{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:VNTD262DCN7ZWHBSEGO472RVPP","short_pith_number":"pith:VNTD262D","canonical_record":{"source":{"id":"1903.04793","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-12T09:10:46Z","cross_cats_sorted":[],"title_canon_sha256":"ed7737c82cc84e03934ec02f4159d62a1b4438989e3f017e7435094d0a206383","abstract_canon_sha256":"cbce17b54ee3f111a33c5a72abf23c59339d77c62c50f9a332b963494247ff15"},"schema_version":"1.0"},"canonical_sha256":"ab663d7b43137f9b1c32219dcfea357bd98dec998945ff70b4f734d86f041544","source":{"kind":"arxiv","id":"1903.04793","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.04793","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"arxiv_version","alias_value":"1903.04793v1","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.04793","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"pith_short_12","alias_value":"VNTD262DCN7Z","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"VNTD262DCN7ZWHBS","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"VNTD262D","created_at":"2026-05-18T12:33:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:VNTD262DCN7ZWHBSEGO472RVPP","target":"record","payload":{"canonical_record":{"source":{"id":"1903.04793","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-12T09:10:46Z","cross_cats_sorted":[],"title_canon_sha256":"ed7737c82cc84e03934ec02f4159d62a1b4438989e3f017e7435094d0a206383","abstract_canon_sha256":"cbce17b54ee3f111a33c5a72abf23c59339d77c62c50f9a332b963494247ff15"},"schema_version":"1.0"},"canonical_sha256":"ab663d7b43137f9b1c32219dcfea357bd98dec998945ff70b4f734d86f041544","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:51:28.698386Z","signature_b64":"yn+Zuax9lZzBMqpwTCDtciJTgo4n99E+1JSHvtde36OWw/cnz8QbLFRN3zR6IjWV/znAFPvlFS6g6sOWNtPGBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ab663d7b43137f9b1c32219dcfea357bd98dec998945ff70b4f734d86f041544","last_reissued_at":"2026-05-17T23:51:28.697930Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:51:28.697930Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1903.04793","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:51:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pud+5wRM27JSN4B3lkl+5OU2pZucJ8ChU1bzMENjyrEatmCLtM2oG7jUOAm8zEE3B6BgnUt72CIty3RRLoiqDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-26T10:56:56.873005Z"},"content_sha256":"94ca693ef18448a17be7a68e3e3f503dca02c105588d3cecd7a761a752ae04f8","schema_version":"1.0","event_id":"sha256:94ca693ef18448a17be7a68e3e3f503dca02c105588d3cecd7a761a752ae04f8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:VNTD262DCN7ZWHBSEGO472RVPP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are cracked applications really free? An empirical analysis on Android devices","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Angela Ioannou, Konstantinos-Panagiotis Grammatikakis, Nicholas Kolokotronis, Stavros Shiaeles","submitted_at":"2019-03-12T09:10:46Z","abstract_excerpt":"Android is among the popular platforms running on millions of smart devices, like smartphones and tablets, whose widespread adoption is seen as an opportunity for spreading malware. Adding malicious payloads to cracked applications, often popular ones, downloaded from untrusted third markets is a prevalent way for achieving the aforementioned goal. In this paper, we compare 25 applications from the official and third-party application stores delivering cracked applications. The behavioral analysis of applications is carried out on three real devices equipped with different Android versions by "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.04793","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:51:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dJW9SO/59+YVMHRDK9VY5HuVMFVPjagthykiXSMt03ZvdRpmxOKnnI2KJTj/1UMlmhKHJlv5v22SJ0q5ye2MBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-26T10:56:56.873358Z"},"content_sha256":"278cea0ab2ac817eb8ae305aba03329a732cfd85aa3aedfe0fd0daea0fc80e00","schema_version":"1.0","event_id":"sha256:278cea0ab2ac817eb8ae305aba03329a732cfd85aa3aedfe0fd0daea0fc80e00"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VNTD262DCN7ZWHBSEGO472RVPP/bundle.json","state_url":"https://pith.science/pith/VNTD262DCN7ZWHBSEGO472RVPP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VNTD262DCN7ZWHBSEGO472RVPP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-26T10:56:56Z","links":{"resolver":"https://pith.science/pith/VNTD262DCN7ZWHBSEGO472RVPP","bundle":"https://pith.science/pith/VNTD262DCN7ZWHBSEGO472RVPP/bundle.json","state":"https://pith.science/pith/VNTD262DCN7ZWHBSEGO472RVPP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VNTD262DCN7ZWHBSEGO472RVPP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:VNTD262DCN7ZWHBSEGO472RVPP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cbce17b54ee3f111a33c5a72abf23c59339d77c62c50f9a332b963494247ff15","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-12T09:10:46Z","title_canon_sha256":"ed7737c82cc84e03934ec02f4159d62a1b4438989e3f017e7435094d0a206383"},"schema_version":"1.0","source":{"id":"1903.04793","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.04793","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"arxiv_version","alias_value":"1903.04793v1","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.04793","created_at":"2026-05-17T23:51:28Z"},{"alias_kind":"pith_short_12","alias_value":"VNTD262DCN7Z","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"VNTD262DCN7ZWHBS","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"VNTD262D","created_at":"2026-05-18T12:33:30Z"}],"graph_snapshots":[{"event_id":"sha256:278cea0ab2ac817eb8ae305aba03329a732cfd85aa3aedfe0fd0daea0fc80e00","target":"graph","created_at":"2026-05-17T23:51:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Android is among the popular platforms running on millions of smart devices, like smartphones and tablets, whose widespread adoption is seen as an opportunity for spreading malware. Adding malicious payloads to cracked applications, often popular ones, downloaded from untrusted third markets is a prevalent way for achieving the aforementioned goal. In this paper, we compare 25 applications from the official and third-party application stores delivering cracked applications. The behavioral analysis of applications is carried out on three real devices equipped with different Android versions by ","authors_text":"Angela Ioannou, Konstantinos-Panagiotis Grammatikakis, Nicholas Kolokotronis, Stavros Shiaeles","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-12T09:10:46Z","title":"Are cracked applications really free? An empirical analysis on Android devices"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.04793","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94ca693ef18448a17be7a68e3e3f503dca02c105588d3cecd7a761a752ae04f8","target":"record","created_at":"2026-05-17T23:51:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cbce17b54ee3f111a33c5a72abf23c59339d77c62c50f9a332b963494247ff15","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-12T09:10:46Z","title_canon_sha256":"ed7737c82cc84e03934ec02f4159d62a1b4438989e3f017e7435094d0a206383"},"schema_version":"1.0","source":{"id":"1903.04793","kind":"arxiv","version":1}},"canonical_sha256":"ab663d7b43137f9b1c32219dcfea357bd98dec998945ff70b4f734d86f041544","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ab663d7b43137f9b1c32219dcfea357bd98dec998945ff70b4f734d86f041544","first_computed_at":"2026-05-17T23:51:28.697930Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:51:28.697930Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yn+Zuax9lZzBMqpwTCDtciJTgo4n99E+1JSHvtde36OWw/cnz8QbLFRN3zR6IjWV/znAFPvlFS6g6sOWNtPGBA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:51:28.698386Z","signed_message":"canonical_sha256_bytes"},"source_id":"1903.04793","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94ca693ef18448a17be7a68e3e3f503dca02c105588d3cecd7a761a752ae04f8","sha256:278cea0ab2ac817eb8ae305aba03329a732cfd85aa3aedfe0fd0daea0fc80e00"],"state_sha256":"3ee28a8cc858515bb72807bd60d9140474b08baa3c4923d96a7223c2e89b1f9b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UBnkpKP8EWSnfLPoM96AABTAxnaaDCFD5+SFmb2hcaHcGQKTu6xqsUc4KBEGQG1BtK9hqSG6S9RH7/npX/coCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-26T10:56:56.875190Z","bundle_sha256":"cfcc948fceefb002d54844071c15c116e94de7a39cb72ba6a6fe6acc7f16d331"}}