Malware Analysis Report

2025-01-19 08:03

Sample ID 240610-x6ntwaxhnm
Target 9a6f39b990a2466206e9b78b3e51c5f8_JaffaCakes118
SHA256 6d02675a49b1e29e37c44dcb11a2e76efe7663b7fb309b4f394e4c8f5754d068
Tags
discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

6d02675a49b1e29e37c44dcb11a2e76efe7663b7fb309b4f394e4c8f5754d068

Threat Level: Shows suspicious behavior

The file 9a6f39b990a2466206e9b78b3e51c5f8_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery impact persistence

Queries information about running processes on the device

Requests dangerous framework permissions

Acquires the wake lock

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about the current Wi-Fi connection

Queries information about active data network

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 19:28

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 19:28

Reported

2024-06-10 19:31

Platform

android-x86-arm-20240603-en

Max time kernel

176s

Max time network

186s

Command Line

org.unionapp.jjupf

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

org.unionapp.jjupf

org.unionapp.jjupf:ipc

io.rong.push

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stats.cn.ronghub.com udp
GB 8.208.102.120:443 stats.cn.ronghub.com tcp
US 1.1.1.1:53 jjupf.m.huisou.com udp
US 1.1.1.1:53 nav.cn.ronghub.com udp
GB 8.208.8.123:80 nav.cn.ronghub.com tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 124.71.173.183:443 jjupf.m.huisou.com tcp
CN 120.46.131.222:19000 s.jpush.cn udp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.141:80 alog.umeng.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 1.92.77.21:19000 sis.jpush.io udp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
CN 223.109.148.130:80 alog.umeng.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 113.31.17.106:7000 tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.119.173:3000 im64.jpush.cn tcp
CN 120.46.131.222:19000 easytomessage.com udp
CN 1.92.77.21:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.119.173:3000 im64.jpush.cn tcp
CN 120.46.131.222:19000 easytomessage.com udp
CN 1.92.77.21:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.119.173:3000 im64.jpush.cn tcp
CN 120.46.131.222:19000 easytomessage.com udp
CN 1.92.77.21:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.119.173:3000 im64.jpush.cn tcp
CN 120.46.131.222:19000 easytomessage.com udp
US 1.1.1.1:53 sis.jpush.io udp
CN 123.60.31.166:19000 sis.jpush.io udp

Files

/storage/emulated/0/org.unionapp.jjupf/cache/image/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 7b0b34c2975710f897c10ba720eb50f0
SHA1 f3c0a486b46aa323c017f66bfa4d09d6fb8791f7
SHA256 7195ee997a961be712dd4ae07eaa2d7e8694c7978f996f64dd28bf406d8901eb
SHA512 7978148cd60ac4fb919a8613cd744563f00921a1a7f6887088c2c2db474974de49cf23e0f267b18955c97a18387051fe73f2afcd00252a7b7d9e3263d41cd4ae

/data/data/org.unionapp.jjupf/databases/cc/cc.db

MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

/data/data/org.unionapp.jjupf/databases/cc/cc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/org.unionapp.jjupf/databases/cc/cc.db-wal

MD5 ae85d9780cc76b7a8cd10e12717a307c
SHA1 e48240e73f25297b55b3064603bdb54fd9965b5b
SHA256 8ff15b7deeb77c27a7d08c63a804201546aab33b0df72238ec3432d830440b89
SHA512 fc1ba840e916bad9a457a03a979ac20610fa575eeb87d831f06d08dc13d93d694acaf7366e6c6b75677c999112d65752c212f689b5b3234a9b85374f0e7e0556

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 d6f80da1db445965b0aa8e15735a6403
SHA1 374b072de8121ffdd675ecbf018015b41cb8d3b4
SHA256 754b51bc5b5a46ba8c89ce97fa4289a8358fc4d66f227f61e87db48cee20d622
SHA512 7ca10056765e4d5c1ca9979cd5848cde8565e9a23ccf3b5b04d5891235516dc423c0537d77578aac9b07377fc5b33f4389290435e1f21b9afef2892c58e3236e

/data/data/org.unionapp.jjupf/databases/.ua/ua.db

MD5 fa6a5770b9730dcd5d333ce91a8e6af8
SHA1 f9c5b81a28d887d23a534419b58a8c1dc8898192
SHA256 271b20c7244bf16054a253a0afce8d8abc6a45c773f0604f66b3b1316b8d3aef
SHA512 6cd2016c89b9543822a38094b5d55f5bd119641846bb273f47faf85523373c70333b8ba707a7f4fd70e5d021e3fffeadab80da218f55377c4701fdca2dfe9625

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-wal

MD5 bcf00905ee450efb9a26b4a76033153a
SHA1 dd8b76939d24f37612ec66a0539df5ac4660c0a7
SHA256 fa152134dc7c2d87514c25bd6bdb413f1c8e512d0db8b39c089dddedc2ff0764
SHA512 43ad070918b8d632847f67fa14bd837712415acbe77bbd8bdd6dad0f77f0f0f5cc0aec12429be7f40c722acedb0648f4b8ea619bb1ea3d781c07a364eca8287b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 88b64262cc9873f640a4e92ce9a64b6d
SHA1 cbb40660ce2b5619eeb656cda4b8be38f6ebf8e6
SHA256 46d72adc4dadcdef745a08a2f20004f30fc717db05a1452951a25b2603639c51
SHA512 304c4037ffe14d29b74ad06b513dba753f1e02f36bb50b4607580117e2e5518e60266dd8c40005ec7c3d9ede89d953c32244d4b97b0892c0bb261ec8ac3bbd9e

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 dbbb91e8afd5139c19eb3da42e106cf5
SHA1 1ca7b315609c046912cae79e699be31ea90dc977
SHA256 6650a230795c415f2b3404b5158c298082646ad27a253aea9975bb40478e8fcb
SHA512 75c021a679770bc78f655d6c16c67dec37b8cb7f0d6c76f498c9bb40368bfcc0cc59ecc4fe6f21fd8eb71a421658024d8c498a2314c405cb4f5020b3805a60b2

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 714f6bbe95ecefc02219ae12632d48f8
SHA1 4a17a17773b1d75af68c5fc085f34d4513abf90b
SHA256 ef901758374428ff16e0e8343f35a09c2426441c87f9f98a5c1457955ddc8e8e
SHA512 744f7c2c45674ccdfbc025573802ef28411aa585c4ae1fbc156a160697a59af985de28acfa5fcb7913e20a368ce80aaee37177bccb9837187743f6cc4671a674

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 126ad4a79507cd6c2c5eb2292f162112
SHA1 9b7982597e90c8cdbd4afa2fdf9f58922cb3cf3a
SHA256 8ef95d2864d6d46839d05ff4cb08207198d8e405fe4fce0de335f41d3854f867
SHA512 98fb27d92a6eb6b39dbbe37e1b29ab53faa278d7e25b7de0715d377bc3aedf52c18e685f077edaa6b27ec7739a5628629a44d90c0447ccf2a5d1dd2dfde9c004

/data/data/org.unionapp.jjupf/files/umeng_it.cache

MD5 8728615f8a197050e5171a133c2c8e50
SHA1 6e7db573c94c1d86142cd30781c167a7043eb9eb
SHA256 21d5492bdff9f58e30fb52ab5bf3d6b634fc416a4cb383122d08023be6922ef0
SHA512 101970c2928336afd99090ab8f15b39cc6389f5f64fc455f98b68ecbada4755a9096c340dd7334015222c7c6816567572e8f8c5664307bef12f64a7bc4b27538

/data/data/org.unionapp.jjupf/files/.umeng/exchangeIdentity.json

MD5 355de81bef06c85365173a470908cd38
SHA1 16759b5f95b27fd03bfe0cdf7b816ab0d95f7e3f
SHA256 accab8e2f900d944704c2b088e61b432f3c3911cd85699ef380972bde2951e07
SHA512 0c82671521bb812cd9ea005f4b13fc83c12cfdc270f109c7a464265cd1e6a5132e48ba41836141a87872378b03e2404bf4b0eb465f550be08a309d19c169b3c6

/data/data/org.unionapp.jjupf/files/exid.dat

MD5 695f216a9730f9d61d5418f3724b1905
SHA1 e25e02675a22318861bd407ae9af5c1ecf663e2f
SHA256 2d2e19e4a9183d14542ddb9ea06239e88015542f1790df67e30e53ae95c60424
SHA512 2e07c0c87a4df27b82cebf3548496ca6b86c35a36aa3da6903901725d419808a93a938c4f7bafb16c5520ab9c22a6bb81fec71ac7cf479a41917f118ed9bdb74

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-wal

MD5 15ae21047dd0013ce68017789fda535f
SHA1 f70fecd40bb4361a332a27bf85cc6caa4382c1c0
SHA256 3508a209340bfde73d34b4e0bd622b1ef7ccffb308ee72190e881d1bb2ecc9c5
SHA512 184ebfed50be672c1cdf6f816ddb360e5115411aeaf57e37544ac843e2171a562fcc7518873fb77f161f54a7ff1017d1763115e1aa1e3cb3948c6053186fd944

/data/data/org.unionapp.jjupf/databases/.ua/ua.db

MD5 d604a3bf1f8d992cc320ea5b1f7609bd
SHA1 247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256 329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA512 67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

/data/data/org.unionapp.jjupf/databases/cc/cc.db-wal

MD5 bccee68264be65bcc6247bad74857d2a
SHA1 0918b1ccd937e90a77230da0eff5228a5fae392f
SHA256 0b1d1feb71843814be992f04ac34d6bda38ce5f9a604b9b0be318f88055e35d5
SHA512 9b28e56e6e082c214a4577144ee63eae475023ebcfc04e2b141c3c097224f481b03de500ecfe5b9475be284159e52bca8215d417135c0cdd1fc900bc5d8edb02

/data/data/org.unionapp.jjupf/databases/cc/cc.db

MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

/data/data/org.unionapp.jjupf/files/.imprint

MD5 cd4cbf1970aa4a67005e7b93018d91c7
SHA1 5443a2a5df46a2c33291d54614e21101b85976ce
SHA256 8a56e3937e80abe1f576cff3ab5ede4cc601b33353109dc34315bc29ef47548c
SHA512 44aed5028b5efb37207f514378d60ddad10e08c9c76bde6e7617468f40cf027aca6b7ae956a38c6f3af346a3d93ac1a1363bd7e28b4a06bc074237f431800429

/data/data/org.unionapp.jjupf/files/umeng_it.cache

MD5 ae73cf63efcccebb20754ebac1fec54f
SHA1 7ecfba19c0a2b643c5eb941f1388e425b415d9aa
SHA256 2237a5d18aa0072b61c81de4e1e92b6d7886da91b83bad62b5cb1bef23557701
SHA512 efc02354e3db401ef71b6f80b86da8cac35731c179a6ce39f75dd41cc7f87509ddce2826319fb2b05cd4f1864f59432b6a6363867bf46333ec9b4989db98cafa

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-10 19:28

Reported

2024-06-10 19:31

Platform

android-33-x64-arm64-20240603-en

Max time kernel

178s

Max time network

188s

Command Line

org.unionapp.jjupf

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

org.unionapp.jjupf

org.unionapp.jjupf:ipc

io.rong.push

org.unionapp.jjupf:ipc

Network

Country Destination Domain Proto
GB 142.250.200.36:443 udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stats.cn.ronghub.com udp
GB 8.208.8.123:443 stats.cn.ronghub.com tcp
US 1.1.1.1:53 jjupf.m.huisou.com udp
US 1.1.1.1:53 s.jpush.cn udp
CN 124.71.173.183:443 jjupf.m.huisou.com tcp
CN 1.94.9.210:19000 s.jpush.cn udp
GB 142.250.187.227:443 tcp
US 1.1.1.1:53 nav.cn.ronghub.com udp
GB 8.208.102.120:80 nav.cn.ronghub.com tcp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.176:80 tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 121.36.205.81:19000 sis.jpush.io udp
US 1.1.1.1:53 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 223.109.148.130:80 tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
CN 113.31.17.108:19000 udp
CN 223.109.148.177:80 tcp
CN 113.31.17.106:7000 tcp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 142.250.200.3:443 tcp
US 172.64.41.3:443 udp
GB 142.250.200.3:443 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 139.9.135.156:3000 im64.jpush.cn tcp
GB 142.250.200.36:443 udp
GB 216.58.212.196:443 udp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 223.109.148.141:80 tcp
CN 121.36.205.81:19000 easytomessage.com udp
CN 223.109.148.178:80 tcp
CN 1.94.137.180:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 223.109.148.179:80 tcp
CN 113.31.17.106:7000 tcp
CN 139.9.135.156:3000 im64.jpush.cn tcp
US 1.1.1.1:53 alog.umengcloud.com udp
CN 223.109.148.177:80 alog.umengcloud.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 223.109.148.130:80 alog.umengcloud.com tcp
CN 121.36.205.81:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 223.109.148.178:80 alog.umengcloud.com tcp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 223.109.148.141:80 alog.umengcloud.com tcp
CN 139.9.135.156:3000 im64.jpush.cn tcp
CN 223.109.148.179:80 alog.umengcloud.com tcp
CN 1.94.9.210:19000 easytomessage.com udp
CN 223.109.148.176:80 alog.umengcloud.com tcp
CN 121.36.205.81:19000 easytomessage.com udp
CN 1.94.137.180:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 113.31.17.106:7000 tcp
CN 139.9.135.156:3000 im64.jpush.cn tcp
US 1.1.1.1:53 s.jpush.cn udp
CN 1.92.70.140:19000 s.jpush.cn udp
CN 121.36.205.81:19000 s.jpush.cn udp

Files

/storage/emulated/0/org.unionapp.jjupf/cache/image/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 a9afddaf54601f039c50950133b3a02f
SHA1 321779c42c20eba5214965b818ab92d9531b8ef0
SHA256 f166b838287c8e900dfc22aeab09053382e5e4cfdcfb463a8493d3bc4cf5503a
SHA512 abae56f444925583b15d47b22d0f029a27a7e562ada2aa8fc5a9556c56ba77e441299aa754a14c4a2430724dab7c715671facbeb015f9dafc40bca98343cc3bf

/data/data/org.unionapp.jjupf/databases/cc/cc.db

MD5 b986a138e325f9ed31653e246087baa6
SHA1 1cda06c101efbf7c89305f44b552e38282225064
SHA256 6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058
SHA512 5894180006885af44962dcd92c6f33a640d6080060a51a38ee4e348ee2dafe9abdcf2a931cfad4c395ebe20e08b96f810ca54b5b1f584fa232cdabc76be0740d

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 aa77247d20cd831d2a32b4ab4ca29ffe
SHA1 1fb3a068e7bcf3f8d7c49bf88458c4f77e5a586b
SHA256 4e65bc242c0e3340084ea302178e83ebf84dc198028aa74ab635ea02b1b86c2a
SHA512 0f43d3ad213e3ee636d1b70c3b77366ab2834a4a3fe709909c9324b1693964c6d4f36cf7b0d61c2e7da3af6f05c58faa4eeecac79372ae9a015c47fcb9f11237

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 d61671c1d8be984523c1ce3f7638f1c6
SHA1 b3af35d6de9ca01a374dbdb0be5aa0b63b37e0fa
SHA256 80c764f546cd20ed0f858a78822d667fce498f72a8e03a97c9642ae66beed0b6
SHA512 8627b131f79477c78f8c56060674e0612242d1b96e39d77524b2870198d2ba4a824cd59c757a9d8eeaf54ebf498e8935417a42a3d2f6d5fbd093517c1ee25458

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 689f98ef17aaa9c6ed20cae40602e49c
SHA1 27207b953a61149ca2a612a18b3a1d8b2d4d0c05
SHA256 bbfbb8641fd3195020bd6f127aa6f08e4c9927a64546d2f949f76b09f55855b7
SHA512 24ebe63b39348d50d747e2a1ce9f10e720e35497ab1b2d476c6d14747a06e1625a598389449fbe94a711f0edfebd42859de851dae8cd17283461a9f5fed17278

/data/data/org.unionapp.jjupf/databases/.ua/ua.db

MD5 1e180ba916d4bfde2355f75727832b62
SHA1 4ff7f04092b9dd6cfe07e91b3f9d2d2f5e4a8357
SHA256 1ab20414cdbd42c42d60ad804b41b840135a5cc3764378dbb11a8ab5b75c6f4b
SHA512 9b189ce198989246f6673b961d7495f5993c4874a702767832eb184e74c820f485a3b6492623931af262b393496fa248ec592bb37d5f53ea6ef027cd172e99ca

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 3ffda4fee19015f1a470fd8a9a99a0b2
SHA1 cbcb547b4c072fb3d099d778021eebe98c3d7f18
SHA256 1e55770ac426f915cdf1ba29eb7ee492e4349a9ac0211a3be7a6dce3790bc5e2
SHA512 b802baa83a4e12f524dd664225e6db5b089f61554fcba87be003d346f96797b2045a0525fea246ed5ebe9210dca2be1855a88161069e858cdaac82715c1a4b14

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 0a9bea78aa6135a9fe4e0c488217772b
SHA1 b57218023ba5c8c2168eecd375efc436226925cf
SHA256 2f528022ec42e6f06b6d963ec115ad1bef1f70af45cd2ebbe1dc5e3bdb4fa8e8
SHA512 d314bc1b0a062792092e1af76ff3ce3fb2f6437bf5d044610893c1fdcc0d8a7dff75b2c8f4c3ed428d020d78f7a99ffef03213944e328c9bfe7120de87c70858

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 d05a3836cc396a7c475daaf21986dbcc
SHA1 6becbce43861d8ad35c286b22d79bd950bd7b735
SHA256 59d33313f142f6d840b7aa4f767d4fcbe6412c579e75268ccd593079ed2ad857
SHA512 113ac6d4565b1ca10095d3a8f91a2a4fcbf3c0d3baa5f3e111f797d202d1b13dffee1d5c0be85dd4a849c39a891d3f8b9b5922e2ac28c1b8687480e86f40e2bb

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 be1a7c20b2067861a5bd999623904292
SHA1 b017dfc9db69bce3e24bf140492935efdfe97642
SHA256 0da4a3d19efa3c44894a84d0b9805d5e29d66601a52fd6f3a60a7008fd240479
SHA512 3d01d5f5312c04375cf52425a47bc01e0bc3c7462435ef46ba5b518f7607af55c72bcbec040e703f51cbe2e7becef03d9ce38c734f758760f29444ad6669570a

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 7cff190179e94d82669054aeece8c066
SHA1 e31b0742fe6c722484dfd2a97938332e4cf57a9f
SHA256 538b2831923187a37294983d1059bccb22a407ec7693f61086dc1283eb130c63
SHA512 5fbd4e181da81163dc7ba746ee3a9963838809b5ff88d44f7a0d35d690fdf8639e56b72a5e222dd2e471bca9a352be6a71b120529ca5b1a91aa08ba6f44ab40b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 571931f6f99579f230550dfdf742c357
SHA1 764700c0a851bd34a9270b5ed5ceb6afadbaa505
SHA256 eb7cb9891b7716d15034f2ede65a21fe8c361d8fcc5602d95f072af6782ee547
SHA512 3f9f63c28a74a8fbc813c351c7246df62d445fbcb01308c6b11887f80c1074e5b0c3d945e681f3e21aa9c7d8ae92f76d78a4c37b9ce30000df1952f94e513dd1

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 f6e60583ef356ee0f604fd99d4d41a20
SHA1 0d912f1f3f55ea7353c71d4320b65d7d12687eb0
SHA256 8c306c72d384d5005776be64d8e47023a02d24fcb619855447d64a1b08ff6b3b
SHA512 9c0d75cd01d6abdc9c463ec546271768bd8eba20aa3292ad79d6e556296f60cc41c5a9bbeaa6cc25148198d650bac778c02089f42ac3435f90c631df26f38d20

/data/user/0/org.unionapp.jjupf/files/umeng_it.cache

MD5 b1830f30e84bcca96e19f6ba6940d562
SHA1 4b9b06913d2457775c4a8973cd9115e15d843ba8
SHA256 28af9e11a0348a3520e93b642c17abd744c461560accf083116a540f08f89869
SHA512 6a34c5fccb4e796d95e33ed3221d5bfcf0ac38c3f6c55eaf55b21a296beb197e7e7a83e0df76b4476176593378bdd8684fc3fe5e8b820f1a8c871ef77416ab35

/data/user/0/org.unionapp.jjupf/files/.umeng/exchangeIdentity.json

MD5 69360d733a16d98047b814d0d85d9781
SHA1 89ca9037ab2e6700949e838c591dcdd0b2f6d1b9
SHA256 fc55997e3db9db1215ebf88648a2894edacd67d7af3023bf9987cab33e009596
SHA512 f7fb79ae6eac989c48a86b89b129446e7348526ec73f461ab65f2f4939feadecf4e6c7a3f316fcb54ea97b536fec974fb6c6ac9f7e8fe37bd122592498e7b377

/data/user/0/org.unionapp.jjupf/files/exid.dat

MD5 695f216a9730f9d61d5418f3724b1905
SHA1 e25e02675a22318861bd407ae9af5c1ecf663e2f
SHA256 2d2e19e4a9183d14542ddb9ea06239e88015542f1790df67e30e53ae95c60424
SHA512 2e07c0c87a4df27b82cebf3548496ca6b86c35a36aa3da6903901725d419808a93a938c4f7bafb16c5520ab9c22a6bb81fec71ac7cf479a41917f118ed9bdb74

/data/data/org.unionapp.jjupf/databases/.ua/ua.db-journal

MD5 a5d615aee9444b39a5390547ebd40c0a
SHA1 2c6a766ab21aab39d6e14bd521e44d9f34087b01
SHA256 ec1ca2a6e206e1d137e2464d2545fadcf9e649b54d3399ec4416f955e95d6ea3
SHA512 b7600a2678b8fc1e64047e24ab74813fb68e49e77d4536b361b73c70a532e9b9669f6add0f02d75c78a5d316dd4e053569e53ab308877853e10e6c9bc1adadd5

/data/data/org.unionapp.jjupf/databases/.ua/ua.db

MD5 17bb57268badc491266a2729e57b37c9
SHA1 ebcb029dd3fc1f70e210d93ab3086bbd5d39e3c5
SHA256 eda21e9bb4ad31e62a195d99b6e8e7f361411de6ae8f3049537055c8e688f837
SHA512 a4a6b7ef13c6d81777bd583c1a96fdfc735b7aae8fa67d9502807d1e150784abad3fec756af3f59a0f9086447b89ceed5fdaa726e67682915285beb6d23f2182

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 15f33c296e711122402fd9c338153f8e
SHA1 fb09e4191f661734bcbeebe8f922b040be14d0f6
SHA256 a23216862829ef18ad4be6f0fd3b5d3ef174ec2391a2639af4000ef7e21a7b8f
SHA512 67e1b2f9d85fb57c455807a9af7b7747531c1dd27700b46d7eb2a9a07ec8c30075ffa3078b4bba1a0124ee6ed87a988ed260bc3f20d71282ea36bb7eb55e8589

/data/data/org.unionapp.jjupf/databases/cc/cc.db

MD5 1b77217d803a7c04af9466680b92d104
SHA1 0cb959f4773c6730e8aed5746706c0f3ecb35c1f
SHA256 66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3
SHA512 39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 f392977ad4163aaa47127e9122be3b93
SHA1 b6b9d1c40e498b08a74b0d43f898ddde8bf6cbb2
SHA256 06faca11653a9125ecce9a3590411cabbee3c38325c05a245dae8f453f37cec0
SHA512 3155ec92b93ed2dacf58a3617fd7ba2aac981f3ac20cda9f5ce74e36521c913c770ff60af609bb031ce8915509546810b9d31c4193fc3363c55c2f86fa7658eb

/data/data/org.unionapp.jjupf/databases/cc/cc.db-journal

MD5 4c5da9f62084e25329454c2bb5581c2a
SHA1 19b7bca46504c64866484fa69a247deb8dc5d950
SHA256 c4349437657e4670e8cac529d44680e14405344f02ee503cf625f685b8584c5a
SHA512 5d2049a065b6354bc3ff3613541a56b094ddbc85849eb568895cd1e488f74b65839bbfd7d87ec663ef03fd10bf17ddafacf1f345ebaeda4b7fd58cb52fd34241

/data/user/0/org.unionapp.jjupf/files/.um/um_cache_1718047835658.env

MD5 54e1bb01aec37c1438971de64ad4ffb2
SHA1 7e0dab58dd4cc9ef302ce8279c042ba9a83fe49b
SHA256 f90505835c45ed95d15bd9482c3e15ac2d2c6c38f88064939c63c54d803d420e
SHA512 527ce1a687d0858c64fee276dee03ae94c17cdd51fef53f10d980fa7f78031200f960b768fe24cf3aabefad064152d4d5a1fb22c5a97857794e71af07dca036b