Malware Analysis Report

2025-01-19 08:06

Sample ID 240606-cwhvnaff92
Target 99ce152492dd3a2eff182e75566665bd_JaffaCakes118
SHA256 6d2da4714958a215886806e552c830e49032055cab68b9f26d2320a8766e9f4b
Tags
banker discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

6d2da4714958a215886806e552c830e49032055cab68b9f26d2320a8766e9f4b

Threat Level: Likely malicious

The file 99ce152492dd3a2eff182e75566665bd_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Queries the mobile country code (MCC)

Reads information about phone network operator.

Queries information about the current Wi-Fi connection

Queries information about active data network

Queries the unique device ID (IMEI, MEID, IMSI)

Requests dangerous framework permissions

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-06 02:25

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-06 02:25

Reported

2024-06-06 02:49

Platform

android-x86-arm-20240603-en

Max time kernel

179s

Max time network

186s

Command Line

com.taoquanji.kvw

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.taoquanji.kvw

com.taoquanji.kvw:remote

sh -c /data/user/0/com.taoquanji.kvw/files/dcfcd910fc886d536d

/data/user/0/com.taoquanji.kvw/files/dcfcd910fc886d536d

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.204.74:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 easytomessage.com udp
US 1.1.1.1:53 s.jpush.cn udp
CN 1.94.9.210:19000 s.jpush.cn udp
US 1.1.1.1:53 a.apicloud.com udp
US 1.1.1.1:53 sis.jpush.io udp
CN 47.93.90.46:443 a.apicloud.com tcp
US 1.1.1.1:53 taoquanji.top udp
CN 121.36.193.140:19000 sis.jpush.io udp
US 1.1.1.1:53 userlink.alicdn.com udp
US 192.207.62.21:80 taoquanji.top tcp
CN 61.170.79.242:443 userlink.alicdn.com tcp
CN 61.170.79.242:443 userlink.alicdn.com tcp
CN 61.170.79.242:443 userlink.alicdn.com tcp
US 1.1.1.1:53 adashxgc.ut.taobao.com udp
CN 59.82.33.250:443 adashxgc.ut.taobao.com tcp
CN 1.94.119.240:19000 sis.jpush.io udp
US 1.1.1.1:53 baichuan-sdk.alicdn.com udp
US 163.181.154.230:443 baichuan-sdk.alicdn.com tcp
US 1.1.1.1:53 ynuf.aliapp.org udp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
CN 61.170.79.241:443 userlink.alicdn.com tcp
CN 61.170.79.241:443 userlink.alicdn.com tcp
CN 61.170.79.241:443 userlink.alicdn.com tcp
US 1.1.1.1:53 baichuan-sdk.taobao.com udp
CN 59.82.122.127:443 baichuan-sdk.taobao.com tcp
CN 117.121.49.100:19000 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 123.196.118.23:19000 udp
CN 139.9.138.15:7009 im64.jpush.cn tcp
CN 103.229.215.60:19000 udp
CN 139.9.138.15:7000 im64.jpush.cn tcp
CN 139.9.138.15:7002 im64.jpush.cn tcp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
CN 139.9.138.15:7004 im64.jpush.cn tcp
CN 139.9.138.15:7008 im64.jpush.cn tcp
CN 139.9.138.15:7006 im64.jpush.cn tcp
US 1.1.1.1:53 adashxgc.ut.taobao.com udp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 139.9.138.15:7007 im64.jpush.cn tcp
CN 139.9.138.15:7005 im64.jpush.cn tcp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
US 1.1.1.1:53 adashbc.ut.taobao.com udp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 1.94.119.240:19000 sis.jpush.io udp
CN 1.94.9.210:19000 sis.jpush.io udp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
US 1.1.1.1:53 umdc.aliapp.org udp
CN 59.82.122.224:443 umdc.aliapp.org tcp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 123.196.118.23:19000 udp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 119.3.188.193:7004 im64.jpush.cn tcp
CN 103.229.215.60:19000 udp
CN 119.3.188.193:7009 im64.jpush.cn tcp
CN 117.121.49.100:19000 udp
CN 59.82.120.143:443 umdc.aliapp.org tcp
CN 119.3.188.193:7008 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7007 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 59.82.122.224:443 umdc.aliapp.org tcp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
GB 216.58.213.2:443 tcp
GB 142.250.187.206:443 tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 1.94.9.210:19000 sis.jpush.io udp
CN 1.94.119.240:19000 sis.jpush.io udp
CN 59.82.120.143:443 umdc.aliapp.org tcp
CN 117.121.49.100:19000 udp
CN 124.71.183.120:7006 im64.jpush.cn tcp
CN 103.229.215.60:19000 udp
CN 124.71.183.120:7004 im64.jpush.cn tcp
CN 123.196.118.23:19000 udp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 124.71.183.120:7005 im64.jpush.cn tcp
CN 124.71.183.120:7009 im64.jpush.cn tcp
CN 124.71.183.120:7008 im64.jpush.cn tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 124.71.183.120:7007 im64.jpush.cn tcp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 121.36.193.140:19000 sis.jpush.io udp
CN 1.94.9.210:19000 sis.jpush.io udp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 103.229.215.60:19000 udp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 117.121.49.100:19000 udp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 123.196.118.23:19000 udp
CN 119.3.188.193:7009 im64.jpush.cn tcp
CN 119.3.188.193:7004 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7008 im64.jpush.cn tcp
CN 119.3.188.193:7007 im64.jpush.cn tcp
CN 119.3.188.193:7005 im64.jpush.cn tcp
CN 119.3.188.193:7006 im64.jpush.cn tcp
CN 59.82.33.252:443 adashxgc.ut.taobao.com tcp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp
CN 1.94.9.210:19000 sis.jpush.io udp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 1.94.119.240:19000 sis.jpush.io udp
CN 59.82.39.0:443 adashbc.ut.taobao.com tcp

Files

/data/data/com.taoquanji.kvw/app_tbs/core_private/download_upload

MD5 923dbbbc59ddd525544828fe31a3fad3
SHA1 ccb31da7e260a72407d8c18bef7afcbd980eeead
SHA256 01c9c8f60ff6811fbfaf9250b80d86f5b20884443f3cc00424358eb7419255e6
SHA512 f416d4ea7bde8ebca35621572e5f39bdcc69ac2df13e31648211adcc9843ad5cc1bb836d318a682a77743de2b9c6588cde767d476b0dc653118282cfbb5caae0

/storage/emulated/0/Android/data/com.taoquanji.kvw/files/tbslog/tbslog.txt

MD5 123cc6e2ed1428a3b32f8c5d7fc9345c
SHA1 338d2909795bed0eaa624b1c27c34838eaa3dcb8
SHA256 e8ca7e152d0ee52bd209074e4709985cc1c755b0fc69835fcbc621cd49ba9711
SHA512 b68734c0f50e7a191b9332417d7f22ba4628c077979bba79e2022957b941556d9f027afef1193a0d7a56c3c5c0907070ba4915d5b30bf2ae1369ec5734d4a3d3

/data/data/com.taoquanji.kvw/app_tbs/core_private/download_upload

MD5 60c9b2a0524065e95db363687e135a4f
SHA1 405a8572c450240327eaba26f66f8dc9ec752d2c
SHA256 f4d9e6ca74f1e0989b5dca8113bae9eda16eee5e482e7f3e69a1e94912360055
SHA512 7c9fea752d1aecf9cbe3812d2c30246de3c714c76592c5f77e5723f0adde1c3ed0f80a698496dc0d91aa42e8f95d10c32c9fe43380cd859a073e7b21f4b24485

/data/data/com.taoquanji.kvw/app_tbs/core_private/download_upload

MD5 fe428eae020706079c5ca3bced8f9ef6
SHA1 3f6d49d6568f1a3e0815a533b510753fa3b9a948
SHA256 200720de2b009141373368e698082f546b5d673a1fe0d9558298f61843dc033b
SHA512 49d7d5bb9165d824c3317f2a836914180101946dd6a6aae575d4afd256f255f91d4d55686bbd1b118233479b6744585726584bca5b46ad7bc24d2fb142bae66b

/storage/emulated/0/data/.push_deviceid

MD5 9b2e4754e2325b6e5d3282c3cf652d15
SHA1 fdf3b47d23c881e027a28e5926c4330f1b4744d2
SHA256 d201ad9016267941ed7b594bb66b33ce77869136314a0c252785a31b82b2ead7
SHA512 68dc204001b7ff8f66c6583e8d0f8670a509d97f59dcdee87d35ab744c390eabe5e87ded905e57e739940a8d140b9dfc77bba823a73cbb2a033c12c9bd1189ef

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 0a29f4f5ca99e97949794c19d2ff02a3
SHA1 61cd1bccfaa70dd0cd4afbd93ebf62ade360a0f3
SHA256 cbedc05c032749ec232b1813607b1c91dae3e834b05b88aeeee21377ddf3964d
SHA512 e9dfeb19f36ad5374442e70d9b15cc26271020705e382d09a980587bba7a46943873630db3da22bce0a7dfc62d9d3516b35cd59b3fd0474b31701158bceb77c7

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 82b199968bd876a00a79d995d81a0bdf
SHA1 88b93b7dae8217cf84753c24dbd2efbd0aee76c7
SHA256 8d99363c4c679852e33f8524d8119f9310d5eb99b4ad42595e95ef0ba467893c
SHA512 9f867bb3d3479d527013dbd409d8d247beb9af1d9f370af01c7654f1ba95ed5f03cf5d83979e90ddc75269b58b979bc888a3f052c8eabbc2b7f901da3493de7d

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 8cd453d9fcd0ec7a0486a4e808ded073
SHA1 a017fde3f42d7d5ef56e6d5e2624e9307ba42b6d
SHA256 47b653fd46e480d479998e3839c60f5ef4ba385673a69e4103ae96883dfbc374
SHA512 410f8d20f3f37879f8a81633567f602927c5c1e5bbafc2e463977b7043c73c76516a0889ed16f4f81cc5f6992b9db9cc834383611c633cf38bf1dd6ae2f7468c

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 bbb35e13147f9afe6996aa965d35dbfb
SHA1 4e7138bc84fb203ec789c00a87086a4b23728e88
SHA256 f60cccb79f0bc5eaa71a6463418696b77ff3030c846a7c7027593ad31a163a3b
SHA512 03be4b431057b1f8174a9232fb60a1a6a768fa2b8b98e8090e4f73e8836b14eab3e0d6de6dfda4806e73fda73087e0db2809a480dfcdc1b94dacb58ea9a70b12

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/main_312768000.pkgInfo.tmp

MD5 8b9a070a4756c4e75a9c094c16c2fba5
SHA1 684bf86ccb234e587560e22aefc2b659998ef149
SHA256 7de9841149d5bc7f2ac97621e366806b30d42967a9e23ef1ee438ff087087d1a
SHA512 2effa207b703bd3aaa3c2e780a39205dd33c07a45dcd7052ede4d24b4ed820fdc1c9f8712ee7f9c18be4846ec4d1c7b9eada9e2bf0157a4a51445b8ec04ce30b

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/libsgmainso-5.4.171.so.tmp.4293

MD5 4c3dd08a9005b7d9cd4fd09e7512a269
SHA1 34971722043e8a989e0141cde760c0332488a96f
SHA256 1a51cbdc5fdf78139fb72b51ed11d33698fae6a22d54118ad5687ff27e3d2074
SHA512 44e18c92e737cbeb5ce53765c7a8ecd530b29f6eadcdadc1459ed618daccf2336c9f9365b5662f431f19c3d10b00cffdaaf6e88ca4a0329aad69d88817ffbd40

/data/data/com.taoquanji.kvw/files/JX0WDG83P1ZN.txt10c5

MD5 77ce5ad16e76f0c58bada5e50fcc6248
SHA1 ba6200d2402c9d20e242d200037090e290d66932
SHA256 6fac37fe6bedea6dc8a566e16ff2d97914a7695c6fe77bf84a4ca8a4723d5c60
SHA512 943535ebcad8598777138652402cc7065653450aad1f0628dbcc765f99a31c6d055ac3df0f5736858ba85d74b52100779545aa416378656d501145caa856c479

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 f6e48688d9a04f7b6f30b2915b24677e
SHA1 d1549c5cc1f43f6fc4077e1418b8414e9eaee9d4
SHA256 c61c7a8ba890254eab80c1fbffb6426823a382bf03427c2ee9ed213b1548d3c1
SHA512 22c3b47b88c3b8050e39a6e7294b37b4eec1a5ba9ecc52a30c067bd17fea12ddf0cadb149e2e3f61d742c43e5165af438fbc011da8d6f0557164c990ff7564b0

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 00203c1aa977a6dc31cdac0e73b20e36
SHA1 d2929b9eb7d00422d6659ae3a329cbbac7f73e5a
SHA256 b6d3638e9a2ffac0a6e4b0db168f2a8cc34fc09656aeed76e4dc5530b6f41f5e
SHA512 95531fe45095868a4b29dc7386e09f07e4f0351ca34d31dc848234b3b0c2cebecaa774fd3f6ddf7bda4a7aa6ca7df8b0f9f5b4cc3be9783f1c95afdb5e7a07ca

/data/data/com.taoquanji.kvw/files/bc_config

MD5 6f9333a10e219883ef6d57ee82f32864
SHA1 2b725177af6e0ca7fea8503aa059e18ef269c88a
SHA256 fc3aaace39d154b05c6c1a99333dc13cfe526ae13f3babb80839e9f19debb668
SHA512 b6adc2e57d6518a45d61ff96a43e18a21cf30a8ba92277cf125ef38539ddb4bf909ebcce1fc1374111b8fc4728cc385f5990a07cbcfee425dad84dab40e24271

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/sgmiddletier_312768000.pkgInfo.tmp

MD5 c235e74ea719e9a6f773b8d8352d99e1
SHA1 f31095aef8e9c3286edad127293ce700b1fdfd75
SHA256 feee3cfba46a15b807bfbf99c7fcd85bb8ebfb6862a9f5b476d67241e3ce9993
SHA512 a448f296cb9d3b3a25d898ae0485199f7bdd7597fa75be719a16bb30bc90fc10f636c805830a8c53add346b12a556e71155536febb9801c847725c577dabc384

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/securitybody_312768000.pkgInfo.tmp

MD5 2962e3ea9187a8fc1f66d77eda2c766e
SHA1 20fbffb2687124a8e8733d9a766275fcc4289aab
SHA256 dc5f7701ad3b726d180b0fe0278cbbd4fb4b665db9814af2f8de70d6ba2bc785
SHA512 44aebc257188c34b7f57c2578378e95d73db0e35cd76420bfeb85fd28fcbf0b9a5153482ddada35ea35887365de7429299fd13e15be609d74da1ee287361ff41

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/libsgsecuritybodyso-5.4.99.so.tmp.4293

MD5 e37417b2e55fff3e48dc036a2d5f6ffb
SHA1 5852b0ca918d2dfe5b6f2448711c1fa1dcbbc88e
SHA256 0671576c8333a92dd63af11a3f88611d7e7cfdcb6a442fdb7b5b3902c6a5ce9c
SHA512 bf42dc7709ddc4d18a9cba1e5ef87804f9d92ed4cd37e516dddf473b853b99c3d7b131f8e808a26239741359f83a6bdc589fe17b0ab36c970e2965f11c3a9b94

/data/data/com.taoquanji.kvw/databases/ut.db-journal

MD5 de9e2e2517da49f4fcc5aef8093e71d5
SHA1 b54387f6c7a55a9c6ae85d6ceb6c73fe9ed7f8ba
SHA256 428f2a6976cbad250599f1380dcf250dca63028e9b7b2512729784ab6a98ea18
SHA512 6b10f970d94f1086a66248f553153c7866d30d99c6d90280eefd18ef15bc83d45d816bb89f6d37838897e91005984f43ae9d1e7f9b6a229b6a2fd00b41014478

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 38616785cca0600a03205f84fe330b4b
SHA1 6ac41a6bdcae297d56dac5fdde70be5faccf0832
SHA256 b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8
SHA512 7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

/data/data/com.taoquanji.kvw/databases/ut.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 dafba304fa3de266b0b5b2c085d34112
SHA1 50304a59f2bd9e8ff36360a903048e1a1e1235fc
SHA256 5a3e36d42cc48fa2eb5ccaf72ce8c1007bfed9ae68204b314583cb77dea0328b
SHA512 646256dda0ebd000e58fe2f29e916e57705b78a379beaa8e8325a73a615e09c7a4db716942d394e00c6d0b03fbd9c95e23b194760e623bac36faad2deb409ff7

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/avmp_312768000.pkgInfo.tmp

MD5 83d68b47ec607116d3753bbec873e8ae
SHA1 889c27ea05084eb170b256da097c54c13e0dd0f5
SHA256 88e15bda0960b24540e6c9960d47a9ae4c0c47c721047edc70336d4f71803df5
SHA512 57e5186c400ed6ea06a6233c26e01e4d3864d7982b6934df0f4f3fbeb3ff131d8cb949a9d5b703cab0379b9006f38ca065c3c140d7d89db58cc085fbb3e1f67b

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/libsgavmpso-5.4.36.so.tmp.4293

MD5 6594343f39a2b6f5f32a28ae74713e6e
SHA1 d4e365c9e6bedecce89b7049e33984374db8c5b1
SHA256 ae29015fa5d2364baf72be58d0efef79fbb8ec105b5de70eb69c911b2a704288
SHA512 5c109551b557ddf7570a59d03eafda6bd5f85acb7ad895e1546ef8bec87aec132071daad781e29a36ec27624a4429615e8181bc7d304826468bb0d949cf1737d

/data/data/com.taoquanji.kvw/files/dccd735fb3ddd7dfe5

MD5 a86dfd7a465778b86aa21d5d5a26c7af
SHA1 60db617b6ed9313cc23f4b41aaed121b65a72107
SHA256 7256f1fb64cf5130f0e0810c8f5be73d46f881f38de5bc6405c92d6d21ce1276
SHA512 dd31946acd018c2e9b5e54c486ff5f3bd134c4bd1f2c2b3b957f4dfc82cf2115287b6e2ed8b3723ad86c0ce679a88467d2db8bcc0e5071563f6d96cf36907a10

/data/data/com.taoquanji.kvw/app_SGLib/app_1717641990/main/libsgsgmiddletierso-5.4.7.so.tmp.4293

MD5 6a95e1c2d745ef6d3ffda5be7275595f
SHA1 c3ae1a5f66cfd226f7f9843be6a6942aa06eea02
SHA256 7c0bbbc2dc9762a6a674d607384575ec1f30aba00cae95134c14fb099508a9b7
SHA512 596c25f3ed787858008303b7578b9a876c4403e3a1fcfbf031d7931a7e5fb393be8f402599752574abace2ade5cb403ca2ce47743b7ab2bec532e1634a0bbd9f

/data/data/com.taoquanji.kvw/app_SGLib/SG_INNER_DATA

MD5 316f581c1bd26a301776cc11dbe4de33
SHA1 c04510331c1444fe32c99af20e1d9b6bdab5dd86
SHA256 d1d84d0bbb9edcd3fc018430af5e81335b4b053c58a54b40d2f542884e7e0016
SHA512 ea0a86993ba5de2201d25c5229393744d4b94d8f6f16974b9b98fdbad963fddb1500a902e01a372c4459bac467dd344c5cc72062f6fe23340ae213ae71d0e703

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 0e3b8452254a6874ab267aeace7a56e6
SHA1 9936a9b7a712cee839bdb8fc7a3f14e0a3da7a2e
SHA256 aad58d2674eb0376e4b8121aaa54b0a27013677a62f2b0bacc30c8253622b3f4
SHA512 c5781296f5b92945cf47955394144a17e098d7b097e981b9352b4bc6ef07b6e26f67a80438f4b0479556159e3a02e0463de4deb8e67ef81d6f459e3784a73f75

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 832b96f816d9710cfd19e4b4864874e5
SHA1 f70c857735bab162a95e67644e0095cb0c060df9
SHA256 185a698f5ebdf33c297b666d82a79a9f46610fe6c59d414911b2cb85fba3e3c5
SHA512 f477213fca5c71b870ecbfea3bc398f1d7d056bb05671b8f7bcc983dc8b3f44db7d1a45ee2c5532fa12d750aaf0bbc4a7459f54a2e210aa88f6a66ffe50b9267

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 439c04b79cc986203910f367d8029f19
SHA1 0d6bc548dae51cc032caf719fefc1b1fba5a93c5
SHA256 23bb26451a27abc599efb6990833cf89d322e52c5ea2760d68e2e1406cceecf9
SHA512 b03a7e914f0485efb24d4830f3f88ce15cf9760ddca897fd6486bb8d3a74b1b2db8d8cb336e666aa90fb0a36e45694e81d63ae2098e3c0cc03519f01bcd4873b

/data/data/com.taoquanji.kvw/files/SGMANAGER_DATA2.tmp

MD5 2ab8ffbd031ecb0f4db522e5764ae5cf
SHA1 a125aa892e7525c0571b53d817c42886b9dbef16
SHA256 eb0a91b4e972e52982b11e85e504ed7d843775cfc45a53e37c591a3fce2d4336
SHA512 26e53643a8b532f4addf328bc9bf42d6fa76dcda0f1d3663225aa9b3d6e7c4096a9e4bc67a83a61b873e8cfc67c616b8e8a98494848c7e98993ebb30b0cc87f4

/data/data/com.taoquanji.kvw/files/bc_config

MD5 80a1e42c93858c58440571390f58662c
SHA1 3ae107aee46620d349e305b2073ced01db3bc052
SHA256 4a11108a5b89c7b1c49e9cbcccb5346113a23f315e9f6886fb5c1c72a0cc69b2
SHA512 785a38e7b142ec2554df2a6b01bb9d1d86929b2126ce11d34023863a68e7c2d6c1a54ced6a87c84327ebe30a2c90894e8f1891a760dcd05aba2f19024aa26bab

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 6faa54bfc580f1d7ce018edfdf181c1a
SHA1 3c13e7d4da584342978c7da0fbd5d421c3acbff3
SHA256 f92ab79737876931635a780ff53be1fe94781c9c178ed294d53e8a26e7c186ae
SHA512 3209659654a21d5f18030ff54da759e0f4b0fec4bdae5e9c47cfbfae2fbc701e2599488d361125f6588ef6138c940cfebfd85ed65ff6c6d6d040565fa534a3a3

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 eb804f03ac06e7d3549bbe4918000d13
SHA1 50ee0984109983c72dc513ed99f3d1425b253b0f
SHA256 eef945f8677bcb7c5664e4d5f06a02426e95d5ac808e2fef59199b1211fda5cb
SHA512 33df6661ae272fa8d0a51642eac07fb03109092bae7a925965458d1d055e3639a681c3271973bdf98cd5d27c16cbd3fa907efab9d17c799936717ddfbd5fee03

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 f7b891dc15241c28369c0519784e22b1
SHA1 1936b6ca32f0da483ea35dd640e8cb248ed1e8b6
SHA256 8a3a006ee436750de8b2eb8bb9c1ef23d064b011d87a71d1d3ef4790fd48b8d5
SHA512 7d282dd2bfa8c22e08650413b2202f2cb5ee06514f9c3e725e3da9bd9ffac185d8b4f0dc0c469939969c7d941c93e31cbdea52b6ba007a9608fd8058bd27c1af

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 b0e3f2c635f0bb76e3dafd7163e32506
SHA1 bb31665eb449673e77ff32f0e6acf4e0d3d3057f
SHA256 0874f378075620bc6deca5075894870fe501afe8e07443a9da3402adac4a2946
SHA512 81388469a8899fed76797fbf21030dbeb46acf9509e943d64d5613a4aa81312686c603908b934d0bfa016e9b179cd724072e4eb6cfc73928b35c8dea6df50f13

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 781d320b67fe73268a760b478eb2c7f9
SHA1 d3653814153e44a693a0f7d46dbff4b880c2e3b0
SHA256 513c392c672eef83c62ede921f056c31b3cc2e5ce8d7c52876fdfb9e173aaf5f
SHA512 24ebacf33adb4c4a558efb79383a17086eb533b5d193e4e7d718099b139697464fc8b071e69f27829e8540aa35e0ae9d32ec78e137dce6c94739633d65009a10

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 1010ad66975fea5d14b312af31077f01
SHA1 b5b1edb91bbd8c558abaf3a1fd0b9535b8e40420
SHA256 f55d603b99973356c4a23be9ed86f9c453490ad087d5509ffbb32cca8402da3d
SHA512 cdbd5fab0223ebf26d73a22a529cc525556e1005ed2b1e6d7625f4757bfbb3194f9ab5897dbada2cfdbf118ef92777e035aad9565b2a48ea3703260f017573d7

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 af4f18c540886bc569bf6f5be33b0a4f
SHA1 c8bc48d2ed7795528701dc8f02851aec85ac191e
SHA256 d5e6ae04fe7b4f52ce50d29cc8c4bdce92e0b63be779ae4b64864b36156962f4
SHA512 df58dc97accbc8cf86e427c16b16fe690912247d7f3e816e8b7ac93e981187f499f5f2ab680ed044df87b4e941307a42a2f290e3e0717dbab9fc9c4dddef1bb4

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 909fdce5365abe84f2e6bde08057d158
SHA1 b470bb657b77f2c3a735c4f5b7a29ba29246e6fe
SHA256 5c59eeadff670d268923bcf7db8b47ff9576ae0a31a14bd1ac07d7e684f0ece5
SHA512 83236646c9ae53a1a983ace976aac00eaae8862b64c255764ca6b7ab433c65f61936c9df54449242ac4ebf9a13efc44fb081144a9e428aa39306e53fa978c1a4

/data/data/com.taoquanji.kvw/databases/ut.db-wal

MD5 d6790d95aa8eef351b88de279828361e
SHA1 af95e361b2dd8a3bc3dbe8c3538bb7c7bfbb3b67
SHA256 a9687dc8fb7208ad00869efdcdafdcd128d3b3177cc94f168ffb2e0c884ecc97
SHA512 3be6baf1c249eb9bc1012b0d6d3c9d58f81102d01552e1b700d355c01bdcf2624c2fa12b74bed359b9cf4264fe6cc9b65c525a9ebb2bcca58eb1b0d88c427cef

/data/data/com.taoquanji.kvw/databases/ut.db

MD5 65abfbdd7b89791f4993326909485d8c
SHA1 ae7634164fd10e6df61171fb1f42a6a8849aae96
SHA256 d981f6dcb663a28339b3b13f494121a8c7e9e7228a5bc2361bb7798d76bc2e13
SHA512 021e916bde3094c76507e72f7806bf5b4d9b25b71b69cee745c26fe08a2f19154bb0a19ef78df8e6c0a56685819883d4782f85f67ca4a77a70ba09c67ba30d91