Analysis

  • max time kernel
    179s
  • max time network
    164s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 18:36

General

  • Target

    683947c3dce978c0d2ddbfcaad9733f2_JaffaCakes118.apk

  • Size

    16.4MB

  • MD5

    683947c3dce978c0d2ddbfcaad9733f2

  • SHA1

    37bcc89630d9cf257e3fe8a3d7ae1ef6e1c3a4d1

  • SHA256

    5c2e5c3e6a4184ade5b8584b922e4a5eb09ce6b7b49643d2db4c4c08b92ab65c

  • SHA512

    47b12935379f922fcd2fc916bd71289b4cd782d58a5ce90ff139e3b45548d76651808719039abddd5bef1cf07ececa66ce3b959aec3aba1a75cb321257975b2c

  • SSDEEP

    393216:iEyenlRUFRidqxjqrMb8dkDhIo1sj1F6SR9o:RTQRmqxT8y7kLo

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

Processes

  • com.ophone.reader.ui
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4279
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:4445
      • cat /sys/class/net/wlan0/address
        2⤵
          PID:4675
      • com.ophone.reader.ui:AgentService
        1⤵
        • Queries information about running processes on the device
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Checks if the internet connection is available
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4313
      • com.ophone.reader.ui:pushservice
        1⤵
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Acquires the wake lock
        • Checks if the internet connection is available
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4779

      Network

      MITRE ATT&CK Mobile v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.ophone.reader.ui/ActiveAppInfo/actives/d5131aaf-884b-4397-9f09-3c281e3f5e15
        Filesize

        174B

        MD5

        51d56358b92db49589865b0cf6eb0e9a

        SHA1

        a4e42658e4ece80f3923554825e6365283754aeb

        SHA256

        a634781e7cf01ef6d46bd022a0dbd4aad39144eb7fd4c819343163de19d7690b

        SHA512

        7710f955624f78cba1a5b45521fee7bfea8192652da27473c78228e23afec620d709545cf768dd7bc2c4a283ce336214c4344203ce44c796b8472f481d6cf46e

      • /data/data/com.ophone.reader.ui/cache/response/resolution
        Filesize

        32KB

        MD5

        6d53b5d148483184c2312d056a48e0b0

        SHA1

        a90da1ca1e655dab1e97c8ed186cc0e7e812fb5a

        SHA256

        e01bcd44a4f43db2a8f6bb6d1d45438b246442500418f186904c7073761732e2

        SHA512

        f0128b0b2d269158e3e7552c7fc30b9cbb1771471b7a8c33277161d71c3bcefb233cbd15d1e28ed49131cc4ba46171a5ed896372d51b2bcc0925359a975836dc

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        32KB

        MD5

        8c4576626f38bbf73550cf249392ff11

        SHA1

        8e6bfe4f705e4f45d92b51e4288f04b6ee2c8a53

        SHA256

        55ad97bc69bc1d75069afe0b2a3e0f06df799c5c644d57343fb1641daffeb073

        SHA512

        231119c9cafabb4e844d0181fb526d83a119542bd3149d6edcf4deed9c9483a74c5f21bee0aef0cda8352e76ebd3fcf83c2900065501b82a907a063580eee548

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        16KB

        MD5

        20129a05220368280c9bf375b74fab38

        SHA1

        ca6cb61df439c1e00cb6a3fd0cd304cf3ed8dbb4

        SHA256

        41b96f0421784c04c2554f8acdc273542bd23ef0b2347790c42f5d11c13805e0

        SHA512

        e48152b149052d7fd69ec38989d24798c1f2d860f34d0d637974524924605e67d1191e435ac93b7968b625aaab812072258a1dc167fa71dc8ec8ab104a9b2f20

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        16KB

        MD5

        d6759d9aef7ea06759301706b8c3b8b9

        SHA1

        a68e2675dd67462d5ae3ec97d21614bc60f6f55b

        SHA256

        11b1ca7e67636c1289838e994b660b632e4a2638d5bf571339e1ddcc118b2161

        SHA512

        79363c26c3feaaec276edaa1ca571a459960c6b34c6c87e2502de03d52230a6a51dc7b84a21f1fe347e7314ef03d9be7ca1abd85acda239f4ec2ccb6527e216b

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        32KB

        MD5

        d604a3bf1f8d992cc320ea5b1f7609bd

        SHA1

        247f88df0b55c7d523ea5398637711a0e4a483a4

        SHA256

        329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

        SHA512

        67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        16KB

        MD5

        465e972bc9990541e72d62e01c93b78e

        SHA1

        4fc9b6355b021a12558e79b37dfebb8f22ed1f4d

        SHA256

        5db52db877cd6c8403a0fef6c23787506add24026fafa9da5704d6ef0d106b0a

        SHA512

        d983340c151593856acd604b070641ae86ec08e5fa1285c3ef97ea4c948f3bce29e6a1d7c98eba8a759a80e51dede850ff2cc4a76e4ef2c9499875903f7597fa

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db
        Filesize

        16KB

        MD5

        248dd9f4aaf9d055d4fddf980243601e

        SHA1

        cd47eeae688222ae36e139817eea2e1f641d7def

        SHA256

        0c5d2b8d3f02b91479c7a0ea49328eb82b3c228bbc366d35bec12f75d7f677fe

        SHA512

        407c2d1096853091755a4ae603ff45ebdcc7f639b0f3c23bce21afc7d276d0b28242aa13d0bcc94ed7469869848877380e93c897ed45eb20a7db2142f69f8c6d

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-journal
        Filesize

        512B

        MD5

        24b7699190b79779b97d88cab846776a

        SHA1

        d91d8f3c023ae9d5c13987e4595a23869b0a7c4b

        SHA256

        6da06883ae494119e004698648d49a83c413b6c08e81cce307b92b71ebc02328

        SHA512

        ef61fae950a1ec64ebe4b183a38265933ef367694b6655a085a4342c1b7fc18bb02fb39d3867744247c350b6efab4bb4bff6060436dc4469f730575ff566c762

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        56KB

        MD5

        fb3c1cefed962380136ac119df2ff28b

        SHA1

        a07f2f9b0e90f0b0f0595b21a8db0e0d817aa2dc

        SHA256

        a6ae67cb1c11cf90bed4fa4028baf52488f36b01493ce8cab622e63cbbcc023e

        SHA512

        6d4a65e766e0987c6ad20ba0f4a108254a5d6885742d0b23976245b537f5494aa464100be9dfe22654e9fbdf1c634367c420857ddf776deec3a382f78a88d762

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        4KB

        MD5

        6768c368e2fe2f3235f67c77c6952dfd

        SHA1

        64d6260d3b51b9aa5122a50d4b477ac94ca5fc99

        SHA256

        b358321e3c0b1184608ba0a9a056078115eea2b7bd796f11cfe94680a79e57d6

        SHA512

        b02bde4673b9dd1d8c8ac72f3a9f08a66c3c9375ab2a80e24c4fd72ff1ba9aa7ed2947bfcca50403b013e32516c2b9b6b794acaa2be3d758a33b0e77c394a904

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        4KB

        MD5

        1be0a4257f558eb700a59675b6ba9b00

        SHA1

        28cc5bc9e9cc4e68d593fd74ce7924ae55981c6f

        SHA256

        88f36dcfb1737478a626ad8741c28578cd82a700a55add5ba6d378421cc1a3b9

        SHA512

        9982a0a3bbb75c5c485a9cf7ea84af36512158f828cd1edadf8210d32d52e118b253e0ebf729cc0c78a9434d2e86b33965e884ee55e7199874863b04c85020d0

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        8KB

        MD5

        589960de265d5fd6317207d4086f79e6

        SHA1

        37a4a4702e01df31026b913b979a08595ebd2805

        SHA256

        6c08af98546774bdb428c6f1c83346253b1991ffe34aab85c5bb1b0de9b152ed

        SHA512

        df36e58222fa2ab4de91304341b04000fbc6d7965e537bfdebb31734178bd1a94c6e86537aa5c1bccb217403c7451e3782c1a38b5a2d400c00749b9174a06c7a

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        4KB

        MD5

        b210e4a655a946033577984d2e10044f

        SHA1

        f5bf1f2e2f1e763af782ad51345b7ab6ec2d643c

        SHA256

        fc12e7aa106998ac178003e58f90e9a3e76093bc4e2f68a7a56dc2f89b715a63

        SHA512

        38e3f1a069e1d2e1da4ffe28e3eac05a23acdc22226292bb19b1ac82f86f0f1f3398b89eed2ebf77aedaf19447bc6210db5e6fe9d55e25c8b6e9d3a4541698e3

      • /data/data/com.ophone.reader.ui/databases/.ua/ua.db-wal
        Filesize

        4KB

        MD5

        7ed6ae73f5925125a0c733bc3489d6c6

        SHA1

        bb1afef3c0e5d9ba06ebfe9833df425224c2164c

        SHA256

        91b41c8f623deb830377691543b8cb78ea47337ab365210cabb9a9cb3d54716a

        SHA512

        6b22f4667d0bde5da542869c96406aae5ab917ad801b7f4798d29ad6766a66aba7f1f5c6fbd9a1f804dfd312f0ca9d4da72e975f23480e86d18fc05439646cf7

      • /data/data/com.ophone.reader.ui/databases/cc/cc.db
        Filesize

        36KB

        MD5

        5d7ea1a23af19b4340cc8d90f28297d5

        SHA1

        4cfe95b23a9e98378d69c4290af81b51fbe76aea

        SHA256

        474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

        SHA512

        33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

      • /data/data/com.ophone.reader.ui/databases/cc/cc.db
        Filesize

        36KB

        MD5

        ce6135aa1b1fe4f2c2db2a546d2a5558

        SHA1

        79b59582154017aadab783dc266fcb158c252940

        SHA256

        7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

        SHA512

        2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

      • /data/data/com.ophone.reader.ui/databases/cc/cc.db-journal
        Filesize

        512B

        MD5

        9a789728e90a845ed395a8d0759f680e

        SHA1

        454443167d16c5c8dfbf526b087c8c61e7c243f9

        SHA256

        08fbfdbdb511dcc474eb0fa1d4e4631ca43065754065626a7dc350e30dc2cdb4

        SHA512

        fd611d2c95708b9bdf28842ba3ae0a140c25ffc4a5c7c11b30bd51746c1e91b4163477ede6e4b3cfcc9a506bb75f30f15358b3d500039b69c65885644f9c6bb8

      • /data/data/com.ophone.reader.ui/databases/cc/cc.db-wal
        Filesize

        48KB

        MD5

        f39551aedb7bb86b740bae480a8408cf

        SHA1

        ab7a400b84d194c177a573db2880ed7a99a4e2ce

        SHA256

        d5ddf5f615df139a9ac42a8f3ecb0f1787fdbf1d418b8113327b983e40f58f95

        SHA512

        f6dd2e4e8d35b5cd0a27f1016d756104f2a6781255c4f23cfa06e5866bccde8e8d4a5e04f8c16c3b5f8e2d0c86bef012a4ed0cddd9c7b727f6b95f581db9a0ea

      • /data/data/com.ophone.reader.ui/databases/cc/cc.db-wal
        Filesize

        16KB

        MD5

        f19905d64e76271c7a6192610232de67

        SHA1

        422e0dff4b18bd43fc5e2a88888098b16336baac

        SHA256

        e035e4696ba839166d792c074ec8910c97bf4879586ea6c3d725b7dd3142de65

        SHA512

        8b938ec9e673bc659358c4cc05446b18de1d24669594ef123c2e5d8303786ba4025b8df5685f864f716d5e8d59424a63155128fe1d58781cbecc6f983fe38f0d

      • /data/data/com.ophone.reader.ui/databases/mine.db-journal
        Filesize

        512B

        MD5

        f947802c6115b53c29ce7979533ae065

        SHA1

        0f5ef826a2280a9ce830acaf91e03e19c3aa9f87

        SHA256

        2e453200df969188f7cf8210ccbc00dc5a02d7adea71600ce4d984b08e280059

        SHA512

        9410e07fca13455f85533d713679e58325f3b680e4dca5482f4d07b69f4bb6a816c268dca005a377627d41c835b02c14561998af0a578a0d0e1f232b3596c7c6

      • /data/data/com.ophone.reader.ui/databases/mine.db-wal
        Filesize

        44KB

        MD5

        012d0762aaabea87aee45a4f92def906

        SHA1

        670a456dd94d8c324237f51e893c17df65b788db

        SHA256

        7dac5311d40e7f3d8636776ba4f4542e83e3cdefd5852720a5a763baa1eec139

        SHA512

        e4a57066329606caa04e54ee207422b79643c806a6da0ee7d6badb84d2bc6b27cb73ccde9395273435a725c299664d3e8dfa6084bfc94bf5b072071405c84329

      • /data/data/com.ophone.reader.ui/databases/pushext.db-journal
        Filesize

        512B

        MD5

        37a8ed0c0f2c559a8df2d35212f79269

        SHA1

        68da8ca98211fc221a8f823c3ddd3430120dd82c

        SHA256

        e3b131385453caefce832471acc3aa15f110b32c8596f24550c50e88286734d0

        SHA512

        a306ca89df82330b54c34c0ce435e7590f8e0c1fb9ed0636130f702a1c21625b976a53ea944a0fe593fb71382ef59f96d1a7824f9613d6c7b64cd0a2346097d5

      • /data/data/com.ophone.reader.ui/databases/reader.db
        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/com.ophone.reader.ui/databases/reader.db-journal
        Filesize

        512B

        MD5

        325502a3ea4903f9ab00dfa5df1e230d

        SHA1

        c4874a8799234b6f2c50ba637b24cb43d4a8d5e0

        SHA256

        4715c1f79511f323bacccf5ec767d57386b0589f42a0c10863c538d8b3360b6a

        SHA512

        8d6e09d4702edb67fa1c55fc4c1fead2720d0ab7224bbd4374e095ef285ff288627991d42fef87f92551bdff312cc80ef66483784da7b7ef2196f625a3ba180a

      • /data/data/com.ophone.reader.ui/databases/reader.db-shm
        Filesize

        32KB

        MD5

        bb7df04e1b0a2570657527a7e108ae23

        SHA1

        5188431849b4613152fd7bdba6a3ff0a4fd6424b

        SHA256

        c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

        SHA512

        768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

      • /data/data/com.ophone.reader.ui/databases/reader.db-wal
        Filesize

        148KB

        MD5

        36cca527c625891bccde42cdbe37813e

        SHA1

        c6bd9136087c3582a6962c212f7e7efb1cfd064d

        SHA256

        a787e804d892a47d052af83a51aca795318088139f2730dd452d60aa76c098d0

        SHA512

        9d99ed3abc45b13630de17b0501d72269403f63ff4d7457609509f190b1c176a1d91aafe9a96bc65847f7ef918aa8d4d598dd9e83019c1280a1f2d142c548b8b

      • /data/data/com.ophone.reader.ui/databases/tmpd8.db-journal
        Filesize

        512B

        MD5

        42ae1051e7c4717d73f295ca706f1c35

        SHA1

        28565fac937a4d2e7bb99bab53a88eb378dbfd97

        SHA256

        619715556fe136cf6b7ecf50c019f44d05309737c1a98608c1a2a19a11b881bc

        SHA512

        c6f4bd40b4bd518ab9bb0cc8b39275c657ec6ea7ffa7cc849ae03ae68cffce6d7a8273adf3e2313605e653d40e99ea7f728f62ba81c3493d9d93b9596f2c30b0

      • /data/data/com.ophone.reader.ui/databases/uemdata.db-wal
        Filesize

        64KB

        MD5

        078d57f4593e228b359b590a86c591b4

        SHA1

        0f58def5dd9769a60f5bf5f53fd9e93ec4f94ae5

        SHA256

        f5bb810cf01981b081de734a31861c6955ec1c986162fec2827fb6c9fc4dab23

        SHA512

        ff1198345d36cb48169ad76f5c14ac10c677c105c2bf8ba9b736932f931eecdb593cb2ba1d177cb579a4ae36e2f27f804770d365a7d6a80e5c4e176168351e33

      • /data/data/com.ophone.reader.ui/files/.um/um_cache_1716403160011.env
        Filesize

        1KB

        MD5

        d5ecf7eb76435f584de3539f89bc1358

        SHA1

        8118d1f4faa309b79dd7ea2b2e3ca05e36b34459

        SHA256

        5bad7f3ad59290490a1374124b27d4b028629be59a7433f952ed022f73503288

        SHA512

        42d9cb137f6dedb8b789718e86e5c6a6489ff50b9c94225bdd6ef9f487b7dca4a31b85e3613d09ffec3692a08fabe49080566d0d16b0c937b850096b588f632f

      • /data/data/com.ophone.reader.ui/files/.umeng/exchangeIdentity.json
        Filesize

        162B

        MD5

        d1da61907f45b6b6b6e0f4bb6313ab36

        SHA1

        71ba3075869b8fd71d3a2f943a3cac7a37661243

        SHA256

        45b324399e7f906a96abf9b85f1503d70fc9ce925519c564c5800b5edf09dbd7

        SHA512

        1a2045dd6b773c240488e0ae44a276b3c85148d3cb1483c434a88b4bdad42edd58b494effa0386eba5eaa37881cb5b1d0140c47e4ac4b94dd061e2abb5d20ad5

      • /data/data/com.ophone.reader.ui/files/exid.dat
        Filesize

        58B

        MD5

        16445d95f38c3b155523039013ad6b97

        SHA1

        5f7469be579c3dd6240693ffb8ffb1c82e5189b9

        SHA256

        1bcfd813aaef7b87974c295cbb8c4e9f99d030672394f4b6571589f972813217

        SHA512

        e4eef96e7ab9ab47a055bed7f1507481717d1b80df5ca465028b174aeb447d87c6be1b1ea300e4ace411ae644617545ecf7fa4bae9bf91f81064235870152260

      • /data/data/com.ophone.reader.ui/files/umeng_it.cache
        Filesize

        498B

        MD5

        851b0270055484a5a53388d5d3f05129

        SHA1

        038b028ae85a09980b884197406c9276f8c77bb1

        SHA256

        67475bd1e891a9ad8be1ae6974be622c5b7818f8e0bac6934e6e705df50a665d

        SHA512

        c1628e8e2b21bfc858f64d230b30283df1ae542258c57bd5b1c042d76038eef7e71c73a03f19abe800cea074a7fb44dc0a80f8ab1de02ae269f2c5daf6e7569c

      • /data/data/com.ophone.reader.ui/pinyin/pinyin.dat
        Filesize

        122KB

        MD5

        7b83031e78750fb8a223e4bfc86407bf

        SHA1

        c25bcc3d36cae1b2c678b4406e89274d9020c6dc

        SHA256

        331de5bb5982944c9d0b24dc62592165b2bd7c08cbcc8d3e275d8da2af49eb5f

        SHA512

        bbeaf4bdbf7c5376980f47930900d22e83913e7545d10eba3acbe0a293451a72d4b25d7b1139cae3321add4871b6686ce5172459996fd211bfd42f7905e5994b

      • /storage/emulated/0/-336080995/uuid
        Filesize

        40KB

        MD5

        40fda7fb66049355ef6f3b7d5763aacf

        SHA1

        cc600699836d0bc23ca4eb6606ff0a21f7b906f7

        SHA256

        d0d98e27bcff39ad28cea74893aca8143ae8055e89b70caa04acebc19de96c17

        SHA512

        af75af16651f746984912b5e6b82432b04524c672e1145051d8d62a7797982b38f1c0c8201ed045b729a6807628c324946839e7d417e489cac635c5b3877b41d

      • /storage/emulated/0/.DataStorage/ContextData.xml
        Filesize

        111B

        MD5

        a0e65624ae0f9b47f1e3d0311d97058a

        SHA1

        c7c8d331323b4f0de79b4f46661f427e13f0200f

        SHA256

        dc1fc99c275e5689fb93a6e6ccd4c91464d2c2a7a3131e6a99471020bbf0173c

        SHA512

        7019581cf07476bd767c767b01bf3827378203fe62b8df6cc5872eea6e3ef5db0d69cee045785288adf30635ea2f98d979666c4cceecd75c9441420d20e62797

      • /storage/emulated/0/.DataStorage/ContextData.xml
        Filesize

        213B

        MD5

        0937697d7a4736edf2c9d499230d84a3

        SHA1

        fd7cfd5e7a98e515fd4265cda0eb42a8f095c80d

        SHA256

        2348a9033b58916a82de0c15ed9addedb3eee30470184c20065da9cb57dd1603

        SHA512

        768d321f5c16d0b9592f4bf390d3d867276ce6b5b66a6e612a0dbb0efea123cc9ae95034ea1bcd9b1f7040ff103273887fc191dc1dd88ed2a9625cd443bea356

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        Filesize

        111B

        MD5

        a8b38ca6b6b1c8cc85e426a9db321366

        SHA1

        5dd2592a01500b240f45387ffb7b4be8621e2dc8

        SHA256

        c31d4fe4f8eaae47e5d18979ab89736ddd15786f2fc98a020eec77d1bf3631fa

        SHA512

        6d2058d1abff0647de02c9a1c124fc30517383548abd0c8b77c11330e1ba8e167f35281e03e2cdb49847bb1441b781d5885ad302410a279de854ffbc9da834a6

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
        Filesize

        167B

        MD5

        5978b7a1925018b1adee96d16d09262a

        SHA1

        241afd75db4a6c208f0d20ba938ac3c5b86c76e6

        SHA256

        12eb6ba155e74bc9ddfabff92e50191fd4c50c2658fc01d945eef46fb33554f5

        SHA512

        afb39246ca02c5587c63e33566973621cf1d0b649f32c1cea0dd1c815cb34beb365c93a38d00121abdda24b3b501abab2482801dad9390bcff736be9d5d6225a

      • /storage/emulated/0/ebf7cf9d00000014/log/1716403035262.log
        Filesize

        614B

        MD5

        751f084e9b9d4a823b9cd78cc9fbbc69

        SHA1

        876a42a1c04525822e6902f26b9d8c0173feb87d

        SHA256

        a1a608cc825313ac630bb3b46d6462d54b4ac9adcec41aa344e7d01e00ded784

        SHA512

        acace4d9218ff5105db9281122b3ce7adc7fc21b0409eaa64f9944ed08b728bd73992af7606cabe4418179c406b5843e7b129d8743a544fd5dc2d6ad192776bc

      • /storage/emulated/0/ebf7cf9d00000014/log/1716403035262.log
        Filesize

        614B

        MD5

        02d8b7d49a69619376932914bd0eb20e

        SHA1

        8ba4272bac6e1077032ce5c0bdc7711719b9d1e1

        SHA256

        00ac06384033b3fa2162db732f5beaac312dc9ed2de43c1c81ac91246635f71a

        SHA512

        26055689ace12a922100fbb6134fd38c83b79f64b6260551f3b130ddbbee67c6fa9740e018f91e59fa76e9adb8c7d9b516a6a55e630d0ecc18d7071dd01f96c4