Analysis Overview
SHA256
70269916dfe954230bda695d60c05cacb4e11838de05eba26ccbad3be41164e8
Threat Level: Known bad
The file 70269916dfe954230bda695d60c05cacb4e11838de05eba26ccbad3be41164e8 was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-19 23:59
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-19 23:59
Reported
2023-12-20 12:31
Platform
android-x86-arm-20231215-en
Max time kernel
2268404s
Max time network
130s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
edward.org
ping -c 2 -W 10 -v google.com
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | google.com | udp |
| US | 1.1.1.1:53 | 110.201.58.216.in-addr.arpa | udp |
| US | 1.1.1.1:53 | roshdestan.tk | udp |
| FR | 216.58.201.110:443 | google.com | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
Files
/data/data/edward.org/files/PersistedInstallation980046781201316209tmp
| MD5 | d4c993953c8ac59bca064f6d7c44f119 |
| SHA1 | 75edaa2e31bad6ae634740fee971488424d0a73b |
| SHA256 | a3fbdf22b9792975045043dfd80c11c349d7bf33727eb6c515b4b393848a9840 |
| SHA512 | e4265d118396ffdbfa6b241584a681dfb017fb4e8e50656951637e367f6b347d4b09ce823fa9f92e505ad658ac7c65641b91f78c3c028defd4b72c1d4e9a8b29 |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | fde66aad56dbd98a6291997399708914 |
| SHA1 | 0b477e2387ceae65f8ccc7e5fbc665a4a39c9a84 |
| SHA256 | 892fd04e36a71aa87ca96e0ef89b639bb70f7428843e9bcfafd4511ed3e5d77b |
| SHA512 | 67efb369f6104e6801b9f3ccc56d80415b31eda21f20628047c13fa942c0333556095128f414ebed9b14233c7cae351e48aa89ff5903b079c70f7ec973c8a3e9 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 7237409e0640cfab7bdbd429bf821a3b |
| SHA1 | 4c3da934842f8d4835dfe2a9c275a300e5123309 |
| SHA256 | 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa |
| SHA512 | c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | 2dc902d3d41f2329fea6ac535a6692ae |
| SHA1 | b6ed13883c1c3511c3b469ddbfefc191db2c5913 |
| SHA256 | 6886de4246c7a22685dd175583fa850b64d879721e0764724b7caba8ecc19d53 |
| SHA512 | 25cebf50e70e5912fa9dab833a401f18881d44b6746ba14f1ff04f6b91b06e2358f065f0e8b0751b2a48cea52c6cbbf88162eb4d08c90e0db51e2a9669e4bde9 |
/data/data/edward.org/files/PersistedInstallation140665144984560146tmp
| MD5 | 12d28dcc87ee1ba793ed77d2a5138d91 |
| SHA1 | 31068389130cadfe7a4ff83c1e966ac3f0426647 |
| SHA256 | a6c8e16f5bfeb67f7084cf9c7ab27aacb7e5d0d0c8a2f4a0bf8a1af607f8db70 |
| SHA512 | a95a1dbc3d4cfc5b3f6b95662b442c20a6acd7a5651df99bebc8e128ce6839d33db21f0d65fda2e52203f9000124c2747e7e037078700992778f7c85da18881a |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | b2d6cb35186d34a2144e80c9d3a3cbe1 |
| SHA1 | 8deda40a6b9c9db2869ece5169e8c83784a62ddf |
| SHA256 | de5b8b92745c496578f1092907008f500cb356d9aad3db395172817aaf37759a |
| SHA512 | f84d33b15bb59f278de351bc6733dee790418a3d34f5f9e330bddcb70971695e06d16547be6c53491a93fb0b5d48e1ea5b5bb5a2a72d5f92d97c78b91c4921d1 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 0a2a97d835b947222ad1453a4b7f9bce |
| SHA1 | 440c7eba26fa0ac8dd58b500c943c7ec576e1788 |
| SHA256 | 4411b71c93d49f979629f8ab8694f029a91307726b4b20560fe831049acf22e0 |
| SHA512 | ccfbb16057f4caf46cb9a673307e1b673b976e2e9cb9e6d39f6b4aed55e720e240ccc5710f7094ad48ab66a14e1e7e65aa21c7ba14630cd3256bb9db5d4e98c4 |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | 32fcd52c74008c2575d6064f87c7e0f3 |
| SHA1 | b95a54193b886c10bcb25673fc1b02ef1bf64447 |
| SHA256 | be2c89fd9c2e19b42e4881bcd6eb8b53410e50ff4a4eb3607f1a2b16a7bade19 |
| SHA512 | 72ff885c82cfe94ff68ab2b1ebc7f2aef12c999e4ef29f5dc1fb410a82ad5cb618fd16517e6729d7a4d919867bd8fe9fef590deac35a0b22de9ea9ada4aa74ea |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | a4940e5c0c377ca5ec98d4eef71bb9a5 |
| SHA1 | ff0dd86c8a7f456261ad3e0307ab5a3de13dca3e |
| SHA256 | 6e335ceb0037ff4d7814059592259dfb706691976f5f19130ccc6f63714b7ffd |
| SHA512 | b6869443dc8e6edf3933b896dd0a530b190c6f064b00b5ca0976cfce4387abf3659076c2a933ffd9e35cc8bdacaaf4cb627084d3bd82ddae6688a813540f33a8 |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | 314ffd72f6f3a969ec68c785c1736186 |
| SHA1 | 712d5b3069c791b5841425ce426663c591e0d0c6 |
| SHA256 | 531f4adf1ffc630106031b83557fe65701ee6d7d069a886dd29b4e80b34008f1 |
| SHA512 | c4b6a5de178d52e46c28f337b46f0eb4e35c3c963735456ae0fa9522b4b6017a6149cdb349bcfb8c22c8aec5438ec3681ae643e9ebd3dee729642c2d893a3f56 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | d5f664d60c194d09200fb069b7021863 |
| SHA1 | ff1ecae0709983ee23674b69b5306a0e65d5827f |
| SHA256 | 8898fa346de2fa267684db2b0ebe108969eb872e22bc7d07103000e2d71e1677 |
| SHA512 | 7f5767193bdcc4f3237cd4e2063cd074d69fb33d4548e72122098ce6126a006cbed4388b86f47bcb5b61a65488c005171aa13f06c15964d1efd0608704630867 |
/data/data/edward.org/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | 79cf5bb97e545ff05b11c24813214847 |
| SHA1 | 66f1fc37ee0d313941f625b61b4c46a647462a33 |
| SHA256 | ab5fd90aec7f7703b2a7e16a04b6ae0ab6ce41cc5dfa2239954bcdfee9bd7817 |
| SHA512 | b24a021759f73c949fe8dc976a7a8d992de6aa98d4df8a4696029013be3bc13cb7062eab9b351f8202da4b4b7f38dec912ac564f85e0f6a924f27ef8694f0b0e |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 378bc9430f3bde0a71a0d4fbb030d21a |
| SHA1 | 4a051553b3b64e5214504fdac31d38c257ebee9e |
| SHA256 | 73ee27fb78f9f221d77207e592e6fede895c92a0ae46d5e1054850ddd94e76c7 |
| SHA512 | 91d83a098d2537af1c647ea54af911a8d4be71412b7f80b2247b5a9f2767be20b213dee346a882b1c76cc326a552cfeda48dfe5001aff122e744396cdd90a0f6 |
/data/data/edward.org/databases/google_app_measurement_local.db-wal
| MD5 | 61244b740c5822b132f5103ce1aa7a0a |
| SHA1 | d8ceeef327badd203debd30ba112b969d417225f |
| SHA256 | c98aa1c4b09217a0fdc6902ba02afab5b1bc146079cf2c5e06ef72f5d8bd0872 |
| SHA512 | 8ac76699be064852bac8f550452fbe3acc34d1cfe24c3424785e6c4643479c35610ec0852d42ec6b182a8343a8d5e3a14fc3bd48b9ee06f1c0c5e0e87c46973d |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 3e881d9a01ca707bed38018ac69f4518 |
| SHA1 | 5820f9351d7cc8082de6e5686eb9f8fedf6fb830 |
| SHA256 | 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c |
| SHA512 | 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8 |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-19 23:59
Reported
2023-12-20 10:29
Platform
android-x64-20231215-en
Max time kernel
2261066s
Max time network
153s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
edward.org
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.178.8:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.187.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | roshdestan.tk | udp |
| GB | 216.58.213.4:443 | tcp | |
| GB | 216.58.213.4:443 | tcp | |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| FR | 216.58.201.98:443 | tcp |
Files
/data/data/edward.org/files/PersistedInstallation2772733639334628934tmp
| MD5 | aaaaeb833775fb9aeba89666868cfa5e |
| SHA1 | 0a58f056d790f95fdbc91549f8004d9c11a56e63 |
| SHA256 | 4e4f1086a8c184fdbf9e0a80e8ecd0a394cae176ef2b4d743b5ee4769d47b140 |
| SHA512 | 9a977393f232b0816ee725f1ab96bcee5ce7388fab3d22087841ff2174a3ccf52d6906466cd7dd6d5e5290960b465b88fcfac4f521b85428f79736299d02591f |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 040a37bda7c2d4179c1a00f0653eab7a |
| SHA1 | 5951cf18e6ac203efe7185d8fcf68ebdd142ab56 |
| SHA256 | f5167050d8163887b0dad176330f5492d102e8bd2b2b9edf5dae4bf8a03b1094 |
| SHA512 | 30e88781df88cb5c622817a42b38d15d4daa0757cc36165120ed9de8000535010391b3d0e0d4b57043b1a46b50e7b6574ee202163c4bda7b5afa88cc7da39bc1 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 2b202d438fc45c37f9bad0cfb4279620 |
| SHA1 | d6cd659a096bc0b5ed76cbe167aefaee62deb9a7 |
| SHA256 | d6c8956be9fdb78c8e8f43cd5e9a7d353a7a824076a96f59d3f05eed5ae7de65 |
| SHA512 | 74f5235c82fdd50c95b3e05e117d2905252e85765348571c941864d311289ef9436e6986de2e365f06b05a310f8c9d080231a39a274d1914f803bd00737f8a6b |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | c0c95d0bb9e84320bee93bb4ae33a37e |
| SHA1 | 1efeefb0835cdefc39aeb6c24ba18cd27dbba679 |
| SHA256 | fc77517cc0ccc78c6ac1692d24d06f9320fe4a8aa4cf30764d1344e03d8c46f1 |
| SHA512 | 3c0478bc4e156097056eb486c1973a34eae492213596866b481c0b455defb5669ef24c43de2313f459bf7ea5c93f3907d042834933adc002d1920bbe8492d1eb |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | e25905bfcccd06043aac84a28b462127 |
| SHA1 | bd2b3251b79b9c09ab71181eb3ea4d7302e793d7 |
| SHA256 | 05070190b95092038013b2516181061eb91ec2a63912055176ae85afb8440523 |
| SHA512 | 84b52cbf9855f80b7c271ea233c80d4220dca740d09c97069a426917f706c1d917eeb719780c91bf363012382c89bdf940445d9426098ab1fc1dd9321aa208c0 |
/data/data/edward.org/files/PersistedInstallation2615047174163092312tmp
| MD5 | f9782b154cd136968cd5486b5a29f318 |
| SHA1 | bee7ae73d1cf64f544d6c27228846b93b6690858 |
| SHA256 | 9e1ce12b09edd6eed6346bf93722ba1a3ee3f0c1ef5620be591aaa1ca93b444a |
| SHA512 | a8d45bbb8136b95c6cc838dc538a4b502769eb08527ba121c64a03f3ffbee6713dd4069fc450df759e489c0fe766ea5a3e7e23771a16193ecd82a91ab18f9199 |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | a7c136b859ff7d46b4fdb896009492b7 |
| SHA1 | 330794b60b3aaadf8e7b8203e85bf2eb682a833e |
| SHA256 | 1e38fa296ff4e5981da68f7e2d6c252e3d1696d99c7ac3c35635ae6264f43623 |
| SHA512 | 75dc21c291f821b5ff2b76f3f2b89f2ccd08016cc33067e3a8890047214a7ef132e890d2bd5add2d696f554cf271fd56e58f92f2c2620531fd0cd4de100eff68 |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 5bd697fbfb440896550dca59fcb9b2b6 |
| SHA1 | 0a7fe0a3f66e7b90b812566bcd0d88f8ce4f6adb |
| SHA256 | 3741b9d932abad71f9042b3d03a3a458ebff57dd0b50f10d82cf41635372405f |
| SHA512 | 3c28ea4c7fa25b2d1519db017ada4b39f16020ad58bd998f5bf58d2b1a22861512709191a8725b7cda75c27537a8bf96a069abfd38e2011648dbd3627a4242ec |
/data/data/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 5d6ee717e1ebb7215c3c366245c4e21f |
| SHA1 | cfa5356c17be298bed56739ed3a718aa2e17c4af |
| SHA256 | 31280cd5381f42043f8b426b326d99e050a03c1bdc1cfa8f38b6cb8d790bff22 |
| SHA512 | 4c4a2582ab74914ccaf786914ff8eed0bb46043148d0ec6d2bd82211fe8a24309a7f0c41ff1514a7581dacf7c69759fc768c8f95dc0f73445ff045e6083f0842 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 9d03f442a89fe8a415bff55cb354807c |
| SHA1 | c296cee5903f5cab185e98bd2d742398fa8a6181 |
| SHA256 | 40e9f2e701ae8c0429ac3fc8a0e5d752a70f698814681f6cc9979feea15aae53 |
| SHA512 | 130b86f52cef9ef764e4571e2a4ae493a19d9ae3e667f73db5b0348a9f2003b6da9a9235496a97e5aad0a91975ba0007a77770eb5df81e993c44f8a0b84e0b14 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 7c2094692afcc7606df00f453d3d3bd8 |
| SHA1 | cd2f00610fad801c79b6eaf1f3c4cf77bd1f9527 |
| SHA256 | d945a823339c8a7dd3f5132944010504ec9cf93a5af498444467d0ce4feee800 |
| SHA512 | 4285c34cd365929293a0742f8c98c592fa7a45aaf45fb7ed8831179c757e973c2f4b6c56d598391e12f6f5b442d89243cb68925f96bd2ff589779062a8ef3b56 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | 62b7ced5c21f06739b61afd7ac4c47e7 |
| SHA1 | 43bd82d3724c4c5a05948b67feb761255c46b2fa |
| SHA256 | e1acbe9d92b258a8ffe7a577a0da1329a6a1a19f4c87757f34e8b9c64ec141c6 |
| SHA512 | 2decb48ea9d5d2f658e50bf12a04d04c1f788b7890582a97b960ff26f98bed1fa8fab56003aa803f9398dadfd540bd7bf2eea593cad44a77dffd80babf614280 |
/data/data/edward.org/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | f1fcf1b45606d7cf189c73cbb7d10053 |
| SHA1 | e75e3da56d776a7f46dede6301aa5276de5115f4 |
| SHA256 | 8011957c72b1c8c10542b3b8120d16cdb379a5a7db98fcf249890645de774d8e |
| SHA512 | 6d9062c6f4eecb875906b752662ddcbb9b0a8bc8a27c897b3b69d70ce43c56f7e07e498fa1f93444d4be1642dbdf227637fb3f2573a7e71e399e3f87f35c4469 |
/data/data/edward.org/databases/google_app_measurement_local.db
| MD5 | adf6082723784327d7d1b34adf974e7d |
| SHA1 | b1502f70eb881a1dfe41139cb719fefb877ee37c |
| SHA256 | 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9 |
| SHA512 | 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-19 23:59
Reported
2023-12-20 10:29
Platform
android-x64-arm64-20231215-en
Max time kernel
2261076s
Max time network
149s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
edward.org
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.178.14:443 | udp | |
| GB | 172.217.169.14:443 | tcp | |
| GB | 172.217.169.14:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.179.238:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | google.com | udp |
| US | 1.1.1.1:53 | 46.200.250.142.in-addr.arpa | udp |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.180.8:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | roshdestan.tk | udp |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.2:443 | tcp |
Files
/data/user/0/edward.org/files/PersistedInstallation5577333539438716289tmp
| MD5 | ca601274e800b2eb2fe21ccfa09ec8f7 |
| SHA1 | cf468ee12a21587a8cfd37e65c64cca4334e5391 |
| SHA256 | 632ce648e24cfa866773ebab648876280ff73d91884956f1fef286e0ad9659e2 |
| SHA512 | 4cb55bde63542e0724a6d28bb415c3c4425ab9feec181b7ac7aab269b919fb811ab9316144b95569c2834909a2b26d7cd8b537940fae1839fddbbcd0016575bd |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 80c38f1a5703c35849a323ae6a0231e7 |
| SHA1 | 175083ec3b382696f1a4b4df5c3285a24b220f90 |
| SHA256 | a5fff8a70546fe354c795e437f636d5279cd9f42e7373bfe80fe071a53a84179 |
| SHA512 | 0110484595c2a5f94ea2602d069776bc366e0d73f928e476bf199aa806990d21fdc4dfdd2c99d82d13ecc740acfc6b332eac4b55a2ac84e3b4f7e1bee48213bd |
/data/user/0/edward.org/databases/google_app_measurement_local.db
| MD5 | d9cf75fdd1c2292d986f6c3d5d60f2c8 |
| SHA1 | 07ecb1d3a26d952ae5fecf54f36699ab498510b1 |
| SHA256 | 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a |
| SHA512 | 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | baa5c6eb611be1d4e83892243a479db8 |
| SHA1 | 5a68b27bb140085e165c8a7d20cf87774008f5ee |
| SHA256 | 71c656f75380511f187fe3c44fe0f6e07fb10733cf72505525cefa21457e3a20 |
| SHA512 | 5255afa01b2899900360d5c0cac1b348835d6ce94ae34d40fcbdfca44b7182cdeaa8c15edae4ecaf214e3648d92b91da2053375d3bd650206dc2ab749fd9b68d |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 9d931d63817344d38bd61426a6a68756 |
| SHA1 | 91ea2e55180d11529e9e5fa44c258a142301fd53 |
| SHA256 | 27bcdb98978dd71a85bb9dfd9c694451dadfb0a11d43ca9ace99290d54901a01 |
| SHA512 | 3338028b3c3a11c099aa32618e7179b58eda998470f1ff178339f3bca94f4f34ac402b2813a0f43792fae35904bac07abc819449a8c319a4419e3209ee528d0f |
/data/user/0/edward.org/files/PersistedInstallation4159754368490907741tmp
| MD5 | 0e54bcd9009de6e0d827001d8900a22d |
| SHA1 | 96c15035372153c496b026f01056eb7bf23d41e6 |
| SHA256 | 0f42015097951a98fb3902ec86f103e31e57f3941cf831863a816e52abd961e8 |
| SHA512 | dee190af47f4f32cbbc17ade8995fc6a065ebde3779bdb083d10a8fe254612a329ebabcde0a15dc8a1ca35642e8656fe85a7e286061ec2329a035d6af00dba2a |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 7805e5a025af40b446be38392f30b51f |
| SHA1 | 969bad9db97c2388e702acf9ebc680112d0ef811 |
| SHA256 | 78f34d2b91c49808544e12880ecc9db26120ffd7ca507b2ae7bf4eb611e0f475 |
| SHA512 | 3ea0e7a0d9d7f73986041d80b0c1d75e7f6b7c4ae1d379c7e8a9fc724d731150c614d84abbb6a82a6413eeedeed49dd4a6129545e272a2886d3ff58e4d182d31 |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 277c4986bc9e9b96d56e1f7db31d9acb |
| SHA1 | 63a45754526ba91bbc41296b60dcbf04d830878c |
| SHA256 | f11fa27f34b8878427218973adea8f62ab148a14d682cdd4e5583b8d00d70528 |
| SHA512 | 5a06abae0f594c101c79338c14840a23a569e23190aa139155ba71abdd19669a560457ad99fd92c62e5072b6b06049a98cefd228f6a0fd28156786f91f45c223 |
/data/user/0/edward.org/databases/google_app_measurement_local.db-journal
| MD5 | 244a33628200e941722fd51c86fc63a1 |
| SHA1 | c5e50088133c520c582bcf272ccb17ff47b3dec6 |
| SHA256 | 18503d9d52432b6abb49c6195841a5a80fb9970d8883972d6ecc5bbf50cc7bbd |
| SHA512 | 71aa051d095fa3977c1dc1e7e28d824ad902b003861e85afb17a79d6be0f5cde2bfd3ec82340c3f72e2394194c19125056c403e78cbd84985776bae68d9e6b20 |
/data/user/0/edward.org/databases/google_app_measurement_local.db
| MD5 | 31e216ca898343d2615faed23220466d |
| SHA1 | 81d03adb6b458417844af11d50204e5b85a09b20 |
| SHA256 | 9e4333ccbf73de7ce78f97250ac669a3d20e29d36315c097accd8d96fcc8b20f |
| SHA512 | 006afd4805fb61c0d636238d0132ccdd9e022c9dd9e4670572597de2768f1d98f0117c89e7fa5ec3ce1d093b443f13d80f59849131ea1c4f74c7346d750750b9 |
/data/user/0/edward.org/databases/google_app_measurement_local.db
| MD5 | f859e7af653d1bdf701e5f1c846cf1f3 |
| SHA1 | d3d6f4ee9689a9ba3f03f9e08cbbc9f1f9166cc1 |
| SHA256 | cda83b8c92f481befe079e0183210fcc5fd22d3af3af5fb45e549ad82d876c0d |
| SHA512 | 9fa550eddc27712a1bc236b53a42468a4bea112682ed24916b4461ccabe1f2bacca9b899240c661cb4dc60d37e424939a81fc746d39a4989aad073d7edce98bf |
/data/user/0/edward.org/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/user/0/edward.org/databases/google_app_measurement_local.db
| MD5 | e8c38bce9f683b804e516da1fd03217a |
| SHA1 | 37b0236e6247fa9e022f65045ac9a020f22e3ab3 |
| SHA256 | 08553288b4a75916bc828c8d96f67f875994f437af406bb35abbf49fc1d7d15e |
| SHA512 | 6cc6b9741305fe653587cf4fbcd42b791dab1457668d1097cb284959e73369c9057e335e9223d21383102f1227e7cbc52d8c6d1e2f7509b8463b8a7ded1beeea |
/data/user/0/edward.org/databases/google_app_measurement_local.db
| MD5 | de82e2c94d2718988804b035a46d17b1 |
| SHA1 | 705f5ff19093ad209f2a666085d6ccaed3bf58a4 |
| SHA256 | 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39 |
| SHA512 | 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e |