Malware Analysis Report

2024-09-09 12:53

Sample ID 240614-g9t73aycpg
Target a856cc1cd5d88cd939b1512caba9da35_JaffaCakes118
SHA256 ad6e2b1a1b8810db7e43302fb0bd963cf9fec99a53505bd1fdc767ed5b4c7aa2
Tags
banker collection discovery evasion execution impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

ad6e2b1a1b8810db7e43302fb0bd963cf9fec99a53505bd1fdc767ed5b4c7aa2

Threat Level: Shows suspicious behavior

The file a856cc1cd5d88cd939b1512caba9da35_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery evasion execution impact persistence

Queries information about running processes on the device

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about the current nearby Wi-Fi networks

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Queries information about the current Wi-Fi connection

Queries information about active data network

Requests cell location

Declares services with permission to bind to the system

Reads information about phone network operator.

Queries the unique device ID (IMEI, MEID, IMSI)

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Schedules tasks to execute at a specified time

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-14 06:30

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE N/A N/A
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 06:30

Reported

2024-06-14 06:34

Platform

android-x86-arm-20240611.1-en

Max time kernel

177s

Max time network

185s

Command Line

com.snda.wifilocating

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.snda.wifilocating

com.snda.wifilocating:push

com.snda.wifilocating:remote

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ossapi.baidu.com udp
HK 103.235.47.16:443 ossapi.baidu.com tcp
HK 103.235.47.16:443 ossapi.baidu.com tcp
US 1.1.1.1:53 spcsz.cdn.bcebos.com udp
US 104.193.88.112:443 spcsz.cdn.bcebos.com tcp
US 1.1.1.1:53 v.lsttnews.com udp
US 1.1.1.1:53 a1.wifi188.com udp
GB 104.166.160.228:443 v.lsttnews.com tcp
US 1.1.1.1:53 cds.wifi188.com udp
US 1.1.1.1:53 c.wkanx.com udp
US 1.1.1.1:53 a.wkanx.com udp
SG 152.32.217.106:80 cds.wifi188.com tcp
CN 58.215.105.48:80 a.wkanx.com tcp
US 1.1.1.1:53 push-dc.51y5.net udp
US 1.1.1.1:53 msg.push.51y5.net udp
SG 152.32.217.106:443 cds.wifi188.com tcp
US 1.1.1.1:53 login.push.51y5.net udp
CN 58.215.107.135:80 c.wkanx.com tcp
CN 58.215.107.135:80 c.wkanx.com tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
US 1.1.1.1:53 a2.wifi188.com udp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 a.lianwifi.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
SG 152.32.217.106:80 a2.wifi188.com tcp
CN 171.15.110.132:443 a.lianwifi.com tcp
US 1.1.1.1:53 d.wifi188.com udp
CN 171.15.110.132:443 a.lianwifi.com tcp
CN 58.215.105.32:80 d.wifi188.com tcp
US 1.1.1.1:53 dcmdaa.51y5.net udp
CN 58.215.105.75:80 dcmdaa.51y5.net tcp
US 1.1.1.1:53 loc.map.baidu.com udp
HK 103.235.47.89:443 loc.map.baidu.com tcp
CN 58.215.107.135:80 c.wkanx.com tcp
US 1.1.1.1:53 kepler.51y5.net udp
CN 58.215.105.24:80 kepler.51y5.net tcp
US 1.1.1.1:53 api.map.baidu.com udp
HK 103.235.46.245:443 api.map.baidu.com tcp
HK 103.235.47.89:443 loc.map.baidu.com tcp
HK 103.235.47.89:80 loc.map.baidu.com tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
CN 58.215.105.67:80 login.push.51y5.net tcp
GB 216.58.212.202:443 tcp
GB 216.58.212.202:443 tcp
CN 58.215.105.67:80 login.push.51y5.net tcp

Files

/data/data/com.snda.wifilocating/databases/downloads_new.db-journal

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.snda.wifilocating/databases/downloads_new.db-shm

MD5 1c4274aa7a9a5cac8c6d1df71e4588c6
SHA1 abaecd685e01cc68801292e3dc7085654a22feba
SHA256 3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
SHA512 1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

/data/data/com.snda.wifilocating/databases/downloads_new.db-wal

MD5 5beb10403c4a88eedede096e92a48d2e
SHA1 88df44e90b5d4c6d556fb4d8ce91c69aa78af677
SHA256 798b5938510cdaef794f6df477dc7bf37f24a86a496ffb83d6ce9dcc604a227f
SHA512 b072ffa279eff5d43f2428caae9a0156c02fdefc328fa458d550dd7c95b82bba6189499598fe2305d9f5499f75fd3e688cd6d8ffafa3c0aaa1ac523d5abf4a99

/storage/emulated/0/.wkchannel

MD5 8bc96b30ddb67e88c220bc3d06ba0d11
SHA1 85ace847f03c1e526f1aa1279817d2ed027ec56c
SHA256 422152c1ea18bb856203f435389aac63857e9bb66af1490c131927ebc7d7f30b
SHA512 9d46bd6459397cfe069c05191bb84ceb36bd931aca988e987f99a378c1d2da0393f46776419e00e9aa77d6a6b6f119c55e2765efb52ac77fcc86a935bdf81d10

/data/data/com.snda.wifilocating/databases/OpenStat.db-journal

MD5 ae2b142db51f68548fdef0f017d989a2
SHA1 e688a3b9f613db3960ce1964dc8c37c59f365e01
SHA256 9d01ef3c2ebe31b1767cf37b5f98af8684b467fe326c7de92b5b587931738397
SHA512 f8c0aae6ec24ac6b8aae76f9920265b3b18e44a491bd4e9e3d0425b1501402eb22f1007f23789a3e3d9a2482cbd654de5c55acb6b9dab33251ebdaa540676b30

/data/data/com.snda.wifilocating/databases/OpenStat.db

MD5 d4c66b8d27601d5094e9ef96648119c8
SHA1 9dfc2c1746bc17fa2993c654c7e53661bf2268ad
SHA256 8ef58aeccd48be44f80594178a315ab267af12484da3085c40dd7a781b916304
SHA512 03311fe1677e8e01c567667e683c7f1c3fb7883a67925f22aabe118ae1655ff90edc6ccaf7fce8c3d0cf2398d54f79c7555c8501a7cd23cd1be83c547fb8b5ee

/data/data/com.snda.wifilocating/databases/OpenStat.db-shm

MD5 22fad84e388a05f553fd31cedce201b3
SHA1 573d6105bcae22cd0f4b92be18ca33df837fd841
SHA256 dbddb9f6a435f23e0a426c143bff13327798ff7db15147cfd64c4a14924f4d61
SHA512 d52d9a152ed6d5863621b64e834f8e72877a6a84fc2541582d1f5181e5399e56189130577936157c29c84652bba7910f6e2223cc1bef3f787477058b23e1c428

/data/data/com.snda.wifilocating/databases/OpenStat.db-wal

MD5 f0f899c38bb2cccf3a92a0aaf7a3bc5b
SHA1 5d681648a090127b84c70c8d187b2913b2e44c96
SHA256 55d41766bcbee069fc509b04ed26ec9ba44b8d65c5a3a58703e5f847a86436da
SHA512 0e4fd65d1c022c7bcf0123610f39285de101487cd28c0e43440ce1ef896785931896ceaab8b9449439e4f77c96b097c4ef6c92e3e2cbd90f49026464df9bbea4

/data/data/com.snda.wifilocating/databases/ai_apps.db-journal

MD5 23554a32e528596dd9d721ed8ba7460a
SHA1 99c891ee9fb3d0a3477ba50e0f94f059b7442e42
SHA256 ecf38d5ce546ddcccfeffd29c19170551ed9adb130ccc0852ea8e1dee3d34286
SHA512 e5e77d3dcb475f9c3a2b72999ec7c405d0c2f0927a9a5aef6e2aff05c81f75a3f8b683092063192f67f2a41829e870aec7646415e6de9279af41ee7516b4f5e4

/data/data/com.snda.wifilocating/databases/ai_apps.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.snda.wifilocating/databases/ai_apps.db-wal

MD5 a2978d685e6d7a16d971d7670248027d
SHA1 8c06ae57ebed8119b5a6e7f6b43c5ef168a10cda
SHA256 67e4ee6f6e1f3a50856225355644092520e61a40678ba85c0747494f135cad22
SHA512 e6b3e9447195860f186574a0a556df4c2d0d0ee8aab152070eb96b1c60c3f64d4668abb1c5767b2e7dfd82fcad716ac7b75e56119749f5d5b12a69514dfbf4a7

/data/data/com.snda.wifilocating/databases/config.db-journal

MD5 569cb1d8a34d5aeed16b1a031a136d56
SHA1 afbc11c6b9a71c4c59a0b4f8910329b605e37e4c
SHA256 0006ec4778d25e2fbc2edad01796d34166b9bdec947e15d90ba5402c26678468
SHA512 5a2879b38b9be399c7df45df2b4869cd3f825935bf41e234a171c1f30d8086e64fd30004735d64338d02b893e80a50d3dd935c4e4b448a200ccb86d721574b5a

/data/data/com.snda.wifilocating/databases/config.db-shm

MD5 fcd347963a3a4d1f2d65c26598824189
SHA1 a22fe034bc309863142a299486aad7f588b3a0cd
SHA256 dde84df8bd8d1c2da4e0caa9fbcdcd9da7bbbeafe3ca15c109aa624fbdad4f23
SHA512 a8d393fc3f935223de24e3ecd0774fdecae77adb426b936feb4a66c7ef81ddbbf9a3c7001e1f2578469d952b162c5193de4303c7b4426080998c0dbc5f2f4398

/data/data/com.snda.wifilocating/databases/config.db-wal

MD5 0286808d37024306a653a3d0c901e1ec
SHA1 392c1d84d2b5bd0be2de5956ab18be6a0beeed78
SHA256 759636e9d4607cee1c088abf0b1eab223c4bef6b64e12a9faf3689fb92bf4e25
SHA512 ada9cf53594c3e44f452df71f9fae6904c050c45416f2443cf2d731beb4f35a5a45c61ebe3a9cd9ceed9e73b1a9eedc1db40f5ea98d802ba3126bf685de057cf

/data/data/com.snda.wifilocating/databases/com_snda_wifilocating_wkstore.db-journal

MD5 f761d8390b18aa61ee018d1387ab33df
SHA1 1cc98e21e29d6a1e3710ea97d39cae140a846c0c
SHA256 0443f7941b4d45b40ac1c35f6974d4fbe6510602327824c2e623622463bf04e9
SHA512 143d61950022548335dd19db855d5a4ee552c588ad45071f27be1c277aabf58eb18ea4d5ad15f93e2eac4710a926f07535689a3efc40b64bc6bd26c6f2355f4c

/data/data/com.snda.wifilocating/databases/com_snda_wifilocating_wkstore.db

MD5 493892a228d6a12de1eab1d3de5cb2a3
SHA1 10aefa9e57cbfb1d5aa895797261b284cfc10f49
SHA256 4cea1722522bcfacba8d67213883f532b25a22c0ca4665564e9650fa91c997dd
SHA512 e47ffb9354672ed57ec8e534e87c88b80e21b18af6ceeea7456319a5ac25edc1ed2a67ac79c0943907229d7b078715f8e74789ce2fc6882b939b8cec3c70d2a4

/data/data/com.snda.wifilocating/databases/com_snda_wifilocating_wkstore.db-wal

MD5 0dd867c2c007d04c38e0da777f4dd52b
SHA1 9a8af2acc67a8fe28f4e6a1f362b178e05850ab1
SHA256 cbc47cf3dfc01786516f14124f62fce77c64727e3a9f1f0d424f31600d4ed5dd
SHA512 b50abd1ded02ca64cf0df30c4687f02466995946c52db26b0c4f3005610cc991ac3b59501637c9b1ed2e6e256aa548754b484ece146849b627b07d4ef84cb17c

/data/data/com.snda.wifilocating/databases/downloads.db-journal

MD5 f8ac3c1d5090631b596e530f324dc9ee
SHA1 649bdb2924b3849d990842570c06288e59c97435
SHA256 f36f9fc651b92b06172242751a02ae95cad516b2a1127d38d600d9a5887d1c0c
SHA512 9ff00cd11329dcbeea56048435720be017d55e6ac43546ce4237edf5ab2c66e573492de998aff6964feaf822d08b7bdabc7566778ac042cf25bed9acfb09ee84

/data/data/com.snda.wifilocating/databases/downloads.db-wal

MD5 aade6e6189d5e9b423f9eb1c707ac536
SHA1 0bc2b1f991ae32b6f199f25487209779ea1e2ee5
SHA256 0dd83839b7452cfb4d7625b867bd7d1dd36b651b01a0792b345d40c33c635a56
SHA512 2a8cc9258bf6d40af4ed336f13027f659c053f253e42c8c9c52cb070c24f329d83ca52beb15dae1b5078386f3aef790e458b8eeb382cf5b41cc0fde747330419

/data/data/com.snda.wifilocating/files/aiapps_zip/8890e83e830348e8f5632d5de43aa9bb

MD5 8890e83e830348e8f5632d5de43aa9bb
SHA1 dd43d0b6e587427a4fc99404b5937292b5f1f2b7
SHA256 e0e599f4cef903728bf4c7e82fb0d2978ecc0d53637130f101d52fed1a9af789
SHA512 52e4ea01cc5c23bb2667cc1536250bf88a0511ed3e2b56534d703615ebb2851babac723183b95ed467dd8df1ffc00d00bef124135f432bc5dcf1b481da070e94

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/master/master.html

MD5 4d3ef095827e3ea933520055432b6298
SHA1 64ecb13509767aa56431bac77a38e67dff59086b
SHA256 b28d4fc64734b53f1fcbb36d100feaf252e71da7fc7e3c5861bbecf176b5b5e8
SHA512 2f7eff966460e5aa6e6cd48f13aaeefb7e73278be53032cef29ed2a306ffbc31dcf03bf5326d98159958d6d19fdd081377f687264bcb0a0590499b4ebd363266

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/master/index.js

MD5 7dfe16b8ba861d977f417dbc88d8e7ff
SHA1 b6cc2d6b25fecc67f737f2135cca9e2732001c88
SHA256 8c14a5bf4703480e3ed25a7e513d2b7945489e66e40c957391d2d1462645f621
SHA512 8b2c295be205f3797e0fd133620e26b5027a47f3885d09627a364a0f7728b1d7ef16a2bcbc2f7ed0f959fac548728188db1ae9b09c121e54f06e79c9f37ac28d

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/monitor/index.js

MD5 ff521ab9999afa826e6ca6b492577b63
SHA1 7ea14712b72214d4d83b72c87eea5a28a3ee5cb0
SHA256 2be1a5c84cf2b628b9dafaae5a72d02c6942fc88fa07a86bafcc3a73021eb985
SHA512 2d15c270afbc5e8d5bd373edc1a24ae0ba794525225aedc8c9063c5121e9e173227c047f57d50c0aeb8f6f1100427dee550642a2c681e13a7da001d805df1621

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/pkginfo.json

MD5 511aa45275fcf28f9dccb4618482e861
SHA1 0ae260d70ae2d89b08868162bbbdc8555feaa9e5
SHA256 02864521ccaebea30c9478320714f596d00847ca191f864f410ee671129b170a
SHA512 8e14181a7c353ff22aa66e4cae1c29e74ac17035c650e7acb2b2e8bac6d32a95181cd474e39f992565bf25c14553874c2f487fbcf18c565a8beb87ba9b7d9d98

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/promise-polyfill/index.js

MD5 a6c9b8964e46a664ee12e08836c67cb1
SHA1 6a996cc1bcdfdc751e19147a60c1a51d16817d5b
SHA256 57d21e121cc676437044f1d7959a0a04a46101b4a4c87e2b94d50de0af7e32ce
SHA512 a74a66b5d692d63bdd9b610b5cf84ca258e1105e8b766e1f5f47c34c140b010e83b4d0db911b73e61335d30817ce1d06768af5f33c2c9bdc3b40b11ddd62cca8

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/runtime/index.js

MD5 a18de4d78ce7958284b81f3a154ccd86
SHA1 eda9128c9fbd3c16731e6dc0a5adac586490431b
SHA256 3cd0e0166c6c673d1b7da1663e7adc91ff753955b77656a23c85878262874ba3
SHA512 1995011f49dbb5c0008bb5bdeb1db2ef543d75324580904bd98d7893818d80a184c58d7dc2c6613f197db700195ac9176b77b6092fc1f42188bbb5b68dde0fda

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/slaves/swan-template.js

MD5 6c6dec8756c0d92cf57cc420a3231d0a
SHA1 9b8d45b971c849d52187b5b7743cd57bc8cf960d
SHA256 3ed9a2a8c23d45e118550d04349a71a1d521403e18751893ee543e68a270945f
SHA512 be5c0a2370a9b82c627174e9c4204962e197c206928176851ec1b623ba1cc3469157c300ad0a4edf41960dc1023c2a807419320ee69505b034584147e0742cb0

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/slaves/styles_slaves.css

MD5 9ff3381f0c43971ec073b6687187a7fb
SHA1 13889d25afdab248b1306b6e61e32b01325ef848
SHA256 1715ba622bd9312e130ff85123ee65cdfa5d222218fb6166395bbb23d639f255
SHA512 24c5ad9b19fba9b4554ea4ba615ea493a33761ccc5dc37a9c6cbc10d15cdc4bfb86b82e72700caf06330af5900057f61bb54da5fc681aee4fd3cb9ea4ed3ba49

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/slaves/custom-element-template.js

MD5 d8a13539b57d987600957f4ac0a6c076
SHA1 295e9b565a5a6778bfa2aadfe7b971c3c25cd2a0
SHA256 fb3db0ebf5867a685ac255380bdecee28f524990cde2bfcfc12105228438c333
SHA512 dcf8ea18414110b21f02ad8ac514fd73efd4f07dbefaf5c8bd74a1ca07e9c1f4332ce0b8d41aa64cac4e46ac761a02ea7a2d65d78742672f8df194d51afe59c7

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/slaves/index.js

MD5 5aea46ab9cb9449ab8b6d0e28059d576
SHA1 72b6f0e32afb0b04b2a4cf8a4f7dddda332cded6
SHA256 10ddaba5baf7c0b8f131cd3314500af75ac6283fc0d476322110aa56acfcdce8
SHA512 d68de520cd6e969787768c8beedbbcd027ab83cedf8d633eeab5befcff2860176da37da22903c71e8d8ccbe5c7d7170468b00b1b7b2d16b2a6969410f6cf1be8

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/slaves/slaves.html

MD5 f5602c9ab9a7633c0fb9a49123d485ea
SHA1 655794ae156c7777ed106a8814568e936c7b78ab
SHA256 b7e9541446f11fffb0ca60dcee896a7b8ec1f623b9865ec07d186831887e190b
SHA512 a9b3f72e131801d86eb9bcf1936a3f872ab884eb976185c1c0a40606603bf78e336ca8389c9f9990521ec7f2f7ddcbd3fed1a54d39816b10d84078747b6a73cd

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/swan-devhook/slave.js

MD5 f0b5ae96530da6e773692573cda7d964
SHA1 a198c8cc84ff2fcff33b8a67c67250d68325fbc1
SHA256 40256e3a62a0e09450269f61d11a81ffc5f61d3089233a8d0e0aee36ff4dc5d5
SHA512 79979906071e21ace0eacde3043a547493f59de7fa176a004cecb80e95b9b1ed1839a40b05e5c7a963a0ae18aa66449f206fea5937ad15be7d915a02962a0e8d

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/remote/12887523367/swan-devhook/master.js

MD5 e7cfd5b651080c3e840aa3e455bbeb89
SHA1 070e066da34660a923fefc3311a14226fc22ba3a
SHA256 fcda6fda337ee556c719af89f96be875c2156cb5e77c3c7359c0c56857f017ca
SHA512 41ef1143a12588c1ad542c169a05eae4482a188e8f070aa57273ce861ccb3a47be4e046891b65d6dc8d5db8cac79e60884e9ec4d6a0cc63188b9766743febf48

/data/data/com.snda.wifilocating/databases/ai_apps_pms.db-journal

MD5 7dad9e0ab29b1a21628a1550d03c58c7
SHA1 628e52bd55923c31c05ce0ebf7cf51859734de4f
SHA256 8f650ce1c40d3c396ec571c403e876957bb0b9b7048137cba9311298f07757f9
SHA512 351ac00181d9270a9688ad7343728e856eeb7fb43432c2fa6afa3531ba622d45deb807ccc8a23749f996c406f6a6b814673ab68537b106e537934c7a8a39cf43

/data/data/com.snda.wifilocating/databases/ai_apps_pms.db-wal

MD5 6ae57469f5e69065c0596d3a0cfea14f
SHA1 795b7a22b8605b48ee713731c37a2bb14a14f1b2
SHA256 17593e712ab1758d87582653406903dff1f859b9c012014ce08603143bfdacfa
SHA512 93549b10d6501388b42232ce246fcb339c34b7cf7cdf48dc1a9b7de56b0d7415f054bd0c8f32ae6214ba1f406b2a07530138c80e122c19c44ec6732b230c173b

/data/data/com.snda.wifilocating/files/aigames_zip/2a54abc23b951845a66d2a10048eb7bc

MD5 2a54abc23b951845a66d2a10048eb7bc
SHA1 be456a55099ca8975289eb5d986f8a172e103215
SHA256 239f6528c8ff151eca673c7f7d5f17d32865f66528ea1ed2550eda2f6f9e9b9e
SHA512 55a92891bdeca509ac0dc4ad5d9fc95be9fa914f3b51d71c5af0b768a9c83060ba006024b8967de454d0a5bc9282a18e3956ffa0a1d01cafef69c668395f3497

/data/data/com.snda.wifilocating/files/aigames_folder/game_core/remote/4295360517/swan-game-worker.js

MD5 f2d7588f5e778b7724a001427a7aa862
SHA1 607634d4289241e8469e7d54fb67d08731cecf88
SHA256 93e1cbe45f449e1c1481419cca6df539c8f6992bc5e9c155bade9a18e5e21763
SHA512 e9eef80791fb681ed8baf301142f913e9c780924a23b9cf9b9882340f67ed656ea5e7fe92c5d7baa6195fee81889983d6c24549a9790dd77e5d4dff1cf6aad8e

/data/data/com.snda.wifilocating/files/aigames_folder/game_core/remote/4295360517/swan-game-open-data.js

MD5 a0a0e43765acc8976dcd495d382b3005
SHA1 2d884f71af98569fd60f1a8e6eb0bbe58e8770cc
SHA256 1a0fd22c6b9ddef57806cd51e1c02d686c0200075da6df64463bf19cea2f267e
SHA512 9f97cad20b6c6f455cefa7026ea9651ebe0303d55c32122dd4bc1789e5d79887c3dde212cf3c15e4b6daa6fa3cabf809e4467f47dadb909516c3d268af3e5f3c

/data/data/com.snda.wifilocating/files/aigames_folder/game_core/remote/4295360517/swan-game.js

MD5 372d58ffd4f5db37dd1577fde89eae08
SHA1 e94639ffb159013d940c0c35a51228e6bb5f16ce
SHA256 17a0cf54750ee33090077315cff193c73d2619fd902f7ceab8424e385d8b7c7a
SHA512 26f8f45fc7ad3cf800f3d0b8c42d57bb3edb867a157dee9a54f2c783c0bdac6b373457ffc8509f202c99d4910a0e2d91294e8a318c9628740cbfa6e573790dc3

/data/data/com.snda.wifilocating/files/libcuid.so

MD5 82735a0e1d4cb657ecb8dcf2cc6e4381
SHA1 235c0db187f590d726fd8442ce0c7c7b50e10132
SHA256 61b5d8996d32370425231079b531ec885ed1f4df2d736c2cf36dbc6eb2aaae83
SHA512 fc3be06e9bfc7ff891246c5a8160ac7a97a970a584721190209f90b7c4352d4da6a312d1b39b21dd735f0efdec50d211d1751a82340ddef02e825994db4a9cf6

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/master/master.html

MD5 2db4198969789fe3cfb5191e8b7073d4
SHA1 e7920162298b54e194d41b25031db1bc7c69c203
SHA256 bffdb9189940fe7a02af2e185b1c8f2a09b60b9e8528303392d0bfb75dff8ef7
SHA512 abae856677ee39d69d7a8cd5059dda7b26f34507275dc1c5ae4842f4c8cc846e41ec722ca245f31e38091c6428918889ed7760224b976e929d72716b6a8d416c

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/master/index.js

MD5 9800f6c8f2c905d2c43c348b3e388320
SHA1 18d93096488b5fe00db4a3eedf8bf9f92f82c46b
SHA256 f995a3c6fbe831a1690dddb987a860d59faa50f5f9273351832767024b12a676
SHA512 099012d3000ba9b074ef5050f95c6ff91aba55dea45a1c9aaafe561de3f323c90e27612779060002da46c2bac2c6b7fd156e53565d33c6279b326ba490430241

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/monitor/index.js

MD5 98556acc0e35fb1bb04698ab0c16d813
SHA1 d7ed4b4c2dbe3f7a3ff04d90323942c72502780b
SHA256 e240f8f70250a9a066100654c7215b406ee3165b3ff2681da634fa67ab6a1b17
SHA512 2a91c0ac7bce770f46f69716d049db9ba17f63aea7a2957ebab49b4a49d516e8a292eb1d137385c1e8ac5693987c8bb2866f4a6d69db2f7448569c9b2bc1da84

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/pkginfo.json

MD5 a1f180f45a61a1d7fe0047cc6a600878
SHA1 be4a5ad78fab0f3bc1370350cb31b1346c9bd35b
SHA256 07dd5ee2439bc57f1bf5e025d891d2e9c795f3f1b78d938f04395aa2d976c099
SHA512 04fd23246a099667b1d5da0df6aefeba7056bbdf8c601466f600c871f8456cd1a5bcde803f21e8cfbb487875805c2e5fa6d6402a019defba64db2d8e95128abc

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/runtime/index.js

MD5 e02d855e81fad28c9995f5890691824b
SHA1 9abc49dfddc9faa6f20d7bd858a2cdbacbeb8b78
SHA256 ff0a4fde706c2bde745bc9090d75836d0ef19d62e57d097c244bc55305cc0705
SHA512 0f4094e3b73c443a6aa316a28bac889405be61ca0f07be04660a599ce929a29972d035740413e27782624a005ef82a21e32a3882a9c9d61ef1e192306e8ee819

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/slaves/styles_slaves.css

MD5 b7f333f06853f9a7c7f21e3b572ef1d3
SHA1 9be7ced931978daa3e1c2ccd62a17b2b6cd47972
SHA256 7f0e16698ccf57542092518ff5866e618a3eab11a0e4650df6f13e8f4c4261e4
SHA512 dc9e011d35f65792a6c9e8d9eda876dfd935e57d3cd98f79c8efd25a1d7706009f5f4f736cda7d578322a2a30d321ee3d76790435f055e2abfd3dc7fe5e3c8c7

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/slaves/index.js

MD5 f63c0520c52d2d372e8d37da5994b0f7
SHA1 409318bd938132e932fdb58fe30e7776593005d2
SHA256 f0207350211c979791c142c97e51dd44791f36747b82228bf30799ec68bb676b
SHA512 d250be7a21d9f50eb89d3626ce632a79d28dfedaa030005a7198cc59d9512b3a04c6b8d7a9d71cb16043ad57ac7adeb42f9cf65d5b789f8fe8d205670c879062

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/slaves/slaves.html

MD5 29c372f6d2f6ac9485c3afe3c4048431
SHA1 07105b334045e92cd2792b271e801e8766dbf80e
SHA256 46f07a09252178b4b030326361601ab2471d8180cf970f8501b284b9fa71afb7
SHA512 256344bb0df1927356dc36d72ee21695d0b02e7e7ffaa5a3f76c1e2365882d756b6a9f2c24078cf9124d44e58ae090f19723403c1ca407c3359b03987aa3aaec

/data/data/com.snda.wifilocating/files/aiapps_folder/swan_core/preset/12886867987/swan-devhook/master.js

MD5 e7a07ab972795b8bd5bfabafd7534f0e
SHA1 3c9a56513414c0532a84eb01cc1f2a5fc13be9f5
SHA256 de4c535a7a7074241e39c24ccf423e4171a218604866b1128673e23c49eda8b2
SHA512 434e48b3d0937a74b9f53f85d5c6a803aa4ee860db6b23a9a920b61fce49c67de6489c4e8b34a6862c03005b04b73e14eec62813edc3162715dd563f79dbac33