Malware Analysis Report

2024-12-08 03:07

Sample ID 240510-xctg9sbf3z
Target 307fca122cf9c633daf3743ab381dee0_JaffaCakes118
SHA256 c4e08640eaa5c174828447d3b66d1216c2d397671695a9fa75b9d4a5f0474067
Tags
discovery evasion persistence privateloader
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

c4e08640eaa5c174828447d3b66d1216c2d397671695a9fa75b9d4a5f0474067

Threat Level: Known bad

The file 307fca122cf9c633daf3743ab381dee0_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

discovery evasion persistence privateloader

Privateloader family

Checks Qemu related system properties.

Checks CPU information

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Reads information about phone network operator.

Requests dangerous framework permissions

Checks if the internet connection is available

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-10 18:43

Signatures

Privateloader family

privateloader

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-10 18:42

Reported

2024-05-10 18:46

Platform

android-x86-arm-20240506-en

Max time kernel

149s

Max time network

146s

Command Line

com.whiteroom.HoleFeed

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Processes

com.whiteroom.HoleFeed

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.42:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 graph.facebook.com udp
GB 157.240.214.1:443 graph.facebook.com tcp
GB 157.240.214.1:443 graph.facebook.com tcp
GB 157.240.214.1:443 graph.facebook.com tcp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.8:443 app.adjust.com tcp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 rubick.gameanalytics.com udp
US 1.1.1.1:53 api.gameanalytics.com udp
US 44.205.236.114:443 api.gameanalytics.com tcp
US 1.1.1.1:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp

Files

/data/data/com.whiteroom.HoleFeed/files/AdjustIoPackageQueue

MD5 68a9c41eb13adf4be0ab6463455ff10c
SHA1 b19cc51d05f6184489bab4af572e813ee7674302
SHA256 b807de38b6cecc4e73d30051a66161c9794a1e39540034c5997bc5905b6e6513
SHA512 958688a773aabe9615de57f22a06e617e504c098e48638a3026b90db94f2b3f169449aa049cc782c65d05ce61a2c8553003dccf4f7cddc3fbcb6d7c9fde88655

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 52f6c8e10075834bba1b47610d477589
SHA1 811e7ad62454c8ef98a188986a9691081832a599
SHA256 7e5b20b7ab54ce87f17bd6c05534e847dd8ac5bf63df8d97ff34967bba1881a9
SHA512 f25fb5f862d297625415fcbf53c78e665e0a4f24a6994f7208d8089fc983b0318a81649cfd0d497083024322731143312a1f0ab7ddb027a07a4c47a45eac9def

/data/data/com.whiteroom.HoleFeed/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 586f3aad230c6ae0901a822f79728f18
SHA1 b5c34062d7a5b5e79743dbcc223f7a86b48bdb8f
SHA256 39659bf86725e58572f308da78143dd261cc48cec09a62c0ff7ee9f0b9300c83
SHA512 587e9155e963934b6829ddc4f0a50380e8eade60d1aec5eecf11a4a1eb0e7e52d7c90c1796709d36b9955d71722188971ad52e8c15b455d948c343ccde51ecf5

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 5392c2c351cc3129897eefa3ab9152af
SHA1 d5d5d236bb37b799fc0429e839d60eb09fd35a03
SHA256 59f56c9ab44416e8ef9252edfd14fa8147079fcb824b2b04effdcb3f84958d8b
SHA512 c661d298d5518284c59e03857ae431f14721f855ff2fd8aa9dfca18fbaf2441317dbcd6164814d2d4ef5457391f4b3cddeb879c13b70304468d03922e411bcd7

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-wal

MD5 c130ce71c45e0b79b16b327260fa0b2c
SHA1 7e7929f75c0bd99bd20435d306f9dce60eb89a6b
SHA256 42585c3ddb51db65396ad2fcad3f8693f40b3ee52376d68cd15cd9ad13d29a01
SHA512 221ea66dbef23714c9af5c2a2b1faaa3208bc4da677a5fd6fc0a6e5b2f46585442add0f741525be99eca8ae8ba20e1a885e446baa361dedc85b0987097161192

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200000.45651000/s

MD5 9f1a8ebd7a6d1053a4a8c031f4e5fe80
SHA1 4748a5d8094c675b89073792cbd3a478db9b9ccd
SHA256 45fa71b0f252ba0ad8f57ff637c9695b9d60bc253470f760bf451a8ce483931b
SHA512 07a7f80b0477057276467032f0f08f11f1fa556390332448a2fda2888dce51a05042d4d2f8a5c4cfba509954b515e7c63480f57ae3b5f6793cfb713712bd46dd

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200000.45651000/g

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200000.45651000/c

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200000.45651000/e

MD5 b8b759aaab40b4a05cb1ca10c697477c
SHA1 872852c403a2d7bc3ebe2e8fb8eb0cccb115822d
SHA256 6f3a66acc12e14f3200cc9771291dd006123a10dab1e3ce3951f40bf022b8946
SHA512 7f17bac4b3f66ab995ddb7b12116f1dde4593f1d780c588804a4d3f4e6b53083d846c36c3e9a1a73ba43a32c23602f329d7d7e8d930c826b066f93d1c8858f72

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200001.45651000/e

MD5 c170240f3361e92251efb0eb31992412
SHA1 39db6e429c9f24671a1dfb219b4c3ec63b78f03c
SHA256 9af97e31cd7c69dbbb734b4a36f97d766ef284420b4d4aef099b285f9abdf9ca
SHA512 4fcb77104c69a1c953c8a4b455b827d2036cfedb75bb7a9be40e3014524c7a0f5fc39e0cf8438ed6c8c17f7909b928a101b3aeef778eae791718ff091839f136

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/values

MD5 09113f14d8f9f338e7a0efcd61b28c1f
SHA1 7cf34e89d6cb49fe53d605d039d1a9b81250d189
SHA256 32ed8f3e0a73a47cb1b9307015aa6df28d014be6fd00fa9dcbd5e5a941186bf9
SHA512 2f5dd83f30b9f7c41365ef5f41d4147c08cd4b36bd0c1d8aa92a38ced0aa325f4e50907a6ca99094239bab05fdf63580d1c5098d0b2384080107f49f108b0f45

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200002.45651000/e

MD5 085e2f2b853667cefda65fc56e364bd0
SHA1 5218af90c177e64aae5b0b2929b9f0da499d07ce
SHA256 239d5d87d78fc4ee9da7e27a82faddc9ddbaa82ee3442fee426df351ab1d7ac6
SHA512 f13dfebdb0cd6065148979b86a502219b197ecd73faf90db91a686aa196d9d9239e76d99ca5e1d5292ac12f64cd8d7b416f6324a9b8169d97ee0bfbc8cf6a8fa

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536662200002.45651000/e

MD5 999728dd27dd75b6529be93f3cc2bb11
SHA1 2f06b4b5b70fe934a165612af702ae9de5f4f728
SHA256 10e744f94ae9fe9f77cfae945145542dc5b26bffaac6e170613ff34f36cfd1bc
SHA512 97b9b88b50b76ce96e2f426b6a36b002821bc8298bf04ffcfa28c65c54c65b9e3cbe2304b64e41a7b9d97bbe0b3cb6c19b4bd579a55482ca860b5de392994f21

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 5416cfa677fd0a941aacf911af88755f
SHA1 c3bc5338e96eba65818604f9973f8e5526ccba93
SHA256 434579409d78b0806666abdc87bc8aedc788bc06f299c64696b9b408d9c031ab
SHA512 ef7f31b373c9c1536aaed13ffc874998a806364ce5721cfffcf42dbfa76b4f8ff5f90c8191699b0838c8a8bc55fb5db3953ad120c4c07af64656b7c36835749b

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 bac0a4716a7edd873cad95108dc8ad91
SHA1 da93bdc44ff41862d20ead1a37c8b85ab94f109b
SHA256 37785422a3faf9dce6036bd60c5a75f715c11f589ca9583fc6e068213d36495a
SHA512 18d5326e1f4e255f08440815a39a01f9d5f6890d40440c004088667b1a93335f489fd918e3f0293af25420f8aadb9de5fc8f5aebb2b0920f4de19af3d8b3f9cb

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-10 18:42

Reported

2024-05-10 18:45

Platform

android-x64-20240506-en

Max time kernel

147s

Max time network

155s

Command Line

com.whiteroom.HoleFeed

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks Qemu related system properties.

evasion
Description Indicator Process Target
Accessed system property key: ro.kernel.qemu N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Processes

com.whiteroom.HoleFeed

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.10:443 tcp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.8:443 app.adjust.com tcp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 rubick.gameanalytics.com udp
US 1.1.1.1:53 api.gameanalytics.com udp
US 52.20.67.158:443 api.gameanalytics.com tcp
US 1.1.1.1:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
GB 216.58.204.78:443 tcp
GB 216.58.201.98:443 tcp
GB 142.250.187.206:443 tcp

Files

/data/data/com.whiteroom.HoleFeed/files/AdjustIoPackageQueue

MD5 bd6cc7e59a981f7051d20bc604ecd87c
SHA1 c3c1a4e20cbd795a70fb952d50ae3b82a537919a
SHA256 4e6849f8f00b2daaff1c80ed77cf3a46b47eae90c92e798cd234b951fbd26ef7
SHA512 6c45a2a77a71a91ba2bb3295a92ad388c304da92bb4c18f2dfd61dd040e3b1251503f5f1a2e5de3c49a954903863b63207bc9c460da426f707f8a296098c93b5

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 aa519f72713aabac0cb6847d816a370c
SHA1 2cffee0ac659b3e41b8cf906ef650a5aed8e01a0
SHA256 33a3de7aed539e87abe0e99abcc9864a2fbd25ec6676b17a921c5deb7a9b320d
SHA512 2e6e348cd6408ca550d11114b74bf16162be8a1d10ccfe2636d129b004c276bc34e51f43306629782bc9b337732a8e62caa6c7964f99c4290e3fe72c15be38cf

/data/data/com.whiteroom.HoleFeed/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 aebc2c79ec5bf7c76d03f66a0ce6136b
SHA1 d5a35cdabb9312c626d1f175b4775ba4ea3700e7
SHA256 ea987b1342078b0ad8e946744c5cf2c6e837e6907cbdbaf5a2b94dc339d2eeba
SHA512 f6723521278a97a95dd57c92567934f84aa13bde47920c008e16cfb6fc53d100ff90043307a76f7a5252a6f34b4bfc149a9a1d10e0639874f6c0a1655212ff76

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 87d2bc06b864201a4ad9d06cb0d4b229
SHA1 b10a8fc1188a5c06223f175b0c58227c3fcacef9
SHA256 35e1668a9ad319eb752dee158171a0b1e42cb86d60df5fc2ffb5db5670359c13
SHA512 1ee573494cfc07a4bf56e95a232714a6e2e51b317859d7994f13d8de59b9105ba423be6e66e12e18511eb1b84031e6889eed608c354ce7edf3b0506a57daed58

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3

MD5 e977f77ece1f083a0595f591cb59019b
SHA1 6b3b3de7c6b838c5b6c255022acba4b03c4718b9
SHA256 271a6e2db78c7c618722b020cfdd7a5c7e1b48805e25f13f10ce86dca163adea
SHA512 0b9e08ce49eae2b3b6e696917d9dcf4aea4e0836343014839eb5e67a10c705cb31bb328637856af05809b6514d081078ae22df372303e48eb1ff5f324da3ed73

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 324647f2cf83f05233dda7bf78d10d2e
SHA1 829d9b9b096b63aba0e5dd5070ba58ec361f782e
SHA256 7153f86605075c34c9ad26ce2fff416b68d8efa23589c849266ce1971e00f334
SHA512 affbbc58ffd0a155c44b31a91cbed58771ab72b480b14f8106f92d2bdbe91279b75189efd6ef273080b6639a6c894e9881bcf415c5420878735be13487fd6ca4

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 2a026a2bdf8ba4c2fc8291ce51ba89f9
SHA1 b1f0cce12e1d49edea1e24f78a2c0fc3e0cd0890
SHA256 97be623681a76d5b9bc72e16c5e0dc55ccac292bc00a218cfc2c727e247ced54
SHA512 243add79b170f30423e450f9f5245082977ce930f3ffcf9f129f8aa284313fea6f3db2b3a95a40738f3da48dca618c4cc0eb63cd56e291ae27b779dd4e65c88a

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 dbd86e3ee93d4f42a333c5a0e78ef9d4
SHA1 f3625eb3b8ef0db21cfbe4261514c73a07b5d506
SHA256 83f88bde6250f15d218a1f06e0bfc1050b25f4f45b6cf124ec9912dc4edcee5a
SHA512 e89f6516bf569b107e63633ef471402ed0021ab24637939c05054a025c87946a9b681497ea3aac4dd8f14289c2a207b36f14b39a76fa7c5990bec36a305108eb

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 778933d8e8500e20669e19945d00433a
SHA1 533485389075932b648c9d036c1bacbb6082a803
SHA256 b59f4691e28d0c5d155a66f8d4fee6597daba4b02605a935c1c7cd6c0c419f7f
SHA512 c48334a690e5e25830396d5dc1174189032842a890487e90e0c31c89a4d9b273e26f9a95f9c1b4eb5b929479aa4848aaffc003af64f682d4c0d0459a0ace70fc

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/cache/ga.sqlite3-journal

MD5 1e21e9f6f2fbd92b4365565305dfe476
SHA1 7a104b44eee445f1c9c41f54f3b6a8152e7e95f6
SHA256 29951d7738b068a0555e3974b814ebbc48aa81c2ca3c4c0f11d197e98ff63d6b
SHA512 715bf7325d7af465a94427089501faf186967c6b6168e2e2dcccaaf1f8e0e55453b15dbd415694a8fb84f2a492761944e784d5a60732d23c8dff98cda1e47269

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600000.03209703/s

MD5 2b59802a466336ad69325ed49c6a66aa
SHA1 e6392640fbc817146983d79db61e8973b2b011ba
SHA256 8c79ea1f09d28dd828dbc39d99616dcd625165db6399ae7459043d34862a63ca
SHA512 b4e80fe9591251396cd2cae5a66fdfa30018d6a8dd1c1e804dc3ef977e487969074da9c477f61ccb62b25bc1289dc938405e06a65be0318426797789718d6b60

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600000.03209703/g

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600000.03209703/c

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600000.03209703/e

MD5 b61c90fb1db851cd589ba5aef1f6cafe
SHA1 581be0f8f9d88025a9ed13131e91ae4f17749e0d
SHA256 9522b1e6cf304c11cd00146dcd14b125c7f8d4de73cc78e9cebbe1e48aaf43aa
SHA512 68212f0ebba62b3fa50163b4e0258d8552cd021105e976050055273d3073d66add188b171d224cd39e2eb69ed2aacea1390773ab7fe41a2b3253ecb980ff8354

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/values

MD5 d8d656dab3e2fa5080b7054288fd7a15
SHA1 4492f5ec60110ea83d16fe16e79b447186bc646a
SHA256 d714b77df09b08a7c54afa8e5944ab4967ecee5015675727ac37afe9b8f37b3f
SHA512 dd130dc0ae0b2f31c9fcb2b951b81206d998b48e1a5d9ed90a33a133b7e10634210dc7001fc21d4e498f3ce54bba19a1e3ef7404aaeb4342d5c3d6864b2a9694

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600001.03209703/e

MD5 b5d86444b59d7fb0067be81a909ee4a2
SHA1 3f4d815ac44237ba8ffba2df6cf7e896d08ebe5b
SHA256 d92c9e15e3bcf87233d91f765057aba18bce0d890e3bd632b6f46287ca897925
SHA512 fca99617769f1eca3faea4578b36e6b0b6d86c108a507f89d5f13d19340d030fc1f3dd211286fec7b50266f4fe5565f0b00df031bbe089885e35b80272281895

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600002.03209703/e

MD5 c82c12670f323245edc682f3b1dc0961
SHA1 ef81cea9e82ea8a913290892bccf958687211dd7
SHA256 3c5adb93d2ca53c5f77bf6fe324c8f735a148a98e4b8a2ca8480d6a6a2e0db57
SHA512 78801af669a95af51d11ffc19de0eb8ef2d396f35f968cc8b84b0dc0eef604313d3c376ba77d90079c57b42836be1fc27dcc57f22034586cd58b0944e77e6d8e

/storage/emulated/0/Android/data/com.whiteroom.HoleFeed/files/Unity/395e91f1-5d44-46e1-bf66-14e3a2f4450d/Analytics/ArchivedEvents/171536661600002.03209703/e

MD5 1e64592b7ad9e184008a9ee4e065deab
SHA1 9efe35bad04249c551ae4c28676927ce728bb0ba
SHA256 239c332091dbb0cca60cbe54fb088549a368ec2cb366613723ec15322fb31478
SHA512 339a7dd50b0482d2f12e4e6e4d549f87fc4591a4433b1718d0bf86990e5cba9e0320eb04543cd2a63f5f9a465b8aed70e7652fde5ec6da8c1cbc9e639d181c68

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 e83daec8306f29b8b05e6545d0755f00
SHA1 6c71c24aef2a6ebb0e0bab7e1411b84106b559c0
SHA256 5c558baa42827a32f52dbd8147352559874d47f6f7ce30a3c0e87ac5eda71d88
SHA512 2eae377a8455d59dc77e42ba7aa7fa864ab0935e13a7990fcf209d5f093dafdc6fab0ee23b874cdc3b6c0def4943354807bdfbde51ec8c04fac5642af037411d

/data/data/com.whiteroom.HoleFeed/files/AdjustIoActivityState

MD5 205284768df3a4ad30e378a3716db416
SHA1 ffaf3bd1c1b7fa76087ba5de881fea53c4179406
SHA256 e99e574b243188273ce272435efd3981b7c0179896857108acbad3a1aed841a7
SHA512 8fb6788d6a94c9d44408644566788a17e42a4879f88c345e1eadb392231bca361a1c3c9627174382d1a3059f7bdc4c5cb6b98ceebac04395dba62ee14f2d0431