Malware Analysis Report

2025-08-05 19:17

Sample ID 240513-mk17zaad7s
Target 3f0cd476ceac1deac45c501f4699c9e7_JaffaCakes118
SHA256 287fdf681e87f03813cb570c808d2fb0e0a5d448d7f875a68eeae409473098f8
Tags
discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

287fdf681e87f03813cb570c808d2fb0e0a5d448d7f875a68eeae409473098f8

Threat Level: Shows suspicious behavior

The file 3f0cd476ceac1deac45c501f4699c9e7_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion impact persistence

Checks CPU information

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-13 10:32

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-13 10:32

Reported

2024-05-13 10:35

Platform

android-x86-arm-20240506-en

Max time kernel

10s

Max time network

153s

Command Line

com.manyufun.myfapp

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/com.manyufun.myfapp/.jiagu/classes.dex N/A N/A
N/A /data/data/com.manyufun.myfapp/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/com.manyufun.myfapp/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.manyufun.myfapp/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.manyufun.myfapp/.jiagu/tmp.dex N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.manyufun.myfapp

chmod 755 /data/data/com.manyufun.myfapp/.jiagu/libjiagu.so

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.manyufun.myfapp/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.manyufun.myfapp/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 api.manyufun.cn udp
US 1.1.1.1:53 umengacs.m.taobao.com udp
US 1.1.1.1:53 amdcopen.m.taobao.com udp
CN 203.119.217.116:80 amdcopen.m.taobao.com tcp
US 1.1.1.1:53 plbslog.umeng.com udp
CN 36.156.202.78:443 plbslog.umeng.com tcp
CN 203.119.217.116:80 amdcopen.m.taobao.com tcp
CN 123.183.232.17:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 codepush.azurewebsites.net udp
US 23.101.203.117:443 codepush.azurewebsites.net tcp
US 23.101.203.117:443 codepush.azurewebsites.net tcp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp

Files

/data/data/com.manyufun.myfapp/.jiagu/libjiagu.so

MD5 e5a53000766ebc433b27d6a66ec4f555
SHA1 2c8f53f1c03aec2005bcad67d731f07261dabde0
SHA256 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
SHA512 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

/data/data/com.manyufun.myfapp/.jiagu/classes.dex

MD5 a36d039c45f644cc8fdf771e030b3f00
SHA1 f06bbf4710393ab5babb44a6cc1196468d636bdf
SHA256 0f7e6911b3ec1736fb6e07900758c9d3de2ce9275b2f6f190c5bc6f4c122a9ac
SHA512 e9859c5a3598506307d39ae433505f3d01e6828130044fda10728f236f50f4641fe2e35cf7c10a665c20a8b2df404e44706e6c51fa783554782193b5fa099af7

/data/data/com.manyufun.myfapp/.jiagu/classes.dex

MD5 50384487fd4b2de45cc8115af25d57a2
SHA1 cf1c3e996ef6a048d3143947e4f10c34d05fb081
SHA256 0060b45004c29da4e78760eb45b7715a0001128426f1cebf94ce919d6938f2a6
SHA512 24953696e7908aaffe371238bec7ab7388b77a7478aa66c4edc5b3b56ec453df137c1a897c6979881266637046cb177b0bcfe7c08047d69e06373f7fad49ed96

/data/data/com.manyufun.myfapp/.jiagu/classes.dex!classes2.dex

MD5 b958f4c48c270808ebe3f9b3d12336cb
SHA1 a5d863271e4332c80258fe3005acbd51b21905a4
SHA256 25dbd9a6aefa63b615411f1c330898febd33d6800ff81a698afa1ba56e8da175
SHA512 1ad217f2d11f930dfb73e615e7c7e414deed5bce4af0c4f144a13d50088db23bbd20d8f30f785c6dd6b47db872ec41e45a2d486e1c6fff4379dca383abe6d26b

/data/data/com.manyufun.myfapp/.jiagu/tmp.dex

MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ri

MD5 4c9e6a5fd5dbb9f483b5ca572f05769c
SHA1 9af222c7d505afe1690f87be60e9df061cec28bb
SHA256 cce412d8faef71f47b53ab28cb1922a271fee4ef0727c338a8ddee074f9d72e5
SHA512 572d8d76efb93c6caf9ec07c8b74037a45e36c7727c82ce3ce2999d86f8f7c47d84708b3e57b353ac0bb4bb414bee1279a816c90ce2adac4308f01e5be488914

/data/data/com.manyufun.myfapp/files/.jiagu.lock

MD5 4406d746387d655a1fcea7909e47cd53
SHA1 ee25b9a67d882564282a190ef74088ad23009def
SHA256 70634cc4338d4ba2ffe5f0653d6a75963a3ee4e9ea98ff1acc12ab6262c679bc
SHA512 3d7f579382c288e2b5deaeedd1f46152e38ff235b0b54dcefa40efbf8aa23a5d0bba6adf77eaee810225cc285b0ba0b152e8ed3dae37549ff624bc37cea8408d

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ac

MD5 fd83696a7d14d40193c4605a32f8372e
SHA1 41b4d928a0a3614232609009edb2dbe67280027c
SHA256 3e2af0ff4f12739495f3eb222c3281e4d1b1806c88daedc393f1570cc35c3e13
SHA512 02d26273a5c0db3afd68a44cac2a64e18e7985dc958f0b8856640af3545d20b6f19c9e78a5406333cdaf91560a3e32dbab7bc5d93b5392025e6a8b485e70e95f

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ic

MD5 796a7b29b040f2bfac9b01fc82201e08
SHA1 4188ad7a74d2d3268246dfb4bd51b7ee64ca2a62
SHA256 e510f98ea44ed3f51f9fd1b5b1be52fd72ba1f9a8c51ce72fa2a908f30dbde6d
SHA512 192fb273d449eb07aa749300aa468469b4a058170dce54199b9c87d1e1f4e96e02626311d3eb52998278f3656f56f857641ec9fd9432487ce59813f5de1a1638

/data/data/com.manyufun.myfapp/databases/MessageStore.db-journal

MD5 3cecafcd280558b8006c09d8fafd6f41
SHA1 c3fe47c15c9560339305bb69e968c7dd674563c5
SHA256 25745abca552095649317496e8923d4dc82a907f4baa991c57a8ec37ee1b22fe
SHA512 791dd66724703982f474e838a3fdfdca99cc67059598b8f29829e5510e06ea7a04c8b0c8e50e0617a4d8b03ef3b4d18b7dc180673fce50b20f9033747b6df69f

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.di

MD5 07fdd0b849a9bb93e8f0d355bcdd86d5
SHA1 16d42d7653ac8252bc2cf2de505cbe80d966b0fa
SHA256 44bab825ece78d1a194fb104bbd4e55c967fa604cae0bfac14f7445ad1fa4066
SHA512 f71b9c1b701993645d918b68a3912ff06f04ea24de88308a107ba4622807f46f5736c190b253fe10f8315a2b7300359cc9053986d1a791e25fa35e8eaa010476

/data/data/com.manyufun.myfapp/databases/MessageStore.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/storage/emulated/0/360/.iddata

MD5 fb0404e1898af1a9c1094edd50b23f62
SHA1 d7c00e89ff9f91a697b1a8847f80ec21a9533973
SHA256 8752117f6e050eb035de9a2e52ed049013aea2d1d3d2bfc35be2f239fe4957ae
SHA512 2cde42995499d40277025663b083f2776b680142abc2949f622b67f34b135ffde627b49ba1147da27d258b47c549589e1e894f2f2f5c2cd2cc88eceb47ff628c

/data/data/com.manyufun.myfapp/databases/MessageStore.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.manyufun.myfapp/databases/MessageStore.db-wal

MD5 bf12928786fa322c48f336a845357a68
SHA1 ec9d7b8449a722c4f722affc6e9d9c1f9dfc96a2
SHA256 2b81e0492aa5dc3b271d0cae58be47bc0619104ffadd6949244019c9123f6126
SHA512 3bc0ee7c38eb0cacc9f54309bbd3a91c886f1a7d2a913eb35776acb65c075a44f5289544da644ffc6d9cfe9ca86a6eb13acf433b44cb8f8f1cb70083434a23f9

/storage/emulated/0/360/.deviceId

MD5 1d8d16c4e3b19ebf18988530d9b9a757
SHA1 bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256 abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA512 4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db-journal

MD5 e9115c660f21a0d15e1cf7a29a5f4a13
SHA1 87af9f201357a0415b482ff9def51b5141f02110
SHA256 774d46a192960cd6ec0bba4f9caa76f2188b52c7ca45b451e9c2ce1d33eab6ed
SHA512 d7b0623afaf3f848f444c2ecccecf15c9419b0cdaee33ce0fe588d4eb09c225ab73e4dd34ebcdc699f5a9bd6d91ef48406397284f576afbde5c008f0856b5877

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db-wal

MD5 a2e57dcb3da78b32950e19e2ff6b80e7
SHA1 d93e5b29f225a9475ade0b2cf37b0e90e33bb284
SHA256 80d6b996c080964e619d7ec172a1ec6b86075ce28c8afcbd9bc91cd115d375dc
SHA512 74aeb114311fc03624d1bb99889fe633ec3abed83dca2792682f42f1df70daeb777fa2519c107ba20026f3e6dd70b6a3a99078f2171edbfe44e76a94ce11bedc

/data/data/com.manyufun.myfapp/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.manyufun.myfapp/lib-main/dso_deps

MD5 9a3914bb0b012b584410a6935c72b49f
SHA1 f6b4e00fd1ebcfcd1fee84547cd00453b133ccfc
SHA256 f8bff2dcc54c6d82c14dd923780ce2db49d0987cf60ea44ac1780a07d9893931
SHA512 363d9dd47ba24b57e6a3599891ddc504353e3b1e13233e47eb39389824885841ece1dc6edcb2742e3b4f01eed26d4d9b1ffd23757288136ce7bcfc8b22eb5ce9

/data/data/com.manyufun.myfapp/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.manyufun.myfapp/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.manyufun.myfapp/databases/share.db-journal

MD5 35b61a2b6f51281950e141b9ccdf2c2f
SHA1 b9b3a856e22df2e7d772fa07472d88d4b3e38176
SHA256 970352723fc546927b7eba3cba789b51332b19050fdddb991b730dd23149cb72
SHA512 cf0b3eed55e7e050452ea5e48bb4a11a6c34285a3f85560e00f195cdf890d1d6296bf0bedf587456183cac3703ed420f3a36a64ea29a8a31feddac97f05670ec

/data/data/com.manyufun.myfapp/databases/share.db-wal

MD5 042d1ceae570ad403ae4d30f60d0cdac
SHA1 e21f46e9579626762fe6bd2a3d8200bc274fcdda
SHA256 0acaf622621cfe1e0673b5896f7776c30fbedacf5875a52ee3e6ba054f629255
SHA512 6967a0f40bd7b99bb6ae4aa9c15f22320e6495dfbbc24878c06d4059df7f0145bcfff32ee46c6e9b79f457d6151db00b3477fa8e169b14e94d177c477ae6b19f

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-13 10:32

Reported

2024-05-13 10:35

Platform

android-x64-20240506-en

Max time kernel

10s

Max time network

131s

Command Line

com.manyufun.myfapp

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.manyufun.myfapp/[email protected] N/A N/A
N/A /data/user/0/com.manyufun.myfapp/[email protected]!classes2.dex N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Processes

com.manyufun.myfapp

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
GB 216.58.204.78:443 tcp
GB 216.58.201.110:443 tcp
GB 216.58.212.194:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

/data/data/com.manyufun.myfapp/.jiagu/libjiagu.so

MD5 e5a53000766ebc433b27d6a66ec4f555
SHA1 2c8f53f1c03aec2005bcad67d731f07261dabde0
SHA256 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
SHA512 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

/data/data/com.manyufun.myfapp/.jiagu/classes.dex

MD5 a36d039c45f644cc8fdf771e030b3f00
SHA1 f06bbf4710393ab5babb44a6cc1196468d636bdf
SHA256 0f7e6911b3ec1736fb6e07900758c9d3de2ce9275b2f6f190c5bc6f4c122a9ac
SHA512 e9859c5a3598506307d39ae433505f3d01e6828130044fda10728f236f50f4641fe2e35cf7c10a665c20a8b2df404e44706e6c51fa783554782193b5fa099af7

/data/user/0/com.manyufun.myfapp/[email protected]

MD5 50384487fd4b2de45cc8115af25d57a2
SHA1 cf1c3e996ef6a048d3143947e4f10c34d05fb081
SHA256 0060b45004c29da4e78760eb45b7715a0001128426f1cebf94ce919d6938f2a6
SHA512 24953696e7908aaffe371238bec7ab7388b77a7478aa66c4edc5b3b56ec453df137c1a897c6979881266637046cb177b0bcfe7c08047d69e06373f7fad49ed96

/data/user/0/com.manyufun.myfapp/[email protected]!classes2.dex

MD5 b958f4c48c270808ebe3f9b3d12336cb
SHA1 a5d863271e4332c80258fe3005acbd51b21905a4
SHA256 25dbd9a6aefa63b615411f1c330898febd33d6800ff81a698afa1ba56e8da175
SHA512 1ad217f2d11f930dfb73e615e7c7e414deed5bce4af0c4f144a13d50088db23bbd20d8f30f785c6dd6b47db872ec41e45a2d486e1c6fff4379dca383abe6d26b

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ri

MD5 7b36189ba150d583519e8a0c085b31e2
SHA1 c61a748096f2aec5e2ad6d197f681278cc0c2603
SHA256 30bd7ed89ea8511c183d5f5ab777f3e966d296f89e24bc0070c3eab11daa7275
SHA512 e1ee272c633b8a886a8b07aa32024d91a6a6da1d6eb91d2b08fa057ca476e74255da9a2c6a993e5ad9bf385f2ba0b03959e77073d3fb460ab54c364798b4a842

/data/data/com.manyufun.myfapp/files/.jiagu.lock

MD5 8ebbbc67a2d2b4e1d8830b7d72eedc21
SHA1 b390a68df12d1909ed35b3b5b4401551745ce2cd
SHA256 a6c456d55d3e68c6a83038761055f2980f7574b035d31aa33ea0602de6eafa6d
SHA512 56a405a2121ed5f2932e08500d848e3b17f36cd249e750062a0f4482b0b3348d899b538e076db8d5960eaeca11141cf8adc6cfaaf4cd90d5301af85f80a7102d

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ac

MD5 fd83696a7d14d40193c4605a32f8372e
SHA1 41b4d928a0a3614232609009edb2dbe67280027c
SHA256 3e2af0ff4f12739495f3eb222c3281e4d1b1806c88daedc393f1570cc35c3e13
SHA512 02d26273a5c0db3afd68a44cac2a64e18e7985dc958f0b8856640af3545d20b6f19c9e78a5406333cdaf91560a3e32dbab7bc5d93b5392025e6a8b485e70e95f

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.ic

MD5 796a7b29b040f2bfac9b01fc82201e08
SHA1 4188ad7a74d2d3268246dfb4bd51b7ee64ca2a62
SHA256 e510f98ea44ed3f51f9fd1b5b1be52fd72ba1f9a8c51ce72fa2a908f30dbde6d
SHA512 192fb273d449eb07aa749300aa468469b4a058170dce54199b9c87d1e1f4e96e02626311d3eb52998278f3656f56f857641ec9fd9432487ce59813f5de1a1638

/data/data/com.manyufun.myfapp/files/.jglogs/.jg.di

MD5 80d101c57b524e19d7c9661490dfd57e
SHA1 2b5b371e08cbfa202c381a435aaa03166acc2a4d
SHA256 5906611a3f1c06428464a7dd37f54fb9b55eb40f4225e7f4fd4700de65239e20
SHA512 67da422edd598698455895affab24db36919e455f6fd8816dbebf85c0d9b3fb60cf924fc7e132c9bb8f1f9477314afb1a5245c2dde717f2cb98a0225a87f1ae8

/storage/emulated/0/360/.iddata

MD5 b9b47c625b957bf0876eab788a52c0b3
SHA1 20253ab0e35ab083bba1842d74d8aff0977a3b43
SHA256 12dd79a1e6a645ec29706630d6aea4986cc6d68fe272ff3d34a43919ec5f09f6
SHA512 92a76802321a964df2f148eee3fc34944b0ef7c69c7a1f8e437539209c653afc60e1cc0b29719bb631f6fbe3aed336d746072bf27d983a992ae7a4e904152e4a

/storage/emulated/0/360/.deviceId

MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

/data/data/com.manyufun.myfapp/databases/MessageStore.db-journal

MD5 63fe9f82b2349ef8d2dafe4f0593d5e8
SHA1 99d7e71b38b20802a4042e94ba491683f3575ba6
SHA256 999e76e87e7b259c3e12551927ca8b4fc7f6787684d581b5ac6b202d7f5c28f5
SHA512 db8fd1730001083460bc5d32621183a903a6d87d4094c47add8564acb2347a96514bbae4ba599158ec0568a59f61e920b8d17c94fc503c299b5f950aaa169c97

/data/data/com.manyufun.myfapp/databases/MessageStore.db

MD5 15669eb47bb19111cb64fa7508b227d7
SHA1 c7585424afeb0fc7051697b771eb3d81e0e3aae3
SHA256 ecb0e8c93a782292a1dfe20a90e204d1c1c804e2773f1831c9ca34826aa62071
SHA512 13c2cb45912090ba0b670b36050eab5954e22d57b79e141d2236035dc1ea2000960d93ebc544fc4dee48765335a3d52baeb5d31c8a40407224c624fffebbc11b

/data/data/com.manyufun.myfapp/databases/MessageStore.db-journal

MD5 e6188b3670157ba6a48790a17d347c1e
SHA1 a797de0cdb3e7ccf07eaab6d450bf3e825f6ccb3
SHA256 8821cf7955a141a739da3013177e0e3ed7beee25417af20d08605e523d918211
SHA512 2ca9fc9f3a626e60387c7104d547ad4402233c28585b8d09f679f49c735c25f42fe1c0832ea5e43ad7d5203ebc37d2fc8ada045e1e8405a334b7b6bf64dd42fd

/data/data/com.manyufun.myfapp/databases/MessageStore.db-journal

MD5 8aa30575e97d4cab37f75978eca96b3a
SHA1 b8e5e2a7a414d667fd37e52af8d33bafffb5cf89
SHA256 b83cfea99d8a5b57b0eeb1c121cd22d4a819b981c7605c3e94828ec8e4d2c11e
SHA512 149d5f8bb41af6c36dfb6fc7e6d8fa44109c8307da100af98f308a35afb327751b92f00e56ab87e09304b5b350507c0d364585f3746993dfaeee15b0c3f040e8

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db-journal

MD5 301d35fdf4f4dff52ee4d57dfc0cb574
SHA1 64812b44bd3102ab003bf41e7b11fb53193b52ce
SHA256 27654e822c9612dbf539e3ea5ad392f76cee5ffade65d5360fee50ac43bfb985
SHA512 26a29c2b4e7aeaf794dc7faae1dfcccd73110cbb376bfaec7ac05150c6d8c0b190bfb7b9264a1718fa7dcdee2e6bf4ea6f135105740dfd373c9adcd6dc95630d

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db

MD5 9cec591e3ef91ae568f4cb6e7c2a8745
SHA1 ccf756b6b465ad9ad7ff6bfbeb4e8345ba3f6ff7
SHA256 05be88f05e9bfd4d6496caab584a704e7956fb87036529a0c8028f1e2bda309c
SHA512 f824b3268338787275c184bb740d152d53c1d8e57a044f587530735ef04d021a2671cc2aebb17ae3b497a0ad171060da484a565bfa62d32ed334ae5ffb538f51

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db-journal

MD5 2644fae0e4080e9a35291d4ee412bd82
SHA1 b0128ef12775ce8dfc06608c4b1c86296c9fe072
SHA256 fe29f43144545b9007cfdec9248145bcf13913e9d40fa68d9985e97901817143
SHA512 6f1790ed073b3c7a113945f95a349ecf351b3c7393d21ef21d074e0ed2667a7fe4f058d26ed29e2693034194734de6f1c0693a002adcd1c8204708a4c4074187

/data/data/com.manyufun.myfapp/databases/MsgLogStore.db-journal

MD5 b2d74790ff998a6682752bf6de4d0277
SHA1 8c7fb9b4e3712002a8b82738d1969173e9518957
SHA256 e73267caccb414d4a2b4c4cf0c9d416b015bcda9cb56daaf175b271f8fcd3fac
SHA512 7ed57c7abaea510267066d3aad323b3813ec2180255e4fe1c33f566ffd2ce822a3eb00c5a473d9c3cada7d6d079ce9bb68b65599543ea9b7e6db6b6fe65a4f0c

/data/data/com.manyufun.myfapp/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.manyufun.myfapp/lib-main/dso_deps

MD5 959311fdd2576c5975e869f1868859aa
SHA1 b3ab86b22547edeeb0a808862d9d95a140cd664d
SHA256 c89bc8cfaa1db05ab016cc0414e91865e5eb0f10318a64eecf4ea35ddea55df8
SHA512 8d1450f48340600ad16f30d52bf21cbb26c6960efee436c3ab286527f60e38b0cb8223d0e84913fcd8d5e1d89409e0c97c7d87271fa6b684142bd6acec326d1b

/data/data/com.manyufun.myfapp/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.manyufun.myfapp/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339