Malware Analysis Report

2025-01-19 07:57

Sample ID 240610-nr36ksaa28
Target 9a887bb63bbc4f7cbb48212e4e13693d_JaffaCakes118
SHA256 e588fc7c2c91448bfa9969bd01838295bd26041c0756d3048c38b1c95bf8e6ab
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e588fc7c2c91448bfa9969bd01838295bd26041c0756d3048c38b1c95bf8e6ab

Threat Level: Likely malicious

The file 9a887bb63bbc4f7cbb48212e4e13693d_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Requests dangerous framework permissions

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Queries information about active data network

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Schedules tasks to execute at a specified time

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 11:38

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 11:38

Reported

2024-06-10 11:42

Platform

android-x86-arm-20240603-en

Max time kernel

179s

Max time network

149s

Command Line

com.goldmobileservices.militarydiet

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.goldmobileservices.militarydiet

com.goldmobileservices.militarydiet:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 216.58.201.110:443 tcp
GB 142.250.187.194:443 tcp

Files

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 f37e5721981c561aa6cc6ffa33b4df1f
SHA1 c37ce31f2e6efbcf6828e18f3e4c65d84372d1e9
SHA256 49e5af2737ff4d302266f6909a49fe887cf2cd832b0b98ebf6c4ca1333aea066
SHA512 583c9e52d55972c2100e64d24673bc06d93aeff3090e1c0194ad8750368774a1707ce6cd39322547e2aa3281df0360fdd482f73eee92bcf6e9715f571c65bdcc

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 8e7827d826be7fe2cb20e149bd51c871
SHA1 5c7a4f8371dbf5f69e0b27f01c1f8ecc5f69475c
SHA256 db7b313a89c3a0f2dfb0d37fef1a148d7304a1bc1297d9bfb0a4a0065fc4fe83
SHA512 22fa2c856c7bb03d07527ebac19f3527ba1c9bd2b4e9a8ae8f4c0489c40d205d3314346269aebe504308846a36f24561b16fbd5b76b2cc75eef133c4934e7550

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal

MD5 1f6e3809b4e51868d0b679287280161e
SHA1 16ee466326494976ee40b2b3a4e4334babb9b84a
SHA256 41b982726b73a5d48cee970b79fa2a595b9016b8722f937e324309ac7a9984a5
SHA512 509866bdb7f7d4603088e70a2b6cdd1b36bc05fc29eb8ad32264eff2cfb83e648aa119bc9d4bc00397e2828a0c66d66924f6d169754285ebfa92de56f25405c8

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal

MD5 60b592c1aecd3d2cec634d62a456a53a
SHA1 7c9227318bcf0916134d7eae11062b0508e19ebb
SHA256 1897ebc17ad2d9af5fdea640e92714f445ce0dd02c00bbdc9f5141e8ba3eee01
SHA512 e765230c6ef55ac623be2902436e2ece91558b847a865c42f9945791b6ff3f4b6abdf2d3007e9ab22f107587f334dc9a0e299e34624e8fcfc4a454a2f344d6a7

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 44def4f6e42c3ec63f229d23af8c804a
SHA1 f5956d9295778b539bced03215343fd3cf7a9dd8
SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
SHA512 a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-wal

MD5 c65df438d814decfa6622c3aab01c7ab
SHA1 8be18cbbad4b8c219835a33f34ed9a28d82d707e
SHA256 edc70a5950b0d49fe06ccc4f508e85a30b83560bddb1e42e9b2d27c07f41a720
SHA512 19f5600a7aaa7db1f58cd28c9f12e69131c6c2a8388683b770917f97131c3e0c2e4a4718f00c8b906aa738908a0438e41b961009a7d6b9837bdf006440448f01

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 e9411a00030407c5a20071638285cdfa
SHA1 6a38beb8e1f196528824332888cf3fde289803ac
SHA256 c18e2e7d42598f65642486c5ec05f605b8029a08de266b5b3cbd74c04035dd6a
SHA512 d59c8a49014d56ecf8c0ee17cc811b842df57a95d34e60e5499c58793291742c75e9854e23bea75469407d257f0220d3d9c8808acad52b0b70d322c3c70dab92

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db

MD5 8403460569ff4b255864076915791ff8
SHA1 c8686b1feb3191d4e901545647cbec46d2557cbc
SHA256 cc5acd4ad8ea5c8a6d8d55286d0157a6e164c5d6cb4478f7cd102559f9dc395f
SHA512 7294b11d4c7942dc6e867aebab77945a3054356465397cc9a03975f4897fc329f42e8383436074e3dd3351d1adb7afb4d95a16b26f4c74f460559d51508f6ecc

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 997b05d7fdeb32af9d48d57165619612
SHA1 e64887c4004a98506f943de263a337af00b3e496
SHA256 60f5278ec9ebf9fe173175e0dee7d093235e818f0de33a4f118550ddf1b4eb32
SHA512 e7d127a6558ce5daab98149035fb5da4337e28c0cd10dc6d304d264ffa65cbb39e574d62cdf26794dd82f085b6b3333dcfb4a193bd5bff2e35e9feab72f959a6

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 6ffcadb2bf1f08253f59e2430fc3c400
SHA1 de8ee04c6f4b4b8fac09fd35d454bc185c48bd93
SHA256 9d339c52797b9fbcbc7a726bf8982ff206a0fd71de2412e79131a61cd47718da
SHA512 a679410d32610935835cdaf2a603f029fe4030da390fe42b9e8410383ef454113d79076263dd39f04cd401be867d2ba2a9aa4af73cfdd49020b79788a7952bd6

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet

MD5 fd7e459ab150b4e8f0ed6c17775c0b2f
SHA1 17fbc210a32e4fc9f05b6b500ad402ceb730e917
SHA256 626e7217819212a091f5b515c44b952184b125b7a68b09dd266a05e6d84d9b12
SHA512 fda44424eea59769ed5b01e68a3e47d4f57ad29c3c9cb881865445bbb79e257455b3a22050f247704172b6eadcb5eb81cf54301761348631c079b9c5205af86e

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-shm

MD5 01e049639c863c877b71ac30e585675d
SHA1 ed116f9da483066698dd9598100ba17c6cf2f4bc
SHA256 68cb2f17c49dc7c07e57e5b8d6141392bd37f0aa8b5058bbaa00d33d27304868
SHA512 44df58b64a72fb464a4650406c6f5b5560a650fc52f10ebfa36896339dd8553bb0ea0611fea4ba8691d96005aa2ae2c52dad0147da58512639366c17bbfa6991

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-wal

MD5 68df75aa7965c4ba1b46f92906661c56
SHA1 80d3dab9b9a65cadd63e7ad25d72c45d162641d7
SHA256 d29069ee31566c701ff2e40e33eea32c4c70a113dddab18dcf3818d35f9fa239
SHA512 44f282a9c791a5b860322ea30401d56ddb62a78c120caf490e8710db1e91dd2359a6620228bb366da5225d46ef0c94997f50c0f14c864d34da5b5a12e9885589

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 ec4802085caa8559c728027d35e2d458
SHA1 f0c3f3158617f8309353f0366721464ca9990d4b
SHA256 186db4cd56310fd372e9d53c17d101d2da62bde669fc39f92e695aa55c79894b
SHA512 6c2dc86f3d0436447aff73db881845b0eacb085d6ec517f15995a28aca78c2a590b093a99149bc743795df15dff2d2e0cc70dc0439d692d49f6919c437bb4dd4

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 c8fa9a9673f90fd7c4a174e0aeac022e
SHA1 ed7828d738bc146265b9b0216ba5ebda0c3f6cee
SHA256 caa6fad7e2853c643bcaa47a8eac46b34b38e80501ce93f77b73945afab7119c
SHA512 8016544dbdbb22e4ad1bb0c445cf11132c930beb4b1d63499e2020bed952f3da6950c7c42fb6e5870df658dc83f038d72a9d6a0ce68f6569c760caa93096a7be

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 a5b7a26b522b6b2782fa2827e43c38c0
SHA1 569df631317dd9f8c750293f2b2149d3bf6adb42
SHA256 a4f3128dc994d1ad020a6bd7586e7b3b0ca8f0fcf8214ff66aaf34c1bf922559
SHA512 87ff5df3cca7088ed365c50e7fe63ffddd357a2d82a755a9c381ce27cdfabaf8ad4148290d473ba9785ff8a1e6a93c6bca8adf417de24d9c94b01f2abb6138e4

/data/data/com.goldmobileservices.militarydiet/no_backup/credentials.dat

MD5 be22e66128f18d167c4bcb570591c4f6
SHA1 8494c421bd742ae1a9e49ea2af83a5300e0715e8
SHA256 625862a0fe29206ea71ed1e51c0f71c7b260e0b5ee3de7a58ddd4f4a7df28815
SHA512 2d70f9dc08dc0c72391881a7e579ef0f267c9fd0f776016d0a70574ae003d0700fb52f2727c59636ff231ff939f9aa617bae7881dc508efb472f4a01bee963f0

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-10 11:38

Reported

2024-06-10 11:41

Platform

android-x64-20240603-en

Max time kernel

179s

Max time network

148s

Command Line

com.goldmobileservices.militarydiet

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.goldmobileservices.militarydiet

com.goldmobileservices.militarydiet:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
US 1.1.1.1:53 api.tridrongo.info udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.200.46:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 172.217.169.46:443 tcp
GB 216.58.201.98:443 tcp

Files

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 28664e2084884636d8b2019dc6331d52
SHA1 f4a688548a285f606d3e00343576b72b776d7e08
SHA256 a080651aea5590c24a73e6c1bf6b872667006e263dade1dceea925e8d6241432
SHA512 fd739a1fea933b12ab90178a3d3876dc0a4f8da8868b7b20a73dc08acfe03ec6147621316a7dd1565b8bbced1d256a8e4f79f2b7b752b0cab468c5db68eb14f0

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 077b9309ccd219adc523eedc446e33ae
SHA1 346fc72cad7b407e8dd67f877acbfe72318c7673
SHA256 3fca48b6f1b8de84bda211e24963f9a7d52f4967fa69c26eb3c7a7cc1a8cc2b1
SHA512 76a9acda088fe7c8cc69f477667688b2371a7d83b96f8f90faf80fc9a2022cc9235274b36cf3cc437530047aa36bd27cb05a2688bf98e6b5bbef648d72746d2f

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 96a88ba5b6cd741b66df03f2a4d9919b
SHA1 0cc3115d32017bd3839c97dc816b2f7912f52f49
SHA256 a94b4e7b9eed2dda9ecc85ebf1e5a4a7624ea4601992d07aaec03ec2d5dfc227
SHA512 991b8eaeb5a7b755e1c77b76084d49f72ba70e7c835d6f2761abc3ab9f4689d7f7437431e67c6deb1164f98991466feb0c5aa95148af70d278fe8ae06dc7be1e

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 db7990512dd5c10ea73715c1ad33b029
SHA1 377338027f78161a76b78b029f1cc9970be14e05
SHA256 2009d59e6fd3ada097cfc9dd4e3c7eb3763c7b1f8778e476b517580b529355ec
SHA512 d25f578ae3fabcfa22df660de8f91eb658c4439c99c4d10edda2fcc97b794804e622d8ead68413ec85114b166f04368511c5e6004aad46862efaeaeb77559210

/data/data/com.goldmobileservices.militarydiet/files/ZPkFS.log

MD5 6c0ab32eeec1e2f6a5de7418f5e4cd25
SHA1 7c1459010713ccca677cbf6919902068e219207c
SHA256 461dfdb46e07ee287b2166aeb0afc4ea726206f215937558c3138bf817872aba
SHA512 9eda341a22f02d1f4d579379f1b043777285feae0be49a55dc30a7934e1102be299c6826b7e63292e9153dd622b7b78dd47ca9f0f5c9ac441f83743edca5ee7c

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 b481f35f67793cc62b6a1a1f0546840e
SHA1 42a0226196b0d16956567a81666d723ed1cd8eb6
SHA256 e16187464e8fb678aaf3a7f4cd58b18fc2060f2239f124b245d48af6a38d7045
SHA512 ad4a5ee8e80c0fb65a1768b5ceb6599e8778e02a92775281804b9b36030c8d5b813bb09defb4b8c2316610749ec9c8a44a9b56070f426a3e3c5dbeeb7a7f31b3

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 4d2b4183b610f027f7f18a4b4500f67d
SHA1 653f9f9e09092f8060aabec9514ecce32dbbfe3f
SHA256 4b9e2627fde162838678f48e7a0ae28cb27e709e56178cf72e115caad9563d6d
SHA512 fcbc7ffc947da5775d2c3280d99ce3c0de102c073660baed2d9c6b1604a0482671e52837df1b1ca419538e26964ee332e76f575e211ac1f0aa2f172f27294833

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 aefb695829433788b5b35ca3008d4add
SHA1 ac12bbbf5c8f27021eb63cc0a3a2e92e658d3caa
SHA256 9a6849eb97f8bb1fdd586f173a730297be6dcc8986d67861a2136bba38467a0d
SHA512 b186b5ce1ee611f94ef592e7066b917d51b6194a9a66a61c86385f350f014f2e278e91afc3675dedc37f30314dbb9dc4e803e105a9047e9ec3acd2fe01d75a96

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 24cb5deab7f5f879e8fa958c7dbca913
SHA1 fe9d9adcfeb7f898a58efbdd50c52ee193281c93
SHA256 6c57469f921970903e3aa1039df3e746ed8347cbf28b3a961084a18c200c230a
SHA512 e7572d721ed96abdfa52e18eb5f37dcae3675596c07c78ab7ea8a0d0b4d687af5bebc5762c688b2d52669930e16f6fe9643e672eee75f00619860a77972b6ba4

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db

MD5 8eb95fcbf9662f45d48ecd504003d4a1
SHA1 700deb9a6cc894211f53ad1fad03f6fb6fb2969c
SHA256 0686de9496525cd864503cecb6c2c6c38d0a2259795839b35e2ea2824e2162fa
SHA512 497c4623d4596a94d1b4ae9a7d45b8b89ad3ff23c4e38eb6177b941871a2b786d36524b167ab579aff174070373d69f02fac57bf85be0b2957f2decf8c43cb45

/data/data/com.goldmobileservices.militarydiet/no_backup/metrica_data.db-journal

MD5 8e8e9219fcf81813b1675e45d5c5c602
SHA1 5d35a7acc6cea63b52c2cbd5763c2355e47a7391
SHA256 78ac903d4bccaec1a0dd05d6c1e831094f3786df65cc3b4b215cc9e28d00ad87
SHA512 17a9ef08bc2c56155f44f0af94d19d8f2a16acfc0904bc4f506f08dceee4280ee054dc18b7f5f59cc7ac5752fad46d5149417343de674171be84dc244d8e7bbd

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 d8aac70f937c8acac22bcf584cb9a9db
SHA1 95c2de701c08da322353691055f31cea237c71e7
SHA256 77827d7abab79c1df30303c498175e61db45a7784bb7c9442e1d60e9631e1b01
SHA512 adf93b378e28c2d1c2acf5a308c3d9412011eed82ebefc1440095942892554b4ac205fe602c40adaaae439da9a932c2d463b960e15e2e77a9102a1c98707488b

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet

MD5 279ce4243338b49afa3fbdfb2627c349
SHA1 b346471d101c0c8b4df834834c94f2ae268ee7c8
SHA256 781b1ac500c94dc0f431096827fd27f9b05ad5c87970b7b318c90fa2152779a0
SHA512 c6faefd88c72c9452b16c20171b83642f943d9454f66456a307a7a6e95dfc2198dda6b6147c342659e825d9dc815a62ef2cf5f098d8a8eb2f25a85f7e77a964b

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 c00a81279a40900d886b424c4a4f82be
SHA1 36c5d131c4dfbe78f6f4c12b890736b592e8e638
SHA256 021d0bb723c0b70d582d003931e63b0249b7ad178e978f7ee7cbe823261086f8
SHA512 c7b856c01bf4f67ceb4657529ab3ca5227694a27fecabb4dc3f074481ad45d147f9f23ea6ab6ca2c2a62b5ea2e2c87504c2f49a85c849a4ef6e93484baabdec5

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 f9a76b622882cb79b94b52444d7dd863
SHA1 66a2e827f956a6b359a23be7e013b9acee387c14
SHA256 ed5820b9b107c79fe0a31756ba068a5b919b55345837371b203bebf2d343622a
SHA512 fe9a068adfa0de555ffa8d40c1b5085ebd67933430d3caa2ad17368ead3179e2c4ebe31c00bc60c79da39f0f2130da159c69784b265e8f3e4e2135cdaa3902d1

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 761ced6e929e612dc4067f091986f08e
SHA1 35719cd528d6756360897e58ab17082b4d0216a9
SHA256 147ffbc9243b585311f6a1b768324edcc97e81fc2aa9dee1db5c6d654fb99d14
SHA512 29445f193daa11383c28ca25deba53b199bec6035b2b8e2d708d2a3a336fe3b2e3c027430cb0ba298b92e13d831a061010b78702a3220c9acebc7c613ad58c03

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 b5817abc7f941ae6c7e563bd05162399
SHA1 8fa7cec60735759d46ae0ef1bef3956b13509c5a
SHA256 6e895af19dad2f62406ec9dd40639c4ef87e6808bd50a5a2c71a558d8d4728bd
SHA512 ec2560bb2916300145c0cd33b56dd7a92e06c2fc8bd224f108a7ccf7ca555f0a072a99620a7b33cd2beb16109da243706f4b7a683d32e44e93feacc19ec806f1

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 d0acd3552d46773a79444fc7580a897d
SHA1 c4f59f67ff9ba952fd6369a3b2685e2fa3f828e8
SHA256 205a681f3dce415b8ddc4c3d7d7f5a19ed2878bec750f6ea2dbb42fb16b85993
SHA512 4124e116338e35ce3b543743a9a6c72562d4bdee156b4db7fe455bd183bf2398f6b5acba8554427edae2e9171aaf1cf2601b8633fa63cb0f3c44092a3c259653

/data/data/com.goldmobileservices.militarydiet/no_backup/credentials.dat

MD5 76c09b438e09bb09ebf3b04cd6dc0c08
SHA1 f461ac87d10a9b09e3eb68b1326d3aac42d5fa7d
SHA256 75c55ee610d76c8d936de6a5d13a1e7004015770d9edaf463cb9efc0448a2493
SHA512 cacdca7433067d5518969857e5b8e1888280c505341a119a79e0cc5362f7069b90a7548bc61ddcdfd9d6bcb19eff3acd16c804b67c8a8d4a86ae2a164cf9b1c8

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7b1c6fbf094a333ee7b847eb287117cd
SHA1 0942d51809e73c4e462c90ccd6f86f5bf7a45f8b
SHA256 f8937cc6016a83dfbedc34cc1ad43f62de9822ec5f4b34fcb91fd2a3060d2c5c
SHA512 1b00b29afefabc62cc78b4e3275079aeeb9fe076aacf1c5e6ae0bef623974f2bcc4554a5df941fce8636bee58844e551e2560cc80fb6db486e9a0fa5fc76fe60

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 65bedd0b6e0e761d7b9207ee55933385
SHA1 a8780911024ce3d064e524457eb0dd0442821a4e
SHA256 998cfb3130565a5b0ecda4e390a3ad6fff165ecc423d396e2ddc6e0eec0fa9df
SHA512 cd6eb121cf0114c4b3538219dcf50c8410f079c08b21343ae6467e1fde95acd51f0b783a99d4d681c377c2061af13e2d74edb4c8ce7228a81b62883de1943d26

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 84edb6dc61429abc53eda3a03598bbcc
SHA1 c207c892e49131dcd33e1c94d04c7f6acd47b2f1
SHA256 f1609623393622803ad27ac2213be08dc8fc6c178c1e773eebc2b35c7e027905
SHA512 237dc9f1eb76a03bc040dd0d2762ef1ae11b6291485690e6a8f26d087f4339e226f9e11ab47286a3aa768d8b4766b2955f802da8cb171fbf15382c7ab86f237d

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 1cac5fd69bcd6f31c8c2cefafb82727b
SHA1 fba080177bed72f7ba66f97b6e5d101bf55e24e9
SHA256 07342d7798ec5b0dcd45c6efb15dc1eec4f4c674b8d4f34dcfbab963140dc2f5
SHA512 95b0e68773ee8407e385bd5c5fb7804769c602313b6f5b52cbc978252f60b11734f51e01db91c2877503cf93072176a9de44541880411ed22da8bcf240322be2

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 c967f93dcd066e1d74cecdef7934a8bf
SHA1 ab7164bb0e22ac4982fe11a98fa223fccf861dc3
SHA256 298adec1bee662fc616a082bf1705e5baa4a95ee2105643fce8e8038c32ef002
SHA512 661ae97ff3954d33f177ed34bb4e6408c6ae02375fc32f5bb5896fd7ffbfe169381092d7a054d7bfe084f3af24a5e10721cb24c1b1d19e11854f63005ae8c921

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 1e36de7928a26f8db44110c6f3d23600
SHA1 39b2bae5928b6ffca09444475ad2d426b7fcac1d
SHA256 3a58dbee154d785bb37ff21115b007cd5eb347811f5b0b6ab5a321da814bfc6b
SHA512 eef04ce0a62d915eff16dedd96d3228bc6f738c1efaff098b8ae3c4c0cbf35c03cdc0972f743eeb76c5f229e0d0f9c21493d020df20c27b539d1421c6de5336c

/data/data/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 1a7a1c054c56e6dfd7e7903c0ebbd0fa
SHA1 4e7122d365427ef9da83bd2c2756c2362fa37549
SHA256 8266449d5f71a21bb037aeb9c965f0587a385d01597bbcc09a5203d549d0b71a
SHA512 1f7c5768dd4dbb48a25907e79ff5c761e5b50ecf05a79baf7d2465a6877390a4ae7ed8643a61765ba5333968e511b90ab2734347bdd03950e558680324e834d6

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-10 11:38

Reported

2024-06-10 11:41

Platform

android-x64-arm64-20240603-en

Max time kernel

179s

Max time network

132s

Command Line

com.goldmobileservices.militarydiet

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.goldmobileservices.militarydiet

com.goldmobileservices.militarydiet:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.10:443 tcp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp

Files

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 56a44ec9fda9c5a1bdef15ee46c52b38
SHA1 760d4fda9ea9c6fb20e529aaee961fbf9331a12e
SHA256 fc6f6e7f9994860f692a44f2fa30060ddb26e8939b6bf649b01c5b1bb70a3d4b
SHA512 659b64e305264a6df4e0cd8d1b141eb9f905f78a4ec0f7586f248c32687c2ca09e4f56903c35b5300bf7a744baa0c0a8f37d6fa86ff4cc3464818ea98fc77cbc

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 7e415a3af3f763898a8e67f27cee7987
SHA1 10cdf7a6ad6bd6fa4d94d7fde06cd51c2f3989d4
SHA256 80612171707445d84501b2bdeb9f98e56f10996f6a7682a300def9a934c49691
SHA512 69aab167e7df1fbf58b2880b513f2421fcaecef1a37cb17196aa9957a966bca0465d436a7ac351886fa1fc0d74c0f01c05a668771982340d5e43e2528b5ce50d

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 9446f5d5759a1473d164c47a4a268431
SHA1 c814710f178e1c71ace590f745a906f5d2fd7a10
SHA256 dc226236c1f3fd33564dc483a0c22e0e2dacbf8ddaa4d61af2a991a8d2327c56
SHA512 b47cff8f5e42d3a64d4b5162e30c8757a4108a8f772685fb80cc3a4212f927bc22d8c6ee746958b2103ac9a7b6879365f2510a2d869c6bd9970095c0ab7ad263

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 2e132078cdbc9e3bc18a294472a22d2e
SHA1 3ec0939d2b453bd058361db44a8df632021ddba5
SHA256 ca3e12c9043205823a351da1520010194da8c1f63f087eabc3e105b860102c01
SHA512 6ba87bfe73209580eabc4c0bad739d64aae48c9b909d2583d8b99c3c6e71526abeb5051933eeacc749336955779d57264c73b544893afcfa684d017ab2f03496

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 69e5afb4ba3b2d9a210478ef9b7ee715
SHA1 e9f30d97898343ef715ba589801e39eb21134e30
SHA256 5b5e7804b260d97340efd22ee04cfc82049f750168972e41902975ae10e7a314
SHA512 1a6a10aab595c9733316ae00645992b20111d0cd361a9087dede5cae9dcc62eacedb20caaf60af5522dd1eb59c79448624a0f94d4e1557b96e1f51a4cb29d3e0

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db-journal

MD5 c00ae59f1a3414d197461da56386000e
SHA1 4c4731de80a790adfb661a3fd03026e224eb7d8d
SHA256 66ec847c5d7c94ba522cc470094afa78d73f2d2902d39c44cc20b992650a7a1e
SHA512 23e8efb348b904f34ce81dede91592ae4c66e8008397d502fdad1b64fba50b8ccbf3f710b8751f9374c84b801b2735002f04e6432ae17275ad4dc0195093614e

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_client_data.db

MD5 f4282bea7b899fab0ec922c61408ea58
SHA1 b4b70d19d096c39a35adb8651a10e33ce2953290
SHA256 0603bfd12f5c77f090094d8051bfd1a744d81df75ba6fc0dc737a960354cba10
SHA512 6e9b15f6d9d99cdce5f9afe1c773dd346580dec67342e5fc61d8669c2e1ae9a664af1fb88a44dd9b9af27409ccbd3b6c529b1816852ecd30de72f53f84bad9e3

/data/user/0/com.goldmobileservices.militarydiet/files/ZPkFS.log

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_data.db

MD5 ca83181ea6d7ec76ab612a07a38025aa
SHA1 93e981cebd870979a0394c0df38ce3aba12d3d0e
SHA256 37e9b9989317566bfa666af982d87fee8843bec5d686af5f0a607523c16a1625
SHA512 a125daf6fad4ddd424e259b9a5365c87bc0d37767b54f50761f63cdd59a48b9170c97b4305c865c83bafe00b722142dfa9bdaace67b51fc5e0b3d837b11ee772

/data/user/0/com.goldmobileservices.militarydiet/no_backup/metrica_data.db-journal

MD5 f7ec16da00d5c8c0bd60f8cbac7f6475
SHA1 18baccf405edefc1646d61207a8b9d4e049392c0
SHA256 2a3f8de2b0dd5806f6b64a6f859aabda0793d8a462708c2980cdbd6664466a6d
SHA512 6ac11ed90399b5aec7e169c0c851da2d23c786d5a4ce6674b131e49b3828e42e281d34deb2442abcba803b9cd8453b828ea8eeb9e15d0edd1cb39ab5aa3d9b0d

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 10a7bf2a39ba959da18a651d556ba76b
SHA1 14518fe18f98c2093749c542ec7756154b7e8517
SHA256 9c9897cbb01a07f14aac92e7f08b20608cb1489549af92f570ae983c832a549f
SHA512 1145d1e4ebedec8758694593abdc2d1f005475971152127edb1a44ddf11d7012fd8533c5e8f61394624eb44b155b5d3a8d13e0872c39853462feb061636e28c2

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet

MD5 91c65c7db5bd1108a19562833f0436fb
SHA1 20b406faab5c38f3b2c90e015da2376de5886107
SHA256 b0d14a1c7909f890d15021ce348e88650f6b54a6cfa241ef7e4d448a08074cd0
SHA512 7f6e3f5ad0c93fe2d32bdd3c130ae874d41609ff4a470d381000f598b17955c7b239c46a3ae92667babe5cb5b4998ac7bc0314a9930ec86224cca014ad5d186b

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 cf99cf203551132341585a040ce703f7
SHA1 26420e90a7337b4f8144da234e2dee71555bfa61
SHA256 ae737b5e73ed77d039f0325b7a53c0e1ea73bdc6dbf5bf4f1c1405f97b0fce4f
SHA512 79ea41328c804c8939b6ec84416f14c07ca6bd0edc4b32c0517459c10e5f8c4f0038ac220c6149b8bde556934ded225edc8d02379e5898692d94eb1aaebd4cad

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 619fbe63a4ef605e8f028cabca9143b9
SHA1 7e59610fa74a929d6de5a92798973decce39f858
SHA256 ee9745610fa5426f092b1e2faf8f34e3a93af244dcf62002cdef16489d2fa2b3
SHA512 7ba6211846d371a21c4440c90da07947610c8f28f0f17116c9dc77a9e49b574dcf347ef9c2bb785c584d95815b1a4e425d25ad3254a97b75e7c82dd7f6dad718

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 ca3f22afe659de98a41ce2cdf6404710
SHA1 6f0f1d1edc32f842b6c80b4570145619e196d583
SHA256 8076203158f1c52c157f9d86ece145f387f82662a4ed1ac8a3edab55898c6fa2
SHA512 59ec2ed75b55e62198ed3b89fbffb6a7d6cada2fa70ee3fae750d888526b899dfe48db205db0a649a38da7cfa83df65cf65e1ccbbbb2a7ce1db455654a77e493

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 1d2c59b2542f45a6bbf3738f7821397f
SHA1 1d78cecd3ccccca15a5297f1b338bc36e33c2c3b
SHA256 a5db4a52279cf4b5b3bf1bd1f9d0bd729e07b4bbbb47867d7d31b37235cfbcd9
SHA512 b17d7a3442b790a6a0a95fd68ef2cdaadcd7adc4e506d5f68c96748bd3fc690a2f25a484a6e8d8a38e4339e555090183bf2268ab6280b5785353f091375ff76c

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet-journal

MD5 4cf6abba874031e80c4ea87b460c02ff
SHA1 8a93bccc6a22b2dc72ef02b7278fa6be8c275ca2
SHA256 84337c24d24d1e60759c912c6209ecdaf7d4f774ee5e575f57d5358935e8c493
SHA512 f4779d4171570749b48ce42b0f38fc19676ee830836ca2d7af25f1c2a19d16c97de0cad053ac25ada4d04371653e05f87b9310318043fa0da2d04e0125c23c3e

/data/user/0/com.goldmobileservices.militarydiet/no_backup/credentials.dat

MD5 8e90095ca4b0f605b83d1bacf6dd8e28
SHA1 d09bcb17711e5a641c4068c0f361094b86407c21
SHA256 5da33aa51f626a470587fed7cb984dc56a31b21ec44390f4abe233fd67e1cd1e
SHA512 4d1eaadafa3228cbd2aed2f47bc416de3d2922099082e35a355cb36a508a9bac8567b3abcd90078c02806f594260f9cb923cf1a91b9e645c5232544e9637ede0

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 07350379bfb36924c1b2baeebe9ea66f
SHA1 91b38a3450f5f46d7ff8fdb3918b02ce7ca85f38
SHA256 25b2cc409f3da81f397d2831b2458da072e654110cb15750c1bd8f8115b0f9c8
SHA512 918bb7bb518b13b8d20ed16235e478baf9689bcdfffbcbb7834771bfa779025678eb5b5a1ce282031c268afff57dbc9a24f2551afadd30002949431e18597463

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 b93dc3b642a929c29f6b5e81fdb00146
SHA1 8f8e20184bb0def2e6c89eaf10f115d90828b732
SHA256 812703f7719304026ea781a6089103cbb26ef3b669af552f59b230f1b1b35a5d
SHA512 225eb69ae775be8fcb1901b91342aa5ba786eed1a86818150a495ff1d658b976711ca2420232b2178e324871264fabdca2414ca9dd569cae844694779f1bd904

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 f9e571f24271bf128bf02298383b8390
SHA1 f397ea70da6eab82344fb84dacdfc8e978357d98
SHA256 165d91029ba502f8de1188ed5dcba219dbe41d0ea4093971d6dc90c39d8a8c79
SHA512 9ec6ba56d6d613ec9ff3cf6b66883138d2383131e1d06c859d97ab3ff13b45fdd6541d9ce1932d1c2f24c006497efde29bba530010f559f2375c461c93f59e9d

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7dc39dc91a0c1d12a0b8e0249b58c079
SHA1 325057b62aacc480a978d7699f9096d85f79110e
SHA256 f86bd77682036abd0b2d09b9611fce89269502d14007d565c43fda363d3d8a1f
SHA512 9e941b816f9dc3fa5bace1641121141de2393bdb1693bbb0c0f8c1817dcf982f9edda04769736bfc95728cb00d7a5dea311b335dd41e725a5c3fad3fa93b3207

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7bc686b3d801557aafbbe4a7e06245b6
SHA1 63dbfbfe33eff4965d238cd06b0fc62c6dd9800d
SHA256 5382c712e73111ee1fef4411061ca2e32a8538dc9ed2e1e937963a4c1c86e521
SHA512 6e89d306bc672cf49239aa009185c37be31626a6798a0badafb2624fcf601fd25ce076550ee32f1655606af6daf888d0ad9684f5fa1c96d0789c3ce6a49c5802

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 59505acb101446302fe1aaeef910c024
SHA1 730891032b57a08406d021ae833bba9a7cc61b85
SHA256 f111ad79608389139cfbd4719051f14c06b860635bd0033644a5c036f01ffa99
SHA512 a2b931f742e82dde968388d1a690b13856f00746e12e931209843f567bd3ff2a88c6973712a23c1fea57109ca2f1efd61131ecd609d42a7495072a6b3c6bb7f5

/data/user/0/com.goldmobileservices.militarydiet/no_backup/db_metrica_com.goldmobileservices.militarydiet_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 834f08a85f3099aaeb771bfd7e06875f
SHA1 08693b48eb509133805f52896a3f5672a1b7815c
SHA256 4a45537d7485868419571590ee3369bb998669f53dba21530a875771614ff4b6
SHA512 4edf11859ea684efa09353ffd7454edd17a89fcb21b846b34ee2035d92f5d80bf02c183ccecb6124930527093f35d8e826a8926a5e0a05b683ce8c67cbbcd285