Analysis

  • max time kernel
    178s
  • max time network
    191s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 15:39

General

  • Target

    67c29ed1b4de1de470e653e0b518c10a_JaffaCakes118.apk

  • Size

    23.8MB

  • MD5

    67c29ed1b4de1de470e653e0b518c10a

  • SHA1

    c66156e5e13a8f9b4c421e262ae342a22d8bae6d

  • SHA256

    30712b835d5b46951fc7b767ba1aebf4d3a674b0fb23fcb2b0f885989e733fca

  • SHA512

    2c1a30750f9395f3768722d1e3090774441837c6ab11972f21f5fdd51c019d916e53d11c98c7af955a0db8c1386506a20c3c88a7e3a2b56d98e438ee99521d40

  • SSDEEP

    393216:e+doTdH2dVWBYGuIVzSRo8C/Nn/a/CxD41sk6C4PCjYohRA425k0gO/8EU:eTdWdMyASE/N/2CxDu6zPC7R85/q

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks Android system properties for emulator presence. 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks Qemu related system properties. 1 TTPs 2 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 1 TTPs 1 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • tv.pps.mobile
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks Android system properties for emulator presence.
    • Checks CPU information
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Reads the content of photos stored on the user's device.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4340
    • dex2oat --runtime-arg -classpath --runtime-arg & --dex-file=/data/user/0/tv.pps.mobile/app_pluginapp/com.qiyi.traffic.3.0.apk --oat-file=/data/user/0/tv.pps.mobile/app_pluginapp/oat/x86/com.qiyi.traffic.3.0.odex --instruction-set=x86 --compiler-filter=quicken
      2⤵
      • Loads dropped Dex/Jar
      PID:4724
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/voicesearch/1.1@1/voicesearch.apk --output-vdex-fd=193 --oat-fd=197 --oat-location=/data/user/0/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/voicesearch/1.1@1/oat/x86/voicesearch.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4852
  • tv.pps.mobile:downloader
    1⤵
    • Checks Android system properties for emulator presence.
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4529

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/tv.pps.mobile/app_dynamic/mcto/libmcto_media_player.so
    Filesize

    2.6MB

    MD5

    31e17d7735ca40048fd55194a43157d9

    SHA1

    b29d0b7c3d6f5e1aa5c756b6a365094ae3dfc382

    SHA256

    f86bf462d99ecb6b16b6a6faac5936b5b17553ea161ed443aeb882c8a89d5c9c

    SHA512

    49827f8982f7eb22992c1a7074211868830566c2ef4a5e3251ec39910d5656850f22c4e58957838efc5a99a87975b82b346277e00ebc2092ba95e88924ca75dd

  • /data/data/tv.pps.mobile/app_dynamic/mcto/libmctoffmpeg.so
    Filesize

    3.0MB

    MD5

    6958aa5f2566ee32fe548775d0eca638

    SHA1

    5d434ba92e04888e5e085b2dac361a65f547ea90

    SHA256

    f9a167d69e3b501c6013a4be1e19a7983d5bc4dd7cbc71d5f1eb7d350f252af4

    SHA512

    3a08908e380570b0552b2c304c1859f804054657bcd355446b909a97051ac5ebd750d3dcc092972bac74c0985d51ffd1a25a29bf300a222503512ee9ea2719b9

  • /data/data/tv.pps.mobile/app_dynamics/bugly/bugly.patch
    Filesize

    196KB

    MD5

    f2dd8e7f7510cf695d01396803c89580

    SHA1

    387dceef66c9c97f2e8ad38a4f111c27e1ec107d

    SHA256

    78ef88549c490e3233c087decd4ab559acaf1709e54b49de9131a2a93db1115b

    SHA512

    10ffc3f7fe934fcdca3c9e20bbd7231a33de0c1ec6516f656c115ffd473281daaf9100c1e2281de0fd8d7f15457d84eb907a2240f7d024e6beba7d62311db56b

  • /data/data/tv.pps.mobile/app_dynamics/bugly/temp/lib/armeabi/libBugly.so
    Filesize

    157KB

    MD5

    70c5e64dc9424a6b53070900c43ac617

    SHA1

    b88a58daff99edda0220d5a7b57791938a56e2be

    SHA256

    718dd022c8909130848f218581e77b369f1346e5596567cc05aa30c08e428158

    SHA512

    0c0e852e6fae62eebd2474b3bcdd3e0cffdca38a812c6910d19957a9bd9cb43806b7fe7bbe9598721cdf03d0eec73140e489ba2c474d19d0bde7868cbb629f8f

  • /data/data/tv.pps.mobile/app_dynamics/mtj/mtj.patch
    Filesize

    97KB

    MD5

    9301874696e2ca2cd677c77e16878ea9

    SHA1

    d865cf9b1bd21415298f6c391518479a551c106c

    SHA256

    8af6c688fa9a040fcd52eca4004d5ba7152b169374a4753e5f3c5a90acfdc3f3

    SHA512

    67448dc15aabc59a112bd20e8b2991c778e78009fb9d6544a32f946fc6c716edeaf894a244efb0cea6bdf4e1761c693291cca2b051a3946e514df800e42ba7c5

  • /data/data/tv.pps.mobile/app_plugin_cache_main/7518da5fbec98687dbc4b4b1c275a360.0.tmp
    Filesize

    1KB

    MD5

    c30f7661c88d68c6435f896b5aef4404

    SHA1

    2a6013f71b75bc687e93d2eb890545d34d328052

    SHA256

    8951757147789e5e010b1e04ec4a13af7ea488e029e3724b7ec09f15072eed02

    SHA512

    d5320f8b382dcc80dbed242dfa7bf7879c689fd630674668c1b42846c3a9ce2ed26f4f6efa78685eeefb9a4eba9351806681f3afdd95c55ad69d6cc0ac2ec66a

  • /data/data/tv.pps.mobile/app_plugin_cache_main/7518da5fbec98687dbc4b4b1c275a360.0.tmp
    Filesize

    1KB

    MD5

    44a9ca24d4b7c7ffb743185dabcd036e

    SHA1

    91d671b128ddab4d7fa8028de4143f2efc575733

    SHA256

    22aa4f33bd9754a37922a939d770e88ce2475ee4bca9aad671d2350cde04001b

    SHA512

    5a507691ae46ea994164e54b15e60d443b9d8e002c9ff886fae3e5b57a103dc36540684ffc9ade24be314e32a80759886d37c7705d7a509c32dbea09e1402d21

  • /data/data/tv.pps.mobile/app_plugin_cache_main/7518da5fbec98687dbc4b4b1c275a360.0.tmp
    Filesize

    1KB

    MD5

    8d8594cec4369e3d626570d3306d4562

    SHA1

    55b9402edd3c91ec3a0cb19ba0869acc198f1561

    SHA256

    45db2506e0a7a7c5964b7ca18e83f02dff0a8de4a474e4af814c274ae31e6626

    SHA512

    249aa98c51b8a5946f2eb5a8812d886781e0dfe22204ae4b99e5d2bb063b06df3c50228a81eb3dad1c8f40598d539718a74c8237171a98214e098154e9f8fb49

  • /data/data/tv.pps.mobile/app_plugin_cache_main/d5e01b3570299d9661fddf4b3e95d0b9.0.tmp
    Filesize

    20B

    MD5

    7518da5fbec98687dbc4b4b1c275a360

    SHA1

    73aca37f8c81a587510d850bed2dc5cc724b58fa

    SHA256

    306f690090cd56b23b34a425f1db2cfcfbea4d6a0978b76a034e54b3235fe336

    SHA512

    65054d0f00bc9e7f1b5f9c931ac9a2b6852c95fcd9a8c378a0720cda2df6fa34c061c5443e2fed1117e0fbbc2a8417b217c79e427e852a3c3975229c24b655f0

  • /data/data/tv.pps.mobile/app_plugin_cache_main/journal
    Filesize

    361B

    MD5

    edc1c301fb3c2590ac0f524f2ab2a77d

    SHA1

    b7ebcd095814fa30cfee1eb6013f05a06f4a231d

    SHA256

    f214f1f840232b002a4320d3b867f8692d6093ddbe68ca223acca9e865d5789c

    SHA512

    8d0bc4c2a5c389f83840915cb3d53294fdfd66d8e7175e0b6af6ddcb8d0edb887e648f4d1bf9f4e5f1493c02ec9d0877f79a3a55a16712dcef4f6d582e0f7b78

  • /data/data/tv.pps.mobile/app_plugin_cache_main/journal.tmp
    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/tv.pps.mobile/app_pluginapp/1716392427696.tmp
    Filesize

    127KB

    MD5

    e479c7d3e8f09c25b8cec91869161c39

    SHA1

    745abb49bb422bfc765adacaeb2d3639c02656e7

    SHA256

    26287e36dcb2ace00a7799f7ccefde9f2304560dcdd7f30a32527caf84adaee1

    SHA512

    e187bd459de9b566331f61cb3964077a07b5c5fb2cceeff6f134ef332b46a4db8a290c8383d62f2a6d2259db800d07ac9f8f3569aa04550d62f1781417ad50bb

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/cache/content_cache/rec_log
    Filesize

    37B

    MD5

    ff7c9287c90aba3990559c606f9f3f9b

    SHA1

    35eb275f8f84b974c104eab861a74ef50c971f89

    SHA256

    4e4d77318870ae42fe16dca760ffcd0228df6961a0bc6f0d5f283e3a39a86f65

    SHA512

    9da7c5362fee3972d3c33f1c46e8556c1a46acfe9ec7b1deeec89f78fb32414021914e545900eede943270cc0477354103a5b823c1e04735019f80ebbd11decf

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/cache/content_cache/rec_log
    Filesize

    1KB

    MD5

    107a4eb8a26c2a490192f3517c4d6aa7

    SHA1

    167c45f7be83ad157ac52ea352b5d03edc36d061

    SHA256

    e70276e92cbc6deebaa1373739c779e716ced507e3056ef0230c4f2527c29517

    SHA512

    27ab19b0c03845dda9fca61f99bf42894279893b69dff06f197e9c67d3e0cd182eff47fbc4ea80106939314ad0119ea431cc2ac7658f59f705edebc4a71307d8

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/shared_prefs/qy_traffic_plugin_sp.xml
    Filesize

    122B

    MD5

    955cc9d114bc0c88c2024945418b6366

    SHA1

    d0f39fc548e948e3078e1887154d939aaa93f74a

    SHA256

    7c0f939b025c43dd051e45aa03a7cbbebac5fb6a94895cc9dae13077fcb893c6

    SHA512

    38b342bcd21e872ff19ea1fad5a0308597ab369384a9d26f98643ba581f271e711e87804a95d6cab14dadc4cee53f6a76ecdd3134d31ebc5714b8b9d6da0cea2

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/shared_prefs/qy_traffic_plugin_sp.xml
    Filesize

    169B

    MD5

    7b92c563411b6443119059f127814d37

    SHA1

    674971a7c9f2052f176716bfcf915f57927eff70

    SHA256

    5d154300aef976c27c5828b22e1010e85b4323319b8cb80dafc93d33f6a4f71a

    SHA512

    d4a797647c835e9603aee4506f492c456f2c370caa9985e524934aca02ad972a049624d04caf8210576392e6e206d7abba3bd82cb5314036f9f1cb80283ed9ed

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/shared_prefs/qy_traffic_plugin_sp.xml
    Filesize

    217B

    MD5

    5235f7638ea0c25214eba01f2896983e

    SHA1

    db36bc73b20ee06ae4cf96d2c838a419a822844c

    SHA256

    7e35a30ce568372a0c34965d5cfe7d9050c5461270cc232b62276f8fb94405ea

    SHA512

    78e398cbac3f920e3b930b8fe01b4b16dcbef507c9bc7b5bf1d3252bad0f0e944da0b7d2c89784a89f02d6066261b995754b382c1b9e7103b39328539b4ebff0

  • /data/data/tv.pps.mobile/app_pluginapp/com.qiyi.traffic/shared_prefs/qy_traffic_plugin_sp.xml
    Filesize

    1KB

    MD5

    144a90307bc2ba96a5c0aa1a4aebb266

    SHA1

    3d8444af6ad2593e8b5ba3f32e945b100b6fdf0e

    SHA256

    964e232744e4c4526eabee345aac2b5731450a610373fc3de2da1ff870005800

    SHA512

    03bcdaafd1486be57bb62ca88bc8bdf8592d287a6770e47fbe06a8c4ca7a8e333b9a69e104b9221ffb05f5eff8284dbec51ed850a8ec17943cf9b434d68c3c5e

  • /data/data/tv.pps.mobile/app_pluginapp/oat/x86/com.qiyi.traffic.3.0.odex
    Filesize

    16KB

    MD5

    0cd8cd8aad43255639aa7d5179e3c3cf

    SHA1

    9944bcd33e3fdf70e3a894e49ac0adf9445ca016

    SHA256

    a37cd4f2ecc1d3cc51427b08422430d3a0ec8a1ac17be36bc3a80aea68f4c6aa

    SHA512

    6363da77bf2f7747ec5b4a6a978ef0fcc6b1b01e5e7d95570f563aa3127c5be74504a1cd5d27e898dc467b5aea26aeea65df250cee8fa44be5faba84760fc2e9

  • /data/data/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/tmp/tmp-libBDSpeechDecoder_V1.so8825981123914369255
    Filesize

    400KB

    MD5

    d9054d100a0029ae5be1a407a9881d66

    SHA1

    1c6f2a72af631d62d964c5878b7a78bc9817f754

    SHA256

    67b2b24c86fac0fcdd890f916c0df447a7b1c93a870e7b5a6f880d2c6ae2bf56

    SHA512

    46aeebe2eae69f7bd1c0efdbce9044f593a1c7c3b70b3ad66dabee74f52a7f5c74eccc92d30cd13dd18fe7b430c3ac0197cc05e158f03f04242488479494a3a0

  • /data/data/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/tmp/tmp-libBaiduSpeechSDK.so4357145953729346328
    Filesize

    1.2MB

    MD5

    9ebbf48aaf8b16f66133b00aa898099a

    SHA1

    f8f95884331058f91c1446dd30f9c39b5baa7a6f

    SHA256

    716f08a9ab73d4f270bcef8a88af275b72cfb444e37ef9f78db0fd6363e979e3

    SHA512

    9e3a0848fdf248330b60eacf6f386b9d94dc6c75360328052a137a0b651dca2325dd18e7ee62abeb60547640f708c61e93c999e4945fe70bc829eafb27c13b91

  • /data/data/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/tmp/tmp-libbdEASRAndroid.so8866068621148602317
    Filesize

    615KB

    MD5

    42cdcb52647d94a1d3fa4f5da5b5c956

    SHA1

    dac2915a1f31d92f3b18b7755d47447e87194f82

    SHA256

    d88f3667c8837011c59b57586ecdc0f9b0ad90eae1acd26633747557e9538ffd

    SHA512

    5cd7ec8a72b29bb70d9482d3a5901247acb62aef9ec4b9ec8cc319f9b16a0f9d747c3aa39cd993abec2809e1e03e639a433eb98fef74038e865ac74a89818fa1

  • /data/data/tv.pps.mobile/cache/app/player/reflectiondatacache/journal.tmp
    Filesize

    35B

    MD5

    4dad9f71058a327f1b419c29e240ca70

    SHA1

    7c9850d5480ef5c8b48e65d47111691ac5e2849c

    SHA256

    d5429d12ab05aead99ee008984d0db6641bb9d6fcfb59f6ea8503f03fcc605ff

    SHA512

    0fd7649874b28473b0baa80f6213c5f42d049da1c58960553f6809e51153c910c99dcaa5f6b4f5e9f5a4735ab7dfeb26caaf9587a156b1d2ad6fcf3e0b18dde6

  • /data/data/tv.pps.mobile/cache/app/qystatistics/report_config
    Filesize

    2B

    MD5

    d751713988987e9331980363e24189ce

    SHA1

    97d170e1550eee4afc0af065b78cda302a97674c

    SHA256

    4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

    SHA512

    b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

  • /data/data/tv.pps.mobile/cache/content_cache/DISCOVERY_MENU
    Filesize

    11KB

    MD5

    ae8b0a63ed8d139098f644de668efd04

    SHA1

    8005cc511d979fea2aa635d80df29609a71f9d70

    SHA256

    4c2aef340a7f2bd09f87e1368563d5b18b7279327e1848335a88a15b68d9d753

    SHA512

    01bed1a62bbc89c3b52d3d79c69842854e355db701111158927b60c6685e631b7ff952f31232f5c3f9e70954434a9d54cd1f557e0ca61137a8fd51c7bff24604

  • /data/data/tv.pps.mobile/cache/image_cache/v2.ols100.1/69/t-NDj9n3CvcHidP4JzvBpY3FTVI.6310249747296253360.tmp
    Filesize

    197KB

    MD5

    98acb6a538395e9458cd801eff1ebfa7

    SHA1

    11ce360885d5ef9f5cf76ea5abcdf6aa8a216fd7

    SHA256

    8160c0f0e0f93be45a852d9db9f2bb3cc8653a5966718ab71bf4a9f55bb08d3f

    SHA512

    cfe747ffe558d5fa04309e32bf6fa2ca0d00a065d3b2163f4a2b9b65ae1435fed80d82024e0fbc48731e68f427b4f26df273bba7d60a9fb25b1cbf061f2af09e

  • /data/data/tv.pps.mobile/databases/hmt_analytics
    Filesize

    20KB

    MD5

    99cd9183bc5d3ef703c1b1f24edc036d

    SHA1

    beb125d4789718929570b99300ceb40bd38cc102

    SHA256

    fa7449abefd5ce426208683026b057b565dd37fe0d3ee5a82fe4d245612af815

    SHA512

    29cb135f81c7bf57c161aefe5700e5d5b1bd26dfc952082c9b795a8ea413d50f5fdab4605050ff523bc16af084f4fb7bf7e3880014e422b3c08924b95ce99ed9

  • /data/data/tv.pps.mobile/databases/hmt_analytics
    Filesize

    24KB

    MD5

    00a9d8f111c94bb78fe24b006f9b95e8

    SHA1

    6cab121812a86f1757ddabd40ab831c71cbd0ad7

    SHA256

    1e66cf1268c07355f6825d633b2cf8b82a3982f95a3b527a4a4078d1e54f2a20

    SHA512

    b9bd936c2f73807db01e169ff691c114f50afc0bf565efe26458cd7ee759aebbee468d62ddfcb7ebf78088a87600c6256a70a08c218b7e0a6308b9c30d8e00f1

  • /data/data/tv.pps.mobile/databases/hmt_analytics
    Filesize

    20KB

    MD5

    ae50935fc98b4522e0905c952fec25e7

    SHA1

    e6f38cc70fbc3998cdcb3d0687c5ded00e52c57f

    SHA256

    c2a0ce180b7dbbe6fa4c7c01637e32a6edb5a0df708e1d065085caf5407242ff

    SHA512

    5a7c2fda762c13ea0651f2be0f4592805b83bb5eac191800a817ed70de76d74fe000fc422b500e4e47f5bea39e70db0ec8892563c1ac3e4b35f2bc64f5b1277b

  • /data/data/tv.pps.mobile/databases/hmt_analytics-journal
    Filesize

    512B

    MD5

    0e1f70c6a5ac14b0a75b5a7aa1dcf8fa

    SHA1

    c353df9253845a6b6380023bc9c941ada2d1976c

    SHA256

    1aab3c2c8975f964ac45457df62b4a0c45e766f5ce7bcb81fca9595cd0b543a8

    SHA512

    8fcc4fea5e3ee421622c22c9c4f13cf1cd45f6b0836af885365612c6cd07ae6af66c9891661622e8869a5f2fa924cd23ee4e06243ade4ea5b5fb737c45e76229

  • /data/data/tv.pps.mobile/databases/hmt_analytics-wal
    Filesize

    8KB

    MD5

    7262297db4c3a8e7765a3c35bbf2b4ad

    SHA1

    0aeb9c961b8c534de4b8f182fd0c577887d98191

    SHA256

    fe4baeb1367205a12e6a9957284af6a9d1cc5d6cfff3a40309841702a8184c64

    SHA512

    46867f489223044537865ce61135e47eb6e2d26ad2417ffdb9b15c1c0e07e100f8faf4f232e15265f2ea37c9013b3786d90f95dd8dbe7ac4e0a176629762c6e3

  • /data/data/tv.pps.mobile/databases/hmt_analytics-wal
    Filesize

    44KB

    MD5

    9f7a32dd4203706c1f39873a763fb277

    SHA1

    63ee3ba21c77fc8545ada65a764759a19c2bde5d

    SHA256

    f346f064373f9c05fa6ba52e0b3ab63a9718f3b27ad439a2c398773a9db9e64b

    SHA512

    10bcc279b00757e6111577ba5142c27d9eb79bda6b5ce0eadb50909defc139466388a984712ab917c2bcfdd3c5619255cd0e1a10598594d4cec3001d378bd4ef

  • /data/data/tv.pps.mobile/databases/hmt_analytics-wal
    Filesize

    4KB

    MD5

    7ae407d13b6e9518202dcc78e9e3d1da

    SHA1

    f3b9ac175b935d5567307e803c8317406989c008

    SHA256

    439826156ef15fd3a67f2f392f4289a65003add88b8c5e5f3b362cb4e3a07a1c

    SHA512

    1e58d9cfcc4dc9b098b5e203ff6244c79ff1c9160a445bf43ccb17575a47e34e495d34c08b3246a5f3fa269a0cf7720be755e6e3cbc3dfbf86812c7cb142bf13

  • /data/data/tv.pps.mobile/databases/hvt_analytics
    Filesize

    20KB

    MD5

    721f5d1557187cccb6efa3510a59cb0e

    SHA1

    28f6fd3a526f02cff57f99120293dd65e2f3567d

    SHA256

    7146018232b0eaf8fa158d64848e5588300e91e343d1820391959f3ca8828ff6

    SHA512

    0afe8f62dbeccfa656bb6cdbf7ba956406152b6730da94796974058db97680e8deba50b6f1f60bc9c8d387390c4bdfdc00af2bc8a3bba794e6902f12245509a0

  • /data/data/tv.pps.mobile/databases/hvt_analytics-journal
    Filesize

    512B

    MD5

    a33cd3b6313a375a166943c806a68c00

    SHA1

    baee459332a71768f8c1f95d2f741f4b62bd3fac

    SHA256

    a57fbca4d9add099d77da4aba5ad89383ad7ca972136dab80423061b0ffbb11e

    SHA512

    d78096d5c9a115b05618419a1f8e47aec217d58a40ebfab7040344de2b1ef2ed3aeb28461edbdabb7d335947e02861e13e5c410400f48a552ed3c9aef0a1a0c2

  • /data/data/tv.pps.mobile/databases/hvt_analytics-wal
    Filesize

    32KB

    MD5

    1e1530bb6a1402165544a7cd0a746213

    SHA1

    930cea73f2ef598b4c85cb8b0ff4302cf80de734

    SHA256

    b8f7bd1981efafc1790b6719abbfcf0fd06abd141d0c774cd01bff0d62b842a5

    SHA512

    7168dea46f9f2f450abb7c772141828d445ea570b27464fa2bf9b2dda838fcc22a3f225a171075a5c805aad9e645c0e3fbf3c9f121d5a6b16b8bbb65cb14f99a

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics
    Filesize

    16KB

    MD5

    a57b12ca45482c98e7cfbe985c554d72

    SHA1

    7ed73517f295019437623cb7f482ad83a6f0e254

    SHA256

    f3c71a80052c04c6ccb40a5a23a1af43c78ac53833b412fd052239d2abba3961

    SHA512

    bc48d98665503c8a67e027aacc77a8511d6682265fb573039061b1fd1cdc31d2118aa5df0c3cf8a60b234668c70907f16923c9ce335e28a99ce87303cb981cdb

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics
    Filesize

    24KB

    MD5

    1bbb432da7016ed5390721d9f117082f

    SHA1

    05338dc45a89f677cb3ec4119ed932eabc17fe20

    SHA256

    49a565c1398a7fd332b53098aadee512e1d30b70a8f6ab801ea78023c8b7b705

    SHA512

    0457963a7719278e223227e026eaeadd5fbec15afc9ba33ada5611a680ac064a46b3f0d516497bcb522453dcf5ef1e24fcf350aa6230bc67ff1b9f7b2d82b747

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics
    Filesize

    24KB

    MD5

    7ceade38020583d457f0fe5c45c06b79

    SHA1

    3d9e97fc7a5b255aaf21edde0dbafeb592ad2903

    SHA256

    747fa0d6c9f31db5a53a386a4f738c67c9c6553e6f1ea811631c674d0e78b69f

    SHA512

    6acc8d807928ea8aae388436590a05a2f58a4820bd92893bf873884ac8eb69a9ab811823827b34a5087914274e2fb49d26c0ec2812ca9ea1883bc2652c363dbb

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics
    Filesize

    20KB

    MD5

    ae7e5bdc4ebd8d0fc2004f8049776c5a

    SHA1

    91dcd88f11663d5f163cfeeafe60c94d3fad8d4e

    SHA256

    dad07e6ee8f1854b2d8ac802ebd054077b90f5a2a403aa248874e67b488e6078

    SHA512

    853c802fd49c40bbb155f9599c997a08a9773cdba8315d81c2be8520d01016e6d23460f94e10f89280b85f999ccd7d2074ba1b6a35136fcf4c8ad8e9746f998d

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics-journal
    Filesize

    512B

    MD5

    723594a0ea365c49cdd5d1ef45c5be22

    SHA1

    c26b3de4e4f36ac5025afbc854ce26dabb2a2463

    SHA256

    f327601e0499fd7ecdf9cac43b6d10a79225374fad430a991c903af17c418cf1

    SHA512

    e0745bdbb6e20eaaf5aedc667489e3a3ed3a9af921db1832a21ce25e44e2106a68d309e95ee2217ab5cf923b42cc67dc46e0386d7e64d9efbb51be68780b0fe5

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics-wal
    Filesize

    4KB

    MD5

    865ef5e1389e3b667f0a1ab86232fa6d

    SHA1

    93a6d807239c2b38b7f27edc8e8edec0b38624e7

    SHA256

    41904cf8180d1dfe5aeb2527828d331fa34a567828c5bb948c63c13373ba0854

    SHA512

    749dbe67589cf26963f19d654b725cf24c8e8d9cf3f32f893032790bcb5a22a75f560575d855a1af062762cb6cbf5fd3b27522f77b2ba9d6913bd450c450488c

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics-wal
    Filesize

    8KB

    MD5

    7cbf0eaa0c549436b965e4c2cc4b27ce

    SHA1

    3312e97e543ecf34367d7106db4bbdf28be8fb15

    SHA256

    e11e2613bc7a6c3e0838be14fb8ab21d9a942a128af13541645530e9763c38fb

    SHA512

    e12c5466232f5c1408412fdab804ec5b89328169c1ccfa9e66d57024944dbf903ed04f4ad6c3207f83b6b2337ba22b978020fc2724651d04f483058576c2f131

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics-wal
    Filesize

    36KB

    MD5

    57169f49a6cc7ca2614d579cd9e930f7

    SHA1

    2bfdb5f94fae8752db0750a69a19007fdd1556ec

    SHA256

    0d86252e545e2bee09fad800d49a4de988551375730f24db9f464eab8b354c1e

    SHA512

    6ed6084c9af6c026e8c0cdaf9903a08c93352d12f02a8846ba6c1a9910af132a011d5c30ed596ae2f002a01f3e82a5d20d5d3e812e7e9386075a5ea29a8ddd76

  • /data/data/tv.pps.mobile/databases/iqiyi_analytics-wal
    Filesize

    8KB

    MD5

    feeeac51b6b89d720cded970ea109dfb

    SHA1

    d66bab52d52b5351bdc5f7cc518972effb6eb886

    SHA256

    d547ba4f25d723d2a29836a5d1e50d79c1f983e9035ed7e40e4a377b75c25976

    SHA512

    1aa36fa8b809b14ad7535e5ee748d8a1716665517c6ce6962f71d1968b1fc2f639bd27c27f94d42614339b90381f4779573cd799b60bcfba1c4ab1df0036e789

  • /data/data/tv.pps.mobile/databases/pingback.db
    Filesize

    48KB

    MD5

    443ffb660e6c5fca8ac426ea874827b6

    SHA1

    4938fe5656cc5783ef81e1b3d5217388a28acd37

    SHA256

    9430425cc5ac25d2910fb48a6a8010cbb5927a40c049b84f12809d2df86bece6

    SHA512

    610ff9f0c40eea8da18bcfd4a0988b024414a1fd823f8c25a861d01bd54de9b2bcdfc9175cda93dbce72d3896b3ceb70786ad62ab6ba9d54a9d758a191019261

  • /data/data/tv.pps.mobile/databases/pingback.db-journal
    Filesize

    512B

    MD5

    4db82ae51670d2961bf6a63bf5f63d49

    SHA1

    7ec093fa468d54ea131194054c2e77207c30be04

    SHA256

    922b22d2b7f9115d77c18f5b6b0d458654f067d4b3454bc62b538e2faad2c523

    SHA512

    2c1eb2c7967d5d172bd952c5b2bf46ed75d4d3afb770ba6288a3451b04814ca995ad52a8e736aef78421959ce7d0f23efda08164a00043ca03642c109d5d628b

  • /data/data/tv.pps.mobile/databases/pingback.db-wal
    Filesize

    406KB

    MD5

    92609d5463f8cccfd855a1d6573c9b09

    SHA1

    ac59caa0e842c3a3d6c209ae208194ce95497356

    SHA256

    ddfec45f91dd875e28850235d359d9dcbeaad6e61d726ca204e3667b5e441fb3

    SHA512

    ae49f8629c3d578d540e817539e73f49a758d41b86e933a622734fec8d1d2a34b5a46754b322b1ffee391fb214355dad8e2f84075d787f685312f064122b7fb2

  • /data/data/tv.pps.mobile/databases/qyvideo.db-journal
    Filesize

    512B

    MD5

    da8fe1481d39d29e927466fb44140318

    SHA1

    ae733df99330597b98d1b86720fc6e0aa0b02550

    SHA256

    e0cfcb633d56b3065141d838e6e9540c9b5961de31fe0a1491b9a074ba8b9352

    SHA512

    20abe4290900e2a1475d5eb1c109672b1f8a3e4600da862228cb535a22691601cb17cdd6ff1e2e9f5699cbd41fcc83936b6dfafef8b541e6e0c3fd50b430369d

  • /data/data/tv.pps.mobile/databases/qyvideo.db-wal
    Filesize

    164KB

    MD5

    6d666620c5c53c692949e7e7e515f562

    SHA1

    7184e06c7ba4dc4a125331d7df37e79171894c14

    SHA256

    9e836d9c0013c70797ec6cb2a17f66aa9ca1c8f38acebc9003c2432ff01d62dd

    SHA512

    434f43119694adaa0a916b1f51df2487b0e08ea1eb30834361b24b59a16b8d18570d0b7b691323d4381d0ae92a585621c82cfe935b177522aa2fff92449799a7

  • /data/data/tv.pps.mobile/databases/recom.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/tv.pps.mobile/databases/recom.db-journal
    Filesize

    512B

    MD5

    e389263a49770b7778969dbbd3c545cc

    SHA1

    548da2e04eb8d5bbe11504979cd3d2146f653480

    SHA256

    74bb4f26643e4c00edf8f5e9936e9a570af19278145beda46735585da6b4dacb

    SHA512

    afa8b316971c6375dfd25de80c69267aff892eccd429c812f64f36a75697311ca0ea2b5e9d0f9ea2086d62f246a1d0ea1299a53ac3a9b1c945e4857417245168

  • /data/data/tv.pps.mobile/databases/recom.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/tv.pps.mobile/databases/recom.db-wal
    Filesize

    28KB

    MD5

    76f3c67416ef119e068f8f4b84651e66

    SHA1

    82b50be87f9c3f137bdf067ce8008e1baf14557a

    SHA256

    57a2b1ddf7920659bbe2241612a09514917b93fc5e64b27ef5b5974cb3d6062c

    SHA512

    3e56c3d6fc4dd06293723e5e26f302a089831559115c7df0f07ee8b0b80eb3edd27210b9ea3f995db0ec4fef24d9d20b5ce4cc026f40f35f891bec7c89813b3d

  • /data/data/tv.pps.mobile/files/.config/ids.cfg
    Filesize

    512B

    MD5

    786a50f337b9de3add590a25f0a5d8c7

    SHA1

    5998250d77afef6a722d1c095d5949021e89eba7

    SHA256

    59610ce86284ceb58cdf908e09581c9a6ef2e83cdb3bdf3a4e387210bce715bc

    SHA512

    7e461adaef262cb0f476b87d79db8ff954dae94fe3ae7b6dde6402edbbfef6714a26a55337596fb4283459ed10f92aecbb53dffde06ed2cc9d8e4e09be39c51c

  • /data/data/tv.pps.mobile/files/1/bullet_ch_default
    Filesize

    3KB

    MD5

    87a787cb0c885693ddb08f2807203882

    SHA1

    6fc21741c3e996e32206d0b67988ed0abff9fead

    SHA256

    6d48761500c45f90d998dcccb7a3e65d7f64bd68ba9d8b39bc0d9bb9f693303d

    SHA512

    fe783ca6cac2ba36bd53bf8cdf057feab70e819466b5cce05695c463e5b9adb70822437af16b2608be91783b592a3d9b0fbc9e598f41ced7756ad978a840a47c

  • /data/data/tv.pps.mobile/files/1/codec_info_sp_key
    Filesize

    2KB

    MD5

    87ee2faea0253f4e293c05884d5ea921

    SHA1

    2a799719772ee5cf81957c9893a0375c19a7fca9

    SHA256

    fb1d124ad22749643501c6d1b24b3767dea3bc398cb19ef6548c0ffa7f89d119

    SHA512

    b76f3177053b22c99547760a568735a7560fc190ba0ddeb79ba2d77588804322b9aff156b8770545be547b3daeed8a01b9256c2ee823b5f2c466f0d67e542303

  • /data/data/tv.pps.mobile/files/1/v_ctrl_codec
    Filesize

    824B

    MD5

    534a3c65328c5510dfe49501c497d3ce

    SHA1

    58f3bb0a019a647a3d707e38de8fd80f6a67990e

    SHA256

    e78703825182bcd92ba9bdc80492eee189c39232a4e83462c5ddc792767855d4

    SHA512

    0a7a00e10c611430b97090b5127036b0ae61bd7fd068ddaf508b84299646842a6d17a80b525c07514cbb634cfb9584972d1d5e46295fd26477dcda5556a0500c

  • /data/data/tv.pps.mobile/files/app/crash/info.xcrash
    Filesize

    244KB

    MD5

    15ebc67f0170ada6be1ab18a4168f8fe

    SHA1

    d3b841cf3012267b49436ce04719e934cefe121a

    SHA256

    753aabb24664135de8fb318d5dc911851eea7153cc7086e4a068ab8099896a17

    SHA512

    112fde2d3e747a70172b63fda43ed83c2046737a2f40dbcdfbf89ad9413290a56ad1e4ec643b846c239c60efac19186edf767de891ce9b56eef8ffa1cd747f55

  • /data/data/tv.pps.mobile/files/app/crash/info.xcrash
    Filesize

    104B

    MD5

    5719b4adf844769f4fc418271a267e6c

    SHA1

    c782ebbfff2b8760bb990318329c479d29b702a5

    SHA256

    5ec7900371ae2a0c9f79d5888c96a08040af69fb731ca869db89a25fa553dffc

    SHA512

    4b2f7ea1df6fbd48e45bc7e7c4b955e8c838655d0e65cec643cb982da91481ea16b0c2d7dca5dde352c79f235798cbbc74043ccc1947edbfd1adc9ec4aff9fdf

  • /data/data/tv.pps.mobile/files/app/crash/info.xcrash
    Filesize

    72B

    MD5

    ac3b5a19643ee5816a1df17f2fadaae3

    SHA1

    0d0e47938f6e00166e7352732ddfb7c610f44db2

    SHA256

    834a709ba2534ebe3ee1397fd4f7bd288b2acc1d20a08d6c862dcd99b6f04400

    SHA512

    5ec97cc048a3cb5da03093bc6d2b63cf5252abab6a72b24214ff885c062f58dc43c6cc05c0dc428a1a4e4b95ea84140a8883d81795416281b4ac4fd52290e0a1

  • /data/data/tv.pps.mobile/files/app/crash/placeholder_00001716392414605001.dirty.xcrash
    Filesize

    128KB

    MD5

    0dfbe8aa4c20b52e1b8bf3cb6cbdf193

    SHA1

    67dfd19f3eb3649d6f3f6631e44d0bd36b8d8d19

    SHA256

    fa43239bcee7b97ca62f007cc68487560a39e19f74f3dde7486db3f98df8e471

    SHA512

    4ed83e40c9cf32ac2c59125a01170bc97f20550952c8ca20ffe1b2a59d1b1ed9c8426c515f7629d1bb5e4cdc53dd70ffcf67203d59e70a559492e5ff0e712278

  • /data/data/tv.pps.mobile/files/app/crash/placeholder_00001716392414899005.dirty.xcrash
    Filesize

    128KB

    MD5

    2e25b2ad0e7a51de46ce342af31d09e4

    SHA1

    d3a1947c8edd58a057127559d6cc077fa335ebd0

    SHA256

    74beb9f41b4932c03bf20c8962546b38b6485ccd94bb6d09aa51ae8bb9204b6a

    SHA512

    e77cbe804bbd036fcd33ff0bfc25e84513492c7ceaf3208dd628e855879efa29c1b4beeedee8b911555138f62dff6f49585d587c58e24784cebc041a748352aa

  • /data/data/tv.pps.mobile/files/app/crash/placeholder_00001716392415019007.dirty.xcrash
    Filesize

    1.7MB

    MD5

    01fe166eefb901d3222ee92c534bc788

    SHA1

    308a643f05cd8af0d7151827577ab3ab00ec585c

    SHA256

    fc85b8f169ce820165cea0ee4a7893ac7fd095920983b540d7c00bd9013c14d6

    SHA512

    a304ec2fcf3241f0337af87f5fd6b01d74f1dec3af85def7dd9dd21cc4568e87fab85dd2fa8b0f72a481c027d582991cbd154d9e27447203d2186fb27d513452

  • /data/data/tv.pps.mobile/files/finger/dev_env_data
    Filesize

    2KB

    MD5

    fd5cf379fc0629eb92b768a86548387d

    SHA1

    c7ac8f2c654e7cd4d0ee7b9495f2cf6db6148d7d

    SHA256

    b0c14f278c376c89e50c200115e57e44f78006721981e7e9c84674bf2cac65d0

    SHA512

    19aeeec3235a563084876e6efcc90ea8040715bb7f46122fa13f60727b151669467f87353068fcf05b7f072022e322cc75d213cb437068aa103e7fd93248d377

  • /data/data/tv.pps.mobile/files/libcuid.so
    Filesize

    129B

    MD5

    920221fdde054ea2591e6bd555b9bc30

    SHA1

    ec0431778bcc4b137708075ad3acc6ef61f967fe

    SHA256

    5161c68493006adb822bdb14c790c3385785a5ab06aceb7f73137ede28945b63

    SHA512

    e1925367105c40cb50736136231fac11889552b05bd2accb56d79d503f371ef565c03042cc599d50bb29f5e29c6025ccb70693bdff7a5236167cab4a068d7811

  • /data/data/tv.pps.mobile/files/lldt/firll.dat
    Filesize

    76B

    MD5

    465f9bf761aa8647477a1935a41a5616

    SHA1

    4d7e139aaac9dc811d3504ebdae9a8f49a6d312f

    SHA256

    d512f76f4ad20da341d6ee25b9eee9cb648a677b798a3f646cd149304270288b

    SHA512

    f0144a0911d9a442c954fd3ab0476fee53b3e752ee97e556dd805292ed568dc6dff5a0af9a08555843ea5eabbda5e67ff8e272ec2a9af748892587b722d130ed

  • /data/data/tv.pps.mobile/files/lldt/firll.dat
    Filesize

    16B

    MD5

    d9af788dae133d305922e740d4b34341

    SHA1

    8c46e6748aad945724da4eec3719af94bdb55007

    SHA256

    0c17dcea7ff678c76b69dc00d2354e1ddd9272a7e9f3feb8a1ccee137c513597

    SHA512

    5f8b9939ad86834715044ac24c0ad722b775b35ef089a6220795152e2d6414efbeeaec63db62edc213675adb3aa0d1a90a3566b64f3a7269f532e4ef3a8cc36a

  • /data/data/tv.pps.mobile/files/lldt/firll.dat
    Filesize

    16B

    MD5

    d20b9b80a19d787ac7ad6f53f2ddde74

    SHA1

    27bc2ab3511ffd7854af359b427fbf85a1537287

    SHA256

    6f1fe8bf9b91b544e6b9cc243226849fd48b89501c3e1dd0ab54871fcc454a25

    SHA512

    bc82c20d0047164b11bd924e1bbc858172ad53c0bae3484df0b8934c133c0eb705c7a5b6dbbb41f1b223626c648a700979c71db524c7e6f1dbcb83968efeeaa7

  • /data/data/tv.pps.mobile/files/lldt/gal.db-journal
    Filesize

    512B

    MD5

    ceff9dd9995f2e7f9908c0b6301b0c1e

    SHA1

    408e148355d8d0191aba216195f08caab18661e3

    SHA256

    d90e5ab71934d8d6be7b7b4bb1b3654e48501207a5d44dc5bc35ed677fa49fab

    SHA512

    dffc75b449d4f4bc44c5b00eeae0357df0fdf74bf491eae6756a26f94d1668d0188bc874eac39aad1f9337edd26db8f5c19053918ed0245465766180685aa05e

  • /data/data/tv.pps.mobile/files/lldt/gal.db-wal
    Filesize

    36KB

    MD5

    26d4b86547fea010ba1113843c228d6e

    SHA1

    eaed67926775c612cf99ebf157b28a65d6a19008

    SHA256

    3a7fddcb741a71f4e205458dfc0310915d59b4f1209d9ef6646d7b25fd34e2e4

    SHA512

    29558d8cd7bec5eea9e84baa56f8c276b522ea28c2586fe22377aaef3c9022632dac3d06eb284b09fa241f97f2eff4eae383f1ed59a16ffd06c4e31b3e855b6a

  • /data/data/tv.pps.mobile/files/lldt/grtcfrsa.dat
    Filesize

    801B

    MD5

    7c366ea8f849e91e3f0f3093867b5c33

    SHA1

    88bb005e5643134f8719895233047017afe39800

    SHA256

    d759d062f4eff809dc55ecf5cf8693b0e062bc1bf3301f11d907f555852b20e9

    SHA512

    4575109c6e7330735b5421dc6f32abec26c5e9a92fc6ceb5b0b0f360ff97ab42f6001e52ebe63199d17ad27c053deb04b26e18af0025c0462886c9576c1d63a6

  • /data/data/tv.pps.mobile/files/lldt/grtcfrsa.dat
    Filesize

    206B

    MD5

    6d613136def26031e18f3f404299bb7e

    SHA1

    14a7a4a3309b932512dad59dbdb35503845e60c0

    SHA256

    58e28d4defb46364dd0057354a4a89f8cb726d3b696c632de04b1a707803be18

    SHA512

    89ac70f36ec3117b631a56d43700b4d034d6d269d4632933fdaa8cd9675c57af1df95f15271d0b45b796f56b4f89ec3d6bd4c9114d7cdd24e3a25d30e24e7ca0

  • /data/data/tv.pps.mobile/files/lldt/hst.db-journal
    Filesize

    512B

    MD5

    09ddc57b13a79b56e2494b4da931ed54

    SHA1

    4d6e82596ef17554059e780daedd38ad5ac87232

    SHA256

    2763de630dedfd8d6c7a02a0012126be482e88ad63c5ea3f32e873b1592e3d9a

    SHA512

    6641fab47eff4a4ae59249c34170cb5c0c337cfaf9403d54b6ba1241d491016c272dacca0505c673da1fa0aada61cb27efc909d4169342585c91d8859b097b24

  • /data/data/tv.pps.mobile/files/lldt/hst.db-wal
    Filesize

    36KB

    MD5

    ddda391dc5a217117b927e70bc9c0832

    SHA1

    5bf424a09fe094db19cff6c084048035e733fca5

    SHA256

    3a93e8a9ca97f67c285c731ab4561af73a8aa2f6cd5d16efb7637b8f5145cd87

    SHA512

    8f92e68bbc02a2e722988f91637cd82b08b43342fe2bcb6661f55654ddde2113c5d4ff17cf53bfc031448729bab44718d86641011482f31750e7cf7e7ae51bc1

  • /data/data/tv.pps.mobile/files/ofld/ofl_location.db-journal
    Filesize

    512B

    MD5

    f80004c766ff37502a5c6d20e0e4421e

    SHA1

    4d23ca1987268fa73da42e9980224da4f0d459b8

    SHA256

    0ab85eb25c4f8de85b5ae4d04d1b0b8f28549035f1981fa9cc8a43e27eb9f594

    SHA512

    ed1da19428e0ff93b91b927d6d3dada397fdb348206f642943395d03803216482a166ce6c7fa80f1b140333ae4784b2416155356be969d4a827d49c41046284e

  • /data/data/tv.pps.mobile/files/ofld/ofl_location.db-wal
    Filesize

    48KB

    MD5

    70592f54e4e606e6091d6873fa277b56

    SHA1

    d1a11c4b823123c7cac679ae3e358ebec90a9137

    SHA256

    3fbf8b2f7a596cfdf1489f04bc7d39c3dc516cd6da8d9b6ead47eb0459880e8f

    SHA512

    e158bdb9545cf8f2dee7f03d65edd3626c349e081b3d090cec612bd155e5b583a632990d81a9f6d578e51615819dbbba6524bce858888125352b67e3c53fd118

  • /data/data/tv.pps.mobile/files/ofld/ofl_statistics.db-journal
    Filesize

    512B

    MD5

    48f876cc1ae3def14b5623c82e990985

    SHA1

    2dce26ec9bacbdf3e28688e80f6c35123929b376

    SHA256

    a40194626327dcf72ec9820217024947256f2d7166666f7f4415839c0147adaa

    SHA512

    249d0b8a554f331f98da69f1b14db5aaa7dff6da44a5224bf2b560729de6cfd731096dfdc94592fae375c54461ea9eaebc8a23420245b45c21e605938b3e34ba

  • /data/data/tv.pps.mobile/files/ofld/ofl_statistics.db-wal
    Filesize

    156KB

    MD5

    4f6dcb5057cf93ee9e980d13722d2d79

    SHA1

    f1d72cb926c6af7bde97345df9fbc1871de720aa

    SHA256

    ec04c819d03d769fc10b9cbc87981402842fe4f7b5e9038bcedd0c455957517a

    SHA512

    5389589023e2bf86964e742018b609c61b705403ad421330acf208f6c07ddf543a4aac208b430ccfe5c7b39772dc812a5409d7fe7a3845638819d2c2644746e2

  • /data/data/tv.pps.mobile/lib-main/dso_deps
    Filesize

    268B

    MD5

    1c246256ede2bf19724294065610d8fe

    SHA1

    53477857fce7479bbe3e5c633feee26b288d12c6

    SHA256

    1c6bb8c810bab67e5b44001ef3fef304e5db6cb2b6dd4f2887231c544be95c44

    SHA512

    353d30212118361353c3ea3c064fc61b8bbbbe2cf4ba6f02e3064984054ce1fbed8611299b602714d1a2e033853489cae63365380388827ae06858ac2a7dad6d

  • /data/data/tv.pps.mobile/lib-main/dso_manifest
    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/tv.pps.mobile/lib-main/dso_state
    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/tv.pps.mobile/lib-main/dso_state
    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /data/user/0/tv.pps.mobile/app_pluginapp/com.qiyi.traffic.3.0.apk
    Filesize

    451KB

    MD5

    95a90898b6a8eac107bc6e6709647bb9

    SHA1

    eb7d1e906d8cb619fc463485617268fa58255d8a

    SHA256

    ff5614df781eb4128eefc9cfeb7b50eea25bdabc4940665f320efb3c49fcbfd8

    SHA512

    3234a786eeeecd83faf1720b60def18df933a05d098ae76c28e977df2803eddf305cbf0b5c626d4826c94e605c2cfa4e2204f77302d90f56b1d4b322b4393161

  • /data/user/0/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/voicesearch/1.1@1/voicesearch.apk
    Filesize

    1.1MB

    MD5

    02ba733c54cd6f4ef7229398bbce75e0

    SHA1

    3af1fba35f11d752671de83640b334fa7fefc149

    SHA256

    fb686a99a8c960ea9c11e9bda670794e71744404ca31d2e3acb6690281488cde

    SHA512

    162a6794bb6eaff705ac4386439df01321cabe981aa2083d8134997234749c0b4db7bb42415d66e7433b5f7ba07fedb4317082549dc020a56a68cb65cf899132

  • /data/user/0/tv.pps.mobile/app_qigsaw/9.7.0_81028/qigsaw_743131712/voicesearch/1.1@1/voicesearch.apk
    Filesize

    1.1MB

    MD5

    5ab5dfb8f77a97c4c40bd5296995ea10

    SHA1

    d72a879f21dece69bf79152fa051e3b2b72e2366

    SHA256

    b1d78ef1419f9e7f426b300dbb05e59234d5bd09a5578a5066b2e20ff1531366

    SHA512

    18145654747f0ee59f254e2306c5709d994788b5e442c52948ceb1309e4bc9936be9877996845e39e9d1e1d315c458cb7481e85e8a12b18badfb589e5d6d30a2

  • /storage/emulated/0/Android/data/tv.pps.mobile/files/.msg_id
    Filesize

    36B

    MD5

    7ca94e37ffbbfd2bf78488aeb8135f4b

    SHA1

    927a2047ae62fffdc29c6ea2c93551d966b290f0

    SHA256

    e34d570682d0a33e4b77c84bbe83d6c52e400990863e632e74f66f44bf1f2a90

    SHA512

    4790d110ccc2e83ada615dfbf226bce0d103048549ce191663dd7446c9aac1fb8de595ff2756efc09d8642290ae1fe4d904e4b58452e59273cadef7551fbb68c

  • /storage/emulated/0/Android/data/tv.pps.mobile/files/app/player/puma/puma_config/puma_new_config.json
    Filesize

    5KB

    MD5

    7dc905e8f656761b9d9a62e1e23f8220

    SHA1

    142d96ecfbf8cf9eb4e59022710288776d3cf7f6

    SHA256

    5de1eebfb2b44c9d3bc818469d786b121fa05b9861fc98bb967b8088d0749562

    SHA512

    34983d692e5f1ac5340c5354f3f15bf5caf9daca9d6e0c8c0a4143191d257746b4d42579df6dfbe59e1e1d74b650ba10881c67fbc641525e289f440591226be8

  • /storage/emulated/0/Download/.config/ids.cfg
    Filesize

    619B

    MD5

    eaf07a3fee790d45d2c3e8ac2d4b97ac

    SHA1

    4f1feb5303adfd5d5b0b780c5bafc2b6d3b9ceda

    SHA256

    a23b0f5ab3d337b7992e6c0fd24b789f95881debcf2f7c343c2f368383379c91

    SHA512

    9e1d387610504c5f893d19ad75dce7f4d90a8925117e5e452b58db98939e1e2a3a75bd96941d5120ea8514606241f5b0b28c7443fb63f68c051f641dc87a406e

  • /storage/emulated/0/Download/.ids/android.txt
    Filesize

    16B

    MD5

    a889663512309de581b0f548d1f81290

    SHA1

    986669cf848489fd05a581c53a64dfe3394929e7

    SHA256

    4707af9b53861e666cdd063062ea9110360fa37c840b6d5619dae61bdbbcb0bb

    SHA512

    b4584d6deae0efc025cf93e104a61b1b366194706f56d5c4af135f9d91828e765a84994d0f471028163d3fa0e9404129931c358df3551cbfa5315cc350c41270

  • /storage/emulated/0/Download/.ids/imei.txt
    Filesize

    15B

    MD5

    748d9beeaa1899252a7365b780b95fb0

    SHA1

    2158cbe9044f2b138df0094615afe6616e526c9d

    SHA256

    59290d2d5a77605f8140feb82e44e8438115fb2f93dc56ed4c225b88c21baaa8

    SHA512

    cdeb0c4cebf1cc96ebda6940763a940df76120ee991bc7f003480caf055a970f16e4a19ef2ba2c56fa056d539b981e16542ec7239a7b91dd3828585bc2d1e440

  • /storage/emulated/0/Download/.ids/local_md5_qyid.txt
    Filesize

    32B

    MD5

    1353d119063433010cab18afbbbc505e

    SHA1

    16af2990e52275d6fddfe118b405d03e385c9a46

    SHA256

    9f700521d9483450c2506e284c3b58008a3d4766902603fff2dd30629259c1e1

    SHA512

    132ad090dc0c4b94fb8002ea7850b9af3e92a27992b5fea518d03e8903972618dd4609007b43f0fab0206d4bc32ac377999e421b4eab0d97137fcb025055f723

  • /storage/emulated/0/Download/.ids/mac.txt
    Filesize

    17B

    MD5

    859b651278ac3735057f50ca099ccbf2

    SHA1

    c584f20318c7e8a9b731a0d2b2a3ecadcfc4397c

    SHA256

    7f8220ef1e9f392954326de33edf258a365e570a740429a825c3cd0fc6431b8a

    SHA512

    3792dcfbaa907122d4039ab37e4144f9f5f46b7b3e5155fb34d884112aac42d293c6c21a0004537c32af0c43f4cb5da8828686eba839fb1db5336933c67927b2

  • /storage/emulated/0/Download/.secIds/80bc4bce3a308d4fef9d7454dd33724e.cfg
    Filesize

    32B

    MD5

    e2a5e6bcad9d0e3b0658fbc3bcfec3e7

    SHA1

    14e0a8bff0a846e1b56a9b51cf6c64af278b714b

    SHA256

    d305dc8a4d16ffc37366b7c31ff0a7384d9bdcac9e879a3f3dc95c06f4770b9e

    SHA512

    b99c4df94f6f8da8952690e1272fbbc596f181be13cd96c820494e740fc670fd16bb589c49b97a52533155b4acc35f2ee13d3d13630a26db3e339210636d3974

  • /storage/emulated/0/Download/.secIds/8c2474ef11cfb106d70ea413d88def58.cfg
    Filesize

    64B

    MD5

    1ffa07b393ba3415ef30c324e4a8b091

    SHA1

    b0f11ead32e4e5a1d7a0b99c39c458009be57dbd

    SHA256

    61f558a17a928391e5f63dd533fddc57f879bba2665d746b84be6ab2ee9b83b9

    SHA512

    4924659447fe42a78b80a3d31da38a9a42725a8a59afe7246aa33f9bb4f72a395e96b0aa687e20fdcd375d7c9181cce8eb446a7ca5bb08f02dfbc1269c8803a2

  • /storage/emulated/0/Download/.secIds/ceb00a9bc5a039b4d03662f41d2d1648.cfg
    Filesize

    64B

    MD5

    6163c1451d237e33b993558c4f3e54f9

    SHA1

    b832141ea64f5db32971dc8dedd273d78ae3846b

    SHA256

    71efb18303cd7717901170ddcabb21119843d825cefb4d5d76fd4fbee847a995

    SHA512

    fcab01af2bbe4611887c502904f6aaa8765834c44b24986b320fd0204a5447f85537e68eef077b7bae9ab6f5e3fc13e3387c0b10ecf02dc5c2b8151878fc8e05

  • /storage/emulated/0/Download/.secIds/f42a308461b0c4c566b3d22eee64bbfc.cfg
    Filesize

    96B

    MD5

    f2f829debc92a09101aea3377352de46

    SHA1

    ccccb3668d5778df571d5ccf28f3f429dd37dd5f

    SHA256

    3d4177cb74dd105fa3c532500869a238dde20652fd069fbc1df3f747be01f1cb

    SHA512

    5da82b9aefba1f3dbf012dc6d0ea22adaa4cfd929e3f70cebe8ffd0adcae0cec623ae3a70b7f331f83b836e96a8e5087d30589b1e0d4d4bd4ca6dbfe82fdc775

  • /storage/emulated/0/baidu/tempdata/conlts.dat
    Filesize

    12B

    MD5

    8d80bc8ea90e9cac010d3ddf97bda5f5

    SHA1

    f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07

    SHA256

    f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93

    SHA512

    9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7

  • /storage/emulated/0/baidu/tempdata/conlts.dat
    Filesize

    150B

    MD5

    bfca3f4e041ab7f5d35aa5be8380d9fc

    SHA1

    c32af998bc7739098f3a600a23835b70e38d5920

    SHA256

    c0466cebf5786e82936ff70b514a4600311ef7aa2de485c2c7a228e5e61c86bf

    SHA512

    ddbddf8024b1185a4f1a09189061f433ef2afd8ec5da9a731a94e95e8b01303c8d752d2cd498f2a8e6dedcf4944a5425b45aa5c20f1301ec370e4b54520216c2

  • /storage/emulated/0/baidu/tempdata/lcvif.dat
    Filesize

    96B

    MD5

    c837d68fb6a4078475f808cbcf77f8f9

    SHA1

    d98a045a6064c65e0808ebea593467f2dddec1c2

    SHA256

    cccc9d183ccd3a28f7aeb978f3433862073736e7f9350c7b3c03a9f0825d8bb1

    SHA512

    13325e651e297ea750cd87a52bf7b3d521550d0c8ad9a98e2bc3b2ec28396b57700726b0d040f92536a33b3ba41852597f0889f00b74b7b96c55b604606a855d

  • /storage/emulated/0/baidu/tempdata/ls.db
    Filesize

    28KB

    MD5

    f2e99ead9327a45298aa579daccb9cd7

    SHA1

    b2cf20b6a9d554110b7d7223fc02c66998e3e11e

    SHA256

    fbe4c809c0cbec66f03cd4a8ff47c96e292e4fa62b04c1a4b23268fdc4a8651e

    SHA512

    903939287cb85aaadfe4a3b1cb54055cd4e9806173ea17f8d9a8b8a8963d5d6048b7b34340f4e40334b361e40fc48b8fd402dde644564a36121bab59bdf35afa

  • /storage/emulated/0/baidu/tempdata/ls.db-journal
    Filesize

    512B

    MD5

    93b2507747362d383b975afe3d390df6

    SHA1

    aaf04495f88451b23a9a7a1b044faeefc7296fb2

    SHA256

    99eafa75b855b8bc87b99e602cb649dd8c672b94191baf8074881b09e976aee2

    SHA512

    20577a8a8260c30a2bf1058c0a0462e7e6b7acbc843742755abcde87773d2f0ffdb4ee501f40104e1073cb2fcbecb04020dd2c4303adc367d9543e0901f3aa04

  • /storage/emulated/0/baidu/tempdata/ls.db-wal
    Filesize

    52KB

    MD5

    cceff7893f75b74f0032e480a13763f9

    SHA1

    70ed7b2bbc7b9a20359561f1192452243c5ed869

    SHA256

    a47a35b470feb2b6f6473f153b9f2912bccacf3060d130fbc04ce90a1badbb93

    SHA512

    bada6bb826db1c229a3550dc8bc5992a0cbda256276e9c9184dc08d9521f8b7e302dc6c624137a4e0a6624955cde4af2348ead02dbce7c3d2a919d98b7d16d9f

  • /storage/emulated/0/temp/qtp/QTP.ini
    Filesize

    73B

    MD5

    4a579ea4ec238b2ce1887053110dc9bd

    SHA1

    14197ba84f3eaaacd9fc85a0d20c4039f5649081

    SHA256

    5e249806f122efd7b502b354a7b165cd9507a08839230c2c67c8320c71818b4f

    SHA512

    da48c12bfe5f77c52450175cacf5e39f6ad1720d0324255bdbcef11fb5899a435db729370467063177643f7c9a6ea0d7e30000baaf67fdd87240d535c440888d

  • /storage/emulated/0/temp/qtp/QtpConfig.blf
    Filesize

    3KB

    MD5

    0108083fc487744845a558daf2001e57

    SHA1

    f3540057cbaf3654437c2c4d60fb684038a9486c

    SHA256

    0edd2aec1638917ee2d9868c8581546a87095b46e7c97f56b3611c52a6ee24c1

    SHA512

    54fde40a9dcaf1d83c1e9615c916f69c6d0f546f3a6311b2cf7078ae1d7772df2edeb723944d555dc73083a906d4d17831ca98f66f7f197b1f647f77431e8228