Malware Analysis Report

2025-01-19 07:59

Sample ID 240616-x5p1jsxgql
Target b4ce447bfbf4a25bc3c96dd0070cad97_JaffaCakes118
SHA256 caaf51c1bf91528ca46ebca052cf8cc8c0547437d02c76345ae2a559bc3f889e
Tags
banker discovery evasion impact
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

caaf51c1bf91528ca46ebca052cf8cc8c0547437d02c76345ae2a559bc3f889e

Threat Level: Shows suspicious behavior

The file b4ce447bfbf4a25bc3c96dd0070cad97_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker discovery evasion impact

Loads dropped Dex/Jar

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about the current nearby Wi-Fi networks

Queries information about running processes on the device

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Declares services with permission to bind to the system

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-16 19:26

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-16 19:26

Reported

2024-06-16 19:29

Platform

android-x86-arm-20240611.1-en

Max time kernel

135s

Max time network

165s

Command Line

com.mrt.pubg

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.mrt.pubg/files/libs/zip4j.dex N/A N/A
N/A /data/user/0/com.mrt.pubg/files/libs/zip4j.dex N/A N/A
N/A /data/user/0/com.mrt.pubg/files/libs/zip4j.dex N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.mrt.pubg

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mrt.pubg/files/libs/zip4j.dex --output-vdex-fd=72 --oat-fd=73 --oat-location=/data/user/0/com.mrt.pubg/files/libs/oat/x86/zip4j.odex --compiler-filter=quicken --class-loader-context=&

sh -c mkdir /storage/emulated/0/tencent/QQ_Images/

mkdir /storage/emulated/0/tencent/QQ_Images/

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 w.eydata.net udp
CN 125.77.158.24:80 w.eydata.net tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 w.eydata.net udp
CN 125.77.158.24:80 w.eydata.net tcp
US 1.1.1.1:53 hmma.baidu.com udp
HK 103.235.47.161:443 hmma.baidu.com tcp

Files

/data/data/com.mrt.pubg/files/1.zip

MD5 ec88a5119533ca34a956a655cee163d2
SHA1 20bc610463f33dc46d5e8056b0dacaad99ad4e99
SHA256 fbc4a91f740a938fb04cdf5dd52a90f384dbc0ceff7a71802fecdd4ffb510aa1
SHA512 6e434d9a49d4ed8a0f64e35a95920379065b6a574c85787e20b7771e0d817950ab18c0b89a2146e0224a9e6e3044f76fef060aea2c9f6f68eb60a800c9e248d9

/data/data/com.mrt.pubg/files/cd.lua

MD5 311c7e8160120c83d66b747c3dea6cf2
SHA1 3ae2ae467986b69abf4e41702784183b4a6fd736
SHA256 13ac637cd0fab38f21a13e9cac1984faeff5bf192c23abcddeaaf557f280b288
SHA512 268359cf7125fe144704f34c75586961f5e7da5ab19bd5f20d9d1e741ab7fcf8346a7677b701f9a13eb1066ae661e8085ad168f114bf927e81f180b8984ed2d1

/data/data/com.mrt.pubg/files/icon/logo.png

MD5 a2e3d57736d470f703479cbd50439562
SHA1 0eb5f7dfecce339a65bdf62c159d1ac8e0676204
SHA256 e6e6a5ca0ddfc969ce3f75d35f6667d834576a96c37aa2593da3edfca35b1f59
SHA512 7371900625857dd0517e94ca22c3d7dbfc76dc81ea81cc0cb446d09a88d3cfea6d234bd23818c0c3911316d837e15c404a58c10787fce80e4d537762a1c44d6c

/data/data/com.mrt.pubg/files/init.lua

MD5 2dbfed60eb392c6705341666f38ffffb
SHA1 38528de7628e0cce054364af466671b049f84990
SHA256 c986b645a758704a1e52bace3f393191dcb61a6201eb184e91155a45d5d480ff
SHA512 f2d22ff334984c5c28d2103165f04cfd3323a7fd5be2a75db4343339605a7b4bd1400090e98aa0529082ffa55a175fcf25a8400f524222d1799ee4c8630ab7fe

/data/data/com.mrt.pubg/files/layout.lua

MD5 ac93af1992d3e8b36a9b6014764d0d46
SHA1 989c028d582450053bff448e7a9c21a2b749ef7b
SHA256 5ff87159da40bff2967998cb0018e2a6b84179f528fa906cf06dbd0f6a0efe25
SHA512 6bda6821a6bae0d20a539641ec8b5064f4f89ec77b49fdd0dd6d3ced7439c99f59ea28e6b05aa25794f5684feb594237f93f156dd25d16f8049f64ffbb7ef3b0

/data/data/com.mrt.pubg/files/libs/libc++.so

MD5 1e5e77df23e26fe3af17e32e643a0fe5
SHA1 e07e8c21a51399e2f246549645d49f769c924ff3
SHA256 1cc814fe6e3fd334cb27becc0029890d2952dccc99fe51513d2aa468091a3f5a
SHA512 7d3f4296e1ddb563dd8cff2dcf2f7b7ff6328f14a23ddabadc64685d9fe38e057da147a6baa0da2103ffd20ba46e8b5034f254fdfc8b4748eac07a21cf71a6ac

/data/data/com.mrt.pubg/files/libs/oat/arm/zip4j.odex

MD5 0289bc2ca7319920cd1b682d6186dada
SHA1 5fec4f8f1f00f4cf6d5caceadeaaef5f72bb3d1f
SHA256 fde329718f07bb217d1d3624ef629edf4e71bf7a13fc7ed4cd0f0de81499d5ca
SHA512 aa2555763fc968db6719ae196f87b693af76df46b0828e337012ece4e9c927b1cfc02a0d53332e278c6a18e4a63e30a3d50f1a78015c9fea9be1789ac9834b39

/data/data/com.mrt.pubg/files/libs/oat/arm/zip4j.vdex

MD5 5ca8213eb30651d880e29bf375c1239f
SHA1 5f547c8a7c3fca25846ede1b4ee0681b69b8bec3
SHA256 17cc28db0299c9bf5fa0e9a92db41cd9f9953fc6f535ea4a108076cdcb84f5e2
SHA512 6974f79c09970467ff21856a4ab469e1ad1573f492877fa1806db0a617a2c75feb86f06ae29bd9b1b4d4c02e1c5b280f28024653b2c9b2b67cadbca8f8ff1fd5

/data/data/com.mrt.pubg/files/libs/zip4j.dex

MD5 db88ca25dec201c3eab3edb39dfee4b0
SHA1 76737ddf6d902d49897357f8a613f162b44df952
SHA256 670142996ab97ff776d9ffd00ed667be6c40de7322628dc88307ed42fc0d3dda
SHA512 0bf814d7fadb3ca04aa2779d1fec35de28c3bfec98140a633e5ac283cb66e20210090686d2b6ff24c442e57b6d28d0b1cee0497dda1b18ff359087b3f096181a

/data/data/com.mrt.pubg/files/main.lua

MD5 ae7832ac2a23733a64984f3f5b3d2678
SHA1 d21a0cc9f1f75b41a6597c889ad7751b402ce816
SHA256 5e644648ee7209235f97b32d502726067b9de0a06349e4ab0c11f433565b54d5
SHA512 02f9a783ef7701c78a9ab6014c3af1af7d1eb436a2a5fc6b581712f3c279f473a701e770c1047a6e83e2fc45c40d3efc6cb2f83044ba82374bccb43109f17e0f

/data/data/com.mrt.pubg/files/mrt/fz.lua

MD5 fbda34571036a8b0ee32e7f84fc1ea20
SHA1 6cc5911dc00ce690336a39d9524f280b2d5b6e73
SHA256 42e113ca2fd835f77b16e75c1922ccb0fc8c198bbe0e3b44c7b1491e5d67c92a
SHA512 d5f07cdb3b19dab7ee294d93fde9aa7ecfcc8baf9ef477e9928a5650c1e0cf3cd6cc08f1bf207a1b3d32c3713d67ca0b94dee3054baf663647eafe3c981c5a40

/data/data/com.mrt.pubg/files/mrt/lt.lua

MD5 456b824d0b50531691695443cc198a73
SHA1 f02f79d10c3ddaec9a8cfac7bbe8ec5f34946201
SHA256 ae2af04672fa05ab1f605c0b1088aa3a914a8ad4357161f219e69b1438b6d929
SHA512 0bf40ad5dc01fb5eca21ea9f3e492fa9a587d18f5c854dfaa071c9f5f955ac4b71a601b2a02a573b82c94de6bbb5b5a1100fe465e3029d4a8bb4b5bbd21983b8

/data/data/com.mrt.pubg/files/zx1.lua

MD5 df3d4f7e4efbb8a06bd3b8cbea46bf4b
SHA1 28909bd6fb79ab04b08e27a30e9fee0f95e65b65
SHA256 bf21f1463e54d1d585ff72e89048e08b54cf388c5b1a7adc34215777649f2d65
SHA512 c65c01ab8ed6563bd0d752f5c81bcf92aca9eab01695b011fdd8c02bfb7a4075f2e8e01ebaf26d2e3ba7763385bcd114a0f1fe464d6f94128874166058dccc13

/data/data/com.mrt.pubg/files/zx2.lua

MD5 eb89f1dcc8923febc644a8a0296d7f79
SHA1 763d6176222366046479147e3079a38e0f1790eb
SHA256 b4d610667cb73627b78f1e1b1f8e2d31fc91369ba0064bebea24f6fd1fa81e5c
SHA512 8d9033227de75308c0fc98a8a7d3852b4257b976801fb8ac3fa8ff2ba8f37a267914087fbb66857f1904625d445b0de313e6f31d1a9880eed90e9cf415d87e79

/data/data/com.mrt.pubg/app_lua/http.lua

MD5 0ca9aa069b30edb84994fb69dc7b8cb1
SHA1 aab478a7cdc4e137c7c9f9b10e08c058d8fb1ccd
SHA256 a67129dfd4b6f8c1642010316ed4024827bc3c453c18be322ad3a77d88714204
SHA512 28af9825a4f74252f89dd4ba9592d55d9d6b802c6b661471a9c9d6657d0825032559cdd7ce75b4b11e1aada1d347dbe802846866169e826eadeb138d909ea8a5

/data/data/com.mrt.pubg/app_lua/import.lua

MD5 c199ca4c2be6fe71c8649f21ac2530e3
SHA1 fa60f59cf631aafdced296ceb8f850839049fa2e
SHA256 57a4aa2c37c967f24f1b3f31bd910ccbe21c4b8f08cb8ff77f4a23715beccfca
SHA512 05451b05a6962ececb69a1505923c779f9543cc274cb1fd5f215f163b22f1f31514c0d78953b7cd9dc97becc3d2f1e14784d372916e1e091862d30e60bd9f858

/data/data/com.mrt.pubg/app_lua/loadbitmap.lua

MD5 b5395e8d68efd81a248f54bdc2e4c133
SHA1 be73a63a264b72aba49dea36074b9c88f7f7b6c0
SHA256 f52a639bb91d53d20ed96b6565bdf4886975b7e2712e1fb102257c8ed265a093
SHA512 85a3f9bc114ef00593f424d17742f0ebf3c434a42ce66bdc97182d7c9eaa33aa30c096468fe614997022c4d88771872b23716ef8020c30d88836ada8872f1a8f

/data/data/com.mrt.pubg/app_lua/loadlayout.lua

MD5 4913dfdb87bde3b408d8bfc6b6bea655
SHA1 8b178f09378d16108cc1754fa4ed81b8467aa69d
SHA256 6ba6a25caf80e2e5deaf6c8888e715d0f21a636b68fcf8c2d89b3c8dd4c8c4c8
SHA512 d330c00fde1bb93938381ddcfe2149fa070f58fc3abb051d39cc170178e8fc0b08295f579cfb86d021f27d7e7235ad142321c5bdb551be919d7f236b93a2c4df

/data/data/com.mrt.pubg/app_lua/loadmenu.lua

MD5 dd861d76b75cc097a01e2f0dd67ac68d
SHA1 e78a8c68af24b540ee644e803edc2a14005ac9e7
SHA256 d085cb44ce5905320db972ce490a56df468723d3736a5582d6a984ae137c23a1
SHA512 3c30fe9537b8fe3b9d3f222a8cdf09aadebe294d3e88ab9b592e76ad7eb5cc9b9de66e8f67d88fcd81590250d13df7e91bce970070c866627afeacfe5ca88152

/data/data/com.mrt.pubg/app_lua/ltn12.lua

MD5 4466385f9bda9ae2729c59360414ef96
SHA1 19d87463cc67a509e43d1c1aff37c813221d5fc7
SHA256 8613071bd9b5c665689f380662e231ee61c85e05896481816d3c6fbf1a335974
SHA512 63a7912a2c390111f30da88a8a7306bac435af361307a086d5369ee804542cd89401a24b5dd70eff95b15b121ea2e6d6f2144ea36872ed3d6ccaab98721f40c2

/data/data/com.mrt.pubg/app_lua/mime.lua

MD5 6dd858e761928bf0b8b4eb2188588593
SHA1 b69bc58a0a32ae34d92d27eb15ccb50af5045b19
SHA256 63a5d5d57961228e3bc1192ad1002521179cd8e5105b2e0039ba9c7d8e69a923
SHA512 40380ddc6d107f7110ef905e8354f3aafe5d54d7a40e37e853693205b4246be22e774f81a069cb7de69eb68d7fb40277bb817d4fed12347f9a171e6e8ece3e5c

/data/data/com.mrt.pubg/app_lua/socket.lua

MD5 7220c2dfc8a9c1c30cecb3633b378472
SHA1 bc9e4ad57ecd676678b24c5ff4ee261fe1fbbbd5
SHA256 b88f77a3d03a8bd7cbc8146cb98d45619c6de7438b2e5d912482c1744cde0ce9
SHA512 0687ec885028ed046849137eb057676d5dd31717605c02f0840f2d57d9c567058b50447b8219c52d9364dfb9f68d279a2d8fe0c43e2a7664f83948527a7c003d

/data/data/com.mrt.pubg/app_lua/socket/headers.lua

MD5 364c51867a8734ab32c8e5757783e6db
SHA1 83decf92338fca9ea910ee9a4a3c93eb8c81cbcb
SHA256 b51117095726df7d08f3401913c4880d0bbeab0de98f152d1a145e16e1962960
SHA512 21583debf1b6769002647d02f40c287e33deaa268b8e1d1d11935a39ad00b6ad703ad9992c04c255bd0b5e6206d4b97b1b72c938795ed36ffd7af52904d1d80c

/data/data/com.mrt.pubg/app_lua/socket/url.lua

MD5 886c80722821c630adc004db6092bc9d
SHA1 d60db823793de30467d4601621b391fb8219dae2
SHA256 39715a874151d78c020bb0d26ae5a511467c2be64870228889fb3a0368dd02c7
SHA512 98f3b9120012b1db6501809f2d6ee6c6365ef04da06cd2725a938b83c39b10b6e2c0ed596d5c91bf6237729fad2c71c09a36da942fe4a5a2faa7ffd713cae7f1

/data/data/com.mrt.pubg/files/libcuid.so

MD5 cba2df3d60880522e7d11e9aae1fdf83
SHA1 05f665650fe52663dfc3c77cf46d7b71948422e1
SHA256 37892aa5b62f8141ab47063ad2aa120aecea5bb97db23045c68abbb0f72b980d
SHA512 6949ccdedec81086cfb8ecd3492fa3dbf5ea44162dce90f534faf86f3eb2c3a8202afe25a5391e7258aba9f71b481060af5b8b0026dc28f6fcf78e8d5a045188

/data/user/0/com.mrt.pubg/files/libs/zip4j.dex

MD5 84113bba148b3ad27973a629c1712131
SHA1 063035122278944758274a68d6c922bfd67d9609
SHA256 e75de53ed08712dca360467340308c78475c943799c5081a1b20048ff9e2ef57
SHA512 9101083e0ac98e10207d8a7d8a83b8cca67a5420d4d6a1379ae74cd2ede4af73b731dff59dc44332f9c49ecaee401e4a8a1bccf9bc245f06a89e0c04b186909c

/data/data/com.mrt.pubg/files/__send_data_1718566024877

MD5 51e8a100f639abff4d764acd61441f96
SHA1 68dee3b25c5015e25ff5061d299576b0597c74c5
SHA256 5084c34e6a49846c0d6f1c711a194d36779aa5c57571ff953bcb0797162ec8ef
SHA512 c14b34d0e535fa4ab04b029c86ce6d1ee76f873ff0539f28bb0f8b7428c23924a2c2f2f4127b9a00cc21cf2938050890cabf3fdc1495a70c207ab332f2943cf5

/storage/emulated/0/AndroLua/crash/crash-2024-06-16-19-27-04-1718566024970.log

MD5 ac012c7ac9f5ba9c5834fa15af0494a7
SHA1 67c515729f90754923533adb51be1f7366bfb8ef
SHA256 66ed2894e736477816ae7e325f2efece76445e85637c846937b34cad05c77ed7
SHA512 79b96b3172c8f28b57654ab5e9d10bb5198034c6688ca317dfa5649219e70ac7bb8b499ed1aa26e104ef0643255783c2761219ff97687248a0f0a89c9ca86a6d

/storage/emulated/0/Android/data/com.tencent.tmgp.pubgmhd/files/UE4Game/ShadowTrackerExtra/ShadowTrackerExtra/Saved/Config/Android/GameUserSettings.ini

MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

/storage/emulated/0/backups/system/.confd-journal

MD5 dabe794266940ba866fb1b4ba9173f68
SHA1 d14dd953b3733bd52a13bd47fc649bf4579f8020
SHA256 1eac51ed8ae6195c106bbdadea4b33d81bc6d5a8236ceffab1aab00be914a1af
SHA512 2188aaafbac0aa29395b65e749da3904ade1f6ea7c7f48355ffad4dee994399d84700e990e5c80d6dc443df107e7bde7e40fd14c304c0ddae77eea3d3b222976

/storage/emulated/0/backups/system/.confd

MD5 249e034c9703afc1fd6062371c7f3da8
SHA1 9ca489179488e0fe5a35f7c0d5887f163e4890cd
SHA256 18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a
SHA512 b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

/storage/emulated/0/backups/system/.confd-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/storage/emulated/0/backups/system/.confd-wal

MD5 31aa35a2905bb23ca133dd8a026b587a
SHA1 10f1538abd4618e49e693200659d147710ba0206
SHA256 6ff2d13d51afa4bbbb4fc9251d4fb4f3084cb708035d247298f311266c24ed06
SHA512 fc2e7845a1d350dbfe261b8b4f73ea5d5abaecc5a838d87bf56ada8a0b4264f5175757906d6a053e00da05903fbca9aebdf0c2b1edaa88f7943b2cc5f007f12a

/storage/emulated/0/backups/system/.timestamp

MD5 b8976f0c61be17411bc44b1353163784
SHA1 ccc8c0436286abb7820a8b84e1ea7de8b63d0f1b
SHA256 4fc4bcb9a2fd9342faf0387644370d157d0c6edc7327b5837a2ac970b63dab17
SHA512 6c8c2cbe3a7a0ecf698eb5b38879ac2ce66bc1e571d932bed9d64d8443820555055a2a181b87851a4d3e0a08dc3893bb89b9ee1f36a2a2d7007cc96e0feabefd

/storage/emulated/0/backups/system/.confd-wal

MD5 d688aa83141549b47745a2c67fd25938
SHA1 58891f612cff52699497f63418f6b181a7560315
SHA256 ca6a73c45e2bf747bdf56dce9b370250320292fdf5e07226e5e51ed614670672
SHA512 b3e7acf183edcaaf7799dcfaf02e86957361e4244f3ce8b30d0cd43dd7f9c8b35ca8bc64ede06f5aae9da67f0119b766e203196535f40207ff14bd72d61c258b

/storage/emulated/0/backups/system/.confd

MD5 8c7f6e3b52e6e841b895bbd13644ed43
SHA1 ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2
SHA256 6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c
SHA512 cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

/storage/emulated/0/backups/system/.confd-wal

MD5 2dcc8fe3199b8255b2e7fb2071226fa7
SHA1 9e68834e809dae09355c5732756fa7529d16bfaf
SHA256 ae87079c8ce2c5532037de53d4bc8a888ac6839fe76308cbd924ce5274c76f97
SHA512 071d209a95baea61e909efbe7ce3b6b0b562863985dbbe20a4274956ca3644373a63b75f70aa9bab7a7606e428693beb43217bdbca48ba55f38f2313d7d20955

/storage/emulated/0/backups/system/.confd

MD5 88fdbc0a89cbd763dd84405a02168b23
SHA1 5db791133c9c54c97c27a51ca19f87ef0dcd33c8
SHA256 c1b12f56b30d9363a7b6fe5740a35baec92048c5d5529a23d6158c784660fc5e
SHA512 2d2706c4b792394284a80dc8a0f5ba829692a62b3f49c41c320102216cdce3f7b0f85eba2f4280fba9c571c13ef2bf9638b65a7bd7142852c266c8bff2bbde37

/storage/emulated/0/backups/system/.timestamp

MD5 cd276fc5e7d582ff77f9e58873726da3
SHA1 7f1b4af974310a6df122402ffe6ac72beeb2abcd
SHA256 11538ee31a5d4608edd1da6a78f7e10db488c5565273c36f9f4573b6ebfdd627
SHA512 9d45756164c604252f81804240b5a5847eaaabcb7a5702ce664ad8ecbff8e5d58918ebf62a7c3f3d98fef2875f0209b2ae2238e6b9f18ff12f7feac67c977508

/storage/emulated/0/backups/system/.confd-wal

MD5 7b82126af0e58607b2400b07dc50aba8
SHA1 224dbd646980899671517699dbc41a489a1c533e
SHA256 e5c581534fa92b7ffb30c7402ecb6302eb0a4f41ef317e15fbbe55e8f479982e
SHA512 7348c4d4e902ea7a6e2874a67893266d5eb2948a2267a61c0032b730b90768ab673b4374a2b09d61f5e6b3179628bece3b25958c7d45bd113bb04cd6807469ae

/storage/emulated/0/backups/system/.confd

MD5 752b3c51d33748611f33ad3037f32ba6
SHA1 646ebeb3b3280d08a3d01f2fdee4481e9223fb77
SHA256 e6628227b8a08a9f516ef3f28d00c159fc34e2dec78b476aa32680e7583a1d4a
SHA512 ea950d26cc86e0484badfe5a0feb3498bc2654ff13396a5fc4bde12976fcf4d98ead0a7b7e5bdfb6ad5fafa59d25b76fe6f771017467b75560b7bb6adb10a8d7

/storage/emulated/0/backups/system/.timestamp

MD5 b8ec988e70decc73953b747f0fe40fde
SHA1 9d98bf625b3d2e76451e197ac9e404e984bfa685
SHA256 faa944c30a5c03ff82294c513fe4dcdb3e6f7f53e02e83cd3dd107589074186a
SHA512 b6c5e167e71c9e4a4d29ccfd96df286895c664eb29e7f166cc4862be13c6c3969960f5e4359f80aa3e911c5536e15c48145798889f5b7b8a66c79a182579c328

/storage/emulated/0/backups/system/.confd-wal

MD5 3cca67fefb9900a5a1005e06b4fb9668
SHA1 8700534f968afbe8350a95e3eb27deebb0b8263c
SHA256 7a0510b3241e319a30ad50510267b30127d4530fcdb377833594f59b578484ab
SHA512 2e604bfe2aa0686d31b091eb015917928784a51b45d554ea20d30ff85ce7e48eae6f2e6c08df960447e88bfe496efaa3c0663c5409e87e59b57bd0d4f9f8f576

/storage/emulated/0/backups/system/.confd

MD5 8fd1e78ca2250dc694f5ec12c1e64462
SHA1 b0ff772fb26b1dfa29e93482632f7fcb6daf2ae3
SHA256 54b6fdf0cfc28557a05681f4ec0086a9eb4c4575644965b3c75d3ff58fa0d680
SHA512 9ab8839571c363d3f20b1eccf4dad73c237a39b0e487d551949c0a444f62ec51f1cd6e2f78bd35c10c2b723a51ebc0c6322558289eb115f0c71d50d14f0d6dd5

/storage/emulated/0/backups/system/.timestamp

MD5 4a2ccb1558e13f68499d74192cfb122a
SHA1 a48b96e5d8528c4a18de82e5ba6f1acb1eee4e74
SHA256 9026de71f62e6061f903b3095050e0d8097d443929258f602560bb93de2f80c8
SHA512 6453b16c424bff3f721b0f082fc369c734c460664285ba6c67f459e213edeeb1a00881c0d59c517bd68cfd587cbd5047430079c7272d2652ae176a827eaa65dd

/storage/emulated/0/backups/system/.confd-wal

MD5 32d8bed86ef691fa65c6a591309b38aa
SHA1 155014c74d6e530e5acbfc0da1d30cdaa65727bc
SHA256 7c4899edd1d0e23fecb4011c3308ab43f6bac9aecb2afb31d0f30d1f34664900
SHA512 0ba762177576a46c222253ae501523513048b9ad4cd19e5b0cbe34dc5e18caba5413ebb5cc6ff1d479e8e2b4a5074c8ada71a3d5e8233cd73f51739e8f2047c8

/storage/emulated/0/backups/system/.confd-wal

MD5 f834e843bd4537097de76d7605ff397c
SHA1 5937af84bbcc3a0313d3ce1b1c42d145fa418c22
SHA256 3a9e2dd6f53e19e14dcb18f17042c6e20ffef6c22f4aeb842df41a5912e7eb63
SHA512 58670a5ef622a216104270518f4e3dbcee3922af4e5c157a198d318f1958ab7e004b088a075c9fe1591c25aec68cb251dfd5e6464e78fc48901721aed4b027d1

/storage/emulated/0/backups/system/.timestamp

MD5 c888ff15cd768fbc403e69df05a1cf15
SHA1 9de3fd276be79b341f9529aac0d85744f1473e90
SHA256 c8f246b2b05ecd3038c78ef6be9e5e890ec8d2ea1a55823db2711970acaccc08
SHA512 8f7c29c33cd2b5c870c63def81bbbe525fb04359397a2aa1acffe09ae5c446abdea67731a8c939a0a4bcecf460514bbf96dc02234eac6c74e152fde28d143d2e