Analysis
-
max time kernel
140s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
26-11-2024 01:12
Static task
static1
Behavioral task
behavioral1
Sample
9efd71c52cef8e7df29d194e7375afbb_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
General
-
Target
9efd71c52cef8e7df29d194e7375afbb_JaffaCakes118.apk
-
Size
27.9MB
-
MD5
9efd71c52cef8e7df29d194e7375afbb
-
SHA1
5d514a54053f16f446ccbddb041d554489ca6b99
-
SHA256
8857e0a03453c870c838ccedc9fb3483b01e5f18f2d50b3edc53bdb76d869fdf
-
SHA512
09e96e8e50637d0294e788e90c0e68cfa6efa55f3d4d1392c300c3af9506d3235787868e1cb927cf077ed3a078efa29c7f8da1c073bb5971bda7029417864ead
-
SSDEEP
786432:GaPST1wDJRyaG96fr9JFi+neX7nLDD8drs+DmoQ+TqWE02:GN1gRU9si+neX7beo+DLQ3
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqliveioc process /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services /system/bin/su com.tencent.qqlive:cache /system/xbin/su com.tencent.qqlive:cache /system/bin/su com.tencent.qqlive:services /system/xbin/su com.tencent.qqlive:services /system/bin/su com.tencent.qqlive /system/xbin/su com.tencent.qqlive -
Loads dropped Dex/Jar 1 TTPs 5 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&com.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachecom.tencent.qqlive:servicesioc pid process /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4344 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4311 com.tencent.qqlive /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4367 com.tencent.qqlive:services /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4582 com.tencent.qqlive:cache /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar 4644 com.tencent.qqlive:services -
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
com.tencent.qqlive:servicesdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.tencent.qqlive:services -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlivedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:cache Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive:services Framework service call android.app.IActivityManager.getRunningAppProcesses com.tencent.qqlive -
Queries information about the current nearby Wi-Fi networks 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachedescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getScanResults com.tencent.qqlive:cache -
Acquires the wake lock 2 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services Framework service call android.os.IPowerManager.acquireWakeLock com.tencent.qqlive:services -
Queries information about active data network 1 TTPs 4 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:services Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.tencent.qqlive:cache -
Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:cachecom.tencent.qqlive:servicesdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:cache Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.tencent.qqlive:services -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
Processes:
com.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicesdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:cache Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive Framework service call android.app.IActivityManager.registerReceiver com.tencent.qqlive:services -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
Processes:
com.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:servicesdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive:services Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive:services -
Checks CPU information 2 TTPs 4 IoCs
Processes:
com.tencent.qqlive:cachecom.tencent.qqlive:servicescom.tencent.qqlive:servicescom.tencent.qqlivedescription ioc process File opened for read /proc/cpuinfo com.tencent.qqlive:cache File opened for read /proc/cpuinfo com.tencent.qqlive:services File opened for read /proc/cpuinfo com.tencent.qqlive:services File opened for read /proc/cpuinfo com.tencent.qqlive -
Checks memory information 2 TTPs 4 IoCs
Processes:
com.tencent.qqlive:servicescom.tencent.qqlivecom.tencent.qqlive:servicescom.tencent.qqlive:cachedescription ioc process File opened for read /proc/meminfo com.tencent.qqlive:services File opened for read /proc/meminfo com.tencent.qqlive File opened for read /proc/meminfo com.tencent.qqlive:services File opened for read /proc/meminfo com.tencent.qqlive:cache
Processes
-
com.tencent.qqlive1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4311 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4344
-
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4367
-
com.tencent.qqlive:cache1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4582 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4919
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4939
-
-
com.tencent.qqlive:services1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4644 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4844
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1Software Discovery
1Security Software Discovery
1System Information Discovery
3System Network Configuration Discovery
1System Network Connections Discovery
3Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD59205c3da4a053d0141b9939b1daee0e9
SHA102ab083c84652299507583e3694d34b45bd1a8da
SHA25689d6ebc066f230a4589671751f1ea115a0dc265149db0ef5b4a2dd43cb183757
SHA512cca06ea839c786f837d0bbe29e0097142b4253f4010f7a478dc23dd29f42ac16308bffc288397f02a2fcc84b03f2afc0256dbf07f719fa190cb27eaa015805c3
-
Filesize
706B
MD5c3ce8d132fded186005964a1895399ec
SHA12af53d59873a70ad7d8e79f73f847c09e45be57b
SHA256c161d420bb3b1085b5c662d45f6e7a967f643d9d92a08a66fe920377de9b89a3
SHA512da1f43001076ab9a67bf1768f63dfacef16eebb7748424c42671d43c06c2d6bb824abfa5dcfb813d975a141bc0241ac259bde0e6600f4d4483d6f0fcf54f2b56
-
Filesize
633KB
MD59a3327dc36c28383104176216a5674be
SHA1c9704ed785a5fac01d69d6289f79f3b02254c5cd
SHA2561c8e038e71d1cd0f7e6aacc33a24f63597c74f078a309713dd84efb9abc3d842
SHA512bf67b55c3a042849033fef66c9e7c53029c0458a24ea30bb6895a15157a16c6c0f67334f1a06699694625dd072567f2fc534c443dad0f2418a827a16252e8366
-
Filesize
5.7MB
MD5acbba3723a079d374d8d75460cc7ca06
SHA188ef334c317682684606ec3912cb16761db5d9e8
SHA256377b3f1f86e77454c444b0dbc5deb830179f14d08d686e3bbcca9faccfd2e0a1
SHA512f1e78d3c536dfa9af889f16d8d2e0aa6a2e4407632258fbca75d5496413f7666198766361adb1d540863f16ead4ff4b10664295aacb9a155dd915074c92fa9f8
-
Filesize
4KB
MD50a5e9344aa2b66efc0d971ffd4baa991
SHA16fe872c476c6f0911246cdf91b89ccae631f119d
SHA25675525b9b6298d90c34edb6e764b461bd3a8d16b84e7b024fe5f300febcdee912
SHA5128a21171813390e1c0d78df3d0cc089cc9f0bb7d3036223094f37e40deebf30e2e92e4834f05ca791f368c50cdc22a29f66d0c25ff8e1f933e3bb7cf08ed4b6ed
-
Filesize
512B
MD558e4b362a317364b74551ea43f08d73b
SHA1af08c288f0967d960a417cec4aa513312130a6fd
SHA2562bdb036517d794c606a9f22355619a2ab3ca1355119e60d92d4038df5891216b
SHA51294b61506e417443dc438df51890338c44cc003713b5f34a07c585e1e3aec95f75e49c95831b922f246ee9314243a95103d4da38c734575c9eb330e03323a03b4
-
Filesize
148KB
MD58a6910ebc8cf6acc4aa3e76cbfe756de
SHA141a2563a43ccb594a33c8dd18c66c3bcfd892c7b
SHA256a9d3b05de368c6fc9038136e3ba2663c8df7da0f27efa891c87fcf0db3c5b162
SHA512eaa146ea00f34547876227bf355a7b482fd42699457cd8c4191d71b808484849a4c78e3b72dbdcaa5a5308f198269144d2c90ef84c519f5d2b5d61e86d77f69e
-
Filesize
354KB
MD560d7c53468bb40ae63315bd2cf9c9bce
SHA1015f2194ccedad7ef684a0c584e15a3c5e0cd410
SHA256bf451332036ef20bbf9dad5490daf99fb618c76db53ae79a82cff0066051998f
SHA51281611824edf7f698f4d371cb0e6e6a260c2fb2b3145e2281fd881d680aa1a67987e8fd80a076b74a3cb8a99444196800a25b719e5332aa372de855b5f13e1220
-
Filesize
20KB
MD5a5c947d4892267061c4b2e9d767c777e
SHA19a0821bf95925b68ef21e53634f557b035e4cfd0
SHA2569d181ba3a22c5308700561b36d64ae5bdd8e1d45a0555bbc192a8d1c8d5b13a9
SHA512d145c877c9233649452850ae1d33ba263eb38a8c4522227f91ef022f04a1a27c24021b07caee787baf9f3a26882b5585981f8ebdb5b510ec768af7bb11178206
-
Filesize
60KB
MD50f2dd91838fe7d8d43edd45e6310e7af
SHA1dcb613ea64fdbd07c35ed64a589e5d9c0d635a33
SHA256a1cf876a3fb1c17fb8f8f502abf035e39b70544af494bce90deca0552c4872f6
SHA512824e12b8f2b735cedef0c76d49137296dc172064254d33b0992f36ada346ff91ce631543d8685ea93168391faf222eb76182a8eef6c2953bc08ba813a6a544af
-
Filesize
44KB
MD50a7c2287a47f5420cca6e64ea959b1af
SHA19f67143a3bcab70d26b9b7ba4b232be70f1a031f
SHA256e67814eabd960d39f17c6dfe5319f1640955b4b9b0464ff2898555a5b8076ee2
SHA512ac3ff0eb9ae66c063f05e2c8d2423294c1bddb0eedb1816fa92b8e3e5afab88374798f4297d7774d4619e6bdd4f180238889346d82e7737e5af851b2f6d5a7c1
-
Filesize
301KB
MD52fac26715d83e8a543d8cecc2f5d02cf
SHA19d9fc7f2d16c93870ba03cb29bdc15f6f013fff0
SHA2564e23a976b17e6ccd7fc388d13a7e4d955ff0610719d63a8c60a892fe6b40b5b1
SHA512db5a550dcf726891ce39146b955414347d8ab2d471dfe563b247b1ec3225e0caec892a30ba3e8c417a7f1d381dbbefdc5654e33022f28bd0cf980cda1f8d86b7
-
Filesize
52KB
MD5ec43f640bdb2f39222d9eaffda55fe3e
SHA136e011f033e94411a0d419f6cee3b178fd548f99
SHA256ca0d0094abd298479c818e751c028b5ada69946839e6fcebc4d998070f211a90
SHA512f6ce09fa68c2c139c60d5a73dc838126bd87ecb5f5f15f99f01e682035823f62f15ea3cfa8857feb0aa423ca2a62ded80322d213c1924f439ddebab196b23680
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
88KB
MD5a5d02715081c3d39fa686680dc1a3084
SHA1885bf6ea641f72955d42eb19bd0579d60c4080c9
SHA256c215c4324ec30f21366d18af8a53bcb658613d59e6e0597ba582ccee2a27e331
SHA512d25ce162cac8ac865aef2bcfa6639c1c108e5c7a054d8f43365d3458833c6b622f0e121f88c0577fc30abefcbaebbe014a4e33079dabb56491c825e8aa5565c2
-
Filesize
32KB
MD51c4274aa7a9a5cac8c6d1df71e4588c6
SHA1abaecd685e01cc68801292e3dc7085654a22feba
SHA2563f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
SHA5121adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c
-
Filesize
76KB
MD50ce8eb2430a533182580374192788ff3
SHA1e4a5a1c70001cf9607a8291de031898df1aa6fc9
SHA25686131baeb5dc1b9f3cdcd1e05f850b24d76519cc8ab79dd4201f0847e586ebc3
SHA512cfda10c3d76b93d32f050c3193bff2d464b2eea31b65680904d1413b59ceac656414adf2114ab8880251c680687eb8c3f6d4895c4d3112bf18659caa2aae3526
-
Filesize
512B
MD595dff8d17dd41e6edbc73b4bfba1b630
SHA1ea8bf4999e6fcf994126818211a477c0d7929406
SHA25687177fe0810430e735a592d90a414ad0616f10906006258069c711c78c1b85d2
SHA512532a955a1e65fe32bc3d995549691f3aba4d1964359e0f1de0a6613a49ef2ec1646cec6cf7d545945e1c250ce376e8f095f90623ee11c0831458773849cd0039
-
Filesize
56KB
MD5e3a18914dd4a96de103d158a3e3ecde0
SHA113ee1dde1f8bbfb4cff57a694324d72c4260be51
SHA2569d96c7a0122905475b2174cf06875ba1a50ccd9637b5bd720cfb209c428722ba
SHA5128499dcb94159875820cbcbc7925e63eca0c495f00f01cc7aaa982a3b8431945ba08698595871838a804e62e652c1c200c2e65b231bcad47af3c4f35ee3895dc4
-
Filesize
120KB
MD58a53d4fcaeca12ebae9722a2dff0ffc8
SHA101325a97086d1fd27c9b1782375556aa38341e14
SHA25601e71bcbffab5bc68702cc304ff6d0e14b76f77568cd1c5421b24caa22daf67f
SHA5129fad1e3d8d1c6bf1ece606e83b3f24e77e036b1186b0beecab7dbd17766e5bd2d6ded9f3d635241d15a5aae88c04b51da4f117f8b765ff4693543d5cc8178a8a
-
Filesize
108KB
MD59ef6728bcac795b2a870f12fc20d9eac
SHA1094b01aa55a894dbf9d25a80cdaea08397e5e68a
SHA2564a3a730fe0b4b12b2bf63d818483881eaac87dc431dd21081ed5a69be6a2714f
SHA512b3dc5e4b637ef65fd18c1634f0dfdcf8941cb5c50d953afe006d3ef5422fd2e8339c69466ec300b15175d473a0cdec65f366e77f85c81332738d57c4f128a3c8
-
Filesize
209KB
MD592973efb1689be44685c916131277671
SHA1bf07e89ecb0d8429a3a9479fa3d3479863c9b120
SHA25609535b1180c03581c507799055a2c9c8b9b415fce8116513e2ad13f615ea8f84
SHA51246e339b97fba346fffb1f80bc712f4c0d73137b4bfaee4d7334a226765d80b2d2b558d942ff204c1ed4f152feb814170b0157b7aab6b91a4cda850b477f47f2b
-
Filesize
257KB
MD58b7a7035b7989d217b01060836429b5f
SHA1c7392abd261a86984dceb79c7839cc9ba41b972e
SHA256b08bc512d705f74da278547d686c32d2ed0ed250651da2b505e641bd469d1577
SHA5129e471ea9463f816afc9863b3e744ef49240a8477e960f206edfad67984f6feb7d63ba344355ce5dd0aac0d4afae65c8591e2bd940175e2e8e5349e47c4969888
-
Filesize
366KB
MD5afa7f47c8b8695bba962e8f5e5f6f727
SHA1c3f20ba7d18241e895d63ab4af71a8bd503c123f
SHA25638d212f59b6c969f9a0b104fbdf47c5fe555e695dc48ef9cc2815219a3508768
SHA512e3faca64afc4a829aa5f2e1fc207614146658eac758e779d39b9a9235ca33ae20000064cb5d09f3f53c1fb9043c2b5321593a368ee963407836a820208c2d185
-
Filesize
76KB
MD531de5f1ca4b2737fc18d7c8ec6c4ddd9
SHA107bc52279060cc3d3243a225f995a8a26ae0097c
SHA256a622423751bf7f786e18d36f4bbfc394d959d42a380f6bf0ac580d00462fae89
SHA512c1cb3919f075fbfbff5be1f522c708b64eabc5309f0876f3717e33f312eb94e4b6f86faf5702be4fe97ce6771813adcc43d20234de59a0766b399c634a414071
-
Filesize
48KB
MD557829e8ec14aad416fa9f41139c4131d
SHA18ee2ccff7e1fbca557b4b70e91df38624a35938c
SHA25671697861aa2aa56d8187c03ba81ded2d48851346f59ba83b033eda3f3f5b4064
SHA512bc56636243838258d5a5b4f8ea144eda0d07e6da9c61b9504049b7d3692dcc059b0bd05f8b0b0c49aef73e1086e71510e48dde4b3b07f606e483f998d85d9a22
-
Filesize
28KB
MD5670d8bc46551c40a1fb9ff8ec4b72092
SHA182253b089122b4d8c7ae61dbbeabd9d037ddd49c
SHA256ca2684e4da544d08c906c70f147d8dbc91da3a7972d255e6a00e1c99419f78e2
SHA5124977d35230c533e26162cb0e4da38345a23a87ff41510685e755a52152fc78d0b027e8e8942fe10ae28fe332b16bb9a7ba0c0644ec0efd635d579515c3d5df67
-
Filesize
64KB
MD5b3eb808a35c95132b62b890fe7dd8f66
SHA147fadf4abbb30ef878b086ee26c42fdd4deb7c3a
SHA2560f117ccd862fd1a052a49501faca4e225d9dbe67374f52d22db8582bd5976bc1
SHA512dd478752e513302f1fc968fee545bc5daafe4316cb981037113bdaf96e6ee5cffc83b1e39c97662902ea0da0c7340b9018afd3f38b3467d6e6a890a2770b1b7a
-
Filesize
305KB
MD5115387e56610d69f3a0f958ebc0ca291
SHA12ee5d7eb4d62df4971f57b87866c7aa7d75c92ce
SHA256636bf7551bb4d37157b29e9a9d99c7862884218c720c4d17325a61d95e42e75d
SHA5128c6a2e3a8ebf79b120201e43e409c60e75ef5a5d15a2ba4bd07f2074fbcde7ed2cb9b3d444e6e7eedb090975a9349ba35da697c686f533e80e23518d5067c1fa
-
Filesize
72KB
MD5e784b57de18c22bec7e8cf813db74aa6
SHA1dd402aa74813f2cfa616708c443ebeb7d5658b4b
SHA2569301d305617f239e19e357fa5a37dd978ddd5a6917719464cf29ffbcdd0a5966
SHA512b28bb680141418f0b0cb8458efd1d09c6407eabca4cad7f03385e161afd31667d71cf5b11ef05d77a5599416e9b2414f6b3818446fc5966f0c2e53639ad385f9
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db
Filesize84KB
MD51c3863984eaedecbf22ac50dcd170471
SHA111412074eebb89af9868f6ceb00e115c54d9028e
SHA256562413338fe1fad80d023cae61164728ff88ac2decf1fdfb607f5f84de151d7d
SHA512445ae4e84a396ddc9fbc2011089af28f8a84e97743aa215e80cf30743b6455344ac15b70e5ef24c8d84bfdc0527f58f55dce69d86becd4dcd2b577a695b1efcf
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-journal
Filesize136KB
MD58c1dfea7f0432a3bc7a3075b3a8feca3
SHA1325b6c74db213de3b0328382acfdc2a800776c5d
SHA256e5bb72826b0ed4f9f5ea82aed8b9ac80bd2e3c17e7a03d0701c1323d96b2b434
SHA5125cb139ec22c96220ab4e7263bfb155f86526a92c1ac75c2277ba740bfe6f49315dc50605a98863783ad77b8ccdd4161e30f1423ebbd744e6cbbd55bed06cc314
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-shm
Filesize205KB
MD5e080f89371a64daa6b587c5efbb1426b
SHA1a13c67f1529631b92e738c2861c2ca0dc2a6c409
SHA2563b832558c525a747b783ade194d9c5024f0cf93b0d14adaf2bda79a0bd16dafb
SHA5128882c54f1470f335d54772b6d63f763de2e942fc26edf8f9b444a38cafef3e44227e9eef605738349dfb183189fb45a5565231b9dede2b61505583b241f00455
-
/data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-wal
Filesize112KB
MD549ff04b1c55fe0e2fcd886112e6755bf
SHA196c2f1abe7ff6107238dabf5ae30141de2838369
SHA256267d0e4b27b7de3d2b6f689ea71b5c98c32eff240cc6d5dffff4e5ec665bd220
SHA51243fc5ec90dc93b37a1c9837e72ab6dae5c5736f6a257c4126c63b6bafd29d312abbc0d5120c9fc2ad4ac618a4e5d87c26b244c75aca5b488e9e13f759a075715
-
Filesize
32KB
MD56428972e2d0b7ba6621dd5c2abf79c3a
SHA17acda8b8d5ba10c1b6203d95e14c57702e68229f
SHA2561b717664c2628f94226679281ba6d45e44805e0195e2b2ac39bc541ffcc57b85
SHA51211b8427fb17799f35c736740000b42e2c5b6aebeb5c95c79e12d5cccb1c764062dabf29d87c937c6bef71f687975dadf7415f08abc197b7c873b0f999493660c
-
Filesize
1KB
MD59c66928ce6830dc27518beebb4184f64
SHA1e905b85b75dc5aeba1edf4cd71fdc688ff5631ee
SHA25638f06cb8af0fae333ae7f5047862a5870b2bbb07f9e734ebd9a7af0b92ab894e
SHA51239a55a5329983e5c0d6c8573426884c7fbd66b5a17a2b333caefb993b92d4d21814123041137d697bf1069c98a21fc18bf044a67572ec75e37566f85af1ed53e
-
Filesize
136KB
MD5b45eeeb0d295179242cf43ff9bba1179
SHA1584e75dc9690ba67359d518e05bfe71e7cf42ebb
SHA256eb3eb10ae950c549b5dcdc17394d3fbdd1f511e594ffbf0b930bc1b30e02022e
SHA51230296d5dc2be4ca0a0208da7eeeb40e5c75d0dbf94af970fa263618494210bb0d3066e07f5dd05b8614153f5efdf64a7de6aaa1a67730afc180e8eb9dfeb03b8
-
Filesize
32KB
MD57c6ded8c1bcd5c2362569278c0b3730a
SHA11cb9e4ebef71db2433cde4af08fe27a97c86c776
SHA2565b2e38b5fad70caa3def4e3bdd08cfe9fff8e7fef6e3efc3ad40fe743d1a3e5d
SHA51286b61a3d933ca3ce2e9bc3734a250ef7d6c296074d4bca3db6f04070ceab68c766740ef385c4a19cee2e60813dfe7d6271743074a90af9ef931306a55f2fdba4
-
Filesize
468B
MD535e53fd2f840df60047ead1c52a8c6ef
SHA1efbdfb253bebebb51bea9161da15e43a8bec4da3
SHA256464ee33269931a0018b720e0d9715a2c7a3faf47aaba0dafe8d208d5b141543d
SHA5129b9866e911c56ae6d02952423d566fe9920c7f5b5da164526d204829fccc6d856db57985bd3e2d29f186f72e0af968bf6685b687365874ea7c054f31b2b12391
-
Filesize
468B
MD5fcf440e782175135ebe44ccb1dc2f0e9
SHA1d4cda3095f6b855db39dfe04ce0ab1bce6f6efb2
SHA25631964e5d9a49c18f8ac584705b08b420edebf24aed91ce519b7f69e9d11114a9
SHA5120fd8bf4a1d62eed3fab8e02873981629439e0ef2fd98972b6a128660bd9843b815293c70989004633d00e32b771f340c96c661eff540deaf75662f28b1e82b62
-
Filesize
136KB
MD5fb724631baa49d90436eae1636ba2bfb
SHA1cf721a2ff96cca63aa8ba3d341e47d9a7511a561
SHA256c2624cfef8ce6cc595765b1feba4595c03b9bf40a5d37c04374cd8dfeaf74fdb
SHA512fa6ee42b084a7f0f3ee6d564a93539acd27aeec8faee00e3b75b903248ba49b21071d2ca33a0655f0518e4b9d3d27804773bd4bd82704f29cf7520822db54d8a
-
Filesize
2.2MB
MD5ee3230328e542007ff640a0c151ad4a8
SHA176b878ec7fb4d0cc024545b3e8722e4636d00a24
SHA256e47a4976c256fca035307a5e8340c416ed9cc8cdaeebd04c9eb42b6ddc7d7145
SHA512c093bfc6a54652c97299a7213c60562e5d15fa212260299c3e1dbf3011bef45b799b682c388e3b02ac2192bd7c87d1ddfcc244769c8bd3ff25bc7e8884bc2be3
-
Filesize
44KB
MD5afaa37e34b91d33ce1dc6c24bb8a2680
SHA1028721986161ec04dd81f927e2a2832881e10e38
SHA256f94017eee02bf377b59c891c087d433afd64117973ebbda4696f9eaa8bf0801e
SHA5124e1ab40556261351d02d5e210a350905567594046f7d17fbe29053741d16d57b5fcf4b87e66245ee17cd08670d0ae16322c0427aaac3e5d54568e87fb652893f