Malware Analysis Report

2025-01-19 06:47

Sample ID 231223-qsmw4aebc8
Target 21640fe4c247b9c9d88f7dbe4a726f6baad6afd4800014ff518c473d45bc3563
SHA256 21640fe4c247b9c9d88f7dbe4a726f6baad6afd4800014ff518c473d45bc3563
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

21640fe4c247b9c9d88f7dbe4a726f6baad6afd4800014ff518c473d45bc3563

Threat Level: Known bad

The file 21640fe4c247b9c9d88f7dbe4a726f6baad6afd4800014ff518c473d45bc3563 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests cell location

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-23 13:31

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-23 13:31

Reported

2023-12-23 14:55

Platform

android-x64-arm64-20231215-en

Max time kernel

2536106s

Max time network

165s

Command Line

ir.akhtar.koofte

Signatures

N/A

Processes

ir.akhtar.koofte

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
FR 216.58.201.110:443 udp
GB 142.250.187.202:443 tcp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 ca.pushe.ir udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
BE 64.233.184.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
GB 142.250.200.36:443 www.google.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 ip.pushe.co udp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
FR 216.58.204.72:443 ssl.google-analytics.com tcp

Files

/data/user/0/ir.akhtar.koofte/files/unsent_requests

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 14f69adb8e4bdac8b81fd12f2d4a50fc
SHA1 7ca5080ad8ba8a7329dc04576f57888c3ada119c
SHA256 eedd1a738bddee380c1e59b7c83dd1ec337a6bad53b5dd6f607e8aa933b1b403
SHA512 1d67669c57cbdc8dc054c70ca96f005e6422daea40e21415e42ebe8cb66e0189a5d8ae7b057777c94156fa5e6c009f648431fa2bfe50cec5cbd0bb15da826099

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 47080e3bfcf2db9b8620f2faf6c5857a
SHA1 6f63c1851255e0fa99567f047382074b086d38bc
SHA256 dc4f8a73f49d2a6b41ff425fd08b85c1eba5280c438a1a1ff9832e91dfa56cbb
SHA512 e757043d82798926a5ddd716457accf6616894ad1ad79ec832293a1f662910b663239f899bf05a5c8d90fed5bcb093c5529e5bc842fe9003c1d5902f9ed84473

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 056e0fd87285a902d0dbbd3dbd3ca76b
SHA1 4b0dc4cd1e6bf7d18cb2be17aee3cf52def71c44
SHA256 e185be19c5ec539bcbf2886adafad5048d708d6a9ee1eedbb0685a690bdd6974
SHA512 e8082acbf5f75ec4266fbfee5ce8c9118d6aa0cc2fedce8f1635b57093e7a759c74c8938c67a04d255662de0637fee6b327ebc10a93d0585fca0951d9519aef2

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 77ef06d043f275db4e1725ba4f0d9085
SHA1 ebcef96eac60f09f31925f4192c1c2b83ae3819c
SHA256 991eba0be89fe06d952e1be7424c0aea4a2d2baa9f62d29b64d08c11d216a713
SHA512 add37f20d15ad8879650710eaeb32852995a12b638a0a72477a0076b5331d5ee7542de67711cfbb6d358bfc9038dd2847c906ac29c96d317e952b04050bcafe7

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 31e42edadf5cf274328b031c9b56ca9b
SHA1 1f66ca6787520863b01047156aa89983c63b8b49
SHA256 c48ff91942af774b4b4d410aa030555ed90958ff6c9b009ad074dd203f92fb32
SHA512 9dda9637edfdda8eb84c1551f8f87637f401fd595d320e974a2aa0a4d198b93bf413d74e0238f4c24e6c00b46d229538c78f877714312ce3398b646f96db78d7

/data/user/0/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 ea4a15dad7d8f0f3a0594431749a6ea9
SHA1 c56071620c115cc9f9bdba7924f3caa511facd33
SHA256 feb542efb09073ee0a1a73a28b3d43328a0bce7ed5f94acead17c1783a8cf6ea
SHA512 32f2ba0b6c2ed341e04fdc272547d7f19ff902d2362bd109aa3fd531487cd5582763870361d0b44bde473bec2df9091f037b2d5590873ba5908704c842155bbe

/data/user/0/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 da1bf430bc1745958278d1e031c3e898
SHA1 77fdec12aadf8bc0c33d52709e748cc4e784c646
SHA256 579e017b1aee50516401fe6247e358989816a16e28c5fd7408fd55a9a5aa0bec
SHA512 e92010f3050f9accd4e51b74ad2804bb7d474e24f59cf2ff1d6bbb02113e86bbec909dfa6f2e33e296916a19556dbe5d6815b92784e875b6533843bf005cf553

/data/user/0/ir.akhtar.koofte/databases/__pushe_base_lib_db

MD5 2cdf77d5c14dd3f313b60c691579a0b9
SHA1 6a74a7a3170cabead82152871c90749afdd6f310
SHA256 55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0
SHA512 eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c

/data/user/0/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 63a6e4ea683cca82f76ddeaed0249f18
SHA1 2a2aa40ccf6d526158b124639c0316a7e4e8410b
SHA256 4f42a86ce0d2356040eb60a65ddc3b8432cefa8fb5a37605560ea2e665f02bb5
SHA512 9e8553d74b78edc2285fbfba733b0a3c9b398a6673708a1bdae00201c208bba24814ba68ec9b51e305bcec24e3ede8f351a6648283011ce5ca73e00cf11e8b90

/data/user/0/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 deea2473621e6e26f9dfc24cc007ca5f
SHA1 da0da33774ac781a466b3270be223aee6becd874
SHA256 e935a3d111b335c0c820745003b1423c9943c892bc32e02fd56012a3a08432c5
SHA512 5afa09f751c17c09927ebffa80a35f97235944eb1c39bb1ef8306f7c328e836bcd93cba071b700f996592b1c851e47494fd927dcb27a8424fc53f625d7d2172e

/data/user/0/ir.akhtar.koofte/files/4_5942895236148625435.db

MD5 f7394110c27c021fa686c2a57e9a05dc
SHA1 74460f0d234031fb1dd2e0077530d0b4c90dcdaa
SHA256 2361097bd254d9b79c19b58a04f4f455417d9c58f346e3a2656abff147d2e263
SHA512 e4da031137b14e345f1162bbc5dd419302d49baf79abe810fae57d87736c2cb691c4cf99c2d033ca3828672ab9f6ce975101c8c3052fd2ad58ebea0498fc9097

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-23 13:31

Reported

2023-12-26 16:13

Platform

android-x86-arm-20231215-en

Max time kernel

2800167s

Max time network

130s

Command Line

ir.akhtar.koofte

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

ir.akhtar.koofte

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
BE 74.125.206.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
FR 216.58.201.100:443 tcp
GB 142.250.178.4:443 www.google.com tcp
US 1.1.1.1:53 bayan313.ir udp
US 1.1.1.1:53 www.google.com udp
GB 172.217.169.4:443 www.google.com tcp
US 1.1.1.1:53 kjfftktsgqmb udp
US 1.1.1.1:53 awjiwqzi udp
US 1.1.1.1:53 qioxeccisrsy udp
US 1.1.1.1:53 ip.pushe.co udp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp

Files

/data/data/ir.akhtar.koofte/files/unsent_requests

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 adf43558f1d723fb9d9b08a054430d42
SHA1 929808526541a9466305bca85c6526809270d5b9
SHA256 7ce4172dbc33da61ac990a231e18635cec32c6d90732a04e86bfa59dc4599ac9
SHA512 1a819dd7839d08f10e8456512a982a2be5e2a403e133482d8fe20e91468be8f4cfc69ff555c32c0885cce2f8cb09515faad7ff3d53b63704dc55bc8b1bb8727b

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 978fdf85b8448e3a7c9015e51477eb49
SHA1 793bb88398dc9457935a4416638d5ed3974baf19
SHA256 8f72919eebbe45ed6d33b7b763d7e45d76a880128aee9aa5c29d28ab79689a92
SHA512 852b2d3e2607c96625e9bcd454c702ccec6a0f07aba3410976d6400ecd2d48ccc92d93c8ce7fcc87a622d04357bd6805a996f11d339ca7fc3eab99c0e991fe38

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 dd86a0c3fb8fa1e4411285241088f6ff
SHA1 6ff2c5f63602859827c5e520fcaa579d3bf6c10e
SHA256 0c59c19b0890cb77e91cd220a39935094186ae4f3d521f634fcaf6b1e5c32a11
SHA512 300f31866094e91cda6cbe0fa03634fc86f8f3d2249f8a3a569776abb1a2d8c6948fafc8542c4bd5169ce1c8808a9f74c55dd043f18e1aceec876b89fbc955cb

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 1eaa738f37a71814a9e1d3f599f7c0ef
SHA1 ee5c845b400f50c102ab6f862aca9600dd8417cd
SHA256 17e0339b3d426d0c0c67d04622e38ab416463b737fa2e4b91c743050a7fe7299
SHA512 22bd8f8c7f792b73f915bf71e225a9f868dda25b742597f9b92f12ca64fe5b862d9bddac634ed1de79bb40bdfea9c16147c435ccad74f37a16a8ccba17f1098b

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 bb5be9dad3086f32dc9062d99177ea73
SHA1 c95c0e0ddc3a97479b458f80a28cb3301378d722
SHA256 ad661f99e6be6fe97368c0a9370ee066086ae0ab5ba0312232a144410ecc622b
SHA512 308cf4489d49b7cb4a5c50342d0da74e72871c369359a1651adb2b85030b88e56e11405145eea6ceb6201fc934e272aad3da7c3907c6af2f20391bdb8bd28b66

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 fbeb27d466a2b349cf871f84290bd7a2
SHA1 f49c08c1894ca2580a101dec8cd67fb9be84ed51
SHA256 082b36d1222a4efdc44c9aa333159c06905e7259a4143000970a919091bed784
SHA512 746137633cbaa967ba46ab3988171383c36cf33e15dc53ff402f9eaa1c77ae0abe8ddcd7dd42b0c3d0bfe8de487a272a9938f4f7e026492249eeedda60839981

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-wal

MD5 36a49dafc693a94055179f9df5856ec9
SHA1 5c037eadf3d343a20614a33438ff410a9f96bdc7
SHA256 0ffa05a2efd4a66996cafd8eb850052b94cf46d576a4e9ca565b5ee5cde1128c
SHA512 784b23446301d23bc3619f1c7a612ff3da4596985fbd0757fb0a4621ab3fdb0cd51f07344f58189f23ce1319af88cfff7d4463d5b67b988117ad576e7ebf46df

/data/data/ir.akhtar.koofte/files/4_5942895236148625435.db

MD5 f7394110c27c021fa686c2a57e9a05dc
SHA1 74460f0d234031fb1dd2e0077530d0b4c90dcdaa
SHA256 2361097bd254d9b79c19b58a04f4f455417d9c58f346e3a2656abff147d2e263
SHA512 e4da031137b14e345f1162bbc5dd419302d49baf79abe810fae57d87736c2cb691c4cf99c2d033ca3828672ab9f6ce975101c8c3052fd2ad58ebea0498fc9097

/data/data/ir.akhtar.koofte/files/4_5942895236148625435.db-journal

MD5 ca80c57a8dca2ed5b1daaca27ddc3fc6
SHA1 29d6981329e92a49bfceab570b6dbbf75911d2d4
SHA256 2d9dfec8d57d7ba252f93d78078854d5a20fb25942374f617810263563ac5ab7
SHA512 604186af3f5d43d4cd5070208caa676b8a97e73f3a38c2b111f6b3a5032a764d88a7b8d16d511143010a81f6466d2f41133828c628be377b177a6e1367804f55

/data/data/ir.akhtar.koofte/files/4_5942895236148625435.db

MD5 8e64063e6593dee0d3de308f535768fc
SHA1 04e29cca6d24a0b0cf9ec19756434aad02ad7b88
SHA256 c500ead67b4fd16fd08abfb7103f8d07c8b6766dd35e60265ebd92b3cca29e51
SHA512 daf51eacc092d164c7098aa5f061acff8fc81708b02ee33c49aaac16bdc134c6fe61e6391237829e2b279bf78b2ebdf06cf80d721df27907eca0cd6353c58b29

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/1.jpg

MD5 27114c7d4b217d72096f7f2555db8d25
SHA1 6b6c4973fa2c0159604e0bf8b31a6fd28d1e21e1
SHA256 a1cb9e3b6364611d85ea20167156ab6012bded8a470288700f014e5a91ab93e8
SHA512 6c31b332b09fb7478476127eaebf5ffd969e77f15778f4dd0d0347a312703ee7946de853291b9e61368558c7b71b43fcdc8d52e5635107d94a077e64ba2c4ab7

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/2.jpg

MD5 c480d9caf4b68e5d2572ea816f73e662
SHA1 40417f90840a0d91d503462cf07cecf570bfee9e
SHA256 49f25fbd59e112fdc578fcffb429a86cd9602eba3de430dcf4798015f8fd7e1b
SHA512 1ca97fb715ebdd9d0456fa4610e38cdba3482f6c3f5faee2d977bdec7b599b54f50ca4c1c89f1e623f5ceb30e87f94e995a104658d8a52ca898aa33cc1abbbb7

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/3.jpg

MD5 0be9d7a531370376f319e1aa90ef505d
SHA1 7ac11337064e15afd223adce6dfd71850cf9c798
SHA256 1f4099746242364e4a643ca2693c4a79e61d0e5e83a46b88d49f8acc540cc607
SHA512 66158fab25ab9884a58dd4d808ff6ebbb79423c1371db3b70f19699db0d3b30f81ee1bbcddb84a1c5e28cee9bf3da0c3e558658b26bee4f1df5d3b70ba8c4b64

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/4.jpg

MD5 05d9fa4e0e054483cd0ead83a81993ee
SHA1 f546d50f406a40d83c36067c28b8b65eae673326
SHA256 69ff40a3f744d7a4e95ce27e980e7c8392e5a98c4f6e147880e0be7c60f46ea2
SHA512 e3d80e8ed98ae44c4d571afa170110bb7406afa2348c66bada1ec9e3f43031e99cb13c0f8c218167c5e1879ae3cf938eb9bf523f0d9b037506e371b62c65b5ea

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/5.jpg

MD5 27d53211184abf4df5d1d8ecc2720432
SHA1 67d784b55d919bd39c492874345815a3609927d6
SHA256 781eb930f88c5b810a20d92c25409a4e3b0fdbc7b41dfae1f2a3336aaa0660f7
SHA512 b84c427a9497a3c6d153e36be68f9477dcdaf3edd6cee4a284b3366de743824c6654e254d82c3141f20c037651043cf2fc6e2291cda62166f813830d747ef360

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/6.jpg

MD5 c926e33a4f04aef619a2110c00443f7b
SHA1 7f20c1bece427483d77471b48d1dd875342aeb63
SHA256 89aba1d85b1f369540ddfb01d950614b2993d10d068eec653656fa5e84527a62
SHA512 529ba31362c137a3d391a3ba15c10b42c362d40c794f28d6af67a98df6c10383378168c25e2a071e4ba9712f5e69106331c885b387b2e40e2e3ea13ae86c1418

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/7.jpg

MD5 1171843e77157ad717a59d4d0efbe0e2
SHA1 758205ba89f30a8dd386c7e0ea0debc835638358
SHA256 631482dc637ffb189f2df9be1874377ad8a5a1b2060f4ddd7755f1721b660d47
SHA512 8f3c80184ceae382e90e54b82501999ab3581d1c7c807584e66cc42068abf1f196913464ceda8c65a0634cde4766dd7c00328c63ad43bce6742ab3dd5f7f6159

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/8.jpg

MD5 5c22c500428ed6be923ccc1ace7a93b9
SHA1 0dec36bc539b2e4b8c79ede81565f64b51fcc847
SHA256 dd6107125fbb689c6ca679180a608f483748a1af3245f509374896a630d53896
SHA512 368923187c7b04f2095b66cd85e900302f1496c98bd1ae991fd923fa94821c77da126506a48fb10bb7437d8ad154b08f40072d69d19ba436ccc5b22579a76314

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/9.jpg

MD5 82ee788ea94d0475fe0d665c0a86dbb6
SHA1 48234ab9db3b5904134a8ffdfafc655b7b429bb8
SHA256 5b4fe24f0bd034de4b5b0e468452a9d2e82585bd0939d03fe66156d7366bfd10
SHA512 9c37bd1509f40266cf5e79ef5a1f913d460a838fd153182cb77a6243cb70632346c376377aea854ba46e737e0c554a7ffc1da984dfcec8819dd542a4697be805

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/10.jpg

MD5 cb9a602bc9ebd2b8c19de1db8084fc7a
SHA1 c77c76f0f7d1272e0446bf5e5b9a652a755f8631
SHA256 fabafa949a208a79543a8d0a783d75ea2ea787ec12e99c16b92e13f2eb23d9ab
SHA512 739614676dd0d4cd3bf63d98be751325e1351d0a460b67c918e9255ec4c34fee83cdc7bebdc1876bf7f92ca130e225636dbbdbf77df87f8d607f14b455ea3b0d

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/11.jpg

MD5 4b7b83f291bd0ec57700c662e35fee67
SHA1 7bacb9163384c75e8406673ddb33d164ad133f7c
SHA256 8155e66bcc0a84f4343613cf386c7e5340e846cbaf07ef14c68805671b62bb6c
SHA512 4af29f1a6c2bf17d2cfb3c6f7612eb747dbe24f2d64e3587adda6eb9079b690294bf8341b54885e7bc1e41c76f2d02e3c4a30e043261350091117a03ab8be93a

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/12.jpg

MD5 1e69ab27377d686af9c1241659e3898e
SHA1 22ef4579327993ffcd58429c955ba86f69a8e3c6
SHA256 939ddbf1d4ee70a63be095fa7e894b7d660fed9f31b1915b59c5cc64811afc0c
SHA512 921a4457f65780fbf088050cde2b59cc95aa68cb2da7abb2b2a21a215a15006aed80e69df2ca64393391d66b5c40e77cc3cdbdc83791a8d40bdd4b10f55f1cf9

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/13.jpg

MD5 05004257569759bf8dc4e5a5e3fe8b1a
SHA1 d6b4fae4921e1342472036c153f85b07e74ffa25
SHA256 12e8fe80d266e7d52828d7e8fe4e1638f79d6323457cfb2f7de451a2afe1dafe
SHA512 99cfe7c8380854c60fda7850ef7d54d718d4c247830dcb685b28765617c949b139cfb45cd2f3d35fe5420041be34718cbb2de9c0bdad4222d1fb4e439cbe9b21

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/14.jpg

MD5 49d0d6acaabddf065a62f99e123df68c
SHA1 5e3a31f63aefe076ba84c3e0d084f93155b93b4a
SHA256 2cd231e5f3c1180775e67c7d0d93c24975d87a44678d154b425246f776fe6cdd
SHA512 8fd385e6d1c2a13a94b8537669a989c7d1b100373f076d13c1f21ebd56b6e3a6366b2cedcf1bf416cfbecc50ba617c59feb0a6119019366cc19789cc21eaa83e

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/15.jpg

MD5 b28ea2b82c230fb88a149a1b506e375c
SHA1 6beeff121bd0d4426e5090b7121fd479ce2b352c
SHA256 c32db3f78dd6c953d84a070f9b0a1f5a27443d6610fb3f634d2dcc14986e511a
SHA512 243ad2918e6f5b07e960b4061c348e7616fca2ae56048e3f2fcf29d51ec1a123a6d15a5343887661da4e21bf248ca204712739aec98493ee08bc55d206a9aa8b

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/16.jpg

MD5 c53565e1b6e3f5c39d3cbf353cf84cd0
SHA1 00679cdd289ab803772513cb4b162be67a539ff8
SHA256 62029078bf21cba9f1b39ad6a599600c9d68961a8bbc8e8e0bf1fd29c60dd457
SHA512 91ae371ddc136d708ab0537e0a95d4aedc8fa2585c3e947a7968eba257ba5291c88a55346d3a6aedde5d72884df3f7adf95a2a5a10819c1d06b9968f83c78c0b

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/17.jpg

MD5 a105c24a675b446d80ae9ca27ebef287
SHA1 5f2150b63d47d260e392b2649bb19f7769937bb0
SHA256 d2b7b26d8b16f6820a893f10492d6f19fb664f050a75352d7bfb03fde6289f73
SHA512 40591e4d528a748138613b1b1f805119fb2163983d796d3c172c0948df1e9932624e7de3c55a51fa7c2687820f8bc4e15d1c840b9491a0b12875db6d4001e2b0

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/18.jpg

MD5 f697e88dea2bdc34dc7dd2168734c32c
SHA1 35624050888d97902bfb7fff2f73d1925e266117
SHA256 4012c85d2425ea32476a12064a562698bdc1c9966218bc148391f9e24fdd454d
SHA512 1885b402a1975cb4e4699547fcc2370c32df42230110f2f2e222c494231695e4cdd5891a0d52c3b5fb654f2ba291c23e172627c88e32a775e835196c90af33b1

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/19.jpg

MD5 5a2a781747da2d6b5e1709d2f6322fe2
SHA1 45867bbfad7248b2ec0df6f8416b3a12cada4fb8
SHA256 713cecb5d31fb92f787249ca1b52b876b90142083e0eb68a8bad139196b4af99
SHA512 43413bf683591fab63a49d9e2b3e6913fe0a6153e16d50e2b87733ad3c105aa96bafa5d7f6e32c117c722a07312ed649751d63ead791ba1e52041e48384a7e04

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/20.jpg

MD5 4ff61d665e7fcf5a39797f3fb07b6940
SHA1 58271c6c23963f801cf4e01d804614c6ebaaf18e
SHA256 6355a287c37f78dc8032d3feb85e29c6414379acfcc9d3f78570a40ff71c38a7
SHA512 858e41e95e47ceeed415cb6479ad7da27e11b8537e0e6b3d79bbd62ab3c27f551ef99ab301f9dadbf96a9a631ab96c2fbf0614d44295bec6fa5fc40308ff3784

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/21.jpg

MD5 31d6efadbeb30e0022b9612977336275
SHA1 38716ccd03e47d068bab53b495ed616232ac6df5
SHA256 771414bbd0582c0cde67d7a63e42d5d951f242fd864bf8824be73beba6df621a
SHA512 c77366d6f0054ccb8167105dea3fcf3de5cd53ef374bff7330c2eb4028c4080aee1a3e2d1f02694e2984946095e0df7a05d600415bf2ff4761249073c80ddd6f

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/22.jpg

MD5 1e3cc7d90321f28e0cd12f81bf215347
SHA1 6b78ddfebfd205e29b41ef451edd117a62ba792b
SHA256 0a6fc7f2f64c0829dd26741387f569290c2ffb07e4f1c44579ed45e963e638a4
SHA512 240cc12270ec9fef083b9a6d0abc6e36364626d4b576c7a0f8b394462dea299c459c613e5654a57cb3ed77e40cdeafb996859c815383b80cf37c79a7a07759ae

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/23.jpg

MD5 f410ea03299d1f6498e0c83ad35c9112
SHA1 669c7ae88d110c28e4701c2d04285d5ee93d0581
SHA256 a0d1e64dda7e5ec0b9990f3f8a23cd32c10e3fb1374222a85a43240d4a554a23
SHA512 fc3785527530329cdc6b004efb3db0a082692cc6caeb884ae4dadaca8e09883ad902c29d675b71152bbf33aa1a185bda5839a9374e00c97a13a57ab9afc2ce86

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/24.jpg

MD5 3ee5171cd3b128d96d9110a1cef36f84
SHA1 7b83585aef2eec7e305bed72c37435d59b55df6b
SHA256 65c0a8d81bd03685f4f7b539164dd99572617748b02810f9088dd7965c379817
SHA512 e510024a6c4d95c180e3c29071dbf8f720b118287e3b74a3ced353a09c70246a91d5f7d7a0b17d3c9b365d15e6f4c93bb8032970ec31141c1fa5727999ab1153

/storage/emulated/0/Android/data/ir.akhtar.koofte/files/Ashpazi-Rejimi/25.jpg

MD5 8b1bcbbd54fa0675608599b72fd33b11
SHA1 dfcfd8db131b51d57946e9c1cc6becdf35092537
SHA256 8cb0f109bbab1ef0ca544db7f133308b618cd58dec434028abfb6edf4229c357
SHA512 cb69fe64efa9197d718b093c91c89f486d3ec59095cfc86ea678e365ccd0c2996ab87ac4380058b4271fc6f9fb8b7e8d0478ccf6cfa1b55deebbcf032138c5f2

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 8f58ab22ea21582a0d7a3b84b4bdcdfa
SHA1 c9c57db41f1602302c952d73f53b23ea6804e3b6
SHA256 c0a3cd641f63fb7d3376c41a08357aa3d86df8f99d9740547f215c8d17a1bb5a
SHA512 60886e390643f766eadd4d7027a1b2ab7ee491c98144fe55132ec5c74db859c777026e8e2dcd83a917aec9ae81511f5aafea5d5bc5beb024b60ae272c3446ed2

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 3550969a1f859806e27b54e61a76b052
SHA1 89bb9c610f1e88f9ece4e57977ccc639d81af7af
SHA256 4840a02ac4ed99ed8140544d36f9df97c6b47518dd989da87091dc1a7311f193
SHA512 bfbffc7297bb689457a9ae70a705d5642097bf27339af1f50ece2b484e9aef3ba68aa714ed42445ab079ea435eaa46a48e94f9a0dd05875d7ef03c8498ecb0ef

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 a5e87c9cb897af075915f0c88eccabba
SHA1 f9aba0129bf1838a48c4a623afbf81a70ee0cad3
SHA256 97af79288061d06b7bc6b20299d1d0d68d981b007678624462c0f657b7085e53
SHA512 466e5746b3fb2e93d6553faff9e11f53d57c4efbe45dbd69a1da24c49589a35f9bb92357d1c38f81862e6de7ba952537687c8d6336e2c2896189f8530bc1ce2e

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 4c01aff5ad497fa09b2515fe17327525
SHA1 4520dd03db45be13bded5bf1f1e940ab533db487
SHA256 fb141c548c1779e89f892222f55a85da16bdd202100dd28990cb362bba2843d0
SHA512 44127f6e9f0b65be4c598cee828a5b78fdb38d5bee81963e551d53a7a817660aaa2377a41bb8fb86d1780a57096a6736e82f6b171bd9b477cd8b10e460894455

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 9ef232901063bf4b30b7f41bab486cb9
SHA1 8846edd8685e78ef8e1d1eef1704740452517038
SHA256 c56545f8f3103ecc734c7a99391c07da6585369fc7cdad8bc6c55d0631931248
SHA512 ec85763a57100a5c4361e028a686dba00167810b0352e437447e9451f632c963681a3ad7ccb5ad26742bbb3293640b0c70991f14f590cd329986ff3ee47689e2

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 ac05717e7654ddf5599962603a6d1897
SHA1 495b279ccf3dbc3b3c61d0fa77e5b0eb89ba1cc0
SHA256 927947c360c0a334edea259a79a29e353364dbdfdefc0194e75a63110162d0a5
SHA512 af875a0eb6683d8709e380e6dbf785a0e2dbfe95cf4cda15b3dbc8c2724c2ce131fc98d08ecb03321404e40966edd5ef348b56914bc5d4938d266eec9ed2d934

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-wal

MD5 2d96ed6731cb6378a95490d13dd509a5
SHA1 df82179c3795dea4e5a6ea872386b6415eac51eb
SHA256 4f839d28a5153041c2b1997e483f8a6f4b6ca3e8f058e1cd394f6e3758b0ce9b
SHA512 ef4eaa0817670dbc1f3165e94fc1bc39b3c59ec4d5dc48e79382dad5e77dfbe2df8addeed580ce7dec070307457f08f420fab6bf2287e88219e7ca2c073bef5d

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 4bb66c40799ffd5f5824e82418c8f808
SHA1 7a0ac29de1e543d653f72cc5c6e491fba0779860
SHA256 e2658948f0ccf1a9aebad550a26b17c3345a6566fcb050d1997295a519699d66
SHA512 d9257bc7fa6150729b62b0e920eb837b95e8f983e4df07ecdffda5f449096aac19e44361de2bbcd060b5191546849b473b0dd040616e8a57e8770aef8553c581

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-23 13:31

Reported

2023-12-23 14:55

Platform

android-x64-20231215-en

Max time kernel

2536245s

Max time network

146s

Command Line

ir.akhtar.koofte

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

ir.akhtar.koofte

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.213.14:443 android.apis.google.com tcp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
BE 64.233.167.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.228:443 www.google.com tcp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 514418ad06be453a831ceda9d95f1cf5.s.adad.ir udp
US 1.1.1.1:53 ip.pushe.co udp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 162.243.147.245:80 ip.pushe.co tcp
US 1.1.1.1:53 bayan313.ir udp
US 162.243.147.245:80 ip.pushe.co tcp
FR 216.58.201.100:443 tcp
FR 216.58.201.100:443 tcp
GB 216.58.212.228:443 www.google.com tcp
GB 172.217.169.46:443 tcp
GB 142.250.200.2:443 tcp

Files

/data/data/ir.akhtar.koofte/files/unsent_requests

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 f8b34ec94af1a71adfc08ebc979a022c
SHA1 94d6443463597cde64dac85d3f2ec1e6cc1f5ef2
SHA256 845ffba107ba18a840ea3945d99ef0c0df4a3248301baf5f2058c6ecbd2ce14e
SHA512 09963b13617a0be93133ce4767afa10095a721cf2a7067d06c4e5b4811f1e8e75dc285890fef50152b44c0f66f4929e49a59a53704772060f14300592fce3892

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 00e829076f54c72b50b63fd6de296a03
SHA1 fbeb1b8be863931f98a7c29224a03b89f9616ab2
SHA256 c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df
SHA512 1c6b0bfe980050072927f8d407ca86353098d03502f7194f141d43c045a3f35103261811281f023262f4823a4fd70659d6802b76e126e991120dc14cdf74bbcc

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 2bf6ee91a11fc3c9409ceb6fab61de9b
SHA1 77003f5b7183b3951daaf7e0d650e4643c7e2c27
SHA256 aa5bf1c40740e36052d7fe88eb9a6152fce8dee5f26efe58e097258a017d5b45
SHA512 1278f94cc35e14ad1dac9d17ce231d018b4066ee27476c0a9895c4f7858af3136bea0aa3ae39e9cc1466677231a38ada079e2be6bbf51941f53048322bc5fc76

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 8e9336234644faf6389fd9de0e7e8635
SHA1 88005cd990afb4d100bed9bb8598bc1b8355ce38
SHA256 740675b6b1673e300f74dd5145dcc7644fe6acbc6193e817a165da2e6deb9daf
SHA512 30b7c962631d62be634119123fa96efbb60b266bdf5f8e7d98cb9446d1b437b2e0433a1df0b4382291031f0557763f70182858c32c426dfaacf88ab6f37a4c97

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 0e3b0e768f99f4522be0d9a09fddde10
SHA1 d73f892e19eea579beea5e10059aa7a0bd8b2b80
SHA256 c5064940e33d1f26d9844468f9dbccbef5d44ff080a0c2de43081a74012e5e3b
SHA512 74ce47de13f39d97b1bf2993d85099e809770afddec69b40ced4cc00d6b90f979a369104ea527cc379a467529d4545d95ae8fe74b8e3c09c380b4497be97abc2

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 782fa60d195b09b7f82c749e764cde23
SHA1 0cbd85f5408f07e93078c794f8ff0ea42c3bb36f
SHA256 0275c9e28bd8b1aef6006f3954e4e25d03b5c0cf3be1ed6438d1bf43b2aad05d
SHA512 70f7059ff6af8d7cd20d739a9ea55b39f0757832b64a0fae6bd14a3f12903dbd07e67756968a9d1c97467e07e30807318b9a25a259e20304a71575048b6a8638

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 2fc0d8b0ffa4655f34d98f0ebf6fcded
SHA1 4f56ac9c13c89a0152eb63e20e1d0b2f96f54431
SHA256 015e10062161595a2082f1a7126413618f9ec2a102bc08602c35f5832e5e5b09
SHA512 038c0b7779c65b0493425429bd6cea554147d01ba3a691904b9d6ecaa6c0287570a0dcd29407c26c6227ce5d22968bd242401b2e70c38b7bf850a4ec0b11a509

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db

MD5 163b0e3f017becbc89b9d7f330b78f09
SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 826c00786d60b8c0e65c9f7113e53b10
SHA1 4b268ad8959ef3c820747954f69d1c3275825d86
SHA256 7deeab61ad2791246887b14fffa54cdb8155e1792aeb62d4e4e87890102551e6
SHA512 bf8a6481c0b7722f9f9d7597a0ab9c5d9618d623dbc5dc1450c9816c711f890ed87259890eab4f67af24f2ff1913ffc85f47e05944985eb334ee563425e421ba

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 8833b263c1108f294a07f31a341ffc8a
SHA1 4ffff8eb396d4d468e51de713e74aa9e012789ca
SHA256 2bca982f64dac4227481f071aed8d66f05c7dc97cccde9efb4157aa221a8b78d
SHA512 40ad8b0a518a427c57eda9c94a0674a43a2b8d3f7c5c9f7f77b283f52774778bfe8e016e6e9fd3a319eca22fc26544976d48fba21c32f58df00333b58a2e4d03

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db-journal

MD5 a648921d4c148b59c5db94829873f635
SHA1 58417e4b006993725e44e1c33e28855e71cc0dab
SHA256 3cc50b3192927ca8538f7a9a30311046eb8d185c14326d9b38d8bd92eefc65b3
SHA512 2abf0c0e7d84b83f5b5a436a1dbfdb0d1124461d9ea1be13228a9081f019db043093024bc291f00b54c3054f898449ceb19b18999e0e68792b2da9976a2fb710

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 6d571d65f0a7e4a0b8e4490b5c2458e2
SHA1 7161197ecd2e1ef495b3b92b07b395277e7d06bf
SHA256 4a5214fa090f5ba07eb402af70404e1b99d6ccf35f2efbef83f0e86a3c0a5d44
SHA512 da038fe04f72079ca85fd19e36471bcb36ef7204ad53348a75401ae14d95a7e4c27f498e7e97df75db07877b528b041af1fd02b1124d308a06797d49697cf077

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 827d99380068d0aeb2cead9b5ceb8ed4
SHA1 8f687db21d0fe9595d55c7ad8f34e887ace0f326
SHA256 fabc06cda5c0d4f325ea6a886cc2b3b12903868d2d5a5e97e0dca497c276ac94
SHA512 8c38f524868a5ce043ed79e67e5933283bbdfc88dff39766c61ad825f920238cde856d460ad5edec1ddb35167e983fdb5e888c75338a82213ce64b3b3b8d02f3

/data/data/ir.akhtar.koofte/databases/evernote_jobs.db

MD5 2271b6fcf8e3eb7ebcce7b77a2bdfbfb
SHA1 570e86553f23539afac07e05817c8a276dc45c27
SHA256 3f6aa20c783041baca8e6f22c1e900cbbc83604a349f404832c902c874708c64
SHA512 f9dbf7956d6ddf46eb384a47b999a65f00ec80652365b669d742be8815fc4624bfa818bdc5192045c52b681cd174ebfa3a8b5d94aed27d017eef08895be09e35

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 2c747ba393f8cf73272e10a9da10c1da
SHA1 152083c46567520ccd5db533dc0e2a95c882ac6b
SHA256 d76a22dc4d74e07ea05abf07fb59a9a0afc06ecae78eae25c6872df0f141416e
SHA512 be33a06618760ea94e33d47459c2bde74ed4f33428a700167a08cf539d8ecff22ae90c74f37b84fdecd43473dabc7e4752eae1f5f2f14ec221bd10db56103c8b

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 8e8867ce56b3bfeb9914c8ee94145cd5
SHA1 bb315a701c3fb2b1ec79609c9b535c4d492727e0
SHA256 86f02af6c1cf4cb0a3ee20617d27ee313724cd6c1a35bfa0dd9c0f1286bc41c6
SHA512 607d5cc14160db5e34286bd7ccc6cd51eecc6a5a73990b9c53420ab3b9368755be185632fdbdbad5ddb54363743d3547d4c65155b9ce9e810118f21f4bf72edc

/data/data/ir.akhtar.koofte/databases/__pushe_base_lib_db-journal

MD5 52362212269373358722770ec953b369
SHA1 e4139a902193ba7c8db93f096a0276f131d71df8
SHA256 4cca5d396ddf397c538010fdc28df658b7db219439400032a9bbb8ca492e7467
SHA512 f5f564ced74fa2ccd0751889ebfdaa1d42f3b9bb86ddf08e48af2d4c17f372bbcb718da345fc39398e27089fc3212bdf94a7323d249ceb011e9c32ab35bae85e