Analysis
-
max time kernel
170s -
max time network
183s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 10:25
Static task
static1
Behavioral task
behavioral1
Sample
a92f72ee05d6b2c0d0ca6eb70d4791dd_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
__pasys_remote_banner.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral3
Sample
__pasys_remote_banner.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral4
Sample
__pasys_remote_banner.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral5
Sample
__pasys_remote_feeds.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral6
Sample
__pasys_remote_feeds.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral7
Sample
__pasys_remote_feeds.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a92f72ee05d6b2c0d0ca6eb70d4791dd_JaffaCakes118.apk
-
Size
11.6MB
-
MD5
a92f72ee05d6b2c0d0ca6eb70d4791dd
-
SHA1
a260a901d75a68eef59edc571c5e78ad6f335f1c
-
SHA256
045508cee87310bad4b66d9934354ca4d65f151dcb7e04a101ba7d43e82a0a03
-
SHA512
f4399d3dac6312f7a2c4a08a5f16463266da599968143bff09edc6af836ac621a653513fe442b43fed0c65ada213841a9987ac6488224bda599eadc138d49be4
-
SSDEEP
196608:mF/BczTWhCMnfNIZ462bJTOqKwh0CWX+h9aMoQ6GM+kVbP8X+/+9rvxKZwAE:mLCTW0O1c4XXHfW+K3o6bw+WlVAE
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jar --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/oat/x86/__pasys_remote_banner.odex --compiler-filter=quicken --class-loader-context=&com.kaixin.android.vertical_3_etxhhioc pid process /data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jar 4310 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jar --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/oat/x86/__pasys_remote_banner.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jar 4232 com.kaixin.android.vertical_3_etxhh -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.kaixin.android.vertical_3_etxhhcom.kaixin.android.vertical_3_etxhh:pushservicedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.kaixin.android.vertical_3_etxhh Framework service call android.app.IActivityManager.getRunningAppProcesses com.kaixin.android.vertical_3_etxhh:pushservice -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.kaixin.android.vertical_3_etxhhdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.kaixin.android.vertical_3_etxhh -
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Acquires the wake lock 1 IoCs
Processes:
com.kaixin.android.vertical_3_etxhh:pushservicedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.kaixin.android.vertical_3_etxhh:pushservice -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
Processes:
flow ioc 10 alog.umeng.com -
Queries information about active data network 1 TTPs 2 IoCs
Processes:
com.kaixin.android.vertical_3_etxhhcom.kaixin.android.vertical_3_etxhh:pushservicedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kaixin.android.vertical_3_etxhh Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kaixin.android.vertical_3_etxhh:pushservice -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.kaixin.android.vertical_3_etxhhdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.kaixin.android.vertical_3_etxhh -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.kaixin.android.vertical_3_etxhh:pushservicecom.kaixin.android.vertical_3_etxhhdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.kaixin.android.vertical_3_etxhh:pushservice Framework service call android.app.IActivityManager.registerReceiver com.kaixin.android.vertical_3_etxhh -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.kaixin.android.vertical_3_etxhhdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.kaixin.android.vertical_3_etxhh -
Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.kaixin.android.vertical_3_etxhh1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jar --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.kaixin.android.vertical_3_etxhh/files/oat/x86/__pasys_remote_banner.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
com.kaixin.android.vertical_3_etxhh:pushservice1⤵
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/pushsdk.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/pushsdk.db-walFilesize
80KB
MD5f6152d492a07fdc9a20a9b00d75ac2ed
SHA18ce58f8f8dd4ffc4370e8284419081335be12f04
SHA256cece866b6c3e026edb99fd03b46baed8ed4b2818749e718bd050aba5cc3b1e51
SHA51251f6d94405c97c464b3c28a6cf74e63a9eb39a41ab6575a536735ef8a506a2b245dc868f581efe27c2ebae0b7d03aa95f4bc1051c21f2f334f25444079b34276
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/sid_general_child.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/sid_general_child.db-journalFilesize
512B
MD51bef344d21d2ada75f739b5077798b03
SHA1543330ac01d5bba177791a496dcbb7e87079b664
SHA256f64bb14afd41b356416adb6a18b25d44b75a8ac17a36771d4f4bc4b386869e55
SHA512608c803406c343ab68b115a2d789ce1c1a88dcd2d86e891cbe24a07710b28cc0a6265c91dea5a8e4071071673b2feb3c40cf5a89dfc1bcaef662d2c921c2e68e
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/sid_general_child.db-shmFilesize
32KB
MD51c4274aa7a9a5cac8c6d1df71e4588c6
SHA1abaecd685e01cc68801292e3dc7085654a22feba
SHA2563f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
SHA5121adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c
-
/data/data/com.kaixin.android.vertical_3_etxhh/databases/sid_general_child.db-walFilesize
346KB
MD52141a7210ed9b89e3b1378b01eb432fb
SHA1e3a15a563dc3cd7c70dc2d81c97a22ca5ccb562e
SHA2564814e1888311226b8bd41e73040286f2a9582064cf41c0aa1fb61c7b83d1241d
SHA512453d016439481a222371de5c48ff5b4bbd176d85430264154257a7338906c3548c62462749f5bc6a64561d561fb29741f0a8b00f3bceabdda73710bd46c28f11
-
/data/data/com.kaixin.android.vertical_3_etxhh/files/.imprintFilesize
840B
MD5a50c67aec45d8b545c2be67d1404def3
SHA1790b72336e953da24265f07adad10d707d04fe49
SHA2566447002bf8900cb4663d7d4314820d0e76d8dcd2d39b3f779d97ef7bc9aeea7f
SHA512b2a6da84ab55d9ba78e430b84cbc3e28725a5c1dbabe0c46796fa11850535f518609121203be472fa5da07f4fa52fba7905efe88c4bba5cc7af2bf57479fcba9
-
/data/data/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.tmp.jarFilesize
108KB
MD5fb699feda22fd2a52c12da0d2376f5de
SHA17069c7940a350bf852064dc2cf51f396d08d2a12
SHA256d367c5304149d9be686626355490136ed4a225828fff99709a1c2be8b6750d14
SHA512937364f2ab507489a90128ade741c599e291530bdfd9983d908c5bc21a2b9933d55e860cf6c34297eb8c4feb0b9e3899fd590e4a116bc296061289c5eb32c169
-
/data/data/com.kaixin.android.vertical_3_etxhh/files/umeng_it.cacheFilesize
211B
MD58c76ac26418385dabfb52aa5a1f59817
SHA1586f0c0689b90ba6ff6bbfa9db18ced9faee4817
SHA2561e714c54ef1ca770ec3201c4912102f80cc65b1134258e8ceaaa1227f54b42c4
SHA512b80b1f002b6c8457988d5500b33ee44697823b0264fd8295986ad6a550041924a618644fdae9f6561fd9f51f7782300c9b0c514330cde80c6b12c7e95ff77837
-
/data/data/com.kaixin.android.vertical_3_etxhh/files/umeng_it.cacheFilesize
108B
MD5a305c4ccdd9d62db7d4ad13e5bfbd6e8
SHA1eb5b48fe8785fcc002826ba670a97c9cf9fc1f63
SHA256630c5fce30ecc445079e662af73240d18874ed824a3ded85c02858bf95899698
SHA512cc953533c2f3854e9fa7a48bfe476a3549452cdef689593f7ddad0ea406e212d69c66bba2d0461e2c5215cad11fd443780682a894e57bdf32145bcb02695719f
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/.lockFilesize
3B
MD5a9a6653e48976138166de32772b1bf40
SHA184582c1dbe026475319df14c19967d1dd0bf751f
SHA2566bcaea9882504292b2f6ea37a84b215463e71ab73b824ee90ecdc10c8dde71ed
SHA512da79b500393269c29fb78461f75af01e8108ef0bf7f9dc6635b60d271b9bd16fe1215f6f72bb8d002d0f248712606cc360a3d68b1f8eab00521b760b20fa855c
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libOMX.11.soFilesize
69KB
MD5aa3d82a2c654f97543103b104be850ae
SHA17b137d6e4adb2ee14b97d2561b0fbbdcaf20f10f
SHA2560bb6fba61f80b014f46a631ddc813f88d4f8017cf65c1cb07a6f7da1bf83cf48
SHA5120b3cb5f66d0be3db65b116ad297ff6bfdce33424012d488ebeb3cdbf8b1b4f58eb2814ab5d8e5a0b30a5958c3fd372c03d073b7315321ab268114de81ca17677
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libOMX.14.soFilesize
69KB
MD5ca4d15ef49ba15846214f657815e712a
SHA1cf67dcbd2d5a5d638ed0b69460b836e9bbd61c94
SHA25635bcf2c933c5e45f90dc24f04f525f31a8bbfdb1d75810249ef1c62a9620212f
SHA512a95976a15c1dbe0c12ba25dddab5160686b6da7a96831796fde387495500873618000d07e5f6796fa293bb0a263aab9112f119ac915674571b03c1daf7d9be9a
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libOMX.18.soFilesize
69KB
MD53b89ecc91c5f71b2c278dafec47477e8
SHA1592ef6f28ae6aa14ebf1099f8b9dc8e04c89a867
SHA256a8eea981087d85657c5712ada11b2541d05c1cf79bd5865c9e8a5a625d43dab3
SHA512a8f67ef61c82f4aeda5010adedc7774bdf74660c269b1f399ca4a78ed13437ccb94dfd952151e985f724c7c1f407abc2644a48393a0fef582fbd35a6986ccfb4
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libOMX.9.soFilesize
69KB
MD5267c4ced8a01cf215b0aa2e31c069c56
SHA15de3fcc476cb18a9801625afa69583269a66dc7b
SHA25646eab165239195fb9cabfbf4369572d74f94705027bf4bfdc4b6b7d205f5a22f
SHA512e91a42a404be51fba1d718bba5ce8a8b7111627605c3adaac18d6f0bec1879946471f77a672b72e9d8d055734453fbcfcc7a6089209701969f5a8ef0c42a54cd
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libarm.soFilesize
8.2MB
MD5613b4c40fd43ce7cddc9790f1101cb82
SHA14d3366e6133904adc47a71f6efcbe520f24c80b8
SHA2561c18442a6a441d8f9140182b7dd6e0a4bab6e64f50e12cdb9901b5e9850958cb
SHA5122980c7188de9b86407d5fcac2a1081a45cb7122f82f14a22495546cf54aaa35964a782f7b1710eca5565b02b176d681d20fca336bb59a814854b358581e5dc13
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libffmpeg.soFilesize
7.3MB
MD5defa6688066997d66338499b4c033259
SHA17bef75d59287a58761d437b8c0bd394b156d1824
SHA25696ec1666372e53863ed3102e06890dfdd12ccca434bb530287480dfd292bbce0
SHA512d781dee48fb7cb121666d72b4e1d3e3b6c0fe4f1401f305761cdb383339632c3114c0970549b01a423e6daa1dda7b64e50f4cb62ba3edccf46084d65448bb20b
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libstlport_shared.soFilesize
365KB
MD5296f38e02f7955117f5f79841c2cb4de
SHA1789b4a2657a80e25fb2bad88637426deacb175e2
SHA256d5d10bc63b8dfabebb29c3085029f503b30f807bb9687b61a3ed238ff6dd72cc
SHA512f4599550b955245e3079861b7b8cfe934d26570dd03169ed9d0d9e40fc0853501d885c37d333a46fde68c0e6c92b5b47f47d5f340087e28e73f822e831ffd9a5
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvao.0.soFilesize
17KB
MD5310c30fa96402b931001e542d9bdafc3
SHA1c35598588b591d4c6a522a5a49a230b16e1d0429
SHA256e6b56dbbee9fc0b18e2dbb3e6c01c5a1d94b6654e6bce00089497068a80ff8e7
SHA5125460f5b9a88141ed335f1276c191a91e923bd1376e1d54c831cb8b53b4a5fa3559e621320e46ee6541b626a6a9dc9586580977fe78df01633340107617d10b01
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvplayer.soFilesize
274KB
MD5d2d0db1485ca6ce08b59bf31b65003cd
SHA1b52e7e42631189af224e8662ea0d717aad8465f3
SHA2565d6fd0321245b3a9706f9b28af5cc6c9d024e27a802aa2bdcdbfd92489a3a707
SHA512d05bd50b2a660304a2f0ce95eae04ba3d8c56e374767cb3542b43274ec6df75acd375e461a8d1fae2ea3f77af1e547e959fca8e39f6e7eb00c9d9b8f841b9c7f
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvscanner.soFilesize
165KB
MD538e0ff0073aeacb7fb871ff27c270e2b
SHA10cf515a51f13f0d0a6bbfaf42c73f07f6d32a004
SHA256483da59188452399bf359d21243df2abd131299f5b077457025c6467627411c1
SHA512f5a75673badf0419528eff6fb8153cd4101e09a6c9f028f6a693ce738129caebd21ed3ca5ffa549ecd6b8e6d039f49220f6c5ab1e333942f5293763c31832d7a
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvvo.0.soFilesize
21KB
MD5c8181a21ca54dfa8976ed36fb77cc6ea
SHA14ee133b8167ed6ea0fd0103a0958295bad7cbaf6
SHA2568a74d0fea479c45755dd139391478dffb8554d5b0eb64b1fb03e6da9b0811358
SHA512727e2289a6c8469d7de3198589d26e048c6bb3ceedec3f9cd4286a6adcd748710d11373cc97e287b6916060b2caa4faf797fe85441419d885918002d95594cf8
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvvo.7.soFilesize
17KB
MD5c46c8e02e095a35879213d25196a621a
SHA1c2cc9786e2fa5770265385b0c4a9a3d00a77e1dd
SHA256fd38c406ee119ad7ec9ec9b1ffd7e461fd93c6586552e19076bdc0d15cca4250
SHA512d9b025b2a361594be6ff8de56ffff30296c9c6ea395b733c634435076f59db4616bf7654667801a0d9708492fb5ddb34c266847d7835102271cbf724a6f30ac3
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvvo.8.soFilesize
17KB
MD5aa19495ed8a8a41336c8256f892c80c9
SHA18893a81cf04b361fa0eb1471e2d6ba5bfba61e1b
SHA256fcf03c0cef18b489ddfbe419e28112710abd5a33e9b9b980013a783c29c43216
SHA512c7d72771ff2d13a0922ea4be0359d36260b620ac1382e042af9da26f5593fb0ec78ee62cbea45af131cace6c567ec2e3b9dded949d1285821a919aa51859630e
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvvo.9.soFilesize
13KB
MD5617c051e208c97c82107a0060ff9c4fa
SHA107c8cb9f45d07bc08a6a6082f7d3cd4c125166cb
SHA2567e605dbfbc08d5f8f1ec9a2f30b84639c65a71382b5ad00cb926919f0ee47796
SHA51284adc60010613115a16262daef473d7ac8d24531976ebc18fdc36e0afa2437931bec7069b2f05e43c35a1e937e4ca2c1846e11eb39092aa6e33b843efb8b0d35
-
/data/data/com.kaixin.android.vertical_3_etxhh/libs/libvvo.j.soFilesize
13KB
MD5994c6008630ba5357ad8eb3232bbcc31
SHA15039be4fcde015f3e1df5f1850a6c812c999fe8c
SHA2565f75bc5cf5b7481f6920de937b531a18751fc01a622068a30a049f1ab790e1f9
SHA5121d9cefcbf4407998e4d950a51be744f07c97e043d5ad2419aaffc09fb61fb36599b5687d8945226bde3c05b8136cceae2760f3fa2eab9998fd9445b8e9eaf594
-
/data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jarFilesize
219KB
MD532b5f17d5b9556bb43313b15db803048
SHA14ebd1b47387b7b9a7fb05ce3f82d0d77c5c972f6
SHA25689098c105efdd69006e896d6f1963e84b16e815d5d26ae950535a98e2c23feb3
SHA5123603117ffa72991d7b560422ed4d168ff9513355d5dd6d29208119e77983d4f3c7ca8454da93e79e94ef677584010d98cbf7a5c8f7b8309a57a4e1b4ceb99bef
-
/data/user/0/com.kaixin.android.vertical_3_etxhh/files/__pasys_remote_banner.jarFilesize
219KB
MD59c859e81e45f7d6f6d3a8b8cdaa650a2
SHA1c6798ed55e37020cef4b4c76c095f45bbc404438
SHA256028f5514443840c54d4b832d439a70cd732c4740bf2bedc3a8ba567268225fbe
SHA512f01429687a0a9e85be068b7553a5e0928f7d7b4b306c1ba5823e7151be4e30f1f6a69bdc9d9fa3c5d0d722d8b46dafbfd956783fe4e27d52204c9a29e3092ee3
-
/storage/emulated/0/.waqu/sidFilesize
15B
MD5748d9beeaa1899252a7365b780b95fb0
SHA12158cbe9044f2b138df0094615afe6616e526c9d
SHA25659290d2d5a77605f8140feb82e44e8438115fb2f93dc56ed4c225b88c21baaa8
SHA512cdeb0c4cebf1cc96ebda6940763a940df76120ee991bc7f003480caf055a970f16e4a19ef2ba2c56fa056d539b981e16542ec7239a7b91dd3828585bc2d1e440
-
/storage/emulated/0/Android/data/com.kaixin.android.vertical_3_etxhh/cache/uil-images/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56