Analysis Overview
SHA256
e588fc7c2c91448bfa9969bd01838295bd26041c0756d3048c38b1c95bf8e6ab
Threat Level: Likely malicious
The file 9a887bb63bbc4f7cbb48212e4e13693d_JaffaCakes118 was found to be: Likely malicious.
Malicious Activity Summary
Checks if the Android device is rooted.
Queries information about running processes on the device
Requests dangerous framework permissions
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Queries information about active data network
Queries information about the current Wi-Fi connection
Registers a broadcast receiver at runtime (usually for listening for system events)
Uses Crypto APIs (Might try to encrypt user data)
Schedules tasks to execute at a specified time
MITRE ATT&CK
Mobile Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-10 11:38
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-10 11:38
Reported
2024-06-10 11:42
Platform
android-x86-arm-20240603-en
Max time kernel
179s
Max time network
149s
Command Line
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/app/Superuser.apk | N/A | N/A |
| N/A | /sbin/su | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Schedules tasks to execute at a specified time
| Description | Indicator | Process | Target |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.goldmobileservices.militarydiet
com.goldmobileservices.militarydiet:Metrica
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | api.birbira.xyz | udp |
| US | 104.21.17.160:443 | api.birbira.xyz | tcp |
| US | 1.1.1.1:53 | startup.mobile.yandex.net | udp |
| RU | 213.180.204.244:443 | startup.mobile.yandex.net | tcp |
| US | 1.1.1.1:53 | api.tridrongo.info | udp |
| US | 172.67.161.129:443 | api.tridrongo.info | tcp |
| US | 1.1.1.1:53 | api.oradaph.pw | udp |
| US | 172.67.140.65:443 | api.oradaph.pw | tcp |
| US | 1.1.1.1:53 | report.appmetrica.yandex.net | udp |
| RU | 213.180.193.226:443 | report.appmetrica.yandex.net | tcp |
| RU | 213.180.193.226:443 | report.appmetrica.yandex.net | tcp |
| GB | 142.250.187.206:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.187.206:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | arb.grattomania.space | udp |
| GB | 216.58.201.110:443 | tcp | |
| GB | 142.250.187.194:443 | tcp |
Files
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | f37e5721981c561aa6cc6ffa33b4df1f |
| SHA1 | c37ce31f2e6efbcf6828e18f3e4c65d84372d1e9 |
| SHA256 | 49e5af2737ff4d302266f6909a49fe887cf2cd832b0b98ebf6c4ca1333aea066 |
| SHA512 | 583c9e52d55972c2100e64d24673bc06d93aeff3090e1c0194ad8750368774a1707ce6cd39322547e2aa3281df0360fdd482f73eee92bcf6e9715f571c65bdcc |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 8e7827d826be7fe2cb20e149bd51c871 |
| SHA1 | 5c7a4f8371dbf5f69e0b27f01c1f8ecc5f69475c |
| SHA256 | db7b313a89c3a0f2dfb0d37fef1a148d7304a1bc1297d9bfb0a4a0065fc4fe83 |
| SHA512 | 22fa2c856c7bb03d07527ebac19f3527ba1c9bd2b4e9a8ae8f4c0489c40d205d3314346269aebe504308846a36f24561b16fbd5b76b2cc75eef133c4934e7550 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal
| MD5 | 1f6e3809b4e51868d0b679287280161e |
| SHA1 | 16ee466326494976ee40b2b3a4e4334babb9b84a |
| SHA256 | 41b982726b73a5d48cee970b79fa2a595b9016b8722f937e324309ac7a9984a5 |
| SHA512 | 509866bdb7f7d4603088e70a2b6cdd1b36bc05fc29eb8ad32264eff2cfb83e648aa119bc9d4bc00397e2828a0c66d66924f6d169754285ebfa92de56f25405c8 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal
| MD5 | 60b592c1aecd3d2cec634d62a456a53a |
| SHA1 | 7c9227318bcf0916134d7eae11062b0508e19ebb |
| SHA256 | 1897ebc17ad2d9af5fdea640e92714f445ce0dd02c00bbdc9f5141e8ba3eee01 |
| SHA512 | e765230c6ef55ac623be2902436e2ece91558b847a865c42f9945791b6ff3f4b6abdf2d3007e9ab22f107587f334dc9a0e299e34624e8fcfc4a454a2f344d6a7 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 44def4f6e42c3ec63f229d23af8c804a |
| SHA1 | f5956d9295778b539bced03215343fd3cf7a9dd8 |
| SHA256 | 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a |
| SHA512 | a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal
| MD5 | c65df438d814decfa6622c3aab01c7ab |
| SHA1 | 8be18cbbad4b8c219835a33f34ed9a28d82d707e |
| SHA256 | edc70a5950b0d49fe06ccc4f508e85a30b83560bddb1e42e9b2d27c07f41a720 |
| SHA512 | 19f5600a7aaa7db1f58cd28c9f12e69131c6c2a8388683b770917f97131c3e0c2e4a4718f00c8b906aa738908a0438e41b961009a7d6b9837bdf006440448f01 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | e9411a00030407c5a20071638285cdfa |
| SHA1 | 6a38beb8e1f196528824332888cf3fde289803ac |
| SHA256 | c18e2e7d42598f65642486c5ec05f605b8029a08de266b5b3cbd74c04035dd6a |
| SHA512 | d59c8a49014d56ecf8c0ee17cc811b842df57a95d34e60e5499c58793291742c75e9854e23bea75469407d257f0220d3d9c8808acad52b0b70d322c3c70dab92 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db
| MD5 | 8403460569ff4b255864076915791ff8 |
| SHA1 | c8686b1feb3191d4e901545647cbec46d2557cbc |
| SHA256 | cc5acd4ad8ea5c8a6d8d55286d0157a6e164c5d6cb4478f7cd102559f9dc395f |
| SHA512 | 7294b11d4c7942dc6e867aebab77945a3054356465397cc9a03975f4897fc329f42e8383436074e3dd3351d1adb7afb4d95a16b26f4c74f460559d51508f6ecc |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 997b05d7fdeb32af9d48d57165619612 |
| SHA1 | e64887c4004a98506f943de263a337af00b3e496 |
| SHA256 | 60f5278ec9ebf9fe173175e0dee7d093235e818f0de33a4f118550ddf1b4eb32 |
| SHA512 | e7d127a6558ce5daab98149035fb5da4337e28c0cd10dc6d304d264ffa65cbb39e574d62cdf26794dd82f085b6b3333dcfb4a193bd5bff2e35e9feab72f959a6 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 6ffcadb2bf1f08253f59e2430fc3c400 |
| SHA1 | de8ee04c6f4b4b8fac09fd35d454bc185c48bd93 |
| SHA256 | 9d339c52797b9fbcbc7a726bf8982ff206a0fd71de2412e79131a61cd47718da |
| SHA512 | a679410d32610935835cdaf2a603f029fe4030da390fe42b9e8410383ef454113d79076263dd39f04cd401be867d2ba2a9aa4af73cfdd49020b79788a7952bd6 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet
| MD5 | fd7e459ab150b4e8f0ed6c17775c0b2f |
| SHA1 | 17fbc210a32e4fc9f05b6b500ad402ceb730e917 |
| SHA256 | 626e7217819212a091f5b515c44b952184b125b7a68b09dd266a05e6d84d9b12 |
| SHA512 | fda44424eea59769ed5b01e68a3e47d4f57ad29c3c9cb881865445bbb79e257455b3a22050f247704172b6eadcb5eb81cf54301761348631c079b9c5205af86e |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-shm
| MD5 | 01e049639c863c877b71ac30e585675d |
| SHA1 | ed116f9da483066698dd9598100ba17c6cf2f4bc |
| SHA256 | 68cb2f17c49dc7c07e57e5b8d6141392bd37f0aa8b5058bbaa00d33d27304868 |
| SHA512 | 44df58b64a72fb464a4650406c6f5b5560a650fc52f10ebfa36896339dd8553bb0ea0611fea4ba8691d96005aa2ae2c52dad0147da58512639366c17bbfa6991 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-wal
| MD5 | 68df75aa7965c4ba1b46f92906661c56 |
| SHA1 | 80d3dab9b9a65cadd63e7ad25d72c45d162641d7 |
| SHA256 | d29069ee31566c701ff2e40e33eea32c4c70a113dddab18dcf3818d35f9fa239 |
| SHA512 | 44f282a9c791a5b860322ea30401d56ddb62a78c120caf490e8710db1e91dd2359a6620228bb366da5225d46ef0c94997f50c0f14c864d34da5b5a12e9885589 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | ec4802085caa8559c728027d35e2d458 |
| SHA1 | f0c3f3158617f8309353f0366721464ca9990d4b |
| SHA256 | 186db4cd56310fd372e9d53c17d101d2da62bde669fc39f92e695aa55c79894b |
| SHA512 | 6c2dc86f3d0436447aff73db881845b0eacb085d6ec517f15995a28aca78c2a590b093a99149bc743795df15dff2d2e0cc70dc0439d692d49f6919c437bb4dd4 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180
| MD5 | c8fa9a9673f90fd7c4a174e0aeac022e |
| SHA1 | ed7828d738bc146265b9b0216ba5ebda0c3f6cee |
| SHA256 | caa6fad7e2853c643bcaa47a8eac46b34b38e80501ce93f77b73945afab7119c |
| SHA512 | 8016544dbdbb22e4ad1bb0c445cf11132c930beb4b1d63499e2020bed952f3da6950c7c42fb6e5870df658dc83f038d72a9d6a0ce68f6569c760caa93096a7be |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-wal
| MD5 | a5b7a26b522b6b2782fa2827e43c38c0 |
| SHA1 | 569df631317dd9f8c750293f2b2149d3bf6adb42 |
| SHA256 | a4f3128dc994d1ad020a6bd7586e7b3b0ca8f0fcf8214ff66aaf34c1bf922559 |
| SHA512 | 87ff5df3cca7088ed365c50e7fe63ffddd357a2d82a755a9c381ce27cdfabaf8ad4148290d473ba9785ff8a1e6a93c6bca8adf417de24d9c94b01f2abb6138e4 |
/data/data/com.goldmobileservices.militarydiet/no_backup/credentials.dat
| MD5 | be22e66128f18d167c4bcb570591c4f6 |
| SHA1 | 8494c421bd742ae1a9e49ea2af83a5300e0715e8 |
| SHA256 | 625862a0fe29206ea71ed1e51c0f71c7b260e0b5ee3de7a58ddd4f4a7df28815 |
| SHA512 | 2d70f9dc08dc0c72391881a7e579ef0f267c9fd0f776016d0a70574ae003d0700fb52f2727c59636ff231ff939f9aa617bae7881dc508efb472f4a01bee963f0 |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-10 11:38
Reported
2024-06-10 11:41
Platform
android-x64-20240603-en
Max time kernel
179s
Max time network
148s
Command Line
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/app/Superuser.apk | N/A | N/A |
| N/A | /sbin/su | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Schedules tasks to execute at a specified time
| Description | Indicator | Process | Target |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.goldmobileservices.militarydiet
com.goldmobileservices.militarydiet:Metrica
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.200.40:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.179.234:443 | tcp | |
| US | 1.1.1.1:53 | api.birbira.xyz | udp |
| US | 172.67.177.167:443 | api.birbira.xyz | tcp |
| US | 1.1.1.1:53 | startup.mobile.yandex.net | udp |
| US | 1.1.1.1:53 | api.tridrongo.info | udp |
| RU | 213.180.204.244:443 | startup.mobile.yandex.net | tcp |
| US | 104.21.66.157:443 | api.tridrongo.info | tcp |
| US | 1.1.1.1:53 | api.oradaph.pw | udp |
| US | 172.67.140.65:443 | api.oradaph.pw | tcp |
| US | 1.1.1.1:53 | report.appmetrica.yandex.net | udp |
| RU | 213.180.193.226:443 | report.appmetrica.yandex.net | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.179.238:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | arb.grattomania.space | udp |
| GB | 142.250.200.46:443 | tcp | |
| GB | 216.58.201.100:443 | tcp | |
| GB | 216.58.201.100:443 | tcp | |
| GB | 172.217.169.46:443 | tcp | |
| GB | 216.58.201.98:443 | tcp |
Files
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 28664e2084884636d8b2019dc6331d52 |
| SHA1 | f4a688548a285f606d3e00343576b72b776d7e08 |
| SHA256 | a080651aea5590c24a73e6c1bf6b872667006e263dade1dceea925e8d6241432 |
| SHA512 | fd739a1fea933b12ab90178a3d3876dc0a4f8da8868b7b20a73dc08acfe03ec6147621316a7dd1565b8bbced1d256a8e4f79f2b7b752b0cab468c5db68eb14f0 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 077b9309ccd219adc523eedc446e33ae |
| SHA1 | 346fc72cad7b407e8dd67f877acbfe72318c7673 |
| SHA256 | 3fca48b6f1b8de84bda211e24963f9a7d52f4967fa69c26eb3c7a7cc1a8cc2b1 |
| SHA512 | 76a9acda088fe7c8cc69f477667688b2371a7d83b96f8f90faf80fc9a2022cc9235274b36cf3cc437530047aa36bd27cb05a2688bf98e6b5bbef648d72746d2f |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 96a88ba5b6cd741b66df03f2a4d9919b |
| SHA1 | 0cc3115d32017bd3839c97dc816b2f7912f52f49 |
| SHA256 | a94b4e7b9eed2dda9ecc85ebf1e5a4a7624ea4601992d07aaec03ec2d5dfc227 |
| SHA512 | 991b8eaeb5a7b755e1c77b76084d49f72ba70e7c835d6f2761abc3ab9f4689d7f7437431e67c6deb1164f98991466feb0c5aa95148af70d278fe8ae06dc7be1e |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | db7990512dd5c10ea73715c1ad33b029 |
| SHA1 | 377338027f78161a76b78b029f1cc9970be14e05 |
| SHA256 | 2009d59e6fd3ada097cfc9dd4e3c7eb3763c7b1f8778e476b517580b529355ec |
| SHA512 | d25f578ae3fabcfa22df660de8f91eb658c4439c99c4d10edda2fcc97b794804e622d8ead68413ec85114b166f04368511c5e6004aad46862efaeaeb77559210 |
/data/data/com.goldmobileservices.militarydiet/files/ZPkFS.log
| MD5 | 6c0ab32eeec1e2f6a5de7418f5e4cd25 |
| SHA1 | 7c1459010713ccca677cbf6919902068e219207c |
| SHA256 | 461dfdb46e07ee287b2166aeb0afc4ea726206f215937558c3138bf817872aba |
| SHA512 | 9eda341a22f02d1f4d579379f1b043777285feae0be49a55dc30a7934e1102be299c6826b7e63292e9153dd622b7b78dd47ca9f0f5c9ac441f83743edca5ee7c |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | b481f35f67793cc62b6a1a1f0546840e |
| SHA1 | 42a0226196b0d16956567a81666d723ed1cd8eb6 |
| SHA256 | e16187464e8fb678aaf3a7f4cd58b18fc2060f2239f124b245d48af6a38d7045 |
| SHA512 | ad4a5ee8e80c0fb65a1768b5ceb6599e8778e02a92775281804b9b36030c8d5b813bb09defb4b8c2316610749ec9c8a44a9b56070f426a3e3c5dbeeb7a7f31b3 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 4d2b4183b610f027f7f18a4b4500f67d |
| SHA1 | 653f9f9e09092f8060aabec9514ecce32dbbfe3f |
| SHA256 | 4b9e2627fde162838678f48e7a0ae28cb27e709e56178cf72e115caad9563d6d |
| SHA512 | fcbc7ffc947da5775d2c3280d99ce3c0de102c073660baed2d9c6b1604a0482671e52837df1b1ca419538e26964ee332e76f575e211ac1f0aa2f172f27294833 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | aefb695829433788b5b35ca3008d4add |
| SHA1 | ac12bbbf5c8f27021eb63cc0a3a2e92e658d3caa |
| SHA256 | 9a6849eb97f8bb1fdd586f173a730297be6dcc8986d67861a2136bba38467a0d |
| SHA512 | b186b5ce1ee611f94ef592e7066b917d51b6194a9a66a61c86385f350f014f2e278e91afc3675dedc37f30314dbb9dc4e803e105a9047e9ec3acd2fe01d75a96 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 24cb5deab7f5f879e8fa958c7dbca913 |
| SHA1 | fe9d9adcfeb7f898a58efbdd50c52ee193281c93 |
| SHA256 | 6c57469f921970903e3aa1039df3e746ed8347cbf28b3a961084a18c200c230a |
| SHA512 | e7572d721ed96abdfa52e18eb5f37dcae3675596c07c78ab7ea8a0d0b4d687af5bebc5762c688b2d52669930e16f6fe9643e672eee75f00619860a77972b6ba4 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db
| MD5 | 8eb95fcbf9662f45d48ecd504003d4a1 |
| SHA1 | 700deb9a6cc894211f53ad1fad03f6fb6fb2969c |
| SHA256 | 0686de9496525cd864503cecb6c2c6c38d0a2259795839b35e2ea2824e2162fa |
| SHA512 | 497c4623d4596a94d1b4ae9a7d45b8b89ad3ff23c4e38eb6177b941871a2b786d36524b167ab579aff174070373d69f02fac57bf85be0b2957f2decf8c43cb45 |
/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db-journal
| MD5 | 8e8e9219fcf81813b1675e45d5c5c602 |
| SHA1 | 5d35a7acc6cea63b52c2cbd5763c2355e47a7391 |
| SHA256 | 78ac903d4bccaec1a0dd05d6c1e831094f3786df65cc3b4b215cc9e28d00ad87 |
| SHA512 | 17a9ef08bc2c56155f44f0af94d19d8f2a16acfc0904bc4f506f08dceee4280ee054dc18b7f5f59cc7ac5752fad46d5149417343de674171be84dc244d8e7bbd |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | d8aac70f937c8acac22bcf584cb9a9db |
| SHA1 | 95c2de701c08da322353691055f31cea237c71e7 |
| SHA256 | 77827d7abab79c1df30303c498175e61db45a7784bb7c9442e1d60e9631e1b01 |
| SHA512 | adf93b378e28c2d1c2acf5a308c3d9412011eed82ebefc1440095942892554b4ac205fe602c40adaaae439da9a932c2d463b960e15e2e77a9102a1c98707488b |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet
| MD5 | 279ce4243338b49afa3fbdfb2627c349 |
| SHA1 | b346471d101c0c8b4df834834c94f2ae268ee7c8 |
| SHA256 | 781b1ac500c94dc0f431096827fd27f9b05ad5c87970b7b318c90fa2152779a0 |
| SHA512 | c6faefd88c72c9452b16c20171b83642f943d9454f66456a307a7a6e95dfc2198dda6b6147c342659e825d9dc815a62ef2cf5f098d8a8eb2f25a85f7e77a964b |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | c00a81279a40900d886b424c4a4f82be |
| SHA1 | 36c5d131c4dfbe78f6f4c12b890736b592e8e638 |
| SHA256 | 021d0bb723c0b70d582d003931e63b0249b7ad178e978f7ee7cbe823261086f8 |
| SHA512 | c7b856c01bf4f67ceb4657529ab3ca5227694a27fecabb4dc3f074481ad45d147f9f23ea6ab6ca2c2a62b5ea2e2c87504c2f49a85c849a4ef6e93484baabdec5 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | f9a76b622882cb79b94b52444d7dd863 |
| SHA1 | 66a2e827f956a6b359a23be7e013b9acee387c14 |
| SHA256 | ed5820b9b107c79fe0a31756ba068a5b919b55345837371b203bebf2d343622a |
| SHA512 | fe9a068adfa0de555ffa8d40c1b5085ebd67933430d3caa2ad17368ead3179e2c4ebe31c00bc60c79da39f0f2130da159c69784b265e8f3e4e2135cdaa3902d1 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 761ced6e929e612dc4067f091986f08e |
| SHA1 | 35719cd528d6756360897e58ab17082b4d0216a9 |
| SHA256 | 147ffbc9243b585311f6a1b768324edcc97e81fc2aa9dee1db5c6d654fb99d14 |
| SHA512 | 29445f193daa11383c28ca25deba53b199bec6035b2b8e2d708d2a3a336fe3b2e3c027430cb0ba298b92e13d831a061010b78702a3220c9acebc7c613ad58c03 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | b5817abc7f941ae6c7e563bd05162399 |
| SHA1 | 8fa7cec60735759d46ae0ef1bef3956b13509c5a |
| SHA256 | 6e895af19dad2f62406ec9dd40639c4ef87e6808bd50a5a2c71a558d8d4728bd |
| SHA512 | ec2560bb2916300145c0cd33b56dd7a92e06c2fc8bd224f108a7ccf7ca555f0a072a99620a7b33cd2beb16109da243706f4b7a683d32e44e93feacc19ec806f1 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | d0acd3552d46773a79444fc7580a897d |
| SHA1 | c4f59f67ff9ba952fd6369a3b2685e2fa3f828e8 |
| SHA256 | 205a681f3dce415b8ddc4c3d7d7f5a19ed2878bec750f6ea2dbb42fb16b85993 |
| SHA512 | 4124e116338e35ce3b543743a9a6c72562d4bdee156b4db7fe455bd183bf2398f6b5acba8554427edae2e9171aaf1cf2601b8633fa63cb0f3c44092a3c259653 |
/data/data/com.goldmobileservices.militarydiet/no_backup/credentials.dat
| MD5 | 76c09b438e09bb09ebf3b04cd6dc0c08 |
| SHA1 | f461ac87d10a9b09e3eb68b1326d3aac42d5fa7d |
| SHA256 | 75c55ee610d76c8d936de6a5d13a1e7004015770d9edaf463cb9efc0448a2493 |
| SHA512 | cacdca7433067d5518969857e5b8e1888280c505341a119a79e0cc5362f7069b90a7548bc61ddcdfd9d6bcb19eff3acd16c804b67c8a8d4a86ae2a164cf9b1c8 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 7b1c6fbf094a333ee7b847eb287117cd |
| SHA1 | 0942d51809e73c4e462c90ccd6f86f5bf7a45f8b |
| SHA256 | f8937cc6016a83dfbedc34cc1ad43f62de9822ec5f4b34fcb91fd2a3060d2c5c |
| SHA512 | 1b00b29afefabc62cc78b4e3275079aeeb9fe076aacf1c5e6ae0bef623974f2bcc4554a5df941fce8636bee58844e551e2560cc80fb6db486e9a0fa5fc76fe60 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180
| MD5 | 65bedd0b6e0e761d7b9207ee55933385 |
| SHA1 | a8780911024ce3d064e524457eb0dd0442821a4e |
| SHA256 | 998cfb3130565a5b0ecda4e390a3ad6fff165ecc423d396e2ddc6e0eec0fa9df |
| SHA512 | cd6eb121cf0114c4b3538219dcf50c8410f079c08b21343ae6467e1fde95acd51f0b783a99d4d681c377c2061af13e2d74edb4c8ce7228a81b62883de1943d26 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 84edb6dc61429abc53eda3a03598bbcc |
| SHA1 | c207c892e49131dcd33e1c94d04c7f6acd47b2f1 |
| SHA256 | f1609623393622803ad27ac2213be08dc8fc6c178c1e773eebc2b35c7e027905 |
| SHA512 | 237dc9f1eb76a03bc040dd0d2762ef1ae11b6291485690e6a8f26d087f4339e226f9e11ab47286a3aa768d8b4766b2955f802da8cb171fbf15382c7ab86f237d |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 1cac5fd69bcd6f31c8c2cefafb82727b |
| SHA1 | fba080177bed72f7ba66f97b6e5d101bf55e24e9 |
| SHA256 | 07342d7798ec5b0dcd45c6efb15dc1eec4f4c674b8d4f34dcfbab963140dc2f5 |
| SHA512 | 95b0e68773ee8407e385bd5c5fb7804769c602313b6f5b52cbc978252f60b11734f51e01db91c2877503cf93072176a9de44541880411ed22da8bcf240322be2 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | c967f93dcd066e1d74cecdef7934a8bf |
| SHA1 | ab7164bb0e22ac4982fe11a98fa223fccf861dc3 |
| SHA256 | 298adec1bee662fc616a082bf1705e5baa4a95ee2105643fce8e8038c32ef002 |
| SHA512 | 661ae97ff3954d33f177ed34bb4e6408c6ae02375fc32f5bb5896fd7ffbfe169381092d7a054d7bfe084f3af24a5e10721cb24c1b1d19e11854f63005ae8c921 |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 1e36de7928a26f8db44110c6f3d23600 |
| SHA1 | 39b2bae5928b6ffca09444475ad2d426b7fcac1d |
| SHA256 | 3a58dbee154d785bb37ff21115b007cd5eb347811f5b0b6ab5a321da814bfc6b |
| SHA512 | eef04ce0a62d915eff16dedd96d3228bc6f738c1efaff098b8ae3c4c0cbf35c03cdc0972f743eeb76c5f229e0d0f9c21493d020df20c27b539d1421c6de5336c |
/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 1a7a1c054c56e6dfd7e7903c0ebbd0fa |
| SHA1 | 4e7122d365427ef9da83bd2c2756c2362fa37549 |
| SHA256 | 8266449d5f71a21bb037aeb9c965f0587a385d01597bbcc09a5203d549d0b71a |
| SHA512 | 1f7c5768dd4dbb48a25907e79ff5c761e5b50ecf05a79baf7d2465a6877390a4ae7ed8643a61765ba5333968e511b90ab2734347bdd03950e558680324e834d6 |
Analysis: behavioral3
Detonation Overview
Submitted
2024-06-10 11:38
Reported
2024-06-10 11:41
Platform
android-x64-arm64-20240603-en
Max time kernel
179s
Max time network
132s
Command Line
Signatures
Checks if the Android device is rooted.
| Description | Indicator | Process | Target |
| N/A | /system/app/Superuser.apk | N/A | N/A |
| N/A | /sbin/su | N/A | N/A |
| N/A | /system/bin/su | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Schedules tasks to execute at a specified time
| Description | Indicator | Process | Target |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
| Framework service call | android.app.job.IJobScheduler.schedule | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.goldmobileservices.militarydiet
com.goldmobileservices.militarydiet:Metrica
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.187.238:443 | tcp | |
| GB | 142.250.187.238:443 | tcp | |
| GB | 142.250.200.10:443 | tcp | |
| GB | 142.250.200.10:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.180.8:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | api.birbira.xyz | udp |
| US | 172.67.177.167:443 | api.birbira.xyz | tcp |
| US | 1.1.1.1:53 | startup.mobile.yandex.net | udp |
| RU | 213.180.204.244:443 | startup.mobile.yandex.net | tcp |
| US | 1.1.1.1:53 | api.tridrongo.info | udp |
| US | 172.67.161.129:443 | api.tridrongo.info | tcp |
| US | 1.1.1.1:53 | api.oradaph.pw | udp |
| US | 172.67.140.65:443 | api.oradaph.pw | tcp |
| US | 1.1.1.1:53 | report.appmetrica.yandex.net | udp |
| RU | 213.180.193.226:443 | report.appmetrica.yandex.net | tcp |
| US | 1.1.1.1:53 | arb.grattomania.space | udp |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp |
Files
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 56a44ec9fda9c5a1bdef15ee46c52b38 |
| SHA1 | 760d4fda9ea9c6fb20e529aaee961fbf9331a12e |
| SHA256 | fc6f6e7f9994860f692a44f2fa30060ddb26e8939b6bf649b01c5b1bb70a3d4b |
| SHA512 | 659b64e305264a6df4e0cd8d1b141eb9f905f78a4ec0f7586f248c32687c2ca09e4f56903c35b5300bf7a744baa0c0a8f37d6fa86ff4cc3464818ea98fc77cbc |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | 7e415a3af3f763898a8e67f27cee7987 |
| SHA1 | 10cdf7a6ad6bd6fa4d94d7fde06cd51c2f3989d4 |
| SHA256 | 80612171707445d84501b2bdeb9f98e56f10996f6a7682a300def9a934c49691 |
| SHA512 | 69aab167e7df1fbf58b2880b513f2421fcaecef1a37cb17196aa9957a966bca0465d436a7ac351886fa1fc0d74c0f01c05a668771982340d5e43e2528b5ce50d |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 9446f5d5759a1473d164c47a4a268431 |
| SHA1 | c814710f178e1c71ace590f745a906f5d2fd7a10 |
| SHA256 | dc226236c1f3fd33564dc483a0c22e0e2dacbf8ddaa4d61af2a991a8d2327c56 |
| SHA512 | b47cff8f5e42d3a64d4b5162e30c8757a4108a8f772685fb80cc3a4212f927bc22d8c6ee746958b2103ac9a7b6879365f2510a2d869c6bd9970095c0ab7ad263 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 2e132078cdbc9e3bc18a294472a22d2e |
| SHA1 | 3ec0939d2b453bd058361db44a8df632021ddba5 |
| SHA256 | ca3e12c9043205823a351da1520010194da8c1f63f087eabc3e105b860102c01 |
| SHA512 | 6ba87bfe73209580eabc4c0bad739d64aae48c9b909d2583d8b99c3c6e71526abeb5051933eeacc749336955779d57264c73b544893afcfa684d017ab2f03496 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | 69e5afb4ba3b2d9a210478ef9b7ee715 |
| SHA1 | e9f30d97898343ef715ba589801e39eb21134e30 |
| SHA256 | 5b5e7804b260d97340efd22ee04cfc82049f750168972e41902975ae10e7a314 |
| SHA512 | 1a6a10aab595c9733316ae00645992b20111d0cd361a9087dede5cae9dcc62eacedb20caaf60af5522dd1eb59c79448624a0f94d4e1557b96e1f51a4cb29d3e0 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | e5639b469346d3d19c79ae3bdc2f4a9a |
| SHA1 | b4d9041b94176f65417e63e77f0f324b81e8dded |
| SHA256 | cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf |
| SHA512 | 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal
| MD5 | c00ae59f1a3414d197461da56386000e |
| SHA1 | 4c4731de80a790adfb661a3fd03026e224eb7d8d |
| SHA256 | 66ec847c5d7c94ba522cc470094afa78d73f2d2902d39c44cc20b992650a7a1e |
| SHA512 | 23e8efb348b904f34ce81dede91592ae4c66e8008397d502fdad1b64fba50b8ccbf3f710b8751f9374c84b801b2735002f04e6432ae17275ad4dc0195093614e |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db
| MD5 | f4282bea7b899fab0ec922c61408ea58 |
| SHA1 | b4b70d19d096c39a35adb8651a10e33ce2953290 |
| SHA256 | 0603bfd12f5c77f090094d8051bfd1a744d81df75ba6fc0dc737a960354cba10 |
| SHA512 | 6e9b15f6d9d99cdce5f9afe1c773dd346580dec67342e5fc61d8669c2e1ae9a664af1fb88a44dd9b9af27409ccbd3b6c529b1816852ecd30de72f53f84bad9e3 |
/data/user/0/com.goldmobileservices.militarydiet/files/ZPkFS.log
| MD5 | d01115ab3b3ab6cd76adfbc07994cd9a |
| SHA1 | 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de |
| SHA256 | 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68 |
| SHA512 | bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_data.db
| MD5 | ca83181ea6d7ec76ab612a07a38025aa |
| SHA1 | 93e981cebd870979a0394c0df38ce3aba12d3d0e |
| SHA256 | 37e9b9989317566bfa666af982d87fee8843bec5d686af5f0a607523c16a1625 |
| SHA512 | a125daf6fad4ddd424e259b9a5365c87bc0d37767b54f50761f63cdd59a48b9170c97b4305c865c83bafe00b722142dfa9bdaace67b51fc5e0b3d837b11ee772 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_data.db-journal
| MD5 | f7ec16da00d5c8c0bd60f8cbac7f6475 |
| SHA1 | 18baccf405edefc1646d61207a8b9d4e049392c0 |
| SHA256 | 2a3f8de2b0dd5806f6b64a6f859aabda0793d8a462708c2980cdbd6664466a6d |
| SHA512 | 6ac11ed90399b5aec7e169c0c851da2d23c786d5a4ce6674b131e49b3828e42e281d34deb2442abcba803b9cd8453b828ea8eeb9e15d0edd1cb39ab5aa3d9b0d |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 10a7bf2a39ba959da18a651d556ba76b |
| SHA1 | 14518fe18f98c2093749c542ec7756154b7e8517 |
| SHA256 | 9c9897cbb01a07f14aac92e7f08b20608cb1489549af92f570ae983c832a549f |
| SHA512 | 1145d1e4ebedec8758694593abdc2d1f005475971152127edb1a44ddf11d7012fd8533c5e8f61394624eb44b155b5d3a8d13e0872c39853462feb061636e28c2 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet
| MD5 | 91c65c7db5bd1108a19562833f0436fb |
| SHA1 | 20b406faab5c38f3b2c90e015da2376de5886107 |
| SHA256 | b0d14a1c7909f890d15021ce348e88650f6b54a6cfa241ef7e4d448a08074cd0 |
| SHA512 | 7f6e3f5ad0c93fe2d32bdd3c130ae874d41609ff4a470d381000f598b17955c7b239c46a3ae92667babe5cb5b4998ac7bc0314a9930ec86224cca014ad5d186b |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | cf99cf203551132341585a040ce703f7 |
| SHA1 | 26420e90a7337b4f8144da234e2dee71555bfa61 |
| SHA256 | ae737b5e73ed77d039f0325b7a53c0e1ea73bdc6dbf5bf4f1c1405f97b0fce4f |
| SHA512 | 79ea41328c804c8939b6ec84416f14c07ca6bd0edc4b32c0517459c10e5f8c4f0038ac220c6149b8bde556934ded225edc8d02379e5898692d94eb1aaebd4cad |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 619fbe63a4ef605e8f028cabca9143b9 |
| SHA1 | 7e59610fa74a929d6de5a92798973decce39f858 |
| SHA256 | ee9745610fa5426f092b1e2faf8f34e3a93af244dcf62002cdef16489d2fa2b3 |
| SHA512 | 7ba6211846d371a21c4440c90da07947610c8f28f0f17116c9dc77a9e49b574dcf347ef9c2bb785c584d95815b1a4e425d25ad3254a97b75e7c82dd7f6dad718 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | ca3f22afe659de98a41ce2cdf6404710 |
| SHA1 | 6f0f1d1edc32f842b6c80b4570145619e196d583 |
| SHA256 | 8076203158f1c52c157f9d86ece145f387f82662a4ed1ac8a3edab55898c6fa2 |
| SHA512 | 59ec2ed75b55e62198ed3b89fbffb6a7d6cada2fa70ee3fae750d888526b899dfe48db205db0a649a38da7cfa83df65cf65e1ccbbbb2a7ce1db455654a77e493 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 1d2c59b2542f45a6bbf3738f7821397f |
| SHA1 | 1d78cecd3ccccca15a5297f1b338bc36e33c2c3b |
| SHA256 | a5db4a52279cf4b5b3bf1bd1f9d0bd729e07b4bbbb47867d7d31b37235cfbcd9 |
| SHA512 | b17d7a3442b790a6a0a95fd68ef2cdaadcd7adc4e506d5f68c96748bd3fc690a2f25a484a6e8d8a38e4339e555090183bf2268ab6280b5785353f091375ff76c |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal
| MD5 | 4cf6abba874031e80c4ea87b460c02ff |
| SHA1 | 8a93bccc6a22b2dc72ef02b7278fa6be8c275ca2 |
| SHA256 | 84337c24d24d1e60759c912c6209ecdaf7d4f774ee5e575f57d5358935e8c493 |
| SHA512 | f4779d4171570749b48ce42b0f38fc19676ee830836ca2d7af25f1c2a19d16c97de0cad053ac25ada4d04371653e05f87b9310318043fa0da2d04e0125c23c3e |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/credentials.dat
| MD5 | 8e90095ca4b0f605b83d1bacf6dd8e28 |
| SHA1 | d09bcb17711e5a641c4068c0f361094b86407c21 |
| SHA256 | 5da33aa51f626a470587fed7cb984dc56a31b21ec44390f4abe233fd67e1cd1e |
| SHA512 | 4d1eaadafa3228cbd2aed2f47bc416de3d2922099082e35a355cb36a508a9bac8567b3abcd90078c02806f594260f9cb923cf1a91b9e645c5232544e9637ede0 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 07350379bfb36924c1b2baeebe9ea66f |
| SHA1 | 91b38a3450f5f46d7ff8fdb3918b02ce7ca85f38 |
| SHA256 | 25b2cc409f3da81f397d2831b2458da072e654110cb15750c1bd8f8115b0f9c8 |
| SHA512 | 918bb7bb518b13b8d20ed16235e478baf9689bcdfffbcbb7834771bfa779025678eb5b5a1ce282031c268afff57dbc9a24f2551afadd30002949431e18597463 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180
| MD5 | b93dc3b642a929c29f6b5e81fdb00146 |
| SHA1 | 8f8e20184bb0def2e6c89eaf10f115d90828b732 |
| SHA256 | 812703f7719304026ea781a6089103cbb26ef3b669af552f59b230f1b1b35a5d |
| SHA512 | 225eb69ae775be8fcb1901b91342aa5ba786eed1a86818150a495ff1d658b976711ca2420232b2178e324871264fabdca2414ca9dd569cae844694779f1bd904 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | f9e571f24271bf128bf02298383b8390 |
| SHA1 | f397ea70da6eab82344fb84dacdfc8e978357d98 |
| SHA256 | 165d91029ba502f8de1188ed5dcba219dbe41d0ea4093971d6dc90c39d8a8c79 |
| SHA512 | 9ec6ba56d6d613ec9ff3cf6b66883138d2383131e1d06c859d97ab3ff13b45fdd6541d9ce1932d1c2f24c006497efde29bba530010f559f2375c461c93f59e9d |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 7dc39dc91a0c1d12a0b8e0249b58c079 |
| SHA1 | 325057b62aacc480a978d7699f9096d85f79110e |
| SHA256 | f86bd77682036abd0b2d09b9611fce89269502d14007d565c43fda363d3d8a1f |
| SHA512 | 9e941b816f9dc3fa5bace1641121141de2393bdb1693bbb0c0f8c1817dcf982f9edda04769736bfc95728cb00d7a5dea311b335dd41e725a5c3fad3fa93b3207 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 7bc686b3d801557aafbbe4a7e06245b6 |
| SHA1 | 63dbfbfe33eff4965d238cd06b0fc62c6dd9800d |
| SHA256 | 5382c712e73111ee1fef4411061ca2e32a8538dc9ed2e1e937963a4c1c86e521 |
| SHA512 | 6e89d306bc672cf49239aa009185c37be31626a6798a0badafb2624fcf601fd25ce076550ee32f1655606af6daf888d0ad9684f5fa1c96d0789c3ce6a49c5802 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 59505acb101446302fe1aaeef910c024 |
| SHA1 | 730891032b57a08406d021ae833bba9a7cc61b85 |
| SHA256 | f111ad79608389139cfbd4719051f14c06b860635bd0033644a5c036f01ffa99 |
| SHA512 | a2b931f742e82dde968388d1a690b13856f00746e12e931209843f567bd3ff2a88c6973712a23c1fea57109ca2f1efd61131ecd609d42a7495072a6b3c6bb7f5 |
/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal
| MD5 | 834f08a85f3099aaeb771bfd7e06875f |
| SHA1 | 08693b48eb509133805f52896a3f5672a1b7815c |
| SHA256 | 4a45537d7485868419571590ee3369bb998669f53dba21530a875771614ff4b6 |
| SHA512 | 4edf11859ea684efa09353ffd7454edd17a89fcb21b846b34ee2035d92f5d80bf02c183ccecb6124930527093f35d8e826a8926a5e0a05b683ce8c67cbbcd285 |