24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 28:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T453,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample f7f7be53e6b4… — Score 85/100 — Hybrid Analysis","description":"Malicious verdict for sample f7f7be53e6b4…. Threat score 85/100. 0/24 AV engines flagged this file. 2 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d"],"about":{"@type":"SoftwareApplication","name":"9GAG Funny GIF, Meme \u0026 Video v8.10.53 Premium Mod Apk {CracksHash}.apk","applicationCategory":["android"],"identifier":"f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d","additionalType":"Malicious sample"},"threatScore":85,"antivirusDetections":{"malicious":0,"total":24},"behavioralIndicators":{"malicious":2,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T27a8,"INSERT OR REPLACE INTO `WorkProgress` (`work_spec_id`,`progress`) VALUES (?,?)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.DD2$a.smali.DD2$a.smali, Indicator: "insert or replace into `workprogress` (`work_spec_id`,`progress`) values (?,?)"), "DELETE FROM workspec WHERE state IN (2, 3, 5) AND (last_enqueue_time + minimum_retention_duration) <" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.uC.smali.uC.smali, Indicator: "delete from workspec where state in (2, 3, 5) and (last_enqueue_time + minimum_retention_duration) <"), "SELECT work_spec_id FROM dependency WHERE prerequisite_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select work_spec_id from dependency where prerequisite_id=?"), "SELECT COUNT(*)=0 FROM dependency WHERE work_spec_id=? AND prerequisite_id IN (SELECT id FROM workspec WHERE state!=2)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select count(*)=0 from dependency where work_spec_id=? and prerequisite_id in (select id from workspec where state!=2)"), "SELECT COUNT(*)>0 FROM dependency WHERE prerequisite_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select count(*)>0 from dependency where prerequisite_id=?"), "UPDATE workspec SET run_attempt_count=run_attempt_count+1 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$r.smali.LD2$r.smali, Indicator: "update workspec set run_attempt_count=run_attempt_count+1 where id=?"), "UPDATE workspec SET state=? WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$m.smali.LD2$m.smali, Indicator: "update workspec set state=? where id=?"), "CREATE TABLE IF NOT EXISTS `Preference` (`key` TEXT NOT NULL, `long_value` INTEGER, PRIMARY KEY(`key`))" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.xD2.smali.xD2.smali, Indicator: "create table if not exists `preference` (`key` text not null, `long_value` integer, primary key(`key`))"), "UPDATE workspec SET required_network_type = 0 WHERE required_network_type IS NULL" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.F61.smali.F61.smali, Indicator: "update workspec set required_network_type = 0 where required_network_type is null"), "UPDATE workspec SET content_uri_triggers = x\'\' WHERE content_uri_triggers is NULL" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.F61.smali.F61.smali, Indicator: "update workspec set content_uri_triggers = x\'\' where content_uri_triggers is null"), "DELETE FROM SystemIdInfo WHERE work_spec_id IN (SELECT work_spec_id FROM SystemIdInfo LEFT JOIN WorkSpec ON work_spec_id = id WHERE WorkSpec.id IS NULL)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "delete from systemidinfo where work_spec_id in (select work_spec_id from systemidinfo left join workspec on work_spec_id = id where workspec.id is null)"), "CREATE TABLE IF NOT EXISTS `_new_SystemIdInfo` (\n `work_spec_id` TEXT NOT NULL, \n `generation` INTEGER NOT NULL DEFAULT 0, \n `system_id` INTEGER NOT NULL, \n PRIMARY KEY(`work_spec_id`, `generation`) \n FOREIGN KEY(`work_spec_id`) REFERENCES `WorkSpec`(`id`) \n ON UPDATE CASCADE ON DELETE CASCADE )" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "create table if not exists `_new_systemidinfo` (\n `work_spec_id` text not null, \n `generation` integer not null default 0, \n `system_id` integer not null, \n primary key(`work_spec_id`, `generation`) \n foreign key(`work_spec_id`) references `workspec`(`id`) \n on update cascade on delete cascade )"), "INSERT INTO `_new_SystemIdInfo` (`work_spec_id`,`system_id`) SELECT `work_spec_id` `system_id` FROM `SystemIdInfo`" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "insert into `_new_systemidinfo` (`work_spec_id`,`system_id`) select `work_spec_id` `system_id` from `systemidinfo`"), "UPDATE workspec SET next_schedule_time_override=? WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$b.smali.LD2$b.smali, Indicator: "update workspec set next_schedule_time_override=? where id=?"), "UPDATE workspec SET period_count = 1 WHERE last_enqueue_time <> 0 AND interval_duration <> 0" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.Fl.smali.Fl.smali, Indicator: "update workspec set period_count = 1 where last_enqueue_time <> 0 and interval_duration <> 0"), "INSERT OR IGNORE INTO `WorkSpec` (`id`,`state`,`worker_class_name`,`input_merger_class_name`,`input`,`output`,`initial_delay`,`interval_duration`,`flex_duration`,`run_attempt_count`,`backoff_policy`,`backoff_delay_duration`,`last_enqueue_time`,`minimum_retention_duration`,`schedule_requested_at`,`run_in_foreground`,`out_of_quota_policy`,`period_count`,`generation`,`next_schedule_time_override`,`next_schedule_time_override_generation`,`stop_reason`,`required_network_type`,`requires_charging`,`requires_device_idle`,`requires_battery_not_low`,`requires_storage_not_low`,`trigger_content_update_delay`,`trigger_max_content_delay`,`content_uri_triggers`) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$j.smali.LD2$j.smali, Indicator: "insert or ignore into `workspec` (`id`,`state`,`worker_class_name`,`input_merger_class_name`,`input`,`output`,`initial_delay`,`interval_duration`,`flex_duration`,`run_attempt_count`,`backoff_policy`,`backoff_delay_duration`,`last_enqueue_time`,`minimum_retention_duration`,`schedule_requested_at`,`run_in_foreground`,`out_of_quota_policy`,`period_count`,`generation`,`next_schedule_time_override`,`next_schedule_time_override_generation`,`stop_reason`,`required_network_type`,`requires_charging`,`requires_device_idle`,`requires_battery_not_low`,`requires_storage_not_low`,`trigger_content_update_delay`,`trigger_max_content_delay`,`content_uri_triggers`) values (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)"), "UPDATE workspec SET generation=generation+1 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$g.smali.LD2$g.smali, Indicator: "update workspec set generation=generation+1 where id=?"), "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, \'" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.iL1.smali.iL1.smali, Indicator: "insert or replace into room_master_table (id,identity_hash) values(42, \'") "UPDATE workspec SET run_attempt_count=0 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$a.smali.LD2$a.smali, Indicator: "update workspec set run_attempt_count=0 where id=?") "DELETE FROM worktag WHERE work_spec_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.QD2$b.smali.QD2$b.smali, Indicator: "delete from worktag where work_spec_id=?") "SELECT * FROM room_table_modification_log WHERE invalidated = 1;" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.PI0$f.smali.PI0$f.smali, Indicator: "select * from room_table_modification_log where invalidated = 1;") "INSERT OR REPLACE INTO `Preference` (`key`, `long_value`) VALUES (@key, @long_value)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.Pw1.smali.Pw1.smali, Indicator: "insert or replace into `preference` (`key`, `long_value`) values (@key, @long_value)"), "SELECT identity_hash FROM room_master_table WHERE id = 42 LIMIT 1" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.jL1.smali.jL1.smali, Indicator: "select identity_hash from room_master_table where id = 42 limit 1"), "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.jL1.smali.jL1.smali, Indicator: "create table if not exists room_master_table (id integer primary key,identity_hash text)"), "SELECT name FROM workname WHERE work_spec_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.AD2.smali.AD2.smali, Indicator: "select name from workname where work_spec_id=?")26:T27a8,"INSERT OR REPLACE INTO `WorkProgress` (`work_spec_id`,`progress`) VALUES (?,?)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.DD2$a.smali.DD2$a.smali, Indicator: "insert or replace into `workprogress` (`work_spec_id`,`progress`) values (?,?)"), "DELETE FROM workspec WHERE state IN (2, 3, 5) AND (last_enqueue_time + minimum_retention_duration) <" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.uC.smali.uC.smali, Indicator: "delete from workspec where state in (2, 3, 5) and (last_enqueue_time + minimum_retention_duration) <"), "SELECT work_spec_id FROM dependency WHERE prerequisite_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select work_spec_id from dependency where prerequisite_id=?"), "SELECT COUNT(*)=0 FROM dependency WHERE work_spec_id=? AND prerequisite_id IN (SELECT id FROM workspec WHERE state!=2)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select count(*)=0 from dependency where work_spec_id=? and prerequisite_id in (select id from workspec where state!=2)"), "SELECT COUNT(*)>0 FROM dependency WHERE prerequisite_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.CZ.smali.CZ.smali, Indicator: "select count(*)>0 from dependency where prerequisite_id=?"), "UPDATE workspec SET run_attempt_count=run_attempt_count+1 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$r.smali.LD2$r.smali, Indicator: "update workspec set run_attempt_count=run_attempt_count+1 where id=?"), "UPDATE workspec SET state=? WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$m.smali.LD2$m.smali, Indicator: "update workspec set state=? where id=?"), "CREATE TABLE IF NOT EXISTS `Preference` (`key` TEXT NOT NULL, `long_value` INTEGER, PRIMARY KEY(`key`))" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.xD2.smali.xD2.smali, Indicator: "create table if not exists `preference` (`key` text not null, `long_value` integer, primary key(`key`))"), "UPDATE workspec SET required_network_type = 0 WHERE required_network_type IS NULL" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.F61.smali.F61.smali, Indicator: "update workspec set required_network_type = 0 where required_network_type is null"), "UPDATE workspec SET content_uri_triggers = x\'\' WHERE content_uri_triggers is NULL" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.F61.smali.F61.smali, Indicator: "update workspec set content_uri_triggers = x\'\' where content_uri_triggers is null"), "DELETE FROM SystemIdInfo WHERE work_spec_id IN (SELECT work_spec_id FROM SystemIdInfo LEFT JOIN WorkSpec ON work_spec_id = id WHERE WorkSpec.id IS NULL)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "delete from systemidinfo where work_spec_id in (select work_spec_id from systemidinfo left join workspec on work_spec_id = id where workspec.id is null)"), "CREATE TABLE IF NOT EXISTS `_new_SystemIdInfo` (\n `work_spec_id` TEXT NOT NULL, \n `generation` INTEGER NOT NULL DEFAULT 0, \n `system_id` INTEGER NOT NULL, \n PRIMARY KEY(`work_spec_id`, `generation`) \n FOREIGN KEY(`work_spec_id`) REFERENCES `WorkSpec`(`id`) \n ON UPDATE CASCADE ON DELETE CASCADE )" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "create table if not exists `_new_systemidinfo` (\n `work_spec_id` text not null, \n `generation` integer not null default 0, \n `system_id` integer not null, \n primary key(`work_spec_id`, `generation`) \n foreign key(`work_spec_id`) references `workspec`(`id`) \n on update cascade on delete cascade )"), "INSERT INTO `_new_SystemIdInfo` (`work_spec_id`,`system_id`) SELECT `work_spec_id` `system_id` FROM `SystemIdInfo`" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.G61.smali.G61.smali, Indicator: "insert into `_new_systemidinfo` (`work_spec_id`,`system_id`) select `work_spec_id` `system_id` from `systemidinfo`"), "UPDATE workspec SET next_schedule_time_override=? WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$b.smali.LD2$b.smali, Indicator: "update workspec set next_schedule_time_override=? where id=?"), "UPDATE workspec SET period_count = 1 WHERE last_enqueue_time <> 0 AND interval_duration <> 0" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.Fl.smali.Fl.smali, Indicator: "update workspec set period_count = 1 where last_enqueue_time <> 0 and interval_duration <> 0"), "INSERT OR IGNORE INTO `WorkSpec` (`id`,`state`,`worker_class_name`,`input_merger_class_name`,`input`,`output`,`initial_delay`,`interval_duration`,`flex_duration`,`run_attempt_count`,`backoff_policy`,`backoff_delay_duration`,`last_enqueue_time`,`minimum_retention_duration`,`schedule_requested_at`,`run_in_foreground`,`out_of_quota_policy`,`period_count`,`generation`,`next_schedule_time_override`,`next_schedule_time_override_generation`,`stop_reason`,`required_network_type`,`requires_charging`,`requires_device_idle`,`requires_battery_not_low`,`requires_storage_not_low`,`trigger_content_update_delay`,`trigger_max_content_delay`,`content_uri_triggers`) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$j.smali.LD2$j.smali, Indicator: "insert or ignore into `workspec` (`id`,`state`,`worker_class_name`,`input_merger_class_name`,`input`,`output`,`initial_delay`,`interval_duration`,`flex_duration`,`run_attempt_count`,`backoff_policy`,`backoff_delay_duration`,`last_enqueue_time`,`minimum_retention_duration`,`schedule_requested_at`,`run_in_foreground`,`out_of_quota_policy`,`period_count`,`generation`,`next_schedule_time_override`,`next_schedule_time_override_generation`,`stop_reason`,`required_network_type`,`requires_charging`,`requires_device_idle`,`requires_battery_not_low`,`requires_storage_not_low`,`trigger_content_update_delay`,`trigger_max_content_delay`,`content_uri_triggers`) values (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)"), "UPDATE workspec SET generation=generation+1 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$g.smali.LD2$g.smali, Indicator: "update workspec set generation=generation+1 where id=?"), "INSERT OR REPLACE INTO room_master_table (id,identity_hash) VALUES(42, \'" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.iL1.smali.iL1.smali, Indicator: "insert or replace into room_master_table (id,identity_hash) values(42, \'") "UPDATE workspec SET run_attempt_count=0 WHERE id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.LD2$a.smali.LD2$a.smali, Indicator: "update workspec set run_attempt_count=0 where id=?") "DELETE FROM worktag WHERE work_spec_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.QD2$b.smali.QD2$b.smali, Indicator: "delete from worktag where work_spec_id=?") "SELECT * FROM room_table_modification_log WHERE invalidated = 1;" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.PI0$f.smali.PI0$f.smali, Indicator: "select * from room_table_modification_log where invalidated = 1;") "INSERT OR REPLACE INTO `Preference` (`key`, `long_value`) VALUES (@key, @long_value)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.Pw1.smali.Pw1.smali, Indicator: "insert or replace into `preference` (`key`, `long_value`) values (@key, @long_value)"), "SELECT identity_hash FROM room_master_table WHERE id = 42 LIMIT 1" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.jL1.smali.jL1.smali, Indicator: "select identity_hash from room_master_table where id = 42 limit 1"), "CREATE TABLE IF NOT EXISTS room_master_table (id INTEGER PRIMARY KEY,identity_hash TEXT)" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.jL1.smali.jL1.smali, Indicator: "create table if not exists room_master_table (id integer primary key,identity_hash text)"), "SELECT name FROM workname WHERE work_spec_id=?" (Source: .tmp.2cbb752a-43b1-47a9-aeef-e4b82da9a711.9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk.decoded.smali.AD2.smali.AD2.smali, Indicator: "select name from workname where work_spec_id=?")27:T3f7f,"libnative-imagetranscoder.so_1717870991045" has type "ELF 64-bit LSB shared object x86-64 version 1 (SYSV) dynamically linked BuildID[sha1]=710bcda157509455b642fc7f8e00bd8dc1418a5e stripped"- [targetUID: N/A] "libnative-imagetranscoder.so_1717870991047" has type "ELF 32-bit LSB shared object Intel 80386 version 1 (SYSV) dynamically linked BuildID[sha1]=8453e67dc3578671a99b1fe16ff183b79d10750b stripped"- [targetUID: N/A] "libnative-imagetranscoder.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked BuildID[sha1]=f35e1ecf6d21465a466e76144b2f3e6bbd569875 stripped"- [targetUID: N/A] "libnative-imagetranscoder.so_1717870991048" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked BuildID[sha1]=de4cd35f9e6abc2153e7de8425b5a220a41dcae7 stripped"- [targetUID: N/A] "libpl_droidsonroids_gif.so_1717870991047" has type "ELF 64-bit LSB shared object x86-64 version 1 (SYSV) dynamically linked BuildID[sha1]=bccb3df1d0d5222ae44ed66ca7ea6ea07f055623 stripped"- [targetUID: N/A] "builddef.lst" has type "ASCII text with very long lines"- [targetUID: N/A] "libpl_droidsonroids_gif.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked BuildID[sha1]=d76fa3371abe88b75908a21f96024058d789978a stripped"- [targetUID: N/A] "libnative-filters.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked BuildID[sha1]=69157c919753d0c9e22599b5de35446702e6e8fb stripped"- [targetUID: N/A] "libpl_droidsonroids_gif.so_1717870991048" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked BuildID[sha1]=6f4848bef5ffbc9bf24bf2094809c5a17e3bab12 stripped"- [targetUID: N/A] "libnative-filters.so_1717870991047" has type "ELF 32-bit LSB shared object Intel 80386 version 1 (SYSV) dynamically linked BuildID[sha1]=b652ea8db0a9fd1ac68ba66c82651c5eb557c330 stripped"- [targetUID: N/A] "libnative-filters.so_1717870991048" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked BuildID[sha1]=3028c47a341195cf5ce70f1dfc56a981a3e1aee7 stripped"- [targetUID: N/A] "isoparser-default.properties" has type "ASCII text"- [targetUID: N/A] "libimagepipeline.so_1717870991047" has type "ELF 64-bit LSB shared object x86-64 version 1 (SYSV) dynamically linked BuildID[sha1]=15a4c9f0b3a5f66f305add0fb565ade5aa730910 stripped"- [targetUID: N/A] "libimagepipeline.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked BuildID[sha1]=c12b008316d80547c976977577d7dade021f88f7 stripped"- [targetUID: N/A] "libimagepipeline.so_1717870991048" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked BuildID[sha1]=bc9dbeaf5e5161944ff8d4d214ca102973bcd9f6 stripped"- [targetUID: N/A] "field_mask.proto" has type "ASCII text"- [targetUID: N/A] "api.proto" has type "Java source ASCII text"- [targetUID: N/A] "timestamp.proto" has type "ASCII text"- [targetUID: N/A] "type.proto" has type "Java source ASCII text"- [targetUID: N/A] "any.proto" has type "ASCII text"- [targetUID: N/A] "duration.proto" has type "ASCII text"- [targetUID: N/A] "wrappers.proto" has type "ASCII text"- [targetUID: N/A] "struct.proto" has type "ASCII text"- [targetUID: N/A] "kotlinx-coroutines-core.kotlin_module" has type "data"- [targetUID: N/A] "empty.proto" has type "ASCII text"- [targetUID: N/A] "source_context.proto" has type "ASCII text"- [targetUID: N/A] "DebugProbesKt.bin" has type "compiled Java class data version 52.0 (Java 1.8)"- [targetUID: N/A] "ktor-client-core.kotlin_module" has type "data"- [targetUID: N/A] "ktor-utils.kotlin_module" has type "data"- [targetUID: N/A] "ktor-http.kotlin_module" has type "data"- [targetUID: N/A] "rxkotlin.properties" has type "ASCII text"- [targetUID: N/A] "kotlin-tooling-metadata.json" has type "JSON data"- [targetUID: N/A] "okhttp.kotlin_module" has type "data"- [targetUID: N/A] "ktor-client-auth.kotlin_module" has type "data"- [targetUID: N/A] "kotlinx-coroutines-reactive.kotlin_module" has type "data"- [targetUID: N/A] "ktor-serialization-kotlinx.kotlin_module" has type "data"- [targetUID: N/A] "version-control-info.textproto" has type "ASCII text"- [targetUID: N/A] "google_release.kotlin_module" has type "data"- [targetUID: N/A] "rxkotlin.kotlin_module" has type "data"- [targetUID: N/A] "io.ktor.client.HttpClientEngineContainer" has type "ASCII text"- [targetUID: N/A] "play-services-measurement-sdk-api.properties" has type "ASCII text"- [targetUID: N/A] "play-services-tagmanager-v4-impl.properties" has type "ASCII text"- [targetUID: N/A] "firebase-measurement-connector.properties" has type "ASCII text"- [targetUID: N/A] "firebase-installations-interop.properties" has type "ASCII text"- [targetUID: N/A] "play-services-measurement-impl.properties" has type "ASCII text"- [targetUID: N/A] "play-services-measurement-base.properties" has type "ASCII text"- [targetUID: N/A] "play-services-measurement-api.properties" has type "ASCII text"- [targetUID: N/A] "play-services-measurement-sdk.properties" has type "ASCII text"- [targetUID: N/A] "play-services-cloud-messaging.properties" has type "ASCII text"- [targetUID: N/A] "play-services-analytics-impl.properties" has type "ASCII text"- [targetUID: N/A] "play-services-auth-api-phone.properties" has type "ASCII text"- [targetUID: N/A] "play-services-ads-identifier.properties" has type "ASCII text"- [targetUID: N/A] "protolite-well-known-types.properties" has type "ASCII text"- [targetUID: N/A] "play-services-measurement.properties" has type "ASCII text"- [targetUID: N/A] "firebase-encoders-proto.properties" has type "ASCII text"- [targetUID: N/A] "play-services-analytics.properties" has type "ASCII text"- [targetUID: N/A] "play-services-auth-base.properties" has type "ASCII text"- [targetUID: N/A] "firebase-analytics-ktx.properties" has type "ASCII text"- [targetUID: N/A] "user-messaging-platform.properties" has type "ASCII text"- [targetUID: N/A] "play-services-ads-lite.properties" has type "ASCII text"- [targetUID: N/A] "facebook-core_release.kotlin_module" has type "data"- [targetUID: N/A] "firebase-installations.properties" has type "ASCII text"- [targetUID: N/A] "play-services-basement.properties" has type "ASCII text"- [targetUID: N/A] "play-services-ads-base.properties" has type "ASCII text"- [targetUID: N/A] "firebase-dynamic-links.properties" has type "ASCII text"- [targetUID: N/A] "firebase-encoders-json.properties" has type "ASCII text"- [targetUID: N/A] "firebase-datatransport.properties" has type "ASCII text"- [targetUID: N/A] "firebase-auth-interop.properties" has type "ASCII text"- [targetUID: N/A] "transport-backend-cct.properties" has type "ASCII text"- [targetUID: N/A] "firebase-annotations.properties" has type "ASCII text"- [targetUID: N/A] "play-services-cronet.properties" has type "ASCII text"- [targetUID: N/A] "firebase-crashlytics.properties" has type "ASCII text"- [targetUID: N/A] "firebase-iid-interop.properties" has type "ASCII text"- [targetUID: N/A] "play-services-appset.properties" has type "ASCII text"- [targetUID: N/A] "io.ktor.serialization.kotlinx.KotlinxSerializationExtensionProvider" has type "ASCII text"- [targetUID: N/A] "firebase-components.properties" has type "ASCII text"- [targetUID: N/A] "firebase-common-ktx.properties" has type "ASCII text"- [targetUID: N/A] "play-services-tasks.properties" has type "ASCII text"- [targetUID: N/A] "play-services-stats.properties" has type "ASCII text"- [targetUID: N/A] "play-services-base.properties" has type "ASCII text"- [targetUID: N/A] "firebase-analytics.properties" has type "ASCII text"- [targetUID: N/A] "firebase-messaging.properties" has type "ASCII text"- [targetUID: N/A] "google-ads_productionNormalRelease.kotlin_module" has type "data"- [targetUID: N/A] "play-services-auth.properties" has type "ASCII text"- [targetUID: N/A] "play-services-ads.properties" has type "ASCII text"- [targetUID: N/A] "firebase-encoders.properties" has type "ASCII text"- [targetUID: N/A] "play-services-pal.properties" has type "ASCII text"- [targetUID: N/A] "transport-runtime.properties" has type "ASCII text"- [targetUID: N/A] "interactivemedia.properties" has type "ASCII text"- [targetUID: N/A] "firebase-config.properties" has type "ASCII text"- [targetUID: N/A] "firebase-common.properties" has type "ASCII text"- [targetUID: N/A] "ktor-serialization-gson.kotlin_module" has type "data"- [targetUID: N/A] "androidx.arch.core_core-runtime.version" has type "ASCII text"- [targetUID: N/A] "firebase-perf.properties" has type "ASCII text"- [targetUID: N/A] "firebase-abt.properties" has type "ASCII text"- [targetUID: N/A] "firebase-iid.properties" has type "ASCII text"- [targetUID: N/A] "transport-api.properties" has type "ASCII text"- [targetUID: N/A] "billing-ktx.properties" has type "ASCII text"- [targetUID: N/A] "kotlinx-coroutines-play-services.kotlin_module" has type "data"- [targetUID: N/A] "kotlinx.coroutines.CoroutineExceptionHandler" has type "ASCII text"- [targetUID: N/A] "kotlinx.coroutines.internal.MainDispatcherFactory" has type "ASCII text"- [targetUID: N/A] "billing.properties" has type "ASCII text"- [targetUID: N/A] "tv-ads.properties" has type "ASCII text"- [targetUID: N/A] "ktor-events.kotlin_module" has type "data"- [targetUID: N/A] "retrofit.kotlin_module" has type "data"- [targetUID: N/A] "okhttp-logging-interceptor.kotlin_module" has type "data"- [targetUID: N/A] "core.properties" has type "ASCII text"- [targetUID: N/A] "xI" has type "ASCII text"- [targetUID: N/A] "version.txt" has type "ASCII text with no line terminators"- [targetUID: N/A] "androidx.webkit_webkit.version" has type "ASCII text"- [targetUID: N/A] "androidx.privacysandbox.ads_ads-adservices-java.version" has type "ASCII text"- [targetUID: N/A] "nf0" has type "ASCII text"- [targetUID: N/A] "androidx.core_core-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.media_media.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.runtime_runtime-livedata.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-service.version" has type "ASCII text"- [targetUID: N/A] "androidx.work_work-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.localbroadcastmanager_localbroadcastmanager.version" has type "ASCII text"- [targetUID: N/A] "androidx.customview_customview.version" has type "ASCII text"- [targetUID: N/A] "androidx.drawerlayout_drawerlayout.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-runtime-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.fragment_fragment-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.preference_preference-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.sqlite_sqlite.version" has type "ASCII text"- [targetUID: N/A] "androidx.room_room-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.recyclerview_recyclerview.version" has type "ASCII text"- [targetUID: N/A] "androidx.savedstate_savedstate.version" has type "ASCII text"- [targetUID: N/A] "androidx.appcompat_appcompat-resources.version" has type "ASCII text"- [targetUID: N/A] "androidx.emoji2_emoji2.version" has type "ASCII text"- [targetUID: N/A] "androidx.paging_paging-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.room_room-rxjava2.version" has type "ASCII text"- [targetUID: N/A] "kotlinx_coroutines_play_services.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "com.google.dagger_dagger.version" has type "ASCII text"- [targetUID: N/A] "VE2" has type "ASCII text"- [targetUID: N/A] "Bw" has type "ASCII text"- [targetUID: N/A] "androidx.privacysandbox.ads_ads-adservices.version" has type "ASCII text"- [targetUID: N/A] "androidx.profileinstaller_profileinstaller.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.runtime_runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.material_material-icons-core.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.ui_ui-unit.version" has type "ASCII text"- [targetUID: N/A] "androidx.asynclayoutinflater_asynclayoutinflater.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel-savedstate.version" has type "ASCII text"- [targetUID: N/A] "androidx.customview_customview-poolingcontainer.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-runtime-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.vectordrawable_vectordrawable.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.ui_ui-tooling.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-common.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-fragment.version" has type "ASCII text"- [targetUID: N/A] "androidx.legacy_legacy-support-core-ui.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-livedata-core-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.cardview_cardview.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-fragment-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.ui_ui-text.version" has type "ASCII text"- [targetUID: N/A] "androidx.cursoradapter_cursoradapter.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.animation_animation-core.version" has type "ASCII text"- [targetUID: N/A] "androidx.sqlite_sqlite-framework.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-livedata.version" has type "ASCII text"- [targetUID: N/A] "androidx.autofill_autofill.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.material_material-ripple.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.ui_ui-tooling-data.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.animation_animation.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel-compose.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-common-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.material_material-icons-extended.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-livedata-core.version" has type "ASCII text"- [targetUID: N/A] "androidx.startup_startup-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.preference_preference.version" has type "ASCII text"- [targetUID: N/A] "androidx.navigation_navigation-compose.version" has type "ASCII text"- [targetUID: N/A] "androidx.documentfile_documentfile.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.material_material.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.paging_paging-rxjava2.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel.version" has type "ASCII text"- [targetUID: N/A] "androidx.legacy_legacy-support-v4.version" has type "ASCII text"- [targetUID: N/A] "androidx.savedstate_savedstate-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.window_window.version" has type "ASCII text"- [targetUID: N/A] "androidx.coordinatorlayout_coordinatorlayout.version" has type "ASCII text"- [targetUID: N/A] "androidx.compose.runtime_runtime-saveable.version" has type "ASCII text"- [targetUID: N/A] "kotlinx_coroutines_android.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "kotlinx_coroutines_core.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "kotlinx_coroutines_reactive.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "kotlinx_coroutines_jdk8.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "kotlinx_coroutines_slf4j.version" has type "ASCII text with no line terminators"- [targetUID: N/A]1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":85,"unified_at_epoch_ms":1790401034984,"unified_at":"2026-09-26T05:37:14.984Z","metadata":{"hashes":{"sha256":"f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d","sha1":"6e8f8c5ad284c57db7cd3796b90f258dcf1126fd","md5":"510001d402f444e00c601b2c96ebaea0","sha512":"7387b0d78559050c941149a89f46f0bdd3d69a87ef16709fc46a4dd9effebd5e65b28c7b4ed9e1155cba0ae9539883a21e86ec64063ceb7f84433034c62271ea","ssdeep":"393216:yJyQCZ9Z676qZCe+9u+rD/wpvK83ithrR/+KxOpv5i4epThMrEK2ZIQwWf/JpOgX:yMQCbZaZCT9u2D/wdKZrttxON5iRcE35","ssdeep_chunks":["393216:yJyQCZ9","393216:JyQCZ9Z","393216:yQCZ9Z6","393216:QCZ9Z67","393216:CZ9Z676","393216:Z9Z676q","393216:9Z676qZ","393216:Z676qZC","393216:676qZCe","393216:76qZCe+","393216:6qZCe+9","393216:qZCe+9u","393216:ZCe+9u+","393216:Ce+9u+r","393216:e+9u+rD","393216:+9u+rD/","393216:9u+rD/w","393216:u+rD/wp","393216:+rD/wpv","393216:rD/wpvK","393216:D/wpvK8","393216:/wpvK83","393216:wpvK83i","393216:pvK83it","393216:vK83ith","393216:K83ithr","393216:83ithrR","393216:3ithrR/","393216:ithrR/+","393216:thrR/+K","393216:hrR/+Kx","393216:rR/+KxO","393216:R/+KxOp","393216:/+KxOpv","393216:+KxOpv5","393216:KxOpv5i","393216:xOpv5i4","393216:Opv5i4e","393216:pv5i4ep","393216:v5i4epT","393216:5i4epTh","393216:i4epThM","393216:4epThMr","393216:epThMrE","393216:pThMrEK","393216:ThMrEK2","393216:hMrEK2Z","393216:MrEK2ZI","393216:rEK2ZIQ","393216:EK2ZIQw","393216:K2ZIQwW","393216:2ZIQwWf","393216:ZIQwWf/","393216:IQwWf/J","393216:QwWf/Jp","393216:wWf/JpO","393216:Wf/JpOg","393216:f/JpOgX","786432:yJyQCZ9","786432:JyQCZ9Z","786432:yQCZ9Z6","786432:QCZ9Z67","786432:CZ9Z676","786432:Z9Z676q","786432:9Z676qZ","786432:Z676qZC","786432:676qZCe","786432:76qZCe+","786432:6qZCe+9","786432:qZCe+9u","786432:ZCe+9u+","786432:Ce+9u+r","786432:e+9u+rD","786432:+9u+rD/","786432:9u+rD/w","786432:u+rD/wp","786432:+rD/wpv","786432:rD/wpvK","786432:D/wpvK8","786432:/wpvK83","786432:wpvK83i","786432:pvK83it","786432:vK83ith","786432:K83ithr","786432:83ithrR","786432:3ithrR/","786432:ithrR/+","786432:thrR/+K","786432:hrR/+Kx","786432:rR/+KxO","786432:R/+KxOp","786432:/+KxOpv","786432:+KxOpv5","786432:KxOpv5i","786432:xOpv5i4","786432:Opv5i4e","786432:pv5i4ep","786432:v5i4epT","786432:5i4epTh","786432:i4epThM","786432:4epThMr","786432:epThMrE","786432:pThMrEK","786432:ThMrEK2","786432:hMrEK2Z","786432:MrEK2ZI","786432:rEK2ZIQ","786432:EK2ZIQw","786432:K2ZIQwW","786432:2ZIQwWf","786432:ZIQwWf/","786432:IQwWf/J","786432:QwWf/Jp","786432:wWf/JpO","786432:Wf/JpOg","786432:f/JpOgX","393216:yMQCbZa","393216:MQCbZaZ","393216:QCbZaZC","393216:CbZaZCT","393216:bZaZCT9","393216:ZaZCT9u","393216:aZCT9u2","393216:ZCT9u2D","393216:CT9u2D/","393216:T9u2D/w","393216:9u2D/wd","393216:u2D/wdK","393216:2D/wdKZ","393216:D/wdKZr","393216:/wdKZrt","393216:wdKZrtt","393216:dKZrttx","393216:KZrttxO","393216:ZrttxON","393216:rttxON5","393216:ttxON5i","393216:txON5iR","393216:xON5iRc","393216:ON5iRcE","393216:N5iRcE3","393216:5iRcE35"],"imphash":"Unknown"},"file_info":{"file_name":"9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk","file_type":["android"],"file_type_id":"apk","file_size":22432603,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1717870752000,"last_seen":1724851046000,"last_multi_scan":1724851046000}},"detections":{"summary":{"verdict":"malicious","score":85,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":24},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":7},"sandbox_signatures":{"informative_count":9,"suspicious_count":1,"malicious_count":2,"total":12},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cylance":{"name":"Cylance","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Execution","technique":"Broadcast Receivers","attack_id":"T1402","attack_id_wiki":"https://attack.mitre.org/techniques/T1402","identifiers":[{"type":"malicious","value":"Has the ability to execute code after reboot"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"informative","value":"Sample file has high entropy (likely encrypted/compressed content)"},{"type":"informative","value":"Shows ability to obfuscate file or information"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Collection","technique":"Data from Information Repositories","attack_id":"T1213","attack_id_wiki":"https://attack.mitre.org/techniques/T1213","identifiers":[{"type":"informative","value":"Contains SQL queries"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Collection","technique":"Data from Local System","attack_id":"T1005","attack_id_wiki":"https://attack.mitre.org/techniques/T1005","identifiers":[{"type":"informative","value":"May execute SQL queries"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]}],"sandbox_signatures":[{"level":"informative","category":"Cryptographic Related","name":"Sample file has high entropy (likely encrypted/compressed content)","description":"Sample file \"sample.bin\" has high entropy 7.826894589481042","origin":"Binary File","mitre_attack_id":"T1027","relevance":1,"id":"binary-71","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"Cryptographic Related","name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings\n Matched sigs: Sample file has high entropy (likely encrypted/compressed content)","origin":"Indicator Combinations","mitre_attack_id":"T1027","relevance":1,"id":"summary-28","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"General","name":"Contains SQL queries","description":"$25","origin":"File/Memory","mitre_attack_id":"T1213","relevance":2,"id":"string-16","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"file/memory contains long string with (Indicator: \"netflix.com\"; File: \"rxkotlin.properties\")","origin":"File/Memory","relevance":2,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"General","name":"May execute SQL queries","description":"$26","origin":"File/Memory","mitre_attack_id":"T1005","relevance":1,"id":"string-605","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"wF.IO\"\n Heuristic match: \"S).om\"\n Heuristic match: \"P@3!.ve\"\n Heuristic match: \"7#*.nf\"\n Heuristic match: \"^x.bW\"\n Pattern match: \"adsbynimbus.com/rta/v1\"\n Heuristic match: \"null cannot be cast to non-null type kotlin.Int\"\n Pattern match: \"https://c.amazon-adsystem.com/\"\n Pattern match: \"DiskCacheStrategy.DATA/DiskCacheStrategy.NONE\"\n Pattern match: \"https://prod.cm.publishers.advertising.a2z.com/logrecord/putlog\"\n Heuristic match: \"workerClass.name\"\n Pattern match: \"https://android.googlesource.com/toolchain/llvm-project\"\n Pattern match: \"https://developers.google.com/protocol-buffers///\"\n Pattern match: \"https://github.com/ReactiveX/RxKotlin.gitChange=32bfc21Branch=32bfc21489b563204a72158ae59dece1943f9d79Build-Host=travis-job-reactivex-rxkotlin-414553519.travisci.netBuild-Job=LOCALBuild-Number=LOCALBuild-Id=LOCALCreated-By=1.8.0_151-b12\"","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://c.amazon\"\n Found HTTPS url \"https://prod.cm.publishers.advertising.a2z.com\"","origin":"File/Memory","mitre_attack_id":"T1573","relevance":1,"id":"string-98","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"Found string \"HAEs)<_\" (Indicator: \"aes\"; File: \"9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk\")\n file/memory contains long string with (Indicator: \"base64\"; File: \"ktor-utils.kotlin_module\")","origin":"File/Memory","mitre_attack_id":"T1027","relevance":3,"id":"string-57","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"suspicious","category":"General","name":"Requires permissions that could be uesd for malicious intents","description":"Permission request for \"android.permission.INTERNET\"\n Permission request for \"android.permission.WRITE_EXTERNAL_STORAGE\"\n Permission request for \"android.permission.RECEIVE_BOOT_COMPLETED\"\n Permission request for \"android.permission.WAKE_LOCK\"\n Permission request for \"android.permission.CAMERA\"\n Permission request for \"android.permission.SYSTEM_ALERT_WINDOW\"","origin":"Static Parser","relevance":10,"id":"static-27","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"malicious","category":"Installation/Persistence","name":"Has the ability to execute code after reboot","description":"Permission request for \"android.permission.RECEIVE_BOOT_COMPLETED\"","origin":"Static Parser","mitre_attack_id":"T1402","relevance":10,"id":"static-28","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"level":"malicious","category":"Pattern Matching","name":"YARA signature match","description":"YARA signature \"Bolonyokte\" matched file \"sample.bin\" as \"UnknownDotNet RAT - Bolonyokte\" (Author: Jean-Philippe Teissier / @Jipe_)","origin":"YARA Signature","relevance":10,"id":"yara-0","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]}],"incidents":[{"name":"Evasive","details_count":1,"details":[{"detail":"Has the ability to execute code after reboot"}],"sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]}]},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":21,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Extracted Files"],"sandbox_reports":[{"id":"6664a09e9604bc627f01acdd","environment_id":200,"environment_description":"Android Static Analysis","state":"SUCCESS","verdict":"malicious","threat_score":85,"submit_name":"9GAG Funny GIF, Meme & Video v8.10.53 Premium Mod Apk {CracksHash}.apk","analysis_start_time":"2024-06-08T18:19:13+00:00","indicators_count":{"informative":9,"suspicious":1,"malicious":2},"tags":["Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"libnative-imagetranscoder.so_1717870991045","sha256":"43f6d403b3a1fd177ca15d30a32d0898bd9b1cb471b9299a73af146f9108ea02","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-imagetranscoder.so_1717870991047","sha256":"66fb050f7e9623e38a727a9f0244d3d0779ced7590e8a2548265f7ac850ad1af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-imagetranscoder.so","sha256":"23f566911569c0df554ebb496e2c8d888c537c4c595c1c9a842e74b8035e1328","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-imagetranscoder.so_1717870991048","sha256":"97080c62420489f90922f878fac7834db16b569401ada769eb554823a197eadc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libpl_droidsonroids_gif.so_1717870991047","sha256":"9110b04b427ce4a81490b61773b26a7f88659273ceee4e43a5466d274645ce46","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"builddef.lst","sha256":"8d49d815eca68ad4e44c7dbe714a0ac82fb19157e737d386d33bba7230b9cf6b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libpl_droidsonroids_gif.so","sha256":"c0a9f24e081f56a7499f3f1b4b7c642b17dabc01fefd119049b8c49cd105d0a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-filters.so","sha256":"6929cc841799c864ad684e723f066dd39952f5642f6750ebd294921c4a77e900","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libpl_droidsonroids_gif.so_1717870991048","sha256":"288c8ffd2304106924d36eeda7374f90049446192ac3c8de914cb19eb6d84734","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-filters.so_1717870991047","sha256":"4f7433c4cf1bfd9018133fafe77b34a8faefa472e6c38dc61f0e67c8cc269b62","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libnative-filters.so_1717870991048","sha256":"7c6c30064cb2e9c76ebd87fb557fd3e783aa5212b1e9367dda401acc70787dee","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"isoparser-default.properties","sha256":"b0b05f8807819edb065a449d40d38fd3e41042eb3ea92416daca9cd9014b6b11","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libimagepipeline.so_1717870991047","sha256":"22d5fa4ec9ba23d4eb5dcd239f4ebfee615e94d6902cefe1a214400b75060899","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libimagepipeline.so","sha256":"8d46eeb0e280e140dafd04c6c414ae2fa03e8469f26fb2464e218c4557d4a443","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"libimagepipeline.so_1717870991048","sha256":"231ae71716c70cae8a2acf83187b2e0e0178e521c16e841a42a4427ba3205058","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"field_mask.proto","sha256":"ed78e81d3f16618964b65692a02d229da6591bbec6eafc2ee4f052eaccf25b8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"api.proto","sha256":"4d050ed6172b20717022f081e26ddaaa9e534c58fc7b4cf1e88bde62ebed3c9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"timestamp.proto","sha256":"9489462cbd4eff7c013d10de596be38da1087c7824ea34357669bc21bf5c0800","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"type.proto","sha256":"18e4e0335dd6a5cd0d52530d818496c954ad95a69b304f1c8103d7b2ca2d509a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"any.proto","sha256":"d7c79a05a5c7fae89f0aff26d112e0b60f082fc7fc424e8910be99c86b656260","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]},{"name":"DebugProbesKt.bin","sha256":"86fecd0235d45839845081c1f91c9a58b40b0ae787f242bdba8f9150da45d0eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6664a09e9604bc627f01acdd"}]}],"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{"sandbox_job_ids":["6664a09e9604bc627f01acdd"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Sample f7f7be53e6b4… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample f7f7be53e6b4…. Threat score 85/100. 0/24 AV engines flagged this file. 2 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample f7f7be53e6b4… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample f7f7be53e6b4…. Threat score 85/100. 0/24 AV engines flagged this file. 2 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/f7f7be53e6b4d9df7ebd3effd9259b41c60c3d9191890517ae419e39defdae9d"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample f7f7be53e6b4… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample f7f7be53e6b4…. Threat score 85/100. 0/24 AV engines flagged this file. 2 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L28","11",{}]]