Analysis Overview
SHA256
16aa0fe3b3c51cc8bfb045b6649078102a02f066a6db5dc86bcf0650bc7e4abb
Threat Level: Known bad
The file 16aa0fe3b3c51cc8bfb045b6649078102a02f066a6db5dc86bcf0650bc7e4abb was found to be: Known bad.
Malicious Activity Summary
Irata family
Irata payload
Requests cell location
Loads dropped Dex/Jar
Requests dangerous framework permissions
Acquires the wake lock
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-23 12:48
Signatures
Irata family
Irata payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Reported
0001-01-01 00:00
Command Line
Signatures
Processes
Network
Files
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-23 12:48
Reported
2023-12-27 15:49
Platform
android-x64-20231215-en
Max time kernel
2885049s
Max time network
164s
Command Line
Signatures
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/ir.ziba.khoresh/cache/1582435991586.jar | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
ir.ziba.khoresh
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.179.232:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.187.238:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | almabala.com | udp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | admob.mehranarzani.ir | udp |
| BE | 64.233.166.188:5228 | tcp | |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 216.58.213.4:443 | www.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | ip.pushe.co | udp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| GB | 216.58.213.4:443 | www.google.com | tcp |
| GB | 216.58.213.4:443 | www.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| FR | 216.58.204.78:443 | android.apis.google.com | tcp |
| FR | 216.58.201.98:443 | tcp |
Files
/data/data/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 4a4bb930d1b6e0e7d652e48745e8e657 |
| SHA1 | d830ca92cec509a18ca2d6f1c23dfb4721824bc0 |
| SHA256 | b1d17c35e638636c58ef5f5b0a05af0f3193cc15d92cd119a2da991bcf6b5ea3 |
| SHA512 | f81257d2b7cab344bd6d6d1e8e3cc001e61c1270d3cb9a0b06887ba04d1ad4e815a83787f4afe75961baea422d2dc5bb8d2d1dccbd48665e19f4d692d33a5632 |
/data/data/ir.ziba.khoresh/databases/db_default_job_manager
| MD5 | ea628e04765adaf4238a5dcdff4bbd51 |
| SHA1 | a801947619ea8c368efe9c006a324dc6339ac60b |
| SHA256 | 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4 |
| SHA512 | c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe |
/data/data/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 8238e9a60e9418eb90f9e6f79bdf22d0 |
| SHA1 | a2a2862359af298d0410c4725383fc924f7b0a23 |
| SHA256 | a2ca6b798b5d9fa94e788a3b755c68ab71a7f05e65997c1688d40a83a0bf83b3 |
| SHA512 | 5b0ea919cfe66fbc86bd13bbd05895ca5228580b93bfc54c53ba435aeceb54bf2c0643625eb7d76c810edc16bd013a65bfa4129ffe56e5baa0b0973fadb81580 |
/data/data/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | c5fec3d1525f405888150683788a28a1 |
| SHA1 | 45aeddce880c20250bf55d83fed702dce64bbfae |
| SHA256 | 5aefa90c8bcc1458b7a39b2ead99e7ad7025c3600d49c225091c1dc70a13f76e |
| SHA512 | 2a6d8f18d04d8cec1147c4fcdd71d64b34f8adb7c70b7a4d67d554b5b133b0cfc2c881cba9781983f5338c195a5d20a14c05ce20c8e19740612e5dbfc01a1391 |
/data/data/ir.ziba.khoresh/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/ac195caf-67d0-4c55-a050-23e0a5be78cc.jobs
| MD5 | f56f328eea1d5c96a1b96dbbf59488df |
| SHA1 | 440c784cacff61932e2f61580b7cfdc3a4943c95 |
| SHA256 | 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918 |
| SHA512 | 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb |
/data/data/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 142d28fd3f0d394e5bb20a3892669e64 |
| SHA1 | 66d5bfcd03decc5bd4a85fe6b32260cd86b8d81f |
| SHA256 | 74f60379361e1ed591e5fbceff8cefa776bc89e47a9e0d5b20fa9013f7cff588 |
| SHA512 | fd25cc8bb64a9e8714d910d36100899032d948e602a6e99f03d4e07714f5978a28bc7556a85fb86c7ffbf5e3943550e3a34da67c88f860653f7be6b61b96fcfd |
/data/data/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | d13aaf0c7d34b1b5cd29eb587bac9c7b |
| SHA1 | e572b81b33527c2282dff33b48722b92e6cf895c |
| SHA256 | 5f101cd19ee3500d0144e0f3b36fc11ba5083aa1314ee5e8a87e9ba0a43842b8 |
| SHA512 | b3fcee304a961c14b902ff848be623fee99de2aa1bd00c9247b1df86087fce00311b892d984b8696d8fc4f4219bb2fdffcd209480ce6379a991736182f0bc170 |
/data/data/ir.ziba.khoresh/databases/cheshdb
| MD5 | 163b0e3f017becbc89b9d7f330b78f09 |
| SHA1 | 1ef9cd8ac8655190468d0ccece0a4738634ab0f9 |
| SHA256 | cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36 |
| SHA512 | 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd |
/data/data/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | fb36bb14f9528f4dcdc1f9b258f09988 |
| SHA1 | a528a03787905f86fde2ac89263d17491ff54f2b |
| SHA256 | 1ae2ab02ba906ef059f6e7247d5480dc44cba91d379673560733be31e02367d0 |
| SHA512 | bf31051a391b584f25f483df87ad408add0c9fb98339aa24ff4d112e1002add817b5e53b8da230377b3788fbc00a3a7c82d557b9943574a1663b6133111e77c0 |
/data/data/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 783539cdd1cd59eb562ad22ecaa88650 |
| SHA1 | 560ea900233887b04df13b713854ce9d2117e7df |
| SHA256 | f1990619591ed57f09923de155f5a182aaac5bffcb97d0085cb736c6122ed0d0 |
| SHA512 | 9c993f4181289e325bb67a337e85b905ab645c325d5867e05cb428b4f379edb3dcb903fdfee794f314eb9f2059891ee47a42bd3d7035193db9619a6907b38ba5 |
/data/data/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | 516a76e14e77b6175a0fb9fa98e91044 |
| SHA1 | bcc27bb1be86e2d677cf7241bace1594b3f86c55 |
| SHA256 | 3af31d54fb2ab8f1932665b55f32a20c6aefa69624decf01ab2d219318bb6fd8 |
| SHA512 | 015c6fec8aecb9c88d58667ec5691749c7d6abd7270873031a37dc439c304a58b20e8f6d52a20dcb248a7229931a17cab692314fbaec8051b08fbd94a606bacb |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 30f546c25d80301831f1e09d15ca042a |
| SHA1 | 45ba3ff8567f91bd5ab6b5352f7696771d9fb958 |
| SHA256 | ffdcdc8b40d47b06ca1a65f4d7d72554ae715e15e9f4a08f1636a62cdcc1f0d9 |
| SHA512 | 574b016bd5e378a64a03c4297793435983da84068b59a7ec73efcfd7626dabedca4fc2ef42a2f7403d31dc75f5c355b33cf48ae931c826f12654e569da617fc8 |
/data/data/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | 38b0249a04f3a2715a0d52018d15d32a |
| SHA1 | 876b778ce57457bde0e650acfb9efed2f816db10 |
| SHA256 | 95242ef01550d2a0ef22ac522b50572b8f09153ca5941c5aa875f742b0b5495f |
| SHA512 | e8ce51c5643ea89464f7c5d72fef6e51b9d1d7b84f279b9c096a200ba9d56850933e311b52ba8f7a933d8b05fc1ce9261909e59eee2200bfa767be1d2815bb6f |
/data/data/ir.ziba.khoresh/databases/cheshdb
| MD5 | 36bc52cdaed01224988a7c16b33d699a |
| SHA1 | 83364ee3f8b4777c2c59b9590fa8fc446174e9f1 |
| SHA256 | 4962646e635ff756eed315e8933eb9cafdf94f72e21745cfddb268b9a48767b9 |
| SHA512 | 60f091d443cb5546783ec08bbd304d2df44204777c46a132e9c6890de181f86e4c1bb960e2e9f455d332e31fc301253c6d67a8afa71e02d3f4705a55f8791ecc |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | c82591114cbec9c24a88ecc506ed2762 |
| SHA1 | d57382780ef1916b23a6ed4ce4a939f62690a5df |
| SHA256 | c6d596c7d77fcaa3c1660c9e023b72dd9e28ab438666cb303855b598c7dd70e9 |
| SHA512 | 9e591725734cfb60f688028272ffa01c9b2ae67df7488b864e19029e83d8751bc07660bbad3e46cd7d5e2e9a7d2575503ee1444fc399b0b151df996b4e00cae5 |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 44ae841471dda1bba79804e680d1efc4 |
| SHA1 | b3fa8156e9d27f2fa9967c6911c340ef4727c421 |
| SHA256 | ad3c3089dd56ba436769a4cbc211bf677a4adf374dd46271eb2945553017a77b |
| SHA512 | 5d58dd595cf01da0e59009a618ae8cd1528c217b3628cb611fa2b2cf25bc43df338a356262fd99dedab1da1fcfba45a21334e5fac0c980ee98f52233046eb0df |
/data/data/ir.ziba.khoresh/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/27807b8d-b8da-4851-bfb1-98a6a84191f8.jobs
| MD5 | ca738a145a75e2472f80e791a58059b8 |
| SHA1 | 777bbf4f24ad5a6421ee2b5ae67cbe3463423271 |
| SHA256 | ea89072605ebb34df1638ac76f34ea87bd037a1cbfc92b74e0aa930c8b0efaa9 |
| SHA512 | 2823ce0d8f2b8ea00f20d90cdeaa1bb4fb32999befa03cbcee8a3694de869e9912f4f0c6f8d801ebb543914c7787fcc0bdf5809a0325b606bbb38db59c2dd6b1 |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | b4cae8f62413811ff1d4b968f0db4473 |
| SHA1 | d523db11e12b968feadaacf909df689cd465ca4c |
| SHA256 | 17b549237ad699ded8b03ece5cf5164b27e583aef836a1af51cfcadb3fdb60d9 |
| SHA512 | d8525897ce8a95e462b15eaaf3386701d8fd270dd2957545ef63894a8fe7b9b2b6f20bb0c54721278d523842dc2e984ff1cdd1a9caa4d8fb5c05edcc70bcdeb6 |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 2fe42d1cd4e43e44bd750248aef2a3c7 |
| SHA1 | 3933b2531afb3b983743f53ee43583f767cbed17 |
| SHA256 | e78652664a2e6f2629e85a74e5ca0ccab36c04b4cb21f6e4c38ea5d509473693 |
| SHA512 | 30e9898c01d3f91b8f736008108bc746540dfdb41a4ab2d92da603f27a7d7d3cd8422c50105914800698b08d2d299c106b954f05b20ab9a4b6b9be5663d484b4 |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db
| MD5 | abe9fa56c177c65db8c072e6d81fc41c |
| SHA1 | abe9e9bb6f7294324f549af4435f58578ae69f2f |
| SHA256 | 53f09b897033e2496e13f3c6e8d14ec1d1f7b273c2b4d47dacc569594fef0f8a |
| SHA512 | bb1b70eb859448050dd71822652d1976456be07c098ab41f2f75fa277cde059aff0c45629564170ee07028b85d501cc941529ab06753e5be2e710692bfa3922a |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 7abd88de09e8a016f950fe68dfbdc411 |
| SHA1 | 140492b34ee4603d677e233976184a88201f8e46 |
| SHA256 | 492af1e8b02db748724763d3573afe308c0b9c8b60246b5a9760d07d7d5c43c1 |
| SHA512 | 63fbfe2c7404ba61d403f9d96113da7c209da52f8291bd065b433690b2ff042010d9dfb2add815f64fe9f87f4621dcffcebbc9547a1924447c114ef2dcf27faa |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 88f88628d86a5aa6e4361601fc550fe5 |
| SHA1 | 902358f578cdd299979973705b13e18df6983d4a |
| SHA256 | 474ad392dab1313b523d74cb373ae669fd2f87c5bae971fef08ecedfc8cf7b9c |
| SHA512 | 36684d6f8ac6a094e6e0a02ff9c2c6025b8831b9adbc65291fe6ed4b84e8a571108016b017d0a3e352d737b336808292a3196f291b05dc6a1958a56bbf33c08e |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | e072115fc9dd46e219982674c40661c2 |
| SHA1 | 7cc26135173fd5014823662c687daefc085844cb |
| SHA256 | 3a8b32a671c525c09e4e4ad0db3b6dbe9f3e52b8453d90f4b14173f11aa2b32a |
| SHA512 | 4884309fab1f98beb101c2f5ec35564df34161451526255ef5be4b09d35301b679775cf2e59075ce958374862ec8e3cb4944fdb9d1f64a592a2b426258799545 |
/data/data/ir.ziba.khoresh/files/info.db
| MD5 | 9cf1e8662cb73ad107d651452b8d95fa |
| SHA1 | 9cccbcbab1fa56c46580a429e5e9a8b8438f5fbf |
| SHA256 | 9b9e6755f3674586b609f7008a5f002b3b9a7ad781b9c8651051e7e788d32b62 |
| SHA512 | 1c54608187664b3a36648f1c39e09702590fa83aa470ca87bf3fff6f12c295d16629685d73420f41d3571a809944a80dd3db467b1d68c91e012092b4b229f3ab |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 1bb128c68830a739e4661700a74a4e81 |
| SHA1 | 6d6f2519f7a53d6d78af4855aab3a8791e266090 |
| SHA256 | bff01c2f958a00437743b7dfe6cd9324d599c619001c8feefdcf9cebee463473 |
| SHA512 | 3dfc8be95a437c00dcf0f8431112768d5dd911ddd98a40b6652060bbed9e5d419a811185d9ea3082960abe7cff7eb7731bebc98e3fcc6cc51d6f0876e41ec2e0 |
/data/data/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 16d25bafaad6d158417c16a475df3342 |
| SHA1 | 19f5f3ca61d8e6187df7e380d2101d29617b6096 |
| SHA256 | fdf55fb5d0d0c487f44f35136c21584ba466445659653dccbf647d68b789d051 |
| SHA512 | f197c7ab1d5fbe0baa123a69dc07daa3b1f5e083993745fa190547601ef4109853f6476efc9ce00cb6d5ee60f1a204157be5081cd312b93caef3dc97574fbadd |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 6dee80c9b607af9e4ef46831bc13fb59 |
| SHA1 | dc2861f907e91daf125018589ef6497303693f99 |
| SHA256 | 1feae46ac3dedec5ea4340be1f930c63f5bfba9614898e039ef7718b9a74e59c |
| SHA512 | 2c01fbd100d2e850053d08645ac74e5dde1e4629e899ac4755123650b816ee726ab0c00b811964a82439f39f6d4932c4d0e2d7c2e45901d62d1511b932ee1416 |
/data/data/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 4d6dcdbcf41d8a0bbf358dd4bf5b10b4 |
| SHA1 | 2852f8fa085116abd463cef94edbc7cb318f36c0 |
| SHA256 | ec9af50a8bd20712e8585ae8657ff2a70adb6295ed2ebd41b3e1fa9b1b099d8a |
| SHA512 | 6bfdf05bfbbbb516e1726f730abe7d6111d84a071c7bf51ef3fb8c96927e8b894957d363d4144397bcce3275a087e4d04ec407f83aaa961646873bbb615b0621 |
/data/data/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | aa809ea09455dabbe605bd73e966dc60 |
| SHA1 | 132c8ab1c3096f5d6e3cbde0e065c2f20c2d6d56 |
| SHA256 | 268c17b1932ed0a0b7a32e94ed9d75d29508bb719bcc6a18dc0c1a50e390308d |
| SHA512 | 45920c67305015471c72fdffb629f9cf50edb6b2aabd1ed49e3687266a6e29d511ac8280e5fc157f05733f50bdb885e4557cad815a1779327cbcd54565bb05e3 |
/data/data/ir.ziba.khoresh/databases/cheshdb
| MD5 | 57532b11e13313f7515ee9e106982a7d |
| SHA1 | c7d1e4445b7b64945bdfc53efe796de39e854cac |
| SHA256 | dcf42be710e7e7df80009cfd444abfe13ed213a7acd7a7c54795032907b8b4bf |
| SHA512 | 98d4e74fa18ae9b37625fea44363ea337b59963d6e79b1e94fb71cf1ca4cda2b71143af97b1e53284d205566da7ea22e9d69995cbdcac5fcc5d03127a57d4c27 |
/data/data/ir.ziba.khoresh/databases/cheshdb
| MD5 | 7484a4028c582321b34cfe090f389092 |
| SHA1 | 962339e7ceeb76a943c350b08a98bda8f07bfa5e |
| SHA256 | eeb79fafe02866322ea3e5b4c163dec85f713514e48dd28094de9275fc0e4dbc |
| SHA512 | 54fd14788b35453f65ce8075c2710447edc59791691df74b490b0602293d664063c6312e635b8a81930e5c59f6b686159cd930fec82466303c386125b859e483 |
/data/data/ir.ziba.khoresh/cache/1582435991586.jar
| MD5 | e8e0527a01aefdb89afd2c508f131da1 |
| SHA1 | f1103e6b260c657ceb3d95f1b023af3fda8b133a |
| SHA256 | f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce |
| SHA512 | fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34 |
/data/user/0/ir.ziba.khoresh/cache/1582435991586.jar
| MD5 | fde2ee00cbd121cfab5290b078aa3ceb |
| SHA1 | e2b77d5320e155e413d040a8c20020962065b2f8 |
| SHA256 | 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685 |
| SHA512 | a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56 |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 57145d71cf9673600752b7333184aa8e |
| SHA1 | ad146543616f59f7d81a61f704242598ea5ccdd5 |
| SHA256 | 349b63a973235c4150fa482ecf63d4260a8227729a00ada50cace2b3301b239d |
| SHA512 | 7b13307be4a8ff91c58f25054380443c7bc17a275b9a4e3aa134848f76da6e3365da441631472841c1969fd985a0b1f9fd7f802dc7a7d81e0bb825040b5b944f |
/data/data/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | c90396c11b2aa778c24210379fb2c0ee |
| SHA1 | e87e8eaea495a5799e4fc4f27eaf2226fea3d30d |
| SHA256 | cffb7f7b9b0adbf369f1d0ffcbcb64fecd1504ceb30f56598a81155d551c8b36 |
| SHA512 | 91f89c26b8eac36323459a3705a1990f3d357abd13e51328be4085d2ab61e4344d4c4216fb78078714583f6840a484227af37f2390c89c9532ec7c7bbcb59746 |
/data/data/ir.ziba.khoresh/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |
Analysis: behavioral3
Detonation Overview
Submitted
2023-12-23 12:48
Reported
2023-12-27 15:49
Platform
android-x64-arm64-20231215-en
Max time kernel
2885054s
Max time network
132s
Command Line
Signatures
Requests cell location
| Description | Indicator | Process | Target |
| Framework service call | com.android.internal.telephony.ITelephony.getCellLocation | N/A | N/A |
| Framework service call | com.android.internal.telephony.ITelephony.getAllCellInfo | N/A | N/A |
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/ir.ziba.khoresh/cache/1582435991586.jar | N/A | N/A |
Acquires the wake lock
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
ir.ziba.khoresh
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.200.10:443 | udp | |
| GB | 142.250.178.10:443 | tcp | |
| GB | 142.250.178.10:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| FR | 216.58.204.72:443 | ssl.google-analytics.com | tcp |
| GB | 142.250.179.238:443 | tcp | |
| GB | 142.250.179.238:443 | tcp | |
| US | 1.1.1.1:53 | sdk.cheshmak.me | udp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 172.217.16.238:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | almabala.com | udp |
| GB | 172.217.16.238:443 | android.apis.google.com | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 1.1.1.1:53 | admob.mehranarzani.ir | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| FR | 216.58.201.100:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | ip.pushe.co | udp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| US | 162.243.147.245:80 | ip.pushe.co | tcp |
| GB | 142.250.200.4:443 | tcp | |
| GB | 142.250.200.4:443 | tcp | |
| GB | 142.250.200.4:443 | tcp | |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
| US | 199.59.243.225:443 | sdk.cheshmak.me | tcp |
Files
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | f1e947b3a8a787bb306fbf4d7d39d9ca |
| SHA1 | 7e9966ef882db3e778f8bb62b30f248a1e0e28d3 |
| SHA256 | 0ae63b0747b439906e40dee6d0348553f46a500ffd925cb611910d50b21feb36 |
| SHA512 | 1e21de18f89085640341f5cc56116977387bfdf88c50ad44aeec952e2c933dbbd273841c996715cfb45e9d72173cc2d85b8e8098769cdb003082b7822da49f5b |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager
| MD5 | f41f531c07d4141546a531ff9caffdcd |
| SHA1 | 9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5 |
| SHA256 | bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646 |
| SHA512 | e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4 |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 93fab6a354da1fc4885a31d2ec7e53f3 |
| SHA1 | add9921fd3146326a3b08dcfdbee1fb7e67a9736 |
| SHA256 | e8a3c0c27688a9beeb318d838ea0131e309a8668f9682390e7053049d0cf65ce |
| SHA512 | 7c1ac73c18a20b5d20084099e6c85b03d91997704559290e1b7c0a6f71f0f22ec799da197d0a26000bc8bc181b709576f8a60e536bccd4380b76148d141c6b4e |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 18afce7c50661634ff3616a6d0291ac6 |
| SHA1 | dfe648b9ccd9b182aa172e80acd6b12e83db3927 |
| SHA256 | a929f81a57d8e1af1600740950a1acaec7496c1542c77a69ac72f34b520b3269 |
| SHA512 | 41fab103f7ed432a53ea969f9563fb48b8cfe9d782c195ee2c805ab72fbd20425675ee170646ef6f78206b4462009180248fef7316600f59c4e044ecddb01216 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 7d88e041ac8300305e5a8aa0a2f6b1ca |
| SHA1 | 02388a56c09799306f1a2bb6b39aab0a86756fd4 |
| SHA256 | bf201deba079c62756516c69fb1c5d32334c50507b06c0e9f93d5c976d687c34 |
| SHA512 | a7eb05b625c8c4cddc019b6d1a1fbb8ad7c60c0966197dc45d0216252a89c32e55b893e89cbe5227610c8ddceb5ccc278dad7cc5662ddf6b239f7c74906907dc |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 05913625f7c2327d8877e5250e298529 |
| SHA1 | 039f9d782df21d04a6fbee4d9b9b4adf2c6a132d |
| SHA256 | 78ed6dd14a074b008ec65d908748ad9011ac24fcfbb34b4ade5c74a006b5336c |
| SHA512 | baedb52a62d98cedb5688c24cc330aa21ad37190fbfd7b89e4e708a04f3c19acc1d345eafbcce3e5a7b761ff065ada53b84a6bc33f0afa625ab04208c2ba701e |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 9770ffd7e20af7140f3a3e241224311a |
| SHA1 | ccdfbfd19f2d505220be9150d60880464f2dbf68 |
| SHA256 | fcb03b1a966d60fe084da3aba1583fefc450437b43898a02b84ec9120f380018 |
| SHA512 | b4fc0edcfac1921b6ae4136637c7fcebed29c4cd3146f57ac48bc4836b80a7496586f4814444ad454e2a96212aefd42703073b755ff04746943ff654266a572f |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 2ea2177d5f2a6b448f14b79649fed13d |
| SHA1 | 808fa160a1b5ea48b45e46e372ba3a80b19ac6d5 |
| SHA256 | 872c4c819b1d770531053c75a4894dcbc46f9f0a1db30c8eb4b2cfcd0e8051b7 |
| SHA512 | 2afacb321bcf597379923ea782b2932d74b6aa4a8b85085c0110825cb3afa6c0845bad65d87f1c0ca40c6b06e7d78550f4081d4a414c37c99c8afb2cb21a03c5 |
/data/user/0/ir.ziba.khoresh/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/90ecc73b-3d03-4c07-aa7d-f61a221ff6bd.jobs
| MD5 | f56f328eea1d5c96a1b96dbbf59488df |
| SHA1 | 440c784cacff61932e2f61580b7cfdc3a4943c95 |
| SHA256 | 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918 |
| SHA512 | 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 76674a0751d4013cc989c0c254075c5f |
| SHA1 | 5ea5d4e8b127df81bbca6dcfcef4c436cf23d79f |
| SHA256 | 2abdf61b788f85982cf113897f58226f3c7f4b749a7f4f60be8e7938936fa712 |
| SHA512 | 7d8be995004bf9057517a0d017e946b5211d74cbc24f16e27fd2a84f863c4a2a07f1f5684416c9191d3353ac6cb4cad4ade1a721071b4bf7c9cc9d9289d73a46 |
/data/user/0/ir.ziba.khoresh/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/85a4d831-aa6b-4f12-8a5b-b59242587420.jobs
| MD5 | ac58f99a1b179d71e8621412ad31c6a1 |
| SHA1 | b51fdad95876f5615735c2ab411031ff67d5e946 |
| SHA256 | 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb |
| SHA512 | faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | ff5ba96b140de066834f85c8a3fb0449 |
| SHA1 | c5a675828e805d3261010174eaa3dab9d7a8261c |
| SHA256 | d4da631b2c925a3c3f29f71a7ca745ea7e010b1ee72fbd00f12ab7e771c9185a |
| SHA512 | 5080a265b2fe6cdac1d57da4676b8b1c7707abed62b3fba9493552be14080d407bb01c4269c789cc941e227d633ea5164aa0fadf36e3e7602a66d1a9a8757cf8 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | ada4addc77f565042d1621d16ae6c909 |
| SHA1 | 51ba5e325e2a3e221477535dd5478e91773ca70c |
| SHA256 | 1525d3afb1b32b07f6d9d7fa785e0a7e2e6ee6ada7f63f9db2ca63dcd82538e3 |
| SHA512 | aede6b2f8b8d2b88438e31aba353b7ceb90e897d2859e8218ac9326358cadeed908aa9e80a301af09ec8cb5de64b750b476ac691eccf3bfe688bad56b1d01dc5 |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | afe7af23b74a49a89019655e47202bfe |
| SHA1 | 62ae0faa6d2b4c7f6e816c4d890f200f348a05fb |
| SHA256 | 62cb9640f872b6fd471cf2225696325033528c14b21af7acea90107e41c7a3f5 |
| SHA512 | aeaa4409298a4802b5e949ad0362545d18168e8efffe699dbecc8a4e57808f8d69f413742872999b9325c2e25644af8a3c3bb8fdf00de2d08c33034053d6d2d6 |
/data/user/0/ir.ziba.khoresh/databases/cheshdb
| MD5 | 171aedf968e17a2744d2585715606cb9 |
| SHA1 | bbeddeb3b89fcf809619c35b4a318a80e7d5b029 |
| SHA256 | d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e |
| SHA512 | 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | bdcb306a73d5721f54186740272b75c2 |
| SHA1 | 2df7ca411ecae56e0234cc98c14d8438461b7935 |
| SHA256 | 3998055ed6d5c4e6afadb1fdf7846819d0b8670cb34ba59752c8c315dd0c6ad3 |
| SHA512 | 1f7f0f626aaa8331ad70c8bdb06188017d864dee4c24697db413aac04bc48aae37736d23f19eaf8d2d43183ce5a8267a242c7fe8371f8d6285cdc67fb8619b83 |
/data/user/0/ir.ziba.khoresh/databases/db_default_job_manager-journal
| MD5 | 666b3270398a926f4f70695acf254d8c |
| SHA1 | 1da22cdfc15891218d3bfff87c93fdfdfea54adc |
| SHA256 | 8626f44b22e64a8690c2cd9acf08e960a2130be9934467359aea3e89d1286822 |
| SHA512 | 6cac0c44b67a2d64d40dc2722bde660bbd980e82610a55d27f567bca006dd0baa140f20c392375066f785eb126065c86ccc34402367889478b90084f6bef0443 |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | 7a9c4ce53974c89ca9cc51042a6d4636 |
| SHA1 | 3eb5b47964d05db0dabf5245723e948832c79a55 |
| SHA256 | e338339f052f4b0bff60acc3f70b24d9a11af75c124f143beacd25986596a279 |
| SHA512 | d91508b38ad9202cbb7fbf2d1925807201efff68e2dab23493ae3cfe70bc94a6232ae6b66fb6cfcb7a534d6b9e6f5b16ad1ebc688b52aaf71d11c6de836d68d1 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 0c732551aa5516a7a61b065e7cf232f0 |
| SHA1 | c580041ed4c35b23b7fa11e81cdb5a5115382294 |
| SHA256 | ededb7990bbee3f762f6730e397ae35dac3929e78a3c51f8a7bcd62a74c042e5 |
| SHA512 | a851e4bdb4e542fbfbf51c0cc968c5c42598e0189f391199e8e0fcca27be5e3b6242df9a32a15b4059059e4e05b64c2dc71d93dfcdfec0405fde9537d727ef7b |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | 8e3c18c1c3920cfac0c38a08592a4ba4 |
| SHA1 | ba9b59f8da7547cfb35ae1cc3d9ac50707e4242e |
| SHA256 | 49cd5950ffb41cbb8b0ffbf10a204de1385cee8947b9964486f3d72e6a818538 |
| SHA512 | 067aa4cb692350b8923ac860da996c9202000adbe93c9ba7ea41d50ae0a1cdfc8bf168514a6a54e0ec473dc9199f480bce1cf405b34885cd49d42568a57c5c6a |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | 9bfcf8c183ae5156d40d338d1548dec1 |
| SHA1 | a964c3832b9dd57f6a247907fdd65065baa3aebf |
| SHA256 | 9651de383eb015a6b7fe66e2912d87bfc90b79416685b8cce9cedd620ef1bd02 |
| SHA512 | ff084c8d392c8b5c1315e0237e5731b4b53391e8054a9268ee669398dc864dd0ac82028546a3d85035e405dc6464f4d17c0b8d216a2d1ea62d7c0e60b41baf9f |
/data/user/0/ir.ziba.khoresh/databases/cheshdb
| MD5 | 814816346606f6e7f8d8eed4a420d66a |
| SHA1 | ef7f859fb432b12fe7796d0ca92bcf8a21973cde |
| SHA256 | 675fa91401323238bf94d9a36c0160fef7a660d0820ca19daeaa9c160f1d4510 |
| SHA512 | 49ade848b9b08a4fc2d29139064f9c87a60930ce0871afaf04328c7c14baeff96d4928bff4e56878159df7099c64d2453032f62acf84a823416cfb62f700747b |
/data/user/0/ir.ziba.khoresh/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c9584f1a-df73-4b40-81ea-9f91b683c293.jobs
| MD5 | 27dc6d182cf62d1f3e7154da004463c7 |
| SHA1 | 51a31e124e604f552a14da076792477d325f85f7 |
| SHA256 | a244fd48f7686fca8f26d94f9952bc349bbc0ea19554d9086c51061b1fa38c45 |
| SHA512 | 49bd1cb274dc180ec18df37cc3e7ed94c3b16237222eb68a80dd297020e697b999f220f55c27edf369de635d8d940b05f088db8760052c6eda2355d5ef255294 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db-journal
| MD5 | 519a2990d8db659d2b52502e5405acaf |
| SHA1 | 1b5c58baf1d8345e6a8e35f74a543594aae74d31 |
| SHA256 | 41425ec113ea0a3f0596484dc6d2c563ac3cf27be71e7e78f287dca3d9a55fb0 |
| SHA512 | 5b75f757d5af3778350b0f91deca941995f1ccabc0de259ccb363c596fcf951e43401f897c9242ba793a9adf843cff427de141164bed2893d873140c22a2c141 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 009a2d0c0b5cf472bc350cab70d2d0b9 |
| SHA1 | 0f5eff3a9d0195fe3fe0f5185d1bca9f8f6b96d3 |
| SHA256 | 1c14e98a255e9182acbeb8b220c98704fa87195f196c75d431a8eab3de0c18a2 |
| SHA512 | c9f3f8da4c2589eeef1e36836e8b1bc450968eba8e9218c3d2be92a5d3b094342680b20cfb141951c2dc29cc2e977c95af199bda82af2c0628723283e27ce394 |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 2ba81ff1cb83364c32fff39912715503 |
| SHA1 | 7efa213a1fe60bdc08807201b81af9c9dcbb7ad9 |
| SHA256 | e3e32383b4b70f30d64d4986d85db6989083ed5a4c6118a5ea1d397285c19699 |
| SHA512 | 026c9170d3893ee5bfbe58368c5774360398af88fee777674e47eb3aec1b9fd6d5ef38fcd1ce0987cdcc63ea69d3e5435de7b3ddfb82a9f612b6b4824e4520cf |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | bdb6c28cf57edb8c19fa5a9b15ab4db5 |
| SHA1 | 7aba63f5b43e1df78e3d42cbfb32df64454210be |
| SHA256 | 9cbae180ca085a0b8bc50011d4d53bdae66bcf364e88811ff1f773f4d0dcf9a7 |
| SHA512 | 57d4783b1cb86154df044a07ef2b29e4b13ff41887b60243aac8956f45bc527f990933f4d34a15a68fa5bb30eab876f7262a1cc034d0007c9ea47e898298869b |
/data/user/0/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 79aad43f1c3b84a3a72e05f1bda8165d |
| SHA1 | e3a6774c091855e5345fdec50c84e90bd95ad8b9 |
| SHA256 | f427c482a6bb396b25777f14512c93325f162087711c69f88bcf2d7eea03bbf8 |
| SHA512 | 9fc3ea2b07870a56cde2868004eee560067242325351290ba5225be962a70d6019dfbdff44182fa7c1d8fc15e0795dec9a46fff2667d3b6dfbc8dd898bdb4147 |
/data/user/0/ir.ziba.khoresh/databases/__pushe_base_lib_db
| MD5 | 2cdf77d5c14dd3f313b60c691579a0b9 |
| SHA1 | 6a74a7a3170cabead82152871c90749afdd6f310 |
| SHA256 | 55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0 |
| SHA512 | eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c |
/data/user/0/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | bdc23eb57d62034c31901b4708f77a7a |
| SHA1 | e5ffea417a6cb23ead4362035efd3ae32b284cd0 |
| SHA256 | 5d474ec3e90c298ff9547b6edf8c41f9cf3b49cc1a7fca130150e30855fb3f7d |
| SHA512 | 5405937abc6909c19628d02a5fd76301e06b71c9da608f5615efcdd4e12bb32a1d49416138c07bf1056978afd06e941bbdf86c7f69703b30e44d0a1deb65132c |
/data/user/0/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | 05300ada2879a6a3acfe593d0bd7de8c |
| SHA1 | 8460ca861fdca988b18fcfee98b3a91224c2c2c5 |
| SHA256 | 758315c1ece73f7c22c4f651e346487922db17f6b0c7933a3e2917afcc4ff348 |
| SHA512 | c74c4024371269ba1b69ab2d58861c313e0bcf62d4f842da79be435bb929fb69ca81256d0895548d964b8baa4953c4361ebbfffbaf3c4ee6af69137506f27e89 |
/data/user/0/ir.ziba.khoresh/files/info.db
| MD5 | 9cf1e8662cb73ad107d651452b8d95fa |
| SHA1 | 9cccbcbab1fa56c46580a429e5e9a8b8438f5fbf |
| SHA256 | 9b9e6755f3674586b609f7008a5f002b3b9a7ad781b9c8651051e7e788d32b62 |
| SHA512 | 1c54608187664b3a36648f1c39e09702590fa83aa470ca87bf3fff6f12c295d16629685d73420f41d3571a809944a80dd3db467b1d68c91e012092b4b229f3ab |
/data/user/0/ir.ziba.khoresh/databases/google_app_measurement_local.db
| MD5 | 09210ca9f32ceadb4abc1c2b266fca64 |
| SHA1 | 35cf295284c52187d29b70945cf01947a9d27617 |
| SHA256 | 2d6e5d74fabc4b5e202c3c15d9eab062794599730ea42580d976b99a44a63e3a |
| SHA512 | 04fde4b09910effb2f92436f485596fe42394321be5be04d64b892481eaa3df1441a60fb67846f4be39144ce6ab9555e230f7529a898fb0ef6dd5c3ad1fc9429 |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 3f8a40d9baa8654170dd41e761ad0c2e |
| SHA1 | b9e84a9ef20e885cf7ab0889ac4ad8710537a223 |
| SHA256 | 5672fc70e93efa9755d61512ff8b10fae65b39b14163d62011bc55fbf6634c83 |
| SHA512 | d3c6e8d3c4f96912eb984d50debbb049e84bd1c01c0c022fb9fb49fb8de6bdb7eb6299bfe0e95a5ce322cbf94d71a74a2e9a6c227eac40fa3af8ac684081d689 |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 9b47490b51ab167473243c221596c8f4 |
| SHA1 | 77b11d5c09da8c744ef6f36a3be8247cfe29a8cc |
| SHA256 | df6539dda6827829805874753f3ebd63a98851b572c628a267c3ede4325432db |
| SHA512 | 0e9462ccbeef54fe8d4143e03981338d8e42ab7197dcfa3236e414c28bb393f3de47a8b385b78474fb8374daa59637045cacf6aec6ae6dc8b9d33d382cd60bfb |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | df31b1b82410ed7752fb78f1065f50a3 |
| SHA1 | 0bb4b4377de75d71940c82ad2d786a80b221f922 |
| SHA256 | 21cfb72903ea059177062727f19a3b904245519a12fe7c19b10fe1cf086c8f5d |
| SHA512 | 0cbc547eda69dcb3d06786356a361a1b84fe90659ed20a5beb77eadedc6de3d08d29e2f59e42a7f5fffceea2b4749e397a8fac235eb375e6dde8fbef988bc67f |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 4e78c44683236d0d906ad1ea19ec3d73 |
| SHA1 | 444e38cc91df2446c17f117ba857a0fbc7d89f98 |
| SHA256 | ca1118dba1687e80bbc0b45ca7ca06f3d22a424b35fc427135822cfc571bfc80 |
| SHA512 | e92f5519b0a313471687a85447edbd7ab7a73f39aa2d3656e4e100e253ace7c46e18643d41eb62cb3072ec4940704a722dc8eabfe7fdc89ab6a3c85535778892 |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 96350afc374e75d586318e3865c7788f |
| SHA1 | 98fb3b00a727ec6da36e8cdf6d1b5d68ba2571c5 |
| SHA256 | 0cfe80d19f7991ea5eb33e4506e325a3d88e88026a3db0a40f7113855114b274 |
| SHA512 | d8a9f0c84657a4a84718301d7c4882298c72e56c38635291b23a5942d4777eb0849da343cd254ff90a532b7fdb48c1ac624193aee83035f4fed3166c86a884e9 |
/data/user/0/ir.ziba.khoresh/databases/evernote_jobs.db-journal
| MD5 | 5da86246dbf87fd6dd100776f2b358f8 |
| SHA1 | 0cb28b905e9c3e2b1221da9b4fe5f89334dca529 |
| SHA256 | b0fe2e2d7e67a6f6c923e013e4336e92e751eeda28f7e7b5cc016ac268454797 |
| SHA512 | b65bb8696673a5e3c64c621fde5f1bac6d7d851335b7aad631d357d0bf0226dbed8cdbd14b2d34efafd8f493effb2e144dbec7a8dca96715a98e295ed8d5b4f4 |
/data/user/0/ir.ziba.khoresh/databases/cheshdb-journal
| MD5 | c8d68ffc917a37a159418eb7e2b6fd46 |
| SHA1 | 61caa0f0d66364027022366779e00111bf4c94a1 |
| SHA256 | 838933efbb4517e1d1dddccb7eb74119dc923d17c658e48725d25f3eaab8accd |
| SHA512 | 440a2be0faa3d67b3dfd60257f4d5049df829f3aeba4d57066bc7a16f685022d20c17f96949f25993bcc85f9c5c191d9ecfecd7a5d639603ac1f0daa4e6c0857 |
/data/user/0/ir.ziba.khoresh/databases/cheshdb
| MD5 | 6b6feafee4ac31a12fa9e024a45e6a3e |
| SHA1 | 6d0e27989d1a8a73e0662f54e4da063fdb8b1bec |
| SHA256 | 494d46face668b840ac19964d5fd076854f34408954eaa53a7b2d0d9869274dd |
| SHA512 | bb0bc769dd6d4bf5c8964463b4afd77d8c7548176916e4e46cb1a19ef679088baafc03ebddef6047c5fbd683e5f51a70c8bf843af5f6d2a2a8a0c80932076d82 |
/data/user/0/ir.ziba.khoresh/cache/1582435991586.jar
| MD5 | e8e0527a01aefdb89afd2c508f131da1 |
| SHA1 | f1103e6b260c657ceb3d95f1b023af3fda8b133a |
| SHA256 | f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce |
| SHA512 | fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34 |
/data/user/0/ir.ziba.khoresh/cache/1582435991586.jar
| MD5 | fde2ee00cbd121cfab5290b078aa3ceb |
| SHA1 | e2b77d5320e155e413d040a8c20020962065b2f8 |
| SHA256 | 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685 |
| SHA512 | a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56 |
/data/user/0/ir.ziba.khoresh/databases/__pushe_base_lib_db-journal
| MD5 | cf84ac44f66a590fd1462320053b4ec9 |
| SHA1 | 4e1e8481271f60b9d79b035e6c36c8b013ba9304 |
| SHA256 | 8db3534ff61e4513db0b60cea53ec08f3c1eec29dbd80ba2489dd3002d3a9221 |
| SHA512 | af2eb89f574a4bf33da9bc6f9b0245d8e41f9a0bacbdcb637827d1949ecce8a6fff8d6be02c3303d4bb1f79050ccb2b65977e9eb43bfebe2a7910262b84e5d61 |
/data/user/0/ir.ziba.khoresh/cache/~test.test
| MD5 | 098f6bcd4621d373cade4e832627b4f6 |
| SHA1 | a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 |
| SHA256 | 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 |
| SHA512 | ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff |