Analysis
- max time kernel
121s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
17/08/2026, 04:38
Static task
static1
Behavioral task
behavioral1
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
Resource
android-x64-arm64-20260325-en
General
- Target 8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b.apk
- Size 14.1MB
- Sample260817-e9ljtatblf
- SHA256 8e5fa795072ebba12d16b2abf5e13a953fb1607d9fc04b1bfee26d5bd23dc77b
- MD5 3789a9c47d957662fb000e365ad5bbfe
- SHA1 5050d8f28e67d9509a588b14b00164ec4aaded93
- SHA512 8a47107f914b0b22e88fe9148c3d5d2297357bd2c4351be463527d3ee63587e0a90a91240e80d7d5608cf047944e910160bf4cf565f6dc0f5c3fa46e1bd6c819
- SSDEEP 393216:dRsr16TFK34h8qCtklD0lCsIhJrY4agBy2JJ2b:E8Z/5CetrhogBy2JJ2b
- TLSH T1DDE62267F72E949FC8F39136CE3A026256675E644643ABE72D04F22C59B3AC05B49FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 4 IoCs
ioc Process /system/app/Superuser.apk com.color.cool.wst /system/xbin/su com.color.cool.wst /system/bin/su com.color.cool.wst /sbin/su com.color.cool.wst - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser com.color.cool.wst - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.color.cool.wst - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.color.cool.wst - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.color.cool.wst - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.color.cool.wst - Checks the presence of a debugger
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.color.cool.wst - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.color.cool.wst - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.color.cool.wst
Processes
-
com.color.cool.wst1⤵
- Checks if the Android device is rooted.
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4879 -
getprop ro.miui.ui.version.name2⤵PID:5043
-
-
getprop ro.build.version.emui2⤵PID:5145
-
-
getprop ro.build.version.opporom2⤵PID:5185
-
-
getprop ro.vivo.os.version2⤵PID:5204
-
-
getprop ro.smartisan.version2⤵PID:5223
-
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db
- Size 28KB
- SHA256 bc6b59d7a04828f0436f92639da56a14c71b5184f974584019f242315f394cde
- MD5 a7b9fd58731aa7b1f58c303af81c60d5
- SHA1 95e0a0f6695434d7bc435c2a85e6664e1b02863c
- SHA512 e727588bb3e5de1fce9ca1494839dd656c35d16492348f646279d814ed09e8d97666e0308e974da5837318f6ab7565a11f6d1e9e9ad1c3ccfcfdd9befa5931a4
- SSDEEP 24:TLuFoRL/vylA1BufCQVi0yUGSiu4vayVGj1MilL6Dmq4olA6FPPTAs:TCFoF/GqiCQVi0yjSusjnoRlAmrAs
- TLSH T101D211C65F54F414DAC60076C8B4CBC92A763B2BD506AB06B8FE2C240E91644BC7B876
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 512B
- SHA256 41999dbdaf651deb45dffcd811c6e2fb4144921455891d9465cf5934d7ff2cfe
- MD5 162d964bd6afe7ca418eec76b244e829
- SHA1 ec1a8963fe2e507781813f8446628bfc8caf7472
- SHA512 a59841af35f0fdde0f073445e86e2d6355e4ae9a23547209bfa213ecd5cd999a25d646ae6804140604e032cd41d5a471130033321f99e8d20f6f4024bb2e33bb
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 8KB
- SHA256 f4f00b9dc64426303839025e09c8441e14048df04fb266662c1cfa03df93dc4e
- MD5 f29e1fabdd40329777f230d3a89783cb
- SHA1 146167694fdc2c042b8a87d2de54143c43ac9a0d
- SHA512 fd377885a7074643227df9eb72e342b642712334574386b7654335157d02ee223eedf969e24f8ad43859e62eab08b9a84451b2cb50491944812722fe784a5725
- SSDEEP 6:7+/l9mF/mHn1StNkWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKJ:7+toF/9kWqLiuWdYRmBEyPbC
- TLSH T13102228863C20A12CA29167798DCC3810D00EBA98162CB6B16D008A82C474CCA8A0D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 8KB
- SHA256 10e5a249c1eba06bb35c908705953f9a2468684d7a370d34a5696bf18d3db971
- MD5 410ad1aae60169e671fefc27d3f6d12b
- SHA1 192b6f1b2a08218cb585ace42096a8798e4a17a7
- SHA512 6394236f248cdb33def18aec6afcf78149212672578e5bfe536e6731ae56bf51d2de15c65155c811187b84044db12806f260f80f01ac26c7f496cb404d25038c
- SSDEEP 6:7+/l9GPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKu0//n:7+tAqLJdeWRmBEyPbcn
- TLSH T13D02128DB7411A13C5396B77B0D983551E15E72A9263CB5B1A9108547C4A6CCA890DA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 20KB
- SHA256 887f7351f793d44f13fd989d4633dd2855009e6e4fb748f73ae0070a1f572eb1
- MD5 46694de55ad6ff6cc10c022cf5c4097d
- SHA1 89b3548dd98f27a137c1520502368eb49e899cb6
- SHA512 c1c9d24b1eae7933050bb9b0994e49fdb01a97fab34506c2366c33e98740f57739d8e85a1c8d19fcfed985c08dae07d158d6fc038db3b4ae348ff3c24ec9a4c7
- SSDEEP 24:7+tX7Srj9RqL+oRL/vylA1BufCQVi0yUGSo:7MX7UqqoF/GqiCQVi0yjSo
- TLSH T1C79289C90F50B514C9C504B1DC70879E09747B3BD596EB02B8FF30600E8118568BACBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/ApTridentEvent.db-journal
- Size 20KB
- SHA256 088955914bc3c80d331a550bc856e9b535bdf03b42bd648c393b761604e8e021
- MD5 cb6796dd7a1e2272506bd0f2b3a8583a
- SHA1 e89c9d753edc1e8e1485b7779ddfd10274977378
- SHA512 107873697fa4c4bb6477555f91b1152aa559d76ce422f8d0fb2a97462acb39740572a843c01c1982b2ba1c5a39110d4ef66492b28d6c1c76ebef8f7b6836f93f
- SSDEEP 24:7+ta89qlL6Dmq4oMLqOqLEBoRL/vylA1BufCQVi0yUGSr:7Ma89qoRMOOqoBoF/GqiCQVi0yjSr
- TLSH T14092CBC90F60B215DAC51476D8B5CBDE1A353F27D9079B0378FF28200D91280B8BB8B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-journal
- Size 512B
- SHA256 6418a45cf1529b92c31ae7c3efc4114e2402468d9dbbd438ae5e2f4a375610ab
- MD5 82051b44df2c3dfb07a411b96a29bce2
- SHA1 3501331e62a7bbb24c4d56049e1cab16aed126a1
- SHA512 0be30dfba46303fbc2b82a4cddb868ab33171855dec470a87a5bc6a038aa933b56f59e5f4488b6833e3194aee8a1d8e8678641c8be8c01f6e8ee4f71fecb2679
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-wal
- Size 16KB
- SHA256 f855e4e55d52243b0bd65b3acef5ab58f562a6667493ad9c0ed3dccbbbc1977b
- MD5 ebec87356b5fa01b3f58a9863c3e6275
- SHA1 46630a04f4916eb1f91f2ccd0a0516dba5463554
- SHA512 0d835ddb878778829ba0486c5e9a9a62e0e4aa8a1790a056d6f3358065e147445007ee4724f17eb886aa2d22571d5003aeb9ec94490974d945ec8bf6c1866731
- SSDEEP 6:KEBo9FZde/kPlOERX4PBX4ogLugMBX4suuK+/v15Ze955tLiOw2:KbzdeWRmBEyPbP/N5Zef5oOw2
- TLSH T1C972C2F4E386151EC229237A54ADC3410E281B2D9353C70B1AD21A516C027CC7451D28
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/androidx.work.workdb-wal
- Size 88KB
- SHA256 51f23902b172788498fc1c777216d3f70014dd8689aff0f500b316fd13b734b2
- MD5 2cd09ee696896d1d0dd662f0b9a6b8d7
- SHA1 cf1b78531161e114db1df1de09e9118916da8bdf
- SHA512 55120c3ebbe565591189e0aaf368934aabef298863d4c81efe3af564ba0489bf7fbc98f7e86716d0a00356b63e2f6ab07cb1dc6cd0aaa853c3479986d3f6abf3
- SSDEEP 48:b3/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82luP:TRMpf83wS0+aD8Nn6266mPujfZ
- TLSH T1A99310DE0F5A2508C069A8F4D5E40FB17D7E4A2D83A3E3E169D10075ADC6935EE28CF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db
- Size 104KB
- SHA256 78298f2bd326ee539fd7cbfeb2fa1f94b84afdb3acdff223a6cb30663e791231
- MD5 b9e89055883eca03040682c6d9ecdc0e
- SHA1 45ea99751759c9e2dfa57eb58e0dd6f2ddcf69d7
- SHA512 81d9b77331d10bbaca154f972f8752981878d3ebcbc68a4a594880e526f9ff73d66a36313a263bdf1cbf5c018b10d7735dda03dd690f38b815ad50658ba90f09
- SSDEEP 96:xNrzOQILKAouhrhqmBz3787OES0i2x/BfC7C1yig0NXeINNiIx1Nk2HU3YRK/Kqa:xVO9ZDlzIOV+F1eIN9Gt3SKSA7FhpTm
- TLSH T18FA300C2DEB03F66D6434173F522B1618B7CDA1D8B801793BEA480444AD6786E2D7FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 512B
- SHA256 29df3b439f99d3d3e0d3028ce23bea64f730d1b41dd1a342ec92968eab7c2246
- MD5 f09619c56b6e2cd6355128f170da43dd
- SHA1 cb14b12b1a8f084aec096491cdeb46d20c6f577f
- SHA512 f6656e841eb79a2e4cadb4480fce857048f6af850090c96dacf13c6129de4de93acfe4a32500ea29b08bfb0dbeaa132a0f20f50aa5511c7477fb0cb64d4dbacf
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 8KB
- SHA256 c328da201e0700a0f9bf93bfde95378644262bcfb52925ac234126a789673fa7
- MD5 4503eedd0a58c6ffc0d7d683e0dae84e
- SHA1 794238f0403ecae10b8019d2fe81ac61fe9510cb
- SHA512 074eb4e67f1e094482aafcccacf37a2a2f3c012c904fd0b7b6b8f619ac3b5653f4f47735b99dab65117ac72708bd4cbd4753ed0654863be8939fd1a214a201bc
- SSDEEP 6:7+/l9xUGn1Wpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKq0:7+tYfpqLiuWdYRmBEyPbb0
- TLSH T1FA02228867C00812C829167B90F583500E08AB388271CB17169108D87C0F4CCA8A0E04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/bugle_db-journal
- Size 8KB
- SHA256 12be0917895a5d1802e25dfde1240ad32e5557200bd1e4ab636f960e1c679c05
- MD5 9427a673ad7231bf27820731e59101f2
- SHA1 5080c369e130d03d338a4818e7b5f24af343c188
- SHA512 fa9d6a604d16747d521f8e75b26f05d0d1756bd3629b7bffabfbfc517889feb40408804d330304af2e6fb6ce59432c982ad5dbd91bc007a2ceb68e822723ea70
- SSDEEP 6:7+/l917Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKuN/0T:7+tjqLJdeWRmBEyPbfVq
- TLSH T1A702228AA3C00803C12A1777A0C983401E60EB3CA223CB07269228582C07ACCA892D50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events
- Size 40KB
- SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
- MD5 1cf3f63c021d755a21623e6d0e86dbc6
- SHA1 e40e0f1faa61abcca7ba3394c54c92ff7334b49b
- SHA512 38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
- SSDEEP 48:TfkL3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:zkL3KMEX0xIyNYMa
- TLSH T1AF03EF5D4A202611C2BE083FD7E257931B3CE35F6B2387612E904CF6DDC68B6B821998
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 da79905a769555c6b1d5a7f20329804334124d10f661527ab8ac15d8e295b826
- MD5 78f55da5134e5602b7d3f95818526eb3
- SHA1 ec88637c7fded5a3a8c65cb50edc7f0b7e3633f1
- SHA512 a8ab6af0e5871c804b1d3bb7902142d14a8cf85e07f68f6f88bcd4e9ae55e3e7605e8fc2f30306ac14cd9fd59373623eb29bd34168c848fc50718f67ba759cac
- SSDEEP 6:7+/l9oOn1QRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwsn:7+tGJRqLiuWdYRmBEyPbun
- TLSH T166022289A3C00812C83D1AB7D0D483490E11A7298163CB671A9008D4BC874CCA8A0E44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 0efa30510f800780814cd3ca12dedea8b920db1d7d332b5fe009214f9ae0663f
- MD5 fdbde7d95b3fc19bef2a9da54a00b7b5
- SHA1 4e67c3146485accc526fe89cda15619bc63dfe16
- SHA512 fed34cbc942f20849ca86a807593c855bbfceb500f3546d62ef060ba43e045ebbe075163f5e093697af3d5888d4dc63b00128455acd0783f157c29267c476284
- SSDEEP 6:7+/l9Sk/lgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK+T/lM/Vn:7+toM4qLJdeWRmBEyPbPLlsV
- TLSH T17E02228863820863C0299B7BA0C883403E27A7289623CB4727A208542C066CCE890E04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 288162451b214d15f43e1ca9b61f1cf6e14267d63205f7f405864e8ee958e0ea
- MD5 bdb82639a0825546f7afa2449a9a77fe
- SHA1 b64cffcc0798bffb4a3d4a24b09c4e1172543656
- SHA512 025252346c9d60ea885ce4a11718948ba4b743cbc271a1013ef830a70aaeec6a9dc449540d4271a21ab0d390d4575f9310e9aeb3fbc9ec6ebe222dc21d235d63
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- TLSH T16D72C2CEDF102606C6760737F8CAE3A05DA4A22D833ADA476B950460AE42549A8A1F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3466ba0673f1fe860fa63f6c54a30aa4c83f88d7cc39b0fb09c75e449bca69af
- MD5 bbbc98c9494e1bd06234ec6ba42976a9
- SHA1 939fb4036c5f10d7203b610c00b8bcca107a0689
- SHA512 1ab6d26040553b5bbbb48664ee15885014d09ab50a61a2c7c6f0919dd6b73c1882d3014457e32b8b28561ca1bbfec5f7ac4b40348a4cb4c228e2d57e7d0cdb23
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6q:TLiEq9zmzrfRmBEyPbP/P+/0Fl6Qb7
- TLSH T169726FCDBB10AB03D2774737B0CF93E21C34A3298733DA0B7B951528AD42288A192F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a6571b8f4a0cfaf944bbddf0c7de4f51bf1f354fa4a4ac46fc940c2759fc0453
- MD5 55f6c195faf1a6faa71a143848cc98db
- SHA1 fbccd66182e21da85011ba86de85f4c2d2fc3ffd
- SHA512 041a1bc5904b0365533dc126c29243f37ea5cd2b8a677d0cdaf1ba13b23635375ddfc9b656bddda06a874d3a8649c05dc040e662541e59f4ba73817e1a744d37
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlat+/0Fl6Qb7:TLopmzr0GSP/h1499FAlFf
- TLSH T1D7725999BA20D703E6370B3660CBE3E12C3872265B23D6077A122B2C6D427855162F05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a3247a0737ccaf979c8a7123d8199db093b942b90c4f6a535618876c7d2866ab
- MD5 09d43dff97b01920dfda0d4c78ef96da
- SHA1 d5273b71b8a1c69885c929ea63ab92aea08c51cd
- SHA512 79e2f9fba59b3f1c60866e0d5d560d5add5a6cc5d9d341bb44802c14894791f752744e69cfc5c8e0e10c5c03eef73b30fa5ff3cea0720fd725ba79db3e7c018a
- SSDEEP 24:TLYpmzr0GSP/W+kWgpU/h6+Do499FAlFf:TcArSP/Bopu4Q5kf
- TLSH T1F4727BD9BA90EA03E6370F3660CEE3D22C3872261B23C70B79151B1C2D427959271B01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 4702404199841a4e2caa3003efc7f2fd86491b30cab12e59530d75e1ae08c135
- MD5 a9a732725500c9b5ad7ffe4cc51977e8
- SHA1 d2222743e83032717f7c97c153c048d23053d6b5
- SHA512 9e0b89d3bdcf817a5ca0968686664a99a8068d6132d8e0c173042f9c0619c4e63be9e4138276f1b155f41cd66ba9bf401017264d9a0377253a44614575a81288
- SSDEEP 24:TL6vpmzr0GSP/oO7er32X+kWgpU/h6+Do499FAlFf:T2vArSP/oOq72Oopu4Q5kf
- TLSH T1D4722BD5B6E4E903F6370F7664DAE2D22C3C72661B63DB0BB5151B1C2D437969221B01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 bd68f1459788c267e41e8d92898df507db0413e0025ffe686a43344d600d61df
- MD5 184f4047240f0bc99451662e82d70460
- SHA1 a9b50e45cd530596620577ecbe723bfbe012c9bb
- SHA512 34bd130d90526585b86a6c74db221bf094c269dba95626d33502acd73c16d31729a4d6f9be026466e9c1dfc33fe650c82ef95d54da1cb0dd927115d1e38c434e
- SSDEEP 6:l9bNFlgLOls1Z/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WD:TLuLKEV9zmzrfRmBEyPbP/WD
- TLSH T1AC72C28E9F102606C5720632B4CAB3615C54622D83369E472BDB0870AE834499051F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 58799e07a1dc5162f656aafe6277189b6ef243e440dabbb58130705afa2f6b48
- MD5 bfe80c996aa08bb77b29f4c95a4ba424
- SHA1 d21efb859cb4d85faddd7a07c08f2a6396c7e417
- SHA512 44f2223eabee6b683d883d6f32534f7524c036232cf03778ce9549ca2293bcadf24b717f50c4a3d1447bc0959fd992dc3c6a014ca6c412f850586c79487159ac
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 2eafdb159f51ada606551c43fc7eb67214ee6effffd5b8334ccb9e5eca68b150
- MD5 e24f0309ef51ebdcdcc9bd2a7f84bdd6
- SHA1 cd044299b433b20c64aec83098d80a4f4c542efe
- SHA512 081dd0fc316f1d77ff304ce3335a2b64d06a2c7d6eab54b1c3d32d6f8e441fd278e9310d2ec0148e3422b40551370ddb2547b7ec0203c54c422bb94392bba331
- SSDEEP 6:7+/l9sn1bg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwb:7+tAqLiuWdYRmBEyPbj
- TLSH T13D02C0CC63800813CE2E967B98D483440D20E769CD71CF5736E008983E074CCE4A1F04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 298aed812938d3cb8dab0c62096aad6f43d09f737516513723024ba317f65e94
- MD5 f50e85b917db0db73cc366d24ef39218
- SHA1 e2d1d7c420dc2e47b66c54c15e5261fd91edcdb1
- SHA512 66d864f4335dfab96ce54fd17473cfe14f83218e377ec071b437c2afa7d881c8f2c67e56e078861e3bf4d84249be7965f8811e58f142ab93de9fcf6d29121ca6
- SSDEEP 6:7+/lZPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKun:7+tFqLJdeWRmBEyPbl
- TLSH T1A891808977410913C53E5BB7A0D5C3541E14B729D373CF57279608547C47ECCE491D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 342c07128a0b0f546c970d238949d4dafa23e933ac8d6026b9c29f5ec7383e55
- MD5 48e608bb061df073ddb11f74346147e4
- SHA1 1f694d1f49d19328e6951a1207db2ce913523b96
- SHA512 1a8f3101e4c11a580d07d2b3b8bbfc32dc9b650354f641583185c0f4965fdc799541459f16acacdb9691f7d55cb71ed788b986ebcf184dc8cb64401dcaea8a16
- SSDEEP 6:7+/l9JFPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKZllGt/o:7+tfBqLmqKRmBEyPbe/So
- TLSH T1D802228863C01C03C02A26B7A4EA83540E00AB688131CB871BA208643C0A4CCE890D90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 e199ba9d9f086018090156d32ff0489f4619008152b7ed5f3181881722672999
- MD5 381fed2a7d9be52f584dbd6c8998d46b
- SHA1 75cbad18e8d7829265c2d454d8dee641fc8f79db
- SHA512 f24f0801dc19c842659392d18ae8446781be5d0ccbca2f413d17fa3ef10e0b6334ac1c9ba677f7d2164df4dd2cd32de81cb4ba9fb6964f1e81e52db8c0a3a2a9
- SSDEEP 6:7+/l9CLg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK85o:7+toqL8EA9zmzrfRmBEyPbro
- TLSH T13802728DCF002203C1BB4733B4CFA3901C28622883B79D272B940460AE038899062F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 32829bd44fb61fba4d88e3de04eaaf21cefb03e8ad99d349cca0c7f5a4d74d16
- MD5 d345dcff7460406f352643b40fb851d6
- SHA1 5f7ab8963bf19cce5ec96f8db5a22ce6ce6f457f
- SHA512 32df7552d1101c968c5d6374dd6d5604ead156032d13595a875068dc9e973f1c5a870e83f825115872b06f9a250ed768a294d363092d2467c7d105402b8434d5
- SSDEEP 48:7MzYux4Tag9auYaPq72Oopu4Q5kKqgvArSt:7E7xcag4daSyOopuh5kKXt
- TLSH T18C026B99BAE8D913F1770B7950EAE2C2293C31521717CB0BB4002B1C3D537914221B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.color.cool.wst/files/.Library_message-emoji-config_RemoteConifg.sa.temp
- Size 1KB
- SHA256 2d4a6c0b5fe23312986af075ddb2200116a0cee1502239f937347ecd1260e1c5
- MD5 1d4fd76f4e43f5f478cc1e0c06078443
- SHA1 c11d1050065922ceb4c7aa14274c10a912629a3d
- SHA512 b98a422f2d9c19ca6226d7f8d7033276970345993a220b2ff3608ea8c0b6ca363d0b84bc946ce0029079966a678b8d746f77f33d897b0aaa4c1d5f604bcae29d
- TLSH T13A112CC462E83280B405CE71669B9CF333F737175D902770027553215C26B564CC48F3
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A82904B02B10001130FDD256D481910.temp
- Size 488B
- SHA256 90fb04eb5528f710b3f11ec64233200e3fea999151718d7c9f1bd96996de5715
- MD5 6a715955f7a60d421acb33d7499168eb
- SHA1 96a12baaf5ff9e9d31ca3febf3b6aa2142b2f416
- SHA512 61ef6ba087f10e010508954ac6dd4980cbdf5e73be4c28b6f93fbc13fd2af7ed3e4a00186ffc84e2ef16db6a46967c49438076ece7e91803b61f8df0bfc348d3
- TLSH T195F05CCBB4449EB7C26BC92D200C8FE411A780D7756CFC857E50CC5C8B368A8758510C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A82904B02B10001130FDD256D481910.temp.tmp
- Size 16B
- SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
- MD5 c33583fae4e0b61cde1c5b9227963237
- SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
- SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
- MD5 SHA1 SHA512
- Path /data/data/com.color.cool.wst/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A82904B02B10001130FDD256D481910/report
- Size 750B
- SHA256 2b217f3e480dcdd1c8a8e1c9d099bef52c73972d48d233b97ba9d932fb2034f7
- MD5 723b014ecccae4dd5ce5d0ce6d9ea2ce
- SHA1 42359d1b4e4750eba2192e06318d436d1861a290
- SHA512 670339572ce4960236e394c40adc5c95b1f8c82710e74db7be231f031185bb9226d65b0fb08e5091c929345c817b33c0dc36a0307ebd32ad93b6f54f3699b0eb
- TLSH T1B6011564CFBA6A38130DD3CA65019E5BA278136066332A5C6EC7003262DF96C960557D
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/PersistedInstallation1021673275199770980tmp
- Size 114B
- SHA256 d56b99e7f9a6eeb4ad85a0587aa792374e2bc15fa17ce69d98d9847dbfe63ebc
- MD5 28b493f9b98279c9caf59e00eee19d08
- SHA1 af9b00ea0e36440454c8f844f7c4f29195e3bea6
- SHA512 3d0fb9ceb7f471ea0f32a8aeff8b3902a8e0db06c4ca559dacb8bb58f7b74402e549c72201d663dc540bddc7e3ca2d490a802f0d41dd10a0d28a9a77dcc9bc00
- TLSH T1C4B0120C57389A59CD4EA3071D5F91282EF354C03C4E8E474B19D81010A42D1E743FB4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/PersistedInstallation281176620534125424tmp
- Size 90B
- SHA256 a24f9642d0260110e5e352158992d7ad6b166d6cb5ef6f8e0d40824c62b13356
- MD5 c2b8abd9d33c5a95ef4a925abe9f09b0
- SHA1 4bf300dc73529f00373998397e0c35f3ac24fd78
- SHA512 96cec0f7dc54bea41d22a63972d9cbdc85c36bc80e009405d0dbd486da10fafa227a597c457256f8db1fe25e10a60c6c66d2c04a2f5add1713139f35138f071c
- TLSH T1D1B0120896304255CC8DA3061D8F91041DE114803C4ACA470B09D45000911D0A343BA4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.color.cool.wst/files/alerts.sa.temp
- Size 111B
- SHA256 a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938
- MD5 b6c792c0f58fa3ec92173c074885221f
- SHA1 0dde8fd9111d807e202b2fb37f8bcc4052fd861e
- SHA512 83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875
- TLSH T151B09201B208A82A19514E3A373CF110E310593102C426A8AA96A88317828914D08325
- MD5 SHA1 SHA512 TLSH