bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009

Analysis

max time kernel
69s
max time network
78s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
13-06-2024 17:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

zlibrary-app-latest.apk
Size

31.5MB
MD5

3d46adfd3550c95950458a4e85e893d4
SHA1

bcd75ef38aa5a13038f5c2f469f298de6517a933
SHA256

bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009
SHA512

1fb0bc5ab44112c660a08a84f6be611f20f5e135c6c0c43c2afde9f11073c47443e96afa0abbb76fb2f6456eedcd30e83ae4f41f01c58bd964e02f299bd4a186
SSDEEP

786432:XHt3EmyGwIv9/xZljhHtKAxH0MKm85Fut3bRajyTlOKKRMSA:XHt3EXGwQ9/56rM78ayjy5O72SA

Score

8^/10

evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.positron_it.zlib
/system/xbin/su	com.positron_it.zlib

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4277	com.positron_it.zlib
/system_ext/framework/androidx.window.extensions.jar	4277	com.positron_it.zlib
/system_ext/framework/androidx.window.sidecar.jar	4277	com.positron_it.zlib
/system_ext/framework/androidx.window.sidecar.jar	4277	com.positron_it.zlib

Checks the presence of a debugger
evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.positron_it.zlib

com.positron_it.zlib
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Checks memory information
PID:4277

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
226B

MD5
027f826dd043ad12b585ffc10cb169b8

SHA1
2e65e5d6c09e49b2f2da76952270c576c7b993a7

SHA256
18dd909618aad6db1084a7132f48fd81a9b85394862e952e29aff57160e5d404

SHA512
56581800c4dffd4a068738e60a428ccd1c17f2b9d5a47f9deee99d7d197ddc3c63fcce5abcbc3d08403b58c63c7dba49feb4e2c49381daaf0616a5eb751a4c5a

Download Submit
/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
3KB

MD5
06778510b184f804e0ada5a4c6e3769f

SHA1
f1a85838d08885d4d0860eddefc22d981d7efd35

SHA256
2a9f9787430364f7ceeb6d5398dc37fdd19b4286f3b5b8593091c60145af6c64

SHA512
0596924972a5779c9e7a1203dcc1a7f66e145f9420afe3523fef6b6f06c15bfae4da01126d2ac7f06b630c790687a5b67e79fa9dd55f8ec3d3646d83fa1986f5

Download Submit
/data/data/com.positron_it.zlib/app_TorService/torrc-defaults

Filesize
35B

MD5
9fb237646f5e68cf5d7a20d3e41cdc6a

SHA1
8c6888f40a6f65eb26913bf683161f2423575e64

SHA256
2a9b6f8bd4d2941802e741c17b01170c7f1410884f2129551fc0a22bc24ae9c8

SHA512
660db762a5d79fe00c1b7a6ac1d9d7ec8817334fe3e371cb21d82adfa8ba75465d44332dad38f9a360f5147311a39349f0ba9fc9e6e896389353e5e164ad00ea

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-certs.tmp

Filesize
17KB

MD5
77b57b33bd338f2933039d16cff96e73

SHA1
b62c0282691cccadce0cc89d3ec961faeeb5d620

SHA256
6b2d6f902ea1b93db65035c2c4db9205734589cce828c6b0616c40fd6b7b78c3

SHA512
a6679208037bc438083fcd01c68db4d6d7554ad9efa62ec8e6ac2a4505eb9991f093ad7b3a832d9bf4e4e316f2adea8654797f262cfdc6450e51e3d79b3defeb

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
435KB

MD5
a1e71df0afc6c4c3e956d08a3731043f

SHA1
88fe09b0c520d5fa3f8d7e360d8eba185aa068fe

SHA256
bc18331dbf2eb07822a270e8548fead34426c5109e322be07b200faf47acc487

SHA512
367d4b5c7aa8ae315cb74b46d50aea7b2a5c1dc0d8a7c1dfa5dfa03f1b09badc51efcc48bc79df3a410240410ae1dbaf1dce6d4b9c3aed921f6ee94dc3427a1f

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
1.7MB

MD5
20eab223b7282338798adcec4d96aebb

SHA1
f15850de016a409c70784c5db3315958b1f16363

SHA256
f60ece6362377d34c47a09ca9c8f55ba25182ff28e6bcd3114b3a3966743d91f

SHA512
ee781ff6f53f8ffc9d3e88b460fb1fa7a50c3939188f074e892ef5943128708d875a0802687c44ca1b38c32af1d352b95b528eab37cea913b69d76ade1ed7e67

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
2.7MB

MD5
cfa1af3af48bb196fddeac842faaef2b

SHA1
ebce09653eca6dfd0376480fb7acdb55709dcd38

SHA256
09b827403349e949bda9bebb4062a8f9200047b566364617cd3f34175ac8d4e2

SHA512
cab0836765fc3411ede16ca58020d67545c36d74c50bd5cc500a880036b22ed519c5227dde4aa07d642e058ec8f8d004e1c8b22675c500e1c480e097e5bafd30

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
4.0MB

MD5
26f6d4865cff17032f1e68a268a0b662

SHA1
2879d1fc2e9e1c181133ce65f7a881ff7b19aaa2

SHA256
15011bc74fc4d2d98ad24b47738c8ca1bead85ff8b403f3767688150ebb4a891

SHA512
b49b4c0815acd310e1899d691ee1ef36bd026c383f84c8337ce9f63edf2e379fd093fb170fad898e3959402851f7cb3505f94cec876f56e22329f0ac57c3407b

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
5.3MB

MD5
3c32d1e4c4dc19fe2b43656c97b22bde

SHA1
dffcad3cadada4bc21ce43a773b4804317b5edf9

SHA256
bb273de16f25820ef4211786464e4dd0b8051a4976f15deb1b8837daaea782d2

SHA512
55180abf579080e5a507d8dc107292e7c7462bd86bcaf7a07fb44f92b72555b42f97816ed7412e3b6267672d0df6454921c74bdbbeaf79d9bc9f66526c827d29

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
17.9MB

MD5
bbfcd2800a746bf05e1934242862d439

SHA1
afcd0bf7ef1a9b890556602e3d8efa8760124017

SHA256
13a1ebf15ef2c76a11cf362fa0b012e93fdef1e169a9a3ed6f3037c651a002aa

SHA512
7c5123671090f07e86c0d7e83bc30f065c8cbd4ab7764d5beed752dc2b02b1ca148605f95bedd620846102269f3fb87286e6722d51b4450bf42769cff53eae61

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/unverified-microdesc-consensus.tmp

Filesize
2.5MB

MD5
291a32f890176529bfaf0486cd2ad1f3

SHA1
dd398c574d678090fa07eeef68d70062a4fbcf27

SHA256
91bbb2bd339f7aa3269ffab2453f7ebe0c14ea66f21f3d81ca7fe85da2be873b

SHA512
0f966b3f9a3cb1e26e9c105d4e6c4878f1c1edc983d61a2d8ffaccfc6dae0a6a9b18b838dbe9a16b8ac95dc1f6f6f2a9507a8741fdedef12725100906703f2ab

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/0327966a108c87adbef544fefa9d3d64.0.tmp

Filesize
6KB

MD5
48e2613905f7da7d9c47dc089ae82d11

SHA1
29c49cfa81ef50726ed328eef59519fc35f3fbbc

SHA256
35f7493687a4dfca0a9aa91eb01029f29ad3d35dcc37e6bceca88cb25f11ebc9

SHA512
e587372ace63e24a120683045f7792b65faf161d07a73a6685ef445334d35d292ebcddca7d14b9e25cdd6db5147f89c7990615f3d7e8b72a7ec1399f5b152ce5

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/051c60cd7a2494bbc1ff2af8ca93acf2.0.tmp

Filesize
4KB

MD5
9666c5cb970baf806654358e4aa2a100

SHA1
3deda206214ccccabc3b427599db55a6488328d9

SHA256
db551f8448078e0e2437df690c20db73a381463ee32eb6ed1e5210eacfdb0ec1

SHA512
54bb241806a9302b35af73510ff092d25e8b6fcaec849adecbdf15e013730e434d11a58cce741e5574faa9e6095f5f7f31e49bc3502562c295c41f99b9356baa

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/20aa154ee405e97179798c3ea75c0a38.0.tmp

Filesize
4KB

MD5
59fa17a857ad4121ed64ab75d624a289

SHA1
ca5e61168563dece034611f1126c049892c64ffd

SHA256
1ddf25019c153275d1b2f2f7063630ecd6034cabc0470f2c28ab791874e31eff

SHA512
49734c255e0e0b7b54b4707674b308fb108fe626cfaaa8063c042d0a820fc9a91d466e075dd3e8666328061e84896de95a67102e158175cf45b0b3874653aa2c

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/8eed35101744bc3075e1174820962303.0.tmp

Filesize
6KB

MD5
0aa100fbf459d3975ea0045372609527

SHA1
e1df25c80e990733e6a40bca875c02642fc6449f

SHA256
7bc38afa37d5b92e9ecce8d38d7b8863f45e3ff714f4662962d10596e1fe8d64

SHA512
809922e661e6222a7f0c6aa85cddc682ed0e4310241eb0837ce660d0e0c77de48e0afc05a88d37f4d5ebd546ebabb2dacd9b2fe8fcb315d61cdb42de52aea9c5

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/8eed35101744bc3075e1174820962303.1.tmp

Filesize
13B

MD5
02278b770eaa5cbf5df843336333f087

SHA1
a26ad77888189cc5d6973bb818e45f448628c5c1

SHA256
ae95d608ee76e064ca676f3114fc5f48b0d5adac9ea3c9dbd137112f53c9b055

SHA512
40fab5d572dd71ebbbee60af714d6309e83765604533b08243754729479910a6725d4cdb8bdddc98970ea33624c435649a25902a43cb26b0c9b495d2bff69f40

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/b7898c0e821eff76f2b4349d9d48e3fd.0.tmp

Filesize
6KB

MD5
5617b9ad5e0508a8b805f08202fa1ae5

SHA1
4af22c716d403a8e9c252150d46cda520a5481b5

SHA256
68b8872df0e6f2e2b948912486d01b761dc34824f2bf6aa1617dadc479eef702

SHA512
e6c6453cf1966bcdb3a5557e4fcdaa8bcaffdd3f450c8a7b368491e4d3300c0b6165ff5e8cb74341dc5cf95307bdba85b4919271fa1beda0d1fc30ccd73bb634

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/b7898c0e821eff76f2b4349d9d48e3fd.1.tmp

Filesize
145B

MD5
fcb630509f16534a58c3fd55385b7f74

SHA1
176ce98aa5fdf7f4b565c986f10e054635d5a6c7

SHA256
cc76cc9ecfa04c960866e25f1fef27887aab53dcc042401477affd96436676d9

SHA512
f9c28d580ba6bc0d843b30bac0434c0b7032950d8ecd9d143a19e4864dd7b5890e36fdff56b227607487d2f485e430fb5bf068f69866f49223ed0790c8cf1eb2

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f5e55578d4a8582b9b6dcb1acf21c57e.0.tmp

Filesize
6KB

MD5
5943198e50ec72eb2daf00534f8d3a0e

SHA1
1ab8a6eae974b3b85c982c2bf33273d64c26732d

SHA256
e980a9064938613f6c64a14180b11df32e124bf3bfb343cb7bb97e8f759a5ec5

SHA512
94992214199a8f6dac36f53b34b56fb48d0caf2dec3cd1bb09ab964ee2619762e0bba33a49a65b8dba30f6466b8e0cb51a10169d8ba76e00f20d50ad78879d2d

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f5e55578d4a8582b9b6dcb1acf21c57e.1.tmp

Filesize
2KB

MD5
e5999287328731f4928df0c0a9bfc7d0

SHA1
0b3c7345c3f65bef9f435584e48b290ed868f482

SHA256
f379b1c9cd9f1c348ecdb97cb6dff0f847114cb3299c214b5f8287d40c877bb0

SHA512
1399d5f9173ad65c9bd7d0ea1ee573df71550ca09a6ef543668230009dfc8c2d9a7ce65acf132c5e57b0acd78787a918aeea593fecc6107f9578837c96402771

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f8fa47ce3c49318b98ff8f953f9a4498.0.tmp

Filesize
6KB

MD5
98a7ab18f64d5363710c446daefa1bec

SHA1
ef6d5d76cf43f0dd9240e2b30794b1df8b0f33e3

SHA256
0865f04a76176d3da115e52b533756c570fbce9946ebe0b420a97a40460433c8

SHA512
506c2cf1abbaa99660351ce7b2895f5b6f3ea7ed2ec92cc6494dc7cf3c05904e2a181f987ae94d969f171cf707a9826e99ab05807285190b44431dbf5746ee51

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal

Filesize
553B

MD5
356f23cc96c1ccfca511060990701912

SHA1
105eb252bb84388c37f8db9ff5c4b942f2df3b5c

SHA256
213a57117a4aa6a93ae44715dcbbfadd6f05acf9ad3173aac01fce891b0b02ca

SHA512
3e3ad4f124e0fc044d38b7b571ecaa73a80a891a2512bf595c1e434663d38b5d84aa7e904f68f70aa5ceefc525be711222b49a48ca6b3f2171ae454715833c25

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal

Filesize
641B

MD5
63ab9ec422822f13711ffb36db62dedf

SHA1
aa0795388011935848f42a73c57f645c601c3bd4

SHA256
09e80d099815f094a54a19c770fe0e6cbd9c273466ccbfd381e707e9b6740546

SHA512
444e1909b610c953aadfa80d4b312e1a6d2632bdff3a50911649b4fe5affa01562408f05f00b18586ebfb1370797d9330b500791c261302537599358f88ded83

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
571112758fefc013ca64f73bc959a009

SHA1
64b3e995d49a74c647cb467f54fc72c28c5af3bf

SHA256
632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2

SHA512
ce75b2bf73c4fd98b5391cf39610260fc90a91a7e85388c6074fe7b21f8b54eb88a0d0ce83a3403b496bcaf885deceab36daaae18976dc1f18fa4dd0605e2e34

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
71740c903b44aba3d99ee88bb458e30f

SHA1
b0f8b5824d50770b3452d5987087d5c3f4bf8562

SHA256
92f9839cebcbbca66b289eb52f368bfa9081480e7df0de69d215ce72a312fb3b

SHA512
d1606801a7c676c400a105ee0f743454eeb45597dcd0e1a66b1f7f5b00f3ddee38698caf02c017fa8befa41b21dc5bc290c7e3c544bdc88df3b9b1191fe1c8e1

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
25760bc92b7f5e3b71dc167644a826b1

SHA1
2a3a653ce90a5b1ad9c2a630c27aa298f6b2888d

SHA256
4785f90d860a1b0c4307c4ad3764368fd53165ffa04a53cd503260fd1da5c1bd

SHA512
5809157474319e32431229ba74099531e09439c0aba7a5e9147ca34c7fb5aff7a55d574972d1d98b6d591feaba293b71892395ed6db382324b6ea4d32d230749

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
d43f957bcba5b1f3f95d65d988bad361

SHA1
4aa45418beea9ba2912b691ec2a28400093f3cae

SHA256
3b66d4703f6b327f536e0ed35b847409ab6e95bf49f93c90fb28b2819fbdcc1e

SHA512
5aa7151828fe9407233e08557fb5f092d23372ed10f509c35d91bd4165c5a34f23faefda4b06933aff659c16847959693743e84bdc6ea2e948fb4ac6431c65ba

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
62ad4a05cbdca7f47b3206b7dbda487f

SHA1
4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

SHA256
18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

SHA512
0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cce33eb7cb4ea6eeb96b9fc8b1e54d4a

SHA1
c42599d8527f93dd8801fe658486324f486e95f2

SHA256
06ee4903f61752e1c2723fd44a892da313e02e5058ca305eb4ec7018d656fe53

SHA512
56772e89eaabc0258741eba702115eeecfbd06e5deb162e22762068b04a032a1756fe556436d7bee1d034b1d4f4c9511f08f72fbb9e885f7d5702d747f04e572

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f69a49e9fda4ba640f1b2143c9f07bee

SHA1
16d251ee8c4432364f931be13916e0288d8b5fa8

SHA256
5cf5437f38b7dfe426d3b2a982d5bde11dafb941ddd5856264e6caf18e37fd03

SHA512
f90f022d8f34cd63853361f946a74ea827e6d0ab62e502abd849945664a395bd49f287c2a79902f3bbbe6d6fe401c41a158adc29a41d3dc55de496fea9909fd6

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
57db34d9c70c025a5dcbeb0cd953c534

SHA1
14f1f2a74a97086bfc25ee5254d37bdf7abc6f42

SHA256
61cf6f4dc2c6d050e83cc6f571bccada438dfc312c683e2f4d087b5a3aac7c4c

SHA512
0c753ae18342c60599f728f9f3cd6c81f5e66217927aa0922a116ebeecf9e4fbfff592e71ba44c36a98d7b078a4e01bb139aa682d7346e84d8329faf27247416

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4464a904b15e7957e6d01c60c891adda

SHA1
25c7eb7c157d0be522e23e8c262f42169645d8c2

SHA256
046248ef975337db4a21a5f9b22a9bdca5f1e4f6127673edc932279113237e73

SHA512
d324e45a61d778d4e9360bd4f6d3d016b46f990a867c771f976eae358cfd903ce018a64c4591ddada2d68c8eefc09660cfea6f4d738f0036f1a62effd07ae2f6

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
58371b8a5ce2eb3d215749044ff891d7

SHA1
1f0bd57a582964118cbe32380614ceda27a78e1d

SHA256
18f5667521892c566069b2aec0e6bfea54e6b2968461ec490629b9ad52e9397e

SHA512
16f58b6715c4a8f6cf9a137b75617ae9bb15a4132a2222c2459b158bbea049afadc8d7143aba063ad024d68973fc9793e4228be16356fee60d6aacb579396d30

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
365839e86ba05d4c30e90e3bc6bb384b

SHA1
d094f1ff34d11647c3b0896b808589a075d5008e

SHA256
d3e0ff16f4a380bfb9c8c2da84740851d9069cca3cf4af0fcb4a1d14b1207fb6

SHA512
2843a50f0a7b0b0d0f71a988d883a995ae289a671d86ddac79d681bc507cbda94a793f410a86aa94939041fce4cce8f05ebb8366fb3ed4a8b66094a47df161c8

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
7175be3677b8c817a58e744171bfba80

SHA1
4fc0807e1fbf301c20c6bbe6e93fd46c925ab267

SHA256
f5c2f259dcd517c96d5915cd2e49684bbe5e3402ea5f04ad65b9b3c864bc522a

SHA512
e49914857541f61a3266c92934c64f60d02a06cdd635749db5d3e799be152340c605cd23f40168cc5182d338302dc5c1922d0fedf6098b9e58099fa75a741a82

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
f7dd05fa4b19aff932de384cdada6637

SHA1
d250c28f1b1e1858402f8febb21c0f96f6bc470f

SHA256
b455d0d7bba046bf8d24b277af2edb23773ea72c1ab72f2936ac1d7e16dcd72c

SHA512
7238a4fe9c76b6f8903272cec6ee4bb7f4d5908bea303416c60b6b52ad6107a220166beb8ba2ffeb28bc4f8d35ff68114814c60a1f8a481e98f9ab40a3358a5f

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
09cd4fa7e059d5afbcba19adb46ac0b2

SHA1
597b09e94d7a33d77ff237e6fb6820580eaf9140

SHA256
53e899ca5b4b39c74e7f2ee6700745b0d1f76bd398e9b8f943588d8227e52bd9

SHA512
9de229d781bc0ea29a3746c5ef9d81b2e123bf33181e5de49241eefb8545a3f0b329cdd2751d8e0ab1729730ebc8a37e5b894e207cbd6f7aa95382fc7e5ba04f

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6792f0b6979c17902683ecf5fbb2f22c

SHA1
e45d18f2bf605f77d72849f9b474ee6d501691a4

SHA256
ee471198bf9816a50874a13b5199399c21b8f75590e952618ef7fd9b0e4042da

SHA512
92beb128ff670914fc6d80f36eb14cef3281cd555e2eb892857e2468b558edfc0d10596ad68deec5fbfac84bdb9b3ddf62875d67f5eee0ff05875ec5ab8f4cf7

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
53d9451e224b973f8032724e239f537e

SHA1
a6d42a04c1fed5f7a395232581348ce6e964fc8e

SHA256
11e963f652c3c8614776f6f1c7c6931d3196afb89782f0dd01a5de5e2e03be9d

SHA512
05f521f5b39b99c0b0b6df44d5e15c7d9e98bb8620c207c7326edbfd63bfdba8f23077ff87da11b609ea2884bbccf744d46d1e49a2ed742815f5511fb0aed1fb

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db

Filesize
4KB

MD5
0eb157e1a86d4d00aa601dd2f6ff3ee3

SHA1
fee434f784e73cc7916322e949f727caf8363102

SHA256
b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

SHA512
b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-journal

Filesize
512B

MD5
1c7dde678f79a49163e328ff179cea8c

SHA1
8fc21bef5c991f8a9bf026ae7eca36630e8864aa

SHA256
fc2ee4c913b1a7919302bf9d619373b596daec29cfdb4478762de307e729a6b1

SHA512
6f84904680af48afc35ae4b023d45f63623b008a16cfc1c5afcf7d471577e292da65c02270c035b4c71ccb30b216b2b8ef10c8e7a4c458075d722fb3845993be

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
16KB

MD5
df7772c368f16642cfd9a63a030c4652

SHA1
4e6ca15c4e48027e4f6fc8d1b50f34fc3a042612

SHA256
c4b227857a7b59bdfbaa84d1bdf1555b0fa7716007457d029db91de423da4a18

SHA512
d519de3a149e568efc896b3d3e023faa99ddb4f25ba1f918561b451402a0bad63638f60a0db592716dc811d05684c9cc7bcaa999572383b72e04c0e499fd73fd

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
76KB

MD5
7dfe6c26a2019cbe4d8b42ecaa8493fc

SHA1
f6ded1e4fa51017c4bbe54e8c7e791531bc59220

SHA256
d737839d94b6ae5689493a22d91a972781cabf56d50d290f2734a6af762cfafb

SHA512
b7cdac8f7f15d2466704cb0721db5f6abd1e8afad293a32afd4de6614ebdd3dede34bff2b5519f20b08ce202e378cbbde95f933838f91aba9286fccf13b45200

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
104KB

MD5
767ca6fe7ad6ca648d8f67138d654f6d

SHA1
0b93adab8ca26dbcbd5f391c43ee5886fdc52b35

SHA256
14c4186622531af7c0b9f764a9c9132f2c7cf69a42bf12aed43254eb9744cbe7

SHA512
82e886ca6386f7d9e836160199db8b757a22d526a4414b9cffd11908bd7deca355461d050b44304532d7734c94ba3447a6ae9211671635aee840648aaf11d1b4

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json

Filesize
716B

MD5
1d52f8ea8467c620f839664253e4b821

SHA1
9dbfc155a933c3c572696e9248c28418699db9fe

SHA256
79c45bc5ee1c9c8ad0d7e2e964dfb0ef987a9aa9232273f70fc08415e9010fb1

SHA512
36f3e9be0030ea8cb4d00abbe594d7c86bc05e28457c4b018c4e3be84d7e8c2ea6bf478a438b9bb382c4f29d7dca36b7b656cf570a6d7b30759652262670bf6e

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-666B296B01B2000110B51DBC22CE0280.temp

Filesize
925B

MD5
c1d8e6c70c1bc7a1032761ac3a9fdb77

SHA1
cb464591ce0275b7e28f6fa3c60203b870a45bc7

SHA256
4bef625337c66d4d0165658ef7b4e024f759607ce885b9f7e492a1d70c471f91

SHA512
644446f04dcde61807c1aa67d259b86c0c2544ddb77059a054eba3ae16a178429b2a384ae1304c1192182a28c86ae6eeb68c1d02335bbfae06a13352d9e45185

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-666B296B01B2000110B51DBC22CE0280.temp.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/report-persistence/sessions/666B296B01B2000110B51DBC22CE0280/report

Filesize
747B

MD5
6f6b3ec831bfa6e1af29fab0ada65019

SHA1
c722fc2bb04848300097800ccdaa4a5f7fe43b82

SHA256
377faccf43d22b3b1eb4496db2f25c3f7d66ab01eb267541119f9c677716825c

SHA512
3ddec09c7109f83afc7d6932877c82b6988dbc5219b4e7e3368f3656de127df52b8692d211eeee0026258fc7ec9c853d7e3c731707e4083dcf7bb31e21095996

Download Submit
/data/data/com.positron_it.zlib/files/PersistedInstallation5229638865450965957tmp

Filesize
570B

MD5
98861839f6227801185f457d969252ce

SHA1
49c78eff9cf3ecd4b5bdb30aacf59efcdeada44f

SHA256
d2d9a867cbc064656d808b053db87ab92bdedfc6f05d03609d205160a5e3a690

SHA512
cdbe454e69eeef200d3dfaafedeb143f65a3aa48cc6252a6e9f9375ff04a3948a2a14aaa6a29defe178360bd8f03701c59835cd4c5b44d6cbe13b43e0d630656

Download Submit
/data/data/com.positron_it.zlib/files/PersistedInstallation606527344873774011tmp

Filesize
90B

MD5
9c8f6f08487a03c5f6354292a2b27b26

SHA1
71a1ea49aa23055b544e2bd0a47d18f4b07097bc

SHA256
35248de8cd7904632f8cd9edf681b0e72da656033540b64777db0b5f3d54fda0

SHA512
cf35bec3c6d56a1aa1255ce3e0b1d14c22665b63e29a9d655238ce4e825f03e59c514572f6861531cd84ca716978671add1dbe4c1641cc9b05a3dced062c05ae

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads