Malware Analysis Report

2024-12-07 17:29

Sample ID 241112-s5j23swbqh
Target SPY-XX MOD_mod.apk
SHA256 1c975e1a31671b1f971213ee61a70561fd8f07f8c9f12ccc1e557987d02f215a
Tags
collection credential_access discovery evasion impact
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

1c975e1a31671b1f971213ee61a70561fd8f07f8c9f12ccc1e557987d02f215a

Threat Level: Shows suspicious behavior

The file SPY-XX MOD_mod.apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

collection credential_access discovery evasion impact

Obtains sensitive information copied to the device clipboard

Loads dropped Dex/Jar

Acquires the wake lock

Queries information about active data network

Requests dangerous framework permissions

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-12 15:43

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-12 15:42

Reported

2024-11-12 16:14

Platform

android-x64-arm64-20240624-es

Max time kernel

16s

Max time network

1810s

Command Line

com.spy.xx.avakinvip

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.spy.xx.avakinvip/[email protected] N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.spy.xx.avakinvip

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.212.232:443 ssl.google-analytics.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
GB 172.217.169.35:443 tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
BE 142.251.5.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.196:443 www.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 216.58.212.196:443 www.google.com tcp

Files

/data/data/com.spy.xx.avakinvip/databases/StatusBarNotificationIds.db-journal

MD5 4562f0491014ce86e8c7a9b4e6263b3c
SHA1 329184e9b32bca94addac2214669daae8f138457
SHA256 6d43baf343adf9f8dbe7e55f3632bb67c10ce3329f513a122e09f0961a116557
SHA512 195b89966770febcb84eba652731a95060a570ff6e9d3acc732010587a5fdeb4e3668f4a37bbe09420d266ad70b6dd0fdac744093d501b12e31d924e4f4e4907

/data/data/com.spy.xx.avakinvip/databases/StatusBarNotificationIds.db

MD5 f7c9cdfdb5adba7f1e0a3a5e58684f50
SHA1 c42f36b14edb7ecb7d8a08989f8576f83607a844
SHA256 342014441d0ddfe6eeab0725c48ad6701bee79e3c323d6dd86e9acbd2bde3245
SHA512 3cdd18e245f9cb406bb430ac9d9f8adc580bb74dabc0a438e27d49c717ccd0dd73aee662051889ef97affc4a4cb7e4c2900dfbbc1916831bb316a56c07c05cf7

/data/data/com.spy.xx.avakinvip/databases/StatusBarNotificationIds.db-journal

MD5 b6928d9c91c247f5b66023f519a003a0
SHA1 bacc24673b7a768196384510f16568b97f533b90
SHA256 1ee610092d3b5940c2716bcc8597881e70dfd30d35103749026dae24a119eb9d
SHA512 5519fa7027edf475372906b758dde85b1ddb327f0c411cd84d33e5f47f6c64a0c65ddc8ab1074f51d683347e843127eab1b60c8a2ed06f9a27eef9fa43fc4231

/data/data/com.spy.xx.avakinvip/databases/StatusBarNotificationIds.db-journal

MD5 c07145bf609629b62507970cd7ef7b8a
SHA1 e47e6eaba47f6acb15562fec5b346d1a0acc823e
SHA256 4c0e6b178dde7e73163d95487ef37fc365d6e8ce3a3ce4bf4ba758ace66b18f7
SHA512 a8962dcc08e3e17cee467e18cb8f0f45136111c957b511605f3519e4f99bbf635bdfac92e5220880b63c0ace5cf8e28e6759a1b84f0523b6cb64b7700b0ceb4f

/data/data/com.spy.xx.avakinvip/databases/StatusBarNotificationIds.db-journal

MD5 7f0c0b8955be94bbec9e024eb863d60a
SHA1 480cb117f76111adf516f0e39f6fddd47ec7e685
SHA256 8948f66bc0cab70870d867bc78a0ad94e8950335733c5777eabd599b203f2f6e
SHA512 054f87e598424b1224f1f81f72fcec046be1354f97168c72b9112c42c2f3f9038e0a2875c3a1a87f5e5b7ab3a900f847811ad038c13425311266ef68c3b79ae1

/data/data/com.spy.xx.avakinvip/no_backup/com.google.InstanceId.properties

MD5 80ed6130b4462a8e75dcede01e9b67d0
SHA1 f286cc9e1631d567f7df5d3d179dab28dc1a764f
SHA256 afe05512c9b0b700797d79e60cb976534895845ef1c1f8e2aab5730aa75ce501
SHA512 39f19554733e79c9b751e6b099185addbaacee631ebfeae77cb80f2bf1e34087b5840ae3cff854ec2c7816c2bee4dfc5d67e92112d805148b631bd31b64e44bb

/data/data/com.spy.xx.avakinvip/no_backup/androidx.work.workdb-journal

MD5 d9367d31fc0e4173b6bf2e797c100d0a
SHA1 d1ba285236e0b7e213d99452fb7835b6dcc77009
SHA256 f6a2f6d7270068adbf505321d8c9b872734ae5994bce55aa40d6d660e1e82f25
SHA512 21ba30866af4e1936b9dd5ba61274e17ab0852c6d70b22e7530811683dc47e405aa35859066c71ee123acbc8a4ac78d97ab7d61eeca316ba58b20e7bdfa0fcc5

/data/data/com.spy.xx.avakinvip/no_backup/androidx.work.workdb

MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

/data/data/com.spy.xx.avakinvip/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.spy.xx.avakinvip/no_backup/androidx.work.workdb-wal

MD5 b53d35082102ec0750aaaf5ce100c7a8
SHA1 e9719a2ad6613b1dd7dd8297eef8d347274d6d32
SHA256 a22e88a4430899d9a37322c0fd9094c8c63203ad5f24a2eac9c3e065e2204fe9
SHA512 7f6c714ab9f9b0657cdc08114d5ec8fd72c98a1af415c9c72e16c5cfe05f6cea87d86311cacea80d7382802c97ce4024c615db6ecab437f850affb6ec3ee8816

/data/user/0/com.spy.xx.avakinvip/[email protected]

MD5 06dfc829bf9345876f04db7b69485799
SHA1 afac2a96af43bfe4c6db99fcf0deff352a4f5a70
SHA256 77909b82bcc2dab7e432d0547058313c5bcc5ea298de628a6ae05fb9d39d56f0
SHA512 b57fa956d0afa8dab830592a42692df3577cd7d1479f9beaed790796951eeab2120619ecdc8801006e3a607dcdbfd8ef2592436fba19f838d1851c42948dc67f

/data/data/com.spy.xx.avakinvip/oat/x86/[email protected]

MD5 fd99f7041cb9c620e95c4d47ff8120c2
SHA1 1086a57e8ab6d8882ef681d357b90bfdac97686c
SHA256 a512c497970e42c2e1371bf16398caa416a571482bd360d6dbbae7ec65b42290
SHA512 f30b92eba8e9fbc1636a4da689cdc90033cc7986740b52c5fac7ee85175ebd1c67bc9458bb654c8f1dfc3b783e617cc68d4b9ce9c85dbfd5542dc5e7f7d5d087

/data/data/com.spy.xx.avakinvip/no_backup/androidx.work.workdb-wal

MD5 5020662d03cd9d47dbafd3997d428b8b
SHA1 2c7216c868b959e43b6f4b85be66a07e36744f42
SHA256 66790d1809ffea16f92b953a7fc780dc2770a2652ce512d37beb515d837f2f3b
SHA512 5c953afc81a55ea592256fc26ee1d65b2408c67a3052d81156779bb174a748afe94ba081ec574af737c802dfc027c242cd24d62cb4b16a8e2af46a13428adf24

/data/data/com.spy.xx.avakinvip/files/PersistedInstallation4804961541252408839tmp

MD5 b58ff7b43647726b3f677a1d7e6bb64a
SHA1 639f6a2aef585ddce98e365d772d94f16aac086e
SHA256 ac32114091b4e8f1bce396410f7b09ec58814e7f0caaf124f5afda93dd0f84f7
SHA512 25d1ff346830ac4aa5b2bf859fdee1bbf869d4434d75ce0f107263f1ed806627d4025afa1f20fbfdf4fa5425b95f4e62580999ffe0996a4dc599abf87b87445b

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 f4537dc79b08446c4d4844fffeb652f4
SHA1 85dc0e4a50f038aefe2cbe509e2dffe9f22f0ea1
SHA256 e23c50f5c59433225363c0a4f2277196d8d394bece16ce1be8afd07594ee7988
SHA512 6231310d4086828e559185e85892d4df0ea7adfc600be43f40204b38eaeb0dbc01556a57c4286ff0d49811cf4fbd5ac7e76fb910fe31d2d403056941096c8495

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 2c8725213af176d72ef813c3c1567840
SHA1 19befac760149ad7eab4e1329d9e417763ab0d11
SHA256 ea1afbdcb2ff9b66a40e0e5c280eafd03cf7dd0d803b2f50163c918e10472a55
SHA512 da8dcb340c52549ca5d28c78782dd7be2febaa5f54df96b2ab516b2a6aa1e118b0f359b72b8166f8caa180b03aa0970f34c9d4381631723a5bcd60bc4823f277

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 510fe323d31bde49ea8328f36d1d6f33
SHA1 1e2b0930e709f516e1fce4d29e29756988459fb0
SHA256 8a45f21e9a8d6134fbebb48c37cc422a3fc6f6b724218d1283287ee7a0d56a59
SHA512 f50ffe0aef8f1f08dfc7fcfe324d84e03c82aac14775df16e4b581cad8e5e2df247764094ed9f7b9a6d2fc7b358e52c9e9e3fbe44b67dfc13d5fb0b35769d9bf

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 745efe83a507e85ccf8abc50681e252e
SHA1 f04451abf630591ca44965921520c8e4d05d212f
SHA256 2902504c443e113a7058d8ff63245ef58c2a90c6f9238063db590aefc779b66e
SHA512 dc178f6d967844afe70bbd2c6d5caf65bacd381b4cc157363b0cb73626dcedada11cfdb7bd6ed93dcd682d28acafa4e019102f59c8fc7ad9432199a1333b1cb2

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 f972f768e0e44ea5ee38442a6bc87489
SHA1 a6d33cd794ba2dc982f096cfc97c961a6b9b3e9e
SHA256 08c927fceea6597bd388dbc09dde3bab94e9ade0899abfc992445fe86a6a6fac
SHA512 ca7aa198e3c3860fbba94f70d23a41d2098787e2253736e2ee1d1d3f3e437e13170f5ef592ef4d8bb754ce3a1b775f81d6c05bd257fa462ddfa1286e78f25781

/data/data/com.spy.xx.avakinvip/databases/silentRichMediaStorage.db-journal

MD5 be4f3409db6852b714de326bdd8082bb
SHA1 ceb67b11bd9eea6287619776ccdf30f7dfec3257
SHA256 7910f7efbdd365404872d9851d6b0fef982ede7b4a784af9f9d99eef1796d5dd
SHA512 c5b7dcbf77bcb8190fb322a817e0cc2910c10ecbf67c0b65137c18162565df6224619ed44c0fe15892859fa860f88b51843f453ca664aa676d0d2631a9389b9a

/data/data/com.spy.xx.avakinvip/databases/silentRichMediaStorage.db

MD5 37afd2f0f51f9e7d1d5d6ee36731057d
SHA1 77da080242129b572a9bc2085d422a7f2c00ab25
SHA256 18da276d65be5ac32b8b55a7db44cf11f8eb0becefcf40786df6a00333902eab
SHA512 5efba62c3a336ccb8e71177fe8365040affe3dc82051be836fb37a188f8c51e3f8089137d561beb28480cbd55f89e92829c08f0547825c47075a491d2f10a268

/data/data/com.spy.xx.avakinvip/databases/silentRichMediaStorage.db-journal

MD5 8c426ad0c31b0fba8f833d41fba52392
SHA1 d8019372e4781f8bcba0a52782ee625873b5c4ba
SHA256 e7f26060e41fd5dc6e50a8904913e874e1b869590e9dd80941fa4a9f21b1e81a
SHA512 244b5a0629624ec70184aa6472bf44d3ef29a778a32c2330d16f77ea1c5c70d37e3718fa1d1d740c9ec779b57d6d60080c964d3fad47d9aac0311aa54c3d92d1

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db-journal

MD5 29b1a68bb737a6c684d1abc935f315a7
SHA1 baa3919b699959d827cf6753f60177ddd1559521
SHA256 6de9f21fec3c6c3c7041ebe5abb672e853defa02d98821dca405dcf972b57449
SHA512 1a26885855e2c00afd436f2c7101ebecb9ff499e64e361f58e8bf4b17160c1f1a52d386b718c440bdd8fff3f0a783eefd770c3d877cada0c3fa1e4850ce6d978

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 c6a9e0cb238a51473bb38a20cfbaac4e
SHA1 3b1d3a853aecae03646f9f5af6526b00be7c37bc
SHA256 86eb666a25a59859a717f73019a5ced169e208f6c0dfe1e1519c5db5d08eb36c
SHA512 9e635f5b6b9ffe7d7c00558461c3a3900b8e76371fac449431446287209a4fb04b6f346a67feac5694fa10e4161b7fe67d5e42b615f3dd659dced45f97f1ef49

/data/data/com.spy.xx.avakinvip/databases/silentRichMediaStorage.db-journal

MD5 29fc06dd1d76d2884229e75d0b24ed3c
SHA1 7c1512980d7257607b4b32853ef412ce019fc58c
SHA256 3a03a5ce43b31100efe08ea1bd8b8862ee56001d272f4483bde126dd05c092ce
SHA512 a4caa5e44774e1eecbf15ae5ff1a27aeccb4e70ae9fb0f5c0fc42287ab801354771807797d612246752c85bdfe5184e1827b7eaf03192f5ab10c46889a47954b

/data/data/com.spy.xx.avakinvip/databases/silentRichMediaStorage.db-journal

MD5 12b9e737986ba8691710b5693e694db3
SHA1 b5c88236a18660a7a39e24fc6c2572c1b1d37211
SHA256 06d3bb0e51332800a5a8412733e73eb55b3df811561f1bc62e50cfa860907008
SHA512 319384ed04257a31f658e1ef095f9ec94bfa94cb3def46ddb5e54065c9fc033519d358870e455b1aa06511b9fad091bd1bc9df50fb48d0b0a37966142dc3a13a

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 900d61473eb3f6ce5683468e0663c0c9
SHA1 460eb7a319e5f47ec51360d04d44fc1fb09ec30c
SHA256 4b0bce800b11b5f0685d28aba0af4108db598d747b3e702b279c7c5266822f90
SHA512 84b037a338c1f19edfe93bb8fd70fb0800f0d9a6a4aafb722874b8787d83a370e02c4cb836157f18acd913599261caf34816c06b0f0d70ad203ad6a6b16ac462

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 f90aaf28f90eb71affdbac18f649283d
SHA1 05bdfdbf43f58971bdab67d676c7c7275945ef21
SHA256 c9068d17c8388142b8fe0611efd785dda6895d76b06685b7815c905c59efa180
SHA512 dbf4a090bee74d3aa80c387cf6bfdacfc51ae2dd6815be488e62b629a9481aec080be837b8b43701771dea793d76b6df33fecc20c0309308d61090fc94408791

/data/data/com.spy.xx.avakinvip/files/PersistedInstallation5346394562567806162tmp

MD5 4275111585046f7c611f7c6ece32d12c
SHA1 13120d2ba3fe045f1453c4c8f44e3ca067ee73ad
SHA256 0f89611a4f2c9a3fa2c8cc63e32782153429c5a1f4cf38720c73423bf868e355
SHA512 df07fa9a7eef01b2cf0bcdc8ccc327f938e0ea8b6b8728ba72e2861f60e544cc0374d6f5b2dbb2a855810a8ca6f282cd0c9016f6407be98e76cb785bc84be60f

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 ab8e7b22e34313fb985d0ac8923543c4
SHA1 053be6a0035576c416346d988d859ee220b4875b
SHA256 e79896898bbacb03ae4a34187b154e075de0d6b5c9d81566ecf15a9758de14d0
SHA512 ead5f4d52d6b84ddb598602dc5998cd356938b12f8fb56a2519fc6d24d76fa801959d63982ede6cb2d89ee27a88155041d0820a8395c84111445b9a2beff6168

/data/data/com.spy.xx.avakinvip/databases/google_app_measurement_local.db

MD5 2f8e31dadf1e669b6e9785b4b0678b89
SHA1 d7f3b2ab4761a95fb98d37aa8e8cf5638603c5b4
SHA256 0eaefb31bdf227ed25c0addec57bed4fb5954f609d7eca472391a782b8e413f7
SHA512 ebed5ad224989843a323422ad59bf22a2ff95097b6e391e6901bfa73f68744c4ec0a9534631070574545cfa6b0557580e4bdce3371330c487e0fd6e2d36663e4

/data/data/com.spy.xx.avakinvip/app_webview_com.spy.xx.avakinvip/webview_data.lock

MD5 7a0b88289d289984adfd13126f4a13a8
SHA1 ff0c7c18a4d2a65e390fbfc3d60a6ea0421adcf0
SHA256 0c8a3b9762ba40825c0a7cfa0b60fc989f6a623a44d1b9d7e203076514bf4be3
SHA512 c89c55a0a4b5758de8477a3238370798db182058918bc215eb2b19a53b91b0b118ec120a3d7a577f7d769a983e3f4bdbb6d6f60332389ad2593a5cbc2dca87e4

/data/data/com.spy.xx.avakinvip/app_webview_com.spy.xx.avakinvip/Default/Web Data-journal

MD5 f631a9be71243bfbdb182fac35793142
SHA1 738ab2a6306374112095667add33ef3470493100
SHA256 ac7147bbd047a7e64afcd913daa22366be52a7bbe515c0e24043fc0e09ce6807
SHA512 3490e4cfc3a40030e7a6761f5d1b8c7c63ab9d1b48c2f3e3164a17e7725720df2de9f4eb5b78c6a34661298ddd1aa1ab1d0cc7335bffb4c2fb242ca3a6e093a0

/data/data/com.spy.xx.avakinvip/app_webview_com.spy.xx.avakinvip/Default/Web Data

MD5 536e58581641e767a8bf8eca3b8cde9e
SHA1 750a88189322e36147068f1c585f02163ff3a388
SHA256 3ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0
SHA512 498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319

/data/data/com.spy.xx.avakinvip/cache/webview_com.spy.xx.avakinvip/Default/HTTP Cache/Code Cache/wasm/index

MD5 d1190d7c96bea958becb76ec7d6ee3d7
SHA1 f347d3888e58fe4efad3057827e447b1e0f7ea83
SHA256 e1af476290019dbfb22037eab4298ad03540c791b1d4c533192534179b290385
SHA512 71eec1afe7a6fc56aa0726c05941dbaba7a18f3cad2cebef8d8feccd4fb6057d639e17a6edc1c146910f8f4b74f7754e3cd94655d5edeb49830458c9ebed70de

/data/data/com.spy.xx.avakinvip/app_webview_com.spy.xx.avakinvip/Default/GPUCache/index-dir/temp-index

MD5 11e48f24e497b4a014cc804bd818f410
SHA1 e702a8080781c46e135001473bf7227df9cfa353
SHA256 aca333e727c99d3bf4b1969c49ab00bc2674306b16a768db387f416e5ea7d28b
SHA512 0536709eb1b6c03aaa52b09bc2b9384e968244376f577df9b4c69c79b9eeaa2034e25c9e8d265bf5d156a591e393637134b063b449a95f81dd2000c5f6d0682f

/data/data/com.spy.xx.avakinvip/cache/webview_com.spy.xx.avakinvip/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

MD5 5c50de232d58fadc26a37a680e17f539
SHA1 2ba16f651500687929bc2d4d0980fdc8f679cde8
SHA256 ed45810a7b69483d65a8edc411556f6991f7ec9a41b461c33a262cb9433faafd
SHA512 13ed02e051efa6ac34fdea0eb3c5ccbbf99d7d7888ce3c50a35595cbb71163d7e1d29e35dd059a21adb48ef27c2c49c216ce30f27f9eab5dbd5544be33516faa

/data/data/com.spy.xx.avakinvip/cache/webview_com.spy.xx.avakinvip/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

MD5 67f053187549fa6f5a90e9245420180f
SHA1 3269811db8889d842e20160a0ae60851a0f0287c
SHA256 f9b070891046fe0923c2b48933a0b134d0fa99bc472b000a48ddcd3de4ad8292
SHA512 476875aa80f6014c499264b5add647b2e9e98813ae588feb6f937e295f86db8907fc4b7dfefba96d0230e4ce1fe5f238fa252a55570bb0e1a1b58735ddcd4892

/data/data/com.spy.xx.avakinvip/cache/webview_com.spy.xx.avakinvip/font_unique_name_table.pb

MD5 9147f3c70cd68eca82079554128543fa
SHA1 3fac96cb4b59ac89a9ff4ef4b91d9570342d66db
SHA256 fd0e0c4e89444a88d27118b6eadbf01cdc5debc762d9b6ba8b51022558702736
SHA512 ba6c2ec755c4e49b5f31fd4acc4d19318352608b87b1e1ea90cd7c30c7d41fae4437a6a6bf39df31d862b2b193f43924abc22ab0998045d12e380999e43ddf98

/proc/4807/timerslack_ns

MD5 d46bf94e9eb1d22281a71504685082ac
SHA1 e4e0629aef7425ba63e897bc471f8625de44edd3
SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
SHA512 68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86