Malware Analysis Report

2025-01-19 07:57

Sample ID 240610-n7t8lsab4t
Target 9a98c0bc9b9b6b467e4f74f2313bf5cf_JaffaCakes118
SHA256 31f982c425220f7e51b9880aec52b738bdab3248c7292300a58299e838be1301
Tags
discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

31f982c425220f7e51b9880aec52b738bdab3248c7292300a58299e838be1301

Threat Level: Shows suspicious behavior

The file 9a98c0bc9b9b6b467e4f74f2313bf5cf_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery impact persistence

Queries information about running processes on the device

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 12:02

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 12:02

Reported

2024-06-10 12:06

Platform

android-x86-arm-20240603-en

Max time kernel

179s

Max time network

185s

Command Line

com.tsingning.squaredance

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.tsingning.squaredance

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 sapi.map.baidu.com udp
HK 103.235.46.245:443 sapi.map.baidu.com tcp
US 1.1.1.1:53 tags.growingio.com udp
US 1.1.1.1:53 s.jpush.cn udp
CN 1.92.77.21:19000 s.jpush.cn udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 106.75.109.179:443 tags.growingio.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 sis.jpush.io udp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
CN 106.75.109.179:443 tags.growingio.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 113.31.17.106:7000 tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.138.15:3000 im64.jpush.cn tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.138.15:3000 im64.jpush.cn tcp
US 1.1.1.1:53 api.growingio.com udp
NL 163.171.245.214:443 api.growingio.com tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.138.15:3000 im64.jpush.cn tcp
CN 1.92.77.21:19000 easytomessage.com udp
US 1.1.1.1:53 sis.jpush.io udp
CN 1.94.119.240:19000 sis.jpush.io udp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.138.15:3000 im64.jpush.cn tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 1.94.119.240:19000 sis.jpush.io udp

Files

/data/data/com.tsingning.squaredance/files/ver.dat

MD5 8e31aa8d6b61e8b044ac3346e87098d6
SHA1 70e4050667039f00eb5231bd731b9f3cb5daf00b
SHA256 d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b
SHA512 2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

/data/data/com.tsingning.squaredance/files/cfg/a/ResPack.rs

MD5 0357e8edde36315c0e0a4f5385de625f
SHA1 2e6c6f15010e88dac5078f34e31a8ddf5e032f2f
SHA256 44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d
SHA512 497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

/data/data/com.tsingning.squaredance/files/cfg/h/DVHotcity.cfg

MD5 883c30365d5d377966125dd0c079debd
SHA1 d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA256 50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA512 00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

/data/data/com.tsingning.squaredance/files/cfg/l/DVHotcity.cfg

MD5 1c6abcbbd253448057930ad1cc59ac75
SHA1 a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256 a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA512 71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

/data/data/com.tsingning.squaredance/files/cfg/h/DVHotMap.cfg

MD5 c16f5ca1517683c46e02a6b71aab3c00
SHA1 2d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA256 13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512 a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

/data/data/com.tsingning.squaredance/files/cfg/l/DVHotMap.cfg

MD5 cc3fad9057e0940ad4d4c7ad27922023
SHA1 403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256 f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512 ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

/data/data/com.tsingning.squaredance/files/cfg/l/DVDirectory.cfg

MD5 65685a117c72fe8fbf5a92b07073c99e
SHA1 b115b527f74e4c291edcaab19b316a446aca8f5b
SHA256 19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512 e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

/data/data/com.tsingning.squaredance/files/cfg/l/DVVersion.cfg

MD5 d54b7b380a5ff46c78283013a07d8e0f
SHA1 f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256 c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512 ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

/data/data/com.tsingning.squaredance/files/cfg/h/DVDirectory.cfg

MD5 4e9eab735928758b860e48b2f9befd7b
SHA1 7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA256 1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512 c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

/data/data/com.tsingning.squaredance/files/cfg/h/DVVersion.cfg

MD5 298924848d2517a508f43ff0cc51bd3b
SHA1 b9fcde7b86653ead6deb57280a6049cf87745710
SHA256 0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA512 63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

/data/data/com.tsingning.squaredance/files/cfg/a/mapstyle.sty

MD5 46a9f9a5221dbe4ff71bfcd2ee045c5c
SHA1 915cb3bc2f0096dede38afc1cd7f09c8782360a9
SHA256 ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9
SHA512 185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

/data/data/com.tsingning.squaredance/files/cfg/a/satellitestyle.sty

MD5 3f1348cd6165c9a66a9892565c917ca1
SHA1 96f0c939438c494cf3fd89246d458e92c0c7203b
SHA256 5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512 405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

/data/data/com.tsingning.squaredance/files/cfg/a/trafficstyle.sty

MD5 6a86f30539dfc9332cd235fc48fcb62c
SHA1 5c202003f6346edb85175b8df7c460793f5512c6
SHA256 34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512 f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

/storage/emulated/0/baidu/.cuid

MD5 afa6a4ec71a66dd84b388a72a803c39c
SHA1 471d44d71cb512f2103e404f2d661fb4abe2abe9
SHA256 65d0cb9b726ab46f17724d878e968fdf759d1c59709fd733b3c3c0e2a7396cd4
SHA512 bcad3b00cddac906e0a6230aa4d17d825382617e86d63f9df298b924bfa52e530883b757f12360afc041635de282a82035e44b328c6c7a7a5ad1ce01c037a3cf

/data/data/com.tsingning.squaredance/libs/libarm.so

MD5 5f360a3df6ca4922604772fb97369b4e
SHA1 c110a1795fefa6220a08924ac564fb6d55f2fd08
SHA256 1300fdb4e5e41d64bea0901cd8466ff53c103de8c66e43bd10c91068e6174def
SHA512 1ec137778c3d77aa14dad05eda4961a7944478bc480cea70f12ffe056ec1f22355e531d7434fcaa398cf6071a17e9da95742e3dd0761e321670d8c4858ad2332

/data/data/com.tsingning.squaredance/libs/libffmpeg.so

MD5 5e65b031af370dcfc61b31fdd1163bb4
SHA1 57a9b720602c3fe66cab5de44bf8b9cfaa6d0900
SHA256 b3db767c5d29e1e7f25bd8c7eebed9d100eae95e88832688b934caf4c527cd30
SHA512 bee6ecf8598005b87ccf0494be236c936b0858a0573d826d28eb11773fc7b38dd675132e334c7f46910cd468560b2e423702f8d6cd7c4c37df8a02123efa19b8

/data/data/com.tsingning.squaredance/libs/libOMX.11.so

MD5 ec2f44c0d1f75a81cbf5606f0ba2c491
SHA1 20c2b5b48483bff711978dd15c042e21c8c1a322
SHA256 214382d39a17de1eb70cd5a6cddeff209aa0c50283721b9530a9d4854f88ad97
SHA512 908462eef6ba4601e1c00955d225570e68143fdcc7de8ea7b971415dc75db9f7425603a1a8d913b483217f06ebf2cfd1c58bc48be0d61996a459c7fa42b0175a

/data/data/com.tsingning.squaredance/libs/libOMX.14.so

MD5 7c91e67dd199b4dd901e6c7b3771d7a7
SHA1 7ce4a769e9ed339be9f8cad1ee41d65170dafd72
SHA256 1c9c542661ce44f66d9b34183f0d490c9131d7f93c114acab7e2d91298101856
SHA512 5b0d279ee0b746309e9f6c6b449fa58c567adb9f82c6aaee512a11a43b6aed0bddd74b1b51e79db125dd2510896bb7741d433acf18f78167e4dcc2028ae392a2

/data/data/com.tsingning.squaredance/libs/libOMX.18.so

MD5 93c849139a66ebb4c8a89c907056330a
SHA1 201cb4395b1096d097575b5d23358c28a8729ced
SHA256 598585c7b6ce84d8a577b490a6c468a31199a78d55ba7c3d672ed30845a299d4
SHA512 6c4eb87ae67be49e41a18a733bd10ab447bab6e8f78c65e74735c1c632965257e91dc2fdcdc6bb223a9cb80ac4d154b418cd10198363ba7dfe15c1180f1edcef

/data/data/com.tsingning.squaredance/libs/libOMX.9.so

MD5 f65ec123f57b079b549910e91d1f38e0
SHA1 880f368c479f518548af9759c26c0c6323e15934
SHA256 e1f19c8e76103a9f26f92ec0e3e0b878466cbb8f952c97e46eed8a92c286b6dd
SHA512 688e893eaa739da568828b9f6b41e1c2aca83a66472b4792665b04a757c2b74081ab98b60f03baa32c0c1c7a9ca14eaf4bfdb0d3c36e742880642d6d35f75318

/data/data/com.tsingning.squaredance/libs/libstlport_shared.so

MD5 691e941541b180866de24cba7a501891
SHA1 df3d14d09013300049b3d232140372be424bee33
SHA256 4a44b6a09e46d9870e669229fcf7da77daa978da75e15f1e592dc3a732337919
SHA512 aafcd114b1147445bfb7c45292a9c5aff6521a2489955c521272d9bbdad2bc7cb7f821f0d3770181b4de48624d42c3ce2ade2aee89b67feccd70d47f32973ee3

/data/data/com.tsingning.squaredance/libs/libvao.0.so

MD5 f8043ba1b1f8ba1704a4237c7f23ec24
SHA1 63749e54c579068fb33389ae4e6edfa7f5053ac1
SHA256 1e4e85b09bd4e4d9db9ced5fae9331d174d297aa252caedd81db9921d19ba6b9
SHA512 fdec088758a7050a5158877ff4ac432c11054a0d01e6ce587768b2f060bdb0dd804c1164d5a0ad061fc8828a5bb4163548af54dc79fdfd4fa3615958c0d47f66

/data/data/com.tsingning.squaredance/libs/libvplayer.so

MD5 09d9701761fced349d45aeaf990f4725
SHA1 56cc52d9b3470657074690739d4399b1f323778a
SHA256 1874fd66a16e07e075fc910e6b95a8751a4456d8ced5805154223ee12effda6d
SHA512 f80f6bafa6c0eb0b4b3795ca6a66873727620ad28ad16efb69bd7463a3d373d1e229e5795f064c5b45a20833d2e77e5229d6e51150c31ffd49de52ccb8c94197

/data/data/com.tsingning.squaredance/libs/libvscanner.so

MD5 5868c73ad073f16a546e57ba188d3157
SHA1 a9122dc564f63057f4811fc585e59575f7042aa9
SHA256 7bf602d5e25639e0d67ccc1ce1cf5eaabc8da3a573737241f7d8cbeb440eaf16
SHA512 96e0e14bd23475b87fd7df354d57b6f929577df9b48cf890fa5b1e41bbb1531ee4ae1f48443dbf62ac4410678ccb59cbfa093f23a0ba02016300bcc883c44860

/data/data/com.tsingning.squaredance/libs/libvvo.0.so

MD5 4d1917bff1bd76d03750e50634249eb6
SHA1 c475ccd74c12733a8cc8207f29b5bbbc9118b27d
SHA256 4d9f3aaf3ee020f8d6a2a10ee64b34135ccf12e79dbd73b461c4f2c6a714d97b
SHA512 aeddc12c1e200d2df07e51a13857121253c5fa9cfa63a1d011823af256a80ab1213215fce880ca151baf91175222e459f685bdfa68f0d4e6cbb1f77da35c2af4

/data/data/com.tsingning.squaredance/libs/libvvo.7.so

MD5 37b87776ca37862a8c0fd236db0c70e9
SHA1 f8d14be8de15e8bae24367a7dcba5141f6579cb4
SHA256 8eb0369ec1342d9d6b90793304add9818ed44a395587c66509685f995c2f3c08
SHA512 b8ce8ddad87983d514bc5028bb9c536c1bf3252a0617d2575cd3ac5f8aecb13fcd061c933499e2cd866a59a50ba7e42034c1a528d091626de8967750ee9890ce

/data/data/com.tsingning.squaredance/libs/libvvo.8.so

MD5 3f2d4d7f45dee44099bb0bf358b738a4
SHA1 abe7be0696a1b5d88e2eb6b804c9d6839f31b189
SHA256 ccd629b578ee1aaf2bcf58fd75fcf52984fff48c079d0fdcec70688fba0d0acf
SHA512 b1f695a25da3402b90cd30f93738665f9bbeb8b9d2a9da420d0fe083702b400d30131b3b5bee652c876ee8e5a590af63452fef62b3376c4d4a562505f81893d9

/data/data/com.tsingning.squaredance/libs/libvvo.9.so

MD5 13e73f0bf1ac8b8515ef141bcac1ae19
SHA1 ab6b32b52e979776e6b45da93c13473ae59c4257
SHA256 8bb8ad3df6defc02b6854fa3c69d53a619949ee9f755a4910741a6f215309cbb
SHA512 1d786b8f1e3a11006efe6045c6515545fd09108870e6cda706e9e6221ffba4500e24171459b59e9defdbbe08404283f4c1a6951cd7256e0824dd61b23d18553e

/data/data/com.tsingning.squaredance/libs/libvvo.j.so

MD5 6de43a3b6400ae317ceaae1b3c35bd1d
SHA1 be380ddb2ed456ba8fbb1fe73b8626f33faeb329
SHA256 98d44f6c0124d9ea157383f81bf3c09cda41c33c02f62ca655a349cdd9590952
SHA512 75d1756032d1ba598a55b4f6e3f7bc259fa7c1645fb4f99787340ae5cb88f1e148214f2f9c292e72527d83eecea784ed687a37211c4c138da76c0bf34173fa6e

/data/data/com.tsingning.squaredance/libs/.lock

MD5 98f13708210194c475687be6106a3b84
SHA1 91032ad7bbcb6cf72875e8e8207dcfba80173f7c
SHA256 f5ca38f748a1d6eaf726b8a42fb575c3c71f1864a8143301782de13da2d9202b
SHA512 dfa5d1cefd0efdf5f52b765120da72c5706eb1dd113234cfdf31e31f9cd0283366f6a8f7230f29ea42d83acfe02743dc2504cda07c30f6e84bf9b1ca35966266

/data/data/com.tsingning.squaredance/databases/growing.db-journal

MD5 4d4964df39134978436270b400e85603
SHA1 93651dacd8285eaa973fc474073e3981d8fad92f
SHA256 a1c70c9cf6564f8cd93655efbf002e630e24884bfd64768c940a37e85d4dc9f4
SHA512 ff9e6195bb4faf22b19646d67c74ac65fe29e2c6a4cee1aebee9e73f45ebcfc29276ccd28ba68142f888d2e2f854e85c422b815f17caadacd64c89038355783f

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 e51ecca129d12b603e6b00bf5b995798
SHA1 2c8aa785508e393cfb2d7dbb9f82fcdc8536d662
SHA256 81fc99eac73929ce02c780400d24d162654a5ab9d2d57babb385ab0cdbc4e271
SHA512 62aeae3a8e2f3b41bfd6a083a62e5a409c87ab062dd0d577ce8bc546bc0ce40c4bd65e15d4f4a3ff67a8ae3924ec47bb2b70178ff0be16a18887b4419babc753

/data/data/com.tsingning.squaredance/databases/growing.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 bc1525aa532c11cfb6f1784306ac3df0
SHA1 649241478575e46d1c4e7b19653eabdca9325898
SHA256 d6748b9eef0774d80cd48a210026b0622867b032273c23c67aaabd42019d05db
SHA512 eaea6e2a427bb431de5be26c90cc4cd2b8d9913421f34543af50afccfe581fc9678e3ed330beb0c17baad3c5c51815bfc15d1e865537f7e507bc982f3e186e59

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 f50d347a92cd0a35a22b43ee6738f5a7
SHA1 8270deb0a43d0c67d145a327011f52b9b795c65a
SHA256 ebd98332332a9a706b1fdc2322f6f8620b4032ea71c4c2dbd750c4e24b25ac0d
SHA512 b67b54d653bf00ded458cb8994068e97fd85cef3f269bda8697e9fee005c162c552e18e790886df12cfe875dccff2e0605e45003c71f1531fc141cce860273ac

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 88f874c9af7661d36f13a30823641361
SHA1 3e36d56c2c33b513ab7a257ce8d3f9fbcd37afcf
SHA256 e6fb3e04b228849906b1f073f51d4b6e87fb78271f284a6146d0182a895a8222
SHA512 f6496e291deaa6342ec0327ea89344f86ad7da77b6d1c0c8ea16e4d2711e3963e0b9b39d73bdb2d2751050f4be02f52831f9e44e0dd3e6425613514c930333ea

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 9086f0f21b7a742b195e44714fff4347
SHA1 a3c3f9ab08c3aa5284071e6ffd3b1fb3c8af6be6
SHA256 3f581945e64ac5dff1425cd7e17461d33613419ef9d12b72f9dc92d443307105
SHA512 7c8eb9c2bc00d604e67c9811a7ed77b2bd975a4b0c8832ad7ff3147d351622ca7e37f4ecf19845fb482be20995e725145f393d0417caa70f710e9b990127559f

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 a39a2acab15c1828eea4bd34e0ccc1cc
SHA1 397054e845b7b55dc35a218db6d42244612b9994
SHA256 795ff96c881fda0bbb35bb39e0e6ad561ce12a9c706bbb9548661263431ca4ff
SHA512 8f1e85452d85fadc3aff29ae6c465e0307889272c7c1ae110759dab834233cc79958e6d54fae10551ec04f8c48d920429e4096aebe48c371070dfd4d5844d6c4

/data/data/com.tsingning.squaredance/files/umeng_it.cache

MD5 3bcd0c470b39f82abf3e34de870465e5
SHA1 1e12e26e48136d6fbe28616d99dc211ba795ee43
SHA256 61422a9c0e5790f598c03419b61c8588c5186be459ed0f499611539ec2511890
SHA512 f25719f03c94c6f18e5ee9578fae2a7bdb77774f55c7ead3f14b59e8718d5c9644317929dd149dabce5233a1b5a644acd72011dec8b64aee62ab2f81a1dd5283

/data/data/com.tsingning.squaredance/files/.umeng/exchangeIdentity.json

MD5 88ff89d35d23358b303200dbe271246c
SHA1 3b642aa8211ce1b04738bf693d5087f53782a0e3
SHA256 5e73e9d140133caace2e0ed61e9e64e1ff8a6968c3898ee7385d631afbc5b75a
SHA512 36b09b8aeb95706588479957377490d79fb552a6cd2693c61c8c4fd9406daf1b8c798224def31968453d44ef99d09ae735c8a8234b47f0f2e9711319321d75e1

/data/data/com.tsingning.squaredance/files/jpush_stat_cache.json

MD5 9a2aa370cf5ab64d635e0cdbe72f4a6b
SHA1 f4673ef9352cc14334255687ea5c958e54d542c5
SHA256 7ef14bdbcb7f8ab678c2428af5c3c51cd57cfdc27d505d9ec0ee31a13bc6345e
SHA512 8eeeb56261e741c64ccf85f015390e3eb3d4bd8ecb6663f3c71a01e5d2c0f598beeb88d0a279c6a1101b549d0d5458ee4de62f7a1a1b18d4ae2f1bae545daede

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 2100c3bae074bf3cf9a406a3ef75a321
SHA1 98474ba69c43fe017f6c2f7ea564211a8f775d9a
SHA256 d7d759236f6a4bf40ab890eb1b63dded2abd35e8aa9b15f0ac89495db4d58cc2
SHA512 aafa19ec4fab2917f9a21131ebcdb456b3dfbd646aa4424f499791a3c94d1ce35be7276a1e49f4c84737b58d6e61fce98ba4035108399932bf243e85df3cd276

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 2e376fdb3b231c3e760d4a0569225ad1
SHA1 c6f10d4e732c94fa1ad5f337efde26a0335e9ea4
SHA256 a12d61df91ddf6d5cc33c369a9c37e2b3ee6390ec590f23831eff8385a4fc24d
SHA512 741e3446c9ad014a2735e076b7d9dd5dcc5a181170dfb10132f4447cc3670dc1d70291edad552de68d3d777634e297501c43f76f0dad9e49982dd4297dfafb51

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 50ebb29deb245be37297cbd0105e8cae
SHA1 c5ed159547339fbbca673b8b7df930e8cab4e563
SHA256 e7b6f9b33280016797ad1d2b4aad8bdd1e4bc9e163699ac6c0fc40c4db3e08de
SHA512 e48d532a8965fdcda7e555a5c1462f9060bf56bccbe860e9a70191c7944b254a6b85e338b59ed927f681dfbc3ae29183634da99667289070f09490ca3e8a9064

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 437f2456138e6c0d62aeaddb9d27f6ee
SHA1 4fdb2069d1df6feb6a02df0a334275578d03d1bd
SHA256 362b56910dd462119e2bd5d7f731a3b40b1130d4491e7e25f93d42ad3b066253
SHA512 936d86d6484efd1ea9cf8bf347b5975d2172a22a28db887b8043c7d96478fc41c0c9bf2f4224c05dbe0e88ed79589bf6d937d9f4069849cabd5e2be692cc4aa0

/data/data/com.tsingning.squaredance/files/.imprint

MD5 1addd1b9e3119d2aaf270be729a58ba7
SHA1 a14a6094c36825cabbced6d4038ce2d6438b47b2
SHA256 e8b126b22ffbf1f48da7ba7267c3387b246dc06c27330c8182aaf1850c125392
SHA512 5a21b351887e58a24b6bdd033fea049204aaacc1b1b63409a1d09eee0b21cffdec9f40e22760dec6a17c7ee12590b6f93c8199404afd3a55fa1edb2d5d7e6b1b

/data/data/com.tsingning.squaredance/files/umeng_it.cache

MD5 10bd1427c4b94642f2d05f0ad32f152a
SHA1 7b48a61ce65f7f6e649679377ebecafda0916fcb
SHA256 ef094a9382dcfef51ed8c9cf13e3bbd84f8c1570aefb486e497ea622ac27ecc5
SHA512 fde300174bd9dcdec53f7e24e7fac2c0b3b8bd75b96d18561a4c55dba385531af1610295ea2cf6c4330ee55209bcb17ee5ce33831b5e63a769ceaa92b6420062

/data/data/com.tsingning.squaredance/databases/growing.db-wal

MD5 1eefb89d4c518777cbd7016bbd5390cc
SHA1 ba5c11196ea597f13b6dc38956dd204f97fc92a8
SHA256 b737361baef478e249365247d999b31e4dae63e77077b0f4ef8f1847b0f5e915
SHA512 ab32a596938b4255062c6dc09bcc45c34b86f8d20a925fd1cb4644b156d2ef2e1836cae5a4757658482d5ec9ba5f2092598e200c55dd7c5aa0feb0d532093abb

/data/data/com.tsingning.squaredance/databases/growing.db

MD5 5b392c5eacc237fb87c5503c7db25af3
SHA1 39ac6ca7dabf382e988c6bb303506301e44e2926
SHA256 02f12e949483f8c6342e535464038892e018686ae2c0a13e028574311e2f703a
SHA512 d3c407c9899e2a2a420f33ea1726fcc7c86e7cbb053eba076be82527abb142226235d2d295c77d3c17f5ce664212e66ddb344d24364e35dd6a9b46f648fe4aff