Analysis

  • max time kernel
    85s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 01:59

General

  • Target

    6d0104c8dcd5d87953315d03e9114c08_JaffaCakes118.apk

  • Size

    13.7MB

  • MD5

    6d0104c8dcd5d87953315d03e9114c08

  • SHA1

    06a424a89f2f466e7b8ce16dce6fe8c1cfe968f5

  • SHA256

    862ec4e3ba30d6b2bedd4251cc9d2fdc7a999ec28122c5dfbb1e197c94ee01ce

  • SHA512

    b10bd7ae93c08a94f09ddc48ec3f327fb6479075850b7fd9c91e7346f84c8d7a9156f64e5ed589e8a64756582c3f0dd576ded9c6db107ca52c75916820d84b74

  • SSDEEP

    393216:0EvyNwRUnzfH+NkPdfI7VEajTLKGbfmck9TWds3Tv4Oz:0qewYzFPdf8D3LKGxkgs3Rz

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • na.TowerDefencePlayEngFree
    1⤵
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4305
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/na.TowerDefencePlayEngFree/app_zxlk/bvfg.zip --output-vdex-fd=46 --oat-fd=49 --oat-location=/data/user/0/na.TowerDefencePlayEngFree/app_zxlk/oat/x86/bvfg.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4380

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_adwords_bg

    Filesize

    1022B

    MD5

    4b9b64c9dc6d13733a9ac3320ac9f53f

    SHA1

    a02218ada2417dd85a3f3a22db31d30c150440bd

    SHA256

    35dc398b4409f3037ef52c21e4674a283e1cc0f71894704a4583752b91fb0cf1

    SHA512

    b819d1ca851815549bff946c1950539db7d199b3b04be0f6a6aadb1602225e895ac7283c525733e9e421646a6f2da2b732ce3cccb8461e93574c04e5d64b31b7

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_appsc_an

    Filesize

    3KB

    MD5

    58dae109b45c2378d880225e9f746240

    SHA1

    e67b37d47c009a11c9b365d38a3692f6e67c606e

    SHA256

    afc834307f4d1bb9eaba3f3ed85aa32a616ebef7b32b14ba234926312ad0f2ce

    SHA512

    ca3c5caffe9340d2a39e84c8e7e2ad495640338a6d1d6ecafb4b935578b334fcbfdbbdbdab983c7b6559387cfd197cd8fd33c243d6c06eb9368c6f7e4ccf76cc

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_arrow_down

    Filesize

    979B

    MD5

    db45ab95930456e6baddab4e6fcbe712

    SHA1

    fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8

    SHA256

    5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a

    SHA512

    d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_arrow_up

    Filesize

    970B

    MD5

    20c4a831398dd9ebd8dba380a2e7857a

    SHA1

    c6db26860686a65f5f402d29d98b358630c10e40

    SHA256

    03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d

    SHA512

    85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_bottom_bg

    Filesize

    1KB

    MD5

    ffe93c95f1ceef187397bb763c992ccf

    SHA1

    6b082b7f6c55acd0987611b3b9a5aac9a5b06d67

    SHA256

    06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9

    SHA512

    10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_bottom_btn_cancel

    Filesize

    1KB

    MD5

    a7481cc1f04ff397669d5313711676b9

    SHA1

    6a8a1755f8bae8c1c4236420de731ac5e6479df1

    SHA256

    7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b

    SHA512

    6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_bottom_btn_install

    Filesize

    1KB

    MD5

    6a976eab4bd6a204fff19f363a3e0fad

    SHA1

    7815e2d7905bb25ecec99c6491e05e498baefefb

    SHA256

    a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796

    SHA512

    8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_btn_install

    Filesize

    1KB

    MD5

    135b4b02c06ce896c0289c06931523d7

    SHA1

    219d7fcb9a47b14dc724030a5b22b00e4912c419

    SHA256

    7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc

    SHA512

    e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_btnbg_blue

    Filesize

    1KB

    MD5

    cd03c81961866339359a8862cd420751

    SHA1

    4356e958c4b333453a187b13cfb8e4951e85b5c1

    SHA256

    5d81cceefef430d84abee2aee1a655e975e638eb6e90d9edeaf70df18f761453

    SHA512

    29c6a83607ef938c8d74031781008075f9e29f28381893ce565d0d0e5e2193657264deb7752709f124bac8a7625ecda18a90763f8b8cccd48868105fde62846b

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_btnbg_green

    Filesize

    1KB

    MD5

    b61c2cbfc113d3080881c1a6c805de7f

    SHA1

    8bfb29fbebab3ff36faa5f6d19bf7bdf57608dad

    SHA256

    740a7a55675de72a6d165dd1aea7f15e6744f08e5131c2abea7e6e02ac4752c9

    SHA512

    7cb6ca09b180adeb87552b9b814ec50723d2f8e909a5aa1c3c63526bfe90043c0f6f97696b0e40d33c045a6d7f4b4df711ecda2a93839b9409f69c84491b3151

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_btnbg_orange

    Filesize

    1KB

    MD5

    144bfaa9628bdc547f92dd8ce04960db

    SHA1

    f60797400afdb88cc1a7b26eaaf5c18b7d34e3c3

    SHA256

    56707731bc7b76b806d9db7ec7e73173d0ba7c5acf22c8c040fb1bbb0d07090e

    SHA512

    071111562423e811333afd56dbd18fb68e0720f41936c42d266f70d041862560b363aa202ae24af40e9ca611d7f3eb996ee4184834097e85fbda1e2d36291f4a

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_btnbg_yellow

    Filesize

    1KB

    MD5

    c56a569d3e2cc40deb8ef6dd9c8273df

    SHA1

    fcdfdfa5f883afe7dea8a08b4e22d66b243065c5

    SHA256

    0e603b7797d42f1eadf5ea14499460e84e6525df6bdc4ee1464e00789c10c057

    SHA512

    b1549f4667c2765feb11d38469a5bfa4f599609ff519e65b73fc01521886cd57e7f30c2c43655d2b3af8665c77cde4f3a07e1e21f7dded059dc22ac60cbdb4b8

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_cloesbtn_top

    Filesize

    3KB

    MD5

    82da041f51d1ac5bb8def1a7b43d23fa

    SHA1

    6bc0fa16bfa87398bb17922ee2f6bb1dbd9a4b6a

    SHA256

    0bc4050b837665100502e255107b5e1521c7012b03fcf41eeb92b2bb8c95ca5c

    SHA512

    1e558cc54a7f5900ca418ce7a64866273a533a25d23a84ca4721277528949836079472c7fc0e66cb5c41548ef2c06d412a1e8538fecbb02ceecf982e10c238b5

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_cp_more_btn

    Filesize

    1KB

    MD5

    a0314cf413a6efe118ce49aabe7d323d

    SHA1

    a8134a8d8506f5d44cf084b501a73fddd194fb8d

    SHA256

    3d723fa2d6bef03b2f44e09486edadd7eee392e14da4bc9435521fdb9d5a1537

    SHA512

    e5decc76e4461aa063571e45e9d1e47fcd8586311b726c1d1bb60e327c43ef8e104f4e1614e9ac656d5ae0e9095042e230f7245c7a3f0d89d515a2fad78046d3

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_cp_other_btn

    Filesize

    1KB

    MD5

    5b1fe1609131bc828527fc35dc4c7353

    SHA1

    39b6169e1e2a7fee0e56e421184d81f071d3693b

    SHA256

    ebc4e49b42208680f7d5b9ebae07bed1712a1ecb6443dcf5b09171faae0e0eae

    SHA512

    74ebfb919c0af6fabc52228d7b501c632c95d28b91e0ae87109d9da5f422471f96190858f26d097bc502a8e673ccf31e35ab2b15910f7a43e8c48fac64a0c8e7

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_default_bg

    Filesize

    3KB

    MD5

    67d8c02c18a4eebb21aa28ebd88d7a8b

    SHA1

    f31fe91485bba4da727e9a0d0525c7417d6c72ee

    SHA256

    7b341f9b1ab0a691029b44f9b1d64cf74fd72ad0c74772964645c79f687402d0

    SHA512

    73c14d96680105ce3e24ba0667cd2452848f9c7d2549e937667c25bcce01a4d9207a78f2dcfc7c09cdb39f87f079c7847ceacbed36cfae55013126ab3bdbf5fd

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_dtop_closebtn

    Filesize

    2KB

    MD5

    6edfc3ccf80c5cb2c25bf82dd5e78c46

    SHA1

    0f71fe007ebb0479e42905c6a78f80b0a109a03b

    SHA256

    2225deaa4204ae88206589b390dd277c9e24ab0a68338cec19eae600b854fe32

    SHA512

    a8e4adcc0cd0867e8bb2cfe43a04c3a8e8a84de99ad7150c339c4dab1e81c8dab87af17fe7b7bbea41d54c6acd6214224f07ba456a8dc0fc8c33b3782e83ba4f

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_img_bg

    Filesize

    2KB

    MD5

    089965b9fb96326ad74e361a9a524e4b

    SHA1

    528cc6c7a10de9f525919a477c9e20d6b6e93d55

    SHA256

    d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46

    SHA512

    b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_install_btn

    Filesize

    1KB

    MD5

    c64af13b874ab8cfdac99f000c29a3be

    SHA1

    e5274173c7721f8c77bb5da46fc94f195abb4924

    SHA256

    67af721ddafee67f3eea6241bcdb5b8c1315e8ed1b8dc852646cde24fe040516

    SHA512

    d59c85b4576152848427a74214c7b979c576f5cc6978430b9d7076f50cdf8957d8256eccf55aaba2bf7f80da2a7a2b445a26758aeaf3e889ae1c84a3fb2185c9

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_list_title_bg

    Filesize

    9KB

    MD5

    c34bb6ce3d7def12e8af79e87a6b5173

    SHA1

    99e8103027a7bba73b736fcded9d0d91b49e4ed9

    SHA256

    daf75ee4e642b335cf1918ac9678502bace139f76645eedde7eaca4f296b7e57

    SHA512

    58735b6034ff6ce1974aa0a48952100345b6bdf74a4dd083925aa87b0882e1931ff8608d03d0854c9de23ca409e5726ddc1e8313339181f57312bee0804ee2b7

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_listcloseBtn

    Filesize

    1KB

    MD5

    6fb767d2563a35f3c0e362a5970ffe1e

    SHA1

    6d3a8fdbd7ced06a363517cd6cea7a7fea16c269

    SHA256

    534fe818efbaa752826c53f1b63d3ecc1b647c8a9f7970012e316cbce5fb5ae2

    SHA512

    ab989e8b01b9d397cb2968dc8191a9c2c6fdf19947b30b96cd5266afc6fc330a318de8c914d34adef98caffd151a0bc29fb130bf11c5638e97b3ff15c723fc2b

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_listview_bg

    Filesize

    2KB

    MD5

    28554ef38f282f89a2f3b298157fc984

    SHA1

    08147f2b5a83fd07f5acadb43598480a13d3fac1

    SHA256

    b4034e26cfd742433a0b59676bf73a78d93d413decc891abf3d34486160d307b

    SHA512

    cd31cd81a7c37155f540c1b636cad9ea198860952d79f8b3d39dac661c2e7fa82e1398830c7aacfa6904e4d4cffa6f5f1d906dabbf97091f3e38a65fb5fa51da

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_m_star

    Filesize

    1KB

    MD5

    590dd3230f50ba57b7a828cf1ad04aa0

    SHA1

    d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee

    SHA256

    d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7

    SHA512

    449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_page_normol

    Filesize

    1KB

    MD5

    2bf3d7d7ffe4a54396979c2802e5a0a7

    SHA1

    631def5dc6bd48080d51d3482a85c470b291c316

    SHA256

    ec1601e7e19b69d6d6bc8f18738698a6b4483a4f1ac546215dbcff9cc74acf7f

    SHA512

    2a9a95a9298c59a90b7234343f01b70219653e4d43217c83dd3dcafea84b96727d1e5f40ba035c36fb4dc6a83478fa66d545a2cf8221aa2da1ab9565b3deae79

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_page_selecte_blue

    Filesize

    1KB

    MD5

    1c4e3c1de688a5cde892bd74eec4bfc1

    SHA1

    bade0d4743822214421dc664449c0b0d94d69aae

    SHA256

    ee7abc5886a058b4436aa0a53c6be535fc0bd3a6832f2b0b0e611473667dca5f

    SHA512

    ccf419b266d7fcdf4c6696963c657f7138a59b06a4fdd900effebcaac0b162ddb5e9135f5032a33e2b3ffc17642065600d9b9292005e200f5cd8e79b17968f24

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_page_selecte_green

    Filesize

    1KB

    MD5

    9dfe941765a15b163eeb46b49cb4e89b

    SHA1

    caad3358c1706f28624e10616cf6d26a45b2dd5d

    SHA256

    d92d42135d59f97d35cc2d553b7bc79f19397a40cae9ac971a86def6fbc9167f

    SHA512

    0a38e4a6187fac65999a9a27ff4a917ab6dd023587ae5b0e33c95a502e7e93626ac3cfb48affaacc274b5f7fa118f483a627e70288757308041ac67e3337a4f1

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_page_selecte_orange

    Filesize

    1KB

    MD5

    ffaccc20bf244076988df00a6bc20b06

    SHA1

    4a7176527cca9e9a862cb12485cf02c49c228913

    SHA256

    71d16959b999e8251ea5ffbf0075a43724b02f85ca34e3ee82b31935537c9a9f

    SHA512

    dba973767cc9e9eec698232e9f7d057bdf5464c8d70fcef3e6631ad72d9e62ab4cc08169db2e3927e2f3a870787ee60bfb4b26ec1ed8c3fd30e84aa38afd65c2

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_page_selecte_yellow

    Filesize

    1KB

    MD5

    8487656fa992a7c3603773e0b1b1d7e0

    SHA1

    ac740cc2ce2ff0729b70c26c70ac0462072d1b81

    SHA256

    12b5a8c075e94cfd69d4a3ea6e62552d7e3e7e2ae5f6e69b7fc4ab5a6c9635a8

    SHA512

    b6be96693719978dabdaf05e3f733925b126959bf8ec0096775d76eeb08a6a5fd56c2ddb4697d81a8da9ef1e00524348c0ec7aaa36ac5302d89dd51db6f08fad

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_pop_back

    Filesize

    1KB

    MD5

    64e607b18ceed3c184658ad0bead2c87

    SHA1

    ce0da694a61264c3dc52a42c5e4eef67c267330b

    SHA256

    ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad

    SHA512

    a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_pop_bottom_btn

    Filesize

    1KB

    MD5

    153c4a358fd2029b62d88c5abc8315f8

    SHA1

    b8db469b4ed0798040ed2cd7618fb31c143bb733

    SHA256

    6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945

    SHA512

    7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_safe_icon

    Filesize

    4KB

    MD5

    5101a78d00419574d0dcc0eb1f4b75a1

    SHA1

    c4142d79270fddb27f24d6e8e8b61e9837b3de48

    SHA256

    abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999

    SHA512

    cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_safe_line

    Filesize

    1KB

    MD5

    1533f88b71966664017deaa78437e057

    SHA1

    7b68a5bc7a6808a041c05ac7adc5da0fd378aecd

    SHA256

    ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a

    SHA512

    f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_sc_circle

    Filesize

    5KB

    MD5

    e50c867a1725d1a77477d0a3931266f6

    SHA1

    1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67

    SHA256

    0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be

    SHA512

    88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_shortcutad_bg

    Filesize

    2KB

    MD5

    66cfa171762dc97679085b770d8a1a24

    SHA1

    0ea4278905b9beff4cf8ab932955e720b7efd200

    SHA256

    7742eed2fc4c8437016dddf0af8b6b7ab44c8cb67dc2adb13f44ebd959cccc0a

    SHA512

    04c3b023abb743dbbf4a856c51d08af43d9fcc9f128073336ba4bb8149a9ce4d70f7cc50cc2989e59cd82339371345f02a341fb7abdfc53b0cb8c0680c400ceb

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_tj_line

    Filesize

    934B

    MD5

    83f9aabf34554a65a8f47514703ea69f

    SHA1

    bc3097db92c0f1821d60779d9b1f712cd0cc7866

    SHA256

    a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d

    SHA512

    11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

  • /data/data/na.TowerDefencePlayEngFree/app_imgfile/d_top_bg

    Filesize

    1KB

    MD5

    17f5c25477711a64b0dac419b8d68c0c

    SHA1

    475301f9d8143ba1548114d1de9272a18298a5dd

    SHA256

    b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8

    SHA512

    09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

  • /data/data/na.TowerDefencePlayEngFree/app_oiuj/oat/zkl.jar.cur.prof

    Filesize

    269B

    MD5

    22761d4b6ce39804a3384e7fff249a94

    SHA1

    55605dbc20d0e6784b1b921374d5618c7c0e4df5

    SHA256

    1e021cebc8fcfda4157256e1e1c2ac3dd388e04811f27ea4084e41c01e22b50d

    SHA512

    f2f6e4b34f786fd2a4358c777e0776d7b5ce7037cf37efd8abf47154423b9709bd42f510e5916cf42e8c78549185e7c32196271628ece2224e93844ad7773380

  • /data/data/na.TowerDefencePlayEngFree/app_oiuj/zkl.jar

    Filesize

    76KB

    MD5

    ff1608d2909f2ff6b2d7a3bddd54640b

    SHA1

    d67b35b63efdf86cfe52a0e960d8c90a0ec97dc2

    SHA256

    d9c17a4ff8514beb3225b0980db510f4ffe85abc25604a003aee1c75e0887dde

    SHA512

    0c6041ddaa52b139770a853a154a2a7d34b0f8e6c60d7e383ba04061697027d09b570a21267c1452599daa22ca1f02ad34c4b076156d0a3612ec303d0eed9b69

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/bottom_btn_cache.png

    Filesize

    3KB

    MD5

    b08b3f807464a79d8a28b44eec61d5a0

    SHA1

    7855100f98a14220cb24a8e097c1aed778bf855f

    SHA256

    adda17ece90d03a44e3f15970f62c0aef32dbf3459fc47eb72914975397adace

    SHA512

    a20b7781df1b6636c4266011315b602b1a69a03656206232fee54e5ddfe85bf431301f9fd1727c6aacd0e2ecd3b9ca18c0c7880613bbb8ef7660ee864bbc6ae9

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/bottom_btn_cancel.png

    Filesize

    3KB

    MD5

    d2135ade336215f3510780177806f569

    SHA1

    42ab579d5c377f0674fd749ce99efb20dd57351e

    SHA256

    790801d8fc1b026b2b1c919ee915e776a3bd77a231861d8cff5ce7812565096e

    SHA512

    741b4c2c730df14c2d9d61f3eb01a87fa06ef89e1c1b91da27b03c98a20ff7fe01fb47cd08234316abf597bec03ea3e4a770ff8799c9347ddd4e9e916e9f367f

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/bottom_btn_install.png

    Filesize

    3KB

    MD5

    7f10a1d9c5e514050e22138d70d842ad

    SHA1

    2a58f5fb306f4f4d071b845baf84c0bb39ee4ad7

    SHA256

    e7758d23bd9ad789d81e7f9eef7e948a403609a4a28ba53d9b3124135ad796ab

    SHA512

    cc3186cdd32448ecd35b052b6aa7af6b189644611518f711bdf8ad1b29acab3c8a0e65fa736af500153ca281b1147e2dc005fa6799417799fc185ba6fd64fcaa

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/btn_install.png

    Filesize

    1KB

    MD5

    dd18221de23603b78f421d0ba0f591c7

    SHA1

    c1806e627f1e71612fca6638e93894a00b092618

    SHA256

    aa4077aa3cc99ec30f27c07fcc11f8e8d48e5cf0cf786335c89a459a5a8949c3

    SHA512

    8aac08f0e222bfdf4d7800c90eafbed96ce47a93e71ec04234031da33b3aff981d3463a6fb8e66122d32848225fadb759e4c0b58f374873fdee2d9d157354e93

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/item_btn.png

    Filesize

    1KB

    MD5

    c273f481a2774797a0f67a6f4a042bbe

    SHA1

    2858e907a559742835b1d820c8fc635ec5f7d094

    SHA256

    bb44dacdbda4803c00d0d7ef98376a2c3ad17d4c8b33084918a4986c744135ac

    SHA512

    75ee76ba31b62d0fbf0d17da7db4732664bf083e3848a1c38d82aca70d8fdeda54b3bef06c6df833fb9a4459c7789db2240dc886e52f2d82b50c464d505716cb

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/pcheck_n.png

    Filesize

    3KB

    MD5

    1bbaeec81e97f3734c45574017b92488

    SHA1

    dc916c37bc512ca035adbf4504fad1a53ad1f6c9

    SHA256

    25db9414151862fb15fb24ec8530ecf1dd0c8b53664d2e153b042c24fc14e37f

    SHA512

    d630ba8b634d7ade563eda37b5c887ddc0582ff99346f19f6b1b933a8282a435cbe469f769788cdeadf35ee899f6fdb389222847eda76f3e101115901ad07675

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/pcheck_p.png

    Filesize

    4KB

    MD5

    e0a4ce2b09acb7c9e83fc656348ba99b

    SHA1

    9713de8c7f8c3d8631bfe91a57738dc4627c72c0

    SHA256

    b41279960593d3a9212d4e3b34a712d957a809f6c0003f1c7b86445581d675f8

    SHA512

    ef5e23caa800f35cab588c5d0880727d7acb0ecfac1b274873ed313935d2f0f79e79ff72852b62e6956f7c1bb55de74dca75600b073002aafc498a9f5a9fd49b

  • /data/data/na.TowerDefencePlayEngFree/app_psimg/pushapp.png

    Filesize

    4KB

    MD5

    ab7f8efe5cc8cd8979bcc02000ab881e

    SHA1

    6e78655557838b3515a922aa7df1bf44f13ef567

    SHA256

    d749e36c1f6410195fa647b7b92137685bfe64a20b32e14283fe31217c4c3f77

    SHA512

    5410549889161c58e706e882befed71b2511f31e0196eaeb487fba4113f848e61110fe1b3edffd0318b010d9ff60179db861a4f55ed10c149c6aa6ec283802e8

  • /data/data/na.TowerDefencePlayEngFree/app_zxlk/bvfg.zip

    Filesize

    64KB

    MD5

    fe3e68c834af136fe90e5305693a2770

    SHA1

    5dcc4d2f45ec00932d8f08645c22f17a8fe8e20d

    SHA256

    e8cf600a2f6c711b879db485ff8bda510d6b0870e25c22572605629003106fce

    SHA512

    aabfdc7eb60dee423da197853dd9f059aeec913e745146feac539e0fb8d64cd511df46c220f98ec06e593f9a8aca8ed31708cd1d426e20ac6f5cb81601099dce

  • /data/data/na.TowerDefencePlayEngFree/app_zxlk/oat/bvfg.zip.cur.prof

    Filesize

    265B

    MD5

    e04166966e41717a85da222ffc1d4aa3

    SHA1

    ac77a6395d27504d788c29569a319a0fb9c3918b

    SHA256

    9050e14b6e8d9f33f86bed08fbb899d7f2e553c1496aeb4673b4914b69a3b17c

    SHA512

    5c7b7613d2690a3d39237276969fdddcae64c3552f082dc81279ccead92af1b03cf6ac47af3b427c28b41ecca6d13ebc189934983b351ba398d722aefa39ee79

  • /data/data/na.TowerDefencePlayEngFree/databases/purchase.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/na.TowerDefencePlayEngFree/databases/purchase.db-journal

    Filesize

    512B

    MD5

    3b5f7148f6f57fb98ad801187b196515

    SHA1

    431c27d930cc0cfff1541fa590fa5d77af1a5b3c

    SHA256

    b8278a67e770ef6ac9743672b1e8e5710a3c74de06baf6df679c79eb708ddd6e

    SHA512

    0a73a1d893ea97da37214e44eeeb3e919ac2defea5daa6fb75a57bfba28b6e7b7970f8120e9988696790add04237fe5a6f14d2259334bc17f18958ec09a9c391

  • /data/data/na.TowerDefencePlayEngFree/databases/purchase.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/na.TowerDefencePlayEngFree/databases/purchase.db-wal

    Filesize

    40KB

    MD5

    2c61dbbdc2acf62137acde85767d4009

    SHA1

    9b2b9f7a8a3d6005449a50bcf8c773da9b0bc75a

    SHA256

    e9fa48d7dbfc39996860b326467053f8935962d4b9aed88ad16c51905d810666

    SHA512

    013299a0bcf4ca122397e31915c1dd9e98380da48a40f283ac367cbc657132131f487b027bd78afc46850c7015144e29537c37dbfdfb8877368f9daf3928a114

  • /data/data/na.TowerDefencePlayEngFree/files/optionSave.dat

    Filesize

    2KB

    MD5

    84789a5f2574135503dba058075410ca

    SHA1

    a68680220689124156cd642fd747b648ee3ef55d

    SHA256

    2e88235e7ace569b6e324071e8308ea1c979ed3255615e97ac0653361e57e6f9

    SHA512

    472c1bd0db30f01c7c2c3f366b195ea877c0b6f6d8f2fd6b4bc59db2375517b6fe098863480a66447cac981a71433a27ba01b01211369423ebcb23b46e524911

  • /data/user/0/na.TowerDefencePlayEngFree/app_oiuj/zkl.jar

    Filesize

    170KB

    MD5

    15d94a95adfa611d6cfaa9770c52796e

    SHA1

    a0db338ac1043113cd342c8b83ce1269dec8d601

    SHA256

    05b52bc316c80cf9810834923d70d0e2d22f982a2093d3b974640c218a9cfed4

    SHA512

    1fad81b637304c490e255a460e2565836f9e17eac2f6dacecf98ea92350f3f0546ba254a51a35a805d088c418ec9572a6b4922dac1e0123df8e56732a3cc0f0e

  • /data/user/0/na.TowerDefencePlayEngFree/app_zxlk/bvfg.zip

    Filesize

    142KB

    MD5

    a31d15debd8e340fd4bee23448a25df1

    SHA1

    d2aed55ebf5136143a15b535477213816c296f7b

    SHA256

    75802bd6b15dcf5f0acc480579037b38cbd41b4b69bad5d2e751de3d1267bb01

    SHA512

    d080eea6e18e29d659850853bb9d61ad19b859a62be0b219024af5df1c2689a3c8dfb2b0ef20d6646ba1cff1563486a1ebe4b6f919cab21f82f2259818e77a7a

  • /data/user/0/na.TowerDefencePlayEngFree/app_zxlk/bvfg.zip

    Filesize

    142KB

    MD5

    02d8afc2a399d99926f5f7c743072204

    SHA1

    7627eb723e0c15a2827544ee341a69f8d1f69ee6

    SHA256

    b9049c745bdb3a63a27ce323965b801203160be964a7b7b437743a4420ffd21f

    SHA512

    1c019d961c8494e1ae7c1c8d6e0d3e37d79fd641236878eb3b43d2a3df26fc7919e2ab53eb562323ad5f5f3036bac82dc21732bec236c5be28ced93cdb5046c9

  • /storage/emulated/0/ddad/log/na.TowerDefencePlayEngFree.txt

    Filesize

    94B

    MD5

    a4fefbc5dda55ec6f8a6d6c07ff15c97

    SHA1

    a1cc0f4f469fb7d5eeb64ca57e19b92ef6c1eb96

    SHA256

    7a7644d301b410d241f875f7bc2e08c20f16a0ea31fa5cf9dfcab97bda3dfa61

    SHA512

    8792152e1ca65e4e0aef04e963768b326d7fec5365f650e03aa48ebf6cf58d7e565b14150d4ba37b4f2d4e2bec14426fcbf05970be07c0a513608218f4337474

  • /storage/emulated/0/ddad/log/na.TowerDefencePlayEngFree.txt

    Filesize

    45B

    MD5

    2919414c69936f8d7b05a754e0bd8de2

    SHA1

    274b91d5f48f103d787da8a29ab367a0c09ea841

    SHA256

    ed3790539adb412c7a2427e002909c1b5bee015ab5139ecfbc7beeea89241efb

    SHA512

    f26f87112a9484b8a7d3d9e122aceb84ec2c82c8cbef10723e624e77cfd342e50079efc48eaf4791cf26289ed449aa75710197e6b7024537adf7d262fa887fcf

  • /storage/emulated/0/ddad/log/na.TowerDefencePlayEngFree.txt

    Filesize

    41B

    MD5

    a781dbc8391cac0839741be3ad098ccf

    SHA1

    c063c397a53a42000c54847582772c94fcffe9b1

    SHA256

    bf9c7a3134698114a84d0807051ecf5615d2407b91f118bad4930e4871e43837

    SHA512

    52207f50756077b7fd8e8c0ffcddb03ec98897afc2283a756ae75694f2db159ed45b929057a5bd1768eca3a7dbd028b0f911484d205752195bea877d2cc3cd0b

  • /storage/emulated/0/ddad/log/na.TowerDefencePlayEngFree.txt

    Filesize

    75B

    MD5

    47cd94f14f15e949d2b079411cd76aef

    SHA1

    46bd0eb3fbb4ce02754b48888679dd50632bdbcf

    SHA256

    011430171c15885eae1f509f9a68d11b70b355d821e9e06ee58d39f3be5d9600

    SHA512

    25618429ccab4f8b3053a3926c0706f0892a356101193e32ba3092644041cddad33e55bd95d5b85d9f94e98f1f9781d32d5b24c93c47840e2577fe814dab5cf7