Analysis Overview
SHA256
75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f
Threat Level: Known bad
The file 75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-20 00:41
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-20 00:41
Reported
2023-12-20 20:11
Platform
android-x86-arm-20231215-en
Max time kernel
2296050s
Max time network
130s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.200.46:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 216.58.213.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | uskgavm.gq | udp |
Files
/data/data/ir.shz.shzkisi/files/PersistedInstallation7839892464436882944tmp
| MD5 | f127f860e06b6ce72d9e6185787764b1 |
| SHA1 | 209e94d446d5f55f9403ad3771b5c12ba039b469 |
| SHA256 | d8888980eb78c948d6139b8ef51d9797a7f57ac8d6da0441151816edab3c19a4 |
| SHA512 | 461ff606e457799f2317e0677e789977dc9832585e58f67a2a189d641cc089d483105c8dc3919bf7e621fd69adfa4e39cee50ea5d5e75b9f2d1dfd52ab3e11f8 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 9eb48509213dc283077a8cfad196890b |
| SHA1 | 6a8107104a6f68a71d7818584cf839cd782ec56c |
| SHA256 | b1aed853782f14337e96b72aa82ea11ba8251f7e6b1513f2f7dc4a9f6603cbd0 |
| SHA512 | ca35a95eb068e61966b9933f121669561f959f84563921272c048a26b16a1d3eb45f7af40e75d5f2c42daf6c2645af5b03e3b57308bf49092920a3312ee320c4 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 7237409e0640cfab7bdbd429bf821a3b |
| SHA1 | 4c3da934842f8d4835dfe2a9c275a300e5123309 |
| SHA256 | 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa |
| SHA512 | c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
| MD5 | cf845a781c107ec1346e849c9dd1b7e8 |
| SHA1 | b44ccc7f7d519352422e59ee8b0bdbac881768a7 |
| SHA256 | 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7 |
| SHA512 | 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 4f1151a8a47cb895e6428b3df32b1017 |
| SHA1 | 84f5c2d491353a5ad3d281e457d843c9a1adcb81 |
| SHA256 | 5b427af0bc2c453b6b687ca63493678f43ad9e00e21ecc80f0a3360b51793d3c |
| SHA512 | 5d4f39a4951a2edfb2dee8de503ce39f7d3d9aca8808215bb9bf7ab8647c06b5da7cf8ec2ccd8fda5365c11a46dac2360ac498511475ce5f88ab0ab1e4fdd995 |
/data/data/ir.shz.shzkisi/files/PersistedInstallation7636411872840398079tmp
| MD5 | 1c3179329bdf90ad901122fa47cdc1eb |
| SHA1 | b32097e06d009de52594a3582b027cd70cbf2f10 |
| SHA256 | 65c1c350742aeba6a93797d1ed0a20d6c48792fcae244688813e13fe45ebd003 |
| SHA512 | 6a804d61ead949da88300975ea333611c35eb61754d1a14aa1a0a509e7370c5bb80eeb32d20480a958d503f5790c6138e1066045f37a8348045231c8157004e6 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 1c75cc455e6879b983cd8c7e145e839b |
| SHA1 | 9764512ebeeb480178cc9e754fe0c4895f24fe97 |
| SHA256 | e83141c57bebd85ad053373ff8ef14cd018a0a49ae94efb9e09e242aab21b669 |
| SHA512 | 0d2ca7d4e04e481a74e820f3ccad5aaf492e88c14d8a9ad815f38ca2d588a52009e2886a7aa37afc158fdd5b844ea2eb92a9b86781d124b6f4f9fe3298a4d428 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 18a69a79e312f98875a5e73bfc0e532f |
| SHA1 | e0a2bcaddd7fc53edf1ca7968135a21e9ade7844 |
| SHA256 | 82e32dcfe6228de32c91a2ffd598bb338c514f5cbea700d0a2fbe4758a58950b |
| SHA512 | 2c32fab7b4dbffe66e3aa0fe146d8f3b58323a2c0e2b78035c2850dbab3bbbc3ed8ec4da1abc0cb2ef16a0ee35dc132d1caee7dc1418b1fb10a2ef52c0735311 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 29921a1a7b364701b7caa6ee751b2eb4 |
| SHA1 | 0497b0ab97dfb329c3b26dcfc6eb24f132c20c92 |
| SHA256 | f5c5314aedcf5eb129487d6c4c5a17a653c27d902487901ba9be9e55fd428cf0 |
| SHA512 | 5b2083016fe8e25f1a203d9a7bc3136c70f33235e7e8d0d923a6d39e4ebe5fba4b0c85179428c8c3e7850c8736b46f1ba4aeac200bf173a7fc9a3c3d1ac9f566 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | a122bf0e0c24f4000c8f17f99a166a6b |
| SHA1 | c9f737fc6ffb9c901f2fa0f128292ff1cbe8a285 |
| SHA256 | 76bfbf16d77eba3670aa3bbab6cfb241ddd969159088ce286d0f6b1f607ebd63 |
| SHA512 | 5711f19703101fd3fd4b71f39fc419251d27cfbf66849fe17a4f8ec96592558d40686035d2a89d747b1be886273ba3f756bb1b221129233bf4eb8d5c6f12545f |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 4e28c470e0393d2c82eea59d8d02d19d |
| SHA1 | 0ef7d4f6292a92011b170628de63e13bbc8b9c5f |
| SHA256 | d025e459cdf717a950de843398eda4b308ebce2c9ed2988f8e109be410b859a9 |
| SHA512 | 487efa885ce523ef34952823fbffdd708d31fb27bd7915d856f83c51b10f77523e8b49e779c7b75cf56a94f5150df948c06546f3638f8aa9d847317fbc6b3ab2 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | c2a3c7472ff1509ebb16fb3d39511056 |
| SHA1 | 6c1faff352e8eff456e09378c854ac86f1f38588 |
| SHA256 | b8c761968e43c92005080cbec8a254eed90f0439867ad00270861718d843b525 |
| SHA512 | d5c9c62f44854a1ab27105cb9d74026b2b236b39b77b22fc07117caa7b78a6182a17b96407f7dc1deae5e88fcdf4f85b6339cad17777886986c98aaff17677b4 |
/data/data/ir.shz.shzkisi/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | ea689ef89d4f53f6f0f7a76396643434 |
| SHA1 | 9c1e051280db26042e16cdc0786c4e49ff93d44f |
| SHA256 | a2bd04a8aa3973c694df38e51cfa358a27523156cd3f27b1f15ab55f311e0087 |
| SHA512 | 2ce775a4970503a356d4ce8b0bb6655f2694125e6025ea5b73764940623f933105c947dd24e18078a1940554f20e482d17f9844d6641aa77874262a13ece5fc4 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 0b02a9e12ef5bc980044710eeaf6af0a |
| SHA1 | 23e05429f63a9067f598fd5a880c8341f9baa7a7 |
| SHA256 | 2a635d62b7501820cdad0ea7320c585d36f8f5682f04efa39c28fca6e45e23fa |
| SHA512 | 2732f71d68ab4941224b4167bd7b646035362c55ef34aa77d9d6f68107d1b1350927901b05fa8f2dd94404aa063b2f6a469d16061f2e7c8cb752cef685759ba4 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 3e881d9a01ca707bed38018ac69f4518 |
| SHA1 | 5820f9351d7cc8082de6e5686eb9f8fedf6fb830 |
| SHA256 | 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c |
| SHA512 | 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8 |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-20 00:41
Reported
2023-12-20 15:06
Platform
android-x64-20231215-en
Max time kernel
2277608s
Max time network
153s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| US | 1.1.1.1:53 | google.com | udp |
| US | 1.1.1.1:53 | 14.180.250.142.in-addr.arpa | udp |
| GB | 142.250.200.40:443 | ssl.google-analytics.com | tcp |
| FR | 216.58.201.110:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| US | 1.1.1.1:53 | uskgavm.gq | udp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 216.58.213.14:443 | android.apis.google.com | tcp |
| GB | 216.58.213.14:443 | android.apis.google.com | tcp |
| GB | 172.217.169.36:443 | tcp | |
| GB | 172.217.169.36:443 | tcp |
Files
/data/data/ir.shz.shzkisi/files/PersistedInstallation7624124795995251886tmp
| MD5 | 212af7ccc90ca87af6230142bb5a1d52 |
| SHA1 | a0b8d84101fb6d22be12e45a6e1391ff89a2e31b |
| SHA256 | 9270035b636b88d1ee98cd913af515d7aaef30073bbe63d4c97d5d7bd193557e |
| SHA512 | 9ecb8cfcfc487780c511d334e2fcaf430d5d45ff736c5d803f4063f30b1c4754f166bf9670144a8f3d44a27b4b5a0913c7c0d97552a70eb8e07077114ea67284 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 9f72578ff8323f08aca6089786cb1b94 |
| SHA1 | f71b8351389d47ab7993fa411d612e07d5f8d80a |
| SHA256 | ef0139753de85fcd107bc6de9759f6c94f844dde2dfd74157adeb898929f4d8b |
| SHA512 | 012597d63e5f3c46188a6b97cab87204d04aef5cadff840f85b49e9c39b84c428e36358998105934d63c5f3b91c7862d6a20ff468a67a607e5d230ff87da0aa6 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | eb52a90bb70b76e946b62f50b6f7fb85 |
| SHA1 | 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0 |
| SHA256 | 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4 |
| SHA512 | b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 78ab7df73e53683241b50203dd86aa57 |
| SHA1 | 6ca314c385d2d22b70cc790347ab672ff452e373 |
| SHA256 | 601eb61167481ff7c533d7e27d192951d300c719a6f63e5f71dd92b9321e24de |
| SHA512 | aa4b2845040d1e117e0615213ae70851cc87788746f1bc019b1d2286afd08a4e58b8bca2f1bbb968c860fd2d6182402bb90d7d0f07ac1e8564c6f0e7a8b80dc0 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | a52e40b97892a764fdec6230e51aba7b |
| SHA1 | 95a4dd5ed700d234aa0ca0ad5b6bbb1fcdd37ca5 |
| SHA256 | ea4346df818857b0a1391e49c3861c612c25dbd229d6e6c78f2dcef3ba239690 |
| SHA512 | d4f81534ac4417b503bb68f92c080560fe6eb2c27f9cb35bb0b10d17ef81fc0efb62551e1674a01794649f69c357e3443d70aeb7c18c4b85d2d3862ea1f49522 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 7f7a73145405344311aed47bfb0351dd |
| SHA1 | 2459742c64a146477feecbb99abc8f37deab4211 |
| SHA256 | 1ad29c2c8fae01018b35e55ecf1e5e9759ff1706f1ab5f3d45e796820cedfead |
| SHA512 | a07e35d47c32929e6581fa985210c7ee9cbee346a0f12d430287708f716ef9e785bd0ca1c7a4e95b6e1afc58b057bed722656d2d990d73f83c423b8c2dd6811d |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 514543f87384ecf04806fe4bacdd36ac |
| SHA1 | 0bac62093ef4763b158cf95ff02d1aa23bb33efa |
| SHA256 | 0b0aa2143bab148688d24f96a5b8054d91b4e337146ba9da834e538295f118d5 |
| SHA512 | 5505c3acb97a276cd05454372c5d679e1518dd5d09494a6f8a09f06e73ba6193b9d67c43b9f2b425cdc7429b1749b8d80a0fd4d15cbde95a68751db7da3504ae |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | adec2ac0e6c352ea3a6eea54b9e9e136 |
| SHA1 | 8ad72ade1ec456a51bc41721c34a0ddc655c9804 |
| SHA256 | cb2e955ecd59c11a43d696b75fc88e50d213adb1575f4c163ad6b6ea8db8cfad |
| SHA512 | 493249f9c9480da07013cab658119c71aab1986167cbf30988f27dd2a7c588aa82c11441938709ec7f8af39db42f6e49073acb3a0decb550611dc4738a177112 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 8730b5fee628f8bc6fa4b7467bf33218 |
| SHA1 | 2e3bdff4fd335203c4f7064494cfaa84956d17ae |
| SHA256 | 75c6ccbef963d5bf87639ac9374d9b4b03ba7774d33bc52b13e49d38f821adb8 |
| SHA512 | 916fc86fbe7b05d803cf0a09abb1c208f1767fc29e94d2f4d8131655c8b3d8eb0f2698791696d6a893ebb28500ce955eb12a6082120d3f0059d9137b36630252 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 344912788d7425afa659a949783c2406 |
| SHA1 | ed1a6bae006aec29d0d7d5a22cc0cc3685f9cfe9 |
| SHA256 | 49688e53c25652961f8eea0dccb5e851f2dc275950131e070db8baefe502426e |
| SHA512 | 71402546cf9311d444dbaa107f76eac4134f81e2063a62f1d2951689dae4b2805bc048691ea30b26f690c445115270420ac265c56e5f991da2d71e1697a46ba3 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 7333ff842d74d4a36557e7e7a1ae9971 |
| SHA1 | 9f47c9ea668fd87eec43036a8a4b91aee4095797 |
| SHA256 | 70c60ce74340d00badf982c202fdcc51212a9a234431f8f2b3e3cad9726be5ce |
| SHA512 | 7d9579d3867abb9a9d6a14fe9e04f55314198efda5857f4ad283793f69263ad978838a3221659f7fff0c869aa4536971e049c22fe6e6d9edc1a989f1342d231b |
/data/data/ir.shz.shzkisi/files/PersistedInstallation3306879989641982615tmp
| MD5 | 7317dcba9444d30208b8e437f0f37faa |
| SHA1 | d64807e751a10a33ab76a75e4fb717e0c9aee319 |
| SHA256 | 2adfa2ac532a892407649bfe5f9acc70fcb4ab1fe2ecabf63ccfbe2c1b6183e2 |
| SHA512 | 0dcf43680726b3be1e55f92dc9bd4770f16ca43ee2339921778d4e72f2eaf77bc2cee1c1bd74dc92ff115f37e746bed36b581bf38867fa67705d67dd1852ec3d |
/data/data/ir.shz.shzkisi/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | cce3a7e1789604d51e86fde1fde550ce |
| SHA1 | 0026eab4896bc2c50c0f2fa1e64327e3b0cb7c54 |
| SHA256 | c56e79cc2d0f2c8b93f4b177ab4a4dc7f67ab0fc1694a67afbc76d30e9d084a6 |
| SHA512 | ee65ed7952317dedba1ae828a692c97a277d4a8570cca1906cc6eabc0864bc31f09efad2188453cd69241725086a498e2e8dce3b8aee926ad103707e22668b1a |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-20 00:41
Reported
2023-12-20 15:07
Platform
android-x64-arm64-20231215-en
Max time kernel
2277771s
Max time network
147s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.187.234:443 | udp | |
| GB | 142.250.200.46:443 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.178.14:443 | tcp | |
| GB | 142.250.178.14:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| US | 1.1.1.1:53 | uskgavm.gq | udp |
| GB | 142.250.200.46:443 | android.apis.google.com | tcp |
| FR | 216.58.201.104:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.178.4:443 | tcp | |
| GB | 142.250.178.4:443 | tcp |
Files
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation675561454344464215tmp
| MD5 | d332a9f333148887db03de6b6e7c7826 |
| SHA1 | 52990b34ba1b3eca195f88e3de5f7bf38278cab1 |
| SHA256 | 2208cbd3aa5eb2b0bb4cd4124867da81fdb849ec0f8da841211b42bda2c93907 |
| SHA512 | d6716db1950db291ef664ddbb1d0cefaca3f43a3bb7dfcbb7486ac6c2d4abc84780a0ef62a77ad9db88c66b1396d37e1aba4b4337a4926e029b77901f2afca4d |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 6c3b81994272b50b175e9eeeae043440 |
| SHA1 | 0501d3ca6b9b8c110144431f5d748000a08634d4 |
| SHA256 | 990f7c1b2bf833b0170a8f488a084660b16d053bbe4ecd64da83b9d85cb063c8 |
| SHA512 | d43cdd291235dd771e37ec425f587099a870478cc39af957d74c2a8d51030c8fab08a4f74b9c9ec9714f696d78248d945580673a21124c1121d4daad97ecd1ab |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 73dde037d43818d6392e51665bee0446 |
| SHA1 | 79d2b7aaad055aaa21aa371d61b05684c2164073 |
| SHA256 | d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be |
| SHA512 | 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | f859933cefb558d4c42c0b93618e756e |
| SHA1 | be10ca8ce5981639b7e3d6cbaeb0bb8bc4ca71f5 |
| SHA256 | c3ab3cc74d3653c6ba438036d7149667d78b58b6dc7386596efa1307de0e2c7b |
| SHA512 | 7c07d18c6537abeaa7c4acd1cbbb8ea2c81045de775271255d4ad5f76dc36c54d8a2fbd31b5e8a1cbcb54173d44a572622347f2e13d1c93641ea5fb1c1754128 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 893894b5270860016bc3a67da0fb0221 |
| SHA1 | 7a11d9f122e20fce2487f7ec1ddcc4611e77c941 |
| SHA256 | 7126c31071ad50b99e0de6cb14b394091899233c32fca504f55b648037c9e379 |
| SHA512 | 43df07274fe682cb7f458a9ee5b660ab8445a7e7a92e4e27d4580089d206c5c5867b6d2eec57d03ed9d7c4c70529d3fa0bd2be637918e80873f25a40e85ca760 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | f7c35fdaefb8e24f61078d1034d0982c |
| SHA1 | 8328871bb8ad3a6e5ffb54d34cdb1cc6f1e8e938 |
| SHA256 | ff6728e4332fe5a5b8e15ad3d82265d7e7a51168f6b8b5d37c59e989abaec8bd |
| SHA512 | 6e138054aa6fac830f198f0080c14b6494fddba13d8f6dcd80c9d922a56d88d68ec79d0b3ba1cff664340d40b3d7719623c56de2901e2dc0d86bda21399f4f07 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 358ee205b7491d36b90ed75226024820 |
| SHA1 | 70ce34db7c5a4ee8cfabd806af78582d5fcffeab |
| SHA256 | 9876a04e586f419a96f0844398e3bd405a76a0778d5f786ce5879b1717be7967 |
| SHA512 | 32f4df0e914cfa9626ca1f2b7b43c8f12dfa0e64a0e5c6809e5b5093db88aa58d402b00e9a43476dcc0f14796d9d54cb64a051f6825109e5d44483b0a920adf2 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 1c09a28cd6d32fd66e16d3a97d12af4a |
| SHA1 | 9a22ff09a965ba43c8c9a1a243fde48de585d431 |
| SHA256 | 6b2ec82c19e49201803751a2fa114cbffd87f308806e7804665f037648c0a15f |
| SHA512 | 7a436a25941bddec42ce800bc7693f15c04f673b808d905d4a1a63ac43a5233e60a7150e66091a9f9bf56feced0f00f4aa1e974baa95103164b42f976f8dbbd4 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | cb5cd447c6289526072b84d7c312d73b |
| SHA1 | d67c6648098399fe2c6d5b8a15ba45a3aad1ad72 |
| SHA256 | 98d7bceeb39eab7cd111a867b4f53c565722e235c7ed2a01bef3937c14cc0d49 |
| SHA512 | 93902a8a69f2d4cebf7dec683baeb6488d0dceff4c03cde8181ed5b3e1dad95a8c76a7199b26ae0007f959a511d235aa8286522446e7d75fa4969a4152c5ac8d |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | cb9e4c807520ead385ef1107edcbec1f |
| SHA1 | ed862ac89358ee3919ea46ad9ffd075eaf85a7ae |
| SHA256 | 65765d17b258f90006b41586f0e86a94a70e4a47a13eb6a0e9321f6bbad7f926 |
| SHA512 | 68d4a511174e0906130465286816b5302976626d9dd5600ccbb61c02e13cdb6394f97f20b4ae0b3f41e9a4da83df92bafb674b4b5517cbd5fedf7d26cbd31f09 |
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation6671153572997330711tmp
| MD5 | 14824130f3f7cf171a896d7d93f49ebe |
| SHA1 | a5f9113600915bd702c10cc0773907c1e9776ee0 |
| SHA256 | 302cb2364b36b5ededef46de8db866f6dd1a9c720c915d1847cbd17693a8d929 |
| SHA512 | e894e1750a208b6f31bb7328982d0ad7ad999ca9e51dc956cca0c35907a31c730304f7ea068d28effc8a874d46eb0e745fae2666d82a75c49508c2df3dacf593 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 5216244817f9a0c2b48c3d8bf91304a3 |
| SHA1 | 99888ce3612039c43106828ac407b6757316030f |
| SHA256 | 07776f3a945ee30425d07456e401ee92f0c78e08e7d51915817cb8f9e3c01915 |
| SHA512 | b871cb4aca2ba0302a3699948623596a9a18d255d4e5608da962fe79f1750d30c4924a3cff6a1c85a2d068424154b6b27520fdf9b8b992c49186fdb2fd79783a |
/data/user/0/ir.shz.shzkisi/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | ad8e664ff2f129e06fc04eef057fc79d |
| SHA1 | ca01a524174e3deba7529d056382fa4e1b2cf2b8 |
| SHA256 | f104e170e8f2f592f559d49a5c30d02f4fa1ec62562208fbde984c94f403e415 |
| SHA512 | 47cb6b9ae3c7d6965e33171fabe343d43e333ac7adeb46838f7cbb8c4e98fc07b7844f19c8f90cca111bb0cddc92973e9ddca4cdd49941ae23fd9a7c5c8da342 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | de82e2c94d2718988804b035a46d17b1 |
| SHA1 | 705f5ff19093ad209f2a666085d6ccaed3bf58a4 |
| SHA256 | 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39 |
| SHA512 | 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e |