Analysis

  • user interaction
    yes
  • max time kernel
    26s
  • max time network
    526s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    07/10/2026, 02:43

General

  • Target
    uptodown-tv.twitch.android.app.apk
  • Size 14.8MB
  • Sample261007-c7q1eaay7w
  • SHA256 9277f5ec9ba2b5341e7734ef30202a8b6fc6f7415babafe043b3960293622c33
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.uptodown
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    PID:4756

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        029b302341f360b136168ffab0e9bc98.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/029b302341f360b136168ffab0e9bc98.0.tmp
        • Size 4KB
        • SHA256 56ad5aad3573074b2927bef55c8002a0eef1cb02f8bcab90a86ade35dff54c57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        029b302341f360b136168ffab0e9bc98.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/029b302341f360b136168ffab0e9bc98.1.tmp
        • Size 9KB
        • SHA256 9aa8139dccd0525b01a4cc6deaf28f15bab3d80b83be6cf0c06d877751e4254b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0a6430d834e77f340e87cc152fdae9d6.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/0a6430d834e77f340e87cc152fdae9d6.0.tmp
        • Size 4KB
        • SHA256 cc4f2c11423967a1b51ace6e45f2f6c3af90047858a2b3627b00f0fc1ddb04e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0a6430d834e77f340e87cc152fdae9d6.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/0a6430d834e77f340e87cc152fdae9d6.1.tmp
        • Size 24KB
        • SHA256 b2bc72371b69fba7025e7bae5f53636edf3be92e613d430b8475d87f2074eb31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2cc36ff6c28f08400fbd27e7c39dd378.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/2cc36ff6c28f08400fbd27e7c39dd378.0.tmp
        • Size 4KB
        • SHA256 2e66c126d816c6265c87655f3ca2e2bec0e996771d1c54037ec419d83c353267
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2cc36ff6c28f08400fbd27e7c39dd378.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/2cc36ff6c28f08400fbd27e7c39dd378.1.tmp
        • Size 9KB
        • SHA256 1f12fcd073ea766c91c1e1e8862dd8904e23ffecf50d373cd08be84c45dd2325
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4d67e1459e16708400c4773532b58339.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/4d67e1459e16708400c4773532b58339.0.tmp
        • Size 4KB
        • SHA256 0b8c0724528b797e0ac072d06febe4965ca10c6cc70b9782754639c1b31b5c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4d67e1459e16708400c4773532b58339.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/4d67e1459e16708400c4773532b58339.1.tmp
        • Size 2KB
        • SHA256 6f7e7ccb36ecd092e93233fcef8116079e9bab377bf13885f3f21d6683bbe398
        • MD5 SHA1 SHA512 TLSH

        572f918acacc554d347b0c2bbaddd4f1.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/572f918acacc554d347b0c2bbaddd4f1.0.tmp
        • Size 4KB
        • SHA256 3d76fda81c497a94b24db4327afbe0a971dbed0d4e17394bcb1d9b0597fcd438
        • MD5 SHA1 SHA512 SSDEEP TLSH

        572f918acacc554d347b0c2bbaddd4f1.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/572f918acacc554d347b0c2bbaddd4f1.1.tmp
        • Size 2KB
        • SHA256 3a90facc2771ff32476f609d1b5b98ce6b190bbfa8efe3e7a0eb058d73b02737
        • MD5 SHA1 SHA512 TLSH

        8e297e140443108baa523477a016d857.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/8e297e140443108baa523477a016d857.0.tmp
        • Size 4KB
        • SHA256 625c5c1acc974ef34ab1220b53889513f642b299dbe1b3e395993cfaaf15d2ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8e297e140443108baa523477a016d857.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/8e297e140443108baa523477a016d857.1.tmp
        • Size 582B
        • SHA256 e1a8445d5a787cc5dae67ab687bac73ac1dfbdafaf0f8b83b6d96bb5e849ce21
        • MD5 SHA1 SHA512 TLSH

        abe94c50d01f917afeba4921c5295177.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/abe94c50d01f917afeba4921c5295177.0.tmp
        • Size 4KB
        • SHA256 0fa792837de091029e44f424438381922b7edc5c520f73b6336a6e4429956719
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abe94c50d01f917afeba4921c5295177.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/abe94c50d01f917afeba4921c5295177.1.tmp
        • Size 18KB
        • SHA256 8a855e27110564af4dda6662df0d07b1b6aaf3042fe5dc4389554924762baf95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c8f79428266a2e82aefd0495b244805a.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/c8f79428266a2e82aefd0495b244805a.0.tmp
        • Size 4KB
        • SHA256 f765a5f96edda7d77bbca3e4c2ea4751a234fe220267784b304881ca77fc5da9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c8f79428266a2e82aefd0495b244805a.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/c8f79428266a2e82aefd0495b244805a.1.tmp
        • Size 3KB
        • SHA256 11f34aacca0972cef5bcb133fb6d565431f367cadca7fdab6134ff23b909b96f
        • MD5 SHA1 SHA512 TLSH

        e5233fa964e19f369cb9c99640744b7f.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/e5233fa964e19f369cb9c99640744b7f.0.tmp
        • Size 4KB
        • SHA256 3dfdafa6195529fd61493ce9dcd1068723408d6ec70851ac32a9e46c0e8556ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5233fa964e19f369cb9c99640744b7f.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/e5233fa964e19f369cb9c99640744b7f.1.tmp
        • Size 14KB
        • SHA256 d2edefe8f33826f2487a8a9efc5304f6b5f1529a68c4637ca7c016ac0ce7e759
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ff49a38a327ff7dd15e385c5f685e8fc.0.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/ff49a38a327ff7dd15e385c5f685e8fc.0.tmp
        • Size 4KB
        • SHA256 c7fd1304809f91316a34150d6fe61990809c08e16eeb794ea26221f087a33667
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ff49a38a327ff7dd15e385c5f685e8fc.1.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/ff49a38a327ff7dd15e385c5f685e8fc.1.tmp
        • Size 1KB
        • SHA256 0a53a93c5925c9a9902ef402589b0687862c104fd9169717e7fdca370f9895ac
        • MD5 SHA1 SHA512 TLSH

        journal

        • Path /data/data/com.uptodown/cache/picasso-cache/journal
        • Size 918B
        • SHA256 4a8c0a8b2d7f8fae17b24eef2341cd1865034037e7ae3c8a02aca742ba7f9e54
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.uptodown/cache/picasso-cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        Uptodown.db

        • Path /data/data/com.uptodown/databases/Uptodown.db
        • Size 536KB
        • SHA256 8c786d1301b0c5bbb29f0eb774de8fd9160f89de6f7118de834645c213472067
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db

        • Path /data/data/com.uptodown/databases/Uptodown.db
        • Size 440KB
        • SHA256 88fc2e037a8a6fc3740527edcd87c2ae3ff2b602dbe7a65bef4fc63226ea72ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 512B
        • SHA256 9547657eeda4c79138db357c50d167c2565fb4ffe84052d98e9cb20f7a309c70
        • MD5 SHA1 SHA512

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 8KB
        • SHA256 905ca89e4579694550838dd3f746a00e38a8476cf84129386803383bee858a10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 8KB
        • SHA256 fc8367e9966e37b0095bd940dff7cc567852bede9ec6889bc6b4a763ec0e4511
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 12KB
        • SHA256 b2fac952a8e37e72560b46ba391894f754791b5288d5f1eb8ec71c7de48ceb71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 12KB
        • SHA256 c533bd5058ae15504ebe1429a4c98a9a2fea56e8756cb76aa0519083bf8506eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uptodown.db-journal

        • Path /data/data/com.uptodown/databases/Uptodown.db-journal
        • Size 16KB
        • SHA256 5a3c82ddaa8d864f416bc83ac618c9608b36ab54065224694bc0f28810691a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.uptodown/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 2625162fe578c3c7daa9942a15589e6aa489a6d8aee792d0312b1291bfdddc6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8f02160a75b39987f7866797e7205e818c9fbebc5ab4ec92e66272e7de5ba55b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 208588d318cfd317c03294ea1ef7085f7f82de2dfd1960d8bde32d06cd4d6e61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 ae7f2673e7653eb55fff5c298258311fa7451c774ea402bc9ace457ac8e6a42a
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6fcb64626485b5c03861769567747c6c27e0e7a412ab82c38728b07f377753fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1b32f70af94b69088e630a0f2fc5d5a09535b9c7dcf1bb75c063733859fead2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ab5d33b66b83ec91dfb12efd0d6ca10e0b32f39537295de3d6a4dfddec80fa97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6805d4a2ffa4d2cce63c0a3f7d51cf6fad761b666896610aabc29d95fcc35b48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 437773239be86ed19b529b62266218dd5c99aaf3ac22d554e9d2cf17b317aec4
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2978ba6829e8e38accdf9c9330070299649e7a9357e1e2b698cd615c5d81c8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 92517d7d130e59a327747678cfe5378fb65a99b2c53f886cbae5efcdb8e6b9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f415888bfbfd4a27610be00365408b4e89d695f9387b422063bed3b63614ebaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 6661c63040c2a138ff59b852b3b6684936b90ebf7f03ee7ef737637bc2343f0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.uptodown/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 03a27ff6fab3de46ff476e5d49eb35db4311601a7bb837c34790d3a913357e87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/com.crashlytics.settings.json
        • Size 761B
        • SHA256 bb7e8f785d825855257db7fe5d49f6cc3f3076d90f739884d19ffc1f8a20540c
        • MD5 SHA1 SHA512 TLSH

        internal-keys

        • Path /data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6AC5B1DA02AD00011294F8C34682A622/internal-keys
        • Size 207B
        • SHA256 a6d98af5d3a6bd01a4afb7932041148aa16fa280dc62aa3f28efce294333c9c4
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6AC5B1DA02AD00011294F8C34682A622/report
        • Size 788B
        • SHA256 7cfe9f68ae3368be9cd69d2b84854986067037b3f18b0e65ed36210b8b5084f0
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6AC5B1DA02AD00011294F8C34682A622/userlog
        • Size 88B
        • SHA256 9ac65e8c8fd324aa59eeba16be75cdfbf078191d8d501ca4fc96cf51aa71948c
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/com.uptodown/files/.crashlytics.v3/com.uptodown/open-sessions/6AC5B1DA02AD00011294F8C34682A622/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation1253833752760786299tmp

        • Path /data/data/com.uptodown/files/PersistedInstallation1253833752760786299tmp
        • Size 90B
        • SHA256 167aa8eff1d3e33a013f80d8ce6987c0f804804fbe32d37b7551a9ceff6767f9
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8800729203247143331tmp

        • Path /data/data/com.uptodown/files/PersistedInstallation8800729203247143331tmp
        • Size 569B
        • SHA256 9c346e98f8ece0ff0a31ddf072e50e768e416b3357cb4d78130e693c6c916170
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxNzEzODAzMDYxMDQ6YW5kcm9pZDo0ZTgyN2ZjN2MzODhhZWVjNzljNDRk.preferences_pb.tmp

        • Path /data/data/com.uptodown/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxNzEzODAzMDYxMDQ6YW5kcm9pZDo0ZTgyN2ZjN2MzODhhZWVjNzljNDRk.preferences_pb.tmp
        • Size 379B
        • SHA256 bd266a3599236c36a235c334bd89a2bb1a72035c795aea20530b75f6f377d6f6
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxNzEzODAzMDYxMDQ6YW5kcm9pZDo0ZTgyN2ZjN2MzODhhZWVjNzljNDRk.preferences_pb.tmp

        • Path /data/data/com.uptodown/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxNzEzODAzMDYxMDQ6YW5kcm9pZDo0ZTgyN2ZjN2MzODhhZWVjNzljNDRk.preferences_pb.tmp
        • Size 403B
        • SHA256 068e6416318d1485ee1c07ace36f8ee0ea16ba0821b8a73c83777bc3feb27058
        • MD5 SHA1 SHA512 TLSH

        sessionConfigsDataStore.data.tmp

        • Path /data/data/com.uptodown/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 e2a78cbee3a4f6d2b952f8481ca1d7b98d6b2f862d118a34c2f9e0b0bec4d07c
        • MD5 SHA1 SHA512 TLSH

        sessionDataStore.data.tmp

        • Path /data/data/com.uptodown/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 272B
        • SHA256 8b0aa13779ee23bce725b6000e605f0cdc7c622d51d3077e6b970019710b8e37
        • MD5 SHA1 SHA512 TLSH

        sessionDataStore.data.tmp

        • Path /data/data/com.uptodown/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 310B
        • SHA256 e4016f4b75bfee342f9f8116875fdd5bf163bf601b7db9557d6fa145e456f8ac
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.uptodown/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 2427c63e673afa296469ee97326cc6fb6c4f29fa19f7d36df8e6368023912100
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.uptodown/no_backup/androidx.work.workdb
        • Size 104KB
        • SHA256 98d03f3ddb8a6c4df7181e9e3e6216ac0638848067e4c6d307dfdb106830fbdd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.uptodown/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 7a474bfde5e9926348a2625451422625f9ac3ef5276f72895e645321cbf22fbc
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.uptodown/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.uptodown/no_backup/androidx.work.workdb-wal
        • Size 406KB
        • SHA256 4817a07623dbfa8d031cc3946dcf9d02343f7240aef4f5aa7b750b64b2594cdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.uptodown/primary.prof
        • Size 15KB
        • SHA256 9436385e4e8a73627068934a67eb19a490e32714f59e9304953931a0a0510483
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH