Malware Analysis Report

2024-10-19 11:48

Sample ID 240615-c1a1lszerl
Target ac9953357bbc2f0742e9b438e8ee2357_JaffaCakes118
SHA256 a85bb4fb0f6c9c8fc76002868b0527b4c4e7a476ca53173166d1521b514fc3fc
Tags
collection discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

a85bb4fb0f6c9c8fc76002868b0527b4c4e7a476ca53173166d1521b514fc3fc

Threat Level: Shows suspicious behavior

The file ac9953357bbc2f0742e9b438e8ee2357_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

collection discovery evasion impact persistence

Queries information about the current nearby Wi-Fi networks

Queries information about running processes on the device

Requests cell location

Requests dangerous framework permissions

Reads information about phone network operator.

Queries information about active data network

Queries information about the current Wi-Fi connection

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-15 02:32

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-15 02:32

Reported

2024-06-15 02:35

Platform

android-x64-arm64-20240611.1-en

Max time kernel

85s

Max time network

132s

Command Line

com.lc.sakuratravel

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.lc.sakuratravel

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 abroad.apilocate.amap.com udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
US 1.1.1.1:53 restapi.amap.com udp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 xiaoyingtravel.com udp

Files

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 05edd9e9bf2205b36bb0fe447b7feb79
SHA1 68d92132c367ab6ffdedcaf58ff95f3d76301b24
SHA256 fee2808f1994d83e130251746227b7723d0a5b4c4f42d1d5005aed2360c9b7b7
SHA512 cebe18a3a5c194c2fd5f564b55e3a0325a327b7f734b956aad83ecbba3b3d14d6fec16b70df90db380374ca81dc185e21f5654703ea28461f3bcd5e3acc8837a

/data/user/0/com.lc.sakuratravel/databases/hmdb-journal

MD5 956a297d01e537d9993af33271120458
SHA1 45a53ba33a44ba13f04da058ac35247283ecc1c7
SHA256 ae2012144feaa136d24054db910c02c73d618ee6e2699eafc9ac28c3e241d4c1
SHA512 c60143b56bd7a61180d75cc9dc463ebd02da6eb9e849498ef6c8a3a2286b0711eb761df9850d959a385a985741d210561b084c2e234f9c78e015a88ce4dd065b

/data/user/0/com.lc.sakuratravel/databases/logdb.db

MD5 a925951bbef27a9ea507f847a6ceaad7
SHA1 34b73ba1b11a2423198826f820fe87a1b8cc13b6
SHA256 1dd2d23b7c64bde28175205a16f99abac0aa5938d31812c095234defbd1f917b
SHA512 4ce18802068f8549fae1d3c594423476753deb776c57acf8ddbacb47360db50c922452db037b3c2d852f28147781c6532a141e9cfae51772b96958825e7ce5cf

/data/user/0/com.lc.sakuratravel/databases/hmdb

MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 4adebb00e594f565ef24ecaf074cbf51
SHA1 6a19a60798b925abd3fcd2b420902e50ee809db2
SHA256 88f94ebc267c531c0dd1a58d5799bcb58d5caeec41f2f3d45649b832b46c67ae
SHA512 e26b1732806268a6d8f28bd1d9cd68ad054ab3c5b1d49725793e74220af4ddea9359307f60faf6fd498d6e2d7350d972cb71ee7eed9cb7fb4da547b495df36fe

/data/user/0/com.lc.sakuratravel/databases/hmdb-journal

MD5 89bc219b39760cd74a9f91b3e42ebe8e
SHA1 18b73c4979fb0d35d7e4a305e6a1036cb7a9439f
SHA256 8d83e23965b697d874da94f5c81c7921b49cdbebd9cc1f55e5fc44c4fb7b4be7
SHA512 11c06a6211166737b53dffa8c3e2660791e772d234d52d44847f6819f4e1a61096f83c72e5108d8b9e8ddcb349c115c4ccfc5470de571aacd2fcaab890e76f03

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 9d03b3f2956607d2aeac779c073dccb4
SHA1 59b46408f9cee17179ea068bedbe64524cabb2b7
SHA256 14473584cd56fb88ddb5293a2239cbb98dd23f3de01d7273cd8bf0998d2138bb
SHA512 7b27665d02231bc1ec6b316c748821d39a74988bcd149c5184dbb963b5f0ba8faac7d45d33369d55c5f1d01940ec684cb430d9da5183f1049ebeaca0741c8e18

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 756231de181b2da70593b162435dea11
SHA1 31245086d4953f35789a5b9769059e59c052f71a
SHA256 8645ee780bdc559930756d27d7195b73ba36595e8e8fb963909cd9c9d521b298
SHA512 623cca0f6bdef3d3476a118590baaee625f796791250bf6c3a009e85c8249216c6bd7379155b586107441da9ee4c7aec995e63027db8936976927785e6d9ed2c

/data/user/0/com.lc.sakuratravel/databases/logdb.db

MD5 6c1bcb7f1cb09d1ed6d3ab5143406793
SHA1 6e40d6fb87a7f49cc9b9ac28e75e97b9c8d8636f
SHA256 0b54b739065d3b36f18fb7cab33fa891488c01abf0b5358c519c8ff04f68f9d4
SHA512 31c864f28c2fe4b2102352231c90b38645bec1b6a6ec448d017bd2574980306d9a89b990e21ace6d6c8bdc4265766331e604f05ec2fb11bb678b427fa9ffd38d

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 1f5741c75925b096a675c445ae943aaf
SHA1 03b8c8b5bbb93e71e1c739249c28ecde476c9cad
SHA256 e2432051855bd377374f638412d40f31bbff6a51e252d48bb0f08c59b7f1a8a6
SHA512 b23dda51a2e4b2971ee95419c024aac2e61761b49b28a1f26df6a7a0af1f3cd078268212707f4f92664a4d9e89d5725badce04d78ff6f01f6d561510f79e1886

/data/user/0/com.lc.sakuratravel/databases/logdb.db

MD5 3565a47c51d36161e23e969e572aaab0
SHA1 623cf5ba89b15c26c5e8430aae05164a4f1153d6
SHA256 9289b32ad16aad8e7e8a255cd4033ea6d0e64c09ef8c0a808038ba7b1f51c0e8
SHA512 e13e2a6a91aca8edeeda5bc319ee210c44f0c74277894b54c0627b19284fc37b6299817d2ff126cd1443b5bf6c300773adcc659b7943b14461b9ec3de93a0447

/data/user/0/com.lc.sakuratravel/files/a/b/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/user/0/com.lc.sakuratravel/files/a/b/journal

MD5 87ce8c74d7499a818fca4cde274d8c81
SHA1 c68b4de19347027906644b14f79e0221ef3102c6
SHA256 d6b74387b30cf2e1135af98304cdf6044f18371101772dbab0240e96ec79af71
SHA512 8dc916a4f4282ec1590633ca5f72ffc4e6102d1e4cd6092fcf54f934c2d1f598cdd86956933d7baefa76c50e9f79bc9b807ad9370a1426c3f559991d23c3ac68

/data/user/0/com.lc.sakuratravel/files/a/b/009c15a12d8d5cbe00abfbefc8e041a2.0.tmp

MD5 6253b4e845e7529373d55691a22f9026
SHA1 c271dd3fd19e71cfe5c1f941344339363892f09b
SHA256 a7f8d51ce11b7ccb3c5b615bfeb5ab692ee61af1a10ee3f3b0456fb26effd450
SHA512 9747237812fb2d85494ad75fa475e2a4dc1609b4750cd22d524a0ef7b1b44cdb6139f00b820b6f3afd3360e83d601a232fc92681d599cd386d7dd01de44969ae

/data/user/0/com.lc.sakuratravel/databases/logdb.db-journal

MD5 9408fb2c9c817b24c24271c9eb502fa0
SHA1 e2b9dadb989c9963bd09a261e6e9cf1a7e2266b0
SHA256 0bcd188552542b3ac14c93b225329817284457fe5ce7f9f2d71116380d9c6bd0
SHA512 55262b28794c9e1aa7ce942ae48421566a1778f89420a0f1947de7336df24497dbf2efca569968e58fd215ab270261f3d44e0183f980c2bc3a0bddc56dca501d

/data/user/0/com.lc.sakuratravel/databases/logdb.db

MD5 edcbb4abda622171df608081162f5a43
SHA1 43aca2f03dfff7502f5e26dcfae91bc6c462a0cd
SHA256 68a1be2f0ad90a6f1593c8cb4301cb515faba01105b05aa22d9a77db12d0fd73
SHA512 c94d5cfad81af15c8564a5bc8363a26584c82f98cbb207e55c59327613b66935bff6b8b097d77a6158452e4dde07184a4f71204fcabb4e1f0d2cbdaffe4b4e66

/storage/emulated/0/amap/openamaplocationsdk/als.db-journal

MD5 464031b3b3d5099134e4fefcda30b280
SHA1 d9c5f992093498c6857ffaf100a5cdc6866cabee
SHA256 02d69eac7f6dbe35ec52d8b23ac06d0a04d811a370a056ef71d24e14d664bb16
SHA512 8fc53d8bc73da42678ae87ed2a8dcbcbd70d752a04944c06fc64a19559e26e120e238ea57efdec363c65c2c70d240813c7e59bc5449f6a060ae0cd81d8987ab1

/storage/emulated/0/amap/openamaplocationsdk/als.db

MD5 378a47102658817b2dae269b94b99392
SHA1 9fe1a09b4bbf91725bbb16b1ea6c014d1b24c221
SHA256 ece306975b33fb96eb1a6a734e53786145ec806bba83e35b3005c85f0670ad47
SHA512 c9ed1f624dd386eaeca4fc34fe972f74a87e5d22271e3363e911ce6d2ce4f9ae816be782ad6363b892745ef59cd892b5a33a3d7700010e5bcfcab46bf6ab3a80

/storage/emulated/0/amap/openamaplocationsdk/als.db-journal

MD5 4f6221bb4301e1abd69c6981f98b6ba6
SHA1 ca7084de0c4836b99c48f3dc80bc007494a70649
SHA256 a3b653098f67dfdb1cd49398ace021b79f46940316069579a5c1d3fc20f23c3c
SHA512 16799e9feb3c67d7b6bcc3786ff8a970e7ae726eb5aba891601584e0baffcffdb0d32722c2373997a12ec471107b8f5d295b5c0fbe951d13081b6fbed4c3c3e2

/storage/emulated/0/amap/openamaplocationsdk/als.db-journal

MD5 00d014198c1d62436d99aa0a06971297
SHA1 ccf7eac1b124ef2ccfa7ed0cf17f404f290c56af
SHA256 266e70bd4bab2eb7aad0ab0119b3b295cec66877b0475d806deae6ce03bdd00f
SHA512 a68c9246b8c9fddcbf85b303d513e023b84267e33c82171a5601bb2bc503b6358a94aea1175cdec59f293e9588d56240c44e2d3bd66f34edca514b74a56515d5

/data/user/0/com.lc.sakuratravel/files/a/b/journal

MD5 6176255de80d96478b626fe4035455db
SHA1 d8639cc90a6274e63e62287d46f1165a39582bb2
SHA256 51b310f78e87761996de699d48211d19a92fa28094fee9d669695d0ca3f8166f
SHA512 335abb5b179aa4e25ab9137114d5dee2a86e5f46d4458c46c4a5cb0c1314d75a8788e29306000041f514b37eb1183e0cb957df98ce2d9febd46f6837bdaa8153

/data/user/0/com.lc.sakuratravel/files/a/b/9a6508cb46fc4b92047d89604fc83fbd.0.tmp

MD5 a7979e7c055f5be1f6d0874ad6179906
SHA1 25dc991fdccc87f22bf013b81cde1376fc219e1e
SHA256 b328680791d9241b846d0be03d0e01906a0224755a26153b1caf4943ec50b0be
SHA512 a27073fb9c96ac83c3ecf48a2f3e2520964a5353f156f04c6d97fd2fc9c1f8a8e3872dbabca6c2e630fab5256cbbbcbfe44015e0894911c4fcd46d00e1f1600f

/data/user/0/com.lc.sakuratravel/databases/logdb.db

MD5 0c4576fd675ddc7987154aa40625374d
SHA1 1ed2b19010aad9095520db2b8da7e00904ad6168
SHA256 3bc5350931162306ff16e4ba60c37ec28c1de6af67f2ce9357c1218707c23e3b
SHA512 3e837c7d77ab0b27ba11d5bb83642cb41cc01d4db4e3df8d2e9769084099ca64539893895c2d5060a43923348d8a92a0dba70cda90ea01ddff9878f05a8b0e4b

/storage/emulated/0/sakura_cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/storage/emulated/0/amap/openamaplocationsdk/als.db-journal

MD5 ce33f3092c65659bfce0c827da97e17c
SHA1 f55ee2eaeab259dd8dc1a45178fefcffbcf1d790
SHA256 24c7006de396d684720cea056842d4a43e331e52b422254e7006c82d7f05249a
SHA512 7314cf17d5f8e98fdd1cc10778f50ae9222246a1a58fb80217fc457a5d517ab0fc96c8ceb4f84446cffda86f9e64586bc5ee9a62066766512a29f56cf3ef7f76

/storage/emulated/0/amap/openamaplocationsdk/als.db

MD5 603651a526125eb1a69875a07c238138
SHA1 34e33bea01a012a354d581fd7edcfa88a1725e56
SHA256 49d72eaf9b947d9d4b71517217ea1a4cf8b57bf279843f2b8db939552e6a6afb
SHA512 776e6a669dfaf881bf53a8305038756e298ab762959b3ce15c1d2e4b1038a13c08bcc76144a841c1a235619d723bde13fba3cd95aa68ab52ce5d4855b0b23620

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-15 02:32

Reported

2024-06-15 02:35

Platform

android-x86-arm-20240611.1-en

Max time kernel

90s

Max time network

136s

Command Line

com.lc.sakuratravel

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.lc.sakuratravel

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 apilocate.amap.com udp
CN 203.209.230.23:80 apilocate.amap.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 abroad.apilocate.amap.com udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
US 1.1.1.1:53 xiaoyingtravel.com udp
US 1.1.1.1:53 restapi.amap.com udp
CN 106.11.43.113:443 restapi.amap.com tcp

Files

/data/data/com.lc.sakuratravel/databases/hmdb-journal

MD5 9de18014cc0d80fea80dc2ae54e93c6f
SHA1 53c3ee3b91f3c2420a5cd5a8aa647b67c11e8266
SHA256 4a0ff98538877d27af1bdce457b4c401a7e3abe2c48c23783c9b7d0249c293ca
SHA512 a8f4980f2184e02b24bc051dd0b8a8c378da007ffc0fdff84710f401a3b00bf413a49fe4b3445b88318632d21a11dab708c043687907540806575c255239ef50

/data/data/com.lc.sakuratravel/databases/logdb.db-journal

MD5 44fe54523e9564c5a23ba16d1f507125
SHA1 3bb89423cb5da474a885f2ce56d1e03123cc1300
SHA256 d5f6e0063879aa3267f2fe94ef23f25c3ed8ee95d86c2c43c93b278af5278cfe
SHA512 540c424641fb9705b2d59288f68b3764e2a22306710cc3be7df92fa7a21d4e830500d4dbe8582e92f7345c2f8fe839f4f067e2f2e139b3cd2446f9deb7f20616

/data/data/com.lc.sakuratravel/databases/hmdb

MD5 3fe30614d7e0d11db870b4624f6c50e0
SHA1 053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA256 67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512 c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

/data/data/com.lc.sakuratravel/databases/hmdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 a7b5debf648af8527d38065f285c6754
SHA1 ad8513c878ca1483a2472c7f8dfc8a416418517e
SHA256 0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5
SHA512 c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

/data/data/com.lc.sakuratravel/databases/hmdb-wal

MD5 2397e37b6efcc579ef7d9ccf30d7f50d
SHA1 8f223b83835fbc930e66376bd04ecd88278fde6a
SHA256 5e6b37ff13ee3ab41691d9aa5bb0d58c3f502af3e9e1b41a58dbc0d55b43656a
SHA512 8997dfe09d8aa5951ef3919c0e2f695a1b273899eb655abc67d790785cc891602d6bba72aea7c4a3a3f6c290c723467333930653f56545ba8c05439707c69cb7

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 41be65acece22470afea6844e9f190fb
SHA1 ac899a0416da0ae00db8dc1465b53f5c7774795f
SHA256 ddcd920dbe0230c93ce7f4df6cee38be10eac67b1d3089c142deedda813ab11e
SHA512 6d307d84822e88dbd84d6dc892c851d29a789697dc5ba2ae9b8d5926b18585913a93c33bd5d3e3e5bb8df8531eb1fbe8e3c4028c03aea907d982fab97888b013

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 4b058f1e1367a70e50a61322fcfd1328
SHA1 5beea1923e413ad7351daf7e07c1dbc494876e70
SHA256 c361d56e2b6a14a277d0cdcbc284879ee5766e9e21666cfdc099f6248e59c023
SHA512 035933ead6b5810de94ee54a878f3fd4d00c452fbcd1511215f12bd9f9d12a9fb1784624a78170e898e4f616ff9077cc09c661325b6fbe1c7600c153d94f35d7

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 5ac9eac11119db686bac0cc7474e1f7e
SHA1 1322e3ad7143753852a8e28d7353dbafaf354eb9
SHA256 ad0857c8de0a1423655476037bf759c6b8fd2595574ad5f7e567019609e187e3
SHA512 11a17979bbffde9e5eb33d3e4a0d10fc07f2a25d42907bf8f4698172dfc883ff6c9be428b7d7f8d5a4b535f64f20f7b48f3f1e2d4790a5f2413305122ba018a2

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 42cd8ac5a2ecd9903d009dfbf76a32f4
SHA1 7bfcc99b199fa7ca161e7b89897d28cf3ff8e751
SHA256 9bf6ff60e66017d9cde216cefb207dae4dcadcad61aad64f59642edfd1cfb2e0
SHA512 4a23eb7397bb10b91703c7741fee41c5dc7c8ceb30ca5296374f33b05cc9f67fd6ea3829be6c505681991b6fd455f4e239cebc3b32f1228df8114f9779b57cf9

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 60e918a66670488ae5e111bdcbcfa95d
SHA1 ee81e2f5ad9a7301adfce5999095370e532a43d9
SHA256 0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313
SHA512 1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 8e565441ab7f32da0b395f1bc3aaf4c6
SHA1 1797f647d97b88d7317e73609a6d43f3efe50615
SHA256 3cf3c95879a70fde2de7105959106161c50a7136c410b747fb7095af121e9d47
SHA512 ca4530e716ee88e747e864f7e56eedfae7fbee0ce55711e85c5555f198af346ca9d559a5c68ab3f793f2edcad13483d482b89e09675df066fc68ef1ac725a726

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 30ee1514f3f4f77524737ffd1aa15d16
SHA1 4034adb5622ce14f79dc6ad25c21b99c8d2b0dd7
SHA256 9cbced42d26d0d2faadd0dd545c900fedff46c19547909d9e1f4d052a7660cad
SHA512 be89d618660af5b129c4c472af1c55c0168a2485f23b73898285041abb6f3824d0281ac0a6b7066000e4997309aba5633ce99e52fc0f3c291f56563fb09ca39c

/data/data/com.lc.sakuratravel/files/a/b/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.lc.sakuratravel/files/a/b/journal

MD5 8ed07b73a02b2ec6f7a761f2e945b7b2
SHA1 d9f280d55b5e8478b57d55a39d90cb968170272e
SHA256 35f78633853c7b4cb02441b5aa57e9e3ec8433749a9224ab38b43f54fe92153b
SHA512 0f2d8df806a162e03b1c71b3c88670c665dccf94bbda4e350f0381a6ce28de2afc33a501cd018a4264c08aa829591f75f7c7245d0061e940bb94352cbc3ddff5

/data/data/com.lc.sakuratravel/files/a/b/6c1d3ee4935a26c620d94755778f14f7.0.tmp

MD5 95803c67bef4e1158f1e2e8b43136ba7
SHA1 84c763dd8d9e8b2a4f8f1d7f7c8fa301218de36c
SHA256 c41a33f6aa595826d0bfc80ff28dcf59b3ac60301cbfaf21e03ed879f36beca8
SHA512 013239a21d36603ebda2e248c65c0c0a7848f52ee978c6d2a185c5e295765417b1eced632a300e8e09e573330c81d80532e7552bf1be5a0ce76202e3c6744c79

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 43b56f74022c3a9acb2cbe2bed2794ac
SHA1 d1ce8097dbed879b461752a6ce3a28a3ab0bf367
SHA256 d8c1bce194eb546fa3d13eff56858b43c5cc69d81f7833e4a4b9c81f05b9d1e5
SHA512 2650853ce8e9491771c5374c013334dbab04db19be8e44ec6f84f2e1ce7e3c109158f2dd173e0f755e306589741cc25971803f78e81364f99e1379c24a70273f

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 2fd22cf5aa40acc575be02c20e7736d4
SHA1 06f8d72ba8f61cd145b0592ab5ef43f0d1e5e3d3
SHA256 4cf35e588ea77dfa88bff51e3b0e2c7863e0afab35738f75ccbce173185d0c3f
SHA512 ac9defe0d8673ecb409ef947cae1cc24965266643e30b5588f8e5b2a6aeae59aaa05636e0b628e21b68e960645471a5b1aa212b400b01f70b5e3a6e727e6b12b

/storage/emulated/0/amap/openamaplocationsdk/als.db-journal

MD5 b5cfbea94a79ad77d085c6ef7d446e9e
SHA1 eb807c36c9b314845290583fd9a6c929f9a369dd
SHA256 b39b9bdd7982a8d234744af0966c58885b33942dc76341b2ac8d350cc5c5d9cc
SHA512 ab35611b08865cc7c3ae53e7b6f884596c6ef1a2ca49cc1255f1124367f6451ced070fd6da64b71d1b5d9674c8034cec7269007cdede932f62a32c3444e011e5

/storage/emulated/0/amap/openamaplocationsdk/als.db

MD5 59c5ab8e6c1e336a7932e5cc8efb0e44
SHA1 e9c03df2110f8a877d97200453dcb45fcb49da86
SHA256 4995c04e3c78eb37f15ee66881c1f4849a97a9f3ed5458869f1160604f1ccc0d
SHA512 1372036f865ede81683008bcd0cdc14f755aa78f3f84f5fc784871e6ba00512bd01e726f6fe95d3daf99c89e1bb89519028e8e6c614d31efefd0d7b07f3bdba4

/storage/emulated/0/amap/openamaplocationsdk/als.db-wal

MD5 497f757e4731e23f0c134cbd38a7705d
SHA1 27933e855a3ad08417fec047064033277b9e338c
SHA256 42566b2759507999fabc01d9958e5d62c724f78eb14af7d47d42e6f13a241afa
SHA512 c59fc1bdca255bde48bd32f00dfed10a345cb836f440b79bc32a4bcc67470ed29bce4943b7d45c43e23cd1faa22fc83f54302e25a4cb169e2617ea22e0a3075c

/data/data/com.lc.sakuratravel/files/a/b/journal

MD5 6adaccc8f52f1668a0dba7ee11f28f2f
SHA1 c8377c62f25fd14b0ca5a198d15cce1f4838b6fe
SHA256 8ee58bc1ce748430421a73a30e176141f1e0e66349cb676a7eec4133238df1d3
SHA512 92d51719bb481d0ebada8766ef74279fbb6d5e271138c40cb38ef101c6724e823c2f30e457c6e22cd7f01a6d46e5209845bae649709baef4630cfd56f8c49828

/data/data/com.lc.sakuratravel/files/a/b/2c1f5024e14499941e686074110be00f.0.tmp

MD5 3062fe6dc1989332fca08826846f1605
SHA1 daf49a5f5104490f9d6644855d6250bbc90e0e97
SHA256 498992ed383136ecff95822e2a649e9f29efe44571006e3277294701504bebb7
SHA512 0c128739dfac65025424b89a045eb9120e1207b8648ec1251740801bfa8c4f359db95bb4c34c17927755cd01e75787937af9b46a593580a1461da85d21d51a88

/data/data/com.lc.sakuratravel/databases/logdb.db-wal

MD5 7257655ad1daa278ba3736560a9de3ea
SHA1 410cb8afb980b08bbdc5fbfbbe3623b5b4d8b064
SHA256 18c5a62a723e4dbc747f02d5b0ecedc5460ab67156f3c9114540ba2fcab56028
SHA512 fc59346aa12c8cc2fdac95e5bb944e8b61ccde01c73ce930c4c78d84a6f363132fd6e508196ef51db73d621b30c6910ddef345f15e68b266a4d806a5ad571c0d

/data/data/com.lc.sakuratravel/databases/logdb.db

MD5 6b834f40a4381b743235b2fbcac6641e
SHA1 efd55db3950873c9bb1fafca4e283206942b7f63
SHA256 d0260a5d57d9d0308fee19197250cb2c56585bf1cf4fe5d53fc59c997640aecd
SHA512 1c6b7325a8095aafce8b56078579b8f4c11acca0599024fb46a8b428cb497ca01913a4518e408bfa41b243eeed2c6f9f95af34e5e4c0ceddf42b91daa73b4f7a

/storage/emulated/0/sakura_cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/storage/emulated/0/amap/openamaplocationsdk/als.db-wal

MD5 a965ecadba36fd0ef8e5a3503806c79c
SHA1 eacda3dabbdbcf3fba276bea51e23cde7a5077d9
SHA256 a932e68173064138b3b499b06f925aeacdf3a1508f982675aafc5bfc5b32e49c
SHA512 bb0518745f73280065ecd8cb67296033abc52132e6948c4bf36980d2820d14287410063522ce3130e0f2b22177a9c435fd94afb579732c3433ca01d6a15cb576

/storage/emulated/0/amap/openamaplocationsdk/als.db

MD5 a22d9b53bda0f7778f3d24257fcf4441
SHA1 71a3202820a5d72b61c6a9185a225ad483faf94a
SHA256 888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982
SHA512 5e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08