a43a53931929286763e2c3b49e1e54d2aa9146c8eab160353f9a84bc1e9544ed

Analysis

max time kernel
47s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
01/09/2024, 13:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ccleaner-24-13-0.apk
Size

42.8MB
MD5

17160244d75580862ba6e7a477c5a05f
SHA1

79f31ce482574a8d59c2ca86bc6d87e9f410ba8f
SHA256

a43a53931929286763e2c3b49e1e54d2aa9146c8eab160353f9a84bc1e9544ed
SHA512

10e6463e700e05cb144a183db9bcac05656ba20a740641ef7d0008355c39f4fa9b33dc17bef94bc675ab99d257ad8b5e0d629aa284e0319b28183907b51afa03
SSDEEP

393216:YM21Wn48weVNrtpkQylH4zu3u8AsSW73QZlHuw2Ef20NN0RXwrGye:6+9wMNTny1Eu+88W7cHuG0RArm

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.piriform.ccleaner
/system/xbin/su	com.piriform.ccleaner

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.piriform.ccleaner/files/audience_network.dex	4269	com.piriform.ccleaner
/data/user/0/com.piriform.ccleaner/files/audience_network.dex	4269	com.piriform.ccleaner

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.piriform.ccleaner

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.piriform.ccleaner

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.piriform.ccleaner

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.piriform.ccleaner

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.piriform.ccleaner

com.piriform.ccleaner
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4269

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.piriform.ccleaner/app_shepherd2/shepherd2.config

Filesize
8KB

MD5
903ba488f6ddcb51ca62ef09c5f448f4

SHA1
9ef745d00ec10a4d73e4603e5e453b302d9f305c

SHA256
85800eb6e55fe18868a151bd36fadb65ab4ed59773e1a52d031af98244c16d30

SHA512
0f8036930087fae84293379985c9418f8f8dcfcdd0e9daec532e08879e9177be32b425ac9738b2f0896300c1f82a5135d661006271c9325c7cb7483da5c7232c

Download Submit
/data/data/com.piriform.ccleaner/databases/cleaner-journal

Filesize
512B

MD5
a569a0d982827d3d2b035ad8d78a7359

SHA1
b0d99f1e39cdd44c224ce93003f24eb474aa1b25

SHA256
1ce65b17818204dd21a2379bc6a19d32841fe496b61ec210fae120bd5becbe7c

SHA512
17cb8a5b422fed3b9567bfabae8af39843d51d9087c5d6ed9df2f0391afd0052b8346f124ae42f6d9e57c4b702590799dd7179f3c29109081d5fa18253ed22eb

Download Submit
/data/data/com.piriform.ccleaner/databases/cleaner-wal

Filesize
16KB

MD5
f2765f8ca4c37e3281d462d2f63c8c65

SHA1
4ff914e331059d521023197343a7521bc393de4f

SHA256
d35ba4b29c893ce8046c3d2741cefa06f848b0dfd0555586a083f10b7772c211

SHA512
9e203d5da80d5fbeed7cd9dde2da182dc15e4a8796f2b58c85bb73b2d5e6e06592ec9c65804919c01e022832f8bc4f3240349bf591916cdb64df0f92d625d1c3

Download Submit
/data/data/com.piriform.ccleaner/databases/cleaner-wal

Filesize
80KB

MD5
a56dd6639d414bc0bfec30713e6f265b

SHA1
97ede83f7948c5e87341f2fc00719098dd39bf01

SHA256
8a06b9dc78ae6e8dcd99b5e8cf998c2e3447eb11f08c738806c653c9008bacd4

SHA512
113ce3ed915039f22938c2f7220bd67e7282440892335b9d36f6d8d0b00195e416f4591152d1ac258f394b03aa8cbc6186efb01d3a8dc7acf0b59fb2861429a5

Download Submit
/data/data/com.piriform.ccleaner/databases/cleaner-wal

Filesize
88KB

MD5
b7b58e31069f0c86ad02c2bbefa42b91

SHA1
1a19aa02ef9968fb86d6f3f3f1173685ab5fa5bd

SHA256
d448586cfc52b8b798973e7413f09a507f2344299ecea6ee8436d6509a327644

SHA512
9de349559190a5b8bcd54374e4bb1be3fb46c2eb645598ab44151a46f1307f28d4f964352934861dccd5873ac896e7bd4755bb783ed7cfb67f3d9240da2993ee

Download Submit
/data/data/com.piriform.ccleaner/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.piriform.ccleaner/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
d9794ae5665e879fc6668fa3a64167f3

SHA1
8d7fbea11f51f33cb41fc70e9c807e48840c42c0

SHA256
47ef7b142c353f247913e89c22e99a43c6eb4f5ea198461c04cb33630e75dad2

SHA512
450a4149e7b8c33240a64200068b892fc14c93e1d406ec168da0b7ae230c5e0503b91a42fb857fe03e4748c6bd6f1e1c98ba43d81b245f84840b29d5714612a4

Download Submit
/data/data/com.piriform.ccleaner/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.piriform.ccleaner/databases/com.google.android.datatransport.events-wal

Filesize
169KB

MD5
e65f33085751068bb52ca6497eda499c

SHA1
35c8c26f3bf6d9656c9c38652aa8be0b9f87a186

SHA256
4b70831c902a0b5c6123c1c6ba639c7c805a797d20b9809f99f9754fb3f42446

SHA512
bf6cf68408b13fbca427f9350f67798bbe02a2f552e23359477b5f7a8bbf1f22a799955cfe1f26a76b7dc82e7f32e24466e8da26657e4f6f77bd42f0da06397c

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
aa52493cdef4ea08fb9b6746dfe6f81f

SHA1
86fab522073675a11bd3ff8f81dd2096ee47687a

SHA256
b054fa50aba4257493f84a7730279e507e86a707ecd0d116a7d0e964f1269387

SHA512
c47d20961eace4f0f3f9980ad0ad26e8772ab8d0b371c7665ec5083c01a28690458face2505084adddf6fdadb0cdff980d0cc6ab0c43e7697c3b2300d0e89dc7

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cc72b23709d071124c4baa2780ac5723

SHA1
a42bb65d8714bbf84058a9b62c34eca5abd9e2b9

SHA256
4f1cb35f252ff01162291186a5c093f61bd59460b87154ec64951ce839a472dd

SHA512
f60dde6e4db1f5c1114fb49d71fec8d9c31d259ca41bb0b05a582faa9e51931daed42be3aaf3b802867e75358009e67a432d39eb004c38f2bbad5304597d4b28

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
62329a5e9a05a93ca29ddb62356fd0ae

SHA1
4e28b2d43872dbea05e9b4fcf1e9eadc0c95492f

SHA256
5f021a968aa028963617d999ecf3059a6ac8d2d37f280218d6d4a29bbe0f1ee6

SHA512
222051809e47b70d8839db7e0cdfa2365a3c1240ac3acd6537245e3351f9220965c31d25d9d66465d74037ae797f0188356757052ba9efd17c8d4f9d5fc4b858

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
35e2803d507c8bb9c98369a0ccd5973e

SHA1
4e54f9681c59af3909f0386185be9c142e414441

SHA256
c2f1b461b47f660c4eb0a1a36514ff74fd383073f8449ae3fedfb065413c45c7

SHA512
9384c30224c65ba97d4c25c945ed90d376c860dcd4a599a7852a448f65c64592cfa0abbd4d07e64fd164111aa9668f6320fb48ff9fd9d926518e6f4a19479890

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db

Filesize
16KB

MD5
39e47fe55357aa389a0763d4a22b0207

SHA1
cf5a519c79df81825464f6dc4494c6c2f22cafec

SHA256
df28b2d4110c9358fb44fb68a8a817fea7dc43b5fe11572e7c6846b344dc9b1e

SHA512
ec1c52ffc62779d5c0a6f57775f980dd267214684e7658f3060ff9d0cbb2b528467d51b1b481c722158c7269f7652d191338e7fbef7fe9e02f6e37a58a6d7d5a

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
96a37efcd3fcf67a22cda54563edabce

SHA1
13eaedcec97012b5eefd7a2075134d6d3de936d9

SHA256
9fcb7351df4357065464944d3c0a6ee080b95ffb9649cc6e846e30de8ee2a2e1

SHA512
baa2ba22835dce373396a0bfdb1d7f83cb35591145d90e168a00a91c18baca7e2f655c2474f45d584bf8378c916707e213b0ed96a35a0e955e4816d14076bd36

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
d964618b4f7de62399041da5e415728c

SHA1
88aaccb03214a6f8b9fa805e27d3654069488c9b

SHA256
a3915d3bec509f36083513263d94cbff3a8a4da369e9190b59153224a2151c71

SHA512
3ee50ff0f2145e985a5469e0856fe1ab469773fb801130808f828825d4c5dc02a46348ffc0651a05b53b5d43f137bf613ca64341760dc101c7da458001bd3e14

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7052966409e33e0429dc288526936eef

SHA1
0044411085c739458d1afaf131d5692de06f4b9f

SHA256
1fc928fe7d5c677940c64297bc11c947c6e6c2d46a1405b7e5bdbab39701018f

SHA512
dd732ed6e8c548d7fb07d9c4a762c069e117b5bcbdfbd496e64af9df461defbb8e2bbec2210bba91eeda7ce4f63713e2163529b5bd3411b9704a8052c36bb372

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2138aa385ac9dd76577656aec25658e5

SHA1
545239484777abe90dc0dc17bc7782aa1ad76c04

SHA256
9f847d56a18b2104c8347a9b8ffb900bbbbb9585915e33a9628e57567b0fde62

SHA512
f752ec53daf1480f1d3274bba72cb96ffcbb05f457c1a654b7910a6e246691f7665929fd7e69718a3e34efa318bed693ac06ff83c09d4298201765cb6c15c3a7

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
0acb6037226ba1885f4ad901a4073313

SHA1
6079d29d95441c474c6e198f2f5aaa33adc36c35

SHA256
d0dbf8dc0275bae1b8ab1fd6f9c2296e61101fda0a55937a8c65cd781d587112

SHA512
8dfe2f65181de2f2db931ec1182562868ec0a1d4935c5633f219ca79e8aa5dec704c874119ca19adf35004e62861d238df28518a249cefa03612fabf9ab81873

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9b221f58b96697172062011c5e2c0678

SHA1
271fd7eee810a33f53fdce59386d6275b0bae60a

SHA256
d87473273c2a218919dcbb4e72aee3fe27bee4f33eafdb1dd8d934650cc831db

SHA512
d68575c7ecd7d18985b1eadd72b5624bc534af09329cc2a6b301de52c052bd746985285037e8a5239087da5bb4e08a7963f074a8d7d850ed7003be9c1d576969

Download Submit
/data/data/com.piriform.ccleaner/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
af8054509843d1dff47fbc17e71f8c3d

SHA1
9b62839f9d677a7f2f1c22f1b4e0a328a72cbfbf

SHA256
7565bf62e6fda25cbf9fe546834f853870a4dbc783c974f82c5d16996310932c

SHA512
1b0d6dfd9a19ce4b6430a30f3eb6f57999dd5bfed853aec3c1530082ba0bac3e75b94c78962798ac0a0ad9d05bc03cd22ff1e0d94cfa0f5955ff981e679e2dbc

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/com.crashlytics.settings.json

Filesize
717B

MD5
16ec081741bf0c88cdb77a4e34f5b594

SHA1
7ff38b23c9e785e8c5051b50c4377f47f65338d1

SHA256
f1b471ca4184c2765e0f9f921e877b3037a642935966d75ad004e580a62f6d51

SHA512
1d4260bc73fdc4e7b7e4403c28131f99b10282280ae55659fa5432bbb506708f4f0fffdcda40ff9421397085393cac1f60b7fc21077e1806cd72223b45311b86

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/open-sessions/66D46A0E02D0000110AD0DA7D5CA5D79/event0000000000

Filesize
3KB

MD5
7ee86ad877aa439eedc4dc2a6ec29d18

SHA1
fb3d25fa4ab4598a2d92c043634d7f15618b67ee

SHA256
b5fc19418cce49d09dd79be8d531fba2526249f319ddaba9c004ca4afde86ffb

SHA512
8994874d27fbbd6d74412ba1c96978462a3f884fec307c09d5c02fbc241f9c904633373977fd69ca5e96236464d531d6db8fbd96695026f7d76c256567e919c5

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/open-sessions/66D46A0E02D0000110AD0DA7D5CA5D79/internal-keys

Filesize
207B

MD5
00c7c6f7b26a87fa160d353aae72dfcb

SHA1
5bfbdf21cff6458b290890e5ae57c77fcc2efdb3

SHA256
25ea93888d40a618f0994f23d13e1b6f04eff8517c23bd39ef09cc1caebc0d31

SHA512
3fa4c23d78bb0a1198f5688c8d330f75e5d2b0181856a00a902f471ce045f3bd354cf40a12768f1db8545b2ff42c8aa4ecd9e11869d8613e9c86211f4b91db36

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/open-sessions/66D46A0E02D0000110AD0DA7D5CA5D79/report

Filesize
756B

MD5
f1c4a13b13d076cf4b1e52bb4b3268d7

SHA1
c3cc72e68ec0cc00b0836c32569b00c6788619d5

SHA256
86ca4e212b4aab1b83e7923be0365a28030cd0f15ce8b985b1168469c8646cba

SHA512
77858361271176dee31c8768278a9118cad2851caadae1dcf2fd4992889e088418e719d970e7672409847e803241df76667cca818160f751b0eb882fe3c99ec8

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/open-sessions/66D46A0E02D0000110AD0DA7D5CA5D79/userlog

Filesize
834B

MD5
30addef93daa089c22483be6a3155c01

SHA1
0276b0bbd5f1d3c171ef7109c1cdb5aefe132431

SHA256
df663c63d98ef08549f8ad9f43751a2eea9297a148f8ad341ac71199c847f42c

SHA512
bf6380e458e0e9bdce142efd996e0061fe8da2e6fd02066e3d45d8730566218f0c62e2d715bdf3d5a8b090d8a273aa89af039ba200df1460d0fbf726a82e2b1a

Download Submit
/data/data/com.piriform.ccleaner/files/.com.google.firebase.crashlytics.files.v2:com.piriform.ccleaner/open-sessions/66D46A0E02D0000110AD0DA7D5CA5D79/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.piriform.ccleaner/files/PersistedInstallation3758864982476543973tmp

Filesize
561B

MD5
6e2e2ee57204db19fb95243583424d10

SHA1
11bcf4a6f7a2c9570204dc705e43a72c49256d5d

SHA256
497a2547d3fe8d76dd43687e5a468339b4dfe641b3303c856a382b9165521c6e

SHA512
58d60afd1ef12153c9b2ad32c9dc613e0f204e4bf48a27d3c93936e31159a60a5e726186643da1fea688b4a7238b3f906048ba578aa7f1aa590b63b6efece17d

Download Submit
/data/data/com.piriform.ccleaner/files/PersistedInstallation6396127372350758563tmp

Filesize
90B

MD5
468ca751b462ef9332e2878c10f4bb5f

SHA1
f31aa8f6d0b17bde70a5db2a83c0229f2c718b7a

SHA256
2bb09ecfb78105ad7641861bc2b9ba91194272378b1a589d81c6a2873e889464

SHA512
c40424d8436c6b4bfe213c724178d284e67114070ef9634509a9f977ab99b8b89206417c9facc8d4fe9c5ff895f11b127c143f3c5faba79aa4b092918677b71e

Download Submit
/data/data/com.piriform.ccleaner/files/appcache/com.piriform.ccleaner.png

Filesize
5KB

MD5
0c9773cfed3c7a605df9f66e33574630

SHA1
65069542d6ce414dba2af8793f899558a5194e85

SHA256
c299e7c1d05aab0da6be1366691a19fc3b8197e8c3e25d825fb4c4bcedca0ee8

SHA512
55ae255cf8e2799a29e6c903ea128315888c8c0975314db938709764e133f8f42d21f92ee30b928ba6846af0a96f2d2b2b928e3241f262b611ff9a8b3619b6dc

Download Submit
/data/data/com.piriform.ccleaner/files/audience_network.dex

Filesize
3.1MB

MD5
9b8164be4f0ffaedadc82125e5346c14

SHA1
c4bf7a6383958b493ed5c4dd6a19862d366fca4a

SHA256
8e632284c9b0180ef28e309b4b0f282ef608cfb9d9046df899d8bdac227ea9ce

SHA512
352b3e9ef70839d0850ff7ca4a1f19f3df546412ae5cac1243a80588e573fea6371edd4c408a2edf1b48d70a10a5cb579513d3cd38a4b5ccf4b7528dd28704a4

Download Submit
/data/data/com.piriform.ccleaner/files/frc_1:194358244141:android:b8a787d6bff94501_firebase_defaults.json

Filesize
991B

MD5
062bb0370b969a6bd12d6260b9bdce0d

SHA1
c3943260aed1ea3d72dc4c9b68b0d80b73236f15

SHA256
b35f09a96e7ddb3aa2567e9609a79b55865a247085ee8126faf2c99c26d8676c

SHA512
899afe202d4a2a4bdf917a5ecc2169db7f929c953b561eca287a43ee2df2d9875a29605da9e010e9ea8fe319d138510eb734dd3ee45b2ec475c9b9e1f9200f69

Download Submit
/data/data/com.piriform.ccleaner/files/oat/audience_network.dex.cur.prof

Filesize
382B

MD5
641ab805b6bdb9d3d46a7d6ae113a274

SHA1
d48414c26212a0e6c1909389c53680f94303fef9

SHA256
092546609bcc9694f417153c2b4a6765044be98613c188467fc7f9eb122f4126

SHA512
4e66ffe53d54e95200bdf9ea424e2a8cfcc5353fd31f2252e7d5a281f138306813cb30b2b5169e12ce30f9fbec26786e02d703af0f5568077c857425d30cd9a9

Download Submit
/data/data/com.piriform.ccleaner/files/profileInstalled

Filesize
24B

MD5
28266bb12fbb460ff0b9121708904dcb

SHA1
5f5859c9cee0a821c6c810ea4d324331e74d6be8

SHA256
4c649ce7e5c068d676c38670883819f724cfec05081487a0d894dddcf4e08f75

SHA512
0eea9af6b123422e59a9c91c1b54df8afd6c181b4d11505498c0bdad93b7cd0f4d345469e053180043b5525ef0429ca9fb5b5512c3aebd003fb1e8ffa2647e75

Download Submit
/data/data/com.piriform.ccleaner/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
dfe89a0c26b195ee6d43681bacdc56ee

SHA1
c37f1f010e640fed372723b5f391e605719d668a

SHA256
50c63b2659beb24a1dfaec362d18108d77b7165286c8dea4457262608b3b091d

SHA512
4511aafa8893a0bdbfd43b16a5d7f972b42662db3deac61ec1eceb295abd803673fd8a35f930667d607149010fbd5f2e4138648c9f8bb8476019012cad51c9d6

Download Submit
/data/data/com.piriform.ccleaner/files:OkHttp/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.piriform.ccleaner/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
3ca77f3a32d1a87249ac5bc95da9ea76

SHA1
b070ebeecdd700cc7c0f371dd59585599a7d37ea

SHA256
fb391271a53c14c9b9ca74a4f9556346b428195d45762ba2a1d41583e888cb19

SHA512
212bbe24355b39dd2f1f62695c61b9966aa448f8345acc21a474ce8e3557c950ae9a96a00b887f1228fbe1eb6429948fb6cadb7be57f110b02345d752a68dcfb

Download Submit
/data/data/com.piriform.ccleaner/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
799af032ffb542a0ad079659ca1ef306

SHA1
d4245115951dbda5da69686f7bfa2a5b62f83f81

SHA256
1d459ef2570b0b5e154c471c149703dffac6082ce3880a3c4ad430d056d8c42e

SHA512
eafd520e8fd0fe028ded0e28e30fa427f834bd473374e332f1650e7dee7af7de00e189fa3aaa8cad392c60fb81152333f5207a7969ec1973637b870be67707af

Download Submit
/data/data/com.piriform.ccleaner/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
3b79d626851408b0b33d1322cc89dd43

SHA1
7cd1918b0752aa1b00ef50c95575f94523bd119d

SHA256
3b54d9cf45c64154c1cf6d3f4ca3185c81f80a079bf4eb5da4b0ef0fab5c9c52

SHA512
dd0dd41b180ce7c87303d9717a46371efba7fe92bcda0cdc8df1a24e8f61d1ca93d779624008738da905b3b9bbfc12cc4f91bf282f0d94a57290c421fd5f963e

Download Submit
/data/data/com.piriform.ccleaner/no_backup/androidx.work.workdb-wal

Filesize
261KB

MD5
11a055a8f113a2e97b6741a1ab7e9434

SHA1
1b06d006659f44c6736970dcd578364db46de06d

SHA256
d3c8e0a8262b37a5b39bd234872efd88b8def0987a38745bb8bb8c6552035a99

SHA512
a623f97af272e956e11cfdf058ec59d817524e731403c5ebaabd434249295b49aa2b7a6936c8c77548a2c76c8577513237c275c388dab09c0b5efad5c02bbffd

Download Submit
/data/data/com.piriform.ccleaner/no_backup/collector-files/logcat.txt

Filesize
8KB

MD5
4332f6c2d9c6411a215594f0e824172a

SHA1
4828ca66f7188432e63a7207280d7701139ca9fd

SHA256
84d42de6f676570ba2d22e763a7dfe7838f96c32a3837b6b26b94d74068a2f15

SHA512
9f0fbecd520d9f1a1aada182a612afc578c24f65e8d41b478236c29fd4a78097bfcff4e1055ef78b27bdce9b1cdcccd05fbfe6fce7d7e1e89a97f26b2df6284a

Download Submit
/data/misc/profiles/cur/0/com.piriform.ccleaner/primary.prof

Filesize
9KB

MD5
4d95b5f9052361e57f312aa38b666522

SHA1
469069e1b7758f4250c4cceb489cca4b47529f27

SHA256
2707df996940f3fb5c02f917cb08394c068fbada9b9711fd0db261323aa09d95

SHA512
d9d07ee07e1af18e643bbfd723c7bafdf24bef08598fa5a751a45ab0f2f49fe69886d65e8d36a7cf9409aeed76681ddfe3992a7af338cd1a040280f8cc9c766a

Download Submit
/data/misc/profiles/cur/0/com.piriform.ccleaner/primary.prof

Filesize
34KB

MD5
627818f66d0b4836c2d58cdd06b94d4b

SHA1
80ac865965c2810d0bac3e03293e9aa18f584791

SHA256
96a36d6f7b8c82bc7a4b4b178654d31754de428ee0599a58f37f5109cb9060a7

SHA512
3c926f1f1288ecb42d9330161861070f95285bd6f1ce67c839aaa8f602857a154b3e04e5ab824da78c2288d34554da03011fd5944710c8ab28f01fb149a1bd57

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads