Antivirus scan for 39669e104a79421284261ef61fb3117892a0b3fd85be5ca6198df0f51cec34d8 at 2016-07-22 13:12:42 UTC

Antivirus	Result	Update
Ad-Aware		20160722
AegisLab		20160722
AhnLab-V3		20160722
Alibaba		20160722
Antiy-AVL		20160722
Arcabit		20160722
Avast		20160722
AVG		20160722
Avira (no cloud)		20160722
AVware		20160722
Baidu		20160722
BitDefender		20160722
Bkav		20160722
CAT-QuickHeal		20160721
ClamAV		20160722
CMC		20160715
Comodo		20160722
Cyren		20160722
DrWeb		20160722
Emsisoft		20160722
ESET-NOD32		20160722
F-Prot		20160722
F-Secure		20160722
Fortinet		20160722
GData		20160722
Ikarus		20160722
Jiangmin		20160722
K7AntiVirus		20160722
K7GW		20160722
Kaspersky		20160722
Kingsoft		20160722
Malwarebytes		20160722
McAfee		20160721
McAfee-GW-Edition		20160722
Microsoft		20160722
eScan		20160722
NANO-Antivirus		20160722
nProtect		20160722
Panda		20160721
Qihoo-360		20160722
Sophos AV		20160722
SUPERAntiSpyware		20160722
Symantec		20160722
Tencent		20160722
TheHacker		20160720
TotalDefense		20160722
TrendMicro		20160722
TrendMicro-HouseCall		20160722
VBA32		20160722
VIPRE		20160722
ViRobot		20160722
Yandex		20160721
Zillya		20160722
Zoner		20160722

The file being studied is Android related! APK Android file more specifically. The application's main package name is com.FDGEntertainment.redball4.gp. The internal version number of the application is 1236. The displayed version string of the application is 1.2.36. The minimum Android API level for the application to run (MinSDKVersion) is 10. The target Android API level for the application to run (TargetSDKVersion) is 22.

Required permissions

android.permission.ACCESS_WIFI_STATE (view Wi-Fi status)

android.permission.ACCESS_COARSE_LOCATION (coarse (network-based) location)

android.permission.WAKE_LOCK (prevent phone from sleeping)

android.permission.ACCESS_NETWORK_STATE (view network status)

android.permission.INTERNET (full Internet access)

com.android.vending.CHECK_LICENSE (Unknown permission from android reference)

android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)

com.android.vending.BILLING (Unknown permission from android reference)

Activities

com.FDGEntertainment.redball4.gp.RedBall4

com.FDGEntertainment.redball4.gp.Cocos2dxVideo

com.chartboost.sdk.CBImpressionActivity

com.vungle.publisher.FullScreenAdActivity

com.flurry.android.FlurryFullscreenTakeoverActivity

com.google.android.gms.ads.AdActivity

com.jirbo.adcolony.AdColonyOverlay

com.jirbo.adcolony.AdColonyFullscreen

com.jirbo.adcolony.AdColonyBrowser

com.facebook.ads.InterstitialAdActivity

com.heyzap.sdk.ads.HeyzapInterstitialActivity

com.heyzap.sdk.ads.HeyzapVideoActivity

com.heyzap.sdk.ads.HeyzapProxyActivity

com.heyzap.sdk.ads.VASTActivity

com.heyzap.sdk.ads.MediationTestActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.soomla.store.billing.google.GooglePlayIabService$IabActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.facebook.FacebookActivity

Services

com.vungle.publisher.VungleService

com.FDGEntertainment.redball4.gp.MyDownloaderService

Receivers

com.heyzap.sdk.ads.PackageAddedReceiver

com.FDGEntertainment.redball4.gp.LocalNotificationReceiver

com.google.ads.conversiontracking.InstallReceiver

com.FDGEntertainment.redball4.gp.MyAlarmReceiver

Providers

com.FDGEntertainment.redball4.gp.ZipFileContentProvider

Activity-related intent filters

com.FDGEntertainment.redball4.gp.RedBall4
actions: android.intent.action.MAIN
categories: android.intent.category.LAUNCHER, android.intent.category.LEANBACK_LAUNCHER

Receiver-related intent filters

com.heyzap.sdk.ads.PackageAddedReceiver
actions: android.intent.action.PACKAGE_ADDED

com.google.ads.conversiontracking.InstallReceiver
actions: com.android.vending.INSTALL_REFERRER

Application certificate information

Subject
    DN: C:DE, CN:FDG Entertainment, L:Munich, O:FDG Entertainment, ST:Bavaria, OU:FDG Entertainment
    C: DE
    CN: FDG Entertainment
    L: Munich
    O: FDG Entertainment
    ST: Bavaria
    OU: FDG Entertainment
validto: 04:38 PM 08/03/2285
serialnumber: 4e9efd19
thumbprint: 27ddba65e41c6f94eb4d744ced50a8cb6e15cd66
validfrom: 04:38 PM 10/19/2011
Issuer
    DN: C:DE, CN:FDG Entertainment, L:Munich, O:FDG Entertainment, ST:Bavaria, OU:FDG Entertainment
    C: DE
    CN: FDG Entertainment
    L: Munich
    O: FDG Entertainment
    ST: Bavaria
    OU: FDG Entertainment

Interesting strings

http://
http://ads.heyzap.com/in_game_api/ads
http://api.vungle.com/api/v4/
http://data.flurry.com/aap.do
http://hostname/
http://hostname/?
http://market.android.com/
http://play.google.com/store/apps/details?id=com.facebook.orca
http://plus.google.com/
http://redirect.fdg-entertainment.com/redirect/redball4_merch.html
http://redirect.fdg-entertainment.com/redirect/redball4_redirect.php
http://www.google-analytics.com
http://www.google.com
http://www.w3.org/2001/XMLSchema
https://
https://%s%s
https://.facebook.com
https://accounts.google.com
https://accounts.google.com/o/oauth2/token
https://ad6.%s.liverail.com/
https://ad6.liverail.com/
https://androidads23.adcolony.com/configure
https://csi.gstatic.com/csi
https://data.flurry.com/aap.do
https://data.flurry.com/pcr.do
https://facebook.com
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html
https://graph-video.%s
https://graph.%s
https://graph.%s.facebook.com/network_ads_common/
https://graph.facebook.com/network_ads_common/
https://highway2.soom.la
https://impact.applifier.com/mobile/campaigns
https://impact.staging.applifier.com/mobile/campaigns
https://ingest.vungle.com/
https://live.chartboost.com
https://med.heyzap.com/click
https://med.heyzap.com/complete
https://med.heyzap.com/fetch
https://med.heyzap.com/impression
https://med.heyzap.com/info
https://med.heyzap.com/mediate
https://med.heyzap.com/start
https://proton.flurry.com/sdk/v1/config
https://pubads.g.doubleclick.net/activity;dc_iu=
https://pubads.g.doubleclick.net/activity;xsp=
https://services.soom.la
https://ssl.google-analytics.com
https://twitter.com/FDG_Games
https://verify.soom.la/verify_android
https://www.%s.facebook.com
https://www.facebook.com
https://www.facebook.com/
https://www.facebook.com/FDGEntertainment
https://www.googleadservices.com/pagead/conversion/
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.apps
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googleapis.com/auth/plus.moments.write
https://www.vungle.com/privacy/
https://x.heyzap.com/_/0/ad

The file being studied is a compressed stream! Details about the compressed contents follow.

Interesting properties

The file under inspection contains at least one ELF file.

Contained files

This file is a compressed stream containing 677 files.

[+] AndroidManifest.xml XML 11808 Bytes

[+] assets/Fonts/FontsMedium/titles.fnt unknown 14463 Bytes

[+] assets/Graphics/GraphicsMedium/Achievements.plist XML 33448 Bytes

[+] assets/Graphics/GraphicsMedium/Achievements.png PNG 296452 Bytes

[+] assets/Graphics/GraphicsMedium/AlienBox.plist XML 38407 Bytes

[+] assets/Graphics/GraphicsMedium/AlienBox.png PNG 105774 Bytes

[+] assets/Graphics/GraphicsMedium/Back_01.plist XML 1733 Bytes

[+] assets/Graphics/GraphicsMedium/Back_01.png PNG 131335 Bytes

[+] assets/Graphics/GraphicsMedium/Back_02.png PNG 378659 Bytes

[+] assets/Graphics/GraphicsMedium/Back_03.png PNG 138546 Bytes

Compression metadata

Contained files

677

Uncompressed size

62421760

Highest datetime

2016-06-07 16:41:22

Lowest datetime

2014-10-01 22:51:06

Contained files by extension

png

357

xml

ogg

jar

fnt

ttf

dex

RSA

Contained files by type

PNG

357

XML

148

unknown

OGG

ZIP

ELF

DEX

File identification

MD5 a53d8cae5cebc77c990620f131f38288

SHA1 66b6dcc89ed103d577d3009938bf7c79346139b9

SHA256 39669e104a79421284261ef61fb3117892a0b3fd85be5ca6198df0f51cec34d8

ssdeep

786432:wCcwrFV1BKmDs12zXPsSiN2frE2IhQ8vTv9Rb7aGJ38:w/a/1PooTP7iNguND9RXR38

File size 47.0 MB ( 49247613 bytes )

File type Android

Magic literal

Zip archive data, at least v2.0 to extract

TrID	Android Package (72.9%) Java Archive (20.1%) ZIP compressed archive (5.5%) PrintFox/Pagefox bitmap (var. P) (1.3%)

VirusTotal metadata

First submission 2016-06-08 17:56:01 UTC ( 2 years, 8 months ago )

Last submission 2018-11-03 03:33:21 UTC ( 3 months, 2 weeks ago )

File names

red-ball-4-1.2.36.apk
com.FDGEntertainment.redball4.gp.apk
com.FDGEntertainment.redball4.gp.apk
com.FDGEntertainment.redball4.gp-2.apk
red-ball-4.apk
611515_b2a20e_com.fdgentertainment.redball4.gp-1236.apk

Permissions checked

android.permission.INTERNET:com.FDGEntertainment.redball4.gp

android.permission.ACCESS_NETWORK_STATE:com.FDGEntertainment.redball4.gp

Started receivers

android.net.conn.CONNECTIVITY_CHANGE

android.intent.action.BATTERY_CHANGED

Opened files

/data/data/com.FDGEntertainment.redball4.gp/files

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost

/mnt/sdcard/.chartboost

/mnt/sdcard

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurrydatasenderblock.b46f3ca2-82c8-4540-a170-22ee863e06e5

/data/data/com.FDGEntertainment.redball4.gp/files/.YFlurrySenderIndex.info.AnalyticsData_XM6KPPYC54G3FFV8PZ57_226

/data/data/com.FDGEntertainment.redball4.gp/files/.YFlurrySenderIndex.info.AnalyticsMain

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/templates

/mnt/sdcard/.chartboost/templates

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/videos

/mnt/sdcard/.chartboost/videos

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/css

/mnt/sdcard/.chartboost/css

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/js

/mnt/sdcard/.chartboost/js

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/html

/mnt/sdcard/.chartboost/html

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/images

/mnt/sdcard/.chartboost/images

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/requests

/system

/data/data/com.FDGEntertainment.redball4.gp/files/.flurryinstallreceiver.

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryprotonconfig.-5aa92899a66c98ce

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryprotonreport.-5aa92899a66c98ce

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryanongoingpulsecallbackreporter

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryreport.-5aa92899a66c98ce

Accessed files

/data/data/com.FDGEntertainment.redball4.gp/files

/data/data/com.FDGEntertainment.redball4.gp/files/.FlurrySenderIndex.info.AnalyticsMain

/data/data/com.FDGEntertainment.redball4.gp/files/.YFlurrySenderIndex.info.AnalyticsMain

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryprotonconfig.-5aa92899a66c98ce

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryprotonreport.-5aa92899a66c98ce

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryanongoingpulsecallbackreporter

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurryreport.-5aa92899a66c98ce

/data/data/com.FDGEntertainment.redball4.gp/files/.flurryagent.-524ab433

/data/data/com.FDGEntertainment.redball4.gp/files/.flurryinstallreceiver.

/data/data/com.FDGEntertainment.redball4.gp/files/.yflurrydatasenderblock.b46f3ca2-82c8-4540-a170-22ee863e06e5

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost

/mnt/sdcard/.chartboost

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/templates

/mnt/sdcard/.chartboost/templates

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/videos

/mnt/sdcard/.chartboost/videos

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/css

/mnt/sdcard/.chartboost/css

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/js

/mnt/sdcard/.chartboost/js

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/html

/mnt/sdcard/.chartboost/html

/data/data/com.FDGEntertainment.redball4.gp/cache/.chartboost/images

/mnt/sdcard/.chartboost/images

/mnt/sdcard/.chartboost/asset_log

/system/app/Superuser.apk

/sbin/su

/system/bin/su

/system/xbin/su

/mnt/sdcard/Android/obb/com.FDGEntertainment.redball4.gp

Interesting calls

Calls APIs that provide access to information about the telephony services on the device. Applications can use such methods to determine telephony services and states, as well as to access some types of subscriber information.

Accessed URIs

https://live.chartboost.com/api/config

https://data.flurry.com/aap.do

https://live.chartboost.com/more/get

SHA256:	39669e104a79421284261ef61fb3117892a0b3fd85be5ca6198df0f51cec34d8
File name:	611515_b2a20e_com.fdgentertainment.redball4.gp-1236.apk
Detection ratio:	0 / 49
Analysis date:	2016-07-22 13:12:42 UTC ( 2 years, 7 months ago ) View latest

Ciphered bundle

Required permissions

Activities

Services

Receivers

Providers

Activity-related intent filters

Receiver-related intent filters

Application certificate information

Interesting strings

Interesting properties

Contained files

Compression metadata

Contained files by extension

Contained files by type

File identification

VirusTotal metadata

Leave your comment...

Permissions checked

Started receivers

Opened files

Accessed files

Interesting calls

Accessed URIs

Recover your password

Join VirusTotal Community

Sign in