Malware Analysis Report

2024-07-28 11:29

Sample ID 240613-fhlk6sycqq
Target a3e1694ca91705db999da192d4e01981_JaffaCakes118
SHA256 619f998d8571e7300c6b54d4e5e9f96a8ed1f2b7dd3eda50df348bb6b701ba75
Tags
collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

619f998d8571e7300c6b54d4e5e9f96a8ed1f2b7dd3eda50df348bb6b701ba75

Threat Level: Likely malicious

The file a3e1694ca91705db999da192d4e01981_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection discovery evasion impact persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries information about the current nearby Wi-Fi networks

Requests cell location

Reads information about phone network operator.

Queries information about the current Wi-Fi connection

Queries the unique device ID (IMEI, MEID, IMSI)

Queries information about active data network

Requests dangerous framework permissions

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 04:52

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-arm64-20240611.1-en

Max time kernel

3s

Max time network

135s

Command Line

cn.uc.gamesdk.account

Signatures

N/A

Processes

cn.uc.gamesdk.account

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:57

Platform

android-x86-arm-20240611.1-en

Max time kernel

179s

Max time network

186s

Command Line

com.tomato.joy.qqdzfk.wdj

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/ucsdk.apk N/A N/A
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk N/A N/A
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk N/A N/A
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk N/A N/A
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk N/A N/A
N/A /data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.tomato.joy.qqdzfk.wdj

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq

/system/bin/sh -c getprop

getprop

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk --output-vdex-fd=155 --oat-fd=160 --oat-location=/data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/oat/x86/cn.uc.gamesdk.loader.odex --compiler-filter=quicken --class-loader-context=&

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk --output-vdex-fd=79 --oat-fd=146 --oat-location=/data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/oat/x86/libcn.uc.gamesdk.sa.plugin.init.odex --compiler-filter=quicken --class-loader-context=&

ls /

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 sec.umeng.com udp
CN 203.119.169.41:443 sec.umeng.com tcp
US 1.1.1.1:53 pingma.qq.com udp
CN 119.45.78.184:80 pingma.qq.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
CN 203.119.169.41:443 sec.umeng.com tcp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 log.reyun.com udp
CN 54.223.95.86:80 log.reyun.com tcp
CN 54.223.95.86:80 log.reyun.com tcp
CN 54.223.95.86:80 log.reyun.com tcp
CN 54.223.95.86:80 log.reyun.com tcp
US 1.1.1.1:53 sdknc.9game.cn udp
CN 203.119.169.41:80 sdknc.9game.cn tcp
US 1.1.1.1:53 cdp.cloud.unity3d.com udp
US 1.1.1.1:53 ulogs.umeng.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
CN 223.109.148.141:443 ulogs.umeng.com tcp
CN 203.119.169.41:80 sdknc.9game.cn tcp
CN 203.119.169.41:80 sdknc.9game.cn tcp
US 1.1.1.1:53 plbslog.umeng.com udp
CN 36.156.202.73:443 plbslog.umeng.com tcp
CN 203.119.169.41:443 sdknc.9game.cn tcp
CN 223.109.148.178:443 ulogs.umeng.com tcp
CN 223.109.148.179:443 ulogs.umeng.com tcp
CN 223.109.148.130:443 ulogs.umeng.com tcp
CN 223.109.148.176:443 ulogs.umeng.com tcp
CN 54.223.175.26:80 log.reyun.com tcp
CN 54.223.175.26:80 log.reyun.com tcp
CN 54.223.175.26:80 log.reyun.com tcp
CN 54.223.175.26:80 log.reyun.com tcp
CN 223.109.148.177:443 ulogs.umeng.com tcp
US 1.1.1.1:53 ulogs.umeng.com udp
CN 223.109.148.141:443 ulogs.umeng.com tcp

Files

/data/data/com.tomato.joy.qqdzfk.wdj/adpsdk/lib/adpsdk.apk

MD5 a70e38de7f4632734e191a8f6dede493
SHA1 be11a122ac973e2d0cc24237af55605ea76a0330
SHA256 98c7e6b430330578aaf1370f541e03487428d675059bd2339eb0b8bc6099bfe6
SHA512 9be2bc0c4a81eb2f2645ee362c7038f0ea8723a295d9d92db13950c2b5acf6ad45dc5ca5391a7bf63a38f318df2755ad86d8981a4fe25c8b89159b66e5a7a602

/data/data/com.tomato.joy.qqdzfk.wdj/databases/tencent_analysis.db_com.tomato.joy.qqdzfk.wdj-journal

MD5 b9489387273b373f4217ce694fd93909
SHA1 0ae3883805edb63a0afb7df111d2a3bf14ae787b
SHA256 5765a234220237301109dd87b4748e64defe4bfe2dff5641196d901b65b48da5
SHA512 60fd9ec9b673052a104657c9761e1f7aa2ded94e7e7a85a4961da5447234ff7f912eb7016f4ba141fdcc195a21384f562e9d178f8714d14e2dd4b86450b30f3f

/data/data/com.tomato.joy.qqdzfk.wdj/databases/tencent_analysis.db_com.tomato.joy.qqdzfk.wdj

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.tomato.joy.qqdzfk.wdj/databases/tencent_analysis.db_com.tomato.joy.qqdzfk.wdj-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.tomato.joy.qqdzfk.wdj/databases/tencent_analysis.db_com.tomato.joy.qqdzfk.wdj-wal

MD5 002e5c65e111297de27693d6a91f4406
SHA1 de0bb6dd5deab45c2adeb73f1af325d2486405da
SHA256 b8f6b987b97e39e3ef5ea2645a167d1c9f51d1083bfabdc13994748199498d44
SHA512 3e149ce1fe8737a1a76b1eb89546c99f9d29692f78e31059b683d787f267073e34ab7556c7270a8124a25d34cd413a6515c257a33427d2640866e533b534afa3

/data/data/com.tomato.joy.qqdzfk.wdj/app_06851326-179e-4f06-8472-d5e78a1ab259/be7b7b05-7ca6-433e-b4b8-e26585aa3a9b

MD5 ac66d58ddabc53ccd1525b8f0d289d0d
SHA1 9e2185a6c12f88bb10443202b73cd3f2c41f7005
SHA256 ad9558493bba19053823079b3ba169d3dece407e2e8d9f959f512ac36d2ef1e6
SHA512 98416daab37637a35deffe2aff7fb08c3d155f3a8e945f4d7aab4cb385928c688897b4837618554a2c9bc59782d79688673fe8484b69bd98d2dcd9e66ed22878

/data/data/com.tomato.joy.qqdzfk.wdj/databases/pri_tencent_analysis.db_com.tomato.joy.qqdzfk.wdj-journal

MD5 d32a73758e29c56e440460a23b7b013e
SHA1 b9092b35e6bd01b7334591b3f791e5316406dd0a
SHA256 0d8337c2c23a75e63b91327b3610358026b35f8a2aa7302378034f18106fa409
SHA512 f2f99031462d97806407ac83c059b510077a9babbba1a940bbc75c5f76dae8156a076dc32e0943ccc976bd9acc5e067a18268d124ec835ba664d6709af63ed60

/data/data/com.tomato.joy.qqdzfk.wdj/databases/pri_tencent_analysis.db_com.tomato.joy.qqdzfk.wdj-wal

MD5 9fdf29f68bae9713a8cb719ab447a3ee
SHA1 08f9c9ae7fcfa42984d708b96597671ad7d49c03
SHA256 5bdd17c54bdf9f45321ba4074eb3f8d7fa931cb9b2749f682b0b7b0150fe27cb
SHA512 8cb98e70d9771e4882332f94508faa676e06154e6361bbfb99a591fc739ee98371495e6cba2d4447d942d0bed376cd4f067535626666f7b68895db5ac7040bef

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/data/data/com.tomato.joy.qqdzfk.wdj/databases/bugly_db_-journal

MD5 b9fb43b662aadd6ee6e4d17f560f7d96
SHA1 065bcc265f0700b808c9a7702b9a64b7a102f01f
SHA256 65f3033ad3bae1ddbfa443a68390476e96428c5a525cf80e3e56a4e55131f5ed
SHA512 cec5fb4f18fdda302c391a48b86e8fbf8571d6092657681821ef6bb5e411330d00956b3b4257f3be6dcf9522fffa06f15d8cb75d8b244ab1714ab18d68c29125

/data/data/com.tomato.joy.qqdzfk.wdj/app_crashrecord/1004

MD5 32b79c75ef02922c44c735e2636b9b42
SHA1 e05e6f595f992612b983f4abd488827dc55b4dd0
SHA256 f9802c89b292cd207a223d82b91fc1dfd60dd494f01070d4aaf8d3023dca1608
SHA512 47780ce2365747a0c8522413608e918bcec0d00156b4126acc57b2c8fdabcecd4f1ca4c932db907073402b6b83b9568cdc04a825f68941cfcce5d237f29a1b53

/data/data/com.tomato.joy.qqdzfk.wdj/databases/bugly_db_-wal

MD5 69a740d6c7eef7bb1ca28b6d201bbcb8
SHA1 c741e3d8a3907bb9a65e3b604e6e7881af76179b
SHA256 ec7474897d195a201024a6b4f825641909a354f1729820bcbfdd73287e3fbeb5
SHA512 8f9676055cf8a28cfc5e1374494a20bdbeb623c54f5a17a426e34c55311d954e927609e15765e012194e6c5ac4e32b6b25459c94a1e7895532dd2b20bfce2388

/data/data/com.tomato.joy.qqdzfk.wdj/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 d32b681c2a76b1f554a025160df96f5f
SHA1 9536d39500487bc2b09e2173284faaecba902e42
SHA256 911e6b20ca74c08248bd755c9af92ea60b51aed36d13bb4fb7800b425c135160
SHA512 a508d1966ce7e1daf54125c7bf4c17c6a7fa3ce5c4430359eefe6616a0772e4c9057732a72d06fb4fafb0f081242a321c70a8ffb74ede46f51a3fdc427ae1d5a

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 0c22af95f902d31c11cf242a09f1698d
SHA1 6ae03dc726fe0e7ce046d18a4578eb18a39f3b7b
SHA256 b204972bb6419257e6db55556b77ca932c15d0e3ef680be6e800ca4d1b5d9052
SHA512 7c062d50b5db6b1ff4eb8e779bf6fae74767f24bac91be446c99add155d4add3a6a3673d455eb7453924f6ae9434081a97589533ea341027f2b24de48bea801a

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 20b2a7d893eb76dff7119d972abf0cff
SHA1 da1ec941d7d24668b58313fc39fe07177e2060fd
SHA256 ae6869acb0cf9a685685c89d67b36461565e42fb96753f98142ebb88cae4c6d4
SHA512 647dc81283642d09486d9b1f47357ce240e9348de06b375601b629dc94ca4b290637f552e52d52db24592b6477b4415b201fdec43e0fdebbddcbc4cdb6386cca

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db-journal

MD5 a1d1b53a50a0383822562de84711473d
SHA1 3820edb29fd30ac1a1875cffb759a730513e1f7f
SHA256 3cc0fd5a026d1648f5bed189dd95655b9984810d6dbc3cf88115174b5537e61c
SHA512 ace70da0641c1c83e9050a589dd5263a5a4a4be77fd0b8f09f4b274969c94502bfaa8e0881108295aa1be156910b59855a68fcd293e71fccd2041a85bec6a4eb

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db

MD5 0adda9c85a5e4808f5b1b74c0a8591a5
SHA1 5048107883ab1e345af9cf2e6849ce46e0e612bf
SHA256 1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1
SHA512 646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db-wal

MD5 b387940f60945be2810198fe75dede35
SHA1 da74d7cbd50ea57bf85fb92488290e0fd54e1b4e
SHA256 2dd8c09ed621a18efde725c320a1f6d523c72d77e97d58a8198cbb64755e2af9
SHA512 ee3cfb2b1e3116fed45047ab9e2144e0a81bed9097e57d9e5c215c63c7a87390e8c97f759cbf38c88f35f6a99ff9b05ae7a25fdca0420ea4bb9ed80419af5628

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 8a4bcf88c99c4d70f61c2eff8ad0761b
SHA1 7b5a4d4da505f49cbf2fac9ef28b28a1957473d7
SHA256 35605f53b2f7fc495df8929c62ac7e1c00244cb9efc9ad684a1739f5cb9cc36e
SHA512 07de59032d0d7dc9b06bf320037a3bc775a07c153ea689d9771ae98975f9c167b7316fa2c1fe9d101da5955b5e4e26c8a6a1ed80207b48fd01adb3678aec5f1b

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.ucgamesdk.log

MD5 ef1ff434560a343fc2891769f34222db
SHA1 80ca172575b4891162d6bd60d70daee5a651361e
SHA256 7619bf0c8db2b784c6542827ad3f1ba7c2eb9cd85dcb7e8f3509c470f8871983
SHA512 1c998eca010f18fb94e57d19d1b1253e6a35689195812e70e362f7d6dbd32e525aeb18d078cd5266ae2a5b80b795743b2943d97bf1c6f34cb015860a6fd47fb3

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.ucgamesdk.log

MD5 b4350cae4aa1b15fa6cf1de31b1c949c
SHA1 5cd320a9d79722fd45d899a5444f03886c1e9e95
SHA256 726bf8eebcd4b61db07fd4b391d3c4e2bed9bb784875819b982741817a92bd11
SHA512 49ba8320e669e3d026a3adb86ec62c9ab2e51a120b9b59f7ec7511ae5f2b5c818bd5562067a3f6d45edf5fba316f6b0b55b6e4e92612c2556d046574ab08122e

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/ucsdk.apk

MD5 3676be0cda042f75f4909fe7ef924516
SHA1 0c189e4ba001501a986c0bf6661b8c3e173380a6
SHA256 3a2199218dc8d205146e574d78860c2e9eb1b6a78a4a1da8fb4766df5968144c
SHA512 40c42af78489da6d7be501091a1241967cabf0b8314ca3ece666c48bc7af92eebe692cf2eb97b8980bd361b80ce99c18124297a7745437c0b63633f2dfb69abb

/storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406130454.ucgamesdk.log

MD5 e256f17f0fcb3800a3681d92621671e2
SHA1 8c1e706d42bd70415e7e974775d1ef0aefd085da
SHA256 20a1d5fbb75e266ebc7b133acc23fe6d52e85c10e43156a910a08b1d8ffee3c8
SHA512 e3f97245d0625e839028c5780329f9239193b93081354c512e8c50fe0cca927fc7acf7136d782e320014f24d08dc01639c319c61ac07a0401b5cf32ad1adb51d

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db-wal

MD5 ed0b439a39e9f3e96f8c4edd4e7557d1
SHA1 630622077f597a582cd83fbc5fa9d093ff491410
SHA256 3209bc401b29243db016ded10c40ac6db4d20ba11aef5f341cd7ed7d5286ed0e
SHA512 7377daff7e639de7914cad97f082b61f5785711e872bb0d6d059f2fcf0b6deac95f1a0f1483159d5c22ca31a0ec78676cbbb40edd76e35e36bffee92f0ffc93e

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db

MD5 4bee1aa0d75e613022eb56337088689d
SHA1 0c91b228ca2988563a7a74130e30d0547b3d48d3
SHA256 2ebe6a6397a51ed2f70f13e7e2898284326f38ff2aee803041c2d7e766ceb332
SHA512 83a733a3588b5013495242d0fc95fb3c90cdde4f7c96a4f24aaa5074c51995006265c352fc2818b837a93eef316fb3b76d84fa318688da076a8273b2fa06a822

/data/data/com.tomato.joy.qqdzfk.wdj/files/umeng_it.cache

MD5 708bd9b7704a95ddf1e376cd19fb7014
SHA1 e4a73a173af68767434d9eff1f80ec21b711131d
SHA256 2290767b95612aa1d8e4d075c53cc21798d15ccfa448f0394cefba0df3dfc4a0
SHA512 cf8257b1027e97466d50c19e42694238788c82cd03f9a8d11c4b06df59b282db400ced6be7625641b354f69b0008537663a9d9e6f00d8aa397317abf9348f900

/data/data/com.tomato.joy.qqdzfk.wdj/files/.umeng/exchangeIdentity.json

MD5 0dae7437da819fa3f304aed6dbc8b0a1
SHA1 9277e37d2dce65a002ae94623aeaa4677e004e7d
SHA256 91da2f8c07354f4ac812cd8ef547df1a4b8f992dc49391b9ee8f82b7bf3737ed
SHA512 d8d65406b154168dfaf3565c5b48fe1dc69d551299e1bf14a73e874d20167a062519a79f2f45076b0805ad535f4f3ab3439114c0e2e388d723654a4a44a9d893

/data/data/com.tomato.joy.qqdzfk.wdj/files/exid.dat

MD5 9d3b6fbb3d88237aeb982248da2ccf87
SHA1 c98dfa001727823f4ce48eb7d33a4fd09aee98db
SHA256 7b1b9f2be9de8039e86b7b8a6d2a852a9058a7ce209877f697ee32cb0d6c3aef
SHA512 768b394c25857ccb2005d3418d86e64a5c0962d04c4e8f49b3702ca90d3807d4cb974033ec5d63d0a753c61cca8f4bcf034bbcdb729060327a32a91eb81130c3

/data/data/com.tomato.joy.qqdzfk.wdj/files/.envelope/a==7.5.4&&2.0.0_1718254483551_envelope.log

MD5 1afb14113270d08251ef599a06625dbc
SHA1 13ddbf009e6c40a8a412fe83746146e5883f404f
SHA256 1b16be5949464081ab9c8ee8a262314eb58091f19b6825580d7800b7271ade61
SHA512 fafbb101dbb35d8b1fb3641f56f626587b8195db33a924a5f9ebcea0fb6d3dae957a8e52f361a70055ee446c11318e46796a26ab269aaa1bbd42124ee54df1a2

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300000.bdf8c5f6/s

MD5 9c26d885abe4a5c635fe449b4033c26f
SHA1 757d690f996551967d2a76f473502c9a5836cf4e
SHA256 68c1aa7e6a40481334007d475dc74d37c8bf570f617f7698181660acced40380
SHA512 1820263ddbf19bc20b057c08dd826a9157971f30d17fc7e958cdf7a95510f3ec6920504c4013f90dca37adf76a0f7062c810dc6dcbdcb52dd3a4ba8e75dab784

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300000.bdf8c5f6/g

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300000.bdf8c5f6/e

MD5 de0d47ce59bc66956e81a5ba5084950a
SHA1 e906bac492b0197e84db5453b26b8fc5ce394b8d
SHA256 25d226518bdc23a0e2cadd1110af620ce07ee26a1c1e307fce7c1a3c9aa09af1
SHA512 b75e0e2283ab43c2262ac50c71eb02142416d95712344eb99a14f4f815e638cd33502cbed468c8e92e92b38d1a25b4817f84ffef96169d91d538d6105ddc5d53

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300001.bdf8c5f6/e

MD5 89eab90c2835f6efc1af62d80bf82daf
SHA1 936a25d792c95870243273618b75b408fc11add8
SHA256 1b3faea773084af9e2e9cb98f96679f3a6b7249878ad030d5e2fd4842d4c65c5
SHA512 df6bb0c4a9cbc5e28469ebec605616608d841021840b321d164e3888ed450ec2f13fff372d3e6bde05539b221ed8cdb23c8e42a9afc48db9cc2a8ead511fd15b

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db-wal

MD5 0267a1432cf081dcd249b4377b0b7df9
SHA1 411c8960146c5a8398463c3babf6d7ee82113496
SHA256 2eca8e1b6541940cceaae947308b1f36ad645feec8fcd770ee416c630bf6dd93
SHA512 c731d60c26ef9b8916f83529c4ac6fda0a0709a66076ccbbec2c8bb634a402d6a817620839dd07ce93ebbc2ffcc9d7de1132c132f51cf8a374b360e414e03bff

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db

MD5 dfc31c8720e27af87db0816be2624c29
SHA1 1342db50e256ae59b3db027af02bb64d0ff70311
SHA256 fafb875b8d66541d58333d6339c3e240cb08ae97fbef68a8454b2bf6ddb6b317
SHA512 2f98c9744f2a292cf8423f2c153e6f37727337b01fd2e54749031531137f15479f763fa7a309e50b50960139ad0751c14378e7020b4c7584a6a21b1e8c8df4a9

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/values

MD5 cbff027e62026831c94fb6d865f36e0d
SHA1 374d7706fe121ff528f00ec374a51dc5566081e1
SHA256 0ff2f804a8d0ab8ee4266fa70efe8bc13044f4c164979cc87d29d88de1921873
SHA512 76d3bdb58b1dc84ea3be5ef360fdd2cb61b661a822609b2cbe839d8c9954e30fbc55cbcb553801ca003014000b292c445f11c3455e5bd1ea1442ace5adb9f5f2

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300002.bdf8c5f6/e

MD5 892eb2c2c8cb8fd4e8cd97a198cc63e7
SHA1 9b65f2eed74f663ca7856a2ac2f6d6601a4eccc4
SHA256 aefc08404fdaafdaf6405a0ff6fb3ee6be2bed06a76ffafa5ef6d725235f4a13
SHA512 4bb33c7802ed2fe9cd48d7179de3a9e0aa85e552f3b0eb246c4d53c5eefc12273ca96def0579131f32148070444568bdde62f91fa0059170ccd403e86912d5b9

/storage/emulated/0/Android/data/com.tomato.joy.qqdzfk.wdj/files/Unity/local.2837a598c56897c41a25933bf8aa1322/Analytics/ArchivedEvents/171825448300002.bdf8c5f6/e

MD5 5ee1510311375c3cae11e9dfe2020855
SHA1 d1d20acb7bfda13f9fe89c126843d880778a9936
SHA256 6c2ec2bb8f635c84afdde2121462b6f1460597ab9028db12b14da44ef25734ca
SHA512 938fe25b46b5e960be09a510d1ff43bec0c844ada50f02cfc8797a10c1b9fb34ffdc647ba8c40240d7547b0103aceb90b7edf0de2dfae5ba0bf72ade31b2ba28

/data/data/com.tomato.joy.qqdzfk.wdj/files/.envelope/d==7.5.4&&2.0.0_1718254484284_envelope.log

MD5 fa8509a0094b251b379646e29d106439
SHA1 e6ecdca8a30fc2f50a3854af90daa2e32ae36299
SHA256 e432b7587e5a379195878cdbd9f51a53e457bc5897d3014771acf90bcc07369d
SHA512 6552a04dd79f6e63c0303d9a58f1725a000e7783c146303c084ea0e97348ec3d98509690e0f24ad573e3e251e6b8052a714666bbdd5b116817c81cfc9cc57e71

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db-wal

MD5 986f5dab50bcef4d1806df8a9af77f31
SHA1 75ca80ff4553b57ac5f64a7df38e6832682b6cb7
SHA256 11702ff0509dd5c55c9285313ad673ee0e2877b1cfaedb085422a98a2f54ae13
SHA512 c10ecb1239d1969a38b977eab37d891d439b97bdc0a4f92962be02fb6f552bb63220dfae1be71fd235360f12a2d9d21fe0207721f36e6f83b2ad1ce8cdf2d82e

/data/data/com.tomato.joy.qqdzfk.wdj/databases/ua.db

MD5 5bd1d9d62fdb376190fb0ff0917f2885
SHA1 447ba51e98f5b879edf216e2981369d5e68c00dc
SHA256 ddccbc540e8df517baf6e5dbc39d39bb43dfea3f0b45ea96c39ef3b631cdd392
SHA512 620f8a1bb203373d266634aeede1d43b6af87af399d6ae54e30c6fadfde66a2f5c6fc0e5b1adb017db8dcb1c2642efe60b604ef1118e756052f020d9d984ab30

/data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/ucsdk.apk

MD5 d9973d615741ce0ce7291143faa31c9c
SHA1 79ceb4077d893a5dfcf02d89be199f9545f5f8d7
SHA256 a90bc3f46a237dd00e284911e17ae2a2b1fee1ca878c1bcc13f1a8181589bdbf
SHA512 3cad58956dbcb5e94810f396bfff1c4bec11208d53c0aaa05af7a32a17d33c520eee7a8db14888eb290d01d460eb3932d3eb6973444b275fd061b765f3c0d994

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 41e3e395777feb468b56f6a288e49db6
SHA1 48789493cb84993dd9fbea4b99051b06d5797f83
SHA256 e77298e70527c3c5f989d3cae1939731a47fca9146d95b236924ca5dd3cff8c8
SHA512 124430b9f547a8e50605cd1da52f266cdd059264036ead834d24e321f567d58df5432749c1df7fe61cd2b305f349c66bffdb287585f0733886d7bf9be00ba000

/storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406130454.ucgamesdk.log

MD5 6281dc5dba2ee56875ae6477388965ec
SHA1 8eb46b01b8a21a5a22f000e53b1f333370e7a537
SHA256 5edc6fd047c682ccafe8e448fc7210ef6875d4f03d31ad9eb2d90c1ce2b6d1cb
SHA512 918a9c4faf5aeb379dc298387e7120e7ec2dea2d7afe5a7a9fcf7e927b8916b3d320a1bb0ef6d94df440b34f1080145bb4b2d17f0888930d90f5fd2176577aeb

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 d792729b0b56f4a5c6bd317792935fa6
SHA1 908a0501b7ec2ebf567a4336bebf4d5d7becc3d2
SHA256 b5e755a12193204e075319eb1e75e2b25ef120afd43bc2834ec646725b26ab03
SHA512 59818437a1170e91d6cf9d09a1f754e4ca36bc1590ccbdb7c238a004fc3b7b156aca9abbc7980b8eafe58e2f7c1c3f905cce2cfde4a6dc9a707bbf6aa0c75e59

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 3002cdc902ca459b6435c02dbd9646c4
SHA1 96e1af75c9bdeef8479d381cc2971153470890b4
SHA256 9ddea87ed06fb75a1b1ad3c9c8ed03c80fa23dc220756246a9c9dec9cb786386
SHA512 a49f1b532835c5af9e4bb054bc5f00fd3e911339fbcf1abf6e58d98adf5c5f6344b6d70c573fd63712bfd7f1867d67217458104e93e472c868b40774f4779f76

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/lib_ucsdk_softlink.so

MD5 f902a4a7afc334a98de56f3c18eb585e
SHA1 3fb1110c0ef85cbc4a1fad75104ea561666f6e0f
SHA256 43d2a01f78e1d6e77cec7cebcde9eec25d2ee91f72594e149405b8fd537c61fc
SHA512 65a8cb476577c1edce977d01e788bb85000ea4219eee158321a5475c7efa8c3bea401bc3ffd7265ac4e9623837509eb6341137b5e93dac4a38c7607513db1100

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/update-1/version.ini

MD5 a7f48b3f8bff5f597eb49106fc018a60
SHA1 e17af931724a63c6a977990c12150222ad6bc4bf
SHA256 740e6032db2818fb321c402d1eda642bcf53b6c3cdff0091ddf36b97b65617e5
SHA512 ca14ff84ada27f90af562a726a68d61e7798709105773783d7dfa60c95d60af62b5c2c786631d13ba6fb652454321489f3bb209940d35d945693353190a7fde1

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/update-1/cn.uc.gamesdk.loader.apk

MD5 35406b0ab3a51683e02deaa0412c7fe1
SHA1 b879e851b3f032a26c03b376b04ed5c1ec29d569
SHA256 13cc40f0ce40368f22a92afbe5ed8459d19c4cf1bf33a69b7a050053241e4c34
SHA512 a2ce81bf27642e59ab7c874a268c2695b44df073d3b59552334d3d3b539b232dbe7f5eb46d9861bda7f25ec11ae1b615d716df079048c1cb7493931ee2af8914

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 6300600d885f74770aaa1bad85f08e09
SHA1 30a71701f40d29727945453c468331823525703b
SHA256 52f240fa890df798e0ec6a089f1a4392ae783860b1ba5c4fe53bb419a55649ed
SHA512 ee395fdbbfeadba6a351ddf6d1c6be1ef9d2849dcc5f914ed768b28e2d4637581b1a268c6f83de84c4f2764a8509666633b181fee30dbcdedf834763e2ac515e

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/update-1/.verify

MD5 7dc1596714775a47f3e8a266d76f91ac
SHA1 34c6d912f2880d88ed7c37c6e426eb9369815b9f
SHA256 9a0800c5a613b4c208d8ca9c254daceb7db67c905e804ff8285293ad1325b638
SHA512 0e9144b8c088e0616f7407827cf7dec1980bfb018fa8f4f32ffc2fff4c0c7869045619068b1c5017a0fe38bee649556ed6cb5ad36da98f2169f49e9d9b1861de

/storage/emulated/0/ucgamesdk/0/logs/warnlog/warn_2024061304.preload.log

MD5 790c8e84ade44dce6c62ed6b08f7a2bb
SHA1 7000ae28e75650b9790b7e98e4ecf612b28ef514
SHA256 b8b49a6deac0b25d9e529e233d4ce86bfbbfc8869a52b14f01f351268b1f709d
SHA512 2b9140302126c28383e2b56b35ba82924356eb362f355d92c1a8e1de47d5ee74ded08c5590b352f10d5df27520f132c7fc834b81f047e441fcb08bf3e614f679

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 25fd78f200c2a2cdf93a2ebe072be3f0
SHA1 a1124e1e351d85d322dc122e6003e15d216a0d74
SHA256 3e97d5791cb5ed2efa745c3f142c3237864ac5f7eee78f9fcfd08b382c63d05b
SHA512 8c28edb34cfd824b76275e8c1d4f33c59938ba2eca5a5db1a54d8b426a24abb6b270b28e3efd7943e0ec848c4d4fb67d511cfe1468024c272e8868805ea7b5e7

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/lib_ucsdk_xcrypt.so

MD5 194d8a0c56dbc4c7a53fa4f1fc61691e
SHA1 490db4ae2de4717ce09ee7a0fb31ef0032fd9d27
SHA256 1cf2be8a4b7b94a3331edaa056edfa8aac1ae2fa5834ab4dd847e0d5241ea63c
SHA512 31e07244c247fc6ac713fc3ed606b2fc529971b8379efca45ab41cc049e1d39453eb7a3d53bb2d05ffd800c25b07c561a7ead3d2ae6313855ad2164510f229cb

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.preload.log

MD5 87ed3ea16fec644fef008ebf784db843
SHA1 9afb06558f8e70d9dbb887885c8ce41601d72fb1
SHA256 ba5e2df6a5ec133d5735eacfd08dcfaae47861c1fe1d47b44410241c4f60a1a0
SHA512 7e935b9ac63fc9902ce713e340901099c7c1352230b896e3bec2d0713da4dde47a66a8178af96f46fa07deb2dcc89411f74479e68ef32cbecb8286404ab8be8b

/data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk

MD5 fc67622de120d23fd958b5868718c8bf
SHA1 d447980d7f70a64880fa22ec959426954c53422e
SHA256 ec736beb744754377ec042af0dbbb20a4b02e9b2dc11d82e616d0c778ae479be
SHA512 e614b8a1eb92f7c5950c545f5bb530159842be73a51eb4d888378565c81113399d41f53f8e13cacdd7d624e335c7af8788ed9f1b44f96861cdafbfa83bb3afcb

/data/user/0/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/stable/cn.uc.gamesdk.loader.apk

MD5 403d9241d32b3c983c895feb0cc3d7d8
SHA1 efc2167c6582e442605229bf35ebaf666c234a2f
SHA256 afd4023dc0e4f95465869bbf528972efa35ac965af75f06662953a0920bb6372
SHA512 ec0e6ef512723792d741e18a50d4149bfba2ed77a50d36234ca921cf883cf5a457de00bd35a6deb63a1f3f01ef056165840b497ec9415cbe842a80c2f56c0277

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/odex/.verify

MD5 a73062d7c5ffc3ec3832cc0143174c98
SHA1 20a3150317c73c8472996871609db80cd75247c3
SHA256 3d9fdc884b029fd09a880208ee031466f6cb1b4b3c40dafd6cbcfb70d0442aaf
SHA512 a431eb3dd15f43d3f95a5b32f563c8a317e3450ff063e41b5d9812606e22ddc684ed62294d849408c6e998435f0c24556cdffd121e2c1440faf52e0af7e087a3

/data/data/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/ModuleManifest.json

MD5 d939dec6dfc4f8ef93a1ecd9373fef21
SHA1 e98a06ef66e76c9aecf151932c2ba43f59f15a5a
SHA256 d995ff321e748dbc5f50ad17e380e75e315637996683541b1a1d71a6aafe872c
SHA512 49b6d1b1a1d6bc2f15a508df799c32935c7fd5db0314f0e8891cd5275b6efe207572e3dff6fa457b003b789ba84ec0805e6045fef4543112d99255ce8ddcc0cc

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/logs/log_shell/stat_64.log

MD5 36e5763c712f6a59fad071ecefe8276d
SHA1 2442183c1ad6648075d4751f7ad01b5b648e4214
SHA256 b9b0527e220fab299b184cb53347816520a8ee7715d70d1cf3289a1bedb4f2a8
SHA512 d292420a348f4c1c5d426f676f265f0959e4e97ba3cb954f126820013bf9f2c884b60c7505839fb4bf34810defec55809b7b5ed733f3fd6fb6f26791a91042cd

/data/data/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/data/signature

MD5 c84b101ee3972c23c62a570425276ae6
SHA1 6680f35bef8e22ea858e0594facaecea7601eaea
SHA256 fafa01fdce693d781b4774cfccf5608cbd41ade58ff9392983e9a5ee06a21755
SHA512 860c64e3d5cbc30faf0e841c6b650a0a8171fb35eb257481e9be1560e73450ed5875cad0dad5fa6b2ebfce42d68aac623152b750304b4c888f688af31ab5521b

/data/data/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/property

MD5 5d9f09b3033a3809aa3b4ae9170f3270
SHA1 db709820300a975c50ca74e208d81daec82f8a4e
SHA256 eb57a8b0b7bc6507398fbc30cadfc831ef090b2e50c326cbce8c73d80073e3e8
SHA512 0596355ec8df782bc4fe818d0ed8674c522ee448caa65df30af67fa8f0a299301f85d8b4699f3d04da12b5c07be91fed136e888c8d96c1d3d81ba2ccab83e09f

/data/data/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk

MD5 224cb9a48f5995e9d0bc460d53a2ef9b
SHA1 a6edf96f2a080ba2e71256b7fa8fd61a1189279f
SHA256 cb8e2e029402536dcea1eb74178c7700678758649350822b81a39b86f1f68717
SHA512 717e4b0741e2121feb23ff4eb6ca1f3934970fd0bede5b75ac34ec79ccd214205db44f856d32be331940739ad7cc755f7d4c38489f92b01c0899dea36eea0f39

/data/data/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/property

MD5 2670c45f5f91fc7f6f01da64035ccefa
SHA1 1f7acf068fa2317e63d065f878cef713831d42f7
SHA256 a64a5c8fc5ee1f57c12cf63ec8969aa8bf55e74577253c691b02a71ea13ce33e
SHA512 7cb53e1113e8ab643e0f2b72b684d4c29b939308a2bfa1c217436193adc0f38a93031f6ad712f7f64ec20d4ad85f4077a6c25b5e769f057e72a6025c1d7c54fe

/data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk

MD5 607bf73a45d706851de294e3fe731725
SHA1 e61d3077a4f9dd469b5e319415f6ebab2740ffba
SHA256 a9e9a498e50fc3b301a88eaa16b0eb1d5cf754176eacddf7e181ed71e1827ce2
SHA512 ac76b66e5cc2ded7f4506827cb0fbb2122491efa5e3a4bd7e85d23294e7de839f741c02f02ba6dffa6e5565cbb3028f4ecaff9feb31b9a245239327cfa3f3bc4

/data/user/0/com.tomato.joy.qqdzfk.wdj/gamesdk_modules/cn.uc.gamesdk.sa.plugin.init/2.0.8/libcn.uc.gamesdk.sa.plugin.init.apk

MD5 91822a32e3337815028294e00867a41a
SHA1 db5501e078f1e78aea534112934a93fdb78bad84
SHA256 a3add0c4684e1128f7727dfc957ac99a574ade2211ea9478abb92136332af9be
SHA512 e671afbce847168105b4e709b0c9bd0472c92236f837f4886ef3252fbf9decb2b61f98f8f49dca58cac2d10ae667df8cd0b81af0d5f45174052af4aec81b75d7

/storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406130454.loader.log

MD5 c90c62012963b315e50dd1a0b8d3ebf5
SHA1 ef2c40e7d390ebd81a9772ca9eeaa5c4822c3415
SHA256 852a89ad09b1873fb792b201a594447f646bc2d67c78594aad8d4b92476038f6
SHA512 953999928d5a1d6ea5bfa7c363beeb4365777d4a7a07bc2353dd2f581e8ec0b7f42ecbe3b177be4cfa1e5b5f056eeacc132c79d611ae515d9c919dc038ac2a4b

/storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406130454.loader.log

MD5 f095f726d65f7ace290a00a6688f4142
SHA1 827af5e4f63030bb020d514c5c322611a295a9a3
SHA256 51a7f4254a5f70a7e3f43b3d23f6e3578ed5adb068df0b78055d8ece190b383a
SHA512 1082b43dce5f9879464e85c51f5b4bc00e8c591b1c746c5d841317bdddce7a5c2add7f8a8085a24445bac2825a92750b7d5a2c1d7bef0b62ff92fb71e1ca983a

/storage/emulated/0/ucgamesdk/0/logs/debuglog/debug_2024061304.loader.log

MD5 8db4739e6c10c7aa115ad52c22906c97
SHA1 c7ebc84ce1bb45675e4cef98309251f87b09bb45
SHA256 991ee852cf0dd79e7b708d21d8529a0ae7afc03b56b9fe3eebbedfc217357e39
SHA512 aa1457141121a3606c909c6ec3df8945a212eeae3c74c68c6b3d18e95d46032438a1393519e63fba92ad5697179cc75aee7f5d36c02205a83b3bbdab8e990a4c

/storage/emulated/0/ucgamesdk/0/logs/analog/anal_202406130454.loader.log

MD5 177588db030c29995c22328c65ab4797
SHA1 a24aa702e74a4091b795d80edf588fb825f9dc5d
SHA256 0fca8825659ea4116acc1cb4453b32d6099bfcd34dc3fce0832d59d0a903a1f2
SHA512 d296120d4a4681f6f3a13f175879b08790940482c0aef82ff5996c29ce96b12bdf9bd48d389a3e865717eee3c5de9009b8f8134d0324f28a697ea707fd9bdf42

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/logs/log_shell/stat_64.log

MD5 a9f77ae71443a26c2ba68af846191d23
SHA1 010dcfdb451a29efb7ef495c1fa5299e8ac53c59
SHA256 ae3972bcb361bf70165c297f00f564eed0a392268cd2e2fa139425af27dacfb9
SHA512 77fb5213936a7902aa240810c0b4445c5ed9edef08738cff87f84d6fcea3d9279e8b33f55085f6ea55bd1bf13df896a774d17df0acfce334d8fc7fc6d13ee1cc

/data/data/com.tomato.joy.qqdzfk.wdj/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4MjU0NDk4MzI5

MD5 3015f81d550208345bf840fa473e20cf
SHA1 f77754b087b8257b5560b65347cf6507c1f6a1b7
SHA256 dab0b41a87385901a3a7fd139ffc4b0a428de208c381045176fb881177565b2d
SHA512 068ba5109a55bc85b4ec5b931828c2a80253c90e0038046ed9aaac7bc09ac7dfa39b51c5c8cbd314b07df2387a221757367fe46a2d149abc416ed35c283c20af

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/logs/log_shell/stat_64.log

MD5 b932ba87f0f8f9323c5483765181e4c8
SHA1 fc41810636709bf9e63eae73a00a85f1c810f427
SHA256 6f09ceec5714771eee6c556137ddf488e00d896085eab72509b3c5915edc71b5
SHA512 eeb8a569683cfb4220bdca19f5331dd9996d6b210ca8e68acd6c7212f1f1c6538756f9c4eb8aa685529eadba2bfed018883c3f9d7e616b383928851ac579a288

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/lib/oat/ucsdk.apk.cur.prof

MD5 313e5c01f592aa93873b7cf5d0d87eb2
SHA1 d99b0db033278bda2ece6cb6efa056a327afc10f
SHA256 e6a13302942f1ccfe838501da66aa3a5b4fb1b6281b5c09e1bad07bf0ead379b
SHA512 d1bbb6bc8d1925a7afd3ca6aa346ce856bf7c43d05fb62ee706faf7fcbe403bfacea1f817d6e02dd7706cefed9e63686a5ca5eb1b8ade7c5f910e4885dbf1ba3

/data/data/com.tomato.joy.qqdzfk.wdj/ucgamesdk/modules/update-1/oat/cn.uc.gamesdk.loader.apk.cur.prof

MD5 55bb80cf9da58bd14c4beacf1cfa32a2
SHA1 5791173518b2feb7d15444ab2c0da3a0a8c6aaea
SHA256 00696a6e4ade481ed320ec0e98991fc80e27db68cd16812598763bd66c99b9f9
SHA512 f89e2495b586d69daf7561572f6660c97585c5dee3b5e072ec4c472cb90dc5764ac44734f732a5b3a809ed1ef34c35e8a9bcacca5d3653b20e3459f8ddf5bcbd

/data/data/com.tomato.joy.qqdzfk.wdj/files/.imprint

MD5 23678c5f1b926a329cd62633d9ec3a94
SHA1 3888471fd5e3e316078fc461819ebe37830c1212
SHA256 a22bc7453ae7f959dc86307f96a04f10db41d3240e970c1d4805eb5c35f91c71
SHA512 8e403b231aa0680c3fa1c2cb4c7690089339998f4f37ed5a05cf204eef7ed1dea8f8ab26fde61c0d9a30d7a3981cff34572da50ec4f5b69e51cfb5aafce035c9

/data/data/com.tomato.joy.qqdzfk.wdj/files/umeng_it.cache

MD5 1590f2a96243a55110758384baf8fbe3
SHA1 4747ef625f95bbb2746ebc60644ad10ff199306d
SHA256 5c6a97602a931a5514880c609e8cdb94b57b14ceb187721c6cfb7c3f38c7829c
SHA512 dca9c0145e873411147ebc45c9b965a65b2a1fb127b96ff517fe0a740bb767105c9dc3a0b56b4d09491cf7c4bfa9123b50248ebb8b925048552366ce3bee26aa

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x86-arm-20240611.1-en

Max time network

151s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-arm64-20240611.1-en

Max time network

189s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
BE 108.177.15.188:5228 tcp
GB 216.58.212.202:443 tcp
GB 216.58.201.110:443 tcp
GB 142.250.179.227:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.204.68:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 216.58.212.206:443 www.youtube.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.184.84:443 accounts.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 216.58.212.206:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-20240611.1-en

Max time network

132s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 142.250.187.226:443 tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

N/A

Analysis: behavioral10

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-arm64-20240611.1-en

Max time network

157s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
GB 216.58.213.14:443 tcp
GB 142.250.187.194:443 tcp
GB 142.250.180.3:443 tcp
BE 108.177.15.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.204.68:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.200.14:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 142.250.180.1:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.184.84:443 accounts.google.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x86-arm-20240611.1-en

Max time network

153s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-20240611.1-en

Max time network

190s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
GB 172.217.169.78:443 tcp
GB 142.250.179.226:443 tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-arm64-20240611.1-en

Max time network

161s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
BE 108.177.15.188:5228 tcp
GB 216.58.213.14:443 tcp
GB 142.250.180.3:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
GB 142.250.200.10:443 growth-pa.googleapis.com tcp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 172.217.16.225:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
GB 216.58.212.238:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.184.84:443 accounts.google.com tcp
GB 216.58.204.78:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 172.217.169.10:443 mdh-pa.googleapis.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 216.58.213.3:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-arm64-20240611.1-en

Max time kernel

5s

Max time network

133s

Command Line

cn.uc.gamesdk.sa.plugin.floater

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.floater

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-arm64-20240611.1-en

Max time kernel

3s

Max time network

132s

Command Line

cn.uc.gamesdk.sa.plugin.msg

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.msg

Network

Country Destination Domain Proto
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x86-arm-20240611.1-en

Max time network

139s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

4s

Max time network

131s

Command Line

cn.uc.gamesdk.sa.plugin.floater

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.floater

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 05:00

Platform

android-x86-arm-20240611.1-en

Max time network

158s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:56

Platform

android-x64-20240611.1-en

Max time network

131s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.200.14:443 tcp
GB 172.217.169.66:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.204.78:443 tcp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-arm64-20240611.1-en

Max time network

187s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
GB 142.250.187.206:443 tcp
GB 142.250.180.2:443 tcp
GB 216.58.204.67:443 tcp
BE 142.251.5.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
GB 216.58.212.234:443 growth-pa.googleapis.com tcp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 216.58.201.97:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 216.58.213.1:443 lh3.googleusercontent.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 173.194.76.84:443 accounts.google.com tcp
GB 172.217.16.238:443 www.youtube.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:56

Platform

android-x86-arm-20240611.1-en

Max time network

148s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral14

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x86-arm-20240611.1-en

Max time network

140s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

5s

Max time network

142s

Command Line

cn.uc.gamesdk.sa.plugin.init

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.init

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-arm64-20240611.1-en

Max time network

140s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
GB 172.217.16.238:443 tcp
BE 64.233.167.188:5228 tcp
GB 142.250.178.10:443 tcp
GB 142.250.200.42:443 tcp
GB 142.250.180.14:443 tcp
GB 216.58.212.202:443 tcp
GB 142.250.178.10:443 tcp
GB 142.250.200.42:443 tcp
GB 216.58.201.100:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.169.36:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 173.194.76.84:443 accounts.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 172.217.169.74:443 mdh-pa.googleapis.com tcp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.16.228:443 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com tcp

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 05:00

Platform

android-x64-20240611.1-en

Max time network

146s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
GB 216.58.213.14:443 tcp
GB 142.250.178.14:443 tcp
GB 216.58.201.98:443 tcp

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:56

Platform

android-x86-arm-20240611.1-en

Max time kernel

2s

Max time network

131s

Command Line

cn.uc.gamesdk.account

Signatures

N/A

Processes

cn.uc.gamesdk.account

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-arm64-20240611.1-en

Max time network

184s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
GB 216.58.212.234:443 tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.234:443 tcp
GB 216.58.212.234:443 tcp
BE 108.177.15.188:5228 tcp
GB 216.58.201.110:443 tcp
GB 216.58.213.2:443 tcp
GB 142.250.179.227:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 216.58.201.110:443 www.youtube.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.184.84:443 accounts.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 172.217.16.234:443 mdh-pa.googleapis.com tcp
GB 216.58.201.110:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral18

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-20240611.1-en

Max time kernel

5s

Max time network

151s

Command Line

cn.uc.gamesdk.sa.plugin.floater

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.floater

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
GB 216.58.212.238:443 android.apis.google.com tcp
GB 142.250.200.2:443 tcp

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

4s

Max time network

130s

Command Line

cn.uc.gamesdk.sa.plugin.msg

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.msg

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 05:02

Platform

android-x64-arm64-20240611.1-en

Max time network

163s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
BE 108.177.15.188:5228 tcp
GB 216.58.201.110:443 tcp
GB 216.58.212.194:443 tcp
GB 142.250.200.35:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.178.14:443 www.youtube.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
GB 172.217.169.42:443 growth-pa.googleapis.com tcp
US 1.1.1.1:53 lh3-dz.googleusercontent.com udp
GB 216.58.204.65:443 lh3-dz.googleusercontent.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 64.233.184.84:443 accounts.google.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 142.250.187.234:443 mdh-pa.googleapis.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 172.217.16.227:443 update.googleapis.com tcp

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 05:02

Platform

android-x86-arm-20240611.1-en

Max time network

160s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 216.58.204.67:443 tcp
GB 142.250.178.10:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-20240611.1-en

Max time network

133s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 216.58.213.14:443 tcp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 216.58.201.98:443 tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:55

Platform

android-x64-20240611.1-en

Max time kernel

4s

Max time network

153s

Command Line

cn.uc.gamesdk.account

Signatures

N/A

Processes

cn.uc.gamesdk.account

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
GB 216.58.212.238:443 tcp
GB 142.250.200.2:443 tcp

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-20240611.1-en

Max time kernel

4s

Max time network

131s

Command Line

cn.uc.gamesdk.sa.plugin.init

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.init

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.179.226:443 tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
GB 172.217.169.42:443 tcp
GB 172.217.169.42:443 tcp

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-20240611.1-en

Max time kernel

4s

Max time network

184s

Command Line

cn.uc.gamesdk.sa.plugin.msg

Signatures

N/A

Processes

cn.uc.gamesdk.sa.plugin.msg

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
GB 216.58.204.78:443 tcp
GB 142.250.178.14:443 tcp
GB 142.250.187.226:443 tcp

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-06-13 04:52

Reported

2024-06-13 04:59

Platform

android-x64-20240611.1-en

Max time network

131s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 172.217.16.226:443 tcp
GB 142.250.178.14:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
GB 172.217.169.46:443 tcp

Files

N/A