Malware Analysis Report

2024-11-16 10:46

Sample ID 240603-j6t41aab78
Target 91166d014ba911eed2e34efbf2bedfae_JaffaCakes118
SHA256 5db8a8ba679ec72512ee4cf8b4baaad9ebe1276811e520278e8f8aed023d890b
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

5db8a8ba679ec72512ee4cf8b4baaad9ebe1276811e520278e8f8aed023d890b

Threat Level: Likely malicious

The file 91166d014ba911eed2e34efbf2bedfae_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Schedules tasks to execute at a specified time

Requests dangerous framework permissions

Queries the unique device ID (IMEI, MEID, IMSI)

Checks if the internet connection is available

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-03 08:17

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-03 08:17

Reported

2024-06-03 08:20

Platform

android-x86-arm-20240514-en

Max time kernel

178s

Max time network

155s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
GB 216.58.212.227:443 tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
GB 142.250.200.46:443 tcp
GB 142.250.180.2:443 tcp

Files

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 11a18237245e4824a5518015e0e90445
SHA1 27119b5a589a6b1aa41bcb340d277f9397ac9589
SHA256 6d59f2f2dd4970a8f33311a76abce8e73ee073d3f18fe6e1f6fad875c6a835e8
SHA512 dc97ac3245b2ad1136710cc117ac35049cf4849fa94e1a8165478deec19b10f8a9d8cabff0248097de118b5beb31f7648efacf9369ef4ac0bbd5881f6bcbb0f9

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 62c46de5f29a051a1dd3c1160e9453c7
SHA1 a1e12d8cce62b55bd3c533fd883898021576cab2
SHA256 3ebb015bf8356a02dbcfeeacb094329b4ada2532dd35269dc2d83679b7ccc383
SHA512 fa8b5639300968003cb330e234a4f2a77796e40e51441b75da4d191ff53d825d002297713acc4b018f2911f4a487061c97f10fa6092522fd48553e209c9fc621

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 6feffe180d93bd41732fee0ea9a7486b
SHA1 b7283d675ebc67e564ce63fdaf0e67563fd008b7
SHA256 d0e8d773217450370e46263f5ff053634301bacffb2e30155bf364e8e382661d
SHA512 fd9588a2e9f4815be4b31359d561e154507acea61b3098f9877a64dda2a5e43da3c1e87af36ce2a3605f87cafa22d3b3b6b7e98b8e99d6ce150f5d23cbdacabf

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 1f630113d156d31bf55c8a2c04740729
SHA1 a0eed0a4859cd79d6cd9ca879a28e62bd7ead4b1
SHA256 b31570c6aca5b115cf4ba298b617155d13952e4a999eb418c6e883c98a996229
SHA512 a0b5fcbeaa14fb55c147b391fa8e03d847cd289cea9897a6c1060d4015801aefc8571e1d1cacff8c3bc7d55c7eb67839d3c7c9170017a051e2477c632a3a3082

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 06956fcd61dde81412cb470eaaf15574
SHA1 d2c4ce7f735d5f7d834928e5e1b1e635d1edeed0
SHA256 3dbf28ea5983f0dc2d1f012b666219bf75e7e13ed73de897a9b68cf6bae2a20f
SHA512 8116faef3c3ddf6433dedc38420fe569e29a884cdbd7dec8bf454a22db41f9f5fd80b14a5c36a2357f9bc448024c77f619ab6f1a0b71fd2a195334b7d4726ba9

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 a2275b54ddc3722e4e80e4ff1e5a6a96
SHA1 7d19e0b076291bee0fc4da17c25b359b5c512900
SHA256 44fbe8835f1fa5e921e7170da9602414a0882a48a430642367d9ac726ded4e34
SHA512 80a59c7a484a54d830a3c363d7164a5337294925604144107155417b90c4eb1e4759a0e0d0da495883067ec6d6e67a18a400f965dd2e72de5ab2d41eddaeba20

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 db274079e49a32b5fff25908321f0965
SHA1 99a33c46c439127aa008fc0c8b95721e0000391d
SHA256 1804f9e0fc77de51202d81d87f6848151633cbb63f8445b2c9968e2fca58de6c
SHA512 51c7cf3e766226183598717c90982b58f091f66e0f19fe2bcbea4ce23f426b018794c137c52cb2116ad795763ead4e072c520d4193ddf2687b76ad29e5507dc1

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 b1cb0d07b66a22928daf0bd5827cdcb0
SHA1 6013842b41d368b721514c44ab86c7df7d5e8f1f
SHA256 4c22642f9e470a4690cf753b87a38b32f02ef7835c4370c4355119107c7a6f01
SHA512 ec70b1069f913632ec89f98f4e9bccf76a755ff9851704858b89131af1ed828798a30132625de43cfabcc385dc83f9f5a1102f4315b699084932550a63a9629e

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 3bdc65195057d42de81b0ec2e3d4f6ee
SHA1 6b96e603ca1de87a8543145ea9e204301fdab29b
SHA256 b508df49e3da96d08d635eda96612bc583f2454d98a3243870b7318289893033
SHA512 09e8cd2b2c10045f03b16cb6aa894e96faf1d14882ce7482f447af2e08d1483a867a0781262b0f34e1ac9e01eadca5712308421d0ca01a3228fd0c4f7cc2cffb

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 87d4429a832abf8e112d7f827bf1992e
SHA1 f663adcbd02996a080797e2caa889c9e1e8bd528
SHA256 4ceab35d19ffb2f47f0c4a44d6efffc3c8292d865322875ba6364d871f8e7c6c
SHA512 05cd097f399dde0eb1c6395ad9a259fb2c71a5cc863069d0b517094ce13487e7c6e9e5842cdd86e16f10991f659308908c334fb3f4160a1bd1dc8bce882ec75e

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 32f0f2d39a03f206d2d2c1dd8bb64d44
SHA1 66394cbba6fe7619c384b3985c38729555f24c59
SHA256 9e911b1476357beb534241abb73c53c1b04c591dddd0756925be2b835c60f07c
SHA512 f980239e8017490d0625583df64e2af31ae6182f4680f2c5a9a1517d146e1782c6548cdbf3cf06db345d44ab763040a5c3e844347baca1626684d6d931e38dbb

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-shm

MD5 2158460361d030be5e84300d330b06af
SHA1 6ff13938193a3a860232e5a190250bb95858aa48
SHA256 98a5b6571f6cc66b7f4c68543f19624e4d159312808fa46febe701a5d522c591
SHA512 3749fff44eb6d9d31efae12032f591a97aebba557c502577728ddd22b0a2b8e5b991a52b36f9812582e3d2912d0bd4b58aa87ed8bbc09058843ca68ac28f2fc3

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-wal

MD5 499f8526767e7e54b9a0dc8197b2b09f
SHA1 a208d9ba40f4ce1007cecbd12a246563b28e3085
SHA256 99cfe80778d4b2962691816e1595b291d376a3bf0d69ff040eddb5cac18c83bf
SHA512 9261dc22f8b0c6952225e958abe14f410a5b79032219a7eed47bc274c7d6a363971e1e0f42ab371e9af6e19112149329b7c497f533f01c20cfe506f3319ad93e

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 304935121b7543b50ebe617a80ee0b05
SHA1 1143a861302bb0f04a1152db825f149ecf1ac803
SHA256 107535acf7e9a8ee341d1b909fe5506e0e45ebb2b142a03adc6dfa32d1ac070c
SHA512 92411a5347f1bda2901b19ebc0f66617d3d55fee6b14caf3ef36c6754469ec4deb388a8dfde5177c09c5239eeba3ff6cb73b7215bd9a2651c8f256805a86a266

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 d04ca56951a6d3682bc0fde9b6534c83
SHA1 5a55f5c39f8818ed1ca4a11ffcf3ef95c3b4e592
SHA256 12852ab627ad603cb5b19a8d36bfc7f5cf86aa3716409c01c79e164408533c71
SHA512 50dce3fd48cb1b4384e724905cb23ddb6ceebb9a218239c7ccd164ab3170640c5308f7e373f379a09fba84b1d6d95928d2b5b2a2b0d3d65583f716ae10d2cd77

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 cc9e299d5dc034c14cadd08600ae31fe
SHA1 1a64e71f52cd40aa8881c5192989d0f6a4131cb5
SHA256 e7fc919e3d9315ccd593ac23373f4aef8be55106244222abef3c3be9cbdf8496
SHA512 1e81708948ed773d8b5d2b41b7adb8a520da0aa4d66aa4839b3502c52f62e71a78f9ad6de6051c4891085661c58e56c4a17658cb29be8968dcd6dcf9794cf936

/data/data/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 49221f427f55e6d55081e2a68839dd1e
SHA1 725ba5ce6a9c9c7eb1705a3ac523d9a17cb98998
SHA256 cdf2929ceec7af307f8a83da14bf429e7ba72c98ad89b8fe0a736d3aba988959
SHA512 c62f8af6314f96db26542a98ef288104c723e6f9bd3f95c0e73012f89baafbc6d08f9f6384657156fe1a588543161ea18aab6debe3ad36296f3e20112347f65a

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-03 08:17

Reported

2024-06-03 08:20

Platform

android-x64-20240514-en

Max time kernel

179s

Max time network

151s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp

Files

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 dcafcaa55c565970ce910666cbc2784a
SHA1 d7f402bcbd1d5ad956cb2ad0feb46dda6b9c524f
SHA256 9395e80509113f5a8c6201ec8c75ad7b5d0673c1a9d99467d62bdaf1b32672d3
SHA512 f55886537d2232d2372b94b05a3d1332ed7dc56e58f7fa77406a8e539edd4889d1aea25fb2ef5adf621daa3dc343e2e6e1bc54cf94d1ef4b9f3466616412f39b

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 2df3cbf3b3acf2be12ceaf716202790a
SHA1 5e73e3ac54588a5c7b28547ed5c8a6df14e2ced5
SHA256 40c5c2ac49cebb8b0afe1a0f61421e7a79e3f78da37eeca769fb881bf394ae74
SHA512 1e4573ea66ee27fd165d880c1f0175e3419e15aa92a002a06950482c80aee33bd83e2ad6e93ba04708649f5b488fa429183fcd7a9b9a72747f7ef13b192874be

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 11ccc4ee46bfa88b77cafbeaed88357f
SHA1 86e0ec321037b80ce31f436f7af83b4950b41bb3
SHA256 44e900ff88d911e1ee1854b10ae8077cc51994a75bd5ca5898c8b2a644bf4afc
SHA512 c795d331d3c5df2fba4b6c2556e19790424d6e048eb3771ada40ba0574aa8371d04f733b0c3a532f0f43c6f4d4f85ae628adfec497be616b495baea48eedbccc

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 ca5b72650ae03e873d5d6c29677fa1d1
SHA1 57a95310c9f8b775e095c78aba8e12f15d6e0201
SHA256 93784e9fbfe4e9fbd18964bae9d5f96d99d36b18d060801e9b202e1105669450
SHA512 cacba44f160e73e244c1bd0b7af28231ae1ac9c5f22af1aa0684accb77b7610820f5677fde78fb11e6b07dac346a6c8e3ae06b8433a5ca278567535ebfe0d708

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 eef8ade74b9a83f23c209e158f45920d
SHA1 110eaca4fb2899ca8456cf8144a4e6542fab592d
SHA256 f4dffd7ab765cd577980f1a3bb2c2913dc45aba82dc08b797e1f655f69bca580
SHA512 842ffcc176804c1e9ff870fee1df8d47ef613dd743d0f8df23cb78ac7cab5da26c60d10ad96b36392cb1afc9472ccd3df454d7f91f67d45d6923600a8a337c49

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 484df068dc370197c0e37af4f433f772
SHA1 5d071329bf5182e60b2d268adca542901d492001
SHA256 3ebaaa9fc7a9245b413f62f91d9e689d468456dd4b6ce2408bcd2003cbdbfbd0
SHA512 587e7b68f2c167d39dd50744f2892a461a67cb073e8cf9f6eb2ab752e07841440dbe212af32958248d15af5d4001e7fa12f86cad62578ef31999355a86c3b0b5

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 ad328de05efa771724c768365ea79d88
SHA1 add5e9a0c27d76e18e10a87b6a76ea200122aeec
SHA256 e55c16d9beaf2e34873b99f4504e71d5be335694bfacd54d8afec7a2996c83eb
SHA512 ee5e78f8e67037bc140b33ce0115b079f73b162f3758bbcda78993b1c02d003dfdfa9ef755ab017bbe86a56e4ced2aae305e066de1960eee169e747f1a14f712

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 ea9c2dc01d788f2ed7ad6a455e32335a
SHA1 3da6ee06226734e9a402c3ef2b542af3b509b6af
SHA256 ddcb0e1970efc2dcb42a4dd328ef8c10f3512b39a47277d5b075fd3b92dfc3a7
SHA512 5b834f25f6f8afea98eec78cf8e148671ceca48aee8019e09308389c1f336e47e55666fedf66e09c97e827c375ade0fad635b98686ebd2f72240108670d25e76

/data/data/com.producepro.checkout.marchese/files/ZPkFS.log

MD5 c5afc1e1098246fe71551dbb2191612c
SHA1 d6cdc8a47c8ffcf95db4cb3f5e3b4714da564a9c
SHA256 8ba2a2b08977e7b4fa96da086bc6ae7f01edbde53b39838d3e610383e7c41cb9
SHA512 6652fa608ec3ab20ed2303ea7b28d466d66e40b4c6397f47a18ed76b8504abd1ae0ae2dbbfb470afd2f53e0c9d5ecf61cf278686b4d04e7e2eca80c7dea0587c

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 f3d211c4fa48718985307783cbf99a7e
SHA1 0fe4203c1c0da99876890db9f315b349a112b4e3
SHA256 da65dd93fc923ce7965a60e139095abd68d4fb57b8c376ee16da06b67f91c14e
SHA512 42d37d987388b071b7724a4415ae44db7f860f9edc0973efe61deb9775cc8ee634f00eacd446baef38878e6a48c1a6b2c2ffd00616fe00ec6c60459928ba6bbc

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db-journal

MD5 db1f7ccc7bddbb448bc5fd512bbed4b4
SHA1 fceabe8a6413901f3a2f7c555552ce1d0fa004de
SHA256 216c145b36ce3f98a35cb0f53a852135605f7de06cd3dcf4810137fd758c8e58
SHA512 db158b3a96f76fbd740f85b108e8d15dbde90c755a4209b94546d45f5443e4244cd20fb6ce95145d8885fab8a5579403e86536ab8257adce88db96547e636cf3

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 23edad61398bcac36b37650eff6cb6e5
SHA1 6b957630611de0aeae15440ca7dc46e265f13cf6
SHA256 31ad812ada7ceb3089da85916ceed1d58cec40fa043b9086fc1269ca4b7cf791
SHA512 b3d5b0bd2ffa3ab3954bf60d5cf50fd380c1377174dc283fc7328a84a54032f21cfab9428049e8e739827548806c67481b91acf945955cfe934d49c26fbfb09d

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 e29f572e6203f535b4fca684a43bc046
SHA1 20a43512907030b1bad53c085cdc3a4b0ac7c8f0
SHA256 5b619fc937c9efa835d3645290b5f954c942ed63de6dbd39b8c138fab6ebeff7
SHA512 a1aae804d1dcab3d267dc6d7fc91fad8488608aa0b7b2e00a248c9599fba9815124498f25444240dcc875a7820380e9f39c3c92fafd79e8a58e11ddefae678d1

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 eceadd4187150bd9ce726a6040e665d6
SHA1 70a72422262b84d37b7a52d7c2a4d8e2ca6a637e
SHA256 ce33bdc33fa2f4dee53824921f2d5be6616bf1d8a7a5cea1a7af88df7b74fe65
SHA512 f94c31448e2958d0d20191033a9bde2e29a0c35eb013ae92bb9f088a9cf55f05db9a6fbb6696013d2c6eb0d7e812d7ed9541d4c0c0b16fb7505ec09307f1d132

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 03e7ed0d6076a0bb65b21b9406a8f231
SHA1 301473f88ccd9b1e828d02a9eb3af857fbeb6d0f
SHA256 070c36dc44348923281f7af7076ab5f7a519ddef30b91a7eee7377d49b71e0fe
SHA512 c542a31199473e42ef4ec22cde350af2af8664d4e5a969814dc59f824d32a75b0d54f43016b9165180f40b93f8e559a3c14b66be0d7d784969972e95d68a9276

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 32a3a3f9e4b5d4fc8bf178971dfef622
SHA1 4cd2c231ec5cfd6141f74be9e8680550813bd2a4
SHA256 88e59e358ea2aec598d7f23ecb757646d46e03501fb6fa502938182518c8688b
SHA512 efc0f1148e63145329281fd3d76c20a2975d0d84c1276433654f4f0630185edf19f09b761302b10e0ce19e24039507b6753277fcbccc6af40bd5c61d9e7f4dc0

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 bd3de75a21d57cc7a509f54a2c95ad1f
SHA1 5fb47008768f8bcbcb2686cdcadc4101b1399573
SHA256 1a00c5bf1381ea360dc36ec78584e22d20f4de6812b9e7a64223f17043e10480
SHA512 adc9505f9670f85639624f0752abee954251ba79c53a10f4324015e6942d4ed503db210a4afd045eb041b43a4cf0cc3b4a874ec1ef86b3682d387a099ce79f53

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 c32ff26e5cbeca396873e901032bfbc8
SHA1 5e4aa96a2d9a0a042af58dafeeb1c39f8c573021
SHA256 57084e326c136ca046203c1029b3c0d0bf355813ac8981e1f3eb9e5becc1aa04
SHA512 6d5d4b8441f27f8490ad24ef6d7ae8da9f31564b7a98fce95850b86bce2b5faf3d09e3b8f4ec9f6325d7647eba0f70b748fc429190a282894f15af68b4f00c3e

/data/data/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 3ba93c13900d91db71170c467c3736ff
SHA1 b210542e49baa1913dcdd454d6154f623a3e8d9d
SHA256 12e15134727efe5ec1822c7e19162b3c48b8c17afa29f622880ceb67729a082c
SHA512 d1024a8621692550cb20918a2976056faabcfd8f76db8cce0e2681972b87eee64fb0b1037826d07b85f613a7f2014618686a34f2f257646dd71c4eebec5f8dd3

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 ebb2e3631a31eef8a06d653830ab193b
SHA1 a37d707eaf94d8e80ff663a2bcedda05ab6452c5
SHA256 9f4c34e7e7b53dabd7e836db70f7be03d2c6ed951459495d8e8ed3aeaa071688
SHA512 3e68d33cf2b47eeeb17f9d3d7902ec5373e8ffefbcdc76b444b69f4b8e084fabc98d70cbe0c4601a6d5573d107784389ceed10c74fdfcc86e7fe1c050b260b75

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 b6e603fa84cc865ef682adce43769948
SHA1 8548eb62c5b95dcc982488ea9ce41999728e886f
SHA256 7511619dbf4898b852384a4d19a7382b41acaff75ec53d228c4428008b3c8f55
SHA512 23ad23ab3f6cfc2b72f076a89c101303df8a78605fee4b2ac631f733b1d1259ef8689867f230b76897ac42cb6d9f300d5ef0637645d009d1e952da82ea031fbe

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 3c3cf8e9f697bb16b955eeb26dca8f43
SHA1 cb5c90f9865b910b26fc0df93337c4c6bb34da93
SHA256 3fa3a5b279cd4b77c460cd7108e00842f5d15bd12a549834f7c150b6ee7f68bf
SHA512 f817f60964791d1622afb409135a1963d598efef737bc0e5fdae5aa93260a795c839cada85cddee71af34948a5fd95a757499dde87686549bb255b168f1402ec

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 d78747a322c1b5195e06ff80fc8a0705
SHA1 adeab24da7489851625c68c6b0199858b3c65828
SHA256 1acb6787e24cd476404551822443c958374adcc2403e410e86001e0787e71e63
SHA512 7852e6ab50d5af7291311afab154304e19b9a6dbd6d2b084e97135ed2e0f925c598a0ebb6a7199daaacbc79f49b730fc924df3b3b8752e6733661eb644486b9d

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 0bc7897c695152a879bde1eb6ae4ffa8
SHA1 e0930112e90914ac22c4d87b4e3cca7f41a54e65
SHA256 d83bc1fd161eeeff74ad2d5656b6858453d899d0733f2baba11d433a2e566003
SHA512 6f17f4e9bb09a4078703f87bc91b019f48defebc3598b2f3fd75609113e447c897e671dd6b9bace219a76a1cf65d785378fd589ede0d86bbadc855e4091c1b99

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 f54ef8238dfc9dfefb40fc3cf11299ac
SHA1 79d26255892b8ea41dd33cf46bfd10562d9deb35
SHA256 b258f252acc19c273d3a5056188cb69b58956a6f744459b914b57d7ac6d9e85b
SHA512 7861de07943e74c1ac523be1fe21f984943d972a6263234ee35eeef1e8381c95434f14e01eef94f05d3a058866b425a651f3ca27e4944c6e85b319c177551a63

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 a117117b4477ce03350c418a42a8b2ab
SHA1 42f7998904ddc99b547cc03c5e44beb8afb6a79a
SHA256 5931b7158e1a067d255ab454abfb8c03c7739271baefc9056271ac1ab6a18920
SHA512 42a46e87ca70c07094bd7ac1b1ab1e13f5a7261a8d0083d2950804e2a37396b8af22351b92aec31424d7bc5699ef0456b634b9ce98b4120b613d6f12be1fb3bf

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-03 08:17

Reported

2024-06-03 08:20

Platform

android-x64-arm64-20240514-en

Max time kernel

178s

Max time network

153s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 fd89d719988ce51b5bb5d70a186092b8
SHA1 5f79f65bb463e0f3abfd738a07d935a30bf7bd40
SHA256 3cbee7faf9b7772a9a9bf4adc3072848e53e45408e43b22e1446869c001a3033
SHA512 0d04d3f9f6d2703749293329293b04a011f35d809f5bc14e187ef7e610c1c333154a38f15cada6f147fec4cb358c2502a324b3d5d7b530ce17f595a3ca318022

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 d75309b1d73e2c593f9c74bb96d9b955
SHA1 cb5c9a10f15bd5098d669b6f7550d32cd5e95865
SHA256 e9b813db35e4520d63ad52833f0ec26b714e9810f3aea21f6225e18bc6a17367
SHA512 aca8994061f592f600702d52bce09fdf3c93926c57507adc72ffe56fe993a83b55f3caee6795d95dc35779a8279af51197920127d11a4849a86e3b80bc5756e6

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 0edac56517bc7908b3f66a747f3d1f48
SHA1 2ca7c547ac96ccd52baaa760984b111d3f0b452e
SHA256 8a7f516dc102c0f67c0aa5216c72b9c11648c716b62c6e79b6064e114d177710
SHA512 f8bb1892d6cf21df156bb47f78f54edc9ba016741d87e97492fd85560001f9264d7a906bd4e59c369d157dcdd00dbfe813f2e15f24f177a71a037197f144fa7b

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 05c68ca9ae2f2da3b7d3c57c94d95d1c
SHA1 2653ffe0cf1ce58e48bcb993b407021cc9055db7
SHA256 7ce6827e269c5cd6663bae1460b0d94228b2add182c221fc2da7fc7d29336cc6
SHA512 08904ae0223593cbf5047f53fdd9c64af9164bdb8b027ba38ca3c7d820637f4b4d40a54bad8f5e414440538dcb78d384da8b7e790a25646f30cd171866afba62

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 a8c1c7104f63e3d958c34a52678fef1f
SHA1 244d1b485cc854804b6776248916c51f14d0704f
SHA256 22734e9e834b6e43b4b743f8b3ba06f245d5584f18019df9bb853282206d7a8e
SHA512 f2767bc634e9daab8c121be49199d173fc94b844dc3918ce782dbf97ada7210026cf02d1eef53fe96dc2e5df08862b55250b17a564f5787483102efab77d065e

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 d9f443e486d62cd7776291ddbbbb36bc
SHA1 191474837f6dfdd75a5e13f81854c58e6b817592
SHA256 2b77f03f59babb023b1fbc8140488a0d62f1c4f895c5a87fac39e00a689753a7
SHA512 6687b7ff5c2f94dc05bd1b65447f554305e3899fa910258da807acf57d5d84bc6d2dbcbae30f056419d7b2700539e8ccf47f9207f28c903b7ee5f0484375fa1a

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/com.producepro.checkout.marchese/files/ZPkFS.log

MD5 674dcc8e6d748712ef8a58143d677e71
SHA1 aa2db363626ff38cac6df2c0cf68366b6da4f60f
SHA256 be9b3120dc62ddd732cf11ac1a35fa3e60820e6813c111eb33553487f8e7e64a
SHA512 a175049a6b1b62752eb1553cc98d0c0423da10fbe23d1b50a67a57c353bf2b3256daf41e6120a201f7aad9ac435708edac8c783f72a9e78b27c2c328808505c2

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 91f1fdceaa5a8e823fc825c50eaffc3e
SHA1 cb0914744042ebd2ab1531f96aec6590be9154bc
SHA256 256e5e1bd037becbb00a2d7d67ba59d757244caef55a9e340363ec993453ef06
SHA512 6401f88b7d5ca998d2680d270c19b94c5799ac4462e7ac77424b2905ed0de8beb30ac02890a2edc68ef859a6737dfe5459bfc862d36aa5287f57f2a5123fb21f

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_data.db-journal

MD5 b947b32815635c3fcf5d5aae0db8bf29
SHA1 ece06ed4f4d9e2e555b4cf4cca4856a9e7381f3e
SHA256 cdc3cae0fc98689c262419ca104f2d01557e7cd65d1a279efec30ce965347a8f
SHA512 e5344417b8b5085fe34bcec6b05a727452d812cba071b96f89da373b7f372b34fbf0781cf32b6af1eae70b478bc8b6b5939a3e22ea0a7e52c7fac0372cba5a7c

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 3189d35ccfee8b7d37dbc468479809b3
SHA1 9fbd603edb9da83cca8b741cddbc2df5c069d476
SHA256 28c30ff96570ce27e946b4c530960c9734176870aaa0c3644cd5a83ffe04dc5a
SHA512 739aafaeb5560e3ff2bbaa45c4c56cbc0c598a1f2d0bae9d985d8ed7a25618a6aeccb641c97a62ba2d1ddaadc891f641ac5875176ea119076af00755838e6161

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 121eb8aac48f0b6b6c0683084e748da3
SHA1 eea574651bc0d8992a5ace6eb6002dc714327449
SHA256 9ea81fee82f1709760bc7a20770a51af1a5617512adf8bab98f39f4e99891143
SHA512 a18da0b25343e72f1d30c88cf582f54a7e9d046b68cce223dffd3a1aafd76fadf28ccab4756921a8d14d7aa84a205cef0f697e222a72df2ac073cdda9a2fd203

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 c7713d5f6dfb25101a5804cc06c9c56c
SHA1 28785226edcfe46fa17b9d5125d0f6d03c6174d7
SHA256 fd99a504a0ed3e8e9e13c9b5bfe886d67ac66726b9949e008ce1d21c6c86ca43
SHA512 9f1fc9c9b1e70f9bea8e65d38cc6de4e556e94d10e53e36e04a8164329bb622f1de7952632e2cabf052883749734f6612c42c85468298a6c54a55e322e208ea3

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 f2dcc6c1541fbcea7a62312acc3ae986
SHA1 c75960f90203844db51392065237e3e94348d9b4
SHA256 ae9986ac76c5c4515ad0954c7bbbd8a60605a0857ac7b649d565f8d4604ce916
SHA512 0b8dd72253a2659268b8cad7c33d439d76e63d835b8135193a0b94dd0d3322ee9023868ab41832fb0f21d205ef32d1cf67b5869ee0b60f8f47c5f1faf8805fa3

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 04f34749e80a868de5ee061a5603d6c7
SHA1 10b541c088ab583875f5ac93c030551f84988f32
SHA256 984f281446fb48b89e1d9b8d3ff0ef15f1653823bb3ffdacab31c3f9a0f24a10
SHA512 6bda8dbc9e4926a8e063f9152257392dfa497ec00a4b55c99cf15a268eef56b6ae1c454ce09a72ec03cee0d3dec82450d5c71a8833c2bb3ed9f3b2064ee286b5

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 cd34b8517f0f1a3106fd53b609e7a673
SHA1 9b6d1f3409d2e2014cd09d0f570b6686452c7838
SHA256 4ee5a6483249e23af58c157ccb2138403ef40eba258216d8f3a9eabe36985fc0
SHA512 660662e9516852c5477b7be443449c410f416b9c7e1ad48a7d50c1288d1df6e6ef88be126cbfeaaaa1f85f914f1dc32dbef0808bbeb575f11e03fe5d77f0445c

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 b4c5872252e177658682f781a00f1b70
SHA1 7fab05b24c0052f837d766bd2c4421a15e4b09fc
SHA256 1ff1fe1334c67a2f81570073d7e271cdc8e49a873ce4cc7030c11ce9856464af
SHA512 9179489e269f5d3858cf8bc02774877707b1dfec7eec8c13da04d1fab8db6e2e8eec24930fe1fe4ae3b293f1f4be2334146f9f45191d82bc2372af61110b8c77

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 d71497e7d3085d02ffb404d3143ecd33
SHA1 07bd80715719e9e6a9edf14170f606a03be642ed
SHA256 dfa0e649004feec97331146e6ade6cda6b991091185dfb7f4038cd5a44145f6c
SHA512 60a9e06e15684ddf16d150458d9b8477bb93788ab6aa20bcc2baf8506547f4b6cde540899eef5ac6b0a32146ee9ad5f7a9b52bab28b9464bc32a6c954498cab9

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 15959f736e0252798bbc0c17c74f655d
SHA1 752bfa892e26622deec4b647bf723d31d641d548
SHA256 12a5b20da260a3095b53c75a981a56c953101da3b2b9eb06fd44e56dc74a87dc
SHA512 c231ca8a6cd82a5a39c93c9e8e675f557276656e3cdf4af668dbd578ebb1a4c45893db0ef0d165ee93fdfe54464e86063390341d8cea94eb364f84e6072e17a2

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7f17f3c1c151035fe4179b8e57071b80
SHA1 458f54178c13f3ecb3e3fecb3ce9a8fb8a3fea19
SHA256 14aaaec24856ff06a77de432ac2658ed48c2f4db1e7cb6c7ed829d849c929465
SHA512 321e53ed9dbf61f6030c1e336d312e203d1651f384b15348c114d446881a6cca18b6b344ef87af601795caefc37a9c60ee197ace7e4a1e2c8c8ad961a4278799

/data/user/0/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 b6ab93ff3438beeabf1afcc314390ab6
SHA1 29f0a31d5c5d3afdb063bb95ad847b7821290b11
SHA256 29cc7c3a21e038b965ecf3dea291f83a759a22af8b0de8921a4db86b4ba725cd
SHA512 cf9f70bd02e8dec92adf3fb7f3a1eae60d48603ba918b8f5864d7c44ae8be72944f4eebf216b32ea81f0e5fa2e7421a9d0a58fc01bfb111ec95cbb3787def1b8

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 db509929559d4faccf7f2d7b2453966e
SHA1 46822a630cb5e0217f9de5b4d336ddaf0b8c0f06
SHA256 ca6a3e6fbe584b76e4a60ed533078436e06441d4f7a4511d88b5658a55a4d1ec
SHA512 bcde1c36aefa0d3fe25722b4e4e05b5c1db2287889d4a95d2bebfe06ebdfaa5de86bf279e1e46668e6fcf9e95cab8e28b0671e7ec09ac574e23eeb76bac81e8b

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 77fecd54fb1cbb9b6f79418921ffbc9c
SHA1 074cea67a79b4d539fec080e2b65bba81e9b48d9
SHA256 53598116de9dca8d009886df1ca14fd4f1e66c4291461f7672efb40359400e34
SHA512 462d1587afba030596093aa0d844e2daae19361b1f36f4544ce75fb1132f8cea2d66e9af3e5aa27c3f2b8c60dd11f8cdea0be6438cad6a607b65669fb2d3c4ad

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 c302b0666d1d82573f622d6d33545cdd
SHA1 56294116a8eeb381b57c33e80533612ff81b5386
SHA256 efd12458035ca7472f2446405becb7d174a5fcd52399af7248ef50f9a46952cd
SHA512 8b60764f49d8b10b7330d744e8de1ee34217339142ef1f7d91f74ff908d71e8c963d3670f6e4c2447694d027dd0c11c53ca08e5b731fc67693c60b5a1447b377

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 9dd3395d51dba6074c041fe397aed94a
SHA1 a69d63c1e208c1ad6eb4cbf70e95df20edff4e9a
SHA256 78cde44e6f45d301727ec86bf4905f8f1c23c2b24f5961b0aa6e9ae55dd4758d
SHA512 f36df10930461334986c07a26c51ca25ed005fa87932d9ebc153fe6be01d344935391b3007ca6e39281ebfea95752f909a25fc59929c4f916c5af7aa970c29af