Analysis

  • max time kernel
    129s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    16/10/2024, 04:34

General

  • Target

    4b6a78e4a1f19d9574305de4efb7fdc0_JaffaCakes118.apk

  • Size

    6.8MB

  • MD5

    4b6a78e4a1f19d9574305de4efb7fdc0

  • SHA1

    b1e083ba41fc05b1bf4c7d5405f604a43fa56f01

  • SHA256

    f6b7a5bd7150c1515bda3807036c6d4ca7838e1ad58d71624b85c53ff1a3cb3b

  • SHA512

    5f3c18dd9c36e5e57aeb575e274f5d720d3312f14e9d375ee1b6eb16a74e526f1306e1b60b26f98113b2a754fdc30f3b516dd4edff584cc5d537db6c07ed7c5a

  • SSDEEP

    98304:mOD+KvLXmAxvjAkVrPGFFHU+DV2qt1d/AYs/I09XfbC9XruTcECHD+/OxN566D6I:mODxjFIjHVDJwJC9FZ+/jqaKvr

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.qihoo.appstore
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4973
  • com.qihoo.daemon
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:5011
  • com.qihoo.appstore:critical
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5212

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

          Filesize

          28KB

          MD5

          073bf578f358397eb0890a40280081ac

          SHA1

          3ef956e97836079ef32105e6f84b401e7dd4d10c

          SHA256

          c48a18c175de831a21353fb0bdf0d3e43b83ba7655982152df5cf0100b2bf37b

          SHA512

          22c8bca8429348bf9c0614ba55e6e8dc865cae42306bda2d05b588d7ab34ceda0071695654efe0a429cdf5a6ee812db8d18ba794a80be2512c5305bcdb314134

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

          Filesize

          28KB

          MD5

          68a663c3f95568e27a9480c447c29c1b

          SHA1

          bdbd0c162d679fc3e2f96beec7b3fc21be4cf78b

          SHA256

          442847f7a12c988f83a674323cd5da163d5ec79152b658abe27baafbf70935c4

          SHA512

          b3317e0dd3be80101b53bd0eca193f4654baea2c8682e0d880afc248f142c6e34c22f5ecd689e56914954bfbc842cc450fa2efe01f668cc8315250c3b4d706e2

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          512B

          MD5

          fe6c4af23068df49b6b50b1bddc64580

          SHA1

          4ead9a6895add8425a5633e800ce8f86a77f032a

          SHA256

          c068404c445c39fd5991c5fb1b91658a1051d4cfc0cb87f213fe4255571c20b8

          SHA512

          c5ecf010a4bd415bc2ca861304e67599e283e0a754873e35c77928b9894451fc7663ca82b025df4f21e437c5f14e6f3f75ae5f1c649f1606e26f0efcaa6d7437

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          8KB

          MD5

          95116efea089dacf57416675b49e66f5

          SHA1

          89534b6c2c9fd35409ce015aa703e5af1817536f

          SHA256

          d9576f07b858427067862f9bcdbab3138f2087cf8bf1d2fe6e6c413ae22edc61

          SHA512

          f16027b2d6a368ee9d3baa47559a8753c2c347b2d6c755f269a03ba0d9b029475dc65cda7b12811c04635a832682f189b74f54f683fef608ff4df9c3fd3ed0d2

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          8KB

          MD5

          157a879b8f204220e157f1507b0414d7

          SHA1

          bf02b005ac9925186ca0c64625c93dcaafafe378

          SHA256

          0e743f3d49a10632c0db69dcf3afe4495d85459d916b295221dbf1fc8d297f5a

          SHA512

          099d34e6fa2786181039c9915f55a07d3ef5043a4e1283b3b0838e675ef7bdd6978c4ae27795c15b67b4e59204558adac708e5b5065776c29f16f806f2352e51

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          12KB

          MD5

          550fd8a382734cad68264ef6c9beb809

          SHA1

          6d783cba989263cf7aefbf7bb892b9caceb42418

          SHA256

          69401a692034593492ee1bb5be9aaeb424e2ce22b7f8fc5bdfffb92972387136

          SHA512

          08fff5918944f5fe9e7f5744cafe327d14e781898047c26beae903c86f10c891168e5a75de0a9e8ee35f369aaeb1a1c7b7d45713005ab09b037c1a061581d568

        • /data/data/com.qihoo.appstore/databases/_ire

          Filesize

          12KB

          MD5

          6da302a2e5fc0263420684f38a00e3fd

          SHA1

          9e1c35e91c3b84600dd8ebc10e072ccb91b5895a

          SHA256

          a9b2f6227429fd83edc4db9e62c5e3f8c45b55598f7b10c3132d6b339283c8d2

          SHA512

          6e91d3076e4f382a5e4119e6429b90bd4d604c858acb4914e8b67226f4ad0626e29726e09d12965f075ac6aebc49eb22faf0f5c6a286913aad9515887f91fa1b

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          512B

          MD5

          9b1325aaa53fb0abfbb727036e22a18a

          SHA1

          4a274ff7afa16e2c9f335aa76aa9d512f7859402

          SHA256

          26640b9307607f06541237fe9002996fb845f0c558b48de0a81671c64efbf441

          SHA512

          34b571100768f1e967ae3a53ae30b2ca3b391c186aad49e3d9ddf0cb4db8e98bd978fde160f4e278fcfb2baa5360caec01634aa587287a4d22fb697ffe213912

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          8KB

          MD5

          e06a102eadaebdafc3152da0c55474a8

          SHA1

          c1c88929b782350c2e09c92ef8b5effa632d3aa9

          SHA256

          07524fb2a7e3aa6133667e2e74ff9c7dd6ff317e138291af8530c6d597953135

          SHA512

          e99c5c41985dffb7abd072f61b3fdc1147a8808ee53b034c3fd1c857fb0e14c0f3ec0cb8af7b150fe290aad90d9d143383ceac4d62d124eaa701180f29826eae

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          4KB

          MD5

          74edbbe46b7942fa2aae8cc9dbb93126

          SHA1

          0fb0764dd554f281d8cc6dcdc30aeb16f1fd407f

          SHA256

          6355e682ec7cd234ce630d6e6e75e35e4a98fcbf83e1a6b4bd1ea0a8fab29b0a

          SHA512

          55e7cd9d4d9c4c364a9e2cd0909273b7c2e9374c33580641c216e8fc73890be415528b37196ff954c3d14afd8b53c6b571e53bef7de222a9aa8b3021230fcf4e

        • /data/data/com.qihoo.appstore/databases/account.db

          Filesize

          28KB

          MD5

          f630f8cf9174c836248b6d30cbdd5779

          SHA1

          4db6d82e8e17de9fcdf0ead09e97123cda1ca86f

          SHA256

          ae606221ff789289e1c69cd9f79ee035d1c587a96d556ad8ac6ee91fe6741041

          SHA512

          c5045a96a9214932971165424348327e2396c204839749884ab3105c7d185693c6900acc3d52cdc1463633890cb123e21abd7e68d71907c043d37f4b52a7ec5a

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          512B

          MD5

          25b71fdcd44cbc767c81150d809dce81

          SHA1

          035993966a343264e6804d27e61c4c4d3587990b

          SHA256

          922fc6b1d73c6776aab0b13ac002012720ab77094d31adac6372709fb6d35b68

          SHA512

          6b35cf3e653cb0431b58f57d3bdc29152c3dbc4afd3c149a2a0928820ecbfc9f32d0983efed1a2aa33865b75e06daed1b59de57afeb38c38550a32d701218146

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          8KB

          MD5

          82eb464c828dcfed33df724fa326e866

          SHA1

          a11be604c99db6e38aaff5fc6f61a74c50e2b4b6

          SHA256

          c39a135417a246f7a169d1eb39bcdc6ca4e65c449005ebf42d2c0fd82f0706ed

          SHA512

          b761ff366a8a006d719c8e8631105e78d8ff45c5288589d3ed66e81748c5db684ca00a03f9774b4ab0c246ac49fa3e2ff627b4b3d7b738475b92add1e67d85f3

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          8KB

          MD5

          8a35ef2c61149ab1faea4c5b08cc12d9

          SHA1

          d3ff988f7d689642d9145763584c8934fc13e92a

          SHA256

          cbb040f47cfb6ea7cba30d2ce2962b6adbfbcb507808270d5fe6c3fbdf57d328

          SHA512

          aab68bb95f2c008bdaa27f1b598b9b930d95b3539564cfdbec2e4ede5b55c5b50f901ce52bec3fb42a754c2aedac3e977a56b608c64f874d112fef111a6172ec

        • /data/data/com.qihoo.appstore/databases/download5.db

          Filesize

          20KB

          MD5

          fc8157c20aff4c65d310c8b1495a6c09

          SHA1

          527adb90ff40b74b6b0268a5018d8af7faf53c8e

          SHA256

          d3ac468ba80900c4780701925d0a9b119be2317ba08a41b5c7084965195d56ca

          SHA512

          d962ea97226a5f9937a55dc46fb1f3ba4fb0782dc9a34ac362000d7e2abb4d9c2cbc7bde310708a4462bb5e8af7ee0d6a4b87c0410804a71d0848537ea6b9fd4

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          512B

          MD5

          63b817f85353673a00e76b3948ddc650

          SHA1

          ecaac4a23cf15482f155dd33e0751b6c4956408d

          SHA256

          d8a4342a419f27a669138677569f690a907f39bb0552f8fd0a9ffd2937304075

          SHA512

          7d9b04be3b6489c24c1445d8e806cbd821ad33676e85ceec91650ba12d1f70a54b503ed942bb5929d9d436d3427f6a6a6527109a9bbb2d0a93ef8dc82677dece

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          8KB

          MD5

          82f3f8d94e0ba26c12607f73a45f48fe

          SHA1

          0d45accd5e3c6d01e6eff3624b5c07c71852ce3f

          SHA256

          84063a7173f5c4f9d47402c10d4335f4fe5f18167cce87d075230ee4d3d236ed

          SHA512

          68f6e3b64fcb41a6f270937dc99b3aae30786e0c43dacd844c9e421fbb8b85f5b0ed77a26439367cafdee25b485a03f687b20ad24aec4388b6bc597e81797ebc

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          8KB

          MD5

          fed2be195047eabeb0a5f198b13ec783

          SHA1

          0131a734f12369fb3e83845b20ecd3052fd72471

          SHA256

          46b399c38c5ff8f9cfe37650a8d652cedd9962047231c318b44571b5c15fd2bf

          SHA512

          0cf8c5c78e30581b67917a14d7ef1622d371a3e2c46ffa5421dc6db9669f6cecc21265d9308571a86997813d803f11d3c1de3be638ef9afad92d434b551c8dfb

        • /data/data/com.qihoo.appstore/databases/filelist.db

          Filesize

          20KB

          MD5

          ee95bade9edf0399cf2477ac8e96d00c

          SHA1

          30ba859dcab73b134124d3a33facc1d66d28b172

          SHA256

          c06f78f9bebb11def742bbab2c0746fd24e863da44f888107e5c9104b5e54315

          SHA512

          4c55f6c699ece767d78e77b0b4e008bacf549e0db31b76e631de64aeac23028ce8141cf6eef1747a8b8d1bb88887057a4fc64135b6eeb32d9d03a6c8a1fa3559

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          512B

          MD5

          87be628290a8eb8c9ea7951e7438ad00

          SHA1

          58ef106a72257436d070c811947b46270df82e0d

          SHA256

          88d93659d755a7f55025bf133bf4bb5aae381a755cb835a27de27a2aa8b14e2c

          SHA512

          d1bd1bdf658b10f4a909c6d9e9139ee278ddf52d39ff6ab2b2054eb2ffd8b3c972f65877d9b9e041357fdff3976b16e068af9eccc9ae9df1f8a3ed174011f2cb

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          8KB

          MD5

          676c443ba4ae4b128a4c6deefcbe333c

          SHA1

          d0e5b88ce56d20510dadfe8cf2aab6acc01510c8

          SHA256

          453834c126955675d7ecf767c0bb776fa64cb4ef532096347e7e9cd0fd225e00

          SHA512

          ebfbe16406b69efc0888c2844ba4b44461dc432b3c814eacc29d7e9b02d1b5f570e5aabef9914ce170b0d64d09515ffbb7c9506a9991a078a87b281d013782fd

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          8KB

          MD5

          9c0e612e537282d97b061a5bd53f0be8

          SHA1

          36a6249bad93bdd32dc657fe536bf9fd207ec325

          SHA256

          db9069431db75ac89f1dae8c2692e14363c295852c02d590c232b91912d3d37d

          SHA512

          91b67ff95536e5a654e8a1a9d12d6567c218827dfb7d279301e6495969bd0d60c06bc28bfc916b991c3deecf507fc3539ef78aa798f94aa21a68c8c589871866

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          12KB

          MD5

          ea628e04765adaf4238a5dcdff4bbd51

          SHA1

          a801947619ea8c368efe9c006a324dc6339ac60b

          SHA256

          885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

          SHA512

          c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          20KB

          MD5

          932058c83d1f903c515b112590a35051

          SHA1

          ee90cb29f0554168077f60ae66d458a22218824a

          SHA256

          ec21c5db01d91ef738a7d990bcd11337bae4b475d9127eb5675657c68e881676

          SHA512

          940b6557f623b18787bd549a84f5483da73a46429d5949f74bc7f13d0dc74dc620a40ae5489508f85463c256de5f71751c72e3852c6a722a7ade4b98ee2b072a

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          16KB

          MD5

          0685bc716a586d0f6b849b97d0fc2d02

          SHA1

          fb3ae859d35e4e5c86af4a045c8f7126bbd4e73a

          SHA256

          c7f6ba4fe586c85516bbefb4e5702ce81e8b5b573f413fc5304f38f2dab69c3f

          SHA512

          04cf6da457e89dd0061334477ee24b39925fc4bcde182692732cbf9694a81ca89bfefec38ebc56e02555630ffe8f7f0e5033168294d8d6751c6aba914617dd00

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          512B

          MD5

          0ff10eab98b9401fb648ea368c1b3447

          SHA1

          caf5fdd961b69c8dbf90e8270d3ce196a230cca6

          SHA256

          2b73d15f341da270588db62a93c9a49b812c089c7606d503218f4ce95e5b9787

          SHA512

          fa1adfecdb82a3ac227aaf28c707255d3893f0dcf7bf2ac333df8992b460a51f220655143bd2e944d7c892f50ff785504a88f32e87eafad936c5b7158fad7cb8

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          d638057fd69835b22296b4b9aaf68107

          SHA1

          624bde6f75253b223c8553f5970b61db2596916a

          SHA256

          e505f378c44815deee627160437c370c07f80a6f8371bf3238a2d5dc8c815098

          SHA512

          ee1dc046d9a2e562d73a8da1fe1202664f65852abb317b70bf4bb8a23d3bc526c7acaaa85e6af93d2e9f9bdad6ab240741f3f2a188c1eab9e9368f36fe22e955

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          98f0a5c31a7fd0d2ea433f927d820610

          SHA1

          1c4c58db591911776d459f45da359aa1ed369571

          SHA256

          d7bd55913d85750e8c92e3843ef32816ad7c30e3aeabf5f954f2aee800005a67

          SHA512

          2f2466d05557ea16898e99d9063e95bfafc3d81a872fb8b10c65d60d3819c76a8f510bc1c30c2f1cf2e850e0ebd0354206a90b6a3fbd56913194dcb9747a1e37

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          4KB

          MD5

          172b4f3ec1c8ea5202354c0ca480ca1f

          SHA1

          b1ffd029e949391445631025ee9734a7579e9e03

          SHA256

          43d9fcb6ffbc379043767214a414ed982575868c7012da3b0f1e936945734ebf

          SHA512

          2a5f6fbbdf62762ad4ee54c65b94905cd1fe7654ff8143e701ec0a5285bf9c1db1b2da81e262429b69618dd7838c0c40d739690b7f0c2a4f55433eafea2f8aea

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          06579c837d0f160da328f8f6683d51ac

          SHA1

          d36ddd1f5eea8737fdb3c6add1d859623bc723d4

          SHA256

          915525c7870583177bfff641c7968bd2c1e5094aa30b000e7acfe210a5fb3144

          SHA512

          73fbebd693821d9848c0f9f22f6758118770b00f08da1417255953dd66144ec351cbf69c0461bff3da034a66d2848273ad55f7c5fa557323baa258e3e7f81224

        • /data/data/com.qihoo.appstore/databases/new_downloads.db-journal

          Filesize

          512B

          MD5

          0253ef23111e27240df9b36d3d61bcc2

          SHA1

          380ba48869bf2d04c3a1373a4f903d1345f85bb7

          SHA256

          52f81bcbd4887f2062afc0071eb267c2dd0b902e43dd8bf45a29e61e19a1d0c2

          SHA512

          2650ef70b3f3f3a4183b0d10ac503435e775849248e7a5b2379664a2f5accec74257f9292a02d96163fd22e0ba1462639d13f4a56897add7e5ff2621d13b96f0

        • /data/data/com.qihoo.appstore/databases/new_downloads.db-journal

          Filesize

          8KB

          MD5

          761401fc44a14f78880bbc21889d1917

          SHA1

          a392fc3a176f6133a41c680607d5bb8786985f48

          SHA256

          5321e6302e47b6d6f2376dba0789acbe258dd313bec16703de4bb48911021a8f

          SHA512

          f3785fabd7c98c9e1388e23aa0c7816eb968041c5e9ca610e12399481ae42c60f623b55d07736600a176d0b9778cdd51c946f9a45d0e5e75e85fbf12e0e3d1de

        • /data/data/com.qihoo.appstore/databases/update_history.db

          Filesize

          20KB

          MD5

          63034ee19c8ac183f4be94f0e4350592

          SHA1

          8bb94ab357099476de70fa34031349c4f82c8f12

          SHA256

          fc8213a10a4907987570701d47828767ffd9517ac55111519fb6c909b015ec7f

          SHA512

          14f6fb8b3648f247bb1c675f5e10f0259845c7a6c559d960ad74759634c1bfc92e0f41cc4cbc973cec45395b2269c885f9dac07d926f490f505cf2a89bb93aaa

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          512B

          MD5

          7f5e8acdf760332b58ae175502dd0e00

          SHA1

          33d32f58e667e835db317fe94e6a67c4f044f696

          SHA256

          032b1043c0b956b80c1ef5629e91b240d0cc755a2b83b00296e76dba398fd25c

          SHA512

          cbd9a98332ba5a825727a4b6e2a43c5f403e428e5d2f332a5d7962818ea82ba15c240959b3e10a3ed97f8ecd9414c6e67dc0513758453c764e822f58253bfbbd

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          8KB

          MD5

          26f282d5ede55e085f33d80afef71f82

          SHA1

          5c030539f0f7240c42136dee3760d1d9fc5102bf

          SHA256

          cd2ce4fa8cbf149dc469d7d9b7b6f32987aeb44863710538d80fd0e329aac89e

          SHA512

          50962a19330eba95308f2681ae359530e22f3b2669accd8ccbfa3be7bc7816ee5945026f042bde39cd004d21f353db35d95d3008bf93f31769a4baa610986032

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          8KB

          MD5

          8d1bf35d6a3661f3e5db21601cdc19c2

          SHA1

          2da512c4eca9f887e49bdd01722458090c68e571

          SHA256

          78ac8f03fec7a9a2aa5e284e6300974c447fb51f6f6888b20048b424bf845651

          SHA512

          e6dacce8bbef90f116811eff9a1ed292b632018d82c6bd0e8b18c18eb1b553faa8642cf71b60d32cbceec3c5c2acd86d8457286f5b127775a1b7c1fd1db31baf

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          512B

          MD5

          fd95dc2a1314784337050c10dfd599b6

          SHA1

          08ef924e7024ab1a88d81e8fae697a37677e12c9

          SHA256

          75c4e978e386c4539e04f0f418a6bc409e5271f4f8befcb445220536c7125ab7

          SHA512

          ed76273d13bd7ecf3d61e52d3d99b7c20e0ce4dcaa1fdf155fd529ca5161bbf8bc38fcfd62eec99b1f9d8ba0f0a657c4ce16cb420e09d371b5ed08e991e529c8

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          520B

          MD5

          cb88f64607399cdaaa7b1cea538bdd9b

          SHA1

          c6c01c93c7f828fcb8abcdf9e2a168a95205031d

          SHA256

          af4b150f2eb38492e0b4d715488b0b2e3aaec18446b09adf25df051d67766863

          SHA512

          755e77d6c0c3c731d092e08905828780a28401db01d8a218655c720da8b22a25206c547f7e40cb56dae7776e57140f6116b7a5d6a334357cddb5627155c2e684

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          540B

          MD5

          d1c28c230f7e35493b73ab24d47ba9f0

          SHA1

          ebc6900467fb3fcf9d87c9fe2bfdcd453aae3e02

          SHA256

          60ce8102a4b1171f75cbcca02404c263ba49758b989290cc51fb3c02835b6453

          SHA512

          8f81059a3245ef36021638499c19598889b905d04df4146b2a9ecaebe6b591350e707fa66cb707a9c4934c5bcf3996d39031db1a70f0dab934aeb9a80b3d256c

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1005B

          MD5

          91480fa3c4c40a048e216e8001000910

          SHA1

          aee91fa38f8e959c6afa02dfe1af29d2866a5827

          SHA256

          3e00d8b7cb9dd90647d2007924d9bb371cd9ff1fcc812954c7b641a3ed4795bc

          SHA512

          a4eacb5bf88106d49751d534b3ebfabb8fbe5017a24682b7cad47a218013bc6f20d01578a961c984be1806ae6c4a26d39836bc25b88d1531b133c5e967784ac8

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1KB

          MD5

          9920d3da1d2fdcd80c6a4c4267b274b5

          SHA1

          c8be06bd6643df9837a7ff9014400652e22a7ba7

          SHA256

          c110773560c99663a7cf8e4501f16adcf1d49c52f97174f2a1a11a322d54b005

          SHA512

          dd1c366cf58d952f4262e79f4d2303be31595f2587b7f54a0a4f178e56350c1b2168ef216c23284f914df912b60557712345aa03a61c52befcab2014853396b4

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1KB

          MD5

          86ce47c1117b42e145df5887d661b297

          SHA1

          d80bf6489a9f694fb1baacba766f5e4274fc130b

          SHA256

          4baee0130e06b7c5be3176094656a2e01556cbb87616b76c185a366b403b8ff5

          SHA512

          c3294b5f1cae8a3a5e8100191b780315a076e5a085daef60984bc44eb9ac7e3562cdd04fe1f4b161728b81caca80c4f38725476aace8eadd10c5f83887db48c4

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1KB

          MD5

          c46edd04a66c70d4181cf99e51888ce6

          SHA1

          de9d54b9cd1c0cae03601e443ac762e8ff90c5e8

          SHA256

          88669ed3bb7c1b01efcc0698aa976d15f2bacd48abab46fb64b5b532b6ec1dd6

          SHA512

          3f1a218867cbb94e202b4dd68564e7ecd678fb958a6d3b6f7a2653f68d095655bbda22a77142c288326bba232cea15e42a80cb1052fc1068f4e2077c720f16bc

        • /data/data/com.qihoo.appstore/files/sllak/logcache/log1729053295192

          Filesize

          2KB

          MD5

          9deead0e3705ed0973dc2c761a88720d

          SHA1

          fa4213d310d317ae9349c2e3d13098b8a6cc758b

          SHA256

          4c8f6c5e85e61f7f8aef0301b5a7dd8da2f9fb4cae228039bf656f7b0fa147eb

          SHA512

          25646c140e678745522ea5f72cfd6ef36c5d2de6dbe877e2af65c356570abac327e60edb6be8d666bfca20ec6afca88b8601de97461c6342f8fb68428a7b75f9

        • /data/data/com.qihoo.appstore/files/sllak/logcache/log1729053295263

          Filesize

          596B

          MD5

          4946b9f3682d7e6462aafccc61d69a4b

          SHA1

          5b4b5e3afcfe14cbc7c21537946d8417e111f9fb

          SHA256

          7d980897c9132e245336c5b2c57ec699514b6c8f669ee432fdaf6fe0ce985531

          SHA512

          6c25577f3d527f26e4bb577125534889dbc37d261e911fb1ec0af204fd830404d5152a4f6d17261c3e6e16e54455385efb6b0b215a1b27a79f66653829838f45

        • /data/data/com.qihoo.appstore/files/sllak/opt/4973/finalcore.jar

          Filesize

          77KB

          MD5

          c22d021bc98d97607bfd32956b5ad151

          SHA1

          06c937da4d6b6fcee1b7b37262350c7653771b8f

          SHA256

          4e988b4d9bae530786b4ae34bce5d43453fa172da0cb71594b9faf1f8c82640e

          SHA512

          00a3fb4955aeef39a03cce41cda9b129042fda1123ae4b1d2d702dccb06a4aaf412f5b78a9673a2ec5ab7fb53f8e50b64052ff9c274316adfa6b77f639ee9e3c

        • /data/data/com.qihoo.appstore/files/sllak/opt/4973/finalcore.jar.tmp

          Filesize

          77KB

          MD5

          c14c8a2f5d3a7c47eb2ca8c1b6e69adb

          SHA1

          4e57b3c0f34427aba8a5be40c2e9b627172a89c8

          SHA256

          7d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107

          SHA512

          2be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4

        • /data/data/com.qihoo.appstore/files/sllak/opt/4973/oat/finalcore.jar.cur.prof

          Filesize

          537B

          MD5

          d18e2bc03a50877873d4b6ebbef4f4e0

          SHA1

          255d142b3306e15e8b55ba22cc6bdef324a53418

          SHA256

          3c9a025a7ab7f81730b1dc6c2923d43a684d690c24d34de9995c72cf4e3a5b3d

          SHA512

          9eb7868bbd1659c6b93a32f5b64b6bdb61e1bd888ddedd1603320b19dfce9363d577023f1c4a72022b21021c2d5878c9790855b6dda24fa6ca633822e0398d9c

        • /data/data/com.qihoo.appstore/localApkInfo.json

          Filesize

          94KB

          MD5

          939eea1af031e8c632c8896b33613492

          SHA1

          41d1fabacf328961ce2ccc3d194acb28f85702d8

          SHA256

          e5107811134a610349539ed641ecd1d73dc51282bc4c642bf18acbc24874b952

          SHA512

          aff687e9af097e50120a2348ec566198bb41e5bff404e8d859a8a8df37cf0af61d348db85853a250ddccf0e7eedbe200a0950019e818878958b99116ce3d91d7

        • /data/user/0/com.qihoo.appstore/files/sllak/opt/4973/finalcore.jar

          Filesize

          176KB

          MD5

          b667ca71e42bbeb899566c8834ed085e

          SHA1

          053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

          SHA256

          536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

          SHA512

          52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

        • /storage/emulated/0/.sfp/.sfp

          Filesize

          83B

          MD5

          e2f5ce9356838276edd8d8d390faac76

          SHA1

          cac34628b00eac48a5b0c653ba01fc4a3f1b6bc4

          SHA256

          587a27818cacfc69a103def6ca24d64ca016fd7c8a6960dd78a4ac2898071fc0

          SHA512

          407137174b66f460da0a1ed627c2fa5fd183d40cb76075f16d923db34b78985338a37905e431a9c47649ae4ab78912f565d5551d23c024fc0978ae641aad9ede