Malware Analysis Report

2025-01-19 04:51

Sample ID 240618-ktrnsazfrq
Target badda468470a02f8d3343f26e21761e9_JaffaCakes118
SHA256 f506ef821d791407162307c0fa9430c53bc63cb5ea8c4515c2263d2425ca8279
Tags
collection discovery evasion impact upx persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

f506ef821d791407162307c0fa9430c53bc63cb5ea8c4515c2263d2425ca8279

Threat Level: Likely malicious

The file badda468470a02f8d3343f26e21761e9_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection discovery evasion impact upx persistence

Checks if the Android device is rooted.

Patched UPX-packed file

Requests cell location

Queries information about running processes on the device

Queries information about the current nearby Wi-Fi networks

Queries the phone number (MSISDN for GSM devices)

UPX packed file

Reads information about phone network operator.

Queries information about the current Wi-Fi connection

Queries information about active data network

Requests dangerous framework permissions

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-18 08:54

Signatures

Patched UPX-packed file

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-18 08:53

Reported

2024-06-18 08:57

Platform

android-x64-arm64-20240611.1-en

Max time kernel

179s

Max time network

188s

Command Line

com.cloudd.newuser

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.cloudd.newuser

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 pingma.qq.com udp
CN 119.45.78.184:80 pingma.qq.com tcp
US 1.1.1.1:53 apilocate.amap.com udp
CN 203.209.230.23:80 apilocate.amap.com tcp
US 1.1.1.1:53 test.ayundi.cn udp
US 1.1.1.1:53 s.jpush.cn udp
CN 124.71.170.130:19000 s.jpush.cn udp
CN 119.23.158.54:80 test.ayundi.cn tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 124.71.159.41:19000 sis.jpush.io udp
CN 203.209.230.23:80 apilocate.amap.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 restapi.amap.com udp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 mps.amap.com udp
SG 47.246.165.171:80 mps.amap.com tcp
SG 47.246.165.171:80 mps.amap.com tcp
CN 59.82.132.217:80 restapi.amap.com tcp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 123.196.118.23:19000 udp
CN 103.229.215.60:19000 udp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
CN 117.121.49.100:19000 udp
CN 203.209.230.23:80 apilocate.amap.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 1.94.137.47:7006 im64.jpush.cn tcp
CN 203.209.230.23:80 apilocate.amap.com tcp
CN 1.94.137.47:7004 im64.jpush.cn tcp
CN 1.94.137.47:7008 im64.jpush.cn tcp
CN 1.94.137.47:7007 im64.jpush.cn tcp
CN 1.94.137.47:7009 im64.jpush.cn tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 1.94.137.47:7005 im64.jpush.cn tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 124.71.159.41:19000 s.jpush.cn udp
CN 123.60.89.60:19000 s.jpush.cn udp
CN 123.196.118.23:19000 udp
CN 103.229.215.60:19000 udp
US 1.1.1.1:53 abroad.apilocate.amap.com udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 117.121.49.100:19000 udp
CN 1.94.137.47:7004 im64.jpush.cn tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7005 im64.jpush.cn tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 1.94.137.47:7008 im64.jpush.cn tcp
CN 1.94.137.47:7007 im64.jpush.cn tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 1.94.137.47:7009 im64.jpush.cn tcp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 1.94.137.47:7006 im64.jpush.cn tcp
CN 124.71.159.41:19000 s.jpush.cn udp
CN 123.60.89.60:19000 s.jpush.cn udp
CN 123.196.118.23:19000 udp
CN 103.229.215.60:19000 udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 117.121.49.100:19000 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.119.173:7004 im64.jpush.cn tcp
CN 139.9.119.173:7003 im64.jpush.cn tcp
CN 139.9.119.173:7005 im64.jpush.cn tcp
CN 139.9.119.173:7009 im64.jpush.cn tcp

Files

/data/user/0/com.cloudd.newuser/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/user/0/com.cloudd.newuser/lib-main/dso_deps

MD5 bc73be38ce3a7a76bc16bcc816a684d0
SHA1 9cd8752f0674a954c4c0d6381662a5ee8ecdbf6d
SHA256 4ee92365e9d79b7db884fd48b77cb4c6ebb4c0869bee973317906a3fbee9d971
SHA512 75f8a22b02edf8b8ee619cafee0130a61bd5d07166334ccc6d1cbb1411287a4c2735ccd3da53211fd94885fa8f88955c2383266fc7eb4fafa96f86f6fe251175

/data/user/0/com.cloudd.newuser/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/user/0/com.cloudd.newuser/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 0405f0a39c8fa689c94ab31a56984fb8
SHA1 4bbc9748dc8ad60a4f79a29edbad6bb3581216ce
SHA256 94fe7820d417780320dc0c8dfb638f74b348015ddf2afd7181f938cc32234937
SHA512 a3abf72de5b60375e24a9dac818255536bdc2ef414bcecf86007418c022bd13dbce2036a9e37dfa18e2c892fbd9e940f6ffcbda7e1c7f04dd3efb55b34f6954d

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser

MD5 35460ada98a8c1bb63e299437a96db26
SHA1 5853950eb837200ce6e7e4c88397f582f05b987d
SHA256 7186ef0bc7e215586121b73614ea53df4c43db4e5c0c48bee27306ab1b54fce6
SHA512 4c742b368ff9dfe1e31d8e85e4f0e4fcdcffa721bf87c9b6eaa422e0435222d91bb87b10ad4be4574436068f505424fd47cf24a5f4a18c00743a5ea96a64f835

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 28e0147ea0867a95dfdfa2b672afb68f
SHA1 9855b11a3fdab71ab58ab981c079c63d941846d9
SHA256 14c6c559075e122ffb8c682294a4d2687e5771d9ab128792b9976f5b61139034
SHA512 d466139a74f6a3e44c42fb8b58f8a27572f643d965c435514a5a6f0d99af6fd697279f6bf6fbcd863c20d85d352816ad1a4e469d116e0b15f006abfb27cf8bec

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 3a567104ef9cd3058babf7dd31b85896
SHA1 b2cc7fcd41e5d9ae9ad9e68e9ff1e8d8068da5fc
SHA256 1e1975eb3d0ad2db2cb897c467d6b7cf930fb630bc12dbf96df576e00d520aca
SHA512 bfc6cb3084594dc5da6986786135abb19450ab110b23136b7551750a59f2941d60c2e1869036acc9b271b9924a5a279fc3a3a989a6c1a7ee42fcf10b51acab2a

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 e17c8469884a8c4fdb88c24806642aec
SHA1 9cf7e99effe2a4fa8fa22cbc8959cb20a6535fb9
SHA256 4f7e135d93a3f45b1bca76f42919e28cdfeb493fd7c96c3e73e478fe4c315834
SHA512 5970ace8772830cc2623273d948e12ec8bb529e560f66fc0d705b9df739bac1663648093fa4b88f750e250233988d0369a235764151a2adaea7fd33ad8e9fdec

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 acc584f83b672b04aaf028a26b4d7691
SHA1 09e87d66979c2173561dd41be9828eabf8035613
SHA256 d1cfaa59ed9a670ba56b40ae36e8f2d3b77f6bece3e4c1c3250b2d7da977024c
SHA512 abbd69d525498bd85c92ccfc77d50521278b1b29905d51a437883b16fe71589566b8d39ae6ed961bc6f7b5f76c714ef01dc200e0290c3ce1d593421fa1a628b1

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 d2c0ca5c26e535298c8b577a40047e1d
SHA1 0c0029e9bf8b76af6edcaa363b4e0b88a26c023b
SHA256 fdb9112d04ae981d43b890efe7dabff3b5fe3b15893be571b1f3eca9ba386102
SHA512 18e2864b18c2ed491f255b0dff4e72c602152e0053e231905bfd2f8c8b5bb954452265b9a8a8b835a22a0ba3d2f447bacb4d51a9bffa2ffe22944c9666c078e3

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser

MD5 45176c3d17a8fdc95589913768ba3156
SHA1 8522ebe8e827b1468d1d6759b870f59c3c5691a2
SHA256 f66593ea341b34f023b4afe8c5b65726d05c721cbab7099c7239081a522ff1ab
SHA512 1e3efc725c736fb1c063d8714f3067a703be164f946e8d7fab0de42ea3234b34adca20dcc4da2f4bc8522e35e52ca42d4a48ef015bbce387bfd6a34e0b0af0ed

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 f1e2fd9236287bbea1dd74a6c0a7184a
SHA1 55bea1bb815684936ad36eb40e250a72601bc5aa
SHA256 1ab9c697278c2c043705fcce2e8400110268e99b70a606e10972acf0e7767e40
SHA512 c5f6cf5e45b79a8e4a361520684e10f1f8fb83c72cc75b466b6d7a906a6a2dddba2558829f4ecfe1c9630a0097a527ee67a4cd18b76487908378b5f65240e75a

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 3bdd93c0787930ec9d496cf497b422ee
SHA1 31ed510578bfcc98bf96ea629edb0ef9d07d8e81
SHA256 9383ff874775ea0fbaec3cc53da267e3a4f6613fc360631ade561746b24fde07
SHA512 c5725041a3fb4a87f17610fa0677bbcb32457a8b830e7dbaf7cfddfe29c0eaaeb52bdc25c1c070c77708794b3d21a1625455fb74814a5a3cddbcd329afb26e58

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 e28cf7793e86fce4f33e208c836e9e0d
SHA1 407b2943b1bc8f2341a73db7ab8ba558866ba087
SHA256 9b1c6b97cb525a836fc8d35fb811e94b4591b8cff53d7240daece6d7a0969130
SHA512 e980f3809159ebb99b375671035a3a97c4de5a485f93bb139334044972b9ddad6b12dac3219d27effd67724515982a9a60d62ff45c2c7d1196b3ba10424cca7e

/data/user/0/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 2540b75dabe3eb80b23d8a0012f010ae
SHA1 a37b57a2ad775108add90643db443806e10d9bbd
SHA256 e68bd1b24c5fba83f8f17afad92548b33eb5fb6f744965dad2c7bad96ac082a0
SHA512 e24477ef0305890162b5649ea36334234b76c700ead0671449c4fd7b36815991e59e20f64aae3b9bd2069c0cfaaf6a706b33136c0232942ade117ff111ab8b3b

/data/user/0/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 3eb70b226790307add11e87953d47259
SHA1 a017bc880f3b937dc527b2714c6abf457340065b
SHA256 ddb83ce2e77d246e583a575b02be8f452307d9eb351169b97b7e940450a7bb97
SHA512 acb90230b81a5b8bc0aab82d4518be16e6438c13c18ac4c7288777b7283d954e8b16e8646658314467a7b8e9741beab13fc57b4ac41b2909ffb65c35e4fcd2b5

/data/user/0/com.cloudd.newuser/no_backup/com.google.InstanceId.properties

MD5 8e9f5faa5a448227641f65cd6bc8e4a2
SHA1 0a02b09ffb4b7d4cb41acbdd551646090e983092
SHA256 95b86938f4282a8074b8665593d2f38321abd542425cc4f8173b88b295b80774
SHA512 b6407c2eb7e38ccb913099909fc0defc4f743c9f21f8c746cd72753d0d30bb798ecb16bcb3140481c72bf38bd02428e156b648a835c1b37b48fc3d1ead2d36e5

/data/user/0/com.cloudd.newuser/databases/RKStorage-journal

MD5 350d782cb12692f6172dfc8a91ad2a86
SHA1 bef84386dd0f4ed4a2e4418ee89693307e04371a
SHA256 c0c2a05c2fdcc1def757d89dae29f6a29b2ef7aeb35f22dc795e22ade3df3df0
SHA512 f3417eec64cc8878a5d31051781e8e3dd7f8ea5a89a826d6675351167e50067bd716ef31a75c591a2342af04faa70846206e576d1da5c5d094a689f749e252b9

/data/user/0/com.cloudd.newuser/databases/RKStorage

MD5 12359db336ed2d2340b32bc13f1addeb
SHA1 4d647ff8cdc9ebdc1e3a33324296b425b9283902
SHA256 e96c453e2add057c4ca37a6fc51547aed2c07cebb13c0943ee359d7d8754f606
SHA512 3e4a92395ed77e7e6885c2fabfa1f692dee55a06552293f2249980057e0f94457a4e9e4d3202ee076d961f78ac049f6c0c73515c787b62759b409c2a786ce648

/data/user/0/com.cloudd.newuser/databases/RKStorage-journal

MD5 900f6b6a48b78559ae17cbb9f82d977a
SHA1 51a2cc6414f8cf6081398d62483537e99159af94
SHA256 3ab1a43857fe51fb742ae6f552b264cbe3f208e16c91409d3f4fe8efd2553edd
SHA512 d6b4e022a36d262b6807c90f847e9d25884470cb87e9f56e74eacebd7687fde1f8a75c1acedd88a45ac955523e21b4643c1c39ef3a74aa519eae0ac86625c7ad

/data/user/0/com.cloudd.newuser/databases/RKStorage-journal

MD5 4cd9fbf006bfdde134eeb61e3e254ed5
SHA1 60b185b9a4bd624272b43e32bbbb6698b2a6d0f1
SHA256 573c0ee24d6e9c0c950eb1fe2d9283ef163cc564232097a4ac51a3f2938a263b
SHA512 ee46f71ca3c6481a38d4773b4dd63672a34455039eb4daaa820b937c1da19f48852163ad14a50dd488937e1fa938d8b618e4dd8644f1e60315a35f273960a33e

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 fad5d1324540d1ba794de215a5e38f57
SHA1 4aa9bb5c4cd16676eee0995eb4831185b63bc20c
SHA256 3f1ced8f40b07f56b40f4d8db831f8de4dc3e83f0a95753112090b678a1a7d2f
SHA512 be05ffec30b6f5118c41a4cbc5ab08788d4cf2a25a28a3296035b0d92723cc0cdbfa34b0adab7e25edbbcf494d972aca1521ad08d7af3f70469a3287370585f2

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 a925951bbef27a9ea507f847a6ceaad7
SHA1 34b73ba1b11a2423198826f820fe87a1b8cc13b6
SHA256 1dd2d23b7c64bde28175205a16f99abac0aa5938d31812c095234defbd1f917b
SHA512 4ce18802068f8549fae1d3c594423476753deb776c57acf8ddbacb47360db50c922452db037b3c2d852f28147781c6532a141e9cfae51772b96958825e7ce5cf

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 8d2676492263c56f11ac1365f5d8663a
SHA1 042a4c220ebd4c1d2cdd14f5da49b10c319b70ec
SHA256 b78a054aea56d4591cd92893f0c876e64d8ecbe26d52b2eaf327426554c2f9ff
SHA512 0b14239bf5416fbfd570e35b9e4b216e204c6077ae5177ab6dabf1fbed8f0c542ed757dcdce4dd3aa0ffae75176c6bb6e5c3dfc5c87ecb525d9403e021810fb1

/data/user/0/com.cloudd.newuser/databases/hmdb-journal

MD5 5e4d447bc0bd4032bcbc50a830e9803a
SHA1 aeb801752e18fff86c4dc8c1c3bdaebf20e148f6
SHA256 bcdaed8a8fcfb478b799dc9293477996f5885cd3f0a0305c2b4c41806139a6f6
SHA512 b9f4d63edce040796f6c1494756e0c3b92775c30845f7c3f22e9220e41495b4788ce8fb4f816b801850260ee5c85946728125fc24f317ee04833f88d6abf21f3

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 4e096105710f398f6e05decc53c5466c
SHA1 59b67099803e3d0ec964de9e30935f843bec2ccd
SHA256 aca0e0d32e4f3e41833aa1dbf07577f557d9acf926f64ddf1b42bfa24aee914a
SHA512 f91411a2f830cfd9a253ced3332616199a32b45cb7c70941605c18fcd3aceffa682441cae7c4861ec9db83ebc83b9154a95759a28860f5225a79578ffaac3a56

/data/user/0/com.cloudd.newuser/databases/hmdb

MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

/data/user/0/com.cloudd.newuser/databases/hmdb-journal

MD5 8974da1f41f160f831ca1b4c37e0aa6a
SHA1 2c72d9ac2cb7ff9881c71c58ac608f260e3d41f6
SHA256 f6aacc57dd1986ad4568f0de548283b0d2c8a323bb9bebd6095e104b07107b68
SHA512 222f07f6ea5de829ee5f476f69197b973287de9f58f9052944101e33c447579b8fc897357ecd481b858d4e5902c7229587dba24d285f928f2b445ec4d9a93404

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 c7c5438dcd24a06f9ef971f2b5ab09b7
SHA1 3092f734b983ecf4904aa31a12e1037847f3c24d
SHA256 0b767a713cdd38d6e056443686570b94aca1685f98836aa5f87ff0564f67ca04
SHA512 eec96fb96f4532e6d0500e440de02841d85452a19e78153733360fe2d12aff1ea9d7935701d4dc4ed5f879942e97b805fbff27e40e934868fcd9add3b9c9b5f2

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 c4e6e91f8424781973d49bef19329834
SHA1 b507196b46c6af679c004f9a5bb2dc1b319b10e4
SHA256 701ef9f1e84ce4dfb09181ce60c351bad0623bdf8f425aad4377cf1bdc70fc56
SHA512 85e9fd3489fcd273ef273125362b7d15cc50441108de48cb883085e143aea0f22a665b8effcc93fddb081b1953531652cc39877b1e7b1a3e73acb152b9a8ae1a

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 fd3df1c806c5d224d44ce3dfab353495
SHA1 356cf9c75eed9b2f1c3f6364cf515ea678e84f23
SHA256 f87393ad85016881dc691e7b17d2815520d42ed3b94031e98f173c7f1cf0e475
SHA512 0208966d89f38f5b9c7c4666a7264f9ba15bdc0cdbc17c22fbbd467715f20fea365660f8d87819edb9d00e27f7ab499cbd5712939d6e6f7a9e171e1e50959e99

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 3565a47c51d36161e23e969e572aaab0
SHA1 623cf5ba89b15c26c5e8430aae05164a4f1153d6
SHA256 9289b32ad16aad8e7e8a255cd4033ea6d0e64c09ef8c0a808038ba7b1f51c0e8
SHA512 e13e2a6a91aca8edeeda5bc319ee210c44f0c74277894b54c0627b19284fc37b6299817d2ff126cd1443b5bf6c300773adcc659b7943b14461b9ec3de93a0447

/storage/emulated/0/data/.push_deviceid

MD5 4080d7511b9bb03f178c6716bf47e999
SHA1 6719b7b65e6d0c631a401548421b965c6b568e07
SHA256 ff83b0b667ccd48d813c72c9e754a3c60692e75bc84dfe0958c3830b094d19ab
SHA512 0ba8ab4cf19bf4d3f0339c018c97cfd8ac2b17742cfde72412326753dc2c309f94a7955224a108c9f7bd4bf3946367017122ee037e69aa345c917b02e5e0f7e8

/data/user/0/com.cloudd.newuser/cache/http-cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/user/0/com.cloudd.newuser/databases/RKStorage-journal

MD5 e6dd606b788b89a68ea4c2295016d8a5
SHA1 8ad83f2e799af446b5ca14daa35843eab81644db
SHA256 02f3ec57b74185acd83611281860214b7c184f16a86331b46fde92c069b575b0
SHA512 22c0192ef78b5306372ce16185e5f007ac65c50b22ddc8fa0cea184d99924a04bcd40760acd51cad154e727b00ec3af3226cfd3f5fe68376a26c8716ad83bcf5

/storage/emulated/0/Android/data/com.cloudd.newuser/cache/TileOverlay1/journal.tmp (deleted)

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/user/0/com.cloudd.newuser/files/style.data

MD5 3dd44eecbabb5cb5d3fc8073d40242ef
SHA1 dbe7032112e713f8d355abfedbe044d45c26e0b5
SHA256 804ca02d5d01f94d32f09be5ddc6ed4c35ea23550e9ce60981609f130eb6dc4a
SHA512 bea1372be6a15b1b3402166df0d4e5a2f2c09b3c6de7808f725690a8f489eba9d8b9e9898d348cf1f963bad239cbc709d4efd74da513cb7aa410facb074c861c

/storage/emulated/0/amap/data/vmap_engine_version.data

MD5 dbfc22c51e841252508c66609d3d5880
SHA1 ae1849c31ce313d7eb0a6294f2d6013d54c96f8c
SHA256 caca8183cd21a08afa0002352dd9574784aef05dd0b0e232d7f1c8cf85a9a2a3
SHA512 6f138993b131c2a4de93ec325549a451a480c8a77eb2e5dda4d8b7fe0d260ceb6ee59114b5fb72e8bd92ba1ac96481e33bc8122953d47a62825a056a04a384ba

/storage/emulated/0/amap/data/mapcache/vmap4tiles/amaponline.dat

MD5 71fe4d4a80673a108c34ca1052c6e300
SHA1 be4ebef04ae937d3b39e576cf3ead568291b4f2e
SHA256 052037cc2a91a6595af68be36d0a269907b0f90d22965bfca08636d216ff4803
SHA512 4e6f5675975ce9defa4cd9548eab24cfc1392d8d8d0c12d74d8ccba8cafcfd8a17a971a26acb5407b0ad74b5b0fcac60b29287b0c0d4aa9b8394e11f4b1b7499

/storage/emulated/0/amap/data/mapcache/vmap4tiles/sti.ind

MD5 7ca6fb50d3e14f681c5ed3a7f15ad82c
SHA1 326bc8b3a652a35ef6040c1b1876a7943d26dd06
SHA256 393b004dc6786f663255684500d12daf6c916825a82b4f5f3754cd53e5da6d67
SHA512 2a02ea59c7bd67b5e421a09171148790c9aea8cf485cec5ef0b357da0babd275152794662b32e206bc6d3bfee0814434d9f6f20ec2a4177ebc7545ef21460a56

/storage/emulated/0/amap/data/mapcache/vmap_indoor/v8_indoor_db.ind

MD5 d774095a14d69970bb56d412825e54ad
SHA1 4ada65b63d9e95669ead0a7cb4bd7d4e0ed5e302
SHA256 162fc7441ddaf17396bc0a4dcc022511c9a07d1f61d2e4dc9d8de1da208275a1
SHA512 e5a14295a44763ae8aeb69fd593436f48eced8811f5ad15c8c294c480cacc49d866bff068ddb431624eb82df8d12f4a0cc7c62be6e08d4399875a47a9eb84335

/storage/emulated/0/amap/data/mapcache/vmap4res/icons_5_10_1471231608.data

MD5 2568681b4bb57e899a61c24b60206e6d
SHA1 7fdee252cf5c64b0e01c158c9184a7bd465be661
SHA256 3aa9ff6f204a67a4827414e579330eac7336b050996064cc2bb5c6745235372c
SHA512 24f532aa9b0f8a3e899fbd8db6b6c06768a9f3e7f4cb9e9f8c845bbff9dfe3a5eae19ded0da0df2f56ac86fecf71f84347f8e0213ada49764b9a3f4de022fd65

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLGeo.dat

MD5 a2970dee2aac55b78a8d795ca4b7ac9e
SHA1 28fcb29d309f26dfc442a3727003b0ebd7891ced
SHA256 1f0730f01d3fc6e2ceb47f8d1d8854ffefdda9d5cd89d1c8042ac05d9518284f
SHA512 caf36ffdf4d01fa2daddb9f1fd490cfcba71e33dbad0963d60fab81589d2a2cd1e72bedb9941d5af4a6d2fa608df969bdd546a49a293ca0b225325cee77bad1c

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLGeo.ind

MD5 6ed23d10292cf0fd2f99d129b578d118
SHA1 f1cd5549c5967790b6a037ed0bc7d017d5279dcf
SHA256 35cd9e5a7a0da03ea38f0e8e25b155b7398040087f211e07cff64d24204c3797
SHA512 9a3ffd04d107c817c28fa1eeee4e91a6782452b93a4952bf97e5477d003fd6779dc665bba1f668058be22e407775f748e5ef153cb6860692d4ecf44312b6b077

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLPoi.dat

MD5 d810d0b6c40ca7c0a8f6f030f7919549
SHA1 1719b5793073e1875ccc1ed2a367c75ea5340415
SHA256 845ccc4981e15dd5b64229a7f9c748af6db21f14d4a8fb8445d6df774bd42c92
SHA512 32d1cf1d499c3c9be1c4840f0bc2945ebb6b82203dc8b0c90dcbcacf8f13de0454ee6b87a6b4d02abb36cd680d163d5e6f1e0dc9d39c41084567fef55d7d5c5c

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLPoi.ind

MD5 b3edf06f4f9cf62f7f1c909ebdc5985d
SHA1 374828abea16ad759ccedf4d305560f593878dd3
SHA256 253be74aad8f0546ab326708134d3112b87fc6e01b7a1c6f572629bf5e2d33f8
SHA512 aa98cd2f44720439dfc625c993b5d567c58bfffa0dd3b458c6b5a9b90366a82100823054e39f322df5c8988a872c1915a4349852861779e3963a732349b381a7

/storage/emulated/0/amap/data/mapcache/am_font_model.ind

MD5 fcf52d1bb08e2bfa6b3c7b4d5e608c3b
SHA1 1e98101e3ec98896ea8f71c044b8d1acabd24884
SHA256 5fc48d3ac39e8d6356d21553b06c6bf5f63b9324c30aa4530f6417aea28f4775
SHA512 daa7f73eb6f15871f84354d0efd30c558f9783b6f75cf03b2e539f49f5472bc26ad7404aa7bc1bc1db8f31381435adaa94be442d0b07a36d853b825323759e13

/storage/emulated/0/amap/data/mapcache/am_font_model.dat

MD5 aaddeb61884827229b33e9791f361a79
SHA1 e20e243a58f83a3a2f8f89f4b6d3c06f9174a9d0
SHA256 55761740d5591dc18e3f64449664aa3bc38ad70b793c1d5a7546c161b45fbc0f
SHA512 0adb23d7f5f25df9b762443c5d8a779e39936e60832ba5c46e3629f605b80b6995086599df3b7c60226d7d3a8ee5c78436ffd627bfef03be79426ed20585555b

/data/user/0/com.cloudd.newuser/databases/logdb.db-journal

MD5 d7ea95033817112f0821d259151f2f16
SHA1 828a9d3fdac93640c7abdfc58c5870381baf3170
SHA256 c35546f2ffee611813c351a1a3e601dff576285398e935bd934c1169ed59bf0f
SHA512 be3fcc442019f35a5c4cf08c0c29103eb534eb0595c81f690e5905f036a8fd81af9954afe36e9da95f352069e7bd2b60bac4ac6599385a7a37ee1224a5d4f487

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 b25fbe9814d82026e55bc2e2c8d847c9
SHA1 ab34c25b4d7b4a9a3b7a2687ecb6c62bdf2c3c8e
SHA256 bbe39263742b628c83c881f00f17ec357f262bd5a35e3adb2497366c8cbab4da
SHA512 7c2a2ca580592384cc7fbc065da970f7875ea14ba39b79acd65f32881eba80c36c5f05983b2b26c2f9852ad09862648b32e0de6668ae4932e66ddea728880389

/data/user/0/com.cloudd.newuser/files/a/e/journal

MD5 1d5fde8b1c82dd6c5352d5ad8824ed8b
SHA1 ab34e76c3c1cf67090fa9bef88acac3fe8a93993
SHA256 ba44d5220010ba6631a56544df3d4f22366d2a289385aa9da7719ca6138a122b
SHA512 46658efb45616ce9daaa4c29f7c786ba7aac1d9b51e8b0e5b90b53694208e33c603bf7943419c12d79d3654ec3f41c304354414c713553023815f05fb937f709

/data/user/0/com.cloudd.newuser/files/a/e/98103868195263.0.tmp

MD5 1bc2de06211e0177ba771c9be3da489d
SHA1 a6873cf38112426bd4233222cf41ec8152b04810
SHA256 e817bbd48cdc545fbd7535ea3718b43261c2fc2d18bd3afba2c75fee572eb19a
SHA512 3ffac9c4f25905e89d5bdebefba7df4b112e9829719ef1fb8c929a04f6ffbdb0f439836fdc16ece3b9a14c980ca2813f12fca703f4c40395dd7c8190697f5cf3

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

MD5 c7166d1262b9a0ad5e060c5b181ffb2b
SHA1 54acee8b3e67a933d29377e7be357a5c9c588ce3
SHA256 3b814d82ba04004f6265d12925d55315e97c7c15eb270c2142932e1f4898d413
SHA512 36b381c4e4065461fd931a6a4c1d884cf0c74ef57e2fafa7db95ae32d7220c276e47611f061dbe9f01710c36ab4b719850450e0f69085a0609c0dfbc04b02245

/storage/emulated/0/amap/openamaplocationsdk/alsn.db

MD5 c5e8d4c85a21533273f93f25450d7a56
SHA1 805e4946014eb874ce3a9bced9424b3d93e39de9
SHA256 caafaf42118ca215221eefecfe1ab40bc4df4a9e0e64ac81d88d0754e3a33b2d
SHA512 a434367e61920c99a72deb820a3055b2336274232d81ebf0c29a74f30210dd0b87be21e0137ce11863eee4edb88d325220d9e4e8400f3c92435cce4b5dd668e1

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

MD5 8c331c5322d08815017400704cfac0fe
SHA1 1a792fbdfb21a6d71aec40eb32b65a4295d57c63
SHA256 fe0b585cc172fcf88ea2619038b4888ac19a767ecb5c55157fdd89aecb39a9a9
SHA512 4f17bf963c0caed2f0d9bae01d97b34cbfea85f79b1082992dd0772ad86397045d29e59aa45700b40b57b3a103b63497942476268dbe1373fff1b3fc25e5edcb

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

MD5 533e8e207aa9f57139329ab403e67edb
SHA1 d9e7c73a8481c43c26d4e52123c3db6b9ac0f8ba
SHA256 b0d03b02fb4d7aa3c87e74f6dfed1840f5d7505732adf1341b544b5d85c06ceb
SHA512 7f883b925994073a57d6af97a6543569fece20d6c9eda0c733f3576ac7e9b0df8da9ed01293af068dcf2953c8b700d64feacc5e7d7cd5b21c4bb6abd09dc306d

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 7b8725c1c319d7f1ecb4747b82adeb88
SHA1 4083bf8b88ddbebfba25f3f3626e33857b2e4956
SHA256 b4a6cb7116cdf7880db049efa5f867d7b9817d11912cc1d793dc2afadd807d8e
SHA512 53b5e9b0189bf44825b02a10d6064ca3f3b20da50c1463e95bd0f3f93c0dbffa049ece73ef99669b08e95e8107d059a57489951fe7ecd90ccb544384abfab9ac

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 57d00ef478751c44dee2e73f692a0ddd
SHA1 91d8240defd2de51522e71efe9fa9f1f354c28d6
SHA256 13abf32bbd2665167f2d44d9772393b54521cd20b518b561d20411132bc99d1b
SHA512 20ef6d546474d5e592f20b5eeb817b6f2e9d6b8d22c02ec5d2a1efc9afa7ca6fb8dc9e0b26111215dfba66d2298a7940285f379e5bc6c9c27b62a6b6febe39da

/data/user/0/com.cloudd.newuser/files/a/b/73dbb72a59ad88733bb0dc0acef2629a.0.tmp

MD5 ac3748a6a35c81c9466faee24143d874
SHA1 f039627118b438f9a10f4ac40a225b910ae00cf8
SHA256 201fe638f8c55ffc8153647e45f32045e25e39de9219b12091755573a2e827f6
SHA512 f88a31b4faef7476a7d6b3530fc09d3e8f8a9c1f487c54b1716e0697a7dfa3ad484504d6052c294169471c50307a960439a04ebdfdb2d725d13ea11d410269c4

/data/user/0/com.cloudd.newuser/databases/logdb.db

MD5 4046caf9f1cb72b73c7c0fed48f75391
SHA1 22dde50110daff5074c2229e3de8d2ecc042c07e
SHA256 9df8823fdacd16c608f8af0b4eb26f303b64c5e9d8b634db489f28267f49cc9e
SHA512 ec5b2019e6783d730c77609e80643f4457cfd08d4c403c544ab8ebcffd525bce571933d0ca3a8e1f1b373940cdd08aed0330febbdcb4342da65f42c83bb97424

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 b6202848f093ac8ac92532453cde70fe
SHA1 01ab7a7f8b1bd80be3014ee4122df742e15ad1ca
SHA256 e86ab809d709cbfeadace4a504f3b9717e20806f9d0e1184c4d753cb503baddf
SHA512 3e18c9452da2dcb7e1c0bd78e7552536ced25a0d329c738d6de0bb6be310949aedaa217c9ebdcc161e73c85fdd7819e20755e782d665229cccb53ff40ef20714

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 4ebf3e6ed2fc435eb5465eeb3ca749ae
SHA1 f558fb6020d7bbde1dbf048703492b1c07974449
SHA256 7393e994aaab50f997d3a1f899b1863443ac3f9e687edcc009a0d778b370560d
SHA512 75718459b302a87541d98c341c976e99211bebeb30c65e7e42bfc7eb61706e47a68e89e3e956e39a4982a03974c50e7448aa910e028765695aa9c42876952339

/data/user/0/com.cloudd.newuser/files/a/b/a82656dfaf56ae9a8238c6c215973a3c.0.tmp

MD5 478c046dcde2c0bdfc9a0a71c0b4e2e0
SHA1 4eb6730b2308f449924c3e3991d9060614dad96a
SHA256 2ca63b57bab8fbc9c9cb72ba149121bd0873005e3ab87aa97d1b3b1c8468a0ab
SHA512 786a92b500d48079063d54a2a0c199961e596e74acf41d038818d780ad2f7d978a223da852364a40f045c37a51b9e4c808ca2218c17d16187f6d02a15fce7589

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 531d5c96696586ae9b307fd42b9c04dd
SHA1 57f50dd906793e1f7901a78c1b6818c62d0039cd
SHA256 475f7f5f9a97541d88589d03694b02fc9f61faf775017c9c8716afd75228e362
SHA512 1db089de5542d6c3f10980bbbdf21be481926c6590e0fa1c5bd3db627c0bc65bdf38aa9332d2723903bfb106d62cd038af7f28b9d6d38a1febbe9bb54202d56f

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

MD5 1333147700329c681f3b8b261ad8a0a4
SHA1 2deefc66332697b34527432d3a9376e0cf7f6367
SHA256 96a7b9b99e284e1fc3eeadad084356164fa1335e23dc90b3d741c4c4e6d0038f
SHA512 b26e9aafb3705f59cabff5efa20343196398cb8964497fa82a5281a4f936b7fa0c4fb981d9127701faf0333f9ac192e7852ae62c71f8cea3989eeae1e6776583

/storage/emulated/0/amap/openamaplocationsdk/alsn.db

MD5 ae5bf49d7615b7e6bf23c00b64f0379c
SHA1 61c2d8513473cb06cd973f2c2028d2e2d5433648
SHA256 d9099377c3c59d998f6a181700d99198ddb446e024a552375047bb675565bddc
SHA512 a2f9b85e2bb14df5df4c04c4489b42ed09eac7d77cc6d8eaac4af6d7e5ef4c0a575e3dba2edf8bd5e8619e14c243bb173047984a50ac693c2829da42bb130c8d

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 80cd4f6f47588d4193de68d9dc4b6d70
SHA1 06fbf9c4ef944e0248fdd86a9aa13f0ebecae7cc
SHA256 debd8ed0e60f1bc0ead22545a365735d0ed768b0130460c401697081d1294734
SHA512 882a64c5148b04a45d984368fbcfb61e0d93a21fb0581488c274d13ecbbdbef0e0cab01d068f5f67c7564ce61ba25e8f8b711ea2c46ab204096193faa4f7babc

/data/user/0/com.cloudd.newuser/files/a/b/872ce42057a4ab0ede7ad9b783b792a6.0.tmp

MD5 66f96a59cb38e096ea4438997d50199c
SHA1 9b1937b4de449a38ddf0e41f4a97d88269ee5c9d
SHA256 2d9ca25568482fbfbd132ddd4551a21587fb815f44683efe8ec677dead093d39
SHA512 b38ca8cf249fb46c6ae8421647183326283813c621e19fd1b56cb2309078e0ac6f137c0b875e1e10ba5a7e9d486f0aa274c499177e481d185b3fbf33c69935e5

/data/user/0/com.cloudd.newuser/files/a/b/journal

MD5 22793c0081c8e00465c07287963bb04b
SHA1 a91e5d7181259bb7bcbb488e9ec8294eca709768
SHA256 a0e08fc182c8b63df8436f376ac277bf85109c800b6930ad7ed22e6036f48f74
SHA512 0aa3d6876ab1264945f5d0c5a3679eede80fe6ab225c72a071ab444c75c9849a441bd6286686fb45c22e8dcdb26c36ff29f34a61d827459f97c683ad3106709b

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 08:53

Reported

2024-06-18 08:58

Platform

android-x86-arm-20240611.1-en

Max time kernel

179s

Max time network

186s

Command Line

com.cloudd.newuser

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.cloudd.newuser

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 pingma.qq.com udp
CN 119.45.78.184:80 pingma.qq.com tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 124.71.170.130:19000 s.jpush.cn udp
US 1.1.1.1:53 test.ayundi.cn udp
US 1.1.1.1:53 apilocate.amap.com udp
CN 203.209.230.23:80 apilocate.amap.com tcp
CN 119.23.158.54:80 test.ayundi.cn tcp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 110.41.53.90:19000 sis.jpush.io udp
CN 203.209.230.23:80 apilocate.amap.com tcp
US 1.1.1.1:53 restapi.amap.com udp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 mps.amap.com udp
SG 47.246.165.169:80 mps.amap.com tcp
SG 47.246.165.169:80 mps.amap.com tcp
CN 59.82.132.217:80 restapi.amap.com tcp
CN 59.82.132.217:443 restapi.amap.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 110.41.162.127:19000 easytomessage.com udp
CN 123.196.118.23:19000 udp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp
CN 203.209.230.23:80 apilocate.amap.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.119.173:7003 im64.jpush.cn tcp
CN 139.9.119.173:7005 im64.jpush.cn tcp
CN 203.209.230.23:80 apilocate.amap.com tcp
CN 139.9.119.173:7007 im64.jpush.cn tcp
CN 139.9.119.173:7009 im64.jpush.cn tcp
CN 139.9.119.173:7006 im64.jpush.cn tcp
CN 139.9.119.173:7008 im64.jpush.cn tcp
CN 139.9.119.173:7004 im64.jpush.cn tcp
CN 139.9.119.173:7000 im64.jpush.cn tcp
CN 139.9.119.173:7002 im64.jpush.cn tcp
US 1.1.1.1:53 restapi.amap.com udp
CN 203.119.169.174:443 restapi.amap.com tcp
CN 124.71.170.130:19000 easytomessage.com udp
CN 110.41.53.90:19000 easytomessage.com udp
CN 110.41.162.127:19000 easytomessage.com udp
CN 123.196.118.23:19000 udp
US 1.1.1.1:53 abroad.apilocate.amap.com udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 103.229.215.60:19000 udp
CN 117.121.49.100:19000 udp
CN 139.9.119.173:7005 im64.jpush.cn tcp
CN 139.9.119.173:7002 im64.jpush.cn tcp
CN 139.9.119.173:7004 im64.jpush.cn tcp
CN 139.9.119.173:7008 im64.jpush.cn tcp
CN 139.9.119.173:7000 im64.jpush.cn tcp
CN 139.9.119.173:7007 im64.jpush.cn tcp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 139.9.119.173:7009 im64.jpush.cn tcp
CN 139.9.119.173:7006 im64.jpush.cn tcp
CN 139.9.119.173:7003 im64.jpush.cn tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 110.41.162.127:19000 s.jpush.cn udp
US 1.1.1.1:53 sis.jpush.io udp
CN 123.196.118.23:19000 udp
CN 103.229.215.60:19000 udp
CN 59.82.44.11:80 abroad.apilocate.amap.com tcp
CN 117.121.49.100:19000 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 124.70.211.119:7008 im64.jpush.cn tcp
CN 124.70.211.119:7009 im64.jpush.cn tcp
CN 124.70.211.119:7006 im64.jpush.cn tcp

Files

/data/data/com.cloudd.newuser/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.cloudd.newuser/lib-main/dso_deps

MD5 4800fe610ce86092485e4f63a7a7d289
SHA1 30a69357726376bc453bb2e1db7253228e0d58aa
SHA256 36bf18f44d032408ba41986c3ccd9e90cccd35a3dc8aa5c0a3aa9f38e8859cd0
SHA512 a9c402884e938b33b453aafd98c213c10b09abc614bae08a05e60c2b2cdf59590436286e4b3b7bc015df185a76e80e11b1aa5136fbd772551b52b730c8638fcc

/data/data/com.cloudd.newuser/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.cloudd.newuser/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-journal

MD5 6c4598e8adc816e269a62cbdf2f7e596
SHA1 9add3d7a5ac7aedf624ea848fcb1a1013fbf2feb
SHA256 f485b5cc2feabfd3c403127a0f2e2d16a527fc8d5038069f8c662110159d6101
SHA512 d87805de51c771fbda25884d1d408c927168074bb4c154ca4ba813a9fe7c4c40b098974941e547a1dbe88cb46ff99404f997a491ffd93a0761ebf7e7833cb6c3

/data/data/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.cloudd.newuser/databases/tencent_analysis.db_com.cloudd.newuser-wal

MD5 923b76056e31f0cca0b1fe847dc33804
SHA1 2ac8e6c24836a01f31414e498e944ec8b8e0eb9a
SHA256 e8e0b54ca618acd5134f89fbea1f6df32c9d8c2eb422d0a40dbed4c66b24d16a
SHA512 6e243878da62d7b7f760675ef880a37a7327a978f6ae5d3facb1ffe70428750268c1f80f3f3b483598fc6412f9d96f4568f28aa4ebb90fa471f000de25998300

/data/data/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-journal

MD5 98608930dc98b647ae2c9808f0ba5c0e
SHA1 793c61f82bd8230cb11957f7bf43f474213030ae
SHA256 d112b39775c706b92ef9187fdf7982e27fad73114bfd55c471a54282ebdb72d4
SHA512 9720072eab1cd9ae05d527b90370d9cea2341fd1b59d9ab7055423bb0d676d16be538c8a9b112781232110ccab9d4494c54e8bd7fab7e0528f61a42fd5ddd5db

/data/data/com.cloudd.newuser/databases/pri_tencent_analysis.db_com.cloudd.newuser-wal

MD5 fe3e7f2279d62012d4f002e7fd24079d
SHA1 a9d12d135e80dddd8234905199beb062a6c7d124
SHA256 84944968c379c2b7fa837efec9d86deede133947fa1ec2214ee1837606f8df37
SHA512 4e51c41567b3d1ce1c433622fc0a5bf2d5411b6bd14b2fe51accc38a79c10121b8791873f4e6d2ab95d0ee7bc7aba0c15e8ba61092d808570faf096ca0c62a65

/data/data/com.cloudd.newuser/no_backup/com.google.InstanceId.properties

MD5 754b56217ccf3bd3bc58062f80056122
SHA1 6e4af194dd9d4980bff07fcd651ad8d9d1a8ea54
SHA256 be8b6b3fafd6b5a6902fd571efda9c9174f599cb8df6865f927166efb3d1c0ec
SHA512 39e5df435971a17177a7d1c34ac89d866c406099a7f4d7e5601f9a82d48d426ef35d0a1051bf8ea1b834d3c63ff23b8653b157e9ea066bb841ca383d6c90f823

/data/data/com.cloudd.newuser/databases/RKStorage-journal

MD5 f7e8a3e3747a8ef159f993c1ad061f51
SHA1 0c0e10718f0bfcee6a03e4b621b19e32d4defef8
SHA256 d8f8f6ae0aff6c3037db4d4143f439909b12a38093e7f64082c31f575052e792
SHA512 d5412d2cd45071b51a663d7acdc860e580945a2e84c9bf39026b6ca9ca93ab30b4681ebcc37df5d95527d32d1ffeb9a90bd9b7fc9896dbfde6976516f1ed3b16

/data/data/com.cloudd.newuser/databases/RKStorage-wal

MD5 afc290b9ea58044e3fb5096b5e3998c5
SHA1 d4de962fce187d7b81cf188accb3791f76b2115f
SHA256 c9a2d0d4f7e1c6767728255965b9955818417a2ffa46137703e786f81a355521
SHA512 5c1185685f6e5cdddb2b854e15a86ecd9d20dee4dbfa389475d58b6c03d2fde4e24ec6c03807e9ba1219b6eebf1e8e586d9ab8316636f9042314c8c61ae42fbf

/storage/emulated/0/data/.push_deviceid

MD5 26cb0f1dc987f8d271ed2eac7656b0bd
SHA1 a2328efb830c1a7f726b731f287e9818e62003fb
SHA256 ae60f8e38745fa0f4f2c6ea01bff678dae126a9e1404988a2b96c8cf8766de06
SHA512 acc5f564b5843e88ddd61a2919bddc05b26c58e4d8a46ffdb924e4b3cf01b5d95651ab786d15f3d077f749681df4606e11b0a1f8ba38c275eedc0ffed29d904c

/data/data/com.cloudd.newuser/databases/logdb.db-journal

MD5 368bca6ce8c842b8c8822fa49c59d828
SHA1 589aeb7cd2ffcc26a2cf130aa061ee654aab95ab
SHA256 1205641b778e2169be074e42a759d1551d4b40820c948d70a3ba444aa2cd56e3
SHA512 99a7eb98751e7ac967862e496630b2e70b7a75da46e29f2a91d389794652900dc382542984d6f23e19065bb691f08fad94a8038f8d95dfb2ead4b8595be261ff

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 a7b5debf648af8527d38065f285c6754
SHA1 ad8513c878ca1483a2472c7f8dfc8a416418517e
SHA256 0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5
SHA512 c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 81580d98baaa0c7cc844bd62e81393a9
SHA1 c6ecfa5f10f4f10263ce2b2d02c002d453f15b30
SHA256 ad055bacf9fb70b4389b2aa51601793561309c08f156bb9b8b06763f1c117b25
SHA512 38ec1bf7b63168f74533a6d87e8ad68a50fb737e9e28888f0b68f1566930220fda5bd67af619ed25d3e048ead4d6c709bf367813160c640109e5dc673ea8d958

/data/data/com.cloudd.newuser/databases/hmdb-journal

MD5 a292fb6265d178958e5a47b753aaa422
SHA1 57474cc89f5abc1035dc1f12fd9025eabb7aaa4d
SHA256 2065cd9be61f1b59c63e37270ca61c9e8ea5c2bbe3da1c7c9170fb9cb6ff99bc
SHA512 8b2aba8e720cc4863e62fb6ea5f99649d92c65d804b2f6e55a7b9e8559b8c8b3bb1ba71b0a770f7b23d332e33485b48172850a0bcf46f209e578e251b6a32063

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 216ba1ea47fec61a23c7563b78e5e7c3
SHA1 43ced54cb4d872e793be8754a13536ac75a850bc
SHA256 2f17e78cc2d651f48f99d210b45a96546c814a2c03356689b22a739c71fb631a
SHA512 bcf68dd8e0618cf170a850b63f718110bacbd07bd198a418fba21b14d237f7d4e93297fc0e7dfb97ccd8faadf652c8c33cb019cdd6557df6363c5a967a6bb626

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 3e4cdcc6c1c28a2ed61821b4e5b2470b
SHA1 c61f1bed26fed081e2bd724e12cc0dc0a70b2028
SHA256 75d75e12087108ce15bf1f2ea00453129a4255a674d392e76fee56ff54b3e6c9
SHA512 a8047606e96ed4693f7bfa47885e0ceb4beb19cf114a7ef164be6d1831a48602dd0b4edce4886b22e808690358169487f8cb187d3e0d55a284487629ae7b6e5b

/data/data/com.cloudd.newuser/databases/hmdb

MD5 3fe30614d7e0d11db870b4624f6c50e0
SHA1 053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA256 67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512 c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

/data/data/com.cloudd.newuser/databases/hmdb-wal

MD5 1c2777a1c95f9ff361d4b5bdfb24b31d
SHA1 123d13546346d4b0a211dfdf1bd91c5ce1544dd8
SHA256 3c14902ef15962821ef743768ce4010b0dda1d242f83d2d123b3465d7169b513
SHA512 cf1611008c397aab9f1d4d569d27d391a4705d622743a3b0474f0968d40f4780c11740e7d51ba25b615053762fe0db60eab43449def7b3491fc5aa4d636b0900

/data/data/com.cloudd.newuser/cache/http-cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 f046bab1fd08f95d6699a55789e34f15
SHA1 0786c097f400522549f2ca81155417b30e0ca568
SHA256 9849c0a3f4caa042ee7bc811f2736fe2402ccec2369149326be9879fdf74dba6
SHA512 de2bad35216669cdaf96ba1acbfe896cf7dbd15a1b43099409140e770e6181736aabeed30b2680bed8e337aad8c8e8291af7ef87993daf73f8154ed1d33e824a

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 60e918a66670488ae5e111bdcbcfa95d
SHA1 ee81e2f5ad9a7301adfce5999095370e532a43d9
SHA256 0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313
SHA512 1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

/storage/emulated/0/Android/data/com.cloudd.newuser/cache/TileOverlay1/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.cloudd.newuser/files/style.data

MD5 3dd44eecbabb5cb5d3fc8073d40242ef
SHA1 dbe7032112e713f8d355abfedbe044d45c26e0b5
SHA256 804ca02d5d01f94d32f09be5ddc6ed4c35ea23550e9ce60981609f130eb6dc4a
SHA512 bea1372be6a15b1b3402166df0d4e5a2f2c09b3c6de7808f725690a8f489eba9d8b9e9898d348cf1f963bad239cbc709d4efd74da513cb7aa410facb074c861c

/storage/emulated/0/amap/data/vmap_engine_version.data

MD5 dbfc22c51e841252508c66609d3d5880
SHA1 ae1849c31ce313d7eb0a6294f2d6013d54c96f8c
SHA256 caca8183cd21a08afa0002352dd9574784aef05dd0b0e232d7f1c8cf85a9a2a3
SHA512 6f138993b131c2a4de93ec325549a451a480c8a77eb2e5dda4d8b7fe0d260ceb6ee59114b5fb72e8bd92ba1ac96481e33bc8122953d47a62825a056a04a384ba

/storage/emulated/0/amap/data/mapcache/vmap4tiles/amaponline.dat

MD5 288c03bd751318676baa5ae223622547
SHA1 57fe3d383472461d51d9d9b18a03f70cbb31920c
SHA256 e21c8cf5b4d1878ac943b41662e16279e136038fff27d4f5dfe42afb1c9ef5a5
SHA512 2f5f878440ba90b465c2329246f891f84e6fa916ea6610895e2f153ac952d16faf549ce78a3c2c77270e57d75d02f3fb72c1e23fd80ba34c0c4d32bfcb197740

/storage/emulated/0/amap/data/mapcache/vmap4tiles/sti.ind

MD5 7ca6fb50d3e14f681c5ed3a7f15ad82c
SHA1 326bc8b3a652a35ef6040c1b1876a7943d26dd06
SHA256 393b004dc6786f663255684500d12daf6c916825a82b4f5f3754cd53e5da6d67
SHA512 2a02ea59c7bd67b5e421a09171148790c9aea8cf485cec5ef0b357da0babd275152794662b32e206bc6d3bfee0814434d9f6f20ec2a4177ebc7545ef21460a56

/storage/emulated/0/amap/data/mapcache/vmap_indoor/v8_indoor_db.ind

MD5 d774095a14d69970bb56d412825e54ad
SHA1 4ada65b63d9e95669ead0a7cb4bd7d4e0ed5e302
SHA256 162fc7441ddaf17396bc0a4dcc022511c9a07d1f61d2e4dc9d8de1da208275a1
SHA512 e5a14295a44763ae8aeb69fd593436f48eced8811f5ad15c8c294c480cacc49d866bff068ddb431624eb82df8d12f4a0cc7c62be6e08d4399875a47a9eb84335

/storage/emulated/0/amap/data/mapcache/vmap4res/icons_5_10_1471231608.data

MD5 2568681b4bb57e899a61c24b60206e6d
SHA1 7fdee252cf5c64b0e01c158c9184a7bd465be661
SHA256 3aa9ff6f204a67a4827414e579330eac7336b050996064cc2bb5c6745235372c
SHA512 24f532aa9b0f8a3e899fbd8db6b6c06768a9f3e7f4cb9e9f8c845bbff9dfe3a5eae19ded0da0df2f56ac86fecf71f84347f8e0213ada49764b9a3f4de022fd65

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLPoi.dat

MD5 d810d0b6c40ca7c0a8f6f030f7919549
SHA1 1719b5793073e1875ccc1ed2a367c75ea5340415
SHA256 845ccc4981e15dd5b64229a7f9c748af6db21f14d4a8fb8445d6df774bd42c92
SHA512 32d1cf1d499c3c9be1c4840f0bc2945ebb6b82203dc8b0c90dcbcacf8f13de0454ee6b87a6b4d02abb36cd680d163d5e6f1e0dc9d39c41084567fef55d7d5c5c

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLPoi.ind

MD5 66416ba57d472bd292ea05310fbd7e37
SHA1 b9d4f09ac29d91ccb9d22d1fd289137aefe6d852
SHA256 152a111f55a07f26ff4adc6d18a8f110f67faf3f3c37ecddfb6ca4741eb3a370
SHA512 1be615d428891744fea9e278847d8a1539b95071449319d27c20e762267e802c71aebffbcc8444f205c8d15201690e32f05446037d429716e00c92b5759a1522

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLGeo.dat

MD5 a2970dee2aac55b78a8d795ca4b7ac9e
SHA1 28fcb29d309f26dfc442a3727003b0ebd7891ced
SHA256 1f0730f01d3fc6e2ceb47f8d1d8854ffefdda9d5cd89d1c8042ac05d9518284f
SHA512 caf36ffdf4d01fa2daddb9f1fd490cfcba71e33dbad0963d60fab81589d2a2cd1e72bedb9941d5af4a6d2fa608df969bdd546a49a293ca0b225325cee77bad1c

/storage/emulated/0/amap/data/mapcache/vmap4tiles/OLGeo.ind

MD5 c1a3d30b21ed0545877353954a16034a
SHA1 f48e0a97833e97e788d1ee213df44daed44edc64
SHA256 cd6d5f040a74e6c2af179d32cb559b4ce15b51ea65de8045d5e8318ab06f945d
SHA512 80471d46821a35c06e193ce35c6c44d4b5181a30fab593446383c01a83ca6ab4c6fec7901b377b2117a95f4e571e4f4a7ce999a7689e2f15ebdb40782cea4ad1

/storage/emulated/0/amap/data/mapcache/am_font_model.ind

MD5 5d633888ff9fe709d31ac1b62d93680f
SHA1 bdf157a40ff4919bf036ae6bdc612511f0f33e23
SHA256 2540e41e14171862aa14d99a5955fd3d8d1a0654b897b38363daff0e21b14402
SHA512 5b417c6abfb49878648e732ddbea398e2f8855aec85c6015f214c1b95e7f19b1ec4074ffac4056663c9ff10901b50faddcc6712113df0acc47e51def4aea1efc

/storage/emulated/0/amap/data/mapcache/am_font_model.dat

MD5 9083d802c7e3a7fe2f2cb7dad399374a
SHA1 3bb0a6b0b9a3ea3e01641da911778c6dda8870a4
SHA256 4f3460d7873a6cd19ebc7fa74449a261b2c88f6ab4cf777b5d98bdb64ff83e58
SHA512 dc833b84b7bd7b4c97f6d717a14e3952b09b30e3fef9bc6039779a1369f0cee829b3c741c85c4dbdb46c289d8eb0f08b67e418a43c8a95dda7ef14adae286d53

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 97b718e1bca865073a29a65cc0eedd9d
SHA1 2457aaf68579fdadb029c7e4504736f1b7d4be6d
SHA256 814c5064ded858a3f9a18a3dd1ca3b43bb36204d80cab5f7fe9e8151d00b9c7d
SHA512 b6013d7d8a13b34bed0942a4339d542a7d695e75fe4052ea8d878228b2bfcf02c4cda0df4cd6ec2a1654c8ef34f2e31219652822144646be133fd1c1ce0cb3b7

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 a73961d8c1fa320cd8592c36279a8c93
SHA1 41178b948c8ee13d311d7ebaec42c40ea8ff097a
SHA256 d95e5c814c7285a2b2251d917787a559785a84d7d36926403d3dba7c4525a1d3
SHA512 fbb3b41f6a5bec50026ff077f2e4f85dbb60a02fdfd9a2b302f353415b55ae5cab94bd2fdcc967ef4fe3641541432e8efea6c895156973f91cf6d45c08f55faa

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

MD5 bf978caee2938bda45c27df184d718f7
SHA1 6f57c80087bff4cc81790228a31492fb4ce1fb8e
SHA256 3c2c1e2daab28511ad1fc80e9ce0877c79ce68a36bd89ee376e9f94c0fa747cc
SHA512 fd662176b90ae241e478e01e8f7c35ed5cf26ff97abf704ef4f87d5cd065f887bbc07759d6eb34c2d15308f94da61d5b7bd0e69e3cff3b17b4e089b7e913e9a3

/storage/emulated/0/amap/openamaplocationsdk/alsn.db

MD5 6999293712000d597b4cf4f0d42316fa
SHA1 ce64c005f5f516ec4c491eabd907423b0fbe2a1f
SHA256 3cd4e50816e59adfdddc5d5ea2bff7068bf6fe711302b4820f6a79f132f0fedb
SHA512 8638503a6e9c40c8025722ce266ca4314804c7d74546938464253a136f230921ecc990343541f481d317c6823ae519a5a33d279b363a1457bb105a6de49656e2

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

MD5 d5f7d339a6770d04c5a0b9cc0d7be8bf
SHA1 cad07dedec2ff3a8de6ac4881b8388172fca82ca
SHA256 1602d12b837b4b1ff21e75a8021b991123f60a35923911230aa81d96f117f30e
SHA512 89730aaf50bd92e32049d24c8f23a239d2b6c9aad569bf9975c79d6f01cf57898feec755b437beda3c959ccb5e04c20e61c27fcc165f1c4a307809170ccf227b

/data/data/com.cloudd.newuser/files/a/e/journal

MD5 50398f98ea2c9901622e860328068408
SHA1 81236c32c9c4d8ed934711f67a2080415660bde6
SHA256 b476155f12358059c8de09fb896dee22f054f4d9d745e693bb3c529488ebb1fe
SHA512 babeb70dd4b133aa7054acca7d96c4055010cdc7bf6cf4d43c9e276940e9d726c2963d30133a8020583e1ddd6193889d6161ca1d2c84c80c88047905114e5781

/data/data/com.cloudd.newuser/files/a/e/8197053711760.0.tmp

MD5 99bd29bfab5ad13de472810093be44d3
SHA1 049b00d3c123b22f6a6dd455bc1b078079f17288
SHA256 1817a7bb83ac57de7ba940aaed9d663845100ec2b97d81e480f7c7e921de4e59
SHA512 0db4405b136b5961d680b606b6b89a9e655208e6c1eda76198cc35afb8655dfc03302f459c14d73996b4f75967ccd8c550754788e8fc8525dceaaaf62c8c69ab

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 e7b3ba2e7abdf49ee485322387f70e87
SHA1 9cc83971ff388681c902aaaf8801b527f14ab4ad
SHA256 42e110dd20b877a2556a4e0a8373b9b5191654c141252f70f2ff1ad129e40ea8
SHA512 ac08bb35b9f516e5bf77dd06ca62d4967950e49702a774403d6bcc9b386525633224afc3a468703fcf653f37b1912c4a4dc862fe757fcc06ad8ab7e4bb948081

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 247ee912fa680c561e48a202eaafa233
SHA1 e8e723a64c0566301c6936c8b7c55c1566d8bedd
SHA256 db3f227e72909ea09b0ff16486077917d813c13d77e0c009c556b930856ba5a5
SHA512 524741bd8f60c03da29f509796518fece470e15f394706ff47fb56cf97c65d75e1e4c360f462f01b843c83f7bdd4728b4ab38a45193e3849aea8e1536de33870

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 284000c66f1ce9584bf24da650fbddf2
SHA1 5f26fa7788bc8fc7bec8062f1833af69e09e941f
SHA256 ad308d787f5db56182c272ac38405b00f60ec092981d92b6920f4a2b18c929ad
SHA512 59df5e66fb1d5b64c26a0073ad0f8665778a8b79b70b53c86243a16d9a12b95cd0e36246937644a8a852b5ef080ed24ce0cace5b4508a7eacc1386d699fe41fb

/data/data/com.cloudd.newuser/files/a/b/343093c84db1c53c75bd9b23ba912d28.0.tmp

MD5 50c566d5cb81a55ee6ae890c0782f807
SHA1 49ab0f2280e9f615ba51e68fa7d23d0c48ee7296
SHA256 195f004c816b96032afa7d28f07e3bb5ca19ef86d173a25808c2dab8f41948a9
SHA512 2f885ee97e09d73311f1dbda182d025ddf6e306be1aed7270146a2016118a21d1d335b334b6ef5fca06ea8b1178a7653e363aacadd5d52a2abe8ad2f23701ef5

/data/data/com.cloudd.newuser/databases/logdb.db-wal

MD5 a1a1700b421e1b294e9c8fd61eef60f5
SHA1 3b1be673eb19162c947a4ee68b216d969df784ec
SHA256 de2516ebb1b9919ffaed867dd369253c4aa267883bc41907d676cc784aeca545
SHA512 52569f9f8a408db5a25194365a9829a46008abe387583609b908589ec7b2ea49489df32ea14c8d19c115cd0f6684b7fa4e593fc2c39936b30bf4a78be40905af

/data/data/com.cloudd.newuser/databases/logdb.db

MD5 5fd508fa77c7b24f60cdae29b0d1b9e1
SHA1 30bcd0c990e6294c7ef50417a896200865fd8207
SHA256 b72356f7a1345a0d702ec770de66f5a4bb96b631be4d4985f8d6354fc46f3036
SHA512 765b36066c7b686990682c4ed491fc08d6d836b27a87a4650b253d4b158a25e30c641e245b61d13da6471b6ae9ce596e0b4ccb627c563c0782dd13d4f4d23df7

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 3f0992056bd496d6aebb47bd203ba83d
SHA1 6c7d071744bee84d92fa56c1614f497bbe7a57cf
SHA256 291ee984904fa3b9db2c488b12345086b88a3a8b786f94219449f33cb1908b55
SHA512 e57d6fa98328c197129f12137bceaf6326542bc0be6bbc1ba5a0542a06447bd9853df87736e3a49f8dc19286cf147329e3ca6b368cabd1cf69ef2491f1c0ef78

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 156e2e313e65c161bc00aa23c886822d
SHA1 abc14ff4cd92590a0bbadc060e99341134554991
SHA256 e95d3c96fa764c763443d1c691fc5a468dc34c285f343c6703ba31b1fc98edb0
SHA512 d245463ec4bb58f9e9f33a5ccdc5d196c712a1ae5c73b4e17f6269228a88322b6c5d1983cc30ffb08b4a42730e5d4416bced7a2a8e905c8d0c036a838d5bfa19

/data/data/com.cloudd.newuser/files/a/b/abf2045c85c7f855c4f63a4cbe3abcf2.0.tmp

MD5 671adfbc4f5b291da4da644977a11c12
SHA1 0cfeee40bee2ff1e6f8cd8a541de67603523fd58
SHA256 127dfa0fd42a18c0162e1421fbc6eb5444d3e3ec8595af60deaa0c5dd4073734
SHA512 204b3df3c423da108f7146864c9fe313c80f52c256db853ebac03f48d2aa85ffaa41af664caf7452d498aa5e51bf6ad8f2751ac638bcef1838f5baadfa761d5b

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 f7160ee7c3e3f935860c260ee44fabd8
SHA1 d4584285d7e5ec8a527c57223674cc921a639486
SHA256 c0962254ad89b82a4f1250c90fdea91e7f7d2a8e3e456e90d4bee55908b0d4c9
SHA512 22012a03bcad5517597cbe7044ee8424e9f4c315260e7dc52bf4b1295e66ef27a85a6d64c3f3e21633ddf4dbab1c9ee89b1c2bd992ff8aa259a29f0c40401daa

/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

MD5 29fcc264009d9eb68b7a5f2ca4a55a05
SHA1 030fcbec2b1e09a4c8b24f0a82f2921bec2eea33
SHA256 d2b46368b4969217a0bede78f3a8497071cade52dc232aefc0d06fe6c41ef26b
SHA512 bc6bb6650928a9496c322d6f50d66681f69a6a2c1c4b06620c65c0feedb5bf87aa69b28891a36bab1fbdf72d0ed24b190832074818120492df280e3c5ccc63b9

/storage/emulated/0/amap/openamaplocationsdk/alsn.db

MD5 a22d9b53bda0f7778f3d24257fcf4441
SHA1 71a3202820a5d72b61c6a9185a225ad483faf94a
SHA256 888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982
SHA512 5e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 23242c65d4481576d6729db33970fc37
SHA1 176125409584c9a01c8d73ba6481546e5fa30d0e
SHA256 ab546a53b8ee0dfeddc176765fc24ced2e8dcce6e3dd9c73bbbeefc55cc8e06a
SHA512 6371b2693b005c8c20fbe765791ea99f98da6343c765847657422e74acc084c2be97ef0034db5d9592048b34f9e5e5a9d55e0f7983f311914cc2c8640708535e

/data/data/com.cloudd.newuser/files/a/b/b853480c3d98ab7a41564f3db78d4d0f.0.tmp

MD5 13af7c73160aa77fe5595d59d8f34501
SHA1 94b6f38f77be5ae0a50a488ce98fbf3d1e6947d5
SHA256 393c64078a4191fed84f417a7753abff82a73539fe159533f06bb5b2394ec50c
SHA512 4c587e642cb0fd95ba1d5258d98c089b1607021fd021066aa34ab70b23dcfc802f75ea981741e52918094e4e03de9f75ab7278e67c71599e7866bff3b161e009

/data/data/com.cloudd.newuser/files/a/b/journal

MD5 95437672775c3de691f501df0469c64f
SHA1 75b8551ed66d7e7fc19e2be29d6d2c7fc672105a
SHA256 2eb4c86db7bb45e537279737a191694af2c8d927a3dace69850d56cdf97b9956
SHA512 f72a8a84dbbe93b583f31a08b2c456ddb27ef1672e72ceb49ce171ff97893adc6684af3dd2f4e9a3834c21d550e403e8feb87eadbfc883f3fc9e5e645d249bdb