Analysis Overview
SHA256
b786f1c380bdc558ec3ff5adbbbd2a6ade997d575afe1f8032c9ba828e97305b
Threat Level: Shows suspicious behavior
The file a3bf9b11433b8e4adabf7d5322c57855_JaffaCakes118 was found to be: Shows suspicious behavior.
Malicious Activity Summary
Checks Android system properties for emulator presence.
Loads dropped Dex/Jar
Queries information about the current nearby Wi-Fi networks
Requests cell location
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
Queries information about active data network
Requests dangerous framework permissions
Queries information about the current Wi-Fi connection
Queries the mobile country code (MCC)
Registers a broadcast receiver at runtime (usually for listening for system events)
Checks memory information
Checks CPU information
MITRE ATT&CK Matrix
Analysis: static1
Detonation Overview
Reported
2024-06-13 03:55
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to record audio. | android.permission.RECORD_AUDIO | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-13 03:55
Reported
2024-06-13 03:59
Platform
android-x86-arm-20240611.1-en
Max time kernel
179s
Max time network
186s
Command Line
Signatures
Checks Android system properties for emulator presence.
| Description | Indicator | Process | Target |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
| Accessed system property | key: ro.product.model | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/data/org.chromium.caster_receiver_apk_FMMusic/dex/qcast_sdk_core_client.dex | N/A | N/A |
Queries information about the current nearby Wi-Fi networks
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getScanResults | N/A | N/A |
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
| Description | Indicator | Process | Target |
| N/A | alog.umeng.com | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the mobile country code (MCC)
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone | N/A | N/A |
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Checks CPU information
| Description | Indicator | Process | Target |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
| File opened for read | /proc/cpuinfo | N/A | N/A |
Checks memory information
| Description | Indicator | Process | Target |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
| File opened for read | /proc/meminfo | N/A | N/A |
Processes
org.chromium.caster_receiver_apk_FMMusic
chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html
chmod 755 /data/user/0/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html
org.chromium.caster_receiver_apk_FMMusic:castlinkerservice
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process0
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process1
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process2
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process3
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process4
org.chromium.caster_receiver_apk_FMMusic:sandboxed_process5
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| US | 1.1.1.1:53 | alog.umeng.com | udp |
| CN | 223.109.148.177:80 | alog.umeng.com | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.200.46:443 | android.apis.google.com | tcp |
| CN | 223.109.148.130:80 | alog.umeng.com | tcp |
| US | 1.1.1.1:53 | discovery.qcast.cn | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 47.97.217.117:80 | discovery.qcast.cn | tcp |
| CN | 47.97.217.117:80 | discovery.qcast.cn | tcp |
| US | 1.1.1.1:53 | image.qcast.cn | udp |
| US | 1.1.1.1:53 | log.qcast.cn | udp |
| CN | 47.97.217.117:80 | log.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 47.97.217.117:80 | log.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 223.109.148.178:80 | alog.umeng.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| GB | 172.217.169.10:443 | tcp | |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 223.109.148.179:80 | alog.umeng.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 223.109.148.176:80 | alog.umeng.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 223.109.148.141:80 | alog.umeng.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | alog.umeng.co | udp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | image.qcast.cn | udp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 42.56.77.10:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 113.16.211.3:80 | image.qcast.cn | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 183.61.168.1:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| US | 1.1.1.1:53 | www.baidu.com | udp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.61.243.1:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 218.60.21.6:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 124.225.141.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.202:80 | www.baidu.com | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 118.112.233.9:80 | image.qcast.cn | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
| CN | 183.131.56.5:80 | image.qcast.cn | tcp |
| CN | 183.240.99.24:80 | www.baidu.com | tcp |
| CN | 175.6.254.65:80 | image.qcast.cn | tcp |
Files
/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/tab_blank_root.html
| MD5 | 2603e3a7eba8b03af315c590c0ebeb76 |
| SHA1 | 1843c16eaa2dac0570d41c0e3d306151289eef68 |
| SHA256 | 501b8e6adc184ee1a1ccd7904e60566abf509cbcb1d17580fcd062d28b6b1e50 |
| SHA512 | 1858d96de812f90e9a8d9d38ad397916e1fc606138708aac765bec26d3ded3d950852f1ee0ea5075140da6f646c4206178d58f066ef782ab15b7e8465579e152 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/my_app.html
| MD5 | 531c9a595128f278cc3086d45874ed8e |
| SHA1 | e433f4b48d3a504b13dd15482cf2fb90e7da1dd8 |
| SHA256 | 4bf0d449bb3c6f6da2e20f889174dfb77fe8936a21d0e7a98945b394bed0ee18 |
| SHA512 | b34117c07b2b841b4a3b2a58b05a883417d5fab6959de17025d2c59052442306c52ae51199ac6e972f76acf8a95a503a3bedf6f28a4d96b66a52293e5d9f0c4a |
/data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/paks/content_shell.pak
| MD5 | 736b282401615ae39eb0f278759258f7 |
| SHA1 | 730db06ab2a8409bb2ab2441848b7706bb120c47 |
| SHA256 | c487e0133b3a7e5772d5147365e41d2648a635c2ca2e66047661fc5222bf2874 |
| SHA512 | 14ada472efbeaf0625e0a55f7e46b91aa2ce2a11cb86e235409f39532b2d68d904ddcc4d8c10b6e537d3e9ed9c3f43c981226f1aea752e7c5c5f34838533006f |
/data/data/org.chromium.caster_receiver_apk_FMMusic/asset_res/blank.html
| MD5 | b8639ac0df7466d734bb2a29d9da93a6 |
| SHA1 | 3000732c8cbc68a569a3925d0a6a2700e07f415e |
| SHA256 | 12333f0a11a4c58c8bff33b44d4585b6bb142caf1b898985a69e44be7c6a8371 |
| SHA512 | 550e8011fa7357a56aa0c1a9734767434342dacf2658d6781c03ebc226a5a7f02e82a874fec811f4c9603a48f7740debab0f8d2421682fd2f3fb42b3196a8ef9 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/app_content_shell/icudtl.dat
| MD5 | 016b7c560b53fe4fcf41f4b2eca9f61f |
| SHA1 | b7e60915aeb077c7e4ba54f87b4b8b8c4f335956 |
| SHA256 | 86030aafd3e4128b37d50bfa63aecad20bcccacd8037925f9ada49a40620394c |
| SHA512 | 867b84f196609c212736904ed733ca9c24a0e9d1a4d3b5246955c053b743801b4e7f1d0b44aceaf2cc108b80c06b016399bb8b27b97e91e0eeca1ce95b56a609 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-journal
| MD5 | ac9e6012e129edb80a1a067f446a8110 |
| SHA1 | 865e8bf1328bac693b81699d6c8780e94bcdcf9a |
| SHA256 | b13367417a5265b6e678ab834677589b8cb8985b9f8565e833687202a1dde6ab |
| SHA512 | b9ef9f388637ea25318b99e5f27bcd36d5a97b313f2203543488053c52d450339537368c99e3ee45a1400566d10d4a4fd1e12fa528723a9db9d7336642dfa654 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/databases/download_v3.db-wal
| MD5 | 6eba84fbbde490710090bd2609d8b8c9 |
| SHA1 | 8f498098b6cca3fdd33c3e23b2448b343f70c907 |
| SHA256 | 3199366061dc81e97059b7d7e50db01e0a0ebc8682ec9e84cfcf7aa729460194 |
| SHA512 | 1a698866dde5fac2de598a5c1bd14a06fef0e9f9a846dbf33718178169af9b897541ad9712e32e04b83703fe63d7543e6d7cbd98340eb7dbb7b0a83691c225c1 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/dex/qcast_sdk_core_client.dex
| MD5 | ab147b81633250fa32ca5cf540c0ac9e |
| SHA1 | 62baa3c371e27525bb58c118a09ba513701e0577 |
| SHA256 | aa20805be4dc4d479fab4e4fc0d19361af1decf5c552a66e3bc73d7f189d4719 |
| SHA512 | 7c4a42a3f0cec037aad4c0968e8efe020cd16f20e62ea9a1e08320e9590c088b66f835cc87d49a21be2f65585acebd8937954334e0fb7a9414410961b9071651 |
/data/data/org.chromium.caster_receiver_apk_FMMusic/files/umeng_it.cache
| MD5 | 23e26d893f9dc26a50c39c6a73dd050c |
| SHA1 | 08264a979aad5b3b68879c70f79c55e62a0b4fae |
| SHA256 | 1d0e6780efe827fbd638b8de5abf97eda466d7b2f095678529871e23cdb640c5 |
| SHA512 | eb4fcbc4713e2c257c2063793b7fb79370559ec582471cd9112a1c783b6f8157d06ba263e3244b12d848127362a50faefc178d148874d26e4adc1d7acfd0ae4a |
/data/data/org.chromium.caster_receiver_apk_FMMusic/files/.um/um_cache_1718251029050.env
| MD5 | 2d5cd144f0451e153dec3df7342b88fe |
| SHA1 | 3613c2158d6d36ab0a656b3d3610c6df042aee21 |
| SHA256 | 13ed0e8c86b81d3dea8159205916662c4c9a9e96cb62c46df6f44be0e092b1aa |
| SHA512 | cb49d646663427d3c6bdff71ee48e0e903d27d6d97556a8f741e31b922d7cd32ca15a08e09597a0d4020da004229131a6d4f0c0aa43b511f68398388af04cbc7 |