bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009

Analysis

max time kernel
179s
max time network
190s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
26/07/2024, 23:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

zlibrary-app-latest.apk
Size

31.5MB
MD5

3d46adfd3550c95950458a4e85e893d4
SHA1

bcd75ef38aa5a13038f5c2f469f298de6517a933
SHA256

bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009
SHA512

1fb0bc5ab44112c660a08a84f6be611f20f5e135c6c0c43c2afde9f11073c47443e96afa0abbb76fb2f6456eedcd30e83ae4f41f01c58bd964e02f299bd4a186
SSDEEP

786432:XHt3EmyGwIv9/xZljhHtKAxH0MKm85Fut3bRajyTlOKKRMSA:XHt3EXGwQ9/56rM78ayjy5O72SA

Score

8^/10

evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	com.positron_it.zlib
/system/app/Superuser.apk	com.positron_it.zlib

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4514	com.positron_it.zlib
/system_ext/framework/androidx.window.sidecar.jar	4514	com.positron_it.zlib

Checks the presence of a debugger
evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.positron_it.zlib

com.positron_it.zlib
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Checks memory information
PID:4514

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
226B

MD5
9398dc671909aa77d7db4176a8a31b0e

SHA1
02dbd522bd0ac34d80dcc41d9579ada9495826e0

SHA256
846757b8c0464c2392008261eddf8fbaeca84655ebb5c62386fa8e98ee44cd58

SHA512
5f54105136405f8fae6a55d596aec4352dbdd158701ee99e376193d28a623f4c944d349ff1cb0ffbeaf8cf240f37309e6ebfa0513aa11d9d522a2c4af4b49d55

Download Submit
/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
3KB

MD5
8cdf2f91c75b56d2eb19761ab7ca8dba

SHA1
beefa67f2207a335786d3d151049e8b3a1e30014

SHA256
f2d94af29686a9ec4ee3d5e651a7fb7734e44d29e34fed3ff5a1af5d57b272db

SHA512
f6432a4fe4ba17ae9b5e39cddc5c8d2ef101f0f1212c378b87f3837fe0ec79d778bc8f7564d08a28ea806c17a2ded4aa42265e2ae2aff08be977cccf444cdaab

Download Submit
/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
3KB

MD5
bc1137ee7ba6827f9470ce3ed090c911

SHA1
09d87f13632f7ebb3029bbe148d5b45620375ef0

SHA256
31a71a3ab5350686613e237860a06724bd2ffdb95af7a6083a7f6a69856c07a5

SHA512
15650d0c95093a39ee729dd0bb12a3479292433e52daa1525c7bbb517140ba3c27dc3e86b23cf9b743303ec44d81527cdccb1a0e52feb31cfa8fb05570823910

Download Submit
/data/data/com.positron_it.zlib/app_TorService/data/state.tmp

Filesize
3KB

MD5
2c1655c8dedc3f0c151e4fa6734fac87

SHA1
1b84c36b9d81b2694c3881e4e30315b3957e6da2

SHA256
d64bef25f363044ad549ce46f351ee4d61a8b475949744558a00dea0ed6d1c00

SHA512
fafeb8bf616a6b09e187991b26ce12e575d5e32febd6e22fb0acd362db2d9e0725d3e118e1b9b3170c3f492f1aa5f422e5caea48c4d3a60cb90f3969e27a2b18

Download Submit
/data/data/com.positron_it.zlib/app_TorService/torrc-defaults

Filesize
35B

MD5
9fb237646f5e68cf5d7a20d3e41cdc6a

SHA1
8c6888f40a6f65eb26913bf683161f2423575e64

SHA256
2a9b6f8bd4d2941802e741c17b01170c7f1410884f2129551fc0a22bc24ae9c8

SHA512
660db762a5d79fe00c1b7a6ac1d9d7ec8817334fe3e371cb21d82adfa8ba75465d44332dad38f9a360f5147311a39349f0ba9fc9e6e896389353e5e164ad00ea

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-certs.tmp

Filesize
15KB

MD5
c1304e69d690e32fa6f43a6e48a26cb5

SHA1
72883538559cce291b47f8b5d8944e187ffc0b2e

SHA256
b000dce263327c095d7f33e25a3cb2abbe8bc7e5e3b6d82f4ec74b1e822a9369

SHA512
917dd51e68991664a1ec999101a2527958e16f059ce30657776b7062e23ca2261e28a75ca7ea1e76e9dc6f75f2dcb97e3f6fe64ef9ee49d755c92f720dc89426

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-certs.tmp

Filesize
17KB

MD5
7f2b3adbfb14450d0a16cae49a50bfdf

SHA1
9e9171c6c44721aabe77e68f783d778e1f5f055b

SHA256
9015fd4163b5acf94d3c1ad22d711a54e00b72b97818c9478860dabb49879a1d

SHA512
a3bf92251e9198b1097a032155d59b22700f5e1eae0a456dff20bf6e3df7e3b81eddcc9094e063d619a0af1becdf324c1d995c689465cb2a99557b550b431906

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
1.2MB

MD5
6db09bb8c3c3a712d260a5268ae35500

SHA1
bd4148aa4f93bd2d75a9fd4835932bfd9788ca18

SHA256
9b4ad1feb8bd1d292e23744afb71e10841acf8a31280667a4019f937107fdc55

SHA512
69a863a41937d44083f915971cc715c309b9982fba21aab08f177bb9bc492740413af22436d3f1d6f0aeda5384909c4c4c26389fe78dd2eb8383609d8f5cf43b

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
1.3MB

MD5
2cd389469ee3fd69fcc93f3f475aea5e

SHA1
9b9767abfac957d3f939e746271d737e1b4ebf51

SHA256
1f1d3cd623fb41abd304023fa07e8925c568bbee9568d75b8440cee8a67a1528

SHA512
662093340835100d5d71b1dfd39b91e23f5d45d6fa46f180fea71d785f62cb406d9f7ea0085f5c51e5de86be4bed99ab07bc6f907fa4e2964b59bbca455b74d3

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
2.7MB

MD5
e39c4f60c083ee60dfb3902c0fd1a0ea

SHA1
91b88373c3e1080bef27aecc066a39a574d1d816

SHA256
dfadc2f636671472e2dcd704bf4d049b1a3da2865bd720c64978cc05fd20b3a0

SHA512
9a35721d0db746fed1ba79a582d182e93a7ff0e3ae341dbd1d816bfe4c865081489dc49a4a3f9f3d234f14557987e654641ab4c2f522ffaa7d58606236636d72

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
3.8MB

MD5
55c35071d848c8ee08eac751519ffd5d

SHA1
80a2089123f7295d22082f26171e970b4a402ae8

SHA256
2fdab45100a2743b1721c46ea350fc2c8c4951585fce0b992039356bfaeb81ff

SHA512
4ba71472aee936005346fe14eb137b1a12234160afe448c594d671ee25448d7c9b2c3364f0aab1cd62f86672d8c95f872741e1df28df7e812d0d21e61fb1bf34

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
5.2MB

MD5
670dd79f5cfe5597847d74f7c992e5e2

SHA1
e7b2d78ab31eb2859d11ffdc1e3c83f015b39ec9

SHA256
4527e5e04efab0d9aec6d8520416faae757e7866d143deae1a1fcb61366002f2

SHA512
6e46e27cdb3507afe0db5f250b7f3ce9ddbb292ca9c762b03be5d57473b855c90f0ac4884ff8a8abf44b45e52baadb12a9804180eb29a02dbd6a205f3ccd244c

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/cached-microdescs.new

Filesize
18.7MB

MD5
be9fee95e0942a88b8827125a210b386

SHA1
29bb79e0d6fd8c6fb57a65f1f73054eff025f02f

SHA256
69eada09cc54e147a5d7778b71f36a6ecfc9d811f1d0a3d4a932a3b5a7e73251

SHA512
925ff7f4cdd143c164ece8eca4a9f366bcd70c152dee1bfa52471b335b8b10445f09d3bd902a60692075b85fc36a357c85a89b374fc5959c55a1c947faf90eb8

Download Submit
/data/data/com.positron_it.zlib/cache/TorService/unverified-microdesc-consensus.tmp

Filesize
2.6MB

MD5
0b4f4ec31159a182ba2953310b4807fd

SHA1
99f302456cf90aa740427369ba665c004b1dddea

SHA256
6bdd19137c31bdf966c35c79671752f86a5c737eda9ebd8c05008721dc2fc78d

SHA512
536bbba06e746844ba6cce2c1f72a41342235669397b5529642f489b57937f8012d1887f45ba5dc3245cb6c724240abc9b2803786ed3df63c8fd5d102a8c71c0

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/0327966a108c87adbef544fefa9d3d64.0.tmp

Filesize
4KB

MD5
4a7ce92be6c787aacd92974589db85e7

SHA1
a6442c111a04729e056b7a5d630939465fb37be7

SHA256
f62712da144267ea4e766c42355eafd9543cf10e0bc36bd2a3bdc171edb3e191

SHA512
4901b840d47df4669dc76de0089f1094c718d56d34b5623de781111e838e2f1c70fe71b593102b4da459c5eca48435fe0b5c183eccaeb33ce7b7fdb3531319ad

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/0327966a108c87adbef544fefa9d3d64.1.tmp

Filesize
13B

MD5
02278b770eaa5cbf5df843336333f087

SHA1
a26ad77888189cc5d6973bb818e45f448628c5c1

SHA256
ae95d608ee76e064ca676f3114fc5f48b0d5adac9ea3c9dbd137112f53c9b055

SHA512
40fab5d572dd71ebbbee60af714d6309e83765604533b08243754729479910a6725d4cdb8bdddc98970ea33624c435649a25902a43cb26b0c9b495d2bff69f40

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/051c60cd7a2494bbc1ff2af8ca93acf2.0.tmp

Filesize
4KB

MD5
128e97732dccbe1ac392a23d0a2c9056

SHA1
10852219bed20aaf70dba914c9806f56a9986ba0

SHA256
ec81e4d697ef1951904683b6508d333d2e173c4e7d11ba6f0b172cde7cfe7b78

SHA512
105f3bc0e8b119fcfd74e7353d63238fdf7b02ec383cde7a79569b2db482cf62efe2f7e7798c40af7640d25bd5895c6642bd66a9cb4fa994db1df3b89fa34130

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/20aa154ee405e97179798c3ea75c0a38.0.tmp

Filesize
4KB

MD5
00ed1928a18a2698044c32a43e5baca8

SHA1
65eadbbc32f4bce43e040bd845d5a5f5662e0ef2

SHA256
6f25bea46fefe92666ed694414725ad86f38cd9acfb8a0139393be3f5678afd7

SHA512
464d727fcb4a7fdad06571eefac387023f6d24d2e1f5934adbd8dcc95ff2574a40f73d2324f59cd00e6a1a3a0a000e2b0f24f3c422768947a314870fd685276b

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/8eed35101744bc3075e1174820962303.0.tmp

Filesize
4KB

MD5
c32bb870a0e83a2383bdef718f7aaa31

SHA1
a30e2e7819d39cb9b6ce752d0d4bc6f75cd36f92

SHA256
7893381762c7abff5cd5c86cf621a394562bd9a569d771c42d95fea6337600e7

SHA512
9590e49ea717e47d0ea2265683648894f6d794896531eddef6d66a6a248f0071c6d7974beac7ed1b52b98d24f015e094233a98ea97ec17ccb9a0b2755c1af7da

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/b7898c0e821eff76f2b4349d9d48e3fd.0.tmp

Filesize
4KB

MD5
f01beec71dfdcce938af64943764d6dd

SHA1
af429e51b73e6341ea9a69042043f622beaf2a5f

SHA256
963125b49029c11e2e61ee80ce1355b9631e293d2a046d01993cf60792483977

SHA512
4f1cf0b205f2ffc6dbca2df860d2054f7a3be43b52822ad882146769c45f28342a90edd50b9c24d0768303fb92bede7a2d06f80cb37f6f686c372ad0e66f0ec3

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/b7898c0e821eff76f2b4349d9d48e3fd.1.tmp

Filesize
274B

MD5
1ac4456dfbe8fdce15a7069b1d38deab

SHA1
d4f4a078b17b92c2ed45277a82b742a777355f8f

SHA256
fc71244d06b6465fed7113aa3458d00fd81be3accb6f102a4a306f65c7b4217a

SHA512
5aba2be58327c9313189acafc6a7e3d1ff31e717e3599db8572ecc2207713187036098a5588da515857200ea531b1fa8b978edaba3faa2530648f12ee0db5a6f

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f5e55578d4a8582b9b6dcb1acf21c57e.0.tmp

Filesize
4KB

MD5
99a7bdb8d50b2a2fc070645c406e2db5

SHA1
cf97a403d50e5e6118199d519bdc0baeb89e7a07

SHA256
273c6b55501a7cf7ddd591e2f5275952dcb582fe2893283ebbfbb8a67553b96d

SHA512
38ea1eda0e4249a0be32f4422c922a6d331c9a5d6b7e47155ad286274a9e57fd17e3848f7e71a1cd1d3d508a352cff92df85ebd8e0d769777312c827d1cdb74a

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f5e55578d4a8582b9b6dcb1acf21c57e.1.tmp

Filesize
2KB

MD5
c9a913afa486b1955cf2194cd4b2417d

SHA1
5072a2913bac2e321a515e79356752e184f08383

SHA256
b40149321ee9847d0ac9c563bdcc6019ff8ac5359ddeae4f88413cf03475e7c2

SHA512
d93c73dbdbff7fc5d0060efddfe225320a0764c9ef9555f39370b6e289720f67c4e03d3fce11eecbc19b0c66ff651c752d8378806d19fbb7cb883caf21844550

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/f8fa47ce3c49318b98ff8f953f9a4498.0.tmp

Filesize
4KB

MD5
d4a9ffc7e1bb513e92f8f83e9d89db71

SHA1
fad8e81e3080916d67912603f397aae6e42b1ed1

SHA256
47be93a691842a2c1cf21afa9e8e17a8114b31bda3c409ef227772dea8e64ade

SHA512
cc7b9d70b82c1fcd996a8aff5ba580c9b86433f2be2ecb7992030a9633af671d0fdf37cb333d6c151d4226c9b2ac643f14cde6a9e8c7696369590ff694a0c775

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal

Filesize
553B

MD5
d19db35f7693b380497c7bae6ad5d42d

SHA1
017fa805ed5bacbd24a285e7499a60fc9aedc5b6

SHA256
5ee48e1077d4976ded3543e55d36d16d06fbbcfa4683618344a405ac8a8a789e

SHA512
368d8bd5788b1011f2c0fcca6a0ac2bb7050c42d5bb7c7a25ed04d69916ca74f7cd2a2d88be66615ef96fae0beb03fb298bfc47f8d5eed0ffaa3801dcf80a5b5

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal

Filesize
641B

MD5
7ce55ac48fc67212a942e3855e25ad53

SHA1
439ee6cfe94b8c8b8d09f680c1776a9e380d9344

SHA256
e76f24aa5df3cebf0c10029d9f5d2644b48e011744c180c20a53a0c204ff00f1

SHA512
303eaa34374e37291daada5e540823f747ec79b1c13b544e955f599b4d43081cc5308508e95b02cc38c8b0444b8112f0192dc428b3f86e8cae0acdaa201bc863

Download Submit
/data/data/com.positron_it.zlib/cache/http_cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
e4c5ac27b0970ea53efd388f3b4c4bb6

SHA1
e3bfd4a6fb116d52c97346f6a930161984e6af47

SHA256
760ba44176c1609764b3789f9813fd3b389d3f2f372e4ace7e0a5f057a936b5e

SHA512
1307a7cd095b68fa5e5da067f32c080dca3e374d41bc020af979d204d0b39fb841b06dd0f4a74c7836b0da05a4f16fc96ec3eb31696aa064ec62f9e595dc9129

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b9f113d711943bc8273bc333ade3c989

SHA1
2aebc8fc0b8ce713bd8bfe5c5b70938a6cca3a0d

SHA256
92bd82740ae4fce873d0781b291affc4fe8ecadba858fc0edbdad64a8c4e1cdb

SHA512
aa5aa3792399034b4fdd914b33a2684a6f5023ab6c71c87470898f6b4629a46dc58b0eee78bf36cc0fbd266d259042624a47d3e338f12af0c4c0a591f76d35d0

Download Submit
/data/data/com.positron_it.zlib/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
f5f80eb6f1964b378b4a105829652907

SHA1
7d7d7fe7c3c02e18644d663e8d4b55f0dff65c99

SHA256
75fbd82f0881c7135a36e8f8baeeedd9adef00e3215ad7195b5c43479450274e

SHA512
fa53108e5f36276145b6fb4d76e32ec80195afe3ccd1df667471f2f46efe60cee9d4e918968e49124aa5531f5dbc4cf2a4f0733734c400dc56eda9bc74796a31

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c227ae5aa8c20fd1ddd8513a6488274c

SHA1
d85b5ef7e255e45a4335adec8805852cc3bccc7a

SHA256
18d1a96fe59f03649eed8178646bbd33e8e331d5da50bbb111d327e80bb895a1

SHA512
0d5663b160ce24a319a6c629857ce1fb5407a297ec863c00e8b13d89c6ecdf0b8d206c26712e6de482a964c5bd85273c1d954faf11e54611d42b72739e8b78ab

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
37e3c321e02e72f23cd254c2c2a2d4fc

SHA1
46c59a39081cf9cd72b66228d08404e844f17bad

SHA256
e882475817c029c4a7fd1841bf6a8b590b3b54face7ea0fd458f90db774556dd

SHA512
e8676f1d3cd6d471ffe81f1476d04d748e99954b9c17f026536a3bfe5059426b70241d55b018d014a03f9bfcb26a20186a41bb387fce2d06f59ce9cc0e0797cf

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
31b65fad06a1fcb5ff85253897017c24

SHA1
569df197fed09a44d174cf0347ca2e10acfbfddf

SHA256
f5db7dc2228a2c4a5996799583ab77c73017446cfcfe92db940ab7bbd6e08ff3

SHA512
e7470feef3cdcada4e44115e801b66573633ff3de877441fac1d709592cf5b69c41285e46a2b8abdd525ee008818b3282f8d2566a28a5c927581908e61140a88

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f94f39826fd7a0969762b9402a339f8f

SHA1
738483ea2fe1ff0d6ead192e90853d79ad3d06d2

SHA256
f64b611215c27605d708205ac09b29296050d3ba273c4215ce260e15c0861b27

SHA512
10987b767f608a266089328f4b8ea6d429513efb498b9d9032f97f8ee71f7044021b5d0db306a3505146b082064d5c75b167a4102e4c4603874d35549d1991de

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db

Filesize
16KB

MD5
105b76aec287e976d647098ee09d3e9a

SHA1
37f6c664eb8cc9425c86f2892143e0d2c6640478

SHA256
17b1e5d7679fff1533bc7fd72ddc9401218a2334147ebc65fdc0393b640053b6

SHA512
e8a3c159eb9f6399ed7244d977b3cf78edef4554f3165bc6d0505ed0a22d4ab9c33227f0aa3750b59f05a2b97a82ba66ac31ef38173a29cdba89150df2e4d724

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
74ef2862faab9110bc92ff26f319fce2

SHA1
0e0fbbe3791ba2aab245b1c3099fad346c934af1

SHA256
4a910f8aff5c85a126a474eb27463ab5a0912451f678acba05fed78ef1eb1430

SHA512
05762eebd7bbcbe50b567ad113f8ca629fb514b298807b26e245dd7e35b80f11b2b81c46108d0a1ee76571a4cbd9dcc0b704ad1934b9402545aeaec91ab55c4e

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9ae9098271cc1f58cef5357d68e13303

SHA1
9e05a19640cfc6f613ea39e1d9f532f40e21b8ba

SHA256
fac880858253551a14faa046d3d31dfef5fa86c48498066c0d765182f1ab2243

SHA512
3885e54c24ce2ab1b37490f2d57e20b922bf02b0a6e5ddb53e459455fd70c071747423a3cdb14e47ad5f2d510a22d89c356d75371387e50625db33ff351740f8

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
5d7a40ff0e614f6402aa46f16aedd242

SHA1
808d02b7ca6dfce018903856490df579386d41d7

SHA256
e9375cfc45eaa02a6adc65723f2a7f76ed048f9e30a48e450affa708ea3d34cb

SHA512
4555f128e75000889563500134cc97bc38ac5cb760a3684672c27a9621d7689651250c253fc5b25aa3a02c6fe50f6fa07204484bf2d1818669d3873fb1e0830e

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5b2970f2579e0cfe7ead9887a45bc56f

SHA1
8ac9f5d7675389f7ca83e6b9e741843cbfd3969a

SHA256
bf36753983bb1fe07dacbf3f291cf89640ae2e6a968ec94210909b12a6b63fd0

SHA512
9c85f2023e34c2ad680f7c935610d42d2b433d507afc3ca7f274db629dcbadc3a8025ec316ad0bcbdc465cb53044dfb3424594f3416c41fc093f683fac83b009

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
29657fd2f1d0684e8e3cd96e1c4f128c

SHA1
5f8bb05e8d7fe2b3c2b286774c9c1ca4e3b29621

SHA256
92ba794c79c9fe3c6b1fd6c7cf93f2378d0c9bb3fbfdd3752014e065a6f6cb4c

SHA512
a76ad5dd1399fa86e38aad2378c7f0b479e36606e57dc57aac37ba9ee2fbe69a6b5f8a423955a8fc7dadd969555d1676063ab5529817a2b460c0010215b40a93

Download Submit
/data/data/com.positron_it.zlib/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
8c262ef1f7bb7649d22bf55dff7ba8c8

SHA1
1f2b0a34ff957c153c58ea86cd1bd2dd3b152ad3

SHA256
9bc6b339fa2700e2614f19040cbe235bb5a44ee3b1312b43603faec938ae972d

SHA512
dd3b46e67c4100c02794ee30c51ab3e57347070331005eb031f9caa161c89d445397707c5bcef53cded6989f3f9705b3ea8ad7d93cb92e97654e9a14d7bc0b03

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-journal

Filesize
512B

MD5
d286f82db75ebe8e773bd15d6054a045

SHA1
c9f0829ec9b348112885bedfe87c6c8bf5594e44

SHA256
9f193cdaf36dc6aa8fd414c9dfde044c033bae6bdbed76545077e4e50619ef0a

SHA512
ff440289948f3e351bb2ddcaaf4fdf78d5a0a28fce152a7c6f12528df887aef5f1b30ab19343a609686d64860ab46c921de63f80065921216a2c9b56ae11fe04

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
16KB

MD5
7f6e91038b8dd8474c7a0cc675cb63dd

SHA1
7f8e48b7bc9899a0ab0bde12236a6769a8988535

SHA256
4dd460a737eece1787e86d3c1fe49ab2881c29127cecad986e07984c86b9647a

SHA512
29ba4295100e0fa12a39e8c7a78d6ceb742fa8e4ff4aff55a354774294bfdfaabc4453eed5a9626e406d2b2714612d341d2656b993c6524fd38b30e432058235

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
76KB

MD5
d51e7bedfd9498cd2e15cb5044403c52

SHA1
c659a519121d0346acdbec119fb927535f728a81

SHA256
8d60c51b1fd4bd369b85980e10301b04f4896de42ce4ea0a1af041d05622a4c2

SHA512
43c009e1a1bcd403e26209f376eabca714ae317b64c1ae560c440aa5213b1a65841582d69802ff90fd9d6dd1637d239e2013c3a600b154d485a18b8973104855

Download Submit
/data/data/com.positron_it.zlib/databases/zlib.db-wal

Filesize
104KB

MD5
672421cf7e5a8a107eb3b156656ee570

SHA1
3155e212d77bf7d23d577c61fb1fd95d21e8553f

SHA256
e8cfe0e610093a7afff25aa653f43d70edebceefcb68d71ab7ae6a9bc307abb9

SHA512
d10c1753773889b7dc66e38409777a9b76053b80065a9e399b6225809975897f6a5e417fe1a35f2ced68fc462318d8c4aa13d74fff50d116894cd66fea8760cf

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json

Filesize
716B

MD5
170ed0ba1765d1e859b4a3288fc98289

SHA1
83e4b7588c4d14660fe0ea1816c607c072fdbc94

SHA256
468ff2b394a1ffbbfa2f4cf95258247036adb7e988224ec0133f7c0d3aaac59d

SHA512
0709dd1799b8b73362a4215d161726552370021ac47d1c76dad631e28ddfc55d5d3cb52572503618089dca1188073b1d821dc7ebf36dfe0d708d8bca06656303

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66A4370001B5000111A2F0CA4C9C9D2E.temp

Filesize
460B

MD5
82cb6954d7bbd00b34761e11e7392690

SHA1
f6359376bc0d33477b033e8a384f8d950825e30d

SHA256
9db44bb57978608c00ef376155e2e38d6e1cba93d7efc44affc8eac64b991ce3

SHA512
88caa175663c2fc4520c09b9989920d2691ea0e0e8ed27534c714e0015321a86467f2a16c1e3fef0ab00c5a679953546a0f2a9734606a70b35709ffcaa12c5b5

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66A4370001B5000111A2F0CA4C9C9D2E.temp.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.positron_it.zlib/files/.com.google.firebase.crashlytics/report-persistence/sessions/66A4370001B5000111A2F0CA4C9C9D2E/report

Filesize
746B

MD5
3894c0883a7de008d42d71ba3402e4a0

SHA1
d0c0e67d1bce2a734d33983fc343732d70b0146b

SHA256
dd26abd5ee0248f8a78dad9442c2c01d16021b8d3fd2ca27aa8a1be12fe6d492

SHA512
bdb58a44383a614694b1fc75ee15ee41283599f400fa7e1f40bade383bc9677fbbbfa13015b958499da485a90b507148fd55e5bf888d85390e9d8065859f7b3c

Download Submit
/data/data/com.positron_it.zlib/files/PersistedInstallation4794410494790698485tmp

Filesize
90B

MD5
a3123af00ae19bdcfccef288347c0c03

SHA1
7ea4b133fa0b260c4f8ffd1dc20eeaf9614f5efe

SHA256
1d92191d4fbaeb7d0354ed5c6aabbcfe9568c95192f83a06d661013f1e5c4ead

SHA512
14d7d1f5d58fb3389d28d53027e43670a2e4dbdb52cf9d560cd15782866479b8af3b49a323a4321603f16baaaf4494fbee413056315c60af4decb523d2131f7a

Download Submit
/data/data/com.positron_it.zlib/files/PersistedInstallation982741427453646654tmp

Filesize
567B

MD5
66fd57fe760149c45fc05cd5579ff8ba

SHA1
e674f7c12863deb50f45d9307dc936dc8151f7d3

SHA256
1f4c4f426d3b4a4d926bedc1ab3cc39320f98c97c4fba4f234268b68b39bd688

SHA512
1bbe485709c87f209c320f136a924ab8bd0d0900a65092fe18534ed87416d9c8beb8863f06e6d5b2110af657a46172b443b061b4034f057116ed8f18e2179845

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads