Version: 32.0.0 Black Diamond

ID: 424692Sample Name: DHL655.apkCookbook:defaultandroidfilecookbook.jbsTime: 09:37:41Date: 26/05/2021Version: 32.0.0 Black Diamond

2333333333344555555557778888888889999999

1010262627282828292929292929

Table of Contents

Table of ContentsAnalysis Report DHL655.apk

OverviewGeneral InformationDetectionSignaturesClassification

Yara OverviewSignature Overview

AV Detection:Mitre Att&ck MatrixScreenshots

ThumbnailsAntivirus, Machine Learning and Genetic Malware Detection

Initial SampleDropped FilesDomainsURLs

Domains and IPsContacted DomainsURLs from Memory and BinariesContacted IPsPublic

General InformationJoe Sandbox View / Context

IPsDomainsASNJA3 FingerprintsDropped Files

Created / dropped FilesStatic File Info

GeneralFile Icon

Static APK InfoGeneralActivitiesReceiversServicesPermission RequestedCertificateResources

Network BehaviorNetwork Port DistributionTCP Packets

APK BehaviorInstallationMiscellaneousSystem CallsBy Permission (executed)By Permission (non-executed)Disassembly

0 Executed Methods0 Non-Executed Methods

Copyright Joe Security LLC 2021 of 29

Analysis Report DHL655.apk

Overview

General Information

Sample Name:

DHL655.apk

Analysis ID: 424692

MD5: 8aaef4a48d9ae20…

SHA1: 0f7c03faa4a1074…

SHA256: 6a73d255c2ba8f6…

Infos:

Most interesting Screenshot:

Detection

Score: 48

Range: 0 - 100

Whitelisted: false

Confidence: 100%

Signatures

Multi AV Scanner detection for subm






Multi AV Scanner detection for submMulti AV Scanner detection for subm……

Accesses android OS build fields






Accesses android OS build fieldsAccesses android OS build fields

Checks an internet connection is av






Checks an internet connection is avChecks an internet connection is av……

Detected TCP or UDP traffic on non






Detected TCP or UDP traffic on nonDetected TCP or UDP traffic on non……

Executes native commands






Executes native commandsExecutes native commands

Has permission to perform phone ca






Has permission to perform phone caHas permission to perform phone ca……

Has permission to read contacts






Has permission to read contactsHas permission to read contacts

Has permission to read the SMS sto






Has permission to read the SMS stoHas permission to read the SMS sto……

Has permission to read the phones s






Has permission to read the phones sHas permission to read the phones s……

Has permission to receive SMS in th






Has permission to receive SMS in thHas permission to receive SMS in th……

Has permission to send SMS in the






Has permission to send SMS in the Has permission to send SMS in the ……

Has permission to terminate backgro






Has permission to terminate backgroHas permission to terminate backgro……

Has permission to write to the SMS






Has permission to write to the SMS Has permission to write to the SMS ……

Kills/terminates processes






Kills/terminates processesKills/terminates processes

Lists and deletes files in the same c






Lists and deletes files in the same cLists and deletes files in the same c……

Obfuscates method names






Obfuscates method namesObfuscates method names

Opens an internet connection






Opens an internet connectionOpens an internet connection

Performs DNS lookups (Java API)






Performs DNS lookups (Java API)Performs DNS lookups (Java API)

Potential date aware sample found






Potential date aware sample foundPotential date aware sample found

Queries camera information






Queries camera informationQueries camera information

Queries list of running processes/tas






Queries list of running processes/tasQueries list of running processes/tas……

Queries package code path (often us






Queries package code path (often usQueries package code path (often us……

Queries several sensitive phone info






Queries several sensitive phone infoQueries several sensitive phone info……

Queries the WIFI MAC address






Queries the WIFI MAC addressQueries the WIFI MAC address

Queries the network operator name






Queries the network operator nameQueries the network operator name

Queries the phones location (GPS)






Queries the phones location (GPS)Queries the phones location (GPS)

Queries the unique operating system






Queries the unique operating systemQueries the unique operating system……

Requests potentially dangerous perm






Requests potentially dangerous permRequests potentially dangerous perm……

Uses reflection

Uses reflection

Uses reflection

Uses reflection

Uses reflection

Uses reflection

Uses reflectionUses reflection

Classification

Yara Overview

Signature Overview

• AV Detection

• Location Tracking

• Spreading

• Networking

• Spam, unwanted Advertisements and Ransom Demands

• Operating System Destruction

• System Summary

• Data Obfuscation

• Persistence and Installation Behavior

• Hooking and other Techniques for Hiding and Protection

• Malware Analysis System Evasion

• Language, Device and Operating System Detection

• Stealing of Sensitive Information

Click to jump to signature section

AV Detection:

Multi AV Scanner detection for submitted file

Mitre Att&ck Matrix

Ransomware

Spreading

Phishing

Banker

Trojan / Bot

Adware

Spyware

Exploiter

Evader

Miner

clean

clean

clean

clean

clean

clean

clean

suspicious

suspicious

suspicious

suspicious

suspicious

suspicious

suspicious

malicious

malicious

malicious

malicious

malicious

malicious

malicious

No yara matches


InitialAccess Execution Persistence

PrivilegeEscalation

DefenseEvasion

CredentialAccess Discovery

LateralMovement Collection Exfiltration

Commandand Control

NetworkEffects

RemoteServiceEffects Impact

ValidAccounts

WindowsManagementInstrumentation

PathInterception

PathInterception

ObfuscatedFiles orInformation 1

OSCredentialDumping

SystemNetworkConnectionsDiscovery 1

RemoteServices

LocationTracking 1

ExfiltrationOver OtherNetworkMedium

EncryptedChannel 1

Exploit SS7to RedirectPhoneCalls/SMS 2

RemotelyTrack DeviceWithoutAuthorization

GenerateFraudulentAdvertisingRevenue

DefaultAccounts

ScheduledTask/Job

Boot orLogonInitializationScripts

Boot orLogonInitializationScripts

Rootkit LSASSMemory

LocationTracking 1

RemoteDesktopProtocol

NetworkInformationDiscovery 1

ExfiltrationOverBluetooth

Non-StandardPort 1

Exploit SS7to RedirectPhoneCalls/SMS

RemotelyWipe DataWithoutAuthorization

DeleteDeviceData 1

DomainAccounts

At (Linux) Logon Script(Windows)

LogonScript(Windows)

ObfuscatedFiles orInformation

SecurityAccountManager

SystemInformationDiscovery 1

SMB/WindowsAdmin Shares

Data fromNetworkSharedDrive

AutomatedExfiltration

ApplicationLayerProtocol 1

Exploit SS7to TrackDeviceLocation

ObtainDeviceCloudBackups

CarrierBillingFraud

LocalAccounts

At (Windows) Logon Script(Mac)

LogonScript(Mac)

BinaryPadding

NTDS ProcessDiscovery 1

DistributedComponentObject Model

InputCapture

ScheduledTransfer

ProtocolImpersonation

SIM CardSwap

CarrierBillingFraud

ThumbnailsThis section contains all screenshots as thumbnails, including those not shown in the slideshow.

Screenshots


Source Detection Scanner Label Link

DHL655.apk 16% Virustotal Browse

No Antivirus matches



No contacted domains info

Name Source Malicious Antivirus Detection Reputation

https://api.instagram.com/v1/users/self/?access_token= android false high

http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.pbf0eff1c.pf097b

text_view_without_line_height.xml false high

http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.p99ffe0ef.p0b36d

mtrl_calendar_month.xml false high

https://cdn130.picsart.com/70814775220319715277.png beautify.json false high

https://cdn140.picsart.com/62936544326635796529.mp4 beautify.json false high


https://cdn130.picsart.com/08514269275094121398.jpg subscription_discount_screen.json false high

https://cdn130.picsart.com/08843647770608594085.jpg beautify.json false high

https://cdn140.picsart.com/v2.1compressed.mp4 beautifyNew.json false high




https://github.com/danikula/AndroidVideoCache/issues/134. android false high

https://access.line.me/.well-known/openid-configuration android false high


http://vk.com/images/community_50.gif android false high

http://www.slf4j.org/codes.html#unsuccessfulInit android false high



http://vk.com/images/camera_a.gif android false high

https://cdn130.picsart.com/75221518015278216369.json subscription_paused_screen_configs.json

false high

https://graph.instagram.com/me?fields=id android false high




http://plassets.ws.pho.to/a/t/default/ic_my_profile_female.png android false high


http://vk.com/images/x_noalbum.png android false high


http://schemas.android.com/aapt $avd_show_password__2.xml false high

http://vk.com/images/camera_b.gif android false high

http://www.slf4j.org/codes.html#multiple_bindings android false high

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries


https://www.virustotal.com/gui/file/6a73d255c2ba8f663304c9bab0be386342f019561948f1577082d92eef9a30d1/detection/f-6a73d255c2ba8f663304c9bab0be386342f019561948f1577082d92eef9a30d1-1622014688


https://api.line.me/ android false high




http://schemas.android.com/apk/res-auto abc_screen_toolbar.xml, activity_main.xml, abc_action_menu_layout.xml

false high

http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.p9d6b1743.p159d2

test_reflow_chipgroup.xml false high


http://www.slf4j.org/codes.html#replay android false high

http://vk.com/images/camera_c.gif android false high


https://picsart.com/privacy-policy?hl=en subscription_discount_screen.json false high



https://c.amazon-adsystem.com/ android false high




https://oauth.vk.com/authorize?client_id=%s&scope=%s&redirect_uri=%s&display=mobile&v=%s&response_ty

android false high


http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.p242ab0f7.p99d70

design_navigation_item.xml false high




https://cdn140.picsart.com/v2(0-00-00-00).jpg beautifyNew.json false high






https://cdn140.picsart.com/288259389008201.png beautifyNew.json false high

https://tools.ietf.org/html/rfc7518#section-3.2 android false high

http://www.slf4j.org/codes.html#substituteLogger android false high


https://picsart.com android false high

https://www.amazon.com/dp/ android false high

http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.p242ab0f7.peefa1

design_text_input_start_icon.xml false high

https://github.com/danikula/AndroidVideoCache/issues. android false high

http://vk.com/images/community_100.gif android false high

http://schemas.android.com/apk/res/android mtrl_outlined_stroke_color.xml, mtrl_fab_transformation_sheet_expand_spec.xml, abc_btn_check_material_anim.xml, $avd_show_password__2.xml, abc_btn_default_mtrl_shape.xml, abc_ic_arrow_drop_right_black_24dp.xml, btn_checkbox_checked_to_unchecked_mtrl_animation.xml, btn_checkbox_to_checked_box_outer_merged_animation.xml, abc_alert_dialog_title_material.xml, abc_screen_toolbar.xml, mtrl_extended_fab_state_list_animator.xml, activity_main.xml, design_snackbar_in.xml, mtrl_alert_dialog_actions.xml, mtrl_fab_show_motion_spec.xml, abc_action_menu_layout.xml, android

false high

https://access.line.me/oauth2/v2.1/login android false high

http://vk.com/images/s_noalbum.png android false high

https://oauth.vk.com/blank.html android false high

http://www.slf4j.org/codes.html#StaticLoggerBinder android false high



http://plassets.ws.pho.to/a/t/default/ic_my_profile_male.png android false high




General Information

Joe Sandbox Version: 32.0.0 Black Diamond

Analysis ID: 424692

Start date: 26.05.2021

Start time: 09:37:41

Joe Sandbox Product: CloudBasic

Overall analysis duration: 0h 5m 11s

Hypervisor based Inspection enabled: false





http://www.slf4j.org/codes.html#version_mismatch android false high


https://auth.ws.pho.to/ig/photolab/access_token android false high

http://schemas.android.com/apk/res/android;;pbbf4ad96.p1ce09a67.p2449fdfc.pffebd95e.p01804d0f.p99878

test_toolbar.xml false high

https://picsart.com/terms-and-conditions?hl=en subscription_discount_screen.json false high

http://vk.com/images/m_noalbum.png android false high


No. of IPs < 25%

25% < No. of IPs < 50%

50% < No. of IPs < 75%

75% < No. of IPs

IP Domain Country Flag ASN ASN Name Malicious

66.102.1.188 unknown United States 15169 GOOGLEUS false






Contacted IPs

Public


Report type: light

Sample file name: DHL655.apk

Cookbook file name: defaultandroidfilecookbook.jbs

Analysis system description: Android 9 (Pie)

Analysis Mode: default

APK Instrumentation enabled: true

Detection: MAL

Classification: mal48.spyw.andAPK@0/251@0/0

Warnings:

Static File Info

GeneralFile type: Zip archive data, at least v2.0 to extract

Entropy (8bit): 7.971613945400788

TrID: Android Package (27504/1) 56.12%Java Archive (13504/1) 27.55%ZIP compressed archive (8000/1) 16.32%

File name: DHL655.apk

File size: 2823341

MD5: 8aaef4a48d9ae205c7119c0ac60b2e4b

An application runtime error occurredNo interacted viewsNo simulation commands forwarded to apkNot all executed log events are in report (maximum 10 identical API calls)Not all non-executed APIs are in reportNot all resource files were parsedNot all resource strings were parsedReport size exceeded maximum capacity and may have missing disassembly code.Report size exceeded maximum capacity and may have missing dynamic data code.

No context

No context

No context

No context

No context

No created / dropped files found

Show All

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files


SHA1: 0f7c03faa4a1074955daf61bcaa914b24b79014e

SHA256: 6a73d255c2ba8f663304c9bab0be386342f019561948f1577082d92eef9a30d1

SHA512: 48f8d0da11bb973b563020898d4c7d2f0a53f235b9fddf1772642d4cda71bd5e6be3ba891edc65c867f4c5326bc5fcbc98fc6b65ee5be097948eb70b4e7e8a0e

SSDEEP: 49152:IlNI9WqRnVW1LnySizLFWxX0pKdQPa4h9Up1yNsZ7+L+72saVMs2Ftg6g9IqEJ:Iy1nVW1LySiz54X0CQCBTy7L+7ps8yx2

File Content Preview: PK........L..R................AndroidManifest.xml.X[l...>....sm.5.smn...2}#.6.,+.jZt%9n....D.BH....f.V;k;`E_...z......a.0`....t...=.......0t.^...>..1.P6.D........9.9t..!..!$A........K............W.[...k...................l.........W..P...U`.x.x.........pd

General

File Icon

GeneralLabel: DHL

Minimum SDK required: 24

Target SDK required: 28

Version Code: 1

Version Name: 1

Package Name: com.UCMobile.intl

Is Activity: true

Is Receiver: true

Is Service: true

Requests System Level Permissions: false

Play Store Compatible: true

Name Is Entrypoint

com.UCMobile.intlcom.UCMobile.intl.pd65a3908 true

com.UCMobile.intlcom.UCMobile.intl.pd5268ea0

com.UCMobile.intlcom.UCMobile.intl.pc6b1d968

com.UCMobile.intlcom.UCMobile.intl.pe0042ed7

com.UCMobile.intlcom.UCMobile.intl.p01f0dec7

com.UCMobile.intlcom.UCMobile.intl.p6b7c3806

com.UCMobile.intl.p0a4d3ee0 Intent: android.provider.Telephony.SMS_DELIVER

com.UCMobile.intl.pd0e3c242 Intent: android.provider.Telephony.WAP_PUSH_DELIVER

com.UCMobile.intl.p3e7d7e52 Intent: android.accessibilityservice.AccessibilityService (Priority 0)

com.UCMobile.intl.p412a2c1d Intent: android.intent.action.RESPOND_VIA_MESSAGE (Priority 0)

com.UCMobile.intl.p86fefe68

com.UCMobile.intl.p90c59aaa Intent: android.service.notification.NotificationListenerService (Priority 0)

android.permission.ACCESS_NETWORK_STATE

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.CALL_PHONE

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

Static APK Info

Activities

Receivers

Services

Permission Requested


android.permission.QUERY_ALL_PACKAGES

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.WRITE_SMS

Name: classes.dex

Issuer: 1.2.840.113549.1.9.1=#1613616e64726f696440616e64726f69642e636f6d,CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US

Subject: 1.2.840.113549.1.9.1=#1613616e64726f696440616e64726f69642e636f6d,CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US

Name Type Size

abc_tab_indicator_mtrl_alpha.9.png PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 204

mtrl_outlined_stroke_color.xml Android binary XML 788

abc_ic_star_half_black_16dp.png PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 444

abc_screen_simple.xml Android binary XML 824

custom_collage64.json ASCII text 347

test_mtrl_calendar_day.xml Android binary XML 340


abc_text_select_handle_middle_mtrl_light.png

PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced 430


mtrl_tabs_colored_ripple_color.xml Android binary XML 112


design_ic_visibility.png PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 646

abc_ic_menu_paste_mtrl_am_alpha.png

PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 540

texture_04.ast data 9216

ic_mtrl_checked_circle.xml Android binary XML 672

test_reflow_chipgroup.xml Android binary XML 788

mtrl_fab_transformation_sheet_expand_spec.xml

Android binary XML 1888


abc_ic_menu_selectall_mtrl_alpha.png



standalone_badge_gravity_bottom_end.xml


abc_ic_menu_copy_mtrl_am_alpha.png


adjust_old_tools.json ASCII text 46736

notification_bg_normal_pressed.9.png

PNG image data, 8 x 8, 8-bit/color RGB, non-interlaced 223


abc_switch_thumb_material.xml Android binary XML 464

abc_btn_check_material_anim.xml Android binary XML 816

abc_ic_menu_share_mtrl_alpha.png PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 1098

$avd_show_password__2.xml Android binary XML 556

text_view_without_line_height.xml Android binary XML 368

mtrl_calendar_selected_range.xml Android binary XML 376

abc_action_bar_item_background_material.xml


sketch_colors.json ASCII text 418

abc_btn_switch_to_on_mtrl_00012.9.png


abc_ic_ab_back_material.xml Android binary XML 692

Certificate

Resources


abc_text_select_handle_middle_mtrl_dark.png


mtrl_calendar_days_of_week.xml Android binary XML 436

abc_tint_seek_thumb.xml Android binary XML 500

notify_panel_notification_icon_bg.png

PNG image data, 14 x 14, 8-bit colormap, non-interlaced 93

abc_btn_radio_to_on_mtrl_015.png PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 687

abc_list_longpressed_holo.9.png PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 211

abc_cab_background_top_mtrl_alpha.9.png


design_bottom_sheet_slide_out.xml Android binary XML 616

design_icon_tint.xml Android binary XML 376


material_on_surface_disabled.xml Android binary XML 376

mtrl_chip_text_color.xml Android binary XML 520

abc_seekbar_tick_mark_material.xml




ic_launcher.png PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 67

mtrl_navigation_item_background_color.xml


abc_list_divider_mtrl_alpha.9.png PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 167

subscription_paused_screen_configs.json

ASCII text 743




abc_textfield_default_mtrl_alpha.9.png


mtrl_dropdown_arrow.xml Android binary XML 464

abc_ab_share_pack_mtrl_alpha.9.png


ia_js_load_monitor.txt HTML document, ASCII text 969

design_box_stroke_color.xml Android binary XML 712

abc_ic_menu_cut_mtrl_alpha.png PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced 753

abc_btn_default_mtrl_shape.xml Android binary XML 932

abc_background_cache_hint_selector_material_dark.xml


abc_spinner_mtrl_am_alpha.9.png PNG image data, 27 x 36, 8-bit gray+alpha, non-interlaced 345

abc_ic_arrow_drop_right_black_24dp.xml


btn_checkbox_checked_to_unchecked_mtrl_animation.xml


switch_thumb_material_dark.xml Android binary XML 464

btn_checkbox_to_checked_box_outer_merged_animation.xml



abc_alert_dialog_title_material.xml Android binary XML 1356

abc_list_selector_background_transition_holo_light.xml


abc_screen_toolbar.xml Android binary XML 1548

tooltip_frame_light.xml Android binary XML 484



callout_shape_6.svg SVG Scalable Vector Graphics image 805


abc_ic_star_black_16dp.png PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 518

hair_color.json empty 0


abc_fade_out.xml Android binary XML 112


abc_text_select_handle_right_mtrl_dark.png


abc_textfield_search_default_mtrl_alpha.9.png



notification_bg_normal.9.png PNG image data, 8 x 8, 8-bit grayscale, non-interlaced 215

Name Type Size


mtrl_linear.xml Android binary XML 132

notification_bg_low_normal.9.png PNG image data, 16 x 16, 8-bit grayscale, non-interlaced 221


socialin.properties ASCII text 689


abc_ic_star_black_48dp.png PNG image data, 144 x 144, 8-bit colormap, non-interlaced 2088

design_text_input_start_icon.xml Android binary XML 616

mtrl_outlined_icon_tint.xml Android binary XML 644

mtrl_extended_fab_state_list_animator.xml


beautify.json ASCII text 10247



material_on_background_disabled.xml


fast_out_slow_in.xml Android binary XML 400



ic_keyboard_arrow_left_black_24dp.xml



abc_hint_foreground_material_dark.xml




abc_list_selector_holo_dark.xml Android binary XML 1064

activity_main.xml Android binary XML 452

abc_cab_background_internal_bg.xml




mtrl_extended_fab_text_color_selector.xml


mtrl_tabs_icon_color_selector.xml Android binary XML 500


abc_secondary_text_material_dark.xml


abc_menu_hardkey_panel_mtrl_mult.9.png





trans.png PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced 71

btn_radio_to_on_mtrl_dot_group_animation.xml



beautifyNew.json ASCII text 16375

abc_scrubber_primary_mtrl_alpha.9.png


share_platform_page_config.json ASCII text 1801

material_on_surface_emphasis_medium.xml


abc_switch_track_mtrl_alpha.9.png PNG image data, 24 x 16, 8-bit gray+alpha, non-interlaced 395


abc_list_selector_disabled_holo_dark.9.png



mtrl_picker_header_selection_text.xml


mtrl_calendar_vertical.xml Android binary XML 740




design_bottom_sheet_slide_in.xml Android binary XML 616

design_snackbar_in.xml Android binary XML 312


mtrl_error.xml Android binary XML 464

abc_fade_in.xml Android binary XML 112

Name Type Size



mtrl_calendar_month_labeled.xml Android binary XML 728


checkerboard_pattern.jpg JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 16x16, frames 3 378

select_dialog_multichoice_material.xml


btn_checkbox_unchecked_mtrl_animation_interpolator_1.xml


abc_scrubber_track_mtrl_alpha.9.png


mtrl_extended_fab_hide_motion_spec.xml



tbi.xml Android binary XML 1116

mtrl_bottom_nav_ripple_color.xml Android binary XML 1672

abc_popup_background_mtrl_mult.9.png


abc_grow_fade_in_from_bottom.xml Android binary XML 852

btn_radio_to_off_mtrl_ring_outer_path_animation.xml


mtrl_choice_chip_ripple_color.xml Android binary XML 112

abc_textfield_search_activated_mtrl_alpha.9.png


design_navigation_item.xml Android binary XML 576

mtrl_btn_text_btn_bg_color_selector.xml



btn_checkbox_checked_mtrl_animation_interpolator_0.xml



icon.png PNG image data, 432 x 432, 8-bit/color RGBA, non-interlaced 7728

mtrl_filled_stroke_color.xml Android binary XML 788

accessibility_service_config.xml Android binary XML 552

mtrl_calendar_month.xml Android binary XML 740





abc_hint_foreground_material_light.xml



standalone_badge_gravity_bottom_start.xml


mtrl_picker_header_fullscreen.xml Android binary XML 112

standalone_badge_gravity_top_start.xml


btn_checkbox_to_unchecked_icon_null_animation.xml





drag_resize_animation.json ASCII text, with very long lines, with no line terminators 28886

i_message_2.svg SVG Scalable Vector Graphics image 594

vk_dex.apk Java archive data (JAR) 109337

classes.dex Dalvik dex file version 035 255272

META-INF directory 4096

com directory 4096




btn_radio_to_off_mtrl_animation_interpolator_0.xml


notification_template_icon_group.xml



test_toolbar.xml Android binary XML 368

mtrl_alert_dialog_actions.xml Android binary XML 1760


APKEASYT.SF ASCII text, with CRLF line terminators 101577

Name Type Size



text_view_with_line_height_from_appearance.xml


abc_list_pressed_holo_light.9.png PNG image data, 6 x 6, 8-bit gray+alpha, non-interlaced 207

btn_radio_off_mtrl.xml Android binary XML 1728

design_ic_visibility.xml Android binary XML 540

ic_mtrl_chip_checked_black.xml Android binary XML 600


test_custom_background.xml Android binary XML 336



abc_ic_voice_search_api_material.xml


anim_shimmer_offer.json ASCII text, with very long lines, with no line terminators 3947

$avd_hide_password__1.xml Android binary XML 592

mtrl_fab_show_motion_spec.xml Android binary XML 796



android_subscription_packages_default_china.json

UTF-8 Unicode text 2931






abc_btn_radio_to_on_mtrl_015.png PNG image data, 96 x 96, 8-bit colormap, non-interlaced 1466




btn_checkbox_to_unchecked_check_path_merged_animation.xml





abc_action_menu_layout.xml Android binary XML 576

ic_mtrl_chip_close_circle.xml Android binary XML 808

mtrl_ic_error.xml Android binary XML 644


abc_list_selector_disabled_holo_light.9.png





callout_dest_bubble.svg SVG Scalable Vector Graphics image 1749

avd_hide_password.xml Android binary XML 660

ic_launcher_round.png PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 67

mtrl_card_lowers_interpolator.xml Android binary XML 400

select_dialog_singlechoice_material.xml




abc_textfield_activated_mtrl_alpha.9.png


abc_dialog_material_background.xml


mtrl_extended_fab_bg_color_selector.xml


mtrl_chip_ripple_color.xml Android binary XML 948

abc_popup_enter.xml Android binary XML 508



all_collages.json ASCII text 9129

mtrl_choice_chip_background_color.xml


design_fab_hide_motion_spec.xml Android binary XML 796


notification_template_part_time.xml Android binary XML 440


abc_list_focused_holo.9.png PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 228

Name Type Size




subscription_discount_screen.json UTF-8 Unicode text 2321




bg_texture.jpg [TIFF image data, big-endian, direntries=4, manufacturer=62a1b22cd095777b9ae08a1250c2764d, model=169a57827fa8d99f236d60102ea5b46c, resolutionunit=2], progressive, precision 8, 6x4, frames 3

515


design_error.xml Android binary XML 464

abc_dialog_title_material.xml Android binary XML 1108

callout_round_rectangle.svg SVG Scalable Vector Graphics image 1267

abc_ic_commit_search_api_mtrl_alpha.png





select_dialog_item_material.xml Android binary XML 640




design_ic_visibility_off.png PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 582

mtrl_popupmenu_background.xml Android binary XML 740



tbo.xml Android binary XML 1116

abc_vector_test.xml Android binary XML 612

design_bottom_navigation_item.xml Android binary XML 1516

test_toolbar_elevation.xml Android binary XML 408



draw_bg.json ASCII text 7860

abc_action_mode_close_item_material.xml



abc_seekbar_thumb_material.xml Android binary XML 1100

btn_radio_off_to_on_mtrl_animation.xml









abc_tint_switch_track.xml Android binary XML 664


design_password_eye.xml Android binary XML 816






abc_ratingbar_indicator_material.xml Android binary XML 704



mtrl_calendar_day_of_week.xml Android binary XML 400

all_effects.json ASCII text 15073

ic_launcher.xml Android binary XML 112

mtrl_filled_icon_tint.xml Android binary XML 644

abc_text_select_handle_left_mtrl_dark.png



abc_search_url_text.xml Android binary XML 588


abc_text_select_handle_right_mtrl_light.png



Name Type Size


btn_radio_to_off_mtrl_dot_group_animation.xml


abc_scrubber_control_to_pressed_mtrl_005.png


abc_scrubber_control_off_mtrl_alpha.png




abc_tint_btn_checkable.xml Android binary XML 624







resources.arsc data 406848

abc_tooltip_enter.xml Android binary XML 388


abc_primary_text_material_light.xml Android binary XML 464

material_on_surface_emphasis_high_type.xml


mtrl_fab_transformation_sheet_collapse_spec.xml



mtrl_calendar_months.xml Android binary XML 424




notification_action.xml Android binary XML 1052


design_navigation_item_subheader.xml


abc_list_menu_item_icon.xml Android binary XML 684



abc_text_select_handle_left_mtrl_light.png


tooltip_frame_dark.xml Android binary XML 484



mtrl_calendar_month.xml Android binary XML 684


APKEASYT.RSA data 1722

activity_card.xml Android binary XML 3452

design_layout_snackbar.xml Android binary XML 528

mtrl_extended_fab_ripple_color.xml Android binary XML 948


design_navigation_menu_item.xml Android binary XML 856

MANIFEST.MF ASCII text, with CRLF line terminators 101450

checkbox_themeable_attribute_color.xml


default_feed_effects.json ASCII text 253

btn_checkbox_unchecked_mtrl.xml Android binary XML 2660

abc_popup_exit.xml Android binary XML 508

abc_list_selector_holo_light.xml Android binary XML 1064


store.name ASCII text, with no line terminators 6

share_check_mark_anim.json ASCII text 10570





abc_btn_check_to_on_mtrl_015.png PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 537



mtrl_alert_dialog.xml Android binary XML 2472


Name Type Size


abc_background_cache_hint_selector_material_light.xml








btn_radio_on_mtrl.xml Android binary XML 1656

activity_sms_thread.xml Android binary XML 1856




mtrl_card_view_foreground.xml Android binary XML 788

proxyapp.dex Java serialization data, version 5 93

avd_show_password.xml Android binary XML 660

design_navigation_item_header.xml Android binary XML 440






abc_btn_check_material.xml Android binary XML 464

mtrl_btn_ripple_color.xml Android binary XML 948

menu.xml Android binary XML 332

button_skeleton.json ASCII text, with very long lines, with no line terminators 4380

classloader.dex Java serialization data, version 5 364



abc_list_selector_background_transition_holo_dark.xml



abc_activity_chooser_view.xml Android binary XML 112



notification_bg.xml Android binary XML 532

subscription_ribbons_config_china.json

ASCII text 3877

design_bottom_sheet_dialog.xml Android binary XML 1172



design_appbar_state_list_animator.xml


ic_menu_arrow_up_black_24dp.xml Android binary XML 112




mtrl_tabs_default_indicator.xml Android binary XML 628










subscription_grace_period_screen_configs.json

ASCII text 1611

ia_mraid_bridge.txt HTML document, ASCII text 28528

mtrl_alert_select_dialog_item.xml Android binary XML 588

mtrl_btn_text_color_selector.xml Android binary XML 500





design_navigation_menu.xml Android binary XML 532


Name Type Size





mtrl_card_state_list_anim.xml Android binary XML 1208


transformable_screen.json ASCII text 2829

navigation_empty_icon.xml Android binary XML 516

mtrl_bottom_nav_colored_ripple_color.xml





mtrl_btn_bg_color_selector.xml Android binary XML 500

callout_dest_triangle.svg SVG Scalable Vector Graphics image 641



mtrl_bottom_nav_colored_item_tint.xml




notification_action_tombstone.xml Android binary XML 1228

lot_scroll_down.json ASCII text, with very long lines, with no line terminators 3537

default_config.json ASCII text 1645


mtrl_picker_header_title_text.xml Android binary XML 112





mtrl_ic_arrow_drop_down.xml Android binary XML 564




mtrl_fab_ripple_color.xml Android binary XML 808



mtrl_picker_header_toggle.xml Android binary XML 112

abc_seekbar_track_material.xml Android binary XML 1408



mtrl_navigation_item_icon_tint.xml Android binary XML 624










abc_item_background_holo_dark.xml


material_on_primary_disabled.xml Android binary XML 112



mtrl_extended_fab_change_size_motion_spec.xml




abc_ic_clear_material.xml Android binary XML 684


design_layout_snackbar.xml Android binary XML 528

ic_launcher_foreground.xml Android binary XML 112


abc_search_view.xml Android binary XML 3476

classes.dex Dalvik dex file version 035 2371300

localEffectsLib.txt UTF-8 Unicode text 132040

Name Type Size


abc_secondary_text_material_light.xml


notification_bg_low_pressed.9.png PNG image data, 8 x 8, 8-bit/color RGB, non-interlaced 223

btn_checkbox_checked_mtrl_animation_interpolator_1.xml


mtrl_indicator_text_color.xml Android binary XML 520

mtrl_tabs_ripple_color.xml Android binary XML 1672







texture_30.png PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 1582

btn_radio_to_on_mtrl_ring_outer_animation.xml


mtrl_alert_dialog_title.xml Android binary XML 960

abc_list_pressed_holo_dark.9.png PNG image data, 9 x 9, 8-bit gray+alpha, non-interlaced 208

mtrl_dialog_background.xml Android binary XML 716



ic_mtrl_chip_checked_circle.xml Android binary XML 940





abc_action_bar_up_container.xml Android binary XML 112


abc_item_background_holo_light.xml




abc_color_highlight_material.xml Android binary XML 544

btn_radio_on_to_off_mtrl_animation.xml


mtrl_picker_header_dialog.xml Android binary XML 112


uninstall_package_list.json ASCII text 898





btn_radio_to_on_mtrl_ring_outer_path_animation.xml


material_on_primary_emphasis_medium.xml






mtrl_fast_out_linear_in.xml Android binary XML 400


abc_btn_radio_material.xml Android binary XML 464

ShortNumberMetadataProto_YE Java serialization data, version 5 207

adjust_new_tools.json ASCII text 52348

support_simple_spinner_dropdown_item.xml


abc_cascading_menu_item_layout.xml






subscription_free_vs_paid_defaults.json

ASCII text 2219

abc_action_mode_bar.xml Android binary XML 460



abc_tooltip.xml Android binary XML 1056

Name Type Size


abc_btn_colored_borderless_text_material.xml




ShortNumberMetadataProto_XK Java serialization data, version 5 225


mtrl_layout_snackbar_include.xml Android binary XML 112

mtrl_picker_fullscreen.xml Android binary XML 112

notification_template_custom_big.xml



btn_checkbox_to_checked_icon_null_animation.xml




mtrl_extended_fab_show_motion_spec.xml







abc_slide_in_bottom.xml Android binary XML 112



test_action_chip.xml Android binary XML 508

mtrl_bottom_nav_item_tint.xml Android binary XML 520

ShortNumberMetadataProto_WS Java serialization data, version 5 259



mtrl_bottom_sheet_slide_in.xml Android binary XML 616


btn_checkbox_to_unchecked_box_inner_merged_animation.xml




ShortNumberMetadataProto_WF Java serialization data, version 5 196

mtrl_chip_background_color.xml Android binary XML 848

vpaid_html_template.html HTML document, ASCII text 16933

abc_ratingbar_small_material.xml Android binary XML 704

abc_popup_menu_header_item_layout.xml




btn_checkbox_to_checked_box_inner_merged_animation.xml


abc_btn_colored_material.xml Android binary XML 1716

mtrl_btn_state_list_anim.xml Android binary XML 2664

abc_alert_dialog_title_material.xml Android binary XML 1564

mtrl_navigation_item_text_color.xml Android binary XML 624

text_highlight_colors.json ASCII text 548

mtrl_layout_snackbar.xml Android binary XML 112

abc_ic_star_half_black_36dp.png PNG image data, 144 x 144, 8-bit colormap, non-interlaced 1328

ShortNumberMetadataProto_VU Java serialization data, version 5 192

text_view_with_theme_line_height.xml


ShortNumberMetadataProto_VN Java serialization data, version 5 204

notification_tile_bg.xml Android binary XML 304

abc_btn_check_to_on_mtrl_015.png PNG image data, 96 x 96, 8-bit colormap, non-interlaced 724

material_on_background_emphasis_high_type.xml


ShortNumberMetadataProto_VI Java serialization data, version 5 192

switch_thumb_material_light.xml Android binary XML 464

ShortNumberMetadataProto_VG Java serialization data, version 5 213

transformable_screen_china.json ASCII text 6142

ShortNumberMetadataProto_VE Java serialization data, version 5 228

AndroidManifest.xml Android binary XML 9364

activity_intent_starter.xml Android binary XML 452

Name Type Size


ShortNumberMetadataProto_VC Java serialization data, version 5 213

abc_btn_borderless_material.xml Android binary XML 588



ShortNumberMetadataProto_VA Java serialization data, version 5 207

abc_search_dropdown_item_icons_2line.xml




abc_list_menu_item_checkbox.xml Android binary XML 528


abc_tooltip_exit.xml Android binary XML 388

ShortNumberMetadataProto_UZ Java serialization data, version 5 323

ShortNumberMetadataProto_UY Java serialization data, version 5 268

abc_alert_dialog_material.xml Android binary XML 2472



ShortNumberMetadataProto_US Java serialization data, version 5 770

sin_enc_lut data 89680


android_subscription_packages_default.json

ASCII text 201

activity_browser.xml Android binary XML 968

design_layout_snackbar_include.xml Android binary XML 1444





abc_btn_colored_text_material.xml Android binary XML 500

ShortNumberMetadataProto_UG Java serialization data, version 5 192





btn_radio_to_off_mtrl_ring_outer_animation.xml



ShortNumberMetadataProto_UA Java serialization data, version 5 383


abc_activity_chooser_view_list_item.xml


activity_compose_sms.xml Android binary XML 1504



ShortNumberMetadataProto_TZ Java serialization data, version 5 280

ShortNumberMetadataProto_TW Java serialization data, version 5 329

fyb_static_endcard_tmpl.html HTML document, ASCII text 2920

abc_tint_spinner.xml Android binary XML 668









mtrl_calendar_day.xml Android binary XML 352

mtrl_ic_arrow_drop_up.xml Android binary XML 564




notif_custom_view.xml Android binary XML 1084

design_ic_visibility_off.xml Android binary XML 1144


notification_action_background.xml Android binary XML 1180



Name Type Size




ic_keyboard_arrow_right_black_24dp.xml





mtrl_tabs_icon_color_selector_colored.xml


mtrl_alert_select_dialog_singlechoice.xml



abc_ic_search_api_material.xml Android binary XML 812


notification_icon_background.xml Android binary XML 372

abc_tint_default.xml Android binary XML 1120






abc_slide_in_top.xml Android binary XML 112

test_mtrl_calendar_day_selected.xml


abc_slide_out_bottom.xml Android binary XML 112

mtrl_text_btn_text_color_selector.xml


design_layout_tab_icon.xml Android binary XML 408

design_fab_show_motion_spec.xml Android binary XML 796

notif_custom_empty.xml Android binary XML 324

material_on_background_emphasis_medium.xml



btn_checkbox_checked_mtrl.xml Android binary XML 2688


abc_spinner_textfield_background_material.xml






graphJSON.json ASCII text 531






appboy-html-in-app-message-javascript-component.js

ASCII text 3860

mtrl_calendar_month_navigation.xml Android binary XML 1688


design_menu_item_action_area.xml Android binary XML 320





abc_expanded_menu_layout.xml Android binary XML 392



callout_oval.svg SVG Scalable Vector Graphics image 1734

mtrl_fast_out_slow_in.xml Android binary XML 400


text_view_with_line_height_from_layout.xml



mtrl_choice_chip_text_color.xml Android binary XML 112



Name Type Size




mtrl_picker_header_dialog.xml Android binary XML 112

abc_dialog_material_background.xml






mtrl_popupmenu_background_dark.xml









design_snackbar_out.xml Android binary XML 312

callout_7_overlay.svg SVG Scalable Vector Graphics image 2007






abc_list_menu_item_layout.xml Android binary XML 1400

abc_screen_content_include.xml Android binary XML 544


mtrl_filled_background_color.xml Android binary XML 664


mtrl_chip_state_list_anim.xml Android binary XML 1072

abc_edit_text_material.xml Android binary XML 1172





mtrl_popupmenu_overlay_color.xml Android binary XML 376





callout_cloud.svg SVG Scalable Vector Graphics image 4832

callout_8_overlay.svg SVG Scalable Vector Graphics image 2204


mtrl_btn_text_btn_ripple_color.xml Android binary XML 948


mtrl_btn_unelevated_state_list_anim.xml


test_design_checkbox.xml Android binary XML 836

design_bottom_navigation_item_background.xml


mtrl_layout_snackbar.xml Android binary XML 112

abc_btn_radio_material_anim.xml Android binary XML 816


btn_checkbox_unchecked_to_checked_mtrl_animation.xml


abc_shrink_fade_out_from_bottom.xml




abc_tab_indicator_material.xml Android binary XML 468





abc_alert_dialog_button_bar_material.xml


mtrl_fab_hide_motion_spec.xml Android binary XML 796


Name Type Size


btn_checkbox_unchecked_mtrl_animation_interpolator_0.xml


abc_action_bar_title_item.xml Android binary XML 872





chooser_collages.json ASCII text 11011

subscription_ribbons_config.json ASCII text 4806




mtrl_card_view_ripple.xml Targa image data - RLE 240 x 65536 x 10 +1 +28 "" 768

valentine_red_heart.svg SVG Scalable Vector Graphics image 902

abc_primary_text_disable_only_material_dark.xml


abc_primary_text_material_dark.xml Android binary XML 464

mtrl_picker_text_input_date.xml Android binary XML 112

mtrl_calendar_horizontal.xml Android binary XML 1176

mtrl_tabs_legacy_text_color_selector.xml



notification_bg_low.xml Android binary XML 532




fyb_iframe_endcard_tmpl.html HTML document, ASCII text 520




subscription_on_hold_screeen_configs.json

ASCII text 717

aps-mraid.js ASCII text, with very long lines, with no line terminators 10990



SKTCH3_colors.json ASCII text 1381

$ic_launcher_foreground__0.xml Android binary XML 788





abc_action_menu_item_layout.xml Targa image data - RLE 360 x 65536 x 15 +1 +28 "" 768

ic_clear_black_24dp.xml Android binary XML 112

gold_page_defaults.json ASCII text 2430

text_view_with_line_height_from_style.xml


mtrl_calendar_item_stroke_color.xml Android binary XML 808






mtrl_on_primary_text_btn_text_color_selector.xml





test_toolbar_custom_background.xml



design_navigation_item_separator.xml



abc_slide_out_top.xml Android binary XML 112





Name Type Size


abc_control_background_material.xml


classes-v1.bin data 867013

mtrl_picker_actions.xml Android binary XML 112


ic_launcher_round.xml Android binary XML 112





camera_menu_hint.json ASCII text 9685


graphCamera.json ASCII text 10817

mtrl_picker_dialog.xml Android binary XML 112

notification_template_part_chronometer.xml





design_text_input_end_icon.xml Android binary XML 616

mtrl_picker_text_input_date_range.xml


ic_launcher_background.xml Android binary XML 112

abc_alert_dialog_button_bar_material.xml


btn_radio_to_on_mtrl_animation_interpolator_0.xml


abc_screen_toolbar.xml Android binary XML 1492



aps_mobile_client_config.json ASCII text 191

abc_textfield_search_material.xml Android binary XML 756


mtrl_chip_close_icon_tint.xml Android binary XML 1092




abc_ic_menu_overflow_material.xml Android binary XML 792

abc_cab_background_top_material.xml





mtrl_alert_select_dialog_multichoice.xml


mtrl_calendar_year.xml Android binary XML 352

abc_list_menu_item_radio.xml Android binary XML 532

ic_edit_black_24dp.xml Android binary XML 112



valentine_cloud_overlay.svg SVG Scalable Vector Graphics image 1103



abc_screen_simple_overlay_action_mode.xml



info.json empty 0

abc_ic_go_search_api_material.xml Android binary XML 640

success_animation.json ASCII text, with very long lines, with no line terminators 3789





material_on_primary_emphasis_high_type.xml


mtrl_bottom_sheet_slide_out.xml Android binary XML 616

conv_list_item.xml Android binary XML 1064

abc_select_dialog_material.xml Android binary XML 1020


Name Type Size


Network Port Distribution


design_snackbar_background.xml Android binary XML 484


callout_11_shadow.svg SVG Scalable Vector Graphics image 2905

custom_dialog.xml Android binary XML 112


valentine_cloud.svg SVG Scalable Vector Graphics image 1770



design_fab_background.xml Android binary XML 372

video_crop_tool.json ASCII text 481

test_toolbar_surface.xml Android binary XML 400


square_fit_colors.json ASCII text 522







ic_calendar_black_24dp.xml Android binary XML 112



design_layout_tab_text.xml Android binary XML 436



mtrl_btn_stroke_color_selector.xml Android binary XML 520

abc_tint_edittext.xml Android binary XML 668




abc_popup_menu_item_layout.xml Android binary XML 2076



mtrl_chip_surface_color.xml Android binary XML 340

abc_list_divider_material.xml Android binary XML 516

abc_primary_text_disable_only_material_light.xml



mtrl_linear_out_slow_in.xml Android binary XML 400

smart_types.json ASCII text 3411

mtrl_ic_cancel.xml Android binary XML 724



ic_menu_arrow_down_black_24dp.xml





callout_rectangle.svg SVG Scalable Vector Graphics image 625


abc_ratingbar_material.xml Android binary XML 704

standalone_badge.xml Android binary XML 112

abc_text_cursor_material.xml Android binary XML 516

Name Type Size

Network Behavior


Total Packets: 41

• 5228 undefined

• 853 undefined

• 443 (HTTPS)

Timestamp Source Port Dest Port Source IP Dest IP

May 26, 2021 09:38:00.548336029 CEST 50458 443 192.168.2.30 216.58.212.170

May 26, 2021 09:38:00.740324020 CEST 39602 443 192.168.2.30 142.250.186.163

May 26, 2021 09:38:04.452688932 CEST 50458 443 192.168.2.30 216.58.212.170

May 26, 2021 09:38:04.772707939 CEST 39602 443 192.168.2.30 142.250.186.163

May 26, 2021 09:38:12.261302948 CEST 50458 443 192.168.2.30 216.58.212.170

May 26, 2021 09:38:13.285393953 CEST 39602 443 192.168.2.30 142.250.186.163

May 26, 2021 09:38:28.134614944 CEST 50458 443 192.168.2.30 216.58.212.170

May 26, 2021 09:38:29.670691013 CEST 39602 443 192.168.2.30 142.250.186.163

May 26, 2021 09:38:36.290261030 CEST 50870 443 192.168.2.30 142.250.186.42

May 26, 2021 09:38:38.131875992 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.186439991 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.186664104 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.186930895 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.239898920 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.247092962 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.247157097 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.247183084 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.247205019 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.247420073 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.247451067 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.262756109 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.315325022 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.319140911 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.374049902 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.383186102 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.414340973 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.436973095 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.437161922 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.439157009 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.492064953 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.492450953 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.492607117 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.492649078 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.492666006 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.492712975 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.492742062 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.518208027 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.576165915 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.576344013 CEST 33480 5228 192.168.2.30 66.102.1.188

May 26, 2021 09:38:38.629070044 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.662206888 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.669414043 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.669436932 CEST 5228 33480 66.102.1.188 192.168.2.30

May 26, 2021 09:38:38.689639091 CEST 33480 5228 192.168.2.30 66.102.1.188

TCP Packets


APK Behavior

May 26, 2021 09:38:38.726074934 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.783001900 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.787781954 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:38.787950993 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:38.792427063 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:38.836977005 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.837184906 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:38.848045111 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:38.892512083 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.906037092 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.906073093 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.906086922 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.907180071 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:38.921422005 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:38.971693993 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:38.975193977 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:39.019799948 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:39.112396002 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:39.112426996 CEST 443 59854 172.217.22.206 192.168.2.30

May 26, 2021 09:38:39.112591028 CEST 59854 443 192.168.2.30 172.217.22.206

May 26, 2021 09:38:53.800537109 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:53.852905989 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:58.809701920 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:58.809742928 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:58.864248037 CEST 853 56068 8.8.4.4 192.168.2.30

May 26, 2021 09:38:58.864353895 CEST 56068 853 192.168.2.30 8.8.4.4

May 26, 2021 09:38:59.369127035 CEST 50458 443 192.168.2.30 216.58.212.170

May 26, 2021 09:39:01.929208994 CEST 39602 443 192.168.2.30 142.250.186.163

Timestamp Source Port Dest Port Source IP Dest IP

Name Is Error

>>>>>> START com.android.internal.os.RuntimeInit uid 0 <<<<<<Calling main entry com.android.commands.am.AmShutting down VM>>>>>> START com.android.internal.os.RuntimeInit uid 2000 <<<<<<Calling main entry com.android.commands.uiautomator.LauncherShutting down VM>>>>>> START com.android.internal.os.RuntimeInit uid 2000 <<<<<<Calling main entry com.android.commands.uiautomator.LauncherShutting down VMShutting down VMFATAL EXCEPTION: mainProcess: com.UCMobile.intl, PID: 6130java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{com.UCMobile.intl/com.UCMobile.intl.pd65a3908}: java.lang.ClassNotFoundException: Didn't find class "com.UCMobile.intl.pd65a3908" on path: DexPathList[[zip file "/data/app/com.UCMobile.intl-MeRrBh6Vq9OrmB8ksCs0QA==/base.apk", directory "/data/user/0/com.UCMobile.intl/app_apkprotector_dex/classes-v1.bin"],nativeLibraryDirectories=[/data/app/com.UCMobile.intl-MeRrBh6Vq9OrmB8ksCs0QA==/lib/x86, /system/lib, /system/vendor/lib]]at java.lang.reflect.Method.invoke(Native Method)Caused by: java.lang.ClassNotFoundException: Didn't find class "com.UCMobile.intl.pd65a3908" on path: DexPathList[[zip file "/data/app/com.UCMobile.intl-MeRrBh6Vq9OrmB8ksCs0QA==/base.apk", directory "/data/user/0/com.UCMobile.intl/app_apkprotector_dex/classes-v1.bin"],nativeLibraryDirectories=[/data/app/com.UCMobile.intl-MeRrBh6Vq9OrmB8ksCs0QA==/lib/x86, /system/lib, /system/vendor/lib]]... 11 more>>>>>> START com.android.internal.os.RuntimeInit uid 2000 <<<<<<Calling main entry com.android.commands.uiautomator.LauncherShutting down VM>>>>>> START com.android.internal.os.RuntimeInit uid 2000 <<<<<<Calling main entry com.android.commands.uiautomator.LauncherShutting down VM

true

InstallationInstallation

Installation Messages

MiscellaneousMiscellaneous


Copyright Joe Security LLC 2021

ImageBlur

jpegwrap

stlport_shared

webp-imageio

pl_droidsonroids_gif

androidndkgif

0 Executed Methods

0 Non-Executed Methods

External Library Dependencies

System CallsSystem Calls

By Permission (executed)By Permission (executed)

By Permission (non-executed)By Permission (non-executed)

DisassemblyDisassembly


http://www.joesecurity.org

Version: 32.0.0 Black Diamond

Documents

Transcript of Version: 32.0.0 Black Diamond