Resubmissions

22/01/2026, 19:42

260122-ye5hzset7e10

11/01/2026, 08:59

260111-kxyaqsft2d10

Analysis

  • user interaction
    yes
  • max time kernel
    13s
  • max time network
    95s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260104-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260104-enlocale:en-usos:android-9-x86system
  • submitted
    22/01/2026, 19:42

General

  • Target
    sample.apk
  • Size 158.2MB
  • Sample260122-ye5hzset7e
  • SHA256 f5a332f6418bb17c4c4debcb90025be266b3c33b3a3d05aea8d6e0cc5f94258b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.spoti.plus
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4371

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1b133ba6.pb

        • Path /data/data/com.spoti.plus/app_remote-config/unauth/1b133ba6.pb
        • Size 688B
        • SHA256 0c16f9eb82364ec1b4bc16c32c594e8fc798dbec4d2ad26d9525ccd074949828
        • MD5 SHA1 SHA512 TLSH

        0bb074ec24928b7b07b13eecc792314c.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/0bb074ec24928b7b07b13eecc792314c.0.tmp
        • Size 5KB
        • SHA256 51cb0eb7424783b6cfa34bc7bdbe4ffb3bc9240c76310594e576b7598943ef84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0bb074ec24928b7b07b13eecc792314c.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/0bb074ec24928b7b07b13eecc792314c.1.tmp
        • Size 9KB
        • SHA256 6a41109ade10c48f346ad8a5fb8eac0479afef1c71b94616356f57fa0a54db2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        30e05ca478d35bc0b55ddcb896ffe323.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/30e05ca478d35bc0b55ddcb896ffe323.0.tmp
        • Size 5KB
        • SHA256 f298267ed08a87d4169b1e33ba88647dbe76fa5cfd526aa3daf71861fb02d5f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        30e05ca478d35bc0b55ddcb896ffe323.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/30e05ca478d35bc0b55ddcb896ffe323.1.tmp
        • Size 40KB
        • SHA256 9314e063d2ef459047f86a207b99a630c8b11fa396574d2c0fa135dfc14c5acb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4436986e0c0ea6df0716a5f144c2d1fa.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/4436986e0c0ea6df0716a5f144c2d1fa.0.tmp
        • Size 5KB
        • SHA256 df2e62799fe2242f8b38232e6b7304bdb734a9f641d4bd46fd468ed344ca9259
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4436986e0c0ea6df0716a5f144c2d1fa.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/4436986e0c0ea6df0716a5f144c2d1fa.1.tmp
        • Size 11KB
        • SHA256 6bfea32080ff480e18528b7d700a30e62131da3b4c30dbfa40aa901d2d82f263
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4fc573ed3ad15f8ec2ee2d685fcda551.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/4fc573ed3ad15f8ec2ee2d685fcda551.0.tmp
        • Size 5KB
        • SHA256 a8494eade91da25add50855b7cc4d128822bc3b11f2e57c1ca34b18efa2920f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4fc573ed3ad15f8ec2ee2d685fcda551.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/4fc573ed3ad15f8ec2ee2d685fcda551.1.tmp
        • Size 16KB
        • SHA256 8066d897665a395ae79c58a8ad1900c19df49745411401f07f79ce191fbe534e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        62f65e143e3d94912eac12dae69ef457.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/62f65e143e3d94912eac12dae69ef457.0.tmp
        • Size 5KB
        • SHA256 39f3647c41bb290d2a27b368a400d3ed1ac3ac030f73e85c592ffa0494f95cee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        62f65e143e3d94912eac12dae69ef457.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/62f65e143e3d94912eac12dae69ef457.1.tmp
        • Size 12KB
        • SHA256 dd6afe50070fa94658a71a283598fc3d77d6d72f4c22e9aa6b8e8b9c0eb6eb2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        63292c3434a29bb9d064315306e13d1a.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/63292c3434a29bb9d064315306e13d1a.0.tmp
        • Size 5KB
        • SHA256 3723def4e92c0667617feadb10c9ee85ec936ad24d60e691c9df5cc24dc71252
        • MD5 SHA1 SHA512 SSDEEP TLSH

        63292c3434a29bb9d064315306e13d1a.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/63292c3434a29bb9d064315306e13d1a.1.tmp
        • Size 13KB
        • SHA256 21d42b1e6dd9796750a667dd4a9a5219e198eab6ec278e1355cbf44cf0c1e78a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        72242cec31cba0cd963662601d6f5282.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/72242cec31cba0cd963662601d6f5282.0.tmp
        • Size 5KB
        • SHA256 b882beef508ffa206e7e0e35518a151ae9015ed047942d0520e29d57fec63f5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        72242cec31cba0cd963662601d6f5282.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/72242cec31cba0cd963662601d6f5282.1.tmp
        • Size 16KB
        • SHA256 748cbb8268c84d4596bf84a9cecd23aeb4ec79a6a01459dedccb5d603a7b5266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7a89e89f24a3bbe3b197e4c5a7b7d985.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/7a89e89f24a3bbe3b197e4c5a7b7d985.0.tmp
        • Size 5KB
        • SHA256 fb4fcac8bda266f945b4305320a165de1466c25bf64acb72367a87815b4a879e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7a89e89f24a3bbe3b197e4c5a7b7d985.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/7a89e89f24a3bbe3b197e4c5a7b7d985.1.tmp
        • Size 63KB
        • SHA256 f61baba7207446be536f60289d2de2eb9419c6fdf0204d02e595b6fa7e0854f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9c7c13cbd143f63da3c36dfc532696ba.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/9c7c13cbd143f63da3c36dfc532696ba.0.tmp
        • Size 5KB
        • SHA256 7af377aa692a8812a77ccfa4bc41e1b494cbaae16b601ef275f574cb405d3892
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9c7c13cbd143f63da3c36dfc532696ba.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/9c7c13cbd143f63da3c36dfc532696ba.1.tmp
        • Size 8KB
        • SHA256 c4d1d6e5e59ed8b23f270bbf808035b355b4f8792e0bc2609e2c7543dc8fc7ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9dc5e99db917647b4bc4c16fcca7fb90.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/9dc5e99db917647b4bc4c16fcca7fb90.0.tmp
        • Size 5KB
        • SHA256 e08c08d3de67ee5024bce847da382574180bbcec88755874b2d3e50e201dbf0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9dc5e99db917647b4bc4c16fcca7fb90.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/9dc5e99db917647b4bc4c16fcca7fb90.1.tmp
        • Size 22KB
        • SHA256 846a15d3daca11fface3570607694e8a3d68b3f032930d16d98d2d34faedf614
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcc59b7d6c6920773f55532b45efaa65.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/bcc59b7d6c6920773f55532b45efaa65.0.tmp
        • Size 5KB
        • SHA256 897b0b9cb209ad9295d58498221130119f169379490513f38ec8624fbe61b32e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcc59b7d6c6920773f55532b45efaa65.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/bcc59b7d6c6920773f55532b45efaa65.1.tmp
        • Size 9KB
        • SHA256 a17d65cded72576dcefcfeefc5deb202b97b754fe055facd432165176260e96a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bfddff5606def6c5e2de3d157de1b119.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/bfddff5606def6c5e2de3d157de1b119.0.tmp
        • Size 5KB
        • SHA256 68f82f94c953da8e4c24af9aa8ac52f8d9e93f8f00c249ea7304da78016ae266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bfddff5606def6c5e2de3d157de1b119.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/bfddff5606def6c5e2de3d157de1b119.1.tmp
        • Size 7KB
        • SHA256 82bd6752f0041385b05246179b51a44d5e0c1ab87243142fb15b2b523c48ecae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d214441078338667009b6c249612fe13.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/d214441078338667009b6c249612fe13.0.tmp
        • Size 5KB
        • SHA256 722368102ced3548090db6565393f20534aeb23c3c653c78d2babd164f4e891e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d214441078338667009b6c249612fe13.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/d214441078338667009b6c249612fe13.1.tmp
        • Size 7KB
        • SHA256 c77b07ec11802ee99325b3034468f6ce3f3b1bf4934d485efd6993f2783aac24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d2800d0f2e9486380f1c3882cf7c40f3.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/d2800d0f2e9486380f1c3882cf7c40f3.0.tmp
        • Size 5KB
        • SHA256 ab4883bd4f72533d2ce3e948e290f63cda891e84c5ce2191786ad479ec33e24b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d2800d0f2e9486380f1c3882cf7c40f3.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/d2800d0f2e9486380f1c3882cf7c40f3.1.tmp
        • Size 15KB
        • SHA256 15e80637c1bd25e54be8c3b63befb4231e2a958f9228737a62567b7e5c1207e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da7905850b6342f0604fb9aeeb48c53a.0.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/da7905850b6342f0604fb9aeeb48c53a.0.tmp
        • Size 5KB
        • SHA256 4015436c248dda91c05bc8c7cc0b8f4e99652d5b102eccafa0a000b008b54d79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da7905850b6342f0604fb9aeeb48c53a.1.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/da7905850b6342f0604fb9aeeb48c53a.1.tmp
        • Size 20KB
        • SHA256 c525b5fbc443b4297272ed72395c202e78596304e2baf9e211f32d32ce4cb2e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.spoti.plus/cache/http-cache/journal
        • Size 1KB
        • SHA256 60f92c36b4c731a97b857c7b99af0cc418f18776308ef449335cb72a6c86a440
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.spoti.plus/cache/http-cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        StartApp-d6864f2502af7851-journal

        • Path /data/data/com.spoti.plus/databases/StartApp-d6864f2502af7851-journal
        • Size 512B
        • SHA256 41c54f5869bcecde896c180e93890d364204981a908d07273eac937a1549facd
        • MD5 SHA1 SHA512

        StartApp-d6864f2502af7851-wal

        • Path /data/data/com.spoti.plus/databases/StartApp-d6864f2502af7851-wal
        • Size 36KB
        • SHA256 d493777a39afe732b58186a2c0652e87fdaf075e2b2f402f831b5fe3e67c9c0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.spoti.plus/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.spoti.plus/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 44d23678083ec69b957558b6f083111b70243279574854a3f4acf9ef9f8cdfd9
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-shm

        • Path /data/data/com.spoti.plus/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-wal

        • Path /data/data/com.spoti.plus/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 b0e6d6262fd99bbe5fab5f82a107beab046d94c63f8fa1dc52c54f6715584d40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event-sender.db-journal

        • Path /data/data/com.spoti.plus/databases/event-sender.db-journal
        • Size 512B
        • SHA256 3f9845a117d2dc96a60f8e26d673c113079976adc1d8363135cc7626fe0e2856
        • MD5 SHA1 SHA512

        event-sender.db-wal

        • Path /data/data/com.spoti.plus/databases/event-sender.db-wal
        • Size 156KB
        • SHA256 9c21bb04b77ef16f2092f22a9aba0c4f2949457c09487757a590f6c6884d110c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event-sender.db-wal

        • Path /data/data/com.spoti.plus/databases/event-sender.db-wal
        • Size 16KB
        • SHA256 29f24e057632d43319e84c22d2f0f2272072f70ee5ad976b8374da3d225e3eee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event-sender.db-wal

        • Path /data/data/com.spoti.plus/databases/event-sender.db-wal
        • Size 56KB
        • SHA256 22daecc04e53c4c1b0158c6d0fb6311d23754bc27de9160f143197fcf65bb748
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f6a35cea32d2ade2893936fb519035f636261b487bdb166e5d77c3827d3a4b64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bc1f1d2b9175d09e09ceb46500e719dce669113521f0f88dc3b9e5fdd28553c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5b9930e92f242fe98ef4ca70f5a1e35ce32af5c85ee83d8a09a04facc7f4d9b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ff58e564cdb9b66b096ee12ce6e77205cac85905a40d54617c00ba7c39a79297
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 90ce5eb8f55cd703bfc2384516eb16a03180d10f236025baa8d0851e5bf47808
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ad10e743fad0bd07a339a86bbfafe27cfc0087a10a4c16bb04bda1f4a28b4a45
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 f65e20f009534a2eb31874b4e5d46138f7da2b075d9f29b311898bb9a1192301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 f66a3031fc14b7a7490d6b70129053d019f6e82328f8be82ec7d456ab5665819
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 7c8d492570bfecb99ee8adf309d4189ed236587a10654195da777a5d82b19a97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 44e18bf62a78123e3c2a7346b16bdc95d63156407611b184d21f482d71a9d8f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 13bb87d296524e9c8620bb7b6b4d3d6c8a277440e2cf631e73de4ee29444b01a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.spoti.plus/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 dcb2f0eaec4d3404734ae9bf57e5acd521ea20bfbeb8ab385a5cd10d00e2de75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mbridge.msdk.db-journal

        • Path /data/data/com.spoti.plus/databases/mbridge.msdk.db-journal
        • Size 512B
        • SHA256 f7f64268e912faabc5e10a17d995b9e73275faa67d8c529eaa35e7ad0b92f62d
        • MD5 SHA1 SHA512

        mbridge.msdk.db-wal

        • Path /data/data/com.spoti.plus/databases/mbridge.msdk.db-wal
        • Size 104KB
        • SHA256 bff4c0385a4610dd91ecbb19c0e826862b1b30e501bb0ee9e87d6a30f5a1620e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .YFlurrySenderIndex.info.AnalyticsData_SB48C44W8K53MZH9MC29_330

        • Path /data/data/com.spoti.plus/files/.YFlurrySenderIndex.info.AnalyticsData_SB48C44W8K53MZH9MC29_330
        • Size 88B
        • SHA256 7a84dd1a106cba4468a252e5632f7b77700026998f30982c6c908d8b85be6853
        • MD5 SHA1 SHA512 TLSH

        .YFlurrySenderIndex.info.StreamingMain

        • Path /data/data/com.spoti.plus/files/.YFlurrySenderIndex.info.StreamingMain
        • Size 79B
        • SHA256 fd3a6b233f20e170e6b4658ca4d0b943448af010c8cc70c7fb8122bb75535b1e
        • MD5 SHA1 SHA512 TLSH

        com.crashlytics.settings.json

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/com.crashlytics.settings.json
        • Size 763B
        • SHA256 03d24ed645853a3dec9fd2f04b180cdd59708365846cc41f29e34c9c0b54bdd3
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 80B
        • SHA256 97f1b9118ed3ae3cdc1525faaf0d04ffc2b718c6943e36eba12ebd778092f9c4
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 113B
        • SHA256 94e8469ab01b4c3eeabe9b550eafdc08b45dcc1a7fb9f182c318e92236c40359
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 144B
        • SHA256 5a16c689c960f06e7e3b35cbab7ff4cbb6a61f9452c80fa854b85bbe75abba17
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 175B
        • SHA256 45e1f7a4de23336f4a8717dc24811c41ce68f2a467715766097314dd314a9d72
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 283B
        • SHA256 e7cfccdb964183acfe8d8f906730e3e8c0412ed8829b4dfdbd996af2e9cac742
        • MD5 SHA1 SHA512 TLSH

        keys

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/keys
        • Size 60B
        • SHA256 9973cdaf1efc6cdd8e94bf68bd9055bd84d4a41290a06ab0ef834e653ae52a84
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/report
        • Size 763B
        • SHA256 bdd952ff1f0e43dee312df8f2488c5dc20eefde9f45025f25f074ab933108aed
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/userlog
        • Size 8KB
        • SHA256 233e0cae863673bf66569b13ab63a08df87ca5b7cf67031fbfa28c3699d688c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        userlog.tmp

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E130202000111139E053A9B9BB7/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        report

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E150142000111139E053A9B9BB7/report
        • Size 813B
        • SHA256 43ca62edbb58c5c8620dd57c3af83062b439e3a66c3fd7932f1ed36ec049f8bd
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/com.spoti.plus/files/.com.google.firebase.crashlytics.files.v2:com.spoti.plus/open-sessions/69727E150142000111139E053A9B9BB7/userlog
        • Size 198B
        • SHA256 5fc3cddf109e8e187fd68365b6116a7f765a30fa4249aab37ea43d7f02a3b887
        • MD5 SHA1 SHA512 TLSH

        currentFile

        • Path /data/data/com.spoti.plus/files/.fstreaming/fInProgress/currentFile
        • Size 2KB
        • SHA256 b74b3ddae5827a984150d4ff26ed6bdd14ae1be7fd42de0ded7b59dc41140d5b
        • MD5 SHA1 SHA512 TLSH

        currentFile

        • Path /data/data/com.spoti.plus/files/.fstreaming/fInProgress/currentFile
        • Size 3KB
        • SHA256 7b821a5295f42cb4b597c9a264e471852df9bb8584dbe35a62120f5b59ccfc58
        • MD5 SHA1 SHA512 TLSH

        .yflurrydatasenderblock.76b99577-1ccf-49b9-9af4-a4051062214a

        • Path /data/data/com.spoti.plus/files/.yflurrydatasenderblock.76b99577-1ccf-49b9-9af4-a4051062214a
        • Size 1KB
        • SHA256 59f85ccb9f07fe3cce2c4e2c546a6506c72817eef8756885511f8951249750b8
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2056386809081971870tmp

        • Path /data/data/com.spoti.plus/files/PersistedInstallation2056386809081971870tmp
        • Size 90B
        • SHA256 bf55896a622181c53ae032d742ddb252d12fba9b2693c4e4d22895b00bc987d2
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation458752830097224314tmp

        • Path /data/data/com.spoti.plus/files/PersistedInstallation458752830097224314tmp
        • Size 568B
        • SHA256 0f879e85c22fbf236565757fe8c3861685afdf0c5cd34b4b214139df39e0047d
        • MD5 SHA1 SHA512 TLSH

        persistent_postback_cache.json

        • Path /data/data/com.spoti.plus/files/al/persistent_postback_cache.json
        • Size 9B
        • SHA256 4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
        • MD5 SHA1 SHA512

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/com.spoti.plus/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
        • MD5 SHA1 SHA512

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/com.spoti.plus/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/com.spoti.plus/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/com.spoti.plus/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/com.spoti.plus/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 89df2c6e6be8a2fe4eec75bf9047305865797b6543d84068e2839970a70a3be5
        • MD5 SHA1 SHA512 TLSH

        frc_1:610878952033:android:a2ac7bea313eaa21819020_firebase_fetch.json

        • Path /data/data/com.spoti.plus/files/frc_1:610878952033:android:a2ac7bea313eaa21819020_firebase_fetch.json
        • Size 5KB
        • SHA256 f7f18eeb6fe7fbe2164511ed490a51693309295c9b87dae8c80666b82627e61f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.spoti.plus/files/profileInstalled
        • Size 24B
        • SHA256 f0556b0b736f0a21a3fbf06233865f7078485145f2bf0b68ba7fcc1e3426e9a7
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.spoti.plus/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 540c34825cdb1acd537fb7113ad5ea0d0b00b5d8e417ba374d8a14aac368459a
        • MD5 SHA1 SHA512

        installationNum

        • Path /data/data/com.spoti.plus/no_backup/.flurryNoBackup/installationNum
        • Size 100B
        • SHA256 d97c6871db19ad6c68f6ab19297a2cd1440c906377bcdaf616cb8bcf20000e98
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d9d2204682deffb8a127a1c846a351928ddba6bbb99022169ef453900c21e135
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdb-wal
        • Size 120KB
        • SHA256 a9565ea59da703309b846eaa6b83c4a817d754b152b231d4ffa9ea9f01561e51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 fb06cbc5091b4075d95eaedb76b83d3254de172aec5a731dc3b6cb95b8560c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 220886be68243c04c0008dfcd0c4e4aca675ee13af20f503889c9fa811eef3bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdbcc-journal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdbcc-journal
        • Size 512B
        • SHA256 524bbf7e674cccf96446bd7cd5bda1fa47b3161ee66b0b5a1eb168c7e2cc0333
        • MD5 SHA1 SHA512

        androidx.work.workdbcc-wal

        • Path /data/data/com.spoti.plus/no_backup/androidx.work.workdbcc-wal
        • Size 16KB
        • SHA256 8635362c11dc4719830b05f02d6923abfbc3086b67275f678dc39a168d71f274
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vungle_db-journal

        • Path /data/data/com.spoti.plus/no_backup/vungle_db-journal
        • Size 512B
        • SHA256 a5ccd652d3bb3e5165561662f5616ce50c36ea5f1a70716ef11f1202b1f86920
        • MD5 SHA1 SHA512

        vungle_db-wal

        • Path /data/data/com.spoti.plus/no_backup/vungle_db-wal
        • Size 136KB
        • SHA256 afca1e05ce8fb65f01794ca96bc1994bb68daba92f552d3ac7916215d97295ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vungle_settings

        • Path /data/data/com.spoti.plus/no_backup/vungle_settings
        • Size 83B
        • SHA256 41736ac5faa904149b7c797646738b7f8f178ab622143100e660d98d92c7264f
        • MD5 SHA1 SHA512 TLSH

        vungle_settings

        • Path /data/data/com.spoti.plus/no_backup/vungle_settings
        • Size 255B
        • SHA256 7bc9678fc13a780779a568a2392312fd6115a9e83b540487be102d6ae92d30ea
        • MD5 SHA1 SHA512 TLSH

        vungle_settings

        • Path /data/data/com.spoti.plus/no_backup/vungle_settings
        • Size 273B
        • SHA256 515e24ae0c8064bd861605de177a05735e9f41fe68aa0ef0db03a50879acf042
        • MD5 SHA1 SHA512 TLSH

        vungle_settings

        • Path /data/data/com.spoti.plus/no_backup/vungle_settings
        • Size 324B
        • SHA256 970328d9836a5a2bb1744846401e6e32b7a4c7998447e43665a7d4b15050d000
        • MD5 SHA1 SHA512 TLSH

        inputrc

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/etc/inputrc
        • Size 489B
        • SHA256 b0a4858741eea53f525b76d1e70fd4f1aaa722b4517fefcedf74849d3629160e
        • MD5 SHA1 SHA512 TLSH

        cert.pem

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/etc/tls/cert.pem
        • Size 216KB
        • SHA256 0d98a1a961aab523c9dc547e315e1d79e887dea575426ff03567e455fc0b66b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        openssl.cnf

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/etc/tls/openssl.cnf
        • Size 10KB
        • SHA256 f10ba64917b4458fafc1e078c2eb9e6a7602e68fc98c2e9e6df5e1636ae27d6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        capi.so

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/engines-1.1/capi.so
        • Size 5KB
        • SHA256 5c3d3a17dfbc15c08522d7add2edfa0c2513f9a44e1066f93f65c40de72ecac8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libandroid-support.so

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libandroid-support.so
        • Size 144KB
        • SHA256 4237ee847acacdd7f9ab7c67b1cfb196304a0c23101c067469242f89a3979b91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libbz2.so.1.0.8

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libbz2.so.1.0.8
        • Size 48KB
        • SHA256 9ac72e644124f4f8bd9f854f07c63211a03d9b8a774c8bed1ee4660bc8d82f55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypt.so

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libcrypt.so
        • Size 17KB
        • SHA256 efc5e404e7df1b8e7b2121d109ee66c914caa1e3b6455af00c6be13d7a113301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto.so.1.1

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libcrypto.so.1.1
        • Size 1.5MB
        • SHA256 4cccd05e001e35f63bf90a47e2da8c2902328bf5649342f224711405257d1e80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi.so

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libffi.so
        • Size 21KB
        • SHA256 c7b19259f145a5a6690199e838835bbb0df9247151b6eee731101db637e1e678
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libformw.so.6.1

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libformw.so.6.1
        • Size 42KB
        • SHA256 57c899aa6e9dc2a062a6bb7376690b227175796d026129934ff8c9576635b19f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgdbm.so.6.0.0

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libgdbm.so.6.0.0
        • Size 37KB
        • SHA256 a6c629c7435b638f962f8a6a5b122b87b1cd0f969e90eca49685167128b7e8a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgdbm_compat.so.4.0.0

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libgdbm_compat.so.4.0.0
        • Size 9KB
        • SHA256 e02eac98b6652f9dc3e4aaa103d8429999fdde7c2ff5dd59b682e489ce9ffff6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libhistory.so.8.0

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libhistory.so.8.0
        • Size 33KB
        • SHA256 6d055c637528fa87e4734593923e5ae4f68abbaa4badb970674976091d3d62ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblzma.so

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/liblzma.so
        • Size 101KB
        • SHA256 93d20a4783591edf0685175537d683562f28b1b7c5a7a870d7afe72e347aa13e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libmenuw.so.6.1

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libmenuw.so.6.1
        • Size 25KB
        • SHA256 1db256ff5e5e30c50909bacceed1e3f4edf029aedd952a23250e0df27b4b8d0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libncursesw.so.6.1

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libncursesw.so.6.1
        • Size 250KB
        • SHA256 bc3c6c7e58cb62d9b1a0ff6d2065db314fdcd06fa1d10273771f34e2f4deeaf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpanelw.so.6.1

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libpanelw.so.6.1
        • Size 9KB
        • SHA256 3cce49a1f0dbe1a2d475472cc071634b13b6da8cd4eeabd32664f160aea9e47e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpython3.8.so.1.0

        • Path /data/data/com.spoti.plus/no_backup/youtubedl-android/packages/python/usr/lib/libpython3.8.so.1.0
        • Size 329KB
        • SHA256 c2edefec1f332124b124cefdf05065d1c6b551f197bd2218e5dd242847e81a01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.spoti.plus/primary.prof
        • Size 4KB
        • SHA256 430a71ed4459325aee0411186b4cee839d338b28f9c78d633421b7f96b7e4c53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mraid_js.txt

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/mb/other/mraid_js.txt
        • Size 12KB
        • SHA256 61779e5e9b63efdceca3492897e0b02063c9c8f87cd1335cc735a3e56a1dd2c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        om_js_content.txt

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/mb/other/omsdk/om_js_content.txt
        • Size 38KB
        • SHA256 70bb8f51e8554a2dcf42e9e97205f0bab3623190ead9bdbeb4ec8c77cdc347f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        43280105491391fab3e9705f88895aaa.tmp

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/mb/res/.mbridge700/mb/config/mbridge/43280105491391fab3e9705f88895aaa.tmp
        • Size 6KB
        • SHA256 835779694bd6b8696dbb3ca0363a5f18d49e45ad4f0b6bb7efd6151b80e3ab5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pe_dropped.dat

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/pe_dropped.dat
        • Size 15KB
        • SHA256 3202cc6a8c4ac4b66337a899428e1bc94f2ab7695c2ac7271c91324010f1c452
        • MD5 SHA1 SHA512 SSDEEP

        000001.dbtmp

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/public.ldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        000002.dbtmp

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/public.ldb/000002.dbtmp
        • Size 16B
        • SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
        • MD5 SHA1 SHA512

        LOG

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/public.ldb/LOG
        • Size 56B
        • SHA256 d595f735d019e53e640674863ebda3dc63e683391ac20d1c95be5ec9eed4b90c
        • MD5 SHA1 SHA512 TLSH

        MANIFEST-000001

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/public.ldb/MANIFEST-000001
        • Size 38B
        • SHA256 cca3e94062b7325cf4c33e74d7930e46186175c8893654c520e4fc1d0456fc8d
        • MD5 SHA1 SHA512

        MANIFEST-000002

        • Path /storage/emulated/0/Android/data/com.spoti.plus/files/spotifycache/public.ldb/MANIFEST-000002
        • Size 47B
        • SHA256 f66582c281a2ba2242b479929a44b9468363711146dcd25b86818276d4a9ddfe
        • MD5 SHA1 SHA512