12120d219afe08c3bf52b66fb485a128537d75dd5bd4295930ece498c3462cb6

Analysis

max time kernel
176s
max time network
179s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 13:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ard.apk
Size

12.1MB
MD5

0532d1d1bbc4308e2b8f3741cc4a0660
SHA1

d3becd08dc625622b9fcccb1e2800b0c33c46c52
SHA256

12120d219afe08c3bf52b66fb485a128537d75dd5bd4295930ece498c3462cb6
SHA512

3e0ae9a8ce309bb9a6d913cd2798ed8864843ebc78a316c30daf778635dae73e3f60b6150031625df18c99f9c6cc3154c8c8bb28b17e9dac2f2b81c0cee44808
SSDEEP

196608:XzFGZeMZazwyNNvpUjdAxDbiG6a+zNDp7qI7F1/b+8xe3rwK2RWIr3ao2V8lVdf:XpZUy+Shbf9sN7qI77j7xe3o2VgT

Score

8^/10

discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

de.swr.avp.ard

ioc process

/system/app/Superuser.apk de.swr.avp.ard
/system/xbin/su de.swr.avp.ard
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

de.swr.avp.ard

description ioc process

File opened for read /proc/meminfo de.swr.avp.ard
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

de.swr.avp.ard

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses de.swr.avp.ard
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

de.swr.avp.ard

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone de.swr.avp.ard
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

de.swr.avp.ard

description ioc process

Framework service call android.app.IActivityManager.registerReceiver de.swr.avp.ard
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

de.swr.avp.ard

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo de.swr.avp.ard
Reads information about phone network operator. 1 TTPs
discovery

T1422
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

de.swr.avp.ard

description ioc process

Framework service call android.app.job.IJobScheduler.schedule de.swr.avp.ard
Checks the presence of a debugger
evasion

ioc	process
/system/app/Superuser.apk	de.swr.avp.ard
/system/xbin/su	de.swr.avp.ard

description	ioc	process
File opened for read	/proc/meminfo	de.swr.avp.ard

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	de.swr.avp.ard

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	de.swr.avp.ard

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	de.swr.avp.ard

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	de.swr.avp.ard

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	de.swr.avp.ard

de.swr.avp.ard
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
PID:4372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/2d2f0b515e516e0fa1e1d02109aee638511d0f46fd852e8980d0ae61611d9d01.0.tmp
Filesize
32KB

MD5
73285df35b812d0c87db8abb3c235c43

SHA1
5a601d576c386d4da726b322109b2b7560ed14fb

SHA256
9f4829f362eb01fcde7c2250e401326217d096220a9fa95bedb088221043cab2

SHA512
b73e0ba3849b28f7051c76b645d48bfe301c215b3560341ab4d5dfe0e3d9664da7445b5e3b24cc88374813af9393771d586e365236ae3509fc9ac88869253bb5

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/37002f96701774f3c7e0e30015decd5dde8b03d6078e5cfe44c800725d4557aa.0.tmp
Filesize
58KB

MD5
b79829c64336ebb8c9cc0cf49a03bce8

SHA1
c8294e2e52fc9d7b7f6804898145866d0028f403

SHA256
a953d454a5fe08efa1c7c5faf7cecbfad2e2f12e2e66e2fe4e9b1c93cadcd714

SHA512
2a219b40f4345cb3ffb45b158f1709ad9411d02380678a39d515c5e865cf73e9c80820e837396abb6a0b355e2aee7c6f5dc022b3c254955f7124881c5f7fadee

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/44d0d3ad35e08b03177ae92a5e8f1dd9cfc22d30ca65875d36aff426970473ab.0.tmp
Filesize
65KB

MD5
f111390e31f042598dea623c2cbfb1a4

SHA1
cb2c7b4597c5a8158a4eda0c0e484cdcf0cea8ab

SHA256
4999c340055cc3f8e26dfbb5c0a8b48e68e0dd6a1cab54096aab9c6ff8b6d1c6

SHA512
c4659945957a4948406aa3da69814dffd1edce4b11ba18dffff639d800a827ff00ff7d634082ec2daf708dea0cb57efe91cce48f30ca80d45e528870c2651c66

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/67765f42a4ac808db9c22f6f618d7c396da58fb0e8572b318bcad5404054e49e.0.tmp
Filesize
41KB

MD5
4ad98bf5330d703946640ea6f0c628a0

SHA1
a881c0ce878078e7ef9fc2039bcfa04e09f6347f

SHA256
bfb7903024daefc30c4471fda99482c679653bf2b4422c16d0aff4415ff77532

SHA512
c1f0b309da7fdcf316477815a1aecef1cbbd02ff7b94da057175bc7a52848dbe125e98da02e8e24e1355be2bf8fccf80111817fff70533fd0a30eaa11e80e622

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/6d7aacdd8424a531290621c428a5b306e8e6ab8cc982fd684cc15ad25e8a5908.0.tmp
Filesize
44KB

MD5
cf398c44b7a88fe098837fcfdc6f4563

SHA1
c8969140814c1e73f3a99766d2d3d8642bddc0c2

SHA256
50e822e12a57a9b31d367a98e1a678efaf2379f8e83620a530e7c6006d0d8875

SHA512
fd85c74ebddbc7995ea5e71afb09ef859e431a0137a101c577a3909c1bad664da8ff58ae0bed149529893a287b845f7d084530ccc1affa363ef73444e873aae9

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/7ffd39e18e9d5cf787ee1349de46aaa6d5eb5ea5c453b378574a99218ec776b4.0.tmp
Filesize
57KB

MD5
67089dde752c248077eb58569ec8b869

SHA1
793e91cf50c7ccf0dd800d7ce2f770d9d02fc729

SHA256
45144ac4693fb5d342146a3b1bf3d1a39a230b8799841d91df3b2b9a55736d3f

SHA512
3cf438e32b7621f2937802bf4aab300bf7ed772d5e679f0114ff3c7eb578d51b1953ade437a09fe584ff8afb02726bbee9c7ad08b21aa9c86dbf075cb1210e5f

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/f2bb62f88c24f6df6a47373f3bc3172e91357d3f1164d2da81ff975787d0c8a1.0.tmp
Filesize
31KB

MD5
2e58108c344b3db87a6394af36036a0b

SHA1
9b38f1323ba1ee45daf775e9b4a02b9f128f2de6

SHA256
d6e083dc37dc631fad5c66704a97683ad021fe0311cfe9dfe2d6191e475501f6

SHA512
035413df86b471b82996e0f0b5d843535e8c80df2913ee5ae2ce9c95c1f40a9c9e5091a90aebebb48183781c8b8c7f242d85f176790acaa0389f1dc3722c3fcc

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/journal
Filesize
1KB

MD5
97cb89b37e0419fd6551541f353ff84b

SHA1
7b01d6e7ba45377dc5fcca7bdaa809d0cb339cf1

SHA256
5e8c7a811188ddaa857b4c391adc01714c141882729158ba586063e1806fca43

SHA512
0ba0364f7ec8025d3111575cbcfde6ce1f010efe3f020d8e2e15178404678e5e9b9ff5b2cf6e8da71688ffde977552fe527d7f5076c97c0f32782779ae89f070

Download Submit
/data/data/de.swr.avp.ard/cache/image_manager_disk_cache/journal.tmp
Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/de.swr.avp.ard/cache/okhttp_disk_cache/04a1aac560e50c2f05defde9431cc61b.0.tmp
Filesize
5KB

MD5
748da8388ca2104e019834ce4bf93609

SHA1
b05df132285fd9eb75c4f095883471199d572b7c

SHA256
ee1e60d1b311387ebfb47197e8de0cdb6449c8af7d1eeb694b96ba113ef016b1

SHA512
b7655985e049fc74f07f30906c7004e9f99724385daa96fcc1c37c845c4c41fcdd00f1a3d5692f0d77e18be241aa99c0af8e35720280ccc7314eabfdea710ff3

Download Submit
/data/data/de.swr.avp.ard/cache/okhttp_disk_cache/04a1aac560e50c2f05defde9431cc61b.1.tmp
Filesize
233KB

MD5
e34dd1ae45db4e35c563a896a9ac085d

SHA1
478c327f8655e9a8577fe6e1ac7eb8abe198085c

SHA256
14caecee35b5a2836fa1c5cc82d711ec39d9eb5d98c6f94a000e65d3ff2e9a48

SHA512
b2c034799af1992b08e6e6f0951fb4b48948f66e6db45ca48eaa39e2c35bf2d5155dd839bf6216e4b0080dca15d1f558ee6ea9fdadfcfa74c14aca09d9bff69f

Download Submit
/data/data/de.swr.avp.ard/cache/okhttp_disk_cache/journal
Filesize
126B

MD5
cd0a4459215ebbb305c4add8a70552b2

SHA1
830947bbf9e1b2a94b6e615b44623569076054ac

SHA256
5d54c607bd86bf11b2a1a27d9e4346c05f5ad157797be77a83de8d2eba83a990

SHA512
8aacb197dd48d0da1a7bb53878716ea582d638a75f2ec02e31f9b61823bab8446ad0a4873891bdd7c3180d9c1f4da1434ba258de2d0fbfc94797cb4d179a7860

Download Submit
/data/data/de.swr.avp.ard/cache/okhttp_disk_cache/journal.tmp
Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0
Filesize
28KB

MD5
1af6c51bb228b82b98101745252f0e00

SHA1
b2724d439e817fcb4d9747111854848b08cf279c

SHA256
5b0d78ed05b05927a9be79fd67cdd393ffac17b35bb4997b6533dab19609418d

SHA512
8776ab02b6bb83d628708272e23ca3dbcb6ecabcb9805706d24db0b6469e3c3cc8f663d7500edd8d60cdf970d2e9a4dd32ae93a34ada390abcb59829cbb930bd

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0
Filesize
24KB

MD5
888016b2f52c92594ce079601093e5b3

SHA1
cbd8a740020765e1592dc1b2d97bef720a98701f

SHA256
8687d495307a237b5184a2dacdc969723d6bd1f0853bf8342f6f23fc796f736b

SHA512
374c032c730ca522ad1c293a8e3be35f723aa1952058758c78402a108df731aeca272f23e40eeb64e44f8081134eaa95b2945cadacee9add54eaff46616675ae

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0
Filesize
24KB

MD5
1b58c04f25e0eaa693cc60b6bf5f22e4

SHA1
e681c0409dcd7b16e068da49ba17902a462e2982

SHA256
41568018e5076e49dbbc68570641ccbf4ea1189e476dcf766cbad8546087708d

SHA512
a5e0326b1671c45cb54b6583982424b140bab7fd13edae58a8612600e2fb2397cabafe55f606c8df98597dfd5b880e0ecaf2f2079a946879d37fd56ec1a542c3

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0
Filesize
24KB

MD5
960bd584f49eb282260354c9b768f308

SHA1
4b965b9bc0a2a4b001b1cbfb5ba85448744584eb

SHA256
b42df1e3ff26633b167e7752698fa113411b035e65098b42704bc8afdd37841e

SHA512
e7e8c8c7f3c10617515ac49a3c6f73e2be3ca316d4a9bca8727da4ace5e52e3414e9e7fcc10e727d2d968db66299892d8f6aba201994d08f7f530df0b1aec4b5

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0
Filesize
24KB

MD5
d65409a5a8d7497a2d48164b58cdc025

SHA1
b0f9798c907eec20872569f637ff8346f2ac3a2e

SHA256
11c57f043ae202e0bd1b7f54107a10ca20664b481c18baa8be57e3b22c8e1a12

SHA512
bf84cef195c781367ae5fe297e1b87710e0d853dec19c238c78a34d631b49f01849e595c2b711ff81e50d7c52d85f989fc0034f6654e71be310c01a39258e9e5

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-journal
Filesize
512B

MD5
72e0d7e746a8aa14f3aebbc43fda2f01

SHA1
1f768bb9a60bc63e320adb23a5e9196d3e695b5f

SHA256
a9d1ce8f17e3da78e948cab82588b27b9368285a7a64dd728212da4c72cc77a0

SHA512
9ebbe988a153aa397ecdcab6a03aab3a5ddc7f34c66c0ef6f488217791517db0cd2b7a7ec9d4e7dd9f49683f4196936745dc6a352e1d8556a84166ea0b2971ae

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-wal
Filesize
40KB

MD5
0fe6a218b5a33cb328613b2c89b7a7ee

SHA1
ee83c36bb8a8910b414983d27705bc05260436bc

SHA256
6d6d1ebfa4857a91994fdbf4930b2d0494e3a0c7c88cb51315209177f4c2dfe3

SHA512
2da53278b733502aa57c9086a831d4af5d6152779cae8f6e7bd8c98cb9a13f9c97dde72abb0a043ac22f74ffb1c9048935dbf7602db890b4a1ce092b8a3e994b

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-wal
Filesize
8KB

MD5
909fb0fec9fe56b84e7ad98cebcf0c14

SHA1
5405fbbdaa6214354fb2fa5d34e44e6e9caede86

SHA256
a4a51e4e566013f281ffd18c8c50f2388e030a4eda84f727e4d274e1f3de0f7f

SHA512
191d3bd8f37fda066a4ea860b5de992de31f3aa2a3704b8b6159f1f75c795ac0899a2b74ff2b7d1ad20a2ba44cc96aba55a9829679e127950e1e8de20482f2f2

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-wal
Filesize
8KB

MD5
bb00ba00409555bda9b2a7a0ddc61c21

SHA1
71d22eff618a0347062b81ed940b61271ec23dd8

SHA256
25df3816ee963624f3c82537a64aa8001dbd375e2dc434a9b0414d758a7d0557

SHA512
59ab9a238489636ef2916deaea05417984e1b4e6de50c658383953c05c2db898768dfc839dc3032484f9f45c5f5a31f801774c9db3c9b6a7f874d46eb3214f5c

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-wal
Filesize
4KB

MD5
4f27f9b28e6584f82f374e4903dd109e

SHA1
764906f6b5e290158d3e72e45c9d27d952ad7c34

SHA256
d8e611ba1b0994b6ed9bc5aec8d1b8eee32f3327ee329785e6c87dfb28662981

SHA512
06caa05f0685f34697b396d57354225d3ef7a38d043250037c28c374be124a2550168ccccd87d3da81115f9b5a59e2b9b29364a2e7cecf4013542f6cd76d55fe

Download Submit
/data/data/de.swr.avp.ard/databases/PF60D2F49-A22F-4890-953C-7930A24823A7_NielsenAppSdk_0-wal
Filesize
4KB

MD5
0b30f83965ea8510b3a4b95a92da5277

SHA1
33f9d339a5c6a863b94f42a45b285069596ed464

SHA256
0612d530b8f46b2b808eb0ae05d51bd9f02e6dd282d5db8d601522f3a3fcd568

SHA512
595797eb5b536d298c20cd30f4a80e197381861e0557a12f5c8b76ad5348951c4489053dff087378b8a8408202e9f9d03d31cf39eacc52277484ac380fd913ea

Download Submit
/data/data/de.swr.avp.ard/databases/TrackerDatabase
Filesize
20KB

MD5
04c5fd9b21746cd740181eaef4068aaf

SHA1
08bb1a714b260dc3a62ff5f73721d2ff891f9fce

SHA256
9e1c74f8a05006731576c8a81d3d46930d4d9e1d459ae2ee74a676bfa0d3d438

SHA512
0790b7a2bce07fde2cc09e6a3146e87b65caf593541da06d48833faa3cefae061e47e30a3148af5841b07f0459288f309f9f987a7f360d75b961c0b4297c2a8a

Download Submit
/data/data/de.swr.avp.ard/databases/TrackerDatabase-journal
Filesize
512B

MD5
7ada17d1cce3e149a74d04ee9a5885d3

SHA1
a1270e2520ccfb766d09511c673e2d05c13b5983

SHA256
3c1bf149d35fb34bbdbbcd8b1078ab5e1575c4e24a9fdf91819c8e80d6eb2fc1

SHA512
8a9f7aff95dc20bf3090335309c6118494af944ddc8da0a42732953a23961163ec22870bb3e490f87ecac2339513abb4b50a9149c311f6052880615ff8ed2ad1

Download Submit
/data/data/de.swr.avp.ard/databases/TrackerDatabase-wal
Filesize
32KB

MD5
1030c783d4feae51fc869e7afbdc9a4e

SHA1
dde2192b5b5bcb14386b11d41eb45e91befa16d7

SHA256
7bda4985df8f576a05191e2277e710c2a70f9f87201439ef4f6598a24b4c9130

SHA512
bcffb51c7e37013ba35e127723b350328747491a513ad5ca1750a1408760a0acd2ee5e37ccb39791825b708f7f51f4ba328506ea07d65a786775bb940eeac7a5

Download Submit
/data/data/de.swr.avp.ard/databases/ard_db-journal
Filesize
512B

MD5
208ce4cd9c8a4c9f7806bfeb32f5d35b

SHA1
99585f8c64a8b0fefc1954e39786600d3eb079e9

SHA256
1e94030071eda13b9c18e465f34e7a028e966392c9e86341268b54a6cc144b76

SHA512
7bf4048f26d0281f940a6fb692dadc5da4e5fd1da0b97f2c05a51dbc92236cf7ad345b4ceb8a6825d8a6a264e5dbb2f789c58698e45bf84bc5c7cd98ae514d72

Download Submit
/data/data/de.swr.avp.ard/databases/ard_db-wal
Filesize
16KB

MD5
7fe43cf561caff5027a8e3346804d312

SHA1
05a9fc660380e226f70dc3456ab5cf783525916d

SHA256
9b75e524d43b62bd966f7a5ccfeb44af6e72225007747fb5c35feed919c8b567

SHA512
947daa45669cf42d81c2952f254d6ef83bea973a850d9bdcd55154a7212aed0a78595484845aabd006544273ba0b85bcb9ed150ee470a18d0e6776c983b92cd5

Download Submit
/data/data/de.swr.avp.ard/databases/ard_db-wal
Filesize
177KB

MD5
25f29ae99b3e1d7261200250722baf18

SHA1
2dafa744eab04143fd215cb4612bd8d242f3e9ba

SHA256
f0a3630e2e67e7f5cc3e6da45b0eb5835d1ff64f2a349d674714fe4271733a55

SHA512
2b072d63406505c2076e6543a5bbe489b5b72ebba3143ec45dac6f16523004f8f6a84c587eda7762d642a11876c5f0eddac65302deb614a97ba922d1240d8850

Download Submit
/data/data/de.swr.avp.ard/databases/com.google.android.datatransport.events
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/de.swr.avp.ard/databases/com.google.android.datatransport.events-journal
Filesize
512B

MD5
f163e7502dc0852f829dc5d609eadf62

SHA1
f0ae92b6ab0592f2c974e46f4edfb762f72561ab

SHA256
de2c2fde65b5006399bb20da9724cb1d97d0a31302c97c717ec4145b5c17e131

SHA512
1ea5212bf2a3f8cf80e10dbcf7d76fc18d9caf0b7dc70e9766748d19fc35425cd9cc6d38a5877b05c2f5cf19d7026e53d59537a32f54789a13c8f2cebedfa231

Download Submit
/data/data/de.swr.avp.ard/databases/com.google.android.datatransport.events-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/de.swr.avp.ard/databases/com.google.android.datatransport.events-wal
Filesize
88KB

MD5
15dd61de382c4da1aba576e6b97d038f

SHA1
c91234de617a46b4e2d694d482c5a1e0ff62cba1

SHA256
fb8c521b4e3e86543d3c70eb12427c87ca03e0e2debd3669158ce80afcd64e89

SHA512
91f8e6f092a9e2bf0a7328df7f96d949025130182856ca6ea31c49f2bb2d8be90df9ae113accbcd3aa66e0d849f5416e4fa28f9722d19e2e7e7bfd5d767ecdd0

Download Submit
/data/data/de.swr.avp.ard/databases/exoplayer_internal.db-journal
Filesize
512B

MD5
621f7306942a49679272c362f817db24

SHA1
a2ec8a18c200d383bb1e2b544567d93aa404221c

SHA256
9945ec5cc40e553cf0869c9b366fffaa801675491a966fd2785f1d7a9d1dcf95

SHA512
a847f56c2e5707c0b8c18469d630063c7b4ccdff2e386ab4cf8d15dac3b2f27da26bc0615317f29ea0775780c951a21510c5e6a675d89aebee02cb8e4cf7d2d0

Download Submit
/data/data/de.swr.avp.ard/databases/exoplayer_internal.db-wal
Filesize
88KB

MD5
51c0878169cfaba4bf5ffc132a1bb987

SHA1
54c4bb3ab612d06b2c6ae03694adf49278b85d9c

SHA256
ab24657c7c7b39b83d2ea33f74f3f0eea2193101335efbc127fca5efb0596d2c

SHA512
8160de3b667037fc88f45f148357799e4dc5c45fdf476b6b5f281ed52526b99a7519a296c5e5d2f75e7f31c2705559204f9c20d1723cedae43922b9636eea2b3

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
e1468def8800eaadf02abecfdcab1c87

SHA1
89dffd693ea37de61672a09a6a0d62bbac06ec91

SHA256
6c122279cb6a74eba8ecf6b3ba3ff488b432212c12e5bf5c67609f478b05ebda

SHA512
3f0027c1ff61431eda2428c791dc6527d2ad48df18711a71c274a51b34c63f4a92c9dad9a6c0b4d4febcf523437635c36cd71acdd51061043f10cb626e3950d4

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
86b76b47ea853160321ff1e19bc42f58

SHA1
860a8b6d8514d0984acec0d75cc36872d3bbfe68

SHA256
3332fd7d11ee11f7a4fe5afe379071236b52b98dc967d5cd4cc7e5c3ff66e8ce

SHA512
7a7970a58093a8d1e06895b4baff6f80bc50c91943797a041e1642011797451e806f4b577203eb423972e05a0e9fdc369edc8a46e6be22a9474d848d6de4b0da

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
b174e0349443f2856dd12cfdec723082

SHA1
4541ece2d2b503ce8e6db90ec5e2c69a5b16c698

SHA256
6cd28a618f469b345110d9012d1e9472df4ffacec2af60a4129038b1085279a3

SHA512
9f59083ff944cde526d96528b16b3c694b554c7367a744cf1d9f38339f7dc3b1985039bec4640e8187ee104b3657b3b29cfd14d1f227c1918cd73b21e6465173

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
587643179ae9fbfea1beb07633ceacc8

SHA1
aee359a842118b41e8c01138c93dcc4611675ae7

SHA256
cf0c37afbdef707c9143cad2707b0fcec86fc64155fdbb4ec22e14b75373b7f1

SHA512
5e793411d6636908e4c29b407870f572d0c713b0cfb4afbd4db8873d2b0f9678e53ca876b63a86d7f7c804a8a2d32f9e1f239ab0a011c146152a2e47dd5f0c67

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db
Filesize
16KB

MD5
44693692da738db6eb133cf0e4cde91b

SHA1
e6bda56494c325d8d37ad89552263ae85d9b0550

SHA256
8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

SHA512
b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
ee2230729bd85b99738b50748e04210f

SHA1
86bdbdcc9a86da0552ded12928a385a68796b06c

SHA256
3fdf2278fbff229d9a9089e8df2eccce44ea91dbbe1958a82de2db89b8ac2df9

SHA512
1d398053d2530994252b2379ceb6826eda2770b41a958d2e01d8f063f903b64b495162321cc92e3c6027feb5e2fa9fe769536a36cd2f2b34a2e56f34e3cfcbc6

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
36KB

MD5
884fab997fb64c5e7b5137d8088c295e

SHA1
6e6a0e4dcec8fb614c902e24ae680bec228207ff

SHA256
f7149be69892a25999d6fddd8eda4be013f1185ba91d28addb4f18ea5054e649

SHA512
21cab9c914ac814175afdce49de6773e9f612ebe6215903e9e9b40cedf70eacecca49ec8336284b6107415a6d3e736fabc1f3c6aff6220710e1dd5de525be4e3

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
54833157b70ae420f10650b7d8b257a7

SHA1
b8c55beb04e33acd5532a1c8dcf4a4b233d1ebb8

SHA256
bd5e6b90a00f8ea99bdf2e0067e4adf8a2171b87f73071712be36a850cc60868

SHA512
de2be3aef9b23684ad77cff8102b42acd52715d9670d111174363bafe2788e737bae2fd1c0a0c85c757aad1aedb8be859bf6ea77864b6d63920bfa87a7fcafd5

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
833be481eca0419d44a5f2f82a20ce59

SHA1
ef0d9c5fa4e71b9c05ae9076065ce9410e0e2ba8

SHA256
abcb7ec724381ff6268911556afc7a4726cae77ae231e7226bda3184937a0c56

SHA512
bac4add710e503d68a897455b718b65b537bc0a5e6db907585ceae016f2fa07deedc276b8f93368af5c31786e80314d0f6a48668cb23ba55d4979769b6d23b0d

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
bb60138587827eb70779fa4116c74835

SHA1
98fb8cbea0eb1d17c4cda5da32a6b0a1b8e7e605

SHA256
dcd3a2d3a3253f96087ad89ffb4806919b8f87d8ca50a916b9b2f1228caae48a

SHA512
284688d47ac347d60fb23ff72c27fe42abb011d4c9ca707007801278f1cee7de4185596a1ebd70bd4402cfc2a852d44516e427f43d4ebc15ece5d86829f5d111

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
a04bb3acfb0ee6d1e1565306624f65d0

SHA1
7c9204b0fbc50d4bd4da5159adbc410f0f912a64

SHA256
9330b62fd95c790f2357514e41525ad6abf9290bcae39207813d138fddd56398

SHA512
61ae86c906b7f44f8a24dc42baa382a77c0aabe4acefa76eaf8ff85015698df79917f602fa51d4d44a7264f7099cb49272d0f71c0cf0ef3b81462a134d3123aa

Download Submit
/data/data/de.swr.avp.ard/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
355133fa685224d6e2ae55251fae7451

SHA1
ac6bc8f569ed945efeb91c9e66c1bbcc7c2235a5

SHA256
408f8996e4878ecc65a9eb03dd1137623b0d04eaaff05250e9163c79118e89cb

SHA512
a1562395678cce87659d6152972e75edde343b4952f7201854fe21ee3d339275a525b4fab516521cff4d2c2644ce24bd63cef3b759c5bb804cd018ab12ad9d2c

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/com.crashlytics.settings.json
Filesize
710B

MD5
79f9dc88b90614185c22d78ca50749d9

SHA1
af94f70b75b056038f70c94baf3fb740d3ef1be5

SHA256
9458b0a0fa3a54a123a0d9201715cdd3ab619646161513ef4f576969871e88ae

SHA512
8066ab0328cd4ce59346efb68a5063b62ee8fcaae91ff5641825212ae98eaa9b3fabbbbeb5a488f4c5adc812db5eea51a9d4e07e85983af86e90546916ebbcc4

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/event0000000000
Filesize
2KB

MD5
d67356ad2eca17ae4b0fff80d48fe657

SHA1
d6f1cc482852ab15e946872415f02313d66a6b9d

SHA256
b5f9156c9da259711bee3962ec339b125852586fc732e2acc2f09080d4847614

SHA512
b85d61940f64f304d36824fe769452c62e7671451d3c6a9fd2a91598ea0a7bd4593a5b32c17f8bab8a9b5529f03ac6adece5e2f9995992a07e4863b3bc3e58ad

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/keys
Filesize
19B

MD5
e9176408f8cab0d92dacf7af27d6b988

SHA1
790a0973cd7d014531ececc20f89ea48c8b8793c

SHA256
40f99a95b7ddf70d144b478bee0d3ce54d14701ea47d4b889ae81f9783f4f5cc

SHA512
0fdbbde6e18842af30a90f7ba29aa85d1b6263e5f37ae8959b1940b721bee4d897e8ccd102cf6825060855f95daf66952ee19950241e4e4dd6d0e249228f237b

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/keys
Filesize
39B

MD5
74a08d63fe3a4c7ba03202c23bd4d047

SHA1
dec70266de209738b11e9683808eac517c4a2f32

SHA256
7f4e864d94331dd2c4d81f18098aa67efdb8aba318eb77e4be007c44d1455ddd

SHA512
f3d8f086a18ebd44aa8903c7d7a1b6a63bba8fb094e9f1c4c86079442fb8015e09fcea344df65c99b56cf400682b36d0f72c58d65894d6c1b14c1be20041bb6a

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/keys
Filesize
60B

MD5
4de08228e40995ee529c2e4c3ddd3079

SHA1
fac37ba339d24c7d93356f0aeba85add343d1a75

SHA256
61c37deebdd37cc87e6e16497bf0f720e3c9a796c74810eb4b163fb4c889075d

SHA512
f83b55cbbe4497bdb0bb4619721830f00ef1ee626458f45070ebeee1ea528443d9322f055e9d5d693ca265b416918c50b5cf546993c143462b5d2c86d75b9483

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/report
Filesize
755B

MD5
e7f0baa8bd3d19514c4d71214574f38a

SHA1
dc36961cc9e10622bf3219a4751d5cd08e616ce6

SHA256
9de3c0e8debf203d384a442ad5518c33851f2db6986638f51e161ff35e0fd493

SHA512
f91b49f12c728f33e47709ae813f5c12a86fa130f2627bd80966e4b16c298a8ec9578a9a6035d57c9ac4c7134d9159d78a4efdaf535fdc9058460d66f3e8af7d

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/userlog
Filesize
191B

MD5
84ae10e7c064b2e4a49c814f6143a579

SHA1
96a7d6bcfdf63036bf2228d087cd9161bd71f0ea

SHA256
e9d5994609d542cc27ac0ba1aace964b30bfbf1b753179aac620a8b450509730

SHA512
a90aaf876cb01eb90c679728554a33ae2afb01402a88b6053f2bb951a7d0c01f755c4fd3a3bfb341ec327cac898dfd9c7df01b7cb0d1526eb7351d2ce0263102

Download Submit
/data/data/de.swr.avp.ard/files/.com.google.firebase.crashlytics.files.v2:de.swr.avp.ard/open-sessions/6650947800DF00011114D568996FB725/userlog.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/de.swr.avp.ard/files/PersistedInstallation4502500893011769657tmp
Filesize
568B

MD5
4bb063bac4765213b824e09fd37b98ce

SHA1
1874d5e09a982d3e2519b834e0eefce8ad9e6f14

SHA256
56803df607946d847088efc8b2cd075eefa48c33439f453e37b8c779eef4f602

SHA512
174b75a8516d94dadae7975178277a558fc618f19fc71e8ef935dc9775f18c2ab80aca72cf87aa4f0dea108d3263acd94ae5a4a397bd35556582628163005860

Download Submit
/data/data/de.swr.avp.ard/files/PersistedInstallation8123570756730362660tmp
Filesize
90B

MD5
9969e9de985da26a38275ce9c550eb1a

SHA1
b680703345d381e469caa133c2c1b90b38c37684

SHA256
78b5e38041ef5dc2579cc588196590cb5e63d548eec944c334ba0849c9c2546e

SHA512
c5f12449667f2e12e7ff70a43657efd26bba113d7280f9ad4f0f11a02d9d8528dcfe0b1c35ded86503bbb5b77508dafa5752558401d3257cd709a5babb5829ec

Download Submit
/data/data/de.swr.avp.ard/files/nielsenconfig/PF60D2F49-A22F-4890-953C-7930A24823A7_aa.9.0.0.0
Filesize
29KB

MD5
2b9d028281b49a103a7a56e681611cf4

SHA1
7bca772517fa1a494083d923329df849acf4dfae

SHA256
b2ffc36abe2c12d9b21e64c5bce58be475a5745abd0cdfc3eb350414747e3482

SHA512
1e6f86f4ceba15035e326c538c91647c2560a1bbed517772ae496c575f168b23708059ca3ca55c7b4cef03d490b02084b203046be1e616b102188dc0cf5960ba

Download Submit
/data/data/de.swr.avp.ard/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize
8B

MD5
8fadd960616f58ba03e43c0b9c3d02e5

SHA1
fd62f4b80a0ad588f9ef5378d88466add223c82d

SHA256
61cc49fbc3fc4ca7ca47c5d01bd7b2f999add715675eb001673023e8ccad07df

SHA512
a79db0995825604e3bc8d4a5cd0c402d87b80c9c3e2648ad02cec0b59b7303a18098839395ec9ab0b4b6c9286e48defc22a2458e498c29f5dc4e5c07375f3fc8

Download Submit
/data/data/de.swr.avp.ard/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
4f2f2b516c72312756e1f695b9d1cd5b

SHA1
3e045fa0deededa6f716ac19a141774cdc596261

SHA256
e1c36ab3104da2e1dc77800209669036b1e26503b9b2a1878cc10837f0e8c60a

SHA512
511d6c1d93edc16d73fedc22e4a2d8da7faf9897ba6219bea2419ce81e1af240e15412d6176a8620038cf19ccf47374fea01a7060e24cfb4039405882d99ebcf

Download Submit
/data/data/de.swr.avp.ard/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
8eda567370835da4a55a8519b366c195

SHA1
55cc25701a5537c0a7ab23d5b274cf8fcabd7135

SHA256
5d6a42f125da610c69a97c79ae6448bd54caef5ce0ca6689b4c790d867fea082

SHA512
96a926f0f7d02de822d8e76d9de7200b677dd358030d532d61480a0c07698f343e848de9c758146fad4c96ffa4d547adb55c679b8b8687091e2532c54c7f6e54

Download Submit
/data/data/de.swr.avp.ard/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
1dd9ec0f72bf7607fb7cf4e8c6617e23

SHA1
235aa296602965330b4e8938f6b6a8b3888b3bb1

SHA256
07bc62e9a979fb9f56a66544886e07fd90a1603a3a2ec7136123ef43d5255030

SHA512
ae3f98d56925cf143fa8cf0e2cc2a59023ff6ece40fc97ef3e53872c3ee07db1786a9d6a8a2bcc55ebabb43c178f5c75790efc9aaea557c9337e8b2538cc10d2

Download Submit
/data/data/de.swr.avp.ard/no_backup/androidx.work.workdb-wal
Filesize
221KB

MD5
590c633e8852bade05b4f8a7e8b30eec

SHA1
21a6e109e04d9dcff7f6715fcc5f312190420f44

SHA256
698af5444a16c20dc822d81f553c89a350e376f430f7e302b3791dc93a699b3c

SHA512
54bd4fb405c3bda40cfae0aae3d14ada0ab7c1b9a7eebfae15a01e1b3b8f9b20b16089545eb56d41060e29b25114e751e4768d5d03bed5afd6560d34bca5bad5

Download Submit
/data/misc/profiles/cur/0/de.swr.avp.ard/primary.prof
Filesize
7KB

MD5
d4e850fe95fffceda3613705ed1aea9e

SHA1
b95681091e2631b153fcb0052a5afa536e79877f

SHA256
622af53d7e2fa62897769c431371f1bc679b611948eda6c6f6b3b6864ba6df1a

SHA512
5373ddc51c94e6f2f70b4a3f9aacf8dfc1ffd76a3b763c8b869c98d8e1f4744f72608bbc6872367f87b7eba51958f7bc7822541e2637e5db0396206af3cd642c

Download Submit
/data/misc/profiles/cur/0/de.swr.avp.ard/primary.prof
Filesize
24KB

MD5
6960b77965dceee6f71bc4396b49511a

SHA1
291e3f44962b51ae448901e86dac75b95d237533

SHA256
486110a74bf94a434702bacb961172232673eec17e4d66f73b0ffefb3fd0317e

SHA512
a88e628d198291efe98bc6507c46d7bff70fc6e20bbf4765569e375cd609fb8b768c243e20836d226746da1983cfc0af380e5c48f26b8f7c22c098df3b0ba026

Download Submit
/data/misc/profiles/cur/0/de.swr.avp.ard/primary.prof
Filesize
26KB

MD5
5cea51832a758129c00dd3046a54446c

SHA1
f78f292a4e987a514b93c98674c07a54cd962cb6

SHA256
83a610a685048878400395e9272f6af9eab24b07e5cf8ab6bf8152090c4a4598

SHA512
6b1bc3b7e9fe641fb37d3894c1f957341ecfbd092d89acf626df9957aa38e34951ab75a1c871a70a00a3d077c39ac41ae807aeafe44da69a3870ee9ebbda12f4

Download Submit
/data/misc/profiles/cur/0/de.swr.avp.ard/primary.prof
Filesize
26KB

MD5
44faa2083d6d27e124f0bc7a46db0777

SHA1
f07f5be16aceca45748e7bd255668b2cfc78f6b3

SHA256
b34d876686817f8e25bd446217dcda478adb505ff59a90e0b0b65235d146ae1e

SHA512
ad89a3ef9df8412cf3a66353ffc75f325aab4862ec2d175074974e4b727c4b72c67892f72af65c59830f953f629701d4b35d6748db5300dbae34513c038881c5

Download Submit
/data/misc/profiles/cur/0/de.swr.avp.ard/primary.prof
Filesize
27KB

MD5
8430e14911b75f28e852e387a4d785f5

SHA1
e79816d93075c714bd50f3730c4680bcfd20860f

SHA256
9ba06d484e46bc5d88951e9e107d685b5d7f3d3f7be938d2b6b664946d11a75c

SHA512
e127e734f9bf8fcb4690d41ff51b593b3275b092cae917e899ae092cee23fa8d16de141bbd661047834c782f132e495a03d4c309160cab8aa750885b516342c7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads