Analysis
-
max time kernel
177s -
max time network
189s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
23-05-2024 08:31
Static task
static1
Behavioral task
behavioral1
Sample
6a592437092dd4f89a94e334c0221c35_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6a592437092dd4f89a94e334c0221c35_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
6a592437092dd4f89a94e334c0221c35_JaffaCakes118.apk
-
Size
9.3MB
-
MD5
6a592437092dd4f89a94e334c0221c35
-
SHA1
900cb99618aa32d629d1daf045307490e58f1aac
-
SHA256
db56d6a70a6be2b40372a9f26e80bb068147333d5707f5a7998376336e6928d7
-
SHA512
3f0eeaa4e24a7db82f38ebce38136ac14ae91a3f9b3b37be76dfc0c992c7ff3c0897d4bb9295d921dfc9e73978803b637b53c7c6153a01af028b2aff30eb71dc
-
SSDEEP
196608:OW3LkXd6vX9pGx//JCsJWdyJ/JldbQGTGEkaEFp8:OsLkt6//GxDWMflyGaEkaE4
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
Processes:
cn.creditease.android.cloudrefund:remoteioc process /sbin/su cn.creditease.android.cloudrefund:remote -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks known Qemu files. 1 TTPs 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
Processes:
cn.creditease.android.cloudrefund:remoteioc process /sys/qemu_trace cn.creditease.android.cloudrefund:remote /system/bin/qemu-props cn.creditease.android.cloudrefund:remote /system/lib/libc_malloc_debug_qemu.so cn.creditease.android.cloudrefund:remote -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
cn.creditease.android.cloudrefund:remoteioc process /dev/socket/qemud cn.creditease.android.cloudrefund:remote /dev/qemu_pipe cn.creditease.android.cloudrefund:remote -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
cn.creditease.android.cloudrefundcn.creditease.android.cloudrefund:pushcorecn.creditease.android.cloudrefund:remotedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses cn.creditease.android.cloudrefund Framework service call android.app.IActivityManager.getRunningAppProcesses cn.creditease.android.cloudrefund:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses cn.creditease.android.cloudrefund:remote -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
cn.creditease.android.cloudrefunddescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.creditease.android.cloudrefund -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
cn.creditease.android.cloudrefundcn.creditease.android.cloudrefund:remotedescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults cn.creditease.android.cloudrefund Framework service call android.net.wifi.IWifiManager.getScanResults cn.creditease.android.cloudrefund:remote -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
Processes:
cn.creditease.android.cloudrefundcn.creditease.android.cloudrefund:pushcorecn.creditease.android.cloudrefund:remotedescription ioc process Framework service call android.app.IActivityManager.registerReceiver cn.creditease.android.cloudrefund Framework service call android.app.IActivityManager.registerReceiver cn.creditease.android.cloudrefund:pushcore Framework service call android.app.IActivityManager.registerReceiver cn.creditease.android.cloudrefund:remote -
Checks if the internet connection is available 1 TTPs 3 IoCs
Processes:
cn.creditease.android.cloudrefund:pushcorecn.creditease.android.cloudrefundcn.creditease.android.cloudrefund:remotedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.creditease.android.cloudrefund:pushcore Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.creditease.android.cloudrefund Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.creditease.android.cloudrefund:remote -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes:
cn.creditease.android.cloudrefund:pushcorecn.creditease.android.cloudrefund:remotecn.creditease.android.cloudrefunddescription ioc process Framework API call javax.crypto.Cipher.doFinal cn.creditease.android.cloudrefund:pushcore Framework API call javax.crypto.Cipher.doFinal cn.creditease.android.cloudrefund:remote Framework API call javax.crypto.Cipher.doFinal cn.creditease.android.cloudrefund
Processes
-
cn.creditease.android.cloudrefund1⤵
- Requests cell location
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
cn.creditease.android.cloudrefund:pushcore1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
cn.creditease.android.cloudrefund:remote1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004Filesize
251B
MD5281ba9de8357ea644b2fefb47b896f52
SHA18fc8cf0d2ea8981831b7d90d41d68a475d1c83e0
SHA2560f7eb41de9b6869e16f0abbcb6b651214c61c0458c5d2725f67a88bfcd7eeab4
SHA5121d16c630da869da75908ccfc1e20164303e26c13e58d2b1ecd86586574cfc1d4e93c3e799797e77b2fa60ce34b8a7801ec7c8d4090c81bd9a9b115a55da37e33
-
/data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004Filesize
242B
MD5011145a494081a16e141ee13f26b7642
SHA1a01d3bbc001f20b0d3f17d96fa2bcc4133ab64f9
SHA25607c97e94641eb4f5771bcb1bc8bc0b6f3a121b3cbf11743488104387d7b25e41
SHA512000a9e533e1f826e55d098e4a108d03dde1717822acbddc4af6b697497e39d608d23dd70febda6afe6e5b084cd02739aa3c21a9dd8f62d014ce62b4c49151e3d
-
/data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004Filesize
249B
MD598dbc4a859f4fd824a85024aa0b88341
SHA10c528af0738e9316754a444cf5a46c666c17ffe6
SHA2564c86fd01947e3fd5ff1deee2ef2bae50671fd8c04d5dc641d742ad8557734f2e
SHA512ab566642cac85e13caf66ecde4b4f77c0bb2c22c7d6fc238b3012a44c5b5d20b11d3d30eb82aa24aed16b8606448b09e1b25dc4f1b77bc9febbcb7bd005bab37
-
/data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004Filesize
8KB
MD5ad0c3c06abeb3d71ccf773b4ece2a8e6
SHA1d99b310565d7c63424593be542a5202892071265
SHA2563fdb05adc1979732789568dd2665866358e9250867e54cd5e9cfecc0a72a3b16
SHA5127c484699bfea48bad921f9273417d46b1cb21db0cd4ba12dc997525bdfe25f3789fca68bcdae7a825059166646c6794e7343eefdd81f29e1159e8ad508a9ea93
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabaseFilesize
20KB
MD5bab92ae94367c47ad573850702a1b59d
SHA1f477fe4343d1dcaa96a255c9281a81ebe1b81e99
SHA256e4be24b2ba6294fe808a138e29218aa548a220d12e20f8f1cc70679569a7c1a8
SHA512203dcf1de30bd91159d4d7b757a25383ab5858b585dd133351543f7477986fa8305f19bf002c9c2086486d04f280a1e23b7bde855de455fad04755c4cae479da
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabaseFilesize
4KB
MD510bd3ae3af030e244bbff2c1f991bedd
SHA12920d0fa298d2e69d01c7e91fdc85dd8033218a6
SHA256d5c6c1607d48b9c620c15f0072468f5bc45acf9cd08c1df8fa5260e937cc2191
SHA51251ac4a34b5220492737ed5120caf1325f1b6d3c051f309751c5a5f7fbb0dc33ee11ff91dbe4c34e0e4b51e0a27db8b83388d4de419e2ea0d81c70293bc9ced12
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journalFilesize
512B
MD57a3a213e5dc377d8c776b86d66a91305
SHA1c86ed2f4171b418a5b08d55643e4ec39746d1472
SHA2561c4b0cb636d377091ef25485e9f55ad255457786602d3c7186ac13d262979ecf
SHA512b8657d56f834388c9b02eb0dd166c5f170908e58c4d358bcc66753df364847b89164c8a14c21a466e94dd670144e21a67088772254abb8ce7d6cf12c7263a059
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journalFilesize
8KB
MD5c849265f45e406a75de0063e50f9c1bb
SHA1b8ae1096f03ff3a47462720f666d9f695e39bacc
SHA25634ef98f4c3d940b0ec1229710214bec46077408c8a8c504d85e568a76c3466ce
SHA512f02035f34485ff264e3f5e3a3bfe84681a658976d5306f637f1f81e75aa8464bc1b652157611d14d05df3f4a3ebb2eb5e4dfec671ae8837005964a4d03dbff7a
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journalFilesize
8KB
MD5763df1379890f07d5caa651c51e9608e
SHA1db4943beceb033a98b9048acb226fc7549d6aea6
SHA25687d3df4bab4ef98d6401efe6617d976699d56fa9bacbe697fe2f16886b231eb6
SHA512ec1f249eed6c94c78f3ce710e047b48401d14f63d5f4f828f7e658d459a528242515fdd0dfbaf1bc8f5e100d8652f10a7cf3f31f05e8f92405f6852827966299
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journalFilesize
4KB
MD5542fbb7eff3c41dddc79fe49f294be6a
SHA1122628d3e2be22f8bab389970d26e9bfc2ccdce6
SHA25684ff7800dde050f8a9aa7f2231c2c373ce14fd848d23624f8081b588329ec24b
SHA512299772c3198c3d01e2b9c9ba095ccae68a2339923fe8f730c58a06cc0367b7496446ee3afee0a73fcfa715694ee435111e5f84d91ad7a961c4cbdf21f624b142
-
/data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_Filesize
16KB
MD53ba5680a98ae1d09069d3d1b1ebcf3d5
SHA183a57d9e318b6cafdbba70edfb7c30b0fc597287
SHA2561616c34daa17e79f2fe390adb3689020fc7f4e66bdcc72d00ddfafecce3653ea
SHA512ab4d1bf5ae0b6d45d44bfd52d4cb9dd93a1745d5b0c84eed0997d9325b130540418d7cd352283ed91cec68bdd028467dbb5782988ee0c75b08d85b8f23afc763
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
8KB
MD5c28aa76d86a5da0380790f3ca5b78afc
SHA1bcf82fcb766817258ce280e8d5b67284dcce07c3
SHA2569d77429b775096784a4bdcc145309e4df05ca60debe08566b1dbd87e4cb1d516
SHA5124df4df52e63fda620a2f534ace54b2923f5c1bea0b603ae29063e41c1b18189a21a40f18b4ba5aaa699851ce3ceb77521899f342d3b9f956f0ad1a2bca4c570a
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
8KB
MD5821859ca58b9a7a981ffb31d0523d203
SHA1633329d2e793b6accb6c29c6c8b62d1136e4a0e5
SHA25604e1d52e955330539f88621b9157b01e4d5a188fb81f9433bbee00cbd0acc7f8
SHA512d5924c30b4bd9141e2f0f2b1139e8a882e6c1425b9c4014dd4989f32fd2ba87232341bb2b1065e3de7f2cb73767578d1c465183ed38e0b929d7b18bff31f372f
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
8KB
MD5813086e5377d09687d5436cfabae63e7
SHA13eccee78c6f46fbf3e92bbe9389c8a48facd8319
SHA256dc5eea8428e146cba141ba87053212188341450f95fafc3f8b55b693ffaae6b3
SHA512336c901d367a1fc0b46ae0c2d61c44647cd19547fa6cd70225ea0b28787cfbea3410b5e0869a0334478ff64f1d9453f41ca2a005ab1f1711a530629e7e1e3dea
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
512B
MD50a8e83190d84399cc7d3ffb1447b58d3
SHA173e433478642f1d28ce0c260cb772857ddc04bb3
SHA2565a8c523bac2f473c0f1402cd878b504a8b83e579d0ae7d380229eb423f18d3a9
SHA51273bd3a5b44289162193c939e27653941a0b754efbda9d7756d5aad6869a2d07477bc75f0d11d3bfe702e65825da24479bf80506b55f8b4c7b343c7a2e2bbfa06
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
8KB
MD56b712bd8e7ebdc21890abf4d6ef12997
SHA1d87d5438b68ec2a09714190094a06f857dadad63
SHA256c69140f3da82f2ffc81cc045b7f16ebca769405711a1177827fe25ac551abc0c
SHA51293e1f137c33c01e03abd8685a21d044cd56c26622886c7e71de013b23e82eac292b51c3b4654b35e3094424ce8faba58f27bff1d80f2562fef3c97a19d9527e2
-
/data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journalFilesize
8KB
MD5f6788811a7872e365a23b554feabb095
SHA1dc4dcdc9b7a88eabc34517aeef7ec606bd2423c5
SHA256e66c412f24a72c554dbb822ee939b99a51fede7e8e04b7c03af0b0135ed8e145
SHA51215b2cc9fb95f66c06e026dc5690d2f86aa12504d1264ee6dbad694cef2e10832656978b1f106b8c2937586507ef83b77f4ef552023437cb31a13af1da86d23c5
-
/data/data/cn.creditease.android.cloudrefund/files/__local_ap_info_cache.jsonFilesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
/data/data/cn.creditease.android.cloudrefund/files/__local_stat_cache.jsonFilesize
25B
MD52d805b13f2f28dc3ca9bbcc000f49bb5
SHA19eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA256c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
SHA5125db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
-
/data/data/cn.creditease.android.cloudrefund/files/jpush_stat_cache.jsonFilesize
119B
MD575c9e678309d082437a132ee30cd9f16
SHA1a8d3a9da8d7bec23510b5d280d4a5881acfcf6c3
SHA256d8cfe1ba233091fbd122025df17f1994de62a08ea891ac2a4ae4bfce0c91f502
SHA512c0d83334b7202095d7a227e4df9f7fa1f3e85e0965fdf6d841a39677a5c990c961748c7f301ab2c2587821f0a500fd3ac0b7f669b220f54525921aa83257a6cf
-
/data/data/cn.creditease.android.cloudrefund/files/jpush_stat_history/active_user/nowrap/c184bc80-0810-4ff1-b2d4-0fea9e5963a7Filesize
159B
MD5033954a56798b4a58eedb60625ab0561
SHA18a588bfce0732a9704f1fd027fbd973439f70ad4
SHA256c70f60f38f98c69ded260438a5e6c4eaafa1fbba349b89b0610f765ec1b5ae5b
SHA5124fc73f23c2767c5f19eb7b572f72191d59bb7a9d9a07477b1b0ac2ce1c58334b9f7575ac198f00b4c3411d6db88f295e075093a25db1ca36d4ce839bccd3c08d
-
/data/data/cn.creditease.android.cloudrefund/files/jpush_stat_history_pushcore/normal/nowrap/b31e95f9-2583-4e36-aec9-de7fd39c612cFilesize
8KB
MD5f30364098d3a8c37c248f676c38d8375
SHA110b368b99f08a6d8434579f7b6ee260c52b2270e
SHA2560994496dee2f5f7b6b1075a545519cfbb41d0df94d47f55c87d4c89862641174
SHA512452448d2f45fdcaa18cad7b1235e4237fa22b175a39c67197d58b4989a25d8789e80eb0947aebf3bfb92a50bd818867a57832484d5bf797fdcb3a9df1b5cb381
-
/storage/emulated/0/Android/data/cn.creditease.android.cloudrefund/files/tbslog/tbslog.txtFilesize
52KB
MD55d3c0cf3d5f4007a51cb8eaa7fdd401b
SHA1fad794eb8512b3f684b2d912342a08716e493ba7
SHA25681eb5f047a0a980cc43dc20501eec001c48229361a2c22c5a6282e6bed6d5b0d
SHA5125ee0d75cfa9609d44053ff9e7a46b39219766de596f8b677e0a21cd4892421ff05db7fadf80831ae8b79fa1c228162223f0e6e6d3502a101fc21a1564a7e0bcb
-
/storage/emulated/0/backups/system/.confdFilesize
20KB
MD586fd363cecd64e68f0abb73e3e479259
SHA18978e8efea4fbc25d8684b8048885de685dc6efa
SHA256b07191e27017423ecd54a64605e1ff0af532186e2585e741e3f365fee52169b8
SHA5123f8d091fe8a621cc5efd08189a732d06aa283a6a6d898c5ff481428a3406587c8bdae7229b30e73e45e79e5a668acbf139e2caa2cbd86c77bd2c83b626de025d
-
/storage/emulated/0/backups/system/.confdFilesize
24KB
MD5e4abcbf91bd52cefe86643b15dd73bc1
SHA1559da0412486f0fa3186a2bed5a25e3f0118f636
SHA25626a744b5da74774a5a0e1c91e67287f35246b420beb58dea98dd768b0c20f048
SHA5125bb4316f105a55bf6c45a99b3a2e8c397e1e26af4eb15ad2d4ee5eb1864e13ebdde355256787edc0502954382d847c618240a7098acb8daecae2acf548b5bb1e
-
/storage/emulated/0/backups/system/.confd-journalFilesize
512B
MD552a800bf1c55dde881ef38460fa28902
SHA19d588e106e13b166d4aa25f2eddce1f2f2791778
SHA256fcff8d3393320dfad6eb63e8379a6f48058b54874d37fdbd6ab7cf4f633fde16
SHA5128fe59d7a37fc65c62511e8c90a7a5b62509e91b9f59ed64f4e87d732377dd7fae98d52255bef5fed6370e82748318ae5c355f7c69ad728c4f623a3e194e7ec35
-
/storage/emulated/0/backups/system/.confd-journalFilesize
8KB
MD5f742706ba505aca7bde7d1d5aa2c457b
SHA169d1f7e5fbd5869267e94ff383d886a6d482a151
SHA2565ff3a6d4f8602aee2107e7fe22c4b9e75f6d966f60950cc06a1efab7b8e3646e
SHA51231f033750352d17bbf2e20233d94011f9aa95812ece42286c499bd5ca43425f4b9dda133ddda7faa7fc4170a5a490d74676f21bae0a6912a3b1b17d7a596acb4
-
/storage/emulated/0/backups/system/.confd-journalFilesize
4KB
MD56b5cf01106f372229006cc068544c1d2
SHA1899a88264092369aceb39eb564dd96032ae1fb33
SHA256f92a65a95a01dba46c117e5d7bffa3188efc87c7d5767168c1c00b4013f9a54d
SHA512c4790e39e33391f2e02840547fe52a20c5a253e9a338d976fee2e2d4ea650311dbab61d398e9fcdf20abf6a44a0bc13b616b6907e642ddb2ca30afd9fc76a6a6
-
/storage/emulated/0/backups/system/.confd-journalFilesize
8KB
MD5a7bbe94769222029002aa18e16dc6948
SHA1251a8bc9631d9f2c430b5208d0f196efe7ede034
SHA25637af84ddc37e3835562208e912c30f228e2ef69e61734e2d0a8c2d15009bc28a
SHA512e698c551915323c2df3591c2d20d1506b8ad5cfb733f3d386c413ed53a770349d88902daca9cb7b77f3bbfd879af034d8f084f073161dbeafeaebd935812b644
-
/storage/emulated/0/backups/system/.confd-journalFilesize
12KB
MD58bfb7b43ee4b29b301913a9102e181e7
SHA188c146a0e74ce72b700369b348e41d91cee9cb49
SHA256ec6dc5c7ca3b15612f4086acf9b07b140b7b1c724ab0cb59034a47aefc0e9d03
SHA5124e1389470f7756793ca9cb0922b5b7b995536d40eea016eb8c2835e13bd072b8213b6637468e017104623eb1c68e0fbb3b18e44f79bc82b6d94190e6e64fe5ee
-
/storage/emulated/0/backups/system/.confd-journalFilesize
12KB
MD54abb6202e24c2d01b088e04a8ede0c97
SHA15910b4c36c54d227ec93d5320382f8ff1b3b429f
SHA25628aaa4e626ab9afa47c21cbd6571f827a35d00de1a33cc573b17767941ef44e8
SHA5120d4509332b1c491808c6d350d5bbba423d6d2360d749abcd42d37d96353ef2f6b451c9f351b46972cd4eceace7ec12f532918ac43cbb338b7ab768fe5ed93b5e
-
/storage/emulated/0/backups/system/.configFilesize
25B
MD5d1611d458631e8da3530ea21401f2c63
SHA11014f61672b7c14fd89ccd2b84f941023c7497ce
SHA2561c87a7aad1327c2d403e11ddaad1de71cca705b1555b5aa9273b7cf1afc7cc14
SHA5120957a653fed411487d1d5783ff555068f052c09ee4fd6ce706eeef45cd441f217ada07a888c911878a3d4e341d8f660b0bfa9fb29829595aa1f811c6cc1e497a
-
/storage/emulated/0/backups/system/.configFilesize
50B
MD5fcbff6231dbb382ce16af40e72544462
SHA19d5e8eb802c08192a29a70907d8c71410a8ae9fa
SHA2569b2bc86eb510c6ce41ac0dafeec950992d0460b807b9dba322ae97c397c71fb5
SHA512a96fbfbcdbd24f17c3ce672199f7e9881536a9cab2054753e81d04e8ac7262f74cef94e593b82a6d5c13e405ef5241d827936c80e762d7e5ff0eb5c1d7c6c878
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD5f5ae0a25f1ce986be0919c8ea79306ec
SHA17a0324477e47bce3336f63a2b90566c78c91499a
SHA256b0231d6a4cbb5da0acc5687033bfbab21330bf34b60d143a3abfd660f12479b3
SHA5124476b163a939847c2423b3fe3ae7ed8c943c7106da73c72bc15ff3e96a78e6e0107000dddd33f3b278f9a109a69e95f86ba70fb59f1d1c13243ca078993a099b