Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    03/11/2024, 02:47

General

  • Target

    894493184431f9a355877dc69fd8ef9e_JaffaCakes118.apk

  • Size

    6.7MB

  • MD5

    894493184431f9a355877dc69fd8ef9e

  • SHA1

    ecf2b3ea2208027eb815d595be236787ecdb02c3

  • SHA256

    f8e790bf43c3c6ef1a9dbab33c7f89294dd36e01e1ab4ef4866f876c1f25dc89

  • SHA512

    f05c672753085f8579413efff6861021bd53e021544f3fb0a232f67903ed6e5847d36d29fc90afac34d7038eea2de6e4afbbc0fd991bcb00607d37ab78352836

  • SSDEEP

    196608:W9BZESfl0u+kLJlE5HSSQu0bC5GMCTz7TZSp:0Z4kLJlErI6eT32

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.qihoo.appstore
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4262
    • /system/bin/sh /system/bin/pm list packages
      2⤵
        PID:4326
        • cmd package list packages
          3⤵
            PID:4351
        • /system/bin/sh /system/bin/pm list packages
          2⤵
            PID:4765
            • cmd package list packages
              3⤵
                PID:4782
            • /system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
              2⤵
                PID:4834
              • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
                2⤵
                  PID:5094
                • /system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
                  2⤵
                    PID:5180
                  • /system/bin/ping -i 0.5 -s 56 -w 10 -c 10 221.130.199.88
                    2⤵
                      PID:5222
                  • com.qihoo.daemon
                    1⤵
                    • Checks if the Android device is rooted.
                    • Checks known Qemu files.
                    • Queries information about running processes on the device
                    • Acquires the wake lock
                    • Makes use of the framework's foreground persistence service
                    • Queries information about active data network
                    • Registers a broadcast receiver at runtime (usually for listening for system events)
                    • Schedules tasks to execute at a specified time
                    • Uses Crypto APIs (Might try to encrypt user data)
                    • Checks CPU information
                    PID:4294
                    • /system/bin/sh
                      2⤵
                        PID:4491
                      • cat /proc/version
                        2⤵
                          PID:4669
                      • com.qihoo.appstore:critical
                        1⤵
                        • Registers a broadcast receiver at runtime (usually for listening for system events)
                        PID:4511
                      • app_process32 / com.qihoo.appstore.rootcommand.persistent.CoreDaemon --nice-name=com.qihoo.appstore_CoreDaemon --daemon
                        1⤵
                          PID:4557

                        Network

                              MITRE ATT&CK Mobile v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

                                Filesize

                                28KB

                                MD5

                                2304dd698be3705c85ca097304ce7de2

                                SHA1

                                325882522ae26bc42927f6e46c489b93799aaab1

                                SHA256

                                740e5bd0953670bcc14c80bc032c828420f9460dd3ae0f165774c5ec71584e3a

                                SHA512

                                eaab8bda28fd30544fb9d413695cbfe42d3f2f184a77e6c73ec5fbad3621127a01b27f1a5675439a5314d2640ebbdf118f58bc90ae864a2923055ef9f10a31bf

                              • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

                                Filesize

                                28KB

                                MD5

                                04183d28d08d24a5b03704e8a44f1e0e

                                SHA1

                                3710a7d4f4a50e9a8a14d1cd312291d99fadf7ff

                                SHA256

                                cbcd94a175e1689d50dc1d42f20d9238dc71ff218539f8eab55da964e5190695

                                SHA512

                                817f91475b63f1e8feb1a11cf55f0409b6728bfe8db1b6fc6db63a7dbb091a144c607b2f339993d79b0a7ab338d02c9612af63296624a1ba1f6de03b96fc245d

                              • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

                                Filesize

                                512B

                                MD5

                                ee7dc8b74db4550146d887b6173e40d0

                                SHA1

                                0b6e4b2c345fcfb7af4f165ecc97bf5c18026164

                                SHA256

                                9425af4a0155e701d15cbf3f9813681fbb4e53291d48430a046a24b16b5d6899

                                SHA512

                                6a04938909770f59966c97993fd7cf581fb4d19706d06bda8b6873201323aa1f7dbff4bb796af15638669445f346ad1cadc471f12994dd4a4cae877f5b11efcf

                              • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal

                                Filesize

                                40KB

                                MD5

                                7e3977da5d9744082d652d6884407ca6

                                SHA1

                                ca4c9a35039362559a14a1ed9434b42996419e25

                                SHA256

                                1dc40b0da5e25c563cdaf37accb0a20b3995b24e461c164111f5a6c1c8b91a76

                                SHA512

                                211eb1d4e79289f0c62031a9aa63bf10fc2cea620044dca5317bd8ab6530475cf3314cd7e45ac1a576af48684674412ff3fdfda35c038162b237bdc9503ba9e8

                              • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-wal

                                Filesize

                                8KB

                                MD5

                                945ea4184253c98ae2d4d8b7241d6e0f

                                SHA1

                                39a66484a2c85192a5af5235df3c7e5752fb8b2b

                                SHA256

                                83e969ee7f0eeac80d88b6745c7cb0157172fee2fcef2afb6c9c2e823ddf2f30

                                SHA512

                                3245e9434652dc4111379a609b17ad82b46d2990e3b063bbcf904ac74d3a7403db0d6fb4ab4a779755bd90296e2b51ef5ddb090743b4c79f9988f6361db82737

                              • /data/data/com.qihoo.appstore/databases/_ire

                                Filesize

                                4KB

                                MD5

                                f2b4b0190b9f384ca885f0c8c9b14700

                                SHA1

                                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                SHA256

                                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                SHA512

                                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                              • /data/data/com.qihoo.appstore/databases/_ire-journal

                                Filesize

                                512B

                                MD5

                                7d9d15101a52c0b65cc4fd7f20cfd37b

                                SHA1

                                78598a562ae617ebab0a7ccb02c7a6b90a84d947

                                SHA256

                                e1f845fb8da896a31237ea9976b335e66ca82ef6d1de0f38d96eadcfd39504c8

                                SHA512

                                291dcb936e3f1085181976e9fcd54af8fb297348cb5f0b795aa9644584ad3aefded783f3b4017fdb109b95880e360479db24a9d50a6430fb268d2d83089070d8

                              • /data/data/com.qihoo.appstore/databases/_ire-wal

                                Filesize

                                20KB

                                MD5

                                10e7172ed57a4d0055145b3103accf3f

                                SHA1

                                7b5370003c7fb9a91cf39bfba98b2b9fe0ae74f9

                                SHA256

                                f181055c1c9cb7d688eedf7b5d032a06fd931dbbc4540ccac2ba99da4bdfe972

                                SHA512

                                3e3906e1c29a63d80def5f6d2ca922af79545b5f83a7013416a5e74afa1e3705e2053c969d5c41f91b5b5d6dd0efcc1d2279802c05ed75121b41e3a5e27c57fd

                              • /data/data/com.qihoo.appstore/databases/account.db

                                Filesize

                                28KB

                                MD5

                                924e8d876830616bfc401ee5a5e64225

                                SHA1

                                1caaa4b15e0e9bdb7bb540c37f5518ceadf80214

                                SHA256

                                6a912b040955c84b13cd3b7224673d8cf96746689840d2b3bbe6d5dbdb8c63b9

                                SHA512

                                974f9e4d4bd724308a2a066bb8ccdd8355c69c327dc034f8a742d0cdb012e5f4d8544aae43ad8a2ede8e3d41c942262de3dd1c13399677447882fb394b168c1a

                              • /data/data/com.qihoo.appstore/databases/account.db-journal

                                Filesize

                                512B

                                MD5

                                a51a94647f3c3fe27cdcaba89fd6dd24

                                SHA1

                                9126eaec3a5764f25c37c746c30eb6e9e05b4463

                                SHA256

                                d21e9643e44bbbe05735d6d7d5f4cfeba6c5cac5d2e9a823ff6fe25d14e27285

                                SHA512

                                55040d6bcdd7ac42c9a5c3fc3b2f9bfe509de1f2e7b3f4733f4b25d80de6634b976067194e79a25562ccef74d71d4e89c0376ab522a4f8a3fdd88e98ed2d08d8

                              • /data/data/com.qihoo.appstore/databases/account.db-wal

                                Filesize

                                40KB

                                MD5

                                ebfcb2840cf5eb0e79220938b7d673bc

                                SHA1

                                5caf0d4e64814e1f67cdf93f3adb1d51585c0ed2

                                SHA256

                                564a1e30c86e6abd468e2b851f9f2ef2b08ffce135e572b6e23875d6536befa8

                                SHA512

                                dbc00026c02a7324b27cfd6cb2bc5108bb6b2075fcf2ece5bd1ee9c4c841a7efe3550a20c1b66627408cad5e90b2e78c781688dfcceb4497771986872e7597d0

                              • /data/data/com.qihoo.appstore/databases/download5.db

                                Filesize

                                4KB

                                MD5

                                62a1374274c013b82de36d2bab5aa142

                                SHA1

                                1dbcdf6348a087d10205bcce79982ffa897ef9bf

                                SHA256

                                cd33b72b4b59f5fbf7d993e019bfd0d690330dd48380aaebd113d1eebf8b178b

                                SHA512

                                54fc63625164368fbea2ed10c206a134c94c9a27efcaa324576362bb8baeaef6dd50fa84dfafb2605cc3554fdf7f65040eb4a107fa9a25f0ab03fa2568ccae9e

                              • /data/data/com.qihoo.appstore/databases/download5.db-journal

                                Filesize

                                512B

                                MD5

                                6a52dbf21a2ccc98958c6e79c4a2dcef

                                SHA1

                                941088b321a72ecb63c47b81d610f3a9afaa52b7

                                SHA256

                                9b6658894f56732a85b108287088222e07aae5056d17646f44258aa252aa8156

                                SHA512

                                ea4cd70c186c74ee667a7c18da81a3aa5e1a5a82ef55394eebd877e8c0e198e08b4aa9b6154fa6831a32fb6b55a6fdc48b52ae3a2bba40a1959cee5809920d4a

                              • /data/data/com.qihoo.appstore/databases/download5.db-shm

                                Filesize

                                32KB

                                MD5

                                e6c5b607ff5597a13bf657cf7ce4e324

                                SHA1

                                4b67d524762478c3a07b4a6edf82bcfac204546f

                                SHA256

                                90266c3e350dcf3afb304a4bdee2a0b8b1566c6648491c3063b9dd2e2e60048d

                                SHA512

                                0af51b04581a53be763381a8de45465a151711c3bb7500245c9117ab056dd17d30e6a8189cc11669c26d8f187f039ec4a8cbc1a8137ade85fabdd923a971e6ca

                              • /data/data/com.qihoo.appstore/databases/download5.db-wal

                                Filesize

                                32KB

                                MD5

                                b8e83980beb9c64676a0db860d13580b

                                SHA1

                                a36718954a4c2dc2da08fd6823848b3657e7c5f7

                                SHA256

                                9660de3b0833a2d74d422f3fda0844058e322831a98ba3b877e7f5c7c91520ea

                                SHA512

                                0e95a78c7ca7f6b281f7935ffd3cad9f0889ea4ba55e782a23526a1067ce1898e679b8f2a9b593c7d5eb3d75ccffb3729c995d481ae1f9b1fb99cdc545e8c6ce

                              • /data/data/com.qihoo.appstore/databases/filelist.db

                                Filesize

                                4KB

                                MD5

                                198ffc98ebc6ddd0f546688ef94623be

                                SHA1

                                20ed5f841fbb99fc6db81b8971369dac3084ca0a

                                SHA256

                                9fe3dfa8339e98aaf19ca82a96178ec2aaec3007f2d9b8c9718b6b8c549352f4

                                SHA512

                                82847afe31672c81b9375ac2e180e547f42cfba1ca3251f81fdc4c472bfdbe9b6ea692bbc5b598038cca76bf193fd4afbddb7034829910f2d6bf8ca01e331ac5

                              • /data/data/com.qihoo.appstore/databases/filelist.db-journal

                                Filesize

                                548B

                                MD5

                                095c2424e35e36465ab4ad9893e8be45

                                SHA1

                                39fd5237eb71c258deed8c9d84aea43bb75efb24

                                SHA256

                                bda2a4141220a95acc76f9efda041df8b29ff64435e607a92691ca56f40c3cf3

                                SHA512

                                d68869e6654bd7150a9fcb5fec1247cf4ada4847e25427288ebb55cc5e13e852eefe5e23e905d9f6c91895105626ec63316d06ec4d9e75861235ac9fa0c03eeb

                              • /data/data/com.qihoo.appstore/databases/filelist.db-shm

                                Filesize

                                32KB

                                MD5

                                bb7df04e1b0a2570657527a7e108ae23

                                SHA1

                                5188431849b4613152fd7bdba6a3ff0a4fd6424b

                                SHA256

                                c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                                SHA512

                                768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

                              • /data/data/com.qihoo.appstore/databases/filelist.db-wal

                                Filesize

                                32KB

                                MD5

                                5265289a445278e320b42037ba633b3d

                                SHA1

                                e69d5e51ae2ae5aa816add3b2ec848c63265d539

                                SHA256

                                e706e2a50a3752f2a57309e194243be8a37fd900040326ec447d146407be5348

                                SHA512

                                bce11947cc48905afc1c66c8aade62a120a395bd9e1f1521448da56db4bd242b1f921e8722daeed9db0da0e3d3b2dd7acf2ebd524d2c0f55a42dcac482a581ae

                              • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

                                Filesize

                                20KB

                                MD5

                                60e4cf217e77c56efd3707b603797c5b

                                SHA1

                                816247b4883d3adb30c4db39fda16d2288e27de0

                                SHA256

                                8e2b8343f703045fb8596dee1888f65fc66b64d10304a4a49fd4ad1f63bd67ea

                                SHA512

                                22a8cd2974663e8caa220177e7bc64aaf35735dc8abc3870a7e47ea86b02d8b06b041000e5505039b3116290aee67e9645ad2d9c26218749f5b5b2e332712af2

                              • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

                                Filesize

                                512B

                                MD5

                                1e41cfcd4030f877d7f9a0bb2988f9ce

                                SHA1

                                b82c4b66ce1dd9fa51e6a84bd2b05b3e7e5aa15a

                                SHA256

                                14be97d95854f8656117f62fbae941a6f8893407053752fee77b18f00c1e313b

                                SHA512

                                82685982ef8f59f96d769510dfc11796e13dcdb1cf02776a602a61d3e35012774d71cb42d82aea580df64c12c5f34ee3067c0fbbf31a02a8d4763ec640c004bd

                              • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal

                                Filesize

                                16KB

                                MD5

                                d434baa1f60294afe36a8b341288a584

                                SHA1

                                48a1303b230b9785f055af18871fed5f18de34db

                                SHA256

                                ab4e92e8f2843c6c580df72ed839637f9e016594809b62412adf29a1f6b93cde

                                SHA512

                                1bf950fbb94bad6572a9bab7b472a668abe3806e41af15e859eb2b76f0514e8682b73bbf48c70a43b24220ad0fd0c65d7652f6c340e0b6a5cb8194dbfb4d5cc9

                              • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal

                                Filesize

                                20KB

                                MD5

                                3a58f60568b5a8da99ff3b58a0f8d53a

                                SHA1

                                3c8c96d3cb1952144b878cb883d1c8bef7452328

                                SHA256

                                779f7324b064f3fb420c15217dfc844da00af81444b6578e55d594a9e33a4c87

                                SHA512

                                3816464d328eb788eb2e09bf3f528b75df7464d51b9ab718feed27a457071e1b34e13f80a72efb04c7734842e533fa502baca594f08ac5e0113e0ad44889d1fb

                              • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-wal

                                Filesize

                                4KB

                                MD5

                                52e3fa8e3827e22bb00ec135bf90aa8b

                                SHA1

                                20a1700d67b605dcd9a83f97ca8b18c72845f85c

                                SHA256

                                cdf47cb12ce5f9f0b1c77d2dd7805129e09fd8898e1b5f32bfc614441b3f608e

                                SHA512

                                87b2175daf148a928a8af553cd7c9f32c9f1ca2e18a6b29d05fccc3a2ec23aee8f19eaee69d5367edd270b17fe66d1fd395a39cd5fbe482598c465371e229221

                              • /data/data/com.qihoo.appstore/databases/new_downloads.db

                                Filesize

                                12KB

                                MD5

                                3fe30614d7e0d11db870b4624f6c50e0

                                SHA1

                                053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

                                SHA256

                                67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

                                SHA512

                                c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

                              • /data/data/com.qihoo.appstore/databases/new_downloads.db-journal

                                Filesize

                                512B

                                MD5

                                519c648cc3d9f9d8f54fc613b5e02738

                                SHA1

                                5e192ecfc5b07ddfc0ebc64806ff6e45b7333dfa

                                SHA256

                                32cc0d38518191bc0f175a0eac04f592781b1752858a6aa76dd36272e390980b

                                SHA512

                                fa5943ef08528e5999fa069ee58243b9526cbf610bb799e9d0cc081b17e1d2cd1ddea88ead87b7f4c578701e2d55d76188393c1cf7f0f7ffb3a37ac80dda1b26

                              • /data/data/com.qihoo.appstore/databases/new_downloads.db-wal

                                Filesize

                                16KB

                                MD5

                                f81e32962203e5cae6c6b2095d1c53ff

                                SHA1

                                c20e5fd76a83458de4b242c314b5121dc4bb16bc

                                SHA256

                                250b3c548492ff8903bdb14a4a3498efbb5b6aaba948f338274b56f547e00dce

                                SHA512

                                9ec05161dc6dc63a2d7123902826c2c344cfea99a7493922bc21618e1a58dec98f5ae0cdcd08a319ca3dd09ba2d3a026b75d641eb0e9abf141ac0ca27e97c53f

                              • /data/data/com.qihoo.appstore/databases/update_history.db

                                Filesize

                                20KB

                                MD5

                                e0ddc29dccfd6312689ea105cf0434a8

                                SHA1

                                59191210f5a80bc047f8155ea92544f4095c38c5

                                SHA256

                                3079b5c02af6b7ddced940086bf7095b1205bf0f396b87da0d5c5f6d8b5b6143

                                SHA512

                                d5ec8a2bd21928c07ada4ab4df8e72b6905872533d01afe4eb243ef06674e630a9834a03dc5fc2f8d487c3cee8aa3b3117e73379ae64e6f4dcf3f8dd0145fdb5

                              • /data/data/com.qihoo.appstore/databases/update_history.db-journal

                                Filesize

                                512B

                                MD5

                                d402f0fb9746d1c0f1bfdf4f4b0efe60

                                SHA1

                                63096180135fb1f52da71f3fbacfe9770ccb33da

                                SHA256

                                6db992af2c9cf9f516ee263f1dbf0b2b4f446a97582cfc817e61663bd02a6700

                                SHA512

                                a2de1b27e18412d27634d9c9ab8791fcf585b080aa7b5b193ad687fc20e2ecfc0bbe92fab4f0794b6e513e078f1904da81e9cb21a0f1b3422641a45c2b3505cd

                              • /data/data/com.qihoo.appstore/databases/update_history.db-wal

                                Filesize

                                32KB

                                MD5

                                894d516412eed4de293d7cfdcde42db5

                                SHA1

                                bf8fb621337065980fe0a687ba3a62ee6c5ae670

                                SHA256

                                80134a0ab32acca70dec55701bebdbba21404078f7d66c635b6940d391b9649a

                                SHA512

                                8f335d6a66cdc7e4fabfdb5eadb491ceae3475dd955ef460301fa723d25639af86e1396a1561e862ea96ba478f98e3b9ed605f268426b97e912195a53a4d140c

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                1B

                                MD5

                                eccbc87e4b5ce2fe28308fd9f2a7baf3

                                SHA1

                                77de68daecd823babbb58edb1c8e14d7106e83bb

                                SHA256

                                4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

                                SHA512

                                3bafbf08882a2d10133093a1b8433f50563b93c14acd05b79028eb1d12799027241450980651994501423a66c276ae26c43b739bc65c4e16b10c3af6c202aebb

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/backup/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                469B

                                MD5

                                db2e1fcbd7c2e2db40f38cbc1c51cd17

                                SHA1

                                cdb6f2622867ba3b06afb3c6c68fc1813a47c63d

                                SHA256

                                fed8b3e4acaf2cef76a82e655dfcb15900d63fc15736bca7734d7cb0f149cac4

                                SHA512

                                d05a35c018a8ad07732336c577a791cde8e082aba76c9f18ced44d016feeb66effea5bf369ca21c59bf442846f51a62bf5a63a3b3dc026837b01e2c2b7a4f5dc

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                580B

                                MD5

                                57a9c19aa29bede21729ee3f2871406c

                                SHA1

                                094e3f24ebf3d45b957ccff4f37eeb8a2ad9c3eb

                                SHA256

                                a0bb4308f0e67bb80f779d0b52d21915cbb5e80ba6aa55c4006eb330204bcf26

                                SHA512

                                5a7e7525efcecf99df556fb946afc2f5b55c3075390054c1cabaa4199ffeed2323b3c98dfde490e075a2eec77afa7d584ebac822539431429d70c05998904481

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                520B

                                MD5

                                36cfc2062edd30e730a4469ce47d380d

                                SHA1

                                c86c19c2cac20d96f037f540296490b8e84006f7

                                SHA256

                                89c42f158487ed594f2158ca49ecdd1364c284d14b3fd37a67b4e1ba85da9de6

                                SHA512

                                c50991acfa91bfc8cc1f1de5924b35bd6a0d29424cc40af4f270fa4c15e6a8b2f1a7a02b71d7f496e77ad8757c6934f2c8c64edb4a506932ea370a2dd814d19a

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                544B

                                MD5

                                1a5862eeaa9b99b2c7208afee78c5251

                                SHA1

                                dc260135f0639de8cb698851233ef90960b27080

                                SHA256

                                c61d1495d5e71d2ba77184fde919fa41ec03cd001e07ce1b01f5bb761e961efb

                                SHA512

                                b9f2d4444193e29273d34472a7779b7817e843c00225fc8e516c08a2764362e8294210ccb14bbc3e0a8a351dfb4d89faf717436f2459940cfde1cd575db2b9a3

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                1013B

                                MD5

                                cbd791a09018906dcffde801e5ef75bc

                                SHA1

                                b92f97020b910d498fec167d5954f7faf6e2a282

                                SHA256

                                934cad59cde868a6a1d8a93626faacd3c3a624db62cb45b37439c34f6495f46a

                                SHA512

                                7ca1e4ba595e85be0f2baed766051fd0dc6d8f68b1fda15f08fc6bbc5aa262da37e9a4d4c5f1c67c40f5b7e505befd14a554dec3bc3575e0bff3aeb59c2c66f1

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                580B

                                MD5

                                fbff1422339edc2555314a18f505d83b

                                SHA1

                                f328ca6018c1ac322aa9a0a55a32a48c08b80bb8

                                SHA256

                                56d1497eb5d97e979a9369a55c94384052864178e60e797ef84e3a337056a25e

                                SHA512

                                7c4655fd83e3112d60f5babc6e3e6a76af9b2da62b2ff9a35fc94993a285c2b0df9815af8d704ae3de638e0636586efedefb5c3b4ced22c8f07c6071de7d71fa

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                628B

                                MD5

                                cb47b544a3e27e4b080a0ee42dd27927

                                SHA1

                                729aa5f46a195d0a647733f01fb3a185e4143f85

                                SHA256

                                f14ac70d6733e207c463c29190117b63915b13bb1ef515411fcf0790dcbd6c87

                                SHA512

                                24158464826c018ac7bce5a2d4f1dfb3aa3e31a8a845524a50f2aa1cc0bb1d768d5a85994cee3c80ac81e420ba7fa002379d9d317143614719f2b326fa5cff5c

                              • /data/data/com.qihoo.appstore/files/360/sdk/persistence/report/Y29tLnFpaG9vLmFwcHN0b3Jl

                                Filesize

                                660B

                                MD5

                                3ae62010d3c39ab11a5ff90c406c8de8

                                SHA1

                                4669762567f7577b552ff29d6b3b255dc6e7547f

                                SHA256

                                f3fdb47c985b466d23c64000a6788ff2bcf61eadd655171fbc594d6890cabcec

                                SHA512

                                37eb25b0134bb6b6b4237ca60c1a67414baeb8f303c0a603b778abe1f24b8a5de3e1efd54a53cdb69ce13e6df586679000d048e1e4c0415bc18e020f564f47d6

                              • /data/data/com.qihoo.appstore/files/sllak/logcache/log1730602052170

                                Filesize

                                2KB

                                MD5

                                fb864f31604b1da392657100391e65c6

                                SHA1

                                afd76b0aacf3dd0350a6de7efe32d15e519b747e

                                SHA256

                                bb082397d0267d16fa079217016b7858880dd8d10d776da5f6854dd4d1db72de

                                SHA512

                                037b55e68bab86992ee0a9cf2d001487e2b123771c62475b6bf7b27449c5307d4ebb80e3ed561d9a6fc93217dbec80d8be68b14447b2cf14c3fddb6743d8f7de

                              • /data/data/com.qihoo.appstore/files/sllak/logcache/log1730602052238

                                Filesize

                                596B

                                MD5

                                dff46253cb7ce1c1564cc7a2eaec864f

                                SHA1

                                4c4b87134320769834cef06488a9ca296ac448f3

                                SHA256

                                0a087b1d287bc05bf282f5dc1766c8c82b495d280e6bb31bbaf37bcea57c8541

                                SHA512

                                a7804f18f5ba5e751190541df4acbd0896105021d1e2551086d2a260dd75302b0b1af40fb2deccf3736a684a36a6b48e70c6f0dc9a69cd6fe40f2eee4b490346

                              • /data/data/com.qihoo.appstore/files/sllak/opt/4262/finalcore.jar

                                Filesize

                                77KB

                                MD5

                                cea342c26e9e97e4c97351dc9ece64e8

                                SHA1

                                ba100462cbaaeca3a91e1183f9aac2a3d462031c

                                SHA256

                                1d84e9c67f7d940d907f35c7e5fd658382698dafd71aa68368298de852512a39

                                SHA512

                                5c36c3f01440ab07f98aa4ebf6b438622fa8ea592fedca36c9de0000be6096e46f59b992ea2c80c41933524a8788bd3fb24e5dd8014d95a94bed407a989eba0f

                              • /data/data/com.qihoo.appstore/files/sllak/opt/4262/finalcore.jar.tmp

                                Filesize

                                77KB

                                MD5

                                d9ac6c16a3f6f73ccd5dbcf892ad53d0

                                SHA1

                                cdfd073fe28676f5d33830fbeec11388fdb7b6c0

                                SHA256

                                08fd311fe10d63723f28e7a15d61dac778840a137c90cb54d7e8efdff5d388e5

                                SHA512

                                f08e6ed1a0e8653115634a2874e6abdb908a8f4210e3aa37557a201be41141822f56f1816937ccf59bd53c5f3dfe237cdb72e640fb023a5c0f48221ce607f3c1

                              • /data/data/com.qihoo.appstore/files/sllak/opt/4262/oat/finalcore.jar.cur.prof

                                Filesize

                                536B

                                MD5

                                bba60a2e85bf08c8409da051664f75bc

                                SHA1

                                99b474734e97975a5689051f43a12eebbd13bd55

                                SHA256

                                e745b9dd07b3c04bd5c10a75d668e29eb3045729b58ce269ae7606b2fa09eb85

                                SHA512

                                1cc63edd2d3f062014950847aa51d75b642ca2170e614957550db329ca09b1166eaf27b7a19445b7f5fb33bd9e31c1dc45804e88aae2e3e9e9e52ce46b5749c3

                              • /data/data/com.qihoo.appstore/localApkInfo.json

                                Filesize

                                57KB

                                MD5

                                bba30467c1bc7ef8566af0671b700263

                                SHA1

                                0d9979c25c437a676dbee21d3e05111f53213bff

                                SHA256

                                8ebb2291ee1265400a9798813f8e09eb53f9e28155b1407eb6d875cc68662528

                                SHA512

                                61b353b0965b098725a377cf34c489118f9ec8a9d688fa222225560814b99c399dd040fedf129581de7cdec8c961f0925fc432348f2d7f36533e22117f2697b6

                              • /data/user/0/com.qihoo.appstore/files/sllak/opt/4262/finalcore.jar

                                Filesize

                                176KB

                                MD5

                                b667ca71e42bbeb899566c8834ed085e

                                SHA1

                                053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

                                SHA256

                                536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

                                SHA512

                                52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

                              • /storage/emulated/0/.sfp/.sfp

                                Filesize

                                83B

                                MD5

                                4b9ed02fe50f9ff458f659b099c562a6

                                SHA1

                                33d22fdac1d51ba145981528df6582e3e3ef5809

                                SHA256

                                df9151d713d02af019b80bdf38ceeda964eda6204f9ede199ca8c61026df4816

                                SHA512

                                1cac5f33df6a35a26155d0fce8a6355d99f764817a9ae389a3dd09e4176057496a54f6ec60c07a86f18c7dab7a5b0767a5af8fcd8e50e5eca8b74a704b710eb5