Analysis
-
max time kernel
99s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
26-11-2024 00:41
Static task
static1
Behavioral task
behavioral1
Sample
9ed908a9a209fa0fc0979a8315610ae1_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
General
-
Target
9ed908a9a209fa0fc0979a8315610ae1_JaffaCakes118.apk
-
Size
27.0MB
-
MD5
9ed908a9a209fa0fc0979a8315610ae1
-
SHA1
b72bcb17fcf3068093540361262fc5ca6648209f
-
SHA256
8802e317f7d0dfd51133b14eeffb6abbf10264bfbbfd14e4c2c5afa4e0879689
-
SHA512
d3605d4e3162c8cdf71bf88de088c8d8108442517e5c0b42a74a3cc7ceecb6132795618f2af7a3d0d6d89463d5aded3118d32afcee8edc6e31be9024e44a4cda
-
SSDEEP
786432:naADF3aBeF6w/tSgneX7A3EL6DabVbi/CJE:yeP//neX7iKVbZE
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 12 IoCs
Processes:
com.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:servicesioc process /system/bin/su com.tencent.qqlive /system/xbin/su com.tencent.qqlive /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:cache /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services /system/bin/su com.tencent.qqlive:cache /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services -
Loads dropped Dex/Jar 1 TTPs 7 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicesioc pid process /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4378 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4347 com.tencent.qqlive:services /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4319 com.tencent.qqlive /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4650 com.tencent.qqlive:services /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4810 com.tencent.qqlive:cache /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 5037 com.tencent.qqlive:services /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 5237 com.tencent.qqlive:services -
Makes use of the framework's Accessibility service 4 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
com.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.tencent.qqlive:services Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.tencent.qqlive:services Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.tencent.qqlive:services -
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:cache Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services -
Queries information about the current nearby Wi-Fi networks 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicesdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:cache Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services -
Acquires the wake lock 5 IoCs
Processes:
com.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:cache Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services -
Queries information about active data network 1 TTPs 6 IoCs
Processes:
com.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:cache Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services -
Queries information about the current Wi-Fi connection 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:cache Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 6 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlive:cachedescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:cache -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.tencent.qqlivecom.tencent.qqlive:servicesdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive:services -
Checks CPU information 2 TTPs 6 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process File opened for read /proc/cpuinfo com.tencent.qqlive:services File opened for read /proc/cpuinfo com.tencent.qqlive File opened for read /proc/cpuinfo com.tencent.qqlive:services File opened for read /proc/cpuinfo com.tencent.qqlive:cache File opened for read /proc/cpuinfo com.tencent.qqlive:services File opened for read /proc/cpuinfo com.tencent.qqlive:services -
Checks memory information 2 TTPs 6 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicesdescription ioc process File opened for read /proc/meminfo com.tencent.qqlive:services File opened for read /proc/meminfo com.tencent.qqlive:cache File opened for read /proc/meminfo com.tencent.qqlive:services File opened for read /proc/meminfo com.tencent.qqlive:services File opened for read /proc/meminfo com.tencent.qqlive File opened for read /proc/meminfo com.tencent.qqlive:services
Processes
-
com.tencent.qqlive1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4319 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4450
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4474
-
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4347 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4378
-
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4650
-
com.tencent.qqlive:cache1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4810 -
/system/bin/sh -c getprop ro.build.fingerprint2⤵PID:5063
-
-
getprop ro.build.fingerprint2⤵PID:5063
-
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5037
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5237
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
3System Network Configuration Discovery
1System Network Connections Discovery
3Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
213KB
MD57d19e444af2c7c8ff5c2f92cbd034a66
SHA196590953ba47677506b6b29cb76f4edc58f41caf
SHA25663c482e6908e0f8bbbed0662d2c0168f1eeb104aef7d2699bb137ba0b04aa405
SHA51226ddb4096a4b7c3ceae3d183dd8fec7f7f1170e6dc66f927c5b43fc6b36227397165773c94cd3a96d7115e57855f772aa92a9f1b9386d6e09e5e690cd41eb4c2
-
Filesize
44KB
MD5fc27fda203888f30f8023b18a47509e1
SHA12d728577c2d34efd6f5dea61ceffea613a02d779
SHA2560487f9fe85e1bb86618e70b5316bad4b24e2962d13f7f1fc2d20c6bf8c94487c
SHA512200b7607597230f606be1a0e6aefa2ff00eed23a2592b3da356c8c7629693e15ec4f1ddb6c4ecd381dea9d6de937b99050bc06d9837a3b5db5c433a37a397f35
-
Filesize
144KB
MD5a7a9f3e208f83938e37f57481c5b5239
SHA10c740b7c376075f659408622d72213d4b0fde40f
SHA256435bd6465946718055a0ef6e42c7cd9023055fc115ac5f10f8d76b580f34067f
SHA5129198f627cafee76f14c579cf99f14fc29ac7f0dff729ef7a268104d3c49788eba3ea1a37351f1e3aa657ec2a1fcbb7102685fe5e735bfa4ffc3a049dcc540b81
-
Filesize
16KB
MD521a690c23265ae7e9e93157ee126a89f
SHA1306975796b9d7423e960db77f0a728c48a395dae
SHA256ed08116a4f5f7c94950cb36d0dc0201882be3aa9bffeb7e51bdc4d0171a8f76c
SHA51240fd45d0d80d6bb13efebf6e154c726c4128f11aae1742574ba669be12f91aada4f12bf6cec4936cab65668f1dead75d3cbc0df8361290cedd06494c590d6046
-
Filesize
48KB
MD5654ebfa50a168e6bb04d3c8584ae4323
SHA114ef01902c0eb468547544a7b85c41f157819130
SHA256e47652ec88ed72d854c1b8bfa8b7fa2bce32f89e2a7e9a645b0515e58020a67a
SHA51291f86e5e576d0764e50d9e17523fdf333aa8e7c58caa40e2c24836060419246e5aea82c9e6ed4713b22e93fcb5c51d5921d256dbfffb9b27c86b8c38d27435c6
-
Filesize
16KB
MD5885421451896395c6618a34879106b79
SHA122226b5df7c420c392b95ea4c144a4ccfd528d28
SHA256156613319a33340a279a0d8c999016eed12da681c63f689acaba75f947e5529c
SHA512f5dc1c50e7170cc5f9674a8a61901a917461e21006ae6bf0e37ca0259f84c673b0ea352076bb728bdd8b270c118dc78e1e1b3837167dae2e838dd966fbe6d87c
-
Filesize
28KB
MD585bb7712fdb78dc50d55da0c2fa653d6
SHA1230963816ac2afc671aeb9ef98c3ff2722d3b20f
SHA2569ba63e5b486883966428195a2f6cdb55c9cffe78786eea744997b826ab1f5cc5
SHA5127c693cc905c540ad04b1d159647ba0f763f1ee6b0e5c86d2d95985aa536e06b75f58cb443cd4e1035663ff7eebcbc4c8254bccc8995090bd819fbe14f9f89198
-
Filesize
44KB
MD5756772ed17f4ee4dbd516312fe4f33c7
SHA1c52f222efa0c493440f70321a2e79904c85b0394
SHA256a32d65d1176271a9b02a92dbdd042cd9fdbb97d8a974ea94fe72a829bec90e30
SHA512e5bd2003aa57b5dc5a339fcec873b3b142b8e364e0abb7bcca9b43e3fec1670d3f4285732f12d104fde3b2c510a72fecfb142bae0ac9ec90fefcbe867350d60f
-
Filesize
32KB
MD5ef26ee5c7513df5dfdca52aad2df5e04
SHA1c6536eb9bcb938b5e6f9f6d9f3968af697693836
SHA2568e8d6502399a4f8ae2a706069f97dca02372af87c339673d2cc4b71116168add
SHA512b4f64738ae2a0e87c4b0a1dd0b117719e2066267e8d02a4b6ec22a17871b9e0d7113dc11acbf6092ccf0e5b93b4281d6799f0640c4c6ce2c8d587ed18ead19ed
-
Filesize
128KB
MD5b116bd70e26954f7488c28f39ae9a105
SHA1ab5fea26f6244f04faedfc01cfd10b4d587368e5
SHA2563d723029b1fd7d9e0a92ae22fee36ff88a7096116359eb3d158b746ada6f8768
SHA512f35f1823d2920a91bd9244a6d10ddc565346c02672c0156bd2dbb693e5d2d1e79d0752e721246966e2f037f5a60b79252ec112ec7f7c74afe0bdb7678400c052
-
Filesize
56KB
MD5650d9dd144356c8aa23329e65ca0b873
SHA1658abb1ce0a69d3bef30c1a94526d8bb2a3c260d
SHA2561a610e7880bd9c0699a323cc8c00f9056301fa71edf193664e5eba597e28c196
SHA5124fcc10fa557eee7447024fd5bbb12a6f59361a0dd65311bfa8b6f320a05f5a1dc3eb8cabfbc678cbecd613a5e79e3aeeb8603e7b0cb79ad41009e051ec0c7d26
-
Filesize
132KB
MD542c008ee288a27c72cfdb2cc274eeee9
SHA14ecde6b261f99eb1a009968089b38cf1eda3e7f0
SHA25658836c5d32dac0fe0b81a94de4a4ea4b52a6b705155942fd30c77dbc9b027670
SHA5120e9c322545e7dedc41b6e2c743edcedba65caf11d74d812b5b666db2b936351ddef9e87253e1a7db30f58e087d407b9df8514038adaebb1650d18e2c993f3f33
-
Filesize
120KB
MD5abc274ac76b791c7ef9d3d461cc95ca5
SHA1e922097c95bce07d72190470088dbf7613025718
SHA256016bee9e49499107a5fc62ee21957b12847bed5f2126aca951a85e003d300cee
SHA5126b5f762f67410d080c3f113ee8602d47f232226787e81b622d37293049ef88563f3e19b922a909c1cce98dcea1fa4eb4f9af53dc143dc41f10313411be4bc609
-
Filesize
132KB
MD5b19dffec355f3f2f2fa9b27a5efa8fd5
SHA1a9019d3de74f315f4ed63d573fa724f28c3165ec
SHA256383284b031449f8bc4cb5dff6b477b006a7cb5a3f25944532d22993ffb98b4a6
SHA512cf42a98cab0694888e07b573722fc9a4b03753062b3a5210a8c747743d38974700cf626da9d9e8f28921186c361c5966e8a6b441ddddc14655863b992fd0401a
-
Filesize
28KB
MD5e931c5991cf0cd8cd145d15dcafbe142
SHA1596d3936a5066f77b2b7dbaae4b2e793818e9a3e
SHA256e688fdc2ccc1610b6353fbb3322b5cdf0eba940b1c2547f918e0a9036bc40972
SHA5120f6ff1687ee76e0e80fab2b029f01f21a97e4d5c64d41f7ef069055bc12312882b2c20a6095f8e5da9e3321e6c29a51a0f2e23c5e3efaddf66d4fff784457dd8
-
Filesize
8KB
MD5b4a8d6af34a2649a3cab09553d4f35b7
SHA193277c97ef35b6c20e228cf036cf48e81409645a
SHA256ae058fadd46d72d3f6ff60967af427348f6b31d0bd0e653a3f284e24b2726de8
SHA512dabbbf99f2f79e001f9bbbe18d5a9a5ea9b87a79042b8211d5ef2f70b2014521104fe04e22ec77a92fffefd05cbabef1f2817de8e0c21ce50426bae9cde6d552
-
Filesize
4KB
MD50d85eb3d4a0c7dd4b4eff9335c5ecf76
SHA196ee4fef6d0292a9e99d13f94fa4c6ee07a9c575
SHA256fc12a9b71078d4d7dc258ea7c6708708f691dccfee06f097a57f3acf90ed7e8d
SHA512d7b4a5ba0a00021a92b29153972cc6c0dd10a6086dd0b16e7a9b9a68130957eb71be7a63f288c4b2480ad499d5e4fae82cd0a327fbe34be7aef832e6f51a2f84
-
Filesize
64KB
MD5747862035d433279b3a8c0332007e66f
SHA1e83ad320fa95217ad2044fb990107883fc74892f
SHA2563c7f73d2742a0f58b9effc1d7512fa1d659410191aaa72aebc282a98b8c868c9
SHA5127e572b4358c351d3af6647005117f7c874e5f9f6fe4e09e306aa4e570039676c87bc4323fef5b6a6f3cd6b86a274e37a2d16fb4176919ee797a085cb02667609
-
Filesize
64KB
MD512428e5de606f4a207f73c389d9c1bcb
SHA16e12aebd6de1a150ebbc3154924dfa061a3eaf1b
SHA256b9bf1ddfabd47881ffbfb0836bcbe11e601b070e73f25c57c7e12dc59ae21924
SHA5123be1db0f050120586383dd76cc59bdf396c4598966dca313c568555e90475f8bd15b06aec9bba5f0580d2ff209057d5ff9b7e8da5995898c21f57e809294db7b
-
Filesize
512B
MD53319fceaa9935efb1ade8ac0666afacf
SHA121543767c09019eb62367d1220bbcda2e687cb62
SHA256775b57e38c4174b55a256ca9e709443694d5a15655af2aa7d9e494f86cda04c1
SHA5126f9529e439d6abada09ef9676bb4b2ceddf8b3d321af090449fbd62cf704005828b1de3ffb47d5963c00d7c1865c8e76525514d1506ab0ff5cefe6bbe0b2d790
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
72KB
MD520d03d475cc1ed845495efe28598e47e
SHA15a388078b503aa08b6f1c940f5d8049045850456
SHA256524d1758bc693c4e82bd677ea85a3b19383f66deac50cf677bdc18515a289a83
SHA5122a5935448ed35c29e9a7797db87c7342b9c90171698d515cd68bb2b46bd1c41520b904811315baf08987c85ce21dd4e65db6a11ec06a9392b9daa707793cf076
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db
Filesize32KB
MD51c4274aa7a9a5cac8c6d1df71e4588c6
SHA1abaecd685e01cc68801292e3dc7085654a22feba
SHA2563f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
SHA5121adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-journal
Filesize4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-shm
Filesize72KB
MD5e47e698cbe2be15cbd882d2a8c3484b9
SHA19aeea01fc79256ef1d1d09513b639b1e01fa4813
SHA25653da9c1504a31984211986aa78adac2b7d7aa04fc07859e10b6be250a0373bd6
SHA51271bc59151a05e26e5ff3193ece6e8d988aa55fcf4a7b7a1c80e56bf653bd36c05a2237e5c0ce38a8d20126467d0583b8b84a749bb0a29b16ce9d9647b42586e2
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-wal
Filesize84KB
MD59b342301f6605a89fd4e9798a86bf1eb
SHA107e95eac8865890e6c976b0dcdc33ff525d01de6
SHA2567d14d78801b6949956ab3b3ca2428c22f93a91071341a4bf9725741567dc82fe
SHA512a48c6be2000d094b7c9e95b2e7d62ec2d74356229a6fc50b1fd1a81bf104531eb8237ea5de4ce213e2e718e7f922ebd5576767ddad0b4efd00dd53b239a6c3e9
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive_AE13A9D158C6E5C927015456B627B01C.db-journal
Filesize124KB
MD517720a4c9c4242aed06a2960f4c06e70
SHA10b673abb03fd455842be813448c3fc82340be641
SHA256e4dc6e8247fcd2849aed8a5608cac74cbcc059a32b6500f293e820503278b6f2
SHA512cbbc05496d879144388d3ec2cf3ab6c2c2aca95f81900ef408408bb49371e4b806349e36a779b5c548447e1e24bdf243efa85412a027210afdc6dd37b28ffd9f
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive_AE13A9D158C6E5C927015456B627B01C.db-wal
Filesize84KB
MD564999ebd46e2784b2f81d8f6ac4864a0
SHA198c2b40af5c9e52e18fa519fa5e4a817e04308d8
SHA2560a7f3499134a877fddeda25b95521c78d55019edfc869e40e5fde37392dd8bb6
SHA512c8a4e28ff7bd5561d31a5ed132c07ad86f7c2b4889752aac160d7e857f3beb900c89e5a3b5c96eda44307923bb4714a18b6b494cb27787c918bcd1f02e9784af
-
Filesize
8KB
MD51716eea7bde3b47d643f15a977075964
SHA189950de33d85368e8515cb913aea86eb7c304906
SHA25625351d7dca08cb4f21306089cbdc368aff37050f79335103ba57fb07643732e6
SHA512507698e399bfdd2bfdf140026226a5e6e756eeb2d5109a544a96b2eddc25f93ed99d345743ed7abc4b01c11a5911e36816de2c6d6612c753b7cfa975a9d4693f
-
Filesize
616B
MD5aba337fad9e968aa4ecd74e7c24fa897
SHA1a23d1da61f2b7ce6c6f00182478e229b5ed6fda0
SHA256b57d5c326f31f872c5746848223ca5a7451edcdae7f6944e9b725a77447d69b9
SHA5129d84e6ae2214f91ac5e9c69a99d54e8335cd4005b372d0f13bd05ad31eacd231f3b40539ceff8e636ef50b5b89325c735144bd956815a86b33f2bd4913a6efed
-
Filesize
3KB
MD5c49ffd78c28ac1175b15c5b8a32fe5e1
SHA1b282fbdb6bc1a19a7a866cc17a5452a49cf9726c
SHA256eb41c94bce2229bb3a184d87ecdec1d79cd53e8cb57cae11da4b83f3e4e88fae
SHA5125eede7ce07aa7402b69987236c8fe5382252679a8c23b88cce97eafb0624a7d65d765e8ae647695155417e0ecc32d2d912c7ee28987260479d6ae29456ebc9d7
-
Filesize
512B
MD528ca5c6e7154d5c45f84eef2160cb43a
SHA12f70f0e79223f23d7f86bae74a0678cfc29396d4
SHA256c1b282d4d5cf04e9994abaff340747008fff54217c0ea69b132028cf32c25130
SHA512a6a097c982ccf719528bd08af52f356738aab325efa81dc41554db00c890a2dc873e6ab54fd7c6295bcd2150d5861d124ec3d740293a0a50b869cb4eb9c1ceda
-
Filesize
468B
MD535e53fd2f840df60047ead1c52a8c6ef
SHA1efbdfb253bebebb51bea9161da15e43a8bec4da3
SHA256464ee33269931a0018b720e0d9715a2c7a3faf47aaba0dafe8d208d5b141543d
SHA5129b9866e911c56ae6d02952423d566fe9920c7f5b5da164526d204829fccc6d856db57985bd3e2d29f186f72e0af968bf6685b687365874ea7c054f31b2b12391
-
Filesize
468B
MD5fcf440e782175135ebe44ccb1dc2f0e9
SHA1d4cda3095f6b855db39dfe04ce0ab1bce6f6efb2
SHA25631964e5d9a49c18f8ac584705b08b420edebf24aed91ce519b7f69e9d11114a9
SHA5120fd8bf4a1d62eed3fab8e02873981629439e0ef2fd98972b6a128660bd9843b815293c70989004633d00e32b771f340c96c661eff540deaf75662f28b1e82b62
-
Filesize
88KB
MD5f891dee9f67874af0fda6f6981494e16
SHA159e184e452454d6056eaec41af1a4073f625d2e8
SHA2567e78dc4f4dae1ccb8abd2589981d73691dc7812451c5ac48434e0a27367b0618
SHA512e656c3aa4e3957f33c4a30180a22f2fa012810344032808d8f38ea14add0eb29383b25cc4bb8be8e15a8e8dec3cd3f380b4679598821988ed686a8d7462b13c4
-
Filesize
1KB
MD5956e2393dd4e7e15b2d5e38083b0b8ea
SHA1dce9e75114474b01983088d44339710d4695cef7
SHA256a82893dc51599366a2d2ba908728e4c143459baba29542c23482fa5ef8fec6f7
SHA512c4ac61b293c5d9c7c2b7e44f7b9f43ced4b0bcc7d74c0258d7bd696094115fcb730db8cef0cd2e69b356bb9aebb20531328ed3ba8a82ac8318e59725bbb6d09b
-
Filesize
24KB
MD56b7a1adc7c82e8f2aab9b00c6d05853c
SHA1d9cf7b07db24036971fd22fe2844812d236777f8
SHA2560ed185de0a421c0e4076b770e4d222b21a52bd63201d0841e4b7697717f881c6
SHA512e5139bbfce54027c429a4b51943852158fc384572e6c6d01c804e73a730346734f4b06a9040bc4c0c50ca1a3f928ad91be12117ffa4b65d00c1095b1ce62a384