Malware Analysis Report

2025-01-19 06:24

Sample ID 231220-arjkaacafq
Target 74a667b1bbb053bf382d60e0356a41e6df4bb0147681e2e79aef0a6367a0bd35
SHA256 74a667b1bbb053bf382d60e0356a41e6df4bb0147681e2e79aef0a6367a0bd35
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

74a667b1bbb053bf382d60e0356a41e6df4bb0147681e2e79aef0a6367a0bd35

Threat Level: Known bad

The file 74a667b1bbb053bf382d60e0356a41e6df4bb0147681e2e79aef0a6367a0bd35 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-20 00:26

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-20 00:26

Reported

2023-12-20 13:48

Platform

android-x64-20231215-en

Max time kernel

2272924s

Max time network

153s

Command Line

normal.manoto

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

normal.manoto

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 46.200.250.142.in-addr.arpa udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp
US 1.1.1.1:53 glaknohjujm.ml udp
GB 216.58.212.202:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.187.206:443 tcp
FR 216.58.201.98:443 tcp

Files

/data/data/normal.manoto/files/PersistedInstallation4113167895663167958tmp

MD5 9f986fd1cedb4a05337268e2e3e85bc1
SHA1 2bd4f3072b9925249296eaaaab34db61c420c4f9
SHA256 10fb44eb65d3e8c5f3c0ecc6d7f81aac3d379c117f2cbd3b8c2a5eb7570e060f
SHA512 4ad6af14dfbcfb9b8d774491a064dff5cfb4d2508fb2450b6fe095fbfb544e46d02a620afc6b811460ec44d4e7e1295c8d5b6bb58c7572ded4fcba8aff1bdaae

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 d84f1d207561278d72d3a053d4b35f93
SHA1 13d82fba44d7159b0008490b145a3334e00ea8e1
SHA256 df16d3b42517e12e978dc72240c6e69088999551fa89e6de65dae18b2bf0da2f
SHA512 11736400d6ab0eea4f1aee7e9c1946ab1c358bc41ba88d3dca142cd3b4b7ede9e11b7c01a7ab5ae60389e3fd1d48c2d13c5aefc4f37091b15f003df3e8020c74

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 188c0542bc062e48b614e5ca8c1081af
SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 427dd538d8e2c59ec195d438aaa51493
SHA1 0cce7d4c0ce9a7a89d8858eac1dbaf7b50297efa
SHA256 fbec5404d34c3926e02655fc9dc18876785ec27d421446c1cded37422b91608e
SHA512 812b64261ecccc47535f35ed937031112335557772a9c5a4e38b6821e97bf9e33e7e1b9413130a03d23e299ea1464571b01862eaad23a06e01b39b0e5300dff7

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 e70bb8f60bfe39aee673f4704885b6fe
SHA1 cdef749e9e7d85ecaf48638a6693162ecb3db984
SHA256 ca944401f66d3623029471ae045ffa1574be214f222112506a173ace0b8862be
SHA512 62c019851840dc62a706342d0108db4e84b6159bdfc7855cb7b0b4ed9c884e748569573feaadddad0f7dccce3d742a935ab1a7af0523d9b018fd1cb368bbde6e

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 da38e5e3991bd39611bf59c22494b7e6
SHA1 8d66989ed79bc1b5b41382539749846386c78fb0
SHA256 65b9960d897784b05e93aa4bf2557375e7cf045b302df295c0f8a8bbc6d4c27a
SHA512 4f99c423f406fd8b2d7f9df6963c5cf2c0ea3d85bbbd811b5c7f3b067a417c08457d7b7c853e92b1fde1ea2e8cf616b718645bda5abbdd101334e1571ed21cee

/data/data/normal.manoto/files/PersistedInstallation1710118290369058908tmp

MD5 e18d632c1581eb32b56cffc99122cb0b
SHA1 8b46c3787361aae7c8e8155cb33575dbe3917841
SHA256 721c91963aa9779bc5febfebadc0336c54bde07b7818e2eadfd5f7edc72fe57b
SHA512 1289769220b34c9c319747ca0975165ebb674adeb50e3392b4b3dc46c2172bcb319957f767c2145ec90d54ff5cb68156528bcbe1029245bd828c7476a0f75f54

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 2247d088c34354e48a79f6325a3f2040
SHA1 7228f55423985a54f40d51362d47751ca50287e8
SHA256 17ff834fde4d7dab397c5a4988a5a2b798edf08aff4960d95837300810a371db
SHA512 74fce26a66efe3c089bc91b30e7cd50f86d4e9f6eb6c7d32637f1fef191e18cd546454c028674d733a8e134006f647078f84144c1461f5cd7df89d11285b0be2

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 a4362c74ea4943bc6622586bfea1c26d
SHA1 1fe59dfb59947638fe172cc9765756692a4e5a75
SHA256 1d23289dc3fbd39c4cdfe30962eed5e1ed86d66e81a4a7380a0cf90e7526eb7d
SHA512 217054b2a4a0b655ca65d705f7147470d8879638f2bf5e8e527cb821cf3e719fb6c82d976c3287c4a321b0e09f937d660ba63240f76d9f58206b32d8f0b85584

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 2cfd81ae4aee19d59fb76b283fe80981
SHA1 e30a682a7a7a521ead9480175036ab8dad206dd4
SHA256 373252e4f0308e423409d0235e68099f558a11fe7bce2f425f895838aa09cefd
SHA512 89857bcb48df2a8f764f5192e199a8fe646c9e9e4d1361f1fab645d03d2ee7b247a94947c03808a3b8e2174a44cbd98e45966e6d4514e311c73099b9bcf31a85

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 9694610751e5dfcf5196bc4a190c6482
SHA1 121b1b3133e1b0e9b697553b56940ead69584990
SHA256 59bdd44c9e7030818033da2d2ee91049e806352ca08a760f4ec8ff4420bef930
SHA512 83b050f386158d11fc2c2e82496f25ff5d4963ccd704154c1aa0760665a0cf603942456abc49a706e31628f5539cc20082e19eed4266a6c8e2a6f855ebe8f0c1

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 36a6a56775d5ca49bb025f6771f7a1c1
SHA1 8b8c465f02d190138e5437b83d771bcdf1a12d1e
SHA256 d52a9e605c0c20a8e537bf631161c4e0fc3bb252e8dd74fcfe622356a44e3b65
SHA512 ccd8a4838bcda4312b661c49e241df2ad5df7079f8118110aca6692281d64a1a62c3c9e0271b7c65ddd2858f09be786b67376b4f8a2a4942de95609ce0557c12

/data/data/normal.manoto/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-20 00:26

Reported

2023-12-20 13:50

Platform

android-x64-arm64-20231215-en

Max time kernel

2273146s

Max time network

158s

Command Line

normal.manoto

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

normal.manoto

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.202:443 tcp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 glaknohjujm.ml udp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/user/0/normal.manoto/files/PersistedInstallation8987666447533116427tmp

MD5 1a38911c27475ffaeb3799d88c6b9554
SHA1 d01f2a15a3beba45aaab99e6488654a3801082cf
SHA256 d425fd7daf9575a6f2a822195bf6ef90ac1a069cfd23838104d2e5c214bf4cad
SHA512 b336ffa495f1481d0b66b0b53156811b3f789929e4b0fca27e05fb853ca26b3c91784b3e03dd2e3525393cdc8cdad682c13cf7f31d5f168e3f6533bc1d6ff77c

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 b8098586e2ed11b3d00b90612fb0147c
SHA1 6b5e24a8c2e2067046f684c36e051725402683e8
SHA256 74f8d19494aa18941b6af68611555ca65d467797c58b5128ba0221c10b75c1ab
SHA512 233599383b698212cbb0e2945ef15805605d3b96fe98cbca458a65e7da6d46699c6fb08f59173a71a861c1aeb2e927177c94edff14a412a2376cf90ece80703a

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 6184d19059d8e26a3bc6da4ebc1a7fae
SHA1 6ecd8a9c8729bf6dc800639753cb2b6d3d6c3fb8
SHA256 812ce5e5dc19d68f993c309f01bfc9b8505ac2a112d097d3b5341465d9aee4cf
SHA512 7057afe129bfc1d1fe2efc082381f14210b2ff7fb069a543c114eb56cdfcf07c4dbf2f5ba6585c7ed188322c7686c0662fb45f94157303555bf42e4f5fb9e5e9

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 3138712ce742a30600fc880ac0de8a7d
SHA1 5820493adcdbd06f91fe4d1ce97ecf3799e67ca3
SHA256 30f614f3063b2368ca39c1a84f163ef4fa2befa47caf148f3b91376c02ec8ca7
SHA512 6af1f8529c52551aee0086735dded169df8c305f102d46af58d258b01850bdc5aaf57826b13638890a33f082f5f8ff6842d3a3182b53650feb892837af7e3f54

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 7a9dd1c2f2be0406a7d2b32c9fa94e4f
SHA1 5be5d580d82c8ac782b53b9d77f7e31674f0fdeb
SHA256 dd308a6d8ba2834705800394693828802561c77be1a00637c4b1f86356817b99
SHA512 2d2c79279cd3b4f7957afb515e5a51e9b627831bb48b7cfbdd2a6a87891e4e6d93f542dc68cf5099c1e7a46e567ae718108e008585345d464f02e75dbdbd5bdd

/data/user/0/normal.manoto/files/PersistedInstallation6809669830020252642tmp

MD5 7704e82b13913418dc1264f4b3a7cbb7
SHA1 2f776670298a3cf82e1793ac8680d9e94566faed
SHA256 8bb73e2d2c5792d6df09a9c729c7424e5343b3fed572ce0415c93af2665122d7
SHA512 a61bc9fce473222449741c50fba34a9d383cd0064bad0876671ca486cd23947019139d796ba39181fb84fb7e80ed25e7685e8829170d4a4f44e1f5bf797c347f

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 d915106b360062c2cdc5fa3d46344d80
SHA1 8fc766f580839fbe9ba6103c3fddfb3c93bb6a01
SHA256 18a69efbd82268963fd13d5307aca4f03c577b1a3570339c4e78101c48f8b4bc
SHA512 cf2f6651823bc60957448a22bc445912375e0cbe041bbba74193376043c8dd51963566b33a408138931c99c77b97c1644283953c0a327962d7bf41f23ed7137a

/data/user/0/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 3c0ba08582db4cf88a851a5b7dc15978
SHA1 4012a355c6de8f677c68c28264bab84d7a7db91c
SHA256 52a85afb98c0499834740a2aaf789cfa7f971a04bf1e24d54116bb7eda2d1df9
SHA512 0e6cb53b3b1c40f5b1ea102c575f148f2022b54aad816c7a713e78e33afea0dfe2f2a4e2bc1e6a0d298f7e89bde859e5a098d1a95459fda8680db147c4b7cb71

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 2bba45e83b6ad2ac1f30dbab18c8d463
SHA1 f72539e790f398db324ed8f6aa53bfd3d30ef9f7
SHA256 a4809ab1806f5ca59e2c81ad322685dc15d20f082dd8fd691fcc9c2700c36532
SHA512 05a636d9cb71d26d8a65af73ab82fbb141ebca10b10be9373132efdad9899d5e3f9658b9da8e54ba36da5f0e9fc0188753c2715fe8d3a48e2ac493448adaa9c1

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 dd6b309e19de4c803759ea07c256d6fc
SHA1 4be95ccafc0ce4ffc8ec17f014dc95d51cd0add1
SHA256 6537c9879e4d3edfac894cfe54bab72f16507b3b99b9b6046ce0caa404bfdfcd
SHA512 d2d246c16ba9f5a35d0fa9e5c55fd84c3a7912408ef653a3fcaa0f63b5871ce9cb5183261fd50a18438ef0d41b156a05add6802fcfa99157f7aa852b634a0346

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 506a9de4e674be5607888acdffd41676
SHA1 519be3e6b212591dca21ed13b6b7b23d70dd147d
SHA256 a33ae4d214679c2af2e966abcb87f858779b794cb16c436a88b1eaeddc417305
SHA512 a9070b7f69efcbfa959bcddc5a1479b93f9bd4733e719ac3b4979a8958ddcec47a043c988bd86c7f658bb0329219e111380299e4fc43920bf405c5c31b4f467e

/data/user/0/normal.manoto/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 b885e9a395c9ce5c1f31e3d7b14ead3d
SHA1 790dac4ab593ad2c07c48b797461c0aea9b28e53
SHA256 65b501c51ff024b6fd6cd5629cb1c9136615e49a6cf44460bb157cbafbc1a736
SHA512 7886b28cda6a7ca9d49ab3d8a8225437f0e16e2f00c5b056e902a21341f4d13c299eb36cfc3a1af107962025ef9c3b8fc0b0625bc31d6860fb864897c49cd9b8

/data/user/0/normal.manoto/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-20 00:26

Reported

2023-12-20 17:56

Platform

android-x86-arm-20231215-en

Max time kernel

2287920s

Max time network

137s

Command Line

normal.manoto

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

normal.manoto

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
FR 216.58.201.110:443 tcp
FR 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp

Files

/data/data/normal.manoto/files/PersistedInstallation886825005584107386tmp

MD5 84e36dbaa664eaf31284a6bcea2b7713
SHA1 90482c672017ad7531873a500202c9b376aa2a27
SHA256 57dd4b6d48dfb037ec38a3ebf195c3c6c1bdb0bf17defef0ff1672a401d48f70
SHA512 01646ac88bfcbed5cc8369778e1c2c1e2c1efa436859e2c01c04a6de5387b456e7c91f3af63613e89a4f552f9c9af66ad71eb441df4b63a70df7cb344c428b68

/data/data/normal.manoto/databases/google_app_measurement_local.db-journal

MD5 5753e7bac8a9bcbd7ae59f23a0e869da
SHA1 d46000bdb574317467422609b039bfd98fc491ca
SHA256 57a3fa77b0d82ead67e01fa9ca2df99210ed75a59e484a1068742d773fb88d56
SHA512 25f48be34c23c1d10b09ee634d12a4e9c0b979fb2cdb5c7654a248f3ccba3ec470e6742584ff7a2abe37d2a50a1022626cc90ebfda682e996766e046746c6916

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/normal.manoto/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/normal.manoto/databases/google_app_measurement_local.db-wal

MD5 f412367ae3f75362d2c82bd3765a55f0
SHA1 b81a88ba3254541c8bb5b5a4ac0017bf6ce140d7
SHA256 ae952eeae821fa60df3544131ad3d3cf54a2876f2055791616adea0ab5be23db
SHA512 24540cc93c5eecf776dcb0929f5b8e21359aa39930115802ae7c2cd38f0e9d196bc00a91bef10c0b8328d275f05e5e6dae3aeb0e256487a1c6fea7a4b6c889fc

/data/data/normal.manoto/files/PersistedInstallation1768551805707567048tmp

MD5 ec4e9d9e2ed6c81827c704436758eea9
SHA1 cb39a372618c9cae4ef367b4a361c2f934acb307
SHA256 4c1ff98e749136dcc5651d8d3ee161741a40f643b3297272b75982643f0f0b85
SHA512 de1c5ba79581fedbbaddf1393dc4fb640d6da2573b4df8266b0bb4754fb51d094ca4b6adf506d3f20974540c3c63d38b11a359f02622a0617ceaa056faa2414e

/data/data/normal.manoto/databases/google_app_measurement_local.db-wal

MD5 e7291376d795720f4ad1deaa116dc233
SHA1 c8136402496e664fe5c427368dd862c616c2b624
SHA256 88d715528f9524ef6f0fb872b5d5de95a46f1e48b819e87523c4b04fba3b4a7c
SHA512 21c2a87baf73958a1a0506946c8b4fb8f15cca07f4dc3baedbf13139d9fde8217b7ddfd17f4c3bc6a479aa3b02c9b9c047fd531262eb14be3618a09f4d10324e

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 2fc43b88e41bf4cec08b1b28c0a599ce
SHA1 df483744e06486b63eba78c6d246e589d33b10d1
SHA256 edd915f02eaf27ae01bd7101871ed006b380b1f9d0b84a29019eb0db749ba67c
SHA512 2a13b4713f2abdc8ed3fb2b7c23893bbed8e26c01dac4e38513658b737a189b948e70f2434c6aa59edf36abc1bfe3ea62ea12958af5f0138525a12166e63ab7f

/data/data/normal.manoto/databases/google_app_measurement_local.db-wal

MD5 72fb45037e104e0346e3aa03e0abed37
SHA1 d1865db36befd1548aeb4f7798c889cebe752939
SHA256 f1da539b2fc40978e9453a42bc64fc1bb1ce776abc72c3e297d7f632ac819a70
SHA512 f0ebae30a5f777023ef56c0cd711593b022869f666e345465457f96ef3c5ca280a893229f9c257e1765f5910ba1206f2912aada400fb2472ef79cb41799d4fc6

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 b1eee7508fe58326fab3442a56c0fc48
SHA1 10363c6a91551c00c8e4f11a570a53fc49b965a4
SHA256 623dfb2a460a9b7a6ddeb151523f3547293f5f67ebd07e14600c437f6d472e4a
SHA512 10e015a2d7c9cb6093586eccbbefda2db940add6ad43a9a00e1caf3b97823c8ee107ee8d4690cb77b5a31150ce2161fa00f236f56b4b185b6c24f577065ae826

/data/data/normal.manoto/databases/google_app_measurement_local.db-wal

MD5 5d73585881d2ecea995f2c03532a0439
SHA1 4742888b2ca811b178b5af9961d3f74784ee7319
SHA256 1b4ebf0f701e323f6af6e66ed537c2de87b1aeabe955113ac1966ce333f5651d
SHA512 2bc720ac03d4753226e36b87b8c91ee5e8e812007d80c21372f0d2e1fce85f4b402932063003f2e98585c066bc1ad9677d467c029140685e59194ed5132cb272

/data/data/normal.manoto/databases/google_app_measurement_local.db

MD5 cb156c4f680d375dedc1c05de160ada4
SHA1 20fd93148775955251bcb542fad98edcb28e0183
SHA256 6f6233a1b2fc8faa293829e76c363b554820a642132c1b098a06d8b042060a73
SHA512 18fde078861c23069e4139beec1c710e9014c97e93bc2b57e73698db46178c226450dea705846db7efd8bb9728653c1c2c82bf2e1145791c2358077c2eab7958