Analysis Overview
SHA256
945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1
Threat Level: Known bad
The file 945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1 was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests cell location
Acquires the wake lock
Reads information about phone network operator.
Requests dangerous framework permissions
Uses Crypto APIs (Might try to encrypt user data)
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-23 21:57
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-23 21:57
Reported
2023-12-26 11:48
Platform
android-x86-arm-20231215-en
Max time kernel
2784212s
Max time network
130s
Command Line
Signatures
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
ir.iut.kabab
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| GB | 172.217.16.234:443 | semanticlocation-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| US | 1.1.1.1:53 | srv.magnetadservices.com | udp |
| FR | 216.58.201.110:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.180.14:443 | android.apis.google.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| GB | 142.250.180.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| BE | 64.233.167.188:5228 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.180.10:443 | semanticlocation-pa.googleapis.com | tcp |
| GB | 172.217.169.4:443 | tcp | |
| GB | 142.250.179.228:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | server.magnet.ir | udp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.178.4:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | qnoaduxc | udp |
| US | 1.1.1.1:53 | qjsbfcgeeje | udp |
| US | 1.1.1.1:53 | johimywoc | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
Files
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 5a98762fa46db39921e5427cba052c03 |
| SHA1 | 3528bb48f10005850b62fb539c9b226cb0f722bd |
| SHA256 | a0dc10aca54244bdd05616102f55e5000d7e8d7b7196616790de1328bcb8ab1c |
| SHA512 | d95e29326158ed66a13ab936bc5907624a61139665add630352898088d1c61dfaab0660e7310260fa62beed222da8c78792948d0b4dabd3a5142175edd5074a9 |
/data/data/ir.iut.kabab/databases/db_default_job_manager
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/data/data/ir.iut.kabab/databases/db_default_job_manager-shm
| MD5 | cf845a781c107ec1346e849c9dd1b7e8 |
| SHA1 | b44ccc7f7d519352422e59ee8b0bdbac881768a7 |
| SHA256 | 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7 |
| SHA512 | 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612 |
/data/data/ir.iut.kabab/databases/db_default_job_manager-wal
| MD5 | 89e9e01bd1d886b53d3f0bfc4e76da39 |
| SHA1 | 1cb8692e12add786ac63f586fcb4cb24c5dc291d |
| SHA256 | 2b712981141c5cc897b3850b9f29f73048c2678746e9d4a860e2c6c197392553 |
| SHA512 | 499696d2b690de7b900d07616002f4dd1af76d754dded82ca0ecdc68b4bbf43f9b6f498083a75aceb79e27afe5927aa7d597b415259987dd90244000cc95f31d |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/aaf348e4-6784-47e5-9d34-38bd914c7b3f.jobs
| MD5 | f56f328eea1d5c96a1b96dbbf59488df |
| SHA1 | 440c784cacff61932e2f61580b7cfdc3a4943c95 |
| SHA256 | 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918 |
| SHA512 | 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bf72b26b-d2c3-4b39-b41d-01a3d06831a7.jobs
| MD5 | ac58f99a1b179d71e8621412ad31c6a1 |
| SHA1 | b51fdad95876f5615735c2ab411031ff67d5e946 |
| SHA256 | 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb |
| SHA512 | faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | e5653d0dae735c621c651792c4c05409 |
| SHA1 | 34ae43889e6bd85ddd8c024711ae8d2d86ff63d6 |
| SHA256 | 7aa69a6487e2d60e3a01fd987024d2dd6d50881e0945ee1767b4edfdb8e0d986 |
| SHA512 | c65e34b6cc4b654b61cf4d0ddb936282502fc0c9f979bcc15d549d1f83e38c666dad75cdaee5bd119f01bd28c05808747826fc371761f38d1b439c5cd7ec7206 |
/data/data/ir.iut.kabab/databases/cheshdb
| MD5 | 1f347cea6a53594be878e35079bdabc4 |
| SHA1 | ae24631f83d3c875dd678040baafb5e64fc6ba6e |
| SHA256 | 46cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5 |
| SHA512 | 6f09f140cda839271dcc15857faa5ec7fed65afabd0ed53164744e0b15c145b4fd0ae3f6ef0ad01cdf4eb612510f7f150ea72781740a9c6d67ed1075e5e026e9 |
/data/data/ir.iut.kabab/databases/cheshdb-wal
| MD5 | f3891be7891293ca57cc4637f5d4b7e0 |
| SHA1 | 3a5b473d6d60da35a2b1f07452aa9c482108dc0b |
| SHA256 | 0a2992d86a104378f2bc72ca75e53f2a3b96ce05420805e4e36333b8f218408e |
| SHA512 | 6f6e03239b82f39c30af7bdaf32d635aa1a39656392b7d9b2da6ef82d445f098d53152498750b85165abcaf76f2e72f7790ff09ea8f6cae86b281f0969bc7e9f |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 7c5b2cb46de53e495e29a7716915d408 |
| SHA1 | 5652dc3486e588e5d25cb109d8b2ea908172a20b |
| SHA256 | 351662304d73d4955d95d38b1cbf95deae81e76c22ebccec3296cdee53eb854c |
| SHA512 | f71a89be45b6e9b107c8f291c43d3eebd6eb32157e9af78c80d167d8c6c0d846758d6b1e211a08ab37eb54cb948ca8e5c1da3c119e66f96f2ad324331ac479fb |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-wal
| MD5 | 736719910221c4c70554c47942371c89 |
| SHA1 | 89067c6b674b0d0cd71b9e884726e3b882ebff4c |
| SHA256 | a82e700d323053967dfdaadf6bc915f2eb42777e83819f461527b65a52c553fa |
| SHA512 | d343991ecf1bba10a407608f885d83f6e228ad5fcb4fa3a1a5859f5a21d748685a180118efb7f8f695c083a71c548367744728140d570009dffa07a885bd6641 |
/data/data/ir.iut.kabab/files/db.db
| MD5 | 123462f8178c5654ef2ec3c023770783 |
| SHA1 | 48cafa51203275f0629403c3baa9a9455faa43b2 |
| SHA256 | 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b |
| SHA512 | 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c |
/data/data/ir.iut.kabab/files/db.db-journal
| MD5 | f2be84173f63392cd878e5b95a929b94 |
| SHA1 | 07680bda1a349429d2b82268dae5908b9ea009d9 |
| SHA256 | 9ac35c58be69e0aeed894934382615429b29872201c3cde748567d6bfd46eac0 |
| SHA512 | 715f9457ba608531c281304db21cab841f4a86330fa06aa0b67a8a4b274e31a12e1d79afed3365970fec4643d2f0f9770fdcccb7a7c2e591e1615953a7367a5c |
/data/data/ir.iut.kabab/files/db.db
| MD5 | 78b6540f70b70131f5bb53c367b7bfb9 |
| SHA1 | 4d57a60e7e0c727b796c217d827c8d1ba908dce6 |
| SHA256 | 498e83055e60338fdf7388a5f90231568a5d8fc58f40ec6c93192943c051e0d9 |
| SHA512 | e32ebf71e705ff319fee462776ca286f7eb385a2017cb45c99d5cb54df92acf85e832483bf14e9830f182c20fe1930fdd9298948d1b6a2f8fb8ca4fac186a8b3 |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/002cc678-f409-4b87-aaf6-d876e0d0374d.jobs
| MD5 | 6e0eacd0727493a8b477662b11843841 |
| SHA1 | 9a028b1117d5e26dbcf59772cbd82f194ddf7cd3 |
| SHA256 | c5eab4202348d1fb62c6c61af5e56e604827d37ae42466b1920ea67e8ba3b114 |
| SHA512 | 16f68b044f51e5ea92af6d6e21e2c2cc31e21f8f3100029a7eaeb026376142bf5b4379d7fd75e9d44e4a2675389bcd3353ffc666578fa6d2a0282faed08e0093 |
/data/data/ir.iut.kabab/databases/cheshdb-wal
| MD5 | aa73ec98353a0c623c42f24d6138e807 |
| SHA1 | ab8adc7d05c7c7b6c955e5fa0faa04bd902b7e1b |
| SHA256 | f40cebb1bed82aa2922cf97d11c91cf74c7a3f837e27a2329cb62d6487335356 |
| SHA512 | f4c32e0d7f4cf4e7bc3a04da1c50b6765f1ceeb80937ee20131eb557c6426df8bf0bf0d9ac6312d2ef7d0401973a496da38a55725ee7d1a0d40959b10877c0d9 |
/data/data/ir.iut.kabab/databases/cheshdb
| MD5 | 58ce0035200e2f41159694080179af29 |
| SHA1 | 452dae9777a629be4ab93c3c3fbc44bffa80881b |
| SHA256 | 3a1037161504a8c6c71a84f3ec0fa0545320b905edc1e8d1c223dcae36693337 |
| SHA512 | 1a26bac993c4d93c3e8bc509855ce713b71a114c408f41e24570cdc646d3b94abd6b6770385ef72633e40d140940614b5ce1a0f384acc4f4d5162e5832924b0c |
/data/data/ir.iut.kabab/databases/cheshdb-wal
| MD5 | 214b15f6f82646bb9ce380ddcc2a4949 |
| SHA1 | e11d4fa2b7d75e32f261ee82d0986e2731249381 |
| SHA256 | a29ca6cd1189406b9d274667b30e61eca66a90788a990f98f41f2b5ae6f69c82 |
| SHA512 | 23cf4cdf28f6bae9bc2a03bc4d379286fd4cfc58e25cd8166de1ac72adbf2195c459be4a4a055adc0bc36f58a612692e28df2069a12292f1e648556396723c89 |
/data/data/ir.iut.kabab/databases/cheshdb
| MD5 | d8dcde5bbf697ecdfd72001aa166574b |
| SHA1 | 0608b4937495fded61cf23cbcfe166c857e56dc1 |
| SHA256 | 536834557af0124437f2034b9a2196bc523b5bfc670969779e7ee6fdb654e6d1 |
| SHA512 | b2b5d62a4324a93847bd901aef46f3cec4bf589d9c31cfd138c41fbfa7734fae3c948e068215a16a938244aaddd2762dcc2deba2b0f798948f2fb6d3706821a7 |
/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | f3c747c5521bd3a63697bc0b946d7a55 |
| SHA1 | 3d82a44d5ca7d589b2f392ea21549242fcf24769 |
| SHA256 | 5b21f5889eb2e263fc7fb1fc419e592f0685a8374cb4ec1eadebff125af790af |
| SHA512 | d08042512caa8fef3c99d66ec34ec80e86f8dc5669e08b1413b9416d7eaa862d3cd259df3628fccbce7a4288bed6e764b0d07c0d1f754a544fc5aacf42d38d5e |
/data/data/ir.iut.kabab/databases/evernote_jobs.db-wal
| MD5 | e5fdbcbfe3bcee15bdda049369c75dc2 |
| SHA1 | 5526259b1ab2b33574d4872f993d1a1108854a6f |
| SHA256 | b9af0fbbc0bdc01094d81ccc2101769082e808b5c915757043912a86bf1c2286 |
| SHA512 | 935f8981fbb47f2eeb0c823a24d43643d581e25a5dc9ce23f839d83f5cfd770dfe12d63d6bdf6b4bc4dd2d6c4a3a6474d737984d4b872514b9d60a8947943c41 |
/data/data/ir.iut.kabab/no_backup/com.google.InstanceId.properties
| MD5 | 0dfb4c5d83fddc123a2ed2717ab31b70 |
| SHA1 | e89f779505330065777c6106e980814c809ef729 |
| SHA256 | e82a6ec2ec5d1fd04356acb9433f469421644bb5ae64f1c23273c207fed948b4 |
| SHA512 | 02905b4ca7658f37895110ca9caddf212464271813b9d047406f258aff101d45e00364e5fd9771968b1a2b4e89c6da895ea718c0d5434f7f7241edfaaf4787a2 |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/513644e4-4475-4bc7-9608-3e7dd28a67ba.jobs
| MD5 | 191b989d2bce8e2ae2efacea3eb1823f |
| SHA1 | f3670c573258672900e6a0ba746b1713ce5a53ee |
| SHA256 | 24ad358b72e69ec2b496025ed832ab2e3a56396219ca69081e4b4f5a1b578021 |
| SHA512 | 66a262c9a57f7baaef58d75d984600a295ec8370fb25596174e859d3f87dce425f3ed539cf0e3076b6ae8388874617945a3319ffe0e3b60fc8a4b8442d31bcc8 |
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-23 21:57
Reported
2023-12-25 01:15
Platform
android-x64-20231215-en
Max time kernel
2659825s
Max time network
143s
Command Line
Signatures
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
ir.iut.kabab
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | srv.magnetadservices.com | udp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| US | 1.1.1.1:53 | server.magnet.ir | udp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| GB | 172.217.16.238:443 | tcp | |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.200.14:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| GB | 142.250.200.14:443 | android.apis.google.com | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| BE | 142.250.110.188:5228 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.200.40:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| FR | 216.58.201.100:443 | www.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| GB | 216.58.213.4:443 | tcp | |
| GB | 216.58.213.4:443 | tcp | |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| FR | 216.58.201.100:443 | www.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| GB | 172.217.169.46:443 | tcp | |
| GB | 172.217.16.226:443 | tcp |
Files
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 61899dc77aa4b9d21edcb96894d00324 |
| SHA1 | ef26024afeb1ac8ccdf6fa74359800e98af938e1 |
| SHA256 | eb0c5a23ad9d3e8cc228a089b3bfe3f2a1a3145bd83ff929b240dbf21ffbdb19 |
| SHA512 | 21117c6ff55d8898dfde0f75941d78629e82af4988aa0a75a4ca18e0a18d5945f67e67cd3b72a85560e5a0a77a7f1ecfc1730cf610f6e07fbdeae7f4b28f5941 |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db
| MD5 | b3a4f0693f6891b73d14ef5711b0a684 |
| SHA1 | 6b2073686e4cf9caacd8a33093d78859bab07746 |
| SHA256 | 84b8e76692c866e730f0ef528e2155aae53694eada46472e6d7838fd30d500b5 |
| SHA512 | 6d82ccb627a99c6f339eeac0cae6f9e96375b84e45286a635afd7cf0971306403c6a2da945b9d8640dd34c667e7957a193916752760403bfc6ff980f744fb1af |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 72093a107d6430a70449b9bddb3ab977 |
| SHA1 | dca32a688dca657d6066c296db6649aa3bce77ff |
| SHA256 | a5e4e816be381f03b3b584e1f3b2ddf698b3f87376310e42f3de6f0ce2ca2d62 |
| SHA512 | de0f25bf35c98ea893703e22f0c7d1010c06bed3252116965a0c459ee5e3fd3e4b01e7f07b836e228d0daed31ac61bf0e4a33f10a3a82f03072f998df0b6a232 |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 0f88c266df461de2be184dc0420be9f2 |
| SHA1 | 7f09886e7fde4795e78fa2535151a890b542a971 |
| SHA256 | 322ba73fa745e3ffb8462855dc9f670926a39abbb8a717e593a5a50859005645 |
| SHA512 | 53d2d9a166a2841c0a173af4a8d74e42756c84ec8509fb35e09eccbdacd13de236d682cbd3eeb52c760a0a783d69b9d46ab7bd536fbc1ebd4ef7db847be13b9b |
/data/data/ir.iut.kabab/files/db.db
| MD5 | 123462f8178c5654ef2ec3c023770783 |
| SHA1 | 48cafa51203275f0629403c3baa9a9455faa43b2 |
| SHA256 | 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b |
| SHA512 | 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 1743451777635667448519eb9f052843 |
| SHA1 | f58792da29f12d8209cc88cd3c6b43b23d325c71 |
| SHA256 | 3a7e8d09e9beb692f40893d1b1da9004502943362ae90aadb589fb4b27b4c0c2 |
| SHA512 | bb09c7304eef54c25f60bd3c137a35d246f6b16b89eba44d0e51247407f25edaccdc8f7fc0804a054a11d064441aa5d342ca267005480f3d6887b9fbd90ae110 |
/data/data/ir.iut.kabab/databases/db_default_job_manager
| MD5 | 9b734d570ef64e3ce8c3cea5ba470f25 |
| SHA1 | db9791f5527cb0b45a3e074ccaf20955584685f2 |
| SHA256 | 0ceaf8b492bf76cf51e2bdee1f264cc0b97f7c25b74367d6ef5f707360a4e242 |
| SHA512 | 6d70cdcff5d8a2ddf3cf68642e07945ffeb9a16d9a925ac99cbcaae43a381f2af49e853e7496516710c6fe1a1932c36abd9ae2ae77137eff9f784e9fbbf21627 |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | e83d0dc15abe0732f752f5921a81a02d |
| SHA1 | b55e03c6efc6a99809f914066a8028ce2cb1643e |
| SHA256 | b180abfbcb07b53b46e050bc32a503fded0bff21291b01e181fb5e7c6552cc23 |
| SHA512 | 1d1cf1958476494e4507a1c166e1528a3b002844e528381ce37f8347c3fa5d3815f5f60f1094b3667668ad1d3e481762710b03a4e28cd8527cd5ae7755ef61d4 |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | ee6c7d817541c55bd00610a2a3c8d57f |
| SHA1 | 3658c31ecb1790ba1c765e29f0cc5516077a6019 |
| SHA256 | 7036c0e6160fecceefb63995c89f406e0947e04e4977852320070f7c3332e8c9 |
| SHA512 | 339b3ac5e3a7f60686d258f29879c38b34438b869c10f1f7c0868b52e2fd84d809a93e663a70ab5ced06d19e4218c930348d03bdd39dc3cff6fe37db483723f2 |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c8a0ac0f-2d83-40f3-8275-c80c2211310c.jobs
| MD5 | f56f328eea1d5c96a1b96dbbf59488df |
| SHA1 | 440c784cacff61932e2f61580b7cfdc3a4943c95 |
| SHA256 | 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918 |
| SHA512 | 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 7944ddcf8a7bd08a4e1fbc2200a05aa0 |
| SHA1 | 948f587806e5a23b0fe19d815ca6d0c49bb72bf1 |
| SHA256 | b7d41bbf2b703d87730e3c0b8076a8a56a2a7f59ddd80e84eff783d47c157238 |
| SHA512 | c9427b99c1a37e8562aab37806e6fd662db4c9a592bc28005a6eb135b57a7c66276d7914b9c4c9eea87723a5e7bee2ceb6da8c457cc81b7d9bfc06b78827c910 |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | 34933c33af92d978499e566587df7965 |
| SHA1 | 2bea9e6b698915f3e2e36599797b06131bf7b2c4 |
| SHA256 | ac41455f045006aeb3b675fd88ca013023d5dd4682d270f561d487d30c0e6caa |
| SHA512 | e95b5739dd967546491eeef8c80490c277a160d84b28ffc7e4a31c660b4af4523f70985fbff1f20b6d5597d2863e0516344584a09a180b31da3dd73a47c486dd |
/data/data/ir.iut.kabab/databases/cheshdb
| MD5 | 259a1e4e7ebc4b0d0341ffcf0c3bc2ea |
| SHA1 | 9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c |
| SHA256 | 4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1 |
| SHA512 | dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313 |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bd2b5a4a-fe4b-4557-b0f7-801865fdeba6.jobs
| MD5 | ac58f99a1b179d71e8621412ad31c6a1 |
| SHA1 | b51fdad95876f5615735c2ab411031ff67d5e946 |
| SHA256 | 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb |
| SHA512 | faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | a0aafa6e66f870fd11aa3b1ffee440ca |
| SHA1 | 887de8d8ab6955538ad4589d687ec47fb9b4f7c3 |
| SHA256 | 8a29b04439663c8964082b0aad77ee08b698fe86dff597157ef198ba0818067b |
| SHA512 | 296183ccb38b1b2efaf882b826687db3361a770c43e2c228a3d445ea887c588e38e9131edac983f7fe0886c352d6416b584268ee8887cf8b2fc1e5670d975db1 |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | 50db16b8d069522547cc1b904a610dc7 |
| SHA1 | e26866b00f526715c7ed8afc600de632bb6720c2 |
| SHA256 | 6f06934377a261581d8c53752d1df70f51442b9761ed8c2f50e97c88b50da4c5 |
| SHA512 | ee49f34feddb65d800226568b0ed9bbfae449809967f01c2f1d19f25c02192d17bd4deabde2b4a8c2662b536ba07dd8cd7fc5c83640fb0d3ce2a82c59ba5b066 |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | d40f898c94247d417056670e61918285 |
| SHA1 | 86fe28b97b36fdfd24e973330fa436e5e7036c64 |
| SHA256 | 80ad4a03883bc82be4e46bc5e0623803001183b68ede1e41f3c75579b8d8638e |
| SHA512 | 71fec8da10d07aa9cb83af8e4b91e8e4da3118ad41f9b43f8d1c82b47f0dcbf2613a24b9520fd94986948d4b5e4d778ac458917d42823cc3ecb6d2f49375a79b |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | dbfc876dbfb11d603e0134bff31ef06d |
| SHA1 | d2fe24fef3003ef4cf63522f65f76794626725f5 |
| SHA256 | 8238dde2d590a46195d0c00a62ef3961839b18e8f0138e1ca1df63667fc638c1 |
| SHA512 | 4326d5d23b490d2f581d315dbe3d30196ac5c4352ab34e40eae685a839871c917232c7d2e77d761a4f7db192a53d7c8ebb46a95defcd2223066b4e1db95a733a |
/data/data/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 5ae36c1d1bde3d948311592c2f18d61a |
| SHA1 | 14d349ae5e175c93adedb75ba5de0cd9fb348f83 |
| SHA256 | ffb58e0ba864953b21f88d5648cba6fa37a1e877c14694e3d7da6fc946de4724 |
| SHA512 | cb7c3585c2f4d290bd36161a08bf76f77185acb9814eb69b4b37b0a43d0f79c8274a714c8ac62c8e71d3e6dfa789cfbf4fe8106bc23377b6ef4babba50567765 |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 9f1944bd84a5e8ce36f8d30c5b72ce94 |
| SHA1 | 2550f5d4ceecb931be3627b46ce4f101177dac68 |
| SHA256 | d1a9c89b086673536183967c2ec1fab5340f8b4108024fa2f140244e78dd4be1 |
| SHA512 | 216683587cd8450f48b2972ecb8537d1372cc6ff832259e3706aea13be131a22459b9c2ad7f1e5aaeb8f55351bbf31794743ca8e3505eb471b00330f97bdd418 |
/data/data/ir.iut.kabab/databases/cheshdb-journal
| MD5 | e7f41655c085e5de76fdcfc95cd6cc5d |
| SHA1 | 974e85f2a8ab08fc371ec7e92e1292075a76b3dc |
| SHA256 | a8b228f4f44e658a952afc8545d546fd42a718d3f8ec0849fb242e2a072ea0a0 |
| SHA512 | b4e7b20fdcbe08c75a67983be55ebc0e2e83645cabb450f4b27099d432f156c34e3f0a8ac7150cf55e25c24e4e688605e13bc3a3bd6f910ad463d7f03b623e6a |
/data/data/ir.iut.kabab/databases/cheshdb
| MD5 | a5d352f94c9979abe33dc4e7407debd1 |
| SHA1 | 6f22b0d71e47694c0a216ad597c46a463b0d121b |
| SHA256 | d810896596eca11e03603a204f8ceef17c72a9258bba7ae1cb53b128b561feec |
| SHA512 | c148887b46e74d6ac387d4455f8fbd27129ceedf35c84aaba840d529a241e143ac80524bac77870c73e0966dd5c919dd9d21f048a5641c1c8a60d5db21aa16a4 |
/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | 7c79e84dcd24e067566234fb672db654 |
| SHA1 | b55db5c67aa0008ca875131ad9bdc4c7fc54394a |
| SHA256 | 5fc593977220ecdd14d8521742c9c4e9aef17349017b7717c5e8cea3676e0577 |
| SHA512 | 6702425cc62d9200c202832260a986ecf1c4a661bbf9a9a389c8397d9dfea098dba1b85c38423e1d1b432152a850a18aeb4c3e7e07d0305ea7752095dafe9e61 |
/data/data/ir.iut.kabab/no_backup/com.google.InstanceId.properties
| MD5 | 98809d639e902bf6a0a5b3537c00b543 |
| SHA1 | dd54289a392769b0ad60139d889c574e3c6275bc |
| SHA256 | bab46ae26a4549b9b14ba08c7040ca15bd659cf42e7b9b98ba4e6ccec7d2a601 |
| SHA512 | 37ba3a58e7902dbafc94b64e78ca16a88c06698d9ba7d0d78388674856f7bbb7d394d685ff73f591d378cc2f4ec252adf8f9c864039663b55d6cae62a0290a28 |
/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | c1c0ac87b2345c176990cecfe89d07eb |
| SHA1 | 626946121193e745751ec234c682c57c579d8e8a |
| SHA256 | 6cfbfbeb4e1d46af3812672339d77fccf18c447a24f2ef45f7c1eda0e3a5dcc0 |
| SHA512 | a32cf2e9ce4ff92fa9863ba533cd1ff62da573f3101c81c804aaafb31364c572a33bb6b8155a8dbd10fed0259d3e9a9db94e0d7cb087df3f81a746b74024a4ed |
/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | ab74914500f356a4112a6cbf783ee3eb |
| SHA1 | d02685c13b0d98aeefd34e8e7407502afdb374b9 |
| SHA256 | f223a02e3c9320452de77b88485332bb0014cd384df2d631f8e6533df1e7e2d2 |
| SHA512 | fc45a148ab0fca78d87ce252d50745d4e90fb46ec3118755d955fab2ba020d76bc15a950735cf1219bbd0082e297158c3b777d5b79dc14252ddb92d650d26361 |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7f12381a-30a8-4d05-80f2-e430a158d585.jobs
| MD5 | 871f3312ece5dd1ac06382ac40357199 |
| SHA1 | cf7b9fee675865a5638690c7c786b45c267de2a1 |
| SHA256 | 3ebe6395154f3a850aa4d1da213e2e9b8defcb47e2b201ecb837b732a21e41d3 |
| SHA512 | 99068f0b15188f28a7f744f83489532796b2558a586f4a8684fa92137016384a42fcf89d8d7422752a24f41ca26658a356fee9abe3becb098dc2fd8e23ffa6fe |
/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/ca8d10d3-196a-4e4d-adbb-da2deee729e2.jobs
| MD5 | 4d4ad5954edd2b305c30887d4aa23593 |
| SHA1 | ebcab1b55e5fa86e32b7c0279271081557e03b19 |
| SHA256 | 6e98fe522b610d64ec88058b71907ce7f1502f3efdff8ff86be17dc1b66f7241 |
| SHA512 | 0b46d478c6e724d74742931e2d699a3e28607165e37a7cf47bc64a8bcbfdb613419222cf782d6897a5dff82553d2407b0100bed6035bda08cd563a3b44affd0e |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-23 21:57
Reported
2023-12-25 01:16
Platform
android-x64-arm64-20231215-en
Max time kernel
2659843s
Max time network
161s
Command Line
Signatures
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
ir.iut.kabab
Network
| Country | Destination | Domain | Proto |
| GB | 142.250.178.10:443 | udp | |
| N/A | 224.0.0.251:5353 | udp | |
| FR | 216.58.201.110:443 | udp | |
| GB | 172.217.16.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.179.232:443 | ssl.google-analytics.com | tcp |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | srv.magnetadservices.com | udp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.180.14:443 | android.apis.google.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| IR | 178.216.250.25:443 | srv.magnetadservices.com | tcp |
| US | 1.1.1.1:53 | server.magnet.ir | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | www.google.com | udp |
| FR | 216.58.201.100:443 | www.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | server.magnet.ir | udp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| US | 1.1.1.1:53 | server.magnet.ir | udp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| IR | 178.216.250.25:443 | server.magnet.ir | tcp |
| GB | 142.250.200.4:443 | tcp | |
| GB | 142.250.200.4:443 | tcp | |
| GB | 142.250.200.4:443 | tcp | |
| GB | 142.250.200.4:443 | tcp | |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
Files
/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 0f296d76c7728638486f1d1e307aa3b6 |
| SHA1 | 2dc6a440ac5575d084cfa864891c4822ca11a1fa |
| SHA256 | c1085aeedba670cd8f30069eb0958b577c1c9c2fbae6de5f137ae142002e2073 |
| SHA512 | 3dafda44d22e95aec1e49f7c0629b70e162d1f41b09839ebf281cf933441988a17ee7f42189ba3cc004cb81871d99b9b9861946051fd315ca8e49569859c76c1 |
/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db
| MD5 | 2cdf77d5c14dd3f313b60c691579a0b9 |
| SHA1 | 6a74a7a3170cabead82152871c90749afdd6f310 |
| SHA256 | 55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0 |
| SHA512 | eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c |
/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 4e1179f68ef625c1d09197662adb8c5e |
| SHA1 | b66f9d866b24618b979b21f1eb3ff2ee749eeade |
| SHA256 | c780503979c24b7fd65006ae5524e5d9f7f70613bb3680c0936cd64a5d3bd32f |
| SHA512 | e91139a67c4231eb5a72941a6585437414d221be66ad4ac084426c038de1569c3205be79ce5f4cf706f3f548d75e040918d0e075b8606e6fa73a6e0861e3a54a |
/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 6b9f0529903bcdd518e1577e9653f5c7 |
| SHA1 | 44503764d5c3e4cfc61142fb5c6969eec55ca0d4 |
| SHA256 | 8d9da03ffd12ce9f361907db7984ff796f5fa9ebc33544a5c608324b9ea1194f |
| SHA512 | d3b1d7010bb3b232202507a19e72cabd7033e4ea4cd79ce04d6648ae4d6aa535177982599d14f9332ead2d947f414ff924e11d7baedccc560009e510dc40376a |
/data/user/0/ir.iut.kabab/files/db.db
| MD5 | 123462f8178c5654ef2ec3c023770783 |
| SHA1 | 48cafa51203275f0629403c3baa9a9455faa43b2 |
| SHA256 | 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b |
| SHA512 | 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 52b8a505a8b57551903d6e3a0db76dbe |
| SHA1 | 39711f3158c74692e41aed9b69e6a84d02cf558a |
| SHA256 | 5b6d090e5a1203ca0b6df9054b1b0f73b0d153c87720d5392b1b09cb44780bb5 |
| SHA512 | 5c21885cc0f6422a7ae509bf1c74c7d82f74c4086f74f031b2ed9bddea18cb4ba1eb3483d0e125f6632de61d72c54f745642cdb068448b5a227a17f51571bc46 |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager
| MD5 | bb37fca8dc10061f716b1fe83536e7e4 |
| SHA1 | 2ac373738fc59dff9cc42525c8a54e02a03666c9 |
| SHA256 | 3801fb05b246d9b7bea989f7e181d076d16a550be1e7105881c249af1be0b1c2 |
| SHA512 | bb36b8a5f911031227a4b50da3da8eaa05fa43be07ef7613848d047486471dc04093f513a0299bee2e60c16a683e8fb4f61bb5a7ee93e182881a0a11f7043dc8 |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 74679d67ff47bf3dd7e2275a26856280 |
| SHA1 | 7849d7cd823718ef465542b3c16f39fc06065b46 |
| SHA256 | 2045a28c29668c0df7284e13a31f804e0a8806064b9a828d3a27bb146123c104 |
| SHA512 | b65a37a46d42709c8a3e86ba7d5de1e993d5889df11e74ad8752d0f5afa80af560214de6d0609f516ba6d022cc090beef1bb1917d034d1ab1d77d7a93a38cb0b |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 0a0a647bfef738a4b1bf7258c9972485 |
| SHA1 | 906c71adc608afa500a135605f645185226109af |
| SHA256 | 772d180c4222fa4635d77f2ca847f266bc4182299c2d4bda73cf3b18bb46f065 |
| SHA512 | fc5aece6f2ec9830c76e36354f9a816a69549fe191bd548a6582f6c72e959cd64d74b74add0dacbc8b813d38facba41e9b85ee6463c3d2522fc325d6ad16657b |
/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/ebba9bb1-710f-41d6-accf-cda268aa1bed.jobs
| MD5 | f56f328eea1d5c96a1b96dbbf59488df |
| SHA1 | 440c784cacff61932e2f61580b7cfdc3a4943c95 |
| SHA256 | 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918 |
| SHA512 | 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 2130ce188331b45e3d6746fb4d133d5a |
| SHA1 | df3419c0305a3a0a033c4cb66303b7568ca1925a |
| SHA256 | 44a73e698c7b0540e722e565f14e0b5329bb7eeb58e47add26d04951786f5132 |
| SHA512 | f18a7989316f3416111e95b74961ee9edbe32a9ef7bf96df446414f6648f3e636fb53e0d6df94a07c32b42330b24c0ba5dfbbde2e0db81dbcbdd3160334b5a7b |
/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7781a5cf-1f1c-445d-be22-60b90670ce21.jobs
| MD5 | ac58f99a1b179d71e8621412ad31c6a1 |
| SHA1 | b51fdad95876f5615735c2ab411031ff67d5e946 |
| SHA256 | 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb |
| SHA512 | faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 5d24eb551312a2b31fcba8c5d0449e05 |
| SHA1 | 73f1fddde5c37aa381c5be64974d67316cf6848d |
| SHA256 | 38fecea9063327757015c992a5bc7035013b0429353c52fe1cdf2b737362cbd4 |
| SHA512 | e78b0f100df32d8615dadf6fb3d7c60a0f04f9659adc1809696f5c813d096e9f4c04bccd223e0a0ca65cce4e6a9584e9ac3a9b5c72ca0f7594ab171e745825ee |
/data/user/0/ir.iut.kabab/databases/cheshdb-journal
| MD5 | 828db18f72660f24aa185a25012f55a5 |
| SHA1 | abc04c79cdee5de7050bfa8712c68bc7bb360fe9 |
| SHA256 | 93e05866d78191aa738abf3a53186dd0391015a0f2c62f7ca2cd9bea47c373bf |
| SHA512 | 14490ef15f93db19b6a6539130d766a5dce409c13fb5eaaf5a09a89063bcd2507327603598d05810f1ba28b2e9764122cbfd1e6bcc174aaf8410e12058a3146f |
/data/user/0/ir.iut.kabab/databases/cheshdb
| MD5 | 0660d3ef5f0245096a9fa0f61d6a8666 |
| SHA1 | 282222362a5a05e3153b7f6b49ef35c667b19542 |
| SHA256 | 1091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2 |
| SHA512 | 18bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7 |
/data/user/0/ir.iut.kabab/databases/cheshdb-journal
| MD5 | e920afd64e9b49018ef873958161139e |
| SHA1 | 5d6298626a63a163034bc888a95925f69ddbe015 |
| SHA256 | 2bfae7218597e91f6692af5a1b653b0e2bef912624caecf80e2c272ce07b317f |
| SHA512 | 2b21d4c6652f22c4db62d3faf82166d9a7b3cd2568a81c1ba21589a2c4bb9668ea71868544b240a6ded837e20e10099a26e314712df168f3b110d04ca48e9545 |
/data/user/0/ir.iut.kabab/databases/cheshdb-journal
| MD5 | a1c2eea45318e7c7a47aa1af5b9bbe7b |
| SHA1 | 3db56687ebbf4a486de19739ed0429fdc686b588 |
| SHA256 | f1d89e9df77b96a8fffca57d4aaacb75bc1dc346d31debad6192bc241f5bfd6a |
| SHA512 | cab46255419390504ea3be67b08e09c177bab5e9e0df176c671c5aef116eb2eec27b34ab4517647458e85ae5c7a983f452dadc21395db16d9b1d9bfd1fdb4731 |
/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal
| MD5 | 8c233aa292c461032ddf6d13505ed1fa |
| SHA1 | 11a9b8a0f69659a21a608632ff3573a8728d5313 |
| SHA256 | ae7258f7a361d2793f18229657a23e3c8a29804cd3b2c16bfed8d1c9af64048b |
| SHA512 | d9239f6cd70a4deb041ec209cad66952fb26dd224266e9e4eab0635220049f89de918f871e5a80dbf5bf6a5403e52172fb02cedce14c6066da9562e53749eb81 |
/data/user/0/ir.iut.kabab/databases/cheshdb-journal
| MD5 | 35ead3d7951904b0f64d0b61dd6da997 |
| SHA1 | c5d337ab91db2cb033f914639cbe9e706c3b18c1 |
| SHA256 | 82c5251351cf83a19ea9724498a237b0da7db5be305a3bdaea729cade4864d14 |
| SHA512 | 2beace749712026c3364d12a1e6d9831ee923b4948294e29d085fb220d1c9353602ad66051588ceda3afedb73b281d8b9a5d35f33c3bc31debe06fec4ec01e2f |
/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | 60bb6a79dd2e393a272008fc0257beef |
| SHA1 | 441d3c3963117181d0cd44ba4c91b0659aae2211 |
| SHA256 | 0f28bd6fa8e3f6838b80c6d2e01174165187021642c63aeb745771f4465eff65 |
| SHA512 | 5a75c5b00517135a69e1a20e1db27f33e79ce78cc0b8fe7cf72734827816c8130644dc17ad22468d0c8ed2d75f24427d3c11bf7337edcc7ef441b27b73f8171e |
/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | 58b5451ce7c1ab0bf38d57649e06f019 |
| SHA1 | e052489bd81d295ccbe1c166bf3f194ed29cd38d |
| SHA256 | 87397296ee3906529c8d9bce578568397d1d9d5dc324dfb9871befecb2d8e891 |
| SHA512 | ff2fb44827b1d96aa3089217fd043ab953cdd5d80c75f1589e8f46bcff394c35c60f9dcc463966e47eb15c5b907cd47014b94e08a5093e821fcf5caa2ddbc846 |
/data/user/0/ir.iut.kabab/no_backup/com.google.InstanceId.properties
| MD5 | 17d342b0424328d1877979a364f24c5d |
| SHA1 | 026d73fbc57b616cfb5aa083664da9d0f5851194 |
| SHA256 | 38eaeef1f17612429a3d13c806c450be1b7ef95484936b75a6ba883974e4d441 |
| SHA512 | c47b7b7be9418839e3fd5c2ac23ed48cc2660eec1ef45d2a004418ff87c01a76a692c69a0d11f65f689f5a0aaf60f1da0c54136276efc9b6fde3cb66209e8409 |
/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal
| MD5 | b9105f0067197ac3800b1c6926109ea1 |
| SHA1 | 775c7029f4eae48397c2c6cc7721de536e945dbb |
| SHA256 | 6d6c556aa9669f3093820d4cfcde0468bec47c79f84b13c7bd1778fe3613c4ab |
| SHA512 | 94797c02702bddf487d1c95885b531405b470e0762d64745712c37509babc98d59779732e8175f5b78d5c0562c5723a96be905f8a71523199fc785e83d18de00 |
/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal
| MD5 | 93be56d32062aaaf0df4e27f7268a312 |
| SHA1 | 56db16ba3c2086c0bc0f5ef4305661a41373775d |
| SHA256 | 01c0e690f032927a9b07c527b1eb9180267fc59b1e0ced6cbb4f9cc5b36ba263 |
| SHA512 | db8d69133e723f2f86f4e324bef0c37ed80321ab520ea469ff125ccd76300bee4a168d839507986bbed1f9114d10b2b01ee223da86a346f3a700bd0ab1d563c1 |
/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/550ee897-fd62-4685-afc9-08fe03560253.jobs
| MD5 | 4110a38d8bea575491ea6781e21608b8 |
| SHA1 | 18d6762691ebbe1b42940748aa94b9cfba9f2072 |
| SHA256 | c536fad1bd792b17646541c59e13c4546e863cc4ab0e64d1619f75184f8c42a1 |
| SHA512 | 3a742a3052d256b1813f436e47b9321444c2b4220fc06918a0f3edcb6a29aaa835a26186615c8c68689bf3802e183f7a80873faa3bd695c9f806fe5be4e63f2b |
/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/336256e3-f565-4066-943b-b02a25aafde0.jobs
| MD5 | a84ae1c005320fed95998ddc7802b30b |
| SHA1 | 04182eb1ab643236926f0b256d3b5c19a403c5b7 |
| SHA256 | a00ed631d0ceee8da847735a6a26024911409dc7eb2bf58dc05f3bfefd49e048 |
| SHA512 | 2f19af3721a33ed5e25090f7482a5845725452d770f47ba9cdf8c5cc37ca6a96d51637448094bf9c37379aaefc10e4d2ff095d70e573334c1fc150639399db00 |