Malware Analysis Report

2025-08-11 00:07

Sample ID 240513-h1hncaeg63
Target 3e4cb7753ff5b95ba588bdd68c6e1b95_JaffaCakes118
SHA256 80391fc08764c749ada5e4ea8634112bffbc2c21ba094d8298ec941aa2f84960
Tags
discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

80391fc08764c749ada5e4ea8634112bffbc2c21ba094d8298ec941aa2f84960

Threat Level: Shows suspicious behavior

The file 3e4cb7753ff5b95ba588bdd68c6e1b95_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion impact persistence

Checks known Qemu pipes.

Checks memory information

Checks CPU information

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about the current Wi-Fi connection

Checks known Qemu files.

Queries information about running processes on the device

Requests dangerous framework permissions

Reads information about phone network operator.

Checks if the internet connection is available

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-13 07:12

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate. android.permission.BODY_SENSORS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows an application to read the user's calendar data. android.permission.READ_CALENDAR N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to monitor incoming MMS messages. android.permission.RECEIVE_MMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to receive WAP push messages. android.permission.RECEIVE_WAP_PUSH N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to use SIP service. android.permission.USE_SIP N/A N/A
Allows an application to write the user's calendar data. android.permission.WRITE_CALENDAR N/A N/A
Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to add voicemails into the system. com.android.voicemail.permission.ADD_VOICEMAIL N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-13 07:12

Reported

2024-05-13 07:14

Platform

android-x64-arm64-20240506-en

Max time kernel

24s

Max time network

130s

Command Line

com.duoshoumm.ttshengqian

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /sys/qemu_trace N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.duoshoumm.ttshengqian

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 adash.man.aliyuncs.com udp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 nbsdk-baichuan.alicdn.com udp
US 163.181.154.234:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 api.ttsq.duoshoumm.com udp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 163.181.154.234:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 acs4baichuan.m.taobao.com udp
US 1.1.1.1:53 alog.umeng.com udp
CN 59.82.133.78:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.177:80 alog.umeng.com tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 47.246.136.188:80 ynuf.alipay.com tcp
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 47.246.136.188:80 ynuf.alipay.com tcp
GB 142.250.187.228:443 tcp
GB 142.250.187.228:443 tcp
CN 223.109.148.130:80 alog.umeng.com tcp
US 1.1.1.1:53 adashbc.m.taobao.com udp
CN 59.82.133.59:80 acs4baichuan.m.taobao.com tcp
CN 59.82.39.254:80 adashbc.m.taobao.com tcp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp

Files

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BBeginSession.cls_temp

MD5 92cf538ef02250a3399f9a132f307b4f
SHA1 96f0c0c9a0da5d29a419a0d6002d2d15d60c4b32
SHA256 005a70d3809bcc965a02adf38cb76f28cea96977b68cca8392364f152d5d94f7
SHA512 1c2bd757dc44fd427038a4efbbff9b704d3238cab877830216fffe4acbf7e73666c3da20ed56dcca49abf321094a8eb8ee282e1637264d2b9c429b8499541389

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionApp.cls_temp

MD5 c1e1b5910624f0fdf2fe432a84694c52
SHA1 db696583352361a4ed95b9b0cb0a48fe934b7b5f
SHA256 ac089602923865fdebd1fb6127ab587b3d51f612d6cf16ba3fae94eb2c7854ae
SHA512 7185e5d3ee2dc6b2252ed86da00f3db2d4a7f2b93ecdf85a308427cf5637d1f1c5afd0119ac14fe9475daecca4e009fa886ad12c01b6b018dab702964e0d3af2

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 fc721f842cd78fb89f23c854e4c18d2a
SHA1 41d565f04aaf78d8003cfd6cdbd4dd370f409c1f
SHA256 f5cd11947a2602ce24e2f417a5e05017125d6ecaf4a83619b19b00985207472a
SHA512 f6a4857ea7edb7612afa62d7e773d1824676aac83c51f847309d44f9e6d58a902698248f820562da3121c41d386253dccc7f9c60533646f441f9677285d27d52

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD54004C-0001-129F-A932CFE21C2BSessionDevice.cls_temp

MD5 6fd4ff42e2d7f4af0875092eda3485a9
SHA1 0f9349c818b367c04556899a3b6c33efe2fcb80a
SHA256 7e0cc6429cf31791e797169a0b3b91e249346071232221fe285b519fd4ff3e69
SHA512 7090acfed9d80f932771ad330a8c8e8f380dea5ebbedcf37766ce6cf400e6bcfc08628ae77daa095f8a02ba1142bd393e3c8a5b51cd7e4df338984ab9607ba32

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 ff62963e98675915f544af7624517873
SHA1 e603ba4e70abcaf7521995c2c2b22754dbfc4983
SHA256 6dd75d4f0a8c9160343b87e375d67369f561dfb1771121966b79540f7da6406a
SHA512 aa0c4a41bb39bfd7c21d9f87af04eef673fc7896b35a6a2d35d2eefd9793af176b1bb3031031d544846f0eed086d842d8f18ce2a1c724a1dabaf75e07750e008

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cda52192-ab05-4b96-b3ba-e103d5ab77da_1715584340421.tap

MD5 c6639ad70bfd8bcfc5ec834c7083dfab
SHA1 da3b4def3c1a62f74bccd381305312ca15993ced
SHA256 bc8bfcfff46f48f4ef5081a3a66683b50889105943aa8dba0f2a54949b932266
SHA512 50fe4ea260eeb421b093f28dc59d0985461020e3f7c3170b9574c542532fcee8a40bcf30594e68cf4147beb55ccbb7d82f5a38b0475555ff1ea9179d542597ec

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 beb0fe67fe4ed99f4f3d70a1012d4862
SHA1 daba4919f7c95886ebc4db2afa03bbb2769b92fc
SHA256 46a7a2d6ef71a1235ca4ad53933220ae78cd7a419a5d688cf5ec47a45592b7ce
SHA512 7b1ed04817ecee2c1b9aa8c171c90be24a41384db8f41f744cf01aad072fa212c7d6fc20e6399a63364b2a36114ce28efdf819ddc1e9adaab6b584a8cf9f75c9

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 f75b7d3ba0b418af93311d2260dde2bb
SHA1 4e7d8e1ce2903084c0c3aa4f5a54801b120fac46
SHA256 373745b24f44d43e854f6894b4dd20c1ded3ed627d3700783b4ddd37eec14b11
SHA512 7a8a08a62255a9b52861ab8b06fca7cdedffc13a2aed9c8941f44c9d99b7004c7e67475423e684badaa901deaf23cb65c9ba8559949dbf81c72d6a6e7c4e8b80

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 008c42abb475912befb7e4ab81593c99
SHA1 cc8bab183cfc4aef71c907bd561446378e074220
SHA256 ae0bcafec1acc07db0a912f7106fad4d25f21fa1a28e0db9d1d443ea7311ee08
SHA512 4ce197a2c5bcd598e53ed3d6b0903bde1d917817bf80634ee5cc81ee7080ea25688860df88f782379106c32258d36d7ddf09f03e8e058b6683947b5758fd6bb0

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

MD5 6b80ba9a66b4fdbc7ae9252b900a7169
SHA1 c0bc7ae535f4f643fe8682cdf7b00243a6a3b968
SHA256 f8702af1fe65df7d41f6d37faf3ac64c392e6175422a31f75181f5f7a27109ba
SHA512 c1582c976c65c85b038e84ba4601de1d4de554bfd653373a3d96b80dac79c84ed214528cd3fe092b5320e3371dc52736368390c44bb315585a4481bbbd7609fc

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db

MD5 75694e403dbc728c85b85d55d972d357
SHA1 346ce6fb424f486cc32f7f46649649470cd57225
SHA256 ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9
SHA512 591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

MD5 d7e416c20fbb96350c74ee80882052e3
SHA1 86cb7f99fa5948a9bddbcda044f49d9842c72b14
SHA256 359a1f3bfec1f23ceeb7308a98860bc5f3335fafcc7580da830fb9408b535f4c
SHA512 9674b239859b925291b30a6d71046c0c17b845f7fd9df177b2a938313f250b82f967f781250635254a2bde41edf76949ad9ef39b7e96b89b8ad09e9fe3aa93c1

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

MD5 057bc9e0ff10c2ec32f03fc40a8b163d
SHA1 5e22086075525d50442187b184b22b1fb6835202
SHA256 11d9877da752e05087fe10e28e52f8b49fb63e16bc919402f7f218fd1ead4c2e
SHA512 5f5d2129f75796cff2a5bcd703849cf9e90bbab0d1a8f27eb5e5178e8da931945ead646bf06bb54448e0c9ab61661a353111be7b77b9605e7c4b7a20a8dfe1fa

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmainso-5.1.81.so.tmp

MD5 cf7988110ae39ed28e1466a5a2238330
SHA1 3ea6838d5f2fb0e8925889483b2cd5313af6eb83
SHA256 defbecf65a7b91b076f4e8c0b6c33727c3f9fe281530157b81b25dda21aae7e6
SHA512 4f4ee887f4657ac504d54b215fa36eb6890641c54c21e7d54f1d19ea0a3698c2f7f6612bd25c73f700243cd02d0023db096ad0018c75d4d2ce5759431798e2c0

/data/user/0/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 c4137d8261603061715661f5a6e63892
SHA1 35a23f9230e97e4a071d596848d96551fcb06bb9
SHA256 5a2089fd7d141d98643323822a955ab8a65016fdde73fd22502e756a2b0f261a
SHA512 849d3f939be5c9e98c6e896b2fb5d8434ad069c40bf6bed41b74adad1e515c62cb4fba531ff34771546ca6c586816116ac7ffe94682b3758cd5e4a074b237e4b

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

MD5 522947eaa37b029a247e3973f3be3621
SHA1 31c88e0d7c9b51904c0f598e80245bba41b1c7d9
SHA256 d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156
SHA512 f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

/data/user/0/com.duoshoumm.ttshengqian/files/INSTALLATION

MD5 9f231297b9d47b4b2f57413a6c0730e4
SHA1 1ab0e331a4935b9023b4a8fdbbee805c58ccaefe
SHA256 68a46b8a5ae615f0937138242dba6fa8edb71618fcd95073a682c7fb996d863e
SHA512 d906b907e3f47a535153e27fca18cc812b96d657c4bd8b6066fbbc207b3a639dc3bbce2b4a6d0d5ae25be4b86130c78687e9a289dc4202b9781662d5fcb1f863

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 adad786ab688fe2770d35e67ab273991
SHA1 f53e0d02415d34a8d33d7a4bae2e3005da9d0157
SHA256 8693d1a5c3d166b0215804e8bb3e169860fdb5626fd50522d176f82111cfba74
SHA512 63f9107dc30fbbce4f3f8d6f717d737871f5ff7e6775dc691d65a8a9c42514b66d560b16c374043d2658abb78a4d840f4d64d430e342b67cd1b6ce737335a39d

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 53076c0ae4194d1b342ace248ade7591
SHA1 1fc0610ac66162197ae41e382a263df9b4bb32a4
SHA256 fb2298cc434d29805535366d4e2127972afd1a340efbc35ca66a05b5f7c31f7b
SHA512 00cb4379505ec69f7ab8510b27aaf2fd3223fd1aafc60401e01829fa42717405d65d497746f6766be500afee1cb621ca0619d2b018aa0be3d08baf757cb89558

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 75fa434a6b767628a68811a7a7ce34a8
SHA1 c833181027434c8314838de1d9352f972d25774a
SHA256 852fea436ce9736dc257b56fdd2b6a1f7d45092a3b99da53fe9acf28fd9a415a
SHA512 4ade0934bd84120c0dda0c3560834239f08b27bfae1e63a55e674008c8b2b884804d393c8e06896b17648f3e5a2ab3a638cb4919c473cced158f2f754097f7d3

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 1b257dd49c09eec53cc1d35ad332fcb2
SHA1 831113c309cd0939711595985540ddd80d79e792
SHA256 13e45d44abe40b603a1a8d9b88e1506f2848b60d09ce783db43c91240e4744f9
SHA512 758c1b577da786f211c63b619196478bf356296c8b3885de2b99aa05aac7c0fb034f584dac43ead77f8129d3c8545b5ce297e83290bde66d206ecb8c5a8d7e54

/data/data/com.duoshoumm.ttshengqian/databases/ua.db

MD5 d07d204c6b107eaeba26f5cce625b6a8
SHA1 ca16278e95ea96c1ac50d491efeb6b67eff49df8
SHA256 81817bd1f642bf2cc0e0537ec546940b4c602f4ff7ebcb3ccbbc65a6f1325c8e
SHA512 dd1ae1a5ebd0b61e697b071d8a81f9fa69f7de0df0df51dbe73e38a1157844d6587800de83ac4315cdd7451e47713da7f2c12c3888d811287753ea0a759e42e9

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 a4bf9cc1a48ac415314841efb8a7e850
SHA1 cfdb575334e90b893685e2fcf766fca8616db4c2
SHA256 d095fb015fb271a96934c2f790721b3d52747ac7ce9a9a7b281dce95d4f3bf91
SHA512 b4952b3191e5193061666563d8df2c77c20f5e845e4695261727b0caef628657b3e87ac02d4325ab576b165246747a5e27eccb1d9e443ad793f2604c342b6ccd

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 7679f43aeee5e94d878ce5fc2e2f13e6
SHA1 2918eb90f57ebadf1cdb8de75e7482df2260d4f0
SHA256 dcedef3e49dcb2efd947a116f777fb2029d2c693fe71381217b9e812212968db
SHA512 ac17d8a8d810fba25823230c309b3c6a361ddb3554d8d5f2b30413ec8a91bffc461f5dd420caec4bc3ba67bd9e4940c1b473d6cd9d929539fba209bf765ec72c

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 f27089bdbd9dad1757b72640e4d778cf
SHA1 2c4aec5f6e076bcab2dddb56b6df3ad4b64018dc
SHA256 3dfcbbbfabb18840094ac5ebdbb5b0209bc0b8d4a202ce67940b8eb5532a5226
SHA512 14c3fb3584157eb44278dc7a089725416db54edf48b7eab6d4079dfdda7c20806cf4cf2567cefc8c8e95cb0e493b149894f0bab1a82019788384261ab5670016

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp

MD5 98cb77da3547ec582eaf79c499323c6e
SHA1 3129103b4c0000b81932401793cff6eebbf2e812
SHA256 5a1a7dcc90d7900c88862abb0134e01f275d869c2b796f56dca90611aaa87910
SHA512 77d3d3f7ebf01c3ddf9525960627db821839692db8ab07a840ef97a29c9010a51cd5b41afe1996c03ce68d537d25710e85cac8b0e87c5733693f50c3178301d2

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybody_312768000000.zip

MD5 f59597732a9069b73e16c027faf78d05
SHA1 e3558f4e5041a6c6d4372001bed847f2ef77958c
SHA256 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6
SHA512 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 634ffdc4637a8fc15b52181613be9b9d
SHA1 e2f6ceefe4d655fe6ac2088c4a45fb7f6dc2a979
SHA256 0f4f822f4ddc6faa46f3309cf1a1bf3c197bdebf430200d7ee7e6a67666f64d5
SHA512 235cc744352a8c06abc05e24cfb0eb0d1db56265b684be6d1184f09b5e8569052a29ba908df31656a2a610fec92a019f0362f8d67a233f8862b87885cc6537dc

/data/user/0/com.duoshoumm.ttshengqian/files/umeng_it.cache

MD5 6ed8db86ab1c8931d88d6e0897d84b43
SHA1 9cdbb63adaa5b626646dc6eff0ecc3336d9916ed
SHA256 cc7aa22d94bf8413cb4537bdc36f92d0d290cf4dc533f2099329e999aa218365
SHA512 9b30d8f41a5abde84424791fe2289dc86364dec1c342c238ccc1568469ed4c55016edff1c465f1aba9e961faec7e85f528abb2bd3b7947c8f58fe438ac13fb37

/data/user/0/com.duoshoumm.ttshengqian/files/.umeng/exchangeIdentity.json

MD5 1fac69c1c481049cbdd4bb137842a24c
SHA1 afd907b4145d1e0af8ec6a312290f533957cf64f
SHA256 b64d78dd8fc9a3e10e69744b0bea0ee095350978912583988adf3921d595ebed
SHA512 58e2467bb0300d0983cd128aaf4f89c40e23bb808f95c1d290e95ad276061b982c4d0cff5b1396fc641363330516354a1105a36acf5e4701c47513dfba6795f3

/data/user/0/com.duoshoumm.ttshengqian/files/exid.dat

MD5 b52c191d5436efc4c6faf56fe926e2ed
SHA1 b0c174fbe13cc96bbd5a3ebfd19992a52c844394
SHA256 41e9b8a9698489fbe707380b7df5d2d368dba0ca4972fc3fe944902abcfc0e81
SHA512 1c0af7e6f89f6923a2136cb1c3192ed3bab54f914f6f6b3c79b0c4f9d72f4537bcbd2eadd5740e45b28f4ae45ced929a1fd195bde2621843ad854731ff3edc61

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 98b33f7b5aac9afd805c5a3714f8ba2c
SHA1 b3fb9cab0db362810cd88d6eeb7d9c60f4fcd816
SHA256 e036daaddfad2b4565de55f6b3fb4c573a3337e6819e4b539097204ac7b9a25f
SHA512 b740348e539dd9f488946a8e6f250f51d9933e882f5cab0e9f8f52d2dced64e42b8ebba463e5d3ba691f85e8b94a16c09008475e2844389945ee030fee2dd91c

/data/data/com.duoshoumm.ttshengqian/databases/ua.db

MD5 4cac7d31fb94d5c9581893537f64c5ed
SHA1 96bef3288546196ac3058b5eeddbe9da1d999fe5
SHA256 d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
SHA512 0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 3cecf8160b52e66bd4ca060ec0ba6267
SHA1 c7239f47d0402731d87845968db49066a62432fc
SHA256 0b4d7184f73e5c688ccd14419bd9da2a73b27cbad922d32d18930e98ed6d173d
SHA512 7799eec8ecbafe5bb489b3b65408d347048701e09dc6bd314f55f72753cb5cc13967349d07e88a26f003575820003ba46178170347d32e56e0a44daabe9b6490

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 88b193a3a4c65dc56594f44d58df645d
SHA1 10113dc4b446e876bd74dfd5c3ceec1d16d4dcd5
SHA256 39edc8d4c8d3c3d342aad7bbbff6b9ff6785a23ced21ee1de77140a342f1d05b
SHA512 9aec760ad696d458e6750acd1e23eaa6f47a05953100da380ede4c116b08abb328bf90ff2e65bcc9e512cac8bf75ae480783d6bc3e7a1fdea17a2183a817e4ab

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 834b7961b35629372e9b628f2eaf6216
SHA1 e30bcbf9c5c014561516c231a9a811e0fac4dd95
SHA256 f2896db05cfa4da114deaebfa28df1a2d3aac8bd29fa4f9a7caf00941136dc97
SHA512 1b1eff96df472409d64cab0749b4ccb6b101ac0d00413f484279daa5b35d96d0fc3c22bcda21c5b56d2f6d44cee136b627cec14cc584a75095b098bbcc316bb2

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 ce016adcaf98125ba9bc940cb05367ce
SHA1 90b1a5c18dc952226293c75e046525ef36c6300c
SHA256 00fdf3f2f08c79a77e7d9b4cfe676e4cdc8b5ee7e99b6a6aecc8cbc6119c7d0a
SHA512 6480ccec6365e7473ab499ca7921505bcef34a5522a0a53cf4fc1c91967a914946eb7c246762005738f48764dcce6f1591354ebb263fa01f024ac04b39b09dc6

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 ca62d87eb21c0e5663e07b5110c7c077
SHA1 88c5a2dddde861a0b6ca0421c52a5e2372a94a05
SHA256 91a51168451b8b58b4315f5ecbf8887bcc6e38568e2f94fe623b99b939f70772
SHA512 7cdaf24c1ac63c5a421f3820ffce032ee528dba4ea557d4848124dfbd710845768aa8ebacbf933fd15976efa34a0284e0ead340317d532db69827b4db85e672d

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 cbb974e12f7f304d59da86bdf8e30258
SHA1 685d149ae4e3a3c413260e621b9bc96383322fe8
SHA256 ff88c03537b686212ca20a306bff8447c7f6db147205e84fbeaa8c84e21ddc6e
SHA512 3f9e649bc4734ced231050aff3cab4e657f7d93f09ea75ba5ea2d881f8e74796d8c31edc261cad45a693425cc83e45d82d7d784704d36e67c4bbf6a75cc2b3bb

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 d64b3446f9426a336d5d7a78ee0ed755
SHA1 120e7383540355b8833a51f03341ccc696fe3533
SHA256 5dcf8c7a08b20596f75c917da543d904dcd486cf02384b0c1852a1d38c0a3012
SHA512 458cae38a4ab17d49809df463e2e864e6ce205be0bf2fc18782f97883b7e57880882faae71919ad96608860b8bcea304087d7e9e40cfd68e24ee0acde14ad3cb

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db-journal

MD5 5cc90f1b8c81a38deee7d4f0104bc359
SHA1 6c7353fdd524c1c7e00be25f366f735d21bebed9
SHA256 f090ebf61983436a73c5d28e6443bba0ebc51b40a750fb59e1747b36ed17e649
SHA512 a1f91b6e237f18575f7dff57bf6ea45ae13e402d6f6343c040d1194032284d9c9b649efaddb117bb5b382de222da07463d5e40ecf19948ca565ea1498f2ce8e9

/data/user/0/com.duoshoumm.ttshengqian/databases/ut.db

MD5 acb731006efddb788690818409ac91eb
SHA1 c3b2e7df5b3516032745ec141f83e6ff7150086c
SHA256 5ab4d02506d291b5544db6895acead9fcb4c4ae300d9c73880df7517ea305f8a
SHA512 918e078c4d04395cdecf6a78916dc51b995dbfa29751d8fabdf52b2f917fb736cb9b080ab6b5884b573a517454528c4f1001a0b6c7d3fdeb27214a6aa74ee450

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 8699cdb8b117eff7ed00f4cfdfc8a103
SHA1 19b15f2e973d44e58e81c23ade04f4402decb027
SHA256 152bf976f7e8c58cf8ac63c248e886babf1d77c8de77a4dd8a91d005dd949759
SHA512 df46b30a9281fb5b617bc91dcabecabc2b03fe4c79f42c59539a653233a5fedabdc69e2cdb995c476c2c84e8b0fd5ffe4ada5b2fc2d01bbacd8c45de5151ea36

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 b2392d961cf4284c5c98834b158a615d
SHA1 90a1f7599c24afa9012ef642e9c2a9438fada2f3
SHA256 6cef2c93707d03c9e7caa6d7e4eba9c313d871abd8e22060bebdbda6c257dc40
SHA512 6e728776a94d89a5399b86167cebd4be471fffa6c19168fe73033e79d4eb04a3acb76d397b15bed27c70005b3fb252661984e80da42f73b1717c0a04259ec1c0

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 e348f6e120ade5186cb7f54519232486
SHA1 7c06d3ef0eb4022027fb049613a6848648104694
SHA256 8526a2d978764aa13835036e316eda884ed54f9c8e566df59a34fc4cdbae3bc0
SHA512 81df17357af4f05bf29d09f3c3de009957f56cccf71b1551e188499ab63c04e0382394f442af039dfca6eee194f98ec1c831e013633d6c58c1ebc92cb5088574

/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

MD5 b7f913a975de306efa05e97dbad34f9f
SHA1 9dd9c4c25bd228e001f61227e1661650a5c8dcd2
SHA256 ebed5996f61c9cc8b2a2ecb65776b11f3c3e8cb516bbef22452480823f475917
SHA512 1db5f4be9ec27faa380082a6036a7094ca7a98aaa98ce0c5eac13ca4bdc7b7d82fc581ae23cf442c0aa2df942ec215f99bd8788bf35c56e1c5d02aa57abd2f83

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 664a5305065ebe866e00ab8a7dc9e85e
SHA1 1eff5b1096bc2bcf6bbfde4b03a9d930534253c3
SHA256 fc9fcea7f62f2030bbe417551ae09b1910d57934483270aef7d31983b483b4d6
SHA512 59d74b8ca696b08c9c2d239e61bf91edc8c83dada0329e6a96577b4cc3df43b7d3c24e360e4bb11f920092a31836ac1c15a82a1ed0a4f168552872fe1c8a435a

/data/user/0/com.duoshoumm.ttshengqian/files/21c22f492aba3de8.lock

MD5 ae4e9784cc8de166d849b3614a0cf8fe
SHA1 5472c3584476be174a89b26f283827eb04a9fae4
SHA256 1d1c7c6a542d617c9583ec8c676bb6ef2ba00cc7475d815d864d2b88c308be40
SHA512 39745380861fa9c6a01bfa5bb42b64f4ee2b1ef1b0b013073a7ad30e04803dce7dbc8dcc678a9690fa227ee834322de7745e797d1d965063d9270c94d604d777

/data/user/0/com.duoshoumm.ttshengqian/files/0a231bd8575dcf72.txt

MD5 52e0581c24ad729cd04904c771f76201
SHA1 bf717066ae77e0d33ba8dd4b1a1043d9c7ed2cfd
SHA256 a395a8d655ac344f0111e684081b302da44fcae31623b833f79b8d0179eea91b
SHA512 3e06cecbfb458ca55fcf4ce512a916b5fc063b6d5abc534e4e5dbb2c6be81e4f18e0f67e92422b6a0c75876824078854f368463b0262be00115b39ab7c995ffb

/data/user/0/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 d1441d9972096254a095ff3be3be704d
SHA1 405b9674b26c3f4ddaff4384ec81d2dafdb02bca
SHA256 962334065224c74aa088338c4d9969d525b1279a2c98bf0836e3bc66f751a8b4
SHA512 2671faf777219cb17b1d5365dabc0c177e675e9a3f0a02d5f6b8c7ea61c2510b93a2971cd15230e51d8ab3af82eb328161c3e2f9ba22f0e68fb5a82336ff9cf0

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-13 07:12

Reported

2024-05-13 07:14

Platform

android-x86-arm-20240506-en

Max time kernel

3s

Max time network

130s

Command Line

com.dbl_jsh.jxh

Signatures

N/A

Processes

com.dbl_jsh.jxh

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.213.10:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-13 07:12

Reported

2024-05-13 07:14

Platform

android-x86-arm-20240506-en

Max time kernel

128s

Max time network

159s

Command Line

com.duoshoumm.ttshengqian

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /sys/qemu_trace N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.duoshoumm.ttshengqian

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=65 --oat-fd=66 --oat-location=/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.74:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 adash.man.aliyuncs.com udp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 api.ttsq.duoshoumm.com udp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 1.1.1.1:53 nbsdk-baichuan.alicdn.com udp
US 163.181.154.234:443 nbsdk-baichuan.alicdn.com tcp
US 154.7.51.73:80 api.ttsq.duoshoumm.com tcp
US 1.1.1.1:53 alog.umeng.com udp
US 1.1.1.1:53 acs4baichuan.m.taobao.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 59.82.133.78:80 acs4baichuan.m.taobao.com tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 47.246.137.14:80 ynuf.alipay.com tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
CN 59.82.133.59:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
US 1.1.1.1:53 wb.110.taobao.com udp
CN 59.82.122.10:80 wb.110.taobao.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 59.82.133.4:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
US 1.1.1.1:53 adash.man.aliyuncs.com udp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
CN 59.82.133.36:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 59.82.133.157:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
CN 59.82.120.124:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 59.82.120.166:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.176:80 alog.umengcloud.com tcp
CN 59.82.120.171:80 acs4baichuan.m.taobao.com tcp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 59.82.120.210:80 acs4baichuan.m.taobao.com tcp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
CN 59.82.120.252:80 acs4baichuan.m.taobao.com tcp

Files

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74BeginSession.cls_temp

MD5 bddaf9faabe6d3c945fc3390317b5c9f
SHA1 705ffae4cb3fcdfda7f7382de8e0a175ec526c22
SHA256 28a0ceba0403b1b20245d3a1ef62d76c21761848056595b824a000bc28a749af
SHA512 339ca2cbcd900a4e0aed34cc70edf34d4380341e1054d92f2fea8dc07313aa97b07d81fb3732682121acadb4de15b728d4fe7b1a1fbbe4543fb525ed9d3982c2

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionApp.cls_temp

MD5 09cd69fe2e5e9233ef98fcfb81fe4316
SHA1 ed76f8a2c9c83aa1046677db20e011470245de78
SHA256 f016dea8e6d80e9f04f8e4db88665183a28a339dba6d950ce4501892e2b40817
SHA512 45ca35e4e4e6863014dd36cb280ac5e7a4e006fd711e68652916473c5129580fbdab12c32a47f5ea257f2b0001cbf42b6b09ec5c85df299a1f69390ed595173c

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 4ae8126da6338d0dc868074bbd4230b2
SHA1 c9100fe1b8de0a1510e68a6fdd5e988edf67c43f
SHA256 ce8935da7df7cef6635df2891df545890da8dbacd9e95d80d5485e96e3a00e9e
SHA512 f891d70c30e0b7465896e89fa119faf5746af8119c1794aee206bc3bd6acc3e2aaef394d58651405633196b9e5ab4e64352ca8d73c693a3f6c679ff0fcdc318c

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 cff0c5b532a274bc6afb2d176e7b6197
SHA1 73cba2ac7fb8c9314034a4cbc0b0202af932e3e6
SHA256 f6d4083d204b3445da3a8ba1ce70e6d6d2e289bfed928d820de58c33a1ef9d54
SHA512 9c3c1419e2ae0d2792c616a525b119bf00002b79f0856940a42b222bec7f24a626ccc02f2fa0f49ad17adcd81f1210013717173f3be5fab89a2e477a926e1fe9

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6641BD5201AB-0001-10BF-F3A21F887D74SessionDevice.cls_temp

MD5 fbc537265828c27cfbee9b58726b1cb3
SHA1 65247c23b74bdd3cb31514691fb18c333d534910
SHA256 9506b16c6d8e1bde3a6f96266dbd628151e7fe635a92e8e61ff4711c86798e05
SHA512 e0733dda67f6cd22352ce0d9d6da1a29af0ec44eb57afeef23e783c2ba62e872be76e5a0366b8a2a825c3945d81149a49763560787ee37c8a410df695765ae50

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 376fcc9fb35269b8e40890c5b07dbf2b
SHA1 e446f5d5ed1f0821ac93231c3d4013b94b2648a4
SHA256 144e0d6c7c56b7e2784c022d406bd4efe497705ebef3f80cc80ca78557f5a006
SHA512 5838dfe49f04ffb1be5c51d2c3d4520856d6dbf9a28aee33b1a65d2f6f94516dbd0747b78ca84cf20665e0d411937c221e1c738816327bf7af6cfb315f09b2c3

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_e5f7b2fc-578e-4460-a36c-8d044b3b4f20_1715584338707.tap

MD5 4b766deb5a6dbb997656f8900ab032a7
SHA1 b7cca10a0a3f406ecc07ce3d1d2f109f5ac32d79
SHA256 a7b51a1ee6a7e66242508251219575377c2c31891b2950d83aacd120f8eebdd5
SHA512 f40fa4801ce0d89e246b70a37b0b89eb7af9fca2970871781f8fc9c2aac655cf2b5cb46f0fb64b9e9588a9906894c838aa99b56da0106c5c9d8a49454ce7fc65

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 d287dd603f509fee5ee5957df5c8bda3
SHA1 ce59b8682cb22fce62b91b4feac25280ae710ed3
SHA256 d767678b17fc63e56a35281ac8e331d43989105b757ac9a9c4592196c5566631
SHA512 78f8ca9edeab0398997267f60f8abab272cde0a0890813b23fd226c9a7e5c2bc301418a86a87f5df6087847d306f93498bfa746cbbc4d7aa87fc6c8f8ef900bc

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 26e872c7f904c2f290864fb029af8ed3
SHA1 7730eac4aa7416c15e6043a7522bfd72a83be932
SHA256 72b0cdebbcd4937d026543985d645f44b88b2cb726ede524841c372a35cdeb24
SHA512 e49a6da1c8ce5c4228d7bf54f908f3371930ff7a17aa25068703a2c91ebeefba9990f4ebf9ed2c3b57d1965a01ab2af516db19e6a5f6b91ea2fd03480d2b8f0e

/data/data/com.duoshoumm.ttshengqian/databases/ut.db-journal

MD5 6de2d6a225657bd18c0903d5446b68e1
SHA1 6b1e287b794dba3d1b983be4d35e6f1a7e2924fb
SHA256 a4e778d8dff5356a7c17f4b1796c0e7c2e17c7b26a7dda9f842fc8b5c9dbb48a
SHA512 7404f7a09f8494af4222ac18ee819534b7a7e84ca4d1ec73510b70ec8fcc1f62be3aa007a347b67fd56c1b19cd69d461554ba771c5ac76aba6567671bdb65a81

/data/data/com.duoshoumm.ttshengqian/databases/ut.db

MD5 38616785cca0600a03205f84fe330b4b
SHA1 6ac41a6bdcae297d56dac5fdde70be5faccf0832
SHA256 b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8
SHA512 7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

/data/data/com.duoshoumm.ttshengqian/databases/ut.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.duoshoumm.ttshengqian/databases/ut.db-wal

MD5 9dfa6447cef0832caf609e2c210e96b3
SHA1 cbb2669d30e3634c86828419ed50a7ce3b01363b
SHA256 1dd06332ee26a43773ffaaacfd2dea3900a5ef72d4b0baf4f9c78f598b94a074
SHA512 c2f617303b287bb67d196856cda752982b2087d3ece9dea05715455586ffda9959ff9e8c5e75273657923372d837efd6e8e5d79950df401b6fbad4e321bba7a3

/data/data/com.duoshoumm.ttshengqian/app_SGLib/libsgmainso-5.1.81.so.tmp

MD5 c85e8919765cc22095d1b8e40601e34d
SHA1 22d48933b9f30a028cf4c9d993f59c767f9e8e35
SHA256 f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e
SHA512 6715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e

/data/data/com.duoshoumm.ttshengqian/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 92dcc4ef5c1a7554cd324b8617cd5520
SHA1 38d9bffceb06e026836f63ae6bc53b381cb492ee
SHA256 ebab7753d111248836c8530769dc2394a2ce2097a1a18a2d53f7c8b89cd7a011
SHA512 6a488545c715cbbc58f9996cd38c5a7d5d6d8c87abdd7e0ce62d7dee56f142c55b498b0fd97b21a016efa40089a664c18bbe7d88ec28377c1c419e388052f66b

/data/data/com.duoshoumm.ttshengqian/files/INSTALLATION

MD5 882d84975921cfd0a1d4475387434cf0
SHA1 418ade291c51c5bd5839c5417751f7c616d922e3
SHA256 fe380b1c7a0a09a75faf7712711dedeb47d7846430d665bb118d4ae1e736a851
SHA512 5affe384ba5f4dfcf893d45371f056361d20c89c00d2aa670eb4af405a506a329e4d071668d1eebdee0c95b72ff714d98ff766fadb23867210c6ccf1bd0a21d0

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-journal

MD5 ae147f1cc8f108d1813ff5a918a96418
SHA1 5f8154a4a651281fc72063199d4ea6e880f05b8c
SHA256 1a07c054da6b6e60cda01f8d0554a35eea4cd9b6ed985bd97698a67b64e7735b
SHA512 71caa2e767e8a2bd910cd0f4190344a2ffd0c0f0d8e706b23b208aa0c581fce56a553336155ff9a95b4a72c513d9090e46543da9e5bcf638d6002f77cf823426

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-wal

MD5 1f42ee1bcd12ba43e935c0ab98ccacdf
SHA1 e510e4870abadb0554237703e0f4ff80c7027cf7
SHA256 07f7df0be0297f653f401087dc1772efdd9b3d3f7f06780e038db1acc02f062a
SHA512 28f71dc6d6ad327e5a3f78dca9d9e64b5ba6da55b72d32fed77a59003d59536d0dc68effb49882bb2f5ab7341c50425f560ad5af3483ff0ab6c159dcfe88c307

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

MD5 522947eaa37b029a247e3973f3be3621
SHA1 31c88e0d7c9b51904c0f598e80245bba41b1c7d9
SHA256 d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156
SHA512 f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

/data/user/0/com.duoshoumm.ttshengqian/app_SGLib/libsgmain_312768000000.zip

MD5 0c2f2989749ff3910446998637c28286
SHA1 054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3
SHA256 f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d
SHA512 72acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-journal

MD5 305d93d02504205d827dc151603c0b38
SHA1 1557d65ee3cebdbe8008323fcc838beb5bb948ef
SHA256 cac73f52ff0d62bfb5d0541f881d2db16b803e9cbe3eebdeca127d4bec73b9e0
SHA512 614912ae6ab4e5de16b5367490580f0487f75d820071beee7f661abdc9cad29ddcb0a65fc05317955c465a1a857eaa5f69a9daceda9558bf3edcb3a925ef2fc8

/data/data/com.duoshoumm.ttshengqian/databases/ua.db

MD5 92ff3e4651d8dc064b52067041a9a657
SHA1 7014c80992637d24a8abb94af51dc6da6ae78bb5
SHA256 e357416675d980596d1cd4a8e1cbfc649eb976e2bc3247782d6af5e522cc1c68
SHA512 b8bc5f01523590ec9f8c6190d0a83a0fe9146f9e87f3f661f791802711617a11d9b872725ad342bed73914cfcb3b659f2c963a7eaacbb78f237a825cd30fda22

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-wal

MD5 032026d7a9551b1d63bf0a3b8f20a5b2
SHA1 67907c1d6719a3e9267c12d16049e79c18e8d883
SHA256 66f7252aac631b9dea3b1f6a241b8a970fb68965d4eb0e5d5dc743d67c6d5f3b
SHA512 c3dd2888d8d0a1f142cc21fbb4c2e734b64e7bca70bf2559cafb3321ca3e3fdf276e211b24ed527b86509b7077d563dc18955c1e949cfc82c6eb18e2643971ec

/data/data/com.duoshoumm.ttshengqian/files/umeng_it.cache

MD5 4ce731ed0fa8eb37a8d977f75fb6d017
SHA1 2198002a87e32c71d50e835ba4a36f1d01705c50
SHA256 9a4efc9a457438ad889e73cdb8c5ac8d25c25d051d05350d8abf44886d02da98
SHA512 1ede679f97586a53b52d19b8ced8f976a60626e748c8bc7a84919952df8bf422cd4a0d5043c83fb28eebef8793bd33bd6a5e693b9caf75928d10a48713da3e34

/data/data/com.duoshoumm.ttshengqian/files/.umeng/exchangeIdentity.json

MD5 336526ac5c3541724759b56b2fe96eff
SHA1 9861b09dd9b1fcc3056fef28da0fe0784493caf9
SHA256 c4e90e98ecf7a004df04ad6df53a73cc8f1846f132e31f33ff16f44802c80988
SHA512 bbecb0de16bdbdf6a0fb2ece9a9d8fcf051ca9bb6c7e3a43c61e6888f566e8f4609d49bd714e1a6bcefd9fc812bf33f04ecc673787dd0e6695983c0e127430e6

/data/data/com.duoshoumm.ttshengqian/files/exid.dat

MD5 b52c191d5436efc4c6faf56fe926e2ed
SHA1 b0c174fbe13cc96bbd5a3ebfd19992a52c844394
SHA256 41e9b8a9698489fbe707380b7df5d2d368dba0ca4972fc3fe944902abcfc0e81
SHA512 1c0af7e6f89f6923a2136cb1c3192ed3bab54f914f6f6b3c79b0c4f9d72f4537bcbd2eadd5740e45b28f4ae45ced929a1fd195bde2621843ad854731ff3edc61

/data/data/com.duoshoumm.ttshengqian/databases/ua.db-wal

MD5 6033d5692bec572ccb4134e1f32eb021
SHA1 4fdcc58011fbf231e0250066458c0caec8929067
SHA256 adddea9473c36f6aa29874f27c190bacee0336cbccd9e903fba8cc96884f4f2c
SHA512 dec0376f4d690d60616fa390d019d5ace85dfd7d497c0045a2a9d3eec16896eef784dc5b757b12e9fdf0bec1f3e6c3162fd8311e3e36506959f8571be6cba9da

/data/data/com.duoshoumm.ttshengqian/databases/ua.db

MD5 d604a3bf1f8d992cc320ea5b1f7609bd
SHA1 247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA512 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

/data/data/com.duoshoumm.ttshengqian/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp

MD5 10760142380b34e358c396ca8d606a91
SHA1 b8d7f379c3e25bef6f24636fcb243d3baf2cbe46
SHA256 8a25b66e15f4054d677ad667d8eeb4db31ad09188884ae20cff78bfcafdd042b
SHA512 72105e76a0b2252434453074a966bb0f2ba849399bd9b3093004f3af47663003af614ec87ee3dd6d12cce0de9816bc1504a9859ced15c389c18601c36d66f9c5

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db-wal

MD5 7aa951d498ecab49ffa12e2c46a03daf
SHA1 21d4c26e4bf5112b0bc0c455064c8cc74b0d9662
SHA256 05ab10f6e2e649e596ed0a6ad9ed0394e796408fb44e4fc363192e1dc338c8ca
SHA512 9adbe56f2aafd97ed5c4e68b6018313bdc53e6ca5a9c7ccc27ee67ffd022ac1e06d8418beee21afc774b50d8f746b7c8a8ece3c3f1d09843df99fc2585b18d00

/data/data/com.duoshoumm.ttshengqian/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/com.duoshoumm.ttshengqian/databases/ut.db-wal

MD5 ef61f5d4df36d62c95dc099a90b5e3db
SHA1 872c4e05a6f9330b5b31713c60dc5a23282c5088
SHA256 c9b28276fc98ee3ef7b08598d2d1864324044327a29d02a5351ddcc3893b9e51
SHA512 fc73e07766f792f580c6e6e2f101be2ca1ed30a1b3cd20ab85bf3718401f40545769e42302890d02e5da4feea1322540259f83d8009a46002ba96bc0713a5e06

/data/data/com.duoshoumm.ttshengqian/databases/ut.db

MD5 c1770b4b7e955692fd8874b3b80ae885
SHA1 b24dae2ef4e6492865f35041cdf31d03f0b6cdd3
SHA256 d8ba2f929f6cd870691b24115a403c587ed54f70eaae85995e1d59c0af4dae36
SHA512 2177b621a71bf611c0cbff4c7f5c7dd1b09e2cae283bb4b1f295bdb642ad15b8230140968795ba08197eb2a329a5b0ed56a8353b8cb9a55f69a95e7ec1206390

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 f58f13d0fc991322df1eec4c68481464
SHA1 fac54fd6dfb4fa6e0b0f548eb024573dca8cd259
SHA256 1d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396
SHA512 e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 e226bf9446849dc009baa24a537ac74c
SHA1 b6b4de6d0febe5a29c94656ddbf85823f20d6204
SHA256 f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19
SHA512 0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 6a8863dd4be7802445180fb86132a879
SHA1 318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768
SHA256 003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08
SHA512 21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 0438489e26550304ace8e365664531ae
SHA1 cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4
SHA256 a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb
SHA512 6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 0990b5ce9e53d81abb914b5469082a98
SHA1 81e80de96645891c0cdf32bbaae5e26719ab0684
SHA256 9fba5c2847e203141f974fc9a73b2ea06f40a53285a510f8ad36b1c1f1a52daf
SHA512 76f856dc8e2b6d95159475a7203048ac4d2ec44b495bc2a481f779031eff0f42cd1866a24c69610153f38e2b265abcc6580851b05b20f792e80ba0efc7664c66

/data/data/com.duoshoumm.ttshengqian/files/SGMANAGER_DATA2.tmp

MD5 24d9b67addbfbf41288f6ae666ca706e
SHA1 61e45a3704523d03ed6beddf06e0c93af10635cd
SHA256 8fa30aa0b40f3a962ee260cfa05cc50266f12a27f4270ebda037274e85f98859
SHA512 a18df2004c041ac918f97f24196c3f63a04bb4bb60bfd2f78a12e9c9a5c40b316f3f6fe101ab3ddd4cad14f295e6f6f596e7359ca727ccaece7c3a46d554f6e4

/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

MD5 6a525c7b5a6d9f3c8ffb31237da73b52
SHA1 7cd53daec209a727434c32469c13f113138ded35
SHA256 6b80510c0eb13c085a5f4138682b3220b9557f8641a586286c1560b44cfc0ddb
SHA512 6eb7cd4f2c977ade8c6b0b9b431b0a3f8d2a5e5f67440ab3b796811c270462f92653977e1869ecaa9044446b5b371af16f24e9a38faca3df2889dfd7e03a5c1f

/data/data/com.duoshoumm.ttshengqian/files/21c22f492aba3de8.lock

MD5 a8d7bd264a0c0f46393e92b1e386884e
SHA1 e5dc3ee5b423804f94b0d472f4e085be71ce9c29
SHA256 a054f4380f498f3307d9409dd7069338de611cb4da7c43da0cb5f1e947db7274
SHA512 b44f5104eb4f39991d1b5c36048b2a7fa628028a5d3697697e91ee3aa0447275fa54ef9c0c96078d3b9a00f1c0503d1f0fd68fdcf602cf491832ffcddfee7b0a

/data/data/com.duoshoumm.ttshengqian/files/0a231bd8575dcf72.txt

MD5 42858a475878c7762cce5cf2709b14c8
SHA1 d71f9c5419942b826f560e0108889d76ffcf77e4
SHA256 93fe353b452cf0aad4cd6d08eb4becc05cdbbcc62abefa04655e82a45c164d32
SHA512 dae68b0426770772eb79ccb08e747afae517b22f45dfdf6258b2962f823aea2d31b9f5ddbdcf81acbc72a87b6cf5cee4ab26a76e359c13519b4adb4c087a88f6

/data/data/com.duoshoumm.ttshengqian/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof

MD5 975579398cf8d4b44132886625529bb4
SHA1 934be8e7dacdd7a2046bf291c129f091c07ce259
SHA256 38ce36a441b2ae8d104962b5b400842300f7fcf1d9721a64c917cf82e4da058c
SHA512 eb2e4b92ea8f15806f7ca5de8eed4d52ea2e1839e77b980be1860b22bff2994a8e8abafa53813b4ce275a1ea3a11bf2260493d63f7ebcf682e50a3f52786bacc

/data/data/com.duoshoumm.ttshengqian/files/.um/um_cache_1715584464095.env

MD5 5719abf58de10ecb7d459f97454e11d5
SHA1 5f773e14c241832a26824d7f5257f89b949bb0b2
SHA256 ed7ccc1f6c0e03bfebc676e84e566a157c2c5fbc31b80838ce641978fa07f643
SHA512 af074b6423ee70f1b55170e1b0a3a5871ab88d0f008c60370b021e737133bb95c0c15525910c44aa36ca6586be66153c16a7765fc8dab787932065c162d84bd4