Overview

overview

8

Static

static

6

a76b81ccc1...18.apk

android-9-x86

8

a76b81ccc1...18.apk

android-11-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    184s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    14-06-2024 00:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a76b81ccc1617a50289669ec07a9925e_JaffaCakes118.apk

  • Size

    8.6MB

  • MD5

    a76b81ccc1617a50289669ec07a9925e

  • SHA1

    5cacf7b46e23a740d3d7e1e9dc309e5f9b288a60

  • SHA256

    44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0

  • SHA512

    15da011bd72451df323fd45194e2451899ec11c8391171c7cf614ed3f5e51daaef5973c4b2e55e3dc4377f05d87038e320c4f8c71032850ce66627f93c536615

  • SSDEEP

    196608:QhTLyweH+sk8OB7ZsnRR7XZmzYp6NswS7GdlKfh6dfVHzYgujE799y:0LywBsKaPXMzYATEGdlikjTRX7G

Score
8/10
discoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Checks known Qemu files. 1 TTPs 2 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

    evasion
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

    evasion
  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • cn.xichan.mycoupon.ui
    1⤵
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4231
    • /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4289
  • cn.xichan.mycoupon.ui:pushcore
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4267

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp
    Filesize

    603KB

    MD5

    dd7a0a50860a9ff7fedbcb66128583db

    SHA1

    528b93603dff0391f654f2b0b55830970c6d29ac

    SHA256

    a1cf384b29952b716e19f0c7b3fc2cb1bf89c4e9a21016b7d8989db83fe572fa

    SHA512

    88074b6f5de981cc9a14a0ee79c549d2a565ab5b6d2d4b40a6ab62f5e27a6d5b9d28d8c990cb59adebc6e5758595f91480557bdbccc6bcb92d4fbc99b40d897d

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof
    Filesize

    264B

    MD5

    4414a0e7b917901866ac3d7c4fcd3502

    SHA1

    8a6fc4678bfff11f79417f61a013851a77e8f17b

    SHA256

    bfaac3785a51ea09b8fd4ddddc1eac199b01109ac2449a79b1c2e611dcd40b1c

    SHA512

    dbec41e3fcb0951f3af3ba57c6309342a8654bbea2dea6d94a0af9e99c35cdcb529053a3b215bb30345ce71e37b582df1a9ec66992c99bab5eada641c211138a

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
    Filesize

    32KB

    MD5

    272a4f04ed6faa939e8ebccffeab46ea

    SHA1

    8599e1baa5929163841602dccb195632f6f60be9

    SHA256

    3fc3a40f2275bb19702d3b01d88a56465bdac24a2ca38c373e25005454d92d7e

    SHA512

    d43d1c78156b48577fa9aff210e96f77287a6e61198233a6d6a1ffce6a3d7ef978a73f4531bb082ef51925a23ef2e51b4d6fc14b1e20e885a745b34be36eb369

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
    Filesize

    32KB

    MD5

    9eacf443661aaf5691b9107b14d760a8

    SHA1

    1ddf4d873f7f12b4d99406578c37f2a8c47a36ec

    SHA256

    c5dc948e20e75a1b106c4c4025a17df9774192f7d59a0b24041a4aee22ef9519

    SHA512

    d01b6da85f0d0a69b3be660124231d48b772fdd57af47d0246519b2064e9dae094d324ec737b55c6ecbddff2cfd3968d0d317c6ebb600665fe72246138839b82

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
    Filesize

    16KB

    MD5

    5a72b0f9024adcdfbd0b927bab99b1eb

    SHA1

    a618a4033d69dfd3ef1ea06bca3d4b88a5c151e3

    SHA256

    7b9205203c0025bb671593622bb57c8789c28cb9023c52826125894eb49c1958

    SHA512

    7665fb7cb581e0b13e3e71e3173ef2e1f56d39dfbe5dcb84980372d56d4eb9a388ac4b40653464b06ab3e79d96831acb9894e32e12806c0e32c264c77eb701fe

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
    Filesize

    28KB

    MD5

    0218cb5b25b7dd686f3d34af92230693

    SHA1

    5e7aa6260b017d4a9a98d727a8a003fa05f32416

    SHA256

    469a525becbea63e94501d0ef53829b8db6e86ba568a88b84864b31bea5539ee

    SHA512

    6a9597cce33975ccace80641c800ee73eb019f356dea84b8fbb05aa24ccb268eede3296d71e286066d71f8c27b8af2a46568347ddd896ac966b4a4871fadeed5

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
    Filesize

    16KB

    MD5

    fd20442794d1d045685aad8c27c75237

    SHA1

    b89e14cbe7ea904c92b3c982f55cd09b7b4927b3

    SHA256

    efac8943daf193349b287e9c0f8d97d64cde91ac89293d8476d107328341ffa8

    SHA512

    e9cd9d13dc79165267279657920b73beba212629f38424fa6e45343bd2584cac85bb4f34584d9bc0d48826f6409397b9cb008293e04d6e34570804784254cfae

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
    Filesize

    32KB

    MD5

    feb0d292ef98ba99b36792813d49a823

    SHA1

    fc1fa26ad71994ead921d74d81044e32d3dbe8a7

    SHA256

    aec2940582fec48b5a5a178e2dc8f0f10d6e1ecab8d5c5fa4139711c49eb5db6

    SHA512

    2519e6ccb12d699668212c74e4aa78c6249a7181b7d14dae06f97c84060129eed9e68ee916b56f7322550214b06d8b1f8c88afed517d698c2ff1a3093448a867

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
    Filesize

    225KB

    MD5

    10760142380b34e358c396ca8d606a91

    SHA1

    b8d7f379c3e25bef6f24636fcb243d3baf2cbe46

    SHA256

    8a25b66e15f4054d677ad667d8eeb4db31ad09188884ae20cff78bfcafdd042b

    SHA512

    72105e76a0b2252434453074a966bb0f2ba849399bd9b3093004f3af47663003af614ec87ee3dd6d12cce0de9816bc1504a9859ced15c389c18601c36d66f9c5

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
    Filesize

    8KB

    MD5

    ded79b50c1610bd3ebd7f0a77ff434c3

    SHA1

    f8249c3dda9c074580379b1575e91d988bac7f24

    SHA256

    045528bef561219a107b3ded4e3089fff1b1d37a9e376fa984fc66011fbd7c06

    SHA512

    474fd74c03aa65429356ffb51ba79726fb37669b81ce7b9ef903e1891145ae47ad6c1c5f5efaf2781c3c0b129214bd4706e4b2db53cd66968f9d7675dda382c9

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
    Filesize

    4KB

    MD5

    d100bde2afda42049a16a2d58c9be67c

    SHA1

    e7067cf7f801d0343d9e6f1266646e02ad2fc7e1

    SHA256

    8831f84cccb59bd7a380d68014973ec9e3106e3f875cb3bcf22fb92fbb471b1f

    SHA512

    fb5f38b7a24dfd6a93050856b6fc1e2f016dfa77558eba581121a19cbc54d8af11ea22ee5efb599891a48c1305dda49617c6f41bb750304de6267977b82aa7a9

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
    Filesize

    8KB

    MD5

    672d78eacbee75ca430f45863d1b4e1e

    SHA1

    0eeb1a66109e326927da9d59eca7e39a043b833d

    SHA256

    afe230287f406dea016fe10d36fbcf503fb18a4e348ae7757e8df36127c6bff2

    SHA512

    9d4ec1b11de22f40211fa28b07565ab571849e6a4ce86e780ef2aacd15ec7cbdd24b01737cbbce8860124b2fcc84a468ebc2bf31932325b03a3cc9868d2f227c

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
    Filesize

    4KB

    MD5

    c2e119c3e009f1d980a7644a2368cccb

    SHA1

    367f938c362a76775b04db45f884671a7f39b609

    SHA256

    a05b5e91a041f2c507b6c3eeb9ba53cd32d4504f857132bc93179173e18a3232

    SHA512

    7ec7bad00e632fb7456da30444374d123dac437e87355664c469ac9dd01f1204cbb742bde5cfe4adcfe543c42d61be11cd62511af7dcffd41a2380076766b547

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
    Filesize

    36KB

    MD5

    5d7ea1a23af19b4340cc8d90f28297d5

    SHA1

    4cfe95b23a9e98378d69c4290af81b51fbe76aea

    SHA256

    474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

    SHA512

    33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
    Filesize

    36KB

    MD5

    ce6135aa1b1fe4f2c2db2a546d2a5558

    SHA1

    79b59582154017aadab783dc266fcb158c252940

    SHA256

    7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

    SHA512

    2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
    Filesize

    20KB

    MD5

    38616785cca0600a03205f84fe330b4b

    SHA1

    6ac41a6bdcae297d56dac5fdde70be5faccf0832

    SHA256

    b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8

    SHA512

    7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal
    Filesize

    48KB

    MD5

    a0b4faaf671f8d678a2d30c9e74acc4f

    SHA1

    8e1e6fc0afa731bc986b131a5c479b1aeb78d3d7

    SHA256

    5cc8127a2892afa41ccd68629ae54780529c9a4d0e1e63e3708dd8047c2aa990

    SHA512

    326b2227239300db63a7db6a907c4fa884ee18aee10a1d77f0c5b761a2bb9b26c47034593bc6b44cbacd96823e674e6d8c6b6badcb019b26e75d12003139c1f2

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal
    Filesize

    16KB

    MD5

    5f0353e9dff6c7e819b64bb3170b014f

    SHA1

    888de54f7aa6ff2d6a401c1ffa56564b904c8e13

    SHA256

    22364262643be73185711fcff51bea545f735bdfa9e112ad0d6e08ca37fcfca6

    SHA512

    c290ec9a5f6f77f7ccdf69e27221b2b6648af65b44f2e736f632b457af165630a1cae073dc256fc41389ce1bde7e1142da55bb759181258eb97b2981750032ec

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/ut.db
    Filesize

    28KB

    MD5

    25526ddc71ccd661b4c80eb7495fb0c9

    SHA1

    33a9da05611848961fc4438b8139b74ac34d8aa0

    SHA256

    cf4a73652c7f07e79a1af4210b7a3fd7d14e95ce401c38a79b140c6b1ebc5d6d

    SHA512

    27fef6f348b36935b1e1c6defc8e065caa43003f36567bbc0843806fabfa83d520ab95984e7178791eadfd230d296ad69e748bbdbfa348d51ddf9771b31cffd5

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/ut.db-shm
    Filesize

    32KB

    MD5

    dbedcd71108662a584285bcc1a29455f

    SHA1

    cf81d78df0de5e95555e4ce0587e0504ca5ed960

    SHA256

    1b640b7fc361220c23b33b7026ed2adcfe2efc1db59d32aeddab3bd73b3cc9a0

    SHA512

    b80f0d2995108bfa29620a8f28783e535b193b13028201ffd465fae61be2a1f9b51d9f77f8f03873ac145eacd8f3d995e22ac179968a3fa9f97175e840ed0966

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/databases/ut.db-wal
    Filesize

    24KB

    MD5

    70f4355b9848642c625af07c8a0871ac

    SHA1

    5f67cb2dbd02abc442a5a5d17efb4f21c7a979cc

    SHA256

    6cd9c81c79699b0dc5e30d9514e2e99230ace76574b8a79da4f547860f519104

    SHA512

    222030a3862fa23104a1e3a8d56e1d5a64af30fe08a88b135fa428d6dcd0bc8124d0d6a418a991367c625386500194588b8db05e09dd0fdc48256d6ce17ee144

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732792.env
    Filesize

    1KB

    MD5

    463b5b6e1e13f3d1414206b09f398c7a

    SHA1

    8885f822164e7a2b2b300c98501ac56c7a55bdc5

    SHA256

    aa07447498e2d1af950b469881d514c7bedb36aee2941ba2e43c16a0bb0bbbec

    SHA512

    cc239983085c8f7bc53550e23d5ea0d7702a98e947f659129c66fddcc5c99caf543b794907f2957ea7cc606e897b2a2addf312305d2d949ee4e8a23aaa7615dc

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json
    Filesize

    914B

    MD5

    c736fd00172deaae1503a33b8d97a77e

    SHA1

    140ccf7193cede30a3b4f033983f6c8136cbf8fe

    SHA256

    c3b6cdc70fbd4869d9ad625f7af72df0312c3436d12fb2736f64288cda28a4fd

    SHA512

    33a322a56fa58fc57c2c442ed8250ebf66725686e818e617e0cda32570fb897aa8f71f763f9df444512ecc6e9fa6263d03b8661545e5c76608c6c3ceccd0ff58

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
    Filesize

    189B

    MD5

    6a8863dd4be7802445180fb86132a879

    SHA1

    318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768

    SHA256

    003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08

    SHA512

    21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
    Filesize

    262B

    MD5

    0438489e26550304ace8e365664531ae

    SHA1

    cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4

    SHA256

    a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb

    SHA512

    6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
    Filesize

    334B

    MD5

    6c93639d41f97a5ebf59850a124c6ee3

    SHA1

    5b2a150d7debf94df8f42a25435992e25c774660

    SHA256

    2197255e7b267bff4ca80e47bfdfc363c1e1d70d3d0b6a24dde9d31ad2fc215e

    SHA512

    100f2f980a164983b2c2e8a4ca167546bc987f52fd3b44b2b4148b92621cfcc724642f9aa429c35b70a544fba6298e6e659821a4999b2dcf8c993b788cd2d422

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/exid.dat
    Filesize

    64B

    MD5

    0b79e8edfd0c4aa795a8745ba01169e7

    SHA1

    5afa2923fe3dcb4434c7d0b072703726df7edc00

    SHA256

    1855129e662781d045aa4385a69c6d973bd2dc948a4c6bc82b3104ffab019cf1

    SHA512

    f5be7b1a6d1069d3ddc4f32b9125aae9fbbdbd85632fafb6dbbbc93e5568ed7daccfbae2f1691685b07cd6d34064c049ee84a44023768395f0dcba27e9c8dfb3

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json
    Filesize

    128B

    MD5

    9b3173760bb73225994b004018777f60

    SHA1

    755cfd14a218803defc2adf85526a4f7858a2c27

    SHA256

    89a77c255567a5c31129eb09e87e7a6173dd8d88096e22970317dec237eefe80

    SHA512

    4c892cafc6334688aff5f9af143365a449d26e1ca2fef071801a8fc3fba61fed73e21bb0542a9f0b2e37c90847865684a48dd5b6c7332319e4da698f1b7eb3cf

    Download Submit
  • /data/data/cn.xichan.mycoupon.ui/files/umeng_it.cache
    Filesize

    498B

    MD5

    07d98c52e794766964a3d775e2d7cb54

    SHA1

    cc5ba2b49974b1bd53318cb758e16e2aa2d7aad6

    SHA256

    0b984695493600bbb11488da21c5124cc920012a6738a33f5d83a385ae643c43

    SHA512

    4c99e70552d26cba236580144d3ce1599f97d003c83fcd739eab04a2bc747cfbfef9c8dddf04244303e5d53a07b83ef227d278f05371ff9f94b476ab7371e4d0

    Download Submit
  • /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip
    Filesize

    66KB

    MD5

    32f2c8b3462ccd5ef664020833c825d9

    SHA1

    ed5e47c61cedb3acb97d057efd8ed0d8687086ac

    SHA256

    8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187

    SHA512

    328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9

    Download Submit
  • /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip
    Filesize

    10KB

    MD5

    f59597732a9069b73e16c027faf78d05

    SHA1

    e3558f4e5041a6c6d4372001bed847f2ef77958c

    SHA256

    9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6

    SHA512

    7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

    Download Submit
  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    111B

    MD5

    0931accd3387cd46648adef90dfa8eaa

    SHA1

    4593fc73fa37f0052f67d797656bd28ab5e3e16a

    SHA256

    51e0d3cf76e6dcdd5e1c3b502dc047638338aee577e5a42652032d583b93c5bc

    SHA512

    4a33c95d1acfdeadb008f1d18b76ebe340572c6ec6378d48c0a2e158ed4a41ecf0e5ebe781e008fec35f9f982450f4c8d40d9c72847e694135c5735f6729e6ac

    Download Submit
  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    167B

    MD5

    d8d6116ae6b23063e77e54b4ba0dfb47

    SHA1

    f7d32d9aab7480a71805f08b7c0414037ead3969

    SHA256

    32906f36dd2a738d5a7a8949fd2460582f08f5b4195536401acc3f0258d6e553

    SHA512

    e89464748d35378bc573919c8356b815e2b1f7719b6e7dd0ea6fa1057f484f1cb6341d1348e2450cfd3b71406040756889d480168971c87f8bf897f6696f5b1b

    Download Submit
  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    213B

    MD5

    cf1d2cb292de537276c2e10c66b0bf33

    SHA1

    bb9c953465765ab30f10e45b47818c2116bd8435

    SHA256

    6d5c3f386b278299e4a610688cfbe361482e361b2836856c027270fb7b7f11f8

    SHA512

    c1345529b6c9c24f236c952e3b21ff713e683251cb4a3b8bff386582ec79f9edc5bc6537c0ef9d1a7392094f572ed1b0e8a09660b6c2f557cc1495f72a0ca6d6

    Download Submit