Malware Analysis Report

2025-01-19 06:24

Sample ID 231219-3lwxmsbgf8
Target 6d61844ed0f9935e83a914de327b5a6cd17564ae7b4fc0d53d16fb63abac482e
SHA256 6d61844ed0f9935e83a914de327b5a6cd17564ae7b4fc0d53d16fb63abac482e
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

6d61844ed0f9935e83a914de327b5a6cd17564ae7b4fc0d53d16fb63abac482e

Threat Level: Known bad

The file 6d61844ed0f9935e83a914de327b5a6cd17564ae7b4fc0d53d16fb63abac482e was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-19 23:36

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-19 23:36

Reported

2023-12-20 20:56

Platform

android-x86-arm-20231215-en

Max time kernel

2298571s

Max time network

129s

Command Line

com.Pesarbad.p

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.Pesarbad.p

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 238.187.250.142.in-addr.arpa udp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp
US 1.1.1.1:53 arsam.nlsrv.xyz udp

Files

/data/data/com.Pesarbad.p/files/PersistedInstallation1567388988483427076tmp

MD5 0d4b5456f26622e81142d09d683d3fdf
SHA1 2f6ff0af214c4250fcfec179e7c73dc2fbd9bcfe
SHA256 37add0c22e2b49d3319eb036151117ea1e37e637fd3233913c33f5c99d77f87e
SHA512 b90922ff5ebd9f1a6218b35fcfe6315cabf764018517dcb44a215a4a58e5fab841fa31a44dbbb71b3b96855438955eb04b20f7eec9ee8cb1b6c61d7c763fc00c

/data/data/com.Pesarbad.p/files/PersistedInstallation6060745091829365450tmp

MD5 dff512f391f23a71b76890e80ccf4488
SHA1 90e03ff6138ab0c86c0b88025a453a82077d6b40
SHA256 15958e9513568a2bb8cc0f3974df82f549c5383a07244f7fd1d8bbe166a668db
SHA512 5d1fb888c8cb202990ed5b795dbecc76dc9b4177764dd6c196e2a309c6fba3c1f45dbb1c7a3227ee493e76280f4be7144ca8cf5dd229bed04b59b3ea4e7c5b52

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 421d9900e018abc09e3d5ca4d3cdf712
SHA1 68653520ee91e8f00ec208bccad32c4c34fafc0b
SHA256 895492f33638cf6dba13ffdc7faa103c9780bfe15e8cfbc86b554582cdd77a86
SHA512 538f84b6e619b42d286e79dfd519ab6375d145409c051c4254a717b5dd0ca4f64ffbfc793fad422cc43d8b4c1b01aa43fb2a13828c0f414d125672be663b52c8

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-wal

MD5 8117c0ba7801fbce8a31eac43669b8aa
SHA1 366740f4dd6613517ea979da9490e317c0bcb295
SHA256 823e17d898df0065c67532c1691149f56d0b1b5ad8416cddffea17f5efdba6ec
SHA512 fb0507ad5d49868a199b40a4bfab6380a4bccaa89e3232896f18a552d7e04904dabce2696427c0b95581e6fa0b6505f74d0c0de98b0ded1ffb8243d7615cc7b2

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-wal

MD5 3029c3e3906b7cda1cc9435c6782de43
SHA1 59e6b22ddd3e6d757eea7dff28cd39a9726ca8e7
SHA256 45f448bc6a19f2867a32f102fdc902a9a081d39047d8180152a8089eed551c49
SHA512 ec9acb57d1c58840592c3c0530ccf5ddee41fb740cb6e955cbe0613f231b18e2e6c8c4372569eeac7ed280e27fa7738506683d995dc1ba8c64f573a1c88871c4

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 db2135e745171981191415e7adf41d1a
SHA1 24840ec4de83393ece3d54a8ef9667ab61868312
SHA256 9e93b2c8f52e35757b2af9bd2813acf5c18ebbedb1299815116ab405ab4e0eb7
SHA512 1c0a8a263ccc3c4362fa5a88cc2f3318fff1e84b6be5ec01db86d1a683c5bb944015acf54623afc8f3e2b92764cf3707e124e7450f20af9a9e69cc633c710897

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-wal

MD5 fdd3b79f42b3ff197a6cb4f6016cc137
SHA1 6f123010dd140d67729e52a5e7cd37365fc5312f
SHA256 77e326458d8e443ea16973cb1899eae683ac34dd54d2ace1ce55be89ac9495f0
SHA512 52236c7e2320fd48bb040f997a0d3c29fa8872ba8d455da9acc0c688accb9b36a10eb403e7a69fffa5d0fdaa0110b0d3343df1eb7d08b926d0d8203042ff7dc2

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 e762af318030ba5ed2b8cdf85016c64a
SHA1 b8a830711341e9998c3d87fcc8da17c1084f7865
SHA256 ba09b0378b47bfbc9d164211704895eecbfb83f16db7b423fa5b324f61f66196
SHA512 57f9d94fbb1823e5f2a361a6d034d2d8a7c45376a09c8124587aa991a380622412b833755b833082c8e33493f856a362ac6b68df53a13544d8ecb49517738c69

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-wal

MD5 da4c363ccbf238edc0a1666a7aa4b67d
SHA1 bdd58db88003716a8d8e7f682719448ec89f88e6
SHA256 aee5bb9df249634d4d07d8012f3fec4a23af5ff895eec736f8f53594920c9efd
SHA512 2701fc6f0d14212f8a985383a8238702b3a455ec757068c1e796756b3d905efcbbd7ee44297a24f6a97883882c897b7fd3e476b15a6e66048efd7b8107a4f660

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 6aac557a70c7ce9d2c0f497382aa94be
SHA1 6caa75fa70e4b3eb75e9f27153f750737c724f1b
SHA256 1750b95861e82fc2a429ee038f341b6709eab411701fbcd91061497be958a3e7
SHA512 4450a7ad0252f3244d6f8662af8b6df9543ee9793249de406e43b338f039a5c2407a14240fecdccec76eae296147be64930340793508c7c0bda8a2dad243df08

/data/data/com.Pesarbad.p/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-wal

MD5 833c8a1c717c348282e580996fa24f11
SHA1 cc416919f41a9443fdc8b84b7ca3b7f58cd1134d
SHA256 f81a2b0cc0103d0699e8b4e74f2a8de0729c58fe00929cd548e54731a854dfa5
SHA512 4d42e73965ed833614dcab853363c2ac7f8df50604767d5d874fc0aa26d991fc0e6d5ff7c57954dd093dca2d242ae3b82a408e048ab4c6f04b43b3bda69bd216

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-19 23:36

Reported

2023-12-20 20:25

Platform

android-x64-20231215-en

Max time kernel

2296874s

Max time network

135s

Command Line

com.Pesarbad.p

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.Pesarbad.p

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
FR 216.58.201.104:443 ssl.google-analytics.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.187.228:443 tcp
GB 142.250.187.228:443 tcp

Files

/data/data/com.Pesarbad.p/files/PersistedInstallation4923822876935958892tmp

MD5 b354d869aae013ecb892040175466882
SHA1 14210b4c7eae5ba25bef01e2e1635017ce23674f
SHA256 814d313559572ed37a0253b6c8f040c5832714272178fc48402b1689ee97d352
SHA512 134a6376b086a6b5fc4d484966441bcca784cb251367c6b3477cd3adc5d7d6392c26925f2976e43252fa354e5eac2e8fce53069eb152b62ae4d37280c66898e5

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 30214513e9db9813f01442a89b6aae33
SHA1 32029bb1e24d8cb0e56ffb603004212fcec22ba6
SHA256 a301c5a51962fa549b44ab9082757a783bfa281b71b5543533b5c8c343c439f0
SHA512 6b8ddd0bd21ffeffd4938ce65a511c77534176670ad1138325752d4f1c6e6832b3b403425727643c307b5e714967f78d80d9d0403df9895a73c243309ddda819

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 974031ba67382c8427e76a598392d038
SHA1 5e259520f939c679f66c104ebba2498fe0d5988c
SHA256 9242acec51d3b7ad0bda3ce3dcf27acd3088c483f47c96509f093485e74d1756
SHA512 e5928005a453b0c987b241ea7ab49393e8edb0226bfced96f2c5ac56aab3c4d51e985b45f8b76576f48f3305059cf2f07720884b227da39211977e91731b906e

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 b3cbbcd8907870c518a73c708a4f0d56
SHA1 ed2518dcc46c9d5e959bb38ff11a557888f5c8fe
SHA256 cdf07c85bcadd3f89e8d742131187361f44fe0c170c11baeb084575e41c47ac0
SHA512 519d1992e57bc0cb8eaa2fa0f33a9f92d1c171eb53340d6f94292148b3ec76688bc97b3bc3fbd9a4f7e719a3454e261bc5205a2ad230f6820581392b2c6029e5

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 b4231dadc422dbc234ff01295e1e883f
SHA1 d7019cccdf40f1b145f24e26a8a06553c0d7e130
SHA256 ddf29cd09ce54e019f8621f1eb4a0a7e6091a0403ce40fecad5a94494ff47826
SHA512 bdb84a6fc596e19390a21f3843f6a7708389a1dd74327a752aa658e11c2ae3ada4157f5d76a6318a7f21ba960c2a0968b72b62f15069e055acad49c6a667d4bf

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 15daac01dd032dadcc9d42884723cb5d
SHA1 f64ad3ffe63284fa925daa36d0c926d5e6fb27fe
SHA256 a82c6e8ccb2f7fb822672e972df15b255e92cd3368482ab1aa04660081f04fef
SHA512 010bd6c19d925dd2366cba2bed58bcef8ca2246f49e05bb7f947655f0ff61b9705f76da1a00034f80d98d072ece3d5ba3f85d4948c35631b0ef417e8589644be

/data/data/com.Pesarbad.p/files/PersistedInstallation7887660591238804066tmp

MD5 0a48d1089b5f2eb356a744e0facca1f1
SHA1 a3e7f09c7e656c52989d646a256e10cf7c054903
SHA256 c207e300d5fe713e94524b2d5d347f613b8a16ce1576695240fe65c830461eb6
SHA512 34f6c59bdd93679386ac2bb42c192cf2e557d68d107b5a91948c07af69785bad995a95f831c9c88b67f3d23e34fe2d1ff5b015e382cc48756351920646c1122f

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 83532a224ce95ce1f473ce2270f87205
SHA1 00c2e02c74d5c3a57ef040bf312fc60326ce5591
SHA256 080f5c1692cd3dca7c220079f9437c5d9e69c231cd2be36d23cf426bde19b24f
SHA512 2e19c52d377fad818c1b4557589590c1a489641c9bd28ef47fb20fb901c1c08bc27d7903375d1619cee80ed88897a20f7e408977142746ff5cd66ec8d0f69ab6

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 99626a2199bb6759003280b8a8cd03bf
SHA1 a745d8a53e8f9439f29dd0c9f61acacc8dce74c8
SHA256 667f768e60fb6a25a599aa678387fc7c761cb7468ec7569faf2d27e9f1a6854c
SHA512 f91c236a93085cbe381b34e465ab6746113ffed478f65906997f49a36c2b03b8edc08f903a0d9a6597ccad9ce99b81d8c5835309a4e0a72c835245feb75ac506

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 ab7cc8b5c70acda67a6bd3b763d7ea6a
SHA1 e97eb644df19c680adf1d0aa12c28fa830bf1c0b
SHA256 ba6c9eebb0d2e25cc02a2199c53621c504d52553864a59f784dcdaae4f084fd3
SHA512 678a60f8f4c42dc9e39bd40ccc21cd4ecf08af84a29f12419cfd2c811d9642216bfc2fc1df1f812fd57b0cf516aba2c204a3c795222ca70e7f28dc94b34fd982

/data/data/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 06d9e4a8d8820180bcd6753c713ee42d
SHA1 da9b8867772e70f78cdb90304a6ed24cf3f18715
SHA256 abdf9981f6a6b5fb7f9e10516973e23df30bf97f77bb16d12d964927d8aaf8c3
SHA512 235d3936068fa877cd1fe5206acdedf374649d2c2c40d13b626f8e1269985e8a18b5280537731e2cc161f21ffeb428f67437a7f2fbd9ffeb5b2cb6637d6904b0

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-19 23:36

Reported

2023-12-20 20:25

Platform

android-x64-arm64-20231215-en

Max time kernel

2296875s

Max time network

133s

Command Line

com.Pesarbad.p

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

com.Pesarbad.p

Network

Country Destination Domain Proto
GB 216.58.213.14:443 tcp
GB 216.58.213.14:443 tcp
GB 216.58.213.14:443 tcp
GB 142.250.187.234:443 udp
N/A 224.0.0.251:5353 udp
GB 142.250.187.238:443 udp
GB 142.250.187.234:443 tcp
GB 142.250.187.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 arsam.nlsrv.xyz udp
FR 216.58.201.100:443 tcp
FR 216.58.201.100:443 tcp

Files

/data/user/0/com.Pesarbad.p/files/PersistedInstallation2478212459468000842tmp

MD5 b53edd513733bb23393e33b061c63e18
SHA1 69fbf82dca6373bc6bd3a2f229e012acd5e305ca
SHA256 86024d26c155488b718cb2ac9fd632cc8f23c39f9cf646e572aa48d15425ef9e
SHA512 62450302e86105ffc3bac8efdcbfae27713bd87f3c69317044b33a714c0589d7fc526ac4f4d1fa9528ca0f74650e5d562052962bd9feffd8c2c9592599a78a00

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 1234851e3f5dc013c45a2d38d367d4e5
SHA1 4269a7b2de8502d887ca1545a003b2573fd68ab0
SHA256 ea94c007234e1e96c5b3ce1cf1251615df6ce63704569cf8fbed89c503ef7f50
SHA512 6d4c2ab4051e90ee20d85a0ab2077d5f6862c94b637188cceb92225047f5ad5df7b8c4563b48ae22408c9cbf25fb8669e6c88018c336f5e1bb57494935a4b0d0

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 96e2f5b043ee7fcab79392b4a94b6df4
SHA1 679b082ec4799d0da6f15113ba6de75e35265512
SHA256 5366bc3bdad7b562022d4a555e7bbd6e52a9e099cad4e63268af4d6dc26da850
SHA512 715a3f9231b61eaa37e313bd96e7af721493d0fa73c668a593fdfe0a077136eeefcd357111fcd15bf42e73d57a9d305fa9b0c4192ddeccea02efe6f7d899dd97

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 966addd0a704cd52b04cfd0beb9fd04f
SHA1 79bdf4ae4d18ffac00ac984349f0066b2bc52207
SHA256 f987844ee5e865d366e289e8b5b15b0b7b8be6615a72352e5cc0c4033196d40c
SHA512 761267b43b7683526f71bf8db1d4007354ff0447e5648962c17641f9538a53b38b2fb2e3fce1ac40ee5e09666463fd1ff8c125646d0d210a96756880529a29fb

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 06d85653e7d26d7befa2dc7b6ac0e7fd
SHA1 a0b57cb8f0673755010e433bf17a552333a41aea
SHA256 80185ea3d712d3b6cd4be23fb01577be880cc6127ac99eba36b3dd1a583afa74
SHA512 e738a68548d6bee7f85e11ef2a9bcab365d11b0d587e23703252a5eba13b03afdea8ecdc943d15d575f0713f789e9625ec46e614afc3152e73b8934f726b45e1

/data/user/0/com.Pesarbad.p/files/PersistedInstallation2254398693488621891tmp

MD5 9b82d0cbe2d18fab4cd6c7f70a0f403c
SHA1 c7f4bd98d863306d843a5876b0e8400e88b5c991
SHA256 77273df47f78216111f69daf235d133fdad4f1daf8a0a23016b05ac5ca374b39
SHA512 3ccc4e67dd186b7dfea0cbc41de9b62bc12532e1aa257026dea73ef4067362bae88380f509677d534461beccfecc34b3c63bc0d481f2b74372d56386daca0351

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 06ae7912c5ed40edc118740e840815bc
SHA1 cc31f9a151e7a78cd48ea4b31bb0da4ba1cbbb67
SHA256 3abb4a3551c10aff613fcbf5fc8e2f35a77fb8951982c15e3377570e19570183
SHA512 d7b539b6d10f3ad4a1971250fa54e6b30a9dc3a2689722b23b475e79196bd7fac9a3ead6af43830b2703de8c8adf05104c13fe3d76c03d6d84151064c5e2201a

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db-journal

MD5 f5433c95e8ddf03b5178383c128a2e1b
SHA1 aa41369cc3601a2481ff6443c37e2784a4096759
SHA256 e86e85cf9f01cef85d7b90e3e8d9ec3a1dec22137195dd6211401c941330558b
SHA512 dc143a2dfdcd80b45afbcd24afa733782bee2e9eb31b59e0a36c5a6e8faa6f692923b90b4ff83dd52ff795d288426785779e563a8a6b4211102c62b619de6adf

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 71bcf83e06b9e6769242909b4a215372
SHA1 d6c4f41b299aa03bf6441f13a25cbcf2b3fa2537
SHA256 9ba3f27e09d0d62d059d734f53a647e132920c05f66e005c4b4a5664d9fbaae3
SHA512 7d0db83cac43bfc31f21eb183c61b8ecc667b790112488f07eae4b51706d3ba7c2eed22c45aaba06c6d8522936d32a61559556344d9120288d5bfd1505940950

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 291ca1715a2cfb4057627b5932830e9b
SHA1 a6d46c6344b14cdc4771514986612c7384db8ace
SHA256 7b1f2ca787262362542a8c957aead3275a88295f1c22358770cbaa91dabdd01d
SHA512 5f1984dd9d52f652519284a3168456e821010414aab7e3f20915efefb3c92d1e5af0b1f062c8c035691b3e78b6b605003f882b2e3d683fd8d4256a2558aa1243

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 f2fba3aa75f3f932f01dcf2c60c32a3d
SHA1 4ec2516621de105db015388e6da3f8faccfe5fe0
SHA256 11edae226870c2ad511e0d2cdc72c8f4d26b2959cdcdd6f773a43ee80b12bbbd
SHA512 e1a9d7e3e29e0683689b3cdb98079ca21fe4b3e6749a02d5f203f3195a76349c207875ae9ac79c5a078c0f8114bf4d15659f8d26bbf34dc2e929d4e87f72542b

/data/user/0/com.Pesarbad.p/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 0889d83b3e5d0445910a5f7814472bcd
SHA1 e0a2af0ad5791b117ee207becdeee36c5d32e783
SHA256 70a7a83ca78d1006f0c1def3c0588590a9d1d6f2784740c1db711f4f40be18e3
SHA512 27101fa052d0dae8c8fae959cdf82fe4eb142acd7d3e1727e2e20a6cb2e9ce35753c75a3e6e166d5c3b2dd17aeae201bdf2bdd95579b394535205c2044504639

/data/user/0/com.Pesarbad.p/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e