493440904df0809a87cb64465706f1c129c28941cd2fa6e5edbb0da86f62dd62

Analysis

max time kernel
149s
max time network
174s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6c70dc97b82f920e61d554b95ce43143_JaffaCakes118.apk
Size

13.0MB
MD5

6c70dc97b82f920e61d554b95ce43143
SHA1

c6de124b628d663565ea6523e24f65a46dc17c71
SHA256

493440904df0809a87cb64465706f1c129c28941cd2fa6e5edbb0da86f62dd62
SHA512

06db9e3f4bee090db21e15b60af1ec4a18dba83116622691a45cf7c11aad67922e7ee6122645445acb9519060eee7aa240d34e31a44a70f28382cf1d6ccd698d
SSDEEP

393216:f/1WdMwkQxh4sISXsTpY/4TF/gUEnwV2Bf8tc608Xbbc:RsIS8TpY/4TKUEno+oG

Score

8^/10

banker collection discovery evasion execution impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
evasion

System Checks
T1633.001

Processes:

com.zm360.qqtx

description ioc process

Accessed system property key: ro.product.model com.zm360.qqtx
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.zm360.qqtx

description ioc process

File opened for read /proc/cpuinfo com.zm360.qqtx
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.zm360.qqtx

description ioc process

File opened for read /proc/meminfo com.zm360.qqtx

description	ioc	process
Accessed system property	key: ro.product.model	com.zm360.qqtx

description	ioc	process
File opened for read	/proc/cpuinfo	com.zm360.qqtx

description	ioc	process
File opened for read	/proc/meminfo	com.zm360.qqtx

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&com.zm360.qqtx

ioc	pid	process
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip	4905	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip	4280	com.zm360.qqtx

Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
collection

Stored Application Data
T1409

Processes:

com.zm360.qqtx:PushClient

description ioc process

Framework service call android.accounts.IAccountManager.getAccountsAsUser com.zm360.qqtx:PushClient
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.zm360.qqtx

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.zm360.qqtx

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	com.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zm360.qqtx

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

com.zm360.qqtxcom.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zm360.qqtx
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zm360.qqtx:PushClient

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.zm360.qqtx

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.zm360.qqtx

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.zm360.qqtx

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.zm360.qqtxcom.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.zm360.qqtx
Framework service call	android.app.IActivityManager.registerReceiver	com.zm360.qqtx:PushClient

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.zm360.qqtx:PushClientcom.zm360.qqtx

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zm360.qqtx:PushClient
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zm360.qqtx

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.zm360.qqtx:PushClient

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.zm360.qqtx:PushClient

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.zm360.qqtx:PushClientcom.zm360.qqtx

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.zm360.qqtx:PushClient
Framework API call	javax.crypto.Cipher.doFinal	com.zm360.qqtx

com.zm360.qqtx
1⤵
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4280
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4905

com.zm360.qqtx:PushClient
1⤵
- Queries account information for other applications stored on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4319

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zm360.qqtx/app_tbs/core_private/debug.conf

Filesize
101B

MD5
8edfaea2d6c9cff3b30e5ed6f1e9a495

SHA1
27bafe489512afb1c009c7edc1677387290f131e

SHA256
98227e052ab35ad2e0f3beb92e05fe4e75061335fcfaa03952fff60df3e362f8

SHA512
f2916cd476891c4920acc699c8b87b62033330dfab97d47c0e2dcc8f473995a6525c6bdf171a506d92e6f15bc75858ff2b98adba152a54b476ad776398315ebb

Download Submit
/data/data/com.zm360.qqtx/files/1/2148/libmono.so

Filesize
3.6MB

MD5
650fb4e6e9913ed2a0a41e1461ef09d5

SHA1
58701886fb4e79505e0e29d7a0010129dae4e2dc

SHA256
d3b2d42256c81d2ab82f56957205a0b2fabe3a070df4c207d7c4c9fb63b5cbcc

SHA512
fbddb95bd8a6d23fd8353843a93c888738631e99b099d0cee1dbba3b564840f9d32bb5344aa4c6c0326a1ae4f19b078f4ea81ee9972873d5614d4eec3bc9c70a

Download Submit
/data/data/com.zm360.qqtx/files/360/sdk/persistence/lock/Y29tLnptMzYwLnFxdHg=.tick.lock

Filesize
13B

MD5
5e00ed3d59599e2b067627b82940f690

SHA1
bb149dd451919054fca552ae8374ab411a9057df

SHA256
ea2d1feb586a54c8d49e56f1d2048e06ad922a0b9e94b95ee3f512d650252380

SHA512
aa100fc5578f78bd42eddb1495846596ff8c1f0ccdc396bf6382e9a62946ff75019106e7e1a865afdc3d0b2c5cfd6bef09b68d5ac3343a95eaa0bfa415639d5b

Download Submit
/data/data/com.zm360.qqtx/files/360/sdk/persistence/lock/Y29tLnptMzYwLnFxdHg=.tick.lock

Filesize
13B

MD5
178a5554d210f93dea8aeca2e955642a

SHA1
29852aad185af272f35d0685b739fc7777ee8f22

SHA256
ee8839cd58f2879e2032edfa015e5d47868a32f2cc8e520e37b694258c0aca8c

SHA512
f7bd86fa5668f6cb49728f0467e507466f1fb50698db4da17a84bd53c7776b11460c1d94acb83793e8b94a301b8aab11b68eac277dd26ed6823e10e16d7d570b

Download Submit
/data/data/com.zm360.qqtx/files/frameso

Filesize
13KB

MD5
12f4941c7b5759fddac1942666c7ccda

SHA1
267ad96ee13763124c4f72e7244c7bf1b0605940

SHA256
65cc43ea0380482e5f97817743bb7a081df35182b010a58f730d1a4aa914cab2

SHA512
253aa0f538163ea7f9888a782221e2582a9bd41c4e654fbd238beb2e5441df709cd0a7f5e944d3e3eaf212994d1810d5d5774c5e90a3cde91f77b3a527d864a4

Download Submit
/data/data/com.zm360.qqtx/files/httpCache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip

Filesize
5.6MB

MD5
64745c8c063484f37729a866207da1bb

SHA1
ffd49b640d8203f483772b75b8aa9ea373f70c9f

SHA256
180df0a2b5628dff39227ea51ecb8e322373fb00619bead734411d51390619ff

SHA512
fd752dd36feafc2470d3b6d7ec9a146d8eb2ce2ef482261e94b071d74c3e12437eb070333d58368a318c7e57ff9831b674f7ea8e81b067699936945515a7dfe9

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_3_1000.zip

Filesize
1.7MB

MD5
1e9aa09b41624c4ab3dfa530fd1078e9

SHA1
32896aa59fd6f1509f4f46ec4eebb496658f91aa

SHA256
fdd2ac00ca6342d0ad1a684ab5ff6e683b2b56891ae08e6a16578892977e50b7

SHA512
9ec9ffacd3db5ab686eed1f68ea8f466030301cebb510ec3a9f3ffb6dc94277d4afba85a92bf7c3679c3fd6ecedad486fdc07adb152a77ec4ddce9dd943d40f5

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/oat/360sdk_1_2148.zip.cur.prof

Filesize
824B

MD5
24c835301600f3006bc49a8ce5d57412

SHA1
0689bb86904f624a6ac47d298be480fabdcc5ff9

SHA256
a65cfa1043ebaf82e7f0706f32fe2ae946daac79d807a75508d74c3bbce605b1

SHA512
ab018f8297027a08b0f3c1b92fa60a9c67a8e4e2a19c40021f6bc15318e926dcd0654573c042ac8d735fb3981f2b4bd0526e47a31c5ed7c3ef11048a4e1a4ae9

Download Submit
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip

Filesize
3.9MB

MD5
12c3e16ee0c294f667fb621b16a2a954

SHA1
d4d5d3d2793c09d651372bdf60d64c3eab221575

SHA256
b49185b4c34fe0b44d17dceaa6b58c885c79a36253f292fb3a1804e9cc169e42

SHA512
da709ed7cedd813cf74bdf9c54fba6a637f5c19fded2d3bacdc470ae38375e4edb767bcc8dbea8574b7b1fe713b501e434a4f664a4c23f4862f918f37b905423

Download Submit
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip

Filesize
3.9MB

MD5
70d9988307b9c3f46db0982cae34871e

SHA1
dad7f6a6092b6b37991af36b3af1ac426d7752ab

SHA256
e7335286df20d83cc9f861f14ecb68b88d44029262a59773b0081dce3c7ae6dc

SHA512
3f53c38c44035d4769c715777fa963ddb556e8cd020c91da78f9f6c605bf72e0f196fdfbd6230762fe1ac8bcf460e5acb8a43de748ec168b4961cccff0808ff3

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
96B

MD5
cb6cb34bb92f9b48a6b4fb08ddaaffe4

SHA1
2d8b4dd9fff9ff1000d0b702913aa9984ba2baa2

SHA256
c8818600ae97f448d7d4521b51fd7b1b30a6fbc9ebd54207cf550c25342d6ca0

SHA512
098697ee035426c09959d6cfb88c4ee49cb4b2a048d90e1810f008b375decde061701be322f1855e3c2efc664e4a23ea834bc569b5b27b61b8cb1c405d993ae3

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
144B

MD5
2aa1a104b40ab8e6bcca007460155088

SHA1
ba2eb23054f95b9841e32ef7a01f8f8a5e6b05cd

SHA256
49d45d0092cdb81620653f105186a16ee4ff9d5135324bd93ef1516e07d4e2c7

SHA512
2ee497efa53e7550c0e369922a51f77a32fba18bbd383257d2339a741e9d0f7f65909f24b3b68a5c89b56d3832e2d8ea355e9b6b4bc7f03f4e2ebbf9e7b5f040

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
176B

MD5
83ca68b8bfe287782315514da98a5caf

SHA1
73ec882363581c51c85a178bf275774ff29f67ad

SHA256
bcaf2fe93f5d9d4edd2f58562e6d3a5890b6bfcd3fec26f41f2fbd28944d13f9

SHA512
032887ca64b631644888496236e7e2eda70e2c8d98cd94a96436119910035e2a9038ac804b5337b85b8a67bbd3b2c4a2597424cfcb53693c5f453fe1239e32f4

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
c9f51e40194125d35802327c8ca6f6e8

SHA1
b181d026b24045c9e4b985fd02a0e471a8052a4c

SHA256
162157807fe693cf44d796663c5fac69dd1f491f9b3698a9a0d2964a29ceaa10

SHA512
0d62c2e1677e50d0caea644798689acfc531fbe58d6f5d7902677755022920c75121be456573cc43d6a68c78c3c02d29ed36df16b00a68473767dfedd39e9ffc

Download Submit
/storage/emulated/0/360/sdk/persistence/6766aa2750c19aad2fa1b32f36ed4aee

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/360/sdk/persistence/T6G

Filesize
1B

MD5
0cc175b9c0f1b6a831c399e269772661

SHA1
86f7e437faa5a7fce15d1ddcb9eaeaea377667b8

SHA256
ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

SHA512
1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75

Download Submit
/storage/emulated/0/360/sdk/persistence/backup/Y29tLnptMzYwLnFxdHg=

Filesize
844B

MD5
15c953caddd84722febfdc699d8de51d

SHA1
6da0286f819faafe83ffcd5dec12a5f3eb46fcd3

SHA256
3bb391eb94faf54267a2e581914871caefd96f2432e8351a5a415ddb8ce8022f

SHA512
4349b9837b1845b9b0495b11bf202397074bc6393dce1c12acb062e665de844850f15e540dd4123d9774801e4f2d60f150944bdf19e3b404d8c41878b044d076

Download Submit
/storage/emulated/0/360/sdk/persistence/data/6766aa2750c19aad2fa1b32f36ed4aee

Filesize
616B

MD5
d44fc65829069e1530dfda36fbe8b7f9

SHA1
f31e2bb8c07b3405f9f9b3bce3f7446e3aa7a903

SHA256
7cadf3c1d583a08b2b411c686477c4b7305c678803124971af36a7aa93b80f30

SHA512
ccbe83ce7097459e2bec92671db0aa29435c829eba1157f50628a4e2c7a3039b0ebbeb085889c2fa0834e353920fbb398ead23a2bc6dad94e7873e3fd82c709c

Download Submit
/storage/emulated/0/360/sdk/persistence/data/6766aa2750c19aad2fa1b32f36ed4aee

Filesize
988B

MD5
9df721d082db88018506033427982e17

SHA1
7469dd362818d3ea342a4a473c78d11cff1bf901

SHA256
741e710a58f3e1af7adb728d4576faa53bb14a38670324ef6677164d0f3f6b07

SHA512
b610463e70bd8339f7f349e6f6cfe9dece5878a0e0c7d75ba92d373bb934887b7f1acb4a5e0433a9af0a9ca84da094b6359462173a73a038f8cb3dd067c16499

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
772B

MD5
e33dcc0bb515650bf12e83a485af09d6

SHA1
ea8982b735ac7bc3f95f13dc7d51b9a6be98ef54

SHA256
630764b1e914ec80701e7567b957888d9a5eb745c8f4cd4be5e2dfd17767de0c

SHA512
7c5b26a28a5bc7bdf6d8062858ec506af921bebed013ab64b0b2de3ecbeddb3578ff9e81f9e5cf431cec62ffafe891cd5a5e436a4cbc8273736fda091c3650f4

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
816B

MD5
53109e3aac1034887f7fa643a6b0ada4

SHA1
8d4ba02193468398969f8627cafadfc7c59db0ef

SHA256
6ed38de7d71a70982a1b4021bfbce9f4a3ce3075a3a3a574f799d4c271ac8018

SHA512
9027a656f902e74d8bf61cf1bb559d03a2d4f6189c4310e84817dcb368d22da3e81f4bb8f275080787c1710dde186613476d9b5c00153b8b65f14471902524d9

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
788B

MD5
3e760e46e17ffaf8a5a7baaa7c368540

SHA1
5063389cd7eff9031a1161d428470fdc5cdd6a5f

SHA256
fefd7b5159733c68b5eb45e74cadb3098c0e4d3f4662be31992aaf7686af63a6

SHA512
b654ceb18ae9d40739affc29247b06963ca164bb19cb08f10445401e4625a0184e03c4c4f9adc4295c7201b2b472f0e51d3aa8ddd73bb5d5a2c12ff08dacf2ac

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
820B

MD5
9410dfed17f23f772c53c2ab18044af1

SHA1
9531a8b80b192ccaea6c0a1baae723976971f666

SHA256
d471443de4b433cd738c12fad7bac8928b692daa9438a1006e25098a85ea5a7b

SHA512
0d73f2b1282ad12df37d8a96f6127beed3a1bdedb9d41b4805463d86176d96d70d6a99ddb63d7f0760802bcbe02feff18f3f12b850ed8b521d061a9c0301c18a

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
1KB

MD5
8cba59159ec39bd08ef7078a36254254

SHA1
0100a1dab7955f4585686dff8db454429de1a766

SHA256
050488ebb67f37536d8afe1bbd4e2c437f490c08cacf82f2043399c9b47f163f

SHA512
21139b9d560401265cdab3c12358918eafc787ff8451a602ae9b533ec64ca2da5c70af11aa4c0fdaa224c5de0214f84c9e0ead91c33b94351c7168b3a5d333a2

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
1KB

MD5
80831b24e60f11147a86734f3079ffd6

SHA1
89cdb926f83e88634eee8b802e8b7af1561ebe71

SHA256
41528fcfec4a727f07678fca5f42738f007cf1c2fe612fc0d3651eddc834db6b

SHA512
4b5318980b9ed9774dcd956902299023c6c0c64365eeccfe9c5d1a84037b196a8a409f85be9d97d4c743b982f15289b93669f3543a3852d0ca4548b15e6abb15

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
1KB

MD5
d9f53cb325af2f54c66b95c1180af644

SHA1
3e68218dd75af5674418f1bba0cbc4df139c7905

SHA256
9d09ef66dc7fb02cc00d41206a44e566a1bf02736e94d6cfe5248849d5e53a93

SHA512
24bc264a2bd5576cf58ac0c048ec00abfa4848a31f59d1fd6660dc2722b0e4a2fbc996a73b085609b8da05d395379eab2236f3e41d81b7b2fa0373ccac9a7df0

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
1KB

MD5
91b7b77d9538caec80e44d738652f14f

SHA1
7d6e71df765506ef53360fe0233e5500b513f011

SHA256
1b7b255b701d0892a8ac389f4b162b9f9ee7805ec2fa58dbef7877800e030ffb

SHA512
5f9f76391c6be8cb3461a3d1abb076a3f3deb40bc0b78ab2d0a3338d1c56a3a25008de3926ae68e6c8a78d1b9a3fbb4068cf05eb481bda57a2bae7b59a85527c

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=

Filesize
4KB

MD5
06c08a2ffcf90525e37dc0bf5188d33d

SHA1
68dce919bce4e5e1234e337b5c1de4790982bdc0

SHA256
31adf258be844ffb59f0970e945be676ec47460a9564cbd076afddc6d77b20dd

SHA512
984b4c93f326cbcc783ef99c9776dc85f0677c14ff4db239e3b60e86ef8b509e639b9e70ace3dbfa3a88af1fb19bd2ab94aeb83115f09a0a6a3a595ad0cc1633

Download Submit
/storage/emulated/0/360/sdk/persistence/report/Y29tLnptMzYwLnFxdHg=

Filesize
790B

MD5
1934a2eea9642626d9d218c5338a69a5

SHA1
952c4041e4756ac3d9600e32436de8811232b91c

SHA256
9175d474851633e97ad2565aa66e8d7bbae8a9ebfcf4a0fc8a2a7e37b6a71616

SHA512
2b0707d48ee100262d5e10547754a6d072ffa78f8de845959e6adcb20f25876d1d00eab76bd9b2fada532302e0ceeb8c8808dd65993a372302538c25f46fa53f

Download Submit
/storage/emulated/0/Android/data/com.zm360.qqtx/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/Android/data/com.zm360.qqtx/files/tbslog/tbslog.txt

Filesize
26KB

MD5
a703e82ed59bf83d5fcdd1ed6dabd5d8

SHA1
ad63cb07e17f85b8d489a19e0be6c899aef0ed29

SHA256
6d4aacec5feb3cd196e9a727bd3696cb5f9535c445a0ef0b1b36df6e8bee1764

SHA512
a7ee28d5f6a2adb9d4a253c75010690865906bbd2003efc802f7a0fb6c0807f64629737015d9f53521dd23ef5f850f0c6b733f48636a0b6e257efd9ae24d83e9

Download Submit