Analysis
- max time kernel
122s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
17/08/2026, 04:38
Static task
static1
Behavioral task
behavioral1
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x64-arm64-20260325-en
General
- Target 8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
- Size 14.1MB
- Sample260817-e9ljtatblf
- SHA256 8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b
- MD5 3789a9c47d957662fb000e365ad5bbfe
- SHA1 5050d8f28e67d9509a588b14b00164ec4aaded93
- SHA512 8a47107f914b0b22e88fe9148c3d5d2297357bd2c4351be463527d3ee63587e0a90a91240e80d7d5608cf047944e910160bf4cf565f6dc0f5c3fa46e1bd6c819
- SSDEEP 393216:dRsr16TFK34h8qCtklD0lCsIhJrY4agBy2JJ2b:E8Z/5CetrhogBy2JJ2b
- TLSH T1DDE62267F72E949FC8F39136CE3A026256675E644643ABE72D04F22C59B3AC05B49FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 4 IoCs
ioc Process /system/app/Superuser.apk com.color.cool.wst /system/xbin/su com.color.cool.wst /system/bin/su com.color.cool.wst /sbin/su com.color.cool.wst - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser com.color.cool.wst - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.color.cool.wst - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.color.cool.wst - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.color.cool.wst - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.color.cool.wst - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.color.cool.wst - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.color.cool.wst - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.color.cool.wst - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.color.cool.wst
Processes
-
com.color.cool.wst1⤵
- Checks if the Android device is rooted.
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5050 -
getprop ro.miui.ui.version.name2⤵PID:5234
-
-
getprop ro.build.version.emui2⤵PID:5327
-
-
getprop ro.build.version.opporom2⤵PID:5356
-
-
getprop ro.vivo.os.version2⤵PID:5411
-
-
getprop ro.smartisan.version2⤵PID:5441
-
Network
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db
- Size 28KB
- SHA256 de1a51a22d1c9c9d4e5c42ab2922151095f0d29d8c6d54b7a3519d7ab7a61c61
- MD5 b1b80058fffed412150807f2b7b75f9f
- SHA1 4ec84c76333eebf2fd45df6a6b28e73c9316f0e6
- SHA512 5300205641356079bdd4a7ffb6f57adb68e134ed1132f1e5bb139bd64f92f6275b2e0b71558030f3de0ec2a62d5722b00a5ea5fc76b938950aefc675ee8be7f9
- SSDEEP 24:TLGVoRL/vylA1BufCQVi0yUGSiu4+OKKH8dgQMdl7iU1gMj2/ITA6FPPTAs:TCoF/GqiCQVi0yjSbSsMimHjmuAmrAs
- TLSH T11ED2FEC69F18F414D9C60076C8B4CBDE26723B27D106AB06B8BF2D180D91A046C7B875
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 512B
- SHA256 3e112c8debda9047ee8d45fe18dd1b5ee3d91dcd457a79cd8c76311656ac916a
- MD5 a784dfb8808324fe2fb693911ceae646
- SHA1 d9362f0f00bf9d3e4ab28758d5c3b838c96e6a04
- SHA512 46f9e049262a2b6c4f51d1ebd09273a34d5d0644c3a63e14509218bec05d0a5d5d72a819414520e76309b97ee3140f55ea215673b8d69d35597249736464a7cc
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 8KB
- SHA256 89514cf716abb5275c0d4f5329e7d20157abc54a3842dcf6ee6a9a70ad6c4757
- MD5 c344a1a4f604b5e12fe55bf9424626f9
- SHA1 7540f9bebd6127e61631de4093d51d6ab937d91d
- SHA512 684f75538eacda3d60b6cf5053be0758c7902e08ed498ac5a58004b10a81d5d6b0a3167e799d0027ce4c689c5fd50d67b3a33c9ef74189c2f5086e033e0d9576
- SSDEEP 6:7+/l9ePFn1WItg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKu:7+tgxqLiuWdwRmBEyPbx
- TLSH T18702228963800822CC7926F7A0D483401D40E729C161CB0B2A6008983C034CCB4A4D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 8KB
- SHA256 cb3523a785868087c5b7188fba884f4d8c05d30a20e89cc083d8411ec308f883
- MD5 61b4db199c3c72f13f39cd7f1b3ce1ce
- SHA1 6b98f3f7678888af733eb531b99e33334dfa3731
- SHA512 2370ba2d525a6fdfdfae9755c10acaf2687381149a099eabb028be261b211568f35a1557070724101c75666765ce7da98c9919f29da1c3286928ae9520e0df54
- SSDEEP 6:7+/l9VpPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKEWM/U:7+tlqLJdTRmBEyPbRWsU
- TLSH T111022299A3420A13C81A1BBB90C883402E10A7168223CB87956109A83C06ACDE890D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 20KB
- SHA256 1e9c8e1739a05da8bcc9ee5bfbf0ea66722fc326f596465baa84c452f5c7bb04
- MD5 c180d3c1d15e4aa587f335c6081e9f81
- SHA1 c0dac79a896a54e426763f49c4d2a6e98784cc45
- SHA512 48b5ac72f35e54e555e51cd459fcfa1a15aaf72865e1f8f61feee486757631955b2da5fec939fd52a05928dc474cea4abf1d6fa0e3b58e37c69da37e3b6da319
- SSDEEP 12:7+tuMQTQ7QpQpqLZkisbsRL/vOvlTSF7VlN1BufDxs095uIxcROjpgP/RmBEyPbP:7+tu8qLmoRL/vylA1BufCQVi0yUGSP
- TLSH T10592BDC64E54B514C1C508B1CC7087AF4AB83B37D5979B02B8FF20241E8114478BBCF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 20KB
- SHA256 b13a1ac4c5d00942eec1b3c61f1480cda94d1bdd1759467fc68dce4b3120ec43
- MD5 9f9e4131b43fd8b7f1a29b05bfbacabc
- SHA1 506c5e9d061e2fb9caae88cf8831af4537335c93
- SHA512 b409549fbe77954e9af4d5c3e24a2cfc97d235a2c8faa80bbc6b3c3245bb814a8f41249e8365610c03e080e85367a7026c2c14220bc7a96f4268ff086eaaeeb5
- SSDEEP 24:7+t+h5l7iU1gMjGLqiRqLEWCoRL/vylA1BufCQVi0yUGS9:7M+h3imHjGOiRqoWCoF/GqiCQVi0yjS9
- TLSH T16F92CBC94F54F514C9C600F6CC71DB9E19343F27D9469703B4BF28141D812406CBACB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-journal
- Size 512B
- SHA256 34015b0adb8c1dd21f36767b9cf6adcae96ac85f19cd890037b8e0c42d71f11c
- MD5 a83b6be59c5958b580656eeffb2b118e
- SHA1 65480cec61ea937e5927834b39380eb12374882e
- SHA512 0d7c036f33c88805f0d6af7d774436705d83f11c6b20f553e29cc26dc3ae270ce234be74e96085639f478bbe29b2a8573895b021fca855338484f394fe9577d0
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-wal
- Size 16KB
- SHA256 262a1d9cdeb3711fbd2086a82a52108be3eb47d29108ce52918b51d42be64829
- MD5 cc28faec6fe7febea4db3f7c8c33d596
- SHA1 8ac9eb6e009ff1f98b2570a50e0680d7a04f73bd
- SHA512 1187432417844a3f573a5c6f29e194c93826e4558719e2ae6469ccb76eebba19192066a49da69398975abda80a580a662eaca06d1a2c93766953548dbc4a6d3f
- SSDEEP 6:K7m2lhJ9FZdrlOERX4PBX4ogLugMBX4suuK+/1Q1ZZ9kMAykjCOw2:K7xXzdTRmBEyPbP/1GZaMATCOw2
- TLSH T14B728C9492828723C41A2B3250D9B74A0A7C5A39D25EC787DA922656BD022FCB575D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-wal
- Size 88KB
- SHA256 7d484582b2c733f28e4cab33f6d06d03f62169db0e0dd5a5aed1c0734b1b2401
- MD5 4548e95798a43f7d6bbab71d74db8fc2
- SHA1 9d3fb255f0be78076adf789e0a5dd11024261600
- SHA512 958ddd997797a57c60e937331ef7dda38d3d0947053828883961b856a7d568aacdb20500e54e3921fdaeb648c897a9877c495e9da9cf438b0e18a7262c4d9094
- SSDEEP 48:0P/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82luY:kRMpf83wS0+aD8Nn6266mPJ/X
- TLSH T15F930F8E0F5A2601C05A9CF0A1D02EB1787E452ED39BE3E1E5D11176EDC6831EA39CF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db
- Size 104KB
- SHA256 c0b63067ee6892bb8af3540ffd774aa242578024fe2521bc4509aaca77cf54b0
- MD5 46bfc3d0f948ba63626eeafaef7cb634
- SHA1 62d37794ca16fc15035c7156f82dd5fb662b00b0
- SHA512 ea557925552fe3bba4c7d65c99ee21771784156cb73a8f516f3bb9aec69d057905cc06ff5cf84918d7fbbd647eccfa55606c5fdaa5013a8e6c535099e4518278
- SSDEEP 96:5NrzOQILKAouhrhqmBz3787OES0i2x/BfC7C1yig0NXeINNiIx1Nk2HU3YRK/Kqa:5VO9ZDlzIOV+F1eIN9Gt3SKSA7FhpTm
- TLSH T18DA300C2DEB03F66D6434173F522B1618B7CDA1D8B801793BEA480444AD6786E2D7FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 512B
- SHA256 da84a2813503f2257915f2069c0e0823b3610561e6211417dd4813a2e2236696
- MD5 6496e541b888f79c0c8dcac838599b3e
- SHA1 0c09fe36d61cd192be19d6317e2a0bbf9622ce2d
- SHA512 5e316d76fe552256f3c8d2eef8ed40f33a47f7c63673aeb2a9ceb41bb697777e378de0e94ba8dae27873fa3e7a3c765bb461d919116576e17f5af6a6f6a5c9ed
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 8KB
- SHA256 c5fbf6563b8df68980431aeba835485847d642a0ab39c1dcbccde924db65b1e9
- MD5 4a25eab526bc99ae67e9a1d323fcce44
- SHA1 b5f01b2377d0a0e782c13d74c84bb7c5ef6249d0
- SHA512 f71742370055d83d17365d6e35dfaaace75e9d8ce63db06599d0a9a25ae76ca110161ccf5ede36324f9e67536b27b9267fb0dd6a3c5dfaf9d4927c227a286adb
- SSDEEP 6:7+/l9/vn1cg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKkc:7+tdyqLiuWdwRmBEyPbq
- TLSH T1C50222A963803922C82916F794D483A00E00E7199562CB37266008AC3C834CCA4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 8KB
- SHA256 e60cd47f58b434c20c8c38b6419bfebe640be82e486a578baea81c0a468fcd0f
- MD5 4d0a457647219002242ed8a0ef9e9981
- SHA1 974d79dbe9368978537791b932b396178406bb20
- SHA512 0f9c66fb4a802b239e0166aa0b1aed7512d136e53ebfdfe7ec5988748c11e6e9997e0a8b1d4b652ab5a923b6f09a7f2424ec3b5a3207b4df5fa833a185ba7f6a
- SSDEEP 6:7+/l9YFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKS8t/T:7+tsqLJdTRmBEyPbw1T
- TLSH T12102228D63802833C01D27B798C883482E50E7199223CB271D6008B83C026CCE890E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events
- Size 40KB
- SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
- MD5 15d5b92dcbda7ef7f9ca327a903e46e4
- SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
- SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
- SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
- TLSH T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 b0a0798eae186c0c32b6388deb2d3ba2be19ba7a4ffd28a1e0d662b80e8dcb10
- MD5 9ebf1215053a76d0c19d5fe635816b8c
- SHA1 519fb1fd45e3246b3b41052bd8242f22a3a9841c
- SHA512 639b22f049259f787dd5a29866908b79e82ac2a766ac994286c8a9bdfc6b45af83d375aed59997a14f4e607c5187ff0a900add7838a75238bf98bf488aaa03f8
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 eb90884a85ee99f97316aee519b214c1e68a829e8c670ac74522873b43ba8037
- MD5 a3291caeab7a064ab986181819b65048
- SHA1 e36758cc3b1a34e194ee836039d827efcbaeacf6
- SHA512 105cde98765c0a45bcf2908222c78758e9e087b9e654fa8902d69e57864b7367a7dc466be49b1f792350019807af38375d88aedf4a1a8e9b1af52d7cbb55358f
- SSDEEP 6:7+/l9Zn1mXvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKr:7+tcXvqLiuWdwRmBEyPb4
- TLSH T13202C0BE63810833C91D16B798D983400F00E729C971CB07156008D83C837CCE4B0F2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 c2b33fa0c9d220629c2cc86de5e5b8f7c87fc274876e1ab0fdd5c8dac869b26e
- MD5 a65f7b45fcb672f18bce8410e6b344fa
- SHA1 6c8162a42d0f0b02d8d4e425d054dc7190118d0d
- SHA512 590c6b7b90d817e98f9fc8a36c22031e489b0cfe6f4b06c14b7d5d9a24182a5c2a3035731bfd9a5795dbea987484e187ad234c8e0e3b30697cd969977dce37f9
- SSDEEP 6:7+/l9vePg9bNFlLdrlOERX4PBX4ogLugMBX4suuKYM/3:7+t4qLJdTRmBEyPbPs3
- TLSH T1A70212C96B410953C51D5BB7A4D983D52E64AB1582A3CB5B29B008AC7C476CCA894D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- TLSH T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 305ecc80fd6120fffa6fbd08fae9f4ff8cdf42775d5b31a72e6e32d786608a45
- MD5 9253fddac3844ad26a233a9e41577eae
- SHA1 aa9ab133461b772186ff2435bdd4857dccc3dfa9
- SHA512 e9c54fee8d48cd6a00e7867cca4155149b2fe13eec2da3165883f9d7ebc940eb65ee0a0bd8a7d344cb68afa3c77ebb3fa6ada7faaa29201e551902d9b0a716db
- SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6cM7:TLiEy9zmzrfRmBEyPbP/P+/0Fl6cMn7
- TLSH T17E7268CD7A105703D1774776B0CF93E11C30A2188333DA0B7B541578AD42184A042F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 f45e8ca8a0eb5421d2b81eb187fc97763f9c2e5260f78497e47b73297a2cfce2
- MD5 ce9e28cb22a3b4c85c86aa666a2339ba
- SHA1 542dfdd404b60101ba8529acd72c5fb212370b0c
- SHA512 ed11ff8f1b46eb6f4c1fb9e9f313c8a6f75bf3fc87d6d586db6aabda0e19753a4f40c0de1b000bf64aa4880745221fd06583419900c0ebf4d2e824ad4e2dde4e
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlwuR+/0Fl6cMn7:TLQpmzr0GSP/h1499FBlFU
- TLSH T1B672E9997A149B03E2774B35A1CBD3D12C34B2155733DA1779152B2C6D427855052F46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2e3358ec51807279c9a454f272868a35e5c87fafd7d6b8006d0e76c4e285fa7e
- MD5 b27375e9dcd94b1ab1c12c776e3a5431
- SHA1 b9c560cdd4d458c539f2b7a2d5d4c2dfbcd80102
- SHA512 3726333de06f76175b3137853a4347882de6c60bb34990f5624f0897a024073a1c27fdfd72e0be0e17a721d46c0c2221523c1c8ccf4d69511e940be3163e47e7
- SSDEEP 24:TLEvpmzr0GSP/W+kWgpU/h6+If499FBlFU:T4vArSP/Bopu4Q5dU
- TLSH T1E5722BD9BA94EA07F2370F7560CEE3D23C3871561B63DA0B79151B2C6D437968161B41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 504b6606ff4a6f40835aa3657d2236157798698447ce5bbef8b795e55ea2d7bc
- MD5 d75f89502c385581638b70870255678a
- SHA1 658aed6024487fb736705fd9b45e0ba9598a607d
- SHA512 d1bdce96311a3eb97ffb00a5f1166918d3c1b57642fab4187b4f9e55b9c6e1a77bda48d7bd955b3769a9c08542c7c851bfac0ea7b53d2432d2051c1cec2606eb
- SSDEEP 24:TL6Xpmzr0GSP/oO7er32/s+kWgpU/h6+If499FBlFU:T2XArSP/oOq72/opu4Q5dU
- TLSH T14E7248D5BAE4E903F2370B7560DAE2D2283871150B23DA0BB9151B1C2D433969121B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 02aab80d440391c1d8dded776080b8ea2894bb23166e2d53e596d17d3eff4c18
- MD5 b3b9dd7f1363145969867aad4980f7f7
- SHA1 572a579d479f360dc4d12ccc25017f5f63c2fad6
- SHA512 363006a3dd6e28365d001c62f2cdfc4b6bb0d956efc677989a8cd04f0e7fa7051a7b91c682e0490ed57f893ae9bbb97c6ae5e2f354094f0fd131928c4b69236f
- SSDEEP 6:l9bNFlgLOls1tlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WD:TLuLKEt9zmzrfRmBEyPbP/WD
- TLSH T15872C28E9E102606D5620672B4CAB3615C54A21D83369E472AEA0874AE834499051F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 ac45b07531683d9594cca4a542cbf7cd1703a1de892be474cac4da8720f1d5c0
- MD5 7e2eeef52221a9d36b1249b297aed5db
- SHA1 881489369903e8d9c86b0aab70970d6c3b05f6eb
- SHA512 3c60a1d691f14a236acd27e46dba88926842883818048581630ed0aabf9ff60982bb8717277dbacf0790930af78fe5cb3791d69ee6b365a537b64824cfe34925
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 cc7ff03a8a1a86deda340b2a3909b3858a16e1d5f9ba8416aef104c69302bcff
- MD5 fee8b1b0379f94cd3d3c5634a51ccc58
- SHA1 3511dbc91f8355e329a5a3dfc745360bb3bf2845
- SHA512 1537e6d4d5c2fa6648b18225ede8dc624362d1a96571ca4b27617fa83d5062b710f708b9b4cfdf03a00d349e79bf442d6299855c6c0b84f872ed2b2f5af4bb44
- SSDEEP 6:7+/l9+8Fn12g9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKFpn:7+tANqLiuWdwRmBEyPbon
- TLSH T1D8022289A3800922C81D5AB7A0D483400D00F79D8265CB0B296408B83C436CCA8A0D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 31a0f7c4bbc9ad21d30e7c23dae06d4c0b7f7d0a38616b03e50f7dd184416099
- MD5 1ab8f4eeec832726d79240f770079614
- SHA1 20ca866fbf650cd7fcbf8922ccd8066420e0eb41
- SHA512 efbbce11c85ff36fa9b7320f29ef46848bc7c0a5b37ddb8c578dd3a81752c728335d5113e51465a7f39032354e8e7a9b316d8060aa5f1bba2854642c05e93545
- SSDEEP 6:7+/lEGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKgd7:7+tvqLJdTRmBEyPb77
- TLSH T1AE91C08D63C00913C4191BB7D0D483401D14AB14C333CF07357008983C036CCE8D0D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 321ad054b2c8606a4041b46bc68775cebbb7b74c838d070442a6c1a32d62fecf
- MD5 b72ead3a00bbe0ec11e89f16d404fb00
- SHA1 8fc113c62236ce2d6d324d968e1f47ae49c655c8
- SHA512 c85f1fc4e5d28fd0ab083c6651ac3d1003f264acd46b1421520f193bcaba5adaa53a1d2cd9c56ad317e1ef932f9e08f7be61a8583f058ca01db92cc2747b3308
- SSDEEP 6:7+/l9tH/gPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK2fM/L:7+t34qLmqCRmBEyPbHfsL
- TLSH T1C002128A67811D17C91966B790DD83651E30E73A9161CB572D7008B87D879CCAC90D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 a62671491eee9ffae0b24162e2e4d763fbe8047f0394036e0532c5db3466a82c
- MD5 9434e8dd190dca47a52c2ec042717ce0
- SHA1 9af82d9f3aea5f94b5647dbe3c1ace98db10df1d
- SHA512 bb8a56e3d2bea783b195f520e2e6e996ae993c7fa8cbd21deaf2dd0351c9153b72a1570e08b237523a0dd5aac954a8b2550ed691e75651f8c69e66bf6947ec30
- SSDEEP 6:7+/l92g9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK2:7+tYqL8EEh9zmzrfRmBEyPbR
- TLSH T1CB02728D8F102203C16B0773B8CBA3402E28A21883B79F232BA80864BD030489051FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 bc51bfb60a97d912830cd2a9999d1f08a9d10f3a6279a2934a375c4dfacb43c4
- MD5 ba53a6fe4381bb64a7f7f3adb87ae56d
- SHA1 a08616c5df1d50dc789545a2ab5342a411a1709c
- SHA512 d1bf6e0752b74352c7db19050da8012f4c7730aa9be6fbb77791eae9691c05e76c06a5f6321ebb55fe036f80ebb78b33bbd41abf29df5241a22fdc583ac78518
- SSDEEP 48:7MYYux4Ta89auYaNq72/opu4Q5deqEArSu:7n7xca84daky/opu55defu
- TLSH T1A0026899B9E8E913F2770F7951EAE2C2383C71510723CB1BB8112B1C3D937928121B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/files/.Library_message-emoji-config_RemoteConifg.sa.temp
- Size 1KB
- SHA256 2d4a6c0b5fe23312986af075ddb2200116a0cee1502239f937347ecd1260e1c5
- MD5 1d4fd76f4e43f5f478cc1e0c06078443
- SHA1 c11d1050065922ceb4c7aa14274c10a912629a3d
- SHA512 b98a422f2d9c19ca6226d7f8d7033276970345993a220b2ff3608ea8c0b6ca363d0b84bc946ce0029079966a678b8d746f77f33d897b0aaa4c1d5f604bcae29d
- TLSH T13A112CC462E83280B405CE71669B9CF333F737175D902770027553215C26B564CC48F3
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A82904C01C6000113BA9CD265E0EACB.temp
- Size 490B
- SHA256 3b5e2499ce49f6a042245151bdb0a0de52f04e7ec54fc221286e2eecf362c505
- MD5 ea53e80963cb445e18a270bcf1954518
- SHA1 ab81d13cbef95a26f8e2bccce7693a8d094f64dc
- SHA512 57a23f5b7899c568d131d6f6a440b8dfd22274cf94245d0ed193bc01bf1cee2555f6e6c3767f9ac2816ca3fea0eca9ee1bc9cb241c9a23cd4a186d46d8f1a5b0
- TLSH T1A6F05CCBB0C88E76D24BC91E20084F8815AB81D739BDFC1A7E50CD5C8F328B87A8810C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A82904C01C6000113BA9CD265E0EACB.temp.tmp
- Size 16B
- SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
- MD5 c33583fae4e0b61cde1c5b9227963237
- SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
- SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A82904C01C6000113BA9CD265E0EACB/report
- Size 750B
- SHA256 47097f9eb1b46ab9b561ea3255c3c8cde7afbec2d3ea23a1a01b398d0d74128b
- MD5 b96c8fcc7506fd08155a4f91be67658c
- SHA1 6bfb9e3e0f7ea324244206934b1bc6fae0a3ce0b
- SHA512 1e1bef11460cf95af6eadbbc5b51f745e25198e0a4bf657052da187d00bbc2ed379724c29bff7c3b0af796833a38239ce6513a827e0634f0303800b9a63ceffe
- TLSH T14D01C535FB756F78135DE38561809E5B93F903282532374C7E870025559F56CD2055B9
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/PersistedInstallation1422026385189160851tmp
- Size 114B
- SHA256 ea0d0c9c26ea397442595e6342874d60867b2b1e85423b0bbe4c54d5f9cc2da7
- MD5 26809c93b7f3c53d22ab7a84401bbe61
- SHA1 04d7753ae471e4bafd60d84879dccf25f7ce837a
- SHA512 1c14596fc7fd2d7676908eea83b8f92a63832239c7f20ac6dcc282d4f8f7c736585e59a09a35d78bb6fc6e3fc8de6d0a5a7b93fc68cbf818b68e8a5664ea68b3
- TLSH T102B092550BB99642854AA30B6C5E92A02AEA288918194B084A99E94410942D2CA53AAA
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/PersistedInstallation6489558797215594728tmp
- Size 90B
- SHA256 3d8e217252e15c498a49408cd547cf8b930e9474bea390d298cb1e8a3f38c87c
- MD5 a6adf4394865b9c8b0ae3d368c48c5c2
- SHA1 01513d97dc93a8af3680989cc6eda80b2adbedf2
- SHA512 448f94b6f183e20a456f2bda16a8f9aa26ba058aa53919abfd34ef845de0d0fb4b011e0dc4b826db6736e1210d34eb4d4de1935d697c44dcc84668a0aee23c0f
- TLSH T103B012414FB14243848AA30B6C8DD3801D953C4D14098B0C0A8DE58000C12D281539D9
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/alerts.sa.temp
- Size 111B
- SHA256 a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938
- MD5 b6c792c0f58fa3ec92173c074885221f
- SHA1 0dde8fd9111d807e202b2fb37f8bcc4052fd861e
- SHA512 83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875
- TLSH T151B09201B208A82A19514E3A373CF110E310593102C426A8AA96A88317828914D08325
- MD5 SHA1 SHA512 TLSH