
Catch the Candy: Holiday Time
Help Lilac Fluffy to collect all the candy in this arcade-puzzle game!
HeroCraft Ltd · com.herocraft.game.freemium.catchthecandy
- Signed differently from the Google Play version Details
At a glance
- Latest version
- v2.0.45 (20045)
- Updated
- Apr 21, 2026 (6 months ago)
- APK size
- 44.4 MB
- Requires
- Android 8.0+ (API 26)
- CPU support
- ARM 32-bit, ARM 64-bit
- Category
- Arcade (game)
- Listed since
- Jul 9, 2021 (at least)
- Permissions
- 16
- Website
- herocraft.com
- Developer contact
- [email protected]
- Privacy
- Developer's privacy policy
About this APK
Catch the Candy: Holiday Time is a game by HeroCraft Ltd in the Arcade category, listed since at least July 2021. It includes native code for ARM 32-bit and ARM 64-bit, so it runs on practically every phone.
Since version 2.0.43, the APK shrank from 54.2 MB to 44.4 MB. It asks for 16 permissions, none of them sensitive. It asks for the same permissions as version 2.0.44. The game offers in-app purchases through Google Play and can read the advertising ID that ad and analytics services use.
What's new in v2.0.45
Description
From the listing uploaded by “superpocket”.
Version history
3 versions are listed, going back to v2.0.43. Since v2.0.44 it requires Android 8.0+.
Security & authenticity
Signing certificate
- Certificate issued to “zph-mph” Not the developer's name (“HeroCraft Ltd”). Names in certificates can't be verified, so this alone proves nothing.
- Signed differently from the Google Play version v2.0.44 and v2.0.43, which match Google Play, use another certificate. Android normally won't update an installed Play Store copy with this file. v2.0.44 · v2.0.43
Store checks and file details
- Developer signature under review Apr 21, 2026
- Signed byCN=Jx Clarynx, O=zph-mph, OU=anon.org, L=Caraga, ST=Surigao Del Norte, C=8609
- Signing certificate (SHA-1)7D:64:F9:C2:53:C7:EF:35:A0:72:0F:6F:8A:80:2B:D4:B9:20:AA:3A
- File MD515289e4da872dd487b88c7502bcf374a
- Uploaded by “superpocket” Silver tier · 5,272 followers · uploading since 2016
Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures (2 other versions compared). AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.
Permissions (16)
Catch the Candy: Holiday Time requests 16 permissions, none of them sensitive.
- Access adservices ad id android.permission.ACCESS_ADSERVICES_AD_ID
- Access adservices attribution android.permission.ACCESS_ADSERVICES_ATTRIBUTION
- Access adservices topics android.permission.ACCESS_ADSERVICES_TOPICS
- Advertising ID com.google.android.gms.permission.AD_ID
- Attest (custom) com.amazon.privacypass.ATTEST
- Control vibration android.permission.VIBRATE
- Full (custom) archos.permission.FULLSCREEN.FULL
- Full network access android.permission.INTERNET
- Google Play license check com.android.vending.CHECK_LICENSE
- In-app purchases (Google Play Billing) com.android.vending.BILLING
- Internal broadcast protection (app-defined) com.herocraft.game.freemium.catchthecandy.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- Prevent the device from sleeping android.permission.WAKE_LOCK
- Run foreground services android.permission.FOREGROUND_SERVICE
- Set orientation android.permission.SET_ORIENTATION
- View Wi-Fi connections android.permission.ACCESS_WIFI_STATE
- View network connections android.permission.ACCESS_NETWORK_STATE
Required hardware & features
- Basic touch input android.hardware.faketouch
- Landscape screen android.hardware.screen.landscape
- Wi-Fi android.hardware.wifi
Catch the Candy: Holiday Time APK: questions and answers
Can I install this APK over the version I already have?
Probably not if you installed Catch the Candy: Holiday Time from Google Play: this file is signed with a different certificate, and Android normally refuses such an update. You would have to uninstall your copy first, which deletes its data unless it is backed up.
Is Catch the Candy: Holiday Time free?
The APK is free to download, but the game offers in-app purchases through Google Play.
Is the Catch the Candy: Holiday Time APK safe?
No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. It is signed with a different certificate than the Google Play version. After downloading, check that the file's MD5 is 15289e4da872dd487b88c7502bcf374a.