Malware Analysis Report

2024-07-28 14:36

Sample ID 240614-cbb7da1cjb
Target a7a24b455b3596cf81956168c3ddb713_JaffaCakes118
SHA256 910bb070a20acb859d771e105fb9ccc650f68bb8dda6af7dd582675490586294
Tags
evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

910bb070a20acb859d771e105fb9ccc650f68bb8dda6af7dd582675490586294

Threat Level: Likely malicious

The file a7a24b455b3596cf81956168c3ddb713_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

evasion impact persistence

Checks if the Android device is rooted.

Checks Qemu related system properties.

Requests dangerous framework permissions

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-14 01:53

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-14 01:53

Reported

2024-06-14 01:57

Platform

android-x64-20240611.1-en

Max time kernel

48s

Max time network

148s

Command Line

it.rortos.extremelandings

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks Qemu related system properties.

evasion
Description Indicator Process Target
Accessed system property key: ro.kernel.qemu N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

it.rortos.extremelandings

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.42:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.72:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
GB 216.58.212.206:80 android.clients.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 172.217.169.42:443 tcp
GB 142.250.187.194:443 tcp
GB 172.217.169.42:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp

Files

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BE02EC-0001-13C8-4F64AF580F54BeginSession.cls_temp

MD5 f92c156f03471f9c702a13dd89669d8e
SHA1 bb5d11967c792f2eba0818f5d7a8e2e9b50b813b
SHA256 185408a72884ed526df112110a1c74124c2a04444cffb6a591d6bc692666be15
SHA512 4b451e53962c445e416cf3acae4f5ef748cc5f703009ee2ab0721afce7a4cdbdba44ff201b6a11ca4caae838e4bec6dea43b52f18327567c7d83cb0e08f0fe89

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BE02EC-0001-13C8-4F64AF580F54SessionApp.cls_temp

MD5 7c71fe2b646bdbee1b415a9f28c3028f
SHA1 480c5d3a5a059ef00245ff47632264b9c9da3248
SHA256 9469af23d2b5145708bc1184551edbb06838cb50eefbf4865ed2b82035edfb68
SHA512 7189174994487f074fa7bbd7f6cdc80de22a72fd9007481b7fb97581e28e5de4a625f3b8df96905f1eccd9bc6c7ac8e2fec7f2dc3c077e5180e54ab696afbafe

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BE02EC-0001-13C8-4F64AF580F54SessionOS.cls_temp

MD5 2566d27ce8c28d8961f082c375d7535e
SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BE02EC-0001-13C8-4F64AF580F54SessionDevice.cls_temp

MD5 68bdf5148e3bcd419dba967c5235139d
SHA1 7680e292f7797c9fb9196342ddde7c7eb4d02a1e
SHA256 3095583822cdd68108d37ddac29b05206016e9b4f2ddea083f433f2b699caad9
SHA512 448c515e5ff3174f2d91545d4075fb4c167351755fc26278ea7e48dd4007549c3060886868a7a2dc1dba05cafae4b36b09be88271615dfda567edeefcd28492b

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 3711a970be67af2d21330ca1e8127263
SHA1 28a6aa5e8ce3d7fe4750f46a8527eb42eea80d26
SHA256 9d2c37a8e073dfe67f4b9c9490ff578046caa534ca19a06847b2661acf90e321
SHA512 cf2e0883d88ef6f82fcc9135f69ebdcd65390e629af2bdb8797674b63e6950387b0d4efc43ee1ffbb0a4ad24027d9e39922709147a8a17fad0d5f28ef0187b5d

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_236b819e-b9ba-42ea-aa93-f49de600d3a5_1718330047399.tap

MD5 6a7fa68c78890c4980b3cf92009d1300
SHA1 fec0dc453984d3d8019b44faeccb042a17e72fe0
SHA256 eccb21f03b4cc0dceb3c7076365da77d24de8fffb5938ef71ad646fc3b8b40b4
SHA512 aa9ee5260de8214452abcfb1e507446e3d99696e79cf04c88262b8ac613e5d0fef13d7b4f376935aed234a96d29b79199df7243105a4b46001f6840c24773d79

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 fcc3c16016fdff64ff140cd0ab99457d
SHA1 7a06986cafb29be9cc6d069b64833a756e519047
SHA256 4da777a1f6c0f9e18e427f488dffc7595c9f9f0113e46e0c1111e285c3926c0d
SHA512 f25af293326694fc386ebeec35b7c01e646ddc29aa52c7289937a29bea186d206245d76bb6db5f7acaacd94ac841a6447b6c96083242ba8be846bdd5d1b21efa

/storage/emulated/0/Android/data/it.rortos.extremelandings/files/Unity/533f7175-deb3-45cc-ad62-af7cef3f3a7a/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/storage/emulated/0/Android/data/it.rortos.extremelandings/files/Unity/533f7175-deb3-45cc-ad62-af7cef3f3a7a/Analytics/values

MD5 f4fc584463db18d2f51a352d427604f8
SHA1 5b89ac635522ac62012e8a55853904399988da7e
SHA256 db0aad0aee5372043afaa8b758fd7cc28dd2e755bae748e238277f410861f6ad
SHA512 02aaafc391d5cdaae7cc988794d9611007f3eed1bec268a8376fd91eec2b06681bc5e98cd028c48653e0fb7a36a495e80fb8ddeac7137005b92261fa139edb50

/data/data/it.rortos.extremelandings/databases/DownloadsDB-journal

MD5 73cea0eb001c4b6c0efbf0de1a0f14d2
SHA1 7fd65f139a779871d848e8b3ea0567e73b2937e1
SHA256 04093b590d6a42702511cb70226401b3c9df2e95c78c2d66b9dbdcd3473369e4
SHA512 3c80647a8f92d2ab43280ac57cf732fb2b26c8554a9f5a22fe55c5db408bd86c082991cdb5547da8b775d9e4c8f25493168320080a07d5aac461b530725e5e19

/data/data/it.rortos.extremelandings/databases/DownloadsDB

MD5 fe85c0e4f5d8251763da4dade594124a
SHA1 b2196d13d889168808cc301e34a1a5259877e8f9
SHA256 68a0ceb2b4920452dc324fd95859fa999f4c1648e765c59a5483a82b8c4587de
SHA512 50bfff7541d4cac4d85c923963f37301320b24bf4b190b83773f2ae52cae572671f99fdba1d1b7f952e571a459a96f5d775c3410f36edcceceef8f7c324d5e4d

/data/data/it.rortos.extremelandings/databases/DownloadsDB-journal

MD5 882dfcaa685a66fc60ee5cad334fa63b
SHA1 034765d3268e700307128c6c63ead9f30716ba49
SHA256 516e0af27a795b957bbf8f917db2cc3a3c86baccff184e82500ae379bba80c5b
SHA512 5194a6cdea6f0bb02bc76f545ff5e9fe117d63a9bb47926e321f439bfa02216742a260b2f5b29a736df7b9eae42976697fad8de532c901a3f33ac855930015df

/data/data/it.rortos.extremelandings/databases/DownloadsDB-journal

MD5 844d9b13707efff993b5beb3be63e6d6
SHA1 7aa56043d58be60cb9a7594989905b7db64da50a
SHA256 a0dfe19f6637f251991a47046d155f134f32c3a64a1fa250fe5262f3ed17498d
SHA512 40829d9c0224380ed60a511bb192ffcdd550ba4b18becc2f2b213e088fbaf012be14441ab7663a3beb3e64a05a385d886c6d6ce7875443493e985bcf03edfb79

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 01:53

Reported

2024-06-14 01:57

Platform

android-x86-arm-20240611.1-en

Max time kernel

8s

Max time network

159s

Command Line

it.rortos.extremelandings

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

it.rortos.extremelandings

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
GB 142.250.179.238:80 android.clients.google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp

Files

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BD016D-0001-10E3-22D7ACD93D32BeginSession.cls_temp

MD5 f9e804e095d3b6d8708c873aae0f3351
SHA1 939ae1b4395c2c574162eb6a0bb3a72d8e745c65
SHA256 062445647ec800eb4fd80a9e1c9220873a0120e6b78f4d5af789e016b35a9237
SHA512 c7d63463eb2e718702adb8bc762771a00c7c3ad17ef0e9c8a5ed2125de8c9c855a9779f9a8ad1faf651b7f316a1bf2bf2e674889450338afd927a1c909352514

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BD016D-0001-10E3-22D7ACD93D32SessionApp.cls_temp

MD5 c06692dfb7faf5e71b440af63c81f45d
SHA1 17d649a2697389954beba031b47704910b52e3e9
SHA256 ae3ee303b0ca43e02becbed959e1b0b42ece67357e78d737d51fa29ec5c2e158
SHA512 2a68bc7088c4deeccb054430ab5264f7d6f475a847772dff4908ee2d7ca097ec4d3723a189608622fb8d6ff34a36d7490ccb700998efa88cc9a06a23385d49e0

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BD016D-0001-10E3-22D7ACD93D32SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/666BA2BD016D-0001-10E3-22D7ACD93D32SessionDevice.cls_temp

MD5 10e6499930be82720ed65c3a1e704bca
SHA1 6180ea40bd324bd8f735e9edd523cbdc1744c14b
SHA256 4f0dc81dff91def8b5d42c8af625b67d1df08842fdf72300a2295a01a17136b4
SHA512 d69510a93a102c48d9a593a9c4547beed507402243f277572f941e68fe4a2b10adac13ad8b68f252023e776888ed8d2af9b661deec655b6c0727e37aaa3bff10

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 b77dbb5051e5b9d2c712184f298b896a
SHA1 ac3affbbc6c4e757e751443a06c04a8b992ac66e
SHA256 f277b48eff95e6d02f0e94f2cb000a50d224a978c8faaf4aeac0e7b1d698a946
SHA512 2d0bc843ffec83d1b61eca560444f031d4e84db29703647eb5adaf418a9e8105f990275d71f1daa04fd445d6677ec73cb3a740bbd359a05e5bb8512f3fa7e0e0

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_5755b218-51f5-4bda-9b2a-4fb0ccbd0a0d_1718330045950.tap

MD5 46eee39cdff3f68ac9f7b3a5fa87e31d
SHA1 c893592ad0201da01461b484e629732cdab06284
SHA256 71a566770f68423c6860c30c2e4d7018177e615691070eab9ca8adc4e56405a5
SHA512 58c54a29843d4cb4df767fde0eadf03a1e428c64d3e033be5e2480ec478baddddd175e7a8468a2392449628b2502b1432a8c36205215e6870aa2713d17d78d26

/data/data/it.rortos.extremelandings/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 2ca3aeac87864afa109e1b5c4263dff0
SHA1 83ddd3a41e36699fe622ab04eed97e6c0378df21
SHA256 0d6d56cd333bbe74cd2b49ebeedbcc810168b788dda7ceeb68eb2159df1d4099
SHA512 508f8faa1e0486edab5b53aa2c6513de96de6135d05338110b2bb85810b45c409d1d9edf7e77a159a5684d3e33be77c73196e96940e40bfb0e5c9703f74242b9

/storage/emulated/0/Android/data/it.rortos.extremelandings/files/Unity/533f7175-deb3-45cc-ad62-af7cef3f3a7a/Analytics/config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

/storage/emulated/0/Android/data/it.rortos.extremelandings/files/Unity/533f7175-deb3-45cc-ad62-af7cef3f3a7a/Analytics/values

MD5 f4fc584463db18d2f51a352d427604f8
SHA1 5b89ac635522ac62012e8a55853904399988da7e
SHA256 db0aad0aee5372043afaa8b758fd7cc28dd2e755bae748e238277f410861f6ad
SHA512 02aaafc391d5cdaae7cc988794d9611007f3eed1bec268a8376fd91eec2b06681bc5e98cd028c48653e0fb7a36a495e80fb8ddeac7137005b92261fa139edb50

/data/data/it.rortos.extremelandings/databases/DownloadsDB-journal

MD5 60181f78a072fa2ff394ceb34f1bbea3
SHA1 3c1943ec9ca199a5ac47a367721f65e19981489f
SHA256 dfae6209ba02cb42e10c8dbe6a005e0ace63e44c11b534b45ab7467befbe7823
SHA512 6983466ecd2cac00a0817181f146e404f1e369411a121ffd4c445ae8c4d66a0f36ac0fb5ea54023198867727c172908cf23fb8a63526df6d01b88805ec718219

/data/data/it.rortos.extremelandings/databases/DownloadsDB

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/it.rortos.extremelandings/databases/DownloadsDB-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/it.rortos.extremelandings/databases/DownloadsDB-wal

MD5 2b64978b505155253124783ffe5749ab
SHA1 28c2bb3e6dd63b7bc6d9b06266bec7e4e7019503
SHA256 3cd0a9edd857251c9ac7987ee757854382582a22ac10f0c735e1fde8649a3329
SHA512 654122c12bf7ebdfc8f32340f3529c8a61a78d9549487bb4bc4b01c5fb45e3a5bf73bb8c13784b7e6693c27c7de927ac7f7ea8b162c6f98e115b9136378684c9