d62bfac566375971553d1bf260900888c879289de9d9a5315d8a135b82d20908

Analysis

max time kernel
621s
max time network
1796s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
01-11-2024 11:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

uptodown-com.kitkagames.fallbuddies.apk
Size

18.5MB
MD5

581596b3d2bc505f14ba9c00eff0f910
SHA1

a414f0464fb59bc6fd5454c04ce7ca2357a4b4f4
SHA256

d62bfac566375971553d1bf260900888c879289de9d9a5315d8a135b82d20908
SHA512

3dd763fc9a4d6388408fc52f84a437c1d824809013a4d0f39c25c19fbc9824e20b46415b9fb086eb31ec2f686e638110800eb230314f60ac831127856cd57fdf
SSDEEP

196608:7r5cGyA8SnrOc3kcBwvkXbpgyEpCCx+ZqDMQxaqBIhwToCZ81CjMBBWgkfWhzy/x:7riGh8QMGGyzCJMQx5cRMMBBdhzyFOiJ

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.uptodown

ioc process

/system/app/Superuser.apk com.uptodown
/system/xbin/su com.uptodown

ioc	process
/system/app/Superuser.apk	com.uptodown
/system/xbin/su	com.uptodown

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.uptodown

ioc	pid	process
/system_ext/framework/androidx.window.extensions.jar	4306	com.uptodown
/system_ext/framework/androidx.window.extensions.jar	4306	com.uptodown
/system_ext/framework/androidx.window.sidecar.jar	4306	com.uptodown
/system_ext/framework/androidx.window.sidecar.jar	4306	com.uptodown

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.uptodown

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.uptodown
Acquires the wake lock 1 IoCs

Processes:

com.uptodown

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.uptodown
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.uptodown

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.uptodown
Checks the presence of a debugger
evasion
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.uptodown

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.uptodown
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.uptodown

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.uptodown
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.uptodown

description ioc process

File opened for read /proc/meminfo com.uptodown

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.uptodown

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.uptodown

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.uptodown

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.uptodown

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.uptodown

description	ioc	process
File opened for read	/proc/meminfo	com.uptodown

com.uptodown
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4306

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.uptodown/databases/Uptodown.db

Filesize
1.0MB

MD5
4305884365b45183fa244bd78c9567b3

SHA1
59c492479172d6f3ebd5e846a49ff702be7bb242

SHA256
d6dedc3f94666d8d0a9547a69d2bd3234b90df49db5422a5db09dcb09c5d2732

SHA512
dfd8ec51c8c41064976bc8cf52d9333175d76bbb1d5123d1b2bba1fa420607d3a6c93308df5213b94b748e3165de1814b12b95060daad34c55ee69b6b8975178

Download Submit
/data/data/com.uptodown/databases/Uptodown.db

Filesize
1.0MB

MD5
fa5fb113539c70df950b1b7c81931163

SHA1
a27f48a838fb39102ecfb33ebdb20935ce5db8d8

SHA256
d1d21108c9cbd5566fa241b804abec3991225f19d7549f3851eab6fd6d95e342

SHA512
3f882a6279de5d1c290a63f0603ca6e382472c3f18cb3f10e20b882b9e9990e69a272dd39765e0eab32f3549e363d4381bdc3b24d6a5ef9b8665125b44ff95da

Download Submit
/data/data/com.uptodown/databases/Uptodown.db

Filesize
552KB

MD5
3b9234059a264d115aba02101bf5a917

SHA1
bbdb48033aa89ae9771a1cccd187c96eeb69601e

SHA256
35e0f5452da36caccbf51ec1ae5d28665c6afb308d3197a118ff1c98050374da

SHA512
a1373e0946b782fb65953c02ff4412de05a011d0555b4d93c03443942b953db05e820699bd00110bb11ddf35377662c91f2f936b3d11a1f6399730ff247043a7

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
512B

MD5
861678436f7f4b9801a2f6b8a30b3767

SHA1
e7fb7f60613f28266ea10701b7e4437fb9709785

SHA256
095b9d056c2beb9c51dc8ead59e8e46004218b34114c5e34e23ee79a734773f8

SHA512
452358faabc6a8589c7f834e9b312be171bec9f400fe4ae1b8b7062aa321b1fa17bd35a62366525b2f10e94f6f2f30d3a2b4a8746c91725f03edfdf59074dc4a

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
8KB

MD5
34611efc34e8f9277888e135a2224155

SHA1
7463fbc09a43569d13c916e13058629d65164e02

SHA256
91251eac3495a9cf5b6256693677f43a1b8e89d9a4ac226734b341454ca3e874

SHA512
200060f305996fd74ad9a87fee74b77f3656954124e1d374e97b7060b1e010183f1305ec4767f1528d631e74f3a52e455987d216e4f11be52ac71045d8c1f1d1

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
8KB

MD5
a0d93bf966084f5eb6e4a0218ea87193

SHA1
50e1c6b022e00cb729eee40d4c2fe149fc368339

SHA256
b3c75b36a871c0942e5ba682c934e0d5ee7aecc4b73c88455e2160002cbdedf8

SHA512
4606d75a347ab3f0b420c26d0580bd8717fc38706ae218cf542524ebd00ae34c2f85c14e11f2591dae02e2b1242263dea355ab2aedb8931d527fa104307c4e20

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
12KB

MD5
6abadc63492a91e0b71cab0d79101f51

SHA1
5b8d1de0e308b8573a7d1c9d213fff66458c2bc2

SHA256
9ee772149eaf33aa29e6ed84f7109ded578fe87de91503d1ec51626c500dc1bb

SHA512
a2a0a7cb0ceb2f45d3a2b11f605bdc01b3cf77423fb5a535ee8e01664fd45e523c05806c672b9f3bd196455f408dd393e0a1a371d79e6878694c242335947c77

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
12KB

MD5
9b35a365c2f11162c553240757ed555f

SHA1
8954e7937d84520ad30faefc51404eecf705cd0e

SHA256
9445f8bad526660c908db36769e0f1b117b6d874a91110203ddf864dafb7d4f1

SHA512
23fe481df9d3b4f98bf5604fcc9e2d84c72ee8776ed5356a26a9e7755d60270db3cad9ea0f96696d1c94b4999cc0b0d37aecd61598410544045901b5cbb50337

Download Submit
/data/data/com.uptodown/databases/Uptodown.db-journal

Filesize
24KB

MD5
13f979529808d6295cbc70088e13d5a0

SHA1
507d5918bd4380b4e72732df2addb3426b59b2bb

SHA256
4bb7c278f0f321f0b35363e25477c5a068b046078448283945e06db78bdc0b94

SHA512
3da5c93ee7751f04a8c821fbfa7a3860f4b14f6515d86e31971df0e39c3e40b539b41fda03ca46ebc0aa1c4fe8ae19eae679a075f769bc8fbfcb597011f012af

Download Submit
/data/data/com.uptodown/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
b7fa09cc181899c9197f47b764a3f708

SHA1
f8e3ef521b92d60fb69a81b3f38f018c68842051

SHA256
0fe584c80e2c650ff195c051cd91f637b1ba92eac53456c3772b96e632fbe629

SHA512
2a464d79175d0754b663b76aba3f40a1f0fb54e4a3dfb58925731933ca1b88e3c913d62e194b092f18ce7e3ecc0d6761650a0f79aa9b2c44b407e0e5faa81e90

Download Submit
/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
7c1566a682b85d5b8e17de09e5fb02d6

SHA1
929ce86efb37df54de8242f12b54b99c25e27ff5

SHA256
55324e82ae5df92429feddf9e24d3d84a725641fa772959adb615c8fb2732e3a

SHA512
4cfed02a67d1bb025cb649f5a4a44bc75a3842a5d52dd24f2dcf2bd10fd2032c31ddf0c4a4af30c870617e3a573070eed2b3ce85ac1074b30ed46069666b8713

Download Submit
/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b00f2f871ed2e3654beaed14ac294b8a

SHA1
3a23f4abef5dfcd68fabbd2ceb870121b2bd9a6c

SHA256
9a6c5a52ab3b064fc3a56ea39650916b6cc5c44806b5fd4ef3830c32f5fb7a96

SHA512
173bceb2b6cbc094d0606908457d67b7c517fd9541292f7c339f4048f7b04a3970ba51820de69cdd7a1fae705e234c1fa9f1f4ebcc35f166b6dbe2ce40ad2c22

Download Submit
/data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a64d6ba4176dee90edf707b7668fb0a7

SHA1
1ba616fe8f964fe4a5bc05b27360e4e08d926b64

SHA256
7051be12a13ae8bdb59db8bd13656425b3ba45b6aa7b8e22eae8d1ee5ac339a0

SHA512
73724caa8501809babf04c0fc4e5e4a8c4506c29fff184dce57592c2f84ec531543401d565c16f396494224e90916b84e92946ec5df50107d5fd24f464a877af

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
36e2fef463149d246f30c872e72a525a

SHA1
e79e3186f82990f9955a6f11a247317249950a3f

SHA256
091966e28e69df22151978688026c14e2254f25e67909350715d0d26b556d29c

SHA512
2879f9c16a136242ce62e69f2ea738d0c38ca380e161f242bc4b914d4c632141db46d30a05959ded7dfa13b4f8ccfb4cb9c6863a7500561bd8f95650ca025fd9

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5db1cd28c381d1941126e48f97663e4f

SHA1
4db3a50e6c63f0ded309003ed0512e1e624cbe36

SHA256
dfe2783630443f3513ff86da0e456679aa33f8e222ca4a386bce893d06d7401a

SHA512
53b292d4c1cedade7e019e4d850fd250f1391cc5b0c2eaa84839aeaccaff37124217bdb5926464da5bdf1118494880203973c0f6c24a4d68d76225fcb31daa36

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4dceaa7e64fc91b6c8d2b5ea849461f8

SHA1
08d141d3427c4e896d26ff30dcdf3c6dc8f6cfc4

SHA256
cd9e18081e21602ea35b05c3daf323372cb450b3f8ce8b6619022d7aed16db7f

SHA512
a292de826cba1201e2d85de3df4d517995151a4bb0d3a8bd813d7c2daf664d193d278d6d4ec1d75d24975492609536d88e1607016404c0cab44bb147dc3faec3

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
13e8166ef3b067755f5996a5a13d5f29

SHA1
a49a031f25f55980c04c2f601fc807e330167151

SHA256
f7d27d9a459a2aefc0c7a61a890dfaaae766af60b9f96d14defe9ad82be7389f

SHA512
ccf9a8f41a5439db58a37195771cd3f95022495591f9e77a034d112e954e4750bf070f154eefd62e3044fc698bebe2e9068df6cce731ee194c67e9ddb44018fa

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f77fa6e06bdb22b090f4daa468ec8df3

SHA1
d7d15974d2ce40823ddbc65e71775341f47dd5d7

SHA256
76428371e5277ccfd53f85ee2e9d68861e74c88cef9a8d6973cd58442dcbf122

SHA512
117519c89665c145f94f4e6a0c967defb31d40161b090a9a5c7b8930702a0c8f63594359675496ffb28c27fed55fb2eb964178f7e30bf1b1d3f38956b6f8df38

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db

Filesize
16KB

MD5
565880cb4dec54f33fcceedb9ea5250a

SHA1
302da889e65c8f57d41cd81c5ad0acd6861e99b0

SHA256
4442dde1d238de9f7f572c198089f272108fbe9eb51483b533c091abe2d5e40a

SHA512
2c0a99ce8f9c7b9806f13c216bd12e53370ead3ed344a1757ddd291b13a737e2601fcdd3410eb502e455bae07be8a973b41f8e4509dfa720df2b1b849a1bb68d

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
625bb43041b0a04d9755aef3f4da4d29

SHA1
1094bc26988d17cf9b9dcc12cce7949046fc6da5

SHA256
e33be1116279dfa7ff09cfdaa7b7a9c19361c1f424efa5a8c3a4d3d75c064771

SHA512
0d8b9e5cda761fad4eb8ae37fb16bb39bcabe363f2bc9af07d07febfeb1a46126b08496ac8636160ad3666d1e40c82fa1c453c6f87abc5b4f652a9ca8b253a64

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a606b33e79dad359b5c468e2312d7a6e

SHA1
9555930ab581b3f1bd7b28816327df9997e0930d

SHA256
c968e4e69a568f0601cf14175af5918b883d790480fd9e55cc6058ac89805359

SHA512
ae103afc05cd75c086f8e00db64ef819de7987e3397636523d3e060d8e0503b66a77054c29f6b542f2c9e78e31a60de36c43bcbfa21f93164f179c5a94f9b77f

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
295b87895c384a0724211c4dfdef46c5

SHA1
4d8a2dec0d721c6e936c20faf9945cf353f1e6d3

SHA256
e87d95332bd160d934511e2a50d937438a2ae0544ff4cb5f9d95ee29f306ae72

SHA512
ab6aa97fe0ca7b1b9f5e6458779936be9a311f81275c434d738fe2e91d8d4b266e4e6cb70270e73e8144f37e3653741d055b858d85d381f44967356acef371bc

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b693db98f95a7acac26fc34b7b634892

SHA1
7878b1bda0976d32ac5cd8f748cfe23368ea2026

SHA256
0a8b34966000156fb45f457f39ed39af5ca3f5f206c740882842bfb06f24d8ca

SHA512
bb5c2473f639f30722cee40ec4d965b312962715d9e6e3f2590f51c9e79f41b68926b52972886e3a715fafa78e8ba9e84b5f1e0d936cd03ae2fd8217c22e4431

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
eed3a8ea8c1b5f312730b590fefcab8a

SHA1
8099bfe3f9ae655b130a2950bae6bf3e19fd4bd4

SHA256
95a430bf4e5152b0d9e3002bb146d2ecc7a3c7b1112da2b4d7576f68b6fb7a13

SHA512
7aac55dd38f681c7f1ec5f241c1a72c3fc648e4d97fec93f26139757e6fb1378fa993682809eb43ec5a88f9d6e4ea34fc9919ed7d61ea0c2059a7dc4103683e5

Download Submit
/data/data/com.uptodown/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
59b02b5030f22eba501f07c67a419b40

SHA1
6dcc651ade6dff9af8b8be061b765d4becfda518

SHA256
c79e28ec13e3aad73e0166ec1502dc9cb7284b0340d25280946e2c4612ebd021

SHA512
f1adfb953d0c4e4c4f8bab00ec9bea0ff9d88f338abed5dec70553fa413ad47464f928634af94a4525a80379f296c65d9a209ead942c25699debc0f092b58900

Download Submit
/data/data/com.uptodown/databases/mbridge.msdk.db

Filesize
96KB

MD5
a92c4563fa855c27dab804df9f6911f2

SHA1
35478a48c56c7709e5d297120359e7dafdb0a64a

SHA256
d8fea6927969397f73aa8b22c631a68cbc9dce1641685ea2817db6a4ed73bbc1

SHA512
034abb3b6e87f9ef086257748ae1609c38186c28dd4469a3d04255ded980426aef0ea45fe210bad8afd879d0d019512aee9bef8480f544ce46327562ad4195d4

Download Submit
/data/data/com.uptodown/databases/mbridge.msdk.db-journal

Filesize
512B

MD5
8e5b1dd69102804e9b2a428b15a9ee03

SHA1
86b1a539239a0d590d8f1e48fdd67f3da8c97093

SHA256
ba55bc474094c97baecd3f40334591464f0ae96f469e5d4a37602a4f8cc04804

SHA512
0c23b1eb473cd9a6b811a801f41871c28c28863eaf8ff1ac54af3cf71e2258ec6bd55ea57daa8dc51254e87c0e5df31a0232cc3ef2638636b85231acbe5a66d2

Download Submit
/data/data/com.uptodown/databases/mbridge.msdk.db-journal

Filesize
8KB

MD5
07575432c40e2ca770db9081368e88ea

SHA1
17932849322ff9026197e1a5c8f3bec4f44dce1f

SHA256
91261a11c1f7e5b30a78ab5fa2634bf08ca2cd7e34c747523f7571a1cf5a04c1

SHA512
f5b8a0dd5d833d217c82eec50dbe43a540bc60320e24c69f46860d43c43a06c5fc98734ac57a45b81b9b9aaf1b58cd081c84f47d8ab2f0898e90c59f3a3f84c3

Download Submit
/data/data/com.uptodown/databases/mbridge.msdk.db-journal

Filesize
8KB

MD5
e5dbeb4eef0b823c875747e1af5011c5

SHA1
eec45d432a28c6870125f6012e85eb5f1d6529be

SHA256
3dece6f3992b5dcc5fa8ba8e0cf2c882912976cc24f7d0c2006e0a6ea23b7198

SHA512
a86a3864e7376e94fb2232cb28a1a2d6db9e595919d9746f7875986c8e4b431793578d8efbd7009e187cab123e2b00245709973ab5a2e0ad9501fa8f30394410

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db

Filesize
16KB

MD5
b155b23b3140b07520c5ea52e784423b

SHA1
db8e5b22de8c1fe362b4ad40b78ff5c557c0b288

SHA256
216f0ab5051daffe6222e1672abfa9760ebd16fa5ff411f39f858c55cc537b14

SHA512
1d047dfaf597e8d108dff5ced2cceafb3cf7e9c85042db98458e62f7093a956948a9dfa7948ce85a80c1bdc28f94309a56a538f59f46bc2d503530fadf219cbe

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
512B

MD5
0db80011b996af3ba0029991f556a10e

SHA1
3f085232f295939c0c2277e3e4cab00f94837d99

SHA256
0ae200462958d295399836c6119f2637a8ab8e6bc2d735b78b0573037f698edc

SHA512
927c60d22c79a11818737ca6daf0b6d168ddd577e317089fb7cfcd1299699bc3b194a92cc65dbb2f09386a71f6c19c37dd169576a7b30f6d4ddb04533145cfda

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
8KB

MD5
e8ae176b2dbbd354f7144ee0e4a4b559

SHA1
8d25594fcb606ca0cf5c7bf7fab7cf0b43f20734

SHA256
627edf5a262d9805005dd4e94690164dfda1ccfa6e52415967e31cd464814d42

SHA512
daef05afd94feb451dae63d6bc64d4ce0e9ad868db5b1612a4ee7c48ecd3cfc9a9785aa95d682f8d28046b5632242d1d139584988f47e9e237c0418195528484

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
8KB

MD5
96d0fac9fbd34cf4187bae2d79788adf

SHA1
6194612e03dfa049c3ec73140a6cdc195696484b

SHA256
ceb2ad04ace02d55e48c607a4fe788e280466fc3054961a05af4963d193af244

SHA512
b91e4c4f1d9a5f9ff5eeba4f78f1d82db58bed7098f0860d63cdf1d5323c66850e29d5028db275bbe14f796c0a74e639de6be73574521d5dac68faf934b54133

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
8KB

MD5
9c880d2fd4c1ddd9808adf888bfa0720

SHA1
cae45f1bc811eed8c880bf71a16bcc4940f99e84

SHA256
89e85f52c38e47645ce50639039568e0e87a5918636019d723c0d91eb845d734

SHA512
efcbdf8f3a5ee1bab7a3bc88323ddce1a334713fcc003e809e8ceabec0bb26019e19d75c059d20eb5a36ea837c8e40a72b5ece328d7e00d680fc0b82c83adcfe

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
8KB

MD5
4259582f8eae28588e429445ce1a079e

SHA1
afc1684ac53cd5dd7ff2f8b045ec6f74ea39234e

SHA256
8f1e32293e282e462547da87cbb2c9469c32794096186feff8f02c4b8aec6051

SHA512
52d768a0c1b62f45eaec802fb02f0601b60e05a39fdcd40e88b601423c604891681576d1eed9ca40b6c048cf3c50abac2c1d938b9db344b72362d86f68bcb0b8

Download Submit
/data/data/com.uptodown/databases/track_manager_metrics_sdk.db-journal

Filesize
8KB

MD5
09f2cb8f1f233e18075eb8b5eb72b8d8

SHA1
8f82ce7f455c5f44b3a8f55aba6e0598835a73d5

SHA256
d17d293574c3797006cc981db68977db6d2cf84f17dc787533b4b00467a6125c

SHA512
7c60d0f52a3fbb6b7ac0fd1158336a4208a1b3553731f7b6455f5f03f279ca996fec1526d0d549a8d8ba6932d67c383f958c27a16aefa8ddb0e2961015424588

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db

Filesize
16KB

MD5
526525328753e444a2ece18f67934ef7

SHA1
ee4ddd85dd227129aa9628e4c25d48bf793ae198

SHA256
2ef97d64527c5df41a4809ddcdf2434655936cd20bbc356619125242b98e8fa4

SHA512
82891a936d8df467cbc4bd72284e746018410b357b302583274eb0c7f8a1aaaf928c8128fd14f9e65da05257809748fba634e62a4be0731926a429ef13903ba8

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
512B

MD5
bd038875739f9b7a08823458ec1cf37b

SHA1
b04697fceeab945d201e557c8c44128ee04a16a9

SHA256
4c3bb1e99f4152c84346eb292e0257e827a081aaa5618aead749beadd68b866a

SHA512
068b8f996c6e26d3ed92bccc4aa4af50b428fcd592bb73d76bed488e9ccffaea50b4c83f80be3dad39d7587a4e766035adfba22e5e28c3f49047a2ef7faaf042

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
8KB

MD5
eb5d73620924c3c136afc5061bd4a94d

SHA1
b58104c0fcc83d8cde75c0acee9fe898e33781cd

SHA256
e5a1c873c9b657de6c09c9c7375272725da9e8821802ec04a64bffe77c51dc22

SHA512
dbe040761c0686a2c18a30a03e744cdf3d0742c80615f72cf3ad46a4be037d10908b0a210cac9c0b58e3656ef3f261a21fc44294f065f511306584b09ef9d1cd

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
8KB

MD5
b3415345ecef8ec9322db8dbd6e7e300

SHA1
9b7a7f5bb8a2ea06177ef29dfba27dc009c942ca

SHA256
d63bb2da70001b3756f75d23bb91d18152cd9ef69e7eeb5e06cad7aec50f794b

SHA512
84656061da3a8a6d700c4ef3593fe1fb5007be3d5639cc1596cc96ca042e6d81d24bff0b0be8acb49bf5cbf5592c2612bdd6cb0086f824833b5155d6590912fb

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
8KB

MD5
61f4d1fabf42777f515a690fd6571207

SHA1
6a5c5f060e6558dbdb53a30a33ef143b54ff6217

SHA256
a110043bdd3adf5e6c73d93ec74897bf9ea131d44ef1ac3f3c50ddd0e0caa963

SHA512
c75dadd9bbf3599b019e7258365d1218a01c06e148b0643d3786a2ac5e146b419d8205982c24f812e18c0022741a49ed722ff3524025fdcf026c0b6a3fb03485

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
8KB

MD5
dcd2805c6371937800d7215b2ee7485d

SHA1
188fb5fcb5deaab0a485f179727ab61359844c8d

SHA256
6f11f26297a891b77f18fdbe76fcf77df8cb015006c154e542866e1fa0d9902d

SHA512
4fe26c844eb709283860279f8b19ea425daaac25b2f1b140a93d96aff31b86f2bd03c5ae171c96805d88ec16602fd0323cab128c47d3df4d5ba50fe46939f9c5

Download Submit
/data/data/com.uptodown/databases/track_manager_monitor.db-journal

Filesize
8KB

MD5
2b3de562f95542e291c955fc370179c2

SHA1
7e81e122bb4d1d556758c183032290de162759da

SHA256
0bec952617c84e99bdf4da793cb4b5cb37617dadb08c495a2340ab9d54c9bad1

SHA512
279969c8f2cd31f187efa973dcaf2fc5fe6cff17d0163036efa31dc57a61e3db07801ff6db870318a204a1921bbe16472b45d6b600829472204ba07d137165ed

Download Submit
/data/data/com.uptodown/databases/track_manager_mtg_sdk.db

Filesize
16KB

MD5
e9b967b928edf2b72ae4fd325c71b1c4

SHA1
bd4d5788e061afe04d78448eeed4e1eec3f5ffcc

SHA256
bfd2433553a86f157c0d532b1681ac2096fba4fd5179e3dab9e5ce3986d858ab

SHA512
0a16b9b753d1f9339d4d9552737f9920d3880b3deda8c10e0aefdcff0f0bc873d1493e2a509e848624c6b92acb7d3bcff564d391f58f5e4333b7c1c2c5b150c6

Download Submit
/data/data/com.uptodown/databases/track_manager_mtg_sdk.db-journal

Filesize
512B

MD5
c942c0c4820f3bab3a8a5fd419e1e9ca

SHA1
0cca82228b4c0374f62979fce1f882099de99070

SHA256
9d36aecdf10d81d600752c892ee972014fb40c0c5efa1379d6bb216ec9d2f7ca

SHA512
8e5505ee536ed6469129497fa8154618e53658dce66c607e597fc71042be4ae54d83e3b98d8f00f2294b9596fa32aa83b92f65fbbf3bc257764445e1c6ab6feb

Download Submit
/data/data/com.uptodown/databases/track_manager_mtg_sdk.db-journal

Filesize
8KB

MD5
3844539fa6f8a174b1c4d27e908dd734

SHA1
8f651843625138cee19d260c2245d6ae70cf9947

SHA256
ddf5fe6158f71032a7c67909a7485b7171eddc28c2668a943571ebe2041cbcd4

SHA512
10e66436a18ed2ec50d1f0a21d25dd4b0ba435ab2f163f9f2f188d5439128b4a8ef64a0e4a82608a0a3a2eaeefcb24e0245b0867510ea17a1b0f70d6713399e8

Download Submit
/data/data/com.uptodown/databases/track_manager_mtg_sdk.db-journal

Filesize
8KB

MD5
4242eef5f0d91a0437e3527bbfc92eda

SHA1
37d121e47f1e9071df0161e7785080af720c7aec

SHA256
a701da861f6118e9b606b08e071c5cbf984db3d2c450a9712b8c4d6dbf25f624

SHA512
c7ce10d85f0d32c31ccc97a326e620355491e9d20210fb1a93f862d8f61a681b914827d1d7a98654baa88c6652cf24bddd602f7f651f4d64109ea3d9f5dbbad9

Download Submit
/data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/com.crashlytics.settings.json

Filesize
708B

MD5
8e5e13a3ff4f25c4422ce1f24d374673

SHA1
48f4fad12a0013a190c32325a46454c8f0185367

SHA256
1edbdbb251835b70d60e22a5da3463ec73c64b6790c0495484c1c1a735ad160f

SHA512
0aa33734d02302a90ea21cbec7196656b56993bfd3dba5ee69e0cf3838be89c7dd4e96e5c99eb29f84e53deb88c0db4c87c90ab25fa11e89787574a058ea5f10

Download Submit
/data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6724C27D02FC000110D239537B99BEC9/internal-keys

Filesize
207B

MD5
3d391c2952983b7e8a1ef7499349133f

SHA1
6ba8b8e75b1b832114eec7c515749fa727a1015f

SHA256
ee6a3da692e623cbf5fcf1c4667c000c4ad28c87ab38212c79e905421fc24f6d

SHA512
d638de1297bc8b649ed2f73da79164b2eaba86cd0e86a8301f2b78816cd85ca7d6123b43db260019b9f9d2d54a455d1554e68700153b34fb43ebe35a2a96bc8a

Download Submit
/data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6724C27D02FC000110D239537B99BEC9/report

Filesize
787B

MD5
be38b5099c695a0d36d79052f9cc6978

SHA1
1fda09a06932bce1ab2a2d7269e0fa5aa5a3bb47

SHA256
09df8d0bef96ab5895190a75dc7fbeada12d49a05524b9649230dd5a7fac2dc6

SHA512
23755383ed06a4574b2ada94d8f40ce768915f9f65f39c864c5235ce6732e38ad6ae559177226d42fc9a61c616ff10dfb936293efb931defc3878b31456e7b72

Download Submit
/data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6724C27D02FC000110D239537B99BEC9/userlog

Filesize
378B

MD5
40d8983d47e0116d732c671abb04d97f

SHA1
efe8a9bce6270a8692f6162d4db538e46b0d25e1

SHA256
e4f329d045641085e93acc65f0e555dd43cf56b7978ecdf3aa2d1a562ed2835c

SHA512
3cb0a5c4645b7b0d20f3264c8a49e6e4e846dd52560353b45e1b9801e1bb3d7e21bfa315733d97608d1985848ef51b52f29a4b127b0357a5a762065fcdf228e7

Download Submit
/data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6724C27D02FC000110D239537B99BEC9/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.uptodown/files/PersistedInstallation799132307746211335tmp

Filesize
90B

MD5
cd719265913603766f70f45b2acb4e83

SHA1
5ddfba93f8a09b3e309547f10e564e51834466c2

SHA256
d885f34ce18f488ef1bfd5a283f0a26354fcfd6bf451d47649f7cc8a145bd9c3

SHA512
c75677997b98223e8fc1e69abc97f057ecd8e91e8535cb2068d70f471452a05cd5df98dde2a369331c567855149859d2c644cc3ae2288e3a8eb56756dad1a018

Download Submit
/data/data/com.uptodown/files/PersistedInstallation8817979625382100135tmp

Filesize
569B

MD5
ffea517320e49c3359e35c0049948c43

SHA1
a01211d1bbdebb8ca1f12eb396e04818f89c30db

SHA256
afb6891bef591bdc8d43eddefa7027e8fcd43afc233f3f65269abab82425abf9

SHA512
5fd5d236d89d34e6906f800cd13ea9a09ed7b0ac0fc7c9bb728968226044b9b61244fcad5c9b62accbad2f99392cd2301ee55c136f0a68f79bc9f71016e09b0f

Download Submit
/data/data/com.uptodown/files/datastore/firebase_session_Y29tLnVwdG9kb3du_settings.preferences_pb.tmp

Filesize
33B

MD5
a65b9b3e4670dc3b48a9609f816ad531

SHA1
682a73f2c248815fba0cb50c45031a53d6f8dbcf

SHA256
a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6

SHA512
6c06e6791dd41c1c8d8e0246e9bf7fed81dbdb5e918e7dd78cc2af1f002f8a532ec28335b229a0ec5c1ee220861092cb1a7c7f4060663394e420d80ed391179e

Download Submit
/data/data/com.uptodown/files/datastore/firebase_session_Y29tLnVwdG9kb3du_settings.preferences_pb.tmp

Filesize
75B

MD5
06bd63584cc699cbc92ade3aeab0ac42

SHA1
e21167e5419847271e7f67b3b286916b8124165d

SHA256
1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef

SHA512
675f177e388425023df5e19cda634ab1e7673681feabfa7bb860089105353166491d15b8c86b5408833230dc5b0ac43e2b5a61e1d36ea0b40d6ce7166bfc385e

Download Submit
/data/data/com.uptodown/files/datastore/firebase_session_Y29tLnVwdG9kb3du_settings.preferences_pb.tmp

Filesize
121B

MD5
1fbccf7b936a9b713de5d42c6d8a075d

SHA1
7c8bbdf9151e7f53e2675329d471e552446e9ad3

SHA256
232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513

SHA512
b9177426b3facda6d86b5a83d05805a4dd2f5357d4979ca7282a13ce3f08ef7e7a0c5922675ada826bde264450b1b4ddcc54eea4de62249fd3eab1ec9acf32cf

Download Submit
/data/data/com.uptodown/files/datastore/firebase_session_Y29tLnVwdG9kb3du_settings.preferences_pb.tmp

Filesize
163B

MD5
14770edbc1290230aebe82f8dcc730a0

SHA1
f86874de3ff45c2dd7c982f9ada6b5fc979f082f

SHA256
7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2

SHA512
c6be6c93262e0c42527722af20fdd3be2c9936eb601280c36492e0bb2151bb63f88bfb150690ae361c75d01a33647c2440bb49e290af38c5c5af5a707320e3de

Download Submit
/data/data/com.uptodown/files/datastore/firebase_session_Y29tLnVwdG9kb3du_settings.preferences_pb.tmp

Filesize
212B

MD5
ac304326d5939629d831b2855c89b9fd

SHA1
4511797cb4e925d1ac662c36061c3b46027fecc4

SHA256
5f501d1bb1add6709c34bea44fa3936dd5c272a8db200a4a6278025acc2357b3

SHA512
c326af088823a0d2deae5a437e5678c53df8647f2eb4e52111bc4aee0d586584863ca21d46e769a2db688ccc85b8bde9f2efa3f7117f66b05e43bf72045e2bdd

Download Submit
/data/data/com.uptodown/files/profileInstalled

Filesize
24B

MD5
9676f3393247b4261a4cbab27ea39f9e

SHA1
8547d1ee271338ff4f567025c3e2836c3ebb0e2b

SHA256
798ced17218bea29182c24cf4c58b29e8555f2519c608ae89c400c7b3888e655

SHA512
07a4de5547febffe457a336f40fa1a0e15a4042aff34d2ee001f3d30d8c542ab953132b9f6c433ca261976f9e039be2689f80d2bece215fb17fd3d7240970045

Download Submit
/data/data/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
3794ce769268f490d65740a2ee654117

SHA1
498bf687e94fe5d1e2016367f9edfb47c347eced

SHA256
8d3aec020bef699a10f59925db886f343504f19be4d053b69454da0275b17491

SHA512
de74b2873330334e6137fa9517be86a6a030cd851bf93fa599749aa94c3e59afc2f5c4538c5fb93c805374bf72157dd9e863730903a6e66cc550049bcc5c6aa2

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb

Filesize
4KB

MD5
0eb157e1a86d4d00aa601dd2f6ff3ee3

SHA1
fee434f784e73cc7916322e949f727caf8363102

SHA256
b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

SHA512
b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
f42f48424b797be53b7187153d98358f

SHA1
1b6fb1da79ff4b8e2f8ea5c03f3e532b5d0dccdd

SHA256
a95a80ed23c64483afdce70738dc5f4b6337d391806652869ae69c69018e4790

SHA512
1601d9bf8a4c117dfb8a465c4e939b05be5367d64a4185f19091fbb8824e3d2e2ba65c81ccd31ebe74c6116a1a89736464664674f14b1b46ae06daf2ac709b47

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
d1c1d0a3d4258b82a349992ad62fe32e

SHA1
2094e43e3f58c6f060e83e800850154a3096a3c8

SHA256
1c73c9652c4438751c0e4d625517b10d66d83f732c2d3e1811dd2e4ce3f6eec4

SHA512
d91bc475a6408dcf7e6cac02202df1702d86bf4806b9a65831436b3834130df3f9159d330ca3eab65a0d5c4c47ccc02ece758142a7d31cdbbd07e034b6c629e4

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
64efd27b54ad46cd23fcfae5e4288934

SHA1
9422e6fe1e03d5100dfc938239eefd04f9c88d49

SHA256
c08e642811cc83d7fd250c0f2213d96269422598d2ac10126511adf5c0b2823a

SHA512
33e2f099184ecfac2c41b794c9afc1da508c7441d8ae9a13df721d0a950896b8b66fa8b5d7f7bcd0eab4295c3f528696eb7dcb2d6b53352879c66cafaab8c2f7

Download Submit
/data/data/com.uptodown/no_backup/androidx.work.workdb-wal

Filesize
261KB

MD5
3ea36734da98764586d3e6f6c1dbf7d6

SHA1
f0378321c17cf4ac488c546d39c0d7570967a1ce

SHA256
d126f6cdd6152e9255818bafa95b221fa1c2dccaf2db4e049ee46ef515c5ac11

SHA512
f530cbda6dc24b2167ec5457b238e26492b3103b207c233d34b66572fa61928898a8f1ffd0287730e6fa8bee090e153eda395ecde2a305dc1596caa9b90d6d1a

Download Submit
/data/misc/profiles/cur/0/com.uptodown/primary.prof

Filesize
12KB

MD5
c6de98846bfb113723dbc11ff869e854

SHA1
04c45ddd6c2bc8f4fd8c2f598d584a6598a15375

SHA256
0ccb7a79fbb21b3435343f89e2c7c972dc903039ad434b31b879395efaa32ba1

SHA512
d17a13a794874bcb9b5f0efa43d2c21b3a859a9a64c99599919b6be4ea8c43eeea82cb885637e75068054696c957c3622c99fc02307eb940a45351bfb74919a8

Download Submit
/data/misc/profiles/cur/0/com.uptodown/primary.prof

Filesize
24KB

MD5
8efd2103b00fc36ea3851516bc9f0c49

SHA1
ffbb6adb2aaca942045fe1228024477559ad3a1f

SHA256
f9896c20390d455ec8403200768acf6b050027d982c6c22129890e8bafd375f2

SHA512
8c53ce05dd8e539adc41b50cd4e66807c7e26fb8fad8f6ea8b74a83efd3cd4090bf0ba8c05e245c2fc4513669a9145ec1ad2b249fddf215d6e409f3bf574d082

Download Submit
/storage/emulated/0/Android/data/com.uptodown/files/mb/other/mraid_js.txt (deleted)

Filesize
12KB

MD5
d265d6c539839f8034106635f3bd9b00

SHA1
45e82ee9aa8dfe81987d806cf222eabb19c4dacb

SHA256
61779e5e9b63efdceca3492897e0b02063c9c8f87cd1335cc735a3e56a1dd2c4

SHA512
bb49eedf3dbab86a06f918d3f43fbd7f2287bd17638301595ae5e40f0a326ed7cf6dbb28698d753632196c1fdb110cb2ce152c64ca19175efef7ead80d90692e

Download Submit
/storage/emulated/0/Android/data/com.uptodown/files/mb/other/omsdk/om_js_content.txt (deleted)

Filesize
38KB

MD5
2710e879a7b0781d8ef8e5a5e6b35f9c

SHA1
1955e65b0f84b5c7cf118fd0b2ff694af9cfaa6c

SHA256
70bb8f51e8554a2dcf42e9e97205f0bab3623190ead9bdbeb4ec8c77cdc347f0

SHA512
f5dfd497920482fc1884188e2c595cd17d050c93935f87d02eaac54fbe5b666af27e8f5d5bcc2930cd2a03edf9727dbe418f8d0fc81629f8d5a47e2e7a964abe

Download Submit
/storage/emulated/0/Android/data/com.uptodown/files/mb/res/.mbridge700/mb/config/mbridge/fcde9540550771d61b30272a273b426a.tmp

Filesize
6KB

MD5
f031897d878c539dcc06bab28a6a06ff

SHA1
0c632da73d7118578ececdcb58ac56b799cf7f9b

SHA256
9ace0ed459a691c70ed5bcd185f6ce6e5398e920fc5d3f1f8895874c6cc10cf9

SHA512
e0cb3f3e21359159ae295bcf4b9e12c591c09e365923b9c84af384a8d6311f8c48a85dcc67ab66d0765fc2893fe33fd2a0170c8514061660d4c58a6ef875f814

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit