21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T44e,{"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious Sample 7efd1f7f9a1b… — Score 49/100 — Hybrid Analysis","description":"Suspicious verdict for sample 7efd1f7f9a1b…. Threat score 49/100. 0/27 AV engines flagged this file. 1 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12","keywords":["Suspicious","malware analysis","sandbox report","threat intelligence","7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12"],"about":{"@type":"SoftwareApplication","name":"JioTV v7.0.8 b290 Premium Mod Apk {CracksHash}.apk","applicationCategory":["data","compressed","zip"],"identifier":"7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12","additionalType":"Suspicious sample"},"threatScore":49,"antivirusDetections":{"malicious":0,"total":27},"behavioralIndicators":{"malicious":1,"suspicious":7},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:T59b,"res/color/mtrl_on_primary_text_btn_text_color_selector.xmlu" (Indicator: "select") "res/color/mtrl_calendar_selected_range.xmlu" (Indicator: "select") "res/color/drawer_menu_selector.xml" (Indicator: "select") "res/color/abc_background_cache_hint_selector_material_dark.xmlu" (Indicator: "select") "res/color/test_mtrl_calendar_day_selected.xmlu" (Indicator: "select") "res/color/mtrl_btn_text_btn_bg_color_selector.xmlu" (Indicator: "select") "res/color/bottom_menu_selector.xml" (Indicator: "select") "res/color/mtrl_btn_text_color_selector.xml}" (Indicator: "select") "res/color/mtrl_tabs_icon_color_selector.xml}" (Indicator: "select") "res/color/mtrl_tabs_legacy_text_color_selector.xmlu" (Indicator: "select") "res/color/mtrl_fab_bg_color_selector.xml}" (Indicator: "select") "res/color/mtrl_tabs_icon_color_selector_colored.xml}" (Indicator: "select") "res/color/mtrl_btn_bg_color_selector.xml}" (Indicator: "select") "res/color/mtrl_fab_icon_text_color_selector.xml}" (Indicator: "select") "res/color/mtrl_text_btn_text_color_selector.xml" (Indicator: "select") "res/color/abc_background_cache_hint_selector_material_light.xmlu" (Indicator: "select") "res/color/mtrl_btn_stroke_color_selector.xmlu" (Indicator: "select") "res/drawable/ct_unselected_dot.xmlu" (Indicator: "select") "res/drawable/tab_color_selector_dark.xml" (Indicator: "select") "res/drawable/media_thumb_selector.xml" (Indicator: "select")23:T5bd,"DebugProbesKt.bin" has type "compiled Java class data version 52.0 (Java 1.8)"- [targetUID: N/A] "AndroidManifest.xml" has type "Android binary XML"- [targetUID: N/A] "CERT.RSA" has type "data"- [targetUID: N/A] "CERT.SF" has type "ASCII text with CRLF line terminators"- [targetUID: N/A] "CheckForNull.java" has type "Java source ASCII text"- [targetUID: N/A] "CheckForSigned.java" has type "Java source ASCII text"- [targetUID: N/A] "CheckReturnValue.java" has type "Java source ASCII text"- [targetUID: N/A] "Detainted.java" has type "Java source ASCII text"- [targetUID: N/A] "LICENSE-junit.txt" has type "ASCII text"- [targetUID: N/A] "MANIFEST.MF" has type "ASCII text with CRLF line terminators"- [targetUID: N/A] "MatchesPattern.java" has type "Java source ASCII text"- [targetUID: N/A] "Nonnegative.java" has type "Java source ASCII text"- [targetUID: N/A] "Nonnull.java" has type "Java source ASCII text"- [targetUID: N/A] "Nullable.java" has type "Java source ASCII text"- [targetUID: N/A] "OverridingMethodsMustInvokeSuper.java" has type "Java source ASCII text"- [targetUID: N/A] "ParametersAreNonnullByDefault.java" has type "Java source ASCII text"- [targetUID: N/A] "PropertyKey.java" has type "Java source ASCII text"- [targetUID: N/A] "RegEx.java" has type "Java source ASCII text"- [targetUID: N/A] "Signed.java" has type "Java source ASCII text"- [targetUID: N/A] "Syntax.java" has type "Java source ASCII text"- [targetUID: N/A]24:T4a9,Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#" Heuristic match: "ORIGINATOR=BigSoundBank.com" Heuristic match: ",L......N......nz" Heuristic match: "^mTeN..jm" Heuristic match: "OLLZ'!.MZ" Pattern match: "8.ZU/Gm" Heuristic match: "com.jio.jioplay.tv" Heuristic match: "CircleCropTransformation::class.java.name" Heuristic match: "GrayscaleTransformation::class.java.name" Pattern match: "https://issuetracker.google.com/issues/new?component=413107&template=1096568" Pattern match: "http://ns.adobe.com/xap/1.0/\u0000" Pattern match: "https://www.example.com" Heuristic match: "android.support.customtabs.customaction.ID" Heuristic match: "Name: res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.pn" Heuristic match: "Name: res/drawable-hdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.pn" Heuristic match: "Name: res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_000.pn" Heuristic match: "Name: res/drawable-mdpi-v4/abc_scrubber_control_to_pressed_mtrl_005.pn" Heuristic match: "Name: res/drawable-xhdpi-v4/abc_list_selector_disabled_holo_light.9.pn" Heuristic match: "Name: res/drawable-xxhdpi-v4/abc_list_selector_disabled_holo_dark.9.pn"25:T835,Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.zi.smali.zi.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.q3.smali.q3.smali" to "java.lang.reflect.Field.get" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.q3.smali.q3.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.ww7.smali.ww7.smali" to "java.lang.reflect.Field.get" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.p36.smali.p36.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.qf7.smali.qf7.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.c77.smali.c77.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.sc1.smali.sc1.smali" to "java.lang.reflect.Method.invoke" Found invoke in ".tmp.41c80e98-79e8-43d0-aa3c-4150e77eee38.7efd1f7f9a1bee8f815c3cb5bafe7485b187706ee1363f0683e102be64fa3a12.apk.bin.decoded.smali.o3.smali.o3.smali" to "java.lang.reflect.Method.invoke" Found invoke in "androidx.versionedparcelable.VersionedParcel.smali" to "java.lang.reflect.Method.invoke" Found invoke in "androidx.transition.q.smali" to "java.lang.reflect.Method.invoke" Found invoke in "androidx.lifecycle.a.smali" to "java.lang.reflect.Method.invoke"26:T2f6d,Potential IPs "17.18.18.18" "19.19.18.17" "09.26.18.18" "18.19.18.18" found in string "dPLTE.19008/08/19/28+55//9-18.18.18/18--<.27.18.18-09-1:-29.29.17.18.18.19.18.18-27.28-39/17.29-28.08.18-18//7-18.18.18-18/18.18/17.18.18.18,16.09.18//7-19.19.18.17-27/09.26.18.18//6.18-55-0700@-27.18 @@-18.19.18.18/18.28//9.18.18" Potential IP "17.18.18.19" found in string "-39..7//5117-07/18/18.1811;.19.28-27006.18333UUU.28-28/27.18.19007.18/28.18//6.18.29..:-29-09/09.17/29,,7.18*29.18.17/17.18.18.19(66.18$$I..;.28.08/28/18++9.09.19.17.18" Potential IPs "55.19.18.18" "19.18.18.18" "7.18.26.07" "29.19.18.17" found in string "PLTE00:/17.18-18.18.18/28006/09.26..7-08.18.18.18.17-17.18/18.18/19.19-39-07.18-55.19.18.18/18-19.18.18.18/17.18.27-08.18.18.17.18.18//6.18.08-28//7.18.26.07-18999,,7,55,07/19.18.29-29.18.08.18.28.28.07.18-18-18.08/27-17333.17/29.19.18.17/29 @@.18.08" Potential IPs "28.18.18.18" "09.18.18.18" "09.18.19.18" found in string "PLTE.18-27.18-28.18.18.18-09.18.18.18/17.18.28333.18..:.18-09.18.19.18/08.18333.17.18.19.18008-09//6006.18.19.18-18117.18008.29.18-08/28-39.18,07.18-27+16.2811;-18.38 @@.18/28.17.08,09//9999@@@/18.18.18-18..;.08/27//9-18.1811:.18" Potential IPs "18.18.09.17" "18.19.18.28" found in string "/28.18.18+++-39.29.18-18.18.18-17...,3:.28+3<.18/18.18.09.17++@.08.18.09/18.19.18.28-07'';333-08.18.18" Potential IP "9.19.18.19" found in string ".07-08.18.0800:-29777/18//9.28333UUU.18-19.18..:.18++9.19.18.19-0700@.08,09-09.19-29.17.28333--< @@.18/19//9.18.18/37" Potential IPs "18.18.19.07" "66.18.28.18" "18.08.18.18" found in string "PLTE.19.18.28-18.18.19.07-08.18/18.28/18.08 @@.18.19-28.18/29//5.29.18/29,55+++.17.18.17.18..7+16.07...,3:.18//6.18,28..:.18/17.18.1811=.18$$I..;/18.17.18(66.18.28.18-1900@-55-18.08.18.18*29..6.18008.18.18//7/18.1899911;//9/28" Potential IP "19.19.18.18" found in string ".1800:.18UUU333-19.28/29.18,55/18/28.18-18.18-2711:-1:.17..:-08.08,28(66-09.18.18.1800@.18.17/28-19.19.18.18-18.09.19.17.1800:.18-3911=.08.18+16//9.18.19.18.18-27.17/29/09.09/18$$I.18.38..6.18333.18.18/29" Potential IPs "29.17.29.18" "9.18.17.18" found in string "/37/28.07.38.28.18333/08.19/29.17.29.18//7..7/27.18.19-27.18.18999//5++9.18.17.18-39-18.18+3<.18..:.18.18" Potential IP "55.28.18.18" found in string "+55.28.18.18/17" Potential IP "09.17.18.18" found in string "/29-55,16.17+++00:.08.18.18.27-18.18+16.18-19.28-28333UUU....18333/18'';/18.18-19.18//7/18006.18//9.0799900@.18-07.18.19-08007.1800:.18-18.18.18/18@@@.17.19-18.18++@-18.27.17+3<.18.09.18-08.18117..7.07.1811=-29.19/09.17.18.18 @@.18" Potential IPs "29.18.27.18" "08.19.18.07" found in string "PLTE.28/29+16.18-27,16008.18.18.18/18.17/29.18.27.18,09-0800:.38.17.17.08/29-08.19.18.07-1:" Potential IP "09.26.17.18" found in string "-27/09.26.17.18 @@-18.18/27'';/08333....19.18.26.18" Potential IP "18.38.18.18" found in string "/37/08-18.27/18--