Analysis

  • max time kernel
    161s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    18-06-2024 09:40

General

  • Target

    bb4468daf2835386a333a10c85ee3aaa_JaffaCakes118.apk

  • Size

    15.5MB

  • MD5

    bb4468daf2835386a333a10c85ee3aaa

  • SHA1

    1fe0aaf1a56c49df543d029489ad58bc4324e487

  • SHA256

    aa6cb27d6f4f7f510fc0a9713686f601ba6aae467b0eb8898b3dddc411213010

  • SHA512

    27c8c2d676e53630ab82d66bc55f507ddd8a23b23bf3bc53a216561881658282eabd91f9df8a5fb9994eee19fa5b749dddadeecfa99b56cb96cbc3daca8c4413

  • SSDEEP

    393216:bVi3rv4Qksw48z2BCe7dM+q3DWxWkyapD1ZOCjY6M+XC/:be3FlAeC5tzcW3IDTpxMX/

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 9 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries information about active data network 1 TTPs 4 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 8 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.gualala.me
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Checks CPU information
    PID:5116
  • com.gualala.me:ipc
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    PID:5159
  • io.rong.push
    1⤵
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    PID:5190
  • com.gualala.me:push
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    PID:5312
  • com.gualala.me:remote
    1⤵
    • Queries information about running processes on the device
    • Requests cell location
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5345
  • com.gualala.me:ipc
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    PID:5390
  • com.gualala.me:ipc
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    PID:5530
  • com.gualala.me:ipc
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    PID:5595
  • com.gualala.me:ipc
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    PID:5783

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gualala.me/databases/UmengLocalNotificationStore.db

    Filesize

    28KB

    MD5

    78c57609e3292f23ff94a8c7ae6a4e0d

    SHA1

    324393549ae2f394711a41afdb40509170432824

    SHA256

    7c370df88ec003adea2e520a4e370732024976c4e3b745a7030f776ab7ecc305

    SHA512

    1e38bd23aadd6b16c32898226258257b7c934f2c3e8c9129559b5bef7d04ce4709c2bee5c7bd81c31554005fed3f514fd4c0a718b2e2291d6301858fb448abac

  • /data/data/com.gualala.me/databases/UmengLocalNotificationStore.db-journal

    Filesize

    512B

    MD5

    16961e300cf669fde7aafe089e2cfaa8

    SHA1

    e7b7675f1954dc74f31d7bb755b46f059a9cc83e

    SHA256

    674efa7d3d2411fd970b44cfc1cb0b4640940c8d7a2b2c598dc8566a7ad24a9b

    SHA512

    8ebad74402ebd47741dee913e0301ddfcf66b18964a1e59709371d1517e297526602568966b046996231a0fa99dd69b61cedbf6d5d641791ea1ac5c525b16b77

  • /data/data/com.gualala.me/databases/UmengLocalNotificationStore.db-journal

    Filesize

    8KB

    MD5

    d76b22ba3170ea7f65b22104d6a34978

    SHA1

    1df4724e905dba608d8a62a0daf70021baac9eef

    SHA256

    099f91718e147087e0d9b5a0a4195a93f1d37f6e027a43048212e53cde5341b6

    SHA512

    35788c3bc50b2649fab09b21bc572d441d748c3b89c2412c5316e03c1c7e80a8a9bd596a8ddbfcfc7ae3a0c1fd10b755eefdafb0353993636a15b67c0c307a86

  • /data/data/com.gualala.me/databases/UmengLocalNotificationStore.db-journal

    Filesize

    8KB

    MD5

    4868a6c8c74b631ab077c7d470606b17

    SHA1

    3eb9dcb5b2d3e8e33bda109a5f0b1b63256db36e

    SHA256

    40ca5750d665314d41afe4a615e452686f30de97c0c44e2f30847b4c8d2592d8

    SHA512

    bcb81cbd43a66fd8f9a53ece0ace20760f2e2209c66493a5767ba4a710a7b3e49b584259080f0dec40d5322ed4704341a3155424ae0432f781d7c530b08bba15

  • /data/data/com.gualala.me/databases/aby_data.db

    Filesize

    24KB

    MD5

    e92dc3f71a6165a121aa7d743ecc6af7

    SHA1

    46cc1c9ada53d31a917d9ca9e4a9711e7021b3c3

    SHA256

    9f9541f8bcecc1b621c2f04eafbe4e3fd12467b5646eb4754014744de177c415

    SHA512

    7c4bdda8b3fb4c2e30e63fea5c0b29e0459ed554cab9dd5657d3b63c3c36dbe08e52a7a7d32fd214818853a9e7f202256de91b5b8737c7af1b0e7c812b3a18de

  • /data/data/com.gualala.me/databases/aby_data.db-journal

    Filesize

    512B

    MD5

    27c79c04be22f9c79d77c8261b75bf51

    SHA1

    a6404fcb266cc4a183629dd1ebcf3538e964ac20

    SHA256

    e3668de7fe63db0437562546f8bb3280c74dc2b6a6579d647569ab89490364e1

    SHA512

    f1dd16a4e4937badef1dffa4a247378935e9be386ab7c6328eed73ba30087073391b2e1f2a6cfc6f4cdd772421212a06ca58f31c5f2b9b221c884db55085bd46

  • /data/data/com.gualala.me/databases/aby_data.db-journal

    Filesize

    8KB

    MD5

    76b6515d0dd49e75adac1bb5495192e4

    SHA1

    5de9c659ab9ec4b9cadaae0f7794738be273d828

    SHA256

    3aec66f69d750e35ba6c780427094c6dc578937283251f7bb769143348943d06

    SHA512

    a7bf0a818a8f7d14d04b775930ed61d4cf8919bd552078b5c609e4eff850bf758f916c5e86afe3578f34129a0dad2d594a08bf6301150a5a3af43bc7b630124a

  • /data/data/com.gualala.me/databases/aby_data.db-journal

    Filesize

    8KB

    MD5

    4a7fd3e728a79b237d6d1e1bafce89c5

    SHA1

    8060618bfc0221e9760338e7369987ee5c2fed58

    SHA256

    3e4f3606514eebb1ae3f9769da84774f2bc22fe1e6ae4342fcc6d23d58c9be1e

    SHA512

    986dad7655284f26e2f8daec1c82f09851b53f000198373587953be062ffc35e4d1534c4cd85d1c1b49b20ec7bccfe1f823bdca4e7be7e8c770efe765f556e61

  • /data/data/com.gualala.me/databases/rong_version-journal

    Filesize

    1KB

    MD5

    0023db8fb786effa28fcb38ae7db7bf3

    SHA1

    cad41577765782d06937a1bfae071b7dfe9076f7

    SHA256

    a0fe78b892732ca41dd3827dc62264ceff46bf86e75dbfb8c0490a5a930ef1ff

    SHA512

    a9cfceff292aa5bf942387250b0e1227c9709e1880835a04482648bcf2f11101f3a27054bc3275bc8d0107c21bee17d503fb7e761663f69ec99413b1f9622d8d

  • /data/data/com.gualala.me/databases/rong_version-journal

    Filesize

    8KB

    MD5

    525878a680eb6feb68a57f7f9fab1fb5

    SHA1

    8cfb4ca88fc769f196f870d1e7aeb3c4db7424b8

    SHA256

    ae566badd8d8144def213a035005de6dce351f440296475f7ad63ec7bbcc134b

    SHA512

    f006e918a7d3f140abab8228472b6aea14fad3ffb27926555a46035efd59d63800b967961debc1078f9bb20577123743d82fc3d4879e13f2796a07f97cc847d6

  • /data/data/com.gualala.me/databases/rong_version-journal

    Filesize

    28KB

    MD5

    2cd47ada17ad7a4e3d5e2717cb2762c6

    SHA1

    7cb844672cec4a3bce75c8cf81e80e8ad7cc49e5

    SHA256

    5f266f7cf5a44a3cfcc9bfbba94735081851edc224cb071fa6e650227e214279

    SHA512

    c25229cca649bc8ef54c0770a976034801c0a300d181c107c41879d7f6b7056c6282210c98661428078381032dc6fb0872112dde7e8efb1a9f9b333877f18dae

  • /data/data/com.gualala.me/files/.imprint

    Filesize

    828B

    MD5

    01c1fc159b9be41c736f18df0c5b3c41

    SHA1

    5e9b0fbf33416161aa311d1d511d841d0c43fc0a

    SHA256

    05639087ea006317c286d50a4bbcdbb66ffb7cf1b13269bc2867eb126eb432e6

    SHA512

    b6ac3852ac622969144ee492aa17d16a92638c2f1664dcbcbf9bfba7bdc79732c79c6717461324f548668435d681b63a2b994b3cbffe30bc9eb818c9e14de186

  • /data/data/com.gualala.me/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    1f0b1ed13fa9e38773917a2885b2ed7a

    SHA1

    600f87c69ed654a16d91d46ba9400ebe465fcf64

    SHA256

    174b021def677f9145fb67f8d6fd153505179b394196a23b1a10887f2d92c978

    SHA512

    5a33892db062058d081422ebe66e70fcdbb96616b3e4b5f608b8d8da8454bfe883833763c733c08f4548b6c709ec7f1327d39c72bfbaeb1b3d6d127933db2525

  • /data/data/com.gualala.me/files/cfg/a/ResPack.rs

    Filesize

    525KB

    MD5

    99502b2b17cbd51645bf5d563eda8396

    SHA1

    191e0aeb9ec0f6be73b0ed3cb992804a71c44665

    SHA256

    015b88c298af9f66e86edb3b5d8facc50a93f6e7d2b2cde7bcb0324d7983df67

    SHA512

    a0b4a7314710934de03687ed4e06f906a28e76d1b6d7ca8f1418dfd44ed0b444ff40eb27ca267db513ac8f8b630686f7afea42b113f32cbe3741c468d62f7020

  • /data/data/com.gualala.me/files/cfg/a/mapstyle.sty

    Filesize

    248KB

    MD5

    46a9f9a5221dbe4ff71bfcd2ee045c5c

    SHA1

    915cb3bc2f0096dede38afc1cd7f09c8782360a9

    SHA256

    ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

    SHA512

    185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

  • /data/data/com.gualala.me/files/cfg/a/satellitestyle.sty

    Filesize

    166KB

    MD5

    6a4423fab398792d88ff508525aa7401

    SHA1

    16b89c9d1009bd48d810073a6d777c65f07688be

    SHA256

    3fd14c4ec117f89b272473772a3d71e6603b5e6d58217e0a2775ed17386db1b0

    SHA512

    053acc55f50dea07451e6d5a96bdf4a1317b727f07a9e4be6700c5f2fb4ce11d177d418dde259115f6460479490259654750c62d89c1afaebf0aebaade63aa18

  • /data/data/com.gualala.me/files/cfg/a/trafficstyle.sty

    Filesize

    4KB

    MD5

    9bd44d405d13067a0c32b274ecad3c2e

    SHA1

    0d404c5470f011dd9ba44e1fab20d8769acca202

    SHA256

    ccbbfa23edb0b8b25a0a0114f2bc626a33f830c4326ec6d30652b310d8907ddd

    SHA512

    dfbd97afc12c82a9e7dfb03a174d467f5e2f08e810b3ef6705731c54b92aad64240910ecb3b049191cc0088aec6bc3d1c93db4388c72791f1065879505cbf1c3

  • /data/data/com.gualala.me/files/cfg/h/DVDirectory.cfg

    Filesize

    69KB

    MD5

    8f50d3f0e2a734e9a5fefc68137520f4

    SHA1

    35a7e694c5907315959b9e45da0bdbca608b17a8

    SHA256

    d0aae21c2150e95a513a28856edbc83c95d3d0d35cdb4bdf4ae0bbeec9851b3f

    SHA512

    7ea67fb4e9adf1e1d60de101298e0c826ea298a043f72581a87cd09069e397e053842147d47b03dfc1bd716e5587dd1648ecdf32651e18d9357cbba6b6249da9

  • /data/data/com.gualala.me/files/cfg/h/DVHotMap.cfg

    Filesize

    10KB

    MD5

    a8704426c752f88effde75df32a16bb5

    SHA1

    defd0733ed832c90734ba85d512f30f637e226b2

    SHA256

    2282e4a3c362363c6116b0a3221b4ea1b18e401ef0c6774de6a0e132dbfbb5ce

    SHA512

    eb99342132d93e67fd16780c2acf1bcd528cd0bf87a192435345438208cae56402318b2993ae52aeb95b7a17a8c898393dd170f71d0ec55a39b0d48cff133201

  • /data/data/com.gualala.me/files/cfg/h/DVHotcity.cfg

    Filesize

    8KB

    MD5

    c80f926895e7130becc27980e515fcc8

    SHA1

    208c527d79a49235a9b216cb97e2ba6b8d569d6f

    SHA256

    b25eef0f9bceb551ecfcb63becb4e99535e6143429013cb2a4a74a9a7a374a84

    SHA512

    39394531d36b1b869f117e160bcf48653b2f1f535f7a3ee4d8401d2b9ae4b0bc2a8ab64a51cc242fec706096675dccff7ec0d7bf58b00c3a66d756a321150f53

  • /data/data/com.gualala.me/files/cfg/h/DVVersion.cfg

    Filesize

    86B

    MD5

    298924848d2517a508f43ff0cc51bd3b

    SHA1

    b9fcde7b86653ead6deb57280a6049cf87745710

    SHA256

    0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

    SHA512

    63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

  • /data/data/com.gualala.me/files/cfg/l/DVDirectory.cfg

    Filesize

    69KB

    MD5

    d7212515b479fa8e2612705435d94749

    SHA1

    26a804d64ca409d1af5742566cde13c731c8f80a

    SHA256

    3c7e40941e152cc4a64c779695dbe790eeecf6e0cf5d89a046053b8342d93bf9

    SHA512

    12c627234fc81d69584df4cb688157d5d38b3f59729e63b06c5e97cb7c8d2723500c2c91bdd287ba27747226be2f06e6cd41f2792045fc65617ad001777e2df4

  • /data/data/com.gualala.me/files/cfg/l/DVHotMap.cfg

    Filesize

    10KB

    MD5

    5c546d6332ecd1af22233ea44e796b10

    SHA1

    7f4ded6d0943cbea0bb946077a6b667cac7fb9d8

    SHA256

    b92b37cab131a4f3962376c4ef5220302b02b51bc471ec13e423e2fb22adccfc

    SHA512

    cf9b91549271451635c2cc0097ff4530ebc2c042d7797e3faa900963638c11d578489b1768dfe17118ec65803fee6ef65837d87f8ab7dde734f3cec56821b600

  • /data/data/com.gualala.me/files/cfg/l/DVHotcity.cfg

    Filesize

    8KB

    MD5

    10fe7c23a7ae8a4b13da6a3009494f24

    SHA1

    43c8b8a5d4f0bdf8656bc4a52097ee0b2c6069d5

    SHA256

    6d0837665afc6ce7bea8d5d7dbe2f321bfa661374c822763fe8be393aba0380e

    SHA512

    b5d99b1c6bcf50a27426ee455bb3de5e461daf48c3fd49ab2e71e74af3c6cbdd3e5644dbf441acf0a163b74a7dafe26464443618fa20f26f9ba51e6ba68ead55

  • /data/data/com.gualala.me/files/cfg/l/DVVersion.cfg

    Filesize

    8KB

    MD5

    1373f7f2fcdf7a20bd263d6821181e73

    SHA1

    be6f94639c1a78e07fab9b7331ea70d2dbed05b2

    SHA256

    d860bda320ac0fdcfaaf3033f977a75d2a2f66d2b694bce6c635d889e4b6ce66

    SHA512

    71fa17ada416326b8848ba059e46a5f2f491fd77b4afe5b3f4d8ddcd52ea5cb415986b486c00f1457d8c663b99fe8cf99965a53bc37ead4c3ce471db58a830a7

  • /data/data/com.gualala.me/files/ofld/ofl_location.db-journal

    Filesize

    8KB

    MD5

    012768925bd4dd195358368a6617602b

    SHA1

    ff3b09e2d60d4f09ffad3eccd04066db31af26cf

    SHA256

    42259c0a83f6ef1431311cbd9dad729c4df1d36c81f52888e11dafea207acd8d

    SHA512

    65f958a4ae37be2a605aa0f32e148cb71384957e78b07fedc2db5b4098c7293b93fa0ab8199bb598a516c5e8af2f10e3ae3de01674778264d0490fbdd32b177a

  • /data/data/com.gualala.me/files/ofld/ofl_statistics.db

    Filesize

    80KB

    MD5

    744ba4d6f58e22f8f82d56a50e4b5373

    SHA1

    535e389f9b7f2e0d14e550fdd00011dfc255e0b6

    SHA256

    8b47d5b310d68b6911dbcfd7ecda4d7131351f66365f81db82f2979ae2f53592

    SHA512

    e888ccb7fc6722eaf8fb6bb8370c55f9eaab299be08db7c57038efaf945569b62b7b6b2dde5169044c5d60a4a9a9051ee7a7c2146153aa7d22d8b7c8f3310055

  • /data/data/com.gualala.me/files/ofld/ofl_statistics.db-journal

    Filesize

    8KB

    MD5

    18b77ad7ba3a82b43e0badc260c2800e

    SHA1

    d976722dd3c660ce82a658379489c7b1669eaaae

    SHA256

    83b3aad6904f7440b7b41a5f71070f8ca9356321bd043bfd99b4172c59a0af65

    SHA512

    6bec03a64967dd0c597a841c76b4f95c96b3f5bce3e222408f0feef01d017f0db19441a6559dd48b0cb409ab86016fce88889348cc3b8e8d71cb729a4ff5ff80

  • /data/data/com.gualala.me/files/ofld/ofl_statistics.db-journal

    Filesize

    8KB

    MD5

    582fd297e7998cf6b7ef1fc46e995033

    SHA1

    69aba4f5b10674e115dbbbdc3d8ccf6c72922cf6

    SHA256

    4ab7ef799923ded6b56d255f2a0e6a2dbd1cd63ad91b37c590b5daac06591f38

    SHA512

    1680b30a97e4cae16d859f1352022714f25a69239124bf7ba5a3ebe000010d7aa4cb99dd04a994d446d6f054ed3f7157ccaab285e15579428626283da8ac195b

  • /data/data/com.gualala.me/files/ofld/ofl_statistics.db-journal

    Filesize

    8KB

    MD5

    0ea26c4e747c2566ad7bf5fdfe912d2d

    SHA1

    fda8965e1db71ad80b5e289673c22569c640dd13

    SHA256

    5c16dbdaa61b5f7207ebcdae904e658fb2a86fde21b8c25768082aa9a0772403

    SHA512

    7858c615455f0fbf14263dff522577dac270bf0c0bb5a3f754920a091d8ad8271c8772f3f93f92299f1fb15b6e60a7735ffd8b83f8852f49731485ad353d834e

  • /data/data/com.gualala.me/files/umeng_it.cache

    Filesize

    245B

    MD5

    46a3770700551713e66d3eedaf902375

    SHA1

    daff28d4e55a16f134623d6da7193ce9848f73a4

    SHA256

    40f4473c02dce04daf5f3a24262c74762c470625b9d775c49903dd049d4227bd

    SHA512

    0b287076c042eb5ae81487654b05e3639542bfcfd13afbd6f23f0f5bcde5fd32a1fe1f247569644176d7bdaf81da7d69f1db66b7934b8a21af19e3c83126f25f

  • /data/data/com.gualala.me/files/umeng_it.cache

    Filesize

    125B

    MD5

    15d3e6acc1e40881d9ccd855ecc7252a

    SHA1

    fb6c05b166613a12e03a530ff28816c1929ae580

    SHA256

    939f7fcd9e30bff866fe61262f27eb6b72f8ea746c7f82678a0233e762107156

    SHA512

    74a730acf57f3d188f1f8bf444518dc7862555fb78af95fce331bfe40840d9ecf3e7925e7ca8578f402da37e259c75014cea6ebea42eeef4465b7ca7698e517f

  • /data/data/com.gualala.me/files/ver.dat

    Filesize

    8KB

    MD5

    42a65845071ef6e138602ef7fb12063b

    SHA1

    7329cf03c5bc3191829be7ca38d2a4405ddec472

    SHA256

    089dc3d5a3ad1cff409b1d62f7075ccd636c403e1931b8c31dcd75119a52c1c7

    SHA512

    e9bf19f3b1ff755d2fb22c7e34b4f29d1e7d3d2e78a441ef5ef1a671e88e5d721c0f073e19403a214abf6382c697437a5f9c9ecf1c889454e5dc54b1a44b1c30

  • /storage/emulated/0/Android/data/com.gualala.me/cache/kit/journal.tmp

    Filesize

    28KB

    MD5

    45158cf820404564f5f2270ec99f8f9c

    SHA1

    ad9f02014cf46f267d38be12ceca84e04f5ac609

    SHA256

    123fd51f609f58143797c88c2af959be92070d2db210274eeb77e1ba0a03e107

    SHA512

    6b21aaf476e2ada203a59476e473fcc99cd40603a84d06ab5a1dfdb7c8203535dbd48a9782fefb02da5c11951a953b257fcd0df864dbfdd755984ef66bb504bb

  • /storage/emulated/0/Android/data/com.gualala.me/files/baidu/tempdata/yoh.dat

    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /storage/emulated/0/baidu/tempdata/lcvif.dat

    Filesize

    96B

    MD5

    87e306a2ca755bafb0775e3967c34670

    SHA1

    280354ad0c6826108b906578b7f0b2db6d92adfb

    SHA256

    8e5617a4af6e7e620c49c7cbf112b172b154dc6138b8b8b53a1ff2133e0ecb99

    SHA512

    918c7b5590ab768c29815483812041990e906de579ad1fea91027609dd49ef29bf822fa0c197648345400d335d1d75a76dac0bec312a523c153d47a985be151e

  • /storage/emulated/0/baidu/tempdata/ls.db-journal

    Filesize

    8KB

    MD5

    24f742d9ffef6298a409c9c8474af091

    SHA1

    2375a91cbb168dcce2bff955197504dc561460a7

    SHA256

    1ae88fdc79593e2469c0d7c48e8d5a089d195254b4069be9e594fc5350b3b1cb

    SHA512

    d3a477ee32a786626706d5f98471a52aafc13d351038f03e68c0fc1d86418fd40f0d5a7ac6985892a570a7c249ee18cefbf06bb95c2374ca2a7de51913f9aee6

  • /storage/emulated/0/baidu/tempdata/ls.db-journal

    Filesize

    8KB

    MD5

    eba971dfb193ebb1ba0735f7d7ffc0ff

    SHA1

    451b6c6122a667c2ba6ebad15c7b723deb8f74c1

    SHA256

    b623a0df7888cd02e7ef09617c4bf4dd2ffc7d5f3973c7dda035b0b611607a57

    SHA512

    8daf40d4ec673510f8a9acf99419ad8819ee1f467efaf59255ca1cd318cb0833aaf74fa636d0ad8f937c520f1b924d71f72d08c0815f97fab6f473328ccf1385