Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
14/06/2024, 21:00 UTC
Static task
static1
Behavioral task
behavioral1
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ab70ce83be2275cdf7e8b42c13a01a91_JaffaCakes118.apk
-
Size
5.1MB
-
MD5
ab70ce83be2275cdf7e8b42c13a01a91
-
SHA1
b584bd76f98b4d208f5d675da8c4a6e02008da98
-
SHA256
10ba0cbd33dbb29ef90d6f712d8cfb5cb9742d2f6d600f5a640e981ecfaf5b8c
-
SHA512
6adb0fc57f1235a89bb693def02e141997d125a854b255c09c35ce167fe808703ed25b5c898d2da79285976c0eb69a1ed4b83af596b6efbed59e970e5bd6a334
-
SSDEEP
98304:s6f4ibBoBe1LTHi3vKeDzfFSkWmvDk4oPzwMWIgmB1ZbrqLSC9P:s6AibBEe1neK8z0YoJzkITBza3
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk sansunsen3.imagesearcher /system/xbin/su sansunsen3.imagesearcher -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener sansunsen3.imagesearcher -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses sansunsen3.imagesearcher -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock sansunsen3.imagesearcher -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo sansunsen3.imagesearcher -
Checks the presence of a debugger
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo sansunsen3.imagesearcher -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo sansunsen3.imagesearcher
Processes
-
sansunsen3.imagesearcher1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4476
Network
-
Remote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.178.8
-
Remote address:1.1.1.1:53Requestgoogleads.g.doubleclick.netIN AResponsegoogleads.g.doubleclick.netIN A142.250.178.2
-
GEThttps://googleads.g.doubleclick.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.htmlRemote address:142.250.178.2:443RequestGET /mads/static/mad/sdk/native/production/sdk-core-v40-impl.html HTTP/2.0
host: googleads.g.doubleclick.net
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Linux; Android 11; sdk_gphone_x86_64_arm64 Build/RSR1.210722.013; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.106 Mobile Safari/537.36 (Mobile; afma-sdk-a-v201004999.15300000.1)
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
x-requested-with: sansunsen3.imagesearcher
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate
accept-language: en-US,en;q=0.9
-
Remote address:142.250.178.2:443RequestGET /favicon.ico HTTP/2.0
host: googleads.g.doubleclick.net
user-agent: Mozilla/5.0 (Linux; Android 11; sdk_gphone_x86_64_arm64 Build/RSR1.210722.013; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.106 Mobile Safari/537.36 (Mobile; afma-sdk-a-v201004999.15300000.1)
accept: image/webp,image/apng,image/*,*/*;q=0.8
x-requested-with: sansunsen3.imagesearcher
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.html
accept-encoding: gzip, deflate
accept-language: en-US,en;q=0.9
-
GEThttps://googleads.g.doubleclick.net/getconfig/pubsetting?app_name=sansunsen3.imagesearcher&client=ca-app-pub-4130789094128726&admob_appcc=2729115294Remote address:142.250.178.2:443RequestGET /getconfig/pubsetting?app_name=sansunsen3.imagesearcher&client=ca-app-pub-4130789094128726&admob_appcc=2729115294 HTTP/2.0
host: googleads.g.doubleclick.net
user-agent: Mozilla/5.0 (Linux; Android 11; sdk_gphone_x86_64_arm64 Build/RSR1.210722.013; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.106 Mobile Safari/537.36 (Mobile; afma-sdk-a-v201004999.15300000.1)
accept: */*
x-requested-with: sansunsen3.imagesearcher
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.html
accept-encoding: gzip, deflate
accept-language: en-US,en;q=0.9
-
Remote address:1.1.1.1:53Requestfirebaseremoteconfig.googleapis.comIN AResponsefirebaseremoteconfig.googleapis.comIN A216.58.212.234firebaseremoteconfig.googleapis.comIN A142.250.200.42firebaseremoteconfig.googleapis.comIN A142.250.187.234firebaseremoteconfig.googleapis.comIN A172.217.169.74firebaseremoteconfig.googleapis.comIN A142.250.178.10firebaseremoteconfig.googleapis.comIN A216.58.201.106firebaseremoteconfig.googleapis.comIN A142.250.179.234firebaseremoteconfig.googleapis.comIN A142.250.180.10firebaseremoteconfig.googleapis.comIN A216.58.204.74firebaseremoteconfig.googleapis.comIN A142.250.200.10firebaseremoteconfig.googleapis.comIN A142.250.187.202firebaseremoteconfig.googleapis.comIN A172.217.169.10firebaseremoteconfig.googleapis.comIN A172.217.16.234
-
POSThttps://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/fireperf:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLcRemote address:216.58.212.234:443RequestPOST /v1/projects/199670489334/namespaces/fireperf:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLc HTTP/1.1
Accept-Encoding: gzip
User-Agent: Google-API-Java-Client Google-HTTP-Java-Client/1.26.0-SNAPSHOT (gzip)
x-goog-api-client: java/0 http-google-zzcy/1.26.0 linux/5.4.86
x-android-package: sansunsen3.imagesearcher
x-android-cert: 61ED377E85D386A8DFEE6B864BD85B0BFAA5AF81
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Content-Length: 219
Host: firebaseremoteconfig.googleapis.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Vary: Origin
Vary: X-Origin
Vary: Referer
Content-Encoding: gzip
Date: Fri, 14 Jun 2024 21:00:43 GMT
Server: ESF
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
POSThttps://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/firebase:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLcRemote address:216.58.212.234:443RequestPOST /v1/projects/199670489334/namespaces/firebase:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLc HTTP/1.1
Accept-Encoding: gzip
User-Agent: Google-API-Java-Client Google-HTTP-Java-Client/1.26.0-SNAPSHOT (gzip)
x-goog-api-client: java/0 http-google-zzcy/1.26.0 linux/5.4.86
x-android-package: sansunsen3.imagesearcher
x-android-cert: 61ED377E85D386A8DFEE6B864BD85B0BFAA5AF81
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Content-Length: 219
Host: firebaseremoteconfig.googleapis.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Vary: Origin
Vary: X-Origin
Vary: Referer
Content-Encoding: gzip
Date: Fri, 14 Jun 2024 21:00:43 GMT
Server: ESF
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
1.3kB 40 B 1 1
-
530 B 40 B 1 1
-
2.0kB 6.6kB 11 11
-
142.250.178.2:443https://googleads.g.doubleclick.net/getconfig/pubsetting?app_name=sansunsen3.imagesearcher&client=ca-app-pub-4130789094128726&admob_appcc=2729115294tls, http27.9kB 154.3kB 120 124
HTTP Request
GET https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.htmlHTTP Request
GET https://googleads.g.doubleclick.net/favicon.icoHTTP Request
GET https://googleads.g.doubleclick.net/getconfig/pubsetting?app_name=sansunsen3.imagesearcher&client=ca-app-pub-4130789094128726&admob_appcc=2729115294 -
216.58.212.234:443https://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/fireperf:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLctls, http2.0kB 6.9kB 11 11
HTTP Request
POST https://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/fireperf:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLcHTTP Response
200 -
216.58.212.234:443https://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/firebase:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLctls, http1.9kB 6.6kB 10 10
HTTP Request
POST https://firebaseremoteconfig.googleapis.com/v1/projects/199670489334/namespaces/firebase:fetch?key=AIzaSyB8T5aL6nY0V65fVwMaOFVfTRbW06m1xLcHTTP Response
200 -
868 B 40 B 2 1
-
11.2kB 9.9kB 31 35
-
3.7kB 11
-
70 B 86 B 1 1
DNS Request
ssl.google-analytics.com
DNS Response
142.250.178.8
-
73 B 89 B 1 1
DNS Request
googleads.g.doubleclick.net
DNS Response
142.250.178.2
-
81 B 289 B 1 1
DNS Request
firebaseremoteconfig.googleapis.com
DNS Response
216.58.212.234142.250.200.42142.250.187.234172.217.169.74142.250.178.10216.58.201.106142.250.179.234142.250.180.10216.58.204.74142.250.200.10142.250.187.202172.217.169.10172.217.16.234
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD511d1e41eb0270546158dd2cc29255978
SHA1c081827771e92decf82446f64fc0605a45ac4cda
SHA256ae9a81b8841cea8a1c3410ebe35860279ee2ec70ae14277b7ccff728656532d0
SHA5123591b42afc1d416233628124963729a7a294377d55d3a93d3400b7734630e9bf0a453f39086dce54e500358a98113ce9923887d949a265b0b229c3deec7cad66
-
Filesize
512B
MD51461b83fca1c94d69d1a66b9ec8457b6
SHA1b0232ffa9476fc92551508ab716481176b66b871
SHA25652c9b106aa9bd3c9f5f6ccf32bac8bfa01f516fd95a8b58465c514286fc21b0e
SHA512f27fd9c735e3c608d31b1b2eedbb1860c36f4ea86ef8ff5b1e68c8cc55d4dfa7c6d7878c8d4078eaca60a59ba44c1f0d930b49521a1c146e240e50533fae8d87
-
Filesize
8KB
MD5444a58b6a19b0c6c10f9b6dda4242372
SHA18cd368eadbf229d9c18cd8ab3a8b3b505324b918
SHA256625b288e72a3c100ce5d542eb851a0c2a08186e37d0d3c71837d8b38287d8525
SHA512bfaf1eb5dda17c4e88adb0caf26f6f96285a5cd416a3c1915c3b7016bc7e93a5465d51903d653ba4aeb3cbff7d7684e25e28707a7b99ba7adfe6c08b96866daa
-
Filesize
4KB
MD536a9fc58e4149accafd98cb35aa27c1c
SHA1911a83a2c45aa41fd6f9ecfbd8bf1d582bb69768
SHA2563b9ebce84e1d632dbf35e99c09ebe5058a11b8255982df2237bf94939a45bf2c
SHA512546f133792b799c824caea224946eb4c9e757c63100dda3d9f2da5cba84b32ad06dd7ce09485386ddbda3d370876962a3b87f510db5293a256be600da58e0afc
-
Filesize
8KB
MD56bfe7d2d6d1954ac76661ba2a9ce0481
SHA160e0ce57329387c82cfab00570d3c761c1a4371f
SHA2565af914dda7b5e61b2d28789f134add8d450aca21dcab1e7961589cc6f3e0820a
SHA5127b816b9af4f88d22fddb2004a00ea55f96096dc22f24100e8dc18250dc091c8c60474f59c8f92d6723acdd44d5131f9c8cdaa260c3cc4939e5a7497af7df12cc
-
Filesize
8KB
MD5b01752e670a24007b54cb274ee1020df
SHA100a3906b3bf1de8254f691b72dc30b61e01dff8c
SHA256d0a5eb0ec4c0d935ab9b201c892bb9956a2875ae7fe1692defee39440d3616df
SHA51225a35aa6f6a29cd18ea4d3b65fd30007726ae3e20c4546658e0f03e436086e63f8dd58e4a0adf25951dbb13123a7dd3d0516989d2c0816bb119b5ac3aca27868
-
Filesize
12KB
MD5022401f6f6abbbd50b56fbb819d44d8a
SHA1a025532b41621c1a0a20ef796a80e10cb17e4a5f
SHA25634737cc0788521698ce0035fdc69c793fad29dd7c0e67022aed5c800db1830e3
SHA5120d2558fee2623f8b179ce6528f06a03d1a8c3e96803e6474ddc5661014cbfc83ec887f138f2618ff4ab44600973e30ba866667a8aa110eaedc05fb6afd98a15c
-
Filesize
16KB
MD59745b7b4ba5630d6fb0d244c64ef4b5e
SHA1bc968d208575a1f4ac2dd148e9dcf2acf237538b
SHA256f0eaf8a9bdf0ce71dc501b146707d77b4d661a1d120f5e7244019384ab509221
SHA5122ea0c6f7ae34afedcbac04a28114cc8ba150cc64cac8316f8951d8da3acaef5c18c3fb57fbef1c0d25badfb38eff7cabfeb560c6abaea183800bcb8b35327791
-
Filesize
16KB
MD5b0eaf454eca55dd2ad384dbe1f83d5f3
SHA10d09f0a6630640932cc3a4c1183e24bcc99ec994
SHA256688f255b649ef94b96843dee6e0cd16c54db69a26e3b634674434fa4c0022c14
SHA512ed46d77ad212e990d1bebdb83f106505e2073d475daac7dccf3e15d8c17d919cdf44225de0879d3194ab24de3f79812e8a44e86ab8cf7a8e25d08e4ff36dc249
-
Filesize
16KB
MD5e18feafcffcf65e5c937ee4f082e3684
SHA17ba44ff57e1038b7349818172657c2d2e9e50749
SHA2566f3ce75fb8741c1531bcf01c38c9c64e8428f880f8d355bfe1bea0688ca4b8b8
SHA512573d13b6f56708d50fc1dfb0bc28dfd9c9c48a2a3f1f7ea16968d54adca6f44d9061aa71ceb10893bbf9d7b4079af9e9e58246658b3f53890dffbcebe8afd04d
-
Filesize
16KB
MD5ed00ffc1bbee681b1f8fd1a97a968a95
SHA107f835af77d71b3b23db9f0d5b3f222dd19cdef7
SHA2562897918c2548dad6f4009a2f3544aabf1476bc8a7c3e39696c357961c9e0c93c
SHA512cd56c167b75ea54a41cf4ef8ae2d966b2e93c03973c35d1833731cdeb648a8aa7023bdfde7dd8e1d2842f7fc171d12f297de3d4060b5e668c68acfc9dd5ecc4a
-
Filesize
16KB
MD55f51404e3412ee7fdfa7e527ff07aa9d
SHA1f61a7ba9ec383f95a57af86b4d07f9413f9f3d0a
SHA256c3ee01e9c9c6d791917d91c765cfa4656e2b802bb483d9e76e75b655a6547dc3
SHA5128897f82967f2c420e2a9d724cf79697a3c63dcb52eb77c33bb27b9b306d8fff98c2a1c63e3cc9cca8661ab20c49acb7a6642d7d3b0e6c8c4bdddcbf6b78aeb3a
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
8KB
MD5c3efa3666893782a6e7bbc04d7382236
SHA142c98a56a79102a568a7ff51573c9e2489ef7c75
SHA256a4c92facc2327b3e8184324335e711ad6021e690fe7f65c9fe401bcf353fe10d
SHA51243de7469d4997337530c067f567f87d2d40c0632453fc81cf6482d801cd2120a723405811f7afb72109cbac7d8552e1893dad4fcf8684f6f47cc865ed26d600e
-
Filesize
8KB
MD51ab1032a3629903e8f35b88fcbd2559b
SHA108e3173ec8878dc7e98dff7a4bc03aa6e3847bb3
SHA256e9a30183c36c339dce6d33e450b6362f0c1f18b98915832bcb104becf983c20a
SHA51266196a3fc8fd15987fa46810ea82729531b400a85c60d33b65a3842826ac0bca50284c27ef0f3b0839e6874e2183284c942577e16a1554c242880a8ddcc27420
-
Filesize
8KB
MD572f9595dd6d9d29a26892e92ce47b297
SHA1bfc24cbff88114b92aab914d73638257abb93280
SHA25654601ddbfa1c102d1907c624ec9b1cc1b7551600e8a1992b6d909e9d1c98fd08
SHA512ab496a0372c100628c4e61902c3b5bd323921ec97dcff16bcbb29391fb795c57cce6a17c3bdc4d0f446b7af80f317dcccfe0c33d7949b1bbc8c3ef639ddd7003
-
Filesize
512B
MD5a3711a332f92db5fca96abd8357eefa5
SHA15b51696fd58de7d18660446f5633ad9cff26d5c3
SHA256cd94d653f05a9b2b04c5da8cb144d2e3b9a9e6c4a35f1a9f2a2a770712fe28ac
SHA5128c4c9d8373eb26fe2be03fe1b9f6407d06e697d7fb1454acf6ef4b1d551b9607fb97f18472cfc78900e0919a4b1bf56a69dc5aefa0befe48469e789a76b1e94e
-
Filesize
8KB
MD514c5810dec712af11916f01f0e7f2965
SHA1febdfe6874feb1b349bd2fafba38080ca426655b
SHA2564b2b76394dc41de859a5f2baa082412732b4e1c368f4c0f742eb2b04bf66c5ad
SHA5122f88a98fa00dd26070f5da807953d024c01fbb56ddc007eee8734ae022352204f88ab3902d36cd4520f1657898bc80552dc283e9a3fb16218b151c2c3091d0d5
-
Filesize
4KB
MD584a87219d3dd81185d1b4514762bd177
SHA1ae0a5c09673c26495c02327dc00c55dfa47fbb55
SHA25687eacb5242b73cce37591aa1a717555d441b983dfe5eb22ba0dadfa14ea31fc0
SHA512e8718462d324abefe27a8e1539bd5724bc55a9f634848a386944c43ab2e5e2e0a18891e7fa87f97bee6503d869515f851ff951d349bbfede8787d1d012482a5f
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2BeginSession.cls_temp
Filesize77B
MD52362e1fb98a17a5d13f50fd9d51edcfc
SHA11297ed153ae78fd439c4d24cff3bb5554ffe8171
SHA2565f240dd1f7b52264e6a3bae2d4b05135a3553488b2551457dc06c9dc8d13a817
SHA512d8f15eb3177247ca7e1746f04cf62a04a7ca8184c88692023533deb4cc3a4f369afec2318bc889e4b4213d61ac475fdd1aa55b20f1562651bb52e837cbe0c091
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2BeginSession.json
Filesize132B
MD5d8887bfc2119deda3928e160518c1003
SHA10cb7a9d340365acf5067f4e39a6f778c1a35cfcb
SHA2561f8cd91b0221cecc2095dfad7043293def25559e3340dbddf1bb464666668504
SHA512ed2e6765b8ec543cabf1ff4980f03759f706daa34a6cedd530b01f8e9f579aced5714c23002a83425f354c1c63996dc1f8b70a63de9e0e2df4135fe794403c40
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionApp.cls_temp
Filesize118B
MD541aced5c76d4191e08317aff13941ccc
SHA15cb7b76001fcaf66b859cbdf62d00a7261b26bad
SHA256123c484434a03b7e7d5c135d97dcbdf0ef3acb6c43039044128ba6f69ca2c3fe
SHA51225a696c7734a41853e5c0af597d7e4cf24ee0aaeb385221d43f8bf70d508226da3def86ef490862aba79c7ca2440a8a6c49df5121540ef6db0c59320a9688804
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionApp.json
Filesize232B
MD5d19656da9eb30eb273c0eb39f66d2c65
SHA1f93b1b48fe8d89cf01ae447d970f60ed775236c8
SHA25663712af1be1e422cfe7480d9ee5ba9229559494855bda81b1e9a7e30537adff5
SHA512e0dc655f2ef894fbce9972fed8365817772e53cddd40b0cebaa7f60ce79262c5554099fe7bc8070d7582328c82507c69fd2fcc85d4a2e2c23e141948e8aa5b5e
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666CAF7100C2-0001-117C-8689E62AB7C2SessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-666CAF7100C2-0001-117C-8689E62AB7C2.temp
Filesize313B
MD51bca738f4c8b024fec14e90e7eb24bd4
SHA1d9592aa8e1bf4fdb3a6d0a8312ecd68abc52ce9c
SHA25606dac303f17feed9cb922c2e3744b434a4c0b27cde1f624c9f4bfda8496b083b
SHA5129aec36bd80b41294a2710cd7071ac961e6912ca8cf08252516bbe6719632b7630505166205115f5a18d359a8dc9ac11f56020c2c2f59959ac735498962ac0986
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize405B
MD50f8d4f3db778bda8beb306f7404d4d53
SHA17b5befb946a532e3e87144f8f595d690cce958e7
SHA256cbef5550cc5cc5480998effa1385c4c935c8192eb514db9b1b03729d5346825f
SHA5129ad72be6c0f920698595ed4bf1b2d8f0d953626012e87a776c535331cdc33f53941dd02cda48c3c90d9fb5db292403da685ec52f5c9e85fba2c4b745976a1a5c
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize851B
MD50d639259b47cb2f9b66da385357d2ddb
SHA1009876909bf3e83548ec3756cc561ad0d24217bc
SHA25629819d6bc4ee520739d50d19293f803c2a7608ed06d5f46bb407a8a80bb3f7f7
SHA51289ebc9c76a4e6b90259996f5a1b192c2c594176fecc04af35c17ae3a07117407b07ccabc02212157b262493be8565a90821d9cfbdffe7828c39cea3bcfae55fc
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/sansunsen3.imagesearcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_8711758a-e605-4e65-8bf6-73e256046a9b_1718398838651.tap
Filesize327B
MD5b2af6f69ee0cae5eb62f89f0dfa29c4b
SHA165d4bd645420c1536ec2a31993517d53daa38d42
SHA25665984d0df679efd9a031d37fbb4d6c481e58f3cc921a4eba17c45439fa8b94ed
SHA512aeb24bd1a03d979643f4d6dcdce8752190f4a11275bb0feb4081fc1437cba544ddc4745b0ebb566be6992309e734a0887faab016da465fbad6aa60759ce04328
-
/data/user/0/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_firebase_defaults.json
Filesize200B
MD52266e0714179edf3044e2e19e208a6ca
SHA1c3c4930bf201dca4b549d54f84b25cadcc7d9c42
SHA2563ab4a70525ff58df5c7e494436093f435dbe6ea0d1d04a4eee961a1ded810c20
SHA512fb67b6aa0e0b4131ddfbb3f6a60e48088cf0b6327810fff7f698b7041e6d3900c0f4411c09951e5883d2f37cf3068fed5e6d90a77fd32fb7514b7239cb452da0
-
/data/user/0/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_firebase_fetch.json
Filesize215B
MD5f11769ae3ffe1950d1dea1576da95cfb
SHA120851f41d0c546c9026ba82975be8d9b4a12da18
SHA25608c8e03a7e9587b2bc6d3f5dfcd0e7b5e69ab2d8937c9532ebbb860d827606ea
SHA512fbcf5e71e0a37b97b978436490f45155837076623dee04f71221b86ec21aa3c594decbb37188184ebf3db236829d2af45fdeec2c8e3a1fbb0f87121d67e233a6
-
/data/user/0/sansunsen3.imagesearcher/files/frc_1:199670489334:android:2467d4bc170e5abb_fireperf_fetch.json
Filesize1KB
MD5c85547356a5293701c3aa5458f8f641d
SHA1a8a2896297d139731b0311dd529617b33cf5c143
SHA256e0de431f37efc9f2c0ca768d35d9becaf35addb4f9c83497ca2713b222cc73eb
SHA512107d59d7a8a19dcb6756b79cbcb1a613a2f2c71539048658974831cccd2735f9b03fe0da1000c3b5a7ed38c04ff79a523317f86cdad5fd6fafa65a25309fc8be
-
Filesize
36B
MD5389eaea3e580dcb83aa50d09c7c20c65
SHA1b9cc53eefc8b1c0e9684a54bde0b48a880ecb99c
SHA25673c41bb07f0ec939980019068868c6d029f89e3e39e2807e83e96219994c5f3b
SHA512b60cd43d15f3cf0a395fb802854ca3d371b420aef498e92126a7809ddb22b39918e53442aa02c1cca85cae1024b64719c30bd47943e2493527a1f7bad06063b8
-
Filesize
2KB
MD559c2563ce64cd02a0b145b3156039664
SHA18309220cec171d328cd850f2e38f8fd181820e54
SHA256c406e2033ecaa10213d9a31be2d20c3551c31b9905e400c24cbdd796bd09f936
SHA512e37b12188a456904b315f063af3171b14e2f3ecbb54a2612db240526c64b6833723094af55928aed8189b80b1cd6726aef19bc1ebc657eb39368e078f66e9421