d4fc2501c2d06b22d2f0c466c44ddb43ff4d5d2220aac66cc79d173c25e2f1b5

Analysis

max time kernel
82s
max time network
143s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
17/08/2024, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

OneShade Pro v18.5.6 - espacioapk.com.apk
Size

14.6MB
MD5

0e85086f0ecee503391b56df9ab65554
SHA1

d8bfc87552b4e8e44781b07a43e1547cfa3775a4
SHA256

d4fc2501c2d06b22d2f0c466c44ddb43ff4d5d2220aac66cc79d173c25e2f1b5
SHA512

9bed04acb375a13a62275a1cc19e6e23ec0c81a04f913ae826c30dd4409b4f4c62bb8b4833930c8be3d8aa19c6ef5f177ed924edcd1df5dc0bd244f87601e085
SSDEEP

393216:dfcu9W9f0lptksYjQho+FgRiPLTHGrNU4u:VxWA6sYySRYmrq

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.treydev.ons
/system/xbin/su	com.treydev.ons
/sbin/su	com.treydev.ons:Metrica
/sbin/su	com.treydev.ons

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.treydev.ons

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.treydev.ons
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.treydev.ons:Metrica

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.treydev.ons

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.treydev.ons

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.treydev.ons

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.treydev.ons

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.treydev.ons

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.treydev.ons

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.treydev.ons:Metrica
Framework service call	android.app.IActivityManager.registerReceiver	com.treydev.ons

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.treydev.ons:Metrica
Framework service call	android.app.job.IJobScheduler.schedule	com.treydev.ons

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.treydev.ons:Metrica

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.treydev.ons

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.treydev.ons

com.treydev.ons
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5035

com.treydev.ons:Metrica
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5185

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.treydev.ons/databases/com.google.android.datatransport.events

Filesize
68KB

MD5
a59183d2d9c1e70fd6be413b3bb24e0c

SHA1
eb6e509949dab8ce1d6a2a89c7d3fe4aa2cf207b

SHA256
7f0f8ab7e4389a4a57a88c902ebce8bb3d56772b6e3c57597c98c76e5f68d8e3

SHA512
2fc9935f37fc1c4afc4d101dd710debfd76b337a8276c255107f54cb43c4bfd5dbd314a3d21fb20f62177a1c1e9cfbb264245894c8492599da913b606b982667

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2a64c45595b4a10965ad786daad5b9e4

SHA1
d9e6c4edbaeddcc63a0cd1d7d9586db83d243580

SHA256
38b0c39b74ad65fb0d95adda78c53c801fd4c7f59382aaa1935b8cbe20d5f72f

SHA512
54485f073afbe13ed507255f4615709457c2dbc33755780478fa75f477e268d3a86f19464105c3fe4a8e5bc86bcfa7104d30aff194d9e861460ee08222d45c46

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b2a1446558c5b4653d6dd6682291db83

SHA1
a359e87ad1d737dccd63f555e685789fe2e21295

SHA256
ab299ea7a4c2f8bde86f1b394497b0e44f1deb134823c660b6e293b41ca6ccb6

SHA512
fabe8cb07826a01be89676439e9a4ae70e5f2bb53632677816058899637e879556230ae2a43e845e219de0e3d639cd0f5b63269e62ca4dcf6608ae6c7cd23007

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
6c641dd8eb044554030bf956b95d8936

SHA1
e5bbf222cdb8751bafcef1db99fc1194f42059ea

SHA256
d045c63925d7848ddd81e69aa59cb60574ed8de6151db904dd732a263f4a7ef2

SHA512
cd33d4e9a3007ae84dd51ca7a0d9460d36b79250613aef9641b159fc4c9b9f249a4652d84e3f966f495cb252c068c6e6737bc947f97391cba1e5f893466b786d

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
16KB

MD5
1c241e434b832c830d2c4bb9012a6ec9

SHA1
577fcdead32afdc5aec2a842b6cf1bacfd5fcc97

SHA256
5e2c503b95ef5d64f27434db43232eecee794d845f8a8270a6219ef6bb086715

SHA512
39e02f4834e56f890a252d6dbedd1654e55411e6f1265fdbc342ad3888526991c6eae8cc2fc354551d2d07d70cfbcabee9cdff1f5ca9a155cbe78400e5b85b8d

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
32KB

MD5
5457da5e5e9fff2233b0ff00c3082d5a

SHA1
5099ec605d9897d7e52e27c35c652112987552f6

SHA256
0b424b4adad75d6d980850e6a4be28898016fba4da2c56f4d33db03cc6c84061

SHA512
e0ad5120ea04e702c84792dfda027ab9a4fe52976be8d3108c540594519f2e8cc603a3bee21864a3e6f05f56c1536da73ad4f7fd04fdc7106534abfa64b620e2

Download Submit
/data/data/com.treydev.ons/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
7f63646a4e70d8cc311e6faae5216883

SHA1
9e3de08629e2590ebce4e72b5fd25ff9048fd9b1

SHA256
372d164b77538160f7004125cc4d0a65818a8b506a0389bf72930191c3a3d90b

SHA512
ffa4613ba22c68373ee7e5abc1f440b0c10c91356985cfe9c6d4e196592e492ec70f46d4e2db2e44b01b805e6fc4b3c1248315b185601442c5ddc1b5316bb107

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e753aec384e3d3484c749b4bdfbdcc1d

SHA1
5c9d4cb06f258f2d68d116b64249e2d84ca89968

SHA256
d1d9a48698a67d4b4fd09384ac29e00710885ccfaef06ba3f1686ba97309aed1

SHA512
a1a4d0e3875fadcd691bba117114dda820604d4ca6a67b0b99800ade1a999b1517ff01bfef8d84215dfd17b452521c332b3b7ae8bbd2b30d207be2973cf0ad00

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7bce53d6efd6b183b11029a61237dfb9

SHA1
fd8327c17ae7d3a212bf578140437d581a66c3cf

SHA256
948a23666a1c48eaa8fa7194725279f0bb47d6e35e81c90963244528c27503db

SHA512
7d1c8f4534854498035be2c600b8b10a42174b59f2d7cb306d1a57dce8fd6df335decaa68e8b3386e7afc0255c8dbfc8fb4d196a4d2cc3dc5998755ace04fc97

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
16KB

MD5
48fd42a54f3749912bef9840d40e8e96

SHA1
d850ae45cceedf57d3617fcafcdea05ca9b59edc

SHA256
dcb3a434774ee24cc2fc3f81b1e87c91c49c9804a4ae818a26c0c8773bb3ab12

SHA512
f613fc0efd701bf8dde9603c787b4f189e51c4123b65466da672d0da12604d1e47405fae15a9d367965add0e5305295e5b3d9ea9fcfdf022c714ec7213d313f6

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
16KB

MD5
53edc7906f2df8530e26acba46ef0b3f

SHA1
766297d583c077ecc5218d3f4be2e74dc37a849c

SHA256
529681996fed536c81fe0ad20e4e85a85a868bf7a07dd440760550ffbe05c370

SHA512
74672add8e3edae8abb5a6996a49c4ed42c745e72c617dbe2aea989c8f841dfb43fc01cd58aa3298df0ae9366224e72003e4264d84924e6d9d641591a3eecd0e

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6a169b06bfacfdb478eaa8722d1fe42c

SHA1
e9acdc94f1a1461ad29a86a80f952b91c499ecd9

SHA256
fb117911e728516983f96940f1711b57949198c4deb970edc7c786ab23220915

SHA512
08fba8763e225740a8be67573c0b7dcbb4811f17f4bcd2446911260fd016a09229b1b8e025a2d5576e3ce684cf588f352f7247ca217b8c6d655b711866a2f5e1

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db

Filesize
24KB

MD5
405bb8c6234e8b314a4fdd486bea3963

SHA1
1ced6c128a67b30f8e9d482d6d2437c587211b20

SHA256
a0e442c6ea131e8809a72c8e0c8963a9eb3e4103caea96be04776e59fc934919

SHA512
4f5709e0cb054bbc86bdf191a32a1f6ab10ed032ff9968a936b8dc76ddfdda9db4f694539b17971b44e52eb2172f3c43d9349e04f0bf2409fcdb5691d810238a

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c8790e39123b571aeb6b96ec9b246c27

SHA1
66b2c20997b188199c1cbbdffda8d707acf4e2c9

SHA256
5dcad8c43b94dc31f311fef92a3cac56d05f1b13e438e6d7b895b60aa352da35

SHA512
9f11365e5bfc14f1446e3c928ccb5487ab7c2dafc49cd02fb893e6417fd671b57b0ec124cfaac17e785ebcff64831b3b72b057285f087878d2c4f8a4d26b83b4

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1bdc5758f3f172ba093ddfc1e85d4a04

SHA1
25c85084682ed0c98f09d55f5fe7d9484a2e50b9

SHA256
bf64c5b573c27775dcc6142cade5224f8108177c2b209209e8b64aaa2240aee4

SHA512
e1464b0afc979cfed7246de1f79fb04e8f9d1102ba89f889b32cc45093beab1b6ef80e745ce5e4e2a351cab33a1d2417c73a09a530525285368a18b15309931f

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
833ea8651d2f2dc5a36565825981b050

SHA1
75ae38d543af2700912a4ace838f07c14a2da510

SHA256
4518794c5ea10ba9eccd6ab7974d122c0b260b2e9c0265b67c36201a3e62a714

SHA512
97f68835f32a079f202c7908c39062ca888f6498866aef9eea330e7b59a7bb18fd8990445bfe7dbf55dc1e112a8f18ec4e1fec3ce66c68b613b53b5f5e5876c5

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c517988e562e061d1635f6f41ff3bc35

SHA1
038c631dfbbe9de4518145a5c1b85aa2bf80f551

SHA256
e59ca791c5d86ab41c33b6e72000acf4d0fc04d262e1f072f5388b4a2047b5fe

SHA512
04d753c9206315e1814d0f466f62f05a245b0b08a5838728946280f878ca94abbb3a6a76b38e14ca8c2fefb03753817d805bca5e78a38707ceb6d0621f7a4877

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0e13b7ce2d016ce4fae32950fe844e76

SHA1
9399ad890eaa046b11da4f4714c655b2ace7daa5

SHA256
b09756dba0ac389273f3f984e1aec0e04227749d9dc2933a6d054a7a839228b0

SHA512
e9de03d373febe63951d052167027798eae9037eb3a74c171ff6d1ae27a5166a67b5d616ceb981dffe7625d99a24d50200c419e7e7bc9f57820608a7e966ffdc

Download Submit
/data/data/com.treydev.ons/databases/google_app_measurement_local.db-journal

Filesize
20KB

MD5
f405c1746ef2307999f05ae37461c718

SHA1
16178a0d799f24e7486e76445a14409be1f56ade

SHA256
5ef02fcd17dd5917447e29ce3c3ab7b4f00cef72873535f5890f44479a2ee6e7

SHA512
12aa6a709b954eeb064eceb4dd7db49324e323f841cb75d616614a73a9271c34bcf6141914974c83ce69698ce3dc7efebb872da4058f87d0dc6fa80dbda86d5f

Download Submit
/data/data/com.treydev.ons/files/.com.google.firebase.crashlytics.files.v2:com.treydev.ons/com.crashlytics.settings.json

Filesize
12KB

MD5
3d3fff34fc8de6f1c45f309e01497a8b

SHA1
570653bef2df920b3114b7a5ca238e273421ce26

SHA256
ed06f8ef950bfbe6a610435b1482721d30e9692ca776b9f71d3bee96d34c539b

SHA512
5a3523178043f667d7e8e15e6a64527bf693d4a6a6f52f41c1401268d9c1d55ef3c040b71c335bb7a4eb16e842e9159b5b66759d1292a07bc28bc8f6cc4d58e6

Download Submit
/data/data/com.treydev.ons/files/.com.google.firebase.crashlytics.files.v2:com.treydev.ons/open-sessions/66C0C38500E6000113ABEF69C2FFDB45/event0000000000

Filesize
6KB

MD5
c2029023f3e2188115a64f0b462f930d

SHA1
d9c1fb6bfcae4ac46802cbb5c962c56f7d0dd183

SHA256
3aca53b1dfab99c31aa8e44a96806c777f41970953c93253a68fb24d57c39aa8

SHA512
f31695210c3948fd3d9dabc3eb014395d71123c8db82adfc9cbf9e48264a1fe7774cdd01f68b95cda8b72e95877484647a031cbd22b1740136f9721a661dd179

Download Submit
/data/data/com.treydev.ons/files/.com.google.firebase.crashlytics.files.v2:com.treydev.ons/open-sessions/66C0C38500E6000113ABEF69C2FFDB45/report

Filesize
753B

MD5
3b6c6d923bd49d45079b95b40a613981

SHA1
ea3334a97fcab56257ae04bb9c97cbad80abaae3

SHA256
5e9159ccbf01c44f4841b57ba6a9a7e3830b5ff625df301de4146a2a2960cddd

SHA512
804af4467e3a57e2ffcc9873753b0b7af0c854bc8de6753d4591720319233261a8d07367bf80503433fa488608dfe1b124c37c17ddf776f3d869088f2d92c791

Download Submit
/data/data/com.treydev.ons/files/.com.google.firebase.crashlytics.files.v2:com.treydev.ons/open-sessions/66C0C38500E6000113ABEF69C2FFDB45/userlog

Filesize
4KB

MD5
87dc6cdb5bd7a6faca594ac9d4e18724

SHA1
85ab47c52cb9e8e5f11630118ea390dd238290dc

SHA256
820565461bef1d35e387e1b72f66f1c9223f2ed7cac820b8a17e1db80df308af

SHA512
83134dc66795e52933263ca47e2dc69f8c927511295f6c14b3a49b6bb5b9505a1074b095b8a5d6a44b7df93bb6ef96cf20f17b3637f21dd279a73e4e3b078c01

Download Submit
/data/data/com.treydev.ons/files/.com.google.firebase.crashlytics.files.v2:com.treydev.ons/open-sessions/66C0C38500E6000113ABEF69C2FFDB45/userlog.tmp

Filesize
20KB

MD5
16edc44d7546ad483062d4af14156200

SHA1
8ed2c06db569dacbfb3fff33a2678fc664ae358e

SHA256
c1e6d314b46655edea31e36ead4032d83d26646acb42c91e5b68996f84cb895b

SHA512
419abe8efc934a9c1d8a4faf0f6629021fad8c91711b877ce6329e9575c0eba74aa327fe527311185ae6b251eb7e7d57bab254de0834bfba540b6f5da4873316

Download Submit
/data/data/com.treydev.ons/files/PersistedInstallation800150878170548242tmp

Filesize
12KB

MD5
f8781e660e599449835172db1009b10d

SHA1
daa9605dc8e9addba37592d067c9935881deccb3

SHA256
dba8090f034bff60f890634aa86199b2576d2db86ad82bc82666173e046776e1

SHA512
371ab4afbb00ff84d491fbc5876e978e0c86412a134c28b03163cf4af7f6065940573254c8d062c9524455da5905484db590b97b5fa152d61bf2a0ecbb848a9b

Download Submit
/data/data/com.treydev.ons/files/PersistedInstallation8153209370036001818tmp

Filesize
8KB

MD5
a3f13ac21969b4857455684a82e1c46f

SHA1
79de1fa94d7fa944036a3792aa3a6fcb220d44fa

SHA256
eb8591d02b321d8917d268b61c92ef1dcd618bfe4d36bb12bec1efcca6213d23

SHA512
66b42e1b4a94a925cc45e915d0873c67a43353e8114bc64447fcdebcfdc32ded417f8e2173c0378772685d43b54101ea2824bdab7d4e995fdc944ec25ad5c5a8

Download Submit
/data/data/com.treydev.ons/files/al/persistent_postback_cache.json

Filesize
9B

MD5
a5612927e7792641607f093050b775bb

SHA1
99216e1430784a2fc369f81e03a28e5f681735e3

SHA256
4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db

SHA512
3ce4dd5f437b9405ea6e4d6bcb16512c98914b2dd15a01facab5fc68126698cc37e0448fac28408560552e9688ad1b6948e0fb8c9d11f893635d20e970cd9090

Download Submit
/data/data/com.treydev.ons/files/frc_1:782731347681:android:01ab977e4b8c5c6aee59a0_firebase_fetch.json

Filesize
1KB

MD5
e1347d4a6c15e8e41e9052a18c585cbe

SHA1
049852a138b3f9d17f4abf847583abad65a2a690

SHA256
c8c3d48ef1e36f9a34bb4411b08b9b66996928d7261166d0b55b41e773f7e7a1

SHA512
de4901e1e5012b13b5e63fe3a749e5b9b8999bb301606cbd9b25f0d659be2d6894c3fadfd8c5d2b0d6ca961f804828deedc462de723f1f17138b1dc59dd184c5

Download Submit
/data/data/com.treydev.ons/files/premium_helper.log

Filesize
12KB

MD5
1bff8392a7a82d98fdff1687a37daddc

SHA1
f5025e1fb82ec560a1603e6f7316db3ac5149c83

SHA256
4cc6e366ccafee4634952a769768b712072ed188cb874a1eab02c5c1c7c5cdde

SHA512
e7047cc5cd972169270fd49bf7b9f1427574a3b4ea6c2873f1b0008fc36538fcff979a5063fb939a583e458cfef50a78bead9b3694b4c172c8093c3fbcc59677

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb

Filesize
4KB

MD5
90ed940e6e4e3e467c6529b8e686b7ac

SHA1
9565f0bff574d909b176584d5ab419895eb5da70

SHA256
0bd3506aac8b0587d39471c22141a4dda07f7b9fb208b7079f85c3278af2c2dc

SHA512
499a3631f6a70c211cef737c07e5b07cd1cb60d6aa63913d87190b0e419823ada01b01c2b24c6f10370a00be336b777694214c932eeccafbc2cbd5e6707d628b

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
f73272138193da608865809471535960

SHA1
ab2a3e541c3f900cf1c2068362538375aa59cbea

SHA256
01fbe99848dc614f5a72e1ba5965c609709ee56bd624fbbb759ec092238ac1a2

SHA512
451acd626aaa04f8d393a7b2e84b8fc26b90d9e2b45e17bd288cf10eea7a6a4c37f14ead4f9f10e4808d7628051afcf7dc606c479107ebb7712f84aa6cb49ceb

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
15a4c49517eb63aa22df11f42d693566

SHA1
400237e68014f7c0a56922b27cd6650a7e963a71

SHA256
19e07072229c4f2292a1ef4c6dc6c5d02ce626f969b4f5f7311a806825e916b7

SHA512
42919b77cd81dc9aae8f7fb6ccdd975afcff2cb9e5f221c9ae2686ae5d2d012990a72d5f131544029647a6ff14413120fdb1792e6c9b3d8c8eb7a8651cf1a434

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
3d44e8fb3b4db28e1731f1d24569449e

SHA1
475b5b1ce12cc642604b3ce198716e3a2646a8f4

SHA256
7e07395364f1d8e40719fc3d26446e851a7b021847c3a9093ac158d786eccaf2

SHA512
659d82a5b3a293edf027174d4d79fb7179d5a6aca250858071fbbfc6956c38a98a37698a50e012419adb4266721580a93d62f72972a9a11bfe2c3be44ca32b5b

Download Submit
/data/data/com.treydev.ons/no_backup/androidx.work.workdb-wal

Filesize
261KB

MD5
a058dab1afbd542468de0c692b92ada2

SHA1
a90b91ccc8e6eb9072077652b1f39014e95fbb4a

SHA256
b8205502ae5c33abae14d96c8c17408ea24a0619be6d5ddd1761b47f14a0311e

SHA512
4490700330e94195ff7046dee342d708318e7a9f1d6a585d882c6910f67c9809f6c72ac1b748d861b1e167310919eec4d15dc2b55decfcc0f07ff8441ea24ef0

Download Submit
/data/data/com.treydev.ons/no_backup/appmetrica_vital.dat

Filesize
56B

MD5
4075a105006d594631bc4aefddb0b553

SHA1
e0952bc74ec424a59ea71df0f27d73d30ddbabb7

SHA256
50bde61f3473f5aca4aa7e0b72d1abcdfdd5322ec123122eaace071e3a3865d9

SHA512
fff26d3b1d884b554a6d9a8f490bc9937238615f8676441c7e9acb494f0c4f997bd288656b48affb732c08ba86acf7d363368a4d563742f68c2931d8706326d4

Download Submit
/data/data/com.treydev.ons/no_backup/appmetrica_vital.dat

Filesize
123B

MD5
215ed7bde3af11d58bedbac62ea4202a

SHA1
12852b3a2e5f87ab86a35e38085aa4ae277f8b79

SHA256
99788e3e724f3ba493adaeb26d31d15532e61eea619bdb8ded7b42fd7db1e299

SHA512
a2b550708f92ab57ceab26509045e595ee5c3a6d32917f7fa2b8ef6c2458e1933369cde18a6a5eed144487c084789999787e41d212c46144b06d3cf63db6deae

Download Submit
/data/data/com.treydev.ons/no_backup/appmetrica_vital.dat

Filesize
143B

MD5
7daacc3c152f1a86480943a00f6899a3

SHA1
54b170f62985d466caf965534cc80cc5ad20d520

SHA256
eab774b4edf8359730bbaea5ce65fe0c81507abfa3acede0163be2f647204564

SHA512
d13d44f8abc1e7a8b2ae355005683ec535382cbf983623af704bb28b75166a79cedb1cb582cda25b2d0d177b2f0278f6d12d4d3cc2c487a5d3bb367f69f3ce1a

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
3e39333ecc2ca428e6b4dd417468c203

SHA1
54867d3a059d13952234d1173abf4ca8e84cb18e

SHA256
30c4b0e8a0c5dba9fdca50f036c870b858580d5af252a07241f92de633bfdaf6

SHA512
3ab0bf77ccb64f435ab78f432c66221a51a2513ff79aa8c2ec7983ea5aafb9bafed5e48652094e2bc0be846a2b1e35d2ebdca8fda6329004181e0fe9cfcadf8b

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
4a35de3da64635cbd9860bcfa715effa

SHA1
890817ed08f941192ded6ab430c641451baa4031

SHA256
a63cff416c028575a6c5ef7875675290996cb4fbafed9f8e2552af3662de8d3c

SHA512
d1f1b2fd33b30ff90560bb325ee9a38c3f6afe5a75ce4b2e67fcf9c4578ca582b224709d062e02ccd32aebcfd159891c146e7220fe554a28bca19eb2d33bf6d6

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
29a64fcb84cceddbb6e2f4627926a20f

SHA1
e5600750cb2447e78e4c1f1dd417caa2f393bef0

SHA256
d5c63310bb43d2b909778c07441dcc22415a08e9990757d7739c799e5e9c1b9c

SHA512
c342e031df587a2445aa42b942f17031b9caa548c97fa4944c99df7dd7ba6a2d32aab3a7aa85d1113fcada98a5e030531a5d9f879ebf2627d795e2d1462fb56a

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
8e3e5aafb967e5b05c724f0d0f7cb6d9

SHA1
79e48c674f87883e513076fead9feb1356400368

SHA256
cebf1f2dd850a4de92e033a63af3cd29357e3cfdc3d5f743e51680f97686a7e8

SHA512
0b2153185d87e7e2d2873f425408cbc7181e2a9dad8bb97da34c1dd8e51a04787eae1d02caa98eb1a3b9069137eb27ca6a9a173f8ca2e6e90d22e499694461a3

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
afa1ae14880804073e32eef17275ccb6

SHA1
d99768368612695576f247e2ea854ec066d68d41

SHA256
e99e01a95757f524b89117d5a8ecf8562df49cac3c0bf637b13a5743cccdcb5d

SHA512
d6841946c3540d276f76014ac04822819e8f1e59ad0c3dc421ab37970818719713f82a75bde09798f62d6319c5f03f52bc334730b4ac39cb5f8eb2bf10d2cf27

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
a2f998630d262d1952c77cc7d0057091

SHA1
6410c16fa7093c90418ea31b4fdb546315f48c46

SHA256
2345bcf8ef4295b9936e3a9c5b03c7020b0b4963c6c77658688f0f30bf8bbcbd

SHA512
d54c7c522948996f5a37f830d4d4d271b065ec2de53b9f1a712dc80b645c7e4e2aa9e5578d4561d150fbd95ba779e36d969be6069be032777c77a6e86f8e6dc7

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db

Filesize
20KB

MD5
b0e07ddcbdc5910702a4f8c315e39c95

SHA1
2fdd021717e9e77a200685baa6f4ef6fd40bb66e

SHA256
a39b6b2aedef6e1fc50a8547e1c7c8af8ef344f6f7e2cb963578be3b7cabd05a

SHA512
0a01214e6adb24a1e9ae382a8bd47066cd76da3d644b202192f1b54e6ebd002f72f66f2201e32284d6f651532661bb7c7c4cee147da31c2d18e47f97b9302b4e

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
36KB

MD5
ab97825ffbc2ca8996ebcc7b4c07123b

SHA1
7de3def6c0862789871b35ebfb408aa7c99aef43

SHA256
056218abc8a1eb261ccafbeb7015bd719ca45a76fe450cf56a03caf25fcfeef7

SHA512
c9569a02f41fee9b63732738e41fe2b7083d00bb8055ec5b1b7e43d02076f33c316f48e2f8c0868c572f4f1667ca10d6fae47ee22cd3505733c035fe94bed5a9

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
7d73c5552785ab83e7a909c18fc8b8ec

SHA1
07a38b176bd29a6c325bb0aecd8af9294cf73925

SHA256
e181b3292c144f2129217b90cdb026e1321809bbdacf2e12510581a8f884e1e5

SHA512
0843b4cc1e8d3e18f6967dd04cd6acbdef60f4846b0d31422de73d200f1b9e2b60244e98c2265619ecad49c483c81580de94df968d51cb0a381180a3b92c003b

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
60b4ed571691cb9884bb3991c060e437

SHA1
f3c5246a885e6969c2ab96b88ff8968bff7e5900

SHA256
b3a351ac21b78fdc53934fe041dffe8bb496bd720d034c159da660ded56374cf

SHA512
5f493aca6e5c3abbaf21003b9617ee8fa28de88938e5dd84ab7e6d12212db85c805751de78522b3c0d8906775afe455cd616e7e80930e31349070b03c45a9146

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
115ced15240507ca73612699ad9c7aa9

SHA1
721e5ea11009ee65d3a0ab1873c97a6caf1a8def

SHA256
7b91170a47efbb4001613520cb7fb3248a931dda7072a84be200b4605e580816

SHA512
6a2ee39492f474fad6667539f01dabb47decfc92c34af1eb8f06f0217facc6c82406ae84aba7bcdcf88b00247f3891dba05697107dd136776775bc91d3319898

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
c08dfc21b9f01739830ecf6410d9b22a

SHA1
b369704150d0232872241fbee2fa2fb33579cf76

SHA256
c29cac5493b9ec38cfeb4e98c175da8b935b602c5f3ec175c75032ce9b7f04ad

SHA512
86b6f6a7d78e8eb9e5c2a15f6cf6a6ef9b141e94ab1e2b5f284ca11d692ec183aab112a610f56d76cd0f2e5a186026c4527a78b6b03b3ae9e694157a69a1ff97

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
506761ea0e8ce70ccaf4ac5023c284d7

SHA1
3f54d36c2002eda44bfc13bfb5867ded3af39060

SHA256
7287c88a597aedde7b00a1fd56569f2f8a4c74ec385eeba4819df0c5b675526b

SHA512
9a97ceb5609c95a5d621fae108fc64af6f4af1bffd392679337cfbb09c934589c8dc6df7c8c83225cd6325008f59cc26eeda53d9769e31eb280bda8bdfd321bd

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_data.db

Filesize
44KB

MD5
4848c1f2d7e78b1bc12daa474099037d

SHA1
c324b17959aa18f5e0b85c045d769343514bb613

SHA256
f00c008b368b3a1a313dc076a0afa07db093a5bef4f4ca0c230e46d3409ae9e7

SHA512
61e3f38bd8ada7a600b85a5a6986f0d2d3b877c08e307b908780ec564b2da13bd912a28a284b1804fcac2244af25294514a30f2dd8dbf24200a04c78e5baff13

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_data.db-journal

Filesize
12KB

MD5
13fcb911475de8f425726ff2a105227e

SHA1
a71e12a67072ce8f64d4f067dfdb1fd81ce7a0cc

SHA256
5eb54e3ff99f4cc16dd413e3738db2cd61f34c821821c041a8d17e5d42a94f4a

SHA512
f93e05025dd49507cb3db04ad3e9adab191ef8474b8a981e285337a2375ff37c606fff57e96d51dbd158851cd3cc1b573a55de41308f92f3b469f8a60c87704b

Download Submit
/data/data/com.treydev.ons/no_backup/metrica_data.db-journal

Filesize
8KB

MD5
91012fec39ddb436828db990ad820f5a

SHA1
ede599f1248459401ea30adf44a3ef1b5a4eb441

SHA256
7020e2dba97739e20414a414396e601d707dc4c0c7ff320dc6d097243a9433ca

SHA512
674140d9d4e5b3f3ec263f00e48a342bbc1fdf94c6529e81488ab934122b9271d3ebcb2bed649e3792edf7ada8e73ffd16de7152fa41ce85dceab75bbff58aa0

Download Submit
/data/data/com.treydev.ons/no_backup/uuid.dat

Filesize
71B

MD5
b47e70d400c336e5dab823496b8fa7c7

SHA1
6b15a98f195712208db2c1e185dec67b5af3e2e0

SHA256
b880b3735f98c3912746b94e8a66757a97357e393cfac8ce0f4a6efea28ef431

SHA512
33335135b70331fba29702b1b2455779dcd4cf33761da57d7b67db70a40fbf523068b3bc79348b917a756ceba9de5cd74158c0bcaca85f9b593c898d6a247a3f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads