Malware Analysis Report

2024-07-28 12:03

Sample ID 240612-hvxkbatdre
Target 9fd6d83bccd066863dc7f6c8fcb24ed2_JaffaCakes118
SHA256 dc876d18541f5f83c0f2cc1a09508882f38b126cd3e19950bf1f8475b42012c4
Tags
discovery evasion persistence collection credential_access impact
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

dc876d18541f5f83c0f2cc1a09508882f38b126cd3e19950bf1f8475b42012c4

Threat Level: Likely malicious

The file 9fd6d83bccd066863dc7f6c8fcb24ed2_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence collection credential_access impact

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Acquires the wake lock

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Queries information about active data network

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-12 07:04

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 07:04

Reported

2024-06-12 07:07

Platform

android-x86-arm-20240611.1-en

Max time kernel

161s

Max time network

149s

Command Line

com.grandsons.translator

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.grandsons.translator

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 translate-plus.firebaseio.com udp
US 35.190.39.113:443 translate-plus.firebaseio.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 xunglv.herokuapp.com udp
US 3.216.88.24:443 xunglv.herokuapp.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp

Files

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 e7620707a3fef10209e4d04d4e915ae0
SHA1 738eb4fccfdf8d131d3c6edaeb238f3ec5f43e82
SHA256 7101df99fcd19a630d68a669f4f07b322b42e6b217cd86053c0acd344023336a
SHA512 5461e13d3e16c6ad8d100747860f483888c4f60f6df19300b7304091363d066e742daf12cad33783ba601178c6606bceb19b3474b84eba000078bc2ab06d0436

/data/data/com.grandsons.translator/databases/google_app_measurement.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.grandsons.translator/databases/google_app_measurement.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.grandsons.translator/databases/google_app_measurement.db-wal

MD5 844a4c1a8ce6144bb3a5edac02778bb2
SHA1 6cbfc98907dc5d6e8e3174d272db640d181cf0ae
SHA256 caae34254df9d12f4f393aad2b8b6c0d95ffba4123d78b1679371c925f4554ff
SHA512 468f014b2ce4c8244d8950506b6c4a6a2fb8a8f821d0ee0bfaecb0b57f82fd8c698fec390daaa2bbc00b622cfb3ca589ab4e3ea9b923dec17464529da96d1559

/data/data/com.grandsons.translator/files/lists/History.json

MD5 e6482af9641b2aab681f5319ea0be801
SHA1 7b302ef21c5210c6ac3aa51c6c34abfc97172765
SHA256 18ca2430c44bfed678808d15ccf9380fcb928302d0afde94106ec760b573adce
SHA512 73583fbd818f82e58d47e18fe3e5dcc44d08b83c3130e021d30a62461d158b9123bd2bc7df3cbcff8d7d8fb6d0deca4320c0f2fbf78912215b0835c35fe784f1

/data/data/com.grandsons.translator/files/lists/Bookmarks.json

MD5 10df23ee5905048786750d876a48e0b6
SHA1 2c76f5106564b9d671721a10dd9cac102ec9ff4e
SHA256 1b74bd75d8babc8b9193a880379fcedece274e19ccba1140b017e97cf2344079
SHA512 4fcd303e47082e2f77439bede27ff2ee0a2ac563e274538fcb7b870e397b6e4992324ad7f85c0552a72747305e784d88051ade78e3a2dd82913b87fd0948cf85

/data/data/com.grandsons.translator/files/lists/Notes.json

MD5 1d0871eea2e1ce758897b8e95ff55d30
SHA1 08b8d8dd7fd08e485be9071ac8a4fdce742e32a6
SHA256 0eb9a5851a06e87c6cc9797ca1d22537160abd912164d5bdb54cf970b4b99d7e
SHA512 d5dab3a58bdcdf99aff5e4ea21fcc8380ed311b9648fd9d380a454244bb97fd6dd51ffee5fda334da09d35373e01735d25b6205abdf4de64af6d58aa514853f0

/data/data/com.grandsons.translator/files/lists/Remembered.json

MD5 b532cda6893be2efd4a3557fc43f894c
SHA1 1bb92df1af61e05b160384e6a882b83988026c7e
SHA256 fb47d86c8bed96c8f5b39c00f26f0481e4918ed9f02a53ca1d0e42bdcdbb456c
SHA512 85e3fabefac99fdeb3b0fdff0561214ee22b2a7344f7d475436c6bb0f68b866b018c632e7dfe7292f1fa48f36a94d16f95d34aeadc26590a93be16bf029f375b

/data/data/com.grandsons.translator/files/preferences.json

MD5 01c3def2ac334d9b33f847d61751726f
SHA1 4c5b4edea15db1621ecae410c11bf079d83c0c20
SHA256 7f5cda267d8b83e6b85a56d1af6ba427de3e595a49ccfdd30c055b90ce981db5
SHA512 681358dfcf9a6fe04f145d8230c35bfa6919be99fd94ed42438222315e9d8c69bdc879c72e27b74cdc0a42b0bca4f213e73c7cc2b207f0db47766e22cb99a7d9

/data/data/com.grandsons.translator/no_backup/com.google.InstanceId.properties

MD5 d1504085ee21128d78c9bec9dfb4c767
SHA1 c20e1a770b8512ad393dd641bb4aa7d4d202b294
SHA256 47ff4e00e66516a301261be1d6734a398ab3eaee9f1c66606b00647d765871b4
SHA512 e1613d51eb798e7e08b66d6439c41a51cbe5b8f7fd4ebd967b3aa0a13f7db5013b6c5b8469bd6c80a0db8dabcf62069352307580853f83d53dba9fb9bc08a26a

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 320be93c75e0aa8fbd9c8f5399285d11
SHA1 a325b549fb88e9760bb958de4cdce69c6a4414a4
SHA256 1b279f07e9f5fe62b0f951267c583c9a677ff358cb602ff0715869ca47a6f9b1
SHA512 8cf3e5e598d4e1c3edfc05ec220b221dc1607c22fa3a10a1ea2b57582c48aa854ef441741373c9c4a9ea7edbc0dbd1147ec9f2e6a980a3dda39cdb6361f6b1a8

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 b63bba841016c9f5e13db30b2c3f3d04
SHA1 9714673b957a6e2dc2b20335611d2d13f80de423
SHA256 917950156e29d563cdd1b4a5a25d9a4bbca3cadb1fcfc102beab81c556230fe2
SHA512 6efd7dca9d582f90e547f6d747efb5a146f6eb2b4e5b6c0b82efc99bad0a0feab2d33b6f370e0b0403468176999820c65304d9416de72588ae51ad77d0e56085

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 8b15dfd033b5998a72a9b893ca2d0a8e
SHA1 b502728ab869a0f428b459342574843ecbbd8d33
SHA256 ce6dfd35152d523f760048d220a366d79dc1a284d695b79464b778ead5be58ba
SHA512 4576cbf03bf95af43ad942d9827d00a797243ec657c8e5b6792c82b3ada263f5b2b888301b8012ccaf56e7593d111010a4e7d14bd89cac566b95768fa2093993

/data/data/com.grandsons.translator/files/preferences.json

MD5 cf67e8dbda9feb62fec43d089041e8e6
SHA1 49fa03e2cf1ca3622daa73d0c304541523981ec8
SHA256 8deb1f050a2b779acc876833c751643ea1d0b8403fba3dce8c70ee4c660bfcd6
SHA512 2d4fdeab34f3d6520870610cecf3d7438e40f2461e07859c3b3c5f0acfc461b10b99a625953628735c3188a544cf02bf657b6cc49e33263d95742f32ec2c769f

/data/data/com.grandsons.translator/files/preferences.json

MD5 30932c63f66c91e9c5aab208a0bf6e3c
SHA1 bf8816e9406b523ce9f9380b0bdb565a01e73a18
SHA256 a3b331cbd72d5a9d966b1965b58ec04c1f9b6182fcacde455b0d2d4cf6baec4c
SHA512 d7f99bacc4d51cd5dacb918ebf554ad601c93afc2b8372c7904d8c6e3960f593711427d89638a67c3be8543212e75b5926c958ed854c602ac86b9f5828aa5322

/data/data/com.grandsons.translator/files/lists/dbsHistory.json

MD5 e6e73f3879a6810d1a50067db50f6764
SHA1 dfd6f51dfd19ef480284705d1cd56f2c8110dbed
SHA256 22da9b2ae4c45675fa205c2b9db0066cabdc0340ad86d2c6510e297adbac0318
SHA512 add4ce08fec3a63b5c7d26b293d7f6711ebc01994acb8480dbb6641ef15ca90e017d80d13e1734a3288444c1d46117762313bff62b52971204906bfe4b6c2ed3

/data/data/com.grandsons.translator/files/preferences.json

MD5 4179a2f4e70be5b44c10ec99c411f998
SHA1 4a5f0da6f4aa3ac9254a396f5e04ffc334d15637
SHA256 01754a07833703e517961d7423f6f9da6ad637a3387be7457605d80b4f10bf5a
SHA512 ae221cb58e0acb1ccd68123f1f59364ef5172782aaee8d0e4a94f7f6374eaca62abdbba6961c3225faad5d1e75778643d2f09b45a61e33f770a5d50df67f758d

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 a7abcb9a5adb94fd51147080057bb4bf
SHA1 0669f09cd332f41517a49b1369431b9a486f7715
SHA256 00b25c35bd110b485b1c9352b58abd34b68d7d0a5db17e352d9eccb816c8048b
SHA512 b077c5f02c7aff0a24753d4dff446f240784a0faabcdb26681d096ca797b439c3144b8d51f756901c9152daacd859d9fe020823afa391010b922daacf543cca3

/data/data/com.grandsons.translator/files/lists/dbsBookmark.json

MD5 69164303b2738b56abf87236fa13daea
SHA1 7c9d99695eb1e463d8a4ef6cc300cf08bbc8f1d9
SHA256 87f2a0808ef30d9574691e80f59f89faaec00398641dd51d7e9b0a11eda31ecb
SHA512 5ebc1624e65a4c0f9cc89ebc2d4c07b37814f1387a74d191f70245644f61cf1f84214bbb35fe4bf8298049561f30964d0449d80cd2b6651ac9a3ed21ce8237eb

/data/data/com.grandsons.translator/files/preferences.json

MD5 4996e7374c13663170e786b4b1bf7d30
SHA1 a326cdfd8ddf63ede5bd434ae8309bd4248e2c80
SHA256 45cbb23d5df68302e40a3da854328bcfd1e337ca68ec16b61bd419cab1a5cb3a
SHA512 f00fcf042bd2c2cde49980f722418ae083d0161060d354a8315a793a815465a825c3ee2b5c703eefe8f2695c6393e00c43a6794f07287697b1b0e1d66799eec9

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-wal

MD5 68c62db66bf1fbde0d334d33b0ec237f
SHA1 84d3a8b0438f6fe917b563d0e9f895c64a3cc31f
SHA256 d50f4b9eac51be3d3cc4ea89e749090a3feacc79a08f24c8fa94e93a6b34abb9
SHA512 b583d9f8ebd62ba823229e6cac932f03b6f03a3ff0bbc57eaea31b37809bd7c2b15ec3fb6e07c0ee4247695891d8e29161209523f6cbe223a762a5a4a2380e45

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 a4517a51b50de08312b1c6ccf68fb513
SHA1 11f2c5d4cf022910b0410593af54ba03b6cd2be8
SHA256 a593f11cc9bc7ee0a5f1d93682b8f3176b8289e4e7d151fb24afd5a7e9ad42ae
SHA512 5ff01e0302bdd56ca92e7d0c68c2fe85b7b5b1ad0190ddda730613a8c7a2cd1a3586ad0d3f1ba2552867e4a7aad976a11fa26e475aa95e0d05eb41f4315b5c76

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 eccbd05c6d3cace3360f6a694a0e952d
SHA1 5f6411e89a0447b0e305c67baaa2a20950e8f27f
SHA256 088ae086793a47f457d1a43e01b6dbabb4c29a970995dee4faae5326b5f926c8
SHA512 b760c63321d0f00ab87ba75acb992d18f0511d7a7f3e172afea705f2f6ea5229081114cb53adfca19f48fdef3ef4f2551f3447ba6dbf174258dd62799c35a6cc

/data/data/com.grandsons.translator/files/gaClientId

MD5 fb96486606fae4fee16ae965c5f860f9
SHA1 d812376011ab3f6e526928804e6d96e19cce0567
SHA256 66e5f1b00bde3a8b85ad4124cd12f7ba43d27c3bd7c3b9db180e9a6665997805
SHA512 d9cd4907b6b7158c5901da9ebaab62c6e2963c7a08fae17f927ada5c39227c009172a1873604c9c2178078b603cf4013d5eb6d55db9b8ba4aa09988bf48c4e13

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 59d81f8ae5a55c7f92150baaf1ebe6a7
SHA1 d30b4cd59e2eb047275fc740de37358183e759b9
SHA256 0dc81c25a166bbf754e9f701673ede2d2dec24a65fe3dfaf20006328022e11e6
SHA512 1a9aff931410ef956a45d50d97bf9fc75a1fc26a5e51921d55a6ddfa0a10d592db9052cedd1bec9c4086b1706f17f122099f059b8876ba8669d5504a81c6daa1

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 6306a6dacd62664bb84b07c889b96c34
SHA1 9010c8937c0ce5545009a7d639da426eafb2649a
SHA256 49bbf5a70d02f10f59d494ddd4f3f4e696b989d1e8948a7ec00fdb5387aa3ae0
SHA512 52c61aa9de49d3f2947a9c9257425177292d6ea5b86489a86d9697c590f3860dc6e92983c03e104f983178d379b76c0df3b1573a19058cd584a2aedd405542a8

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96BeginSession.cls_temp

MD5 459bd2e4c560acb3d76bbf102182b861
SHA1 49169ed5d113add67f6f23289c7426f0ffec6a76
SHA256 8e195b391c7fb2cf298e90bec73bd37d652b284ae4bfd8c56efb743867df28f8
SHA512 c8fa3b488c66be43ec61c2bd2332b586de92828998ecc0ca1a9d374d82a58fa72c5aeb8c67226f62eee62ee9fa188ce4053b7d0a8cc4dbbf520df66ce1f990b7

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96BeginSession.json

MD5 c1023cdba989377bd7c92f79b0b82d8d
SHA1 3677140c86cf953ce380660a991054f6b7ae108c
SHA256 16cab6eaed5a5c781828107ebaaf0244e6a35af530ff8af6047c562da94ecdf6
SHA512 aac60443ed1f485035069ad68aacbd6e1a9ea2080da93c0836977b5c3bd3e15cf39a81bee1a05b56afb0daaae837a55779f85273c9ab72113c45f84d7de1d1ed

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionApp.cls_temp

MD5 5487b1d6e82c0346c872fa2a1eff5758
SHA1 08c83ec51ef5fbf2860ab3abc708cf27aa57f9d2
SHA256 d7836eb9630d7daefcb328df02cb1e35f51205679ea4cb9d177fe0403061ca09
SHA512 a54dedefac9b9d3a9f6abd7e90f18df58851de2d52ca7b1c0d37ca9bd8a50442ee91a71a6cb4e2853c8dcca3ee18a5e64d59d71362ff24574510a1a562ce806a

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 62dd91c6da807d87fd22613cb3fd119e
SHA1 f8cf64270e0f4fdfa1143a0a3bba5bc218abaab6
SHA256 871ab3ca06ba3e01737fb79b5a99ed28036fd5aa4a1ff430d4262cba793da0e9
SHA512 3fca5e79eb0250fe52af098309504b3706a965e1015152800cf4f7f5beda8f9f8be4c0d49c4b0b99d9c62c2ccd657788fd9e78ecc7138e192ff1382b6f1a5c02

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionApp.json

MD5 e4a61eadc143f524982d9e59f62964fa
SHA1 3a54ab31044ddcd3050572de5c4604c99f272734
SHA256 97fc442bd6aa24522bb31f53eef4ff985e6fd268c36c17fb27dfb91827cf004a
SHA512 fb841f2f50a166cbf8ce3744fb108d801ffc08dcbd9635d0721fe8f419b5b9ef69f4095e1ab58770c35f7aecad704595121af5512da393d661c45420c015efb8

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 67ec8e96df295576b220980e5b7e1ec2
SHA1 ea7e9d4aa5469148352d1320e0cc5187cac916fd
SHA256 0015928cccbb5e0fa2161254b9dd2dcac3b8ee5b6bc170cff706251536dba7e8
SHA512 d1dc708cc22bb383999bac8b149676ce5d8e5bb621f1ad374130d98f34dbc67f328214dc1bc8ee96f9f7e2c7bf3e7cb42565a6a2a2e015572fdf9f0af0840a14

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 b207b10cf4e48490cd85d78417f9adcf
SHA1 75581fd5a6fb76d83d481f151443bdaddea3ea56
SHA256 b433ca6f6281d7442705ea025b6cc332643b5048dc0bb8f577c729cbbba74181
SHA512 e16b26b5bc0e2e24d83a2b286f8178c7805bc1c3316277fd822be2fffdd69a4f33659ee619808fea4523f50cb85908c983f9f8acc8f28f4d9c9168385f31665a

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_545f690f-5f41-4ccc-abb8-6d1282b338b7_1718175873347.tap

MD5 34f4f404243cff9f2349176d0c94c1f4
SHA1 89218618c1e14d4eb0a8f4088744e9cfc399a54b
SHA256 cc50ce376ee3dfe9f2aea8e051ee6bb9781dc03f92efd6303249c9913d9178d3
SHA512 4624d600ae0359393a309082db1ea2f7589f1c2f581ba69ad7f123f739a53f01c676be9187ed8723e0f918b1b239bccd30250274aa05c1d058878cc3a5674e76

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 f6e5637a69a1ba311ac3bb0b01fcde8e
SHA1 57d7a990f96ee68b90407af0a0b0dcb8e8230ad4
SHA256 2d07b554916a82d52b29d3d94cbcdbd5c981ceb52e3c3895e373a6e79d0eb594
SHA512 d386dde1b94e38909675850f85e24809f224dcb886790812c7795543c7181e39d2ebe30960a9b199b26f95ea733e1d0c5a7d499490c7f02f8cad500facf5f69f

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionOS.json

MD5 93023624eb8dff5c20050da136aaae0a
SHA1 acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256 968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512 bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionDevice.cls_temp

MD5 cf9cb0612d588a1f71b63084cea67316
SHA1 3d035bb92fd3f8997160cf8025c40239af74d3ca
SHA256 0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9
SHA512 70f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66694875015D-0001-1060-6385CFF2EE96SessionDevice.json

MD5 75db92d50c80a89e068550028c62acec
SHA1 d78ea55f5dc682e4da456d26383249f608fe894f
SHA256 1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2
SHA512 dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 124ad04d1f5b1b471fa5efb1474114b4
SHA1 e02d730f8327e86910e359a2db1ab66cc80edae7
SHA256 8dfa3723b983b47730c6d7598d104aa2bcc7022c0680b3fedaed74ad0e79c097
SHA512 cd1db4960be01fbcdf5ce5e542205d71afefff1e2b7bb74045d11a57a97b93818b625394fef4f628b267b29e12effe5d2113649a71ae0d323309ebf83d3ebd00

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 06969da7ac5ad6cce7f1f666419e978a
SHA1 3038db00d0713328517c474f1604962fc231a3ad
SHA256 396b74de799034afa9dd22cd49b233d3260e949955a4646fd51478847d96a489
SHA512 0c0aa45ed42ade71ada54cee2a3e73eb861d3b5ddad139020a31e6d08fdb50f84b05a0edeaa94bc959b3823b88d56f139223f1b9ed45e74170728d1ec5a527ae

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-wal

MD5 12a2d3ce39c837542d96ea72761fd455
SHA1 47a55db48863ac2b8c4d0b29acf80b2694248309
SHA256 4b5dc7d43cca8d0dbd2ba09cea19006fa4afebe0c7c24dea8b2079f5c7d9c3a5
SHA512 9a054973475f0731b565d2ddf7f7aa442be4f648e465b1b287fcc4fcdf404fc012008b924d652683bdb7085a70feee826d04288177cee6b87f40fe5a66234cf7

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 5b4de46a8de87b39240d571b7fa1d86e
SHA1 5d07198668537dfaed77043f5250870b6c41298f
SHA256 5858e329fdb5b89db7f7bb1d72b589796f82a6d4d46f6576841eff2b3608f936
SHA512 45182979097d32f5ad57731e624f5602374002b18aa95554afc037d4e34f0e23eb8c05830c86ff869f6b6f61ee874a66d02cea812dcde84a20ce41b69647030c

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 07:04

Reported

2024-06-12 07:07

Platform

android-x64-20240611.1-en

Max time kernel

48s

Max time network

144s

Command Line

com.grandsons.translator

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.grandsons.translator

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 translate-plus.firebaseio.com udp
US 34.120.160.131:443 translate-plus.firebaseio.com tcp
US 1.1.1.1:53 xunglv.herokuapp.com udp
US 3.216.88.24:443 xunglv.herokuapp.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 216.58.213.14:443 tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
GB 142.250.178.14:443 tcp
GB 216.58.201.98:443 tcp

Files

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 602689063bf7c9e89b01d4393eeb467b
SHA1 12609e16eeb797f3cbfa40c42dc1ead25f4b57e7
SHA256 a035b03b492a8aa5a9eed6496bcf1528fb7446f343e0ed4de430380f0b76290a
SHA512 b79d989b24dafd4aaf6da7ed315d56c3d0458efa0c223ff322023cced8e9f7be32aee030dcf5574d1c85d65400be6e17cfe00a0e354427b45e50617ce7d91261

/data/data/com.grandsons.translator/databases/google_app_measurement.db

MD5 c12e326370ac5c3f2d9a7ec0f34c19ff
SHA1 61106fe7f6cd67f1724357b6ae8e7a623fc0610b
SHA256 6f1206db49537431621d995baf34503a2e500da63a5b9f565c6a50112665f38c
SHA512 46b215fdae474b413d32135f1f208e4623f48b3e66ba3e9c6a9930c30875b84ff6fa87f82fd6f5860bb66bd8b7c6167ea24f8ca18ca443c9bffb9abb68c08659

/data/data/com.grandsons.translator/files/lists/History.json

MD5 e6482af9641b2aab681f5319ea0be801
SHA1 7b302ef21c5210c6ac3aa51c6c34abfc97172765
SHA256 18ca2430c44bfed678808d15ccf9380fcb928302d0afde94106ec760b573adce
SHA512 73583fbd818f82e58d47e18fe3e5dcc44d08b83c3130e021d30a62461d158b9123bd2bc7df3cbcff8d7d8fb6d0deca4320c0f2fbf78912215b0835c35fe784f1

/data/data/com.grandsons.translator/files/lists/Bookmarks.json

MD5 10df23ee5905048786750d876a48e0b6
SHA1 2c76f5106564b9d671721a10dd9cac102ec9ff4e
SHA256 1b74bd75d8babc8b9193a880379fcedece274e19ccba1140b017e97cf2344079
SHA512 4fcd303e47082e2f77439bede27ff2ee0a2ac563e274538fcb7b870e397b6e4992324ad7f85c0552a72747305e784d88051ade78e3a2dd82913b87fd0948cf85

/data/data/com.grandsons.translator/files/lists/Notes.json

MD5 1d0871eea2e1ce758897b8e95ff55d30
SHA1 08b8d8dd7fd08e485be9071ac8a4fdce742e32a6
SHA256 0eb9a5851a06e87c6cc9797ca1d22537160abd912164d5bdb54cf970b4b99d7e
SHA512 d5dab3a58bdcdf99aff5e4ea21fcc8380ed311b9648fd9d380a454244bb97fd6dd51ffee5fda334da09d35373e01735d25b6205abdf4de64af6d58aa514853f0

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 285012096f80b0a66cb35b9392d94122
SHA1 bd172ee95e5b03292ebcf09794594b895c68aa72
SHA256 183a05c799a151c6c1c43b44c25ac6bf962cc78a89840a27fca538c606456c37
SHA512 d3d5fbef84f3c82b1faba0d07924f10f3254aca333d1dbd4000b6400e4309b162ee73f50c6ff003efb556ccecf411cfa8f1aacfd88e6a44d8d7db8d804b27f48

/data/data/com.grandsons.translator/files/lists/Remembered.json

MD5 b532cda6893be2efd4a3557fc43f894c
SHA1 1bb92df1af61e05b160384e6a882b83988026c7e
SHA256 fb47d86c8bed96c8f5b39c00f26f0481e4918ed9f02a53ca1d0e42bdcdbb456c
SHA512 85e3fabefac99fdeb3b0fdff0561214ee22b2a7344f7d475436c6bb0f68b866b018c632e7dfe7292f1fa48f36a94d16f95d34aeadc26590a93be16bf029f375b

/data/data/com.grandsons.translator/files/preferences.json

MD5 01c3def2ac334d9b33f847d61751726f
SHA1 4c5b4edea15db1621ecae410c11bf079d83c0c20
SHA256 7f5cda267d8b83e6b85a56d1af6ba427de3e595a49ccfdd30c055b90ce981db5
SHA512 681358dfcf9a6fe04f145d8230c35bfa6919be99fd94ed42438222315e9d8c69bdc879c72e27b74cdc0a42b0bca4f213e73c7cc2b207f0db47766e22cb99a7d9

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 98fa1d626971ff438f1eea3ab6d4e87e
SHA1 e504eb919d217d30cd4f99699d9a067670443e1b
SHA256 05df058f40994fa78a1a224b4240402b6f669d7fe4910f91ffdc5045d4f7153a
SHA512 9eceb004c083c52a7ecc345a74b42947c35cba1f175885b08d90f40578da6752f2d6d7c16086f33828f817556c9d6421316bc465e7ec6e84153266ac766f12bc

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 d374f4ec4ac73d6fe728601f19673a76
SHA1 285f9d0349b72b784f02c840aa9bea9452e06407
SHA256 87aa86d4a10412c5ae630445929b57b4dc1066d0556e1f56f0381442fb48197b
SHA512 7d01ca462ab379407764b31f02e68802c8a99314e730a0c68442dd0e3dfddcb688048f67367aae367e451f4028ad2faf856d178d0f7764293d337888d2344b7e

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 97d0e2e9c11d82a529149d9fb87f7959
SHA1 8d2ba3d08c111b64eb3f46e019a114438768964f
SHA256 7fc0a8328bd45b4c756ec88a74a620047acf24ca5446f6773934f1ed9e7dd45b
SHA512 d9da8cf4b91bf6b9094a8ad7b1f635b0bf7619c662bab2163c981d122e601f027cca6cc5e8fcf2ff5cffaab87e2405fdda2a7d42c2a85e483c3b78f4f0afea8f

/data/data/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 12faafd96c5eda9ffe99139eb2b6da45
SHA1 db1723ba3940447970ad564e8d4223865e51668a
SHA256 252ac699c311c348fd8a5fadd1731dfd4b3719b2f15cde85cccea80fcc22935f
SHA512 d3b74d9bf3a4c07511bfa060f822c5d50033790c6764ec9f53256b869fb573e7750be7439f1d6ce3c227a1ae7ffeddc7cc679430d5104a5743e92b2db17c7bad

/data/data/com.grandsons.translator/no_backup/com.google.InstanceId.properties

MD5 5d28c529d056744dba22d5dac4a0f29d
SHA1 69f8cf3af47599936c4f48f961beec80561fde67
SHA256 3bd3f7d7a7ed768bcd4671c533bc8820d83f23643c86750a0a4d0155ab7585dd
SHA512 97168bfdbabd5c501fb23c89dce7067cbca26c79989cc2c544eac9cc12533d19db7ea0a1f7587f7a98eea87d4ef1c67860b50dd9edd1657295d518216dbe9389

/data/data/com.grandsons.translator/files/preferences.json

MD5 cf67e8dbda9feb62fec43d089041e8e6
SHA1 49fa03e2cf1ca3622daa73d0c304541523981ec8
SHA256 8deb1f050a2b779acc876833c751643ea1d0b8403fba3dce8c70ee4c660bfcd6
SHA512 2d4fdeab34f3d6520870610cecf3d7438e40f2461e07859c3b3c5f0acfc461b10b99a625953628735c3188a544cf02bf657b6cc49e33263d95742f32ec2c769f

/data/data/com.grandsons.translator/files/preferences.json

MD5 30932c63f66c91e9c5aab208a0bf6e3c
SHA1 bf8816e9406b523ce9f9380b0bdb565a01e73a18
SHA256 a3b331cbd72d5a9d966b1965b58ec04c1f9b6182fcacde455b0d2d4cf6baec4c
SHA512 d7f99bacc4d51cd5dacb918ebf554ad601c93afc2b8372c7904d8c6e3960f593711427d89638a67c3be8543212e75b5926c958ed854c602ac86b9f5828aa5322

/data/data/com.grandsons.translator/files/lists/dbsHistory.json

MD5 e6e73f3879a6810d1a50067db50f6764
SHA1 dfd6f51dfd19ef480284705d1cd56f2c8110dbed
SHA256 22da9b2ae4c45675fa205c2b9db0066cabdc0340ad86d2c6510e297adbac0318
SHA512 add4ce08fec3a63b5c7d26b293d7f6711ebc01994acb8480dbb6641ef15ca90e017d80d13e1734a3288444c1d46117762313bff62b52971204906bfe4b6c2ed3

/data/data/com.grandsons.translator/files/preferences.json

MD5 4179a2f4e70be5b44c10ec99c411f998
SHA1 4a5f0da6f4aa3ac9254a396f5e04ffc334d15637
SHA256 01754a07833703e517961d7423f6f9da6ad637a3387be7457605d80b4f10bf5a
SHA512 ae221cb58e0acb1ccd68123f1f59364ef5172782aaee8d0e4a94f7f6374eaca62abdbba6961c3225faad5d1e75778643d2f09b45a61e33f770a5d50df67f758d

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 3413ba68939c0e2333d091fad4918fe5
SHA1 45482967520da203c9dc258ca83b9cf3fa344139
SHA256 487d9773ef82935c250c356424ec0a139a47af661aa346db19a0cec84800ff3b
SHA512 6b1f455c053c393e79f6ed64ebb080e585de21885b1d68e381bac54c8f6cbdd32bede1d6fa038ea892ec29d466c207c653e505e41d1750093b751215d611952d

/data/data/com.grandsons.translator/files/lists/dbsBookmark.json

MD5 69164303b2738b56abf87236fa13daea
SHA1 7c9d99695eb1e463d8a4ef6cc300cf08bbc8f1d9
SHA256 87f2a0808ef30d9574691e80f59f89faaec00398641dd51d7e9b0a11eda31ecb
SHA512 5ebc1624e65a4c0f9cc89ebc2d4c07b37814f1387a74d191f70245644f61cf1f84214bbb35fe4bf8298049561f30964d0449d80cd2b6651ac9a3ed21ce8237eb

/data/data/com.grandsons.translator/files/preferences.json

MD5 4996e7374c13663170e786b4b1bf7d30
SHA1 a326cdfd8ddf63ede5bd434ae8309bd4248e2c80
SHA256 45cbb23d5df68302e40a3da854328bcfd1e337ca68ec16b61bd419cab1a5cb3a
SHA512 f00fcf042bd2c2cde49980f722418ae083d0161060d354a8315a793a815465a825c3ee2b5c703eefe8f2695c6393e00c43a6794f07287697b1b0e1d66799eec9

/data/data/com.grandsons.translator/databases/google_analytics_v4.db

MD5 8a9c6e42714a9c7cdf7eeddfb5372008
SHA1 6298c7b76a6409d36982dcd915798c886f4d51fc
SHA256 8a899f3417003ec617f16ddff23710813884ad1acd0bd995727ac3ee97551167
SHA512 46ce16a6dd46445c5e83126f8a04a4396e6ae82529b96b1bafbcb0f0892de6ff03a8c44095788c69c70972296e753c97691cac41853da4c170d0f3d0aaccf341

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 afd1ea5063bcbb25dd4b24f26593bcff
SHA1 b1a09a1b35d49dca16d60cce4873c6e7bdd5ada5
SHA256 de1c9dc50c501ad2e03e86a1023821707acc5ab5792054eaa09de4161eb29fac
SHA512 88a6abf68354536d73dd3dd65cc9004b17ce3c16365ea7388edfcc8085659d3406004153a119b794b41f910d1cc0e892c1c414193af05313f04602aa539d357c

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 8692476638123f02392bc9b6f4314d76
SHA1 4c64b58dd68e158d1cb57ef905efe0267e0b4e01
SHA256 9fee20cff9c8f7ed037ab3353b44a4efbb65ed2beb6fe5b72a3f15eb5f891197
SHA512 2cf53dd89fa22d3e3bc9c8c3f08764deb852c352ed7a771ad747db6e01710eac47b31fc3586b0016f40ea6955dd8b70e840041e8f2653c65a69f9991d44e08ba

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 d50288fdcc47cb2caa6a4fbc67cd9adc
SHA1 cc7cb0c141df252b6cd1634d12de056755ddd4bb
SHA256 5316e0961214c14ab1e78d2743560c0396c0a28538f2a085c3fbe626e07a453a
SHA512 f126b82cc312ffd16d9d9f719bfdbc3368fcbf7dc5d971a709abf13e389e91ca336cbdb070a70dff66e8d36bad21fa6982d1156d6f74f860ccfc15ff518f82aa

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 f39da433efa8d23bbd0030a8ee07ac98
SHA1 6fa8a6ff2d9e08cbc3e163b396bf3025d1016672
SHA256 a88877e198532c1509db8a1240e3896e96266ba0905b8f6ecad69ade1b594fa0
SHA512 77a69cce6f6acb85f0a409c786265a27cfa1f030c9049fbbd0fac012ea0414ca52888170df8da68c92e60b37773c89c3c6f48495dfc99fbb0bc7500674bb7ad1

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 c2ebdbe6c373a934fc672e32210e1a10
SHA1 1543b07ceb6bcdf09b8deaae610a77915dc1f4fd
SHA256 d32b0b056352da587a689cc75067e7d7fc6f59be3f3a95c5b079cec83338fe23
SHA512 dc26c8ff2af29b2beca230008598b6fe0aeea55cb0b6a5b404ca2f4393b96e6bb3f488b5a08f7b78c10e52f9a2f3f239e2f038754fa4bc38d66654d1fce7adef

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 67e8cf28b1a90f4838df9665e4ff33e5
SHA1 c497451b07c020b3c6cc3a0ef42f85888f2a3ca9
SHA256 dc56d18923ab32db8b0ea14760b0ddf626352cd6a2acc9db5902241a6915d1d4
SHA512 fb9b822d08fa37a059f10516c89c3b11bc15ee494601e72843aefafe39a53b88cd626a05acdcb6a62fc2f095fd85830057c99e2d53da44389b7b2c17e209b007

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 d19dc081e2c6880b6ebb906527e209d4
SHA1 a4fe503dfea3ddddd23d6546695d22c9e300c5aa
SHA256 a941c30c53f887f75d0731afeddac1a974b30d4c695204a42eaaf588e135d741
SHA512 2129ddbbe40a07e919c06bd7d31776f857e0661c5654879106c828a10ce3d54b7d106936a55509e57f4782e85c2c08a9b8b6083e290e9daf8a078b20480a6457

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 476967ad18b6a8c296cb0fa791c0bb86
SHA1 05edf0e63819fac3602477feff2da96f3e23d23b
SHA256 3f0f74f849dc610396f15b8c50710074ed2e4b82759ae9caf540886b08f008d0
SHA512 7c64498f414cab4939834f25c4f74c41cc334d2ee7f4f596a9cd93e043a2b89aa40033f1306f6447ed28a0c5599465f987740b6b7b2d9bbee5989a456ba44414

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 1269430e1e7c862ed23238ba0b905af1
SHA1 3e99371362a4f624b3e3880c7de7f3b6b7c5f06b
SHA256 16cc089f774d73cf4337f39f02a6094a01e8bb2558012333cf9c0d910a3c85de
SHA512 3ec1e702f9b3c8531b2154af500153222f85fef96dc1147ca69add9b86d679a445be4b8560ff75f86e95bda43fba7a96f594a00f74f0e5d5d7e3ef2a900f2733

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 c77f624baf8fff873f847073a67ae53e
SHA1 655ab16f463e90120e6b05c3e3b587c33904395e
SHA256 c239d8f425264322a0513aca81ca7306d31951755f579f70480ec06e5f95f9c0
SHA512 8a32cd65eba7bc3d10fef5fee77424d6cf53436f57036e85366382be0fcd40b89c9ad4f49bf7bc78992a1e98f6d5a451bca86af0b0a8e7eae1e9b0f98c8902bc

/data/data/com.grandsons.translator/files/gaClientId

MD5 6015f903424d975d71f6722c6af335e9
SHA1 9d8f70c1422ac119d8956603fc74b117518da502
SHA256 6722c10d8d0687f929f90868297cc2ad3d3191c7561d1dd33dd642aaac3d60e4
SHA512 ced3580edef71fae12ad4c0bc568d494e4a5c3a59da406976da932c86dbc0b3fe61336e0083973c3d7a7328c8baed85016faab450f9c1985c9a99d469ba74cf0

/data/data/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 3a44058325e55c8ea4d04a5cf7167248
SHA1 11f2cfb373de6e43fdc1afacce3c11ef18948de2
SHA256 62ae9ff63b3777790c6cf3f1f3fcf50443d07dcb0f2d589eb6e6a369e99e712a
SHA512 ed80b6c9f19c88b7c6874918173f4d6095024883fb81d52d411e9a5a5462a1597d94f75f21fb8e700dd15933af19a052d3e88012f5419bc5dde7c84b0a7eb701

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 9f1bf08ce77e569ffd9a1719b658a265
SHA1 7b4086a9d460dad0c59f2748506bbcd8f7274398
SHA256 47cff3ae2575d55e6c56df539e8b962b2482338bd78c8de71c9046d8919d8a1a
SHA512 307ae876545015d662ea13c7f9e4193b18862f9079058f524aafeb276a3997192136755ed99bb737e20514916716674585a41d81a6c8fd9c2b06115a2aa03bac

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 24cc6c8fd5c5a0af4a38fa4fd75c3d7e
SHA1 2728a60246179bea42e0148ddf3e9a16a6ed588e
SHA256 e6ef2815f1a9c7109519e3e42b136c8a116166b9073865a9d7a149e41490c029
SHA512 7c4bc07145bf124e72c71ec4763e286af9a8dde707af035007aeec234b98f05201858acf84136134739af1c392d354e7b071018b147880927368d54b3ce294bd

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 fc90442d48ec27d623b630a5f0de5ffe
SHA1 85ea37a26ca658f465e2f6879c76c2e59aea2eda
SHA256 e90df315309f4cb4327da60761a7cb4574de04ad86e9a998f2dc29f2c20745f6
SHA512 3c50bdd16a024cc54b07c253121b4b5a445580efe2c6b1c47c0a545117426a3e9fb9b4bd064e09977a8b9dd506ab9558a5cf14bd76d8ea19d648745adc843009

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7BeginSession.cls_temp

MD5 c3d9b20c4e1ba0c37e600ac80a34b506
SHA1 83b25488685c071fbb402b26aeabef8add2b0fae
SHA256 4874c2c2b2b09abe856828b929471db0332fc2c9ca304cee22e02139ae5d842e
SHA512 4ff71689ebd630028b3a0e17013d825c9667515172b7f3c8b1224204a333e0b4e5312475b0c2bbd4594f23dcf0c33e47cf77affd2e62e6ba02093b2006be5fbd

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 2ec9f8a209c269abc8d3c884101c5b12
SHA1 0d117c70f950ea5c4a16a7a661a4b9c716f0dda6
SHA256 66354f810b40397b0e43575c9cd8d346b4b5b275b53989b9d2396b53a8b3d46d
SHA512 3b5a6141cb8b3498747a811f7b92703b056c243edb155d235df5e54255c35550d809268786aaaf5f63467a2e9f08fc3200589f05cd6c7d30d6305d13f07b5aa4

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 563b3d679ae18ca800297c6e18d925c5
SHA1 d9520ad624b3778ad977313fe31dfa2dabe3c60b
SHA256 052778351d3fd5fc839092744c48a43d8a2c0ea131f96699b33e3e265c9c8f83
SHA512 ee44fdff05d96d6192bdece8e2f4f4fb9aa9a38344a58ac49fe95306daba852230fbcb987438454085dd73d2c966c5be491f24bd36ea7ef89c045dd7d91932f5

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7BeginSession.json

MD5 8f6dd45839311ebd22babb1e15b9e45d
SHA1 c32e130401410c7fd70450728f77310852c1103b
SHA256 aa38443ce3fb5a42259e6e832662a5a093237a7c6fb4da9ac9014223515d762f
SHA512 41baa7b461356f4c2be608c3708af111843b8301d6142d3590dcd093672480106cefa864151f77334f9fedd695cec114def2700c9e6e401f991d61c5674d550e

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_ef88d9b8-3152-44d2-85bb-f06e81c0a954_1718175873181.tap

MD5 60bbf7f7639bef63bd24e44ed49f6758
SHA1 2dd42f62cb2f566f9ca511bc37dce68bafaf4041
SHA256 7080d3c88ac287440e96199c959275c5b7ad8ff297b8cb1b4bbebb5d2367c6a8
SHA512 e34df7218d774733a990165e7a5c3ff9c7a739a4491c4609b94c83ab9278d4c04f255db4a4062aeff1af2b51d8416473912c84efad0352fb21d1c93c08e18a77

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionApp.cls_temp

MD5 9a4defc0378b8c2ac1c3a23e6a6f36ee
SHA1 db8002baf3de0d07057bde67277a014e31d34ffd
SHA256 3f0429ae2ee7d4a2aa051801c099387bd80702f8fec7c1ea7742fd3146348400
SHA512 841e29643482015123ac956bbbc8bc6d1b186ad99a643e8e96f8021dbc64fd34d84882168f09d48aede99dd1b5ba8a90478d5f702f1b1ff492298afd55391e78

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionApp.json

MD5 d9970ddbdc448d60f6e4da756a6b17da
SHA1 e85226bebcde4899abd122dc2c7ef9383e5563d8
SHA256 d29c17adc638dfae74f0f7f315c25b40ee2f5d7579769f8f22959bfddc51055d
SHA512 737b05e46546afbb63f32eb63302fde33e28c4db9181d7fcd09a730bfd8aa60f8ad7a02c80d53f2e84cb85d0b78c783d4b09aa2674004c378165b2b7f41d3a7c

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 34a84a53d9f91325d40666ec004ca7df
SHA1 0e25cc2e7c7192d5963b20b63f01efbd68a937ff
SHA256 fb73658409082e20f030475dcc56af81e4339c01e6e6540046e886cf0e322d0e
SHA512 f64a8829e7ec44e20ad74f1b5303d01e8e4ae03a52250751e5c44eba1fb15b3662098e7d9ee6ddbf31a8345e8133ceb02273e086400b07a24a3179858e54ba8c

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionOS.cls_temp

MD5 2566d27ce8c28d8961f082c375d7535e
SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionOS.json

MD5 5caea4b68c57072f7f52a5a41720566c
SHA1 4d9712f1702c7238949da43f7d8ae6efb233a666
SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512 fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionDevice.cls_temp

MD5 2390c1f21db00b20c07107e3ec7275fe
SHA1 e663a646460acc071aebee942cc1776c23d77655
SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
SHA512 43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

/data/data/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6669487601CE-0001-13C8-062DD5C90AC7SessionDevice.json

MD5 afa07370d07ed0a8ac9554ee7001bb72
SHA1 d1e9de22fda1295087525ff3a377f7d7dd410ac7
SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
SHA512 a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 2553b16d8cef2e7d8d78c4461ecd5844
SHA1 14cea1c1a8ba2d9aff493472dbea225650aafc33
SHA256 fb54559de68bf815d515e237284061b9496f4fa629752718b1d5f350021fe104
SHA512 1a16d0f9e7f0443a3336a980aff2b7a90c83017314385b0c80970dac310a58e1126bf2cf3a47ca7291cd643a0e751bf04715d535771596c4e7dc65788bc9ca73

/data/data/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 25d0b1ea0ca52d449a5098642fde652f
SHA1 e116e5cbd2b75bced38eedb48a86769beec887b3
SHA256 72c975d36b106040d6791a8bcd90f07a86b30a7e0c04a4372975b5f8a403225b
SHA512 d6097ed08693baf407c0ec8aced931469f02dc95440e8d360487515b1b85390a130e24ac0de9fb11a966225c75a517a8e43b9b3f922e670656d150407bef00f0

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-12 07:04

Reported

2024-06-12 07:07

Platform

android-x64-arm64-20240611.1-en

Max time kernel

32s

Max time network

144s

Command Line

com.grandsons.translator

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks the presence of a debugger

evasion

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.grandsons.translator

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.206:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 translate-plus.firebaseio.com udp
US 34.120.206.254:443 translate-plus.firebaseio.com tcp
US 1.1.1.1:53 xunglv.herokuapp.com udp
US 3.216.88.24:443 xunglv.herokuapp.com tcp
US 1.1.1.1:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 1.1.1.1:53 r3---sn-aigl6nsd.gvt1.com udp
GB 74.125.105.40:443 r3---sn-aigl6nsd.gvt1.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 r5---sn-aigl6nzl.gvt1.com udp
GB 74.125.168.170:443 r5---sn-aigl6nzl.gvt1.com tcp
US 1.1.1.1:53 r2---sn-aigl6nsd.gvt1.com udp
GB 74.125.105.39:443 r2---sn-aigl6nsd.gvt1.com tcp
US 1.1.1.1:53 r4---sn-aigl6nz7.gvt1.com udp
GB 74.125.168.105:443 r4---sn-aigl6nz7.gvt1.com tcp
US 1.1.1.1:53 r2---sn-aigl6ned.gvt1.com udp
GB 173.194.183.71:443 r2---sn-aigl6ned.gvt1.com tcp
US 1.1.1.1:53 r4---sn-aigl6nzk.gvt1.com udp
GB 74.125.175.105:443 r4---sn-aigl6nzk.gvt1.com tcp
US 1.1.1.1:53 r1---sn-aigl6nze.gvt1.com udp
GB 74.125.168.134:443 r1---sn-aigl6nze.gvt1.com tcp
US 1.1.1.1:53 r1---sn-aigl6ns6.gvt1.com udp
GB 74.125.105.6:443 r1---sn-aigl6ns6.gvt1.com tcp
US 1.1.1.1:53 r1---sn-aigl6nzs.gvt1.com udp
GB 74.125.175.70:443 r1---sn-aigl6nzs.gvt1.com tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
GB 142.250.180.3:443 tcp

Files

/data/user/0/com.grandsons.translator/files/lists/History.json

MD5 e6482af9641b2aab681f5319ea0be801
SHA1 7b302ef21c5210c6ac3aa51c6c34abfc97172765
SHA256 18ca2430c44bfed678808d15ccf9380fcb928302d0afde94106ec760b573adce
SHA512 73583fbd818f82e58d47e18fe3e5dcc44d08b83c3130e021d30a62461d158b9123bd2bc7df3cbcff8d7d8fb6d0deca4320c0f2fbf78912215b0835c35fe784f1

/data/user/0/com.grandsons.translator/files/lists/Bookmarks.json

MD5 10df23ee5905048786750d876a48e0b6
SHA1 2c76f5106564b9d671721a10dd9cac102ec9ff4e
SHA256 1b74bd75d8babc8b9193a880379fcedece274e19ccba1140b017e97cf2344079
SHA512 4fcd303e47082e2f77439bede27ff2ee0a2ac563e274538fcb7b870e397b6e4992324ad7f85c0552a72747305e784d88051ade78e3a2dd82913b87fd0948cf85

/data/user/0/com.grandsons.translator/files/lists/Notes.json

MD5 1d0871eea2e1ce758897b8e95ff55d30
SHA1 08b8d8dd7fd08e485be9071ac8a4fdce742e32a6
SHA256 0eb9a5851a06e87c6cc9797ca1d22537160abd912164d5bdb54cf970b4b99d7e
SHA512 d5dab3a58bdcdf99aff5e4ea21fcc8380ed311b9648fd9d380a454244bb97fd6dd51ffee5fda334da09d35373e01735d25b6205abdf4de64af6d58aa514853f0

/data/user/0/com.grandsons.translator/files/lists/Remembered.json

MD5 b532cda6893be2efd4a3557fc43f894c
SHA1 1bb92df1af61e05b160384e6a882b83988026c7e
SHA256 fb47d86c8bed96c8f5b39c00f26f0481e4918ed9f02a53ca1d0e42bdcdbb456c
SHA512 85e3fabefac99fdeb3b0fdff0561214ee22b2a7344f7d475436c6bb0f68b866b018c632e7dfe7292f1fa48f36a94d16f95d34aeadc26590a93be16bf029f375b

/data/user/0/com.grandsons.translator/files/preferences.json

MD5 01c3def2ac334d9b33f847d61751726f
SHA1 4c5b4edea15db1621ecae410c11bf079d83c0c20
SHA256 7f5cda267d8b83e6b85a56d1af6ba427de3e595a49ccfdd30c055b90ce981db5
SHA512 681358dfcf9a6fe04f145d8230c35bfa6919be99fd94ed42438222315e9d8c69bdc879c72e27b74cdc0a42b0bca4f213e73c7cc2b207f0db47766e22cb99a7d9

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 35255b50c8ff2e5657d0b138a333d5e5
SHA1 96e87a84d14bb24317f6641a6f752142d333457e
SHA256 98a94fe62136334b1356da2a339588ae3e3406ccd0daac037af0920646a68ebe
SHA512 745445e3b507b6abfed7c8d0433cb2af7a496b1356b49dc9c7341bc3c9229e2ede0b3fa5b5dca3987838d5c9455ee2bc202800d29feac644a349766e1273ee0e

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db

MD5 978214bd21ddf1ca2b402293607fdf37
SHA1 649f4229509e2faeb380121a7f4002261b33c3fc
SHA256 77f8771975e7adee9a128d8bc92571ac41992dca154d6879c8bae9ab17cd5e28
SHA512 b49602a9cd985dfefa5f19dfdc5828a7ec3c945d2c60e79c12cfe18e877c0c591b54cba029918d8ac15cdb6378d9c3ecf324f6fc22e84e0f0fce679370ae61bf

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 5d10403f6d7ba964b0bb75a768c13a70
SHA1 78958562435b9688c8c9cd0f6b63432e3e261878
SHA256 3f9757e4095cee4554e5eb6b45dade4dff68148d0ed2f258eed4a0d528bba053
SHA512 3541d0d2628d6527e97ad8c9e7441c042de4b9d8d7c00af45a47546d207cbe5b7ef21ce49b356981b4784a9cb668da680419f59481a400772f31d3c685f1f84a

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 e31b104013b168b2626b64bb4c169468
SHA1 1bad5149ca686e24617f816e685f9cba0997255e
SHA256 8c7da1b0712714216d4f5c1e927f11ac23bef4d81584cbd98c7d4ce5b3bba272
SHA512 1f73bdbc97f023e6e2f4f1fb7145111e1c40d328c852c8d93ff77f6fc42470eebd1cea6a058e6724d5803a413ca3136b5981c9cfac3eb9e1b4233d4b81a28261

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 3d9d8eeff8d00e8c79bf05ff38595db1
SHA1 c1865c74c832281b510d21bd7af9dd05e0f8c16d
SHA256 844927cbd32f37225e73765fb0403a21bb2c2498cd89e3e12a95e11df4ba245a
SHA512 45a904c497e087e8ebff6b5eb959b837eedc7cec8aea2057b26291ad2ddba17b641402d93fa6c77023f69f5e7e3fd06eabc122665cf89d33e2f500e0a3eef688

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 b0911c422de46bf87e32255ebcedcd0a
SHA1 ce51dd4f2554b64caed634096651634379148f12
SHA256 99227b3925419637d015c0dfe030d5c0ff7bdd452064ce7813708b57f1d5f22e
SHA512 64aa41b42c1f5a06a16e0af021736c28a28faac02d320395f007719e0e14276b82f8118ad01234ca16f8e13e23e79fc50ef42d6ec6b3f7cfd58296a3cf28a793

/data/user/0/com.grandsons.translator/databases/google_app_measurement.db-journal

MD5 d883615e7142b036a134558bc9a95975
SHA1 85500cadd0517efc883bbd630cc3500eba984ec7
SHA256 192f970de1ba99b388b15b3e3557793e02b8b81c314dbff74e63dc17432363bd
SHA512 959d86122e902c3d4506dda700dad914b61d6093572d155df734f9dfa412be335508d01bbc7039d3acba293b50b5217346ce3b82a518d7ced6ba630156179715

/data/user/0/com.grandsons.translator/no_backup/com.google.InstanceId.properties

MD5 68d3c3990fb264164627a7b3f65e102d
SHA1 0fac1717a6cc8612c0ecf7a8c9d40e75ec8ec9db
SHA256 4fc7131c0fc7b3bb9b4290c6ddcbb59dc12b019e76082d05feace45a1d7a2786
SHA512 ade45625e9ba60684084073a643705b2be4da4c8838799364a89bfe1eb60d5cee86a69292dca494eecb4fec716e88e258f88679769ba3ba5d026b6c0a0915b8a

/data/user/0/com.grandsons.translator/files/preferences.json

MD5 cf67e8dbda9feb62fec43d089041e8e6
SHA1 49fa03e2cf1ca3622daa73d0c304541523981ec8
SHA256 8deb1f050a2b779acc876833c751643ea1d0b8403fba3dce8c70ee4c660bfcd6
SHA512 2d4fdeab34f3d6520870610cecf3d7438e40f2461e07859c3b3c5f0acfc461b10b99a625953628735c3188a544cf02bf657b6cc49e33263d95742f32ec2c769f

/data/user/0/com.grandsons.translator/files/preferences.json

MD5 30932c63f66c91e9c5aab208a0bf6e3c
SHA1 bf8816e9406b523ce9f9380b0bdb565a01e73a18
SHA256 a3b331cbd72d5a9d966b1965b58ec04c1f9b6182fcacde455b0d2d4cf6baec4c
SHA512 d7f99bacc4d51cd5dacb918ebf554ad601c93afc2b8372c7904d8c6e3960f593711427d89638a67c3be8543212e75b5926c958ed854c602ac86b9f5828aa5322

/data/user/0/com.grandsons.translator/files/lists/dbsHistory.json

MD5 e6e73f3879a6810d1a50067db50f6764
SHA1 dfd6f51dfd19ef480284705d1cd56f2c8110dbed
SHA256 22da9b2ae4c45675fa205c2b9db0066cabdc0340ad86d2c6510e297adbac0318
SHA512 add4ce08fec3a63b5c7d26b293d7f6711ebc01994acb8480dbb6641ef15ca90e017d80d13e1734a3288444c1d46117762313bff62b52971204906bfe4b6c2ed3

/data/user/0/com.grandsons.translator/files/preferences.json

MD5 4179a2f4e70be5b44c10ec99c411f998
SHA1 4a5f0da6f4aa3ac9254a396f5e04ffc334d15637
SHA256 01754a07833703e517961d7423f6f9da6ad637a3387be7457605d80b4f10bf5a
SHA512 ae221cb58e0acb1ccd68123f1f59364ef5172782aaee8d0e4a94f7f6374eaca62abdbba6961c3225faad5d1e75778643d2f09b45a61e33f770a5d50df67f758d

/data/user/0/com.grandsons.translator/files/lists/dbsBookmark.json

MD5 69164303b2738b56abf87236fa13daea
SHA1 7c9d99695eb1e463d8a4ef6cc300cf08bbc8f1d9
SHA256 87f2a0808ef30d9574691e80f59f89faaec00398641dd51d7e9b0a11eda31ecb
SHA512 5ebc1624e65a4c0f9cc89ebc2d4c07b37814f1387a74d191f70245644f61cf1f84214bbb35fe4bf8298049561f30964d0449d80cd2b6651ac9a3ed21ce8237eb

/data/user/0/com.grandsons.translator/files/preferences.json

MD5 4996e7374c13663170e786b4b1bf7d30
SHA1 a326cdfd8ddf63ede5bd434ae8309bd4248e2c80
SHA256 45cbb23d5df68302e40a3da854328bcfd1e337ca68ec16b61bd419cab1a5cb3a
SHA512 f00fcf042bd2c2cde49980f722418ae083d0161060d354a8315a793a815465a825c3ee2b5c703eefe8f2695c6393e00c43a6794f07287697b1b0e1d66799eec9

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 1f4a74bc2a21de30a930fd90ea0268f0
SHA1 026434b7577de7d753025f5a71f66aebede6c437
SHA256 e9c45ec3e1dee325aebba8c7b2c8d6ccf7195e42eb030defd7ced5969de05ad3
SHA512 3c1f2c422b2ae80d758a52f11fea3a90da537bd1a2451daa8891fe7aecd8f414c0aaf54d26e235e3f7add540d8e6a4071bb437cdd3b4f320f1cd9bc925b44c62

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db

MD5 881fbb8b6694ed677d196f4ebf792b53
SHA1 b2e3b8999f5c39d42de5f5ef7c731f26939d7aef
SHA256 0420168c65f40e3a29a90b20de41aa61b0ebbf2fc9f22341cdd51181dbbcd9f7
SHA512 30e57c512792e693aa38c6ee5ab3e6af5f432fa07ed93d309d90f3fd7e6834020599b038ded2926275cc63286c33ccc226f2f771ff5186604c7ec49cf86bf257

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 ee69412118993d252b1082a47f530646
SHA1 02a625687711f9e986fe1d719bb207ac0187e4a6
SHA256 1989245d64579e8f6b68ea6c26039e9ee4eac10da8b122c9ab0af443c19197eb
SHA512 c42961b2f65ccdf1497d49d003851d9778351a1513f28395f303694598bf9af6c2ac9181bfaed637c93de5d337d56cceb188945a481529aa052b56510350c792

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 2487662b6941af39a8ee17afa75877f0
SHA1 2a61ede42ee69b7ae049e3904fb784e9e7485aa5
SHA256 a1a4c045b60acef29696820be67b1595f2b99f30a89eefcb8c758b8f62c5d1e6
SHA512 c508771ad70e91f2d3b18d6212ee62b1dd08d89a6c9e54256002063cb3a5b01d009478da9d7f6ba242f6705dc5654922561f1217f4d9e787c48d7b986ac13b33

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 09c4cf7e474974a19cccd61683a7cf86
SHA1 d0854e62a6c8fed3628756f411366f82b9050a8e
SHA256 869c6cc02b030c2efaff17ee134e9eea6455c4a7658f5ae53b2575b57f097795
SHA512 c9ee19d87692e4a1dfb8e9d57bd13a3aaa6a2db20c0a9937b7649c1fc1363fefafc779c4e2c39df062d22bcc7dd9d46b0efff317ae0e5926d048d14f42356b9a

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 6e847f2a45f25ae9bb8a244a12056dcf
SHA1 df34e15fd26dfdaccc96868320ab4845969d373e
SHA256 fc6f2b658acbdf35e9c2a84463db9cfd8e45d6112ad6f1bde8458b1c53313346
SHA512 7fe4e9781918d53a09ae5c6d26e5e7fd9fc50407059f37b728a7a3bc5c10ee48d46d0bba2be025a4c3de6fdb3e945cb40f0d13c46f514ef51be1aa5c2b54db04

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 3585e62a39d87e459f5d58309e290f27
SHA1 fafef88646dc4216634424a26275e6149313f6fb
SHA256 bfa201a025395da7acba8dfc3e70803af3823161588a015f66285fd591367b1c
SHA512 41fd4b9ee5b8a1b0142b6b090d27152acc9bb773b8cec025b9aa586928f55a34b323a35f09dfdf435ba19ec9a75b21abf71cdcabc4e7b0739dc12543a10840d2

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 ea1ae446091f391047cfa2da0a4d0748
SHA1 d2e88409218ed2ef92c063ebd7b05fe208ee5243
SHA256 2c6a3d0d0db044439c777fe9ef9f8e8562d04678d36ac0ad840565b19a4d9629
SHA512 a8c5500a78b3dda060d6132eb233de10170103dcdb6ebc6c4209b0b1fc681e270661af045dacb1df30955710936c08d8049f49802d67a36c6ff26f9ce349d5c9

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 e20e9a29d4de3623f990932e5991722b
SHA1 d55be0665a9e93c1e2d307b909eea016ea1281f8
SHA256 dd3d736602b0d365513abacc95e51a057a8d0556fd61fd10900b8ccd942fae8e
SHA512 d1d52b0a0031cddbb48384f8bc91a2f846830f59d857b8b42894866b496d1d9aba36e35a7aad974fdcf4c62c06968634a798ace2f1571bc3404274201d66fbcb

/data/user/0/com.grandsons.translator/files/gaClientId

MD5 400d58e04cd031d6cd0063c40ea01f5b
SHA1 9892500cf0d63741eb00fd5bb9c62f22615288ee
SHA256 afe63637da76d1531b9a335769b7c0dbc7c96911256b3343cf583e15bab5f6df
SHA512 408f1bd0622c0cecb9b4541e3d01c218d8b22d1946b7594c66fb4d23f571c06564cc72f722e03840c05c6c5cfa44f958f51cd35fc2104bf3548f74a5f6e8fca7

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 20d61beb999b5f4da9bcf413004823b5
SHA1 69368650aa6f2d5f72e91b4a9105f877e40f1106
SHA256 9007829f171d24b2cc8892ea675c9fb31666846b624a67acef00cd1b7fbf48de
SHA512 6c695432c79080aa40d3ce75a7c82b00bd56f7f4fcdc36125940bc62699b52af6bd2ed346432373b55330f4948b0f7ad0c4030b2b5b91b9312e80f85933fb12d

/data/user/0/com.grandsons.translator/databases/google_analytics_v4.db-journal

MD5 6a6b3257abcca6876e945c515788663d
SHA1 a8f8ca5b093e720a379b6cfba1703aef927a909e
SHA256 85b4262e39332e8aa9ca3a22dad98398f56decf27f119fa4804a191eb182599c
SHA512 181e8f6921eb28b2d60e7e9f99316959e0647a011c0ec0ab78cb692602762ecb8bc5f7d262a98707162b9647da2b13f733eef17e0ef6fcb31542fd5a8c371b64

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 8fccb9bf5859c9f3f9666af9ef1fcec2
SHA1 41f6daeea085ff9179a01f1cc560ef45a62ded00
SHA256 184a6fc5e8350db4df04a11dc539d846b1c04961fb8c33406420d3fcd2e72855
SHA512 48977954a4922a9be3104fdba06122dd9c2612e18332fca84e391b19049b53faf42b21773b2c681b82087120e9729cd4b0d3df7fc0a484fe2c5aa684dec8742c

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 000ff78916ebfe530ce040b79873f837
SHA1 09f9d4a0cd886469e56e9ffe3f5dc269d85bc9f3
SHA256 732a5dee7a4eaf3edb185c6f9109e6f7602419ec8518bfd3d409b6f6684d8728
SHA512 3601b4e20e75b2f63e4540fec0c5eeba32ecad4516f11fcd36cf3a08d9ebe4ec9bca14d68b57fcb78809ba2c12c82fc16b69207548154abf5695737a3d7a07bd

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db-journal

MD5 2dd87e57c6a3f14491e00bb96e781a8a
SHA1 83f1757d7ed18cd934c399b781630828e9d36049
SHA256 dd122f775ebb2232a643a12a276787a873205855655289ef404898fa06b08873
SHA512 d11d2338c6b5891df18e9200077792ddd1e4bce4ebea0b9effb938f0552f3cfdddf1dbbcdf36cef655293c1c6cc25c98476f4cc0fe710064406202e42f417e5c

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 280a7731697efdcce6684973a516770c
SHA1 829540f105cdb06efeb9f741cc0ee0540d894dc5
SHA256 2353327422ed7be98f9f14a09022ee9ee5cb32111b50cc63dc7d00f33b768fe2
SHA512 52e0fe01ffa8a71e54c5f2758791e0783eb03364b832a6de452684b35d2bc3e1478b1894cdc0f0d79729144eb968e54518f23192d6b35ce1b9c67e4dc03b1ed2

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 1d43ad44025d5c8b8a8ae173c09f3165
SHA1 eacadb0dc4e4f376c54aef8eaaa371c70ae0869d
SHA256 19ca5c361ed85eacb97d364a4116995d5417ece433f85dd6ed528a5c18a3cc29
SHA512 0290c8e7f53ce045f681141df789fe2da2cd74361fae63010bab51930b544c084a55d78c34b1a3d0eed45963455f912425106de2820a6facf10b7df641b7155a

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 668b1d663f6da4b3221f67e2c4c1c00e
SHA1 58e316c76cb55730021fa54b29ca42403acd992d
SHA256 48d53a5f4fb095b79c1d202f8c414bef38337c98dd36bbc068dd882cb9f88c60
SHA512 91d128eb4e263f8742d20944cc1afbb95cff993dfaa5d2afdc177adb8d4300df16664d1b52ee3236b3f70b24a677ad3be737ad34ffbd6ee4edb072cf4dde1b63

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43BeginSession.cls_temp

MD5 f6adace68dc575dcc999f35cf37a44aa
SHA1 6c52d7b9dad7c63eae92b8af80417d0b1d01e5ee
SHA256 f150a0e5808f174a76f9b43521faddd82d1fb88ef3ec9ca4324ae35d693df83d
SHA512 c486683ca2a48832c3068be9fb7402032f566fe7c9bd0a199f6939564f8a54e2681e9efd0315443a114d7d37080a1f3ec51cd779604ad322a5bd2530802b0806

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_7a3219d6-c76a-4ed2-a582-28f3d70da88c_1718175868160.tap

MD5 be3e43c9d6f1c17e31ee396dc51972b1
SHA1 5b98d4b7da9b832d868be2e4477702a9e4a9b17e
SHA256 945adc107eb183eb6388bc2266d4d76494bc1bfc7d7117255bedd4913f3ed1fa
SHA512 04f5d1303cc30c18eca06043f81e73d0c291313fa64b423cee6a180a68322de419baef2a8698b3484fbc3f9e3649e1138b855fc53ffc657985b56c8900cfb7d2

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43BeginSession.json

MD5 6cf98d72af22575124a51f16caf126ec
SHA1 b400a5f73ee7c404ea55048ab16d070eff8c1803
SHA256 a73973df9c9a3b84fe673628f30a3445c1cc9560c1f202164bd3cbc6f0d142dd
SHA512 71416a1ade91659dbae4e86542d9c3c562ca66be9dd761cf80bafe23e1b07c7970f0e4a09ea5eff14562068686ab835ff20d204be295d2fbcfc77d253952b9a4

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionApp.cls_temp

MD5 00e152217ce3dd5a7c901ee89cbcd052
SHA1 198213292e749e1c2d3d76c3a3c53e0a19b4a7c3
SHA256 a632a4c41f2973e4bc45e906ac3cf249dd181ecb7ac31f5862a4a62279651bdf
SHA512 c7ee4268b54d64816b0e9c30bbaa7b5a6f5c351713d9bd6d2a0778a90d3d735fc1cfb7bda69af5972701ada7c67362e86705c107792287bd680fc3fddc23b930

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 1c9bf76f9340341043ad654cb22f507f
SHA1 2dfbc01b98c3a5d552c86f89aadccfb5d41403a3
SHA256 0b666c78dcf36d889ff5bb6802de8867c7921332c3d34292d62ef0f282fdcd2c
SHA512 2bc457cd35f3a1b672b7b45acfb722b573b124e8189c1d7e3e765681545f552716178105179da16a8ba69f46531c79eb8df0a8b6d4bd649ec3e617f345282bf5

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionApp.json

MD5 5ec45919be4159cac759b9114f618fb1
SHA1 f7c7fdac55d6e346a2c4d655c307a5d5d4cd6e7f
SHA256 30c0b4b111aad8b41cfc82525b224719b71e4d27644f28cf34f8562a6d0f8d2e
SHA512 5702fa2d572446e86fdd33b1266f60fcdf05209d9641296449fb8b2848593e816e780dfea6d763f6dc69fb226ef0bc86aee17a7ea02866345cb9e29ae13f051a

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 e27a1d6e214301de1fbb9a115f60df97
SHA1 000e4b6587e8b27b93d3fb283412bf3ba6ecdb12
SHA256 04416117607e9fa544138ba5504c0738402319af3ab9af44fbd61586f2cb953a
SHA512 d1cb69a5b6ce54c1ec7bdb7c8d88c8da87f11caa634e5eec897ea67def4a00a8c0bf5b7eaa6bd36730b38e65c2e0656954ab8d6556e97a4012163500202be75a

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionOS.json

MD5 fc1dcee4e422d77e7fab7c08c8a41344
SHA1 d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256 b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA512 3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionDevice.cls_temp

MD5 fd6372364a5c5c9cf8945ac3ea7a5d94
SHA1 3c798cab71f6ae7a81e71e58712368231230588a
SHA256 7400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512 a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276

/data/user/0/com.grandsons.translator/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666948720358-0001-11D9-8DC3EE795F43SessionDevice.json

MD5 eeeb942571fa704cf8ae49731fbe9789
SHA1 b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA256 78809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA512 71e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 cd0c226ab77b6ad2e1b283413b66d989
SHA1 da9ef20709a190f42a753d424324e0384cae2d82
SHA256 26510aea629edc9b713f70d90578f966b25462027320420a6c6b8b865b2cb878
SHA512 17eb8d726f0782512a5d0ba52ef0202ad0c135807d19a0ea1f128f2a5cf3d9bc121155248cfd9b0c828acbc8e7a4cac81328f107733bda58c46969210e9491a5

/data/user/0/com.grandsons.translator/databases/google_app_measurement_local.db

MD5 0d3167b386eadfc71dcf9e56a5b31611
SHA1 f74bac77531772722bfb5c0a665c763c1c5a8266
SHA256 051df854840341a659eac188bca41838c3826a8d64262d8583e5de0510aa0e83
SHA512 8f70efeac2763da0b50738a7d0c182b620b4e306839ef0eed5d570c10db8ff4deccfc0507847ea9387d50a6dc1517ce6ae49bcb68940da3592e553e399fa33d5