Analysis

  • max time kernel
    168s
  • max time network
    181s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 03:24

General

  • Target

    a3aa295354bed73d35f5d5c235fd9bd1_JaffaCakes118.apk

  • Size

    17.4MB

  • MD5

    a3aa295354bed73d35f5d5c235fd9bd1

  • SHA1

    1a101ffce55151a80aa90d03d7bfb9e18e5f2b0e

  • SHA256

    76f6608ac094df3a630139d56a60ed2574bc5f773540c916cfe1a85867e0b3d2

  • SHA512

    71b4a7a4a87983f2fe3193aac17875e946fbd4db87733f011928f75385ed4e751051c1dc581d128544596bb36e29dd562d1be896d053d2d755e4a7f2465c9093

  • SSDEEP

    393216:8LsPnbMK1xE76rre25bRZKzcsq7yRoA4Tm/LJ2CESl2:8L6nbMKI76rre4Kzcsn0yJ2CEC2

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 6 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • cn.dxy.android.aspirin
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4299
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4443
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
        2⤵
          PID:4468
      • cn.dxy.android.aspirin:pushservice
        1⤵
        • Checks if the Android device is rooted.
        • Queries information about running processes on the device
        • Queries information about the current nearby Wi-Fi networks
        • Queries information about active data network
        • Queries information about the current Wi-Fi connection
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4352

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/cn.dxy.android.aspirin/cache/_KStore_/cache_http_api/journal.tmp
        Filesize

        31B

        MD5

        fa79244c9fe70f6cc813c4bece0d1bd2

        SHA1

        becc80a0d952cd02e9ab07408136498dbc82774b

        SHA256

        aafeabed5f0062912cd9016f90617308e1d8e320f09ac7dd65383498dc868371

        SHA512

        049bff76881d28a757bb8a573d9bd75ad15b6a93e9ece52b90cf29b433aba855bd6b0c39b5dd56bd86abeeae13654aa58c29f9e9483ace0963dbe5c7c8f05a55

      • /data/data/cn.dxy.android.aspirin/cache/_KStore_/cache_http_image/journal.tmp
        Filesize

        31B

        MD5

        4c10b05dd8f2f344d00514b8200731d7

        SHA1

        dc88cdb5e10d790f6ee4b90b362e4bb8e72137d1

        SHA256

        7544a3bc788f4a619137d1f1016bf2f4dafb7ad7dce04c5c60b95dde2ad1db29

        SHA512

        da8a06f0a3820c25903541fe81ef6d0c855d04971ebf20eff23d1e3e80eba060a75bf319f0a292e0b4a301fd9e80afdc591db4427754576d4db2ff46455f84de

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/037eaa55b505997b19aa2ba769a58dc4ad74f5000caf3c98950c5b2d48148ea7.0.tmp
        Filesize

        6KB

        MD5

        8c5ca6ccae4e3387d67083684591aecd

        SHA1

        96406b587a3e5397b54cd3027ec24a88a2247204

        SHA256

        924b670b93f47c5f232eb6aa22c18c9c56fd67e777a548a1831c42abe52e16d3

        SHA512

        2ba4426decc385383533bded5ac243c854b60a730809d0b8ef09888790e43bdba8a6e6b587d93c9e375f0a45a922f4a9c2ff73394bc8eef5f621f5e9bbd1c26e

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/0f95761c5a765ac3741f1dcc83f25b9559b9d1fc3f3a492d3eb2b82f5f42071b.0.tmp
        Filesize

        50KB

        MD5

        a04804d01327bb8f663287842b7eee57

        SHA1

        9fae117631782644e2aef222ebb3323d6dbda2c5

        SHA256

        8a3d0f1392d41396009a254f5eedc6a63261601bfc2354cea87d10e3f5eeba8a

        SHA512

        ad4387b5c24870af998396294d0342bf92f22253088478a4c7125639f110e2ed2ddf40e6d0d87428fcc0eb2371932b8bd3b0b4b5b935f3dba631351bf9dd0410

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/17c0c36711e97f04271a15a290d8249c75b2ec75351e194f66991869f538da2a.0.tmp
        Filesize

        56KB

        MD5

        5072c5e898bde42ce8735e03e65dba09

        SHA1

        77b9026a690df4f840615755219e78f97afd1976

        SHA256

        13e2bfa200acd5bfb43d52ef4adfd1813ab6dad86387f57f37c282250e89ecf2

        SHA512

        33e17d8989fd3c7094d7a5b72fae20e98b10698dfc939166ef6a267deb83dd32dd15f2e3898ef46b901205a4aab852b8fbd5cdf427c78972d96707a921699911

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/2fce72825997b7124ab5f7a767a2957372eb0c7f52d443a7a802f5f27e3b47a9.0.tmp
        Filesize

        836B

        MD5

        3533c34c84613d4e7de1e39857dd2383

        SHA1

        ea5ca1db39fada58b83df3e4ad3174af2ef637a3

        SHA256

        f9eb8a45a6062c2e9e07902c0a84ea86d189f428ba0fe3208ef2791775711390

        SHA512

        b2858a4e673f6d8c9822a14114e3f18b4442a6de3af36db7973f6eb9df6e25165a2b9a16febc8ca4f4c7e076019f97b566b733ac490106bfbab39a27fab167ee

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/3a7b666952d03aeac2da0a0725b483e90334d2f39e566d0f65fe78a27322bc31.0.tmp
        Filesize

        759KB

        MD5

        482706c12ed9e715bd646fc85553c42c

        SHA1

        bbf0a7ef16cb5a3ee71b8dcaff8b1f6f68a9c4c5

        SHA256

        4643295550c82059e7589d98538ff544367c8be5f5d1c50c4fb314b48bf88df1

        SHA512

        1d0de63c550faf8f90bf2c37fc3894272cf8363033a69e19b0c624dbee107033e6dd9b13e38382033c8a51f4d1e28366239fde57ce8b26088602d5075e6b5854

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4cc7f244fdcb0f15e7b539c9133b3d656a512e563892e4b1d7c2130f50a1a223.0.tmp
        Filesize

        41KB

        MD5

        f5c40f078e7407842eafc212f0d4bf3a

        SHA1

        980c70ec2bdd91a3fa9fa515ae6f1e9646305e29

        SHA256

        9ecfc5df7600dcc8c1e4c85fb18918bc211c0543c45fa972218ef731a1514afa

        SHA512

        bf687bb85b0a29d7b6491e7f2805ed27530fbb9128b8464c68c431585338a051194585ec4d7a0dffb75d64ecf549ae76603cce3bcc9bf064ced9ccbc7a235699

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4cd245cabdeffd48ac288dd9fb0bb0d2d04b16c123acf11fe4588c2400b45c70.0.tmp
        Filesize

        37KB

        MD5

        3dbb6421c4ac802a673f95f96d45ba62

        SHA1

        e7f986d439a712774dcd396c381625e69a8b83b8

        SHA256

        70ef80ec307449b9a7af0db01fcd5f02ff7b9722073e4eee5a62199b23c02219

        SHA512

        1909409cc25bfd558bd0be53b8f6d705e0961c249bf51d005d92cff98662f8cd6df7064863e1070a9f3ef51bebf7d92bcc1f62a0db8ec90a17b2ec1b2d827722

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/4f82a16d7e720e1ef9ac993d78ecfbd0947f44591b8fa7d058a07e855942c307.0.tmp
        Filesize

        49KB

        MD5

        6995e5a42a225d9b93fa5c9e32caf22d

        SHA1

        d6e7c62738d077608074b5643c2eb269cbd04bf8

        SHA256

        122b573d73eb0a7e44e92c39d537726de02ebd4c14d0bbfa6dc763ecc14f75f6

        SHA512

        1c88abd341e79ffcec6a6c7c882a743fe5d2fc160aba5067117597ffc4ddad4c3ed226aee611fec010123f23c2a928fc8c35863007e9e8d9b63d871b52ff97cb

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/5ffe02839b48e2ad62d63334f30894348d8bb675239e368119f32677821a3d7b.0.tmp
        Filesize

        6KB

        MD5

        5bc119305b51fae1c4be3eb42deb5d50

        SHA1

        50eb69e1fbfcab9068f46a9791bec075037acd68

        SHA256

        c993b0a54cd8b856e793868aab37c5b866f0e6648f621c1d21950c99acbe9d40

        SHA512

        61a63223320965fc47164f4bfbaa5a8d3b7baf76cd03853811fb12b284636823e2f79e8b97eac231728a1c62017688893a083f85bb2f4a17c40d21e6f50011d7

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/68633d471f2186eb0a37b2702077638ba0d64b6f5ba09fd5245bc1c374c94029.0.tmp
        Filesize

        8KB

        MD5

        b6780a8518b28c60ecc5234330937e15

        SHA1

        cfbf5d92f27806c2544bdf7623c49c838712cdce

        SHA256

        a73c5e93297b33f939e444ba7bf893108ef55ecbfec2c554ffe941cf2b83f99a

        SHA512

        e1a2efc3408ead784a6dcf0a52e8338b94421c7d800d70e955aa1642e86274e429d151b618e92308fd9977bc25b0304df8b7da6e1f552c8616e32474a14df97d

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/7929669b5ec261e06387dcaa069d24e3d190bfdd1ee24b148d173fdd973ee97d.0.tmp
        Filesize

        1KB

        MD5

        1fe17f0bc19af51bf6ce301de238a4b0

        SHA1

        59ee6b0619131809ea11f90c252b631758d53198

        SHA256

        bce53640b1954583385d37d2b90e5ce0cc26a370497df4db5b443309294510ba

        SHA512

        a7268d90207d568bf6869948e44a0b38c26dcb7e96eaf6d55c0510c04e18351c5b9be8eaf0204cac2199d3aa1e72cae6dbe88329c72c18e0417275665bc61251

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/89895897ee5cb6851f4edd983e9d9a1d113c8ee1905c6939518c4fc89dbf53a0.0.tmp
        Filesize

        6KB

        MD5

        add61dd1b9bfc678fef8f6284c4368cc

        SHA1

        b962f45f11a8b4b89fdbf10617608c9898f7e196

        SHA256

        64ee173c2b91af4f1aff002e66ab320530a7f6b7a8f0fcba29a7ee495ceb21c3

        SHA512

        2dfb7df41aad4db78b684c0a80af22b19d11097273a35019357784331539181f783b7d273cc6b4a529580e985740eb5067004b20a96e4b1ab0182b0d095ea105

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/8b7b65f0d1a4b4286743204fb5c70a1237ffe409f3c9d962ef9adf36e0960d6a.0.tmp
        Filesize

        46KB

        MD5

        e7815b598d3591b2d97ade2369370a41

        SHA1

        21410de635ca7a003099983a4f08814b15692bf9

        SHA256

        bdcae776b71f70ddff60d9d923ebd4a215f84f1d94b38a90a62e75443d03cb8e

        SHA512

        344ecc080aa86d941f4c0ddc7dd3253af7157cec268afad2ebaf08763e80ba556b8e68ef585401b1f5ac125257a8543c8775c0f6322f592acd9760ec7f89e320

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/adce154054f23d0bb64d51308b681ed00b55fd2e811b4bae233fe63942b076ac.0.tmp
        Filesize

        1KB

        MD5

        4ff4f7639a997c5a165bae6f63341a7e

        SHA1

        c454f802587bf619952d77d698c1526fa199edc0

        SHA256

        851d88f664ea0196cedb7b10f27e8e3d77c6b4e6fc3a60fd65d3f9e7090fe8ea

        SHA512

        4c7f539d662ea6b510ea8a32b96b61fabc26931d788469fb1de25259836149db285fe54d1e844092b8d03e55cfa7e44f69baaffd6ea2f65737a73d35243c50c1

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/c7ac6e6517cf208536238974a634e69f194bc7bb19fc16b19a7456f60051e13e.0.tmp
        Filesize

        750B

        MD5

        b5dd3a65057c474b3029beb584f02b53

        SHA1

        f32eea19b7f55503b1f13cecc494040e419adc13

        SHA256

        5f523fc8face898d3eb8e787a5558269ac8c148691f6d0f9d891aa5154b7754d

        SHA512

        a824a9129d3696058261dd2b88a5e7c2ef00de0b21a5e92a0f36d6d55c8c25abfdcfdc575a066298b1d48d77c45a234748069b537a87b5b7f4472df9acb4cb0c

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/d7819d65d4398f7986e00b11f311db839c925457278af698e25431ee03a20fcd.0.tmp
        Filesize

        39KB

        MD5

        c12b5ad0a50ab563aea0b079874bfe23

        SHA1

        c116ca448dcd9850ccec9efdbc7a80bde258dded

        SHA256

        81f794bfef74ef96e2b0529d0b31b9279026185d7b90bcf3180d4760c6c4d875

        SHA512

        d75485dfe2158108e878c6ab719e5666a68f38af8f74ebd793c20ca11c20279715cb000b78616deba5640e0d94681decca5f720e0aa3752ae555a36b6d24b74c

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/e2af115ea9b1848ace2a30906c90bc57ef3cf520d9e41d799e1617c468a6a625.0.tmp
        Filesize

        7KB

        MD5

        e4f67691b68f368640b8905ec1a292c7

        SHA1

        1e2a2601da200349bcc9430fd45b3ea4e6be8797

        SHA256

        b016c03ee7c509543f083279782986818c164042ef8fb13beed817f763c517b0

        SHA512

        7f97ace1a0fd8974a52befb188969e599f8025fe958557fbc0d6cde448f2e52ecaa4502e1f57e7ac304ee2efcca8b66c40bb2e6df99e20fdba00bfc780a2a69f

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/e4dfdf306519dcddb27e2379a79770a4b7c020eebd303921fbce28635ceaf7ab.0.tmp
        Filesize

        68KB

        MD5

        37e7810485ee9d61f714001dfe536ae4

        SHA1

        1b59cb49bb85f7aa4ba1591f8ecf25be544880b2

        SHA256

        327f9789c6cc0b5d3cd5a39e8e0ea0efede9073ca0b1dcc115ad8c658d130f7f

        SHA512

        f986b5e527cec07ab0fe30c34cc6aefad34154e281ea4992c422ebde680a724c2768d76a18e2977fbe7f7cd066659a9b04bc479c7f9bd77f3e6bd5e1230e527e

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/f7d9a830c7f70fa256357759e91523714c031f46d5e577d04ce66722fe98ba59.0.tmp
        Filesize

        30KB

        MD5

        4d34e09962dd4566694b90c50f4f9a88

        SHA1

        b052cbd0e51e461ebfe240f53670b5097edf3b33

        SHA256

        697fb725c9a312d56d0008fcf2852c3adb067906b031e2f11b3c8a55eab89c77

        SHA512

        a0ad47d6031ac5a3c8162246afae97dcc7f6d2db4b7e112830036886586f5eea055007e11137a5e2d21bffbeebb620b27da379cf08798e8a6eed778f1d1e6f79

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/journal
        Filesize

        3KB

        MD5

        d1344bf1fe32914d90d7bbd31bb988c4

        SHA1

        6d4a9701366d7881970e75340846797d01989ffe

        SHA256

        3330350b63950b1a2ed259b7d54123759bec3e595d2bba3b8e04c4d25a6bce3d

        SHA512

        a49afde22d0250556f6f12f1b01a6f9a4a0300cd095ad8258184dbb6911ccf03abbe6d883c44c3993f951f8be26473682e7788edb4a91ef056e37068d895f6d4

      • /data/data/cn.dxy.android.aspirin/cache/image_manager_disk_cache/journal.tmp
        Filesize

        31B

        MD5

        8c92de9ce46d41a22f3b20f77404cc1d

        SHA1

        8671a6dca00edb72be47363a7071be65cf270373

        SHA256

        68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

        SHA512

        30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

      • /data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin
        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin-journal
        Filesize

        974B

        MD5

        5f89885ff0971809a0c70346e887c6b4

        SHA1

        40fa55c2891553cb04fe7c254d05215843d4e3bb

        SHA256

        4be8f35edfd4d9ea632d6318000a2504deeade45c7a7cce488fa854c6f67cff2

        SHA512

        26023b64ae683f73477a435b588a587ed3e5a2e00a9d68c8a38dd3eefecc8707e002f601371f6745236cfb40994bdcf3d06b32cd0a4841b84453b5f3e38500a3

      • /data/data/cn.dxy.android.aspirin/databases/pri_tencent_analysis.db_cn.dxy.android.aspirin-wal
        Filesize

        64KB

        MD5

        56fb8f73f4de5f7d8b76a34e726d8687

        SHA1

        cab8deaae24d881348949692a60c621af08f6beb

        SHA256

        4a142522e8eff76174a8d4a080c02d4d4b864c41f4b6ccf907528c951e1efcdd

        SHA512

        c48b14578fb44530e0769100ec5301162709bddc8382efa81ebb7087ab6e196856afc2dc535e04864b3f16bfa48ed2eff6749fc007f9b40f186612fd4bec16eb

      • /data/data/cn.dxy.android.aspirin/databases/pushsdk.db-journal
        Filesize

        512B

        MD5

        ba1bc2e0fd4fec184d5c2259341b113e

        SHA1

        a248efa0c0b1ff4d2bfe3a5e3430ba8f5355b6f2

        SHA256

        3029234e748192a57556f24610ed26d166e618494648225b01e784588a6676bf

        SHA512

        b2359c51c54dede042549740ebe4a7fb709287cb5fe911ad9e313243f57baead68d82e3bdc3d07c672d8958eab270a1d4fd6a3b3c06e69ea0882312ae0cd0ee6

      • /data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin
        Filesize

        197KB

        MD5

        79344fda7caf57bddd2d7b00abbc05a6

        SHA1

        d2c498d1e1a2b7a19db1a18aae67568f5eae0672

        SHA256

        18f7e5c3a8fed3ad350298c8a45948565485a695e19a45b1556ee860f97cc5b1

        SHA512

        13737b1e6a84f1004a29777ba66cb8f30e5ed22daf0a8379d698aa2ed340b9ee22cb6abf2cdb5f7e5c0ce5eadc8592c043a2262c7dacfd442b11bfda5cf42645

      • /data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-journal
        Filesize

        32KB

        MD5

        14218a95eab5cfd74b7da352e342a450

        SHA1

        eef5658586ecc3df25a1fc5e5d0dbc0f68e9544f

        SHA256

        26094583a42fdbb9474b6bbd5652650f92f6aad598f0ff3fe500aaf2c35f6fb1

        SHA512

        2edeabfe4efef63f3b0a4a4a1ab9017f0bf23dab9e53992a55a9cfebdb5eb83a3b84eceb423decbc33004f53886881eedf8d9eaecd0c9d0d9a55f7ed4bf37301

      • /data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-shm
        Filesize

        32KB

        MD5

        bb7df04e1b0a2570657527a7e108ae23

        SHA1

        5188431849b4613152fd7bdba6a3ff0a4fd6424b

        SHA256

        c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

        SHA512

        768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

      • /data/data/cn.dxy.android.aspirin/databases/tencent_analysis.db_cn.dxy.android.aspirin-wal
        Filesize

        144KB

        MD5

        a6cf6a33dbb09ede19c47bb5e6b0db06

        SHA1

        45186662ae44480c3ac5a8ae9756e66544541443

        SHA256

        9a197ceb6fc6abba5495f7ed525adf867dd4a06a34c4dca3dcddb3beb7666531

        SHA512

        c1a6b5ac43740d6d026dda0370a91acf277b6213247b3ac2dc63f7380b0b7ab714a7a8c55156202071c5354808b1fd4f6e38d02b930578d25ccd3c26e4177a5b

      • /data/data/cn.dxy.android.aspirin/files/28f15bc1cf2872ed.txt
        Filesize

        72B

        MD5

        705c2ce0c91a9daeb1c35fc91caf6740

        SHA1

        caa712a59f7b4c2d3baa96ca116ece3e9a0087bb

        SHA256

        9f058f14dcee0a5dccabe1d28027bbbd4d92ab15a0927655b01c95c92cb4b0e2

        SHA512

        7448d2a7e6b876513fff4cf2bac09c7f88ff469cf4f74a36170b9c947f4729b1f741a3ce79e9fd8cf88e1834784754c9eefdbd4db95ba921dfb634c6cb532ae1

      • /storage/emulated/0/.28f15bc1cf2872ed
        Filesize

        32B

        MD5

        e9038b61e7da560e175098e9959495e4

        SHA1

        0a009ea3af773f3407a99609d38bcdcc67adf593

        SHA256

        82522d569e5c0110d29b3b89b3084597ef6154ccd87a8271226d5d2ed52b6cb2

        SHA512

        b415144b9022f1accd953d6578d4b6e6bf2550ff966a9cd2ebb88d2bbaa2933acd676f0d1007ee0335d3b72bea149935ab11b4070c850f6ed1b3e2a6e5bee736

      • /storage/emulated/0/.dxy20180226/android.f
        Filesize

        150B

        MD5

        ef06a151d5d8132561a3589d820b7069

        SHA1

        8a771df6347a17be5293aad5387b422f5ac430d3

        SHA256

        2493c9659172137fc4e241072f362b16c7a36b8b4655928c52b49efd56f6fed7

        SHA512

        6296e7d637521e094ff563e19ca845c5deaa39f1bdec388fcdc4ae16a455c1df6bda4b3556e5471d6ca8ab73f601c67b867a9e0cdb60740691235c25601895dc

      • /storage/emulated/0/dxy/cn.dxy.android.aspirin/.28f15bc1cf2872ed
        Filesize

        72B

        MD5

        a92f3cb3fbac6c7e9102b26f388f74cd

        SHA1

        affc8ac0bbf36e56a37709c9d03148439ccc3e21

        SHA256

        83c43c942ee9d92bff7b3edb6581e4678c7771e57de7fa8d934904d19af08c44

        SHA512

        68e0dc600a611e41cfb755fda6b72a864c944cad8139787b3490768bdbcd12b4bad00a1e0c7f7d99aab44cac71211a6cae11991b66f52dc703b4839eb3fbe899