Analysis

  • max time kernel
    897s
  • max time network
    898s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    06/10/2026, 04:32

General

  • Target
    TikTok_You-4.4-(46.8.3).apk
  • Size 351.1MB
  • Sample261006-e53mjassfv
  • SHA256 c9da98aa3cfd25806cd08a456ca39bc2ffb4b8d3efb129de7cf2c49795fedb17
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.zhiliaoapp.musically
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4986
  • com.zhiliaoapp.musically:jobInfoSchedulerService
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5423

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core-oj.jar

        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 5.3MB
        • SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Cookies-journal

        • Path /data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies-journal
        • Size 512B
        • SHA256 f915a6d2d8dcf00325156d2f23bbb3b9aad92a11ab35c290b8387fce44c3cd4b
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /data/data/com.zhiliaoapp.musically/cache/awemeCache/journal.tmp
        • Size 40B
        • SHA256 a3dfda45cd176a2e2b259c31435ad41fc959cf79de9c74f11d3a7af8e6c203dc
        • MD5 SHA1 SHA512

        base.4986.tmp

        • Path /data/data/com.zhiliaoapp.musically/cache/oat_primary/x86_64/base.4986.tmp
        • Size 892KB
        • SHA256 19ce61329b3360ef125421c68986c2474de6db80990ac2e884c823643a8fc3c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal.tmp

        • Path /data/data/com.zhiliaoapp.musically/cache/tty_http/journal.tmp
        • Size 56KB
        • SHA256 96449221e3b0cbbdffd1551b5b95491266c1530cfc1d3831f6c1e7ad3cbd6ee3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db
        • Size 100KB
        • SHA256 c1048ed73cc3a9a5ad14e39a67df36e81a7f5c9920210ea4549967840e68322e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 512B
        • SHA256 8a67ca615a45248a399674beae3ebc5cf1c0d72dde853d5bfff8810c8bf58a07
        • MD5 SHA1 SHA512

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 8KB
        • SHA256 77f5fdd2810e5ecfa7cce188f7a466af9cd642d11b1f21c481ff79b1e6eeb9b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 8KB
        • SHA256 fe49fc8a1e290e1cb5158987c21f33249b77da554cde6f5af0a5bacdfadc42e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 12KB
        • SHA256 579a2b5c94b5c2cb09c13201ee0f628c6baf1c3949c02ef3dd94c993de85e536
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 12KB
        • SHA256 446cc71b8128eac319cac6ab33fa3e53bda1025445007ff79befdac700512cf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1233@bd_tea_agent.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/1233@bd_tea_agent.db-journal
        • Size 80KB
        • SHA256 cfb3e5210443aa9584c17361d09d9dfc2788ce57f600a12ed16fadd2a1fdc8fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 014f7740327be0ff0eb0cc3305e13637c913ba4257b04642bbefa2b8162e2d89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 24d5abc041a68f495fbea8a9cdae1357c7c7476a801d2e9a60d4c515aab1424d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 70782d52f4316749ffe047e59fe0ed585073e038e3c8ea8cafdc76e1f30d70c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 5541d0f0a2328e3c06568264c6bc2ae9905a75460a311f385d167e557d040080
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5c448eddabfe4fc8181476f4df3754a7903c9f4d52099d8c1b8d31c2e7293e17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 333193fc47575aea168103e478cbafbee09dcbae68529dd69163f08e00b268c5
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 9bf55704ade71fa73bf4f229f6a5ce62685c9d250669416e5d09ed9a47f045e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 4b7fb1a79a2a51c00cafab3e0f264ba4955198cc9c537048b9c176e10a76ddf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 920d65b6595a294d559f1220ce2527149fc3f9273df79c597bace5354b38d9b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 8631b34bb68de91312184692077f2567f74e69ce0886c9240d2b34dc8094131d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 41044682e0100c5d39dee6f1cbb6ba9179a4f3a450f1432adcbf10e01369c3fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 45fbdf948bba8e8da8e0ca6a915700fa65d0f3765fe9af2a3615df59192b3dfe
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 15f197ddb4cfe2e208fef7b738a30daabce5e1928a39c33bf16fd27fdb0d3a4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 db74743e94815223371b723a18ac8eac9b2bc0fbd276c10f5c9255c64226f44b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2e8a19164853f3555c96bc591dccd8a7d8a07c38995b3e9a0fcdc21bb2c37b9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e98c151f9f4a56604fe4f3038a3ee5e30ecc3ec93f86c6f7e77d7285873f8aaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        share.db

        • Path /data/data/com.zhiliaoapp.musically/databases/share.db
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        share.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/share.db-journal
        • Size 512B
        • SHA256 e4e0742334592c9cd6c629e3238eea9c5d47116d29b4f4c0610bc96e15e3e8e9
        • MD5 SHA1 SHA512

        share.db-shm

        • Path /data/data/com.zhiliaoapp.musically/databases/share.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        share.db-wal

        • Path /data/data/com.zhiliaoapp.musically/databases/share.db-wal
        • Size 16KB
        • SHA256 cfb834ffbc9ef991f92e2ac1a4fbef47d4429988ca8d0ce13b207c15e201a3d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        share.db-wal

        • Path /data/data/com.zhiliaoapp.musically/databases/share.db-wal
        • Size 36KB
        • SHA256 5fdbb0328a3c22a725e75d8f406de2ecdd5d75fa2a87b16e88ff767979d551b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        verifystorage.db

        • Path /data/data/com.zhiliaoapp.musically/databases/verifystorage.db
        • Size 24KB
        • SHA256 d19e677e285efa7a5789ac74b15ad8fd2428d8535753bd3251bf3cc2744d1c76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        verifystorage.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal
        • Size 512B
        • SHA256 c04b8eb1109dcf65398b72bbaed2437cc61b08ab4795a8a5fcb294922ae61c6a
        • MD5 SHA1 SHA512

        verifystorage.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal
        • Size 8KB
        • SHA256 b5627890e040b97afe2f8b10dd1962c8656acb345983b44e416d31c9b6d5da57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        verifystorage.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal
        • Size 8KB
        • SHA256 c8ceadb830b1dcfe9ad7b7917e450469e7fa0e66ae497b5e494fbfe024cb10ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        verifystorage.db-journal

        • Path /data/data/com.zhiliaoapp.musically/databases/verifystorage.db-journal
        • Size 16KB
        • SHA256 5075953bb04e048e1317fad6e1e8baeafbde2e2159f35fb851f9a959591cef88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4130_app_init_preload_opt

        • Path /data/data/com.zhiliaoapp.musically/files/ColdBootFilePrefs/4130_app_init_preload_opt
        • Size 4B
        • SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
        • MD5 SHA1 SHA512

        path-elements-v23.txt

        • Path /data/data/com.zhiliaoapp.musically/files/NativeLibDexInstaller/path-elements-v23.txt
        • Size 2KB
        • SHA256 e76bd7e175c87e2d6d4ab484b291c4f6e5d2d3921e77c2486992b23c512e7865
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation191204632316152323tmp

        • Path /data/data/com.zhiliaoapp.musically/files/PersistedInstallation191204632316152323tmp
        • Size 90B
        • SHA256 bb91543732c4f1aa14f465c0ad9cbfc6237bcdd5c6c607990f9c550e94f13e5e
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6837436283753320492tmp

        • Path /data/data/com.zhiliaoapp.musically/files/PersistedInstallation6837436283753320492tmp
        • Size 562B
        • SHA256 5fadf36ee2d711c1f915465b2fa099182abbb074d3d8c993003a325cb65464fa
        • MD5 SHA1 SHA512 TLSH

        machine.json

        • Path /data/data/com.zhiliaoapp.musically/files/machine/machine.json
        • Size 170B
        • SHA256 7504c3974bcc25b7981e862c63e467e7e95de04fd508ca92f0796e9094d9f8fd
        • MD5 SHA1 SHA512 TLSH

        machine.json

        • Path /data/data/com.zhiliaoapp.musically/files/machine/machine.json
        • Size 183B
        • SHA256 a803056b8ba5c1c77203a81d2462a7e470d0320e98021f3db878567cfa0f088a
        • MD5 SHA1 SHA512 TLSH

        machine.json

        • Path /data/data/com.zhiliaoapp.musically/files/machine/machine.json
        • Size 219B
        • SHA256 546a3f4dc320925f20c73155ccf7fbdaf63b8e0acd1fcdc366be7f6e21cb2636
        • MD5 SHA1 SHA512 TLSH

        1233.config

        • Path /data/data/com.zhiliaoapp.musically/files/npth/configs/1233.config
        • Size 38KB
        • SHA256 7f95be103cba48abe13cd519dc089c594eb879cc6a07d666521a02ad38d1db5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2010.config

        • Path /data/data/com.zhiliaoapp.musically/files/npth/configs/2010.config
        • Size 4KB
        • SHA256 0a44d813be8fade28afd834be3f1c9f06b3f6cb51824cd90a17c95d46709e161
        • MD5 SHA1 SHA512 SSDEEP TLSH

        anr_profiler.config

        • Path /data/data/com.zhiliaoapp.musically/files/npth/configs/anr_profiler.config
        • Size 5B
        • SHA256 fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
        • MD5 SHA1 SHA512

        crash_protector.config.tmp

        • Path /data/data/com.zhiliaoapp.musically/files/npth/configs/crash_protector.config.tmp
        • Size 536B
        • SHA256 9751914250fe5447469e807b2b2f921b2ce50863d36e9fa9cef159fbf1fba71d
        • MD5 SHA1 SHA512 TLSH

        app_memory.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/app_memory.inf
        • Size 271B
        • SHA256 72585e2cdc018c59c36672f82104a3f4e2695f52a033d9570616aef8b160db09
        • MD5 SHA1 SHA512 TLSH

        common_params.json

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/common_params.json
        • Size 1KB
        • SHA256 a331b19276e418a9c02542cc0264a19d1a1ab2870d0669e1c65bf9a7baec5601
        • MD5 SHA1 SHA512 TLSH

        dev_memory.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/dev_memory.inf
        • Size 499B
        • SHA256 2902a9579d854ae0897bb5196272a3f4d6619440db2192ec8840f09914cf4a28
        • MD5 SHA1 SHA512 TLSH

        gfxinfo.txt

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/gfxinfo.txt
        • Size 149B
        • SHA256 8c1c58e1418a61ed330338a871328d822e5ef27f592246b49518bd789068b51c
        • MD5 SHA1 SHA512 TLSH

        locale.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/locale.inf
        • Size 125B
        • SHA256 a54f80bc3548eb9dc39d312038e7786593debf282c6a437faeb5af41aa4e5d0f
        • MD5 SHA1 SHA512 TLSH

        scraps.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/scraps.inf
        • Size 253B
        • SHA256 02e512fc47b267c8a3088d97c1f7200f6175b409285c4fe76b5e3df9346cdb5f
        • MD5 SHA1 SHA512 TLSH

        sys_memory.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/crash/1791261380855-4986/sys_memory.inf
        • Size 147B
        • SHA256 12b28cb18e1a1bf4c679f43f20b72d00ce720ca64a9645d1b5d52ac20b6395d9
        • MD5 SHA1 SHA512 TLSH

        1791261366652.aif

        • Path /data/data/com.zhiliaoapp.musically/files/npth/general/1791261366652.aif
        • Size 688B
        • SHA256 e285a6851763e1d762f651be30ce0b05a69b5efa0671c133dd79621c767ef8c1
        • MD5 SHA1 SHA512 TLSH

        rom.inf

        • Path /data/data/com.zhiliaoapp.musically/files/npth/general/rom.inf
        • Size 337B
        • SHA256 4afc03633ee9dfd52b594760118830270caf6a80051d92f3ac6124d9344632b6
        • MD5 SHA1 SHA512 TLSH

        current.aid

        • Path /data/data/com.zhiliaoapp.musically/files/npth/params/current.aid
        • Size 133B
        • SHA256 1ac9cb4bb056a050c75b16075c8d51f7243a16b0ed73145f50f312d097e636ec
        • MD5 SHA1 SHA512 TLSH

        current.chn

        • Path /data/data/com.zhiliaoapp.musically/files/npth/params/current.chn
        • Size 139B
        • SHA256 bcb6514514cb06c30b358166ae733b51042b1351cbd23d3dccc0e3a8802ce020
        • MD5 SHA1 SHA512 TLSH

        current.did

        • Path /data/data/com.zhiliaoapp.musically/files/npth/params/current.did
        • Size 129B
        • SHA256 b07f1e128d9820dd5adbcc91e00001ee9c5e426f8fe1815b15ed182d9ce7e87e
        • MD5 SHA1 SHA512 TLSH

        current.did

        • Path /data/data/com.zhiliaoapp.musically/files/npth/params/current.did
        • Size 148B
        • SHA256 ab4d26c392b01d5d8fa97a7f9ea55729d5ce54adf30a026232f3a8169bda5bf0
        • MD5 SHA1 SHA512 TLSH

        current.ver

        • Path /data/data/com.zhiliaoapp.musically/files/npth/params/current.ver
        • Size 211B
        • SHA256 62ed606a6fb8370a61206ca04d08190fb14e118dc1277ac5ce14177522d59a97
        • MD5 SHA1 SHA512 TLSH

        com_zhiliaoapp_musically.times

        • Path /data/data/com.zhiliaoapp.musically/files/npth/uploadLimits/com_zhiliaoapp_musically.times
        • Size 14B
        • SHA256 81fc73985233ab26a24f497ff219e981b4f4a185654675a5df29369f373ec8e5
        • MD5 SHA1 SHA512

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 2KB
        • SHA256 656612eadc36a1f05d3e75d6a909f1e89b3665055eb4c7964115e715de823e65
        • MD5 SHA1 SHA512 TLSH

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 2KB
        • SHA256 0fcffbab8897cc1bb9c2b77896245d1f92347a52d9f86e4a61debd543f3d58ae
        • MD5 SHA1 SHA512 TLSH

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 2KB
        • SHA256 8ebfd86de3e8c7a3c89085742cbfc21af2a290a9506727188767bd6f14ab3758
        • MD5 SHA1 SHA512 TLSH

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 4KB
        • SHA256 4b07dd7a2ba8080aa745cacff6a25333f62958777cd22363a67fe12f1362c6a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 2KB
        • SHA256 287561371aebb8714c5a0193ca48927a903816a7172b7a85c03255e671473c1e
        • MD5 SHA1 SHA512 TLSH

        session_2026-10-06_05-36-26_pid4986.log

        • Path /data/data/com.zhiliaoapp.musically/files/tiktokyoulogs/session_2026-10-06_05-36-26_pid4986.log
        • Size 2KB
        • SHA256 1583b9cab5610d02e875544f38579366353342272e19177127977c3c41c92efa
        • MD5 SHA1 SHA512 TLSH

        classes.dex

        • Path /data/data/com.zhiliaoapp.musically/no_backup/tty_dynamic/bundled.tmp/classes.dex
        • Size 893KB
        • SHA256 74988587db8a1bb7f535388cee6f2ca78dac10ae963aa5abe423ea133442fa3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CLIENT_EXPERIMENT_CACHE_TAG.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml
        • Size 273B
        • SHA256 2733b293a3f33d013534fc17371ba0e44d117abc0c2283d7dd7e2f618a1e221a
        • MD5 SHA1 SHA512 TLSH

        CLIENT_EXPERIMENT_CACHE_TAG.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml
        • Size 574B
        • SHA256 5adb5be4a3ba1a9f362869bcbe980b25f458f78fd3e11cfbd6b5f93b931acfc5
        • MD5 SHA1 SHA512 TLSH

        CLIENT_EXPERIMENT_CACHE_TAG.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml
        • Size 671B
        • SHA256 1cb3a8654278205ae3e9556cf745bbfa1c0bc4937adfd688f0da23523e0b4bbd
        • MD5 SHA1 SHA512 TLSH

        CLIENT_EXPERIMENT_CACHE_TAG.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml
        • Size 760B
        • SHA256 b5b9a62d5a0def1a8d66e495bc8677ce309e3d773d477435d6413e1b24529a0a
        • MD5 SHA1 SHA512 TLSH

        CLIENT_EXPERIMENT_CACHE_TAG.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml
        • Size 5KB
        • SHA256 6c92b8e8774133c198560564f11ff7d5f695f1aea12936a3e0fa85f87b2e4b52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aweme-app.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/aweme-app.xml
        • Size 273B
        • SHA256 a31447914c93c0eb27a5a95b2700e13da98063a48145bfe607853e0fec4bc309
        • MD5 SHA1 SHA512 TLSH

        com.google.android.gms.measurement.prefs.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 228B
        • SHA256 0adae7f83b8524e975556a156376cebb6a92613b2eb66359116fb931edb6347a
        • MD5 SHA1 SHA512 TLSH

        key_language_sp_key.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/key_language_sp_key.xml
        • Size 116B
        • SHA256 64b63ed9c08e7bc28931f6ebcaa1bb87da32a99089869a7ccf3b45408e893fb9
        • MD5 SHA1 SHA512 TLSH

        prev_data_sp.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/prev_data_sp.xml
        • Size 125B
        • SHA256 4ed306c84ec0f5f3a233b04dfffaa17b546b2aa3033f6163ad964bf9deb1f164
        • MD5 SHA1 SHA512 TLSH

        safe_mode_exception_repo.xml

        • Path /data/data/com.zhiliaoapp.musically/shared_prefs/safe_mode_exception_repo.xml
        • Size 4KB
        • SHA256 7f82f973f1173872c39e0985b5ed93a9924deb294fc59e19cf8770e0ae256406
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.1XehpX.tmp

        • Path /data/misc/profiles/cur/0/com.zhiliaoapp.musically/primary.prof.1XehpX.tmp
        • Size 27KB
        • SHA256 f159b59028d48366f46aa3c156d152d57d32ffced70501b1d6897ca48ff55113
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.UgmkOR.tmp

        • Path /data/misc/profiles/cur/0/com.zhiliaoapp.musically/primary.prof.UgmkOR.tmp
        • Size 27KB
        • SHA256 dff8eab965c44ed04740f64b713733f8f16e32adcaea369d2d2b6034ab62f0ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.czHr55.tmp

        • Path /data/misc/profiles/cur/0/com.zhiliaoapp.musically/primary.prof.czHr55.tmp
        • Size 27KB
        • SHA256 2d3b018298bafa44e7c67e9fdb44335291e23eec32eba4194569b3c09b5bc116
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.rAUcsl.tmp

        • Path /data/misc/profiles/cur/0/com.zhiliaoapp.musically/primary.prof.rAUcsl.tmp
        • Size 27KB
        • SHA256 259d78e867f24dae6494795d8b0b85010ac74d523c9f74374e2e280bf3498560
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Z22vmHnhtFf9lZbUsrvjE15ff5I.5685165686201213209.tmp

        • Path /storage/emulated/0/Android/data/com.zhiliaoapp.musically/cache/picture/fresco_cache/v2.ols100.1/13/Z22vmHnhtFf9lZbUsrvjE15ff5I.5685165686201213209.tmp
        • Size 61KB
        • SHA256 2a39eb173ea1f7b38bd2c55bde4a7fbe0dcdd6579188f0dcd3cb094cc4b930ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Z22vmHnhtFf9lZbUsrvjE15ff5I.cnt

        • Path /storage/emulated/0/Android/data/com.zhiliaoapp.musically/cache/picture/image_config/v2.ols100.1-config/13/Z22vmHnhtFf9lZbUsrvjE15ff5I.cnt
        • Size 354B
        • SHA256 898016069c30173b72716a9d1eac4090fc8ea8fdd4f4ef3de7f1cac3d9023904
        • MD5 SHA1 SHA512 TLSH

        anon_inode:[eventfd]

        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512

        socket:[57903]

        • Path socket:[57903]
        • Size 59B
        • SHA256 d11c538db1d5e387dfbc0bd2fb2e628d2a5410320da3637bf447e616aae94588
        • MD5 SHA1 SHA512 TLSH

        socket:[58145]

        • Path socket:[58145]
        • Size 46B
        • SHA256 2cc9af9a78cbb193d514d3efad3a2aa4baf06f25123ac05380a03380272a5d27
        • MD5 SHA1 SHA512

        socket:[60993]

        • Path socket:[60993]
        • Size 48B
        • SHA256 ade50dc668f7f9bb9325e7ed2bbdda9bf7bd3d2873ca3a7904e5e854cae3b5fd
        • MD5 SHA1 SHA512

        socket:[61145]

        • Path socket:[61145]
        • Size 59B
        • SHA256 3e2d2d300624609b280bc770f96dddf82893e33e71a3f42db691b47dc99719d9
        • MD5 SHA1 SHA512 TLSH

        socket:[63041]

        • Path socket:[63041]
        • Size 58B
        • SHA256 ddc1336c856b256dfbec500f434bf5cdd15f974b6504aeaa605e303b6b7c59f8
        • MD5 SHA1 SHA512 TLSH