Malware Analysis Report

2025-01-19 06:58

Sample ID 240522-jjzqzage98
Target 6684463eaf10d4463be0ac9c59858482_JaffaCakes118
SHA256 f64aaee45ac8160bfa498eee37b074a6faa54a04115b015e7240a5c95233506b
Tags
discovery evasion persistence collection credential_access impact
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

f64aaee45ac8160bfa498eee37b074a6faa54a04115b015e7240a5c95233506b

Threat Level: Shows suspicious behavior

The file 6684463eaf10d4463be0ac9c59858482_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion persistence collection credential_access impact

Checks memory information

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Obtains sensitive information copied to the device clipboard

Checks if the internet connection is available

Reads information about phone network operator.

Requests dangerous framework permissions

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-22 07:42

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-22 07:42

Reported

2024-05-22 07:45

Platform

android-x86-arm-20240514-en

Max time kernel

128s

Max time network

161s

Command Line

mobi.escapemobile.game.soda_monster_defender

Signatures

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Processes

mobi.escapemobile.game.soda_monster_defender

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 graph.facebook.com udp
GB 157.240.214.1:443 graph.facebook.com tcp
GB 157.240.214.1:443 graph.facebook.com tcp
US 1.1.1.1:53 pssvc.iqzone.com udp
US 1.1.1.1:53 www.supersonicads.com udp
IE 52.214.143.119:80 www.supersonicads.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 analytics.localytics.com udp
US 1.1.1.1:53 t.escapemobile.com udp
US 54.159.196.11:80 analytics.localytics.com tcp
US 164.90.244.158:8080 t.escapemobile.com tcp
US 159.89.244.183:8080 t.escapemobile.com tcp
US 1.1.1.1:53 track.appsflyer.com udp
GB 216.137.44.35:443 track.appsflyer.com tcp
US 1.1.1.1:53 api.appsflyer.com udp
GB 18.165.227.126:443 api.appsflyer.com tcp
GB 142.250.200.10:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.169.66:443 tcp
GB 142.250.179.238:443 tcp

Files

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-journal

MD5 047ea8c59df827ff92bc3edacd5afbf7
SHA1 8a9cad44d4d67ac57bc609527cbe78ded13c8f95
SHA256 42ba2dbf96f07c06cc4a4db56e0ad3020d7cd5698742fa080ccc6aa296f1796b
SHA512 73a19bc31ed7f952ddf6797178edb9e57b22b9f9bc3aae219ea799603a4e0f7217bd619fb84f6a2cfbba12dcf0c9a6298e20f7c53b17a31b4c97a7b176b3169b

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-wal

MD5 ec9e0c968e492cd87b4e4e38db2e5b5f
SHA1 5cd2bd5e84484c697309263606072230c51edf0e
SHA256 800b270003028d9f55370378270ccd7decf9c1ed2811a34b9427dd3b614d9c34
SHA512 c8add043f5af712d88ae0f61b16a54e625d2ca6bd855cc0ba219942e1c346eb5e7d3add72a897e74c3e2b1f06e58abf003d5f9e45cffaa7409d75b116823361a

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db-journal

MD5 cd10b1ae103b261bc3fa1c7b845e15f3
SHA1 75ee027c1dfc39b2efcf7d47688fad0823612f7b
SHA256 5828504125168e5ffd16fa48ac446f734e18b2319d24e7ef4ee64b5f2f350870
SHA512 0c375098f5834695bede653b20405f05643f2f58f6a217b007565f008b706d7b60de749ab06ba044666491e1a5db4179abf176a50950351df6776b4e8ce5efe1

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db-wal

MD5 660eef9243e12b82e043355bc048414e
SHA1 8dc8b167d98612537f4acc501aa4d06b8694e7be
SHA256 a5f701ac5de2c533c28bee18f686434968f0f2c3943d2ba953f199b4888129be
SHA512 a9f52f22a5e7502679490333c5b6b9d1ef7a45c577381cc852399ef39253e378be9815dd3136bf0e18db9fe9a793e3b593d2d80e05594cafff7441208dce05cd

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 6ae59e64850377ee5470c854761551ea
SHA1 e0c66649d1434eca3435033a32634cb90cef0f31
SHA256 f47a8ec3e9aff2318d896942282ad4fe37d6391c82914f54a5da8a37de1300c6
SHA512 0d2c259aada10b32baa0de386d49bf6a4137a7c56a9c984db59fabfc18988e18970d83fab4d1284e67d713e85578aca32e83282f36ccdef1bcbeb61250ef2915

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/temp/6950

MD5 046a414913add6f5bb60072c7db819b6
SHA1 451ee4f6809260aec622d772fd329c7d0297a842
SHA256 b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a
SHA512 4e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 9e3e0e7df7a1f0aae3c2a774de6e1ea4
SHA1 547acee0b093cc5a320b732841be7b9862a83270
SHA256 a0681485fe832290c452f20941257ca410d88ab1716df22a6f9f87a747c77b12
SHA512 e82340488e911399c668f3aae07c171467af66156f79088e0174c6c0856043f8c8615a2c1771a9a554b3bcc0a4674d9ebe295ce2c37e0200508c8c5a42a0f00e

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 490c6f4ff54475cf402a6c70110a98d6
SHA1 b8be0a1a28351581c3905f0c2ec0f7e5f8bc939b
SHA256 3c9c671f2258457d7519ceab2659728e4e4bf2d06f077ae5311fd7c1d5261af1
SHA512 7cf7f38ed86afc731507c8c6c9a4a06de7169d50856a1714a14f3f378be41812f4a1d85c585ce2d697ff7e3bcfb4db0c94b7baff34495268bf97ce0b3d2123d2

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/hash

MD5 98124e570423ffc825d283ba5e0eb493
SHA1 8e0eacfc7987b03ca9daf162747e5462e0a16d23
SHA256 d38935ed0eff0e0647f2865ee1f4c7c51b03249dce7ed0da44a19b36f46a6d46
SHA512 a65979701a97d50cbc0e9127224dc188036b0f0c8f83ee7f9541174bf7068bcb08474d0ce61c4f52dfee33eeccee42c8252138c5b77308a346994a209b42661b

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-impression-list-cache/data/data

MD5 6fd2481b81ae837dc054a93c8f1c54a8
SHA1 198aa5a0b0ebf404179d4bb5e3efda33b2f46835
SHA256 728944f0b5b034a66ee88de441019f1a663b7b1f47da8acba52589a3066bd151
SHA512 a22cab637489a06f04f9e2aa586510314152ebb41ac0f4e16483db8f01d7a0b2fd3d966ee3c95e1504619d99ad3216c1bebc2eee09610776b094f20bbf508a6f

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-impression-list-cache/data/hash

MD5 85b7d13f2b6986a3a129a97c6dbf80eb
SHA1 c85aa3a1a1b7bf10a4b15c1edef8474eb8cf83b0
SHA256 d438c0a8d50f8aea3c536d70b6adc13ea658c293f0ae0adcb3f09fe02455b326
SHA512 b049366c7374208693d367cda1868a1a21e2be9c21e0080dbb901dcfada3cf1d8a46a1491e120103ac98c3dff75a00ead6ff905dd9271ff3c56276f20c895af8

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-suitable-list-cache/data/data

MD5 3bd3c119b8faad57deefa07a6211760a
SHA1 3ccbc1cffb827dba0e0de810457b91ad536c90f5
SHA256 627cb04bfa9f9f6f163e63fdab8defcb68a31b97ec3968d5a1f20b77bdc4eea6
SHA512 f1bd403574b523c5c436a0594bd196c2fefccf89610647caa060aefd1c0912f54f0d9aff0e83c769c7ded937b6ae268967d32df0a60bfd6323f1b7b0e68fd867

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-suitable-list-cache/data/hash

MD5 b651e9101be833e87337050028831efd
SHA1 ee594ba38a6324369ffc7b4dc89407d3436e34d9
SHA256 4717e5fb82c0ee85a7c97d022f410990a62efa2492070e42385cfeab67afd619
SHA512 3552858c2a688c95a76c0bb8a6a76b119b744b2e8ae7e7f30135ccd8a145318762faa52c1783a639fb179056317caeaed20c15f211db1d45bc957bc3ce591aef

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-requested-list-cache/data/data

MD5 469cc6511275690ec071d65b00ebc603
SHA1 e4c7267273b6efd825d2740a07e6fc71f3570554
SHA256 f403e3e06fa978f82be9274b61dd05cccc2119a28db5f2377174240c840a18bc
SHA512 df6c4643967ec7033299e385ae24e0da5f6c0bf7584119eba7244e8e082c481268c9a7013c735464709cde66ec699ed2679da49efff2049799829267c96bdd61

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-requested-list-cache/data/hash

MD5 c2c7026e6cb4643912426c1a2132c252
SHA1 8f5214e7a0817ff0c0607c90ef19ae1fb53b6d8f
SHA256 12b8fac4d068d919b4bcbb3130b7f7c9b93dad495bf482507edbae9e5a98e6e8
SHA512 2f7f2263f014b6f28eb8410b5e90e1fb3a8e728077cea35c12dd72192dc844636c36856285d7c908da95cb4f0d0522a303fec296067c9781c771355c4d4903f7

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-timeout-list-cache/data/data

MD5 ed1b8a02885b6589f6b2913e2c42105d
SHA1 0b6024396e13347d36ea4b19c7a7ec4c1dbf0440
SHA256 a1f4442381d6b9cc96755a295a353b542519404bb8d97793a8e017fa8dd2788c
SHA512 c95bd02c6324cb4051f427bdb1118d98550d18c2cce03c446228f09c2654f3d2385acffbcd34c0b3b902806fdec5594a904a3cea0d65b210996ea0c583af80b5

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-timeout-list-cache/data/hash

MD5 ee68ca53f58ed84dfe6427e40235cc73
SHA1 482b81f87e54aecace4a29676be7879b6164d899
SHA256 bc14088fe1937cc0f99ed2b091db3c783ad1b36cdd5fc3509f38e98a36aff866
SHA512 6b40c83b8c9579112e80fadabff22d63ca1385aa111274743c0addf4b55aaf5c49aa707682fe25c1f307868f4426e008d39fc33cbad71e37844166317a923c56

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-retrieved-list-cache/data/data

MD5 fbae8541155f491b6164e9d8c2694e4b
SHA1 3d6c0e9b0fbea4435bf84b5b876181b83b40453a
SHA256 ecee42ece8b3fd9e94780746fd3499684d0ce08c08e251e5661ff3caa087b598
SHA512 76c3921e375662dc6d1a42f9d40f8e383f4780d4c6d9230f6e345de9eefaa6fa5816995961d39e15cc51125d4d0b583dcef217c42736b6bad0ae4fd073880554

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-retrieved-list-cache/data/hash

MD5 ce445509b3dfc1da623ed12188f511c9
SHA1 815f84579d871ce95e9cafcdf861744bc83c4ec0
SHA256 bf75520ae2a2df40c3d8b29b71564bac7a99659315d2e1c83b750c96807a078d
SHA512 0f80521350891a80f3f20e26504c79a6a5a57120d7633c5f6c78ec82ecc7bd3e22bfec4bd1208b6f1aa93d08630057312a9fb4756818b919bbeb3f60c224422d

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/temp/6860

MD5 9b731ba118cb4fc6fac1dadd505049e0
SHA1 d0deeb2072a557b29309a6600652e963964d31f1
SHA256 c5127df3de9c6af3f92cc35cf95fcc511e1ddba1964353b29ee22a1d33a7af59
SHA512 29008cd6f3fbd399624ffa19485eeb4c5efbb8e70a5695091d3526168cf5d516125a5c5cbbf274d345efc150dd3f01dd846f0b44e5b91eb51c18f5379e0a03a7

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/data

MD5 2ef34b0371daf07bd7fb9f77558c102b
SHA1 294e2a36b5e4d53c7de64808d61ae684f1af8c89
SHA256 9f53e0107078ce8c33b8021f064ea8e89fd37cba262401fdc400563b19b9cd0d
SHA512 b6506cbacf6a9bd3618093777093c2ca102b5a0a9e4223b86e89e77557b3e18b77b9a4683074916df9abd0d7defab993eb8a11816503a6579c848d1def8c14b5

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/data

MD5 c004d195d9a85406ecc71f4159a2400c
SHA1 639d2a131fd43a11f2539cb0aae323d559d97887
SHA256 bd9d18acf12819448e6358195ba627ca520c7d05b3518ce4f4fc9f24a7586c21
SHA512 9411416dd8af0bb737b3862e214f1cc09ea55bce50d5647866c13410420bab19e74c332e61d0dee147ef06297645df34b0f2ca57d69d33ddfb4952e4f828b123

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/hash

MD5 3db1245b1350a34c1a8aa762299dd415
SHA1 0adfa22632bc6359fe676eee008a148f2af106f4
SHA256 d904e1f1e028ba9058a128a6fd724f0f9892ae8fe49c8f7dc2613183f7f8bbca
SHA512 165522c0c2733da0aeaba24520fe9ff6e68af36ba164c4a472fe6621f0ce7978c790766cfa22693761572917354f7e2520e81c4f280de343297e4913fa50a3ff

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/temp/6957

MD5 cad76eef25db3833adf0cd322add77fa
SHA1 e90c87c55e27fecb4f9f3a3071bb881158839bec
SHA256 1192a269cac1466e54e95522e3fa6f1c9a493a4033fb18ba04cdb8415f33b39f
SHA512 7f838902b3b471852edd1bc52937bc3782bbdeede1b3d9bc4ab55cf688cf04d55d349c4fe9d10ac882c4e7bb9c9a2336dc76f4332a0456ea93554bdac78db06c

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 7a4463a978ae7b6e7b46254898b1aa3e
SHA1 31db10f5797899f513d9e62d0e2e978171126893
SHA256 5981693c8df83eea16da42a0f748facb299546688544a0c2887ed5ffbf086e86
SHA512 e1f1d3b764d3d24f62b0e3cceb75d6211836a94adee7aab3fd752406f1f0f6f83c4ea1ea54491aa8e6d28262487072c902badfe696352995f4e1bb35e6599631

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 5313c8c615ad9d8b5e3785578d3d84d1
SHA1 9591af96b14ea7da5db166426ea7658e147565d9
SHA256 25acf0144ae013dd88a9a0667d41d723877f3119703bdc396ecc6bffb6b8d4a2
SHA512 4c051592c31029a96b2bb14d8e73f82bb1295c4b014c1e16e6c1ed74066c9a3b44075acafca5957b1f59ceaf9ffad95396cb3c5045a1bc395a2e42d44abe8cd1

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 3184e51b30accbb9764612270f5b277c
SHA1 d465d75a3328f07b5714d2d4d585069f949e38bb
SHA256 81d81845264d63103d0d7d4343f54b49ad725b7f81d866466b5859ff4e11ec25
SHA512 a4fd309b8e2ab7baeb00da9b7b7fcdc76159adfcb50b51c6a4e58a8664ae79ea17080d647078243a37dbbb79466028586d724248251f0237baae19cffffebe9e

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/hash

MD5 29276996e10f813114786f8290103bd6
SHA1 e809c251c91fb64ee02361f6fa6690c39c0cc188
SHA256 d087b365c137f4bddd2b03dc8a8fcc8e514f17c9336f08dd1a9ffe6387010317
SHA512 8e128ee5a49061d3fb27cdcf47be8ebfd5378f0a7438367c1908f2ce83d99c38e643fe8dba1e7e00d3d61c4321512750334b8a8a9a64d299e0cc1c781b3455f8

/data/data/mobi.escapemobile.game.soda_monster_defender/files/AF_INSTALLATION

MD5 4e7cd04e4318ce5b030f00feb6a8b8d6
SHA1 e66b772c2494c420147ca7bde5274656d9b7ed75
SHA256 373f8c41848ecdfabe85420389d8b4b6f9bb2189f07a9419349092c737f33b0b
SHA512 92fdbb4221e758371ff8cf8ee902d8b2b2086e8b33039aaef74bc9a2db8a8ead68127c02cd17fcab8054760bfc0c65f514c6d28d4efe434e8f0765d7cc3e6f93

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/temp/6490

MD5 02024365b3732ba2d9c450b80dfece4b
SHA1 3f0fa84b1947ea83a3428eebafe86e0cab733635
SHA256 4afc723e095df62678339f35efa13e38e361b9f2384104fd1f06aef2af9b4bab
SHA512 e68a81ad01ff8de043cd97ca86f9e91fc2c3c039c5440adb4281ac5969773723d684a13d3f4a798bb033cf90277b99362f1d1f2d6ffdcc00be6f25711c37ab60

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 fa5a1359cc1e01ed7268c003c673833c
SHA1 b87ff196d2467d7832fd79208233d17545f133e3
SHA256 9b1165f5c5e88c09728274a4718101ca4b80c99f9b17b6fbd047de33026bc740
SHA512 7f136374aeea95dd5e8f8073474216b1cd3126734a39f51dcb92e0b1b31b8ec27cc0788be6e1d2df4d5005c8140adf0e5307ec76967898584a6e64adc6ff7159

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 e11cad9b014e250bdd5aa7adbdfdb2a3
SHA1 3de639501e63e90477ecc6e0b81747a9b7186527
SHA256 6434fbc0d5542eff7875ece6e07915ef626e2d1d2c2977d236f708505601b163
SHA512 ef06569b0ae4afa4a888887a6c81c3233539d8a09c0f2bfcd569b08c99946cf66f9ca042eba744d18964a4c3923b98962d27dbe4dfb0ee3076426d67d81ba9fe

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 bdd6d7a03f459d031f28bb5897fe8b44
SHA1 ecbf60425d026aa733876baaf3243438e96211de
SHA256 fa16c3b03c75c0d2a74b01ab8bd3806b53f82abc36bbcc29ae987898f56f5544
SHA512 69bb0ac9e879f146c20339ed6189cc3e1ff5ac8d8eaec3a6275e28e7edad0a19d295cec815561fef9c3c233b6a5b78e2ef3e9bb72d3e6a46b364341bfd846ccb

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/temp/6491

MD5 ca4ecf5c833d96e1b35beb89acd333ff
SHA1 8a4d4968e16a1b67bb94d92dcdc9ff8bfb641197
SHA256 4db79e5eff09366f8a32a74c110bc17e2c988554fe8c4aa44a741a9bea0f3d09
SHA512 e1ea5cf00e6d3fb2f479ae5793e8d62cab3d5cb3e72caa3028303281e222e5c11c589df5bb60bd9b976e8b8ede901c06bdcb02b3b651443f2b8a9b29f748eb9e

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 e2b79ee0732cf4699cdb6f12e0f77a1d
SHA1 f299c1ab2f475e654eb11d5ed1f35df7b4f505f2
SHA256 c3c8ae2209445f46ae13cb1f20b4df989cd5188f32e461e1e37d7b431bdde9e5
SHA512 47f8d0cc9d24131e74f1f412442a1c4d4eb6bc0a77358b308cba6447872a49151a87bfd40128365d5500aace7798678053f06fb2c6015af17f2cff00885f692a

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 f0c76d994060d678f3859bdf07917f29
SHA1 386f9335931cc4085cc678b3767a7f619c0e1242
SHA256 439f780c957a1b723db355532bcb82c4c22078d01480fc5f122d61f8b0395290
SHA512 1e4a960015397a846be4c294861ac453fd946d906173bb6a420b0d8bd011456ce62eab43246067025722bd4e3594e193ce9d6c230f073733ab6b1ac78da40a9e

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 d43eac11e34fa64d2ec2f684f5ec928b
SHA1 28d20ee24b693e895d99e191da3b30d6b6dd587a
SHA256 9b75517e83f2bc5c4ce9f7319067e7b29d334ac27fd875bbe5a093818bb45734
SHA512 2e9f37898506aed396fddfde8f4f48c9ecf39ac16dfc4a5f02ae8c7878ec7f7c7ab60c46fb981a0c98bcaf83e0473251c7f09e9c8670b195c0c46b78b4a0abe5

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 5350829208580ad7c1f33141f685f853
SHA1 caae4bda19d4cfe51f623e6fe2a7460546e3cea1
SHA256 76eada819450cd67bdab19384466902c00f7eecde31f1d3f32c7d834ecb21ed8
SHA512 165fff89a4f5e21a37906371705611852da6939f34228f7b80471a6c3c564922660477b09d6a45c275063318e1f89efc80e7dc19dfbdc1e1b14838264bb1553a

/data/data/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 af014f02d952119adca63950ddf2ad53
SHA1 9a1d34e638078c64950015a06fe0fdbd820e3efc
SHA256 60010c7bf509cfe9daf5e2eedc4d6417295106a969d1ba83df9c3e1d219a0fea
SHA512 3daea5ae36ba355e1fb6b045b40b2931bc67c4cca6f9d20ece11c95b5e39ae427815862ad83ec9054987e480ab88128943428919a5a2ddefc5add0b2ef9fd484

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 eb7079a57a48fd3f90ab75f141b4e81f
SHA1 34ed818e6969268b0e4dd9019a7444726fff7ed2
SHA256 5f05b113c4bb10afe4b397896f616508767955a169c3c03a25c9872f7f40b159
SHA512 c4ddebe115ff50483bf2e8cc2bff2262ecfda9ab68b1dace8ec4a14d5a94a094ede9d92dd5697175d56c09a296adf55404ecd7d37ef6aef3d07a782f1f8d71d7

/data/data/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-wal

MD5 5a10ca6aa2a3285f4a13cf227c681873
SHA1 f35624fbcb938b73ec52000b2003cc2ce52e258b
SHA256 4bac5462a825ffa5c5b24c28ee86f9103d288752cb3a09d88415b5f47ef595c6
SHA512 885fa74b0a166130a212635a62d43429e039edf2fe524b403920e3fc7131b01b9919b7d00a781c7f2ffccff3340ca8d870f9f0833a53dfde579bf41124d69410

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-22 07:42

Reported

2024-05-22 07:45

Platform

android-x64-arm64-20240514-en

Max time kernel

129s

Max time network

132s

Command Line

mobi.escapemobile.game.soda_monster_defender

Signatures

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Processes

mobi.escapemobile.game.soda_monster_defender

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 pssvc.iqzone.com udp
US 1.1.1.1:53 www.supersonicads.com udp
IE 52.214.143.119:80 www.supersonicads.com tcp
US 1.1.1.1:53 analytics.localytics.com udp
US 1.1.1.1:53 t.escapemobile.com udp
US 54.159.196.11:80 analytics.localytics.com tcp
US 164.90.244.158:8080 t.escapemobile.com tcp
US 159.89.244.183:8080 t.escapemobile.com tcp
US 1.1.1.1:53 track.appsflyer.com udp
GB 216.137.44.95:443 track.appsflyer.com tcp
US 1.1.1.1:53 api.appsflyer.com udp
GB 18.165.227.10:443 api.appsflyer.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp

Files

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-journal

MD5 4db9327865fa7c4e95759bceab2ce48f
SHA1 f9ef5f3ca1fa5ef37dc50414dc509350722d66c5
SHA256 3248139121e6e3c9a45bd660a514352f8f8b263fd083d988145eff97013d764c
SHA512 d254ff711b03441e48291c62169a464bf6521d7e709ec3b0729370c5f783594eed60326ba365454c94fee54386dcd580499d120f5055f207e9a930bb4caebaf1

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db

MD5 51dd8877f85bdf5af8f0b54120c9c306
SHA1 15bf1b89b852b7521d82ca0061376c7fc7c03494
SHA256 498c568157f0239d0f4a48b83a96f3f15f6e67775d66079f3fc96574e7a3e3e8
SHA512 1d7c78d699e13f2b6718fa966fb31035c954ab8b499447cb50fd93c101c7876945d5fd6ce4b38d41f13dc7b498bf362341091d5039c52bf3cb570f6477c7c739

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-journal

MD5 a6f87cd52bd1e506d3c5411e16d53332
SHA1 a62f9b9bd8bbffb59b382729039b65e05a217522
SHA256 4bc0e889eac335f57f53391f434022ebbc7a3916b6be3e164d26811483719854
SHA512 b6ef4421d03d20730132e8b4358a1e548e593022c00c7abfb77a9211fa2b5782ce90b8aefeb98787af3624a2ca0868e6ca980b3c6d63f002fe433e5730d6fe35

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/snippets.db-journal

MD5 bd0fe9efb3f2bc6716b2b1ab272bd127
SHA1 4c8913bc953aa800566526a3cc853c9ba8a13bd5
SHA256 99e5173766c15f7ef8f60fd19a7e8566df87e1558a355a44856b07f5187ec18d
SHA512 2213d24abfe35d3da193918fdcbccfc16142331aec8ca3479ce85c8898fd444c467387859a31702596037ada3e1ba5a7c204d5704a79b571b2257041162c54f1

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db-journal

MD5 83a52c15283d32f9bb8a8146b30053a2
SHA1 c0dbd9b523ee7719ff2273c80df61a16a3f0f3c1
SHA256 86851b10c99ff9bb206074228ea8477441fa5b0599f6325224b09b69ebe4a676
SHA512 efd5d7fe59a10e15db933404f2c4e67e6bb249d286fbc89487d565fc7681046fc4e1ac036707b55fbaeebfd7f6fc3f6d4bb73571e79ef1d395bc8289b60f66ed

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db

MD5 ed710a8968441282a5939621c2771927
SHA1 b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
SHA512 547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db-journal

MD5 6536c561b29470ac7254eeeeb89f53ae
SHA1 324ad0f24b5d8a9649788102b3c2bdae6458921c
SHA256 226fb6e16eca4757ac775e7d5744671aa2a42743b661773a52bbeaef728f5911
SHA512 7d90350b7c1e7de4149bf0202c21d7645464d06428f48f935e90c066d3aa8c525051a2f778ca0cee8fd2fa8c97b7ebaace6cb6b85afe2851226e29edd0231fbd

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/http_auth.db-journal

MD5 ba29381b4ba8c2adca681616c7fec27b
SHA1 a4a9a0a2a7904745bd1b1d58bd2fb2a37defe99e
SHA256 1d097cd75187c27a55c00dabea5ee679e054703b424effe5c79569be4ce3f2ea
SHA512 cb1d36934363702f17dd60d99851f09c77014db41e539a64b9049b0ebaffd1e90542e8d7829c6b3a93beac1df9e24e5e8205bac1615e34719c6d77479e235bf6

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 6ae59e64850377ee5470c854761551ea
SHA1 e0c66649d1434eca3435033a32634cb90cef0f31
SHA256 f47a8ec3e9aff2318d896942282ad4fe37d6391c82914f54a5da8a37de1300c6
SHA512 0d2c259aada10b32baa0de386d49bf6a4137a7c56a9c984db59fabfc18988e18970d83fab4d1284e67d713e85578aca32e83282f36ccdef1bcbeb61250ef2915

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/temp/5940

MD5 046a414913add6f5bb60072c7db819b6
SHA1 451ee4f6809260aec622d772fd329c7d0297a842
SHA256 b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a
SHA512 4e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 4846ae1ea69284f539e34b45d93b4cf4
SHA1 4ba96d9b2e2a7b7a51f5b94fef00557d528e4077
SHA256 d0515d93ffb5200fb1bd659c44b6f7786020400a993741a3f871bd8061f5a1bf
SHA512 a33b6a7301f797a30140d47afd6c68dbeb2ec69be7ea919cef2c7396f652771d10bb9ab6cbd46a489a413f38eab06f778a74d8cf7dfdabd91adf571bd47325d9

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 3fd30f99c5e6c20051979f49581fe77b
SHA1 c8c5fcc8a21f7beee2b7c194e668c2b2385e48c1
SHA256 538209c083701ed5e96952339e4b94a5916a219986b18cf82f5c4ee48a6737d2
SHA512 8da339746553ea74e7e2fc8c4a6baa0c70d0f09b098f19527e7c6568d4616c5d94ff59ddda4a48a60c31b2c9a3b3d75adf47f721ed0f8c6c2323e7eab15d7180

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/hash

MD5 78a236acc136bb6457c9abc02348814c
SHA1 93a3dd06815b1db047fc4f9bbf5fd43e1f345886
SHA256 26574bb8c82e7538c09b9ff1524706bd5088c740c6a080af83db4d8bf2e5255e
SHA512 272606333e79d1c70abe4d118fe7b2ef30dc9b021e13128f71d48b485f207edbd930cef268f9915468705581ddc3d9528b1ed0f3f09b15cc3b4c8c97f4e74787

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-impression-list-cache/data/data

MD5 9e3e0e7df7a1f0aae3c2a774de6e1ea4
SHA1 547acee0b093cc5a320b732841be7b9862a83270
SHA256 a0681485fe832290c452f20941257ca410d88ab1716df22a6f9f87a747c77b12
SHA512 e82340488e911399c668f3aae07c171467af66156f79088e0174c6c0856043f8c8615a2c1771a9a554b3bcc0a4674d9ebe295ce2c37e0200508c8c5a42a0f00e

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-impression-list-cache/data/data

MD5 655a31bd79777c0a877f8809814f29b4
SHA1 41397662a39de4672f627ea5cde2e04a257627a8
SHA256 98637f7fb8238092b501ab56c0cc4a84185590a8669c858f42140f59372eacfe
SHA512 1471f53a794dd8b2524bfbd4b2bdc053988a14921d32e3fcccf814d77461ffdb665d2894f0357d620231ccf986ac8a79c5c92d21874df64251b68d750b865d59

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-impression-list-cache/data/hash

MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-suitable-list-cache/data/data

MD5 ffa403a2e4fa7a84c4932ecfbe24e745
SHA1 0daa98460d0629007cc5f4485a7fb831d6e4f6cd
SHA256 51f4ae116e80d16d2572e1eba959ee130e4ba9ba86ff825c1accf41bc2749de3
SHA512 2504adc7204ace653d18ec9fb668af568bcc6d6642774cb0c48cabd1a4dec580432c861402571ef4f9ab266f043f05129016bb3890afe42c31017b1b6e01e72a

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-suitable-list-cache/data/hash

MD5 1475726cec1df287c40f50dd8f3866f5
SHA1 094fd0cbc3817d90da6de80320814b9808e60f83
SHA256 8aee86fe49fc5c15a7eee34c13b6dd1985974628071e77c76416aa0ecea128e9
SHA512 d7698cce4a2d79684528ff80d320006799ac83a5fe26221c69fb9dfb53e52cdfe5cdecea0b12529925d3cbb41352eda07a6f0934b81cc133e1ad2d6139289854

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-requested-list-cache/data/data

MD5 789e5757c104787035205ba40df77f93
SHA1 f6940796b07bd77d0c36e2bb6a6d32d9f644e921
SHA256 7382710e622e14cf82ebe2d4da9b0dbb5582f99dbb9c3cf30d3de53302919587
SHA512 fa17a02a6800bc1cb5a45f571b847f5c164701e0eddab3ed8249ee0acaf81ef81bc5387edd0c811671d31dfa431841bf39465d9eb5dc8f7d75d07add479ccd6e

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-requested-list-cache/data/hash

MD5 0dc1064a99d6b21485f3f758b2dfd8e0
SHA1 df1923f3cacba7a3844113279ce8c4046742c913
SHA256 101bb8aeab946925b14006ee79fbfa56dcf5b2a65c44ca9b435abbd1abe3a22b
SHA512 f68f8d217234680747a07cc8a01cb554f78ab0e251a47b81c4f22fff2896fd88f00751a2f51e5d91bcc17ee550f0cc08f6f05534ac2110f39bfaecf5e92656cf

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-timeout-list-cache/data/data

MD5 5c0d22f1ca7c46077738a99a9780afba
SHA1 6b8f6d0a6ab9c4d9d53cc593db2796f462cb0e69
SHA256 31a993933b92c5d4b90616fff1663bd11309ec609faa4c4ab7b4cb1fe94a639b
SHA512 c8fb069288ae189df7c5833926e5e214b574552b840e101fff92a377deacebff0291984dc02e9df665c91909b743dd9749ab9cd99a1dcc6f26f35c2b276c4a5f

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-timeout-list-cache/data/hash

MD5 81e72fc9099083c0c1e0220254e06084
SHA1 4cd3e62e1aec279aa995cec16ebb7306a9c570f1
SHA256 090ce29001257c5a4c44f0e1913f5d8031559bc71a6dfdc7e076c1ad5a7e6b68
SHA512 41a00f04519656f89ca4697c40b3de16cb553e034dc9f4fda1df7b6c356455e84863407465b09fb4dbb6bbe0774cebc4b1648375e62c40b304138fa4fa090a51

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-retrieved-list-cache/data/data

MD5 c5a4ebb86668d84acede8432f2c1df01
SHA1 abf635e910a52e762ceabe28186d51615c7f73bc
SHA256 3baea5c58c5393dce4027524aea7239d5533ac24ef187872392c702e41dedd4f
SHA512 bfa8dc4baf7389a99e6e0c3f9710cf2aea23c2114f1373dc976347d290eb57a29b971b8b279057fc5bce22c595dcf7e7ffc2930ab55623bca2427ff6033c9abc

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-log-retrieved-list-cache/data/hash

MD5 91f54e65f9ee5e497bcc92cf7d358e20
SHA1 1a2522d3e3a94995e70b691e767bff511868eb44
SHA256 ece032a357c722fa7c6668d9c340622242ffd32e52ee96cb3179f6c24b07e550
SHA512 ebd9ff70396f77d5ba5b29a6b3c5824da7a28b083a5bf10f77481bf5e7a84f166bd792de2a1e63f55d071685038914892fb5c8eeacad7ddfad8c6f6c189ae131

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/temp/5830

MD5 9b731ba118cb4fc6fac1dadd505049e0
SHA1 d0deeb2072a557b29309a6600652e963964d31f1
SHA256 c5127df3de9c6af3f92cc35cf95fcc511e1ddba1964353b29ee22a1d33a7af59
SHA512 29008cd6f3fbd399624ffa19485eeb4c5efbb8e70a5695091d3526168cf5d516125a5c5cbbf274d345efc150dd3f01dd846f0b44e5b91eb51c18f5379e0a03a7

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/data

MD5 2ef34b0371daf07bd7fb9f77558c102b
SHA1 294e2a36b5e4d53c7de64808d61ae684f1af8c89
SHA256 9f53e0107078ce8c33b8021f064ea8e89fd37cba262401fdc400563b19b9cd0d
SHA512 b6506cbacf6a9bd3618093777093c2ca102b5a0a9e4223b86e89e77557b3e18b77b9a4683074916df9abd0d7defab993eb8a11816503a6579c848d1def8c14b5

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/data

MD5 c004d195d9a85406ecc71f4159a2400c
SHA1 639d2a131fd43a11f2539cb0aae323d559d97887
SHA256 bd9d18acf12819448e6358195ba627ca520c7d05b3518ce4f4fc9f24a7586c21
SHA512 9411416dd8af0bb737b3862e214f1cc09ea55bce50d5647866c13410420bab19e74c332e61d0dee147ef06297645df34b0f2ca57d69d33ddfb4952e4f828b123

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-job-cache/data/hash

MD5 3db1245b1350a34c1a8aa762299dd415
SHA1 0adfa22632bc6359fe676eee008a148f2af106f4
SHA256 d904e1f1e028ba9058a128a6fd724f0f9892ae8fe49c8f7dc2613183f7f8bbca
SHA512 165522c0c2733da0aeaba24520fe9ff6e68af36ba164c4a472fe6621f0ce7978c790766cfa22693761572917354f7e2520e81c4f280de343297e4913fa50a3ff

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/temp/5947

MD5 cad76eef25db3833adf0cd322add77fa
SHA1 e90c87c55e27fecb4f9f3a3071bb881158839bec
SHA256 1192a269cac1466e54e95522e3fa6f1c9a493a4033fb18ba04cdb8415f33b39f
SHA512 7f838902b3b471852edd1bc52937bc3782bbdeede1b3d9bc4ab55cf688cf04d55d349c4fe9d10ac882c4e7bb9c9a2336dc76f4332a0456ea93554bdac78db06c

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 7a4463a978ae7b6e7b46254898b1aa3e
SHA1 31db10f5797899f513d9e62d0e2e978171126893
SHA256 5981693c8df83eea16da42a0f748facb299546688544a0c2887ed5ffbf086e86
SHA512 e1f1d3b764d3d24f62b0e3cceb75d6211836a94adee7aab3fd752406f1f0f6f83c4ea1ea54491aa8e6d28262487072c902badfe696352995f4e1bb35e6599631

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 ac6b50e129dc821d71bbb4d1b4ab506a
SHA1 fb99a26303cf1823302646996eff91a0aea5e2c6
SHA256 90c2127045be5858d35b2a23650523c7fcdac084b1b1bc9f9968acfc4446668d
SHA512 d2586b680a653644dee74e4c9d6df7bc15ab3ed627370c0ed8ccc15ef1796b50fc37fe7b8bc5430681f97a76a903a71d8e24590bd4ac42401d04bb8af34f8870

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/data

MD5 bf3288516af30dc327d66ebc3b30cfab
SHA1 1f97e3e457e336ddce37411fafb5d99f7b2ebadc
SHA256 f4de0a41a4c0b1969d4783131122f293745db4605e192d4ddd73f12f5040a2f8
SHA512 699fe4ebc9e94c6f30783cce5b9ede20a9f9ca54f702ef017b224a5167fb8777ea68eaa8d5212d7186b4101ac67739dc548521cc305938a479d0e43179868819

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/positial-config-list-cache/data/hash

MD5 9cc06d31bf9b1a3daa9ef7ed594acb80
SHA1 ca0f347f79866dcc6c83fa3271e2cea6852d06ca
SHA256 6e9f1297b444d8d1c27c92ec5f3060d50736045c6343260ca94094b4c8919d9e
SHA512 4a009dfca9f7d7a947dd52ef3165288e57337956445018500ee3c498eaf41b3bbbba04462f32532a48265781f33101d508dc38b717d34fc3a5489d58e1e55ef0

/data/user/0/mobi.escapemobile.game.soda_monster_defender/files/AF_INSTALLATION

MD5 1c2ba0d42416956c8c9ae4d0dcfb9406
SHA1 1437310cf0d3640fd2f070582fc8f2d2e5ae1c18
SHA256 619786e89867ad9cd67edea9b425ae42af58f3917c32cbdffb0fc8f7af7c1da5
SHA512 3146022cd267c65e3e497a612108fe5e3554b61a1c1396934d6fafdef90084e0482875d9865ce7ed0f57e41215058920e9616a1feaf07c7fcd30c93ae0c6fdb7

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/temp/5370

MD5 02024365b3732ba2d9c450b80dfece4b
SHA1 3f0fa84b1947ea83a3428eebafe86e0cab733635
SHA256 4afc723e095df62678339f35efa13e38e361b9f2384104fd1f06aef2af9b4bab
SHA512 e68a81ad01ff8de043cd97ca86f9e91fc2c3c039c5440adb4281ac5969773723d684a13d3f4a798bb033cf90277b99362f1d1f2d6ffdcc00be6f25711c37ab60

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 fa5a1359cc1e01ed7268c003c673833c
SHA1 b87ff196d2467d7832fd79208233d17545f133e3
SHA256 9b1165f5c5e88c09728274a4718101ca4b80c99f9b17b6fbd047de33026bc740
SHA512 7f136374aeea95dd5e8f8073474216b1cd3126734a39f51dcb92e0b1b31b8ec27cc0788be6e1d2df4d5005c8140adf0e5307ec76967898584a6e64adc6ff7159

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 e11cad9b014e250bdd5aa7adbdfdb2a3
SHA1 3de639501e63e90477ecc6e0b81747a9b7186527
SHA256 6434fbc0d5542eff7875ece6e07915ef626e2d1d2c2977d236f708505601b163
SHA512 ef06569b0ae4afa4a888887a6c81c3233539d8a09c0f2bfcd569b08c99946cf66f9ca042eba744d18964a4c3923b98962d27dbe4dfb0ee3076426d67d81ba9fe

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 bdd6d7a03f459d031f28bb5897fe8b44
SHA1 ecbf60425d026aa733876baaf3243438e96211de
SHA256 fa16c3b03c75c0d2a74b01ab8bd3806b53f82abc36bbcc29ae987898f56f5544
SHA512 69bb0ac9e879f146c20339ed6189cc3e1ff5ac8d8eaec3a6275e28e7edad0a19d295cec815561fef9c3c233b6a5b78e2ef3e9bb72d3e6a46b364341bfd846ccb

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/temp/5371

MD5 ca4ecf5c833d96e1b35beb89acd333ff
SHA1 8a4d4968e16a1b67bb94d92dcdc9ff8bfb641197
SHA256 4db79e5eff09366f8a32a74c110bc17e2c988554fe8c4aa44a741a9bea0f3d09
SHA512 e1ea5cf00e6d3fb2f479ae5793e8d62cab3d5cb3e72caa3028303281e222e5c11c589df5bb60bd9b976e8b8ede901c06bdcb02b3b651443f2b8a9b29f748eb9e

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 e2b79ee0732cf4699cdb6f12e0f77a1d
SHA1 f299c1ab2f475e654eb11d5ed1f35df7b4f505f2
SHA256 c3c8ae2209445f46ae13cb1f20b4df989cd5188f32e461e1e37d7b431bdde9e5
SHA512 47f8d0cc9d24131e74f1f412442a1c4d4eb6bc0a77358b308cba6447872a49151a87bfd40128365d5500aace7798678053f06fb2c6015af17f2cff00885f692a

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 f0c76d994060d678f3859bdf07917f29
SHA1 386f9335931cc4085cc678b3767a7f619c0e1242
SHA256 439f780c957a1b723db355532bcb82c4c22078d01480fc5f122d61f8b0395290
SHA512 1e4a960015397a846be4c294861ac453fd946d906173bb6a420b0d8bd011456ce62eab43246067025722bd4e3594e193ce9d6c230f073733ab6b1ac78da40a9e

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 d43eac11e34fa64d2ec2f684f5ec928b
SHA1 28d20ee24b693e895d99e191da3b30d6b6dd587a
SHA256 9b75517e83f2bc5c4ce9f7319067e7b29d334ac27fd875bbe5a093818bb45734
SHA512 2e9f37898506aed396fddfde8f4f48c9ecf39ac16dfc4a5f02ae8c7878ec7f7c7ab60c46fb981a0c98bcaf83e0473251c7f09e9c8670b195c0c46b78b4a0abe5

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/data

MD5 5350829208580ad7c1f33141f685f853
SHA1 caae4bda19d4cfe51f623e6fe2a7460546e3cea1
SHA256 76eada819450cd67bdab19384466902c00f7eecde31f1d3f32c7d834ecb21ed8
SHA512 165fff89a4f5e21a37906371705611852da6939f34228f7b80471a6c3c564922660477b09d6a45c275063318e1f89efc80e7dc19dfbdc1e1b14838264bb1553a

/data/user/0/mobi.escapemobile.game.soda_monster_defender/app_postitial-configuration/data/hash

MD5 af014f02d952119adca63950ddf2ad53
SHA1 9a1d34e638078c64950015a06fe0fdbd820e3efc
SHA256 60010c7bf509cfe9daf5e2eedc4d6417295106a969d1ba83df9c3e1d219a0fea
SHA512 3daea5ae36ba355e1fb6b045b40b2931bc67c4cca6f9d20ece11c95b5e39ae427815862ad83ec9054987e480ab88128943428919a5a2ddefc5add0b2ef9fd484

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 be02b03a9b8b41677a48477c3510861a
SHA1 3cfa3f6f79c522daa8c5622901b3d6bc62ae4918
SHA256 0dc2573d4760c5cfd4ef1fb02c724a824b18caecac4cf7b5ece14cc4a9fd7c5c
SHA512 ea3f5d4b97c2243b2f7f29c2240c9f4b6b65e636fac6128c945afad4525bd1c3f7b9523cf66795709405847fcc135d7bf649c8fa29169aeda492925a24d8914e

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite

MD5 b43594923798e28a37d1047df7f5e4d1
SHA1 6441f3eee7d8cfa21b373ffe04242c95b374b0bd
SHA256 314dc34c669db000013ccae3d8f5c1db9600b8959f599999076b8b5b2572cfe3
SHA512 b8baec92da463a6766b854a367b2e698176cdac6ab11bd455b33a76da34165d48d8e75c3afd19089a5f2571472c9cbee1fe924a0c6a6dab5ca90e8c73291e7ae

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 55b60ab11d607267f23ba5413b68d024
SHA1 2850eaad012bf26eae237ea02cd99c34d4e473f4
SHA256 3ab39dd0070750c79f66818447ab2f30ca3ce7e1882c58bd16e3b27f1f30333c
SHA512 5610386a95d8864452b242471ed51e9af514bd55e46aabe23d15b84d444ed9bd917068dd28d106472c977ebb67b1ed31417575b0fb5d6058e138bf6990b861ff

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 5d87cbffe32f9c23a020e80eb5997f9b
SHA1 460371b7286c2d3822cca6dc43f3314ed4e2cef9
SHA256 d572d62ded66d27ed2f4b7cd6e2ff4eac3d559767cee603a10507172767faaf5
SHA512 974ea418dc8e5b8c202c182ddacd050aa9d187f8c7c06214c9d8863c7b9c1fd548bd7eada0bce9661dfc31651cb91de57da98a2b86a28e30027f7bdbf6ad527d

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 d72eed9de020433e5f80c069f6df8ec7
SHA1 a7db5ae01dda637f44aac74187856da763b03dd6
SHA256 8f09d208c2ba96e83abe05e20d7c717b56ba249b192b55a9213b37e4d699112d
SHA512 854880d63c64a000abc26586ad9a08d00924d014606bcb9979cba2fe90784ae37a70d8bb8c35b828399b35015965cfad156fcbd55c84f6b2ef80b4d742732062

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 a699057b9b4ba2b6d0e7942800ee545d
SHA1 bfc36f6fe7837fc8988fd478ae3b3b3f4d75ff40
SHA256 5b9284e15d918a5db76ab1d592f8c7cfa98c70623ae21410edd6fd2a84cac0d2
SHA512 74c3c1f1ebba18ce8a0ec016a1ac40e84490bc1a3929de9bd289e839ecb97049ff818a34426c8716c8d429a4d37b6c5f1c3324e91e7b186662d49c4ab245a3ae

/data/user/0/mobi.escapemobile.game.soda_monster_defender/databases/com.localytics.android.6893f683b50bcaed0fbb610ea9e23d440c6008df125d7aa27f02bc0cb632aef6.sqlite-journal

MD5 32b9c8606cdd1da7a69fd043721e1ed5
SHA1 460ab0508d7a84adfb8eecb08864dbdfd40d40a1
SHA256 d349124e227d473a28d485912726670c952ef88ccfe9330651fde8d476286043
SHA512 2d3c3f0eb7722c12c1d3bab7b64b978bb602dfb152d797f7a2d44d0c4da58bcaefac328be92f82be37bddfdd2dcb8d4fcf57fb525fa2f162fdcba5d3af91c560