Analysis

  • max time kernel
    149s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    03/11/2024, 02:47

General

  • Target

    894493184431f9a355877dc69fd8ef9e_JaffaCakes118.apk

  • Size

    6.7MB

  • MD5

    894493184431f9a355877dc69fd8ef9e

  • SHA1

    ecf2b3ea2208027eb815d595be236787ecdb02c3

  • SHA256

    f8e790bf43c3c6ef1a9dbab33c7f89294dd36e01e1ab4ef4866f876c1f25dc89

  • SHA512

    f05c672753085f8579413efff6861021bd53e021544f3fb0a232f67903ed6e5847d36d29fc90afac34d7038eea2de6e4afbbc0fd991bcb00607d37ab78352836

  • SSDEEP

    196608:W9BZESfl0u+kLJlE5HSSQu0bC5GMCTz7TZSp:0Z4kLJlErI6eT32

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks known Qemu files. 1 TTPs 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.qihoo.appstore
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4963
  • com.qihoo.daemon
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:5002
  • com.qihoo.appstore:critical
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5205

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

          Filesize

          28KB

          MD5

          073bf578f358397eb0890a40280081ac

          SHA1

          3ef956e97836079ef32105e6f84b401e7dd4d10c

          SHA256

          c48a18c175de831a21353fb0bdf0d3e43b83ba7655982152df5cf0100b2bf37b

          SHA512

          22c8bca8429348bf9c0614ba55e6e8dc865cae42306bda2d05b588d7ab34ceda0071695654efe0a429cdf5a6ee812db8d18ba794a80be2512c5305bcdb314134

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db

          Filesize

          28KB

          MD5

          68a663c3f95568e27a9480c447c29c1b

          SHA1

          bdbd0c162d679fc3e2f96beec7b3fc21be4cf78b

          SHA256

          442847f7a12c988f83a674323cd5da163d5ec79152b658abe27baafbf70935c4

          SHA512

          b3317e0dd3be80101b53bd0eca193f4654baea2c8682e0d880afc248f142c6e34c22f5ecd689e56914954bfbc842cc450fa2efe01f668cc8315250c3b4d706e2

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          512B

          MD5

          ab819d27b267a34701b46e09ac1a91f2

          SHA1

          f00165314b5480f7863d547ff93ea115af89cbf6

          SHA256

          bd32a071432fbc3d859b9b74f722f499b2a084cdbf3b3cafd08819cc74bc1658

          SHA512

          2a40b28f20784369b27fb713c5b8ba3c4ce89d0dc558f783730034efef18f0057326e7b933977e7afd17c29d8b10f573a75037fa9a313b892fb7e849daad5de3

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          8KB

          MD5

          7b150f762bfc24123c40f202bdb71384

          SHA1

          1d8cf10b1e13268248b49dab0232309289d08d49

          SHA256

          ca871ed01bffab46f23c466aebc0bf4bfd650fcac99acd20a78a9cc9b6f3961b

          SHA512

          77ac6322244a870e035e360f11de7d2224c998e15a30f54b1d54c77dcb51159df795c925149ac4a885b52d146cd395fe3e34e7506a76c719d5a785ea70fa94b3

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          8KB

          MD5

          0e1ab928233902e8bc173185db7b0509

          SHA1

          9243b4c08e22fe0527d8b1a84fc935396ce7f83c

          SHA256

          c1187e3d6058d8102a313eb2bbc40f8215e0c4fa0b8ed3de6b015761a36eb068

          SHA512

          5af85793b875e6fe5bfc06cd6d42d591c6d88a7974a4007fc131a9d2840b2aec684e1f4fab7648310452796ffa56d0d005aef6c88461de4041dde218cf7a2cb4

        • /data/data/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

          Filesize

          12KB

          MD5

          5754cb3f26a5533b84c08a971b6e9685

          SHA1

          d9fa8e647f4071b5083939c63be0913701cdaeb9

          SHA256

          231955d950917af6487680ea6fde1400a3af456d39d006b4dce7000d2ead3e6c

          SHA512

          8b98b5639ca5d0d854a99e0aad0428281046342272e0b93047176b552108aaa614a37b8c70ffb3ec5fdea9bdd3fb0976ddbfe3058e56bc25e2b1844c48ece5e1

        • /data/data/com.qihoo.appstore/databases/_ire

          Filesize

          12KB

          MD5

          6da302a2e5fc0263420684f38a00e3fd

          SHA1

          9e1c35e91c3b84600dd8ebc10e072ccb91b5895a

          SHA256

          a9b2f6227429fd83edc4db9e62c5e3f8c45b55598f7b10c3132d6b339283c8d2

          SHA512

          6e91d3076e4f382a5e4119e6429b90bd4d604c858acb4914e8b67226f4ad0626e29726e09d12965f075ac6aebc49eb22faf0f5c6a286913aad9515887f91fa1b

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          512B

          MD5

          fb232a61e1404e3fea526905987afa29

          SHA1

          1070c9107f675b1bac2960c3159bec1290d6cfa6

          SHA256

          35d6e891de4f041d27e1aada82dea9c257160186b3e2baea4f7531426fd25981

          SHA512

          266848fc826d24bfda2dec9497877c1923ed112cb799b58f8c2f384dafcd49076794afcdb751499ad513505a77bfff5fb903bd68fccb823421db58223029085a

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          8KB

          MD5

          30318222ab0098f22ad7d528f42be3e0

          SHA1

          1afa948e1329cc3e93d076ecc59afbdd75bc81bc

          SHA256

          8135e8e0d0ab50751f38faad8b0e87189d32758524de27299519bd20cd79da33

          SHA512

          3f656b5921ab3598605054d685f1f93722586cbc3345691778f81270ac193cb93a774e3d851455f22415f0a546a47ca6eef0f4797661e98ecf9764f8c55ba9f2

        • /data/data/com.qihoo.appstore/databases/_ire-journal

          Filesize

          4KB

          MD5

          0866427a12d7a67610e342734e963dcc

          SHA1

          72d9049b71ca5f3b0add70722410fe3bff7e331e

          SHA256

          84204a97ef51e84cbc10b5c5e9491196b7ced8b08f8c585ddf9fabd84d764355

          SHA512

          f9d550f96375992389bd73658be57117c45203959824342883d65b55ea73fd5b04e80dc475a9d1f10880e3a2aabf4c09c1a3339388ad227b8d5698db7583f93d

        • /data/data/com.qihoo.appstore/databases/account.db

          Filesize

          28KB

          MD5

          f630f8cf9174c836248b6d30cbdd5779

          SHA1

          4db6d82e8e17de9fcdf0ead09e97123cda1ca86f

          SHA256

          ae606221ff789289e1c69cd9f79ee035d1c587a96d556ad8ac6ee91fe6741041

          SHA512

          c5045a96a9214932971165424348327e2396c204839749884ab3105c7d185693c6900acc3d52cdc1463633890cb123e21abd7e68d71907c043d37f4b52a7ec5a

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          512B

          MD5

          5f54712f2501f1bc7fabccffaec8fb13

          SHA1

          0dc057cdd2b14dc0bc78829772d710dbf42824f8

          SHA256

          1f0f8e43e6f1816622299b0de7a5a2cab0c07242b1b62172e4c0db082eb8e189

          SHA512

          1955c54c4a3b06ea371222ae9a558dbe9fd93ff49ca30a9e2b417d939da026e367ffcd911c422522cf2591d080e359aea4ef954a3fe86f55c87cca226bf2249e

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          8KB

          MD5

          7815f24b74fc0d0f6a056c3073ba8e0c

          SHA1

          04367d2394daa87d19c58dee1a1eb2df0a18cea1

          SHA256

          3fd61b3887a8ae133eb3af869427bf64b86994c28dadbeb6b0d896e35721ac49

          SHA512

          76a5dfeb8b90cab1af57681e825eb3c7c6a85dc63bf86f6f5ac1a2915c3dbf3031a5fa179ea6753efe9df9bccf9c55d43a8040691a14097f81bff488178b387e

        • /data/data/com.qihoo.appstore/databases/account.db-journal

          Filesize

          8KB

          MD5

          addd0a033b67e9c5aa73e62aedf46493

          SHA1

          bb8dec61364232f4ed097da14a616aca83c668cf

          SHA256

          ddf9cf15b94f75a2f788c26be97e013dc91b5552c2e47e50f2e4cfff3f41e39e

          SHA512

          3122e90c05750d138783122ff47b9d51e10e4d611f4d3dcc403785223bf95be61a9c32054e2f973863ce535467e068313bc41d80b6f3d197377fed87fcf28ee7

        • /data/data/com.qihoo.appstore/databases/download5.db

          Filesize

          20KB

          MD5

          fc8157c20aff4c65d310c8b1495a6c09

          SHA1

          527adb90ff40b74b6b0268a5018d8af7faf53c8e

          SHA256

          d3ac468ba80900c4780701925d0a9b119be2317ba08a41b5c7084965195d56ca

          SHA512

          d962ea97226a5f9937a55dc46fb1f3ba4fb0782dc9a34ac362000d7e2abb4d9c2cbc7bde310708a4462bb5e8af7ee0d6a4b87c0410804a71d0848537ea6b9fd4

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          512B

          MD5

          670bca957bff3aa5136aae175affa6b0

          SHA1

          58159b6aa4664dc5c6e7705d610bf05fccf669d2

          SHA256

          1e6791d900c95692cb801a09580955fc94af2237b23be8218e46a0dc6ace6fe4

          SHA512

          bf060d3d8ddf54163165904bb5b0e3c058fcf5ed5cb16acd542133dc4a7ad751d2e692a5ecc8428a52abdb816aae65ed53514d3b33dce05c39baa9cd5c20ac48

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          8KB

          MD5

          2b443240d4b2730e54c4c2f563e169ca

          SHA1

          c5580ae6b0392f4b61269309eaa04c920f1aeecb

          SHA256

          f843418e97e6153ca877e76c67d416d90fa9976fbf3ba0095202f2ea335824ab

          SHA512

          1b1968965e434fadb267cc5dfcda0f3f80f57a6dfa59d75939b44c5d26d699cc27e4de512bd8cfca63f06503e8d11f8b1f3f2fede520bec96b56ae925047dd22

        • /data/data/com.qihoo.appstore/databases/download5.db-journal

          Filesize

          8KB

          MD5

          83402759c4be778f3f3cd4879146d659

          SHA1

          4ebd332dd776705c4dc6c2d3ea2206ff889a2590

          SHA256

          5a6f8f47c96c547c0e9663bc3d2f859402016cc27cfe6732611e2a81fb645d84

          SHA512

          ece032f7c3bc92d3296dc78ccf9998bc627abc5ba1accc78ebbbe2f2f919270e4bc1676a8fd940953d25f2f091de179a918fe27e4ae8b3370d525f2af0041446

        • /data/data/com.qihoo.appstore/databases/filelist.db

          Filesize

          20KB

          MD5

          3e61d53e77a3fc40799a0bf801e59334

          SHA1

          4f939a457b8e5636fa0795918f0f18f1a1059a25

          SHA256

          804deae32c427a6fc3d6cbe2947a20501f5f88c9b05554f8cf56a65e027aaaf0

          SHA512

          7b77da7bc0434379171784e0036a4db38da2d86cf34dcac1f2ee8556e366fccb2193b439ba3cabb0a6ecc253fb648af62cac223c556b64c6211df3ef81f97e57

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          8KB

          MD5

          8cb60e40eb3cf1b4d7e6451107318634

          SHA1

          ab2764e14b66e9f673d47dfa66719b6d657e54fd

          SHA256

          6ed4a7e9b6b46b8a12daa0829351abc094677c422e328b01bb94d8e0c6bd8be8

          SHA512

          6d7b33d329f8d3f59a8c16caa73ef6b43d240cdea9d0f584ce062930512094eac0146c034725e7654f580014bcebb08c61a3196364eb7f45ceb0ff93b08a32ca

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          512B

          MD5

          c536a9900f2eb9ea4c5af53950b2c900

          SHA1

          d44f3e47f58e42dd9611740e73f5e16dfc1a0f12

          SHA256

          b0b4764d28f7bc634d05af944a34f56b0556271020a453116488eb56a6370f61

          SHA512

          1df4df8983864a95af4b24bc235b71af1178566d525ee3b7f753a30c29d3754b01ada4ed2c9ed9e3c61248755fb405ebb411fe66c8dfab3b51552fc77b83825f

        • /data/data/com.qihoo.appstore/databases/filelist.db-journal

          Filesize

          8KB

          MD5

          347b9a75c6c5c1fd4317295492a68206

          SHA1

          2b73b5f33eb5a2e9cff6eb1d71e346615be46738

          SHA256

          5017a89ff0cfc6bb46a81cb05a53767713df27c4ffd59833f10caa4c72da32cd

          SHA512

          732edee2ff08c41ae1ca7f806a2ec9200d5cf28c272ce24f2e94e177f67e0cb28856043cbe43d06c753fd55a24dcfb78e7dfb8811ea923fe4292e8fddcdba415

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          12KB

          MD5

          ea628e04765adaf4238a5dcdff4bbd51

          SHA1

          a801947619ea8c368efe9c006a324dc6339ac60b

          SHA256

          885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

          SHA512

          c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          20KB

          MD5

          932058c83d1f903c515b112590a35051

          SHA1

          ee90cb29f0554168077f60ae66d458a22218824a

          SHA256

          ec21c5db01d91ef738a7d990bcd11337bae4b475d9127eb5675657c68e881676

          SHA512

          940b6557f623b18787bd549a84f5483da73a46429d5949f74bc7f13d0dc74dc620a40ae5489508f85463c256de5f71751c72e3852c6a722a7ade4b98ee2b072a

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db

          Filesize

          16KB

          MD5

          0685bc716a586d0f6b849b97d0fc2d02

          SHA1

          fb3ae859d35e4e5c86af4a045c8f7126bbd4e73a

          SHA256

          c7f6ba4fe586c85516bbefb4e5702ce81e8b5b573f413fc5304f38f2dab69c3f

          SHA512

          04cf6da457e89dd0061334477ee24b39925fc4bcde182692732cbf9694a81ca89bfefec38ebc56e02555630ffe8f7f0e5033168294d8d6751c6aba914617dd00

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          512B

          MD5

          73f0b2316c2fd455ac5c6da01ed3f1a8

          SHA1

          6e4bf6a0a61c826199105c02af51266a25ba8d2c

          SHA256

          43f48db6797fa150e12527bde6d846409ab0a3474069da600e79b9a041dda1f9

          SHA512

          a4754c49f6f4a5a4e0abf103bd299fdd1bc8701f4cfe8530693c087d4881c986ec7d44441f7a5a854747a26ad54d912db1962790f143e384ab6fdc253d50ba0d

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          7f54ea81ad105eb42d53601921a432e4

          SHA1

          6721629802cf7ead5916e07dae40a658b21a0360

          SHA256

          a30a5e5c2df2c554d25b21b97ceab9aa18ac6df62ce0c1310c9e4d7517b139ed

          SHA512

          2fd92d3f320fbc65d73652282983312e74e1b5e58aaf5b4f65cadded85d21caca2588ad028f35ef445531d9633fd3350f1397b52c1960b53824d13f401d3ce7b

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          f055f57a44de46e14a5c6248222b47d2

          SHA1

          3d3caea1d92b1883813d8bb27c11c70785adfb90

          SHA256

          49eb6a9f6f886a6f1d14cb67b1a46875afc354c3e82387f10bfaeff1c98f963f

          SHA512

          debb467179a51b7958bf301df17668f25d66456cd94e64e35d64f4072d2141f77647cc6878d5d8c1d29328e45e77633b6df1773d644c0812bcc430ee28f7825a

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          4KB

          MD5

          643ad5369a250e3fb10776f116fcea12

          SHA1

          3b09548bd0bd5b0dd7883fc31af2eb5bd0bead14

          SHA256

          eee8160bd64e6405402dbfeb876ca0a23f71fe5e9a0503aade273fd6a38ea9eb

          SHA512

          21068b4118f03b41dcedb7c49d464f9250e5222ed0adaf2fdd98bbb2c7efc740469a2858b211b4e541265cce93dcc97cdb0edad1762f9704ad2ae149dc8f4462

        • /data/data/com.qihoo.appstore/databases/ignoreupdate_appinfo.db-journal

          Filesize

          8KB

          MD5

          f6681604f6cc545fb1360a33b4ce6499

          SHA1

          13286ac8ed65c5eff1661184e0150d0568a03370

          SHA256

          9ec64e5ba936106d927cba0c44bb9a06ef7a600f79019c5b5c4bce91f81cc1e2

          SHA512

          e2d7b2bd4c936f07e623980040786ba85680f6a30f3b22f913cdf3b840adcb6cb61aa830c59eebeaca6679bd02798027b891e4f67a23ef6aca0ed7bdd5effaf2

        • /data/data/com.qihoo.appstore/databases/new_downloads.db-journal

          Filesize

          512B

          MD5

          2d7314446115b2aab2336cb1023ced3f

          SHA1

          afe6501a4b56f5542988cb894afcd2420f9dbe00

          SHA256

          8711c2b68d3bb5677fcda4e8d228ea07dd2a051064658cc58f5f28b605855481

          SHA512

          7e25521333ab8d9bf5e19851e9e2601c5d3ba080a590da9362828ec65996c79a50efa9be841675ec85c2d2b12505593fce066eba23b500556b535b8f45a96248

        • /data/data/com.qihoo.appstore/databases/new_downloads.db-journal

          Filesize

          8KB

          MD5

          5c732e70e5ac6159fd025639c6f2ec1d

          SHA1

          3604704615437b376e03dfe932b4ca25045da609

          SHA256

          4104cc82e171a9a03441ff870bffd15440f4c4b8eecf8c757c193165a5285e0a

          SHA512

          045363e0ac346bdd641363eddddf2502943a4f3570a5b7f8a25506c65101f4b6f226baa48c3b346205ea3b46a78e9c0464d7dbe6c168a79bde31e514f3a4400c

        • /data/data/com.qihoo.appstore/databases/update_history.db

          Filesize

          20KB

          MD5

          63034ee19c8ac183f4be94f0e4350592

          SHA1

          8bb94ab357099476de70fa34031349c4f82c8f12

          SHA256

          fc8213a10a4907987570701d47828767ffd9517ac55111519fb6c909b015ec7f

          SHA512

          14f6fb8b3648f247bb1c675f5e10f0259845c7a6c559d960ad74759634c1bfc92e0f41cc4cbc973cec45395b2269c885f9dac07d926f490f505cf2a89bb93aaa

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          512B

          MD5

          eeffa90ac6adab5f792a560e7d4b1100

          SHA1

          6a99b82d9c1550c63409cc31190b54f810430297

          SHA256

          1c1b35dbd5c980a12d78aed5a1e72ff2595b4262f9a2b1a6472d62af70476579

          SHA512

          8c801a3c2aec7ce17e593f3e68df687957f93554e7309229f7e4ffbc61330b5c0c5556c6e1352dfbf8627edc34a0f9cbb6c48f8b33f53c16ee5f8b1f295efbb8

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          8KB

          MD5

          d7a7fb441d76f846678f8c514c961e3f

          SHA1

          389edb833041807ae3cb8b61f2a8a60e073bc364

          SHA256

          2f4d3ea224aad4fa740f85748dabf0ce385092273725bf9bf9113b30236a65b5

          SHA512

          2a2d55933ad1748072fc278fd820b55b1bd4aeb83670f922efa825ff06a5c72461d8f196f6dffcca61bbdbff26c572f3fe726f772e665bcef1b93560935d1760

        • /data/data/com.qihoo.appstore/databases/update_history.db-journal

          Filesize

          8KB

          MD5

          ecc0f932ccb57961510dce83c1e3c2d4

          SHA1

          ad93db9784efaaa5a9de13988f59ba86770254cc

          SHA256

          aca91e151a7521c1268d8b29a733e8f0ae2fe71e66827d7fd57d43615ae78a38

          SHA512

          4a5b102654b3222b7a9a025f5eee4c78dcd1a031fbe19f87721437846e8caa75156e378be0e23b4ddc051e95ef832400c201392caae819c56e33971f6c093ce0

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          544B

          MD5

          07a53fdc9c78354f2c3fb09937b668b9

          SHA1

          63959491cf5987384d81c6c18b2097caa09cfd3c

          SHA256

          b1738beb9a8b0106d58119ebb9a4f19e6f7cef2eec064814df5396ea917c5f2e

          SHA512

          034b381bcd3c5290d49616a078f88c381a9a77728a3e4b0fac25c6967ae811e751cbfabedb505996bdcf2d03824ccdc07679b448b052bd15214c17ab2fdca5bf

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          672B

          MD5

          1c382da8edd7e765eb037a3b91ca24d3

          SHA1

          1f454ca12360aab9268ee688fbba1fefd93ae69a

          SHA256

          36a8a6d11423fe3336be22693e06c259a5a5294ba961bd849d5cb62598ed98b8

          SHA512

          3f94a286e2c448ba9da4e0a6623fe566b0a3e64d3d1e6784d1c56c6245ae4f4b06d5b7c5fe58f139503b0580f7faa13ebfae929d4026828edcc48ce21a8a2b19

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          520B

          MD5

          39c1603e1068ae83e2f64c1e2b257b66

          SHA1

          d9ea8de5ec265ff0bcdb42873683271f8c21666e

          SHA256

          2f060942bf64998b72d70595377f8b44ba25dd907b526f2789d485f7ca3c3c17

          SHA512

          976602a64ca83aeea5f582c55520925f6c2ffdd6f1309a35af9edddd9db3d3c6d7139bc3cb1eb7c34941b8e218535789dddf9bfb6434b600e35fc0c05dbbafe2

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          540B

          MD5

          1f48c054a3beffe2c296bdc21dadccbc

          SHA1

          213f3d06a83d5d23b327fe906f2aa35bb346b9b4

          SHA256

          9b55ccda5cf11fe27cac8dd3d3cc1ce8309fbf88c85101346ff2e32989377143

          SHA512

          c040931f1c3b4f5adf5ce54b322e2343c2cb105ed26eedc775b59a13355079a79cd1c8f439f07b6bc303945aef8178f0001fe95be7ea69477717ad2c81083242

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1005B

          MD5

          d166e2236639ea75d3e42bad17c67902

          SHA1

          205addecb2a1bd290980d8920c6a8a645764dc0f

          SHA256

          739ccf2367a436354bd6ff884ff5903de05f5d02d722d43c3f18c2d2b07dc7b5

          SHA512

          97cda1f634f71358dba4fd65b766104364dfd7ad987dfd97ef699bbd9d8db050e98030cc2c039277b659ed1571fe462cbbeffc642f0404e163463217debc3cf0

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1KB

          MD5

          09143daf03dcc7499de50d8cef4825f9

          SHA1

          76d7671d7c3b1b0521c06489c97e33416076f10f

          SHA256

          5a04bf399901891a7fe40f071895f67e93d89778ab1478081cd974051a41a391

          SHA512

          a01a8181611316b8ccdceb92774cc34e2cbe38eb3bab445bf2e7ed3158d4b21b3e6779b6a1d8abae4bcb3e71228be7e513099c071a1e1a6ecb12068eabbdcad8

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          1KB

          MD5

          caa64f7df1db972020e2cd52d7f515d9

          SHA1

          45c4ba3bd6d2078393b5eaead879954ac70b5c5a

          SHA256

          4fc828ed843166e184b849c171aef34b7f66f9c039c5e0f173e47274d398c0d4

          SHA512

          ec7f5523f4cc0e918319a73243d5f240073052a0013c769675b411c7bae1a10a5cd511c5b43af06dc99e10a3061a219c69089b65709afb530336119bcf2451c5

        • /data/data/com.qihoo.appstore/files/360/sdk/persistence/report/Y29tLnFpaG9vLmFwcHN0b3Jl

          Filesize

          664B

          MD5

          03b8e8442ec3ef042034f58c3adb66fc

          SHA1

          8b29bc8af53d609e21fc0ecaaf90f9831446ff65

          SHA256

          1e500cfc74fceb44f6d9b43667746c286656e4559d5bf285970e39ac1aa6686d

          SHA512

          1285f196ca1db7450712efc9133110fb3c96dd8837c274b5a21e6a1889f934327290945e903758879c9287561227391736e3b61de49f732a3dc2181f9ef0fb81

        • /data/data/com.qihoo.appstore/files/sllak/logcache/log1730602050567

          Filesize

          2KB

          MD5

          42beccabe8a71d797a1f872434f3e885

          SHA1

          619c2b0953eacb5889dae1211a529bf8300e9e5a

          SHA256

          fab590fcd6034888193fa041f3f13c2a23351f325f8d8fed854f6293fa663f4e

          SHA512

          b8fa9ebabf64b735daa8bdc97556cc5b88041ce6e04885a6a06dbc090e9bdddcc6f95a42741352bcbdc1865a05e86388e285eb78134c4cc3c4d11c42154637ac

        • /data/data/com.qihoo.appstore/files/sllak/logcache/log1730602050623

          Filesize

          596B

          MD5

          25f9754182de3a5b7a001120b102afcf

          SHA1

          71aafc19bb4aae38048dfd8e926c21a6101ee90c

          SHA256

          a8fc5b7d400521247080d49eabf73ac6667dd5a205132be76df27aa4b7ca85ba

          SHA512

          9f918c6343d89c857d427315a411da0803b9ec58c20981e138949d424136f239236478b29da083d4f6a71b3c7a07be10d66a6cb14780cea404992d581b1e47d0

        • /data/data/com.qihoo.appstore/files/sllak/opt/4963/finalcore.jar

          Filesize

          77KB

          MD5

          820d8adcc1bf79f29c6753a5cde46c15

          SHA1

          cbaf2c78556918bcb2c5ae5cbd1758716d448c54

          SHA256

          2b21be5585fbee181838fc5bf1e471d2d9975f567d00563c1a7aabd1e20a99fe

          SHA512

          b056abdcbbe036dbc6dd46a201697c0fbd908d0c0f2193f88f2dad88f3a8ed4f1d2887ad1bba45575b82db8b644b242f40ffde785cdd4d779c50fb2ad9fc9f03

        • /data/data/com.qihoo.appstore/files/sllak/opt/4963/oat/finalcore.jar.cur.prof

          Filesize

          537B

          MD5

          d18e2bc03a50877873d4b6ebbef4f4e0

          SHA1

          255d142b3306e15e8b55ba22cc6bdef324a53418

          SHA256

          3c9a025a7ab7f81730b1dc6c2923d43a684d690c24d34de9995c72cf4e3a5b3d

          SHA512

          9eb7868bbd1659c6b93a32f5b64b6bdb61e1bd888ddedd1603320b19dfce9363d577023f1c4a72022b21021c2d5878c9790855b6dda24fa6ca633822e0398d9c

        • /data/data/com.qihoo.appstore/localApkInfo.json

          Filesize

          94KB

          MD5

          752842671104a5861415d2eb4a60718e

          SHA1

          ad007edb3f6d598ed97be0ebb1461c3f5dc474ae

          SHA256

          3c96e430b9c526ac40251bb23eaa16c14324bcf55e950a48d845dab71b81e790

          SHA512

          d63f081ab711dbea9460bfcd368a0e2a7fa454ada1d394387d7acfbd3f54bd81e195c95e23e164deb21ab0bce2cf2a14dfe3a694e7480294e01d7ca1344589fe

        • /data/user/0/com.qihoo.appstore/files/sllak/opt/4963/finalcore.jar

          Filesize

          176KB

          MD5

          b667ca71e42bbeb899566c8834ed085e

          SHA1

          053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

          SHA256

          536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

          SHA512

          52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

        • /storage/emulated/0/.sfp/.sfp

          Filesize

          83B

          MD5

          639ecf2eda10d664e9be893e0eb3d60e

          SHA1

          74c6109fa846059c240c2c3fd7f3182cec00af06

          SHA256

          6a0507e8568319c7405b9654958e1e8d11a232747dbfd2f08cc8e71ba65fc75f

          SHA512

          076bcc4293ad81f0635cd4f4896414f545d55d1264b6d664f91a133bd079815650ae3e9cf42983364819afdf0ae844e9941d58dd244f1223b9a25167a07c8c9f