Malware Analysis Report

2025-01-19 05:55

Sample ID 231219-3n4ehahben
Target 6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8
SHA256 6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8

Threat Level: Known bad

The file 6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-19 23:40

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-19 23:40

Reported

2023-12-20 09:10

Platform

android-x86-arm-20231215-en

Max time kernel

2256248s

Max time network

130s

Command Line

Rahbar.Api

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Rahbar.Api

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 206.187.250.142.in-addr.arpa udp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
FR 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 fjzgsgsbusnak.gq udp

Files

/data/data/Rahbar.Api/files/PersistedInstallation7559825617833673370tmp

MD5 449203f3918794a41c659b3f9ad58ee4
SHA1 561e7ef2e69dab8a2171ac8f4093ba787bebb8f9
SHA256 9414333e2fa6b2a034f6f7ebdb77b0a4d1de5e69bcfce4c3b3efcf9eb7f02bf6
SHA512 7be192b9b399cba3be8bbbb8d6f05fac7d573cdc1fc007a254d2465e6745c7cc540037d738a9b6b6f1e938e3422c4c27befaf759118c4634287caf532c9911c5

/data/data/Rahbar.Api/files/PersistedInstallation8230663820699797935tmp

MD5 8aa1db75dc5b2a58bc3afd10182b4af3
SHA1 b15dfeb936dc1a2af74f61cc63a0efa0a78f55c6
SHA256 0b9b1e71d848c11f50aad0e66b3ae03ab49594a28f88b5b687c1b01459a493e0
SHA512 adf76962757687ea7392d4411075881559de88d1e23494b14a7669e5a17801e4854ad671c04aae43632c9c3c6d6a284bc0436980ff8f648b7a3008d592450573

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 fa63c33e93b44151fb9bdec0e46ac9e5
SHA1 828687244f3482c032294614fe0712a161f219e0
SHA256 aa66db4ac400786fbc6510951168a328d490c609c0157588d775e447a28d1e83
SHA512 3a979d8ce2c201695b70137095f643a220cf8a5b58d1a7ec3e2339b5769cb82e511033582a5a491b418311536f7726709e731a9b0f47febd1d394a3a9a07c8ae

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-wal

MD5 e58d10c56947f6657a6c37443de267b3
SHA1 3f932c15f87860be1d9c68a67fbb38480de5e1ff
SHA256 67ce671a88afc486519784c1eb31d8e52e177fba9427658497984dd56235c87c
SHA512 966262a6588dbee6c84fa7384587af91a62e06b8a2c438d6f7fa155c7eabca7cd633dfbd0079f1ac8c852f1c20668a353f2538a75a93face5f831e17a52eb52f

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 ccfce96a575419a24837ae85259682c8
SHA1 9e79faff9ee4d9b755d36446dcd7769cf77e04dd
SHA256 e61fced846404a187bb96ad14779d307a3a606b73ff5efdd3d1746be665d062c
SHA512 534244fe47440dd53b9e8c74b73718ed355188833688cd26df879697b702085f18fd624b083f9f7b32d2782fedd8395666dc554813a7bca9fa82407a64965260

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-wal

MD5 264eba2d65e711f64e8efcdb2a5cee55
SHA1 da2c684f13d13be0864e9cf8e1268a02410e8eba
SHA256 16e26e65830fda1497c74f338af62fd9d1c0d88e2c2080bcc4069084b11c912a
SHA512 ccd977184860556dcc969f61cdda82b0bb81d5c82355b6220fe9b1b7dd4df33cb56c4c1a26b32da10750b7e281293c3630528266ce1b9b80c6d3dfbabdfb3b7f

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 c35e849e905ca70ee5270e4e7755c76a
SHA1 e598462a686ff8c56b279ae7d3c3fa787800731a
SHA256 4222098e9b5a25840fc897b50c2f6b6db2d7f2f4024ddca28cd924d10377736c
SHA512 f63be30fac3f40d201cc272cdf2e0a07b31a54e77a6d9d8cbbd422165dac29f62251b78002fab4cb927bfe0c4c335e30f69d2c7819ae33ed8f975f7856e56063

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-wal

MD5 872fdb708d243fd00bb65046350bbd84
SHA1 7bf56b39660d4119c5e69fa5c4bbbe7dbfd3119d
SHA256 f9e272bdf1a0615ed1e2f79666f4730a7850704b0ebe6b05a4b7cb5dacaa7704
SHA512 96153f8e1c8f3fe1797c5fd0412ffd199ecc1c2117d4417a63cbcb00447fe784c7e4a0d6c1443c493ea1c78cf6ef66ab26f8bf5fed506fbea1c23629bc40ed97

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 cbc59e0868dd8c2c9c8bafc48ded5f1d
SHA1 4e750586e4e1205e3977338602530005bb2be7f9
SHA256 530f59b7c02a39d7cbbf4ed9721b6be2cf8a2f2ea5323d0be23dfbf2093e4087
SHA512 e9be6849da4d22c79726e7960126a2740ee9911e2008e4b7a9162fa6be17630dd639b83404722a197540f830bc1970cd9b1a2a94b32eaa149401b04fab822a21

/data/data/Rahbar.Api/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-wal

MD5 9c8dd1a77db84ba91c39e6864606aa4a
SHA1 e7d9c7d2373b85e3fbd2167e7b02d193a1514808
SHA256 f03fec3e2e54f36f12f22681dcffdd91d0bd703a1db979e5ffcbba22a8f8eb10
SHA512 01d9453b58200879c225116095482ad87b5caa32eeb9ede883daf93b098deb3ab3b0e72f9e610c4a3a1d95d3d200c96b530b238f11589373a54d38b3616ca5d3

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 755077fb5dfe5bfde6106033877587d2
SHA1 9b81f21f8ff31793880cb24bdde2f2f73d05d3ec
SHA256 62c46d716cce74fd47423a33768f3925d897524b345f1aa3ef068f01fa452d57
SHA512 029e2e00db1eed31bdb36efe2cce1c6cbfe283f5d4ff5805accc13166ef7c4418e28f694afd621d6b7d48af3865a631a72966821df3c971862d089bc4bbcce10

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-19 23:40

Reported

2023-12-20 08:33

Platform

android-x64-20231215-en

Max time kernel

2254016s

Max time network

147s

Command Line

Rahbar.Api

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

Rahbar.Api

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.180.250.142.in-addr.arpa udp
FR 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 fjzgsgsbusnak.gq udp
GB 172.217.169.36:443 tcp
GB 172.217.169.36:443 tcp

Files

/data/data/Rahbar.Api/files/PersistedInstallation1734803341426127073tmp

MD5 82b0ac9e455cc1327aa99ca6da43ad18
SHA1 f3c278a62a90b48a45b781b9487eb199c671040a
SHA256 166e47931e213dadfc1956679a62998471e8038a0026515703feaa90aed29ca1
SHA512 14538a38682901d647c57f99a3e8c7316aa7f55f7336460e74246ae129295d9a69556457016f00674f9ef4d8775494cece0623ec2cae8455b6744e5bb8b5187b

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 ddbf6511b4cdf4d9a5647c7e4158be77
SHA1 862c75372c52f3bd1e05c8812696ca266638d6e6
SHA256 3e875a984ae256cb5bb1cfa44e4733c92675d26c9a569cdce44fadc8e65fca75
SHA512 0d22c379f91cbf31ea16df354df7d8a05c8d1edcf75b0bc31d466197d5229ba21ce9736c0786483d51dac617eb49ce5519390cfd5ac1516d4366d28ec3279bdc

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 9a533dbaa3eb64842e700710afd77d52
SHA1 463635e6edb3ca0f6307e552beba810ed1b5b681
SHA256 0f02be306ba3cc9ec9c5bf104d9a56119cfd3fd3fe54d492e5174cdd7fcf6186
SHA512 078276e5d7e370e024b682964bb4358e22115b2f192fda2020d5ed80afea5fbfc4a5cd2769550199d08f688e8d6c4c2bb59685bc58568f846f8055494d09bd71

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 09814e98d7b6b67128d9162672d2f0cd
SHA1 8df60b20c4435263778da39f8ede1f2928ac7b1c
SHA256 29defaecf829893e7c6d9c249c215b0f8b06c09cc10c4e76d0c5c8cbec2681c7
SHA512 e85a21e9ff8ef8b188f87e5826a32e4cf21d6cfc77b85b52df2f167ddc684378097da92d15fb88785fb6949d321c0b68fabce6087656f345eb3393a734d34421

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 ccd14705f304a8efa5d5751f4164cb98
SHA1 e5a5706841f9f0f329e6f3a85cf6e73639b84d6c
SHA256 33c6d59607f45636b5a5ec86081a3720f8c6e1315ca38fb225e1d2d796c5edfd
SHA512 2a05fc257792775d8758f0e441c1919f19acc833de2052975ba6f0cbc0fdcb215b240c103ce9fe1ac43a8f71192fd57488d9bc8720135f111c1f23c50e97aec6

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 7f28e7da8e062d2ab1c51669c344d313
SHA1 498189abc4baa94648965ca2ed11594f106a75d5
SHA256 5cdfe6e39fc869bfc27eff84bfb0152191ba1cdd45a8d35f9c1d815c1b4280fb
SHA512 7a95d09f501727e6ee3cd37dc15dc33cdf061428463c39ad51d1d4157753205abb3030f52b15fbdd7ed87c47077021ee9955cf7aa200ea3ad234be9b4f704e3e

/data/data/Rahbar.Api/files/PersistedInstallation3139034827195606344tmp

MD5 a7a74992e56cf567d150f6faf175f1ea
SHA1 f92bbded480a40b4603473e6f7285356c62d6133
SHA256 c6e90bfc1a7e27173452713802458015ba497df0a3e7939f1a95fb1b1008c618
SHA512 f8485880dcbed1ec45a49bab0a7ed26ab295290a1193e409629282dd202a1d2afb69269e4ce93586f2a985ad23aae7fa817dbdd19e9e324a2a59d6e9607ae534

/data/data/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 8f468b31eb4c6565da2b00d25cf0d22e
SHA1 209b76379faccf45ce378d05a8ce97018822fb46
SHA256 46d12a52154171fed5ad5911a8cae4b6f1aa5387333f088b563e2b0cda575291
SHA512 0ca35b0ca87f2874bce5355fe1eff665730554a4597fb8d74d945dcad996a3eafaff97c19eb4330af171efc91bd4a5ee99365df0a5a738eba6b2c97af3d526d0

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 b835ea2ee947b9d3783211b21bdb98d8
SHA1 ed3795ad41e0adb54fdcfbab258d2fd795b70623
SHA256 641a99b121dc84f199bd4f44cee2065b04ecaa2c11aa8aa7e99cba7bd375f347
SHA512 a561925e5b5e5ca1a998b99a4eaaefda544d7bd70ee51ada154a9d6f4dddef7a7d7efb3f745d1794ffc5f18be0b19adaffa03498bb9e314671cfa76a91dbd81a

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 147d98e0cedd1a2eb68a336d51f9dc7c
SHA1 799e223b0b43bdda4fa574fb6439d27755d729b3
SHA256 204a57c767bbba03f98b34af92af044325bf1fbae01aa13c24354a5e89497a43
SHA512 e1f04b424177e6dd7b772ef96e30cf9d290c8008a74ce5e3ae651c281115845b5eb2b9ad1d18b7989f81f113fb95983e4cd8575596f01a61b32be5fe429ebbe8

/data/data/Rahbar.Api/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Rahbar.Api/databases/google_app_measurement_local.db

MD5 77cd4c3b4417f638212e96de276f819f
SHA1 e3416a74c070d13b76a1d1f318abdb088230602f
SHA256 c1ad9195090c42136a06d91339e39869c5c7fa636a7d6cf7499efd643d677f00
SHA512 ba7280cce78036551f34a3b8f5c3db301116e6b770816c90e2462c64d656ab052788afb44da0b13480389cce3894a532dfd0fff84c3adb1e7bd1f907648d1f2a

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-19 23:40

Reported

2023-12-20 08:33

Platform

android-x64-arm64-20231215-en

Max time kernel

2254023s

Max time network

131s

Command Line

Rahbar.Api

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

Rahbar.Api

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 udp
FR 216.58.201.110:443 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.180.250.142.in-addr.arpa udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
FR 216.58.201.110:443 android.apis.google.com tcp
US 1.1.1.1:53 fjzgsgsbusnak.gq udp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/user/0/Rahbar.Api/files/PersistedInstallation7246512705293429302tmp

MD5 7cf5538a042a8e1709e6efc419c9b328
SHA1 0ffbe86574b0f2cd43a34fdfa99515a1499802f6
SHA256 394244490fc445ce9c87f64b1c7cfc048d862519a275138e1270a7ee730e9873
SHA512 7897e612b02faeffdf74321d652261dc44882de6e75ebd4c1813a11f25cdbd41508bd86733a9a09cfb085d1f601aee449214cd74aff7a47eca0470a4e6163f52

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 113199929d759ec13b8dcfcef6410d80
SHA1 c850f938c8605463b9860cb228a6cdfea05ac4df
SHA256 8ab3cad9b598df4a20b6c0f5bffb1860109a89bc84197288a64e451f33ddd0f9
SHA512 fcd26021e97d9967c8dfc376d6f92c7effed1a3384df0307d378c05be96f5a1cf180dc5f4966af71da05fa96be9032d839fac10307740fbce33a2d13bdeb2db6

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 73dde037d43818d6392e51665bee0446
SHA1 79d2b7aaad055aaa21aa371d61b05684c2164073
SHA256 d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be
SHA512 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 d3647c421c8ac4d006c8e45ca5e3c172
SHA1 b5cf4ec97d701a351e7350deaf8cf85f00a800af
SHA256 a7d7cce943b9e2ac0932f4104bc34401248d03dddfd1ee6f28e2d6525d2b7618
SHA512 edf3da57dd71cb024587df6db94b8dac9787c3f4c6945e631192d125b22a55e82c01307805c0bb3aae06dc61d33af5f9a7d4d59f0f3b10b1aa66e9c8d2a2f921

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 794a4ac0b941d1df7dac5e7dee6cad6b
SHA1 5f6a3f74b533a021abb8ec3510406e3b897ce47e
SHA256 e5e1d91ae5211cf55b1e6d8a06e33e8149a65d4b5337fb4fe6644aa7b3900376
SHA512 f391765b13f23db86605528797b74293f08bfe54c0332ed1fe7f3f12cad23ddd5a9613dc965a7232b27741b38ccc64ed84cc134a8f04ff0ff1aef3df6f475506

/data/user/0/Rahbar.Api/files/PersistedInstallation366454562248025623tmp

MD5 c135258320d7cbeccab1124130768cba
SHA1 5b170c885b33fea51d6847d8ee9eeff406827fdc
SHA256 26010316fbf60e29be1742a9f42b9c54a164a359698d062732ed92a816874bea
SHA512 ac1dc540383b42f315fa5154122f9f7bf374741b3f7bc21f014669f4e0f140eb85684372f3ee11c4358bb2c4ea6f6e242d3a277e36210775ec43f320570f2aea

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 c6d42ed52ace1241ad750eb6f7031e00
SHA1 ad5aed6f6347ab25e9280cd42efcc7dad40c3978
SHA256 e02e33ca8629a7492594900a8e84f247e9a7503889161475b50e74f7745270a0
SHA512 ad7eb6f41c7547805959a4e9c2453ea6fc91b3e21549b94c907d9e81391bbd1c5bdc3f1f369192f0651f8a464459dff1dff8e9feab6e3e49993119828f127d3c

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db-journal

MD5 6e084fbde2b4a1ea512afc2ab5e8ba86
SHA1 9ed65dc0fb40ab4dd08d69bd9126a335ba145ebc
SHA256 7e50b331e383e924f5261724115120464b3c8dd36d979658d89841df687a3b30
SHA512 bb8911071d466b08971c0573bf7e4831f1ebd75e699b4cdabf4bde4fb6e97a01c543470865c50a3c0f1d613c79652a14d86c449fa78ef813acb5e1db6f0a0206

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 9c2c0247dceb2dfac49a76e4c1bd198f
SHA1 1776061dc05b9994472acb1697065ce861e15bf4
SHA256 6c28a99349de64d41f328a76c8c422b5443d3b1fe9eb3fd7af93cd44d363220d
SHA512 ad6f271bc749b107ef6dac6ee93c9d474ac7bab523e3255d978c9f200e6059fc01054315ce538ff8b910a15389886df20586752badd9292d352cc074203e758b

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 45515afc8886183114a1f0a6f922a631
SHA1 8d55afe72416620336da7f4be463e2f83bf948da
SHA256 8f6cd1223a86c7d23a92b91abf89ea92058ad8085e927c653ad441d3424296ca
SHA512 ae4866eae87dfba8e04d80f36fd55d1bdc0a5fc53c55158a5ba7f187c541d6bfcb9aac017f5060d3ee403fe73862a53d39fee89a2273f7426d80622c4c5c94a7

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 49393d2330d8de8e28b60c3e18a495f4
SHA1 b4f57295cbd2c3fb84bca4af5ea7ff3a76bd7200
SHA256 d7b2577612804654ebe61552797b24d68c04459201da4061e93dbe4e87a30b0a
SHA512 14990af93fd0a93012f8d74b2103c7d39620d52733df1c89e43d31db3f640339e7761c2f4c65763b61a707fa73d1103f0a1c93ec30a1f3c2f403405303cd8fa3

/data/user/0/Rahbar.Api/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 7516cba07e263ef7806ee15b168350e2
SHA1 ef5e953f4a16114966b4679c7fe01ec60e92fd28
SHA256 a618061640d0ad24249855c5ae8130078b2b64233b03fca5c94020183d3e3ef4
SHA512 fff0d64ceaf24f1e8c31c6c5386f8f92ac9ca5f7d07777eab9f3384c2575e872261f90edd6ecdc7ce52414fc9cb00091ede8efc0dcdde3b96ef17a5b05efe45e

/data/user/0/Rahbar.Api/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e