Malware Analysis Report

2024-12-06 02:38

Sample ID 240220-shaj5aah26
Target Clash royale.apk
SHA256 eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
Tags
evasion
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

SHA256

eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c

Threat Level: Shows suspicious behavior

The file Clash royale.apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

evasion

Declares broadcast receivers with permission to handle system events

Requests dangerous framework permissions

Acquires the wake lock

Checks the presence of a debugger

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-02-20 15:07

Signatures

Declares broadcast receivers with permission to handle system events

Description Indicator Process Target
Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-20 15:07

Reported

2024-02-20 15:09

Platform

android-x86-arm-20231215-en

Max time kernel

13s

Max time network

130s

Command Line

com.ClashRoyale

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks the presence of a debugger

evasion

Processes

com.ClashRoyale

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp

Files

/data/data/com.ClashRoyale/databases/core.db

MD5 c7b5801f4970b944a556dda8d75097f6
SHA1 ab62d5c3d60940ac286f019fecd21f822af864f2
SHA256 cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
SHA512 6ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.cls_temp

MD5 f8a559b6977b7fb6c4fde129f8c5db93
SHA1 6c6fdba649588c304c3536a7dc5869475b85d39a
SHA256 f08c166f4d7eb49f7449eb99967443abbca3b340c44016bab8aae143474a1b3f
SHA512 655871b7f420fad7f4405fae5552a853efa82226ae5b76224876847147f9d80639f576a0af341c1f25a95b9b1c50c2a5a332ec9d199cfd768aacfaa27c11e45d

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.json

MD5 1d2a913c0d854a35aaf0910640b4a8ff
SHA1 62e739fc8d7d94597f2e45112465cd3789b09255
SHA256 344fe657af118509f16a3dce25d3e565e9dc6bf8e11c50492ab2c435406d2c0f
SHA512 6121e69bfe38a91972fd61106b39b12f80f2f907ef5824152f8ef47619465088b33c0b35634824091cf40d12b37b61c3a8d0016ba43e426a32427bee6e948b3d

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 a526106df3743e6d7e051a2579a83491
SHA1 96f9d7dda67a8db7185c71fcae37aef5a533673f
SHA256 64ad85035aafe2bc9b43eda4ab32d583eceb56a13de8b78944f7329dbe63439f
SHA512 cc663c6d75043c6ad89424d7ad9f19398cc125d3efd6b7bbbb39ecac864e2b98c20d611a225554bf54bd1a850d373932f0a68f4ed86b997589e2f5bdf26aa880

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionApp.json

MD5 d4e290246f137441516354835a574f82
SHA1 130abee71301160abf0a2b03a745272f21cc80a2
SHA256 06a07d342d504b64b85355f9989f4f0487685d42aa27cfce6354175b50a09b41
SHA512 5ce9680c39486e11a83a68cadf62673f17ab25b575525de563e3dc08bd7b7b10d7dcd43ac5ebd0076e87d23535200ef7173c2d264d88a96084b7183d38cc62e9

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.json

MD5 93023624eb8dff5c20050da136aaae0a
SHA1 acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256 968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512 bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.cls_temp

MD5 630aaf4621d940e95530e8a8b0d39283
SHA1 d06c5d18de58b6abb5890a83b6fb3c3aa4a2139e
SHA256 2f752007f6c33aaba282800edfe3d52da2ea954e3eceddf08efb0bfdc989cb93
SHA512 98c301f0188ced6036a863ba790e03ba22f88ec55a884fdf808711147228e97ee0571abad094ad68d758b2482db6ee3f2950d43d56c875bfeda7f0a58cd1a86a

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.json

MD5 8c1412ceb8c8543650bed0f85dcf4c99
SHA1 e2ea16a5e4f49d8f4fc661f127bc8ce6f5d2e485
SHA256 b33eddddb3bd84b5d5975b074dd2fccb335c715b8506862cfaf451ec1f8398bc
SHA512 8d067a69ce521a0e004215bf6b746279e4c32e0bb8ba90de9e3e7e519e421997aafe1a3b8d636cdd4da578ee3c538cb1b84fa60c368c0dac9307d4064fd33687

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 5a6a652b10b421c56a44ada5acd23686
SHA1 8240cb6ad792c04e58f850693989b2e2ccfc7e9e
SHA256 cfa5f20f23c823b0e321258366433473d4f1aa96d55fbdf0b70217a0c4e2b6b7
SHA512 ad71dbbdfaacbda7f742cf0d7a5943807f432290399f229e8266dd57c3d89860c0b0964c040ced2081b43d55077f4fcfad7f94c26c8a0ef1f8953bce2f214608

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

MD5 7835c5864e4cfc833beb3eb4b0b2d9cc
SHA1 36b788eb49a390ded919ce13cd8c85c5e1b9b150
SHA256 6c2c638fea6ebf430234ffce674231e3fd44a5826ff32687b8a7604aa336bd58
SHA512 8ee3b3dc3c48313820dc70790e05720984a7554ccaa8024406fd2316a814f221a327587346a7da19fde3393ff571345f3a43943ee1b1bfe7a0e14bbe6e766edf

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

MD5 4cff43626520aaacdf623fa3cecb48e4
SHA1 81422cc5a5e97160e46cf3080566747cac4ff9ef
SHA256 e0727fffaff4ed1c5b338299f90f3decf92deb20675f564b00bd7711950d6cdb
SHA512 f43bb7e03ff6e8c321fa10938beaf179bb2b7bf5674f37d38e8357062e5fd03de83bce528045d85e9dfed17aaa428e27f54764fb257f1b93c60af1f487958f55

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db

MD5 41172d46ff8888be4cfc7da9dc7d75bd
SHA1 83758a810bc86c52f60c838acebb9bd0c541be19
SHA256 7c27b82cb8af372763b0699274222450a8311bcf96cd8e876b717d4ead2a4c9c
SHA512 6d2556fbd104bc18366276346a8fa3d36992b5a7e98b2dc43683912ab4322dfda0ddf76c43b20710f8b5a8018655e731e5a52b2e573fd62f0ba0767b868c3972

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

MD5 b4143259509df9d890623557a5edab17
SHA1 a736b5091b8e5e82b0a5fe067aca8e2ec8ec4de4
SHA256 71aedd1707a91b357847554b1e8de020c7c1deee8a4a3685ef49f72025f41643
SHA512 3ef0fe0d11f81e4415db31ee4d0cd102d369a775ce83f78d53e330ef42ab8fbf2b575f91e1c8e191323a366c8f3d23ab041cd44ca171a7e5a5f9e096c468a4cd

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db

MD5 613ba1eb1a7260a69d59c043c000d228
SHA1 d56b9049937cba468c298cad846dd6eaa4f4e914
SHA256 4398d962540f60cef530574f2dce870687bd6546d6062dc76b7442375f0fe62e
SHA512 dbb5113440cf1efd7f8b18a54bda3cef92b8b3f8f2fc1641896dbb6cb0834655dc3da81d9408d576d1734b89527d69d04f8324fde5bab1b84b9e45c87149d9a9

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

MD5 c8b73b27a83d6c6628e371696c5d941d
SHA1 9b3d7c307f566328b1e9d72f56029cbcb18d1e73
SHA256 f68058bd097296a22c32674e8dd65e71c028279a69a8e2978e58feb18e0ded23
SHA512 33b859e75403defbd3115ef6596ff754e37462bd99e2e040afb5814691ce0a6d1e778752879092bf2122b9f9d033d3b6146be498fa9c16e45053104b88d791ef

Analysis: behavioral2

Detonation Overview

Submitted

2024-02-20 15:07

Reported

2024-02-20 15:09

Platform

android-x64-20231215-en

Max time kernel

77s

Max time network

157s

Command Line

com.ClashRoyale

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks the presence of a debugger

evasion

Processes

com.ClashRoyale

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 172.217.16.238:443 tcp
GB 172.217.169.66:443 tcp
GB 216.58.212.195:443 tcp
GB 216.58.212.195:443 tcp
GB 216.58.212.195:443 tcp
GB 172.217.16.238:443 tcp
BE 64.233.166.188:5228 tcp
GB 216.58.212.228:443 tcp
US 1.1.1.1:53 accounts.google.com udp
BE 142.251.173.84:443 accounts.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 173.194.76.84:443 accounts.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.46:443 android.apis.google.com tcp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.213.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
US 1.1.1.1:53 omxzupnrjarga udp
US 1.1.1.1:53 diuylsg udp
US 1.1.1.1:53 sojbnwwsonoo udp
US 1.1.1.1:53 g.tenor.com udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 mdh-pa.googleapis.com udp
GB 142.250.180.10:443 mdh-pa.googleapis.com tcp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 216.58.204.74:443 safebrowsing.googleapis.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp

Files

/data/data/com.ClashRoyale/databases/core.db

MD5 c7b5801f4970b944a556dda8d75097f6
SHA1 ab62d5c3d60940ac286f019fecd21f822af864f2
SHA256 cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
SHA512 6ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 6214f8879f5d51dd3e68e6bfeb2f137f
SHA1 bf59c752b3382909eaf7291c33702d9e09d7cc57
SHA256 0afda0a542007e339f057d35c0eb2458d233be2f3033ef5108800de90ed48591
SHA512 0a817b09d9347730529cb81a47b38dc840b4325efbc3fcdf7302c53545df94b15d7b3170eaa67fcbe75513e26991656e3243ee528bd90975cd68b7ea8a7d3186

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db

MD5 188c0542bc062e48b614e5ca8c1081af
SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 5f919889e81626453942a5138b44b499
SHA1 b7f38c9a6b8f3fd416aa262be2e071fabb155308
SHA256 e0fd0415dc913793858d4ecd81afc0b1a88ca02b6cf37f5951eed27fb705996c
SHA512 f9beb3a4c44f4ecd5fe2f925c1563213e0a93f0bcc2624dd2f7a887b093a73fb8afee1c5097fce39152bc10908938916340dec8d56d51c56eff06428992bbb25

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 38a9d1bcf524fb2911af5f7b3c8b3bc7
SHA1 f81dba5426d2705d4e4e2272ac33144b62cbdc70
SHA256 246fb5d47bf25fe1856c517ab12b1c651ebcf55905519f72032531aa93cec51c
SHA512 a2a9bf6eaed53dbf986a87309404d382098f510102545d56d46d14687475941b25294205464f1bfc09b06d6def655692427fd2d0749343e6a8430be4b72818e6

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 45d8a195465d81a18a209a95b082eeaa
SHA1 1024c5007226810458e570a42dc254a445a1e116
SHA256 5f3fe4a3535f9a7e74045fac73a79fcee3103781e7bb3b5a799ca2fd91570117
SHA512 43c3f67c733c12a042a060d1fc9f7eadc4c353a06e331a5ade20265a5fba7876a2b84fc430a05681b819aec351f5ec260388c9c5f30a258a681d887ae48d26e5

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 726bb26408294b4dbee00fe216af05b7
SHA1 41b94cd7ddfd73692c16447200c35ea6990bd4dd
SHA256 2aa8647b47b4d5a6855c0d09dca446b4a24ddbcfab1df26345edd80350bdbb07
SHA512 616cdf6af0ddfb5c2a9c2fd75663a62ee420418fc680c3bf4d50bd22fdf51db38e09a567a02469f5ff750b49130c3772e1d8ff5604b8ddd0df1c3191c8b40da4

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp

MD5 ef8f9d5e750d303bf283c8939bd652a7
SHA1 2ca42f4e75b3b2aeca250ecaa57b5966872fc587
SHA256 347b03773b4452130bbaf72cac4f9cc2f81d225d3375f7a78601975e6b5537e5
SHA512 e05149e4f86630a185f748849b509ba22dcda853b221d27556145547b54b43f9d9e623b22ab6ce0c53dbbc2def6b92cce248b21bfdb911999481e86f48113da0

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json

MD5 16a9e5c2f5e317ae09a0a3bb94b9791b
SHA1 ecafff484f7507b3fff80ea53ea7261eec914480
SHA256 3a8c495c7739c34365d66cf1077a4ef1add2271139eb566aa8b299dafbc3bd4b
SHA512 f026900f04ed571ea1bc00ab63c49cc1fbc8d3c890ccc2b97f72489673ed51aa152074ced26808cfd599595fa37d124ba0b8bc27936a5e9679df9b9522769c72

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 4ed1f076bb1d3503a1fddb86da892e86
SHA1 7882bd0cd42ac87fd5caf358d6d1a549b2ea1172
SHA256 cbb73fa7d82b0fedfbff0e5201edd4d5177b0f03560a281282063a5ad2e828ea
SHA512 5e60b3bbed85665fcf1af01d86779d03a629f0ceb86c3cc65fb5c501f93577d984717d413ed242bc4a1a654a47005399cb96029c5bc2cb9fddea01dbe75bad8c

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap

MD5 b1e397645d7aa26e7c77eb85f4fde896
SHA1 47370de0635eb250cbaccf3f0d63d292371e3ede
SHA256 240b63b2816d1e6b4605ee540827733a8ed3417c5403a4d0272712a92cd003fe
SHA512 960866b337323c4bf9ae982727c92fc4386d18c73b2821041a41c22dff4f46679d936091529a4a903e61b8bbed347ff7d79be9992544b9802a83fa30fc494ae8

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp

MD5 4e31292a42c836257a990dacfef86e98
SHA1 1462afefecc8cf5912f7d92cef438d54298840f3
SHA256 bf739376e4921445c16043f1b6776480bfbceb1f1575aed3b15dd4d4d0cac7b6
SHA512 207969f3bc3776d4f87e37f4ee878140864d7284a21e07bab917d47c41be99d3d20892165bac6ed789eb6f269e450a276caf76e1fb9944fd03e7611077b80817

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json

MD5 46ef494728046f6a9885b3ef8b56d2c7
SHA1 b989c2dc9a11f46547c40699dc47d3360b96b607
SHA256 a586e78a0c40ba3b3f9e3ab8887e43a8282c53c327a39b9d6d21535a2876a271
SHA512 8fe395f4de5c21fbcd5be6bf45476ddf3d1fd5d5e1d6d7c53e5724837c6d2d69dda9c2a7715b35b57cb4cc5f3b22f1487f6f68fb6ceb695662614b45e07b76d0

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 d2ee3d2dd8d2bff7955555f8879d1334
SHA1 3bc372f64eedd777487ebfca799d3e9140ccdc3e
SHA256 24eb568b5298ab09c00f784584e799f518ba25de8afb8ceef0ef855e7be8ee3d
SHA512 3c99ffe5ec5b844ff418d58f723b14323e4c1aca127058cb15789662e11d68318b9fb5cc4071e93113279413c5ab35fbe2209f8aa854745b4a9a3f638ac9b493

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp

MD5 2566d27ce8c28d8961f082c375d7535e
SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json

MD5 5caea4b68c57072f7f52a5a41720566c
SHA1 4d9712f1702c7238949da43f7d8ae6efb233a666
SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512 fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp

MD5 2390c1f21db00b20c07107e3ec7275fe
SHA1 e663a646460acc071aebee942cc1776c23d77655
SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
SHA512 43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json

MD5 afa07370d07ed0a8ac9554ee7001bb72
SHA1 d1e9de22fda1295087525ff3a377f7d7dd410ac7
SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
SHA512 a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

MD5 6913bd48cb2f9c0e5fd51b472680ae9c
SHA1 e1c29bb73f94f30ddf02d3cfa80c786e97840d8f
SHA256 ea6d8d0cf13aa30a5d489b9a92110556023c09c231724e81493d5cb7f99c53ac
SHA512 b3f03eb8d9a6a989242712fed94424ea56072c97186ab83c81de77d0c8d2b388fb7fd15eb5f8ccc507cd1ab93e686a78081242dd582d88ad13321064284e3589

/data/data/com.ClashRoyale/databases/google_app_measurement_local.db

MD5 14f58c5e55247e994d13ab8fdaaf26d3
SHA1 d56987d48ff3e134337281c00912a92d5d6e2030
SHA256 7b55f327a56090b3f4bbd2c02de12c564a30aa9dc8703ed3139fd7544beb5e00
SHA512 9c2b2306f55f49b070c8447d8c59801a126a71cada2df98e3892218c389763b7eaadbd84c2d22bbc54a9c91bbb26b437106a293c2ba3f2beb2e27a6bfa59a681