Analysis
-
max time kernel
159s -
max time network
189s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 19:16
Static task
static1
Behavioral task
behavioral1
Sample
6853ecf679c2c3a10cc5de02ef21fcaa_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6853ecf679c2c3a10cc5de02ef21fcaa_JaffaCakes118.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
light.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
light.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
light.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6853ecf679c2c3a10cc5de02ef21fcaa_JaffaCakes118.apk
-
Size
17.4MB
-
MD5
6853ecf679c2c3a10cc5de02ef21fcaa
-
SHA1
72de55509cdb21b9e6c05101b0ebea321e9769c6
-
SHA256
621fe98abc072719bdc24adb676bd03655da8488a54e1fc1ec36934a73f4a20d
-
SHA512
42b6c7c516089797744def35d3260437c4d55b2dd66a8da74aee3189883a64ed35ed8aebe8999b46509268cc2d55b271404166fbcade3cc67493cf45f696c39a
-
SSDEEP
393216:y0wQ6ThrVKR4/imPbT+vZ+XtxxcB9sxwn2sU8o+Wm/dgivNRuWR:EQ6Tm46MqAX9cB9USlovGN7
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.temperaturecoincom.temperaturecoin:watchcom.temperaturecoin:channeldescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.temperaturecoin Framework service call android.app.IActivityManager.getRunningAppProcesses com.temperaturecoin:watch Framework service call android.app.IActivityManager.getRunningAppProcesses com.temperaturecoin:channel -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.temperaturecoindescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.temperaturecoin -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.temperaturecoindescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.temperaturecoin -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
Processes:
com.temperaturecoincom.temperaturecoin:watchcom.temperaturecoin:channeldescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.temperaturecoin Framework service call android.app.IActivityManager.registerReceiver com.temperaturecoin:watch Framework service call android.app.IActivityManager.registerReceiver com.temperaturecoin:channel -
Checks if the internet connection is available 1 TTPs 3 IoCs
Processes:
com.temperaturecoincom.temperaturecoin:watchcom.temperaturecoin:channeldescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temperaturecoin Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temperaturecoin:watch Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temperaturecoin:channel -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
com.temperaturecoin:channeldescription ioc process Framework service call android.app.job.IJobScheduler.schedule com.temperaturecoin:channel -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.temperaturecoindescription ioc process Framework API call android.hardware.SensorManager.registerListener com.temperaturecoin -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes:
com.temperaturecoincom.temperaturecoin:watchcom.temperaturecoin:channeldescription ioc process Framework API call javax.crypto.Cipher.doFinal com.temperaturecoin Framework API call javax.crypto.Cipher.doFinal com.temperaturecoin:watch Framework API call javax.crypto.Cipher.doFinal com.temperaturecoin:channel
Processes
-
com.temperaturecoin1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
-
getprop ro.product.cpu.abi2⤵
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵
-
com.temperaturecoin:watch1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.temperaturecoin:channel1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.temperaturecoin/cache/cacheUtils/1884621695Filesize
1KB
MD5809ce9dbc7f828602d186c6d8a93f11f
SHA1a5631b6f1ae2031bb905631c28dae76b3307ccce
SHA2560ef11bcf4b5aabc970172e5c5168bb9f808cd23012b3ff703c50ec6d7dbe1c53
SHA512fdd9f96448a477f469d698e1f282ae1e74e3cc9e47e497550be247fcaff8b6f0ce3ec3c7d93756f82b8cc63b9278d96002bcdaef2b14256d5bd208eaaf96f13b
-
/data/data/com.temperaturecoin/databases/MessageStore.dbFilesize
4KB
MD5af9986f9d52a2c42b7c6c271eb7ba9af
SHA1ec0676f63b542fad0860b032f58b77af13b8e255
SHA256b4aa70f198cb9e280deb95d572f9175ce5d5a60dea91a974804c965d5ad46246
SHA512604668fa6ae96f29ba1e1d3a42472031c267f860aa2dabc57b768504d31da8d543243b2b5e68ed49011a5dc21835728dd110a381cae7b63b4665ef307c84eca4
-
/data/data/com.temperaturecoin/databases/MessageStore.db-journalFilesize
512B
MD58cd7ede4061de64af578cb7394982ab3
SHA1af891b006e612824861b9c6519e2605076a313e4
SHA25632e9f3c8e7041015bcb81edae89e00524a4f1babdb46f0d632c655f3cac47210
SHA51225e7038155a1fc36e57df224571811306ae1a9604961316a7871a408be4b4e4c36b82df11920b35943910842298465ae9a3fc4fca1845fc066322cba0711ee72
-
/data/data/com.temperaturecoin/databases/MessageStore.db-shmFilesize
32KB
MD53d0255dedabf120e50c668dabb4a247e
SHA16845e9c9473abfcad0829420f878eea91e93a0b5
SHA2567d1fea99df877aeea7210fd762d708dbbab3665967dae2c9d3ec1aa04d6ffb3c
SHA51212ca4a0b09142ee03efb6ed22be64a3506e0b1315e14e9ab80273b9889a84ac53f6e6c52187b581703e4082f9ca072a8983ace1d965e3a14c20a60fa490d34a8
-
/data/data/com.temperaturecoin/databases/MessageStore.db-walFilesize
100KB
MD5372aa641f1cf3011f3dd16d44105844a
SHA1026987cd90e98cfd37ec37b8d8f308d0bc88c6c5
SHA25610b1e6c969279baec7057c3c921737bf4a8868f541325adfd2d7b353579af9ce
SHA512e3e9d84f58433affc83be9a4e88469296a23de608fdfe8fb3be55c23aeabe3b4de86d93f276601b7d2c3b39fdc7d554442bc76d79677e176717ffe890878434a
-
/data/data/com.temperaturecoin/databases/MsgLogStore.dbFilesize
36KB
MD5486e2bac2b3e9e1cb411d2838a4854bd
SHA181dd0a7537f4af319b830ae834908986be85da8b
SHA2565644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57
SHA512c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681
-
/data/data/com.temperaturecoin/databases/MsgLogStore.db-journalFilesize
512B
MD51b3a822bc5b33ef92e2138114e796c28
SHA17022c637d2bc14c4005ac777570a6c36f855b8aa
SHA256963854a66ca94baa18f1d21c1059420aecdaea62f48d41eae83c0ffe33e5f804
SHA512a49d33fdf4fda171478ba6e3a20bbd7a857ceb66cf99711f5b02a6eccab4946cdd56bf693c2d532421db092e1c21d0284d44de769bec2581ad9ec8695d2fcba5
-
/data/data/com.temperaturecoin/databases/MsgLogStore.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.temperaturecoin/databases/MsgLogStore.db-walFilesize
68KB
MD5f0e779a47a6a9be86612c87796fb17a8
SHA1d6547c4ff64da9f071e2b51d0b2af2fcfcecd73d
SHA2566d8f29a9f15b69094d5291890ca33c6fc34eb499cd5c5ff7c8a1c1ecf35f9991
SHA512375592b3ae280355729ed5bbc1dad2661c0cb77e3c24f3fd90a2e013ad0a66f7ac6bc5ad19d3b8fd003659db29502b713c7d4ded3e2110510cb7ec693a15ecf8
-
/data/data/com.temperaturecoin/databases/_nohttp_cookies_db.dbFilesize
24KB
MD5692957a8f6be4a25986a068c449b83ab
SHA104223c8cbcf0032443488e3f5f9bee9f91eb5f7d
SHA2564895bff14c71a617ca75f6ce7933b28332ee06a1b2aa431ee3e108db693cdf0a
SHA5120617a88df6a60252050fc5403f6d01936bbcba961d707474d62bf97cf1e2034999befd13fac5e58d430ce43dd45dce8e2e6c8b6b125ea53dada382aebcfa3742
-
/data/data/com.temperaturecoin/databases/_nohttp_cookies_db.db-journalFilesize
512B
MD518c26e6fcb315c234839035fdb4ef91c
SHA1b2efdb2781c88f676d3b3e918c975c1946d6ba63
SHA256dd6d3ff8c8bb48b5d9d70f47054961bd113af08fa191cbadd36dbf101206ef19
SHA51230ab2053e5201988b1783afef6b7e22907c688c2473ff1799b6ef1c7a6553e22bfe34788a5d7c892471843b21c1953f8455ee518dd7cdf4d22cb9cb356d50481
-
/data/data/com.temperaturecoin/databases/_nohttp_cookies_db.db-walFilesize
36KB
MD5ad53b2cca00540315f3ee4bf666ac923
SHA1a7d5521cde6a07ff7b9d403fb83d21a1a5dbf10d
SHA256b0034caa5808bc04576584db381e07e7d24bd8e096614dbea4913748f83c745f
SHA51201b7592b82241a0ac73fbeea4d197cbafccfd45250653027efc181d0a95ccc598db62078f6fe9f0e2c0e871b121481fa1887713d28d60a224cd64d72377a8fbc
-
/data/data/com.temperaturecoin/databases/accs.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.temperaturecoin/databases/accs.db-journalFilesize
512B
MD55545138c9dba5966434ca1bed5f1e716
SHA15eb9e2cc1bc774a13581be5b251dfa86058ce0e6
SHA256bb0dd9c11d04e0693ebec9f1dbd693b60b674feb9c1e2dce0be039952c203424
SHA512b74bfd03b5d54498a517a496e3c9ded2cbeb987d704a916cafe1713df22600bd4d93395baeaf439a5456750df8d8c576c572c9a6f6c370c7a113ddddcaa65c11
-
/data/data/com.temperaturecoin/databases/accs.db-walFilesize
32KB
MD54e54b9ab9bf19c3f417762073c491d14
SHA14c6374d79c4d67ab6584c849a123fbb5490749c9
SHA2566246a29069a2a827c62f315705edcdba8df889a0854d4fb8e8697e88bd2e512d
SHA5125c53c39407a31a7fddcfa5cc9a5c62ae183c9ed0ca871d493c93ad8051036dda5315b7a5ffb392e13b76f15c866b2c5d0dfc2204c103e24202bcca190cc1aeb8
-
/data/data/com.temperaturecoin/databases/ua.dbFilesize
36KB
MD50adda9c85a5e4808f5b1b74c0a8591a5
SHA15048107883ab1e345af9cf2e6849ce46e0e612bf
SHA2561e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1
SHA512646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1
-
/data/data/com.temperaturecoin/databases/ua.dbFilesize
24KB
MD518f3db01e5a9809c9b186725a21c60c9
SHA1c9364e678ca219b621bc085aa78c342b3cd2d797
SHA2566fa0ec003fe7481b021fa8a6d1d101ca8e76bba643bbada94f5c021c7c98a58a
SHA512beedffc0d08514993a1761686786ec60d9abb9fadc02a043e0b4ebec03b92d9421da9685e80e31b20d1579496746e224ae74ca52544bb006aa28cd127c976aa3
-
/data/data/com.temperaturecoin/databases/ua.db-journalFilesize
512B
MD59056e1bca835be1bc3345bf57b2b6427
SHA1a4419707e8e9e3673461c02b4cce9a7d144bc010
SHA2568a95b23aad6a9ac1c9c3719097306fc58f0bc1b75ed15a000bb0a0d3d226d8b1
SHA51243e5bd7ba8b2137516d2b37a5e5894097877af954ee23179a68e6ab1a92da2ea256755aaf3c2084bc9ac672d92a42b5c98f69dfcf7168a6c85b32f3064c91b72
-
/data/data/com.temperaturecoin/databases/ua.db-walFilesize
48KB
MD557eb7d6437569f016633740db98e65ea
SHA1a4cf154b0a484e59bf9855ebe162d6df76494f5d
SHA25680b2c0deb2f3f4e26ec9cf0ea75a90ba501440de0d31ff99dc43a8ccf391693a
SHA51234b62612b14decbda739e200838da0cffd1107d4eb1f503e700e6e83b80e3baf0d6edaf36520a708a49eb78b47fa7e809c814658d93313393f4d63dd76ac83fa
-
/data/data/com.temperaturecoin/databases/ua.db-walFilesize
12KB
MD5317156ec3dbd71c9e0591be759bfc84a
SHA133760bcf722ecc3ede603a9dabcbfa8a3981074b
SHA256b788eb5a08f1595770e8583dcb0316cc5a171a1d520807773d50be6b71d29840
SHA51267ca5ff9592c09c99a78815b4d7502ce346e5702c70a7aa43a272554a7740d3cbaff9d85bbdf80442e53889f4bfcb14e15c55e3fae5cc93361fbd41d2167efed
-
/data/data/com.temperaturecoin/files/.envelope/a==7.5.0&&1.1.2_1716405432748_envelope.logFilesize
1KB
MD58973056a1cfce9120271e7f23ba5c531
SHA15e0f0dc339b1a4e5dec8919b4d9b76b4a2385156
SHA2560b1382b22b6a3c7272d1e60b1e1dcdd6b583ff74fdfd9762773a7bcf7d15163d
SHA5124f6ce7dea13ad577925acc42c9779ca513d87c8031608c75ef91f1a33e1e146b9443ee3ae49a1c5d7d369f11d5f6ba888223bf0b979b740d8a5ee8ddaf07f2a8
-
/data/data/com.temperaturecoin/files/.envelope/i==1.2.0&&1.1.2_1716405430300_envelope.logFilesize
2KB
MD541ed42642631fc8d5f4b8adb1b97eeb9
SHA1083fe43aaeff4135558c1bc5c0eaea0b8dcf8219
SHA2561817ae0f31983c41b5939722cb601ac14a817250bfbdaabf95913bf17d483a99
SHA512930e2c5ef08567129457d5b396fced8fd7b4f7f1fe72f1098226f2884e8b4311bdd17a381d1fd68c200d724c9963a1b6f2db943743a633562a661f904fda7271
-
/data/data/com.temperaturecoin/files/.umeng/exchangeIdentity.jsonFilesize
162B
MD548626412b000af47841fe9b2298ea9f6
SHA1f0fa945ae9f2ccd53c6063874583c648bd87a175
SHA2566d1dccc3086ceaa9d5c29929bafb52336702df40001fa45ff5c088fcd9f3688a
SHA5123b25882f9d3385fc430029cedd11c48c98f88cf332f8aff86090fdf3cf6268e0b45dc5fbc2cb1ec6c4e23f9e3a3b3970c90e336241dd09d554fd2c767f794b55
-
/data/data/com.temperaturecoin/files/exid.datFilesize
56B
MD5cf1f668015fa3c0f518c89bbac930e9a
SHA10695e643bc20ae0c706bafd0ed179b0ce8556924
SHA25695508deea4b21e534c83efef97ece74dbe9669b6be5893a4353fdc1d5691d7e2
SHA512df12fccec861eda1d35565eabc89278dff0694648a9328c3572dec43d6459fc0b0a336914f1afff6cdae2697a791b8d65d5eadff7299f619ff8c87bfeca13595
-
/data/data/com.temperaturecoin/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDA1NDI4MzU3Filesize
1KB
MD591c4682893412832d408559ddce60f47
SHA1ad2b8a73bb7ca8cc7dc15ac133c9311aeb7f0db2
SHA2565cb8b33f07d6cb6f2e0dd0807a5342d12dbe81034579f73ccb5a46a5a0880fb1
SHA5123aaebc5650ac2724734dc3f0ea92b01a61abcca66e727acf52452713020f3f05cbb107dd9a1ffbf14ae5f2afb713c24391e1efaac0f4abccb2cb5d9f2bb5bb41
-
/data/data/com.temperaturecoin/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2NDA1NDU4NzYxFilesize
1KB
MD599a58248361d1657fa56d13637968668
SHA1b8014bd7b5582ade33d3b0d4fcc86c638db8784d
SHA256350ebbf480bd7b8c3ea150f191a1da3ffc3966724cb014c1dd30fcf242a6bea2
SHA512aa5e57bbc8af3089c60a0400a7a8c1a6bf8a18962f72d45559230e5c1cf43a5c632f87f29602ea849055d1a141fccc147baecd3354cadb534b4596a3bd511c54
-
/data/data/com.temperaturecoin/files/umeng_it.cacheFilesize
498B
MD5f5dadefcf14eb5f5fe7318f9bcefc36e
SHA1d6cc21a2d0761d072a99dde3cc6106f604551234
SHA256ff011c0df938dc5218ac3e4a35ea80c1a3f247f5d6d4f76a5711fa317ed23d5f
SHA512179c2bddb63c0e9e697f25fa703aa3c346c9c2829f2295e36381a2eb6836ba87c93189065e1f31494b1b613bd15758131c5ee1a60a889d6abb7178d01318d719
-
/storage/emulated/0/.DataStorage/ContextData.xmlFilesize
111B
MD58580d2da461efef40346721236b1e0eb
SHA14886c342cbce48e53b045e001b3038b405f08879
SHA2562d2c1d5c9ae470edaa2e684229c33164b4b9a7c062bcfec00ab761ace92fc06e
SHA51291ca0c6a89c624584f312820f4846db78f2af7828abc3237a1548a7694ff02fc07b348a36f161c5b9f077128031103c3bfad462367e5bb73b557194376b36d29
-
/storage/emulated/0/.DataStorage/ContextData.xmlFilesize
213B
MD5819476d4fb136d2ba64726ccc46bb0e0
SHA172eec217488bdc260a2128fc2f484ab625401178
SHA2561442a1c65657af329e90199a3f817d52f8e694157ecc91546be9cbc791505447
SHA51286b5c53788a8384837bee239312520291c414ed1430fc00e861d5d19f04cf8a681806208a574bf7aa5ae2a9854eaa974dc79d8b1b77cbe6895b04acdf6a420f7
-
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xmlFilesize
111B
MD5d5ab5d1940325ce73d1403f272d21baf
SHA12f3a17d6c7eb3a1948c64dead87cf20051f6f2aa
SHA256fb24a3f9ed7fe0342598587cd58a6eff86668a9e8ee7053bb2a33bece07edc35
SHA512f0f1dbace828dbad6b59d97277640de4586b558ff46c99b1aafe2b2608846264bad2191b5e6df731236b2d569e0a0d1085ccc01dc32f96fc7b1ee2a10a012ea4
-
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xmlFilesize
167B
MD5a884495f5dbe9360ca6d39ff474e4ac3
SHA11674f4eb5974849d415901fe2fe5c91de4cf45f2
SHA256c30a44b527c013c4ec191f8af3ffe0a075ca33f9396a61c7b922581064c61c7b
SHA5125adf5d069d642ed23eb24b57eed7a22ae09c38909610f4d6204b9f53bfaf0d427bc6c69424e62f5ec98dfd7660e5b9aecb16395789e89f6495b3f23b4a3aef89
-
/storage/emulated/0/Android/data/com.temperaturecoin/files/tbslog/tbslog.txtFilesize
32KB
MD5b74705658f1b3de3082c323b66d69956
SHA18b5170dbb748dfb3dfa36dec5b364667454f0ce0
SHA2561fbd98ffe8a82bf2093c9cab3ab0a763583f7f2044a7bbd4f5e5f2773f96f393
SHA512a75999454888e097d64d4755b73275c6bb8f7864a0dd75ecf7a0904bdeeccf1fd22f6aae3c48311819b39fff6f6026aae53d953af9cd6c90885ca963cb2e9b0c
-
/storage/emulated/0/Android/system_device_idFilesize
36B
MD5590d513f706febc5d5ca48cbcaaa4430
SHA1585add60b3872be1be3f05e9ce04eaf61d73aa45
SHA25603194a0dd7cfe504b33986869f00021a55d77cf33e7daf7b6ce148f9ce1c4bf8
SHA51222eaa4be8803e98b1b0ae873dcafdfe9cd9c125f7aa257464f4eb7506a31f465e54bcfc25323384dc3a79d32df2b5eab428f4afd8108f081c3e91479aafd3bc8
-
/storage/emulated/0/DCIM/system_device_idFilesize
48KB
MD578cda1b7c4734801381d7601c8c4eaee
SHA1302e61a2dced81c754e6e1533ac764bcda31cf6b
SHA2562d2a40c2570ca895ff6f941e219b34d2bb17dad7648d6c7a14bf358acd392076
SHA512ff9d9c9fab2cae645f5dc096d8d3f401f4880d3764a69302189dd5fa7b57d24f4ae0b21ae81bf034ea740b79351b0ab1570245ad08c853df0dfbd9df38cf0f31