Malware Analysis Report

2024-10-19 13:10

Sample ID 240618-mt8cmszele
Target bb8600094e4351f47e99b13655390911_JaffaCakes118
SHA256 465a7e3320df58a9a604f39f286b1eed4c7086bb8a47ed60ea8a139736265772
Tags
discovery evasion impact persistence collection credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

465a7e3320df58a9a604f39f286b1eed4c7086bb8a47ed60ea8a139736265772

Threat Level: Likely malicious

The file bb8600094e4351f47e99b13655390911_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion impact persistence collection credential_access

Checks if the Android device is rooted.

Queries information about running processes on the device

Obtains sensitive information copied to the device clipboard

Requests dangerous framework permissions

Queries information about active data network

Queries the mobile country code (MCC)

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-18 10:46

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 10:46

Reported

2024-06-18 10:49

Platform

android-x86-arm-20240611.1-en

Max time kernel

6s

Max time network

137s

Command Line

com.bskyb.fbscore

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.bskyb.fbscore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 b.scorecardresearch.com udp
GB 18.165.242.4:80 b.scorecardresearch.com tcp
US 1.1.1.1:53 sc.365dm.com udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 device-api.urbanairship.com udp
US 34.128.138.27:443 device-api.urbanairship.com tcp
GB 216.58.212.202:443 tcp

Files

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 83ee1ae8dc3cefd2bec82e3c1388c5ad
SHA1 7094283f4dd1edd54332ae9447935a50089f50c9
SHA256 f46f4334dcfe4dd79620d8ca72eca52a69b13ca25e6cc9335308270e869b41b1
SHA512 910491451d64645a7f5212c1985c8eccf8b3b8b0a767a15dadce12e81eceb9f7829ccc6a9f5eff50d4680d9328ba6640053eda309fb27652634d68c8fa995344

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-wal

MD5 bd519552c48ee41d4f7a0c1be9a81450
SHA1 8b1e5a26c89716dca3ab82d3142813c15fbdc6e2
SHA256 204b480413c0f4d3f641384751521d05da41a21fe02bff88227fb28d25462234
SHA512 32a91c57ae60e111a344316624f04d408dc0fe620015be3f999cf435a38fd6753778a55b4dbc9b19eeed37be22be3d1c3a9c5bd3996db1be1e82638b55f01fcb

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659303DB-0001-1099-1F9E5FAFFEF7BeginSession.cls_temp

MD5 ff046facce574a9d7e4babd8fc4b6e6d
SHA1 db9e974e23532b6db5e943f7337e4980439e4a66
SHA256 c205764e9a023142f55673012dda5623b1fed1461a5aeb2f2952f8a582130825
SHA512 a77e7e49d9c5597d4d7f8f41eacce81bb92424ecbc27ddd313eeb0cee55b976e44bb008a69005d21106d54205940ab6a97a812b2209f0a8b1877a95f54b6e5ca

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659303DB-0001-1099-1F9E5FAFFEF7SessionApp.cls_temp

MD5 846ecbbebf838b9f1a998caf4ec308f1
SHA1 b128cfb3879f229403b9eb8641e3cdc405d4bb59
SHA256 4c7d72c8c4e19f2422e405e5115362d847b87d6297b7e9b0f863f206b50603df
SHA512 053999619767acf8bb5475244f9f76e56b68f2ade8f438f6e729b00f1665116a500ff43dd8320ca223866691860240a58ea24d2696b6579c37cf3ee642cb3be8

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659303DB-0001-1099-1F9E5FAFFEF7SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 f4813d71044099cbff2f1d080550988b
SHA1 728ee446f9e2b3e8a6ee8738ce2ff12d83a1ff6f
SHA256 3f5e549ecb8ad1925f5d7dcf542a8db096a072af9f0694b5d96540576a373476
SHA512 a161654377ec1a4ebb41638290a94ad064a3f4640dda65c5644b8c9da8657c5ee6a0406056701c97ad464211bf45e8b9ea076f37e821de265150b995494e4ee7

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-wal

MD5 edfd8c91140f64cef4e1e6f2ff0198bd
SHA1 d8c3a3a6519b3f6132a63752aed6b864e3be98f9
SHA256 f4b021b8eab1cf5a485dbe63ddd27500f41f217bf4edd2048e4061bd678c1997
SHA512 816a98e8f398d18a2c8cd76f5e640ad932f37c8ef47476531e25fe476bae2571b7ed5356f9861f3ddbc9a40ab4dee1e1aa87210f1efde8d3e668bfd36b3b486d

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 3effe4836b3701ec0f2e17079a558fb4
SHA1 19a5f63578a843527994f3a39a55982432812d5b
SHA256 764d35f3d6dd0617b3dda811157622c4e7c3b8e3d9d8e5c2677fe675f5a45e38
SHA512 4598908ca07b10bf28173a2999f72dc19a82013ebab97b488c2929e68b32858fd2eb514bf9c1cb5fdf15fdfe1a8e5aa9c7ab04a515fcd3b4ba256d7e04171da7

/data/data/com.bskyb.fbscore/databases/com.im.db

MD5 7f5f65fac24b5af49ea53b4016f4b35d
SHA1 73b3dad6abcea6585bbcd50e038a33e16f95fd32
SHA256 4240342b0052edd3fe45948dc511246295dc7b3291848d2dcfc7952d8ffa9eb3
SHA512 e5de3d2ef8d446c4087bd36dbe4d0007303bf20d5a37c0951addf456d22cbf4f6c9b0014a0212dbd85c18597e693ed2cc734cd4b9fa7fed7d5a86ba395ccc500

/data/data/com.bskyb.fbscore/databases/com.im.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.bskyb.fbscore/databases/com.im.db-wal

MD5 e581805c7c311ec40b33802bb9e218e7
SHA1 455607bec349a554d82624613e3af12e0a137f21
SHA256 1362c2a4e9894928fc58332eb839bef17e691d044eb65f374bacbb3afa81de37
SHA512 d1f858f9f0a29c156015ae85c74b48ac758e2e04c5486e263acca0c8b51bd5175e3a4bbd2fc36f3af61ceb5631c0ad0ce31974ecfe0860d1d24663c5477083b1

/data/data/com.bskyb.fbscore/databases/com.im.db-wal

MD5 526353931a97a354e6644cfeb16f50e9
SHA1 15c54cd5e1b97cc551bd15c0c8fd619709b00695
SHA256 1d5714809649b54d36a5dec33dc50b8c8cb3d397e552000a1ac05dab77098b7e
SHA512 597c8b3b54d0219facec05f626d16403380f5455c1d5e5be1f8841b78e9480f54fb6bdf7fe61f2ff9c363130abf9cadcf9952790293bd76f200d8acadda75206

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659303DB-0001-1099-1F9E5FAFFEF7SessionDevice.cls_temp

MD5 9b8608a7732ea4e678c5cc4e62e77f3d
SHA1 afa664617eff62a9386573c56de194b2e044423a
SHA256 f88368d66a4cc162ddb10cbb8f0a54ada64e0e5a72cbd6a7ededd3f361c54c97
SHA512 c9c110c08cf6aa1b2b8cf11492af040157552965395f158f5e438056258ca174408283b6cc65ed9adabae7dd51405ff5262957b3828dd0a88468e9fd93923bea

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 4551807cb02511ce69c0938a1c5a21ab
SHA1 a22a725bf8aae8c7a5203bd415c732bc079bd2af
SHA256 8988d390763c97f880e6b544645ef993bc62937db8e503e9bd90fc8cf129c076
SHA512 85ac014c8004b23e21b684c883252d6a5611e8a9ae3856eb3e28ab8e932900741c36885f570a1afef37b0fb993aa86ce101b84084b9a52c99e3a8967ead5c234

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_f43aed5e-342a-4e33-8cc6-e7c17b392c1e_1718707606362.tap

MD5 a549576686c409b29fdefbf8b271b83e
SHA1 2ef8bf7b05a105eb21b2451264763386bfdfb2f0
SHA256 61a4f4e61b6e6e73928ddd9cce220171c243b2a86749df0055f12de7c22dec33
SHA512 363dcec84dfe2162fb6094ca6e6d445e6950876c4fd82656b722283bc65d62afce746a62c667244f31c400ae3721f452a7b137d8f64c774b566056200116e336

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 be1ff190b8e96ab5d7290526d12f22a9
SHA1 2982ec4a94aa216e1e198aa6b7e2e19b627713db
SHA256 c2ae118517aeb061e21c92acdf7a7a890a254f8f16e047f2862acc72095db7a1
SHA512 7792bfd0aef16031de9b760d18bc00ce9160ba3057718c2c3180be297767f5e3dd0b7d42e67fa73b3578cf62e7965960afece5fcc022c6e20452ccae668eb0d1

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 ea70fdbdb7ad9d3f0cedb551f9cc7602
SHA1 04f89508221d773cf616b8d6917aa9bd9c6a7f6c
SHA256 bb1558da16253b8cdd5210680259d977d5de4ad342d4ed992a21c01c4717f37a
SHA512 1b798ff7edf6fd76bd03e318d22fff1f12296ad90136afd4350e97b1ccfa89d6670b89f678107682a1ea1800bd707e444cfe2f157045e8850c6bfa8b90ca508e

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-wal

MD5 cce2a01979c963c3a1ca9389ad744dba
SHA1 91542be1981f272f63808bb9da9efab8917a9d27
SHA256 b7bfefe60ee766b9039d52d1115ad4dc50deb5a1eeba89afe0cd888346ea60e2
SHA512 ad012550b9b5735bc3820c1c263d2c862149355e84cec2661bffa9634aa3abefdbe94baedf0ac8c69c760c2c4ad6eb2ce7012c4f1a547e488d76775de79c8315

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659303DB-0001-1099-1F9E5FAFFEF7SessionCrash.cls_temp

MD5 a54b873f7678f2fdf77c234a0ed788c6
SHA1 bbc04d9450fef17788fe4d4c46700d560777d16d
SHA256 52aae5777fda339ea39c7fc0b8f503f70e0fe6651e19fc746e53a08cf68d2257
SHA512 c2333b96d7c405a0eb50878bbb86226ef300bdd35faffdf0697ef363fd3f21dcc72df6cf432432b360d96e02eee2bccef461a9be3b106933e38faa93add71c06

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659702E2-0002-1099-1F9E5FAFFEF7BeginSession.cls_temp

MD5 36687a8192be9b254d493f0cc998f5fe
SHA1 f86748194fe4c6ec751fbe700a244c80ffc02a1d
SHA256 53ccb4884e144a173ca818f0fa4d824bf0cf1f08a52070b54ab67861feb9f8ce
SHA512 0e9e51b9fd9ca5f94ad91166d9b909e51022e0327c4e448a3ae5cfc931d8f346562d53dd1a56c2a9577f4307c0940d751821afb3065b2a101ff4240897029edf

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-18 10:46

Reported

2024-06-18 10:49

Platform

android-x64-20240611.1-en

Max time kernel

7s

Max time network

188s

Command Line

com.bskyb.fbscore

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.bskyb.fbscore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
GB 142.250.179.234:443 tcp
US 1.1.1.1:53 b.scorecardresearch.com udp
GB 18.165.242.110:80 b.scorecardresearch.com tcp
US 1.1.1.1:53 sc.365dm.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:80 config.inmobi.com tcp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 device-api.urbanairship.com udp
US 34.128.138.27:443 device-api.urbanairship.com tcp
GB 216.58.204.78:443 tcp
GB 142.250.200.14:443 tcp
GB 172.217.169.66:443 tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 e61c1a9e8c861999cc4ea1273623abe5
SHA1 80ce12bfbe5eda9f373c607db06c23cc5357ce92
SHA256 980b5d7e2aa27436249c34c2636c4ae03a7ccf8a00676a8775f2d9a98d13b108
SHA512 c8509b91cbb085cc419cb4b5b536b80118f60f61a78490d545b003f64b41c282f36918a93dcd7d6eb5c4c9ef3f9c8cc6eddebc8c6712a0dcf1eb79589ab92972

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db

MD5 992e42a9bb1158a55db3c99b158962b9
SHA1 5f5a7220373aac7ec53e6ea1d7d6b2cf8302cd75
SHA256 43f53a2f421e58750646dcdb91f584ab6d7f26b65614761a1de527789d2a4229
SHA512 76315d890e3a0ad95630927ca8e38cf407e7786c729632a00b88d863d15fbd6c682df39a1e68d98d3f7d25b59358109375aff3043b7194a51e6147b064958095

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 d5bbfa811c03cda0b522718dd625570a
SHA1 791a3648ec45a177fc3e48879f0a789631a03e80
SHA256 ecbf35b8a1babbbd5df06f7f54cea07ef08f0ce338707d8827347beff1b77d3a
SHA512 80bbe0a86229411a1afbea613b3b2408e697592861226851cedcba481e01d7e5dd0a528df7b69d75eee3237dbc81dd40c688338e6c56b6b8b003b9400c6edbb7

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 9dcc39dbcfbd086e04da8c177ef5fff2
SHA1 aef1ce0bafc4afe951a045a79f40a39fb5371c2e
SHA256 538fa6b95de0f625aaf5a54b07c63ccad6974e1f6b325fe5b122d76f50ff11f4
SHA512 7c8a7f9c2d33627476d208815e748d73da58477933dc7e1ab4c71286272f5ecf9aad1e4e5e9abd693ce008578f4eee9c64eb5bd0b5a28b39288c8756111b5166

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 8d28d3f0fd1ac06854afaaf1d53e2f43
SHA1 7e1e1670ef26a82732b256789da1b97b7024af66
SHA256 9b92eb5a0b98431ace8b4a1b9b9fa399eaece5b8072487994ecd5bc366c64595
SHA512 aec5c5d05a888d908263d81b6cd58e80b58c050db16eb3785ed7f3c5abfc1a8ca2b0f31eb16b358abc163f1d2bb40980da09b122d85ebe43ce8e5ceafb227560

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db

MD5 190c606a1b988f1ec764e9b20819b8ab
SHA1 8d52efb58d3666f9386d936d5a072d2d55f046eb
SHA256 0ff3f05f72c1976dff4b65e4ced9315f4d2427ee4ae89f02c0239da550cc706e
SHA512 8395e2805944a89ff2144be0e3acc88f4d443d92fae9489d2bafe9dd5e0cd5392de6dbe2c589f317470912316857513fc9087b566a1491d71563ef4ca8a77d0e

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 77ce36dbb35c98975ef102d4850183c5
SHA1 551b71f664d18a85649863368b92ffa2829e5b5b
SHA256 d8014f3d10e2c6c0b27a1afc73fe8b3d09bd958c0ad644ef85b7491da790ba57
SHA512 dcd7831cab52fbb9c7f4fa37e67e7f4cd33f6971a1b33e7608c5fd3c97b35cd82700aadea0fb23d2b1c9fde9fb22c3b0befa48e617ae13776fa44347a20268db

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 95623e460356822d7045bc10e1fd3dcd
SHA1 f66269b531e0d59bd95c1a7f1514fcf7dc86e995
SHA256 260855c8f69c919f15831d148370060427b5970ac4931937d1eaf7ab965501d7
SHA512 5ff47357a4f544f2a9a058e2349a9db98e3524ac1d23762f2e972bd41835d5b8dabe3ca0ccf69d580236fb94bb2a423c9bd4133dc0e7f77123453499622a3f1c

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 7914bb045a56db9f26de3143f921fde3
SHA1 074b98f01d0e4439008e6b5da457b9c2bee9dbbd
SHA256 941fb0f3798dcbc03772fa6454887051c5b3ae32e0890dcc20e5c9546fd07fb5
SHA512 1927b353347a2f0919cb595601e733c76c909c9fa3340c576c63a89f049236332bdb829d153593c5d6742f950c548b70071731896a892ab06e6fba55b908e735

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6BeginSession.cls_temp

MD5 098bce807716460b8d8c601b8aa6938b
SHA1 eb05b25c14fbc945970c2346a83799a988031e02
SHA256 2546eadf87dbdecc65653d115bbd1a815efe7e8eefee469d79bfc42a4821b06e
SHA512 c6c78e4c80ee265950c5498f02e6c0d6fba26938804289c99eaa8534d095d63cf9c9cb91fb477e2e7112f7123c9c4d0cea3212bad5e91390834e97265c80b107

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionApp.cls_temp

MD5 a0ad38b8f441182dd7e996c620dbc933
SHA1 cc7171d2a3acc27e6c63636f23cc454cd1fcc4e8
SHA256 d92089bdcabad37e5065a10e392d8be242a07ebc26cf15339d2747be0a172152
SHA512 2d7435aa6e5cd03864e81c3a93a535638449a1ab1f04b9104dfdea487a9329d5f10536555a4e31cd5c3d70146dfa441ebb43e989904d0ae184f7afa7b9b467eb

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionOS.cls_temp

MD5 2566d27ce8c28d8961f082c375d7535e
SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 07ae9952ba772a106830605585b5a27f
SHA1 4abbb333a8e8e27bbccc1bda3c2cb2d515bc6d07
SHA256 b8d3470c5d8d51422c3d26c4b502563fb4abd696381167e9ca2e0fb1b56c1c63
SHA512 ec76ba51d5b5c2ee0801edb1c1d6a6b9aa28c7e9d513f0b5aaf1169c69e07e060e5e42c1fcae771b674a245e9a7ac707d77d57033eb96d60561f00d0f90d9718

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 ca4fd4b5ab95505cd43d89f56d677d90
SHA1 e7735cff86fe35940e794f3074753ca76111dc68
SHA256 9bd89e51e54649e439173032b230d6e5b257d954295ef4177bd69d228637fbf8
SHA512 edb164c7979b9e777fc20bc80fff2e788d8d683b1a154f188e31451684bcf2f145093c4b874d2ad9db715dd36ed8a153aeef42b9eda1b7017d142bb4bbf4bef9

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 b60ccb5f52196d596a1fb05aaa545a07
SHA1 e2eb51cc247d4cb4cea5fbdbd15bd25f20522d82
SHA256 a350a0b55778d0815ee3aa1d6ace6f2f1a725735f5865aec2b084d2ae194bc9b
SHA512 754dcc848850edab9829b250d283ca242595abfc4926553fad40124c79d4a617a86a7c2d14ccb7fb32ad9467aa20464472ca152cf471483c6335eb4b0e6aef00

/data/data/com.bskyb.fbscore/databases/com.im.db

MD5 8676cbe8b2219545b7463e8017fd6a9e
SHA1 2b5e067e98e62fd9890fca45548277b0b5b7c45e
SHA256 38ac27905e804f4db7a03ff4b9eb1ccea066df0289e7f2fe455e66a1ae08f0d8
SHA512 5bdd13c903483f4341404d4806b0bc7d89bbf5ea1cc38d04a31b9a4331038d380cf98295592e03d6a12ebf5c12d8d5e127a689dc7fc17a908dbba3dc41c695eb

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 b52d6005dd54201fb2805592bb46e4b2
SHA1 64a900cd8251055ef17640a0de696c86d5db363e
SHA256 428f3be00d4687578b51b6f31af171f8c0c91a3da5ff11f72495322da6e9cd0f
SHA512 c42f3cc04f5f9c7dc2b0aa415d14511ca87167869c4429bddc6945b13eb9b2a7b4d45ecce91eb1409ea2244a4c97c15b3325482f0046ea07d477910e2672d37b

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 55a40ead698fd4ed301ada162bf557a5
SHA1 b571539a13a44a1ee04ec29b1a4aa7db2f66fb9a
SHA256 71c4a0f023574a2b8e9834f4c78e4edca04a75fd70c549c001027c4b45309f6a
SHA512 fe492e0826275f8db9e39c27368c9f5792007bc185834260a38da461789ef841f28af05917e028936eeb2d394d5791dddaf1db090e0767e7db986d385c51209d

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 fa3ca18caf513deed2b72a1cd56ef9aa
SHA1 23075739242dbc80717b8e630451c26875ffb77b
SHA256 45f7016afcb8284bf33aff883bbd5896db389898a7e39a6d454c1f793c040a8a
SHA512 1db51a8692c625e5492dd4efe7989474c1e06c39e6c3e050d34e9bd330d5a4353fe750c6e609f45926e06b6b579763323cfd8dd81b2f16083384eb5a5b5551fe

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 4666418725aa040a410e4cdfd1c2ae48
SHA1 320672fbaffa69c3be7d6076cec63bc40f71c44b
SHA256 33985b61815f1395c3bd2941961bb83648dd8fa6c8a9900ab16a5c25ecc34efe
SHA512 f65e7fda85003132d3803ca78cc8039767d17e8a9317c832b808c3d8ab8c27c7d963942bcfb934c810d3d432350e21da284d7c4cc07100f50ec5a49462a37ba4

/data/data/com.bskyb.fbscore/databases/com.im.db

MD5 a9ed6da4b2bbeccfad6afd39d7c5596c
SHA1 ae5f00d94aa8bc1743e7bd7bab3bd46fd5184a1c
SHA256 a00329b3ff8961dcb5e96928069324613007fae65ca7e8bad2383f1d0490e9d6
SHA512 afd2ef79182d8b450b49fe4016c30134f52a58e53527249ab4daaf90fc8ae27f767ea27a9d4b19b6d6c076daaab24039841807b894ac5b6aec1ad0b8b8636958

/data/data/com.bskyb.fbscore/databases/com.im.db-journal

MD5 9c93e5cb23074c27d4b9392a28c1cd14
SHA1 cac5178e4c1c9292e01e623e3a48632958949c4d
SHA256 73034bde8b669ccfff7b45316c1a75754a147ce56f3475df41b15f490bab676d
SHA512 8ed40a59def7c99fb5609d45a6ca05cf3c54ad068241f0ece455e9aae93c796fb8cc2a23d907a63b928e17bee1d989422eb23e7069b6df31d5a35e99bd457515

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionDevice.cls_temp

MD5 bf500d7770545e014de946ea4ea2823f
SHA1 35800c6bf2dd896522362f3914e8f2907b04e4d6
SHA256 a9ec4ffd42febcebf486c66036f5cdd96ddc70e1a14094f861ac59d00d71bf9d
SHA512 fc9ffe9474f740287a871b2c22becbfa473d6ea02755fd441af2767db6a50d048df193e0723c184a4d4fa9af79d7b03f847eabd438f6298d7de31637c47a39f1

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 38f64dfe7921ec557371c6c42781086d
SHA1 06adf669248c06dfe83144a18b65aa1521797748
SHA256 e1c3ab30d1a98e159f47509ab64b4adcc1ff699994dd02f1244a08a75d5c943e
SHA512 2f011c88839238dc829a1e0be907c21b88cb069db2512dcc69cb3c5d961063380a635c977df7c2ed5f816063bb09ce8a97878607d35e3492f69b1358396a916d

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_5c893900-da88-4713-bfae-5b357aa40fea_1718707605852.tap

MD5 2c767c8952f6d8e0125678e90c1c67fc
SHA1 386f0afaaf57a4ac1c5d1335c5f3612c5b24b87b
SHA256 a841456ef24691d5983ab59c84f404764cab880fae3ad2275f0e7462fe9ff8c5
SHA512 299c2eb3a30a82755e180fc40d83a1446f77f03320cf67b0eb9e4fa81e48beae873e0f88ca956e65a3cba9af13041a8aa1c529dd30bb2564ec58963aaa84cb54

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 c2ae33d3dc8ce54e986a4bd1dd58d693
SHA1 8aaf38638f0e237e58db6ce4c06f4849d3895d69
SHA256 efc2bbfb4b8c8f15a7a5ad64f4e5faf5105764e790709d614deed8ea6a2a4c10
SHA512 27414bd6c011cd1715ef14f89d0dd2be32d36266b9a2a46a881154ec607e5cf22925e9701252615a3d9ab2a98ba600cc95d0cb02b6b48522c399175cbcb380dd

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 0a1ed091e769ca4fdaa17bb016c15fe1
SHA1 c109dbcc684ecd495342a0044d477ae3bfc3f9a4
SHA256 ca51409b82d73ea9cb7b769413c635faf1da9abe802253ae0a00922d1675dd5b
SHA512 e10bf2fc8ce5c6a5807b6796a2814ead57046bba5db1543e71e209eb28e889e96bd81b439f4aee3315e23327a7abac0a8d400e1e8458eadddab97aa8a13b296d

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db

MD5 a2499afad2e2e6c3d3ce1a81cf53b1b4
SHA1 232c600f75cb45213addb759e8db0f0edaf13bb8
SHA256 43031296313da7805ac71ffee633a1d0eb9c961865375a5d11e5dbf331feccfe
SHA512 1f31c655b9262a740dd788d97e9b9477e460cb3da03008efda1ecb3db6357094cddcfdbb36b0e452e614da5b2f6b74e848493ab870c6ed35f6e9e7c900262917

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 fe2beba7a1d5ff5beac4900a8f077803
SHA1 1bf5f469a6d5a7a4c16ddc9d8db31bb5affaad95
SHA256 4fc000959e576b2006b438d498759c5033683272a071f923674bbef271d18d13
SHA512 6c0cb92674ae8623a9f81dc5ad4c5c0a7462130c4e27da6f51839a77780be49e6af6c801ed19f8fe77da1ee3f2d9f910315ae511986936bf28a557415ff67082

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 1f4c214e5aca2abcc6ec81dcea4c9255
SHA1 e7df621ab53423ae4e04984c3d030256ecafa29a
SHA256 d390bdedeb21e8fbbbb1463f99c0a53dd749f3c3ef8986fe4482681f46aa5601
SHA512 c4e48994dadf63af9fb6dcf4900225db51a12c7553e5520d014dbbb0d1f2bdfecd2d2815a37aaf925d1a85729c6c8a51120c52d967020ab3e792a2c038604e1e

/data/data/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 a56350f525b32ec4a3bac9eab4106766
SHA1 e73251bde2845b8c78ce1bd35876d0f07ec250da
SHA256 0cc653539c0d67328ea9d9f1632ddd4b2d929b7f7915e9941c30a12285b745ae
SHA512 d0ffe11c67d62e859c3ea3c21134adb494621fdeac89145f92fa6042b6b28508890304366bbcf6c25702a25d710ba30b2a3eb463a815b286e7ae785c0971d941

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716593023D-0001-1449-0BADEBAE29B6SessionCrash.cls_temp

MD5 a6b0e60dffa0b0886daee8a22fa5fc0e
SHA1 7c24e5081c05c7bf399cf6f83f3d367d2aad84a4
SHA256 97663cf6bc9058f9b5f7696fe49e2a16696eb6dedb5b25c5edafe1e2f1861f66
SHA512 b5e9a973c82fcc68a54276a174c6a14df9ec92562e429138282e61648e1e4c8effb7e7486fd933978fab9c8dcd8e1aaf81530c11266f0a46465786922748adad

/data/data/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66716598006F-0002-1449-0BADEBAE29B6BeginSession.cls_temp

MD5 8085854290f0106c2ae0670e8f072b21
SHA1 3dcd645816303dd46bb4deaef1c6bb2e5448e6e4
SHA256 18a40aea085c5417ca99f9c6e68816c39e6eb50485f369a750c9d8818d4abe99
SHA512 5c7870c6895a24936f5e7bffb9fdaf527acca376fa2b1242b225b956139f52c5c857d8d53a5c6216a643b11b18394840458b3c15abf711395b42dd2a97891970

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-18 10:46

Reported

2024-06-18 10:49

Platform

android-x64-arm64-20240611.1-en

Max time kernel

7s

Max time network

132s

Command Line

com.bskyb.fbscore

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.bskyb.fbscore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 tcp
GB 142.250.200.10:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 b.scorecardresearch.com udp
GB 18.154.84.16:80 b.scorecardresearch.com tcp
US 1.1.1.1:53 sc.365dm.com udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:80 config.inmobi.com tcp
US 1.1.1.1:53 device-api.urbanairship.com udp
US 34.128.138.27:443 device-api.urbanairship.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 0b3913ef168ffb9e61f43517398ee28a
SHA1 3eda8d59ec46925236154c5042585f9e16116406
SHA256 dff43e8f173964020959416113c3f27ac70eef30ac6ecdc85f907d2eeed06f51
SHA512 fc95f1a5a022b189a894dd8a2d68dc9b81faaecccc48f0b76ee630a97b6a4274e63a0bc2aee522dff06a764cc0d28e4dac61c28a677f6952f4f8897d8c75b6dd

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db

MD5 d5accd29cd78dd45976b6cc79cc0cf4b
SHA1 a260ae57155d879812ae7bb9637285bd120638d3
SHA256 0613c1057238c79251c87da8248793374ea92d94ba1b9149f472ec32fbe47497
SHA512 4d32eae98fd2b001e73498a0b461fe799f1b37bb6b7c6d58c01925b7945e22dfece0c4ecbadae39dfb9782237bb6ed1c6bd4ff170ca5f3ca234b56e61e614c95

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 26b30a5064ef215a69dbe3fb7b64c6aa
SHA1 bf8a63860346a9a9ec3090b83c63ac5c3e5b8db5
SHA256 d341c2f89ee782232059e9243bda7697f130791c6c1bd86574bf70c06fae933c
SHA512 e9e8b5bd3c984dad2a3233d1c3eb6553dd2124bad532101dcac6f85f4166731a8619d36560f21d169dfc863b792b397d7d51f06a9aa787a4280f3e97dddeef3e

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 443f9e0d2b909c472a3786eec1f97333
SHA1 547e70f759c6e919e03aafe0b944522db32bf818
SHA256 3fec8d5ca9ef5ccc06097eae6da83e916ddcc1a626121ee75e82f9cbb8e13011
SHA512 b6b4e172c19770f644c4691add47af65ed6cdc405d3d45cdee8e30fd1db9010c16ae066387d8e40911ab34c5bf591e1d3bc6e6ddc7275d131c3b2b07efd74d7a

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 9eea612b5bca2b7c7d72afb0c18b68f2
SHA1 cfea0669e3a3a024b63fda4e37f4a1eeb39208f6
SHA256 ca1628c5546a654566075365bd3b6fd355809a43ee6fe9f2c21214d576c02807
SHA512 8fd9845eec65e0139abe338f233edf30ef1c8a2acc3a03a4780b991fd06ba6310c4e1e529971769e307004744e4b74ef8fd5eee99fd8e18b7b523a7f4f4ecd9e

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 cbbe7be6383a9da4d13577407c5e3e88
SHA1 9b0bb41612141ec1131fff8f8746975d4352d612
SHA256 73e4f59ef856b731631cf5f7ae3e8ec9117a0dd8800de1524b0e498a251122b4
SHA512 504284ca1559d86161781a3cc1b3b570fdfce86bacd010e0a5389eece9c1fd7ae5b0a9c819bfd19ece2c94134d2050dbad5d9fd8133b6151ce3ad286911008d4

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db

MD5 e6e84636c930e90f94cb9877976b4293
SHA1 4ff0ed151051794bb6fdee277c2b1d9c9ab969df
SHA256 1e4d6c791a2582c72af50d75f60ede656580322f5c83e99436687d088f70fcd7
SHA512 23c197e000d456ad23fe235e8f4319091512167107b4d0f8df4eaa2d18a9180925212c2419dabb856884b49fec870a7b7ac29afd34d93898d0e95043498b3042

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 575ecccffaff9b534265478a5ea7d1dc
SHA1 88692dadb7f3bd69ee9b79cb98e764636fa1ee64
SHA256 70eb6163050ced18d0b9e1e803d978c5f64fe37352582ddb07ae7f8f864dbf70
SHA512 8f7ddd67c44ef10fe7c649d691c1dfac18665ec4e4e040e797dbd5dc4380564a4839c8388d6bbf788883c84d2cfe6f2811acc83903fc81696f4c93b011ab18ce

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FBeginSession.cls_temp

MD5 f210a69714de9ba9bc4775614122a653
SHA1 520153bfd8567675d14168c7741aa1d900b0d963
SHA256 e3acb2e2c656e0f44cc0682394e0767af392027ea9ba6145ffba9bea45a23c8a
SHA512 3803d3657f5f8612440c9011dcbd908ed961601d785720b7958844222172bb0a09f89abf9bd2eaffd9455de39660ae8b0697899c8289a7c927577cf6fd8f775e

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_richpush.db-journal

MD5 4259da9c839553082ba22db29ec93780
SHA1 4916727f6ddc570bce6df7e49cb4ba6e5cbaf965
SHA256 634ad9a2c2a03de6eff9699c3e57a9834cf56a9479356a2669cb345ccacb93bf
SHA512 b72d6d06fa224f35ef76ebc6aeae57acd9490b7aa3eba01d1a8e0a8d7ec8500fc291da8bc4ee0a6efe37108ce9f3f5f169852b635d3228e1920852207a6a4129

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionApp.cls_temp

MD5 99078ed2cdd6dcee6852b4ec192da72b
SHA1 612e846afff75fd005e6ea246a58038b13fda71c
SHA256 fe9f754ed737bc4f5314b851129f05a6a65df505925fb009cbf97718ceff875e
SHA512 fc009d6070363ddf22c2e79a1e157278821dcba2ce8ebf3e713bfeb14eae592d669bd9a229616cf7a949a728b194be15cc9689f74be73c11e35aaa193d773ba7

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 854f2ccaf7641f8d9a33b2d6d5657bb9
SHA1 0f5bd54ddf1fd040429cdb666dd97068bd4453e7
SHA256 f2d3e3b17da3ce826c09b4557f8b06d3380a3f6ee7c7677af6d57b916cea7468
SHA512 a8ccfa4f7338f907df5270f966e7904792dcd9af77aff66be176038e11f9ade720630621ddf5fa30ea0d62fa29a80e59feed024d21289d2cb141b4edd8df18e2

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_preferences.db-journal

MD5 185e639e516f7ac6d18ae4327ed9ce2a
SHA1 52f8658d5e7694b5bf9b89a1a147f84c7418f4eb
SHA256 d95663251dfd7ee81cd8c5505973cc0d639b978b2dcb49cec8978e0e7c002d41
SHA512 6cb02b1571d655dae0fb80d5beff153ef6c7e684f273a7ecac62fc26c81d634ca140b50897218c0238e4818be799d3872e39d5a9cb0fb9712abbd83e1007d38a

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 95145f3e855771aa3c1ecff5aa34eb49
SHA1 433f1899ab566a6579b15a3d56c7ccf06c73117b
SHA256 c8807aa5eb7e46e2753da6ff8f64019676cee7dbcec17473c88fc5764f8f6f62
SHA512 a88c005c850469ed931f13dd729e1e07f975a124428a5cf385b303da14925da629475238a7a8ca5fa54fc4bdcc9167826eeea095dd5947a0ad736931ff382a90

/data/user/0/com.bskyb.fbscore/databases/com.im.db

MD5 283220cbe5e9b6e475e93ebba11ef75f
SHA1 ea77df71f4e4c2ba960947e192e0ddeda5a48b84
SHA256 c01f6ccb167217afe0b8fb282bb78c8c8980a75f758bcd55edc5d2cf7658ac5b
SHA512 e8277914047d050d7813368d72a3a7b800920b5b1ce2d28071a1ea37691ea55c259ffcad9419efbae26989956ce1df0840895640a44d357563f5210d3cc134a1

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 4a20572096a0e1b25df5f207b6feea6c
SHA1 b2a4cf129b0e8958ca81844bc905082a23909d9c
SHA256 d416964d3940a1c85dee206af5ebdbbb11efca38dd32878faa7415b6eef0dba4
SHA512 e1c8ecb148fb479b4aeca2001bc6077e3f4bde3f2bd3bc229c7228ff5b54bc645abd130f4c8040fa31f0a495c283a54a10c2c750c17cf0a13d32412f3fd61dd2

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 74ffdb4f3b4da474aec19bfb9d91c018
SHA1 707a1b9f2d6e40ebcbd21e127217c6e383811517
SHA256 0b65776df3f45e9a8d5fbedca258383683d01548caf54e3cab7ffa1970396cf6
SHA512 1ab8d49a5fcdf64cf068edb9fb1a9c23472a8134aaf234f133af66f15ce5771cdd21babe99fe71f63564342b3cd49a7c15990a4bd9f02a7d55673e7fed805fdc

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 289c6fba63d1845a3807346575803340
SHA1 024e08150cdaddda813aba679d3aefebe1bf4ce1
SHA256 00a0918f53b0d1070912f1130eae0eb926256e61983ad9f1330ea5380a73c030
SHA512 f78ca49917472ace82e2eab7990322f6a228a03caba37839083ae3750cff30898c106531d8028fb23272dd1149374db6fc17a54692e334a4d8ef18940bd07bfd

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 c9cfd4612e7bedbbb16715e87976fd49
SHA1 ffc3d4e320f6dab5a9705469453a54772813f53c
SHA256 fa3e8f4cdaac579cd50ed0711512d263525564730ba2aa37199ee06db997fa18
SHA512 847c1d2ae6dbe0e9c493cb8b16e7d05115d1b447e4e0b8135373d1ae6034448037a0b5b22b3cc9b32b410fb93ac64c2db8f1ee008997645583623824edbe7078

/data/user/0/com.bskyb.fbscore/databases/com.im.db

MD5 876f86564ca48477d3bd0ca28de63986
SHA1 1e841c92cd948c397cb29ee0746d694eac3cc7a3
SHA256 f55a71938a6d87d8318bf94207cbb04fdd3ac9fc9d9de70851cfbff946eacc76
SHA512 3eee47221a49c609e2a9566625faf309e3ba5ca434d554808498f146e166ac0fa3972464492037a684ec6d51c90aadbd0820f93119cc1a7c1793ba9a2a95ebaf

/data/user/0/com.bskyb.fbscore/databases/com.im.db-journal

MD5 73ed03e25358b95b79cb8bf0f8675db5
SHA1 bde248976d214a03208bbad51e0a16cfc5c90efa
SHA256 ebd2988b12c99c0e37ca660dcb089ccbcc34e17353d350bcdc6ff7deed544e04
SHA512 95244feeb208cc0177bf58aa1a61688f18f2db1ab77083e96ab533e199043e222305642c39ce1f13382afad88755d2570e87e655292ab7e510cc71d538e57424

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 92622697e832d1b7a50a926a15c5a501
SHA1 a51bfb4fe9269ba478c6bd59029d7fde9926ae32
SHA256 f97791c4aa1d2dd339cabe8ca5fb5231823045cf9b4cd2c5f708a76f065113df
SHA512 ef6ff667bcafb9c97add43f95b4121175341d84f579da0020b8e92905709214a22732a031f61ee29a3a8d3ec438ab1e61dfd28b98738e28e0076b154fa6af0af

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionDevice.cls_temp

MD5 49da58d11dee111985ffb9b16679cd42
SHA1 c0da96aa50bdfd96777a1ba9ee24693ea7e2c81c
SHA256 78563b6db7ca6b69a71403c19033c5fd13a2096bf935ad5a90749dd204fb5363
SHA512 51ac1b28897d52aef1b6cbee909330a6fab10ccda03b5a6dede46527d9208a964b37642b3b449a436989e80b1ae005606e584f79a9e718afb2df47c183c713ce

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b468870f-2d78-4fdc-92ca-1eb2abd23ac5_1718707609279.tap

MD5 8f2bd401198ec9ba729571ffe4b2ddda
SHA1 fd07d640193ec70ec38cc0bb4609e255de9afe31
SHA256 b2c55753c74e6d39fe56ced687aa96840efc18eebb08630f93106fa11af88a3f
SHA512 8f8303880c4bfc22809f885287b4207f743db76976541a5e7b51776b0e300a46a158c87c693a21f00a2ea128d17190140a213ef127234a43ba8d8c591cc037ea

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 bbffd526fcec6fdcea0bb19183b9a43f
SHA1 0445b48db7eacae7586b6dcd3c9ff8864e4c567f
SHA256 baf41b02cb949d20a32f4e1d40074f760d2ed50a15a5cbd8ec0a24423372a839
SHA512 abb0f900dacbaf74ae2a5097a1f8fda339b8f573aeae8cb95887e12df20ee237ee0dcef907c05231883a42b1daa8f321e2f5730fe6a59ce507f1174d7632a9df

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 7adfd74a1051456b50852ddff93678bf
SHA1 f370d3a510e19e3da00dff8d4e38c2d36a47eafd
SHA256 d3f94acf1dd3be100b5012300b5824ceded03fba7cbf04c32c6db544fdd2a7ca
SHA512 b75182b9593a32b7dfe2bb7c2f9fb1d3922aff50dad0b766aa69fbc0f57a5677cce2e74bb4ecfa7c3a923105977b790049c11ee123745234e5f8738b82cedabd

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db

MD5 d9d4acd80172e2482d55518cc011c063
SHA1 5cd2f4b3703fd6789151e8f0816089c3a99ee7b5
SHA256 fc4d8bed112698902489fd53e17f6aacbb08882fe827e8386ec79b80bf7e6916
SHA512 9ed281ecd85c931053a526db5b02ee22745040eedb6bdc0e180e54006825a3b26afbf8b9a57daf617811d0482a44d324fb70fcb4c6487e2ea9be333e0c9b5caa

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 260d37b0733e0969567be6f47427ef71
SHA1 a2514d783e59553e12a2cd030089aca763807276
SHA256 22f9decddb816a7b4616374dc9729db8723ed246f20faf7533d67bc1611a2772
SHA512 ccc7838c3f298cdb0a51ba4b2a1dc2761395a5dc062b8a6a8687bc99ff19b769a0607850d5d371998c0bd8de9a84f178e5c35b3652c598d640df36bf49c0de46

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 a79958cf39a5906c140e52317f6fffc7
SHA1 e647080dbb30945e65acd538646d6e03d40f263d
SHA256 acbf11ec4aa9e58b0694ec06ef65f151aa315224cd72b11ab38f15faadea98d8
SHA512 c3d13dcbe4c75db8439d04d922bcbe0aa04e909660ada426fec7e3aa48873fe988690aafbb5695c8084c57d44192555e2071d1ed61409657ffd40a146af05ba7

/data/user/0/com.bskyb.fbscore/no_backup/com.urbanairship.databases/ua_analytics.db-journal

MD5 1b7d58103fe41870c2004b4c1aa53f43
SHA1 d2c2e321bed6f3c3e5f96c2cec9648d8fbfaad34
SHA256 3267160d6398f6c0434f6add50225d76d926ffa16111ab4a097ca31ac94ac332
SHA512 a47d6cb005c948aabd2a548f84491bee05cbda18d889fb6e6266a00f52d9b9741cc8ee86fa921c0c9ae37375f977b108268f3209f2fb4e27167ba9c448c4e960

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/667165960266-0001-116C-13977737A29FSessionCrash.cls_temp

MD5 7530b0adee84922e022b8cfbc41c2ffc
SHA1 07837825df65bf108ab5d3b76df9b8c9aa5653b7
SHA256 6241f3dee872d235ae82987cec30f92a91ec5e999f878612a1d8333e64e2f472
SHA512 46438f19d51b9eb14896fd1da29c572e3af675bd8c096b5822fa60b6184d41c929a4dd1a1d39250d1fe4fc38d59d540f19060763fa68ae212aeb6fc8561bf6c4

/data/user/0/com.bskyb.fbscore/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6671659B0324-0002-116C-13977737A29FBeginSession.cls_temp

MD5 6a2689e828f5c2db386c34bd34820b4c
SHA1 afd01cc41cde69d854778d5d0e892bd4a0500d16
SHA256 45793bce225057defe5a63b236d0471d0ab906a975fc05cea7044d5cc0a65bf2
SHA512 f6ce318a4046dc33e0034a74097b2a48c5c25049d1aebe5a9f0ea306da4c420f89a9f3536d42396b14e14c873af6f210da9458feb9135012cc0c3437118587bd