14769ba60b028f1326d896e1186e346a549c9e2e778e1b25c25e77b0e5f66183

Analysis

max time kernel
47s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
04-04-2024 12:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

14769ba60b028f1326d896e1186e346a549c9e2e778e1b25c25e77b0e5f66183.apk
Size

11.4MB
MD5

59e33709770511ff6172fd50a37ec22b
SHA1

a6efd3085e385d1075eeef1ad8f669f890af5039
SHA256

14769ba60b028f1326d896e1186e346a549c9e2e778e1b25c25e77b0e5f66183
SHA512

2b31d2958b805d6319fce2497997bdc2e35f01ec57e47670bc4298dbc4522a2b7b153d2bb2a8390de731366e68f248b577c5a58de47c391d06c5b6a7da44d1a1
SSDEEP

196608:a+DsCfNMpeRjO3ASbzpLclK+3VJnLQnbkazMD2bm0WArhzALFwvUcxn8S:tsCfNo3A8zpeDldcbdrq0nYFMUxS

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
evasion

System Checks
T1633.001

Processes:

com.educationapps.hfpregnant

description ioc process

Accessed system property key: ro.hardware com.educationapps.hfpregnant

description	ioc	process
Accessed system property	key: ro.hardware	com.educationapps.hfpregnant

Loads dropped Dex/Jar 1 TTPs 17 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar --output-vdex-fd=56 --oat-fd=57 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.ext.odex --compiler-filter=quicken --class-loader-context=&com.educationapps.hfpregnant/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.dat.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.uni.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.stp.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.irs.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/mXXDBSjYH.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar	4495	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar --output-vdex-fd=56 --oat-fd=57 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.ext.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar	4526	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.dat.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar	4549	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.uni.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar	4576	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.stp.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar	4605	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.irs.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex	4628	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/mXXDBSjYH.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar	4462	com.educationapps.hfpregnant
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar	4462	com.educationapps.hfpregnant

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

Foreground Persistence
T1541

Processes:

com.educationapps.hfpregnant

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.educationapps.hfpregnant
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.educationapps.hfpregnant

com.educationapps.hfpregnant
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
PID:4462
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar --output-vdex-fd=56 --oat-fd=57 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.ext.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4495
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.dat.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4526
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.uni.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4549
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.stp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4576
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/hfpregnant.irs.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4605
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/x86/mXXDBSjYH.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4628

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar

Filesize
2KB

MD5
f17286815dc4d50276458d075f25c800

SHA1
47b11b44da43db97048219a18a799c4294b101b6

SHA256
06748df546902f83ef30cfe15d123e5596776952cbcd938eeba0e5759aab7d5f

SHA512
46805c6d53bff6a190892dfa594d7bec465fb8c470abfca57bc95020be3729fb60f93bd053a21cd74681d58e8ffe78fe8423d864a021ca2b9dd8f48d73b066dd

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar

Filesize
2.5MB

MD5
8bef00b895cd1bf04ef15463e4ecea3a

SHA1
45d5b19bbc0cc3107d3976986b702d9f9dd28566

SHA256
ae0de66d7dabbbc9917ba91fbcbd533351c802c80307ba2eb7a7770827db5225

SHA512
8de874083922ea073ef4b450f74ed285d1711da1d8e95374c9d8e43d082d57f004c0dcfdd120d7101e156edc0b4b85521b1e68bf36aa5e117ea2b7cc6292865a

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar

Filesize
276KB

MD5
882307368c99d0c8bc4329c31897461b

SHA1
2f0528e7b230afd1976c37703a98d97acf7203e6

SHA256
c726890adfda8b748bc760afe0e18c9b0fe380df240994f52db2aa387e21d657

SHA512
88135fcdb44f8afece1bf952145848a250eb2ac8f8aed5d084441434cd7f36e7ed41c57a0a0405010dc8fc981fa1f1f3affabf6e39fba68e98e2dc202029a33f

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar

Filesize
460KB

MD5
9d561e4dc6bf3ab2f21a1dd90388757b

SHA1
5012a8cd2a4e95aa905a867dcf72d70e7e299611

SHA256
370a7c49abcb12844c57a2372d9587afa5fa33959e85b32e8e582fa8e4f23943

SHA512
317aa5fa1807651555affbe519c913b039d2c6ece13135ea1019ec7fca7a276c331932eaffbe5b4e7ce184084958ea445e1fef2e28a7299d03adbe9ba80dd369

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar

Filesize
168KB

MD5
bf2c454b316a15b27ca2294026242a1e

SHA1
b849b8cdbeb3cb66ce4bb9f152bbd404b887caa1

SHA256
be8d3e9edb434fa7450eab222d6703baea5bb59f4f7914873f14c3739ed12873

SHA512
baa7464ce5a715461282d1693db31ba08b3857bea961003b67ee5019c330fff42856813e90d78cd588e7dca882a35a1fd766449208339dea167ba93071a010d9

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex

Filesize
2KB

MD5
fce3825f4ebe264a5c045efcab09a83d

SHA1
f6a23bc02b2d81bdabbb7a2b9a4f82e51e2ca916

SHA256
4a7ccbf31ad915920ef46e1d071ee6263591f90c6b17f70979b1e5be066cb4de

SHA512
ddf0347eb1f5b2cabfb49cbbe9dadeb4e9c564ff74564712d4ee0ca4415c3406d6c6c66e8fc914b68ef7b06fd7bd4dc541160d18311e6c9185e305e9588adacc

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/hfpregnant.dat.jar.cur.prof

Filesize
86B

MD5
31eeca96a598cb8b6be476c79cdabac5

SHA1
9555fe4f6d9bf838240ba23b1be265ee25283faa

SHA256
9f2089d7b27b3258f89c9bf0f4c3a94ca2b73c5e5b40f7423f19607716cf359a

SHA512
1d6b86365a6995402ff5ca271f842efb421f02ce2359a30c9a7f72418354118701086a1ab38748d20866bd35230333e9f5ac1cb8c1999b119d0d383c0c8c61bb

Download Submit
/data/data/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/oat/hfpregnant.ext.jar.cur.prof

Filesize
816B

MD5
773c763b145293b41c7d9c332f87919f

SHA1
831c4c5452bae8b82e8f014f242cd2d3aad1a66d

SHA256
a8e7c32646fbfdd96b951eb71f324cfe56173cf8fa22ac06adf7becd12fee983

SHA512
ae9d8afc325f8aa1d0285692370e06aab71d5bc1871cbe5619104973fd6496115def714c8c5286e3ce8831d0768894a7f01b6436255abd106a97612d61f1b1aa

Download Submit
/data/data/com.educationapps.hfpregnant/databases/a

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.educationapps.hfpregnant/databases/a-journal

Filesize
512B

MD5
302b23a8ad1e2a197f6a03f958c2ff73

SHA1
cbb62396164be6605f4cf794104e5ff77fca710c

SHA256
1032f2992ad7352f3937b8674f6e97c4383a87a883e628526159a8cf2c33b56a

SHA512
8689a1f25ebae2c53d17bde6d295aa28428f29ecd5fcbe47dae06460f04031ad372180ff23c01c934c70dded87fd6c796ba217c369e63cc9268ec608f123bcd4

Download Submit
/data/data/com.educationapps.hfpregnant/databases/a-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.educationapps.hfpregnant/databases/a-wal

Filesize
16KB

MD5
d1b9745f18007fa5305c6279991672d4

SHA1
f88ca2c17b9f71292dd580105ad3ca95ae96b9fd

SHA256
2c8509aaa0a972a1589847923ccefd237df0e33d8801875f2336c81c5ba13180

SHA512
81853c0825b28171a76775d37d8e227e8956234d99c53c05d16cd432a2fbbe544a49547aa31e32da9170e21a69ce9caf3d27e10879f8d55d160c8e71c3934356

Download Submit
/data/data/com.educationapps.hfpregnant/databases/hfpregnant.db

Filesize
3.6MB

MD5
f79e0117e93220fe696612dcf04b638c

SHA1
646461925a3ac73c84bc76673ef8b7a797c273a6

SHA256
322e3d2cbff05cf6ae9f7769bfdf1691f9a87c096b61def8b29923a265cd2550

SHA512
c55b0563526fd49c76cc1b0203ed0c427a2f49f6f0a579723520d27f205c49dbbd2f3b7c3ebe320b86fba4af025a4004d23653fb1002e29f859fc02c059837d7

Download Submit
/data/data/com.educationapps.hfpregnant/databases/hfpregnant.db-journal

Filesize
1KB

MD5
59853c1b4d32bc469b438c83635883bf

SHA1
ac8ad60f941054c91ef5e7c03df9d9ce21d35869

SHA256
27f4754dc20eba8b9f6d4e1c30b31bd19fda8b3fbc19daa663fda51bd64fe354

SHA512
e4de89898e941a4944d9c90f76f702a2312896852b3bb8695147f1d62787193146f4910175a45b5e197512190eed09febba08a47fc0ecfdedd1c9ee461e9bf67

Download Submit
/data/data/com.educationapps.hfpregnant/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.educationapps.hfpregnant/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
ba713e51d94cd2defb9339afc0735c32

SHA1
4907cee424dd7e4ef289ae8ee45d2743c7b68260

SHA256
8d061a4a5fb550123ec3e04d787b61ffb7407d66af909863110e8bad9e990bda

SHA512
bf71e161342c7ee70ac36cb59391c7dbb6b394a972badcda615b36787985ab7c6b522acdfabf9f4483e063613dac17b1246e00587b5e067bc5539fbb9af6b569

Download Submit
/data/data/com.educationapps.hfpregnant/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
e72a63a9c03973dda165adb5ba637022

SHA1
ae09cb5fa3e19b33ad2de24c053494aad09b4ff1

SHA256
b4551fe55d10a59745384b62bc1c7af9a5c9120a35b0b4032d274de823f1b31b

SHA512
529a2d734e1918d58d898a702f0e457653da0845a45b6c0f21f14ef37f4ce7ac6591e837a76edc0a6c13adc06b78394f096fb265c727d4018c343cfb905ea020

Download Submit
/data/data/com.educationapps.hfpregnant/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
54bc5830be5f09ea8f127a104c2013b9

SHA1
b371ed6ad6de07826d24a3a12e763d642f5e2b51

SHA256
a10efc2a706ab605833338e9e0665c0ff3cd4f1f8d0b36d20e7c042f7aca25df

SHA512
df8c8242dd7a36d088ce3e25818e1eff2fa71c05bd4ed2ef79e901ec3a71c47c316636d8055ee8d8eae5769e461d1a378b88ecebecd0576f0dce959ded69d508

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar

Filesize
6KB

MD5
9be13d90b5bf1bf3121570e9ecd572aa

SHA1
0cbd15feba1ee7bbd6fde043eda9bc03c582c3ea

SHA256
4fa93777af83fd71c3898e5eda1f03530374d9a44dcac88a33d5fb005204ac99

SHA512
e294d037937b68e83d5ede1011ca62a7830afc516898bfa9142861cc8d938ed8a4b553ebc5090c14f9c12c1b54791783e6495952a7e28a478b60581764ff180f

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.dat.jar

Filesize
6KB

MD5
785eedb1a2c13d552ec6adbf5aaba8df

SHA1
a53b5baf240a65b48bdfb8d76b550380d33a745d

SHA256
3f27857daf5f18f85c587fa9724d20ba1531529212f7d60c7c23362b93fc0d4b

SHA512
27624e636a88131e784db9a6ee371f75d32f7d294a9f39a5a3696544203dc64fefb2a271faae7762a10381001266f27776d66ec9a675ed4dfc06e2795400a46d

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar

Filesize
6.3MB

MD5
0ebda0d1ba78558c6ee9b2478df274c5

SHA1
f31b506580cdbcaac13720ad908c6871e6219af7

SHA256
23ffe28771964c929fc1eceb139e3bad54cf325838d2c029e1f7c4330ac7272b

SHA512
cab92872a1cc4a6708a2c5e1d674604b9035cb1bae73fdf27d0bac38e7bf1194bf2c365e5234e2f57a3dd907b8645c4c8f0e1086c6453f113afc79745502ba05

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.ext.jar

Filesize
6.3MB

MD5
83944e3b06c219d07c4a268b7614e73c

SHA1
87b5d3e5eecd5185a4526563ebd7864045782867

SHA256
44cb310d95792e5f5f54526dc28971d98af59bbd631a60ec90d3e3cb413d4297

SHA512
57dbf654b031ae8fd9112d5d0e3ab329cd9a86e7152a14b1a4e2b7a9a4ee7e9e535148197bc90fd312ee1b3487c208d67abd399aad2eea97d84ce83734714b79

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar

Filesize
684KB

MD5
c7405d03f169b980f10cea6f717cb6a9

SHA1
8847b0550640d8cadd2325d19f10c60f232f1166

SHA256
c8ae0ce4f329bb0cd55672aaa5f8410bd27684aaac1b96085ed9bf54ebea3567

SHA512
8e8dfe8e23bfa882fef6882fac5c60618c5f8bedfc13f42f3a34354f2874d379e4a6cdf1c80ff9c0063898c64371ebacc89888bcec29c69e5dc8990160633d22

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.irs.jar

Filesize
684KB

MD5
6263092a4066cc703fba3c43d7ccaaee

SHA1
dd29ff70f4a0c4efadf810b605ccf3217dd02c6b

SHA256
60db470efa19a143065f88eb485ad31ee9afb169b852b42a7d87a790eb051758

SHA512
122f8819c0268f5bf6dadacdc6586b7509c0ece6155e8d2eccc897afea84ec246a7f193ce2975ddc134107b64fd51ecf56ed0f14dc443823759d6b76d61fae4f

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar

Filesize
1.1MB

MD5
04296351293b42196f66aecc1afe172e

SHA1
53fa9577e740e587499c8556ae31aa7e18d75b8b

SHA256
9fa88a0783507c316e66336d37fc16ad8e8cf45ba701478c1bbbda52596e87ef

SHA512
d116890fad4112a62da9dceddb02e0be43a29847aa23721f5bd7168329fbd4a3994921ca3c2a0851e233366d37601c43eac977819f892122540aea438c1e2502

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.stp.jar

Filesize
1.1MB

MD5
49b91e17f8168f2d406b5cd32e34c9b4

SHA1
96054ee16e5dccae6de5b42395813fe5cbae0a4a

SHA256
31fdc6c48124540edf532fa66a36652f997ec505662320abc3738a8308c3fe4a

SHA512
d4117115f9e6fdef2ace6724d984f60e7e054f7423195bd2cac22c22101052070c29e1350c9dbe5869b067d64c5e29fe86671757f484ac04db2102e712115193

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar

Filesize
424KB

MD5
5281c31bc937e0486df57682e61c5c86

SHA1
ce34b2893d203c76bf90cb67d5a1d56e957fa315

SHA256
2f6654f61f0ab758f6825a38f078cf4a1bb1cbed1a99819ea18ae96634171401

SHA512
6219e0f2a04232ae6aec1736eefd00f696d1badbbaeb68dbff5254370281b2b82fbaf10c256e982004bca2fa3f4259106bc1fe6562850d420bcf283c1c8c80a9

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/hfpregnant.uni.jar

Filesize
424KB

MD5
3f5d5ab5cc80ae55dca1719549dc3627

SHA1
fc1a5e8b43ddd46c4d301127f9c2e07a613809f5

SHA256
adde7822a6f4b22b80e8348fe09d9d716e2f8519b8be926598a53463f43b569f

SHA512
885988fb4fb5b0a0b4c9b5f067c5b36a7fb7b731def6bbd3860832da215f19911b9a064973f74180461bace2bd04a2735142bb770783cb46e1b1d87c728497dc

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex

Filesize
4KB

MD5
b77ef452344c40121fd43e443663f50b

SHA1
c3c5f33aa718ab702a1697bb4057a625356af0ef

SHA256
00757b0ad007a5db091751c602a89894c7da5016f4203307ffcdaa8e2186f153

SHA512
d7d70dc610893165f5fe14d8c59c41577ded07149b5cde3f8cd14c51bd4bdf44605d63f618fd2ba209b14422ecd9e85957b5c5a59e8e44d343dc43c71c78b205

Download Submit
/data/user/0/com.educationapps.hfpregnant/app_wjbfz298sjpr8o69wwmi/mXXDBSjYH.dex

Filesize
4KB

MD5
fe8f61bf46f79c9dd635853169818199

SHA1
bc968b7d7feaf6de6cde5a763375ea31fc158e3a

SHA256
d80b2dab15a0fd1843c2983130a6730ab64924b1f2ee151fc679b2077c937229

SHA512
adda99decd95249ed93a3e1db74dfffbee6b31ecc5e98b47760dbf0a10e2fdc1a799d66682404de13647c104362443adde43adde4bd96354a8400548dbd43633

Download Submit