Analysis

  • max time kernel
    424098s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    17/01/2024, 21:12

General

  • Target

    639e0ab03a66476669d1761ac624f790.apk

  • Size

    13.2MB

  • MD5

    639e0ab03a66476669d1761ac624f790

  • SHA1

    be990d5785fa775c6ccc910c427d4b3c5d95d1a0

  • SHA256

    dbd1185d80687bdffa3b276e60d4dad67a4c2180e321baaf9af53ec2facbe9aa

  • SHA512

    cbbb315b92a72948f7c5cf1a8382024fbba40b38c9cd32e4f03ef1ebb2966c5e9d68c6e2e0dcef05ab25f73f4c6e8e047a7a014282b036d83ae109607f3b0c75

  • SSDEEP

    393216:HQjF7alCshFZWl2TZFdq4JHJyjs8Vlv46Bn0:HQjF+c8yqLnHclv46h0

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 3 IoCs
  • Requests cell location 4 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • me.suncloud.marrymemo
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4232
  • me.suncloud.marrymemo:pushservice
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Requests cell location
    • Acquires the wake lock
    PID:4304
  • me.suncloud.marrymemo:remote
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Requests cell location
    PID:4336

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/me.suncloud.marrymemo/databases/increment.db-journal

          Filesize

          512B

          MD5

          1d1523733c0efd0febce407f409d2210

          SHA1

          05b6828df4091ceda1d249bf596338d774b7b123

          SHA256

          bba799af5087eb4f951fa19eadcc114be549f2992a0a1e9531a9ea1feaedc421

          SHA512

          f95ca4a23a597a4361197dd08303df496e78ca00cb709f6d780eef3685ce0aa825c25fe68fe2c2b7e9e6025716601066afd88c10533c5427d696c82464769534

        • /data/data/me.suncloud.marrymemo/databases/increment.db-wal

          Filesize

          16KB

          MD5

          5a3a6a4c41e024f45ad812a5375927bf

          SHA1

          d68d3ba4cb61c5fe08a4c9999274c815a7e2e4ac

          SHA256

          3f0f5853f2c3b9478490c6e1c0def90ab2702d7a7d12a37efe99b6867c1b74cb

          SHA512

          f473479cd09999d0a6ccd002ef8284c57a36b811dcafe7a7899768ed60d6d8e8d8baab0fe0f8eba68118d2a0e3e20164a6a7030b691083718b1218fbf6d02779

        • /data/data/me.suncloud.marrymemo/databases/pushsdk.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/me.suncloud.marrymemo/databases/pushsdk.db-journal

          Filesize

          72KB

          MD5

          3e7a2ea1abc7923d6272c09fbf485b68

          SHA1

          0f89616d0d144d9827634250fa4f01d7aa41eefc

          SHA256

          23e7184ed9b4f57e5fffd18be32d6deda47c6a94bc7a2442edd00286e87496ca

          SHA512

          43614fae4b9d6fcc860a22a8a1dad91a2a851d0d7a4af8a35f3a7f0234977ece3e85904773e692336feccf66df4cec0aa4678ac1e322b490b5819eb4434c79e7

        • /data/data/me.suncloud.marrymemo/databases/pushsdk.db-wal

          Filesize

          20KB

          MD5

          62dbcf5833e8272b0015de58e2eeb89f

          SHA1

          749912a70074125d3cf51ce578bbf94fb916c140

          SHA256

          020ed63c0f8514f67a5545f69ce90ab45007980a6609710971d87a07e4dffc38

          SHA512

          eed6155b9e8d67981fb238a01a3788e74c30889feeb81302f041f28ab66fac876510a4b58cf588193cd884feed314c8f7cf7565139116afc988d4d306ce35e76

        • /data/data/me.suncloud.marrymemo/databases/trackerDate

          Filesize

          20KB

          MD5

          c34d225ade6b75b4c92345a2d3ff6820

          SHA1

          832512838dfeaee732601b7c0ffa8401c268aadb

          SHA256

          bbb94a44434295aed572447df2f39c4fda0e1ab8242c40c668ce78015159c666

          SHA512

          8bf53163400c748439157c225d7315e49f7b2858b1fa4831a63c18a0bce056bc66003a1a902cb9335e712e9e3cf8abe595ff3fcc8995e2fcdb8cb33d0d119ee5

        • /data/data/me.suncloud.marrymemo/databases/trackerDate-journal

          Filesize

          512B

          MD5

          3c2d62c90464ac4f190f492341f3e4ab

          SHA1

          2e668a84177efc8f7fa1f54b653e32ca542dab9c

          SHA256

          e7f5558b14d6ad91c695cab391f7b1810675649c1c9d4000189349de984bc0f2

          SHA512

          020714eae8e18fbebc89b2abca51b088bc2a679681d2aff470fedfc9ba3ba443fd0e45a9ada90b0fbf5db877241d21b0770222e75e5767fe6d94b4ce8d0f841a

        • /data/data/me.suncloud.marrymemo/databases/trackerDate-wal

          Filesize

          40KB

          MD5

          933fb96905a2f81ad1a8697a07219039

          SHA1

          e9da0686d072c664246b044f5d0f3b32dd8fed8b

          SHA256

          e591a3e6f3e569a802c9063d664c606929f214861903a194e7dcde7de8757cf4

          SHA512

          031644c965071df93ec0fe048df21e10755cefa17fd4a83eacabb18c116ea4faf2ff94788f4a64cc36805264cbfdc3f2ebe37555f5c15ffc22012ee5820f076a

        • /data/data/me.suncloud.marrymemo/files/.imprint

          Filesize

          1KB

          MD5

          3aa0ec920699406dbbed08627448aaa7

          SHA1

          519e4781130479596d55e13f2bf6f32396087690

          SHA256

          d3868f020f0d3099ff0721e4cfacfc9833d63795a7c87da86ee9fd7eedf74ef1

          SHA512

          fc0c15398a79a84456f1cc46e3c9b59955377faed8016f4b5775e252d49c2a7e1bbd3e5e813ce7ad1a4dec67c7ed95e3be659533125227e33ee646bfc296c47f

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db

          Filesize

          24KB

          MD5

          aa6703faf63f4cc295abbcbec8b31da8

          SHA1

          e1ae0acf8d4c577d30da1e3b9f2e5eacf6f5949a

          SHA256

          47f99eb5e5b6fa81e98591aac465f6fd1c073291da6e546668ac7782240f1667

          SHA512

          b31a9a6bf31e1cfba335829ea287f3da689e40d9c9129db6e4cbeb9580624f1ddb4a83c5cab60d4948167a12f3507e185b68ba9460ac7c69dcb2c87f6b103388

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db

          Filesize

          24KB

          MD5

          e6fec8cac3d4c4dd3e8668a0c0d88b3f

          SHA1

          62698b27715861c24cf274d8247d9b0c3e8c0958

          SHA256

          f73fe7ffb1d65c1fe955ae83b5d7330507d53cfe2894a8c21f071f42e4caf9b7

          SHA512

          9ca7441b36221066d42a6c5b823b585fe9c618b65d4bad794ce6a3059b2b09677735d04bcdaadfb129d3e1f81926e1f223a510854019eb7f14d21292858902d1

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db

          Filesize

          32KB

          MD5

          0fcb31920c258bcb52a89d3acddf2d4a

          SHA1

          dd764d611e087ef4e43f0a5cd3f3be85e062eb17

          SHA256

          b455bb6d9ca4b802054f6f1e72d66184b37897ba60a1e5b5de456454ddd07828

          SHA512

          009f5d30aedf58e5c88835cee9a6b87a073660627beda8a09070eeb9139be05f78d11677ce31152f57a988ff132a469d9231140fea3f4c7cb078d39fa55509a3

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db

          Filesize

          32KB

          MD5

          6d37bd23a36b8955b982e2267b6cdd43

          SHA1

          9572e3f96d1799745b4319075fd9c04aceb02a7b

          SHA256

          9e0084ae01c650fc42df195c51ba7a89812b814c26fbfdee02e28ca12d069f69

          SHA512

          309d76da50809978bd13eca10ea8cf754cc24b78415db11eeece6baf41e4ec79f81a61e2887a8b0900d68f618d003d3477df22bf95cd4e93ce503adb4bd6e0ce

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db

          Filesize

          28KB

          MD5

          83b70953c96348390bfb8cf75710552d

          SHA1

          fc933c641dbe20fb9f626f7d5d87af97f9f5f533

          SHA256

          4c403b5abfb11fdf92554fa96db5f4a4718e1e642846c0537b1debdbc7200d44

          SHA512

          74bbf141bd01600dce1186cd5331c41b62c99aaf3e5a65b5ff3595df10a8d37015d1fd61f0c7d593c48992446556dba3ec56297c87686e040be7406236f092b0

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-journal

          Filesize

          512B

          MD5

          640e7e03b60edacc3c3ea343e93f5bd9

          SHA1

          0a1c4e399a33a80fa5f48b10e10ce610064622f7

          SHA256

          369fa37f741a8ef38207634d6bc79e296b29a6821fbcf356d1a4e2eafe28b095

          SHA512

          0eaab205af8145a3d789b6d0159e105e8aca647776ef354aedcd7fc4b4b71e29d2b3d9ad531cbeee90d5a02265a37820bfaec33078b223440685accf5f01bd04

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-wal

          Filesize

          16KB

          MD5

          0470b874148331ca9a0ed266bbcd3537

          SHA1

          22468c7cf55a18ed6df01819d6e0e55d23c2e72c

          SHA256

          4791426b6b64a9f237033535dd62e1113d177172d0ec32833f3e4b3a47403214

          SHA512

          2251edc5b3c37379b7622bd8ccae22172d2d5e619a8a98b6143e5c38d33126090de192a9283feeaa20c87bfa84684294e59bbd4ddc90ddb2722d2345f459b1cc

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-wal

          Filesize

          4KB

          MD5

          349c511fa3a1f7eefab09f6c2be843d1

          SHA1

          5c6a7df3da69d227d1a0b35361d1a867913fb818

          SHA256

          be4b483426cf36eff9d94a374a165d5c2847238280a3a7b914185b5bb6929e06

          SHA512

          34ed0eeedde6108584a495cb3be3a4d10ed4e62f4b33d570c5b0e52d285a811596bee3fe820df8d9622b92ce29d433b2ff6602e4c06aa7bbc7aeb81738981721

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-wal

          Filesize

          8KB

          MD5

          9764653f77a0843d61b689da6b933e1f

          SHA1

          0a25f99f336e57d98a75d9eec84599d011475ba3

          SHA256

          c212ecc264be398c125f33497a3ac44fb3db508a29403086c8f007a99cabf225

          SHA512

          92f2a446a5ebeea76462cf7c8312069fed47f6d32dbd2c69244e831ae7991bc14058af1d84c3550bffff51a6f4dd65e4535ff12a9fb8e632f7b1b06eb870c4b7

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-wal

          Filesize

          72KB

          MD5

          e8177528f88ed41d2c469d3e686d742f

          SHA1

          e87f50c46a1dcc5f8be8c1fe1b3e1eb2b733ba77

          SHA256

          2e5808dd246cf73971d37c98d0e609b47c14c6d39511ef5eed1ef1182454c7d4

          SHA512

          95b836d37c09765c7eb1e3f4ceeba092a96814902fc965f014e2c9a9fce3a55a5a5160b678e1795813250951b765a51ef69a4ff4e5e1c2592927a43c031947ee

        • /data/data/me.suncloud.marrymemo/files/TDtcagent.db-wal

          Filesize

          40KB

          MD5

          88ea2fe11a3f44fcd7e854c033e3bd34

          SHA1

          e96d76be6c065fc98f5acb57caf11943e2fb9ea2

          SHA256

          41c310cdefb35c8d87cc5449084b67e88463c5c2c98fbe995ac478207222b0f7

          SHA512

          0d8823c306e32fb7e09f2703922c4fdfab444be587e5cc02b76f0ac54ee5e07ec67c5fbea63f74715d4193ea8bc3335657ccc59bda0125565ccbddb2293d7333

        • /data/data/me.suncloud.marrymemo/files/gaClientId

          Filesize

          36B

          MD5

          fcb980dcc1fdbf3c9089ae5eee1db4a8

          SHA1

          a743a28bf12556d59aeb30ad53db89d2d902f54b

          SHA256

          9a55d8d2e77ec376ae351dd94cc49e8f85aeccb693fa20823e9ca6041bfb5a58

          SHA512

          2ea43488e25b0fe962a9b88a05130c064dcecd8005fbff0d1ff4f56f65c2b874331c62ea9b41ff1fd1c6fc5e57b2e3f0b1423c2680ecb67c5b0c394e9f0b3ded

        • /data/data/me.suncloud.marrymemo/files/init.pid

          Filesize

          24KB

          MD5

          8175945242fad9fb218665b51d8f3a9d

          SHA1

          2f29ce825ec060079dff3d97e95081dbfca30e65

          SHA256

          dc79c6dc4ee7f741320f1c4939be1d796f55bee3e544e188e3863225f8dc9c58

          SHA512

          13c1aea656b7fc580dd931a712b8f3a268deb0e2792dd7f2b9ac172ea48077cce88ebb351a047f8a870316110c76f6710ba2ac2c6bb9fbe44f65acc2971ea849

        • /data/data/me.suncloud.marrymemo/files/lldt/firll.dat

          Filesize

          80KB

          MD5

          e922d34adf7c09fb3484a6779574afd6

          SHA1

          96f7a43dd906935052b6efcef4ce00526eb4b3cb

          SHA256

          67bd207b9de961adf812233b8856ba62e908ee9511b362169b4d6442f20da575

          SHA512

          b43ec9825bb659a4e93e1538ec41a2ea0f6a2a5171926544b856164ec8beda9886089ad260c19a2a968ed2f347796ebc16a062d929f548d5b20ec3587bf8bece

        • /data/data/me.suncloud.marrymemo/files/umeng_it.cache

          Filesize

          211B

          MD5

          0ef81f7fde6bb4acba117cc15c702109

          SHA1

          78750adf493c5115379ddc45e28864a3119f8c08

          SHA256

          7ed8668f507054821c08e05bb3d94e89cff5dbd565b1b9db61b250aee26b26ba

          SHA512

          62fe18ab7d59503914f58c90204cd7b280336354af264f245358812ae336025ce264443bbc750973c96c070abede01434f8764517884968bacb0139682600993

        • /data/data/me.suncloud.marrymemo/files/umeng_it.cache

          Filesize

          108B

          MD5

          285487c839fc04964123ad8fd96a4dd5

          SHA1

          8027f244f7a5ade44b963d67289a83eda2aeb979

          SHA256

          9ef92f3caf4d123ec477464e1b19eb8dec718582b34941a57f6a8dfe8e0671df

          SHA512

          615bf16b62f3ac07b143e71a97698c48984aed00b6749084f42c5f3b5501ca647c36db681a8b3d0202fdb9f0d2890283af72476310723c317b90f660ead2328b

        • /storage/emulated/0/baidu/.cuid

          Filesize

          89B

          MD5

          6aa7794521dcacad058b435d03c818be

          SHA1

          9792fae45ee207e395109cf077b26ebb0ef3fa60

          SHA256

          7c9b6c60d265dd8c1b02fc443115302f421a1c9a58f2f083c2679f90011b4948

          SHA512

          239af9c90614e22b2c744579edd3b0bbb1279901b55c1ffadf05ace53db5b7a1cf797b216a728f2c5b47d11742cccbff9edffb9e1c32df4ceb63f49c8bcc7f25

        • /storage/emulated/0/baidu/tempdata/lcvif.dat

          Filesize

          16KB

          MD5

          4940bdf90c9b8fd2df673eb03f464d8b

          SHA1

          27841e6e73bca74efc8b4126655ad6f646f6bb90

          SHA256

          e12253385d27646ebeca61e35b85859fef754b1ff24e2c4f37fb8d5541fa21d0

          SHA512

          59faba3b30575b715d168ca987a220614cd4e70600addb9ccd9d01a69861576d8d8371857b6eb30c3bb149281869896ce224021e9b7dbf4bbfbeffa8e91fa0ed

        • /storage/emulated/0/baidu/tempdata/lcvif.dat

          Filesize

          211B

          MD5

          ffcea35be8924736f61bc931b4dc8a30

          SHA1

          af117b9c94f1e6ad7d54db2abcb9c356f9adc698

          SHA256

          3d817e37c93c57e112edfe8ba72d9d67ab6621fc10bfc37daf3449d364d5beae

          SHA512

          2dd75b2637a98d862d6405490777a0b652986304111294f4c544b7b9ee2de2d87f3d154af0bdbaf1569a2b67351f48b36ca9badefb6145c69022f40d557e7b1a

        • /storage/emulated/0/baidu/tempdata/ls.db

          Filesize

          28KB

          MD5

          0d3e99204c6401ea499fe9e6d9855497

          SHA1

          09829f00ca458eab7374d5079393a2cd69a2348a

          SHA256

          63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

          SHA512

          8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

        • /storage/emulated/0/baidu/tempdata/ls.db-journal

          Filesize

          32KB

          MD5

          94a4a56792ce9a211a05e1193e488621

          SHA1

          25a09e50ccfe079dc387470e422c2a66ea0c96f7

          SHA256

          e6d2a26171bd916c77d87e36f8bb2bea8ef598955be54cfc533db09aa3a5a575

          SHA512

          1d9d6291e67edcdd207dd63db6c57371cecdff00d3919f6299be730a095c96f55d6025397472dbe59042945934128c59afe8c1277c29eadef7dcc17d764ea2bf

        • /storage/emulated/0/baidu/tempdata/ls.db-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /storage/emulated/0/baidu/tempdata/ls.db-wal

          Filesize

          72KB

          MD5

          411ba4becd1eeecef737d4f694d7424c

          SHA1

          255b6dcadeee7251b2c9728825d28459391138ff

          SHA256

          f06abb2ec1c8c1063b6e157693074847c36773a75897e2f54e329ef1724da710

          SHA512

          e1023843b901f109e535c637822fb6248d473044d8f28869512716b6d3ae0d2cb167cd4f2c2ec046948b023965832d38b8859541fb0a4fab36419660168bb827

        • /storage/emulated/0/baidu/tempdata/yoh.dat

          Filesize

          1KB

          MD5

          5be9f18dd1fc8ceae4a84973cb242f5c

          SHA1

          154706404ea08f7f5dbf34d6f38ca5a8e483cd01

          SHA256

          bf906b429289824eb77cdf6aa6b2cf39ab8ade9b71d5f1cab9077353b90ac702

          SHA512

          60f473e6edfc4656f42ed61950522b3c9b49e7f8e3e5b64fa6db850368ddf2c9d64e05e11b6c6ba3f2dac0d49822d36aa69eee7b2a662a3c53a2ce8166046257

        • /storage/emulated/0/baidu/tempdata/yoh.dat

          Filesize

          108B

          MD5

          6ca55ccc7ac9d7f4b7e9393e87f2767e

          SHA1

          e811b4b92ca039734f713757418b5a3b98b088c5

          SHA256

          9888099bfafa5492510640c157b2f1e5eb583bee3d40070b2f84ee66e4a0bbf4

          SHA512

          3f4226ac52d8d741ad9d4a37d23521aaa0629736b91e18d2e0ae2c9155a2aee4162371edc30edd620c8a9d1b70fdb85d15a9ed8b0cde50f13eb138a640f2da34

        • /storage/emulated/0/baidu/tempdata/yol.dat

          Filesize

          24B

          MD5

          a936690571e9104e1922dda4a0ba5bd1

          SHA1

          65f49c57edde2f96be2a1dbdfc3f7351f1e66554

          SHA256

          f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

          SHA512

          3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

        • /storage/emulated/0/baidu/tempdata/yol.dat

          Filesize

          24B

          MD5

          1681ffc6e046c7af98c9e6c232a3fe0a

          SHA1

          d3399b7262fb56cb9ed053d68db9291c410839c4

          SHA256

          9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

          SHA512

          11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

        • /storage/emulated/0/baidu/tempdata/yom.dat

          Filesize

          24KB

          MD5

          6021a3f237cd466cb9cbf657f46e6acf

          SHA1

          1c8cabbc3656c3c40972802e569dce23f75a51d6

          SHA256

          9400540bff4131aa1b3201073de58e40f1081fbabcdbbcd65a4a816ac5f5ffd8

          SHA512

          5ecf59bdea226b612ec1d15c2e71987be6e7622cb391fdf293f9654232f29fe695d5feaca2f9e07fef7ad1c1c4625a56f44f54b748f65db244e714d943f9a78b

        • /storage/emulated/0/baidu/tempdata/yom.dat

          Filesize

          8KB

          MD5

          cd5070f7494b5d3f8a7498a75f4a03c0

          SHA1

          e2d786b8ef5ee816862b46390fe0ed0c04778129

          SHA256

          7e30180527d32437190f59ed461b2e1af51f2c6f61312dd0db79f4dcc9dcb590

          SHA512

          e4c3d63ffdaaac5ae08941ae95dafba1d76acb8a16d58704c8c6bb0efc31b525a1f41b22a3ed0afcaffdf7fce720090650444b78319d9a7ce7317f733eac67a8

        • /storage/emulated/0/libs/app.db

          Filesize

          24KB

          MD5

          09fc572287c37ed95dbc5eab751f9fdf

          SHA1

          114e5e268d9b6fafd4557caca34e887a6a8f6d24

          SHA256

          a8a5fa11459f43ada8fe6c3ee70aa1bb6985bf2bdb87a17e2a692620eb208e0e

          SHA512

          78f4408f8b9360f91c0f8ea6b5fa218d77f58fe8e98f9b32e2b2861f0f45750886a99cf1603afd21bc5ec56014c84d3ea7ad81cd4ebaf3513293a8e957f0b766

        • /storage/emulated/0/libs/me.suncloud.marrymemo.db

          Filesize

          211B

          MD5

          4e904a3d157f8376820c07b712444ec1

          SHA1

          a7d710126115cd4dd7de09e47d0cde7f142ff792

          SHA256

          bc99b2260cc5a9d708cb1559ea6c70d9ee484304307f4cbc48d589e49dbe833a

          SHA512

          5a04b2627a03acb149e8f2e8eb2a137a15f96d5a4b5a009781c86d64d76a77e9308f80e7051c9417bcace97f051aa495fe6031b06df17fb9a8044bbb9be38cdd