Malware Analysis Report

2024-09-09 13:00

Sample ID 240613-2qdq7axelp
Target a6f5e4f28b6c9ff5c2013a7c358af88f_JaffaCakes118
SHA256 d8f624cef19c390ff8633dcff9426806e713a8ffdb4cdc71b8dc2ac23631648b
Tags
collection evasion impact persistence credential_access discovery
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

d8f624cef19c390ff8633dcff9426806e713a8ffdb4cdc71b8dc2ac23631648b

Threat Level: Likely malicious

The file a6f5e4f28b6c9ff5c2013a7c358af88f_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

collection evasion impact persistence credential_access discovery

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Queries the phone number (MSISDN for GSM devices)

Queries account information for other applications stored on the device

Reads the content of the call log.

Queries the unique device ID (IMEI, MEID, IMSI)

Acquires the wake lock

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Reads information about phone network operator.

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 22:46

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 22:46

Reported

2024-06-13 22:50

Platform

android-x86-arm-20240611.1-en

Max time kernel

27s

Max time network

179s

Command Line

com.truecaller

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Reads the content of the call log.

collection
Description Indicator Process Target
URI accessed for read content://call_log/calls N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.truecaller

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 track.appsflyer.com udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 track.appsflyer.com udp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp

Files

/data/data/com.truecaller/databases/tc.db-journal

MD5 2b4a43a5da030edb2c50265f3f7ff2a3
SHA1 440f239433d91cc352092d3011852a1854d8ab50
SHA256 37735bc58b253a36d5184a1abbf4d423def5cf580423a9299bf55e33f16be095
SHA512 3f3cd0a7c62600ed730bd98db5ffa1988ae7562355a2606f9142d2676fea090d34a62f4e0ebc84c40caad6fc28f7f45998e89ae9e56886eac693667aa4e10207

/data/data/com.truecaller/databases/tc.db

MD5 0331f48a8a18689de4de7fe751fe1d73
SHA1 005ee477ad3e4fb689f1b670d042bb6a97d6bd12
SHA256 c9b98d1eec65b86d1fde10ba9ca9d5dd7e6dee0a650da38244d4db4fa70d3d4d
SHA512 bcc46eb60067095d2cd0288cb7cb183a435b6767e7efc69e4294ab18ba5a358719f22504c48fbe23e3baad53f675ab1a54bef0c99831eface4c73cb814190e7a

/data/data/com.truecaller/databases/tc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.truecaller/databases/tc.db-wal

MD5 17f30bb948abe266acc5461ee5a1ad84
SHA1 c8d6188dfdfb43412bf5385a82e3370202cde2c7
SHA256 168a1c5ff74a577dd8ce7902b08e74c8148e25dfe7de8981e22fd26bc6c8b883
SHA512 ccd66a220a4f284cf3ccd6b6b18bbc765463e8a57816682a00498d91f0df19d09c0c448389ba413ae3e32848a409cca01535d11d2b510b9581d52fe7da489508

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66EBeginSession.cls_temp

MD5 852071ed7a8c3fa7a18d2be0b193638a
SHA1 c234bd04f1c4a23d12bdbdb4e968b41af32e2154
SHA256 cb20cb75484876942c34c0ee22b90215c6d371cbafeef153e4dd52377aae24b5
SHA512 ca08adde86feb66a57fb5d20f8eb26183f7085d15fe369201ed5c9b02b67026d71378912a64b158bae6055312171bb1bd7252c3db1acda4becc20d72d423c23b

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66ESessionApp.cls_temp

MD5 14b981eb70b0e4acba61a982ac1ac824
SHA1 7542181885fda1c857a9bcca41de05ce280db718
SHA256 412bc982b2353f5b8cd5fb84df9e839e3cfabad55ddb19959ecde31184467e00
SHA512 4858c4911c08e9e37c3ebe17e08f844284fc288842944b1eb12915a46d71cdd2c5cf3ca1b4806794b3a90a3102538a10225462aa8e066def9ac910ea86a85676

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66ESessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 dcd5ad95c5575c08fae283878194a74a
SHA1 aa4f972585aca87b1abf57ea0e5fc6eefb84d83a
SHA256 8d0c8f2f118e8c8da4b9d99363973b3ef577201af99e96900b92562aecd41303
SHA512 682144b4543e4af3f87691b602c1ebe776e84c7209d05613795e87be52a104d714f1e7bea7f170c22543ecb6fd4bd371e81ee2e318e77cc3b06c3de3d31b1f83

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 adb0b8be5ac179c25af09b9c560f9f49
SHA1 0c1975f0dd0b66a0ed6ff971d55f53bdbe8b40de
SHA256 51311808c4b2fe05c474a8b343879fe23edcb5642a16256beb6e7f552c4ac8f6
SHA512 26466f41f65d664445992cb3daccf952cbcfacc27b36089cbb5bd8918a71ab64b4b6efc9e245bbbee961d13edc45591100cd67e8db65f1ac3ae21d93fc1bf223

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 729ced9d00bb572c3580a5fb5b5d2ff2
SHA1 b153bbe4f14a61f11106fb1e9a30c0747552efdd
SHA256 837904c14e1985a4c7ba6c2ad3fc860568c11be7095f265fdd1600bf34107fd1
SHA512 0cda0d95f81db1ef254ae09a873d9d4fb276e4a9eec5ad34ca319265a7dcc6be9b27e0b4b82e6896ab692403786c2d84f0d145d795bb2c08a0b0ef635361fa6a

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-wal

MD5 d629835de0c60703eab6a290043d3e17
SHA1 b0162329875c3f7ac16502a6eaeea4f7317d8e81
SHA256 4bda8f7de796d9f69c5677dfa6681a7546d99cebc9f96aa6ba4561e4535fddd9
SHA512 6513574d1c37b7508194569eaf67de1927148b0e342aff607614649d1d80b4798a0d88abbe17a8c32dbceef30a784299ef2c5fd816450ea6bca445e6fb0bce94

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b5c56e6f-2f30-4b8f-8f35-d22182644a28_1718318839190.tap

MD5 e4abd916a4cad753757542dcf799d5cc
SHA1 78186fa2267611dd7a214b0784d5c34a93cb5ba5
SHA256 b8cab5da52cb9813b1cb9bcc0d559727ba1e957a34f5d0ff87b612238ad6df0b
SHA512 5f510689496d27678e82fd46fc4888bec593054a02595f522584017ceb408ae45e5e7a115300bb67bd1bb6d657d56a4978208fb77ff72a3a1843225dda438e80

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66ESessionDevice.cls_temp

MD5 cf99dd581f20994b5d73a426f17ab2e9
SHA1 59afdc447bf6a0115a69c1312b00e99880ce277d
SHA256 481038701a23e44b8786d0896ba727807dcb4e22657f7ebe3ee8cf4717042f70
SHA512 fc2792cd794dc82e2f2b88af42bc9d2a474b8d9497ed8f925397d800c2205570e0728a562b36cf5e2253fb9a15dcc9180f6d4daa49455e8d6808db433c993322

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66Euser.meta

MD5 5ccdc309fb531b8dbd976f27be362d95
SHA1 51fd9a8ca79ab68d11dff6a6582e7cbb7771c14a
SHA256 718bf1aa55b13315471e60d362327b973a71b0de31922d9f0f1e9b54f422dfb7
SHA512 a22ffa190c8fab023e88bb19e261d2cd1dc5b0c6a8cd8573e4b475ae006e843f523e79a5fb99a98cfecbdee774e92424564c4caa24e575caefb020d143eb34a1

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F60371-0001-10A7-0182C94CA66Ekeys.meta

MD5 36ed467baf9a8d32a9c41ced44559587
SHA1 624f893e0862b3a8f92a9c492c31f3ab52b7d34d
SHA256 7c555291283f35d406c4064710cb14a91e93991c5a3282b6633c08d44d494bf4
SHA512 9f711eeaac2024986a5d1371dbc18efc0e702b4434996afe038e43124becb4580b6a46feb56ab5afcc88a87ad400ba11d7310222b68a98e01ff6543659a0c910

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-wal

MD5 68d713339730fc568fd517dad88ede4b
SHA1 cc5e6149a5aa2da5a6bcac2692adc03dc673f545
SHA256 680350831c457375ad0c2c5f6c2bc78035cb5b0a18c2242fd2af9a0e04420cab
SHA512 9964b5f29981dead25515429681797d4fe9182799335c70204695cf5ed88fd1f0bf438e104b1c6c686ccbdb4cffb1ac9e82202052b04242af2a6d92975950007

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 c263d71ace8a2e5670a6143e4356c1be
SHA1 fd95bc7ccc122a541ceea0714b0e3fea24a629ef
SHA256 ddb7cb470c9b0a66af13bf40df12f8c55950c7450daf7e93121290b6be065eea
SHA512 5cf137702e32190468f6e55bbcca3be98a59c0c98561562f5bcb5c9f6486967663c3ce44e908f18897f1d21db1d3317f3ea22853666e19995aeda63c70c54b23

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.truecaller/monitor

MD5 0185b7d920156df78aa557fca00b661e
SHA1 10fe2dbae8bbe3da19e42f156d930fc7acb056fe
SHA256 c5d26ea2829dd5bd0ade99b72c69582982ec02db95557a1179691758eb62b42a
SHA512 e735589cdd8885e77d7983a1440fa2cf3c84949caa6c918dedc245b8222e2c9514cd4264fa320bed78f4c4a337689d5c791aa4025855fbfcda6e6450a57e67ae

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 ef574bd6136adea0785a2197fedac32f
SHA1 6d4be295de02f87d5b14c1132494b36445a2efbf
SHA256 8c2ab9f70b1e5da98c78013ba895266a376c68a4ffc6301d44824d5669f5c5a3
SHA512 7acf437f756657d51fc0da36e7bda1c99f143a640bcc65d087cc5bc349d0ae4a4a81f08df7c11631b8cf91117760de37a089b41a002687d93bddc8862ce22ba0

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 a3288327e9fbd0ffc0973ac5726bcfe9
SHA1 064d5bd68cc40692fcc94a1ef65af299fd5b7bd4
SHA256 0960556429be1fa6be0cf01052e6a46bfeac339632df2a43e3da1b0b1b04c935
SHA512 15d40a7888eadb0df9c64b98d8f0f1608b2d4ee169d2ff42a73ce807a964e31a156abcdb5026fc8c7676123d13d15df694aa68742daacacceda11f840ece549d

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 d5ce9475d9f60a19ff214ec6b4879bc4
SHA1 a7c7758de9c99c9252151f8c66bf795ebe6f40ac
SHA256 ba0f80490d8895dcc730d2f8e9b4c3b5242e09fd5f04ea3e26606b32bd8dc7e1
SHA512 ae5ce07cb557e79435a7dbb40be7203a6ca15c4e916df5b3edee4a17207691def35d11f81d51177f7effc293cce165d6dea15472e708884e6f0eec22d6d5b718

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-wal

MD5 ff0741d136844ae2c7d0402d666c906a
SHA1 ad006d6abc8f5af2fb6f94b130131cca2691cf1a
SHA256 9ba088b31411d1ab12ed93a115351a26e74616f8384cde451cb17b04517c5974
SHA512 303f29fbd2358aaf6c29026a8ab6061fe869daeb01e40d0d0d8e23c283cdc970ad5cbdd180e8cf4168215488d492565a568fc31c6e97aa9c5cb15d64c452a917

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-wal

MD5 2b640ca86d2ec07969f63eb0cb08895d
SHA1 4aca5b15b7702ee81af1892256437ab41de24b38
SHA256 67419a13f611a5c0ef370713c5a032ae7641eea58a0e3ff27d0df996ebc48abc
SHA512 00450186a256489e56a4f2c03f1dab225fa4614c80209a3d0ffb09ca41f9231891212a7b85f6e7fbe4995a884568122ea1e933d440ec11c15331f003a4c5786a

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-wal

MD5 9415ef5d092ca77258025078f1d55559
SHA1 990cdb9758476edcd68434235b0308658a58a438
SHA256 b6b58f3b9976fa4289cc15e5a2ac532b5ab213d7643ab930a915617f1d980872
SHA512 019cee06136544d65e4e783e175be30bd7673bbea13134921e6cb5900632fc639966b5e2258469dc7345b8e6a0d6ce67c1920aaa5daad7b68abcffa359b2728c

/data/data/com.truecaller/files/AF_INSTALLATION

MD5 7b75e6da33e2c4717f0a51211a002372
SHA1 93223b4c898cc59c217cd32c9b28571556d6a1f8
SHA256 8955f346c320bf3da45aaca2240c910edbce90f4411d669c895fee7b9ad3c26b
SHA512 039631c5e1dc058f2beb8fbc5bccf58d196ced922de25df9191d6e059ebca66fec7699998bd9e0571a46d5b9e22caaba3bd87969c24390a000d2085330b97f68

/data/data/com.truecaller/files/AFRequestCache/1718318861464

MD5 97f2cc7cccd9e16691e5b740da4f8601
SHA1 7c0409cd685bbc9988dad2d8563d2fdaf30ed922
SHA256 66973695e3055fb79446bdcbc0d0508d7ceec4581a4cd8271beea77d70b187b7
SHA512 7ebbdbc19e58d08f6269ab146682e1321cd6517c8f0f618fab6a3f7916c90ae34162adde8dfb5f90620a0cd45797f394fbd04153cb0b4943beb8eb1d6a7e64ab

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 22:46

Reported

2024-06-13 22:50

Platform

android-x64-20240611.1-en

Max time kernel

173s

Max time network

170s

Command Line

com.truecaller

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Reads the content of the call log.

collection
Description Indicator Process Target
URI accessed for read content://call_log/calls N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.truecaller

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.10:443 tcp
US 1.1.1.1:53 track.appsflyer.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 profile.localytics.com udp
US 1.1.1.1:53 analytics.localytics.com udp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 track.appsflyer.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 profile.localytics.com udp
US 1.1.1.1:53 analytics.localytics.com udp
US 1.1.1.1:53 android.apis.google.com udp
US 54.221.125.206:443 analytics.localytics.com tcp
US 54.221.125.206:443 analytics.localytics.com tcp
US 1.1.1.1:53 track.appsflyer.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 track.appsflyer.com udp
GB 216.137.44.128:443 track.appsflyer.com tcp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
GB 157.240.214.1:443 graph.facebook.com tcp
US 1.1.1.1:53 profile.localytics.com udp
GB 172.217.169.78:443 tcp
GB 142.250.179.226:443 tcp
GB 172.217.169.42:443 tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
US 1.1.1.1:53 profile.localytics.com udp
US 1.1.1.1:53 graph.facebook.com udp
GB 172.217.169.10:443 tcp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.187.196:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 profile.localytics.com udp
US 54.210.166.190:443 profile.localytics.com tcp
US 1.1.1.1:53 track.appsflyer.com udp
GB 216.137.44.128:80 track.appsflyer.com tcp
US 52.55.124.157:443 analytics.localytics.com tcp
US 52.55.124.157:443 analytics.localytics.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp

Files

/data/data/com.truecaller/databases/tc.db-journal

MD5 0b346b203f88534d3288b6c86c54e684
SHA1 b24451545089da049b916f4e6d395de4d2c5325b
SHA256 21db3377ba49b0bb4d64583f679b5fd922d69ae2f3b9eecf41a9e33e55557d88
SHA512 64e31f3d95e7c1da0a7cd171036f6839aef7c7664aba408531a27b0edee54f142cbead8dd8a7f8d0e4e933defda36f5cd60e9b8b4ff9b77a91869ee78f0756a1

/data/data/com.truecaller/databases/tc.db

MD5 2f3bc7d6790630b68710fa56a1eb0cef
SHA1 68b0ac313cc1523f135dccb6344090bcbc10944b
SHA256 7b5bd98ee69e83c92926ba19ab300eb6d5b745d3aa9e522440b309f0521bb9fd
SHA512 63eec15a22fe32044193100947499c7317a44a5f5d248febedfbe006724dfaca683e5d2fb7141570eb7b190e4f3f222f6c22041759fa40ae98ddaa39d053f914

/data/data/com.truecaller/databases/tc.db-journal

MD5 8c86fc38286454db3fa300c527ad61d4
SHA1 b9791cf736aed8ea3781baa1a611d52b09bf701c
SHA256 c989ab2c638d6f551004880461acb87a37fdff52632e5ecd570458129e187b12
SHA512 701a3cad14d942b920fe526d1446e84b8088dec35b97c20dbec3b2c3cd8f69bc86404aecc5b35248b5cef6fac07623587e9a1df107ff521e76fc1bb0e1b7d7ec

/data/data/com.truecaller/databases/tc.db-journal

MD5 705e5addd6951c81874b805af04799dd
SHA1 974f8b23243077f915d8d113f055c6c010954454
SHA256 6d468ab747b842b1f4712641ba2314901b07a3a34149d4d57b1735679095cd33
SHA512 f22065cb86c93c1f27eaf83a69f84d21a856014b6acffef22d5e19018285770941bca8f7bf62d3961c2cd5e3019b7796a52b065af5f967fc6b503b1696d173c4

/data/data/com.truecaller/databases/tc.db-journal

MD5 e3ba830e8499781fae70b8b23bf4a54e
SHA1 6ed19b6828a55664c66ab7bdba6d0b9a16ed0672
SHA256 17c41f620c85ec43cd2bdaec4a25c3dea120301dea26b861324d66611beed68d
SHA512 e4ff8041a620b209e49a49c1190dc1a8610a9e9a7e9cef13788e6b2097206a993ada8caa1dc167437cbeb90ffeda2200859b83bfd89e1717c5a4f0aac09585c5

/data/data/com.truecaller/databases/tc.db

MD5 72bc79829ac8e7848d9cb2151649db2d
SHA1 ca57810f3cb0454fa0159c8f80312cfea9e46cd9
SHA256 90c1239785881a31fd19f72c67a8d9d582e5a01a4b8ba2c037999b99fbfaa86b
SHA512 6aa5d4425ffb336a5616451c4655a1a0773b9cff1e6260429387fab177964fb96b807a2289a12a63ebcbe002fbd538f1bfea39f79ac4be7bd6dfff5f40d0d4f7

/data/data/com.truecaller/databases/tc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352BeginSession.cls_temp

MD5 21d05a3edc25a1a470c68fede8fef1a1
SHA1 22400b69957081f72bd39ecf5082828435c189fb
SHA256 7f0716fd04595f5f734001806f261c3bc40f72434987157fdb43bf1d7c8740ae
SHA512 958bea9d1be943b3ee1ec0e3b89e502fd882249b67debd8252204a4bee62696360746ca75f0a96326641df6b6546434d8652d2f8c13728f439aac0cee72deff2

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352SessionApp.cls_temp

MD5 8f77ded15d90dd7ef764c9caad624fde
SHA1 ff575483a0aa35d6996229e65b24928771dd73d1
SHA256 850fd752eed8393ca85668eee52bab4d7801d268b54704e6b6f1d855d6ca4270
SHA512 974fb6552077f9ae6026fe80706a781265d4d266b00706f4482178b6e7c178ff6c50caf96353daa864143d7db7d05f8f5bbf6e2ff87ef402016bd2406f78aaa1

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352SessionOS.cls_temp

MD5 2566d27ce8c28d8961f082c375d7535e
SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 1ebac8186ae7cb61a08cb919cb468120
SHA1 bee905cfef4e1118477f06eddf9e758a62333b02
SHA256 f2c5a73f41abbd0a162c833e54e86d209508f534067974e5221c8767ea885763
SHA512 b827315e55e3bf00a569b45384d90447dbba50c6a0b69c797098023fe27fad0f00f69c50e033565bbf692955ee5adb6125dc63c943e04e79968f7a6c68ee8d04

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 5b8ebb17108c20d0ed99089f2fb485e1
SHA1 eb319db1f10ad6464c2279a698d833718abcc85f
SHA256 c986d4ccdcb4d572af7fac139d22ba1e28ff2f73dc47e3fcb66bf083b1bac3cd
SHA512 d8b6954d16d525d415a39dc2b51ac43a49e6a2c3feaeff5968e94f9bf55f031279b51f5b85da497c75f832112c5e5b2ef0f0ff51f259c9b98dfc8c8461a561b9

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 5129849e3487fa3478335137ba036d23
SHA1 b8802e6472236a8fb3f563fc0d158448fdf61383
SHA256 2864e145b2e9407bd281ece09071a9e796485b97a894f3f6d318a0c95723a428
SHA512 986451caf10a9cc584c452161907b24c818ba160fd2100618b38c8358fbaafefe2bd55461ad75b61911402a67556e2626acee5738cadd6583b3fe1791f52e481

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 70a3be653de517afca4caa783c5bca8d
SHA1 2bdec1bf37925e1a4f13c6c57612241788456e22
SHA256 2d73657f66d23c429d094fddef0ff3ef27a7f25374ae413acccb6bfaaa7ae3ff
SHA512 a877799f09f29ea740f69e14888eedc20511e5dce6d4cccf0a559293abdfe042a4a1193114bb926d88c9dfe0a9f6f6076c225b0e504119fb8bf4dde38ffb8a0d

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_4f5b5b58-68d1-4c8f-99c8-1e0f15017981_1718318842105.tap

MD5 014e18dc2c9316d920f9772fe59a1fd9
SHA1 6bc5be79859962fc29393aea3ac7d684b2ec03b3
SHA256 23edfdffb119947295d80babe30d02a20ed84d3bfea99e03eb6f21c25342948d
SHA512 d3200838bb51a7d2dd389a822e3198c96da7c5ac4603128e73ed983d9470165e292950d17db5f554742f04853b01c1dad031948ebe3e3cedb149d3df50130311

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 9cf2c0a72791945e7b212011032807f3
SHA1 df41e218ab6ff6127444083e5222764569916aba
SHA256 fea828cda5d78c9fe23753dfc854376dfce773193a53dfb2c0cc04022d7b31a3
SHA512 453d633850d3df2974ad12b83fe1f109cb125eb98133170886187f9cb88b3730f0c01955bdcd831b2031c5a7ed9c268a60a5d235098cb5e8e54fc2957f599859

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352SessionDevice.cls_temp

MD5 6bae1af29667863df02b1ecc129ccc03
SHA1 1226f720dbd851d66d6e5f64c9238634885aba94
SHA256 a58ea5b79bb224f66c3a3118bcb49ef4bb432ef5a615c54313c308d421f338bc
SHA512 46a12646469639a82a4b8eb725d32cd3a4fae690fbe4b9da3241967db8823db45f0e8ae07fa5abcacf2a7e6f0676d13aa52b2897dfa9c0545569b527f5e51bc7

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 b689b860ee84ca09037f2b01e6c386f6
SHA1 3104d76f2aac211c52fc19f51ac81ecd9afe01a4
SHA256 467337a5ab42a8791d4296285edcba5cd608f075dd9d72dea800a51a1cf5f8c4
SHA512 dfc2c16409493dd8f954985e0fe4421638a3fae9a0c512b396baf2728f25b7deaa9deec0acddc121b12b4970f067b2ff965dad22d7607ee1337a8b0bb998c512

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352user.meta

MD5 5ccdc309fb531b8dbd976f27be362d95
SHA1 51fd9a8ca79ab68d11dff6a6582e7cbb7771c14a
SHA256 718bf1aa55b13315471e60d362327b973a71b0de31922d9f0f1e9b54f422dfb7
SHA512 a22ffa190c8fab023e88bb19e261d2cd1dc5b0c6a8cd8573e4b475ae006e843f523e79a5fb99a98cfecbdee774e92424564c4caa24e575caefb020d143eb34a1

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B76F9031B-0001-13CE-46FACCFB7352keys.meta

MD5 36ed467baf9a8d32a9c41ced44559587
SHA1 624f893e0862b3a8f92a9c492c31f3ab52b7d34d
SHA256 7c555291283f35d406c4064710cb14a91e93991c5a3282b6633c08d44d494bf4
SHA512 9f711eeaac2024986a5d1371dbc18efc0e702b4434996afe038e43124becb4580b6a46feb56ab5afcc88a87ad400ba11d7310222b68a98e01ff6543659a0c910

/data/data/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 d011a6c2d265e789ae611be0bb1ae7bd
SHA1 8ce46303e7749de2b01cb5bd9550832c01a6a96b
SHA256 840db52034af74e77093356c82cc47e5e3386d3583e6310b696d0185bf653125
SHA512 57dcae070e4c1cb51401a3eb2c26f70ae38fc958941c3cfc8877365e83702ac6c09dd3f577fee04b1938906d22713b5774b9926de1dd80444fe0a509a8f508e3

/data/data/com.truecaller/files/AF_INSTALLATION

MD5 55eea76b05596ad904018b005f482842
SHA1 b48759e3b683712ad760f6ef2a97f216bd90b592
SHA256 a653272098c3c3aae5275ce999fa9ef655028fb2e8b50407b6173528e4d5c2e3
SHA512 d06037ed5cdd83dc51db52fdc650f77cf8937fda41e975a88bfa8afc7b2e0a8f7b6472ddd18f683fcc04642db35c892103735c28cee84db938a6f4d07baaf659

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 c03b8c0c9fd88362b9647fa3a77b418b
SHA1 ae27df4b9e55aae7eaa6bd9bcf0eb3cddaca3574
SHA256 3290f4e240f4dd2e382272bda4c17f1752b0c80b052811333d8464b45a1eeec0
SHA512 3a958cdcadb8603623611da6128e10e03d1d09b097a6b9b7c7c92975aa6b2f0bf78c072dd3802bbf78cff2218fbff890c1919cb5a996957d6b38752959e53b5f

/data/data/com.truecaller/monitor

MD5 0185b7d920156df78aa557fca00b661e
SHA1 10fe2dbae8bbe3da19e42f156d930fc7acb056fe
SHA256 c5d26ea2829dd5bd0ade99b72c69582982ec02db95557a1179691758eb62b42a
SHA512 e735589cdd8885e77d7983a1440fa2cf3c84949caa6c918dedc245b8222e2c9514cd4264fa320bed78f4c4a337689d5c791aa4025855fbfcda6e6450a57e67ae

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 7b02187c903f8aaf3572be594a9f48f9
SHA1 cb8dbee82da8eea66148e2c51b6353560dcbedea
SHA256 b37b2efe9ac3bb8d9d297a5d30013709ab99771a0a89556e065aefabae8c2df5
SHA512 8b827672722800019d8a61fca3bb816674e40e73e901c59bf455540b9d9ac4cc03a08c09f3df4542365f578a78815f7760374cae3527964e28814b104f35198b

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite

MD5 483ce4a64e470cc6cbcf6801a45b46d7
SHA1 820b7ed4310fa3b2bb477b395dfff796784c0537
SHA256 aa5cc78b930a85d7afd12963bc06d2e96b6c92eea02c738980fc32c7cc90dfea
SHA512 3fd2c7f06deaf2b901160c5d7d4015504d5af622bd9a94e36d7cc86cbd84718f119e554d7d3432679c1e1365cac343a73e7238f49096b03663cab36979b89efe

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite

MD5 4a4bd695abda05c99249bd454c192220
SHA1 7b0fbc1d356a50b0f51e85a7203ccf4982192f79
SHA256 903e8c5fafe679e86fa4b8733d23de0eb318989999d756d81156b69313ceb6ff
SHA512 20185dc7dc9ea8f8525d647a06001e51dd09ec9720a7068c5b4a2bab65d319ec319ffd910e510ae4820a04ac487c5b95ab2422add4f1c96c8fb0f84bce0ca656

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 5fe70efd134c28f081c1bdd702a5f599
SHA1 710cd0d3c645eea1135d1b163d1b6775ee90ffad
SHA256 31c50eca55d6797ba7fc8569a0b90acff37a2be2bade438ebe8e86e9a712e85f
SHA512 b6ab486b16fbe6c6a25f8fe2c8dfad24ef00f131c541b60577690cce5159ad77af0121419a85f87c7de67af60f59e8bb9c659248f46090ba3eb1f1da2d90bd55

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 d10e8f536246bbe0ce754ab35864b566
SHA1 63ed0364f909910b49a442cd4b9a92116bfac61d
SHA256 7785f342881caaf962ca2e6655ddcb20341c294c68fd4872a5ccca193825f0e7
SHA512 9d742e169c508a136605ab8852237912ade530c3cd654bc7a3fc3768b61fe174834166ea32d6ca35df214da50ce68b53a0c57f1e63262fe7a40e51297426d5a9

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 9f7cbd94fe523c0d6ac3abb4844fc146
SHA1 57b1095c404fac9d4d5b8feadc45c801594b8399
SHA256 8427f79e760b0b743740e62307975683bbfda4577c49b450030e296db953d5b6
SHA512 1153adb18af127741417df4802445d9b8ac3db9c84b8e79513d6f2cbd2386dd71227a3f31587a29a21154d006c7bd4c609a2fa9659ec8a7ee44d5846ed88898e

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 6b4f729cddea107e2da7604255389fce
SHA1 ddc2100067a06f7a6d49712fa770e433d9e8b010
SHA256 572597a7445c11a85d99f520b3fcb69e930956cf49a0e680addfdf0905b63687
SHA512 5fd0ad0436567660f348c81d3e65f54db734ff0bb9429530fe68a355aa31feafc2c2be1de9c80b0d728bd0a7782f624d6d4851c541f00b2aac902a678940bf04

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite

MD5 69cccf12bad8455ceb0f899b33c1eef5
SHA1 5e690556285f58ab3214ba6b6a2d5868de38b1f0
SHA256 0fd243ed8becb14a204226c184ca835d23a45588673d0fb387272606f6d12eda
SHA512 9b56c66e508570ca53b18160d655b8e637bcd6dc9f47e6cbf40681624c446011e19ceb9fd4833f94b5dbfb48413d303354a0204973d7528c2628a8f328c40a8f

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 2a42591c25b2f32fc96e508f650385d1
SHA1 bd3fc11a2bfc8697c7fa1ef1309b4202ed9a3702
SHA256 10086c107de96261e64801ab0b12c34e77f490a63f2f0b5041c731609fd724aa
SHA512 8e9be30f06421151ecfab1909bba6ef809dfc274b2c10e88f553f4c6bfcbf236765f1c7ec67f123d49b9506a38fd6aadc554c72ebbde67c0b5a16cbfea1cdef1

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 3b7ac866c9930008c959d8624708e965
SHA1 44949a711b3bc431328fe63418ec4e5f803f18b6
SHA256 256d859038d8587063624feb7db6cdae15887a7b533beaec03f844210edde9a9
SHA512 f79508f82aacbf9d524d896fbba6e71ae167f52acd71faf3a39816f4a172308e37153d06306ec2d827392560006d5c869f80e60729b79fbb6d20dc0b2d2a0b94

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 a6650effaec33b2e1fde30cb30a2962d
SHA1 154ea489ac4480d71e08a5c24843d7fb9c9bc7f5
SHA256 adec55d870733c984de7a939155607988b26d6c74ad7f8257ca63deaced4e0d5
SHA512 0654b3434ba24650d0bf5d5d14d298b1f9486ff5d7a3bc4f25e9f0a378c20b74ca47afc9c9794d5adb215eb3e75597529ea970fcf8a38067667568eda1db1988

/data/data/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 5b85ab0a71697e405bdaea10136573c6
SHA1 31fedd7cb4967048998956c516a7d77aabc3789b
SHA256 0a215ec5175444ea4bb76078406fbf52af06ecb0a70ac268f02fc9d1e9a62212
SHA512 997b27307c769d267b11cb905bb30f51e9e92ba85017ad99ce86c3fea9fed84bfe7645773e4eb22fb1605ffdb943def5d9879d77aa4b046e81e607b5ff8bcadf

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 a4ac909595ae85f85a76911633ddc449
SHA1 ecad2ffda136a6f7e85036f963bbccc7efb00aee
SHA256 e85a137758c5af8c3b2b11341ced8c442b8c375af735adcc830cf2cb8cd498ac
SHA512 6a1f310fc2a1d35f7b35b748eb5902b2ec2c25c886bf5dce0837d59a7b8e3c5255fc6ffd87bfaabd5e83e0e8b6819071f916cf0547d33a5013e8eb4804823fe3

/data/data/com.truecaller/databases/truecaller.data.LogEvent.s3db-journal

MD5 a2cb7f758b4084f7afa61b4dd794fb87
SHA1 b1536400918cc88c9a29fe19c4f5a856e903444d
SHA256 21ce90275386ad633e636ade684625eacb37a06e3f24bfa2d5e355dc789045d9
SHA512 aecbc1c7a102d8035f62622aceb43f903b26a15b94c37e886f43203195f4ababee939e83c3efdd001d4c3b4833cf55d16c64c4eb164b5fe73c1d86ae1296806b

/data/data/com.truecaller/databases/truecaller.data.LogEvent.s3db-journal

MD5 01b478ef8c91301ceb8b79097b0f3b4f
SHA1 8d2088aab24f297229edc0946c25b386ac9621e9
SHA256 4298377fa5e21621fe3170d1f9bfd0480855ae29be09a85c6ac53a3e653d99e3
SHA512 3acacd23438bffece1a2a281cb296e6f8455edcf8397f0e0dff5b9aaaafe2eabcaac63bb4e02592e03ef4d9beea686972b21798e2198593b86a59bc70dc23864

/data/data/com.truecaller/databases/truecaller.data.LogEvent.s3db-journal

MD5 900498aca7a2dbd400fe165febdf192d
SHA1 8266e09310b428aedc377d3925c2e9b5ca641cbf
SHA256 dcc848a690006fcdd43f7dde12e7d2aca7216c0bcee59c1a73d37f23b4176eb5
SHA512 eb34c5e136cd17eba2fe4b1d3781099652c32b928d4e13ad3cc063378a253370a2ed40ac156cd412134775c86545a8aa01f23ec670cbf4c4bc8f9ca3b300fca3

/data/data/com.truecaller/databases/truecaller.data.LogEvent.s3db-journal

MD5 b5a69ee0a69768d966b38a0bd2b1fc46
SHA1 2943608a8b28282cca47ad84073973d8f8fa4131
SHA256 2ee22439c81c6509dc0d5ac6a867d999d7c028185910959ab6cd590e7bef1fff
SHA512 77bea45c75989fa1fb0d7ad13cd27ec68b0b5144960387aee73c8c286118c1f3bad609b31fdd482cd27dd80ec43f492bda33e958203fd8c3e1251d49d84d8753

/data/data/com.truecaller/databases/truecaller.data.LogEvent.s3db

MD5 b9a5d8f227d5ed53517430394c209700
SHA1 e430cc4becddc14c51e0c66d1b73759560bbac7f
SHA256 2c03dae3316a5b4cb4d6f2fdfc52361f28aac8a718f8bfe2b9de2f68a7ef25d3
SHA512 e4f8560aabbc5abb81f5c6b98272ce9000bb2491e57e15ea39bdf07fad9baf5d56effcbe9da5fd32bc43ab74e4fd51fbe8f3648f082ca42fe115ef72407105bb

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 e83b7295111d0b3d30d44c0b1e39d4b8
SHA1 833e96a1e447e26a0e775d4a106fc49cd5b46388
SHA256 7557a37bf2be882c88a0b1ce78e3a6391df8d4a2c3b50abb490a8e4e47b20e09
SHA512 9750ccdea502631aca7f3039f5ecae1754f53573ea420cf2517a641aebb9f84a84247f9295e712e440b144e45b02726a00852780ea2c8fc87d9134940725fb14

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 509712136ad5ad11ff05aa6c05329a44
SHA1 219f8cf83736fe121245c32ed9c70ff3252d0057
SHA256 bca88a9ba8f682a4d0adbefe2dd1c1168522da759d7f331183e789b255025288
SHA512 c92e4c5bf4067a019c0b1ad55a17806902ce11949bee5f8d4c38882673af8bd8207a78f035c733d72182b7399fa61b51157f5b07396c39c53a6bbd0aec1b4230

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 8a69ca9f86b478f83ff0d04cf5aa62a9
SHA1 ce1e39d6847dfdd3cc759d9b5508b82931eec525
SHA256 17790eb6d50b538f9ba862afbc4704332cd4e06109767ef2d9eae0797b4c2941
SHA512 d03507aad85384572fc5873ae841a6d5daca1422f1f08c6ecc89685f5e4360c1cc38ae648c73840b032d183f2c070adab4c6ea9b23e75898ba0d2f51c58ce260

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 b17f728a9e71f8a85e0e69fe4bcd6788
SHA1 bea12c9147194982ff6c82f6181ef065a7a8a6e3
SHA256 ce29d50b085f78ec0c11eda871dc19ad5a1384c9b51db5851ad99c566a4acaf3
SHA512 40eb5476a4d0526d930c6f6317fdaf6ddeb658ce72a8acc56befb8ee9bac39b301bc7547dd053fb04287e57385864f2803d1b371f814c93063795ec05f30da68

/data/data/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 a42e6d792f89a93c9f70ccb5d901f3ed
SHA1 fb6f365479aeb417abbb557cc79b3aaac80bed20
SHA256 d928eae5f18c54d282f92a625b30ab796848001262e140fd2546151fc6355c33
SHA512 921fb462428051e4ca8c278d8c144a202419cc669424a23d7f606e844284cd0b983ac90c2477dd45eee16c764b89d6bcfc9aab710d8ecc8f45f7120c2da84158

/data/data/com.truecaller/files/AFRequestCache/1718318862825

MD5 b63f0dabdbb91430f38eacc75442b802
SHA1 3f1df9c9ea908c3f3b0aa2ef0143d3c85a6ff84c
SHA256 cf0abfb5c641675ca2c68196b79f5507ea06ac84fa1ab2329b33ea4e79047676
SHA512 b402d3cc959f62bd1dfa4a564b81d5bcf375d11a799bb2b7690836afbe37c0e83bffd0bef16e34aca49cb5b7c4854278e47a8ae7451e7fce4fad8df93856f8a6

/data/data/com.truecaller/files/AppEventsLogger.persistedsessioninfo

MD5 7929d9e7b6eb5563dc7beddea60dd5c9
SHA1 c4d3039f2070152763d625ac1ef8f09a1d33db96
SHA256 2a3d8f8be5ab1f371f068dcb302e23841d0ca01877f09d0a73536e2d9c08f78c
SHA512 460e95f5291bb8452da220aa01cc60a4304e39513efe5f8a341a56704f699e256ed47e9c755a7fdc69a8d08e9abf17918cefca13917b4585cacc331d84c08171

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 22:46

Reported

2024-06-13 22:50

Platform

android-x64-arm64-20240611.1-en

Max time kernel

41s

Max time network

147s

Command Line

com.truecaller

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Reads the content of the call log.

collection
Description Indicator Process Target
URI accessed for read content://call_log/calls N/A N/A

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.truecaller

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 track.appsflyer.com udp
GB 216.137.44.95:443 track.appsflyer.com tcp
GB 216.137.44.128:443 track.appsflyer.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.137.44.111:443 track.appsflyer.com tcp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 api.appsflyer.com udp
GB 172.217.169.68:443 www.google.com tcp
GB 18.165.227.126:443 api.appsflyer.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp

Files

/data/user/0/com.truecaller/databases/tc.db-journal

MD5 1bf9d165a6a4c604b5025c7e9234b758
SHA1 4f8d90ccde765095e15ca046ebd6ad7c03893eae
SHA256 251f3240b807bff0aa4f2ea217e2c74761a0438032499e16c86f7e5c08ab4896
SHA512 2532c30679d119ab625c80fd71cb4e097f5d86828bc2b4b95763e659072652f4588cb81ea311885364b15881f409cf991b1cbe0ee154f6fd5e6649c44f963d2c

/data/user/0/com.truecaller/databases/tc.db

MD5 a5de150b45dbd3148ca479c95bf60b38
SHA1 2405003c46fe87c2417da1a111ff334c2a8ab71e
SHA256 631412947e9bf278ceee1e3d800802e971aa7475379f004af5681e706364b40e
SHA512 8556c89912b80701466a358b936e2ded89090258b2e057a0dba08ab3f780f49f54ab142a71d3d911ddfb5c0f6a0af6ffd02cf876dd0f93d741e8a1690db60adb

/data/user/0/com.truecaller/databases/tc.db-journal

MD5 a8bc287ec82ebfbdbaabbcfc0aa11dc8
SHA1 a62fd9203edb65fb40422bc0cd8993720eab53c2
SHA256 6a96c7b4eab01c07404a6d129ad6ae3719295832cbddeb11c5be19e4a0f7cdd6
SHA512 3e2e3e68a59b263c52f4e48d5f06e8193219bbfad111e3de2e9ef357aa859859d62810880a1aee5cd9f3d0ca7d5f8cb854dfd6eae54b9adbdea67a1229bdfc54

/data/user/0/com.truecaller/databases/tc.db-journal

MD5 8721fc29e3a9bee97cb96910fe248d46
SHA1 2207371856a4bb0747d8fcd0d7b49b4aac5c49c9
SHA256 e12dee19fae33057b52ef6142af0eb0090098fff0da1d5a1365f621b5dfdf118
SHA512 aef07c400bc8d6174fe12f170a89fe851d46f15db2ff3ddb0f8fc32a29d0862039004fa3e6daf7f94da3487348e5f82039ba42b54c874c56c150f905aef4c38f

/data/user/0/com.truecaller/databases/tc.db-journal

MD5 4b35739547d1b42453b3daa745d43f0c
SHA1 2b652c6b5980e0f8ef8e86b8bf1683f5446f8e77
SHA256 226cf7a7ea855f5c103c2784974fc404ab777f31a3ece78a90837372b004035b
SHA512 11d828af8544b02aa7069fd07210170a3294b793ad50868581e1b6a1a5745e06a954dbce8f16bfe2cd9683f18fafcd9b02cbf7a58ef96e048d4aa21877e7b06e

/data/user/0/com.truecaller/databases/tc.db

MD5 56bedc6b0ddaf20652b60d5408cb1479
SHA1 c028fbbc2ddfafba1033e80d97d108ba7c46a584
SHA256 06ebd187f50376134b83ac7384d7d737db236a5612b722c76addd6532962e6e5
SHA512 4617842efb1e1fb4202b907f88d96974c2f21e5a54bb1ab1758a70b7e1a2192098991b59ffea5cf9d25fa257ccfa68bc60a58b87e7e2a58937c89a921da3819f

/data/user/0/com.truecaller/databases/tc.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586BeginSession.cls_temp

MD5 24f6945ab8631a8bb6ed378e867753e8
SHA1 d8e9602f957f8e88e6e55f1dd434ed0d16155ddd
SHA256 2e8615ead0749aa54532a1c45a823dbab66b24c01b6fd4f296cb4cfb950098e6
SHA512 d43d15e58f2127085f63baefd882d825af0a14c8681b08165881768021344719f3e3706ebfbd099e866723e6fadd0431f25359c8fc1accb642a255b21d323d98

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586SessionApp.cls_temp

MD5 0e7164ca4c9363cb61d82dff49cd0a12
SHA1 73421abcf374255db2ff1f24ba0b844eb856a7fe
SHA256 36eb06b50cfd9bea0e3cab029dc791b3a7707c72d0208cc2054d4ca1b20127a4
SHA512 0fefdcf6f96685257874d7bde24bbad46eb024bce645cf4bdada935a3b0da81314d1a7441446826ca3dacbe08cc12e44fd256525a49de756abace5f5d30ec4da

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586SessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 db896262b1b6c21b83883f845e6d000d
SHA1 fe1bb39ce17e28488c62a409b56c46c5c929e616
SHA256 9a2cf299a2bf22262271804eb1ed4c3396d251ab92912f5919122c5a13a59538
SHA512 6159e8239cf245f311bd69b75f5b980c6bbdfb0479947aabf2e76dbc27e635962eba3ef0f082d9656ac1fa7825f7ea7c763eef35baff6b20434f2b781286c8a8

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bf0c83f8-b815-4541-81b9-f296fe0a0e6b_1718318868299.tap

MD5 3ce8ab263926b915322c8023ec872f47
SHA1 40dc312b149d84828c2d6c174ec84d347b53fe7c
SHA256 98d0529cd2a032fb8d942be5f329bdc2b70e1be3331e88d27d3cb89e2c51db69
SHA512 3ab07bd57e4f8974af18285a0b388ac8eab6dc1b9299a2e723b009e6f6afc92db9593724506ce89653a4e99d6b3feb018a4629a5db3fafcd43c7a546b98bad6c

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586SessionDevice.cls_temp

MD5 19b6659f601d51d472027a7c8c505962
SHA1 bf3e08d7de9e317e66b9c242cab00e7289d69c6d
SHA256 5b30509f091b59ade2180ee09e266f2ccfe09480dea796bc02590a58e45dbbed
SHA512 e7e0d01902df24a033a54d17802739714f7a0355917eef8d4a34ef52456746ce4b03ccb58e9f8c166030a92a512c05e32016ddd148735a62ea69f7c5bdb0d152

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 48bd6a143d24728c07be643ac096fe53
SHA1 6a1cc060d04c4846f9e7e19c1b221382e70dc27f
SHA256 f17b3d9a77235026e6d8645574503385336beb00fb1d0c0db7e639d2da7a96c4
SHA512 21f725ebc7908f1dbfeb711176bf3397e81f508c1c77c60a6a9428479ecc75f90e3451cc5ef6785c65149b8af7196c4cb1f5bd64c72188ed157c322f47ecb423

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 29e7bc46d9abe33d55e5b62a14fe9c4b
SHA1 35604e6c61c8e82b64fcb2928a8e0724eb762502
SHA256 9fdb70a85d8af200a537a7168ce6272000042f18d6e9506e8f6f5ddb6490a675
SHA512 c268f7cd8ee218e121ec7cb345f4ea23b5844ee87a54f65533d5ed208a877285204382a1d6a05f07e49da256e0b62ef5f35fd8b2d68cd048b0053910e82cfc1a

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 b81b6334f277458fe0118698d031b89b
SHA1 7210a68bafea086a877fa413e565c95f6c2d2378
SHA256 3ca630d90ebe6db21a306e5ada5b1509edb9229ed115bd274bc15d9087c1b058
SHA512 d4a5baf8b7b08f3bac45564294ba825812e4abb87653f3704962daf174210931657b2dab715bdf871d7268799d17aca135ee685db195c7db41ddf144c2b8ea6f

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 7855d517913661c877f7a9d9b9668e1c
SHA1 f7264f703d0d858e2a1bd465d922ff1841667a00
SHA256 3db35082b0dfd2395c5333cf7145fafa4ad5b5c6bf1a8a2c9b74bb2af652f94a
SHA512 8907f3bf055775d2bb1164b5c27115f8cad58e309075cd827863b4e9c4cbb75ddb972ef28537287496a9cb01acad296ec00ee12b83199f81b157481703716ca5

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db-journal

MD5 6b4e55edf89d2d14935c00440d08a93a
SHA1 92b280659320466eeba94b1d5ba2276879b46a14
SHA256 569427463778ebad5d65a9a31a4253af6e584da657940c57df5d8418ff3150c5
SHA512 894140c42f5b79791f6adbeb3ec57a5ceadf934fb8ebb21ed33a8558900f356ec3e91712bb5ae4ce82a6ada31e867928d45f5dc5bfdeedd836eea4e32dcf9b71

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586user.meta

MD5 5ccdc309fb531b8dbd976f27be362d95
SHA1 51fd9a8ca79ab68d11dff6a6582e7cbb7771c14a
SHA256 718bf1aa55b13315471e60d362327b973a71b0de31922d9f0f1e9b54f422dfb7
SHA512 a22ffa190c8fab023e88bb19e261d2cd1dc5b0c6a8cd8573e4b475ae006e843f523e79a5fb99a98cfecbdee774e92424564c4caa24e575caefb020d143eb34a1

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586keys.meta

MD5 90fd449bbedaf0810707836d977cc735
SHA1 26a0793cff86af127c066ff2c21b98cbfdb9d586
SHA256 8abecfa8902fa63779c48fc6a6298c06cecb867da6b7a08322ccab065ba23ee4
SHA512 2ebfa46f164833336400164a93d878e921617e977ffa9338b81a536181216df76d186804e5e42bb5b6d6546c46f382841c9bda08c3f3d9d20eab0049f13b927f

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586keys.meta

MD5 ed71c1cfae87a443dcc9b6e5a9400b6c
SHA1 9a1b6dffbf03b44fec88961da928d6cfe13edb6a
SHA256 b6d0b480dcb569682d7731f9910f82ffc8b4894bd13a1004fb15add827b74c1b
SHA512 6399745589a16f2e406bfa39155e67c998d695b8c60b59f62346d5a746ec89cf67f97eb5ef588d7c57e555c2c3cd0ea389141a6789e23ba5a179ad96078fcb0b

/data/user/0/com.truecaller/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666B77140024-0001-116D-829B4100E586keys.meta

MD5 36ed467baf9a8d32a9c41ced44559587
SHA1 624f893e0862b3a8f92a9c492c31f3ab52b7d34d
SHA256 7c555291283f35d406c4064710cb14a91e93991c5a3282b6633c08d44d494bf4
SHA512 9f711eeaac2024986a5d1371dbc18efc0e702b4434996afe038e43124becb4580b6a46feb56ab5afcc88a87ad400ba11d7310222b68a98e01ff6543659a0c910

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 82a20770ecba76c3af04a1af8a5e3ed5
SHA1 285b862082b1d15b26d257f994af32f96b7f9428
SHA256 f3245778b99c3cc53986599b928b208dfffbeb078c50e9a32fb907492a27ee93
SHA512 8a979c57a848afd6b3cd40a17178767932c979daf3fc25e54588aa3058c7e530f7032f1d80f4e54fc9219f5923a1bffe8dbab5ba9858a2bf5f78643c981f5199

/data/user/0/com.truecaller/databases/truecaller.data.Countries.s3db

MD5 b1122a25013f64d01312c3ca40b2eb79
SHA1 42993d65d3e4b746d3df9454bdc23d81ec3422ce
SHA256 ddb149ed978fc8fdfc89b5e7941104da78b37d3ca526afbacd9722e1ad8da4c4
SHA512 57d656b7f45f10f2677bcdd2c4c4e32263f7ce803dcfad53b64e0b320b3fc150eec013754ee433e89044c150c10c679e163094fbd922d88958c925e831c474df

/data/data/com.truecaller/monitor

MD5 0185b7d920156df78aa557fca00b661e
SHA1 10fe2dbae8bbe3da19e42f156d930fc7acb056fe
SHA256 c5d26ea2829dd5bd0ade99b72c69582982ec02db95557a1179691758eb62b42a
SHA512 e735589cdd8885e77d7983a1440fa2cf3c84949caa6c918dedc245b8222e2c9514cd4264fa320bed78f4c4a337689d5c791aa4025855fbfcda6e6450a57e67ae

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite

MD5 87408223c0b9420fafb55b66c62fa431
SHA1 0647b484330234c69e763f1aa45466741d168b20
SHA256 d2d48cd7a0c9eca80e43978eda6244fd0f133ab59ac9f0d5715c55533d11babf
SHA512 4125b100661f666815d1378d0e38b921cfbab52cf31a23dac50ce825e1cc35cd55d865fbb8a013bd7904e2940195ceae5a0ee8ad048344ddd86cfe5c39748172

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 3def89f1bd257e49f8bf338ed38d7031
SHA1 a80380151f85e2af595512c606d9c25460ea8501
SHA256 9c53fa003b4fd4feceff9fb3a3de1e276adb3791ecf7c7b2075e46d2e80ec885
SHA512 236b71b4d0681b53f5d9a50da3a33e5b3902b70bd1cb8957f70e18374c720e8d614358d4129b9e522efa9bbda7b5f09b75c6206df220f3d7f2b65bdb83c485ad

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 7ece7790c370737ad774775219af28a8
SHA1 2cb53535175db041eaa2fda2341e87ad5875bf08
SHA256 79e595dfcda10f14cd04fa72536d1e339e79704402ea8d39a38274d8c7c20002
SHA512 804906c8fbac99b90f201fac7937eddc9b26fa39ffa97c5aeb873b296e6687972b7cd19e5eaee72b0039f2858c01d09f8f6c6b41b5ff1de5a48e1c638622c8e1

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite

MD5 b2cbb01aa48c302a62aca3f29dd66430
SHA1 ab1efd1a3b37877fed3d76fe34a93d5663cd0232
SHA256 84e434fccaf492e2d5d03a97bd5ec857c35485af575e7f1059ad9920393afe77
SHA512 2c238b22e2e8ebf189b5f1163fe945f0cb1caf0616e06b34ed3c0b350e460153c99c9dcb327c7df3b2773aa290f1e110ac09b30c5e849df9b9cde8a5389efef1

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 9b2cbaefe17daba43d3156c851f9ddce
SHA1 8de0da658a4515bd1ffcbaf8914602fc53ca252d
SHA256 0d8c5677ab23594588e460614028ee267da72d0eddec517b40125ef621f5830b
SHA512 dec36455fdcd5976c9a0518eff87810823dc46df7d3cfb702c8c69703eea8264c5ba9b9b4757396ada2637b6a44eafb74fb73a03823cff3402698d4827b5b179

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite

MD5 f33b566e8a3aca1a1e0eaf06b5470a7e
SHA1 de20e2ca380d7230661b9eafb9576045735c62e5
SHA256 2e92540d9f3818b9432cdf765fc661cffd3c5f1a5b43ddb2a64dc9545f8c02db
SHA512 a62255c622b8b1f86b6d1ab42ab8228a1bc5b967f8d7d4339ded1fd1d51c88e497b14126854544139e011e723c1eea9ff8c69858e3822586597a49c4952295c8

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 5c13a3052c8ec49ab7d0701444521c91
SHA1 69af83d37328427b38c59bd486181dc45d98d802
SHA256 90d5646be8d54826e1d93dce023ab310bf1f3e1ecaa208085684a3028e483788
SHA512 2f2b857d38d35177adf2ddd4290ff824105c18b9c8cd4f4813b9e2c40d7a26a93d48adf91872368e677312c8482e676afb3bc6a48ee12148113144861679cd3f

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 3b083aaa91b113e4899b24f34a8c3d57
SHA1 adf818135f2a0ad77583fb33774863715109a7ba
SHA256 b7261307d6f63712061ea5eb13fc2adf3782bed5722549db8565edf00e315c72
SHA512 be7fe53687368521479fc7b86ab0122cfc9aab07525c1e7758ef3e8ad2ec99ae2ef8f6b729260ab402c1832f1667970942a9bb88bf5a54bdfb797641bb680c0c

/data/user/0/com.truecaller/files/AF_INSTALLATION

MD5 b9f9d49bc021bf5c913189a97b6ddea9
SHA1 114694fd2b821a13e42a6eb17e7103116d414e1d
SHA256 62d2a0f8b22ec4c760a85e9f2ac0f7ca4ac27a1407fe46efe17922f0aae45dbd
SHA512 61f555b5040b4eb1fc9bbbfccef086526ffe88d17f92f845a5514bafc172e720012e50910020c0561b68c803899e6081a2908bc1f8c4084c57dd1ab486cd0084

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.in-app.sqlite-journal

MD5 41fdbe45ec404c9896c1e683c0eae62f
SHA1 d0bb7abbc5dcedba0a385f333637cf1bf12cf29b
SHA256 4a45411b011f43c876b220965fc413a81a9c26ec7f5c2692f4c5f3ebf26b1a9f
SHA512 642fc9e5402a2b15a78d2d9c0d3fdae6c54084bf6a6f52eab85504a705acac4688da79c39a1bb4f576dddcde9ee6a214332112c238738d40a5489d3cc81b1281

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 b1a54fc4e63c36d6170b044fde135295
SHA1 37a8c3af46c119cf97479b037df27d25dd6cb5b5
SHA256 9e85f7127076484c92473150538f9fc031c968de741f4c73940afb3c6108f017
SHA512 8323b380f212f4c2dbaf5cb114b01abda21b506ae2b523c225a6e8930497f593e2392f0c4815f3932334b661848cc272d631c6f5e60cc6817737ab6d3c8a8d42

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.profile.sqlite-journal

MD5 a73ab3a54b3722c322adfb0c5f3abff0
SHA1 878fcf1cf2406cb3352c3f93dd8a6aae14d1a8ba
SHA256 9a902d059975aba319b98170c63f3e0b3f4ce3656d87069c535de3554657fe24
SHA512 ef764dcd9e44403916715945db49b7e44bb06127603c81a3eb43b15f4570aec5986223dbc87777f6b06daff3ea78cbdefae0ccd9920414bc2774544781b78370

/data/user/0/com.truecaller/databases/com.localytics.android.181f1741d6ee0fab451bb62a373ba689f5c47b0f71dcc82609934cd26587803a.analytics.sqlite-journal

MD5 38296903d85b0405e7c7138f43236009
SHA1 1230debbdc8f8f600decbc8d01f4365ff3645cf4
SHA256 e0160fa129eabf595bf07dd65c042dc8767222acd8ddd10d0d2a272637461114
SHA512 6810d4982ea2c7bcf6b7118aae62fd956577fa56bdca9b68dd9effaa2e1cdb476cf7d281f0e7dfdab094ace3ff729623c2727fac4451e39a2d2bf42639381f86