Malware Analysis Report

2024-10-19 13:18

Sample ID 240602-s3cvzsgf72
Target com.noxgroup.file.manager-0.5.1.apk
SHA256 854bb6ecd4b31a78b21fd837d48b549ede52e23efe80fc0d455bc73f51530e5f
Tags
banker collection credential_access discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

854bb6ecd4b31a78b21fd837d48b549ede52e23efe80fc0d455bc73f51530e5f

Threat Level: Likely malicious

The file com.noxgroup.file.manager-0.5.1.apk was found to be: Likely malicious.

Malicious Activity Summary

banker collection credential_access discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries account information for other applications stored on the device

Reads the content of photos stored on the user's device.

Checks memory information

Makes use of the framework's foreground persistence service

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Reads information about phone network operator.

Declares services with permission to bind to the system

Acquires the wake lock

Requests dangerous framework permissions

Checks if the internet connection is available

Schedules tasks to execute at a specified time

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-02 15:38

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers. android.permission.BIND_WALLPAPER N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-02 15:38

Reported

2024-06-02 15:42

Platform

android-x64-20240514-en

Max time kernel

179s

Max time network

198s

Command Line

com.noxgroup.file.manager

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.noxgroup.file.manager/files/audience_network.dex N/A N/A
N/A /data/user/0/com.noxgroup.file.manager/files/audience_network.dex N/A N/A
N/A /data/user/0/com.noxgroup.file.manager/cache/1655145693758.jar N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads the content of photos stored on the user's device.

collection
Description Indicator Process Target
URI accessed for read content://media/external/images/media N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.noxgroup.file.manager

com.noxgroup.file.manager:nbads

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.206:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.187.195:443 firebase-settings.crashlytics.com tcp
GB 142.250.200.46:443 tcp
GB 172.217.16.226:443 tcp
GB 216.58.212.206:443 android.apis.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.187.195:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 157.240.221.18:443 graph.facebook.com tcp
US 1.1.1.1:53 ssp-3-9f58.trnox.com udp
US 1.1.1.1:53 www.facebook.com udp
GB 157.240.214.35:443 www.facebook.com tcp
US 1.1.1.1:53 firebaseremoteconfig.googleapis.com udp
US 1.1.1.1:53 ms.applovin.com udp
US 34.102.162.219:443 ms.applovin.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 34.110.179.88:443 d.applovin.com tcp
US 1.1.1.1:53 rt.applovin.com udp
US 34.117.147.68:443 rt.applovin.com tcp
US 1.1.1.1:53 configure.rayjump.com udp
GB 143.204.68.46:443 configure.rayjump.com tcp
US 1.1.1.1:53 cdn2.inner-active.mobi udp
US 192.229.202.72:443 cdn2.inner-active.mobi tcp
US 192.229.202.72:443 cdn2.inner-active.mobi tcp
US 1.1.1.1:53 hybird.mtgglobals.com udp
US 1.1.1.1:53 analytics-tcp.mintegral.net udp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
GB 18.172.153.119:443 hybird.mtgglobals.com tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 1.1.1.1:53 cdn-adn-https.mtgglobals.com udp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
GB 18.165.227.37:443 cdn-adn-https.mtgglobals.com tcp
GB 216.58.204.68:443 tcp
GB 216.58.204.68:443 tcp
US 1.1.1.1:53 ads.api.vungle.com udp
US 44.198.206.253:443 ads.api.vungle.com tcp
US 1.1.1.1:53 prod-mediate-events.applovin.com udp
US 34.102.162.219:443 prod-mediate-events.applovin.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:443 config.inmobi.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 new.ads.vungle.com udp
US 3.230.111.41:443 new.ads.vungle.com tcp
US 1.1.1.1:53 ms4.applovin.com udp
US 34.102.162.219:443 ms4.applovin.com tcp
US 1.1.1.1:53 adx.ads.vungle.com udp
US 23.23.224.14:443 adx.ads.vungle.com tcp
US 1.1.1.1:53 adx.ads.vungle.com udp
US 18.209.140.234:443 adx.ads.vungle.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:443 assets.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:443 img.applovin.com tcp
US 34.102.162.219:443 ms4.applovin.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 34.160.119.165:443 img.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:443 res1.applovin.com tcp
US 34.149.87.163:443 res1.applovin.com tcp
US 1.1.1.1:53 telemetry.sdk.inmobi.com udp
US 20.39.59.149:443 telemetry.sdk.inmobi.com tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:443 config.inmobi.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 34.102.162.219:443 ms4.applovin.com tcp
US 1.1.1.1:53 wv.inner-active.mobi udp
US 35.244.136.26:443 wv.inner-active.mobi tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 34.160.119.165:443 img.applovin.com tcp
US 1.1.1.1:53 configure-tcp-android.mtgglobals.com udp
DE 3.74.62.236:9377 configure-tcp-android.mtgglobals.com tcp
DE 3.74.62.236:9377 configure-tcp-android.mtgglobals.com tcp
US 1.1.1.1:53 mtg-h5.mtgglobals.com udp
GB 216.137.44.95:443 mtg-h5.mtgglobals.com tcp
US 1.1.1.1:53 analytics-tcp.mintegral.net udp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 1.1.1.1:53 nl-new-cdn-europe-west4-b-hb.mtgglobals.com udp
US 34.144.225.12:443 nl-new-cdn-europe-west4-b-hb.mtgglobals.com tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 34.149.87.163:443 res1.applovin.com tcp
US 1.1.1.1:53 d1om9znyumzhxf.cloudfront.net udp
GB 18.165.227.109:443 d1om9znyumzhxf.cloudfront.net tcp
GB 18.165.227.109:443 d1om9znyumzhxf.cloudfront.net tcp
GB 18.165.227.109:443 d1om9znyumzhxf.cloudfront.net tcp
US 1.1.1.1:53 mtg-native.mtgglobals.com udp
GB 18.165.227.75:443 mtg-native.mtgglobals.com tcp
GB 18.165.227.75:443 mtg-native.mtgglobals.com tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 1.1.1.1:53 telemetry.sdk.inmobi.com udp
US 20.39.59.149:443 telemetry.sdk.inmobi.com tcp
US 1.1.1.1:53 configure-tcp-android.mtgglobals.com udp
DE 52.59.26.69:9377 configure-tcp-android.mtgglobals.com tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 1.1.1.1:53 nl-new-cdn-europe-west4-c-hb.mtgglobals.com udp
US 34.144.225.12:443 nl-new-cdn-europe-west4-c-hb.mtgglobals.com tcp
US 35.244.136.26:443 wv.inner-active.mobi tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
NL 34.147.11.133:9377 analytics-tcp.mintegral.net tcp
US 34.160.119.165:443 img.applovin.com tcp
US 1.1.1.1:53 ms4.applovin.com udp
US 34.102.162.219:443 ms4.applovin.com tcp

Files

/data/data/com.noxgroup.file.manager/databases/internal.db-journal

MD5 3e4e0db852208a232c9ab4a0e154d3c3
SHA1 7144b50dd5d7cc5f0ecb199690ac62751c5690fb
SHA256 c5ddd0811843eeea618f9eccd26c5f10db37628f029d2e41c6b737aa8b683d0f
SHA512 fe6ade45bd1ad6b84dbd6bb16fef1a01fea3494942e408c42cd8babb4f0ab0ed97c1f4d5d1a70cac31671bd9787601f4a232e09cc41344f6bdce2eccda0b2620

/data/data/com.noxgroup.file.manager/databases/internal.db

MD5 42a776716f329899669f6d761d626003
SHA1 7c8a66fddabe92a33367f14c29f13955149223c1
SHA256 7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
SHA512 bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1

/data/data/com.noxgroup.file.manager/databases/internal.db-journal

MD5 fba9c7697fc988ff19997c8f1dddc4da
SHA1 c481fda862d7b8a37decd9b89d92422a5b7b46b4
SHA256 6d7f2f5bdb4f717250d489f53b5da5e4fe76e679c7575c20bacc57ed13f6f26f
SHA512 5eb61bed6202490fee72f5d0f56633d6d1c6386090b5722f2e3b2e2ea0cafc45386ed49c7a3319256686a951439b840fc6e79fbd574f307aa26b66d02f55b9f8

/data/data/com.noxgroup.file.manager/databases/internal.db-journal

MD5 06c6f48640173a001976319d358c8000
SHA1 a66b925307ace5765e9a4723e98119b87144c537
SHA256 860abda2c612b3451339f434b21e0ff08e4569ce484788f73e42b7adc161d6f9
SHA512 59e62efb312edff42a6d0c7acee7870ace63f7f009477e9111b936562d7746f1aa85ebff578d5abc42a731376f6b232fc1a45e09710093359019ae70603ab2f9

/data/data/com.noxgroup.file.manager/files/PersistedInstallation7595409524461127206tmp

MD5 93addc471e14a798903d4f13289a304a
SHA1 88368f85471b2665c0d5ece2860d69cdfd6168b0
SHA256 83ebe739dc4ae3b57e115dd2309d4b2e450eebf5f83ae6faeb53fde8ea4b2aa3
SHA512 cd2a60312a8dad90c0e84664a2f080b9e428a7272476e76e43e76077c4ca04958f5dba9418f81c43471911f84e68eeb68e3100f6421320d281cf5730c5158b4d

/data/data/com.noxgroup.file.manager/databases/com.google.android.datatransport.events-journal

MD5 7073ee64b59ee238cc5b4964e68af04a
SHA1 cd4dac4283e3fb91d7c9dd2213fdfbf20596f9f3
SHA256 04d79feb2e97e4c627dd204fbe264107701ce29caf394f14e091a427d72b2048
SHA512 4c01d84d2abbb04ce5e708bc91b69afdcb97117024f774d261f0ffa893ce4c75285a8d32fb53a92de2dccce4f065f65283c3ffb36e094487368e5ea7bc5bfcb7

/data/data/com.noxgroup.file.manager/databases/com.google.android.datatransport.events

MD5 dde3a73fe0bf35ed83a22be6274a7e27
SHA1 2a473bb39bd1587fcb9206cd0729088ec55f2479
SHA256 f76f99a7c029155f182402a5e32afc6aabba37067b3fcefbb45fc717fd9758ad
SHA512 bcdc6f8d9dd49e0f5a268b2276419c2904cde9c75fd5845ae2a359b574516250262351f7ac9ef69801f79e9429c2b528dbf06bf5bb092c24532a14f034542b9f

/data/data/com.noxgroup.file.manager/databases/com.google.android.datatransport.events-journal

MD5 a0ca2306c096af4708749aba69d36871
SHA1 db977606ed463721bf9abcf5d04544eed07bc7c2
SHA256 60977bf5c277c992af10007840ef63049a5955f20a85ee19948acc29d1476532
SHA512 6e1ede4c93adb9924f2709cc4671787b730eca6e51e16676530185a23654a467cc4b326402adff978c4d70e6ccaa35380a5d15e42d262103a6e02339a5f903bd

/data/data/com.noxgroup.file.manager/files/.com.google.firebase.crashlytics.files.v2:com.noxgroup.file.manager/open-sessions/665C923403370001145A9302655748E6/report

MD5 004a44ad523f0344f7241999299feb40
SHA1 c35d43c2f57d6ae09302dc234cfc46ee87beaf4c
SHA256 5f83c6093e8e2a30c7ea53fdbbb46cc64ad734aaa9c184ab7104476fa147e5ee
SHA512 6fc1e23e2092e4923181bd10e880eefb4dbae12ca8d6870e7b59fdb8c735612cba2ed540934a3223bfb50ac7118cc7ec015f207a881cb536bff4c93260d315b9

/data/data/com.noxgroup.file.manager/databases/com.google.android.datatransport.events-journal

MD5 a8354e322bd7f4d0f99c44f73e364a14
SHA1 47c235f4ee724c137fd63659e69fe305f1b24e41
SHA256 1baf71d5df0293d32b60df6c468d4cde0da90403a13886dd66528744dfd80ae4
SHA512 d3669be4948f50435e65daeeca698b4df947277fa814d8d7e95b5234d24da3e8f38ddf882d40094de5d699cdee4b665e80d455757bc86b43a108f614f64cb920

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb-journal

MD5 e5df675e0f054b637db83a7c07a785be
SHA1 d9702fc25cb82683c9807d8e8802e9d9d67e459f
SHA256 18e18ebad98555be9a2064c8af36ce862050d83b34e23507ad2bd9d7326f6ab5
SHA512 7d2a9611c9f5fdc5290a6a2b4ca2dcb1bd19784fe80c963dc1b442e2f431a5b36061e668057bddc16834a215114e8a8e9dd08cf43c2f6f20101ab9eb887f916e

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb-shm

MD5 dfea4f9a562d22c658ec695eca31ea04
SHA1 2e48be6baf86078d93f14fc38fe9f395c1c54261
SHA256 a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b
SHA512 8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb-wal

MD5 87a026612944286f7df7c472f77c29e0
SHA1 43e5a17f6b233d8a0f57385c3f5521d9a0ae56ae
SHA256 e762740fc1758fd81d6f2617376f802a512eaeb93045c2254caf820965d6d402
SHA512 11b981c135d07911df443130abf638a595326ca3675b15a19ffb2bb72ba75f848cadf38ae5b323acc401dad0ec98d4ed83e2941100461c2279e652b5421b11a2

/data/data/com.noxgroup.file.manager/files/.com.google.firebase.crashlytics.files.v2:com.noxgroup.file.manager/com.crashlytics.settings.json

MD5 caaf0d533a6ca0faf41505aac141c8ba
SHA1 cf095ee113f502dd8e10baa9819345fd8216e8e6
SHA256 4b532fede234b139a7f4461df5dddd75be1ac5c5d1f94edb7d95012dd11a29a3
SHA512 b12407c691a811c0a357fedec86359e51c3226d1b4fb116b158973161f9b6a8f8d490e5cd9846d0aa42a7ad67ec79645776803ee389dda9714b66e4fb65af68d

/data/data/com.noxgroup.file.manager/files/PersistedInstallation2867169859805887101tmp

MD5 0fc1e83f3633b8e340999e15f4efd348
SHA1 84fb19746d7321bf82bf6e0338cfb97f4a15a7cf
SHA256 c62e0895403ae9aab63f589af4e56813819b34fc78588713be402991de777517
SHA512 4e45a8ef5d0d64dc48ea53e0d8c0ec4915831eed36557ab6e7e40b9effe84e8f991177d80b1fe29543af01a3a3936a2020df2c4047ff1f2a31ce94660093a21b

/data/data/com.noxgroup.file.manager/app_avlsdk/sdk_conf/sdk.conf

MD5 4ad09bd5991dc08e06a04688eff69f9d
SHA1 6bd6d9abc4e9630105a4346836dac69428bdcf06
SHA256 25533ab1dca1cb97437afde7297575f234c0cb147dcd986a635e2ec05b719a0b
SHA512 9dff06a29ef53af88c82cd9773753f7584d921125e6e5cab0278bfb6c0bce49e23804ebfe70c251882e88dcd543002c75fe14bcf842d96651d990940a5e2590c

/data/data/com.noxgroup.file.manager/databases/recents.db-journal

MD5 29044c2b9ab3cd1c7eeb54edc914c290
SHA1 35038b5e1ade8189c278db6313dc3e2f68f2f324
SHA256 a55a524be53e24b33fa8411af8416b55ed0af95f81ebd0b3ac0b5bce5f1b9c9c
SHA512 c5c3eff806b82591a9cc65d1c26bc05315b581909f1ccd2fcf595fa526fa9daeb759394cd4146f604ec20d30a93476c3116a00b14f8a2faf5cc6ec652874dd9d

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/conf/avllib.conf

MD5 428c77fa1a27890bba7265125e21b601
SHA1 0759386ece45551be25e521e971c22a40d843eb8
SHA256 f559d906e19063cc30039d6cce4846797d4ff67ff4c95fb8c08cc8307e7ec30c
SHA512 3302c81477fe13603876c0fa0c2ecce1d4465d0f4bed1b417ebad7cf76c49a9c7df8c69d45264c5ebd10b01807c17a29193f730b9c2c0c14846b427ed74a39e8

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/conf/liscense.conf

MD5 f7b9743c86d91c25542ef553b046d05f
SHA1 c8880fa609ef83ae9948fabdcb5f7807de0d7a0d
SHA256 be1a8c342d75ea831ce035d81e56d678c150d0b6b1debe685547ff36c035e680
SHA512 6cb1d9a5640147118fec25ea486c1d9246d93523defa6be862667f7251b07def8d20cec16492984959ad2b3064938eabdccaeec5530daae8250c9f4b7ff9fbd0

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_sfmf.avl

MD5 cf3d478a5ac2bf3f0e39bf525d55b232
SHA1 f94fb353f4fa07f25b9c9d0ed4269023123b3038
SHA256 dd93590979fb1fd03455b9f90743b2f15b6fb030be75b8c7c55dff090cecb316
SHA512 acf6d40a6dbb4faf4c452f2fc27ec20df9a2a4b7059962c45247dfabd0671d8e9ddcc5435aca98ff69420f4dcf224ec5012a9b9445aca80d5cf619409e754639

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_dhc.avl

MD5 8d4edd61eaaa8d4b8ee171dbc6f3a770
SHA1 32e31f3033d9c2a4aa471d2aba949009d84ae0c5
SHA256 29ddf1e6b8d3a83b0fb93ae094d3f18fe422bbd26434ce98fe719cb3d5c0b9d7
SHA512 042212670b686fccadb80551fa5cd8c686ec4a5348d04ac79bf98e70a24051859589b139f94b8a96a305e8f8f50192124903565a114975d6f6eac36cc7f9e163

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_kw.avl

MD5 982592b4317e1f5dd3b5005dcc7bd669
SHA1 f14106fd8cdd9a086db475bf8c4950f2182db34a
SHA256 eb849632f716fc2716b44129e19208493253dd90697a28d402104170fd1e457f
SHA512 0f6298a186f8880128326ab41e310f1c558fcd643dd9e3626177a270b5f00a0659f8d0da816ad219355b4551764eacbe729734d4fe51b759fdf4cd7bd3f40a46

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_white.avl

MD5 57571a64590c5239c275ba612a972823
SHA1 ed7e7339572e7d561765d46221b184a20cb3e66e
SHA256 b4151f5d4658b9a992c537646e4141013b1a68b1221f88d84168352ef708eb25
SHA512 798ef1f769d9d8eb8eca7cb1ab9d711c779eb724ed86c7069810ffcb6d3900afb35139907ff31f950eaee207599f82e6f68c7d0cd7340212f1a9e72ee3b26218

/data/data/com.noxgroup.file.manager/databases/recents.db

MD5 3306849c80ad467624d8171abe14f293
SHA1 9f92b0fdbe189219f59ce67dc87b66c33a942ad1
SHA256 cc2d4c45ac62a789ee7c6e2770945d39b68dd0d1770b729c56ddd4e8c7c17c89
SHA512 808f3c3b62b0fa0cfee85d751735deb3b09c483d6139c9c026307e1bf4ea28167046de57f949c1e730ee46c12db6730c396798b7ce34e3db02f38bb3e52d1526

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb-wal

MD5 f2a126634dfad1860754ae679fac8e59
SHA1 dc42b0550412c54559a2c9d6c703073741d7356d
SHA256 f4c4e1b19fb89631a8ccef8337e1ae4fe073bdb1bdcbcc6b8bac16b0541a77c8
SHA512 07fd47eaed5c6d111fee07d769ab64ebf501dd14d64eddff3dccaca502ded7d34ae08aa2cca9485bbd603e78fa768628a22bc474732477f988d90426b6a375b6

/data/data/com.noxgroup.file.manager/databases/recents.db-journal

MD5 e559f0006f05f80abf43b386a1bd954b
SHA1 4b3761c3bf41b1173a15679148089ab162dd9d5a
SHA256 b24e23f5e3153d3288dd7d280a1ea1a927797b5290a4e8727fe21c1f66edaf90
SHA512 70497d01e9f997d344b45f68ada70c34adf5f6f3b813443cd1514c75962c79ffe60a9e5e849284d0e63288340c0fbb10e6c5885f6b1e038414e4ce213ef25ae2

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_herui.avl

MD5 cff6c2358c4b14f28826bbaf871c7cb3
SHA1 cd30f639f93269b8527678bfa37a9435ce0a9e89
SHA256 d0fdb97e10863636c1ad9ba799588058c19f2b683c0773e56e3eb8d629868e33
SHA512 f20d8c6047034a46ff8fcd10899e28cfe3501cb8dc4c3e16a47cfc475e5178697bd9591e2811571c16a0c91818ad04b9dc452a9dc63f23c123d7616427bb134c

/data/data/com.noxgroup.file.manager/databases/recents.db-journal

MD5 8ca8868fb1fc33b562adf55473ae327e
SHA1 6fdc7ffa86d7d18db968f978c0acc0c4fff0abe4
SHA256 d09e6dfb888b5f2129e89808acf1d7c85beb877b1b9f136c23446505d21dfea2
SHA512 9689362305e39fb4e4d41edf6fbae4a7e6a5ca7bd517f9cff96b17d9a11e3e8572c26d1333b458f5f88611e592565ec541df1889fa49012bb0acdaa86c062d86

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_des.avl

MD5 e5b6a981ee3886e195225ef4f64364c5
SHA1 0198adf8a45f801ca34c17cc12d91c7a399f8abf
SHA256 082ca8ace01007036350748eac258ed4693e675d71f36953fe606137707100f0
SHA512 afa866e402807cdec57949bd32cb6dfab7e70c6c8970bd1f07b5390c8ff9fee8ccc217481a2e73be406f3fb5d53d540b60b2d6c40b13e934b4e0f2e784d36711

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_amc.avl

MD5 956229e66e48d31f63f67d40d95ed45d
SHA1 f7d04b61fc88943a1395c49ab0f9cbc1c48e4ee0
SHA256 13aea83b80762527b77af51a0aea97e5934c88ef299dc2672d07b981c3fad595
SHA512 d5e4ccb58f3e70f86972247c0c33223a40b48e667255c864d4fd2ecc4a243c5775cf40acc02de9c71ba92a8ad89772b86016b941296876241a530dcf0cdab2e5

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_apn.avl

MD5 b8b70f97488f4ebf1a2e0ce812000b67
SHA1 3c1f6ea63895a59bfcc2cef0ffd5af3ac6b3edb4
SHA256 500c7aa9757d0d17ca8ae2299ebb6dc0e4466f36f98939f3a4457d6c4955d372
SHA512 fa8eeb20cd4ec02857b1d9d630f9489d84f476ae18bbd93a690aeb41979c0f01e0f830430db4373217607a0d24af226402c842f22341ec0b98e05629571caff2

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_pornware.avl

MD5 66e197af7b41844a5f6d6af098fe6a81
SHA1 e0b27687407056993967c24faed2f54be10cfecc
SHA256 692829336bd7e381eb6485e5d67ba361de187c78ec5241d28c2cac3e3e73d983
SHA512 66ab5c193e77c31679f03d7c74b2b8c579c30192818cdf853a938bce5a8dd48515dab4b845ae7ceeb3ebd2b815c877487b583d914b5551440a9970fa44afd04f

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_ads.avl

MD5 6b3421a1bc238cc54a239ebd815d84ff
SHA1 4e76c57e09d79868bd54aad94bbd052e84413ba9
SHA256 db5911232a53efc149aa20af06a6f0e7205becd3b0e22eca3b74ce2e3de11cb8
SHA512 b490470ac170e633bc99eb560f32dfa295a15e8fdf4ee9bc7f03627bf13e1c35eb6692882277fc4c5befcdd616b5246bd8b495796b6e08ff3bdc2c580ccaf0bc

/data/data/com.noxgroup.file.manager/files/.com.google.firebase.crashlytics.files.v2:com.noxgroup.file.manager_nbads/com.crashlytics.settings.json

MD5 bc55791a251818616bd5a9f0547f5cad
SHA1 bd1e6507dc1cac5e08d068732cef57572fc0f6b5
SHA256 d155ce94061b3163f35f21ecfc80736198527b8d6b909f1013d5cdd01f806b45
SHA512 66e761ea420073e8c62dc17ee026f871e40366cbda30704361789a3658f8b9c14c076807ddf38007aef7150cb189ecd82cc622990a699e3f24a60f2c40dba503

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_sign.avl

MD5 c6307a6e5808d00d47993a18ee73af5a
SHA1 d8f7e6c6b2667d5d1aa2797ef9590a1fba4f4dd9
SHA256 352b8bc1b0a193315ef7ca080728d66cb32c705316b837f97160110595476de9
SHA512 bafd6c5e37cab683d9545f12d7865ea3e3eadc1b1ae983299c73e8dc864c2c99d4311204d0f1e147a6eda8066712c710f90153d7675536bda7b70d5b20738105

/data/data/com.noxgroup.file.manager/app_avlsdk/av/avl/android/avlpk_sgnl.avl

MD5 efbdaf63b3da8b3cef991dcbf0a5d118
SHA1 8beec4cb0fbf42071a1e5264b848972b488bf57d
SHA256 66bb764a60526615bd1a43caef59f76263c769078ec20a6d43d8a0cb91b50957
SHA512 a11da2cd18b8ed62ed67454150d4b6d4426e0985c584bda1133fb813d5a992ac44e895d5949914ae1c08c7e929e687e4761cc4dbdac5b1cf23dab714da0f3961

/data/data/com.noxgroup.file.manager/app_avlsdk/av/kw/common/payware.json

MD5 21996035ef665ffa22b7316c4e73b7bd
SHA1 1229540f8c00a4d323e40f546dc25b198e77294d
SHA256 26c975e38baee7e2b3651d37b5de6bf3df2680021724c8b612464dd0c1646a8d
SHA512 c9a6fe50e77db1022c36bfb2b69b72098ce7c450b619cda15a0ae8af86765ece48fd9c089f600b073584e9673ead5ce18ef714caa48b51dff4e19e59590a8a81

/data/data/com.noxgroup.file.manager/app_avlsdk/av/kw/common/risk.json

MD5 8321d133190d2d30aefcffbd835993dc
SHA1 62225d38dcb924d05029e3d3520aeb90e831c8c1
SHA256 b75ed7227d35107ec1f2f4a84a3e60b50d93f7d79a586ac6eb6d7a40cce905dd
SHA512 5aadefd45878f7dd5b90e39d2398975afcfceca7b5aa61cca1cdc684e758f26d50fcfb09499510bc693cb6a83c431630345ea9c3d1c8425e329e95873b2ee699

/data/data/com.noxgroup.file.manager/app_avlsdk/av/kw/common/adware.json

MD5 1447fa18e6e48077f69356e8d021baa2
SHA1 bb52e37d5f6203f6fe7192b55faef64e51f342c8
SHA256 0a12bbdca076c43707906f22903db160dbeadad7b46a9e51ac8fbb188d1d1336
SHA512 b7be4026716827fc5c01056e66be11d36a9dcdd58b251de653ebbd171b4a5091efbe75719cbc082647227e89ffb566492c98b023f1f0907b184d36d5dd02a66c

/data/data/com.noxgroup.file.manager/app_avlsdk/av/kw/common/malicious.json

MD5 61ead5aa1a9546d57a712617ef39a1ba
SHA1 53d3a29184ffa51492d674b07db4c8a25538b53e
SHA256 117a746ee61bc54ec68bd7f8ce47c161cff3c3171d1f0cdfad59ef2760784d05
SHA512 46a0cae013a37a904c7cb3256b9cd8427d4608634b2aefec81eecc4aabf62b8057e6b9f296873f870e5b1f90910622fe4257e4e46fa96cfffe464c00d076dea5

/data/data/com.noxgroup.file.manager/databases/avlsecdata-journal

MD5 7a2d91ec77995b744546487105a04696
SHA1 20008ab6a453c0657d33049d936b9c4a5ced7009
SHA256 5db78e5983edddd56783bd6edefbdc35d0a79ee1b8d2f03ab8ddca0af39c611a
SHA512 11b5501074d5b1df4280c6ac4d7c8543774355bcd63a439d13caa917150ef553495936d52aa5c6b850d4563b8ebb1e6675d0fbfee8975d57d5e480460a1ba288

/data/data/com.noxgroup.file.manager/databases/avlsecdata

MD5 9377e6c90f091159374e86b6ccb8b6eb
SHA1 41d6f8a7a816125ba49ac533ce5eb7ed7ac9e2d0
SHA256 cfc53317341c9bd5e79aa865cdf431a85663e340c331c23dde27021e2a252eb5
SHA512 a16c5d203aa03864e72bc59785c6d088348823140976f5d3c27c17cb3b57fe76546ab9cec941f8970fea0e2988783e54594c2115b9a5b39e850f3318b79d2c9c

/data/data/com.noxgroup.file.manager/databases/avlsecdata-journal

MD5 13c90a732bc78a7136f62ac8afef43ba
SHA1 80c011020d30716278323b45bbc1fef604bc698e
SHA256 6e2ed28862c23d835b9b8f8c314e02b097788896e5a53047541810d3ab774bf5
SHA512 8db4dbbb2a4f2c9a8d50f868064880b83d319dfa8c6211e8fdbe5dc4ff82d951d3db97c6dbe09f632061a872c8f368ad72691e311bf56dbc80713c0229104b33

/data/data/com.noxgroup.file.manager/databases/QbigfeHNrVAebdN.db

MD5 7c4a23b58e8060aa56b6260c9151d9bd
SHA1 31e4b123c5757a28769a7c7c79892344451c7628
SHA256 a209ec3ede5ac3913be7618dc09c7e60dd97c9dc94742245cffc1928016c8aec
SHA512 579fefbde691fedc63c9c09cd7f9123368867810275198a16ba6c6c5029648ef659bb4560ebc431d735783d201624264a63e68ac0f1574e16ce7aa30f699f0ea

/data/data/com.noxgroup.file.manager/databases/avlsecdata-journal

MD5 9795c316bc09069ebdf6d990c21d49e3
SHA1 1cb4c5e7ed4753686862ab94a5fd061bc47e9dd0
SHA256 127eae19025860e20badf4f7bd7de62dccee5cc5f64f4cb008e024b1bcc174ee
SHA512 805edc61a310d2a9d3fa2a17a018852b45e7231b045b117f04e1f6bdb24674ba1cd2d9740fcd71919d789f0949e31f2525d69d20d3b7d8f0ff3d36c840752791

/data/data/com.noxgroup.file.manager/no_backup/androidx.work.workdb-wal

MD5 69153a8c6c474756ebf394e9c816ef07
SHA1 bc03cef2be8e4f833e8f4b15c11f3918483076c2
SHA256 ab4434bc124e4fc4517ec555532ba1eca4e0b319f2984c42af963f2281fcf320
SHA512 915a96930063dc37cb9a8dc5e17de6f6d5e3e39cf06a03993aea24b9c1459d9ccd0c66a39bd3a7d26c94080582ee687b94a48bb556c43dd81f602419ee22e411

/data/data/com.noxgroup.file.manager/databases/UYnaQSifttTfZesk.db

MD5 8c8280a6bf48bbc3d87945137d4321cf
SHA1 58409f8e2d948738378bd82de9b1c792e4340084
SHA256 41b4be8c3ad1ff315c660c1efd217019ae4af5ef0e83f224f5f7cd2cdc180f04
SHA512 b103fe676af68298a062f597d585e50431715ce2fbafd6021f32080bc6cc820832fbeb6e891853e4262e59dbb111bee5f3e1f4fa35f8f2966c83ec6a0f44219a

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 5f7775931c12a69bc82d3a9dbfe7a438
SHA1 d85bac44388d04dd3982b11f0a138787e01b9657
SHA256 7310fe3f4295bbdda55429718adb255fa86b180509722d91896706cc2b673382
SHA512 6d8be99bbf5a89cb5a2952e7ddce5e94aea2e30923a7c796e84b3975e1b9bca3683f2661c1dd08a167aacd47f3e81d5d5fc24e3638fc5fb0b3449601b3bb28b5

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 4423afbafabd9632d0822b36b6a44ccb
SHA1 d7aaf902f069157232b8537ac541a0321ddc68bd
SHA256 1d494b55f24c8ee8a7f84e25beb39b815596da8ec24d354070bedb631aa750da
SHA512 efd6f5eed69a3695e3cda4f6a06bee495476bee10a98aac9333fc799a420efc892189d6d338f7c7e6f74454089415b3f47f597b8c079bf35a7af4f82f4a6835a

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 33b663c36c65ea548fc59a49fd2e3c5a
SHA1 03c8f162da919de9c25777177966ddf48d7b1a00
SHA256 239f8e4c067d2b1cf1855dc8c8cd66c0ef8a9b8e6d76a0847fe45ba6dbf73a8a
SHA512 1d3a8a291d4ebb26ed34f6f581a9590d2b0fc93f7f7952e094148d95f6abf21adf0e23c4325f0c5b454f675796bcd5cb2a9199e7f66878898be63cfe8d2dbeb7

/data/data/com.noxgroup.file.manager/databases/bfGJjfzgAjOKjrWe.db

MD5 965e387f83deade0e8d83d26ce0260e7
SHA1 357a23b34d145d9d8d812295bc676aab0ce6dfc2
SHA256 b7f815b072a8b26d37d165ba88fe062fc79c006550207b58d11b589d338f6ee2
SHA512 4eb7b67a9fb8a707b9b6e85c111877ef2db848028124bb97c8535ede7e26355375003f2ac2992168dbae40650636554662ea25a556df1b7138f666fb3bc84a85

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 c62749fd249d28a20e08ce872991389d
SHA1 bb5542c709d4cdd812f979075122d81e95e15549
SHA256 be285e7e22cca9f7a752180c76e43f42a5059eebdbdc1b551cbcab9b86488319
SHA512 2ab67db148b2901e689eece42fea30b0d336ee71b9ba4b44c4365f94f871a77b93d003a37c75f5497afc15e726e93575ca2648341b087473ffc905fe4d86682a

/data/data/com.noxgroup.file.manager/databases/offlineads

MD5 239006add1ba577909bcfcb8be5ca1bb
SHA1 14114c7ffb8cad0495007eb2867a34f1b18cdfb8
SHA256 23a3f74126a454b9541419ad1d544f6b28c569dcb8b2a42721dfcc2559f5da04
SHA512 4264276bd70a016f379ed383af65ea779d9be2dcc57cefa69d6d07718aaef8268d2b7971d5232a162565910d508aa91fb128b2407347744190f597884440c3b8

/data/data/com.noxgroup.file.manager/databases/offlineads-journal

MD5 bf7df3d5b1964352489d44f765176f30
SHA1 def8aaf253b7efa6476ab62522b00fc3d235a4f8
SHA256 94abdbb02678cf9bce705954beebb75dd5fecb3d01efe4438f96c1e6af769732
SHA512 f0e7ce873790baee5966ad3218ec10e8b3eda98b9b4d3605735214a46c4c31104fb7d7ef0e452f1e3c0e3055ea8bcb69ca1ed7e76e69bd503446a12facc886a2

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 ff5509ca971b224d1a4c083a3232ae5a
SHA1 72bc2ae26f2ce5b869e91b43f5f1bf3685957969
SHA256 6938fe9d5c9c48ce1f9db3771b998d69567fea40ae5b3fa4f87a6fd8e2ceff64
SHA512 32d24d52c63307714de14731d98d5c3728fed6a3d96f5fd3d3d08ada2bdf08824f9fd14ae7ebf4c93503ccae904034e3ca00933f6375e850a5ec52f0893f8735

/data/data/com.noxgroup.file.manager/databases/lnLxbiauMNbDgzN.db

MD5 765dd588acc2ea03187be5ddce519011
SHA1 8188f62214a6ad0f2897bc80316f9733b872c507
SHA256 b930e87443f4b2e08ed9aca727fc80e1069b41cd2f16db8b30eb99053cc0716d
SHA512 d54027095834576909f114015814721f5f66bd5abf660659d14bb80aa94d36f4928301e1bae7fcbfa8974c7590ec2e21b4703c8b149d4c9c4c21d524cfd84f37

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 b5bc897d8e785ea8ce66f6c8dc5d7800
SHA1 5bde84c44c9317b3b4943d7148f44d2a3ae59820
SHA256 8165a30cf1f3c6a0fba448ea73a745b483cc0df14962c0bd875a4f721688b33a
SHA512 89defb47e3bffc0ba1e27693d88030e1cbd4c6938d26757caad2997f00dcd8a83bd4fe1bedfb785e68715cc2211ef3779b030f8da726f97e0c2061c29c029760

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Web Data-journal

MD5 0157888fd6bc217fce207d65d8743fa7
SHA1 f75fd9b90e95edd1d3a06489826662df0ba79d90
SHA256 4a93e6800a82dcd8c794b8c96aae2dfdc459361c94d9e675208b21a8433a9684
SHA512 b9fed08f0adb1d0c91468bdbc256154d7227fb4d8c980c4009e413ad837d99e5d21f369402336e6b9feba3306a3b19cc7fb50d17218db35e3dfa0dbe287bad60

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db-journal

MD5 9daacb5525cd6d218a233fd410b5029b
SHA1 7d3eb9141761a21f48a10031a00754b8e15f231f
SHA256 2a4a8145c29921385ea2b421c0d315308c4f380239f6001e0c680a5ab7d5f071
SHA512 54ad2cbb2820ade908fe7f6b0816fd3c19e7671adde4b94ead76945b65037056bfa3d8373ba721a6ef71da5b9bb163fb76b5f45959b7e6fedcb73ce90cea7652

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 097df9b4ef0a6396e2bf67f0c11d6b5a
SHA1 663708be1f99fc2fdb10c20ec9c1f4bbd3c0ce6d
SHA256 c8d199574cc90ada41ef05ecd84c964d2a77e5036e4c72a91841f4b2f37e4119
SHA512 f97578c41e029297799bcf145e85950898097fc0954fc684d4dc63f2bfa93d0051371c38f18c7c3e7fbcaf2055f345379288dad99b7e2f028bd864f082c21ac8

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 9b7990a2b1e8d44b4c4282c0fbef5864
SHA1 7a3cf665c4a1122c8fbb8b72bbcbec04cffb17ab
SHA256 d1ac0fa8a373b48bafa790773c5d9dbc683016985c2a14f11ef7d202283b63ac
SHA512 d57c1160d11d680ec28fb3cb275bec2b21f19ad41b08e5da0266545c4907f14cf06231f66a258195bf4e5e4014e561369d102aa24e0ef322a5a468983b18e81e

/data/data/com.noxgroup.file.manager/files/.com.google.firebase.crashlytics.files.v2:com.noxgroup.file.manager/open-sessions/665C923403370001145A9302655748E6/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.noxgroup.file.manager/files/.com.google.firebase.crashlytics.files.v2:com.noxgroup.file.manager/open-sessions/665C923403370001145A9302655748E6/userlog

MD5 3418e1e012474b9977ef0802d87b5086
SHA1 32ace9f02ccf85afaf87f66e6def8ec8549dd0e1
SHA256 de0acaffa33f0dd322c82e388a7a6597e05aa919eb10c0fe8b147599d727c4ca
SHA512 a4035e88ec6dc35347fbb5a287e0e48cdcd2df5a31084a374e80506a10930ff80a3765cb9b207976bdbee4709888cd9451e5b2e12727003ff190561d8043112f

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 443c5dc0b367afd0884c392ba42bf0e6
SHA1 7d1306219ef8ae6ae6387e67a5a676187f469c9a
SHA256 34b45900b29ce5232027e66ce9a769da4cc5ebf4ce78d9bf627903b2f17ecc8a
SHA512 36a9ff35eb5463e21399f98f9aeb95369110b295e0aef99b4b1ea72f2d565b69a1b57d97eaf5179f38077f207df26d3dd64babaa89168d8480c52a3b2577f6ed

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 53fa1bdcc4a0e4887043371c5c010e4b
SHA1 f6d3093b3b4d1ecf519b392213f14bee94af4b74
SHA256 65fc9eeb34a9cb28a1cb3c3e6830ac96303a1b1d21bdee833fd005d5d87c030b
SHA512 f1e8b89b53a3183c7cb5eb6bc54513d81e75d42e709854ee7f1914b94b3e23d2a65ca5bc8498b18d13513cfec1203a1b8fc7073bd622625e388fbc0169322b20

/data/data/com.noxgroup.file.manager/files/frc_1:697186758305:android:0ff433e58dfbd8d747cae0_firebase_fetch.json

MD5 e9bdd3360037c85c1ff1ac066b008940
SHA1 a0bc5e2267aa1caa0aec3e4fc909db353353bda4
SHA256 7d82347f7a2b8740b954cba515f92a94d21b7868d5ea618a4a8fd83eb930210d
SHA512 b9ebbd91b2aa1037186d34445c5518887e22404d61b8e6d604dc7d273e81bfbc3a032b599386a13d5ec5ba2632a750a09036b6dd0788f3bbf029506c459179a3

/data/data/com.noxgroup.file.manager/files/frc_1:697186758305:android:0ff433e58dfbd8d747cae0_firebase_fetch.json

MD5 2ca61f3dc549867e5d943e946ccb7b99
SHA1 b31f60c5d73063387e1500adbdcd050d0baea7c8
SHA256 af68403d7e3ee7bdd6a81bc8270c3ce0a23b5e9c6f7b2412af11bc959ce92c78
SHA512 3c18e18d288230c93af930cfd1b4a328d169542b200d2f2b8be3af4aa8faf1f0602a4e07e083936c0ee9dd0bf244cc8e24668a47f23108ec470f851d0b14f380

/data/data/com.noxgroup.file.manager/databases/google_app_measurement_local.db

MD5 37b92ec4157f73d9436b53aaa967c0ca
SHA1 94e498544cc1bce12e969e13761e87c62022af17
SHA256 c249058f82c3a6a33fa0a01107a75dd3219a5164598499898ee8c4365c654604
SHA512 240ad47ac5b124fc874e254edcf7866062be5ac135c460e0f86176f091a527d1fe688a795ee07da35ece407da1212d509ccf669c5ea6c12f4507f7c36a557aec

/data/data/com.noxgroup.file.manager/files/frc_1:697186758305:android:0ff433e58dfbd8d747cae0_firebase_activate.json

MD5 efdc653e0f441235a28e47bc4e222eab
SHA1 9abe504a331b5d65d7446b6cee8191edb67a52c5
SHA256 dc7a38023d9bde87ada7f2544f68b1fd575da5a741b4f660fed15bcea30aee76
SHA512 195d5285b76fc919e0a1ca312808ade2d919d8ac7f40c42c248b2d7d24e49f0236eda0a24b0c6f65c3295f6e1dbd3d546029e21838e74130011debbd4e4f90be

/data/data/com.noxgroup.file.manager/databases/avlsecdata-journal

MD5 6072f49dd44082f4fda46620697b33ee
SHA1 ef4857add39d83ceda2a44955041451bb8b1cfd8
SHA256 8ec6b42d4b9338e1ee35e30389f6488a04d2ce03bff924f186c85c919b057ca3
SHA512 053b508131a2f051b801cfd0056558b5c6f8faabcab425ad943eb1f8f853d2b186261d38be95dc1b04ab99a3aae23ded5e09ed1089d579809c6224d303c17856

/data/data/com.noxgroup.file.manager/databases/QbigfeHNrVAebdN.db-journal

MD5 5f60325d6479e4950e78f787b21e256c
SHA1 df47b13b7dc80b09b432d4de1ab3b8e1b1dcbe75
SHA256 a255f0e9e86eb1a9120533b5c88011a0e1719c50543e9ed92211374f28f93972
SHA512 06112760bc84f4ce4bb953becda9b1a83aec5b77b2e94727895b744903936861e2467d84345edbb8b581b311889889b27451fdf011ca1ef80d09ad41ff82a2fb

/data/data/com.noxgroup.file.manager/databases/QbigfeHNrVAebdN.db

MD5 78767df643f4bee2c709f0c6b732ceef
SHA1 1350e20168f644691fcbdc3138b76f190e299efa
SHA256 a82bd1d64a9d3aca4a2ba17aeb0aaa777671625c2cae9e2dfa4af44c8e3756ab
SHA512 b70531d5e95b0a1fe4ab07fa1c4df6bbcc169a818374b7b9f63b21487642e99d4382de82676388e2408575c744f64e7ad720d7db143576369c65987db35e82f9

/data/data/com.noxgroup.file.manager/databases/QbigfeHNrVAebdN.db-journal

MD5 e434cb891c0048dc79ccd0be8dd32151
SHA1 b853825065c92b6236e48a97648b6340f41149f0
SHA256 c1de7582988ef38a2295b884b71e92b772a9bc5f76af0b6b0411d06883bad8f6
SHA512 cff0eeae40f635395d1e4ec4d49e4c2ff010d013307b51b9498ddcc546fd1a277a84ce9b7fa2a328e0b3767c5c495555ea2a7311cf7c666197b249c17c639c34

/data/data/com.noxgroup.file.manager/databases/QbigfeHNrVAebdN.db-journal

MD5 2710e879a7b0781d8ef8e5a5e6b35f9c
SHA1 1955e65b0f84b5c7cf118fd0b2ff694af9cfaa6c
SHA256 70bb8f51e8554a2dcf42e9e97205f0bab3623190ead9bdbeb4ec8c77cdc347f0
SHA512 f5dfd497920482fc1884188e2c595cd17d050c93935f87d02eaac54fbe5b666af27e8f5d5bcc2930cd2a03edf9727dbe418f8d0fc81629f8d5a47e2e7a964abe

/data/user/0/com.noxgroup.file.manager/cache/1655145693758.jar

MD5 cbbc814209e3018127dc9520d9289fe4
SHA1 47279a9eada2237a2a926672b5a505764d828037
SHA256 5b06d7ad31c988cadae1b315463a14750135cf2d24ffab15bae6288e6a1b7f16
SHA512 1531af16931e3b4203b1d09eae4fc7d59cc7d8f554bc83de1585d5faaee2d0668d3ff04383a12d60e37ea431235801281e015afe92c9f79c1839264883c7fadc

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/other/mraid_js.txt

MD5 d265d6c539839f8034106635f3bd9b00
SHA1 45e82ee9aa8dfe81987d806cf222eabb19c4dacb
SHA256 61779e5e9b63efdceca3492897e0b02063c9c8f87cd1335cc735a3e56a1dd2c4
SHA512 bb49eedf3dbab86a06f918d3f43fbd7f2287bd17638301595ae5e40f0a326ed7cf6dbb28698d753632196c1fdb110cb2ce152c64ca19175efef7ead80d90692e

/data/data/com.noxgroup.file.manager/files/al/persistent_postback_cache.json

MD5 a5612927e7792641607f093050b775bb
SHA1 99216e1430784a2fc369f81e03a28e5f681735e3
SHA256 4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
SHA512 3ce4dd5f437b9405ea6e4d6bcb16512c98914b2dd15a01facab5fc68126698cc37e0448fac28408560552e9688ad1b6948e0fb8c9d11f893635d20e970cd9090

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/GPUCache/index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/GPUCache/index-dir/temp-index

MD5 245e5a439fe50d81970a54d025fe3634
SHA1 f301aa9371ca673981a40944b9fff5ed1bacdccc
SHA256 b42bfd136b54a98f69e8bb689b9f1d390781aeed38f3b8f19acf08d59e07c6b6
SHA512 20371336a1696658b78f81dc334a6aad817e16e036be6d2f8780ce044b086d7b597a46fc249aaf2e3d6d412fb5e0e5cb97f5ace98664d4a0753f838e072a4b89

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/f038e94cb33282ab_0

MD5 9f0b3e31dfc424a6b0fd23cb3f0aaf6f
SHA1 8935a3503bf0141c2a991e653d0837c95812dcb0
SHA256 6c5b006bf1ba5c51186b2356a8a3d335746f36d04f1b0fe9854e28d77a9896fc
SHA512 2bfb9d3696212f6160f385f02ac74517c19a2b1085cc3e436e215dda41df3952a36afbd29419ce6bb5e1df1753949dc37666bb9fe6c4a621d4b97895743d9157

/data/data/com.noxgroup.file.manager/no_backup/vungle_settings

MD5 82bc945a7f300879e5ac1edbe4f7c6e1
SHA1 4b46dfbd39fb3317ddf301e9156e5345a6a796eb
SHA256 fed60553482a14dfe0f3923b7235793b0778143fba0a59400d1800a03a818b07
SHA512 db37131c116d4ef93a5ae7a5b2df33a10a868d4c9db3d86fcf8ec3388a7c72c8785abe890fbfd403fc4d299b014b3221b09f4b89d313fef29fc1252ade275f1e

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/index-dir/temp-index

MD5 804b0045c5184a3ba8156a365e9d8a52
SHA1 3c8ee2a5a1286560e13b0b379013fa70d7e43ccb
SHA256 05fc5274be9d4ce47a8011440432cc78e457127e8c970d8b57a6dd50700e081e
SHA512 dbde55fe580c85c910a54a5b74ce2bf39bb30948ac3bf462c0591050187c4814bbba31d5d8413eb56044ef8937be13b6ae4fde6f8366e9725aa41e78e282a40c

/data/data/com.noxgroup.file.manager/files/ia-remote.config

MD5 b11cf772827945cf0244c1904d9d9b4b
SHA1 9c7332276c60c64286aaab985e886536047c2c26
SHA256 5dbb5f72a052fbf4d0c64193d8a4a0f39ae0a7051df46ff124e1eb0d5908307c
SHA512 75fb37e07416879cf52af7b61ea525b3125a796ff90590c92ee147ea2119d6002fbaa15d3d6a8a4e593cd8f5785e02cd3aeb010a48e5d0f095c1d4be91ba0096

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0

MD5 3d396de8d3b5b7a0336ab896f491e360
SHA1 ecb777b08b45a59050089279e29b4bf2588916ca
SHA256 dd6ffaed0e4c8071f919567d7f031990ee82acee1954d82e3a701b43563b51f4
SHA512 9757c0644b0a29c70a3f30fe672a033513a6fbcf157d329a1e4c6cbc8dcbae31a17e4de630bbe8561a0b531b1d3138669b27ea2d8d8c557f0113047212d3bf8c

/data/data/com.noxgroup.file.manager/databases/com.im_10.0.7.db-journal

MD5 e47ad8332bf95a0f06e4a436c8925503
SHA1 457f772072f2a27d6b868c0ab179bd516e313d61
SHA256 aedaab38963889ce2565160f4bad2142f68ab4ff01231ebd1dc80ecc94418be1
SHA512 ed8d12e073e34f40b887446560b0d8982292ea0fc89f22009572a9d14d896cd8857d98ad7f0ea39199d2585b0ffc4954b1727f7928df45f87e87aa46538a3b81

/data/data/com.noxgroup.file.manager/databases/com.im_10.0.7.db

MD5 48dccbbdd437be4ea4575baad0d3c757
SHA1 af877bffb5ff9779994871fd2b11f714c4cab6a2
SHA256 7e3b1e2e9662ba6eda7e8070fbad69fbd41cfe05641902d860a6b84ace02b5d0
SHA512 0de68040b5822563f3d04230867adb12987dd22b2bf8f4d04dc75f899e6838103cc9bef7b529b3823f21069fda6b48db0d1fb8968c56a57b4235ac85d3599f4e

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/dfe6b2497a7513ba_0

MD5 55fa25311ea2c7e63ac44283a1a10a5f
SHA1 40b9afb7b45909f08010ed8647c84d3a9c0cc8d3
SHA256 de742938f7b42bbebe695567ad2684447996df265dad1b04a97d15bbfd7fa969
SHA512 7e829330c0fa22de39302553dd26cbcd0e59578ff8ea9bf9960c618493d7bf94e5dfc05dc6b7ad5a7e9e71c0ff9a9f6121447c4c921cb69c483c6ec6db5b9562

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Local Storage/leveldb/LOG

MD5 2cee2aa6fee7fee89d629d1063b9464c
SHA1 b3d92f3a14717d890a1d3a5db497a996ba2083b2
SHA256 85de1be4343aa3d8b50aa2aa8f9f00f086b5d818f3199bc930f74d0072bf4cfc
SHA512 32b7a3edaae9d51323373abcb16284d721e12ca93dec003c37e05016a44dadfc8da58ba7866b7a1ec568cc87691da71e6434b39f7669d05e079f3d6c77583109

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/e8441086208464e1_0

MD5 b6661558af322cef08d47a8625446e09
SHA1 fe347c391e27bd23e62f0fd8317f010f57363a23
SHA256 406cc52de0bbe6b24db1697f317a1cf371b8f64e481f3e6405e0754853f30eb5
SHA512 8859ec49dc827bb335908aa559be4487544c8c8feca85374d08470ed1eeb1241535f12d546594818f3b53c5a43b8e46bb1e18bd8489488eb9c0a077d7e93685c

/data/data/com.noxgroup.file.manager/databases/com.im_10.0.7.db

MD5 546955579b3ed8ffef53ab5e5d6fca3f
SHA1 0d2b1cd34725b913fc285f7e09fb15ae1a2d9641
SHA256 341268dd2c822c7a451dc6a583967c9c91d5f6615562395eba698249c4a4878f
SHA512 d076737c9410c58db3efc94eebadff43da5a615aa9312155f853e3410c04fea7de7767b8e9ef2ecc7cfb56c2082692884e3dacf7bfa5ca262de7cdb1cca7f0ce

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Local Storage/leveldb/000003.log

MD5 9db0db23c4f37a9afe95bf4383cf83c4
SHA1 b0a23584a4417c0ed0b89bdcc5955213e4574d7d
SHA256 a7f4919351cdf8373da1f856805cf6e5d5e09b19c24d52fecfc32fce4b85fa4d
SHA512 739c385452648b1bb1e673d425a173d4059d09dc3b9838b9ba1dd8b835ebbd64e8f6690b3edaf1a4761d1d999c978b4d75b822cb674bce26ac9c22c54587bd95

/data/data/com.noxgroup.file.manager/files/al/sound_off.png

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/data/data/com.noxgroup.file.manager/files/al/sound_on.png

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 65467ba8756d9bba72d5c94bac152784
SHA1 fa015f7f6037bb032487e8283a4a3639aa25a7cf
SHA256 e26a2bdbbbc14a2d27efa0a511524617549aa507816fc8b39a30d07972a09be2
SHA512 a34d8f7646a5ed1538c166874f683c21fa59b178acb1a8124d56742b641177d4a69aed9b2b8f31204167ba0001539c27b8790b725a03e86b317678dc7a32eaed

/data/data/com.noxgroup.file.manager/cache/webview_com.noxgroup.file.manager:nbads/org.chromium.android_webview/index-dir/temp-index

MD5 31bcb76a4e6d41445d3f498eeba700eb
SHA1 74ed16dc83f27ff89aec2e063fec88a22ea333f2
SHA256 a6ac80ecc03735c5bea0979b64d23a43f0654f1894e79b9e36da6cd19aabd229
SHA512 f29326f151f214d7ab47a76333fd699868926678bced1f7d630f3dd704d706e3ffee41dedfb0ce5b219cdb213e32afec94802c9358a5067bde1c3f305b0a675b

/data/data/com.noxgroup.file.manager/files/al/1715944067163_300x300.png

MD5 fa619d10b94ac9373622eaace1af07f9
SHA1 e2abd58b337a84ba12d6e90f681c1190021757ac
SHA256 83bea889d553f783eec52c8777a1363391351d518baba82374ce7e2e70c31e95
SHA512 214427e60a9f54e3c4a35f1a2d80a1f2177bd362f29b8669679f01ae087eccab23c909efee45c89544c2df67c78c73247c6d56fe5ceb9f3fe39f86f9db5d9276

/data/data/com.noxgroup.file.manager/files/al/1381250003_28x28.png

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/data/data/com.noxgroup.file.manager/files/al/od957ced_1920b2eab07c5a88283f473c547c79dc8663d1e8_v1_js_load.js

MD5 8ecf65c0ea62e467beb8bf3307f0cac8
SHA1 fd2456c950ceafc1b259c06b322cb6f6b082081a
SHA256 f244c3ff2078a37b556acd2de2c7f7500750830e75a82b9463b4c781bb0eba13
SHA512 75602819cd01039ce318ae357204c83cb37956c0200d6fbc51e2e009ebd910727e6db4b81a1397701b63c04d60ba9082feaab198aa3ea4c93de302e47c27ee06

/data/data/com.noxgroup.file.manager/files/al/od957ced_9d00142941a3f2970c14021f820aadabd6c86cd5_v23_phone.mp4

MD5 7fc9a82089fce1f37389402b4f826384
SHA1 4321e258abc3db3ccaf74b199235d4df9a3f33e7
SHA256 2fd572a5e1ecbd484632bfa0e3f5ea3bb3c9bfde0f68d422769bfb7fea44971c
SHA512 dec8c47b8d0b5c7c7d87dd89e1da9f899af3698d736c09a526a6ef7bc1de8156485c9906512a89d7e673ad50672f360d9fe3d965fe7a4ab1b98b7363c0cf717d

/data/data/com.noxgroup.file.manager/files/al/persistent_postback_cache.json

MD5 38164b274b94e5b67e575be8b4dce1f8
SHA1 e37fc5448febcd70521945cf043c01fff60f575a
SHA256 29c3bf42f460b5e0bee87969dc5bbbc0a7c543a3b909ca5dc8f8b51e4304e034
SHA512 b26564f81ebbbad375efc63e69e78178b41115d4f730e4b4436d6ec485609247120b68490fca1849aa6fca495659fd7172f968e8b63df908a236564ef8cd84ae

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Cookies-journal

MD5 d50f05e7457b71a416378ee0ebcd4440
SHA1 afbf38bba7e5d05ad92fa4e36d2e5765952e9897
SHA256 27fbeee6cc8149c6bfbe729d57ef92094be17a89a9e1c51a517c68fbf4ff1276
SHA512 7114fb2dd44d57fb49675d5e0c015fe918f0c446aebb1b39a98685f0c57945fd6edf158d642ea195b6914b9f0ca35b9cddd788fe958975dc38113ec8da7f4262

/data/data/com.noxgroup.file.manager/files/al/1714046903985_300x300.png

MD5 4531706adaa894a0fbc1765e81e0491e
SHA1 5c55175d526546117687c66dbb76f595884186bf
SHA256 89987feaef342fc617fd73123b387964ea261d3ee28d2b0ed47ac2f3daf96842
SHA512 446c56ab602483627548619c3e0c290868784568c765a148dc3b18a27cc62b1e5f9f769335c0dab41eae01c25beb4ae401aab3ac0062517b52b466281ebe9db6

/data/data/com.noxgroup.file.manager/files/al/of781fe1_a02e414ec5ea75239047cc46e03e87fe2cc24504_v1_js_load.js

MD5 3ae352efaab6e7ccf07954420c465334
SHA1 b72bfc52612934e3cdcbf0bcb55ee0b33f05f8c4
SHA256 e95f2e53058cb6cb691739a7a7fd868370b65d9de4a2f73b8bec77745e7e9acc
SHA512 c9323f4d5d40dbf641145df4c32a5ce71e9cc4354300b5f2d8dab2a29ae9ba230e0c521b22caa0235ebc3c0e1d581f650c4377f166e3a18e493c0d949eaa9684

/data/data/com.noxgroup.file.manager/files/al/of781fe1_2d0ba44de42cbf1e09689789614dfc45dcef213b_v23_phone.mp4

MD5 7c181262bb72fb30797a5adba07c637a
SHA1 5e3d79ed1dd4f0422be466d63f9b666686f29d7a
SHA256 53a5518641ab61eae5c5155c227e2765cf7a8ff18288a8371810f65b61a59176
SHA512 c95721491ccb12c1045573f11ac6b1a8d10db29f55ba479c774442c3c4a1e40ff054a14ead97aad1f8782b31105ab638c54d8ac75689b954c56ba26975061f18

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/res/afd1707ad76c449f9c1ce4de75dac80e.zip

MD5 2b9fddb88412e09a244a9bb41ef8d5bf
SHA1 a8d14d21b844516d901a0db499f58b20c2691b20
SHA256 dd985f0d87d754137fc3e538fae9887067ce961f559e6148ce9000898b4f8d46
SHA512 3a310163e13a94ad470b76e8f50bfdf8620fbe9785dd8fbebbf8c5306dd6f9609ae901f07b1584ad197f17fc3eedfd73d0d90b6dac1f36178aaaf6e39189316d

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/res/afd1707ad76c449f9c1ce4de75dac80e/confirmDialog/confirmDialog.html

MD5 e10621df361415d9d5a7b92db2141f3b
SHA1 da57d7bcb91557412f84ac0af5c5be9fcd660f8e
SHA256 aff8e0abbfcc57f029468e02ca785a4fd2ba4ab8f036ef4f449578a7214084cf
SHA512 294cf649b2c6a0f7ec6629b0eb956389d7b45fca7ce8fda7b12ca52460fed505519a8250f1863e4ff61543bd1ad8232dda3991af7fd7983e7428f28bfc8929fd

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/res/afd1707ad76c449f9c1ce4de75dac80e/confirmDialog/confirmDialog.js

MD5 29a7b417b7b272db50dbcc2913095adb
SHA1 9711cdd7ec3d6ee2b8a84198b1645876412a3dd2
SHA256 237010ca5ce25b917c3f2ac7fd86440f5893f0d3d0ed4acea13c123e4c72ca5b
SHA512 e1c298cb2941016c551466cdd9bdf4622ccf8c48e3f0bb81ee4aef5b4d8b9ff690cbc32287a3bc68339d2196a455d347ea070204bc9216914807266cd74ba131

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/res/afd1707ad76c449f9c1ce4de75dac80e/confirmDialog/m.bundle.js

MD5 fe13a516f956df4c08246723b5cefe29
SHA1 7f141277e66afdceafbe4ab9397d11ee3e0e8121
SHA256 0843f159fbbcbe9ee9ca1e843a23f06fc243abaa279083a967c5661bf59e3f67
SHA512 13cadb4002438fe43a0e7d4fae4e95b98b5e641ef864a70dedbaaad5e8eea761ff72ceb8b33168c5e56b83ff158f16132c502a8a71be51e5c23575dae27eb573

/data/data/com.noxgroup.file.manager/files/al/1716909013607_300x300.png

MD5 3b9152e72f85d12b7ff9fab0d5e5f7e4
SHA1 8ec4da85010d030f38c7c78a3ae1d3ddfa25ecd9
SHA256 439ebad8321a3254df502f7aea76832ca154a48eec3f3b133292c451291822c5
SHA512 d482d16955b11810fdbfd858edb06b33816cd7013cfbea5487583e4b7c467a73cad2f510b4098e0e2e9ddcc26bc8a6d07a564dca7d75cac540f376354c4e76e7

/data/data/com.noxgroup.file.manager/databases/mbridge.msdk.db-journal

MD5 5f367073ac5331260d23d62cd1aed2a6
SHA1 de39ea8a62aaebd2155f9a39097e005c51f14a17
SHA256 adc4aec93465a710113d38ab2f8663459d4584ece3f35190b71b420d4eef4796
SHA512 9e2ee73ed62610d258bc239c8d0918402658a495ec667021484027d3b3a7cf96cb9b30fe1b0e8960c41d4c34a659d36167812f591cc13f93b967e1dbf8ef561d

/data/data/com.noxgroup.file.manager/databases/mbridge.msdk.db-journal

MD5 52857af36aa8efd3a302a5e0f3a5bdc5
SHA1 53c94cc6d83f9c2788fe5f60200bccf684e1d026
SHA256 82d12812b98f355c10cafa5a35a0c282578bff62acca1661b5fd0dce18144cd9
SHA512 0ed877873b16efc9774d76ca967995a18ae9f6ccdcd7543adf04e9860f3ea2a7cd06bf884822ad05e9a9fe5749c280b5cc268e42049df8ea437214305cb22591

/data/data/com.noxgroup.file.manager/databases/mbridge.msdk.db-journal

MD5 dc0f4735c3cd65957ae889e0037be5d9
SHA1 5405f712ec6736a23ea168da2734d5552620a664
SHA256 db09644c0ecbfb8c08ab4ce7fe5108db33624fe9d992fbd95d5f6e5e2cacce9b
SHA512 5e366d0617b1482c2c791ed4adaee56589e0157b876f2e7c6dd074a1f72acf95690007ec50e7b1fc2fba88747d3ca6ac36af829782804766d6acbd9d63bc3799

/data/data/com.noxgroup.file.manager/files/al/of460cd8_69c1b75ddceb39edc92399fe96bd1da3cd5d9e13_v1_js_load.js

MD5 76e679458f762d05286b52adf5cdd185
SHA1 609b6e031e77a0812bf64674abbe3c7635ca5e67
SHA256 8d2e4eaeeca915c2e3941199b7583fea76feb90d5f2e2881548ff05770857c0a
SHA512 41e2e179dffb7569e50ed97d906a09e254569deb10daf01e8610eb77dc754009c3ab8788ce4a5f9cc436462e0d1f02aaf3c8dff1fe3e46f5f22245bd74ee5b2b

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/img/-1424304539.tmp

MD5 a0ece944063fc8888ed689ea1dac0a06
SHA1 1c9b356b8bd2f1435ffc04f5cb204696e0ce964b
SHA256 9cb4899b8981b5edd2df2bd7734f3c345417b3b680b206f9b33e0e4c447a577e
SHA512 ab2effdb4d0fc4f35bb993387331f8a7dd958f084dad4ded033b4658c3bfe198c2b9d8b5831f91ede0d0c17575979b62b0e80d808d707c5939202c43c5f21e13

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/Movies/mb/res/.MBridge_VC/8c7883cc75d336878bd8b977bb245c3a

MD5 24c5fc7920f15bdbd9676139104a74b4
SHA1 2339e40647fb802115838fb173f03cf94f1c4224
SHA256 776de0a39f43bbf835a298ca63a63436f5b87bca59487d0f5141c8e7ddf9289e
SHA512 6e03de874126cec9fe8e1b458cd387dc8af6f5c7d18cd7ca6b8de7b7fedef9e7d9331425156151bbf37b63f309e8c7b8988e20c2df0e427ecf371b6410ae6674

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/img/-890931274.tmp

MD5 16fb8c93370c1f5101c6c89602c64299
SHA1 458df175173c0caa2cb30f74bb96399a6f736256
SHA256 ec5097db00845d66940dc0fa134f47b99c70cbae2678b173d68866684fa5bff7
SHA512 12a4633eb21db5bdea6c923478e3a5a8ecc129d4dc247ec7b5537c46ce1b95634309c761a577240edb4c6151b45d56f1f906a0dc872829033e0ab2c910c6cded

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/xml/mbridge_reward_layer_floor_904_v1.xml.zip

MD5 b3733045fd418037bcf296d5cb68e79c
SHA1 1ee7fb6a3a29995bf1acf924ace2b34740dd38f6
SHA256 5b704fdfe38de07b23cdb8c259434357474d331c0c61f8db56f83c887bb279fa
SHA512 a5a313c3f16be4f5018af8822b0d5dcb8be78b6de1cab1cda0ba87510d99fc404fa3f96a13a428942182c7e3368001f2b3ecacdb4fcbece3820c783cc1ebe477

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/xml/mbridge_reward_end_card_layout_portrait_v1.xml.zip

MD5 0c387d0424fd85d894bfb27a9c0036bb
SHA1 c66b07820f8603e26be59a115ed4abba1aa5861a
SHA256 0809208925d5e32c748199a5c04022027c1861ece5998a42b0cafb92d8ff31f4
SHA512 bb11e4af906a281bcded4b3eac57b0af2856f0311551af7193ef3067f08d54a17fe328e688d2ccd0b175506452632bd87cbc010f1ef66c14805d4c5bab968ad0

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/xml/mbridge_reward_layer_floor_904_v1.xml

MD5 11b5903986870b3be67f9b05a8e0bcd4
SHA1 08d7c1ab76d99869c071cdeadbb273b226d8fa7d
SHA256 d6b7b72bec703fa1331e2e75de26e08eb26d911b54a8792eb69752cbb18bbee2
SHA512 1d4234efd2bc956689bfb4dba155aedfb44b433687bb270577fdd2688b86163d86e0da779825b3274f2b28f87831175647143a1e34c664c46369a0fbadeb5107

/storage/emulated/0/Android/data/com.noxgroup.file.manager/files/mb/res/.mbridge700/mb/res/xml/mbridge_reward_end_card_layout_portrait_v1.xml

MD5 3f3068ab4246689350cacde04ec928cb
SHA1 d435efd6a1fc6543a12f712b77230a927e5411b7
SHA256 35fa350ff91d2f24f37f7454f6d829a08485a71a0ae8e7350cb2d57bf7a5c23b
SHA512 4c738d5c8c00c89a1b8f772f0230b4b8efa4b2c661418eadb5c67ee1c1b8f8e0fde9908a314f2408dc31b919d8b9aa4064e9b7b5b5201b60249ae7e28b6db4ea

/data/data/com.noxgroup.file.manager/files/al/of460cd8_69271f39cc0a3cba77dd6a2f59edbb1f8d38f5ec_v23_phone.mp4

MD5 31f6c788a07b5d469cabfcb41118c526
SHA1 7b5dee4a3ab72abe8877a657c9baf1686a84d186
SHA256 e3cbbd9d27751c336a449e06bfc8b46e0b4f07ccb58e77c0c28dddedd65205e2
SHA512 5381721c5c256003258cefb9fd38531df42bc4bf1061a497fc145219b9c5eff9d12941bd4128be56f4806e0145bd07e30f9d356afb78689afc5ebc2182bd3ea1

/data/data/com.noxgroup.file.manager/files/al/1714674214607_300x300.png

MD5 cd967d062609637fc00a0ce1d2b82c86
SHA1 e6e59b0ea4d27254096451f6e62342bbd0fe1168
SHA256 25f8a2d39c7b2ca34bbc6c02f1df27a5dc6421e0456270ffd2ed819f256ecfb9
SHA512 b0734a6d882878ea7769a3090b31548947097c25bd6c4593e649383067ab859615797ade6892e2f7648c8a01641f068691445fe55dfc1b00a047b7bf40f092f4

/data/data/com.noxgroup.file.manager/files/al/o1faef40_b5c1bce9a865249da3cee94465653980dc420d27_v1_js_load.js

MD5 4b231e08a9680109c7d1ec1a757c8331
SHA1 f3c9c9f4a5de8250b8691ec0f5b53a3871352830
SHA256 c2e3ea47a4a414b33575c4e2372c69059e0fb05b0d91430da795a916fc9b3576
SHA512 d75f682df19ceebc4352bdef74c7351efe9f41ff48862f5f9e9a15ee38c939070f67a8e8477c0d1ee26f576e9e8d534c183f097919f797a75cc55d7d3575c7ec

/data/data/com.noxgroup.file.manager/files/al/o1faef40_b1dab010e184373087b72d16cffae118b4e73899_v23_phone.mp4

MD5 586d1356e35346fc88844129b04ed6fa
SHA1 d30d67e50d57f726ec190c9b4fbb1e87b2027e38
SHA256 140e70dce6451e30e2771bdcc7b9766da1e2b730083b0a57e411187b0979717f
SHA512 f4600905fbe530cffb8b515206b4815a2efa14d0a75f0d403c3bdbcc2daf64afd1d82e36dec4c0357a4e714667a12b62da4bb4c5a3b672962f23a96f90fd11a0

/data/data/com.noxgroup.file.manager/app_webview_com.noxgroup.file.manager:nbads/Cookies-journal

MD5 76975386146f8d7337efe06fa3d0d739
SHA1 499c65252bc3d0f4c087b1539a3dfbbed75d4ddc
SHA256 0ed75249da802bf78bfab9aa52ddefd83b8cb201e56e84c31162bee239d3cd29
SHA512 f1bb9d5ab94f0188fd7f1ceeb67078e040a350b6f35229cd3b1dee588fd6f3a2b5268754982893dad5018dc733c0a2560423b5f6e02c58aca9db36ef5466be6f