Malware Analysis Report

2025-01-19 06:48

Sample ID 231223-1tzx6ahdgl
Target 945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1
SHA256 945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1

Threat Level: Known bad

The file 945dd2ad6d7d09710ee404ed6a86ef1c92b6eb22882c028933ad43da86179bb1 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests cell location

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-23 21:57

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-23 21:57

Reported

2023-12-26 11:48

Platform

android-x86-arm-20231215-en

Max time kernel

2784212s

Max time network

130s

Command Line

ir.iut.kabab

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.iut.kabab

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 172.217.16.234:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 1.1.1.1:53 srv.magnetadservices.com udp
FR 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
BE 64.233.167.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.10:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.169.4:443 tcp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 server.magnet.ir udp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
IR 178.216.250.25:443 server.magnet.ir tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
US 1.1.1.1:53 qnoaduxc udp
US 1.1.1.1:53 qjsbfcgeeje udp
US 1.1.1.1:53 johimywoc udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp

Files

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 5a98762fa46db39921e5427cba052c03
SHA1 3528bb48f10005850b62fb539c9b226cb0f722bd
SHA256 a0dc10aca54244bdd05616102f55e5000d7e8d7b7196616790de1328bcb8ab1c
SHA512 d95e29326158ed66a13ab936bc5907624a61139665add630352898088d1c61dfaab0660e7310260fa62beed222da8c78792948d0b4dabd3a5142175edd5074a9

/data/data/ir.iut.kabab/databases/db_default_job_manager

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/ir.iut.kabab/databases/db_default_job_manager-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ir.iut.kabab/databases/db_default_job_manager-wal

MD5 89e9e01bd1d886b53d3f0bfc4e76da39
SHA1 1cb8692e12add786ac63f586fcb4cb24c5dc291d
SHA256 2b712981141c5cc897b3850b9f29f73048c2678746e9d4a860e2c6c197392553
SHA512 499696d2b690de7b900d07616002f4dd1af76d754dded82ca0ecdc68b4bbf43f9b6f498083a75aceb79e27afe5927aa7d597b415259987dd90244000cc95f31d

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/aaf348e4-6784-47e5-9d34-38bd914c7b3f.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bf72b26b-d2c3-4b39-b41d-01a3d06831a7.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 e5653d0dae735c621c651792c4c05409
SHA1 34ae43889e6bd85ddd8c024711ae8d2d86ff63d6
SHA256 7aa69a6487e2d60e3a01fd987024d2dd6d50881e0945ee1767b4edfdb8e0d986
SHA512 c65e34b6cc4b654b61cf4d0ddb936282502fc0c9f979bcc15d549d1f83e38c666dad75cdaee5bd119f01bd28c05808747826fc371761f38d1b439c5cd7ec7206

/data/data/ir.iut.kabab/databases/cheshdb

MD5 1f347cea6a53594be878e35079bdabc4
SHA1 ae24631f83d3c875dd678040baafb5e64fc6ba6e
SHA256 46cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5
SHA512 6f09f140cda839271dcc15857faa5ec7fed65afabd0ed53164744e0b15c145b4fd0ae3f6ef0ad01cdf4eb612510f7f150ea72781740a9c6d67ed1075e5e026e9

/data/data/ir.iut.kabab/databases/cheshdb-wal

MD5 f3891be7891293ca57cc4637f5d4b7e0
SHA1 3a5b473d6d60da35a2b1f07452aa9c482108dc0b
SHA256 0a2992d86a104378f2bc72ca75e53f2a3b96ce05420805e4e36333b8f218408e
SHA512 6f6e03239b82f39c30af7bdaf32d635aa1a39656392b7d9b2da6ef82d445f098d53152498750b85165abcaf76f2e72f7790ff09ea8f6cae86b281f0969bc7e9f

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 7c5b2cb46de53e495e29a7716915d408
SHA1 5652dc3486e588e5d25cb109d8b2ea908172a20b
SHA256 351662304d73d4955d95d38b1cbf95deae81e76c22ebccec3296cdee53eb854c
SHA512 f71a89be45b6e9b107c8f291c43d3eebd6eb32157e9af78c80d167d8c6c0d846758d6b1e211a08ab37eb54cb948ca8e5c1da3c119e66f96f2ad324331ac479fb

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-wal

MD5 736719910221c4c70554c47942371c89
SHA1 89067c6b674b0d0cd71b9e884726e3b882ebff4c
SHA256 a82e700d323053967dfdaadf6bc915f2eb42777e83819f461527b65a52c553fa
SHA512 d343991ecf1bba10a407608f885d83f6e228ad5fcb4fa3a1a5859f5a21d748685a180118efb7f8f695c083a71c548367744728140d570009dffa07a885bd6641

/data/data/ir.iut.kabab/files/db.db

MD5 123462f8178c5654ef2ec3c023770783
SHA1 48cafa51203275f0629403c3baa9a9455faa43b2
SHA256 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b
SHA512 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c

/data/data/ir.iut.kabab/files/db.db-journal

MD5 f2be84173f63392cd878e5b95a929b94
SHA1 07680bda1a349429d2b82268dae5908b9ea009d9
SHA256 9ac35c58be69e0aeed894934382615429b29872201c3cde748567d6bfd46eac0
SHA512 715f9457ba608531c281304db21cab841f4a86330fa06aa0b67a8a4b274e31a12e1d79afed3365970fec4643d2f0f9770fdcccb7a7c2e591e1615953a7367a5c

/data/data/ir.iut.kabab/files/db.db

MD5 78b6540f70b70131f5bb53c367b7bfb9
SHA1 4d57a60e7e0c727b796c217d827c8d1ba908dce6
SHA256 498e83055e60338fdf7388a5f90231568a5d8fc58f40ec6c93192943c051e0d9
SHA512 e32ebf71e705ff319fee462776ca286f7eb385a2017cb45c99d5cb54df92acf85e832483bf14e9830f182c20fe1930fdd9298948d1b6a2f8fb8ca4fac186a8b3

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/002cc678-f409-4b87-aaf6-d876e0d0374d.jobs

MD5 6e0eacd0727493a8b477662b11843841
SHA1 9a028b1117d5e26dbcf59772cbd82f194ddf7cd3
SHA256 c5eab4202348d1fb62c6c61af5e56e604827d37ae42466b1920ea67e8ba3b114
SHA512 16f68b044f51e5ea92af6d6e21e2c2cc31e21f8f3100029a7eaeb026376142bf5b4379d7fd75e9d44e4a2675389bcd3353ffc666578fa6d2a0282faed08e0093

/data/data/ir.iut.kabab/databases/cheshdb-wal

MD5 aa73ec98353a0c623c42f24d6138e807
SHA1 ab8adc7d05c7c7b6c955e5fa0faa04bd902b7e1b
SHA256 f40cebb1bed82aa2922cf97d11c91cf74c7a3f837e27a2329cb62d6487335356
SHA512 f4c32e0d7f4cf4e7bc3a04da1c50b6765f1ceeb80937ee20131eb557c6426df8bf0bf0d9ac6312d2ef7d0401973a496da38a55725ee7d1a0d40959b10877c0d9

/data/data/ir.iut.kabab/databases/cheshdb

MD5 58ce0035200e2f41159694080179af29
SHA1 452dae9777a629be4ab93c3c3fbc44bffa80881b
SHA256 3a1037161504a8c6c71a84f3ec0fa0545320b905edc1e8d1c223dcae36693337
SHA512 1a26bac993c4d93c3e8bc509855ce713b71a114c408f41e24570cdc646d3b94abd6b6770385ef72633e40d140940614b5ce1a0f384acc4f4d5162e5832924b0c

/data/data/ir.iut.kabab/databases/cheshdb-wal

MD5 214b15f6f82646bb9ce380ddcc2a4949
SHA1 e11d4fa2b7d75e32f261ee82d0986e2731249381
SHA256 a29ca6cd1189406b9d274667b30e61eca66a90788a990f98f41f2b5ae6f69c82
SHA512 23cf4cdf28f6bae9bc2a03bc4d379286fd4cfc58e25cd8166de1ac72adbf2195c459be4a4a055adc0bc36f58a612692e28df2069a12292f1e648556396723c89

/data/data/ir.iut.kabab/databases/cheshdb

MD5 d8dcde5bbf697ecdfd72001aa166574b
SHA1 0608b4937495fded61cf23cbcfe166c857e56dc1
SHA256 536834557af0124437f2034b9a2196bc523b5bfc670969779e7ee6fdb654e6d1
SHA512 b2b5d62a4324a93847bd901aef46f3cec4bf589d9c31cfd138c41fbfa7734fae3c948e068215a16a938244aaddd2762dcc2deba2b0f798948f2fb6d3706821a7

/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 f3c747c5521bd3a63697bc0b946d7a55
SHA1 3d82a44d5ca7d589b2f392ea21549242fcf24769
SHA256 5b21f5889eb2e263fc7fb1fc419e592f0685a8374cb4ec1eadebff125af790af
SHA512 d08042512caa8fef3c99d66ec34ec80e86f8dc5669e08b1413b9416d7eaa862d3cd259df3628fccbce7a4288bed6e764b0d07c0d1f754a544fc5aacf42d38d5e

/data/data/ir.iut.kabab/databases/evernote_jobs.db-wal

MD5 e5fdbcbfe3bcee15bdda049369c75dc2
SHA1 5526259b1ab2b33574d4872f993d1a1108854a6f
SHA256 b9af0fbbc0bdc01094d81ccc2101769082e808b5c915757043912a86bf1c2286
SHA512 935f8981fbb47f2eeb0c823a24d43643d581e25a5dc9ce23f839d83f5cfd770dfe12d63d6bdf6b4bc4dd2d6c4a3a6474d737984d4b872514b9d60a8947943c41

/data/data/ir.iut.kabab/no_backup/com.google.InstanceId.properties

MD5 0dfb4c5d83fddc123a2ed2717ab31b70
SHA1 e89f779505330065777c6106e980814c809ef729
SHA256 e82a6ec2ec5d1fd04356acb9433f469421644bb5ae64f1c23273c207fed948b4
SHA512 02905b4ca7658f37895110ca9caddf212464271813b9d047406f258aff101d45e00364e5fd9771968b1a2b4e89c6da895ea718c0d5434f7f7241edfaaf4787a2

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/513644e4-4475-4bc7-9608-3e7dd28a67ba.jobs

MD5 191b989d2bce8e2ae2efacea3eb1823f
SHA1 f3670c573258672900e6a0ba746b1713ce5a53ee
SHA256 24ad358b72e69ec2b496025ed832ab2e3a56396219ca69081e4b4f5a1b578021
SHA512 66a262c9a57f7baaef58d75d984600a295ec8370fb25596174e859d3f87dce425f3ed539cf0e3076b6ae8388874617945a3319ffe0e3b60fc8a4b8442d31bcc8

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-23 21:57

Reported

2023-12-25 01:15

Platform

android-x64-20231215-en

Max time kernel

2659825s

Max time network

143s

Command Line

ir.iut.kabab

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.iut.kabab

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 srv.magnetadservices.com udp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
US 1.1.1.1:53 server.magnet.ir udp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
GB 172.217.16.238:443 tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 142.250.200.14:443 android.apis.google.com tcp
IR 178.216.250.25:443 server.magnet.ir tcp
BE 142.250.110.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 www.google.com udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
FR 216.58.201.100:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 216.58.213.4:443 tcp
GB 216.58.213.4:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
FR 216.58.201.100:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 172.217.169.46:443 tcp
GB 172.217.16.226:443 tcp

Files

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 61899dc77aa4b9d21edcb96894d00324
SHA1 ef26024afeb1ac8ccdf6fa74359800e98af938e1
SHA256 eb0c5a23ad9d3e8cc228a089b3bfe3f2a1a3145bd83ff929b240dbf21ffbdb19
SHA512 21117c6ff55d8898dfde0f75941d78629e82af4988aa0a75a4ca18e0a18d5945f67e67cd3b72a85560e5a0a77a7f1ecfc1730cf610f6e07fbdeae7f4b28f5941

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db

MD5 b3a4f0693f6891b73d14ef5711b0a684
SHA1 6b2073686e4cf9caacd8a33093d78859bab07746
SHA256 84b8e76692c866e730f0ef528e2155aae53694eada46472e6d7838fd30d500b5
SHA512 6d82ccb627a99c6f339eeac0cae6f9e96375b84e45286a635afd7cf0971306403c6a2da945b9d8640dd34c667e7957a193916752760403bfc6ff980f744fb1af

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 72093a107d6430a70449b9bddb3ab977
SHA1 dca32a688dca657d6066c296db6649aa3bce77ff
SHA256 a5e4e816be381f03b3b584e1f3b2ddf698b3f87376310e42f3de6f0ce2ca2d62
SHA512 de0f25bf35c98ea893703e22f0c7d1010c06bed3252116965a0c459ee5e3fd3e4b01e7f07b836e228d0daed31ac61bf0e4a33f10a3a82f03072f998df0b6a232

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 0f88c266df461de2be184dc0420be9f2
SHA1 7f09886e7fde4795e78fa2535151a890b542a971
SHA256 322ba73fa745e3ffb8462855dc9f670926a39abbb8a717e593a5a50859005645
SHA512 53d2d9a166a2841c0a173af4a8d74e42756c84ec8509fb35e09eccbdacd13de236d682cbd3eeb52c760a0a783d69b9d46ab7bd536fbc1ebd4ef7db847be13b9b

/data/data/ir.iut.kabab/files/db.db

MD5 123462f8178c5654ef2ec3c023770783
SHA1 48cafa51203275f0629403c3baa9a9455faa43b2
SHA256 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b
SHA512 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 1743451777635667448519eb9f052843
SHA1 f58792da29f12d8209cc88cd3c6b43b23d325c71
SHA256 3a7e8d09e9beb692f40893d1b1da9004502943362ae90aadb589fb4b27b4c0c2
SHA512 bb09c7304eef54c25f60bd3c137a35d246f6b16b89eba44d0e51247407f25edaccdc8f7fc0804a054a11d064441aa5d342ca267005480f3d6887b9fbd90ae110

/data/data/ir.iut.kabab/databases/db_default_job_manager

MD5 9b734d570ef64e3ce8c3cea5ba470f25
SHA1 db9791f5527cb0b45a3e074ccaf20955584685f2
SHA256 0ceaf8b492bf76cf51e2bdee1f264cc0b97f7c25b74367d6ef5f707360a4e242
SHA512 6d70cdcff5d8a2ddf3cf68642e07945ffeb9a16d9a925ac99cbcaae43a381f2af49e853e7496516710c6fe1a1932c36abd9ae2ae77137eff9f784e9fbbf21627

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 e83d0dc15abe0732f752f5921a81a02d
SHA1 b55e03c6efc6a99809f914066a8028ce2cb1643e
SHA256 b180abfbcb07b53b46e050bc32a503fded0bff21291b01e181fb5e7c6552cc23
SHA512 1d1cf1958476494e4507a1c166e1528a3b002844e528381ce37f8347c3fa5d3815f5f60f1094b3667668ad1d3e481762710b03a4e28cd8527cd5ae7755ef61d4

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 ee6c7d817541c55bd00610a2a3c8d57f
SHA1 3658c31ecb1790ba1c765e29f0cc5516077a6019
SHA256 7036c0e6160fecceefb63995c89f406e0947e04e4977852320070f7c3332e8c9
SHA512 339b3ac5e3a7f60686d258f29879c38b34438b869c10f1f7c0868b52e2fd84d809a93e663a70ab5ced06d19e4218c930348d03bdd39dc3cff6fe37db483723f2

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c8a0ac0f-2d83-40f3-8275-c80c2211310c.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 7944ddcf8a7bd08a4e1fbc2200a05aa0
SHA1 948f587806e5a23b0fe19d815ca6d0c49bb72bf1
SHA256 b7d41bbf2b703d87730e3c0b8076a8a56a2a7f59ddd80e84eff783d47c157238
SHA512 c9427b99c1a37e8562aab37806e6fd662db4c9a592bc28005a6eb135b57a7c66276d7914b9c4c9eea87723a5e7bee2ceb6da8c457cc81b7d9bfc06b78827c910

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 34933c33af92d978499e566587df7965
SHA1 2bea9e6b698915f3e2e36599797b06131bf7b2c4
SHA256 ac41455f045006aeb3b675fd88ca013023d5dd4682d270f561d487d30c0e6caa
SHA512 e95b5739dd967546491eeef8c80490c277a160d84b28ffc7e4a31c660b4af4523f70985fbff1f20b6d5597d2863e0516344584a09a180b31da3dd73a47c486dd

/data/data/ir.iut.kabab/databases/cheshdb

MD5 259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA1 9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA256 4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512 dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bd2b5a4a-fe4b-4557-b0f7-801865fdeba6.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 a0aafa6e66f870fd11aa3b1ffee440ca
SHA1 887de8d8ab6955538ad4589d687ec47fb9b4f7c3
SHA256 8a29b04439663c8964082b0aad77ee08b698fe86dff597157ef198ba0818067b
SHA512 296183ccb38b1b2efaf882b826687db3361a770c43e2c228a3d445ea887c588e38e9131edac983f7fe0886c352d6416b584268ee8887cf8b2fc1e5670d975db1

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 50db16b8d069522547cc1b904a610dc7
SHA1 e26866b00f526715c7ed8afc600de632bb6720c2
SHA256 6f06934377a261581d8c53752d1df70f51442b9761ed8c2f50e97c88b50da4c5
SHA512 ee49f34feddb65d800226568b0ed9bbfae449809967f01c2f1d19f25c02192d17bd4deabde2b4a8c2662b536ba07dd8cd7fc5c83640fb0d3ce2a82c59ba5b066

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 d40f898c94247d417056670e61918285
SHA1 86fe28b97b36fdfd24e973330fa436e5e7036c64
SHA256 80ad4a03883bc82be4e46bc5e0623803001183b68ede1e41f3c75579b8d8638e
SHA512 71fec8da10d07aa9cb83af8e4b91e8e4da3118ad41f9b43f8d1c82b47f0dcbf2613a24b9520fd94986948d4b5e4d778ac458917d42823cc3ecb6d2f49375a79b

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 dbfc876dbfb11d603e0134bff31ef06d
SHA1 d2fe24fef3003ef4cf63522f65f76794626725f5
SHA256 8238dde2d590a46195d0c00a62ef3961839b18e8f0138e1ca1df63667fc638c1
SHA512 4326d5d23b490d2f581d315dbe3d30196ac5c4352ab34e40eae685a839871c917232c7d2e77d761a4f7db192a53d7c8ebb46a95defcd2223066b4e1db95a733a

/data/data/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 5ae36c1d1bde3d948311592c2f18d61a
SHA1 14d349ae5e175c93adedb75ba5de0cd9fb348f83
SHA256 ffb58e0ba864953b21f88d5648cba6fa37a1e877c14694e3d7da6fc946de4724
SHA512 cb7c3585c2f4d290bd36161a08bf76f77185acb9814eb69b4b37b0a43d0f79c8274a714c8ac62c8e71d3e6dfa789cfbf4fe8106bc23377b6ef4babba50567765

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 9f1944bd84a5e8ce36f8d30c5b72ce94
SHA1 2550f5d4ceecb931be3627b46ce4f101177dac68
SHA256 d1a9c89b086673536183967c2ec1fab5340f8b4108024fa2f140244e78dd4be1
SHA512 216683587cd8450f48b2972ecb8537d1372cc6ff832259e3706aea13be131a22459b9c2ad7f1e5aaeb8f55351bbf31794743ca8e3505eb471b00330f97bdd418

/data/data/ir.iut.kabab/databases/cheshdb-journal

MD5 e7f41655c085e5de76fdcfc95cd6cc5d
SHA1 974e85f2a8ab08fc371ec7e92e1292075a76b3dc
SHA256 a8b228f4f44e658a952afc8545d546fd42a718d3f8ec0849fb242e2a072ea0a0
SHA512 b4e7b20fdcbe08c75a67983be55ebc0e2e83645cabb450f4b27099d432f156c34e3f0a8ac7150cf55e25c24e4e688605e13bc3a3bd6f910ad463d7f03b623e6a

/data/data/ir.iut.kabab/databases/cheshdb

MD5 a5d352f94c9979abe33dc4e7407debd1
SHA1 6f22b0d71e47694c0a216ad597c46a463b0d121b
SHA256 d810896596eca11e03603a204f8ceef17c72a9258bba7ae1cb53b128b561feec
SHA512 c148887b46e74d6ac387d4455f8fbd27129ceedf35c84aaba840d529a241e143ac80524bac77870c73e0966dd5c919dd9d21f048a5641c1c8a60d5db21aa16a4

/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 7c79e84dcd24e067566234fb672db654
SHA1 b55db5c67aa0008ca875131ad9bdc4c7fc54394a
SHA256 5fc593977220ecdd14d8521742c9c4e9aef17349017b7717c5e8cea3676e0577
SHA512 6702425cc62d9200c202832260a986ecf1c4a661bbf9a9a389c8397d9dfea098dba1b85c38423e1d1b432152a850a18aeb4c3e7e07d0305ea7752095dafe9e61

/data/data/ir.iut.kabab/no_backup/com.google.InstanceId.properties

MD5 98809d639e902bf6a0a5b3537c00b543
SHA1 dd54289a392769b0ad60139d889c574e3c6275bc
SHA256 bab46ae26a4549b9b14ba08c7040ca15bd659cf42e7b9b98ba4e6ccec7d2a601
SHA512 37ba3a58e7902dbafc94b64e78ca16a88c06698d9ba7d0d78388674856f7bbb7d394d685ff73f591d378cc2f4ec252adf8f9c864039663b55d6cae62a0290a28

/data/data/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 c1c0ac87b2345c176990cecfe89d07eb
SHA1 626946121193e745751ec234c682c57c579d8e8a
SHA256 6cfbfbeb4e1d46af3812672339d77fccf18c447a24f2ef45f7c1eda0e3a5dcc0
SHA512 a32cf2e9ce4ff92fa9863ba533cd1ff62da573f3101c81c804aaafb31364c572a33bb6b8155a8dbd10fed0259d3e9a9db94e0d7cb087df3f81a746b74024a4ed

/data/data/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 ab74914500f356a4112a6cbf783ee3eb
SHA1 d02685c13b0d98aeefd34e8e7407502afdb374b9
SHA256 f223a02e3c9320452de77b88485332bb0014cd384df2d631f8e6533df1e7e2d2
SHA512 fc45a148ab0fca78d87ce252d50745d4e90fb46ec3118755d955fab2ba020d76bc15a950735cf1219bbd0082e297158c3b777d5b79dc14252ddb92d650d26361

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7f12381a-30a8-4d05-80f2-e430a158d585.jobs

MD5 871f3312ece5dd1ac06382ac40357199
SHA1 cf7b9fee675865a5638690c7c786b45c267de2a1
SHA256 3ebe6395154f3a850aa4d1da213e2e9b8defcb47e2b201ecb837b732a21e41d3
SHA512 99068f0b15188f28a7f744f83489532796b2558a586f4a8684fa92137016384a42fcf89d8d7422752a24f41ca26658a356fee9abe3becb098dc2fd8e23ffa6fe

/data/data/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/ca8d10d3-196a-4e4d-adbb-da2deee729e2.jobs

MD5 4d4ad5954edd2b305c30887d4aa23593
SHA1 ebcab1b55e5fa86e32b7c0279271081557e03b19
SHA256 6e98fe522b610d64ec88058b71907ce7f1502f3efdff8ff86be17dc1b66f7241
SHA512 0b46d478c6e724d74742931e2d699a3e28607165e37a7cf47bc64a8bcbfdb613419222cf782d6897a5dff82553d2407b0100bed6035bda08cd563a3b44affd0e

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-23 21:57

Reported

2023-12-25 01:16

Platform

android-x64-arm64-20231215-en

Max time kernel

2659843s

Max time network

161s

Command Line

ir.iut.kabab

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.iut.kabab

Network

Country Destination Domain Proto
GB 142.250.178.10:443 udp
N/A 224.0.0.251:5353 udp
FR 216.58.201.110:443 udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 srv.magnetadservices.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
IR 178.216.250.25:443 srv.magnetadservices.com tcp
US 1.1.1.1:53 server.magnet.ir udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 www.google.com udp
FR 216.58.201.100:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 server.magnet.ir udp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
US 1.1.1.1:53 server.magnet.ir udp
IR 178.216.250.25:443 server.magnet.ir tcp
IR 178.216.250.25:443 server.magnet.ir tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
IR 178.216.250.25:443 server.magnet.ir tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp

Files

/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 0f296d76c7728638486f1d1e307aa3b6
SHA1 2dc6a440ac5575d084cfa864891c4822ca11a1fa
SHA256 c1085aeedba670cd8f30069eb0958b577c1c9c2fbae6de5f137ae142002e2073
SHA512 3dafda44d22e95aec1e49f7c0629b70e162d1f41b09839ebf281cf933441988a17ee7f42189ba3cc004cb81871d99b9b9861946051fd315ca8e49569859c76c1

/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db

MD5 2cdf77d5c14dd3f313b60c691579a0b9
SHA1 6a74a7a3170cabead82152871c90749afdd6f310
SHA256 55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0
SHA512 eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c

/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 4e1179f68ef625c1d09197662adb8c5e
SHA1 b66f9d866b24618b979b21f1eb3ff2ee749eeade
SHA256 c780503979c24b7fd65006ae5524e5d9f7f70613bb3680c0936cd64a5d3bd32f
SHA512 e91139a67c4231eb5a72941a6585437414d221be66ad4ac084426c038de1569c3205be79ce5f4cf706f3f548d75e040918d0e075b8606e6fa73a6e0861e3a54a

/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 6b9f0529903bcdd518e1577e9653f5c7
SHA1 44503764d5c3e4cfc61142fb5c6969eec55ca0d4
SHA256 8d9da03ffd12ce9f361907db7984ff796f5fa9ebc33544a5c608324b9ea1194f
SHA512 d3b1d7010bb3b232202507a19e72cabd7033e4ea4cd79ce04d6648ae4d6aa535177982599d14f9332ead2d947f414ff924e11d7baedccc560009e510dc40376a

/data/user/0/ir.iut.kabab/files/db.db

MD5 123462f8178c5654ef2ec3c023770783
SHA1 48cafa51203275f0629403c3baa9a9455faa43b2
SHA256 06493a80a9b4f9e6e1cca1b5c4c95ebdbf5cfa27a3c71a89041f1688e6db5c7b
SHA512 8c7b190eed34d8c6bdd0e21c8ad748a8381c1e19718e05e3169f3fab9ecea0bc54a8bfa25eb4a849f9da96f6ba406c70b2a2b3b698050110d201313f649e382c

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 52b8a505a8b57551903d6e3a0db76dbe
SHA1 39711f3158c74692e41aed9b69e6a84d02cf558a
SHA256 5b6d090e5a1203ca0b6df9054b1b0f73b0d153c87720d5392b1b09cb44780bb5
SHA512 5c21885cc0f6422a7ae509bf1c74c7d82f74c4086f74f031b2ed9bddea18cb4ba1eb3483d0e125f6632de61d72c54f745642cdb068448b5a227a17f51571bc46

/data/user/0/ir.iut.kabab/databases/db_default_job_manager

MD5 bb37fca8dc10061f716b1fe83536e7e4
SHA1 2ac373738fc59dff9cc42525c8a54e02a03666c9
SHA256 3801fb05b246d9b7bea989f7e181d076d16a550be1e7105881c249af1be0b1c2
SHA512 bb36b8a5f911031227a4b50da3da8eaa05fa43be07ef7613848d047486471dc04093f513a0299bee2e60c16a683e8fb4f61bb5a7ee93e182881a0a11f7043dc8

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 74679d67ff47bf3dd7e2275a26856280
SHA1 7849d7cd823718ef465542b3c16f39fc06065b46
SHA256 2045a28c29668c0df7284e13a31f804e0a8806064b9a828d3a27bb146123c104
SHA512 b65a37a46d42709c8a3e86ba7d5de1e993d5889df11e74ad8752d0f5afa80af560214de6d0609f516ba6d022cc090beef1bb1917d034d1ab1d77d7a93a38cb0b

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 0a0a647bfef738a4b1bf7258c9972485
SHA1 906c71adc608afa500a135605f645185226109af
SHA256 772d180c4222fa4635d77f2ca847f266bc4182299c2d4bda73cf3b18bb46f065
SHA512 fc5aece6f2ec9830c76e36354f9a816a69549fe191bd548a6582f6c72e959cd64d74b74add0dacbc8b813d38facba41e9b85ee6463c3d2522fc325d6ad16657b

/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/ebba9bb1-710f-41d6-accf-cda268aa1bed.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 2130ce188331b45e3d6746fb4d133d5a
SHA1 df3419c0305a3a0a033c4cb66303b7568ca1925a
SHA256 44a73e698c7b0540e722e565f14e0b5329bb7eeb58e47add26d04951786f5132
SHA512 f18a7989316f3416111e95b74961ee9edbe32a9ef7bf96df446414f6648f3e636fb53e0d6df94a07c32b42330b24c0ba5dfbbde2e0db81dbcbdd3160334b5a7b

/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7781a5cf-1f1c-445d-be22-60b90670ce21.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 5d24eb551312a2b31fcba8c5d0449e05
SHA1 73f1fddde5c37aa381c5be64974d67316cf6848d
SHA256 38fecea9063327757015c992a5bc7035013b0429353c52fe1cdf2b737362cbd4
SHA512 e78b0f100df32d8615dadf6fb3d7c60a0f04f9659adc1809696f5c813d096e9f4c04bccd223e0a0ca65cce4e6a9584e9ac3a9b5c72ca0f7594ab171e745825ee

/data/user/0/ir.iut.kabab/databases/cheshdb-journal

MD5 828db18f72660f24aa185a25012f55a5
SHA1 abc04c79cdee5de7050bfa8712c68bc7bb360fe9
SHA256 93e05866d78191aa738abf3a53186dd0391015a0f2c62f7ca2cd9bea47c373bf
SHA512 14490ef15f93db19b6a6539130d766a5dce409c13fb5eaaf5a09a89063bcd2507327603598d05810f1ba28b2e9764122cbfd1e6bcc174aaf8410e12058a3146f

/data/user/0/ir.iut.kabab/databases/cheshdb

MD5 0660d3ef5f0245096a9fa0f61d6a8666
SHA1 282222362a5a05e3153b7f6b49ef35c667b19542
SHA256 1091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA512 18bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7

/data/user/0/ir.iut.kabab/databases/cheshdb-journal

MD5 e920afd64e9b49018ef873958161139e
SHA1 5d6298626a63a163034bc888a95925f69ddbe015
SHA256 2bfae7218597e91f6692af5a1b653b0e2bef912624caecf80e2c272ce07b317f
SHA512 2b21d4c6652f22c4db62d3faf82166d9a7b3cd2568a81c1ba21589a2c4bb9668ea71868544b240a6ded837e20e10099a26e314712df168f3b110d04ca48e9545

/data/user/0/ir.iut.kabab/databases/cheshdb-journal

MD5 a1c2eea45318e7c7a47aa1af5b9bbe7b
SHA1 3db56687ebbf4a486de19739ed0429fdc686b588
SHA256 f1d89e9df77b96a8fffca57d4aaacb75bc1dc346d31debad6192bc241f5bfd6a
SHA512 cab46255419390504ea3be67b08e09c177bab5e9e0df176c671c5aef116eb2eec27b34ab4517647458e85ae5c7a983f452dadc21395db16d9b1d9bfd1fdb4731

/data/user/0/ir.iut.kabab/databases/db_default_job_manager-journal

MD5 8c233aa292c461032ddf6d13505ed1fa
SHA1 11a9b8a0f69659a21a608632ff3573a8728d5313
SHA256 ae7258f7a361d2793f18229657a23e3c8a29804cd3b2c16bfed8d1c9af64048b
SHA512 d9239f6cd70a4deb041ec209cad66952fb26dd224266e9e4eab0635220049f89de918f871e5a80dbf5bf6a5403e52172fb02cedce14c6066da9562e53749eb81

/data/user/0/ir.iut.kabab/databases/cheshdb-journal

MD5 35ead3d7951904b0f64d0b61dd6da997
SHA1 c5d337ab91db2cb033f914639cbe9e706c3b18c1
SHA256 82c5251351cf83a19ea9724498a237b0da7db5be305a3bdaea729cade4864d14
SHA512 2beace749712026c3364d12a1e6d9831ee923b4948294e29d085fb220d1c9353602ad66051588ceda3afedb73b281d8b9a5d35f33c3bc31debe06fec4ec01e2f

/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 60bb6a79dd2e393a272008fc0257beef
SHA1 441d3c3963117181d0cd44ba4c91b0659aae2211
SHA256 0f28bd6fa8e3f6838b80c6d2e01174165187021642c63aeb745771f4465eff65
SHA512 5a75c5b00517135a69e1a20e1db27f33e79ce78cc0b8fe7cf72734827816c8130644dc17ad22468d0c8ed2d75f24427d3c11bf7337edcc7ef441b27b73f8171e

/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 58b5451ce7c1ab0bf38d57649e06f019
SHA1 e052489bd81d295ccbe1c166bf3f194ed29cd38d
SHA256 87397296ee3906529c8d9bce578568397d1d9d5dc324dfb9871befecb2d8e891
SHA512 ff2fb44827b1d96aa3089217fd043ab953cdd5d80c75f1589e8f46bcff394c35c60f9dcc463966e47eb15c5b907cd47014b94e08a5093e821fcf5caa2ddbc846

/data/user/0/ir.iut.kabab/no_backup/com.google.InstanceId.properties

MD5 17d342b0424328d1877979a364f24c5d
SHA1 026d73fbc57b616cfb5aa083664da9d0f5851194
SHA256 38eaeef1f17612429a3d13c806c450be1b7ef95484936b75a6ba883974e4d441
SHA512 c47b7b7be9418839e3fd5c2ac23ed48cc2660eec1ef45d2a004418ff87c01a76a692c69a0d11f65f689f5a0aaf60f1da0c54136276efc9b6fde3cb66209e8409

/data/user/0/ir.iut.kabab/databases/evernote_jobs.db-journal

MD5 b9105f0067197ac3800b1c6926109ea1
SHA1 775c7029f4eae48397c2c6cc7721de536e945dbb
SHA256 6d6c556aa9669f3093820d4cfcde0468bec47c79f84b13c7bd1778fe3613c4ab
SHA512 94797c02702bddf487d1c95885b531405b470e0762d64745712c37509babc98d59779732e8175f5b78d5c0562c5723a96be905f8a71523199fc785e83d18de00

/data/user/0/ir.iut.kabab/databases/__pushe_base_lib_db-journal

MD5 93be56d32062aaaf0df4e27f7268a312
SHA1 56db16ba3c2086c0bc0f5ef4305661a41373775d
SHA256 01c0e690f032927a9b07c527b1eb9180267fc59b1e0ced6cbb4f9cc5b36ba263
SHA512 db8d69133e723f2f86f4e324bef0c37ed80321ab520ea469ff125ccd76300bee4a168d839507986bbed1f9114d10b2b01ee223da86a346f3a700bd0ab1d563c1

/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/550ee897-fd62-4685-afc9-08fe03560253.jobs

MD5 4110a38d8bea575491ea6781e21608b8
SHA1 18d6762691ebbe1b42940748aa94b9cfba9f2072
SHA256 c536fad1bd792b17646541c59e13c4546e863cc4ab0e64d1619f75184f8c42a1
SHA512 3a742a3052d256b1813f436e47b9321444c2b4220fc06918a0f3edcb6a29aaa835a26186615c8c68689bf3802e183f7a80873faa3bd695c9f806fe5be4e63f2b

/data/user/0/ir.iut.kabab/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/336256e3-f565-4066-943b-b02a25aafde0.jobs

MD5 a84ae1c005320fed95998ddc7802b30b
SHA1 04182eb1ab643236926f0b256d3b5c19a403c5b7
SHA256 a00ed631d0ceee8da847735a6a26024911409dc7eb2bf58dc05f3bfefd49e048
SHA512 2f19af3721a33ed5e25090f7482a5845725452d770f47ba9cdf8c5cc37ca6a96d51637448094bf9c37379aaefc10e4d2ff095d70e573334c1fc150639399db00