| URL: | https://mxltv.app/download/ |
| Full analysis: | https://app.any.run/tasks/1f105a3d-e4fb-4f18-a0be-096c66bbd4d6 |
| Verdict: | Malicious activity |
| Threats: | Spyware is a stealth form of malware whose primary objective is to gather sensitive information, such as personal data, login credentials, and financial details, by monitoring user activities and exploiting system vulnerabilities. Spyware operates secretly in the background, evading detection while transmitting collected data to cybercriminals, who can then use it for malicious purposes like identity theft, financial fraud, or espionage. |
| Analysis date: | February 20, 2026, 15:08:24 |
| OS: | Android 14 |
| Tags: | |
| Indicators: | |
| MD5: | 7BCAD54D654467CA91EFBB4273365FE7 |
| SHA1: | 9A0883A00F706114410BBF97405B3CEBCD46A24B |
| SHA256: | C60B3CD2D36BD98432B2F09A5288AA164501675F44A2BB11132B36B721F62FE7 |
| SSDEEP: | 3:N8yRkCD9kn:2yycC |
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 3959 | <pre-initialized> | /system/bin/app_process64 | app_process64 | |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4015 | org.chromium.chrome_zygote | /system/bin/app_process64 | — | app_process64 |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4036 | org.chromium.chrome_zygote | /system/bin/app_process64 | — | app_process64 |
User: u0_a72 Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4052 | com.android.traceur | /system/bin/app_process64 | — | app_process64 |
User: u0_a54 Integrity Level: UNKNOWN Exit code: 512 | ||||
| 4060 | org.chromium.chrome:privileged_process0 | /system/bin/app_process64 | — | app_process64 |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4082 | com.android.adservices.api | /system/bin/app_process64 | — | app_process64 |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4141 | org.chromium.chrome_zygote | /system/bin/app_process64 | — | app_process64 |
User: u0_a72 Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4167 | com.android.providers.partnerbookmarks | /system/bin/app_process64 | — | app_process64 |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4231 | org.chromium.chrome_zygote | /system/bin/app_process64 | — | app_process64 |
User: u0_a72 Integrity Level: UNKNOWN Exit code: 0 | ||||
| 4251 | org.chromium.chrome_zygote | /system/bin/app_process64 | — | app_process64 |
User: u0_a72 Integrity Level: UNKNOWN Exit code: 0 | ||||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 4231 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.7xWo9H/list.pb | binary | |
MD5:— | SHA256:— | |||
| 4231 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.7xWo9H/manifest.json | text | |
MD5:— | SHA256:— | |||
| 4231 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.7xWo9H/LICENSE | binary | |
MD5:— | SHA256:— | |||
| 4231 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.7xWo9H/_metadata/verified_contents.json | text | |
MD5:— | SHA256:— | |||
| 4231 | app_process64 | /data/data/org.chromium.chrome/app_chrome/component_crx_cache/cab4d1f0a6a2a1afecae808a520f6690dd2b9d58bf54762877f2dc9715d55461 | binary | |
MD5:— | SHA256:— | |||
| 4251 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.xzXInx/privacy-sandbox-attestations.dat | binary | |
MD5:— | SHA256:— | |||
| 4251 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.xzXInx/manifest.json | text | |
MD5:— | SHA256:— | |||
| 4251 | app_process64 | /data/data/org.chromium.chrome/app_chrome/component_crx_cache/38c89b12bb20a8f2751c9c7cd2e31c173a47af08c115e1ecccc2f5151a2cf2c6 | binary | |
MD5:— | SHA256:— | |||
| 4251 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.xzXInx/_metadata/verified_contents.json | text | |
MD5:— | SHA256:— | |||
| 4270 | app_process64 | /data/data/org.chromium.chrome/cache/.org.chromium.Chromium.QCz9PA/decoded_xz | binary | |
MD5:— | SHA256:— | |||
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
3959 | app_process64 | OPTIONS | 200 | 35.190.80.1:443 | https://a.nel.cloudflare.com/report/v4?s=YibVZnLLtolfpJkGwKKwQXTlEy8WGoO01JPORdLnrHskRkn88isZluHR4PKZuS4bsXHRILjjM5YGHXthH3em4MwXxh%2BvimmFEA%3D%3D | unknown | — | — | unknown |
3959 | app_process64 | GET | 403 | 172.240.253.132:443 | https://pl28752009.effectivegatecpm.com/444578ef4081ce37a8c5fbee395a8776/invoke.js | unknown | — | — | unknown |
1921 | app_process64 | GET | 204 | 142.251.208.4:443 | https://www.google.com/generate_204 | unknown | — | — | whitelisted |
3959 | app_process64 | GET | 403 | 172.240.108.76:443 | https://www.highperformanceformat.com/58294a8f74ea5a48faeee2c05252f03b/invoke.js | unknown | — | — | unknown |
3959 | app_process64 | POST | 204 | 216.239.32.36:443 | https://region1.google-analytics.com/g/collect?v=2&tid=G-3DRC0B0VWW>m=45Pe62i1v9241798301za200zd9241798301&_p=1771600155503&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&gdid=dZTNiMT&cid=1533975148.1771600156&ul=en-us&sr=1024x576&uaa=&uab=&uafvl=Chromium%3B137.0.7122.0%7CNot%252FA)Brand%3B24.0.0.0&uamb=1&uam=Realme_X2_Pro&uap=Android&uapv=14.0.0&uaw=0&are=1&frm=0&pscdl=&_s=1&tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~115938465~115938468~117455676~117455678&sid=1771600155&sct=1&seg=0&dl=https%3A%2F%2Fmxltv.app%2Fdownload%2F&dt=Descargar%20MXL%20TV%20APK%20Gratis%20-%20%C3%9Altima%20Versi%C3%B3n%203.1.1%20para%20Android%20(2026)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=45218 | unknown | — | — | unknown |
3959 | app_process64 | POST | 204 | 216.239.32.36:443 | https://region1.google-analytics.com/g/collect?v=2&tid=G-3DRC0B0VWW>m=45Pe62i1v9241798301za200zd9241798301&_p=1771600155503&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&gdid=dZTNiMT&cid=1533975148.1771600156&ul=en-us&sr=1024x576&uaa=&uab=&uafvl=Chromium%3B137.0.7122.0%7CNot%252FA)Brand%3B24.0.0.0&uamb=1&uam=Realme_X2_Pro&uap=Android&uapv=14.0.0&uaw=0&are=1&frm=0&pscdl=&_eu=AAAAAAQ&_s=2&tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~115938465~115938468~117455676~117455678&sid=1771600155&sct=1&seg=0&dl=https%3A%2F%2Fmxltv.app%2Fdownload%2F&dt=Descargar%20MXL%20TV%20APK%20Gratis%20-%20%C3%9Altima%20Versi%C3%B3n%203.1.1%20para%20Android%20(2026)&en=user_engagement&_et=5474&tfd=50732 | unknown | — | — | unknown |
— | — | GET | 204 | 142.251.208.4:80 | http://www.google.com/gen_204 | unknown | — | — | whitelisted |
3959 | app_process64 | GET | 200 | 142.251.141.142:80 | http://clients2.google.com/time/1/current?cup2key=9:J1b2pFTYHWZOSF4tTfBU3zyRaNf_B0r5DprNNv5rrIE&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | unknown | — | — | whitelisted |
3959 | app_process64 | POST | 200 | 142.251.127.84:443 | https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&laf=b64bin&json=standard | unknown | — | — | whitelisted |
3959 | app_process64 | POST | 200 | 35.190.80.1:443 | https://a.nel.cloudflare.com/report/v4?s=YibVZnLLtolfpJkGwKKwQXTlEy8WGoO01JPORdLnrHskRkn88isZluHR4PKZuS4bsXHRILjjM5YGHXthH3em4MwXxh%2BvimmFEA%3D%3D | unknown | — | — | unknown |
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 142.251.208.4:80 | www.google.com | GOOGLE | US | whitelisted |
452 | mdnsd | 224.0.0.251:5353 | — | — | — | whitelisted |
— | — | 142.251.208.4:443 | www.google.com | GOOGLE | US | whitelisted |
— | — | 142.250.186.67:80 | connectivitycheck.gstatic.com | GOOGLE | US | whitelisted |
3959 | app_process64 | 142.251.141.142:80 | clients2.google.com | GOOGLE | US | whitelisted |
3959 | app_process64 | 172.67.173.126:443 | mxltv.app | CLOUDFLARENET | US | whitelisted |
3959 | app_process64 | 142.251.127.84:443 | accounts.google.com | GOOGLE | US | whitelisted |
3959 | app_process64 | 142.251.208.4:443 | www.google.com | GOOGLE | US | whitelisted |
3959 | app_process64 | 172.240.253.132:443 | pl28752009.effectivegatecpm.com | SERVERS-COM | US | whitelisted |
3959 | app_process64 | 35.190.80.1:443 | a.nel.cloudflare.com | GOOGLE-CLOUD-PLATFORM | US | whitelisted |
Domain | IP | Reputation |
|---|---|---|
www.google.com |
| whitelisted |
clients2.google.com |
| whitelisted |
mxltv.app |
| unknown |
accounts.google.com |
| whitelisted |
www.googletagmanager.com |
| whitelisted |
fonts.googleapis.com |
| whitelisted |
maps.googleapis.com |
| whitelisted |
ws.sharethis.com |
| whitelisted |
platform-api.sharethis.com |
| whitelisted |
maps.google.com |
| whitelisted |
PID | Process | Class | Message |
|---|---|---|---|
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] BootstrapCDN (stackpath .bootstrapcdn .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] BootstrapCDN (stackpath .bootstrapcdn .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] BootstrapCDN (maxcdn .bootstrapcdn .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] BootstrapCDN (maxcdn .bootstrapcdn .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] Microsoft Ajax CDN (ajax .aspnetcdn .com) |
3959 | app_process64 | Not Suspicious Traffic | INFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com) |