Analysis
- user interaction
yes - max time kernel
125s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/11/2026, 17:31
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Scan_Protect.apk
Resource
win10ltsc2021-20260911-en
4 signatures
150 seconds
General
- Target Scan_Protect.apk
- Size 6.6MB
- Sample261107-v3sybaew2n
- SHA256 0031fbbae23ec597633575f9596068a2aa7ea09f1fdf3ad1082d8c4f4f339ba7
- MD5 04e49193bd5ddda0484b83b1187144ba
- SHA1 54f340384bd9d1c2f0286ae678eb6cfeacf40534
- SHA512 b9a4e5cb86058faa156317dcc1b1f3a9be9349dd86a411a08a569371faf0e1d7f1d99d01d912c6f3705468808b058c8deb116611577d129826f67734f4287c56
- SSDEEP 98304:4C/7PieRzAuLk7SXIvKV5ZwkGFjpaTBG/oBmF0wu+wFo7J2xZ+mRIzoTwrp1Lc:x/76qxLMFFatG/oB+0wNIo7Jq+d4
- TLSH T1C96602DAF7D9992FC8774032C96A52F5625B4C128A839F472948371D387B6D80F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.utils.virusscanner
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
- MD5 d5d65a0b4c6e6db83f30d16e24a0d306
- SHA1 a768e9b3d93efae0ef42a9bdb203be9f2ee824d4
- SHA512 b94841e2c87dfc2383e0adfe8bac6a5813a9faad61edbe953f4e953828cdeeba631ed0dc45e698dd680ccefc3fa6930f53483dcbc26149a3a6f26f9badcd1ef5
- SSDEEP 6:l9bNFleLIls19P0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDE97LzmzsRmBEyPbBvOwVQ
- TLSH T1BC72D8CD8F10A716C5170337608AD3955F78951E83679647266408646E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5bfc5bcae5a295e86c5eb57de76a3c81941a8dbc5bf5317295afc7ce9467ccef
- MD5 3a15e72b4dd252eb338ae9cd0b9cdbf7
- SHA1 0da3524dadeea3b9227a221e3bf8dfee9c75f590
- SHA512 a3076b3ba9c448f6c43fe8d77b8ca59169bd5db1b6a2d6c8cc124c350b64165efbc1792d7a79be98e5f1fabbc8d4a75eaaf7e549aa7fe12983751e94592d285a
- SSDEEP 12:TL6EQ97LzmzsRmBEyPbP/DvJ+/0Fl67PL:TLOxHmz3GSP/DvJlFu
- TLSH T17972ABCC5E10E307E227033E20CB93D21E38610E4337A65B3A2009689D435C8F012F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3d4a403517a3b3a3604d847c1902dee9f4bf6e5129e34ef28371fa169bf306fe
- MD5 5295fdd32150faf71a4bb72eacfa7fe6
- SHA1 ae7e2d72525f5f5db148556b23a0c8fa63cf2d8c
- SHA512 444a94ed107c2f91c881a5930c8e0ee9c1acf52ea6f40091f98e8d58657c4b030f1c1409bb5d144f99bdbaf66733e27f2a3c0e835afe037dd5280913947d1f16
- SSDEEP 12:TL6UET7LzmzsRmBEyPbP/h1V49blqYFlBJvJ+/0Fl67PL:TL63Hmz3GSP/h1V499FRvJlFu
- TLSH T1A8724689BA24D216E277073E20C7A3C2293C301B0727A6563D150F2C5C83784A021F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c4c8f34972481ab728015ef49f574218bc3d16d3c102b5dc4225719fedf3c39f
- MD5 08211463a7287a57cd11c0b22d4ab865
- SHA1 fd927e762efc5b8b0429387ebf526c78c719c55c
- SHA512 d70e58004dbbd68bcaa5836e2388283c06ee2363b40128bd0cdb1968648c1d2152e4d43c03b3000b52f4299799eb35646f64afcca92568a9b9d9548d8cd70ca8
- SSDEEP 24:TLYHmz3GSP/J9hKamNZ2YvD499FRvJlFu:T8GKSP/XcamNoJ591u
- TLSH T1AF72F585B968D616F2774A3D11CBE7C22A3D30570B27E2573D165F1C5D833949021B05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 644ff202e6e4e793ff22e9565d85f44bd01c3831d7a30a6529c8aaf1cf6b6b58
- MD5 c8bc7f53a69e29f70c9d1515a59ec8ce
- SHA1 f6a3b968dd4259521274fa90ecb7a0ce384d09ae
- SHA512 fa8cd24a2cfa13eb09e2d5e8e875096a4dfdb5ef28e722ab648678ab4ab573e0a590fa40895f98fcb4535047cad6d4c62338c4df589fb19cf9c6fca4c4abf0ec
- SSDEEP 24:TL0VHmz3GSP/yhKamNZ2YvD499FRvJlFc:TMGKSP/ycamNoJ591c
- TLSH T19172F189B968E616F27B5A3D62CBE6D2293D30970B27E25239165F1C5D833949021B01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 981b600c661c452cf5344a15fc3d0ff297cc2c14b77634459db906d906cb0f46
- MD5 79f3f703bb6a0a61a1a78c7ebd56eaab
- SHA1 939a889749f7a33bd43c44a43c4f7c6146df8e0b
- SHA512 6c01815e708c3487565cdd6ecf574a1bc411af8acd04679c491eb33c574f082672ee5313dc0c077e3e49934229bc92e86dcf1fa8b4644e39f204b2e780d1cad5
- SSDEEP 6:l9bNFlYls1UbP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/W+39lPn:TLGEUb7LzmzsRmBEyPbP/WoFV
- TLSH T18472268D8F14A613C227037B348A93992F28921F837BEE432AB40864AE53188B051FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 5b0a23f499bd3adecc44a6c4ffe0ace74a3ee90e39e7fa718be985f899d5552f
- MD5 9f22b9efbd7a7f2e84d3c84891e3761b
- SHA1 094cb3753abd2efc2dc670419aaefd15c340d4a3
- SHA512 3dec767e28efacc3741c60753ad05fe016a78139b2246e1e693d381c6092192b11530ffbd811ef6caff1d353170578efd48d7613120ac3405c46592b65f99628
- MD5 SHA1 SHA512
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f72dc1224d64cefabc4600a870f3e68c3fb092584ec08384b5c45e2242542c17
- MD5 507742f11572d1f8a9beffadf25d7a8f
- SHA1 f4aaf36b27b0a8bbd88317157d4e16df42943351
- SHA512 1434c4a47f8b0b1eff713d1f5a38898a4a0837aa24ad5b398b7233cd7351ff70addd013a004d816fe744529979af57423b7feb090792f5afbe9318ec59911e7c
- SSDEEP 6:7+/l939n1Og9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsm:7+tV6qLiuWdwRmBEyPbU
- TLSH T1DC02C08D63800823C81F16FFBCD883800D00E719C173CB07156008D83C035CCE4B0E24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 5dbbcb5a8a61dbe0a70409a0d59cf931c82b717f6e62a5775c5a3fa55f57d7e6
- MD5 50d8187b48dfbe0af25d910dddbe4ac2
- SHA1 cb75f7d1909a46bc5700ef8382fdaf34b388163d
- SHA512 f8c196ba0bf7dc6f4ae38b5271f662d93e764905e3f7a24ae94249fcdf8a233abc4843586d12debfe765fd0371a23a1ca692395130e94dc8763be68cf48506b5
- SSDEEP 6:7+/lTpFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKmj:7+tXqLJdTRmBEyPbXj
- TLSH T15F9180DB67420D13C51D5BB794D5C3951D60A715C373CB9716B10C987C47ACCE494D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 81200bc5470894087c48924895a0490218b78024319280f7fb0c3cfdd02c86ff
- MD5 3ec6591b1b4bf8d9e5376e7584dc42d6
- SHA1 f6b1265857b96281dbaf8e28e88cdb525193aa2a
- SHA512 ea64325f03df8a65af5da87814b1321cf01abc8786e01bb0c62392aba7ba246969d2d65af5461e9225b3e725f2a0b7b3326c28fbf76255b77b47fa62017e49d5
- SSDEEP 6:7+/l9Ti/0FPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK//Gt/yN:7+txi8BqLmqCRmBEyPbY/Se
- TLSH T15E02228963800C13C4291BB790C883411E41E3148131CB0F55600AA8BC024CCACD0E50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 cbc57efdbb24c6c6e4c5177a81b696e06ef7ad9c3d9cf1bd64a8245fc046a57c
- MD5 4675e6a95317eacf1fe8d945d376b595
- SHA1 10c2e22db18cce619e84871e6a61268f968838a9
- SHA512 bbb9cbc61fc3f5dbef2aa0e206e169f2f54047aa30895cd965905c514b0a89c4cbc23e9b64cac9f02db4e43d7a1fa1c0f1ca2e614310f42b0c6f2a50d95d2849
- SSDEEP 6:7+/llNg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKwG:7+tlNqL8EEh9zmzrfRmBEyPbw
- TLSH T18591C28DAF113606C1670A77B4CE93516D28A219C3779E572AA80464BD42549A051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 eade1167abdad243a162ae1672a6a373d940b9cfc09914cf06905f38c84400b9
- MD5 4afca85ca637cd7189b73739232667d5
- SHA1 ee859f77ec5e632b41c3a06504ccf93f0bf97190
- SHA512 7806dc65d7051688b0142df03bc52cb7de1be28a5d3fd7ed54c30733080422b1c5e990a55f2f7b5d7592f361ce5d750a36442ea91d62a13fb7eab3f72bc073c5
- SSDEEP 12:7+tEFOf7Kv2mid+oHEWlCuUyWlI7YlBpnl4SiifqL/Ex7LzmzsRmBEyPbK:7+tEFbOG5be2nGifqLIHmz3GSK
- TLSH T1A102AC8DAF689912F1770B3B20EAC6C02B38348B82B3E9073991051C7D43784E061F20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/files/PersistedInstallation3129915990122342814tmp
- Size 566B
- SHA256 0724912edc33acd8e3679eec565c9abd51b4cee7d3a726460a8b13388225dc96
- MD5 a7ea7da31c7e456199c862346b09542a
- SHA1 42b578584e7aa12029709fe66495fd4109a6a662
- SHA512 103533f3dcb1f07be54e81c27dc2f027c06df039bc158b1af2f7b1ca9bc39c395fd35839f9d7d0a7e427aecbfff5840106bce29a980aa9fda260caf83c96a7d9
- TLSH T1B6F0965C372101B5D0D56426380C3E142C085575404E02CD3FDE88B2DF69573A38B888
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.utils.virusscanner/files/PersistedInstallation8951308029187497002tmp
- Size 90B
- SHA256 073a3409e322fbf98e57db1050941c865c8234ff45f2672430aaebc7cbd6e1ef
- MD5 3c5fb3566705437ebd3878ebfeae02e0
- SHA1 b4abe9db89c0da23cb76d2653d0b4f2b57bc70ef
- SHA512 c167fb8f2d041b68af0947d73be55db167bc1c40b694de37ad73f8b3afd4c174937da169ec88f7a97cebefb24db55a09c1d696ca9f81f03913ac267cb62010e1
- TLSH T1DDB0120457319151C88BB2022D4D91101D902580084D8A4D0A089C4045C62E0B363EA8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.utils.virusscanner/files/profileInstalled
- Size 24B
- SHA256 95109ac34bab527ff84ecc535e625e4f5e12e17d99021da4b13c1bd98c2f8b3d
- MD5 d9a3b0f1515cf385974df1bac5b55c2f
- SHA1 eda4cb0fdd605fb6438efc359d18dc7d75b4bf1d
- SHA512 8cdf7ed93b77f5c5bf0859f6fb1bf130c8d2e3c1d34f9c99d63dec564091a674d9ed293a33820baea23933f864c8cf0352ed761e6fcc3aa3fe689ea9e1983d80
- MD5 SHA1 SHA512
- Path /data/data/com.utils.virusscanner/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 9bc86dfbc964a9ae474753e999f1a5bbf91f4931933955cd3fdd1da8f8fb3147
- MD5 78947b6a142cf476e4d839098d3bffe5
- SHA1 201fe24a9b9f0aa37cd1c4580d33623dc2e8c4e7
- SHA512 df1da73b704b67463f882126d2acd2fc86504836b404870dbd8ee7af3822981062c35f41dbc65b473ed792d813b1613cb7fbecfaf204fb36fdeeb33bb5e0bf29
- MD5 SHA1 SHA512
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 05f5e05a4692cd9283ed594afcbc3851e2655a7233e92d8c302672fb92cf0f2e
- MD5 9f0dd1c373cbc121c7390bdbcba7edbd
- SHA1 06c210f512cb37fb168b8717bfdbe254fe04ac2e
- SHA512 9fa735f9145e240e17b3a99a605ae0fa10bea535ff4e63cc450914fa558b8be88495abbc69829e2b3c1e89b8c152cde824197317c3db8c498445a0dcfe25aa00
- MD5 SHA1 SHA512
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
- Size 124KB
- SHA256 47e92163909365058aa478bc400f8d180eb3b0ea48d20ac20e0421e135dbb498
- MD5 0249da57b76a86d2ce7bed263761a6e9
- SHA1 a6d8ec899545fc7869a0fb4f6746872ac6f9f385
- SHA512 c5b0275405e170b5a35c4fc7b09a71aff44627b20edadab0469a71fd5c4f1e0a342c69fd2b084e55d49060fe14872f6f5ce39cfa22326928714672b4143e3e7d
- SSDEEP 3:xBTbyM62wzXtRKVjWAwtsAQh0XllgoqKXtRKVjWn:3g72V8t3q0p2Vq
- TLSH T1A1C39BF317591C13C552577EEA9F56DA5441DD00519C7CF555051E78A93034C0120140
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 e52ece1f0c63814bd967f98d6541b859a31d9997b99a5d2da8b74801523caa14
- MD5 fd44ba148be28106148c5881c6887047
- SHA1 f24f4b49a0e80a6b75b0a3e6f30b06aa3c65fb85
- SHA512 4087c63e2925a028b2189890537932f7a80f0eb9fde19cfa965f6459eb9a90cad2d3e1efcb03b67e092d1001fd9c71469c7eb54985065eadc1d2d753dc0e3142
- SSDEEP 6:KreIXEhg9FZdrlOERX4PBX4ogLugMBX4suuK+/VIcXsltR9vZiOw2:KBUhqzdTRmBEyPbP/KccPMOw2
- TLSH T17372C2BAA3404D53CE1B037390C4E3C61DE1BF185616E7171150046D3E2A7DCB490D4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 b96c78866a06f4edea35c03633f390b306b411148fbf387082457159a2928266
- MD5 476465ff736cd00be38514a8dd10780c
- SHA1 da8b80d0909776e359f20bf3e778af1a6fb99e64
- SHA512 264eca540f864ea5f413fc13f6cd80dc5b05f769add8397df7421cf2e70698a765b4da64da11cb9713254577b63435be5bf2da89ccdd19228b0a98a422484d9d
- SSDEEP 96:8WZ7Qt96+etidjnZRWzzb8/KeKcK+zSPAddKz+ZD86u0ExV:8WZ7u+tidjnfWzzb83zSode+ZD86u0ED
- TLSH T1A4C3419E0F192A00CDAA94B1D4D00BF2B97E552E9393F3E1259100BDADE6921DD25CFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
- Size 1KB
- SHA256 c16267680967090bed0c05229427d1727b756d747ea9ade806984bffbc355d02
- MD5 103d7a6b4988057965911257606f1e74
- SHA1 259b71d4ef34c5eaa62f2752a57768adbb55130e
- SHA512 ad6ba11de0ac01a6c8d1cef683e8ba896d54f74f71a062a4b3409858b3cbe09bb9cca90758c7d0cdc4e0dc0301112a58bdf4edde907d21877620ec77a13e596e
- TLSH T1894109BA8554380ACE5A464FBB639B2CC1E0D7AEC9550320C13176BCEC64154CE57D4C
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
- Size 9KB
- SHA256 c8c52d22e97553af5a997c2c8390046615d88d4350752a549281e083de0a640d
- MD5 735e1800e1a7384b8fbcacb98647942c
- SHA1 e0a996164b30bd312053d7947a33cd9905e0d519
- SHA512 56b44dfd4c64c8023615d96f4a1698a014f929ac2d46b7d21c734c2af5c94d030077e740c3560dc728fef6807eb46833dccb701a61d682dd915abd0ead2a96e3
- SSDEEP 192:qi3Cc3HmEIJ5Re3TOMJSxvqfoqjl9Sj1QpDiLA2N1PoY89Hh7t:qeCc3laPMOfqj6Qpv27PoPph7t
- TLSH T127229F87A7BD5D3EA4C2B82159237D3AB840BD5B93544947FD8FB1F194F26301271887
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
- Size 9KB
- SHA256 c5b1f4e1b6ca110c871158a68ebc722e65968928bccd18f92a7c4dcef92d23f3
- MD5 2becbc082f44a4bb413740b364415579
- SHA1 f13d7706162847ebe197cf3660f7b40d5f4c2ab4
- SHA512 05e966e8708c78c44086fe0825a622cdb5783ca37fda135e0b1b003ae8861fce5231c31af9da8cc0e5cfa508a65954a3b51649c5ac12f7b7855651dd0121c680
- SSDEEP 192:fdif8+OUUinhSIYBgxJDQ3kM5bRqX6l7G30k3sMST5MEq:fAxOqnW+2x+o5MEq
- TLSH T10022C0CC9CCED0280A5A79D2CC0D75DACB1E61B6E4D068F656A6B7189A3180693F3C3C
- MD5 SHA1 SHA512 SSDEEP TLSH