Malware Analysis Report

2024-09-09 13:13

Sample ID 240613-eg7xcaxbqk
Target a3bf9b11433b8e4adabf7d5322c57855_JaffaCakes118
SHA256 b786f1c380bdc558ec3ff5adbbbd2a6ade997d575afe1f8032c9ba828e97305b
Tags
collection discovery evasion persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

b786f1c380bdc558ec3ff5adbbbd2a6ade997d575afe1f8032c9ba828e97305b

Threat Level: Shows suspicious behavior

The file a3bf9b11433b8e4adabf7d5322c57855_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

collection discovery evasion persistence

Checks Android system properties for emulator presence.

Loads dropped Dex/Jar

Queries information about the current nearby Wi-Fi networks

Requests cell location

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Queries information about active data network

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 03:55

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 03:55

Reported

2024-06-13 03:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

179s

Max time network

186s

Command Line

org.chromium.caster_receiver_apk_FMMusic

Signatures

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A
Accessed system property key: ro.product.model N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/org.chromium.caster_receiver_apk_FMMusic/dex/qcast_sdk_core_client.dex N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

Description Indicator Process Target
N/A alog.umeng.com N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

org.chromium.caster_receiver_apk_FMMusic

chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html

chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html

org.chromium.caster_receiver_apk_FMMusic:castlinkerservice

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4

org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
US 1.1.1.1:53 alog.umeng.com udp
CN 223.109.148.177:80 alog.umeng.com tcp
CN 183.240.99.202:80 www.baidu.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
CN 223.109.148.130:80 alog.umeng.com tcp
US 1.1.1.1:53 discovery.qcast.cn udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 47.97.217.117:80 discovery.qcast.cn tcp
CN 47.97.217.117:80 discovery.qcast.cn tcp
US 1.1.1.1:53 image.qcast.cn udp
US 1.1.1.1:53 log.qcast.cn udp
CN 47.97.217.117:80 log.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 47.97.217.117:80 log.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 223.109.148.178:80 alog.umeng.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.243.1:80 image.qcast.cn tcp
GB 172.217.169.10:443 tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 223.109.148.179:80 alog.umeng.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 223.109.148.176:80 alog.umeng.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 223.109.148.141:80 alog.umeng.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
US 1.1.1.1:53 alog.umeng.co udp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 113.16.211.3:80 image.qcast.cn tcp
US 1.1.1.1:53 image.qcast.cn udp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.24:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 42.56.77.10:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.202:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 113.16.211.3:80 image.qcast.cn tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 183.61.168.1:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
US 1.1.1.1:53 www.baidu.com udp
CN 183.240.99.202:80 www.baidu.com tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.61.243.1:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 218.60.21.6:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 124.225.141.5:80 image.qcast.cn tcp
CN 183.240.99.202:80 www.baidu.com tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 118.112.233.9:80 image.qcast.cn tcp
CN 175.6.254.65:80 image.qcast.cn tcp
CN 183.131.56.5:80 image.qcast.cn tcp
CN 183.240.99.24:80 www.baidu.com tcp
CN 175.6.254.65:80 image.qcast.cn tcp

Files

/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html

MD5 2603e3a7eba8b03af315c590c0ebeb76
SHA1 1843c16eaa2dac0570d41c0e3d306151289eef68
SHA256 501b8e6adc184ee1a1ccd7904e60566abf509cbcb1d17580fcd062d28b6b1e50
SHA512 1858d96de812f90e9a8d9d38ad397916e1fc606138708aac765bec26d3ded3d950852f1ee0ea5075140da6f646c4206178d58f066ef782ab15b7e8465579e152

/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html

MD5 531c9a595128f278cc3086d45874ed8e
SHA1 e433f4b48d3a504b13dd15482cf2fb90e7da1dd8
SHA256 4bf0d449bb3c6f6da2e20f889174dfb77fe8936a21d0e7a98945b394bed0ee18
SHA512 b34117c07b2b841b4a3b2a58b05a883417d5fab6959de17025d2c59052442306c52ae51199ac6e972f76acf8a95a503a3bedf6f28a4d96b66a52293e5d9f0c4a

/data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/paks/content_shell.pak

MD5 736b282401615ae39eb0f278759258f7
SHA1 730db06ab2a8409bb2ab2441848b7706bb120c47
SHA256 c487e0133b3a7e5772d5147365e41d2648a635c2ca2e66047661fc5222bf2874
SHA512 14ada472efbeaf0625e0a55f7e46b91aa2ce2a11cb86e235409f39532b2d68d904ddcc4d8c10b6e537d3e9ed9c3f43c981226f1aea752e7c5c5f34838533006f

/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/blank.html

MD5 b8639ac0df7466d734bb2a29d9da93a6
SHA1 3000732c8cbc68a569a3925d0a6a2700e07f415e
SHA256 12333f0a11a4c58c8bff33b44d4585b6bb142caf1b898985a69e44be7c6a8371
SHA512 550e8011fa7357a56aa0c1a9734767434342dacf2658d6781c03ebc226a5a7f02e82a874fec811f4c9603a48f7740debab0f8d2421682fd2f3fb42b3196a8ef9

/data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/icudtl.dat

MD5 016b7c560b53fe4fcf41f4b2eca9f61f
SHA1 b7e60915aeb077c7e4ba54f87b4b8b8c4f335956
SHA256 86030aafd3e4128b37d50bfa63aecad20bcccacd8037925f9ada49a40620394c
SHA512 867b84f196609c212736904ed733ca9c24a0e9d1a4d3b5246955c053b743801b4e7f1d0b44aceaf2cc108b80c06b016399bb8b27b97e91e0eeca1ce95b56a609

/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-journal

MD5 ac9e6012e129edb80a1a067f446a8110
SHA1 865e8bf1328bac693b81699d6c8780e94bcdcf9a
SHA256 b13367417a5265b6e678ab834677589b8cb8985b9f8565e833687202a1dde6ab
SHA512 b9ef9f388637ea25318b99e5f27bcd36d5a97b313f2203543488053c52d450339537368c99e3ee45a1400566d10d4a4fd1e12fa528723a9db9d7336642dfa654

/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-wal

MD5 6eba84fbbde490710090bd2609d8b8c9
SHA1 8f498098b6cca3fdd33c3e23b2448b343f70c907
SHA256 3199366061dc81e97059b7d7e50db01e0a0ebc8682ec9e84cfcf7aa729460194
SHA512 1a698866dde5fac2de598a5c1bd14a06fef0e9f9a846dbf33718178169af9b897541ad9712e32e04b83703fe63d7543e6d7cbd98340eb7dbb7b0a83691c225c1

/data/data/org.chromium.caster_receiver_apk_FMMusic/dex/qcast_sdk_core_client.dex

MD5 ab147b81633250fa32ca5cf540c0ac9e
SHA1 62baa3c371e27525bb58c118a09ba513701e0577
SHA256 aa20805be4dc4d479fab4e4fc0d19361af1decf5c552a66e3bc73d7f189d4719
SHA512 7c4a42a3f0cec037aad4c0968e8efe020cd16f20e62ea9a1e08320e9590c088b66f835cc87d49a21be2f65585acebd8937954334e0fb7a9414410961b9071651

/data/data/org.chromium.caster_receiver_apk_FMMusic/files/umeng_it.cache

MD5 23e26d893f9dc26a50c39c6a73dd050c
SHA1 08264a979aad5b3b68879c70f79c55e62a0b4fae
SHA256 1d0e6780efe827fbd638b8de5abf97eda466d7b2f095678529871e23cdb640c5
SHA512 eb4fcbc4713e2c257c2063793b7fb79370559ec582471cd9112a1c783b6f8157d06ba263e3244b12d848127362a50faefc178d148874d26e4adc1d7acfd0ae4a

/data/data/org.chromium.caster_receiver_apk_FMMusic/files/.um/um_cache_1718251029050.env

MD5 2d5cd144f0451e153dec3df7342b88fe
SHA1 3613c2158d6d36ab0a656b3d3610c6df042aee21
SHA256 13ed0e8c86b81d3dea8159205916662c4c9a9e96cb62c46df6f44be0e092b1aa
SHA512 cb49d646663427d3c6bdff71ee48e0e903d27d6d97556a8f741e31b922d7cd32ca15a08e09597a0d4020da004229131a6d4f0c0aa43b511f68398388af04cbc7