Malware Analysis Report

2024-09-09 16:20

Sample ID 240703-1bxebayhlf
Target app-game-release.apk
SHA256 230f53253482d5c1cbd464b50ef0f05b0f8c12e6215583eb91165074e250801f
Tags
antidot discovery evasion persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

230f53253482d5c1cbd464b50ef0f05b0f8c12e6215583eb91165074e250801f

Threat Level: Known bad

The file app-game-release.apk was found to be: Known bad.

Malicious Activity Summary

antidot discovery evasion persistence

Antidot family

Antidot payload

Checks if the Android device is rooted.

Checks Android system properties for emulator presence.

Requests dangerous framework permissions

Queries information about active data network

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-07-03 21:29

Signatures

Antidot family

antidot

Antidot payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-03 21:29

Reported

2024-07-03 21:58

Platform

android-x86-arm-20240624-en

Max time kernel

324s

Max time network

590s

Command Line

ro.alyn_sampmobile.game

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

ro.alyn_sampmobile.game

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.42:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.178.3:443 firebase-settings.crashlytics.com tcp
GB 142.250.178.3:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 ms.applovin.com udp
US 34.102.162.219:443 ms.applovin.com tcp
US 1.1.1.1:53 rt.applovin.com udp
US 1.1.1.1:53 d.applovin.com udp
US 1.1.1.1:53 alynsampmobile.online udp
US 172.234.222.143:443 alynsampmobile.online tcp
US 34.117.147.68:443 rt.applovin.com tcp
US 34.110.179.88:443 d.applovin.com tcp
US 1.1.1.1:53 ms4.applovin.com udp
US 34.102.162.219:443 ms4.applovin.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:443 assets.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:443 img.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:443 res1.applovin.com tcp
US 1.1.1.1:53 prod-mediate-events.applovin.com udp
US 34.102.162.219:443 prod-mediate-events.applovin.com tcp
GB 216.58.201.99:80 tcp
GB 142.250.178.4:443 tcp
GB 172.217.169.34:443 tcp
GB 142.250.200.35:443 tcp
GB 172.217.169.14:443 tcp
GB 142.250.200.35:443 tcp
GB 172.217.169.14:443 tcp
GB 142.250.200.35:443 tcp
GB 142.250.200.35:443 tcp

Files

/data/data/ro.alyn_sampmobile.game/files/PersistedInstallation8369222801450101461tmp

MD5 00ebbad54a4947efccc1123d9ed09582
SHA1 7941d95634c2ac03b2975d25c8263ce6d6c92d67
SHA256 735241ec29de2bea8b717d63c871df5c6df758b40d13567cbea35bb8b7c68873
SHA512 1a19121eb01703488197af77579a58469073ddb874b446eb0257ade072894bdc277c11ed711c155f8ad6ae431c8946d6e38318c8295eded8d6e82d887cb38aff

/data/data/ro.alyn_sampmobile.game/databases/com.google.android.datatransport.events-journal

MD5 799ba70a9f687bfe397c908403bb06ed
SHA1 92e77467449aba4a48070b3f20be9278656917a2
SHA256 bb4574cded66b61163455d9e7b265acfa2e8a65a7a98f070c022074a1a1ba6f3
SHA512 df35fb3e9277ac7d2b781a6d4d11ba3ced22872134611ed60e44ef1682a28b2907aa67d24469e5dd2dd93a26e803edab6b0ec29d9f8aeeb3331bef78e3acb183

/data/data/ro.alyn_sampmobile.game/databases/com.google.android.datatransport.events

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/ro.alyn_sampmobile.game/databases/com.google.android.datatransport.events-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/ro.alyn_sampmobile.game/databases/com.google.android.datatransport.events-wal

MD5 a5978c6a93e5684f665f8d21c2627da7
SHA1 92149c0ce7172de49cb4364d08f2b24851b86561
SHA256 4e0e2557ca1c4c3224ead7d55e950f177811137cdb5a8de94ddfe889f74c92f9
SHA512 b2386e175046d825983861e0438e45efcd9acaa62e319e18950e37e634d77545de6ac5aaf0c5b45a76a81eab300bc0c8861be5fcafbebc493da4ba38b78bef5b

/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/com.crashlytics.settings.json

MD5 d5e25be6ef77eb0447fd817341bed7ae
SHA1 fc1fe5632d18503486b2f3555f93d1ee38c7f6db
SHA256 a0f126afaf60ec4733e3eaccc38fbe3f21739f83adb25a54167f040634a21488
SHA512 14fc21dd7b5afb909690e5377a59fd3fceeaae963c72eff48aa49bfeee43f4a62cfd5adddea98bd67b467e85d0e65797c8590e0976b2a520b1abcacfcaca636a

/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 fdbad5daf4ff3454c6da924d12278e98
SHA1 5be09e676f55cefa6fe67ed71905c5f3840eb0fd
SHA256 b8cab896f963aef6e17513c59c2b27193348f0d09022cbdf500e655caeada94a
SHA512 ef1faeb628f2d4cee604d5d7b66a1f21a002c34fc8fdecf14d0e61b73faa750a8665f7366394baedf7df2c85a3c46f9fe9916e4174ecd7be18700a1fa1b35ba3

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/native/session.json

MD5 539c05ec569fc4f2aad81d8da7605a9e
SHA1 31bf989dbfe235990267677c2c6d6bb5189eb7a7
SHA256 b8851f64128344bf328dac33eb0e4fcd1b2582aa0ad17c279cf5dfb9a7332954
SHA512 77abe090b0245dcea2e5691b2ca02b2c1bf366e351784b184a17ab0aaf08675ac8a9a7650612e3efe6416a43b8a10e70faa30b6c945e40a2350336a14ada95ea

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/native/app.json

MD5 eafce160671e4409be7c55ec253b2ccc
SHA1 a3398075ba70a91a332cce722b9d88263843006a
SHA256 ae137e581dbbaf3805816e1ddce107fecd3450489945ed84527bc3e68749506d
SHA512 8668ad27b09d801689ce504470ebc2adee7fa694c8527c79432dda8001e1fd7d742292188736a251e07a32c446630f181c1795916176ee96cd93e3e92bc9338e

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/native/os.json

MD5 93023624eb8dff5c20050da136aaae0a
SHA1 acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256 968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512 bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/native/device.json

MD5 488b1489ac4d3b89d10d3f873727ee41
SHA1 f65273aa79f9d0205c11dcaaf257457d85a68ed9
SHA256 25189431ccb3f67616108f0cafbb993d864566d63fc9c19b3e1b86f863a7c54e
SHA512 7493d142c751abfea8b4088f8cb72491ff48864cc2ab189d63a38a57ad5babb475c44165775834620a877aec7781f2247f59bd3427c27d2e805797de25522b59

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/report

MD5 20b123055d4795270405770c1f64dd73
SHA1 9f0bdc1d5b05f1ed3daa1f58b4ab8e4239d3b35d
SHA256 0be8808a0d2a15728cac840d4c35cee73665f307911dad5f500857f7b9891496
SHA512 949e6fd6f7c8718f47946b04cce79670c3a6551e804931360ea66f358b0f04641762c8bc6d6342f1e1afe4a188c8ce2725ae30d43ce1b1a7cfa27bdf53319322

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-journal

MD5 88f894ad346cd858d1e0c7e24d444312
SHA1 5aba548c78a396bc85d307a1154157e07fcdb4d8
SHA256 f218390ecba7fbbf820b7aee3ef6817028cfa8b7a25c8ecf61b83971442fce9c
SHA512 3dec2288f52156957a86641425c36c9e521c20b924a57b5b5feb66c89a2bfe1bea3e3349723b989969588fd570f251042a549a9ac5761c3b472d3f4fa5cc834b

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 6a29ffe67d3007237f268f95039d5307
SHA1 acdd52bc8e87557eaec9278d780ca456f7b7da41
SHA256 3091ffb146b0b8452c1cec45171398f156c12f41d06929776acc29be8daa1374
SHA512 ddbe90186482fbe8a78ae99c243189e1b58029d19b776748825580a6bfbcddb9fae8563227006a1d1aeb41d5a3cc463765bb9bb8ed29050c4c774ad186c5bfe3

/data/data/ro.alyn_sampmobile.game/files/PersistedInstallation6332427455053452543tmp

MD5 0e5164434a58b7a5ce9bb9e1c0ffd24b
SHA1 9bad431b7fec8f7fd08b214ccaeaf04ec52d2be5
SHA256 d795303b763910c12d7037a0b7e197ea2c1cc6ec83dceaee54e3f08b5216feed
SHA512 12505cf07174e2d767e9d3fa923cc4f3c75ddcfa9e5ec32e6b851c8c6ff9aa726417137ea09144b4bbbc96d932e6f6368e0687c13644c74db1cf17075772bd3f

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 a72a14ad764f64d9620ffc969d4de6e4
SHA1 731b8d58dc73daa72300492fb88a20572a72f9fe
SHA256 2f520c57905427a47c2e0dcdf138cd7a1df00b97dce1a681c9d491d1e28d3277
SHA512 17ec3c827e1b627774d36e678ad434f2b5ed1781ffa8c2d0eac37f970dbbd476544a1e8c54471c43e83bfdc429acbca6600bea085c0152b72085a68f9eb03db4

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 7d134f84481f7fafb639cb8e9e0ce01c
SHA1 19b669e154d0f33a1111e1971ec9d7805cbf1fbb
SHA256 e0b2b1b8b0bfef6c7970a0a952abb21d013aaea5332407da7538c038423f565b
SHA512 0e87714693a944a0466ebae636be643f980f75a84751e700e57bdb5b82e2c5b3a8e57c4c297e5df112b3b44eecc4c14a0eadf25fe07991633418adda6592e11e

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 9ac1557c46eda64a605cbefa28f38711
SHA1 5df0b1a3fc68ff73a1219a4cb2a328db77a4a9ce
SHA256 1c6aa49ecc9d3394d98922b2362570f823ced0d297b84879f3f03040aa80b9bc
SHA512 44035670c249acdce9d62ca48a17a8a36092d73ae8664d774f6f57dac8a864844aaa0a1d04054cbc44b9a3524c553004b7178d2a37b7a8216ea7fe366c8d5086

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 79e2b187110094eebd010700fdd4970f
SHA1 526e6544794d7ef21879e3fabe19b4f4e1bf933b
SHA256 8f208909b1633bfe97c2f60af09791e1f05931404e394257d528435c496b4565
SHA512 082c3ad30aa6c19663acec42ffa432b73f5f17c472d6c240c2b770d9defde97531f0b11dfaba8e084c380944bf9c5b4a3b8c77c793a400935ef7ed9b9918a238

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/6685C71C01B3000110A4F2BD85295814/userlog

MD5 0ec1be71c530feaea1e1044b7aed1c2e
SHA1 5ef0b35b6c4ecdfbb712a977839d5310c2a7c0c2
SHA256 f81e1661c3617ae5382f8304d1acf9cd2b880a95040e94cf1f3eded14dadeade
SHA512 a0ecabc68b62cd06496a34fc09f0de6bdf5936e05e7c8e1a916b47443f5d9ceb0e7572d68143e5b60b86dfd30504d57e24283671ece9d222c0bac9237096c9df

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 9b278a4aaa00c754d05e008ccdd55866
SHA1 1b77c02b20b45a111525e56d807334f21862e5d9
SHA256 4ac59a6418725080ce55b67f832bc1c4967b70bfd79e3a0d952dc23af76ecba4
SHA512 ba3e8da997502a051417e27914d3f76d9ecdb5ee7cc7f050a7cbbc89168ecc4552f46ba8a0a8274f2cc9ffab1e80a9398d24c8f5b338ca4260f68e3b57c2c7da

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 3de1d5e0a27b1f248ebb975f5bd92be3
SHA1 59513701e8454bb2c77d59a91d60082ff29e900b
SHA256 9df42ba08007c8cead0d1cc6b1485be3feb3886ad1fc8548ec40152d2a27016a
SHA512 c5a591ef30da5d89040686364a61cda4f8494410ffacd90750145a03c8bd99ac806c18987cd1c452c434701c995fd36cd5d2a5738d836f03ba0debae4a3864a5

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 f15ef79b5664823bcf20488bed864e73
SHA1 f04cbd7226e476af01a5d1cc432f7f75177c7834
SHA256 2f17a191fdd8dc56c44716bd5ae2a946ba28e16a46746d4ad33232f5d63fcc36
SHA512 dce20250afba0943e1208a4a852467ae977d6053bc6cc707c9bcded1b4b38d6a9e7fcedaf3d4e8705432658a3715af05932adcb10f127fd6faba895a43e65d53

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 243caa9b8a88b87b8baf69ae1c6989e7
SHA1 140c3f16371c371e22d5f21c07f2405e30831e29
SHA256 77eb7e58ec1949b6837c95abb9b0ad1e4d4964f22921abc19d224602ee12028c
SHA512 ace3fe884dba1f3134b03d131c373d0517711c009d1508fc0221bdf729e649f0981f3e7041eddfd56ef5b9efed41ae11ae7e39ba1402772bcb38cb84dc4f08ef

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db-wal

MD5 a85ca7e49bfa548a02b3cdabaaea425f
SHA1 ad4186b08755d6a2990cbf9653edafb812c8ad9a
SHA256 01a6bb4990798db8243829ac054c07937280e796641b068cee0b8a1d0287b7d1
SHA512 264fd300a54ef211732658ea73bb4e36caa9f542560e8f8c4c884a6ec778c3934fdb651638cfb8ef5ed7a4bbed8ab3f43a8cca6d6137e35d90ccabdcaa7d7235

/data/data/ro.alyn_sampmobile.game/databases/google_app_measurement_local.db

MD5 2403adf8f49617a42e76144dd799abba
SHA1 7aaaa61e80b8c7f8ee7368ecda18fd715ed74b30
SHA256 8d6ff9675f502e1ba39961bbba7c459a4b4996bb0c60ed32e9dea348980ea858
SHA512 e9cb6eadabef247265c14feed0abdd6c389c6ea8b433aa4d93f096b1c2ffc77a12117c5afe724d9b44c85a5ad9a77e83f25ae9144703c6f47b187e6ead32a53d

/data/data/ro.alyn_sampmobile.game/databases/prdownloader.db-journal

MD5 ff9bc192fa61adb0c94b33865edb96b8
SHA1 173ca563336174c95068e1b7e3bfd06296702ef6
SHA256 9a5e6d627e14b54f4101d67fef11809384d08116f8aa79b4fd62b87e30c4b7e0
SHA512 9d1e260029fe5340990be883f456eef30e56ffcfc12f1626cab200ae6a964984a83797d433232258c06f0314075695124762871290da5533a1772572bf4c006c

/data/data/ro.alyn_sampmobile.game/databases/prdownloader.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ro.alyn_sampmobile.game/databases/prdownloader.db-wal

MD5 a2b14177837fa1b302447c86c1b7699f
SHA1 fed356d1842b73a3edae852ee853b1748e356ac1
SHA256 8e7ba7f94ed52a3b5c9290578157a504d0d84e43f03e4ce5a3b7419bbdbdc19c
SHA512 50b3ef0115bad12d1a9f94286312e56ca5c158b6d7aea3ee54fdb0bb8b4b5685b0652ea31ada515524c462d0477c127b6b5ae4e2c907e5120ff0a3014d710e98

/data/misc/profiles/cur/0/ro.alyn_sampmobile.game/primary.prof

MD5 a5ae6eb9c36d16168d8932e08e8c6b30
SHA1 d3a33e70ace3cd51d7e6b758350bfb01f1cf0f70
SHA256 c5814f3f342e48a1ece1da90ddebf56d9250608e99db3a798255d42f1231fb2e
SHA512 06e39323448fa10b1eaa4218418ae4422f171a90de7a60bdda5ddae41919bf7c440939a72d70c0d20f8723d6bf8ed8c449f8d913b491bfc08a99acbd93a7fe76

/data/data/ro.alyn_sampmobile.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 b26facb2691d0d4797122a7dfda18409
SHA1 04c749acab67b2ea7fd0faee93ebd1c08f83f96f
SHA256 aaacea2458f9c55de5a9319b5e2e327b2b5a974e8f7c680e37b4a4c48452dadb
SHA512 2cc18c380aaa43cb72e1a98ab4c52a9fad26b08cb88169694319a17d807a42d9ba0786224a6a363fd413efbec199ef7c2fbde53dba64dd5666b36bd7ea9fb122

/data/data/ro.alyn_sampmobile.game/files/profileInstalled

MD5 645b6e7ece709c3b5f13a0228b074d0b
SHA1 a4d62fcb96a85b9078d40e2ab8072beb7b3c7d38
SHA256 3adcd5a5ddebae2e026e58659fa4c097b35b9361db9031f1fa2738b1a7ddd3b8
SHA512 102b53f459e669b4a614d991c0361caaa06f6de5b8150df46aec05ff171b71923f76dbe1ba678d575116a62ba8d6111121d556956c59c155ea27f2cbcc936c76

/data/data/ro.alyn_sampmobile.game/files/al/persistent_postback_cache.json

MD5 e4775c4cb42cafa419ce0aacef53ded9
SHA1 2054dcece5d5147db4ba2dba9ab962908f3609f4
SHA256 0cec7608cf6cf0d25739d0a13e938a67dbedbdf05294e14c2b5bbf06ec2f3dc0
SHA512 6e780bd432093e292af4c46ead7289c142a16bd1f1707548862a1beafa197a9b4f8646611076b787718519321b8d5a5afe2049e710809777b38fac6525611183

/data/data/ro.alyn_sampmobile.game/files/al/persistent_postback_cache.json

MD5 a5612927e7792641607f093050b775bb
SHA1 99216e1430784a2fc369f81e03a28e5f681735e3
SHA256 4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
SHA512 3ce4dd5f437b9405ea6e4d6bcb16512c98914b2dd15a01facab5fc68126698cc37e0448fac28408560552e9688ad1b6948e0fb8c9d11f893635d20e970cd9090

/data/data/ro.alyn_sampmobile.game/files/al/sound_off.png

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/data/data/ro.alyn_sampmobile.game/files/al/sound_on.png

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/data/data/ro.alyn_sampmobile.game/files/al/1715944067163_300x300.png

MD5 fa619d10b94ac9373622eaace1af07f9
SHA1 e2abd58b337a84ba12d6e90f681c1190021757ac
SHA256 83bea889d553f783eec52c8777a1363391351d518baba82374ce7e2e70c31e95
SHA512 214427e60a9f54e3c4a35f1a2d80a1f2177bd362f29b8669679f01ae087eccab23c909efee45c89544c2df67c78c73247c6d56fe5ceb9f3fe39f86f9db5d9276

/data/data/ro.alyn_sampmobile.game/files/al/1381250003_28x28.png

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/data/data/ro.alyn_sampmobile.game/files/al/od957ced_1920b2eab07c5a88283f473c547c79dc8663d1e8_v1_js_load.js

MD5 8ecf65c0ea62e467beb8bf3307f0cac8
SHA1 fd2456c950ceafc1b259c06b322cb6f6b082081a
SHA256 f244c3ff2078a37b556acd2de2c7f7500750830e75a82b9463b4c781bb0eba13
SHA512 75602819cd01039ce318ae357204c83cb37956c0200d6fbc51e2e009ebd910727e6db4b81a1397701b63c04d60ba9082feaab198aa3ea4c93de302e47c27ee06

/data/data/ro.alyn_sampmobile.game/files/al/od957ced_e88f8b682114cf178985b66a14d0760b7d05fcbb_v23_phone.mp4

MD5 a0e8a2670c777329d0a9ac2646775dba
SHA1 aa9dc44d986698703b483e1c5958715176df1a9c
SHA256 b61ee8d5c310c1700c5bebdac0803310e0c8b634187f668c4f964f6ddd273c19
SHA512 b05d5943f8564113fd35ccbb1935e39a8bbd0a3e17132038fffac4a2a2187cf360b1e4af32162f0cfc9d7707547441eb1d65f6bb200003662574c9a14523ccc7

/data/data/ro.alyn_sampmobile.game/files/al/1719407120578_300x300.png

MD5 35018be905ff65e1c28e5511b033233b
SHA1 c3bed721cba8335fde6858e590905cb4d66e4fae
SHA256 f35178d45d24231f029d362bb7e68153fb195d9dcdecb0a8613ba645868462d4
SHA512 813c80bba0e8cb0ed78c927b9f4e6e531c9d8170ca62a22ce7f4779e34cef4928cbe30dab19c370ec185a05282027fabfeec6a324440fe5d7441763a58a77804

/data/data/ro.alyn_sampmobile.game/files/al/o92f0301_0c9e288331a4adccf665948ab63f97f3a5068df9_v1_js_load.js

MD5 0c61c70e54a9174c4cd339551cdca03e
SHA1 5757b94af1a28c9928e3970663484fdfe5c3f6e8
SHA256 b6deac9cbe97e28d85fdcfb7531a4f2371ea05aa02771b28f8f8ec56afb513a5
SHA512 2f6314a26414b1584a99ef8d3f941f51a813b34da2ade823faf9138e5ca476c87060f772bd9c08de14ea0e8bacaa719fcaa40269080a94da08ab000f2600168c

/data/data/ro.alyn_sampmobile.game/files/al/o92f0301_d66a0d4aa8df883ebe38dd92e45cdb31b6e8adbf_v23_phone.mp4

MD5 8f197b3379c180b732c99803812b9309
SHA1 b2e8e99a9682e9a093499ce5ffea884ad99c4c14
SHA256 92632800e3371495c2896960b724b7c8ce289df2408eab61410d4ba905f65b0f
SHA512 c8578de5acfe663528d0468e025e3e36988e415d1a71b08ffdd6e64a7121bb0bc9a9c1067a7598c5bc09964560b76b5070526de8312641dfea35d228d1d6383c

/data/misc/profiles/cur/0/ro.alyn_sampmobile.game/primary.prof

MD5 55ef1a172955be6c51b942524038648a
SHA1 43526cb0d9f132424c1a74d014cfef1fb9d017f5
SHA256 0552e0ff53a77042e38e0686341130e748a7ba77a75d82a114a43d019ff53c64
SHA512 29659b2a7f5a0647907ce41d8d497334af3d8307b9bc4d905d0435bd77dc976c36b04be8398b0bd5fbc4e5c8bf308697dfa310f1aee417c7cf6b5f1e4fb14a6e