Analysis
-
max time kernel
1075248s -
max time network
41s -
platform
android_x64 -
resource
android-x64 -
submitted
24-06-2021 22:10
Static task
static1
Behavioral task
behavioral1
Sample
AdGuard-Premium-v3.6.apk
Resource
android-x64
General
-
Target
AdGuard-Premium-v3.6.apk
-
Size
34.2MB
-
MD5
6f9536e4c3d9b0062676378d10885f6b
-
SHA1
4d3115b770b5db98cd9ff7a1f27c57e1350329c9
-
SHA256
c6e9fafd9a7f3283b2ac59a14a014561e9a7d50975f8a0ab888f701d8c04d4c1
-
SHA512
79a2668054f7cadebd80f13c35f0828508da5da1eaf434c94476254283256b9ab63140122cbb6ef51615db2bdcc9c706b3db76bbdc22814254ac144e65635ff6
Malware Config
Signatures
-
Uses reflection 44 IoCs
Processes:
com.adguard.androiddescription pid process Invokes method com.adguard.android.model.filters.a.setEnabled 3642 com.adguard.android Invokes method com.adguard.android.model.filters.a.setFilterId 3642 com.adguard.android Invokes method com.adguard.android.model.filters.a.setLastTimeDownloaded 3642 com.adguard.android Invokes method com.adguard.android.model.filters.a.setName 3642 com.adguard.android Invokes method com.adguard.android.model.filters.a.setSubscriptionUrl 3642 com.adguard.android Invokes method com.adguard.android.model.filters.b.setRulesCount 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.A 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getCount 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getEnabled 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.b 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.c 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.d 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.e 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.f 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.g 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.h 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.i 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.j 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.k 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.l 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.m 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.n 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.o 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.p 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.q 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.r 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.s 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.t 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.u 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.v 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.w 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getCount 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getEnabled 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.x 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getCount 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getEnabled 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.y 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getCount 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getEnabled 3642 com.adguard.android Acesses field com.adguard.android.service.EventsServiceImpl$a.z 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getCount 3642 com.adguard.android Invokes method com.adguard.android.service.EventsServiceImpl$ModuleStatus.getEnabled 3642 com.adguard.android Acesses field com.adguard.android.model.UnknownCaExceptions.domains 3642 com.adguard.android Invokes method com.adguard.android.ui.MainActivity.onProtectionStatusChanged 3642 com.adguard.android
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run/6949f74e-9b84-441d-ee7a-bb6d1e8eb0f0.envelopeMD5
2d4b6b7462cce03f13514da79ce764c0
SHA1fc43695ac441c22cffa95e7f9e2affbe2f6edd07
SHA2561acc44e0fbeaf47043d16c4838a4d9cc46da4c26c766776e1708cac1e5dab9ac
SHA512a25c15ca7720f18fd609a8d94961112ef6eaf00591ca196fa49be226258c605f8325a76f12507b2b071a48b127a561c7cb60fdfab67a2f42b811aa18c9d7eb00
-
/data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run/e843c016-776a-4d4e-cf19-95194fcd5eb7.envelopeMD5
e7c7610e63ec7493d3d3664d777b8a64
SHA12324b35c1629430b676e63a14d5dd2cfdfb2461a
SHA256c0c22b85f50ba72876b9d0ce031cced19634c2f5123b9f48ddc4e197fca1393d
SHA512db0bd7866cebecae29daed685904642f765b3be5bf51e034c07627de064417d6ee8a58da0c3d93c8a73c4c0b8bb11ef65bce660d6591226a9a2febe3cf0b50e6
-
/data/data/com.adguard.android/cache/sentry/.sentry-native/last_crash
-
/data/user/0/com.adguard.android/cache/e.idMD5
9af5267159847df1a77055d9ba08681e
SHA1bb7c2aa3b7df1558310393d5c5e788e06fd7b8e7
SHA25630c4cdd62a6da6b634b3ce788a6e7f1d0dc9466da98fcf4de07e427e4c44a1f2
SHA51214451fb4409d0c0c12c1a33304746a030c8872945036b5f4dcc9b16d3f8781ece3bd9e849f1da745c8b088370b2a65a5f6f1a434ec0d5a1ae6e58ac26042a068
-
/data/user/0/com.adguard.android/databases/adguard.dbMD5
e2c7242e5fc4c16505cc341793a418fe
SHA145ba42de2ee9ffc7d8271c3b853e3bb006e21239
SHA2563d5f473bc5915d648b960bc9eec88a96ac1aa158c84f55da0394577de7dc05b2
SHA512166270a381f27422c0068433dbe4e70935332216f3d4466b0578049bbb819801f08e28cb8482442a3c5ee37614480e27645377ab8e74897de223b0c5c3507199
-
/data/user/0/com.adguard.android/databases/adguard.db-journalMD5
4141833d43ecf12061dff865f4dca360
SHA157da200c2d3aa143ebc2d7f9a3a06498ab3c4799
SHA2562a6e909c027b2e6aa8644a8cfa59c50ecbad772ba296331e5b92a6c9122c0e8a
SHA5127494271e0f4fa8c90baa1cc84121888b346d81c6867fa9f648fe287390c31eebe3620c400c26d4c533ee486fcc3d4ba4b86dcbcd9b71dff50f11d96ba4b6d276
-
/data/user/0/com.adguard.android/databases/androidx.work.workdbMD5
f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-journalMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-shmMD5
a4b145ca2f7d214a6f48064c8236ac89
SHA1165a834cfe4bf0b5302e1ae6b2e5264b2a07b9b6
SHA25615d406a4259a21310f835df5127a78e6cccb4913e813be525def77a8d00c229c
SHA5120d4355b34dfcf8fd65d02ddf48d708d135fe53f41dc5aed6395d7076a8e4528238e75718fdd35e68da9e1130c49782f626e857632a52d0f4d85d6e062ed36d13
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-walMD5
41445e800dd8ca33ed1dfb8d27a9b01c
SHA13221d28ccbda16e0c8f305f31c10c664e3407e23
SHA256a7bdfd8816108a0dc36b2439a763e54a20a16875974874595d4c933ead1a4e29
SHA512e77c89798d25cc8db144979a43273b489c77d49125c73f95a14d88e0f9730a17927ce161c482ec39145fe59dc4bd053899f75f6031f28f00c19683e0beae86b0
-
/data/user/0/com.adguard.android/files/adguard-core/gm.dbMD5
ec271de5219708f5ae8ae37b6a6d307f
SHA19823eeb9c5117ff59ffd1bf72734ab9631bdf173
SHA2568a480efe143074faae0be5ceeeff877e262982b0ad9cb08d7bae0963b87f63e0
SHA512c9b7df2e2a8fd050d0129224bd4b347f82890aea56e6748abade421bfe0b952c368e0d85710cf23658b2149cee512b80822339fcfae93de4283eff246f760fd1
-
/data/user/0/com.adguard.android/files/adguard-core/gm.db-journalMD5
5684dacc53dfa49638830717e5a106c8
SHA1b5aba952188fa2a137dc460be4e1f7dd5a160195
SHA256a618eb6e6c822c23b400e92a11700432d5147cca9bafcb378cbc368fae4719bc
SHA512c39a40b75aed0460796318a8d6faa80703d804f8ecb8ffa0ba983bc021e2b18d01b9091e817a5e888e686b09ad88d807a8752b42f6c7cdb1e41152a86ab613e9
-
/data/user/0/com.adguard.android/files/adguard-core/versionMD5
c4ca4238a0b923820dcc509a6f75849b
SHA1356a192b7913b04c54574d18c28d46e6395428ab
SHA2566b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA5124dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
-
/data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.metaMD5
770f677efc53a02cdb169475d5e62b0d
SHA164b7ac1588800bc15730296c38db8645afdad788
SHA25616830b9e5572a9e7d6c40faea7fec5fb141d3da8bb594e0a58b51ee7d18a76c5
SHA51206f49e99a55ccf0d9c2d484194db28086d709daf9ad1eda4526bccf41918aa12dafa63283d51269485c149b208f50da7fbe1ce2642edbcd1443180b4d61cab3d
-
/data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.sourceMD5
274616f2a7c83e5da3dea6b29cf40fdf
SHA13f50dc0f27a482e434e7fac25bd4a29d31362435
SHA2567fab80292baa7ce26e179378786bd01d9887785dfd9ff7c20ae4b67fdd0d7f6d
SHA512462bc45f3956ef4998bc6fb979217d37572047c509267316e7894ca67acbcd3e32948da883c8fc08b455f5ca051b85822a78e28206aa4b4108e41a5c7b012c3d
-
/data/user/0/com.adguard.android/files/userscripts/Disable AMP.metaMD5
53d32038f71686e3e153d066b9b4365a
SHA1f1f57703519678e338ec8571bc7901462df62bd3
SHA256d5a09715ea16fdae4195aedbe7687117ce8cf3e8fe668701e6d543f5b74ccdc8
SHA51231aad6afcc41822c5713ffae67f8b06d3a7b661c784ac04301adb800eccd8328f4b7239bf6aab72a5447b42f5a3316029411ee092dba7ee080573b960e319cfb
-
/data/user/0/com.adguard.android/files/userscripts/Disable AMP.sourceMD5
737775aaa7d13a389c27c4fb9d51689f
SHA1eeb6fcbf81f3a0b76edc4b63db10c004421ceaed
SHA2561969ab9a0badce06d282518b8c25f1a3e1e3d77cdaff0a631e04b2b886bf066c
SHA512af07f1f135c660357db3255deaa68458d4262837a7459566d0452a383a881cb4f42cf870ca1bf2ac313aae4d5f00a6a8f7760bec05c279153d54cd658aa07ef4
-
/data/user/0/com.adguard.android/shared_prefs/adguard_events.xmlMD5
f916374e2bc8d2a75b2050b9b99ba4be
SHA19938915486462212c011bb84fee777fcd6360ff0
SHA25645a621d603fa9e7d83d93937701641c0ad49848dd6e4cd84a32d017349057cd1
SHA512aa71f4cf34aec3822211944ca7a2c6e0163458c88ecd4c71f89a237b971737a5b4a0bc576bfa018508b870e86f26b22971115e95118774f4c91e156782703cfd
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
c2bf7b61386f0285c4c5304fd3b01960
SHA17ebee5304cb7f7bb6af3472892f1aacaffc54654
SHA25669a5b95f884cea06fdf14a6a45e0c86f24359b417a3b081e9e95a7a4082e15b9
SHA5122d2f64693ab0a7e4ffd1b96f02ac66a1e019868b20680d36eca2a9f12a9cb2a9b695f1e23e17374766cc02b5e97caabb8b5ad98bc7ed753e0a7898a10e5e0951
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
5b9e2d83c9070d490dc7787847007e43
SHA1aad33e381409c240017960220474d16a0d0942cb
SHA2566fcf1d35d1ad6208402e8174067bbcfc5e1f8251482c2eaaa281a254ccb9a188
SHA5123c711779b8a7ca07eea66aee662be6cc5d24b39552c9b56b110185684a821926575b958133d6b8bc041e7a576d059be3a8e8cf07a27e748c741b745d545de0f4
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
5ab954a915cc8456300910b7f722ac2f
SHA1bc1cab08b41c9c738297daaba8ff1ec81778df5d
SHA25678f3f9851d3b83b6ea5cd02654b614052c8765cae39e1e176519c0b815114458
SHA512a00ff7d105d1fdce9ec7422e33f67448b4cf79ed449da7414ed89c63fa52b9a04f1c3b873923e71247f3fb95d650f32a96e244fb0c2261941cf7ad203e281fc0
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
a6be746cbc13263202de45225104687b
SHA192ada566bab976b59234bfcaac75ae41e5b4e553
SHA2565d612bdb0f506746a01c8b7ad2e246789116e9ce32a3dd519007acdff35357e7
SHA512833e0cc3e86616fd524863f1428774a7175c8c275d571e384116ab86fab7430233ddc6fedda48faa0c20029d68eb7743d34b2f72215a0cafe396b253ade92d9a
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
0979581cb6da986e18f740c9bb8e7187
SHA1312b60d9f58b2d05f4cfce0ce3b1c77b925eda3d
SHA25642410259fd9b18cbf3f48a970995c821f8cd763dc47563400b4653da18c2825d
SHA5128f36e5989ba2e4bacd7af21e414826c3a11abb552b9a705a9e910cb730070ba6867c7649242fca22868e7818cdf41e72cec6a6cc9ee5094d752eb507fabcba98
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
1a89cf205a3e60782d4d8050435bf5eb
SHA17a295710627eda5182b8979e1eb3bdb99505d4c9
SHA2567d7af5530a96e97a23206164474452b7d531399c88f9332def9fa505d6f103fc
SHA5125177482c6e9ae8d97773f73c48c91fe2c38b00f56a4f3b8ca33448065278ba25416ccb2883f74945eebe32913e83e8d2d0ff9820a43af65725b7d647f36a96e1
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
8a90ee6f1f168450c9e9ef2c97fb7e23
SHA190937cee123bbc5f69b2dc09a68567e9973f20cb
SHA25616e8d16ad746385bbb9aad18fcba3d3cb30e3e39f803f0cfa9f759dd0fd45567
SHA512eaa1b9ffa66da44592f2fe8a0fe70ba63d39f6344a60b97c57bab83c27055ac2b31d0604a377afcb4fd57185862b4382c15e1e8fe2695e8ee3eadc0bb1f46308
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
c8d1dd42478a9653f4d2a1c10d7b4e12
SHA176c6ffa4fb0badee45cf91af324a4509d4d5197c
SHA256ca5e576be93bbe3291defb1f43b0a0e8d5a7a04a1434fe3818ef748c4e0abbc6
SHA512710cfd7ba08bab204b240aef96f63cc940bbf063ce546903731d0c6eaaad8c6195a3a5d877c487b982b7347f31040d8e0224312dbfa29ced2a6dc9415ceaf694
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
fe4ac6dd00fed7ca569e2680c24f350e
SHA14718cc045c42e887977a7588cc575e067d92916f
SHA25686c1ce7349c1fa9dddf39501bf046ed8ee3087bc5d4ded99795eb188e78a6db6
SHA51256e74b4d14c43a5cf800623512398ad19f3532ed2a5862ca48cb6a3e20d145c8b75d898a32444f19bf8cc1c12c63a71a39d134c5e26b3f11b3e3d3dbae1c26f7
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
a1601645ca79dddf82dcfba8b9581707
SHA1793b0564ff144575c01c79952d3f53293326f8dd
SHA2567d872c3b2429dbeae7b67eb0516d7f234d54e0262a9d558d82a0f2f05bcbaa36
SHA51264d89cc1182d72376c14e573d880ae6802731e2199dcf2f1045ad6bef70034855aa05b16d0dcc9190ca75b1912d6107845e0be4c4ee6b2f6355e3c94115f1a24
-
/data/user/0/com.adguard.android/shared_prefs/material_showcaseview_prefs.xmlMD5
a828bc10adc2a4c56ca9622a6f569db3
SHA1c61a31f901ae639b6ba6f498029920cc2738d064
SHA25629b8fed0a9bb03f0ef3d6c345ff8e37abc9d4294ad19abd81218fa18148fac27
SHA51200ecfc0d74c5738fe7b513fb1abebd24e32baac4f3a672ea7955b30996cbef2d2f8630f17415014859f2084dc1f9cb0b47ade14baf4186466e9e9a0611a7eda6
-
/data/user/0/com.adguard.android/shared_prefs/material_showcaseview_prefs.xmlMD5
3758308e9a52034f7ae39a348e24edb9
SHA108d67ce6217aafaf0267042c659c75d7b1238229
SHA2566e8acfce000b922c1192e93507c465e17b2b415cc691cd5ec9f42302261117b2
SHA512464392bf99fe31e796399ccbaff1da5d0c7acc83a8c876a8f7596d219764bf29568cbebfe2d6958ac9992cee3ef4d4c17aeeac3a7b03d52560d596077e7f12f2
-
/storage/emulated/0/Android/data/com.adguard.android/cache/battery.datMD5
5c14b45b0071d58b8e38a8eaff54aaf6
SHA160b43d96a3f07ed42b1a49c22e1fc5ab67e716ef
SHA256d8207ca86f0c8dc85d9ab999815a1fdcc944e9a38bc2667a1beeec4819a2a5c8
SHA5128750a79fb6bd3d71c5687135fa92bda5e569b89f28c45138ca93e4edf399d59e36b8374bd99de357a367c4874d5d3e0bc325a8d383c571b4f55428c57896a0ea
-
/storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.logMD5
a81f2e17af047d6aae045833953b7ae1
SHA172f101d8ccd37c45b09f9984ed28f69b90190242
SHA2564cf098387580967f485f3d14229969dac9256b7b10faff10a650a6928c5884d5
SHA5128c2389daf45a2d6d8deb1d5024089905a9d0758399be060787b3a17d0a54f8a8892d87ed5eeae5d2a3c4805ea23f7ff3629eab6448736ab1854e6d4661f8fdb5