5bc861ae0992f6ae1a5f5617eccd134ecc14167c930fab2e84d93d7b458126e4

Analysis

max time kernel
178s
max time network
188s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-07-2024 14:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

747c3978e270a4580e34e8cbd47a06ae_JaffaCakes118.apk
Size

6.7MB
MD5

747c3978e270a4580e34e8cbd47a06ae
SHA1

6c6b871bac35ebd9302a0f4435fc4e6ef66688fe
SHA256

5bc861ae0992f6ae1a5f5617eccd134ecc14167c930fab2e84d93d7b458126e4
SHA512

3e675270deb2f34d393f22b01ff3b32dcba3a237f8b8aa778b08058ae5e26f122948f7faa8c468c2e7478a4c2db1c51ab38640d6f3b9f2daad29cdc73a6be7f1
SSDEEP

196608:W9BZESfl0u+kLJlE5HSSQu0bC5GMCTz7TZS9:0Z4kLJlErI6eT3e

Score

8^/10

banker collection discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

com.qihoo.daemoncom.qihoo.appstore

ioc process

/sbin/su com.qihoo.daemon
/sbin/su com.qihoo.appstore

ioc	process
/sbin/su	com.qihoo.daemon
/sbin/su	com.qihoo.appstore

Checks known Qemu files. 1 TTPs 6 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

T1633.001

Processes:

com.qihoo.daemoncom.qihoo.appstore

ioc	process
/system/lib/libc_malloc_debug_qemu.so	com.qihoo.daemon
/sys/qemu_trace	com.qihoo.daemon
/system/bin/qemu-props	com.qihoo.daemon
/system/lib/libc_malloc_debug_qemu.so	com.qihoo.appstore
/sys/qemu_trace	com.qihoo.appstore
/system/bin/qemu-props	com.qihoo.appstore

Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

T1407

Processes:

com.qihoo.appstore

ioc pid process

/data/user/0/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar 4245 com.qihoo.appstore
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
collection

T1409

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.accounts.IAccountManager.getAccountsAsUser com.qihoo.appstore

ioc	pid	process
/data/user/0/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar	4245	com.qihoo.appstore

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	com.qihoo.appstore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.qihoo.appstorecom.qihoo.daemon

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qihoo.appstore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.qihoo.daemon

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.qihoo.appstore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.qihoo.appstore

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

T1430

T1627.001

Processes:

com.qihoo.appstore

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.qihoo.appstore
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.qihoo.appstore

Acquires the wake lock 1 IoCs

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.qihoo.daemon
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.qihoo.daemon

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.qihoo.daemon

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.qihoo.daemon

Queries information about active data network 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.qihoo.appstorecom.qihoo.daemon

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qihoo.appstore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qihoo.daemon

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.qihoo.appstore

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.qihoo.appstore
Reads information about phone network operator. 1 TTPs
discovery

T1422

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.qihoo.appstore

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

T1624.001

Processes:

com.qihoo.appstorecom.qihoo.daemoncom.qihoo.appstore:critical

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.appstore
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.daemon
Framework service call	android.app.IActivityManager.registerReceiver	com.qihoo.appstore:critical

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.qihoo.daemon

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.qihoo.daemon
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
impact

T1471

Processes:

com.qihoo.appstorecom.qihoo.daemon

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.qihoo.appstore
Framework API call javax.crypto.Cipher.doFinal com.qihoo.daemon
Checks CPU information 2 TTPs 2 IoCs

T1633.001

T1426

Processes:

com.qihoo.daemoncom.qihoo.appstore

description ioc process

File opened for read /proc/cpuinfo com.qihoo.daemon
File opened for read /proc/cpuinfo com.qihoo.appstore
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.qihoo.appstore

description ioc process

File opened for read /proc/meminfo com.qihoo.appstore

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.qihoo.daemon

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.qihoo.appstore
Framework API call	javax.crypto.Cipher.doFinal	com.qihoo.daemon

description	ioc	process
File opened for read	/proc/cpuinfo	com.qihoo.daemon
File opened for read	/proc/cpuinfo	com.qihoo.appstore

description	ioc	process
File opened for read	/proc/meminfo	com.qihoo.appstore

com.qihoo.appstore
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4245

/system/bin/sh /system/bin/pm list packages
2⤵
PID:4651

cmd package list packages
3⤵
PID:4673

/system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
2⤵
PID:4721

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
2⤵
PID:4753

/system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
2⤵
PID:4815

/system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
2⤵
PID:5100

/system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
2⤵
PID:5161

/system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
2⤵
PID:5188

com.qihoo.daemon
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4276

/system/bin/sh
2⤵
PID:4458

com.qihoo.appstore:critical
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4480

app_process32 / com.qihoo.appstore.rootcommand.persistent.CoreDaemon --nice-name=com.qihoo.appstore_CoreDaemon --daemon
1⤵
PID:4526

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db
Filesize
28KB

MD5
2304dd698be3705c85ca097304ce7de2

SHA1
325882522ae26bc42927f6e46c489b93799aaab1

SHA256
740e5bd0953670bcc14c80bc032c828420f9460dd3ae0f165774c5ec71584e3a

SHA512
eaab8bda28fd30544fb9d413695cbfe42d3f2f184a77e6c73ec5fbad3621127a01b27f1a5675439a5314d2640ebbdf118f58bc90ae864a2923055ef9f10a31bf

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db
Filesize
28KB

MD5
04183d28d08d24a5b03704e8a44f1e0e

SHA1
3710a7d4f4a50e9a8a14d1cd312291d99fadf7ff

SHA256
cbcd94a175e1689d50dc1d42f20d9238dc71ff218539f8eab55da964e5190695

SHA512
817f91475b63f1e8feb1a11cf55f0409b6728bfe8db1b6fc6db63a7dbb091a144c607b2f339993d79b0a7ab338d02c9612af63296624a1ba1f6de03b96fc245d

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal
Filesize
512B

MD5
23f6a85cfaa67b987406bd33b8182e20

SHA1
75ccbf5243b7941b18f55758c6aabaedbed1ff09

SHA256
97ba7f6ffcb4d9aafdf604ed8f8d3bde83121e0836fe0696d848d6b96f9f6fa1

SHA512
1f61ad4fa9a6a8fa5b9186aee8ff1485b426527d8ee530e5a43c2d521794066b76bab605e4f33a94f22ad75fe8555bd39257269ee7b10cb4c4b8865cf5cc57b8

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal
Filesize
40KB

MD5
fe59270ded64b318ccd4f6c23fd976eb

SHA1
3f70b184b93fe9321da5532f0c4686d8124e8b42

SHA256
48b351b2e8cf2af1db98ac298dad5e34ab76a0dff3aec66368e61b50b5880ced

SHA512
8e5adf970329417c5effaf4d208b9259836ca08f1e50b7f15f01a880236da117488430d3d576d68952317ad6717a59a6da1604e16b33dcc02c9497ebad792cba

Download Submit
/data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal
Filesize
8KB

MD5
7e4bc39d062638b4469026fb29aad46d

SHA1
6ea63ad5c7792d030325813d09255379ee846ba9

SHA256
c7b83e61589425b406a547ec38b94b251f8435ed83be529f12e3ecdbb968db0d

SHA512
e8154ca717e7f6e6547f2ff0a79157be501fe9bfeee67c11b640c83a5f64cf3dec18e96f5aa9fa6710d3b4d25004830d7c0bee1e4bbb31ae8a34e8f92f0c836a

Download Submit
/data/data/com.qihoo.appstore/databases/_ire-journal
Filesize
512B

MD5
b22e8e43aac425913992c12b3129e301

SHA1
624a67d6557a1abef2eda7092adf8f60d769bc67

SHA256
9c1617eac997a1d9c80a0dbf16791646f159c86bff7a1c99cc03d5c07ceae5f6

SHA512
7c568f30d9b5be41ba3339c06635d54c58b40adaffa8bbed7e683909b8f0170f113e79d71f6b9b383678235e5f3357eafb0707858904196eb2b4872e0fc65987

Download Submit
/data/data/com.qihoo.appstore/databases/_ire-wal
Filesize
20KB

MD5
457232b185aa78e8b1b972505168415c

SHA1
3eeb67d44e6328c4077cf827adc3b134cd52b9e0

SHA256
5f75d1ebb1ae27ac74a0706f683be18e89e5527746ad3d27776892cae7c12eaf

SHA512
8400d3be360b668da1ba342bf90a672c8cbc3d220d918d7c29d15fb1fb4533c144c9773b2682d086912bd48a567f5d87e01aa6ceaab12930bb3f9b29353f42a0

Download Submit
/data/data/com.qihoo.appstore/databases/account.db
Filesize
28KB

MD5
924e8d876830616bfc401ee5a5e64225

SHA1
1caaa4b15e0e9bdb7bb540c37f5518ceadf80214

SHA256
6a912b040955c84b13cd3b7224673d8cf96746689840d2b3bbe6d5dbdb8c63b9

SHA512
974f9e4d4bd724308a2a066bb8ccdd8355c69c327dc034f8a742d0cdb012e5f4d8544aae43ad8a2ede8e3d41c942262de3dd1c13399677447882fb394b168c1a

Download Submit
/data/data/com.qihoo.appstore/databases/account.db-journal
Filesize
512B

MD5
17544a4763b09d0f008e594a666f6aba

SHA1
c2c6d0873ed66617b5d961b8a0938c88918b80d0

SHA256
d97f7bbd717cbeafa3d08bb7b386e34c489900e97235215a8daf63c84024e7fb

SHA512
b72f63f2d2ba1e675d28d8c13699a1f7c61ff844a9c92d0be481d0c0a16900f0e2813332b00c94c486dd905399ad61d000d654f78994586c3db5afe51c92f22b

Download Submit
/data/data/com.qihoo.appstore/databases/account.db-wal
Filesize
40KB

MD5
0b5768834bfc1c9b5a37162cf7770956

SHA1
ea8d077e1004c8fa25bfa7f0863fb3adee5f19ee

SHA256
fbb8754de9ca1ea7aaa7ebfbd5204aa566f18e6b35c5da760845b977f31f9ce9

SHA512
14dde34fd74b6d917e74a42ac552f35154a006d808c6e313d9db55d9c8e8b67c76c731b74e52d34b2e5b324d1e29ef2bf52332629f90059a0a7b1c11184a654a

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db-journal
Filesize
512B

MD5
a271e72f00a0eacc1a8223a648a173cc

SHA1
531d7c0b6c0a9b03b34004d340925ae87ace0ac3

SHA256
787bc014ccbedb08c40fbc0088d8089f5e2ae5d4cd149a18f3b229bc90caf171

SHA512
2f7922b3bce4ee837b43403c31764f559c0214c55ce504b2e628ed5ae2aad38d7a8c2def8545d6320e4f7718ae8cebc8edb9e92cf2212f7e957c99135f3d9255

Download Submit
/data/data/com.qihoo.appstore/databases/download5.db-wal
Filesize
32KB

MD5
ce5b3a56dba2fd7b094ce26dee8af715

SHA1
49c31b90bf6baff8689e34efddf4ac3e84cf3306

SHA256
886d3f01d7f86fb4963d4d19e276c3a45228961bf00b8fd34cdd97a7da03da6d

SHA512
b4e1cabb5a4db016a8dc77f96a0a8b1bcabdfa5def03bec79a782e7cd54ded446df8ee38c13828da8966b7d7150279b42c1d0e75e9720d34a9e02ad829955f44

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db
Filesize
4KB

MD5
198ffc98ebc6ddd0f546688ef94623be

SHA1
20ed5f841fbb99fc6db81b8971369dac3084ca0a

SHA256
9fe3dfa8339e98aaf19ca82a96178ec2aaec3007f2d9b8c9718b6b8c549352f4

SHA512
82847afe31672c81b9375ac2e180e547f42cfba1ca3251f81fdc4c472bfdbe9b6ea692bbc5b598038cca76bf193fd4afbddb7034829910f2d6bf8ca01e331ac5

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-journal
Filesize
512B

MD5
fe89f8d981de9d47158fa88c42305419

SHA1
1bf7411a8685dc39ac5250c93ef2dd184413471e

SHA256
a0cc048f2a9a9500d31d46bcb081be77e5f61395834c815d47576b858906b085

SHA512
a343a0da52150ac6fa15a9dd8d03463862ad7a53700daa13c49d9b3ed5775068131164826de905304d4d882182f7e857eb6d4aafea5b88512e1e5b3ebe8a28f8

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-shm
Filesize
32KB

MD5
e44b713d5dc7b3e51833ed8230c74d9a

SHA1
da0207af8e807dd9d89a812ec1d41861313f7666

SHA256
4f9aea0730ff644820910548b1d4e0b61055dae263fb6a0194fd5e723de07f6e

SHA512
4c5ed43c18d0580fd1db2615e3b4f2281f604abf6ab6e79ba8a17811531830b8a40b6e508de1249d08aad78e95cb2cb3431af97e9f5cee9d30c9a41702dac531

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-wal
Filesize
32KB

MD5
f31b1e95197891e16ca62355361abe4e

SHA1
444ff7eee7d583bd531d428782e731875d5f4aa3

SHA256
ef797a9e30604da7491061e12706bcfa72b8dad88854ddf748d185172ca1673f

SHA512
7aabbfbef299529599569490cbd95d8d6f06a8e8ff077fc9f6bf1b378139b3d15b6f9b3749824df82c4be085dbec069ca641af11ff3ab03fd270c67e6a8297e2

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db
Filesize
12KB

MD5
db6540aaf6e5ed2179e57a08363f586f

SHA1
736c34a4291619993c73230f35c3e1bb6f48890a

SHA256
32485109fd4169ccdbbd4397bc5c5ff023c675a5aa43229c361552fd76b0613a

SHA512
bb0f1750f18590fd373a5e317722c439ddc039f971a008dde1b35dfdc49379576eba11060f28ade49d0ff7e10bc11ea37bcecddcc0b2efca9c3a11ec8d10ac29

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db
Filesize
20KB

MD5
60e4cf217e77c56efd3707b603797c5b

SHA1
816247b4883d3adb30c4db39fda16d2288e27de0

SHA256
8e2b8343f703045fb8596dee1888f65fc66b64d10304a4a49fd4ad1f63bd67ea

SHA512
22a8cd2974663e8caa220177e7bc64aaf35735dc8abc3870a7e47ea86b02d8b06b041000e5505039b3116290aee67e9645ad2d9c26218749f5b5b2e332712af2

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal
Filesize
512B

MD5
ba0cb4c99ab2fa8b16a3297aae7b96b5

SHA1
89ed91083b47d10d100bf0c340074d917cb915b6

SHA256
fa67f2438920669440f7ae8c04c2de8519e5dab80faa57ca38a313092c6891dd

SHA512
61501594cba5fdc886021432c7955b2de318448495683accd469af25fd506564e4103d4001313a825b66c77d82c5a4e0f7f2282f4c8c918e1f9899546f398ad4

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal
Filesize
16KB

MD5
fa4f503e674530a9a4657fe9af907a7b

SHA1
f527aefc801e3e1373f2f6708ded0e30298224be

SHA256
9228b25de647577cd1de5f68c636d055e25c610fe2caf21b7f6c1752aa1fd4fa

SHA512
99eb296d55d38873ec34a6c63e675578b22ca9b19c6a550725f249e93808ac141a59a11cae8ec09ab4a95e7dfa2b533daa9c638c6d2d0a9005db5df2b889c52b

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal
Filesize
20KB

MD5
d42360afdcb9247e94b60bcae8440e5c

SHA1
2ababca332109d013b01e1c47c5f6ace9534f56c

SHA256
fe5e8c68461f69fecb5f8b996d687697047a6b24443858473099a360c6e061b9

SHA512
364f9284f6181c577970744be95de5a839d4da06e8f1cf261925ccf793a614a6740758ca77c6a6ef069313c9e3eee94b6c9b529194037b8291cfcba07a98720f

Download Submit
/data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal
Filesize
4KB

MD5
02d898a6c02ac3c91969b9d2c4986c2b

SHA1
c9ad593dff55995f2f141cc8695204fed4f02103

SHA256
6e1d9c9a44492293d65695232d7c4baac311633cba62e7d7011e3401f878e523

SHA512
68541271b9f38904aaa978c32be853a6d6f0c4780c89a80dcb7506f58452590546c965ad64b3569ac1c9a2c5e588ed492f063704b19fe6345ad6ea9e15a8376c

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db
Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db-journal
Filesize
512B

MD5
adfb203f470b51d9b10cbc91f3b11a87

SHA1
a767e5268120bffbdf215c5a69d0d6e875eae67b

SHA256
871d16fe826149f8debd35dc26cebb9c44c466f6583451f46fd34b22e873f5f6

SHA512
71dceca8d42a45df9e0647d19c9c330b1630b9f2f8bf0ca1078db0d6b5ca2494d96670578e5c65a73c22ec0136f57ba729cf06c2d81dfa3ea596e831c3c12c4b

Download Submit
/data/data/com.qihoo.appstore/databases/new_downloads.db-wal
Filesize
16KB

MD5
d72c4a267adf34117402be93a54300ef

SHA1
9336bd0a8cad822bb7fff02f65407268e24b803a

SHA256
fd5e6221488cc84cc192fcbb93bdf7e0369dd4c83ea0c12d7973b2579bfba38d

SHA512
de44ac4d2db98a27b071d4f50f9a6b206fe97cb6e5396348ab5d09ec2807daa5ca2851c2b615b1deb8a2888f4ea6645c43dbe04df5f9f11dddeb162b7a41bbd9

Download Submit
/data/data/com.qihoo.appstore/databases/update_history.db
Filesize
20KB

MD5
e0ddc29dccfd6312689ea105cf0434a8

SHA1
59191210f5a80bc047f8155ea92544f4095c38c5

SHA256
3079b5c02af6b7ddced940086bf7095b1205bf0f396b87da0d5c5f6d8b5b6143

SHA512
d5ec8a2bd21928c07ada4ab4df8e72b6905872533d01afe4eb243ef06674e630a9834a03dc5fc2f8d487c3cee8aa3b3117e73379ae64e6f4dcf3f8dd0145fdb5

Download Submit
/data/data/com.qihoo.appstore/databases/update_history.db-journal
Filesize
512B

MD5
35fa8852aa2ac3d74ce5621de3fc2b46

SHA1
528f6cc3ca23e588c506e19ccbc134525c368a6b

SHA256
1338e63fb3d7a1b86e72a345cc95656756bc37b1eecccf12882a4d95b88fe306

SHA512
94f927fbf9cfa06ec3aafbbcad6a2683c875630fb3ec627a65568ac6d4e19b7682dade6c887824284d5fe8508a6ca29866de1d507dc152ebf0d1b17f5dcf1238

Download Submit
/data/data/com.qihoo.appstore/databases/update_history.db-wal
Filesize
32KB

MD5
144cc4556c7d2e70c71721bd6775393e

SHA1
dc12a3a5a5e411e1aa9e47fdcd6044647002f820

SHA256
a9e2fea4234b73ab87aa2939dbc4c94a44a5de372d6ffaea90737caf498d5f6c

SHA512
54d882eddacb3ff39b780be39e74beab5d56bce7cc97cfbb9eba737faf72aea6f0912c74627ea3353f9e04d0dbb0064818b0e68a3ddfcc818cf798488bf16441

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1B

MD5
a87ff679a2f3e71d9181a67b7542122c

SHA1
1b6453892473a467d07372d45eb05abc2031647a

SHA256
4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

SHA512
a321d8b405e3ef2604959847b36d171eebebc4a8941dc70a4784935a4fca5d5813de84dfa049f06549aa61b20848c1633ce81b675286ea8fb53db240d831c568

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1B

MD5
e4da3b7fbbce2345d7772b0674a318d5

SHA1
ac3478d69a3c81fa62e60f5c3696165a4e5e6ac4

SHA256
ef2d127de37b942baad06145e54b0c619a1f22327b2ebbcfbec78f5564afe39d

SHA512
06df05371981a237d0ed11472fae7c94c9ac0eff1d05413516710d17b10a4fb6f4517bda4a695f02d0a73dd4db543b4653df28f5d09dab86f92ffb9b86d01e25

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/backup/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
469B

MD5
f1023a39e929b502ecfb287ed2ac404f

SHA1
9ebcce7b9d6cc09d7328d4b79ca0e1c045c90295

SHA256
ee2762d1fd0bfdc9559148ff8aa9526ba88d7501d0fd77c3c731d1c028e02753

SHA512
bfb95e39c303d8e59d5e021064fa8fa54fff95722599fec3e30e512aad4a326ac05b8c48dee619f61328d0b23383f42d8589c835ac83457ddf9271d3e3ad5e3d

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/backup/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1B

MD5
68b329da9893e34099c7d8ad5cb9c940

SHA1
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

SHA256
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

SHA512
be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
508B

MD5
29f107091887ad868b77e460c8f11e05

SHA1
79d8e3839048a7ed5108b2aee903dff3485283f3

SHA256
c990b52c936a305feb38b4771ed037cbd2e099b3066e3ae3c3588f1cb7c6fb85

SHA512
f7875d9d690b4a30c784a778b57c70a719447364b6f8c1ab198cca9588a25c7bfcc50259ba775f43abdf03d184b2a9429f85e8e4f6648a491ec1afd94845a072

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
520B

MD5
0e63ac8124a447c68fde795f20c02a07

SHA1
951575fc7e8e8363231c4fd5f90639a112c7175c

SHA256
4e7ddddcd4519a3fd6bca46e4ed2dba6001ebe0afa308c96ad367da00ee50014

SHA512
fa91f3a9cfa86d29351ef843af0b450f221f4aa972c65db1f9c45e6cad5b35c4bf11a9c0b601208f0d721f466444ab4553dfc0d6e3c9f428181881ba9d4b38d9

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
544B

MD5
bd03c8de341df7f8828dcf64bd1bbb99

SHA1
c926a5e0049c6e131afe8ccd2c0c5b33b4113d93

SHA256
079eaad8fccca55ba400970389f65c65cfd4f5dd1bc07f8dbb0fa9810f1ff8f3

SHA512
ecbcd271963ca372b807f0f09ed68c4c448689fa8fb6663aa37f5404bfd0de1f1a7f28f8f6cbe834b6e8c80d68ffbb05495d1a304d8873ba71db99de6886b644

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
1013B

MD5
96b10fd8639fc90651d040c43d4179bc

SHA1
10e84523c326f0b2fe4551b474d4abef762d7973

SHA256
2736803b94642b3d53f87bee14844ca0d9c271e0eada0d8580807fdeb3c7c2b5

SHA512
34d1638d82bab12d2b67775243d9b4fc2ad020329339caa1e3c7471ceeb1932a6c4183b5724eae86ec1a9c473263b3e264213e504fc7ca5d2e1c4f4986095c5f

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
576B

MD5
30e38194e25ac886f517e38be2fa4087

SHA1
a8fa1330348c10db9b1e8df4390a8d72408f9887

SHA256
eedb3eb84a88b601c03ac05a9b445139ef6869e8378b8ebd117c81be7d0bc6f9

SHA512
a5127298e3f7ee1676ae14689282485d0d90cb75803e4091cad5abd2f6ebad297b1fda51f16b2f8c80bf482e1e5ea89f46c9a43e2108feac0bf5dd0025c0eb76

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl
Filesize
628B

MD5
6fc10becd457f27f030595918a1d5497

SHA1
fb287168b29fee15ea7bbaf459a95e3252a4ac08

SHA256
c0051334d1b8b5fd860bf1016278e3e1b289f07d3f6d2765cd49ccdb7f2b4da0

SHA512
f84c14241d88571c13d226f455a58fb43ae60b123c5049800473cd9b246696640b0b3d8b25fcfa2fc11626cc60e05f4f1173f79eacb6825ec5b2b8bc383debc7

Download Submit
/data/data/com.qihoo.appstore/files/sllak/logcache/log1722005073457
Filesize
2KB

MD5
08c5bc0aefce2e0fad32b9e31c928226

SHA1
4bcc8ce377c8de315864c6d6ab5b85cfe42a1c07

SHA256
ba0baf7edc96b5828eaa0442b562f4ba6b77b4ddfb18d81557b9cdea9544a682

SHA512
1304ddbc702e38c1679572fb4f984a80864b7f698b82b1accfc4ad981df801f93df7ecf672a36824d7bdeb32be0f751e9922d5aa5ce56bccd7e120e3d0f2b4c3

Download Submit
/data/data/com.qihoo.appstore/files/sllak/logcache/log1722005073540
Filesize
596B

MD5
4e89bc1b1c746244a47029b01c711847

SHA1
bb05587e99d915f37a5aba0a585badac7ebf2a16

SHA256
7f03c46c0f5b4a89eda2f0b6cde37cc792ba1dcdc3ec7d740c27114e68892f6b

SHA512
b5951f4eae89d66046bb2379b29fce50687f9254aecfad3e5ea38a9d1b5cf2e6a8c104cced04a96c83530f407621c3cb7fe437350a4e748035b0448aecf6494b

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar
Filesize
77KB

MD5
c14c8a2f5d3a7c47eb2ca8c1b6e69adb

SHA1
4e57b3c0f34427aba8a5be40c2e9b627172a89c8

SHA256
7d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107

SHA512
2be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar.tmp
Filesize
77KB

MD5
021a4ce4052112d7b1537a542a2dca29

SHA1
a9df7868c84477fba869ff21fcacd820e9701192

SHA256
7362092eba25727119b2b9beab23c26cd6158e547e19d7b08771dc46d9a8128b

SHA512
e39960b55d95230d256846e20c38a9185ead17fa91989ad5581075d2d3b2966e0a617da4201759c9aa1eed42d6cce406e12e45de9ebff72d06340acca68ad94d

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4245/oat/finalcore.jar.cur.prof
Filesize
559B

MD5
2037f76fd25e70ee33440be7c69b464a

SHA1
22bd01a0d612d447e3f03860fab930d456f7214e

SHA256
71c931f187a79df7ae71e972dea0df9d91b393e5460c489085f3e2eb7c4f287b

SHA512
3c946e51fd447d5fba49b6e920e5dad90117ed63673248dc7db622e665ef5778c622ebacdde1b50d54f885ae77ffba2bf47d31bd48025c38c47021084918e127

Download Submit
/data/data/com.qihoo.appstore/localApkInfo.json
Filesize
57KB

MD5
458df01699081d8138beab5552cf4221

SHA1
fa3bc2d807fc3e10c3aa3f9becb3b8fc76fede0f

SHA256
fa16749c7aee0222825d4cc3f33eb5ad44405bb847500b322e2867b29cc5ef31

SHA512
a583f35a1d62f2bb1e48c07f1b073dc2442c359e5934a4a5e6bef2a562e1f6d7373ad29fd2a24a7db0195591917306a1fa7f01912180c837b452d1b63cb668a4

Download Submit
/data/user/0/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar
Filesize
176KB

MD5
b667ca71e42bbeb899566c8834ed085e

SHA1
053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

SHA256
536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

SHA512
52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

Download Submit
/storage/emulated/0/.sfp/.sfp
Filesize
83B

MD5
ba9ff9e561c1c259ecdcbe250d0ef5f9

SHA1
5200ae6237ac98bc022da26407bde04b2364ac4b

SHA256
78162cb9213e632ee382de1b55afa45908050b42a711505bc7460fd2da41df1e

SHA512
ae517b494f2b04d4dd602b54661cff5d3b6ef387e95cb3018ab8400b1b3d9d6881940890b7f688ae87834f59e9c7a936be3d867512e166bd44e75f8f149d87f8

Download Submit