Malware Analysis Report

2024-09-09 17:38

Sample ID 240614-jmvlesvbqm
Target a89763ef75c52faabc465f1ccc0019e1_JaffaCakes118
SHA256 405fded82b71943a56d65957ce9e6778c3c77e8482a94e27d3583c00a46704b9
Tags
discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

405fded82b71943a56d65957ce9e6778c3c77e8482a94e27d3583c00a46704b9

Threat Level: Shows suspicious behavior

The file a89763ef75c52faabc465f1ccc0019e1_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery impact persistence

Queries information about running processes on the device

Requests dangerous framework permissions

Queries information about active data network

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-14 07:47

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-14 07:47

Reported

2024-06-14 07:47

Platform

android-x86-arm-20240611.1-en

Max time network

5s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-14 07:47

Reported

2024-06-14 07:47

Platform

android-x64-20240611.1-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-06-14 07:47

Reported

2024-06-14 07:47

Platform

android-x64-arm64-20240611.1-en

Max time network

7s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 07:47

Reported

2024-06-14 07:50

Platform

android-x86-arm-20240611.1-en

Max time kernel

163s

Max time network

189s

Command Line

com.video.newqu

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.video.newqu

cat /sys/class/net/wlan0/address

com.video.newqu:xinqu_process

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:443 log.umsns.com tcp
US 1.1.1.1:53 ksvs.cn-beijing-6.api.ksyun.com udp
CN 59.82.29.162:443 log.umsns.com tcp
US 1.1.1.1:53 s.jpush.cn udp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 120.92.15.230:443 ksvs.cn-beijing-6.api.ksyun.com tcp
CN 120.92.15.230:443 ksvs.cn-beijing-6.api.ksyun.com tcp
CN 1.92.77.21:19000 s.jpush.cn udp
US 1.1.1.1:53 sdk.ks-live.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
CN 1.92.77.21:19000 s.jpush.cn udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 139.159.137.254:19000 sis.jpush.io udp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
CN 139.159.137.254:19000 sis.jpush.io udp
US 1.1.1.1:53 m.data.mob.com udp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 app.nq6.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 120.76.202.236:80 app.nq6.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 172.217.169.74:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 124.71.183.120:7000 im64.jpush.cn tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 59.82.29.162:443 log.umsns.com tcp
CN 120.92.15.230:443 ksvs.cn-beijing-6.api.ksyun.com tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 124.71.183.120:7004 im64.jpush.cn tcp
CN 59.82.29.163:443 log.umsns.com tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 59.82.29.163:443 log.umsns.com tcp
CN 139.159.137.254:19000 easytomessage.com udp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 59.82.29.248:443 log.umsns.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 124.71.183.120:7004 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 59.82.29.248:443 log.umsns.com tcp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 59.82.29.249:443 log.umsns.com tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
CN 1.92.77.21:19000 easytomessage.com udp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 139.159.137.254:19000 easytomessage.com udp
CN 59.82.29.249:443 log.umsns.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 59.82.31.154:443 log.umsns.com tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 124.71.183.120:7004 im64.jpush.cn tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 59.82.31.154:443 log.umsns.com tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 59.82.31.160:443 log.umsns.com tcp
CN 1.92.77.21:19000 easytomessage.com udp
CN 139.159.137.254:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 59.82.31.160:443 log.umsns.com tcp

Files

/storage/emulated/0/Mob/comm/.di

MD5 70a42cba408700f9a6c01c7941a8829e
SHA1 eab01cc2c0671538795fb0b1146017dc099d0984
SHA256 499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f
SHA512 8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

/storage/emulated/0/Android/data/.mn_410185822

MD5 e8be01a3d651b9f955cbb28d7fe2f623
SHA1 04010f8b539c2e98c8d7b7752e9879547aa9dc0f
SHA256 97f36bba6fac1a853fc47a62ed426b46325a58a209d20a7c232641ffba4e44f4
SHA512 19eb61bf037bcc667e6a19773beee13011faffc9a5f8efffebddeb5e27e017bc47f26e143de5e9f471668bdd9eb445fb85afda410b065f0d3ae323169ba4b34f

/data/data/com.video.newqu/databases/xinqu_data.db-journal

MD5 07c3193115abd61c51ffe5acf1c476ae
SHA1 d5dcb6bec2b90026967a71529200d55683b6a1e8
SHA256 df7c27112dd2be6576ea7c7164f3c224de4917d19bd4c2dd753d513aa6686d89
SHA512 393fa9384ae09df66b052d8620fd8a6a774fe7e89d4e27ed038e100965163f83420c36c06572b0bf51e628a796ef57a218ba8f7b03ae895832c28ac12672c44a

/data/data/com.video.newqu/databases/xinqu_data.db

MD5 6b1516be12f8eaf294f7262400115f64
SHA1 d656a337d9b61cff552039d1e0c8d0edef9bb8b3
SHA256 7b7bc81068a8628966341721c37055a9d96f64b7b128d95faeec522201ebfee5
SHA512 ee33471fd66bd2bb38a27bb1ebb97aefb349b75c9453abd95b98ce1ee60dfeacfd074b4e4f617f532b6d95635f4274d8ed663d4cef56f9741cb7c3865eb32846

/data/data/com.video.newqu/databases/xinqu_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.video.newqu/databases/xinqu_data.db-wal

MD5 b1b5a74cba2398e47d08e2f9e25adb8a
SHA1 3419cbb9e21741e99f6e87edb0b2f22393cc6c93
SHA256 5a7162d7a28f33cf570df61e4bbc9cd7a989e3e9934d4cc4fab2bfeceb59caff
SHA512 e747e2d0399c07f4fdb7597db0a20b1337f67642291e1fe168373f01bb9f30a9288132acb6765d3157163d851dd9a932768ec72b12ac17d30f6ce2ba679195f2

/storage/emulated/0/Mob/.mcw

MD5 761a11a8adb3bd33f7d6f6f7f6911fb5
SHA1 5e7bcdc71c62c856bf059c4b0950b7aa4c4d55ec
SHA256 2de6c7c17116a9928fe92c3b6f32232acce574c0e5f4f00a0879af3da975a7d9
SHA512 3917cd6459dd537a945f76c1e927b94c68c4860bf79974389d35be7df272b86fa5795da5adad69c8c07d5a6557b6e50a795035bbe31e9ff8c094b148039fb084

/storage/emulated/0/Android/data/.mn_410185822

MD5 72192abab228a97c32a31ff2138e3e78
SHA1 99469d35f779f989cab52fa1dfd8300c3bec2ee9
SHA256 c77779f68dd83302058a487aed530d8e2dcd2b80efc9f62a23a264d207ee2467
SHA512 0660592f3580413585c7d7e2d1503614ec0086280a138a82b7656e77b0dadfc15468290a6132960798d24edf84ba743b8bf44ce8daa2239b10dfa3c7852c0817

/storage/emulated/0/.mn_410185822

MD5 114066678b657c133a1e833d12b00c75
SHA1 683141a61103e005acde1ba3570a6689899732db
SHA256 74529c99ad319d947e21faf48d52729a2db24d06a16a79381acf946fcc9e700f
SHA512 7781fc71951a56f065a0e93c5d103a9559f2a6024538d99089b54de832960dbd724b569a0f36861cfaac6cd3ff4a5052dac5b998139b550a653ccb61261f2b59

/storage/emulated/0/data/.push_deviceid

MD5 9ed2c2db3f884109175b36742f2754fd
SHA1 a185d5637c82d880d297119a8521550b6a8568e4
SHA256 0629957a87c683021c0dabe374ebf5b4b0230e6d885ad975e602642612bdfac5
SHA512 eacc9ef0f80d2824e1d50ff46df5187fd545e0892dc8e250a3d23b6930f82647d243d680b952283b5e819e39f321f6ac68ebcaabb4bbc8ab659a7a1405a2f6b1

/storage/emulated/0/Android/data/.mn_410185822

MD5 a6b27f6969197ddf2e52dadf3806cd62
SHA1 6122e5da727db3ce36f0ed76a79d8b5b9b59a7ec
SHA256 2bb874504d7a90f7bd1da70b80b9fad596329b7c648dbff59e421ea4a1718736
SHA512 2b78eb6597b4002a4abba1b491b07e4c0b5d54b206d8ded9630e31d8a5d867de2fe04cb7ca9cf0c5c0833c3da28c9a7afc47e359a6fa3169b756680c536807e1

/data/data/com.video.newqu/databases/ThrowalbeLog.db-journal

MD5 bb6b0cc576bf139d6eb2898716d48824
SHA1 6eeefa702cd0e2e7ce13cd23d3805617d73eedb8
SHA256 064c8d2a1693a481a7e6da75278736ca1c9bcd3ce992b5985bebe0a0d0003c1f
SHA512 00bdddc69474a3d8bbc4f00500def87780150cfcc24c7229c88718117e4605b7bcf432e59fbaf4c3c0a62b2e944120c82dd84dee4bb5a6038fa435fb6469af99

/data/data/com.video.newqu/databases/ThrowalbeLog.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.video.newqu/databases/ThrowalbeLog.db-wal

MD5 f28d1bccbb62b627d28225129d8238e8
SHA1 d74846ae7f7df7f20bfeb3f0c9a0ce7f5b466f4d
SHA256 af0856fce54c1001374b5c8ab3ec91ab4c758a56f376e9186ab12e5a10107a18
SHA512 f787ae983aa6ca51d8644e498ea85c3d22db93109ff6097472d3fe4e2e1f991f44a1acbc451f7e3667a05b340055b7cc1afa23351a8ce1e76c5da7d77f1cbf91

/data/data/com.video.newqu/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.video.newqu/files/Mob/mob_commons_1

MD5 ba311645e8c6bddd03aea811364fa68d
SHA1 34fe64e6a710609ecb6f1139a22a0430f9da996d
SHA256 1150e6463918122f70f401099c32388d181b6735ae5d94cec434be876c11cf97
SHA512 39cde6f1b3d845cffa2330cdb7b407a7cda6dcc65f7830a6ac801f03bab8b345b9cbf6db7677e99b4ee287dc694c336f5627d4848f9dcfedc3dbee26bca70c96

/storage/emulated/0/Mob/comm/dbs/.duid

MD5 688ee1fb5c2fc3de3a580cdcda03379f
SHA1 778ba30d37a9110cc119c520246ca4bc4a015584
SHA256 125bdf3d9ef9151c5fa3d87f5b9e3f4cf6ec892bd813f4acd9bb4c8495198f33
SHA512 6768b9f622ece82ceb0902255603ea55958bd3a023676ccd62918f5fea155e08f846a63f30eed15f77e243b242c9538be1bb07528e53c7244a3991f89074866f

/storage/emulated/0/Mob/comm/dbs/.lecd

MD5 5cf29fe04c5d44db590d6c80f8eb4e66
SHA1 d772308829d9fc91a2a728818a1a2b97b6562ccb
SHA256 fbf5c6746375bf883744c4713f3c9956e76f096136d70d0688c9f9761aafe515
SHA512 5e0339e5701b4a5f9b7d6a8f69bec5c530d790dd8842e0d46d2fbd45771c13d476711d74cd81402b40bb5b48422002e38a7fb07e42ab56d9a9656d0f5c58d7f6

/data/data/com.video.newqu/files/jpush_stat_cache.json

MD5 11f0a9bd9e5d14a62403927b7ca48048
SHA1 aa754404b444b92890698292edcf5d94ccfc5b9c
SHA256 b8266a5da403512c5053dc76e5017567d9d551610b7c08b3934a516c5163b758
SHA512 2b29b4f4986307071a3b5c2e648655b9f245913fa02a3cd84812f307cc40096ff5554ddbb64f3e29bc19c1dae5308678681a7a0d22ca66c5d5bd5cee4abd4920

/data/data/com.video.newqu/databases/bugly_db_-journal

MD5 2933bb46724b2ed173a5a999e69aa445
SHA1 6041e376baddd1f2034f5002a9f333ea535506f7
SHA256 e3c1347f52802bd04b6996ea6ee39b3ed7ddaac6dacc31aa8574bcc4ad5cb106
SHA512 e438d6a91183ba278be64dd7f69bedb9fc3d12da7e2d5f8c2b9917450339b9203d78d56b4a0f679c53fdbd95ed39e8b58829326bb4c2b7964b876c26e520f73a

/data/data/com.video.newqu/app_crashrecord/1004

MD5 681c0f33b901d6e5e0ae480ec746e1d0
SHA1 b3b807153145aad5a3df5ff086721ca3d6e1fe76
SHA256 d810be741a2bbef3f8111473560de6fa8daa79e32d150a394ffb0253f7d1a584
SHA512 91c5d7d5efabdae5568f0d9ff68cb71a471d6d872070303b8ee32cb877d771aee9ea68a2db687e4e8d6d3cd8b584d891ef7a68a15351d512c707bab0e55054fc

/data/data/com.video.newqu/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.video.newqu/app_crashrecord/1002

MD5 3e7d13dee7ca64d7317dab304e733e5b
SHA1 1e51f6d98e0d03bed7c5613df6c55979fa5903e9
SHA256 0ab642efebdb60609f920b51cdba689380ce52e197ba8be4734522c3f6300905
SHA512 8c177bca13bca3f45145eae0762d991d61f03db1e4181acae84d4a7e4bdef7cd9465c931322a2a1fc8270cf21cba8050306ad760fe82785429d73254a8a01ddf

/data/data/com.video.newqu/databases/bugly_db_-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.video.newqu/databases/bugly_db_-wal

MD5 54a6909ac9a50c128e133cca57d45807
SHA1 e359ca43297dbcb3668c6cf16e986959578b0f49
SHA256 555555f9bccb1b1b929d7801d377381986ce55ea6022e44ea56b72ac06ad7fc1
SHA512 051b4fc8454077d6b8e114d9fd2cc23551898aae6d9ecece4404829db44bd775f090ae39a0249c84741d7dceee930103c2148b38f154d0ca40f13b43f32d4bcc