Analysis

  • max time kernel
    179s
  • max time network
    193s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    24-05-2024 09:49

General

  • Target

    6e190697a8bfbd23a8bab1ddd44e6955_JaffaCakes118.apk

  • Size

    22.6MB

  • MD5

    6e190697a8bfbd23a8bab1ddd44e6955

  • SHA1

    c78cf857dea2e75dc67a762309283adebb944525

  • SHA256

    4ec6547626b74087d05fe305798994c3e5f65046df012d40efe670b373b7c592

  • SHA512

    2598086fc109760ef111adf89d653729f2c5beeead4d0a7ea5afaf6e9c5a688ecb39ee3e208a334e610f63fe42d6debcc8ffcb76fc13da9ffe52f04c8e5045ad

  • SSDEEP

    393216:zz1zzO1dhgH0Dmdo74Bx2nEdFM+ZWdr+1xsIxjQyVX1a+CrdkuS:PSmdo74gUpSi1xjQyd12g

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 4 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks known Qemu files. 1 TTPs 4 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 4 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 4 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 4 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 4 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 4 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • com.cnlive.movie
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:5225
  • com.cnlive.movie:ipc
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5310
  • com.cnlive.movie:channel
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5392
  • com.cnlive.movie:CNLiveProbe
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5704

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.cnlive.movie/app_SGLib/libsgmainso-5.1.103.so.tmp.5225

    Filesize

    603KB

    MD5

    c9aad771b1b5a690ce8c1e566f82e4e4

    SHA1

    863612b8e1883ce62fd22a9394a62941691d5b74

    SHA256

    0e538ac8db71e741f3a617ff3cff0e2b3818b5a7e450061f8a257a2cd0908623

    SHA512

    646ecc83dd4a219be10bde0fd3f113754dc836d6b7323614775c7a37a6ba389ae8fd07f3443c4469400b48d907e1967ca89e9864effb36d8c05713fc93e383fd

  • /data/data/com.cnlive.movie/app_SGLib/oat/libsgmain_1204281226000.zip.cur.prof

    Filesize

    295B

    MD5

    d506121baf5ae8798db85cc40c9848bb

    SHA1

    5dd1573b0acad0ac8bf4b4d2cd4a63e85bce0784

    SHA256

    bc02126ed24c645684aa7a60ab021a4b0275f593bb9b7281e9f265b8a47b1893

    SHA512

    b5a5d98abfcd9c2ae50035231959b88a4f37bae454d14324d46afed33a0bdeb7021adbc72d7f86584415ad87af8cd04ebc51397b6e8b4ad9d415fad9a67e100e

  • /data/data/com.cnlive.movie/cache/image_manager_disk_cache/088bea4919b640ce81ba75285dd48e0f599dfd59e5b8c55e90f3d479db55e549.0.tmp

    Filesize

    17KB

    MD5

    31dfc2e4863cf8b71b6fbc9a15dd334c

    SHA1

    5bf658b8a668a1b09cc38376a628409811655059

    SHA256

    0fe89771d373cb69aa6d94f904193c266a2f2e8c9fece9b522f6c8d3253a9a93

    SHA512

    9be1c61132ba53aae76cc5a1d1b799394968924b9118fc95e689540fd56edc494dca63b29ef552df6833466557c96953db7f9b7d976c0df5c430bd27d3e7ddc4

  • /data/data/com.cnlive.movie/cache/image_manager_disk_cache/journal

    Filesize

    179B

    MD5

    9da975325a8f5a04b68c035a0a07f1df

    SHA1

    3a16eb0b50c98eaf563c571853a470020197d6ae

    SHA256

    25591d51d34689629311740a14adc7b5a919f7d92cd94cab99d5309be86c913a

    SHA512

    2636662f4fdc5579250ecc925f87593b58ecd9123562fa04b9052dfdf9f28c69ce1de2e15b5af6654efa7479f0c2c5d607000314836262161f41c8958ed6342e

  • /data/data/com.cnlive.movie/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.cnlive.movie/databases/Analytics.db

    Filesize

    20KB

    MD5

    3074a7ce98b1cdd1cef004afed979310

    SHA1

    15662c40f0ff0114e95a3ae8bfb3193961b12a43

    SHA256

    4f6ed5abb96987ab6fcc76a7e36bb90ae08272e3813686bb3e27c5d0a63545ba

    SHA512

    3f380493647229177172e85b62035cd34f14a93e000ec08ae1d41d26198ef7bd91039f1a99fda55e07be37d3d45b4c463745fed322dfa82cff584f22adacda7b

  • /data/data/com.cnlive.movie/databases/Analytics.db-journal

    Filesize

    512B

    MD5

    0f9d6b28067725d24bce30538a48a5e8

    SHA1

    5dfaa71466994fa558fded5be81b2056be5b2978

    SHA256

    a42914a935cf5d69b67ca40f6e37a7df74dc2b24662965a3532eda4a090cc8ca

    SHA512

    5d0c540dc8f9b5ac822dbf59cd1959d5c12657b19c4f107db183cd76a3d935e78f65bfe14beb1b3a5465f0956bea4057cb278cf430ebb25a1bb963649983f946

  • /data/data/com.cnlive.movie/databases/Analytics.db-journal

    Filesize

    8KB

    MD5

    53611cd8ff00c3b2f0445b13c7bfbc32

    SHA1

    f4fc4500897caf97afd1b5839852c3e040c84a7f

    SHA256

    3cad4fe8ce8458484766e53ed131f3c44e9b0510220534eda85857a25222bcb8

    SHA512

    076d5d7459309b8483615936a096ed2102e48a68c7435fda7b03a081887f9065ea31622e65fd5464d45704b2f3749ada4812fd5f61e8f8b2d6b49a8681189664

  • /data/data/com.cnlive.movie/databases/Analytics.db-journal

    Filesize

    8KB

    MD5

    d81d65690b0840782d026b5ca97ad7a0

    SHA1

    9e063a5c64ee6a7ebe571c11503898ffccfd9180

    SHA256

    a5fa5ea300ebd720dbeb1ba9ab4cb2417660bea9e2784d76627eb1d984aa59e9

    SHA512

    97b2dc1eb8051d501caf8482a9d7899d5d059bf8898943600498889c514792d0273be880cd6c93c82c22895613d5aa08a51289bf0128eb49f1166ad07113b34c

  • /data/data/com.cnlive.movie/databases/Analytics.db-journal

    Filesize

    12KB

    MD5

    bdddcdbd80ebc8c9d5d0a52617c8968a

    SHA1

    c833254d9dd5d003fa91a9837aaa4ff6acd7551b

    SHA256

    b9b9b22c9211e49dd7fabbd186b781e13f8b19e15b0e82bbad99c54c9fa1de1f

    SHA512

    66f001b0d2c9de22689fd9000ba31739f2a01711ca93948ffcc8e96d5b37c35d24ff35f03511dddedc069324d7eafd2da46c672339cdcbec457f36adc896560d

  • /data/data/com.cnlive.movie/databases/Analytics.db-journal

    Filesize

    12KB

    MD5

    e8ec186a168823ac4409dad3030039ba

    SHA1

    ae1785de66126ec4da2733e28c4f96129bdde555

    SHA256

    6698fb02a688c1f3a73193ff98dc99539826059b319b1f6c5215470356f14e49

    SHA512

    cd7b4f6154deef0b9f33ac278accffb9e956e8b6338aa942e5c8ad870fd5ab65406313ec1504ca4fb348d766d732b5ad6fa03ba4c89d8664e9f3aa30a76bfc35

  • /data/data/com.cnlive.movie/databases/MessageStore.db

    Filesize

    36KB

    MD5

    33858cfae2bf3e4a3f27f62c5e6659d0

    SHA1

    a8ec5e86939b7058d535023ee04f07883894aac3

    SHA256

    a9ee15a6d8beb4e11baf5c57eacd663c2fd8e4e7d4704e3ce84599f55bfff1f2

    SHA512

    8b1df5bdd6011587a913448b9df2a6300b94d0cff2ad8d6400a0070466eab76e731bae23af927c9757b0766b625ceee6f6fe9bc31a044a18ab8f6db020f3a4b0

  • /data/data/com.cnlive.movie/databases/accs.db

    Filesize

    20KB

    MD5

    d95e1280cc553509d7b5b7851398db12

    SHA1

    121eb76ea37f3407d0f3b56392f6f67893fbe649

    SHA256

    58e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c

    SHA512

    f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284

  • /data/data/com.cnlive.movie/databases/accs.db-journal

    Filesize

    512B

    MD5

    afe6396a7a18d0a2552bc1081757da67

    SHA1

    a9976001c0b54836c302707761f32163617987bd

    SHA256

    afd99a3f92cc58bc3ec765170ff7518806edef34ebef9260a8d2d268c39ff1d5

    SHA512

    202df0e234c2e9c73f094bb13572ec18619bf1dd71332c3760204829df2ad0fe8a3a936bf3afd7b49be3df7617337cb2ab8142b2459ebbdd5de7c9083acd3648

  • /data/data/com.cnlive.movie/databases/accs.db-journal

    Filesize

    8KB

    MD5

    3e23baee4f5d38a8708af8c6119a30c0

    SHA1

    854efeb4c6e82f0c14e19a92378526871535f944

    SHA256

    3f9eee14d1df03d5c25e0ec6383fbc193a064e4898d55ba0b8802dc1ef8e8fc4

    SHA512

    4d3f7ea1662a3daa913a4066095c06fd39054947aa7e918f8d4d763785205100846d017ec56bc9284479b472f80f9d87ac3ead9e8c0db1d608aac6f5c49e6e80

  • /data/data/com.cnlive.movie/databases/accs.db-journal

    Filesize

    8KB

    MD5

    87c5d49f363f6550c0a08e746fc4c07f

    SHA1

    15fff6a6801b6f0142e12f5c06adddb9fda9257b

    SHA256

    6f62c0d57dabeb3d1d2a3bd5604bff00d2fa278835d8726a507b257edd969458

    SHA512

    b25d85784ed57bd3bb018d129b42d0c3aac9a7738a0caba0f4fbaf1c9c73cba5c0420dcb7c96ed875072399fbfea19a1ea811a93ed40c434ee66ae2224bd53c8

  • /data/data/com.cnlive.movie/databases/message_accs_db

    Filesize

    36KB

    MD5

    50f3d63f4b9241e212be8ec20bf3e374

    SHA1

    10353f506f0aa9dfab398275482eb42da167232a

    SHA256

    be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653

    SHA512

    dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c

  • /data/data/com.cnlive.movie/databases/message_accs_db-journal

    Filesize

    512B

    MD5

    e767eb4c46f9e785f0a410e4299e38bb

    SHA1

    4be20e78a060dc94c414557be932204efc6af428

    SHA256

    513cc9743b623068d6b84950daaf976fb32bcc0260f862fc10cba342bb45ed96

    SHA512

    49e5f04ff03be9607d4d98219d7991914b77f1d0a29e34f4ba660f9190b5bf1478045e57bff6bbc35f2fea1316b9e4138650cfc375f6f5e95820f674b1660fd8

  • /data/data/com.cnlive.movie/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    6bb6736d690f33377f725eda7662e61d

    SHA1

    2072d6a7cf89bf1ae1fd3ee27e245cc164457dfe

    SHA256

    c51deae94f191166ef87c5ef7795aa46130b7700246cae0e06e375fce1a75cf2

    SHA512

    9a138e0428174ac27d86a081d7b517f82dbc19998437d214df6c482a279c6e86b38b507039df27b98b8534f3eaf616794ba2f92b56c2f87e30eea43396a66f5e

  • /data/data/com.cnlive.movie/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    442d9b2e57690b7fc1a967fc2c08a0f2

    SHA1

    3d4b7b1613cc16bd268d6d899d3879e8fe98bfe7

    SHA256

    2c882a93ee11df7e2187b915d3ab5488c157138206b72a92ac5bf656854d710e

    SHA512

    3c00b0f3f59c7ad7a60ff8e462bb0c36bfe044ee0998feb71206105a03d6f4bbf78c5a3f8ff310808f070d07605d786fad3df8c17673ab85485c7e8b1e0e2a62

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie

    Filesize

    40KB

    MD5

    787eebc8551665ca88c0de0853dcffc0

    SHA1

    6683856ab5f01816a0412f0dbefbce8c56f4938f

    SHA256

    076659a11ae75b83f2aa4f38a1461d5e328c6c30ac04fe33a0ba03df5b0420dc

    SHA512

    fdf14168d1ed52f9de78618691b0c9d31a7f6bce938d6cc987b8cb4f82309a04037c70b71f23832e935757033749eddce4e41bfb92479b0f09c2d9759a833205

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    8KB

    MD5

    153629686c0ca3f04417a5959c936782

    SHA1

    70c22a30edd337fa2f54188a172ac1460f10a6da

    SHA256

    b8857a4b78e1c64a6d6e8340d3d25f0e679020815ce4001e6eadb03335e27fb2

    SHA512

    7bf28e28d21e2228b0ac13013bb490616f0466afc216f31545dcfa2d4522792b52d358c1b70b48c5656a696b4554d746091bc6c4f3fcd5579f39140523c94588

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    d1bb673ff6d510197ad93ab61e00ead4

    SHA1

    a6f75e5b98303f7acbffd2283e6dbbba8f8a1980

    SHA256

    a762c2839716b6b8f51748a6834b7ba789b7c0cfda32af13f3502267364752a7

    SHA512

    89ee7bb8e554c2036fcba6daa874824ca2cac4b5354b1b0ff53fce3bb648922f0a2b8a93d377331fb45b1e2e7a7b819506acddd469f739acc95e119a35741f61

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    8KB

    MD5

    5b0f7da48dd458002d6bad233b8bc0bb

    SHA1

    962e4a2199f62cc1221050883e347547b3fb7e92

    SHA256

    30e7081665729937264d334aaa6004fecd83a1fd5547779b390e66aeb2ce34bf

    SHA512

    14688d609ef2d7bfb2ae79cb2a5e75553e41392b5b84131607d7a81ab92801a4d1cc2bb1bea6583d735fec8c5b5716c8469661166f88f41bfb36efa22c011635

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    f99dbd9a8e14d8763c0bf043941ea144

    SHA1

    6e08d23fb920e4c0bb419514f88effbafba7ed56

    SHA256

    9a3f155e4e62da9d6815cddad04ab18475469b858d00b606decf32b06ff1b58e

    SHA512

    1f295ab8f0409c36b83fe61625d45d3cd0c570fb194f5868fd0ce814604cd46fc103df1c18fcc5f683f986192e9dc9812494ed0b5893656cc32171427d5e2bc9

  • /data/data/com.cnlive.movie/databases/pri_tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    ff1dde2f79c87fcf4f829385a56af656

    SHA1

    564ba74feb087b852bafcd078a6143196e215649

    SHA256

    87e8b22475b4c5019b1e66b3f558d4c6c182abdedbc6663d1e4276f111980132

    SHA512

    6388fd200f40e754c1e502450dcab8f303fdf4d4a18f2f3fabd3e43368090dcc5ece01b5e95b98c5a7ad44ebb119d5ba18117bae101b84b99ac68e88872c4acd

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie

    Filesize

    40KB

    MD5

    f26427e12937946199296a3cc63572ba

    SHA1

    bfb49bc1dce68ef0bb8934f42dd8f6a9b9aa8de9

    SHA256

    f6c58eb62b67fe0f9dd93ccea17d2b182d8361f62994d131cd6a86073d33c05d

    SHA512

    95d8c012192557782ebf1f155b338ab9446a297e9bd91903a01897734bade21338209f145f4be98351963859055f3bfc5951c4cb880042334d7b96290216f3f8

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    8KB

    MD5

    785e9cf5d487fe431e5ab8b96e84e7d6

    SHA1

    37a949192659afd4141427a16853d29ba5ba3207

    SHA256

    90597f076e583d02bfb580b3dad96e0b0c09760ba93526cb89a9be8002ec40a7

    SHA512

    a5a146d8c7646c12beb7ec74303c0f0f3da59f6b077927dae98d9999bc5b358d6607414d07f2ec229f4202e548e721e82e79f1f329ee8500369673e74d2d3b3e

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    84ca0690f2b15f4080e6aaeffbbabc69

    SHA1

    14f8f940402fae8089b0afda64fb1cb2ebfa2455

    SHA256

    961ee9614c545423f654ed81f087ee53042e862f5eb863264c9db4077924241c

    SHA512

    f1e1e2cc8f4791d14ee683904c0400d4708acdcee9ad01bd7d1ae99039a00018e82a8e933ba58f2822971e59594b15085292d9118296cfa1ed42b26caa31cd28

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    12371bf7f629c814018838eb2c15edfe

    SHA1

    637c6fb57cb4e734f97311174d43a74eacebcbf8

    SHA256

    e438e91421dc7231f95968040c2833689673965645d987fa63c73f2a9d603ce3

    SHA512

    c4c0542332aae7b56c8ffdf8af1fa94420422862021f5be5d4d79f26d817a04c9b42532915e28ee46fe5c2dfcce24ccbc6b2d984f3bf545a517fdb295ab19424

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    8KB

    MD5

    9fa4a6936ba70661b1f10d8bb353c515

    SHA1

    e78efbd527cc82dee8fae4fd8794d8809b4e8a1a

    SHA256

    c6bc8a1f65dd292606900254ce3262eff9c7147e6f950cc667b0a8ed592d8ab6

    SHA512

    037b8a0628802da3ce5fc85f977cfab1a1c38397cdf2733528dfa9a959e1535425cf999dd9a87f67dbfcaeab1b78c5059c6d3f1d8c877395ae5dde9ab7614448

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie-journal

    Filesize

    12KB

    MD5

    9320c71fa61e5ecc958159af02dc17cb

    SHA1

    ca80add21cde5efe30144f03b17c314a8dd123bc

    SHA256

    7d99b32468fa673589811317be7987530fd82d73dd4102207fb9d827d2e04826

    SHA512

    33eb2e7740e3482453ce472fd529fd01c6715e15ef770aa240042ce0dcf7121e5f7d5c46a8e02c12d3600cb4247462e4354e7b9e07350abc843a4485bead5a19

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie:ipc-journal

    Filesize

    40KB

    MD5

    5db14d38990f05dd154afcb4ea653808

    SHA1

    d5bff29b3366eca04ca45c1af527d1a0956fe250

    SHA256

    154b400c415ab5c94c8d161f67bc41b0706a26246976c99ae4419e0a7a2fef4b

    SHA512

    0d4ef930ed1e8daf986650cc990690d5b9dbadb7a5a35a9067e84478a3a03d660b3833fce2aa51ade21c048b360bafb23e4a1b43021eae96bb6b98c29a477669

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie:ipc-journal

    Filesize

    8KB

    MD5

    68270b9e10a4fb9dc4d35cd3ba84888d

    SHA1

    3ac44d54639e90ea6c39c9f7cdebc08401ef7990

    SHA256

    b6c4a1c54044d8f39f7e5ca07f6bd190804f16c58b3583735181a3bb580f4396

    SHA512

    436eec39a8de871368933a5a88aab3225fe4c332409a3d838fd6fa391292171062af9c59482ed98937622c639d762aed16b95ef31ae8879a434a5d3f948e3027

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie:ipc-journal

    Filesize

    8KB

    MD5

    145c68d7665d661e517ae04e5f01b861

    SHA1

    8f7ade60ca209a3b75d227e5a96e9007cdba43ce

    SHA256

    ddfc4c4849f6bc8ba95ff0d9fcf5300f7016128166586e21065c8d6ccf577efb

    SHA512

    a35e3a3a4b405c5d88758545c1e65eadd18664920fd4f77ff7587b7af0ebd01b49bdefce19bf882ab2de95b033e59947c17c6a457b3ad30d3a675767b48a6fb7

  • /data/data/com.cnlive.movie/databases/tencent_analysis.db_com.cnlive.movie:ipc-journal

    Filesize

    12KB

    MD5

    cad06cf7a541a088b41f4e7f7fde868d

    SHA1

    043b686f58b15e7a98e0e3b08d862d713cb9b9c9

    SHA256

    dbfd05cbb855c35f88e8eb3047ef7a2c765ec7f66323037cf069b447fb781228

    SHA512

    b29b72f1aca1071a08f379f0441cb4fcb5ad3ec638d3dfbc93eedab031ff373eb17d4e2ee2fae747728addf82b32e817c0efe244449d56ce594d67c3fd8eb4ce

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    20KB

    MD5

    b426b57e04eac286b5a434f6551f1ac0

    SHA1

    63d3cb1e45ebd29a6d64d7609a64571144796765

    SHA256

    a52b0a9de3fe27ca79192d6b14d1def04f8253ce9e201276f0c981c70edb3ccc

    SHA512

    3b2780b1fab582fdeaef51218cdfd349c1a7ac29151621a236dec42964e5cb9c23e6366e072e1fbed06c39b5d64a4cf596351e0251ff5ae3ec210a3c3619010f

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    20KB

    MD5

    c8b05a8c0c4e6e1f08939dc6175663eb

    SHA1

    c11cd54690b1a791e6f9875cd7a6eb1400477a8f

    SHA256

    27e0ae0e9fb24ac5c8a96467eaa79ff942eea58fe53b27fbcba7df88007018c2

    SHA512

    38671eb70dcd442df70185c88655b181c2a4f02854a553c910e1e64c46761a7eb4393f045f58837336bfb16c0eefc41417442374335e2b40e3b1fe956431f98d

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    20KB

    MD5

    bc4c641571e0cef8e58214608e84c83a

    SHA1

    0a649d9fd01abb43d9459dbb01010fdf78ee32dc

    SHA256

    cb2357c521fc3251b5869a85c562929556b2c1cfc896654fe6ec4c8362393dda

    SHA512

    7443aa6c604edcb5a6d4574cf36d47abf75efa8c7ad8300d40d10e42482bf18415a08944dee66f5885218b89c18b7a24ca78a8247f8bc21dd163e1c013c9313b

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    20KB

    MD5

    43c87ca89125cc3af23453435eb9a652

    SHA1

    69694b3abc19fc1f2de62827014e527727033a2f

    SHA256

    f6f648c485f6d86b38f5401a9bf524c4724525c53c9f5617d12efe6be73bd4f9

    SHA512

    110010a32a9c7b354f9d90ec412b7501768462685fa5eed3b503efdc8a2016b434fff3d68f388d6e2b3e64651339e13db22d0c5d88bc6f2e97b4e5ea69d726c4

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    28KB

    MD5

    28d27ef39a31f9bf7dd4680b455d3163

    SHA1

    d59803391b424aa5326fc6fabd5ee4034ec4a262

    SHA256

    3b8e2b32a4c944513be56eb327b3d0d5721594b2a618092e4e76df24a21e67cf

    SHA512

    5654fdd33c4f62f190735b7796d0f09ff1336a799929106a74837b4b6bc41d68ca3193cadaff15b1d176a802bcc5401212783c9dd81159fabe4a053610a65809

  • /data/data/com.cnlive.movie/databases/ut.db

    Filesize

    28KB

    MD5

    d3b1e848f1833e99362f5443fb630199

    SHA1

    ab3dd511deeb50c9617e7f039f06d90e8dd60540

    SHA256

    5301c3135027f9ca67127c63d779cd85f9261a306b462d52997701b76ac4765a

    SHA512

    2518a349a5d8950509c532272d4ea1789339e93ede7c770e5b037012a740231bf92251e6b3335926a67fbabe8b22ea9a8ede6e677010ef680066a2d8941ed878

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    775B

    MD5

    53406f5e9e6396538d6f0e3708a8bb82

    SHA1

    3ca19c2f474ae15948347f7dffd594beabf5c662

    SHA256

    6e5ef590f728508572d8f18209153e71cad44f2ca2865b60267fa8dbbe808683

    SHA512

    d94af9155861ba52ee57caeb30d69cae7bf24d572eae06b71fd469b6bad46f0ebf65cc624390ed8e33771e2a9be159d9fd588c8bd95b3c41380f82349e7ac6b5

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    12KB

    MD5

    47185d89f6f4dcc64df09f82eac906b5

    SHA1

    3af61b78ed8a4d5ac19104464622d30fd486b6ca

    SHA256

    cada7bf68063f18cd9166d67fdafc0ab07b58c16b448fed85f85c165a58ef3cb

    SHA512

    d8386154db6b64ab6dd2116dbc710c17be2f95049501f2a721bf7fde8354d52d40bc257278a51b7384a80d349e6046ebb1a351d7078d7401db957a6520e5c7de

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    20KB

    MD5

    054d4c34bdb4aed847714c28a1287d7c

    SHA1

    e1dba8458eefe3afa2d67aec28e5a28cf45ea03c

    SHA256

    e14dc4e40655551cd1bccf8712eaed8ba5cfd6f61197b6bd6b258a9108a1c96b

    SHA512

    f54344bfa348330fb623f907d072fa2a9c95acdd03e2d2a4571b0d5c2cdf70d54142316d72801dcef05b876b9805f0ada81024292760dcae1b2a172b90774ea5

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    12KB

    MD5

    d1fa2ba63dd386387b8b5fac05e44391

    SHA1

    1081c3b0c5bee3ccc44bd209601d20192999a108

    SHA256

    940781a5a2ce40b47e93516f032c5dc8494e6f6813d3d37b2f8f26084beb8228

    SHA512

    a94b3b412d7493238e916ea8de546db119257559f3eb36f8c6683e0954af1d7bf4a5788906fd7c7bc78db05f0fe931d6ccf31880826f157e8f486c083b13073f

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    12KB

    MD5

    932c8c7dbda1219c38b2ed843809b38c

    SHA1

    ed006ba4d904b14490d48ae13b29ee5ed82fbef3

    SHA256

    f5e5c36512caaf04deec631d46e9c8f5ae579991ee0b7d3cfd1c88ff0accba56

    SHA512

    ea5f8bb6d7d9927a202098b9ad89158d56bd57734b1f839f32b2c44cee80d97d597ec843f030bbe09035f06bf8302c85a24505d3011dfccf3f08113d7eb5121b

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    12KB

    MD5

    b1fd9b4bec827f587e34730e3b202e3e

    SHA1

    f0bf641013ce2cca9b72d9d49b4e6c0db5a09890

    SHA256

    43d878cb6f12b186f106558975458d5dfb96d215afd3fe9446e47a2fbcc65319

    SHA512

    cd8d746ddb083c4c8854111c3e6b6ef8bc5b99000ef464eae1a1a5457e167ee569206c2db21ab6e81195963a626d161e8dde00dbb3acbc9cedf6f0573b2aea88

  • /data/data/com.cnlive.movie/databases/ut.db-journal

    Filesize

    16KB

    MD5

    ad053c0edd46d6552552332d41964d33

    SHA1

    f23fb18ec700421a2392be6acfbbe1a75b7a375e

    SHA256

    e81786cd8fccdcd25dc2edbe07338ab702db364da45f9073c66a819f62a68a62

    SHA512

    b03b17d420f5f146ef72695faa97ea0817ecb372b21de4892c422f654b552e6f2aa257be55899d97fa191d01039aa6e13d9eb827755e4084b5469b55791aaa62

  • /data/data/com.cnlive.movie/files/.imprint

    Filesize

    830B

    MD5

    aac5ecc599ebaa36ba353b62d546b25b

    SHA1

    9f211ed55af515f9588285ef661c8e75c98d5a19

    SHA256

    83668be251551efa95ba760d5f863028a54f471a9ad5c73fd3ce9e860dad0fec

    SHA512

    5832b0f5e11ec2e263558d933d24e5ca4d052daa6c7361655f550a2935e049c3fb6a7315806a90073131431ef22723085116d3931a6a907992ed469d15dfc320

  • /data/data/com.cnlive.movie/files/0a231bd8575dcf72.txt

    Filesize

    40B

    MD5

    b50d365e6a94bed986da30fee1556262

    SHA1

    86af16401be85ee4e6e3f1b159cfd110c29fc856

    SHA256

    a3b4edab685cf4e11c190a27138b17b5fb049289246365ee7934d8c564440644

    SHA512

    27cad9f7dd5cb87c1fc79db5b11a2792da933e2ac6618b6e38f3c070db16b354e482095df4782f9922a6e66e8cdf5aa00087735dae715d7b09b024e2a744e0ee

  • /data/data/com.cnlive.movie/files/21c22f492aba3de8.lock

    Filesize

    16B

    MD5

    cd1eacc7a9058f02536137ef8a5ed026

    SHA1

    cd4ada463963429727ef1661b7863645808db518

    SHA256

    b1417d03083ac9ac93d37f6ea6b985674d7874f16b3d61a41d555bd8a465a1fa

    SHA512

    eb63bb16686ed2ecce82a9b770ec1acddb748b412c05939d28597d0f7432311df0014a1404fdbf2d6ebd64ab40a4cdfff61547cdda3a210bb50527701a781061

  • /data/data/com.cnlive.movie/files/Q0VSVC5SU0EK.txt1469

    Filesize

    40KB

    MD5

    d56e8498a19ccc4dd643d4b2fc2e1290

    SHA1

    e50280ee3a450a946fcf84f4bca1d84c5ab0b223

    SHA256

    be460817fa81d2e0f3c86fe86704e61f17ce3fa8f2b3fd9d536f15e749570af2

    SHA512

    4e46925bd7eeb95e7106283a9f468b7b912e686d76bc6316a0c84698194018f8f46f9db267d8d3dc152b20d262921c108d6c7ee95e13b035a279448b3bf441f0

  • /data/data/com.cnlive.movie/files/SGMANAGER_DATA2.tmp

    Filesize

    469B

    MD5

    fbe66e833c060c349ef963571ea4c4c6

    SHA1

    8d1bcbd60aad31f556493c61d1ba69e6d45c43ce

    SHA256

    46e25a23f1b93fc57ea030c4b454a34aa993cc917044938348536068b6afab1d

    SHA512

    147751f406eedf889ebb0fed4210c29618323068eca82ff02d8fd69c85da8ac71e797fe59d580a3ffa0ca996930cf126613ab6f8359d9be4a4d4021f69bfc31d

  • /data/data/com.cnlive.movie/files/SGMANAGER_DATA2.tmp

    Filesize

    12KB

    MD5

    c6166d60248c9254564d75e3ba137782

    SHA1

    a29db730dbb53a88c816df315e62b0351299f762

    SHA256

    17255a28cd1e889a8a9dd64d55b1df7809e7bd58b4d8154ae6459a328889aa99

    SHA512

    3a71b075fd304d613076b6a69906a8188eed3f65f25309648d09e920e4f4eb969cf60203a46ea593494d639b3f1185996af7b49be21b5168cbaa545b2823bc5f

  • /data/data/com.cnlive.movie/files/SGMANAGER_DATA2.tmp

    Filesize

    20KB

    MD5

    378d5675e95e0bd87d27ee34f453ead9

    SHA1

    344d77c5f6e5f3918282d2a6d04a1df3ab583d60

    SHA256

    99e613dc3bc42a846d7a33a4889391cf5c89174698940fdaf8bdee0a08e3173d

    SHA512

    da6f7f6234964a0d002da80dbe409419cbbeceecd421b69d621047810f593c10eee04f9602712d87f29299ab3a43e06db7769d4047ef2e5e3874f14602912d17

  • /data/data/com.cnlive.movie/files/SGMANAGER_DATA2.tmp

    Filesize

    192B

    MD5

    213d6cc582aa97629911f4cf6dbb7f13

    SHA1

    230b38498bd1bfe3b1fd0dc027dc039f961c0729

    SHA256

    843f3a3e5de367f4b2c5927b99e629b40ec3887c998873c3f954d21b3d19a65d

    SHA512

    8c627517acda637b8ad728fc8afb5b131aaafd40e2c2a3b5ad554e9cba1b60252ce8142be929b809b140ce5efb1d425ec36f5808cd6478e41729384cd719b868

  • /data/data/com.cnlive.movie/files/agoo.pid

    Filesize

    4B

    MD5

    2a10665525774fa2501c2c8c4985ce61

    SHA1

    f7433d6fbedefa862aaf4175a7847d3dba4eceea

    SHA256

    6da233543753c62bf28d31560b7742debba46ee56b37efa54b36d16d5bd1134b

    SHA512

    fc3dd5235840e99bbc485049471b439d5e6f59461e1062268140d40e39d4fcbf6157ccc47745dcab31dd58d164b81ff831fb4f9c6ce1d0968ba0f09975d57be8

  • /data/data/com.cnlive.movie/files/umeng_it.cache

    Filesize

    328B

    MD5

    864e5a0642c5a0cbd18105fb5004066a

    SHA1

    49b8f799f6e5e8f500dd1ce544b010d9c792781d

    SHA256

    e9ce61f38e1799816053286cb0eba452e28efdfeb36c0aadef887ea5ab907aa5

    SHA512

    69c37aac662debe51e0bf28281a71ccf44a53f64fc13559b3401fc49136c5402974c97bf0b317fb848aa595a6ea5bdbc1ec1d238394bc25324392eda2c967d0d

  • /data/data/com.cnlive.movie/files/umeng_it.cache

    Filesize

    167B

    MD5

    7981379f4dd7f8eebec94ee89224ff95

    SHA1

    1c80e0cda44f7c8d44c63dde912c62a3b461f041

    SHA256

    e53386a2b795c591ac6b8d751a49439602e829739501da7de66419ea1691acff

    SHA512

    2526fffc815d3aad67b3c34bf3d6acff2aa9436da85ee75b40fa784b247e82cd331625ec6417ec348fc41991717a675361c96c611c255dde8d8c083c1a69d965

  • /data/user/0/com.cnlive.movie/app_SGLib/libsgmain_1204281226000.zip

    Filesize

    66KB

    MD5

    6bac0b55f44e56ee2f981ec97e82c666

    SHA1

    83f658166c66368c23596ed3358baec04e193c12

    SHA256

    88b42e45697386e6089381a1d6e507ac61dd63f0537c3c81cb36a1fededed026

    SHA512

    0b298208372d1ce4874576c45ded242a65dfde3a7bb54228d28cded2ddcf1d8a1bcaa6ce4e7e5f3eabddea2d852b7c171cba9073f9d95b899126804158e37c76

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    8KB

    MD5

    cb00befb3be9a490613d33d5b810953a

    SHA1

    6bf32d5f0116e261f6fd45412fdd1b9b44016124

    SHA256

    6130a7c5ae311df4ae4c3ccca56d01c91a396cde8126b5201443bbbced72df96

    SHA512

    851188c4729148a3e11ef14fe26631e3a9cfc7ab7bf5801255b83aede7447a68b3d07c18c3617ee2d213d3eb87d0dfd5aa68bcb0120b21baf3820c5db9dc069e

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    40KB

    MD5

    839e4dcf414fb3433798a20e0e749554

    SHA1

    4489f584f6274684cfb1979e1ce20e10638e4fa3

    SHA256

    e22489df58084362202d94e05ebfd3f52512dcd119e6c8c032631c1ec62749c2

    SHA512

    80a97b6f1032a2a92e873f0b8eb43bd5a4c3098daaa48efa603ea2175f9b7fcf09060e6148bcfdcca296677d7263d4aeec47018eeda5d535d7e689671c4a0ef2

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    512B

    MD5

    e9661781e0f28174f84409a7e6c130bb

    SHA1

    b3b33e87d59f0a9209602cb7b507ba1bf4832f37

    SHA256

    9f1a2fa8113ec1cebc713662f60e1f0f699c6be2345de32ad374478ceb287fd8

    SHA512

    71e88f264a5be148951e8415a04f6477fbaf2aa023548b3a25863aed401c9d108b49f6a2975ec0582ebdd7b5ea8dee1c2f731fece91ff32c5053736aa050e92c

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    8KB

    MD5

    a03d2be2b89dabc8af1bf5923297ede6

    SHA1

    2e35ab6c42a63a6f94f822e346dbefb9982b9b40

    SHA256

    406907f9e2c265e391d586cf66a9121bdad16950280d9ee5db03194e3ebbaedb

    SHA512

    f2dcacb311c762a3e44e96f6cfa33736cef3d2f0206beffd7ebadeac3b6830a312b630fd6e2f7fa3b037df23e467047cdfd7f9ed6266482d42eb402959cff15e

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    408B

    MD5

    8c3ae49cb579f1a6a0ffe2754060923f

    SHA1

    ae72d3d2bcfe38bf7398fe3f7f5c0ca066bc5484

    SHA256

    77e7c38f556cb2e0d4b4c372794af68c4c5471a56894b65eb402d0437f993c05

    SHA512

    9fe5c7bba5970428da66214acd1dfdfb363dd48b8326b74b34e3038429c65ce81c69d3caabf9b436dccad60c35014c91d38ad522082befaccb47715fcc78919e

  • /storage/emulated/0/.com.cnlive.id/uuid.dat

    Filesize

    32B

    MD5

    5fb9978f997d63b530bef34c2ee84b73

    SHA1

    cc036d17b69e7e973ae7d73bb44fa661b2896cb3

    SHA256

    950960fdd94da67e8fa68eebedb86ab499f57cba34669ad6aea10b26b0f3de66

    SHA512

    7d74653487d0a29b38b236d9be1dcc25a46291153dcfd07b1738183373c90fd9c7634893c027b6afa63dfa637b87d645274786c77f0a78674cc2d7b71d0ca5a0

  • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

    Filesize

    512B

    MD5

    69fd7ce8c74403d8e0ef8976465c5db3

    SHA1

    4bb190249f2b1d3f626ccf94e1cbae7d91ea8307

    SHA256

    0ca2865cc4bff1e48f9cd9326cdae281ea1e3f347a8ca5ef8453c0f05d591850

    SHA512

    25a0d4ab51fc61eace74d21b980ac556501e1aa1f11330a3094de38ab6fe96bb59fd9381ff96771aa4455a426aca8a5bb91173f2abadf2eee99805bf22d932ba

  • /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

    Filesize

    512B

    MD5

    fb69fa2552b71a7817ac4ef74b22a984

    SHA1

    b32ec4f32f81655291f9062024aff81d7852fd06

    SHA256

    5c5f92deb7b626b30cda286bcff875b0c63561678554f65fb6e7305921ee0900

    SHA512

    35f36aacba443178954d4bd7b61be9105b68cee6a1e85477dfc33bd14fd4313e1a7dd324453d7408beb9c08ab06a195497d2e48ce3f052f3dde482861a828d17

  • /storage/emulated/0/Android/data/com.cnlive.movie/cache/7e5abcd158364921bb2c2c84b0766953

    Filesize

    1KB

    MD5

    869e30ea13dc89b7b9875b2e72240981

    SHA1

    535059acfb73aca31cfc0308241ccd2b9b3d8500

    SHA256

    90f70cf06b13cce6fa424de1911e3eb7fa1b7ef51822c2a874a201e48575014f

    SHA512

    e40215cd1f571bc85a0c720804d2f5e92fb66508057417b186250284c76e9fc317591c631315f9bb018a8ba0e55e88d1d5803154505511c1e646f5385c2f0cb2

  • /storage/emulated/0/Android/data/com.cnlive.movie/cache/cfd3af320e09418cb5c75f0d8ff0689b

    Filesize

    6KB

    MD5

    2f90168098586e654ce8673bca18f451

    SHA1

    232d10f2e0c6a597367d142137a71453a93ba106

    SHA256

    8169942c762b904a79c73ea251ab6f01a09ea5b93632b71e8c496e40b89e9374

    SHA512

    8d7833b9fa3d5b1474371d3e50dcab267aa3f517dc178678fd21bfd826adc192701e49f0e11bcefbafb701c2933ecc7477763b1ba52444e462358bb4baa3c5e7

  • /storage/emulated/0/Android/data/com.cnlive.movie/cache/ronglog/RongLog_2_8_12.log

    Filesize

    512B

    MD5

    2118401268c1eb5a8e4bf28534d95b7f

    SHA1

    8abaed025c59fa8f5f328bb8879e766dce723f9f

    SHA256

    02c7bb3bb7a49f230d61dd30e2988a9c25f5bc35341f28f971a087973726e342

    SHA512

    6dc3d9b5b36fd711e4b6f087a6547a93c41fb92897d4f38651c6f72d00f15a2ccb43f5159dd6bbb93dd68494276096d72c6e3e78951984a5d203b4eb37c4a60e

  • /storage/emulated/0/Android/data/com.cnlive.movie/files/tnetlogs/inapp_20240524.log

    Filesize

    37KB

    MD5

    3035902584f53dd80cf8d75985309333

    SHA1

    7eec6d392b93ad6867acb1906d7c554bb1e29821

    SHA256

    d9b8a9ee30569f5ea552bc8f354609d6d573c7a902c4afbf628cec57b5c4ac18

    SHA512

    58f4885ad438ba2cbca5724a58715ddb9724f9554404f09f8544b12f86bebfe72a91f9ba45da5815a4a41d759f5b0ae4cee8bca4466a4af8e58e060c37655a22