Malware Analysis Report

2024-09-09 16:23

Sample ID 240610-q3kvgsxhja
Target e5af8e705e079d28f795cf490a66f74415699c9674833e2524eb746004d56a6b
SHA256 e5af8e705e079d28f795cf490a66f74415699c9674833e2524eb746004d56a6b
Tags
banker collection credential_access discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e5af8e705e079d28f795cf490a66f74415699c9674833e2524eb746004d56a6b

Threat Level: Likely malicious

The file e5af8e705e079d28f795cf490a66f74415699c9674833e2524eb746004d56a6b was found to be: Likely malicious.

Malicious Activity Summary

banker collection credential_access discovery evasion execution impact persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests dangerous framework permissions

Queries information about active data network

Acquires the wake lock

Checks the application is allowed to request package installs through the package installer

Queries the mobile country code (MCC)

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-10 13:47

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 13:47

Reported

2024-06-10 13:53

Platform

android-x64-20240603-en

Max time kernel

322s

Max time network

334s

Command Line

com.uptodown

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks the application is allowed to request package installs through the package installer

evasion
Description Indicator Process Target
Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.uptodown

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.180.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.212.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 172.217.169.35:443 firebase-settings.crashlytics.com tcp
GB 172.217.169.35:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 secure.uptodown.com udp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 img.uptodown.io udp
US 104.21.78.215:443 img.uptodown.io tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
GB 142.250.200.2:443 tcp
GB 172.217.169.78:443 tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 img.utdstc.com udp
US 151.101.3.52:443 img.utdstc.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 151.101.3.52:443 img.utdstc.com tcp
US 1.1.1.1:53 www.youtube.com udp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 static.doubleclick.net udp
GB 216.58.201.102:443 static.doubleclick.net tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 jnn-pa.googleapis.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 i.ytimg.com udp
US 1.1.1.1:53 yt3.ggpht.com udp
GB 172.217.16.225:443 yt3.ggpht.com tcp
GB 216.58.212.214:443 i.ytimg.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
GB 142.250.180.10:443 jnn-pa.googleapis.com tcp
GB 216.58.204.78:443 www.youtube.com tcp
GB 142.250.200.35:443 tcp

Files

/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 b33607b2b65596227bdd63bf3a2f7a5f
SHA1 57acbef088f64e87a428a7be6be2ba8fbf24fcd5
SHA256 f21134afbc4ef7255fb394ee1dc66b372885c95221334dbbac3fc53fc47c8e75
SHA512 42d4b687f0044959196ac4af68a3f4162d7eff22c5d372f2f2cbb1c91680e27d5af27cd366cb619995a27e5a9bf9d0ed3c793dc29b5b02433e143eb13009fc15

/data/data/com.uptodown/databases/com.google.android.datatransport.events

MD5 924cfcf854a20644ec4f6b1ccdebd3c4
SHA1 b568afebd2909884272f0167738bfd43c517086c
SHA256 0c60bcb8c8f1617edcc81293e7c287c52dbeb77cc9fac0004c73ff6de5a11adc
SHA512 b8eea2e95fc57f7ee7b5efd5740edd3893d77f94d94865685291a2eb4500bc135773443959baa4918ed26c8beda15e2ce43f6e0a64d3d1eae571d5653dcb6f43

/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 210fce44dd7420802fcf3d0b2f43bd3d
SHA1 d10a5b85cf38582881cc2803faeb1342e484a826
SHA256 91aa780af0e0eb466b1ec835207a4fb4ee3a11a9ee0cb49da2ce1c82e01b38e1
SHA512 a3a23898bb96eb181b39ebc44b68fa490037d8d72b6e7db229ce8e2304369542c0dd8ac3965e861f87586a8ea8100cd56f1c2ed147a318089297065f5c142de6

/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 2c1ed410ce4f602286070e89de157e8a
SHA1 79b44f512b5e14e86fd15f5881876cc0796061d6
SHA256 7482a72b81a7a180d0ce178de837617ce8363f246fde4bee7767e3eae47fc352
SHA512 78194eaf4e887e02c6509d2accc319aa84e3f7ec556d8347b2e766d26cf35f2f36f1c87f906e42757fb2e9bd341fc37605d0086ec8853be0cd0e66535d3ba6fb

/data/data/com.uptodown/files/PersistedInstallation8825365191962747849tmp

MD5 26cea7e37dbdd8a403956223efe4d117
SHA1 6e29ded4d70768a22ac0a6cb71cb65ebb1f60560
SHA256 3c21dce64ea487b33fc70bf696027cc7cbc96329b48372270827723c5472fce9
SHA512 a7eed2c120d1034874f746040a11b61ee3b84af57b7aefdc9205e904f33fd7485cf82065019cd47854009a8bf9b96a98b3c7925245a3c1a887d18dee9fa71b9b

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F1039300011392E47C72E07FF2/report

MD5 85c88a46cbfdf45b810564ade791149d
SHA1 d64bf78680779a1d8df4b829c24d1092201b74cb
SHA256 12582f5bea8d5b33f94caa7592c67eb454f833a5657fefa740942dd64d8a7c05
SHA512 2b782f7f29c084d70a31e74f7487abfceb13c218cd7cad8744b2ff76b0473b857802cffec5538bccbe1d9a63b7192d53bac3f24712e72009a978f6e12ebb6d26

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

MD5 be25068c6c8e5c32c26ee457e7fb750b
SHA1 2ac2fbef25949d07849835c099a272157e711370
SHA256 18be62faf7707c78596b0cc0ef563f0867b5698a1f7e2b3cd74030839569ebbc
SHA512 e61959d8e7a3681beb619c231d1103d4f768ca68f690520452efbfa264f7e1c3a87feb26d39584cdd1542ee7664f700cd00ca4f54ad529713bb8eb3a81d8ab1d

/data/data/com.uptodown/no_backup/androidx.work.workdb-journal

MD5 00b14a36f250534fef10eeafc0edb8e0
SHA1 deafbb32e89351cb7c2ec5348c40d1646419cc6f
SHA256 016757b6eb14c814268a9d083da9466049692a1086c3b1e481a95ebd2ecb218f
SHA512 0b79f7e6839e594ca8d7a15fe1cb66ba9216ff62762da7c2b39f8f7b2c651a7a77a7c7a4c6a5ed69c382ae181aed92844cbe3db6c344876b5d38cc2bce2760c6

/data/data/com.uptodown/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.uptodown/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 3c54c2e22d98ac68b60f9e7bccd86d76
SHA1 a4ccc7cd613b6bcfdc9c59f8cbfe3c4c2e10787c
SHA256 2228391c8c02e3929b047bd1fba0635faa8ca0e14631e633cf562508970e897e
SHA512 e29dea20c1f33596d0c8186a9b46ff26f48b9160282f447826fc9de4758a5b007049da5d71d5bca99b1ec2cdf2f3ff31b3f3dfed71b99122d9bf06b45be800a9

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 40f7ba5cabc75a1a8c7078414b61c067
SHA1 66bffe75ee7b02d6454f5177070e986d83590dc8
SHA256 43a6bd962c37767bf455988e3bacf603a016f42c7507b584047a81a0cf50d4d5
SHA512 732b058ab2267bc76f9cc87ef6657184237a3601be16db2e68ebb3258e1ed72ccbbf887669b85273c2ce2c5dd42b61472132455759656fe1eb96cfe165f4f6d3

/data/data/com.uptodown/databases/Uptodown.db

MD5 98736a6e7691f4e96ccf2bdc55dd9aaa
SHA1 c2d124228649a4c3245dcfab558626cf471145f2
SHA256 91f312ec1e8e2bcb26f7676b5f851a7406a0951a229343aedc7058ecd51abe8e
SHA512 1b686ac7f59852e3bf28887d269b748611429f08f35e8d9dec9af738ab26a1bcb28064ae1aa39e30db35a637a7bbf8aa6987f3ee2a40664a28ef75d5fec18202

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F1039300011392E47C72E07FF2/internal-keys

MD5 be6852b23c0e706ee578e4806a4eac97
SHA1 52f5fda97480eab2b4339186d38d6733c2ac2e70
SHA256 6565fc593db30407fe36b9456f0abd5b494d95964667a9a3667c00a20ad370c4
SHA512 1b5a9f5387d1f2f0fc7d158adb2b602eecdfa43b67020f23964e52e7ef7e94a47a1df5dd8bb7425e2118fb3e1eb25d2b3d74bd66f04dbc12f34fa3cf8964c4e7

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 c9657dd5feaa72705403cb4e18d36807
SHA1 d0085ee97553c814523863038a7b2c9d4cc2019b
SHA256 b52b9e4fcd8d196bdf2e468f1829a4d9ce8aed71fb3be940001831e480bd8aec
SHA512 c6c367cc5fb9dc65c5a25086f3cfa555d14cad195d9f83b58840305fd563f81be77af52b238c770874573d53d710378fc3004f06b098154cb6811241151b59cb

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 8ab93a4bb0383fa2f39fa0d1ccfbb5f2
SHA1 923cad1fbb32aca2df63f4993325509821169453
SHA256 de942b87d719ac6f874c5235ef6b64c1217c517c93a73ea519a5f3193c2d8514
SHA512 476d946ca6212af2b538bbdb581f0576894e8ef84573bb2deb8f5b2fc68df2e8025c2f38d9ead4b2b93b290b866a653adc6f453a566e6b05cf49dd7ccda90347

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 522a9b203c846d591b757e81b1ede0cc
SHA1 deb8e5536ecac2ca8477736ac62f7d546128fc1c
SHA256 3a603a24530000ae7cb4c930cc0a60411505ca2da5f217cd59d89b54593c1670
SHA512 3762922484f7ef59f3fdfd5a1bc58179dc1d7995998739614a82a3d060db228efeb0b24a40d513fc587a25a5c923e7fd1ae0945ee3472bfa8c2f2a23b2cf3928

/data/data/com.uptodown/files/PersistedInstallation6418844412854148027tmp

MD5 b871bdd2126c88a2b424f74d241623f0
SHA1 ff7528a3760d3d6da62e60cea6fe80483b42e8ad
SHA256 e81ec82c100428a7f501c6dc25667fbbc9a03433ba650882236c248685d01d29
SHA512 69a70edf23c07687da4671427c0a691c93124d7e81cc3070eaacb7c59a21ac70bcd3fb640796676422e2c00fa5527a60b6f0a36b8b52e10cc18654171b3bf72f

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 fcde5f67666ef28605c38b09b89f2685
SHA1 d537c2eef72b8313a966848dff95da7e57234f68
SHA256 8830aa54a0ee9334e037039f89c0ccd9cc6c13471a9c03b0fa868da4e1868242
SHA512 98eb281c7a8ef4c797ad14c82cad321179bd681433d5a8d159d214efc55b5618617bf6b08fd42325653d294cae9e3fe21c7227f252199142c86ef77a0d787c9b

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 dc2425dfadd82a8b7c549cd9ed2d6c94
SHA1 febdb5180da275c0c3c0616682a49803a0957317
SHA256 39ebaa5124534b10c2129ba1b8d4ab5af0abb763a91422e5c982e4a799c93da1
SHA512 f60633d0ec688b41310ed4b69beacc7aaddfc8e83fa3f8a14987eeca8fad7f783ec936305203d7e1beacd7490c676d43e97b955c0bd4ef21fb1b4b567608ca83

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 602fcb89cb46b22906ee05302056f5f3
SHA1 6ac676ea6bdb4afe6e54e24d7d54ad8468c4eea4
SHA256 e0881f1ceab8c622f03945ab8c86a1cca96059aa4187baa8608af57ee592454c
SHA512 6f44091fcbd747678d7951457170343af3a42964a2696950d1936149568ac7915e787510fd523c627cc932fbf8124008e2e184d997f4d47723a712fd33d8b67a

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 1bfd59dcfa357f041a8127fc97521b92
SHA1 ab98374611ef744d077c3c1b0e60ecec34d0ec89
SHA256 969f17a5f5f85258a2b848f228451710e62c16b4e7b13b4e75a888063776dae6
SHA512 a8fd4ed4c967c4c38786c6a269e2581ca0f2d507d258b80fdd79e4cc723f1ece7327fb0970b3c44d2c8ac26379d134dac7bc7451ea895e64b86784faefa9ca97

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 8df12c9a05a4b3e2e64d8610b0716c22
SHA1 b2bba59f020fd391bfac83760a3fc2c937f901df
SHA256 b8c0372856b02bd668e7c581b6bf6d2ad3a931b56f8888832c40bec1d8a21b09
SHA512 2dfa40f4bfaca3cf3ae1015173e556197a7f90f4e6e84b3c4d548206a65843e4fb0aa7b024f43fdab1c9f6a67d543f2000d7a38b7d625cb0844c83006a3425bb

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 cb409f7a2504ef8ffc0efd83546043fe
SHA1 ef430ea647c34f40839e7b26cb1ee675b7e2f3cc
SHA256 084cfcd4ec8273baabf6397f1e184e20036b42b3db8ee388e3f86f1f8fa46f66
SHA512 ca992b8ccf14dd6445f6cca5648aea3a73161ce412b47f0b61c44a97e2d4fb88646e0f7c70c35bda3e85b0dde55dc986aff9ab64ab41f31cd907e411dfc6edbf

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 5b70ac3abad819e5275e4d0f8645bf8d
SHA1 7bf84d007be4ea7d1311c89a5183f8e0daa2ff79
SHA256 80c3bd35c51a0ac3c93843dd1183ecf98c4062859b6a25b6c1680be06f649545
SHA512 37deca5529bc6cfe754bf8a0313dd4475b132179ec80103f89fa2d82a42b40fe54c5f0b9048baed59cd30a705f199aa6119bd5a0d415d14cce71cf7c9e2f304b

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 ad58e08fc5bc914b601e0d11394a1a85
SHA1 ae8e0d7ed1dcad6c9a1fc51259a41b4757cd7fa8
SHA256 a9099f1fca5d41bca3fe2e0e6127f8d57b5e94a614d02fb4388d0ce10893747a
SHA512 04c780960184ada98cff0c1644f5dba95d08474ad07f76a79c9d0f7a5d7988a64d11c1caf2ab09a0e0c1fffe530e658efaeac87e8ef9eed9f7133186a942701c

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 9eb93c7731dab16e28755841a817fab5
SHA1 436b52de6c1d13d9b58bdce5a7fa15f02b455d5a
SHA256 ef99c1c2c1cffe24b73a8be5d647dcc89880f83cb464df380f23b4b4a2dfabf3
SHA512 ebfa8b3eb8d6314ff11aeddb34a89b3ffee8681b843c2ceeeee8b264472d9a0595fb8bb8e448648cbdb7be6ef8524a8df3183790921e7329f6b86647265f4fdc

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 cce7282414caec06dfe7d9bcbc2fd6ce
SHA1 951d349e437524a056f5852957e7d1e60fecf3dd
SHA256 6d4fc7c53ee63e6f60667197d54b57a952eee3aee98b3529a287de7208e3a1fc
SHA512 384602c50caf66508eaa3c6027fa0a068bcd2674163e7ba0af50cbb6be67b50c8f1eb1194db5a9366f2c357318ac906f4ff79418850bc98b1f6dc7cd83f9ab4d

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 eec6bf81c39fb6d31918ac97908dd9ef
SHA1 d44e576429ba13cf62cb3d3e8e83d0347fd6e0f5
SHA256 a219ea09fa0b477876f45ba41e6da6cdefccd0ca22047313c8bfeeea4c9fae77
SHA512 a452e4f9c94d8e3ec231bc834df4e738e71e3d2021b9e86688b907f7511775e4ff0c0c982a353e54bab7136b395f7cb45569eca88affbab82f65e112781d5b63

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 f661c548fdf07b7808a0a1388f3c2378
SHA1 8952469ae277f44728748c6e01af2b3226e5beca
SHA256 17b7eed71cd82ff4bad755b1c798a7860c61a3ac466430137934074ed467a180
SHA512 f2e27aa3dbc4a040161b651e69d8d2f64b5d1f33f54268890ac91f713fa805056263f980a7f91816d9237f6ffd0d262ca6a2b3bdda62c0136b51d5097d76f6ea

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 97311508d63810e316a9304926c6dfb3
SHA1 34315194070c008ae4b7377ef41f8c68e0b17847
SHA256 fbd7f3a060d70972dc828fd0830aae0d37df5d95bc54c1c0530704218ce803f3
SHA512 57bbe702160deadda5d9b47443cacb5eb34bbe2a23cf34e0261c322227d2b05228028cf283b88fa679ee82e88be4f9dd3841181570435aa0aeb0ffd609fd380c

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F1039300011392E47C72E07FF2/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F1039300011392E47C72E07FF2/userlog

MD5 f3545ed0077f0671c68420517c86dea7
SHA1 454249465201e914abc1ecd6790103c38024628b
SHA256 9dd348fdf5545a6f80ecc8f594b6a666448f411e8fe276d10259f6a9b226a55a
SHA512 814f866390d9ac5e7dd80aa1a2c2f69e8ba18acbc97b4807a1093c911fa14dd41d80e551736d01c8f0d5f4f87421a88e98ee71201742a26b696ad575a5fd9c69

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 3fcfa1b13b4713142e313bd1c58f1086
SHA1 961e77d7bbf483c0ac9885c5766f53e8f8f1e245
SHA256 404c23a9d03464c866af28e9cc5ed8581f6ccde5a0aa8757f58335406518e962
SHA512 ff44dc35e24d9b37b37f292f1b6a27054c076a45415c1dc5be08057774e88dd24180fc33e6ce0b813740fdf13be3dc9332bf424887511153ba34a8d9079b8a0c

/data/data/com.uptodown/cache/picasso-cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/com.uptodown/cache/picasso-cache/journal

MD5 aef14ddfd3934aa5d6a3080533bb13fb
SHA1 724b1b01e80e283ca2dac1d900c464226451318c
SHA256 082a81ab30ed2874088f60036459aacadb097d503098bc14c39f7d20aa48feb4
SHA512 de64897d610024c30f22afa8b14981269ccee1b1a58f5ad59d8aa005b4a0a8de90544e8399afd66e008a4d70dfd2a508e74dd88c428bb08cff854a8de4258f2c

/data/data/com.uptodown/cache/picasso-cache/adee5fd29e00eb809c85d326e7ef30d3.0.tmp

MD5 d20c50984798b613b205f82f63331bd7
SHA1 9fd097cf8bd4d5a8b3129519fddd66ed85cf9c2b
SHA256 a31fd763c891e4b1926a9386d7ad91cc961e425fe0dc916e1c116b97f7e2cca3
SHA512 41805ee7b017d297a5084cf52970fed3b98379e8a898f2bcecf1a72d41261770292419f09a0aa552ca0abd931d49bb849a0adb034673f8e7aff5b6220e3ad4e9

/data/data/com.uptodown/cache/picasso-cache/adee5fd29e00eb809c85d326e7ef30d3.1.tmp

MD5 6b52a51b43b750f50029d19fa24b501b
SHA1 e9f71fb047ffa61a25aed64f8fa5dc00bfcae514
SHA256 2e4b0a3aef282f2826f927bd5fee9c2a7c9d193e80f525ffae10890a0b3cfe9b
SHA512 7c81b9c2f6078416d7bb3c2164b16c4a18db33e0433458d9d87c9055fcde5f08b44a9617a362d27325845438402bed602d6a8aecf02a2e74d73cd69aeb8753f0

/data/data/com.uptodown/cache/picasso-cache/536ccedbe587b02d213ff3eddf35e5e2.0.tmp

MD5 0cee6bb10c316428c648e8d7625ae015
SHA1 85c9f68eaf00e958e6b8e66293a6ed721521efa4
SHA256 2a77ec15230ae3a3628ea46d47ba8872d32b4046d311ff6c230fcd3f40f9278b
SHA512 322875f1d16fa8072ca3877ee5e16ab53a9b06a66e1a5fd87452d52c3756f7ca594bec6d58d844a13754d68ebc8cb084b340fde79b8fed51d113f59b65acd2b4

/data/data/com.uptodown/cache/picasso-cache/536ccedbe587b02d213ff3eddf35e5e2.1.tmp

MD5 0e84a2720af1418c3d127dc8884beaac
SHA1 a9fb2e1018c810a3849986fe74899766309ab0fb
SHA256 34318378351f04567464981bbc58a8091bf20bebee21da6e6c232a3157f11757
SHA512 7766541d78b5bf4236d538096e66980b5de87d2aabcfb9fa7b3cd7f701eefc388761958fc9c0622a509e66c19ee2789618e09d649561ed0c07fcca645992f52a

/data/data/com.uptodown/cache/picasso-cache/cc137c3a344a6307d55d877cdf6ac82a.0.tmp

MD5 843def8d0a71b08ba99857fa0d055e04
SHA1 b093951589a7786ee4990168281649492225aaa2
SHA256 5d8c5d85072b8e282a3cd6d1545b4ba3ef41ff544c528fb27801f9c0e44b5d96
SHA512 26e4aab1c30fa978889f6172b9997702d594b9c57a3910205bfc45a9e144f9192a975edf720054a108884e7806f8783d2bca8f8a4754ac3d65825fa53df32300

/data/data/com.uptodown/cache/picasso-cache/cc137c3a344a6307d55d877cdf6ac82a.1.tmp

MD5 0702569fa7042f2948969861c63839a6
SHA1 92af3a6e742175acac2cb313fa4045c59fd87477
SHA256 d7c25c3857be3b982b273779a7c0063eec3a07000d950d4078b26e19b79534c0
SHA512 d8046aa1b33f8afe192dd3e6a24959831be4a9adc8b9b3d8841948503a9f17e02323cc7565d0ea7a83b1af3c37212620abc7c5039bac2940759f57e1b3612da7

/data/data/com.uptodown/cache/picasso-cache/2999f47127b4be6f893b344429a74335.0.tmp

MD5 9c53c58033af0a324aea7c8170360fff
SHA1 193863577e865c8478c26b1ba88c50d430990f58
SHA256 93670fad5620fd58d32562b0fb7e6af5580697f67bfffcd83a98cb6cb4edd8b7
SHA512 e58c752c2da3ba2cc8e0ac4340a8ac4d7e17248af601ad3d69399c1a2c79eae38cc3f64e389dd48e9177ff9985263402fcae44c83095ef9e2d731f2591150923

/data/data/com.uptodown/cache/picasso-cache/2999f47127b4be6f893b344429a74335.1.tmp

MD5 b1dc5c603c47fa45f02d6dd755dfb93b
SHA1 521d8f88f5759fd00aaa20392a289b6673b57a37
SHA256 c6991f90246bde46637ca0918833c161ceaeb9b50091cf379f2a57521a5c0a58
SHA512 43dbb9d7c9d529172cf9e532335bf0b38f27c2d016503caf3e1107cbef254be1ca3eb1edd724195ee375f820a62c8e85b3b26a61298ad6a23958b85b1b34d846

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 5ac806a50ca1a310c13d40e49d5a63ca
SHA1 495e46a78e8602d7ddf62666847be6852645defb
SHA256 894f98a3c65c9acfeb6ba80a44981d290fe19c6bdcb677407e645c62b808e010
SHA512 e45fd6e60ae35015bdc3622c2491954cecc836f51f3f4222d8f6bac93129fe58d36887b7c2d109e7addd28b131f57ef258fd0d76117c8f2d16d5b7af53527195

/data/data/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 fbb54b7fe3590d02d5c5f7ad7a32bffd
SHA1 5441df20bdeb4cfc82a683ede404cdee8060f98a
SHA256 a270fd11b44063543561ede97368428d2492c7f792e6ee5ec74bbb92f8e3de50
SHA512 e5f763e155a670c948f5276082656e13a88870f7018ed7888057992291084360debeb2e0915e7960bf3df84febed6cd1aee20d311cf144080b7d8c805b99d16a

/data/data/com.uptodown/files/profileInstalled

MD5 53ace307ecd87d2f9a4874a0821cd002
SHA1 4dd556e8df41ddc942ef95790114704d17ec7862
SHA256 de0a93dabefbaa0227229bfe28f5baf236ea90e4b86986c09be92d067949604e
SHA512 6499611a95b7509b7c14fdef3350981f148661f95614d5992f58a091a211751c0a6b5f667af4669042b7d27b8816377534415f414f8648a33dd8ba22f3246a3a

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 a0e91b61b37bbc1335bdd3959fdef9cc
SHA1 a3e43d17a24e71643cfa6c26da4d2a58c7835853
SHA256 839ba23cde361cb5240a96cfd99ca7cf75cdc49216316221c2a877d57abe0422
SHA512 0a7239f23f334b58899004835c27e9efa5be257a90ff7a680c105871b235841502e568bdeb6abf4fc9ea9f7b53b0ab9a6a90db3ea4e2863c4a4fdb449e7b3f7d

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 8d7034d9422d55119619d858be155e7d
SHA1 e91141511736309130a9da655a5988f3a7f691b7
SHA256 95e8ba0c230102093af2f35cee2ef37cca1d4565ab3cdb9b72d793b9563bdd55
SHA512 f5046f69a130db1664b8f2618afed152ad75cd1ab48517f7733f9e5267a779815f3faeb0828e17ef4ff3f1cce999183669055d44816ed752503422ae160db523

/data/data/com.uptodown/cache/picasso-cache/0754cd2f10bffb9d6498472b30352986.0.tmp

MD5 659356750ae72a306c25c5553f84c29e
SHA1 1d07972a2182a3b6250262016bd70448ac5587c1
SHA256 0b6705e4ac71f89a757421317dec827d7c4704df261292689989207fdfb8bab3
SHA512 72d5b9cfaf3a965ad6515da5cb482c53ea154d2b6e052b1e10915334163c677142ac6e78db27f546e774d3f7dc53f74dfa5f0ef652f54a223c9b29b3ed37205c

/data/data/com.uptodown/cache/picasso-cache/0754cd2f10bffb9d6498472b30352986.1.tmp

MD5 cfa3f4e83b8b2205ab8e2fec7cb96801
SHA1 7762bbd2cff4998c76f1e37687491e60485c5009
SHA256 eec9af1e69bb507b8fe271234e721eb61ef68ba79d637572b5ec61f9abad5bd5
SHA512 54040f9304b24aad959fe932da7b9ef2a19bc16d97858e6f321617837cbc751cb96810406eb631f78b1c8bf696a85cf222d5400ca9496d276b971913c577102a

/data/data/com.uptodown/cache/picasso-cache/23c140d9af6b6b45e0f472b450b3b1d9.0.tmp

MD5 70757ae7e8ca8014c8619088883bc1eb
SHA1 20aee3bf5aafac06854000da56afd0b428c26811
SHA256 05736b2d752adb9e2d09f3c1d552c8f15b2ae8d25688ed3abc0460710b28ef7c
SHA512 bc25cd560df3e2a8465473b3606d3942994433259cdd4b18259d754423a4cd7dcc2169d7202dade1f60c240d1cdd96e76fb9672a59a30c9e9c24b9c4dd857c68

/data/data/com.uptodown/cache/picasso-cache/23c140d9af6b6b45e0f472b450b3b1d9.1.tmp

MD5 395d1e974333d6de0ae93e1da30a2d4c
SHA1 d6dca49a8bade3224b8cee82ee6c0edbc650ad06
SHA256 f2e3bd0206786dfa4fb50e140950fc69d64ffb432c3e82edd3b3b00c1dfaf3a3
SHA512 ae5eafa9d46c1f7e4ce5c36d566350429feac6ab69b0799e022109685aacc701d68aad3b41e45dc762ea397f3fdec31c452f7f7a82ebde67899a9df3316c417f

/data/data/com.uptodown/cache/picasso-cache/e351b3d50abc7158bb320bb05ee3f38a.0.tmp

MD5 a234bb72f236a3bc6af2451be440eb7b
SHA1 95aea1a1d460913843bd9c6df1f85b1e7e4694ae
SHA256 9b53a6030dd3462cb0366b5a3c0d746e450f3d968c0713f4cf6b8144661c0891
SHA512 32e23ce0faf2969c01271759713613c5ecc38201cb335a165ee0492475e19611540949dae383dead5ae093a238279a27eeeb609f7238e2d886d927873e9e5ddd

/data/data/com.uptodown/cache/picasso-cache/e351b3d50abc7158bb320bb05ee3f38a.1.tmp

MD5 8c00da601204d243f65659d118f275f5
SHA1 0fbc5b21bd337e02af11e032e59693f96b031804
SHA256 61a9689c33e7d3ed501f82d99151bc40fc3313fa045f2e0b2cc3561e2dd0bfbe
SHA512 34ffe3453f01bca70aa24e1eb077ad9122333ddb7cc2e7dffa7cbf824a17a2b50657a03f71289b84a293aed6f07ce943612921d2df9fa409b3a498e7a4b6c81a

/data/data/com.uptodown/cache/picasso-cache/eb53f04b09bf2ebd2dd1e00d10b95abf.0.tmp

MD5 3505ebba4570e93ebce5399c787fdb23
SHA1 06579c519fff2499845435a6b1ad53ae9909ae72
SHA256 77d14dc295f7d6ecced276cd46e3286a303ecbad7815bdf89867f63cbe425ef0
SHA512 ec5241b16e6958a1078523944d0b59010bd8ac7fb2b7d45643586bee41a1f4dc6dd2537dc062e0be5f36850e459578a46c38b310639c0cd095db9b032f32d7b7

/data/data/com.uptodown/cache/picasso-cache/eb53f04b09bf2ebd2dd1e00d10b95abf.1.tmp

MD5 ee38e0cc9b37c247dec642428a0e920a
SHA1 907280817e4b37a1623d9be404fb4283efe7a722
SHA256 1aac1c7fa77cbe172ef364cb19ec952446802961bf37b503f9012f98ea42bf5c
SHA512 8dc77c7a3dff3ff73563737e3e7b326524464a64c8b2d9c3e19ef75054d965a1de5feca94c21f0ee1e63be62d7df284a4a21a2b735b3c53a6994344885e41b36

/data/data/com.uptodown/cache/picasso-cache/6744b3d6aaa194f8aed5e87f43a757a5.0.tmp

MD5 e5085917169360b25967cc655a771c66
SHA1 d75a39b4ce4b563f5e03dd2ae067da39487e817c
SHA256 a025c7b519fc5b624c699dd9103b0672094c5e1c2908f443b9b6c23d2fc7d799
SHA512 31950ba6b3e86bfba23c8f9f866725952602d8e7c0595979c8c727033f0f46dcc92b0fd6fd39cbf5817063a09ccb35640faad6e6eed5e49a97b03036233b0564

/data/data/com.uptodown/cache/picasso-cache/6744b3d6aaa194f8aed5e87f43a757a5.1.tmp

MD5 58a4391458006c9cf4090e9c05daa7b0
SHA1 2e3a0a32a6b7d5c03d217634b0e06a54bacfdcc1
SHA256 596809c9fd43de2a810bc9e10253695f9b464398d3a864085c6c5b489238fecd
SHA512 4a70ca86c88c73fb6b1d999c88454cd83b7b0f49a63e84f33ef8bf115031c1915f58d1cc120ff4c8164b439c7247d74b7d2b84710ce893196c6046df7ecf4f10

/data/data/com.uptodown/cache/picasso-cache/1e38ada7582f839978786b674b53f81d.0.tmp

MD5 5d9d57edb7cbb436d347b41218372bbd
SHA1 ef57992147eb5948d1ef1de74861d1ed981a2617
SHA256 6935364a1988e214d580de959b45925491e79e4dd606bb7636f104f6c13f2178
SHA512 4495656ed34071e92f482a61b7c8471dc8b7e64aaba92aaa3e08c80310447414cefa20acc47f6ffc0837ead2299b80fb5b6e45fad37532c93f95ca0005bbfed2

/data/data/com.uptodown/cache/picasso-cache/1767e6c58d8efafaa25954c2a851e45e.0.tmp

MD5 4e4fef73a2d7f0ed27d7ec3077ad1d93
SHA1 7602022620e021370c686aea89e59bfbc68b394a
SHA256 4de5a1212b6b346ee6f22628e9f2e232dc2b228cfdce35668152c773cf7adf55
SHA512 7c8a46e89a3bc78892eb4cf7dabf2cc06a8c39852d1e2218fa2a1e998d63b8d60662ba14cd6c5ca27edb0eb867134e5933f828cbe4e35d1f4ab31c28d497d99c

/data/data/com.uptodown/cache/picasso-cache/1767e6c58d8efafaa25954c2a851e45e.1.tmp

MD5 1541d76ece7810c098d1ffee2ece9ae3
SHA1 ed923c6cdcd327b1765d6754c369aaa4c9b29444
SHA256 ff16593ff5b097feed3769ded5fa24f56f41467756d9209b78fac1ac49449900
SHA512 a06d50343826b2f02b6ec4562e71ad26594293d9f72060e0511e07966abdfad4240e487651fefda742c376ad1697f82cbc9a8abf4ffaff7c4a97d8da918ad7cd

/data/data/com.uptodown/cache/picasso-cache/1e38ada7582f839978786b674b53f81d.1.tmp

MD5 4e8efd20c4d0de172b5888a31df4d368
SHA1 91c4e8be3e83de35d849e9d397e4a42b08cd9e50
SHA256 5fa5811c7798b4ec7dd2f3d7ca1657d751b414d693e90241732ea000e496762e
SHA512 f42e95412ee4e948d0c744e2e876745436e65821c4473a9eabb9bc546dd8e2a53495c1ba3cd8716954e991744d22fe24cccffe75717a2025a363f8d62fc3112c

/data/data/com.uptodown/cache/picasso-cache/7cee83b3081ea6cc5cddafca91534bbc.0.tmp

MD5 69e08afb92cd21ab62e214fd0f3c74c6
SHA1 6a25083d2769d39b1e954dcb9157c31c20b2294a
SHA256 a8d5cfdefbdda27588e6e2815a3fd9406003732e44ca97d5d34399701aaee5de
SHA512 3dfd26cbbcf257099be4aca9327290b434a44f76a315a0565bc266e11f8d98de56c5cbdefe82fbf441ceb288aa23650e5ebdbe839ba78d3e7f39e513ea266fa7

/data/data/com.uptodown/cache/picasso-cache/7cee83b3081ea6cc5cddafca91534bbc.1.tmp

MD5 8b4c43083f5bd20e8617c97fef4b001c
SHA1 f5aa2b725878f4f0f46e5f839ae7baf140f095f2
SHA256 637052026c0705aba80406693ba0e29e7f2eee314fe9dd4ef2cc881603e1e83d
SHA512 ade3be1a7aee37cc22af22b365317d70f7b8a2435a515ed3c1151d01cb878c8278f1cf56b6958301b73857b391162f2fdb1e2c5afb7df28002831dd393d504c7

/data/data/com.uptodown/cache/picasso-cache/94de53e090bdcdc7a836b9050725ddeb.0.tmp

MD5 1db45da937b9f0bd71f117e6b4e01327
SHA1 da4290bce1c7283b48c76b724abc73ddbe706ff3
SHA256 ac795f056bc24f5d3cecad6e235a7f29432301df354657d295dab07f35b6e9ef
SHA512 45dfacf34fa9e29d150b4f49182be9daacd7c691ac1ee0773fb10d2e583ebbb5c45381f8a12e7c1ad673b17465d7047f1ef4c35485a109183361c36067e46c8d

/data/data/com.uptodown/cache/picasso-cache/94de53e090bdcdc7a836b9050725ddeb.1.tmp

MD5 cbd52ed3eb2ac45aaa5e9e226aa5c381
SHA1 10f69dd24d17b70a704de7b591377d1978901a7c
SHA256 67713c70ae4c97818066a8db0a9cb60aa2230fcdd094111689e23a6ea4f93fc1
SHA512 c467e42c51e45a952f81f80019c9b96ce7fe9f94553fda84c88ad081b364924ec830c2326cf712cef9705d5c4c46effbd3c946aa1a667074e7b877a71f4c44f4

/data/data/com.uptodown/cache/picasso-cache/75d9de495a9a59f7c116b8a3e4ab6059.0.tmp

MD5 2e9283125cd39f4d0b6cb8c658f4d269
SHA1 d73a093f8ee781614bcaf25b60367e63bebf24ce
SHA256 8c7c7708077f6920bfcecca3d9fb0f806a31749f0ddddd145b0de67661c1bca6
SHA512 06c0fefaf26ca306d501323d7db5ab147697fcd45db52d3d345a31763b37ddbba565f5354acd897be53f5762bd8785a106395bdbe972e132cc1029f59fcbfc44

/data/data/com.uptodown/cache/picasso-cache/75d9de495a9a59f7c116b8a3e4ab6059.1.tmp

MD5 4c1fc2462be6083c14e07c6c635d284c
SHA1 2799d086e5aed884c7d50e012cca5d4f773511a4
SHA256 5e46e28c0cc8cb208d432de63d74de7fe16e78e5f67419f0f40d8dfeb8755ef4
SHA512 1f9f674fe8a1beef370d514280c8dc1ff1d9e83587f7db970528901d63f2983ddfce250ff16cec0492f5a9013db87c7ea4ccedfe96484982d0b086eea8696920

/data/data/com.uptodown/cache/picasso-cache/12df5790443d51b6802f9c87cc30ab55.0.tmp

MD5 a5ef95811413c4256e5cb8cd957d29c2
SHA1 6ee15cfbd9d9c71723c69cd04bb30b094960b916
SHA256 3f5f04fb6babe1c69c1a01b5fac7e343f4414b4bb48e87af459b5a766cc304fe
SHA512 4709cfd7b85eaf45f200999fd594e61e4580c780acf98d83c0b6018e2f8f6f1eca207245d720a764a04503abfacb0efb382d99d3075295bf731894f8f8b437b6

/data/data/com.uptodown/cache/picasso-cache/877b6086da03cedc29fa1e46cbc83757.0.tmp

MD5 9b242c3273036fc94a9fbf84cee3f660
SHA1 3439b3204fd77235b4cc0326597f3c4d561b768f
SHA256 0ffc9de85f97d2e0678bc01be6a3f8d77f73c5b8d89c5497d2be9293f66a751e
SHA512 e43350056e0a947427725788dd6020419e5a40deaa62323d61d75ea4615927db1196f0493ec0e8b67d5201dd4fc5ae368255152f48583c0af183af5c5ce1d08b

/data/data/com.uptodown/cache/picasso-cache/12df5790443d51b6802f9c87cc30ab55.1.tmp

MD5 38e34d7f2c858ed499c6f820d0e220e2
SHA1 f92a7e9e4cbda71c6ec48c9fed7764d6a68d28e5
SHA256 f6432be73f8928bfc92d9880a35386859320bf44b23a92ddb2cf19a64f11141b
SHA512 d4db7bad2973bccdbfb30cb1971ef4f7b3e9c111309dc62f6f3ef3ff388bdb458ee79b1807aee98d94f0753996e2b4abaa001f0537a0f168d7a3330f9c3e3f01

/data/data/com.uptodown/cache/picasso-cache/877b6086da03cedc29fa1e46cbc83757.1.tmp

MD5 faa61123526c606c29cea3f5ceda6011
SHA1 773e811c4672ae5b2b6a91db82ea0d16567dbf10
SHA256 07fd9d95376c48adada7771d901760a038db308de38760254389104b269ac5d9
SHA512 13ca9dadf9720303c42d2794a88a3d99c9152e840f2c66829473856eed18937222e6d34818f05dc013b04448684e8197e0fb5d4998070682fc764413a0db2591

/data/data/com.uptodown/cache/picasso-cache/7e8c2ed8b2ee467d16877b5ce048c85f.0.tmp

MD5 6e42d4d71be309b1317ba84f7d66f95a
SHA1 ecf826d494562f6e4cf683a70fe08dea9ed787d2
SHA256 112f5faeca9f3ae2f946e35411bfaba93615f5f82b367884be9334e753461c5c
SHA512 7aa6a148c9aaffadba1d492a88ca2087e20b3ca72f05d4a2aa9db50eb7d252daaaac6c64b7f1d9efa5f662e2bbb3d41c8378c794e4337252148143cc6a161ff9

/data/data/com.uptodown/cache/picasso-cache/7e8c2ed8b2ee467d16877b5ce048c85f.1.tmp

MD5 c5381c1da510be17163065a968e15d4d
SHA1 3c624ae04ea49333e995facbdc65ff1dccee2f44
SHA256 ab19c844bedacba3799fb1acd0359f5afd2e5cce0a9fcbec82ecd30d67ff576a
SHA512 16451025b9df7612a1a2ad8ba93853800a27f1fb88055b6e2106cdc1022f10233f1179b16a6fbca91c5782f12fc0b742c28d70620fd0a79e981468d212ec80d5

/data/data/com.uptodown/cache/picasso-cache/98df3ad7b1ba932bdc2fa22fbff1742c.0.tmp

MD5 0b5def257c82a6172b31bbb0e6ab8de0
SHA1 4ebfd6d0461f9fdc4979d1190263498c1e84db52
SHA256 abd624fc13ab229981213b7b4763bd656b126d1cc4425508c9ca75f5775a35b9
SHA512 6b5c71fa96e84fc96d455ed301f1541c8e43cb81ae84c9b486787f9b3efb19bddb2295edf94d37405d99566b897b1be5c106e1edb4fe6ec40dbd2f0a987f76f1

/data/data/com.uptodown/cache/picasso-cache/1e7d47272fdd245c266ada6934c90589.0.tmp

MD5 e5cdd448d64cb28b42c6469ae484b854
SHA1 298c6a92d4d218040c820b18cc66275baee00036
SHA256 7393faf1796d037b6b7a8358db65846fcd3815ab7a1dd619affe32f485303a34
SHA512 448bb2bc839d125ccc835dca01d09e359dceb66c58c72593515bc3bced44424c5a4ce302c38b8dc632e95aca3a238323177c59d759fc6c30f7853245eb80acb3

/data/data/com.uptodown/cache/picasso-cache/1e7d47272fdd245c266ada6934c90589.1.tmp

MD5 cfb848b8be47c8b92d35567720b83404
SHA1 7dd668842651b09a468fb72fab78b7bcb9713d57
SHA256 e17cac04af3cd576f9a669fe3abcde4dad3fff3941748fad05b4517ac7ad71f9
SHA512 ed52e874755b5748fbcc2b35a89dbd92e744ecf71140deb07598f6c6e00a359112b42494ea9877b0febadcf085da5b2239186f35da8c22c163c04bf86b5c4870

/data/data/com.uptodown/cache/picasso-cache/98df3ad7b1ba932bdc2fa22fbff1742c.1.tmp

MD5 a3bb8a10366ee9c3d0af7213a1afafe3
SHA1 8920a37568bb82ae4691d6b657af3ed6e40e5fde
SHA256 12ef117cdecaba734d15da0f3b4ea1be67f1a05a1fea974709d6721561d50a99
SHA512 b2c0a020b9d579e4b7409374a3af7413498fbb1b84d8a4ea625e202adb2fb5ebebe63bed486910303d7a3b47698843021d1d9f5053f069bcaf70e922e8d416e6

/data/data/com.uptodown/cache/picasso-cache/dba906200ad8d88852ad81139fb6b269.0.tmp

MD5 454ac4ab46a7492289be6c197a0cf836
SHA1 964678c9eded2eb4e990396e82df8d3ec194d1de
SHA256 a36e2373c348aaf6d370a54a138a3ccdb568effd3b3390a200d817e764e57162
SHA512 aa3856e21b14e547687d20aa9b7c491024143be608ff63e90fdc78fa18c63857586dbabc5d81371d740fdb80f911e2f1bff798274135e50510dce7251a4bc9cc

/data/data/com.uptodown/cache/picasso-cache/dba906200ad8d88852ad81139fb6b269.1.tmp

MD5 0c19ad54add56fa1561316daf9691350
SHA1 0f16e4bbdeea7fe2585744beca9648dceab275c5
SHA256 c00c7e2bff398f399c4f68fe5c3a326be9188b917891b94bb43f3e6917cc8c1e
SHA512 d7c2cc65ba97ae57a79beb2bee70713f675ef2101e9a7d9cc4352a5231b9c1a0e6d9bdc7540621cb7214665d57a27f125b8d6237c745cb8575d535028fbb88a3

/data/data/com.uptodown/cache/picasso-cache/29930e3ec02ac7b5e3b98aacaaacfef0.0.tmp

MD5 ae6b52f148572529378120d3a5b1db05
SHA1 4c5ba54bc5cffd97b27c6b069aa102f121ea929a
SHA256 7070c94a7a7f688295f7bf9d3cc8cc2d141063fed9d861019c9125d951be2db4
SHA512 87d267e6557dec1c01d03d2635b35f29dcf2ea38bf508e57a1ebcd3f412a6842c5c5f7a21db802dd243b481b0eded7b103338dab9568e77bb7d34682c75ce75d

/data/data/com.uptodown/cache/picasso-cache/29930e3ec02ac7b5e3b98aacaaacfef0.1.tmp

MD5 f9ca3ae3470f40b6c0cc302ab1f245ce
SHA1 b47ebc2baaa97c5081d8e77046d521bd696a9a9e
SHA256 3b932f9ccf4f0c8dc2769ee2121b8100770a2ac45843225ced7454e49142792f
SHA512 1728e2c50cc05ca335eee944a0e7e7832b26a4a991c92b403681d81531d910c3fe417f5760e28f86d0daf430aa985edd01d741928785c5dafce0f464ffe12d77

/data/data/com.uptodown/cache/picasso-cache/c212b2d17f18d825bd4d7fb5bf1974b6.0.tmp

MD5 e769462f73d15c6bf3e5ef585403e9b1
SHA1 04dbee8297268afd1be1ea71654551d5a409a3be
SHA256 2d3a73124a9c91c227dfee2a1640e32eb82befa0082c485efd6caf90023ae7c9
SHA512 41b5e2873666b2822d9c65594f1abb392738fcbc3e180ac8d0c1db47eab86b11263dc9a7d2091ae7ca60c93391a8cb0c02169255cdf6e23f54d9755c72f22d23

/data/data/com.uptodown/cache/picasso-cache/c212b2d17f18d825bd4d7fb5bf1974b6.1.tmp

MD5 f26e15472fce35170316c36f1b1b976f
SHA1 25945a64486125b0cb29628005849d8eb5070b61
SHA256 7f3e4cc734b725902acbbd3ec0eac6ab0618d634b2646453df72a14107e0f305
SHA512 7ff107bfd32f9c9d70e277ab158d36e4862155c7e7eb76daaf2d1ef1a537997e088e60e9b1a932d570ab305e4173a162065da35ae093cb83151c0e2a25083460

/data/data/com.uptodown/cache/picasso-cache/add83f92566fb5eec02a84bc2a668e6b.0.tmp

MD5 b0006f9d56e7644e7fddbd76b13d6850
SHA1 896d1a9f6051f3a5802a3deddf9417a803d5f813
SHA256 cbbb2cb7eae15c1e18a178b97de960b4d97fe50d3aa249a490f376612e5118e3
SHA512 8499f8ba54dfd61e4572258a2aba287727ad586d873a0ef2e111b0ad05ffbfda00d0d883c5dfa39510f2ae8114f9e92e65088a61830d6992d7ff791df6d86973

/data/data/com.uptodown/cache/picasso-cache/add83f92566fb5eec02a84bc2a668e6b.1.tmp

MD5 7ca0f5b8d200c2db63a5842ed53b6783
SHA1 6fd4407ef3be2bf373944c6c6cfa308987176054
SHA256 bb8f2c069a21eef505f62f1a16f032730cce3fe33daa477b85f5262072ee69a9
SHA512 c9dcf0730f28b1dc8c12c60182a10b2c6ba3dc2eea75ff802e12033904816414f9228d51c4fb3ccc0944603ca1135e3f85109cae762b9131ddf25d50fe96b367

/data/data/com.uptodown/databases/Uptodown.db

MD5 08f7bb699c50bf275c7ccca5c30768e9
SHA1 352722db5651a77ff7dbb35a0e329e87f99017eb
SHA256 2c2b8cb76bb5b8101b8eb2b0e4975fed027c20437ce15f86f057e87f18190401
SHA512 df826ea4e8e694e45a1e642df12d83732df5adb5727eb020861ac7a075586e08643d89c1e5546688c14b6e921ca8e7453368cc1ba11dda0ef90b2942fd31cb6d

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 278c91f20602a1f22bbb5788cb3def85
SHA1 c695b6ad3f3383c373c294eed06e981267efe60f
SHA256 143918114b58b9717c81137691bfe7152b4f115b5ccaff2a5ee4c6bb487f7843
SHA512 f8f0921455a200ce5136b69ff96efed139cac4370f87c01500838b536a68a14e2f48cacda8d4f15108fcf9d414b1fa766296ac6bd766cfc1ee7c4083bd55d008

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-10 13:47

Reported

2024-06-10 13:53

Platform

android-x64-arm64-20240603-en

Max time kernel

47s

Max time network

337s

Command Line

com.uptodown

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.uptodown

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 secure.uptodown.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
GB 142.250.187.194:443 tcp

Files

/system_ext/framework/androidx.window.sidecar.jar

MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 de29e1fbdc1b60b09d13bed5af7c37d4
SHA1 8ede31938ae96113e154fcf587b3886c533d40ff
SHA256 52053d0d8a13ade9b5bd5f59aee460bc8be6e53375bb26fcbb6c413bf18fb1d4
SHA512 2ed4a1e1daf4477c74b80052ca658820c7330aa41157b90ec8de53f699fba9ca3c22dc988bedf90052a18641489eadf155249e113560e06eea897d7ec154b29a

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events

MD5 5a28f7592fec7dd42e8839cf6a9eabb3
SHA1 1aae2611cf48b0fe988fa7b9d4b1492f7f082bb4
SHA256 a9968df1e650d4c5c2279133fc86dca2aad0df39b38d39a39b470d89de41e660
SHA512 7410b50b19f295dd5815660a3b7c1d855441544e75e98ee53377c810c5591f28e61a2339606b8ef960f1e73236e2a46daf6c82ec84ecdd80886ec5376c3643d2

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 18735d1f3ee326014c2e23f633616ed2
SHA1 19bff9b4c142f994863c2c08b2e5eb24b1454283
SHA256 1f153c4c86bcfb92a467245593a471d460c8dc32c51cbe5775498d9374e95fd0
SHA512 55be2fc66ed082cb84a9d037e5346d35a988e1c12f79a11d6ca7acad281b470b3f8a4306b4f5248c1aa1c79a97dcd8e81a7306a0b918a58495d084475dbd8701

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 ee46cfdf8026cfa6683b93f3a3585f23
SHA1 8847755a17acb09321e04ea28cf737ee7f2ec7c5
SHA256 315c26b59477f2dbb12477de578384caa822dce9cd031e2484b3cd9846f86edf
SHA512 b998ab7049b318c9c67399ce3b80ae7fa47ce8d7b20648ccbcfaab980650809dc415c1467370d0be805ded1875291192cb26cc0499810d73461bcd4fb7d6db91

/data/user/0/com.uptodown/files/PersistedInstallation1625300188731706701tmp

MD5 90ff8557f3da63aaaf97de540408a1f4
SHA1 55a91416f13d02445f1ee0738d1294614cadefd3
SHA256 756045184116f3ec5119e063ccabcea67ced30464d37e6c0598c7e6ebac6885a
SHA512 5d08143932e9490030a7a3710e13be4356908e48fd78c8871d0f48f9b72cfaa67e5e8e0e750c15f57dad53411a54212bcdd370c8bbd64cbb5d62b9a5d1876180

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F2035100011180E75C60059AEB/report

MD5 debcfbb7e521dedd5419ea06b6077129
SHA1 d79cd25f26bc7aa5865a39c0f073d10cc4d23b99
SHA256 bc2138d305e68270fcb9d6d1f3dedb38694b35379a0dc0e80e3043382e564d0b
SHA512 d64e5609283cc28f2883e4bfb75e2f4562754ed1c2223123934188806aabecb240a3454fbe3e13be091496c963cea773354e46e81f73b649f1ce4e9a9b72dbad

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-journal

MD5 8338afaba93c6dec669812a3a14de80c
SHA1 08ddbaa83e44df4e1c3d200eac3fd5d972f3b7db
SHA256 10aa7a84f39d663c243acafd149378c247eecbceffc22849347b0fa4cda24e0a
SHA512 a8358325460ad05bc4858382010e3883135a2884574b76e334e65f5beb9eec9b7c71b5ce59d090ddbeebcaab7f1de78fce7889227a3a4427eec12813110ae228

/data/user/0/com.uptodown/no_backup/androidx.work.workdb

MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 42e3824f03a573992121dfc0ee9f6c96
SHA1 92f0b43f4f197bcb1de9238590a1ebde628276e5
SHA256 0accdf0cc6ae77b72ccf4b1f3c129eb57dbdb021eeea4b4c07f36ea4ea1a18c9
SHA512 febec7a80dfbbafd7e040245808ad395e149cdf77b23280ba3a24f5b74a2e15df7515c8a6e16ff98db7f04072dd70d1a6ea7fd6ddec241fd75244a4af443bd86

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

MD5 780bc10218ab0713ff5ea060dfc617db
SHA1 910001b3e8fc07fc406065dbe0568131785a1ed2
SHA256 08607972e55a74ae26a0ea50306438061e6540bb21539eb1025a14f9f2f90f71
SHA512 ed6f33aa247e2e08085098d07829616614488121ac5440b2ddbcc27ba149a7a0438384069c028fb9b9203765cf181e8e52f5f2a5465054a6c17c8b507fa5ce6d

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F2035100011180E75C60059AEB/internal-keys

MD5 be6852b23c0e706ee578e4806a4eac97
SHA1 52f5fda97480eab2b4339186d38d6733c2ac2e70
SHA256 6565fc593db30407fe36b9456f0abd5b494d95964667a9a3667c00a20ad370c4
SHA512 1b5a9f5387d1f2f0fc7d158adb2b602eecdfa43b67020f23964e52e7ef7e94a47a1df5dd8bb7425e2118fb3e1eb25d2b3d74bd66f04dbc12f34fa3cf8964c4e7

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 df2499320fd8e4d56330e034d3b40058
SHA1 2a92f38b591fcab0089b3f39df0bd4c1192783ec
SHA256 4c19359c0a45d6867d25f8d5b49d131c597b7bc5bf5d719b9af37727ed45392a
SHA512 cee6f11bcaf368d2822c7675553d379795cf7791514dea42645bcd328160c58974b3bb4eddaad9b844ca84842c8d87a993290f338ff0f01534a797bb56b78cde

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 89dfa024636afd7f9779e1fbe39ef9e3
SHA1 b77cfc618a0c8c2546313a6e4b6a9af07b8b12c3
SHA256 69e4134905e499fcfbafbc621c5724c3e25e32dcf170f1ae9605b8208b80b236
SHA512 fb4cd23bc18d7ac69a507f40531dc9c9a5f6b726364795414b671ba92409d78567db41a10d8d5460281bf0f1335dfc9205719c40b6eb9960bdf9cba3ba440eb8

/data/user/0/com.uptodown/databases/Uptodown.db

MD5 a6d673044f7d08e7c44f036e193c8b66
SHA1 bdbcf9beba28b268d9b6d81b59cad169bba666b0
SHA256 fe1e72362a0a96771f201663c2928add2a2674a217a8613ebd224f1091231d55
SHA512 02d72a7d7d0b70ff0bbfb2e2515827c10a4c4ebf248f815b6b6892be5d1edfc36af8844391a925e8794584f9f11be5ece3c3c63dbca1c9ad82f9f18ada5218d5

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 9adb016cd053ad334298c32fce7eb148
SHA1 4a0565a527089ed15d413afeb31a5269e9787796
SHA256 aa46b68cd48001be78ef03ea2b8d753a3cf48055b2278b75c6e32d9d35e70d44
SHA512 ad943ceaea043ca4296e76088e13d5f25920c7a78d9d444596cff816f3786f286b8844e7a3fe2c5cad8cad161431a20966a472d2b204eb77fbe558220c36c1e8

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 283bb13e3681855f00564006e35ed6d3
SHA1 56916fe6da943b492e48fd2e86b1b5640dae2bc3
SHA256 a492ed843f6673ebbbac31374baee1c3fc043336068c2033a073b7a144f0c7b2
SHA512 b4f439b37d835c7bc9c01acaf293c81c2f467ee717fac2d59290082fc0c517749210c4ad53b5a11d8fd7790066a597e6cf1f002d4048fb1c5b887e4ee385190b

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 b19bb9b4714c80c04999c11f9ba5bfd3
SHA1 f40dddab7376bc470ee40257951f2038acd411b3
SHA256 a2fd8337b926895edae11d2e0480bffee8f3761585ecdf8ecedf563a576c5cba
SHA512 90786b354f0c2e1fd2a3f9f2385eb7541107c27cb04f7956630f5014f43307dd519a4010be96293136574b394fc0974f219325f01ff46ad463e767af5302b991

/data/user/0/com.uptodown/files/PersistedInstallation8792632654922318784tmp

MD5 6d38df6b8da27f51a783dbd50ed8e7f1
SHA1 4fd8489950f91d8ebac1deeefc4274bd5c1162d1
SHA256 6f5597b2b50acd8a958592d73a836387ea46193ba2fdc40c6a4f2f9550416c6c
SHA512 0a115b3b2d65073359a1677dc19fc6f242bca8236e3a7474af92ea86e1de46da70f910bb4e2d6d7cbc63e691b94a00c7407d2af5efdd9def5a40dd7b443c64e5

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 6bb7366b77a1b4f3b7027af0114ddbb4
SHA1 302cea6430a102c2f11dffa51aaf2cbe482df8c0
SHA256 a94dcf7ebbcefc8f5b4a3393a29b0ef7872e079a8963d79ae5ee2299dda74f42
SHA512 a055862bfea0ba6d57a2746657780d9ff4b8aa5d59078d32ce90c2e5f873d54a93e365c5b1dc2ccfd837114175366691b284a49b2de808f595ec427cb3fad350

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 9872f2e493848a47cfb3b7e597bd549b
SHA1 be8b536f62ed055a6dd558f86255952a8b29a23a
SHA256 5221278db2fe934cd42d08a1ab5b3bb567eea5ac7bd557610823aa520026e560
SHA512 2934d35e3259b17034a409d84ed2cf159268533104f887677d8a467a2204db0631941c35c7ba61829c9ce5a5b3f06bcdcfc2ad061af02d46a6617ac2b42f480a

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 73af7466755ee2d5ad065e67cb45fa48
SHA1 447f4b62bc0a71aafa8892e42ad24d196371ad83
SHA256 bd7e170647dbf1194a7c1f8501f900770d1845958ea653056c9e89f14ae50256
SHA512 630163a2fd8470c722e83736ed4dbe82d01c286535e23638ef8cf4ea105e7532f0063e0587f6c7380bc0cff80b1f7d472c9b8d0f76fe4aefc8c91fb1ca102826

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 20604b11474a015e6d455bdf7b599351
SHA1 669c813af72e4288f67fbc2b181f606a03ec94f0
SHA256 2847ef26a38f1df460be25367a8989b7a5262f7bab005f6fbffb034e418c03cd
SHA512 bcceaf0888ac3a8c8921748f5e58a6950dc947f3607c79b08781d6725057a9023d8e24020d1f3e520899148d80e0cc13f2328d587b47b1d74592eda01ec633e3

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 7f5ee78972a932e8d8eb489382a874c3
SHA1 7a1b0dcae1dbe7501b5bce8e0a76e020fb865356
SHA256 979144150cc62716c40d76077c6ae940c1a7a7c30371c5ab30da0fe3869d4203
SHA512 8e3f598a03817adc1a8694ffff92afb2e3b6c93e16d6bf40791865a9614b3b80731b2c58dc061f6bc4aa4cc78d7a21a28ef621a3cfa59d77e6ffd89bb763a47a

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 fe5a4c6e9770ff567242c2b20bf235ca
SHA1 f4a58009d70c4ab2aadfd4f355967b53f96535c3
SHA256 f85fc3163f234c3ebe6fd30e3caf8ed28cf9f559c88f3d2f980d49faf6ed070f
SHA512 2ba362a154a2071f435a32e8e1650a238197696f427b9ebb41fbf099e591bcb575e2ffb4d0ec54a505cd5050aa9a65703293084d6f6da1cb9f9578c6c1e96eb7

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 4617cd03a2706220cf97b9879e7138b4
SHA1 c639e0e67178dac223b02816c29b6b232041d633
SHA256 13d5e1110df97e6cb632a56b646c143bbce79fddabd28fea17dc720d2e85f638
SHA512 b2e5211091762dd80d8ff81b935d3a16e82de00c60b8eb90fa617fe7be776729d4a5d1256807a41518aa833de6e37f2e3f93a9c130647770f20954cbb41ae455

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 6d212232a6c82a3bc5f82c2c8caed0b6
SHA1 dae3fc6edeba91b5b565d272223b168abc70f3df
SHA256 93389d2a5e0d883cfd394c44abf392b9b5271db72d66fc7d5c5663eb0cd89fb2
SHA512 b69469bb6acbcb5d52f53208df67ea7093534a248bc14a8ee7ba2decee7a967cafd96332718e0cd697e2a8b511fc2f7a38f033a1c6c3e0c6bf095632ebc4032f

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 9ab2c31f533a3380d4c51efad6b079a1
SHA1 2a6efc268dc5ec865cffc4b918991a1ac818cfbd
SHA256 471a4cc70c338236445232442bf8fd2dfd8e9a1fdb1274119585813344ed0a08
SHA512 6f82720198715163f6b60b15ef34791628fee04918ada0d3bc876cf5ee7655c04e9e4c12a7204c99a9a479354fce567943bffb6cc0dd2aa6c4be30dc34e49a85

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 f2731d72e9fae301ed2ab819954ecf8a
SHA1 6cd6949b661b86be0e4aeb0aabc7293cda396ed0
SHA256 cdb26ef0eeda27397eaba5988bd5478e6331f9edc4a8d60185bc4ab09b3a3b32
SHA512 2377a921ef9b6b4808fbe9c11cec21020c616c38001ad9e98d8c018214447647f691caac0e51a5f57ba5ff965b7fa50ffb87fb56cd41a1ce18a932a3f799da62

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 3e292d474ba394cbb4cab7d9342a776f
SHA1 b917260f72be2019967652522b3481a840b9e980
SHA256 a23fb91c7c843b6b2c72b49ed59cd4501490b16594eda3fee14202514ba4ab8c
SHA512 fd53356cc7063b9571111fb2a0ac106899d88f6b7ccf1a0e1340f952ffd1b5f76788df35771251e71a6fca096ffe12ccef62382cab3ffe4cb6486e1c9e393ef2

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 aa8afca42e8d9018b063d0b5eca0de23
SHA1 fa6d6779681ad3bba9a07353875bdfe58f0d7aed
SHA256 ba96cc07c077aaabdc63900d611d538129a9325a432cf9ee9e105f47dbafcfde
SHA512 7365a91a0b0a26d643f6064c5ee63c2fa7ca5bafb573c47a5d79b502ec14038a3505035a8f9112117f981fe9284855a4c65531be3a67de8219052cbd48b6ef87

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F2035100011180E75C60059AEB/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F2035100011180E75C60059AEB/userlog

MD5 386dd783887ceccc64ff6d8de670e76f
SHA1 f38e710c9287a1264c53f0e0e2b9b5f54373f2e1
SHA256 80fbaf34697b9a808d02808e2a7a78cfbb148f1ec43e450affc11727322b3466
SHA512 c1258f881d62dfe88d45c274df5f9ed1246aa7f4558d1a4b35ccc3feb9d404b929b4befb0950ced38e3a8dc892c740859bb8e9b6b9efcea2328f76924f7d3363

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 696a89e7df8a575ce0f2c966a242ade3
SHA1 6c4a3a09893b83ce08e2d4257f416f10937a106d
SHA256 861dcf9731ec2ef9cc0279f244cf44a0e259236398b992ab30f5715ad77632f2
SHA512 0f8bbd03f562c0cd555ded45efacf76349097d5f0ff593d5c1dd28fa4c53283806cccb6a160789fc5ddd278cb2c3f05be5cbfa8bd6ebaa4c936e20ff1a66c4f3

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 d338387dfd1219f91e88131bbe5c73ce
SHA1 8364071840b49d4bd81922a2aca55d61f44838d4
SHA256 6b7021ed9ee52169bad5e4b78c6fd8b8442e305b82c45cf086554e91f8f41053
SHA512 ba97d59227eac847b4658ffd57ecca662bbe09f03fc2c957ed67adfb58138f583b5fd39894121ef86da19f48d68ec8eac8267567ed73b919640bf36fc7964820

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 b7ec52800f091f730dfc9440a89b28fb
SHA1 2c2a320145bf2c2fb482d0af998bf27afe50b20e
SHA256 2b0c9c1228e76cf635c39c82ffaa33900e3860f860f622084c5e07dfcafcfa6b
SHA512 cde2b1275d5968127e3b7c2745032fee9acecefab5b6eb7c6af2d0d642a96c26c100f304f3394e387dcdb85d4f7e864cf55e5caa542e0d387760cfae0b91ee49

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 5ac806a50ca1a310c13d40e49d5a63ca
SHA1 495e46a78e8602d7ddf62666847be6852645defb
SHA256 894f98a3c65c9acfeb6ba80a44981d290fe19c6bdcb677407e645c62b808e010
SHA512 e45fd6e60ae35015bdc3622c2491954cecc836f51f3f4222d8f6bac93129fe58d36887b7c2d109e7addd28b131f57ef258fd0d76117c8f2d16d5b7af53527195

/data/user/0/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 15073e566a35404f0a3c43de7319aab3
SHA1 09efa725425453b733775b01000061d3479f50f5
SHA256 c2cfc62348989dad96d922bac2b95d4260f49e21d3c20162856ca472d5cb8767
SHA512 b58d222051d13a03c64e306e72da6cf878ff5d5e1e4ba46f3942098b5cd5ce92ba9106eb5af65f5e0854f68f1ed887e643e30dc415e445c6544bb01425d6df87

/data/user/0/com.uptodown/databases/Uptodown.db

MD5 73e46f0a992109ad03facf1a89528123
SHA1 6f61c05683b9ed4d86274dcd761c7418c56fd36c
SHA256 5d93016b7632232cad40266fe270d9777014417be4e11322403a8f4788b0ac3c
SHA512 62513309c58507a2ec043f18a05efd6854fa3fd159f3671d7c8b3d449f3d055c56944d5a36fdcd4853b97d4112b9556073886a03b66621e1d50eb1b99a06917b

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 0d0de25e418231f0eed6206b470d7ae4
SHA1 79709ad90f6a91489d093d97ca9702413f733946
SHA256 d431c6c13c14f044428010eada54b79a199549bc6018c3ac79b296fbf91f5163
SHA512 89fb2d1c09b851e1e540ff51573954a3254b97c03713f367ff1bd80b275f8758c6cd9c048cc6ce6eb3c3c46dbc88ad8ce9d22948b12d64a0edcf23e885ba7517

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-10 13:47

Reported

2024-06-10 13:53

Platform

android-33-x64-arm64-20240603-en

Max time kernel

48s

Max time network

339s

Command Line

com.uptodown

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.uptodown

Network

Country Destination Domain Proto
GB 216.58.212.196:443 udp
N/A 224.0.0.251:5353 udp
GB 216.58.212.196:443 udp
GB 216.58.204.67:443 tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 secure.uptodown.com udp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
FR 51.210.117.112:443 secure.uptodown.com tcp
GB 216.58.212.196:443 udp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
GB 142.250.180.4:443 udp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 172.217.169.74:443 remoteprovisioning.googleapis.com tcp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp
US 162.159.61.3:443 udp
GB 216.58.204.67:443 firebase-settings.crashlytics.com udp
GB 142.250.187.232:443 tcp
GB 216.58.201.98:443 tcp
GB 142.250.178.6:80 tcp
GB 216.58.201.98:443 tcp
GB 142.250.178.6:443 tcp
GB 142.250.187.226:443 tcp
GB 216.58.204.67:443 firebase-settings.crashlytics.com tcp

Files

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

/data/user/0/com.uptodown/files/PersistedInstallation8510907116535789627tmp

MD5 fba94aeb44fa67064fc3bc529fabc440
SHA1 454b2bb2653c35f53ee5082cd631bd4936c49b64
SHA256 23f7bba2bc7b504974958db6ea51dea2fb6ac857eb81093e469572ed421dc052
SHA512 01ae98e54dd7314d4ac0d33160c47d249ea4751828c231b76a01e3aae6d1aa954233ff9242c0bb2d02a6cb10205ce4ba739d17738bd8f612a907270eda30d1c8

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 b67af643182a9c10c28f38e67d767503
SHA1 7f061d85c536f061eff083545daa1bc9c0995185
SHA256 7344de758ba8b63f986e42629f31fdee18c3b64abac1e110ded9bfab0f2cd7bf
SHA512 5fcbef89a7196ea3ca2c8d7beba3ccef1a508179d624b6554d61ce954730138b43fc12def28115211ec68f1739799ac99385f05bff23fbee947542088e9febba

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events

MD5 b1405687b4d9bb2ed45a7dc82c07c86b
SHA1 7a4a509f1b9bec2e75041ceb321b5951a23bda5b
SHA256 2aa6b37f431673e5f6c90565d0f0196b9835fcbe6e6f81a2852d6b5973a7cf10
SHA512 a4fc339e86c1bdc09eea8e95b63524949e0cd6dfca5410bab4c296709ad5f0ab7491f1ac6c3da9429531903b53e286945468f79c2697c0d073bd04b60ec90bfd

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 d3f259a4f61d48eef936557d1c80921f
SHA1 326a3a996973477b7abb2ff654089cec496ea430
SHA256 2de2619d98d44fadf7e7d25a70cf26f00b706784588b560ea2ee57f652746e06
SHA512 d16bcc5bc99cf3d9dc76b8fcb4d9bb484131bc3986813eefd3c53206d9db3086bc6eb11ca187dbe444083cccf49a7be2fc35a1e38fd19ccb368f1eb598b45791

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-journal

MD5 936b450987b9008f22f7eb7ecbe477cf
SHA1 281154ed3cc5f782bd2d8edb392b4a0089a9624e
SHA256 55cd0703ef04ed83a7b90066b74ada4c80ecc3e2fedaccf73226a0526c9ab19a
SHA512 db6a1713b62b5e29beeba629a961c64f4d0481174cdf3c46fe92d2f57d6a4b5acd570474b73157c0d6078c4622fd015539544b12c74c4b028dabc42c28b185d2

/data/user/0/com.uptodown/no_backup/androidx.work.workdb

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 be17591085639196cc3934d5c9c84f37
SHA1 b245fe9acc3a43ec0cfe2374a03b8f1b899779c0
SHA256 8506a75c127c4c9b3efff341619711750abd3a5d6333bc5235760e390747c751
SHA512 882f5ae72c0a242f39f842be7ed87334263e1c1c309554f0f64647d20abd51efcf8eba597fd5c9bc74cdb57fa33edf15f05baa7e192a1521065771c89b3904a7

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F30059000110AD8A3592CE9557/report

MD5 0fce6208a12a68cb6303b584fbf2ec9e
SHA1 895cd16302c7dc8f27a934e1a8f251591eb57763
SHA256 e0e0bb5be5ce5ba76645f731c3ee9f6d576eb2a8b026acc7b2f4d114fd6b8877
SHA512 7e680acb9b1bfaef7b59c27e1c949071b146b7a8dc29e0c8a3567aa1a3ffc16232491fe231d08141b41fbd94490f7964a187140d83aeb1a9a17687e577ba9380

/data/user/0/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 56346f58d4b977564b232b7dd57b04f3
SHA1 5b7a2b698eb7eec87baeb5ee09af6f9dac796bfc
SHA256 9998db1b30956abd94b4b22d1ef7d70d8381a56921818edc8321f2af636a69c1
SHA512 fb869aa5c34390ee7ba340d057c121b28f68fb5b744e0b79a20e782044d3b8a08466909a838d533544bda4c59387a1e2544dc26e5f9bf1ce1b6581ea77c9f037

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

MD5 c4084096fbcd58ae363ad1dc48fcfdb8
SHA1 4705d3621a5ab4b51c9339d49c7b1384737537ec
SHA256 f60da2aa37a2430229b44f4df8cc66e389adfd32647b93d4f70dacec2c06888b
SHA512 89919027909f391f88d71aa5cb853798d0477980bf7c1a633662e8851c4d6bd2d5a044884f65e07180e01d848ab11e705a1165242e6f7d23752496d123ecbaaf

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 64911ebfb96a1990fc20c9b377265628
SHA1 6a2a50c1c3bcdcb3437c689e931db7d39748a8ea
SHA256 bdeca36e2e611c06951ce4204d6845b69daa138984d29886dce630f04b5a4ab8
SHA512 ada2ca71df7b896b6b1f7e40ee02cdbbffe09f0d23be1e9cea5abd7a2ac7fee29774845badf00cd266f04f586b66191a54fbe3643ac26810ed95bfe5526ca7e3

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/user/0/com.uptodown/databases/Uptodown.db

MD5 e2c61a4d6ad21b0351de5d0f437da69b
SHA1 21dc2ca963a187a5fb749323c976c30a8e5c869c
SHA256 1f696e1423396af4ea803b4fed074623eb3dcab3ba453de5b32a273268608346
SHA512 213a09c42647021afd542a469504de0cd41a3ca1f34fe89be360c5e3b37040d8b8dadf652b4f4ead0b19fd4c1ec66f2d495c35335c95c3fda5754cde6782b13f

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 5618316ccc08a82a41c7574263a5a6cd
SHA1 a42c443b9641203af6adb5c7875f6023466d3faf
SHA256 5c914cd59782658740a7ac39440f6f1e62fa0b26e06b2a435ed7458419cfc05f
SHA512 601633706fb24e80485ea547ad3a8b6d52d2875a075f6ec1d0d2b79920d08162e31f81737edb4ae2a4b898cd92b41f2bda215553ab3a97521623f5e12e3d3056

/data/user/0/com.uptodown/files/PersistedInstallation6516787509622736452tmp

MD5 75420f6c9c537ce13437bc943a67e6c1
SHA1 b97fee59b633fb428badd90859595f0f5c58a3f5
SHA256 08ff43a5b80c3bd0e0f166b703c9e104c2cb23930a58e7a8e806645459a5a2bd
SHA512 2d04d8ad97547a2e2497b34e72725fdbdb96e22127f40132c07a84094590f979deabebcc47bcdb6a3f1b96b4b598b552cbc64f3b0937205bcf5bac575404fe91

/data/user/0/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 f8b74a906baec863a4e5017e5f4a0926
SHA1 031821f493fb9760fc6807be96567a176f3421b2
SHA256 ddeefee5213823f932fdb29dfe031e91f4858b368898c45588ee739b4c23d5d9
SHA512 9985a72c32d2e6746d98d689c8bec7b1a7f0e208c708263bc02a9dc163471abd97cf5f5451f4dcc19deb30a4ea737e66666e26c6fb93d428f4f442c6c945a25b

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 2792e143d8c86befc8b3fc748708eb79
SHA1 1ffc201e5565d7d8eec37a4544b2bc25f0378a33
SHA256 3d56bebc589572cbd9a41dcb1a6bcdbd3b7a121cf437403d61e31806667a3cd2
SHA512 525aa478f9fd49f830dbe5f8c37488f22d8bcd1adc02a7a2a646994611435e80cf3a30c776e6f7d4cedf8794de6297dae79415b3d112bb66db198f4acaf9b08f

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 52c328a3c5429f325544fe5ccf2d27d2
SHA1 0a058ceca3dc515b125109d33ab5145401a9252e
SHA256 15e7546d028b9891b6baa3ecd854588bc5354aad3900005e07046eea93236e22
SHA512 8e628e1e5768b7a83ba070ec1e5938b1a3abf24d4104d270df77f3533b4b09b9f0a602522817ddef765d7e5d44219dfb547b227eeeded59eb993ea2aba639143

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F30059000110AD8A3592CE9557/internal-keys

MD5 be6852b23c0e706ee578e4806a4eac97
SHA1 52f5fda97480eab2b4339186d38d6733c2ac2e70
SHA256 6565fc593db30407fe36b9456f0abd5b494d95964667a9a3667c00a20ad370c4
SHA512 1b5a9f5387d1f2f0fc7d158adb2b602eecdfa43b67020f23964e52e7ef7e94a47a1df5dd8bb7425e2118fb3e1eb25d2b3d74bd66f04dbc12f34fa3cf8964c4e7

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 dcf52e44fe475a34805ce261347181e9
SHA1 93bd54ee0ad1c6ec14b07f7bbed7f682f8f0eb6d
SHA256 98b4a28dfea4df32188463325a51c2e8c336c4b199790c2af5347118ab1321d1
SHA512 52132ed404c542c647e19b749e2f0d788d54d8706ee332048bc13faae7f56108d74f04580f06eca3d28767f806ff02a35150071f1fa5a479fdcd5ccf39d817fa

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 bb459960a4e872d786893b5de39f8c92
SHA1 88f14c94f67e5aa230a66bb1b1ea9933da216157
SHA256 88ae4f49edcff439f7e5108196df424aadf9a348c717801c4e71d9457cf93a46
SHA512 a06e7ac96f102b76e1a6858cbd27849ce75d80febe966fe59581ac08090003eb763bd627e2ed8708781935f60c2bc470fd08413dacacc63ca742dc0e0d856d02

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/user/0/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 c4024d2e66ec9cdc1e3f854e2a4512d0
SHA1 e3391c1841b7681e6c02325a6f18048ea42776ec
SHA256 8c2817bfb55a19eeacaccba96df422f3711be1dabddb6a546c341b223d146c27
SHA512 917f1dddc603508f0f2b26262eddfdc41cac75a1e08d725ea7c719ad6409c38c6a438bd6e3f19a97dff8636f9afccecbf1a3a6358583a042ea2a6aee77dd27b8

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 a440b0000ee350c9ea25721bfdc6da61
SHA1 d1a897bae5a01e6f546dc981e6590f4678826d4e
SHA256 945a1ac4a890d76e8faf18a9aab9237e70e16ed718efce275583afe8c7748fd4
SHA512 c843783bbb8e0ee428b0f7d4229d557cb73b651bb81c6434feb186b1e893606f61fb1be9481e8addd3088d1f2f792af491b020e437ffaf522879953b733addc5

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 5ccae22390e9d5a90bbfa667bd336f96
SHA1 b47b082f3b937b6dba6178c08d4f2338b1d320b0
SHA256 f7e9c0a49c8b142f52d44ca0226d206d75fda81f75fc28978677550da97efdcc
SHA512 8d4a396abf75c849d4e37de84a977c5b26da54a28ddcde2b5a5bbe86675d98c075f17f670a7df98458bb43ed016f46e66e06c0f794143e3574bf5da12ab3e792

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 4347f9fa61552b30deb3fc88574d9917
SHA1 9664e863454c811539458f36f0e02f4a7fa931a4
SHA256 a054b288fa956af49bff4a32b98bf4ddcea57ea24ec22c08965ef4dd2fc80557
SHA512 b4470fe213356a352af4130496d4a63741abb6afb596e1d3284a26f511fcc68bce6aa0b9a41f0ceaf3ed90c88461776b25432b5a8bf1b40d7e00b50dcf86592f

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 23b8b476ec85dbaac622f7dc1f8d5b1f
SHA1 97d56802ed9a5cfb2c6eb00b37483d1bd429cbaf
SHA256 442bc89d8d09b3c2f96e45dfa17c1618ef8a72e7c3f11079437c91c5227ec8b9
SHA512 a905f5de818990d5ce46db3d1f2101462223222eb44469672af89b605e54d88716dc632621ecd32b5db94a8115c1d069bdc7ce12e58974d5fdeb2582ee1df067

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 ca1a493575b69911fad7b9ffb8606367
SHA1 88b614337d0e1f8951ad9434f9f2423f3d76ac73
SHA256 d9b8e6004485fe14bb02654e5196607a8f3fb23ff939b21cf91951ff9d374946
SHA512 5a88f2b2fbc1a9b09c4d7019fb8a0e9470f448cbf3e69c391370cc9701dc03c7e341ea8c8bdf48b876e630d9a39252e7d97c8ff4e09b9b93bdf6de20ea8ee033

/data/user/0/com.uptodown/databases/Uptodown.db-journal

MD5 fbd55dcbb25fb9f3b99d457218d0dc83
SHA1 f91495efc4ebe48c4604238fc4fee671454a42e6
SHA256 6e6f0e169b6cc22e25ef908a95e8b752f44deb2c9a94ed77e4af5337aca246b8
SHA512 2cd53a7e03d2901a573458578d42ad0a05f09417f5a7da9c33062eab6e543560d59bac6df124009032f2c2425a799eefd36f032ccb5e5870782703c1cdcd4459

/data/user/0/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 5b8279537c551498b152d6f71bfa2dea
SHA1 976d8b821c0ca786b04e6672d03e0cc01d3500aa
SHA256 d1bf6c024308bc4e83e563245b3b8db8d21da5e91b197df7c897390e2e2c36df
SHA512 7baf4aed0583c05d93fceb774fa41bbc6f0859303995e1feb60ddae1986ca5d6afd36fb3bf382b07679b7e089b16821b454680df62fae4669e3b1004f2e2cb6c

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 8d2a12da3c01bb8f9f9c1b37ff4fb7d6
SHA1 09d7d91dacfa2553f8ce10522b689c268ce3c5bd
SHA256 a3fadf1eb1f02f19ed02cdd310a33aec363e213a5e16295afe3d0ac583dcdee9
SHA512 e56ddaf83ea3dbd4ebe1166438260df386dbae4634f541e57622108ab766c77cbffcd183f88519fbf5bfe269365f65a4ccc216b03e4b8c61d044ffc27aac8532

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 b510a943535e6267fb4875ad4b651687
SHA1 680c73980101bb98b9bc83a9bfd3aca1967b9f86
SHA256 bd59ff87b7d97694706b13a886272562bbb8bac0c79d93dfccc7bc0928cf761e
SHA512 bf05814f65898732faa3102d13438448a4c9be1f7fd15966df37693b3e508c15baa930750cb9a45a66d28475bd7b67159f57a4b215108e6017bca6327bfae966

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F30059000110AD8A3592CE9557/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703F30059000110AD8A3592CE9557/userlog

MD5 2ad23b9977afe41b9317216f4da52794
SHA1 ebece068af7e32ed90c779b1fe080fc9d7bd10dd
SHA256 cee30c75d6fcb59acc8fe501934464a7f66b306f435e64ad5e633e5ae6c83e74
SHA512 e9e9d86bcb6364b477ff5dfcb4b369c031426cad441d28c910140b1a73391d26363ac79e40d7b96f0bfeee850b1233d6d49a20e2326dd6468e6123aabb972465

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 56d55f843e5e89d73f0b5329d68e3a4a
SHA1 458c3cd2e59c9cea0abee4fb385962172f9d797f
SHA256 8db08b66ae5b0544326690f15439efd201aeae22b2b065853e7d1d4ca660bfa7
SHA512 240b6c0fe8b6fdfd4c7e09c6107f2a6a5986ac3fc1e7d611c7111ed7cf735cbdaf4fcace815b9a47b07527b1a59a4fe6ba93eeec2e6d9ba0c4c8a2024e72c281

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 caf39350143b4aa797ed684ad53362e2
SHA1 175f9816a6a97f7310f46e0185a0145b79c03f02
SHA256 0252aa8caa04daaa8ffbdcd8ec7b468b85c76916a991e6a79de916d60d856c3b
SHA512 aac4ea76394db492e584c1c6695cdb7f0528d356544a543f54761159da8e05429553c655352652128572003240043909042275788cd18ec114cfdcbc634ac086

/data/user/0/com.uptodown/databases/google_app_measurement_local.db

MD5 429d17a573d2b0c27dbf3893567e7ce2
SHA1 dda0ca2b814019afed5a0a8aded1a3655a795473
SHA256 c347a9743abcd06c09cc1a79454edd91cb2b4bdd2ec831a319b961d91c88e0d2
SHA512 26e163272b9866c7ce99179e522436cde0116f2f359a7c1c77f2394cef59caaac98aa99e6674fd5280c7acb69305ddcbb6071bcddf932d21d070560a88257d4b

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 562319ccb22aee3b65ae048869f5a599
SHA1 506ff48500c6f0d1371695126e64ecf601126083
SHA256 3455a8f2712358536577c114d53582c5fc2d97aef939fa99a182b56de71f8596
SHA512 b7e87ea04d59afdd08a1ebe8bc268d862c6067af3acc1eef097fc92ffbfa07a5d5a0d812326b26c26d8ecaadaf0da8938a35abb4977af0b98a2fb14741e762d2

/data/user/0/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 c5992208e327671def116b3cdb8401f8
SHA1 ae5f2d672564878415bf00383c4420edffea7f46
SHA256 f24ef264f3905bd1573baedfefcb3dd219846b1422c60f6d47b704790f912bf6
SHA512 cc024c8d32530c4eddf650efffe1aab157cf9e7b3393a9a23e5689fab172d3498c4df9ee79a0ca6c4bc796504b87a944569e698878fad114f7e9b180c2dac179

/data/user/0/com.uptodown/files/profileInstalled

MD5 8d7c4b774dbea8d4dda8e903f99c124d
SHA1 035608582438f92972e76e8d54913b779631e098
SHA256 523e80163839b2818b21b02af8fabe4e95e91ad562482b3d206dba39e1045eb7
SHA512 78f88cf3eabba96a955702346e385f9fa9c3f6eba549163593cc0b413dcb91e474845c70a0232211e81b88a7cab1c8975b94302d58e38f2b12828ab4127acca5

/data/user/0/com.uptodown/databases/Uptodown.db

MD5 3bc20c045f53fbbbd282a044d3258ce8
SHA1 baacd556540dd82588193fdac3a1d07901bb4a01
SHA256 df8cab5cbdc89a43d6c96d621d791c6e62976caa87578ce8799f38d0bc7cc56d
SHA512 f2669b500cb43b5bc71270361ae926eb87ebebc6aafbdab3a1ae6fb4da2e4c62a20fa65788f868fa2c7a950622f0555dbaba69a1c0a928d1d1338f62513f1bb8

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 4388432b29ec9bedbd58ecd4f985be3d
SHA1 2819073bcbb3a36f4ee4e85bdf2f8b5012dfbbc3
SHA256 861c8ae9dc33d6800fecf48355896a9718612c09f3f4988e9fe8974cb553d003
SHA512 99d143aeab489131d3b813c8bcc4847d10d0c5bec4e80bf7983bb9b564f132cb395d503cb6436c245fe5ab12245b190484ed093f6386f91960fa2888f9c2938a

Analysis: behavioral4

Detonation Overview

Submitted

2024-06-10 13:47

Reported

2024-06-10 13:53

Platform

android-x86-arm-20240603-en

Max time kernel

321s

Max time network

335s

Command Line

com.uptodown

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.uptodown

su

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 216.58.212.227:443 firebase-settings.crashlytics.com tcp
GB 216.58.212.227:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 secure.uptodown.com udp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 img.uptodown.io udp
US 104.21.78.215:443 img.uptodown.io tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 img.utdstc.com udp
US 151.101.3.52:443 img.utdstc.com tcp
US 151.101.3.52:443 img.utdstc.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 216.58.201.110:443 www.youtube.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 static.doubleclick.net udp
GB 216.58.204.70:443 static.doubleclick.net tcp
US 1.1.1.1:53 jnn-pa.googleapis.com udp
FR 51.210.117.80:443 secure.uptodown.com tcp
US 1.1.1.1:53 play.google.com udp
FR 51.210.117.80:443 secure.uptodown.com tcp
GB 142.250.180.14:443 play.google.com tcp
GB 142.250.180.14:443 play.google.com tcp
US 1.1.1.1:53 yt3.ggpht.com udp
US 1.1.1.1:53 i.ytimg.com udp
GB 216.58.201.97:443 yt3.ggpht.com tcp
GB 172.217.169.54:443 i.ytimg.com tcp
GB 142.250.180.14:443 play.google.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
FR 51.210.117.80:443 secure.uptodown.com tcp
GB 142.250.179.227:80 clientservices.googleapis.com tcp
GB 142.250.179.228:443 tcp
GB 172.217.16.226:443 tcp
GB 142.250.200.35:443 tcp
GB 172.217.169.14:443 tcp
GB 142.250.200.35:443 tcp
GB 172.217.169.14:443 tcp
GB 142.250.200.35:443 tcp
GB 142.250.200.35:443 tcp

Files

/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

MD5 bad70f3cacb82b21b2889e06ee3b2ab2
SHA1 d8b18996ae830a562851a7d1f595c32e4f25c4db
SHA256 ea48fec139ef85b76328064aacfbba25439a9a75ae4a167b7ff31d08fbceb67f
SHA512 539026293076f598a8b8ad57df1fab2d400b7e0079b8c1565b731e63072e8ca915202b11889c33406325bd444eddedb50712801f647def6b8b58fc17b0e43650

/data/data/com.uptodown/databases/com.google.android.datatransport.events

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.uptodown/databases/com.google.android.datatransport.events-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.uptodown/databases/com.google.android.datatransport.events-wal

MD5 221438cb376418fb18bb88e727096f84
SHA1 80cf15ee7d293bec0bb38d04274e5ea462487c5b
SHA256 9011f81e601fb0e9355abee67b03f1b8edf7a41841d6c36bdba15cfc3c9ae88d
SHA512 cb6c50b7f754be2654b243f00d57aef51dda8695b230bfab50598d7314f876fcf2e95c9566daaf0919da1593a31aec9bbcd6f772a8a0fb607e5b0d73e8c221fe

/data/data/com.uptodown/files/PersistedInstallation2614962430580149303tmp

MD5 0f6506d6392c5ecc809778e4e48f966c
SHA1 9edac4e450c1e1fea1e96b41b1de3d996ebf1c61
SHA256 ed219ce8881506323147c9d58dec7082e54319866b5cde6c0befc2515854e740
SHA512 f6b772a267cb4ded4e37778c0bd55ffa4f9688d629625538b3b8cc48b6373f98bfb680b4f2e3dfb0ad15f1c3b2f1517aabafcb44c45b8724d1cbc7959c20b54e

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703EF027C000110B10A983BD5DBE8/report

MD5 f25b3ba5ea51b2eabcbc5e887e4e2eb1
SHA1 ae90d5ace834cd91060a76d88d9c77c9b91758fd
SHA256 a048b09b963cf7eeaadaea62b442ed01e7ba97fb7ee32aed2cad2e8184ff10f9
SHA512 275c16c818087291b864c576fec78f70d80c6770fbe2cfb3e8902fe6c1cfdac5ff328c233a0798941f8748e3e74391319a7c58e547129a49aeebd9eb62e5c448

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

MD5 bb74eb6ffe4571f56974c146ad0eefc7
SHA1 6a950f636198d179ebf98cb599a78e7f1b4252bb
SHA256 cf7f37cabf9e1ed5a15b550f48ad3aa434a2d81066803797012b05e07913ebf9
SHA512 69cdc4a72678633c605a2623a3ad9de3949f35643eecc0a3f01f7e10a077b5842df56319a91f4016270a92d12aa87195c37b4b76c22a2a30e060ec13db40f87c

/data/data/com.uptodown/no_backup/androidx.work.workdb-journal

MD5 b6d8550646e48756522f6eebb9dba8b4
SHA1 059f912b5bfea7ce644a31dadc4fe14326fd3b8c
SHA256 537d642b93f0a886863bee9df95c821f0030901f221cdc394aaf0fe5064b4212
SHA512 11aa218ed3bc13b811f6c1d5539dbc8552c740797c34f21e258fa55116ec2e75b15187f4836397ca1083a3586768d7f7c1f8a3ce7933b865654985ded61ae25b

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 9ce655b8ffe8c7e488013d3143a64312
SHA1 ec2fd1d93251d49cc94e85ed7b940ece2b1df6fc
SHA256 77c74a45cbec6d507559669b598f7ec5b991b184676a31c118795d457d3af6e0
SHA512 556146456981efa07d329df0f6884973e3a3769504c996bacd5ae465a6f94548f0ee314af85f333873757c6ee85ecba1c803d4ab96096af9ffce6dc0afe88475

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/data/com.uptodown/databases/Uptodown.db-journal

MD5 4aa88915fd1d017f11ca3c3798878de7
SHA1 548eb06f64ac29a24cd50de8e40dc47293f60c65
SHA256 dcc31bca94110a6965871257c5ad04cc6d852b55487afaba0064e8a8e81d8b78
SHA512 ec730a6358382ea569c9b10659b9dc3cebd7888bc17e9ec8bf2a0640925566dc6fbce9b2860c2cdd1195d96858cd4867e3498a08eac5d9a3823a8fbc3bb65656

/data/data/com.uptodown/databases/Uptodown.db

MD5 a25011e597312f397a7dd75b4a95314a
SHA1 85d91beb60d7d4e61c72cb0a9ed3c272c3ffa237
SHA256 ec29d534817cd58d986781943d1a6f823e6bc213eb53d8c0997d22ec27f9be0d
SHA512 ec97e0302d815eb4aa6b589546f6322b026c6f1d790094e17567c4f8b213a8f827756dd4d015165d72e7034b65559b87ae67e0fef7a2aeea1383c8eee6efd271

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/data/com.uptodown/databases/Uptodown.db-wal

MD5 31ef08cec128ad19e989654ee7dcfb63
SHA1 22eb335f7ac22dc632d9856ed71e06f314618bb9
SHA256 6d3347e2d326ad1b7077fb72df0b7322688f7e4c9e38dcc0999532be3d987870
SHA512 573b7598425acca58a888d8870e22dd201858975bbd48ef19f6ed97c211814238b59109d79c87aec7f3f1618a3498ce1189b070151589bd4ef2cbccec43f738a

/data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 f3e63bd86d84621502c2f5c6db68a3f8
SHA1 b2694f0b4581d0e531b1b3accc35e0d287709b85
SHA256 aad0889402900dc2eb53b5a98df16aed92f3942d32f2addc5f887ae4c46cf3d8
SHA512 c3a39c6ee1eb72e208992f8eb822377d29ff2def2a4f9f9e24864c60c2764a210a9060f297f9bf9d10e16998a183ef33e45277eceee59c7d44770e955069f5cb

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703EF027C000110B10A983BD5DBE8/internal-keys

MD5 be6852b23c0e706ee578e4806a4eac97
SHA1 52f5fda97480eab2b4339186d38d6733c2ac2e70
SHA256 6565fc593db30407fe36b9456f0abd5b494d95964667a9a3667c00a20ad370c4
SHA512 1b5a9f5387d1f2f0fc7d158adb2b602eecdfa43b67020f23964e52e7ef7e94a47a1df5dd8bb7425e2118fb3e1eb25d2b3d74bd66f04dbc12f34fa3cf8964c4e7

/data/data/com.uptodown/files/PersistedInstallation7251718243957951531tmp

MD5 308a150a4d6f5b9d963eef22247ab454
SHA1 a23dd656dc812102bd92d9c1ebf902c3f50e0d2d
SHA256 d17e082c37812bda4bc31b38d9f4d3429bb573af4ef5c4f80ee29487fafa6e0d
SHA512 c9a33a3ade44d50f0ccf365c2cd2f2a71bd1db29f7cfc431af433466807a091f9e85eb5a7017fa8f950f0cb7974cc9a6ee266c7a81a630e68fe9edcaf07c2e5f

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 b356542acf36813f2ea8790a62bbf526
SHA1 96fcd9afce65ba095bd826776f8a041b52017b61
SHA256 c3d26778bd42f3aa968439c0a76e57a908300e6906d530a44f9438b0cde0336d
SHA512 95a85eea3f9108360aa94d4fbe547c5155f58ce9c779aed017e9348809e7e41bcd76c420cf1f690eb71a44afa525b73907d0f5ee59c251e43f9e6636279ed08d

/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

MD5 9f1fbdcc4f7ae56106e8576de8b5e34d
SHA1 51864690f9d4c11fef4d33ff74685087ea44a3f3
SHA256 25ff40568b2b7ee91af7bd414e481e45d0062aa7310c54d3e265639f93f59093
SHA512 154b657cb71f07595b6bb8c99981a0fb3efffe3cb3d5e31cf6abb63e36ce20494f68e938246930e772060740d10b5f1b985608bbf1d34ba370c7a98fe876ed64

/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

MD5 f06dac94031dd99cced8551c89ce3679
SHA1 9f52c54a4a64612bbf84f8557f5953f02e2cab44
SHA256 b84c4e0dfa91200a17f497654954e2432a4c9b6a1dfbfb87b469ed7dcb0fd921
SHA512 9d24b7239a65c915c9e7c3f8e0e622829dcacd3dbc86fd919f6140e008f54e7cf4e4dde63306695a0952342d133a2ca85f14a3728ef12f93add090930d164233

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 4b342b8bb9639837a6f5fc5c81406048
SHA1 a68a4498c833d334585631585b44a310d524b0cd
SHA256 4985f13953015603c4d323d729d902037728b4ebde0c644dcf958df9833faf4d
SHA512 04507db1c2613be9d0656d5e5a2cf0bbffa120c80bb040d6f520ffe2d047e6d21b5ddfb68f6886e0b5e9a6cd230cb5d30627ea6f75bc89e85d5f01383149d77d

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 c69e6922e2cae3ec5dbd4443b38d2829
SHA1 45ff8b91b11659c8c49d1afa1dc53f91814e7664
SHA256 5ffe79faa6ee09df54a8c85e6d5620e035afcc508b0125f2015b38db9c2addcd
SHA512 30af4dfd8ac2beb7b9f919c844cee93be6eb29f5356c2d354055fe4b6d82005cd67bf929ef2ad5d9f6eb4827978f7a9135a941047170c8358a193f43c2acf179

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 b3745b40c55be70e3729999d22066b87
SHA1 1c14507cbd10dcd92671e0780a4dea4ae1a34587
SHA256 cef5b359c10d891a5e921e9fcd966fc145e97eb93c477a481be72059430809c8
SHA512 d724a2845ec156aef56bc819c0456033bb2502431d31818091decfd50e9b445eeccc52fb84e02e2141e505d61d5426b126d3398773e1f6e4f5e1b22c871e8fca

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 4a37b67e83900929738a29192dd7d612
SHA1 64b0d1ecccfe719ec28123817c08e5d3b11381d3
SHA256 469bfd7372adad257d933cacd31ae057c35f90e1ca23beb7b6f22a1890b8a685
SHA512 e3c8d7bb26368841ad921fc536204bb6ad2e665ce9f4c0818e5d2bbfacbe7774345cf7b1732692067a9c1d229387cf0ba5c08943cb02a30719c9f701836c1a35

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 a5ae2900c6d2038893c07e1d67caa7c7
SHA1 2d05a341c850395e23b054a9824d35a0acaba95a
SHA256 8f0878bc9df460ef07f42b6b07d78bae3a74368c2eea9b17c052a5d3abfc4471
SHA512 2c6500ea885ad764141925083366ef539493924400bfbade034edca629c84de0802129e3bc7ffb5b19983a653e8965db3473da493a76e998056af4bae8f4dad6

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703EF027C000110B10A983BD5DBE8/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/666703EF027C000110B10A983BD5DBE8/userlog

MD5 4ecb5f262f2bba4e4c7a64f49a231fb5
SHA1 8a1ee2b301d310e24feb64e15f7d29cac737de3e
SHA256 ac89939e2585efd92292c20b2203ab3569db3c0daaa67a6e953343f18ef3bfc8
SHA512 c2161141d1ef63583abc6aa877836d57fbef0c6cc2f96e839638c27be0a92d0175e8c667d2ea2fa8563feadb9fcd274338d22bc6b9da68fbb51363bb5562275d

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 ff1ca3c327c15afbb4d03ee3e844cd8c
SHA1 b402c2da0990aab7f2f9ee1defdcae20fd0be9d6
SHA256 c207ba712ca0b5e63be139013094aa27929fc9e6fdcdbe811c606045658f3bb7
SHA512 f806602e9f89185bed5ad03fbc04da2ff79417371f33570df5e590cb2012021b7c6edfc19a5dea17caf8f42b9b60fb8140bb4e585116dd854bd87bed81911ae0

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 4172a17533de2dccd6fdf8c2a4719f43
SHA1 f31b75286917a84ac37bc9633a3c4d86124ba5f8
SHA256 8f11ece1f2a79ec105773cf5baf9a35d67a0fc453bfe4d2371d6871d5c679963
SHA512 11a3cd6f3bfe03a3547fffbd7dd8d4bf2bb512457d5091615b5f45f330d8d4c9e33b50c9d4a6a93e9640279f038f7faeb8aa2e6b76c6e2894b6e95950a8356d6

/data/data/com.uptodown/cache/picasso-cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/com.uptodown/cache/picasso-cache/journal

MD5 ea362ba11e1f6f837b96d943146e9745
SHA1 bed11a77cd6f80e5e66e15919929afe530ffb600
SHA256 593ff06968e6eb7e5c39e66864486be8a7704cd73a67e99b10c88b424856511e
SHA512 b6141ae4a5f981574b3a748990355613b72c5e470a780c146dcdcd5c5b7eab719f4ec52d4fea4576139722543035e1a5c3a4f3b40008972a81316b70be2f132d

/data/data/com.uptodown/cache/picasso-cache/adee5fd29e00eb809c85d326e7ef30d3.0.tmp

MD5 22d93a8e48a37170aba395ee9ce0aa77
SHA1 a904aa112a0b5d7483ccfdbdc3c5f57df4aca35d
SHA256 4fb67a5b80cbccc45d463a4a4329e4fef1793d620f7febf976be15cd01712d4b
SHA512 22b0f225c5c997ad8a919f30bf14c11563abe065ea945b8a02c3de322ca87397fe9f30372b25955d83478b9801455599c89b67a1926facdb819e6ca9fec1f5db

/data/data/com.uptodown/cache/picasso-cache/adee5fd29e00eb809c85d326e7ef30d3.1.tmp

MD5 6b52a51b43b750f50029d19fa24b501b
SHA1 e9f71fb047ffa61a25aed64f8fa5dc00bfcae514
SHA256 2e4b0a3aef282f2826f927bd5fee9c2a7c9d193e80f525ffae10890a0b3cfe9b
SHA512 7c81b9c2f6078416d7bb3c2164b16c4a18db33e0433458d9d87c9055fcde5f08b44a9617a362d27325845438402bed602d6a8aecf02a2e74d73cd69aeb8753f0

/data/data/com.uptodown/cache/picasso-cache/536ccedbe587b02d213ff3eddf35e5e2.0.tmp

MD5 971fe601a0eb7451ac2217c544f541e1
SHA1 ae4fa98f8712a1aac0489982f04f490f45b5b2d8
SHA256 9b111cc15dfc4c5caee357447bcc86488d2517b38965e38b1d65082b64097b3b
SHA512 f7c5756c6ec7ddc7070a674bb96c0fd6abd088843d4232faa57169ebd634af5169f8e928c8c7ca08beeba2ba5ed3567ba1c671fe0b452ee5f3ea8cc402db979c

/data/data/com.uptodown/cache/picasso-cache/536ccedbe587b02d213ff3eddf35e5e2.1.tmp

MD5 0e84a2720af1418c3d127dc8884beaac
SHA1 a9fb2e1018c810a3849986fe74899766309ab0fb
SHA256 34318378351f04567464981bbc58a8091bf20bebee21da6e6c232a3157f11757
SHA512 7766541d78b5bf4236d538096e66980b5de87d2aabcfb9fa7b3cd7f701eefc388761958fc9c0622a509e66c19ee2789618e09d649561ed0c07fcca645992f52a

/data/data/com.uptodown/cache/picasso-cache/cc137c3a344a6307d55d877cdf6ac82a.0.tmp

MD5 1f90ad7430e623d8a1097f3f656c8e20
SHA1 6cf6c0c46701ba3a5ff399c516e79a5caad6f529
SHA256 8aa3a8ec06456378d7fea6baa2407c58568576c6ca42c4b0417e54914f5abb30
SHA512 7cbc7f4ac54aec2d4ad5cbf4998d3c20611f84c52ca263a5210c8116aa76217bc3c8fc830d07e13fd74888f1d9d9fbaa6c62eb5725bbd70f17f19e6291e4e674

/data/data/com.uptodown/cache/picasso-cache/cc137c3a344a6307d55d877cdf6ac82a.1.tmp

MD5 0702569fa7042f2948969861c63839a6
SHA1 92af3a6e742175acac2cb313fa4045c59fd87477
SHA256 d7c25c3857be3b982b273779a7c0063eec3a07000d950d4078b26e19b79534c0
SHA512 d8046aa1b33f8afe192dd3e6a24959831be4a9adc8b9b3d8841948503a9f17e02323cc7565d0ea7a83b1af3c37212620abc7c5039bac2940759f57e1b3612da7

/data/data/com.uptodown/cache/picasso-cache/2999f47127b4be6f893b344429a74335.0.tmp

MD5 f40ba64f76b3dfa70b98519c72dadee7
SHA1 e26934aafa6c333bb4c20c1d296f158e1d80bc9e
SHA256 e3a9d2066d3c562f40085ffdef933ed875896bad42696a2d9ace5afcff89704a
SHA512 407f0041c8dfcd7d19237b8b0fe2cf6a8e17e2003a4f6f868095b829fd5345965e624790c3a27a37d58f208d71b9e8a28f6f902b44970b2398d7b925a739f4d1

/data/data/com.uptodown/cache/picasso-cache/2999f47127b4be6f893b344429a74335.1.tmp

MD5 b1dc5c603c47fa45f02d6dd755dfb93b
SHA1 521d8f88f5759fd00aaa20392a289b6673b57a37
SHA256 c6991f90246bde46637ca0918833c161ceaeb9b50091cf379f2a57521a5c0a58
SHA512 43dbb9d7c9d529172cf9e532335bf0b38f27c2d016503caf3e1107cbef254be1ca3eb1edd724195ee375f820a62c8e85b3b26a61298ad6a23958b85b1b34d846

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 5ac806a50ca1a310c13d40e49d5a63ca
SHA1 495e46a78e8602d7ddf62666847be6852645defb
SHA256 894f98a3c65c9acfeb6ba80a44981d290fe19c6bdcb677407e645c62b808e010
SHA512 e45fd6e60ae35015bdc3622c2491954cecc836f51f3f4222d8f6bac93129fe58d36887b7c2d109e7addd28b131f57ef258fd0d76117c8f2d16d5b7af53527195

/data/data/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 def0ff740a5191e28001d9549a624501
SHA1 254971f087a65c6618f01493351732564da2ea30
SHA256 ac7f803466cd751ab2f0f3b4e04ab5dba7b191112e67b4f5a671fc6ad28acdb6
SHA512 f20147b6ba603e061e2f7480e4f0fe718a1f4eda3758b88eed973fef891f9c330cc4205fd604663dc66a35cef478e668a2f7336d6910b62aa48dbded041e7a2a

/data/data/com.uptodown/files/profileInstalled

MD5 533f74d8db70485b9d447fb1925bb64e
SHA1 b18c4e5d8e1779e18526049e9eb7f10996ce9bdf
SHA256 f64071eb37fd28936512f4bc92d92f377745e8e6ab5f0bb454de8ee4acafe23e
SHA512 6acef5587b60bc90da5d1511356ad14d3cd2c831a8727f09fca5fa656d22dd0c19ad0e72104d6ec272d4f7991df71387af52779fdd31feaeb7d19127616b196b

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 9587e3d038cd8b98b3ad06d6530dce6b
SHA1 3f6e68652c96a662763779ab542be9db3c712277
SHA256 57c2a5032ceffa76558ef641abab3a121bcdb6d2926146192b9c111e6a6234bc
SHA512 1c76721a01114d0faa1dd30b68ced070487fcbc09e311f3c06a74557b9c848ff2b37dbfbde522c6a0c8bbe6eee2235b2539f2cd0d80a6bed3fe53c1c1e732d7a

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 4e30ba8c41f6001816481bca7e8d453f
SHA1 16d9532dbfc349476326781adfd1536d445cb5f6
SHA256 661ba87ee953f3798c072cb5b313f24329e79b0275644c6a75763fc822bc84db
SHA512 527e23a7fc5b256e40db6fbc46f1c63b4fc8f9dd1bf1cc8bf97068c836b4b1baf83fd45bf5a1fe8c199f826ef9476c9c47455144b0a9a7172ae66119fd853c9a

/data/data/com.uptodown/databases/google_app_measurement_local.db-wal

MD5 a84f2f6fb30caebb8bdcabf25089f500
SHA1 d97b91f4d2a7f60301fd1c1fca0ec210e95f769c
SHA256 22541604420cd624aeedfffae4424dfa56f17509c93cb0de86570c26fdaf9b77
SHA512 f4c60ed28ed6d58930e0db39f298391610172794e0e4843878e90f64921ca719f8772f51e115a065c068509025c40a29484f494ed33a288021ccf46d072f5497

/data/data/com.uptodown/databases/google_app_measurement_local.db

MD5 44693692da738db6eb133cf0e4cde91b
SHA1 e6bda56494c325d8d37ad89552263ae85d9b0550
SHA256 8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4
SHA512 b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

/data/data/com.uptodown/cache/picasso-cache/0754cd2f10bffb9d6498472b30352986.0.tmp

MD5 1ba09545cc76d1ead6121dee9b2fdc6e
SHA1 aa498db6dc4f2f502166401e17dca55c83d29810
SHA256 5320b39e84d54f176b301f5f5136a6ab82d89365ff3345bff9d6c53ea8c60811
SHA512 52b222fd0d8214c6840aaad16d56161c1c89a12ace9912371d293c198c79bb2de47abfe5d8077a2435f3f0988c3c6201fe7c7a5cd95b3594b0d4a564b3f9931d

/data/data/com.uptodown/cache/picasso-cache/0754cd2f10bffb9d6498472b30352986.1.tmp

MD5 cfa3f4e83b8b2205ab8e2fec7cb96801
SHA1 7762bbd2cff4998c76f1e37687491e60485c5009
SHA256 eec9af1e69bb507b8fe271234e721eb61ef68ba79d637572b5ec61f9abad5bd5
SHA512 54040f9304b24aad959fe932da7b9ef2a19bc16d97858e6f321617837cbc751cb96810406eb631f78b1c8bf696a85cf222d5400ca9496d276b971913c577102a

/data/data/com.uptodown/cache/picasso-cache/23c140d9af6b6b45e0f472b450b3b1d9.0.tmp

MD5 af1d29ffa6ceb968b05ea9b598046d24
SHA1 fd2fda1464dba0c7d41c6dc70a2da15cf6530abc
SHA256 b028ca63fbd0d88ac905b8edf3d0244af98da4bc7c06e9cc4b8a78f36489f4ad
SHA512 ddca3bc4a8c8c72ded540c2c929ec12d26eb8b7ff69c679667d68236fdb0203593a9c45da3d40bc8967564d47d438690e709efea2b4a14ca65c23150ee0d1916

/data/data/com.uptodown/cache/picasso-cache/23c140d9af6b6b45e0f472b450b3b1d9.1.tmp

MD5 395d1e974333d6de0ae93e1da30a2d4c
SHA1 d6dca49a8bade3224b8cee82ee6c0edbc650ad06
SHA256 f2e3bd0206786dfa4fb50e140950fc69d64ffb432c3e82edd3b3b00c1dfaf3a3
SHA512 ae5eafa9d46c1f7e4ce5c36d566350429feac6ab69b0799e022109685aacc701d68aad3b41e45dc762ea397f3fdec31c452f7f7a82ebde67899a9df3316c417f

/data/data/com.uptodown/cache/picasso-cache/e351b3d50abc7158bb320bb05ee3f38a.0.tmp

MD5 d6802f604e7eb875e8f071ee7a889112
SHA1 495913ebad5cc896333772cf8d343cfee3beadd5
SHA256 b475cad773e1cfccf8d590bdfa0df0f23e01b48a8742cf29f633b8addeb43d19
SHA512 4837c3940a9460becca403cf8efcb705b5bcb014deea2466fef9df180d767aa2ac0e1905f29cd51064ec5a403510bbcce75aecaeba044df3350b1b125443ee39

/data/data/com.uptodown/cache/picasso-cache/e351b3d50abc7158bb320bb05ee3f38a.1.tmp

MD5 8c00da601204d243f65659d118f275f5
SHA1 0fbc5b21bd337e02af11e032e59693f96b031804
SHA256 61a9689c33e7d3ed501f82d99151bc40fc3313fa045f2e0b2cc3561e2dd0bfbe
SHA512 34ffe3453f01bca70aa24e1eb077ad9122333ddb7cc2e7dffa7cbf824a17a2b50657a03f71289b84a293aed6f07ce943612921d2df9fa409b3a498e7a4b6c81a

/data/data/com.uptodown/cache/picasso-cache/eb53f04b09bf2ebd2dd1e00d10b95abf.0.tmp

MD5 ebf7851afba6217c71e2ecabefad4240
SHA1 57fc9b0a788c72c21324897f17dbb80f409ff88f
SHA256 a410bdf467a2321b81589ab0a2ad3ac67830316420ef7a2842a14131dde85572
SHA512 340608c958d42dc017b27906e66272e4e56f9a6fce6fafca0301fdcf7cbfbd8a1843fda16ddd1ab0eb69c9ca608a57fd238f0f1d12298ce2f97909ec31b088d7

/data/data/com.uptodown/cache/picasso-cache/eb53f04b09bf2ebd2dd1e00d10b95abf.1.tmp

MD5 ee38e0cc9b37c247dec642428a0e920a
SHA1 907280817e4b37a1623d9be404fb4283efe7a722
SHA256 1aac1c7fa77cbe172ef364cb19ec952446802961bf37b503f9012f98ea42bf5c
SHA512 8dc77c7a3dff3ff73563737e3e7b326524464a64c8b2d9c3e19ef75054d965a1de5feca94c21f0ee1e63be62d7df284a4a21a2b735b3c53a6994344885e41b36

/data/data/com.uptodown/cache/picasso-cache/6744b3d6aaa194f8aed5e87f43a757a5.0.tmp

MD5 b7c5a4a5be1d26563932b7ef24069f30
SHA1 6ac7bc9229b184df1e6e5319c17b87127b136184
SHA256 b78b9f705cd6cad3db5005e4b7c3d3cb856fa7fa1668a31fae477ac4e3ca84d8
SHA512 d472f0207e025b8aebed63d2e119082d2e1606c290dd46332e20dfa89fde558907f6a4f63bb828606f01aea43008efa9721430f6d3de8185636ea3ef61ab012c

/data/data/com.uptodown/cache/picasso-cache/6744b3d6aaa194f8aed5e87f43a757a5.1.tmp

MD5 58a4391458006c9cf4090e9c05daa7b0
SHA1 2e3a0a32a6b7d5c03d217634b0e06a54bacfdcc1
SHA256 596809c9fd43de2a810bc9e10253695f9b464398d3a864085c6c5b489238fecd
SHA512 4a70ca86c88c73fb6b1d999c88454cd83b7b0f49a63e84f33ef8bf115031c1915f58d1cc120ff4c8164b439c7247d74b7d2b84710ce893196c6046df7ecf4f10

/data/data/com.uptodown/cache/picasso-cache/1767e6c58d8efafaa25954c2a851e45e.0.tmp

MD5 e0473eb93aeda13af63614e85c8f8598
SHA1 5fd6a5dfff48aa3cc3eeafaf6dc923272456ba3f
SHA256 b17871c6c663b556dfb90e263698aacdb6f22a6e0241d024d9e6c38ceb32f82d
SHA512 20733639669c4cc6a6bc3503fb72b23fae264d73350bef7ba4e757486d784eb285ff78ca62f7434f939615001c468d32ab2bdb5bdcfdd0519726da3ff4119f21

/data/data/com.uptodown/cache/picasso-cache/1e38ada7582f839978786b674b53f81d.0.tmp

MD5 3db9a2f50231176567db3e4965b93af7
SHA1 42e8d144f79fb3bec046eb820e385657a4b20945
SHA256 861f4dcf71f1d1165541f345bc3f8eb6e54d73e772f53d00cf853ed0bbe41678
SHA512 96612eb467d2c9f412ae44cbe3d02a51c47ad7bdbd938f413687856b1c5c211177d3abae237b43261dcc4a384a218c0393bf3fe9a78254d0c7a97bf1becb9949

/data/data/com.uptodown/cache/picasso-cache/1e38ada7582f839978786b674b53f81d.1.tmp

MD5 4e8efd20c4d0de172b5888a31df4d368
SHA1 91c4e8be3e83de35d849e9d397e4a42b08cd9e50
SHA256 5fa5811c7798b4ec7dd2f3d7ca1657d751b414d693e90241732ea000e496762e
SHA512 f42e95412ee4e948d0c744e2e876745436e65821c4473a9eabb9bc546dd8e2a53495c1ba3cd8716954e991744d22fe24cccffe75717a2025a363f8d62fc3112c

/data/data/com.uptodown/cache/picasso-cache/1767e6c58d8efafaa25954c2a851e45e.1.tmp

MD5 1541d76ece7810c098d1ffee2ece9ae3
SHA1 ed923c6cdcd327b1765d6754c369aaa4c9b29444
SHA256 ff16593ff5b097feed3769ded5fa24f56f41467756d9209b78fac1ac49449900
SHA512 a06d50343826b2f02b6ec4562e71ad26594293d9f72060e0511e07966abdfad4240e487651fefda742c376ad1697f82cbc9a8abf4ffaff7c4a97d8da918ad7cd

/data/data/com.uptodown/cache/picasso-cache/1e38ada7582f839978786b674b53f81d.0.tmp

MD5 0c0b791cd7541292850f0688c6aacbe1
SHA1 30d9e8d9a0b0114787308cc653369509ca2f89f3
SHA256 f804eebc6dc7aa5c5fe0417a9c009c10c2b942562f0b7d55559cb3f5c1539544
SHA512 341d5e299f398bab6ac821605f83dc94e39a50cd213a8e12a537bd219aeb9e8a734e7820cd22a09f8bd78b4cf6a8d16de9acf5fa52425adf6b3ebbd6a5c441d9

/data/data/com.uptodown/cache/picasso-cache/7cee83b3081ea6cc5cddafca91534bbc.0.tmp

MD5 fd10a344c1fb7ca0334ee95a06b93715
SHA1 4d194b71d2ec971bca1a17ef8a0b2d41a8fc884f
SHA256 59225192868033fea4c4c9cae673296c2dc51bf2a57e686a25d822a40d8b17cd
SHA512 fba23d82d186ba1212775202f28b7c2569833cef183a683567be5b0dd5a5ed4bda0b54ee7fa3c4c50adb9660ad2b66c01ebb012d768f3d02f16fdc80db91454c

/data/data/com.uptodown/cache/picasso-cache/7cee83b3081ea6cc5cddafca91534bbc.1.tmp

MD5 8b4c43083f5bd20e8617c97fef4b001c
SHA1 f5aa2b725878f4f0f46e5f839ae7baf140f095f2
SHA256 637052026c0705aba80406693ba0e29e7f2eee314fe9dd4ef2cc881603e1e83d
SHA512 ade3be1a7aee37cc22af22b365317d70f7b8a2435a515ed3c1151d01cb878c8278f1cf56b6958301b73857b391162f2fdb1e2c5afb7df28002831dd393d504c7

/data/data/com.uptodown/cache/picasso-cache/75d9de495a9a59f7c116b8a3e4ab6059.0.tmp

MD5 fedfd26bddd21e00973840f21e2758f5
SHA1 c1329f48adb6326e0827edcfc70da4c11cdb72f1
SHA256 b068bcdc74adf5f65c1064d95fcd215c33b1b95c7d41d7f8ba9351648d01742a
SHA512 797698f12c25e875b5f3ff7f1aefe6820174a57c04360b5d52b8c974de5aca797ff9b19f30f23ce3c92ac428aeed0c54f191931578f520712a5cf137c4a82fdc

/data/data/com.uptodown/cache/picasso-cache/877b6086da03cedc29fa1e46cbc83757.0.tmp

MD5 e707b65de44a3658d1fcb50aef3a83d7
SHA1 0f38feeb7710b4d04042dcf6232fbc07d7302af6
SHA256 5d02786563617fc9897c6c2cbffaafcba5bc18e6aed8ed0ecad8416d09b74660
SHA512 2cff8842066bcf095e82541ebaaa92c3179552cdf32e87e08fbf101ad50a3f20dbf197f5a5db3beaf39d492ff2cd350b037e0ee4963cac317eccc328473d8373

/data/data/com.uptodown/cache/picasso-cache/94de53e090bdcdc7a836b9050725ddeb.0.tmp

MD5 f7a805c297fb4c4e623a93547ad0a217
SHA1 a4bf509913f9e1e424bd6802896b2f279dfcbdc2
SHA256 01c9073d69739a7a1aac489ce87af622fe9236262632841b79acf3b685b7c91a
SHA512 e42300aaab2871245d3c0c63269c385f8234a8464e4dff22befa0ecad38248dc6e34813f8385706b19f6e118034ed19669ee78feef27784b7960842f0809f3cc

/data/data/com.uptodown/cache/picasso-cache/75d9de495a9a59f7c116b8a3e4ab6059.1.tmp

MD5 4c1fc2462be6083c14e07c6c635d284c
SHA1 2799d086e5aed884c7d50e012cca5d4f773511a4
SHA256 5e46e28c0cc8cb208d432de63d74de7fe16e78e5f67419f0f40d8dfeb8755ef4
SHA512 1f9f674fe8a1beef370d514280c8dc1ff1d9e83587f7db970528901d63f2983ddfce250ff16cec0492f5a9013db87c7ea4ccedfe96484982d0b086eea8696920

/data/data/com.uptodown/cache/picasso-cache/94de53e090bdcdc7a836b9050725ddeb.1.tmp

MD5 cbd52ed3eb2ac45aaa5e9e226aa5c381
SHA1 10f69dd24d17b70a704de7b591377d1978901a7c
SHA256 67713c70ae4c97818066a8db0a9cb60aa2230fcdd094111689e23a6ea4f93fc1
SHA512 c467e42c51e45a952f81f80019c9b96ce7fe9f94553fda84c88ad081b364924ec830c2326cf712cef9705d5c4c46effbd3c946aa1a667074e7b877a71f4c44f4

/data/data/com.uptodown/cache/picasso-cache/877b6086da03cedc29fa1e46cbc83757.1.tmp

MD5 faa61123526c606c29cea3f5ceda6011
SHA1 773e811c4672ae5b2b6a91db82ea0d16567dbf10
SHA256 07fd9d95376c48adada7771d901760a038db308de38760254389104b269ac5d9
SHA512 13ca9dadf9720303c42d2794a88a3d99c9152e840f2c66829473856eed18937222e6d34818f05dc013b04448684e8197e0fb5d4998070682fc764413a0db2591

/data/data/com.uptodown/cache/picasso-cache/12df5790443d51b6802f9c87cc30ab55.0.tmp

MD5 ef858a26aa1a526536f36253f644e53d
SHA1 18953ebbb49ea64fe1db5eeb045cd062d1219d21
SHA256 b08a47dbb9a45ca47fc4297e4ba281ee918fb5fd34858b9381085c495f4b2c41
SHA512 a3c34a4aa939161f92f2052f185eac9e36c726a4c84d7c120939d071391b80bb2b28090067ae0fff76abc27c6357b2371fe028541bd5244075c7e0cb1d74e60d

/data/data/com.uptodown/cache/picasso-cache/12df5790443d51b6802f9c87cc30ab55.1.tmp

MD5 38e34d7f2c858ed499c6f820d0e220e2
SHA1 f92a7e9e4cbda71c6ec48c9fed7764d6a68d28e5
SHA256 f6432be73f8928bfc92d9880a35386859320bf44b23a92ddb2cf19a64f11141b
SHA512 d4db7bad2973bccdbfb30cb1971ef4f7b3e9c111309dc62f6f3ef3ff388bdb458ee79b1807aee98d94f0753996e2b4abaa001f0537a0f168d7a3330f9c3e3f01

/data/data/com.uptodown/cache/picasso-cache/98df3ad7b1ba932bdc2fa22fbff1742c.0.tmp

MD5 26dceb35ad78799102b6d1123706ce8b
SHA1 50b6163389e400bd1d607e32e39123d60f0bc80d
SHA256 15d5008a5815f9b21a85b503b824b28d1c2acf46cef196c1f5d84e11f660e8fb
SHA512 f84d5971412bca2533afe44d182b0e3033ce675aaa39b7610c04e1f3a925b458d717eb350fc67bdaffbb502d0ee2aafb2ab51829549a666ba9d78f7ee971e736

/data/data/com.uptodown/cache/picasso-cache/7e8c2ed8b2ee467d16877b5ce048c85f.0.tmp

MD5 a305763ee8183dcc5066b89260cdcfd6
SHA1 e51f095a264348a98224d50ba8e4162cabdec0e0
SHA256 dfaae01bc57ff3ddf75d4b0685cf24605d6452b59b062488b5b1e8969bf6e258
SHA512 982220d9ca9c42beca4be15080f83415b16d121cd2b2cc0481831b5ff825ba64e1fe4474c55692846932de29cf5192162f9de4db9acb7ee96ed189e6c3eb93f0

/data/data/com.uptodown/cache/picasso-cache/98df3ad7b1ba932bdc2fa22fbff1742c.1.tmp

MD5 a3bb8a10366ee9c3d0af7213a1afafe3
SHA1 8920a37568bb82ae4691d6b657af3ed6e40e5fde
SHA256 12ef117cdecaba734d15da0f3b4ea1be67f1a05a1fea974709d6721561d50a99
SHA512 b2c0a020b9d579e4b7409374a3af7413498fbb1b84d8a4ea625e202adb2fb5ebebe63bed486910303d7a3b47698843021d1d9f5053f069bcaf70e922e8d416e6

/data/data/com.uptodown/cache/picasso-cache/7e8c2ed8b2ee467d16877b5ce048c85f.1.tmp

MD5 c5381c1da510be17163065a968e15d4d
SHA1 3c624ae04ea49333e995facbdc65ff1dccee2f44
SHA256 ab19c844bedacba3799fb1acd0359f5afd2e5cce0a9fcbec82ecd30d67ff576a
SHA512 16451025b9df7612a1a2ad8ba93853800a27f1fb88055b6e2106cdc1022f10233f1179b16a6fbca91c5782f12fc0b742c28d70620fd0a79e981468d212ec80d5

/data/data/com.uptodown/cache/picasso-cache/1e7d47272fdd245c266ada6934c90589.0.tmp

MD5 2a567b1d753aea9d2fe6bb383678d9e2
SHA1 800c09bcc56fae5fdc2ff10df1c91ca66737cc1f
SHA256 f26488ba1b217c7a9ed8d72894a1370e757231d555f6465f1e0d200ecf02d2e1
SHA512 a84ec0e28fc9652f0e06c826fa5607037c5222afbe2e24219e5c65f1a496d2681eaeb43511fc2582018725deaaa8518f082169372a499e42542080626eb79bd4

/data/data/com.uptodown/cache/picasso-cache/1e7d47272fdd245c266ada6934c90589.1.tmp

MD5 cfb848b8be47c8b92d35567720b83404
SHA1 7dd668842651b09a468fb72fab78b7bcb9713d57
SHA256 e17cac04af3cd576f9a669fe3abcde4dad3fff3941748fad05b4517ac7ad71f9
SHA512 ed52e874755b5748fbcc2b35a89dbd92e744ecf71140deb07598f6c6e00a359112b42494ea9877b0febadcf085da5b2239186f35da8c22c163c04bf86b5c4870

/data/data/com.uptodown/cache/picasso-cache/dba906200ad8d88852ad81139fb6b269.0.tmp

MD5 6474e8198281751c68a1468518a5551f
SHA1 17b0300c5dd0a3592c8b7df5d25d6bfc7b5e26da
SHA256 e70ba79e86c540ee794c071a81b6c9e1dbbf0fcdd5d53a3bbc50b83fdba21f5e
SHA512 2ad84f953bb77d76d715d71e56408c689a7252dd10b00caa7669328ca835f51d800c91b335262776205086bd327c2bc8e55dd8bb23cbdaf931b76b96759eb1a3

/data/data/com.uptodown/cache/picasso-cache/dba906200ad8d88852ad81139fb6b269.1.tmp

MD5 0c19ad54add56fa1561316daf9691350
SHA1 0f16e4bbdeea7fe2585744beca9648dceab275c5
SHA256 c00c7e2bff398f399c4f68fe5c3a326be9188b917891b94bb43f3e6917cc8c1e
SHA512 d7c2cc65ba97ae57a79beb2bee70713f675ef2101e9a7d9cc4352a5231b9c1a0e6d9bdc7540621cb7214665d57a27f125b8d6237c745cb8575d535028fbb88a3

/data/data/com.uptodown/cache/picasso-cache/29930e3ec02ac7b5e3b98aacaaacfef0.0.tmp

MD5 46ae72659ecc7b61c055a36d8a951f29
SHA1 40a9ac1f2e789103254d941db953ddb572803984
SHA256 8628ea5a9a9f2c3d00045e8aef366d551573d23d50b5e6e5fbf01079df3a609c
SHA512 004dd8e65b5b3013f9a3b152f35c928d41d8127f0d2d07f2171defdea6fcf863a05c9e3052f613a1d35c4c939d5c5940fd0608968283261ff9da6159a63ec5d1

/data/data/com.uptodown/cache/picasso-cache/29930e3ec02ac7b5e3b98aacaaacfef0.1.tmp

MD5 f9ca3ae3470f40b6c0cc302ab1f245ce
SHA1 b47ebc2baaa97c5081d8e77046d521bd696a9a9e
SHA256 3b932f9ccf4f0c8dc2769ee2121b8100770a2ac45843225ced7454e49142792f
SHA512 1728e2c50cc05ca335eee944a0e7e7832b26a4a991c92b403681d81531d910c3fe417f5760e28f86d0daf430aa985edd01d741928785c5dafce0f464ffe12d77

/data/data/com.uptodown/cache/picasso-cache/c212b2d17f18d825bd4d7fb5bf1974b6.0.tmp

MD5 c8438685ef3d1a2066430b5b72ff2516
SHA1 4dcf7c4217005a8ebff4a7ff8de61887c878d181
SHA256 1c874be3659bfa1eedb27bbc0d88191ab554913e69aacb37e8eb00c45d75b140
SHA512 792e8e022a11d6a16a5ab7e2b0d9a170936bac835084b89ade741e20529255447c785aa1884bdaa65a049e65703b36161891f6515281aa403fa4ec394bc0786d

/data/data/com.uptodown/cache/picasso-cache/c212b2d17f18d825bd4d7fb5bf1974b6.1.tmp

MD5 f26e15472fce35170316c36f1b1b976f
SHA1 25945a64486125b0cb29628005849d8eb5070b61
SHA256 7f3e4cc734b725902acbbd3ec0eac6ab0618d634b2646453df72a14107e0f305
SHA512 7ff107bfd32f9c9d70e277ab158d36e4862155c7e7eb76daaf2d1ef1a537997e088e60e9b1a932d570ab305e4173a162065da35ae093cb83151c0e2a25083460

/data/data/com.uptodown/cache/picasso-cache/add83f92566fb5eec02a84bc2a668e6b.0.tmp

MD5 7f1a04ad9ace85cdaf14808dd55be2c7
SHA1 c95b7c85b665dd77ddaa478ef3ee81164182861a
SHA256 ae1d018b99507b6afa59451f520454a9e4244de3934ac59d583ba6b3dad58ef7
SHA512 9a4d18c94cce9886a65e5daa22335e547219c990e493be4f5fd3bf50937f0387d557335b67251622722c85ae9e7e0781abe65d60c46c8bd98ae8bc639a694f1a

/data/data/com.uptodown/cache/picasso-cache/add83f92566fb5eec02a84bc2a668e6b.1.tmp

MD5 7ca0f5b8d200c2db63a5842ed53b6783
SHA1 6fd4407ef3be2bf373944c6c6cfa308987176054
SHA256 bb8f2c069a21eef505f62f1a16f032730cce3fe33daa477b85f5262072ee69a9
SHA512 c9dcf0730f28b1dc8c12c60182a10b2c6ba3dc2eea75ff802e12033904816414f9228d51c4fb3ccc0944603ca1135e3f85109cae762b9131ddf25d50fe96b367

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 9022cd04b5ddbe8729e30570d5d515a7
SHA1 a8e7571a6f14aeecb67daa5f31f349e2503cc14b
SHA256 e3a803abf3c6d022f111d3ebdb577430b11f0e1ad41a8c0d9d055c4843444e2e
SHA512 5bf8c09c50ba6a744a27bcb27d1eaadc362f223feb11ce36388a6ef900a6f5c5f7abe7e036031b790549d36036924144bf9fa0adc60666122a34c745a762581a

/data/misc/profiles/cur/0/com.uptodown/primary.prof

MD5 274f0c3aeb4975c5d715ebc66227d2bc
SHA1 0df1d6da177a8b5c0e4ca9e94f452452d0daba6f
SHA256 bf9b65b066147d58c9c43a4154d19ab0d78168aeabdf107b5dc3e3d6aaccb9de
SHA512 179b5a0c3d3ebac57a6a6c8d0313b249c451d0253d1730b88e23b74df489bccdfa657a370f520df22a06845e3adecd7784488a35f4b41fcf8b8937eb67f15ffa