Malware Analysis Report

2025-01-19 04:31

Sample ID 240813-1496wayfqg
Target chinaGmf-8.15.0.388.apk
SHA256 1967d86f0c7c5a5267da7f3bb9102a535bddffa0c4965035810f38c447fc1760
Tags
collection discovery persistence microsoft credential_access evasion impact phishing
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

1967d86f0c7c5a5267da7f3bb9102a535bddffa0c4965035810f38c447fc1760

Threat Level: Shows suspicious behavior

The file chinaGmf-8.15.0.388.apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

collection discovery persistence microsoft credential_access evasion impact phishing

Queries account information for other applications stored on the device

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Requests dangerous framework permissions

Reads information about phone network operator.

Queries information about active data network

Queries the mobile country code (MCC)

Detected potential entity reuse from brand microsoft.

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-13 22:13

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-13 22:13

Reported

2024-08-13 22:18

Platform

android-x86-arm-20240624-en

Max time kernel

67s

Max time network

82s

Command Line

com.skype.rover

Signatures

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

com.skype.rover

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.74:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 mobile.pipe.aria.microsoft.com udp
US 104.208.16.92:443 mobile.pipe.aria.microsoft.com tcp
US 1.1.1.1:53 in.appcenter.ms udp
US 68.220.193.245:443 in.appcenter.ms tcp
US 1.1.1.1:53 app.adjust.com udp
DE 185.151.204.12:443 app.adjust.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

/storage/emulated/0/Android/data/com.skype.rover/cache/com.skype.rover.0.log

MD5 d6b0048c33af9ed1b056e9d263eb9d45
SHA1 49287b40eef00f58e99e88ce3d6076da3c57f4a1
SHA256 499cb0348e0c41c18f619945e45a86b5bb9bf26ca039b4efc89b45ab21f30257
SHA512 9b4b45ee768833b8f7d18fa8f44a39da97666639a61a89cae0a97faa6d517683afe57e7e36efe163e5af90c15bb0a0e338f197cd802e04de57c552d36a8e663a

/data/data/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 a8a7f2de756f937b3d9137017bc6f027
SHA1 86c9d384f3184f462713d76d47deabba3bb7610a
SHA256 847988e19a5d6583d26742085f888562489c5e9f40d5542910b2979d5c96ed90
SHA512 264d6faa9859a6a019d65bb7fdcdda86e768c2450f0adc566d20db1e7ae92c70490c3c527ac9254d5fcd6fcbebde63929404004d19f0f03afe6ecb03df27d750

/data/data/com.skype.rover/databases/com.microsoft.appcenter.persistence

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.skype.rover/databases/com.microsoft.appcenter.persistence-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.skype.rover/databases/com.microsoft.appcenter.persistence-wal

MD5 2c1a3cd48237b092cc8c494f0f744b4f
SHA1 a3795ca4e75e7385a1f9a4160e0ff18c299fbc93
SHA256 a0b2e0cab1e2a952697e6c87452eff25882262f0238478b504a312e694e233fb
SHA512 aaf65104eb54ba42f9918f694570d312860172fd1dec075f4f6278d712c38f81584463adf4fffaf6f9cab879a54dd1a4d1f2c9351bda07243b1ce674390831a5

/data/data/com.skype.rover/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.skype.rover/lib-main/dso_deps

MD5 6f7a5bcd2bc07144d6c61715a1f323d5
SHA1 c4b7f676d84f8c9d37456bcbb275ccc7b8953d88
SHA256 0f0fa2a46a7b8219e40c6c797c351d36d8a21947f50e59276c0c190a92ef8341
SHA512 8c4d8e54137594351e1dd20a45786ecb2ad96014476b17e5f4b9a5a463361e7ee09e3ecafdbd54d071df1583608847abe2b76df7c998707546c274ebba39e69a

/data/data/com.skype.rover/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.skype.rover/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/data/com.skype.rover/databases/AriaStorage.db-journal

MD5 5442a2877b41fde96cd774a41441462f
SHA1 9000c42933a9cea8bca11a62bd8b712f520b87de
SHA256 a76c28d314409fcb4c4f4683b814662fb6eab7ea347169018b92a243afb7327c
SHA512 817bffe0dd0c031e1d60a5e07dafcf22bde3f552967e794a9f166432a4464505ca4a89632d28ec0367e43fa74c682404381ba15998fc5c60bb9523cf1ed444eb

/data/data/com.skype.rover/databases/AriaStorage.db-wal

MD5 65ff7801a9c1b4599479e257b5d45410
SHA1 0b8d8e9615cc85c7d8225a2a6a05869d15ac7f13
SHA256 3b581ee771c93f5af83f453c57422afeaa63465d8fd2f9cdf98eca5c9cea46df
SHA512 b19281820a429c36a57592c43d0c9086b233016bfd880751d7337917985e0d7380cca91b7b863b50b56f0a8bdfcb54df0341cc9a3f0b984940783eaf03b4b356

/data/data/com.skype.rover/files/AdjustIoActivityState

MD5 e9f8c513faca80379a0fed708f763371
SHA1 e86e3d0c8e43333edbcea6b3bbebc955ff9e2d6b
SHA256 658a2330d84c3f315cbfead1079c09396247aa69e7de480b0bb08e3125cc03bd
SHA512 bc09fe643ae00700299781ab3e5520d96352e3bb44cfe49cb125938bd727692ade41f782ee2635ea8be5ef7c8f2471207507ce050ef85fe6fffaa82c09280e38

/data/data/com.skype.rover/files/AdjustIoPackageQueue

MD5 cfe8b2abc0211e151ce092c85020ec28
SHA1 7df311a3f132e67614c99aa1343fd9cee37cce23
SHA256 4ae00664a5f3b1a5aa91e72c5bc59d5a5d6e92265a4842738626f2be440e2848
SHA512 923f9707d2cc21324edee1cc156ccfe8c3d73ca3f7f411dfc94db38d9843f19e00838ac223bed3272fe6ab6f107509af4fa44315eaf4d35270e523fbe7ebfc85

/data/data/com.skype.rover/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.skype.rover/files/AdjustIoActivityState

MD5 38c3e74783b5afbe398afd5eca0f5439
SHA1 64c43fd8d8d4641d327f5160a58fef1663709e07
SHA256 e16e9aaf18cb8f7a76ffb1748833eafaf892e3ba77ae137b149be86494c8f3e3
SHA512 9049ec502b0d7e554e5abb81f1a8056f70ea742914d24933fc65a31a19e2b4f3aa1f3911283f1e5f076f2d2404f4307c2621d3a112cc4a2423d9b0b8fccb1635

/data/data/com.skype.rover/files/AdjustIoActivityState

MD5 1f972ceb16764151a1bd04b9a78c03fb
SHA1 5b7a504318795e0f6cfa6ab08c9959e4e2ffb7dd
SHA256 577ba1d0278950cc4606ad29241fdc174455db9c3882d0d68a983b1cb9035a75
SHA512 7499d1a9f557562a2a4cfc9ad4d28996482761cd5e5229f2b90403aee9abd73b3a54a01c5448366c51bab338e42693ec029ee164aaa30c6cbcf0eeb0a6c4aa5f

/data/data/com.skype.rover/files/AdjustIoActivityState

MD5 4f61a99929e4039948216c3c42115da4
SHA1 afe130251c5240332e327e65983c4764505728c6
SHA256 547c05395ae795ac51bd3cd4d85c75793b7fc0d7baae7eb38600ab314ac2d0e9
SHA512 1312142c0b2dfe6edf5170e580efcfb22b51b16c583f149e9cfca1ef9d9c9bf32b1f6fff266451091ba53a0460b686ea173d46d3ef93756a0f6c258c6f5ad57c

/data/data/com.skype.rover/files/AdjustAttribution

MD5 ed0650848210ff25210904612d406ab5
SHA1 60861c174badd550d6adc7bab2c70962083547cd
SHA256 3d841cd37c17e165c152d318da882eb44a85aae84dc96dd2e667b9e075056cc0
SHA512 8cc36f34258edd76611df5d9e1c000fa2ec334d1bea1164b92f20d9e98ed2848b3dc4e570ed7bb66d70902606a677d88359bb200eac03c9263ac1fa029b463cd

/data/data/com.skype.rover/files/AdjustIoActivityState

MD5 f288da1b8b2b84b235c9dbf4096aa03a
SHA1 fd482d724cbb5b56bc158157e8735d776dc9d64d
SHA256 5306ce696219ceaa646d773868e531cab87582d723b3748322d22bdbc852a6bf
SHA512 7cb90d605267e483982e19d1b7804ca55699d13b41035f0dbabf8cf1bf7bc562681b7bd1a320d9f62d06e4b8b4ed767d6e38060e118afdbcf6576f38e3fbc123

Analysis: behavioral2

Detonation Overview

Submitted

2024-08-13 22:13

Reported

2024-08-13 22:18

Platform

android-33-x64-arm64-20240624-en

Max time kernel

141s

Max time network

164s

Command Line

com.skype.rover

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Detected potential entity reuse from brand microsoft.

phishing microsoft

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.skype.rover

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.196:443 udp
GB 142.250.187.196:443 tcp
US 1.1.1.1:53 mobile.pipe.aria.microsoft.com udp
US 20.42.73.31:443 mobile.pipe.aria.microsoft.com tcp
US 1.1.1.1:53 in.appcenter.ms udp
US 68.220.193.245:443 in.appcenter.ms tcp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.7:443 app.adjust.com tcp
GB 216.58.212.238:443 tcp
GB 216.58.212.238:443 tcp
GB 216.58.212.238:443 udp
NL 185.151.204.7:443 app.adjust.com tcp
US 1.1.1.1:53 rcs-acs-tmo-us.jibe.google.com udp
US 216.239.36.155:443 rcs-acs-tmo-us.jibe.google.com tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 172.217.169.74:443 remoteprovisioning.googleapis.com tcp
US 1.1.1.1:53 content-autofill.googleapis.com udp
US 1.1.1.1:53 browser.events.data.microsoft.com udp
US 52.168.117.175:443 browser.events.data.microsoft.com tcp
US 52.168.117.175:443 browser.events.data.microsoft.com tcp
GB 142.250.187.196:443 tcp
GB 172.217.169.68:443 tcp
GB 172.217.169.68:443 tcp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 216.58.201.99:443 tcp
US 172.64.41.3:443 udp
GB 216.58.201.99:443 udp
GB 142.250.187.196:443 udp
US 1.1.1.1:53 account.live.com udp
US 13.107.42.22:443 account.live.com tcp
US 1.1.1.1:53 logincdn.msftauth.net udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 1.1.1.1:53 acctcdn.msftauth.net udp
US 1.1.1.1:53 fpt.live.com udp
US 52.167.30.171:443 fpt.live.com tcp
US 1.1.1.1:53 fpt2.microsoft.com udp
US 162.159.61.3:443 tcp
US 1.1.1.1:53 chrome.cloudflare-dns.com udp
US 172.64.41.3:443 chrome.cloudflare-dns.com tcp
GB 74.125.71.84:443 tcp
US 172.64.41.3:443 chrome.cloudflare-dns.com udp
GB 216.58.204.68:443 tcp
GB 216.58.204.68:443 tcp
GB 216.58.204.68:443 udp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.200.3:443 update.googleapis.com tcp
US 1.1.1.1:53 voilatile-pa.googleapis.com udp
GB 142.250.180.10:443 voilatile-pa.googleapis.com tcp

Files

/storage/emulated/0/Android/data/com.skype.rover/cache/com.skype.rover.0.log (deleted)

MD5 1fbb85f40c50c3349e13fa92de080f50
SHA1 3e6c1eb56d4e19b554911a4e3eae82ed8fb8c9fd
SHA256 5ab1e3c476a029fa7f0918af67c6c80178fa870e29e600ad2fd2d851ffa35865
SHA512 790b907e558f6b48fe0d385836f7072855beb32fea3c4338503242d10012c70c6e482d3d6eb61f1a407d821c74f829e46dac54a9e7f5540b5aa69d691f9e1033

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 34eb2a6007a3b3aa4a2039c8cbcf73e9
SHA1 c6c74f3566fdaf25366a705a360a4b73f045ddc9
SHA256 1795dbb466ceb9f35dbaa9d00d1f112a6eb9773148e989a90b3d47941538b602
SHA512 c81054d70fc9b8a48f36e00ffec5451091a6ae7882c0ddd82dde9c3d5fff85b7b9355938479568c040b4f85240c3bace44c851b0fb34b0a24d3f1398f094d1e7

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence

MD5 0fb8fbc51ee678e8cd9a01abbb82062b
SHA1 36e7c2e70a420b0d36563dc17f57bd3df4ea0900
SHA256 113c26cb34e656afbd2c4d09d2be68933ec40d5dc34a64de94d13685ea229cac
SHA512 ddde7691d5f48414f434e4e4618faf258e23efa61e691022a3ecb4db7020f0bfc1bf35c55731f44799771432947c086cc406be58de65a7d91bab42c6106a40c7

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 ebde12b9debf8a9545400f81a4ceda45
SHA1 7242208c4a5bda0ebf4b29c72f61a4108ded5b32
SHA256 966a65448b020a0584866f2371bacd64d006900db3bdb20ad92dc4b10d39501c
SHA512 c5c2f3ff66aa66018aa63c898bbf9e267169b584bc07fb6bae51d4e82c872939bd1fe6b7c5a463deeee1bff1f0ecdc1729c614ba9d662897bacb41a74016cbbe

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 e7870fd91efb055dc4996ff73ecbc87d
SHA1 f63e60366233dc6b312c2b71cddf7d5cef158e02
SHA256 56be9c679607d27117618f9638d838cb360f18fd924569b3bfb655bf093e6b01
SHA512 5835ae2ed23130fcec02bf8a8366776aee4c538d462b6a9e6698827e12f2f2c174a62452b4a2287ec8f312e61b56386d764d744a31393840fb33c721e598d69a

/data/user/0/com.skype.rover/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/user/0/com.skype.rover/lib-main/libRtmMediaManagerDyn.so

MD5 cbae0aa7c040761e07d5b2adb577f0ef
SHA1 b5bf00fe0a37e1234e8a521ab9571016bc969fc2
SHA256 970acc081cb1fcfb3fa642c24b80fc323976bfa8a19cfcc79adf38b3dc3b3a77
SHA512 f258995f7e582b9b5ab8825bf3a1f76c880232310413181ea206ac3d691642d138bfb333f521e75ac2bad850f8c7eaabec29f5e3595a49f6f8ae1f3eaf83c27e

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 642473f3a96417c6b7f807c1496f6981
SHA1 f516571969373966feea802a303ddece05bac85a
SHA256 0939cb7d00a83674c0077bd496989f23935d44279a51c17658ed15abf237cd13
SHA512 1e7a6495e4d51e1e4379d46069c599f42ad491b61455829f98447ef4fd3361a0509801f0bb0f55e9bf829224233c1ccd1c585013c2789c2bd78ad5bf8a36b9da

/data/user/0/com.skype.rover/lib-main/libSkyLib.so

MD5 45e24fbc513ad22f190ecf03408076d2
SHA1 88cf9f661dca34f27c21a6719055da20a105a109
SHA256 ce51459099b8b344927e6a0e81df013e2d6847c2d911a1f8471889e3734265b9
SHA512 b4eaa01cb71971f33dba7e732edc8366934a30598376049ccad1e6fe359b6b4ce4b02507bddf63314c95f055ca39afe071083654c8510953ac9fd5aae1459d91

/data/user/0/com.skype.rover/lib-main/librt-java-bindings.so

MD5 f39b2fed64cf1696058811bd918ba559
SHA1 3643f4eb11237882a882beb96dc2238e8258df8e
SHA256 40fec59aa71d1df7dd656af7976a4c50cd66ff43678ca50eb457d1d5f6f39ad6
SHA512 997e2ee66d7e3e830a53e33fbfe6707a27c02e17dbc7b44ef786b71e1c2cbb50357c6b5ee695f61fe466d32463c9557c68db4c635d2b7228a0f706d975ebd8e4

/data/user/0/com.skype.rover/lib-main/libskypert.so

MD5 d8d513b6da2f0b02a6079ca476ccd8a9
SHA1 95d70019a934ee453cc42e517c6b45f88f9f01a8
SHA256 5c59b9ec0bc04fe206c9de71d3b31544cd6740d8a2bc4245567a97ec10b8e573
SHA512 d1c04744e202f01361009636885bc6778622d38848642e97e9f5c7e00f848be8d5f407d50b2916aa1611d166953af6c0d7000d672901a577c9fded289d034303

/data/user/0/com.skype.rover/lib-main/dso_deps

MD5 527a94530b0b019c509c84fd384f8a71
SHA1 bf4251b78133d6763a607af05dbcecf55a3e76ac
SHA256 102de26ba10fbdfadd6c2cadd198f056ebf3dade79fd130363f6fd58da46c26c
SHA512 a0dbb115f5d35d32945f75d07d7303d43219e9fd405d7d1d61bb703a1d151b354a4c836823448eae6d9f52f88f2666cd666233913a06efe6730ccfe71bff5507

/data/user/0/com.skype.rover/lib-main/dso_manifest

MD5 7bb8f1ff871a0b28b8e2d0e8a01db09c
SHA1 81a408a155397473caaf8223adf4366dca7171e4
SHA256 47406cf4a870096a71cc0384f8db9693d3b12f33139027806e5fed8dcdef9601
SHA512 f0574f157d5da484a5a0c25f4161a977919fbcd6eecd9c28374d7fe24d526d5b9a81543ef81586ebdd3a6eec3cde6a5868c052c5053fc2d511f71cfd70fd3716

/data/user/0/com.skype.rover/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 5aff6cd6d6e23db3c0410da4bf18eb3a
SHA1 9fcf9be9377aecbb1f9ac16b5479e1317f88636c
SHA256 741ab6015e53b4394443e2a9e80676cd31cee21521c9314aebffb639f81babf7
SHA512 6382c8ca06d2ff77798e5693c4d792342e33c6a4b4a0910669e1679592dcd8a359e8b93f7a7cc27f3db3adb470f4b75dc2d1d55cc8e4cfbdc93c4c7a4dc1e425

/data/user/0/com.skype.rover/databases/AriaStorage.db

MD5 4381835151c2e6187f7cada9374105a2
SHA1 f27153ac06cdad1341ddc394edb8990712de5973
SHA256 c8ef25a045cab5e793b035a2035f5d6a3a39e729423e367a257ca55947ea2fa7
SHA512 2b6883f64c222d3d406392b5be24c4d4ba8e8a243b01e46e782589ee8d90e2a554f134fb0ba24f9f713215738df25d41edacce083825db558cd62e8a043507df

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 fc92dfc2f461631fa9c9b357644c1873
SHA1 cc4ac937b37bca6418ff80a2f33b02337b9a068e
SHA256 d0a53aef35d983f57168023df22dc2aaae50b62c7db69277cfaa64e6da22759c
SHA512 0ac02402f825c4b8ab3bd577fa6408e2d1c66b50c4bfb323b85f4a67cbf4a595506cb7d823beb3dd0b47eb2125f475fc6af92aab2031753b6f7fa919b6970c36

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 f9d00854fc17db3ae6274cb84f546cde
SHA1 e81d9b1700a35012d1abe391eeadce29f08e1e3d
SHA256 b169190a1baa71c669ad363f862547ac28540e996afcadc7e915074e3804f623
SHA512 51f0fb9c4ea6bb99e94c6eced31d1301aa0fc2140d0750ba4e6ec564795d94e719b53341ee2e3bf7bbfd5ba71f0f8cb8bda2cee842b99ab476d463eb99593baf

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 a11db88f361af4ac2fad3f8f96d0485f
SHA1 0c83f1fef6c53dd0b546c6aa81d2ea65bf93fa34
SHA256 a4721f6d936482ffe2c5a84bbce70b424a22af73c8de6ad86da2fab373cccdea
SHA512 f38157c32b419540d53d249369ffb8cb923f84efefc69affc2df048faab6c9c4f3ad66a99fce1ea5057ebd3858b7e31b43c3beb25cab92cb024f837e5cb4cb77

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 391ac64c46debae90087109e1f70d8b3
SHA1 872791abb7ebed56e713202b7757da61e91252a6
SHA256 cf16627d25c654acbe58c48d7e3323dc06fc177682e1b352087b2c6d0c2085a1
SHA512 87002b8d934e4bb842582a4d373368f6d86272f11356e9ff02b3ab076f0d8fdd05afe2f66a1fdb1d4169ac06c35441517f77b1376102c374b422bee14e9a0438

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 98903858da4c218730c61c4f3e49329d
SHA1 b67fc3731c6c0b4c1a9aaac2cf344cffb2bbf62f
SHA256 1125e433ce8b545d7b60a7bcebdf6f58dbf59085e14f143892d1784032c4a847
SHA512 1b437d14275a7b15eda1e8864aaa95dbb645b43358f94731f967668d08012eb1759176be399d3b94ca216291bfb80fa1c248f59ebf857fe92d79fef6b745159b

/data/user/0/com.skype.rover/databases/AriaStorage.db-journal

MD5 efb534bf8b7a3a83026703aab2e6c6b6
SHA1 8bf30022cb54c82d5df4b4d6579a0ce0325bd030
SHA256 bc85e609bc7670a84be0f0a260375ef62ada4e3462dffcd850ea8d6e00fb161d
SHA512 2dd660cb830316e6013505daf44080fde14f83ef5648628cbe006537170008d0bacb5e3ea730e41d1134ee6ad1a63314eb797bea923d78e4d5611566d950c403

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 9d21758e00d5f746f1bf6955a5a0823b
SHA1 a1de374b469df81650091c4365ef13ec98907d3a
SHA256 78eedd51198c5daf22bdae19d2a33064a65c2e97f676ddb44dc9ed54972912cd
SHA512 b4270156618454784917110a34b0b694effa9f7493cf979c342b643705b7617623e842b916f12274dfc6c3586edcd4571fca2803a7c01660ca4210b0823b6846

/data/user/0/com.skype.rover/files/AdjustIoPackageQueue

MD5 f0e9af9ae5e01d4ac1cae0695215be4b
SHA1 f68e6830c1b2b2e70d4b53d7f6feec83244fddd7
SHA256 f1b8fbaf59edd382a056eacd3497054dde61a1bf06e9273a44cc57e946dfaf4e
SHA512 2efdb7e3c01a814799ded01cc56cb1c41ab3b6bf6861d78009014c1d3f8b45624f4959b7159c34297d2f5ad7f50cfe3acca6adb9746608407e44553beb249dee

/data/user/0/com.skype.rover/databases/com.microsoft.appcenter.persistence-journal

MD5 e57555bf1af022b6cfe9caf4a9650ee2
SHA1 7b04f1dd9b3f045120edaeb4afdd5c9f7e1ad492
SHA256 7b40782ac2873087073e64dd6d87beed98afb610af5519c7671240b44bd6f115
SHA512 b138be24ee677fa194e0f50c63365f5a4821f4eb77212657de26d262a87473c348bf3c31d607dc701198726ecd5fd5bf65bd1e294205671035e7d2cc29903bb2

/data/user/0/com.skype.rover/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 d85ac8c08b51fd715d9c948f3d105e1f
SHA1 ca4e98b1622e5e611e7aa93b3fc0909cda44b85e
SHA256 594b471c75383c4cfce1b83685744f5358f8f0c26bd925dc92d725f08d9ab16d
SHA512 a70ad4dc65fba37f09ee69062e50abe74f9521aeae710061217673eba92410c9a800c51a77cda3527347bb6714bf8fb35cd81fe61364e36f62b28b5eccf0dfe5

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 840c4bbf45ecd51f0dbdb329be9499a1
SHA1 2ae63fda363f80a8e96dde1ca5d3d07b2dc6f663
SHA256 8ae4b19ced66793e6a3768dc36bb2ac9e264bb2c1f4ea2d34ca81312b825edd4
SHA512 e20d6487abc72795fe4a0edaab891166a24ebe0874e6e3414d518f2116f54a54798992487a33f3b4521286bfb67d3fb637153cd6167ccad157d60d0c739d69a9

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 f2278fce87ae62f2d940f4b3992e817c
SHA1 559a369412282335a10c4683636855fec49b43de
SHA256 2349ed010ee2c7b70dbfb2d11f9f733128cb4032a698f63f068617a63f513dea
SHA512 83eab7d5bcc374288a83d94e9ce9ef2a37a72a82ed4182402fe24cc563b96486b29d8d0318a78ad0f9a993861bd82aecd70fb1a08e262ca857bbf5574f5cdf02

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 9edda4c68f947b4f3d81bf6fdb2f9e62
SHA1 14d2d20b334a7f66295d385c4ccc8bc6c412d017
SHA256 2cb02a7322989579cd21142f2e7af359d88d35a106aa89d1944285290ae89008
SHA512 420a4f2dec0c8a129348a8d5d1fab1dbc5dd627de5800c26b4e2ce27d15cd5a204c7f0ed759e825cc1e6956715cbf6cdf01e795e33b635b1cf9e39b9a47a8998

/data/user/0/com.skype.rover/files/AdjustIoActivityState

MD5 15e2dc3683d9dddf63d01c7af194544b
SHA1 353f574e7c4d2c702403017d33e1183e2d93f264
SHA256 9fc7f28035db03954d58a38792458514397ca074a24f8f65556024cf575ac234
SHA512 f8888cab116f8dc6ff146e5c12ee89f37163dc9b9cffbb0f381e28483a3a0a62bdfdf57b923c59bd9b3061805ef86ddd6653564768166f92a222e54013472af7

/data/user/0/com.skype.rover/files/AdjustAttribution

MD5 e5d0d5ece1c05549fc856578c3639f7e
SHA1 9d83bd377899ef8fece424ecf57b8f517b90685c
SHA256 f6000129cca5a2d1b4c8deb4cd84354d618079ba42bc61bfe53615c15e86cab7
SHA512 353b997a3b1e609a06ab820cac36d65fac992b711665197c22b92e657938d0f2e3c067292cdfe99ebfca899c4c986a2cf92396372f1ba4baaac293d0abcbf509