Malware Analysis Report

2025-01-19 04:52

Sample ID 240617-3ccseaydkd
Target ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118
SHA256 3b5df56592fe4e67b3fda10dff595d010c3f3d20de22ff68c2778b93df9e5f8a
Tags
collection discovery evasion persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

3b5df56592fe4e67b3fda10dff595d010c3f3d20de22ff68c2778b93df9e5f8a

Threat Level: Likely malicious

The file ba1aed5d71ebe1bad3702e0b7965d22b_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection discovery evasion persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Queries information about the current nearby Wi-Fi networks

Requests cell location

Requests dangerous framework permissions

Queries information about active data network

Queries the unique device ID (IMEI, MEID, IMSI)

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-17 23:21

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-17 23:21

Reported

2024-06-17 23:24

Platform

android-x86-arm-20240611.1-en

Max time kernel

13s

Max time network

134s

Command Line

com.paxunke.pawificy

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.paxunke.pawificy

sh -c cat /proc/sys/kernel/random/uuid

cat /proc/sys/kernel/random/uuid

sh -c service call iphonesubinfo 1

service call iphonesubinfo 1

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stats.mlinks.cc udp
US 1.1.1.1:53 wifi.pingan.com.cn udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

/storage/emulated/0/Wifilog/PAWIFICY.mmap2

MD5 06ae8a01d80da962c7987c264af64cec
SHA1 63a497994321f254b535a846ce89f076d4e378ee
SHA256 0c5cc90b079d0d9c1ded1376357d23a9782a704a83e01731f50ccd162e246492
SHA512 8720928fbe7cf8351c9dc45cb1a9c8243939c7e3c9c6957d24dbe18c0819d05ea7475e3953018f0365461fb2987ad68d8ec9f59b03aef3adbd3e4ae8ebbd0427

/storage/emulated/0/.tcookieid

MD5 5ff84a4977fca858f21c2b17c4eea3ca
SHA1 85f25faf2ef11ce08380bd8dc7d1d8308a3381dd
SHA256 0c8284307e203410a1bfb0eb571c0984b1ce4f294cfa0bc87111aed711c596e1
SHA512 bdc687a6aa9fa43af949116aeaaeed0b92da2c476d31ae1cd1964508a18ffa37ad1a5f3657ec22b2cb4b812a072ab66acfc38c21268a4e689eb29483f72bee0a

/data/data/com.paxunke.pawificy/databases/mwsdk_analytics.db-journal

MD5 c13ecf632e21aacf10b3ce24e349b99a
SHA1 5c79edf7912ab50758b0cf0854e535b8005aebee
SHA256 7e61fb2c4e1be0837ead4b2bdb027e7ea20b38ce7af689c3857bdd87dc03c53b
SHA512 9b5fe566e19e53a5fb1b2a54a52c32c96e0f8407e8318683c78f6802cfc642221c04a1ef9874253b261f33611dd3d3fefd25b960c110194e005dd57d8cbb6afd

/data/data/com.paxunke.pawificy/databases/mwsdk_analytics.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.paxunke.pawificy/databases/mwsdk_analytics.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.paxunke.pawificy/databases/mwsdk_analytics.db-wal

MD5 3d71bd7714dc7c7ae0b2c3248a2b2f6b
SHA1 f81fc5b94beb6f605e27ffb485bbcbf0da152f9b
SHA256 cdd02ead42a3b6291fd524e125acc15da83ee64a6f93b8256c91e57c790080b6
SHA512 70e3a51bff6698defae5bb1799a0bb85aecaafe049284a7895985f8e1c8cf80c41a9d4c1b6527042d260c4850a2f2b203c5cb0d7d314b218b06692423e2ef02b

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.main.scrc

MD5 e6021c95b1506cc68b3e98a2e35a11ca
SHA1 638e2e1bd64e0db55754dc3e4f70a2bd0cbeeb78
SHA256 4ae241d81f41137285e1eae6ce2bf6ff597f2e11fbbd9dc708c44dffc7bde4f1
SHA512 b0b813c647851d6f9b09001a1ae6cec69e769150e9f7f3f85a56953b6bbf073c0716f9794cf2398a774ba5f1453d861f46cfa034befd986097b76413df2f52a0

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.login.scrc

MD5 ba20c5f8b97226c8824b4fe93927df46
SHA1 5e099b100e278d8e7e5b61fed5260f8501effc7d
SHA256 62234132ac0a9a4d368146afc5f634e63b392a45bd95b79cd060d842a58ffb50
SHA512 faab18a11111230174458724a4dade4d1f2437ac76dc767b6e3acde14011775973081e8ce68ca277f24a64c94fcc7ee94048590f9f43cdd589d60067ccf6f72b

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.msg.scrc

MD5 b8c3a58836e67537eeb2729f7422a179
SHA1 2c1a7a26363a46633ef3f60e64bdae6d483fdca4
SHA256 188fab6fe745cf86bf2a02e28d747feba5b05000d90d004202009816c72fc4dd
SHA512 8d1b1c3a44ca0ae79f94f946e6304497f44c508fc89a2b9ae581fada3f6729f0b73c9a5df8541fbbb523d734f7ba6b195aab69f6325e39219503950564273800

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.service.scrc

MD5 26d04601fd0755546dfd974265659fdc
SHA1 7f8192ef9f5a1e6c5c1b4e3b9db6b26575f689cb
SHA256 9c90a15dfc63f39a97e3e46a39455a66837297ee881f46343314507b49bd06e0
SHA512 285ed5c193ecff96bc3626fedcab867d96f7ee3a497c7d31504d0942a194e7237d2807d56310354c56095810b1a9c42e022296a8c339cf7c81272a7e57f559b9

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.w.scrc

MD5 f3f52cdba81335701356e31f38fc6696
SHA1 348ed31423a1a0d644d848a0b1cad95f7f450f58
SHA256 cbcb6a4248348049e6108868be58d907bb7cc3bf8f5801b5259cfcf630eb984c
SHA512 4d20e6dae1ab1f139fcd806df2a990cd1704b366f1904fdcd53b684a9a0b742adecd190fdabb987f597be5a734af6dbf5591e2beffa13b1eb7edefe7ab6d1f75

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.user.scrc

MD5 e3dbdb4a6a4715aa448f1fd078794341
SHA1 a1ff43f27aa11e1d26e29ce1aa482657323e7e09
SHA256 0045f1329692c0511773c6a262f5709b6f22ca54aa5df82d85f021bab7512b91
SHA512 2429fbee9a780e503639e97f09d5189579423f1abc800fd3af90fa6c9355a4b5ab73fa75d2edb53f33a544b773649e7bf5e9dd7a3f6450686be846bb11be2e82

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.flow.scrc

MD5 53892ae10be1e068ab4c943a6271f9dd
SHA1 800fbee93b256a5a1299585e91bda58edb99bca2
SHA256 7fa6bfd923f03a879052be54db3aa760c37ed70b53d15b6bb5b7f1c0cad00f1a
SHA512 9a558ceea182e98d035e6426f8c79ad3f3bab2af84a46c574ff01df7b2258f5b2bd46f6b9f21c0f46dda86c3c8d3d06cff80ca3abe926a09593397955fcd4727

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.developer.scrc

MD5 a7c078824b71fbeb7d693be5935c2f31
SHA1 55f628e4ca758794a36a975db81ce6ddddcef84b
SHA256 a043772d173b22e6f897d0d5e954d16c58c129dd15876d0c17227e8248a7b8f6
SHA512 5fbd9bddb66e6b5ab597d7aa71b5de86f416b0f8620bbaf545ed38d9d411f9ff4b6c0265f3124d96a30f1d75d433bd587409c9e0e210e873adc42c8ece3c7539

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.app.wallet.scrc

MD5 d88bdf08a0187d4f3b7076ea4fd18c5b
SHA1 f722db6977ff932f1fed76e7d0a3a4d02526202a
SHA256 73b2461eeea77c9357b0e52856f72d01ed845b43992bef3cbacc3860b93941ba
SHA512 a1212752989860a9a8328e8ecea19b3a3bd4bc0ce36b8020680d5341656ae919900eae2600f5c4df0c8a25c92a47efc79c400870344154cf278b50ad182f1be3

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.net.scrc

MD5 2d4a56afd4bfc73b8e0757867348048f
SHA1 b7059e897106d527cc0e90700120fd25f9070149
SHA256 cf3f4bdbf27cacda1a5b143b796a229e4e76dd52a6a89922a7f1a07add6defcd
SHA512 79250b38badf11d143c584b0c875b9abf1bf3dba76aae1bea161752d9e074cb1b8af40d2fdd78f1efb08fe91797cb53b9f647b190fe8ddb75e95b6cf90123eae

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisnet.scrc (deleted)

MD5 f2a3ca8ae3ff4a926eb85f8997986239
SHA1 3ac547328e2b8fa6f0b536b764b22da5f5574cd2
SHA256 82007eb98b2d078fb7f5724de5240b0fb8b13855361c24a794727e1393b8bdb1
SHA512 61942c9ef73ab5d85eacc35c2f9a047e1a0659a4fc9a9258d0c750ec82933c4f892b787c5e66b1cad4077a5d046022ccf8a1175700a07ce4eaef48cbfbbd87a5

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.widget.scrc

MD5 23e60d0af7ad81bf483903ea8b4e4c67
SHA1 b9adf509440dd61672a1ff39ef5d917c9360de10
SHA256 4d69b416aac9953906ef31a89e7dfa04d7cc0bf2692228eeb9faeb25afdeeb27
SHA512 5308d70bbc1fff5a2ba84df145393e5ed4b638661c2ae82877dd1aa86ad272c6475b685bced912f54a6c1270c3dd8fb1eaa8b267cde48b4eafe91a6139edac8f

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.storage.scrc

MD5 f83e910b00a1befb94df0e30c7785e85
SHA1 bd1283ad1c2d13037a1204a8eb54f897b13ffc7c
SHA256 aca71957d8150b7822d615667e5cb2dabadb41e8b5c8d0e34c544363b1e72b03
SHA512 8dac4c0b7c33630d3d59495bb87870bfaee6c69efe7f43aab8d6075808a0275ea9647e39811d80197af0294c5ffe115f94bf524d9de80fa43002215524a7ff50

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.tracking.scrc

MD5 69afd00b747c9ffcbdc3e75aa46e8243
SHA1 da29a7af4e5fbe7b3373a3742a4ba1287c0b9eda
SHA256 db4af62489910fe630be685fd1be2386224002c62f9d38d6955e14f2a6d4281f
SHA512 2fc833b6d27b07d78734201528efbc8bb25ef1d48cf6516b78c55615b37a4ec02eecbdab45db1a47bc03d3a7068ba750cc6b7fe39b98597b4d375d81d8ad9710

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.bisauth/lib/armeabi/libSparta.so

MD5 180fe0d25726bc8c4bc8712b0ad4b5ad
SHA1 1d500719fbdda1e64a1c6ea825e3aa36b9ff0559
SHA256 3592804b89056637c6a84880e2e1b4198bd386e5e86412767b160a4cb9830c98
SHA512 107e8ab5cdabb8ca31b5843709a989e542ca633664fa1dc8dd3d59859b7779b8d660c683e36f2655bb2e01557f8a97330f4af774704dafccf2a91486bcffd06e

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisauth.scrc

MD5 ced8468bbc3721d371d78f98d09fd899
SHA1 757bd397cf51629df4d94fc0e3c51e6aedfd039c
SHA256 6231d5d961fcba19f254a73f7a46bde726f804fedeba51a250884a363d1696f2
SHA512 fdc6a42054fbdcfb84d4ebf42e0f7e7a8813601b89fe74326c91a16671cce17202a0293ae0b65b4ea6767524fe964fcd4556f0c819c8bca167a0366ab29ac132

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.trans.scrc

MD5 1f1f3c09afb94431e94f5557bc18ab1a
SHA1 a5dc86081c73e05f7f5f53ad372b3dcfdc2219af
SHA256 0af9e88672ca41b6a663d0d8600322eef11e43e195da292ba3c6f0139be9061e
SHA512 136995274742d3d3746b9b1236ed6e0c16618ad025d7b7e535b98299702fde6964be0ccf2ed80f7e37d731f9fffe05191ac5130580d508425dbb1eefd95a9921

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.share.scrc

MD5 ebd2dc16054faba74e4ac582976b77db
SHA1 5cae4f360d4bd049315c13eb4b00426290230b1c
SHA256 111b8201b3380924d3719eba965f15d6c79ffdc94afb52458e10007feabdf6c2
SHA512 a3d93a0f1e0b2cdc79a5b7163368868f1837368c5bd7578d95230679c651399bc5214e1d2960e5b67aa7739505bfd63a65f9de348a42b61a956533e1761fc0a2

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.share/lib/armeabi/libweibosdkcore.so

MD5 5b456a10e049788b5be5b515fa810033
SHA1 5f1d28adc9e7be3b811424e4faf735c01b1ff672
SHA256 25e378b933cbaaa2010c6f357d28dc41df7fe4e8a94c4c1a2c2ca64abe893b80
SHA512 9a86e601e28e4ca90bb4d48baf657d75bd8263b3fb9bcb135f64ecf53289592aae82f480a5eddd3e4f7d15200cad13bb48793703d1e927a5ee0e1af19b4eb2d6

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.share/lib/armeabi/libnativemodulelib.so

MD5 8bef097082404b8eddf29c03feeca8bd
SHA1 a30bd2a02b436629ed2950a2a7541790c7a3b512
SHA256 5d12b40525685389030bc2f7bdf6bee752bce4b1cf493b3932bdb4175dfb5018
SHA512 d9e66bb92d3aee89ace82d04513123a6c2a748ce6776a1b535254f69c9cae5ff98bf31a8a0543944bda6d7f0bac444a124d1a78db0835de4731a5b9d6f9f0db6

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.secure.scrc

MD5 72dcc4e776e59ccae7613b11e67d9b46
SHA1 45b57e8268ff4c9f7b243588140e9f8bf6c72132
SHA256 490161d5ee14c11813a5a9432aaa3b7770e29f9b556c7bbeb0802c6850c5d8b5
SHA512 b0eda5a0e7a3f44c8691df0fac527be36d4d777f66aa51aea6b3261f04ee2c1483e6d040f263a22b9cce7f068451c7dcccaae1e8404ab375ab9fe5a37c8a4b9c

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.secure/lib/armeabi/libWiFiSecure.so

MD5 90299b13abb4a8c18807e4b3c0e8a163
SHA1 af43201991a6866bb5b36642840f59fb5641de16
SHA256 436a4d54e909b280d6693fbb224e1e1f1ef56ec740e9d7830cfd80f7dd32eadf
SHA512 9449575e08b42f457abf66cb2ab26e2ed24abc0bd1a70a0452a4d5c50031b6f43ce5ab686dca9cf27c057fb97c566783ef00f0ce94f55049c0fb2dbdc14afae0

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.biscms.scrc

MD5 e69c1643ae6ee34d5ba9595e6efb7e3f
SHA1 e1463ef672f0ce72bc5b340e900913d166919dbe
SHA256 e693f3984a2b7b3e6597f3380266b8805d92ad3b41658952fc1dd4f909a40fe7
SHA512 1521cc1a1d52416fa78547db485584f775717091acd180cf1eb82b819188dd45b8f26b669dbb33595d729816a7ab877399e20fc39ac9de1f5ae459c0a2422049

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.location.scrc

MD5 56a1279d0479f6055ccc115f5252f9b6
SHA1 4dc1482ef691ded51053a12374b6ed8441f49536
SHA256 e2426ce0482435814e270b9fbf02b358dd619458a2782563212ed9fd5604cb61
SHA512 9212ef059eaed2c878e821de05184e26af5146caba5ac52e6178739ea68d890f75b883b17822d836fc66ae42d5c4a34d5d8f685aa413f2ff47a34b14d4f04950

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bispush.scrc

MD5 2d15b6d290c21720cd7aa37d6ac90ab8
SHA1 8584d15b6762bdb068eea5ef892a82d1988f4411
SHA256 891b47cb7866a2b4ce8346cf76192791415e19e0f209679cdbca22dab8647147
SHA512 727a4169967ebf376f66c7b6c8901e2759669be8bc0853abeac6586948bcb7e53f84b0624b5ebbfccb6fe8e6767e61643e1ad5b985852d920d8c3de8908e6f93

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.background.scrc

MD5 5687730e33e8f92a8701d243f73c99bf
SHA1 871bc02c5829394be008d432c9a9f5b3b070fa77
SHA256 93bc933c49fa2624be3fd479c3c21a7d01cbd3a98caedcf640f5d22b709bf2ba
SHA512 aba82b95ced11d1411d49203f9938ed9e64cb9fd65e25218dd00ced5e2e872c4517a9ceeae9dd94e08c5477100c79a4538beca9e4bc59a962059d7d4791b719f

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.style.scrc

MD5 1c78a381b569007cb6091ed3fe499825
SHA1 2e830186a87e6579e6e9ac38bca5a2d9dfa05cb4
SHA256 5dc3e9a30ea8c5560dffe79e7e28d1649acf9edf42ad5c6b797aa9598efa1fe7
SHA512 74a03fde232c37eefaa74153e35037376984cf3f8c3ed55ed863c91eb9d35025089303d46fd8061e4b0e437da836be4c45d8f1d99d1ef496dc3a0a67e7530a1a

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.biswebview.scrc

MD5 74cb70667b8b2cb6dd319fcf8697c077
SHA1 fd60fe8bd64b6e9a1df2c176ea607a320889ea92
SHA256 66a17c5f7d4a33f56b668b099d30606a3911a79c0b64f33e389ec8292b8be0c0
SHA512 dd978b74be3fcabd1e5a319d440735f78a5ca4226605ec0027f93bbef3938ec562766109bc518bc570f978323c69b5fbc8ed8dd920b015cbca5399beac35b8fc

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.pay.scrc

MD5 eb9519c86213a924c2608b3742f07429
SHA1 e54889d5f549d4ed4e2946f4a4aa37f438afbce9
SHA256 04e8c52b48ef6ee05c52eeba768c756b516848886332a95090398d5c2cb970d5
SHA512 bc8d6a69c7643c569a721b515d122184a962bf62e8de1d2893014335218c05f35826a23d219b43dbd12c8695e7e3115e766b93a19fb248b8504be1d8a485115d

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.concurrent.scrc

MD5 0fad00d0edd9ede0a31b72dad9bd4b92
SHA1 073cd6718888e991fe4608b6fbcb5351a27d15f2
SHA256 91b7ae184299655cb971407fcf112ff8d56f258ec2e0f0416f655345e637ea1e
SHA512 d3d149e2b402b0bf7dd97518b2e729a2c28bff845ea064b3c03cb494914808b97a4cdbc37c8aa44650fec5301751283dc56b0bf113888af2646a3b476c99c8ca

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bistracking.scrc

MD5 bfb589e2b02fee55a1d36a8978147e30
SHA1 d1300dc542ea60f4d512c8190dc8da394c6b7e01
SHA256 47af24e49eeebd2a86363f221b77f97e653b6da60ba87baa0b5f03bb1efbaefe
SHA512 865e390615dff013f6a7fd523f6b5de6384f04f7065b8b70ba1e40d5f0b6e00fd7f794649c057f858df8e4cc27c056dc5155db1abfb76fa8864964fbe4d8d2d6

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisnav.scrc

MD5 83017ae1abc5bb30d6d8f0f55ae82020
SHA1 bbc21e5e95bdf891e2deee5cb582739b7f65cb36
SHA256 3c196bdfb81bc8913d270d53a4da8a92415e7469308b350613bb217698c8a9a1
SHA512 c5e68d88a0ab55477ca7562a6df3edeabfd2814ed8189a21957915c249f9000907aaa5eaa3e1d92f92c31bae9e8859b33875e6d1696e47bc54a01f193fb260c8

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisbus.scrc

MD5 f71448e6a96b2b43a89121a7301f6170
SHA1 1c6f9ae2e15c24057186b49b48b494b3d614f67a
SHA256 13b5601b46d7f98d42c0809716b71352e72da6aefd06ff71a384c1c2e7a5bec3
SHA512 fc7659cc798b35c649203b638629b28d3eb3f2b2f46882c966ca4fdbbc9e6c01e72c0ae6024794b4ce018acf022ae034fece7b1e9f0460b5b229462af48568e3

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.biswifi.scrc

MD5 07df5ed5616d55c2b0747e433a249aed
SHA1 7671441ec91d2077cd5a62e28bb90c3a42c3e341
SHA256 a7f3679ceaba044c852bc234305ec1db7b8f03342b29bdced7804f6e5a8392a6
SHA512 565b2a2aa838984531daf1f7b909ec93506e72181ef7e1419f4bbd928f2dc178bfc1116a8114c0361bcbee861168bf5cb94ff62d7064136a517d21621071a5bc

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.bisflow/lib/armeabi/libsystem.so

MD5 05b20e0c428c8ecc11c4facd8313f7da
SHA1 fee6e8ea8f9b8e446c817f052be1ed0b4249e5c7
SHA256 4d1de674e2f72fd60cfc110dbdc877ea524f4de9f606b830c5970d73f6be1cc7
SHA512 85597d76c63abd2520e3a8a76ed1c879139cb5727bf055ec9b6191a9c164417540b6bd9ea5dcc4057d68cead54facb04fe632e703abe97d1d83ed1a16a518128

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.biswifi/lib/armeabi-v7a/libwifiin-jni.so

MD5 663354735356a61d132b6418fba51e99
SHA1 6a440d9cb366d536fb89b9d09184255e7bf63383
SHA256 6baea6e5eb2ac9e3acc1b037b62c5483eb1b291b6902fe03616501a34ea2a08c
SHA512 04d9a0286621171ae5d2789149e08bb6be3d459b00b68c61bf3d8e8fa1034b1a4a602b9a95c356e90f3c9385068a6fdf62998029a48e690dd84a4e608ebd4ea9

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisflow.scrc

MD5 93f0ead2e55401deb7f2525595077ae2
SHA1 a1d41ad77b1c9dbbd0d39c43bee054d8196c52f7
SHA256 59edd25d92061a59777b96be508a763ff1cfb7359b16d5ec0f4dc0c2ac5f27de
SHA512 b4cda6932242599512a5ee1d0d4f681fa29e5696f00d79104a91da2a941e8e79fa6e64ffa94131495ba6f885e076d96742612761d8a9e8b12c604bca6232578d

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.wxact.scrc

MD5 20d22b4ea6af33f2aa8937a6d6650963
SHA1 54914e342680fbca982233e579db949929713d2e
SHA256 612d80d3b5c4484c79ecf4e19aaefc90e087edf5e62ea5027538ef11fb1236e4
SHA512 69f8874028f515eb3991cf71bb571eb0f58295a6b1df108f3356a2639deda26cee779747d7f4e96535067299979e3418980c95f467999debf873b471e3e2f2be

/data/data/com.paxunke.pawificy/files/storage/com.paxunke.linkme.lib.upgrade/lib/armeabi/libWiFiSign.so

MD5 8a0dadd5ba680b7fcd95908fced3f958
SHA1 c333496574311015af284f230ebaa4550ff2b98f
SHA256 752c95fe8382a483781fd28a2e179a09953e427f22148382ce79347cac40ec69
SHA512 f45ea92892db0ff891fa674e87aa75f1a84ad1a0125e48141d96f2701d1a7fd240ca32f21192ae8ed17bcf723b190ecf832bf174116e421dfa7379e94c64eb36

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.upgrade.scrc

MD5 acfb50448fc4d2beaa849ae1f37211a8
SHA1 31eca322bae44032b33be814bbcb8169a835bcb4
SHA256 562a247fb4113dd1659d4750aef5286bf9436dc019e09397730a2c0f35957bf2
SHA512 820d60be7f46e00270e6d61666caf4bf728890df6c498b75d2c40d98938a6bb90aa61d7fa0f3681ba2aa06b588e1cd76f3614875bfb05da1a8f9dd33644432b5

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bismsg.scrc

MD5 653d9ee45f7fdbb9e10b526f0faf65ff
SHA1 05983599e25e2b4afbd3fe5fa87adcceaeb02053
SHA256 c8160567d6cb667954ff5f1d222c007d8060400f30141c07f55fe251ee983b81
SHA512 89b1aeca640e44fc6abce4e52a469b78a8a6cc5b1023e7b67441585c6ef007c8d3f8d01a34ee3a2d28e87be26494f03073e048e0d70bf07c8de0674e5d6ee6a7

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bissrv.scrc

MD5 3c2cd87153f224735c1d0b8d31455115
SHA1 0d2f5423718299bfb10ba385c3328bc4c9cd866f
SHA256 5d3dc2ada78361992a30474a2a63f58ee094c21447eb81f51402588b16bd89c9
SHA512 8122ada3a08d93f2ec3bfc07513e8c1231245e8026947a501a48c59a76648b60a1bdcb1741d5aea79bb349debd2b8322cc1515d81a374ba5640bab9b12ccdde0

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisbridge.scrc

MD5 76695ee482738ba0449dfe32a4ebadae
SHA1 82c710d760626ec110e369cc9dcb6949bce8c407
SHA256 6c353824ff29d7a9f620c38b1730db9735d3489bf37688142bccd3d59a6e2d98
SHA512 4fd739bf4e1aad694750bf00cb72f5be3aaed806be9f1ecae563a51e13589da6bacfffb46120a99d8510a5015259f6a43e7cecafe3b469c40a9f03d8e702de05

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.biswallet.scrc

MD5 fbda270ee3aa97d7308b31cefcf12ce8
SHA1 cd62a738aa82a43ccbecc809a013ff75fb677066
SHA256 12928131a403de1c866bf0ebfc7568ad3ff104f2bc476fb9c221c3864d87b4a5
SHA512 be0910a07e08694b3a686301130aece0a0804a2074cbdc4befec078f0583b02bda45c25efb4e6ac7eb42012dd211599a1613c18c83d557db4deeda754ea3ed5f

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.config.scrc

MD5 fafc24cf8719d1275130d76620c4b3f3
SHA1 935a79a2015c32ef9ca0527870e3ea756b9fca22
SHA256 2f32db381c82ab6dc2787f25f7326c30a8e1ca415c2174fd1585347654fbd8bf
SHA512 eabb7aaf465e67c9a0d447409b30bac18171d8a5f021216239b3291a63ce58859575ca799bb860eb3072aabe6183365073952733a91f3d3ea510db4e5005dc1f

/data/data/com.paxunke.pawificy/files/.scrc/com.paxunke.linkme.lib.bisguest.scrc

MD5 3f9031c64c3e2d40ba853a90ddbc6c27
SHA1 794d7ccbe87e9c85fb789291251ce2fd35cc0f2e
SHA256 c63e9665f4f9c2c572634c053e5a0b9540d3d1b405a357fad226ace4e7a33d05
SHA512 397e761324dc2ca04f7a5da5b6886eafe85312424465766839af28315d38bd592c1e03bdc932faacb38693460d3d3f5828267debef8cf2fd0090c10b8cacd534

/storage/emulated/0/Wifilog/crash_log_com.paxunke.pawificy.txt

MD5 d6c03235e2650092aeda5d259e58b100
SHA1 e658e031c0f87caa972e3b93a5883764b550f925
SHA256 eea1099093c9f5cca5fa2ac3a72ea67cec5cfa91690d19a2ba79033cf1454566
SHA512 c9cfdb0d2534dd0ecf10c6a3565fa75612444a28bef82352e76aa21731c9f4b3310a2048e10a8522401273a7819ee80eb5d6c776029e0dbd1e82e6164c54668f