73a88e21f4ec18964df1d8de4fe251ff5e61ce27ed36ad989ef1a20d71670b33

Analysis

max time kernel
179s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
05/08/2024, 19:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

shadow-fight-2-special-edition-patchedmod-menyu-1012-androeed.store-0-1696598613(1).apk
Size

119.8MB
MD5

b4e8ad9827a364741059dd954ae1a4fd
SHA1

c6e2644706f714b753eceb6112907f5258afeb13
SHA256

73a88e21f4ec18964df1d8de4fe251ff5e61ce27ed36ad989ef1a20d71670b33
SHA512

08ca860f24ff37c543ddddd523055662168755b91daec6d648182d735f7f2b52ef0e9c7cc5703f69c284674d4ce4dcaad647e06b7926890f39f7bad7dc1eb170
SSDEEP

3145728:EWQrhq4StARHVCDuXZiuAmtshd4uMSIlYX99O8Dl3pts40foJr8iD:XQrhq4Sa1Vlp1ShdcSI6X99FztDPJxD

Score

9^/10

discovery evasion persistence ransomware

Malware Config

Signatures

Renames multiple (52) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.nekki.shadowfight2.paid
/system/xbin/su	com.nekki.shadowfight2.paid

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.nekki.shadowfight2.paid

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.nekki.shadowfight2.paid

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.nekki.shadowfight2.paid

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.nekki.shadowfight2.paid

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.nekki.shadowfight2.paid

com.nekki.shadowfight2.paid
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.nekki.shadowfight2.paid/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
0b608a6bb154e261b6076c8b22835348

SHA1
ac4b9751ad84c414e106c0591caded25d4ada1ae

SHA256
ece8c11d4d3ac522f46628f9bd842905cedbc4793d16bf2cb598c427c785816b

SHA512
4500f4d3555d2ccb71f0d16403b9da67a8004e6d7597fcc21b017aab1d08a22810c561c863dd1e9f70fbe5f55176c4fa0129a5505344c9011b6c68f9aa8daf38

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
ddfacd310acbe9f3b3854bb6b3fe8107

SHA1
46f9ecbb6baa3e10fb4fb5b82e4345569956b5c5

SHA256
a218553ead86d6d1b1685b4bdccf3805b5ef50cbf88083fa0aea8f8cffee1cef

SHA512
01483b860eeeef6955c20b08e9d5f494a69d83debe6cbeb2ce0f528f8482c372222872a772f1e4c794518493d534d6d840e9f42968b146dd04966d2b0e068233

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
724163b1127e2d15c35ce38a645fd08f

SHA1
3a1420c6eb507227af004e185aefa7e23c9d88c4

SHA256
d00a4241df0db89f9cf71fdf1170d6525750b133268e2709cea0b23bd71a1a7a

SHA512
67ede5d690fed70bbf19121db3c9a41a8f656e8887c42d8296c53c41027bd0334d2b3853d7ddc5cab51984e338e92649a39a744942ee6170756370a96eb140d4

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f11929a244fcab77df0ca88ff031c41f

SHA1
0cedc85c3ed3d33a31207b58951ff845e8ba1d18

SHA256
7798608495adb8c70cd74792212184bdde48a4f2b1a8c152968cfcef434ef6b1

SHA512
4181fbbbb67a8944c8c182bb19c1b272f4fae022bf6487d6d4211f11704c2fe7eac43eb7ee4908106808324fcc89cb0e721311db34ebcd0d3326680df8f9ac39

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
75625500f4d3c224e37eb53ad6dad845

SHA1
8bff8d14ed8fd7e93e5922d5b29d7082aaecdae6

SHA256
21c88d70bee815245a0c6256ad67c60c81696e34f904eb290543f16341e2f6c5

SHA512
153f512c72d7e1726b237dce459f5660a27c36ab5e289df13affad395b76ed172c97c4182d6514cf4311a4652cdce7fce27db527b93f8d0e0268bf42da5eef66

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
deee7913b1a7ef74ba60d9f7cea05704

SHA1
9f6c5365fa47e30e41e998db65ea9a110bf3982d

SHA256
d5264e45356426d157a386598e01554922ca680648cb3a1b78a37d65802978a0

SHA512
166c151109cef6ad892f5ec3dd0117193a0142f4489107940bbbc020d78a2960e43ed15f4882e9f7713cd3a828b292a23c8973e6ed361ecd0215988873770b8d

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db

Filesize
16KB

MD5
411e1f57b1cdfc79cab2e63d7ee94a59

SHA1
cad045d43e5c18692ef9b1720397236e8bd4af27

SHA256
7386059fd71e8d7fa5d1b87c2dc694d22f829b7ef50dff8a4ad6630aa7783bf9

SHA512
c29994cde3664f31058b86771f82dbcf834d923a96987da52e5b1b5b9ed785ba3eccc8d2cc0c0a1485009daab7e0121655d78a3a3a6031ae0525664ec62ea230

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
9914aa7c3d56c3b03ff2e8696c15ce7f

SHA1
d90fd1d5355efbaaf858a4b019b08c6ef22c480e

SHA256
a1028c284d47da3e90b76b9c83def2a7de90e867a5888fadabae329f99a42fef

SHA512
85a55082c46a4982cfc7fdeeda7598b4bcc36572a8e6bdc4572698a8ed3a244793ec8eaf372f0f7a06784c048667bbaa84a82a0d6926b44b2a681eac6f77fc2c

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
0e059f91e3545fa367bc601c3b9417dc

SHA1
369e555cedb81fca1b4ddba9be53f9f1315a081c

SHA256
fbd4e1fdfe663bbcae47994d40992887470fcfb7d00d0723e9fde50db3e7b9d4

SHA512
4eb8800228c0cfc7f75a97c1944547787df2214ec9287dfdf1d061940445ac4a4ffdaa683453b0522a74f76955b9ca361e51b88fb6c42749fa0eeb043a2e4561

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
96b40559d827164892c89a7d3b34c558

SHA1
367e06eb1d509a1a55980192ec7d4cd558eb08e9

SHA256
55aeee288a9c887f552a8b23fc1b1d9c9e8ad1b1ff09d7a346453e9d33fcbd48

SHA512
2427f4f2615e47ca363b1a8a2ae88d1c796b5a11cbfacbd51d6ef76a6b31322debe4ce8b6d21086dd90bc8c7c8125bb04d146cdf1f1546c38fdfc9865b44ee95

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7326d06a36e83108b0ad6079e60b993d

SHA1
21d3ff4f7e24ac07e393191a86c2b2f7698dd76c

SHA256
c4a6c8fea01bd31720b3691266fb94f04de60bd541e88467a7b3cd9c7ef9b6f8

SHA512
4e2ecfb4a124099269d9decb0b6dae85a966f739204266ca17cb70f2b7a277f458ef279bd0f50b901ab33930a39c6fbcf7c97907894ab3037c2dbfa1842a50a1

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
64f5cf3390152df1692e946aacec44cb

SHA1
93aca6991b99402c45b43d0a34ca138f2c3ba773

SHA256
50ec83ec1e33b63a9e2cc57769a699061adcf902791f6b8fea58a6cf069a103b

SHA512
2e1b7f8470b54d9c6d4a62dbdfd542ee291d7390577c0c9e72b1a236370fe29b625e80094c5ca69a197e1e0e3b5c3d422a759640f5105ac37f82bfc712d59049

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b821c3c58467d8a32d0f75d5fc418da7

SHA1
d36d8c875782d1c8db4c2b6f3edfb807453f8fb0

SHA256
c6890225ad39e9c03bee86856bda6781772786de7c1d67c35f7eb91254805ed4

SHA512
78c78c36fc8e5f9220174c3db936231eed55d7c6ad3aeaad1d583cf21dea6f7c4b89939335612c3a174f8c1cdb91e5c0a0d50d28a13b05e062ef81a47feb68d5

Download Submit
/data/data/com.nekki.shadowfight2.paid/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d9bf7ad28fee237f34ee3e5d31da81d8

SHA1
6c8d36c69a58da208fb88023ca5dd608a3433f60

SHA256
bdbbe761a7a423f6d7cb404ec5c521ca6fe613c6ead1d3abedcb2fe43dc47ac8

SHA512
f93a9bc7e14fc27c2a7c5ed5b3284f3a92e513b15b636f6f551dfbd7085d796cb6a7c820e8d68f80445b25faf982ecf0a6d0a338ce6c87c0b3d6718dd77969cc

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/.com.google.firebase.crashlytics.files.v2:com.nekki.shadowfight2.paid/com.crashlytics.settings.json

Filesize
723B

MD5
1b4a8787c1eec7643364a610b29956bd

SHA1
88ed393c38299295b38e1d0207ba7e9daf6a150b

SHA256
509f40bc11d706ec288c2b4f2d44f6c7a00a3b970208474d8838ccc018a38e0f

SHA512
9473c605fea3154c383c23ea10a947bdc9f7b7040605344b2d6121badd1c12585061dd9d0759b1be89e866bc62ed2a08d34cfeaa7435e6c1c454cc431ba49bd5

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/.com.google.firebase.crashlytics.files.v2:com.nekki.shadowfight2.paid/open-sessions/66B12DBF02570001109EF76BA549F1A7/report

Filesize
838B

MD5
9ce8cf7c74645101916e87bdfacceddf

SHA1
dd886d2760d8c2ef0b54f96a8a33c49faa54fe3f

SHA256
38350c0e3abbf97c3a2eac91ea4f6cd54ae17585636ca4ce3ea78b8950dacd39

SHA512
180c25e7899c69bb7695f048a30845a5eefa4588940581f56fc85fba0d2b73f04653619b8cb370e4bcb7b1f3d087069d28cb0a3640eb61c61964ef04d28ea274

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/.com.google.firebase.crashlytics.files.v2:com.nekki.shadowfight2.paid/open-sessions/66B12DBF02570001109EF76BA549F1A7/userlog

Filesize
203B

MD5
775981f34f4bf2dd4dc8089cfca9d0b9

SHA1
f59d4af11295f910319967331a321a6fa71c919e

SHA256
ec456a95d480d694ec81d4c8002709226d453c341dc176845844ea69f126d3c4

SHA512
c1418d15f1e3fced2c69234ad6b19c6ca3fcf9e6f12670c978349330b9d4736899967b5d8dac7b2efba071f14370ba465152b98f679363b5eb69f0b4296c5cde

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/.com.google.firebase.crashlytics.files.v2:com.nekki.shadowfight2.paid/open-sessions/66B12DBF02570001109EF76BA549F1A7/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE

Filesize
208B

MD5
1f00263dc093047023b7eb3f3b06212a

SHA1
aff53017f1409bac3dbcdfa82e3783bd48a5b630

SHA256
9078eb4ab56018696106db220b4b9146fd2c8aa5914c06b7e6353e8a6d10ecae

SHA512
71fe7fe6dcf28be9556158679434551c068ae4c899e9a2ae5ab631b76119ea25a948a19c2862fc6706cdebaa47a4902c23806225074aa05da62ac5e31e4e40a8

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/PersistedInstallation3726961957484246814tmp

Filesize
90B

MD5
c6528f6e08731986e07e633999ec48d5

SHA1
d45bdd62b264cfddfdca7d2a204f1009a2f6159c

SHA256
fec59f2abb91d3b0c214b3b1bc79d3c6ad635e8364595c10dc8169db8df22ce0

SHA512
8574f7f606352b7ae4c5a7a5a08e8facd721a9cc10f8bf7a7f0138b033f73c0b1d5fcbdf2c1e447f06114096b5dee39c5404537ad327279c6cbb2148510185a2

Download Submit
/data/data/com.nekki.shadowfight2.paid/files/PersistedInstallation8924549414671871362tmp

Filesize
572B

MD5
f64389679539b07ef48bb36618b196ff

SHA1
7506402440b7eaff582c3934782e24b00d8efa75

SHA256
500d8bea49540db63969a27023fafd0f96b061d048d15f1092dee3b053751366

SHA512
e145dfdaba74dc4639e7fd4d9f230361f4b72b8a3d81c10560988e45283e629fcc48fc3c2f5a6d1d4807165a8f4ec8ab486761d0f80bdb8c42544f3dc2ce7fa7

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762500000.f9cb309b/c

Filesize
1B

MD5
c4ca4238a0b923820dcc509a6f75849b

SHA1
356a192b7913b04c54574d18c28d46e6395428ab

SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762500000.f9cb309b/e

Filesize
554B

MD5
4f99a0e849ff403df620ffe5e79c5300

SHA1
6399c85457e44e9c68354f60508f9d3c24afd03f

SHA256
e56a9946539547b232fa4891675887b533230a664c6ec785484ef7ccd074331e

SHA512
a9bb9cc23e5f4d740cde67180736d086f00ce8a9ed8a4a461f35625e8d407642d2258eaca936ff863a37804ff97ab55ad0bc7410f896b71b491141495582ddd0

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762500000.f9cb309b/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762500000.f9cb309b/s

Filesize
433B

MD5
b30238ae33193d6c212dc00ab471d02a

SHA1
539a2b6a34184991a66255693bed3ea6885201bf

SHA256
61f42d50609d7eb9b64fac3b2fb2f220775316357c8914bbddb5bc4e33a28ae1

SHA512
627b35ef9f7bc64b536cda20d95ef5984850ae3c851834f9ed6070cc5df76e10a210806d2938845e607428fb35c717d58f5739b50391e645f8d6cf3d091e979a

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762500001.f9cb309b/e

Filesize
578B

MD5
02ddd5c75c03c9a6ddd86373cb08456b

SHA1
fc281fe67d4cbcd632f373ef86ae5f0a9a5a310e

SHA256
b0fe41123fb007c35da4cbfa57ed1d2af8f6b3b70e3be2b42e620503f987a263

SHA512
e18a1b423368b391da92886c6c02b9ce2a7c61e255efc408ea16833e281313743a796731e87f131c87cd60dba96320c64c34358676874e95c0d9f703070a1e40

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762600002.f9cb309b/e

Filesize
1KB

MD5
2056795c734be81f98bc5d4a782fad17

SHA1
ad6c5b089852400850435063bfd54bbeb8971874

SHA256
4c1ad499747dfa18fbe20b6bec6d9975ea1204cdd6bd8f5f5b1a3363fbabc7fe

SHA512
c59e47a7a161dc88139693b0e65ac0c5df28d1d40e3f738fc44f87d6e6041fcce14540690d56f09807d599cb2c5671084b0cf8bdd5fbe27f1c652f98f2a8b5d7

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/ArchivedEvents/172288762600002.f9cb309b/e

Filesize
1KB

MD5
d9730b517ef70c893f1c750905857d48

SHA1
22d73e704163dc3d3e79a110b2e1e8e9686714c0

SHA256
7ef66fa8971273f15841e527c0b4c94aadb5ac1cfee78ce5580aeb67465839f8

SHA512
ff9d986c77e40711b7c5c0c4c2b16a99d3dc21db397acd13a70f77b46a09731abb73f464695cf0fe1f49e86041280096e9ad5508b7648d7952b22808367610fe

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/Unity/ce8db467-e533-4c3a-8e87-96866484f08b/Analytics/values

Filesize
134B

MD5
5240a7d15d3403978506d63b8f15fff3

SHA1
8b364c05408a9d6d7ab83213a3aa5a141704866d

SHA256
640ddea7e1ac8329b5c8d1c46e66af8b1c2fbd7b7d6b3a986c6e76472537654d

SHA512
695e2c1e97a38c712ad648d986912605da84818be06798bd208e9dcd4091520f92b9ed963514f6a29e29a29c580ca64a06f6448df88472fb3e05d5866a8fee19

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/Metadata/global-metadata.dat

Filesize
8.6MB

MD5
5972cd5a2a5ed541f6162e1847eefb92

SHA1
495d6b207f7170caecb2e15feb0e71df53e9eff7

SHA256
af11bf4745f5767cfebf65312147244fadb59ebaf1a8d4708ec2b2dcbdd7d5e9

SHA512
daaa66065866badca8d83e9e8a5efbbfce5575fead89c1ecf178b3e5b0aba60c7202ee88de2a5dd40e404cc48d30fa4beef236de131c9ecd800a3e00079601a5

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/Resources/System.Data.dll-resources.dat

Filesize
91KB

MD5
4860ddd4350579f8fcacb1881582335a

SHA1
493c03e9cfef6f72a00f92023cdb88527dfdf72c

SHA256
98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49

SHA512
51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/Resources/mscorlib.dll-resources.dat

Filesize
329KB

MD5
21d06dbc8af6432b2b49536ed30609af

SHA1
11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

SHA256
c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

SHA512
2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/2.0/machine.config

Filesize
28KB

MD5
cad24142abba464dd90777c3d347ef88

SHA1
d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12

SHA256
edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce

SHA512
5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/2.0/settings.map

Filesize
2KB

MD5
22c818a23169e12bd3c8587b6394c731

SHA1
dd2be2dbccd34736719301aee92429d4258ea5a0

SHA256
49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2

SHA512
c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/2.0/web.config

Filesize
11KB

MD5
dc6dd6d8d1fc74e76c84b0b38dc6b1e3

SHA1
574e4b24015852d45ac80dfce8af3c6fd4a4f09a

SHA256
cf2b54339e069b9e42f7d6795eecbf562c50c1011f4ca8f65f578fe52d97ff92

SHA512
c835136bf7c203f7ae19c4aae5fb456b1d25b32e3664494be74b11cd9addf647cc256d47e1e5ba99a59638d714e9d43c6be732c2b6d6de60e77977e99bf5ec7b

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.0/machine.config

Filesize
32KB

MD5
24c866ce8037fcdca2287234eddff637

SHA1
9245befcd116458e9619694f1a785c50fa61b58e

SHA256
6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664

SHA512
f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.0/web.config

Filesize
18KB

MD5
d081581e16b06480a5aaef8cdfb305ab

SHA1
771648fadc7ed9a422b4bc26e38d854d066742d7

SHA256
e38bb8cc68fe5b4edecdfd288d094b9e8ced7629039b2a347682aba0d8bd7492

SHA512
6312269cfd726a991e574b1da0c3b8a2978b248118c1610d4e8791e83f3aa6d42bdd1f4f81850eaa94c026d51e73c515971a58580cd9dfbbcadf9ba0584749c4

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.5/Browsers/Compat.browser

Filesize
1KB

MD5
0d831c1264b5b32a39fa347de368fe48

SHA1
187dff516f9448e63ea5078190b3347922c4b3eb

SHA256
8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

SHA512
4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx

Filesize
59KB

MD5
f7be9f1841ff92f9d4040aed832e0c79

SHA1
b3e4b508aab3cf201c06892713b43ddb0c43b7ae

SHA256
751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

SHA512
380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.5/machine.config

Filesize
33KB

MD5
0869544722561f5aff0eefc83fc7b001

SHA1
1e118f4b5c1c6a7b1858e3fccb1b1d1095561976

SHA256
ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6

SHA512
ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.5/settings.map

Filesize
2KB

MD5
ba17ade8a8e3ee221377534c8136f617

SHA1
8e17e2aec423a8e6fb43e8cbe6215040217bb8a3

SHA256
ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8

SHA512
c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/4.5/web.config

Filesize
18KB

MD5
5075af18fe1d2b5f9555d5cc68029814

SHA1
56c4c47501664bc3bcd54be505cc3d9f7d0761f5

SHA256
c4cbddd4fd9347b58cc5a72b36dc4ba1ad2bb699e65869d05cd3fb9865f0d824

SHA512
dfe8ed72b013e67c3cf0622cfe7d14ffde97a4d7132ca6690db5cf2d347f3535b475119b01984923ff6c3f39b8865f857c67ed465c3b0358e2fd06bb0dae0909

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/browscap.ini

Filesize
304KB

MD5
378be809df7d15aac75a175693e25fbb

SHA1
2d5454e161de8a5b65910f27bd70d9d0ad8fa476

SHA256
4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e

SHA512
d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/config

Filesize
2KB

MD5
00dd0ea7a708a9cb30545160e6474fdd

SHA1
48741b77d235e9159474b316eb244ec395a2de72

SHA256
40ccccec6366e788ae757e88ce39c0fa0484b1f8a4836da7c860b54a15ebb1d7

SHA512
a6d752a6efbb9f531ba662f94d2181c0e5679e595f226e894ebb75f5a0e666f027beb329ba47f0ea20958a8be196ecaf702b51cca3a427e8f8ce7e29447b0e89

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/etc/mono/mconfig/config.xml

Filesize
25KB

MD5
f34b330f20dce1bdcce9058fca287099

SHA1
936520d5bb5c00a1985d7a4c4f0ef763a9031862

SHA256
0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d

SHA512
d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

Download Submit
/storage/emulated/0/Android/data/com.nekki.shadowfight2.paid/files/il2cpp/unity.ver

Filesize
8B

MD5
56bcc01853539f20f15bc0310d345db0

SHA1
eef562ee25191a3ea4da694f75afb2ce69d05c18

SHA256
5946aff31acbd4790fdbef9076a0363c1431eb4ffa749c33c04a708d31350915

SHA512
30a4cfa04c70a75327451590cbcb875f93e053957fc4aecb0e16883ea9acc429344faad9b2b262092da4d91dc1d8a38a8e11c5630083b19ab6602e3019d62ef9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads