Malware Analysis Report

2025-06-15 22:31

Sample ID 241102-nfp5kstaqn
Target 852da6a2aeb5d7ca5a10ad49e6907f27_JaffaCakes118
SHA256 33e89aa205599929ebf9ef263cd7fae2c4ae5bb25b1014c85c48698401d73989
Tags
banker collection discovery persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

33e89aa205599929ebf9ef263cd7fae2c4ae5bb25b1014c85c48698401d73989

Threat Level: Shows suspicious behavior

The file 852da6a2aeb5d7ca5a10ad49e6907f27_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery persistence

Queries the phone number (MSISDN for GSM devices)

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries account information for other applications stored on the device

Queries information about running processes on the device

Queries the unique device ID (IMEI, MEID, IMSI)

Declares broadcast receivers with permission to handle system events

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

Queries information about active data network

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-02 11:20

Signatures

Declares broadcast receivers with permission to handle system events

Description Indicator Process Target
Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-02 11:20

Reported

2024-11-02 11:23

Platform

android-x86-arm-20240624-en

Max time kernel

149s

Max time network

156s

Command Line

vn.apk.store.new.gakoi

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccounts N/A N/A
Framework service call android.accounts.IAccountManager.getAccounts N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

vn.apk.store.new.gakoi

vn.apk.store.new.gakoi:apkStoreService

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 apk.vn udp
US 1.1.1.1:53 apk.vn udp
US 1.1.1.1:53 apk.vn udp
US 1.1.1.1:53 apk.vn udp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.78:443 android.apis.google.com tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
VN 117.122.125.107:80 apk.vn tcp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp

Files

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 98a6e603c8e1a3b499fe335cf8e8d106
SHA1 c47b767e0d8c8252c64a27c8ac03988f93c29100
SHA256 ce1bea1a879179d4b959d3849a86ff5ca73d34c133f44850ddbfa452735e2a0a
SHA512 c4c0a360fd6fd5963945c3aea065141046813d41ec896d97bd0b46ca2e17e9b97c11e9e70cf20c6e0a794e4360059bef07b7c27cedb593e31b646cb745c9c6de

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db

MD5 7f6d213348b91990bfca6940dcad539d
SHA1 f3119067c01a6836e39bb23fd6850d19e8ca92e6
SHA256 91781b6118cf8606d2169199c7a4f046a66ab721d37a2307fa24d59c76660b2c
SHA512 d34709b0fa1dd6beb41fcd8f2773f7c8ffd5b1d7f6b26b7efb58ae4dbd82d22d5495c03cdc1fac86d1790f3b1b5ea2b8f97fe00407437df3a3ee65f1d36dbdd0

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-wal

MD5 7cc626f6aeee8d8c601df6ce53add5a3
SHA1 3121dcca2494508cebf9a0335442847eefca0efa
SHA256 9d47664104daba92802a1d23d7a2a75eb8e4e07c8474d1924739eb111eeb686f
SHA512 fd45b2ec5a213e0baeb7add3413514fa2d149e53cba60520bcc9dd3836924900141bb54f0d8ef27cc85cd89d0a557dea0aaea498d2901b0f871514a1647b3f7f

/data/data/vn.apk.store.new.gakoi/files/gaClientId

MD5 3b08c5f9fdea19e7ce64361d514d10c9
SHA1 33d454be2699e2094092943bf6ce9383b958a07a
SHA256 f5b61da796f276144dee1ef12e6ebc92d5037dc149d65747512e8750f498d7cd
SHA512 dd052aa839c996d782b605581884f821cf39af8a62e982797f5765a937236aef240a7bdfa96f339db95d882c48c57dbbd837d93d3bce64b840790ff111b64c45

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-02 11:20

Reported

2024-11-02 11:23

Platform

android-x64-20240624-en

Max time kernel

148s

Max time network

158s

Command Line

vn.apk.store.new.gakoi

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccounts N/A N/A
Framework service call android.accounts.IAccountManager.getAccounts N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

vn.apk.store.new.gakoi

vn.apk.store.new.gakoi:apkStoreService

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 apk.vn udp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp

Files

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 c7e6007884deb437d3612e46e1504804
SHA1 6100857664c90d60b1c9e4b52fa735794697f7b6
SHA256 18944bf31db8fee0a2ff9316046be24de374b5d4800ed5c5d1f0a282c9192fb7
SHA512 c96f4995fa2c501889c39c3a4e0aa505930d91749a631de21077c2243426854bde223e4dc7d4eb434c737cce64ed1bb72b8a2fa631d2a2b22b63a013f67291af

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db

MD5 26225988f5d54c7166e528baa842ccb0
SHA1 77454c278eb1fbdbbf78bcbe9fc2fff1fa71a9f7
SHA256 1479d1d1b0fd258c490a9ee5494f26cc3e7ef61c2040cb09f9a1c511c64a0b3d
SHA512 359af22d24231c8325d5f4293ec3c4b71b38b24b58f9490173c84d618cf38fe0d5095cf626c81682fec882fb631b0d0d262d3ea624c8114fc5a99b35570fe214

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 8cb66a593e199acfc7cd9fef50d8b39f
SHA1 ce88f34c69918099f66678e35d34e3405d78f795
SHA256 b9fc74e250ee98f05dabd51a595122a33d044aa12d50e6986be63668d6ee9320
SHA512 e825640498af4ede11d6564c2bcc50279115bd237167afb16d7accbc57331f79f8e9b3bd9db2c6a49fbd632329213d7194fe94bbd304213a7665ef9426926d57

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 d4bdd8c2a4c60b52fce5531088200a3c
SHA1 d6733c843c100a6617ca5fc592c25ac36e39bb2c
SHA256 06e41a0600754b300c2e625f4e5cac106218d6aa54950161d62347cfabe0991e
SHA512 0db6daa3a8dbd1fabd0630891e5ff6c24e317bf03486198e10d3ef0ae7507962bce444429dc92dd7a83a1fad78be47a9fe1e82ff81df6412d27c9843cb65c486

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 4d55964ecbfb9ff5dd5d7bddf258d836
SHA1 a13d8550a8bfa6701bc687d9b0d25b3bbac9d341
SHA256 6b2b2639a2d8809cc0447fcd6791a296fe51bbb79023399e93e4b3757e66864e
SHA512 2ce0b5c462ac4005721ce5fa2709b8b4e0df179bb013e1b21131dd7a7c40c61998c325427e5804b98bc540c4d516523cbac485aaea230c7d8103fff71faa875e

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 1cadc1ac086ec7c9617176bb269b4aa0
SHA1 9f9b575743ae5eb2c300124235b8cb8dead47cfb
SHA256 238855ad68d5542495b48669b0bec9c9bb97f860a9f4bf7b7d1c5b485f3e2457
SHA512 f64b22632ae9691e082692fd0295793229ba448e473b820eb38c1f20594465009c440b1f8edc3272911a4a8d0d81f3b072fb7a64c513801f62376ec87c6bad5b

/data/data/vn.apk.store.new.gakoi/files/gaClientId

MD5 579b58b5120878c9c1179ed44b1ccca2
SHA1 5cbc526e93894e45f254447d24e7040c9230e5ad
SHA256 bf64786d33194fe00a4d8906ef17d0810989476f3947c0a58a209ac931809fe3
SHA512 03dec5f790a84b591ee9a83ec41dc22d015eb92b810b12a7194741ecc2f27a33521b26a4af1d215160095e5b8e80634d2d3ed0b15119aca58acec7eef6f9f2ff

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 12238b091b0a8b4d6d624741deaecfd4
SHA1 23e4f14dcd22c46153b07a8f4c3a046b835d2cfa
SHA256 37552c5ab01bbf86281355f444adbc28da1ce233985e7cef7a5b050c05d6e76c
SHA512 46621866221138d6b503c36fec5e2fb12ac38352c83ffa41ddf511b573d748f364eba2247688082b26d3692a34d172cc8702bcb077cc49ca8dbf548290e1868d

/data/data/vn.apk.store.new.gakoi/databases/google_analytics_v4.db

MD5 4d0850f2877e036c0b8be9a0ca93938a
SHA1 b66dde1fa7a2238abca71cbb32b25b4302eed109
SHA256 a714c9dfde37d6612fd0f1533fed40fc7fc5ee910214f6faab221718b8fac1fa
SHA512 a4d1e27293d74d780838397515b80b5457a2cc461fa6e76db94d684badd3ecdf6b105ba1da35d1730fdfbf81ffb892afb81210b8977970d6355b63e0dcc9d1c1

Analysis: behavioral3

Detonation Overview

Submitted

2024-11-02 11:20

Reported

2024-11-02 11:23

Platform

android-x64-arm64-20240624-en

Max time kernel

149s

Max time network

159s

Command Line

vn.apk.store.new.gakoi

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries account information for other applications stored on the device

collection
Description Indicator Process Target
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A
Framework service call android.accounts.IAccountManager.getAccountsAsUser N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Processes

vn.apk.store.new.gakoi

vn.apk.store.new.gakoi:apkStoreService

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 apk.vn udp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp
VN 117.122.125.107:80 apk.vn tcp

Files

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 e2067ac31a45cccbec14b410adf3fa36
SHA1 7506c77db96603f3f560cb01b9304703f7af3f1e
SHA256 fc2c0d591c9f23c834173e9704c52c3b0924b788551df487f20b70001ffeb7ef
SHA512 1d96b52b56756d4e8c00bfecc416db9b0551f5a453de35b2585f624d31d908d2cb52edbd1e26a9465b5c8e34af4ff817f20dcc7abf24fb0958387f4e43a95380

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db

MD5 6f5beb2e39eb38dcee0904c137c4e468
SHA1 fd1dcbcd56eab68a8eeb8f2d9fdbf606ee458d0f
SHA256 9adade793fb99add68c584daf3b69bd9bb33c18403c4fa4a634a5b28190c2343
SHA512 bd0eb2ad868fca6d60bf96cb858dfe2f4ce7f6fa583f84b80cfbf8db958da50c087aef10fd329272c36bf2c63699c6656f3813148450c0bb1910bd2424d7a630

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 c5ec33c6b3cd48f2b743642803fcc538
SHA1 8a76b3f5f38554f2068a911c1a4a575fbf436b9c
SHA256 164d40180020cc4bba4fd2d94d9a8f28afc90205e6b17bea981bbcf08cc00a34
SHA512 19c488e6e98cdbdf8e6bbb61b8de7d79e52c77cb2ea42505e1e1a8f6c4de34f43696766bec4a3ecd37fda7947223f54d929738f50f87a823fd5a63044e0d1073

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 6a26f6d9b9d660e0d16dd970f6e2e065
SHA1 15772f0242c9ac72d2e068e10645ab37188d06b7
SHA256 d42504fe59587a2dcf9a1d6dfd18872707f0af59c51b65d21b46364527d1a10e
SHA512 a2947023d632215f1a16bd48803227f74cb678e83fddc31cd7f8950fb440981240bb3de5c6555ad4a8c389e2f04d78d039a890517c8bfc48defe1cbe5db16049

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 36b5c6859c1baddf0a5bddd57eeb79bf
SHA1 fc8636ad66c75727e00c4c88a4db941ac52c5020
SHA256 7842efffe51508f81b6a686adf1db9d2b163b1078aba30594c72e196ba6efee1
SHA512 7b6207d5d36fa5361b50b1a20baeb37b8dece2eb787d16fbcbc697dc039f43b0651675858c756163967132f4807db8b213ec34b2d1297284c5116a29d42385e7

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 12951446bbfac0ed466e1cf92ca00304
SHA1 52523463a042be36ff14ac52357075644684ba7f
SHA256 223dc1ec1b3585ad053ef64a56aefbdc22d13af24b565d512320afea4ddfa65c
SHA512 28b1b9057296886ef930a0a94229291589f9ffd4f5d6110ea2bf9a180e2185feecb22d27253f7f7ad42cfceb4393101f8e681d363f9619ee75c06f20d2c0b1c6

/data/user/0/vn.apk.store.new.gakoi/files/gaClientId

MD5 280ce242b856e484d936a8ef762d799e
SHA1 9ed5408d0ff31fd9ac82c99b8166af77e34ba562
SHA256 6a383bdbc9a2cc35e4b7d27f3324f2a04f1ed0ae3b1c7b99240f042a594926f2
SHA512 a7ba1a2f7f85fd586c2b016d671a6890c4e544406f989f59e56e88f18211d53ee44962b2ac2d423427b34c6688ceac3500700e371f7f947e92352d51f17e33eb

/data/user/0/vn.apk.store.new.gakoi/databases/google_analytics_v4.db-journal

MD5 0fa9ff4a23cbf21a221df1d6451864ee
SHA1 05dd5964ae8ec019eeb848fec5544ed3b6d0cb47
SHA256 c15c33e596591aa83c7f389492a3fd30d1d3260cf9865fdaad7ede4ea4daed6e
SHA512 af5456653e4f7de5f431c2b7d8b0c96cad1166108aee54418f91d1d8502932d1c06da5e3633e8e3ae80a53a31ccd154db5bab63df7306a6a4c4c57e16e136689