Malware Analysis Report

2025-01-19 08:02

Sample ID 240616-qxbpmayhpl
Target b3c986941dd9b67a3354aea38efe9ff6_JaffaCakes118
SHA256 02b9d9f9aa9336710652196f06e54d859f49510ec1ae03ad7e7c8925f41100e1
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

02b9d9f9aa9336710652196f06e54d859f49510ec1ae03ad7e7c8925f41100e1

Threat Level: Likely malicious

The file b3c986941dd9b67a3354aea38efe9ff6_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Queries information about active data network

Queries the unique device ID (IMEI, MEID, IMSI)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-16 13:38

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-16 13:37

Reported

2024-06-16 13:41

Platform

android-x86-arm-20240611.1-en

Max time kernel

178s

Max time network

131s

Command Line

com.ar.pedidosfree.restaurant.hornitopa

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.ar.pedidosfree.restaurant.hornitopa

com.ar.pedidosfree.restaurant.hornitopa:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 172.217.169.10:443 tcp

Files

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 4105bb8ca5ff4ffab8f3fe4998e84134
SHA1 4690f728ce5c6b0cfa8fb6f40e916fc689b37fbd
SHA256 a06da7a40a31b17371b62ec00b83da06e96d092b4b8e61cc0470aad48a5af4c3
SHA512 416ae83b71c6948b0886880ece732f3706e8ca926316aebf327d5624dd573715981cf7c9213864d761853bba0d76170beae7dab76d397d35c1c602885285efd9

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 30dc22d7aeaa22c4a0f6994d93740419
SHA1 9d49286fa54e7a98d87a776570befc4a9164b6c5
SHA256 6ed8ddc380b3952b2b34ffeaa005d681d3a21faaeff0453c093ea64f06cc2b3e
SHA512 96679ac20430031dd2dd7eead6d8e05730d33d33d7a5f7f2281988324cd6affe111fb06e2837567156a17b0fccbe938979bdd4361c72816ee8056dfc53b87e9d

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-wal

MD5 392d24c8ddc75a38730c0770b28c30f3
SHA1 d5af7c81f030181548f9337bcbe91a74873faaf6
SHA256 aeb1c7d6e49309e0deaed521e2992bd5529cf920126dd67397180c55d7b5b17d
SHA512 fb47ac90efcbc7fac7da0b56a9bed2091026418d5d8a9d2086ddae22bf8d088be60c4677a3a897af3bf87070410bbd642b590a16d844626027446f8a7ccc5b4f

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-wal

MD5 2c2865e2525ce9e44f252e6346e449db
SHA1 0809195e31b62ca9b862a48b3c26256572666a95
SHA256 3043c2e99d0d696651fbef4fd66a32f24ec6209838fc6d550ef0024771cdb22e
SHA512 5fd79a4a46551ffc971f6cb2b400cd3acab23f28934ed7a1f2f5dad020cac625de20e3f1002b612d3c2f473192a42b6a016c7c63af430c58dd81d89d9ba57942

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 44def4f6e42c3ec63f229d23af8c804a
SHA1 f5956d9295778b539bced03215343fd3cf7a9dd8
SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
SHA512 a14770398044635a8a8fc0d59dc95af3a97ae78146a9ace3795d600a44098a5ff7099aa3d0ac40442f8ff8c5d3b5ceecb4b360bf47f3e8c7c902879e2e76228d

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-wal

MD5 626121a5f9473bd0cc25aac00940a6ae
SHA1 89ba3c27e97d71814cc5a10df68306645307310c
SHA256 868c5dfbe45be6518bfcfed1663995963b6bdc7221452066db61581de04eae00
SHA512 3a4bd31b45e0eb7cc91b7b8890d58b0cae73248ac9e5a4bcadd320a3c1dd9be685eb4393782658f7e2c1ab4187b9c8eeb7351f91a44bb71a0167b97a30282a7b

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 2f31f86845a9dc19644aa2c5bc0ca57a
SHA1 80b057dea959a34cac319757dbe6646ceed38f30
SHA256 c9460034460f2e6a20a3afad28a4d5fa432033448b12800b2aa1e6469b1bfe7a
SHA512 016bac1683fae799ab562100fe36e7abafdf83e90efe60dd95284b055f3b56fdffb10cedaeccf227b161cdf1ab7162e51113bea409fe33cfdaae8e9c8eeefce7

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db

MD5 2a261f86e0cfbbfdca06c5e95ad2f60d
SHA1 20ccc058519567c1e6236cd07853e4602f1d1fa9
SHA256 b6907fed05e004bb858fcd35c930972de7f95d442d6e672d9ac0c8c2f26586c0
SHA512 3ac51533d1dd2d716098fc62dffca670ce28cec5f42330eea0ff61b93237524a15989fb860eaa5f2831398ebb5622e1f4713cc6126a31d973572599e0d267a1d

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 ec318004294b2c09885c2fd75e074d2c
SHA1 d89203fd2fd9aa795b3b7213679073ffe6a2fcc5
SHA256 98f31e34de157a7fad0b8d929928b8ec7a8a206b864db684ce547fc767ca7bfd
SHA512 1e3b7591a2551015b8afd6a5db6821edd9aa0039ce531d95fc9a3da07a6a8fd3c3b8b7f4f6c2accc6e2157d2b329098afb62a368a99627b68739544bf5fa73f2

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 0e8873d84657ea182135357192f549e1
SHA1 93a25c20361eb50a4eb184aab5609e39caebb829
SHA256 ce0ff0409cf765def481179da9ee61adec81443d50170fe8554aa11e20539695
SHA512 a70707a99535f890ede9d896728868f7874c56153733d0d963999184e425c3c58255e73d993f49cc9de4ad6eaec8a62487c4b3007f7cd1c692af6271e9982952

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa

MD5 a7f61538981aae11116e9956fb2bf5c6
SHA1 80b8cb7406e9f15256ee9cf8e0209e0f51bcabe2
SHA256 3d840d9f81edf292ed20e3dd44c306bf4ff4ac1ccabd8dbfdbf081134b915a9e
SHA512 28875e8ecffd5fccdcc8fc99e0110eadd33fb9fa63623ce6f8b35c808631edf0c0c2115c3062ada0d8722fbdfd29d3318dd7005d22d997929e5695bd32b9778b

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-shm

MD5 7c1b0b656c92c98fb1bc41b2ff58db16
SHA1 f7c6c1e0abe31ecaa699e5f5449c1e9563d0c1d1
SHA256 0bb0b4b71d3bb2e81b5a87d74f2c7c393fd05805ed25ed52e9f54e5e4c71799b
SHA512 348f6d9cea83e06f91d7177c8c7c9f0670a7ac4d4b4902f6839b52af1544c9778dd489ad1cf4ac4931b1af4b10fd77338da2b65c4fc486db1aa20b2564d84ee0

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-wal

MD5 d8833a84083e781e60f3c3f4942ae5d4
SHA1 a21b6ac77c108a3800d99ce24f79229ef0c8951d
SHA256 8fba095f5cc5a746132456f4b814916423959de60df17d11073d87c8438597ce
SHA512 4fad3ef80de5baf195cbccce78f04bd15a84880d4d964c02a1e7edaec2792c3aa7cad88aaf8a7dfe8a8478444d18477637956d711648304a3e76107c759251bc

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/credentials.dat

MD5 346feda8c09f237d7b819387fa225d5f
SHA1 41f2ee27bbf29e7caf6c650b856fa1e9c364bd05
SHA256 55c26d8456749ef708133452f9669488edec5f3cdbcc74b0b91f63d79812878c
SHA512 e26138328fb4ab6176dd99b4d6804974d461aa462132e8b17517f827bc196aa6b0034f1e3b1d8b7e7d15b93cc6507279df2d4abcea189ccf878dd9e261f65539

/data/data/com.ar.pedidosfree.restaurant.hornitopa/files/credentials.dat

MD5 2862241fa4772f7b1ebf6cfe4c161306
SHA1 f9f9637bfd20340913a4ea767914467142c33aa0
SHA256 3cc53f38b2769e2feff4e1bedab48c8d6ac0f4f9d976b4a202af9dc174ef822f
SHA512 f0473c92ca4a3c862e2d633b3d331bdf398472c0bf3ecfd899b66cded9be324363bbafeabb338827a366a8c8e603463fb3eb4fd9d789b036aad5d94aff58afa3

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 ebe4e3cbc93a18dd361f2731284b6e89
SHA1 05b90d2ae2ee555ec51d340c2faa94ae5f82cb4c
SHA256 99226e012c54ee94391e42bf18b60a76d02165d9bb41b41c6174908e5f543963
SHA512 c3f410eca01b9a2140789d7434adfd10b4fbc76eaa3b4acb67ad221c1139e5b282d8eae9e634f89e34eed072e1dd17491957d8408ac32f6a46f98f4f05407eab

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 d699c0d17cd23d3d270a40214d4b4f57
SHA1 9533874350334e0905c7e38ceb0c8311a90fd124
SHA256 e3de467eb457a008c8ef21a1c7cb208c4bbc0bcb7e64f7f43a90569bc3a7be69
SHA512 53fa77a33e363b58608c206c53385e1478bf67d3afbd1f47822a85b1cbb9d3e60626cb99312787d4ae58e8c6def1f8a317e423e0c72aae9cc13a99366cd71da4

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 973fe9f3099bab200ea1ede2c3ce0ca5
SHA1 889580d0bfd82d0db605d410ae8e16edf5c711f8
SHA256 b17a65fb019f3899881367518a118b38d847f8f9f8de0e034528e008b90d8292
SHA512 0e6b2ba35d4d05a38740bdf0379ce6099eb0985c4df6f6632aecf7747294906df0178d32cd2193a986005e0dc87aa568e192e371fa133e1b3684855cd1fa0b0c

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-16 13:37

Reported

2024-06-16 13:41

Platform

android-x64-20240611.1-en

Max time kernel

178s

Max time network

152s

Command Line

com.ar.pedidosfree.restaurant.hornitopa

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.ar.pedidosfree.restaurant.hornitopa

com.ar.pedidosfree.restaurant.hornitopa:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 udp
US 172.67.161.129:443 api.tridrongo.info tcp
RU 213.180.204.244:443 tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.200.14:443 tcp
GB 172.217.169.66:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.204.78:443 tcp

Files

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 0599263aaae2e924b6c8e62c03c7eb20
SHA1 c1392df658e224c38fd046166b84190f01b0682c
SHA256 5c699c1bb1a29e1d6fdd50822a89990fb743affeb8bf8884b8f32f4419dd1548
SHA512 81a57c50fcafb64b0129619cfbad9a7da5ccc062a26c097d34dcbd4ad72e8e89fb1ce103f5a75b489d276682173ab6fcfcaede2eaaf4986a86e9f707463197e9

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 997085b1487af822d2e2e92e342a806f
SHA1 1eff094663234221d82303a458e347b00304d5ee
SHA256 bd67043cfaba1db5b81011ebf486ad5ff8efc16adf867ed74a0e5692741fc12b
SHA512 d534e5770bae1a97bcb78c983baceacf777b40c95672380e0edb9ed6772dd4ba933bf5a8b2ee9f1871e082b6d0fc1f253271e670e15ffc45873128e98ebed85b

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 a447adf332f321759bb556b3b26492af
SHA1 a310bd52137b2fef3625d5f8c514ca838acaae4d
SHA256 57dd9889bfffa1c6ca3b572e64372754f1f5377e888fb7b6b1913ca4cb5f1839
SHA512 989d48f8e0c905323a99af22ecf4807bda4f3993326f5ecee2210b60abe2247f7830f7ac298fcc1a324de0036156339022da9e3746e619da02e2677d70e9ae65

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 990acbacc72f22a02240aad5d2058139
SHA1 343b2a389a9456f213957b9d5f4e01d1550eea72
SHA256 8cdc0f94551e02ccda30496a643bdce2d5186c1d5cdbe207edc3735a75778f18
SHA512 d3e75b0dfd90500a493dbe024a81ccf7878e8e455bb26c8956c921bd53ee1717f8de84759bf23e9ed6e4ae0e204c2d9b696de164770448051dba0f9d1f9ed6d9

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 096db717688c2509af1f4ab914c5199b
SHA1 d67614ee51e383fc2afb4672a761df322facf255
SHA256 33ab786e29be4a06f2b8316e5ef9152c172de919c3f5b25246d7dfec480d6e8c
SHA512 f198b040d5d820c3c192b914bca83a8ea594705376541a4fddfab28a0f7ff82d5f76d62b253c1e8d8af96d1006a94550be181ac9a8bbe0ea060cbba824830362

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 3d0fbaa526255c4f6ca5150a78a1e431
SHA1 151812571f00e034e070bc410c1811a06f1054c4
SHA256 b28fed914e22977d19ccce0b14d60c943b30b5dabd79fc615ddf25228f4f527d
SHA512 9e8c0f29cef1e4ea0562aeba83f60066e49ad0c7890d958bc7475cb03e5853a5ba442b76b1314f7cd8ad3e1c17a9fd1e1610dff02f9a8c3ebddf3958da9429c3

/data/data/com.ar.pedidosfree.restaurant.hornitopa/files/ZPkFS.log

MD5 9badf1db6add1fc12e0814f3a736a8d1
SHA1 ffcbdb09ef2a3c410a5628e858bbeb173b82f4a3
SHA256 a82aa1928615bfe04235a78e9ddc9aa7b1fc88ed6a88d69fa7306e28612ffe69
SHA512 3a3b3f4dabefb28709ad731faea1f393a926db82b01e39d3048015c8b4a63c60d40a4e0df39ce275d5698afcba7249e2278ea97250873801f18e046afd2989f4

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db

MD5 aba1cabb8889f41b2b958cc4a3aa38cd
SHA1 582facb293adc8b9cd80eb4f61daca7e37380980
SHA256 bf22aecae9cb108cb88704abc9a5bb4df979cdceacb4d69f943a6aa916ab8f22
SHA512 61848db2c34db5b6caf081c24b0ffba40e942038c96be1212e22bbbc67867904147993505e6649b30c1f8dab84f974c58b4c3d815c84c05821969aab8e420fa4

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 204e706cfee5d31f7323c88faa6140eb
SHA1 6b780194e21880870c04d0808229bb626d26e94c
SHA256 7c6d707c09df4fb4339e2f12c839723c6000b1010ab0eef8b7cfe0812489c61e
SHA512 ef169f270e021ab21349b693faab343823f2e9ba9d671b8753ff7b8f988c005afb91f3a0d9c44c1758fd0d9b6e86e1caae0536ed8760bfa6c5ec47c64bb6c131

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db-journal

MD5 3a5ca288e5f9cbf3c35d85c8dd147049
SHA1 878e30f561c7c3c6bf6ce4321713e1796e55c997
SHA256 5e73042c871bb0dcae3604b56a83f2dbc6d93647c8ea1891ae2a50e736a6da76
SHA512 46b0bd93ec07cdaf47d3cb45474fa0a1ea52247930ff82abe30b3ff1d688c022d4b721411dce3d33de512359ba51f616b40fb6e1c4e2c26ca5e852af8693f09f

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db-journal

MD5 f2aee8f8272a26f5de7dcdad5c7fa4c1
SHA1 d3efcd3d9186be47d69d8a6c85c59f82dfd9289f
SHA256 00b0e08bb048c05e250d43369fc6b6b80be89f09f12dd126929e5e19f211dc64
SHA512 fe83ad56c4cea8075edc35a3eb27db64639fe667a4529cfface6046e6d83c2c64e9ef462f96e4bfc7abb20e88da160037774d6e170e760887d89e6e7ee7bd370

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 af2e1cfe90cb662d4ac3879fdaf097eb
SHA1 b6c5b1013353a3d1977dadb06b79366173e4f3aa
SHA256 08314bccb861f449f84f903fce58651f8548a864fb5f73e75d587beb5b3c51d5
SHA512 8ba7ac8ef8b22f21b77815fa3d8324b4bd369b457bdb04fd850805cdd45af1cd3f086d54945ca0426ecf77fa57aa7837a91c2e2fcdcd474784aa00545d6e36d0

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa

MD5 c809d1532528448c62f73f2ba0b9d8f0
SHA1 4a2e86682a0a9b040135ca3eecbee37fb33295c8
SHA256 25a44c0f3870d9da0b534fa7bc7e442d3f040165c4fd5b11eff46c97de834901
SHA512 4e8952ac154fa9d90d4b7b558a66f27fc95b9f87e118bcb777d6a31173bd487cd429daa528eee0f1876f49f6405301dfc5bb2ed9f7bbde41a3ea36fb9bc8f826

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 667fe5cc8c52f638d858276ed11f2e10
SHA1 c299a9bb88dd7e4b47b8bfe810f6ba8432a494b2
SHA256 fce2e333c507d83fdac493abff0f91e8210e5b4c49edacdc3c33a4c2160c348c
SHA512 c54780cf80231643864ee4ce6f38df1988d3757111475082e85a36dc32cc24fccf4ab21dd3c7eca48f5b0e7f0ee7b08f591c121fc3cd73babe42bf70bfee9fd0

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 4d8c78ade182987c2f05834f039b61d8
SHA1 6f069e7dfc5a677ef6c3df7bf5b867b7f0f57b34
SHA256 3c6be5f629899e9505f2eeb8e52bcd71b4662f05b1c6577ea418f2416609b549
SHA512 7828cc7cd4235d0bf4b1f84a42b7118bdee526c100d8e25f2beedc1e0cd5749090bc315aa30c38bd29cc57589997acdebaecdb300ae51b4c1ec242f573d44d3c

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 b1068d7681a7d6a76f57b6c30c24e211
SHA1 cecc902d2bb8a6cdb07c6421bf6f15e8197f4647
SHA256 e9ba0fd24ec797e76f8340f249d0ba2ee14338b1df8c50cd649fd44b13834a90
SHA512 e13994282dbfe3672f95412652bbd341066ad22f63a989f16a9d16f40964d69ce998ad8d944f7c5d5437ee3e089f9a8ce8ca519dc9f33c679f49ea12cb99a7dd

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 91cdf36934861ab2f1e4ddfcf6584ccd
SHA1 00f81bf5d3422f03c5ebaa751142035d5f7883fc
SHA256 2c9c335f62f64727d0eec0774697a2e7e5be6a8c8651255b25d0578e29af58fc
SHA512 8571e828634ef88c412a45bdbcbf8d97ed447903f2af4da6cc24bbb390e6a7dcfa55b9dcaae857692256b4e7f52315c3bab387ef7712babe0fae16248da915ed

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 4bc3005f6b5ad2e27100a99859328df4
SHA1 ee7a2246c176d48c5cf985d63fb442ce1c935397
SHA256 dbefc7e080bdab5e558276b716e7d4fb8c9d74d08ac2a52479d97ad20f87fc81
SHA512 773b62c28630953b6539aee9c964b34e53540f4ffe84568548e5fcf6f9461c7454bdd7fb79c0ad8c4d5bf44506c2fa787f7cd037176c87692429fab97ea3d75d

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/credentials.dat

MD5 9bd0b96237990763fb3000966e91da37
SHA1 899835ed595e0a3454995dff60f7c0dd28f2a240
SHA256 a61ae1c5146a1a3f5ef285eab1413d4d8c4a372edc67c9c193f040a6b078b935
SHA512 9f4ab6428e9b50be4e76b9c6b9e3baac1b3cdbc06d79d3917bec1d7da6cd7383655c0bcda2e94889d9c25c29d67223a4c071bcf79145ed754d99247ebb1303d1

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 c8df98e32a29158456c24fb589b1b027
SHA1 1bd5483e657168635ebb14960b2f0fe04b811888
SHA256 f2dfe299d3c5eab9e741daf7eafe40ca427c03c35b7facb473425fecc703eab8
SHA512 2596b8ce3e7535c5616945683ccc43f2227dbef70ee76c01b6d05b4f5cf4f2d3664d23180f73cf7db0f9a184ddcac4d82fd5ccf0080350dada2f245ff3ca24d3

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 f631da864a5295a3f12ae107d79ec551
SHA1 8ad3224286abd033d8d12be9324592acdc31bfe9
SHA256 516c67fe543455a264e1ef8b6af4e98cb07bd0528cf28181162fb9f58dfa507c
SHA512 1580ec6a2a411da1c5c71a0c32fcde61eca74453fba78638a3c52e52b7748f14e1baf2c37874346fb1d14b55747006b4278d28c2bab29f478777fb58974ab481

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 073647680f215d1306b3db7a91f1aa3f
SHA1 62845519ea7694a1309bcbf5e6663175bdc81e0f
SHA256 11d48c265e670ba7fd9390f3391f5db5920ec420392ac83919b153245c03f06f
SHA512 31f5bfaa4ae3f93c7aac2877b4950f7bf5f946cdf8f2a26529968a13cd28624f68c1c9cc95720d01ddd24ec78cffc83ae8cc61b05546c39a4ab2e88d4140fd17

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 8ad3928d91cfe3fe7e1d844f209c1b85
SHA1 58fca4744df3bab0a19538e2854d50f3a09dffb8
SHA256 ba30a184dc9d6f02f4961c571d32d57925c689d46894a2532e56ff3332a533d1
SHA512 255aa1cf23282a403c2798fca39ae8d053444ece1be19a5ab38900770ba1a3856830348cb1e9e27aa01098916e29df353b42f200128ce0e613036423262a4cb0

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 3bb1f88ac42f1a0d68e7f5868cd7e1c2
SHA1 af15cdb9149f822a954bc9b5790373060cf0a524
SHA256 e1f24a43446be77cc34fb87fdaa46a1717f9b769add27a4975b849727ba19243
SHA512 e7c938ed6fbe17eba8cc3ad625d1c9c86ebdf9a62f976d781af7bcc38d9391979bff4f3efdf7d63536c3148fb81861c7c1d1964ce30cb7c4750e192afeaf370b

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 6b9953b462464cb641a9ef09e77c93f3
SHA1 72199d22cbe2fa6bd25d81e4790af378231228ec
SHA256 e5ee049c7f75ff8a9e017fe71c8ba38465ae5dfa2f90ab109a791f300f521097
SHA512 6d8eb4efa82d3b1a16941e419e5196ae0193cf76b8ec59102fdf632f9ada15a794eac3aaee98ca6764a54ac656858d9f032655cb8dc360635afb6ed6fd7c3538

/data/data/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7082f979b0fa2c18a0bd544d7cc0c2ce
SHA1 ba8fdc587e1369357ac43a58c8532d33a9bbdbaf
SHA256 4b4f3a87ae1a15f7da81514edbdb8e4987a76f293c3b9201be2235597ef257bf
SHA512 3ce7a5d031b9aeec765f023f223270f7f1a1ec8bece7e81ee809ae03f9cf8400763f98c86d3b4e6d2fc30d60d0a7a7d94833c72a8393e8bfc4334e39835eee14

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-16 13:37

Reported

2024-06-16 13:41

Platform

android-x64-arm64-20240611.1-en

Max time kernel

178s

Max time network

132s

Command Line

com.ar.pedidosfree.restaurant.hornitopa

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.ar.pedidosfree.restaurant.hornitopa

com.ar.pedidosfree.restaurant.hornitopa:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 499c06b3b2d711d98311f8826e3aee08
SHA1 5d6905b2bc357a0f8af427f60ed3dec84997efe8
SHA256 50b618491d1047684a79f88dff8fd7fec075b9272dc9296d399db4c12b4f057c
SHA512 142194e3a545d7a858559982bce66c9d09d60a1863b867dae6cf887087685cfc6f0f402723065c4a6d00908f194889449ac6b114cfbf9e5526ef7118cfcb8e50

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 2e704b571f34529f84c385a51a2a12ae
SHA1 58e53067cd8e1dd493772786be86ed701cf6d13d
SHA256 470d33132d301ea13cdb150a6e146527496c92feae48bb4047e9f59754303b54
SHA512 96aa68ba42ff8cdc95a2b74d24cb966f4f874ba9ead2d0d802fec8d6d2ed81507ea91676a737897674009390f0f050215bf9f84c911cf3c63a6c8d2f51684449

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 ecaa0ae2b2b238eaf0b82899aca735bf
SHA1 8c9be242073408908baf2883cc61dafe04b3411a
SHA256 044c9bdca47c7bd8d3151b10e449a9a99837ef32069a7e362196c32d0680c0e1
SHA512 52437bf952ed6b5f968dbb24874b424cc909834f91baa1239aec074977f637c1106e113c5cb1b0e82bf4bfbedacb33eeff4d9f94ab48d77f13510b6ac1e53790

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 72bcac1deb12d3cf7bc59530d06e62e6
SHA1 ddc5020cfa0f008a4ac03eea3536f89fe4358824
SHA256 5e0be41aeb4599b9894dfe3e77b623e886cedb51d24f10a1c9bf525dc8b1bae8
SHA512 1e72220c4e0c9349f4adbbc2d19d0b3bbbb46e14f7556f981d23c57d05d7a0b1332ffad2215a664901307083e40c6cb55d9f4e1ca60df337b5f821bd6c537a7a

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 a0c43c89f8a7a1cb773548321bb33945
SHA1 7511c34f1c10bed02a6c53aaa5f2295fd28e4029
SHA256 c0079a35f749975d26751158895ef58ac055ad5d9adc05916fa26243c69b4a15
SHA512 c3ce099d1195ab756a9f1d3ba2fd5b338a3c0be3eefbdd69d3eb26c01333c189175e8487519d783e01b162a1e08fee74afac0c06eaabd7dc2c6f816207887d74

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db-journal

MD5 5080125633a5ab531ba5218a2dd01df7
SHA1 d33a4dc356bb81898001f3468486a6330a726c8b
SHA256 541b6a84e160df525a03e21f75bcfa281ef04bedc8e9abc470717f348f837881
SHA512 b360ff620cd176aa1ffb78f7d6624395aada6743ca463159025284a1d1f841461ab302525e4909f18d42005139629bc755dfb9bccc2bfc7d85038efb410c67d4

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/files/ZPkFS.log

MD5 2a96787b4775628f7d8392f65e57fdac
SHA1 7df19801c04ef88a4c8c090627a83bdcb5df8609
SHA256 4ec98c18c705692597622eb14d89f194fae4a6cd298ceed021a43dd6060ef43a
SHA512 49aea982f284880439cc01bc5d2c2e9e31e2d8f73859756bf5f1d4f8f464694631edfe591fade11c47fdbc3a26d2f5f0d744569e9c7817a164cbdd3efdcadafd

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_client_data.db

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db

MD5 535d712147f2888e6061c1df40f7db8b
SHA1 f119d8667b75228d886af9cc5ba07bcf602fb31a
SHA256 d65c685ede75c712abb6e44cdc735ba00868c998f329f6570b04e08f5c205f62
SHA512 61aea50cf6e40d8c29a430b4e0815fabbf2afdfa8f1ca9de4120222f4428ec47b27dcf0ff9e83e584a935aecca97c58409f01e543fab28e7be854567d7ffd918

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/metrica_data.db-journal

MD5 6a94273f91c4156f03e662123b389fab
SHA1 fa05337175fb0a64d5235a9aff0edb4c7f8bc0dd
SHA256 d9cb3b503d996210796376f62d135de6b1778a744a0c2fedc3a1794dcdf4ab43
SHA512 3bb6bb5d0b368292f4f22479d7b1f37a12421fa29c6ffb65f2e9703b21bdd6ca6a6bdf1724c888123a2d27504e5a821cf054b174dc809134eaa8b7dbb2e80bc6

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 586bec8bfbbf4a1f62ac801f01807291
SHA1 a7e8f990a26ce38209973078b3191979d48536b0
SHA256 58f29b0fcf69c5074c80a02de3988b1ac3b18ea72de44af258e8f69a401afd7f
SHA512 3d4d8a0adade6c901f6cc6119122c265b5e58efd159dcfe3979e367c73f2f94e2877f8a82d2806e77fb7fbf0225b08df8da6f071f2189a2f60930f986a6c84ef

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa

MD5 47a5b4aeb96a592127ca185e0a9216d7
SHA1 2e2e96ddeb0cb2447cb74130f2b9689fe16e4a1f
SHA256 e900563b4a1d52b690ca0080d695b7397c009937f3d8d108346b8114c242b7a7
SHA512 69557184fd141648226b074cb11a2021a50236d32cfc4793513be97fd70bfb8f8d4f593f5c8902f645a9bdc61a69477141e1c6401c8aee0d5b609ff2baddde11

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 26475e0e58fc04df4656f50ba5dba4a7
SHA1 9b408eaae33d1e3b493ce222b24eaa51bb9473ec
SHA256 28274396c961cd7ebda2d7f9c0c8e7f570c08a894b7f824f61f7d5b30f1edd5e
SHA512 c0f46a34af1704fcbb7c6cf651843837bb83e45400b6223a65677ecdf5b2fa5c785b58074d068125f3057bb3062f421fe0f34d71bd5c8f49fdeb1b580e6ae32d

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 6213e7e9dc18747d57dd84630bf8b919
SHA1 4628da540b958ba995fef237c58174dc36438559
SHA256 0a1ae7ebcae4968d1f578f3ec41274f7706a3130a99210b5a3dcf5889d6e9a9a
SHA512 898d81d261009687912050dab7b87ae53b03d706181973ab40059e0eb259df1ca0fe8dd16a2ee3b0f812aaedc1d46033cb687e35f21169b9e10e008b1a6d5c52

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 06bb2f5f2c9ad2ab4c5f8662455c47dd
SHA1 fffffb097c6d1f957a219fc189b73ea06c91e124
SHA256 c64936e91517515f3820424661cbed5e45763f3a4f3aec2da2230fd84c55dbd3
SHA512 2e27f8ecf02501d3b270960ae211fbc278a76113c682e6debaef94359319532eb662d04c0468524a3b3a97786a94d7e60dcfac3df809c165be82a93fe18fe6bf

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 5853fd25a3594f4e5e8813ec351552b5
SHA1 17e860f05aa249044fea44a4dabd2a21b8a17659
SHA256 a9810be13603a3f00a9aab6569236212eaa927abd2e6cc6518973e30a36c0f01
SHA512 8deb2f1db543f1476f94fd46abf4c2b7a9ea1ea2632442cb500c9e54322d3b1825f318212d56091ddebdf7320c3c09795d22fa0e40db790b460ca0185205cf56

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa-journal

MD5 5fae68ff4b8ac1ad4360b9b4939904cf
SHA1 2977cffe27ab27aaf1c61ca2afafc89f65a6fb76
SHA256 511c04c3c98cbad8675c90aef2f50ce4b5b47b327cd8d6d0adc90205269c4a17
SHA512 5cbac2df669d89d15e0647967d67d3e89d6eeb791e701090faf51ed03ef3ab534a4b34711c326c3f3a7ef64d906ada359446c8174423b0682d7f4b82eadb1c9a

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/credentials.dat

MD5 49345527517954982a6c09179bf61412
SHA1 a67ffda007bbbb3539af14562d5ff20257527a34
SHA256 364f735dceb53a2e71f54725830b5824d98e95f5e92921624bc125456a805350
SHA512 5cb137efa791e3af1e8f0739b986a8742c39c67c3497fce6923b18cade8c5bd30aecddcfb568456f5b5f3d23787cc5d2bf8049683037ff871198d1adce742d06

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 04a7e5df3c0137af117beeef16dc7649
SHA1 94c9e2c88160a2a7fe5be6535451127b5c2dcf55
SHA256 188aec777a3a0b248e6ea07d2d5b664cfcf2eb7ce700250382e314eb36547945
SHA512 11c3b58f81812b7fb87bd9a050664ecd47a7cfb75a5eb50d151844f895b86b3f1747346202f36336d0748c69e38871afe278741b94f8c446db0be696fd0403bf

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 127be2d9304843372d331cab4dd6e147
SHA1 7d89f74bc602b3fedb51abe204962c9908a0abf5
SHA256 e5f2606b870c341ccd8f32ed97371985efb1bbfaa8150eaa6796f7895cd695a4
SHA512 ebd1941e3bfe070c4fa77a8bc0946a6d2b6f8f9114d4f62c4660e2cf8a30bb338d418efb870f8d3450f5d4fc0f2d3231d9d66c48be7430baeacc5edd04a27255

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 016f219c26967c7810ad91d886c5150d
SHA1 2138566716c27a082ec07b3f79a8f258e60209ad
SHA256 3fb04d9a2a3d173ae712aea340873221df2a12f69ff8380a78b7c5714ffabb71
SHA512 2653cbbb5e66171fc61158af3200508f3610796ab2a61bfd591b2251b0ff210b1fae94a76fdd319ac3d600a0cea3c89dfe9e0716e03f5baf7d89f789d6e7d56d

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 dbecc4f84b45c2bf7a335108335a0c0c
SHA1 22105b0f881408de77a5d92348f8a7e71c2eccfa
SHA256 79d6d39afd120aa758670ba79be708961e19b8f579dc4068bc2830e8f8e3cb38
SHA512 40a6a75f3ae19bfcaca6465b3c70eef2511fbe6ee21ecf4da5b3951cdce5633a41fe5497f6b65afce48bcc39d76697357050ccc7a4af21ce8ab34515dc02f9f5

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 0ee4794b1b6318fbc1ec61d09ae519e0
SHA1 d092a1748aa389fce73a3be2aad6e4aca8c03c1f
SHA256 400bc6d1eb9f1bb5a182ec13ba28c485c1f6d329e6494bade6dc08e6926b7cd2
SHA512 cb141fbcaf1a809ff0516c14747cf712b9bf1b5d4a5ced184d63405b1c199b96c6eea589939536914f0c2c6c4519eed2cc15a820acf0d8d53f181082edef6fe7

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 f255b040adfd3d64a45c2a8f97a16d06
SHA1 3cdc5fe7d81607bdbb4bd92e43334e33e4837b7b
SHA256 51d47ad14e7a58750fc0279dc83b610b404c7e466665fa72371ac7fb01d5c597
SHA512 c0890d504a7c4cff4d5b4d25b91a5118921086c989edd34019a6e33b7285aac66fbd88920c27c32f3efadd8bec9343dbb2f46097076d2ddbe3c3e0c92e53c2a3

/data/user/0/com.ar.pedidosfree.restaurant.hornitopa/no_backup/db_metrica_com.ar.pedidosfree.restaurant.hornitopa_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 d28a8b757e16376607b35308672f8091
SHA1 af94cd237d950e1aba3d440b4468fce62a8e6d86
SHA256 6e07b1c71df812d764db616eee5d718e162011e55220f1a62192f350ec3951d5
SHA512 fa882513f1dff806c7dff30c60fe51cba9411d8c8e9cc01e8e0c403f09fc2f2c72f42e388262dd261341e1105443a6354a04bf928f3d6d61e61070cd922b32b3