Malware Analysis Report

2025-01-19 05:04

Sample ID 240605-q66lcshh43
Target 98549e2b19693fb733fefe3050cd3842_JaffaCakes118
SHA256 a946b87cfb74dc6ad48af3cd25304292d72201bf04604ac75d7c36ecf8883950
Tags
collection discovery evasion persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

a946b87cfb74dc6ad48af3cd25304292d72201bf04604ac75d7c36ecf8883950

Threat Level: Shows suspicious behavior

The file 98549e2b19693fb733fefe3050cd3842_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

collection discovery evasion persistence

Queries information about running processes on the device

Queries information about the current nearby Wi-Fi networks

Requests cell location

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Requests dangerous framework permissions

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-05 13:53

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-05 13:53

Reported

2024-06-05 14:12

Platform

android-x86-arm-20240603-en

Max time kernel

178s

Max time network

190s

Command Line

com.capcare.tracker

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

com.capcare.tracker

com.capcare.tracker:remote

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 sapi.map.baidu.com udp
HK 103.235.46.245:443 sapi.map.baidu.com tcp
US 1.1.1.1:53 api2.capcare.com.cn udp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
US 1.1.1.1:53 v.map.baidu.com udp
CN 112.34.116.1:80 v.map.baidu.com tcp
HK 103.235.46.245:443 sapi.map.baidu.com tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
US 1.1.1.1:53 loc.map.baidu.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
US 1.1.1.1:53 api.skyhookwireless.com udp
FR 15.236.235.216:443 api.skyhookwireless.com tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 116.90.83.186:8080 tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 112.34.116.1:80 v.map.baidu.com tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
US 1.1.1.1:53 mntr.chinalbs.org udp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.237:80 mntr.chinalbs.org tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp
CN 218.245.5.236:1045 api2.capcare.com.cn tcp

Files

/data/data/com.capcare.tracker/files/ver.dat

MD5 8e31aa8d6b61e8b044ac3346e87098d6
SHA1 70e4050667039f00eb5231bd731b9f3cb5daf00b
SHA256 d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b
SHA512 2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

/data/data/com.capcare.tracker/files/CMRequire.dat

MD5 25e57636aee83606d202f04f26c2913b
SHA1 1ef0ade456ba38aa31584d0fbce647d0ba74b399
SHA256 89c56da41f0046c9e733fed330d2636d623510c217f72c2d025df3343dc66783
SHA512 3a8d294b8be98abe4d18116cbf7c16d44a541d1d20dd4dfbbbf3bbd8cb7997abcbaf51790bbc1978135d888c4e89868a9a2575d9cfed65a331969de77ba07326

/data/data/com.capcare.tracker/files/VerDatset.dat

MD5 caaa975d7bf4952bd5dd695ade33f1da
SHA1 119373fbb2db036712df72ec9b26c0c2840dfbb1
SHA256 d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02
SHA512 db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06

/data/data/com.capcare.tracker/files/cfg/a/ResPack.rs

MD5 0357e8edde36315c0e0a4f5385de625f
SHA1 2e6c6f15010e88dac5078f34e31a8ddf5e032f2f
SHA256 44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d
SHA512 497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

/data/data/com.capcare.tracker/files/cfg/h/DVHotcity.cfg

MD5 883c30365d5d377966125dd0c079debd
SHA1 d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA256 50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA512 00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

/data/data/com.capcare.tracker/files/cfg/l/DVHotcity.cfg

MD5 1c6abcbbd253448057930ad1cc59ac75
SHA1 a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256 a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA512 71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

/data/data/com.capcare.tracker/files/cfg/h/DVHotMap.cfg

MD5 c16f5ca1517683c46e02a6b71aab3c00
SHA1 2d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA256 13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512 a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

/data/data/com.capcare.tracker/files/cfg/l/DVHotMap.cfg

MD5 cc3fad9057e0940ad4d4c7ad27922023
SHA1 403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256 f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512 ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

/data/data/com.capcare.tracker/files/cfg/l/DVDirectory.cfg

MD5 65685a117c72fe8fbf5a92b07073c99e
SHA1 b115b527f74e4c291edcaab19b316a446aca8f5b
SHA256 19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512 e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

/data/data/com.capcare.tracker/files/cfg/l/DVVersion.cfg

MD5 d54b7b380a5ff46c78283013a07d8e0f
SHA1 f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256 c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512 ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

/data/data/com.capcare.tracker/files/cfg/h/DVDirectory.cfg

MD5 4e9eab735928758b860e48b2f9befd7b
SHA1 7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA256 1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512 c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

/data/data/com.capcare.tracker/files/cfg/h/DVVersion.cfg

MD5 298924848d2517a508f43ff0cc51bd3b
SHA1 b9fcde7b86653ead6deb57280a6049cf87745710
SHA256 0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA512 63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

/data/data/com.capcare.tracker/files/cfg/a/mapstyle.sty

MD5 46a9f9a5221dbe4ff71bfcd2ee045c5c
SHA1 915cb3bc2f0096dede38afc1cd7f09c8782360a9
SHA256 ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9
SHA512 185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

/data/data/com.capcare.tracker/files/cfg/a/satellitestyle.sty

MD5 3f1348cd6165c9a66a9892565c917ca1
SHA1 96f0c939438c494cf3fd89246d458e92c0c7203b
SHA256 5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512 405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

/data/data/com.capcare.tracker/files/cfg/a/trafficstyle.sty

MD5 6a86f30539dfc9332cd235fc48fcb62c
SHA1 5c202003f6346edb85175b8df7c460793f5512c6
SHA256 34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512 f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

/data/data/com.capcare.tracker/databases/Application.db-journal

MD5 a2152d3b36da170f047e3c3599d7cc72
SHA1 71897de5a4eee23b5beb8dbe1343b866011c047d
SHA256 45634cb2e3b0b7a1136a620efc19f270c8b5e34e804c8ad36420244fc8a7d38b
SHA512 38c6fab84912fe044d4deafdaf499d2eb01b9705fb789f0339f0c250788f96f1a61251a45aaa9a8b1c03f997f13fc31b01453195e5fdcc07e3cab58b3c8f5d18

/data/data/com.capcare.tracker/databases/Application.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.capcare.tracker/databases/Application.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.capcare.tracker/databases/Application.db-wal

MD5 b5a8a20a4746429b8960b93f50bb9f3e
SHA1 ccc74a7831913aa44ce269a08a305f0bc8b624ab
SHA256 c4bf31e6d81df088141ad4591667590b4bcba8d7c04f6a1f55f29e46f2641271
SHA512 670847e7c13f003385181cc495f4d792d8870c7d7199c71558c93a50934094ff7e5bc07a849b892deef07e3fb3b4a2d25a2c718b4f6b6388be576e72bc05f34d

/storage/emulated/0/Android/data/com.capcare.tracker/cache/uil-images/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/DTTempdat.idx

MD5 b5bec6d4edcfde1cbea1721348c75d3a
SHA1 d11c8eb4bb86518745158e48b8a46fd131ad3351
SHA256 17d650db8e7f5f9e6b89f951918c5a74e2d575bcc7cef7f9de119f0994894094
SHA512 bfbdf38a5b5a15f9f8cd15782e764bbd83e6d4436c0e772a204946d387301dccbda3837b4c0979e23c1c6c222ce81eb9a8e0460eeef78bce07a55364fcd8eb8e

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/DTTempdat.idx

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/DMTempdat.dat

MD5 cd59aca7a91693e1d979d55e8040b515
SHA1 74a5b5a3ea031db665c5c40711213abe047b263c
SHA256 518fb0140a36050c00ae65c8074c97c73fce2e996e7e558543fa8a27b8a045cb
SHA512 f2e1a739d5093475406a345329bd34935ce884ed72e2fe8edb28c3fdfafdd4efa67e36342b894b2dd0840508edb18414db9ba85ab57c44c6f7e11e04f6e72e3a

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/DMTempdat.idx

MD5 9821fa9bf06a0d5162dcaa8b76421dcc
SHA1 921532f0899bceb3d4573c6c1af5c5781f182db4
SHA256 d6441b5f22170d11a2cb15c2b58ab912734740ff3c083e6ebfd83914ea2ca6a7
SHA512 54f2fd30be645b1ab1b4ef3a4cf052642ccfb6f7ca461f8f97ad7a6d674f609e2fe3e815b00e2cbf421fd2123eda59faad451767d8e8479fa54d7f8d59ca9664

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/DMTempdat.idx

MD5 8d80bc8ea90e9cac010d3ddf97bda5f5
SHA1 f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07
SHA256 f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93
SHA512 9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/HMTempdat.dat

MD5 e2cfc4797402654e2ac8b44fbe9281bb
SHA1 7d627d74b0b42c1a26e0e2c8a22210f0de026c11
SHA256 b69adfbed07c8a6c0efca5fedcaf4c2852b392295cd1afe75ca2384bfa233170
SHA512 38442a669f80ee788882c826af2787fdafad5600954728e689b07153cec5579c8c5932e78e450f9481d9250e883ebdee775d21fd82da82f3c63d4a7c149eb71f

/storage/emulated/0/Android/data/com.capcare.tracker/files/BaiduMapSDK/cache/tmp/ITTempdat.dat

MD5 df2683d33c2dff53b8d12b69d4e7f795
SHA1 28557e1751153fa0f16d0f57837850e6f702f32b
SHA256 e9cd664d1c793a146199560051a54702c7447039946701b467d14e29591bff19
SHA512 f00a9dddcc36cbf794d321e71d483e2d5e4d0b735c06ff48996be49c108c34481af5298c4c4e3c1e2482a122459ea60dc1ec3b37aa986c6a35a0c61e973af643

/storage/emulated/0/baidu/tempdata/ls.db-journal

MD5 590a3f01124d2c3df3ad2e5203e0bb5d
SHA1 e02a328c0a36a0456823b79abd52157b42975414
SHA256 68570a4ea932c8123e7bf4535ea2625ddc36ede6b0f38c70d90502a3b3eceee9
SHA512 1bbc0094993856c826d1f197469f1df71c59c3f8b2fff8d50da7a3d0f082f62b523b80cd3261f5ea3cdcc40be7ac8b4fd6566b1aaff95bc2c84b1aee0836cc49

/storage/emulated/0/baidu/tempdata/ls.db

MD5 0d3e99204c6401ea499fe9e6d9855497
SHA1 09829f00ca458eab7374d5079393a2cd69a2348a
SHA256 63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca
SHA512 8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

/storage/emulated/0/baidu/tempdata/ls.db-wal

MD5 b391622087f89d152f6c63e03796f8af
SHA1 9b4191a429daca4a572fd5c5f542c4edbe085443
SHA256 1f21f615c4a8ccc5f4bcce33154c2d08a2a70aab1a87deb526ec0cda5f49ccbe
SHA512 3683be8a6c9ef1157093c9ceef23cc807a224d0e01d0b752428be4b78c8ff253ce4be80de08471e749eb85280ddbafab3498223affcc19743ac449d905adb3bf