Malware Analysis Report

2025-01-19 07:01

Sample ID 240523-n86b9sga5v
Target downloader.apk
SHA256 f7be005c74bbc58e74bf75db5fc36011ea9a90db34cecf0bee6d56d1272f4223
Tags
collection credential_access discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

f7be005c74bbc58e74bf75db5fc36011ea9a90db34cecf0bee6d56d1272f4223

Threat Level: Likely malicious

The file downloader.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion impact persistence

Checks if the Android device is rooted.

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Queries the mobile country code (MCC)

Checks if the internet connection is available

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-23 12:05

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-23 12:05

Reported

2024-05-23 12:13

Platform

android-x64-20240514-en

Max time kernel

179s

Max time network

189s

Command Line

com.esaba.downloader

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.esaba.downloader/cache/1664557424545.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.esaba.downloader

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 aftvnews.com udp
US 35.215.66.140:443 aftvnews.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 216.58.212.226:443 tcp
GB 172.217.16.238:443 tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 www.googletagservices.com udp
GB 142.250.187.194:443 www.googletagservices.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 142.250.180.1:443 lh3.googleusercontent.com tcp
US 1.1.1.1:53 pagead2.googleadservices.com udp
GB 142.250.200.2:443 pagead2.googleadservices.com tcp

Files

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-journal

MD5 5669d8433f322fd75d30e88c74a54268
SHA1 27f58b14e8140d666e15c4f4cf1b9435ed320df3
SHA256 22f1712f4265b81ceff6e22cab1350970538299521f89cd8ec2f7891875149b3
SHA512 449c325fef9cdfd03b9a8ae517ce117f2fd5e88c75c502966fa92711053a24ef4868c308b9a032c129629cd93f021e8d65d431c7505b40441fbf1208511753b8

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 ad21923bab11729caecc41531f70f5a4
SHA1 c34e6fe1bb67cee72abd7d618fe6d4f0d57adfb3
SHA256 6c95b67078a9843b7147ed1388b408f60da86aed5a80fa109ba19d984e01943f
SHA512 afffe15159400b3b3112c1ec0918f0f5ca471129939f54a3bbced2159eac0e58b36a2fe9b3d5b7e5d3b4bf897b6e05417f008b7578fde3af25e48185cdb13049

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 95ba18aad7c32cc4a4bfe1f310db7e2d
SHA1 b6e4f1e4281e400412e21d179dacb3ce13ac7b28
SHA256 7b10f4433908df14dacf5bf402178ecc077074ef6ece8cf7aa1f1a0be6a641ae
SHA512 73b85830b4da3fa0672083f6f9fc7a87e0fc69d53ab1f9aeb0f7d3ee4546099f0402705e67e8b77ffa4d5910b3dd9b129e0722db86247ce0d6f6af5bed23a23f

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-journal

MD5 1f1245864d35a5e28cb4bdf15ff2bfdc
SHA1 b670232adc36c662ee68b237830a212788fa918a
SHA256 07962a0501612736b90c0ac6f4a9242969e46d7a60f9c1c8833080b4648886dd
SHA512 4c4d92c2d18b092acb05967209577baa9b01e19d46075a43f73c44e5e4bbab705a7e5e5e1ff786ab9b61e8b065e5015b776f4e7bd7714073a5a8636dc7c2d431

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 0182f84614c2f3f00512aaa61b889be5
SHA1 f73b8404e369ce4a649dddc2850466954da34814
SHA256 648361d95d17c2a1c47e7522cf2f7225f92813f4df0e1a2d75d9d4b6ed3642ba
SHA512 3f85227b12980f2393d76fc5b97c2d3a5b4deefe39d84254fa58d87130f114bfbda9b791ff7a274de39faf54e5999777356e5eb467d9e1dc59ac5794f1907b21

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 76ad83f6f50f7c64b6946f02d871ab9b
SHA1 2c3727ef87c3b559dba31f328c58af38c13855ee
SHA256 454a4de14cb8ed8ddc94a815157579f8eb4b73a4721118a2027b329e9cc413a8
SHA512 8f8560a9b8093497b4abb0f39805465dcadbb90e21a3ade5d5bdb3bc39558992a2fc6ca7e0e877efa862383912ba158a77d4440a7e503a4772e36da59dda59ec

/data/data/com.esaba.downloader/cache/1664557424545.jar

MD5 dfb68e70e8eb84d844c9ce623ee069c1
SHA1 369e761858a904fe9fb89efcfc9bd3e6e56ee44f
SHA256 8ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
SHA512 0d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a

/data/user/0/com.esaba.downloader/cache/1664557424545.jar

MD5 722310b17c81cc3d780d23e1a63eb450
SHA1 0a0c1a939f923570e5da88aa5c7b105052f056e3
SHA256 9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
SHA512 1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-23 12:05

Reported

2024-05-23 12:14

Platform

android-x64-arm64-20240514-en

Max time kernel

128s

Max time network

132s

Command Line

com.esaba.downloader

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.esaba.downloader/cache/1664557424545.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.esaba.downloader

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 aftvnews.com udp
US 35.215.66.140:443 aftvnews.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 tpc.googlesyndication.com udp
US 1.1.1.1:53 lh3.googleusercontent.com udp
US 1.1.1.1:53 lh4.googleusercontent.com udp
GB 142.250.187.193:443 lh3.googleusercontent.com tcp
GB 172.217.16.225:443 lh4.googleusercontent.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-journal

MD5 5dc420886ebefdba4e1434a8669e09e1
SHA1 3d23a16aaedf8519cf8ac39c48da48c2de8aa595
SHA256 02f219c7fcdfb574a22d8c36ac03603c6ec2d8a8b71a9e8ce6e0a23cf4c8187d
SHA512 7e9ff5e4abeb2f2a43ac7fd0a49fcd0e45fef910c71cec2fc3f346f6906480f8161dd74537a1f64b327c28146f793eb1cc8a283b1b5599e07ae24f75eae0dd98

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb

MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 75b7f2466c79530fbcf81a6696e624d5
SHA1 39e4598c281f7b570d7d2ea449e049482df6948a
SHA256 a3785f45a9b99cc9b548ef6a12f14caf2017eca0c3a24d591f0bb3f6d3e92a8f
SHA512 f41ef6f157a902408dbcbb89786fa6fe6792425acb3173eb272cc567d9ecdcce72d84cdc602ef1aa72e49f430a2c81cf5555b76c962fd00b6d497bf3bd92c6dc

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 4d89d73f719faa26b48f945a6f9667a1
SHA1 325d6492b0012a0613d304f17d99b710a1fb3301
SHA256 b2322ffc431dfeb32e2cf48fc958f677d196def711076373c0e98b24d7fc93dd
SHA512 4fbbf30beb9c0fe8356d42c158530d2a49949c18738ce5dc5d06c8405997ab1135e29718fb0d1f6e073a6abe24dccf22f057726ff736bf0536b2589457a931a9

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-journal

MD5 30aaca0bf4a3bfebea56ae5c2228ae5e
SHA1 3618d2030a7b1650a6fe20a1d3a7ba26b979cf0e
SHA256 215bb23d027a76cde1c7058d240ef10db7d3e1a6497189abab13f49b8547cc14
SHA512 32a1ed735fa78765aea4caa38c00b8733af2e270c957a605ecdf940a7ca297f8e91b812275a298e552a690e46122ce1a1a93d7dcfec4204c568c7bd34c8a779e

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 7a4d45ca8df1abb13713c6242a80f544
SHA1 3105d721711678c4872c4a64fd61b472e8c95d5f
SHA256 54f969813b9040d6c4a5996593d4d16994871d193ba6f13524d395d669096a76
SHA512 6833f8a136704aed9e50580ee84ac7da37c1b2072f8827d197da83ef38f4bdfa5759b912d8a0be9464761495a6e8ae06ee11956761d1381e810414327289d3aa

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 d608980eec1a2aaf6e514894150e452b
SHA1 fe0223cb4fedba3dcb729f94d801dbc6cdc3860f
SHA256 0058688efe0390f8379d66983c1e1a3671f85873ce4e9c1f5430cc2ae2ac0c28
SHA512 46c4d60b8b4bd3ef3a0684b30079747cc97b71fe217b76672bfbcc113c9a779896ca800a2b33e51c8adf07088e8e4f46265b5150c9a59019923438ef318690ec

/data/data/com.esaba.downloader/cache/1664557424545.jar

MD5 dfb68e70e8eb84d844c9ce623ee069c1
SHA1 369e761858a904fe9fb89efcfc9bd3e6e56ee44f
SHA256 8ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
SHA512 0d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a

/data/user/0/com.esaba.downloader/cache/1664557424545.jar

MD5 722310b17c81cc3d780d23e1a63eb450
SHA1 0a0c1a939f923570e5da88aa5c7b105052f056e3
SHA256 9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
SHA512 1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

/data/data/com.esaba.downloader/cache/volley/-3608499221023244665

MD5 e695a59ba4b39d3e5cdd4b6413634123
SHA1 37e7f2e8440c6e33d009deee66c48ef169ebfcd7
SHA256 2c4d5d401397c25279b4831f9e97e246c787c32132e841c5dcb6891538293a71
SHA512 41da98b06a75b2b09c07a4e88edbd6085a768401ef0416615a852ec77057c2a262b2aa277f10e29f97a88424ae8f1d0c2c90f60648685bca48e487ae2e682126

/data/data/com.esaba.downloader/cache/volley/-515249652-975763097

MD5 df51eaae44ca2fdb7baa315e8d1e28e5
SHA1 b67458092573c5123a1c289492823e5ef7447ea8
SHA256 6a92ca6babd59cba579026109cdd7991b90dc6867e54ddf74274819d148ddf5c
SHA512 30d0e9ae463c691e4010ad2a2a2b3d69982f4f9c58dbc16c781b0fdc7b1c982a5a570b512be2d35acb24131cf2fa79f2f7ae23348bfb141d4751d1753b6cf58d

/data/data/com.esaba.downloader/cache/volley/36771065-875010358

MD5 bd97d260006e34f9cc5bfc64cb1b11d1
SHA1 9e837aed140b6a26fcc5a89b995b28915e9839ad
SHA256 a959376fdd196a898f6fc801b2d469f98a1de1b41346de852205fae1bc8f3153
SHA512 bf50d35f6a1b113b04fcf7a5090213d163576bdd6a54b6e1d9038ef581554561619e80b6ea887984b8dbe34b8c92b5f2e1eb0eefaec2de3d7f59eaf828bff441

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-23 12:05

Reported

2024-05-23 12:31

Platform

android-x86-arm-20240514-en

Max time kernel

178s

Max time network

158s

Command Line

com.esaba.downloader

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.esaba.downloader/cache/1664557424545.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.esaba.downloader

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 aftvnews.com udp
US 35.215.66.140:443 aftvnews.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
GB 142.250.180.14:443 tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 www.googletagservices.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp

Files

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-journal

MD5 6e6ce7ff897f1ab8b62f8ef81eca8116
SHA1 89473154b6e58f4cd83a90c3f78b6fdc9a0018be
SHA256 04fab4826e99663b5c10bb12b0e9a88a00dbb0fd1fe896259bac740c27e2f049
SHA512 a14e05ab82e8b4eab0265026bb213a32efbd99a49dbbfcab330eac50427d940d63f42301e16856997b10250aef427f4798f38ec7461ee7369eebc0f7d8179cc7

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 6caadee29b38949f9d0fc8773b0de8ba
SHA1 43f01b332a7be6e557d18a5710dc00a99708820e
SHA256 fb88f748085eb654077be0e294bb5780500123dea1ce7d19fdb11d4fc9ce5e8f
SHA512 893252be2b220b4362992cefd13529cc4bb5f5d3d36d17edcafc846ed9a31639fc210f53ba1ecc26c54f3fbffd374852d6bbe461553480b30e5a7cc8328a71af

/data/data/com.esaba.downloader/no_backup/androidx.work.workdb-wal

MD5 0c02c31b85b7d036b32b9b0060ec3c08
SHA1 7bb7b7af7dae43137355d3f8ba8d0631cf493fb1
SHA256 86db390ab9936c0281d8c5d8fc9bffb9ce84a45fca318ecacf215d0836a6da51
SHA512 668810545cd208a4dff92b735408dd3dd10678cee7687816eb8375a4f4eeb9982c5e26646f57589288c00410ff37d30b35da706262eda69cee56f1dba2094592

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-journal

MD5 8cb5a0d3e93231cffff065d2359652bb
SHA1 6c34f7a0baa9a304c92ddb1c00168023a31cfb65
SHA256 963fec29c0899ac5bca0c8995b4eff8e5b28200a4d52f1cfa8ab4fd22f8e255d
SHA512 8d78a20c0d97da4b258e1cc41a0405ade0b3ea1e3e1b137fbd09bd8741a90d5bcca3be5f9e59a7ffc79f4cc1eed8eacf36044859cc7e987747fb438356076cc5

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 e014974a8956e88409d9c246cbc4c59e
SHA1 3a0897e0ff01072f7fc2b5e11896ac3ec1a12fe1
SHA256 b18a8344d87719b7f9ceca725d6c199b74388e1003a1baf256d8efb5c1ddc572
SHA512 0b512b3f1300eb5ff51f708ceb6566c93336caf58bcefcb397e36759d21a47d87becfb40ce4fd753b30d6898e1a0a2c8961e0c352d9ca4d7b956378aad23a09e

/data/data/com.esaba.downloader/databases/LibGlobalFetchLib.db-wal

MD5 84d3a8189c620da7b427649c093c4255
SHA1 6c5176800a192441dcd05de51dc27dc0c6ece458
SHA256 0d24d37d46e23ecbcde462f5681260d54c608f2fb60178b35501d6862c18cdcd
SHA512 460f0a7c215d6add7f5beb56999ef220d40df1b0a87f6c3726dafecff51780dc4b33095ff466816b066c04ba11dc779413fee26f2c4bf4257217914aca06dd66

/data/data/com.esaba.downloader/cache/1664557424545.jar

MD5 dfb68e70e8eb84d844c9ce623ee069c1
SHA1 369e761858a904fe9fb89efcfc9bd3e6e56ee44f
SHA256 8ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
SHA512 0d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a

/data/user/0/com.esaba.downloader/cache/1664557424545.jar

MD5 722310b17c81cc3d780d23e1a63eb450
SHA1 0a0c1a939f923570e5da88aa5c7b105052f056e3
SHA256 9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
SHA512 1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91