2fd5f9b5459e2ba9c304366e28504edf89e48834ecbf7c1566eec437c2a798b8

Analysis

max time kernel
179s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
28-05-2024 12:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7ce9e771a68768b3f7b724570d4f3694_JaffaCakes118.apk
Size

4.5MB
MD5

7ce9e771a68768b3f7b724570d4f3694
SHA1

b9f5d14f1998f1b4fff376842fccb4e8974e9cdc
SHA256

2fd5f9b5459e2ba9c304366e28504edf89e48834ecbf7c1566eec437c2a798b8
SHA512

ded5a08bb0c7a22b63c5d5dd98f6836e930db91f381c280f9c4bd72e9b7e210194abf38cd559cfc6b8b74ecec4ac15b595749e7a5cc39c76d65f96f86f0f73de
SSDEEP

98304:ZwyZmXGfkhxLBBYvGqYInWXkV+L0Ij3BSraCkN4UTfcbzNRj6/1:Z7ZgGfkhxLBBYb20V+4g38raVKUTEbpa

Score

7^/10

discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.qq.cleaning

Checks memory information 2 TTPs 5 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.qq.cleaning:xmpushservice
File opened for read	/proc/meminfo	com.qq.cleaning:bdservice_v1
File opened for read	/proc/meminfo	com.qq.cleaning:channel
File opened for read	/proc/meminfo	com.qq.cleaning
File opened for read	/proc/meminfo	com.qq.cleaning:mult

Queries information about running processes on the device 1 TTPs 5 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qq.cleaning:xmpushservice
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qq.cleaning:bdservice_v1
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qq.cleaning:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qq.cleaning
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qq.cleaning:mult

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.qq.cleaning:xmpushservice

Checks if the internet connection is available 1 TTPs 5 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qq.cleaning
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qq.cleaning:mult
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qq.cleaning:xmpushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qq.cleaning:bdservice_v1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qq.cleaning:channel

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
50	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 5 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.qq.cleaning
Framework API call	javax.crypto.Cipher.doFinal	com.qq.cleaning:mult
Framework API call	javax.crypto.Cipher.doFinal	com.qq.cleaning:xmpushservice
Framework API call	javax.crypto.Cipher.doFinal	com.qq.cleaning:bdservice_v1
Framework API call	javax.crypto.Cipher.doFinal	com.qq.cleaning:channel

com.qq.cleaning
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4622

com.qq.cleaning:mult
1⤵
- Checks memory information
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4749

com.qq.cleaning:xmpushservice
1⤵
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4787

com.qq.cleaning:bdservice_v1
1⤵
- Checks memory information
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4834

com.qq.cleaning:channel
1⤵
- Checks memory information
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5186

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
28KB

MD5
0f6a0a3b3a62f60741e61405ec86d6de

SHA1
99aa5a9ded6dc18b2424accb59593abc048f8993

SHA256
9ad0254201ac0859358b3d48694477aa73b1cd872814dd90cc8857d2ecaba856

SHA512
8b5971a505c91209bf9be9cd7d7897a5b6cdeee30b576bae5eb5ba5142b09b46c4cbd2cf6dfe52453545ffb3531cd558ad894459537ff9ce7736254a2b774ddc

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
20KB

MD5
07699b2249b66cba27ae093a5e86deff

SHA1
ed921ed16a19bc9dc0db972846dc015a9730a0e6

SHA256
bd4dfea6f8eacac3e2dd74b0ae036485da0161ead6870ea3765919ba362b3975

SHA512
183cc3122796f042102b8d3f8db277c6b4816899570207ef1f107dd9e07e98ffe94e5929fc6fe17a07a415328b0c965596bcba2534f4d06a8d3fa93e08dfb5da

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
16KB

MD5
4ca097a916441e11dd779be9253cd2ba

SHA1
1cbb02524437187df016c32ad72aa25551c38e8a

SHA256
45c2c02f3ba6afb42938984a9024f4bacf30cc21b266b650eda4141b5dc97a3f

SHA512
02dfa06aaf3a9da0fc2ec3f28f44df936e8df4bc72379b0eaeae5b6070a1cc0cf4199f8f9d73468a92331fa426cf6d843637bb9dbdd9bad439f16c3ae437a78d

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
16KB

MD5
195843d3cae32dbb3e043383b2153ac5

SHA1
7480d60fd1964870c8da0fcda635f02ed7a0d0b6

SHA256
0747989d736411aa42c36dc735c86ced5b28b476ed7edbcb5021615e3a678a67

SHA512
b625b64b51bcb559877f5ac4175085e25f0c45715ffe7f4e893c8d9d65a55fb11c0d0956831a73db491806320c27ab4aaa015d19ecc3b1fe6a1f64e91e48e63b

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
16KB

MD5
9c686880a1b842d8aadd2127dbcea1d6

SHA1
7f8baf7d1d0b22c816f896bd454738fa8530cba3

SHA256
9bef23d6ea6ff3a95565880047163671b98741cd9c04456dfc77395095ea6ce1

SHA512
79407b378ee2f2931095214fd0029402e80f4aa2ef49d5dc6ba122d661ba148f178b9c54dfbad21b142a16978e69780dda3d5ec5b279ab0f40725021a2b61333

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db

Filesize
16KB

MD5
590168329d132aed3b7f858964774c04

SHA1
9599a2890d1e560b68218f7e206cb08510cf540e

SHA256
9852b245455c221480a1024cc6db0c85c5312e2bd124cab63360a0ad4ca99d13

SHA512
e23ac0c7c116c584765bd17dd38930dd3a2faefe1dc2ed2c3dafc2716de031bd907b6ac55acf6ff23970e7a80b3b4dd08618026952416fae0dd4032d1445925f

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
512B

MD5
ab1c7a80956d7a2a71a86fddb389a885

SHA1
65ac62d12379697a3cebad648a040515d0ebfcb5

SHA256
547fcbac03de6f0198e4ec95f93b6e656fa12bb540dc087e2bda7f1557e592c7

SHA512
8aad54d0b1e97f6334cd50f38e312a8a0a4c8fa15603e988c9a48db633c3f9f2ca4921758586ad83bb50850fe46e4822967513fea5fb24931367088d89df1925

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
8KB

MD5
9a4dae4372b699d2cc449f9d3b57822a

SHA1
08c5d929f02d52c67f994c33a1d19b555f91cc62

SHA256
944fcd055339b19844632c91e8fae3d7297bf877a4f8a1b62f3f582cf104efe4

SHA512
f54392bea9fdff469e1bbfbcc4c7fb69ace01b678e7786b6bcfd0beb512b921bba7a8b07c7f034b83b4a69f8cbf7089e82185fbad6f2f58313cd1d96fc6cd633

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
8KB

MD5
2cbf6a823961464a693c01c40e9d4a00

SHA1
b89a3d8f5118f135a4c547bcfd4cb7319cd27066

SHA256
5b89eb5885226bf7e4efb9d55e31e0a1b7ec87173a5777b895a759edab697f40

SHA512
8d1ebd1cfb15c1ef86298916e4637c8402134f2e1b67c082e1af2085e23c6e34b8f3844dd7b4e2e4c67dc75e2f418eed2806a06fc9d9240aac8b27f120c36292

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
12KB

MD5
ac9b89e06ded23e83a4ac9a653033cb1

SHA1
5960b5ce38c5d812a994a2bd35b3fcf4b77386e1

SHA256
1e27ff2b1700dabf8ab694e2aba1dfb018db1c7f1d75325694f460b307ee38fa

SHA512
86674a228a12b41d231ce98a397e374482d4188129835b36899664e7cccdd759bb5655eb3f34539d94a3d5ca5e2b0c3064600f7e98633f72b60785306e93ebf4

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
8KB

MD5
356ee4fb4592b5ccb9c2849f823b8805

SHA1
4c6d5c1f5b0dd7361ab05be970257798460cb880

SHA256
395bb7a137a9f9e4c9ca267250f69fb497b3a395385171d9a8008db0bea790c8

SHA512
2ae3173f8f3a0a99e9d6b932fbba8bd15b569bf051c5be0b1edbd52cda79bc05988972d7cb0e30863bee6eeb1f3f7c79fb8d9ab6a1616faaf9c86bb1dd18a65b

Download Submit
/data/data/com.qq.cleaning/database/pushinfo.db-journal

Filesize
8KB

MD5
b3af719edef6958fd36c1e3a6e655c21

SHA1
c954c37669caf6155c182ba8a8deaadba4ecd8d8

SHA256
44e03d991e313367a96dd83e4f4bdaefc41c0d15c69885967bdddbec4a900301

SHA512
5db113df39124186c50b65de4f2d4635af9a8abcc165ffd151eeb4a5a8ea9166d2392d4f5b8fc4a78ab56181478782567ac3821fcc873f4f96b9711483613682

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db

Filesize
36KB

MD5
4cfe777c9f6e7859f5efe2197401d8e5

SHA1
bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a

SHA256
c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231

SHA512
6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db

Filesize
36KB

MD5
86752a4be6564d8370f2f0e403995003

SHA1
29f7d50675f6e59f3b808eb6dcc8619384412115

SHA256
50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

SHA512
79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
512B

MD5
126037cc63e658b6351e03e55c308698

SHA1
33f7da65c09975fc790328f7d1ce7cccd0aac1af

SHA256
4580dd6a5eea8160d65ea33dadd5b4bbfe7afd6ea0fd340b1d8cd69511a7cdd8

SHA512
eb05d6a603d7decad4234c94be1080b7a395b8df30fa88c49a56a554f958b04ff6383a182d0c2053828a1b37b24b8b798a1c491ff3475176c937a29777cbd126

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
8KB

MD5
51d9d452007f9676a9d92b5342b8933e

SHA1
db72171e91b9598471e06bae2043cdf92ad88a84

SHA256
016344676542381df21f4e44353fffa7326fe202c9f27fa78fe005b637d61246

SHA512
519c7a8e73ba2c3dd1581a7a94ea9ad7ec5159ba9d54ca10ab46e0454c112ff16ec6f54aa9eaa8ff2fbe83c281a89fe4041690a7502b552e689b86696498489d

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
8KB

MD5
113268a48f258e991bd317041ea77768

SHA1
9d92f627a7c912b1b02cec07378fb08028abe87e

SHA256
22c970ad7b5746fe06cb1b53d0485c8963d6ea918ce7a5984c184b842f447daf

SHA512
353cd1cd1f8d278ff5e5fe47c3921a355b897ef25c2e4a8a8d4e6b9ee0b2b2d3508067e8778dc2dfa7524c47131532bf36d4bca3d2bfad7b19ad678b48fa7474

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
8KB

MD5
f6454d81b5d5a77ba654af9050d912be

SHA1
ea2f856ab7d6b36e1ec7f72b3d71053a68542cd1

SHA256
1a21863f8336ae964554faa5a4417a48bc24f8804c6ce060cd625926fbe8634e

SHA512
c27a17d5d4c9160ee6114a04478ca0d1089921a68b6ea2284b5cdd9a36d7d69f0cbe324c003c20df5e94257245874235acae7d0639686a1cbdf9d2ca9f5aa1b3

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
8KB

MD5
f1d5ee9238c6992a7a7c75bb3ecae1bc

SHA1
025096a6bac5543917260525607af1efac95c636

SHA256
d358e438eee9d58a7f3bf10e8d1dbf9b9336c38432b4abfe2447e2cfe8744eae

SHA512
84235e7a3c75f288f28b79d655188fcf0a7ec5976d7b03b4be448c1e8f65f268d6b3b0b077b2217eed9698ffa7113a2ba005809f9a6c3413545ed2f52db14007

Download Submit
/data/data/com.qq.cleaning/databases/cc/cc.db-journal

Filesize
12KB

MD5
28a82e1b8adc69363ef68e2440f7fdb6

SHA1
076b38a7b9fc2e0b3dfc600c42874f65caafdf08

SHA256
52d8113d288e4855fe8f5654859fee4cad5916bb94fc12d038d9677ffa46407a

SHA512
621f49c8a1782ab7f25b29d5dc2fc70d3d4362cd558a328b67f6f5135982ce64460f968e95e36d33233ddc7418f7d0d80efde64c3d3a6e0ccc25d9852706b6b6

Download Submit
/data/data/com.qq.cleaning/databases/ua.db

Filesize
32KB

MD5
a9ed556b58ed031d90f1c18774d8fd39

SHA1
2b67fd6e13f6b50e40d7b804fda0edf99a837139

SHA256
36aded4b7ada8c418964ab2a057ffbe0ce3403cf122b2b4aed998992843c1196

SHA512
d972ee5b53662a1e1f626375dda21309fe994593eb16a96229185a19018f27868e199645ab95e649a2fef281a97c0e832b6e15b73603edc9e9cfba9e7383885e

Download Submit
/data/data/com.qq.cleaning/databases/ua.db

Filesize
32KB

MD5
4cac7d31fb94d5c9581893537f64c5ed

SHA1
96bef3288546196ac3058b5eeddbe9da1d999fe5

SHA256
d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

SHA512
0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

Download Submit
/data/data/com.qq.cleaning/databases/ua.db

Filesize
16KB

MD5
1fd91e263802da64687f976993c2f460

SHA1
a299b6675452fe8bf0311862c12963d5cf0e8e96

SHA256
d963d24f023862c86b6a5022617b788f92c02f0a11abe24669e0567df4eb0883

SHA512
54b9233dde1db5d73e47ac0bf07f2256e6bbd9d0c5c3f2892760141675d5fcadd71b479eac080968afcab9dbc0a5c440c7d824f0053e32dc413c15b6542bc20d

Download Submit
/data/data/com.qq.cleaning/databases/ua.db

Filesize
16KB

MD5
3513fb79a5757a5e7cae52c04e41540a

SHA1
8b1ce8204b1ed4a2ccf16e4c1fbfe03612130d9f

SHA256
afdd7bf9235b88c45cec3d1538846eb3f186334bf95d8fcd396e070fedb1aed5

SHA512
b955f2dcc1beea38aa2e6b46fd07e4c4de4d881ae9b6ba4554e67f2261f12fc3c58ebe559e56420b72b346d9425ef962f15fcb8c6515be338da7edc4d4ffccc3

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
512B

MD5
07c6e1ea9e285c86341e91583864edf9

SHA1
985403c4f8a4eb4bf8a3474f541dad3b44730d40

SHA256
fd44681aa4becda3b5e8154d5a8151373c699093a7a4f1f06786bd29e305edb9

SHA512
8b495e3c894bba9e9e52dc0a6204a81e80fb4e69605fb56ecfd73946045c6eb5d10eea068eba09c31f01fca323786e5e3338d1af79bc60123545c2a0d2a30beb

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
8KB

MD5
60348a05d48e1d78310b46ffb9cb03bb

SHA1
2f52e799ebb84a1b1ab0ad6d11834cbecb50ba73

SHA256
9808b8fb5b188ee1f21eb299f2627326aa9910e1cd7b93cb8054ec21b378b92f

SHA512
fcf3595f82ee3de46caf4744d9017049935e4048a6224044081adc3cb8731355fb32249bab58dc75c81c097d7ce47c415f1807f5a9552155122eae01de209d35

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
8KB

MD5
04ee166102b7c3b92c72bdf748bb3f5b

SHA1
0d5e86c26d498b31b0cb27e8965b205e9bf1849f

SHA256
aa9f0dc501d895f7036121553356606cd222c2eeb97f4372b639378f6c477968

SHA512
28343c05731a9aa226b9ec0b76fad9db24d47b68f1d69705b689cc25a55d6ed14d725979d99b49eedc0c9f017c3bb43a92d485530c6ebc9ce4b90d8b0c566293

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
16KB

MD5
00f844e4955bdc77adc8fa4c1a27e92a

SHA1
653291a7cd3ca67c75a45aadac7baeb640983c03

SHA256
6f08eca546108e1ec813db73a4c1414b56ded96e160d6066b58a55db931e1778

SHA512
26ffe33843b8e4fc0407b9bc87cebb552087e8ff16d5825283374ee68e27c1b4e4f1e0465326410d1c6b97d55c0533ff0ff15b9ff85eb905f331ab4ee74f6e68

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
12KB

MD5
6ae69def5aa505c629e89e481d586472

SHA1
3b7183a03fe6572c5c4bfe440adb6414e5f3de7b

SHA256
96344ba93b0c46936dbebbff43d591a49e82da3746a21a45524ebfe204be029b

SHA512
c7e46fa3bae19ee4541cb087db4302368e3943c2efd0bc75c7c476890dd59003e4896bf6f4f961c3ae4112e4e4a912edb86dd4f912a42decfdf4ed4363f42734

Download Submit
/data/data/com.qq.cleaning/databases/ua.db-journal

Filesize
8KB

MD5
3aa2f0e56a555db90dc3ef15e0b56090

SHA1
862b4f411db7210a2ffdaf5282c45e47681ed903

SHA256
f3dfac6a877b682f020753e88da52484783b10beb87fbe84dca2585896746069

SHA512
5027862f76e264d2c41756790f6a3e0d1ed6460ba3ed1ab6270179283152528d24d0ad18f73f00f62900c93525adb5829ff03b14f57d68c529047372b36902f1

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db

Filesize
36KB

MD5
f03407339722d8c897b01b3c1c2ff284

SHA1
0340919df0fb63f2023ad88de29e677d4d1ceaf0

SHA256
a895118d18d3a8bc2d7b889fc7ae4556ea928dcd6777270f504394a720eca77e

SHA512
b297728441f460000f4309cb9448fc38551431647858e5f8bf21e2f49ccf5603b3590ede8f8c9fa704d3cd27bad2127fa07ae54e12e92fbf8d4a0e992d59c3ff

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
12KB

MD5
ea9f1dc8500bb3bf8209745123a70066

SHA1
a5e94aa6f0f4cb7504460f953e902dba461f003f

SHA256
645242e869f719a0d4368606aadad0e390456c0491a2d197c5ff58d77101b317

SHA512
a46cf4d720d9ac6c7c1ab479f3dd59b4900b59bd9b3b757bd83a3b61bd815109541dbaa6cb90bcf73bf6a4e05f288e6fc98d5cb8bdf4f05c0d468d0893ddf780

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
61KB

MD5
6064220883867445be783d014e49a40c

SHA1
7424116d5b555ec834314bd1325937c6d8e5c25d

SHA256
d1657fcea29492cebfe2051162b4b497c8fc2995a3793b2748bc76d7054ac469

SHA512
cd8c01dc543b78eca360946946488ae7ab84c68f2669a6fa166d800389f5996f87ed206ac6991b630a26f19b89d9bcdc454b67fbe411931555142d00d8a3ff5f

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
8KB

MD5
43ff41fc345cebb82a6bda1aa0f5f211

SHA1
3562dd03586fbd8ffb220c33ddfcb790b9e0bd86

SHA256
0fd350ad8e53b7490bbf3ee38633ea601b77e82748a5873700dce67bcd51939f

SHA512
df29e7b7c3c4e5256e490262d40b09d8e32df0647052301efb70c2eeeebf39f62b31f32090ad26eb785450f1ebd5b75a022387b744810556b9f3f7f43966a0db

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
8KB

MD5
cef9e4bacee58f1438102ace6117e569

SHA1
ee3ae7ad7b604210ff04a579a6596ec14f482809

SHA256
3ee3468fc0dc68e937c3c98d368bbcf003d11632623efe680a156d09b285e54e

SHA512
57e181697898065735682803e1da4072a2ea27dbf62b800b6244ddf49ad6a64ef86c5e2645bb437c81aad484aca9aa0976d811f0805dba2fc64046d8c1a2a82a

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
8KB

MD5
4702c3d90d8573f9fd3cb481d9c9dd32

SHA1
370fe391afeada089d6dcd2455e19c2c11db421b

SHA256
c9a3a5a7152c814cf322d985f08df2f983c864ecc14c303d7df339e46d6d5ea9

SHA512
6f7b1ba7b2e55962d2efc09910c805ef47aa110c1f0ab3a73e34ff02445a8e29f599db0dd49cb06051c17b6467d63d0da690f3fb82ac07134e692988bf94da1e

Download Submit
/data/user/0/com.qq.cleaning/databases/MessageStore.db-journal

Filesize
12KB

MD5
6789d4809de7f0b5ac6f32ee2d74c1a6

SHA1
bacd27007cb96acefebb8ac3919905b855bb1fd5

SHA256
4d9f2f059f0ef7399a2f060feb0b7d92092be8ac76c925891162a78f4e8607e4

SHA512
49dc6a5fa42648fdf015195699d0371dd3e947813289ba3f3e1c4b7497eeb513c8d7a3db6ff5a1b5e8222f23f7b3f251a891175028cc74f83c8cdfd7c8340a48

Download Submit
/data/user/0/com.qq.cleaning/databases/MsgLogStore.db

Filesize
56KB

MD5
aaba0c63c1c22fa31bd18bb4aecb21b7

SHA1
9e8e8b3d554b011b09bf7a1846037b2a6d4e2a79

SHA256
6990a53b1d67cbc08c3ae55d4482bf039877be1bda60a5aa2faff2fed7ab722c

SHA512
78550fd43c53d786c83f452786776833115084ca34d3c3e812c594baeb2de3e22570b601799c2d929a7e65b2c2406799f8e76640b813c42bf76d7629993ecb17

Download Submit
/data/user/0/com.qq.cleaning/databases/MsgLogStore.db-journal

Filesize
512B

MD5
83adf8b0ea4a2f8e6548459c8fb77362

SHA1
ff46f8f3e0a3216380596c7defd2eccdd1cd371e

SHA256
59f33bac2af0f1ca7b718264b98772aee2bd720b05ce075816b55dda7816e89a

SHA512
0b73015ab9c8e900d5dfbf0063f8451a810f51e6615a44b63028c8da024442c466f647da9e962b3d8f5afcecf3c4f46dca44750d7d0cfcebccc3428f7a759ef1

Download Submit
/data/user/0/com.qq.cleaning/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
1016b85ff184236437666a02bed088ef

SHA1
8b53c94da68cfd74e14a8b3bb0ffd39aeee0cc0e

SHA256
03558165f05fe209e951622d48ebd68b35b4c51277f2241f3b16783843cbfd51

SHA512
4d9d66d35ca1b1841009790c174855c5133c1ecb91e7a2bb051343fb405391fa2c97ae1270bd15ed6fec56fd7e42ae6175f5003ec3e23715bd46f7ff018aac59

Download Submit
/data/user/0/com.qq.cleaning/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
1b3cfcf83defdb39b8d5fc557d104a62

SHA1
20d532d9675ad2e58e31ad3b874144e929fd4ef1

SHA256
db11a271526d16fc4c615388d176bcc296f74656b549e2fb3526dac0933db591

SHA512
3f7483e767e94eb3f26b3e4e1603795e99fa26d4a92ff7001216851184fc9b26ea64a17fcda891b94636763da5911126fff0fdafee9aae114ce32a5db682a5b5

Download Submit
/data/user/0/com.qq.cleaning/databases/accs.db

Filesize
20KB

MD5
842b3bde897c288728929705462bb71f

SHA1
36847db2cd4848f8e9036759ea946a227526431e

SHA256
6d18d342345c196fa8879e531bc1c7424ecec1ddf8d7c0bba0e4cfaa485ef2fa

SHA512
69cf4474c9e74b78e6d90a1843bea5638d5ab6c3e080f49a282f35b6ee8524e921ec405338d9e2f798b8650e13879cc6aef605702312f9095740c63b0ad88ec4

Download Submit
/data/user/0/com.qq.cleaning/databases/accs.db-journal

Filesize
36KB

MD5
7c0b5c6d1120bf3635cb815eb5e29f28

SHA1
cbb58092e164d3d098e750a608f3833f85a06476

SHA256
f2434b69ad5ddbdeb3796b9e34fa428cf6fc31bf987dee42c12816e3632a128b

SHA512
151d69445e8311fc78f40b5781e2e1f1d631e879e87a08d1076ac69d7ad5bbb8ee017fa4d5be934f9eaf1cd3a0aea87c40be405c2a601a845820d73705ec7a36

Download Submit
/data/user/0/com.qq.cleaning/databases/accs.db-journal

Filesize
24KB

MD5
f50dfdad2a890371a13340381d64ce6c

SHA1
86c9b1ae559b6ab65811a2db572587d5fdb71447

SHA256
7bfa73eaa1adfdddc08f6e99253d6f38c4bd5001ce217a30bb8d780eca1b2b9b

SHA512
6f199a030b3d7bece19f4340dd0f3a278f759ec81763f25cf16ef0ff192a9ae2cd3d986a76b8625a315f2b0e16211b16db3131bd00400614f9948bb558c7b0b3

Download Submit
/data/user/0/com.qq.cleaning/databases/accs.db-journal

Filesize
12KB

MD5
62148728f25d81c63b5fb96ae2a8a8a7

SHA1
a0419c7fd19cddde3b2f06b144bffa9e8798a53f

SHA256
852d81e55f942d0d30e011bc2383c5f498bfc3656e9ee003e83f50c482f9d2b8

SHA512
20a4bf5d4cd4919376d237d2adfdaa16437253207ef01e69d95cafc1d11862a38a8ffe983ff7b397e07ea4b7c53f7406fad78b4869aabc30caf83f7340c08fd1

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db

Filesize
52KB

MD5
45eb556f3b927cbd33a1e175558b18cd

SHA1
39c7847e50288881936248b1043acd9a936c2785

SHA256
5262d2b55f038306c1ba668e55db56649714e10cc3c237647099f71726a70cd2

SHA512
d8cfc0973d92f5caf815c308a91d3bc30abca11cd700209a6ec8ccd032f48ceca601e8e49bcfe87935727483bf675e1e8ca6a95bbab66ac8c879f4d85ac332a3

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db

Filesize
40KB

MD5
a13fda5327de6ecc2e577fe48bf1795f

SHA1
5682a4eff63f1dec94c99f8cf4b2b21d8108d8ec

SHA256
14f7fbdedc1cc828230c44296229b6ebcecc0eb018eea9b20a3a40f06ab3a156

SHA512
cee3c34e432d01dbf83b4c887c20689ca4d93d0a7756a7e5197959cfe6ce624988684a01843b7c054d9522b5c888e13867b38d17aa19beb906865e344e1e1a03

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db-journal

Filesize
512B

MD5
79f5b2fef9d6b76384c946ad83466121

SHA1
ca6e54d8b01c261f8141ab644fe1431499ade257

SHA256
4032e2243ae43dd6eb5f1875dc613b311c9bbd7607d889b5474b1e928bc054c5

SHA512
9c48eee15a32947ec0572cf1a04d656355645ee73b9dddd9337f6fb9f6a0d55e06a7e540a5169132cbe2156656e5dbaf05c904d4e9cd6c06e481a01eaa717a78

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db-journal

Filesize
8KB

MD5
d2567884ebea7cd89a54c4723ceafb40

SHA1
5e9ac3c832db9a035080a0a93740b8f0a283e1c1

SHA256
9d5a3b11adae9b77bd45f60edcef7ce3f7aa156d1640778bee27d1a6ad9c4575

SHA512
39ab401676e43162692ae0368d0a481f83f9637f7ddd0538d70c55b0a24fa6ff873ec9f2041679e6d4621a9cac2cc84325132cb07b4e9ed68c6d94e9377b55b2

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db-journal

Filesize
8KB

MD5
48d89265a5ca740130d8fbf80e9d5928

SHA1
bf33253817255d4003912e29529fc547b84bc491

SHA256
aac786e8ca50bd3e6ebb148c35d99940f962fe7b51e5984339097bec038f13e8

SHA512
8213d1cac9997fe36ebb12a7f3f90d5c1f82894ec1fceeb704075af34dfcc62bd778916c27ca88ef5ebc47cc3bf765500da975bf5c67aef88f99804222d5e1b7

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db-journal

Filesize
12KB

MD5
0c1f81c7847da247254f969fe4d7f8e8

SHA1
6cca8fbf18018303df493f0d0f07476687c68d70

SHA256
6e737ae1b6bb8bef8bd7b143f8a85544a9aeeb0159ad504c4b7eb78d33e924b1

SHA512
8807b661d8160c4f06fa68cf14b5ad5966c4f547c27a9830e9e2703b0c82cd115815327786ab6f68827ab9579f9dcc5057eade9218b37137834d4c068eb7b818

Download Submit
/data/user/0/com.qq.cleaning/databases/pushstat_5.7.0.db-journal

Filesize
16KB

MD5
cc6c656cdadb7a3179de2825662b034d

SHA1
a339a617d0166b331816b415de217489f9571fa8

SHA256
8656e4959dae2f2828f12665f9fa154882a9e9aa543c152313183b3497771fa4

SHA512
18ddc7583f97f20f4d55fb699726757c0c84ebfbd12a85d195dc4129a50640bed0882c9e86c0708ef66c78e7bbcc4d4b1176223aaefa74d73f82b339771fc171

Download Submit
/data/user/0/com.qq.cleaning/files/.um/um_cache_1716901324388.env

Filesize
1KB

MD5
f2ae05411268c9c8d18baf5e95fc7fe9

SHA1
228737195638dc741aca9c473e9739a2e6d9ef07

SHA256
9e2550ba2dc5e3f219f0f0b30ceb531789b5f848fe00ff7438e50647f3698319

SHA512
7b75ff9fc6f66ce80a11790880d2e5080a6afa62a97c50f3ad1e603daa90e84bccd80b550c8518eb02c0af529b29e575423a51c1307123411cf23b01fb99ba71

Download Submit
/data/user/0/com.qq.cleaning/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
d1571ebe3475bda67997a3eabd0faccc

SHA1
754710b52bfbf5517d5fafc2419351ee3c26f618

SHA256
1ec0e2dd391010b114fac850c54d78b1224471b82e3549e320f674c524d99d49

SHA512
619fa6019bba79fc1cce0b63725556e413ee7fa61fd5ef62d553882a59447db7a923551670fbc360bd067f73d9ca78194d7f75b8d338489ea9b3a487c5a6a37b

Download Submit
/data/user/0/com.qq.cleaning/files/exid.dat

Filesize
54B

MD5
d6baf2a5ee52302022f5a187ab7f5ab2

SHA1
e331b0b0895c2dc537be120f86f85b9f8465ea75

SHA256
256b3f01645cd9f238df581c21f89796982b38b3e14b86847c54b44a14500d7b

SHA512
802c1584451ce72d97c774f2039a6fa18030603e9e57ebd6c7d122bc9d3eec6152e6322b743fe33fac8e0d43d065556986cdf3caad05393925f66f7a42bfbc59

Download Submit
/data/user/0/com.qq.cleaning/files/jpush_stat_cache.json

Filesize
120B

MD5
52b6c443ee8394d63c4affe2eae2a747

SHA1
3d5d3d5fb7f7ed71538f10bd1b8cb7f66bc580cf

SHA256
3827efb2dc40f8488929422a8d05e1ebaeaa8365cbc8afedbc43762e7b36436c

SHA512
af33dab99f511eabe4d14f3a5e5748bdcf0d941fda4d7572d0ef291a6592d8ac3408c7ceac97d3692b8ab9c1e5dba207f82877f9c68c51caec6185c253966217

Download Submit
/data/user/0/com.qq.cleaning/files/libcuid.so

Filesize
109B

MD5
cdb4afa80fe1333c256fc87533b74673

SHA1
6b1d1f0d95c0f5d6aa6249ac6ea0d47111e63c40

SHA256
67b0ac45e29f1eb33e56f30d20655c5a2e262c3ba9a643c2fbe92c6ed91d3d8c

SHA512
36b1f36099480b5f18bf374391196151f1cd1e703a4890152b2788ad352a2785917bf400023812258758dec6bebe7c961ab9d1adf4c5247dadddcf1d6e63c66a

Download Submit
/data/user/0/com.qq.cleaning/files/umeng_it.cache

Filesize
433B

MD5
92d0d032931b7f24150e007a9de27c81

SHA1
4b32b6a5479961900d810a3199767ffbfb7c1d92

SHA256
f53a9d699b750bd0946dbcc25dda078496305f8e92f3127a9f078b1c34172d3c

SHA512
efe12f18da6e8517df70849af2509962d9a49990dff9e6507a9bf250db16bce26049aab74b4cd30a57c4d763c304bc12a1c2f0db037509d5ba8b1dc0d749d78c

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
24KB

MD5
d0d8a3b1a321d3f984460dd3c014100f

SHA1
b765528342527a6fe2f13be825f929746dbddd19

SHA256
b09ace661bd6fe28ffc174f75628248d629389c0b6f03098392fe8ad7936c8b7

SHA512
49905eb98930d41b22a71e9e233cf58ca25cd78b91ac888a7872b507cf0241f7576f9ad1f46f99c568d083558decf4cc7e87fa673147c06ce33f1109a5e61ddc

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
24KB

MD5
bba2e71b977f2d15fd65101b5bec6854

SHA1
d4e14307510d59509be56f610c50fe3b32b10bd7

SHA256
cf3382f75d4d955dcac51d23cb8cdaac054a4b75283f7ffe1a9982ccea5af1c1

SHA512
5e85223a98c9b4f2035e35258e1700292bf1cb723dc262be5ce48b46ff05522e817c173f7282365d8c7206160fafbd58a937e0319e86313016e14dfa8857f79b

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
24KB

MD5
991d51a5e017f2d5d952f4a9430d2472

SHA1
8c119c8e84cd2dea5041e8adcd08e1c5911ddd1f

SHA256
b021f40f712310db8108c8875741023650a425fb833430a6f260249aa39ab3d3

SHA512
32e9b8b05363210b57ce56410d2ac78d3704e80279b31f41726c3d01d719275467f5a5cf02448f31d489a052459c5daef9dd03a167c4b6b1f0ac9faf6fd7a5ae

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
12KB

MD5
27010dc21a5cb7061c436b0f33a93f1a

SHA1
5292d5787a985f406e831278c409b60ddff2c53e

SHA256
6dc2594002462a54152f763d6fe4cb6e31064601608b610b5c04c7283c646105

SHA512
d6417b4580dd5876e6cfb82aa2de12a70fbe2045d2c73781fae72096157d5cec53bbd701a92ddbc9201e139a768eeb1dfd3a4593e5f93751f2cd8b455a6562d0

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
1KB

MD5
dc3658f3a418f2ebda8b6345dd18d1d3

SHA1
2778f10c5657344b18232a97a8f9792bfe0b39d6

SHA256
b3ebf773433ba6260d74d818546ea627aca51788f512ac471502c9b1c1c27dd7

SHA512
6f45519aca208ee109e5bc5bd86462bb19f90e970858cd48310db98ada73654d308bbc9aef3785bf4c1944c6e66081db8397f8312e705d22a8e1beb0f768acb4

Download Submit
/storage/emulated/0/Android/data/com.qq.cleaning/cache/447d5b6bea5f4b53bc64a65074c4569e

Filesize
778B

MD5
ff8b3f57b6057a325acce95fff6f7ebe

SHA1
0a8ecc673560993c7fef3ef383b762b17930755c

SHA256
6362d24b512c7dc840e9a2df7dedb40ae360ec87de71295a814678a8316d91a5

SHA512
499240681590bca293611ba39510489f2991abdb606e543e37762663da636b87b629daa44345e9c6a6afbf912d6572c21ab44f6220d209d0dfcd65053699e41f

Download Submit
/storage/emulated/0/Android/data/com.qq.cleaning/cache/509162bdc2934d178c33dc6323110f08

Filesize
1KB

MD5
1ff5a9c5bad69465eafa217e6819814f

SHA1
98821cbf2140171b1e6244fd032c8de83530151f

SHA256
e8d88a172f0044ee99ffd79b187fdfca18e502d2603d1d786d94c2e545ea6eb3

SHA512
62e253d3bf86e94855acfacdc0138c105030d138c26f1233df3c51b930669ead5244f04643797b87b66b3239655c59b3edd477fe97449434e8ad278950353b6c

Download Submit
/storage/emulated/0/Android/data/com.qq.cleaning/files/tnetlogs/inapp_20240528.log (deleted)

Filesize
51KB

MD5
288ad7c44fd8c473d2ba7135547d4ae0

SHA1
6497be79e1e537108130946dc074f780db67e56d

SHA256
3ac80124f21a910bdc69bc8c19148dc5ab46fd57f2602eb76d97799d882280d4

SHA512
f35d1e3b0d0a18c286058c54425abf211d7a716d46e6f57925b84fa7a7e44f15ae815b75dc386e776ebd7149f8c7b315edfa9f8e9f3e849782dc653f6062db26

Download Submit
/storage/emulated/0/baidu/pushservice/files/.info

Filesize
89B

MD5
388202c846baaabe1fce5e69783eb563

SHA1
365bae29cddcef6cfb01f2c01a426d182aed98df

SHA256
68a335b343d2b5956e70119dfffd59877f7e94c1cd2b4cbe5a4663ecbe931842

SHA512
f1133d11c30e70661ab4af893ff46928267d306ceb937013aece4fb935d45305f9fab28d3c053a418e4ca41febef13c74244f7baaffa50e832a6f6f29fe5af61

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240528.log

Filesize
64B

MD5
1b12347f1ff7e0e0c416ce9b2c9c0690

SHA1
6c0b3d523534f3370126c8cbf7bb70b08ffd76cf

SHA256
323bf282db4d42961e8068eec1c66f0686f9bfee8594fc95173031250298276f

SHA512
804d155f2dd3faa55b97464f348a99262a845569bc5aedcaa921eec950c580ec40e13f36316ca081c525c5034a5e6cfab2783bb392ae203f286a5b5a9f959a28

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240528.log

Filesize
62B

MD5
89a93ca54bf85f362afe4242ea4f8d28

SHA1
9f344419e2ccb5349ab09d493cbc8fe7d0f41e34

SHA256
a3daa85277a4451d43c03c442045d75538a298e6be6b46b4100a406eb736b4dc

SHA512
de37b0e5a3f021f6bedfa849ea56df2c66242311b368e949d0e8ec7026830ed202122139b27752c72fff1e62bf609c5bd6b7011a8056c652b179062b37dc93d4

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240528.log

Filesize
122B

MD5
2f8cf18e4c9bfd96a50dd52715d2a013

SHA1
f629fbf2c0f289d25bf22d4db2b421908a3c1528

SHA256
b7e6a2db79bd361422af9c775e18785670fed508af1bbd1249d7b5ee91ea64b0

SHA512
33ee7607aa9d315583abd5cb4397250065d15802fe96330fd4a67179b369618f93e434edf7697097d68190adacca3e1a7a6971640bb11930d54f837e07b3ff63

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240528.log

Filesize
76B

MD5
9432dcbed76a6b3443ad247d80a5d29c

SHA1
7d8195f3e8c7ecad9b78185c939f869b6168bff2

SHA256
96d9b1c00c94552e615c532f0094000db130d00e8940e23d2c438eafc3f11436

SHA512
f46d42813592ad74626bd910077c6a5636d5f5d730bf93e997640409cda85ed219377fa6dd305f1fd0a3304d82b8e2222a238c800ae757111e9425ecb02f3a12

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240528.log

Filesize
240B

MD5
c44f741ea5fe2c760ae173866ef4b527

SHA1
c8021a86e3147266e2a2e5bc5884335faf82706f

SHA256
2cf76fb887c622835c346f8b5099fd9e8ce268560a4ba71de977815302ff28f7

SHA512
86f1778e9213b83def7e760419db5ad6ecc15b6a387ca50ff774bb6adfea3674728cca4e554f7b0c286b8b9bb9f0b7d0c711899a28c2c429a464cb5fd06d7dc8

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
b25daeadbf8e77a69e2fc99cc76f461a

SHA1
127f6c2df7c8c3aba1e52706456eeb826541f4d5

SHA256
890331529de0cb4a96af327c9bb6fc6f426e9067e921fd3d5f60105b2538bb33

SHA512
91cdd1bcbd5620e77dde74166260e3357c3bdc1bb4570b7cb862cde49f2ae1460a2b662a7abb241f1830f8d5dd19326bbbfb1183f8fa1b9f6c103d776f5b22d3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads