Malware Analysis Report

2024-09-09 17:41

Sample ID 240614-bamfaascrj
Target a76b81ccc1617a50289669ec07a9925e_JaffaCakes118
SHA256 44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0
Tags
discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0

Threat Level: Likely malicious

The file a76b81ccc1617a50289669ec07a9925e_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion impact persistence

Checks if the Android device is rooted.

Checks known Qemu files.

Checks known Qemu pipes.

Queries information about running processes on the device

Loads dropped Dex/Jar

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Reads information about phone network operator.

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-14 00:56

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 00:56

Reported

2024-06-14 00:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

179s

Max time network

184s

Command Line

cn.xichan.mycoupon.ui

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /sys/qemu_trace N/A N/A
N/A /sys/qemu_trace N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

cn.xichan.mycoupon.ui

cn.xichan.mycoupon.ui:pushcore

/system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 youquan.xigou100.com udp
CN 139.196.70.202:80 youquan.xigou100.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
US 1.1.1.1:53 nbsdk-baichuan.alicdn.com udp
US 163.181.154.229:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 121.36.193.140:19000 s.jpush.cn udp
CN 121.36.193.140:19000 s.jpush.cn udp
US 163.181.154.229:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
US 163.181.154.229:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
US 163.181.154.229:443 nbsdk-baichuan.alicdn.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 47.246.136.189:80 ynuf.alipay.com tcp
US 1.1.1.1:53 sis.jpush.io udp
US 1.1.1.1:53 easytomessage.com udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 tcp
US 1.1.1.1:53 adashbc.m.taobao.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
US 1.1.1.1:53 tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 139.9.135.156 udp
GB 172.217.16.238:443 android.apis.google.com tcp
CN 139.196.70.202:80 youquan.xigou100.com tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
US 1.1.1.1:53 easytomessage.com udp
US 1.1.1.1:53 easytomessage.com udp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
US 1.1.1.1:53 139.9.138.15 udp
US 1.1.1.1:53 119.3.188.193 udp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 121.36.205.81:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 106.14.6.108:8080 tcp
CN 1.94.137.180:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 tcp
US 1.1.1.1:53 tcp
CN 124.70.211.119:3000 im64.jpush.cn tcp
CN 124.70.211.119:3000 im64.jpush.cn tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 106.14.6.108:8080 tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 1.94.137.180:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 106.14.6.108:8080 tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 223.109.148.176:80 alog.umengcloud.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 1.94.137.180:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
US 1.1.1.1:53 tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 124.70.211.119:7000 im64.jpush.cn tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 124.70.211.119:7002 im64.jpush.cn tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.193.140:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
CN 121.36.205.81:19000 easytomessage.com udp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 1.94.137.180:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
US 1.1.1.1:53 tcp
CN 124.70.211.119:7003 im64.jpush.cn tcp

Files

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 d8d6116ae6b23063e77e54b4ba0dfb47
SHA1 f7d32d9aab7480a71805f08b7c0414037ead3969
SHA256 32906f36dd2a738d5a7a8949fd2460582f08f5b4195536401acc3f0258d6e553
SHA512 e89464748d35378bc573919c8356b815e2b1f7719b6e7dd0ea6fa1057f484f1cb6341d1348e2450cfd3b71406040756889d480168971c87f8bf897f6696f5b1b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 cf1d2cb292de537276c2e10c66b0bf33
SHA1 bb9c953465765ab30f10e45b47818c2116bd8435
SHA256 6d5c3f386b278299e4a610688cfbe361482e361b2836856c027270fb7b7f11f8
SHA512 c1345529b6c9c24f236c952e3b21ff713e683251cb4a3b8bff386582ec79f9edc5bc6537c0ef9d1a7392094f572ed1b0e8a09660b6c2f557cc1495f72a0ca6d6

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 0931accd3387cd46648adef90dfa8eaa
SHA1 4593fc73fa37f0052f67d797656bd28ab5e3e16a
SHA256 51e0d3cf76e6dcdd5e1c3b502dc047638338aee577e5a42652032d583b93c5bc
SHA512 4a33c95d1acfdeadb008f1d18b76ebe340572c6ec6378d48c0a2e158ed4a41ecf0e5ebe781e008fec35f9f982450f4c8d40d9c72847e694135c5735f6729e6ac

/data/data/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp

MD5 dd7a0a50860a9ff7fedbcb66128583db
SHA1 528b93603dff0391f654f2b0b55830970c6d29ac
SHA256 a1cf384b29952b716e19f0c7b3fc2cb1bf89c4e9a21016b7d8989db83fe572fa
SHA512 88074b6f5de981cc9a14a0ee79c549d2a565ab5b6d2d4b40a6ab62f5e27a6d5b9d28d8c990cb59adebc6e5758595f91480557bdbccc6bcb92d4fbc99b40d897d

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 38616785cca0600a03205f84fe330b4b
SHA1 6ac41a6bdcae297d56dac5fdde70be5faccf0832
SHA256 b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8
SHA512 7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal

MD5 a0b4faaf671f8d678a2d30c9e74acc4f
SHA1 8e1e6fc0afa731bc986b131a5c479b1aeb78d3d7
SHA256 5cc8127a2892afa41ccd68629ae54780529c9a4d0e1e63e3708dd8047c2aa990
SHA512 326b2227239300db63a7db6a907c4fa884ee18aee10a1d77f0c5b761a2bb9b26c47034593bc6b44cbacd96823e674e6d8c6b6badcb019b26e75d12003139c1f2

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 feb0d292ef98ba99b36792813d49a823
SHA1 fc1fa26ad71994ead921d74d81044e32d3dbe8a7
SHA256 aec2940582fec48b5a5a178e2dc8f0f10d6e1ecab8d5c5fa4139711c49eb5db6
SHA512 2519e6ccb12d699668212c74e4aa78c6249a7181b7d14dae06f97c84060129eed9e68ee916b56f7322550214b06d8b1f8c88afed517d698c2ff1a3093448a867

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 272a4f04ed6faa939e8ebccffeab46ea
SHA1 8599e1baa5929163841602dccb195632f6f60be9
SHA256 3fc3a40f2275bb19702d3b01d88a56465bdac24a2ca38c373e25005454d92d7e
SHA512 d43d1c78156b48577fa9aff210e96f77287a6e61198233a6d6a1ffce6a3d7ef978a73f4531bb082ef51925a23ef2e51b4d6fc14b1e20e885a745b34be36eb369

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip

MD5 32f2c8b3462ccd5ef664020833c825d9
SHA1 ed5e47c61cedb3acb97d057efd8ed0d8687086ac
SHA256 8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187
SHA512 328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal

MD5 10760142380b34e358c396ca8d606a91
SHA1 b8d7f379c3e25bef6f24636fcb243d3baf2cbe46
SHA256 8a25b66e15f4054d677ad667d8eeb4db31ad09188884ae20cff78bfcafdd042b
SHA512 72105e76a0b2252434453074a966bb0f2ba849399bd9b3093004f3af47663003af614ec87ee3dd6d12cce0de9816bc1504a9859ced15c389c18601c36d66f9c5

/data/data/cn.xichan.mycoupon.ui/databases/ut.db-shm

MD5 dbedcd71108662a584285bcc1a29455f
SHA1 cf81d78df0de5e95555e4ce0587e0504ca5ed960
SHA256 1b640b7fc361220c23b33b7026ed2adcfe2efc1db59d32aeddab3bd73b3cc9a0
SHA512 b80f0d2995108bfa29620a8f28783e535b193b13028201ffd465fae61be2a1f9b51d9f77f8f03873ac145eacd8f3d995e22ac179968a3fa9f97175e840ed0966

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip

MD5 f59597732a9069b73e16c027faf78d05
SHA1 e3558f4e5041a6c6d4372001bed847f2ef77958c
SHA256 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6
SHA512 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

/data/data/cn.xichan.mycoupon.ui/files/umeng_it.cache

MD5 07d98c52e794766964a3d775e2d7cb54
SHA1 cc5ba2b49974b1bd53318cb758e16e2aa2d7aad6
SHA256 0b984695493600bbb11488da21c5124cc920012a6738a33f5d83a385ae643c43
SHA512 4c99e70552d26cba236580144d3ce1599f97d003c83fcd739eab04a2bc747cfbfef9c8dddf04244303e5d53a07b83ef227d278f05371ff9f94b476ab7371e4d0

/data/data/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json

MD5 c736fd00172deaae1503a33b8d97a77e
SHA1 140ccf7193cede30a3b4f033983f6c8136cbf8fe
SHA256 c3b6cdc70fbd4869d9ad625f7af72df0312c3436d12fb2736f64288cda28a4fd
SHA512 33a322a56fa58fc57c2c442ed8250ebf66725686e818e617e0cda32570fb897aa8f71f763f9df444512ecc6e9fa6263d03b8661545e5c76608c6c3ceccd0ff58

/data/data/cn.xichan.mycoupon.ui/files/exid.dat

MD5 0b79e8edfd0c4aa795a8745ba01169e7
SHA1 5afa2923fe3dcb4434c7d0b072703726df7edc00
SHA256 1855129e662781d045aa4385a69c6d973bd2dc948a4c6bc82b3104ffab019cf1
SHA512 f5be7b1a6d1069d3ddc4f32b9125aae9fbbdbd85632fafb6dbbbc93e5568ed7daccfbae2f1691685b07cd6d34064c049ee84a44023768395f0dcba27e9c8dfb3

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal

MD5 ded79b50c1610bd3ebd7f0a77ff434c3
SHA1 f8249c3dda9c074580379b1575e91d988bac7f24
SHA256 045528bef561219a107b3ded4e3089fff1b1d37a9e376fa984fc66011fbd7c06
SHA512 474fd74c03aa65429356ffb51ba79726fb37669b81ce7b9ef903e1891145ae47ad6c1c5f5efaf2781c3c0b129214bd4706e4b2db53cd66968f9d7675dda382c9

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 9eacf443661aaf5691b9107b14d760a8
SHA1 1ddf4d873f7f12b4d99406578c37f2a8c47a36ec
SHA256 c5dc948e20e75a1b106c4c4025a17df9774192f7d59a0b24041a4aee22ef9519
SHA512 d01b6da85f0d0a69b3be660124231d48b772fdd57af47d0246519b2064e9dae094d324ec737b55c6ecbddff2cfd3968d0d317c6ebb600665fe72246138839b82

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-wal

MD5 5f0353e9dff6c7e819b64bb3170b014f
SHA1 888de54f7aa6ff2d6a401c1ffa56564b904c8e13
SHA256 22364262643be73185711fcff51bea545f735bdfa9e112ad0d6e08ca37fcfca6
SHA512 c290ec9a5f6f77f7ccdf69e27221b2b6648af65b44f2e736f632b457af165630a1cae073dc256fc41389ce1bde7e1142da55bb759181258eb97b2981750032ec

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json

MD5 9b3173760bb73225994b004018777f60
SHA1 755cfd14a218803defc2adf85526a4f7858a2c27
SHA256 89a77c255567a5c31129eb09e87e7a6173dd8d88096e22970317dec237eefe80
SHA512 4c892cafc6334688aff5f9af143365a449d26e1ca2fef071801a8fc3fba61fed73e21bb0542a9f0b2e37c90847865684a48dd5b6c7332319e4da698f1b7eb3cf

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal

MD5 d100bde2afda42049a16a2d58c9be67c
SHA1 e7067cf7f801d0343d9e6f1266646e02ad2fc7e1
SHA256 8831f84cccb59bd7a380d68014973ec9e3106e3f875cb3bcf22fb92fbb471b1f
SHA512 fb5f38b7a24dfd6a93050856b6fc1e2f016dfa77558eba581121a19cbc54d8af11ea22ee5efb599891a48c1305dda49617c6f41bb750304de6267977b82aa7a9

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 5a72b0f9024adcdfbd0b927bab99b1eb
SHA1 a618a4033d69dfd3ef1ea06bca3d4b88a5c151e3
SHA256 7b9205203c0025bb671593622bb57c8789c28cb9023c52826125894eb49c1958
SHA512 7665fb7cb581e0b13e3e71e3173ef2e1f56d39dfbe5dcb84980372d56d4eb9a388ac4b40653464b06ab3e79d96831acb9894e32e12806c0e32c264c77eb701fe

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal

MD5 672d78eacbee75ca430f45863d1b4e1e
SHA1 0eeb1a66109e326927da9d59eca7e39a043b833d
SHA256 afe230287f406dea016fe10d36fbcf503fb18a4e348ae7757e8df36127c6bff2
SHA512 9d4ec1b11de22f40211fa28b07565ab571849e6a4ce86e780ef2aacd15ec7cbdd24b01737cbbce8860124b2fcc84a468ebc2bf31932325b03a3cc9868d2f227c

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 0218cb5b25b7dd686f3d34af92230693
SHA1 5e7aa6260b017d4a9a98d727a8a003fa05f32416
SHA256 469a525becbea63e94501d0ef53829b8db6e86ba568a88b84864b31bea5539ee
SHA512 6a9597cce33975ccace80641c800ee73eb019f356dea84b8fbb05aa24ccb268eede3296d71e286066d71f8c27b8af2a46568347ddd896ac966b4a4871fadeed5

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-wal

MD5 c2e119c3e009f1d980a7644a2368cccb
SHA1 367f938c362a76775b04db45f884671a7f39b609
SHA256 a05b5e91a041f2c507b6c3eeb9ba53cd32d4504f857132bc93179173e18a3232
SHA512 7ec7bad00e632fb7456da30444374d123dac437e87355664c469ac9dd01f1204cbb742bde5cfe4adcfe543c42d61be11cd62511af7dcffd41a2380076766b547

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 fd20442794d1d045685aad8c27c75237
SHA1 b89e14cbe7ea904c92b3c982f55cd09b7b4927b3
SHA256 efac8943daf193349b287e9c0f8d97d64cde91ac89293d8476d107328341ffa8
SHA512 e9cd9d13dc79165267279657920b73beba212629f38424fa6e45343bd2584cac85bb4f34584d9bc0d48826f6409397b9cb008293e04d6e34570804784254cfae

/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 6a8863dd4be7802445180fb86132a879
SHA1 318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768
SHA256 003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08
SHA512 21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 0438489e26550304ace8e365664531ae
SHA1 cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4
SHA256 a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb
SHA512 6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

/data/data/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 6c93639d41f97a5ebf59850a124c6ee3
SHA1 5b2a150d7debf94df8f42a25435992e25c774660
SHA256 2197255e7b267bff4ca80e47bfdfc363c1e1d70d3d0b6a24dde9d31ad2fc215e
SHA512 100f2f980a164983b2c2e8a4ca167546bc987f52fd3b44b2b4148b92621cfcc724642f9aa429c35b70a544fba6298e6e659821a4999b2dcf8c993b788cd2d422

/data/data/cn.xichan.mycoupon.ui/databases/ut.db-wal

MD5 70f4355b9848642c625af07c8a0871ac
SHA1 5f67cb2dbd02abc442a5a5d17efb4f21c7a979cc
SHA256 6cd9c81c79699b0dc5e30d9514e2e99230ace76574b8a79da4f547860f519104
SHA512 222030a3862fa23104a1e3a8d56e1d5a64af30fe08a88b135fa428d6dcd0bc8124d0d6a418a991367c625386500194588b8db05e09dd0fdc48256d6ce17ee144

/data/data/cn.xichan.mycoupon.ui/databases/ut.db

MD5 25526ddc71ccd661b4c80eb7495fb0c9
SHA1 33a9da05611848961fc4438b8139b74ac34d8aa0
SHA256 cf4a73652c7f07e79a1af4210b7a3fd7d14e95ce401c38a79b140c6b1ebc5d6d
SHA512 27fef6f348b36935b1e1c6defc8e065caa43003f36567bbc0843806fabfa83d520ab95984e7178791eadfd230d296ad69e748bbdbfa348d51ddf9771b31cffd5

/data/data/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof

MD5 4414a0e7b917901866ac3d7c4fcd3502
SHA1 8a6fc4678bfff11f79417f61a013851a77e8f17b
SHA256 bfaac3785a51ea09b8fd4ddddc1eac199b01109ac2449a79b1c2e611dcd40b1c
SHA512 dbec41e3fcb0951f3af3ba57c6309342a8654bbea2dea6d94a0af9e99c35cdcb529053a3b215bb30345ce71e37b582df1a9ec66992c99bab5eada641c211138a

/data/data/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732792.env

MD5 463b5b6e1e13f3d1414206b09f398c7a
SHA1 8885f822164e7a2b2b300c98501ac56c7a55bdc5
SHA256 aa07447498e2d1af950b469881d514c7bedb36aee2941ba2e43c16a0bb0bbbec
SHA512 cc239983085c8f7bc53550e23d5ea0d7702a98e947f659129c66fddcc5c99caf543b794907f2957ea7cc606e897b2a2addf312305d2d949ee4e8a23aaa7615dc

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-14 00:56

Reported

2024-06-14 00:59

Platform

android-x64-arm64-20240611.1-en

Max time kernel

179s

Max time network

185s

Command Line

cn.xichan.mycoupon.ui

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /sys/qemu_trace N/A N/A
N/A /sys/qemu_trace N/A N/A
N/A /sys/qemu_trace N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/qemu_pipe N/A N/A
N/A /dev/qemu_pipe N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip N/A N/A
N/A /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

cn.xichan.mycoupon.ui

cn.xichan.mycoupon.ui:pushcore

cn.xichan.mycoupon.ui:pushcore

Network

Country Destination Domain Proto
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 youquan.xigou100.com udp
CN 139.196.70.202:80 youquan.xigou100.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
US 1.1.1.1:53 s.jpush.cn udp
CN 1.94.9.210:19000 s.jpush.cn udp
US 1.1.1.1:53 nbsdk-baichuan.alicdn.com udp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 1.94.9.210:19000 s.jpush.cn udp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 47.246.136.189:80 ynuf.alipay.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.178:80 alog.umeng.com tcp
US 47.246.136.189:80 ynuf.alipay.com tcp
US 1.1.1.1:53 adashbc.m.taobao.com udp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 116.205.165.66:19000 sis.jpush.io udp
CN 116.205.165.66:19000 sis.jpush.io udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.196.70.202:80 youquan.xigou100.com tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 1.94.9.210:19000 easytomessage.com udp
CN 106.14.6.108:8080 tcp
CN 116.205.165.66:19000 easytomessage.com udp
CN 116.205.165.66:19000 easytomessage.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 101.226.27.166:80 adashx.m.taobao.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 106.14.6.108:8080 tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 61.170.78.160:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 1.94.9.210:19000 easytomessage.com udp
US 1.1.1.1:53 www.google.com udp
GB 216.58.204.68:443 www.google.com tcp
CN 223.109.148.176:80 alog.umengcloud.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 116.205.165.66:19000 easytomessage.com udp
CN 116.205.165.66:19000 easytomessage.com udp
CN 106.14.6.108:8080 tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 1.94.9.210:19000 easytomessage.com udp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 116.205.165.66:19000 easytomessage.com udp
CN 116.205.165.66:19000 easytomessage.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:3000 im64.jpush.cn tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7000 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7002 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
CN 119.3.188.193:7003 im64.jpush.cn tcp
US 1.1.1.1:53 adashx.m.taobao.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
US 1.1.1.1:53 nbsdk-baichuan.alicdn.com udp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
US 163.181.154.230:443 nbsdk-baichuan.alicdn.com tcp
CN 59.82.39.0:80 adashbc.m.taobao.com tcp
US 1.1.1.1:53 ynuf.alipay.com udp
US 47.246.136.189:80 ynuf.alipay.com tcp
CN 116.205.165.66:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 61.170.76.178:80 adashx.m.taobao.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
US 1.1.1.1:53 sis.jpush.io udp
CN 1.94.119.240:19000 sis.jpush.io udp

Files

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 39bcced4e95e6f59d575b8de463ca8a7
SHA1 856b6fe50898085495af59a5b93ddc38eace8e52
SHA256 c2beddd2f2c6b3ef569105b062aa4fb16b8834e1c3ec62c8be793831671212d1
SHA512 55ad2c998776c26bf8fa3a8d54b6ace21d9a4a7fe9ddd4edffb1fce3536b7eb7e1815eed1e00652997cd7be8a63c5ce9472e95f773e1e6883fa0b5d87b8afbd5

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 fa109eaad46022ac57be8b1f9d282242
SHA1 78e5a8e3548a2e0325f280ce0dad7e4ff7aca160
SHA256 f8d9bee6ea699d7bd64d884902e5b6eef1197a1298b02142637a9ad7e2ff1a22
SHA512 6aa596e7b2dd7c8b793a72a2412eada3bf999bd8b4cead01eb8206d43786fa2978978db3b1b1b0ab564c4de411dce5ea02a0add400186d01b797b1009302de7a

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 3013657f807ea7361b4da5f73b2ba9d6
SHA1 21d62c577d5a3f4a46f521b9104324d00195f66e
SHA256 d4779b4fe5caff8a3ff73027cd1e872e0d128581bbdb871b2d6d049580d33690
SHA512 07177e8537a7f64c639c9259e0bb434ad809ac6c365e8b2357b3c14ab015a5bd3b953146106000ed08544b55b0c75d47ab8e035dfde6e98eacebf5ced21564eb

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp

MD5 ba94d738e0db71467ff4348ecc9f64bd
SHA1 76f840994872dfe787ecc84cd654e8353252b642
SHA256 44af525592677092787761f096892c85de2154e2c29dcb88896aaaad5a06ef78
SHA512 60e024246e7f05e4ec6a29f7c6722287f6e6acf54ef586ca080d302d9d469e849ed7cff0ec2238cf73dfbf373842eff73a5d6cf33d2b7db38dcc84e03f0a6418

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip

MD5 32f2c8b3462ccd5ef664020833c825d9
SHA1 ed5e47c61cedb3acb97d057efd8ed0d8687086ac
SHA256 8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187
SHA512 328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 97b22cf4142ee3fdd89b03faf90c7cbe
SHA1 df062819f0eb8ca8d4672b84e496dfccc1f84403
SHA256 1d2cf79d16fc538f9fbfb9903cebf8ad1c8e4e382612e94c5fdf15c326349975
SHA512 4e77cf061919d8bc5c1fc066d4c139eac85cc673e84a754c3b986a81ddd3ab8d3aa82649820da0a6f6d5fc31e4d607f6aeba9f30e3811a1b77d4c052a64e63ba

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db

MD5 266bd06808c5719d36142af877422761
SHA1 e4686b4812b4c4ce379b27969ab1ee8456897e5e
SHA256 5dc3b683279d001947cc0bd5f9011af768dbd716c9e1e35927c469631db6e670
SHA512 82d448954e471d814bea1745b9f87cfb299995851adaddf937ec5a88361ca27949ab178dac6652c03f708c9c069bb25570b7115cb7e519317cfc421c05471bbf

/data/user/0/cn.xichan.mycoupon.ui/files/Q0VSVC5SU0EK.txt118c

MD5 7bb004671cc07b6af966c77e8e59c03c
SHA1 82618af034b75c73f526bd05debfd66db42d81f5
SHA256 c808ddb03150534cbe366e6adfc80335de6cbbccd92814732eaf714005ef30a6
SHA512 97a52c22f69d2ba308e0136e068a26e9c034140f729f777aa85423c43d5269824d82c7271381e6416900e0cfb853bdabe09f232873db351953932cc3e7a15e83

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 cd1757a3bf7a38c27ec30af53765459e
SHA1 dd988b48583db534648bd1ede633010d78b8bd80
SHA256 a11cca79d180a10ed86f0184728b16cf7c16589c8ec4bd1d6f5e2f76ee833a7e
SHA512 9b2c6249cd6f2ff31820e21d77c34465b3c8e49847952c2dae1623911522f574126df853f8de9601f4979a32d72a959f407deda7180b1d6ddc63f9601f7452e2

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 2ebfc89ccb08f7d9f86e0900743cad55
SHA1 a3883d935f87d3a893a545aa9f453a3c05e756c6
SHA256 20dc0633ecb5d01ed83bf133614b51f8f148431ab1c34d89343b403ed72e0e7a
SHA512 447433bdbb0a4cfcfc9815350c750aa5cb70612fd7efe34e73bf8a12b6eb5638bab05ebf05346e38ed93e571f9a7e087eab5027a8fec28806205b7f25c778a85

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 a36186109ab2f3a047bb068113d7a6e1
SHA1 9a700ee0a879ec2a03b8f926af93775ce49d3bd7
SHA256 ced61c109d9c0d3c9e5235639b99f70296c47b81b421ac01462a595a97beeb42
SHA512 84595592e54e08a9622b678350d2f0ccc49a630f510ed73cc2a037d59246d8b400e89490d22bbd6a5f4abb67580ca972dd40bb386702a00093b2f8b806cdfbd2

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 e122ebda20e2dbeb7173a9e2bb6e8216
SHA1 adf51fd1df68f341d1abc856419d55539658c6cc
SHA256 c85825599c747d5b54b6cbf97c86c51302503a5c58e673b1269faff992fb867b
SHA512 dcd9a2f84534704bddff01353e290e966b5190f751d7844821fe67aa2571ef729b82809f7f1ee780dca3d0760a0966f91f4d6f423aea7dc4fe9bbbb71ebfdc7b

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 a5a87366b860f07b1216e9b3e8e91149
SHA1 01787055d0dbd7fec99f8f403c86254437a72fa4
SHA256 ef8cfd5abf4dc6d25450f44df30ea7135667c532390866b80f82474904cb999c
SHA512 38156e91b23e8e440a99acae697ce0d529f60d7f7277ed8204c02f653a9790ba096d26220cfe4da7a9b31d2a52b98bff49b860d7686894ce9e144d07d8fc0bd6

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 a9479bcb8ca12583c0d0cead2f82c371
SHA1 c657ec7a55627bfacf736d0001a945110211ef4a
SHA256 894232482eeca1522114eddf0b70d11b97d43670e7a0ada91ad31ab4cdfd7527
SHA512 553e072fca6c5efbbf1a51bfc80081e7089b986c778c4444b3f94ed4db53700e847d338b91792818bde80d458245251587b4147ec733bae6d37f430bfd70288c

/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db

MD5 75694e403dbc728c85b85d55d972d357
SHA1 346ce6fb424f486cc32f7f46649649470cd57225
SHA256 ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9
SHA512 591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad

/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal

MD5 693108f2772a718f7ae4f17d905841c6
SHA1 e29907d9563c46aa371892194ae9b14b4dae34eb
SHA256 b8a93b3189355b91ff4185372fd70ffa18741f40517768e321c7cb3fb412af02
SHA512 878f46ec64fc8bf592eec941aee3f9d61888dc8cd5f2ab72a68d1d35cecee23d2b333c064c6237831f81f3f2ce962efc78df964da69921c9c50df8658e63a926

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 4953475d95ef49d264fcb315f259591c
SHA1 7f63e0e0f7dbc48eb4e29f637a9844a9858a5206
SHA256 f614fe3fc0fc055c04b2a10e9bc875d14e92f1bdcf3cb903f743a0d3537f6a71
SHA512 449b1c7ae0d5fdfad909fa553bb0d9c24f824b028b3835d5e52cae57fd6cd4812a2276599b9d1b3bcfd53bf514b44065999949045a36a601bb14dfd6c16558c1

/storage/emulated/0/data/.push_deviceid

MD5 5f6d8d600ecfc2118e39dca2f1714369
SHA1 c10f969bb76ea1e7adbdbcbe136009866c14080b
SHA256 e218175e9f8a2d3ceee33536af07ad979383f421a637d73b28de1ff81fa54a36
SHA512 43b7d3186d34ddc362acedf0950bc5386497aed27a9146a15156caf93cdfa70a0ced4dfb633f1fcfc592065cebc7bcf80b29a9e05ced42bfed037a8971dbe66d

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp

MD5 16fd530321efbde36fdee740732e1484
SHA1 e5b009565a0b01c57678ddfc3e17e945ca5910ed
SHA256 ea3f8afb176f218cf1aef734e4331594a1d2f54b66d7db463bdbca146de6dfdc
SHA512 371b311c4eced7701e28415ecf30cdad298d99bbd4a3a4a3171636909a3fdfdb5632803f4559f32bb33b1693e665310e7e89bdce0aefcf91b8da19f32f65f6cf

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip

MD5 f59597732a9069b73e16c027faf78d05
SHA1 e3558f4e5041a6c6d4372001bed847f2ef77958c
SHA256 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6
SHA512 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2

/data/user/0/cn.xichan.mycoupon.ui/files/umeng_it.cache

MD5 c5cbf80eebfb46f7dc58b1dd57ff4a2d
SHA1 fcaa3ccafa6231a3118609d145473d807b584ce0
SHA256 b3b5c28842e4e426afd5e65e8850ac5d367b73d72e6064af17f1a73c669fe5ba
SHA512 694d185374cb32408cd083c1c427bb436ae9d3e063022271c866b56daea191fd7ca780becb7c55693ad7b74caad177d20c9feb1e3a75b30831b359b1952763c5

/data/user/0/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json

MD5 1d412d159d48de763e083238d502f178
SHA1 9b805abfa31e0318d195b67b54ff21a3f5b46096
SHA256 763ce325b8949709e3604b67441e5996acfc1174e375680704a9f2f78970e5b2
SHA512 f2b5f2fea56fcac8c0165a0615602c341c2949e81637030269d7c37dbfc89203c63ed8ab1f316a178def95fb7b95e0e5a50affba2db119edd75f930da0cfeb28

/data/user/0/cn.xichan.mycoupon.ui/files/exid.dat

MD5 91f5bbba0b52e79cd871f0c67e06c2fa
SHA1 e0fc4bf0eb8bde4a4145a0ace60c49ef8f68b75f
SHA256 df39c5d44f35cb62485d153fc80a51cf41b563c5491b90e5213612a08a39434e
SHA512 5bc46b5dea05b562f1b3bd9479e8267ca43c4e10bebee2a2311d8eb829be3304aeb5790714d2dd2d130fde213ba688702ed317eaeca1e929086316d8b8f39e40

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 7cdab081e90f12a37eea20e55dd99943
SHA1 67a9fcaba0ca17462df1ea2861158440d858f3dc
SHA256 b34df4e47bcad22361b53ce064ab62d5a632083793130aed06b19a46689541f1
SHA512 eb0afa632793a9814a0d047217c4698200dadaa0426839f7956bfa023ca2b322cd2642b8e29430d20d37b978e36e2b518d228f73a757fa241184f6f4e472e9aa

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 4cac7d31fb94d5c9581893537f64c5ed
SHA1 96bef3288546196ac3058b5eeddbe9da1d999fe5
SHA256 d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
SHA512 0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 33ccb47b55bcc111094dbcf3314ca4ed
SHA1 6e8a04466e14b56e1a6489d96881c72bbb43eb95
SHA256 d6b60fb9278fa6747e1977a6947f6f82b62aeab7810a7abab817169c0bfed168
SHA512 5072e6e52eb076dc4ee48ab97588a2eb4a2d188a9ef982e2bd1f016540f77b6004b533a2c03cceb04dd8b5794e17e15e6795cb616cc9559c53ebd9f2a9746a16

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db

MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 16759ee7b98450b5d857f692f0da3608
SHA1 ac764d73a916650dd20b4b1f59bfe57ccc501ed5
SHA256 e9ca6c06bf637dcb862285269d44a8cf20ac40a28c9004c5a20725d987f1d773
SHA512 0a4812e6763714f1113e069d0a6899a07cb4168a9caa3e04567f56c42e6916eaa886c00e86930fa7420b39192cbaa84aba28c0d4c5933bf5812339d330b47a21

/data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal

MD5 a2e1094da2ba03c05861fdf183b99c54
SHA1 834b3cadd3281f97c06a9f55a8b780a6bd56081a
SHA256 e229fc3e9c547151645d3ac7c2d2db93a3cb93e3963e6851a32684bafcde0b65
SHA512 6cf2ab4922fa9143326b084cc361d073ec4c628dfd9d7e136f3421aa6093bd05eb3fda826d0d55cdd5b0b3c7eb54830767295103f5dd0baae7e133267026423e

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal

MD5 0e81696fffaeee1cfbf5a407e67f4c3d
SHA1 e3479828ba2ca2f49a2d776ecdcaabd5c68d108e
SHA256 80e196be82931b13a10e2751ef24642828a832675f02e2187468f58822d9ccc4
SHA512 46d29b763edd3e8e823ab8eea16753429b697bfbcd09b07450141bc4f578cce7bd29418ce8bffd9df9d785bb7b239f97cd2f56060ec758c17cc120445f51065c

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 ac1d8c8b388556394f0427f3f7bcbb7f
SHA1 1c39a63271d412058c30d03fae4673ccbdaa2d7e
SHA256 a72686dcc094d02501f260595f93da2d18790adb071d50677c49d642ca0e91db
SHA512 5824a60797643298f84f0461dffd00e9d6d9260259b9a2378008f38397520b639d161f3b22a8f65754be591ff69bfd93cd744e25999938df43912b1dc796f2ff

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 077dd0e07e2bf300afc49c0168e57430
SHA1 1206025b0e93421317a2ec1e3ae7b4b0a39a523a
SHA256 2687176d1172056823353d5c2758e0d9ddfbabc465423091482b92a78414e330
SHA512 df4ccefea80dbff003692383d34e25d9cbb7df710a03bbb4d7a1c14185fe4d2a188a11699dd5f06a172a1e6c1c2dc1c0e3b6bf60c1a62b36c38cba68dd7a1cb3

/data/user/0/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json

MD5 0abf8c68ebb3ddc39d2230a4004f856c
SHA1 b9f2316626b9c1669f7778e50ad3f877d5779757
SHA256 1a2b5c9afa20f39df9a2a058c6f79639e53252933e1ffe00737980f6a88d7b24
SHA512 ba8e7dbbd6cf7e3a79aa2d485fd6a3386dca3e4d6a729076c82b7c4011b5e96947953b7da7f8acba45b97325cd0808e33b4ed911ab8213847678488ce5cf4c0e

/data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db

MD5 92e6dbbe34c365fb3dd614561fd2257a
SHA1 7b011cc68f9177be76960f46c513263159b04617
SHA256 0c990e9ffedfb64fc8d3da1a08c7bec0bfcad80cb9f08a38429a38704b2e47db
SHA512 f0e1d103dff1e141e716646107aab136c1635a3cff0895f0be61ddddee9deb48517cb545b428f7ad5c275177bfb3985a7fd1a7635e6f9f65040ed964e919ac67

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 b10ededa0d9681d1da1c1c703fe2e2df
SHA1 f150b092cf5e7880617962a9ea8e03c7c4d05294
SHA256 aadb1e448abd1ab7f4f234d80412a614883303eda5f6f899403ac7cbc21f0379
SHA512 60af32a71db327824b1250301c61b6b0c08807f696caf2fd8763f8fc563922c86070e18c2ca191d85942ecafd56f9696ef1e5ee0de04a68d18d241fd7b99ff6d

/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db

MD5 2c5db1ad035062283d306f9e9ef69bac
SHA1 e11bb95faa1197baa9605e93b4e6f712daf7ed2e
SHA256 be1cce9123681881f38ee6924ebd8c02a6a404e3efe3e77eebef15d36d4b3b59
SHA512 e9a4cfdf40541603518e9645e3b3a036f9f8d6cfab3e7f7ad08689c5a1c426e5e62def8faed371dcb1af32064bdd7c9f70fd412aff02a45bb802147791f0a48f

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 885950c64c5fa9c64851530f1a0e2fd5
SHA1 7db1ad4d32f552a74d5149f9a73bc8e7b60171c2
SHA256 791da2e7c9caf29a34798aeb8a79f3ef260590516bf87b6cf308db53d8f6229b
SHA512 b3117dd7506b2fe4a26777189dde3e24a903ea12960682cc9f00dbed6904033034d84d6919f9ba24960f19ae62cea8a548bb3ce459745070a292cc36cd3b7f87

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 ff9c40a8e33f9441717f85c249de9d32
SHA1 d7f69a413a6ee2d8b9b607bad0f060c502899959
SHA256 4f885d3fa846fc638e1e0272d0aadb936a55a6e2fd127f1c60449aeca2027d67
SHA512 b8a415d7414fd7df70bcdfc76f11faa2af14cb82ba14436ede334b47672d3c3bdbc3b8f483cd96403f3c611998c30c0182b8b51b419565816e303d1dfc863f0e

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 a1af160d42fdab9b54254bc5710cb70f
SHA1 dede1887e978e61b69fff114cc6bc66f32100b33
SHA256 a0fd299000606a251fc0fc2074b19b7291fdc1d7d88f13490a5b362eed3df5d7
SHA512 e244b86f77988ec9cbcf0ffac2e93d96694b3ccd9544a6a419abce6d82341fd4cb9c5ab409bcf68e495598da57b6a70b2da501587d7a4eeea99f1e9f01b44fc4

/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

MD5 48a84a220c6d139fc215bbcaa3d512fb
SHA1 8e39dfc2ff51e271ebf635c066f27d873ff78459
SHA256 0bcc35ee4ab208bdcf97972c056367206e3cc7956dbaf8a54773538df0a3fa88
SHA512 7eb7319ac54098402424e27f612b5403d9753f513c045bac03ef60fc76df532a438cabcf372d64fab7f40751a56621dd3108e642751d13532f5c5cd1d1be0756

/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal

MD5 0d373b330f6db2491c45ab9c5c5f8211
SHA1 e909add6ae752550d59cd22cc94856f8adae69c7
SHA256 e7669619678e1151ee83d482066a40821bb31318145be15311378a56491cd6f7
SHA512 4a08d762504a361f9b87ea3eb28485472093595bb92606fb8be701a748b5ac87b7294fd404fb564772da065f24209681663e8bbee7a7249be8ccc75c58a4955f

/data/user/0/cn.xichan.mycoupon.ui/databases/ut.db

MD5 c6ae11625ad80b9777ec63541c6c21d6
SHA1 1b62cbae54fb74d0bdfa9a1e82e5ba9176117212
SHA256 4383105ed8141de58a913d4bfc209f6e1a29692832b53cf603199660cf68f1f2
SHA512 e6451edfeb6e2ef32e66b994c574bb81b31924ac2584da5f23d4384da3db06dc4ae3ecbaaf304c695f68343332b6780cd287a0341fd3b1ae7973b95b76dc08d5

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 46792a72267124cf9c4ad16b5b4fb893
SHA1 dd6e1582555a95da3e1e1124e447661a74eaae5e
SHA256 cb4d22d5db273d96b673618d367d2689c415616e0ff7998a3575270d22e818ed
SHA512 732ac3338171dd546260f12ffa9398268c287f103b330c7248702bfab70899ed98ac26f1528a18d202fbd6902d8e217593a6593f290590e8b7fce2543a50aea6

/data/user/0/cn.xichan.mycoupon.ui/files/21c22f492aba3de8.lock

MD5 483252b380e6c43cba9c7d05406a9f6a
SHA1 facd1e56bc64d6c0ddd97703bdb4512d2d5cb66e
SHA256 337cc15f3f6ed6f43ad969c97c82d6943d011f9d9995502e97d2f566b6b7d328
SHA512 0d0477465d5c999f9ae7d64247f2a7c19058f71f1279c41fe771989a54d104cd5f283fadd916f468f94d9d5660402071281607ba02ef2b9c19777279562f898a

/data/user/0/cn.xichan.mycoupon.ui/files/0a231bd8575dcf72.txt

MD5 6bbc8e4e8d253a7c192d55273ca0184b
SHA1 765f3d9b5bf9fd144bb5fa6780044be619c94c43
SHA256 fbb859cc4ac2585ed2aea2a99bfb2ae7dc50d20c66acf47657911190f3107f20
SHA512 8231a6d615eb279918d988116afc58b8c901b49508631484716e1a105383643b3b32b01fd8108c445d54b76a9cea5a2ab5de0fba915970c79b03c1bcd64566e9

/data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp

MD5 4932a0ea94eed84d42d7c5fc08f4bbfd
SHA1 ff3db965d9f2d4ab589197078d396f43d8569f82
SHA256 107437f6069f72bcfa49177efa2e14d4c531b2708b8b826534066c36d20a4a9e
SHA512 83ecf8d630d28edf59a526e70f72607fe3a11e46085c11d2ecef23ef6c02b1186fff256279bba9f7de77232a91178a0018ced3d309836776b02de7866643da88

/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof

MD5 2ae33c4b306ba7c3feee736598571a7e
SHA1 c4aa367ea9b6dd4072a074015c6cfddfa954482c
SHA256 afa0a8bc47f100b11cf58659d0085c5a3136e17a2a51fe5181e0333f128384dc
SHA512 1455ea9185e7f7872e772a28c445ff9114e1093ac4d795763a7b33f429dd49e14456ff9babb8ca66b6ed6c78d22b3acbeba5a669be81ba628d70c6b7543cc533

/data/user/0/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732575.env

MD5 187c9384989472c1904e05cd26a53214
SHA1 d7a3ceccaba284a0bf9b15d6bcac05497d6dd7ce
SHA256 b1301a7edc4f2320285a96d1400b4ff7a980c641a6655bac59d2606ce6d6feb7
SHA512 829dd7e41109d48eff8676bbfe3370d75594229829bdaedf3114bd676f3c8c4807b85ee495229fd7309628bc0b524b6ffca45c4e2edf9ab3e57e7f3ef742af08