Analysis

  • custom tags

    dropperobfuscated
  • max time kernel
    149s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    12/08/2026, 23:13

General

  • Target
    0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce.apk
  • Size 12.4MB
  • Sample260812-27eptavvbz
  • SHA256 0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Encrypted or packed staged payload inside Android package 30 IoCs

    Extracted asset shows near-random entropy without a recognised container header, indicating an encrypted secondary payload staged for runtime decryption and loading. Correlate with any runtime class-loading detection on the same sample.

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • wthavs.sticker.emojismile.stiemoj
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4151

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1664557424545.jar

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/1664557424545.jar
        • Size 10KB
        • SHA256 8ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        03ec96393144957a01f1073bd94eb98ded667a27e668bbc4d59db6969f75d513.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/03ec96393144957a01f1073bd94eb98ded667a27e668bbc4d59db6969f75d513.0.tmp
        • Size 23KB
        • SHA256 12cb0cc10e67d5709fa99b848cc8dca4157053b951e956c7b486f60c666c7f1f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        22049f29882fa97c41a59615fe3147db4fc4fa06c44a013843515f27407fcd63.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/22049f29882fa97c41a59615fe3147db4fc4fa06c44a013843515f27407fcd63.0.tmp
        • Size 273KB
        • SHA256 cf1227fcd308ed24b3cec75003b2eabd9e16ace4bbbe5dce60b3463dd09f4a15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2310b6bdb5db6c7b583e32576b318f6ddf74a31f77c7567d4823f7373a31ff49.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/2310b6bdb5db6c7b583e32576b318f6ddf74a31f77c7567d4823f7373a31ff49.0.tmp
        • Size 309KB
        • SHA256 584175d3f91230555e799e7bc032f4b45895d859a1ee4f85f669e06929b6894c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        268f604fa68bcfc3debe941d3aa9f75861bddeda13ecd688fb8d543cda6fe6e9.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/268f604fa68bcfc3debe941d3aa9f75861bddeda13ecd688fb8d543cda6fe6e9.0.tmp
        • Size 220KB
        • SHA256 fbe894ca89575a1b2b05373d88c3cc1abb5b48d3928cda62ff3d27f879e91e82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        3552c7b49331167da61b26807326dca566b51bb1558f57299a5f8d1bf2bbb431.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/3552c7b49331167da61b26807326dca566b51bb1558f57299a5f8d1bf2bbb431.0.tmp
        • Size 134KB
        • SHA256 89f4eb94d4f250ed92b8ba2c3f138a38bc4a0061f50f82947f4824a553e3f815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        36062cdaec8f952c867f00d7d0d1878d05ae4004b119491976be2d4ab7556927.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/36062cdaec8f952c867f00d7d0d1878d05ae4004b119491976be2d4ab7556927.0.tmp
        • Size 243KB
        • SHA256 93fa16cb241c902a104ab3e2785cc69656798998fd4d51ac1c8aa72d0a6e1d56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4840e943a2727958a39f8d1213b6e9b21b58de53729b1293162d88baba994733.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/4840e943a2727958a39f8d1213b6e9b21b58de53729b1293162d88baba994733.0.tmp
        • Size 76KB
        • SHA256 c5934c91cffb6aee54a21f9623812d549c6d3ce75aaa88c41679c794758f3ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5729984d7e883a8c105490cd28e8f0a236d6b520affaae8d64720fb9b846fca6.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/5729984d7e883a8c105490cd28e8f0a236d6b520affaae8d64720fb9b846fca6.0.tmp
        • Size 45KB
        • SHA256 10613d7701a6d09313e5c64039a045da22fb2ba4d350f0bfdba58d5e404c427e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        647ff78b39c635c82845a2f8667b6dbb7a526e0860b59cba6819f5df89c848bc.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/647ff78b39c635c82845a2f8667b6dbb7a526e0860b59cba6819f5df89c848bc.0.tmp
        • Size 330KB
        • SHA256 13d6bdda5d10bf0072f8df66c3a7d27d2bc46c9826eccfaf64910d8654ae1b45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6dbbe91737743602ff236d0f67f9bebad0f8240b4ed75dd58a770247c9ae22cd.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/6dbbe91737743602ff236d0f67f9bebad0f8240b4ed75dd58a770247c9ae22cd.0.tmp
        • Size 168KB
        • SHA256 44c27fa96f33ca21f801f82a971cc6c01d3d6d9a72d573d986a4900bb9285217
        • MD5 SHA1 SHA512 SSDEEP TLSH

        70f3e9980bd26023370d64eb1c07e0f3aaa665731dd2bdf4d9ec313064d2faa7.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/70f3e9980bd26023370d64eb1c07e0f3aaa665731dd2bdf4d9ec313064d2faa7.0.tmp
        • Size 131KB
        • SHA256 b12f2f3cfbccabf9818dc8204d15a506a369acb1cd4b5458be71e2768d7d3c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        74c043fd4b3c36f87130ab218f6a68eb06baee1461c82c5152e997e5ccea1613.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/74c043fd4b3c36f87130ab218f6a68eb06baee1461c82c5152e997e5ccea1613.0.tmp
        • Size 16KB
        • SHA256 9c28c09f3bf5dc7df88d9bf7353b8517fa457e94a35aba0a676779ec9e2a9e82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        80558ab16f30ad607efcf5fcfdad31ac4e344946396ec14a619ffb4c39c91274.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/80558ab16f30ad607efcf5fcfdad31ac4e344946396ec14a619ffb4c39c91274.0.tmp
        • Size 179KB
        • SHA256 5344d2a2894b8f45ff85f02744e90b89c0846453346617fc68ae88a86af2a473
        • MD5 SHA1 SHA512 SSDEEP TLSH

        85823bce429f51e8da8523d3a101d9887befb66713f17164b9d8d784f0703bb8.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/85823bce429f51e8da8523d3a101d9887befb66713f17164b9d8d784f0703bb8.0.tmp
        • Size 233KB
        • SHA256 7dd01699bad81d02f1fe5d6bb54573bfe86bc01aed5ad6bad5e754289d39a7aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8a6be401dc82643e1f035b51c8f83fc50f852ff4f360f85ba8623aeb310109c2.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/8a6be401dc82643e1f035b51c8f83fc50f852ff4f360f85ba8623aeb310109c2.0.tmp
        • Size 314KB
        • SHA256 3083913a62eb1434b9428174cf6aab348cf12dc430521e872f3bb7aa2db07559
        • MD5 SHA1 SHA512 SSDEEP TLSH

        95f49b071c5e5694e2dc60b5880e3c3fa403fba2bba1ea3580215dce06c5baff.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/95f49b071c5e5694e2dc60b5880e3c3fa403fba2bba1ea3580215dce06c5baff.0.tmp
        • Size 113KB
        • SHA256 b99bd95e570352a80e6f416017e05801a4458e903779c440db9ce80bce6c99a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        a39e75884c8761f00d187a17c9f5febdca1d3567e0c82570f82e5ca2420bc902.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/a39e75884c8761f00d187a17c9f5febdca1d3567e0c82570f82e5ca2420bc902.0.tmp
        • Size 457KB
        • SHA256 bb0b97fb4844c54c0b468b6bb56f628d36727288f93245ccc906f45179cf9afe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        a84bc2bd0701003e445d6504bae8abc9911369d7baa426e7c21f595f2a3b908c.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/a84bc2bd0701003e445d6504bae8abc9911369d7baa426e7c21f595f2a3b908c.0.tmp
        • Size 426KB
        • SHA256 f52eed0ae0d7482403896afe56e351fb0827cd6a9c059576c90abf5905ea419b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        a978c6bcba4f14bd33f4add3b58a77dc302da8e4e51b7c43452624c631f3598b.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/a978c6bcba4f14bd33f4add3b58a77dc302da8e4e51b7c43452624c631f3598b.0.tmp
        • Size 481KB
        • SHA256 cfb7c864bb8f875ec40afed13cb3b6beb979ee58b9b166940658aa20eb421b06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b505666f3057d2417964cd983afa2c92cd586ee8902a9ef5de0862d73d3b0749.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/b505666f3057d2417964cd983afa2c92cd586ee8902a9ef5de0862d73d3b0749.0.tmp
        • Size 138KB
        • SHA256 a8cd3ae2dcc6d3e7c72c78b1f9c4849f0f867d1d1bcec9ca60cf277d66733c07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        be3c64540c6911d3d826b19a0182680786f00ccc978a46277842d7e2162521f6.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/be3c64540c6911d3d826b19a0182680786f00ccc978a46277842d7e2162521f6.0.tmp
        • Size 438KB
        • SHA256 530c1cae13bdf964790fedfe1e92598021a319b8a6ea5607aa6048d1044751f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c172ba76f103306f575ed97e220e3d7ad1cd035c84f4695813d7453cb7e7d97f.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/c172ba76f103306f575ed97e220e3d7ad1cd035c84f4695813d7453cb7e7d97f.0.tmp
        • Size 462KB
        • SHA256 0b0f27ce5417de9860372a45e48996895f4b66434bc0d17207f4ea7d30336a0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c50314bab0f77d533d3524d8c81c7c07d47f5151f28970876f01f6dd68df0dde.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/c50314bab0f77d533d3524d8c81c7c07d47f5151f28970876f01f6dd68df0dde.0.tmp
        • Size 100KB
        • SHA256 1a9873e287a90fb62621c6917ada400e27d1ca92ff381184fa67c34c6d84bf35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cbf7ddd15cbbc36b18d22e595d7a33d5fa8667a78a3350025596615a2ad79476.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/cbf7ddd15cbbc36b18d22e595d7a33d5fa8667a78a3350025596615a2ad79476.0.tmp
        • Size 258KB
        • SHA256 a865a85f0fb4d1f3e5f9ec15db2276043de4211c776469ce7dceb247af694433
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ce59cdeafcc34e0d87847c31870c6bba5269ac990c8a30251dc7261cd2bc8f18.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/ce59cdeafcc34e0d87847c31870c6bba5269ac990c8a30251dc7261cd2bc8f18.0.tmp
        • Size 248KB
        • SHA256 423d96cedf06e468ed5116d59e65bdcf8c547b917a6d87a57fdd4120821c773c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d639e0169fbf19569f6e3fe3b535dc6c5f47ee2fa0e86fade942cf3e2f6e3bb5.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/d639e0169fbf19569f6e3fe3b535dc6c5f47ee2fa0e86fade942cf3e2f6e3bb5.0.tmp
        • Size 263KB
        • SHA256 c4bce281c871d223bcf7e53678a5bba57626783737e3e1627e82be4d04d77f28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e21fe73c5d2b5af9201c5af1a8c7146494494adfb42dafdaed34203562cfa5b3.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/e21fe73c5d2b5af9201c5af1a8c7146494494adfb42dafdaed34203562cfa5b3.0.tmp
        • Size 71KB
        • SHA256 a3caa374838fbaf803336d2877de3da288f5fbd1a466ab240c4462eb03ddfc99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e821b6809ddb1924370aaf85f8ccf973cad13aca98d38d60e13db1881a9f60a4.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/e821b6809ddb1924370aaf85f8ccf973cad13aca98d38d60e13db1881a9f60a4.0.tmp
        • Size 214KB
        • SHA256 afb163d53c7cc897583ebc601263bbce8f4cc82f0be2a84aa37dd73dbcc77e68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f5ae3914ffe0f6a0f011dbd3e214bf9efed0ad603efda2a6b08f4c542869f4f1.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/f5ae3914ffe0f6a0f011dbd3e214bf9efed0ad603efda2a6b08f4c542869f4f1.0.tmp
        • Size 269KB
        • SHA256 4dcb9d806debea581c0a0a4ba66fd8728768aa6e81f7fa5a275cbe4a4091a705
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fd9b5637111dd0a7f362d37a080f32cc8377b015c0114dbdfff38d081d2803af.0.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/fd9b5637111dd0a7f362d37a080f32cc8377b015c0114dbdfff38d081d2803af.0.tmp
        • Size 323KB
        • SHA256 a92daffb8cf3f888da04ed9c9998d4a425db1e494d74ee8f70418a35e8b76013
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/journal
        • Size 6KB
        • SHA256 f4ec42d75dad847ca3053e3df1098a89f063404e8dff2bad316d0aabef838433
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal.tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        1664557424545.jar.cur.prof

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/oat/1664557424545.jar.cur.prof
        • Size 197B
        • SHA256 182bbeb06fa91c8e09b93f74f7404e151f812275125470045cf7a46c7b48b7b8
        • MD5 SHA1 SHA512 TLSH

        1664557424545.vdex

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/cache/oat/x86_64/1664557424545.vdex
        • Size 948B
        • SHA256 e9e16898bfb89b40c3e9972f977730473d9b45ed0fdc5cbf868ff0e71f064290
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 256535f69aa4e76e47f5c44a20dc429f8eb8f6d58bf8a401c45f57ee6ce2cbb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 cf5f7c25382f88b4c55b0b6d497fc9ed0e653cd0d10c06f7d828a564c9d7b2e3
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c6d6bc100edf0950172dfb178a90f3c80a02e966c65c3380814928e4e37506e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppEventsLogger.persistedevents

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/files/AppEventsLogger.persistedevents
        • Size 402B
        • SHA256 27e956b7e77fb0f81f098476b0364ca1d47a9ec9abcd1e1aca28919374892fc0
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation3226834792114795422tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/files/PersistedInstallation3226834792114795422tmp
        • Size 114B
        • SHA256 1998ef37dc128fa43e86cf1738160e8f54a52f6b428b2f4b3a3ba03ce7465ac0
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6213112670268719441tmp

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/files/PersistedInstallation6213112670268719441tmp
        • Size 90B
        • SHA256 63dbffa38af316841b9a58c1cdb487dea2013d89e04b7b89cea6f89b70c0884e
        • MD5 SHA1 SHA512 TLSH

        frc_1:107060604371:android:4c99f047a462f871b5d326_firebase_defaults.json

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/files/frc_1:107060604371:android:4c99f047a462f871b5d326_firebase_defaults.json
        • Size 34KB
        • SHA256 9e923dfa4ee149e266bd0a8624001fba7c273cd32ef8e444ec46fa888b430395
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 5d80724770629e457ee6d02f803c4b93a10fd18183000f5bf9f651deefdbb513
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 32827f6573e52731d03962b08f72a398ca0d9cf35f54c32ed190072a7f9fb4e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/wthavs.sticker.emojismile.stiemoj/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 22a710064c982eefe4560f20566b53192e2d84932e87ed69e4032c73a163a880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/wthavs.sticker.emojismile.stiemoj/oat/x86_64/[email protected]
        • Size 59KB
        • SHA256 6910e6f782f7451f0c1e011bafb73ee78dd02f5598a8c2bc2f88cc6bde1b6e00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/wthavs.sticker.emojismile.stiemoj/[email protected]
        • Size 3.2MB
        • SHA256 920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1664557424545.jar

        • Path /data/user/0/wthavs.sticker.emojismile.stiemoj/cache/1664557424545.jar
        • Size 21KB
        • SHA256 9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal.tmp (deleted)

        • Path /storage/emulated/0/Android/data/wthavs.sticker.emojismile.stiemoj/cache/xrequest/journal.tmp (deleted)
        • Size 33B
        • SHA256 111d9ad8a6db8cabbad4371e03ca57b0ba5e8f96f26fb964e885f3b30f4144c5
        • MD5 SHA1 SHA512

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH