Analysis Overview
SHA256
a6cb7de1ce66a864b606171b8a1705af5166f7688774fd310ff4481c2969e380
Threat Level: Shows suspicious behavior
The file a88cab3d3ed763d1afadd4757a2ae173_JaffaCakes118 was found to be: Shows suspicious behavior.
Malicious Activity Summary
Requests cell location
Queries information about running processes on the device
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Loads dropped Dex/Jar
Queries information about the current nearby Wi-Fi networks
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
Requests dangerous framework permissions
Reads information about phone network operator.
Queries information about the current Wi-Fi connection
Acquires the wake lock
Queries information about active data network
Registers a broadcast receiver at runtime (usually for listening for system events)
Uses Crypto APIs (Might try to encrypt user data)
Checks CPU information
MITRE ATT&CK Matrix
Analysis: static1
Detonation Overview
Reported
2024-06-14 07:36
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to record audio. | android.permission.RECORD_AUDIO | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS | N/A | N/A |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION | N/A | N/A |
| Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS | N/A | N/A |
| Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS | N/A | N/A |
| Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. | android.permission.PROCESS_OUTGOING_CALLS | N/A | N/A |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE | N/A | N/A |
| Allows an application to read the user's call log. | android.permission.READ_CALL_LOG | N/A | N/A |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-14 07:35
Reported
2024-06-14 07:39
Platform
android-x86-arm-20240611.1-en
Max time network
158s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.178.14:443 | android.apis.google.com | tcp |
Files
Analysis: behavioral3
Detonation Overview
Submitted
2024-06-14 07:35
Reported
2024-06-14 07:39
Platform
android-x64-20240611.1-en
Max time network
131s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 172.217.169.42:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.180.8:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.178.14:443 | android.apis.google.com | tcp |
| GB | 172.217.169.42:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| GB | 142.250.187.194:443 | tcp | |
| GB | 172.217.169.42:443 | tcp | |
| GB | 172.217.16.228:443 | tcp | |
| GB | 172.217.16.228:443 | tcp | |
| GB | 142.250.179.238:443 | tcp |
Files
Analysis: behavioral4
Detonation Overview
Submitted
2024-06-14 07:35
Reported
2024-06-14 07:39
Platform
android-x64-arm64-20240611.1-en
Max time network
169s
Command Line
Signatures
Processes
Network
| Country | Destination | Domain | Proto |
| GB | 172.217.16.238:443 | tcp | |
| GB | 172.217.16.238:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 216.58.201.104:443 | ssl.google-analytics.com | tcp |
| GB | 172.217.169.68:443 | tcp | |
| GB | 172.217.169.68:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| GB | 142.250.180.2:443 | tcp | |
| BE | 142.251.5.188:5228 | tcp | |
| GB | 216.58.204.67:443 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.179.228:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | www.youtube.com | udp |
| GB | 142.250.180.14:443 | www.youtube.com | tcp |
| US | 1.1.1.1:53 | growth-pa.googleapis.com | udp |
| US | 1.1.1.1:53 | lh3-dz.googleusercontent.com | udp |
| GB | 216.58.212.193:443 | lh3-dz.googleusercontent.com | tcp |
| US | 1.1.1.1:53 | lh3.googleusercontent.com | udp |
| GB | 172.217.16.225:443 | lh3.googleusercontent.com | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 216.58.212.238:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | accounts.google.com | udp |
| BE | 64.233.166.84:443 | accounts.google.com | tcp |
| GB | 142.250.180.14:443 | www.youtube.com | tcp |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.178.4:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | mdh-pa.googleapis.com | udp |
| GB | 142.250.180.10:443 | mdh-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | update.googleapis.com | udp |
| GB | 216.58.201.99:443 | update.googleapis.com | tcp |
Files
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-14 07:35
Reported
2024-06-14 07:39
Platform
android-x86-arm-20240611.1-en
Max time kernel
160s
Max time network
184s
Command Line
Signatures
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk | N/A | N/A |
| N/A | /data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk | N/A | N/A |
| N/A | /data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk | N/A | N/A |
| N/A | /data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk | N/A | N/A |
| N/A | /data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk | N/A | N/A |
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about the current nearby Wi-Fi networks
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getScanResults | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getScanResults | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getScanResults | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getScanResults | N/A | N/A |
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
| Description | Indicator | Process | Target |
| N/A | alog.umeng.com | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Reads information about phone network operator.
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Processes
com.house365.HouseMls
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.house365.HouseMls/app_plugin/oat/x86/PlayerUIApk.odex --compiler-filter=quicken --class-loader-context=&
com.house365.HouseMls:ipc
io.rong.push
com.house365.HouseMls:remote
cat /sys/class/net/wlan0/address
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | api.youku.com | udp |
| HK | 47.246.99.161:443 | api.youku.com | tcp |
| US | 1.1.1.1:53 | sapi.map.baidu.com | udp |
| HK | 103.235.46.245:443 | sapi.map.baidu.com | tcp |
| US | 1.1.1.1:53 | stats.cn.ronghub.com | udp |
| US | 1.1.1.1:53 | api.exc.mob.com | udp |
| GB | 8.208.8.123:443 | stats.cn.ronghub.com | tcp |
| CN | 180.188.25.46:80 | api.exc.mob.com | tcp |
| US | 1.1.1.1:53 | loc.map.baidu.com | udp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.130:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | api.share.mob.com | udp |
| CN | 180.188.25.42:80 | api.share.mob.com | tcp |
| US | 1.1.1.1:53 | mls-mobile.house365.com | udp |
| HK | 47.246.99.161:443 | api.youku.com | tcp |
| HK | 103.235.46.245:443 | sapi.map.baidu.com | tcp |
| CN | 119.3.116.219:80 | mls-mobile.house365.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| HK | 47.246.99.161:443 | api.youku.com | tcp |
| HK | 103.235.46.245:443 | sapi.map.baidu.com | tcp |
| HK | 47.246.99.161:443 | api.youku.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| HK | 103.235.46.245:443 | sapi.map.baidu.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| US | 1.1.1.1:53 | sapi.skyhookwireless.com | udp |
| US | 1.1.1.1:53 | dns.map.baidu.com | udp |
| FR | 13.37.206.148:443 | sapi.skyhookwireless.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| CN | 182.61.62.50:80 | dns.map.baidu.com | tcp |
| FR | 13.37.206.148:443 | sapi.skyhookwireless.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| FR | 13.37.206.148:443 | sapi.skyhookwireless.com | tcp |
| HK | 103.235.46.246:80 | loc.map.baidu.com | tcp |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.178.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | nav.cn.ronghub.com | udp |
| GB | 8.208.102.120:80 | nav.cn.ronghub.com | tcp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| N/A | 10.0.0.172:80 | tcp | |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| CN | 182.61.62.50:80 | dns.map.baidu.com | tcp |
| CN | 119.3.116.220:80 | mls-mobile.house365.com | tcp |
| CN | 223.109.148.179:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| GB | 216.58.212.202:443 | tcp | |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | alog.umeng.co | udp |
| US | 1.1.1.1:53 | devs.data.mob.com | udp |
| CN | 180.188.25.17:80 | devs.data.mob.com | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
Files
/data/data/com.house365.HouseMls/app_plugin/PlayerUIApk.apk
| MD5 | 214859b97c863807cb1d5cb599c65f34 |
| SHA1 | 37bad24715b80168de469280ac41b33c1d17aa8f |
| SHA256 | 178987e039e604c6ad4e27f8010f7d47fbd657bd75a7211a42165a9d8a614709 |
| SHA512 | f71e25780db96f7b13276b38ef7ce39268b4ead3fb9fd951fbd9d5c885389e0f6ab86d7bd2551795e213f6147a49e0070b5f8e958f343c7f996c5d74690bcf8f |
/data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk
| MD5 | f8dbe4682982d713b225bdcaae4db599 |
| SHA1 | f276353ddf7c6bcb80942317a3c8e1d82365d2ab |
| SHA256 | d21d7a4759815799998881b2f14a61842b1c0b69ff409d40371902c319296190 |
| SHA512 | 16e6d5e472dab31faa412971bfe2fd88934b7e1a6b8423ff3abd80482554b598216fb599067ccdadefca790404c19bd30a1be124468a2c5981ab1bd457cc4725 |
/data/user/0/com.house365.HouseMls/app_plugin/PlayerUIApk.apk
| MD5 | 17d338f8667732bb5364a2cda87dcb70 |
| SHA1 | 495c76b6f9f1955e648290e5523933696ae8639c |
| SHA256 | 748c4f1b110b82d622cae33d3e6361aeb117aa76e4927b69a09ccdeb67c5a7f2 |
| SHA512 | decff463e1751ff78812d1588f48dd4b899c4b7c6ab1bd9fa1843259a36caf4a49e294b22db3ce2058d0b55d551ad652c2487ea8109f3081c20cf20790ab4361 |
/storage/emulated/0/baidu/.cuid
| MD5 | e1cc5f01a5e4ac93e00b5329594611bd |
| SHA1 | 3ed786b0752363533231c5ace7d52d4fe41d0bcc |
| SHA256 | 51b2265f42dea9549b83aa19283459909f54e7d5a57d2861d7aad0725f74842d |
| SHA512 | 30699ea5b8d88b6f86c676e684e42f9d1ab743937e3f698282f3294e0c35b8a0eb09b99602d2b1dcdd9806d22773bfee3085b973e815d535c764f765ece0484a |
/storage/emulated/0/Android/data/com.house365.HouseMls/cache/kit/journal.tmp
| MD5 | 8c8bcb7d36cb5a71729c00c4e7f2d330 |
| SHA1 | a352667c61dc45f43cae74a7102fa692fba98d3e |
| SHA256 | fddce724f39edc9ae1df4f8920e512cfd0fe3a9017b32031f1ca0e9ec06a1150 |
| SHA512 | 4589f9c835a12ddaa04617822b93aba809aa85b392dc8596d47368a31648c542a0eb96643ca3a8d21d31aa1a790580a3258afdc3d202d31c5a324a4b591ccb62 |
/data/data/com.house365.HouseMls/files/.mrecord
| MD5 | d9c29cf69ada4ee0ab39afe644b1852a |
| SHA1 | eb1f4593bcc0611340ac9e007971ab2ceadeb47b |
| SHA256 | 7aefe4d815b0dac0baa1ac096595bd52136ecf8611e95506e6f0cf3a692811ba |
| SHA512 | 0a9ec491186249ffc975dcee153233095d914e910210a659c14c1af1d7d08bd0f5c7b9e8d46dedc01ec15262fe966b0b1c79827b2869055aee4b1c98cc0ff410 |
/data/data/com.house365.HouseMls/databases/rong_version.db-journal
| MD5 | 123d2b0148e169a64c9416aa2b2f49eb |
| SHA1 | 5356b97d88cb22733839fe7b6ce529a8889481c2 |
| SHA256 | 76de9a8ee394696d9ee562ff5d5b530b8e53d67f0e24c8a322fc872a15fb1293 |
| SHA512 | 00870196bdf593eca7bcb2ee2fd9c6b264c4ab40aa59d11239c7d6500e3ac038533f0e2eec0f910c5d398f8d28128214fedc54abc552e12e5363acd1bbf38439 |
/data/data/com.house365.HouseMls/databases/rong_version.db
| MD5 | c8bd62e81882a3f40caf8b70ba73887d |
| SHA1 | 52872c0dec753ce6ccc0dbf0643a59759cbb0798 |
| SHA256 | 6c8ae79174e2ca0aa1e76985623a3817b02d04e3aabf39ecde501a5254713bad |
| SHA512 | af826b0180b97cff34ca8389c5b14a86fd43662850c4e4289c67ee387ca7b6b5a9f0c3c5f6e0d89c1657e7f8b038371ba9e4eb3d6bc514ee0754420b3b6fb939 |
/data/data/com.house365.HouseMls/databases/rong_version.db-shm
| MD5 | 1600036c7a31a9d15741df43e0ca172a |
| SHA1 | ef293f50b455e5f60a87412d5d2eb60b93b0ad73 |
| SHA256 | bfaf8e1f4554803619a20ddc7ce74fb6a92964f97e33d96d328fdc27db39f7f5 |
| SHA512 | dec403ef3acae75437442219606383d2478c9307bb45d46674e262940117f6e680d51a65f3cf48636ab51a6a58279877d0531e26a03310bfa1caefad15bb2bda |
/data/data/com.house365.HouseMls/databases/rong_version.db-wal
| MD5 | f8275b65b1c11088acf110d483130c61 |
| SHA1 | 4c3166a177db748687fd177670704c5a86d6226c |
| SHA256 | d5f57cb289e590e06457d4f02bd7c91faeace7604eeece3f77a7631e8c22a6a5 |
| SHA512 | 4b35c62d284a6fa4264a835937104d6a89b536efe9e3e5be00723db942b585b3b7c2253fdc19903ec488383b2c9b01f3d19894cbb5e8ba22bccef28db248e6a0 |
/data/data/com.house365.HouseMls/files/ofld/ofl_location.db-journal
| MD5 | cf948989a0918abcbd6a44b92d70dc42 |
| SHA1 | cb6ef6ce3ef8dc664dfcfefd1cac3d164221cbd8 |
| SHA256 | e04666c9c894e5ed5c1ba2721275084d3fb3c8b32e6a8fd84f91e15e01724447 |
| SHA512 | 02cea95486b25d910e04d2faf4b0a635557749fef3371c03a3c0a897f03974d568f8d90edcf413079accea8d115151a8d94dc1facb8ab153d624db6a47374c19 |
/data/data/com.house365.HouseMls/files/ofld/ofl_location.db
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/data/data/com.house365.HouseMls/files/ofld/ofl_location.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/com.house365.HouseMls/files/ofld/ofl_location.db-wal
| MD5 | 947a9595abebb43042c9ea6b87ec664d |
| SHA1 | 0a923e6a8af483fac4122aee914620e184ff6757 |
| SHA256 | d04573028848ba4ce50b12abcbba62ff1649ca48bf3f5d9cda1bfa0587bc69ae |
| SHA512 | f4b7478eeab8ed6a3ad7c99d1540febfc44d46e4e3b4d8c95fc5505b88ee0ff36659063862da3d79da9e086cb87a704dd09b4827ce1ecad63d8a8726fcf99f02 |
/data/data/com.house365.HouseMls/files/ofld/ofl_statistics.db-shm
| MD5 | 729d995d03304df6a4826656a7994201 |
| SHA1 | 3dadeffd316835092c83ae69ce335d177476a8df |
| SHA256 | 01f5b99180f69a7359c52c0d36596bd085f227d5f17bf605d403d18138d93546 |
| SHA512 | f8ef2191faa7e481fd02c96b65989326b90c6b96e3d454832c68ca49f12cfdbc330162b2e5fc0822cf5d9fcf73e969eaeed781b82ab6c42ebacd27b9b6d20b93 |
/data/data/com.house365.HouseMls/files/ofld/ofl_statistics.db-wal
| MD5 | 0b495fec3390e9110a929e268db4434a |
| SHA1 | bdd52aff86c29456dc53f05ae3ba0aec885b3c77 |
| SHA256 | aafa765f0fc592729976fca0d8fde7efdb827371f499adc77c5c7b4cd25aa38a |
| SHA512 | 3fa4e4f81544b6a6aae612629b1975425663d3df2c45beed518c4ebe60e89438dec65916285739eb07cfa90cfb29edfbd5d29191c21786698bc7ab7ffcb1e6cd |
/data/data/com.house365.HouseMls/files/lldt/firll.dat
| MD5 | d8efd9e5bfc7eafa4da9beb21e8b8b23 |
| SHA1 | ac4e9ffaac0be88cef53dfad46b936e695c4ac6d |
| SHA256 | 77cb71fbe3959e786b79605484df05186b22a06221468e0f8af45ba1ef931ef8 |
| SHA512 | fcacde73eec910947426006588e0fc9935129f1d2109512dfd91acadd772905d343afcd504c5b30897eac6ecb98aa1e0d214938d13ed24f7d5fa90c59f02c2cf |
/storage/emulated/0/baidu/tempdata/lcvif.dat
| MD5 | 1b619b0f5f65272dd94daa5f68abb213 |
| SHA1 | 2c01d7064f7896cbd8fd806eba01ff14b2a2e552 |
| SHA256 | b269462dd694a760776e32b337a748e763eeab8a8ed212750fbf320e7b3a7a6e |
| SHA512 | acd495961d7ce2d23d4958e17b9533c522292072326b10bf6416c0fdfd0335ecf7c7131ef32de80fb3dff0c20f045f440d5b74c7b3b498c50955bb582bf8fcd5 |
/data/data/com.house365.HouseMls/files/ofld/ofl.config
| MD5 | 4f696cd387fa7d5fe9dfb5f75c88d5d6 |
| SHA1 | 39c23ce9f7df686dbd7394c7ae7d065ee6237abb |
| SHA256 | 4cabb5e7e37d6133d9058bedf109c9ad6aaa0d4592b96f7f1568a4b5761ed68a |
| SHA512 | 00845b74f10e8070469a0c1a71b6ae404d044c0319d422d3b17625ed529161066969d3c9588fb754f5c819ec266943a08e149149492dbf5b3465d7278b3fe6fc |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/llg.dat
| MD5 | 161557b06b4a4d3ce095528dea370eb7 |
| SHA1 | 8bfe9c4d916fe58d856b5a6ecaf8cd9ea4df2c9f |
| SHA256 | f054ef19481234ee5b2db1d1c681839dab235a857ed3a4bc02efa8f785f478d4 |
| SHA512 | 96ce8aedbdbb387438efc86aaabd13a6378628bfae203d2bc25ea1cd7daa6ddbd6dd2c81d631fbdc9b653a93011d3c80f0c085580275b683d5e0bce077e6e449 |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/llg.dat
| MD5 | 35ab4ac40ffd828250a3f98526414bee |
| SHA1 | a283553210f68fed059dd261793b68445790ec2a |
| SHA256 | b62edd5d0a3f8dea75da40c5c4b643e646f1e0cc03f01620bc30c7e610cb8751 |
| SHA512 | e01ca7c12f86f3511c29fb0397d81ae879f41df4fc1f1ceb06f5754574ced8a0d64e09cfbb810c190606a9387efd10264788b11b465bb7dbb3c64af733dff53f |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/llg.dat
| MD5 | f146a8ad51682dea2153fb3188e5fceb |
| SHA1 | cc06cb061d292a2898867925301165f7549dcfba |
| SHA256 | 6dc287c916c86bf6fb2b20df5eb5a593e40ae26889756a54d04a4edcbbc76791 |
| SHA512 | 4d67c7ca46b4b457ccde463ae7549d64cd25e01ebd49a36bffed4fd12ff9d2f90254aec6d5b386d0e2868dd96aefa81fb867410136f0a832c5abb73b6981fbca |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/llg.dat
| MD5 | bd70cf5a1e7bc76fdc00ee4392b1af82 |
| SHA1 | ffa989d5e0bff3a327ae84bea51d4b1e42949d72 |
| SHA256 | 5a6bc0ec7f542ea3ede5ba84a32a886f324aba136677499b7df9e8231ac562b5 |
| SHA512 | 04faa6fdc0cde2f3473bdd4e3258159a98977508f9a189d6ac873c1d1e157e16b66c39b28cd3770d8bb1a17e0b7cc850766fdbc19c880af40575a6c101606068 |
/storage/emulated/0/baidu/tempdata/lcvif.dat
| MD5 | 5ebf7c9aaad1528e0c7f5124c96384b7 |
| SHA1 | 0c3d1750720d537e514f120558ae0fca6c3fc15f |
| SHA256 | 9d7994d665da798fcf37b7fec18b1a957e5185632acf414ed04a0d9d9fad3d3f |
| SHA512 | ec6e84f83cf70542869a446d1feb83ca9d79dccb7c5b172dacf3c2ef2437425e0a1e500dbe82fae55b9f8c47080b6e1aaedda9ca3f16d2b64c91ceecf6d9a927 |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/yoh.dat
| MD5 | a936690571e9104e1922dda4a0ba5bd1 |
| SHA1 | 65f49c57edde2f96be2a1dbdfc3f7351f1e66554 |
| SHA256 | f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412 |
| SHA512 | 3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394 |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/yoh.dat
| MD5 | 1681ffc6e046c7af98c9e6c232a3fe0a |
| SHA1 | d3399b7262fb56cb9ed053d68db9291c410839c4 |
| SHA256 | 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0 |
| SHA512 | 11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5 |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/conlts.dat
| MD5 | 8d80bc8ea90e9cac010d3ddf97bda5f5 |
| SHA1 | f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07 |
| SHA256 | f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93 |
| SHA512 | 9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7 |
/storage/emulated/0/Android/data/com.house365.HouseMls/files/baidu/tempdata/conlts.dat
| MD5 | 0cfb9468f3250974b0947014619d256f |
| SHA1 | b269f797766c15f89100d746df26d67a20938e10 |
| SHA256 | 34ecd569663c5b2b6ad87846f56eecdc44177752e01fced4589ec5336b66d48b |
| SHA512 | 448d319d9679af2f35c94c5d5573bd0e0c2d709c7be7b85ba8eb68b07262fa43944ffb1eec5251fa0f969ca8933237f01702d8e08d845db416d21ee7d22c65c3 |
/data/data/com.house365.HouseMls/files/mobclick_agent_cached_com.house365.HouseMls
| MD5 | 82d2151d1418c1d64d04fbd7cf400dbb |
| SHA1 | 8667c84ed313c5fdc304ac1370e4a5df394a3677 |
| SHA256 | dd6697e0f0f29db767c2cb9bd5468b76934d92a46aa837f936bb9d8fe06a48be |
| SHA512 | ba50a3693533a7374ec07975060672026ce6a1ea1d847915736f2c2c748908c68fd7777c39ed9641ff7b6a32149c12959da89f5f72eb00b9c0fdae488e2d68a6 |