Malware Analysis Report

2025-01-19 08:08

Sample ID 240605-28s9lacd77
Target 997d5b33bbff9c5d88f8133efaae9a60_JaffaCakes118
SHA256 8ff6b52bd2e5731791d8554dc24fdb73acee87c6a3ded8065a338af5215d1130
Tags
banker discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

8ff6b52bd2e5731791d8554dc24fdb73acee87c6a3ded8065a338af5215d1130

Threat Level: Likely malicious

The file 997d5b33bbff9c5d88f8133efaae9a60_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion impact persistence

Checks if the Android device is rooted.

Queries information about the current nearby Wi-Fi networks

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Loads dropped Dex/Jar

Checks known Qemu pipes.

Checks known Qemu files.

Queries information about active data network

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-05 23:16

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-05 23:15

Reported

2024-06-05 23:19

Platform

android-x86-arm-20240603-en

Max time kernel

176s

Max time network

180s

Command Line

com.yuxin.android

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /sbin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /system/lib/libc_malloc_debug_qemu.so N/A N/A
N/A /sys/qemu_trace N/A N/A
N/A /system/bin/qemu-props N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/com.yuxin.android/.jiagu/classes.dex N/A N/A
N/A /data/data/com.yuxin.android/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/com.yuxin.android/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/data/com.yuxin.android/.jiagu/classes.dex N/A N/A
N/A /data/data/com.yuxin.android/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/com.yuxin.android/.jiagu/classes.dex!classes3.dex N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.yuxin.android

com.yuxin.android:core

cat /sys/class/net/wlan0/address

getprop ro.miui.ui.version.name

getprop ro.build.version.emui

getprop ro.vivo.os.version

getprop ro.build.display.id

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 180.188.25.47:80 f.gm.mob.com tcp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.42:80 api.share.mob.com tcp
US 1.1.1.1:53 www.lztion.com udp
US 1.1.1.1:53 wannos.127.net udp
HK 103.129.255.21:443 wannos.127.net tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
US 1.1.1.1:53 lbs.netease.im udp
IE 54.73.57.121:443 lbs.netease.im tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 119.147.179.152:80 android.bugly.qq.com tcp
US 1.1.1.1:53 lkme.cc udp
CN 43.137.70.64:80 lkme.cc tcp
US 1.1.1.1:53 dt.netease.im udp
CN 183.131.177.88:443 dt.netease.im tcp
GB 172.217.169.74:443 digitalassetlinks.googleapis.com tcp
GB 172.217.169.74:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 120.53.207.65:80 lkme.cc tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 43.137.70.64:80 lkme.cc tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 120.53.207.65:80 lkme.cc tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
US 1.1.1.1:53 lkme.cc udp
CN 120.53.207.65:80 lkme.cc tcp
CN 43.137.70.64:80 lkme.cc tcp
CN 14.22.7.140:80 android.bugly.qq.com tcp
US 1.1.1.1:53 hmma.baidu.com udp
HK 103.235.47.161:443 hmma.baidu.com tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 120.53.207.65:80 lkme.cc tcp
CN 43.137.70.64:80 lkme.cc tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp
US 1.1.1.1:53 f.gm.mob.com udp
US 1.1.1.1:53 ebjvu.cn udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 112.65.70.244:80 ebjvu.cn tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 14.22.7.140:80 android.bugly.qq.com tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp

Files

/data/data/com.yuxin.android/.jiagu/libjiagu.so

MD5 628b521c86d94336ad2fb29a369004c7
SHA1 44cdf6b836580c5dc4ba6c00425426592f6bd9ce
SHA256 302c9930c332702e841ab1a80703809406ab21d0e540cbc7f26061c809e524a5
SHA512 bc952a6b1cfa67859c935dc1a4e9c1e3ca913e6e1ddc26c04322b05d356e51ba93265361c3ef22fd51334a5ef48551133b28e026e8ceaf1c22f02f541b458e7f

/data/data/com.yuxin.android/.jiagu/classes.dex

MD5 5e096d05686eb37c449c6bccba742b79
SHA1 52e548f1df80353045da2e5f6c7eff11ba57e124
SHA256 2566c5f9749ff23420ce56750a8229750d3293c8c2950611eb76513815fcfb3c
SHA512 aabe6f96a39c5d968977ef67fe6895ecea25db62db9a1117094f3526754e7c19f07e10a824dcff605db636c9bd24140c435800eac151553979831d29b7c737ed

/data/data/com.yuxin.android/.jiagu/classes.dex!classes2.dex

MD5 c5d815704de2593521d827b76c4184dd
SHA1 2191b947d2f902ab1268f12258028eb952c3d0e7
SHA256 bddbcd65c20b8524e77d1233dbe354811b40a4bebae58d06503ac7eb5cce7197
SHA512 625b5e3e693596b01ddb181ac3960a2ce5be115b05355d8ca476903187e81ecba1f8c9541220ebb569229bc995af3d1a185aca17bf439200e12d521034b249bb

/data/data/com.yuxin.android/.jiagu/classes.dex!classes3.dex

MD5 579dacf27481393fbc917b0f04279f61
SHA1 9adc144cea1e1ffcca7a912676b037b2b79e81aa
SHA256 eeda818be92a1d8e007c460b107f23f3a50754fe8a03bdb815efeda615e7b5bb
SHA512 57a3505aca838b9341560a3bb10bb11e43117e81a1d865bb2de558076035765c74a52dbbc63ab1cee317f1155a75a8ced51a27030fb5a96be5345564f5a9e32c

/data/data/com.yuxin.android/files/.jglogs/.jg.ri

MD5 5c4b7f92f1ef3ea2fa3e8577794cf292
SHA1 8c535a955d3f71c4b94c924fc3317f3511977773
SHA256 9e6e408762c6d7bf41922a6a74caf2be8c513f9f976963dd80300a7350cca439
SHA512 2919ab2fa5f0e3d493950c4dc5f71224a249760890d8d6d7b9897921ac7a6c01a9f64f873888e7f8b71f2b1ba8bc75f6af330c165eaaffd50c4031f2782b0e27

/data/data/com.yuxin.android/files/.jglogs/.jg.ri

MD5 305d3dd910c115103e81aa13679f8cd1
SHA1 85b43514ce9ea7d0669f6417a8ece724c2757899
SHA256 48acae95097cca78084c33d9b1468ac7ea54479b0c265497c78e32b1509a40ea
SHA512 2c18fbb5ca70634fd2813af52f6e17791f646eea2ea0e6115e64ec871ca33b6e0e39234659ae8db6d9dc2f77a6c527dd72c3be08f0c6a5829355ad762d2cb520

/data/data/com.yuxin.android/files/.jiagu.lock

MD5 263c07b2dc37b639323fe0037a058279
SHA1 d24eedd6258b52453e66b741e469eba11c93dccf
SHA256 6aa44b6df5f1df3f65ff3a449d3347699f9dbdcaf28065b96b7a930861101343
SHA512 74fb6eff8defe7e1927c4a52882744e0ed60c7371f4f840bd7c3b9d850f93350074d1b0596fdcfb0121930192eec9742e0416521289f49501ebfa5e4f1e620b1

/data/data/com.yuxin.android/files/.jglogs/.jg.rd

MD5 1d88adcf90b49e1a862f0a411635648d
SHA1 86e38942cd8a4575b8de3ea18227301f68df1c7a
SHA256 5625e7ba6352277e82046476a734bb4f6dce681f02eedaf5eee4d4d1ce0fd069
SHA512 b0753868e26406fa311f92fdb2dcc913b7a3eb29a7d721ffa178fb163f1fa370c42e73e72ec08428fe36939155a67dd526190f74b85343767d197bac315c26a4

/data/data/com.yuxin.android/files/.jglogs/.jg.store.report_cf

MD5 6563bb2359b0e92eb2a39234cc057758
SHA1 96ba91ba811a497627b3918fb4adf556eb1a2389
SHA256 45def5fe93fdb5eb8f5a8d87a7db8aa89d9c2c895b0f93dc9e57f9b3165946c3
SHA512 b992f75383e3ecf3439588c49657b7e874c304347a5af6e00035f16dac323001b47083a52eb00b969137363a8eda0c1a9032fa89a8aa6c2e18165a4f632b8683

/data/data/com.yuxin.android/files/.jglogs/.jg.store.report_pid

MD5 5759528b0f3bf1d87a4ffc000e1b6286
SHA1 9d93b374b840299629a4116f2b8813f6ddaef0be
SHA256 83c98f5cb1a8e3f6cf6c6c54ed0f5e4bea4793189614b829b25f5eca57a9ed22
SHA512 78e7b483455d9ff953e135ac426840f7a9990c98a22616537e6f494f4fa15432f7fbca29e61097234ec4868e51a0f3dd4f496212d197d39eabc0c6b70e56d7d0

/data/data/com.yuxin.android/files/.jglogs/.jg.ri

MD5 54d6521774977a6f4e3a3dcbf80c419f
SHA1 335e9d34f04f3119f07a9bbdb7db56af56d21273
SHA256 849488fd68304b45d3b33672f7848c24401c03e7f10fb6b203d79f6fdb9cb4a3
SHA512 8871b304238652cac0aa39bed65f08db23e6e4f548c6af05c7e99696aebd28275ec61a2e4c7a830e749618946055711d2becee6c6f1a6c64158d1d8e8e951e62

/data/data/com.yuxin.android/files/.jglogs/.jg.pk.h

MD5 21afd9d69f7734338f52adf39316b3d3
SHA1 7a45f469f606b17208e770c79b8b7c7bd429dc37
SHA256 009d235c6d19763bef41723d9bc6aa5d92071d2feb9ee2a006d0f2b1df1e26ac
SHA512 2971f81fdcd248f9dffb31e879979b71eee6238954c0707e24451243b69efab58d2face1516b5f82b4d6c2253862fef2eeed67c076d26b4f923a48665798586e

/data/data/com.yuxin.android/files/.jglogs/.jg.pk

MD5 17679a3e2e94db9d50dcef2244b75a54
SHA1 8235a4b405bad10a58d0ba0dc931db04b0008652
SHA256 1f7caa63f3300e908c706d98d3925d92b9315a7c9c985eeefe82ebdc7ac1d8ca
SHA512 d8e3b1ffade788450f9641f561b553cb216851731c01f3471dd229e3cd55253cd3c571ddb10661b0a388ee16b5646f09d487a9aa2e4bf0cc85c0e4ca3de703fb

/data/data/com.yuxin.android/files/.jglogs/.jg.ac

MD5 4f33c1a1ecd57b8abc60a82aea1fcc4b
SHA1 34bed68d0545f948a46a7eb03efe02db019c7f87
SHA256 534140faa9f40a7734f00eae0e27b570fb9cc68dc247f82eed4d9e18dcb0a862
SHA512 ddee5024247c4609fe79225fcb5377feabed5b151f34734f09ebda451bd52eddba3582abc1d34146a3f26fff1359928fedb564c591c10b8a4edba0f7628f0a3b

/data/data/com.yuxin.android/files/.jglogs/.jg.ic

MD5 4c83787fac60cf44fdc79583a1d1e68c
SHA1 cf806178a5cda7c9ff5ec3d911ecbd2f80103c9c
SHA256 f77e8e511cf62d40abbaaa316412fac3f2bcb90644f1acf930a9ffd30eafcc3f
SHA512 9fa0b49ecf62350325ba242af8539b8cc9719ff9642e17b689d48f84bee83f1c915be724026cec357d9225c0968479b006ffa4f4853fe734b2be6667cb604752

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 324aa8d296a7f540bc8548b91d7cddce
SHA1 85e9f37ec0292fd9b384c77f9dfebc9a3ec34f38
SHA256 743b999cb7c06a85ad9ce18e2c09a8218afbfb95f71adbcb2dcc81c6d6663bfb
SHA512 bda3c4560f64d33e94fd2e47c479ddf680892289d8c1fd90bc5e7803fe4a48b1b80efc7fb7104439c663596971925c8d8eaa9fe2d4f326f1c0c80b143e5523fe

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 05dbd5bdaf2fb3ae2e3795a23a846800
SHA1 b0c8d7bd594acb0a4dc4ff5b9cd11a905360aed9
SHA256 48a1872e57e22f476811be8acf686f8c7c53be8493509cbf7c4d1ecd7e11ab71
SHA512 72b039aaf2e54bfef5406e4a9f2c0ff59f9eed915a84e751a679ddaf538fd1e903700db87cee41de409cabf82ca91531bef434a4da60577fec93cce9b7ea4c05

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 7a4ec2206a69f0382ef1b60e4cde2564
SHA1 1b3908ca7fbc53e4611cddcad02a6b6202877ad3
SHA256 ff042e38d41eb832b8a8796fa9e974410d8aea8fd4b234e1b85bca23f785e584
SHA512 f11a7aece36dc896f1af24dc402372370f6c245f52cda93b0203401c51fe0402bb31e49d5a96205008a2b12ef8ed515f1340fb3d2c0ba8ebf6deaf294774e7cc

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 874fdd81ec475951b90b19a131c15e3a
SHA1 13d8fcbf84811b615a8b5fc494cf773c4adf5233
SHA256 54418095adeec1994f57592dc02259ccd818fa950717d4ba08beead74ce79760
SHA512 2a46b222fea62107e692ad240bd9717daf3f648017cedd303129e0dda2543425b916f68128176b8baded16cee862c50ead0d6e4b56d7a7fc5821b866729e423e

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 f7eaafe67649babe0ae33d9337bfebd6
SHA1 28c051cb4deff1eddd5978ae50b6817e9ca4febc
SHA256 3e16eae38e4362910c3c0572c491b3e3267c42ff6fc94f494498a1534bd31066
SHA512 43ca69d15ac775c444c6803dbe4a2b8d446debac4009ace32b13d507fcd4cc65b1f8ad8cb7c500f35211bf3a977e63d2d07f3afca1b0de3c48b6cd25ded052fe

/storage/emulated/0/Mob/comm/.di

MD5 70a42cba408700f9a6c01c7941a8829e
SHA1 eab01cc2c0671538795fb0b1146017dc099d0984
SHA256 499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f
SHA512 8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 61deb1150d1114c743e9930f96867788
SHA1 2fa2718bdba5c2a6eb72400eb753c8794437dd09
SHA256 bd61b9da3ed635e592b8ce95c4d69fdfd8c2927f9177da4850d5f48e9eb78840
SHA512 761f0593dd7bf931b8e15a8a4bf91807ed73e15afcddb3c26bfc10f54227f04d14dcfd64aad5149aec4ed2060910b41942969117aa06c58ae7e456eaaa11ca87

/storage/emulated/0/com.yuxin.android/log/demo_20240605.log

MD5 5636cdd6fc3a28777629e47208014c50
SHA1 e976bc4c4e907b42cde1da1678975607a318b124
SHA256 e08ef8a2ca2199f7cf98a9a31b60e816ae7f53832ec76f5edbb15ceabfb2021a
SHA512 5c360ef6d8df8f6fc0c9c614ab41f30d9ae412c914395ae64b4ee5db7f2e9d47b507f9bb46b661825cb23a342c2da97f0618d107a212497ebc18967a6e2c66e9

/storage/emulated/0/Android/data/.mn_410185822

MD5 f321656a466363e5192773d92000e401
SHA1 3a6abe9be1a6f4deffaa98fd27f3449c888d3c4a
SHA256 53efd5207de6ed80429ec3c7865eed2b64023a0ed66e0fd29e7f45b708a1751c
SHA512 fcf6884bf5ce8d10b3a3dd461fad96cb6cf0bc4129e01788de112551230fbc4d8ea6961b04411d1c7816e248437c4560277069d9c544e5450612abc0e2c0171d

/data/data/com.yuxin.android/app_crashrecord/1004

MD5 cc05780f3427d6ff872187cb60046097
SHA1 7d6428dea81d01b52cc9ea9186ca973494d08bc2
SHA256 7ef6b8f31d18189318d60c1889c6dc2164817467d19c35700ad44bf2abead439
SHA512 ba33634e7e81eeec87a2b28533193d0ef7daccc6f69479112a0fb87717d9cf3a8596b2a522344576920fe347a6c2577091f73925f5e2e6762dfa771ac31fc5e4

/data/data/com.yuxin.android/databases/bugly_db_-journal

MD5 8869ee1d5fdf5a826eaa9fedcc3301d1
SHA1 7fe231e08751fdc1d9077a12819a4087859b0afa
SHA256 7fbf6d33b16b70acf1b5d69959d94aa05218719298088486cce4c1469a194916
SHA512 af4e4d4e3c2a5b25fa242a2ad85d1cc1bd80a464590a11bbb373f5904034eeb7167ddb5ed91ca882db88cdc536198f8fdf60493b6554945955e17250d0ed1387

/data/data/com.yuxin.android/databases/bugly_db_

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.yuxin.android/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.yuxin.android/databases/bugly_db_-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.yuxin.android/app_crashrecord/1002

MD5 93de9f5c995ff874e3fdc0367496c1a8
SHA1 f1d39ebd008355b62f261ae261527788a3931895
SHA256 a8b5b7a2a51b00553a4dabe51ca795dc5dd263542fa23fec66ae840c99f8d871
SHA512 bc490e5c054139812c58a714ba68b5bd96a1544d0edee81fcb579581bf9bced0a0b2c9b520dd8b19db9e8b8895dc106bb7d0a6479edbb1e2c482509ac4cd6ef9

/data/data/com.yuxin.android/databases/bugly_db_-wal

MD5 30c0da1c0b35f7cee0eaf2663d94b920
SHA1 3356a552f9f413994f01532ad9ff8bfe62208258
SHA256 995d4c547acef8dcc3d3de89b251b05b95bc425a1660ba13875e39fd21add7dd
SHA512 dbe922c6058da7c42758f1b2a622846104400785d5c41ad58bef882718203f2cd5639509d98074a8ef34111d044ca4d92892f46a905d30de6550ef6a7cfa061c

/storage/emulated/0/Mob/.mcw

MD5 567f7646f86313ead17fb71bcefdac11
SHA1 42c8d5580acf39e756b333bd1337cb6e714be739
SHA256 160053c5e713c9ef384889765028a12c0fa0e29bab5353d9500196f89a1f9105
SHA512 e7a9c220150a9a57094b01f334ac6229a434efcd0cf1b0c42a3775b42c4e5cec836dbcf9bab314b336ec36e6c17d6f329d46f06ca8d083a27befdf0a6b90009b

/storage/emulated/0/Android/data/.mn_410185822

MD5 82516cbd9ca1dc66821ca30ea025edd4
SHA1 35c30ff8d9169b3917e480651b8b1efe5b99548b
SHA256 36e1dff44faab8fb3df2878b6687e332a0a8985adee236f79a000659e3cebc14
SHA512 9ba192a8e18ac07868d018d7c33d86cbc99be3cc3a63da7d529eacfc8b8aa0d402ff1a6a9f1916c5e0026ffe41d6906e9b92e3151b6e8019a0f48965b505dcd4

/storage/emulated/0/Android/data/com.yuxin.android/cache/net/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/com.yuxin.android/databases/yuxin.db-journal

MD5 8716eeecccd3f1631090c3fa7609c2dd
SHA1 85660ddb0a5916fd8997837a95fa4f768947124e
SHA256 1cbddc823c3de2b16a9ea4bd9638ca6a07ea2c292049c04ba8f7136e9ee9d519
SHA512 0fea9ab80bc7b96a1d2d2bead217722712d0b875ca174f010b822f902a43ea3089fe06dc2cae644f788092bf36b2a8bff0088fad5a201caaa496e1eb908b5e51

/data/data/com.yuxin.android/databases/yuxin.db-wal

MD5 17b9beac2dea31296379d15d30bc9e66
SHA1 cb21a76df5c2f4f11ac185c47a273515c3d801a1
SHA256 bae8da7c30167a0cd0ae116ae1add530e57a10c87b4173c9ca21916d1a8e0e7b
SHA512 010dd3527721b454a2a50a4bbcd3c2e9d8f7639706c922be44482b474254abe5edeac4c7cd6071363a851873a20fb9d083028f21ceee374215ee88b2e9757e8d

/data/data/com.yuxin.android/databases/yuxin.db-wal

MD5 fa148820ba07c6add080cf94a60b4fe6
SHA1 a16362da6dc1e25eedc83d724ca0b658f39dbc8c
SHA256 047506b89d1651a03bcdc0e51d21171b293ffce4f531dbe5eee4c4e66c1b2394
SHA512 727353d0ae18594aaa21bd3bde70a06a84681bea58c1aeefffc6abcfdb5242d0b3d758866ff15fd871eed6261ed4cc44aa684e8fb03a562e5be927bed98c3005

/data/data/com.yuxin.android/files/libcuid.so

MD5 0cb29f6776e9877136553f6ffe8604c1
SHA1 65898259c1d8e800465748ef14eabe156111730c
SHA256 82580d5350a5640037a57fb4f4f0220b8dd0c8ad6f3eae7cadbd907bd5a7e13e
SHA512 4056879ee5b24db74719b77ae4884bdc79b6d95a3d8a06e587687f805321a0570dadff0eccf72805e9110dc91e85ab79442804f6c270145627c97e765dfac44d

/data/data/com.yuxin.android/databases/.confd-journal

MD5 220f96f6c1b99581eb80563ad35d711e
SHA1 cf561de2cbb4f650678930ea9fb6042fa62b75a5
SHA256 5e9418c8bb19c9b9138178db7c77e35adec7f8f3acaef6b60de972867adaeed7
SHA512 ef34fec0ec3ad0df2be0f102198dfb7962b7acfed3a98986eae00c4089b7f4d78d4fe0999aeeae6288dc4049fdbb82fd6dc4a113c6f53f96b51ebd0e29639ea8

/data/data/com.yuxin.android/databases/.confd

MD5 249e034c9703afc1fd6062371c7f3da8
SHA1 9ca489179488e0fe5a35f7c0d5887f163e4890cd
SHA256 18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a
SHA512 b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

/data/data/com.yuxin.android/databases/.confd-wal

MD5 d8441224a8f7b84b982b7ac5d6ac0c56
SHA1 3fb965065a152e0d90dca6b6bf1cb7eaa89af5cf
SHA256 ba0d81dfbf626ae8f21e9772a649802d348ec6a09288c4aaca5a2ea6fd67067b
SHA512 24622c5e08f5ea147ff53d14a1af94e0b51e657613cf3a48290e0733bc8c867fc1496476857994b3a771e3fa738dfe3f6168623da5c00cf3ae26cf378832944b

/data/data/com.yuxin.android/files/.mtj_timestamp

MD5 568cdda8a1b5b5c94b3a139216e02cc0
SHA1 16aa2490cb326e502633b234d6a8fc100a5e4284
SHA256 a60194ccbd29899044c3a90cf465dc6cb955982b3a82a55bda0e847e77383003
SHA512 85a3b3fc2a0b170f36473fa45feaa630d0905bd5ca4408636ba313ff06b67361a8297a2faa9808c5540420392163cba19328ccb8b7685828f3ff25a3da36f5d3

/data/data/com.yuxin.android/databases/.confd-wal

MD5 53c50b16c8576eb3162aea2a6c515a75
SHA1 09622e82523cc00977e4b9be9f9c99f34c4e144a
SHA256 c7ba40c52b01c8d4fb64ab489d567c4c4fe1fdfea5fe5d6908dadf54e4845b3f
SHA512 629f8f8185361a2c692f4204e5346d07d3c10c21f8bb4b004189f65c6fb54efd9aaa741723ac3e85952d9db6a3a29df6f777c60778407eca4a71fad826acc051

/data/data/com.yuxin.android/databases/.confd

MD5 8c7f6e3b52e6e841b895bbd13644ed43
SHA1 ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2
SHA256 6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c
SHA512 cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

/data/data/com.yuxin.android/databases/.confd-wal

MD5 0083c1ed2e6d2772c9a37896c6bd4c51
SHA1 bc42546fc2a0424f2d8aaaa2aec43c7db9c594cf
SHA256 62ba184fa75c69ba47bab2ecbb343b0839d2967474e3f62d949bd7c2eccc3029
SHA512 73494c98125517d81c3cc06bdce06c54641c4e13199db38e470a0f99e2ee76f9ac5aa801afe48e501acf2e3a3a07f2807fed7a9d3c474601e8343fe7e3f171e3

/data/data/com.yuxin.android/databases/.confd

MD5 c4e464298195c5cee5e78330f7bc05bc
SHA1 64ccc29773d3b2b96428e0610238901a3c8c4db2
SHA256 e52e5d5868f5c42ff270eeff9f2ea64b2e0a11eaf4514c12f12af86eece4bb1c
SHA512 548ec76f1b6e04c3d066725bbb49c133c6aa4de68299c66ce0998ea97742c448311d2ac9dd521baed497bd4754448a6509c8fd8466d9c06e3fa0d17a703e0e52

/data/data/com.yuxin.android/files/.mtj_timestamp

MD5 352fe0c0ba94d40ce5c7a451a4e0c440
SHA1 040c62a10305f3d404234b9626c3c2d74496064b
SHA256 5534007ace6816a9ab691d7e5032f66eccd8e56fdcc7fbfe4361ad82c58183fe
SHA512 80d30b47762aaa779fda43009560ca91a6710afc6ba7b163ba0a6aad7ef6e9fb834fa4779d8288bad250f36ff4afcd99801316bf7ef1bbaaa52f0063faadba3a

/data/data/com.yuxin.android/databases/.confd-wal

MD5 012d08152fa0bf74084847bfb0f0d40e
SHA1 c572672b5967b2ec222f0f9a91ada001d70d0781
SHA256 2c68ffe11b9a159d7b8c1b20259dbe289b20986a0419394d011969788cd91662
SHA512 a8d8a4eccfc183a7e572e461b6f9530c13630aab29f6e08a01e054d972d9ce46329e610055fa20786aedad0b97028c3ddaebf60898e6f1cacd1d6dad00044ad3

/data/data/com.yuxin.android/databases/.confd

MD5 c3c1302c9706d4b8048700710c90721b
SHA1 489e3cf5d358f2054e81c00b747dcdd2b72616e2
SHA256 543f65ace72cdac37801050a7e197d7a8675ecab8e2627d24d5babfa83acddb7
SHA512 a6369d6e606f8058c47fd03362df8c6ea105ae4f13f31375fe5df62e1b5a33bf7ff856d8a2bb4da0fc48563b987a6778e45ae4c21a1eb7b592fc732d86d992ca

/data/data/com.yuxin.android/files/.mtj_timestamp

MD5 7cb24ac9c1d58ff3f4616c8300e07958
SHA1 c8c2ceeac137841368c4707fd8abd8720ea7f049
SHA256 119da7653b2a734e692c13562f9fd1119f2a6fde851bb7faf2712e307c06a32f
SHA512 cb9dd9a756d2303bc161baa589515afc15ff11768fef1bbf42fe6dba080be3daf520983c898604fe36370b38ea9e33833b468f46fcb74a113a30d3482dfb640e

/data/data/com.yuxin.android/databases/.confd-wal

MD5 bde14b30b77acab32d92e4728c3331c2
SHA1 acf8308a7c8e2a812a9ab09fbd6b48218d67b7e5
SHA256 a458a08df19f725feb1f6058348f9c6eac8f44662fc7b5f007039d6a9f37df79
SHA512 e7cc5ebe4ba7bebfe3097f2cbf737fbe405c42664a89039f851196fe5e724102ecf0c9001959c160754d7321354bc0aed158437f7bc1591e88939dc51fc334ad

/data/data/com.yuxin.android/databases/.confd

MD5 24a229157982615b0802efa37c177951
SHA1 3a4613cc3a231d89cc21a844800f03dc00eb4a0f
SHA256 e9e6a1d2ca296caa6462bb946a0f13ad449dc3c4786fe0839d1210d8624b1800
SHA512 814198b23a27a545195a52275be82542e2c1315a840f36612a61a2cdcdd038db5d746adcb7867eba4e530d7a2f3167e966dfd09c325f0a693cd8f1faedbf38be

/data/data/com.yuxin.android/databases/.confd-wal

MD5 cee06fe0704e4e4ae7d3aa0ab36b3824
SHA1 c409e54fe526a2b59533f479f65704b250ee02cc
SHA256 9886baa8cec761aa1e0027af5938345edf31f05b9622d14038596edf6ad64565
SHA512 bea28cb44d75aefd07ac37c67dd7fc0da002d585045fbeddf0f8b8964247feabc0f7785ee61a1e140b9a3e1fe7ab69267e4b68887e4ff25c0a3e87f6d472a8a0

/data/data/com.yuxin.android/databases/.confd

MD5 495a4311b74dd99d6f5bb7d732e063da
SHA1 fdbb7e9881ec56c423c025da2d6affab74105c87
SHA256 9ee7733d2d551aed972db7cbc3e98ad0300ae7fc184ad58f0771de5325ad0b81
SHA512 589b0c08d16aa28acf65390f9eab79d0dab2973254d5e6f9caea90f41250ccdc344f9bb450f8c9d948adcf157ff14a0aea63d99951b4a0fd592e713e5c808710

/data/data/com.yuxin.android/files/.mtj_timestamp

MD5 739b2d4479895a6d8e5b73002be17240
SHA1 a3baf877fd2050c23e94cc8496ebb87fb85a3bab
SHA256 13da9b928d7b8b65d7711ee120daf1cad4927273bc3358a8e73304274639e543
SHA512 44bb4721200a9f3c8d0cdcfff212fa2f943405940314b0a1eba4c223251682c971406c4ae09d5f5c9e1d252aa14679c4994cdba7dc9fcd6514bfa633d02fcc01

/data/data/com.yuxin.android/files/.mtj_timestamp

MD5 0543e36066fadf059241c3ee74010c03
SHA1 63764c703da49a8c2510e5f472b4d7fc24fa7c38
SHA256 0d2fb1df217c4d3820c4c8fa1909b354274c3922a4023bc44bec93aab1c80509
SHA512 1f266ded27af01e620e0c8472d297698a41ae739081d7c2ffb614d058c80bea2012d48fb3a74689cfb5d43bae31504d725b7791a15c32adf5df1eea17bd2fa63

/data/data/com.yuxin.android/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.yuxin.android/files/Mob/share_sdk_1

MD5 8e24e79baab91c4d0604eaa9006a0cb3
SHA1 e427afc94a4b957a7096f73e395a10ea404c076b
SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA512 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

/storage/emulated/0/Android/data/.mn_410185822

MD5 bddeabb3d1c16a130dc012f4153a4f37
SHA1 50788446d8ea538b7af082e50880f075277f4c40
SHA256 bf44ceb349063891a11ba1925bc3456e8466cb936bf62bccdf058ad54b8aea43
SHA512 afdd0ef25f6c3edace36188e7009a33e88a5c30848c44ad4ebfee14fecb4fc83197551aa7684c0bc143153b8e68969af490c52151c50d988046b6e44cc51d686

/storage/emulated/0/Mob/comm/dbs/.duid

MD5 a263cc749413d76cbd9b4bfe4caca79e
SHA1 f7c03619a21105bdc6f6f2285ff6a39a2606df8d
SHA256 ef439d16a6c626b59f9447f1ba2a8a86ac8f7f9e095586ae1fc6a59920d01dbf
SHA512 82b3308e1dfbb21a98cbb58b392c21c957756574463873db1541386cadff2bb3c5649d522fa6cd4493c02a7b8798ee9e1008c05369284d50ec57a450a8d4954d

/data/data/com.yuxin.android/files/Mob/mob_commons_1

MD5 a3ca159e10ab377797b002e5442bbfd4
SHA1 a560cbdf7d71fb8a6a5fe06d3678faa410c7fe49
SHA256 31ba0a842d8e84f809ef208d1783af6eb5574d75c69eeb96e542d85389d93020
SHA512 69380c38350653f19387c1936bf0485332cd2491b0f0fa924ab09e0f0de6f30c12c3c5f7db6c8c76bbbf4b135cd77883492e4484a85a18d98c382327aa0bedba

/data/data/com.yuxin.android/files/__send_data_1717629435991

MD5 c757bdb27ca10e8a696c83d82516b23d
SHA1 2a1211b231d6fb9f054ef0cb555db52b8a83d583
SHA256 578e1c14a524e88fa245567242048da9100b748f3f5795549278494292dd569a
SHA512 33f42c614548c6d8f3a4fb0952427b424987b9c2c3a02c3e8a41ee3274c2eca241a88cde0b85336051c57e93e90b036a1c17a4e6ed727b5153531127b08a7025

/data/data/com.yuxin.android/files/__local_stat_cache.json

MD5 cfec6a233bdde1a779354c4fe3bd7d3e
SHA1 cba7f4ea9a7550aeb70c7372a8c025cdcaf4df09
SHA256 8432ea17ef98a9883b502a35bfab841dac1f1c656571bfc98f1ecf74525c0e56
SHA512 a8c297634c48181fde5420f0416f6d8070e8022f5f212fee1de567ab1fc26d523e7e624a1f0fb62cab398aa07f4963a58f7d83d2296a27fff792b2b234acbd4d

/data/data/com.yuxin.android/files/__local_ap_info_cache.json

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

/data/data/com.yuxin.android/files/__local_last_session.json

MD5 444ff5cf950c685d75c257b8a3983718
SHA1 4cf3d14160fd3f685e67dbf80e25223034356799
SHA256 eb3c8a48250a07eac2f515f1c223ed04d7a151bd9dbc53a7c1e7cafe39706cb8
SHA512 7c534180b0ebf72a4c366ff8446c65a5c6425647b7728e8069e62421d0742cb9b85256e1ab4f0e5e93c8ad5f9cc80215a06437768edf3df06a6d7bb45dbd35db

/data/data/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 48466466baf45d80abfc343fee9242af
SHA1 3666db2ade0ae56e09c754d56e5594b85263234a
SHA256 3b88a951c455d3f15414a3d254be74483a4f0c0b1de5057083263d8297a57d39
SHA512 78816641a0a43374410c2e74f9ce087cfe1c33caacb05b5c503c440e745d08e548775b0fdc37f13f048b680e60e65884b1fba2910212e90be34daf440023e11b

/data/data/com.yuxin.android/databases/ThrowalbeLog.db-wal

MD5 4fd08fc77e9437ace34d6d251746965c
SHA1 4d438e4e0a758953b26accf8edfe7d3dbe076b85
SHA256 f2f19f5945e1d8f5d7c12341e85f9202b3aa2e339bf63585afca85005cd2abcc
SHA512 731d570be4eca473c9efdeb64a49af977ab22ac9c642bfea2d42dd2069c9a5322b34eb8343cbd664dffb83bcd74fed3437fccd1a4e565667948ff975066a9389

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-05 23:15

Reported

2024-06-05 23:19

Platform

android-x64-arm64-20240603-en

Max time kernel

175s

Max time network

181s

Command Line

com.yuxin.android

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /data/local/xbin/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /system/lib/libc_malloc_debug_qemu.so N/A N/A
N/A /sys/qemu_trace N/A N/A
N/A /system/bin/qemu-props N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex N/A N/A
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex N/A N/A
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/user/0/com.yuxin.android/.jiagu/classes.dex!classes3.dex N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.yuxin.android

com.yuxin.android:core

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
GB 216.58.201.106:443 tcp
GB 216.58.201.106:443 tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 216.58.204.74:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 www.lztion.com udp
US 1.1.1.1:53 wannos.127.net udp
US 1.1.1.1:53 f.gm.mob.com udp
HK 103.129.255.21:443 wannos.127.net tcp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 180.188.25.47:80 f.gm.mob.com tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 14.22.7.140:80 android.bugly.qq.com tcp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.42:80 api.share.mob.com tcp
US 1.1.1.1:53 lbs.netease.im udp
US 1.1.1.1:53 lkme.cc udp
IE 54.73.57.121:443 lbs.netease.im tcp
CN 43.137.70.64:80 lkme.cc tcp
US 1.1.1.1:53 dt.netease.im udp
CN 183.131.177.88:443 dt.netease.im tcp
CN 120.53.207.65:80 lkme.cc tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 43.137.70.64:80 lkme.cc tcp
CN 120.53.207.65:80 lkme.cc tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 43.137.70.64:80 lkme.cc tcp
CN 120.53.207.65:80 lkme.cc tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp
CN 43.137.70.64:80 lkme.cc tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 120.53.207.65:80 lkme.cc tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
CN 119.147.179.152:80 android.bugly.qq.com tcp
US 1.1.1.1:53 f.gm.mob.com udp
CN 180.188.25.47:80 f.gm.mob.com tcp
US 1.1.1.1:53 ebjvu.cn udp
CN 112.65.70.244:80 ebjvu.cn tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 119.147.179.152:80 android.bugly.qq.com tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp

Files

/data/user/0/com.yuxin.android/.jiagu/libjiagu.so

MD5 97f721cc3f64cdbf0aefb9fcbfcd7df8
SHA1 df0a0259f1aa08388bf07d1e9d7def13ac63c9eb
SHA256 e9fa9dbb595319bf42408692f4436680df44926dea87cf2ad5e27a3638c14ece
SHA512 acf6da447915817186403085508fb8cb8e813d8f80f3ec6cebc72b6a6d60d2afd9434d635e547165b85f721c0588c6486454d0fd27d2054f258b7f39fa251fd3

/data/user/0/com.yuxin.android/.jiagu/classes.dex

MD5 5e096d05686eb37c449c6bccba742b79
SHA1 52e548f1df80353045da2e5f6c7eff11ba57e124
SHA256 2566c5f9749ff23420ce56750a8229750d3293c8c2950611eb76513815fcfb3c
SHA512 aabe6f96a39c5d968977ef67fe6895ecea25db62db9a1117094f3526754e7c19f07e10a824dcff605db636c9bd24140c435800eac151553979831d29b7c737ed

/data/user/0/com.yuxin.android/.jiagu/classes.dex!classes2.dex

MD5 c5d815704de2593521d827b76c4184dd
SHA1 2191b947d2f902ab1268f12258028eb952c3d0e7
SHA256 bddbcd65c20b8524e77d1233dbe354811b40a4bebae58d06503ac7eb5cce7197
SHA512 625b5e3e693596b01ddb181ac3960a2ce5be115b05355d8ca476903187e81ecba1f8c9541220ebb569229bc995af3d1a185aca17bf439200e12d521034b249bb

/data/user/0/com.yuxin.android/.jiagu/classes.dex!classes3.dex

MD5 579dacf27481393fbc917b0f04279f61
SHA1 9adc144cea1e1ffcca7a912676b037b2b79e81aa
SHA256 eeda818be92a1d8e007c460b107f23f3a50754fe8a03bdb815efeda615e7b5bb
SHA512 57a3505aca838b9341560a3bb10bb11e43117e81a1d865bb2de558076035765c74a52dbbc63ab1cee317f1155a75a8ced51a27030fb5a96be5345564f5a9e32c

/data/data/com.yuxin.android/files/.jglogs/.jg.ri

MD5 d0482e59538ca1b6d6a18c8b7c1a0303
SHA1 84eeae6be8ae128e76619d7d9281305b74bf4e88
SHA256 b79b9e60ab67848091e423aacdf87ae1673e6027e22bfd16648b5a8692874d62
SHA512 5b3536ea79f0046cd19988f3f2d537a5d8518c881228c54ad55e0bb34d2cc2c18b6ade106ae2e46e31ae7790a3d7532c54aacd6488c6b662e6996286625f9a6e

/data/data/com.yuxin.android/files/.jglogs/.jg.ri

MD5 4c684f7911ea035df0da08c7bd4b3121
SHA1 c40404a9e497a55fac661b55637b512e9337a1c4
SHA256 9a513a644ebcd10eed55c70520539d0baf8311e61e6775acd86f0027047583f1
SHA512 bcb1acff6793dc143ab82cfa2a51f70147704d676f275b860eb6b89637db2f75eb512c6991e677a4420698535673e1276dff2db4335834911a6bcf2a42f3008a

/data/data/com.yuxin.android/files/.jiagu.lock

MD5 c236be41bb17e05cfaa81f142954e070
SHA1 2fef32c5f0a04f3a6a9f7682312a5a04731b760e
SHA256 2331fad4eba3608af2246ba9fedb0bf1ec8af6c5e12769a338b7785ed0dd5108
SHA512 068024655e6d8679b24466201112debac4ca61e008c40fdf316ec43a99ef813fc95e7bd5bc0cd6e7f3fed6d8ba20edb2b8730b7ca1208b5138baab03de4c5f07

/data/data/com.yuxin.android/files/.jglogs/.jg.rd

MD5 e68afc2d0d0e3ea7668870980d837b67
SHA1 572c56f41c8e83e44cfab15bb999a17aad984af4
SHA256 fb8b10fd1ed305c6f1b0f71658f8c10db60e82245537c2c8001d2092d93aad3b
SHA512 e0530012e1f97d82887b52f9e70f01138bad523088b9ebcbed633540d2f0ae8457c8f7edc837fd1c99a06c6bc3ad544ba258ef9119049b79dee218c7aa0c2c51

/data/data/com.yuxin.android/files/.jglogs/.jg.store.report_pid

MD5 7b7e0c4859baf1012b0339a8f47d84d3
SHA1 6ed086e7027a4f96b4ab1d26927b85556b67914d
SHA256 cc0c8893a7a40ef80c6e0c430c6b8739a31d19fd761e536f74670a7198d2b4e0
SHA512 126ba4d282008f9a8bc98b97307a8f4f6c18ef9e1d7e86f28055affe0d6498def8129bff21eb608ab63d915376e025ef95b5bb2eaa53de7db08228d84b5d4042

/data/data/com.yuxin.android/files/.jglogs/.jg.pk.h

MD5 21afd9d69f7734338f52adf39316b3d3
SHA1 7a45f469f606b17208e770c79b8b7c7bd429dc37
SHA256 009d235c6d19763bef41723d9bc6aa5d92071d2feb9ee2a006d0f2b1df1e26ac
SHA512 2971f81fdcd248f9dffb31e879979b71eee6238954c0707e24451243b69efab58d2face1516b5f82b4d6c2253862fef2eeed67c076d26b4f923a48665798586e

/data/data/com.yuxin.android/files/.jglogs/.jg.pk

MD5 17679a3e2e94db9d50dcef2244b75a54
SHA1 8235a4b405bad10a58d0ba0dc931db04b0008652
SHA256 1f7caa63f3300e908c706d98d3925d92b9315a7c9c985eeefe82ebdc7ac1d8ca
SHA512 d8e3b1ffade788450f9641f561b553cb216851731c01f3471dd229e3cd55253cd3c571ddb10661b0a388ee16b5646f09d487a9aa2e4bf0cc85c0e4ca3de703fb

/data/data/com.yuxin.android/files/.jglogs/.jg.ac

MD5 4f33c1a1ecd57b8abc60a82aea1fcc4b
SHA1 34bed68d0545f948a46a7eb03efe02db019c7f87
SHA256 534140faa9f40a7734f00eae0e27b570fb9cc68dc247f82eed4d9e18dcb0a862
SHA512 ddee5024247c4609fe79225fcb5377feabed5b151f34734f09ebda451bd52eddba3582abc1d34146a3f26fff1359928fedb564c591c10b8a4edba0f7628f0a3b

/data/data/com.yuxin.android/files/.jglogs/.jg.ic

MD5 4c83787fac60cf44fdc79583a1d1e68c
SHA1 cf806178a5cda7c9ff5ec3d911ecbd2f80103c9c
SHA256 f77e8e511cf62d40abbaaa316412fac3f2bcb90644f1acf930a9ffd30eafcc3f
SHA512 9fa0b49ecf62350325ba242af8539b8cc9719ff9642e17b689d48f84bee83f1c915be724026cec357d9225c0968479b006ffa4f4853fe734b2be6667cb604752

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 dff19da12420b426d212cb213712138c
SHA1 e15d259d74e3e6ec312eafaadff7ea554467eeb1
SHA256 970d960eb4b6d987c2ec196c839378dc308675aa6a8b1db95a36dcdf551cf557
SHA512 2913700951f971f8a94b7bb35ec30e208b37ff8559256ff6ea357788d1eb9a029d1fb37271bb06d0631ed8ee13b323af13b64e3f66a1a0dcaa33cb9be7c7e29e

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 8a92e215cf4e9d8bbb25fe11deb494fb
SHA1 46ced97d8ad351ae4dc0d0800001a009542674bd
SHA256 39752806e62d163fc27e5ce0df0668e98d48bb7492eda9ad24125f1dbadf18ca
SHA512 cd93d7a8ddbea030d1496ec4537b2db84c637e969c43181e8057deb072df74d3d3a7c649c8516bd395508b28c89a8394900fa07e2e7fefcbe694aae7b3a151d3

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 04a887b801e0debc39f3a5249969a9de
SHA1 bfd5c24f82a16bda7c99407a86ea5e5d734eaf40
SHA256 2580085ba12f805d87fb6aa9b56d156aa189b7be66a462b489bee9a21e051092
SHA512 f52950681495d286ed7c2adcf7e488e8bbe6994dbd6e20c3dbd72dc4b1dfbf3f726ed5c12c8d25542ff39ce3b3c790dd3b19fc8dc57f4950620510cc09adf51b

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 ab83cbed883a1592a6ce77ba3c926feb
SHA1 a9349c4e1960a5177d564988c766a9275c4d0547
SHA256 8d91be66db900b193bd9b8d5a0688bf91871cc3827d7efea4b1f7bcca99315dd
SHA512 8be29d7217cc94b0f2385175f71b22e7dd6c1658d47a9c656d8acccefede7bbd34d052a76395a51e0af28343c16cfc3740c682e4b1bc1891e0a56a0c3373702d

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 d1032eff51170d6b0d50a84f6068055e
SHA1 0df89451c0414e2cdbc682eb543efe59c7bdf7c4
SHA256 c366f9c2625bb005f0f50dfd8b52de9a828a5b7af29c0296f9b539d3b2d0739f
SHA512 cdc5f92c388bc7f9132a079b7150d67a43fa74689f305a44d7f2e9c90a642f43ff5e3acfb40954724e4acaba8c9b2b8b5f6bab5f5ac7db42645bde87e1b0d0e1

/storage/emulated/0/com.yuxin.android/nim/log/nim_sdk.log

MD5 20e9f1f3c1dc7e4b0bfd1c354c914821
SHA1 492a2afdb6d18d559d372c91bc60ee63262725c6
SHA256 e47bd00cff8ee0415c01174d2535d980b4dc80d1d69a6df7d01c8b662fefcccb
SHA512 b20ac59a474bacdd6168a672634048e34b2c73a1e3250d07d7b40ef0bea8922ecee3b03113d74fe175b07a345c23b370ecc3c0e8a552d433446675782f96749b

/storage/emulated/0/com.yuxin.android/log/demo_20240605.log

MD5 cac2a95e6eb0033db68fcf37fa8d04be
SHA1 5ff2849ed0ce64b907777e6412ffa785de4aa766
SHA256 f2301971e20b9b252da0952fc009f0eb6b349605146303a2ac5453eefa266842
SHA512 8d7edff03fb54575431a8b608cf76c86d53bc193904f12d2e290a878d4c2b997cf83d24b40f20f2768d0df73203c92eef639a01b5174d4d00fc3236f86349c64

/data/user/0/com.yuxin.android/app_crashrecord/1004

MD5 be537c93efadba4abe8e832222bb89bd
SHA1 a7021db9abaedb346bd9502f4de9a12377e58069
SHA256 2b5bc517745e0c77a9bf0911f995915bce798ebc4b22402a713ff30fa6357cdc
SHA512 091390bdc335928d8b7b8f2aadfa166e649ada92c7ccf84ea3ec533d6c267169c6d8a04afb35f97ca9ee3b59c0776acd91243a464069c67c5d681501772375b0

/data/user/0/com.yuxin.android/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/com.yuxin.android/app_crashrecord/1002

MD5 41e3a70dba9e8b5538c01e99f3c72ceb
SHA1 b103647f03298adde5bd6d039225edc80915b7ce
SHA256 7f178e60dc6b73cdd05f591742834023815f1fe5bab12ddf609e827ecdf61b00
SHA512 eb25adc06589264ed6e68f61e52099780b43fb0699888c613894022e5e1b1f800d92ca8955a490f71406eb0847beb49672de33d86186da3d31c44f5194f6d13b

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 11e3e638e62161a7c6f22f1340083e4c
SHA1 20fd29f273ad7ba40e8bdc3069a7e642c45af19e
SHA256 a3537eaaaf27a9375517b86239fd4483a8e5f5673b67182046e90074503abc11
SHA512 a720907d9afeb72c40ff3df916572229be1d072ce6add275542b6645dc87f9dc1d14d137247f4f79ddff818d8899201fdc1cba240addc1c04f43fba40779a744

/data/user/0/com.yuxin.android/databases/bugly_db_

MD5 451dff7a5a106c0ee825b01b4a005600
SHA1 c9fa375d4846103e1b1a537d2e0154625d7a299d
SHA256 98c77bd621cf4644ce12988bbb78d9af6d225273676ae4bb5ccfcffc19bacab6
SHA512 d72aa107980b81f762c891432cbd832d95809cb57e4232d6c275709fe8d94aaa75a21ded001acf135a2c78814c5c4361df2094c5ea20754bfb595763509570d1

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 516266a19db78eaafce8cb727bcca8fe
SHA1 ca97cd5a47bf0803172ecbbad98b47018f0e26b6
SHA256 787fd9d2525121dcca379fc323e8f8c6d348bbae3c6e3d04b4fd530c97595ed2
SHA512 48acab32cffd44586f0db48aa521de541413b64c131eae3710445faef143a13e1380670c8bfe36b7748a7bee68b9a160b1a2106a9d910a23ff2e0370ad418667

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 1cc128d38628a73849611b32a67c82ef
SHA1 976c502960bc351d842903edfbf531521dc42165
SHA256 4bcaf4cdae5d146364d753331b152353849cc73f0b40472c225a2641c0e2caf6
SHA512 70839e91b1c8a6b9dfb0bb6729951d3facaed3eac16a3f0316d4827097478efd9fc4ae3bc2468749528a2b2428cb42c7226448715b0862c2783375743e5397e1

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 30fb3be567ae758b6d70f1da73163296
SHA1 7a1ead997da43b89d5be88e3b85fbe9c6ad9ed5d
SHA256 cb3575e2d32fe7e0101146f69f47654d775d79c65f2383d5b95fcfad245d7a49
SHA512 ec5e79da886a11db8ec958ec6549b95e2c38a4d919b44d83eec0ad8d5da2be597b57dd0b0d32cae8e09d79da3e8eb2944d71ac2c8b6f59317cc7a3ec368e4226

/storage/emulated/0/Android/data/com.yuxin.android/cache/net/journal.tmp (deleted)

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/user/0/com.yuxin.android/databases/yuxin.db-journal

MD5 8696981fdcd7c94fba0a5958ee183673
SHA1 e9bcd650f9a991695412afad1dba86215c0864da
SHA256 6ec1bd9e348404c3f1d763ea72ff641c9631164555f315133ced315748c66fb6
SHA512 fd5d15de70133a177bcd324bdfdca4a77e43f44f32e6c3214a1273865fb6625368cbb9ea9f88f164438f2e036b5043412aa761ff243c279a9706a4e74992c500

/data/user/0/com.yuxin.android/databases/yuxin.db

MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

/data/user/0/com.yuxin.android/databases/yuxin.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/com.yuxin.android/databases/yuxin.db-wal

MD5 2b43e6a3801dd3b27ab8385955baab9c
SHA1 dfa8d40a73bd641377b4ae5d61f62b48450f0dfb
SHA256 939d29512693ff695d1b7a76a2759f18f6fff9ea230eb056515918f97d2b59dc
SHA512 1dc3b102d8352580b2f05620c205a8fc0152c992f45a8241dcb08dda6652966e453ea0a01e08b2dd2096400bb1bb4f610ef615a4163b7a99fe9ad7cf8b5f3f44

/data/user/0/com.yuxin.android/databases/yuxin.db-wal

MD5 379904f40258adeb54900ee1e287affd
SHA1 3cf44ea3827ca01f961e47fbfa62e918ee7fa146
SHA256 0024518b83b683cb9c9d9aa1f631cbdca89201b9758976e5bffb592313fe99e5
SHA512 8cbca9d18b0379fb3d49f22e3eb6b4ec26203489058ca8b4c0b6671be87d070ac72d84246663204148d556af691863d07b2048b06951018bbe61c40dbfbadcad

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 9a5bcd6b19cc808c4a5f02c195078b75
SHA1 3358238e6d514e4bc219f6465b9616cb4fa9aa14
SHA256 53d8c56a97713b3de489ff1b55daaa5cde9bf2bff0a3196f4402b323cfb498d3
SHA512 1e3581939713c7b1272fe04ad350619334b76c6761b3cd81ad737230d98ef71a0b5395d7d080c119673e81601fc086251f7c8022eceb8d8961083e1ee28a80b0

/data/user/0/com.yuxin.android/databases/bugly_db_-journal

MD5 5a82e415ef7f8fd4c31a2e1c6287ed6e
SHA1 9ea1efbb0d0304e8829ff563f971a718ca14419a
SHA256 a361375a111b47155550db4e80aa3d2b821f3d2572f076d82082254f044fac32
SHA512 8389806b8f80eb44c93966efd8a771b229a636f2b8bdd09134102369a1747f2584fde4111d471dc1ca3ba046216d35e315f4395916f202a71243157dd037e58c

/data/user/0/com.yuxin.android/files/libcuid.so

MD5 00bd1e5146721dd13f30431a8af9baa9
SHA1 0f95d0d70ac9cc80ecf0ad666baa6d50365d3958
SHA256 a4c300514f0bcee538c0bf6fd3e589f3bd34ca3e58d7a55d6d1dc262f2b65728
SHA512 d199ab06c7d0e1cd08252e26656980a5d027d1b903aebda15740c2b55f4179c02d014c33f1f81ed32387832bae25d9fe43ead5c6096591972234d72b687269bf

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 82f904a75e3e4291358cdd22b956ff15
SHA1 2fa580f237739032d599a15f01a078bf26bef3cd
SHA256 9445244905940b55ca169aced012ebf37c4b77c6c26d86dd3fb84e07461a133d
SHA512 efbd9f0a06d4e5cf94af5935f475a9f55a5673293d3f1f2b258b6c5d0dab5627006815f5bf12446f4cb34cd73ae1d347964a6e778f236aeb6144bc10f19f3806

/data/user/0/com.yuxin.android/databases/.confd

MD5 1c8872cc763afb2f791a9347e8dc895b
SHA1 92d9e156ea2640bdaf7e883cb8e4e11264e381ab
SHA256 72d1e0672f5346f5904aaa5cb09085dc2b71bc594034760bce25fe973fccb80e
SHA512 58327074c8b6442221caf181c2f979714d98240c4a8e43ea41b10eb11f67d3941731ad0ac0a6edfe49f2fab2081f4e8cfbb22ffc2652648ecc594054c15d8e00

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 8575b554331dbbffcc04bfe078ea4b1b
SHA1 44807a24f5d64eb88c982b7ed25e278ef60937b0
SHA256 4268e8006d27ca898b4aee07e4c03facbc9db2f202268e632d40ba1e9d10ab72
SHA512 29b1f41eae651df68524204ff4fcac52db07467eea9098a2484c98f0d631a3fd1a96a20f1b1f86287f656ac4fe46d7bf3db4fd5cdfdf956e9579a3507b1a47bf

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 9546d7b3d4fb0d829024f4962f5705da
SHA1 4131a18600146ed8141deae1584c46846aa21398
SHA256 18429047612b66c1f2b843696f1e08e7afa5f0d72cdc111595d58e774b8c5d4f
SHA512 8d08e756576799dc081c0370e39f4dc8ed3fb46772f5690d88230268fd5e32403e300321fe8c7d9d09fc24d9be4868613ca8cc038ea2471494744b3310a83e13

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 98e1197c8f46f49dcd210a6ad8164cc4
SHA1 13e26d2de335c0e55299b8ca62901c62a72e39d7
SHA256 10973e9fe2d0a681947942d916f68b6c009bd9a469af1069016825cfbefad7db
SHA512 2ad6f4e8638d671b7f147ae1679bc013251e1cbbde2221488440def35107cf0c9fac22c18a3d169e6abd4e6dd811205c36d31a52a95f2b98768dcf5b94a785db

/data/user/0/com.yuxin.android/files/.mtj_timestamp

MD5 2b162c3676a55b3703c7af562bc5f3d1
SHA1 66eeca9d2db3f56a7ac8880e3a95e7b74a7b0407
SHA256 9c2e0ad44b3ee4a037c72829016b97628279b249df9009dcd7742a3c21ae85a9
SHA512 7c11fa8d4d7d5a229724b2577f94f53fdc72d0571492293ab3ec91edd442ef11a76d41873b55e07f5c873c40f32cf6409d5ca3bd6a27da0441fd119e0f8c7d62

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 70d836de884e0f4e20077e25634df0ca
SHA1 bb21b505f4070baff7af96c7c0c90749dad3149e
SHA256 195604eccaafd3a514f9faaa351c67b50e4f211ad7bbe608ba703f74c1e86814
SHA512 9cb199a7917ff99d89308842e51aeb897367947fa02d1d5671d3eb4d4c6526654311bb48d17a1727977f2c2c431fd49e7d479ca0762c4a9c85f058d5251f02d3

/data/user/0/com.yuxin.android/databases/.confd

MD5 915b14670a6e358714ac6afe9458360d
SHA1 a80bce9280db4aa28fa17f27bebdc9c1075ca964
SHA256 03024cb648aea2f615db16ad719bb230e4f7ae7b54c47dac309089821c45fd28
SHA512 ca97b5a8f52446894d36feae7d8d3a76e0d361b914027705ee564ab7b4855faa7faac702ee3d1542a9c2c253cf60fc6e0c1fc517f998b1b92559c36a6170180a

/data/user/0/com.yuxin.android/databases/.confd-journal

MD5 785710a1c3f9015a3951449d84319a3f
SHA1 4f4e62e38477abf503c8f7ac2ac5d8c7693f46c9
SHA256 05b19de536c4cbf42892da2659bcf7940555e659012352cd5639fb610814a3b8
SHA512 801b6be64a2a6bac1da50d793a0726f38f57c9919cfeba9306c5a997256cb92869ed82c3875b5ab4b97016cf8fd5521fdcd71ba5e240101f7cb01a1fbffa5495

/data/user/0/com.yuxin.android/databases/.confd

MD5 2e68d0d35dada32ceed84b77e868d680
SHA1 a6a11696716bbb783ef5520b32739a8fed16d3af
SHA256 c584176e1a61a118a8abcd9be158f40fc3d31b5aeed7052cce119429569910bd
SHA512 b6bdf1cb552d24e7f02b9906a8a1808c8f24c3635c898bbd07eb9d77571a15e9de5ae2eb68321b33016b44fd5cab225337edbe8db7803936c5ac500a01b2c7bb

/data/user/0/com.yuxin.android/files/.mtj_timestamp

MD5 2070973e5c1c3c4d1edd51d52a6c5120
SHA1 b6f616d72f238480b133fc792d591bf0a755252d
SHA256 f55069375cc591b2cea0ae654a59a383ee5713719aaa62ddb2367daac33df90e
SHA512 7284f2e88a354ece1fb0ea0400492b6dd2fe63f47bf48f5d672fb6ce72c57b5774e0c879870be2e83947cd4cfd49477643ccdc43412ad6db675970d9c0a59a7c

/data/user/0/com.yuxin.android/databases/.confd

MD5 688409a2c6393455b599019a8a2c3bf9
SHA1 e5350ea6725da2700a25116d00efccd92b1a7db8
SHA256 6e7633d1197023a3963f296c25f9ba4802c24b23674d2cdccd31a58b6224e336
SHA512 9fc257f1d507cf5e13a4ba722763725445a69843609d54cd885fcb8eaaaac1c29621bb67b726d7f3900978b7a9e3392c0500155cfaec545246e5bf6bd6fe8db6

/data/user/0/com.yuxin.android/files/.mtj_timestamp

MD5 89fd3536f1c0f9456411b6aa6fea8b97
SHA1 70143d7fa2f77330cb012e0633bbc93073ac04e7
SHA256 548c09192f56b60d33827a73622352f7690da79009cc2dbdf25b42a7e612fb27
SHA512 0e36b227ee6f17914ab7708aab18021539a63b6800254c2874630d0f132a4fc876b62aaa2584a67dea19defc524f79b496ad3b825e65807ce0c6a7d1b0c6f903

/data/user/0/com.yuxin.android/databases/.confd

MD5 7919d2fd47ebc01c0a2b37b261e5ebd4
SHA1 e6453ea772f2f132d5a4a34b3afdf8b0a11ad97b
SHA256 e5f063df33a00ed94dcc5c508307eee23ee2d5022bfd044f92eeb7443d1fbfd2
SHA512 a084700b88b6cf4d759261495bf6e66563210b5ff46fddeaa93a90da8b4af6e6dabb9a498a237bf70118441999c0c915d0536a5846a6b91822523ed88187dd90

/data/user/0/com.yuxin.android/databases/.confd

MD5 954aecb2ec0ef6fb0e8142dd1f33c7a1
SHA1 2c8cb58779100da72b6aae133c820a6bfaaf6af2
SHA256 e9902b54eeff5e8078855162677bb15e855cdd26f64131d80cf6082e282d7b4b
SHA512 41d66712c46434e09aff97d752babc3057033136b0ce94d6053443ce9a64d345f73eafc910d4d56f6cc3678add408a52e0fd5c3fba6a9930f3d2d8041f383834

/data/user/0/com.yuxin.android/files/.mtj_timestamp

MD5 5b34e558946dd1e8ac0c4ab155b462b6
SHA1 ffad2b7b08f213cfb5b935f946f828d353fd6243
SHA256 f61dbdedd5f22868f06347a880ff070bb3b3eb2492ddf6309a2b9e5b5da63537
SHA512 9a57439291aa58ca37a1327af5b3ee04cadd543c686e9f137ac495730b5c3ee883cb3e5e71e96982ee242317699b07ecf4475e636c3f7c987cfa8a5833f6d822

/data/user/0/com.yuxin.android/files/.mtj_timestamp

MD5 43189e78638d0749abaf2a16fc0cfb31
SHA1 76a5f3146a15a87335455bc9d4010787a89494e4
SHA256 6ef3b3876cfa15ae9cf07459a644257b1704f01e4eb254ca9816d0e0b1b898d5
SHA512 9cef23c3f76e7ded8e2b6511246436a718a62ee89ab17d6d58859358d00412d82c53411ce19409af9c3c986afab8b9d6b8d76a0b264fa3c09bff3fea66b25fa3

/data/user/0/com.yuxin.android/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/com.yuxin.android/files/Mob/share_sdk_1

MD5 8e24e79baab91c4d0604eaa9006a0cb3
SHA1 e427afc94a4b957a7096f73e395a10ea404c076b
SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA512 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

/storage/emulated/0/.mn_-1226295269

MD5 2384ba34e6cfb1c3d578d25e1ba8e833
SHA1 f7905506d0686e8c06eaec895da2b6480bbf76dc
SHA256 4ef3e0f7a9e7bd75b085f616036756f4fbc069848e6326693b6e790c6e8d734e
SHA512 b96a5a838b78732d5aba9ef3e1fb5068f79688a55f82216bf4b386a3404d5beee22d224e9c9fe7f5ff5fbd5ab0e44742ccf084aa5156dd8ea092c1f288b507af

/storage/emulated/0/Mob/comm/dbs/.duid

MD5 3f0d0b4596834ac10d6a1b151d8ec800
SHA1 b490c585da2c02e5a4b00c4e7f2b1ab2e1f7214c
SHA256 318cffc44a58e9fcdae7244e4117a3d12e4608a5b30876ab2c899614190c2c28
SHA512 1b0a790f995881022ed1586c7ae6812f30d4ac00e69fccc35df8d0e63e21533632d015d642d930ef4438c8d31a50ed8deecaebcef7d082fbc81c12449ddd42e0

/data/user/0/com.yuxin.android/files/Mob/mob_commons_1

MD5 e0881286eeafe8e6dfc7c8dca0e6f218
SHA1 fe8a04c92adc4dafeef181ff9a1025293516676c
SHA256 0c6fbbe3049fa7ce871edfede439cc111b3b9e9ddde4f74230b527d6ac36fb34
SHA512 703cd66cb87061c5d5236930b77e93802f9b5f22564987633d11b7ad6e290f04afc8838cfb68c050062dddff6946fe42414d06866bad3da81673c90a0c1cc08d

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 3b1e24e35fd1de8341fdff62e4d23155
SHA1 e45baf8a6ab89508a0bf2be11a99bc94da8acf53
SHA256 62085f1a55ba6a711f4c22494ce237c3a178eec1390888d9cae52a81107c967b
SHA512 01e7edb5e744e6fb264e26bdcdd754e49472e89a4ce99c0ad4e31d4d3c51175289ef345f512b02498acc1b9effa20f160987346803763a921c52ffb652b35f2e

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db

MD5 c4464bc8ae4a928d5042658ac5aafc46
SHA1 1960a95a4a2902f879455c96a5c57d615961cbc7
SHA256 6dd61f52b44c9897d887944e19dad596d441d8c01a04a2d5b9095212afe85d98
SHA512 7f5fc209c0b3c41d6c323355313e7055e24b57466c5bc54dae55735396221a53353dc3134c5830eacf5e546c23278899393640c3a2c9fd03c8f974e275fbd0e8

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 c1aae03a9edf1ebfce30ff79b03d51f8
SHA1 0b896fa9f5312168ef4dd5b948864316cb7fb85e
SHA256 8f5e018bde23d538ce0b0653fd9d6d28bc24a4d599aa25ff24779a48d22e35a9
SHA512 5c8da8075fd9ccf02a7b7fb9b2494ff99f3d94a8f43a0cf7612a860cad7557491d0ee0a17f48d3ef13f54370d77f35c51345c664a8696f78f2d9407580e24a50

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 ae2b03786513917f01220a1c0f4c1f98
SHA1 2413f91b0479991a6146ae33d06aeae1c2b5bf47
SHA256 2d78e0be0e2d1293c3db540fecb1459edac9af0c1499b9b6b300a5009bd044d3
SHA512 74d52f4f7d8438c4cb53325248a081adbae0df4d330f7a3c0341089d4e4f53bfb407906866437b53fe773df44892641ff775ac6e519a13222a54b97f01b3a29b

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 9224c7c76ed31d885e284d3e14d6dd40
SHA1 60cd223d04aaeea7ab59b9ac2ea0e752288180d3
SHA256 aefcea26f5304ebcacb220f34f084397d9922d91f8520ac8e13edd889461a551
SHA512 94826dae3f259e68b50f3e85f35d81421d33f2de420b301fc581ca840cf2e34137f3d8ab3d1f5f50adc01ca89d99694c49f5c08e6b9c550b93162bfed7f03cf8

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 e1fcdaa31b8cedf3b668491929fd70db
SHA1 0f11c0128174317257bb24a378f1226f4ca3c452
SHA256 55138a012aaabe1114297adc6b984bb61431971989226573cbb6d0d047f5ea00
SHA512 9a467d665e1aa02ad480cc8a0cb95b335dc85e56a89077bfd6a68eb15bed4e959da5bd6ca623072546bb8774d01d6a80536a42801c3f67fd3e8ff4b0f465f5c8

/data/user/0/com.yuxin.android/databases/ThrowalbeLog.db-journal

MD5 6415f3c3266871ab98355637d4c5c7d5
SHA1 9b56202f7a0e48185a607b0957d40fb8f837f08e
SHA256 f4f533fe7c618d8faf7b28c15f403dff50e8f3532ef73ed660eb72d4cbc17482
SHA512 12d5f301a0ab30d76879d7c4e765659af7fcd16cf8564a745f1436d8e4d302f0b5ac1eff23c0fc2f6f5dcfb4f782f69dcac4177579c7f5a139ca6fec9e040a82