Malware Analysis Report

2025-01-19 06:55

Sample ID 240523-l8w3gscg93
Target 6a9b32447b74abb2b5eb1a1683d82ac0_JaffaCakes118
SHA256 e7ff1300451a2fa0bd106fcfe48cc69c63f9a0fa95dff61639f4fffeab1efa7a
Tags
banker collection credential_access discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e7ff1300451a2fa0bd106fcfe48cc69c63f9a0fa95dff61639f4fffeab1efa7a

Threat Level: Likely malicious

The file 6a9b32447b74abb2b5eb1a1683d82ac0_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection credential_access discovery evasion impact persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks CPU information

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

Obtains sensitive information copied to the device clipboard

Queries information about the current Wi-Fi connection

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-23 10:12

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-23 10:12

Reported

2024-05-23 10:16

Platform

android-x64-arm64-20240514-en

Max time kernel

47s

Max time network

176s

Command Line

uni.UNI2A7FD61

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/uni.UNI2A7FD61/[email protected] N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

uni.UNI2A7FD61

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 service.dcloud.net.cn udp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
US 1.1.1.1:53 api.weplayx.com udp
HK 156.250.101.108:80 api.weplayx.com tcp
HK 156.250.101.108:80 api.weplayx.com tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.187.194:443 tcp
GB 172.217.169.78:443 tcp

Files

/data/user/0/uni.UNI2A7FD61/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/user/0/uni.UNI2A7FD61/lib-main/dso_deps

MD5 591d1b5a17d7ea29af3dcfb2a74e38f7
SHA1 ebdb5c6b07001b2ec2b6d66964957d4fb37b47b4
SHA256 d65a0a9d4d6a779352f2098e1a1c53df531b1f44fa84dc611ba18cd108880baa
SHA512 615275c46b396683a02099294f110679a3cd55fffaaa26fd641725a96375727849fee4ab06be7fae4ecb3f378aa759a8892593de88c2347a3f89872c75cea827

/data/user/0/uni.UNI2A7FD61/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/user/0/uni.UNI2A7FD61/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/user/0/uni.UNI2A7FD61/cache/libweexjsb.so

MD5 7daa126a59a44091b737186c77697355
SHA1 3d0edde6aad106a18b3c5e139bc5b17872544920
SHA256 075f5431397263562da0a61835f543ff13c708f4b5c4a4588a93f5ef08254c5a
SHA512 1dff58d4598278d53a4f571152142de312c2b1494b0c9f6a908e281845a041bfd4c864726fec0ece1c6d3994f13622ac7310aef479bca71e42a071f8d2307cfe

/data/user/0/uni.UNI2A7FD61/cache/jsb.version

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/data/user/0/uni.UNI2A7FD61/.00000000000/A3AEECD8.dex

MD5 ed73a80eb949bacc52428b8d5a087fa5
SHA1 07e973549a2cee61ffeeb6439abc419cd8a489a9
SHA256 f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76
SHA512 4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8

/data/user/0/uni.UNI2A7FD61/.00000000000/A3AEECD8.dex

MD5 5061e4948844f7d366972ac8005e9f13
SHA1 a2b79a1c79afb095ddebf0f16a1f9db64482bcaf
SHA256 3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45
SHA512 223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299

/storage/emulated/0/.imei.txt

MD5 295cc67d0348d5ecd4c642d016be9adc
SHA1 55331969a8d609fd90d9e022d6c9173efb0eea1e
SHA256 3cefae294ca7ee8fb583f967579868bb1440103b5617f3e9f7694e9aa322d5c3
SHA512 471790fe9ccac55feb6940385435e7125576fbca94ffd8a9473650573bdd9a87f408e65372c64ca6778e3cb28c822345eafe9c4398d72153810efb07fcc12657

/data/data/uni.UNI2A7FD61/shared_prefs_ext/test_app

MD5 364820ade84d8fee773af5fcebddea5f
SHA1 dc94815abd7bd527b08a276c2b22cc28efa204a6
SHA256 a075cef17734a81245c64917a5209c4dd3038082e2755da23df47844f3e047af
SHA512 104a60bdbb8469bf39ca24261983584c1814215583a281798331d5684332f13db3b8cc0ccb417653eaa04c5dcc8a1402aa04fe222f7e038ceeaa5f51d93b1aa6

/data/user/0/uni.UNI2A7FD61/files/cnc3ejE6/eje3cnc

MD5 7769d4507985f59116153463f09235a2
SHA1 b081e84d14300ac7a7947aade9c025fa83bc17fb
SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
SHA512 ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

/storage/emulated/0/Android/data/uni.UNI2A7FD61/apps/__UNI__1EAB8A1/temp/1716459191713 (deleted)

MD5 8214273d94cb70d4f2a29913a7e2ace5
SHA1 d13f046953b76d1440177f1bcd42035b9b06ffff
SHA256 f8b1f32ea8def49db5cdedf2a3e5f204c7996b66b1eef2036fc3e14a3909fcea
SHA512 74c90af4f9ce560e91cd4171ffc0079cbf6640db773818f34b5b5182e428eac2bf5eb4ad59c907a489868ceb9b687336eb6b74c572d585deda1f175a58f5944a

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/journal

MD5 70e796ba0ed21a9ff51ec907da36b8a2
SHA1 c6e0a409af6e01db5811508e88b9b08bb439c932
SHA256 e7e143556af961128b669ef7a1def9bab25147a68a4660cc7ce751911b650b40
SHA512 27440beed4c56a32de7deb51fdde3f50106c929a8351ec5ae3bd88fe791a99af4520827609ca6fc2ccde77179639bbcde4e0be8fd201b7816d43cd0abd0d8d19

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/6f9e34bd2757d80095fd48c06b2a331a5c66d7cfb09943f6fe1bd455168ce2f7.0.tmp

MD5 2ab5c990d73d54ebcb8a24a30772fc9f
SHA1 b7904c7101a53c90e3193c795426ddc6e313456d
SHA256 10f65c26532d9e1140e4d3d889309c0e8b3196481fd68bf821913440d532de95
SHA512 baa17942d7e29eb74fda1a2eb2e9c01aee7d2a2f4aef35a04fee589aec50cb93f767ad454a8712388d6ec56ad805a14fdc0184f6604c92e8a3ddbdb522676318

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/124e373185c4168001c909d37c9cca60de44acd0b9fb0579b8d7c58cc494caf9.0.tmp

MD5 0e7ccd866fef4b5c1a03c09364595c99
SHA1 1f0ee33633ef5b5005eb0cae0945d9eed517e40c
SHA256 c5ad9bec31f2991ee46dd1dd2aa5bbe09572775d7f57d9872fbef0304d332d10
SHA512 fd13c15b5274bb9d5179695bdb8202bd2d25e7931deab88854da75394c68cc3057c50f21f5e244f08e732163ae6afe784b8ac4125802d566f34fb17b4f5bc304

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/25836c18f777cbb48b7a2391fa21318be6ec502b734135c8f8affd1a73f06d94.0.tmp

MD5 e13d163606618e3139f9fdaa76a35650
SHA1 f50f52d77ef08a30b5f8e55fe6fbfa0ec89df34a
SHA256 90bbccd7bdd43327b63854ef7a8f4132c179f96e665266afaabbcaa8b7cd03bf
SHA512 e11a8372be999a6c2cb4dcdb5d7272878c89809a9e1a3de6ea1527a03be09ca2e3544f9636e29902efabb0b76a6f7da34c9589c31cd0a435027c41d1729cfc39

/data/user/0/uni.UNI2A7FD61/cache/image_manager_disk_cache/94501d533f42041f07c745b8aa22a8146f1221e1d37927eb2acacf2f6c5c44c0.0.tmp

MD5 5a7f440faaa431d9f0ae8d7c9e34dda0
SHA1 b7f772215f4925010d08e42c3efea639a6d342ee
SHA256 e0dfa416ee31864b0bf617f75670dbdd32cca431f8f45e645d1a9adb5e304eeb
SHA512 fc067211592cb8e0ba8d7eef9228c5cbfc2abdba503d49c1699db4714871c6e01d6bca5a58050814193215694bd4489c5b76645b698260af655d215959addaef

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-23 10:12

Reported

2024-05-23 10:16

Platform

android-x86-arm-20240514-en

Max time kernel

47s

Max time network

159s

Command Line

uni.UNI2A7FD61

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

uni.UNI2A7FD61

/data/app/uni.UNI2A7FD61-scPXlWkxF2CpPkT-r7EyVw==/lib/x86//libweexjsb.so 126 133 1 /data/user/0/uni.UNI2A7FD61/app_crash/crash_dump.log

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
US 1.1.1.1:53 service.dcloud.net.cn udp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
GB 142.250.178.14:443 android.apis.google.com tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
GB 172.217.169.66:443 tcp
GB 142.250.179.238:443 tcp

Files

/data/data/uni.UNI2A7FD61/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/uni.UNI2A7FD61/lib-main/dso_deps

MD5 0d46eb2aa0c71e42aeb2dc34af0a02b7
SHA1 03ad68df2c50e73a07cb03b14e7cf50bc6716d28
SHA256 06ac8dd530239d0cbd4f7c9fca0366d9c56510152831e9fb194bf194636e9808
SHA512 2bc31cfd62963ac8633eecf042061299e63799c0a6d9adc367022130e9aad4c83271ca4aae4cce40677864281c33ed79acc19cc3ce087f35c0ee734540c73810

/data/data/uni.UNI2A7FD61/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/uni.UNI2A7FD61/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/uni.UNI2A7FD61/cache/libweexjsb.so

MD5 7daa126a59a44091b737186c77697355
SHA1 3d0edde6aad106a18b3c5e139bc5b17872544920
SHA256 075f5431397263562da0a61835f543ff13c708f4b5c4a4588a93f5ef08254c5a
SHA512 1dff58d4598278d53a4f571152142de312c2b1494b0c9f6a908e281845a041bfd4c864726fec0ece1c6d3994f13622ac7310aef479bca71e42a071f8d2307cfe

/data/data/uni.UNI2A7FD61/cache/jsb.version

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/storage/emulated/0/.imei.txt

MD5 6b1f6c8cb4c3bffd30fd8db4c2cd0384
SHA1 36b7d425865b9c27acec3e1fba0ffd65b2dfdeb9
SHA256 a38fce2bc9d067dd73a83a0a69eee5c1b88cb9e94a44492ea0239abc53d1d3e0
SHA512 345bf1a52385a45241658d91e8de3fdc3de85daa6ea717e94584f92935d3e2078357d527f6250346c5db3fd3b8981605c1629e4eaa1791dd8fa15a8969338bb3

/data/data/uni.UNI2A7FD61/shared_prefs_ext/test_app

MD5 364820ade84d8fee773af5fcebddea5f
SHA1 dc94815abd7bd527b08a276c2b22cc28efa204a6
SHA256 a075cef17734a81245c64917a5209c4dd3038082e2755da23df47844f3e047af
SHA512 104a60bdbb8469bf39ca24261983584c1814215583a281798331d5684332f13db3b8cc0ccb417653eaa04c5dcc8a1402aa04fe222f7e038ceeaa5f51d93b1aa6

/data/data/uni.UNI2A7FD61/files/cnc3ejE6/eje3cnc

MD5 7769d4507985f59116153463f09235a2
SHA1 b081e84d14300ac7a7947aade9c025fa83bc17fb
SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
SHA512 ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

/storage/emulated/0/Android/data/uni.UNI2A7FD61/apps/__UNI__1EAB8A1/temp/1716459187917

MD5 8214273d94cb70d4f2a29913a7e2ace5
SHA1 d13f046953b76d1440177f1bcd42035b9b06ffff
SHA256 f8b1f32ea8def49db5cdedf2a3e5f204c7996b66b1eef2036fc3e14a3909fcea
SHA512 74c90af4f9ce560e91cd4171ffc0079cbf6640db773818f34b5b5182e428eac2bf5eb4ad59c907a489868ceb9b687336eb6b74c572d585deda1f175a58f5944a

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/journal

MD5 4e7b21590637aaa7f040b81a276a0909
SHA1 b4197e1e5ad8eaa46845191f1d485d97cf0c6a38
SHA256 2522b9966ce1c4e1ef828d1f97ff2114515753fb2f036f8e7f1baa06c71b89f7
SHA512 ca2511fd5a5f9dbc999459f7451d3a9cad80a1b6fad066bd2cdcd6c2efc79b71b3549ec0706511eb9c04b11b81659ce180a75854fce8799eaada6a4e6a9b7ac7

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/124e373185c4168001c909d37c9cca60de44acd0b9fb0579b8d7c58cc494caf9.0.tmp

MD5 da8fa2cae4a4ddf52239ff0008c226e4
SHA1 59d50c76c5f20947752ee6dc6bbe61fe061e46b8
SHA256 56733d22da8ad54ec4b5bff27ceb72e5c0c06d5ad8b1eb036be21d2041ba36c8
SHA512 ce6ddd4b6c33b521042427de0a86ca5ac50e66b67d5c20c2d2292be7266c57b2247ee8785a8f43079a4e4b793ef3d35a231c8edb23187ad238cc2857990bc9e0

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/94501d533f42041f07c745b8aa22a8146f1221e1d37927eb2acacf2f6c5c44c0.0.tmp

MD5 562fd8ae83b1482d423a70e9e7b67794
SHA1 dc4cc24c6e2fbe06fa8d8fff94388bbdc1df4f53
SHA256 34b83b6a3735ae8d38fc6c490c10fb4406cfadea64e89c101d682146f7249a7d
SHA512 dccc4bd9c89ee9b877f46ecf9776298695695e819df7d17a957442d9f56745eda933c87e00d973d3addefa3746ca8bff20ade5e0191c437acbd7b2ddab5e2458

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/6f9e34bd2757d80095fd48c06b2a331a5c66d7cfb09943f6fe1bd455168ce2f7.0.tmp

MD5 1e2d748632b4bf627bfd46d54a180a06
SHA1 9a8cdf36a31d137652e140d8ce08d1a0e945b238
SHA256 9418b012ba296a7bcb609de2c75d9023b686803eb80e810182412d24ffdc513d
SHA512 d021b663fbee95419fc5f6e16571cb9757c4c26aed68b19af810391f69621a3ee6b4dc8c5eed442784ec64d60c7cccdcc34b4a0f7bb1025bc98ca72c25b2531c

/data/data/uni.UNI2A7FD61/cache/image_manager_disk_cache/25836c18f777cbb48b7a2391fa21318be6ec502b734135c8f8affd1a73f06d94.0.tmp

MD5 75680c1e584910de6d0a39dfbb920d60
SHA1 548dc4411966723213e8a87fc68fb904ada9df7a
SHA256 3299c29d037a79aefa495146c93101296ba7cb0bc0129490f8b8777f88a25f39
SHA512 add1f852390cc57210a283f0a78d08c7cef15111aa25f934cd690f0a50cfe7a7a23008d69cd8d1936e0eb43d874f250b0ad95ac4a868923247e82243a6d600da