Malware Analysis Report

2025-05-06 01:31

Sample ID 241104-bw1j2asncm
Target Grammarly_2.68.48995_BY_TRON.apk
SHA256 a337f81ed483e9d7abdaa7cdb9342b46bfbb9e1478235ac337891c2f935d7ae3
Tags
banker collection credential_access discovery evasion execution persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

a337f81ed483e9d7abdaa7cdb9342b46bfbb9e1478235ac337891c2f935d7ae3

Threat Level: Likely malicious

The file Grammarly_2.68.48995_BY_TRON.apk was found to be: Likely malicious.

Malicious Activity Summary

banker collection credential_access discovery evasion execution persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Makes use of the framework's Accessibility service

Reads information about phone network operator.

Requests enabling of the accessibility settings.

Queries information about active data network

Declares services with permission to bind to the system

Requests dangerous framework permissions

Checks the presence of a debugger

Schedules tasks to execute at a specified time

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-04 01:30

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards). android.permission.BIND_INPUT_METHOD N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-04 01:30

Reported

2024-11-04 01:32

Platform

android-33-x64-arm64-20240624-en

Max time kernel

114s

Max time network

124s

Command Line

com.grammarly.android.keyboard

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A

Makes use of the framework's Accessibility service

collection evasion credential_access
Description Indicator Process Target
Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Processes

com.grammarly.android.keyboard

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.228:443 udp
GB 142.250.187.228:443 tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
US 1.1.1.1:53 app.adjust.com udp
NL 185.151.204.7:443 app.adjust.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 rcs-acs-tmo-us.jibe.google.com udp
US 216.239.36.155:443 rcs-acs-tmo-us.jibe.google.com tcp
US 1.1.1.1:53 auth.grammarly.com udp
US 34.193.218.153:443 auth.grammarly.com tcp
NL 185.151.204.7:443 app.adjust.com tcp
US 34.193.218.153:443 auth.grammarly.com tcp
US 1.1.1.1:53 treatment.grammarly.com udp
US 3.236.1.89:443 treatment.grammarly.com tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 172.217.169.10:443 remoteprovisioning.googleapis.com tcp
GB 216.58.212.206:443 tcp
US 216.239.32.36:443 tcp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
GB 172.217.169.35:443 tcp
US 162.159.61.3:443 udp
GB 172.217.169.35:443 udp
GB 142.250.187.228:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
US 1.1.1.1:53 f-log-mobile.grammarly.io udp
US 107.21.173.138:443 f-log-mobile.grammarly.io tcp
GB 142.250.187.228:443 udp
US 1.1.1.1:53 firebaseremoteconfig.googleapis.com udp
US 1.1.1.1:53 gnar.grammarly.com udp
US 35.171.12.215:443 gnar.grammarly.com tcp
GB 216.58.204.67:443 tcp
US 1.1.1.1:53 subscription.grammarly.com udp
US 54.156.154.208:443 subscription.grammarly.com tcp
NL 185.151.204.7:443 app.adjust.com tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 142.250.180.10:443 firebaselogging-pa.googleapis.com tcp
US 1.1.1.1:53 region1.app-measurement.com udp
US 216.239.32.36:443 region1.app-measurement.com tcp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 capi.grammarly.com udp
GB 142.250.178.4:80 www.google.com tcp
US 75.101.234.105:443 capi.grammarly.com tcp

Files

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

/data/data/com.grammarly.android.keyboard/files/PersistedInstallation2912458637141888825tmp

MD5 e34268debf763ae3d9e8339dff8fc719
SHA1 433e5345e2278f4d4a12a3ad54f4fa8c1afc2642
SHA256 2904ae4ce0cbb953bd1c3212390b34cb9e1bbcd708428a16aeb2410a3390f3ec
SHA512 7d31e1cbee1e49375322c5d96869cd5aa5c1ecb8cd10b265a81220766f1cd2648819393e410aea455704d999744e5e0da359bc94b10e84b964b64648e5d260c2

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 903618a4627635f2cd79ebccada1980d
SHA1 00d7d1f3454e5e0ae2dd2ef620d240602a46168e
SHA256 68a41d7a8f06c034fe84d586dba9a5b7222f32741d28936695502ff4be8d67f9
SHA512 61d26dfe5730ea30216dedcdfb53c41cc378eab2cb3318a047c2b3c036fb35e1c263e7c689fb08e4cbd80899f65a57f0f38b615f6f0c5d5a899b2d2cdfba4ce4

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb-journal

MD5 e0e983ef8c407ec6f018bd59a7747bdf
SHA1 72ece9a95af4c59d95227c0dd3802891993b9cdb
SHA256 1873eacb76f53bda7320130ce3364da390118fc8ff3dcc68a00f58252237a04c
SHA512 a7cdccaab37b18c7663be18a737ec1f5258a04d75ef23d3810315434ff03b360f2dc9ed07dd11404050a071be9658388a35b527660c1d55a00890ec60ecd7bdb

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb

MD5 6dc3e2d6c88742fa3f81b1ad82f1b0f7
SHA1 b68eacb86c65622c57b5b276f4c4101baf40003b
SHA256 643f26e8638e39bc5c315d44d0f4f30b59b1b39fcbff609cbefffee04359a4a8
SHA512 14d91bfff718fc6c0128b7c3a5e4c996127386261400f00374e7f417b9f7a7a22a9263dcfd4c1374d16e8d280ee314badb96951e29208c18769e379d6b32eed6

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb-wal

MD5 ff0fbcd9b9f83b21274bc126499b360d
SHA1 1ff4e0771fa39b30f38ed0dad60f39fd561d3b59
SHA256 6ac95d361441bcdb59ee91d31e0dadfc4cd16a121873b8640077ad2178f1a237
SHA512 efab76eddcadef5341e5a9aa3b0f3939db421851ab04720145a1c50d79decd1e9ddfdcba64b570d24998faeca17fd852ca0405cd96b12abb91f3b7241f8f8042

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events

MD5 5abc5528fc18017fcb895926edb56504
SHA1 79be9ea37b47d8f97c6ab59aa7f557b3450c4e04
SHA256 7ab7f453d0d1861a960421c15b3b58dbeb91da8da9550dc1279f7be4749d68da
SHA512 4de4d84c123c3ea1c350f42f3357f40593b502fb2fab327f18a259170bb8b7ee8c31aada70d0866799c69d139087db033680871c40efcd84dda8942bcc24b2bd

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/report

MD5 b6c44faf2ff869854e07f4102d767f60
SHA1 1842aaa96e99f1c786b988a8b951c73e8acf73df
SHA256 d3fae3b7318fd7168732b7c32cb8196aa8048190f2151cfdf36a618045344157
SHA512 f19ed3d9cf6f23e1b819a1c7d6983dad03889ce4f5827791caee7572f445d36f0670deb0587ccfcb42027cee7fa478c223b5adb229ca6a8244f11f31a0c5f621

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/keys

MD5 096a02d4c5a37573919054fccdafb6f9
SHA1 0a886363c84bf8b102267ad63de1b19584c8ffb8
SHA256 ddad486dcd253cfb76bca19fd3ef2bcd85423267cbbb63f79c99d5ce9bbfad40
SHA512 ae3248fb1772031a9e4bf92e38b90f7fbe3c81e1cc7d5e1b2ead8464239bb8ef3c63e76db30ee286afc4fe9e4f8c912c7ea999e4abe26c3620705bbe6e43b5e1

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 467e7b6144ef3cc07263da551b5c1bac
SHA1 fc4ea84936c0e183cff8d44647dc41e3ebf0a638
SHA256 539fed0398bcd0d15228ec8262e21a99016d33fabd65784f320af1362f15bb5a
SHA512 5cd080b63498dbfcd985013260fe53ed7726f6c596826d9a1a811e4222697b822e95bfc446d97c98706ce86401a9105ecc5022bedb7d6eed0da9a3faf7a309d0

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/userlog

MD5 de0d4561cbeeda2aa7da5e0faa55c79d
SHA1 885b99ce437fbc2a6cee1ce9f9dc6ad72dbe8919
SHA256 2dd7237cdb157148c441b9a83788de9138ab96ff6f21f742608a73639a041569
SHA512 6ff3f8ca47f2ad6eff4931ba4692691ca6b7cbf1279faba818d08ba0a4cad85abe5b23bcc1b5d2de8d918eed6b4f0c93970568f53e01a4c05bc182b4f99d4041

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 9992cf6fa57c56d0e774a2f56700d9d3
SHA1 598ecc756f5502ed6f47b20361b9629a01af355d
SHA256 765a0c3764814d08352f3f7d7f077fa404306c0643e2d25827620aba030962d6
SHA512 216c184f7e83f4dd1eb0f834fb5b149f7b9b788df1d09ebaf13527f8820abb7e3b055ad58f5bd73ea95b8008c3c5c405006af539e5334614f6c279d4cc1fda96

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_settings.preferences_pb.tmp

MD5 a65b9b3e4670dc3b48a9609f816ad531
SHA1 682a73f2c248815fba0cb50c45031a53d6f8dbcf
SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
SHA512 6c06e6791dd41c1c8d8e0246e9bf7fed81dbdb5e918e7dd78cc2af1f002f8a532ec28335b229a0ec5c1ee220861092cb1a7c7f4060663394e420d80ed391179e

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_settings.preferences_pb.tmp

MD5 06bd63584cc699cbc92ade3aeab0ac42
SHA1 e21167e5419847271e7f67b3b286916b8124165d
SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
SHA512 675f177e388425023df5e19cda634ab1e7673681feabfa7bb860089105353166491d15b8c86b5408833230dc5b0ac43e2b5a61e1d36ea0b40d6ce7166bfc385e

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_settings.preferences_pb.tmp

MD5 1fbccf7b936a9b713de5d42c6d8a075d
SHA1 7c8bbdf9151e7f53e2675329d471e552446e9ad3
SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
SHA512 b9177426b3facda6d86b5a83d05805a4dd2f5357d4979ca7282a13ce3f08ef7e7a0c5922675ada826bde264450b1b4ddcc54eea4de62249fd3eab1ec9acf32cf

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_settings.preferences_pb.tmp

MD5 14770edbc1290230aebe82f8dcc730a0
SHA1 f86874de3ff45c2dd7c982f9ada6b5fc979f082f
SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
SHA512 c6be6c93262e0c42527722af20fdd3be2c9936eb601280c36492e0bb2151bb63f88bfb150690ae361c75d01a33647c2440bb49e290af38c5c5af5a707320e3de

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_settings.preferences_pb.tmp

MD5 5f8f55bad3d3b907d05d8ee15970c18d
SHA1 21fa96938a4eb0fbb566dcd82604026f13c263b6
SHA256 4610e348f362bec15111c8a7088d85040f8f7cd646d4c176481f3c59f9fd8473
SHA512 b8723ac1bdb84f57a4c3a02e1d18ae910760ad2768e19d92a0f91a0f59aa79af36ca08f25d671a30a6c13ba2816cb2c239d183a646484358a2cc9cb920e6c688

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/com.crashlytics.settings.json

MD5 a69f0395dd5897d971b7d2a13af73c8c
SHA1 bfe383e7e5dbae8ad580fedeff0331dd6d3f3ed6
SHA256 76eb7d9870040b2189e5b35c65b9c0cb0337d4dcda26cc61faa8191432b40788
SHA512 ee09390781e0996eab9b29b52b5f7127499c5d93d5e2c62fb7d24f35ed1e6ed9049981fe4fde566b67b5231602d385eb430d27a37da9002be205900746522c00

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb-wal

MD5 f8f0a143fc4d26211375a97a7785b4a6
SHA1 449627a3e2446ea9c1902ade6a8dbe34b392d511
SHA256 b16f1fc86190f920d1fc745336932cf99ef363cda34d5b6ff5927c299d72ca98
SHA512 60eace92d507e3b7558316ed8d385600d43334d0bcb31cbb9e1061e0ae4ccbf7a02bc7321b39d13fb211b1a9fa8832be531bd457ef3fdd5cfd71973f421907b9

/data/data/com.grammarly.android.keyboard/files/PersistedInstallation1187691943102803894tmp

MD5 4f3c8c9f24079aadbbcb078bb3c49adc
SHA1 5c90000e2783080396244cf350f7a75a93ed7789
SHA256 a823c4f2f79a5791ffb72d8baf998b0f46925fbb2a8a1c6681c73026c1ab96e2
SHA512 90f9fc3cbaaed5825f73342ff773d6c735e9a25d9727aa30f55be49c735c0ea73752013e33963093b90308a94e24083edb9432971cdce8fafdb24a2bc0c80e19

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/internal-keys

MD5 58c6ffd18aab0e3303cd49e1d2fdb9c5
SHA1 7dd517bc9278addca0e9c229dca834edbe030b44
SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
SHA512 eba20532172d1bff0a750a5293024efd98c0c5822f3f15b469d1a54ce917ea78cc7f644c3e7d7a59dabac0226a942474c2a481f970ba8b519c24bf0765c799b3

/data/data/com.grammarly.android.keyboard/files/datastore/UserIdentifier.preferences_pb.tmp

MD5 5cc920d9f44af733c4ef6bf2617b17cd
SHA1 be3b37afb5f9a43e6993e6e51dee7adb061b5e68
SHA256 1f5143f101fb1a61ff6bf6a962ee605d48fa460e1cd456324404bf2541fcad48
SHA512 40feeef222b077ae34885e0bfd9e2fb52a378c4407358c6ee734bfd068d4739f0d618b212608bce13790c3c281b5c01021e595e8e907b1d2e37de147f8a5e24f

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 78e629f5fdf319b2418e783035aed992
SHA1 b326780c8fc3bcd8f5b5d38091a2666b920631a1
SHA256 4ac0dfd237d220a16a323b6f36ee3975cca4c209400541a476add4421fa55a14
SHA512 fee83c01022baaf9ae5d47eba1fb5586508578ca2f17f36b22a3820916bb3f8ca96a307fe7305206eef84d1ff4b94f892d579ed6695cf91d9f464b884ed0368c

/data/data/com.grammarly.android.keyboard/files/datastore/install-tracking.preferences_pb.tmp

MD5 40fbca52b4b27254edfd2009feb548ee
SHA1 e1c81f6bc703fa6ea1f881e4a890e348fb2cbc73
SHA256 d64a5770ff6b91b299d18d48ec87286fb3c09ac4df25cae6c3e55e8745d56e0d
SHA512 c9a08f1f6d2f80432bdea438b3f7dedfdecb465de4ba91650326f383c162cb34184c154ed486b7f93200505cb6c1bad8aeb5a0f1134d3aa132b5edf5d8f10458

/data/data/com.grammarly.android.keyboard/files/datastore/manakin-treatments.tmp

MD5 e9718ae6a1b2332bdf227759bd9a134a
SHA1 a7f86aad10b8fc8760978e3484740d776b55f755
SHA256 3790ffd8dfda7b7ec1aa51e51497bfccbe01f18dd36c0350704a43aaae9d2683
SHA512 36ba66ab78b3f8b2cdb5b6f2070e6015cdfc97ea4f486919875be5f1b5e3ffd07a0592e60694c126b16f7f5c9ed5801c81c47c0818b229f0ae4ddec25f17b2a5

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/user-data

MD5 882edcc31451772a0c927a793a01bb21
SHA1 4641a98732548f43b6bd9c7c62164bc1fe1ca039
SHA256 01126d7916e4b8eaf7d5e193e99ba6a5814c0dbe7c1ca9b2c2b6bd52190dc337
SHA512 758d85f5a29ae151c8289f6535ad16afecc36f131e493a33178540a2e4c06ef694394a6f3601406ab8345f39e31b69d1edafa94dd17a3392e1362b0acff1a63d

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 7c20b2a806a97c2a8200d7a4aa296b18
SHA1 3d973731508245629c4ce7204bfbe9c949997d8b
SHA256 2a68946107c3ebeb9046a26bf01c72664e940062ef6dee5c262cbafb7b62a397
SHA512 ef14d048544393bd669f72304638decac1df2e42df96374da9d550174f2e844c65d273c097941af5d312c4e404c4c84378a572f16a87232149c2960f4d2b7228

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/keys

MD5 e0b1b3ccc2298edeb61488172a97ffbe
SHA1 6029f649b60c5bd73f022825fd5420750f2aa425
SHA256 a8992506dd751d76a54e8781c7e81d1b551669ff7a6a76b42710bb3a68de2307
SHA512 d08f9b9196a1536e5532e45a05082c87d5d76cb6f868eb3037eb4056ed9a34c4a3b0d32758869d5f9c819b9fc7dad5ad835225c9f2eeb83ad3894def16b4b926

/data/data/com.grammarly.android.keyboard/databases/dbq.db

MD5 d19065500e2c8c62d132d3090f115371
SHA1 8edae4d78b34875390a8e55c67a0afc2c3d0998b
SHA256 84c54062339d25ad1e7033e01957d504a32482bacbb5f2ffe68ea6f06ee630bf
SHA512 b8d60d288955818003e14a587ffc9fc7658608af53beb95192d68aeeade058a73da0f21e60b7e915779311caaee12d1e6fba153d6d54452b83f1e9470112d1c2

/data/data/com.grammarly.android.keyboard/files/datastore/install-tracking.preferences_pb.tmp

MD5 9ea6b402a5fde809bfe0d3c5d063cf1b
SHA1 2402981b5ea1cd4fe4ac43755c46899bdfef015b
SHA256 9be4bf558e2073ed50166bc5c25f419af5c822339f4586ffd4fe109f629c1e15
SHA512 3b6cda092472c1e2eaaca10b1ed94f5c153f6490bbb8dff8effd4d9b724b869b2867e5ff7ea030f52c93b25fd94569cd6d919fa2bc5bd4f3c264a8b4fa213dfc

/data/data/com.grammarly.android.keyboard/no_backup/androidx.work.workdb-wal

MD5 7dac136f855de21a6e72dc1cad24e0ed
SHA1 5ba5747f3cd1ecf2ce48baa15955c0087f2ea97e
SHA256 3ed9d0beca77b2c93b17964ab77b84820d111c7a66a0a85172440c426951e054
SHA512 6be2a703d3828f56f4d8e43e930192a549548051986f5e626275c68b52c0ad02139669b8fe1bc0c05b3879282a2f337e1a682c5823e2f69fdd7de752ed9ff5ca

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 114a08f65f7fba63b5d587d688a4865b
SHA1 7ac3b54692d93e2035c19efdfae827a3c4e12ff2
SHA256 1f0704ec82b0c2c076e0cd97b36d270e79028f42c96e38623c154170c18cc18a
SHA512 b48453d369a881ea121fc4c27e5edfbdd402ec0a5ef4b64736e7e1a9b1e9efd69b87eecad42d32326e20b491c96ece5471998ef9e64ce9670ffa9b5728622c80

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 5a64beb5116a8cf853d0de377f92b89a
SHA1 fce768bcff497413dd39d14b50f1d15557abd42a
SHA256 0084449035c05b536a3083e252cc4939e3027ebd563c07f0b46bc34d3927636b
SHA512 e325cd5b0a779349790f5709b299f41e95e0162b2d59f3197f5cdd2a84b62751c664e35be3dec376c08377718f1805103e6072cb309c9d1212a389291ec03cdb

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 15b01c4ad39e3433ed5b1daf75b1daba
SHA1 2a858d5bed76e36c3793fa9668e9d79f69c2da08
SHA256 4d8f7c28c807bf4d361767c1f40fc3bc37f4a4f7337035fb13894f75b4e54350
SHA512 76c948b9751ed7bb6d350ef6137c35bd3f25943eae73e99345b0c5a3fe86b803588b71c7734cfc0b8666cf31961de246a765050cd95ac31ce02a8099ad5c029d

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 f7c02e4d9fe346b2abd17df1f58cb24e
SHA1 99ca1fc2aa27072454f64b7ed58bbca22a9426ae
SHA256 9bf0f1356485a33da4ebe5f30c39600fb9a32128144de79088f0903c4d5c507c
SHA512 0c45f2b9c4dd61308eb46713a9e6ae56d7da69d0f3f702937c90d2fba1650f63239a270f0691bfce412a0d51d490cbfaff8c7cadf5f0c9626661c84cd6d1cab8

/data/data/com.grammarly.android.keyboard/files/AdjustSessionCallbackParameters

MD5 6e8bcae805a724c528e3b21a6a243d96
SHA1 ca0b96cd0fd00b3b62d4f3a18f0e6ec0d15cfc05
SHA256 d1773f0dcd5cf1656f9cbec1928bee0a93184ea507fd708afd15a663afa19186
SHA512 a96be10dbb4b6a05242e8f43216e61a503cf6bc03b0af8282883535be781c59d09dba064380dbc3e97a83fab80716fdc01becca6378abc1d7025844a82aa1753

/data/data/com.grammarly.android.keyboard/files/AdjustIoPackageQueue

MD5 724ae1738cfeb18a73cbbdb68e07a1ed
SHA1 046a3cfd580882e59da7cd5cca45ed46c4369e74
SHA256 8e94d061d9bfdd1a9ca003681c0c8b34ffdee8e26a063d9db2517d5115cfd504
SHA512 ba5ede69710a33c51885324615526ca29f79ab7ddb60a24f4019d09f361dffdb37241e54008d922c844380255a9d2c113c876f97ee2a21a39010e0a8f2080dd3

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 66f7dfe70525ce980f6752e5b5e98f45
SHA1 c812b3f9783898165839f75dc88420bcf9e23ca4
SHA256 f5016c5c5d493358cc8284b763f840f8b886a02fd753310533329f022856941d
SHA512 f90e377089cbd91ab38718cd8830c394f47447847e8130ecdd033d6de1abcfdeb9add88bc05a22e36916da9e75e27c1368e6e72d0e9dae155453ab47db8ca119

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 06244dc4a3a21f5de22b2c7a3b438a4c
SHA1 8ef1adfce6a0906e2983583c1d611c9ed0f45883
SHA256 7c5d757369dc7e28d54ab00f9100eb1411afb19c661a58f32336af88f865d3c1
SHA512 cdca557dd58ba8a70fbab06179dadb4c5bbb4570dd6562da8bbd3f07bda1cf7d055da0477a93cdc7c1e4dce4448ce31491b4a6de01eb9c73e040bc3b77584f77

/data/data/com.grammarly.android.keyboard/files/datastore/firebase_session_Y29tLmdyYW1tYXJseS5hbmRyb2lkLmtleWJvYXJk_data.preferences_pb.tmp

MD5 de64f51322303649a0a1b09a99d88418
SHA1 a51601486a9b048b86d15b29fe0cb39ba8631399
SHA256 8e87bfe8d0ea556a7ae5b69cc41c2c328c110e476bd83f315e111766444b8c66
SHA512 81fb46d6b456f959e8d4422678533fe360996562b68436dc24290dd891dcb41fbdb3d961ad681b870841168cb132ba898c8bde9a6cb531967a42a7091fd56e0c

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 656bcec5b51c1ac219522a067551d9ac
SHA1 4faafd6010124af521c8bcbf16c7cfdf765b8c27
SHA256 4a2713882de9fe538c0d6821cc32cf177f8e117df5f44e125973957ffac08b60
SHA512 2eb62bb11c192ea3f8a32169307733fc9be8209cf794147a18e6e47f8f72f2fb48a40b1cd25424dfc69982f22311ed5f2929850cad100f2292cce20f5bff39a8

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 525cb25102b3d6ea7584aba1f37f2317
SHA1 1c472edbc362065f940371788deebc2f1a7d2e68
SHA256 abd96ce8405c8db9487c64cbbdff5a05e3415b265dc8beb0823d45f8df831596
SHA512 64d4c0c170b476f8a4d35da57a18df5a893fb4dcdf77c393ea55209ac04b7a382cb9f32cd87aa928b29f4036907f4dcc4a9ae805f89b7eaf061b7739a7ffef87

/data/data/com.grammarly.android.keyboard/files/AdjustIoPackageQueue

MD5 1236baff081fdca683780431a50d32a1
SHA1 8415876bb64382745ae92e0ae397ddc9d48d9585
SHA256 4a4d48a99d4a76837df34edf3ee711285c2ecb4353c936f696d6d0340314d94f
SHA512 5835c45fc10923cbed1dd0318e6d49074b9b155a6c60bd23d9392988e44919bdefedea24fd562fdde62d36ff6c68fd4c80ab2d0ca43053acf4999a1a0f20fed4

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 70b769d21c1d3bacfd7abe305c34f409
SHA1 d44f95806abb570a624ed22a0b5a39880e5aa1e4
SHA256 291032b3c7828fb862204d88d2f769f5c34138a981a9f1226d95ec10bea7468e
SHA512 ddf3ef690d9c5a820abd05f12927e673b7fafd98d67fde58e69c2f2f01bc6eb4c82fedd96c348a30f0b0f2d469a99b291dfa81d1174f9503fdd0863273bafa32

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 4ac8a5e3ab08be4d2ba5e7c1912ad4a7
SHA1 b1107792539097ab459d45cb9f09791746d4a882
SHA256 6a3906e04c2f161db96f45ff178dead49bc815018ced9b29b526186369b10052
SHA512 017b15623612b48f0505df9a94d50661f38b31a457ce5abbcb6f2fa1b678edb86779cbf86d6345319677db35ac6a83b2b4f029b048f7401ff6804ca287dda1d8

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 c060936a1236c67e24640c9569828e0a
SHA1 df7a81da152a86554fa8fece166265596e3d287c
SHA256 7e40ad9ffa795d17deab2c3898f2c720e144df54ea9ca65a308eabbd70f71615
SHA512 c9593d1e1feae62fe1334b308dd0d58a30446234c189b3a721edd52773ec70dbddc39a3c0cdfa8524903f7e8171dbf486d0e1a033286c1d24121559bade11e2e

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 b62e3dafb53427afe1d8ff073dd96847
SHA1 f999a5f68e8a1c7cb53f89e2fb24c1cd6bec9a6e
SHA256 d2210907d2f4c972b18e70b17da3da6980fda925dd197938c1525176dc10c40f
SHA512 dac12efbc288096180825f3f0077f625ee88e60cfd8c1f1719a8c0d17f09d62cc23842985c1882ae5fafea9bcb65f48ffea8ba96b7762f38f473162157d1e34f

/data/data/com.grammarly.android.keyboard/files/AdjustIoPackageQueue

MD5 a3cae40cf02e7d9c37dd9505f929e970
SHA1 a721f812563987d5685d5e46d80d6004c4c0aad1
SHA256 8bdd67bdddb1ea2932dd658ddae06ffe5233bc7a11eb8ea269a6834f588b4025
SHA512 558503cb03ab8eee7d4753264b58634ff4708898939cb72f4a936a0d5ab0fc62ed3d0cf387e4b7ce23effc9a24237171e2bfb2da869330a511c71f300bf9fabb

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 f9b055e8898cd6fc926855caba29d72e
SHA1 fea7af8d0862824a2c81ecf5e73946b9a1ccc839
SHA256 f64f92f9c561cba2ae49eac4789a6c580dfaad7781aed2936850eeb52e515a1a
SHA512 08174a308f7a754a7cedd8902fd9e4870c8419015116913675bb412d20777fbd10e11aa3264a9264567ec450ab01659b5743604db32b2326dc0f20e668a20184

/data/data/com.grammarly.android.keyboard/databases/com.google.android.datatransport.events-journal

MD5 251a9da83b8e5beecc112872c4cc96e7
SHA1 dd91f6cb320f0002723c1d4b3712933611346289
SHA256 c7a2c9138856b74e9fa85ecc226e021b7c93fa6c5f1e5080bcbe5ac5f9654853
SHA512 ee42c297931c0074d7ae00a71f7375429e11c3212f5be3cf37135ca8d6de7b83ca3735c9b5755fc020357c0ebb9818cbec22a412a1227b2d38f55f4e24d9c49a

/data/data/com.grammarly.android.keyboard/files/AdjustIoPackageQueue

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 81bfaab23a406b65b4e2d7b1bccc5016
SHA1 ea9a7e81b4f5165c89dcd6453222a39bbe0f5072
SHA256 3751803e6c41dd9c42dec34b97e323c78523ed10b934f1167fa22fcb55307fa4
SHA512 0f7fba56c32257dac2085eea92907b83c84e7fdc966a57cd26c394b05e9e9a6af646448672d251f9d4a30d9aa46ade9b0cbcc365243cc45773e01ddaa1844a7e

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 ebc8210b0484085f991c8129700cb9fe
SHA1 cec14f14558c2e54f621eac3d3295aa84b29041e
SHA256 b5e416b453fabba860e57a3c028fd220dd894bf45b06575e5d0b0ec1a8189dcd
SHA512 fb3ebe609b9bac0d2e0c3d930e8a6314f957addf3f0e8d40156cf398b29e06e5a04d75458cbe34bb48bb19a0fe0bf498d8b6a3b0a41f50d09e239d7fc6b1c186

/data/data/com.grammarly.android.keyboard/files/datastore/ping-file.preferences_pb.tmp

MD5 553b069791c569ec6cdf1a98c69843e4
SHA1 1b18a6f4ae186312b6cf936ad0ad7e684e84060e
SHA256 8021eaed287ffe538c02202e5a5075c0952c6d761dbcce2be8cdb6b0fc5216e0
SHA512 a97c6f18debba4c162f9d51577a27b8aef6c801d6a852722380f7867a28dcb54c22e5c9e57e44acc69058cc4f403a44b645c558ed83706a7ff90acbf83755a80

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 e43ae55f14df9ba5c7977b8fdc3ff690
SHA1 8af5f23ed6434a88c95478172f9fc33d78ba4e73
SHA256 52442a556edf390d370e64cc70a99e1bbdeedfeb452828eff229a3b8314c7a67
SHA512 102ddec59162528cc06fffaa76198e9176b797be05f628297473986a22a173dcf31738222635075b2c2d4f6e01f4d541e419b3d048b5bd1b50bf2477892e4318

/data/data/com.grammarly.android.keyboard/databases/dbq.db-journal

MD5 a6160bef1e62da3b0836e926c77b2c81
SHA1 d4a8714e4a28c308464fc3bd6216a6159ea4f9f2
SHA256 fc092b4090bb3a9a2a4c4e241987893f673dd4537de80c81298a4e468418de6e
SHA512 d16715d436b728d1a84a757338a0b0a9ce8d61fa3e9d55ce6b41f100df798dbd50e2725a339243630697cfe1347ace2d385cf83bb4e999c437ae8d97424eb107

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db-journal

MD5 63c05d335de0701abde7818836efd0ff
SHA1 fa85cb5610a5df2cfcbcee8fbb360d939c3bf331
SHA256 ce80752de8e288ad363d35711f2742da7b4fc6ee138aecb924879f89e266a197
SHA512 b6b20d798d15d5eb3336400c4b7e7d4c5e2853209167308ea57b9de9757873f08b6aa2ba6e26cddf7ec3dcfda1bca81561625c446d3e43282529fb3e714940b7

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 af446a2a11341167b97c220adf5a3751
SHA1 2c853622b68ab7db1143ea7a54c8b76eab015bea
SHA256 a6f16c15a00e3e8d3f19727eae3c97da110659237a8714e9a3ba68c77b5d2b69
SHA512 f4af249f865dc330d10acf553ca2b5a90f16d16b9a1b3f241ef392db49b7b12df6e645799c84998e0f20f563d4a86d2a75e45bbd4f4b7330a5d01fa8a17554cf

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 55c706d448aa35f41e8b8e7bd47c35b1
SHA1 767e017f1de931f046511e67903537176c035ef6
SHA256 5172b3fe4aff0a6bfc67b6a67bc3b0b21ab16f68a89371d148f8399b099cee0e
SHA512 aaf503bfdb3178a904dbf2739e60932a53e006d731898cda4d138b6a2167c03ad349b354eef482c0ad858d3104bb97e32a0c9bd03d40fe37c5219ee5317fa6e6

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 542477bc361fa099e9fe3963d22d3599
SHA1 9b67007e413b7f628d8c9e8fc0d047d85375b80c
SHA256 78894a001e7f0417fd5947e4f8708be0937cf80ff023c433655c806e47e0edd6
SHA512 a5404a2f4766c0b528ad9137f474ddd0ffa704ca211071d6d3a8becc48e632369a14f3b79aa836ecee929d97f609b44c607b427811975232b222f200f0aad95c

/data/data/com.grammarly.android.keyboard/files/datastore/user_prefs.preferences_pb.tmp

MD5 4e7dfbe3029ec9f50493a3cba136ca39
SHA1 6b9ede315dff2db0367e99f8984976925a09379a
SHA256 8966e0c5b38d03e246b36e193b99d46489279bcdb289f8ab6b46dcd2608b27d1
SHA512 0892a2fc7f73c5233ffbc35570999c7038c81b4778be055a82cf1fc5d69c10cf86e69ff50c5deaa68b50d6a7979ce2c8f86903bc63bf2e8f5cde939c32d64d60

/data/data/com.grammarly.android.keyboard/files/AdjustIoActivityState

MD5 4d454512af2a26df9163fe335979218b
SHA1 d8bf070c894edb4554d5f65bccbaace1debc7db0
SHA256 5b40ce424d8e45628393ac171aedf0dcd26e0c481a105a083b4df0a1bad4cfb3
SHA512 60a104cd6e3b1654db65aae5e271a9bb9449feb5d3f8ea608de8f18ea43092516d5e2c95816da38d5a19afe7fed5dc8a615eebcfaf5da66d9dc0325170ca4fb2

/data/data/com.grammarly.android.keyboard/files/AdjustAttribution

MD5 9ecee977e5345b35e3a06db2d4c0d320
SHA1 606ddf6c71e97bb10b9ec58ceb2fa34bfee4b4df
SHA256 2636d37bf36cd36601c3ccdada686c1006fb843c35ef90e2699e2a9d9b64737b
SHA512 103412f614cf8e8fdf6f16f05d9805a7262d0e6759953c84908c853db306b9755c914e5350887f7076f835df4fc22adf22ded707370e51b4526135c00626844e

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 663a28c20283cb5824d27d09ca6ef491
SHA1 2673f55de929755a12805e06ff014ae60c2400da
SHA256 f49e12aa34163a3742cc4af44aed1af006bbe33b0f93a6ae36baa43e4b68d362
SHA512 2cfeb4caeb5e9b4a13415131729536a768dd0019d5c4825686391cf768373b98534ffef059dcc2e3ff52634592969e26ef18c95576b991f18c6fb7424db79f35

/data/data/com.grammarly.android.keyboard/files/datastore/oauth-token-repository.tmp

MD5 8fc3d68ca88b4ad849c8b8a31c857caa
SHA1 260883039eddaaae948a080a15c116ca79d31f48
SHA256 d409a422c257bc8b2e86a815b251284cb38a25e54aa1d3161ca29f156f101d43
SHA512 76b84de9491710e78fb92076ae8b98dce486a21ebda200bd13ec23a1f81f27c73d3e41eb7f4692ed680c451640d0a47f343c97f4c6f2f08bb2849b939408f8b8

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 bcc3d12d0f5d2de087605750277af1da
SHA1 19319de770034489882dd3528e08eb6df45e2e23
SHA256 2653b193d5832734c62ec5d7b29f53389bfe3f1ce72a4edb41844c0ac8e8705a
SHA512 e6677c8562ee2042282f61432d412f7fbd63aa4cbae24ec857de3451a2c2a73e30be3f2ecb3da01c5ca45bc36182024d9e8cf33dc148074a590b19f4ab577aa8

/data/data/com.grammarly.android.keyboard/files/datastore/user_prefs.preferences_pb.tmp

MD5 55892f059d2cf465185ec98656d368af
SHA1 c6d099888360f20165857df62df487c97ce4b715
SHA256 7bd841310a9a7f273db7bdc8710ed454a756f42090be53ee3540b1b1d01a414f
SHA512 75080c359d07405a5472f35ccaaad208961e8148640a85ebfd5e9abce5c74181aef3bf774bfdc1f38e230e4e9e2773461cc438c8369b5af09b13a8e21d6b9c28

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/keys

MD5 26ea17330b83afa88b41c83d13310830
SHA1 f259bab7a17fffa780664fe800f0ee8ad93b07a0
SHA256 7b6c6d7fbc458246ff5c4d16f4aa1a056a11a8dea53bbea30f0a2dcc3aef1a12
SHA512 f38902afbbe8d8c92f4b0fc1a521748793ccd0346dfba1a41933db00bfe8d1c35429c434258782bb1d0188353400f11bd62b8b454b5373c415675c06f374ede4

/data/data/com.grammarly.android.keyboard/files/datastore/manakin-treatments.tmp

MD5 48491c0d6c6e866bcd202a6a4f5e3808
SHA1 7fb8ad828a7baa6278acabd1bfdeb5075c89ae7d
SHA256 97b9fee37d17033761bae82138907f711274387f87cf09f1a1a2a1eae04cc93d
SHA512 89719b68f771dbcc1600a5e2648c563ac9e70c71c068c7c9067b6fd8d92c5057f75cc8f7137591a4142868e17d39ad4408fc2e8d57ed39e939d75c42894a99cb

/data/data/com.grammarly.android.keyboard/databases/google_app_measurement_local.db

MD5 c21a049ae73e3e7b69b05b6647fdaa2d
SHA1 9461ef54ee54f9248a0c2776d33c0b3e72660b41
SHA256 94e3b10929bb68ec2a51f27e02bd3760faba3ac52b2af9a5780c9eb1f7c294c4
SHA512 d8856cf6c00b06847d89e40b89c1e2bb32e4b76bd8359ed9da8c0528f798dd5ae79153632ac12b95cbdea971aa2488706ccb50d10b351c6d20749c3cfd26e7d1

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/event0000000000

MD5 076e9496700d9877365fe94e46001a98
SHA1 bbe080bc64ec7089c78cf5fc585900bdba2e7d76
SHA256 00599248ec93fc96488828dacdc534028151f53dd2a8ec0187ae7a119ab0c931
SHA512 9e1ab7e4d1b6984049fea072857da0ede6a32f880e8251c305e9d841cfb02133213a31e073a4ee436810e41048854a530e97a5dacf92e659aea51e848ed6769f

/data/data/com.grammarly.android.keyboard/files/frc_1:162642026854:android:7fb8b904922daf76_fireperf_fetch.json

MD5 c0fc472fbea62097dad050a01838d2e3
SHA1 7104915a59bb7c53bd50e8799c24a619fd18501f
SHA256 95e8ae101adab0db1491ba193bc1834c002eab5c65f4d0c23a9d9f56a8771356
SHA512 fe16f919eced1860c8436ea9e413c2b0df13bf2abc6a1dd851ce4a5f872ede7daeb9c91c1404496370a3fad2312b31308922b284694efac46f10666c034d3999

/data/data/com.grammarly.android.keyboard/files/datastore/user_prefs.preferences_pb.tmp

MD5 4f27f370e162bab50ebc473dd287fd83
SHA1 040e47bcecf43f46362e601703cb22db45608f86
SHA256 6f58bff93a2fdcbf254465875b0b5857db0fe8568309964abb2cc4cd63198df7
SHA512 352037fc705041d634292c7e2a3710d098cb39adcae4ba372b2eabd0c558e7096eddf5b32c5717e1fd19124759e455eda6c837f172a59c537b2ea40483a2dedf

/data/data/com.grammarly.android.keyboard/files/datastore/install-tracking.preferences_pb.tmp

MD5 84dc186d64c1fe2477c4db845067ce34
SHA1 e249c357405866fc41bd08a59312d11552fad675
SHA256 5ca58852a5e7746e7e52266ffb73b2cf0b6f8d0edbef200c7ab7ee643c579535
SHA512 a02ceff1f0b6ab271a3314a16d4e6d3fb0694e75475cd2343b4b0521bbb46e92d43b1e6910e7d365d03bbc1777d49ead1ecd5cd254e91a0e1c9ec2cf79f5b422

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 0b584a3a603d3c751c2496bae16daa1d
SHA1 03ff950afef7a26e797c04c707b48f60378e4905
SHA256 e7d63f8be62492e22a31a636fc882d19221df2d892e4e655186f37d9e7dc3a8c
SHA512 402c33bdd8dda9c4dbaf970fbe6b4a03579535611344e17072abb880b6d77186baf79aede63e514848db1e35255ec71752c41db30d6a6cb9fc675ad60be9576d

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 23b60f5f02e260a0414543ced00815d5
SHA1 5d98c5cc5f95f0ac8248d429d586223cd5845ff3
SHA256 2aed8912cd90ce2fe912f7bf05e93435891f2021e5247c118932058d5afebcd0
SHA512 b83c5d505c8b0a079103c8003ab4aa38026f68b8c7288a99faf1dad22ca5601f4c62202121dd04da53733268b0efb7c9d1403498355caae74564c5edb5d8b8e5

/data/data/com.grammarly.android.keyboard/databases/scratch_database-journal

MD5 d357bd2aa176e3f5c267fad8a4ebbd45
SHA1 5a7235abff58faba714047e8fe38fc462709352c
SHA256 90cd78d8fef60fe7a4b1a620b1b95b5d813a6b28b4018cb552e98e30312a2277
SHA512 30c7df73604020b3fa74ecd29cafcfdaf58e12a3068a6f329eeec048627751547882f080bd0d5c44c2cb47942d4f895d9cd2e542266ff4521854f03af5ab2c7f

/data/data/com.grammarly.android.keyboard/databases/scratch_database

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/com.grammarly.android.keyboard/databases/scratch_database-wal

MD5 63d826c3c4bd883071c6e9677f4c8fc8
SHA1 87dcd9d58ac4d122550e0a97de247a9bc0040c4f
SHA256 7aa98ca670e09715033b6322dbc58ce697d26164edd472fcb9b44d5f9aa3342f
SHA512 5bf800baac3641b1c1e45a7ef4d6ee42329d352a499d5ff2e12d38b9acb69b112c26004ad105a9eec83410e3c1fe75ae517474d017c0b9d536628cb973309f2d

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 d270ee43492e4ed70430f692318ab3a7
SHA1 2f4756871dfabe4175070aa003fff02095aa5bb8
SHA256 f9bb507742b6e812e6cd494626cc3ce925514c93a57a7c2f97e3816b96ee56c0
SHA512 73d728d554056ec46ef28df5d079d1fa3b6a62edbb760761439553fe2e5b591492605a67f4c610042df47ea5cea0d5fc4b8d2f821efa8c5a3b6fa880dc224563

/data/data/com.grammarly.android.keyboard/databases/scratch_database-wal

MD5 f1764a794495e01de0f6b7d2f651dc0e
SHA1 28f6c1834d5d8bf3bfb82f7f567c312e928f05a6
SHA256 33700c3ae41bc572ac11db171e97399df22b8c9ad20b4fcdf305de0f8014fde9
SHA512 c6352b57e9f3c65505eda916d9bfdfe3989c4e2492fe4c656ccc0dfab3cd627a0c1dc438f4e37cb7ae8f4cc6ab6b6284700a8e9c5c5f5a7d5727551c1fba43f9

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/keys

MD5 dfa873e90330e292626731bb68353802
SHA1 ef7d2381ab850f79c66b04f9671c67460f680004
SHA256 1bcc6fc190a38c0b53524b6290d6fc7972629bf36b9fb79651dd76614ab1ea13
SHA512 01c296c43b7d4c2059e12fb9be446d59705625ae617e8901edfd1e05310a820cbf061ce1baddc0945cc7fd8c6fa5d5d550c187e1571cfb5688eff5f8a669fad0

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/event0000000001

MD5 0b20355af355c190cfab0bfb753e53d1
SHA1 54fbc06c4efc2a3cca6b6a5f2a00728ce37dfa7a
SHA256 038142d0e1fc8b5b77b7c4237f2c53740af8d873d866362fd395a11533ff9268
SHA512 33d60fe7815caedcfa084c932f06cb2154ea6e08263cd5ef6c3df563606e892cd4f64c692554267e6eb281184b8fb7b6e930b7018232d1ee2c30b407f6554321

/data/data/com.grammarly.android.keyboard/files/AdjustIoPackageQueue

MD5 bdb59269182e04244776bd262e9c5907
SHA1 a6e874a10c5a2304e3ee5257357d9d9182955fcb
SHA256 2cb6d929968c4fcbb575942cbbbd882d334675ca8800b950db01a192e2ef52f8
SHA512 8b1feac515098c955b1fdd185525e17d9d96ab3b4eb9beb9b60ab6c86120927fc26b46ddb82864802fc5f8b0cfdb63e6cd69a8bf77dc7ba221fe16ac246f4ce8

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/keys

MD5 312e390c6917c0bf890152a65b207dae
SHA1 18ee62fe6a9a1abae747c451dd102096f3dbae70
SHA256 d8db70cce762b0ebf34eedd2bc5de79f37ece70c8d19f1bc7b4db87400082afe
SHA512 ec0a0737dabdbfdaea9c87fe137232c8c382213dcc707efd4dc5aaef1e2e8b1d67234e192b1ed6ba502228ce4c2944fd313df4f52adae3d0289b424f444ee79a

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/event0000000002

MD5 942571c37aaf99e44be7d05934dec822
SHA1 ab3e8dd5ca2fb77261bf25ce31b99db256e6b633
SHA256 8f06f6a35882902ae6f0d7c8d6b8199f2b2829f03296a845d7a2e6e3d99c5999
SHA512 3d25fedcc26ac0e9b19e12e344c64cd687400da384e0ec476ea1d6a55ada566467620b0608f69c5c239402b22775a8d1db629c9e50c1b653742d3ed2a265cb0d

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/event0000000003

MD5 b32d03a2225b75d16729eae483827942
SHA1 a798ddf9d4d3b36933c3e6c3e43b673500e0f525
SHA256 93982fe5e92328d7a29270beaf47b6c21a9b622b4c6bafd4de7dc1ba70a61ed2
SHA512 c620187a763145c9568cd8f021bf086ba9a463ba7003260498a75ddb75f4b763589afecebf1bbc388d5f5c855d79de12ce0be12f3ad6f17a35354b9dbb732250

/data/data/com.grammarly.android.keyboard/files/datastore/legal_info_data_store.preferences_pb.tmp

MD5 cfcf82e18ba5ca3b8d98070a73bf4348
SHA1 37c6bb5cd7246204ef6bd88384b765c128e055e1
SHA256 c1d2f11e9af392e57b5f3f9b89fb25adadf2b4b78dbd6a42c6a928229ad8aa28
SHA512 acb07e2f8fd08cc0a038a1a2fc2dde2802456a08311f95cf033c8ebad1029375563687cceb66cd07907f3182e143aa1e34a2fd01179d4264ab6658b4e39e735e

/data/data/com.grammarly.android.keyboard/files/datastore/alpaca-app-manager.preferences_pb.tmp

MD5 7c13b99a24b3c865494802e28daec73f
SHA1 e31d13cda1df96589b6e40f9fb0e19311bc6353e
SHA256 1ad78d83341f45879c51cd76301a9762dabd66c37532bd73c59540b0619e4a3b
SHA512 ccca7f960c1865408da7ab8d234e0907459cbd1dc5e2dbf13b1a2268bc22d9dd24597dbbfa9c8c025ecf6dba4fbc7a3439d04cc4fa8b9593e761205a87245986

/data/data/com.grammarly.android.keyboard/files/datastore/glogo-position-apps-list.tmp

MD5 c6a8638e34bc1332eff0845772947661
SHA1 b387534a2d154eb3300f353457c77c875f4134ab
SHA256 4105171356130f868826339ab08aad97ff70627294b4baf6f53b61ae89cfd47b
SHA512 bb000f604d39da83829bb2423b21f7ed4f6463c9c699579506359eb747b7e2305431421010d35862e0fb1757250b88ee2ac2501bfca8069dda8c372260679ace

/data/data/com.grammarly.android.keyboard/files/datastore/rate-app-alpaca-manager.preferences_pb.tmp

MD5 2f4d0a57611a211948caed2ed86a4bfd
SHA1 681619bcae83dc14e94a82a2bde3c953dab966f6
SHA256 e0da0a36fe884aa7aca06e4aed9cff36ffc6cdb0801a11d2cb60024d3c15cf0d
SHA512 9f312f2b6ccd06701735b9948b56e939e6c30fdfb4ba3d22b3d051d39e58d14ab6f735902fa3a994af9cbbf77dc6b11b008c90ff59a363453f952c0462634d91

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 208b636ad761167ab1d294a1974e2373
SHA1 5726d3f77eabcfe2812edb6da4fbd1707191a73c
SHA256 f04c22665b3b0180452f1b4e2dd580f72c090a7e123399b2cc9c5714219d4ca3
SHA512 2e5d0c9cf5a0abb2264d771e9f2896d5180bb46b7af9bb79455fca0ae80e2c7652363da07646ef33a5c4b342e46756122d9bab5b5ee8574eb56d4952019eb44f

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 696544839bc02684bb1a1f1e390a29a8
SHA1 73045e2635bf5d4d8c213f23cf324fa580ffeda5
SHA256 76efa8f8c659ad7669c4a2befefce5d48a35689f497574af4f4af3677087ce32
SHA512 b12049fabe9d96f6e22f48ad7654f4b6def5413c241e9caf2ae56b2558544d8fd1196778b5303e23c14d9fc1365df4b9cfdb0e801a429e59eb99046380a8ec0f

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 83302c373ed2f38db7037f64e6f3e65a
SHA1 481f32bda35b0c4fe0ac9d8442f452e4c286ee99
SHA256 fe371fd011875f20b06b6aa42a9e028722684f3808100773ea55d93bb367a0ec
SHA512 1389a321855cf3a3bf90e53d1d3f4fa3d78ed11718253765a1f133dc68fdf3ff943354201d88254863ca028e7732ae2786378dee45ff43999613e20ab06aa068

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 390d8eb90a34624e8e68bb8f5f07fee8
SHA1 4a043512091ed8445f5f445cc2a8f16b25d02d14
SHA256 a7b7375d1f13c11edc817f22993f5f41ab134003c2f7e96823326e9433c265dc
SHA512 468369ecabf41a5d42a08d37caa89b2330d2a0fe554b6e56b9e259aab2bb3e8329ad2c6b989955295f0131e6c071e8692d15243d7862aea20365b2a11c9aac93

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 ef744028e2b56ffc7ccf433c6b004396
SHA1 5ac1b60bdf4a4998dc92b0141949935263348437
SHA256 54892f37f97739d3ad2f6e31af18307aff169e376050f8af129940665b3e7d0b
SHA512 b801325e5b17264abd2996b1ddc68344b7f5c2418cfc80f481f14d690097b458cc7c158af1e98ed03e69da2fe1aed4bc4a8231f95c64d42afe9c57fc3fd27806

/data/data/com.grammarly.android.keyboard/files/datastore/SessionData.preferences_pb.tmp

MD5 034429ea72266a737b28f18604597777
SHA1 70734791c24762ab0af4800dde85c0f4e5dad9a7
SHA256 d22d6ed9b542026c7d3b05c36c7ea02c2ccaef315a1ffa1f9d019a5ffae59ede
SHA512 905bc943fe20013b2356241c29316ae5b774da7e54ac0c723827e97ba3321b2365933223415d97f2a51398a3e2bde23910b6a115f66913dcbe99a15e9b348da3

/data/data/com.grammarly.android.keyboard/files/.com.google.firebase.crashlytics.files.v2:com.grammarly.android.keyboard/open-sessions/672823C6022E000110F1184E41A12A86/event0000000004

MD5 7ad5a7fdc61cc62b52e4d36a5ca7d1e4
SHA1 07d02d384f16718a27bb2a97af8ef8e59fd67119
SHA256 79dfcd28f4d4fcba4ef22cd23468d7df2d67a1659d316b37b55c66fa2d3c08f0
SHA512 2fd72d56b3bd451191482a93688229406c86d09b0d75fcc09d3241838c99f6e5a1a8a8caaf71084127bcc62475168d33ba73483576fb5eb2e1a2c4507cfc7afe