Malware Analysis Report

2024-10-19 13:17

Sample ID 240602-pwl9ascf5x
Target 8e1c263109c7f31d4015a90d63eeb435_JaffaCakes118
SHA256 424a7cdc136b38cbb0636c67c43cd510adb207a050a2862b48a921cd113fb5be
Tags
banker discovery evasion impact persistence collection credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

424a7cdc136b38cbb0636c67c43cd510adb207a050a2862b48a921cd113fb5be

Threat Level: Likely malicious

The file 8e1c263109c7f31d4015a90d63eeb435_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion impact persistence collection credential_access

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Queries information about running processes on the device

Checks CPU information

Checks memory information

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries the unique device ID (IMEI, MEID, IMSI)

Checks if the internet connection is available

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-02 12:40

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-02 12:40

Reported

2024-06-02 12:44

Platform

android-x86-arm-20240514-en

Max time kernel

163s

Max time network

172s

Command Line

w2a.W2Awx.bisns.com

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/w2a.W2Awx.bisns.com/.jiagu/classes.dex N/A N/A
N/A /data/data/w2a.W2Awx.bisns.com/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/w2a.W2Awx.bisns.com/.jiagu/tmp.dex N/A N/A
N/A /data/data/w2a.W2Awx.bisns.com/.jiagu/tmp.dex N/A N/A
N/A /data/data/w2a.W2Awx.bisns.com/.jiagu/tmp.dex N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

w2a.W2Awx.bisns.com

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/w2a.W2Awx.bisns.com/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/w2a.W2Awx.bisns.com/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&

sh -c ps -ef

ps -ef

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.204.67:443 tcp
US 1.1.1.1:53 service.dcloud.net.cn udp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 wx.bisns.com udp
CN 39.108.249.247:443 wx.bisns.com tcp
CN 39.108.249.247:443 wx.bisns.com tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
US 1.1.1.1:53 ebjvu.cn udp
CN 112.65.70.244:80 ebjvu.cn tcp

Files

/data/data/w2a.W2Awx.bisns.com/.jiagu/libjiagu.so

MD5 de685970891708f6edfd18f03c6557ba
SHA1 ac50f88327652a72df73d43e9260faf169283c34
SHA256 b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e
SHA512 cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

/data/data/w2a.W2Awx.bisns.com/.jiagu/classes.dex

MD5 922ea7e8b43853f6f0b7227654d3335a
SHA1 e33001fe83d7009747512eb9207cb64ec7c5c5e2
SHA256 db45a39cad4bea540da0f4d96826fa996c13b8f740d307516ad8bf79c77e4f06
SHA512 e87924abeea12a90ea822d7b22975f3b690136adc66c35536257314dc8b625d3bb1c89ef44a8b3a87ccae87137324c502c4afa825bd83554ca3175dd58aed423

/data/data/w2a.W2Awx.bisns.com/.jiagu/classes.dex!classes2.dex

MD5 b1cb6a40c743ec5b4b2559e41eb81529
SHA1 736273a4c9152517cdd9f951f9eb526ee56e7bff
SHA256 aced35544c143f5e7bb3b3f054ebc682fdaeff3789cae2df8e9986dfb98c27a4
SHA512 8d16ac167c883df0e67e01b40fcfc31e33075230bc5b7291b091968415774a0385593495bc0ec9a452e73febef5fbb50d95475577808e82831f25733ccf48643

/data/data/w2a.W2Awx.bisns.com/.jiagu/tmp.dex

MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ri

MD5 fb93e6f678ba374194e097bbbbc331ea
SHA1 ae40b40cc8931ac604c737907a3f891a02421c79
SHA256 07e1f647f437701dd43fb0c209f1bf7734297e07e1ad76761ad5c99f159feb9b
SHA512 6c6c2cddf323c21861b4b073b77e14e707ee6821e622a3b017ee6ac33595e579603a7f533abcada272e5ee9a78c9088915beea361a838835e10d1aa0150e8b46

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ri

MD5 1b68db400c165edbbba55e35ffb4ce5f
SHA1 69373d7695f6c56ee5d5174aa88e95f8b3aef798
SHA256 8813f2a7168906a982a21d1cb0a1a0def845e25f151362801aa8512a7e98bca2
SHA512 337db00cd5e3c7fe751d15c5bf44a2dea34805682d44d0906f7e3749873fa962e4ac595626ed44733a4d192fc764d66164ba197410caecc1dd83884f25ac48c5

/data/data/w2a.W2Awx.bisns.com/files/.jiagu.lock

MD5 7d0b08686720bea0a24574a5e448b810
SHA1 6ead9cc8b43a4ea6428503579ac63ead8366830e
SHA256 93b0b4ae82f92eaff35e7d83fcf2ec57049bd427ac03d4c1195921d487174fc8
SHA512 289131c9fa4f9a43ad8909f8789a05583ce41d393a01ff006f7172ffaf949da3a08d42aeea4ad37733a4c55ef9fac0f7de40554a8e398c813614a363d3b4e7d6

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.rd

MD5 fef745d39cd4dca7e4e53f7bf2f34dcb
SHA1 141cf1e841b360cfe50caa32c29f82e10694cf2f
SHA256 0596b8aa378b719608bd4fcc460caa3abfe80a9be1f275268e979fcfb50e59d7
SHA512 8f5341bcf3f9a40dcaa454e1b4cfcd4feffa8ef5fd9a8e54ed8102a2560f7e058180c5664646b012a9cdfa6cffb9db54f2733ca7d0d6b9d2b632245e44c58786

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.store.report_cf

MD5 449e5c51bf6a728872d3cb13bd114bd4
SHA1 e03e8888bc96fa1c1e539a9ec02ae3083fb77c16
SHA256 64a4ca805a3e6ae83f02fa68ae2b9ba9e3943d6038b491b4195917e77353779c
SHA512 74aca9e07c3ed5f68f37a28e22b2391d1826c0c843bad7cbd96407d565b063e06c56e40e10ccd94b57eb74db2bf359a2531f8f751f88f7f11bf911ce6d6e9c09

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.store.report_pid

MD5 058214cfc80625de1172b309a2c92f67
SHA1 1ed8795042e3612ce2c1cc97aa12e29af29eb78b
SHA256 cd0b5288914cb77b2e830b276b42f81c952f616d780c384f3aeb0547d376df8c
SHA512 39e9becc7029435ab262d5f10fe00ac42ac264abc73ef0c6e6256dba23e8ed784b35ee3c40aa2fdce0b5a4cb981013429392430fb4b673a170011ca1e32c3d70

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ri

MD5 2625c02d0333b9f1f12717d3f20cf236
SHA1 fbdefa1ba97b393d4aa2f45cc6a4754d7f0c64ba
SHA256 a3b050f69a78c7576a40ba41db15d1257f6f3947eb990913c542dc81a13c598c
SHA512 6f7fb43672d814edf627e7a3f5a6f5a0c18c124ef4a1cec24a925bc2881953244c5a7e3ff604d84c2d35c95713a01bdb081485724fb7dc3ec2ce109e5e6b45d8

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.pk.h

MD5 0411929eee033aa8298ffab2241754fd
SHA1 52633337056566814933e27a76bfc6f2932d0c94
SHA256 6bf29f9ca16951454477347ebd3c369616c99d572961d2762e9efcadb380e5cb
SHA512 d652170508d0f1b88feee7047c7ea49644d466b5d6be12e52c3b0a47e168d0f5eac57e9d18d88bd35c96ca682a2a9d8542767a8564feb31d6c60aac640f90499

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.pk

MD5 9159daf49d6da5349b5b0e32d1e8c1eb
SHA1 aed3561e1c9994157450d660ff0741377c5d99e9
SHA256 912cc51d96759129c1f5f1400830a7d2ce876c0c25975a38b1abc3e53a2b6717
SHA512 01d97ccf05566078fb28e698b8cc4564f3fcd45e0829d87345baa2b5c2b79c8d78ee8341cd990e7dc3515cd7569154644043f6c31ae144f0afd1e2ccbc3fd34b

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ac

MD5 68bd93e12d8a766b00abaecf1a6b0217
SHA1 b13b752202d40c30a33e2ae6cdc6fb9a1b51e9e2
SHA256 50bea09b34d09790d4f8d925d1af18dad50e9887045de27cdf261cc73b7195e2
SHA512 3bd9d3694c298d83909d3297d873fc6a356804a335e726e5fc3a2073e54b8a7af62edf8dec667681476546dfcc631f0c0667cc685df607560cb556c6e3dcf5c9

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ic

MD5 f30474969a8bef0902927c1933ce3966
SHA1 7381f4c642be49ad2313a99b5e684dce78cbbe21
SHA256 f28a61206805f7b0f2d311510b021de7fe734c3b3b485ebcac01f8450fc47e28
SHA512 d43aee2ee53f6c9c18f69e9163a6410cc22bc1b9bbc7d4e8889bdb01d01fbfc505a6be60f5cfd080529eedcec795e070fd94373066f4f59f7937886d5903fe01

/data/data/w2a.W2Awx.bisns.com/files/.imei.txt

MD5 56d663db866d1568cb9175d211cb81b4
SHA1 0a61b434187ae3c445c7aedcf550e6c3541c3f8e
SHA256 17612f2beae4220196b973fe59bf6ccd8ebbb5e01abf63379a42716226f94e33
SHA512 4acf11d3665c79d7052d54517691af2c990b75d4b7f82effad07876e8400b9b04037bb24d888fea2a5bca11ec33c52cf8c3f10a57c0a28887493caff0deb95d4

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__shortcut.js

MD5 4cc67d73b280b1239e0d3ff5fd8320b4
SHA1 0969dba11e4b0bc4c5274628239ad01cd24f177b
SHA256 0295b03e168249702fccff78b03f20e7e8beb760286b8ecea910438e4eb9fdc6
SHA512 267843d4e562076119e9ad0dc91eea74a827b2fb1d0a1058cbed225ba6e72003c6019fc2b6da9e55424b5baa33a33a2630487ddba4de7e1cc73af620c30e9cad

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__template.json

MD5 51f5b075629871512903e0b52fe83dd0
SHA1 fa98563f57009c6c449aff18d0ba41ccdfc5b538
SHA256 1b355863045b34d4f4f5c4562ed0b1f256fec4c71a603a472d92f9230e1f8be3
SHA512 ddc452f7d2083ae0a946ba2cef9caf4217bfb05a0d6d5fdecb6e8b81b87f70b6fa25fda014941c53d3e8d3f368b882d8b4a24b40018b3d3d28e7177580ee4c00

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2app.js

MD5 165deb1739411c87048da0ed0a5303c9
SHA1 429bdb74689f4cda3a286c25c8088646bc587afc
SHA256 7802d3ce5a8991a0887c76c78311b3122de97b49afaa4a2e222e51792ef212b8
SHA512 8bee94d6151a26f62cd737a5299f882980b64f8b0386b85a766714a1d957c91f22c1830470959513e918ff4b04e7d7887777a604922bf190a8409e8c716b4093

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2app.ttf

MD5 95e605877ce5ac89b030be1cb8cd5a23
SHA1 aa2c4583a3934ddccc49de2b11286198f0e09f62
SHA256 fa82d37dd15c712ea5b2e9d53f1f29395de28158a75ca537bf5dfd3761db5aab
SHA512 cd36408dcb7e4ed16aecb3c36a03e27ceb28f924467c8f97cf6aba42a35913ec4038c8fd477fe5e180c6e9d130cdf7f49590a13e74bc30c27953a7c7ce948b13

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appbrowser.html

MD5 f37c3c8b41b76eff1c6d98aca40dc0a1
SHA1 ddeffbc4c7b3958a29306d889579bd367acdafcc
SHA256 c17c9fa9d1443652798ead675193629bbda3c285e60d6fe8a0b5e2e39e05ca03
SHA512 cf77fb0715e2f00773acc6058991ac5e4c314d85ce879feff74ef6f7dabed42182b54b84af4be8a9e508eb3b0ee6cb5f87ca004ea0446c05c3d579a606cba478

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appcontext.html

MD5 6f6f2b25ed240fb534a8737fe675b371
SHA1 cecb50311db62b17830a53ba1d501d654e1da1df
SHA256 3eb57ce77cbeb3eb30a1a17c405c9ddbbb9bf82b5c2c87ed31f6f479793afb09
SHA512 46f3d7c20a0446a39ffe3a895c55deb3ad431cc5b89c529d4db127ed20ee37c7eb6f385be36371955103475e116b3547ec76ad4f865ab91a77cc9bcdc0273e3b

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apperror.html

MD5 8bd6e5ea9a5c8a199e343c37c5438a33
SHA1 6cb6bce59060f6fc059c41e1874fb657cf8b6272
SHA256 d969a084059966b4fcc7a090ce06d45493497ebf6f6be97bacf14cab6756d268
SHA512 8f7b804f4071fbf0af78be3004d056f020b63bba6a96117707faa20b9241b9ede25774a6df0c85807483e69b7a4bf96a6b6134ec0f7958b26576cd1dc6294e2e

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appplayer.js

MD5 9e296fc129b4247f5e086a2a36fd5c94
SHA1 e89c875c5627f9321d24a91913d5892fe5189b91
SHA256 38b381c6b5fc3ee1136beec3db912dd71e0786cabd90f069c0b4ad6b7b310792
SHA512 febfdd0d8c5fad94a69253f34bcd46699a3ec9221e9e2a11b22fdce95ce7d48ff5f50fffb2b073c43f418c91a2c93910d5bfb4d2a9a44f2ab015e5471c109259

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appquit.js

MD5 d5bb915218acd49bb77421da4375fe3b
SHA1 510913f958d5eb1bc6e56b8a3c9ccec30dc93215
SHA256 655868bd3bab6196ff736ba9b7ae3acbc614cc4a2839117cc0f5e58e27bb7de3
SHA512 00ba96947c383c3e2a6adf6f4dcfbdc3edd0d4143d5ec567b667f8bc9f3b8a50402980a62e278593ec06b50d304c4aea8a4bfb3dce89652c6a33b540429b1215

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appswiper.html

MD5 eb5f938650308c63a3f082a5b1e3382a
SHA1 08ddcdf824e285921f1b43faaebc817514fc9345
SHA256 72d7ce0d6e3b6ded505bdd9f279ecc3262027d40d6222fdee2749c9850f46d65
SHA512 50a8859f1f3c7f71a1c03d3e547d53a189916f4574c61be834bd877f6a6f52e1e07863eab2a7a9387d1f52569eca2784de90898b3fbfdfdfab1239f3f5094961

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apptabbar.css

MD5 52dbbeb73ea1eb43eae20cce83abf9c9
SHA1 945c26255dda4d4f1dc53e080bbed91484d87a9b
SHA256 e613d71151b2c01b697f662e3f194bcd60265c767bef9bd49766bbd54f24b019
SHA512 7cbd9a4f3cb3a70d0b487aad9043b357dfddfdc975d830d8e2bee8363a96263c885671a72adc98bf64e2627108bb47bfdb03b27003ba2b24233b41c49017c30a

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apptabbar.js

MD5 ef56482b6a5bb9544e8025d27b7a3c95
SHA1 743b075843bff1d3c9fe993e0681a47ac66f7b68
SHA256 74f86605265a03be3a48a7db37e4dc8a16acf660c92716f77f3740c3f7610ac3
SHA512 0e54053f3119a30c7f33feb950b3d44509ab43f57185f4f72f22ae9685c6d92233856404c2e7d7aaac813fcf118f4522d0e219eb0d9a67e36571e5563a4b2525

/data/data/w2a.W2Awx.bisns.com/files/cnc3ejE6/eje3cnc

MD5 7769d4507985f59116153463f09235a2
SHA1 b081e84d14300ac7a7947aade9c025fa83bc17fb
SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
SHA512 ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/__wap2appconfig.js

MD5 c9b5eab9f145bf3df3fc84de03b142ae
SHA1 08abdea601f2063ab62f3f7502c5000e757fa12f
SHA256 3bf425757d926f6e3c9dc02802949a1ee5dc47344df3980ef7a8bd79f7995a87
SHA512 e22f549b80e20ed021b1d441e5a4b4ad0c43a10e0cc05c879091a778b9ac64a0bff737310df536186d6c98973d7c146f09dc5e481f14ea68c8efb7aa199f18ab

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/barcode_scan.html

MD5 322a200e38ba0650f60f327fbe514e7a
SHA1 5116f53cbab2eca54257d8054d6459145892467a
SHA256 d845d93c3e108bb17c41b193245b765c4e868d5605b7ad3810cc8f9f12b3a3e5
SHA512 b76c996fa0a27cb2a75dfce408485b23776fabb49b87cb1425233f42bcb3e48d2dd452f33485d920d76e8e3a2c71c726a47ba31d2a402c00d0869c2eff861fa7

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/client_index.html

MD5 bc012fbf2c86143cc272f9816efb29db
SHA1 b87fef93718100704e0a43fbc88f5705afb6c22c
SHA256 e7cd942f61f6bc53db53ce7444a11381c54f88492d92f5daede589757c3615b8
SHA512 d296b13717d2d4ee0297d17ec87d7bcd850dba244469ec19bb0853e67d1ed99ec0762b6316dea0749bbc16f3de71c9be40742070ea79c2d349081e71d7ea49fb

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/app.css

MD5 ea35482c13d84b9c751073e5f0495e25
SHA1 955d754d90e1fd02b6d6e25cebfd98ec02800c4d
SHA256 dae8d62a706790c62958cd821fabb3e9ef0dd04e34126886a425eed49c094e1d
SHA512 35362164d6eda6b016da68d67ba379a4ee76681ad17f5b7a155305db968c58d0cdf5671b2c941c7d05704501fb0620b06a1cd88dba161980a1b247ddeba0cc80

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/mui.css

MD5 38260f9edff7cd3b9b476d0ebd4b9e5c
SHA1 a8c0b36b2ed493a44fb56dfa058233a4a68002f0
SHA256 f70806bd6c67e0444987a5be83bdb21945a4f1b8614a8bc7b19895fa14071f64
SHA512 e0aa3aa0f8b0fdac836c2093c33e7c8bb580399d03d04c7349e7dde4540dcea9c75da04a448ca29c4b3a56e006c9b7d717dc1c67e4fda837b1061b673498826b

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/mui.min.css

MD5 0363a68c9461c903cd6758e5cbf6fe9c
SHA1 a82e3b51f5f53ee0d9e39e40bccd7af35d540521
SHA256 5a285ee9a47c0ec91babc9fe59523f84c2754e0812f3d7665e2db51c0423492f
SHA512 7ad7272697da1ac02d293e1eeb20ef4373414b7c2c96b5c18ce73a305c28b8a517186a89bd4c5f040d1611f7e69850a0fd1cc977d08c00a8a2c0a225875c6567

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/reSet.css

MD5 94e1e9cc04f110f40fb45260916c9384
SHA1 5d9ad0a095aec57aa9f9ae17e015e1b983da93cd
SHA256 b3f9419a8c7660ddb3783f23371282ed1db5de32ed68e1071885336440555b67
SHA512 848027ca2254b0243295ad7b13eb7e999bad02fe03afd1f77628fe5abfeda22f7e8aeb9c70209f822a43e1a21146e476ebfda0c2d696f2e0ea67a06d481525db

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/styles.css

MD5 0764c193c6b63f1b1c1db88852ef10c3
SHA1 b3c6e2e6779f17918a1705e31119486a006e274b
SHA256 8b25fe0d3913efe7766cee3e638f79053c336b3eab71cf40e25dd924c9a90e00
SHA512 80d35e902e2e69da8b12f2e120cea298efe187a5c9422c50d0f3a0aaa6e614d00a16268af6fe7bd8cc4b38e73c33c9ea09b91c873ed17b541435a6bc2279c958

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/ico.ttf

MD5 1db9b0b9987f338cadd88d5d84876266
SHA1 3f83f66ad467e8d68e3fdf1f91ef9d441aa1f422
SHA256 f2c44dbe7fad3cf6b47852d570fa4ba080d28248b8ef97269fafde9662080b92
SHA512 0daa8622e7454c8b34bfa2994d34e894712efafe4d9a6a45a695dba6bbaa992be2e13908161223a4b03305c9eb87e9ff155f68486904de028a263d250fb6895a

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/iconfont.ttf

MD5 df269320ca6ecdc33ad50b9f06ede5ab
SHA1 7208eefba94ead27023a2e8946d45c3dab33b197
SHA256 19ef3e80e836f5bfd6642e9d51ebe340e77f66da4327096754eedc725b7c1eb3
SHA512 e230911c60eb4bff0231fcb2490d45c859e9916e46c20714f4096374539c16242c5fe267cc2388de10c9540f9a10966c24e9dfb7aa26fedfed7e5b368f15b57c

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/wap2app.ttf

MD5 16404c52251b4e1f877e43ae840e395d
SHA1 4b6ecde9bdb051fb1e05a40cc4a941e50c1ee943
SHA256 1aeadd260cdeffd98a9da3ec763bf83b8ed54f6439b31da2404fbcc8823dc719
SHA512 24a5bb239f87ac886688ad81cdad22065bb60afe768547154f4f404c6fce69a46a82c239107889e6f147fa7f0134e2c2696209671459b51f571a5c6ba4cec846

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/background.jpg

MD5 99369c319ea20d925e3fbfd9520922ab
SHA1 fa17aff10fc490b0acae5b08cdcbafd610541696
SHA256 a95617f7f59bcf2902dc34a3ca9d799532316309e126c79d5570fc5be3754681
SHA512 3bd9de3301b3144f506cd312f5c1b7735873b633b53aaa7f9f705677cdca3490c855d8d12e13294a1e11ad9efc1f7fe2c85e1d36f108e331fb5f49d574e87816

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/copy.jpg

MD5 6596b11a1402dea4f87389bb1d613913
SHA1 49eb02c7ef723f9f756194b563254f10f740baef
SHA256 3ebefc35e7b13bef11d822db1278f2ef71727bdea7889aaa62ed19625a5bb632
SHA512 30fcbb92abb013d5eadcfd104704d055eaf66a51ba812ffc1eb5af1862bf8e428120f4f8747e7ab27dd8eb9621a5d5ed2e8b1cdc0ccee6812319f9011f149321

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/java.png

MD5 f6b150ac7c2cea11d12e976d7842cd24
SHA1 0ea1a22bd03404228b08c6d18631c2f63b2c8373
SHA256 ef247a6a89bb5d41f8e4ef6c3dce580e2c3a68766765a3798d82794913ee65c5
SHA512 4d5a7aae1728f7741c2eb6e89a7d75c1ccd084b2a7568775a5547a7984f6e7ec0fa0c1a6092eee94d590b50cce606fffea214502c887d16bfd659312e553fec9

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/javas.png

MD5 556ef900c8c0c522a138d5b04ffef452
SHA1 3744d39d5103afe2e8ccb03c6995f1e7d0ca7fb4
SHA256 44856a3cbe52442ecb1ad0bcbd198e0b40b5d4b569de09981cbdaa64e99f1810
SHA512 24a272502f83f0de42c3dccc51c5c768a1a686d18073e16f8bc9b7114fa1dbf37dfc2e32287a48af9d4d86950171939d60cacf94e370850a84360f80f5709648

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/loading.gif

MD5 97cf67ffb0edfddcfe4a9ded194afe68
SHA1 9c35e7d650d4682baf7c65a5e7d60ececbb556df
SHA256 29598bf65bb763ffe48f2b5b56aa03d1424f03115f4ef497bb1e8ed60baa70d0
SHA512 58386bcb21c0720f5de5fbbdf4159d22a448a74b877806d1a8d7d758b5bf94a881887dead8409412652e875207a88f7a046671c7612ca8629a60db58d2ea15d7

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/lvse.png

MD5 7b19c6bff6266dcaf384f39dd8507d6d
SHA1 7a23408b85829615f84b3f9d076f93364fb1c80c
SHA256 573c528a48a1101cca54c1e09d41541755f42db2c5106dcbdcf083bd31448ff2
SHA512 573c5824eb6e311c23ad543569155237f4f3134c2eb4e2f758cbf8d513382d9f652cdd8b009a1c9ef328394889b5fec2c21537db7ebe63e0b1f1d8ef5d756a8d

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/more.jpg

MD5 6d619ea7919364de6ed4077832fa8529
SHA1 a0a13bdcab841dc1e7bfd98f3f11a70294effa68
SHA256 d45ce407bab1bd6d00eaca0d3c2b95cee1a69057a5cd3b32764a68482aede850
SHA512 725ffd73c9f34a83fec8e7e8f4c192d2de150454540e79a2740a8c9cb4b7ebdb15b2c062e2e7c36bc4ffb977bf84142c6c9f118ad12f8fa9ed0ee8c9dc3c1476

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/qq.jpg

MD5 8224514181c6696bd15bd010226df049
SHA1 6135e3e054e2ae98f28fdbae6159bbba9cc2fda1
SHA256 8553984b468d1966f7935236d40ee76bc40bbf087c2e5318e2800702f28798ad
SHA512 ab70c97eca2f727c1f17485e38d28572e1b94a64da91200647481205af3ccc180ff13445b14aefa67646a9b0aeda66e4bccf424649c417c440c8c90b8878da4a

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/sd.png

MD5 01020bdc35cb5e542d7e1958a01fa7b1
SHA1 b7f4c3c0297d23fdb8ab173531f0c0971b345a97
SHA256 3e9ec21438cdfde21b47a9afa602039b0bc89a296a97ca5f6c2d3913ad6bd571
SHA512 b5eac65d46aafe84e5e2c5f7f615a6e32a023a7a6aa9bd9cd9103deee3bfa92cc0ab46cdd079751ee3bbffa8bc425bbbc55a4d8832c12426b7f680286f9979d0

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/weibo.png

MD5 019c002af3d1b54350c7d11b6cdd19b9
SHA1 1f9638ccf54fb9329ea27f34af85cc5c9e0bd1bd
SHA256 c0613fa64d727efaae5e62881407520d916b549d4ea75fcd857945ff426a8bc2
SHA512 4b3e0d7439c052a15ad958f79d8e22085a387a9737c9e90de2c5f71a5fe6df49ad78469351532d435f2b18584315fd499348be6acfa29a4518e91f8726fc120c

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/wx1.jpg

MD5 4a783b86aaa99fd817bf7032d8e24b39
SHA1 406fec215c21cd4ff293ad53da40b4ea8b933228
SHA256 3ceace4c2d8181c86e5f3d858bd6308466f2c249aed12c41c28ca309f1f3b4b0
SHA512 73317513388e4af44bd4183cbc17505b89220a6a34f6d2b47c2b52e6a5280e451d77d878509404ef6ae1620d85d567859709c919f0acb5303cfa796d8d0a2420

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/wx2.jpg

MD5 02024f1e539c3df468ac1ea9140d1b6b
SHA1 187cce636d2929c59394e6fee73e5d52d5e5f760
SHA256 51140a0b1367190f2d48212906be58b91232a4c8550e39f983667fc3c37dde76
SHA512 86458db8f721403f3bdfa49ac903bfd979297cf08d6c0882c011d773bc2c99f8125d994fa8f01d45706b1f5260f6dbd2ca495d03562a6d57a2c73cce52e38326

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yue.png

MD5 becf1e43e476f71c016ac4a70dc1aaa5
SHA1 c153dc3bbc1c96e9d6bbbd52980f9af6718b7b1d
SHA256 608ce3319a0c925139e6d6740c08b22e09a1600c5e986abc8d6e73d835d00e15
SHA512 4cb2e95ddc54cfcef14ce4c4b791a7fee20d6e6ce9826a77921e49da73d12ecbe88fda8300dcc3303f2f74d0eea3b328d1341ca0e327efc2d571ca27bb130cfa

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yues.png

MD5 2fbcafbbbd2f4b5740fede582ac2c339
SHA1 46f62d33972538b6c0da2134b6d32df3c5faa886
SHA256 92a78ea619f2222fd39b067c5dd3fec403631347918354b4142c07a74c211f98
SHA512 28a650303ab57f4f7a9f5c17c77b6235ae5de5853cbd538190b3d8fb2e508af4e409623d9620c44bf195239f5b128188cb4c6c6aa711ba7ddf977421adddc6ec

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yuess.png

MD5 b056e5e7915931ca53f068594182d23d
SHA1 ddef189309de7c2ac3a1e47d1f37fd682903dfca
SHA256 036161e22627a2fd12b5abe86365440f108796669ccf251891f742f0f1d62fe4
SHA512 3c6debf0887ca20a6a0cedd55423fd10d865cf1149f854a283c309eb6a90a8ca4cd6df13f30b303a8a613d40a96fe15cd149059983e4022d6f6423c4ceb596a1

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/apps.js

MD5 a6998252a1c703410085d76a3dce5c23
SHA1 cbeafdf50aaba8fe3996b4042a34081343ee474b
SHA256 30683611529883de0bdb3edcf408cb0c1f27e47b2d6cb9decf985458d4e7dde2
SHA512 57dfce5fdea4f5162381da06e3833e847b9c77e70228521c3883eb60bd0cf64077520e4df0aa3aaab2222fee35e8fb0a83b6715638e96d01d8e159fb9b3e7b0a

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/fastclick.min.js

MD5 8a7fc1ca72adf173f9e2feaee7094ce1
SHA1 a941da26c4b2fbf81e9de4f2080aa429a7cc6e99
SHA256 c38caed88925571337ad3c23d54a260f1369c9f2fe67cfe068ad6bc4e63045c1
SHA512 26cb9285c3c693ec27a2c6d4da4e55430e9f70bb92c1df498ffef3f655f64540c30ad175b1077d2f7a49530f1fe8f7defd44833d6398385e3f18f543ff161061

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/jquery-1.7.2.min.js

MD5 b8d64d0bc142b3f670cc0611b0aebcae
SHA1 abcd2ba13348f178b17141b445bc99f1917d47af
SHA256 47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4
SHA512 a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/mui.min.js

MD5 4409b790f8a0865919c375aca0128ec9
SHA1 5903d378ac0fed64e976b93fc9eea5eb5ced128c
SHA256 03b31d096a990bd1309f6c77bdbb4d7f002ca55cb2fbf10694775fc6111826c0
SHA512 9894f26c54d9909896c7734fe0f4d3fe1f2fd64a3c7bc25d387eaaea4a21eb8a1281a40ecba86ce27737bed3def96be629362eec95b3ef5a3359a5cd6825b426

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/lib.html

MD5 f2f6e569ee90f6af5462f5cf92358035
SHA1 54dc5c793ebc03e5f467140cd87a6f3f757d7815
SHA256 08fa2993d6c2e51cb3094d6c958e4a0fe52dd1a6cd6b3253f4094ee384d0f010
SHA512 306e1850415c294e8eb38558c2cb5a408a478605fb8ce9e0d75810d50e12b85229d8c489fffc92b541ec52ea6118d5936d5e44a1d88d36362a8a066fb1801936

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/manifest.json

MD5 88b5c4c475fe2f32394ce83efd4e8a4b
SHA1 9502a8ff0883a976acc68e52e575738b0ebd48f1
SHA256 b442c9da758c724b51ce137be3f3920406393b821cac9b809cf4bdd77625376b
SHA512 5993a11748143867944328b5e3e04ea9240b4a520b0c4c52b6626fce1a4d17a7b35598aaaf936dfe158440a336cbea5383c8941077231d0856c87e1de67a9c17

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/share.html

MD5 ead9551a8c61bf8d1952e6f038d3074e
SHA1 89d69cb982f2608b818cbc5ffd164e9940e00871
SHA256 facf4dab897100ae2bb4a70a326aa4f481d4e78b6c5861aabb4d5ad00e0831ba
SHA512 d4af1f7fa1d110a8594cabd268eadad751a89b7462e3e590d2c93361f3f2502d0821a3ee7fc355074e2085dc1706cac0338b7f83f5e7ae97d4fd4dc47fed41cc

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/shareAlertQr.html

MD5 c0ae0e662f9039b0a6bad210f1a1384f
SHA1 abfc28faec2dab3b10a0d6e7ecb4efe7116db7f5
SHA256 feeecf38f0b75d0999e5daa0a3f172ea08dcd8a9453f7486e072cc1b676ea783
SHA512 01190335327862a430c1771ae1f2535a36172972cafb3f6feff2107ed61daa0dc5d5820394fa57bca56b0007d070403ffa953811cf41fb8d9935b8fadb3957a3

/data/data/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/sitemap.json

MD5 e87a3a756bb38bdd7919b96ff60f7638
SHA1 09cc8f1f16bcdcaf831cf966711d91fea2461298
SHA256 dd174193ff721b612abda7b43d0d9965aab1f64a190e982f65add11865d72b36
SHA512 c104647a26c31486867b7a8a253a9110d9d3ecfedaf3547fd7d8f7d783c4200c8d413208113971eea5c3f2d7cccd393aa306097372c4c6061f766a29c3cb37ac

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-02 12:40

Reported

2024-06-02 12:44

Platform

android-x64-arm64-20240514-en

Max time kernel

163s

Max time network

171s

Command Line

w2a.W2Awx.bisns.com

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/w2a.W2Awx.bisns.com/.jiagu/classes.dex N/A N/A
N/A /data/user/0/w2a.W2Awx.bisns.com/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/user/0/w2a.W2Awx.bisns.com/[email protected] N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

w2a.W2Awx.bisns.com

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 service.dcloud.net.cn udp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
US 1.1.1.1:53 wx.bisns.com udp
CN 39.108.249.247:443 wx.bisns.com tcp
CN 39.108.249.247:443 wx.bisns.com tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
GB 142.250.200.2:443 tcp
GB 142.250.187.206:443 tcp
CN 110.40.181.119:443 service.dcloud.net.cn tcp
CN 111.229.199.57:443 service.dcloud.net.cn tcp
CN 115.159.204.155:443 service.dcloud.net.cn tcp
CN 124.220.57.196:443 service.dcloud.net.cn tcp
CN 110.40.169.99:443 service.dcloud.net.cn tcp
US 1.1.1.1:53 ebjvu.cn udp
CN 112.65.70.244:80 ebjvu.cn tcp

Files

/data/user/0/w2a.W2Awx.bisns.com/.jiagu/libjiagu.so

MD5 de685970891708f6edfd18f03c6557ba
SHA1 ac50f88327652a72df73d43e9260faf169283c34
SHA256 b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e
SHA512 cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

/data/user/0/w2a.W2Awx.bisns.com/.jiagu/classes.dex

MD5 922ea7e8b43853f6f0b7227654d3335a
SHA1 e33001fe83d7009747512eb9207cb64ec7c5c5e2
SHA256 db45a39cad4bea540da0f4d96826fa996c13b8f740d307516ad8bf79c77e4f06
SHA512 e87924abeea12a90ea822d7b22975f3b690136adc66c35536257314dc8b625d3bb1c89ef44a8b3a87ccae87137324c502c4afa825bd83554ca3175dd58aed423

/data/user/0/w2a.W2Awx.bisns.com/.jiagu/classes.dex!classes2.dex

MD5 b1cb6a40c743ec5b4b2559e41eb81529
SHA1 736273a4c9152517cdd9f951f9eb526ee56e7bff
SHA256 aced35544c143f5e7bb3b3f054ebc682fdaeff3789cae2df8e9986dfb98c27a4
SHA512 8d16ac167c883df0e67e01b40fcfc31e33075230bc5b7291b091968415774a0385593495bc0ec9a452e73febef5fbb50d95475577808e82831f25733ccf48643

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ri

MD5 bebcda8452ed1095df8ab41e2091664c
SHA1 c046b0673140002749ebf79be93533858894e1b9
SHA256 f5334154a579b96be22db07ba3e41d0582ef6afa27b781719f2e2ff74a7d8542
SHA512 7d3b4597839c9622d481d526f21c6eac6cfb6bf465fe8b9b6674ea77576e6bf92ac202bd7c09c518305166683fd300adf30de8097ad6da6951fa14c5e8516909

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ri

MD5 32f1a5f31da60b958a40cbb3ade681f3
SHA1 8f6603f48c5cb217a28687f86a77dc32a64ff297
SHA256 72ae19e2056bcba80ebf83ee5efaafaed09ff993353ea68868b6ba44a26b7c34
SHA512 95cd8cd928ec968f34c50c585885663ecd279ee6fcb80bee471bb233108e272cf946543fee320448ccd50aa435992fbc38a0089324e1deb07790599925df4c27

/data/data/w2a.W2Awx.bisns.com/files/.jiagu.lock

MD5 88417e4bc203ace4069063467e32a010
SHA1 a25548845b98102fafaa3200a7c8f06bb34f9f0f
SHA256 cd97d17d60d3c82ebc004af5ce9330d93bdf9ba6af6817f774900de56848110c
SHA512 87da3fe7fa93fd0e64863f7d25c59502ad5436faa5d17cf16c862d93127a06a97fd6b24d76233bafcb407ff14020a203d85fffae15a47d8b8a1431a62909aa31

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.rd

MD5 fef745d39cd4dca7e4e53f7bf2f34dcb
SHA1 141cf1e841b360cfe50caa32c29f82e10694cf2f
SHA256 0596b8aa378b719608bd4fcc460caa3abfe80a9be1f275268e979fcfb50e59d7
SHA512 8f5341bcf3f9a40dcaa454e1b4cfcd4feffa8ef5fd9a8e54ed8102a2560f7e058180c5664646b012a9cdfa6cffb9db54f2733ca7d0d6b9d2b632245e44c58786

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.store.report_pid

MD5 058214cfc80625de1172b309a2c92f67
SHA1 1ed8795042e3612ce2c1cc97aa12e29af29eb78b
SHA256 cd0b5288914cb77b2e830b276b42f81c952f616d780c384f3aeb0547d376df8c
SHA512 39e9becc7029435ab262d5f10fe00ac42ac264abc73ef0c6e6256dba23e8ed784b35ee3c40aa2fdce0b5a4cb981013429392430fb4b673a170011ca1e32c3d70

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.pk.h

MD5 0411929eee033aa8298ffab2241754fd
SHA1 52633337056566814933e27a76bfc6f2932d0c94
SHA256 6bf29f9ca16951454477347ebd3c369616c99d572961d2762e9efcadb380e5cb
SHA512 d652170508d0f1b88feee7047c7ea49644d466b5d6be12e52c3b0a47e168d0f5eac57e9d18d88bd35c96ca682a2a9d8542767a8564feb31d6c60aac640f90499

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.pk

MD5 9159daf49d6da5349b5b0e32d1e8c1eb
SHA1 aed3561e1c9994157450d660ff0741377c5d99e9
SHA256 912cc51d96759129c1f5f1400830a7d2ce876c0c25975a38b1abc3e53a2b6717
SHA512 01d97ccf05566078fb28e698b8cc4564f3fcd45e0829d87345baa2b5c2b79c8d78ee8341cd990e7dc3515cd7569154644043f6c31ae144f0afd1e2ccbc3fd34b

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ac

MD5 68bd93e12d8a766b00abaecf1a6b0217
SHA1 b13b752202d40c30a33e2ae6cdc6fb9a1b51e9e2
SHA256 50bea09b34d09790d4f8d925d1af18dad50e9887045de27cdf261cc73b7195e2
SHA512 3bd9d3694c298d83909d3297d873fc6a356804a335e726e5fc3a2073e54b8a7af62edf8dec667681476546dfcc631f0c0667cc685df607560cb556c6e3dcf5c9

/data/data/w2a.W2Awx.bisns.com/files/.jglogs/.jg.ic

MD5 f30474969a8bef0902927c1933ce3966
SHA1 7381f4c642be49ad2313a99b5e684dce78cbbe21
SHA256 f28a61206805f7b0f2d311510b021de7fe734c3b3b485ebcac01f8450fc47e28
SHA512 d43aee2ee53f6c9c18f69e9163a6410cc22bc1b9bbc7d4e8889bdb01d01fbfc505a6be60f5cfd080529eedcec795e070fd94373066f4f59f7937886d5903fe01

/data/user/0/w2a.W2Awx.bisns.com/.00000000000/A3AEECD8.dex

MD5 ed73a80eb949bacc52428b8d5a087fa5
SHA1 07e973549a2cee61ffeeb6439abc419cd8a489a9
SHA256 f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76
SHA512 4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8

/data/user/0/w2a.W2Awx.bisns.com/.00000000000/A3AEECD8.dex

MD5 5061e4948844f7d366972ac8005e9f13
SHA1 a2b79a1c79afb095ddebf0f16a1f9db64482bcaf
SHA256 3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45
SHA512 223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299

/data/user/0/w2a.W2Awx.bisns.com/files/.imei.txt

MD5 e3cd84fc98323b2f4851a703f236b7a3
SHA1 a95e58c81d3f3205262892ab139df94a53fb73ac
SHA256 80dc7cdb18631d4ee52a123d652890401a3568ef7a5ca24cacae836e0f3bc185
SHA512 345677cdd05f6ab0da55fe80178d174eeab1d242f8827555ee87651cd6340f21dd02d1e665fb9763422d033ae26070ce848b860311631754ebd16ec6c1a2fb1f

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__shortcut.js

MD5 4cc67d73b280b1239e0d3ff5fd8320b4
SHA1 0969dba11e4b0bc4c5274628239ad01cd24f177b
SHA256 0295b03e168249702fccff78b03f20e7e8beb760286b8ecea910438e4eb9fdc6
SHA512 267843d4e562076119e9ad0dc91eea74a827b2fb1d0a1058cbed225ba6e72003c6019fc2b6da9e55424b5baa33a33a2630487ddba4de7e1cc73af620c30e9cad

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__template.json

MD5 51f5b075629871512903e0b52fe83dd0
SHA1 fa98563f57009c6c449aff18d0ba41ccdfc5b538
SHA256 1b355863045b34d4f4f5c4562ed0b1f256fec4c71a603a472d92f9230e1f8be3
SHA512 ddc452f7d2083ae0a946ba2cef9caf4217bfb05a0d6d5fdecb6e8b81b87f70b6fa25fda014941c53d3e8d3f368b882d8b4a24b40018b3d3d28e7177580ee4c00

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2app.js

MD5 165deb1739411c87048da0ed0a5303c9
SHA1 429bdb74689f4cda3a286c25c8088646bc587afc
SHA256 7802d3ce5a8991a0887c76c78311b3122de97b49afaa4a2e222e51792ef212b8
SHA512 8bee94d6151a26f62cd737a5299f882980b64f8b0386b85a766714a1d957c91f22c1830470959513e918ff4b04e7d7887777a604922bf190a8409e8c716b4093

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2app.ttf

MD5 95e605877ce5ac89b030be1cb8cd5a23
SHA1 aa2c4583a3934ddccc49de2b11286198f0e09f62
SHA256 fa82d37dd15c712ea5b2e9d53f1f29395de28158a75ca537bf5dfd3761db5aab
SHA512 cd36408dcb7e4ed16aecb3c36a03e27ceb28f924467c8f97cf6aba42a35913ec4038c8fd477fe5e180c6e9d130cdf7f49590a13e74bc30c27953a7c7ce948b13

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appbrowser.html

MD5 f37c3c8b41b76eff1c6d98aca40dc0a1
SHA1 ddeffbc4c7b3958a29306d889579bd367acdafcc
SHA256 c17c9fa9d1443652798ead675193629bbda3c285e60d6fe8a0b5e2e39e05ca03
SHA512 cf77fb0715e2f00773acc6058991ac5e4c314d85ce879feff74ef6f7dabed42182b54b84af4be8a9e508eb3b0ee6cb5f87ca004ea0446c05c3d579a606cba478

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appcontext.html

MD5 6f6f2b25ed240fb534a8737fe675b371
SHA1 cecb50311db62b17830a53ba1d501d654e1da1df
SHA256 3eb57ce77cbeb3eb30a1a17c405c9ddbbb9bf82b5c2c87ed31f6f479793afb09
SHA512 46f3d7c20a0446a39ffe3a895c55deb3ad431cc5b89c529d4db127ed20ee37c7eb6f385be36371955103475e116b3547ec76ad4f865ab91a77cc9bcdc0273e3b

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apperror.html

MD5 8bd6e5ea9a5c8a199e343c37c5438a33
SHA1 6cb6bce59060f6fc059c41e1874fb657cf8b6272
SHA256 d969a084059966b4fcc7a090ce06d45493497ebf6f6be97bacf14cab6756d268
SHA512 8f7b804f4071fbf0af78be3004d056f020b63bba6a96117707faa20b9241b9ede25774a6df0c85807483e69b7a4bf96a6b6134ec0f7958b26576cd1dc6294e2e

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appplayer.js

MD5 9e296fc129b4247f5e086a2a36fd5c94
SHA1 e89c875c5627f9321d24a91913d5892fe5189b91
SHA256 38b381c6b5fc3ee1136beec3db912dd71e0786cabd90f069c0b4ad6b7b310792
SHA512 febfdd0d8c5fad94a69253f34bcd46699a3ec9221e9e2a11b22fdce95ce7d48ff5f50fffb2b073c43f418c91a2c93910d5bfb4d2a9a44f2ab015e5471c109259

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appquit.js

MD5 d5bb915218acd49bb77421da4375fe3b
SHA1 510913f958d5eb1bc6e56b8a3c9ccec30dc93215
SHA256 655868bd3bab6196ff736ba9b7ae3acbc614cc4a2839117cc0f5e58e27bb7de3
SHA512 00ba96947c383c3e2a6adf6f4dcfbdc3edd0d4143d5ec567b667f8bc9f3b8a50402980a62e278593ec06b50d304c4aea8a4bfb3dce89652c6a33b540429b1215

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2appswiper.html

MD5 eb5f938650308c63a3f082a5b1e3382a
SHA1 08ddcdf824e285921f1b43faaebc817514fc9345
SHA256 72d7ce0d6e3b6ded505bdd9f279ecc3262027d40d6222fdee2749c9850f46d65
SHA512 50a8859f1f3c7f71a1c03d3e547d53a189916f4574c61be834bd877f6a6f52e1e07863eab2a7a9387d1f52569eca2784de90898b3fbfdfdfab1239f3f5094961

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apptabbar.css

MD5 52dbbeb73ea1eb43eae20cce83abf9c9
SHA1 945c26255dda4d4f1dc53e080bbed91484d87a9b
SHA256 e613d71151b2c01b697f662e3f194bcd60265c767bef9bd49766bbd54f24b019
SHA512 7cbd9a4f3cb3a70d0b487aad9043b357dfddfdc975d830d8e2bee8363a96263c885671a72adc98bf64e2627108bb47bfdb03b27003ba2b24233b41c49017c30a

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE5/wap2app__template/__wap2apptabbar.js

MD5 ef56482b6a5bb9544e8025d27b7a3c95
SHA1 743b075843bff1d3c9fe993e0681a47ac66f7b68
SHA256 74f86605265a03be3a48a7db37e4dc8a16acf660c92716f77f3740c3f7610ac3
SHA512 0e54053f3119a30c7f33feb950b3d44509ab43f57185f4f72f22ae9685c6d92233856404c2e7d7aaac813fcf118f4522d0e219eb0d9a67e36571e5563a4b2525

/data/user/0/w2a.W2Awx.bisns.com/files/cnc3ejE6/eje3cnc

MD5 7769d4507985f59116153463f09235a2
SHA1 b081e84d14300ac7a7947aade9c025fa83bc17fb
SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
SHA512 ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/__wap2appconfig.js

MD5 c9b5eab9f145bf3df3fc84de03b142ae
SHA1 08abdea601f2063ab62f3f7502c5000e757fa12f
SHA256 3bf425757d926f6e3c9dc02802949a1ee5dc47344df3980ef7a8bd79f7995a87
SHA512 e22f549b80e20ed021b1d441e5a4b4ad0c43a10e0cc05c879091a778b9ac64a0bff737310df536186d6c98973d7c146f09dc5e481f14ea68c8efb7aa199f18ab

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/barcode_scan.html

MD5 322a200e38ba0650f60f327fbe514e7a
SHA1 5116f53cbab2eca54257d8054d6459145892467a
SHA256 d845d93c3e108bb17c41b193245b765c4e868d5605b7ad3810cc8f9f12b3a3e5
SHA512 b76c996fa0a27cb2a75dfce408485b23776fabb49b87cb1425233f42bcb3e48d2dd452f33485d920d76e8e3a2c71c726a47ba31d2a402c00d0869c2eff861fa7

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/client_index.html

MD5 bc012fbf2c86143cc272f9816efb29db
SHA1 b87fef93718100704e0a43fbc88f5705afb6c22c
SHA256 e7cd942f61f6bc53db53ce7444a11381c54f88492d92f5daede589757c3615b8
SHA512 d296b13717d2d4ee0297d17ec87d7bcd850dba244469ec19bb0853e67d1ed99ec0762b6316dea0749bbc16f3de71c9be40742070ea79c2d349081e71d7ea49fb

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/app.css

MD5 ea35482c13d84b9c751073e5f0495e25
SHA1 955d754d90e1fd02b6d6e25cebfd98ec02800c4d
SHA256 dae8d62a706790c62958cd821fabb3e9ef0dd04e34126886a425eed49c094e1d
SHA512 35362164d6eda6b016da68d67ba379a4ee76681ad17f5b7a155305db968c58d0cdf5671b2c941c7d05704501fb0620b06a1cd88dba161980a1b247ddeba0cc80

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/mui.css

MD5 38260f9edff7cd3b9b476d0ebd4b9e5c
SHA1 a8c0b36b2ed493a44fb56dfa058233a4a68002f0
SHA256 f70806bd6c67e0444987a5be83bdb21945a4f1b8614a8bc7b19895fa14071f64
SHA512 e0aa3aa0f8b0fdac836c2093c33e7c8bb580399d03d04c7349e7dde4540dcea9c75da04a448ca29c4b3a56e006c9b7d717dc1c67e4fda837b1061b673498826b

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/mui.min.css

MD5 0363a68c9461c903cd6758e5cbf6fe9c
SHA1 a82e3b51f5f53ee0d9e39e40bccd7af35d540521
SHA256 5a285ee9a47c0ec91babc9fe59523f84c2754e0812f3d7665e2db51c0423492f
SHA512 7ad7272697da1ac02d293e1eeb20ef4373414b7c2c96b5c18ce73a305c28b8a517186a89bd4c5f040d1611f7e69850a0fd1cc977d08c00a8a2c0a225875c6567

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/reSet.css

MD5 94e1e9cc04f110f40fb45260916c9384
SHA1 5d9ad0a095aec57aa9f9ae17e015e1b983da93cd
SHA256 b3f9419a8c7660ddb3783f23371282ed1db5de32ed68e1071885336440555b67
SHA512 848027ca2254b0243295ad7b13eb7e999bad02fe03afd1f77628fe5abfeda22f7e8aeb9c70209f822a43e1a21146e476ebfda0c2d696f2e0ea67a06d481525db

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/css/styles.css

MD5 0764c193c6b63f1b1c1db88852ef10c3
SHA1 b3c6e2e6779f17918a1705e31119486a006e274b
SHA256 8b25fe0d3913efe7766cee3e638f79053c336b3eab71cf40e25dd924c9a90e00
SHA512 80d35e902e2e69da8b12f2e120cea298efe187a5c9422c50d0f3a0aaa6e614d00a16268af6fe7bd8cc4b38e73c33c9ea09b91c873ed17b541435a6bc2279c958

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/ico.ttf

MD5 1db9b0b9987f338cadd88d5d84876266
SHA1 3f83f66ad467e8d68e3fdf1f91ef9d441aa1f422
SHA256 f2c44dbe7fad3cf6b47852d570fa4ba080d28248b8ef97269fafde9662080b92
SHA512 0daa8622e7454c8b34bfa2994d34e894712efafe4d9a6a45a695dba6bbaa992be2e13908161223a4b03305c9eb87e9ff155f68486904de028a263d250fb6895a

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/iconfont.ttf

MD5 df269320ca6ecdc33ad50b9f06ede5ab
SHA1 7208eefba94ead27023a2e8946d45c3dab33b197
SHA256 19ef3e80e836f5bfd6642e9d51ebe340e77f66da4327096754eedc725b7c1eb3
SHA512 e230911c60eb4bff0231fcb2490d45c859e9916e46c20714f4096374539c16242c5fe267cc2388de10c9540f9a10966c24e9dfb7aa26fedfed7e5b368f15b57c

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/fonts/wap2app.ttf

MD5 16404c52251b4e1f877e43ae840e395d
SHA1 4b6ecde9bdb051fb1e05a40cc4a941e50c1ee943
SHA256 1aeadd260cdeffd98a9da3ec763bf83b8ed54f6439b31da2404fbcc8823dc719
SHA512 24a5bb239f87ac886688ad81cdad22065bb60afe768547154f4f404c6fce69a46a82c239107889e6f147fa7f0134e2c2696209671459b51f571a5c6ba4cec846

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/background.jpg

MD5 99369c319ea20d925e3fbfd9520922ab
SHA1 fa17aff10fc490b0acae5b08cdcbafd610541696
SHA256 a95617f7f59bcf2902dc34a3ca9d799532316309e126c79d5570fc5be3754681
SHA512 3bd9de3301b3144f506cd312f5c1b7735873b633b53aaa7f9f705677cdca3490c855d8d12e13294a1e11ad9efc1f7fe2c85e1d36f108e331fb5f49d574e87816

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/copy.jpg

MD5 6596b11a1402dea4f87389bb1d613913
SHA1 49eb02c7ef723f9f756194b563254f10f740baef
SHA256 3ebefc35e7b13bef11d822db1278f2ef71727bdea7889aaa62ed19625a5bb632
SHA512 30fcbb92abb013d5eadcfd104704d055eaf66a51ba812ffc1eb5af1862bf8e428120f4f8747e7ab27dd8eb9621a5d5ed2e8b1cdc0ccee6812319f9011f149321

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/java.png

MD5 f6b150ac7c2cea11d12e976d7842cd24
SHA1 0ea1a22bd03404228b08c6d18631c2f63b2c8373
SHA256 ef247a6a89bb5d41f8e4ef6c3dce580e2c3a68766765a3798d82794913ee65c5
SHA512 4d5a7aae1728f7741c2eb6e89a7d75c1ccd084b2a7568775a5547a7984f6e7ec0fa0c1a6092eee94d590b50cce606fffea214502c887d16bfd659312e553fec9

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/javas.png

MD5 556ef900c8c0c522a138d5b04ffef452
SHA1 3744d39d5103afe2e8ccb03c6995f1e7d0ca7fb4
SHA256 44856a3cbe52442ecb1ad0bcbd198e0b40b5d4b569de09981cbdaa64e99f1810
SHA512 24a272502f83f0de42c3dccc51c5c768a1a686d18073e16f8bc9b7114fa1dbf37dfc2e32287a48af9d4d86950171939d60cacf94e370850a84360f80f5709648

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/loading.gif

MD5 97cf67ffb0edfddcfe4a9ded194afe68
SHA1 9c35e7d650d4682baf7c65a5e7d60ececbb556df
SHA256 29598bf65bb763ffe48f2b5b56aa03d1424f03115f4ef497bb1e8ed60baa70d0
SHA512 58386bcb21c0720f5de5fbbdf4159d22a448a74b877806d1a8d7d758b5bf94a881887dead8409412652e875207a88f7a046671c7612ca8629a60db58d2ea15d7

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/lvse.png

MD5 7b19c6bff6266dcaf384f39dd8507d6d
SHA1 7a23408b85829615f84b3f9d076f93364fb1c80c
SHA256 573c528a48a1101cca54c1e09d41541755f42db2c5106dcbdcf083bd31448ff2
SHA512 573c5824eb6e311c23ad543569155237f4f3134c2eb4e2f758cbf8d513382d9f652cdd8b009a1c9ef328394889b5fec2c21537db7ebe63e0b1f1d8ef5d756a8d

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/more.jpg

MD5 6d619ea7919364de6ed4077832fa8529
SHA1 a0a13bdcab841dc1e7bfd98f3f11a70294effa68
SHA256 d45ce407bab1bd6d00eaca0d3c2b95cee1a69057a5cd3b32764a68482aede850
SHA512 725ffd73c9f34a83fec8e7e8f4c192d2de150454540e79a2740a8c9cb4b7ebdb15b2c062e2e7c36bc4ffb977bf84142c6c9f118ad12f8fa9ed0ee8c9dc3c1476

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/qq.jpg

MD5 8224514181c6696bd15bd010226df049
SHA1 6135e3e054e2ae98f28fdbae6159bbba9cc2fda1
SHA256 8553984b468d1966f7935236d40ee76bc40bbf087c2e5318e2800702f28798ad
SHA512 ab70c97eca2f727c1f17485e38d28572e1b94a64da91200647481205af3ccc180ff13445b14aefa67646a9b0aeda66e4bccf424649c417c440c8c90b8878da4a

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/sd.png

MD5 01020bdc35cb5e542d7e1958a01fa7b1
SHA1 b7f4c3c0297d23fdb8ab173531f0c0971b345a97
SHA256 3e9ec21438cdfde21b47a9afa602039b0bc89a296a97ca5f6c2d3913ad6bd571
SHA512 b5eac65d46aafe84e5e2c5f7f615a6e32a023a7a6aa9bd9cd9103deee3bfa92cc0ab46cdd079751ee3bbffa8bc425bbbc55a4d8832c12426b7f680286f9979d0

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/weibo.png

MD5 019c002af3d1b54350c7d11b6cdd19b9
SHA1 1f9638ccf54fb9329ea27f34af85cc5c9e0bd1bd
SHA256 c0613fa64d727efaae5e62881407520d916b549d4ea75fcd857945ff426a8bc2
SHA512 4b3e0d7439c052a15ad958f79d8e22085a387a9737c9e90de2c5f71a5fe6df49ad78469351532d435f2b18584315fd499348be6acfa29a4518e91f8726fc120c

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/wx1.jpg

MD5 4a783b86aaa99fd817bf7032d8e24b39
SHA1 406fec215c21cd4ff293ad53da40b4ea8b933228
SHA256 3ceace4c2d8181c86e5f3d858bd6308466f2c249aed12c41c28ca309f1f3b4b0
SHA512 73317513388e4af44bd4183cbc17505b89220a6a34f6d2b47c2b52e6a5280e451d77d878509404ef6ae1620d85d567859709c919f0acb5303cfa796d8d0a2420

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/wx2.jpg

MD5 02024f1e539c3df468ac1ea9140d1b6b
SHA1 187cce636d2929c59394e6fee73e5d52d5e5f760
SHA256 51140a0b1367190f2d48212906be58b91232a4c8550e39f983667fc3c37dde76
SHA512 86458db8f721403f3bdfa49ac903bfd979297cf08d6c0882c011d773bc2c99f8125d994fa8f01d45706b1f5260f6dbd2ca495d03562a6d57a2c73cce52e38326

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yue.png

MD5 becf1e43e476f71c016ac4a70dc1aaa5
SHA1 c153dc3bbc1c96e9d6bbbd52980f9af6718b7b1d
SHA256 608ce3319a0c925139e6d6740c08b22e09a1600c5e986abc8d6e73d835d00e15
SHA512 4cb2e95ddc54cfcef14ce4c4b791a7fee20d6e6ce9826a77921e49da73d12ecbe88fda8300dcc3303f2f74d0eea3b328d1341ca0e327efc2d571ca27bb130cfa

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yues.png

MD5 2fbcafbbbd2f4b5740fede582ac2c339
SHA1 46f62d33972538b6c0da2134b6d32df3c5faa886
SHA256 92a78ea619f2222fd39b067c5dd3fec403631347918354b4142c07a74c211f98
SHA512 28a650303ab57f4f7a9f5c17c77b6235ae5de5853cbd538190b3d8fb2e508af4e409623d9620c44bf195239f5b128188cb4c6c6aa711ba7ddf977421adddc6ec

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/img/yuess.png

MD5 b056e5e7915931ca53f068594182d23d
SHA1 ddef189309de7c2ac3a1e47d1f37fd682903dfca
SHA256 036161e22627a2fd12b5abe86365440f108796669ccf251891f742f0f1d62fe4
SHA512 3c6debf0887ca20a6a0cedd55423fd10d865cf1149f854a283c309eb6a90a8ca4cd6df13f30b303a8a613d40a96fe15cd149059983e4022d6f6423c4ceb596a1

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/apps.js

MD5 a6998252a1c703410085d76a3dce5c23
SHA1 cbeafdf50aaba8fe3996b4042a34081343ee474b
SHA256 30683611529883de0bdb3edcf408cb0c1f27e47b2d6cb9decf985458d4e7dde2
SHA512 57dfce5fdea4f5162381da06e3833e847b9c77e70228521c3883eb60bd0cf64077520e4df0aa3aaab2222fee35e8fb0a83b6715638e96d01d8e159fb9b3e7b0a

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/fastclick.min.js

MD5 8a7fc1ca72adf173f9e2feaee7094ce1
SHA1 a941da26c4b2fbf81e9de4f2080aa429a7cc6e99
SHA256 c38caed88925571337ad3c23d54a260f1369c9f2fe67cfe068ad6bc4e63045c1
SHA512 26cb9285c3c693ec27a2c6d4da4e55430e9f70bb92c1df498ffef3f655f64540c30ad175b1077d2f7a49530f1fe8f7defd44833d6398385e3f18f543ff161061

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/jquery-1.7.2.min.js

MD5 b8d64d0bc142b3f670cc0611b0aebcae
SHA1 abcd2ba13348f178b17141b445bc99f1917d47af
SHA256 47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4
SHA512 a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/js/mui.min.js

MD5 4409b790f8a0865919c375aca0128ec9
SHA1 5903d378ac0fed64e976b93fc9eea5eb5ced128c
SHA256 03b31d096a990bd1309f6c77bdbb4d7f002ca55cb2fbf10694775fc6111826c0
SHA512 9894f26c54d9909896c7734fe0f4d3fe1f2fd64a3c7bc25d387eaaea4a21eb8a1281a40ecba86ce27737bed3def96be629362eec95b3ef5a3359a5cd6825b426

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/lib.html

MD5 f2f6e569ee90f6af5462f5cf92358035
SHA1 54dc5c793ebc03e5f467140cd87a6f3f757d7815
SHA256 08fa2993d6c2e51cb3094d6c958e4a0fe52dd1a6cd6b3253f4094ee384d0f010
SHA512 306e1850415c294e8eb38558c2cb5a408a478605fb8ce9e0d75810d50e12b85229d8c489fffc92b541ec52ea6118d5936d5e44a1d88d36362a8a066fb1801936

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/manifest.json

MD5 88b5c4c475fe2f32394ce83efd4e8a4b
SHA1 9502a8ff0883a976acc68e52e575738b0ebd48f1
SHA256 b442c9da758c724b51ce137be3f3920406393b821cac9b809cf4bdd77625376b
SHA512 5993a11748143867944328b5e3e04ea9240b4a520b0c4c52b6626fce1a4d17a7b35598aaaf936dfe158440a336cbea5383c8941077231d0856c87e1de67a9c17

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/share.html

MD5 ead9551a8c61bf8d1952e6f038d3074e
SHA1 89d69cb982f2608b818cbc5ffd164e9940e00871
SHA256 facf4dab897100ae2bb4a70a326aa4f481d4e78b6c5861aabb4d5ad00e0831ba
SHA512 d4af1f7fa1d110a8594cabd268eadad751a89b7462e3e590d2c93361f3f2502d0821a3ee7fc355074e2085dc1706cac0338b7f83f5e7ae97d4fd4dc47fed41cc

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/shareAlertQr.html

MD5 c0ae0e662f9039b0a6bad210f1a1384f
SHA1 abfc28faec2dab3b10a0d6e7ecb4efe7116db7f5
SHA256 feeecf38f0b75d0999e5daa0a3f172ea08dcd8a9453f7486e072cc1b676ea783
SHA512 01190335327862a430c1771ae1f2535a36172972cafb3f6feff2107ed61daa0dc5d5820394fa57bca56b0007d070403ffa953811cf41fb8d9935b8fadb3957a3

/data/user/0/w2a.W2Awx.bisns.com/files/apps/__W2A__wx.bisns.com/www/sitemap.json

MD5 e87a3a756bb38bdd7919b96ff60f7638
SHA1 09cc8f1f16bcdcaf831cf966711d91fea2461298
SHA256 dd174193ff721b612abda7b43d0d9965aab1f64a190e982f65add11865d72b36
SHA512 c104647a26c31486867b7a8a253a9110d9d3ecfedaf3547fd7d8f7d783c4200c8d413208113971eea5c3f2d7cccd393aa306097372c4c6061f766a29c3cb37ac