Malware Analysis Report

2024-11-13 13:29

Sample ID 240604-bfkhwage68
Target Projectivy Launcher_4.24_Apkpure.apk
SHA256 3b5f88556f295dd725d74a9e322e31545436cb5ba6d39c2e75d289462c63d125
Tags
discovery evasion execution persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

3b5f88556f295dd725d74a9e322e31545436cb5ba6d39c2e75d289462c63d125

Threat Level: Likely malicious

The file Projectivy Launcher_4.24_Apkpure.apk was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Loads dropped Dex/Jar

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Checks if the internet connection is available

Reads information about phone network operator.

Declares services with permission to bind to the system

Requests dangerous framework permissions

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-04 01:05

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-04 01:05

Reported

2024-06-04 01:09

Platform

android-x86-arm-20240603-en

Max time kernel

47s

Max time network

156s

Command Line

com.spocky.projengmenu

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Processes

com.spocky.projengmenu

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.178.3:443 firebase-settings.crashlytics.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 142.250.200.42:443 firebaselogging-pa.googleapis.com tcp

Files

/data/data/com.spocky.projengmenu/files/PersistedInstallation2661004220398098158tmp

MD5 01dbd2bc841a43b8ce8ea6655fc625bd
SHA1 8f73883423892df6b33df0367a53977f4dc0afb7
SHA256 c8a19d188f589687fd4326f8caaaa801343d0c0d443c3bde2c9b6c9262664ca5
SHA512 74dd633567fb0faf861b1a67e4ed3c42905e0480eaa820fc3fafde2e798ce8fdb4ac72ff0532a530b5e5a4ebf1236ae4e6f69f473d11b9604626403b0b24339e

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 0e7f116d921aefdf1b010145b8d8b9c5
SHA1 2cf72ee63ecbcb7c8fa7043d0a3e5f4a03536ed9
SHA256 35ab4d761bc0a974ae664610c9f953d1d406bc8a37296bb4132fdec47acfb09b
SHA512 c2582a88392fcdadd6616abae369136d820673ff72770cef76286eab83d1a0febe7d4fdb54a5dd8c2f5eaa1ee54f3a5a25fbe27e234692d3bc38c4450d07ed11

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688602D3000110B41B972808A581/report

MD5 8bf2b4c4e06a55b5dfd9bcdd4e9bb954
SHA1 32bc193c6e49bd9855f71af5366021ff32d85036
SHA256 dcfe0cd1db5f0f2456a57ce382ada788eeabd58ee57da44706f4678090301588
SHA512 5c8c051bac5553453fbac44b7ff23b7c2b022f0def3cfe02ee31921bfd90a6d768334e9e41ddbbb48a22250927a9627ca30a2534fa271cfe9dafc9b4a56dab26

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-wal

MD5 bc43afffa17f1c9ce3fd9d2d62fd6d5e
SHA1 3c620ff9e00a46a26eaf7468269ed1fbee6daecf
SHA256 180ec4cc2fb94fc5638b58fd830e3686e185b86398cdb68954c6d4c780f9c3a2
SHA512 17ab91b04af2bb89d273095b0c8ccb0c498de34c6dccf5be80d6caf9cdb7fc1c916c025f6e27d8d86b8ca1f649c4e9ef27be3ee4271912c619f5b5e37ac8152a

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/com.crashlytics.settings.json

MD5 15a7d17fc7e17487fa36adca48a40ced
SHA1 637d9d966235cd8c6760360b2f57557489caa283
SHA256 ca73dba3c7548aa36d4516c03ce71f749cb14261b1f1e24fac95a3cc775512b5
SHA512 142701e4a34adc5268812e0c55fc06ebbb60fc86affe9b7da790ef33ee39284e8da4f976fdfe6e36be99212fba6b659da3b89ea8ca2dea043ce7fde93379a7c1

/data/data/com.spocky.projengmenu/files/PersistedInstallation7665807353998514788tmp

MD5 0c62f735148cf722dbe3e52b1467401f
SHA1 64ed3978ab3e3ecd4cbce8980dd2dacddd0130bc
SHA256 802702cdc4676f532b80ee6d3e74e0933134a70684dcc0a56c3f5461674573ea
SHA512 f2fd8769a8b7af3b7733bfa743923a04fa2ccd6550f4db956bf3075afc31bb8875880c444ebde3cf0e9609d3679e4198449e29f85418ccf3a3c6d25c769200e5

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 4283f4572bdb3a615e082fd623e5206d
SHA1 0dcbcff05fe46b29c9e3528cceb6c9211208e317
SHA256 de94a470ceccd984c15de54f75eb1f6e549f3880b94429bcf42bdb2465d53e60
SHA512 945d9a58ea4395c66faa6b6561a3c12ee3c521b442d035d21713c7cc533ec28b1c7c5ee058aa32cd1a64df8e44bbae2085de8c6bf386908e8d975e95a26cfc6b

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 cbc30d01642379af9f713f1ab5e66294
SHA1 adf14e5104eed4003ff15361aa5b47d0f6ec6b3f
SHA256 d2413c8a99d1a2879b6feb14ba13e305ce3723f47af5b1a27d8e646ccd2b8aa3
SHA512 cadeb4d792c8cba8f5152d1784a7eb7d952b63080fd3689a7dd89138cbe66f3d8e64bffca37b52f36a370da2471eb04465a6c9ccb24ab3f29efabd8b3a497ba2

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 e59f819231475929415dbe09d5ab41a1
SHA1 0ca95182a628b7abc2a3b8599ba5c89e8c8c1687
SHA256 fd8ebca0e1c6f1e6d4fabbaaa6efe5e8d6c031d6b8e5d5e20fb4d813ae2140f1
SHA512 9aae24aae5a9dc725fd87d5c617311c951dda648c09d136aa4fab79ff9ae8b0c0ecebf63ab25157445a14f5981039fd22eb0b3d76e9909698377a693c636cb70

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 a5db0c0a068e3cc35c5664470a4dd37c
SHA1 54ac18f932c93e7315c428fd55f27fe7dcf298b4
SHA256 38bebb478179cd1c103195afd9b39b95248af48a14034f183befcc8763d0ca90
SHA512 d0a639b2f2a060f948e443c65f21148aea441a7e97aa41be89ff5c7c1da15f0252d567a68eb77ce2ab731a8b03834c4f09e11c07f97439d9c5cedc7fe254484a

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 9010ff7c7d8922c9bb1dcf6f252090b0
SHA1 a696e3aa037235bf4355876c31fd30b94072da6f
SHA256 53d1ff8e507d367cb805c6bde5e2795a0d902562d4a819a293212d64447274de
SHA512 ced6f3fc595d2c74e9dc580be3583dff643115496c9b05d3ee65069d75bdaccdeb26bce6c32cb9b0250ed08e1bbfac546ee456ccdf05e4da5e17b3e28f797595

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 f7e7747b8c14caef771ba620dd925b7c
SHA1 e9773a7454de898aab08794ca30c6b3b1acfb319
SHA256 45dba095eeb2315a94e48af50a072c8bc4791af9c1196a4ffafc075ee84a1dce
SHA512 a8c190b0eaecfb889a612ba19860878128600597df8c7871f5d8613b5d696022a0d387231dbd3632256c449d0a051a57ce7c7b91679b2c1851f3a53cb8cc954b

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688602D3000110B41B972808A581/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688602D3000110B41B972808A581/userlog

MD5 1888c4c954349e5b51a46eae6999fac5
SHA1 7c7340383e7dacf9c8c1b701ab9f16e0489ee5a9
SHA256 3ebf9f39dbc218c99aba68b5e630a82c3f21cebef87be8aa6750fc1ecc206410
SHA512 c8500c887ca1e044952ea3a2c84482e4b65089013d4b56da92e6e79e0e660a256001d9a98d82e0c63c05b6a391834bbb76b0c1151b7bf083b862d9fdd9b12ac4

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 6b40f5fe78ff26d71cef84239bcd92f2
SHA1 633057fcecb2f39d22d3d50a9932534525d48d58
SHA256 3856c2785bb081905bbc229b7862f293af35869ac893cb73b72bbd8a85fa4c64
SHA512 5483505df30e157a03361319b1d4ede173df5f5e953150a8d2826becb449ffaaffc223b787f0be5ed82aebf2bce2943f90e20f7e7a52b152fe8ea1302a2699b2

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 33558acb5b1d0c5a71043fdd8556c1a0
SHA1 838b00f5424dfac306d05d9ca1d2de5c77ee3b09
SHA256 00164691167979c18b6dbb6cd6b69e795b242fe4e7fabe535d506badd0ff878d
SHA512 33edad782348861926a829535e6d192e39844747b6265a9c83cbd1a17f83d59a7c5e0cea33c9e591e2930bb45dcfa55a2011485d0bd9eb2a39eee43fc5ccacd4

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 7ee872999571e0a0f232d5dc246919de
SHA1 f04e4fe3fbbce36349609ff8872bc36d22fe0934
SHA256 98275ca21bb4eca11daffcad7661f404c8b954e187276cf8a9048099da66bd17
SHA512 ba4ad33b0cac1aafd39a9b6c39afb341f81120a3cb855bd0f49cbc3c3b5a48ce7f7d973d75cbc48681b3d539407a34119af37c62fa89ec2e950f90848c89623a

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 2ad33bddf45b177943dcc49c23ac4fc6
SHA1 1eb4ce4b9676db43784a11181315956a31af0f9b
SHA256 5ac392a4cc18d8953bf492d7e63cabb15809fb861a935817d17f538dd2f7813b
SHA512 cd17372e79f7a8dc8e552ce15e2a38828ccaee375c1b11270941b7ef8e2b584673150a315d0f75d7485347786e43541cb982d647f2daa2ab20ddf3d7bcfa0f05

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-wal

MD5 ace8d6351f6a5ca4882b682833be3329
SHA1 42b9c0f3325bd8cb45e86bdfbad2c68d26b26fba
SHA256 578a9b8437a41b59d9e57199cfdda7a0a418b49b4f71b13dcce5d809b82396ae
SHA512 a1f182f88ff03edb45dcb1d3adf0143b89894de323d668a27e96aa75d18a210c10e8bea5da5e52d7a43951cc02bc48d8107eade224fbe19e1adaf981b3e3ebbf

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 7f294a6b8299e4c8ef257c83ae1bd328
SHA1 5d43369d3e62325cccb4d850863bf4249da78879
SHA256 9935f517ee67dbc3bfdba0e26992be6cdc2510987f1b3afdd73ac50126bc0282
SHA512 1e6e8a06f04f1025a57c11728e2c4ec520b90b7e60d423b10b03c1593105fcf15d4e21b0c567c41f2c568e81df97c24c9346a58fa72f69ba87e55d3e1f7a70bd

/data/misc/profiles/cur/0/com.spocky.projengmenu/primary.prof

MD5 60c98ba72a4e6cf18e8dfcb210b08330
SHA1 14dd92cf2b3dd293beb090472f26b512a85269fd
SHA256 e10279a4a2b1045f105082d1f0d8b5a23494dcf4d822c8ea06cc5b9bf4a75ff0
SHA512 00e0ddc10d435c1c30cc9e03cbc5bde3566c577cb423889906dce7bfecf9f9f8e8be885f25cb9179e9b73830714b6c806ab3fe9b0401e18c2ac005deda60ff2b

/data/data/com.spocky.projengmenu/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 59e29b5d0ac30d8ec67a0c67deb817f1
SHA1 72193ce883a530f23bc74b6fe7a3b92abb7c6fe9
SHA256 b6ce0de33fe26057d8e576002a5e3ac858786fac9bd4f9d3285077a3a4ac5463
SHA512 e271d252bbed70c2133a2fe8079bbf6abee52b1e6d3b104dc8556b120724a29d7bd271c9d4879c4c169e56e812c4e40a0ed5643a834d4415c27716e1d8ac792d

/data/data/com.spocky.projengmenu/files/profileInstalled

MD5 458367513727eb7085ae6bac486c52c8
SHA1 5149e2e342aca611916bb3731c1ded39a17b5420
SHA256 71ae47ef5a07c244f75b92b1593acc7a427e2a51094e3f5a203c4207fa15e4f7
SHA512 ad02660e7fb3150ba645a651d28d0e039b9a266327555006ba3b4efba28126b890a6199e40b0b7112a02e0908bb1574fee32f72f580b3aa8a6cca06a6958523e

/data/misc/profiles/cur/0/com.spocky.projengmenu/primary.prof

MD5 b5cfaf19b0330ab9b0f0e3d5e881f11c
SHA1 3644b00f10d94f87c32d5b10f9db86ab4477ea36
SHA256 64672ed9b5ce529c2cc597be1a8320e040c9fa1c64e4daf3b0166c3b9c1df777
SHA512 594dd3ce3b9b51193e813229ba5d3cfb379210535d60da9a5c9dbd765fa3ef78ca049b575aa0619d8989f9784613fc3499e63ded8df4ce89127d27c5b9e81a54

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-04 01:05

Reported

2024-06-04 01:09

Platform

android-33-x64-arm64-20240603-en

Max time kernel

42s

Max time network

171s

Command Line

com.spocky.projengmenu

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Processes

com.spocky.projengmenu

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.36:443 udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.179.227:443 firebase-settings.crashlytics.com tcp
GB 142.250.187.227:443 tcp
US 172.64.41.3:443 udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 216.58.201.99:443 tcp
GB 216.58.201.99:443 udp
GB 142.250.200.36:443 udp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 172.217.16.234:443 firebaselogging-pa.googleapis.com tcp
GB 216.58.212.196:443 tcp

Files

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

/data/data/com.spocky.projengmenu/files/PersistedInstallation1721926400920885471tmp

MD5 f18f6a2155ec36ba3ce0dfc06f7f16c5
SHA1 167726e1279e537ac47f9d24a11378539051649f
SHA256 a80ce39b27bbe65a542b5694a124666b369972d66ff5d455199eaacddc55b489
SHA512 24bb07c3415935919ed36ba48415ba70794ca3866a6823c17a366af9aad30dba5368b97451aaa07022269ff1106303022fa09c67b9752a091028b7bc26a4a935

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 5390d2f2a3272ebe5f70606e4b7342b8
SHA1 22ccfc963375ba8d8fe1ee6c451b0474f4764157
SHA256 94a18260fb10ff9896af7b89b8317f64f3a3a9119fae24e829d4b0f38457969b
SHA512 fc7ef8b9383c50902f89e75e3846f51d45035600389c8d43bb3a008f6fd3de42281aca276f44a9772af153cf6dbc556928056e96493838254189ccdef14e13dd

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688901CD0001106972CB2A0968A2/report

MD5 97cb49d3a225cf079700a558442113b3
SHA1 e0f0acb2e4292a8dac5ed0ec79f23da8504071e8
SHA256 6c604abd814961af5835593777f0a1adb32e861c0bb627fd6c1e35e66af58aba
SHA512 3fbe213de7cd87c7111157f42166ec773cfd35e26e54117576ed96a234737d7968e6e5db4e4c4bfa4c0255b6fb0ce89bd4542779f7564bd4832f078b3e622837

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events

MD5 25a76461e49cfa2d484ce85ffd0c5065
SHA1 6637254d3b788459e49fa1ee511ed2ee4dcf12f5
SHA256 4838c217c3b38de6b1d300dd4aae897a6a92389e2dc1594c4b4092dccfdf802e
SHA512 19b8455c5c2a1e5f215eab4b8caf7da95f68b0c1a615c970ba64006d7124bebfebe0917a0887d1341d373a0db89f134e5f61aea113d05e5c9b8a1d9c2e6ca5b8

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 d26cdee2ee7947e8eb508ae9ac69f7d8
SHA1 df3fe4903f0288bc504cfeb2084487353dfea982
SHA256 236bbcde664d3f61289da666767fd7a9b91ce9202f817c90f5cdcd824c8a6f13
SHA512 6785beab10f350824f9436906d5585e5ee45a2287c0a5f1c6c15bfe903e5520d9cf8cf82f519d979c7d1a1797b28eac095b71f606763207c4331509f6bc9f759

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 62900422672e3f5ddb6118471cb3dcf2
SHA1 9783d560f224b82c6fcf315fa026cf3790d038ad
SHA256 6f42026b48fb30eecc36afc40f924c9c8ada9064fcf545d2d33f9a21f24074f0
SHA512 6b4b8a337f07bc7e00ba0e7e9498dd7f4bbc0066ea64d4d4e13f66d23c1d423219bcffda75e4ac36087caa9c08a60bc3999ebf8d8c08c865df6642604844b75d

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/com.crashlytics.settings.json

MD5 5b333ba4a50a438418a43b74da116bcd
SHA1 c43c0a358b1a4a04458eea49f174221312630130
SHA256 47a96bcfaca205efcb3bdf67b30dea21359a1ee0d7a0042415784166f39a9c30
SHA512 09157545df4a7eb6927de0ce18d1433c06f8e090ed982e0e0d98acd4f23c9c2a6e32069c1957c13515af035a7e5b85e112651ab6b5382ddb215c7af1b8b767f9

/data/data/com.spocky.projengmenu/files/PersistedInstallation3330492359180071911tmp

MD5 4dbf3a94144a0d24c768229208591d7e
SHA1 4ac7bec1f148312c9496ce448fdcb0b3fe3a14d4
SHA256 b57f232207a5b11565d71c0f449f3f9e49cb977c426a64a27570f2426e996664
SHA512 b00ef3bfda6c4c638809521c849bd54114d551d618b033d7072beb276c586b1df7f929e06fa4ce1389e10650df805fbeb85f6f48a1d95b8eda7a4b3207c0bf08

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 d6995bd170dfc49f5c5b7afc007f5a9f
SHA1 df4aa5cf8130421458a341e9da9a291182850f55
SHA256 105ae94c7c5516a1c0c9d27d72ed83f55625af4faef3022cc8731fdfa7f27c5e
SHA512 3028ffeb409ccf51ee70a648e6592fb882da2a646f93dd5314b79d83b839e71087c63ea839947b0a34decfabb9e0050b7036e8a5a804545f139c8f5b16d230e6

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 3ddf6254193fe2eab662f465dffe476f
SHA1 483b81a4f69205274ccfd8966fce03246980f8b1
SHA256 e80336caadcc61ebbcb730b3e139ebd2470f7629bf93f2e2b6ad3750614eb571
SHA512 b5728f81a7fa1f73c5e23f8e9e04eec3224bfc3517639316effa73f25788cabe048ad9a94d5042bf3dddbea507be724f6a5b8c54a0bdb422d27e349d521c4eac

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 c5d28ec8e513d5b90dde571fb0845e00
SHA1 5210cbe0db264d48bb98e09f094b3361c4f7b1ec
SHA256 0f526147403b6a5dacdf1dab58a2390f1871dcecf12d82028f2071b75d928bef
SHA512 f22bcf413898df0ab362c4043d2c80f12c23a8243407cf5cb4faf3a69201b72a9b185dffd32beebfc4a853f9955f497ea958fb57c0b525d29e12f83a180819cf

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 6a44e4200e3000c273a24ffd6b0444c1
SHA1 50820d3a6121bed9b8b807f178dbfdc9f582b8c5
SHA256 e6e5153ee913dbf05d0d385ec58aef29365f658c77d5aba395e07690cb378161
SHA512 2ae13e62ac4e7947bc0403cbcbc5b478591810a498259f90a5024d81f77e77b92f482586915bc0d4a966c417c1b92571852f152682a5a5cd1564db7d624d5aae

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 b2fc60cce59bba0ca7377aa194017e58
SHA1 1cdd66fa4f0df5ff4f1cc8d90dc33693afcba270
SHA256 32ba488c525df3faac0317d18e412b875c330bd80b691586ff6f3171190283f3
SHA512 f850bb65cee7276b1e1127607256128ed14ea0b6543d6fb370f9bb3ca70b4c9c3c74b2d2dab5c79d246f20f01cd349d17ba39cb437bf1925a99cb6502f519e24

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 382a4742a6e5e06d921cb501640a8341
SHA1 ecd62a4a7bcf7a62cb9d63ba3556e8bf9916510a
SHA256 6f7fc95698d33720e72f63d524fd8d588127b2ddd6d377391bf5c81f35c2a577
SHA512 a3c25e4105ac5e7fd6734e59a05cc6cd2491ecb7d6541c9ad1b99a65cdc288bfbfa780517a0b47039efddc0db47fc313458a1140a9f31bf52e30dc62d01c5a1d

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db-journal

MD5 05876ee2046b21c6263cd24b1dcad7c8
SHA1 0f183a19a32d3470eb2a043bd20b426566c5e6f9
SHA256 ac82e0f5b3743bd25c69e2a9eddfd0c5e8e3592192156d9598bd6c0264ca17ab
SHA512 e58efa38d75cfc7f28a2e4d7001543d6ef362032e94316b43c78afd431f2676f5205b573877022f1b944b48f420d43e8152a90bce98807c44e6f8899e9896b51

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 0a4551b99041a7dc1482d5361adfc84d
SHA1 5aa4b7027e4b5c98192ae301af697beef9ba37c5
SHA256 4dfe209e46518e9dd3ae6fe714e26633bfe163beddccc78ded5af9b1b97ffb6b
SHA512 4147bf730aebd967ac1a7570b5127c5239b8c1c7130f08a9b721b3a7011066ffeae38a5e88cc752b7d99946da64f2474b38ec482a3495c6d6bf67325d114dff2

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 0a3e41892c589d97aeec8a1d46053496
SHA1 b1a277cb3426bd503d064a8d854903fa1313e75f
SHA256 a74840377f5a413b952ea25f25a3fe1846f10e8333509568920852194eaa9233
SHA512 460c40a69efa9622382d901810eaec1518af05ff2c902b7f64043625ea076c245cd8362e0b05c1e43f52fb558e6e7fc45c6115aeabae8254232494e8947580d8

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688901CD0001106972CB2A0968A2/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.spocky.projengmenu/files/.com.google.firebase.crashlytics.files.v2:com.spocky.projengmenu/open-sessions/665E688901CD0001106972CB2A0968A2/userlog

MD5 7862688a006fd6aa863ba307d6f8e0e7
SHA1 80780ee9fa5b891bdd1bcd2b24c16f9508db799b
SHA256 9ac304dbe5fc50b0b8a73ad3a54745d7dc255ea59e169ffecc95c738f5c2d5f9
SHA512 bddd127eabe89f0f8eb44a85306278175be54d9d957edec8ccf5339ff92d71ecdf601328c26def8a768df739c82cd8cf415b57e423d09363b7cc4d1088e94f8f

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 7fa4991c22d700e043937bb8b12d7826
SHA1 4d33dfc295fab5315891a2bc34801f52fe6442b0
SHA256 dc41a0090c0a44aafb63681fc164dc17afd4768012accb4d0284c884bafe1996
SHA512 e23a164946f02ec83e7caf5472573c3603fa2ba0dfe64b47435d4652d7ee7c736aeb4bba5ce53974f29514dd14923532893220bcb5ac8080d746403670ca04d6

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 a2cc20878c4d2964ddb380352b684618
SHA1 01614fab2b3a0caf28480f3a84ba1b4b314f1dd6
SHA256 0a69463f778028f1d7b96a29e60312ace8b7fb4194337715073b0989f4c4f4a2
SHA512 f92ab4d2710e04f3189b8ba775c9c3f6304b7e6492854319f782bfff5f05ef46be5c511c7eec655c0cef8f1182cceed2c1be982aab93f35f9bb9cbed910b2b0e

/data/data/com.spocky.projengmenu/databases/google_app_measurement_local.db

MD5 9c0dcbe59591ac788ef15d0a6c45311a
SHA1 b7338538f96f07ccb28fa80607e04bde8b9aee1f
SHA256 857f0fdca906ea71dfadecaae50a15bd84a22e19d65ae661a6937179c395fad7
SHA512 a25571204ec1a129ad4fd3c839af3b99d972e9252ef7d80c8e6b9572c050168dccd797e888cb8ce5b10585a78e85dabb3d60f217e5ccbd36094403b8e9b6a217

/data/misc/profiles/cur/0/com.spocky.projengmenu/primary.prof

MD5 8452f04c34f9d7d7678a8fb17a3a864b
SHA1 b17d6c205d496f8f6b0558ba9136ccce1f51fcd4
SHA256 cb2db9d88ee84ea4372f366474b6dc461a788d63ac8d9c9dba1ceae82c6ef1c9
SHA512 5c0a7af1db451cdd7f99a7aa7834dcb9d58cad2272c547011a46dc889b72b6fa8d0cb24d0819fdd1699c18a6d2e1b7c25349e3a13c47f92dff22c941184526ab

/data/data/com.spocky.projengmenu/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 53b5ef76bb9ec77d02cde756c5199efb
SHA1 f38e95c3591491cc3af763613c4147907b67549a
SHA256 cd6b60217438707d829dccd51b158c118d519be35a8648c18afb2a019a349312
SHA512 1b5332f7c62a2e054d9abd04f26a3117633b3403deaafe973d6af236b54f4f762ab3b8f7264007534ee4266714a7f33a069e1a8504cd8dca5f6950b042978acc

/data/data/com.spocky.projengmenu/files/profileInstalled

MD5 7557707dc2c2c6130cafdc23fee4ccba
SHA1 7074f8c7321b37e6ae080e419f61d17807d77e04
SHA256 4a28289cca0642af0ef0219dc8f833c810d2f278f5bc28a5766dcca4a50fb283
SHA512 767a656058008b0aec8912de44d8ef09035e8cebcb88b01a6dbc39160a8afe7331fef0c3366e6be89d7171a6b3d28f3d240ab1fceea856a665a0a4373744d415

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 aa44894bfc25b556a256d9d5d3026d5a
SHA1 f6dd48b38dfae4925b7d3aa1443b823ce3ec93b4
SHA256 28ec65764218fed3393f2cc5e9293a58f338625d12a3d8363d69f533b940429c
SHA512 2b383896a9f4b41ac3f7d8c7a6fb63bd52cc2edaf0e9c3083145141b489b409b89482fc9732a451270a8b2bce9846b21ab081e8c374882d0258b9923b8ce87f0

/data/data/com.spocky.projengmenu/databases/com.google.android.datatransport.events-journal

MD5 e7cd5ea9a0fb5c29c0bfe22bd5c4758c
SHA1 1f6bc66d1448ceeef990d5986eabf33d38cafb63
SHA256 d75c80a9ea0b6e880ffd18da4ff18ea6014c257712de09278b0e72d2abb7d9cd
SHA512 4b7e7fe7a877f7e38e2a17ab760df2b5eda65ca9ece76b11e1a9f8a15ff8473d9a6f664d1048f05b5cec571348eb08919aabd2500c9d3bbc340d5a9c7e06653b