Analysis

  • max time kernel
    2970525s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    11-05-2022 02:57

General

  • Target

    d1c9f38bea5eb41dfce54fbee55eea0b7ae6060272e6272398a47dc5fc4e383e.apk

  • Size

    30.1MB

  • MD5

    f33e104e7e76ee46395a53c1904f6941

  • SHA1

    5c5309182f1c73109e088cb6e3f1dc87ded16812

  • SHA256

    d1c9f38bea5eb41dfce54fbee55eea0b7ae6060272e6272398a47dc5fc4e383e

  • SHA512

    8c473ab97b84ab6c6dd55ce4a6d6edbc91fd721187acafdb0d13947d5e98522da37d5fe54ab86a71e194eaebccea0fe9748149425c75d7944e93f9ceafdfb69d

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks Android system properties for emulator presence. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.icu996.zhanan.qh
    1⤵
    • Requests cell location
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:5118
    • /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=155 --oat-fd=157 --oat-location=/data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5762

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.icu996.zhanan.qh/files/mt_paythird.jar.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/5118.yaqcookie
    Filesize

    8B

    MD5

    263453ba8bcb7bc854514b5c51a5eb9e

    SHA1

    c75c4082ae62807e0e4d4c1245b70d931f80dec2

    SHA256

    cb9fdbc3d285bbfedcafc5236eda55910866a5857c6ee3a4e3b5f3c872443f02

    SHA512

    ff7c52ea3bbd71a71b07b3b04845b8d50798fdff10c380e818f4da8b5bcc55f56d2378d1a1264e46d01e895d41a0c7cb9eebe180c9594419c2ed35340b4a465e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    650KB

    MD5

    5eaa0ab055f88d1710a1c680cced039d

    SHA1

    3cd78c640c175d8f41c981dec45da2e0671659fa

    SHA256

    629ce3d46af2e307c50aa0a8b6a4649c07f15c9bb0ab074dc9e3c42d452223c5

    SHA512

    fa0e514c183962c89a2f27d680768542628a031312300de7d1574490920057975f227fe9e95e2a1c3cef399f755686b40ca926a4db6e582f7c5a07277f072c13

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    1005KB

    MD5

    40a808de7da3c6b50166532f69208323

    SHA1

    93970ad18c81ce2dac6821ac81bf4a96756ad958

    SHA256

    bcec590e3d7a1d6a6e8d50af7dfa6bc3590933807c69cb4a065c0bfa8df3a264

    SHA512

    6abcd4d059581dbc39004858fffa8e8333a50212d3eecb5cf095a61355db48106e1a01ed73dcf4528076891d86d82ceb18eb88f7f86eb75801449110023553db

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar
    Filesize

    1005KB

    MD5

    40a808de7da3c6b50166532f69208323

    SHA1

    93970ad18c81ce2dac6821ac81bf4a96756ad958

    SHA256

    bcec590e3d7a1d6a6e8d50af7dfa6bc3590933807c69cb4a065c0bfa8df3a264

    SHA512

    6abcd4d059581dbc39004858fffa8e8333a50212d3eecb5cf095a61355db48106e1a01ed73dcf4528076891d86d82ceb18eb88f7f86eb75801449110023553db

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar.sig
    Filesize

    180B

    MD5

    2b07b813ff2d497e8ca27f3448fed165

    SHA1

    4ef5bb551771e3f40654a5e255b4e8c6ce499e79

    SHA256

    5608022d024890b4db9f6a002780f379fe40636bccf58b0c9b5ee00ea40565ec

    SHA512

    c1f8515e064bafd7e370fc674132b9c8a30b670addc15290fbae8e61d578a3010e6b3a72dd13b9ec5ee09e43ccce79e029ac0196afbb0821a61a231c16bb8462

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/gdt_plugin.jar.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/libMMANDKSignature.be582605.so
    Filesize

    13KB

    MD5

    a8dd7dd8ab7002cf9ab3f19ac9fb455c

    SHA1

    311d25212f08ccaccbb67c567096874a5cc1c632

    SHA256

    ce25c9f2e82eff62a175bd4f7b617266be35cb88746b2502b6afa82853bf9f43

    SHA512

    18a239874eb4fd552e3e5b822c788944277e8af2b8e18a0cce7250c1cd49162b5eed3101ab15e1da2a2473a168242834ac762558770bcd8bd93777bfb417b787

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/libyaqbasic.be582605.so
    Filesize

    123KB

    MD5

    e53ea5f5ca3c7d3bddfc8546ff0f259f

    SHA1

    fa78eb119bd303466b6f4d93bee97e29b3c77035

    SHA256

    843da96dd1fce6718fc8ae0d51f0f6d74cc1874f4e78eeee064738cf1724ad2a

    SHA512

    8ddf99722dcc0429d6c1769865e45a48a490c56b35e2ac0877c9c69e980c719204535ca07d49f7f1c445944f7b1e6ca87850315fcdf542140e26df26cd70e510

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/libyaqpro.be582605.so
    Filesize

    114KB

    MD5

    ffd38c1fa353f524867a72c2feaa5673

    SHA1

    58c0d382712899ef523a3b9e46178f1124850e3e

    SHA256

    b2a8198a3d2468e21d94e4420045727d9be42529eed36788d7a8f91870fc7745

    SHA512

    7e116252174f3b9592f310ef94cbe2e9de275a33facf46a180b122e5d9fe6002773fbf06d58ee178b67d05f1a3255e0ba53efbdbfb93c80c6afcd4d43b1793b7

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/oat/gdt_plugin.jar.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/oat/x86/gdt_plugin.vdex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/update_lc
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/yaq.be582605.sec
    Filesize

    37KB

    MD5

    d268489681e5e5ca5ca2943e48543410

    SHA1

    20ac03a55c5032feec31e535289ea84a0ca0a97f

    SHA256

    7c5b680ce51cf3a5c608c89d02a09de67aaacd97e58d1a15d7479bac9309c2e2

    SHA512

    c5452388e282e62f45cc90853d7015d637ecccc872c707bbe152c0bcc9379fde7758dbe16a8f7ee9557d78caed7f320fa300eb5e247f8e5a5f06129fb049074e

  • /data/user/0/com.icu996.zhanan.qh/app_e_qq_com_plugin/yaqsdkcookie
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/cache/VAdNetSdk/reqQueue/-1127729055-1266689676
    Filesize

    1KB

    MD5

    57797e0262d176a33db0ac6fc77b6922

    SHA1

    85596a4ada0248834cdc5ee0b4ea1078dbeed4a6

    SHA256

    cd61ab7586b73eb05183c5384596f1dcee7b2aa7747f46cb363b57462b9c5481

    SHA512

    7541de5c2e99a730515a7891f36b6d8088ce2b39987931ff24211c6de3f04b0b3cfe87cc533fb627613ed6a7972d9f22ee43ca03f666e7298348cbbc3ea0ae50

  • /data/user/0/com.icu996.zhanan.qh/cache/VAdNetSdk/reqQueue/-5998622401067643521
    Filesize

    4KB

    MD5

    d85a5bf13c2ecd65329b67caecfe2716

    SHA1

    302e4dc54b6fa2b33897e55cc7037ac04e1844f5

    SHA256

    e163647806f9e71867d5d40a1cf3db82454daa16ad06bc36bc31317c700a9de2

    SHA512

    6f7e39a63f8948c39d267f4f1cb54414a77972538ebd889e6ebaade93d4372975681ca6f726077b19eef074c475aaceafcf22034c4b2d351dc2dec98236b46b4

  • /data/user/0/com.icu996.zhanan.qh/databases/downloader.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.icu996.zhanan.qh/databases/downloader.db-journal
    Filesize

    524B

    MD5

    d2c4adbb4d42118523c07d0a5acc65ac

    SHA1

    7f5529b6097ce0f58b45240aa53ae2161e0d58f0

    SHA256

    93f007e85be981e114cc31bbe03f17ffd622c46f8eb5b28c8cd254bccc007400

    SHA512

    74d7998472616a0d4e33dd36360f2fc150ec7a30e0461d0f8a19fb97b13c0becc32d47299913e4f973572b434c8ae37567260df08867dc94f897a31bc812e517

  • /data/user/0/com.icu996.zhanan.qh/databases/downloader.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.icu996.zhanan.qh/databases/downloader.db-wal
    Filesize

    32KB

    MD5

    a2bf0d585c72bbbd205052c05b283f12

    SHA1

    8eff69c71af195fe03ecb34608647f3b5fd67d8d

    SHA256

    93923628d7345872a0f192e94f650365cf76c795886b9f7790ba3a53a4b955f0

    SHA512

    0b6b212738a0af96bdc0f47e1f97ada6ff4a17c9376a28e802a4ab3bafdd2166c2c5e8b9c31fc9e1c7b1bfbefcd101e4b9f56eb41b3cb58e946975940ef481a0

  • /data/user/0/com.icu996.zhanan.qh/databases/jsb.sqlite
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.icu996.zhanan.qh/databases/jsb.sqlite-journal
    Filesize

    524B

    MD5

    30475208db716c2cf3cdabb106f7c136

    SHA1

    8d67dedea5946da5a84d759efa372c93f75f9b39

    SHA256

    9b26f3477ea91695795867b3620fd8713969a86c6be02db84b9ee5dfe4a9101c

    SHA512

    d811231c3dbb95744554b6fbddfb8aec91a9d3699b8904d0730cb623309c09e9af2faec3e765a5667b0fc876d028d71b0e6d7ecf604b12ccf4f84f94ae6263c3

  • /data/user/0/com.icu996.zhanan.qh/databases/jsb.sqlite-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.icu996.zhanan.qh/databases/jsb.sqlite-wal
    Filesize

    56KB

    MD5

    18a9a89528b89262e968ca340d4aa6f6

    SHA1

    7a95355f035ace4086554c93af19c8d173b4986e

    SHA256

    39f0aa2ae3db5f72321fdc0d3d9f8b27ab2fd9ad4ba5b4fcf9602abf381aebb8

    SHA512

    b106870004ceab1037eb561cbc9f751c03f0082e87ea44a54aaa555772fe89f38f88bc5047055c62b8887a3f34f46a5bda6016d47aa2751dde61d4cd919cc398

  • /data/user/0/com.icu996.zhanan.qh/databases/ttopensdk.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.icu996.zhanan.qh/databases/ttopensdk.db-journal
    Filesize

    524B

    MD5

    611e09a266c03b434c96ccc7a28392ad

    SHA1

    ee468a37ff159be71f56d324064390af89592ffa

    SHA256

    3c7f51a37667126d53d0f4af8b109d4e48d1ec43e2e9f4076ca3c13bd34e1985

    SHA512

    d3aab86bda959bffa8a78fac39fd5e9ebc4c8b8c4444b2f33ef2cc7a1b78c2220a772d7a82b904ee9ca5777af68b21f488f413714774316d8b810011c9631977

  • /data/user/0/com.icu996.zhanan.qh/databases/ttopensdk.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.icu996.zhanan.qh/databases/ttopensdk.db-wal
    Filesize

    60KB

    MD5

    851b95e95417ceaf9c23d51b2d44a703

    SHA1

    608914703bbfbe6c157d389a469bbec30eb999e1

    SHA256

    5464e473a8705023700feb986bd79017489e282e22980ffeeba709207e4edde0

    SHA512

    013eb3ed05944dd983363e049e2d05f8669457f8b54cd597d38bc3715bea093c21e04ad57e72cf48ec63e40474ee05387896b540ed9b2433f4d9e5d95af59e0d

  • /data/user/0/com.icu996.zhanan.qh/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNjUyMjM3OTQwMTMx
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/core/5.11/cloud_switch_cache
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/core/5.11/cloud_switch_cache
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/db/AKTorchDownload.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.icu996.zhanan.qh/files/torch/db/AKTorchDownload.db-journal
    Filesize

    524B

    MD5

    596b3eb9fad5b792380798547425b22c

    SHA1

    287c4474c220c31471b18d02e188990a3f62184f

    SHA256

    6e681e7354ebc92345adcc0c835b948bac55ff1b795321f4a05da9fbad58071d

    SHA512

    53f258fbb3ba0e1f6b5598ad003c14bff6ab7ed02a38990ae914dce5c0d752a8ed23e14df8c2f42d1332a71e8298cf684ae4d9e0b965ecff7861ad277d9473db

  • /data/user/0/com.icu996.zhanan.qh/files/torch/db/AKTorchDownload.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.icu996.zhanan.qh/files/torch/db/AKTorchDownload.db-wal
    Filesize

    28KB

    MD5

    8dcdb1ea2d7f31b3b700d31f33f24611

    SHA1

    3b596a029bcf883fd32db330512e157eae84d37a

    SHA256

    584370be5cd089e804a764455a969e54410945c907764f7df38c5d4671c2e221

    SHA512

    9c21970f6a516aa7b24723b2e028508b111bde0fa75007b9d9b016972d9e3b1f8569a1d6933efbe0b98fd2a78d4641949258bdcbd81883ffb4563c01245a659a

  • /data/user/0/com.icu996.zhanan.qh/files/torch/shared/wifidown
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/shared/wifidown
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/core_update
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/core_update
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/core_update_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/device_collector
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/device_collector
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/device_collector_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/log_reupload_task
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/log_reupload_task
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/log_reupload_task_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/profile_task
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/profile_task
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/profile_task_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/uninstall_apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/uninstall_apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/uninstall_apk_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/waitingDown
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/waitingDown
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/waitingDown
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/single/waitingDown_locker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/tc/1a29d857e48cd655b79f557f2dad4b3d.con
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/torch/tc/tc.con
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.icu996.zhanan.qh/files/umeng_it.cache
    Filesize

    415B

    MD5

    2c29fca30b05e8965e31684b59e89095

    SHA1

    14697fff5bc8e3398c62640b638260ca6ff16452

    SHA256

    bd6756ce7a297181518c796fc53032ab2c3959a40a10f81b2b14dc3feea381bd

    SHA512

    1908874371d9edb23de4c0724d81f93f3cf103c5716a0b7071a72e08ca2d7539105283952f0a215f226b37c10e5458430706221c5414e27d9c8ff8f0b6ee0b65

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/cache/tt_tmpl_pkg/template/889dc7a4d430a543e506a2418ead0807.tmp
    Filesize

    1.1MB

    MD5

    c6cd377d86d89088c7a3806fa2eed625

    SHA1

    00d466fa9c16d8b95d5ee167482e29328a65c594

    SHA256

    97ec3385ead845e3d2aead98062324788d6b16359cae37ed8dffa1918f8491e0

    SHA512

    8dc1fbb31d74ebc1c2c669735f225f4f44d892d51955faee76c346d823dc70eb8470f02f1883443a442da5afd713725d82f74696bd0c656546bd764abb87b860

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/cache/tt_tmpl_pkg/template/b7831f02fbab33e49cc3ba2da3f4e468.tmp
    Filesize

    133KB

    MD5

    db2cc3c73670ddb944eb81e5d238d919

    SHA1

    b51f101f37f9a6fe27fc8321f887378c5c7bed33

    SHA256

    76afda0fa699fc2921d886a2fcac99c553648bad2e7ffb2518511d6b3e71200c

    SHA512

    c004750b7d3ddc511d651dfca75ab92e5957592db0395181915dc339e5db715e5c2f7b462a4a39f0e59bacaeb502fcd21558fab26c194cfdc49e1e3f479a0f3d

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/cache/tt_tmpl_pkg/template/f9af3235c798fcb301a875630d2b2fe1.tmp
    Filesize

    102KB

    MD5

    980f799f4661ec3fa2cbaac208fe7582

    SHA1

    b89cf75317bf4c75d8c0e554224c94e526ac1a53

    SHA256

    64afabdc400713d60e0bb412433fbf0309e30daceef475774521fea1b437448a

    SHA512

    f61472756e62a292b3eeb1022dc610abf69625ce00abd0433af47337b027d349dc57331a79de48d5c96fc3f6de43e78a8c37c34c24c8c76eb0059066e454d902

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/cache/tt_tmpl_pkg/template/temp_pkg_info.json.tmp
    Filesize

    617B

    MD5

    d8eb5867f7aaf6bf83b33988e5cb8dd8

    SHA1

    4469e6682aac9ea8039ab066d88bdde502e3e6b5

    SHA256

    71e5e375fac9e1e692a21192ffa8115780e6b18c6810b405c55b9cf19bf28f57

    SHA512

    1ee264b48557aebf997028ae2da41112af53f604439138e1d31a790a2ea3d2e7f7c6b5c635628d5f5c7d529fb72fa2e83e6860a4b96344e78eba701ac74ffd2b

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/.sfp/.sfp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/.sfp/.sfp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/.testf
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/torch/apk/uninstall_apk_list
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/torch/apk/uninstall_apk_list
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.icu996.zhanan.qh/files/torch/template_image/journal.tmp
    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56