Analysis Overview
SHA256
8bbe1e7c5a8aeaa5bb32b526612ba4ce832852f38142185a032ea4f4c300e23d
Threat Level: Known bad
The file 8bbe1e7c5a8aeaa5bb32b526612ba4ce832852f38142185a032ea4f4c300e23d was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-20 06:28
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-20 06:28
Reported
2023-12-21 17:51
Platform
android-x64-20231215-en
Max time kernel
2374014s
Max time network
160s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.180.8:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | iuskmmdm.tk | udp |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 216.58.213.14:443 | android.apis.google.com | tcp |
| GB | 142.250.187.228:443 | tcp | |
| GB | 142.250.187.228:443 | tcp |
Files
/data/data/ir.shz.shzkisi/files/PersistedInstallation6017989563741687006tmp
| MD5 | d824a39f897b2968f64f90fec4d98474 |
| SHA1 | a064651302438a616bf48c271517c9892ace4354 |
| SHA256 | 68518d23bb57b72e4cd86d8fe1f3e8928345b232e1b1a2de7ae11987c66737ab |
| SHA512 | 2a752e9e10cd149cac8a4b4ea4ae30e4bef1e3cbef901fd8146d99dcca6250cb66decf31350bdc2d1c4e0339a8a288b6ac753d1f9edaf5197216c0fb7b82e4a9 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | e48d4af203005aacd88584885cbff3b9 |
| SHA1 | 2dd1fb4719cbba091257a461aea86c324ea19302 |
| SHA256 | 5a9059688a9e1f73f1e36a06ce34ed3bd5cdfc53d71b58d59caa25d949e4bb2f |
| SHA512 | e5a272599140717de366fcdec0389a809c07fe87fd8f829863abe34822986f9694242274b250a178e4e554f09b972c477bc1258b9833b34b15aca419a4cfa20e |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 163b0e3f017becbc89b9d7f330b78f09 |
| SHA1 | 1ef9cd8ac8655190468d0ccece0a4738634ab0f9 |
| SHA256 | cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36 |
| SHA512 | 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | fed3720778692329e0a39532f38cdabe |
| SHA1 | 6b39aef4453df52e05882daade704deb707cf288 |
| SHA256 | 93a550f3862a7bb603f20f6e073f1b1e04d097a647151e42b8ee2a6beaeb0ef3 |
| SHA512 | a674d79f3c39dd0bdf2814710bc44157915583a823a25ec34280b275159c73fc9cc7f431f9e5a7b92093dbf6457fa56b4fa25a6c12c631a908af44ddad70df73 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | c81c16d8b434ae1534babe5376b004bd |
| SHA1 | ba9ff92c99aa548a5583128f560e9c8fb415dc0c |
| SHA256 | a4a2ef3de56075913a71f0a061fb1112058ee5840365a14932b8e55a5973397b |
| SHA512 | 5a54b612eeabf32f3e40d4551dd5eebaebcab17c3fd221770a941bd06300955f09fba09c37f810dede47083c5efa6699682bf972af24955f6057f70748a0ed1d |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 0ec42a523fcebc1e3c3d97e4b6ed757f |
| SHA1 | 0d9fd5dcd687c4a95d348975b94c3b143b8d31d1 |
| SHA256 | 90fddc0322682aa0e31cf15681361186df5a84d11da4d7b3c65cd07201f527ad |
| SHA512 | 021932921fae4155df381ef70e49862d1ee6f4df488fd2d85b0d9735a053406c6fc6c248613770928a1798191e81a39b58ff8829c490416323ab61a555745036 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 0b4d784b9797aa5d9027a09dde618654 |
| SHA1 | d98cf33d88f4b23602caf77d4fdbe4eb34059b30 |
| SHA256 | 5a3144ef05a4267fdd1ea12484da1a38e53b4fe52025447da93a268b48799587 |
| SHA512 | b874bd6011e91d82011dfdbc20ee1e423a88f053dc64bfcf5b47396dc0afc9b25e3ab9f4a13b06b884a39064708f5def37f4a72678733f338fa0a103a13fcd1f |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | ccdf95957e1682bb6f10f7168104597a |
| SHA1 | e43b5907448d63f9de350f570087e830e7bbcc5e |
| SHA256 | bf8ccb9be278dc919db44c285ecc344309151f24e53dfa8692dfeefa18c3ea68 |
| SHA512 | d41ca5e6c3c6de7935c91eb13c3710c98dce6a6149f3b531d6ffc72158ff38e667eb172e0fcb63c70a9c1bf43a74c8e0896aaa79d25e3b921059094ab8338f0c |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 9fe12e123bda7a2e49a9e1a9bbad1a47 |
| SHA1 | 6d812f69d128be0bde314993a1c712eda3d16cfc |
| SHA256 | bf1d35bafd765a664551089b388284ae399c4e5af585a4deff673cec0679e012 |
| SHA512 | 85a634ba1f9d0411c4fb48129d1885bddd9b0c664726036d2d9ec267ef8af7fb01fb57b06822f12572ff0f23a1af621c3a9326f12952b3ac546a418485c29357 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | f6ff02cce94d96842a147c08d6e70a8e |
| SHA1 | fb203e1982de92efc5417c9d4bbb70db1dc6d74b |
| SHA256 | 0d90663d75be7f6ca528cb51c45c8b512b74ea3ac0bb383d9d94c3d3a9adb1d2 |
| SHA512 | 8eeffa9ad6c0fb3e8ffc2a314d765e1418e5ad384df1006ee1807ebcf235e2abda98f7897c53077c8410668cf7b9a956280156999acb9a2c53fb27dd0dad3654 |
/data/data/ir.shz.shzkisi/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | acab68d58d8e7952a5a0ec72bf2bd9ee |
| SHA1 | 22c8ddf00ca2288cb85c23cc0b82b3792d401152 |
| SHA256 | 5ec2af7576bbbc871b30520527e58ba608769579bce300fc928d2952f2f4bc4e |
| SHA512 | 1ce15408673c72bc4042b544798f06fd861e73814f3322905785ebbe8d7007ed849828e21103c2ecbf16c61de1708df09cce80634db242b4bac90673fdee9219 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | adf6082723784327d7d1b34adf974e7d |
| SHA1 | b1502f70eb881a1dfe41139cb719fefb877ee37c |
| SHA256 | 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9 |
| SHA512 | 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b |
/data/data/ir.shz.shzkisi/files/PersistedInstallation9090405780386389425tmp
| MD5 | c071860288ca28890b2e312024792583 |
| SHA1 | 36ef842c0ae787f3e19ffbadf10437f24d100e49 |
| SHA256 | f647ba0bed8d2e9ffdd9f7d0f8119ee229ee63ff7ebedc83b97e81a0962f3933 |
| SHA512 | b52ba50be4556ae2d036a01425ecbda7113e07e0b3683e6968989000d600f96ac5e282873913b46f2d96aca9fe58c80af14d3b2e4020e477b89050884c575044 |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-20 06:28
Reported
2023-12-21 17:51
Platform
android-x64-arm64-20231215-en
Max time kernel
2373899s
Max time network
132s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| GB | 216.58.213.14:443 | tcp | |
| GB | 216.58.213.14:443 | tcp | |
| GB | 216.58.213.14:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.187.238:443 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.187.200:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | google.com | udp |
| US | 1.1.1.1:53 | 14.180.250.142.in-addr.arpa | udp |
| US | 1.1.1.1:53 | iuskmmdm.tk | udp |
| FR | 216.58.201.100:443 | tcp | |
| FR | 216.58.201.100:443 | tcp |
Files
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation8496518028790445900tmp
| MD5 | 6b3adefc3fa4fe518e7c322140315d69 |
| SHA1 | 57ebad7b327582669373420e43b090f3aca6fa8a |
| SHA256 | 2f850092aa95de958f82ad465c2426f0aa3f491b33abfd0f1b652b430b4e5a20 |
| SHA512 | e9232608eccb91f9e6e5812a0f8276e647b235f01113eeea9a09d8a7f56fdcfa59819612dae881a279b832bcb4404356a654136d479f3eabcdf683593863bf3b |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 2d201339710d6738256794c8d96f5640 |
| SHA1 | b2b413b8f9e986917731388f6ae25601ae99eaf9 |
| SHA256 | 13879cd2839fe1af54bc7cff10a807a2937808ede5cab56f48b8eced48439c29 |
| SHA512 | c083de5a59fcf6cc5d905a28b2cdc35e106c53f7eaaf9054f1dd1a610283df99a7e8a4960a86840eae1d26b74a577a5e0549dc7184723c20d767b4d2b444db81 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 73dde037d43818d6392e51665bee0446 |
| SHA1 | 79d2b7aaad055aaa21aa371d61b05684c2164073 |
| SHA256 | d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be |
| SHA512 | 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | fa7c113a31f199dd903d117f08fa5709 |
| SHA1 | 25d79c073745ea6f83b9f8f806c5242708fe5f95 |
| SHA256 | e5bb863668c477a89770b804715774c154bf41eea4c303bc602ef349732bac42 |
| SHA512 | e411e2bc2e2d00c3c2fd50b6d24bded997f63482be2b1c461013511f13e5a59f6de8a19fddd8f8c9b2c67c5e38270c106434db7dedc95a0f2b38301d82fb2bb3 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | d8bb682ab270fc6b73fc0e1e9900edbc |
| SHA1 | 99d7c802cc5bf14b88e808903b77d6767ce5d95a |
| SHA256 | 931ed66047b676a241673ba41e5acab6b15e12b9a28b966f22903e190e40f650 |
| SHA512 | 6026fe5f905bd39a2c2224c7d0bea128847e16b00d23ff22131396f61015e90a13768cb5ed6d43241e31ca1c59560af519fba33f261c403a5ff9da01a686459c |
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation5872092350575574476tmp
| MD5 | 031496421faf7c25384b87e92dcafa1d |
| SHA1 | 3e99ea451aef7c7a8ae10c4412e128f027c2b69e |
| SHA256 | a2c87f71399a7a5b09086a06d49e6590733eb049958655771682670ce9066c19 |
| SHA512 | ad989e118be8c0804a234bae94be821ac410cb96168fc38c2d0991107653d5cb702ba6c839d1a8def4728c594bec1a04c6be7e9dba83ea92a699e5801d5e03f3 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | c0eba9421a08626a45a47a110141c222 |
| SHA1 | 299258afb8ebfaafa83fe99c2a9b1d3a133b231b |
| SHA256 | 6c23616a0dcb173257e2e88f99bf93321c15946a49df714040abdd8795cfe11e |
| SHA512 | 79337b9a072629540d67c25cfc053cef2fbaada5a7a9078e8ff5e66718ac911d9fcbd70d5e827f6e43b6d704014813d82ed5d6ea7298b47a6638c29e626ab7f4 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | ebb8a39b119e69f58488229bebaf3f33 |
| SHA1 | 0f653708fd665de2031462645b64075fa5d7fb04 |
| SHA256 | efb3839b9a676b7e73e5efd68e5237c2661cbf4d4742e26281e6c506d2e7c6db |
| SHA512 | c95666b486e7fd3d332eeb24fb6da0d75775cf6189cbef90852cb0a8e81f9dee9514626030f4c052f9cdba2ae00b3e50318da1713a695b541a712bf1dd64a7d8 |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 581172e6c296d2fa32fc4a47fa79adb1 |
| SHA1 | 7f8eb87e890f10ce5f6f789d0bff471cee7905a3 |
| SHA256 | 9f76ade9507267981ce50e789579a5b4c43716e398bd30be8928b34581c9e3a7 |
| SHA512 | 32a39a70e1676e4b7883180d642ad6bb883cc3a844159791d1f35d26c8952ff8b4f9a4c19f33836ffe9b2cd125650e0c845b765e6d5de1652df86c61dd71114a |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 82ff07ad0cbaefa037c4333315288a5d |
| SHA1 | 47cc3719995a84befea6f9dec3cefaa77907dd4c |
| SHA256 | 3d226a5de0024aba38a5395712fcad83eaa96ac420c0167038f235c63a07b41f |
| SHA512 | 6397aea042b8504c522da81835807422e386b6d62b8889d54dacc7738c77175f268d3726cca47b28c3d86c738784891f5fa9744da8d35c7c229e012858c4298a |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | ba984c359cbb46740a583dbc7246578a |
| SHA1 | 7626f568ccfc6d70b4c7bdd517cf177bcdd73d7e |
| SHA256 | 03b178280f8617c73439dd70cd29a38b27f1531897e182bfdae053ac65be4851 |
| SHA512 | d7930a821b6927b6025a8bfab73dcb47d7d38eb0db2a699939a95dee8956be24e9c40781bafc48e782152e14f2cb4352e991aeb27bdfb801b7326c7efa0a609a |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 7053eb0e552a9093f5b05d0f7de23e96 |
| SHA1 | 4a82391c3ec2db7584839dfcaef8df8cfc3da148 |
| SHA256 | df685e6918c0291cdc30af0d3d473bb15d20e995dcb5f591fcbd63426c3e8e6a |
| SHA512 | d634fe89679278be4081d76079da554c0ff9edff963ac4e13cf8b1b01b6c7f78d9f6e73a5ec8a107916349b2b2edf6a22563e018aeb311a27f750a174bbcdb82 |
/data/user/0/ir.shz.shzkisi/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | cf7504b5f974f66670168164d0f073ae |
| SHA1 | d1e975491f95a551b9649dc6723f006807520cd9 |
| SHA256 | 3493a9e1d539e2bd783b7bcadbe07e37f5971dc57c8ce8f730840645d631c3f1 |
| SHA512 | 24334251711fccca1c88bb26f75d8f60d0e5a85d246c81aa040313e097d6cd01852ab166470c5ceb643b98594825713fa7b96703f62b9c026e16d9ebd410000f |
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | de82e2c94d2718988804b035a46d17b1 |
| SHA1 | 705f5ff19093ad209f2a666085d6ccaed3bf58a4 |
| SHA256 | 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39 |
| SHA512 | 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-20 06:28
Reported
2023-12-22 23:41
Platform
android-x86-arm-20231215-en
Max time kernel
2481388s
Max time network
158s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
ir.shz.shzkisi
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.187.206:443 | android.apis.google.com | tcp |
Files
/data/data/ir.shz.shzkisi/files/PersistedInstallation6921291430604979661tmp
| MD5 | e1197a0656373ee62ccdeb7dde518d8f |
| SHA1 | 3832d5eb164f80d71736e89f7be2d7dc76a09488 |
| SHA256 | 51dfcc373477b3e623518321338acd2f0b261c1df6c6afde6052b48cdfebadb0 |
| SHA512 | a9e88ed6c5de38a3d14258f9d510b4c10310c77c2fcd6db7c88dce71451329b7db761a16cc314c161665bc7a3534d0e15aa1c1288e18ddd30ab0093cfce5e606 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
| MD5 | 516e898ee49955e99074367ce1b21ebd |
| SHA1 | 8dc7e34e47cf3f7354eebef20178f5f373110b8f |
| SHA256 | a9ac02dc8e054f0d9f673cd13d8279d2715d2ef8741a5d994795091b3b9445bb |
| SHA512 | 02ee0c921c2c43911efbd7f5fe693654ad655b5a3c82c6d137ba15b23557fd2863743971a59b5ead547c30639b1c97cc7efbecc806e5be4bf0c6d3ce8a4e37fb |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 7237409e0640cfab7bdbd429bf821a3b |
| SHA1 | 4c3da934842f8d4835dfe2a9c275a300e5123309 |
| SHA256 | 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa |
| SHA512 | c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
| MD5 | cf845a781c107ec1346e849c9dd1b7e8 |
| SHA1 | b44ccc7f7d519352422e59ee8b0bdbac881768a7 |
| SHA256 | 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7 |
| SHA512 | 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | eeded0c64ee961c53e5b54befd33ff62 |
| SHA1 | 2ad53676be06904f947eb49365b5b1e484a6a9c2 |
| SHA256 | 359acf5b0a136e3f8bb05d00b0573ff32fa1eb079e4610b92e9093c04c75352c |
| SHA512 | 105a870f5e60571a1c5dcb70101d3c1b29ef75156fc623c6611eb35eb4aa39069d42eec61c8215ec97ee4f9edbf09f620342387c130de4aaa2b6cf4291233b31 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 5ec9f1527f0614f97f97d949d30afa21 |
| SHA1 | 862833b4a121f852d9ce9ecd502a42b03d679e04 |
| SHA256 | ff3b5fe6e8f64755a4b87823403a20b20a3349252ac1e59f7f6966cc668d2ca5 |
| SHA512 | 224f95d24ebeddebbca04bd86d4c97a9bd53048e23661aaf66fe8b0e08c0a610cf615ff7b75af8fcee5028da14ab5009c4743eae9d2c452beb8f71b141ada683 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | d882d9b3499ce407f1b177e910994f62 |
| SHA1 | 56b734ccf8a8eceb04e17cf29b02af7506183680 |
| SHA256 | 03f727185ea03917bffc1f135da03e06893049a026b99534700cfa839ce061e4 |
| SHA512 | d1b6e6b32524e1cf8979baabc3d18a639bbac7e146fd7a321129edbd10ec7a8bb197115f1870772b689a0199935b6d2161f31190d8c4dbe7d9ef0fccdd8e31d1 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 8c84cd0ca56641efcbe785e3b5419455 |
| SHA1 | 0dff5bd099a70036421e0412691d432c88a97351 |
| SHA256 | ad86259b4efdf81fb9ba9617757d5ee45d6ade1ae3e21f1bb3c8e7ffaf559215 |
| SHA512 | 7a8e2f3f6c6a289ef3d1dfe7f9835a63f321a2e91f20e41520aa7a58a20587998b5f87f81f336090e6cd6739a307582e685db3ed62916c1d08ae8f7029c5b492 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
| MD5 | 505a24942307540a56b35e3093ac4d52 |
| SHA1 | 7734f3e6d93b363d51c4aef4ec22a1fba3034862 |
| SHA256 | b85d46bf25396fcc692c0928d76fc963c0bd1de0e4054547287d935c309d0560 |
| SHA512 | d483d0670e35f87eee0bc9db07ae4a952af888b5d6d5c476e719477fbfb2966ec6c373915278b6a09a8d556aa205a25a4cafed1c256e92d30c41ea73b37246c9 |
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
| MD5 | 079246d167d0ec543f620834f8470e15 |
| SHA1 | 62d18f4692c307c80d13bdce7b770c606278eed5 |
| SHA256 | d0ec8a8adcc32cc051e7e6180043d40d5ab5a4c3d6d4578999377771a91e4b5b |
| SHA512 | e37d8cfad378e19a0ab5c44786263f65bb2576ece897893aaea9a44b9a30058decdbcc0cd0478841ac9fba81f1c926437904ec1fa88fc8de6bd2a719d14863fa |
/data/data/ir.shz.shzkisi/files/PersistedInstallation2203507092060486123tmp
| MD5 | 3924bee016c274758508f0066fd56798 |
| SHA1 | 76ecd01cc6a92cc4f07dffb80b489419de0cd182 |
| SHA256 | c8f0b8c293476d09509bb5f7ce4b0b956d0bb872e074560a59ae5f827d6d6f22 |
| SHA512 | 6f8561f1ca06f440e0e181dd2199c1246d46792b97b3139472579d2cb4a9f067ef3b0672536888c71f401d96e644af719a1327690588547ac5269e5cab3bb6f6 |