df020e7a3587d966eafff39f2dffcaac3401c090ba90bb25ee76fd00e6e4894d

Analysis

max time kernel
76s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13/06/2024, 10:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pelishax.apk
Size 96.2MB
Sample240613-mt7fcazarn
SHA256 df020e7a3587d966eafff39f2dffcaac3401c090ba90bb25ee76fd00e6e4894d
MD5 bb0c876084b512cf13110bf6d250eed5
SHA1 3d08697e5fc05a3975e50349930b0e17251605cf
SHA512 61019e0f7b39b8ebfb49bdedde3b116b06270c4b6b90c175c024fa83c223f394c565fd61b974cd05bf9e224173f963ee223418abf0b87836d50164ae6e31bbab
SSDEEP 1572864:fq/Yy8dtSpkt+fzPvv4PvuCkwdJxPugFN6Oj3iZKL9:Sudt88qvC0wdJcgF4O7IKL9
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.pelishax
/system/app/Superuser.apk	com.pelishax
/sbin/su	com.pelishax

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4491	com.pelishax
/system_ext/framework/androidx.window.sidecar.jar	4491	com.pelishax
/data/user/0/com.pelishax/[email protected]	4491	com.pelishax

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.pelishax

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.pelishax

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.pelishax

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.pelishax

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.pelishax

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.pelishax

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.pelishax

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.pelishax

com.pelishax
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Checks CPU information
- Checks memory information
PID:4491

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

027195440576338668a5a40df4281b0456d6dfa2878d51a4611c089d8c05e1fb.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/027195440576338668a5a40df4281b0456d6dfa2878d51a4611c089d8c05e1fb.0.tmp
Size 5KB
SHA256 90907896129952ae19217929503644dd5772273217a3d759f0d912faa8c1d207
MD5 4ee58bfb3e6d0a326d9eac188e5cebd6
SHA1 345a5d8c92da17da247466996d818b8dd9224354
SHA512 b738007898e2ee41c8aecad7582ee2e8fd2e99a3bd7b7c235aa0c42077891bd4c8ab00fff1a4d020f10514b436db3efa92466fec53caa885e7f9504d984be435
SSDEEP 96:ROGgPTk+8B6xpyZrLouGKOxinvY9fqf6CN3wxLvRBcz1J6phShgP:RGrFk6xkZrMujOxavY4fFw5vRBg2ShgP
MD5 SHA1 SHA512 SSDEEP

Submit Download

12c2e4dd529e77d1a3066195482b0ad25c66baf1cbd1144d94a4e458230f2410.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/12c2e4dd529e77d1a3066195482b0ad25c66baf1cbd1144d94a4e458230f2410.0.tmp
Size 5KB
SHA256 e6d7715eb62c1bbb43a523f8dc0cadb9dfc6cb703a165dfe822f9203e2ffb436
MD5 891f23aa333cbc0d6a741c5994c9ed8f
SHA1 ff131de5c2bde68869bfb9febc1ae554ccace74c
SHA512 5086493cf0fe4735d79bb38de3c7eb638766df868e4c2eb6c223277a8555b7d21f0fb8de16ca2d29165af5cc40f026a7226538550ff07952801647c7751388b9
SSDEEP 96:82oT0PJkzPlhMWrvBJQ8t3fxDu4le1iiZmx4mKArQ5ZcpZxbZVDoX46ML3Pj3MJ:80IPlGd8t3JuqeleHrt3to1mj8J
MD5 SHA1 SHA512 SSDEEP

Submit Download

592f8160288a6029fb6f5dca2f576654cef05a99e7ef151ba1896ed00a100422.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/592f8160288a6029fb6f5dca2f576654cef05a99e7ef151ba1896ed00a100422.0.tmp
Size 6KB
SHA256 d7132b273869a0ce7d2fe356da3e7b0d0b1d2e58be8cc1383b10fe50155a5ec7
MD5 d17814e48da8959a7f495166f591b872
SHA1 305316ccf009cbadad6e0b102b18885d2378ecdc
SHA512 2b2a5b2e7cee89d41b736520ea7ef6eeb6b4aecf955addb63de2b898ac81995029bcffb861f5fa8c09006adc883cadde849a7baeba0e8bb76f21e08ac71af8c2
SSDEEP 192:6VXXSeR/weeiTLvxHFQOzzCp9mk/tUAgZ:6NSujfZHuiu9L6AgZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

8c609dc1c816908a32e393b4f762536d7ea9957916761ec0dd5b06d2ee66a6dc.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/8c609dc1c816908a32e393b4f762536d7ea9957916761ec0dd5b06d2ee66a6dc.0.tmp
Size 10KB
SHA256 86442a417905b1de3e5f16fcf09edce3ecd7401db119a2203f010ab10839d3a5
MD5 2b1fd79b84284387d7e81e6c717b0deb
SHA1 62ec5c89355886d1cb2f1fcec449a1e3791a1f8a
SHA512 a34d6c982938dcc1045aeae85d8f5a07e27bbf625dbc2a03f12f897abc1bd97a4eb88cc1f1f0005571d682cfe52a613d54c15760af952364e715fce4ae665288
SSDEEP 192:7Kd6KAba5bnVUJN8dyxXXDxQh5Qy1ivJ5p7rwjZFzUhQB68ZJ5Paf:7KdjAba3dyh+5QTr7E8Iif
MD5 SHA1 SHA512 SSDEEP

Submit Download

8c7f6fbcf60de0060d05197167b61cb7353a95df1055d6b48633c51d703fdeb0.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/8c7f6fbcf60de0060d05197167b61cb7353a95df1055d6b48633c51d703fdeb0.0.tmp
Size 11KB
SHA256 625b4c9560e9d5b7ec5e8be8e0b02c193401dbd778d6c330ef7b419b5c1dad59
MD5 eee4c9cece493ee05f17021ed4a69ae8
SHA1 e9c8b12b8cf1f130db54c655f7c31ad0ae9b447b
SHA512 74dc278a2904acdf3574fe85506af455161142b5bd188bf1c2f54347bdb8abea99c8b663b11b381cd8de63711d8931cda6e7ea952ac2c2ce9db9c29d30f1a575
SSDEEP 192:uby+TWmKu+76WI9Y70EfsRmrP7vRXcABYdPDZAM7O6eN2SrIujP63oa8erT6bWPy:7Oe43kZXBYtZAM7OJV63v5CaN0
MD5 SHA1 SHA512 SSDEEP

Submit Download

9bc5b5290c3e81b182b2f2ee57d40fccab569d4582d9402997987e5eb127059e.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/9bc5b5290c3e81b182b2f2ee57d40fccab569d4582d9402997987e5eb127059e.0.tmp
Size 7KB
SHA256 cd5248e9c4f94b18d87666f302dcb58df80796710bbc26ab0ea5305334bcffa0
MD5 dfc6866318534f7acb318f148309290a
SHA1 46066f10c45e35c551bc90837c3c881be3bdbb0a
SHA512 1efc86834b91c5d8579a7d2a08526da09977e31b8862724bccac05ecf11a462206069c65ec0aa29515929009165f78a56e266567a97b90b64556bb20a25bae6f
SSDEEP 96:y2gkgtk3yyp1PBi0ij3ZRUbkyOZo7pIvvRSCH+sUl/d/HTZGcmd09DzjyRuoWjF0:yZMzZinpR2qyIpEsI/dvTUcDFzjw+NY
MD5 SHA1 SHA512 SSDEEP

Submit Download

d7be6e6e7a5f41e6570dc29fa8762bd87e5d4eecbb9bcf5454d55d63918b50fe.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/d7be6e6e7a5f41e6570dc29fa8762bd87e5d4eecbb9bcf5454d55d63918b50fe.0.tmp
Size 1KB
SHA256 42979de25c5e052af08ad28ebd360a3794a41cdc39929321f627f02f495244b0
MD5 f760026327419c0a39e8f5fab53525eb
SHA1 3f2ec2baf203d1430c58846a60261e69d73fec4e
SHA512 f172d369523a20129860995a30eeb969fa53e1051e76a26dbd8013e7a2d8bd6e5226932d25b34aa97e9598d4b41e2dce23fa908deff0f6326895abb6e7af719d
MD5 SHA1 SHA512

Submit Download

e4caa196031b20d1884c673b9d219b7a90d72a2524794a84502e34930f6f338b.0.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/e4caa196031b20d1884c673b9d219b7a90d72a2524794a84502e34930f6f338b.0.tmp
Size 25KB
SHA256 b297ac2f7d9b65562364a35a31c6d6be0a9562a070d0ad3082eeee9bca9e0915
MD5 4ff1da6c9ee2a07879b9f561715ea593
SHA1 b77418a231d62fb7826e582055275cfd7ab723b3
SHA512 1692bc862941ec7ce173f77f5aaa30ddab6fc3489700d314260bc877840e3a85eea92b5d7016402b5bc4a75c13c4be63488a73252a0d7496bcbcc0ef644a1fab
SSDEEP 768:hAlAwUuKNVObbmS5dj5HPIIJtcyVtp4kCQ1VL7yBz1auebj:6ewUN0bb/9HPbJtjtSQrL7ez1/ebj
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal

Path /data/data/com.pelishax/cache/image_manager_disk_cache/journal
Size 1KB
SHA256 58ec35fef53e613ec0d9cee3d5fcde53bf3995735eb01f8f291e9c2ceb606fa5
MD5 1afad5b8f1abad44b9fd079ea3531ed5
SHA1 71af06b7e8b20c817a332b488a778026c77750b3
SHA512 7ba8dbfa1ecb8d48dd48576e1b595c7b897f75791138ed2c08c042d005b88b1a914a4b7b24119a4cf0d7c892253c0a269046e6dd2d85ef2b163ee8fe1a82c263
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/data/com.pelishax/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

323658affe25796e601caad144e2e9a0.0.tmp

Path /data/data/com.pelishax/cache/responses/323658affe25796e601caad144e2e9a0.0.tmp
Size 6KB
SHA256 f32d770887c3b53d0a9d85baca1dbc1052235c0e034818a84eab02826a68484a
MD5 c8cda92b519665ee730f0d1fe513df6c
SHA1 c29f5edda320d3540bfc2745f51eec3f15d98d9b
SHA512 a0ca9be26868bb50bbcf00fbe77f509171b91bdbaed157fee3c6c87da061128cdd5a84a955fe19b066c706bcb1607dd63a3a94e3fa56c4726a07ee699b480994
SSDEEP 192:ZErBwlYeguk4XDSNKuy81zVl1QGphL1e0lpBNDIIX:SQYeguk4Th8lqGPI0lpDIIX
MD5 SHA1 SHA512 SSDEEP

Submit Download

323658affe25796e601caad144e2e9a0.1.tmp

Path /data/data/com.pelishax/cache/responses/323658affe25796e601caad144e2e9a0.1.tmp
Size 48B
SHA256 706b64a9163c1edd21c1641034bd0486bc6683bc6967f884214408b658c0fad3
MD5 b692f6bf1a37661d8131e04fd13b44e5
SHA1 ffb1e09a0a9a87e0a63e1c4c819df66222d01e63
SHA512 c1ea875497541943363fb21604d9d6ba7e1cdb5b029559bca07017e44ab7c6b9e9e2a69e2017e89b25634f0e16c03551f38ddd7b4f2f8453babbdfebed5167cf
MD5 SHA1 SHA512

Submit Download

88194becc004cc492ee30e51bfb6ecb7.0.tmp

Path /data/data/com.pelishax/cache/responses/88194becc004cc492ee30e51bfb6ecb7.0.tmp
Size 5KB
SHA256 e3a2edcc113eb444691417179af3b55e6f0f4e468cb3b2eddecc38379a8d376c
MD5 815221022f41cdde3afbeaaf2a3b44cc
SHA1 58fbb259e234cd8c3e22adce5570c4b4ced821d6
SHA512 2ff2fa8ac4ea2d5f367dc0b924026ef39ac762219f6830cdf2eee2f6037115e8fce608d3734bf020db5ed7d0209fdc792d8cc13ef1eb258301dd32724fab6639
SSDEEP 96:ZEt4JrrwXCdVYeguk5p05BDSNKPGVY81zhzUv1SlI2QEtBLhkm1e0Bq3GpBNDRIS:ZEGBweYeguk4XDSNKuy81zVl1QGphL1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

88194becc004cc492ee30e51bfb6ecb7.1.tmp

Path /data/data/com.pelishax/cache/responses/88194becc004cc492ee30e51bfb6ecb7.1.tmp
Size 222B
SHA256 8712e423bb97cdf183da935622fbe7eca9deb5613faaba1528f0031b683ef4e9
MD5 75a51b6708e6494ef07fd76ca5e963c5
SHA1 c2353e73b007ff03f06b06914c3bb8ed4c1de089
SHA512 3832e1ffb94a3e582e2b388a5a59ed3cc4f1b5a56346e919ef470594fe10266dcd4fe4ed4b4112224922719a10dc9ca9da7d491cde063b2c2ba7c10665b2436d
MD5 SHA1 SHA512

Submit Download

d74f8aeb8cbc72a69c5638e455e8f783.0.tmp

Path /data/data/com.pelishax/cache/responses/d74f8aeb8cbc72a69c5638e455e8f783.0.tmp
Size 5KB
SHA256 c18b63909788a6815310202cb311fd2286837d832260949c41d5711b3f41e987
MD5 c938407a3d8c27bba268c325bfb71e6f
SHA1 9d4d0661befe90f5f9d9b3606f5fd0902e0a073f
SHA512 2c987a433b34a1518c87758b31938e8615602fab5380301bc3d57873a5d777d2ebfffc64cb11a0d32055e21e0e88f5e153717d2482535f21eb8c725ff8636f6c
SSDEEP 96:ZE84JrrwXBpVYeguk5p05BDSNKPGVY81zhzUv1SlI2QEtBLhkm1e0Bq3GpBNDRIS:ZEVBw9Yeguk4XDSNKuy81zVl1QGphL1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

d74f8aeb8cbc72a69c5638e455e8f783.1.tmp

Path /data/data/com.pelishax/cache/responses/d74f8aeb8cbc72a69c5638e455e8f783.1.tmp
Size 3KB
SHA256 298161eb6b7a80160a41406bad11c1e22be3e70445369275819f3d7d0d81518d
MD5 e720a54dfd3069d70c3f5db7079cb308
SHA1 98c41575060780b4e066a5377c4efa8623e3907e
SHA512 1c971dfd1e3d600f07371f7faad73436b987474fd204ae96a884576ef0986d80e0095679e11707fd399e7f00ac819af4017639482a650e0fba253765fbee563b
MD5 SHA1 SHA512

Submit Download

f4e04614ed70174d05114a2e6940061d.0.tmp

Path /data/data/com.pelishax/cache/responses/f4e04614ed70174d05114a2e6940061d.0.tmp
Size 5KB
SHA256 31ea3d40a2a25022cb4ac2c55061ca9b706fffabb0e3a98be53f9b1cf3238a02
MD5 a957be265af70e8809e427d19e307c47
SHA1 565b4dc7a8bab25c41382c892eec40e7eaeabd56
SHA512 6ff8edd6a9ff95531dfd0136c7893aaa76fe854610762ee66dd9d497b080d058bec038059c76ef3401962af6f6d8ecc9f9c54316374c00e080dbb7326c8cb529
SSDEEP 96:ZER4JrrwX/CVYeguk5p05BDSNKPGVY81zhzUv1SlI2QEtBLhkm1e0Bq3GpBNDRIS:ZEKBw6Yeguk4XDSNKuy81zVl1QGphL1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

f4e04614ed70174d05114a2e6940061d.1.tmp

Path /data/data/com.pelishax/cache/responses/f4e04614ed70174d05114a2e6940061d.1.tmp
Size 106B
SHA256 6d62e106a73f023f8bfd0546f5a9b773f6ad1ed43d37c75776accab944977a33
MD5 19bb61b912c4b8b77502d9670bd016c6
SHA1 a846e3d42e6d943ff73f73f3315199cf1499e69b
SHA512 06bb656c7ee9c024ce4ebccc7ceb85217528e2ffa11373b3eab68a174aab08677fc51b5cf923bf3d8337eeb124369cdccc4dd0637a34861b80918d81a5580f11
MD5 SHA1 SHA512

Submit Download

journal

Path /data/data/com.pelishax/cache/responses/journal
Size 384B
SHA256 ab58b1e36a7f6b9053fb9a4d5aa5d25c1d8feaf9d0c219f2ed306418e0760682
MD5 685e745ded2296c322ab3f0edcde3442
SHA1 2ef1343f16f11b8e819926da2f6491f0a0d451a4
SHA512 c31522307c6df9bf8fdac016eb7255819a18c8c5bba45afa3c9d055896a3cd496884eda9015f254570a0a3dc492557d567fdc4fd3d59cbc26f9c450ca5f412a6
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/data/com.pelishax/cache/responses/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.pelishax/databases/com.google.android.datatransport.events
Size 56KB
SHA256 d6cfb527bb2ff0e9e828b76ecb63cc2e22bbfafb486ffb5771ed88cb5963e8b5
MD5 edd27aef0b00fc59b72ea9daf4ca8bf7
SHA1 5d046a1f0c0874f23a6bec5250b31316abe86734
SHA512 77be59a69141e107b560695f86f368527968c5366485f17a42b9018583f14a5108e23205594363951c5d2c18814f6aa2b0c2fc24c602769ed551477b8832891a
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSA:rAMEX0wIyNjaA
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.pelishax/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 8e2e9ea3e0700a561e8d775fe05ffe5e2ca40571b7b696e41ef740e558ca3939
MD5 ce2c9a4bf8dd3d4943ec15c614580006
SHA1 d5c5b5e3603486ee5a72716efe4875eaab49fae3
SHA512 7af8d9ac23646852f69f8d24db519c878c80bd0468c3b370b6a20a1953a8def2b09d8e87ee8b7c2d2c2e2b8109448d38553d22e0fc2056e59e5258958a1b3817
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.pelishax/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 49315699281154da2da2d0b279c8524507d592c5c7036d1a79566e8710e7c4bf
MD5 23ce20d03beaea8b91da574faced8bb7
SHA1 70608a5fbf6c25edb6066430c219152fdb4f1bf1
SHA512 7b0aa2f71881fdf81ff5184564deca72e54c0c63a19ef5da6e411cad868f15a3a9138019ce2b65641544298f7c3126d5fa896f63dcf385342db87194d86fe6b0
SSDEEP 6:7+/l9sn1t1g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKo:7+te1qLiuWdYRmBEyPbz
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.pelishax/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 cdfc8df7923357cdaf4e80684c6558380265dd764fd342c53734420c7426b402
MD5 0823db9f6808792df1323277340933a9
SHA1 219f0437f9060d2d5106506ac89abd25624605f0
SHA512 19f649b437c2645fa2595006a97b7829b4f894e198758ae8f261f1c77750ac142dfb2df02bf7bc0a2707bf136702488cdb569cd3b58ad06bb4e1d2bd047c8398
SSDEEP 6:7+/l97RPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKgSC/G:7+tZdqLJdeWRmBEyPbNG
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 c41637e9a1cb3f7c42c887b37c1b242ed790115349c2e8807ce60f7c83c909a3
MD5 1864eb465ae49c86208f92b03c26bb44
SHA1 9a37b1591c518fea7f1b64025ad1a31a04bab8b4
SHA512 f8ca76763677c637d6f4e0ab74b48308834c00e801ed5de7406a5cff3d737316b49e0c86a988a62fba2f78a27064efaac227372f02b8cec9cf67f5e18bd2a4ee
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6L:TLiEq9zmzrfRmBEyPbP/P+/0Fl6O47
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 618e529556e27085e5fe74494ce77cdd190cf3d7361220e51bae8591cc0f0f0c
MD5 f026905e7451f1e336222b914c1840af
SHA1 ed4e94722b35d998945c9325e84728e77bb53b60
SHA512 ad7967c75a194882a453d44e20415a8916e08a2a6c9deff180fb46df7b023868738e51c116af738e212b61c6e3a17ffaded8d9c0b9c422c4d03f282d89d45ac3
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlsz8+/0Fl6O47:TLopmzr0GSP/h1499FjlFy
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 fdd788f89e950e34cb57620d6dc789be68cd4423e800a4a875c5284541c246a6
MD5 d6f64d68c523d2f1e748c123902b901a
SHA1 327b279f0f6f60515831b3fd8faf4260eab27b3d
SHA512 9bd6e5cbafce18a9b0ab0df1950443887dc54d9f0088f193dcc2b227a1058ac03c2a8cc13e0f7eb6700e91d3c65faebafb5dbc3fe80fff09a11699ccf0c31192
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/ZRhOLavnOAU7wU7UyWlsZ1a49blqYFlsz8+/0Fl6O47:TLYpmzr0GSP/nhKamNZ2s1a499FjlFy
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 0d580eea224a4f9c20d8909767f7b26df7d0915235bd5cd21009a5187cf1d111
MD5 c88270effb35ac4a5287af816ab9a403
SHA1 62456806de6946dd4937d8785bd8a671b1de0edd
SHA512 19cd126acb7c37a78e5a00516bccd916c0115adcb28dc0158bb3d7561adae79fc59d2e08cf4102456c2c39f5e5a332332319a4c37422a8f2b90f5fb6c0e5a6ff
SSDEEP 24:TL6vpmzr0GSP/M9hKamNZ2s1a499FjlF2:T2vArSP/M9camNosN5r2
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.pelishax/databases/google_app_measurement_local.db
Size 16KB
SHA256 463000ec699055fa5b4d1af5150e94c1699787745fe59525454e4cacd610f012
MD5 35381552b75b13802ad8c2080fc3d9e8
SHA1 b39354767c6c130230285a8121dec63b899b40b6
SHA512 6c051dab24fd784bce59549069bb1b423283b5941271471e2e77a17b74f4fcaee30ccbb4732c7033d573c4098d562da81b50b78eae29211eb42552fa93dbc114
SSDEEP 6:l9bNFlkls16/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WQm3:TL6E6v9zmzrfRmBEyPbP/WQm
MD5 SHA1 SHA512 SSDEEP

Submit Download