Analysis

  • max time kernel
    163s
  • max time network
    189s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22/05/2024, 09:52

General

  • Target
    66dadc1d34d399725a6ef5105aa19ea7_JaffaCakes118.apk
  • Size 15.6MB
  • Sample240522-lv4v6sbb91
  • SHA256 2ee5d631fba4f70586a7a95381af68048176f2f5f411d28ca459b1afcfc7eef0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 12 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 2 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries account information for other applications stored on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 8 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries the mobile country code (MCC) 1 TTPs 8 IoCs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Reads the contacts stored on the device. 1 TTPs 4 IoCs
  • Reads the content of the call log. 1 TTPs 2 IoCs
  • Acquires the wake lock 2 IoCs
  • Checks if the internet connection is available 1 TTPs 4 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.jb.gosms
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Obtains sensitive information copied to the device clipboard
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Reads the contacts stored on the device.
    • Reads the content of the call log.
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:4563
  • com.jb.gosms:com.jb.newswidget
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    PID:4642
  • com.jb.gosms:com.commerce.chatplane
    1⤵
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    PID:4716
  • com.jb.gosms:pushservice
    1⤵
    • Checks memory information
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Reads the contacts stored on the device.
    • Reads the content of the call log.
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4794
  • com.jb.gosms:com.jiubang.commerce.service.IntelligentPreloadService
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    PID:4847
  • com.jb.gosms:com.jiubang.commerce.service.IntelligentPreloadService
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    PID:4942
  • com.jb.gosms:com.jiubang.commerce.chargelocker
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    PID:5222
  • com.jb.gosms:com.jiubang.commerce.service.IntelligentPreloadService
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    PID:5264

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        godaemon

        • Path /data/user/0/com.jb.gosms/app_daemon/godaemon
        • Size 9KB
        • SHA256 8e456c853fe43e907135c0d230a61eba328bfe0c729d66ef006772d864e0d12e
        • MD5 SHA1 SHA512 SSDEEP

        Account.db

        • Path /data/user/0/com.jb.gosms/databases/Account.db
        • Size 28KB
        • SHA256 ba75e055c3ea1c1c55a81521c50dcbe95b7bc26e1a2c3d816d70f1481b572a96
        • MD5 SHA1 SHA512 SSDEEP

        Account.db-journal

        • Path /data/user/0/com.jb.gosms/databases/Account.db-journal
        • Size 512B
        • SHA256 89c81de6417d0b5792d634e0d46953153a455ed04c2605519dac449d838733a0
        • MD5 SHA1 SHA512

        Account.db-journal

        • Path /data/user/0/com.jb.gosms/databases/Account.db-journal
        • Size 8KB
        • SHA256 7b3aa64fa4f6ca7adba32109432ecc344fac61878356b3671c2935ba86267e8a
        • MD5 SHA1 SHA512 SSDEEP

        Account.db-journal

        • Path /data/user/0/com.jb.gosms/databases/Account.db-journal
        • Size 8KB
        • SHA256 71fc2c9f9c8ce26d373602a699e001c25b79824daf9de54e4592b91f5e451f76
        • MD5 SHA1 SHA512 SSDEEP

        BgDataPro.db

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db
        • Size 32KB
        • SHA256 e7c67b7e0cce45b46cf413ba2e758cc9e72aee87dc7f36beae563dff7dfc9392
        • MD5 SHA1 SHA512 SSDEEP

        BgDataPro.db-journal

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db-journal
        • Size 512B
        • SHA256 a01197aca4f980223507e5b40061992afa6542abfa0adf58086c6e515d5d8a43
        • MD5 SHA1 SHA512

        BgDataPro.db-journal

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db-journal
        • Size 8KB
        • SHA256 2761915cd7eb04592efeccc1193d5caceeabb5387fb2fc1789b3c112463a94ec
        • MD5 SHA1 SHA512 SSDEEP

        BgDataPro.db-journal

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db-journal
        • Size 8KB
        • SHA256 e16f987d52eb2d432cc850d16bf8c63d98c0ad4f1322078306aad7f2d18b60e8
        • MD5 SHA1 SHA512 SSDEEP

        BgDataPro.db-journal

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db-journal
        • Size 12KB
        • SHA256 170aa187e9d1ae4f147dd23b5a6ca6d91e2dd32138e16a837ed21b5f8f1ad554
        • MD5 SHA1 SHA512 SSDEEP

        BgDataPro.db-journal

        • Path /data/user/0/com.jb.gosms/databases/BgDataPro.db-journal
        • Size 12KB
        • SHA256 787e6adccf4087b1fb63b7b1707284ed301910b580fe2d3bbf2201ca0e5ca48f
        • MD5 SHA1 SHA512 SSDEEP

        MessageBox.db

        • Path /data/user/0/com.jb.gosms/databases/MessageBox.db
        • Size 20KB
        • SHA256 56428de6789a35eb61c42105493c1e8611f58e9af598092b06aea9cdd8f7d9b9
        • MD5 SHA1 SHA512 SSDEEP

        MessageBox.db-journal

        • Path /data/user/0/com.jb.gosms/databases/MessageBox.db-journal
        • Size 512B
        • SHA256 751a7c3def0c7717fd161462b136dc56e2392ea0462369cf5a788e86576ed45f
        • MD5 SHA1 SHA512

        MessageBox.db-journal

        • Path /data/user/0/com.jb.gosms/databases/MessageBox.db-journal
        • Size 8KB
        • SHA256 7c162e830cedeb9c1ae58f4505940409704c39c49fbf84b7bc24fe384595ed59
        • MD5 SHA1 SHA512 SSDEEP

        MessageBox.db-journal

        • Path /data/user/0/com.jb.gosms/databases/MessageBox.db-journal
        • Size 8KB
        • SHA256 daa84e171eeb23c0d950a910b326edbe0afff6fb972643395782541ed4e06271
        • MD5 SHA1 SHA512 SSDEEP

        SyncHelper.db

        • Path /data/user/0/com.jb.gosms/databases/SyncHelper.db
        • Size 76KB
        • SHA256 3787ec0b3eeb1c2dbdc89375ef6c4694ef6992ea5d8ca84dfdbd3b0fa7201187
        • MD5 SHA1 SHA512 SSDEEP

        SyncHelper.db-journal

        • Path /data/user/0/com.jb.gosms/databases/SyncHelper.db-journal
        • Size 512B
        • SHA256 e349ed41c7a719f18e28226228fcd16fec12b09cf2b0ca617c52310353f3f40f
        • MD5 SHA1 SHA512

        SyncHelper.db-journal

        • Path /data/user/0/com.jb.gosms/databases/SyncHelper.db-journal
        • Size 8KB
        • SHA256 1f8f6c42090849e4f2e21b6a4a6d8232c729083aadd218e0aabc00eb22fa5442
        • MD5 SHA1 SHA512 SSDEEP

        SyncHelper.db-journal

        • Path /data/user/0/com.jb.gosms/databases/SyncHelper.db-journal
        • Size 8KB
        • SHA256 31af3a9371e92ce07be374d38982e592bebf2d68ebfe52af47a2720c660ee733
        • MD5 SHA1 SHA512 SSDEEP

        ad_sdk.db

        • Path /data/user/0/com.jb.gosms/databases/ad_sdk.db
        • Size 48KB
        • SHA256 3220fdb213d94327b8cbc8f5751f141192ac827658c3610e6256061b42cc42fc
        • MD5 SHA1 SHA512 SSDEEP

        chatplane.db

        • Path /data/user/0/com.jb.gosms/databases/chatplane.db
        • Size 40KB
        • SHA256 a40df2adad217745c2d964d81556fe08b803eddf36e50af7a40a14286e157112
        • MD5 SHA1 SHA512 SSDEEP

        chatplane.db-journal

        • Path /data/user/0/com.jb.gosms/databases/chatplane.db-journal
        • Size 512B
        • SHA256 2f490caf64a9036a950b4fd253809db75ca955032132dfac897f24e1ea745616
        • MD5 SHA1 SHA512

        chatplane.db-journal

        • Path /data/user/0/com.jb.gosms/databases/chatplane.db-journal
        • Size 8KB
        • SHA256 4c2c7c39021dd06e6f83b6386f6fba579fa5fa0b158f483a7779e43b2fcececa
        • MD5 SHA1 SHA512 SSDEEP

        chatplane.db-journal

        • Path /data/user/0/com.jb.gosms/databases/chatplane.db-journal
        • Size 8KB
        • SHA256 584c00777f071b66021169a60de60caeb04aaec613d6e377e48c16b8a8a73a9b
        • MD5 SHA1 SHA512 SSDEEP

        dynamicload.db

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db
        • Size 20KB
        • SHA256 d1d4bf9439caa2bea36a53bd16fde5581e5a260490db7c76244fb2643b8a88d6
        • MD5 SHA1 SHA512 SSDEEP

        dynamicload.db-journal

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db-journal
        • Size 512B
        • SHA256 2189d66cdbdcefcc9880b0f0f3a85413eb71d39e2f75c6e1eb0cdf7b627d1c94
        • MD5 SHA1 SHA512

        dynamicload.db-journal

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db-journal
        • Size 8KB
        • SHA256 48e333bb4d02813798b107dceb52b2bbc1724990bb4f99ebd73ee9050c87f3cb
        • MD5 SHA1 SHA512 SSDEEP

        dynamicload.db-journal

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db-journal
        • Size 8KB
        • SHA256 9339687bf855b0a0a90d7dce0ac08dd4eac0f0f479acc55daf7b677c71ad427e
        • MD5 SHA1 SHA512 SSDEEP

        dynamicload.db-journal

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db-journal
        • Size 12KB
        • SHA256 feb092a756bae3d32528dfe0b0a6bf70f25fc5bbf2600788c5c4f0a5f79aeef0
        • MD5 SHA1 SHA512 SSDEEP

        dynamicload.db-journal

        • Path /data/user/0/com.jb.gosms/databases/dynamicload.db-journal
        • Size 12KB
        • SHA256 4403e9dbba0cfc9ec149d14bb96b437e7cecc057935c16529a63d733be9d5d7f
        • MD5 SHA1 SHA512 SSDEEP

        feedback_switch_db

        • Path /data/user/0/com.jb.gosms/databases/feedback_switch_db
        • Size 16KB
        • SHA256 826635e96d3df1590623e4bdba670a7a4580b56d743fa1c9bce53a1ab5e534f0
        • MD5 SHA1 SHA512 SSDEEP

        feedback_switch_db-journal

        • Path /data/user/0/com.jb.gosms/databases/feedback_switch_db-journal
        • Size 512B
        • SHA256 ae357ea8af99a48ea398562dece142eb5818ac5f664d40b4cb413e28026c218f
        • MD5 SHA1 SHA512

        feedback_switch_db-journal

        • Path /data/user/0/com.jb.gosms/databases/feedback_switch_db-journal
        • Size 8KB
        • SHA256 964af30905d55d82c57d4e7eab8d5623afc9ce5002f889a8f47d09cee66a74cf
        • MD5 SHA1 SHA512 SSDEEP

        feedback_switch_db-journal

        • Path /data/user/0/com.jb.gosms/databases/feedback_switch_db-journal
        • Size 8KB
        • SHA256 304e3064859536845d16f5b1b1fa970db06bb0047947173f428451d7a242d0d7
        • MD5 SHA1 SHA512 SSDEEP

        gommssms.db

        • Path /data/user/0/com.jb.gosms/databases/gommssms.db
        • Size 96KB
        • SHA256 547188afae1c0e37484595bf6ef4ef0e9d858f568d455b37af1b61e2b0b92f5a
        • MD5 SHA1 SHA512 SSDEEP

        gommssms.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gommssms.db-journal
        • Size 512B
        • SHA256 87c61ee9bdb53ce97d1aab85e213e3fff657b91abbe195960c579128901aef49
        • MD5 SHA1 SHA512

        gommssms.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gommssms.db-journal
        • Size 8KB
        • SHA256 8cc65eb22536faf84d125d5604b0d5315dea64dc6e819dbd0f22c4603aa0cf56
        • MD5 SHA1 SHA512 SSDEEP

        gommssms.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gommssms.db-journal
        • Size 8KB
        • SHA256 73d0ca5cfae2783e40fcc9c9992aae6a587405862a0c9f3c661c6248d9c095d1
        • MD5 SHA1 SHA512 SSDEEP

        google_analytics.db

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db
        • Size 60KB
        • SHA256 28dc8cb2e4ca5bebd00427158d4f2771443f8acbf5a2aabe7ccfce9fbd2e2813
        • MD5 SHA1 SHA512 SSDEEP

        google_analytics.db-journal

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db-journal
        • Size 512B
        • SHA256 e9ea217c9b0e14bc9a497c39f5ebc0efc904f97218749971d472843845dc9cb6
        • MD5 SHA1 SHA512

        google_analytics.db-journal

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db-journal
        • Size 8KB
        • SHA256 d708240000ca61827af257cbaff441d81026d74ead45514a34ed955fbb0886c9
        • MD5 SHA1 SHA512 SSDEEP

        google_analytics.db-journal

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db-journal
        • Size 8KB
        • SHA256 771fd0006bcc15a9e946f151d90ee999da75a95a7c0929ab932209c51ac5e44b
        • MD5 SHA1 SHA512 SSDEEP

        google_analytics.db-journal

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db-journal
        • Size 8KB
        • SHA256 ba84ef659db93e346a0b2a7bb717bf21224db197683bb3960681be21bf1ef4af
        • MD5 SHA1 SHA512 SSDEEP

        google_analytics.db-journal

        • Path /data/user/0/com.jb.gosms/databases/google_analytics.db-journal
        • Size 16KB
        • SHA256 e94ce3723b27e74e036f6900de13611496993aeb2c76843953ae03f35e998f05
        • MD5 SHA1 SHA512 SSDEEP

        gosms_subscription.db

        • Path /data/user/0/com.jb.gosms/databases/gosms_subscription.db
        • Size 20KB
        • SHA256 2088eb0197ea793e3fff185e14d22337a509141e5d841fc457a87ed147be7880
        • MD5 SHA1 SHA512 SSDEEP

        gosms_subscription.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gosms_subscription.db-journal
        • Size 512B
        • SHA256 fe08440be42e29e04c67f4c412cc66e5d496bfbbdda31423362eee34e6c6c0d4
        • MD5 SHA1 SHA512

        gosms_subscription.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gosms_subscription.db-journal
        • Size 8KB
        • SHA256 b68bacd2216933adad9de665810de2a955413ea702c559f8e4fa5ce6407068de
        • MD5 SHA1 SHA512 SSDEEP

        gosms_subscription.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gosms_subscription.db-journal
        • Size 8KB
        • SHA256 d7660db196a18393fc4f5d5ab1dc39febcf07d954a38b363c5de2cb309c2f18c
        • MD5 SHA1 SHA512 SSDEEP

        gostatistics_sdk.db

        • Path /data/user/0/com.jb.gosms/databases/gostatistics_sdk.db
        • Size 20KB
        • SHA256 5eacde45973b5ad20e67a7d1a6e6b804c24460b84e8919e8577f7ea6862ba68a
        • MD5 SHA1 SHA512 SSDEEP

        gostatistics_sdk.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gostatistics_sdk.db-journal
        • Size 8KB
        • SHA256 21f14b0be96225128ac5a67e3048e1d2d3eda429541aea6488cde95a6c051238
        • MD5 SHA1 SHA512 SSDEEP

        gostatistics_sdk.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gostatistics_sdk.db-journal
        • Size 8KB
        • SHA256 f583bd7ba855862653bcccd5dbeea6d084248d77e3887c7dddf7bed704f29e97
        • MD5 SHA1 SHA512 SSDEEP

        gostatistics_sdk.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gostatistics_sdk.db-journal
        • Size 512B
        • SHA256 a13b886eba673c976c48c30abc8247ca3c963a55c95503671248064045eb36ec
        • MD5 SHA1 SHA512

        gostatistics_sdk.db-journal

        • Path /data/user/0/com.jb.gosms/databases/gostatistics_sdk.db-journal
        • Size 8KB
        • SHA256 f0d1e2a7f30a017f17e5589b226567391d375e40375597ee8569ede182f4b805
        • MD5 SHA1 SHA512 SSDEEP

        holidays.db

        • Path /data/user/0/com.jb.gosms/databases/holidays.db
        • Size 28KB
        • SHA256 4d19813103c097040b5a9c7bfc2a3f8a740bfa51a443446825304a02c6f1adf8
        • MD5 SHA1 SHA512 SSDEEP

        holidays.db-journal

        • Path /data/user/0/com.jb.gosms/databases/holidays.db-journal
        • Size 512B
        • SHA256 9d0b853c46d9a333b9fccbda16c89e5d187d55aa8fda04d14a834ebdc860e446
        • MD5 SHA1 SHA512

        holidays.db-journal

        • Path /data/user/0/com.jb.gosms/databases/holidays.db-journal
        • Size 8KB
        • SHA256 f52dff7909219c6b2f5be288f8e4137f046e0d0fab9d552ed60a39bce57c3d1d
        • MD5 SHA1 SHA512 SSDEEP

        holidays.db-journal

        • Path /data/user/0/com.jb.gosms/databases/holidays.db-journal
        • Size 8KB
        • SHA256 5379a98d1bb10540fa76c838e328891e8162e6900ce9262ea12a0b961b78cc85
        • MD5 SHA1 SHA512 SSDEEP

        integralwall.db

        • Path /data/user/0/com.jb.gosms/databases/integralwall.db
        • Size 28KB
        • SHA256 c4cd6698465468ccbcd7325d81a4dff33850139640599bf8636a59ad5a50dcf7
        • MD5 SHA1 SHA512 SSDEEP

        integralwall.db-journal

        • Path /data/user/0/com.jb.gosms/databases/integralwall.db-journal
        • Size 8KB
        • SHA256 2763aa7e140d2fde96040fde04a98ec7e31d3c2ed54b98eadce40766e48be00e
        • MD5 SHA1 SHA512 SSDEEP

        integralwall.db-journal

        • Path /data/user/0/com.jb.gosms/databases/integralwall.db-journal
        • Size 8KB
        • SHA256 974f6c6174e0fb0facc75aeba898529e3a94263d4dcfa45366569839cb64947f
        • MD5 SHA1 SHA512 SSDEEP

        integralwall.db-journal

        • Path /data/user/0/com.jb.gosms/databases/integralwall.db-journal
        • Size 8KB
        • SHA256 0f52d5450b3a21329b7b5f99914cee30bfc3747f3ec3a9522fca21b5197b2247
        • MD5 SHA1 SHA512 SSDEEP

        messaging.db

        • Path /data/user/0/com.jb.gosms/databases/messaging.db
        • Size 44KB
        • SHA256 029179a8f79c9b0ecd33346f565494e18c5b6fd3ee9d663f83b8d11d04bf9a98
        • MD5 SHA1 SHA512 SSDEEP

        messaging.db-journal

        • Path /data/user/0/com.jb.gosms/databases/messaging.db-journal
        • Size 512B
        • SHA256 14e26bce55a482160addec92d49b3cb009ef0fcbed043173c9c16cd93d7d32e1
        • MD5 SHA1 SHA512

        messaging.db-journal

        • Path /data/user/0/com.jb.gosms/databases/messaging.db-journal
        • Size 8KB
        • SHA256 f95dc121974eeee8850fe57c72c4a9518c8aef7d526e98e75437e29416b75892
        • MD5 SHA1 SHA512 SSDEEP

        messaging.db-journal

        • Path /data/user/0/com.jb.gosms/databases/messaging.db-journal
        • Size 8KB
        • SHA256 65741dfc8f72b2e1167d32215e742fc4aaa93b3a5e953e97e233ea526c0f07e6
        • MD5 SHA1 SHA512 SSDEEP

        schedule.db

        • Path /data/user/0/com.jb.gosms/databases/schedule.db
        • Size 20KB
        • SHA256 ceca821e184a5ab551b31f8073a571e356a1e145547725fbffa45be02e146154
        • MD5 SHA1 SHA512 SSDEEP

        schedule.db-journal

        • Path /data/user/0/com.jb.gosms/databases/schedule.db-journal
        • Size 512B
        • SHA256 7056f920561e49ce1c6ae2041833a6c2c13b492900de6d6038dc39956b696992
        • MD5 SHA1 SHA512

        schedule.db-journal

        • Path /data/user/0/com.jb.gosms/databases/schedule.db-journal
        • Size 8KB
        • SHA256 993c1f9115e2300f16799c8d1b65a9768973d36b419ab7989e3624ac9d43ccc4
        • MD5 SHA1 SHA512 SSDEEP

        schedule.db-journal

        • Path /data/user/0/com.jb.gosms/databases/schedule.db-journal
        • Size 8KB
        • SHA256 f00d13add56a3f3f0bcda9083377790d994f800e8e9471daa4b3f90fb2b9cc2e
        • MD5 SHA1 SHA512 SSDEEP

        sms_interception.db

        • Path /data/user/0/com.jb.gosms/databases/sms_interception.db
        • Size 40KB
        • SHA256 b41f9d1cac662acaeeaa098f823dde06001ec2f4021928f4c7d2561a91b7f6b3
        • MD5 SHA1 SHA512 SSDEEP

        sms_interception.db-journal

        • Path /data/user/0/com.jb.gosms/databases/sms_interception.db-journal
        • Size 512B
        • SHA256 7393d59c2a1563b8b07791027e47b7dca909979b869a76d3032a370c00231662
        • MD5 SHA1 SHA512

        sms_interception.db-journal

        • Path /data/user/0/com.jb.gosms/databases/sms_interception.db-journal
        • Size 8KB
        • SHA256 762361f9cc4a5dedb87513f1a1771ad3677f5e3e92ba7fd32b329c4644fb8491
        • MD5 SHA1 SHA512 SSDEEP

        sms_interception.db-journal

        • Path /data/user/0/com.jb.gosms/databases/sms_interception.db-journal
        • Size 8KB
        • SHA256 9f69cd9c8f3c9ae597938b5bbc3bf6f1f353eb1ef46780cd24438e75cf545859
        • MD5 SHA1 SHA512 SSDEEP

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 573B
        • SHA256 2d86bfcbe1080ac29deb824e78662e104c3b4a359b5d8ce6d6a319c3766a268d
        • MD5 SHA1 SHA512

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 682B
        • SHA256 6e40d065a8225c8dca4e83c6eff04e86d5dbd012e18cf705cf898cbf853fc4ac
        • MD5 SHA1 SHA512

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 731B
        • SHA256 d98e4fc2e781452ea7e182c7b02f6f2db0215eda4cfc9c2446161734879b750f
        • MD5 SHA1 SHA512

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 814B
        • SHA256 fecdbf8b3cd395b7e213ef0b0b7161e595b79b638bd6be8ad71d8e772407cf80
        • MD5 SHA1 SHA512

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 882B
        • SHA256 6c43a463f5c2fc2ebd0e3e68a85d8bc8c8a5669eae74507684ba6112130e04db
        • MD5 SHA1 SHA512

        custom_preference.xml

        • Path /data/user/0/com.jb.gosms/files/custom_preference.xml
        • Size 1KB
        • SHA256 18a33761bc2ef718930acbc4db410a60f6c34b323d0d39bf36cd4e4818b602c3
        • MD5 SHA1 SHA512

        goid

        • Path /storage/emulated/0/.goproduct/goid
        • Size 29B
        • SHA256 0fe7bea8402546977914184e32e80e68e46fdc968208e50b969a7b97b0e7834e
        • MD5 SHA1 SHA512

        meal.jar

        • Path /storage/emulated/0/Android/framework/clrunpath/-936679160/meal.jar
        • Size 1.1MB
        • SHA256 123398dbbe734a4a602e5f2172eba1c7ad3a015260620acc812bbbd10915ed6c
        • MD5 SHA1 SHA512 SSDEEP

        meal.jar

        • Path /storage/emulated/0/Android/framework/clrunpath/-936679160/meal.jar
        • Size 2.6MB
        • SHA256 03e61f7d7f0960666cde25b0952e1db32fcaf94f151b61da388ea40d54270395
        • MD5 SHA1 SHA512 SSDEEP

        524

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/524
        • Size 7KB
        • SHA256 b20fe7ca7a7fe644affddff13c61c4043811830bc9a4876e754a69b46c308f0f
        • MD5 SHA1 SHA512 SSDEEP

        BaseResponseBean-1844

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-1844
        • Size 144B
        • SHA256 8f6461d71e98ad0f2ce35fa27a1807c429c7daf784143e5b904f5b91acf596e2
        • MD5 SHA1 SHA512

        BaseResponseBean-2072

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-2072
        • Size 144B
        • SHA256 a4598ea3763cfecf044114fc69137e0e040e037f37c9e402819dae7ed901ef1e
        • MD5 SHA1 SHA512

        BaseResponseBean-520

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-520
        • Size 144B
        • SHA256 d58bf6506c73c19f5f286eb61b5c94a2ad54edab0cfcbb5175a91a73ea96016f
        • MD5 SHA1 SHA512

        BaseResponseBean-524

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-524
        • Size 144B
        • SHA256 30eabf53f4efb8367f788abf697c0663ceb131b32fce9940c286bd78d90bb684
        • MD5 SHA1 SHA512

        BaseResponseBean-562

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-562
        • Size 144B
        • SHA256 840f700c23ac40d629da912dbff0242e1e06a065cc83fd0df9fba06cc0c90bb7
        • MD5 SHA1 SHA512

        BaseResponseBean-692

        • Path /storage/emulated/0/GoAdSdk/advert/cacheFile/BaseResponseBean-692
        • Size 144B
        • SHA256 b8267b920cdf10a72a2816cb52ec9e6b13f7bae8f97b1bf0810ef443a935d083
        • MD5 SHA1 SHA512

        deviceId.txt

        • Path /storage/emulated/0/air/as/statistics/deviceId.txt
        • Size 19B
        • SHA256 ce69f845e5456d24c20548200967921f713ff7d2349fc057ae3d7a4e2d959789
        • MD5 SHA1 SHA512

        deviceId.txt

        • Path /storage/emulated/0/commerce/statistics/deviceId.txt
        • Size 19B
        • SHA256 feb7fa501b3e6626fe55b03e32d68c2ee3f088212345c9d2a1e8b9e0e4326e7d
        • MD5 SHA1 SHA512