Analysis

  • max time kernel
    13s
  • max time network
    160s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20250917-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20250917-enlocale:en-usos:android-9-x86system
  • submitted
    04/10/2025, 04:34

General

  • Target
    childapp.apk
  • Size 3.8MB
  • Sample251004-e7d2ysysfx
  • SHA256 c90465f25b077da1b0cffa5e48730375b17ac520eed6ca0a22ae730f4fd43e12
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • spynote

C2
  • 151.243.219.251:5551

Signatures

  • Spynote

    Spynote is a Remote Access Trojan first seen in 2017.

  • Spynote family
  • Loads dropped Dex/Jar 1 TTPs 64 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • ocean.placed.player
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    PID:4232
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v1.lua.mph --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v1.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4259
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v10.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v10.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4283
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v11.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v11.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4306
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v12.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v12.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4330
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v13.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v13.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4354
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v14.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v14.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4376
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v15.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v15.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4399
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v16.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v16.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4421
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v17.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v17.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4445
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v18.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v18.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4468
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v19.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v19.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4492
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v2.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v2.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4516
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v20.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v20.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4538
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v21.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v21.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4560
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v22.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v22.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4582
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v23.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v23.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4604
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v24.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v24.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4626
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v25.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v25.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4648
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v26.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v26.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4707
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v27.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v27.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4729
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v28.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v28.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4751
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v29.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v29.lua.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
        PID:4775
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v3.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v3.lua.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
          PID:4797
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v30.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v30.lua.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
            PID:4819
          • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v4.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v4.lua.odex --compiler-filter=quicken --class-loader-context=&
            2⤵
              PID:4860
            • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v5.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v5.lua.odex --compiler-filter=quicken --class-loader-context=&
              2⤵
                PID:4882
              • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v6.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v6.lua.odex --compiler-filter=quicken --class-loader-context=&
                2⤵
                  PID:4904
                • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v7.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v7.lua.odex --compiler-filter=quicken --class-loader-context=&
                  2⤵
                    PID:4926
                  • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v8.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v8.lua.odex --compiler-filter=quicken --class-loader-context=&
                    2⤵
                      PID:4948
                    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v9.lua.mph --output-vdex-fd=40 --oat-fd=41 --oat-location=/data/user/0/ocean.placed.player/app_mph_dex/oat/x86/dp.kotlin-v9.lua.odex --compiler-filter=quicken --class-loader-context=&
                      2⤵
                        PID:4970

                    Network

                          MITRE ATT&CK Mobile v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          dp.kotlin-v1.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v1.lua.mph
                          • Size 12KB
                          • SHA256 408d97e35f548015587b4fdada6c66fb82ca22591e174fa39164116d0ba6c36d
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v10.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v10.lua.mph
                          • Size 60KB
                          • SHA256 5e3251dea213e519a92f8125b814467b76f9fbc314b25d74c9cd739d9006fa58
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v11.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v11.lua.mph
                          • Size 173KB
                          • SHA256 da4e7db52cc6714a9964b8b3cc625e1f1df19053d5cbf0f0b89bc10608c1435f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v12.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v12.lua.mph
                          • Size 77KB
                          • SHA256 8b333e9ef8992fa9bcce9775328eccd92591bebb633800010a6a73cf5d931ed9
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v13.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v13.lua.mph
                          • Size 74KB
                          • SHA256 0aca17d5b36fa80574577aa4111785a0839c0aa9eed0b7b7f7da5f75dc19905c
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v14.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v14.lua.mph
                          • Size 94KB
                          • SHA256 3f338e0e900bf00f2e0981855fbd71e811940bdbd35f0b674039126a56787c05
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v15.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v15.lua.mph
                          • Size 85KB
                          • SHA256 54c3c558391e5d72c1316e69381f00c58b30150338419a7790c47a0c5559cc5a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v16.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v16.lua.mph
                          • Size 36KB
                          • SHA256 5e0811829dd9bda7d23213942eab175b7327535acd6398d351a5bee95998f5f1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v17.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v17.lua.mph
                          • Size 113KB
                          • SHA256 d7f2d9545b287b40234c7873cd7a0fa6862ec79a5a6d97443356aec3a56958c8
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v18.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v18.lua.mph
                          • Size 78KB
                          • SHA256 d2ca43783b8d99accabcc2e1abc33867457c16b0a58c15278131290fdd1ecd6a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v19.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v19.lua.mph
                          • Size 99KB
                          • SHA256 64e68ac07faeca73e85a97ce71e958941238b1fcf5a27ff95361e4f4f80fcc05
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v2.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v2.lua.mph
                          • Size 101KB
                          • SHA256 c0427be6b066bd80cbae4ac6a35849efe6fd68518971d7357211e28857e7f45e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v20.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v20.lua.mph
                          • Size 62KB
                          • SHA256 910505c41edf3669360d708d80455fe32e69c3c8cefdee1b09b5152de6e3456f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v21.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v21.lua.mph
                          • Size 75KB
                          • SHA256 ab81ecacaec07cc76ae75bccb573dc3f9d8ec45381e9c01403b1dc4f329e9932
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v22.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v22.lua.mph
                          • Size 105KB
                          • SHA256 2a02125d196a84801acd95da097c8f62172e945f7674381add8629053a7623ea
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v23.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v23.lua.mph
                          • Size 38KB
                          • SHA256 3c5aa3550d17d98618907e33c5877dd441c43f299730632a0c9755980fee227e
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v24.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v24.lua.mph
                          • Size 48KB
                          • SHA256 ec22a761e90d6d80ee33faf8e2afb1868125f057495882c3b843efaa4db00a89
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v25.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v25.lua.mph
                          • Size 57KB
                          • SHA256 013bb852238e311dd8bb77b59c375b660a7378dcf6e5bb855368083034a5669a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v26.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v26.lua.mph
                          • Size 90KB
                          • SHA256 f70263a68254e52810973280a9999f9b99ad756aed25cac6431948761811be41
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v27.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v27.lua.mph
                          • Size 99KB
                          • SHA256 c12cf40148d532572b80240f252e3001a369e73deb51169a9c5c9e22e7614848
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v28.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v28.lua.mph
                          • Size 554KB
                          • SHA256 af4b845277b67cf1f9677a2d9349182993ca580b69a8f0fa2e25e267565a4155
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v29.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v29.lua.mph
                          • Size 121KB
                          • SHA256 4826ab94cc1f30aaa038bbaec5f50a6c8f1d77943e63162a7a989f7d6038364b
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v3.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v3.lua.mph
                          • Size 68KB
                          • SHA256 017a135bfcc77dae63b7fc88dd881468a59e3d61c65914f36c77d927aee05091
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v30.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v30.lua.mph
                          • Size 967KB
                          • SHA256 72597ead533cc466b8ca6529398600307bb434a0fa5767ee2fede491a6f7b345
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v4.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v4.lua.mph
                          • Size 149KB
                          • SHA256 863f340ad19013a16b6352f26e37fa052bebe07792df2f04e94065071051d5e8
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v5.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v5.lua.mph
                          • Size 97KB
                          • SHA256 80b5447fdda611fd4f143969b5f9c80095ca9c2668823c09255b1100bc6008de
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v6.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v6.lua.mph
                          • Size 95KB
                          • SHA256 ebb77c73081732aa7c9786fd2ec4ad121bd05ccc1d55ac6d7728686876015d1d
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v7.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v7.lua.mph
                          • Size 91KB
                          • SHA256 ca39f663fab00bfea35af40de549ad37aa52fccbc0dcac234a1094279d8ce550
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v8.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v8.lua.mph
                          • Size 75KB
                          • SHA256 4b2a549c974e82d2b5c116553b804a7294b752b67474c6ee2df56e04d01310df
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v9.lua.mph

                          • Path /data/data/ocean.placed.player/app_mph_dex/dp.kotlin-v9.lua.mph
                          • Size 121KB
                          • SHA256 967dd7aaa5d3b39d26e57b79215932d72b5f92d4acbf37d4778d58c0d596a753
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v1.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v1.lua.mph
                          • Size 12KB
                          • SHA256 d41ee94c91d56db5fad77a2df2bec00c75e85767d77b319eb19e6149df553a12
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v10.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v10.lua.mph
                          • Size 60KB
                          • SHA256 7821e40494cdf88c5bd32a8f96a086e4a3c273d54c8e620a4ff3504e3f5b1158
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v11.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v11.lua.mph
                          • Size 173KB
                          • SHA256 34c860196ea68e1114e7549e331674342cef4642b0c05c19842aeff467296860
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v12.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v12.lua.mph
                          • Size 77KB
                          • SHA256 af721cd84fea17fb7e7fcf7226552ac0eb782e605850a20e641d74e1ef483d81
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v13.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v13.lua.mph
                          • Size 74KB
                          • SHA256 efa591c802c915d9ec43394d7e11d6005776c186a88fbd059d9e558084e7b045
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v14.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v14.lua.mph
                          • Size 94KB
                          • SHA256 3cd25ce9671681aa261a597312527f3aff7d31c7a9d8019e04e6d5e0bc6ac0ac
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v15.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v15.lua.mph
                          • Size 85KB
                          • SHA256 f25ff2fbeb22c3e57d630e0ae0f9eb73bdf1449d720c30b90bd91072271a8666
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v16.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v16.lua.mph
                          • Size 36KB
                          • SHA256 5584b8be89f78bd0449f028123e780081ee40fc2b0eb98c660b14e5765bf6c6c
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v17.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v17.lua.mph
                          • Size 113KB
                          • SHA256 4a67617cf372eb97e2f20293250b646846c10722d547aa4e09628a8dd1bd7d31
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v18.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v18.lua.mph
                          • Size 78KB
                          • SHA256 b56776fd51b98a3b85bcd9e88562c0ca53570d11af7e2b4ba747c5761b95caaa
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v19.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v19.lua.mph
                          • Size 99KB
                          • SHA256 93e4066d2b0348cb12846646648b607eac613f8e2e3499bb3159d02278f0cd00
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v2.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v2.lua.mph
                          • Size 101KB
                          • SHA256 705c46f1e9af6faaa136a36a5176576ae7f0b133d843e33bbf622a62a514102a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v20.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v20.lua.mph
                          • Size 62KB
                          • SHA256 ac4409fcd7485fc8ab93fa684023a5b4ea96946ae3c19df28832173840781368
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v21.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v21.lua.mph
                          • Size 75KB
                          • SHA256 d640d4ebf263560a668fb13a505ad9900eaa29ff733e25ec3628a20933ad9dfb
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v22.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v22.lua.mph
                          • Size 105KB
                          • SHA256 a9217fb3d98d3fbb81d0e680c3c6bb5a538d5130280dada4c8711af9e73425f1
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v23.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v23.lua.mph
                          • Size 38KB
                          • SHA256 9808c546109d9fa4928ba82067dad8b06824ed9738ba432d6c9e8d64da43b47f
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v24.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v24.lua.mph
                          • Size 48KB
                          • SHA256 ed6b824f950c349fde599be85b4cec4169dc989332ebd0b028312a1589cfdaae
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v25.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v25.lua.mph
                          • Size 57KB
                          • SHA256 dac258c86ac2cdfcb1f3acc0072c0602134341dce99414d36da9b3e098183abd
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v26.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v26.lua.mph
                          • Size 90KB
                          • SHA256 d5f3f4f147b71421a9030ffb283b062b53c5eb017698f8eacca921281df4fbc4
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v27.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v27.lua.mph
                          • Size 99KB
                          • SHA256 7bb7b22b2c383e7dd2b6f356602e4acb3cb570c9dd5af1c5d219ed7699dbaa6c
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v28.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v28.lua.mph
                          • Size 554KB
                          • SHA256 25d1d738b75a15039d0ff336516620666b33e753bf2ff3ff84923225d8b0aa42
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v29.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v29.lua.mph
                          • Size 121KB
                          • SHA256 033beb1399b3a137c90d76a2c747ce7a5225b63a82f8f556e9b4adba34338c8a
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v3.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v3.lua.mph
                          • Size 68KB
                          • SHA256 59894d90edaa799c5d1b921c0d04565580cf2b87e482c2e59f042e1d2fb51722
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v30.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v30.lua.mph
                          • Size 967KB
                          • SHA256 c143fe51e22af96211f986f7cc33fe3d876e129640db3b3e83c6719c5bc59de2
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v4.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v4.lua.mph
                          • Size 149KB
                          • SHA256 b2d16099fe247941dcedc35cda13c2a3c70f8e8b41d6cc9e23aae0bbb0d4e258
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v5.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v5.lua.mph
                          • Size 97KB
                          • SHA256 63776d841a01b114a6a55e1399976ff8c5e899a5b2697a9370250bf3a4af0291
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v6.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v6.lua.mph
                          • Size 95KB
                          • SHA256 5186180eceb9ef5f6f64f3d3906cea1a81ea0403d248cb63440e1f2a6754d134
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v7.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v7.lua.mph
                          • Size 91KB
                          • SHA256 56506a4b9735a90687772cfd209f572de5587c2add14cc9120d06efbf53bad52
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v8.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v8.lua.mph
                          • Size 75KB
                          • SHA256 4b6a5d9987fb61c2b818513b011487f8981a4c58a97e8544d5034f55d4f6f3ea
                          • MD5 SHA1 SHA512 SSDEEP

                          dp.kotlin-v9.lua.mph

                          • Path /data/user/0/ocean.placed.player/app_mph_dex/dp.kotlin-v9.lua.mph
                          • Size 121KB
                          • SHA256 bf397579565b00742d01f06f44974b4e8323165d845e01a45d726608d3348b75
                          • MD5 SHA1 SHA512 SSDEEP