Analysis

  • max time kernel
    38s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    26/08/2026, 20:54

General

  • Target
    browsehere-net-app-release.apk
  • Size 19.7MB
  • Sample260826-zp14zsfc86
  • SHA256 8965d2a3b9b73e200695b1969ee75d5fc82a24985d2daeed91c05777b2d95048
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.tcl.browser
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4785

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        b5b2e602a40b67ff51a76ff2af623a5b.0.tmp

        • Path /data/data/com.tcl.browser/cache/b5b2e602a40b67ff51a76ff2af623a5b.0.tmp
        • Size 6KB
        • SHA256 84e768777218e46936c8bacdf4cc3daa8560aecd95f92033feafbe0668c4c77b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b5b2e602a40b67ff51a76ff2af623a5b.1.tmp

        • Path /data/data/com.tcl.browser/cache/b5b2e602a40b67ff51a76ff2af623a5b.1.tmp
        • Size 992B
        • SHA256 042356c6340d58ba332fb360b6045aedebf13b1f5a4b19780d3cf8225eac3a6d
        • MD5 SHA1 SHA512 TLSH

        f3335b387fb7b1ee93b2c14b81f02382.0.tmp

        • Path /data/data/com.tcl.browser/cache/f3335b387fb7b1ee93b2c14b81f02382.0.tmp
        • Size 9KB
        • SHA256 e7f6f5955a2da56942cc6ecb43bec3329d34d7e1acb57e9db9bd9babda6207e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f3335b387fb7b1ee93b2c14b81f02382.1.tmp

        • Path /data/data/com.tcl.browser/cache/f3335b387fb7b1ee93b2c14b81f02382.1.tmp
        • Size 182B
        • SHA256 025f7f7bcdaded80c650b320cae8894784b453bac0b1b3dc054383518fc473d5
        • MD5 SHA1 SHA512 TLSH

        fc2e6f1d599e8c90ee0dcf213dd73853.0.tmp

        • Path /data/data/com.tcl.browser/cache/fc2e6f1d599e8c90ee0dcf213dd73853.0.tmp
        • Size 6KB
        • SHA256 699190be4823d761940660d324c3ad245facf40f46639460aa0c63373d22b860
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fc2e6f1d599e8c90ee0dcf213dd73853.1.tmp

        • Path /data/data/com.tcl.browser/cache/fc2e6f1d599e8c90ee0dcf213dd73853.1.tmp
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        journal

        • Path /data/data/com.tcl.browser/cache/journal
        • Size 295B
        • SHA256 20eb1570d648366a2f787d2747b0392882d754ae7869a7807e4053da2e0c972d
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.tcl.browser/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        browser.db

        • Path /data/data/com.tcl.browser/databases/browser.db
        • Size 96KB
        • SHA256 9bc60f471abd2fc6da8cac64fc1afbeff3718b346c471af47d8f7f8c3c07295d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.db-journal

        • Path /data/data/com.tcl.browser/databases/browser.db-journal
        • Size 512B
        • SHA256 bd32d6bbd6f38c8aa6986f6bade254e288253cd5bd5f9b90c99662a01960b375
        • MD5 SHA1 SHA512

        browser.db-journal

        • Path /data/data/com.tcl.browser/databases/browser.db-journal
        • Size 8KB
        • SHA256 b9d8f089c727122b38acbcd149f2049d546a47ce2006878b5f79fa602eb2c970
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.db-journal

        • Path /data/data/com.tcl.browser/databases/browser.db-journal
        • Size 8KB
        • SHA256 b976aa4a08e6404ec47af2529be45aebe5366cdf99c6653b390c95fcc6d049bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.db-journal

        • Path /data/data/com.tcl.browser/databases/browser.db-journal
        • Size 16KB
        • SHA256 88b4ebe902672a5eb71a732daabb1eec795247cee553911241e1beb1ff3ea580
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 b7638d3928230031b2b9fdea1fd6c7f02f12b377ab5b084eff23fdef05706fa8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 2d0b5d2a2bbe851e33dea2fff23e0eb492d6dfb6ed089adfa0d44cc4748fa90d
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 ecc4c93f4491d3a954de9f31b3162a86c3fc40c04377e2300cbc6a9e85baf10c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 5057843d9d1103f9d26431985ae87a91d9b344946a3c9a6b600a54ff33922273
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 28c74334f6913c083edb4c11193076e3586ee6d2e3b4bc52c2d8bfdc9767b8f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5d0dabce18fdef9b192f37c3ff3e28f8cc36ac7446b107ee531d8cd16051230f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.tcl.browser/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 29c1916e6670961cd4aa0d9cf82a457cd41788a6e7949f034d1be6348d472af6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ed4b676545dc34012dd1cd6f0366ff1dd7023f8c2747f12deab144d32a14bb8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7f27078829a3d1ebc8a2c3989d03062bbf22b6849070dd0aea5822caf2b2a6ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 84997375abf50d87f77404a470b9a3e6b5278186e311fbf0eb8bbf6ebd971b02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ea53d57e9518a00502b3846ae5e4f7946a79e9f619a654e5d043ab4d1dbc62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7d14c4b820a9c1148a64281025282ee03f2789a11816dbc0ab6cd602b95edf62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 0cd20580452f2fdff2ff9d6980ce8ff3618fbcef19864e0298f97aef80a87494
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2b1e96163cdb632fe9065de1c44a9678a3ffc98ae7ca20a85373931743e275b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 f7fd666fc8e99e92cd02f630400660d900704bb401a04ea4935385fc9f0a36c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 168d6e2dbd6f169a0a0f44e69fe7f1a864f6146c4296cbbc7a570ed2f84adba0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 36c2572912b6a422e4bbcbd29cb24f17f8b369300236566c58a575017103d4aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.tcl.browser/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 79ac00f379459d88e05c50ad7ade603dfc2dff628e158ef9a5c939c07e469735
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/com.crashlytics.settings.json
        • Size 764B
        • SHA256 c4466e5393a437e3b6ffbb2cfba87938462491f47dec2c620d938cde3784809d
        • MD5 SHA1 SHA512 TLSH

        internal-keys

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/internal-keys
        • Size 207B
        • SHA256 8806e0b188eb42c86d4d5a4b44a4fe6fc10c1be2aca5bc3123983ac38158661c
        • MD5 SHA1 SHA512 TLSH

        app.json

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/native/app.json
        • Size 237B
        • SHA256 e17a7fb6edd979f82762e635600164a0f75f9a63c0da89b847c1b5d62fba4359
        • MD5 SHA1 SHA512 TLSH

        device.json

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/native/device.json
        • Size 194B
        • SHA256 697e9b12aee79ea99a03cf74cc13e5ddd415efa453794a0a4ae8cecb7752cbd0
        • MD5 SHA1 SHA512 TLSH

        os.json

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/native/os.json
        • Size 56B
        • SHA256 3a5df913db77290768c5dfbdfd65b218dfa34b7999441f5cc87797e4b65e445c
        • MD5 SHA1 SHA512 TLSH

        session.json

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/native/session.json
        • Size 127B
        • SHA256 9f105ccdc4a90fc82a990a86f3f739cb3e5d31b76aafeef57fc69b3e12b22b1e
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/report
        • Size 841B
        • SHA256 12d40c858a14504b3dcbcb918d1f10c96237c34b85d6ec94dd4f1e13487f38ea
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/userlog
        • Size 533B
        • SHA256 8c921299b239cbbe203f3dbdfe6f1bb1670b0fec505fc44052d56baca0103a22
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/com.tcl.browser/files/.crashlytics.v3/com.tcl.browser/open-sessions/6A8F52910387000112B1E56FA2130375/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation4533850862221148808tmp

        • Path /data/data/com.tcl.browser/files/PersistedInstallation4533850862221148808tmp
        • Size 567B
        • SHA256 f8e39413bd99e34fe6b9ca021a8466b4062b1b29a579a77073c405fe952279c9
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7724993123472444556tmp

        • Path /data/data/com.tcl.browser/files/PersistedInstallation7724993123472444556tmp
        • Size 90B
        • SHA256 4bf51b629deba9753cccd185279d0a01029176ff64c0b457811c5c9ae8744c05
        • MD5 SHA1 SHA512 TLSH

        firebase_session_Y29tLnRjbC5icm93c2Vy_data.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_data.preferences_pb.tmp
        • Size 50B
        • SHA256 43f293adf1d932ac7734aee6c2f7a3d828a8c1e57a7a3df607496f47ce7d20cc
        • MD5 SHA1 SHA512 TLSH

        firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512

        firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH

        firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH

        firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH

        firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp

        • Path /data/data/com.tcl.browser/files/datastore/firebase_session_Y29tLnRjbC5icm93c2Vy_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 d4f2a0a594e15c6494aa74e5e7c6666ddadf5c772503521374a8d06ab02e166f
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.tcl.browser/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 7cb89cda885e46159025e8e9cbb08819ba0e844790038411507c2cf7070c8014
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tcl.browser/primary.prof
        • Size 738B
        • SHA256 f01ae11352e1c09c0a5f7a5246c5af82c72c4f8307d371368c113743446dd406
        • MD5 SHA1 SHA512 TLSH