845ee77792a

    SHA512

    0530684e158fe9b9a6894c0804d2022b0cdf009d1e39edadde912c14c3936c710f19481bd49269ca8f1669fc1d7b5ee1b7c684ca382ac3bbc88de87b5c1f14b8

  • /storage/emulated/0/backups/.SystemConfig/.cuid
    Filesize

    185KB

    MD5

    387c392d34228aab9212a6dba93c48c0

    SHA1

    0270f94b53114e7695f8757af2467f547767994d

    SHA256

    a567f1030c6ab7b761483660b46300ab524ea62486d981e4a3414653477a1427

    SHA512

    943839faf8a9a5a7729c8a7623fbd6e8ecc970ae56d908f73a3cc9038a45b81ad2f2d11831fddaef4f649a4d4b555a22bacfbb56a55fb760e7f0f3df520a083b

  • /storage/emulated/0/backups/.SystemConfig/.cuid2
    Filesize

    129B

    MD5

    f13177ff7f3a380d0c8ff7ed0861972a

    SHA1

    35f5d3f755f83d0c000ddf183c9caee98add3b53

    SHA256

    e675a309e89828a080098e781ec6bef25bee7b8240084a20005dcdb5816b912c

    SHA512

    7fe06200ce1d7f71db82b44d4454944ee462e1aadaa87c0870da363a7c292481d764ae492ac6b3b8650a9d577e71f8bc5acbd6b82ae7a98bc22f57bd18e36443

  • /storage/emulated/0/jiehun/logcrash/journal.tmp
    Filesize

    38B

    MD5

    73a8327813ec98df59541355dd3284be

    SHA1

    560fe3cd70a7ebd5fdb4c155e9136777d9f99bcd

    SHA256

    816613751141f9dbce74f22ae9ac681bc0f23b89884b32bd20c53a87201d4ea6

    SHA512

    5c6788b77900b7e17f86bda66f722038868c8ef881649d7ec471ba20979cf6cb10dade322b8685dba3699f33429bdbd07f358a0eb1686521cee2421ea4a84773

  • /storage/emulated/0/jiehun/logrx/journal.tmp
    Filesize

    15KB

    MD5

    b679f75e4ee8e93cc552c386df35935c

    SHA1

    617ed0bcea4867fe848aef987a73775fb951515c

    SHA256

    c79e0a28f2470f1206a6ab5ccf07b1abf9754676371b56419e2705d45afbfdb0

    SHA512

    f78bf4e20f1399527d968500361f523e91e8be3757ce1acf1b1919761af95abe74f5d833c3a80af51f7ea964e060f9b30a7893cf47159546fc721cbf9a6857f7