Malware Analysis Report

2024-10-19 13:16

Sample ID 240320-c3b1paeg59
Target b2becb9ae44822f4786e28fc66392763e3e04ee9fd2bb40a8268bcb3b61fa21e.apk
SHA256 b2becb9ae44822f4786e28fc66392763e3e04ee9fd2bb40a8268bcb3b61fa21e
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

b2becb9ae44822f4786e28fc66392763e3e04ee9fd2bb40a8268bcb3b61fa21e

Threat Level: Known bad

The file b2becb9ae44822f4786e28fc66392763e3e04ee9fd2bb40a8268bcb3b61fa21e.apk was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Acquires the wake lock

Requests dangerous framework permissions

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-03-20 02:35

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-20 02:35

Reported

2024-03-20 02:38

Platform

android-x86-arm-20240221-en

Max time kernel

19s

Max time network

149s

Command Line

com.mycarroll.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.mycarroll.app

ping -c 2 -W 10 -v google.com

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.42:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 46.200.250.142.in-addr.arpa udp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 godamir.s4.telegramrobot.xyz udp

Files

/data/data/com.mycarroll.app/files/PersistedInstallation3587481490298081434tmp

MD5 347cbce2302c576d89baa5ae4e003e0b
SHA1 452d5861a453e1ebba1ab424ca6195c2955a9e6b
SHA256 09889d7e9595139773a44f2800f34f2db418bde2dc05273b6ec027a9a4b3da33
SHA512 5cf439814e1c6117e16952b0452382a7feccbfc49c2b0ae78fb9499ba14e67a1507f3147351d7592a8c91d650a499bc6b100fe14703c276704b7f0f2e8b1a3f2

/data/data/com.mycarroll.app/files/port.txt

MD5 d848deba64c84dfe2c675a2e9fc1ae94
SHA1 7fce123044f8a7fa4134c15b038b7f5a688e11a8
SHA256 f1e66d2f3f548e5d1bbd14df978500019848492ed7dccd5eeaaf96f0b6690dec
SHA512 fc77e485ad8834c6b9f24f9ca81d025eb35de3062839763635959a7a1016ec0a78551812c6b91c86308127ba16a9fd85f1d2d1a5da13c4a1036676e6e8de2dc4

/data/data/com.mycarroll.app/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 3dcc56d06cdd4de6db774bcef91d2be8
SHA1 255b45178444c8d652fd33383e933e9844b15e86
SHA256 6b435970162210587ce74a0321b1e3e618fb265489fbc00fe0e5875187692bbf
SHA512 13d0c99d9cc9da09621e645e63939c53ab4958e91b88cf32ee9945d8d2aedac2670dc74f8e3c16b931fc3f8c33133a22087f6038c3e8e28953722545969f6712

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 018dc7f478e9a0cf714252f21a19ecff
SHA1 4a5344a335fce79d1715f7a7b7e12d1482df150e
SHA256 3b0a18d0016d329a5f381122a97fb00316c6b1e00da3f931bcc983e3aa328410
SHA512 ed223f8dd1d8dd675472b4be1ce0bc86fd27a657b7b368a977b304b40543ed41826ada2634b7e494b0b620c233a36d488703a1677f93b922afef05a278ef9bf6

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 bcc0683b81c4a6c7cece8b825a5a50c8
SHA1 ff5773ff736552d27f3523fc96a6092fcf721485
SHA256 9054a13d96636813de4ee0fd9e63a42fb4d8075822361e16efc6cc2156416cf6
SHA512 2626bb638c276bee3489c26e2b49f6fcb4fec165bc43c2a81f8cf3e9761d4baf9525f0f414f3f535985a3c249a5cb98b57ef52cf736c99f1d7380f29fad08d1f

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 425470ccf0291e0e9e091da8b856a45d
SHA1 4b09666278b98f606c981c614671b78129f05045
SHA256 44c2586dc75de2a14747290c1bc02a5012d0f7b217a2eaf9609633c515d0e55f
SHA512 8ca22df676646ccef6757f36cbc26164aa245d78255c7d61c5d696718beb5ed7fe93bd6e63fad450b98d10d149c17c9ff455c96a8c5ab023b53627fd398e2b33

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 b4b122a9091b51ce791d2a217bbabb86
SHA1 f3643bc76e2a81d5427aa6d9f0d4bb6c16b31cf6
SHA256 7ea5e8dedee045ecf39358fdcd99c7f971035df2a9ad83e87b83f4d236aa714e
SHA512 4786edf282ad158785df0dce7dab6b628f3facb166e613ba55529eee34447ca4dc7f4be21dea16060adf567ecadb37d9e2ff13098911e40207807bc3f7cf0e59

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 d9028671e02871a1857d58dcf8d23e49
SHA1 e1dbf2ce6c03f9ce48b74dcaafb111e53c379646
SHA256 9a944c6843d30cbffa84a566b54e9c83b89328fdc989e6c205d3bebe7cafb1cf
SHA512 6838a1d89fd950540210a9689dd0831b944b10866d333f2cd742817d0d8401955a4b295d1a426f5b9be9c16a9055699d8d1a6d74e0a19faafe8cd531990efc86

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 2f6f8ad7cfb148b09abf937a27a4d368
SHA1 527c7ffde44e222513c405db7d96b4023c51b3c1
SHA256 a8931ca16e9119f171f2015c6965011e8c463e0c27ad5a520e7f7fae1500df91
SHA512 8493fe66c33a5ef9c49f35784cef37ca930d7a7eceef7c776f52f3033bf11474420733c9a34cdbbf2320a33f150f6398a882431e772ed601acd89fa4ee9b9a2b

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 78d75508ee7a3641f3d08894b958915a
SHA1 d4b29167be2a19ae4ce4caacc8b1e6a6ff08aa59
SHA256 066f6da499871ec64bca63d64485f0cf979b90ccd5a1c8992c602d3c21e2eeb1
SHA512 1413a52980df9765c48ec6a4023e6fbe7f513e487d3c78a744a0274b3cc9f25b330d758b0f2c650c57f5b806465be0ef41484e0d21f3285ecda82407609a3e15

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 b5ae6714f18da255cd91debabe3435b6
SHA1 eec40b557c43389a38c2bc8b6870581ed54d8f6b
SHA256 948aa3afa6fab9d64b2a388eb2bc84e5d73ff0f9694ecce78e4e284801d61ba6
SHA512 3c5b4dd74a707e5a85a22c445e68800d271792a8291986adf52fe3f6f446381f2a4b7f4743dc884b33626f46d1d383459635461101a75f1746a94d407e604ffa

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 a92ac9567681dd3df23d1034d95db2cf
SHA1 5dedb6dbcaff5fe85c344c8f3e8ca04d43154def
SHA256 4094c8e0837688d3f21797676ada38a687fb04e0929ad4db03f9e053cd51adbe
SHA512 d2be7423a97a194af2d2038d0e6df6847e84eff657e80c5d2103ca4a3f7ccf692dbc36b0ea774957970b5b7454c341fe5c8d44ff8c86660b1f981002142f176b

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-wal

MD5 7fe66294dca4f68c93d4ab03274e72df
SHA1 afcf464b6d5dddcb37e8d026b4c302c65bdf193d
SHA256 655fb727c1e062ac6d593705787adb6b72559d3766a84eb0b48bf94b54902afe
SHA512 8a1e63490e2d9b752ff75e034ca9e2a648edcf3d99c3d2849515624fb2d97c0980766e48ab1e36d8bd7888704c1c9632f8f1b80ba3859fc0aef2b5ab01a062d5

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 b5d429573754f043a4f412a52644adea
SHA1 0efec9ed3e96cd52cc096ebb0f7e2674f857a445
SHA256 5744538e7eaeca8da4f835a53b9dd05bc2fde6bce5df84973c43a81cee887ecf
SHA512 2f235b369279dc17a132031483142dd3a718889082b26de4e6ad27284b4e8119d7598e7f838ca0071525e282894171c81decbeeabf164163ba7ddabc6e8242f5

/data/data/com.mycarroll.app/files/MessageId

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/data/data/com.mycarroll.app/files/user_code

MD5 18f54b87eacd9574e0f02509193e4b08
SHA1 1393577545034607f92270ed03d72703c94b7831
SHA256 8bae730c98836c1d90ca5c002b29686b3e2049e80fe85ae258257799616df8e6
SHA512 5d780d4ad65473fb4b885f2945bcc6d48377da68f0b43c9374cfb2d07242df8f661d1d65a8e68537a72c77df067bfd7ced126197586d1d1da278635f9e88532d

Analysis: behavioral2

Detonation Overview

Submitted

2024-03-20 02:35

Reported

2024-03-20 02:38

Platform

android-x64-20240221-en

Max time kernel

4s

Max time network

151s

Command Line

com.mycarroll.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.mycarroll.app

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 46.200.250.142.in-addr.arpa udp
US 1.1.1.1:53 godamir.s4.telegramrobot.xyz udp
GB 216.58.212.200:443 ssl.google-analytics.com tcp
GB 216.58.212.228:443 tcp
GB 216.58.212.228:443 tcp
GB 172.217.169.66:443 tcp
GB 172.217.169.14:443 tcp

Files

/data/data/com.mycarroll.app/files/PersistedInstallation3123133500251411246tmp

MD5 d1c16117533a6140bb46631c3680e10d
SHA1 b76ab20dcde23f6a81223e1bb1dc09a02d878d3d
SHA256 b56f74a122a67350cd7e6c4c34ad035734a021acacdbf0215dbbfea683b91e9c
SHA512 80bc4626c98f3aca0c0fcbacb08f6f6a2fc2d36c32c79841d89aaa2c985bbedcdfb9777fb74c3b411f84bc51604495b8ae299ddff448b6323b292d5419da2f15

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 acce05dd3090898ad60f4ca7192bf7d1
SHA1 2f5d9e45cc554410ac9f7d77ef6cc694ccfcdef6
SHA256 e75b8a638ae256908c2910e1871a97cf6d6b43760331c3ec838a24cfb969e22b
SHA512 a1c1b8de0073509bae8a00744874c6bf5c6ffc294bc40b437e489faa02be49eaa711634e2dd5faeac029157169164ae4184d36ae66045c3ed6a448c6bf85addd

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 163b0e3f017becbc89b9d7f330b78f09
SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 a516f987d1d207c4746f0be335847c99
SHA1 753b65ea4f673c0e8fb2710ef9b81e089b586896
SHA256 e35a123b5e1c06d58733ef843c43ba1f17769eddefd96844a3c6617ca3a02f06
SHA512 852b854dc01ac296aee07136e44a9e430f3e1d500608681d1c4cd78ee71a0293a55428053a6a4fc340c1ec7947d2e90daef28f6f0998a48726a7085328685a9f

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 58ec5544c48a22ea8be7b27099f0df3b
SHA1 07d5eb65807ed5f047c637fda00a133c3bef6912
SHA256 291af695ad4f2555f7b366fa7f245405aad44639d898f8523915579f99f99102
SHA512 75678b0c9dfbc6859b20f4370bfdaa954eed1d17de34ea4966a4f22e72e10f78bbd2d6b453760f74fc073e35387340fe245c45d47001bd624d3d075ef7f6e423

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 03f36607ba1bc1e0cc8d3cb257d9c8e3
SHA1 2fd77032e63bccc7664434b8664fa53ef8b70145
SHA256 dda6824143f0c75cbe5088cdd2302ca8d21c4e0a06872d67421de1afb1e6e7d9
SHA512 dae6619ec2e51dcc722b3c7241df697f98382592a6cb3b29387d57d1bdb2a127b72b9fc12a2166e27858223ff59ecaab44b1a3f61c2ae8530dc4dd6fcf62e12f

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 366c78284bfd53feb5508d24a7bbbb87
SHA1 7691228245ae827d6c0472f9e1b5266f8bfe12f2
SHA256 10249c84b85f4ff9bcb1c886a83faec1ccdf4a8ab427012477057002f3bb7da3
SHA512 526a1f3773abde4ffb896278ce4bdb6ce7f2d8c7eb50ea6e476bf9dc9ff8c4f59737ddcd4f97c73609587d97a7963a3ccc3c9d3de6c5186936e5892404db597e

/data/data/com.mycarroll.app/files/PersistedInstallation1370394850591125396tmp

MD5 35718f553330986a1f072640126d98dc
SHA1 6eddc41a8b312e3cd3e0bf1a231796d0d7fe4879
SHA256 56995a9a417922b6342934704b6e1918d017b333c45402fe15eb8345477d1331
SHA512 34e3d33ab96e2a5a0b0509aad7e3ee2bc2d4918cad9a785733bf01935cf20142c3ed358429d36d9115f75875a16f76c10fcf412fe937660240efb5dfc34ac05e

/data/data/com.mycarroll.app/files/port.txt

MD5 d848deba64c84dfe2c675a2e9fc1ae94
SHA1 7fce123044f8a7fa4134c15b038b7f5a688e11a8
SHA256 f1e66d2f3f548e5d1bbd14df978500019848492ed7dccd5eeaaf96f0b6690dec
SHA512 fc77e485ad8834c6b9f24f9ca81d025eb35de3062839763635959a7a1016ec0a78551812c6b91c86308127ba16a9fd85f1d2d1a5da13c4a1036676e6e8de2dc4

/data/data/com.mycarroll.app/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 1169da51aa9d54b15a3c8667d7756ca3
SHA1 b82a7ad536055d59f471e913feedc2095e812d5e
SHA256 7f67017bd79e6ed176ba7668b9744d8904fe81e50cfaf615b06873caf2f259b7
SHA512 514467ce3eb390a98026f7e5e28fc4055d46136cab865095f62715623de37fd263f10435693f30bc13c2ca4df892d4dbaa0ee5cfa5e532a123029c7e3e4e9a94

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 1dcafb1ff3e796ad13eac8628bab16e2
SHA1 e9231ba2b5c873c6dd5bcfafd2388c00476e0b9b
SHA256 e08c982986796ba1c6554537789f5bb3d23cb811c14a3ba7a978677aaf47be88
SHA512 6a6b7e574fc87783f6ef990c8114fd6db8cf2771d0ad1ed9d2c564e33fbd2fc9d2b46412b78bbaad416223420017e8d7031f1d81142c1428e13a8e2f60328248

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 7dfcd9ffeeeb1cc5cfe4e0a0030d04b4
SHA1 c5919a4360a81e4c3686f8d6f74b8f4644ddc342
SHA256 54687a34e0648fc9e179e063272f13d2553d4be547b7b1ac6adb3a0f5cbcc237
SHA512 0bf0d16eea403cdb0caf3a250246c477d0187e5bf418e909bf15de6c63641dd25ea1959ae57eb222fc702eb4c86d4f2232f21d17603b2dc034565589fee7ad6c

/data/data/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 ea7d2382b2c765e0f1ebfc9b495da05e
SHA1 b03a3a9f342dc7c6875136ac7381be661e18612a
SHA256 0c0b02a82c417ea5b0d8e994cafcf7023163f11c5f9980932a301c3d818b615e
SHA512 18b9e74a76fa5d3e5d25c3cd15040560d6b1a25ee20debae0aa815ab3f2a8ec1e5f11de4daf1b8b109b7af0799d737cb16525362521e6a3d6781f982eea2c1bb

Analysis: behavioral3

Detonation Overview

Submitted

2024-03-20 02:35

Reported

2024-03-20 02:38

Platform

android-x64-arm64-20240221-en

Max time kernel

123s

Max time network

160s

Command Line

com.mycarroll.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.mycarroll.app

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/user/0/com.mycarroll.app/files/PersistedInstallation2939707781595094410tmp

MD5 2306f6b53b9df3f7ee9a8fc0fa517ff3
SHA1 1bf192228f680e6853edebf817236715b61e4e3a
SHA256 a34209c930c66ba090953d34f82cbdf8abb05c26427b86f58ce1d632aa70ba78
SHA512 377177aab7be5bd81948f48e3b1f1bb5f65173f93e869fde5c493ff023f82be21032abdc7b81ca7d18e1bef7532e5aa44cf62d19f743d0c364385c255dc10e6b

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 cd269de832f2f0a67f2205ca91a0c9d0
SHA1 9b56d49a9da8e7596e6484f89e45d5495020d85d
SHA256 93a9dcdbe122c0429e201f16e1ec5ae06541c6e39be0fa3fb230e5bf6c26e0a0
SHA512 32d55bf27db38993da372ca449ff36e420253988722e01fa1768b5ca743e40b20855d5aba78593c5756d7eb92a37a3703428d4973d312ab81b9819e18c8c5b36

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 8ac2b5541801c5e100d9e49d8dbc4642
SHA1 0e191535f94ef10b85795535f1b833c2a04120b0
SHA256 1d1759da09d0f581dfa4dcef1ee9a0fc3595757e393cad526322a79adcd672ab
SHA512 865d6952771bd889fcaecfa3bd6e33c475bd07048b9f4abb0cfd9bd636971f97bc6184f54c9d2d63100e5118625f760999b1a617d4857fac140429954a57b5ec

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 f915419183fececd41ef6a7a83a5320a
SHA1 0c29295cf9a892ecd54585769d62088489cea2bf
SHA256 4f061a3108927c073306f1e94686745dad7c0a8cf923ce6c7a98cd5d83add88b
SHA512 ff2e106fb0aacbf460fecd005d9da4379f36556ae2798bcdffa5c9675b32fc826bf94e68ff0f4036e4d3c86713d7fef5cfd6783b861d988284c31d17f93aac47

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 a36c4a2cc9817a037ea703d83a340dac
SHA1 8af8864149a4f00f42389b3a13b6d93d89bac057
SHA256 7f0b9a20fe7f5c7177bbc1f146b9d90866497142552385d21e1ab6feb51bbaa0
SHA512 6efb61a463aaced8ef498e20fafb50f8837dff27f67d283bdffd78688c7fa40a95112bc2b583dc0886feefb41e4d8cb8c3743fb7fc38398f615039d3cf1d6287

/data/user/0/com.mycarroll.app/files/PersistedInstallation1960570862974696617tmp

MD5 f77a168d9cd692ed6b6b645d0eab7d0e
SHA1 62f561b09874ad7fa22f4401f1bf8f9138aa7e63
SHA256 3a8c62e142e4927b768fb21adf7cf74ee88116a8fba7191a7368e70d41665924
SHA512 d1523ff82cd0a5b8539a2083c6a8384e130365ed2ed1af3296cff49c0be445dfec43f583a6b5743ccc7b9a075185dfd537156396f77dd4ba19789050bb2c0384

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 196386cd89c01a59bd20540bc9b2a946
SHA1 8d5f77887ee0b25d536b3f9ed606c2b3e1e0f77c
SHA256 f12d0858c8eb1c33bb19e2aa63f252dea383773e8175cb40a087261557b73783
SHA512 daeb2de02735646b005d2833255e0336e61a46c8161e24baf1486dbad97ace20e804f01917bed9775a621aba130ad9c848b180dd364bae22909db0e8adbe4490

/data/user/0/com.mycarroll.app/files/port.txt

MD5 d848deba64c84dfe2c675a2e9fc1ae94
SHA1 7fce123044f8a7fa4134c15b038b7f5a688e11a8
SHA256 f1e66d2f3f548e5d1bbd14df978500019848492ed7dccd5eeaaf96f0b6690dec
SHA512 fc77e485ad8834c6b9f24f9ca81d025eb35de3062839763635959a7a1016ec0a78551812c6b91c86308127ba16a9fd85f1d2d1a5da13c4a1036676e6e8de2dc4

/data/user/0/com.mycarroll.app/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

MD5 4dcc3f6dca324999a2358da31acb396b
SHA1 b95b4e1d39c10d06b5bc5547f896afa0eec7693a
SHA256 dd099490c251aaf6d19da11f3b3b5c3c2f7b85f2ec2b9a2e05d33553a7d99f75
SHA512 ee4bc2a3eb9d5e19587acae7fa3d074d87ae65669e58eb3cb919954bb981adca77531688288486f2bed84b22310c822ec4893a23c26545c378da5532c3d7bada

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 2577bcb7bdc9cca845d1c3e63ad52cf4
SHA1 6e780f9cf80575db0898716a42e888426d87ff05
SHA256 26d8d3d112ff04bee4cbb70d8bdd6b08c40d70f9e1944b0aab85d8495b25552b
SHA512 f07b9168e994f84124c40e24da9e23ccfc19b2d64960094e1251c4537fbc7d3f156011f73e25fe96eabd3ff1f42115e8262470562c4bd7cc05eb764afac210c3

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 0d1695e2f39df66aa118a27178459ccc
SHA1 e633c0acdc6bebf2cf3a56e541c339e03fb076be
SHA256 f80a6a803786f116b9dd3d1cd724e7e4346c100015d2e066d88889e1b9531954
SHA512 18a7b2ec59cda7f1da37d159214cd144da7a011b6b3ef5fea0408229e9c1a2294d85de758add25aec506dfd15d180cd118b57c0f2d73f71dc3203a058b1c9945

/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

MD5 c7d489b7770852a5a37eb7a2ab7e3807
SHA1 f2689aa565b164eb2ff44312ba17c00159b58070
SHA256 f28a40af84736ee44b34f67405795ba1ddd2248f3c20915a691dd87151885442
SHA512 cd57c4608f412b3b3a5e4a3e6394a70c936d7227415f06b108a5112f5f81e8f00a5588824498d60ae244eb13e69d7759d9cc2ad7aeedfd245b2a241381447c03