Malware Analysis Report

2025-08-05 19:09

Sample ID 240518-vfpblsdd7v
Target 55cd50682d35e8df0f5ff44662077c34_JaffaCakes118
SHA256 f73ee685d159cb5432ad675ff58565506d09ec90d0042e38676351e75249d612
Tags
discovery banker collection evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

f73ee685d159cb5432ad675ff58565506d09ec90d0042e38676351e75249d612

Threat Level: Likely malicious

The file 55cd50682d35e8df0f5ff44662077c34_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery banker collection evasion impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks Android system properties for emulator presence.

Checks CPU information

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Reads the content of photos stored on the user's device.

Queries account information for other applications stored on the device

Loads dropped Dex/Jar

Queries information about running processes on the device

Reads the content of the browser bookmarks.

Checks memory information

Reads information about phone network operator.

Queries the unique device ID (IMEI, MEID, IMSI)

Declares services with permission to bind to the system

Checks if the internet connection is available

Requests dangerous framework permissions

Declares broadcast receivers with permission to handle system events

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-18 16:56

Signatures

Declares broadcast receivers with permission to handle system events

Description Indicator Process Target
Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN N/A N/A

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x86-arm-20240514-en

Max time kernel

3s

Max time network

132s

Command Line

com.cm.plugin.internal

Signatures

N/A

Processes

com.cm.plugin.internal

Network

Country Destination Domain Proto
GB 142.250.180.10:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.204.67:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x86-arm-20240514-en

Max time network

4s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:02

Platform

android-x64-20240514-en

Max time kernel

3s

Max time network

131s

Command Line

com.cm.sgame.acceleration:worker

Signatures

N/A

Processes

com.cm.sgame.acceleration:worker

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:02

Platform

android-x64-arm64-20240514-en

Max time kernel

7s

Max time network

132s

Command Line

com.cleanmaster.mguard_cn.WeChatFile

Signatures

N/A

Processes

com.cleanmaster.mguard_cn.WeChatFile

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x64-20240514-en

Max time network

5s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x64-arm64-20240514-en

Max time kernel

3s

Max time network

132s

Command Line

com.pp.sdk.apk

Signatures

N/A

Processes

com.pp.sdk.apk

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x64-20240514-en

Max time kernel

2s

Max time network

133s

Command Line

com.cm.plugin.junkplus

Signatures

N/A

Processes

com.cm.plugin.junkplus

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 142.250.200.46:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:03

Platform

android-x64-arm64-20240514-en

Max time kernel

3s

Max time network

162s

Command Line

com.cm.sgame.acceleration:worker

Signatures

N/A

Processes

com.cm.sgame.acceleration:worker

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.201.106:443 tcp
GB 172.217.169.14:443 tcp
GB 216.58.201.106:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.187.194:443 tcp
GB 172.217.169.78:443 tcp
BE 74.125.71.188:5228 tcp
GB 142.250.178.3:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.4:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.187.238:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
GB 142.250.187.234:443 growth-pa.googleapis.com tcp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 142.250.179.225:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 142.250.180.1:443 lh3.googleusercontent.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 173.194.76.84:443 accounts.google.com tcp
GB 142.250.187.238:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 aoeqmrcx udp
US 1.1.1.1:53 pzbwiurq udp
US 1.1.1.1:53 yywbpmbpqycxcr udp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 216.58.212.202:443 mdh-pa.googleapis.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x64-arm64-20240514-en

Max time kernel

3s

Max time network

132s

Command Line

com.cm.plugin.boostplus

Signatures

N/A

Processes

com.cm.plugin.boostplus

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.169.68:443 www.google.com tcp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time kernel

2s

Max time network

131s

Command Line

com.cm.plugin.core

Signatures

N/A

Processes

com.cm.plugin.core

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.42:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 172.217.169.42:443 tcp

Files

N/A

Analysis: behavioral10

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x64-20240514-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.200.42:443 tcp
GB 142.250.200.42:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:01

Platform

android-x64-20240514-en

Max time kernel

7s

Max time network

145s

Command Line

com.cleanmaster.mguard_cn.WeChatFile

Signatures

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Processes

com.cleanmaster.mguard_cn.WeChatFile

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 172.217.169.14:443 tcp
GB 172.217.16.226:443 tcp

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:02

Platform

android-x86-arm-20240514-en

Max time kernel

2s

Max time network

131s

Command Line

com.cm.plugin.news

Signatures

N/A

Processes

com.cm.plugin.news

Network

Country Destination Domain Proto
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 tcp
GB 216.58.212.227:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x64-20240514-en

Max time network

148s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp
GB 142.250.200.46:443 tcp
GB 142.250.187.194:443 tcp

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x64-20240514-en

Max time kernel

2s

Max time network

146s

Command Line

com.cm.plugin.core

Signatures

N/A

Processes

com.cm.plugin.core

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
GB 216.58.213.14:443 tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
GB 216.58.212.194:443 tcp
GB 142.250.180.14:443 tcp

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x64-arm64-20240514-en

Max time kernel

2s

Max time network

147s

Command Line

com.cm.plugin.junkplus

Signatures

N/A

Processes

com.cm.plugin.junkplus

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
GB 142.250.178.14:443 tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:03

Platform

android-x86-arm-20240514-en

Max time kernel

3s

Max time network

155s

Command Line

com.cm.plugin.screensaver:service

Signatures

N/A

Processes

com.cm.plugin.screensaver:service

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:03

Platform

android-x64-20240514-en

Max time kernel

2s

Max time network

190s

Command Line

com.cm.plugin.screensaver:service

Signatures

N/A

Processes

com.cm.plugin.screensaver:service

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
GB 142.250.200.10:443 tcp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
GB 216.58.212.226:443 tcp
GB 172.217.16.238:443 tcp

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:03

Platform

android-x64-arm64-20240514-en

Max time kernel

3s

Max time network

164s

Command Line

com.cm.plugin.screensaver:service

Signatures

N/A

Processes

com.cm.plugin.screensaver:service

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 142.250.200.2:443 tcp
GB 142.250.187.206:443 tcp
GB 142.250.178.3:443 tcp
BE 142.250.110.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.200.46:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
GB 142.250.179.234:443 growth-pa.googleapis.com tcp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 142.250.187.193:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.167.84:443 accounts.google.com tcp
GB 142.250.200.1:443 lh3.googleusercontent.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.169.68:443 www.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
US 1.1.1.1:53 rthkltxnol udp
US 1.1.1.1:53 evfxrygrcyhm udp
US 1.1.1.1:53 plquzyivcqpnje udp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.200.35:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time kernel

2s

Max time network

150s

Command Line

com.pp.sdk.apk

Signatures

N/A

Processes

com.pp.sdk.apk

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.10:443 tcp
GB 142.250.200.3:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 142.250.187.206:443 tcp

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time kernel

7s

Max time network

169s

Command Line

com.cleanmaster.mguard_cn.WeChatFile

Signatures

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

com.cleanmaster.mguard_cn.WeChatFile

Network

Country Destination Domain Proto
GB 216.58.213.3:443 tcp
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 infoc2.duba.net udp
CN 139.9.43.12:80 infoc2.duba.net tcp
CN 139.9.43.12:80 infoc2.duba.net tcp
US 1.1.1.1:53 cn2.cmcm.com udp
US 1.1.1.1:53 cn2.cmcm.com udp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 142.250.187.202:443 safebrowsing.googleapis.com tcp
CN 125.44.162.146:80 cn2.cmcm.com tcp
CN 125.44.162.146:80 cn2.cmcm.com tcp
CN 125.44.162.146:80 cn2.cmcm.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.169.68:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.180.3:443 update.googleapis.com tcp
US 1.1.1.1:53 llaxzzzi udp
US 1.1.1.1:53 yklddqaj udp
US 1.1.1.1:53 rsuyruhg udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
CN 139.9.43.42:80 infoc2.duba.net tcp
CN 139.9.43.42:80 infoc2.duba.net tcp
CN 125.44.162.130:80 cn2.cmcm.com tcp
CN 125.44.162.130:80 cn2.cmcm.com tcp
CN 125.44.162.130:80 cn2.cmcm.com tcp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x86-arm-20240514-en

Max time kernel

2s

Max time network

130s

Command Line

com.cm.plugin.boostplus

Signatures

N/A

Processes

com.cm.plugin.boostplus

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x64-arm64-20240514-en

Max time network

7s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:03

Platform

android-x86-arm-20240514-en

Max time kernel

3s

Max time network

140s

Command Line

com.cm.sgame.acceleration:worker

Signatures

N/A

Processes

com.cm.sgame.acceleration:worker

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time network

3s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
GB 142.250.180.10:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time kernel

179s

Max time network

190s

Command Line

com.cleanmaster.mguard_cn

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.hardware N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.news/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.boostplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.boostplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/plugin.apk N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.boostplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/plugin.apk N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.news/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip N/A N/A
N/A /data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.boostplus/version.1/bundle.zip N/A N/A

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccounts N/A N/A
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads the content of photos stored on the user's device.

collection
Description Indicator Process Target
URI accessed for read content://media/external/images/media N/A N/A

Reads the content of the browser bookmarks.

collection
Description Indicator Process Target
URI accessed for read content://browser/bookmarks N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.cleanmaster.mguard_cn

com.cleanmaster.mguard_cn:service

com.cleanmaster.mguard_cn:download

com.cleanmaster.mguard_cn:worker

/system/bin/dex2oat --zip-fd=65 --zip-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip --oat-fd=66 --oat-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.dex --instruction-set=arm --instruction-set-features=default --runtime-arg -Xms64m --runtime-arg -Xmx512m --compiler-filter=verify-none --inline-max-code-units=0 --compact-dex-level=none

/system/bin/dex2oat --zip-fd=73 --zip-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip --oat-fd=74 --oat-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.dex --instruction-set=arm --instruction-set-features=default --runtime-arg -Xms64m --runtime-arg -Xmx512m --compiler-filter=verify-none --inline-max-code-units=0 --compact-dex-level=none

com.cleanmaster.mguard_cn:service

/system/bin/dex2oat --zip-fd=60 --zip-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip --oat-fd=61 --oat-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.dex --instruction-set=arm --instruction-set-features=default --runtime-arg -Xms64m --runtime-arg -Xmx512m --compiler-filter=verify-none --inline-max-code-units=0 --compact-dex-level=none

com.cleanmaster.mguard_cn:service

/system/bin/dex2oat --zip-fd=68 --zip-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip --oat-fd=69 --oat-location=/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.dex --instruction-set=arm --instruction-set-features=default --runtime-arg -Xms64m --runtime-arg -Xmx512m --compiler-filter=verify-none --inline-max-code-units=0 --compact-dex-level=none

com.cleanmaster.mguard_cn:perms

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.cleanmaster.mguard_cn/files/kwatchdog /data/user/0/com.cleanmaster.mguard_cn/files/kwatchdog

ls -l /system/xbin/su

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
GB 142.250.180.10:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 cmdts.ksmobile.com udp
US 1.1.1.1:53 infoc2.duba.net udp
CN 139.9.45.223:80 infoc2.duba.net tcp
US 1.1.1.1:53 cm.beha.ksmobile.com udp
US 1.1.1.1:53 sdk.mobad.ijinshan.com udp
CN 116.63.8.35:80 cm.beha.ksmobile.com tcp
CN 119.29.49.113:80 sdk.mobad.ijinshan.com tcp
CN 116.63.8.35:80 cm.beha.ksmobile.com tcp
US 1.1.1.1:53 ups.ksmobile.net udp
US 163.181.154.216:443 ups.ksmobile.net tcp
CN 139.9.45.223:80 infoc2.duba.net tcp
US 1.1.1.1:53 unconf.mobad.ijinshan.com udp
CN 119.29.49.113:80 unconf.mobad.ijinshan.com tcp
CN 119.29.49.113:80 unconf.mobad.ijinshan.com tcp
US 1.1.1.1:53 ssdk.adkmob.com udp
JP 47.245.25.48:80 ssdk.adkmob.com tcp
JP 47.245.25.48:80 ssdk.adkmob.com tcp
JP 47.245.25.48:80 ssdk.adkmob.com tcp
CN 139.9.43.15:80 infoc2.duba.net tcp
US 1.1.1.1:53 cmdts.ksmobile.com udp
US 1.1.1.1:53 pluginsup.cm.cmcm.com udp
CN 114.116.214.7:80 pluginsup.cm.cmcm.com tcp
US 1.1.1.1:53 log.cs.pp.cn udp
CN 203.119.175.208:80 log.cs.pp.cn tcp
US 1.1.1.1:53 dl.rom.rule.cmcm.com udp
CN 125.44.162.146:80 dl.rom.rule.cmcm.com tcp
CN 139.9.45.223:80 infoc2.duba.net tcp
JP 47.245.25.48:80 ssdk.adkmob.com tcp
US 1.1.1.1:53 ups.ksmobile.net udp
CN 125.44.162.130:80 dl.rom.rule.cmcm.com tcp
US 163.181.154.216:443 ups.ksmobile.net tcp
US 1.1.1.1:53 hydra.alibaba.com udp
CN 203.119.175.226:80 hydra.alibaba.com tcp
US 1.1.1.1:53 open.sjzs-api.25pp.com udp
CN 203.119.175.208:80 log.cs.pp.cn tcp
CN 203.119.175.233:80 open.sjzs-api.25pp.com tcp
CN 203.119.175.226:80 hydra.alibaba.com tcp
US 1.1.1.1:53 register.xmpush.xiaomi.com udp
NL 20.47.97.231:443 register.xmpush.xiaomi.com tcp
US 1.1.1.1:53 ms.cmcm.com udp
US 1.1.1.1:53 cc.cs.pp.cn udp
CN 203.119.144.5:80 cc.cs.pp.cn tcp
CN 125.44.162.145:80 dl.rom.rule.cmcm.com tcp
CN 42.62.94.2:443 tcp
US 1.1.1.1:53 resolver.msg.xiaomi.net udp
NL 20.33.39.99:80 resolver.msg.xiaomi.net tcp
US 1.1.1.1:53 cntj.zj.dcys.ijinshan.com udp
US 1.1.1.1:53 lc.cm.ksmobile.com udp
CN 120.46.173.48:80 lc.cm.ksmobile.com tcp
CN 116.63.8.35:80 cm.beha.ksmobile.com tcp
US 1.1.1.1:53 rom.rule.cmcm.com udp
CN 122.9.39.216:80 rom.rule.cmcm.com tcp
CN 203.119.175.208:80 log.cs.pp.cn tcp
CN 114.54.23.2:5222 tcp
CN 203.119.175.233:80 open.sjzs-api.25pp.com tcp
CN 203.119.144.5:80 cc.cs.pp.cn tcp
CN 116.63.8.35:80 cm.beha.ksmobile.com tcp
CN 111.13.142.2:5222 tcp
CN 139.9.43.15:80 infoc2.duba.net tcp
US 1.1.1.1:53 cmdts.ksmobile.com udp
CN 111.206.200.2:5222 tcp
US 1.1.1.1:53 app.chat.xiaomi.net udp
CN 58.83.177.220:5222 app.chat.xiaomi.net tcp
CN 124.71.209.131:80 infoc2.duba.net tcp
NL 20.33.25.54:5222 tcp
US 1.1.1.1:53 infoc2.duba.net udp
CN 121.37.247.153:80 infoc2.duba.net tcp
CN 139.9.43.15:80 infoc2.duba.net tcp
CN 121.37.247.153:80 infoc2.duba.net tcp
JP 47.245.25.48:80 ssdk.adkmob.com tcp
CN 124.71.209.131:80 infoc2.duba.net tcp

Files

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 bf09508c8def1cf2da5a303abeb12465
SHA1 dd990a81129013be27e5c2043fce492f007c0d6a
SHA256 10487d86ce3584e156874ed9b2650e8d772a8d1fdbb1c9111bf7e2fbcab18ccb
SHA512 5a91d2ac619076c5eb6aae55512841d76b6442f98e23372660e854dc5b32784477e504f2fd620c9328711b682b8a21a0173cfd0c42a96263006e992d8483193f

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip

MD5 42ba2b313c6dcb297da5aeb5efa8280b
SHA1 d5eabf6aeb11fce013fd2dcd72dbb703a1c21321
SHA256 c27fa6de6342d07843784df16603da49662b86c4e80ae8f509b3a845f485fdd1
SHA512 b4460e2fdfa894d20262fb360be8e173d430c6c962b4f2917865adaf8b659bf9f9f282ee24fd92e21f19753aec7647f41094a57dda8075054af5d64357812fd2

/data/data/com.cleanmaster.mguard_cn/files/kfmt.dat

MD5 45c6aa9a1273f234d4abcf5e6c0864ec
SHA1 c96c737527082631e57c5328c5d4d010a357a9d5
SHA256 cb7ac5b3e719c7628fc0824837f8dc04514bf99669ace3052438813cf8469ae4
SHA512 20ce897fd537b4eae52b5adf907371acf7c84463e2c3f93003511b3e2f5877d935b1aab5825e8f83769f999d8fb2215b0591912eb7a5840976240232b3c472b4

/data/data/com.cleanmaster.mguard_cn/files/kctrl.dat

MD5 ecebb3af7c155c77b1f5c3ff69d097ec
SHA1 8bda784378e6420101c646c74a12679eebf6492b
SHA256 4ace31c7a9c15c0a40f1ee7a5ac105d8e6a0c205ba4f44ae9bc3e792e2b9537f
SHA512 d3ee42cafeb50752fb21da73e5b12dde888e500701d4a8083e4d1cb63884b8479107cfdbeebb5110a4ea4a4bb3b3788ef25f7403d1ffa6959f43ee2d3d42109d

/data/data/com.cleanmaster.mguard_cn/databases/downloads.db-journal

MD5 3690615ca66b33dca3af066107591941
SHA1 96ffb1c5e560304b01a3a49043f8d13e050649ac
SHA256 05262e56228606e10b349771daa9eec14594ef86ed0b9d044b8db6006815c539
SHA512 7417d19ea91d07be692b5ea6688fdcf27b8dfbc54482da7846ef0f9359772bdc475b6e1edd32553247bc073c36a8024a9fab716870b8ac4207911b7993b3cc96

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmutil.so

MD5 b1229725d9e55dfe3c4faa16dc686a37
SHA1 0fa105e6ce2e42a021dfb3e7dc250da5222d3d4e
SHA256 294c3f6c792dd84bfd6efe5a9a140c2c60a4844eb2cb2332decaa8bbd923db84
SHA512 899ec87618f5fd3035907f297dc14030a0a345d8d8b388738927c7b53c20ea14e79cc40a8789cb5a9c699bc7feb4f4f3580420d35d4055367b6d730a4183fcdc

/data/data/com.cleanmaster.mguard_cn/databases/downloads.db-wal

MD5 417be1d83b3123ce57f8177c3fd73663
SHA1 0391898be354d328cd17337c33064fe6967201e8
SHA256 e4a73dec8da96b3a7e358d4fb842f9c10c581f7ddb255fcc4285a1660883edd3
SHA512 4a26c7a479ef9affc1a56b33ba09742d44abdbdd62704ef7da27b544d36a93c545e7d400d3bbc77b1a216f68b2db0b1146d0fbbb24578a99f3890ed040be9dd6

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmutil.so

MD5 da88975d67f223796682126f93d8c858
SHA1 9c618302d4c7767e5eabcbeda9465129f9acbb7f
SHA256 4989dfcff97f54a8cc2d37f8c43565c7783cab4c1db84d585f1345c177717f7b
SHA512 05961818b7e28976517066e9e4e59859ee05466eccb65794e3580989df2f1619cc6f967b28fbf24e981631628e1639d19f4e141615fdfd84549cbd02221624cc

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/meta

MD5 c52416ed55df9f04feb4cb8ae6a68c2c
SHA1 17ad650fb800a4daa3e9ea0adf3310f46e3676fe
SHA256 0d1f3aedbbe9b64861cf2828b3a3518c27011619f51d446c4530154af6f750b9
SHA512 aa81fae45d05aa4d26e99d5a432a5eea0ef6dac395c7bf8641ff4251bd010b20f0343bfbb4402012e552d439ad1993723b79276310330fe860e705ecadda1710

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/meta

MD5 ea3b01a17a4b81b9b4b56a9fadda00b4
SHA1 e3bc8e67ded61c7cea4ec12e890c17af4a110dbb
SHA256 ac21c00db735850ba7f6bae7f4128fc7a6af22a2ebc4e2cd8bd7661a5f8a6d5e
SHA512 c5e1711dc63d7ed5eb61af996593c038469737b34c8a67e4e9093bbe29bd5168f3cc5324f6c5b5d763ef80202c95e26601b9844e924c45b6fc3863fe2cfc0ec3

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 84290cb734bffa4398fee3f79d45e183
SHA1 a3ad9b40c7d7030002a8aa742a8294a7dd9d8952
SHA256 4bb1b7fd8e0a408b9b0679a0fc5b9e4f9640381b52d48674f283ec0e162d17ec
SHA512 a7727cf749c9a27b8bf6c4f8fff00d120dc45cea3b461dc4137270f027446b14c03648269470f7ee732c0ab491c1831023829ba77b0855d779048ffec9f76d81

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.core/version.1/bundle.zip

MD5 7c75388c09cc5fe38952ced78061c581
SHA1 9c23ed1b3b4c049974529dec27c103cbb618e97d
SHA256 e1714de5a3ff72e6bcb271c441c3d64b74f44dacd82b2d83582a9e5b23613546
SHA512 b9b6bb68ff23d59136e511384b768694d22f6eace46905c9e9be3e187257e6206029f4278b245f400a6701fd05fe96bc2d554c04880027e1fd8ba14f90d388fa

/data/data/com.cleanmaster.mguard_cn/bspatch

MD5 cfbfa1f79f021692a50788e13f1fa952
SHA1 38f7a30dc0bed600de1f5f69c67dde1696e55547
SHA256 691f906646872951e47119784d162dced5f2b1f8c0ede04f6ce3b95bc1f35063
SHA512 6f0787d6e7b7e3bfc4df24d587a03283d75dd3f94df74e22d1f349a9ae0a7f392da60d811bc229ba8c7bfe33d881ca02069a983b47656fbc0a5b815bef616e9b

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip

MD5 1a30738f5ccd80a7e4a0f6c8c6ce07cc
SHA1 608fb5d541f3b4ca3a2ea3a724bc012db220cec2
SHA256 49ee4aa166de340d994e2de958f57e03908cb3b3b7fa49e85a75ada0b8d903d4
SHA512 7ca44016e74fa5a9c18efb1fda98eb6a5ced13fd26c25404d69955f29e14fc602c8c539628df65f33e0f98ef8b93b8679e6d34012172ef2057ec3254923e04d5

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmutil.so

MD5 e92d9dbcc9c108d71907ce9d5689dfbf
SHA1 4154bb062d77f7e46ac770b3929ec1f5a6673099
SHA256 b3648b3bd81c7927f3875cb4b7c01323046fbe765e43da7d8aa330e289de887f
SHA512 1cd05855e9b99d135a4654f616f2538632ea13142d620d15e19f084730e97da5a8619ae5b6fe9040d835bbb403e6edbe142dac22234f0f1d47bb929d7b92e885

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/meta

MD5 927be30e0fec54f24d0b98eb5f36f4e7
SHA1 cee18dbd11e5c7884664dfbc1961807ecbfc1cff
SHA256 405691e549ebf81952d1970f9b2eccde0a3f3f1b5a8f0eb266ce1239c25b3de1
SHA512 bd289a9a620a343ec50206d1e4b4c8a1a8bc737fbeaa5c9d636964db61a1532557ae878e8ae29d9604566976602528c7180dde1f4b26c307a4b901e61bd2503d

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/meta

MD5 7a8fbfa8274a93449e0c99f2d6012af1
SHA1 687b25a55f38f5bad743e6a44138cd4491d0801a
SHA256 b0111354d63b244837cbd2594684cdb6f35a0771c615cbd6d5880be6b79217c0
SHA512 5743b30a6305f5e737d19b7bd4e667e48305904d4ae1e83f69ec68cb34a8c9a454032440ac84879e3041d365419dfdd3f780547811eac063a416020aa36c193b

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 fa98f3f8673b1baf1df4682fed03389a
SHA1 583a3e40ed4d827907bf01916151ac1951bd699e
SHA256 3fcc4a4e80b9e11cd279a20eabbcc1bab77fc12891e64cfa6669831644e612ae
SHA512 69454d5c53a53899616c3540c2f94a00d3b495b923fd7cb8d46a2df0d4524f3fb6a6497a936a9804d560e60eff37b1c3e09400c15fe1b0681835bb3590b97111

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_plugin_inst_state_1716051439638.ich

MD5 a0a5b7b696a3f0badb29625aee39869a
SHA1 42710bd9765df57af0a6910e358e7c4c8b0435f5
SHA256 78b4751afdfd592bafcb78c80e6ff5474462eaf402361d90d3059287e3fe250c
SHA512 89be6db217562d96512cf5f4b307dc6a4a79978292e7b9e397b47aea4ac6e7e7653c71b422a63a4b7cce75d3b94bdb8af14d02c65a852d11b17b9a07eff0cc46

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cn_plugin_inst_state_1716051439776.ich

MD5 43fc21cddb3897433c34620b9d02a7db
SHA1 9111e52ed73008d2e5f99e54e8c93e3cb3ab62fa
SHA256 d4508235a23f897ffebd05c660fe3e21cbcc5610b64e31792178893d9690c0af
SHA512 9478246321bf5c0a3c890883d68a1146ae37626d9a31effbba7e850ccbd394093d43913ea75b850596de2990447467db853f59fc2abb31ff6169b2f604b419ab

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/bundle.zip

MD5 58aaf20a9596605d6a3e0a8b56062d46
SHA1 2c0826a8906a6739490646a7674cc2e066ed906b
SHA256 9993ef655a9577fd787d8a0571ccb24a388674946957fb452f11484c299026f2
SHA512 9d48830e13c406d1d9f1aefdc2dae4734b5829d0dde785c8e3a063732a9cb1ee7c2196c2dfd28139ffa291dbe5831551a57e9f8bd296f0cc62e89f5fa7bb6ac9

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/version.1/bundle.zip

MD5 12d68dfd3ae18a8a717d0c67c88a9164
SHA1 6e738d8e0a7528e2589c2db20121eb23bf1386ab
SHA256 649015fb1693cc044bac078889a5551199e1412d398b8b0163d687e9bb2a16e9
SHA512 a5a475de80d11202a7afa341cbe3bb2fd351190cd4af875e5ab65686e1049f9e27dc2bd94b93d218b1081597f5459877e94449d916dbe37ac8bfbfaef0d65401

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_plugin_inst_state_1716051441178.ich

MD5 0f7d2eeeb5fa1c740d12bc861632d2d8
SHA1 5ba19baa7853d87e40becbe68d5ca47a8e8f2c46
SHA256 f2c257f5c171cbf5b457b98f19a66dd8381c05fda69b8fb8c6d89016aa817504
SHA512 7bde9350ddedb60c69098ce5cab5de459654910395cf53e99444080903f67dd93b4567e5718bc0e0866de83da83f45b206950d29d60e4c14e3218e7e5f505d94

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/version.1/meta

MD5 9a668db2f6b2de717ee3ac42e2207a78
SHA1 53cf58bd6bad6a3fdd0e6bc4593b29958c02c19c
SHA256 661ea3921b581587f647acb7069fbcf6af5e43cabbcb64e9ead9b99e7d347dcf
SHA512 5545d692612e194c30fb5e39bab801732ff2360dcaa360719fbc9d984696d403b45fe47e251727288b9b227146f9127188c0728f1a45cf35406007aac6566619

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/meta

MD5 855d97d092686f0ef8f3162282364fd5
SHA1 f91df258f2815c2f1dbdb22cd8cde9240bba3224
SHA256 7416b92a598a79dbcb6abb119a379d0b078f381732a3a3efab5601f229c1ea3e
SHA512 efaf012637a5461e0bb1d45ab442337789de5060f0c6a0318344c7258fd4e4b68a2d21665e1f23409962b45c71394cc0a52e3fa296fc2e1ab614fa1c84bc7879

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cn_plugin_inst_state_1716051441353.ich

MD5 64583359883488797b49ce7f87940c26
SHA1 43151ed9ef2b944f2e34cab38c42d462cfd6d86a
SHA256 c0570ec45a174e6a88bc73c0f1a66352d4f1e604a25b8ea0be50d685826c5700
SHA512 899b67c1b3e28b055f94379539075b180386b01b15be3ad2ee206c7c998f7d62b0a8cb832463c749cb5bd58f9560312192975c8cf89101c8825c7024d6631925

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 fd52a9a7d386e7e260dfe7845a39f28b
SHA1 7b9eace6479a0a7ec05b7c98bdbf3a27ea26cda3
SHA256 8a36170ecf904f2d4c2059aebb43ea66e6bf68cfbebfd601436e10bd3b98ddf3
SHA512 46f97cd002a79870b0d87220700bbc1af6b6184d5d7de41d8d9f3bc96c60ccc8839d6f7714d06eae858dbdd50559133dc3eaf7c600844e281dbb8796a94b7de9

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_xiaofuction_1716051441463.ich

MD5 ccd9d87c22da04f737c7d2d59004e3e6
SHA1 92509907f3901701854a20d025a59e66f687a7ee
SHA256 1f415512bd193266a2fbbdefcb0dd5ba033cc8d661081eff64b33bba35152876
SHA512 6b146db7ac5bf67cf88ffd3e20db0796447d5cb7ae3ee6df6d214443ce648ec52b30cc6d094f369f118086aad2938d5c799dc54961d748a0e8cf17cb00ca080c

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/version.1/meta

MD5 bc52d527da3d1b72d585d74054d941fd
SHA1 aed27556b82d56d27eb6e373d83cacc20433d964
SHA256 fedec1b2b289d6e55858eb4bbaf7ed4f9f0e97e9aa3c6235f99fe57df07789b1
SHA512 7819a6562f580a8b1364ac08d3522b6a9c8f55f4746cf2dfb9327711036485decd85a7212e26cc3e7ec9f7a50a38347937c854181cacd98a25679fac0e02f9d8

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.junkplus/meta

MD5 807d6b6c202112b9ff5ba73351894bd8
SHA1 29dc6374f2dbe1575f71f111535bdc4c533b771e
SHA256 11903c20d068be851a4ee9085e5d0c586bef30383bb3ebb54ce25a34be221faa
SHA512 89cab47065785e71257498ebebc4da7691a3f2b86f841fd0ede6e1de1371c070406146972d3f42cd83fcdf6dc1727b62d757462df8724a2ecc295d1cd5521046

/data/data/com.cleanmaster.mguard_cn/databases/diskcache.db-journal

MD5 6c599fc97f3902a420587c2ee4cc74d4
SHA1 3844b75e937f60d1f3aa8e3786adcb9b9de4478f
SHA256 713436fd59826478bdbc459648f86dd343d0521055537f1d9a16258b4c69223e
SHA512 78cfd1e143528b086d4f3e2e2ecfe36ec03b3294607834f52caba2753037510a9522b6602873d949807495a21ee0baa756527f4a3444daef6696c68a9d9bfb1d

/data/data/com.cleanmaster.mguard_cn/databases/diskcache.db

MD5 bdb13eb8c88b1f1922cd6de298e2ac84
SHA1 a1ba77306f0a4994ad5197b1da5512b7cf073927
SHA256 3369000db45014988eeb94332cfeea05a32db54e00e1322fc0408dea87429a93
SHA512 c84daa30e13995a95a0ebf11004cb371cf0458ba20b7fa2f9739e21c7ab21a701073cd480dc08b805335e59d3a317db4885adb570bb882bdcece796b291318fb

/data/data/com.cleanmaster.mguard_cn/databases/diskcache.db-shm

MD5 42079a0df71a4572bd21d72ef4018a6b
SHA1 0d03bc3574a9f10bff65e7c8eb2e6edec226b881
SHA256 3abdaf6574d7f42cc213a5b5e0630a81077e7e34af668c86e2da556728c6c96b
SHA512 246ec392977e8050588d9060ec1d5ebe47226456ad5228f6cdca183f79276884909e4b9fad54eb7dc7e61010658e49187a13491bcec7eb625cc9e6ee51055d6b

/data/data/com.cleanmaster.mguard_cn/databases/diskcache.db-wal

MD5 741992b6bea2595c0537a77824bc02f1
SHA1 a9304f2d2ba333da590544e318961d9c19c6305e
SHA256 a629971ce81dbc8fae93917400d85e82a5f34f7d44d7eed8b82c924fd65c175c
SHA512 96b1a79e116815eee76e15dc0033fef57110196444b9133e5e0913036c8c5648c8e5b4e4ddb9b90c36c602b1777c455beef7838da54e93f2900149350d71c7da

/data/data/com.cleanmaster.mguard_cn/files/storage/meta

MD5 df2b3bcd58231cd451fa9037a0a14f33
SHA1 fb16faaf98f49d28ec87a0b9e1f4e0e8627dc8bd
SHA256 aebfc013eb2892ac54fe8162a837452eed24b336db4246124a1fe0eac8947f06
SHA512 adf0f7c1d31321a2484882c735b9bf7a575059b4833cbeb56128c7853207678efb8abc18737cb414069b467b1c809ad5c16a38205130d26c309b2190358ad5dd

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmutil.so

MD5 ac07ed9fe1611a2424d051c662cb9cec
SHA1 31450c078ce4668a52bc70d098e76d21b80f3eb6
SHA256 e0317158dbea82872200d9b93b1da7a5832ec5f17090d0bdaca2e24d8f5fff9f
SHA512 683f9dfeb7d342419d48fc345dce97b44611ed382192d36d60074d19ea38fb903867c085d86a4936f5469d2ffd7bc619a2cb48f0d70c101ee70288166ec530c5

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_xiaofuction_1716051445255.ich

MD5 49d6db7052f89e3e36186eadb84cedde
SHA1 cc9c0f3379866d5a3713cbd422f614bb8a861d29
SHA256 e509773ca79b13138437724cc43b11e51e9a18469e3c5e5db87f0b0eeb1e7fd9
SHA512 c81d0012d43412419328b14e5a78d2db30e35e9243eb0ac9bd640acee06733cda34862565bf55f36cdb80347c049464070fe603033bef03acac87e2f60304845

/data/data/com.cleanmaster.mguard_cn/databases/cm_push_message_db.db-journal

MD5 a6a1c12136a886e492fc5f32777d1583
SHA1 6e59d07a29d01dd0ba8f457e3c04d21a07c78532
SHA256 7ca62ee11cb1ee9863c6fc75b98989bf6928246c3e2cfb2e056d023544076a10
SHA512 45f7b3072ebc2f8cad6279a04feda6d48ad58dc29b8de60603dc64537565177c652024602e3f2cc98392a05ac36554f745e876656b344b535a8f27981b25153b

/data/data/com.cleanmaster.mguard_cn/databases/cm_push_message_db.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.cleanmaster.mguard_cn/databases/cm_push_message_db.db-wal

MD5 62ed20a1f5c9bdfb50ea3b124e56259d
SHA1 3c992a0891e99994b2705259112eb4f670bde478
SHA256 2b3818693ef80ee18942802c648b19f9b8d3c2716446cc6b5781cfbedd0a6718
SHA512 4a73b061e07ef7611a73302c3d2a1c3a53669395697471591021eb47f7d4a428a1de023715932935a7a2969a735eb30e7ca827f5524cc29298e8db4dd6bac447

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_act_temp_1_1716051448494.ich

MD5 3acbb5f2e74d48dc51d3bd61b0451efc
SHA1 840005560327e820a1011b003d0a6f0f8316fc9f
SHA256 ba122d6802891c68a7d4390dee8c46f8442c7a43d737ec2c8e49c25a47120068
SHA512 13420a4bdaf3bee8a9e67c6195c7bd0954c37eefad6dc1cf9c4daf698467dfc3a6294a37e0f7d3124e6c72da5175493e0b6a74b58141ec8d3ac6be0b80285e46

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_main_gift_box_1716051450688.ich

MD5 b32c139f4a3691d1935c4866169578ee
SHA1 cc4d91d81fe7abb8c59bef9a4d8a1e8c12b47949
SHA256 275e4f6ce9a5b7205050f882790080312f9c00aea8650faa743022ca5d7e2641
SHA512 2a55e16835e3ede43d4b8b7ec9dac72133b5d3ddd9f580fbc13069403a2e2b2de00c731d92e5c53d5a87c111265659e6b742f421f0652c5c6408a29873df7848

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cn_main_gift_box_1716051450941.ich

MD5 d076163a50b95262c3170035023b654b
SHA1 aea8d1c0166388f66d1b45d877274005df9c0441
SHA256 345174e09a3a04410d6751ac7157a42dbe38d57456581c717d5c97b02c90179c
SHA512 ffda3edfdafccf3f8a0353999e1e167e51b7d4d4e81505ec26394946101a3813ac52b94f4e4bb1974028aeb100726570bed05e3263799d255b16716017f3e066

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_reddot_1716051451621.ich

MD5 428f35acccd0555fc92ede49766c9faa
SHA1 476326056fe348644b7ed33d740e9d61ced0335b
SHA256 d5027903714b87c918f0b8c7dacbc8e7039d5b13d81899cc048aba143c36a33d
SHA512 e3932cde0d3a150569ca70b7ca7f1620d8cbeb2cbc399760c15a7b6622c0d2ebfc54e842a92c5345a1a091a1b436a5a5fe454350baf6ec705c553f3ab009439b

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cn_reddot_1716051451838.ich

MD5 a5c7dfcc750177cd7d77853e702c5470
SHA1 ab5d58408f8b5469cb09a6403d4510fb2ee131e4
SHA256 084c1c7fa9ce9125640a42709e3931ba9e9d77ab92c031441cdd7fa9487a714a
SHA512 cd664623f9d43be247c8c83a64986a052a215954bbe3025a2ccc6162dbbb19223e87facd5b7e0d4e3f4f9e4223cd5e1b8963327bc79146f3842f05712ed233cd

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_cn_shopping_reddot_1716051452142.ich

MD5 9b33687073f8416aa5598e8a848c367a
SHA1 5b3783e699b52166ab0b0d2289995340a9ed4316
SHA256 c0b52bff820629f17260198a45ac90bcb4ca49eaba2203ef2844da3a8a19c2ce
SHA512 bcf7081252244af8c1ac709914a0685d6604391ef9121f8cdd4aad6ee25c41abc80a7a51194663b0ccf93efb121e784acc9a031cb6cfabc9816cbdaf983ca1a9

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_task_onetapsuccess_1716051452399.ich

MD5 2d823f33f9c55b00e53b98c6afbb7abf
SHA1 3a08d99af8afb6a4f8d79e7704d660cfea7662ed
SHA256 12de05328518b9135ddc588fdb299d5cfbb41b88db67b201965bbc2cda33eff9
SHA512 3eef6aac4fe5a3617538e346f6cffd0e09d003a54deb1f4b2d7354d0770c7c81e4914e1dfaec3c10e342c5b3ad960fbb5492f5422ba00b02ade3dfbba43daf19

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_task_onetapsuccess_1716051452564.ich

MD5 00e23b1c48c6f31243c55e51a917277d
SHA1 5470404563f4b5d824132f17db379b6fc7a1236d
SHA256 34bfc5c118aa86fe088153c9b92350736e5d85f53476ba539e14ddf9ec79b737
SHA512 3d32cd61f746e854f0d79f1f7173cbd49238289e33cbdbec1b92aad0c4a0823b361244ff0d01f0b52a094bdcf520b0fbc6e9e969070a4840a6b5b9993ec093b1

/data/data/com.cleanmaster.mguard_cn/databases/webviewCache.db-journal

MD5 2dcfa6ac7289a24a972715e81c33e7c7
SHA1 b86f7e77c985a791a2e19bb09f7f07ecd8aee513
SHA256 0c52c410ddd42e64a88ffd9a71fcacf335cec885abe695ac4b470c5fbdc51896
SHA512 5d9e9b0489feb43ee2dfaa4896800d6e0b44f390a4662077f155a954ac9a8012c11c75d44b6c0bdf3fb4f2d9a2dae0c5940d49de475ec003d031d437165cbc13

/data/data/com.cleanmaster.mguard_cn/databases/webviewCache.db

MD5 3fe30614d7e0d11db870b4624f6c50e0
SHA1 053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA256 67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512 c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

/data/data/com.cleanmaster.mguard_cn/databases/webviewCache.db-shm

MD5 b8251c19fcdf1ac02bd92d937d02fda0
SHA1 46da96ae3d2d81cecfb355e1d0851e79aa6ef0fb
SHA256 0245665515c3087f6f18ef54a272148149b5bf44935173ff9bb70b5d462bd142
SHA512 617978f862ce45167254fd84ce95cf9f85363d47119b66f053b6e2aeb2e5e3bb0355d492816ead7722c360fed2468de670c8c25430663a4127f31651729b50f4

/data/data/com.cleanmaster.mguard_cn/databases/webviewCache.db-wal

MD5 c668315e3a6b03eb59d340aa67d38cfa
SHA1 d69ac6ca298f38f8a6394ecb7110754987670a1f
SHA256 ba128b09e88c4cf53c5c0fdf50454697ea1aa6ecf39f1aefb4310b0b970c5c9c
SHA512 537583c1731b234e74e7689fb38e2a8ca2e99b2070783c67f215bd6d5d88635b820bbbbe289b12696e374c486c4f2db66bff10974cf9480cb0218425d354069a

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.sgame.acceleration/version.1/bundle.zip

MD5 1fb898cc39d5fc33e94541b88d8822e5
SHA1 0892e6a05d621f7313bf058a168115d297b00b4a
SHA256 f41cbbd0c7cf90b5b138a70c4d1e540320e7d4bac651e05cddf52e52e3229ccc
SHA512 979ae9f818395876b1adec2a6c2d786906f7bd615e567faabca77a6bdd270d6f7af5ae976d94ebd88f193f91f14485fa235279c911bd7179c999a1eadb0e6fa0

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/version.1/bundle.zip

MD5 57b0fbd69690ff32ecc13aa8131eb18d
SHA1 6f21f0c486141ffc135d3cc21350b59960ce4b7c
SHA256 e35a9f3f39298dd9d535969d4f9233c7b8286bc1f5e75d36ff2a5d61a936bddb
SHA512 87685fac7130afded10e39f906b072e7d074f449c7e9adae6bb0e7895550c29ea25ee5430cee2f8107a05c931c855ddfd4908ec956d625fdf0b0d18bb353a40a

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmutil.so

MD5 14c0173810b7a712a53243ba738d0996
SHA1 344a3f4fcfa8b7dc1cfde436721586e291c50788
SHA256 98123b0dccd677a5e4d90b250f06ce284b895d1a64625c3b00782a35c82b6680
SHA512 20348b65816b5892911a4bbb85a8d5b0e2944dc16f6929ffb3ef6f1cfe2006c1a392ae0649887f2c2d87b6fca4bd30b04cfb0640dca339c838a7687b19cee9e8

/storage/emulated/0/Android/data/com.cleanmaster.mguard_cn/files/logs/AppLockLog

MD5 28431e5b7886908973892c114d3c8ec6
SHA1 6c7b71211a5fbb1d28fe692a3823dc9ec14fd479
SHA256 67a42455c7f935fc0847302b5c5a59a28d81f0cbdfe5f08b5570063e1eef9465
SHA512 461be3d16077dad1f4dfc86ee60102dea12834f3a089c887f02e63964513eebb4bc1391eda472b44bec8dd6eda41c519d7a1450caa1f36e7e4ab41088f34d813

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.news/version.1/bundle.zip

MD5 b970ca7f2b5a7b428a35ce771d56759a
SHA1 6f2dcda4a42472a7bf3c46151e1bc153bd813337
SHA256 f39401d6534702faf5f183cdd4f46825e607be086846e9f0d1c258a3b5f9b560
SHA512 c7f7a83e39df0f5c7fd6864bb66ab19950e7d34a5e242a321c25a827ee0d07df7f28895a056f43d55448155169a505890d46c7df5b18fbe02524ebb1102d94e3

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.internal/version.1/bundle.zip

MD5 fd189c2ed2039edeae4ea19e9fb2f25e
SHA1 08384dcaccfbe768fa920a5159c406f0c4c42be0
SHA256 bf454c1f44799205177bd4f397ba9377552769b950ea5a48c3a4b92b4a22668f
SHA512 a002a8157a2f2702bd22556e754f57b9e0748f33f6f508f0c8fd56192f0675324850a60ff494955c3d31e17af309506c6bd2bdbf4e463c117b51a9538aa900b9

/data/user/0/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.boostplus/version.1/bundle.zip

MD5 b456f0beecdeee49701f4393de9d9299
SHA1 3084fffbe8e7bbd6ffe12e491486d9701cb9ce4f
SHA256 4d53a0dbc616c02f70414f1d4e1c1eb2f99fc862b9507c1f801fe04f8584e8c6
SHA512 81c4aaa474785dbde962679442c5f1b51027f466edcce329daa57ecd93ecf561c6abef02f5b7d6f367901a901f7e01c24cf6022be4d5ddd1467d506ec4de48b0

/data/data/com.cleanmaster.mguard_cn/files/autoinstall_acc.json

MD5 a1d22519d47e910726bf48016220319c
SHA1 6ed8adec1beff315b8914eab2aa996611eeb8dd8
SHA256 758379b5654dee06697743d9c37b0722cfa141c34eaf08bb32f7856c699fbada
SHA512 77414104aff6de7e7cdffe254bb13daa287605fb0b7173947d222bd04dffff48ea6fbb2343b253bbd4606bea4d259a6919dcc1d095b277ebac228392cb05e0f2

/data/data/com.cleanmaster.mguard_cn/files/lib/libkcmlzma.so

MD5 4df60f5d3a02d81ffe63699b70e537a8
SHA1 f775027ac152bab5b96f5fe64511ba63dd54b944
SHA256 8d25213bbfde4d604ed5a236269da1b95cfa3482960a344028609d57e0d8a0bd
SHA512 c976b77dc72adc4624ce16d140beda22380b8887dcd1cc7fbfd3bb03230d11f729704b39abe2ac92bccb5c14f48d153416caae7026e6dd8480d36449468fa4c6

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_plugin_inst_state_1716051506000.ich

MD5 0d4576f9129c14708aabcf85b22b9ed5
SHA1 4d7e94c9307bdeeaf1541c4dd14ff448edcbb965
SHA256 9345019a44d3982eef65f03a094b772678d8e6058999c8d15a48cef91fd17f60
SHA512 64db4015c09f400c92d8ead877a810bab1055bd6cca849880b2d128cab2d40e4d5ebae5a58c5129159358edda43c0aedb4e3764fb4e49b076335604c490eb5ce

/data/data/com.cleanmaster.mguard_cn/files/clearpath_other_5.9.6.db.bak

MD5 7255a5dffc72eaf966d20a959e3da0e7
SHA1 dfe10ece3406dcc432e657d3f1123d1a7fb6e84f
SHA256 9cf43bebd00a46e4a1580fc7c09d9b74d69498c1a68e5f36f20f24b3b22e0ef8
SHA512 f8109c4bfa03c34b08ad541389d6cd00dc0777204ef43f644a5ff00bc7e31a7780e5b3157ba9df77e2b9696fe7fda3b4044ef01213bb094bbda58cd133c75aaa

/data/data/com.cleanmaster.mguard_cn/files/kwatchdog

MD5 d9241f9aaac4339f0f84cce10a368341
SHA1 c1dae22ecf482b959bf36bb82cc8fc1a4044fa70
SHA256 873cf10a1fa83b65592467233924bc2770c8dd2e317112c61300710456cb5725
SHA512 f69172a070293ff41b81d1acc2dae63f5fa7317fb9182bb255dfefe3cdb4d15537d068b84af7d65d501067a8b865e620aa24a7bf283dcf4b73a889afcaba4aa0

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_plugin_inst_time_1716051506596.ich

MD5 7a03443b0db1b586a728ee81ccd26ecb
SHA1 104b2ddc96e21911d400a177e7c8e9ce47010cfe
SHA256 79f4670de488f681646f320efb87580addfd029a631fcd82dafd3412b322a940
SHA512 756aa91f7e55f3ccce2c3588eef09bc0baadca699a9ebfd4ae03eb4a9e91f5908fb9b1f97af09b04882f38bb93291ebe4063c1201cf296ec46e323c25070557f

/data/data/com.cleanmaster.mguard_cn/files/strings2_other.db.bak

MD5 4a2a3fc477b527489b1d970a880ee5f7
SHA1 5418467745b57febedc9298df0649610dd2e92ee
SHA256 42d4a4df6db8a09b476950e687ca9ea10db6205e3e4204a81f3ca4f807c8b073
SHA512 e1e27e37d96d8fe8e801d69cd63442a9da3693bf60485d83d357e86f7eb7aef24ed6e956741abe11052335df6998ea1c07611df93fa0e8ceba1a61a0bd14e4f1

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cn_plugin_inst_time_1716051506944.ich

MD5 da99e2c9c800fa3925acbe7cb422656d
SHA1 b1c91986ba34ccf9bbf12378d07b597c3e0ba62e
SHA256 f40dc535425da9412d940580b116801c29c8a30fdbb4df47b41cbd65341171e5
SHA512 9f95ca6ac05a44c04933bd273b6bdb361e3d9c78c5ea50b8c8ec3ea5d782614173dc90d2f7ff9eaae9d62d1047989f72a51c8451af95faab79c4833e48c293f0

/data/data/com.cleanmaster.mguard_cn/files/process_tips2.db.bak

MD5 b646cc383b7ed3b15a97c2a5b7980b3e
SHA1 b6895a71b207bb019877176883681016c7bd7ea1
SHA256 7f44438f5552581352bc4c3bf0abe5786e18f67df59c4696b7ee8a5a01690c1a
SHA512 d37d4682906fd6e86acd78f1d12451b378bab11b632a4480b02822aca3d14199759ac9953dcba58a40e73f523902c73de53c27f8d8c115bd490736ceb203eb7a

/data/data/com.cleanmaster.mguard_cn/files/se_cloud_hf.db.bak

MD5 b17486e5ce68dafa23f17590392661c5
SHA1 dab6f96de9c4857684a5ea051528a7919a70c86f
SHA256 991e84b80a3ec116e75bd4ee8e4619ce37206b1b12e38bb70738a2c34881f5f3
SHA512 78edb0026027e3e099f682511bb9a84946414328b27e81b5bd76ce53243a68cb071e4eb2ac59a03d745eab29cb6f077797569924e82785dd05ea7c9f5533ae62

/data/data/com.cleanmaster.mguard_cn/files/melib.dat.bak

MD5 76f823b201a6b2588063b6a2a1209827
SHA1 9082e15aa28fff489c6986585321d29f7afce699
SHA256 17727b7c99abb2ed48a69f4f3d03cb42e46c56e990a1debb3f0564ad91a5343c
SHA512 3a366de322e1fa44b2b43cb9ec5d42dea896b4057079b5f6e388ebabc5de692c55d290ec851dcd6b7f6d12cc84e1aefc9b97ea63ede70e003875fac81ab36b08

/data/data/com.cleanmaster.mguard_cn/files/appmem_hf_cn.db.bak

MD5 eaeffce37470c0fca3bbc3653eef7b51
SHA1 31d96ef15a391dce3d14eeba808c8247e3cc1f1c
SHA256 f2b48341dc76dd2081ebabcb4dbebf56b9a51a2610f8e36e81f464ca31614495
SHA512 ca03788bd3aa72e03ca73e6d14f5a77286bbb96e6b230f20940999d3a49dfd811c7ad78259eea66ccccc827de5b7bce6bd4d15ac0281ef90fda3d1e5941cb3cb

/data/data/com.cleanmaster.mguard_cn/files/pkgquery_hf_cn_5.11.6.db.bak

MD5 c464f867884b75431827587afb803a0f
SHA1 482248e13f3875e0a1d94ae4079394e2a9346582
SHA256 a9f303e3886a221e122970939e75636f26eaeef859f61e7ac46955883ab2c9a6
SHA512 fc3ebb32580513f6f612df11d11febe9038ca567240abce7528483de6c28ba2ceef3152aa9320fac93ec6400df6f18a53f9ce1752efdfb241d6a9e0ddda856ee

/data/data/com.cleanmaster.mguard_cn/files/plugin.apk

MD5 49e6187aeebc02970e622f22bb49557b
SHA1 3454e00dd1313e057903cf50f3c770d9f00d287c
SHA256 5a005454b7115739ff9135d175fc89b279b741984608c2cb06bea3787d35ef52
SHA512 f4d42afc64b97bf0acf896ab3348fe2505cab35336810941cf8ca0f7c3e1f682475347b871092e0a59aa7cd8050f543987176ed8ba072ec867bae7ed7de9b4dc

/data/user/0/com.cleanmaster.mguard_cn/files/plugin.apk

MD5 898ad1fb61be908c9bbf43453c85380b
SHA1 fa7bbd1d297f6a9a9426da83b9996b5c1b9b1962
SHA256 fa7c96f8e0f958c372a31a1f645d80be0431da3705d5e20e6e87c948294d70c7
SHA512 e8c6b6c8eca728abe3c22d58a4beaeb47da9d19fca6a580f92f6371d41295073383937ff7c3f570552bd44823b555a8e1ac7f56d3427378c0c5933d9cd403ef9

/data/data/com.cleanmaster.mguard_cn/files/preinstall4_hf_cn.db.bak

MD5 da52476df5667c6666c4938fc7d01995
SHA1 a56b33da7234048ac5c874683ba147d555c05c42
SHA256 4d9bb8c093da845b3e90a6e068cd42cfc6a46b2be4eceff6e584f72e04f2b3dd
SHA512 7583cb2b3f77c4bc6328a29ef817e9bb3f0822f1d579ab4d369a6cf21cc5ab8ddeecfc508520d91ce00f9a7790e6573aab2acf4a57f3a5cd3198b5351d6ee7c9

/data/data/com.cleanmaster.mguard_cn/files/pkgcache_hf_cn_5.11.6.db.bak

MD5 77303fec99497975a0bc4b6b76fdeb10
SHA1 e8c72c45647dfaa8dd7fb7820c2425a5161d071b
SHA256 5b31f1e9533c3df58c2502076ac8e7e91f8cb1ec187b214219ba19d5dd1c9e69
SHA512 e18e137d2f5187d43247bd271425dbc9708c96cf654d930239c152b981a753b687b652205f94653e826b2188a2d60128f6e62ed95970a4ec76a0f9c83c548070

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/meta

MD5 daa960b5200da7b9278fbc8752b6d7b4
SHA1 596ecbbb34c8c1e49020c91273e854bd696ae569
SHA256 2d9138178a912642c7a404ceab69d0c9b844ea6d323d95ddd1a7ee5b23306a4e
SHA512 c87c092beceab5d10ca62a2b8d164d269fdb4bd4bed2126dbb5ceca14fe66d91bc99609619d8ba3c007bfba6a2868acfc321bb8c6b4ebf3f3319d3ece618f465

/data/data/com.cleanmaster.mguard_cn/files/storage/com.cm.plugin.screensaver/meta

MD5 0112c468c13f8cc83debccc0fffe76fc
SHA1 06a6da68819353ef2acbd66b9738aae51e6c0461
SHA256 efe02f96ab6298f414073f3e3e5df85f6a91bb1acaab8f93e018d338529e163a
SHA512 3d30d24486d2ba7c3188166f7175b68c4a761e36e058063485e5bb4a229070ca1f4b9c2d89310b44788597dec324d21b9d3eb46e322ea0d28f46a2c373aebb00

/data/data/com.cleanmaster.mguard_cn/files/appcpu_hf_cn.db.bak

MD5 13e41bf76a60d64fcebc79730985840c
SHA1 3146a2e0f3ceb9f883bd09b872c5e224c3751763
SHA256 0da2d0967fd38538cc582f8b85ad21ab7d0715e4b90866a31a696efab9dbae9a
SHA512 a1d3de7335250488174f33731bd7378fccb1cd6bacbed2b58b50350b4d23640adb50fb87063a22aadae0caba4a2d858b1d9c86f1f55b933abe7b738fc97b0a15

/data/data/com.cleanmaster.mguard_cn/files/ats2_wl_cn.dat.bak

MD5 b047c0ea6e96973ac99364bc2c7d1cd7
SHA1 63c86718975c6a5fb20b7dfdfacc484e4b686169
SHA256 57eb4ca47a54d7034a76e6970dc5161917a32ad13f61834275228b99765770bf
SHA512 6224778ff8d69cc952c1cd76fea77d2eebb4554863051a1728e86f933e597e7eeb1960a9efd384bb9e687660a353b86ce9403cfe6040d280083c1d7ba0debc61

/data/data/com.cleanmaster.mguard_cn/files/junkwhite.db.bak

MD5 9ab666c7de75185e699bde91530530ea
SHA1 010ba231035651f42e7acab1a9e4dc00f815b2e0
SHA256 33c327b7bf2729d2ecbfed17512f9f6df56466843075ed62376bdf20d28cefe1
SHA512 26541754f421cb9b2d3bbddf6d24d9e1198be6a88213874c53e70f39cf38e44b50a77d6cb89f288dfa951e72f97eb81b234468351611db8ecae47dcbd62dad95

/data/data/com.cleanmaster.mguard_cn/databases/gamecache.db-journal

MD5 8b36db12b58e49c736b30ec8c9364bff
SHA1 5d83b1328b13ab50d8bd1aa33deea2d1a8e5bc38
SHA256 725b5fa22417ce46b3b408b95971b599aff2631403bd0c2668f5c5900302f429
SHA512 ee12f68a5f18331b61ea71690652d21e6cf4fb10299f9e359d1432f6aea256c8e23019214507853d12adbf29b426a19ab76d755759a1eebde18144c0230b45c6

/data/data/com.cleanmaster.mguard_cn/databases/gamecache.db-wal

MD5 0f68f13381ce4d1ee26d734fb9ceb532
SHA1 3f212b741259a02c1ef0046a95b70bad9d251694
SHA256 3c43da049fdf4c69ec75f305a5a794a71f2ea6e5b63866d640535855f6a56c66
SHA512 d2a10bd9f580107b7c6926b8d6ef3bc81873f8b9c169654dbbdbe5f88b362c568973dd5ffec42930cac8eab36d867e2fb3e0b6ac72247d3b43e56480b90465b6

/data/data/com.cleanmaster.mguard_cn/databases/db_downloader-wal

MD5 17caebc96aeb345a2df2f72ea8846e16
SHA1 575fb628d213e857c4564ba8f8d3c2c663993841
SHA256 7c0005fac88bba6c118864a241e08779e4ae72370c79961151f7b88f5fa68b02
SHA512 202cb649b574abd243d13736082405c91fd8025075e3b97fc8f9d1b8ed480ad6a02e60ba64c485b3dc9b87c9fce1aeb5156c7afcb20db537dee1bfb1c4349dcf

/data/data/com.cleanmaster.mguard_cn/files/ats2_sr_cn.dat.bak

MD5 fefb82c058cee7c1cc4c31581a54a02c
SHA1 ea2471a94a518222e3f6d9abb8541c672db8dceb
SHA256 4cc124f32f1aa0cce92baf8564989654ac79a468be0f2a9a1bb65065f67f0319
SHA512 9252bf704a561cd358962ce6a0c8e7d41a58c7d91987fb16a52051649842751726701b9a2c2fb9116ba23fc92dfc4a42fa2e815afced5ff5389c5bf0b7bc73be

/data/data/com.cleanmaster.mguard_cn/files/clearprocess_cn_5.9.2.filter.bak

MD5 d93ccae1528bc3cf47a7531379207d7b
SHA1 82240331a314ecc4094a7280563df0a6b26cdf32
SHA256 884380b9bd0db70439a95b5a3df365b51c7234f9a49dd3bbfa2bbc6d853b125a
SHA512 b1c650bc44e197d3d55dc14af98061f3dffc5b3699d1b96744d29bb3f6e06c26cae3b30e72505ac1c381b7eb703156274408afc8afde040a08f55e2c25d9e5f0

/data/data/com.cleanmaster.mguard_cn/databases/memory_cache.db-journal

MD5 dc16ae6df1f0430f9bc44bd0a9ff13b7
SHA1 5d22b36f19d882855614e9a6dd22cc4020704251
SHA256 058677d264a6ee9fde37290476760217af4f37c86e92f3d128f16ba1ebb7b282
SHA512 cf9154a9dadca6583166d6cada467a388217481cb42f7c431fa90d066ac46de68ef970fc3fda3fb2055d02acc0f43e202ef4b54ae08450cb3012434ebc18824e

/data/data/com.cleanmaster.mguard_cn/databases/memory_cache.db

MD5 53dc916001fb248f4a169e7269526a54
SHA1 cc75f65a0234a6c7ae456f477798a52a647ff408
SHA256 b8557c53fb1f2d1c03e6ba8fe7ab033d1fd4807d383591f817fe2e9d1409505b
SHA512 e0034626f6bbf4e4ce8d65bb96998ea3b7cdfa6b49035fcb65e19cabf07bfad1df4c6a431da67cfa44fbc2f3f47975280bef7a8529d37d2530fa6bcad69f29be

/data/data/com.cleanmaster.mguard_cn/databases/memory_cache.db-wal

MD5 f696390884e7dbf5861fc6eaafaf07a7
SHA1 dfc4a35b11320a46706a54179ce126de6a03d18b
SHA256 4e634162377c2ea60d751eb11f5afc5feff839044876e16fcdf0978cd08df516
SHA512 2379f7afd9752cd1d737f44eac9883b7ecca5e3f6463cc60d493db48232e31e88a48d14af4a83c2c906025c4ee6e2878e8b758126e2a0c64e96c3f4b1a30541d

/data/data/com.cleanmaster.mguard_cn/files/clearprocess_cn_5.10.1.filter.bak

MD5 a92fa98d2bd2449b240a4496ca296603
SHA1 6f20fe38ef2639bcc0c159cb8e16d2aea7ea7b06
SHA256 064622d406d06a5167a7b87f508455ed78084b76fc3ea08c7e2e132b9b7359c7
SHA512 e09affd2e763eda34daaa966daf07250c7e2e0f5bfdb0bc803acab33a23cdd5327e9807e30500ade1684c60ebe91cd4ac852739e459c850e7e0e45888b186b0d

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_game_common_step_1716051516490.ich

MD5 f110498174b89fb15f54fa0b1db121ac
SHA1 18e0d5749f6d52164217d59981bb8ab05d4a14e8
SHA256 19642a93cdff7c70acf0e00f67fb44d20e678233d2bfcf9a021556f74aef9cb8
SHA512 4f7b61efa75ac89e0d352ec136bc7b8f4c331f633a893f8023d36ec1210e325620951a50889bcc66e9c2bb0ff944de32e7875fc47cc2e64a1ec4c6aa47072ad1

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_cn_plugin_init_active_1716051517747.ich

MD5 10a28d277fdc80e4536182be34dfb6e4
SHA1 0e755f65d5abcad6cd5711ab4e02029d4d10a12b
SHA256 ec448d9f387d3e079f26612cc0229bd9a7bbef3cdf1cf4c87b40a74b73a18679
SHA512 bd75f9d6f54347d0f1851e1c6bfd10878ff3118cd1ff6cb7ffe3b2f3e65a09a754ed0eb4d5c6c8ee8b63e9c9a33f6cbf5e30f3d63d0f02ff1bdcbd55054fbeb1

/data/data/com.cleanmaster.mguard_cn/files/ksupport_uniform1/cm_game_scan_1716051517942.ich

MD5 89debb5e8e3269cdfd5ead566250e83c
SHA1 b4506999321e507f5c740b48fbba15eb24f7f828
SHA256 e8299145bc3ce241828d1bd5ffcc9339efe989078e9e1babc2412a03226f4c5c
SHA512 850ceb229e1d7bf30fb783aaaa99538286a6676e079f00eb67b833d8b7ac297e789ee2d73f5ec0c0c302b591a513b46130cdc7ab8b92c1f8e6d456508610995c

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 00800c45dbfa8eb1dcb4370bfcbe5721
SHA1 e16d315b761445150f3982a91330d731b9b59f2b
SHA256 bedcda6ef7516ce93987369a55782a0b2217ee47c29bbeb4b18f6fb45c496681
SHA512 cef75b9bd255aaee3d41c066eb994408a4a7b737f18db2413b6dd9c9623e9b27788e1e53013e7de77bb9adf7a757ce6728f956be88caa8266cb72e3f7dcb459b

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cube_failure_rate_1716051520369.ich

MD5 4d419c4bc5516063b2395896cd2956f3
SHA1 b907cd2bb93992a07fe9283a599410d00632a3d6
SHA256 2b7d89e9ad390b30a729024061b5aa7feb62d652646eaf1f2760402ebf5fec4b
SHA512 0c5888228ba83d7fcf2e5c6831df25690440376d8d2ec8cc82c6b25f33e1ccee9457a5de3ef19e50f69923b18bf387f95db6395b87b069fcf9f37bf9d59ab2b1

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cube_failure_rate_1716051520858.ich

MD5 c3d862ec9b37dfc8df7a7a113fbc7047
SHA1 c3c034d933091475d3d2a57c109e142787a0c62d
SHA256 a3a108d0ae15adf9393d666516da8d725f54aa5058f97d8c0509794481470919
SHA512 c461bd766ac1db3f35d9b0c4ed8328a064c34a5fae6daa5fd20733fe334ce6a5692ca31d7a8bf75c41a3d00ede80b2ae995551bdbfb2e55dc1ceee2e47383bcc

/data/data/com.cleanmaster.mguard_cn/files/infoc_1/cm_cube_failure_rate_1716051521059.ich

MD5 e71b4e116c32790c42127cb0a1164d8b
SHA1 196225965db87adb6935d5ee24f741a297dfd06d
SHA256 463b5cfa3583580dd3f24fe829a7c1760a5d2061b7e2d063128f1fd19b36b533
SHA512 61258fd428f5cf05af66689eb788821ebfbfbb3c14fb1e2ec46ff3b2a74827f2bcddcd01bcb33e876ce1fc8420b8a4c7ffd792aff368a628e6b22183ea6526b8

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_act_mi_push_regid_1716051521402.ich

MD5 61b092e5b76f017b9ca08b18f2b0b349
SHA1 5b069f979c344410fd9c178c23948c2c13647add
SHA256 a57b7aa0dfbbbc678ab93a10f35113fb39630ce8059f3aa89c4a0b8fce1f4814
SHA512 f5a438611cf53d006fe6d0918d2aa30dd83577332fdb832b17595cc663e9189c2bdd8ddad487d26ff1abf8fd0391a732cf1b6a5eb122faadb9dfcaeec8b470e5

/data/data/com.cleanmaster.mguard_cn/databases/dmc_report-journal

MD5 0dba8e9acc2c98b30ba85f3163127df1
SHA1 ee4936836cbf2a59518b93b2d4422b51242b0929
SHA256 c705a4678259c1ab84feb7824dc22de46262b236f3ccaae5d549d8e9d5af480f
SHA512 dbca89f529a562fe23f025e140ba421a1b09ba9b2791f3248f0b25809f85cae60d592bc50dcd26125ca131eb5c940c3187f708fef1cb0052da01891572ef2b9c

/data/data/com.cleanmaster.mguard_cn/databases/dmc_report-wal

MD5 e1e728af31a1bd3f34de58ea6fb27690
SHA1 581e9402505deaa664938c400e23d45302ae2895
SHA256 3afd2b011aa103fa7a8b1beeec18ffc80df4b6c1020c694a0634cc215310bead
SHA512 13d5d0fe0c53bc360fdaa1bd225da6844ec55f81d9e28f807682d9ec0f77b9b09f73ced3b379735e4dc6d6dc19dc09a6e99ffe1839c717de2d8f7289e998c918

/data/data/com.cleanmaster.mguard_cn/files/dmc/h_50.tmp

MD5 f6f7e61cbc305a4df446b991ddaf11b8
SHA1 3ef8776321d1d33e418cc8904d865a84e646c9ab
SHA256 e2a6d154375eeaea69f1b40006f2986bc2886aece57c8c4f357bde042d17d33c
SHA512 17f99d01f6ea078e6bf4815e3dcf515cf3ddbcce2b87df1cfa4feceb1b483fb6a4f0b1a415e9bc5753a186924ca07734172fa9750b43fb0c67f3721283cfeeaa

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cert_1716051523350.ich

MD5 6e96e87c3fa4725c4014aaa9b00e966a
SHA1 41f84f5ff30d0cda8589cf12e482594a7865cc29
SHA256 1435d5b993f4d9083adb0c42b29535b52c0282d3a05b757e8cbe3dbfdc089184
SHA512 d6c8ae0507311e5fd5e653dbe9cf3ecde6aeb8612d5b141f41c72f026eab47da8c8dfedb0c97fcd1c101d2c5b19f1eddd3f2e2c8aa84a51b0c7962e5bd6cfdfc

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_cn_plugin_maindata_v2_1716051523829.ich

MD5 7514563b16b2e1236d6d7b262c0e6830
SHA1 6a2fdfbc6172d77e69a7fdda74469299e6ff6831
SHA256 fc76bbe6cdf1b9d446693ffab14a27232b546f3e9c34d9c76395da57058f23c6
SHA512 c7e72e992aae2bc8d57b6ee266e287cd62f2e28e25d889608311629ed50a9781c0c53d9d745a6934f80ea6195c8d37f722c7fbc7094456e3f6fefb8f7f8c4149

/data/data/com.cleanmaster.mguard_cn/files/com.cleanmaster.mguard_cn:service

MD5 6f1fd85bb906a1ebbc0163a61062db08
SHA1 542bcecfd41139a7d212d7417fc815b025a8c6c4
SHA256 bb0dab3a980022ab7f781d7bd7b16660afc671653bbac1a60f4a19887493965e
SHA512 efbecc74e6f3326d7feab6eccbd407d8a693f5a8c9a6f58655c09488e99fae115913d58466b390706dd1baa6dd76b965c5239695f6675d0ec6c3fcaaab7909be

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_internal_platform_1716051525587.ich

MD5 7bd3d7de6632dadd946325cbb12fac57
SHA1 c921fa5814e1cb57fcb830e361a3af07f88da73b
SHA256 ba5ed59b60de7f4313fa65ce2ecee7b2174476d919f2ad17a6ba6226085b6d33
SHA512 e027b1b75b1ae22651e4b10fbdeb71f8d63c6ddb47689b71f6c44d61fa2fa2e34be6e21d1b77b73cf546c88ae0234f820f0b18de50c335525ab438de8169ebfa

/data/data/com.cleanmaster.mguard_cn/databases/timewall_cache.db-journal

MD5 5a0a1770576d5cdded1da81bf9b79a4a
SHA1 de6af93ffc76ab2bb9622c51bec645ea506056f2
SHA256 49bb100d1a13bdd8699f7515da3b3f63ee5f587ca164efe7a2a7f188eff85814
SHA512 e0e3e2e83d72ddbd94d871abd71cf8bdec8867ea18765ad758be588bcfb39f00270e5bae47d92454f02c3e0b43a33cf73d1ee4ea7fab5c0b8287e2407922b193

/data/data/com.cleanmaster.mguard_cn/databases/timewall_cache.db-wal

MD5 6f2e27e2f9c4d1531a8360298f389689
SHA1 83fc1ef05958824123e67cc160fe876607eb40ca
SHA256 ccfede1baba10fad338587dc02d2d86ce7d3556ff1c31a33f3e3564fd02d9ac9
SHA512 a08d0e1e3ed09414df07c196255dbbb8849d0d94ec8b23621afb1e3a9f523c8484780d602344462b277de3f9261cca3ef0a51ba262a7628594e344ed52fe101f

/data/data/com.cleanmaster.mguard_cn/files/ksupport_uniform1/cm_game_owner_1716051525947.ich

MD5 ded6e1d22b377ba162a04ab9a632f1af
SHA1 42ac96880d2168b7a53a33ab631d17ee07217e3f
SHA256 3c563eed7085743f4314cd3215c2927d2e92bbbe1e762bc3bf50eaf78c90f34a
SHA512 e177dbabf3b82bb2c82657c5017d999cc504f833030b2360a460d5085f4264e317957c2e574add4a0f802f2462e030407b48b3d6ba0c4f3be95422e8b8184de1

/data/data/com.cleanmaster.mguard_cn/files/ksupport_uniform1/cm_cn_cpyy_permission_sdk_rom_match_1716051529865.ich

MD5 b8afb9be60ce99c467e8a1aa795e615d
SHA1 0bc5650ff2d9860e3c2055beffce432cd9b42c1d
SHA256 af25ced64271b4905e01044e16f9dddc033f22cb421a7518b1aaa581f6390330
SHA512 c7cf24b3ce395a99a4c7fc8299de4b877c87e58862b83d775ecedb93d7e2787ce8cee171b15eeedb4f436160b70933964247bfb6e749cded7954c3c0ab1b9e1c

/data/data/com.cleanmaster.mguard_cn/files/ksupport_uniform1/cm_cn_cpyy_permission_sdk_interface_1716051533840.ich

MD5 852c09305b7ac479df441462c8340538
SHA1 49b5ad12a1fabb9a731a1d1c776c6307a6d0acaf
SHA256 1e0745de297a656c6e4e9c90c8f6e6adb176dc5e5fa49b53c5ffac369cb8c750
SHA512 2b8db1cd8457398628acc1128692bf99877bf6f5604ba3b059e7a5d1523bb056b729bb8277793a1f591de4f4fbbc762af4d59e5fa34b39eb7516a12ef8b49bf3

/data/data/com.cleanmaster.mguard_cn/files/dmc/receiver_history_list.dat

MD5 697cbd518bcf709e095a6db2a7008b2d
SHA1 e0e03666656a093f6cece45bf54836d24b548f64
SHA256 bf4e861c7693bc6ed2dcf0847240e3eb47a32ed3e39d5952d28431cc18e76a94
SHA512 760f668e4dbfee4247124c27b5b7ad87bfc714681941b1f6d87a1e556623f86492c1e9845b37b3e3f7b96c100a79ad109eb14235b8b38a4519b8a00659d3770a

/storage/emulated/0/.dmc_sdk_uuid.uuid

MD5 ca65f7c349fed88b440d331ce35e98c3
SHA1 dae7cb81104ee0feaf6e3080741fc01adf3afecd
SHA256 333f11afc51910ba4401d9d519bd5be3a4672f790f0d586559bfa5c99fc538f2
SHA512 054a506b0f3510925a910972722beb427c484eb93c8e42630187de67dfad3b99a7ff8c92201a6334fef43a33f3b5936ced35e67c2eada091fc5d436dc01275d4

/data/data/com.cleanmaster.mguard_cn/files/com.cleanmaster.mguard_cn:service

MD5 aab4de87e9db994845c6b3004a0a225b
SHA1 e1d810e592aa403ef2ca04797b3fdc375c9b9fdd
SHA256 8da3bc6d87331d2cf322421e965d0fb47f09a5c9a9aa6bce40a37b557071f8f5
SHA512 b546ee674e19fbbda2d1d552d5befa677c19a38b3e6396e30d5c2c5b34254d2761742d8d680969936d31136b86b22a361c83ddf0f9c9720efbbf782d998c0638

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_act_srv_1_1716051566570.ich

MD5 11bebe60f624ff48fde7fec4b77e8f44
SHA1 3fde1d25ec38e602b37f6ae20e9b3a9ed89677bd
SHA256 55ec9d1b25fc2f1990810d8f87525edf23abdec168794741054b9b7e7b4e01e7
SHA512 0e7e5823bf9d726a7be01170068d5e91c2e4bf04ee0278f21c3dceb80453d0c2773f810e9e1f96cfe0a653dca6f3480a00bfb20f9ff28d5f3f3d7078dfd1f877

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_nti_eat_srv_1716051566705.ich

MD5 7d6cdf610c8ce734e6e7b04f8d82562e
SHA1 6d1f3313faf4d6bd6a55b7a3b2049ff36b679968
SHA256 7965679efdc1fec2053d3f043c21e192657b165851350f8518c5b49248fd0eba
SHA512 28a937b5a722e6dac52c0af0303da386f716881281fcb2d5b1d20f3dc20bd9e744a309ae01a2495ecf61aef8e2704b9ead12a4d630df918ba8ede7d013232268

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_cn_act_srv_new_1_1716051567351.ich

MD5 0d62dcc0df70aa3435304d5331de2289
SHA1 dfc795e0563069f9d49c85560d5ed2bb1a9defd1
SHA256 777564524912eedebd740c560829398d7b1a22ec5a3dc883f0a267c86e44678c
SHA512 07bc105c24941a0c0811baa1aca4664555b718d57638afafeba0a0d3ed8a21addd8b41382f0d1fef2cd7fe84eadef3b410d24605cfb0a8fc7ddbe4b10d2c5daa

/data/data/com.cleanmaster.mguard_cn/files/infoc_2/cm_cn_skinmarket_state_1716051567521.ich

MD5 e55554696c482f46b9fcdce2a2da5604
SHA1 b13b2dc976017a1332342fc49297d0501bc4e6c0
SHA256 1af4116e1897f3b96f20173329d415b33c59bd8fa242c8de5ac938346baf3d55
SHA512 260546b02b55b3c2abf3cf1ec89e0543bc674d79d8b5672e1d2dff3649f12c8e0cc0096fd7928fe3910293339a978a9301e6b4ec50cd6cec263419825b5d8f5c

/data/data/com.cleanmaster.mguard_cn/files/infoc_force_1/cm_cn_notification_active_1716051567772.ich

MD5 2891a9c257dc7f49fa8748a1ac4130ce
SHA1 16241bd4d02e6f793b10f7a59132fa4ca0c06476
SHA256 3b21550ea096c40973a99a0e0604acd52a97e9d975077029283b00bf9899b61a
SHA512 d694d3d7a81738fb92dd7f803546eba9fac712f34b4fffb1963672015288b066eaff3f0d63c16b72e501318061d7081b9664a89d44f056c1e4f37ba98253ecdc

Analysis: behavioral14

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x64-arm64-20240514-en

Max time network

7s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x64-20240514-en

Max time kernel

3s

Max time network

151s

Command Line

com.pp.sdk.apk

Signatures

N/A

Processes

com.pp.sdk.apk

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
GB 142.250.187.206:443 tcp
GB 142.250.178.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 172.217.16.238:443 tcp
GB 142.250.179.226:443 tcp

Files

N/A

Analysis: behavioral18

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 17:00

Platform

android-x86-arm-20240514-en

Max time kernel

2s

Max time network

131s

Command Line

com.cm.plugin.junkplus

Signatures

N/A

Processes

com.cm.plugin.junkplus

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x86-arm-20240514-en

Max time network

3s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.200.42:443 tcp
GB 142.250.178.10:443 tcp
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:56

Platform

android-x64-20240514-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-05-18 16:56

Reported

2024-05-18 16:59

Platform

android-x64-arm64-20240514-en

Max time kernel

2s

Max time network

132s

Command Line

com.cm.plugin.core

Signatures

N/A

Processes

com.cm.plugin.core

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

N/A