Overview
overview
10Static
static
10AlSalah.apk
android-9-x86
1AlSalah.apk
android-10-x64
1AlSalah.apk
android-11-x64
1Android Defender.apk
android-9-x86
8Android Defender.apk
android-13-x64
App2Card 2.8.2.apk
android-9-x86
8App2Card 2.8.2.apk
android-10-x64
8App2Card 2.8.2.apk
android-11-x64
8Applicatio...er.exe
windows10-2004-x64
10Applicatio...er.exe
windows11-21h2-x64
10BaDoink.apk
android-9-x86
6BaDoink.apk
android-10-x64
7BaDoink.apk
android-11-x64
7Barsik.apk
android-9-x86
8Barsik.apk
android-10-x64
8Barsik.apk
android-11-x64
8Battery Doctor.apk
android-9-x86
6Battery Doctor.apk
android-10-x64
7Battery Doctor.apk
android-11-x64
7BotWhatsAp...nt.apk
android-9-x86
8BotWhatsAp...nt.apk
android-10-x64
8BotWhatsAp...nt.apk
android-11-x64
8Bowling Time (1).apk
android-9-x86
6sqlite.apk
android-9-x86
1sqlite.apk
android-10-x64
1sqlite.apk
android-11-x64
1Bowling Time.apk
android-9-x86
6sqlite.apk
android-9-x86
1sqlite.apk
android-10-x64
1sqlite.apk
android-11-x64
1CMAccessIndex.apk
android-9-x86
8CMAccessIndex.apk
android-10-x64
8Resubmissions
05/03/2026, 19:15
260305-xyamaaax3z05/03/2026, 19:10
260305-xvr26aax2v1003/03/2026, 14:05
260303-rd357sat3x10Analysis
- max time kernel
132s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260129-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260129-enlocale:en-usos:android-11-x64system - submitted
03/03/2026, 14:05
Behavioral task
behavioral1
Sample
AlSalah.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral2
Sample
AlSalah.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral3
Sample
AlSalah.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral4
Sample
Android Defender.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral5
Sample
Android Defender.apk
Resource
android-33-x64-arm64-20260129-en
Behavioral task
behavioral6
Sample
App2Card 2.8.2.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral7
Sample
App2Card 2.8.2.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral8
Sample
App2Card 2.8.2.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral9
Sample
Application Petya screen locker.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Application Petya screen locker.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
BaDoink.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral12
Sample
BaDoink.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral13
Sample
BaDoink.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral14
Sample
Barsik.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral15
Sample
Barsik.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral16
Sample
Barsik.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral17
Sample
Battery Doctor.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral18
Sample
Battery Doctor.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral19
Sample
Battery Doctor.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral20
Sample
BotWhatsAppAssistant.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral21
Sample
BotWhatsAppAssistant.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral22
Sample
BotWhatsAppAssistant.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral23
Sample
Bowling Time (1).apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral24
Sample
sqlite.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral25
Sample
sqlite.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral26
Sample
sqlite.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral27
Sample
Bowling Time.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral28
Sample
sqlite.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral29
Sample
sqlite.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral30
Sample
sqlite.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral31
Sample
CMAccessIndex.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral32
Sample
CMAccessIndex.apk
Resource
android-x64-20260129-en
General
- Target Barsik.apk
- Size 251KB
- Sample260303-rd357sat3x
- SHA256 8b19f070988204f44da34567b4b81aa9869ca399827c92ea5a6397cee250c4f7
- MD5 43adcff1ff93576d6ac391cf520957e7
- SHA1 d86de92dea11d6abbac1fe225bfe8fe7968e59c2
- SHA512 0e291a932809ec9554d7242f9717bd854c2e3166f7673446d4979f33ab7e699a235387fe2eda33cc43ac14517c7f1d1dff580b62453902b2957960a1389698f6
- SSDEEP 6144:hOxjgYIcRbqGQGhFLE5RDRWPwbUcgPVKW64ydOK:hqUDc84Ffwb/gPVKW641K
- TLSH T1E04412DBC2E81DF8E16E13F60433A344F4A10581D80AEAD65B35E7EC694C9B1A1FDE52
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 9 IoCs
ioc Process /system/app/Superuser.apk com.mufc.fireuvw /system/xbin/su com.mufc.fireuvw /sbin/su com.mufc.fireuvw /system/sd/xbin/su com.mufc.fireuvw /system/bin/su com.mufc.fireuvw /data/local/xbin/su com.mufc.fireuvw /data/local/bin/su com.mufc.fireuvw /system/bin/failsafe/su com.mufc.fireuvw /data/local/su com.mufc.fireuvw - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.mufc.fireuvw/files/firehelper.jar 4729 com.mufc.fireuvw - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.mufc.fireuvw - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.mufc.fireuvw - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mufc.fireuvw - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mufc.fireuvw - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mufc.fireuvw - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.mufc.fireuvw - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.mufc.fireuvw - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mufc.fireuvw
Processes
-
com.mufc.fireuvw1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4729 -
ls /sys/class/thermal2⤵PID:4778
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4833
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4857
-
Network
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db
- Size 36KB
- SHA256 1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb
- MD5 4a8120c91e3143b2db43971dbc77cf8d
- SHA1 37c5700d35059c4e0a718ced73b3d73ba5d2b277
- SHA512 465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c
- SSDEEP 12:TL/j/ZapgPBuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPb8FOwIQQQ:TLroiD4PPvP/BlmqygGSgIQQQ
- TLSH T18BF2AFC7731C2674C2181037EC3753204A7C6A9E99E74BB77AB10092ED93600B039EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db
- Size 24KB
- SHA256 7ce61eccd1ae5b68635ffbf45fa57059e0137bf9a093cb3f5985a65a697ff5a8
- MD5 b87aa512691f7694379f740b0c9b0794
- SHA1 d9f8929d531a06fb2400071ec896d3e3e58c89ef
- SHA512 7eb8a89e2a95966014c7cd105f1b07aecdd8dbb4da84eca98bd27dc1753aed8e26b43aa220980dadf40a53a123127b15189a34de830293acb54bccca77424016
- SSDEEP 12:TL+/0/ZapgPBuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/ho+8d9RPPn:TL7oiD4PPvP/BlmqygGSP/hoVHln
- TLSH T143B290D772182764C110403BDC6B93614C7C296ED56B5FB576720092FE93700B079EAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
- Size 512B
- SHA256 5b1527aa918929296e60618965d6ba9d73b28ef429748c6805522a05df8b2ff0
- MD5 bb639a3110ba336123ef91e0b041d06a
- SHA1 cebb3cb8add9f93589ae414071be388191aa4227
- SHA512 ec3a0da2741b6771d1fefdf09c5e6c67cfdaf9fd52bf30ce0f6b2df56ca04ef131a757577c0bd16221f58216896a6fa95ebd7008c3e5b7a7cd525edf794f1e25
- MD5 SHA1 SHA512
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
- Size 8KB
- SHA256 fd2ded45ba74727faabcbd49485fefc2a0815499766e209872ec01e71985f018
- MD5 bdb51643f17c8abef06bd4d87fbde667
- SHA1 81c42c1bfcb329aef77b29c3fe0a727a1dee8b28
- SHA512 a72360e7fe17337912d58f80968be61b21f0123b91794a9163e1a07543d066b5acdfbdf41e1bf76a1930a2473873027ca4c4c0e71c6d7cb3bbf794ee43c07ce0
- SSDEEP 6:7+/l96/SFn1Cng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK/:7+tU/TnqLiuWdYRmBEyPbk
- TLSH T1250222CCA3C00A12C829A6BB90D483500D08AB298161CB17969109942C074CCE8B0E14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
- Size 8KB
- SHA256 e8eaabe5edf7c4b4136b0ed308738907df4c1dbe3a7dcca0e374ff584b3097d7
- MD5 a9f6a935b2bd1ad055787ae9d74f40b6
- SHA1 1a360b383510716a12118b3bb7f657b630ca1c5b
- SHA512 fdb3b7619754647db8dc20bbba4fff42bfc5d82ec85d8593c01df121e7adb86865f739e9f602b5fe2b93efbddaad80c7f26a1af4c0d03b62ee371f7b5812d208
- SSDEEP 6:7+/l9HTPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKNK//Po:7+t9qLJdeWRmBEyPbLPo
- TLSH T1CC02228ABB800903C46E9777A0C883501E50A7289223CB171AA10C58AC0E6CCE890D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
- Size 16KB
- SHA256 3f604c0a732edd7052e6ff7ca23d56d446af75ab20b852fe783b5f2e3680f5a9
- MD5 628faa15c0bb69925b7b0eeb48211bbd
- SHA1 7c86b998d175694751e1216fa1ae4c7ce9bc0e4c
- SHA512 8a9ddf38b2b162db27e4c883dd12e7b502e25cd958bb0470f63129bfb9c3e2f8de2a59e2d43e986bf4ebbe2858e59c3641d1691db3fc2122ede911467244a138
- SSDEEP 12:7+t75JvqL/j/ZapgPBuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbC:7+tdJvqLroiD4PPvP/BlmqygGSC
- TLSH T1DF72ABC7721D2674C218503BEC3712204D7C6A5E95F74FB67AB20092ED53600B0B9EBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.envelope/a==7.5.4&&3.0_1772546789248_envelope.log
- Size 1KB
- SHA256 da63319d686846a87c02af5be27fb5bad7ff1220c3c6087b62fa70d70110d656
- MD5 3e3284841be7bd090dc26a99e494beba
- SHA1 f99682d8fceaace9dcd2fe00e1000ed686d3a0cd
- SHA512 f1235bb5523fac828e1ec45964e02708f7c3fc33e261df269c5cbf506db41e8a7d8513090b5bf1c1e097b3c17343bdd1a0d60ed8e76725e1444f7fa72f01e520
- TLSH T160310C9AC298B8436C174AA285E11DFD9F8A4CDC9CF801B74C7CD0055FFE5C05D012D6
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.envelope/i==1.2.0&&3.0_1772546784752_envelope.log
- Size 2KB
- SHA256 e194e9609e5603fefb89021b85cf2e2a37acbad700d9b0a4d4b242f05d36c405
- MD5 6552b0b6b4370435d02f853c5cd2fd13
- SHA1 86869bfb2ff367a8663eaba9a023ee46d91ef098
- SHA512 0c31ab7bc7d08d63ada5672dea9134a40bfe2d0d07e7b348cab83e4a79edf8ba072dc814f1f451ee23f098730fbe96eaf4f8013bf0debe75fac0269e27289354
- TLSH T191416DBB3858CCC2847D16A218F74DA18DBAAD0A46A96FDCAD143F4307E5C53AD719F0
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.imprint
- Size 488B
- SHA256 70d7b24dc4ca2022e4a7f171bdfa3f6db34d86bd587fb6110e5200769cc4b235
- MD5 f5473c08f831c42b5a7fc0a8a48761c6
- SHA1 c5873e79bc641366158f75d4e102c245b92a526c
- SHA512 3fafc57240cd33a5800d907d3bc9beefdea1a9b18630dcaad12d4fc30b5210c11c28ea17fdea91f51cdf4c13106f3a27276fcd71d25666de78a2a41311e881ab
- TLSH T12FF0599EB6A17D9D37C822C4EE8C2404184F9F2E0B3A04048E0B58876621526865C410
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.imprint
- Size 995B
- SHA256 154b2a12c3b5987c4875dd27785d4bc2b15a91e4ab0acac05aa5495786746d8a
- MD5 e7f1c0dec67880b5b281ab02d839659b
- SHA1 7df851351da04ad9377ff27cd43956d694a394fc
- SHA512 2997554b6755ad73ccf6e18741ad4390fe3f615a612abef1c778a4fbdc51253b610e337e03e6aeea76956a14fcabafea0472b7a238b614091fd10bbe35508bab
- TLSH T14911EFCCAAC1AE5E3A48B388ED8754F8370FD79E0F2600C18406AD03DF331B6AD45841
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.umeng/exchangeIdentity.json
- Size 206B
- SHA256 ac3c0153d86e8b6f0fac8eab0840296d5e0b12a1b02d8f2da02970b23fdb7035
- MD5 f53a46c5e053087bb6bec3438a6397b2
- SHA1 1b830dcded054c8c7d6c6a17015222e4694ee51a
- SHA512 6f9f5e063326af2a85ce6bb9637371ebb986e85153623e90fdf5055f408eb195f94fd0a17e8fcb73b9771cf5a83fd5bff8dbc724c8ce96d996009c1c6966652f
- TLSH T10AD0232D740C48A028BC1352178A68591F5A58A046460C505D447529C9FC014FD0261A
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/.umeng/exchangeIdentity.json
- Size 162B
- SHA256 8282fa0b8127f062cbad50a3826a8d1a6dfe7f3f04736478155e8f0eebe06515
- MD5 b8b5b1ee81e5d6e08367c7809a749f3a
- SHA1 77f6e57eb53c40b85a65d985097588beabb7ddb8
- SHA512 5b44c62fe7e5cf0a25380c74b6a3626c4758bcf14f4be3dadbfe0711a09842b8ff162b02381bb301302119747b6518af5ca8cc1ac99cdb05da548ab96849fa05
- TLSH T146C08C6E601C8CB054BC61621BDA48AA4E6668A186810CA15C84713ACAF8168FA1261A
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/396383d53ce06946633bdf865c290271.d
- Size 32B
- SHA256 ac65487080a99ebcfdd50bdbdf266b007e721a5cad188bb4d69cd1d69a3dddba
- MD5 71eda437e084a1ddf079455790c2dc26
- SHA1 6cb8b7550425152f0d5fc48f3a0ada95e1a39cd5
- SHA512 58e6b1b2ca0a86f68fd6cc0b5f518af9f197b962a3c593ae3643252fb4fc7dd7a95837f68e22ee2a74ad717e6aefbbd6a9e65b0e92d29211ca0646e8a1a1eb50
- MD5 SHA1 SHA512
- Path /data/user/0/com.mufc.fireuvw/files/exid.dat
- Size 97B
- SHA256 6cba942787270920d6fe749c11e3aaccd806369e0fcd6759f74249818e061f90
- MD5 6c5bfc3922da20300dc200b396a9b0ef
- SHA1 7f51f2eb5871a448ffa798fc5d3c980087871f02
- SHA512 b941882b555c988c2220af06b60e744cb1f7a0378379e9d592d1a815023d0ff5f11af14b95927faab5acd44c512a3da9cf00657acfc4c35f1d5c4fba78d399fa
- TLSH T1B4B012F9406C54B95470284B62D2DCA75E4012336900141030443451DBFC34DC06A847
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/exid.dat
- Size 55B
- SHA256 961f7788e4eec232fdb4245d2b19987a80aa0da491e70ef401ef7bdfe30719ff
- MD5 8396b61589df6484098e227f6bda6afc
- SHA1 13b817f95f8cde006743ade05ccccb617d76370d
- SHA512 9ce24c14225ddf56c14c7dad8bdebaff837c3836191deec9b60e668cb50f2bb08f054156d3b9bc787cfa00bd5d83637ebdca254b401a853c786bb2ed3536f5d9
- TLSH T1149002FD545C90F194B5208B92D5AC23194461375654281144583451D6EC15CD029C47
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
- Size 21KB
- SHA256 b678a11102acbf3d118fa6b4d153d6c9bcc93e4a9530fcb8a7c5e0f985c70857
- MD5 e9fbfb4a5a2af96193ddaa105c9139ef
- SHA1 4f29fa3cbbbd5eb175ad4185b6d6a3923778d742
- SHA512 ea217f4be3129069f8c681206e4b1155f92f7de99cca420183c4d8118c3738ccbe5df1c9e5dd7b95fddd57341e64d9ae45555f7b1efa13df335267053ab6746c
- SSDEEP 384:SlWPdwhIOq4xWhGQbdL+lpi2KmqMq1spVpVYSkVJNVVAju1x7pTERYa3sbr:Sl8cIOq4x8/xeKbMZpVpVBkUoyRYjr
- TLSH T1D9A2E13A70FAE6AB38605D313512D99C4373D23095547E830F7A0BF42AF5A5426E8DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
- Size 21KB
- SHA256 0e80f9711450da54f7e7650848370f5276319c1627fcc33e2388214e0318d75d
- MD5 baa6c2e617cf078af55f93b8c6892864
- SHA1 ebc5fd019a7e985d661c42e0c7e38501ca7c4046
- SHA512 aa22f1016c029fb3a06502d3eb90e8c3d061756add78a34fc9e69c3d8e6e3cbd3aa7f55544618f248980180e8077d486e868cc70a3a701ec9b3388a9cef9dcfc
- SSDEEP 384:E/qXw254Fe/y2KLry9FBIco7YLKQw1umXBkKXfu/4VhD9PUr2cCIHNh7FvGm+EZi:81wRKfiFBIbrQGumOKX79PBcCEtHPZru
- TLSH T126A2E1D1BCC34261F049B9FC0BC6293E391DD68687161DD3EBC730546ABEA573A0AD88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
- Size 44KB
- SHA256 48e844d5d4eb116bb0aaef8e5da85f12958d53a58ecf95d737359b2699a24c82
- MD5 efb8c11a1074065497f8776b3b9ee783
- SHA1 b62dc0e90c330be4ab7f05af3b8ded922de7acc0
- SHA512 bfd6bab60d2c229a17ee9001025dc633d93b68f2247199dc2bf47cedc4da1d3b68914fc969c3b254033c838a53755eee83762901ee2168d291323b09b113dad9
- SSDEEP 768:Xfo7m3QvfD6+R/OvNRfufAMTrU0oP2VgbOPzLxyQ3gDKpT++:vo6Az6+R/oRCtVN1mDg
- TLSH T13B23F802F966D853EC5D9A7E92F397926332D76543238B4B0ACC85B8DCCF2D52E486C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.mufc.fireuvw/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzcyNTQ2Nzg0Mzgy
- Size 1KB
- SHA256 14e4473e1220d3f866dea794764263438019a77585595a7ff5b5c95469a62010
- MD5 a77a460000ab9a484bd00dc650eedc4d
- SHA1 85ba89606952dabaec6ce8a10bf1923129db9c61
- SHA512 8ee6f6e1453bdd0a8eaa016d22861c53d3841b582fff9c348eaf640e417f25b7c5f9824d44e856a31b2bce2e5db8b7d6b814fccc2ecbe147c31884ab5efaf5c7
- TLSH T1CB21B7A5987733F4E2E96C20B85984B30E847F835A6F0D8F6634B49F2A492A2C503540
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/umeng_it.cache
- Size 178B
- SHA256 f124a55795ccf0b664c5cd1f7c140d487b44c188c78d575a2c11abfdde3526e3
- MD5 147ee30f89a6d837f4f1adb6c220ebf8
- SHA1 8ed6d12e7a83ee907988dde79c246c7333b87257
- SHA512 4ec0278e2ce6581faabec8eeeb31ff9bd87149b59030a070205ee15f3a6710815a8a4226ce527939d94f85cb57b588882315c752961202755886029ae527cd4e
- TLSH T18EC0124A230002FE7294828E124850925C49B252AA2310A60168B2DD7A5CE55EF3540B
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mufc.fireuvw/files/umeng_it.cache
- Size 350B
- SHA256 9d07eda1ecd56a93d34f18d9f7f8ee9a5dca2aa71566d9752b5a0d27c5d8576f
- MD5 4a96f689dd87105860c9400ef3552bbc
- SHA1 270d59d662c981956af008d793ad3fa39c52280e
- SHA512 391fada1313a948c2c2e7b79e3cfb13867b8ba8a3cd7702066b386e2414027f13cbbec3739f6a36a06e011039198cbb8a69d51573d0400935a87a29f0dc625ac
- TLSH T1B4E04F8E230002FFF6E9C28E164C50535C49E252AB2320AB0178BADD7A18F95EF3651B
- MD5 SHA1 SHA512 TLSH