Malware Analysis Report

2025-01-19 06:25

Sample ID 231220-a1zymacgcl
Target 75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f
SHA256 75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f

Threat Level: Known bad

The file 75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-20 00:41

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-20 00:41

Reported

2023-12-20 20:11

Platform

android-x86-arm-20231215-en

Max time kernel

2296050s

Max time network

130s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

ir.shz.shzkisi

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp
US 1.1.1.1:53 uskgavm.gq udp

Files

/data/data/ir.shz.shzkisi/files/PersistedInstallation7839892464436882944tmp

MD5 f127f860e06b6ce72d9e6185787764b1
SHA1 209e94d446d5f55f9403ad3771b5c12ba039b469
SHA256 d8888980eb78c948d6139b8ef51d9797a7f57ac8d6da0441151816edab3c19a4
SHA512 461ff606e457799f2317e0677e789977dc9832585e58f67a2a189d641cc089d483105c8dc3919bf7e621fd69adfa4e39cee50ea5d5e75b9f2d1dfd52ab3e11f8

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 9eb48509213dc283077a8cfad196890b
SHA1 6a8107104a6f68a71d7818584cf839cd782ec56c
SHA256 b1aed853782f14337e96b72aa82ea11ba8251f7e6b1513f2f7dc4a9f6603cbd0
SHA512 ca35a95eb068e61966b9933f121669561f959f84563921272c048a26b16a1d3eb45f7af40e75d5f2c42daf6c2645af5b03e3b57308bf49092920a3312ee320c4

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 4f1151a8a47cb895e6428b3df32b1017
SHA1 84f5c2d491353a5ad3d281e457d843c9a1adcb81
SHA256 5b427af0bc2c453b6b687ca63493678f43ad9e00e21ecc80f0a3360b51793d3c
SHA512 5d4f39a4951a2edfb2dee8de503ce39f7d3d9aca8808215bb9bf7ab8647c06b5da7cf8ec2ccd8fda5365c11a46dac2360ac498511475ce5f88ab0ab1e4fdd995

/data/data/ir.shz.shzkisi/files/PersistedInstallation7636411872840398079tmp

MD5 1c3179329bdf90ad901122fa47cdc1eb
SHA1 b32097e06d009de52594a3582b027cd70cbf2f10
SHA256 65c1c350742aeba6a93797d1ed0a20d6c48792fcae244688813e13fe45ebd003
SHA512 6a804d61ead949da88300975ea333611c35eb61754d1a14aa1a0a509e7370c5bb80eeb32d20480a958d503f5790c6138e1066045f37a8348045231c8157004e6

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 1c75cc455e6879b983cd8c7e145e839b
SHA1 9764512ebeeb480178cc9e754fe0c4895f24fe97
SHA256 e83141c57bebd85ad053373ff8ef14cd018a0a49ae94efb9e09e242aab21b669
SHA512 0d2ca7d4e04e481a74e820f3ccad5aaf492e88c14d8a9ad815f38ca2d588a52009e2886a7aa37afc158fdd5b844ea2eb92a9b86781d124b6f4f9fe3298a4d428

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 18a69a79e312f98875a5e73bfc0e532f
SHA1 e0a2bcaddd7fc53edf1ca7968135a21e9ade7844
SHA256 82e32dcfe6228de32c91a2ffd598bb338c514f5cbea700d0a2fbe4758a58950b
SHA512 2c32fab7b4dbffe66e3aa0fe146d8f3b58323a2c0e2b78035c2850dbab3bbbc3ed8ec4da1abc0cb2ef16a0ee35dc132d1caee7dc1418b1fb10a2ef52c0735311

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 29921a1a7b364701b7caa6ee751b2eb4
SHA1 0497b0ab97dfb329c3b26dcfc6eb24f132c20c92
SHA256 f5c5314aedcf5eb129487d6c4c5a17a653c27d902487901ba9be9e55fd428cf0
SHA512 5b2083016fe8e25f1a203d9a7bc3136c70f33235e7e8d0d923a6d39e4ebe5fba4b0c85179428c8c3e7850c8736b46f1ba4aeac200bf173a7fc9a3c3d1ac9f566

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 a122bf0e0c24f4000c8f17f99a166a6b
SHA1 c9f737fc6ffb9c901f2fa0f128292ff1cbe8a285
SHA256 76bfbf16d77eba3670aa3bbab6cfb241ddd969159088ce286d0f6b1f607ebd63
SHA512 5711f19703101fd3fd4b71f39fc419251d27cfbf66849fe17a4f8ec96592558d40686035d2a89d747b1be886273ba3f756bb1b221129233bf4eb8d5c6f12545f

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 4e28c470e0393d2c82eea59d8d02d19d
SHA1 0ef7d4f6292a92011b170628de63e13bbc8b9c5f
SHA256 d025e459cdf717a950de843398eda4b308ebce2c9ed2988f8e109be410b859a9
SHA512 487efa885ce523ef34952823fbffdd708d31fb27bd7915d856f83c51b10f77523e8b49e779c7b75cf56a94f5150df948c06546f3638f8aa9d847317fbc6b3ab2

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 c2a3c7472ff1509ebb16fb3d39511056
SHA1 6c1faff352e8eff456e09378c854ac86f1f38588
SHA256 b8c761968e43c92005080cbec8a254eed90f0439867ad00270861718d843b525
SHA512 d5c9c62f44854a1ab27105cb9d74026b2b236b39b77b22fc07117caa7b78a6182a17b96407f7dc1deae5e88fcdf4f85b6339cad17777886986c98aaff17677b4

/data/data/ir.shz.shzkisi/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 ea689ef89d4f53f6f0f7a76396643434
SHA1 9c1e051280db26042e16cdc0786c4e49ff93d44f
SHA256 a2bd04a8aa3973c694df38e51cfa358a27523156cd3f27b1f15ab55f311e0087
SHA512 2ce775a4970503a356d4ce8b0bb6655f2694125e6025ea5b73764940623f933105c947dd24e18078a1940554f20e482d17f9844d6641aa77874262a13ece5fc4

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 0b02a9e12ef5bc980044710eeaf6af0a
SHA1 23e05429f63a9067f598fd5a880c8341f9baa7a7
SHA256 2a635d62b7501820cdad0ea7320c585d36f8f5682f04efa39c28fca6e45e23fa
SHA512 2732f71d68ab4941224b4167bd7b646035362c55ef34aa77d9d6f68107d1b1350927901b05fa8f2dd94404aa063b2f6a469d16061f2e7c8cb752cef685759ba4

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 3e881d9a01ca707bed38018ac69f4518
SHA1 5820f9351d7cc8082de6e5686eb9f8fedf6fb830
SHA256 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c
SHA512 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-20 00:41

Reported

2023-12-20 15:06

Platform

android-x64-20231215-en

Max time kernel

2277608s

Max time network

153s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

ir.shz.shzkisi

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.180.250.142.in-addr.arpa udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
FR 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 uskgavm.gq udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp
GB 216.58.213.14:443 android.apis.google.com tcp
GB 172.217.169.36:443 tcp
GB 172.217.169.36:443 tcp

Files

/data/data/ir.shz.shzkisi/files/PersistedInstallation7624124795995251886tmp

MD5 212af7ccc90ca87af6230142bb5a1d52
SHA1 a0b8d84101fb6d22be12e45a6e1391ff89a2e31b
SHA256 9270035b636b88d1ee98cd913af515d7aaef30073bbe63d4c97d5d7bd193557e
SHA512 9ecb8cfcfc487780c511d334e2fcaf430d5d45ff736c5d803f4063f30b1c4754f166bf9670144a8f3d44a27b4b5a0913c7c0d97552a70eb8e07077114ea67284

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 9f72578ff8323f08aca6089786cb1b94
SHA1 f71b8351389d47ab7993fa411d612e07d5f8d80a
SHA256 ef0139753de85fcd107bc6de9759f6c94f844dde2dfd74157adeb898929f4d8b
SHA512 012597d63e5f3c46188a6b97cab87204d04aef5cadff840f85b49e9c39b84c428e36358998105934d63c5f3b91c7862d6a20ff468a67a607e5d230ff87da0aa6

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 78ab7df73e53683241b50203dd86aa57
SHA1 6ca314c385d2d22b70cc790347ab672ff452e373
SHA256 601eb61167481ff7c533d7e27d192951d300c719a6f63e5f71dd92b9321e24de
SHA512 aa4b2845040d1e117e0615213ae70851cc87788746f1bc019b1d2286afd08a4e58b8bca2f1bbb968c860fd2d6182402bb90d7d0f07ac1e8564c6f0e7a8b80dc0

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 a52e40b97892a764fdec6230e51aba7b
SHA1 95a4dd5ed700d234aa0ca0ad5b6bbb1fcdd37ca5
SHA256 ea4346df818857b0a1391e49c3861c612c25dbd229d6e6c78f2dcef3ba239690
SHA512 d4f81534ac4417b503bb68f92c080560fe6eb2c27f9cb35bb0b10d17ef81fc0efb62551e1674a01794649f69c357e3443d70aeb7c18c4b85d2d3862ea1f49522

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 7f7a73145405344311aed47bfb0351dd
SHA1 2459742c64a146477feecbb99abc8f37deab4211
SHA256 1ad29c2c8fae01018b35e55ecf1e5e9759ff1706f1ab5f3d45e796820cedfead
SHA512 a07e35d47c32929e6581fa985210c7ee9cbee346a0f12d430287708f716ef9e785bd0ca1c7a4e95b6e1afc58b057bed722656d2d990d73f83c423b8c2dd6811d

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 514543f87384ecf04806fe4bacdd36ac
SHA1 0bac62093ef4763b158cf95ff02d1aa23bb33efa
SHA256 0b0aa2143bab148688d24f96a5b8054d91b4e337146ba9da834e538295f118d5
SHA512 5505c3acb97a276cd05454372c5d679e1518dd5d09494a6f8a09f06e73ba6193b9d67c43b9f2b425cdc7429b1749b8d80a0fd4d15cbde95a68751db7da3504ae

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 adec2ac0e6c352ea3a6eea54b9e9e136
SHA1 8ad72ade1ec456a51bc41721c34a0ddc655c9804
SHA256 cb2e955ecd59c11a43d696b75fc88e50d213adb1575f4c163ad6b6ea8db8cfad
SHA512 493249f9c9480da07013cab658119c71aab1986167cbf30988f27dd2a7c588aa82c11441938709ec7f8af39db42f6e49073acb3a0decb550611dc4738a177112

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 8730b5fee628f8bc6fa4b7467bf33218
SHA1 2e3bdff4fd335203c4f7064494cfaa84956d17ae
SHA256 75c6ccbef963d5bf87639ac9374d9b4b03ba7774d33bc52b13e49d38f821adb8
SHA512 916fc86fbe7b05d803cf0a09abb1c208f1767fc29e94d2f4d8131655c8b3d8eb0f2698791696d6a893ebb28500ce955eb12a6082120d3f0059d9137b36630252

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 344912788d7425afa659a949783c2406
SHA1 ed1a6bae006aec29d0d7d5a22cc0cc3685f9cfe9
SHA256 49688e53c25652961f8eea0dccb5e851f2dc275950131e070db8baefe502426e
SHA512 71402546cf9311d444dbaa107f76eac4134f81e2063a62f1d2951689dae4b2805bc048691ea30b26f690c445115270420ac265c56e5f991da2d71e1697a46ba3

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 7333ff842d74d4a36557e7e7a1ae9971
SHA1 9f47c9ea668fd87eec43036a8a4b91aee4095797
SHA256 70c60ce74340d00badf982c202fdcc51212a9a234431f8f2b3e3cad9726be5ce
SHA512 7d9579d3867abb9a9d6a14fe9e04f55314198efda5857f4ad283793f69263ad978838a3221659f7fff0c869aa4536971e049c22fe6e6d9edc1a989f1342d231b

/data/data/ir.shz.shzkisi/files/PersistedInstallation3306879989641982615tmp

MD5 7317dcba9444d30208b8e437f0f37faa
SHA1 d64807e751a10a33ab76a75e4fb717e0c9aee319
SHA256 2adfa2ac532a892407649bfe5f9acc70fcb4ab1fe2ecabf63ccfbe2c1b6183e2
SHA512 0dcf43680726b3be1e55f92dc9bd4770f16ca43ee2339921778d4e72f2eaf77bc2cee1c1bd74dc92ff115f37e746bed36b581bf38867fa67705d67dd1852ec3d

/data/data/ir.shz.shzkisi/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 cce3a7e1789604d51e86fde1fde550ce
SHA1 0026eab4896bc2c50c0f2fa1e64327e3b0cb7c54
SHA256 c56e79cc2d0f2c8b93f4b177ab4a4dc7f67ab0fc1694a67afbc76d30e9d084a6
SHA512 ee65ed7952317dedba1ae828a692c97a277d4a8570cca1906cc6eabc0864bc31f09efad2188453cd69241725086a498e2e8dce3b8aee926ad103707e22668b1a

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-20 00:41

Reported

2023-12-20 15:07

Platform

android-x64-arm64-20231215-en

Max time kernel

2277771s

Max time network

147s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

ir.shz.shzkisi

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.234:443 udp
GB 142.250.200.46:443 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.14:443 tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 uskgavm.gq udp
GB 142.250.200.46:443 android.apis.google.com tcp
FR 216.58.201.104:443 ssl.google-analytics.com tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp

Files

/data/user/0/ir.shz.shzkisi/files/PersistedInstallation675561454344464215tmp

MD5 d332a9f333148887db03de6b6e7c7826
SHA1 52990b34ba1b3eca195f88e3de5f7bf38278cab1
SHA256 2208cbd3aa5eb2b0bb4cd4124867da81fdb849ec0f8da841211b42bda2c93907
SHA512 d6716db1950db291ef664ddbb1d0cefaca3f43a3bb7dfcbb7486ac6c2d4abc84780a0ef62a77ad9db88c66b1396d37e1aba4b4337a4926e029b77901f2afca4d

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 6c3b81994272b50b175e9eeeae043440
SHA1 0501d3ca6b9b8c110144431f5d748000a08634d4
SHA256 990f7c1b2bf833b0170a8f488a084660b16d053bbe4ecd64da83b9d85cb063c8
SHA512 d43cdd291235dd771e37ec425f587099a870478cc39af957d74c2a8d51030c8fab08a4f74b9c9ec9714f696d78248d945580673a21124c1121d4daad97ecd1ab

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 73dde037d43818d6392e51665bee0446
SHA1 79d2b7aaad055aaa21aa371d61b05684c2164073
SHA256 d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be
SHA512 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 f859933cefb558d4c42c0b93618e756e
SHA1 be10ca8ce5981639b7e3d6cbaeb0bb8bc4ca71f5
SHA256 c3ab3cc74d3653c6ba438036d7149667d78b58b6dc7386596efa1307de0e2c7b
SHA512 7c07d18c6537abeaa7c4acd1cbbb8ea2c81045de775271255d4ad5f76dc36c54d8a2fbd31b5e8a1cbcb54173d44a572622347f2e13d1c93641ea5fb1c1754128

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 893894b5270860016bc3a67da0fb0221
SHA1 7a11d9f122e20fce2487f7ec1ddcc4611e77c941
SHA256 7126c31071ad50b99e0de6cb14b394091899233c32fca504f55b648037c9e379
SHA512 43df07274fe682cb7f458a9ee5b660ab8445a7e7a92e4e27d4580089d206c5c5867b6d2eec57d03ed9d7c4c70529d3fa0bd2be637918e80873f25a40e85ca760

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 f7c35fdaefb8e24f61078d1034d0982c
SHA1 8328871bb8ad3a6e5ffb54d34cdb1cc6f1e8e938
SHA256 ff6728e4332fe5a5b8e15ad3d82265d7e7a51168f6b8b5d37c59e989abaec8bd
SHA512 6e138054aa6fac830f198f0080c14b6494fddba13d8f6dcd80c9d922a56d88d68ec79d0b3ba1cff664340d40b3d7719623c56de2901e2dc0d86bda21399f4f07

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 358ee205b7491d36b90ed75226024820
SHA1 70ce34db7c5a4ee8cfabd806af78582d5fcffeab
SHA256 9876a04e586f419a96f0844398e3bd405a76a0778d5f786ce5879b1717be7967
SHA512 32f4df0e914cfa9626ca1f2b7b43c8f12dfa0e64a0e5c6809e5b5093db88aa58d402b00e9a43476dcc0f14796d9d54cb64a051f6825109e5d44483b0a920adf2

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 1c09a28cd6d32fd66e16d3a97d12af4a
SHA1 9a22ff09a965ba43c8c9a1a243fde48de585d431
SHA256 6b2ec82c19e49201803751a2fa114cbffd87f308806e7804665f037648c0a15f
SHA512 7a436a25941bddec42ce800bc7693f15c04f673b808d905d4a1a63ac43a5233e60a7150e66091a9f9bf56feced0f00f4aa1e974baa95103164b42f976f8dbbd4

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 cb5cd447c6289526072b84d7c312d73b
SHA1 d67c6648098399fe2c6d5b8a15ba45a3aad1ad72
SHA256 98d7bceeb39eab7cd111a867b4f53c565722e235c7ed2a01bef3937c14cc0d49
SHA512 93902a8a69f2d4cebf7dec683baeb6488d0dceff4c03cde8181ed5b3e1dad95a8c76a7199b26ae0007f959a511d235aa8286522446e7d75fa4969a4152c5ac8d

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 cb9e4c807520ead385ef1107edcbec1f
SHA1 ed862ac89358ee3919ea46ad9ffd075eaf85a7ae
SHA256 65765d17b258f90006b41586f0e86a94a70e4a47a13eb6a0e9321f6bbad7f926
SHA512 68d4a511174e0906130465286816b5302976626d9dd5600ccbb61c02e13cdb6394f97f20b4ae0b3f41e9a4da83df92bafb674b4b5517cbd5fedf7d26cbd31f09

/data/user/0/ir.shz.shzkisi/files/PersistedInstallation6671153572997330711tmp

MD5 14824130f3f7cf171a896d7d93f49ebe
SHA1 a5f9113600915bd702c10cc0773907c1e9776ee0
SHA256 302cb2364b36b5ededef46de8db866f6dd1a9c720c915d1847cbd17693a8d929
SHA512 e894e1750a208b6f31bb7328982d0ad7ad999ca9e51dc956cca0c35907a31c730304f7ea068d28effc8a874d46eb0e745fae2666d82a75c49508c2df3dacf593

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 5216244817f9a0c2b48c3d8bf91304a3
SHA1 99888ce3612039c43106828ac407b6757316030f
SHA256 07776f3a945ee30425d07456e401ee92f0c78e08e7d51915817cb8f9e3c01915
SHA512 b871cb4aca2ba0302a3699948623596a9a18d255d4e5608da962fe79f1750d30c4924a3cff6a1c85a2d068424154b6b27520fdf9b8b992c49186fdb2fd79783a

/data/user/0/ir.shz.shzkisi/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 ad8e664ff2f129e06fc04eef057fc79d
SHA1 ca01a524174e3deba7529d056382fa4e1b2cf2b8
SHA256 f104e170e8f2f592f559d49a5c30d02f4fa1ec62562208fbde984c94f403e415
SHA512 47cb6b9ae3c7d6965e33171fabe343d43e333ac7adeb46838f7cbb8c4e98fc07b7844f19c8f90cca111bb0cddc92973e9ddca4cdd49941ae23fd9a7c5c8da342

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e