14a31d378774af80ca401733044dc0daf9bd3f50106e51bf1faefefd12b957dd

Analysis

max time kernel
151s
max time network
161s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
27-04-2024 22:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

03bff53ca15e7800c911f2da43195bdc_JaffaCakes118.apk
Size

19.8MB
MD5

03bff53ca15e7800c911f2da43195bdc
SHA1

1602244c513144401db37934ca1a5029afde2e8e
SHA256

14a31d378774af80ca401733044dc0daf9bd3f50106e51bf1faefefd12b957dd
SHA512

0e2481448b8913a197f8924a873d9c0f2dd7192b8fafd4025402853d33de7811b0fa9242c19fe1f70ad722522849405d371801fe50a4b5695208890efdb9b108
SSDEEP

393216:E5n2Ji6oWLGhuvWsGorIhpDnQTkfZ9LQuTVoGIsgL6iWBqHBU2wWDB:EFX6oWLdWiunXfZlLyt6tNvWDB

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.video.newqu

description ioc process

File opened for read /proc/cpuinfo com.video.newqu
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.video.newqu

description ioc process

File opened for read /proc/meminfo com.video.newqu
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

T1407

Processes:

com.video.newqu

ioc pid process

/data/user/0/com.video.newqu/app_e_qq_com_plugin/gdt_plugin.jar 4231 com.video.newqu

description	ioc	process
File opened for read	/proc/cpuinfo	com.video.newqu

description	ioc	process
File opened for read	/proc/meminfo	com.video.newqu

ioc	pid	process
/data/user/0/com.video.newqu/app_e_qq_com_plugin/gdt_plugin.jar	4231	com.video.newqu

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.video.newqucom.video.newqu:xinqu_process

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.video.newqu
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.video.newqu:xinqu_process

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.video.newqu

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.video.newqu
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.video.newqu

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.video.newqu

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.video.newqu

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.video.newqu

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

T1624.001

Processes:

com.video.newqucom.video.newqu:xinqu_process

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.video.newqu
Framework service call	android.app.IActivityManager.registerReceiver	com.video.newqu:xinqu_process

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.video.newqu:xinqu_processcom.video.newqu

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.video.newqu:xinqu_process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.video.newqu

Reads information about phone network operator. 1 TTPs
discovery

T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

T1471

Processes:

com.video.newqucom.video.newqu:xinqu_process

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.video.newqu
Framework API call	javax.crypto.Cipher.doFinal	com.video.newqu:xinqu_process

com.video.newqu
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4231

/system/bin/sh -c getprop
2⤵
PID:4412

getprop
2⤵
PID:4412

com.video.newqu:xinqu_process
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.video.newqu/app_crashrecord/1002
Filesize
225B

MD5
fcabf5b26759b7626f77abe585b09373

SHA1
f1c54dd89451f68d03ebf06afe9e5e75f6845d8c

SHA256
f377df6a3e13e51313cbe99488467ddf925a84f8014d9d035f88c40d9b6b6862

SHA512
08553e81f10c363ce19181fec53abfbb05d9afe1275311fa8f3ae81b16bfff35120dea60b7b703fbd7f0228003bdbc105cb7a30acd96993156a8a93be5d01e1a

Download Submit
/data/data/com.video.newqu/app_crashrecord/1004
Filesize
225B

MD5
0c7b917ce7e9eb585550680a5235d908

SHA1
4a4a58557ee6f3473629da3f21ed97261aa6c2aa

SHA256
5b7b424cb1afe14c87e01ac05c5e972c67cf8fb36ef2050665a23b5780a6b97d

SHA512
5aa12e01c6f04312cb62fe4d14e7278ed9d1d423c1a3cf8a56fb7732ed264aeee388916a665e095b6ff9a7ac57668f4a3bf2f3839183906973e0e8a0c9609075

Download Submit
/data/data/com.video.newqu/app_crashrecord/1004
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.video.newqu/app_e_qq_com_plugin/gdt_plugin.jar
Filesize
241KB

MD5
b95166c2f63e536b6fc4b5b811444dec

SHA1
45fc74323bb2e66f4c2a493b65b70e0de2aeb77c

SHA256
2f92b98f55c7d4417dff3fc2af9245c66aad3ab8be65177954ed7a4f13bae20d

SHA512
65eb813d39270d83e6d43956ec139f04779dbea58e517da1727a0f4fad9de32bb4cd49bed1dc1fec31b95a95b1c653c22b327aa38cba1645330c9d256d94c087

Download Submit
/data/data/com.video.newqu/app_e_qq_com_plugin/gdt_plugin.jar.sig
Filesize
180B

MD5
d76981bb850c22bf261d52dd424dd3a5

SHA1
d2b52e926d51927588c2b426836587e63fe68597

SHA256
70ae375f7ebea59b98fc436ff2587d4784dcd83d7e4c94fd059afb49962fa250

SHA512
a3379600f571a7e69cd8b640dcb172f7f0ca0de56ebd4256f65735d2f6053504e02d7756e0ee568489665274c8aa3756d8fb438fea9505d9137dc1216d9874a4

Download Submit
/data/data/com.video.newqu/app_e_qq_com_plugin/oat/gdt_plugin.jar.cur.prof
Filesize
245B

MD5
89018dcc99b7e07d720d1853af33b6e0

SHA1
a86efbff20f16a612f1973e6dd1ce6ff1f77ab65

SHA256
4dbd7d0c7c55dde53cebd195c1753f02f46b68a4d4ec89b579118f0b892e221a

SHA512
ac19e5f9112f808af1009b465df76b4a7ba52eb0b4accc60bfc275bab373e7f7f92d104e8af4d74bd50a9a40362bbf392053066be40121ee39934bcfb032efcb

Download Submit
/data/data/com.video.newqu/app_e_qq_com_plugin/update_lc
Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/com.video.newqu/app_e_qq_com_plugin/update_lc
Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/com.video.newqu/databases/.ua/ua.db
Filesize
32KB

MD5
88107f4aef499871c373095d4efd8375

SHA1
974b91fa18bbbe69d45010eb9232f2927bb1996c

SHA256
6ea46e57eb6b0a8eb2d4fe5af6cf74b1023bd090e27f6d8bde87ca45ece32563

SHA512
3ab92c770f1abae642b2758c7fd99be877cae44062bf43dee86f897077b7def0d1cd6a54c1ffbb47f973b3fa47c1aaae3b7da8b2178e189d6edac2e72d734791

Download Submit
/data/data/com.video.newqu/databases/.ua/ua.db
Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.video.newqu/databases/.ua/ua.db-journal
Filesize
512B

MD5
d80e23532ebcebef1e052b6188ea990d

SHA1
003a740aef465a50937f14546627521901af957d

SHA256
9b636803427305be888b2469879edc919dcb1733388321fd49e16bba94050d05

SHA512
d04b69778b85069a4ef670ecd495c94f3567a665c6cef7c38054c54ea604f93e559dd0138354e3061f9334299ec30469d8103b8ce849db5ae3bf8fabc2640984

Download Submit
/data/data/com.video.newqu/databases/.ua/ua.db-wal
Filesize
56KB

MD5
3d019290ae48b293f40f9b54fa6c9265

SHA1
12e75e19ffb33191ddfed85ca235cf0a4c5786f7

SHA256
d6f61fb2caa84df29010b7ccda664f056709b56738555fb89ded4633d4a63703

SHA512
62b1e3484df9b5257055e555bf94e576f5ea2d7575a161918a1b063b8fa9f5694a6951690722412173b92ae03ff43bbf56912134f863661cee83e66e83dfa9e6

Download Submit
/data/data/com.video.newqu/databases/.ua/ua.db-wal
Filesize
8KB

MD5
a75fb06c2ed31b541f84fc80ee414db9

SHA1
f9c7dc556aa75c7048963ad805544eba05f94c3e

SHA256
eea544e74cbdca0d209324a2cfe77cb98874b41e328605cf7cf2e25d50a65fdd

SHA512
69c01eb3d03bc18b6524c363fbc44fb4e2c5e19ee49e5ec93789fbf6de7d7f170c6ddbc2ec7eec9333fe7c1e7bd6c315f19210f324290b0388e3f403747290c8

Download Submit
/data/data/com.video.newqu/databases/ThrowalbeLog.db-journal
Filesize
512B

MD5
369f897c8b19be5556beffcbf4fc3cd5

SHA1
82b8b2ddda80a05d2a7d631de5827e46e4bf667a

SHA256
cec2d4458d627f96aca48d65d683dd3b1e2708f126adda4b576d867890226b72

SHA512
8926c679d7bddf7ba5b4fdeb729f684ac2e6252a992012a70f6bfa716e66f13dd638bde60546e1777edc07538d71d74f61ec2ffd567fe0f0039bbc9186566148

Download Submit
/data/data/com.video.newqu/databases/ThrowalbeLog.db-wal
Filesize
32KB

MD5
58b565dcd68dbda250ae541a776d3db9

SHA1
ad9b7476cfcca836116658c846cb79701a382830

SHA256
2db40e1da610422aa7b266f7cf3b1c19504a3f9425887481e71835ffbbfad1a7

SHA512
d3c2136ff2de260d52fdde1a1173a5d4669aa23ba3b7103a9bc4383a39b2d44bdd791f5baf829594072da4024ab35e1d45ef65db13710bce0e2b374eb60134ff

Download Submit
/data/data/com.video.newqu/databases/bugly_db_-journal
Filesize
512B

MD5
8e200077a139143a6b050740b3717438

SHA1
0610951eb2ba7a30eed79a6a8dedcbb561e8ffca

SHA256
1d50dc332027a2da70545872b1b30b46224c2ae531c9c50ec823810d74351a2c

SHA512
94dfd8329cee2c59e888169960f260663f1f33fe6729123c41f73df69d3b1a8a2943502a8aa96d9dcb0137398eece01c8dba050e96e8534433432da392535c66

Download Submit
/data/data/com.video.newqu/databases/bugly_db_-wal
Filesize
76KB

MD5
b8d594ee3813041491703c4310fb3742

SHA1
822ae8eceb10267342748492760a4c442de84a22

SHA256
0fa4752a8d084aa08e9d40e82598ebe635248dafa6fa444b9d389544a547ece3

SHA512
9911993e5a4e96b6321c99d0ad10c74d6b777674c67a755534b335b403582c1759a9d5730f8302089d44b26817966929d4a635da7f887c5ca200c306bcdf23af

Download Submit
/data/data/com.video.newqu/databases/cc/cc.db
Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.video.newqu/databases/cc/cc.db
Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.video.newqu/databases/cc/cc.db-journal
Filesize
512B

MD5
7451f5954650f8be68cdd5449e191540

SHA1
6d9a6ce891451ff87bd19d40afc117abe332d661

SHA256
c1032c2462421294a896c099b6526258e365c80d8f1f2689ae79a71b79070008

SHA512
a7e5296705a811ff78ae9788f396db1c069dd796cb11fbe7ffe031910ecb8356ff7fa57a1bd98e543ca253c4fd7a96050da5b6668789a67d32354c758693e4c0

Download Submit
/data/data/com.video.newqu/databases/cc/cc.db-wal
Filesize
48KB

MD5
360aea2410948becbc0f8e60dae87e80

SHA1
9a5698407f29742fa63c12def4541c2feb491cae

SHA256
c29b72aad76559bde25a56d24850343eadc82d087d77e617d7ede4ce43cda70e

SHA512
fa66c0e377e4295353ab85a0238374d61ffcc8fc6bbac8c84db675e47b40ac5c72b3b92c68e178186d7f73bf213d3ae502087ade08f7be0006ee455249f2ba6a

Download Submit
/data/data/com.video.newqu/databases/cc/cc.db-wal
Filesize
16KB

MD5
65eddd740531dd73bfc009bcca63f6fc

SHA1
dbeafbeb3bc870baea5c5de92f1802e684a07c20

SHA256
fd703fa5e0970998ed06a04b39f155b98d74e4193c197f07b9084e5f19dc9aa1

SHA512
09a9c23a119d8505649c2f33ce9dd2024bf3e55b87341ecf30706933ade5827b3e4dd0af0786c2adcd2497b4730e971e3f1652992578f6143edb914797b6953c

Download Submit
/data/data/com.video.newqu/databases/xinqu_data.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.video.newqu/databases/xinqu_data.db-journal
Filesize
512B

MD5
ed65cbfeb0cc5727ab99a291e8a80d91

SHA1
99de8c251e76178b7dfaa4fa9930c0115805daec

SHA256
cdeffa17a3ddaf96f6ece544cc349af4aae3b9e82cd4e861c917e2e4273d4884

SHA512
fa858ed985d8210478622c1db5cc1ce433ada770b26730fb8d98e739fdfd16fb47e64cec3124646eb5dc4f37c80c93258fe14cc73fafcd14c82e453b05a75ec1

Download Submit
/data/data/com.video.newqu/databases/xinqu_data.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.video.newqu/databases/xinqu_data.db-wal
Filesize
56KB

MD5
cb4f70f5b90f830830fd189089aa661f

SHA1
765f6bb9554cfa8e4a1ac6bef04d35c3f371dc5d

SHA256
f4303407ac442875cb60b991df2df51697dc66b44720e6aeb7942db2ce165443

SHA512
6a407d769517a1b2cba6c0c299b45d951637afea53a5e9213ac99aee4065a77e2bed0a33ce259cd5e8e10e1ed5687a981d83f97e86c5145f613ffc33d81716c6

Download Submit
/data/data/com.video.newqu/files/.um/um_cache_1714256390274.env
Filesize
1KB

MD5
3bb6dbaf8c93e3ae98d5458b7c282aa6

SHA1
f6894dca5f92d7b00fdb11b94277be0c16442a63

SHA256
007658083e9d1190a0f81a7e82d8d5d41998a876d50776de10ab9d063171978c

SHA512
373874457f602df844e298ac8d231877b7d3a821b922377120f765ed963fd723c74158a107137be69912c27f91df3ff2babc6a3cb31452df5ab460f74098c0a0

Download Submit
/data/data/com.video.newqu/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
7c42e716e00663dca64eee47be173bd4

SHA1
a2b9c4ecc618abc629debc4f5b9bab885a11a035

SHA256
ab8ae52408fe5bf2733ab62015adb685eff010260cc39a1182f91969386578ac

SHA512
2455dd90f519dd49f02cb2350a60fab74f16c053b956fc7deda50473b0db5f98e5bb60f8d2d52d38adab25134a2afb7ebdf34d30b13d313a9df16c904ab64dfd

Download Submit
/data/data/com.video.newqu/files/exid.dat
Filesize
61B

MD5
985d92c46fe4d792f296c38029bb02b2

SHA1
bae1329c174ff4a796572198aa86c8f032b6030c

SHA256
5d23553bdd8c785a156f89e208276dacb8dea58668a54c6d205491f369171458

SHA512
9a12fb75a777042de3c26a7e08e502112dcbdb74fdfcda0cda0218c074360930e938a4c0dd8c4b21e733756038ab597c6117491dcb6e7acaf78dd4aa8fafc406

Download Submit
/data/data/com.video.newqu/files/gdt_database/GDTSDK.db
Filesize
24KB

MD5
755d1d1b0599d7be973031b5a9ed3373

SHA1
3b13cffb97005729fc20cd9b9a8547e0fa32632d

SHA256
90bc14445f887f7dbff548bdcc44145362d7fd20cc8ad8568b4d5c9372ee9b46

SHA512
afbd3a1c76a41015b2d4523d1c08dc14a3a75dfea3a5082b5e0552d750a498fd316bc98055b9f0ad2992f28b820ef15254461fb5df4cd6c21573a96f17b24ae2

Download Submit
/data/data/com.video.newqu/files/gdt_database/GDTSDK.db-journal
Filesize
512B

MD5
4f63b21423e0ef37a9bdc35c87a4854d

SHA1
47473c2e9ca4ac510ec041e985933ef005d02d94

SHA256
f2b7a7a5ac9916bafcb210ce4bbb0343538a79ae16e733d8748b4bd08ece6b5f

SHA512
4f48ccc33157d7ffcf1092c3466141dd00e9b1c3fee96621f36d35cf1cf628455594c664c07a9b2136d6c2af4722636c3c339039cc73a28bf91c3b1ac800bdb7

Download Submit
/data/data/com.video.newqu/files/gdt_database/GDTSDK.db-wal
Filesize
36KB

MD5
871ee67f4c9d57e0eaec6e898950b394

SHA1
c162ab74dbafdffcd27a1b0acf0dd7408aaac5da

SHA256
79082c2be495da56b7bfbc1752fc26daad84a6c3093e75f12c8558154810bdee

SHA512
17b83c3b7abffedd5de5e643e9eb96eb40aa0817e9b9c54c48923c310fe6ac4b782470e3aeb6f3caed5098202d98fa3931d3163912c95cda38d65e2915b3b297

Download Submit
/data/data/com.video.newqu/files/jpush_stat_cache.json
Filesize
137B

MD5
bd019af00293bb48ce5196a5251b3ab3

SHA1
466d078c98af5aa284ccc3e33fced742bf9d7ac2

SHA256
98860ec8f5dc41d0d1fc025675fa2f9feae89ead1c58a863f70c0c47b7c038e9

SHA512
478ae1ecb96aa8d14f4b429175cbe8ca0cc4ef086a6efcdcf1216c1062a65c9fa8d2a471fff601de356567a84d25445a179046ddc6e5b47bcbb572c6c2898422

Download Submit
/data/data/com.video.newqu/files/umeng_it.cache
Filesize
498B

MD5
09ab6d3e70f78f3171e303f9aed23aa0

SHA1
7650324a692d070082e4a570ce593c139bb94fbc

SHA256
4723affddfe765a1f51e575c601f45fefb530e502f176aed2e7a2845b2ad1245

SHA512
10c1a1a8bb77a53f3295255f0bf42fd0e960b22cc480bfef6c2f612837522f9ec1c27b429f827b95ca936e352841cf53ce9f3dbfd85c79c412097177f395eaa2

Download Submit
/data/user/0/com.video.newqu/app_e_qq_com_plugin/gdt_plugin.jar
Filesize
561KB

MD5
0b5784570f9310b17137d6541b329ec1

SHA1
6d5f66ef2c8da7aa69644020011bdda95ee1676b

SHA256
96451b883d3234465a050ae836f23469de5cc555252c82d5970e1bfe10d3b83f

SHA512
e826e7bbc5dc7f362ead69ea39d8846574a1c578110138ee5769a96842880fabd1f4f19f3fcfcc6de0f775956761f3c651b2a970427b7a048a02b5d0deb19f75

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
c0d3ab619f3d991822c7d66ff627e68e

SHA1
006fb371798e55c34b8b88df0f60da9258f3cea9

SHA256
58a6cbcadeae1ad9588d1faacda751fcace9c15ae5e24fdefe9559969ea34c6a

SHA512
3b5201697d0bd37007c47a080085338d28be67570841428b43a6130b08f7d6ba256f94ec7e9eb18d0ebeba581ad59dbd1377180e6292238fde9c0b32a12f0daa

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
ab908a50600e301a7de7ae970d9c2950

SHA1
10fb5689207225f7cd2c6fd3f2bc5e2fc5a4535e

SHA256
435d77d45c9dba2899536c029e95b688aa491ef4d88dd4bbaa682323780b5638

SHA512
1d4dcadbed7af0fbcc0b7e7b0f8245382db9ba7f8b023578ef601cb9772ee84bc5c50300a12084f79fbf3360a979f4e00830b1e659e084e3be487e54148e002c

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
381B

MD5
19904ca84ea1aad0f8acc746a9fd96e9

SHA1
e51591c25ac7a6479a6aaeb9dc92fc822e79b96c

SHA256
b0de6218c9b6135643f95565ffeacd4171ff25c9eaf92dfc30217d833558d0d9

SHA512
c7fd5250aa245eb5bcf7c737024f7db96b8fcbc3127ba535d47dcc1e1fe6d2dac2524a7b67904d4f060430425a19fefc266c93b2f0a4e66812b9baefc2f3e95d

Download Submit
/storage/emulated/0/Android/data/.mn_410185822
Filesize
82B

MD5
e8be01a3d651b9f955cbb28d7fe2f623

SHA1
04010f8b539c2e98c8d7b7752e9879547aa9dc0f

SHA256
97f36bba6fac1a853fc47a62ed426b46325a58a209d20a7c232641ffba4e44f4

SHA512
19eb61bf037bcc667e6a19773beee13011faffc9a5f8efffebddeb5e27e017bc47f26e143de5e9f471668bdd9eb445fb85afda410b065f0d3ae323169ba4b34f

Download Submit
/storage/emulated/0/Mob/comm/.di
Filesize
57B

MD5
70a42cba408700f9a6c01c7941a8829e

SHA1
eab01cc2c0671538795fb0b1146017dc099d0984

SHA256
499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

SHA512
8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

Download Submit
/storage/emulated/0/data/.push_deviceid
Filesize
32B

MD5
f9f96c101a57f90f97f733992e82432e

SHA1
347dfd20f385b28b2602069aa3c585cda0895ca6

SHA256
ea3072fb56e1598196f9449c37f5094d1831443040a9edc9961f1f5ed18a07c5

SHA512
c7b1a633c52f94bc010822ecd45160a6e70e27a8065b12bbd067a9d6ee51fc34789307d05733bad4040eaf98d4984cf1103244882655402023f031e8f37987fe

Download Submit