Malware Analysis Report

2025-01-19 08:03

Sample ID 240610-thjngashmj
Target 9b3ea5d47327db0739359e17be9837e2_JaffaCakes118
SHA256 9d7cf0b51e2aac88db1de40973df7adb218e844d937d78e13cdbaaa0b08947d0
Tags
banker discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

9d7cf0b51e2aac88db1de40973df7adb218e844d937d78e13cdbaaa0b08947d0

Threat Level: Shows suspicious behavior

The file 9b3ea5d47327db0739359e17be9837e2_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker discovery evasion impact persistence

Queries the phone number (MSISDN for GSM devices)

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Unexpected DNS network traffic destination

Checks known Qemu pipes.

Queries information about active data network

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 16:03

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 16:03

Reported

2024-06-10 16:06

Platform

android-x86-arm-20240603-en

Max time kernel

128s

Max time network

181s

Command Line

com.taou.maimai

Signatures

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Unexpected DNS network traffic destination

Description Indicator Process Target
Destination IP 114.114.115.115 N/A N/A
Destination IP 114.114.115.115 N/A N/A
Destination IP 114.114.115.115 N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.taou.maimai

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.taou.com udp
US 1.1.1.1:53 open.taou.com udp
US 1.1.1.1:53 cgi.connect.qq.com udp
US 1.1.1.1:53 api.weibo.com udp
HK 36.51.224.49:443 api.weibo.com tcp
US 1.1.1.1:53 open.taou.com udp
US 1.1.1.1:53 open.taou.com udp
US 1.1.1.1:53 api.taou.com udp
US 1.1.1.1:53 api.taou.com udp
HK 43.154.252.110:80 cgi.connect.qq.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
HK 43.154.252.110:443 cgi.connect.qq.com tcp
US 1.1.1.1:53 pb.mm.taou.com udp
US 1.1.1.1:53 pb.mm.taou.com udp
CN 114.114.115.115:53 pb.mm.taou.com udp
US 1.1.1.1:53 t.appsflyer.com udp
GB 216.137.44.95:443 t.appsflyer.com tcp
US 1.1.1.1:53 api.appsflyer.com udp
GB 18.154.84.103:443 api.appsflyer.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 120.46.61.135:443 api.taou.com tcp
US 1.1.1.1:53 ping.mm.taou.com udp
CN 120.46.61.135:443 api.taou.com tcp
CN 114.114.115.115:53 ping.mm.taou.com udp
CN 114.114.115.115:53 ping.mm.taou.com udp
US 1.1.1.1:53 ping.mm.taou.com udp
US 1.1.1.1:53 ping.mm.taou.com udp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 223.109.148.176:80 alog.umengcloud.com tcp
US 1.1.1.1:53 misc-pili-qos-report.qiniuapi.com udp
CN 110.242.48.56:80 misc-pili-qos-report.qiniuapi.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp
CN 120.46.61.135:443 api.taou.com tcp

Files

/data/data/com.taou.maimai/files/mmkv/new_prefs.crc

MD5 620f0b67a91f7f74151bc5be745b7110
SHA1 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA512 2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

/data/data/com.taou.maimai/files/pili_qos_log.0

MD5 8ecf8e6d017ab52c864a6a50558fab45
SHA1 bda6b237bb4940b6e8b3dc595c81d08ac5becab0
SHA256 5b2816a0abb7570df2b2b3a017d27c36555c5dc78836f214b2f63d63cfe3a386
SHA512 14ad11ef909c8ae44f8cd33cca964afdbc93e9422edf6766e7428d1654bf411936d0cd45ea6f296246361d33b5892129938eeab3ba820ac276c3ce4f021aceda

/data/data/com.taou.maimai/files/pili_qos_index.json

MD5 eb8b0158d4e0384f58385bba0a813e5f
SHA1 1031ab9576af8ca999dec26850778141ced06835
SHA256 f4c69b9bcbac76428a9b8ebea5c97759a7dfb42882d01fdf8374c40d2da73a33
SHA512 ce3a94db09a984ecc6ff737db7c7ebad858cac747d37cec6c0791a721826937026572a8c55e9b82de2945bca08f000ae1fe3074e08fe0a0ae17c8e2c60380a83

/data/data/com.taou.maimai/files/pili_qos_log.0

MD5 c1f5a19dc9c0103a40bcce9891e9d3fa
SHA1 218ffc9daa9e445205219ecfde4280fea70dafb1
SHA256 cde271722c6f1541208c9436a235b279b01aedf4d0cbd7af9083b9b2c2b602a4
SHA512 f39736bef30a410dc298ed6de83053134d81254dbecfa988ab8c5fc723e36b7f9b989d77a439d2672fb5f23c0f6c9d1ce470150abfc8ea03838d33d3c680bf52

/data/data/com.taou.maimai/files/pili_qos_index.json

MD5 2cd1e014f04d536792fdb47f66630a12
SHA1 b483943dd82b622c4483dd70aca751ab093cb2bd
SHA256 98b6b599a2096a3fbabab9653874043ee328a95b20517aa910a3fa5e3dea2e93
SHA512 b85d7b4e645d3919fa92f8941844b206359ccd1411b748b3603deb08281a1baeb9abff31156a9e17d7f83a22b57e80c85fc386b299b8c87ae79669f2933d13b1

/data/data/com.taou.maimai/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.taou.maimai/lib-main/dso_deps

MD5 aaab708afab74c93d0ba8337320c4fc5
SHA1 36d44411f25e961e6a286b706a8e53a7adfaec0d
SHA256 41bf46c3beb67923e1cadc4704c860051f0b921b74beb426e0fbb5a87aa2cc61
SHA512 673b9aa1445117879898eb97b7ce5ebe9f1bd04db97a660d7773243537a1ac6b817a0a4988be5a0842280dea57908085a3f19b8a89306ccbfb4e6fab193d08d2

/data/data/com.taou.maimai/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.taou.maimai/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/storage/emulated/0/MM_UDID

MD5 160654ccec78c7c84ba5c571a45776ae
SHA1 8329bb295b539dee453a2054d0a05ed3854d1836
SHA256 f3766a67f16262e7e84cc3ed95068f6ff35cf775076a866d71387f3c9971eae8
SHA512 a16c52772c74ff806fff5fa1cc6310eec00e80dced0e2e98a8173d9a7d1ab1f02bdf6b06d4de502cdc666ffeca8bc5c3a1c17bc3d5bab95fd43379f5ff0e76ec

/data/data/com.taou.maimai/files/journal.tmp

MD5 d6ac8c8db0504502d7f0e057a78c5ce3
SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

/data/data/com.taou.maimai/databases/ua.db-journal

MD5 5d8015b231247af724bcd527dc799f53
SHA1 dce1fc1c780c1585840ff1fb0dbb91897cc3c7da
SHA256 b3259c96591e97dfc829fa5df58e240129b61b7ce54b8ac1377daf76b092da63
SHA512 914ef93e69aca0480537f000c0a89dbd1d43327b3ae277f9a6b5c745e8cd751789bf183de40ea640308993c6868d381ada1a1da22d289c3d9f321e40a49d7a52

/data/data/com.taou.maimai/databases/ua.db

MD5 0bda40a992d6642d9d3b756019510d4b
SHA1 03a647d7f64967a637f054a36c00cc497241612a
SHA256 a5152db8bb246647dedde1a1760705093c4ee7b30f31b651b18f94ddf552eb45
SHA512 a0b45d94762591a07a84f88ec34f38e38876542e476dc03102ad637e375a93df30b45e64d0b3a70ff52ec4b19e9b42e97784c6509bb2c9bab3c98d1e36a7e021

/data/data/com.taou.maimai/databases/ua.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.taou.maimai/databases/ua.db-wal

MD5 6cf79892ca9af2ca19b460f5a284c219
SHA1 99a2693c226daa5319aa5895a9922aa5686da448
SHA256 88a85996e50bffa766a66146ee6ff710159ad93a6fbc040ffccc69136bed140f
SHA512 eb85890205ec98ae1b060976e88ccc8ab8f538ec436738fc2d2977ee8ba0b12e264e3943479db48cd046b82974ce94b2515646a6a2151bdd315ec84c25d07874

/data/data/com.taou.maimai/files/weibo_sdk_aid1

MD5 4028c8b91f544d6bd51a266683ff791e
SHA1 d8bacd93b5724c8500f66cc46632704115635afd
SHA256 7cda4149bb95d3c082f01b19b365228fd339ce4fcfa02969294e13bdae41270b
SHA512 a8fdcbe785c7f9eabff76f227db4e8c1d099dc8adc81a41283f8fbf118fd0fbff93be1aaacd3c966888f30f247215125317efa56495f022486f5262cd2cc3831

/data/data/com.taou.maimai/databases/cc/cc.db-journal

MD5 1fa2b89a7f96cc34ddb0e694bd3d62ae
SHA1 22c5bceeaacfd61b0b5f72b45e35ad46e77708f3
SHA256 4ff47256061be9c0265c616b3c47f8d46413f779d59fb2b579f740d03f8e06a5
SHA512 159cc4965a02f7aac1c16dc4d57396c829872c838384ef2fe37d865e461ecd563ff7dc526215b2045ff27b2a366b8212e6864e27b285185eee4a1b8d2de8b32f

/data/data/com.taou.maimai/databases/ua.db-wal

MD5 d523154fce7393573b8887168ad33f3f
SHA1 6908fdf537d693c1d96603c1d0dbc7ac752f0659
SHA256 e2eda356635bc8ead56cac5553ab8bb2635c82f64d2199ef9acd56617acfa5d4
SHA512 442857535c2d5b5996ce4eea5eb61089e20c609631bd85bb293a5015f2694d6df23bd5d9dd77b9391fcdd2b6e75b3768e0081b79a317f179aedbada899ec96d5

/data/data/com.taou.maimai/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/com.taou.maimai/databases/ua.db

MD5 5621a8e466b8229328f25267e9faf95f
SHA1 90518cf36cb3cc91e1d168616f519f2e9462614d
SHA256 4c6af30b3424db4150dd905897cd354ed149fb5074eed1b5fca865b86f01a68f
SHA512 5798642f7e822894dad8757e1430d6381b13991af6fe9c743cadb3be77062d73dba860238e739a7b02c3220190cecbc1773809cd5212fa3d57657dfccc3de3e7

/data/data/com.taou.maimai/databases/cc/cc.db-wal

MD5 3a35f09833fcd869b2ce00c0c180fbe9
SHA1 e1ba403660085a41d16b98b54db2cb534e3af938
SHA256 1d31808626719e85a1456c094cda14c6229a1f7102f1576399f4a99ad6a5c04c
SHA512 da25e31f1bc055410e7a1a64e603b9ae6482f0d064237b9d104bd888410d9591d6ecc1cd63401a0158559652129a09cb0f1192f286c1ac437b96ffafec99e479

/data/data/com.taou.maimai/files/com.tencent.open.config.json.1101082284

MD5 f526172de1566b34fdcea744710d9559
SHA1 000cb54d9a008a807a1c5a3fd2b2e7cb41e7939d
SHA256 8572be02b59f4d514000939ec04a9b4e2380c55265256b724a617d8d0f4c6940
SHA512 dc81f0fe345b18c96b1638c67b9ef4c5e60059dfc4a02f3c30a23645d4847abeef46cf467d044c42597115c48052ce0e8ea24328382114a544c5dfd039a95e7d

/data/data/com.taou.maimai/databases/ua.db-wal

MD5 283f70af9fef6370ef9ed081a0e99df2
SHA1 4e799e81fd98636706860bb1bf2ac22729187e00
SHA256 49488eebebbd71dde6e4095b69f3b16f8e3b3901ade3f292d32fde68559ead7c
SHA512 8e95128a0407e24eca82e4dfde66973058bff146cd52dc669dfa4d5b808b620807d0fd68d05e8d6e43880ae5ceff6a9da4f5d74258436350b8b705a32275763d

/data/data/com.taou.maimai/databases/ua.db

MD5 29ed6bb0fb1160a78a722a0feb1ab0f7
SHA1 3f62aa3c4d3cfe720b2fb2e7e342f2eb9704b282
SHA256 3296708963c463dfb784853a6e523b8dc31b49ede1f338c8482508bf7b6d01b6
SHA512 13f07fcb81780ea3d5c5e6038357c75022c96f0ea666484ce66983473d69807a60c62b4355a0caf1c8e7eb3c6b485896a7d73d157ed1b600356216e32c86198e

/storage/emulated/0/com.taou.maimai/json.log

MD5 dd39c81afc52d6294f700218e76c341b
SHA1 3bf876d671f71045a9e88a4d9447b938bba663d2
SHA256 a9b781c58248158abbbeff04605f100967d091d22082548df7f046805e14788c
SHA512 68b7fc8f3d63c19aed6f62c85bfcfc2007ade3ba95ca475ba2c39d9d174e53fc6142f2b44c28ecc22d22d22814e9d8fb00ce4abd9bf9483eea9b47fb31672193

/data/data/com.taou.maimai/files/umeng_it.cache

MD5 1a098f4ebf33ba8ed4bd543fcfad9436
SHA1 7e240cb4c39a661939ec22f43da785ab9c55577d
SHA256 4c15dfa1bb84eab60d7a38030fca8a2cafb20fd5c6a1b831b82278bed236620c
SHA512 3e329914d294c810af0d1dc937193af740d135f0c787ba9debf8c5137d0ddfb149f1694b0abc95c9b044c67c42ffbb64ac299d42d89a0f799500f7f4e583d600

/data/data/com.taou.maimai/files/.umeng/exchangeIdentity.json

MD5 d79dc777986f1187fd7b57c4b955eb91
SHA1 97c4c3116d75cf46d352ef9d2409f73765267d6c
SHA256 6475f300f49880ee0aac174f7fb9f79c68c01bdfa8a3b4d23a76b39f08ddead6
SHA512 d9b745a7ab0db864b0e195cc26ac54c471a724b15b62966c4fda1ba4503a2306675ad5610d78bba735ffea29454b0193a7465c895d7699a6fa5ea765e7b08ad6

/data/data/com.taou.maimai/files/exid.dat

MD5 93fc88c4fb19b8a5cf7a80b4ea9c4577
SHA1 3b89be32722cb8097fa94ae455d2c096bf8abcf0
SHA256 9d91848250413524795fd0a23258e0c6d44e57bad558e1c6bbfd3b3704c8e2b0
SHA512 9d043d57b7f5ff99a7e9f4b5914926e3ffc35564b3732ae4511adef700a61043e252cf9fe7edaefeee3d73781521a76bec5627e8fb8cff20cfc16cbfc4911c9f

/data/data/com.taou.maimai/databases/ua.db-wal

MD5 a507621eb85930e3b99153ca647c375a
SHA1 a387c37f782c3d490aeb403bc043487da5bcebb6
SHA256 4ac33ac500cf55dbc7031294bd5989965f0609e40e1b1de2e24ed83176bfadd1
SHA512 67e3e9d19257471125b8c977c6d183c7b97d53836e96a23ad68517cb7297d515e5eb2f0f799128a1dbab6a7dc692c1eca9559f8dd0e28d203e2ede3d6a749aa0

/data/data/com.taou.maimai/databases/ua.db

MD5 d604a3bf1f8d992cc320ea5b1f7609bd
SHA1 247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA512 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

/data/data/com.taou.maimai/databases/cc/cc.db-wal

MD5 35391d5f5a0954e56a210b444e29f139
SHA1 e1ba3dd1c0f07ba57eacde13e138ebcf82fef54b
SHA256 90c101e14e4a79706127619b05dea177b5d1902a3b31def8955f62b876b5dbfa
SHA512 7c9dd88193540cc26f10f18bfb36762f3b33d43ed9c170aeec7fa52910bf4b90cb72394e22768f97ba02937abe30d9f2523295ef832bd7990e013c16a82b69f2

/data/data/com.taou.maimai/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/storage/emulated/0/com.taou.maimai/json.log

MD5 501b423d52686e252ed319445ed79b6b
SHA1 26ce66a50d25acb6e34850d40681c51375596a8c
SHA256 c1d361ed0d6129b7a15d2cb54b2fcd9854308befe694b03f2a9dbb65aa557f40
SHA512 6c3a54ab9b94022a79a0979714051f1ad1b6b66c6e305b5080fa6fc7eaa67080a76db98c2edba25381850eb087fc409b3a9583013774f7cea25c978daca74718

/storage/emulated/0/com.taou.maimai/json.log

MD5 aa2cbbec8de30d81c50fe4cce2bab39f
SHA1 a10831d756155ca305b82098a696eb0b6e2357c3
SHA256 8683c75d71e27930be898b5224771d6b6ba3121f4d7e17ecb68528b31c9e82fd
SHA512 2956535f2268a024e899b858748a1d075b2cfc307b58533c382e52605e7a4fe1c060360540a9ff2ba7830ecb035fd50d229a3d0c8eba9e229ce8524335307f51

/storage/emulated/0/com.taou.maimai/json.log

MD5 d7afff3e2e71098e48ff7ab7eed69790
SHA1 4bcace5f9b10f10437b65e8b3b176a3822ee7aa3
SHA256 274eea837bd6d18cea11d3a750ecb27ab2090593e3ce0e6ed6b720d09af4249d
SHA512 c2a66334bf61382e1cd366143bf5ac08ebfe736a29d44df4c9da90903f59cb5e015c5d089cb533e68f6cebc962b59898b3d4810f4348923794e94a32661f9bd2

/storage/emulated/0/com.taou.maimai/json.log

MD5 4940b8d8751a2ad66ce0d5546c6933dd
SHA1 6b81c397cb67219d377421203299fa688a61d9c4
SHA256 4fc3f9fe524646bde1953a0bbd98ddfb312ee7913603e3137a19616bdc61f4ee
SHA512 a7c53187ffdce44c726a931e70017c80a8230161ab3591df488bec5ee37c863f8f7945e9b9ca08e324ec4b1248396943e3543636b25df1ed3d09270ef583f556

/storage/emulated/0/com.taou.maimai/json.log

MD5 ee36b5c53813bf6cee2d3efd607a447a
SHA1 b7cdf2407b82a3c65a63e8c317dc8f5506b8f01d
SHA256 720f0c5f782f3d92e609e13a17ec6d02970890061c8de4a15741074a11b16cbd
SHA512 2ffa1f9e4f39bc60d58923273d60e9e986a7683b095081d95d126c7477a83c3c64597d462be94323647f0d59afb367c09a15f337c0d227f3f1d687a6b563ced9

/data/data/com.taou.maimai/files/pili_qos_index.json

MD5 266cd18fe4d915355d96aa559639930b
SHA1 06c79da86cb6321770338dbe343bb9314a10134a
SHA256 aa6e426ae7e75ef001a00198a755d598f9f4b9cbc4a502fcce72fe7034bd20e8
SHA512 ec23851600b4387e0e2d53063623687fe679255be704fe18fa27d6a24e7b0c71e02b4e124dae64b178fe1c4ec12d3b5f2553c23f06f9da99c29f62cbb952a43c

/data/data/com.taou.maimai/files/.um/um_cache_1718035555886.env

MD5 e2cd5aef196c4e1e471f84bebf334ce6
SHA1 d1b48b8259347a688534c61cb367cb51c58005d4
SHA256 9cb8e4828446cdcfcc87a264ce1ad38fbd11763b08ef9026bcde39238807ddee
SHA512 7ba935ee755c3c12864e8023755e3e0f6ce4a1a4031e2403b862d20910bd27b4f4d897be4e9cca529a36c87cc5006f79de974df41cfa8d57facfe6e2157c94cd