Malware Analysis Report

2024-09-09 13:19

Sample ID 240613-a9m1es1hlr
Target a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118
SHA256 b159fe7e0e1f0a95177b1839da40dc88f122cd3a426df0c34fb437671a4365d2
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b159fe7e0e1f0a95177b1839da40dc88f122cd3a426df0c34fb437671a4365d2

Threat Level: Likely malicious

The file a33fb3c2821da01f2f3f957053722e2d_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Queries information about the current nearby Wi-Fi networks

Queries information about running processes on the device

Loads dropped Dex/Jar

Queries the mobile country code (MCC)

Reads information about phone network operator.

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 00:54

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 00:54

Reported

2024-06-13 01:01

Platform

android-x64-arm64-20240611.1-en

Max time kernel

2s

Max time network

132s

Command Line

com.shijiucheng.huazan

Signatures

N/A

Processes

com.shijiucheng.huazan

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.40:443 ssl.google-analytics.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp

Files

/data/user/0/com.shijiucheng.huazan/.jiagu/libjiagu.so

MD5 f380717bd1e3916c7b697fab8d46c5d8
SHA1 04f51f0d16097214e38be517d93be44cb0603a88
SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
SHA512 b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

/data/user/0/com.shijiucheng.huazan/.jiagu/libjiagu_64.so

MD5 585208a50849d74967be092bf41ab7ce
SHA1 7b7105bc642c01784e7a301c5008f82fc3d4ec44
SHA256 38cc9d02e42be8f2e0dcd69a0a826f9517b3381b4ca24eb1769c2880e7460a37
SHA512 9f8b659e91f2c40eba6bd82a2d3ecdf0dffaa9a211f0a64fd52ae8f8fa713d2ff9dfa48a94e654d5797e0304ecf53546d828085d9b96b6d3a4c42131405de7f2

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 00:54

Reported

2024-06-13 01:02

Platform

android-x86-arm-20240611.1-en

Max time kernel

87s

Max time network

175s

Command Line

com.shijiucheng.huazan

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/bin/failsafe/su N/A N/A
N/A /system/sd/xbin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/xbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/com.shijiucheng.huazan/.jiagu/classes.dex N/A N/A
N/A /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.shijiucheng.huazan/.jiagu/tmp.dex N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A s.appjiagu.com N/A N/A
N/A d.appjiagu.com N/A N/A
N/A b.appjiagu.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.shijiucheng.huazan

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.shijiucheng.huazan/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&

sh -c ps

ps

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 eco-api.meiqia.com udp
CN 203.107.60.151:443 eco-api.meiqia.com tcp
US 1.1.1.1:53 cloud.xdrig.com udp
US 1.1.1.1:53 i.tddmp.com udp
CN 116.198.14.56:443 cloud.xdrig.com tcp
CN 116.196.71.30:80 i.tddmp.com tcp
N/A 10.127.0.1:65535 udp
N/A 10.127.0.2:65535 udp
N/A 10.127.0.29:65535 udp
N/A 10.127.0.12:65535 udp
N/A 10.127.0.49:65535 udp
N/A 10.127.0.20:65535 udp
N/A 10.127.0.36:65535 udp
N/A 10.127.0.44:65535 udp
N/A 10.127.0.16:65535 udp
N/A 10.127.0.23:65535 udp
N/A 10.127.0.8:65535 udp
N/A 10.127.0.46:65535 udp
N/A 10.127.0.56:65535 udp
N/A 10.127.0.68:65535 udp
N/A 10.127.0.144:65535 udp
N/A 10.127.0.24:65535 udp
N/A 10.127.0.26:65535 udp
N/A 10.127.0.19:65535 udp
N/A 10.127.0.22:65535 udp
N/A 10.127.0.38:65535 udp
N/A 10.127.0.47:65535 udp
N/A 10.127.0.6:65535 udp
N/A 10.127.0.14:65535 udp
N/A 10.127.0.27:65535 udp
N/A 10.127.0.15:65535 udp
N/A 10.127.0.37:65535 udp
N/A 10.127.0.45:65535 udp
N/A 10.127.0.57:65535 udp
N/A 10.127.0.7:65535 udp
N/A 10.127.0.61:65535 udp
N/A 10.127.0.25:65535 udp
N/A 10.127.0.28:65535 udp
N/A 10.127.0.48:65535 udp
N/A 10.127.0.54:65535 udp
N/A 10.127.0.10:65535 udp
N/A 10.127.0.67:65535 udp
N/A 10.127.0.62:65535 udp
N/A 10.127.0.17:65535 udp
N/A 10.127.0.9:65535 udp
N/A 10.127.0.34:65535 udp
N/A 10.127.0.60:65535 udp
N/A 10.127.0.39:65535 udp
N/A 10.127.0.40:65535 udp
N/A 10.127.0.3:65535 udp
N/A 10.127.0.21:65535 udp
N/A 10.127.0.30:65535 udp
N/A 10.127.0.32:65535 udp
N/A 10.127.0.42:65535 udp
N/A 10.127.0.51:65535 udp
N/A 10.127.0.31:65535 udp
N/A 10.127.0.33:65535 udp
N/A 10.127.0.41:65535 udp
N/A 10.127.0.35:65535 udp
N/A 10.127.0.52:65535 udp
N/A 10.127.0.66:65535 udp
N/A 10.127.0.65:65535 udp
N/A 10.127.0.58:65535 udp
N/A 10.127.0.11:65535 udp
N/A 10.127.0.13:65535 udp
N/A 10.127.0.53:65535 udp
N/A 10.127.0.59:65535 udp
N/A 10.127.0.4:65535 udp
N/A 10.127.0.50:65535 udp
N/A 10.127.0.63:65535 udp
N/A 10.127.0.18:65535 udp
N/A 10.127.0.5:65535 udp
N/A 10.127.0.64:65535 udp
N/A 10.127.0.82:65535 udp
N/A 10.127.0.55:65535 udp
N/A 10.127.0.109:65535 udp
N/A 10.127.0.74:65535 udp
N/A 10.127.0.212:65535 udp
N/A 10.127.0.92:65535 udp
N/A 10.127.0.78:65535 udp
N/A 10.127.0.104:65535 udp
N/A 10.127.0.197:65535 udp
N/A 10.127.0.80:65535 udp
N/A 10.127.0.203:65535 udp
N/A 10.127.0.95:65535 udp
N/A 10.127.0.89:65535 udp
N/A 10.127.0.88:65535 udp
N/A 10.127.0.76:65535 udp
N/A 10.127.0.100:65535 udp
N/A 10.127.0.201:65535 udp
N/A 10.127.0.113:65535 udp
N/A 10.127.0.206:65535 udp
N/A 10.127.0.81:65535 udp
N/A 10.127.0.110:65535 udp
N/A 10.127.0.96:65535 udp
N/A 10.127.0.108:65535 udp
N/A 10.127.0.196:65535 udp
N/A 10.127.0.79:65535 udp
N/A 10.127.0.199:65535 udp
N/A 10.127.0.106:65535 udp
N/A 10.127.0.117:65535 udp
N/A 10.127.0.200:65535 udp
N/A 10.127.0.70:65535 udp
N/A 10.127.0.209:65535 udp
N/A 10.127.0.73:65535 udp
N/A 10.127.0.91:65535 udp
N/A 10.127.0.101:65535 udp
N/A 10.127.0.71:65535 udp
N/A 10.127.0.205:65535 udp
N/A 10.127.0.208:65535 udp
N/A 10.127.0.90:65535 udp
N/A 10.127.0.119:65535 udp
N/A 10.127.0.118:65535 udp
N/A 10.127.0.105:65535 udp
N/A 10.127.0.107:65535 udp
N/A 10.127.0.99:65535 udp
N/A 10.127.0.198:65535 udp
N/A 10.127.0.116:65535 udp
N/A 10.127.0.114:65535 udp
N/A 10.127.0.83:65535 udp
N/A 10.127.0.210:65535 udp
N/A 10.127.0.202:65535 udp
N/A 10.127.0.86:65535 udp
N/A 10.127.0.207:65535 udp
N/A 10.127.0.98:65535 udp
N/A 10.127.0.93:65535 udp
N/A 10.127.0.85:65535 udp
N/A 10.127.0.84:65535 udp
N/A 10.127.0.77:65535 udp
N/A 10.127.0.69:65535 udp
N/A 10.127.0.115:65535 udp
N/A 10.127.0.87:65535 udp
N/A 10.127.0.72:65535 udp
N/A 10.127.0.94:65535 udp
N/A 10.127.0.211:65535 udp
N/A 10.127.0.204:65535 udp
N/A 10.127.0.103:65535 udp
N/A 10.127.0.112:65535 udp
N/A 10.127.0.97:65535 udp
N/A 10.127.0.75:65535 udp
N/A 10.127.0.111:65535 udp
N/A 10.127.0.102:65535 udp
N/A 10.127.0.220:65535 udp
N/A 10.127.0.129:65535 udp
N/A 10.127.0.213:65535 udp
N/A 10.127.0.243:65535 udp
N/A 10.127.0.123:65535 udp
N/A 10.127.0.226:65535 udp
N/A 10.127.0.121:65535 udp
N/A 10.127.0.134:65535 udp
N/A 10.127.0.216:65535 udp
N/A 10.127.0.221:65535 udp
N/A 10.127.0.141:65535 udp
N/A 10.127.0.230:65535 udp
N/A 10.127.0.133:65535 udp
N/A 10.127.0.219:65535 udp
N/A 10.127.0.238:65535 udp
N/A 10.127.0.223:65535 udp
N/A 10.127.0.233:65535 udp
N/A 10.127.0.234:65535 udp
N/A 10.127.0.247:65535 udp
N/A 10.127.0.248:65535 udp
N/A 10.127.0.251:65535 udp
N/A 10.127.0.222:65535 udp
N/A 10.127.0.136:65535 udp
N/A 10.127.0.126:65535 udp
N/A 10.127.0.250:65535 udp
N/A 10.127.0.252:65535 udp
N/A 10.127.0.120:65535 udp
N/A 10.127.0.228:65535 udp
N/A 10.127.0.139:65535 udp
N/A 10.127.0.140:65535 udp
N/A 10.127.0.137:65535 udp
N/A 10.127.0.235:65535 udp
N/A 10.127.0.125:65535 udp
N/A 10.127.0.227:65535 udp
N/A 10.127.0.254:65535 udp
N/A 10.127.0.124:65535 udp
N/A 10.127.0.218:65535 udp
N/A 10.127.0.231:65535 udp
N/A 10.127.0.215:65535 udp
N/A 10.127.0.225:65535 udp
N/A 10.127.0.128:65535 udp
N/A 10.127.0.239:65535 udp
N/A 10.127.0.142:65535 udp
N/A 10.127.0.214:65535 udp
N/A 10.127.0.245:65535 udp
N/A 10.127.0.130:65535 udp
N/A 10.127.0.217:65535 udp
N/A 10.127.0.224:65535 udp
N/A 10.127.0.229:65535 udp
N/A 10.127.0.240:65535 udp
N/A 10.127.0.249:65535 udp
N/A 10.127.0.232:65535 udp
N/A 10.127.0.127:65535 udp
N/A 10.127.0.131:65535 udp
N/A 10.127.0.244:65535 udp
N/A 10.127.0.237:65535 udp
N/A 10.127.0.242:65535 udp
N/A 10.127.0.246:65535 udp
N/A 10.127.0.253:65535 udp
N/A 10.127.0.138:65535 udp
N/A 10.127.0.135:65535 udp
N/A 10.127.0.236:65535 udp
N/A 10.127.0.241:65535 udp
N/A 10.127.0.132:65535 udp
N/A 10.127.0.122:65535 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.46:443 android.apis.google.com tcp
US 1.1.1.1:53 av1.xdrig.com udp
CN 116.198.14.20:443 av1.xdrig.com tcp
US 1.1.1.1:53 s.appjiagu.com udp
US 104.192.110.60:80 s.appjiagu.com tcp
US 1.1.1.1:53 d.appjiagu.com udp
US 1.1.1.1:53 b.appjiagu.com udp
CN 180.163.249.208:80 b.appjiagu.com tcp
CN 116.198.14.43:443 cloud.xdrig.com tcp
CN 106.63.25.33:80 b.appjiagu.com tcp
N/A 10.127.0.1:65535 udp
N/A 10.127.0.2:65535 udp
N/A 10.127.0.3:65535 udp
N/A 10.127.0.4:65535 udp
N/A 10.127.0.5:65535 udp
N/A 10.127.0.6:65535 udp
N/A 10.127.0.7:65535 udp
N/A 10.127.0.8:65535 udp
N/A 10.127.0.9:65535 udp
N/A 10.127.0.10:65535 udp
N/A 10.127.0.11:65535 udp
N/A 10.127.0.12:65535 udp
N/A 10.127.0.13:65535 udp
N/A 10.127.0.14:65535 udp
N/A 10.127.0.15:65535 udp
N/A 10.127.0.16:65535 udp
N/A 10.127.0.17:65535 udp
N/A 10.127.0.18:65535 udp
N/A 10.127.0.19:65535 udp
N/A 10.127.0.20:65535 udp
N/A 10.127.0.21:65535 udp
N/A 10.127.0.22:65535 udp
N/A 10.127.0.23:65535 udp
N/A 10.127.0.24:65535 udp
N/A 10.127.0.25:65535 udp
N/A 10.127.0.26:65535 udp
N/A 10.127.0.27:65535 udp
N/A 10.127.0.28:65535 udp
N/A 10.127.0.29:65535 udp
N/A 10.127.0.30:65535 udp
N/A 10.127.0.31:65535 udp
N/A 10.127.0.32:65535 udp
N/A 10.127.0.33:65535 udp
N/A 10.127.0.34:65535 udp
N/A 10.127.0.35:65535 udp
N/A 10.127.0.36:65535 udp
N/A 10.127.0.37:65535 udp
N/A 10.127.0.38:65535 udp
N/A 10.127.0.39:65535 udp
N/A 10.127.0.40:65535 udp
N/A 10.127.0.41:65535 udp
N/A 10.127.0.42:65535 udp
N/A 10.127.0.44:65535 udp
N/A 10.127.0.45:65535 udp
N/A 10.127.0.46:65535 udp
N/A 10.127.0.47:65535 udp
N/A 10.127.0.48:65535 udp
N/A 10.127.0.49:65535 udp
N/A 10.127.0.50:65535 udp
N/A 10.127.0.51:65535 udp
N/A 10.127.0.52:65535 udp
N/A 10.127.0.53:65535 udp
N/A 10.127.0.54:65535 udp
N/A 10.127.0.55:65535 udp
N/A 10.127.0.56:65535 udp
N/A 10.127.0.57:65535 udp
N/A 10.127.0.58:65535 udp
N/A 10.127.0.59:65535 udp
N/A 10.127.0.60:65535 udp
N/A 10.127.0.61:65535 udp
N/A 10.127.0.62:65535 udp
N/A 10.127.0.63:65535 udp
N/A 10.127.0.64:65535 udp
N/A 10.127.0.65:65535 udp
N/A 10.127.0.66:65535 udp
N/A 10.127.0.67:65535 udp
N/A 10.127.0.68:65535 udp
N/A 10.127.0.69:65535 udp
N/A 10.127.0.70:65535 udp
N/A 10.127.0.71:65535 udp
N/A 10.127.0.72:65535 udp
N/A 10.127.0.73:65535 udp
N/A 10.127.0.74:65535 udp
N/A 10.127.0.75:65535 udp
N/A 10.127.0.76:65535 udp
N/A 10.127.0.77:65535 udp
N/A 10.127.0.78:65535 udp
N/A 10.127.0.79:65535 udp
N/A 10.127.0.80:65535 udp
N/A 10.127.0.81:65535 udp
N/A 10.127.0.82:65535 udp
N/A 10.127.0.83:65535 udp
N/A 10.127.0.84:65535 udp
N/A 10.127.0.85:65535 udp
N/A 10.127.0.86:65535 udp
N/A 10.127.0.87:65535 udp
N/A 10.127.0.88:65535 udp
N/A 10.127.0.89:65535 udp
N/A 10.127.0.90:65535 udp
N/A 10.127.0.91:65535 udp
N/A 10.127.0.92:65535 udp
N/A 10.127.0.93:65535 udp
N/A 10.127.0.94:65535 udp
N/A 10.127.0.95:65535 udp
N/A 10.127.0.96:65535 udp
N/A 10.127.0.97:65535 udp
N/A 10.127.0.98:65535 udp
N/A 10.127.0.99:65535 udp
N/A 10.127.0.100:65535 udp
N/A 10.127.0.101:65535 udp
N/A 10.127.0.102:65535 udp
N/A 10.127.0.103:65535 udp
N/A 10.127.0.104:65535 udp
N/A 10.127.0.105:65535 udp
N/A 10.127.0.106:65535 udp
N/A 10.127.0.107:65535 udp
N/A 10.127.0.108:65535 udp
N/A 10.127.0.109:65535 udp
N/A 10.127.0.110:65535 udp
N/A 10.127.0.111:65535 udp
N/A 10.127.0.112:65535 udp
N/A 10.127.0.113:65535 udp
N/A 10.127.0.114:65535 udp
N/A 10.127.0.115:65535 udp
N/A 10.127.0.116:65535 udp
N/A 10.127.0.117:65535 udp
N/A 10.127.0.118:65535 udp
N/A 10.127.0.119:65535 udp
N/A 10.127.0.120:65535 udp
N/A 10.127.0.121:65535 udp
N/A 10.127.0.122:65535 udp
N/A 10.127.0.123:65535 udp
N/A 10.127.0.124:65535 udp
N/A 10.127.0.125:65535 udp
N/A 10.127.0.126:65535 udp
N/A 10.127.0.127:65535 udp
N/A 10.127.0.128:65535 udp
N/A 10.127.0.129:65535 udp
N/A 10.127.0.130:65535 udp
N/A 10.127.0.131:65535 udp
N/A 10.127.0.132:65535 udp
N/A 10.127.0.133:65535 udp
N/A 10.127.0.134:65535 udp
N/A 10.127.0.135:65535 udp
N/A 10.127.0.136:65535 udp
N/A 10.127.0.137:65535 udp
N/A 10.127.0.138:65535 udp
N/A 10.127.0.139:65535 udp
N/A 10.127.0.140:65535 udp
N/A 10.127.0.141:65535 udp
N/A 10.127.0.142:65535 udp
N/A 10.127.0.144:65535 udp
N/A 10.127.0.196:65535 udp
N/A 10.127.0.197:65535 udp
N/A 10.127.0.198:65535 udp
N/A 10.127.0.199:65535 udp
N/A 10.127.0.200:65535 udp
N/A 10.127.0.201:65535 udp
N/A 10.127.0.202:65535 udp
N/A 10.127.0.203:65535 udp
N/A 10.127.0.204:65535 udp
N/A 10.127.0.205:65535 udp
N/A 10.127.0.206:65535 udp
N/A 10.127.0.207:65535 udp
N/A 10.127.0.208:65535 udp
N/A 10.127.0.209:65535 udp
N/A 10.127.0.210:65535 udp
N/A 10.127.0.211:65535 udp
N/A 10.127.0.212:65535 udp
N/A 10.127.0.213:65535 udp
N/A 10.127.0.214:65535 udp
N/A 10.127.0.215:65535 udp
N/A 10.127.0.216:65535 udp
N/A 10.127.0.217:65535 udp
N/A 10.127.0.218:65535 udp
N/A 10.127.0.219:65535 udp
N/A 10.127.0.220:65535 udp
N/A 10.127.0.221:65535 udp
N/A 10.127.0.222:65535 udp
N/A 10.127.0.223:65535 udp
N/A 10.127.0.224:65535 udp
N/A 10.127.0.225:65535 udp
N/A 10.127.0.226:65535 udp
N/A 10.127.0.227:65535 udp
N/A 10.127.0.228:65535 udp
N/A 10.127.0.229:65535 udp
N/A 10.127.0.230:65535 udp
N/A 10.127.0.231:65535 udp
N/A 10.127.0.232:65535 udp
N/A 10.127.0.233:65535 udp
N/A 10.127.0.234:65535 udp
N/A 10.127.0.235:65535 udp
N/A 10.127.0.236:65535 udp
N/A 10.127.0.237:65535 udp
N/A 10.127.0.238:65535 udp
N/A 10.127.0.239:65535 udp
N/A 10.127.0.240:65535 udp
N/A 10.127.0.241:65535 udp
N/A 10.127.0.242:65535 udp
N/A 10.127.0.243:65535 udp
N/A 10.127.0.244:65535 udp
N/A 10.127.0.245:65535 udp
N/A 10.127.0.246:65535 udp
N/A 10.127.0.247:65535 udp
N/A 10.127.0.248:65535 udp
N/A 10.127.0.249:65535 udp
N/A 10.127.0.250:65535 udp
N/A 10.127.0.251:65535 udp
N/A 10.127.0.252:65535 udp
N/A 10.127.0.253:65535 udp
N/A 10.127.0.254:65535 udp
N/A 10.127.0.145:65535 udp
N/A 10.127.0.146:65535 udp
N/A 10.127.0.150:65535 udp
N/A 10.127.0.170:65535 udp
N/A 10.127.0.161:65535 udp
N/A 10.127.0.188:65535 udp
N/A 10.127.0.148:65535 udp
N/A 10.127.0.160:65535 udp
N/A 10.127.0.165:65535 udp
N/A 10.127.0.189:65535 udp
N/A 10.127.0.173:65535 udp
N/A 10.127.0.158:65535 udp
N/A 10.127.0.186:65535 udp
N/A 10.127.0.164:65535 udp
N/A 10.127.0.187:65535 udp
N/A 10.127.0.194:65535 udp
N/A 10.127.0.178:65535 udp
N/A 10.127.0.184:65535 udp
N/A 10.127.0.168:65535 udp
N/A 10.127.0.175:65535 udp
N/A 10.127.0.177:65535 udp
N/A 10.127.0.154:65535 udp
N/A 10.127.0.162:65535 udp
N/A 10.127.0.180:65535 udp
N/A 10.127.0.153:65535 udp
N/A 10.127.0.149:65535 udp
N/A 10.127.0.171:65535 udp
N/A 10.127.0.151:65535 udp
N/A 10.127.0.181:65535 udp
N/A 10.127.0.176:65535 udp
N/A 10.127.0.174:65535 udp
N/A 10.127.0.191:65535 udp
N/A 10.127.0.167:65535 udp
N/A 10.127.0.147:65535 udp
N/A 10.127.0.182:65535 udp
N/A 10.127.0.152:65535 udp
N/A 10.127.0.159:65535 udp
N/A 10.127.0.172:65535 udp
N/A 10.127.0.143:65535 udp
N/A 10.127.0.169:65535 udp
N/A 10.127.0.183:65535 udp
N/A 10.127.0.192:65535 udp
N/A 10.127.0.157:65535 udp
N/A 10.127.0.185:65535 udp
N/A 10.127.0.190:65535 udp
N/A 10.127.0.179:65535 udp
N/A 10.127.0.193:65535 udp
N/A 10.127.0.195:65535 udp
N/A 10.127.0.163:65535 udp
N/A 10.127.0.166:65535 udp
N/A 10.127.0.155:65535 udp
N/A 10.127.0.156:65535 udp
CN 116.198.14.17:443 av1.xdrig.com tcp
CN 116.198.14.42:443 cloud.xdrig.com tcp
CN 116.198.14.14:443 av1.xdrig.com tcp

Files

/data/data/com.shijiucheng.huazan/.jiagu/libjiagu.so

MD5 f380717bd1e3916c7b697fab8d46c5d8
SHA1 04f51f0d16097214e38be517d93be44cb0603a88
SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
SHA512 b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e

/data/data/com.shijiucheng.huazan/.jiagu/classes.dex

MD5 b6f33c124a8661c26dd7de6dcaa5fed1
SHA1 79025152c69e8ec0421975609e676eed704f27ac
SHA256 5011264f90cf83414cec2d896ae73c755d03180e1018b90c0feca1828bf71d2f
SHA512 271659da544efba7ff83a4c69fac582bd5dcaec139d5569435c35a6d19f733cece3b12619572c627c8e8723656ee4740bc1ca9316e411d8d83bd45db2bf94e65

/data/data/com.shijiucheng.huazan/.jiagu/tmp.dex

MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ri

MD5 07145ca6d8d58892da5413c53efd7925
SHA1 96e947493758d80a6649d341495a68372b7b2051
SHA256 33c41caca2a70d5ed30c4c0d6188c714d9f109eb3c5af7c9d20ecc90a9084927
SHA512 bbd93ffcfd5ce715ad28dfcd98cb895b899d955b5df30802255b45b06c1f70f7927c6eaea44374494ec4558acaddcdfcf63351b86cb0077edc47ec78bee502e0

/data/data/com.shijiucheng.huazan/files/.jiagu.lock

MD5 687225a1cc5d2b2349e56e3d4ea7a040
SHA1 a11daa9f7b421c3204803792b58073a010cd49fd
SHA256 6439e876bb8d4eb26b30af416cf26e5f2a64c098bc4d91144b7fcb3088e2db82
SHA512 3bb660ae751beae515bab32bf64c7c67b08c683cca7aec5ccfdfcf23498e65768232cbb9dfefa94bb2fd50ec94decf6a66d4c0ae238e44579c08ff30b5e74ef2

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.rd

MD5 56d0b6742bc601611ec90950e542a1d2
SHA1 61740f9ecf3898bc397930944ba02ebd819786ba
SHA256 1741d64e0ebfd1ef344eab7723edebc3b7d6359869b9bf6ff576ff23ed320dfc
SHA512 c0789e1574817441706bd1998798c4f25ccd6ee7c375b924558be49c083d0035f84602c1b48a7b5cdae462fcf7e1a6707bb3f7c20d1a732c1aa03bb682c92050

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.store

MD5 448e391c59eef34ee1defbe4dee4c41f
SHA1 df1f890987371d7d8e6963c68b787856e42bc146
SHA256 55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
SHA512 ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ac

MD5 7bd51a78837b851b95e53b0315fe68fa
SHA1 ebf31cb7e3de33201fd9da49efecbf7dc6813305
SHA256 febc540b49398eb4f099da1d6a6b82696bb8a0e5b17950692698b1c80ea7f632
SHA512 6305b43ed6edd316b38640bb5ac12a331fdf4133c835932fac072a005421433c9964d2cc08a26cd7c9094690392f0beb9f4692e9f860ad13f8a6c5d8ae41ee78

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ic

MD5 edfd51b122c7bac3cdccd2d1a58c4613
SHA1 cccbd4b6d7def15f3b26cd1bec99219209173cb0
SHA256 00e7176fc54a7cdbc62d987f4c46fe58fdeaa19c715af62cc5adcbce0401ef98
SHA512 4e1d6df78828b9af01397c9a5b9b778a7e8b027231b58e7f9cae68649d471eb524b23ea8d02c90e29c735b84b720193f80b54ab93dbe6ae7309df0085474757d

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.di

MD5 c55520e92dee893c79e4052c163bc537
SHA1 84790f83c736b354aa1ef29bfa34c483959b152b
SHA256 d7afa87b5d149384158bf52fe6ea91229fe4a02902ac90f6d005aeb148d69100
SHA512 fb99e69529512bf069df72f3f565699dec7de3186bde10512d448bf33ec966e74b0dd55a57576bb30d8fa6fe535622eda75e8affc0cbd05c363b649ab7df58f4

/storage/emulated/0/360/.iddata

MD5 bf826ad6bef11dab6a9e5c56ed2d8e4f
SHA1 801d0904a4348aa1d88fd2a137fc577ffd0f4bd9
SHA256 1b2e2bbd563303ec07ec466f1c45da429c179a7cab45e29d48f4065b571fe42b
SHA512 5e3a9c4cef97c4ef040caad85840f8dded8d00cf0c941c7c1aca549010a77bf9f6cde4627c004a7293a8742a0b1ab8df79a685c7f9bc76dffc12968895430292

/storage/emulated/0/360/.deviceId

MD5 1d8d16c4e3b19ebf18988530d9b9a757
SHA1 bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256 abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA512 4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

/data/data/com.shijiucheng.huazan/files/TDAntiCheating_Switch_Value

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/storage/emulated/0/data/.push_deviceid

MD5 26570f65e6655b061e30f2052cfb19a4
SHA1 a3786501fd0813652664faa8d09ccd8f02f947b5
SHA256 11e304f224ca77f7495ca5526f2a5a3015d945555103fab2899d8ee4760299d6
SHA512 cce95ff8d6d675e8b7f44a544f21d224ab047d485dbc87c31c3890f3aaeec3c1ae757846d2eca8adf6b1336b76f318b41b9bb2093e1d3e9dfcbd9a0a9b89e179

/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/journal

MD5 c72f2c178b13fbfd7010dbf5e1fdb5c3
SHA1 67a58ba74988d15e9a3e29c11f0815367a19e243
SHA256 70230604140ab8967d6d0b4911a834fdafdc50fdc1120eb3ad04d73ab0234c50
SHA512 83b132e391df329fd50e1a4b42e920b43cbc0810713a88215811558054771d956366fd63e3c8dc815dde0757d4db127616eb490ca3fcf1e4a444a8ffa469a132

/data/data/com.shijiucheng.huazan/files/jpush_stat_cache_history.json

MD5 07c1e26126799b9eded2a3fad83c2b1c
SHA1 af5fdc2eb65c19e6c57857717a9cbffe788db1f6
SHA256 ee5c35c0907be2f62fbc41b57918090324c69a9716348ac74ffc54099ff32d47
SHA512 202ba9a0c6e78a44f893e0c7f0f9de040a56d4a5a569bd5bd3bf196987dc384897eaeaf91f8ec3c0afcf9530b1d55b1a954ec01c766f837d6f7fc5fb9fa3f167

/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/96fb6738ecea307d7d26aae43070215dabf7bb2f096fca680a039edce44d68c7.0.tmp

MD5 787ae48af165d6f01f24f95659214ec9
SHA1 3f290aaa95a3486d2d9774e863ac690b9920ef1d
SHA256 9e9ca832b85985475b6576ecaf1fd0377f17bc11ff67efe058bb11d3e322cf48
SHA512 0ccdcf4263535f1cc1825edb23cf2cb432d1656e18ce076fc4b8624d6afec1e6268d7d2842a428b4963a7c8c3efc7118948610fe0c545353ff7fbbf3a28ff3dc

/data/data/com.shijiucheng.huazan/cache/image_manager_disk_cache/97ac0abd95bdfd919a211689e3b5bf7ac5eb1c5b52331176d2c7c6e075cbce51.0.tmp

MD5 7dc57f6589f57918e785ab3ea9c712b5
SHA1 d7e8b23852de5b0e8780bfa14e45cbe66b04d8f3
SHA256 052e8fd668f9db7a475fea319869a5232471c9631dd77dfd265b50860edd549e
SHA512 f53815df9dd040f0946f495145b73e274227a61fe7fbf5f30de3bdf397b468aafadfad3cc22689f8d48aa2df27faf94f460db3e7f86353d5b12e28d5af0b8ac9

/data/data/com.shijiucheng.huazan/files/TDCloud_Control_Cache_Param1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p1

MD5 77a46758589835fb53d05523a803a716
SHA1 63166c7314352d2cee66bf80ab31d61fb1d0d633
SHA256 39303227324b23f87693c74df638a0ff5c3521ea0a9cc2e7a327ca326d2cd827
SHA512 e4a71810f687aeef9b15315229a819f8d3bf2eb786f3b5aa38e9ba94b4b7d2d9d158568daf4486e09560387adf373b8eb5c42abb0fa99988cfbf0d640e6ffbf7

/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p2

MD5 23d0f1330eda3ba3d8cc7287501b2346
SHA1 405b9be417760571602fd50cf608b9f8f29c6a61
SHA256 14807b31557cb8e6c21af156610936c0ed7028ae81da120b3d45c7fb72999422
SHA512 711faadb1d137aeaf9cfffec387b5ce06c70822486540d4fd41f1b34806477055e7d84c6205ca36c1ab2659cc10a818d5840ad3d8bcdcb5019debcdcfeb219a5

/data/data/com.shijiucheng.huazan/files/_Ladder_Project/Archimedes_p3

MD5 2798b3e425e46ff1b7df43cf7e223ac7
SHA1 cae329c21faf59c97ef8a3910e08408e15d74765
SHA256 84177da7d437c386d1aeb11f72259f57724549861ded68638149219e9f15d8ad
SHA512 92eb8554e238b9cebb2289645dbee9a704f78bfe1cec557f055526ca4d93024c87bef2ab1fc144341c58d18253235528d8542d812b53b853573a5c21d401ae01

/data/data/com.shijiucheng.huazan/files/Archimedes_p4

MD5 817d9fee005a75a18a9c238f632b1a4e
SHA1 8e85c6653e33f848d6dbbd5a890d62e70aba6f6e
SHA256 72aa23a83acca2ef25041cd36b699e810957c62e89b4b7beaab27b3fc56e4cf5
SHA512 fc4ff76bac15a15a34120a7db09fe42a0d312964cafd0a4f57cee824360cf964f5511da35455252be6a030b5d9e7f442063eb948ada13c295a539a78adb0cc74

/data/data/com.shijiucheng.huazan/files/Archimedes_p5

MD5 432c0b77c20f51570ce914199de96491
SHA1 d0ff8a55efd7a0065eaefc284892628dbf06cbd7
SHA256 3f8922a70ca2045bab6b5e408088520bb15d4aa47a9891211795d716ce750989
SHA512 5090812c5071877c9ed38cb39a29e6272f7c22e6ba47597e1d4f12a9e3ab5d31c05e15b125cafa240c23275b2e172175d818438b3e7906ae9d03aa007d16d38d

/data/data/com.shijiucheng.huazan/files/mPBE/salt

MD5 20da51f7ca91a1712370b148292ddebc
SHA1 af070e9654ad882bb9ef36426f41f5b756281cc0
SHA256 b54a6365723609b388da794b2a7bfaae6b00f5841db695512b208d29cb43d44c
SHA512 a755e5a965aa6c6de6135b823f2adb0e6b5d9c90e36c0a2a8662b72ba7101783339f0ef65e4694694aa9a7b347670616c0a2abf1124ac1fe8b31d436a0067a65

/data/data/com.shijiucheng.huazan/files/mPBE/iv

MD5 f8bff15adbf653f4099fc4f2d576ad5c
SHA1 01dd40fea314622ff44f9d7b31c131e31ec0d4cc
SHA256 a87eaf9e2e4e9d3934e8c0a7ce285063d2244156aa381f6e5f291d7bcdfa9565
SHA512 092ce11a40c0060dc74354ee4918e8993b7de4fc326caa179928f1a9c21dbf32eda611533c6d801e3213cbad2abe6a50ed03c7c9d897927adfd5334956aabccc

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370268_4266

MD5 2d49dc3f7d22601ad6fe135aa039dbed
SHA1 5402e6410c79a802bd78a00686b4b0ad662ecf29
SHA256 1bd78f42bafd98577fcc2ab6fb5b81110be616ce6f90d03835589e19cfec0bac
SHA512 741b4738769e773bdf2b2a90c01d6038dc61af0ab21b4596d2a11fe3788c22903c48d5cdcfd4b386928b8d47558ca73def7104a16cc791fc9acba41b47b05eb9

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370514_4266

MD5 5d237fd54357e10ae9e9ce11f04dbe89
SHA1 659f2e9b9263de96758355b2b0a65cd56d6ee0fe
SHA256 e0ce9894e4cf7ecc41d7cb39b8bda55a1e89ff93822f6356b9f4303313c29d86
SHA512 a8a0c72b5460b6ac55664dd0baea3b7efd2ff1a5992cd4defcd2be240b6fd7c59ca79c780c5bb6cece0538b08172bc77558148e2382a0d9442dd11e21ad3a82d

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database0SaaS/1718240370730_4266

MD5 6adbad2c6203937923e01cd18ee7679c
SHA1 0b5657768f53969d9eb084901e7c407f9277a8da
SHA256 dcc4377c0cb217b3552a388d7065aa55d413058401529b2c348e351d34a09bcd
SHA512 b1e3b5fb49e63c10c2ed4138e7d19cb612876ee58d092e7d1e07c8b71daca6028c84b8738eed6dd8d620b3f851a100f16af3887a897252c389ffd7d582149b85

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240370932_4266

MD5 c4897c5641ccab4958848c1e1aa92a61
SHA1 dc6d1115f289cc10d7c47f6fe68cb51ef0ca6869
SHA256 5f9bcc1d0d26b781e3f9f3934a93b1773d66c10478d1397557489e20e95af73a
SHA512 54ae7fa810b89a7898972a568c3c08685d4e89612cdb12eec7951b57a443eba9d2c6576ccf7188e5102bc34f711a2af79507c7002f8e4764f19b00106e812dd3

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371074_4266

MD5 b2de726756d7b5019757180765fd9495
SHA1 4d97e66721980b09747ac74ccb11f5a35c28b110
SHA256 d67514d4aea0d59aaeea179b1ba4b873841ebee7765444ad4ebeb5a8d6438b2e
SHA512 b29d6947a3b799beebe532c710e9be5c90952ff74634dffb24d783225b553bb049ae94c9984f471000f32b206ca4f0bd7f5089661b90bf55c008e74b965cc634

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240371207_4266

MD5 48927cb6055bd66873a9413e8164c266
SHA1 50670d654124ebb1c2971d2f3a3f1ae632bf0b71
SHA256 2aa28b31ea84c4660f10d3c28dc723116b7c2aaf83f650b451244650d939f88a
SHA512 7f97b25b4ca808c4eb40de404da7591368f58c9c8fc1d76389dcc2a612c4be04fc09b715680a6bc54e85d0cd7b92112cd1fa6e9c7033e5655b7cd909b9c2554d

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.di

MD5 f00ca36cd9b47964cfb2b74ccf57a3b9
SHA1 1f418c66844bfb01e68bf2280349b7ff47015e58
SHA256 745a7c3c5c967813406c180be1af244d6864ffcea023eed6f212854b13ade890
SHA512 cd991c9e9873ef192205279baa268cc021844f354ce944ac93f1e68959ee93242aa72ebb9713dacc7dba9b81cbb349791d2570885a655b59a5acbcb5bb1e5fa4

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.store

MD5 ed90f6cbbec74b59e614ac1b66a7f77e
SHA1 40e1346798f7358ccb443873fb0e084669bad572
SHA256 bda3e149c1815075bdd0aa1a59f7dd49d922fe13e8be76b1cc12a90a976caee8
SHA512 d88c233e854fcf21f99af7792d478f00b742b7e4b54e51bddde3fea8b986f2eacae5888b1f5cdd86bf6973d3e223f547c2c6e9dab800eaeb2d9c714db5bf4c1a

/data/data/com.shijiucheng.huazan/files/.jglogs/.jg.ac

MD5 09c4790e6c2a509bc60c587c7e4d7b6e
SHA1 becb6c9e53c2b5d4bd7d39b2f6ba528eacd6b2b8
SHA256 9ea616b06c3b44e7ad1ffd3733be04b7795448e99bb2e361bf0da04472904963
SHA512 7c17dab6647f4cba403bc9e6c1aa459e249b8cc00106b98ecb29a2e5def525e34697628e82bee90838088b3d921e2486f87e3c92cb909b3bb966f0b50937dfa6

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240420732_4266

MD5 0adc6e0e3d64d5e21a9aab9c29309048
SHA1 12e26685e5f700cc3c5ede0caa2d71aca5152d83
SHA256 cd5e519abd56f6f4a77e8bb2cb80f26afea0aa7a848ed942b98bc5966d2ec37f
SHA512 e2f25b83a344005f9323c4d48dc4a88776207e7cf6a80f607bb3a5e94c8af8341aaeafcddc3a514c3bff7a7b1525c51f5d568edc59a72e1dbc559b5f701e65fb

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240425713_4266

MD5 22709f36b984ab336b0ccd20e0a164b1
SHA1 7b1573ce6d6cf4efdfa88848e9b6d484c936fe28
SHA256 adb1856bdf049498b45cee6d1817f830bfe8ba161a02f32948c1477490915585
SHA512 4f54ccb1fe533954dbc202a6c9560d20b85c4e9b20e986183f327823c1c4fa62d15cde0cac1c9c200617a0488133e2d21178d67c9c17ccf5ac0c621d06645dde

/data/data/com.shijiucheng.huazan/files/__database_reborn_January_one__/td_database2SaaS/1718240430858_4266

MD5 10ca4dbc0f859f86d7c46823c19ed73a
SHA1 ed31c1fc1fd135744b9da04b6666ba1020da1449
SHA256 9d94d88ef80027d4a771d40a0f913682dc9866b2ef7fe551863e6e79a2d45ffc
SHA512 3266672e1a0ebf86ebc819d91398b6bdaf960fd86a288e23bea62922bceaa3e73cb4f38dffb5286b4203d5cceaf5d13b05e87c04d31bf6057b199bd76ee91429