Malware Analysis Report

2025-01-19 08:03

Sample ID 240610-x8a1ssyaln
Target 9b5c7f251b0eef0e699707ae4342429a_JaffaCakes118
SHA256 05a66a359f78191e5cec8c6ad90010e8547f13c345e68c8d7a1d24876adb325e
Tags
banker discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

05a66a359f78191e5cec8c6ad90010e8547f13c345e68c8d7a1d24876adb325e

Threat Level: Shows suspicious behavior

The file 9b5c7f251b0eef0e699707ae4342429a_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker discovery impact persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Reads information about phone network operator.

Queries information about active data network

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 19:30

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 19:30

Reported

2024-06-10 19:34

Platform

android-x86-arm-20240603-en

Max time kernel

174s

Max time network

186s

Command Line

com.wta.YdbDev.jiuwei239909

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.wta.YdbDev.jiuwei239909

com.wta.YdbDev.jiuwei239909:pushservice

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 pdeviceandroid.ydbimg.com udp
CN 116.255.131.209:80 pdeviceandroid.ydbimg.com tcp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
US 1.1.1.1:53 oula.cnnn.net.cn udp
US 1.1.1.1:53 apiinfoandroid.ydbimg.com udp
US 1.1.1.1:53 sdk.open.phone.igexin.com udp
CN 115.227.15.7:80 sdk.open.phone.igexin.com tcp
CN 116.255.131.209:80 apiinfoandroid.ydbimg.com tcp
CN 120.27.120.19:80 oula.cnnn.net.cn tcp
CN 120.27.120.19:80 oula.cnnn.net.cn tcp
CN 116.255.131.209:80 apiinfoandroid.ydbimg.com tcp
US 1.1.1.1:53 c-hzgt2.getui.com udp
CN 115.227.15.15:80 c-hzgt2.getui.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.15:80 c-hzgt2.getui.com tcp
CN 115.227.15.233:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.16:80 c-hzgt2.getui.com tcp
GB 142.250.187.206:443 tcp
GB 216.58.213.2:443 tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.16:80 c-hzgt2.getui.com tcp
CN 115.227.15.227:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.14:80 c-hzgt2.getui.com tcp
CN 115.227.15.14:80 c-hzgt2.getui.com tcp
CN 115.227.15.225:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.13:80 c-hzgt2.getui.com tcp
CN 115.227.15.13:80 c-hzgt2.getui.com tcp
CN 115.227.15.241:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.237:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.235:80 sdk.open.phone.igexin.com tcp
US 1.1.1.1:53 cfg.imtt.qq.com udp
HK 43.135.106.184:80 cfg.imtt.qq.com tcp
US 1.1.1.1:53 log.tbs.qq.com udp
HK 129.226.107.80:80 log.tbs.qq.com tcp
HK 43.135.106.184:80 cfg.imtt.qq.com tcp
US 1.1.1.1:53 tbs.imtt.qq.com udp
CN 218.60.10.59:443 tbs.imtt.qq.com tcp
CN 115.227.15.239:80 sdk.open.phone.igexin.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
CN 122.189.171.73:443 tbs.imtt.qq.com tcp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
CN 115.227.15.6:80 sdk.open.phone.igexin.com tcp
CN 140.249.101.87:443 tbs.imtt.qq.com tcp

Files

/data/data/com.wta.YdbDev.jiuwei239909/files/init_c1.pid

MD5 575a90e2cd5747943ca55703c9ba31e6
SHA1 6eff0e195ee145e0e45f40fca67c6f8b6d49296b
SHA256 9612de2cee9f595db8ebb14a69509b5e7a65d429fc57c2808f2e33f9ac9c8073
SHA512 b5958f6d357da5d08387f49678a78cca20a932c7e2a732b233e76ed4f190664e8765e48166f461c93114afd545ea44e80176d9ae3c19c2c2936e3b9182eb18fb

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-journal

MD5 cf0673b5b660b53f4b8564e443fe3d59
SHA1 d745dc35902ae40a95c1b28360838960a7e884de
SHA256 96878e2cc3ff1054bb51a2907abbf48c9fdf4e99da160f6cb6e44c3efc0ea394
SHA512 a6356fe77d541e514d12eab936e532ec0f891919bddf0204f9b97d353e5d18d97105abc72f41563973da333871b686cba0dcbf3838bf5e244d50f30795f2d5ff

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db

MD5 84f4b31aeb81e51a5c3bfeb4fa21b2bd
SHA1 0cd5ec62f65c88f8b2329da39fba5551e63e17b7
SHA256 cd95a9b44cea685fe2b311329de23f241af8b96a6002528ea6c36b7453f18c3c
SHA512 61ee202f6da97fa5b202f80345f7a64c7492e2c742c71e969f9cb036fc316c97295df0be934dd40f70b89373ee53b69993cf03b8578660fa46b2790d03027a49

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushsdk.db-wal

MD5 ab47eb5ccef3a8874e64852323d5a447
SHA1 2a1f0966b3dfa3cbb3e49115daa67df64f06e885
SHA256 e9d9c30a5159d99bd0ac71bf601bb50c09ed34a76144c428c94b873da4846144
SHA512 d6170d7fc438b17e0fd2acfbfc249179e87706affc0193c5f4d45da93db6db9d60d7ee353ce609e32661a27d6cd0751aea2608aa7969ee9e3fcd4c10a67734b5

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7-extend.min.css

MD5 e607932905508ecf1b742cea407ce641
SHA1 d60855b51e849a4f840918daf29dbd4e321fd6a8
SHA256 664d9c5904f8f9a3f801bc950e5d7e3a8c26d8037ce5fcc44fcb313df104aabc
SHA512 4f7f59714dde509649daec031d712860ede89dcdbb906ceb817871a2eb7eb3f21c6f0cc0a6c0b8de3df5bae60b85f73fbce0f5e2c46bfd6325b730864853aaa6

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7.css

MD5 1bf7a101d53c8df067e17394671beb94
SHA1 11bfefd674f7633d9aa945e23b2b6ca2319056ec
SHA256 e2e3a4ffa4f938f36a68f1c7ed466e2cd11ab2f45b24bafcc3c8f32db418b1e0
SHA512 d24d26f7f328dfdcb8e1757f3cf68299c398807f4f0ba93c98380eb6b22d810ef5a91b65f60de7606eda529933c20aa56309cbe446898526475a078a7fda6867

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/css/light7.min.css

MD5 fbaab29bd0639dd02b73404aadfaf05a
SHA1 62d0763fe38a82dd7a1416cfe86d9ebba4ce858a
SHA256 47300536062000868e0cab1d956249b9fe0ce397f9cdb27d8d2d03684d9344d1
SHA512 97aca39a8ab84543847950ea8a7aaa071ea74ab16f3528c76959282415bf2114f6b40460bb0a20b6184fe16231a5dfd66af8857081683a999ea4e402db16d173

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushext.db-journal

MD5 dae31ca1d7faa7d08c725d0419772014
SHA1 c08b5339e4a5e6f7d224a8660d012ce4fd9fb060
SHA256 f5fd919c11331fba3af5dd6cd5067fd1ea7f312a2d7bfda377060547c3a9e16d
SHA512 d5e1d03dbd789aabef883e318ce1186fe01da34a4617e5749fbd2f08adfeb17e7002686782a2d05153843cb3a3dfcc5ba49aafae5b1925e1576cd64461a13659

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/demo.html

MD5 7d57ddc5c69bd15cf1d1fcfbb3050374
SHA1 aff71cf019eebb0f140cb4d040104c45f10a30cd
SHA256 1e17d80fd51a20fff7c7631c8c2a4a98cea16dfca838ff318db79dd4b2da9f1e
SHA512 542b1cb9d607c1039a19b03040ae5d7bd4ae4b2728a86569bcb11d28cf1e2f043acc0625d91ac8512b7ec78722666628e6d2528aa72a1641ab514fb478d2f320

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.eot

MD5 0fa9c601160e65a93b9d3ec071b8072d
SHA1 118ac60807bcf1a054efda12b01ef712bba11ef8
SHA256 bf248d4074c30e05535df4f34662692d11c51d6a53a683552883a779af76041d
SHA512 914e6ee3a0ca6659e3e48daa458f95098ffaf23e2bee4abaac30250a6ae7ae5b5812a398c578acba935208e5cd62f54199c4c1d0490ab39cb1a96d43c45e3f2d

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.svg

MD5 25e29a11480d7c7cc68804f8292d55b8
SHA1 4cbfeb7256554c98807fb1a4d719d215a302eab3
SHA256 589e8ea3c829863f4505d5dc6dff37a3858f56db3505aaa00bc6d454f47fbd95
SHA512 1b025ac5b17c0612c977083c8f9ff5b458363ac7f8a2c5a2a184e610531d28d83a6f782d7bf19945cddc017a064aeb205e076e82b9073311564f42cebe660390

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.ttf

MD5 9d781c989bf3cb7dea562932d9b41118
SHA1 b32fcbe8c74b96c6f810be7978f18fb1ff444561
SHA256 5efc52b2522e4940bbdd044f38adb41edb4c6934b2274f70f1c8fb9fbcb394b7
SHA512 759ed6bdbb97c4b2fbdc2526e8ca98c11b429edbb0ca03f4ea3a4ce3e84e0da9891b0d5a31448613d755eabc663940f5d7e825aeaf160a1eda3808eba44ba351

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/font_1433401008_2229297.woff

MD5 f42d093bdb69d8137bfe4fda8c37758a
SHA1 4e0dc19bd3e4b72e879a15678d37c7b4c4af9e4b
SHA256 f0ec9caa0cb29a46c1b65efbb420dbd7cdfd4979a2284b51003fcfe033197fc2
SHA512 f7d2c55283fd41bacade44f340c9be7ed8b5f313c0cca259dd936c26c256850f8b79313542b572254feaaef69229e9e80dd263252a74dc453ab031cd088afe47

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.eot

MD5 ea4a08a9d13eac796eb335310c8084f0
SHA1 3e2f11ef06160de4fef451a01d655c3c662f9753
SHA256 92c240fdfea116994f381765f663a658891f352ecf5ada6669f3ee1247e2fe6c
SHA512 25ada6e6b3b8bddbe34bc756d357f3ffcbb5b32a72ef8cdef3a1c929cb44af53326349a150c522bbcf99664a44855a05ff8864068ffdc305be47d28c3aba3e33

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.svg

MD5 70e013de33c2337bce7d5e97eae856b2
SHA1 de52f2df4002024d7fc166339469a6dc001f7500
SHA256 f8cfcfe0f3b9f254b23594d617358176540148fd376cce6e979fa2dc8764b488
SHA512 6ea958bff21fb3a65f6e60e55826d41417d34b3348924bacf4601500826adff59355f7f1aca8faed1c664dfd8e776abe58b667723c967c85e69fbc3c12e6740d

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.ttf

MD5 5f48561abb43ace3f2a761ee719f0113
SHA1 d5d6a15cb1d13e992f8acf6c274de15313d79464
SHA256 c4d0e3d754cbd53ae84d3ab3e5234d6083b03e70acbfe1e81cf273fefd91fbbe
SHA512 dee966e076bdc74499cbc906c6c1a65134c83235980a623dbd720b0d6bb9eeaa7a3df2606446561bab058163c01e8fbfc0020c9f1d4e25948adaab4458cab052

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/fonts/ratchicons.woff

MD5 03b48d7ac06a62c5ad76a798683ba177
SHA1 6d016f93966ad97bdb4c3b486ee11aab88481fdf
SHA256 6b7f772f2749595a32af119a436d66a5c26b3781f90337b96cfe4ce434dd26f5
SHA512 fdfe9afded8879c401d4a87d4b34c174178d68d1806cf7cb0c83aaaa72206af7904ff00986947db2fe1a59ce6c3e24b17dba3447908c03973dddd98fdca21325

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/close.png

MD5 384b63135092635e72989b854dde0aeb
SHA1 a1cb3aec0a0ef669fb3484b910ceb22ec348071c
SHA256 e59d45d34ac5f7812878eef67b569b010a0cd62b94e8eca68bebdfaf267a439e
SHA512 47dfebc1352afe6f68ea6461b096db7cb4da8b2279f1187cc758b35065990708fb7aa51312ee6d6497782501a03bb590e82ee10efb4a4dbe945bd131f7bfc642

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/exit.png

MD5 03011953dd7ebe8d64cb290a0c6ebfd3
SHA1 e45c7f43eb40b98326bfe83375663a4c4cccf34a
SHA256 3f4bf9c28604a3a4e04c10d25211d589a3ac74fe36aec052973691f0ef13fd8c
SHA512 29731203c965d9f0f907ed3729017e03dec7b208853e711d6da98f3c43bc955ab0679818bf3d9a93a0a69a1b6446de0a8ebbee9957a203a5a69738dae88f06e8

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/image/noimg.png

MD5 05c18050e748c35eb4a4e81648e03343
SHA1 026384baff69368de82c0905ce9b69d142be3525
SHA256 4b59098c09e0dd57ca4a71b1757a849a7ac27a06912553894e9a379f1e3bfd36
SHA512 4e3356c37b591c069b360eb3c6a7a460a862432922332164e1b6dc6d896e4e3d64fe77e577a0a2ee8f61f04a58370adc3a8e7af8e0e6e9b225cff0b549188a9c

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-close.png

MD5 252ff3a4628968af2b5d6b9f1a1449b4
SHA1 9cb33fe07cd6dbf965c699325f5a964e13cdd972
SHA256 dcd93811cec50872844f6dc1f59c4f1393e75f77fa413adbd0722a48ce2abf98
SHA512 006557a6a3f2ad67fff08252526b75b69a9b12f72f3454a7e031b005fe07271ad5a157538d81b34d9e1e9c7f3c063fc72a23d0ffaa200cc05fa3d15328666218

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-f7.png

MD5 cd7498722d42b2c95d5ec86bffdf6314
SHA1 d5827def9ef2d24ad123a9637465b71e2f7ce356
SHA256 97d672bca0a4d8498640ba3136ed0683587c72b397d8eb01c2ed78809817bcce
SHA512 490dc2cb8751f74b1ff852e2b4461cc813d0ef4db8266232f59858bad9701ec67abac142c615622a743d0605fd3dad49830699ccc3a45c183bc2c389a8a86677

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-calendar.png

MD5 b21665ec52ab628790d8074d45dbb4ee
SHA1 54676ea0f40dfc874bb2dc0e258d1096e73d2a36
SHA256 87783c128df439ef298c0ce20d9a1716846e2490be08eb63363b8d947f5c3c79
SHA512 db2e8cedde476565e41e9178f3c6ccf833de2aad0125d06ef49fed7d1302d9396435d94c76f8c622ff10c0e4d4c21bbf1223f95bb25666f3517332aa97fae209

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-comment.png

MD5 2ac97ed332fc6ad50d6b04d7632413c9
SHA1 91be7cec983754ec6265d4eb0508cf5337eef95d
SHA256 38f21009c45948e705c0592c7712edda98cc11f44c1a71c03974fa35ffc0c417
SHA512 ec7919d846ae06703f26909e637904257e155c745b233b8beb3b0bec17b43ab2a1b0a055d99fcf0cb23834a466059670a9dcfb3159a8defd1136748b881dbf8b

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-email.png

MD5 14fb116a860e72ff96051fdd37e553a9
SHA1 a25837821d4f5ff47c7ed30e702e5efb8235508e
SHA256 d672dec430eb4bfc70123154747e19765813a9c67d66881322fbc0e4f177402d
SHA512 e6e946a04b40d1e0c3c80625055583abd0e60f9e72d1225ded90592860fd6a2d6c253fd53f39558ddac57318de6143400c2740d8b19b249d00b004523b7d8ea5

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-gender.png

MD5 9b22d8aae706182c33ae6e4e65f0b5a5
SHA1 86ee3a241b39f6fd74ee7203fbfa2635639eb9b7
SHA256 595dcff8db5656a669e444b87381ef44dabefd0c1622baaeb2b7a99df22c3047
SHA512 7c52bdc72b27a1fa6b950cd67d73c9de98b3153675766a73e092158d73eaceffdda91e81b6b4c7c84346229762284d2b137a3293852b4b86c1e04d2c3ec7dde5

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-name.png

MD5 b8acd1fb067446eaac449ab5967071a9
SHA1 31f4ea95b1c712a0617685b754c62a3e93e33b59
SHA256 2b6510f692b3b43e09859afaeb52ab2899ec3955d17f0a16e2b51aa9d3767f2e
SHA512 8ef148cbce209349e936a83faf8c3035528b52d2b16822afb74c31e5f38e7426304ced8f228769e81e5a44a71c471a2a80bb575479b11197cddf81b786c0521d

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-password.png

MD5 31effa2dc1cb5837b38b8c498e473e4c
SHA1 94c6f054fdcaf9d134e700d421d182cebc6bffa3
SHA256 1d0e445c2bf851ca1eed049ecf59a4242bbe81dfb49e4c5dbb8475de63dffd8a
SHA512 8e1838528b04531abbbd6b724e5660c2abf2fb63ffd2279069802317b82bc4b8bade1dd59db822dab2cc04b873d2bc82a8ecb9a15b7ad02ddb587bba3f90c781

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-settings.png

MD5 f459d9280899d9ff8a6a8560e29a68b5
SHA1 90db4e705e7e415fb70dd2d39e87c3873dc39c4a
SHA256 437b71d891da188534f76cb9ed5e1b87030ce5cf0c39f57f35e8147b017e4648
SHA512 67d021b77739227e51a5ca8aa3846ad22b28bcbad37d55f3cae5a14f3723d2604cb538f30477a2feb31c4134514ba4ade273a56ace4915c894deddd8abe9ad8e

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-tel.png

MD5 f277497484fc5a37b886627013e996af
SHA1 f51a2f6ef215f6ad29c41efdeb17bc4e9e03fc48
SHA256 1ae98a3882181cdc1ffa5b2cffa1d71675ab7f250ce01e494ee8ab6922f0759e
SHA512 9d9cd9ceef6d1081c43a9b8ced1d77ea736f76455a424e1e046cb2f8dd17c3aef85c332720b0e81fa56d9b04d3f5ff82256c5a914f2a7e3d62845708a55888aa

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-toggle.png

MD5 61730378743e8336e0e3bd2b6634ac77
SHA1 637c967514f96281362402993db6eb95cc20eda4
SHA256 784eedc25ffdd16c51854ede5bd5a6007904519ccc85b8a5db64b9834e2a0c36
SHA512 e4f41242e2ed346123fa2c0a9830f241d6ca39bfa531ea7a91bc1831aab311fc16ce94780d620fe558336c84851d77ff83021d1cfdf0860adfae0c1395e4a05b

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-form-url.png

MD5 bd49d961d59534d03f6f7c8af0c87ec2
SHA1 b506d66f8fa9558b72f8df34bfc1532e4d4de4c2
SHA256 eac8087996609f1a38e19c7ae76454e117fded51b3619cc38b9ae67797abd078
SHA512 818c5e553e12988e10b7e8ef1ce008d909a949e1a67a3d3904e11bafd751aae65b3463d939b355779252515aaf6716802fb6f72de74e17dc6fbeb9a0241462c0

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-list-chevron-right.png

MD5 e62973033009b9e6327f7771a0e27e75
SHA1 ece9e32d6289a717ab95094420250b5224220371
SHA256 fadd1b736a4e14a19ea9927158e3317ef976d36e37c15a29c0f5e6f7173aacf1
SHA512 fd94e6727297b10430e2ee679cf841ca09d138a54cf2442ed99be7e5ff756897537ca8e28dab110c91eb8d964e5c34372e7ed0d7f26e5446062e3b0942c927e8

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-sortable-handler.png

MD5 7753dfd6f360ec5112a8902206756822
SHA1 7fe584e02ecb474ff220ed0253af2ac2f235a289
SHA256 374f1d33de61ae724a72dec2751103a445dbd70934eb063c972d20194dc00d3f
SHA512 c3b7a958460415864636963a4aee9e0d4d837f435c8888b27b66adf16a8a0388c7af004465f328ad9fa38957e7f426891a7a6122d6a377887ff24cbe4b700786

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/img/i-upload.png

MD5 68521f8e558468279da027f09b0a6a31
SHA1 b767e506b91c3d02bcff74da03b3957084f6caac
SHA256 80b9afeed6492e57abe21860a79dd399392d8584298b6b943ec56b67d1725d1d
SHA512 de6d42a7419a519d68a30389424f72fbc7b5419f53b7b81083743f4dad7b61d19676ed70552aacfdd9972eea7d461a8a295aec348dfd0ae5dd7b55e771ea6ad6

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/index.html

MD5 fd2fd948a1c439ea011d1d8dc6bd8ae8
SHA1 fa0b8473d2f677140f833bb4f707c56d982fa85d
SHA256 f575d59e581465a8c44fd37f8c42e61dc4835731e8819aa5da3b8316ebd35b62
SHA512 4f4ac25a57ab7fdb2db74d0918b05e7dcb533a12f5d1b57691722120df3eff9a0e399e84eb570ab20fd4b13754016f233de637dd70b845df671dcbab5ef78ae2

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/demo.js

MD5 18b66a39dcb2fcd9a1e03743cb917556
SHA1 36fb0af201f7404918e39f5cf05a3063bb505bb6
SHA256 125bdb9f44666e0ba554302f613de1c3f44b2dba0dcdfb6cfef2970f8ec53ffd
SHA512 44ba949d73f41ef2eb1bb669f5c6ba81339369fdf1506985f510bc170b26632b1d4f5ade4ecd0a79f4a1ff571caa9ed703ec9e03d3413ddc742d6b646a00cce5

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-city-picker.js

MD5 0d97a66cf2e1957dfea86d01ecef9042
SHA1 aaa79fb22003cb5d3fcbf4ebabb4afd14526c92b
SHA256 be8659238a3e9cdb79f167f0884f48bb944a7c67a8be79a4aaa4f924a6e91758
SHA512 6e11450ddfbb3d5d99d365cad5e330820da6a1688532cfe0d83e8907396e3f7b6ad4703a22d496144148ad3339f7823456a3524fc30b1b33a6c747eb8602bd8e

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-extend.js

MD5 8d82137ef854537ba2d1c747006b291c
SHA1 fbee85af6b106c726a26f70746f1132729ada3b1
SHA256 207e9b58e9edb6a89f0e9ca5cdf71904426525927331229213939b3d31d48b7a
SHA512 42e6aaec8c11b04b620e96d8366ff2b6d31dd4ab1f041f277c18599aa2b46bdceeecde450432a58c126ee86d5c4117f3eee21f76c9a9a3b85a700b22ded101fe

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7-extend.min.js

MD5 c89f65bd2fd7224c396d45f792c310e9
SHA1 de69ee3f5240f088aa64a14b3a919215b7798d10
SHA256 a4b96f1761962ab47eea5a26cb1c4e1c4b4597a92746462c6134424805e6c8c8
SHA512 5b25836193437c09f263bc119874621828494732f58f857d94f8cbcf0fb61941cf9801c6f83f39a8e8de89c5f7e145ac72dacc567ac92de15a20a87c5f539047

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7.js

MD5 d8ff12af28e248e051546232463ea827
SHA1 2e29a1d88765f8f42245b1c27d1bc60bcefb9f75
SHA256 75c7412371c6920388cdd32e1777963bf0638026b1cc9baf94409a1dc60f4150
SHA512 c1d075144d6e4172e69157c16c2c55d1c5bd30c8616078609582acdafef3eccdd3f66b8db66f827167a482b91d0a69a39d3c32430d4a4b150d885aea6d3387db

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushg.db-journal

MD5 918d60a4d884d2c02ebfe5b0a2825b08
SHA1 72c965c9f897d467e5cb6e1c244676f6c4650fe0
SHA256 51f7e0381352ab26b2a2fc40c4b13d2dd2986f0955ffb53f2bfa48121c05646e
SHA512 ef5ea6ff7401eeb347eb93c934674f5c544ff5e495be267c696fd107b60aadbc9e25c4e20293fba72e1acd15bd4242c0355dea1b5f24a164fee93a4e52a3bbbb

/data/data/com.wta.YdbDev.jiuwei239909/databases/pushg.db-wal

MD5 238e41ff56cd20a91810d5d7454942f3
SHA1 293e584975f6182c53174346c708198c4327f54e
SHA256 3c32f21f9084b223b21a60bbc7d21d9e1440368f8f9eaf4606783ef65f8aa732
SHA512 edb466dac66c6a4b2cd909256b13270b5c6b44aeb029735a1f3b32950d5f0789f2d515d14ed58842668c7d382d761e87e867ea9b0b9b59252114060803063270

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/light7.min.js

MD5 a09a0d6ebb96356950057b115aa18ccb
SHA1 c60b91a7ae06beb375254cec414589c6a793f4de
SHA256 82a864f5398b90c2c3610212e7f3e63e2f6a1a4118f7fbf5974323578968fb02
SHA512 d2c3eff7f5167252909e82f688b4246b42b2300bf663b2014e723afd9f59715167ae5939ac6e3f83f05a413c91781e9722a8413244c5248837679b265bac2191

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/zepto.js

MD5 a564a61d87513e0ae4bd27b4644dd4c5
SHA1 a5ec86622d677855b2ccad5597213906fe1d99eb
SHA256 ef9381c84194033ee8e2dc9109d02b0683f6aff8e20abee19967f0fa10d982d9
SHA512 49e86921069ffa7f308e4771e5370ee81585110e51d6a0de274705a6e06199adf2c45e528cd6ddf11604792230c0dc4746146943c049965314b06838d36c3cf6

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/js/zepto.min.js

MD5 1abd55c514bd00abc726cca455f6b4c9
SHA1 49a1d0559ea2ef3d392d67250c7d815a45081d1c
SHA256 e094daff39a7fadab01be75eb3652905ff64fd5c67ba4b10929e9845abbf7b72
SHA512 39a193f9dc0e085792ab80c2a51a3ca13c1ccfca57e6ea2b1d03863b39aa14cbd94a74e0df011a3c5c1fd51d4c6224b344b9bcb5736c667e70528e9a8d9a0f77

/storage/emulated/0/libs/com.wta.YdbDev.jiuwei239909.bin

MD5 ea81ddd23de039d6f986519396a3227b
SHA1 b547b343770fb3ea96ccf36aed4f6c7a3d3b8afb
SHA256 3751b29641bd0f10093e728d7a018f2f79a92eccf0b77b1ace8a3a884f3d5906
SHA512 567f9f7719a9ca0b8720ba789e2c786bcd34916c77f7dd84e742d442c4c09d4b9ed55fcf77997610f907671482c06d35d1641910ac1c2659d720a2a85c9d2d54

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/lib/AppDebug.js

MD5 917c04c376c437d5e1689e5889978659
SHA1 fedd31dd250e1b8a005da9c34ca06a11d5bc1d4d
SHA256 807fab0b8bb91aff726bdb776e0c6c13e5c6c90cf208a3fc64ce9d419878b442
SHA512 7b2981619af95b383156f33f51ac997a4e332839e9e21aadfde1064b4c6b5fc61ba6c40a826cec61de9e7ff80a0c7e0342232ff95fec506997247988efbe2abd

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/lib/YdbOpen.js

MD5 5970e60b94c10b9fac088c5bd149ca2c
SHA1 973cedbeff3f7985f242d60fc7171a5357058b1a
SHA256 1740f0f10bfa5d441c3441ec071f869c0d70d5b85863d097abac7818812f2824
SHA512 81f1dfcf0e81361ef743e5cd42562fb62b5ed0f81d84b9be9dec98b49d4e7905188d173a42aa79e31db0e60de301c20281e4a1000c8dbceb8e2bd197e4cc8f53

/storage/emulated/0/com.wta.YdbDev.jiuwei239909/zip/239909/www/wa.png

MD5 2a960dca70f6a0f604bdef3f31c0d718
SHA1 d5cff36727242d959f7910a19dbb73c39970b843
SHA256 e854022bb5b0cc905c88aa9ae50577f63b1f525d6354969e6ee17d6fed97e612
SHA512 083fac092341e6a3b6e17bab1f4c8bce100b1d237138a5f47dcb174a5e26e8d7ca0b6bff87178651190bd3894722b95c226fb99408f6c83030636355d3d22902

/data/data/com.wta.YdbDev.jiuwei239909/app_tbs/core_private/debug.conf

MD5 14d7a818e9e2586f58a8b87e23449848
SHA1 eac19882ab01a8414d9bfcaab31d0c0cbe9d347d
SHA256 3c1e2c72c08fa2022803afc3c2359006b0d5bd576deef74785eeb325a9332af1
SHA512 d5a67871aad1182bf7453353d932f7e1720875a9809b2306c2932c4c322d57434a9655b7ffaea9626cb297f666d4f96a6be78843364a215e61585739b3fdb30b