Overview

overview

8

Static

static

6

Perplexity...ro.apk

android-15-x64

8

Resubmissions

14/07/2026, 22:15

260714-16kc8sex3p8

14/07/2026, 21:50

260714-1qa5maet5n8

14/07/2026, 21:48

260714-1nqgjagv9w6

14/07/2026, 21:43

260714-1k8hyaes6p8

Analysis

  • user interaction
    yes
  • max time kernel
    4s
  • max time network
    43s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    14/07/2026, 21:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Perplexity v2.92.0 - Pro.apk
  • Size 212.8MB
  • Sample260714-1k8hyaes6p
  • SHA256 25cedf37811da053167ca3e2a91aa7120b489919af96d80bcb8660be122bc015
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectiondefense_evasiondiscoveryexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
    collection
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • ai.perplexity.app.android
    1⤵
    • Checks if the Android device is rooted.
    • Reads the contacts stored on the device.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:3403

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events
        • Size 72KB
        • SHA256 c8289d7166d3e0f7ee507ecb9569f9556567dbeb7eed89cd7439ff49e5a127d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b16b6b640c03d0c35d8480985121ee77f5d1d0fa27b32981a6da65e3908c2ddd
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 dbe535f6b0d2186340dbd41374b741b3fbc22195bad857b5db933cc1b3e4b76a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e6b8be705277b139acfcd3450a581f43174dffe5a47b98eb99fa49a007a90800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 8cb9ceeaf8d70ef8087717d46407f6464eca8ae754c705cc80860977a4d84792
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 cd315d0a0103ec7e5dbcbbce4ae117ae5582c29ab83f563ec16ba8af04c4299b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/ai.perplexity.app.android/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 410859da00055d7273451d5eb659ef3cc369e37ca2a9a7ce805db02109ab422d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 17bef17d48ad21f50b044a4c212d125c25a339af2d24b0fe7efed7e5e54ba412
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c697b57b70314220ee719ca0ba8916117d9c1887251b2364326f92ed12740b58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 671b4e352d05542a68962ffc0ca5b796b14d2f36b0541ce35cbd4e29cb5d2718
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 494d09f5df2ea161308270ef26eb4d44a5a297f88992affb2f6080bac9dea880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1ab23553bedf5087444a6f0ae5facc646184d446d4abd454ae62414ec86cea39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 59f0ee4cd8f6e2bf604f5c0b4e22e1848567f4e79124eb59edeffc18606d24af
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 11dd8821432e665b9f8e5df9e19a723c3976b47bca519ab50d7db73d11671c11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9c9a2ab05b1613ead41c6461a16e824658a5d816a6c76dba5dc0dafc23d3989b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d5e32a7e02a264ea439e97cfe9ee9303ddb18c2b7e8dd335b6cef7a2c3cc03b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 43e02277d92824499da8aef03dbe997044d0f8dc62c80de3ea69fed995840e65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ai.perplexity.app.android/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 64b23a021e9a2a7095870f1c87a29d7f8612b827a9a0c08866214d14fd3f25f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/com.crashlytics.settings.json
        • Size 774B
        • SHA256 ea723f183435c229b20abb5ec3dc9bbab89e5902a09506825f26c038b45abc50
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000000
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/event0000000000
        • Size 3KB
        • SHA256 ebcdcf780d4240f8ecac61f86f39545da175f55860ce00d725630f765ccba3ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        keys
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/keys
        • Size 353B
        • SHA256 e24a15a1dcc314523f5c1ae4b8d2df1ab84f6ae675388b6b48102954b848ae60
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/report
        • Size 810B
        • SHA256 03ce8a419c2ea74acd97726c3b1a9fe531d84bcd6936b4153b0b210d6f7fcbaf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-data
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/user-data
        • Size 13B
        • SHA256 718bf1aa55b13315471e60d362327b973a71b0de31922d9f0f1e9b54f422dfb7
        • MD5 SHA1 SHA512
        Submit Download

        userlog
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/userlog
        • Size 959B
        • SHA256 b796124644234c5ee990544a89959c010df217925070928076282e232c5f0b33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/ai.perplexity.app.android/files/.crashlytics.v3/ai.perplexity.app.android/open-sessions/6A56AE3701DA00010D4B5CDF16C1B15A/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2686643759059840103tmp
        • Path /data/data/ai.perplexity.app.android/files/PersistedInstallation2686643759059840103tmp
        • Size 90B
        • SHA256 cc626be0c7e9e40822b942801bb1f921e91c6ed92ccfefabcb1b8d8dc279159a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation2716897036479887846tmp
        • Path /data/data/ai.perplexity.app.android/files/PersistedInstallation2716897036479887846tmp
        • Size 565B
        • SHA256 329e853bbec1563a12aff30aece0268ab053397d6b7b26fb31afea11b92d46a7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2MDI0NDU2NDU1NTphbmRyb2lkOjM3Nzg4N2JlNjg2ZGU3MzM1YTBiY2U.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2MDI0NDU2NDU1NTphbmRyb2lkOjM3Nzg4N2JlNjg2ZGU3MzM1YTBiY2U.preferences_pb.tmp
        • Size 427B
        • SHA256 15d799c1f7a2f7494356d6f87e3bfa281ba103fa5e44fba81fe7e40cc3a4dbb2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2MDI0NDU2NDU1NTphbmRyb2lkOjM3Nzg4N2JlNjg2ZGU3MzM1YTBiY2U.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2MDI0NDU2NDU1NTphbmRyb2lkOjM3Nzg4N2JlNjg2ZGU3MzM1YTBiY2U.preferences_pb.tmp
        • Size 451B
        • SHA256 3899c5825112e835931ece182869fcd84ad381644bf2572608b246fcaef8556c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        discover_cache.json.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/discover_cache.json.tmp
        • Size 182KB
        • SHA256 f24bd8994f452eac359c416a62593a15e1d2fa80b1c05b96bbd71e1d4409bcac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 d25b23d5afd471043562c0a30e90af4da6258e2c4292497b0fd88c1d7111814d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 285B
        • SHA256 5bce7ca85412686e11718544bb710a86f897d6e661414d2f0538796611a807ed
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        search_modes_preferences.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/search_modes_preferences.preferences_pb.tmp
        • Size 555B
        • SHA256 dd63aee54facdfb9b48fe1a3079ecafd8aa5916cf120d13bcea056fdf3210a91
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        server_eppo_attributes_preferences.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/server_eppo_attributes_preferences.preferences_pb.tmp
        • Size 587B
        • SHA256 d015b8a0d9fd59a5061ae45dad4b373220f09cc451aea32b2656b8b9aac0d52b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user_preferences.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/user_preferences.preferences_pb.tmp
        • Size 98B
        • SHA256 7e7a88e44dbc1bd46a06b154a6a23d5aabe9b2dcabfae48ba6378771872891aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user_preferences.preferences_pb.tmp
        • Path /data/data/ai.perplexity.app.android/files/datastore/user_preferences.preferences_pb.tmp
        • Size 26KB
        • SHA256 8eec4c4e2b8ec436c9f362344cdc1d824a93d70f7266113fcc5a6bdccc7a0301
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        eppo-sdk-config-v4-flags-ZIGRBSvt.json
        • Path /data/data/ai.perplexity.app.android/files/eppo-sdk-config-v4-flags-ZIGRBSvt.json
        • Size 824KB
        • SHA256 67d05dd45a63ef2aa4538c578e524e839b81ad9c0f3ae0ea4bdeae29424b9207
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download