Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    943097s
  • max time network
    89s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    09/07/2023, 01:13 UTC

General

  • Target

    HedystiaAuth-v1.3.apk

  • Size

    4.3MB

  • MD5

    6f1041e219a686f10d7cb98cdb8d8c0e

  • SHA1

    38820d234edf980e21010ef6ae904d5afb76371a

  • SHA256

    91f8330439f577b0b2cca8d91fa47bbd0aac900e78adfd46b4284eb1ba07ad85

  • SHA512

    860f4946efb122e835dc6c51ba506eca18b000c9eb0502b9a8b948bf87c25e0ee998b72231b13490c153b29696d4f9de6e1b801f9fc07b0ebaf507a9734e7ac2

  • SSDEEP

    98304:iMfjkXbPNWu3GTdYEtHB01nzoGNTK44pi8EwH4EIOgLCrXzx:iMfjObPNWu3WYgK1zxTj4gC4Ix

Score
1/10

Malware Config

Signatures

Processes

  • com.hedystia.authenticator
    1⤵
      PID:4391

    Network

    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      172.217.23.206
    • flag-us
      DNS
      infinitedata-pa.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      infinitedata-pa.googleapis.com
      IN A
      Response
      infinitedata-pa.googleapis.com
      IN A
      142.250.179.138
      infinitedata-pa.googleapis.com
      IN A
      142.250.179.202
      infinitedata-pa.googleapis.com
      IN A
      142.251.36.10
      infinitedata-pa.googleapis.com
      IN A
      142.251.39.106
      infinitedata-pa.googleapis.com
      IN A
      172.217.23.202
      infinitedata-pa.googleapis.com
      IN A
      142.251.36.42
      infinitedata-pa.googleapis.com
      IN A
      142.250.179.170
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
    • flag-us
      DNS
      auth.hedystia.com
      Remote address:
      1.1.1.1:53
      Request
      auth.hedystia.com
      IN A
      Response
      auth.hedystia.com
      IN CNAME
      cname.vercel-dns.com
      cname.vercel-dns.com
      IN A
      76.76.21.241
      cname.vercel-dns.com
      IN A
      76.76.21.9
    • flag-us
      DNS
      cdn.discordapp.com
      Remote address:
      1.1.1.1:53
      Request
      cdn.discordapp.com
      IN A
      Response
      cdn.discordapp.com
      IN A
      162.159.133.233
      cdn.discordapp.com
      IN A
      162.159.135.233
      cdn.discordapp.com
      IN A
      162.159.134.233
      cdn.discordapp.com
      IN A
      162.159.129.233
      cdn.discordapp.com
      IN A
      162.159.130.233
    • 172.217.23.206:443
      android.apis.google.com
      tls
      12.5kB
      14.0kB
      42
      43
    • 172.217.23.206:443
      android.apis.google.com
      tls
      5.9kB
      9.7kB
      25
      25
    • 76.76.21.241:443
      auth.hedystia.com
      tls
      2.6kB
      9.4kB
      26
      25
    • 162.159.133.233:443
      cdn.discordapp.com
      tls
      2.0kB
      16.5kB
      17
      14
    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      172.217.23.206

    • 224.0.0.251:5353
      3.3kB
      10
    • 1.1.1.1:53
      infinitedata-pa.googleapis.com
      dns
      76 B
      188 B
      1
      1

      DNS Request

      infinitedata-pa.googleapis.com

      DNS Response

      142.250.179.138
      142.250.179.202
      142.251.36.10
      142.251.39.106
      172.217.23.202
      142.251.36.42
      142.250.179.170

    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      140 B
      2

      DNS Request

      ssl.google-analytics.com

      DNS Request

      ssl.google-analytics.com

    • 1.1.1.1:53
      auth.hedystia.com
      dns
      63 B
      126 B
      1
      1

      DNS Request

      auth.hedystia.com

      DNS Response

      76.76.21.241
      76.76.21.9

    • 1.1.1.1:53
      cdn.discordapp.com
      dns
      64 B
      144 B
      1
      1

      DNS Request

      cdn.discordapp.com

      DNS Response

      162.159.133.233
      162.159.135.233
      162.159.134.233
      162.159.129.233
      162.159.130.233

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/Cookies

      Filesize

      88KB

      MD5

      77eec4c47acdca1a258d78fc4d6ec7f7

      SHA1

      05e33eede6e0a19aee06cd0ed0406771879f44c5

      SHA256

      50c2927aa7c1ed6927ca491d25146b643f3211ca287e4625b0a3f489c849bed8

      SHA512

      423ed2fd9cc9c947904e82c3cf8fe76384af4ee82f3c760b1802752b63bcda6329507d4a446c81f10cfea77bed67ffe7f452009bc7328b9a8ef1804bd501fad1

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/Cookies-journal

      Filesize

      1KB

      MD5

      58ca43eeb24d9626b643651b97e03ccf

      SHA1

      0138e800ade2f083451e4bcd5d70666fa4a34ec8

      SHA256

      864de345a58cf1ad2614e51a3aabffaf7479b4385d423597c441d47d97efe2a1

      SHA512

      9dea348b40a64952a2b75e2f96f5d3f145d0dd75dcacffcca9659387fb5f3ee02ac777ed4e5f7ff3653cd28bc966d76913f8e83f9c9d0ea3879d7d4988ac7c60

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      3cbd46736c4480159f4bdd197a3f6c60

      SHA1

      1a337c369dc879eef79143280385967f5074046b

      SHA256

      3b3e8c9e013ce9868e7a508295223a28c2ee6e00275b1b9278fc606c34cff7d1

      SHA512

      5594c23d0e5eea81928267b897442753429c0dabb6b164a16892de3270eadab00cf9059601683dd95e01431f9b6846a1a3e50b5620483d392c355cff004d4043

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/Web Data

      Filesize

      120KB

      MD5

      a48cd9324b1f8754b07f00d863b840f3

      SHA1

      11c6614775b35a58f440971dfc87c8aaac6d6173

      SHA256

      8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

      SHA512

      35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

    • /data/user/0/com.hedystia.authenticator/app_webview/Default/Web Data-journal

      Filesize

      2KB

      MD5

      69f7eeb0d6d8f85e349a660642242592

      SHA1

      58cca4d6cbebff8d87c3756179f2ce8a49b025a9

      SHA256

      71567fe9abfa11573f0abbd7d31adf1ff9abf2e9a1ec49567b48f5dd3d4d9525

      SHA512

      e1eab96c33e0b6039ade3595793ecfe630d6a295a2ae4678ae0f1ceae7e08cc30d9e7ec645dc70848dc8aa19c3667ba16c76c97b039b40944023e4fb7f485d88

    • /data/user/0/com.hedystia.authenticator/app_webview/webview_data.lock

      Filesize

      32B

      MD5

      33f26074169b3dbfd4d09404956b4b39

      SHA1

      01af6a4d4aba05b6abf9077f5d50d28e0838b8b2

      SHA256

      a4fb3899be8e1847720d263cfd3426ae89a59f628e8c059886fbe2b96fd7c624

      SHA512

      bcfaed2f6100fdd0e34132a277f88836b438301ff2774d2ccb5e994bc6b2dc403a7d91df312c5445e153a4cd73e2b8a45472443d1e1a1951b205e663eee4ac46

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      69de37ba5b39bbf1dd13385ae25bc562

      SHA1

      9e67598bdcf4ef76671c69927f9e2d0cc00a80b5

      SHA256

      66cce57bb27a2868587ed30d41b6880f62a85b6c2f1232e7e1e0d89372523776

      SHA512

      4278d6141a1ed9f5810f903cc62b7a08a21a6e2a15fe37e86a213f422e1362158dc46d57ad2603edbd21e3488950fe5cd432b23e0b6efa86c59bfc59f69c6dba

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/5809a05ed7e053c5_0

      Filesize

      8KB

      MD5

      a8f5f65ca160a1ca0908db16b4041e0f

      SHA1

      052edb8135775ce48c287fad30027a7e84d6a948

      SHA256

      3f3efaab5700920b0d572bfc2b94f9b9434606fb8376b2a7dfe4392580dd5d59

      SHA512

      4049ded1f9caf788d0d0314ada2428fb754f7d0983d5d38f63f95a5a80a23ace7a303119957aa9c617154d98c4f3708830a3d3e322a2dedc3a53fb87f0ea071c

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/5809a05ed7e053c5_0

      Filesize

      8KB

      MD5

      cadad71157ec4f577b72f2d98eb8a52d

      SHA1

      0d7b7a7a8f7375523d3932eba059d08bdf5c3b42

      SHA256

      93979ab2c560bd0e09f8a5367d6011f6f4cb5b43bb3ec22f2fe03a9d8d13779b

      SHA512

      5db0289d7d6d38e7877403ca21b7b337683736936b6463ee135969bbebc6baf41bbc6ca374eae0d3a732e35e2c6b42f936dc103e86a06acf5d53777bad0d923d

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/862f2ee39822bd96_0

      Filesize

      31KB

      MD5

      9d87538a98d32b90281b7c964f94eb09

      SHA1

      112430bbe17c8c9f70e8337c5ff4f897dccc261d

      SHA256

      02d858e0c0dba9a29c773d5b7a3773d5502352ffc477fcb463f431cc1ccc5b26

      SHA512

      5e7cfd791fd7078e9b2bac237603b22ef83e0c81360d3428cea991a62cfb1ca3b38e0c59b31023212ca6c19f844cdcdb2c1dc3d570e907f6a5b36fe850e39477

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      5a7ed83c0c68f3647b2c0eb27165ccb3

      SHA1

      934946f6e32a310390ee9b3c7c3184111c488d3b

      SHA256

      84d9582a20f85b0c7632fcd0e53e9e98c226dfbc929ca007d065ab1c5b43e40c

      SHA512

      ac12ef86f806cc04c25a843585ee0d56c04d34e603b9d4542db88d45dfcadbf4fb5caa389224934d6d828d08b13cfde6d0eb74ecb6879935f2a5e53f26ebb6ba

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

      Filesize

      96B

      MD5

      3143d4547c6cabe697dabcc2445b8ccc

      SHA1

      b07ed1a8e5a28fa5d13cbec7f7dd1c51056a3aac

      SHA256

      9f3ebe3653bcf2086e06bc5e8dc7b67eaa39d514827ea276a37ca781a879eaef

      SHA512

      3da7370f0912d431455da91da5a7ad5146fd9fb842a8691de41ea1a4666ba518539705ed4962fe233852625eff740b2913ec9f3284990591031d01cbb88fcde7

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/f7011baa7ff3b3d8_0

      Filesize

      270B

      MD5

      8f075a855b314e04d460b3c3da74743a

      SHA1

      d68df971f4034d3818b930118ee25d717ba2475d

      SHA256

      b0489ba225f499387fa991329242c252e576d9921f1467935dc9cfab3bd20494

      SHA512

      5fc66568498f38dcbfd4dcf4c9f30e52cee8dcbef96ca793372ed0acaec188b61980c77902cb3e1ee5df5042124aa41bb2f0ad2faea353dfe8845ee00f59bb03

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/f7011baa7ff3b3d8_0

      Filesize

      13KB

      MD5

      a1ca609bc17ae7b85fc27e16478c9152

      SHA1

      59943bbac1794defc66183e6b9447553b1e450e0

      SHA256

      8e50df777ecde4638f9f8ab733505bc9e425eb208f63f6fc1847b762698c5dfa

      SHA512

      cc7b9f1651999145e07ad6300fff0dae99f77a3849b5b091aacffbc4041cbbc9ff084abfc4f68177072e2d42d5f263fff63e23c250c86c303a0a3d5408aac6b3

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/index-dir/temp-index

      Filesize

      144B

      MD5

      be2e67e33001d120a3568751fa3c51bf

      SHA1

      60e46589225b86f8f964254a4d3c79554011731c

      SHA256

      3770db44ad2437840446b9fdeda8cb804d76f8879f5611602c1257c1a428f57c

      SHA512

      d10771949eade4d9e9b879b2973559acb5605e09cca451c31f47a7bdc0cb0f7d029465f9316c59351b27c274b9503792a27fc012e7fad9338115243e2da3965d

    • /data/user/0/com.hedystia.authenticator/cache/WebView/Default/HTTP Cache/index-dir/temp-index

      Filesize

      240B

      MD5

      a181fcfbbc82e3788271576e0e2a294b

      SHA1

      f264bb7076654efed32dbd4e9a88551bd603333e

      SHA256

      35ee980effa8ad2ba12c761c2af9b93b1ed9fc42b078e3fd96fe0d6dfa9b7f94

      SHA512

      d4dc002d2a7ba80d6ef68b27a50cef38efd0e09c66de2dd258e0597455709244ae947cd03864f7af879a4931021844934d370427964b859d66d9d39411d46ea8

    • /data/user/0/com.hedystia.authenticator/cache/WebView/font_unique_name_table.pb

      Filesize

      57KB

      MD5

      f080fa2a56ab5479d58063e5ea871447

      SHA1

      4b3fd57a98916fa5784305b76ba30af26b5253d9

      SHA256

      0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

      SHA512

      8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

    • /data/user/0/com.hedystia.authenticator/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      97ccd9a2b2063143df56b6937f961ca4

      SHA1

      5e78a91ae5df289ce83443cb7d5589dd3504fb5d

      SHA256

      248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

      SHA512

      86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.