38eafd9d8ddd9efc5595442f4803529e926d1f231729785bd327da470c997a58

Analysis

max time kernel
522s
max time network
622s
platform
android_x64
resource
android-x64-arm64-20240624-es
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-eslocale:es-esos:android-11-x64system
submitted
22-08-2024 17:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Smart-Launcher-Premium-v6.4-build-044_build_640440-Mod.apk
Size

22.1MB
MD5

c6d807c6732ab778ffd66ddf370bde29
SHA1

e0e25086a88f67b189d465ce21e86b3117d1bdc5
SHA256

38eafd9d8ddd9efc5595442f4803529e926d1f231729785bd327da470c997a58
SHA512

a98a264afcd063b0e4edbd6c62ebe85123cf9c901b9d467bf40b059ec2a071e9b4443b36e5066fa98ccb29386d07bc7797268b5d091e99daeae90033b1d0cc6f
SSDEEP

393216:KRHYS5oxpm9SPqV4gdjGNCvOdk6NUG1UzetqBSzYUOEVX:KR4SDSPYSk6NUG+atkG3OiX

Score

8^/10

collection discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	ginlemon.flowerfree
/system/xbin/su	ginlemon.flowerfree

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4584	ginlemon.flowerfree
/system_ext/framework/androidx.window.sidecar.jar	4584	ginlemon.flowerfree

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	ginlemon.flowerfree

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	ginlemon.flowerfree

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ginlemon.flowerfree

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ginlemon.flowerfree

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	ginlemon.flowerfree

ginlemon.flowerfree
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Reads the contacts stored on the device.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4584

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Protected User Data

T1636

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ginlemon.flowerfree/cache/icon2371782520049302010.png

Filesize
2KB

MD5
3ad7d4823c38004f7156594df345091d

SHA1
3042311aa2b9e222496bfe140265b87083b47187

SHA256
9f474f4cbb9d8fb48d59468a8160c2379b5c97cf41030ff6da1573d2ef211aba

SHA512
431265dc3a3ba0bc6af330e80408c46d992f000a718f74507482d5b4dc66e0bff8c2252cc795d3ee8f1bc1441fa7e77861a25714c16473e74d7d1e902982d1c3

Download Submit
/data/data/ginlemon.flowerfree/cache/icon2373165706865506075.png

Filesize
1KB

MD5
64a8b7464b86554c7410fca9f613eb0b

SHA1
3bd1be69644334300e67ccde9f4965fd1ddcb8fd

SHA256
1f410727aab3b87da6dd9389b84d003dc4fb859c40bc4e002506611a8b2e8076

SHA512
0a30c92bc2876538f9a42394330fafe728ff53c0afce9f64c4afb7dcb301451e1f4ac41386dbfdf6cc65b1df215b6e9823ce891c72a4b25f917a46cf2e02a525

Download Submit
/data/data/ginlemon.flowerfree/cache/icon2432402044007296770.png

Filesize
3KB

MD5
dbc11281184dc4c7e44968995b2a6d6f

SHA1
8fbadc1d9f8a431882cc4578902dcfa28a9987a9

SHA256
6f2aff0361cef8e0645a7dfc0784506b4344b186db7d85e19e5a82d5a026f34b

SHA512
aa072d20a2690438d9f1e92fead8b2128d0e123b5b363f0d910cedb89d85cb228962a2efc0e1bf787f2f8343f8b5589d7bad969710cc2b76db3c6d427007823b

Download Submit
/data/data/ginlemon.flowerfree/cache/icon2900581708211190407.png

Filesize
2KB

MD5
f7397dedd2b5520afb716eab7167d596

SHA1
5fa6bbdd09c22629e2e1205238c8ada65b488fed

SHA256
6447c8f986cb32b067ea163078ec921b654b9254d1931a579c70f10864f6e8ca

SHA512
da26acece82b8fa977ac7fa10f31bf0e6ffc161db2bb7fa48c756be7c11938f534f96829e2f599fb6eabe4a7ba79bba05807a58462458c3ee262dbc977313584

Download Submit
/data/data/ginlemon.flowerfree/cache/icon2979455085964991430.png

Filesize
2KB

MD5
cb3b51af314b21fa2b662f43b45f8a08

SHA1
f1df9a595ccdba63115c1f902d9ecb17266d54b6

SHA256
5491cee0952a3d193f2b29102e7a1f30d91ad434a669076196648b3514075ae2

SHA512
dcf495f4f354817fc1998a904b701d2a882fc7dfbda40a3fe4b0cedd92d3a0e6154edd4a36267fa4e992330d30d42f45d83d3b06bfa62c6ccd4b4c4e032e247e

Download Submit
/data/data/ginlemon.flowerfree/cache/icon3299335100803506880.png

Filesize
2KB

MD5
24def572120473b5d8606cf0abf8653d

SHA1
a21fd44ff17af5b0d28dadedc2b6a4161b65e8d6

SHA256
3e78acf5aa49f3f0dadd70673a068eedd9cc411ee9fe92d7d037cfe8298fdceb

SHA512
0a24f5f2cf91554fb03706edee461b5fef0f6b8957e848418c98e31a0264e465b03becd65ea7c727d52263fc4c6f519f8671132680e80ce3879aad1addca5612

Download Submit
/data/data/ginlemon.flowerfree/cache/icon3690018287203236320.png

Filesize
2KB

MD5
7f44b976c06bcf78986ed43c3e32b0b6

SHA1
1a11437a4c235ec051e94e5f2e090e3f42300d4f

SHA256
b3b0e8681c4edc2169901062536232843efeb4afe88eec83e4c3e564e1f2caf4

SHA512
80384190b2667d4035aa1acbff0aa6b3c5bfe5064dbcdd60f0ee061b58484bb66d406371f20891d1bb3215a18e895fa0c9a596966665996d04c8e2876c48cce8

Download Submit
/data/data/ginlemon.flowerfree/cache/icon4147778908203575814.png

Filesize
2KB

MD5
19a88b372bbd8c25ff3c90eb2c586327

SHA1
7c821fd9a364a2a270acbff394a561852819946d

SHA256
16ef7ebac11e34e1bc4a175594fdf8585696f23fa613bcb5760e9a824915395e

SHA512
446608fffb686ed85568cea96012206617683c9c5dbceb72e421bb99601345a10fe23101fead12a51ef2982e9a1d549f6f382ca5582afb159320ba5897e8e6cd

Download Submit
/data/data/ginlemon.flowerfree/cache/icon4666835542100212914.png

Filesize
3KB

MD5
2bfd4d0f79f42eb4964702f60d646124

SHA1
7c8c15e27d942ee9af1e8885eb65e6aaf32dbe42

SHA256
def906bb250d5281af15c55da6af04a9abbe6c14df0daf0e4448ed5ad6bd3d75

SHA512
e577503e53ff36880e0c46660ad649c696f427ae2f4dc73f6bdafd5b0b907a8d2b7a95a226b39bd06354607c35f7de4e3c5213b80975e7e3b3ed9ba92a0074f6

Download Submit
/data/data/ginlemon.flowerfree/cache/icon5169703830494635574.png

Filesize
3KB

MD5
a9971a94ee5975db6050eeddb5a6cd1b

SHA1
ffc64fe2ec8277e116f9df98fab9a25b7c39eee7

SHA256
7495bdf58bf0dd55a51e9d623607b071279bc4a88df77fc32d1c550952ab11f3

SHA512
a119e7de55a732b38d162d25a0f07416b99bd5a5abfd40e25717d8007990912836757bbd627a14ccd045e36a713bdf76cd0848d053f0ce282403c55a9a1774e8

Download Submit
/data/data/ginlemon.flowerfree/cache/icon5632744002883944221.png

Filesize
1KB

MD5
9f92d95d5ac631f5599db182dc6c271c

SHA1
140761609a9a0da90342bd374d2c9c6d66aba4be

SHA256
bb41d606ad554623fc8166533bc564263ae2c8d98f7128a7272dbceccda41c19

SHA512
5339490950392747d18d2067308a0c7134c479d5505c5de6538d99aa06b9a146b302c187bdb8a60c6e28850f62b8c2ebb8919750817d6b7ac699aa6db7d43bc7

Download Submit
/data/data/ginlemon.flowerfree/cache/icon5654253820597114263.png

Filesize
2KB

MD5
1033ae20200eafffca6c0f5d052d26bf

SHA1
6d5d58a57cddf6871a99f4b99f0b81b851e96b8f

SHA256
048216cca0ad4792a4399a295328ce92b73de8b0ee0a7a7ad9845017bf7b7f02

SHA512
760de553cc9c66bdc521e0aca9fe7070b91bde4340aeeba827b22c29ba54a6a63124df769874da72512f98f6e352ae260edc4b8b873b638e9e265d60167a9bc8

Download Submit
/data/data/ginlemon.flowerfree/cache/icon5672231908885404884.png

Filesize
3KB

MD5
89f8e476e937af267f77cc5e01112a24

SHA1
48b6a9035301c534f6f82954878e7822bfa23d2b

SHA256
388114e63f9facbcc11f51db35e4d63b5a5fd8ad8cd5f1392139de5e92441685

SHA512
702395dc64bfe3e51024b987af56d9768c00c233e1ddc727ee543f866a4a684bd169a3300b4ec86257f790fb279fc024a2aebaf3064a23be5095f4c5fbd2c21c

Download Submit
/data/data/ginlemon.flowerfree/cache/icon7188775048380171890.png

Filesize
2KB

MD5
3b6c11cd0b02d1af5e23ff8321a77125

SHA1
289d2238fc89dbeb528035a6878d69ea6722b52e

SHA256
5deb80724707f7ec4aab3b710f0a31f2f9ae39b791add7934fb68fcf8ec5872e

SHA512
33f42d0effa0b7feecbd70d6b51d9ef184f25f92d333b12a4f4f3dd560f58ce3187bb96873db603477f926606b19592fac5752997058d27d520472d9667d63bf

Download Submit
/data/data/ginlemon.flowerfree/cache/icon8164929204063328978.png

Filesize
2KB

MD5
c1b4d563747bf8ed6bf10b319c17d395

SHA1
8508724d50039d0fd55acc80010444612a15a755

SHA256
442bb4782a87b50bcacf7fdd74e2366f7ba41870bf0c16518f28ddb6ef0d4bff

SHA512
1f2410a7aff633cffe02739b6fa8c6c74b602ae9684970f710398fbd5053f4a24a40d01ec3581351fac1641b0de577b2f7fc40ec4e8d54b8876c6da80e636e52

Download Submit
/data/data/ginlemon.flowerfree/cache/icon8310048452809924687.png

Filesize
4KB

MD5
83148034be36f2779f93e732665e503b

SHA1
ed9395a3e2f07964463e91d4600a71e98d70afab

SHA256
c0b1f94de6bf939955dfecdf0bda58273f1cbd46e5a2a9a9ce79fb23a5a47e27

SHA512
80709aa17b9395c213c8a0b9ad6dcd7033863b51853a0593f174d5b737840ffa82b8481c123ab219e2b2e589dbf8f3e5f4711807fc9cb28bbc2a184ccf464a89

Download Submit
/data/data/ginlemon.flowerfree/cache/icon8855849904003788198.png

Filesize
4KB

MD5
e1312e100549e817ac11a5796a886069

SHA1
9255ce85f9b596d01625b05583af6e4bfa035d38

SHA256
4984ed53bf9e3f517947a282482bd1b5ab8f724e486a39c26fcb400bcb395844

SHA512
875b5ff594dd8574ee9a669e18768f889005752ea35333acfdf5984107c05804274e42b1b36216df71cf502886979dae09e44fc948ed5562e06055add17e6494

Download Submit
/data/data/ginlemon.flowerfree/cache/icon8917700946974391528.png

Filesize
2KB

MD5
a7781026f3ce64cadd9b28daec610138

SHA1
4fbf7b1d385e40fb51e70d70c776ddceb498a99e

SHA256
f479e53e00ba64c36844d9203e52d0272c329b4416ef58eb01687399433445f5

SHA512
d54c17a2d2ce7ee44949d284744906cb6a6c114ea4f37b40b7a8e7725c18ab8ab607126d2bdc411d8e33a94e96b041e98c94fd26f221ac3a114447d1843e0b0f

Download Submit
/data/data/ginlemon.flowerfree/cache/icon95674900384606765.png

Filesize
3KB

MD5
90978e344e9b039c50072b82da1f53df

SHA1
7ee33d67f0a4c840c63b7e185c81e9e77ec5b9f7

SHA256
04fa3e2b562453bd6f3612ed1dbfb7286332a988d5002409dbeb498df12ac64c

SHA512
dddbbe49480f9c3c72a73af0fbc071595d676527a5af95fb005f6b796d369754e2338e0e1a9a66d9dfa04cce82302171ba02fb5c72a549fb0e6b9a9d5019c32e

Download Submit
/data/data/ginlemon.flowerfree/cache/volley/2065419849-438842888

Filesize
31KB

MD5
84e32c5f0b06102774ac018165198a2f

SHA1
128fa78a05427e0804da530d765f86179883b9a3

SHA256
5185e7f507a9703e63d2b9c540082508d04f723eacf186d65b5c3411ca56a0b7

SHA512
9f123a2b72dae280dec5832581fab6e31c49674a41be1c4b20392bc26aadf4011069a0cbb1a5d7bee2639ba8b2909cba14eec7a866a95d7a5f3821630950dbc9

Download Submit
/data/data/ginlemon.flowerfree/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
71c959f5bb1885917fa71d8078a66aff

SHA1
9c31682ce3313240d334a40647ec5b6dda6dd542

SHA256
24ad672d2ec8a1ee159e16a0c97e7ed67e8eff47938a346197f4977b5956e3a3

SHA512
fdac42552deb3ba2fa07c6891354a6035ce6009b7584ea6d39f741478db7fd36a179bd0a8109bfd27b436c48bf3fc2204f5c0550bca76db38e5caaaf46785a00

Download Submit
/data/data/ginlemon.flowerfree/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
0e62f2592d93450c0457fac3f9623c1c

SHA1
a6da24164effc0872d62067793dcb5975854fafb

SHA256
c2a04168934767f93f3151ca8dca8a35bedf7731a6378840ea81eecbe84be60b

SHA512
0e3642af674f4bc44201eb824091ef2095f53c021be24048d1b795b503d557bfc08a56b5518855b072c174a39e4b76c8fec0c8e3ebf35b011c4f9d0c2c8644c9

Download Submit
/data/data/ginlemon.flowerfree/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
335ad17876f39a5e10ac54ecb03754d9

SHA1
e4756fc62d114310ba1df928e1cf0780fb2ed281

SHA256
bc006abf8a283c62103e36c30e62ce003ae2a46d44d46582260f21acb3f43a69

SHA512
e9acd8c4abc3f89cddea983e114d77326b7c70bd5a16ce8695d1ed496c1e3f0ec8253d61c41b5a04e8af271477ee65c9c39d1dc05baafdc04974807a8d543c07

Download Submit
/data/data/ginlemon.flowerfree/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
4531175da395fa83571476c049c41388

SHA1
de4a7e1a6390cf2102973a516c74a5596a3c83ca

SHA256
29a9a188ce47877adf61afb3ca5be1b25458ea923df0c81ceb68790418f8ac53

SHA512
e8c4d881176432688881d2420146b7c3f31b21127fd60bae2be47a9506d53efecf97ed05963f6a454ca8e253108797ff237c283639624e357b0da38d2fdea022

Download Submit
/data/data/ginlemon.flowerfree/databases/contact

Filesize
20KB

MD5
67253117fb7bd9a9536124e96c5b4a05

SHA1
b85b81bb064e0fe7861fa28f8d882cee0c96195c

SHA256
80ad5fe9f36a866e93045d48b6a91ed6d4119ea3ef4b3d3c7b34b53d74d341c7

SHA512
a0f8b2078f58d25847628d83d38ea6121c4116f6262500aa91e9846318dcab38d80c443ced81a16020c63fc6058adfc6a579eb8965c5c95b06d30af0af098dc7

Download Submit
/data/data/ginlemon.flowerfree/databases/contact-journal

Filesize
512B

MD5
eab73d9211466a75bc7c7d33c3cd30e0

SHA1
a32fb6795c47975d2220a501ef9a17498116172c

SHA256
082499b0e039f8f9c3cdf603c7297f628558105e31a78a4b8179084daf4f0a07

SHA512
9edd00cd0cec7c2f2f368ba898ae3bd85ae7279189897f2db699995695788a4e735b527503f8bec1f403501834e1ab2316bcf8cee706983f963b5db1b494aba8

Download Submit
/data/data/ginlemon.flowerfree/databases/contact-journal

Filesize
8KB

MD5
9cabc501952d2a522d779be3636ba47e

SHA1
eb70da105672b8d07d306441986b8d525174a4cd

SHA256
dd5c5f34b6ef1a70ed9c3e66b5d6afcdb34ee911933fbf70618067a6f4b4c25e

SHA512
66a1a1482484894cf248202379e3529b884ef8bcbbcfc7be025de4a094b584f204679c9d239ce8e2997c4e8b47f7451cdf2964a214303738b2f23078bb2484c3

Download Submit
/data/data/ginlemon.flowerfree/databases/contact-journal

Filesize
8KB

MD5
fa51f5c5e339e3af07fcb19c4170acc1

SHA1
d3b4d49fa23261b4df1d64e114a3be4295a66d7d

SHA256
06a8546f08462cba7a2e22775c67acc61cbf513f140e023512dca0ce86e68759

SHA512
fbd915be1c7e59caac51ccb18057b578880f87de72c5bf5073bb42ea1716226bf9bd130c1ec41e74985c9a6e1645efdd48c24dde48f9f897e4fdaf17d6f56aea

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-journal

Filesize
512B

MD5
c1aa5b8feeb88a83b284f60defe4b305

SHA1
62aeb26d552c227a88ab839eae702f71d39532dd

SHA256
2f11f3fc621f01b0fe0aace265f16cb65d6821c372351431578bdaadc9ba7753

SHA512
78860e79733c36e27f7e568eeee8ee4e6f03187d76d5f7014b407716a2b814555b0810a206cf7dc3b48b428e98f76aa053bb89f7f41ea85e0b21405f9ef18cd9

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-wal

Filesize
16KB

MD5
2cdbcf16dafaa13ee75d06c9f7a65f21

SHA1
bde5c097c03bf21c4cdb274ef01a1c088475bf82

SHA256
79f1de3bc1d8f3263529f3a58feea5baabe653a7e0e9be9f218fac652e6558ab

SHA512
6f4e23760bfe232ae0ce9f6af9b8e8a6fde7ed2b25b1b9f46cc112b0be2ce6fffc1f26b8b55d776cf02c47cb3f033efc3bc539f8120d8ea90b57989efe4fce33

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-wal

Filesize
92KB

MD5
d52e715bbed26f6a96bdaab205cf2884

SHA1
71cf603537e10235f03856551f0fcc7726e5d9fc

SHA256
834283c463e83a25c59851ec29783108cfb7ee4fcbf599f1ea848acfcbb2dcf0

SHA512
ee97115dc07b16918d8f5d0cb5df75c7ae0a448c07f8257d013bb7ec980bbeb7a10e8fc1df4d0e352702a0d3c243dc25be83b552cda9c17361d8c38a55df3d8a

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-wal

Filesize
100KB

MD5
b46cd39e08ef74ee90192769b974afd1

SHA1
f302fe2c48f3ee0d38504aceb1afae328bded02d

SHA256
fbd0a0cfb6d83e71ad7807ffb14c3582a19c9487558efa0e41498390928b40eb

SHA512
80f7e5fe0c5ced987d00b3cf5e881b297d0cc14220e132262b22edf15583ee25f9b771f414114922858b6b9743e2fc0724be89082f24396dcc02252af062fd4e

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-wal

Filesize
112KB

MD5
4941e18762aed3af127e6fc95c6391e4

SHA1
829673a2cc445bc21947e5b5422f3cccedce2833

SHA256
788e2aba242366356e697726719583119a350662a33926041a0860529fe4bd28

SHA512
68c39f0a03e146a66dbc53f27f37eb36a194f4d34d8b9beebc5dc01074d39f963304983fcce17ab635b98e8d5ce5a212044b9938efd44ef75fc7eb375f8c53cc

Download Submit
/data/data/ginlemon.flowerfree/databases/ginlemon.flower.db-wal

Filesize
193KB

MD5
423602cb6280ff332eb83e91eb80d384

SHA1
90265b126bbbbc071e1241f85e5a649eaa082065

SHA256
5cd3fd061e15d49d7de094ca40c21f4d74222019dbd4c5e244561b981637be0a

SHA512
23daca67acdb7816e129aa351ff23fce3100dc947fdc6a9fe29148f302ca5156b9c189a13c93dd080e6302a4d86dbb24d89f62b16f04261bb39c2b615e2d1abe

Download Submit
/data/data/ginlemon.flowerfree/files/.com.google.firebase.crashlytics.files.v2:ginlemon.flowerfree/open-sessions/66C776E600F8000111E809DBD41B2B47/report

Filesize
761B

MD5
aaf1e2c202e6979f281a1f51b5894032

SHA1
703cef8e47fc1922eb18d8e65f0f04dfd63ea498

SHA256
eca1086d9ad276dd8c98365d403deb27e023f22a5a07e92953634fafbdaf55dc

SHA512
aaad5011d641bb441d407a8f2448d097991651491f4ed9fdb0b58fb7e86ed4d056c27506ebf2755e2b4a852adc8e524055f5e9c80dabf44ce70fefdfe1ee96c8

Download Submit
/data/data/ginlemon.flowerfree/files/.com.google.firebase.crashlytics.files.v2:ginlemon.flowerfree/open-sessions/66C776E600F8000111E809DBD41B2B47/userlog

Filesize
3KB

MD5
a52cce7bd1491916f487c73e8c7e489d

SHA1
13a0dca5879ce90bdf5b5eca7e26115185df9d2f

SHA256
aac96af27731dbcb79ae43d173f09e553db36fc06a5fc23cfe2cf454c5a6e036

SHA512
9f8bc58c950a001523a2f79bac4b6df1e84325455b35154d5be523efa5f3873a25ffef91377cbe5c760b4b88c572b6fe62ef2334e08ffe213f50c5d79dc3f885

Download Submit
/data/data/ginlemon.flowerfree/files/.com.google.firebase.crashlytics.files.v2:ginlemon.flowerfree/open-sessions/66C776E600F8000111E809DBD41B2B47/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/ginlemon.flowerfree/files/PersistedInstallation1580854824040225441tmp

Filesize
561B

MD5
d6eac83f675530cf7b1c2538f1642e25

SHA1
92145ce5cc18270f038aa679999944070907133e

SHA256
52668f6d5a8ec2044d5935cdead4cc3cd57effada4026b1696b83b82fb3c4ad6

SHA512
32318b6f470b85426acc62ae792a8d7336def310104d2dad3abfe4554a97397c5e232d13b16d62170b80b334bf8463ace7931ae23a0aad1acff01c3b4c42cbec

Download Submit
/data/data/ginlemon.flowerfree/files/PersistedInstallation2829248290600126565tmp

Filesize
90B

MD5
b33c3c3ee7c871a49139052271239640

SHA1
99fcbab9286d072ce027c5c0b0e7b793c91bbe06

SHA256
6b0d76f5c24f42b64682e89258ce84ee14ceb128406356c50478f36427741aba

SHA512
12347af70e3c8b5a35e45b5db9d8a498537489fd5cc3e94ea7684987fd3c758b398a6a78b8977139cf5f0de6c43d29ce0168ae41f10d7e2049e0e7f171033829

Download Submit
/data/data/ginlemon.flowerfree/files/frc_1:742016107297:android:46b7d69680997c2a_firebase_defaults.json

Filesize
2KB

MD5
6fef1819a2690da9fe8265f23a85db46

SHA1
4cfee2d4bc56a0429de87fca21fbdd3457b0b65a

SHA256
109b235cae2d13a06c6da438147ce1cb320f8d0d27b1788a8e782d596726e8c8

SHA512
2ca6fbe0372487c9c408aa147214f236e2cdd1afb727d581f839c45a957ae5f7a86ebd05a770b04318f09a1988ac051d1a4457fd1c2afb10b167733e915a4599

Download Submit
/data/data/ginlemon.flowerfree/files/frc_1:742016107297:android:46b7d69680997c2a_firebase_fetch.json

Filesize
3KB

MD5
b89ce82564f4679a6ac30895af3ceed6

SHA1
7ab51b136ce25c0c1b05a41e4aef773e55db3e16

SHA256
b74848fcd620cfb07a82a421b1aec10eb6c719ae6b137fec61a69ed00e7020c3

SHA512
f11dc92de35d9afa20e58cc1ba5cc5e676767d2a1285149e22c34e1405a665691f074e75e5d2a047689f99f6b10a09aea7906536e87993f4fc6947c7f495e176

Download Submit
/data/data/ginlemon.flowerfree/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
d07c00ed967eb68f73c3cf44773341ba

SHA1
0699f8567d9b4824149d429e61eb785a17acd096

SHA256
74e952354ea1354470071da3d0c89c01bf3f1e69d2d935d9ee8e2ad34648f0f0

SHA512
d88d5d18c4eb812d409a3e04e4c2d10e65b5de67617155e245c883121c4f9062d205179e341bd9c468563bf28f6487e68aca9788705d3efd2c7d000507399075

Download Submit
/data/data/ginlemon.flowerfree/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
cd7884ef7048827b4313e8c19402f7a0

SHA1
cc0ea9bb69a6f887316b458a69ce33e3079db05f

SHA256
251852ad6812628b0f1ce7eda9915df3879dc18445e62075501ad5e134b381c9

SHA512
918f142cbaf5faee856dcb2870db970f8d0ff2f8f5cfc34bb9e26bc2299bb4ef6042647d61a2d8d19103fd3cb7aac0c60c071d7c95185aa1d9cf22683b105ae4

Download Submit
/data/data/ginlemon.flowerfree/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
4896d02f6b1e6e1082c9ad06018ed9f4

SHA1
b6efa0094d66b756fc94419882a0e92130d30341

SHA256
4cd89bb4265e569fdbeb8318dd0329ea5a140ea201a5695fe1e101ebc4c55f95

SHA512
0a65b746f64134b34af2a26e5409ef5b334611178e7b9deb6142560ca800fc8ec798346de467b47eddeb22805411db754c0cd788274f5789e32309b90b9373d3

Download Submit
/data/data/ginlemon.flowerfree/no_backup/androidx.work.workdb-wal

Filesize
265KB

MD5
d09bdd99c34b53c9aaac36459bcd0e9c

SHA1
60942e9a690107d6a4dce96142013dbfef7d979a

SHA256
6ebc7a963d27c782c17a81b5c6ad00a663d23d39f8436a2b48b62daba6ff3c24

SHA512
ecc05cab41a7d018b81271a3247737e6b88defd26095fb193f84d7fc473711a915e44f9ff8c185c255973bd648066f0f77a887ea8ac70e7c625ba9a8e0417fc2

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads