Malware Analysis Report

2024-10-19 13:16

Sample ID 240402-mb9gzsfb74
Target 5ee35ee38e2003eb6cc81cff6ebdc2b09578353e99ceab6b50eff263dfad5bdd.zip
SHA256 e226612c78697b1836cd081fa1fc47e607b6aaa1da49091ce0ff146c903b75ec
Tags
irata discovery
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e226612c78697b1836cd081fa1fc47e607b6aaa1da49091ce0ff146c903b75ec

Threat Level: Known bad

The file 5ee35ee38e2003eb6cc81cff6ebdc2b09578353e99ceab6b50eff263dfad5bdd.zip was found to be: Known bad.

Malicious Activity Summary

irata discovery

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-02 10:18

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:28

Platform

android-x86-arm-20240221-en

Max time kernel

123s

Max time network

155s

Command Line

com.justin.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.justin.app

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.14:443 tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp

Files

/data/data/com.justin.app/files/PersistedInstallation5570112798272795537tmp

MD5 3e4d130de4c4125412683576eb7714a0
SHA1 c7d0622ecab4713e6b4e9560d3a468c0eb63074f
SHA256 0d1e79e7155d5001588b4aa0ee144b04a90e8c8ed454ef7da012a03659231172
SHA512 169d3341a8a6450f0188adca7fa0c64c509de6e0b5c18e2f8c5ac334102cea8890f930a680827156c190929bb3ac57472fc9e7861fe1f4ee9cb17a0b327f79a4

/data/data/com.justin.app/files/PersistedInstallation4994661842252614765tmp

MD5 c4a95824d1ad898c7e907a614bf7ece0
SHA1 9bce291907c9052458be50e067dfb7c89a6288bc
SHA256 b36262da48af11b97655c53769ef8be835a31a30eef26a855eddf89805c65160
SHA512 adbdb3609af6a279df93e3ca62b3bf46636f57ab54c3ca515286441c5ffec97e26d8d7283f0860d96e16682c2630513f176a6412f4562cfca16eafb759d98ce2

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 eae8cb95c79fb194d9b411d07f5f86e2
SHA1 43233a5b68d19492b4e971bdc9a6c2f3260147cb
SHA256 63ccb23b8257bd374ab6ba721f393856e25f3bdf16fd1ed78ae12efd8fee7663
SHA512 e853166aa506dad7065fc38aba1b22e87d54a074e98f72c740b80e7da785d961010f38a01de07ccbc9a837a007e340a9717b88790442af48faf403297c69d23c

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/com.justin.app/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.justin.app/databases/google_app_measurement_local.db-wal

MD5 3417f5420fe199af41916e7b4308636b
SHA1 baa97b78be447bd19941b8b0dd342b3982149cc5
SHA256 cf1dc03cb5fba51b8445c85bf8e204047acafa584c996dfea33ec25b21071bb1
SHA512 9610a90f5e741223e5e232898f4c988ae3d45ecfc6974d0a010b29f907f055a2d84445ac21873be9859c7435ec31f2bf97a9c0f6130428ed647f64c6f797879c

/data/data/com.justin.app/databases/google_app_measurement_local.db-wal

MD5 a383049032a42e0570397ca9ecc00fea
SHA1 c7ce031429bd612c6cf179a641402a87ca80c353
SHA256 0382bb8a4bd7ed0d27b1b4fb97e696be4f41ae22727d3d63ee259c40167eec0e
SHA512 152bfff7be569b99c326caad305dc251e1e9f04fc7db0cad7c770fe3d303c20c17a5973184e05cd95a9000eb06b098c27688c0a15192a19f612d52489e692a08

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 c140f1531c641522dda18bef55777a38
SHA1 c1a581d728677c91540412eafa14905ce9c06ace
SHA256 f0e4b965a82c2ca6da8a1c1af7ce748a29679fc679f9bbbec341100dd7bfd4c6
SHA512 1a26d5ba1dba19df18dc38647f49d04ea1f738a3e2773dcb3d3de5d92b3d5abcb6facff0603df57acffe1e6408f5d4c75af325777dc94093e4a70587effbaed7

/data/data/com.justin.app/databases/google_app_measurement_local.db-wal

MD5 060432c7290ad767ca0d111a917979e9
SHA1 49f4a95c386f85850cd5a8b405e5231d4aa7ad19
SHA256 373cc9b9826c1ef53a8ff3b6bc55f6c5ec2a074d711136643e60134e5706acad
SHA512 99cb1c108a4b3d772d4a855b56af1d9c643e2677ed5a40a7435975a88c82aed75c99af7c5169fceed849e6328e5ab33ac0fd7fd4fca7f93525001abb67d68ce7

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 65c693ee027befad2632b9dd010dd505
SHA1 e7a38dbd8f7ef6f641d871c263dfa2de4029ef93
SHA256 dafae21b84d36e3c8848e57376ca61b84926d50d896388fb342e3d06ade37bb9
SHA512 b7be12764ad5df36bbf8551324e3412ada9960525cb39749064b251a1cfff30a0490908aee4456912597483781bcabbfb545fb40f3433802a515318d92336275

/data/data/com.justin.app/databases/google_app_measurement_local.db-wal

MD5 15d63025b2d31d00f4a6d208139dbbc5
SHA1 9ba9d26ac3fdb88aaffe497a6f9bb2cc723aee29
SHA256 35abad8106fac982d706e0ef219059a98c5f47d0c3c5d8a76f28ae477875a0ff
SHA512 0b49318a52804319526effeae2321b2be2f7070cfecb6f8b8c5be43d29c8cb78a8a3a1f18819fbc77e4d035d1de148a635f2fb4364f1ef53294481445265a2a9

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 1a6b380215ba9b02dc3241e4892fce50
SHA1 76bd5c751b6b0dec037bf0db2df017a5ee5f80db
SHA256 8d9f4903356e24acd2dc20b6cf8524f12d2e59357784f69e12fcb7877cdadf8e
SHA512 84e7cea79c191a2ef9120413d79eee764ef6399a395b757259d0c737515c2e1c2b381f79aa5c28202a1943c53da155ebcc4e51c1c7b64ac611ed548b339f0fab

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:28

Platform

android-x64-20240221-en

Max time kernel

123s

Max time network

161s

Command Line

com.justin.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.justin.app

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 142.250.187.195:443 tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp

Files

/data/data/com.justin.app/files/PersistedInstallation7237469094051521050tmp

MD5 8590320134c9d3dd0590e189327e34d9
SHA1 6ee81c357921e0c87376aece8e41e7ad87a74ccf
SHA256 db30fefbd23b4c838a1a09ff99e981b5f7fc4c69ff195f5dae2888678ed0c937
SHA512 cbd2ccbbff4db8ecb3444ed2d509c3a8a6ea2edbc6a64882fc785e5047d3a50746f656cf4b4dc6885f4cda049d52f8d99ca31b651d9ce54d3a153b34ef714f5f

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 b28cae51384ded3d9c0f556b8dffd3f0
SHA1 1300f0a0293a76c6aed2aeeee1dea00c32bcfdad
SHA256 472a58e58e34a07ff6a17b5d87ee9c3e9cc7872fb47c31d7f8f13c0b105df364
SHA512 63b3d36f24db70e13dde8ce4bf214d508d1db17b754d8063383ba393d4b798fd14987af9bf93d6ce23d82194dd13d13fc6f7bf41835ad8b6808fd98239d74e1c

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 4e337fdd5a4bd5c08c320def56ae2ad2
SHA1 3207598d55580aaa7146dccb007222fddd7eea0d
SHA256 e68afc7fb8eecd7da3d26c04f34eecd981ee30e7c2208b658f60d4e523e5b097
SHA512 48d0eff99b03feba87fd0a5585eb798a703a83303ad93b399470fcb42ded824c46852ce5fbb2ba0c67470a0abce8fe85b3b95b8d05402915aea25028da1bda76

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 102f565e2f43bdf8ca660fb488eee36c
SHA1 1c96ca86e20bafcc958236ef2beebd5ca41bac65
SHA256 5dff4ca97221be6d1362ee3aefe0109da7b0dd0982e20a24a9ce206b2f9204bf
SHA512 467e60a6beb2c635304ddae2d1cc429c03e4a562f978c2774faea9e305921dc8a961156d98b6de14a2b434106c9a9b32a5ab3d901baa8062b58562596a177740

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 1dd6e31c88794ec8113d138c8fcf7efb
SHA1 4805af11ada7e665e0fda6ade4c568cc67d68d39
SHA256 0f875dfa9ba9784724cac42156c2c0f622b5a67ace48f6fbcb67701c8345877f
SHA512 834db56a9ef37c8e27e04413fd4b054a6a5ed686ed44a5560d483bc63e47fe3e9b8f46947c0bc2a52bfaa0bd3329bb6a3489e6f10ee38aecf0cd7cefcd1de45b

/data/data/com.justin.app/files/PersistedInstallation6291391282872424074tmp

MD5 fc8121b0c2be5a22202718d71ccaddc3
SHA1 21f1addad195fa5ce58616c344598fb6e2b922da
SHA256 6c446f292a303f15f7e4093d32366c290667c3adc2822130f44932b66d56fc8d
SHA512 f685dadb9e7c545b93e14e9a855b3538b83560ae7ba624d3dd94dd2c951164ce974e3480b60e2a8a716c2499d9fa8246bdd13b53e7ac2889c5ee49697962ba91

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 27262dbc897a708f590fd32adf50174d
SHA1 b136f2dc92b9157000d238b43f1335f3844ba63c
SHA256 f27ea31ee33dfd7b75b81d658a8037ddbaf77ae72a4b6b0e193119b2e405d195
SHA512 c84e3bc01c081c8e633278d82726e405a41642109fa3f292170110f2d11ebff7d0db7c82bf76df9cfcad5da9a153fedc992657adbc0e5c9bd97708dccfa7dc86

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 703816978206bf11e014ad4c1e1b9513
SHA1 747d35af87d1ecc4c0b21b1c5ca974284784278c
SHA256 f18ab4ad8e39dead8c58d4d5ea6333c102205da64af78d84d5cf28e232d785cb
SHA512 3b7e6d8e29ea62bcb2d64ea255557ce713ca9c6a32a19be7826375b2027c0e6e611e3c03164cec73402802bd668d4f338cf2a2d1f795bdbe5b2203aaecab7e90

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 dee92e2c57796e3a0f32d2c6f326ba75
SHA1 54eef74dbe2e58d52b07cd8d96121d7c95a091df
SHA256 1fae46bd8a0a6dcb03c33ff43484ecaa17f54e4c2654a919ba04e4aecc4e6ce5
SHA512 17bea72158feb3eceabd5897bd3b97822173004811e111797b81c2c5c2c697559ab122ad1b6508a5d686836f6adffd80325a3f55c90e2451feb80cc029f9011d

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 91791bb4c0f8372257cdfee952646ae2
SHA1 91f0f4d56e44f04cf6f972b90d0d8b07c6c6936a
SHA256 34100440e140a082fc35a3621a33ca24c1a8b4a44a0742e3a558d0313f423bf1
SHA512 2f1787e6df75780f544f199504fd4d451e110baf0fb33d86c3986ba1926d9ee0c0439122aac88a290d932ec9dee2789a506702fba41ad2f2bba764c11305c190

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 54077ffe9c189a52f41adee076ec90cc
SHA1 d29a609ec3708df8608e3183b3bb91739a73fc5a
SHA256 9d626669896497528c5ab0ab495a9b3b20d469d058e57ae69ef17a1f98b9a4e2
SHA512 b053af41dad6e1c778819f0e90fa74c1870d2fa6d01aa7fdd78d10a644fe72ad1eba1b0f4d61b55d4ca161f0ae4287d60a4dbad171dc079c05d3ed221450eb45

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:29

Platform

android-x64-arm64-20240221-en

Max time kernel

123s

Max time network

146s

Command Line

com.justin.app

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

com.justin.app

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
GB 142.250.200.14:443 tcp
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.180.10:443 udp
GB 216.58.213.14:443 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 bmachemashti.com udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp

Files

/data/data/com.justin.app/files/PersistedInstallation5151902725835366515tmp

MD5 1bc5b57f961ab1a125d4a59a98fb3f87
SHA1 9b325675a84708ac5d4e21674f36a51096aae586
SHA256 521522b6dfda9c004c667afcb1981f80247f0164439147eace8cc43554dc6337
SHA512 201d4d873090d39c9f071477e8d12dce173d0c2c9fb03d0008aa834f5f23068db1db769159dd10ad4f67841480c61f04656ebe087ce17a0b59f1079be51e54db

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 16c5a181544db75601512fde4cbbf6f4
SHA1 bcdd32c3b78bcd2b36668144b4477f6c2376a556
SHA256 27b0361e026093bf920c2ed5b720dc8a6cd2bc61b20ca9cacacde35504b460fe
SHA512 75c9fb84b3f1f7f3cdbe12a0cef2e4af308959c6ad4b2931563ddcf34ec5aa3af05fbc456399ebb9f44fc160f2f1650b95d95fabc9ceaceab6615748ee683f47

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 1d5effcd044a00c9dafd5d1fb0bf87ec
SHA1 54bbd44e4c6d2e7603709db0909f20109020afbf
SHA256 14f7ec90f644b46b460fa8516b3d0fbe77c8977a60cb004d0bbc25b6d610d04d
SHA512 8a1f4d4e57b57d55661bbf5c3527c84a3c920c8cdfd23054b11a2670adb7df8506b8a7ec03ac77c1a0e537715b0275bf872805b48987892bda2c1d14a892f0ac

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 ed3c9b2ee6d72a35a95ef5d8df905d09
SHA1 8409ef439a7966c67b00eb7c695cfb3c0c3a942c
SHA256 82f4dbc2dbe7afc0cb1a81780f3279bb980ad5062bcea9b5d018b5bac5f54263
SHA512 bfef23bb0967e946b1bdc8fcdd42ec9d683ee9aec91a478a7d4d7d016342e773c15cd1a9d450249d2d139b526c895bb41f86e02c047b98c3807dc93730ca100c

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 358e4c2efc458df07701af20210a81b5
SHA1 c79844ccc89097c0ece400867f2844aa723c4c35
SHA256 7c41b8bbb5a13dd5719152ef9ceca02fe056d39270c1127ba79c70ae5521c2e0
SHA512 d764f80284e8bf5b4a0b3ff806a448ac21129372a9da7e3c9167262cf1c50f4d9569f2fc14fd439cb99124c7acb9e3ec9b7ca0e6db723376a821fe0fdf1ec43d

/data/data/com.justin.app/files/PersistedInstallation6931913933432038500tmp

MD5 ca4030ec16af897593900a1e161a5fd2
SHA1 024e37988da8e08a3d2ba527dedb0e08b87035c6
SHA256 602600906d2b49caec31e02ef2bec31903b5afa5bbd18b98d7683362bb58dee7
SHA512 271b77ad9171987c988e03216a87adfb196a24300a10e2fb84ff1840c40c4704707a9b1bad15fe9088ceaf2ef7ca1601b5b7bdb8c833c38b978020e450c523fc

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 bc34dfacd263c9c8a2cb28e2022fd00d
SHA1 a72eaefcad74b7433bff4c0b4ff9ea22e7b578f2
SHA256 0a63b853dc6ea9b5e2c4475ee55e664ab81e796601bfcc5423441d4d61a4f94e
SHA512 32758240560f4b1723a52da66f2056536ad0ae3b68b0b1c2aa967afe5ebd85bfdce2dbec780f47aeadddd66aa0cedb8279fe02879330e0b7a65d8296350e9f0f

/data/data/com.justin.app/databases/google_app_measurement_local.db-journal

MD5 1ca23ad4bea2b6f980dfe84751c1941e
SHA1 0855fb16ad8e88cb8049468a3e1a56ad6920f77b
SHA256 49e1d6753ea7da31e35b26a1da574bb257f8d21b4760cd8577283899baf6eed2
SHA512 ed8193d5829ade4ce8aa5b69460501bd6d0941a30f1320081be2756c5187a6a7bae9edd0ac7789d935c3774f5d0093408ff3a02bbb16908d3f09950fd13103fa

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 8549b8ccf66a7c5e6e048dbab9c7bdf7
SHA1 af731cecb6ef1d526fc4c26a7d6afa7da4f8bcd7
SHA256 a640ee2f59ec55515b43b4baa3a91a35fc7eaace0e658ac327238656b7b58931
SHA512 f143aeb99ce8532472ea585a8ebc4e3474e301f3bd1217c759638e8f3f5402926f8d8fcbbf3e429ecdfc5211a85fdde3b2a99a7a1c422b42a9d1d73ef7e0d6d0

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 fbcff090018fe4628e8cd970bc615096
SHA1 20137ba97d74a7b4a4cbeb2f9b670d92475804c7
SHA256 093aeb8dd73d10de7b59edc253733d64706cec32f4280f9414bc1839b4772cf1
SHA512 791fac19f43e6e871e77919b06d767e1f61a755382d7802dd770ea20e159310d8af37236816bb64d8485c8505015ae5e2fb5942bc8c404c9af19eb4a027c16b3

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 98145437ad00ceb634a3cc0d03c62fa3
SHA1 667fec1d3e263b37e83c1419b2bbfdb718c6ffee
SHA256 fcec23f45b94462dfc96965760f4c173669034f9ef50dc92116a6e17a8a8b7eb
SHA512 5593804411d036a01e80c4b3a3631dc16842dd700fbb2e7f0e620d113f6e548c187476710687bd439f965fc00b209768a06feffc41391899513add9ba62c4229

/data/data/com.justin.app/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 4a3c7a4979535bfa85b5b03fd54d68fe
SHA1 4945ce03cb57898448943fad6eefc5fe5a73c06c
SHA256 9671e0d97adbca0ea86c67f09d945fa0e4e4ec9dcf3e75bb7f8750fae780af67
SHA512 52ec4d56fff61f0280811ac1f7537edf9508d78722a72edcda91af7933a29421aec635fdea71646f77a58d86a45244dd7d43dd85add1684834f1fedec34de597

/data/data/com.justin.app/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e