Malware Analysis Report

2025-01-06 09:16

Sample ID 240601-geya8scd97
Target 8983ada140ff2064a5368f37280438a8_JaffaCakes118
SHA256 02bb61463e6488ff0e0d796802bbf4e6ff7a3af5e131331dcb8bbe75a07c6c6b
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

02bb61463e6488ff0e0d796802bbf4e6ff7a3af5e131331dcb8bbe75a07c6c6b

Threat Level: Likely malicious

The file 8983ada140ff2064a5368f37280438a8_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Schedules tasks to execute at a specified time

Requests dangerous framework permissions

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-01 05:43

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-01 05:43

Reported

2024-06-01 05:47

Platform

android-x64-20240514-en

Max time kernel

175s

Max time network

151s

Command Line

com.appsmart.delivery.darbarmuenchen2087

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.appsmart.delivery.darbarmuenchen2087

com.appsmart.delivery.darbarmuenchen2087:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.212.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp

Files

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 9ae9491e44d09ff6567b72bf7def9884
SHA1 9f86da2a7982b068989ef956838a8e393cf4776f
SHA256 37014eab1a03276cf0d745b5fdf77383cbc622e11d59fdef740bfd2b234c7b5b
SHA512 8afdb964518a481725b8c5232ab593de679a535e5e81f0273019296fff09419153152f8070801da9ceee75bf783c4d538d954078c199a218ba95221759456876

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 4a146390ed20d8732f08170adc440b09
SHA1 3a153e9611cf3d1fdcf07eb2d2a4e0706e9074ed
SHA256 2426ec0325055bcd2f98198a8846c0e1ea7de46f7787725c6ed716641d60461d
SHA512 3378ff1241cbd33d2611150e717b0bcd8f70d62cf339cc3296b33ea5f2406232c6f46820fb40176df228fa00ced9bc44d92da9cf5bd977a4bc82df3160984496

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 2d235253194b260e703d81c68045b9ed
SHA1 eddd0a93a161b2e27ccdcef743f2df1ca8221571
SHA256 f4998dd8864942e404d91ec5d032730bc1a9018dd24ca880ae683b6b42aba62c
SHA512 a4c4bfab556562dd5289a6571e2e5b3340e26380efed2dc5d799bb7c797e19ae8f6fc6274b8aa69800da306ccd2360dc2991131b319f671647fde07ac37a8040

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 b3a487340927b40f0e72429251f0455a
SHA1 fe1e5609132403a6200a7e05cae991cd1a4714a3
SHA256 f194782992be4aad4ffbdae666146e296db3374f291ff3cce06df53de5ccab65
SHA512 336fd054de7f4ea18f54040a392a59ea1983a458267c170ba1687fec9b6601ca8b051792c87918a44478a7254df7a229da3b8733842ac8bd509d507120263385

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 6855b98f676a85b8cce73a9defe124a9
SHA1 12a6bd9001ed7d57b7be99191ce339021c122751
SHA256 f1fc7c55870b639376854943126f507e3afb49e2a9e4a676e70f1af8fe5b1567
SHA512 5a22c9d6d02a7514412a82e5a9590bf3f995622e4a0ab94017159211268301992f14c4b96976879d1e397a50abff828f7a2daefec575ca4d527a43d5fd6a4961

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 3d0fbaa526255c4f6ca5150a78a1e431
SHA1 151812571f00e034e070bc410c1811a06f1054c4
SHA256 b28fed914e22977d19ccce0b14d60c943b30b5dabd79fc615ddf25228f4f527d
SHA512 9e8c0f29cef1e4ea0562aeba83f60066e49ad0c7890d958bc7475cb03e5853a5ba442b76b1314f7cd8ad3e1c17a9fd1e1610dff02f9a8c3ebddf3958da9429c3

/data/data/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log

MD5 1089d01941a5756b3e9cc964376248d5
SHA1 e45d4c7b4599fa1150c4910c3dc923b233913b36
SHA256 b67e69d14e780e5b8683566de63cf4d3ec88a73c2e1e885fb31e31c3abda2b47
SHA512 599ce766836ffc80013938ec9f1ff65897860e1b2750bf4d04f43096c48e9592b0fa77983ffee677e9448a4610cf462d0be7a7357fe1d7434aeabc380ec79bf0

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db

MD5 8cc35a645cbe3863571ef04ea7381dee
SHA1 c84f4393ec59c3a1ec66134f1a53ed2f236dd0f2
SHA256 2838c7d167a933a7fdf8bf5bd4d873b3340748f35d80d1ce9b6a5139c1bf2954
SHA512 338247b17fbc6ede63c6ae8725e149098056d3f3e8203ca9ec150fa779164bf917ae2ed42c3a32b17e4fe13c87e37bfbf15a2396d29ef4929705408e0e4f126f

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal

MD5 b0bbfb964e42465075b5798cae98aefc
SHA1 5a059b8192dabf56d5dba1ad2dffe5fa1e7bc82f
SHA256 970c03f1c7738c9495aa6dc924cdba4fff8a0c5aa120c175ef61decebf087743
SHA512 6aa26306c3a34779c9dcf3388354a94e31ce372329abb3bd674955092d2209512ad2aa76647c6ad97548b7a04d6d52d27726503088902a5583f79e1f0a66f508

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 6e95273a8baecf07ed9a8455ca4ca589
SHA1 9d3c48fd75839aff476786ae8fbfe1a88e79204b
SHA256 2730851c7fe5ae074bba59dc3e1ee10d8184d3ef4d1d48c6a4073826d0c01614
SHA512 c1f9ec5d878091fdbe0c7508a59b2d9659bc31af60b01efbb0cc40e3db04ebfbc3d262d7743e54dec51f043c07264788cffb48122c862d13080ef2b17ae297dc

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal

MD5 1b93236fc7b6df37d9acc7f708b3e3a1
SHA1 b291b952a8c405820a645a1d95f5ecf7319e2b39
SHA256 68d86eaedc53f7a0e263db0617a4bf86c3b29e7822e860bda3ae61c2459180e1
SHA512 304328d11a3dbab66abd79e7ca74916ba95fc8a7147f7800f8667f9e092b844548d301945a66531d2bf3bf6c1c0c89e68e57f8aa26665faa51ecc26b149907b0

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 f9c48db94235a8b17a6f5cdc5fccef71
SHA1 d2b0e30b8c00623de604775e27d0e4e1d4bf2452
SHA256 c0444887060448196b535797f206429c34d425bd15234c77208966967a3245b2
SHA512 bc28b73b0b71741c7a164ccc5020033efebf2e52064f5156943dc6efb270b19dbc84c098a8d8a4c38bef6e4cb72c21ba1d0c888c589e3afa86d1065bc2dc10e5

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087

MD5 295f07b6b8a604f504f6b5bec76c4bb4
SHA1 0fbc22c1f81710ddcac06b0dd77d4de1052945a6
SHA256 05d82823a2eb050e18b865a864361c16c826b41172da7fafcc6e01051a10572d
SHA512 bb02f672bffe674bac6bed9a2d7cdd9679fe53bbfaccb6b2209064f135021a7fa8016324e1d35349be05f6469b6fef41d3b1d0de6d5bc43acfb6762112424e35

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 7d0d931948c0322fe215ca3207bc0ecc
SHA1 13551f0073d748d4ba1ab836771a3b7ac499de45
SHA256 ed25b3f25731389dbf6a7f52f6f80e6b139cf823ad2c067d5f01d153e856eae2
SHA512 257fe2342f9574b89b4b83636455f22397267b99959c9bbdf703f68762deda9d6aaac31259808588c3f5ca30b9cfdc20c40b2656337fcdf6a61e52d7057a6a9a

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 ff6367db746fc31fcce3b12225cafd18
SHA1 e3baf8ed27ee2197a4931568599f26b1048127a0
SHA256 3b6a6c473741e7b4789dbacfc6595d451b1e16dc9a7014867f9f94d20c867348
SHA512 32d1bc4bdfe757b1f0e55df7e9fe29ecc0fe37729b02f1213877c6f4bf1fc799789611e7157293ee9782d45ebdc4e32618e1adbb5b5352be9b79dec797275819

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 d30f695a8eeff1cd0395d987302a12d4
SHA1 8c6e31c0ff07185cdc67b2bb6fa0781e47130b1e
SHA256 500d8bcc8e4de641b9bce01dd6c819d94f06081749ae59d83902c7f036848269
SHA512 9d540d181734d7706cc92f9ea82b7ff075030e6e44aed271468451b176d5deacb299d26ccd9ba3ff5a396bae58cdb57632c1e0ba18e4ea2497afb229cf143167

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 566d5989cdd406b7717c0eb25dbebfff
SHA1 0283fd208f3c50e5dd5a89358c1a3817b3a7987f
SHA256 7795e2945c3d309840c9a17cb3f06041f162d73945f16acda2e9289c567da617
SHA512 be80bc840cc575248afb94351404f2e2a0015623ce5c96da241dde29ca240472b2ae0de57984561a629ada0f57af0e125898f8df80bb12d213571c97f286df51

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 d643cb250a25f62600f9550960fd10b8
SHA1 6fc20e95f56a8654965d39484b9f87f7a7aa0d61
SHA256 a42dc2dce541825b5c83317a45eec480c17e72df49fd6186e9e364438a904821
SHA512 453df7e8766370b9d5e43bbfc6ad122185c919163f91397d1c788a2a7802cc1fa622343d5587df960e22dabf00d70eb26444b67c5b9e65ebd169daf1dd94b6e3

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat

MD5 0da732567413cf7cb70a370c7ae8dec3
SHA1 0a8c74b881f7da7ca085d87cd1f3d34ae6ae6a17
SHA256 44a07758f9244d1c8dec516b5c637277cb3f1f5f048e6bbfbf8da23c23c579de
SHA512 7a19ab2b808b6e08fdd35e5e21b6bece3f693d30739138565cf48d429f94034b7501fb297124cb854374d8e579de7c0b046f42a7e6d4f877978b84c7592bc0c6

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 3ce5cd73f30d689b13e8702f8b123a33
SHA1 3a9520977e2e4cf98010caafb0c909c3b597caf3
SHA256 cdf692cbb179d5a8581a9c99983e903f80c053c23104a1be8c188b08ab2dbe03
SHA512 824b7dd1cd675d21f24282b635314033fa9fbac2e329f2287d4f1224d44ed94bddd6d974c537e19aa08f0968e69755ebca8036d0ab98847216f2568bcbcea650

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 16304a11394725a7e47eab3e09a05323
SHA1 788090da82a34952ffa79198d5a802a016193e45
SHA256 891a428ef4edaf4dd721ea45bafb23fc95e95b8a0d1422d2d6505bcf76bde122
SHA512 a758adecdbcf8f71b7406242012636f6a724fb3ceac905d8a5540d0a1981d51cf50d57602046eeaf51591c9b9d4d8578425fdde06493822ff177b8ba87b1fbea

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 19fefab550d1d5e15ed57a76e8b0312e
SHA1 5de7301289b903fd1e4c5325d1aa8464fd689041
SHA256 1ec4c851d73cd0b40bebe1ee961c02ae34b01f19a9cf6fc5231e47e5b11777cf
SHA512 62e952e71d377b87082d69001b9f445711374b03190e3b81b818ed68798353061cb8031e92d6eabb10c8aed5ff66e9c33983f275435651dc7722802d726db83f

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 3bdeebe93516f66cf494013de2d03c57
SHA1 974769c7a1ba956d22e8fa9a812fcacfc3dda377
SHA256 ddeb5c7b08137a8804b74f2b05bd1cf247f667ef95d2c98a6335ee8e24dc8983
SHA512 3dcc957f16ae610a695e5143c22d768564e84265a1f4639335fb10fa93b03997a65acfc23ce3753f4e712ddbccacfe60e7be550ea0bf2f553ac83ef02db7cbda

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 5cb99977ac5c422f1ef584f8769ac7c2
SHA1 c4fb75756d06d201197c52cb57fe41cdc278c2b1
SHA256 4e03c3c43581e8a0c9135db12dd67716f8d87141a3b636c2d7e3b5717e1cee3a
SHA512 f8786379b33052002f91b1505f4fc0661cad6168a98bf48716005d5dcb4613461fc6e14191bd76ef8f6d6229391286edf6a7863a2189ecb11946c0900a137ed4

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 6bdeb28ea9653d018aff6d704df96e66
SHA1 965722790a232d5867122db776d3e4c3d33c211a
SHA256 d1a53dd27aa923b570c8b6fb91187d10df5e792b71c52472bc3efa64fe0ba161
SHA512 81c61cf18cf82db315853b0553071c4db36c8f3aac6681924df0c917a475d3d036bc4fd722435d35d2f68778f7a628fc76608ee9ed65cf8ea2b9b4ab51fde707

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 145bd8997edf190385c9514ed7d4a830
SHA1 3b3130f73513bad76cb4cfb7d65bb95d8e12c25d
SHA256 9ebc47184d46d0d447610f5c306f796d5484c5c5fbdebed327c6d276d8c9fb8e
SHA512 d7bb2562adeb7842f9eaf8f869aed66f8778ef92fed49fee5b1c9c9bd937abfb3687e16a36d6fc05b1b4ae24203e14172e8689a5bbb6c035472f527985fa41fe

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-01 05:43

Reported

2024-06-01 05:46

Platform

android-x64-arm64-20240514-en

Max time kernel

179s

Max time network

151s

Command Line

com.appsmart.delivery.darbarmuenchen2087

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.appsmart.delivery.darbarmuenchen2087

com.appsmart.delivery.darbarmuenchen2087:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 172.217.169.42:443 tcp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 172.217.169.42:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 f8b5b65adf977b283038585a5ab44846
SHA1 9ab36e45803029283ebc349196e74e768aa2f70a
SHA256 b178c5e7a3394383ea529c498a575040fb27a5abcc400a6612215a55d3ae0e65
SHA512 79547115ef33947a8da17922cb78b85957e1192ae816af8907dce5d511921d470208373be46613e9f4b52df3e0fc0286a9116e5d25977a2da3f17f2ac19111d3

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 85321d5e4dc3022779d2d36e13eeec43
SHA1 3dba5988018827b91eee6af054ec7471ef31e09a
SHA256 3b20f3956596a4baaed4dc45e8d2c73d91a1c74ce133b41074f6f074aa7a2791
SHA512 31dafd106b3db7e09b7a4d0081e18fc8fd3f69b2745eba5d7c76d89e63aaa575b0ecd43d4f540ea667c42bc7a9b7f1cf66b39435187feefcaac9303f02951f83

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 5f509d7531cf26dd3a19ed54d1152b8a
SHA1 28961fee1a6435bf9569ba68a689338febb725c0
SHA256 ae3a8004601a854bac3c595da6c5fa28f3383e4c9f08625c952bc4e032d39304
SHA512 6e340586fa83d046cc8ccbcd97f8dc45c8e4bd3e139f9839d31c6a458e3e9a44db2687acadd2bdc68d93f4d6655780a6461787500ab86e2e5573438d8cd03db0

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 cfe56b44911b58e13d57d5420c4cf20c
SHA1 6feb67f6266b83f4a7e87b9538917916aac4a497
SHA256 4e7f4965136354f737fee36630bfb25ca110bb0e1959806cff738a51cb655707
SHA512 0380ec9323e078dde087cb7a6ed5450cf85de79311ec992470f79f2d1070b8a5ad411f5156f84261f4c0e5cdac02848175f65c439c43deff85983c7269ea19d4

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 a0fb85eafd3cb4e9a7c24d7e814b05de
SHA1 feb640b492c8def983b3cc649529752cd187e82e
SHA256 2cbdc3f26293c5531f9e54bb10600e9537e0958f3a712b61b401617c957db7e2
SHA512 99c4b26a8c00622001f211d1d93be2ac6241192881730329b835ea28bffc4a3a76d7d40511ec7ba415eccf229e9957732e7e008bd2c662f06f6afda302f49cad

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 67b6b327b7408ac658d60c4e1497cc84
SHA1 90884579c5c21f09a02afb5083d3e7abc73f6fbd
SHA256 66e122f45f0a918033ac5a770e90fa6f639f100dade10276f1d7c0f044150216
SHA512 f5d30b49887318b0cdf199ea8ca6cee34ae8f27a98a4f245431696aa97c9d1105f32c6c6c89187fea38b58e087e40c3a1e96135acc555ed6b0c4dc74162fcb54

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log

MD5 40053389e9d11bbc87a9ab7b9821180e
SHA1 e0dd7ca1e46bb5c858442c576b587651576a109d
SHA256 f25684cc2a07f5a3f2d0439189828e9916a9d3d53c9564fe55fbcdee1e7a3eca
SHA512 42bf1577b274bf2c68e14b6176597749afdf63a5865c04677f9b5668a5c08e313ef05a73afb8f3fe62b89845dd90b55ae609f048fa8d21de6763f1ac646f0c54

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db

MD5 deff6ece4d252f35a1c0dffb71791e72
SHA1 12a9119cc72d3f2d58802b44942037cab61f4a08
SHA256 c9489272ce08a7c8ca928df81784add37f8cd66c1263443c50e1dd42581ef80e
SHA512 682e9b53e2a38ca8bea91b20bfb9a2ec04fd8292bcf7c0d7c74efed776470bd1e9380157b3846a040b45831e0f0f8bbde94b72bc65524801046dd588edcd6cd8

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 b119b05410146fe3b772ba89962cf277
SHA1 de558c036dbe065e515db0cd70ca9269ccd8c3ed
SHA256 24693f576c2bf707112c4e4e8187abe4daa26690de86bead343956dffd8281bd
SHA512 bc19b6a695e2da52edce5e0af8a5b83b245afba863e288b5abb8c8ddff56c44c17bcdc75ce40c5610a418b40b33736143817c99ab7e02e8069c08dd1b360d5bc

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 75bfd5cfe84bf031b38e42ba16cc2c2a
SHA1 ccb3578d3624e5c0539d3e4c418dacd3a0dd1c9f
SHA256 5bb2cb280304d53f629ffee1d6e9fe1e5c170efd7fceed874116f4c13d0a39be
SHA512 2f46a8cd6eefa567ad80616b3a2b0385b1d46f7144b2d044d448e9571300d0a1b2f615f3f8f53e710097757506e13290e6b8784e70fd66c320bbc43a430b006f

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 9f3f2c85ca94f89b1ec98035b199bc26
SHA1 ab23d86bdb6a34d9550f72b78a297425ff7fc63b
SHA256 89274ae81ed50b73e181e56e01bfb51d12430d4805863d37a8cc00d2406e1d84
SHA512 1cbf459b28c1ab8e14954a29c5c87b3e047bc6eda313e8fbcf549ea19cf50598fe4e7b4c818fc62f4aed3a260e3c6ae43e67b81b0790aeb4b226e91db59b5491

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 aa5a5b03d2bf524436d455e81cee1e4c
SHA1 ecb7a30f894678537cb1cd6e7b204ff5243ad729
SHA256 a444ce8d9e4ea83b36ded3e3181883e406b7ed70a3b3d558afa15f294894a39b
SHA512 1fab0f7214c559ad72883b2a84098da222d30342e89778d16382754b09edc9e1b1ada06a6fc800874590848070ffe5442be4ddadc21bf600901332167b35ad9a

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 a306aca242a9a83d67758c988dc8ca26
SHA1 a4f0086b8767eeb0399deb84974ee387baa1bce9
SHA256 eba6d43aacb17144c1d094eb78c587adf8597d92f23aa63ca8386c69263c0b4d
SHA512 ce701accfd5b071758b0040dfefb0539986b13fa1e27a2bc70db8639349b14cb9b19d2378f3d1b2c6fc70358e7afeee1648f40b6a09e9a4822aa30b6afffd926

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 ad31ed87979478e10e3255b0f87aeeaa
SHA1 39ad988807e10db2edbdac3a9dbb9862455bef3e
SHA256 f3896e13db5ab86ee2183059a572c90fba8ba9e4021cc7724fbb9ee56d7c8c74
SHA512 3f98b3eb29f90d08d9c060561142b3ffc8cc90e0098f75c6d8f73ff069578d118fd3c2e67bf4f73545f8b546a183976ac253f2105fe0bf88ecf83be728fa9ce6

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 bf7a5fc349b870a57338d368e8414d77
SHA1 f8e436c62048cbfa5c46dd561979b13e9ab7ec4f
SHA256 753386d5fbab143df57980dca28764b105f8cc6cea22e8ab03017831930c8030
SHA512 9457506e72f26695ba244bceb810f77bd4e97aa5b8e7934b36d4a0836268f78b4eff0f26c7ed3880f3aced6d907a3c82eaef881357c8b4eb9608ffcb7f663aa7

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal

MD5 19fd674f1014a1d6015f88fcbdfeced2
SHA1 db895f247764cde6485dc6276bcda2a3ceea2b19
SHA256 ab7e4bd55733ef114156a11c7f85facb12b272887d070e201863f505212cb48b
SHA512 b6c32616f022eab0ce962bb562a1762e4b5378aff635345b426f013a67606bb39332cf3d1d4f9c5c745e5a29d034373940acc366f51007d5cd9b991d86a4e9c8

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 fb06fc04ba7db369bccec6c71a2b15f3
SHA1 d3197166fe2be5c41864dca5f3d00d4803115e8a
SHA256 0d072f0d0baf3d1af95e6ff61924b0f5fa2813b33f505388936b6f709a12c874
SHA512 6349d2e83a1038dd7c83fcfed1126ee189f226f58463967e2fa293c30f846eac8a119cf82f65f879c3d2063f99090add9c6377382c74970d2954be4fb06c0454

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087

MD5 0802c90dc80e7080518d0394443afd91
SHA1 29fde14f0f4a11e63ac1c4421a15dee98da17cca
SHA256 cb407c3661cdf6bed0f715c54761f92986adde7edb77447d606f823898f5b5eb
SHA512 78c0804bea32f275c6bbc995fd8dad6280e11e584c619aaa93ac7abdec25414febdc16df1ba077de9194f86107bc620a1d6bda8c7bfb5b15132a66f1ef74a4e6

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 b6195201147a9b0f8daffa603bbffaf1
SHA1 1c78c85062373d578bce9bae340ce665e4d50c30
SHA256 79b58fbc5b1fcfb50c1e4077f0238bb0398eda093e1a182712e4ec9ce674c7d4
SHA512 30722b532fb9883756b92fecf5cab1e90c91455eff3406519b6f8395cad6daa6b2aa8efc8f9049a1fd0f8b3eac98311fb9fd6cfe721151afb9f391cc6dadffc4

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 53ed659064f8b0a684dd40670886e60c
SHA1 f485b3bc1483c7ffd74beb86ac1e2322ebf65aef
SHA256 b40bc8c60db80851a1a1719ba6dd56c253ca027adaa1a927015040df5b36850a
SHA512 a0e933855103b8bfd4aac99a021d876aa23ed7d607dae1bbd7c46476c6fe5702407744af3c816577d1f3a768e93079c17340687d3eb2006fffc467ffbfd45505

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 3e6d2f1ba3348fb973cb6d6582e45a3a
SHA1 4763ab87ecb94b28a5ba4212953133daa75d57bc
SHA256 2e9e974dee6ce4383aca8e54d5079d32fc6c957793f44ebdd692f63a86dd2b99
SHA512 1c4624d208a36bda42dee1ed169216d32531375ca2942fd69c51661e2fa4830516e9a88a499891f04922b187659687c5ee6ff9c6cfa1bf4942366a84a9d28d48

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 52936ce81d422f42db147528d688fed4
SHA1 c6cabbeb5216ddd2fb0b87ce38f6c41748541337
SHA256 6aa7ab3c9dae940ac61ce983db32564332a5e7255cf196a63a9033d6ac6a6543
SHA512 9dd389cd934a074ee7ddd30b0ed4f04cad30c9ac5dfae3ef92f452cf77a3225a4989dc2b02de7587d21fd7a4820f6c02b79791f94c0feb0128955691a3cbfb1b

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 343c90561b7de5f183fc07b6c787c5cd
SHA1 dd716f09e3653d4a294d41481ddb7d54c11f3ba0
SHA256 6603cebf25d47252534e74f126de971769b3f6b007c5a6655200990e49b02d6d
SHA512 8cfe51fc561f08f97006201d6d54331ab34eee3e5b55bdde542c8558c7db0acb0898275b32bf69fbd8725c5ba9e1cdfd2db2fd5164d010d927e802544b3284e9

/data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat

MD5 3eb3cf44dbfaec2f32c18429788217ef
SHA1 ab353e3e3688696535919016858c605558082b7f
SHA256 c374a18fd20ca7e5692b749674036ec861e49cfaf66c987a9c9fd1f10b7e9556
SHA512 bd9afaa9960a9acde0f064815226cc090954fa4b738a09e31afa487dadf8cfac6ba3be6f0ada267a086d238970a6e8e607f74398968e25d186fe337150d829de

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-01 05:43

Reported

2024-06-01 05:46

Platform

android-x86-arm-20240514-en

Max time kernel

179s

Max time network

131s

Command Line

com.appsmart.delivery.darbarmuenchen2087

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /sbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.appsmart.delivery.darbarmuenchen2087

com.appsmart.delivery.darbarmuenchen2087:Metrica

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 arb.grattomania.space udp

Files

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

MD5 da79a878a8b6da40db4a5f678d3b99e2
SHA1 f43e4b7c4c748f0f2019e01fd0194a6c2f828a1f
SHA256 5ff51b6f6f23a910b8018c396d795217a315c6ab13e710b89f82814982bb4942
SHA512 5b16b5ed51c3bcef433ade3b9edc3f65fc584ea618cc333e750a5a61d0056114a204e823f71be800c6b321c73af68a460fd96d1d3802c561a49fcd54b7aeea50

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 98a86cbe5380c6a8d9cd7a2ca0dee380
SHA1 5a01255e80662ea53879c213bc31f47752cdae64
SHA256 ed9c3e89712c4e04ae2bb1560053f8f26c1d965529d5ec9f8104764d4f987c39
SHA512 90d703d736bc11b3c0de1874795611f6065a5bab13e0ac9f2829f0cac4100fe74c080054505a05022ba3ea4ae6c5ffd8cbd9871ecce08deb531e53f3f81796bf

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-wal

MD5 837d6fee309d86eec686410f150eeaaa
SHA1 f8c2b995c2481edcdd208295cb3ac6bb4b866d54
SHA256 cf49d9ad951620f64d25f461ef2d7dd916816f3ad2e3541bee60a6649330d025
SHA512 d7c6afe719a36e62d262bed3923674e7047f2916e71b33d74aa9f4ad165c9df09af6d2b4e081f7e9b88a7576b9aa151c63f5c2e2d6ae611e6328c916bd60b364

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-wal

MD5 e35a232b302c3d7b10b6ab8ca0b58ec8
SHA1 8d28195754a8e9182f499be44e2244c8aac4ebf4
SHA256 f27ea79f3f490e9b091634abd1382f340dfad6367c7da1436a34344b50de890d
SHA512 fecf54341725f4b816eb468e84fc4ff4a3bc0b105ec79d593142d6d5b1d98f492e7dabe9d7a19b383ba47d553ccde6ce890225a744c2e7a9b9b7f308367a94cd

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 44def4f6e42c3ec63f229d23af8c804a
SHA1 f5956d9295778b539bced03215343fd3cf7a9dd8
SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
SHA512 a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-wal

MD5 908de5f1d0956d355f1fc41f1f19ed0d
SHA1 2911f807579abaa0da95a1664cca1c52a9190a3c
SHA256 859f55d196e7e0ee3d5223495e25043c8685fd416aead2569098ea13b3275ace
SHA512 aec9e6896063dcc8bdaf3ef5196871a91243e2e35bf09a9f02338e213935e433e2cd0c6c475482efebad3bab9fda349988eb0103fe9181ed5b1f4541f96d6b98

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 517015ccc5f3b94cd7f7da42cecb09ae
SHA1 70a7fc65059aca9a72702dfeaaa65b06635a37fe
SHA256 67495827bc3490799da336f48ec93dcaa37bba476d351441f1ae7dd025b0f2ed
SHA512 1d48544ef77a3b865e202cd6de538d83d248cf53763539bbcbcbea3d8b18399537fcfe04e680faf01f2500614f5827a0460c1ccc696a390717d7132e8a148597

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db

MD5 b5c6b81b7be81705d3032b5431ee2a7e
SHA1 62f06693998dbf9b8b13cd9319b80e0e44b63262
SHA256 aef1d960b57ae9bd480a8b8ff99941e1972a2d4df38a6a50a8b8bd9fcbfc1190
SHA512 fc898b452c3a5f778ad7515b1e96c4c847a85ce991e08b74542a4a9a42552a0309ad1b1ed6d7e654cd79ef314b0e3b648093c724c0043139027f8b57b7eeece5

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

MD5 efb8d3cdb7b921f576dc306cd3ba8b10
SHA1 521eedff1ebf4068e1cca4ac41e09d2c2823c407
SHA256 f57a9244db947f76cb53de9eb2bfd973b7d86e61d67ce57bf3d92e1db6058adb
SHA512 f2a415d04b9a373a4388b541d7a6d2e80bb250833d87afcb388e1e4049b12282fe62290104eefb2cb53885ef9b536465b4201b3e52c2dc00278dcb959ff232c3

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

MD5 e793937583e0e0a493924dad73280c7a
SHA1 074002576c48c30e03fd9231fc6f6a61730d3030
SHA256 480825025bf035a4882cfbc9dc2c398bcb2f76f23006a0231d119a60fa19f448
SHA512 8e7e12a237f3e57271f085b577e4ce0bc102c61115839f681c74100f2ead35a9ee762efa56a9ce5743b2c94fda20816cbc3c50663341cd7e7555b82ae94734b2

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087

MD5 82349664fdafe0bad862b3bfd44fa7b8
SHA1 9616b386eaec55615fe5776cd14cc6b9e5b08476
SHA256 560489ef95c3e04c0a307fb1e435244fe6abe98123fd8b70b57fcc50b5a97c89
SHA512 a4de0e9790855a7ba931ab7e4ac3d5e12892aed8366f962671bf8b91b2a6e6a620aa31756971320c5f02ac1bc18ee56ce9c8c87d9e84acd15cd5849039803e22

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-shm

MD5 dc80460e0ae4c2256e79b2a6e83a7b29
SHA1 ac668f0a35b16ede1dae4f594c26938b67cd9b9f
SHA256 50ca55972cb541cbff51d8cb3512970f5f042f4656221ef710410fd9178a953b
SHA512 0b0fbe3ddaa9a75d4c4bdffd4c1ec15c9815bfb3d3b6a7ae7e404c162c0605e24b24272e23e8be77f3bd7422aa64ff3cb241072b1346c30696597b06594c5e30

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-wal

MD5 633781969d6b1f9ba8b97c990cf9d8ca
SHA1 2939535847ee6318afb84f1c4efa98acecf88287
SHA256 0984aaf1d68feb4617c42a8a5f066528b8538dddd29479a582cb48f59e96d47b
SHA512 1c8f3caa7fe5ee1aa2cad408094ecf52c83f5d7b9e275427d05194cc13b7f2c37b6a0576c20d671d94c1444e4572950ba89eefc1bbc72468f4b2b7464951fd95

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 b5c2136da22520689c6f2f0e88600675
SHA1 a7be88a856f25de9fc64c0376fea89903d603fa0
SHA256 a7ea6634c865766ff45d26f50e6cefb7eb91891d5c35bc8cff3ec4b3e051d615
SHA512 89bd15ed03f56ecd36f34b48e415e0a9fa2bbeb3cfd45ee06e36f8a3013e363c7540fde2996a7e803cf4ae110d213d707a0cf170f67c9e25481cbb9f96d9fe89

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 44ebf278bddb05953d25790cd3c83867
SHA1 5fd212e4b5600090bfc767b9aab104fbaf76b3a6
SHA256 421b1c7c56bbf34f241ce2766fe5e812d4f1d85d9a7c44c23078a925de6e244b
SHA512 e2ac165ad16c82509c473b9fb96b8c2cba5dfae85c4b18a9512b698b2ad59cc9eaaa71ad4025e7e8ec0ee49f2d8004e798f0d4775757a55ae8ce6a4dc785eb9f

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 9834d9b3bd6dc82ffe85662c25894e4a
SHA1 14c18233b508c905875a6795cdcfb1205863ada9
SHA256 f0a70ddb36268ad2a333b597724441d0d5127d3775e303641212e236aeeb90ca
SHA512 e0cf59ca357f6305fdca7f485d419e0c560851fc537383703adf74a6cabc9128465a9a2602bd15cbe53d7eedb26f2a9de7af144de1b4030b5d1a4e7378fc8456

/data/data/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat

MD5 0c5a71c6c21f9e4bc46891ad32ae9c0f
SHA1 ea6feb20af4c0edea21a10403d4b50c265bc2b7f
SHA256 0a027c58f0241c2256e281ef213422a99f7e10ac285a66a95e059510145244a4
SHA512 88e6f187af1a56c23a371c8a73535d3e548326a5d9fcd6d8444fb24684a58ac92e99d8616a9498f24eade7cef4d64f7f30760e34b33e32fc1aaf49acdccc5482