Malware Analysis Report

2025-01-19 08:07

Sample ID 240605-vwtw2adg22
Target 98bef21a4ab5078f10cdfeafc9101e64_JaffaCakes118
SHA256 fc755962e770a353485b41fd060a4aba5819a0bc5011ee83953655832656cbdb
Tags
banker discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

fc755962e770a353485b41fd060a4aba5819a0bc5011ee83953655832656cbdb

Threat Level: Shows suspicious behavior

The file 98bef21a4ab5078f10cdfeafc9101e64_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker discovery impact persistence

Queries information about running processes on the device

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Reads information about phone network operator.

Requests dangerous framework permissions

Acquires the wake lock

Queries information about active data network

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-05 17:20

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-05 17:20

Reported

2024-06-05 17:24

Platform

android-x86-arm-20240603-en

Max time kernel

175s

Max time network

181s

Command Line

com.hwl.universitystrategy

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.hwl.universitystrategy

com.hwl.universitystrategy:pushservice

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.easemob.com udp
US 1.1.1.1:53 api.gaokaopai.com udp
CN 47.94.123.24:80 api.gaokaopai.com tcp
GB 79.133.176.223:80 www.easemob.com tcp
GB 79.133.176.223:443 www.easemob.com tcp
US 1.1.1.1:53 alog.umeng.com udp
US 1.1.1.1:53 a1.easemob.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 47.95.246.247:80 a1.easemob.com tcp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 101.201.233.110:80 a1.easemob.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
US 1.1.1.1:53 alog.umeng.co udp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
CN 183.134.98.102:5224 sdk.open.talk.gepush.com tcp
CN 183.134.98.102:5224 sdk.open.talk.gepush.com tcp
CN 183.134.98.102:5224 sdk.open.talk.gepush.com tcp

Files

/storage/emulated/0/Android/data/com.hwl.universitystrategy/cache/cache/journal.tmp

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 f61bd5003da9fa964f87fd39709608bb
SHA1 e20d86dfa1242afd04a9b1887a7a01d22f01d1b3
SHA256 3e222927365eda5738a9281a014ecc0c4d947af075b3b5093c7ddb77b75b42c4
SHA512 4c8eacf54846ccd3f85806b56c53f30449de54b68636c5515111ee051c980cd2595b6e7fb5fa5ea185b179b333779a74eafba88a5a27c5223f46fb3ec8b7c0f5

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 a2968403f444d21d71c4e37de8df5d73
SHA1 58de993fcf309545ecdd89319f4aa1414142ff1d
SHA256 181c0f9b6af88e029e792e871a318724db5383dec87b0d58845a469649415c71
SHA512 810911d26b85294c0d1ac3c0da29c116087c9adef5e33b654f31f2fda16eaaae96bfaa88e836f11f91dd6bff9bdeace850a2254c862aa81797d64c8575bde65a

/storage/emulated/0/Android/data/com.hwl.universitystrategy/cache/uil-images/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 3036104ed7830b98d7642626afd48767
SHA1 7912ff6c43d93fc1300e735c75180e61d5edcf11
SHA256 07efed28d24063b86e7e0746fc896ff3ddbfcf934a96059f4a2522636b42393f
SHA512 ef7040aa0308b85851d756bffa4769f4cf51e9fc7315bba6b11f007994c7483c162077c38233a172aae8664853bb3cc2e61228950b8a3b5de64aacf5499ecd37

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 d9193e2c31e78a10e4fc7880efa8546c
SHA1 656aeb3250878c5192805f6431ee4b4e31cb81e3
SHA256 3376cb3cf9cbf3ae521b3d75668e76dd94f6bbf1a23393fcf3bb66cfbf617ccc
SHA512 d96e823bbc633a5b01cc36b51d118a39e197a0a9b0122c771b9a0cc05875b7d181c09f2d8db4be402982028c2101880400c9e40a2584e3b698fb7eb32b14f685

/data/data/com.hwl.universitystrategy/files/umeng_it.cache

MD5 f7d15edc550090ace20e368fc03f3776
SHA1 0fccd1bdc40782d3268bc7a23639220a2cce6178
SHA256 a2673a845a85106a61866a2d5134ba93156944f5e11de22d3b832bca30e0b93b
SHA512 ce63c0fdf8ca87a6cc3d2c3985ee798a70268aeed9ffaa1e7c68fe46662d10a133ab161412d86b085eed7817a1aab45cec6ee11fc1b762328dab082b9d822e6b

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 73683a22ca4a2364b12ee869c7e20569
SHA1 543c5f012ecbf07ec5fddee3b3776a6b4df3b2e7
SHA256 a1700fd8b1a99c243d944e8f712f979eee6ae804e87e9d17f5dcad95d48c16ec
SHA512 a3118c612a0edd9eac9c356d86a4f0880f80d9ebff95707aea88bf5ccb92fd498d1826d238312a54853ef626b3dc8150ec3cc26911f69e39027715737f304923

/data/data/com.hwl.universitystrategy/databases/pushsdk.db-journal

MD5 debf41b44b78aafb879d5e6b17a0a5ae
SHA1 7656432a16000760aa02def4b90bf5c4275c57be
SHA256 a8f517dfc8c6f17220fd2830e4a423e3eade478c8fb2715aa06e1aaf0b093fb1
SHA512 4f52a2d1fdbfff1fc0165689b878c22d0505752d0040e9e2b5eec42e28593f6ae65ff837d9dfeeb0ee6cb187b3475537bbe6726ef885a2c3e81c112e6778538e

/data/data/com.hwl.universitystrategy/databases/pushsdk.db-wal

MD5 955fec1fdb5effd02f625fd64788cdc8
SHA1 5471c7f35767654b46fde5aec61a6addd10e7509
SHA256 f35f22ec5829e88d806fe82b72d02646de731f2b840f2936de2ca3791b55cbbb
SHA512 c9afa5c1b076de3ab8a2c3c7c6fb678a75c6cc77718c4a2e96955258c58a15f3ffe7f8d75743c818755b81c18177616c488a1e03f20852179b4383be09810592

/data/data/com.hwl.universitystrategy/databases/gaokaoInfo.db-journal

MD5 2846bf16429f78f33949b87b7ade5a15
SHA1 9371dc6a42fbd2ce7566366c2ba409b41c2b4f0f
SHA256 5943c615562eb0e7812d33fdf787ee98a499f2dc462d2f80e8b0d44b96b5d871
SHA512 abdaa268efb3d9e18372eef243694c8955d5483d16504d2c6ec712d6bf07f84613e5cc874441961b11d71e1f9c9b30d16e8ddcaa01d6b448fd13708fc940225e

/data/data/com.hwl.universitystrategy/databases/gaokaoInfo.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.hwl.universitystrategy/databases/gaokaoInfo.db-wal

MD5 afb72994334397f0d342854b9f9a0775
SHA1 91b71400ec048fcdcc28316de0011504b4ca4393
SHA256 7cf881951000e0bd4757a52e386f42f8e5bc2e3efc56c6afeb51b8ccc56d7507
SHA512 cf4a76757b651cd7f296bca26d91c26b4539880618f9dbabf89f9a207a1855a9d547b706c7bfe2d64f0ed7eb6bf4b7827e3c56d11e6cde190fb404137949fc93

/data/data/com.hwl.universitystrategy/files/.um/um_cache_1717608128788.env

MD5 6ad7c7fb8402ac78da7a8979d22fffe3
SHA1 2be2d069cd0e34d7acd6a60b086874b5e5d1049d
SHA256 f750a2d2467708de203a515bfcc5cfc9d1a4ac5e5339633242c7917f673e95ec
SHA512 d6764dabad8f4ff7c1c6b3b52fa536d51f058840eb3921b5732f1808679be6d2cdd3a7fbb1f66fa9da8f9151e6c878c4670b0fd2e13d0a4b9195245ef940e5c1

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-05 17:20

Reported

2024-06-05 17:24

Platform

android-x64-arm64-20240603-en

Max time kernel

175s

Max time network

176s

Command Line

com.hwl.universitystrategy

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.hwl.universitystrategy

com.hwl.universitystrategy:pushservice

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 www.easemob.com udp
US 1.1.1.1:53 api.gaokaopai.com udp
GB 79.133.176.213:80 www.easemob.com tcp
GB 79.133.176.213:443 www.easemob.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
US 1.1.1.1:53 a1.easemob.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
CN 101.201.233.110:80 a1.easemob.com tcp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 47.95.246.247:80 a1.easemob.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
CN 183.134.98.76:5224 sdk.open.talk.igexin.com tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 223.109.148.176:80 alog.umeng.com tcp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
US 1.1.1.1:53 alog.umeng.co udp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 47.94.123.24:80 api.gaokaopai.com tcp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
CN 183.134.98.112:5224 sdk.open.talk.gepush.com tcp
CN 183.134.98.112:5224 sdk.open.talk.gepush.com tcp
CN 183.134.98.112:5224 sdk.open.talk.gepush.com tcp

Files

/storage/emulated/0/Android/data/com.hwl.universitystrategy/cache/cache/journal.tmp (deleted)

MD5 43bb9b1074202ca2afcecc1fcab545dd
SHA1 958fbd4aae1327660501bb5bc3c39b64fb0db924
SHA256 bd39941a40345e75942c0b8fcf63ef983dec885dfaa21daf9f3300f33cdc3209
SHA512 02f166b9b242e25b62d223f9fac0108fc38be592b4f373d81f680b14f0169056a47c6390ac3e7e8406e7e30a516c30a795b3f8b65a9e47e1c9244b415ba3ca5e

/storage/emulated/0/Android/data/com.hwl.universitystrategy/cache/uil-images/journal.tmp (deleted)

MD5 8ed3b1313a2bd3840bd10d64d3a7f83c
SHA1 dc093a72b5e7d7617bb17ed3ff9fa128ac8ca671
SHA256 e998e1b182366cd675b3ab052413fd0d1eb3340d96491c523c82a2d83f810fed
SHA512 5ad0281277ac427b23a0be4451e70f3cea99f9ace61c5ededd9f1682231003b2aaa0cc7f167fd7cccd151a7f2d4a183a0e2d0a8597d8d731505ad87ed4e8f228

/data/user/0/com.hwl.universitystrategy/files/umeng_it.cache

MD5 b3756988c0bdd5fb1f9039095be1ee1c
SHA1 e0347076d8c843a962dadddef645d81c6524288c
SHA256 7b74277e9c54eb55729712110cd675cbeca754429f0bf54d9f2cb815442bf9da
SHA512 89680af3c42e43ffd2a49c2747b452d230ae1c996bb02c1baef5ec41c39661b481cef087e0235160bf88ab3408394c45142aec745417320d3978ec8cf9dbb7f5

/data/user/0/com.hwl.universitystrategy/databases/pushsdk.db-journal

MD5 39bfab53aada92d690763cb0ad9649f1
SHA1 aa40ebe1a01aba9c73670af6a13815c60280c509
SHA256 80995f11ed7bf4e79f9dfd54d253a446559cd08d5465eca50c07719716c728f8
SHA512 70d2d69b183cb0b9d21d1142a42892616d29e35afdecfe8a4deb572ca3d5f33a0b0e73db05fa8b706b12e1507b286a2a7717b3182d32832acb7cc27a33b6a5b7

/data/user/0/com.hwl.universitystrategy/databases/pushsdk.db-journal

MD5 52e5e3efc0f11811a9f64b0488c757ab
SHA1 66c8ea8e10e38f5945f58a2190ef9b17a339b1e0
SHA256 fc06cab09f5dcf19e66da6b350741dff9385ccefc17938d4d6ce8532a11c9224
SHA512 141a342214dedb6f31bf5cbc89f52544c386ec3fd0c8ccf82fb88fcbf823b38721f3f0f509c62fefe0a50b00693c0976b6bd876ee9e04f4df21ff652433ab04c

/storage/emulated/0/Android/data/com.hwl.universitystrategy/gaokaobanghuanxin#gaokao/log/20240605/000.html

MD5 e2794b60f68b13b00a2bc9ded6b177ba
SHA1 527019e5023abe282e073ed38bf64700195330f3
SHA256 596e84bc5a51e7881e2ef6b43d1325c8e51b90e1bdfa5d23c787f466d53a2723
SHA512 715669d7e5812d7103dd5a8ba510e19c7089000b4332dddfdf0920b80ffec09f641b35ed5b2f82b8e89aa533934c1dc9d9236338101d214ae1b16b0fd5998ddc

/data/user/0/com.hwl.universitystrategy/databases/pushsdk.db-journal

MD5 cfe67a431e05c1a1597dbbe50b601479
SHA1 ae4de732da635012334b035a4be9dc8bfca6afac
SHA256 25471a459c553bf31dff0678769532fc1d1cb209187768b2e7a2ddfc37cf5628
SHA512 3cc580fca7e9ae401f0d4cb87c1d46f379da9d6c074d1a14651246b5e41151480d145bd5d11cef2d4fc7b31c02f4fc523a2d29f04883afa5137a88cec35cea9b

/data/user/0/com.hwl.universitystrategy/databases/gaokaoInfo.db-journal

MD5 5f5c037574f9ad780f44a9fa6c7466fb
SHA1 1669e2ac375fabbcfdfdd4fd742ad4cf885aa987
SHA256 dbc246ad6ebd57bb418ce6f7bb684295f61b8226ad22692ff714f6dff541eae4
SHA512 d6d4f325b399af013c5d58874ffd06239b1735f34d598fce4c94f8a4bc23a7cc653ecebec6b9802e458614a64dc7e783ebacd3918cfa49980b99a930c833d549

/data/user/0/com.hwl.universitystrategy/databases/gaokaoInfo.db

MD5 1bba5dbc623d98159c6bc4db3840ece1
SHA1 ecd1cb448decd2218a20b20cb3dee68f818c4c25
SHA256 86fd64aa5e41b89c2a010ac03c3591b666456cf2dafa45a6553902b83763f86e
SHA512 3595e9d04c7fdd99c61968d2b2a44d41a2ade2e44bf9725e45d77ea04a630686966a533931c424efcdfbeb77a8629cfd10cc6b13a78b849367924d19bc794438

/data/user/0/com.hwl.universitystrategy/databases/gaokaoInfo.db-journal

MD5 9d8ded4b351ea819079a7ab9be50bf5f
SHA1 135c4739941cd618015846070fd6a5f8b63bfe4a
SHA256 90b2a53ba11945b1497a5fbeedbf45486c148d2d2331e9ee521276375b827007
SHA512 296c50fbe13666bbae1db852115f6e5346050c7107e17af7ccfa9925ff35ebe8d1c00ffb5ffaa48a863aa49aa8699f8bca19c68ae8821f1372241bfa1d980eb2

/data/user/0/com.hwl.universitystrategy/databases/gaokaoInfo.db-journal

MD5 3f8498e44c08b97e0d157c7e0bf48bd1
SHA1 1472f450996510d273084b87af9719614478fba0
SHA256 3f05a44491940e60f1816164f9d11eca6d58083e6f7186ce5a20d418e42c701f
SHA512 58d796b9ba983342d2cf6f8c0b4367f6b017f9c53768118c80580a385e78db6201a47ea485f90accf6d232bba82134302279b2a51e316399f82206d99b13d159

/data/user/0/com.hwl.universitystrategy/databases/gaokaoInfo.db-journal

MD5 2ef13a31d62a1b3ffe9d55898b66d231
SHA1 532d6085533528529ff8f3c4243474ff4cf54ee5
SHA256 d40d8e4637559d18ba7f915ade3964d048d98e5e04332d4c200706219cef8cdc
SHA512 0db8ddae67b29d749a9cb45d76dce5bc7ed40eeff86eb795cc607a07b45ae9c256d5ce1a0524e31a81b3bb66573e86ae0c64e1e2873e49a4db1a97cc14bab565

/data/user/0/com.hwl.universitystrategy/files/.um/um_cache_1717608125011.env

MD5 bee0e5cafb62f2a88aee39cd90dec4a9
SHA1 853e469b611134960f78fbec29dabed87393a32a
SHA256 36873afc8e034f85b75c7be2ffce95ff831b6d6086730fe010242c85873d7a19
SHA512 75f89e0fcf436a6e114c31916007d2c216bb620ea8ab388a8f9cd611b118269b1e0f682c722ff6916ce4ea8875baccbb8313a634abc2e50e0b8f72d42558c5f1