Malware Analysis Report

2024-11-16 10:46

Sample ID 240603-k59zhaba96
Target 913dab5e7c0f2eae7b0c9189a46b4230_JaffaCakes118
SHA256 7efc1d1d9415c6f4381932660e1f91a7bb591c02368754ad52cc34b4d3adbc3e
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

7efc1d1d9415c6f4381932660e1f91a7bb591c02368754ad52cc34b4d3adbc3e

Threat Level: Likely malicious

The file 913dab5e7c0f2eae7b0c9189a46b4230_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Reads information about phone network operator.

Checks if the internet connection is available

Requests dangerous framework permissions

Queries the unique device ID (IMEI, MEID, IMSI)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-03 09:12

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-03 09:12

Reported

2024-06-03 09:15

Platform

android-x86-arm-20240514-en

Max time kernel

178s

Max time network

140s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
GB 142.250.200.3:443 tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.187.206:443 tcp

Files

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 230a14da6fbfcab92810d020c191b98b
SHA1 33f971e8a86fb7bfac4d35e60ec82f09e2447ead
SHA256 871dbdd28c4b828e4c8f80224b8e1ad48eff634060161352b821aa160c5759f4
SHA512 394d87fb883340e10524b7aa6d1b6d438ee96af79f4b402e6fbc88ab796ba5b439b90b86716be8e1a92f339dbbf30622831a6af2f48ccf81a0a8e53a598ffb46

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 76946296a6801b40ca5a9940ae0ef9b2
SHA1 cdad3cd225b2b6d8c3f085df79c6b9b2bde9b697
SHA256 88674afa5e79654940f762f8c400b6935b122d1c4eb6769f1328a6a60d02b8e2
SHA512 9c6ef8069074123aee744aebca331d7f032428586252578d38d3b71e9ce681f5bbadd41f7014292409a3a0c5f3e0665cc0c6e0b877d0318702c85b9c9a3b7963

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 728c382c4f490074413b44cae5e1eaa1
SHA1 e21d4aa0bd0488a272818cc51debacb6c7e1cb41
SHA256 c2773df25940d90fa836b312688aa132a025e18d5ce64f17abfe736bae0c7434
SHA512 f008eb126907de85a987f603b4a23a384a9b47dda01ddde3405ed2e1b6e144db6242399d9a1f78b8f656f97cda354557548fece151d21be1d6a924c68d4f2b3e

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 6dffbdb52e8a4f0e7cb9ddeb7b4f24e8
SHA1 41d41cd641c4f60c4d7081a25d7054d074264ee8
SHA256 8b2b653d2bd2e23f99ddcd6d13dee3b4e44d4a9def7762ec42b43f59a1b7a478
SHA512 cea807b0a1db9ee0ecf776f8f79b4f07c31e57fe7d8092f36fa8092c474e7d72c306419bb57e993bb095819f9573df4a1283effb23329b5a1ccf16c25ad33c84

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 44def4f6e42c3ec63f229d23af8c804a
SHA1 f5956d9295778b539bced03215343fd3cf7a9dd8
SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
SHA512 a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-wal

MD5 e72334e651abd32fd69b0fea0e86dad9
SHA1 eb79210baa117bed1bb653e8d0223ff4929e5189
SHA256 1c57f52511058efb30ad7edcdcd18eda058b286e8f16b975560b7ce48849b5d0
SHA512 08500b4add281addf060c41880237d17e0388155f3c8a1ea8b61904fef424cbc6c8b401333fc39038b60789ddefcb63471c18210c3b2c883b9b74e0545b5fe5a

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 c572bfd87305cd6706f2c1fb57c43b52
SHA1 dd36ad4b5ac2d8ee9946221e129bc9a981882f28
SHA256 b170bb664ce5b7decab207795a458a871d2c91f3e8f49e4e573d359a538716a6
SHA512 82c015aad23be5a681d76eb0eece2c92039c2cfd0902c25189f1c79fd2f66b72afe752f41b1437a832433498d48772233978cb9d9ddb37669c898c7a478d12ac

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 a39da44c3bcfb1f8db3b995ad48c9b86
SHA1 3794b8d1eca9ff4609f4acbd65877732451f5510
SHA256 7a0e779040715895b336317c9f834d3eb6b18785d73fcad342c03828f3923821
SHA512 d3e2ffbfe083c77d6126dfdcd9ddc1edc1697e3619f35f23d15420afc8f195d7d1aadb73568ef0893c31f8749de524db5c268e97978cd8bcc002432097b55160

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 b223fbccf02e9c3fb8e2718fab0811e5
SHA1 3f68505ac8c9de2ed0eefe0a84131e72c160d33e
SHA256 42ee8f0f61f5a21ed059e7acc931edd232b6e27a723aad335ef48cf38132c43b
SHA512 eb48934a99a1bd823211a04802707be3160acc2c115467762f8991129af664ff241a8ff7a079e749b2bdfeeab3fe4e54c46c6fc289b164fe556fe04e0f164dee

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 0d024401b31eeb7bdc987e22559d1dc2
SHA1 a15bcba7f807885c7adc771524ff5ba0d99bd4c4
SHA256 afb4a629509fe7e3bc3b1e1f28c91a660a471be3bec815b05f1f0cde045b0f7f
SHA512 9e5aaa2d1d08552ac69935a45b02cbdddb4a4cfb1c60de7be7865fb76ce5d84579c5992830dbde9352425e9ebd84f1f3e5ef014ccf7e2cae3beb65a179815420

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 126981a875f1eaf348d60dfe1401030d
SHA1 b6465a9e9db5aa196768d440af7906eb929014e5
SHA256 140deaba817d1cc85fe2ae08d88f0c7c253aa354b48ad6e8eba6294d2be9c545
SHA512 361d548d30e6ab02ee8deaa285a2cbe112d1468338dbcc0a42ee4adb44af39929502ad8362a20b817a3dccb57b414b0415b94ce7a6317f41ba1f888d52b73069

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-shm

MD5 9ed20efabea7e6e0142d5c09014af7c0
SHA1 8c047a7db2598a767942cdabe173b2265941952d
SHA256 064f035351f1be43755ddad611a7ccec5be389c0be0bbdae9613149d6133d534
SHA512 360e4f21c353fb8d5acf85dc4ee754603f222ff28e7f322e4de94c704676567ec47b5af5056a3d43924ff94e3298f5cf5009e731a033cb5c04af8271b196c6d4

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-wal

MD5 2b433d05b4809cfed6279823778f918e
SHA1 6c1abbc8596e5c4a504e0b500b15cd57bfec6582
SHA256 b1e18a6917636d7b659fdcc178ff3435599014b190c5ee98b11cd27679f82a10
SHA512 e1fdc90bb30446f1c1d86bbb0376e97c616d09e5c2f0c1048270779a6d2ba800592727259d251fa30e2ba6eb653a5188d759be99dfeec9176f39653abc1588c0

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 35b6984c03823733331883e276653268
SHA1 cd173ae2a4f6f1baca5ae36e969d1e462f1f2b84
SHA256 5e731f8f12a58b1b1fcdd2ac1ba15ef6586050b54611600ce2a5885082ca061b
SHA512 92c5aa0cb60eea28c7de54d18e358db7b6b403ee3caed0b52eaf9c29cdaba8cb98dc4fb0b303fb5c513522bfee292bd97f88ae1ab9581408f1cdf40f2399deac

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 d8c6c8af8c64e05add9f8bad7c5b2dee
SHA1 d3ea93dc7ab47ecc805dd999e5acc5f59df598ef
SHA256 a2398475fa25a30a09c619c58f314e5d1062ff48698a3a1db4b79e564f9ec9a8
SHA512 6c172b67d7f93a8219bed701edf316de9abf8132510b6b924df3bb154a99a784916b2dfba1e4e31fe44684d3178bdb518f6d4f04b2f9e96052806f49972694b9

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 f50b0a54930c6a69d9863ea38388b6b7
SHA1 89a8fb5757e31ba125f191d0bd9c7c434d357ceb
SHA256 2f1d2d8d00f829ccd24ddbbb39cc454155c81335eb7c4ad8afe8835f45c5dfe6
SHA512 a1b21dd9e1a34b135f971093105f5aae7145e1ff9ac55cf0626806f112d779b7fef9a1d8d71025286578190c97d7682061217eba2bf534e2230bca7e8df8a9f3

/data/data/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 d8f530be1922f1b08e2c5a0bda99f7ec
SHA1 d41376dc4404e32ac674e6dcd98a7f67d4d1868a
SHA256 7516cd11898d472c817f449ae332331a10f89fbc599e718a7ea40054f523c23a
SHA512 b57ff84e8a48985f9561e8dae8818cbabfa5a13a8f837c1973466a2cb46885dea47de1070562f1bc0455e776577fc56dc4b0366c5056a22e0d33c5fb6c08ae6a

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-03 09:12

Reported

2024-06-03 09:15

Platform

android-x64-20240514-en

Max time kernel

179s

Max time network

158s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 172.217.16.238:443 tcp
GB 142.250.179.226:443 tcp
GB 142.250.178.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp

Files

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 79fe1efc75e761fbb91c35d5691e22a6
SHA1 8958d1471a02861fb0ac7b513a7550e819bd7ec5
SHA256 24c63fd685576dc80c0660dbf8bb81f1cd526ad6d9a1ae99667a1f93f94cfb76
SHA512 dc22f63734464ab16ce88386d13ab86b59f0c0a6f555951d244ccb9db980f135d16e5eea60cef8dc2d7ab8749cd1eeb2d677f97827234163eda5832ac945a955

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 c76d7ef072acbbe5693656307eb58c29
SHA1 4c09892aaa0139875020b39e759062b7fb08b1f6
SHA256 1142bed0a25508fc3fe85665627eedb7968874df339c66e6f926a27a5878c255
SHA512 83816bda7e9ffd55dc2e0b971743972590ae3382792536f315726f22c03179ee4c59cb4a0e9184cd9ba045bb179fd0bb3674fbde43fab4d7160cf790cee8b80c

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 cd141c48a4106a9e5dd6986339376a80
SHA1 65a07c392c8ef4bbab82021d10c5426e6553afc7
SHA256 e16fc72efb3d5b7aa0836c80003df11627e52c3917e6c7c49be3e6dae15d792f
SHA512 9d7cc2a1ca8ec9b3913d96321804d867d7f53b34bfce3ef4ce07123154bbe9eafc8fb027452c7f9c4edc17be96764b05805085c783bdf8199a32be6cd364a594

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 d9e02f37659f92d85e190a91000c15c1
SHA1 f03fddc6e062d245818497dcf50cefad8f2b140b
SHA256 020459b7a27650c9ebf1acdbd33f76ca517cba7a3886caf5c0f6be2b1c028af4
SHA512 39971a0c174b42445ec05479f1d44ddfb70479cc2218e24718bb0926158652567a46c53db0fe11e75ee4da1a176649d04b1faa5804d0f794c345c45a0a289b10

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 46a76a2b90bedd0d4b3b3214873708fc
SHA1 b17e4846ffb80bbb8ba975b648c24cde5d202d3b
SHA256 98eb752fabb0241fb44146df5f0f335f648d629da86eb675e9e88538ca3ecd22
SHA512 55569d4b98cb853361bba497c0e85898252de7de7e7f347c832ca04654738f21fa261a574ffabc57070e2d1b7d0b065e6848a913aa6b1969987ffd8a0218fcd7

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 484df068dc370197c0e37af4f433f772
SHA1 5d071329bf5182e60b2d268adca542901d492001
SHA256 3ebaaa9fc7a9245b413f62f91d9e689d468456dd4b6ce2408bcd2003cbdbfbd0
SHA512 587e7b68f2c167d39dd50744f2892a461a67cb073e8cf9f6eb2ab752e07841440dbe212af32958248d15af5d4001e7fa12f86cad62578ef31999355a86c3b0b5

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 57fc6c564f1af40f3b84b6602abcb9dc
SHA1 8802e7cddc181167a5bb6f194f35c2b32877ae49
SHA256 5b4b46a3d96272b42aa4303d4ba9430b0be03d7add1fe9ecf3a022d00222d4e3
SHA512 848ffa30432b3573042bd9b97dc9e7a0b7ab4e928747580cf70301cef7ff1d16aa165b8474f53f7e1192cfc59246410c0d94b1cfd6520faf807701fadeff7fd1

/data/data/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 ea9c2dc01d788f2ed7ad6a455e32335a
SHA1 3da6ee06226734e9a402c3ef2b542af3b509b6af
SHA256 ddcb0e1970efc2dcb42a4dd328ef8c10f3512b39a47277d5b075fd3b92dfc3a7
SHA512 5b834f25f6f8afea98eec78cf8e148671ceca48aee8019e09308389c1f336e47e55666fedf66e09c97e827c375ade0fad635b98686ebd2f72240108670d25e76

/data/data/com.producepro.checkout.marchese/files/ZPkFS.log

MD5 1d6ef2cbebe861df76505ed0dd18b46d
SHA1 81b6de193b59f37823b43ce3137b7aee20d98a4e
SHA256 5102185dde4016875aba8e094b15541bbab7040bfce37d21665f50bed46ac146
SHA512 0b36cc4c02c764ba5d439749021be72ae92b39cd32dd4a3515d09a4c07d7aaf4de7924f6befcf32dd99ae18ccafff75ee81923114aba96f9b8bad24d540cca4c

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 00797a44bc6d10e8926efaa33949cbc7
SHA1 7a338ac55cf2dd87538ae9ad3f50589c0edaad84
SHA256 901683f7ef90453f01e70c42b888ff7db0b9c1d628f6c072f6e93d13da57898d
SHA512 1ab90b2f55ff37cd75f009e63f8c98536cdd47dfce066c26ae8c7f63b1d2fc8d3a533a23626e692b4c5b1cdc2377d0c83c90b412435d19ce0ab8b43f48607548

/data/data/com.producepro.checkout.marchese/no_backup/metrica_data.db-journal

MD5 cb63e11bed025028d79b8757826e6f19
SHA1 c14fa46951251482bc16fa79fe0ad326698f1382
SHA256 b229fadc297369b0769ffc9ff2ae70548929841b15aa0d37db0a58477d3bc38e
SHA512 d50f4ac10346f5f5fbc84eff7b611ef80aa0b8cb3299d211b7b0dbc28415676382e1b6ae6f8054da79072c96080354e62b26b611ae8cb9d1dcfc8bf514fd879f

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 b917cec08174b566315b25f62d13e09f
SHA1 02b2f83441ee8c93183212cba59f32feb3d1421f
SHA256 488ed97d7bdb639de1956b3bbe5cb44d75daf2296a5db3de64f64518549667ac
SHA512 9f3a23fe3377651b264434d18142e5b6f6a57832df1f4a8901faf6aa87b39bbdbf055645fc740c6c250ac8085627997ab2d093766331e560bf4fc9fae5467ef9

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 486d40bb02d1c04d900ba4cecb50c248
SHA1 97e113373db29b728347491448e0f78abbd4fe21
SHA256 f537ebde052fd7176de926a24ceb839f27e34b3dd2dda789237deba44c5689de
SHA512 b96703d7bc397828aafc475020318bfe4b749f7e01eae621b0c9095e3646185dfb2ae82cc967b5b4008b852b59ad33a668516b1e299f4ba7324e5a37d49ae413

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 9e1a5508d2520fc8337275d981f554d1
SHA1 b0a9512e3aa5592b8ca830017d3fe62454d4189f
SHA256 953da9d2af3c24192c4fab65011c476b96d20a02f745522b4a05c2316aea3fdb
SHA512 5b8480bbfc7c79d95e7118dfc8963e25755cd0456c75670d013a9654c1612adbf2e6864b4c0974a138e5d2f3c1b0d6671a91810e4230f004d1868e276e298087

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 1ff08ec38ac892db9b114c63224f0180
SHA1 c3b10544e0dca3d5ec7db12f387caa0b8c709b9e
SHA256 3894eab42a458f4867f3218c55e7c1d6dea0d527ca063be83835add92f7f1e4e
SHA512 cbec314fdd9a757793a09ee7c40695359bff53864de299fce698c553400845eef89c7ca73946118f6f17a9a482bada7ade1b9f493bad07d4253036a0d2a7eb36

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 23dfa5507650de5eb5bf4f17fcc9f373
SHA1 a267b19bd798067dfa7366799d68b963d9013fb9
SHA256 021b71f549f691e2d8a167d52ecc59966193eb4ecf04cac4f2aaedc5d1342032
SHA512 73bd7574fc944ca6baddb477c8a6a0c1de6877a27bd63e0418703c419dc0c612a22e6ddc19b2f0fd5d4fc86d48825e37cbd157df0b690a8adb615311bd119430

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 c0c9c1f3d0b673397a1b411774bf4f50
SHA1 11634dab77fe87660288f61e38f46c2a7654f892
SHA256 7e603cbbcda16a00c25618cef807e85536ca251e011876e70d2a43cc8a9e12e8
SHA512 9cb1694b29c26f5f0c857e976499d21b0e7c13f928c1528de680af81c443a215adedcf3af877f83dddb2f4eb20c8500e2e6a599a80a3abaad1b55fc96c7abe75

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 44fd6ceaf4dd4ffba3b19b5da8e82ceb
SHA1 3f91bc06d50e42b8be64a7586394dd4ebd18f94b
SHA256 4253f2f196438308ee9bde26e53084df3bf7aca6122260e9af9a2fd8ba2a62fa
SHA512 f9b9dfd16533b5da2a496327678989ed0fec55d6a7418ecbadb0472189127fe4e3adb16e8e18402255edcddfe1a4747eeaeb940fe08fb43e0136331bde2dfa67

/data/data/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 06b48962cc332be9e7c7e2cd1b0ab8bc
SHA1 572661894e5ad87901e3da3a4589cf979fc6111a
SHA256 2d3c9ff25d752b7d5f0f9280716d0a7676c0a13f5609e830859343d22c43c1a2
SHA512 524bde2cd8153ecab1d92952536b7c3f65f8b60da6ce07cdd7f62583f6893ac6b82870bfafa3a3469a2f9ed4f06e19d04ca75594fd56eca14acdeaba6483c8de

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 bbbf7f423a5abf41c27dc742ad013da8
SHA1 c6e81f225acfa5f5a736be94089a494520dd22dc
SHA256 c90b3ab1733511a9d7ffe2b58b091f75d65cb121e94da9e00df3ff873ed76038
SHA512 792fdeaf1959ffc9beb2c95e48fff766fcd17d9b3253bfbff790e4f113d1ab954132f06f6ce1a646dd7f6b2a8e5e5a92d23db952b98656f59c981828c5e9b8bc

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 6aa8d0df9199eff67ec00988a1d66761
SHA1 ea0cb0f71406d320e33eae4bffff7168ec7051ff
SHA256 921c8c049f4c0505e59de5614c2c9ca133ce924df639aedec44218d17bebae40
SHA512 a0f88be0769186bbc6646e22697568e056fa97c679cc122edf75ba7174b1340e47ef36eef260ec190ee9928a79f73eeab777cea434a3a7b6098a2681e28d8969

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 5db1691327c4a5078a1eb34429812fb2
SHA1 3b4e9f0ea1e41ade10feac48afee87fde0c3c4ec
SHA256 6ffc8dfa77496cb62c2c70aa9d69c8a6514b0fe9c57943ac8c825d55197cbc4e
SHA512 7700f8cf24f4329371c508c4b60ba8591df438176f2677dc9f290c48cc83ef8d5437a2d82720af5985461bd40a207f30687c4b2045487651e55116f2ea422f84

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 f7acddf1f654d5c44eb6e20ac397ee32
SHA1 707128dacf36d43cb4c4922463e477a4d4ecdc53
SHA256 24bcee8a9cb817d67097284bdebe028154c6f1949239883a8cf658997bd95089
SHA512 c3dda84a1ddd30808dafb273766fae991cf97f64073a772dd96897665e410b570772156c16f503a4c430aac2d02c679de40e0b62139bb9b94ec2d3fc4f26fcce

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 5d7cb3bd4aa331ecf0a3c764fe033cbf
SHA1 a34a734b7a43634c48a29b1e7908c9261fc30c5b
SHA256 ff91911e17918d90a03b6d8f15062fe7f2959b858abc8994f1764bee6cbc0141
SHA512 c03aed8041ec63db2c1ef02225ec0849fee6b9510bd6f659d5b705e5efef62d2c04537b37748f2c7bb61202f1899b9e9b6f8d6dc6bd89b6e6b36670b0dd1f9a6

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 9a51288e12146d3b3a9d4859b55c7b8e
SHA1 f5668985bfaa0aaf703f39898847ce7027e20c2b
SHA256 f9c72750db8f6fa1024cef450550adaace14e3c0d0bbf0678613b18f39c92c4d
SHA512 15f26ef3e172e220d7f5ceab25ce0225ff87f2124e13a4cfbe6807bbff32bc58d235576d58b19f460c87c085b6a0fa5d935231f135d6abfc2f679ea2a2dc198d

/data/data/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 2294f0ff15d34fecd354f792943b3b3c
SHA1 16b1567bd24b5e7cdfeb6f7811d742c633e2fd9b
SHA256 0cc330e7bd891407942eb72df5525ad24e5898b0374a50259ec41f8f0c232cea
SHA512 d302ab92ab16dfdc2b4e2103bc4c7e5007a0fac80513d941072d6040930c4a5fac7e80a471114a3178087e18f06cc2534035498492c58ab5c32a2fd3170ef3de

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-03 09:12

Reported

2024-06-03 09:15

Platform

android-x64-arm64-20240514-en

Max time kernel

178s

Max time network

148s

Command Line

com.producepro.checkout.marchese

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.producepro.checkout.marchese

com.producepro.checkout.marchese:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 aa4ef92afb6b7f9d7734372efb37f4a4
SHA1 9121140fe230f65956dad12fe015c655d20983a2
SHA256 2e5e14fdd0beadd0b655e09ffe20c67b50f75b02ed698ecaa0d3e68f514b735f
SHA512 872693e6e765e70d6735eafbac17ea0aff82baf12ff61ad17f6477a54dce4e6bc342abbf4e6f8d8f908101fc806f13b306e9afd5e56fa3961cc8c3cbcd2c571a

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 ffec8d3e8c0a2eb8a0d07218cd331b35
SHA1 352e37ba4e108d391cf9909bef9b792a693d526a
SHA256 25d1095dce78e7edebb20f40a3280ef8af83382ffcb76675d4fa816c21950194
SHA512 1270bed7086fc7b661489a59477b5565664bc404c37458f63709b7c183172fe71c301fb4474ef377219cc578037e6221016d6acdb461db4f818d5c58264b0c80

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 4f3987939ad085cad565a4d2b10f8662
SHA1 67447f506bdaccd3ac5434bbd3eb767da06e47e2
SHA256 49a20c3ac23c449c7ba01bde11929a2216eab91e9630fc546a6e032df6f6cad9
SHA512 7cf2e0647fd7a20094192e7762546215e4640c54838f97af9d9ecdaa8efdbd5548c0d53967f3bf83ac80198713fb96ca1f36fbac357b57628f1a8d84b77e4de7

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 f9d33cb5ef066f11a6a3a237715e8ebe
SHA1 90cb6a8e97e3c5385acdc5f738cd0c8ff6570b4b
SHA256 73700db3e5671cbbb0267ff19c99840ffcd6f17e7cc398d40e89c13dafe2bf72
SHA512 f142e6e3fc58e9bb764b6b1965ea1b36342795d6f7f690330fc6b70a7ad61f2349ecb6e92d34c2f0ee5eb3e79e6c461bbc4328cb0be89b7203f29ea2c9b90018

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 fa6ed8da317f47c717b54519d04cc680
SHA1 b84451ac8db0bbf3b1dfc6e08e8bbfeaed7eb3f6
SHA256 72c6163d5a1ecb8d9711399881b20a4d423478b89d9bb97caa1075b39a5b9eb5
SHA512 2c1a24df0493a25886db056c1b288c32a8b5ad6ddd1820c3250f0295382caf481f7ba93e08b8522d38e942364eb6382ff657991253b3a7c8e649b8cea82e850a

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db-journal

MD5 718e1193ee80561cb45cc27cb1cca8da
SHA1 8fe87bacbe315f0320f2958628bb446cbb133758
SHA256 b1236205ef5d0d23ca65a2cae2b47fa767ec34e3f70c940a7f60a4225a550897
SHA512 57671a0247eca1e1ce4b36d3479cc6721e4b58bd95ab5c16f5d9ba7cf62adde73adda2c4a2e803a05e6576315fc9ffec8cd9345543d77b4896cc0253d1196193

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_client_data.db

MD5 fa1f12626bc82d607290b23ac939952f
SHA1 e61f4c569444f0ba2af9af411a4029a3ff13bdf2
SHA256 400551f8493e60e51b272cbf0cf58c48471ae89e96c2d36f5842c211bed6b782
SHA512 9e1da978cd230dc2e186f2e033869a8c53bc821717142f13157dc8d965a86f420e40ad1d4e839f959a5c886c9691a3a66ff9db42596b85d6bab9e9377937abee

/data/user/0/com.producepro.checkout.marchese/files/ZPkFS.log

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_data.db

MD5 89ca065e3278288e99483d09aec8fe2a
SHA1 639710deed3973c13822d3b6083725dfcff76b0e
SHA256 a22d39177b81d3d08930e1ee2786753f5c06b03bbc8b580af07f3876e477e223
SHA512 dcf7b3681e94a8809c4d2c0fd6c89fcbc7584ac7e4711b55050f57d5c4ab3cff654ab7c1676f371339e527610f87eff0b22f90a6d7f6fb43a7d1ad94bb1a87cd

/data/user/0/com.producepro.checkout.marchese/no_backup/metrica_data.db-journal

MD5 9238ddf4e7ab355ed410db9ab403ebad
SHA1 879380bff58b0c8f8aba7e0180cc18be636472e6
SHA256 d544b4d40e005195938565ae943851f90a65a93a80b2cccaf47e1390d47e04ea
SHA512 d78aaac55386ad8a28841354bad7291fa9b36fe9442efe21620541e957cb8cbded2924b8093563b707764455dde5876878b71397ae39923dbc9d2b6be56a1cc5

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 fd1f4bb06dae4d0d261d8c4a27b1949c
SHA1 a4c058daeb22891056fc6570bfde81c0aae30dc1
SHA256 0f56d11b435d0e361081f13308db010da90e0976810ee80c516a89d6acbed077
SHA512 45eb205ca286edc600c4b12282f16f57c60988052e671b078183de86e057de62698bea4d243b51acd67a6a2d1a8a5e9795a3b210dac5662436c307301f6a07a2

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese

MD5 de810221ca7c203dd73107e588f8a3ff
SHA1 1cd0c4145b75df17c92f8b074462a620f38d444b
SHA256 04db36bf2dbd76a82e7366c62f3ad600ed324edeca0ee3997ee2d05b08a267f4
SHA512 0d245c92c65404124e2e090a850149a2e474146b770e1c6fec37b0f4421580a9bcd1bda3c504011f70248f2ea003fe14f208df92c32ec7878099b8ae975460c6

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 ccec469db09c26eb11838d1a8156d2c8
SHA1 139918cf55787b2e2d12600dfc8858aa2763b56e
SHA256 449ae9cbd920bfe192a93da03d82530373902959c0b4366883d8d8e8b1685a65
SHA512 d9722b8538521749ab383bd806657cd50d3577adadbce2687f22635d81f8ec3b67791a8aeed6d2f98d0e38ecbb37f1541e0c87f4ee74307e0156202b3c9e7d85

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 9af649ce8779a9bfed79b52591c6aca2
SHA1 a0a821b5b927d87aa1a03f97119ab4fbb00dcd65
SHA256 e6ee07e68dd8f917f5b60b2b010a19c91cefc300f5e8ccf24593a88da7ed52af
SHA512 1545ade3d66643bf3154516d538719d949d67d11208dafbff9281b084d0d1e455dab8baab3015dc42d2a8bf0c168bd57bb7cbe075dd69fbf56ddf96b8b06f71c

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 97805b1ac8c20118a8659c543149dfec
SHA1 c67e219fe0dd7d7731644b9508a8a335a5d2c37c
SHA256 86d595f78566837365b8e9ad14c701a911709bf8ea90d3b6ef637302dbfc43c6
SHA512 8e67b94eb4be99facf7c16fdf72aa4a2dd5917aa9da4079312f4aab1deca40c2c7a955d9acf99de405e7dcd480bb87c466099a91c1fde589af4afe3a24bca27a

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 2b79921ce3e2daf918899537d672fd5b
SHA1 ebb2fb551d4c46e58111298d5145f9467201fba5
SHA256 4053a828a06664da81bfae16b5aa6d6b5a6e947a1f8710e615733e51526bd414
SHA512 ba4161464c7080ea8a9e54dce00badfc2c6aa2cc02f4e3ea501a6373b9692614eb7d61c5f1b8ccae0f8e0a6d6f554caaeda809d71d3004ea7c04401820fa4ce8

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese-journal

MD5 4da4ccc81824177976e0c19ba1c324d0
SHA1 516652317246007ec7e5586c892552b295d12ea7
SHA256 435b9d1619e3ef448fd36f1300ae4f70a66094936b7e735981afcd6f726f81e8
SHA512 469cd903cfd449782e3a2b2e37ad5a796989521b562ff3805ae434bfa58cdff12672652132055dc0a7efd4be363a0eaa5a9a0dd657f5df3ffada90a45bd8cc0e

/data/user/0/com.producepro.checkout.marchese/no_backup/credentials.dat

MD5 d70e3acf65747a66ef9b9893d9b40beb
SHA1 b269cb076141725200d70370c9efdac37ddaae95
SHA256 65461025da305d41569538ae04cee33ca29aba5a4dc6596d9c2c5c77bedab481
SHA512 0caa2be06aaa91c2c3aaa2b383b71d5787a646b998a95b6db7f15a5da29885b12763be26ff7451e369b2b1dace6809e30a2103f3937c54033855d1d44e302147

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 95d6341b52b7b2de0ae43af682e2d1e9
SHA1 9c794c96f9aa3d093cc549ef5c2ddba3843055a3
SHA256 8d2c670e5d3213712959fe19415c070285793b4320a7a2a634534f00191bab64
SHA512 9506c669e952d618c5849e57c4073fc3e360c9307122e2207a15dca7b12407d8ef7621dee805b926c95e90da264118b7c7b994397917b06a8bd81725e9a6ab36

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 ab3966552ddf3c76fbc9797c9888f264
SHA1 8bc949d74f4fb18a4fb74c1e5438ae8a9571c133
SHA256 9147c115b5588611c77d63bfef0b79e6761696a4decbf02908c3d8513587fa4c
SHA512 26fdea95a1c529aef7c9ad43567218effe5ca750b80a8f47f52fe8142adc39373b80e488ed96ca8b108b73695268a41d3666b4017944112d61ef9687bb0421ce

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 1e820dc2fedfa460c433b0696268b5d3
SHA1 d3fe09cd00b69aa083e5ab7ef26f0129fd9abe82
SHA256 d91eb3b28d7f93cbbcea5fae35fe6a5099ca63da139e0811d745e6581a477c50
SHA512 6bcedc8911c094b353856f43659f9f91841c39144d5932ec34b9e24df040b0197e9cfba034d4fc52c5e4f9313ed09f850ca5ac6ef38b32ff3d27eacde5bd5f2b

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 23364f5286e5170f9a526812c9595cdf
SHA1 a4d2980cf27fbe0f9dd5f247bcaa01456ab8a921
SHA256 4c9f228d242e3ad02ee4f2b4df265fc9244003acb4ad576090e6732dbf571a9a
SHA512 f05e0c31949a848f4ad14471f1fc3f8207f84aad1ad16bb1dd2b0d3fe3fd00ce6406eb42de45c156a307ea533eba2131c83fc55dae18202c1516f64ab1d00967

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 786ddb2c074236717fc744984af45b29
SHA1 c47a3e68d2d7e58e5bbb269b31fdb4b8c9b1d190
SHA256 e7cc426b0cddee88fdab37e2f6ef7fff04bc8e216855d20fb57551a897aa4000
SHA512 93f748d2aa3933bbb7ef860aa2b0eec66174ada7204e4116be05f41cbb277b9987ee72ad6c05521e1497b945d38badb0dcb9fb94c2eca23cd6e8fa8594d3a02f

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 116af451b7409c1bff2ee856eee2d2e1
SHA1 fcce201faf7a5e759479ed8c74307b1c0e7be835
SHA256 dcc1d44da9a7bcc339245dcd6351900bc708525e19884495e1fdd83f7584afb0
SHA512 94dc1441998cd9a90e52baf1cf603bc0870fea83f1fcf8652569d1ec560d5a62db2118983b09083c5b68b864996c01206665f8377c63d7a2bb3ab53a3f1d9647

/data/user/0/com.producepro.checkout.marchese/no_backup/db_metrica_com.producepro.checkout.marchese_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 b7ee921fdd8c3c4919d80667cbd28e86
SHA1 c5c7a896217c717ead1888dfa3ae48c6871a8cfe
SHA256 a7c7c916693c0fb0b5df8791a8a7983eed1de779e49885aabdc981df2baa2f58
SHA512 1a454bc93cb037d4eb984e1bcfe2fd96d9057c3accfdfb50cb13fe92154b77eb98dd7449f02e1a993c08f086d0cf4233eaf4e970dafd3d7da2ca6b3e54af2768