493440904df0809a87cb64465706f1c129c28941cd2fa6e5edbb0da86f62dd62

Analysis

max time kernel
149s
max time network
174s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6c70dc97b82f920e61d554b95ce43143_JaffaCakes118.apk
Size

13.0MB
MD5

6c70dc97b82f920e61d554b95ce43143
SHA1

c6de124b628d663565ea6523e24f65a46dc17c71
SHA256

493440904df0809a87cb64465706f1c129c28941cd2fa6e5edbb0da86f62dd62
SHA512

06db9e3f4bee090db21e15b60af1ec4a18dba83116622691a45cf7c11aad67922e7ee6122645445acb9519060eee7aa240d34e31a44a70f28382cf1d6ccd698d
SSDEEP

393216:f/1WdMwkQxh4sISXsTpY/4TF/gUEnwV2Bf8tc608Xbbc:RsIS8TpY/4TKUEno+oG

Score

8^/10

banker collection discovery evasion execution impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
evasion

T1633.001

Processes:

com.zm360.qqtx

description ioc process

Accessed system property key: ro.product.model com.zm360.qqtx
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.zm360.qqtx

description ioc process

File opened for read /proc/cpuinfo com.zm360.qqtx
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.zm360.qqtx

description ioc process

File opened for read /proc/meminfo com.zm360.qqtx

description	ioc	process
Accessed system property	key: ro.product.model	com.zm360.qqtx

description	ioc	process
File opened for read	/proc/cpuinfo	com.zm360.qqtx

description	ioc	process
File opened for read	/proc/meminfo	com.zm360.qqtx

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&com.zm360.qqtx

ioc	pid	process
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip	4905	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip	4280	com.zm360.qqtx

Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
collection

T1409

Processes:

com.zm360.qqtx:PushClient

description ioc process

Framework service call android.accounts.IAccountManager.getAccountsAsUser com.zm360.qqtx:PushClient
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.zm360.qqtx

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.zm360.qqtx

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	com.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zm360.qqtx

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

T1421

Processes:

com.zm360.qqtxcom.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zm360.qqtx
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zm360.qqtx:PushClient

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.zm360.qqtx

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.zm360.qqtx

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.zm360.qqtx

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

T1624.001

Processes:

com.zm360.qqtxcom.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.zm360.qqtx
Framework service call	android.app.IActivityManager.registerReceiver	com.zm360.qqtx:PushClient

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.zm360.qqtx:PushClientcom.zm360.qqtx

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zm360.qqtx:PushClient
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zm360.qqtx

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.zm360.qqtx:PushClient

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.zm360.qqtx:PushClient

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.zm360.qqtx:PushClient

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

T1471

Processes:

com.zm360.qqtx:PushClientcom.zm360.qqtx

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.zm360.qqtx:PushClient
Framework API call	javax.crypto.Cipher.doFinal	com.zm360.qqtx

com.zm360.qqtx
1⤵
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4280

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip --output-vdex-fd=79 --oat-fd=85 --oat-location=/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/oat/x86/360sdk_1_2148.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4905

com.zm360.qqtx:PushClient
1⤵
- Queries account information for other applications stored on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4319

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zm360.qqtx/app_tbs/core_private/debug.conf
Filesize
101B

MD5
8edfaea2d6c9cff3b30e5ed6f1e9a495

SHA1
27bafe489512afb1c009c7edc1677387290f131e

SHA256
98227e052ab35ad2e0f3beb92e05fe4e75061335fcfaa03952fff60df3e362f8

SHA512
f2916cd476891c4920acc699c8b87b62033330dfab97d47c0e2dcc8f473995a6525c6bdf171a506d92e6f15bc75858ff2b98adba152a54b476ad776398315ebb

Download Submit
/data/data/com.zm360.qqtx/files/1/2148/libmono.so
Filesize
3.6MB

MD5
650fb4e6e9913ed2a0a41e1461ef09d5

SHA1
58701886fb4e79505e0e29d7a0010129dae4e2dc

SHA256
d3b2d42256c81d2ab82f56957205a0b2fabe3a070df4c207d7c4c9fb63b5cbcc

SHA512
fbddb95bd8a6d23fd8353843a93c888738631e99b099d0cee1dbba3b564840f9d32bb5344aa4c6c0326a1ae4f19b078f4ea81ee9972873d5614d4eec3bc9c70a

Download Submit
/data/data/com.zm360.qqtx/files/360/sdk/persistence/lock/Y29tLnptMzYwLnFxdHg=.tick.lock
Filesize
13B

MD5
5e00ed3d59599e2b067627b82940f690

SHA1
bb149dd451919054fca552ae8374ab411a9057df

SHA256
ea2d1feb586a54c8d49e56f1d2048e06ad922a0b9e94b95ee3f512d650252380

SHA512
aa100fc5578f78bd42eddb1495846596ff8c1f0ccdc396bf6382e9a62946ff75019106e7e1a865afdc3d0b2c5cfd6bef09b68d5ac3343a95eaa0bfa415639d5b

Download Submit
/data/data/com.zm360.qqtx/files/360/sdk/persistence/lock/Y29tLnptMzYwLnFxdHg=.tick.lock
Filesize
13B

MD5
178a5554d210f93dea8aeca2e955642a

SHA1
29852aad185af272f35d0685b739fc7777ee8f22

SHA256
ee8839cd58f2879e2032edfa015e5d47868a32f2cc8e520e37b694258c0aca8c

SHA512
f7bd86fa5668f6cb49728f0467e507466f1fb50698db4da17a84bd53c7776b11460c1d94acb83793e8b94a301b8aab11b68eac277dd26ed6823e10e16d7d570b

Download Submit
/data/data/com.zm360.qqtx/files/frameso
Filesize
13KB

MD5
12f4941c7b5759fddac1942666c7ccda

SHA1
267ad96ee13763124c4f72e7244c7bf1b0605940

SHA256
65cc43ea0380482e5f97817743bb7a081df35182b010a58f730d1a4aa914cab2

SHA512
253aa0f538163ea7f9888a782221e2582a9bd41c4e654fbd238beb2e5441df709cd0a7f5e944d3e3eaf212994d1810d5d5774c5e90a3cde91f77b3a527d864a4

Download Submit
/data/data/com.zm360.qqtx/files/httpCache/journal.tmp
Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip
Filesize
5.6MB

MD5
64745c8c063484f37729a866207da1bb

SHA1
ffd49b640d8203f483772b75b8aa9ea373f70c9f

SHA256
180df0a2b5628dff39227ea51ecb8e322373fb00619bead734411d51390619ff

SHA512
fd752dd36feafc2470d3b6d7ec9a146d8eb2ce2ef482261e94b071d74c3e12437eb070333d58368a318c7e57ff9831b674f7ea8e81b067699936945515a7dfe9

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_3_1000.zip
Filesize
1.7MB

MD5
1e9aa09b41624c4ab3dfa530fd1078e9

SHA1
32896aa59fd6f1509f4f46ec4eebb496658f91aa

SHA256
fdd2ac00ca6342d0ad1a684ab5ff6e683b2b56891ae08e6a16578892977e50b7

SHA512
9ec9ffacd3db5ab686eed1f68ea8f466030301cebb510ec3a9f3ffb6dc94277d4afba85a92bf7c3679c3fd6ecedad486fdc07adb152a77ec4ddce9dd943d40f5

Download Submit
/data/data/com.zm360.qqtx/files/qihoo_plugin_apk/oat/360sdk_1_2148.zip.cur.prof
Filesize
824B

MD5
24c835301600f3006bc49a8ce5d57412

SHA1
0689bb86904f624a6ac47d298be480fabdcc5ff9

SHA256
a65cfa1043ebaf82e7f0706f32fe2ae946daac79d807a75508d74c3bbce605b1

SHA512
ab018f8297027a08b0f3c1b92fa60a9c67a8e4e2a19c40021f6bc15318e926dcd0654573c042ac8d735fb3981f2b4bd0526e47a31c5ed7c3ef11048a4e1a4ae9

Download Submit
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip
Filesize
3.9MB

MD5
12c3e16ee0c294f667fb621b16a2a954

SHA1
d4d5d3d2793c09d651372bdf60d64c3eab221575

SHA256
b49185b4c34fe0b44d17dceaa6b58c885c79a36253f292fb3a1804e9cc169e42

SHA512
da709ed7cedd813cf74bdf9c54fba6a637f5c19fded2d3bacdc470ae38375e4edb767bcc8dbea8574b7b1fe713b501e434a4f664a4c23f4862f918f37b905423

Download Submit
/data/user/0/com.zm360.qqtx/files/qihoo_plugin_apk/360sdk_1_2148.zip
Filesize
3.9MB

MD5
70d9988307b9c3f46db0982cae34871e

SHA1
dad7f6a6092b6b37991af36b3af1ac426d7752ab

SHA256
e7335286df20d83cc9f861f14ecb68b88d44029262a59773b0081dce3c7ae6dc

SHA512
3f53c38c44035d4769c715777fa963ddb556e8cd020c91da78f9f6c605bf72e0f196fdfbd6230762fe1ac8bcf460e5acb8a43de748ec168b4961cccff0808ff3

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
96B

MD5
cb6cb34bb92f9b48a6b4fb08ddaaffe4

SHA1
2d8b4dd9fff9ff1000d0b702913aa9984ba2baa2

SHA256
c8818600ae97f448d7d4521b51fd7b1b30a6fbc9ebd54207cf550c25342d6ca0

SHA512
098697ee035426c09959d6cfb88c4ee49cb4b2a048d90e1810f008b375decde061701be322f1855e3c2efc664e4a23ea834bc569b5b27b61b8cb1c405d993ae3

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
144B

MD5
2aa1a104b40ab8e6bcca007460155088

SHA1
ba2eb23054f95b9841e32ef7a01f8f8a5e6b05cd

SHA256
49d45d0092cdb81620653f105186a16ee4ff9d5135324bd93ef1516e07d4e2c7

SHA512
2ee497efa53e7550c0e369922a51f77a32fba18bbd383257d2339a741e9d0f7f65909f24b3b68a5c89b56d3832e2d8ea355e9b6b4bc7f03f4e2ebbf9e7b5f040

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
176B

MD5
83ca68b8bfe287782315514da98a5caf

SHA1
73ec882363581c51c85a178bf275774ff29f67ad

SHA256
bcaf2fe93f5d9d4edd2f58562e6d3a5890b6bfcd3fec26f41f2fbd28944d13f9

SHA512
032887ca64b631644888496236e7e2eda70e2c8d98cd94a96436119910035e2a9038ac804b5337b85b8a67bbd3b2c4a2597424cfcb53693c5f453fe1239e32f4

Download Submit
/storage/emulated/0/360/.iddata
Filesize
32B

MD5
c9f51e40194125d35802327c8ca6f6e8

SHA1
b181d026b24045c9e4b985fd02a0e471a8052a4c

SHA256
162157807fe693cf44d796663c5fac69dd1f491f9b3698a9a0d2964a29ceaa10

SHA512
0d62c2e1677e50d0caea644798689acfc531fbe58d6f5d7902677755022920c75121be456573cc43d6a68c78c3c02d29ed36df16b00a68473767dfedd39e9ffc

Download Submit
/storage/emulated/0/360/sdk/persistence/6766aa2750c19aad2fa1b32f36ed4aee
Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/360/sdk/persistence/T6G
Filesize
1B

MD5
0cc175b9c0f1b6a831c399e269772661

SHA1
86f7e437faa5a7fce15d1ddcb9eaeaea377667b8

SHA256
ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb

SHA512
1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75

Download Submit
/storage/emulated/0/360/sdk/persistence/backup/Y29tLnptMzYwLnFxdHg=
Filesize
844B

MD5
15c953caddd84722febfdc699d8de51d

SHA1
6da0286f819faafe83ffcd5dec12a5f3eb46fcd3

SHA256
3bb391eb94faf54267a2e581914871caefd96f2432e8351a5a415ddb8ce8022f

SHA512
4349b9837b1845b9b0495b11bf202397074bc6393dce1c12acb062e665de844850f15e540dd4123d9774801e4f2d60f150944bdf19e3b404d8c41878b044d076

Download Submit
/storage/emulated/0/360/sdk/persistence/data/6766aa2750c19aad2fa1b32f36ed4aee
Filesize
616B

MD5
d44fc65829069e1530dfda36fbe8b7f9

SHA1
f31e2bb8c07b3405f9f9b3bce3f7446e3aa7a903

SHA256
7cadf3c1d583a08b2b411c686477c4b7305c678803124971af36a7aa93b80f30

SHA512
ccbe83ce7097459e2bec92671db0aa29435c829eba1157f50628a4e2c7a3039b0ebbeb085889c2fa0834e353920fbb398ead23a2bc6dad94e7873e3fd82c709c

Download Submit
/storage/emulated/0/360/sdk/persistence/data/6766aa2750c19aad2fa1b32f36ed4aee
Filesize
988B

MD5
9df721d082db88018506033427982e17

SHA1
7469dd362818d3ea342a4a473c78d11cff1bf901

SHA256
741e710a58f3e1af7adb728d4576faa53bb14a38670324ef6677164d0f3f6b07

SHA512
b610463e70bd8339f7f349e6f6cfe9dece5878a0e0c7d75ba92d373bb934887b7f1acb4a5e0433a9af0a9ca84da094b6359462173a73a038f8cb3dd067c16499

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
772B

MD5
e33dcc0bb515650bf12e83a485af09d6

SHA1
ea8982b735ac7bc3f95f13dc7d51b9a6be98ef54

SHA256
630764b1e914ec80701e7567b957888d9a5eb745c8f4cd4be5e2dfd17767de0c

SHA512
7c5b26a28a5bc7bdf6d8062858ec506af921bebed013ab64b0b2de3ecbeddb3578ff9e81f9e5cf431cec62ffafe891cd5a5e436a4cbc8273736fda091c3650f4

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
816B

MD5
53109e3aac1034887f7fa643a6b0ada4

SHA1
8d4ba02193468398969f8627cafadfc7c59db0ef

SHA256
6ed38de7d71a70982a1b4021bfbce9f4a3ce3075a3a3a574f799d4c271ac8018

SHA512
9027a656f902e74d8bf61cf1bb559d03a2d4f6189c4310e84817dcb368d22da3e81f4bb8f275080787c1710dde186613476d9b5c00153b8b65f14471902524d9

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
788B

MD5
3e760e46e17ffaf8a5a7baaa7c368540

SHA1
5063389cd7eff9031a1161d428470fdc5cdd6a5f

SHA256
fefd7b5159733c68b5eb45e74cadb3098c0e4d3f4662be31992aaf7686af63a6

SHA512
b654ceb18ae9d40739affc29247b06963ca164bb19cb08f10445401e4625a0184e03c4c4f9adc4295c7201b2b472f0e51d3aa8ddd73bb5d5a2c12ff08dacf2ac

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
820B

MD5
9410dfed17f23f772c53c2ab18044af1

SHA1
9531a8b80b192ccaea6c0a1baae723976971f666

SHA256
d471443de4b433cd738c12fad7bac8928b692daa9438a1006e25098a85ea5a7b

SHA512
0d73f2b1282ad12df37d8a96f6127beed3a1bdedb9d41b4805463d86176d96d70d6a99ddb63d7f0760802bcbe02feff18f3f12b850ed8b521d061a9c0301c18a

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
1KB

MD5
8cba59159ec39bd08ef7078a36254254

SHA1
0100a1dab7955f4585686dff8db454429de1a766

SHA256
050488ebb67f37536d8afe1bbd4e2c437f490c08cacf82f2043399c9b47f163f

SHA512
21139b9d560401265cdab3c12358918eafc787ff8451a602ae9b533ec64ca2da5c70af11aa4c0fdaa224c5de0214f84c9e0ead91c33b94351c7168b3a5d333a2

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
1KB

MD5
80831b24e60f11147a86734f3079ffd6

SHA1
89cdb926f83e88634eee8b802e8b7af1561ebe71

SHA256
41528fcfec4a727f07678fca5f42738f007cf1c2fe612fc0d3651eddc834db6b

SHA512
4b5318980b9ed9774dcd956902299023c6c0c64365eeccfe9c5d1a84037b196a8a409f85be9d97d4c743b982f15289b93669f3543a3852d0ca4548b15e6abb15

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
1KB

MD5
d9f53cb325af2f54c66b95c1180af644

SHA1
3e68218dd75af5674418f1bba0cbc4df139c7905

SHA256
9d09ef66dc7fb02cc00d41206a44e566a1bf02736e94d6cfe5248849d5e53a93

SHA512
24bc264a2bd5576cf58ac0c048ec00abfa4848a31f59d1fd6660dc2722b0e4a2fbc996a73b085609b8da05d395379eab2236f3e41d81b7b2fa0373ccac9a7df0

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
1KB

MD5
91b7b77d9538caec80e44d738652f14f

SHA1
7d6e71df765506ef53360fe0233e5500b513f011

SHA256
1b7b255b701d0892a8ac389f4b162b9f9ee7805ec2fa58dbef7877800e030ffb

SHA512
5f9f76391c6be8cb3461a3d1abb076a3f3deb40bc0b78ab2d0a3338d1c56a3a25008de3926ae68e6c8a78d1b9a3fbb4068cf05eb481bda57a2bae7b59a85527c

Download Submit
/storage/emulated/0/360/sdk/persistence/data/Y29tLnptMzYwLnFxdHg=
Filesize
4KB

MD5
06c08a2ffcf90525e37dc0bf5188d33d

SHA1
68dce919bce4e5e1234e337b5c1de4790982bdc0

SHA256
31adf258be844ffb59f0970e945be676ec47460a9564cbd076afddc6d77b20dd

SHA512
984b4c93f326cbcc783ef99c9776dc85f0677c14ff4db239e3b60e86ef8b509e639b9e70ace3dbfa3a88af1fb19bd2ab94aeb83115f09a0a6a3a595ad0cc1633

Download Submit
/storage/emulated/0/360/sdk/persistence/report/Y29tLnptMzYwLnFxdHg=
Filesize
790B

MD5
1934a2eea9642626d9d218c5338a69a5

SHA1
952c4041e4756ac3d9600e32436de8811232b91c

SHA256
9175d474851633e97ad2565aa66e8d7bbae8a9ebfcf4a0fc8a2a7e37b6a71616

SHA512
2b0707d48ee100262d5e10547754a6d072ffa78f8de845959e6adcb20f25876d1d00eab76bd9b2fada532302e0ceeb8c8808dd65993a372302538c25f46fa53f

Download Submit
/storage/emulated/0/Android/data/com.zm360.qqtx/cache/uil-images/journal.tmp
Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/Android/data/com.zm360.qqtx/files/tbslog/tbslog.txt
Filesize
26KB

MD5
a703e82ed59bf83d5fcdd1ed6dabd5d8

SHA1
ad63cb07e17f85b8d489a19e0be6c899aef0ed29

SHA256
6d4aacec5feb3cd196e9a727bd3696cb5f9535c445a0ef0b1b36df6e8bee1764

SHA512
a7ee28d5f6a2adb9d4a253c75010690865906bbd2003efc802f7a0fb6c0807f64629737015d9f53521dd23ef5f850f0c6b733f48636a0b6e257efd9ae24d83e9

Download Submit