Analysis

  • user interaction
    yes
  • max time kernel
    125s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    07/11/2026, 17:31

General

  • Target
    Scan_Protect.apk
  • Size 6.6MB
  • Sample261107-v3sybaew2n
  • SHA256 0031fbbae23ec597633575f9596068a2aa7ea09f1fdf3ad1082d8c4f4f339ba7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

Processes

  • com.utils.virusscanner
    1⤵
    • Queries information about the current Wi-Fi connection
    PID:5151

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5bfc5bcae5a295e86c5eb57de76a3c81941a8dbc5bf5317295afc7ce9467ccef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3d4a403517a3b3a3604d847c1902dee9f4bf6e5129e34ef28371fa169bf306fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c4c8f34972481ab728015ef49f574218bc3d16d3c102b5dc4225719fedf3c39f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 644ff202e6e4e793ff22e9565d85f44bd01c3831d7a30a6529c8aaf1cf6b6b58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 981b600c661c452cf5344a15fc3d0ff297cc2c14b77634459db906d906cb0f46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 5b0a23f499bd3adecc44a6c4ffe0ace74a3ee90e39e7fa718be985f899d5552f
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f72dc1224d64cefabc4600a870f3e68c3fb092584ec08384b5c45e2242542c17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 5dbbcb5a8a61dbe0a70409a0d59cf931c82b717f6e62a5775c5a3fa55f57d7e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 81200bc5470894087c48924895a0490218b78024319280f7fb0c3cfdd02c86ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 cbc57efdbb24c6c6e4c5177a81b696e06ef7ad9c3d9cf1bd64a8245fc046a57c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.utils.virusscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 eade1167abdad243a162ae1672a6a373d940b9cfc09914cf06905f38c84400b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation3129915990122342814tmp

        • Path /data/data/com.utils.virusscanner/files/PersistedInstallation3129915990122342814tmp
        • Size 566B
        • SHA256 0724912edc33acd8e3679eec565c9abd51b4cee7d3a726460a8b13388225dc96
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8951308029187497002tmp

        • Path /data/data/com.utils.virusscanner/files/PersistedInstallation8951308029187497002tmp
        • Size 90B
        • SHA256 073a3409e322fbf98e57db1050941c865c8234ff45f2672430aaebc7cbd6e1ef
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.utils.virusscanner/files/profileInstalled
        • Size 24B
        • SHA256 95109ac34bab527ff84ecc535e625e4f5e12e17d99021da4b13c1bd98c2f8b3d
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.utils.virusscanner/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 9bc86dfbc964a9ae474753e999f1a5bbf91f4931933955cd3fdd1da8f8fb3147
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 05f5e05a4692cd9283ed594afcbc3851e2655a7233e92d8c302672fb92cf0f2e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
        • Size 124KB
        • SHA256 47e92163909365058aa478bc400f8d180eb3b0ea48d20ac20e0421e135dbb498
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e52ece1f0c63814bd967f98d6541b859a31d9997b99a5d2da8b74801523caa14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.utils.virusscanner/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 b96c78866a06f4edea35c03633f390b306b411148fbf387082457159a2928266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
        • Size 1KB
        • SHA256 c16267680967090bed0c05229427d1727b756d747ea9ade806984bffbc355d02
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
        • Size 9KB
        • SHA256 c8c52d22e97553af5a997c2c8390046615d88d4350752a549281e083de0a640d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.utils.virusscanner/primary.prof
        • Size 9KB
        • SHA256 c5b1f4e1b6ca110c871158a68ebc722e65968928bccd18f92a7c4dcef92d23f3
        • MD5 SHA1 SHA512 SSDEEP TLSH