Malware Analysis Report

2025-01-19 06:44

Sample ID 231220-hleyxagdar
Target 8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e
SHA256 8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e

Threat Level: Known bad

The file 8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-20 06:49

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-20 06:49

Reported

2023-12-23 02:23

Platform

android-x86-arm-20231215-en

Max time kernel

2491003s

Max time network

130s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

ir.shz.shzkisi

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.200.250.142.in-addr.arpa udp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 pubumlive.tk udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp

Files

/data/data/ir.shz.shzkisi/files/PersistedInstallation8180876163289724517tmp

MD5 43e8ea336262fb8f8288d32ef3474c0c
SHA1 1eb9ab882c80de657410de9ceaca738f1030ed3a
SHA256 45e33d7fe339a06f554598ba729666b235fe76df7b3314ffac0abdf83d475c8c
SHA512 31c030924a3c7d44214ba3121f6092c2efc641fecd52158247d9aaf00c7f26481f346d9175d883d651c393973080a41177a0b73ff369c08dc0075df5eae1c4c8

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 6ad98325218101d2272b71d74fddcb62
SHA1 1113c9fb7bb8fadd8d6f500d6ba50e08773eae1c
SHA256 007567c8033d78a1719dda3b36e1ecfe3213c62e3fe0f97dae592f14a9684847
SHA512 a2bed4e17324f18ecc21a8245f41beed7ee4616a7e415783fb81ead4789eba61bab4dc10fa9b28dae2269f9b9b135b130f82e6a900c8902734cb9fd061716bbc

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 950c48a6b0da04c2c42b6646144e6647
SHA1 f7795010dbfeec6492f849f8ae32d56cc0058f8a
SHA256 e9caaa634c09c1fc1099d32e0d67d1f51ee04b9ba98fbcafbb40e132f81d2723
SHA512 bf78ed2afe7f79911f53b3fb78df35c4a75115d12551d0474511116bf1e86b64d6fa972f522d5345374db05ed958c25f271f541663ccf34688f0b46f02cbeab3

/data/data/ir.shz.shzkisi/files/PersistedInstallation3734537937345687534tmp

MD5 5e1369c8a9c9837ac00a309d1e84ea6a
SHA1 01da92b1051fc89db784405428a320d10f407b67
SHA256 265d091a6342f73f49b426a75afa136a59108c5000e626f3a9344fb92596ead4
SHA512 99375919c6fe4e0075fb513863d2425c49e035a80a1e1ab9ef24ca481c004bf8c5f366c7e7fb8b82e6b1cc6fa817691ed30195a20e570af64b27736c4c9453cd

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 55b6cda32b527d3814f6c89340291b96
SHA1 4a9d92f480101fb53ea29c431ad8c0ceae3f874e
SHA256 b21695183bf3a8d2b61c8eca9f8275eeec18ef99320fefc59b3224af2e1eaaca
SHA512 a5f03bcb86f1e70c13919e9ffbafe64d962735a93439286af5e0c8b79a90a7a03fe77b484e630342fc1485497ea59f982b1cc53e81333e04707ae8d31bd18511

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 e3ff2ab1e6eeb0498538aea96903ea1f
SHA1 fb80d7805d5c847bb63a7100abb0d9293e2297f0
SHA256 63d7b4ab1e5cc01c99ece3d58011ae13573eff56ca96ea6700e58c790ca738d6
SHA512 60f65befd5d8a4fbdd4f58b17556ed85ee393d9d5aa5daf2b2168d21db917ee452c81fad8827edd76a918a3b7386255a4a44db6b9fd714a87be15d6571d3f311

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 7b827eb22bc3ce15c362b247f1bbee4f
SHA1 9516ffc61a9409714cadc630408264f664831384
SHA256 4f075bfcd23def73a9b45dd981dafc6a78595b4895b200fc0c5de3b636f36a0c
SHA512 919b618844ab5f7e78104fad882e2ea908d3cc333ed991864d928f03184a9e6dd1ba2728a69595151cd636e40a3311463cf97ddeac01d75f4ea3620f3764e528

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 d49e440eaa4aac0a5a4d3008374f701c
SHA1 1de07509c682145ffde63797867f19134d3c6baf
SHA256 28e2563d92dfe9325d897777b3a745de8d0dd6d450fb7b9e296d51ad3b87af4a
SHA512 36f55b67f5f43e45b5029046b6a7fe23470e962f4de828c594b80632a32fc334da9ad55f75916bf8902e96a0a88af58398dc183c68ac8b602ba3ee97dce99a80

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 6ccdc0192c6f7da43435b456f9d2b90e
SHA1 2a396ff5b571bc888001176584ef0cf434bf9f71
SHA256 1229756faee72c9ba32a522be7cd3cd424bb3c8e3d3fa8775e1dce37b4ab8c8c
SHA512 9cbf4a1db983ad4ee1287b6cfa58a27109f19c5e1ddae0a3db6e6d3898984efbfd6162df2ef2137ef35388fae1bd2c88afb97f05175800ced20e11e784a00643

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 8ec0b65b76b176e5e6d6c91d6d5255d5
SHA1 69aedec2c5bc438d10df14926126fd5a68d8c4f9
SHA256 b461d6f5516eb118c6481577544cd9692a74e6cadd692d3c5f52db5045305fab
SHA512 66478905f0e0ba7e0e8bce9e42092ae4f649e173dfe08abacf6189fcac4889626708d1368cb65cdc9b64ac9989bcdc0aa481ec790451c149c6f18e8d5dbac79c

/data/data/ir.shz.shzkisi/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

MD5 91e33bad4173299dbf96c73b29e8ca3c
SHA1 c5d84511377a7b26a266e00fd673a102dbd0db73
SHA256 9365fa19cc95ae931e9924e2780f1240f2af9b22e4873877d3fff0be36d04544
SHA512 0752988b50818bad4224942cfafa2ee033eac3e358641da498eb003ca905c92c64d1f08bb509641a020db26b949b3581375bebb24ca1ae28935ee9493012d45a

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 a85cd4d0ae60e6e28b1dc31b8c821136
SHA1 639e6d225a3d9121832268c1a29b0a9e5fbbda10
SHA256 ae1f42b7c6bae5ac11fac89e4670ce1075ea1f73b8f6118671d40cbf480856ab
SHA512 9e7f483dcf0d306247f9fe1b403561a2c5fa40754ad155ec871307dd5df8b4e68b169671d137e18c992fdfcc15fd897f8c3d2a840169d48a6b5b889b8c27ca61

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-20 06:49

Reported

2023-12-21 19:17

Platform

android-x64-20231215-en

Max time kernel

2379023s

Max time network

147s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

ir.shz.shzkisi

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 238.16.217.172.in-addr.arpa udp
GB 216.58.213.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 pubumlive.tk udp
GB 142.250.180.14:443 android.apis.google.com tcp
GB 172.217.169.4:443 tcp
GB 172.217.169.4:443 tcp

Files

/data/data/ir.shz.shzkisi/files/PersistedInstallation2959564125483545617tmp

MD5 24dabaf70272e68cb8cd36296074da20
SHA1 8f1a7f37547f6b3ef251358420080d1569093773
SHA256 da55906b9e50d80ae9088c787c99779154e010c921e1dac9fd1efb77a3f4e8c7
SHA512 836390654a6326162bf3bc2111362ac5ad3289f26e55a9b093abbe236a07403b5ae0160864ddfada4b386e6c4bcfac4e28acc2e57f5d12a23ec7c91672f54e4f

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 617f7f6618a0937d64025f7cbd24642b
SHA1 41cedfc5863ec7e77f185594926ac4deaa74753a
SHA256 65d5e40dfa74e586033568f2a0d2b3d7cf1af2558516744a62e2e2b3d1634c72
SHA512 3ed992df56cc416a26d473511d9a9aaeffcbeb76efe3fccc96ab29b227f12b9b166e87e4953cfda959a502cab9cd4335b15071fbb73109e3af42293adf6f92cb

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 ab735da41b3d38f301e5a1e3349687a0
SHA1 e32e3505ea2de346ca9da1ba3a9356678fa5b957
SHA256 a17abaa3d729e24e837fb11ec7530aabb0e3881e7ed3b7bf1872fa3f76f1d712
SHA512 ada94abb013fdc99b0c861a8ecb063f0e0e3678e072c4cc800136366952c8775561f86ba8025f0076114aa9e0a6b4b1b3f8091498170356512d3274970faf9af

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 526a5e212ab99b2f3a2ffed20ca04f6f
SHA1 de795e7d65087d3de40796b6e1a5a37448167cc7
SHA256 d4cbfcec871a6a170fae4c98384eeb851aea5760ffef38daf52115751d64848b
SHA512 f1a0d4e3bca1624a11c4185fb8f64d7bb5998b2a82ca0c6887a3545f2a68ccfae3b7cdad38b1bfe6063d0ea45dcbba596803a57134c33b368b7aa11f25acdc83

/data/data/ir.shz.shzkisi/files/PersistedInstallation4799512691493899722tmp

MD5 5f14b983e582203650cc124e1f68de4f
SHA1 b19103f38f7fb115dcbdb42d8f92d17212869601
SHA256 80c218f5c4756697eb202b06d4f21d44d30780766a781119b4149eeb374bfc12
SHA512 941a6ba0db6ff60b4211ccf0a3880d0cfeb261bdeff6d3ef0738c744fbbcd728321d34b0df18fe480b3e247cb0a0bf41e0fa94fc160063ae609b55d24a8eef56

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 69f680a0d676c3744f452e71853cf94b
SHA1 49d4d9cbab203ec0fd5c796458dad85a6fb011fc
SHA256 431a756f562eb256c539c54854f12273738bbb19b768929a699cd4d2dc18d9f6
SHA512 9729a74d4e042ce489e3aa854ff3c94c2cf1ed387627e05c5ee16ddc9bf77b8263e41e69731c69be79edf8d0e14697dc807a8a62e3dc432d463775d684eaf08c

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 a979525242833543b3ded2dce92447a2
SHA1 816467990787c5e9536d5c583f5fcaac12be2352
SHA256 1aa3872a2e824879b42a0e185f101ddbf921f52672b3539b7a1bb61418bd25bb
SHA512 120f0a73c5a970cc5a8c7617706740f8f7a8f465d9783b067c3ada9c00c15dd93af5f703a02bdfc4ce0416169328d35a962c317f0e5c50752602039a799c64d2

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 8c128a628200721cdbf19fc835f4a8b1
SHA1 31282a98f2632c0255335490281ac691b7c8731f
SHA256 56e37a242ac75a51505f0bd7877ac8d9d3228665a6e53fec7199ebbb958286f5
SHA512 21580c216d5e144a3f6be188ca4016fa0f993c3b493dc5e0a39627d4a051ed32cdb6fa1f6f1a8a5ff060ca4e527c3694e3a689ee39d3d9d62fc62a6f0d313bb4

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 a985c2e3c276c9b051e3bd6758152700
SHA1 6c846f2a7af777a14823d0d8b54c639f19c069cd
SHA256 ef985a801fdfac6cb45d1ccd5788ba4b32a02a29b7a404f2e89a9b80083eb346
SHA512 755f5e197ac21faaf4f497d309966b1717fae55fcf2220bbf7cd12f30da416d435c80ca86620579d0679598d1a14dff2ebb4c0c6df50fc9073029b4f742289bd

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 0863b394cac0c4ba53a410fd2fce3db7
SHA1 d89287895ac62bde7386b1e5d945ec5b8e595c19
SHA256 3e9901b7d4909dad64bce6e5cfbe1db9e7437b046c564b37bb6eb1cab4eea0c1
SHA512 03bc36c3ff8287da7bb9128669bc58d1760ebba6ac0308e58cd7e7c23ca77534ddb13265f0b66b4700862b05188c57e647d766f9cd3ab02fe3455cab6d629c10

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 91c2cb4d56458a1a0e486f7651f45dbe
SHA1 2db105d2057fff9386f2255c8eaa99f7b1fcb172
SHA256 18842ad806e7c1ab3630a8f1e7be21591a58dda4fa092be24e99af75806f48da
SHA512 60e4b464cc3ca7b135536d52f2f724dfee792bf8bc9ecf06b13b0eb7f3c90fe7da988d2878e5698c8665ee6e32bc18f1533836c247b97df63b0cced21917664d

/data/data/ir.shz.shzkisi/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 1248d7354b3ba7420e3d85ef5ed3e97a
SHA1 3211f7239b8fd97e78ca3e87a6aea7a13a4d463e
SHA256 6c5a199ea194e8c105656ea47150de4a759a460266084e547e65d0c6adab258f
SHA512 c83e1f5295bf36b06674d590fe3d29998c83ff3ae5d085018db8a39eb6f3d44c024e09bed39b13a7de45bf5f63b32b12bb53f0ef101a8e74de992ad21d729c42

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-20 06:49

Reported

2023-12-21 19:17

Platform

android-x64-arm64-20231215-en

Max time kernel

2379144s

Max time network

159s

Command Line

ir.shz.shzkisi

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

ir.shz.shzkisi

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 udp
FR 216.58.201.110:443 udp
GB 142.250.187.202:443 tcp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
FR 216.58.204.78:443 android.apis.google.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/user/0/ir.shz.shzkisi/files/PersistedInstallation7729356767113142245tmp

MD5 b0160f099ded9596dfc12499485e8273
SHA1 7708efc9f2834c200c212786ba96142c5ced3844
SHA256 38d0931855453d67c4d2a6a99a09a64c2bf2b5a7e6004301b3a46405fccdd31f
SHA512 21819aef5618beb397dd4fb425c36c239df48d94a3c07e31cfebf478a0653869ac302cd2c616d42381230dc7143f90786ef773a988553c1f438fb83a445f9b13

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 57ec1cfdb0135f1c375423346d97824d
SHA1 32cd2ed925b2e4388804c9987d45ec1e91d081c5
SHA256 87a57187cc0dc1292e97a942033ff0f1965fffd4a91cb831112d70be9932c4bf
SHA512 d8dd9ea37644b7d699a052464b691530975f2ed178fa30cda4e5fd2a3a11c863008da7a709c07b9ebd122924c76240b3e3c342552213017581072daa2e7d430c

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 92539c62fce0bcf5b1dd2c806b41368c
SHA1 33c3d376445824e58103e81774dc07c2c49db81c
SHA256 f60d9c048c1150f89081160a1aa049767d68c4365cc3523eb7b35df0c3df16a0
SHA512 a18df37c8f54f5c287b922e81fd7cdf2246ab3923995035a4a48698747aa11c9912bb6a304e7d3428a2df19bb05ebabbb89f72f30c4dc60256f6d628e8cf4ba8

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 a618462a088fd3799118476b62e04b20
SHA1 419bddcee11de8571ad8cb2fea93ddcae4b6ba75
SHA256 21d632fdfabfc3510d663e4bf335018161c89a3f25d524c1e7a2b4525ba28c4b
SHA512 534d64204992058e25cbd5c4a2254f0958509a126f97b709dcb3aa8b7ad0b60e7abaf9477277f787b2e9fbc4d4121fad054d2348d33310a457a93824e70f4850

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 9c5b6016557e3a504e1cf51b54ab0423
SHA1 b09414a2f285dc29ac05299c108973ef6a8cb568
SHA256 28fd4bcc361af593b3161b59eee18d0e31275e806f5ee1d5f101994260773534
SHA512 4f305bab7e63535b0cf3d1a44c62ddbdda6588c1b8a0aab27134ee355e645b4e1c79f50971f24f624b3ca7bdf794144f79bde2bd5227d952c45b5ca3711fdff6

/data/user/0/ir.shz.shzkisi/files/PersistedInstallation5529270105769950786tmp

MD5 02dee71e702acb0ff460eee7eb8d62ed
SHA1 a62668409ca1d70fd988c3b97e36141b362cbd62
SHA256 0a39ba8e5599dd022a8e0cbeafa44a791833a0950d4940d631cfb7613fa4a878
SHA512 f45fe5f845005d428395effd2dfdd77b46b5e7c6ae428a42161595319c33eecef0eb3054c2ce3fc4656b370483fcda2228ac10ecb9dcce2fa21691b71d9ca002

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 9be28ce8686e70e8b05e5bd682f7480d
SHA1 46a33929dfc744e153efd0350a0d6d0ecfc3a918
SHA256 c9521e5c304afde1c23d23343091070d74b63e601fb831030604d919312738bc
SHA512 1454c8463ff6c8495482730c54f7a52dfe4f368d73893849917f10b3c2b8106927bb37b25e9a5b5ad86be75a2df11ba01adbfd798b16f34c988336decce97741

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

MD5 1439c71d46231b0cce38a396be4d5710
SHA1 29d62319421909633591937ae8ba79ee2e53c810
SHA256 175b2087bbb6c61a6809b0260729eeb8c346b2bdd01323cdbbc57fb5de4157ac
SHA512 e7960335a74d6b9b4d947cf4422d87cfcd6f399f6b8832867fd2b5da6dcf3dd5c68da2f2bda29c2ec191af94abc277b9e66783c4773385d75ee613624029b07b

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 6cc86dbbd6a61c55cce8105b155b419c
SHA1 a7cd69f314f7fba3e665a7de87bb34fb73c2f198
SHA256 6f0993b2758c10ba1bb484bbee1e5b5bf5a2244e91c124ea99fb560db70e4c00
SHA512 bd74b96b7effc77fb240d088d68ea6d1f8710a6ae617d00b8120e5758e17969230fbb9fb26750a961329aad68e7d6423a20a90f9694e7e9583c4cda3773523d4

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 403a2b3acd281b54064a29f6f12d840d
SHA1 172ef194166d916404dfb5c2f4a4c8a927135eb7
SHA256 b2ab44faaf8ce6b0b321724a26ed52a8774aba21bfc886fb0a1e6b0982075928
SHA512 30665712ab87fcf5c8cc5e9fabefc7a58cb751c1c5df80aed3453f9ec8a5a34cf1acf663f9a157f2e47f9388ed693d9723c9ff0db2380927fc4705ff19383fe2

/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

MD5 87315e9af1809bebec526a7cf9e83510
SHA1 2e52205300d3e3ae8b8587cdd515159a0bdf2a24
SHA256 529a115299fb7aafd30c10e706d631b958fef994dd13dfc617ce428b8824cd61
SHA512 c39a6ed7d0650d50c37b94826ead8b9b6e24c38c4343d792e6d8840c646f6e374ffb286a224b97b6f364050297fe8827808a1539178f45ce00c8867824bd3536