Is LastWave-v4.2.2-universal.apk safe?
No antivirus engine detected malware, and one sandbox found no malicious outcome, although the observed direct-IP traffic lacks a complete reputation check.
All 75 antivirus engines were free of detections, including 17 tier-1 engines, and the completed sandbox run produced no malicious verdict or offensive behavior. Direct connections to ten IP addresses remain a caution because their reputation was not checked, and one extracted child is still unclassified.
0a1073c90b2a609f09…762432959af357Recommended next actions
Before installing
Install it only from Google Play, the developer's official store, or another source you independently trust.
If you already installed it
Keep normal device protection enabled and stop if the file behaves unexpectedly.
Intelligence
The saved assessment, checked against the scan evidence and recorded coverage.
The reasoning behind this verdict
This section explains the evidence supporting the verdict and keeps conflicting or missing signals visible.
All 75 antivirus engines were free of detections, including 17 tier-1 engines, and the completed sandbox run produced no malicious verdict or offensive behavior. Direct connections to ten IP addresses remain a caution because their reputation was not checked, and one extracted child is still unclassified.
The APK received no malicious or suspicious detections from any of 75 engines, with all 17 reporting tier-1 engines remaining silent. One completed sandbox run recorded three benign-common techniques, no offensive techniques, and no malicious outcome. No malicious child, researcher rule match, or known-malware intelligence hit corroborates a threat. The main concern is direct-IP communication to ten addresses without recorded domains, but that heuristic alone does not establish command-and-control. Because contacted-host reputation was not checked or saved and the extracted child is unclassified, some residual uncertainty remains.
What We Detected
None of 75 antivirus engines flagged the APK, including 17 tier-1 engines. Research intelligence produced no MalwareBazaar, CIRCL, or YARAify match.
Threat Behavior
One completed sandbox run recorded no offensive techniques, persistence indicators, or malicious outcome. It did contact ten external IP addresses without recorded application domains, causing the DirectIpC2 heuristic to fire; however, no complete host-reputation result is available. One extracted child was inspected and was not identified as malicious, but it remains unclassified.
What To Do Now
Install only if the APK came from the developer's official release channel, and keep Android security protections enabled. If it was obtained from an unofficial mirror or requested unusual permissions, verify the hash with the developer before opening it.
Where this verdict could be wrong3 caveats
- MalwareTips.Synth.DirectIpC2 fired because the run contacted 10 IP addresses without recorded application domains; host reputation was not checked or saved.
- The APK was first submitted 1 day ago, so it has a short observation history despite 37 submitters and 39 submissions.
- The extracted child 3d62eb1f88e2d6634a55f39902aae59bd33d9d260dfe42ed6a7027c5b2633edb remains unclassified.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/75 antivirus engines reported malicious or suspicious results
- 17 tier-1 engines reported no detection
- One sandbox produced no malicious verdict and no offensive techniques
- No malicious dropped child was identified
- No YARAify, CIRCL, or MalwareBazaar hit was present
- Observed direct connections to 10 external IP addresses without recorded application domains
- No complete reputation check is available for contacted hosts
- First submitted only 1 day ago
- One extracted child remains unclassified
- APK includes reflection and native ELF content
Use the APK only when it came from the developer's official distribution channel, and keep endpoint and Android protections enabled. Recheck it if the app requests permissions unrelated to its stated purpose.
Coverage & freshness
Complete means the check returned a usable result. It does not mean the file is safe.
Antivirus
Complete0 of 75 engines flagged the file.
Sandbox
Complete1 isolated runtime environment contributed observations.
Network
Partial10 runtime contacts were observed without a completed reputation cross-check.
YARA
Complete1 signature or behavior rule matched.
External intel
Complete3 of 3 independent reference sources completed.
Behavior
Plain-English impact first, then the observed runtime evidence.
Runtime flight recorder
Capture complete- 1isolated sandbox run
- 3MITRE ATT&CK techniques
- 0spawned processes
- 10network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was detonated in 1 sandbox and its runtime behaviour was observed.
Adversary techniques mapped to the MITRE ATT&CK framework.
- 172.67.151.52
- 173.194.194.94
- 173.194.193.138
- 104.21.64.137
- 173.194.206.106
- 172.217.112.4
- 142.251.183.190
- 172.217.115.4
- 142.250.125.102
- 142.251.150.119
Files this sample writes at runtime
This file drops 1 child at runtime. None are currently flagged malicious in our cache.
- 3d62eb1f88e2d6634a55…633edbNever scannednever seen before
Detection & Forensics
Consensus, attribution, signatures, code structure, prevalence, and identity.
Evidence integrity
Chain of custody for the facts preserved in this report.
- 1rule hit recorded
- 0 / 75engines flagged
- 37sources in submission history
Why these facts are shown
Each statement identifies whether it was directly recorded or derived from saved scan facts.
- 01
0 of 75 antivirus engines flagged the file.
Verdict inputView chapterProvenanceObservedSourceAntivirus analysisObserved at - 02
The hash has been submitted 39 times from 37 sources.
ProvenanceDerivedSourceSaved report factsObserved at - 03
Scanned file: LastWave-v4.2.2-universal.apk — 0a1073c90b2a609f0978515ef9a620c0d8985dfb2d9962a121762432959af357
ProvenanceObservedSourceUploaded fileObserved at - 04
Dropped file: 3d62eb1f88e2d6634a55f39902aae59bd33d9d260dfe42ed6a7027c5b2633edb — No child-file verdict was available.
ProvenanceDerivedSourceDropped-file analysisObserved at - 05
Contacted host: 172.67.151.52 — Contact observed during runtime.
ProvenanceObservedSourceIsolated runtime analysisObserved at - 06
Contacted host: 173.194.194.94 — Contact observed during runtime.
ProvenanceObservedSourceIsolated runtime analysisObserved at
Detection sources at a glance
The available sources did not agree on a named threat category.
MalwareBazaar, YARAify, and CIRCL hashlookup completed and returned no entries for this hash.
Signatures and behavior heuristics
Behavioral heuristics matched patterns associated with malware. Corroborating evidence determines how much weight they carry.
The sample contacted an external IP address directly and no application domain was recorded. Direct-IP traffic also occurs in legitimate installers and infrastructure, so this is supporting context only and requires corroboration from host reputation and other runtime evidence.
Evidence172.67.151.52 · 173.194.194.94 · 173.194.193.138
0 of 75 engines flagged this file
View all 75 engine results
PE structure
Not applicablePE structure analysis applies to Windows executable formats, not this file type.
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Fingerprint and provenance
- File name
- LastWave-v4.2.2-universal.apk
- Format
- Android
- Code signing
- Not applicable to this file type
- Size
- 22.5 MB
- Last analyzed
- Sep 28, 2026, 6:00 PM UTC
0a1073c90b2a609f0978515ef9a620c0d8985dfb2d9962a121762432959af357Safety & FAQ
Complete recovery guidance and answers for the next decision.
What to do now
This file appears low risk based on the evidence available now.
- Recovery step 01
Install it only from Google Play, the developer's official store, or another source you independently trust.
- Recovery step 02
A clean result reduces known risk, but it cannot guarantee that every new or targeted threat has been detected.
- Recovery step 03
Keep your antivirus and Windows updates switched on so you stay protected.
Safety FAQ
Direct answers grounded in the saved verdict and evidence in this report.
Is LastWave-v4.2.2-universal.apk safe?
What is LastWave-v4.2.2-universal.apk?
How many antivirus engines detected LastWave-v4.2.2-universal.apk?
What is the SHA-256 hash of LastWave-v4.2.2-universal.apk?
Is it safe to install LastWave-v4.2.2-universal.apk?
How up to date is this analysis of LastWave-v4.2.2-universal.apk?
Community
Member reviews and reports for this exact file hash.