Analysis

  • max time kernel
    99s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2024 00:41

General

  • Target

    9ed908a9a209fa0fc0979a8315610ae1_JaffaCakes118.apk

  • Size

    27.0MB

  • MD5

    9ed908a9a209fa0fc0979a8315610ae1

  • SHA1

    b72bcb17fcf3068093540361262fc5ca6648209f

  • SHA256

    8802e317f7d0dfd51133b14eeffb6abbf10264bfbbfd14e4c2c5afa4e0879689

  • SHA512

    d3605d4e3162c8cdf71bf88de088c8d8108442517e5c0b42a74a3cc7ceecb6132795618f2af7a3d0d6d89463d5aded3118d32afcee8edc6e31be9024e44a4cda

  • SSDEEP

    786432:naADF3aBeF6w/tSgneX7A3EL6DabVbi/CJE:yeP//neX7iKVbZE

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 12 IoCs
  • Loads dropped Dex/Jar 1 TTPs 7 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's Accessibility service 4 TTPs 3 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries information about running processes on the device 1 TTPs 6 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 6 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Acquires the wake lock 5 IoCs
  • Queries information about active data network 1 TTPs 6 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 6 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 6 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 6 IoCs
  • Checks memory information 2 TTPs 6 IoCs

Processes

  • com.tencent.qqlive
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4319
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4450
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
        2⤵
          PID:4474
      • com.tencent.qqlive:services
        1⤵
        • Checks if the Android device is rooted.
        • Loads dropped Dex/Jar
        • Queries information about running processes on the device
        • Queries information about the current nearby Wi-Fi networks
        • Acquires the wake lock
        • Queries information about active data network
        • Queries information about the current Wi-Fi connection
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Uses Crypto APIs (Might try to encrypt user data)
        • Checks CPU information
        • Checks memory information
        PID:4347
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:4378
      • com.tencent.qqlive:services
        1⤵
        • Checks if the Android device is rooted.
        • Loads dropped Dex/Jar
        • Makes use of the framework's Accessibility service
        • Queries information about running processes on the device
        • Queries information about the current nearby Wi-Fi networks
        • Acquires the wake lock
        • Queries information about active data network
        • Queries information about the current Wi-Fi connection
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Checks CPU information
        • Checks memory information
        PID:4650
      • com.tencent.qqlive:cache
        1⤵
        • Checks if the Android device is rooted.
        • Loads dropped Dex/Jar
        • Queries information about running processes on the device
        • Queries information about the current nearby Wi-Fi networks
        • Acquires the wake lock
        • Queries information about active data network
        • Queries information about the current Wi-Fi connection
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Checks CPU information
        • Checks memory information
        PID:4810
        • /system/bin/sh -c getprop ro.build.fingerprint
          2⤵
            PID:5063
          • getprop ro.build.fingerprint
            2⤵
              PID:5063
          • com.tencent.qqlive:services
            1⤵
            • Checks if the Android device is rooted.
            • Loads dropped Dex/Jar
            • Makes use of the framework's Accessibility service
            • Queries information about running processes on the device
            • Queries information about the current nearby Wi-Fi networks
            • Acquires the wake lock
            • Queries information about active data network
            • Queries information about the current Wi-Fi connection
            • Registers a broadcast receiver at runtime (usually for listening for system events)
            • Checks CPU information
            • Checks memory information
            PID:5037
          • com.tencent.qqlive:services
            1⤵
            • Checks if the Android device is rooted.
            • Loads dropped Dex/Jar
            • Makes use of the framework's Accessibility service
            • Queries information about running processes on the device
            • Queries information about the current nearby Wi-Fi networks
            • Acquires the wake lock
            • Queries information about active data network
            • Queries information about the current Wi-Fi connection
            • Registers a broadcast receiver at runtime (usually for listening for system events)
            • Checks CPU information
            • Checks memory information
            PID:5237

          Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.tencent.qqlive/databases/OnaDB-wal

            Filesize

            213KB

            MD5

            7d19e444af2c7c8ff5c2f92cbd034a66

            SHA1

            96590953ba47677506b6b29cb76f4edc58f41caf

            SHA256

            63c482e6908e0f8bbbed0662d2c0168f1eeb104aef7d2699bb137ba0b04aa405

            SHA512

            26ddb4096a4b7c3ceae3d183dd8fec7f7f1170e6dc66f927c5b43fc6b36227397165773c94cd3a96d7115e57855f772aa92a9f1b9386d6e09e5e690cd41eb4c2

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            44KB

            MD5

            fc27fda203888f30f8023b18a47509e1

            SHA1

            2d728577c2d34efd6f5dea61ceffea613a02d779

            SHA256

            0487f9fe85e1bb86618e70b5316bad4b24e2962d13f7f1fc2d20c6bf8c94487c

            SHA512

            200b7607597230f606be1a0e6aefa2ff00eed23a2592b3da356c8c7629693e15ec4f1ddb6c4ecd381dea9d6de937b99050bc06d9837a3b5db5c433a37a397f35

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            144KB

            MD5

            a7a9f3e208f83938e37f57481c5b5239

            SHA1

            0c740b7c376075f659408622d72213d4b0fde40f

            SHA256

            435bd6465946718055a0ef6e42c7cd9023055fc115ac5f10f8d76b580f34067f

            SHA512

            9198f627cafee76f14c579cf99f14fc29ac7f0dff729ef7a268104d3c49788eba3ea1a37351f1e3aa657ec2a1fcbb7102685fe5e735bfa4ffc3a049dcc540b81

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            16KB

            MD5

            21a690c23265ae7e9e93157ee126a89f

            SHA1

            306975796b9d7423e960db77f0a728c48a395dae

            SHA256

            ed08116a4f5f7c94950cb36d0dc0201882be3aa9bffeb7e51bdc4d0171a8f76c

            SHA512

            40fd45d0d80d6bb13efebf6e154c726c4128f11aae1742574ba669be12f91aada4f12bf6cec4936cab65668f1dead75d3cbc0df8361290cedd06494c590d6046

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            48KB

            MD5

            654ebfa50a168e6bb04d3c8584ae4323

            SHA1

            14ef01902c0eb468547544a7b85c41f157819130

            SHA256

            e47652ec88ed72d854c1b8bfa8b7fa2bce32f89e2a7e9a645b0515e58020a67a

            SHA512

            91f86e5e576d0764e50d9e17523fdf333aa8e7c58caa40e2c24836060419246e5aea82c9e6ed4713b22e93fcb5c51d5921d256dbfffb9b27c86b8c38d27435c6

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            16KB

            MD5

            885421451896395c6618a34879106b79

            SHA1

            22226b5df7c420c392b95ea4c144a4ccfd528d28

            SHA256

            156613319a33340a279a0d8c999016eed12da681c63f689acaba75f947e5529c

            SHA512

            f5dc1c50e7170cc5f9674a8a61901a917461e21006ae6bf0e37ca0259f84c673b0ea352076bb728bdd8b270c118dc78e1e1b3837167dae2e838dd966fbe6d87c

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            28KB

            MD5

            85bb7712fdb78dc50d55da0c2fa653d6

            SHA1

            230963816ac2afc671aeb9ef98c3ff2722d3b20f

            SHA256

            9ba63e5b486883966428195a2f6cdb55c9cffe78786eea744997b826ab1f5cc5

            SHA512

            7c693cc905c540ad04b1d159647ba0f763f1ee6b0e5c86d2d95985aa536e06b75f58cb443cd4e1035663ff7eebcbc4c8254bccc8995090bd819fbe14f9f89198

          • /data/data/com.tencent.qqlive/databases/eup_db

            Filesize

            44KB

            MD5

            756772ed17f4ee4dbd516312fe4f33c7

            SHA1

            c52f222efa0c493440f70321a2e79904c85b0394

            SHA256

            a32d65d1176271a9b02a92dbdd042cd9fdbb97d8a974ea94fe72a829bec90e30

            SHA512

            e5bd2003aa57b5dc5a339fcec873b3b142b8e364e0abb7bcca9b43e3fec1670d3f4285732f12d104fde3b2c510a72fecfb142bae0ac9ec90fefcbe867350d60f

          • /data/data/com.tencent.qqlive/databases/eup_db-journal

            Filesize

            32KB

            MD5

            ef26ee5c7513df5dfdca52aad2df5e04

            SHA1

            c6536eb9bcb938b5e6f9f6d9f3968af697693836

            SHA256

            8e8d6502399a4f8ae2a706069f97dca02372af87c339673d2cc4b71116168add

            SHA512

            b4f64738ae2a0e87c4b0a1dd0b117719e2066267e8d02a4b6ec22a17871b9e0d7113dc11acbf6092ccf0e5b93b4281d6799f0640c4c6ce2c8d587ed18ead19ed

          • /data/data/com.tencent.qqlive/databases/eup_db-shm

            Filesize

            128KB

            MD5

            b116bd70e26954f7488c28f39ae9a105

            SHA1

            ab5fea26f6244f04faedfc01cfd10b4d587368e5

            SHA256

            3d723029b1fd7d9e0a92ae22fee36ff88a7096116359eb3d158b746ada6f8768

            SHA512

            f35f1823d2920a91bd9244a6d10ddc565346c02672c0156bd2dbb693e5d2d1e79d0752e721246966e2f037f5a60b79252ec112ec7f7c74afe0bdb7678400c052

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            56KB

            MD5

            650d9dd144356c8aa23329e65ca0b873

            SHA1

            658abb1ce0a69d3bef30c1a94526d8bb2a3c260d

            SHA256

            1a610e7880bd9c0699a323cc8c00f9056301fa71edf193664e5eba597e28c196

            SHA512

            4fcc10fa557eee7447024fd5bbb12a6f59361a0dd65311bfa8b6f320a05f5a1dc3eb8cabfbc678cbecd613a5e79e3aeeb8603e7b0cb79ad41009e051ec0c7d26

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            132KB

            MD5

            42c008ee288a27c72cfdb2cc274eeee9

            SHA1

            4ecde6b261f99eb1a009968089b38cf1eda3e7f0

            SHA256

            58836c5d32dac0fe0b81a94de4a4ea4b52a6b705155942fd30c77dbc9b027670

            SHA512

            0e9c322545e7dedc41b6e2c743edcedba65caf11d74d812b5b666db2b936351ddef9e87253e1a7db30f58e087d407b9df8514038adaebb1650d18e2c993f3f33

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            120KB

            MD5

            abc274ac76b791c7ef9d3d461cc95ca5

            SHA1

            e922097c95bce07d72190470088dbf7613025718

            SHA256

            016bee9e49499107a5fc62ee21957b12847bed5f2126aca951a85e003d300cee

            SHA512

            6b5f762f67410d080c3f113ee8602d47f232226787e81b622d37293049ef88563f3e19b922a909c1cce98dcea1fa4eb4f9af53dc143dc41f10313411be4bc609

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            132KB

            MD5

            b19dffec355f3f2f2fa9b27a5efa8fd5

            SHA1

            a9019d3de74f315f4ed63d573fa724f28c3165ec

            SHA256

            383284b031449f8bc4cb5dff6b477b006a7cb5a3f25944532d22993ffb98b4a6

            SHA512

            cf42a98cab0694888e07b573722fc9a4b03753062b3a5210a8c747743d38974700cf626da9d9e8f28921186c361c5966e8a6b441ddddc14655863b992fd0401a

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            28KB

            MD5

            e931c5991cf0cd8cd145d15dcafbe142

            SHA1

            596d3936a5066f77b2b7dbaae4b2e793818e9a3e

            SHA256

            e688fdc2ccc1610b6353fbb3322b5cdf0eba940b1c2547f918e0a9036bc40972

            SHA512

            0f6ff1687ee76e0e80fab2b029f01f21a97e4d5c64d41f7ef069055bc12312882b2c20a6095f8e5da9e3321e6c29a51a0f2e23c5e3efaddf66d4fff784457dd8

          • /data/data/com.tencent.qqlive/databases/eup_db-wal

            Filesize

            8KB

            MD5

            b4a8d6af34a2649a3cab09553d4f35b7

            SHA1

            93277c97ef35b6c20e228cf036cf48e81409645a

            SHA256

            ae058fadd46d72d3f6ff60967af427348f6b31d0bd0e653a3f284e24b2726de8

            SHA512

            dabbbf99f2f79e001f9bbbe18d5a9a5ea9b87a79042b8211d5ef2f70b2014521104fe04e22ec77a92fffefd05cbabef1f2817de8e0c21ce50426bae9cde6d552

          • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services

            Filesize

            4KB

            MD5

            0d85eb3d4a0c7dd4b4eff9335c5ecf76

            SHA1

            96ee4fef6d0292a9e99d13f94fa4c6ee07a9c575

            SHA256

            fc12a9b71078d4d7dc258ea7c6708708f691dccfee06f097a57f3acf90ed7e8d

            SHA512

            d7b4a5ba0a00021a92b29153972cc6c0dd10a6086dd0b16e7a9b9a68130957eb71be7a63f288c4b2480ad499d5e4fae82cd0a327fbe34be7aef832e6f51a2f84

          • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services-journal

            Filesize

            64KB

            MD5

            747862035d433279b3a8c0332007e66f

            SHA1

            e83ad320fa95217ad2044fb990107883fc74892f

            SHA256

            3c7f73d2742a0f58b9effc1d7512fa1d659410191aaa72aebc282a98b8c868c9

            SHA512

            7e572b4358c351d3af6647005117f7c874e5f9f6fe4e09e306aa4e570039676c87bc4323fef5b6a6f3cd6b86a274e37a2d16fb4176919ee797a085cb02667609

          • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services-wal

            Filesize

            64KB

            MD5

            12428e5de606f4a207f73c389d9c1bcb

            SHA1

            6e12aebd6de1a150ebbc3154924dfa061a3eaf1b

            SHA256

            b9bf1ddfabd47881ffbfb0836bcbe11e601b070e73f25c57c7e12dc59ae21924

            SHA512

            3be1db0f050120586383dd76cc59bdf396c4598966dca313c568555e90475f8bd15b06aec9bba5f0580d2ff209057d5ff9b7e8da5995898c21f57e809294db7b

          • /data/data/com.tencent.qqlive/databases/tencent_analysis.db_com.tencent.qqlive:services-journal

            Filesize

            512B

            MD5

            3319fceaa9935efb1ade8ac0666afacf

            SHA1

            21543767c09019eb62367d1220bbcda2e687cb62

            SHA256

            775b57e38c4174b55a256ca9e709443694d5a15655af2aa7d9e494f86cda04c1

            SHA512

            6f9529e439d6abada09ef9676bb4b2ceddf8b3d321af090449fbd62cf704005828b1de3ffb47d5963c00d7c1865c8e76525514d1506ab0ff5cefe6bbe0b2d790

          • /data/data/com.tencent.qqlive/databases/tencent_analysis.db_com.tencent.qqlive:services-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.tencent.qqlive/databases/tencent_analysis.db_com.tencent.qqlive:services-wal

            Filesize

            72KB

            MD5

            20d03d475cc1ed845495efe28598e47e

            SHA1

            5a388078b503aa08b6f1c940f5d8049045850456

            SHA256

            524d1758bc693c4e82bd677ea85a3b19383f66deac50cf677bdc18515a289a83

            SHA512

            2a5935448ed35c29e9a7797db87c7342b9c90171698d515cd68bb2b46bd1c41520b904811315baf08987c85ce21dd4e65db6a11ec06a9392b9daa707793cf076

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db

            Filesize

            32KB

            MD5

            1c4274aa7a9a5cac8c6d1df71e4588c6

            SHA1

            abaecd685e01cc68801292e3dc7085654a22feba

            SHA256

            3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

            SHA512

            1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-journal

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-shm

            Filesize

            72KB

            MD5

            e47e698cbe2be15cbd882d2a8c3484b9

            SHA1

            9aeea01fc79256ef1d1d09513b639b1e01fa4813

            SHA256

            53da9c1504a31984211986aa78adac2b7d7aa04fc07859e10b6be250a0373bd6

            SHA512

            71bc59151a05e26e5ff3193ece6e8d988aa55fcf4a7b7a1c80e56bf653bd36c05a2237e5c0ce38a8d20126467d0583b8b84a749bb0a29b16ce9d9647b42586e2

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-wal

            Filesize

            84KB

            MD5

            9b342301f6605a89fd4e9798a86bf1eb

            SHA1

            07e95eac8865890e6c976b0dcdc33ff525d01de6

            SHA256

            7d14d78801b6949956ab3b3ca2428c22f93a91071341a4bf9725741567dc82fe

            SHA512

            a48c6be2000d094b7c9e95b2e7d62ec2d74356229a6fc50b1fd1a81bf104531eb8237ea5de4ce213e2e718e7f922ebd5576767ddad0b4efd00dd53b239a6c3e9

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive_AE13A9D158C6E5C927015456B627B01C.db-journal

            Filesize

            124KB

            MD5

            17720a4c9c4242aed06a2960f4c06e70

            SHA1

            0b673abb03fd455842be813448c3fc82340be641

            SHA256

            e4dc6e8247fcd2849aed8a5608cac74cbcc059a32b6500f293e820503278b6f2

            SHA512

            cbbc05496d879144388d3ec2cf3ab6c2c2aca95f81900ef408408bb49371e4b806349e36a779b5c548447e1e24bdf243efa85412a027210afdc6dd37b28ffd9f

          • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive_AE13A9D158C6E5C927015456B627B01C.db-wal

            Filesize

            84KB

            MD5

            64999ebd46e2784b2f81d8f6ac4864a0

            SHA1

            98c2b40af5c9e52e18fa519fa5e4a817e04308d8

            SHA256

            0a7f3499134a877fddeda25b95521c78d55019edfc869e40e5fde37392dd8bb6

            SHA512

            c8a4e28ff7bd5561d31a5ed132c07ad86f7c2b4889752aac160d7e857f3beb900c89e5a3b5c96eda44307923bb4714a18b6b494cb27787c918bcd1f02e9784af

          • /data/data/com.tencent.qqlive/files/ad_patch/AdHack.jar

            Filesize

            8KB

            MD5

            1716eea7bde3b47d643f15a977075964

            SHA1

            89950de33d85368e8515cb913aea86eb7c304906

            SHA256

            25351d7dca08cb4f21306089cbdc368aff37050f79335103ba57fb07643732e6

            SHA512

            507698e399bfdd2bfdf140026226a5e6e756eeb2d5109a544a96b2eddc25f93ed99d345743ed7abc4b01c11a5911e36816de2c6d6612c753b7cfa975a9d4693f

          • /data/data/com.tencent.qqlive/files/ad_patch/AdHack.jar

            Filesize

            616B

            MD5

            aba337fad9e968aa4ecd74e7c24fa897

            SHA1

            a23d1da61f2b7ce6c6f00182478e229b5ed6fda0

            SHA256

            b57d5c326f31f872c5746848223ca5a7451edcdae7f6944e9b725a77447d69b9

            SHA512

            9d84e6ae2214f91ac5e9c69a99d54e8335cd4005b372d0f13bd05ad31eacd231f3b40539ceff8e636ef50b5b89325c735144bd956815a86b33f2bd4913a6efed

          • /data/data/com.tencent.qqlive/files/guid

            Filesize

            3KB

            MD5

            c49ffd78c28ac1175b15c5b8a32fe5e1

            SHA1

            b282fbdb6bc1a19a7a866cc17a5452a49cf9726c

            SHA256

            eb41c94bce2229bb3a184d87ecdec1d79cd53e8cb57cae11da4b83f3e4e88fae

            SHA512

            5eede7ce07aa7402b69987236c8fe5382252679a8c23b88cce97eafb0624a7d65d765e8ae647695155417e0ecc32d2d912c7ee28987260479d6ae29456ebc9d7

          • /data/data/com.tencent.qqlive/files/guid

            Filesize

            512B

            MD5

            28ca5c6e7154d5c45f84eef2160cb43a

            SHA1

            2f70f0e79223f23d7f86bae74a0678cfc29396d4

            SHA256

            c1b282d4d5cf04e9994abaff340747008fff54217c0ea69b132028cf32c25130

            SHA512

            a6a097c982ccf719528bd08af52f356738aab325efa81dc41554db00c890a2dc873e6ab54fd7c6295bcd2150d5861d124ec3d740293a0a50b869cb4eb9c1ceda

          • /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar

            Filesize

            468B

            MD5

            35e53fd2f840df60047ead1c52a8c6ef

            SHA1

            efbdfb253bebebb51bea9161da15e43a8bec4da3

            SHA256

            464ee33269931a0018b720e0d9715a2c7a3faf47aaba0dafe8d208d5b141543d

            SHA512

            9b9866e911c56ae6d02952423d566fe9920c7f5b5da164526d204829fccc6d856db57985bd3e2d29f186f72e0af968bf6685b687365874ea7c054f31b2b12391

          • /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar

            Filesize

            468B

            MD5

            fcf440e782175135ebe44ccb1dc2f0e9

            SHA1

            d4cda3095f6b855db39dfe04ce0ab1bce6f6efb2

            SHA256

            31964e5d9a49c18f8ac584705b08b420edebf24aed91ce519b7f69e9d11114a9

            SHA512

            0fd8bf4a1d62eed3fab8e02873981629439e0ef2fd98972b6a128660bd9843b815293c70989004633d00e32b771f340c96c661eff540deaf75662f28b1e82b62

          • /storage/emulated/0/Android/data/com.tencent.qqlive/files/QQLive/guid

            Filesize

            88KB

            MD5

            f891dee9f67874af0fda6f6981494e16

            SHA1

            59e184e452454d6056eaec41af1a4073f625d2e8

            SHA256

            7e78dc4f4dae1ccb8abd2589981d73691dc7812451c5ac48434e0a27367b0618

            SHA512

            e656c3aa4e3957f33c4a30180a22f2fa012810344032808d8f38ea14add0eb29383b25cc4bb8be8e15a8e8dec3cd3f380b4679598821988ed686a8d7462b13c4

          • /storage/emulated/0/Android/data/com.tencent.qqlive/files/QQLive/guid

            Filesize

            1KB

            MD5

            956e2393dd4e7e15b2d5e38083b0b8ea

            SHA1

            dce9e75114474b01983088d44339710d4695cef7

            SHA256

            a82893dc51599366a2d2ba908728e4c143459baba29542c23482fa5ef8fec6f7

            SHA512

            c4ac61b293c5d9c7c2b7e44f7b9f43ced4b0bcc7d74c0258d7bd696094115fcb730db8cef0cd2e69b356bb9aebb20531328ed3ba8a82ac8318e59725bbb6d09b

          • /storage/emulated/0/Android/data/com.tencent.qqlive/files/log/QQLiveLog_cache_0.log

            Filesize

            24KB

            MD5

            6b7a1adc7c82e8f2aab9b00c6d05853c

            SHA1

            d9cf7b07db24036971fd22fe2844812d236777f8

            SHA256

            0ed185de0a421c0e4076b770e4d222b21a52bd63201d0841e4b7697717f881c6

            SHA512

            e5139bbfce54027c429a4b51943852158fc384572e6c6d01c804e73a730346734f4b06a9040bc4c0c50ca1a3f928ad91be12117ffa4b65d00c1095b1ce62a384