c12b59365ee44bf17e887cc12478d7512cec23c6cac31e4a7f6885104a8d1fba

Analysis

max time kernel
129s
max time network
185s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 23:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

68f7fd407516e29919034a384042502c_JaffaCakes118.apk
Size

6.8MB
MD5

68f7fd407516e29919034a384042502c
SHA1

a3f10cc388d8f9cd38ea54189c2056ab74985435
SHA256

c12b59365ee44bf17e887cc12478d7512cec23c6cac31e4a7f6885104a8d1fba
SHA512

2903da1ab89c1040117c7f2422339fdd18b38afd1d097fe3af1a8d066cbef591553bb71ed8426b03db683895bb297c10a1e2b56c3105f7d6bb27c3e4748fa41d
SSDEEP

98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6b2:GrsOtM2uxMGwJCFFZ+/jqguPz

Score

8^/10

banker collection discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

com.qihoo.daemoncom.qihoo.appstore

ioc process

/sbin/su com.qihoo.daemon
/sbin/su com.qihoo.appstore
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001

ioc	process
/sbin/su	com.qihoo.daemon
/sbin/su	com.qihoo.appstore

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

T1430

T1627.001

Processes:

com.qihoo.appstore

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.qihoo.appstore
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.qihoo.appstore

Checks CPU information 2 TTPs 2 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.qihoo.appstorecom.qihoo.daemon

description ioc process

File opened for read /proc/cpuinfo com.qihoo.appstore
File opened for read /proc/cpuinfo com.qihoo.daemon

description	ioc	process
File opened for read	/proc/cpuinfo	com.qihoo.appstore
File opened for read	/proc/cpuinfo	com.qihoo.daemon

Checks known Qemu files. 1 TTPs 6 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

T1633.001

Processes:

com.qihoo.daemoncom.qihoo.appstore

ioc	process
/system/lib/libc_malloc_debug_qemu.so	com.qihoo.daemon
/sys/qemu_trace	com.qihoo.daemon
/system/bin/qemu-props	com.qihoo.daemon
/system/lib/libc_malloc_debug_qemu.so	com.qihoo.appstore
/sys/qemu_trace	com.qihoo.appstore
/system/bin/qemu-props	com.qihoo.appstore

Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

T1407

Processes:

com.qihoo.appstore

ioc pid process

/data/user/0/com.qihoo.appstore/files/sllak/opt/4214/finalcore.jar 4214 com.qihoo.appstore
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.qihoo.daemon
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
collection

T1409

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.accounts.IAccountManager.getAccountsAsUser com.qihoo.appstore

ioc	pid	process
/data/user/0/com.qihoo.appstore/files/sllak/opt/4214/finalcore.jar	4214	com.qihoo.appstore

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.qihoo.daemon

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	com.qihoo.appstore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.qihoo.appstorecom.qihoo.daemon

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qihoo.appstore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qihoo.daemon

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.qihoo.appstore
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.qihoo.appstore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.qihoo.appstore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.qihoo.appstore

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

T1624.001

Processes:

com.qihoo.appstorecom.qihoo.daemoncom.qihoo.appstore:critical

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.appstore
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.daemon
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.appstore:critical

Acquires the wake lock 1 IoCs

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.qihoo.daemon

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.qihoo.daemon

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.qihoo.appstorecom.qihoo.daemon

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qihoo.appstore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qihoo.daemon

Reads information about phone network operator. 1 TTPs
discovery

T1422
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.qihoo.daemon
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
impact

T1471

Processes:

com.qihoo.daemoncom.qihoo.appstore

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.qihoo.daemon
Framework API call javax.crypto.Cipher.doFinal com.qihoo.appstore

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.qihoo.daemon

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.qihoo.daemon
Framework API call	javax.crypto.Cipher.doFinal	com.qihoo.appstore

com.qihoo.appstore
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4214

/system/bin/sh /system/bin/pm list packages
2⤵
PID:4737

cmd package list packages
3⤵
PID:4771

com.qihoo.daemon
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks known Qemu files.
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4245

/system/bin/sh
2⤵
PID:4496

ps
2⤵
PID:4657

com.qihoo.appstore:critical
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4516

app_process32 / com.qihoo.appstore.rootcommand.persistent.CoreDaemon --nice-name=com.qihoo.appstore_CoreDaemon --daemon
1⤵
PID:4560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db
Filesize
28KB

MD5
2304dd698be3705c85ca097304ce7de2

SHA1
325882522ae26bc42927f6e46c489b93799aaab1

SHA256
740e5bd0953670bcc14c80bc032c828420f9460dd3ae0f165774c5ec71584e3a

SHA512
eaab8bda28fd30544fb9d413695cbfe42d3f2f184a77e6c73ec5fbad3621127a01b27f1a5675439a5314d2640ebbdf118f58bc90ae864a2923055ef9f10a31bf

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db
Filesize
28KB

MD5
04183d28d08d24a5b03704e8a44f1e0e

SHA1
3710a7d4f4a50e9a8a14d1cd312291d99fadf7ff

SHA256
cbcd94a175e1689d50dc1d42f20d9238dc71ff218539f8eab55da964e5190695

SHA512
817f91475b63f1e8feb1a11cf55f0409b6728bfe8db1b6fc6db63a7dbb091a144c607b2f339993d79b0a7ab338d02c9612af63296624a1ba1f6de03b96fc245d

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal
Filesize
512B

MD5
c809eed90d5016f373ea5ef80c2c9ede

SHA1
06e0e72b5fe5b3d923798ee86cfea78ee6067a7f

SHA256
5dae79442e3887e5a09f3935454bf09e6b5f3ad03f2bb3889e7f9c415223c048

SHA512
d2e604f07efc6282aec614be23f040ff60f23d6567c9881ae266bde7e9ae035f0a70a629796d697dce66b0cce9d0f02854ec4fa1a62ad24cb541764fbdb7a007

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal
Filesize
40KB

MD5
f5e1498fd6b2cad4b021521e62951575

SHA1
02e6afa8794ce682abfae412b8be77e7cc9852df

SHA256
3a1e83ca7af1a550e679bce70b4716c6f0a5d04727aff00f18e947df1b4233b1

SHA512
10e4ff7aaffa8fe491576132924a5bfa5929ba743f8083fc49cac989b9ce30cf5cc4be3c4220d011c0932562dcc86be797eb560d66dded771e89bd17ed3de553

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal
Filesize
8KB

MD5
f54bf3f80c6b171a36bc42cbf2bd47ff

SHA1
89820b328969f68afc67a1dee647b5143c26b729

SHA256
20c18b9710485cffb6552002d0fd655ff1166b96f9fdc8b306155de393547c84

SHA512
616c87736152876c2f43d2323827821336032b023f867d28e35116a3d65c8312cbae64f8b41ea2c44d28c9f12214704c07479e887f91673fe8d211dbe0e135c3

Download Submit
/data/data/com.qihoo.appstore/databases/_ire-journal
Filesize
512B

MD5
66f11fdfa97f2aebe778976778430d1a

SHA1
7d875f9c940fe1897a0f0edc8a53393c07da7214

SHA256
4dd92fabeb0c5be7494aa528225b40b3e4b2f3d75700ef395af13df5295d1c44

SHA512
6cb1f0e8f71a238c5da35d973a0d5476d645a41f2b3a26a8e61a305f7fd73b2aa16272cb27a0928d0a85759a7470abe2d5db8364db6cbeee41570c4d53e1939d

Download Submit
/data/data/com.qihoo.appstore/databases/_ire-wal
Filesize
20KB

MD5
7b2bd814bb83660dc26358d545b1c8b5

SHA1
12956fe3f542e248fa67d794379a19b0bdaf26fb

SHA256
724b0d15e72bf435b3c06560c050c2c64fe2cf6bf29a7b3aca6593ebbc5f59df

SHA512
6ceb36f17dfa96192cd7289fa8974414fc27460b877fbe7d738217f49531acee37fec700744b0bd9de210dbff89821e31e419d471da4b8368a960888dac8f3f4

Download Submit
/data/data/com.qihoo.appstore/databases/account.db
Filesize
28KB

MD5
924e8d876830616bfc401ee5a5e64225

SHA1
1caaa4b15e0e9bdb7bb540c37f5518ceadf80214

SHA256
6a912b040955c84b13cd3b7224673d8cf96746689840d2b3bbe6d5dbdb8c63b9

SHA512
974f9e4d4bd724308a2a066bb8ccdd8355c69c327dc034f8a742d0cdb012e5f4d8544aae43ad8a2ede8e3d41c942262de3dd1c13399677447882fb394b168c1a

Download Submit
/data/data/com.qihoo.appstore/databases/account.db-journal
Filesize
512B

MD5
cbb25b363b7e78ad926f859e61abd342

SHA1
d89f07676932b196ef520a7f0c1d81277abd8512

SHA256
0a1f171cad3998cb211101671756570e1daaf4c8e42c5198fceabc118a401e7d

SHA512
0c3045560fdd21abd1897680ccde03018c3620eadd713cc91781cd15a32f4ba1ba1e3bc1d5e3720a1fb32606c6faa3c935cc86f28bb7bd28802b61e9fe97d9d0

Download Submit
/data/data/com.qihoo.appstore/databases/account.db-wal
Filesize
40KB

MD5
dd05b7e78a9d48807a559b670039ee06

SHA1
bb4412e70b7a03c29fb00116401507c23a5c027b

SHA256
a5d7e3a7501ab2f1c9ddeca72390b1c9758c328eb8d1f0816ac2c6d6ce15a887

SHA512
8c12b8f5abe792dfe9b3f36ab6389c1f9a8d8d9cbefcb6fbdf080776fd9549318b9df5d46ff9f20d58dce9994e5b0ca9a6969799951d68e94f596f496f6b6e3c

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db-journal
Filesize
512B

MD5
68f820f3f6ce8223260dcf7e3b4da067

SHA1
5c7699a8ac64dbcac53855901e30f4d5b1ff5b34

SHA256
09fce1f39be748e485de892dd620a9b8221c19b4f9f5363f91c19ed7e5a5bac1

SHA512
215495c37331d603fa18fd6610baf2d5acab56c9a44ef71741b3c167cdd69384768b5c44261e1b1acfd1db26fc598202c0e77fe2c68af9dc3a568af2a2143c98

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db-wal
Filesize
32KB

MD5
242d90bc813fccb4084cca663abc91c4

SHA1
b13d4e0503d5d03199e63edb26ec75971df9c55a

SHA256
c339e91232cf0004e29bc3a142a3ab872b8f07236a9bbef84de56540458fe4eb

SHA512
c9b9c7d823ec76d9a70a7a7c15c11c7d2195f6e6f6ada95f7debb52473825eb72f58673d1479d2e98ee8b45a460d581820f0c54d860e60294967276ffb38dce7

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db
Filesize
4KB

MD5
ad13724d54516b17d4f0e8c778254c7e

SHA1
f3a5d09342bae45b00e0cd1e948b57c5fa4e3c02

SHA256
0baebb0d0050bfe1bc3e6aeb1cfa2f4cf87bd2dd3dacfa64e86ef82f657d3a00

SHA512
c0f1746b5560460c71ec51ffec1302fcff511e9c3db5f7d27d95faefa62975f7fe54ce63f4a47884d10f7034c9939e075e6f09b445c580f80cfe46524979b2a1

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-journal
Filesize
672B

MD5
1a47b0d53ce09c2ef4b96d7e4572dbce

SHA1
673f8a02c1cd515162bb6e7e517d9c50e6eb00b9

SHA256
906460d8da229d9095835ac8de7e4e8919baf86122143f017b2efbc2b6d13762

SHA512
6685e36340f0c17af9395d26636b51638d7e43b70fe62fb8eaa8ce23d8c6e4809004b2174a51ab273cf1a9f2544ff21e58ec826705ce6dba7af39201d2436ce4

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-wal
Filesize
32KB

MD5
e6d7149072dd0f441e46942c47141ad8

SHA1
98650478e6d5d830c1942e2930e1c7a92462fdd9

SHA256
1cdb0b4696dbf535e5d1c2c0ee33dda8860296ee2daf70d4e330b97265fb0e29

SHA512
2b072f284f215e1ed2a6f0fe50d6bb8e0e4e1881c88e79cc6c529debe01cbd8a599224f0960ce40bbcbae1553ea1c19f4cc1f611e54a85c39b3db3e95c1658da

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db
Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db-journal
Filesize
512B

MD5
187f5461b77adb761c33b36eaf1c1a23

SHA1
f9ffcd2d70c82efa9e198b4877b206568c138650

SHA256
b92c6e4e89c987d9261c99f302eeae76df522cb035c48d441b035bca43b81bda

SHA512
e1beb61f84fdf766b2e812f44d74ae5dadf8eda78efc5bbcc2e1afe442b8aef2abd86d7c281aa4150482e8927df7a5159fc4417c7504a736b71ddc6ec0aefa01

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db-wal
Filesize
16KB

MD5
a86b50d784e75e01167459a4e92c989f

SHA1
6d0512d822cf6b0ca8238fef1bcff2fa5eb6acb0

SHA256
000decf083a6ce8d53470ec08c8dd4994851c3ff3b3c42ef5826c26f53ea3f29

SHA512
fc2896fbddad39c0cc21b8b3dc759138b3256435af1a0aafa44fb980c91d24ff20d43c8e79a0b84fea4728380dca4120c5b9eff8965ce2a679c2bb9fe42cecc5

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
544B

MD5
59071174d16bad7c338735d9bd56513a

SHA1
f57530257a812b423769ba5166d2585163bec615

SHA256
1cfcf5ad04ba5b77c5c33622dc7f5cfa4dbf83b8187bc76487c0d95e0cb37910

SHA512
ea7a2dce233691a3c762eb39232ad37f58d15507d778b7cbe8aaa67176c2466d664f74b22d58400848f041b6dd0d149c77decf8e376fed63d3d66062af53c5bf

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
520B

MD5
cf6177fc0a529ca59a959ca3bedb89a3

SHA1
6b34efe39c574f70e59e18afc665855b305c617f

SHA256
a13376eaa3b127ec5b3569c8aeb38b437a3e4c56c304b15aa476502433da7619

SHA512
1f6917b6f969f79f5a4be79f027424d8c21fb58b174a1b39443b64364c24410e40c9de5ab5ef00f751f78526e22a5e3bf7d92a772981b98f29713381752cb74b

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
544B

MD5
2499db9dd1fb9e67e0e5c09b0aee08fd

SHA1
96f0b650e42c282c520a5d6248b9bc5a00e61f18

SHA256
a98d8168c64cfc46dae75acfd58726b65bb093979eba289fddcfa66c1173ccdd

SHA512
726c2bd7fb74ba856aabfd265fbffcc6e282509324e4dfa30a9923d9d69dbbaa760fb492021e8756e72a6d1ee06b28cc645cb15489ad0679136ab4a73a2f06f2

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1013B

MD5
aeb09b46bf538c58488278fa62b10f61

SHA1
25205dc6e8971df1af3d85d09ff8c94a54049cb4

SHA256
7f9012d6dd2bb388d9dfb4e0382c8656e9d1c5eb8a5369009482859594f35e85

SHA512
f8de532a8cdc8f5c18db2be56a68dff4aa91536c3640a3ac1ab8ab3cb611ceb3518ae013d1543fd8dd32e1646b1cff9e4fad98f1b58c04ee413ac20f3ad68347

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1KB

MD5
2bd14c1e17c90a127ae7ea0df1a474d5

SHA1
a3d58aaf37d64bcecf81ca1b70d2bed30c963ae3

SHA256
dee9fd67ec2bfc9614a021d9ba45b5900fd42f76c20bac77e49d207dcc515fe9

SHA512
7bf419e40510f74c3278e8c8eac88c1a56dd0b696746c570f13173ea861d0814f734c3148ebc860d6b0dfd82533d687fdaee50a254ad047f946be366e713c013

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1KB

MD5
a4962b2e8f92a4bbd6539d7c620992f4

SHA1
3c674edc36ac5c4daee557360235a473ee725d43

SHA256
dd472713284581798ce2a2c078f0429f4fb5fad87e36c7675c6fd0abc8b36435

SHA512
58c99688ad4cff648bb4a727b4682d9a7843d5294a88bbdfb5d5a37a4cd79cc643529392b891ceaf1796b49f943f8bd6e3a6c7ebf8ae44bd0e3fa94cf7159771

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1KB

MD5
3d93534945720746b712da95654b1018

SHA1
b423a88a861115ef5112e1499a00842f01c10139

SHA256
5e49dcc1aa8c434ef7bde53e13dfc41834fe8bb2c2c94cdf284df298f2503e59

SHA512
551ec8f4a1b161067b63cc4d1be6664dd510ad746620be69b741026ca992a97c035bd0c5a3f46dee74a1a8b9f8034d3735777e44241e55b5cd08389b35501c22

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/report/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
664B

MD5
cb1ca8b436f445b3bdbb7a5faab94c56

SHA1
1037f3b15c7ea40f8705bfc87dc3ee10f4b9b417

SHA256
5eb58534cdbef4d29daa0bd22daeed1e07228ad6d1ccc0002b3178cb2c3ca086

SHA512
30be957f4c2043d18d93d45db2dcd2ee29c2942ec5a8f30a62d30b4b6c2baae34192dbb654290d8eed3548ca3dd759596a7c3387dc25b307f4f4605515e39dc0

Download Submit
/data/data/com.qihoo.appstore/files/sllak/logcache/log1716419804401
Filesize
2KB

MD5
620fa81005edd87629cfc18f2b46c18c

SHA1
eab39ea2dda4576f33673bf2ba92e159469107d5

SHA256
d35440529aa3d03ef3e8e03121f5006fee1b7b6163a3a8918dd8577c77125768

SHA512
2617023a9b7f36e88ea39e3114d2ad2f2ba4bc8df100a08694d8f2089c7ff733affcc3103f6f754e6d488a4c0fe524ee8b17e07cdfae77358c2d6fc0329f7d7d

Download Submit
/data/data/com.qihoo.appstore/files/sllak/logcache/log1716419804481
Filesize
596B

MD5
4b0616e56d5686a8b5950cad6ebd896c

SHA1
afd037c0806e0cfdf5f8939000f1b587deb06aed

SHA256
022a84eba8abed60bdfb9809272c8ada3ceed98770eed8143b1853c73937616c

SHA512
176edb0a5aa12de525640b0af40358afc54c3f41a34739b2ce8d10679e1f7054ff77965feaa3db8711b9e3c0717dedc2041af5c412fc2533fd5e023f7ef5e2b2

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4214/finalcore.jar
Filesize
77KB

MD5
074b101a54271800b5d60457aace063a

SHA1
8f98bab0ac0e6e11ab2f0ccc11123881eeadd1a5

SHA256
c8707b3a5b5192e3eb31feeac43f14b0498c6e12b983fc86e832c90cdbb94788

SHA512
ab899c101577bab60a8f9e061b5db021a45cceacc9c6861addb1e55a33ac73aed39a45d696447a0bab2ac7698725e2074206bad81863ddac49d04a9dc83ff7b4

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4214/finalcore.jar.tmp
Filesize
77KB

MD5
c14c8a2f5d3a7c47eb2ca8c1b6e69adb

SHA1
4e57b3c0f34427aba8a5be40c2e9b627172a89c8

SHA256
7d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107

SHA512
2be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4214/oat/finalcore.jar.cur.prof
Filesize
559B

MD5
2b2c4977ec6e703db25456894da22d53

SHA1
ecc0e508bb39f9c1fc988fe1cbabaa2b82d946fd

SHA256
3e7abb78fac71185d8232f71726e1aff46e9da299fd167acccaa684b8ea20b8e

SHA512
ff671c417a1aef481686bfaef4f1d2911e3ab65c0410af386ef8278cc1f4047ef7ecb73b4e26a5dd5c227f2fc8e85423ccabb404ff3a1aeecf2c0996830491ec

Download Submit
/data/user/0/com.qihoo.appstore/files/sllak/opt/4214/finalcore.jar
Filesize
176KB

MD5
b667ca71e42bbeb899566c8834ed085e

SHA1
053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

SHA256
536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

SHA512
52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

Download Submit
/storage/emulated/0/.sfp/.sfp
Filesize
83B

MD5
6a6266d3b205e1e8383c40a1f094ab7d

SHA1
3c691d45993a9517aec1e15e703fbab92efe6a73

SHA256
bd46e4a5f6e93efc2ffecaf2134493a9eef7a0427c97d01ba81007372ca7c85a

SHA512
5078c177979ff387aae97b12c3b250a24dc60bcf2a397351d60aaf1975da0f997a259d00131d7043ba7570c54cc0505bb5c65cfe6fed5af0f31095f4f628f935

Download Submit