Analysis Overview
SHA256
05a66a359f78191e5cec8c6ad90010e8547f13c345e68c8d7a1d24876adb325e
Threat Level: Shows suspicious behavior
The file 9b5c7f251b0eef0e699707ae4342429a_JaffaCakes118 was found to be: Shows suspicious behavior.
Malicious Activity Summary
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about running processes on the device
Requests dangerous framework permissions
Queries the mobile country code (MCC)
Reads information about phone network operator.
Queries information about active data network
Queries information about the current Wi-Fi connection
Registers a broadcast receiver at runtime (usually for listening for system events)
Uses Crypto APIs (Might try to encrypt user data)
Checks memory information
Checks CPU information
MITRE ATT&CK
Mobile Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-10 19:30
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-10 19:30
Reported
2024-06-10 19:34
Platform
android-x86-arm-20240603-en
Max time kernel
174s
Max time network
186s
Command Line
Signatures
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the mobile country code (MCC)
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
Reads information about phone network operator.
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Checks memory information
| Description | Indicator | Process | Target |
| File opened for read | /proc/meminfo | N/A | N/A |
Processes
com.wta.YdbDev.jiuwei239909
com.wta.YdbDev.jiuwei239909:pushservice
Network
| Country | Destination | Domain | Proto |
| GB | 142.250.200.14:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | pdeviceandroid.ydbimg.com | udp |
| CN | 116.255.131.209:80 | pdeviceandroid.ydbimg.com | tcp |
| US | 1.1.1.1:53 | sdk.open.talk.gepush.com | udp |
| US | 1.1.1.1:53 | sdk.open.talk.getui.net | udp |
| US | 1.1.1.1:53 | sdk.open.talk.igexin.com | udp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| US | 1.1.1.1:53 | oula.cnnn.net.cn | udp |
| US | 1.1.1.1:53 | apiinfoandroid.ydbimg.com | udp |
| US | 1.1.1.1:53 | sdk.open.phone.igexin.com | udp |
| CN | 115.227.15.7:80 | sdk.open.phone.igexin.com | tcp |
| CN | 116.255.131.209:80 | apiinfoandroid.ydbimg.com | tcp |
| CN | 120.27.120.19:80 | oula.cnnn.net.cn | tcp |
| CN | 120.27.120.19:80 | oula.cnnn.net.cn | tcp |
| CN | 116.255.131.209:80 | apiinfoandroid.ydbimg.com | tcp |
| US | 1.1.1.1:53 | c-hzgt2.getui.com | udp |
| CN | 115.227.15.15:80 | c-hzgt2.getui.com | tcp |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.179.238:443 | android.apis.google.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.15:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.233:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.16:80 | c-hzgt2.getui.com | tcp |
| GB | 142.250.187.206:443 | tcp | |
| GB | 216.58.213.2:443 | tcp | |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.16:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.227:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| US | 1.1.1.1:53 | sdk.open.talk.igexin.com | udp |
| CN | 183.134.98.102:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.14:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.14:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.225:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.102:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.13:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.13:80 | c-hzgt2.getui.com | tcp |
| CN | 115.227.15.241:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.102:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.237:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.102:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.235:80 | sdk.open.phone.igexin.com | tcp |
| US | 1.1.1.1:53 | cfg.imtt.qq.com | udp |
| HK | 43.135.106.184:80 | cfg.imtt.qq.com | tcp |
| US | 1.1.1.1:53 | log.tbs.qq.com | udp |
| HK | 129.226.107.80:80 | log.tbs.qq.com | tcp |
| HK | 43.135.106.184:80 | cfg.imtt.qq.com | tcp |
| US | 1.1.1.1:53 | tbs.imtt.qq.com | udp |
| CN | 218.60.10.59:443 | tbs.imtt.qq.com | tcp |
| CN | 115.227.15.239:80 | sdk.open.phone.igexin.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 183.134.98.102:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 122.189.171.73:443 | tbs.imtt.qq.com | tcp |
| CN | 183.134.98.112:5224 | sdk.open.talk.igexin.com | tcp |
| CN | 115.227.15.6:80 | sdk.open.phone.igexin.com | tcp |
| CN | 140.249.101.87:443 | tbs.imtt.qq.com | tcp |
Files
/data/data/com.wta.YdbDev.jiuwei239909/files/init_c1.pid
| MD5 | 575a90e2cd5747943ca55703c9ba31e6 |
| SHA1 | 6eff0e195ee145e0e45f40fca67c6f8b6d49296b |
| SHA256 | 9612de2cee9f595db8ebb14a69509b5e7a65d429fc57c2808f2e33f9ac9c8073 |
| SHA512 | b5958f6d357da5d08387f49678a78cca20a932c7e2a732b233e76ed4f190664e8765e48166f461c93114afd545ea44e80176d9ae3c19c2c2936e3b9182eb18fb |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-journal
| MD5 | cf0673b5b660b53f4b8564e443fe3d59 |
| SHA1 | d745dc35902ae40a95c1b28360838960a7e884de |
| SHA256 | 96878e2cc3ff1054bb51a2907abbf48c9fdf4e99da160f6cb6e44c3efc0ea394 |
| SHA512 | a6356fe77d541e514d12eab936e532ec0f891919bddf0204f9b97d353e5d18d97105abc72f41563973da333871b686cba0dcbf3838bf5e244d50f30795f2d5ff |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db
| MD5 | 84f4b31aeb81e51a5c3bfeb4fa21b2bd |
| SHA1 | 0cd5ec62f65c88f8b2329da39fba5551e63e17b7 |
| SHA256 | cd95a9b44cea685fe2b311329de23f241af8b96a6002528ea6c36b7453f18c3c |
| SHA512 | 61ee202f6da97fa5b202f80345f7a64c7492e2c742c71e969f9cb036fc316c97295df0be934dd40f70b89373ee53b69993cf03b8578660fa46b2790d03027a49 |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-wal
| MD5 | ab47eb5ccef3a8874e64852323d5a447 |
| SHA1 | 2a1f0966b3dfa3cbb3e49115daa67df64f06e885 |
| SHA256 | e9d9c30a5159d99bd0ac71bf601bb50c09ed34a76144c428c94b873da4846144 |
| SHA512 | d6170d7fc438b17e0fd2acfbfc249179e87706affc0193c5f4d45da93db6db9d60d7ee353ce609e32661a27d6cd0751aea2608aa7969ee9e3fcd4c10a67734b5 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7-extend.min.css
| MD5 | e607932905508ecf1b742cea407ce641 |
| SHA1 | d60855b51e849a4f840918daf29dbd4e321fd6a8 |
| SHA256 | 664d9c5904f8f9a3f801bc950e5d7e3a8c26d8037ce5fcc44fcb313df104aabc |
| SHA512 | 4f7f59714dde509649daec031d712860ede89dcdbb906ceb817871a2eb7eb3f21c6f0cc0a6c0b8de3df5bae60b85f73fbce0f5e2c46bfd6325b730864853aaa6 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7.css
| MD5 | 1bf7a101d53c8df067e17394671beb94 |
| SHA1 | 11bfefd674f7633d9aa945e23b2b6ca2319056ec |
| SHA256 | e2e3a4ffa4f938f36a68f1c7ed466e2cd11ab2f45b24bafcc3c8f32db418b1e0 |
| SHA512 | d24d26f7f328dfdcb8e1757f3cf68299c398807f4f0ba93c98380eb6b22d810ef5a91b65f60de7606eda529933c20aa56309cbe446898526475a078a7fda6867 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7.min.css
| MD5 | fbaab29bd0639dd02b73404aadfaf05a |
| SHA1 | 62d0763fe38a82dd7a1416cfe86d9ebba4ce858a |
| SHA256 | 47300536062000868e0cab1d956249b9fe0ce397f9cdb27d8d2d03684d9344d1 |
| SHA512 | 97aca39a8ab84543847950ea8a7aaa071ea74ab16f3528c76959282415bf2114f6b40460bb0a20b6184fe16231a5dfd66af8857081683a999ea4e402db16d173 |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushext.db-journal
| MD5 | dae31ca1d7faa7d08c725d0419772014 |
| SHA1 | c08b5339e4a5e6f7d224a8660d012ce4fd9fb060 |
| SHA256 | f5fd919c11331fba3af5dd6cd5067fd1ea7f312a2d7bfda377060547c3a9e16d |
| SHA512 | d5e1d03dbd789aabef883e318ce1186fe01da34a4617e5749fbd2f08adfeb17e7002686782a2d05153843cb3a3dfcc5ba49aafae5b1925e1576cd64461a13659 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/demo.html
| MD5 | 7d57ddc5c69bd15cf1d1fcfbb3050374 |
| SHA1 | aff71cf019eebb0f140cb4d040104c45f10a30cd |
| SHA256 | 1e17d80fd51a20fff7c7631c8c2a4a98cea16dfca838ff318db79dd4b2da9f1e |
| SHA512 | 542b1cb9d607c1039a19b03040ae5d7bd4ae4b2728a86569bcb11d28cf1e2f043acc0625d91ac8512b7ec78722666628e6d2528aa72a1641ab514fb478d2f320 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.eot
| MD5 | 0fa9c601160e65a93b9d3ec071b8072d |
| SHA1 | 118ac60807bcf1a054efda12b01ef712bba11ef8 |
| SHA256 | bf248d4074c30e05535df4f34662692d11c51d6a53a683552883a779af76041d |
| SHA512 | 914e6ee3a0ca6659e3e48daa458f95098ffaf23e2bee4abaac30250a6ae7ae5b5812a398c578acba935208e5cd62f54199c4c1d0490ab39cb1a96d43c45e3f2d |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.svg
| MD5 | 25e29a11480d7c7cc68804f8292d55b8 |
| SHA1 | 4cbfeb7256554c98807fb1a4d719d215a302eab3 |
| SHA256 | 589e8ea3c829863f4505d5dc6dff37a3858f56db3505aaa00bc6d454f47fbd95 |
| SHA512 | 1b025ac5b17c0612c977083c8f9ff5b458363ac7f8a2c5a2a184e610531d28d83a6f782d7bf19945cddc017a064aeb205e076e82b9073311564f42cebe660390 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.ttf
| MD5 | 9d781c989bf3cb7dea562932d9b41118 |
| SHA1 | b32fcbe8c74b96c6f810be7978f18fb1ff444561 |
| SHA256 | 5efc52b2522e4940bbdd044f38adb41edb4c6934b2274f70f1c8fb9fbcb394b7 |
| SHA512 | 759ed6bdbb97c4b2fbdc2526e8ca98c11b429edbb0ca03f4ea3a4ce3e84e0da9891b0d5a31448613d755eabc663940f5d7e825aeaf160a1eda3808eba44ba351 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.woff
| MD5 | f42d093bdb69d8137bfe4fda8c37758a |
| SHA1 | 4e0dc19bd3e4b72e879a15678d37c7b4c4af9e4b |
| SHA256 | f0ec9caa0cb29a46c1b65efbb420dbd7cdfd4979a2284b51003fcfe033197fc2 |
| SHA512 | f7d2c55283fd41bacade44f340c9be7ed8b5f313c0cca259dd936c26c256850f8b79313542b572254feaaef69229e9e80dd263252a74dc453ab031cd088afe47 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.eot
| MD5 | ea4a08a9d13eac796eb335310c8084f0 |
| SHA1 | 3e2f11ef06160de4fef451a01d655c3c662f9753 |
| SHA256 | 92c240fdfea116994f381765f663a658891f352ecf5ada6669f3ee1247e2fe6c |
| SHA512 | 25ada6e6b3b8bddbe34bc756d357f3ffcbb5b32a72ef8cdef3a1c929cb44af53326349a150c522bbcf99664a44855a05ff8864068ffdc305be47d28c3aba3e33 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.svg
| MD5 | 70e013de33c2337bce7d5e97eae856b2 |
| SHA1 | de52f2df4002024d7fc166339469a6dc001f7500 |
| SHA256 | f8cfcfe0f3b9f254b23594d617358176540148fd376cce6e979fa2dc8764b488 |
| SHA512 | 6ea958bff21fb3a65f6e60e55826d41417d34b3348924bacf4601500826adff59355f7f1aca8faed1c664dfd8e776abe58b667723c967c85e69fbc3c12e6740d |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.ttf
| MD5 | 5f48561abb43ace3f2a761ee719f0113 |
| SHA1 | d5d6a15cb1d13e992f8acf6c274de15313d79464 |
| SHA256 | c4d0e3d754cbd53ae84d3ab3e5234d6083b03e70acbfe1e81cf273fefd91fbbe |
| SHA512 | dee966e076bdc74499cbc906c6c1a65134c83235980a623dbd720b0d6bb9eeaa7a3df2606446561bab058163c01e8fbfc0020c9f1d4e25948adaab4458cab052 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.woff
| MD5 | 03b48d7ac06a62c5ad76a798683ba177 |
| SHA1 | 6d016f93966ad97bdb4c3b486ee11aab88481fdf |
| SHA256 | 6b7f772f2749595a32af119a436d66a5c26b3781f90337b96cfe4ce434dd26f5 |
| SHA512 | fdfe9afded8879c401d4a87d4b34c174178d68d1806cf7cb0c83aaaa72206af7904ff00986947db2fe1a59ce6c3e24b17dba3447908c03973dddd98fdca21325 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/close.png
| MD5 | 384b63135092635e72989b854dde0aeb |
| SHA1 | a1cb3aec0a0ef669fb3484b910ceb22ec348071c |
| SHA256 | e59d45d34ac5f7812878eef67b569b010a0cd62b94e8eca68bebdfaf267a439e |
| SHA512 | 47dfebc1352afe6f68ea6461b096db7cb4da8b2279f1187cc758b35065990708fb7aa51312ee6d6497782501a03bb590e82ee10efb4a4dbe945bd131f7bfc642 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/exit.png
| MD5 | 03011953dd7ebe8d64cb290a0c6ebfd3 |
| SHA1 | e45c7f43eb40b98326bfe83375663a4c4cccf34a |
| SHA256 | 3f4bf9c28604a3a4e04c10d25211d589a3ac74fe36aec052973691f0ef13fd8c |
| SHA512 | 29731203c965d9f0f907ed3729017e03dec7b208853e711d6da98f3c43bc955ab0679818bf3d9a93a0a69a1b6446de0a8ebbee9957a203a5a69738dae88f06e8 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/noimg.png
| MD5 | 05c18050e748c35eb4a4e81648e03343 |
| SHA1 | 026384baff69368de82c0905ce9b69d142be3525 |
| SHA256 | 4b59098c09e0dd57ca4a71b1757a849a7ac27a06912553894e9a379f1e3bfd36 |
| SHA512 | 4e3356c37b591c069b360eb3c6a7a460a862432922332164e1b6dc6d896e4e3d64fe77e577a0a2ee8f61f04a58370adc3a8e7af8e0e6e9b225cff0b549188a9c |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-close.png
| MD5 | 252ff3a4628968af2b5d6b9f1a1449b4 |
| SHA1 | 9cb33fe07cd6dbf965c699325f5a964e13cdd972 |
| SHA256 | dcd93811cec50872844f6dc1f59c4f1393e75f77fa413adbd0722a48ce2abf98 |
| SHA512 | 006557a6a3f2ad67fff08252526b75b69a9b12f72f3454a7e031b005fe07271ad5a157538d81b34d9e1e9c7f3c063fc72a23d0ffaa200cc05fa3d15328666218 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-f7.png
| MD5 | cd7498722d42b2c95d5ec86bffdf6314 |
| SHA1 | d5827def9ef2d24ad123a9637465b71e2f7ce356 |
| SHA256 | 97d672bca0a4d8498640ba3136ed0683587c72b397d8eb01c2ed78809817bcce |
| SHA512 | 490dc2cb8751f74b1ff852e2b4461cc813d0ef4db8266232f59858bad9701ec67abac142c615622a743d0605fd3dad49830699ccc3a45c183bc2c389a8a86677 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-calendar.png
| MD5 | b21665ec52ab628790d8074d45dbb4ee |
| SHA1 | 54676ea0f40dfc874bb2dc0e258d1096e73d2a36 |
| SHA256 | 87783c128df439ef298c0ce20d9a1716846e2490be08eb63363b8d947f5c3c79 |
| SHA512 | db2e8cedde476565e41e9178f3c6ccf833de2aad0125d06ef49fed7d1302d9396435d94c76f8c622ff10c0e4d4c21bbf1223f95bb25666f3517332aa97fae209 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-comment.png
| MD5 | 2ac97ed332fc6ad50d6b04d7632413c9 |
| SHA1 | 91be7cec983754ec6265d4eb0508cf5337eef95d |
| SHA256 | 38f21009c45948e705c0592c7712edda98cc11f44c1a71c03974fa35ffc0c417 |
| SHA512 | ec7919d846ae06703f26909e637904257e155c745b233b8beb3b0bec17b43ab2a1b0a055d99fcf0cb23834a466059670a9dcfb3159a8defd1136748b881dbf8b |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-email.png
| MD5 | 14fb116a860e72ff96051fdd37e553a9 |
| SHA1 | a25837821d4f5ff47c7ed30e702e5efb8235508e |
| SHA256 | d672dec430eb4bfc70123154747e19765813a9c67d66881322fbc0e4f177402d |
| SHA512 | e6e946a04b40d1e0c3c80625055583abd0e60f9e72d1225ded90592860fd6a2d6c253fd53f39558ddac57318de6143400c2740d8b19b249d00b004523b7d8ea5 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-gender.png
| MD5 | 9b22d8aae706182c33ae6e4e65f0b5a5 |
| SHA1 | 86ee3a241b39f6fd74ee7203fbfa2635639eb9b7 |
| SHA256 | 595dcff8db5656a669e444b87381ef44dabefd0c1622baaeb2b7a99df22c3047 |
| SHA512 | 7c52bdc72b27a1fa6b950cd67d73c9de98b3153675766a73e092158d73eaceffdda91e81b6b4c7c84346229762284d2b137a3293852b4b86c1e04d2c3ec7dde5 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-name.png
| MD5 | b8acd1fb067446eaac449ab5967071a9 |
| SHA1 | 31f4ea95b1c712a0617685b754c62a3e93e33b59 |
| SHA256 | 2b6510f692b3b43e09859afaeb52ab2899ec3955d17f0a16e2b51aa9d3767f2e |
| SHA512 | 8ef148cbce209349e936a83faf8c3035528b52d2b16822afb74c31e5f38e7426304ced8f228769e81e5a44a71c471a2a80bb575479b11197cddf81b786c0521d |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-password.png
| MD5 | 31effa2dc1cb5837b38b8c498e473e4c |
| SHA1 | 94c6f054fdcaf9d134e700d421d182cebc6bffa3 |
| SHA256 | 1d0e445c2bf851ca1eed049ecf59a4242bbe81dfb49e4c5dbb8475de63dffd8a |
| SHA512 | 8e1838528b04531abbbd6b724e5660c2abf2fb63ffd2279069802317b82bc4b8bade1dd59db822dab2cc04b873d2bc82a8ecb9a15b7ad02ddb587bba3f90c781 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-settings.png
| MD5 | f459d9280899d9ff8a6a8560e29a68b5 |
| SHA1 | 90db4e705e7e415fb70dd2d39e87c3873dc39c4a |
| SHA256 | 437b71d891da188534f76cb9ed5e1b87030ce5cf0c39f57f35e8147b017e4648 |
| SHA512 | 67d021b77739227e51a5ca8aa3846ad22b28bcbad37d55f3cae5a14f3723d2604cb538f30477a2feb31c4134514ba4ade273a56ace4915c894deddd8abe9ad8e |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-tel.png
| MD5 | f277497484fc5a37b886627013e996af |
| SHA1 | f51a2f6ef215f6ad29c41efdeb17bc4e9e03fc48 |
| SHA256 | 1ae98a3882181cdc1ffa5b2cffa1d71675ab7f250ce01e494ee8ab6922f0759e |
| SHA512 | 9d9cd9ceef6d1081c43a9b8ced1d77ea736f76455a424e1e046cb2f8dd17c3aef85c332720b0e81fa56d9b04d3f5ff82256c5a914f2a7e3d62845708a55888aa |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-toggle.png
| MD5 | 61730378743e8336e0e3bd2b6634ac77 |
| SHA1 | 637c967514f96281362402993db6eb95cc20eda4 |
| SHA256 | 784eedc25ffdd16c51854ede5bd5a6007904519ccc85b8a5db64b9834e2a0c36 |
| SHA512 | e4f41242e2ed346123fa2c0a9830f241d6ca39bfa531ea7a91bc1831aab311fc16ce94780d620fe558336c84851d77ff83021d1cfdf0860adfae0c1395e4a05b |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-url.png
| MD5 | bd49d961d59534d03f6f7c8af0c87ec2 |
| SHA1 | b506d66f8fa9558b72f8df34bfc1532e4d4de4c2 |
| SHA256 | eac8087996609f1a38e19c7ae76454e117fded51b3619cc38b9ae67797abd078 |
| SHA512 | 818c5e553e12988e10b7e8ef1ce008d909a949e1a67a3d3904e11bafd751aae65b3463d939b355779252515aaf6716802fb6f72de74e17dc6fbeb9a0241462c0 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-list-chevron-right.png
| MD5 | e62973033009b9e6327f7771a0e27e75 |
| SHA1 | ece9e32d6289a717ab95094420250b5224220371 |
| SHA256 | fadd1b736a4e14a19ea9927158e3317ef976d36e37c15a29c0f5e6f7173aacf1 |
| SHA512 | fd94e6727297b10430e2ee679cf841ca09d138a54cf2442ed99be7e5ff756897537ca8e28dab110c91eb8d964e5c34372e7ed0d7f26e5446062e3b0942c927e8 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-sortable-handler.png
| MD5 | 7753dfd6f360ec5112a8902206756822 |
| SHA1 | 7fe584e02ecb474ff220ed0253af2ac2f235a289 |
| SHA256 | 374f1d33de61ae724a72dec2751103a445dbd70934eb063c972d20194dc00d3f |
| SHA512 | c3b7a958460415864636963a4aee9e0d4d837f435c8888b27b66adf16a8a0388c7af004465f328ad9fa38957e7f426891a7a6122d6a377887ff24cbe4b700786 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-upload.png
| MD5 | 68521f8e558468279da027f09b0a6a31 |
| SHA1 | b767e506b91c3d02bcff74da03b3957084f6caac |
| SHA256 | 80b9afeed6492e57abe21860a79dd399392d8584298b6b943ec56b67d1725d1d |
| SHA512 | de6d42a7419a519d68a30389424f72fbc7b5419f53b7b81083743f4dad7b61d19676ed70552aacfdd9972eea7d461a8a295aec348dfd0ae5dd7b55e771ea6ad6 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/index.html
| MD5 | fd2fd948a1c439ea011d1d8dc6bd8ae8 |
| SHA1 | fa0b8473d2f677140f833bb4f707c56d982fa85d |
| SHA256 | f575d59e581465a8c44fd37f8c42e61dc4835731e8819aa5da3b8316ebd35b62 |
| SHA512 | 4f4ac25a57ab7fdb2db74d0918b05e7dcb533a12f5d1b57691722120df3eff9a0e399e84eb570ab20fd4b13754016f233de637dd70b845df671dcbab5ef78ae2 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/demo.js
| MD5 | 18b66a39dcb2fcd9a1e03743cb917556 |
| SHA1 | 36fb0af201f7404918e39f5cf05a3063bb505bb6 |
| SHA256 | 125bdb9f44666e0ba554302f613de1c3f44b2dba0dcdfb6cfef2970f8ec53ffd |
| SHA512 | 44ba949d73f41ef2eb1bb669f5c6ba81339369fdf1506985f510bc170b26632b1d4f5ade4ecd0a79f4a1ff571caa9ed703ec9e03d3413ddc742d6b646a00cce5 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-city-picker.js
| MD5 | 0d97a66cf2e1957dfea86d01ecef9042 |
| SHA1 | aaa79fb22003cb5d3fcbf4ebabb4afd14526c92b |
| SHA256 | be8659238a3e9cdb79f167f0884f48bb944a7c67a8be79a4aaa4f924a6e91758 |
| SHA512 | 6e11450ddfbb3d5d99d365cad5e330820da6a1688532cfe0d83e8907396e3f7b6ad4703a22d496144148ad3339f7823456a3524fc30b1b33a6c747eb8602bd8e |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-extend.js
| MD5 | 8d82137ef854537ba2d1c747006b291c |
| SHA1 | fbee85af6b106c726a26f70746f1132729ada3b1 |
| SHA256 | 207e9b58e9edb6a89f0e9ca5cdf71904426525927331229213939b3d31d48b7a |
| SHA512 | 42e6aaec8c11b04b620e96d8366ff2b6d31dd4ab1f041f277c18599aa2b46bdceeecde450432a58c126ee86d5c4117f3eee21f76c9a9a3b85a700b22ded101fe |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-extend.min.js
| MD5 | c89f65bd2fd7224c396d45f792c310e9 |
| SHA1 | de69ee3f5240f088aa64a14b3a919215b7798d10 |
| SHA256 | a4b96f1761962ab47eea5a26cb1c4e1c4b4597a92746462c6134424805e6c8c8 |
| SHA512 | 5b25836193437c09f263bc119874621828494732f58f857d94f8cbcf0fb61941cf9801c6f83f39a8e8de89c5f7e145ac72dacc567ac92de15a20a87c5f539047 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7.js
| MD5 | d8ff12af28e248e051546232463ea827 |
| SHA1 | 2e29a1d88765f8f42245b1c27d1bc60bcefb9f75 |
| SHA256 | 75c7412371c6920388cdd32e1777963bf0638026b1cc9baf94409a1dc60f4150 |
| SHA512 | c1d075144d6e4172e69157c16c2c55d1c5bd30c8616078609582acdafef3eccdd3f66b8db66f827167a482b91d0a69a39d3c32430d4a4b150d885aea6d3387db |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushg.db-journal
| MD5 | 918d60a4d884d2c02ebfe5b0a2825b08 |
| SHA1 | 72c965c9f897d467e5cb6e1c244676f6c4650fe0 |
| SHA256 | 51f7e0381352ab26b2a2fc40c4b13d2dd2986f0955ffb53f2bfa48121c05646e |
| SHA512 | ef5ea6ff7401eeb347eb93c934674f5c544ff5e495be267c696fd107b60aadbc9e25c4e20293fba72e1acd15bd4242c0355dea1b5f24a164fee93a4e52a3bbbb |
/data/data/com.wta.YdbDev.jiuwei239909/databases/pushg.db-wal
| MD5 | 238e41ff56cd20a91810d5d7454942f3 |
| SHA1 | 293e584975f6182c53174346c708198c4327f54e |
| SHA256 | 3c32f21f9084b223b21a60bbc7d21d9e1440368f8f9eaf4606783ef65f8aa732 |
| SHA512 | edb466dac66c6a4b2cd909256b13270b5c6b44aeb029735a1f3b32950d5f0789f2d515d14ed58842668c7d382d761e87e867ea9b0b9b59252114060803063270 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7.min.js
| MD5 | a09a0d6ebb96356950057b115aa18ccb |
| SHA1 | c60b91a7ae06beb375254cec414589c6a793f4de |
| SHA256 | 82a864f5398b90c2c3610212e7f3e63e2f6a1a4118f7fbf5974323578968fb02 |
| SHA512 | d2c3eff7f5167252909e82f688b4246b42b2300bf663b2014e723afd9f59715167ae5939ac6e3f83f05a413c91781e9722a8413244c5248837679b265bac2191 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/zepto.js
| MD5 | a564a61d87513e0ae4bd27b4644dd4c5 |
| SHA1 | a5ec86622d677855b2ccad5597213906fe1d99eb |
| SHA256 | ef9381c84194033ee8e2dc9109d02b0683f6aff8e20abee19967f0fa10d982d9 |
| SHA512 | 49e86921069ffa7f308e4771e5370ee81585110e51d6a0de274705a6e06199adf2c45e528cd6ddf11604792230c0dc4746146943c049965314b06838d36c3cf6 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/zepto.min.js
| MD5 | 1abd55c514bd00abc726cca455f6b4c9 |
| SHA1 | 49a1d0559ea2ef3d392d67250c7d815a45081d1c |
| SHA256 | e094daff39a7fadab01be75eb3652905ff64fd5c67ba4b10929e9845abbf7b72 |
| SHA512 | 39a193f9dc0e085792ab80c2a51a3ca13c1ccfca57e6ea2b1d03863b39aa14cbd94a74e0df011a3c5c1fd51d4c6224b344b9bcb5736c667e70528e9a8d9a0f77 |
/storage/emulated/0/libs/com.wta.YdbDev.jiuwei239909.bin
| MD5 | ea81ddd23de039d6f986519396a3227b |
| SHA1 | b547b343770fb3ea96ccf36aed4f6c7a3d3b8afb |
| SHA256 | 3751b29641bd0f10093e728d7a018f2f79a92eccf0b77b1ace8a3a884f3d5906 |
| SHA512 | 567f9f7719a9ca0b8720ba789e2c786bcd34916c77f7dd84e742d442c4c09d4b9ed55fcf77997610f907671482c06d35d1641910ac1c2659d720a2a85c9d2d54 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/lib/AppDebug.js
| MD5 | 917c04c376c437d5e1689e5889978659 |
| SHA1 | fedd31dd250e1b8a005da9c34ca06a11d5bc1d4d |
| SHA256 | 807fab0b8bb91aff726bdb776e0c6c13e5c6c90cf208a3fc64ce9d419878b442 |
| SHA512 | 7b2981619af95b383156f33f51ac997a4e332839e9e21aadfde1064b4c6b5fc61ba6c40a826cec61de9e7ff80a0c7e0342232ff95fec506997247988efbe2abd |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/lib/YdbOpen.js
| MD5 | 5970e60b94c10b9fac088c5bd149ca2c |
| SHA1 | 973cedbeff3f7985f242d60fc7171a5357058b1a |
| SHA256 | 1740f0f10bfa5d441c3441ec071f869c0d70d5b85863d097abac7818812f2824 |
| SHA512 | 81f1dfcf0e81361ef743e5cd42562fb62b5ed0f81d84b9be9dec98b49d4e7905188d173a42aa79e31db0e60de301c20281e4a1000c8dbceb8e2bd197e4cc8f53 |
/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/wa.png
| MD5 | 2a960dca70f6a0f604bdef3f31c0d718 |
| SHA1 | d5cff36727242d959f7910a19dbb73c39970b843 |
| SHA256 | e854022bb5b0cc905c88aa9ae50577f63b1f525d6354969e6ee17d6fed97e612 |
| SHA512 | 083fac092341e6a3b6e17bab1f4c8bce100b1d237138a5f47dcb174a5e26e8d7ca0b6bff87178651190bd3894722b95c226fb99408f6c83030636355d3d22902 |
/data/data/com.wta.YdbDev.jiuwei239909/app_tbs/core_private/debug.conf
| MD5 | 14d7a818e9e2586f58a8b87e23449848 |
| SHA1 | eac19882ab01a8414d9bfcaab31d0c0cbe9d347d |
| SHA256 | 3c1e2c72c08fa2022803afc3c2359006b0d5bd576deef74785eeb325a9332af1 |
| SHA512 | d5a67871aad1182bf7453353d932f7e1720875a9809b2306c2932c4c322d57434a9655b7ffaea9626cb297f666d4f96a6be78843364a215e61585739b3fdb30b |