Analysis Overview
SHA256
8a6fdfcd31165b213ea79f5d67162fdf504bf47641faabb8b2dd1ac636afc6b8
Threat Level: Known bad
The file 8a6fdfcd31165b213ea79f5d67162fdf504bf47641faabb8b2dd1ac636afc6b8 was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-20 06:13
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-20 06:13
Reported
2023-12-23 04:00
Platform
android-x86-arm-20231215-en
Max time kernel
2496856s
Max time network
131s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Processes
com.psiphon85
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| GB | 172.217.169.42:443 | semanticlocation-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | rimot-666.click | udp |
| GB | 142.250.200.46:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
Files
/data/data/com.psiphon85/files/PersistedInstallation7869626461529328473tmp
| MD5 | f0572a1b022badc42aba7fa57269b077 |
| SHA1 | 17a5385153b139ae2aafa8fbc8a43d81c12406f9 |
| SHA256 | e133625b78959f318cc4d42596af178fe59f446418184e53e6791d77219d5fa4 |
| SHA512 | e206a12eabe16663316feea7f08978eddb934d799c81c0cdffb389f77de07a398eabcd77c5b1182a4f37df88d0ff65378c066441ba31c7fb4479f4db9e15c664 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 96a61a40acafb4f770f0b7224cbbc88a |
| SHA1 | 9336c3574b006c5a2e55d63d6e7cd0499159e91f |
| SHA256 | 6947059d8fd074af11dc6ecc92e94ea0bff07facd11441e177c950c8b6a8219e |
| SHA512 | c3eba6226c2b0dc205435edb5ba7e610800a53230a84c5c29bc1dbc9479b14f04795a11fd38643e86baed008194c11e24bc35c02e6c552a6e0badf6f84be4d8b |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 7237409e0640cfab7bdbd429bf821a3b |
| SHA1 | 4c3da934842f8d4835dfe2a9c275a300e5123309 |
| SHA256 | 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa |
| SHA512 | c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-shm
| MD5 | cf845a781c107ec1346e849c9dd1b7e8 |
| SHA1 | b44ccc7f7d519352422e59ee8b0bdbac881768a7 |
| SHA256 | 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7 |
| SHA512 | 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | e465da21bd5361b85840db73199e1d5a |
| SHA1 | f0eff3e53e52ea5d2a6db5463c6fa44176851c9b |
| SHA256 | f694dbf8e5787756e0ecba3ce2202db9b6f63b9383868945d71819c8d8735141 |
| SHA512 | 570626190d96da310cf9577820dded4f0e6717ad4c77cb07cb4896486327bb7c647cb3aefab678922f30825dc62a49ae34d2620c782e0bd8a068b87a050772a7 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | 5e880b4bc95be7e5f5e8af865cc019a8 |
| SHA1 | cb53d74f5fa5e40601c467260a4db169370e4dc7 |
| SHA256 | 272d6de243b03a7da5cb3f1a2d2a637601a4a6d3331296435dd343ce4ee39fc9 |
| SHA512 | f83a800c94589f3794495d14c54083e76eb116bbdb95fc5f95ac70ab3c9c614d0dfe8d59875a74a5ad6aea8f517453f79e9456695c75e12ef420d11fa28c2fed |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 247f0e6e59ebcaca352fe58955401493 |
| SHA1 | 36e0458b381f2bfc41f6e402152d35f8e329557b |
| SHA256 | 337395a4bc88736b47fa4f0b6ed2a4ab72b3903dc384cacd8b65f53fd03c2e1f |
| SHA512 | 65b40250972e9f48619f990c1c3a81a5f89b9af8c531c36d2abe8ddb578421e67bbcac45ef3ab487547c9901a5a9f357197988d485c5a1066f2f36ab2662b0fe |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | c9968137027285c41700461ff24a1503 |
| SHA1 | d8969d9219da595d8655ae3d4694127861940c46 |
| SHA256 | 485a04e6ec312de668194dc2ae9290cac05cefc4a7771b9e9ea6536f48d91c16 |
| SHA512 | 0ca3eb982b7e8f259717a241305beb89b1a42b12db8405c02ceb05d0ade931026e2fb03fb6b81e34d22c494cbaae48b5ebab5a4b40831bb3e35465c077ec6138 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 6339543bdad3dd1953b4e87fdf830bed |
| SHA1 | cbd139bfd7871d04f9f20b8475ece8ca5a061ed6 |
| SHA256 | e89a45c895dd817866741a528ec517efcac51e6f580b770da6a2c6b3538420bd |
| SHA512 | eeb6ddee08f97235876fe5cf3c76d01d87e9f60c86c99c4829f01c373664f7092eae69f12e84e0d0c63b8a22819c0c3b338c716bf5dec446f4c82d9fbf1cd550 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | 70cacee6d9935370b90f3c87d5d8fa2e |
| SHA1 | a16fbfd6a168c9e1982c497acadbeb52d865df19 |
| SHA256 | 4e07a566fc361a8b94289b4be27bc3ca258f10e817d95d8714475024785be1fb |
| SHA512 | 9639ab4c6baed5e40790dd403d99aafa6c9186365fd89d123caf0490ad7e2534dbb7dd7c026c8cbc2435c8e365bb165c9bd3d21d0e4e7e5a3057a67e42f89da5 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 905add0d093f946ff6e284d7d1450645 |
| SHA1 | b49c9ee8f210711e02af94b507fa9ff001569091 |
| SHA256 | c1c564b21b94de841fb2c8b245711949db185183c314adb7fc88a36ef91aeffa |
| SHA512 | 55046d191ed7c0da96cd28320432f37f55c6c32b23b5c591103897e5530c1c2eca7f7d60d938f51c5a60ec13e8bf08f2331066d9d3b183804c454975c3c31002 |
/data/data/com.psiphon85/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | b58fa1c6119e62a8fd0e9db7f3acf9cf |
| SHA1 | b9372459a8a68d9c4bf0154c0e94418d3afbdeed |
| SHA256 | 659248d7f6bd009f9cef581a91921b725464239a9acc4c080197a32db01b35ea |
| SHA512 | 860482f0ac97d47399db45fbaa69f6f95f38d539efae874ec731ec000cab16b642358858a722ca91a556c8ae4ea09ca16a07f5914e5a10f541117509b083260d |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 51a1a66dc7638f07d70155567a2ccbcd |
| SHA1 | 12dd9cb974f4d2b1638852948a765b3eeaecdc79 |
| SHA256 | 8996fd70b3f59f0804f51cc6f0769a90016fc136678a8235601be067b50c5a9b |
| SHA512 | a1769dcdc8ab28ba7bb72dc8a2c9839daafa7991b6516c510f98ee036fe25386dd817567cf62aab1dc27dd763ec7bef1419282279335033db0b3b09baeea3be8 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-wal
| MD5 | e62b8c165cf07e79d6abc6d54581586c |
| SHA1 | 00a5ab9d7edc183915200c706a4c27fdfe36d52c |
| SHA256 | 086b2c95e46e1ccee34e39063fd4be6517d5389a801e5a54f4253a050a1141d1 |
| SHA512 | 9b2adc47dfff9b17dde0c80f740ddc5a7365e8cd8fcbbaabb3d57d7ed34454bee65868a7c208d557f183ee617ffa1ac06bbe30a2c376dca747a62d29e4e8057c |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 3e881d9a01ca707bed38018ac69f4518 |
| SHA1 | 5820f9351d7cc8082de6e5686eb9f8fedf6fb830 |
| SHA256 | 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c |
| SHA512 | 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8 |
/data/data/com.psiphon85/files/PersistedInstallation4186788713154377265tmp
| MD5 | 372647d8c55b0420ed2c1592822593ab |
| SHA1 | d560fd4508a2b9120d02687444748c3c364162c7 |
| SHA256 | cccdbf240ff0d500a0f82af503c4c2596e7782fec48595086e971925a39236cb |
| SHA512 | 5e50a664c2f0300a0976b180fbd2b511aaad741be08ba9b28493bc17a2a55e9f1d5edd9cd19e5dbb3951b3ee27c06a51adca822cb344b8a6b2f920566109ea1c |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-20 06:13
Reported
2023-12-21 18:27
Platform
android-x64-20231215-en
Max time kernel
2376032s
Max time network
148s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
com.psiphon85
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.187.232:443 | ssl.google-analytics.com | tcp |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 172.217.169.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | rimot-666.click | udp |
| GB | 142.250.187.228:443 | tcp | |
| GB | 142.250.187.228:443 | tcp | |
| GB | 216.58.213.14:443 | tcp | |
| GB | 172.217.16.226:443 | tcp |
Files
/data/data/com.psiphon85/files/PersistedInstallation8448382169632124115tmp
| MD5 | 88fe368e3a173609bcabf1caf70e176a |
| SHA1 | c117aa0f24d3767234329c56cfcf2fce06b1bc15 |
| SHA256 | 179a671e3438cec16c842f11e4188d97764ffca7dee859ffd1439f36daf1ffcd |
| SHA512 | e6ec3ae350c3be0d54ca8d4792f6841775924e56f36aa72eb0e2ed510dc6a79f002c77c4375f5d39ac324068ddf7e790448e2f6dcd86306033196a44ec941a9a |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 1c3b0f94f6d1ff7cc21e245423635f59 |
| SHA1 | 15c9bf923534a536be2eb64c0f7b5bcf8cd9d8c7 |
| SHA256 | 5f6c323c22da3b2e17fa1da237f4f07d32c7fe3c0a93d753c9e6df817dd90f7e |
| SHA512 | 33e48f20fbe6d6d3376b5dba7fbbcf9c53e27848142cd169daa1ee4c414c9b1fbab87e1abbbb29e6bd1f65eb5b25f32f82704799f01478a8c20b920b832876c1 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 2b202d438fc45c37f9bad0cfb4279620 |
| SHA1 | d6cd659a096bc0b5ed76cbe167aefaee62deb9a7 |
| SHA256 | d6c8956be9fdb78c8e8f43cd5e9a7d353a7a824076a96f59d3f05eed5ae7de65 |
| SHA512 | 74f5235c82fdd50c95b3e05e117d2905252e85765348571c941864d311289ef9436e6986de2e365f06b05a310f8c9d080231a39a274d1914f803bd00737f8a6b |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 9f938b8fcb1d29764159f8f08195b729 |
| SHA1 | aece66550c25a0ae3795b4f098aa176afa1b333a |
| SHA256 | b404cf7f95e188c60d7046bf497f892b2e1a37c7ac2216b6944f853bd9711693 |
| SHA512 | 20ba258514e788f9a1e32c759738a13198254e9a6ba6c74c001fb7a01ce3cef3d345867d6a59e376a7cde5b37717f42de8403eeaffe767944c9c43f9fc47fd8e |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 65d5dbd5204bb6e7017970875b3d65bc |
| SHA1 | eb62586aa133a27225e101a0666edd93c9433968 |
| SHA256 | 3a76021b3a6da677e83128d31b156d6d70ecb0fdb8ec4b37c411e414a6a28fd7 |
| SHA512 | 849406dfdbc805cc825f00339c6fe0db81efd595ed2c3fe3ca8b762a23bd3a172739d9040f6b011e2f5ed4b867ed967b312fe5e827749b89e4510abcb1826c3d |
/data/data/com.psiphon85/files/PersistedInstallation6183035797369271862tmp
| MD5 | 028cb3380ddea8a746a0dd7854f41751 |
| SHA1 | 7aa572330024f67c42f933d8bca569ecfb587c8a |
| SHA256 | b61f34ca5221cd498309014dab956eb8f6cbeb6ce9282c9cf4526d9c5e00880b |
| SHA512 | 7e31e3470dd3ddab3512d8e819e8878d50dfa995c4622edfd97bc4db8382c62fe8591d47d05f62acc69317c57cc516065b51e67c99b283d08ea60a7774dc5ad7 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | d1d264d64d8ae8c1784f5fe7d320991a |
| SHA1 | ed9a15cf98d945c7843409b3af2f866c430917e9 |
| SHA256 | ce5c02347ab03ec1d7417cfa565bf372dabde77b47aa4fd3adaecebec471a7f6 |
| SHA512 | a435f1933ef915ac7db2a482c5762f44d5f885d8865a3e6a4c1996ba2a33bcb82425341e599edd565a4d361d2a5a1355b143d45dc7cddea03eaadd7709103e8e |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 4ff36c0b5ec223bc9b4d2fbcb9219ee9 |
| SHA1 | 47060204bc461226823122420cbd689ac9ba8788 |
| SHA256 | e989f16c78d717f1b400f373d8aae6d9fa39d2ef4ec23038ce4e084ea1ee0bb3 |
| SHA512 | 0cd098137c64d5ae6b6233bff8a4b373df7308ae350267649c9ec017e1598a810fe853b353aa7860518787256e376d76532a560dcb70a0dc638c4bf6e0a07e0d |
/data/data/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 466b9590bfe51b23cc9d6284268c4060 |
| SHA1 | 39850e2ea75c9ba5af60c671e94d7e19634fec62 |
| SHA256 | 4f987d78a1b0f42c3e1f94662e50fe699582ecd1002578a91ee8b847ded2cca7 |
| SHA512 | 979b3043dd71893a81d41e0bc57f9ac4b2a416dcd00b9b16db71ffe6c06308ece92a8e51b7c9a09a1fa567360bda0305a16c2ccd02d49f2006372e18dfaefea2 |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | b4999e662569e5f3d03e619948bfd4b1 |
| SHA1 | fe5c812f473484a23c1d8f46936c49a6f27bb9d3 |
| SHA256 | 3c600666bb75fe5d8f4fd6e14891dc6c30d2492ac7fefb87eca5b7fc87703ebe |
| SHA512 | 035a65a99584075746e727d018899557d64164db5617892f0e0db21a31c78a7931d818e984f4a3533038ab746083cd3f6a62cff80ce4e3df069ecc1a8803983f |
/data/data/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 04fc84e5af1e7b6a0c4b0f803f0c9949 |
| SHA1 | 96b5380bdb88c1c410417e35164e1ff01479db84 |
| SHA256 | 457097422524f92c06ddabe65e1c789f61b2f2876f8a8f8f70ae0113f42a7576 |
| SHA512 | 2595487b4f72630bb3a1c61bb828e4f7fddbc4ccca807e2771daeea5e2f3e4bc301a07234e169ee3b3fdb8a9b82052a99a320f8dfe89001c5f3c843116dff536 |
/data/data/com.psiphon85/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-20 06:13
Reported
2023-12-21 18:27
Platform
android-x64-arm64-20231215-en
Max time kernel
2376043s
Max time network
132s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
com.psiphon85
Network
| Country | Destination | Domain | Proto |
| FR | 216.58.204.74:443 | udp | |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.200.14:443 | udp | |
| GB | 172.217.16.234:443 | tcp | |
| GB | 172.217.16.234:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.200.8:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.178.14:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.178.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | rimot-666.click | udp |
| GB | 142.250.187.196:443 | tcp | |
| GB | 142.250.187.196:443 | tcp |
Files
/data/user/0/com.psiphon85/files/PersistedInstallation1182360069007103412tmp
| MD5 | eeab992694a7ecabaa12ea738db2e8c2 |
| SHA1 | c5eae0fdb389bc7b3a20d1b5e3bc467595dee6d9 |
| SHA256 | d4fa6c081c0f3e9588e4ad617f464df2b5e21353ad57d6a99413915be35179d7 |
| SHA512 | 649e1fe4d02b9ba234b620fd2a3da1745686ecf5d3a53ac84c8a1c74eb8293bd2caf433d018549a7e9bcd0b65c939403cb909baa7c41786228aeb85812b666c6 |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | af800928c3d73bbfc5ddaf141aaea330 |
| SHA1 | 1b2eed3fedee41febb63f130f8f279f4e08e528a |
| SHA256 | 475abe0e86a1f6eb7b173b5768e5dc3349eacda822b3f990367158ab40d86385 |
| SHA512 | c7cb3880740514479c60f051d6441bf511a829bd8b91d36ea9d5c32d136991d741cfd183ee33b858e0fa3cd93c82c128d2a24ddccde92fd15e705e0b876901cb |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db-journal
| MD5 | 454946d194ebc9e017c5496dbf951a1c |
| SHA1 | 418890e423a3a2cb5bfc8453e34eb4bbed2e84bd |
| SHA256 | 46ba3aa36bc071ce25b3bbcfc02e526947d9c65e1b094b5706de4e665fda85c7 |
| SHA512 | 1c9a140c1ca1a3032213359988481b0f45d1e34bd081d6847848782010015d3f570e6e680f037bf028ff41aaec1daa86db2fd3e879f3b63f95b260cfe2305f7f |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 893ce7ff08b096831aae168880fda641 |
| SHA1 | 6aa9191353a8d0a88a482815cac6d6799b18d762 |
| SHA256 | 0f98d33b3c4fb7219f623255ff6fa8c8c60ff5ff55dbe97bce43d0a60c0ce3f9 |
| SHA512 | 58d3f76ba61a2f21d5dbf4ad6d0d70c3ebc4f4bddea7d8ba45a6766c38503e7bd6a2dd4cbd0726f76df2a9610a06b487e47eaffcb0a0bfd1522a6696abab6ee6 |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | c5af8e4125902d0ff6a4bbbffeb5dbad |
| SHA1 | f0fe7ef6bff2a038476b165f6fb86ac607ab7c93 |
| SHA256 | fd1e2466a058924da5bb4673f6214f59436955a6b05967421d47f6be16aa1ad4 |
| SHA512 | eac9b1e6d03254a6d7e434853212c17058e369ab50ed908236c7c0845ddddbb3ee32ff98751bbe793dbb7e6c2b030ff693b849d7eb341441372b02c7604ca1e6 |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | b3a416dff8e228b9fb11c59cfc960c1d |
| SHA1 | aeb5c41546f4bd0d97c9de8337b5700ace41f941 |
| SHA256 | 23d483f2f12087526e77043976bdf95d1e29ecd2b3f2add6565c827f9a74cdf5 |
| SHA512 | 54aea40152ebfc44476e8f9bc62ea31fbe01fced0b21a8f233296371b06767cb173263af7612333cdde459fb73ad51b0302ad5f1495eb265352150e51af7079f |
/data/user/0/com.psiphon85/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | 8b3d8cb9c766467414a7ca35adb8a66a |
| SHA1 | 0251eb48b9c7348ccb0144cf1bf63f6d68b5c2ad |
| SHA256 | d794ce9a1540fbf2e691a0c2b50e21524b4bb678e416d584f75001ff11afc223 |
| SHA512 | bd084e45c9127ff12a847fc62305fd93ce6cc9fab8ac010dd05bee2d06f1b97a5e13ebafeaf075b76316d942ef1fe312b063938805c63edeb6cc3c13d9f85844 |
/data/user/0/com.psiphon85/databases/google_app_measurement_local.db
| MD5 | de82e2c94d2718988804b035a46d17b1 |
| SHA1 | 705f5ff19093ad209f2a666085d6ccaed3bf58a4 |
| SHA256 | 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39 |
| SHA512 | 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e |