Malware Analysis Report

2025-01-19 05:52

Sample ID 231223-pqm9eacaa9
Target 128f119121aca8f174c42d05c0df0a867d92dd70aacddcf5b23f7d8a4830ad2d
SHA256 128f119121aca8f174c42d05c0df0a867d92dd70aacddcf5b23f7d8a4830ad2d
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

128f119121aca8f174c42d05c0df0a867d92dd70aacddcf5b23f7d8a4830ad2d

Threat Level: Known bad

The file 128f119121aca8f174c42d05c0df0a867d92dd70aacddcf5b23f7d8a4830ad2d was found to be: Known bad.

Malicious Activity Summary

irata

Irata payload

Irata family

Requests cell location

Requests cell location

Loads dropped Dex/Jar

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-23 12:32

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Reported

0001-01-01 00:00

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-23 12:32

Reported

2023-12-27 13:47

Platform

android-x64-20231215-en

Max time kernel

2877705s

Max time network

164s

Command Line

ir.ronak.snack

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/ir.ronak.snack/cache/1582435991586.jar N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.ronak.snack

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 myronak.ir udp
BE 64.233.166.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 ip.pushe.co udp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 1.1.1.1:53 myronak.ir udp
US 162.243.147.245:80 ip.pushe.co tcp
US 1.1.1.1:53 myronak.ir udp
GB 216.58.213.4:443 tcp
GB 216.58.213.4:443 tcp
GB 142.250.179.228:443 www.google.com tcp
FR 216.58.204.78:443 tcp
FR 216.58.201.98:443 tcp

Files

/data/data/ir.ronak.snack/no_backup/com.google.InstanceId.properties

MD5 1edd11f340992acb0c1ca332fd7a044b
SHA1 3196c950807d8cd4c4e46506b036435e83a6dd94
SHA256 102b011c5ec2ab5a36d6e33504f455808a2577774afd58602782ba969685d6fb
SHA512 695a62b8893eb1a5e390670abdabce8f799a3def5dd2993f2987286ed455b0f6a867583a0320f2ca57ba54b1a3f9b2b7d7b82511b31275d3df7f30c2b82ef713

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 ae8b12befd8305846a81d111fa461f8f
SHA1 3a337ba1684197da8ab85c88bb20fc38a1661a5b
SHA256 30004d29389b572a4fb93311b9c3cd5ddc2c654c94c37b055a3dc28e0671cf20
SHA512 673cf3c75b762123ad67568f09bb32d5dd72a9e22b580c0cd0a874df5056c00d27b8662b5beabbc1fbb5bffd8b3d31e17948450aae30c8ad51c7c38bec5e27ce

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 93263294c527c5e180339c91ce1b04d6
SHA1 789072ab212bd218e01a09215606bdd5ac4a1ed8
SHA256 73dce957935d935b40c8a408ea7363f032e264c39386da77dcf7861e66a21521
SHA512 a18888df1eac4a18c735206220f60f08941fd70f9c3631bd945db7f6574bf04ea3fd40dacbc57561e2137cfc5125675c61786257365781894246fd94320b96c7

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 11b0a7f99b5d91e45f61e019a9e488c2
SHA1 b49915716ae29b0c7d609c40f380b5b29a0bbfd6
SHA256 5183c4bd22b9654b3a16f9c18493524042a596f8c1e2bfb027b7408b96b1d902
SHA512 204ba2e6a54908e366451c8f3bf2b34064bfb3548db96673720961b65aa08e0d240ccfb575455acdd33c0092a4f1577dc44d3dcf0b68bc09c764a7ba13b89439

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 30d4550de1a1c5263a7992af142ba720
SHA1 31fb934a910d17e9c0f4020aaf3843d0afede65c
SHA256 9c4cffc4663a5302f1e3df93b1de66f686baedf14637265464f0b70d96be039e
SHA512 ef986688a7c9dffc659f312ca971566531c4ec51b6dc466de3e4d865d42a8a64d909c68a0ed0e08ee9fdd40ec0de3d8af6b94111a7e7fdccf5e4b3fa01be67f3

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 7dedb62ce2256bb97e270d4aa2dd23b2
SHA1 ac436605d87cbb32ece9621382fc666e03b74b5f
SHA256 8241f73cae916af30b81ec205fc62b92540fd21aa2eb04f9a18e8fe4b3a16c2b
SHA512 f42a69094c100167578e87ae4e8fd7a3105f0a0087da430c9862bd7b38c976921968f7c0ee95c00bf204d3005f291af58ed4e443fea9e7b17305401c204dc451

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 eb5822bac57e02c3216d6c3b387865cf
SHA1 421db6b64215dd91ccd447f44021cbbc19a5987e
SHA256 658c9a372bb347ddb380aa724d22855ccd30ef8fa47b4ebcef9a0718c7fe0239
SHA512 e104781f852476b9dc478c724b70df3a2c47c05c2c21b3a653601a918f705e8649776cbdcfdc09ddac6a3758a4e24f3ad4757f7c3ecd1177057c9605784934d2

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db

MD5 abe9fa56c177c65db8c072e6d81fc41c
SHA1 abe9e9bb6f7294324f549af4435f58578ae69f2f
SHA256 53f09b897033e2496e13f3c6e8d14ec1d1f7b273c2b4d47dacc569594fef0f8a
SHA512 bb1b70eb859448050dd71822652d1976456be07c098ab41f2f75fa277cde059aff0c45629564170ee07028b85d501cc941529ab06753e5be2e710692bfa3922a

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 e1f3aa6eefb2a5a7fcd029499f4c0895
SHA1 985033363e441361f38516ee4725c76a6d8db128
SHA256 8bebb3fc3f3011dab1f2a10264d2c5b536f07866239e0ecc7827f0855540c710
SHA512 6c90b9644c0fb6ce29ce0883c12bed63e6233db6b56379164e1f1146290fabfc762bbfc1ade35a46e11d7a045de591ce43118b970447469aefb9db5dd7d93655

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 fbdce67842ff4bcf9b2c14fa2ca05ea9
SHA1 a0ca33323a79caf0315d72f6c710e3a67843600e
SHA256 0dcdad70a0016f138d2c1cea4e56322f53f4ae84a854881d7487b2ab64b93549
SHA512 1709d41fc70d7b109b2e3cb3751288e5beae0d53fcd8f9db1b88bf37c26f44bd4632c58a1ba553e17089a2faab653c2992f3ab00e72e9b100aee22f1451ca5e4

/data/data/ir.ronak.snack/files/info.db

MD5 8315f832c111efcc96a657aefb7a3856
SHA1 97b0fc553b6043bdb22b2b8b14e5eadc179889a0
SHA256 01373adf731d3ec1c63a8e0b5cbf8bb3542e39c5957c72476b6fbe0529ddf4b5
SHA512 ace822b48b103d9cf496675e8295594ed779f11adfe709a643a47c8d67874d4d6363a7895b1701c6d63f0e0a500d42cb79b4aeb4e699db1d62ae5cc028d5bd4c

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 78003603c083bcc6c67d96ad6adc41ba
SHA1 82f525af22d49c9dc0c601d12d28132ecead2dcc
SHA256 0712c96846c6ef246c94a9bd0c7c3b6d3e521f06482dc2d325f45057ff25f646
SHA512 0032c737a4257b5a3fb82a267e4fbd6e7d3041bab8bde7d65591f9b4e23d9bbeb9594543e4e76d28367909e465012192deb24ce7418a86b25ac93ea0052d08f4

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 8695fe83b05f107b1e10141d42bd13d6
SHA1 338c4acbc323ba5d250638662410416b18cb1316
SHA256 f9eddb797fd12709595d80d16e416ddb36e4082f3ae5fe1e02bf8077146a270c
SHA512 111dd7d44ec944dd11a7ab9cd13bff613801a453aaf1ac063774e2f0b234fd6c7ecf17514929258f55b5819e31112e3829171abbc77641a13f2f940be68d2578

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 e4eb7b0f7a707a6707fc7c7f1a8424a2
SHA1 7d6cf26946e071588d82a558e907c1f2d47497e2
SHA256 799177e04338606a3b66ab203794eb618271c11f7573d16f3fbf73286beac58c
SHA512 13811763ef7d33bbbe06d4e52e3d773c82dcb804a110ee289f822c0faaa4471c268768ce71d79c7b4d05359ca6c50289c3a81def50a39fc051c45dacef59036b

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 671e48256c23b35c7ab57c95874c4cfe
SHA1 3c051c6874dc77a1e4f39e1f093af6697caa9a50
SHA256 df8d1bc8b9a85fc8b42b04c49952730c85de7b53f23abf2782320a59c42cce89
SHA512 944c0307befebe6c11c37656ac61ae8d36ed9cb5174e9eb906cea14dc529ffe5f9798659f3a7d79402379b451a24fd460b6d745373b1d176a81b9d4299f1ec6e

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 343560af48c1eaab691345fc3e546195
SHA1 8d0f1bac15a94accd6a29a642543cbe0d347968d
SHA256 34a130531a01c6fe8dc7efbbd8311d489c9ee23d3bf7db9f2d03115431dbf452
SHA512 465116f3c28399c04018e7735c6719ba7911a58969c2e14784fa15e59f1197879262749bd32cc3ca0720f33011e38268c0904551cc462cde680cb218a9d4b93b

/data/data/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 16d25bafaad6d158417c16a475df3342
SHA1 19f5f3ca61d8e6187df7e380d2101d29617b6096
SHA256 fdf55fb5d0d0c487f44f35136c21584ba466445659653dccbf647d68b789d051
SHA512 f197c7ab1d5fbe0baa123a69dc07daa3b1f5e083993745fa190547601ef4109853f6476efc9ce00cb6d5ee60f1a204157be5081cd312b93caef3dc97574fbadd

/data/data/ir.ronak.snack/databases/evernote_jobs.db-journal

MD5 e0c580d8a8794312baf5d7a850b6ed7a
SHA1 8266e4607d5f54b4750bd98566b095fa0db8636e
SHA256 2661a72d11b8a3c777593b069ed52b323765483df9de6e972cced0bb21e2a2ac
SHA512 b7d9f2d0f70973d25f193c1e9067a0e11d8f8b5fbbf8be23b8759325600c6e63eb3a03aaf1c9e92b49fb73685bb04f3407d47a6a36a1a862e700415f59dbecae

/data/data/ir.ronak.snack/databases/evernote_jobs.db

MD5 2d2f4f95643619f050430290f480cc17
SHA1 10309263660ca83d91ba9191c373e971b8bf57d0
SHA256 c7266a2946dc5d8a515cad4dc1134fd301601d8145d635b0db367466e9702243
SHA512 0af5f05990ac5d82b6cf23e6fa28cf20c261f4e0cf08defdd83e88ee84b190507425dab63cf1095642ef9dd93c8649fccadf87b5f2bec3eab2de14690ab62ada

/data/data/ir.ronak.snack/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/ir.ronak.snack/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 ef4a95b4451ff9bec834b50fa3310177
SHA1 9e6536a9a4216ae6328116c6b900b80eb0612d06
SHA256 9338eeae386d0c0d00dd4dddbccc7b040970e148b0d9b82f527c750dca59063c
SHA512 385d18362fff2b70e6cdd0bb76baa1d9d8c5d87dd34ef889ba3b49511f197911b6455e4464471c235c3e7aecfaedad5ea948631dfcaa2e673aa6bd1e79eae254

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 57d4566ababb6db8801453c6358c1816
SHA1 8b77d9f159c2527f36b59d7faeb8bdb1bde569b9
SHA256 87034f84494ead0afa0d34d3910f2d1f97220be41922123be4347d440319fcfa
SHA512 31bdf40a0ea7ed07248ab1137a1f43f1b099aa243d32b1e87f110f1b540b3f81317971bde0ebc2c5765f18c11d8ae0f35fbdd27e8bf3eb9804343bf7bb540882

/data/data/ir.ronak.snack/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 ee3ee9251b0b6bb2c6858f24d996efe5
SHA1 eff68cee86e45fa70863e78989e3060bf0526898
SHA256 908ad446ba61b4f7d65cbd6bd71420fce0966b06041470bf3d9e72afd2dd05eb
SHA512 fd58c68aac7174ffd9e11dea246aeb408e6c037d0d7b4685f38e0df9f6abd9ee70aa98a1ad3e831df054a96a1b06db174cdd0c8341806c105f627385bfa82f95

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-23 12:32

Reported

2023-12-27 13:47

Platform

android-x64-arm64-20231215-en

Max time kernel

2877716s

Max time network

132s

Command Line

ir.ronak.snack

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/ir.ronak.snack/cache/1582435991586.jar N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.ronak.snack

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.46:443 udp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 myronak.ir udp
BE 173.194.76.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 1.1.1.1:53 ip.pushe.co udp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/user/0/ir.ronak.snack/no_backup/com.google.InstanceId.properties

MD5 c2ceea8ae5a6a42c2f25c56261b5c228
SHA1 9ad658364474e83e24102f19d3f64eaf9e29afec
SHA256 faef08efa9fb9f05a2d63efc28b824865712d8fd990375598385703f46070eac
SHA512 e6ab2b454a41961be73b2810c38d294ceb2e5fcb3f98ec81b075931d21c543f6c3d67daa5c5e37b9fc69638f5580c3a00d5e14cc51b42bc46e2cb65a6aab66a8

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 e65ce4c16668116ad1c01d49e245c4e6
SHA1 cf86b8b379425ccbe371f17e9ec39010299d6fc8
SHA256 8bc0124e4ea6d724d7dad2053ada4fe38494b224c5d4e1e0263164f84f668bfa
SHA512 481b923c419c4f730595239037a52ffb12d04d7271c71055fa6b1556939588153a96f5894f59e7b1ad80ce20f314944ea31d36534dae254de274aff11ca3bdfa

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 e706de7c1a5138ac1be2e48fc38767fc
SHA1 0696aaf0a4c6ad1180e9958fe156d44d7200be08
SHA256 5383457e96d89ac434011a3c6441dbcdb0c1a158002664cf2fa5b3851388c42d
SHA512 a215ef43f43338fbb28c8bac797c186976972d8596db15e64c0d219944bde30642692b170cf0283de04473c59509be39e82d322307d0319b3418450f07cf6880

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 0cd87c1a79dfe0f9dfe0a4149cebb8a3
SHA1 c8f979b10515d263e306038c79eecd37d25e4921
SHA256 3293b0af144cb1f931195cb674bc5e2383c3a18f2223421c2af87e6d54202a59
SHA512 7b791b614a0bd393c52989378ea8b1fb096b8fe9c8d18b0bf77a3ee8eff8ce210b73ab3d5b8d0a3fdad0986fecb50c0a04de02574512d1933ef845be2142cefa

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 cc8e89895594815f405211c50394f021
SHA1 9fbef24d5efa2e8016a24f4570ade370b9f06ff5
SHA256 97ab7e7f787eb74775a929cfe388b002ee0ba3224a11c4f0ad34620e72186e8a
SHA512 7c6599c1d7e7c1939b98466b427c368ee3fa54a53edc796340ec0656078fc3d0e38284a650c8d0aeb28ec696d6309464ebc25569d945ff1d5ad862a490911408

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 bbef408d25daf3949b4b3774f8e5cd00
SHA1 fb2a7bbec4540862eb50f199d3be318ce7145a7c
SHA256 df36eb301e16defddb8766ecc763230c967b7fdc7743a3f7fc4f576f70a28c52
SHA512 6c5a500fb0b632365337151bf8d44a60bec095b874f5381ab1e1f4a0cb4fec8f453f5f67dae3de1ac9c12192fbd1b05512dd60ef1c0add9156e825464164679a

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db-journal

MD5 b99944bae63b0b92b53dd9b7ca066614
SHA1 5932ac7c110a8c02f7190d56e4018a1a3e04ecdf
SHA256 144d3de1b4c76a7952da7cb25bc814b0773be83e728ec54855094858518ce50f
SHA512 3e4754cced2fe4fa24345184a6caf1b807660c8388cf50d7f43c3a9485a1cd64116a184d62b592228f1936ddce764814007192146e7c47a8c08154e8eb4d6989

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 188a4cde4dd1718983e91dedc0806b0f
SHA1 1767dec7115f641427e9e8a277b5e8cab48d0693
SHA256 1a4200f4c807c869d3b4a3ef37da2982e7bb4e34b4f561dfffefdd23ed81ca42
SHA512 fa31365944d1a93f6d48bb7421e7f17bb19c2fdd1b9b938239e0da478aa295dbd9ce08392ecc095a26d8d9cba3cada28348c4170589ccf40e07e051913b640e2

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 f3806ced0ba7a2859bc7503fa189dbde
SHA1 b836e9cf7373ee8ae833dc53ecdb0299b2f00abb
SHA256 7fde7b9f2548568e44370bb7eab8bf312aab9f090ea78d9c0949549a59361a11
SHA512 33c7dc52c45ca4f1c39aa9c9452d9ac7d096c8d3ccf4675d8d23edb7abf64b72eaf29380be4f28b971e6647725f6bb999a29122bb3d71af588d9e520391a7289

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db

MD5 2cdf77d5c14dd3f313b60c691579a0b9
SHA1 6a74a7a3170cabead82152871c90749afdd6f310
SHA256 55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0
SHA512 eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 9db8c041a85a8af7865e390cf78b6f86
SHA1 ce8ee12f673247c6e6ecf8a398700746ab969171
SHA256 ad9b14a910bb18b5d40c3a53cbe3632e0512429fac059cade08e64f5b2104ffe
SHA512 dd3a0a6b6f47efcc4c87006113a7424dfb78010bc65888960cae3944560ea7b640dd25b507e57b6bbdcd984865eba4545ef22701b062103016caac6104388861

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 1cb2344d50c8fa911ff306b1688ad671
SHA1 48b10d03ca6f93b0d403912cc2b36842c0861727
SHA256 9729646c72b5d95ad6f5d377d42a39667061bb6070060c26ed93c16e6c342394
SHA512 db420ebc21662aea28b24c53bb3a693769f4f49bf61d8f1872bf27736223cd8d6bc8db3eefaa6cb45ff222166602d9d9c7fa1fb8e735ce1879088b41f043c4fb

/data/user/0/ir.ronak.snack/databases/google_app_measurement_local.db

MD5 ff816dc115a5410aeb71864fab0e4b29
SHA1 f7008b8925efdf4e533091e869f792f3aaa2c1f3
SHA256 9215a89fe0f53d84c116ed734d227c80d076cd19f7274585a5a268f8995edfc0
SHA512 a2812e4ab4bef037de83e12181a49d8533ad3395a7a4b55733aac1dd5166e5d58a665169c39a4d6a37eab8002e356e35907b2c81005d0a6520b15b3ae27a27ca

/data/user/0/ir.ronak.snack/files/info.db

MD5 2e0075f50b3da28a8224231eb1184676
SHA1 15feeb84d0e39c2701e7e4f9c63375e4b18c6b5d
SHA256 c1bd67b4928831f5bcf89ef8fb9b51854150ff955f095616144083a95822bb77
SHA512 03aeb49b645bf6748278767673605c67d7c43e9dcf4f657772c9838b6a1459e3f9ed6fde83629308673046fd25e8af4dc4bb2e1917ba8980c1c08de01ae446a7

/data/user/0/ir.ronak.snack/databases/evernote_jobs.db-journal

MD5 4bec2f51fa7c3b2e9ad47273351dd086
SHA1 5ebfaeecfaa457e84dda4daf5158170c76dba7cc
SHA256 3a0bda52b42456da3e75e758f140067f101467248c005f8416db7e5d98eeb675
SHA512 f5f0e44dbadd1b6dbc53b4105cc0e4ac2f23f4d0976dc20e5475603e2a3337ec4a6a11412f5f919e6031879b8fa36b017b2bf7c6bfb6177df7b125acaee8a5f6

/data/user/0/ir.ronak.snack/databases/evernote_jobs.db-journal

MD5 14d3eafcc22d10d0f23876bb86380b2f
SHA1 f21f42959b59f4182a91eed96f4bc8aa8aec5dea
SHA256 f6dc11a49deeb359a2fec0b102206d7d38c20f7b8f014889ae7b1791b0d79b70
SHA512 29cec45f055c574bf5644e302e8c352417fb00d74be5494c9002123525787a51817ca18130c51eb0628c81bdaa7ce9e1fb050ea91a31cbc1e5a006ed3de42576

/data/user/0/ir.ronak.snack/databases/evernote_jobs.db-journal

MD5 c3f8fb22303a196f7d347b4575afa926
SHA1 f25515ddaddc7fb5f684720b13b31508a799c479
SHA256 d52d769c0ed4413977436efe402fc5b14e9815d0564fdcad07ae2a0d135e7898
SHA512 7ca5c44955637faae3d717e0991be3bd03fd2b03990a216b4d968a437f0309b1a70db1dadf5b2b723a0376d0079eaecd795f6134db39743cc4145eab8b5a57a0

/data/user/0/ir.ronak.snack/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/ir.ronak.snack/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 228c93a995d337b8607f1a3625a3e711
SHA1 635eadeddf1bcbe3c511353ab3c632faec1428a7
SHA256 a3d0ae77c07f22ef895e2986778f3f012bcd7bc3c54d652aa422b418ba11b09e
SHA512 277e51e66ef735740f159a0daec01b9eea1ce651db6ca3010f3d00399c79306a005a5b072b4914d8cb54b8387275731c2adeb12e677357d79c94956210d707ff

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 60d0bd55c667a2da9be196a30210b4f5
SHA1 d57b9ce0c9975ebc04e309fe5677c87716071082
SHA256 03be542bc6822f813bd3e853d5ebc810bbceeb988cbda749b97b157d1a0350a6
SHA512 67f78628da0f873f26b008862a496ecf69a2e591c1df82c97958eeca2b78bbb5b86c9293c4ab70196dda403c9aa44f273df0ed1c704b6fbd3b74961a5741b2e0

/data/user/0/ir.ronak.snack/databases/__pushe_base_lib_db-journal

MD5 508ce0c48bcb2a0776f1f59cd484630e
SHA1 5bfa4f4a038cfa33745f8e623e4432889fa76d8f
SHA256 708ca290a92596791bbac3c6aeb11c8ef3f26c374c5a4103d3f1e339a4f4f591
SHA512 98644334a86a1716f7d0cef5e4e2a0006093ab930afcc4a89b1a59bf81611876e92c84fc0db775d9198ee6914bec08aa8b007fa9f46889c93e2a5beac2bdab26