Analysis

  • max time kernel
    140s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2024 01:12

General

  • Target

    9efd71c52cef8e7df29d194e7375afbb_JaffaCakes118.apk

  • Size

    27.9MB

  • MD5

    9efd71c52cef8e7df29d194e7375afbb

  • SHA1

    5d514a54053f16f446ccbddb041d554489ca6b99

  • SHA256

    8857e0a03453c870c838ccedc9fb3483b01e5f18f2d50b3edc53bdb76d869fdf

  • SHA512

    09e96e8e50637d0294e788e90c0e68cfa6efa55f3d4d1392c300c3af9506d3235787868e1cb927cf077ed3a078efa29c7f8da1c073bb5971bda7029417864ead

  • SSDEEP

    786432:GaPST1wDJRyaG96fr9JFi+neX7nLDD8drs+DmoQ+TqWE02:GN1gRU9si+neX7beo+DLQ3

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 4 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs
  • Checks CPU information 2 TTPs 4 IoCs
  • Checks memory information 2 TTPs 4 IoCs

Processes

  • com.tencent.qqlive
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4311
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/com.tencent.qqlive/files/ad_patch/oat/x86/AdHack.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4344
  • com.tencent.qqlive:services
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4367
  • com.tencent.qqlive:cache
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4582
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4919
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
        2⤵
          PID:4939
      • com.tencent.qqlive:services
        1⤵
        • Checks if the Android device is rooted.
        • Loads dropped Dex/Jar
        • Makes use of the framework's Accessibility service
        • Queries information about running processes on the device
        • Queries information about the current nearby Wi-Fi networks
        • Acquires the wake lock
        • Queries information about active data network
        • Queries information about the current Wi-Fi connection
        • Registers a broadcast receiver at runtime (usually for listening for system events)
        • Uses Crypto APIs (Might try to encrypt user data)
        • Checks CPU information
        • Checks memory information
        PID:4644
        • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
          2⤵
            PID:4844

        Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.tencent.qqlive/cache/LocalCache/1433571038

          Filesize

          60KB

          MD5

          9205c3da4a053d0141b9939b1daee0e9

          SHA1

          02ab083c84652299507583e3694d34b45bd1a8da

          SHA256

          89d6ebc066f230a4589671751f1ea115a0dc265149db0ef5b4a2dd43cb183757

          SHA512

          cca06ea839c786f837d0bbe29e0097142b4253f4010f7a478dc23dd29f42ac16308bffc288397f02a2fcc84b03f2afc0256dbf07f719fa190cb27eaa015805c3

        • /data/data/com.tencent.qqlive/cache/com.tencent.qqlive:cache_fileDesc.dat

          Filesize

          706B

          MD5

          c3ce8d132fded186005964a1895399ec

          SHA1

          2af53d59873a70ad7d8e79f73f847c09e45be57b

          SHA256

          c161d420bb3b1085b5c662d45f6e7a967f643d9d92a08a66fe920377de9b89a3

          SHA512

          da1f43001076ab9a67bf1768f63dfacef16eebb7748424c42671d43c06c2d6bb824abfa5dcfb813d975a141bc0241ac259bde0e6600f4d4483d6f0fcf54f2b56

        • /data/data/com.tencent.qqlive/cache/p2p_P2P.3.0.0.395/libp2plive.so

          Filesize

          633KB

          MD5

          9a3327dc36c28383104176216a5674be

          SHA1

          c9704ed785a5fac01d69d6289f79f3b02254c5cd

          SHA256

          1c8e038e71d1cd0f7e6aacc33a24f63597c74f078a309713dd84efb9abc3d842

          SHA512

          bf67b55c3a042849033fef66c9e7c53029c0458a24ea30bb6895a15157a16c6c0f67334f1a06699694625dd072567f2fc534c443dad0f2418a827a16252e8366

        • /data/data/com.tencent.qqlive/cache/p2p_P2P.3.0.0.395/libp2pproxy.so

          Filesize

          5.7MB

          MD5

          acbba3723a079d374d8d75460cc7ca06

          SHA1

          88ef334c317682684606ec3912cb16761db5d9e8

          SHA256

          377b3f1f86e77454c444b0dbc5deb830179f14d08d686e3bbcca9faccfd2e0a1

          SHA512

          f1e78d3c536dfa9af889f16d8d2e0aa6a2e4407632258fbca75d5496413f7666198766361adb1d540863f16ead4ff4b10664295aacb9a155dd915074c92fa9f8

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db

          Filesize

          4KB

          MD5

          0a5e9344aa2b66efc0d971ffd4baa991

          SHA1

          6fe872c476c6f0911246cdf91b89ccae631f119d

          SHA256

          75525b9b6298d90c34edb6e764b461bd3a8d16b84e7b024fe5f300febcdee912

          SHA512

          8a21171813390e1c0d78df3d0cc089cc9f0bb7d3036223094f37e40deebf30e2e92e4834f05ca791f368c50cdc22a29f66d0c25ff8e1f933e3bb7cf08ed4b6ed

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db-journal

          Filesize

          512B

          MD5

          58e4b362a317364b74551ea43f08d73b

          SHA1

          af08c288f0967d960a417cec4aa513312130a6fd

          SHA256

          2bdb036517d794c606a9f22355619a2ab3ca1355119e60d92d4038df5891216b

          SHA512

          94b61506e417443dc438df51890338c44cc003713b5f34a07c585e1e3aec95f75e49c95831b922f246ee9314243a95103d4da38c734575c9eb330e03323a03b4

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db-shm

          Filesize

          148KB

          MD5

          8a6910ebc8cf6acc4aa3e76cbfe756de

          SHA1

          41a2563a43ccb594a33c8dd18c66c3bcfd892c7b

          SHA256

          a9d3b05de368c6fc9038136e3ba2663c8df7da0f27efa891c87fcf0db3c5b162

          SHA512

          eaa146ea00f34547876227bf355a7b482fd42699457cd8c4191d71b808484849a4c78e3b72dbdcaa5a5308f198269144d2c90ef84c519f5d2b5d61e86d77f69e

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db-wal

          Filesize

          354KB

          MD5

          60d7c53468bb40ae63315bd2cf9c9bce

          SHA1

          015f2194ccedad7ef684a0c584e15a3c5e0cd410

          SHA256

          bf451332036ef20bbf9dad5490daf99fb618c76db53ae79a82cff0066051998f

          SHA512

          81611824edf7f698f4d371cb0e6e6a260c2fb2b3145e2281fd881d680aa1a67987e8fd80a076b74a3cb8a99444196800a25b719e5332aa372de855b5f13e1220

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db-wal

          Filesize

          20KB

          MD5

          a5c947d4892267061c4b2e9d767c777e

          SHA1

          9a0821bf95925b68ef21e53634f557b035e4cfd0

          SHA256

          9d181ba3a22c5308700561b36d64ae5bdd8e1d45a0555bbc192a8d1c8d5b13a9

          SHA512

          d145c877c9233649452850ae1d33ba263eb38a8c4522227f91ef022f04a1a27c24021b07caee787baf9f3a26882b5585981f8ebdb5b510ec768af7bb11178206

        • /data/data/com.tencent.qqlive/databases/OnePrefs.db-wal

          Filesize

          60KB

          MD5

          0f2dd91838fe7d8d43edd45e6310e7af

          SHA1

          dcb613ea64fdbd07c35ed64a589e5d9c0d635a33

          SHA256

          a1cf876a3fb1c17fb8f8f502abf035e39b70544af494bce90deca0552c4872f6

          SHA512

          824e12b8f2b735cedef0c76d49137296dc172064254d33b0992f36ada346ff91ce631543d8685ea93168391faf222eb76182a8eef6c2953bc08ba813a6a544af

        • /data/data/com.tencent.qqlive/databases/eup_db

          Filesize

          44KB

          MD5

          0a7c2287a47f5420cca6e64ea959b1af

          SHA1

          9f67143a3bcab70d26b9b7ba4b232be70f1a031f

          SHA256

          e67814eabd960d39f17c6dfe5319f1640955b4b9b0464ff2898555a5b8076ee2

          SHA512

          ac3ff0eb9ae66c063f05e2c8d2423294c1bddb0eedb1816fa92b8e3e5afab88374798f4297d7774d4619e6bdd4f180238889346d82e7737e5af851b2f6d5a7c1

        • /data/data/com.tencent.qqlive/databases/eup_db

          Filesize

          301KB

          MD5

          2fac26715d83e8a543d8cecc2f5d02cf

          SHA1

          9d9fc7f2d16c93870ba03cb29bdc15f6f013fff0

          SHA256

          4e23a976b17e6ccd7fc388d13a7e4d955ff0610719d63a8c60a892fe6b40b5b1

          SHA512

          db5a550dcf726891ce39146b955414347d8ab2d471dfe563b247b1ec3225e0caec892a30ba3e8c417a7f1d381dbbefdc5654e33022f28bd0cf980cda1f8d86b7

        • /data/data/com.tencent.qqlive/databases/eup_db

          Filesize

          52KB

          MD5

          ec43f640bdb2f39222d9eaffda55fe3e

          SHA1

          36e011f033e94411a0d419f6cee3b178fd548f99

          SHA256

          ca0d0094abd298479c818e751c028b5ada69946839e6fcebc4d998070f211a90

          SHA512

          f6ce09fa68c2c139c60d5a73dc838126bd87ecb5f5f15f99f01e682035823f62f15ea3cfa8857feb0aa423ca2a62ded80322d213c1924f439ddebab196b23680

        • /data/data/com.tencent.qqlive/databases/eup_db-journal

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.tencent.qqlive/databases/eup_db-shm

          Filesize

          88KB

          MD5

          a5d02715081c3d39fa686680dc1a3084

          SHA1

          885bf6ea641f72955d42eb19bd0579d60c4080c9

          SHA256

          c215c4324ec30f21366d18af8a53bcb658613d59e6e0597ba582ccee2a27e331

          SHA512

          d25ce162cac8ac865aef2bcfa6639c1c108e5c7a054d8f43365d3458833c6b622f0e121f88c0577fc30abefcbaebbe014a4e33079dabb56491c825e8aa5565c2

        • /data/data/com.tencent.qqlive/databases/eup_db-shm

          Filesize

          32KB

          MD5

          1c4274aa7a9a5cac8c6d1df71e4588c6

          SHA1

          abaecd685e01cc68801292e3dc7085654a22feba

          SHA256

          3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

          SHA512

          1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

        • /data/data/com.tencent.qqlive/databases/eup_db-shm

          Filesize

          76KB

          MD5

          0ce8eb2430a533182580374192788ff3

          SHA1

          e4a5a1c70001cf9607a8291de031898df1aa6fc9

          SHA256

          86131baeb5dc1b9f3cdcd1e05f850b24d76519cc8ab79dd4201f0847e586ebc3

          SHA512

          cfda10c3d76b93d32f050c3193bff2d464b2eea31b65680904d1413b59ceac656414adf2114ab8880251c680687eb8c3f6d4895c4d3112bf18659caa2aae3526

        • /data/data/com.tencent.qqlive/databases/eup_db-shm

          Filesize

          512B

          MD5

          95dff8d17dd41e6edbc73b4bfba1b630

          SHA1

          ea8bf4999e6fcf994126818211a477c0d7929406

          SHA256

          87177fe0810430e735a592d90a414ad0616f10906006258069c711c78c1b85d2

          SHA512

          532a955a1e65fe32bc3d995549691f3aba4d1964359e0f1de0a6613a49ef2ec1646cec6cf7d545945e1c250ce376e8f095f90623ee11c0831458773849cd0039

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          56KB

          MD5

          e3a18914dd4a96de103d158a3e3ecde0

          SHA1

          13ee1dde1f8bbfb4cff57a694324d72c4260be51

          SHA256

          9d96c7a0122905475b2174cf06875ba1a50ccd9637b5bd720cfb209c428722ba

          SHA512

          8499dcb94159875820cbcbc7925e63eca0c495f00f01cc7aaa982a3b8431945ba08698595871838a804e62e652c1c200c2e65b231bcad47af3c4f35ee3895dc4

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          120KB

          MD5

          8a53d4fcaeca12ebae9722a2dff0ffc8

          SHA1

          01325a97086d1fd27c9b1782375556aa38341e14

          SHA256

          01e71bcbffab5bc68702cc304ff6d0e14b76f77568cd1c5421b24caa22daf67f

          SHA512

          9fad1e3d8d1c6bf1ece606e83b3f24e77e036b1186b0beecab7dbd17766e5bd2d6ded9f3d635241d15a5aae88c04b51da4f117f8b765ff4693543d5cc8178a8a

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          108KB

          MD5

          9ef6728bcac795b2a870f12fc20d9eac

          SHA1

          094b01aa55a894dbf9d25a80cdaea08397e5e68a

          SHA256

          4a3a730fe0b4b12b2bf63d818483881eaac87dc431dd21081ed5a69be6a2714f

          SHA512

          b3dc5e4b637ef65fd18c1634f0dfdcf8941cb5c50d953afe006d3ef5422fd2e8339c69466ec300b15175d473a0cdec65f366e77f85c81332738d57c4f128a3c8

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          209KB

          MD5

          92973efb1689be44685c916131277671

          SHA1

          bf07e89ecb0d8429a3a9479fa3d3479863c9b120

          SHA256

          09535b1180c03581c507799055a2c9c8b9b415fce8116513e2ad13f615ea8f84

          SHA512

          46e339b97fba346fffb1f80bc712f4c0d73137b4bfaee4d7334a226765d80b2d2b558d942ff204c1ed4f152feb814170b0157b7aab6b91a4cda850b477f47f2b

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          257KB

          MD5

          8b7a7035b7989d217b01060836429b5f

          SHA1

          c7392abd261a86984dceb79c7839cc9ba41b972e

          SHA256

          b08bc512d705f74da278547d686c32d2ed0ed250651da2b505e641bd469d1577

          SHA512

          9e471ea9463f816afc9863b3e744ef49240a8477e960f206edfad67984f6feb7d63ba344355ce5dd0aac0d4afae65c8591e2bd940175e2e8e5349e47c4969888

        • /data/data/com.tencent.qqlive/databases/eup_db-wal

          Filesize

          366KB

          MD5

          afa7f47c8b8695bba962e8f5e5f6f727

          SHA1

          c3f20ba7d18241e895d63ab4af71a8bd503c123f

          SHA256

          38d212f59b6c969f9a0b104fbdf47c5fe555e695dc48ef9cc2815219a3508768

          SHA512

          e3faca64afc4a829aa5f2e1fc207614146658eac758e779d39b9a9235ca33ae20000064cb5d09f3f53c1fb9043c2b5321593a368ee963407836a820208c2d185

        • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services

          Filesize

          76KB

          MD5

          31de5f1ca4b2737fc18d7c8ec6c4ddd9

          SHA1

          07bc52279060cc3d3243a225f995a8a26ae0097c

          SHA256

          a622423751bf7f786e18d36f4bbfc394d959d42a380f6bf0ac580d00462fae89

          SHA512

          c1cb3919f075fbfbff5be1f522c708b64eabc5309f0876f3717e33f312eb94e4b6f86faf5702be4fe97ce6771813adcc43d20234de59a0766b399c634a414071

        • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services-journal

          Filesize

          48KB

          MD5

          57829e8ec14aad416fa9f41139c4131d

          SHA1

          8ee2ccff7e1fbca557b4b70e91df38624a35938c

          SHA256

          71697861aa2aa56d8187c03ba81ded2d48851346f59ba83b033eda3f3f5b4064

          SHA512

          bc56636243838258d5a5b4f8ea144eda0d07e6da9c61b9504049b7d3692dcc059b0bd05f8b0b0c49aef73e1086e71510e48dde4b3b07f606e483f998d85d9a22

        • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services-shm

          Filesize

          28KB

          MD5

          670d8bc46551c40a1fb9ff8ec4b72092

          SHA1

          82253b089122b4d8c7ae61dbbeabd9d037ddd49c

          SHA256

          ca2684e4da544d08c906c70f147d8dbc91da3a7972d255e6a00e1c99419f78e2

          SHA512

          4977d35230c533e26162cb0e4da38345a23a87ff41510685e755a52152fc78d0b027e8e8942fe10ae28fe332b16bb9a7ba0c0644ec0efd635d579515c3d5df67

        • /data/data/com.tencent.qqlive/databases/pri_tencent_analysis.db_com.tencent.qqlive:services-wal

          Filesize

          64KB

          MD5

          b3eb808a35c95132b62b890fe7dd8f66

          SHA1

          47fadf4abbb30ef878b086ee26c42fdd4deb7c3a

          SHA256

          0f117ccd862fd1a052a49501faca4e225d9dbe67374f52d22db8582bd5976bc1

          SHA512

          dd478752e513302f1fc968fee545bc5daafe4316cb981037113bdaf96e6ee5cffc83b1e39c97662902ea0da0c7340b9018afd3f38b3467d6e6a890a2770b1b7a

        • /data/data/com.tencent.qqlive/databases/tencent_analysis.db_com.tencent.qqlive:services-shm

          Filesize

          305KB

          MD5

          115387e56610d69f3a0f958ebc0ca291

          SHA1

          2ee5d7eb4d62df4971f57b87866c7aa7d75c92ce

          SHA256

          636bf7551bb4d37157b29e9a9d99c7862884218c720c4d17325a61d95e42e75d

          SHA512

          8c6a2e3a8ebf79b120201e43e409c60e75ef5a5d15a2ba4bd07f2074fbcde7ed2cb9b3d444e6e7eedb090975a9349ba35da697c686f533e80e23518d5067c1fa

        • /data/data/com.tencent.qqlive/databases/tencent_analysis.db_com.tencent.qqlive:services-wal

          Filesize

          72KB

          MD5

          e784b57de18c22bec7e8cf813db74aa6

          SHA1

          dd402aa74813f2cfa616708c443ebeb7d5658b4b

          SHA256

          9301d305617f239e19e357fa5a37dd978ddd5a6917719464cf29ffbcdd0a5966

          SHA512

          b28bb680141418f0b0cb8458efd1d09c6407eabca4cad7f03385e161afd31667d71cf5b11ef05d77a5599416e9b2414f6b3818446fc5966f0c2e53639ad385f9

        • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db

          Filesize

          84KB

          MD5

          1c3863984eaedecbf22ac50dcd170471

          SHA1

          11412074eebb89af9868f6ceb00e115c54d9028e

          SHA256

          562413338fe1fad80d023cae61164728ff88ac2decf1fdfb607f5f84de151d7d

          SHA512

          445ae4e84a396ddc9fbc2011089af28f8a84e97743aa215e80cf30743b6455344ac15b70e5ef24c8d84bfdc0527f58f55dce69d86becd4dcd2b577a695b1efcf

        • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-journal

          Filesize

          136KB

          MD5

          8c1dfea7f0432a3bc7a3075b3a8feca3

          SHA1

          325b6c74db213de3b0328382acfdc2a800776c5d

          SHA256

          e5bb72826b0ed4f9f5ea82aed8b9ac80bd2e3c17e7a03d0701c1323d96b2b434

          SHA512

          5cb139ec22c96220ab4e7263bfb155f86526a92c1ac75c2277ba740bfe6f49315dc50605a98863783ad77b8ccdd4161e30f1423ebbd744e6cbbd55bed06cc314

        • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-shm

          Filesize

          205KB

          MD5

          e080f89371a64daa6b587c5efbb1426b

          SHA1

          a13c67f1529631b92e738c2861c2ca0dc2a6c409

          SHA256

          3b832558c525a747b783ade194d9c5024f0cf93b0d14adaf2bda79a0bd16dafb

          SHA512

          8882c54f1470f335d54772b6d63f763de2e942fc26edf8f9b444a38cafef3e44227e9eef605738349dfb183189fb45a5565231b9dede2b61505583b241f00455

        • /data/data/com.tencent.qqlive/databases/tencent_odk_com.tencent.qqlive:services_AE13A9D158C6E5C927015456B627B01C.db-wal

          Filesize

          112KB

          MD5

          49ff04b1c55fe0e2fcd886112e6755bf

          SHA1

          96c2f1abe7ff6107238dabf5ae30141de2838369

          SHA256

          267d0e4b27b7de3d2b6f689ea71b5c98c32eff240cc6d5dffff4e5ec665bd220

          SHA512

          43fc5ec90dc93b37a1c9837e72ab6dae5c5736f6a257c4126c63b6bafd29d312abbc0d5120c9fc2ad4ac618a4e5d87c26b244c75aca5b488e9e13f759a075715

        • /data/data/com.tencent.qqlive/files/ad_patch/AdHack.jar

          Filesize

          32KB

          MD5

          6428972e2d0b7ba6621dd5c2abf79c3a

          SHA1

          7acda8b8d5ba10c1b6203d95e14c57702e68229f

          SHA256

          1b717664c2628f94226679281ba6d45e44805e0195e2b2ac39bc541ffcc57b85

          SHA512

          11b8427fb17799f35c736740000b42e2c5b6aebeb5c95c79e12d5cccb1c764062dabf29d87c937c6bef71f687975dadf7415f08abc197b7c873b0f999493660c

        • /data/data/com.tencent.qqlive/files/download/f4TAd_p2p.db-journal

          Filesize

          1KB

          MD5

          9c66928ce6830dc27518beebb4184f64

          SHA1

          e905b85b75dc5aeba1edf4cd71fdc688ff5631ee

          SHA256

          38f06cb8af0fae333ae7f5047862a5870b2bbb07f9e734ebd9a7af0b92ab894e

          SHA512

          39a55a5329983e5c0d6c8573426884c7fbd66b5a17a2b333caefb993b92d4d21814123041137d697bf1069c98a21fc18bf044a67572ec75e37566f85af1ed53e

        • /data/data/com.tencent.qqlive/files/guid

          Filesize

          136KB

          MD5

          b45eeeb0d295179242cf43ff9bba1179

          SHA1

          584e75dc9690ba67359d518e05bfe71e7cf42ebb

          SHA256

          eb3eb10ae950c549b5dcdc17394d3fbdd1f511e594ffbf0b930bc1b30e02022e

          SHA512

          30296d5dc2be4ca0a0208da7eeeb40e5c75d0dbf94af970fa263618494210bb0d3066e07f5dd05b8614153f5efdf64a7de6aaa1a67730afc180e8eb9dfeb03b8

        • /data/data/com.tencent.qqlive/files/guid

          Filesize

          32KB

          MD5

          7c6ded8c1bcd5c2362569278c0b3730a

          SHA1

          1cb9e4ebef71db2433cde4af08fe27a97c86c776

          SHA256

          5b2e38b5fad70caa3def4e3bdd08cfe9fff8e7fef6e3efc3ad40fe743d1a3e5d

          SHA512

          86b61a3d933ca3ce2e9bc3734a250ef7d6c296074d4bca3db6f04070ceab68c766740ef385c4a19cee2e60813dfe7d6271743074a90af9ef931306a55f2fdba4

        • /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar

          Filesize

          468B

          MD5

          35e53fd2f840df60047ead1c52a8c6ef

          SHA1

          efbdfb253bebebb51bea9161da15e43a8bec4da3

          SHA256

          464ee33269931a0018b720e0d9715a2c7a3faf47aaba0dafe8d208d5b141543d

          SHA512

          9b9866e911c56ae6d02952423d566fe9920c7f5b5da164526d204829fccc6d856db57985bd3e2d29f186f72e0af968bf6685b687365874ea7c054f31b2b12391

        • /data/user/0/com.tencent.qqlive/files/ad_patch/AdHack.jar

          Filesize

          468B

          MD5

          fcf440e782175135ebe44ccb1dc2f0e9

          SHA1

          d4cda3095f6b855db39dfe04ce0ab1bce6f6efb2

          SHA256

          31964e5d9a49c18f8ac584705b08b420edebf24aed91ce519b7f69e9d11114a9

          SHA512

          0fd8bf4a1d62eed3fab8e02873981629439e0ef2fd98972b6a128660bd9843b815293c70989004633d00e32b771f340c96c661eff540deaf75662f28b1e82b62

        • /storage/emulated/0/Android/data/com.tencent.qqlive/files/QQLive/guid

          Filesize

          136KB

          MD5

          fb724631baa49d90436eae1636ba2bfb

          SHA1

          cf721a2ff96cca63aa8ba3d341e47d9a7511a561

          SHA256

          c2624cfef8ce6cc595765b1feba4595c03b9bf40a5d37c04374cd8dfeaf74fdb

          SHA512

          fa6ee42b084a7f0f3ee6d564a93539acd27aeec8faee00e3b75b903248ba49b21071d2ca33a0655f0518e4b9d3d27804773bd4bd82704f29cf7520822db54d8a

        • /storage/emulated/0/Android/data/com.tencent.qqlive/files/QQLive/guid

          Filesize

          2.2MB

          MD5

          ee3230328e542007ff640a0c151ad4a8

          SHA1

          76b878ec7fb4d0cc024545b3e8722e4636d00a24

          SHA256

          e47a4976c256fca035307a5e8340c416ed9cc8cdaeebd04c9eb42b6ddc7d7145

          SHA512

          c093bfc6a54652c97299a7213c60562e5d15fa212260299c3e1dbf3011bef45b799b682c388e3b02ac2192bd7c87d1ddfcc244769c8bd3ff25bc7e8884bc2be3

        • /storage/emulated/0/Android/data/com.tencent.qqlive/files/log/QQLiveLog_0.log

          Filesize

          44KB

          MD5

          afaa37e34b91d33ce1dc6c24bb8a2680

          SHA1

          028721986161ec04dd81f927e2a2832881e10e38

          SHA256

          f94017eee02bf377b59c891c087d433afd64117973ebbda4696f9eaa8bf0801e

          SHA512

          4e1ab40556261351d02d5e210a350905567594046f7d17fbe29053741d16d57b5fcf4b87e66245ee17cd08670d0ae16322c0427aaac3e5d54568e87fb652893f