Analysis Overview
SHA256
92aa60b1b2c69cb462c519d23ac2ed2e47707a32adcac7a9feb62449c88910a3
Threat Level: Known bad
The file 92aa60b1b2c69cb462c519d23ac2ed2e47707a32adcac7a9feb62449c88910a3 was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-20 08:05
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to read SMS messages. | android.permission.READ_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS | N/A | N/A |
| Allows an app to access location in the background. | android.permission.ACCESS_BACKGROUND_LOCATION | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-20 08:04
Reported
2023-12-23 12:53
Platform
android-x86-arm-20231215-en
Max time kernel
2528853s
Max time network
145s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
com.psiphon3
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | iamdrdev.ga | udp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| US | 1.1.1.1:53 | botdivar.xyz | udp |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| GB | 142.250.187.202:443 | semanticlocation-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | iamdrdev.ga | udp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| FR | 216.58.201.110:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | botdivar.xyz | udp |
| US | 1.1.1.1:53 | botdivar.xyz | udp |
| FR | 216.58.201.110:443 | android.apis.google.com | tcp |
Files
/data/data/com.psiphon3/files/PersistedInstallation5147869164213863598tmp
| MD5 | 4c390053e21b88bf7e76126cd49e3d16 |
| SHA1 | 3fde3751c5afc898a3bec52ab39059f0e08a13d1 |
| SHA256 | fd22673032e48566f7a337129ba19b176a282c3a667e0326bca76ffb54028d42 |
| SHA512 | e1828637a5719a8aa8f9ebae565c78fa51a7d3e71f298cfc29810681184f9d33680ed5dae28829f28760c5cf5c25aaa8a72f19d6aa1728ae6871076d690e17be |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | 5dfc79a75000244b250696a2d72a762f |
| SHA1 | b7975c066efa52cc995cbf51224f1981141187ea |
| SHA256 | a857fdf45361814da5487810de4eaf692d47a49073df275bd57a501a3c149730 |
| SHA512 | 7cb8fa192e9783dde62d5d1d7b5019f582c34b4227a18ac356a9ff9d53c46bf059bdf9d7df2d4672fd49679dcea77c9d2062a9dc7a2c195985ee96b60a423b57 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 7237409e0640cfab7bdbd429bf821a3b |
| SHA1 | 4c3da934842f8d4835dfe2a9c275a300e5123309 |
| SHA256 | 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa |
| SHA512 | c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-shm
| MD5 | cf845a781c107ec1346e849c9dd1b7e8 |
| SHA1 | b44ccc7f7d519352422e59ee8b0bdbac881768a7 |
| SHA256 | 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7 |
| SHA512 | 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-wal
| MD5 | 735a663ddf52080faf1e05580acc9519 |
| SHA1 | d0faed0e6c86dd5d3566c4ceed7428e6c3631409 |
| SHA256 | 0cfff1cd4afec62d744b47d26510d10e5c1750a0a1c9217727a4ac6669d8032a |
| SHA512 | bfc0391dc65d6a28b32d844fcc739335e658202d93fb625b1b56a7dbcfec1972b310818600db5d51137acecf1c8fd0fcc32d8e64092ee23fb260986fb5b0f3ae |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-wal
| MD5 | 371ad92f69ffb3ebc951127aefc5ff0f |
| SHA1 | 8c300b92dbb28080d7cb7c403ce817063bbaed89 |
| SHA256 | ea56aa4bea9b10ea372873cee5861b80eb1e560259c6f02efb09209381ec07e1 |
| SHA512 | 5650e79311b960ec707dffe8a41a9bbbe099aea36a9d7770169ef308d96c0a65abb0aa96a9062d20ee4f0cbaae594696afb076de457a459dd701d42452872450 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 80509697207b93143622f6c5afbdd093 |
| SHA1 | 58a1bc922600034cc4f8554f07550dcc1340900d |
| SHA256 | 710432277f0f330712c50942b41a3eb9b6c058965d46b0a642e1bce8bcff1459 |
| SHA512 | 5e9e3ccc27633a567d56d9aa1fec0d8489e47f871d59dcb9a58353a4c45f1ce357e27c46e7926c4311c606da3f9ef645bd85861fa7efd9e8531ac60a5fcfabdd |
/data/data/com.psiphon3/files/PersistedInstallation5066696687188723887tmp
| MD5 | b57a99c314c2bbcc8ac34dcf7f871a71 |
| SHA1 | a3210ba7d4923479ef50dcdf6b84f966ebafcbbb |
| SHA256 | 30f89c0a3186ac7ddf5925ed1e64efc9b1de5187e6aff116350efa3770d21c8c |
| SHA512 | 48c96ef6ae4df96d3653c07e12cfac177c5f581211c4883de73f29a8e3694db8a1a7e338ed3a9580c16d504466cd566c85a0ee920623b88b4c33d5ada50da6c1 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-wal
| MD5 | 906de563b396d6b443d1ffd48d072fcd |
| SHA1 | 4e7e9146d0bb001acd2b8dcc48aa848bbb3bc33a |
| SHA256 | 2ed11c8a31c684cab713fa1e1406a944d4f23184b85b0f724f9bbac8d9cb71dd |
| SHA512 | a67744bbc9b4a6ccd4477f7e62927c589c19b54872bbb50f24a429b2793ec93ef98ec75d104ee0c31a0eb1341db078e2daa353fbc2322be85f1b10e385fa5efc |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 461aaba4bdee22acdf1ee89d21acac94 |
| SHA1 | 056c1c7fe2d173124966934a4a58d8e869feaeda |
| SHA256 | 797e9908f5da9cc2fdd422aefcf684be7939dcbe70329ec29846ba320be805f0 |
| SHA512 | a44dcaa61f18398056ee95ffb2005e8c549bf15ed1aaac17c53c0c97cf38d81486573dc510928c6baf60fc71f60b7e78b4a455c6237f6e3793b54f8795a6fc4b |
/data/data/com.psiphon3/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-wal
| MD5 | 89b729f0feefb6138677581013aa5195 |
| SHA1 | dabc79189f0825f78c6dea2f14ed7e559f91e0f6 |
| SHA256 | 0e092453deba9e3502350829c5017ea23b8cd5e70c6c19704efa44785535bb97 |
| SHA512 | 329d552b636c12c157062e2ab7df250b816d11fed0e5cc9b09fc0fbe2c431850459fcbb0e773d0aa742a4934874b17cb6b808b4daedf5dca9e83af973a826730 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 32f4860eada8d7d7035096905246fc31 |
| SHA1 | 030261972feb9d9a277e4a5d4bbcb68f073d24da |
| SHA256 | 052b69ae442eebd661b442a36713739b2db6b2a6cadd1b71e8823444961e0d39 |
| SHA512 | 32c781b57f175391532634e97ca0f3e73bef2cf6985fffff13fd7507e9ca3ba0a1ed24a1fc5c16259336b2310f1106fd921607fddbfb0f5bc9ff5be478ef56b4 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-wal
| MD5 | a4e1a935a8fe53bda68a8f9533c09385 |
| SHA1 | 9f1dcdb4a5e17a87431e216b9abf78b1a050f3f9 |
| SHA256 | 8bbae716e0fcd4ad2f381b47a48bdeb19ce7a668bdd83da94b3f5141eed83c55 |
| SHA512 | 7e46ddf7aaebf9f9ff9f140b2df77a988800d744e39508ee041eabe69c684db62ec64ecbed71a69c93f4747a13b1777b78d3eb56087355ed2adb074b3aadcc20 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 3e881d9a01ca707bed38018ac69f4518 |
| SHA1 | 5820f9351d7cc8082de6e5686eb9f8fedf6fb830 |
| SHA256 | 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c |
| SHA512 | 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8 |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-20 08:04
Reported
2023-12-22 06:18
Platform
android-x64-20231215-en
Max time kernel
2418763s
Max time network
164s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
com.psiphon3
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.200.8:443 | ssl.google-analytics.com | tcp |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.187.238:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | iamdrdev.ga | udp |
| US | 1.1.1.1:53 | botdivar.xyz | udp |
| GB | 142.250.178.4:443 | tcp | |
| GB | 142.250.178.4:443 | tcp | |
| GB | 172.217.169.42:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| FR | 216.58.201.98:443 | tcp |
Files
/data/data/com.psiphon3/files/PersistedInstallation5432479792739570971tmp
| MD5 | 635a6c1da3f70f83d753505ce6957e18 |
| SHA1 | e600625355068d872ed856ccc1cb6110e727ae75 |
| SHA256 | 8b44aa454bf09ddc4d8a811e97eccb27c7f316e5be65df30b3e1299e4dcd13f5 |
| SHA512 | 443c3a0009a1114aa014be53f05126943c680c0746fe49670a671d20aabb03f71b0b994719494819b0fb38f45a7f9eb233edc8730b388249c25f9d57c8eaccc6 |
/data/data/com.psiphon3/files/PersistedInstallation6580008154741766813tmp
| MD5 | bdaa630603fe7e1d4bba725821d91011 |
| SHA1 | 52cdc55e9daf1b735e38b39845b2d20e70715d81 |
| SHA256 | c0f531fbb1839b68b27c473f9772c7da86c1d1c58bca14d8ec2ea9d2fd863476 |
| SHA512 | f1ceca551145d09e8cbad7290a52120b860324aa6e452e75a5656da5341e68fe0adf782289fd9f4dee804819dbaac0836ad82bbcfe727751b1dbb7687dcfb9ba |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | cbd773b817b4090e3d90c0cff973955c |
| SHA1 | cfc5a53574f44d93bac94b50314a6c9a344092a1 |
| SHA256 | 1c1026a664c241b030ed12762f88ae75154e6cc8c2190a316dddc91f6d411bb4 |
| SHA512 | fac076d78c45faac94e3b5ee81f915d53878219e8b32a69a6f5be8f8b4b15877f4dba25630aee05bc679c68e619d1789fcf2d640e62c68d32dee17da39638fce |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 163b0e3f017becbc89b9d7f330b78f09 |
| SHA1 | 1ef9cd8ac8655190468d0ccece0a4738634ab0f9 |
| SHA256 | cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36 |
| SHA512 | 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | df9aa88d1829be730a201deef36f2c1e |
| SHA1 | 7dc5866e6495a9760070c32455939d6d01fe65db |
| SHA256 | 2dc651e1289ce8b738ffcb7247bb48202cd994b4b0379c4fb93bb7cbaaa373c6 |
| SHA512 | 4e1f050cbd2b7a4bb064727a65ecdbe9c539d6f1e420f07ab85e6aea6310773a702b87aed0fcaad816ef471b8bf8bfeebda096af5ea411f94eaf8cfc2e592d8d |
/data/data/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | b98268fe911f27475159daf26cb1e1bf |
| SHA1 | aa4d58cb6f8ad01ab731ee4e085551ca50f71f7a |
| SHA256 | 5470b049fb2a1988464b3ec5e5a6efbb203d6dc9c4db4ac988863e9bc703c211 |
| SHA512 | ba371b833b403758cd6482f67607ce1ae755fe06d841da4634950f2a3614bd089cc5dcfb7ef4f859b241e88f08cf0075374675491c0fdcef9a103bd0b3b48048 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 7bc0464745a102c005949e89c161aec9 |
| SHA1 | 589d18f4535b6641ebfb341710ec722f64289cc7 |
| SHA256 | 1b56c8f452ba5796bbe1408855dc3d9cbeddd1176e52be0164a79e7a8dfb5f63 |
| SHA512 | c8a3968b30563096f1dc3af25b9b08aab33d5d35bf53268d2a7fe85db61346acb517b20938ff59f33b9ba89574cb0f957b7d32bf8adced3c0ac5aa912045e557 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | d5b2c45b2ddc2c1b949acbd7712f0d77 |
| SHA1 | b6ff93e824cebe78999c930cf6d438920c08bcb9 |
| SHA256 | 68bd9765b80b446de084863cd78a59e55d676913d933992cf8e14c3e743291d8 |
| SHA512 | ec3e02f63820f147476ae8166f8ddbf4c634524c29f6f6830d000081539627c0413000c98c95bb2d099b01a3d7c23b7b256686c0325052b13344ef48e1e326ee |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | f741e17eb766764f3069be20235d0652 |
| SHA1 | 098e5bb66af89df2b626edc28721a2557b44dd1b |
| SHA256 | 58baeca3902e2991785b7a693b2efe015c5778056f3f290f0439a6609257397b |
| SHA512 | 2ef04f64583e68fb3de3cc8c4169109bad4eb311365ec5d319209b6a3d4afcf5a74c75671f2cf3a0d57d731744de75a305daa23d59c6573e034641eeea3f47f2 |
/data/data/com.psiphon3/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 916ebf18a1e232c40ccee3fc6373259d |
| SHA1 | e2fed918acb34fc3abeb92291afd1e1d4ed4c244 |
| SHA256 | 2606aa5f7ec469b08aa0cc5b6495534931d6fc7a207683c68a0fc1b7863993fe |
| SHA512 | ed498b276651bba56fbe145a7c3ad952696cf1afe9d3b005cc59ef347ff585d567644922be31710cfcb7723cd05e04661ca229f1e7f71ed9197b4c78d1cd04d8 |
/data/data/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | adf6082723784327d7d1b34adf974e7d |
| SHA1 | b1502f70eb881a1dfe41139cb719fefb877ee37c |
| SHA256 | 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9 |
| SHA512 | 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-20 08:04
Reported
2023-12-22 06:18
Platform
android-x64-arm64-20231215-en
Max time kernel
2418744s
Max time network
156s
Command Line
Signatures
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Processes
com.psiphon3
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 172.217.169.10:443 | udp | |
| GB | 142.250.178.14:443 | udp | |
| GB | 172.217.169.14:443 | tcp | |
| GB | 172.217.169.14:443 | tcp | |
| GB | 172.217.169.14:443 | tcp | |
| FR | 216.58.204.74:443 | tcp | |
| FR | 216.58.204.74:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 172.217.16.232:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | iamdrdev.ga | udp |
| US | 1.1.1.1:53 | botdivar.xyz | udp |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp | |
| GB | 142.250.180.4:443 | tcp |
Files
/data/user/0/com.psiphon3/files/PersistedInstallation9203448151070127416tmp
| MD5 | 53835f563e5e17581c70859af86a2ebc |
| SHA1 | 63d70d0f8cb37e83a7890bc1d18052d6813cc0f5 |
| SHA256 | 7393ba1be8b516aa7cce0cdf0e079c76857e76e1c97e6a33e5df47f91d0551a6 |
| SHA512 | cf091b0bb62b349b559ea147859a2bab4fb2d2e5c0691e0402398334d7991d791de18695f40fedbb1b72fd69158e04f1ca310b1f306fcc90fd157f0586e8d904 |
/data/user/0/com.psiphon3/files/PersistedInstallation8418921547682728996tmp
| MD5 | 222b318377b30fbb2f2b6e7e9f923791 |
| SHA1 | 4926e5e61a64dcdb878638cab5738fb8e072e4b5 |
| SHA256 | 0495a2211c614a29fc7875bb3a7ffc3b93a1b8ca6e4763eff666f400ba53fd6f |
| SHA512 | 6147ac85e7ccf46c8d6d52b351677ee4db2ff9bd5d28a2ed927d6abca7507260b1738e2969372144f5b903ff9d48bab3dbb1bc4679ce5d683b18362f53073bf3 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | 8d742ac0a0d07ead4ed606a0e9edb341 |
| SHA1 | 95b3bccdb5406ab872e168da0fd339d54faa267f |
| SHA256 | 354489cb8eecf55d4749269aed0dce146b0d55f5e5bb7baad998e646fd4234d7 |
| SHA512 | b642c235e5b2eb6ff43cf3b1d5e329543ae7c59512d64e95cd61a3fbb1a37c88a48acdd05efb53a295f51768d9f4c524702569c66b7365931ca8c9c85dca6fc5 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | d9cf75fdd1c2292d986f6c3d5d60f2c8 |
| SHA1 | 07ecb1d3a26d952ae5fecf54f36699ab498510b1 |
| SHA256 | 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a |
| SHA512 | 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | df57e3222c261d55136091c7353540f3 |
| SHA1 | 9018ef2ab3db43eb277453661a2672eaf087ad98 |
| SHA256 | 1f05a0ebc46716da03e5424ed1051d5db71b5b94cabb1fdefa400bc645d565f9 |
| SHA512 | bd86a12bb485411e928e764a65f303c38731c5bd00d2372fb9cdbb0c77fbe9e68ae940d7b417ce0f69db9aa5b6d230266fc192c929925bc39d0231a52d9c5ebf |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | f8ebbba34470e55b1aefde5f968a2577 |
| SHA1 | cf8e78951cd39565f21196ca5da61a281df101e9 |
| SHA256 | 0dbede7f9cdcf0a22bfbff732ac24f2c0e4099bb58d22e8f04b798696b97004e |
| SHA512 | bf7112af49b2986f63a4d4b48bfae2e0c887d5d69b93f17d367f1a565aca2bd64f4fd6cef43a069f5adcaf8432a88ad4be72b62cc1134e98f29f892b26aa7395 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | bc32fb2e3ec903aa2ec72a06318901c5 |
| SHA1 | 6b1d32c3e0bd7191e315aefb0f8d45a474247457 |
| SHA256 | 332dc38fc9d466a472216f1a78b3b25fbed6b15ca7df939bcca093eaeedb0a75 |
| SHA512 | 52121e778a532abb4988271ee07ff10c5bc9ae71c2a137311688ae7377be9ebe90d529d7158a6e60726069437e0bdd97433513235019f1c6f7fb6d065ae93ec9 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | dc44231a2047f5c38413e4703bb53523 |
| SHA1 | a78c21e3ea30b2f020b7a98c32a4de1a06171772 |
| SHA256 | 932a5d868a3473857997a218a43ba85c88cc9a5a265564109ed87a7191166e03 |
| SHA512 | 07e6decea43b3ab4983960c6c1c8876426cb4e0b70bb99fa0cb2049993b8628d8894612a321558f587d93d556a6c5d4593e24d1a7f5cba72103bda2f12fe5f06 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
| MD5 | 7a903f6b3e641cf57a65cfef6ea6ef4a |
| SHA1 | e76faca7c00e2109866320612e8333c2c85e1d62 |
| SHA256 | 8d2db49f2c59050b719f7f15b9db1f33e77914a991220b057d4ad48c570e524c |
| SHA512 | 456ab4db7f0fc4f099bba7990906ac6754e2c1997bba9707ede22ef9c0a5dec3477a0b34902d41257bdf643a943d61859e0633b89bf1a56a976f51203efcae97 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 1a9d1957c3eb25d8f0c7de5948f20dcb |
| SHA1 | 9376c711e310a4e859096ca00fa167312fb32f22 |
| SHA256 | 9f7a0e6be48dcbe6834f865a3234d2daacef06ea5567d966fc12c26ccaf2e98c |
| SHA512 | ceb4fa2968e59a753ed7de8013fee635aae1bae205de22de75f5f384f3d8045a3a021ed644e66b4e03404a076ac5357c1c77591fee6a3de504f940f26f98970a |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | afd5f6b92337989af3cb39f23f05e871 |
| SHA1 | 0d2519cb224e1a516ea7ee1bbc59e90bcc5b0ebb |
| SHA256 | 55c1af9926dbf65a3f4d008b1bc230e6ba3443cce1487a4aba2e03bd4b053253 |
| SHA512 | 203131f7f48b807584852a79892a71d8cde0981c9b0f121506fc082a48e5576fe79ca9397fb4493e006c040188c9a3bb9beceb7096db3377428b1047e43235a0 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | 224e86cd90ed121a49edeb0b429ec57d |
| SHA1 | 74b46cba35c61bc4766b73c4da64aeac1910c04b |
| SHA256 | ad990c1a75589f5612b94cedefef2c5205038b34631a1ca164473ce5ebb18332 |
| SHA512 | 46675f2c66fa7c005bd49e4c93a5f1225c1b44475c33642f75401752ede8ae4466d2ebdb25e6c0e17a605d3144bd4fc96c51431f3334cf601e95a1339e6b5be4 |
/data/user/0/com.psiphon3/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | c26c6a307c33f2e38ae39d4579c97aff |
| SHA1 | bcc62a7f70582e7ae057373b64c61d9ec4079dd8 |
| SHA256 | cb2fcd30c8e2490772eddc49e226cb2c2d2f5158501fc79e8023928b798dd490 |
| SHA512 | bd86250341a221c96ecec02463d2d14510911cfeba82006090795a72ed89b4cc9b4da77c3a07f8f52a3dc2a0a7494659e7c9d9783762f2508dd29cb446592af9 |
/data/user/0/com.psiphon3/databases/google_app_measurement_local.db
| MD5 | de82e2c94d2718988804b035a46d17b1 |
| SHA1 | 705f5ff19093ad209f2a666085d6ccaed3bf58a4 |
| SHA256 | 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39 |
| SHA512 | 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e |