Analysis

  • max time kernel
    46s
  • max time network
    160s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20250917-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20250917-enlocale:en-usos:android-9-x86system
  • submitted
    04/10/2025, 04:34

General

  • Target
    c3jn21.apk
  • Size 5.9MB
  • Sample251004-e7d2ysysfx
  • SHA256 9aadd8fb01918d7ecbb9b2613d1a7551a51d69db97e51a056963adfa38b08370
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 64 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.cloudwave.service
    1⤵
    • Loads dropped Dex/Jar
    PID:4217
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v1.lua.mph --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v1.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4245
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v10.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v10.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4270
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v11.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v11.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4293
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v12.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v12.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4317
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v13.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v13.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4339
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v14.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v14.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4361
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v15.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v15.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4384
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v16.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v16.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4407
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v17.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v17.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4430
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v18.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v18.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4486
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v19.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v19.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4508
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v2.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v2.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4531
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v20.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v20.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4554
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v21.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v21.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4576
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v22.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v22.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4600
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v23.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v23.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4622
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v24.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v24.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4644
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v25.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v25.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4667
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v26.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v26.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4689
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v27.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v27.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4713
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v28.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v28.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4735
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v29.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v29.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
        PID:4757
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v3.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v3.lua.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
          PID:4779
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v30.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v30.lua.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
            PID:4803
          • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v4.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v4.lua.odex --compiler-filter=quicken --class-loader-context=&
            2⤵
              PID:4826
            • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v5.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v5.lua.odex --compiler-filter=quicken --class-loader-context=&
              2⤵
                PID:4848
              • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v6.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v6.lua.odex --compiler-filter=quicken --class-loader-context=&
                2⤵
                  PID:4870
                • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v7.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v7.lua.odex --compiler-filter=quicken --class-loader-context=&
                  2⤵
                    PID:4892
                  • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v8.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v8.lua.odex --compiler-filter=quicken --class-loader-context=&
                    2⤵
                      PID:4914
                    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v9.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/com.cloudwave.service/app_mph_dex/oat/x86/dp.kotlin-v9.lua.odex --compiler-filter=quicken --class-loader-context=&
                      2⤵
                        PID:4936

                    Network

                          MITRE ATT&CK Mobile v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          dp.kotlin-v1.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v1.lua.mph
                          • Size 12KB
                          • SHA256 38d43e6b8de6fbe502e8d45b36ead62d69bb25418c14de1bbb772e9c27bc15b5
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v10.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v10.lua.mph
                          • Size 74KB
                          • SHA256 796d704f5d9fc5a767c3c32772eabfc75b9b13da4f3131524a0bb4869a0a370b
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v11.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v11.lua.mph
                          • Size 112KB
                          • SHA256 a5ec7754e19b00f8deeba7dc1a393fcbfb0296e756c8e0a6b54d15d05225c8d3
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v12.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v12.lua.mph
                          • Size 132KB
                          • SHA256 7ae9625e23688ad0861e4b028edaf3db5af7f5eb56c3e099e9a122d557e97b64
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v13.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v13.lua.mph
                          • Size 73KB
                          • SHA256 06ef29e98555e3cde676200f037d813f9dd59263b0d1742f8d99f48c37369181
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v14.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v14.lua.mph
                          • Size 82KB
                          • SHA256 3d1e4dd7bd39e533ae85f55fa5c3ba6d47d3c4bbb8513907aa2f54ba14a121b5
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v15.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v15.lua.mph
                          • Size 70KB
                          • SHA256 4d1f99660c68bde525bc52257be1c7090298adb394ee5a48b1947b90d814edc9
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v16.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v16.lua.mph
                          • Size 83KB
                          • SHA256 56fb7e4d3dd3ff164321b083085307e0540fbdaa1306651f57f980ca7e92c511
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v17.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v17.lua.mph
                          • Size 35KB
                          • SHA256 661f41bc1de25932a11bcf59d5d5c45362a34f6a2d02769e861c057ea661c131
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v18.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v18.lua.mph
                          • Size 111KB
                          • SHA256 8bfc574df38594e175c4737b4581301b81548d23824606c567acf1b18dae1ed2
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v19.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v19.lua.mph
                          • Size 70KB
                          • SHA256 921796df3cd5a6090d4a07a46847228ddaa7ec2fb176d39d21d323dcdf27ab3c
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v2.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v2.lua.mph
                          • Size 99KB
                          • SHA256 d35933abed6fb9ac825d45f02fa871295d0f6321f9a60abcc6765b11bfe0167a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v20.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v20.lua.mph
                          • Size 94KB
                          • SHA256 36796dd0b35e183a9f4dfac28b22711716cee23ea648e0f4c7eb91559c69eabc
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v21.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v21.lua.mph
                          • Size 73KB
                          • SHA256 2ceb1170727b295666e7da1dab1756edd89881186825377669e0676db4622956
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v22.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v22.lua.mph
                          • Size 70KB
                          • SHA256 9bb513775388d4d7d436859765ad9adb9d08f7c1930694f552f39d210b2a81c1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v23.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v23.lua.mph
                          • Size 94KB
                          • SHA256 29db8d4177cd7c6f8c70cd77f644977e92d264308686b9a745c981a4f06ab2e2
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v24.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v24.lua.mph
                          • Size 44KB
                          • SHA256 63fd38527261e166a85adac0336c322ff9e9a32685d3143f44257474dc917c0a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v25.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v25.lua.mph
                          • Size 32KB
                          • SHA256 d56c81aba392f5029ff30e50850ab67d91f78dee573bb77c4bdde41a9ab04b83
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v26.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v26.lua.mph
                          • Size 56KB
                          • SHA256 89540f8e9f8c9789fe7f77e1595c0f71488d0c7061d0b071b79dd33d00d4a11d
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v27.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v27.lua.mph
                          • Size 65KB
                          • SHA256 735a94dffc8d7b9f0cbf716514feeae4b8acbca5149a446ad53ba29e9b2aa45e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v28.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v28.lua.mph
                          • Size 96KB
                          • SHA256 347e56b7332f37eaf36008cfc42edb1e7bd537595068b303ebd0562c85fec0d4
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v29.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v29.lua.mph
                          • Size 187KB
                          • SHA256 31e97059d130b8df822780fa4158fc7bed8de6491a8353346b7aac6ea99880db
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v3.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v3.lua.mph
                          • Size 59KB
                          • SHA256 9488825fd731b3a40f70b0d2738f251a784457faa54f5cae4738927cfe0899e4
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v30.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v30.lua.mph
                          • Size 2.7MB
                          • SHA256 61e2ea80889dda35707dbea8cdb9be5a4c578cff945dbe045f9128b7a809cf10
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v4.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v4.lua.mph
                          • Size 130KB
                          • SHA256 211b1c77d4428ffd16f14f76b1add19499386145397a0e18f5be803b09b959fc
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v5.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v5.lua.mph
                          • Size 88KB
                          • SHA256 26bf5bb284fe1f86d1b318f802cf549d39765cd3bb5dc12980ddf533c27224c2
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v6.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v6.lua.mph
                          • Size 101KB
                          • SHA256 20fd4cce3044ce0af24eafda438badd540104d4c94f96158fffbafeede0183ae
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v7.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v7.lua.mph
                          • Size 85KB
                          • SHA256 1d6fa3f8aec10feaa0005687f5d3270e23b15e8ee9e957962be6da03777c6df6
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v8.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v8.lua.mph
                          • Size 92KB
                          • SHA256 2c5cb0c6e81443431641b3ce07e31854571a4e3ea3345b63197385b9db02360e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v9.lua.mph

                          • Path /data/data/com.cloudwave.service/app_mph_dex/dp.kotlin-v9.lua.mph
                          • Size 91KB
                          • SHA256 6f61c8ef9a83e0f1d1da04b15cb15645b4e58181c2fe9c09e40bf95b7b6a99a4
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v1.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v1.lua.mph
                          • Size 12KB
                          • SHA256 9ca3ed8232fa19e960ffd1840391c5ce9b59aa88316bbbb239a3441eaa641d45
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v10.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v10.lua.mph
                          • Size 74KB
                          • SHA256 1454b431071a74cd8b6c05f0b60efad789018cf0533b3f193121764c7158703d
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v11.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v11.lua.mph
                          • Size 112KB
                          • SHA256 96eaf6d6b9c9e1cfa8f621ac4792eeaa80d92471f0525ca70e905d1ae86f126f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v12.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v12.lua.mph
                          • Size 132KB
                          • SHA256 122a973fd4d168307b01f9df438fdc7d960f43cf0b7d2772645fd561dd3a1f2e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v13.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v13.lua.mph
                          • Size 73KB
                          • SHA256 4caba1c0d42a146f849fa66256be7ed0a5831d5b64240133ccbd9d931a894bf3
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v14.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v14.lua.mph
                          • Size 82KB
                          • SHA256 d63445e2fcf4334459b1b1e3315cf0ff8f61ffd8b1850325b4a723b1138ddecb
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v15.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v15.lua.mph
                          • Size 70KB
                          • SHA256 459c440938b08a60d84f6cabdc4015e2638242dbadfa4638a52d9371c9553fc6
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v16.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v16.lua.mph
                          • Size 83KB
                          • SHA256 709589db0435d3da14b15c6a6850e463ceefd5e0e522f79287cbb218603f38f2
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v17.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v17.lua.mph
                          • Size 35KB
                          • SHA256 fb6847bad5e9d22daeb3f3692aec43f468300781ae93663ffd0ea9cf4472494e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v18.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v18.lua.mph
                          • Size 111KB
                          • SHA256 ddca65d814b0adb4ca4318ecf88d45d4b33d9039d48c0ac4db599023c47b741c
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v19.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v19.lua.mph
                          • Size 70KB
                          • SHA256 649d360774cc384b465949b2e80efda205b2146b8b7a471e6fdbffd85d9bd5b3
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v2.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v2.lua.mph
                          • Size 99KB
                          • SHA256 1bf2321225450228d47e14e31801fe62040a61d3e518164a1c62c4dd5a6692c0
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v20.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v20.lua.mph
                          • Size 94KB
                          • SHA256 1bcc4d4b16538bdb8867059ecf7ce6e3f536dd8e811aac844766b43705d63d62
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v21.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v21.lua.mph
                          • Size 73KB
                          • SHA256 0d5472850c4d96e5b08da85a2e6655bc4f89574280dfbc75d2cb5a13053e22b5
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v22.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v22.lua.mph
                          • Size 70KB
                          • SHA256 20935c40c7ae1db9114077d84bbc609d9c06c864cff395a179a84ff95b57cb8f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v23.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v23.lua.mph
                          • Size 94KB
                          • SHA256 98458f9fe45e76f9928861ae7515b3e486ec8c7f9904ea40e72eea4a8ddf2bf6
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v24.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v24.lua.mph
                          • Size 44KB
                          • SHA256 4ea04cae9ea6e7e8858498ee4a67f78ee5efeb10611e368cb7e10e29f2784797
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v25.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v25.lua.mph
                          • Size 32KB
                          • SHA256 f2e21f7b9657b39d5e86bfce1e89093570291e8bc31fed59856b3ff3720cc374
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v26.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v26.lua.mph
                          • Size 56KB
                          • SHA256 6d45b28605df3ad249309a53ed77f69c4dfcf6c3cd561a2d6e05431c047dd24f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v27.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v27.lua.mph
                          • Size 65KB
                          • SHA256 0a8d50b4cb1142b22bd80d9ef43c3b4cd5fab34da1f046006d3282aa21b854a1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v28.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v28.lua.mph
                          • Size 96KB
                          • SHA256 acbdae53fd67f471356acbeed869ae8d20f16ae80438c4750f1eaf006d6ed424
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v29.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v29.lua.mph
                          • Size 187KB
                          • SHA256 b32aa859c647d7ff7884774179f8ce71eff0b0d6f744a1248c57643ddab955d1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v3.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v3.lua.mph
                          • Size 59KB
                          • SHA256 47581075bb1bd8c8ec9669f808213048e4909f0b5e547ba3f470f67e5fa00e7e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v30.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v30.lua.mph
                          • Size 2.7MB
                          • SHA256 058b0ea9149aa179f8cff984839fc1e62a981aa387630a065a05fd182ba21439
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v4.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v4.lua.mph
                          • Size 130KB
                          • SHA256 c48e2287a063ec2818473a712478e847ebd556b5e0554e668d4a66f38a5af8c1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v5.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v5.lua.mph
                          • Size 88KB
                          • SHA256 64e737bbe35cfd9e00f52991e4e332ea5add62a536a0272353d1444299e16fe7
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v6.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v6.lua.mph
                          • Size 101KB
                          • SHA256 2f49b631c058d10df1f819c3c6568611ce5b1812dd3aa3fef9a44f53a4bc51af
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v7.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v7.lua.mph
                          • Size 85KB
                          • SHA256 57c9141f7fb418d9fb405cb70daf3f444bfda821b0a7b2616869cab5014e074a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v8.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v8.lua.mph
                          • Size 92KB
                          • SHA256 5864c92354407e5169524758546b5ffc55f112550739dcffc66a640f3ff44582
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v9.lua.mph

                          • Path /data/user/0/com.cloudwave.service/app_mph_dex/dp.kotlin-v9.lua.mph
                          • Size 91KB
                          • SHA256 0a6f6379fa17c2cefde9bd6abec409b445024296737e5b67709c9a825e5bb624
                          • MD5 SHA1 SHA512 SSDEEP