Analysis Overview
score
8/10
SHA256
44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0
Threat Level: Likely malicious
The file a76b81ccc1617a50289669ec07a9925e_JaffaCakes118 was found to be: Likely malicious.
Malicious Activity Summary
Checks if the Android device is rooted.
Checks known Qemu pipes.
Loads dropped Dex/Jar
Checks known Qemu files.
Queries information about running processes on the device
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
Queries information about the current Wi-Fi connection
Requests dangerous framework permissions
Reads information about phone network operator.
Queries information about active data network
Listens for changes in the sensor environment (might be used to detect emulation)
Uses Crypto APIs (Might try to encrypt user data)
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks memory information
Checks CPU information
MITRE ATT&CK Matrix
N/A
Analysis: static1
Detonation Overview
Reported
2024-06-14 00:56
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. | android.permission.PROCESS_OUTGOING_CALLS | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE | N/A | N/A |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-14 00:56
Reported
2024-06-14 00:59
Platform
android-x86-arm-20240611.1-en
Max time kernel
179s
Max time network
184s
Command Line
cn.xichan.mycoupon.ui
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/bin/su | N/A | N/A |
| N/A | /system/xbin/su | N/A | N/A |
Checks known Qemu files.
| Description | Indicator | Process | Target |
| N/A | /sys/qemu_trace | N/A | N/A |
| N/A | /sys/qemu_trace | N/A | N/A |
Checks known Qemu pipes.
| Description | Indicator | Process | Target |
| N/A | /dev/qemu_pipe | N/A | N/A |
| N/A | /dev/qemu_pipe | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
| Description | Indicator | Process | Target |
| N/A | alog.umeng.com | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation)
| Description | Indicator | Process | Target |
| Framework API call | android.hardware.SensorManager.registerListener | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Checks memory information
| Description | Indicator | Process | Target |
| File opened for read | /proc/meminfo | N/A | N/A |
Processes
cn.xichan.mycoupon.ui
cn.xichan.mycoupon.ui:pushcore
/system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
Network
| Country | Destination | Domain | Proto |
| GB | 172.217.169.74:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | youquan.xigou100.com | udp |
| CN | 139.196.70.202:80 | youquan.xigou100.com | tcp |
| US | 1.1.1.1:53 | update.sdk.jiguang.cn | udp |
| US | 1.1.1.1:53 | nbsdk-baichuan.alicdn.com | udp |
| US | 163.181.154.229:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | s.jpush.cn | udp |
| CN | 121.36.193.140:19000 | s.jpush.cn | udp |
| CN | 121.36.193.140:19000 | s.jpush.cn | udp |
| US | 163.181.154.229:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| US | 163.181.154.229:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| US | 163.181.154.229:443 | nbsdk-baichuan.alicdn.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | ynuf.alipay.com | udp |
| US | 47.246.136.189:80 | ynuf.alipay.com | tcp |
| US | 1.1.1.1:53 | sis.jpush.io | udp |
| US | 1.1.1.1:53 | easytomessage.com | udp |
| GB | 142.250.187.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| US | 1.1.1.1:53 | tcp | |
| US | 1.1.1.1:53 | adashbc.m.taobao.com | udp |
| CN | 223.109.148.130:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | tcp | |
| US | 1.1.1.1:53 | im64.jpush.cn | udp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | 139.9.135.156 | udp |
| GB | 172.217.16.238:443 | android.apis.google.com | tcp |
| CN | 139.196.70.202:80 | youquan.xigou100.com | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | easytomessage.com | udp |
| US | 1.1.1.1:53 | easytomessage.com | udp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | 139.9.138.15 | udp |
| US | 1.1.1.1:53 | 119.3.188.193 | udp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 106.14.6.108:8080 | tcp | |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | tcp | |
| US | 1.1.1.1:53 | tcp | |
| CN | 124.70.211.119:3000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:3000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 223.109.148.179:80 | alog.umeng.com | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 106.14.6.108:8080 | tcp | |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | alog.umengcloud.com | udp |
| CN | 223.109.148.177:80 | alog.umengcloud.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 223.109.148.130:80 | alog.umengcloud.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 106.14.6.108:8080 | tcp | |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | _im64._tcp.jpush.cn | tcp |
| CN | 223.109.148.178:80 | alog.umengcloud.com | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | _im64._tcp.jpush.cn | tcp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 223.109.148.141:80 | alog.umengcloud.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.179:80 | alog.umengcloud.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.176:80 | alog.umengcloud.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | _im64._tcp.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | tcp | |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.193.140:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| CN | 121.36.205.81:19000 | easytomessage.com | udp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| CN | 1.94.137.180:19000 | easytomessage.com | udp |
| US | 1.1.1.1:53 | tcp | |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
Files
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | d8d6116ae6b23063e77e54b4ba0dfb47 |
| SHA1 | f7d32d9aab7480a71805f08b7c0414037ead3969 |
| SHA256 | 32906f36dd2a738d5a7a8949fd2460582f08f5b4195536401acc3f0258d6e553 |
| SHA512 | e89464748d35378bc573919c8356b815e2b1f7719b6e7dd0ea6fa1057f484f1cb6341d1348e2450cfd3b71406040756889d480168971c87f8bf897f6696f5b1b |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | cf1d2cb292de537276c2e10c66b0bf33 |
| SHA1 | bb9c953465765ab30f10e45b47818c2116bd8435 |
| SHA256 | 6d5c3f386b278299e4a610688cfbe361482e361b2836856c027270fb7b7f11f8 |
| SHA512 | c1345529b6c9c24f236c952e3b21ff713e683251cb4a3b8bff386582ec79f9edc5bc6537c0ef9d1a7392094f572ed1b0e8a09660b6c2f557cc1495f72a0ca6d6 |
/storage/emulated/0/.DataStorage/ContextData.xml
| MD5 | 0931accd3387cd46648adef90dfa8eaa |
| SHA1 | 4593fc73fa37f0052f67d797656bd28ab5e3e16a |
| SHA256 | 51e0d3cf76e6dcdd5e1c3b502dc047638338aee577e5a42652032d583b93c5bc |
| SHA512 | 4a33c95d1acfdeadb008f1d18b76ebe340572c6ec6378d48c0a2e158ed4a41ecf0e5ebe781e008fec35f9f982450f4c8d40d9c72847e694135c5735f6729e6ac |
/data/data/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp
| MD5 | dd7a0a50860a9ff7fedbcb66128583db |
| SHA1 | 528b93603dff0391f654f2b0b55830970c6d29ac |
| SHA256 | a1cf384b29952b716e19f0c7b3fc2cb1bf89c4e9a21016b7d8989db83fe572fa |
| SHA512 | 88074b6f5de981cc9a14a0ee79c549d2a565ab5b6d2d4b40a6ab62f5e27a6d5b9d28d8c990cb59adebc6e5758595f91480557bdbccc6bcb92d4fbc99b40d897d |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | 38616785cca0600a03205f84fe330b4b |
| SHA1 | 6ac41a6bdcae297d56dac5fdde70be5faccf0832 |
| SHA256 | b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8 |
| SHA512 | 7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
| MD5 | 5d7ea1a23af19b4340cc8d90f28297d5 |
| SHA1 | 4cfe95b23a9e98378d69c4290af81b51fbe76aea |
| SHA256 | 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da |
| SHA512 | 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal
| MD5 | a0b4faaf671f8d678a2d30c9e74acc4f |
| SHA1 | 8e1e6fc0afa731bc986b131a5c479b1aeb78d3d7 |
| SHA256 | 5cc8127a2892afa41ccd68629ae54780529c9a4d0e1e63e3708dd8047c2aa990 |
| SHA512 | 326b2227239300db63a7db6a907c4fa884ee18aee10a1d77f0c5b761a2bb9b26c47034593bc6b44cbacd96823e674e6d8c6b6badcb019b26e75d12003139c1f2 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | feb0d292ef98ba99b36792813d49a823 |
| SHA1 | fc1fa26ad71994ead921d74d81044e32d3dbe8a7 |
| SHA256 | aec2940582fec48b5a5a178e2dc8f0f10d6e1ecab8d5c5fa4139711c49eb5db6 |
| SHA512 | 2519e6ccb12d699668212c74e4aa78c6249a7181b7d14dae06f97c84060129eed9e68ee916b56f7322550214b06d8b1f8c88afed517d698c2ff1a3093448a867 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 272a4f04ed6faa939e8ebccffeab46ea |
| SHA1 | 8599e1baa5929163841602dccb195632f6f60be9 |
| SHA256 | 3fc3a40f2275bb19702d3b01d88a56465bdac24a2ca38c373e25005454d92d7e |
| SHA512 | d43d1c78156b48577fa9aff210e96f77287a6e61198233a6d6a1ffce6a3d7ef978a73f4531bb082ef51925a23ef2e51b4d6fc14b1e20e885a745b34be36eb369 |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip
| MD5 | 32f2c8b3462ccd5ef664020833c825d9 |
| SHA1 | ed5e47c61cedb3acb97d057efd8ed0d8687086ac |
| SHA256 | 8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187 |
| SHA512 | 328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
| MD5 | 10760142380b34e358c396ca8d606a91 |
| SHA1 | b8d7f379c3e25bef6f24636fcb243d3baf2cbe46 |
| SHA256 | 8a25b66e15f4054d677ad667d8eeb4db31ad09188884ae20cff78bfcafdd042b |
| SHA512 | 72105e76a0b2252434453074a966bb0f2ba849399bd9b3093004f3af47663003af614ec87ee3dd6d12cce0de9816bc1504a9859ced15c389c18601c36d66f9c5 |
/data/data/cn.xichan.mycoupon.ui/databases/ut.db-shm
| MD5 | dbedcd71108662a584285bcc1a29455f |
| SHA1 | cf81d78df0de5e95555e4ce0587e0504ca5ed960 |
| SHA256 | 1b640b7fc361220c23b33b7026ed2adcfe2efc1db59d32aeddab3bd73b3cc9a0 |
| SHA512 | b80f0d2995108bfa29620a8f28783e535b193b13028201ffd465fae61be2a1f9b51d9f77f8f03873ac145eacd8f3d995e22ac179968a3fa9f97175e840ed0966 |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip
| MD5 | f59597732a9069b73e16c027faf78d05 |
| SHA1 | e3558f4e5041a6c6d4372001bed847f2ef77958c |
| SHA256 | 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6 |
| SHA512 | 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2 |
/data/data/cn.xichan.mycoupon.ui/files/umeng_it.cache
| MD5 | 07d98c52e794766964a3d775e2d7cb54 |
| SHA1 | cc5ba2b49974b1bd53318cb758e16e2aa2d7aad6 |
| SHA256 | 0b984695493600bbb11488da21c5124cc920012a6738a33f5d83a385ae643c43 |
| SHA512 | 4c99e70552d26cba236580144d3ce1599f97d003c83fcd739eab04a2bc747cfbfef9c8dddf04244303e5d53a07b83ef227d278f05371ff9f94b476ab7371e4d0 |
/data/data/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json
| MD5 | c736fd00172deaae1503a33b8d97a77e |
| SHA1 | 140ccf7193cede30a3b4f033983f6c8136cbf8fe |
| SHA256 | c3b6cdc70fbd4869d9ad625f7af72df0312c3436d12fb2736f64288cda28a4fd |
| SHA512 | 33a322a56fa58fc57c2c442ed8250ebf66725686e818e617e0cda32570fb897aa8f71f763f9df444512ecc6e9fa6263d03b8661545e5c76608c6c3ceccd0ff58 |
/data/data/cn.xichan.mycoupon.ui/files/exid.dat
| MD5 | 0b79e8edfd0c4aa795a8745ba01169e7 |
| SHA1 | 5afa2923fe3dcb4434c7d0b072703726df7edc00 |
| SHA256 | 1855129e662781d045aa4385a69c6d973bd2dc948a4c6bc82b3104ffab019cf1 |
| SHA512 | f5be7b1a6d1069d3ddc4f32b9125aae9fbbdbd85632fafb6dbbbc93e5568ed7daccfbae2f1691685b07cd6d34064c049ee84a44023768395f0dcba27e9c8dfb3 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
| MD5 | ded79b50c1610bd3ebd7f0a77ff434c3 |
| SHA1 | f8249c3dda9c074580379b1575e91d988bac7f24 |
| SHA256 | 045528bef561219a107b3ded4e3089fff1b1d37a9e376fa984fc66011fbd7c06 |
| SHA512 | 474fd74c03aa65429356ffb51ba79726fb37669b81ce7b9ef903e1891145ae47ad6c1c5f5efaf2781c3c0b129214bd4706e4b2db53cd66968f9d7675dda382c9 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 9eacf443661aaf5691b9107b14d760a8 |
| SHA1 | 1ddf4d873f7f12b4d99406578c37f2a8c47a36ec |
| SHA256 | c5dc948e20e75a1b106c4c4025a17df9774192f7d59a0b24041a4aee22ef9519 |
| SHA512 | d01b6da85f0d0a69b3be660124231d48b772fdd57af47d0246519b2064e9dae094d324ec737b55c6ecbddff2cfd3968d0d317c6ebb600665fe72246138839b82 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal
| MD5 | 5f0353e9dff6c7e819b64bb3170b014f |
| SHA1 | 888de54f7aa6ff2d6a401c1ffa56564b904c8e13 |
| SHA256 | 22364262643be73185711fcff51bea545f735bdfa9e112ad0d6e08ca37fcfca6 |
| SHA512 | c290ec9a5f6f77f7ccdf69e27221b2b6648af65b44f2e736f632b457af165630a1cae073dc256fc41389ce1bde7e1142da55bb759181258eb97b2981750032ec |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
| MD5 | ce6135aa1b1fe4f2c2db2a546d2a5558 |
| SHA1 | 79b59582154017aadab783dc266fcb158c252940 |
| SHA256 | 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c |
| SHA512 | 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4 |
/data/data/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json
| MD5 | 9b3173760bb73225994b004018777f60 |
| SHA1 | 755cfd14a218803defc2adf85526a4f7858a2c27 |
| SHA256 | 89a77c255567a5c31129eb09e87e7a6173dd8d88096e22970317dec237eefe80 |
| SHA512 | 4c892cafc6334688aff5f9af143365a449d26e1ca2fef071801a8fc3fba61fed73e21bb0542a9f0b2e37c90847865684a48dd5b6c7332319e4da698f1b7eb3cf |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
| MD5 | d100bde2afda42049a16a2d58c9be67c |
| SHA1 | e7067cf7f801d0343d9e6f1266646e02ad2fc7e1 |
| SHA256 | 8831f84cccb59bd7a380d68014973ec9e3106e3f875cb3bcf22fb92fbb471b1f |
| SHA512 | fb5f38b7a24dfd6a93050856b6fc1e2f016dfa77558eba581121a19cbc54d8af11ea22ee5efb599891a48c1305dda49617c6f41bb750304de6267977b82aa7a9 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 5a72b0f9024adcdfbd0b927bab99b1eb |
| SHA1 | a618a4033d69dfd3ef1ea06bca3d4b88a5c151e3 |
| SHA256 | 7b9205203c0025bb671593622bb57c8789c28cb9023c52826125894eb49c1958 |
| SHA512 | 7665fb7cb581e0b13e3e71e3173ef2e1f56d39dfbe5dcb84980372d56d4eb9a388ac4b40653464b06ab3e79d96831acb9894e32e12806c0e32c264c77eb701fe |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
| MD5 | 672d78eacbee75ca430f45863d1b4e1e |
| SHA1 | 0eeb1a66109e326927da9d59eca7e39a043b833d |
| SHA256 | afe230287f406dea016fe10d36fbcf503fb18a4e348ae7757e8df36127c6bff2 |
| SHA512 | 9d4ec1b11de22f40211fa28b07565ab571849e6a4ce86e780ef2aacd15ec7cbdd24b01737cbbce8860124b2fcc84a468ebc2bf31932325b03a3cc9868d2f227c |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 0218cb5b25b7dd686f3d34af92230693 |
| SHA1 | 5e7aa6260b017d4a9a98d727a8a003fa05f32416 |
| SHA256 | 469a525becbea63e94501d0ef53829b8db6e86ba568a88b84864b31bea5539ee |
| SHA512 | 6a9597cce33975ccace80641c800ee73eb019f356dea84b8fbb05aa24ccb268eede3296d71e286066d71f8c27b8af2a46568347ddd896ac966b4a4871fadeed5 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal
| MD5 | c2e119c3e009f1d980a7644a2368cccb |
| SHA1 | 367f938c362a76775b04db45f884671a7f39b609 |
| SHA256 | a05b5e91a041f2c507b6c3eeb9ba53cd32d4504f857132bc93179173e18a3232 |
| SHA512 | 7ec7bad00e632fb7456da30444374d123dac437e87355664c469ac9dd01f1204cbb742bde5cfe4adcfe543c42d61be11cd62511af7dcffd41a2380076766b547 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | fd20442794d1d045685aad8c27c75237 |
| SHA1 | b89e14cbe7ea904c92b3c982f55cd09b7b4927b3 |
| SHA256 | efac8943daf193349b287e9c0f8d97d64cde91ac89293d8476d107328341ffa8 |
| SHA512 | e9cd9d13dc79165267279657920b73beba212629f38424fa6e45343bd2584cac85bb4f34584d9bc0d48826f6409397b9cb008293e04d6e34570804784254cfae |
/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 6a8863dd4be7802445180fb86132a879 |
| SHA1 | 318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768 |
| SHA256 | 003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08 |
| SHA512 | 21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780 |
/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 0438489e26550304ace8e365664531ae |
| SHA1 | cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4 |
| SHA256 | a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb |
| SHA512 | 6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4 |
/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 6c93639d41f97a5ebf59850a124c6ee3 |
| SHA1 | 5b2a150d7debf94df8f42a25435992e25c774660 |
| SHA256 | 2197255e7b267bff4ca80e47bfdfc363c1e1d70d3d0b6a24dde9d31ad2fc215e |
| SHA512 | 100f2f980a164983b2c2e8a4ca167546bc987f52fd3b44b2b4148b92621cfcc724642f9aa429c35b70a544fba6298e6e659821a4999b2dcf8c993b788cd2d422 |
/data/data/cn.xichan.mycoupon.ui/databases/ut.db-wal
| MD5 | 70f4355b9848642c625af07c8a0871ac |
| SHA1 | 5f67cb2dbd02abc442a5a5d17efb4f21c7a979cc |
| SHA256 | 6cd9c81c79699b0dc5e30d9514e2e99230ace76574b8a79da4f547860f519104 |
| SHA512 | 222030a3862fa23104a1e3a8d56e1d5a64af30fe08a88b135fa428d6dcd0bc8124d0d6a418a991367c625386500194588b8db05e09dd0fdc48256d6ce17ee144 |
/data/data/cn.xichan.mycoupon.ui/databases/ut.db
| MD5 | 25526ddc71ccd661b4c80eb7495fb0c9 |
| SHA1 | 33a9da05611848961fc4438b8139b74ac34d8aa0 |
| SHA256 | cf4a73652c7f07e79a1af4210b7a3fd7d14e95ce401c38a79b140c6b1ebc5d6d |
| SHA512 | 27fef6f348b36935b1e1c6defc8e065caa43003f36567bbc0843806fabfa83d520ab95984e7178791eadfd230d296ad69e748bbdbfa348d51ddf9771b31cffd5 |
/data/data/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof
| MD5 | 4414a0e7b917901866ac3d7c4fcd3502 |
| SHA1 | 8a6fc4678bfff11f79417f61a013851a77e8f17b |
| SHA256 | bfaac3785a51ea09b8fd4ddddc1eac199b01109ac2449a79b1c2e611dcd40b1c |
| SHA512 | dbec41e3fcb0951f3af3ba57c6309342a8654bbea2dea6d94a0af9e99c35cdcb529053a3b215bb30345ce71e37b582df1a9ec66992c99bab5eada641c211138a |
/data/data/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732792.env
| MD5 | 463b5b6e1e13f3d1414206b09f398c7a |
| SHA1 | 8885f822164e7a2b2b300c98501ac56c7a55bdc5 |
| SHA256 | aa07447498e2d1af950b469881d514c7bedb36aee2941ba2e43c16a0bb0bbbec |
| SHA512 | cc239983085c8f7bc53550e23d5ea0d7702a98e947f659129c66fddcc5c99caf543b794907f2957ea7cc606e897b2a2addf312305d2d949ee4e8a23aaa7615dc |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-14 00:56
Reported
2024-06-14 00:59
Platform
android-x64-arm64-20240611.1-en
Max time kernel
179s
Max time network
185s
Command Line
cn.xichan.mycoupon.ui
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/xbin/su | N/A | N/A |
| N/A | /system/bin/su | N/A | N/A |
| N/A | /system/xbin/su | N/A | N/A |
| N/A | /system/bin/su | N/A | N/A |
| N/A | /system/xbin/su | N/A | N/A |
| N/A | /system/bin/su | N/A | N/A |
Checks known Qemu files.
| Description | Indicator | Process | Target |
| N/A | /sys/qemu_trace | N/A | N/A |
| N/A | /sys/qemu_trace | N/A | N/A |
| N/A | /sys/qemu_trace | N/A | N/A |
Checks known Qemu pipes.
| Description | Indicator | Process | Target |
| N/A | /dev/qemu_pipe | N/A | N/A |
| N/A | /dev/qemu_pipe | N/A | N/A |
| N/A | /dev/qemu_pipe | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip | N/A | N/A |
| N/A | /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
| Description | Indicator | Process | Target |
| N/A | alog.umeng.com | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Listens for changes in the sensor environment (might be used to detect emulation)
| Description | Indicator | Process | Target |
| Framework API call | android.hardware.SensorManager.registerListener | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Checks memory information
| Description | Indicator | Process | Target |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
Processes
cn.xichan.mycoupon.ui
cn.xichan.mycoupon.ui:pushcore
cn.xichan.mycoupon.ui:pushcore
Network
| Country | Destination | Domain | Proto |
| GB | 142.250.187.206:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | youquan.xigou100.com | udp |
| CN | 139.196.70.202:80 | youquan.xigou100.com | tcp |
| US | 1.1.1.1:53 | update.sdk.jiguang.cn | udp |
| US | 1.1.1.1:53 | s.jpush.cn | udp |
| CN | 1.94.9.210:19000 | s.jpush.cn | udp |
| US | 1.1.1.1:53 | nbsdk-baichuan.alicdn.com | udp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.178.8:443 | ssl.google-analytics.com | tcp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 1.94.9.210:19000 | s.jpush.cn | udp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| US | 1.1.1.1:53 | ynuf.alipay.com | udp |
| US | 47.246.136.189:80 | ynuf.alipay.com | tcp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| US | 47.246.136.189:80 | ynuf.alipay.com | tcp |
| US | 1.1.1.1:53 | adashbc.m.taobao.com | udp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | sis.jpush.io | udp |
| CN | 116.205.165.66:19000 | sis.jpush.io | udp |
| CN | 116.205.165.66:19000 | sis.jpush.io | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | easytomessage.com | udp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | im64.jpush.cn | udp |
| CN | 139.196.70.202:80 | youquan.xigou100.com | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| GB | 216.58.212.196:443 | tcp | |
| GB | 216.58.212.196:443 | tcp | |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 106.14.6.108:8080 | tcp | |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.130:80 | alog.umeng.com | tcp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 101.226.27.166:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.179:80 | alog.umeng.com | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 106.14.6.108:8080 | tcp | |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 61.170.78.160:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | alog.umengcloud.com | udp |
| CN | 223.109.148.179:80 | alog.umengcloud.com | tcp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 216.58.204.68:443 | www.google.com | tcp |
| CN | 223.109.148.176:80 | alog.umengcloud.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 106.14.6.108:8080 | tcp | |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 223.109.148.178:80 | alog.umengcloud.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 223.109.148.141:80 | alog.umengcloud.com | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 223.109.148.177:80 | alog.umengcloud.com | tcp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 223.109.148.130:80 | alog.umengcloud.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:3000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7000 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7002 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| CN | 119.3.188.193:7003 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | adashx.m.taobao.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| US | 1.1.1.1:53 | update.sdk.jiguang.cn | udp |
| US | 1.1.1.1:53 | nbsdk-baichuan.alicdn.com | udp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| US | 163.181.154.230:443 | nbsdk-baichuan.alicdn.com | tcp |
| CN | 59.82.39.0:80 | adashbc.m.taobao.com | tcp |
| US | 1.1.1.1:53 | ynuf.alipay.com | udp |
| US | 47.246.136.189:80 | ynuf.alipay.com | tcp |
| CN | 116.205.165.66:19000 | easytomessage.com | udp |
| CN | 123.60.89.60:19000 | easytomessage.com | udp |
| CN | 61.170.76.178:80 | adashx.m.taobao.com | tcp |
| CN | 1.94.9.210:19000 | easytomessage.com | udp |
| US | 1.1.1.1:53 | sis.jpush.io | udp |
| CN | 1.94.119.240:19000 | sis.jpush.io | udp |
Files
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | 39bcced4e95e6f59d575b8de463ca8a7 |
| SHA1 | 856b6fe50898085495af59a5b93ddc38eace8e52 |
| SHA256 | c2beddd2f2c6b3ef569105b062aa4fb16b8834e1c3ec62c8be793831671212d1 |
| SHA512 | 55ad2c998776c26bf8fa3a8d54b6ace21d9a4a7fe9ddd4edffb1fce3536b7eb7e1815eed1e00652997cd7be8a63c5ce9472e95f773e1e6883fa0b5d87b8afbd5 |
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
| MD5 | fa109eaad46022ac57be8b1f9d282242 |
| SHA1 | 78e5a8e3548a2e0325f280ce0dad7e4ff7aca160 |
| SHA256 | f8d9bee6ea699d7bd64d884902e5b6eef1197a1298b02142637a9ad7e2ff1a22 |
| SHA512 | 6aa596e7b2dd7c8b793a72a2412eada3bf999bd8b4cead01eb8206d43786fa2978978db3b1b1b0ab564c4de411dce5ea02a0add400186d01b797b1009302de7a |
/storage/emulated/0/.DataStorage/ContextData.xml
| MD5 | 3013657f807ea7361b4da5f73b2ba9d6 |
| SHA1 | 21d62c577d5a3f4a46f521b9104324d00195f66e |
| SHA256 | d4779b4fe5caff8a3ff73027cd1e872e0d128581bbdb871b2d6d049580d33690 |
| SHA512 | 07177e8537a7f64c639c9259e0bb434ad809ac6c365e8b2357b3c14ab015a5bd3b953146106000ed08544b55b0c75d47ab8e035dfde6e98eacebf5ced21564eb |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp
| MD5 | ba94d738e0db71467ff4348ecc9f64bd |
| SHA1 | 76f840994872dfe787ecc84cd654e8353252b642 |
| SHA256 | 44af525592677092787761f096892c85de2154e2c29dcb88896aaaad5a06ef78 |
| SHA512 | 60e024246e7f05e4ec6a29f7c6722287f6e6acf54ef586ca080d302d9d469e849ed7cff0ec2238cf73dfbf373842eff73a5d6cf33d2b7db38dcc84e03f0a6418 |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip
| MD5 | 32f2c8b3462ccd5ef664020833c825d9 |
| SHA1 | ed5e47c61cedb3acb97d057efd8ed0d8687086ac |
| SHA256 | 8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187 |
| SHA512 | 328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | 97b22cf4142ee3fdd89b03faf90c7cbe |
| SHA1 | df062819f0eb8ca8d4672b84e496dfccc1f84403 |
| SHA256 | 1d2cf79d16fc538f9fbfb9903cebf8ad1c8e4e382612e94c5fdf15c326349975 |
| SHA512 | 4e77cf061919d8bc5c1fc066d4c139eac85cc673e84a754c3b986a81ddd3ab8d3aa82649820da0a6f6d5fc31e4d607f6aeba9f30e3811a1b77d4c052a64e63ba |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
| MD5 | 266bd06808c5719d36142af877422761 |
| SHA1 | e4686b4812b4c4ce379b27969ab1ee8456897e5e |
| SHA256 | 5dc3b683279d001947cc0bd5f9011af768dbd716c9e1e35927c469631db6e670 |
| SHA512 | 82d448954e471d814bea1745b9f87cfb299995851adaddf937ec5a88361ca27949ab178dac6652c03f708c9c069bb25570b7115cb7e519317cfc421c05471bbf |
/data/user/0/cn.xichan.mycoupon.ui/files/Q0VSVC5SU0EK.txt118c
| MD5 | 7bb004671cc07b6af966c77e8e59c03c |
| SHA1 | 82618af034b75c73f526bd05debfd66db42d81f5 |
| SHA256 | c808ddb03150534cbe366e6adfc80335de6cbbccd92814732eaf714005ef30a6 |
| SHA512 | 97a52c22f69d2ba308e0136e068a26e9c034140f729f777aa85423c43d5269824d82c7271381e6416900e0cfb853bdabe09f232873db351953932cc3e7a15e83 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | cd1757a3bf7a38c27ec30af53765459e |
| SHA1 | dd988b48583db534648bd1ede633010d78b8bd80 |
| SHA256 | a11cca79d180a10ed86f0184728b16cf7c16589c8ec4bd1d6f5e2f76ee833a7e |
| SHA512 | 9b2c6249cd6f2ff31820e21d77c34465b3c8e49847952c2dae1623911522f574126df853f8de9601f4979a32d72a959f407deda7180b1d6ddc63f9601f7452e2 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | 2ebfc89ccb08f7d9f86e0900743cad55 |
| SHA1 | a3883d935f87d3a893a545aa9f453a3c05e756c6 |
| SHA256 | 20dc0633ecb5d01ed83bf133614b51f8f148431ab1c34d89343b403ed72e0e7a |
| SHA512 | 447433bdbb0a4cfcfc9815350c750aa5cb70612fd7efe34e73bf8a12b6eb5638bab05ebf05346e38ed93e571f9a7e087eab5027a8fec28806205b7f25c778a85 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | a36186109ab2f3a047bb068113d7a6e1 |
| SHA1 | 9a700ee0a879ec2a03b8f926af93775ce49d3bd7 |
| SHA256 | ced61c109d9c0d3c9e5235639b99f70296c47b81b421ac01462a595a97beeb42 |
| SHA512 | 84595592e54e08a9622b678350d2f0ccc49a630f510ed73cc2a037d59246d8b400e89490d22bbd6a5f4abb67580ca972dd40bb386702a00093b2f8b806cdfbd2 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | e122ebda20e2dbeb7173a9e2bb6e8216 |
| SHA1 | adf51fd1df68f341d1abc856419d55539658c6cc |
| SHA256 | c85825599c747d5b54b6cbf97c86c51302503a5c58e673b1269faff992fb867b |
| SHA512 | dcd9a2f84534704bddff01353e290e966b5190f751d7844821fe67aa2571ef729b82809f7f1ee780dca3d0760a0966f91f4d6f423aea7dc4fe9bbbb71ebfdc7b |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | a5a87366b860f07b1216e9b3e8e91149 |
| SHA1 | 01787055d0dbd7fec99f8f403c86254437a72fa4 |
| SHA256 | ef8cfd5abf4dc6d25450f44df30ea7135667c532390866b80f82474904cb999c |
| SHA512 | 38156e91b23e8e440a99acae697ce0d529f60d7f7277ed8204c02f653a9790ba096d26220cfe4da7a9b31d2a52b98bff49b860d7686894ce9e144d07d8fc0bd6 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | a9479bcb8ca12583c0d0cead2f82c371 |
| SHA1 | c657ec7a55627bfacf736d0001a945110211ef4a |
| SHA256 | 894232482eeca1522114eddf0b70d11b97d43670e7a0ada91ad31ab4cdfd7527 |
| SHA512 | 553e072fca6c5efbbf1a51bfc80081e7089b986c778c4444b3f94ed4db53700e847d338b91792818bde80d458245251587b4147ec733bae6d37f430bfd70288c |
/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
| MD5 | 75694e403dbc728c85b85d55d972d357 |
| SHA1 | 346ce6fb424f486cc32f7f46649649470cd57225 |
| SHA256 | ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9 |
| SHA512 | 591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad |
/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal
| MD5 | 693108f2772a718f7ae4f17d905841c6 |
| SHA1 | e29907d9563c46aa371892194ae9b14b4dae34eb |
| SHA256 | b8a93b3189355b91ff4185372fd70ffa18741f40517768e321c7cb3fb412af02 |
| SHA512 | 878f46ec64fc8bf592eec941aee3f9d61888dc8cd5f2ab72a68d1d35cecee23d2b333c064c6237831f81f3f2ce962efc78df964da69921c9c50df8658e63a926 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | 4953475d95ef49d264fcb315f259591c |
| SHA1 | 7f63e0e0f7dbc48eb4e29f637a9844a9858a5206 |
| SHA256 | f614fe3fc0fc055c04b2a10e9bc875d14e92f1bdcf3cb903f743a0d3537f6a71 |
| SHA512 | 449b1c7ae0d5fdfad909fa553bb0d9c24f824b028b3835d5e52cae57fd6cd4812a2276599b9d1b3bcfd53bf514b44065999949045a36a601bb14dfd6c16558c1 |
/storage/emulated/0/data/.push_deviceid
| MD5 | 5f6d8d600ecfc2118e39dca2f1714369 |
| SHA1 | c10f969bb76ea1e7adbdbcbe136009866c14080b |
| SHA256 | e218175e9f8a2d3ceee33536af07ad979383f421a637d73b28de1ff81fa54a36 |
| SHA512 | 43b7d3186d34ddc362acedf0950bc5386497aed27a9146a15156caf93cdfa70a0ced4dfb633f1fcfc592065cebc7bcf80b29a9e05ced42bfed037a8971dbe66d |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp
| MD5 | 16fd530321efbde36fdee740732e1484 |
| SHA1 | e5b009565a0b01c57678ddfc3e17e945ca5910ed |
| SHA256 | ea3f8afb176f218cf1aef734e4331594a1d2f54b66d7db463bdbca146de6dfdc |
| SHA512 | 371b311c4eced7701e28415ecf30cdad298d99bbd4a3a4a3171636909a3fdfdb5632803f4559f32bb33b1693e665310e7e89bdce0aefcf91b8da19f32f65f6cf |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip
| MD5 | f59597732a9069b73e16c027faf78d05 |
| SHA1 | e3558f4e5041a6c6d4372001bed847f2ef77958c |
| SHA256 | 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6 |
| SHA512 | 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2 |
/data/user/0/cn.xichan.mycoupon.ui/files/umeng_it.cache
| MD5 | c5cbf80eebfb46f7dc58b1dd57ff4a2d |
| SHA1 | fcaa3ccafa6231a3118609d145473d807b584ce0 |
| SHA256 | b3b5c28842e4e426afd5e65e8850ac5d367b73d72e6064af17f1a73c669fe5ba |
| SHA512 | 694d185374cb32408cd083c1c427bb436ae9d3e063022271c866b56daea191fd7ca780becb7c55693ad7b74caad177d20c9feb1e3a75b30831b359b1952763c5 |
/data/user/0/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json
| MD5 | 1d412d159d48de763e083238d502f178 |
| SHA1 | 9b805abfa31e0318d195b67b54ff21a3f5b46096 |
| SHA256 | 763ce325b8949709e3604b67441e5996acfc1174e375680704a9f2f78970e5b2 |
| SHA512 | f2b5f2fea56fcac8c0165a0615602c341c2949e81637030269d7c37dbfc89203c63ed8ab1f316a178def95fb7b95e0e5a50affba2db119edd75f930da0cfeb28 |
/data/user/0/cn.xichan.mycoupon.ui/files/exid.dat
| MD5 | 91f5bbba0b52e79cd871f0c67e06c2fa |
| SHA1 | e0fc4bf0eb8bde4a4145a0ace60c49ef8f68b75f |
| SHA256 | df39c5d44f35cb62485d153fc80a51cf41b563c5491b90e5213612a08a39434e |
| SHA512 | 5bc46b5dea05b562f1b3bd9479e8267ca43c4e10bebee2a2311d8eb829be3304aeb5790714d2dd2d130fde213ba688702ed317eaeca1e929086316d8b8f39e40 |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | 7cdab081e90f12a37eea20e55dd99943 |
| SHA1 | 67a9fcaba0ca17462df1ea2861158440d858f3dc |
| SHA256 | b34df4e47bcad22361b53ce064ab62d5a632083793130aed06b19a46689541f1 |
| SHA512 | eb0afa632793a9814a0d047217c4698200dadaa0426839f7956bfa023ca2b322cd2642b8e29430d20d37b978e36e2b518d228f73a757fa241184f6f4e472e9aa |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 4cac7d31fb94d5c9581893537f64c5ed |
| SHA1 | 96bef3288546196ac3058b5eeddbe9da1d999fe5 |
| SHA256 | d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5 |
| SHA512 | 0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | 33ccb47b55bcc111094dbcf3314ca4ed |
| SHA1 | 6e8a04466e14b56e1a6489d96881c72bbb43eb95 |
| SHA256 | d6b60fb9278fa6747e1977a6947f6f82b62aeab7810a7abab817169c0bfed168 |
| SHA512 | 5072e6e52eb076dc4ee48ab97588a2eb4a2d188a9ef982e2bd1f016540f77b6004b533a2c03cceb04dd8b5794e17e15e6795cb616cc9559c53ebd9f2a9746a16 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
| MD5 | 86752a4be6564d8370f2f0e403995003 |
| SHA1 | 29f7d50675f6e59f3b808eb6dcc8619384412115 |
| SHA256 | 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c |
| SHA512 | 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | 16759ee7b98450b5d857f692f0da3608 |
| SHA1 | ac764d73a916650dd20b4b1f59bfe57ccc501ed5 |
| SHA256 | e9ca6c06bf637dcb862285269d44a8cf20ac40a28c9004c5a20725d987f1d773 |
| SHA512 | 0a4812e6763714f1113e069d0a6899a07cb4168a9caa3e04567f56c42e6916eaa886c00e86930fa7420b39192cbaa84aba28c0d4c5933bf5812339d330b47a21 |
/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
| MD5 | a2e1094da2ba03c05861fdf183b99c54 |
| SHA1 | 834b3cadd3281f97c06a9f55a8b780a6bd56081a |
| SHA256 | e229fc3e9c547151645d3ac7c2d2db93a3cb93e3963e6851a32684bafcde0b65 |
| SHA512 | 6cf2ab4922fa9143326b084cc361d073ec4c628dfd9d7e136f3421aa6093bd05eb3fda826d0d55cdd5b0b3c7eb54830767295103f5dd0baae7e133267026423e |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
| MD5 | 0e81696fffaeee1cfbf5a407e67f4c3d |
| SHA1 | e3479828ba2ca2f49a2d776ecdcaabd5c68d108e |
| SHA256 | 80e196be82931b13a10e2751ef24642828a832675f02e2187468f58822d9ccc4 |
| SHA512 | 46d29b763edd3e8e823ab8eea16753429b697bfbcd09b07450141bc4f578cce7bd29418ce8bffd9df9d785bb7b239f97cd2f56060ec758c17cc120445f51065c |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | ac1d8c8b388556394f0427f3f7bcbb7f |
| SHA1 | 1c39a63271d412058c30d03fae4673ccbdaa2d7e |
| SHA256 | a72686dcc094d02501f260595f93da2d18790adb071d50677c49d642ca0e91db |
| SHA512 | 5824a60797643298f84f0461dffd00e9d6d9260259b9a2378008f38397520b639d161f3b22a8f65754be591ff69bfd93cd744e25999938df43912b1dc796f2ff |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 077dd0e07e2bf300afc49c0168e57430 |
| SHA1 | 1206025b0e93421317a2ec1e3ae7b4b0a39a523a |
| SHA256 | 2687176d1172056823353d5c2758e0d9ddfbabc465423091482b92a78414e330 |
| SHA512 | df4ccefea80dbff003692383d34e25d9cbb7df710a03bbb4d7a1c14185fe4d2a188a11699dd5f06a172a1e6c1c2dc1c0e3b6bf60c1a62b36c38cba68dd7a1cb3 |
/data/user/0/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json
| MD5 | 0abf8c68ebb3ddc39d2230a4004f856c |
| SHA1 | b9f2316626b9c1669f7778e50ad3f877d5779757 |
| SHA256 | 1a2b5c9afa20f39df9a2a058c6f79639e53252933e1ffe00737980f6a88d7b24 |
| SHA512 | ba8e7dbbd6cf7e3a79aa2d485fd6a3386dca3e4d6a729076c82b7c4011b5e96947953b7da7f8acba45b97325cd0808e33b4ed911ab8213847678488ce5cf4c0e |
/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
| MD5 | 92e6dbbe34c365fb3dd614561fd2257a |
| SHA1 | 7b011cc68f9177be76960f46c513263159b04617 |
| SHA256 | 0c990e9ffedfb64fc8d3da1a08c7bec0bfcad80cb9f08a38429a38704b2e47db |
| SHA512 | f0e1d103dff1e141e716646107aab136c1635a3cff0895f0be61ddddee9deb48517cb545b428f7ad5c275177bfb3985a7fd1a7635e6f9f65040ed964e919ac67 |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | b10ededa0d9681d1da1c1c703fe2e2df |
| SHA1 | f150b092cf5e7880617962a9ea8e03c7c4d05294 |
| SHA256 | aadb1e448abd1ab7f4f234d80412a614883303eda5f6f899403ac7cbc21f0379 |
| SHA512 | 60af32a71db327824b1250301c61b6b0c08807f696caf2fd8763f8fc563922c86070e18c2ca191d85942ecafd56f9696ef1e5ee0de04a68d18d241fd7b99ff6d |
/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
| MD5 | 2c5db1ad035062283d306f9e9ef69bac |
| SHA1 | e11bb95faa1197baa9605e93b4e6f712daf7ed2e |
| SHA256 | be1cce9123681881f38ee6924ebd8c02a6a404e3efe3e77eebef15d36d4b3b59 |
| SHA512 | e9a4cfdf40541603518e9645e3b3a036f9f8d6cfab3e7f7ad08689c5a1c426e5e62def8faed371dcb1af32064bdd7c9f70fd412aff02a45bb802147791f0a48f |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 885950c64c5fa9c64851530f1a0e2fd5 |
| SHA1 | 7db1ad4d32f552a74d5149f9a73bc8e7b60171c2 |
| SHA256 | 791da2e7c9caf29a34798aeb8a79f3ef260590516bf87b6cf308db53d8f6229b |
| SHA512 | b3117dd7506b2fe4a26777189dde3e24a903ea12960682cc9f00dbed6904033034d84d6919f9ba24960f19ae62cea8a548bb3ce459745070a292cc36cd3b7f87 |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | ff9c40a8e33f9441717f85c249de9d32 |
| SHA1 | d7f69a413a6ee2d8b9b607bad0f060c502899959 |
| SHA256 | 4f885d3fa846fc638e1e0272d0aadb936a55a6e2fd127f1c60449aeca2027d67 |
| SHA512 | b8a415d7414fd7df70bcdfc76f11faa2af14cb82ba14436ede334b47672d3c3bdbc3b8f483cd96403f3c611998c30c0182b8b51b419565816e303d1dfc863f0e |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | a1af160d42fdab9b54254bc5710cb70f |
| SHA1 | dede1887e978e61b69fff114cc6bc66f32100b33 |
| SHA256 | a0fd299000606a251fc0fc2074b19b7291fdc1d7d88f13490a5b362eed3df5d7 |
| SHA512 | e244b86f77988ec9cbcf0ffac2e93d96694b3ccd9544a6a419abce6d82341fd4cb9c5ab409bcf68e495598da57b6a70b2da501587d7a4eeea99f1e9f01b44fc4 |
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3
| MD5 | 48a84a220c6d139fc215bbcaa3d512fb |
| SHA1 | 8e39dfc2ff51e271ebf635c066f27d873ff78459 |
| SHA256 | 0bcc35ee4ab208bdcf97972c056367206e3cc7956dbaf8a54773538df0a3fa88 |
| SHA512 | 7eb7319ac54098402424e27f612b5403d9753f513c045bac03ef60fc76df532a438cabcf372d64fab7f40751a56621dd3108e642751d13532f5c5cd1d1be0756 |
/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal
| MD5 | 0d373b330f6db2491c45ab9c5c5f8211 |
| SHA1 | e909add6ae752550d59cd22cc94856f8adae69c7 |
| SHA256 | e7669619678e1151ee83d482066a40821bb31318145be15311378a56491cd6f7 |
| SHA512 | 4a08d762504a361f9b87ea3eb28485472093595bb92606fb8be701a748b5ac87b7294fd404fb564772da065f24209681663e8bbee7a7249be8ccc75c58a4955f |
/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
| MD5 | c6ae11625ad80b9777ec63541c6c21d6 |
| SHA1 | 1b62cbae54fb74d0bdfa9a1e82e5ba9176117212 |
| SHA256 | 4383105ed8141de58a913d4bfc209f6e1a29692832b53cf603199660cf68f1f2 |
| SHA512 | e6451edfeb6e2ef32e66b994c574bb81b31924ac2584da5f23d4384da3db06dc4ae3ecbaaf304c695f68343332b6780cd287a0341fd3b1ae7973b95b76dc08d5 |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 46792a72267124cf9c4ad16b5b4fb893 |
| SHA1 | dd6e1582555a95da3e1e1124e447661a74eaae5e |
| SHA256 | cb4d22d5db273d96b673618d367d2689c415616e0ff7998a3575270d22e818ed |
| SHA512 | 732ac3338171dd546260f12ffa9398268c287f103b330c7248702bfab70899ed98ac26f1528a18d202fbd6902d8e217593a6593f290590e8b7fce2543a50aea6 |
/data/user/0/cn.xichan.mycoupon.ui/files/21c22f492aba3de8.lock
| MD5 | 483252b380e6c43cba9c7d05406a9f6a |
| SHA1 | facd1e56bc64d6c0ddd97703bdb4512d2d5cb66e |
| SHA256 | 337cc15f3f6ed6f43ad969c97c82d6943d011f9d9995502e97d2f566b6b7d328 |
| SHA512 | 0d0477465d5c999f9ae7d64247f2a7c19058f71f1279c41fe771989a54d104cd5f283fadd916f468f94d9d5660402071281607ba02ef2b9c19777279562f898a |
/data/user/0/cn.xichan.mycoupon.ui/files/0a231bd8575dcf72.txt
| MD5 | 6bbc8e4e8d253a7c192d55273ca0184b |
| SHA1 | 765f3d9b5bf9fd144bb5fa6780044be619c94c43 |
| SHA256 | fbb859cc4ac2585ed2aea2a99bfb2ae7dc50d20c66acf47657911190f3107f20 |
| SHA512 | 8231a6d615eb279918d988116afc58b8c901b49508631484716e1a105383643b3b32b01fd8108c445d54b76a9cea5a2ab5de0fba915970c79b03c1bcd64566e9 |
/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
| MD5 | 4932a0ea94eed84d42d7c5fc08f4bbfd |
| SHA1 | ff3db965d9f2d4ab589197078d396f43d8569f82 |
| SHA256 | 107437f6069f72bcfa49177efa2e14d4c531b2708b8b826534066c36d20a4a9e |
| SHA512 | 83ecf8d630d28edf59a526e70f72607fe3a11e46085c11d2ecef23ef6c02b1186fff256279bba9f7de77232a91178a0018ced3d309836776b02de7866643da88 |
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof
| MD5 | 2ae33c4b306ba7c3feee736598571a7e |
| SHA1 | c4aa367ea9b6dd4072a074015c6cfddfa954482c |
| SHA256 | afa0a8bc47f100b11cf58659d0085c5a3136e17a2a51fe5181e0333f128384dc |
| SHA512 | 1455ea9185e7f7872e772a28c445ff9114e1093ac4d795763a7b33f429dd49e14456ff9babb8ca66b6ed6c78d22b3acbeba5a669be81ba628d70c6b7543cc533 |
/data/user/0/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732575.env
| MD5 | 187c9384989472c1904e05cd26a53214 |
| SHA1 | d7a3ceccaba284a0bf9b15d6bcac05497d6dd7ce |
| SHA256 | b1301a7edc4f2320285a96d1400b4ff7a980c641a6655bac59d2606ce6d6feb7 |
| SHA512 | 829dd7e41109d48eff8676bbfe3370d75594229829bdaedf3114bd676f3c8c4807b85ee495229fd7309628bc0b524b6ffca45c4e2edf9ab3e57e7f3ef742af08 |