Malware Analysis Report

2025-01-19 06:35

Sample ID 231223-qyhjkacabk
Target 2343758772ace6a2fac7b7dafe3eea6a6ebb20654a7ba0ae938602dcd67594a8
SHA256 2343758772ace6a2fac7b7dafe3eea6a6ebb20654a7ba0ae938602dcd67594a8
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

2343758772ace6a2fac7b7dafe3eea6a6ebb20654a7ba0ae938602dcd67594a8

Threat Level: Known bad

The file 2343758772ace6a2fac7b7dafe3eea6a6ebb20654a7ba0ae938602dcd67594a8 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Requests cell location

Checks Android system properties for emulator presence.

Loads dropped Dex/Jar

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-23 13:40

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-23 13:40

Reported

2023-12-26 19:33

Platform

android-x86-arm-20231215-en

Max time kernel

2812160s

Max time network

158s

Command Line

forat.group.mokhtalef

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Checks Android system properties for emulator presence.

Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/forat.group.mokhtalef/cache/1582435991586.jar N/A N/A
N/A /data/user/0/forat.group.mokhtalef/cache/1582435991586.jar N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

forat.group.mokhtalef

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar --output-vdex-fd=84 --oat-fd=85 --oat-location=/data/user/0/forat.group.mokhtalef/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
GB 142.250.200.14:443 android.apis.google.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
BE 64.233.184.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
FR 216.58.204.68:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.228:443 www.google.com tcp
US 1.1.1.1:53 xlwpuimcnhutuk udp
US 1.1.1.1:53 kmsmofhvgiopbxc udp
US 1.1.1.1:53 ygfyikscomsejs udp

Files

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 2e5fa3c6caa8dafd016c9ed36cd74339
SHA1 40227741968e2b074d19009c64ac85cdb21ca218
SHA256 fd4d11d8e01c4e0003b5e6cb70501b695c6ca17de04e3564e1c1432d5f40ac61
SHA512 643c34301a9fd67dac1cfb578e25cb22052934d86abded5adf2094ad58cfb280a3652ae0ec19c4f838e40773cace89b52229715ad02e6b98778eea6cbda6d8fd

/data/data/forat.group.mokhtalef/databases/db_default_job_manager

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-wal

MD5 e16041a857b6375352c65b9c1ffe4fac
SHA1 0b4d4b1b18c29448d4e92572841d4e314081741d
SHA256 5a36a703b66009042a52043c6ab39e231fd89a22b3b6df9e7ebfc0c1fa16a5f7
SHA512 2678317bfff43062defc48ac387ac782c7d0cc69a2189169e0bccf63b2edd460e92959c86cbf1bcee1c9770d5f3de1cf6fac3074bdfb90696d461b894fab6608

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/efa67dfe-f00e-4ca1-a893-9074139d9e68.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/a7bd88a5-a179-471a-8913-e73d426d3d07.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 a33d73d0e446656c0cf15b0d5a9c1150
SHA1 433c866a959a504764133b84faeb6ccff19be9df
SHA256 f30f3c700d5d1483ce906e56d24639411cda9aabdd00fe3e8f37e273fc573676
SHA512 e410a557d7514a6c4e0289a680ff59539e234b2ffae77ec5aaadf3282260620df84552f1b80c7f3239bc33c22b584b99d35c4632bbe9423c6d1346c4d5a958ea

/data/data/forat.group.mokhtalef/databases/cheshdb

MD5 1f347cea6a53594be878e35079bdabc4
SHA1 ae24631f83d3c875dd678040baafb5e64fc6ba6e
SHA256 46cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5
SHA512 6f09f140cda839271dcc15857faa5ec7fed65afabd0ed53164744e0b15c145b4fd0ae3f6ef0ad01cdf4eb612510f7f150ea72781740a9c6d67ed1075e5e026e9

/data/data/forat.group.mokhtalef/databases/cheshdb-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/forat.group.mokhtalef/databases/cheshdb-wal

MD5 40e9f9ddbeaba8d983784ddcb94b7ac2
SHA1 e397bfd474f10cc2849ebb7678c6cd943646175d
SHA256 f1b73aab6a6d3da206786fdb95f2fb8d13611fd7e6979a5c7ad6036126e12020
SHA512 302d648106276243959c9e506650d2e17767730ac912773593e241664b36896cc1d4a6eec6047220cd86c805558701f19109ee38ffda198360e1497a8240ae2a

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c011c004-64cd-4ca0-a27c-4bc3945cb919.jobs

MD5 b27deae4e3971713049ebc97c55af0a9
SHA1 7087d203ff3afbddecbe59ccaa588af3ef6ed5c5
SHA256 bd1e32b142d95b25555bdea3d278681358f4b61a7d3d4846d1d13555d3e13161
SHA512 8a3d0ba21aa6e86dda92d70dc9acb5663064b441700a523daa3afb9408d07a59c4616fe0a23e3b871e2034188c9f7f36f3bdcb6ac7c9d1088a59ee7956158981

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 b9d97e5a7277d17507640024b10cd8eb
SHA1 30e16869e253ec21756149c214e3288d6143e516
SHA256 d20df494386c18d7023026650ce1bab1d445b51304b291d82337b538206b20d3
SHA512 023ecc45595caafb57d643cda5b60e8289724814b38b1a055a703f9cf7946d6793a412d148b003fa5965b63133cd4bf7075ed75db2726405c3d140209897c24a

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-wal

MD5 7019f636e8042d2d78ba4d09127e60d4
SHA1 659a568453ab6d878350505b27288b10a19ffdad
SHA256 09afd8da1f7c94bc5848d048ed618013f5bcba8eaf8db1ff59975c06cbe61ade
SHA512 80a0e9fe6acb15455d21201a5aee1c089bed46bd12bd909ef19ce5b3b9134727016160abd26b7b27eeff1959e25f17921f8a2a6b24d9ade51fd70e81ce8bd2aa

/data/data/forat.group.mokhtalef/files/db.db

MD5 8f19db0fb40e27f7481a426d221f4790
SHA1 2d6f9ad84e2a60e7a598da02a6824b8d22aae641
SHA256 b085588ae1a0994d09765a496ec94cd3f79317c780cbbcb12338c18e9d8136f7
SHA512 56ee64f3b32d077f8a7f0e9f3dee72c59e992df621ba403621945a5904d8cfa86dab72479b807426b1357966c7b230bddc34bd61d1c53b9b96cb39262c5bac3d

/data/data/forat.group.mokhtalef/files/db.db-journal

MD5 ff8d533d0f9aed09246ef49c56d37ad7
SHA1 aa6bdad0306d05320303767b60107f99e94f19b7
SHA256 b06d0a0306da105b64969bbbb11458680fb479b9e39e310796ee6b0be6165317
SHA512 e81477d388e4768a7f519e5c2e4be5009b72d52f5abbb1b097af4e3d8d04c489e5949097aca3eb8c3335edb73f509c43c76aa3575861e92f9e603c5fafb23bb9

/data/data/forat.group.mokhtalef/files/db.db

MD5 48554cdf9490a788f131dfcc5243a1da
SHA1 dd23899fa757932a7f3856ea1b94c5c5ee382db7
SHA256 af9c2c8649f8d547972f1fdf8e58c174bb1a2b9a8df466987aa8f88f83687fdb
SHA512 5ae62dcb69043d7580c5cc625475321a011850ea99c69db291849a1c4903fb41494b0bdaffbb9f3ab6e371b0dcd9989f46bfb71add8660c39bf002a0f10342f5

/data/data/forat.group.mokhtalef/databases/cheshdb-wal

MD5 d195d8899aa301f80bd4816b9ea8c488
SHA1 7b48254cf03602202fdd0d54b90e5acca458661f
SHA256 71d7b7c1819a60303d52ebc190a5b634e3826995119b18060295a2427857b984
SHA512 a2df272e0cea07cc0e0f74dd6b2f519415c3931b8a125b3a44c38c710824fab0ba7f63b033616b593cd85c79cd3970cf91d6e36800806e9fa66a7173f263f3ee

/data/data/forat.group.mokhtalef/databases/cheshdb

MD5 a0ad7fe30f832c758f34aeffc63d9f68
SHA1 0744eb7e32df5933efa76c7c43a5bdec7a1796f2
SHA256 d14989a0012ad8972e9fab10f8864af672d157829130cb3d8d79ec22c5b3f2e3
SHA512 f73156edad78983a04072f9eabc26662dcfed086f1ceec924c53738a56b1fe9bd741d128c8d85da94933f60e14d19939d4910bb4da77daefcec866e77345034e

/data/data/forat.group.mokhtalef/databases/cheshdb-wal

MD5 b9927445daf4cfac59f3c6f4f87e1605
SHA1 970a45e5f83739609361373ed178a3a5f3400485
SHA256 74acf6be9e8da0b806ff287f0e58edfe92bec8059b14f98863a9e9cfca1263d0
SHA512 7daa8690a3fc54283075f0d84740b38c58384252b7f579503a05e02498854f042dcea08786aaa32d81e5f082894b9b4f6b9027a2ab4b013786d7e5a3638413b9

/data/data/forat.group.mokhtalef/databases/cheshdb

MD5 20c0180264170f47e80f8802b17d6428
SHA1 987e93cd4f3c1a08b48fd5fcedc163d6282f4080
SHA256 a291b0f668db8e958e9835ee38d9dfdf9f034fc23e7334600323763c7bfe1705
SHA512 8013a40d12b8d1ace6c5e1df0e1facb4eb986c60e3ad03f44a68ad36f6c0252befdb028f9353ed8572a409c2e85bef4b76fcaba5afae5efcf6added05e14e7a3

/data/data/forat.group.mokhtalef/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 09b88120d489b0acf2cc37449c6ce815
SHA1 9fbf622ad1061ec17cd68f99339f2bd27b322faf
SHA256 2fe87b59ca0dd57e63a0c2e63c439826b4b9a620dbb53347e87d64478a0727dd
SHA512 710f7bd1338502abde231e367d5b84876868637c5360993b51c8ff7b1590c2aaa118dfe5d6dc2eff036aeba6ed692536b6fad5e8c2a29ba1104ceea697f5526e

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-wal

MD5 0fa4a97eb1c3e6270044f501ccab2c6a
SHA1 1a1b94b4c3b00845fca97611a5b018be7190b208
SHA256 9c5495f133bc4aa526af8bf9812f67bdf2c249212f0b4219e80c716492712ead
SHA512 327f4e556fb9d01e392ba01625fad973813f3c513d36463c5391ef2ba38c58353b78fa1068c887cf51bd9bc3548d68e224c84b0f131af6ffd0a92748515c0a59

/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar

MD5 2048eb6124a452540ee51dae4145aadf
SHA1 d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451
SHA256 105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864
SHA512 bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

/data/data/forat.group.mokhtalef/no_backup/com.google.InstanceId.properties

MD5 6392e79ccf266f6f3f2a9ca3f9fc4951
SHA1 e598fcdd0006df16eb66abe0c84564f5bbebb731
SHA256 5823cc7f55a88628cf03554531a9ea0849c8d838086fc2b08fd5c165c8de67ce
SHA512 d3fa1d076fedbffecc2a4791d3b64ea2f95704bd59a0dad3390bda06c2570602dc7977801f407ce5ceb068c79e8a085fb81b806f37e1d4df49427d79a31b19d9

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-23 13:40

Reported

2023-12-25 03:40

Platform

android-x64-20231215-en

Max time kernel

2668568s

Max time network

165s

Command Line

forat.group.mokhtalef

Signatures

Requests cell location

Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/forat.group.mokhtalef/cache/1582435991586.jar N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

forat.group.mokhtalef

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.212.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 216.58.213.14:443 android.apis.google.com tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
BE 64.233.166.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 216.58.212.228:443 tcp
GB 216.58.212.228:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 142.250.200.36:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 172.217.16.238:443 tcp
GB 172.217.169.66:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp

Files

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 9b7cd004709a26d784906105555af860
SHA1 0a6a0a01d7cc78cf8412d4cb8afefe4dbe2c1aee
SHA256 fe4ab2d3cef2752776f60d35f6ca46ce00499daa3f8c2c51063d8db46b89d12b
SHA512 e57c2624a3270d4101128e35d293d6f1312f0d19318e7a1b6b00949aba6a975537f67b00726180f61cc941ba2d541ebc672ec593882b181ff7c9aa089e88f1a1

/data/data/forat.group.mokhtalef/databases/db_default_job_manager

MD5 163b0e3f017becbc89b9d7f330b78f09
SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 0da0b2225b218adc815445e5d60be0e6
SHA1 324beed01598c7634c70ee4a37dd0974b5e8d0c7
SHA256 ed99144a1b06a047e8dafccc572054063bc9c864d50e0b9cdc8e9ed82aff1f93
SHA512 603f678f05ac511ce81fa85e7c9a302d4a52d28ad7e3614499c8b789788b363dfcf2e412ef8693d990d1c25767ba45c2bae096378de88a344c1ef2cf12f8eb63

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 c62c6e9ddec711917a2d47207582db49
SHA1 a4b9e90bfe70f694fb720fe49837f58cd22a0b9e
SHA256 80a8c6a251e1d18ba97894a58f7a9eeb72c0c9b007b8f08bba443f15b71196ee
SHA512 ac2a6e4f2f9ddc2f3816071c9c6152319fed8361072ebba8736628b0303b0fb17d5f5f9f57817856e5358ac983b1df9bd97afa99891dd5ce73dc2f8f1d1a0b5b

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/5d809700-6ade-46f3-b5b1-78a464d6c955.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 1b713da01a5319ca4489561d8512ce49
SHA1 d6c46b2c04808224b107368b200056a7d3984250
SHA256 984773ec9175baaac97f1ab4feb446f49d3b48f9d24e6d3bbdcc8918f07f6bab
SHA512 bff1a29c8818f65566cc5ec07e8e5790a0ef6cd270763278f6f56eb1e0fa537bc56d317dd83d4659da537c17053b8792587fc949544c34916336f899ac20b120

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3cfd7152-1a6b-4a02-87e5-80ab057e02af.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 ab8a80d2f534c9bc0b0c2fa04e8ac9d8
SHA1 1b7b15799df75f9ecd4ad367229ab8e16471a7dd
SHA256 ce00e03d9b12a6c914992475b9dee62a37f2739b94ed834b1447bb493d662a1f
SHA512 da62b4a47bc0c9a22b2ce403fcb436e8d032d211529ae13caee99b3a7c3440d65c2dff000906f3913d18c3e171f8e41a3c5ab9ac8e0c2c29fa8cbc992fde50a6

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 fe3214071083ac5097be79660d169bbb
SHA1 2f37f30296755fd13568ff9376e5bafae5ff2161
SHA256 64fce2a52b3ac82dd45e0a0e9676cf981f43809ef85a391836b765509a66f986
SHA512 1ed5910be91861b69252198644dfda215bb621be7f4e30cf2cf05a618df5690b09dbd9a067050d51e7ba35d47dac9816ed31d287274d57293dfcfb9404e1659d

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 7a27b96950bcada2ed9f8207297c944d
SHA1 cfbfe72624357fe8b8f23fb356def42c2c0ef61b
SHA256 55d20e4a35467799c826ee9bd43eed13657ebb3eed9ccc0166f9899bdefdbf66
SHA512 07c586863ed29579ea1d4efe955121635dc48ddcd56535cea6296933aa5d07e69a170657ba62449f88525691f8ca58b83342e7aba38e4814fa0414d7fec17022

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 2823c9a4e9a42b728eb0daa075ceec54
SHA1 41dba785b7cc271e7f67d57684aa139ddd434c74
SHA256 e299a5857f02fe542188717f1871220a5cf942d417e17398fb14aa4c0112fe05
SHA512 c7c62665f192e76a9a0449759212fe82bea5baaba2284cb9e3c43da27a6b6a4e55ae14d781b876f98275f05d23290b859c01fbd37a8aed5b804a7a370182416d

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 19ec47f1bb0aec0629cbf5a13761ae4b
SHA1 9f888f0286d8cc7288734e6da0cf7402a4eeee9a
SHA256 c61f6d5c15538a83edd31bc0026669577da7af92e6dd0f1b03d4c6eb747d7d17
SHA512 e9a99204450ca77896e87759257cf04e104d911111f7f19ae9e0a6c4fa919b3bc6fdbd849b83bbe0a95b4a931dad2f9e510980bc23dbb819a90654a1650fcb5f

/data/data/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 2c470d69d0fda405617d1cf72deb7184
SHA1 6d7eec79aa1856f655908dda80516600f105fc16
SHA256 ae1da6ea2f2aea38adcc14dc2f660141654184517a16a6008609907de19e453f
SHA512 128e5c4df0dee0910128ac64f1f2a4a28c9550b7cd69c30bc114fdb22c3d94cda516c9a4fc34484398f1390560795db332f2f768f25095403f9b598e6d4156ab

/data/data/forat.group.mokhtalef/databases/cheshdb-journal

MD5 2a3605f8f022a51d2bef2f3d7a16bee1
SHA1 7c1ad94f0057691be8ff100edc065045e1b181e7
SHA256 d1733688f425d7832b54090c28b1b3e2cdc9860c925297ace89e072bcd9a998b
SHA512 0e259846a1e48a131c6e2addda10c84aed77bf9d267f7a9d57ad8d5eca5a5df0fa4725ff996c56a514a90831d2aa54c0c271728d7de7fd267ef050741c6003f1

/data/data/forat.group.mokhtalef/databases/cheshdb

MD5 f8a9a99d659a06efd09f2daeb4d9ee23
SHA1 f037bb274a7cdf6e6d50982c1c17f9b5dec00f57
SHA256 c6a76490401376aa759c5b6a5e51bdb413cd8e59beacec0983c2515b87f888e4
SHA512 0380cb8b7e44e4d73406d8d6d86276ef8334312bc28df5c782f6e897ac5c8834d3cf2ecb75f4cde1ccdc663d0f86881c747bfa7222e1596195d01142625b7153

/data/data/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/20857787-4b41-443e-93a7-2e383ba658d6.jobs

MD5 9779c52fd185079b01e28cce86b12606
SHA1 21f9c815db5f1e95729ba0146ea12529124b4932
SHA256 d4c504659609b7fc3d68a03a82c15d13651177a7291537a49c5ebfd3455ee2cd
SHA512 9403dda9a8b3cfb8896f05d9bcfacde48d7560ed9d33f5ca03a04e7efc89678b2469b67cf8984970f392b43533fbfcb4061f2e24009e23c43ace7204129b380b

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 23b5ad253b110b0b54fb1932d4039152
SHA1 1949e47bff1360c6f4a6be27329ff36d86c568cc
SHA256 c85639aa8d20030664e694b6dfdfbe754e63d4166fb777de7e2b4f00ae61a525
SHA512 ca9dd3c2ef21f6ff7c4b958aac676bf5106c1b28d6bf0be73ee0097db13c18a40d6da2e5a4bab114c94bbb40c1bbddc13650876cadbd4a65940f92234b724e8d

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db

MD5 4c95d8bc291aad0748a30ab87299df88
SHA1 c1c4617278b99f54ff2f23d5839e6cc6ae0abc58
SHA256 8258bc89fba5f25b3ed0bd2abd9e5761d40d30fbf193f672900316b64b899a2b
SHA512 53c4d6df4331f07862bc2a3e79f1b0b2bef10c54ce5ce3c3e4a04b845dc0d04e694905eeb75e702a3c3894ffaab01720388f3b76d259d25a7eb9adb56ef20b25

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 b921fe3c20849763dc85b3b9f88185aa
SHA1 33008d8b56312242d0d4a5852bbf879eee8af5f5
SHA256 3f85ac277edc9f846984dfd3641698b115a7463f3cca528c3c4a5355c03f638d
SHA512 635b980dc01449c34ea744f3408b6eec8e1ce011be8dcb6c62e55dac39c6a0efa2928e0bf1d463b21c76c9afc8abbc663ef33b976865697cf7a703057ae87dc2

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 5c65a7ec932a194edd9b9080e37f1f41
SHA1 cf0cd402d0a8c54dcc85237ad971ac1d3eaaac2a
SHA256 148bc7ed47801c223551349c43b1db49f7d7086c4aadc3034c3247e6baf915bb
SHA512 408ed72b2bb11244a7fd62b59a15c1c6083359fd126abd77705e824640cd6facaf4389cf3ef2fd6c4f699e75ac0a5afd912b61b9af183ac91e33a480a062128f

/data/data/forat.group.mokhtalef/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 e4f9dfdfb93700ca86f183a8df6f1bb9
SHA1 bf552f293b4cf5b5eb2c43454bf17342d11aa31b
SHA256 ecc0e388f41e790e5217bcc54bc0bb66692e380228e258e144220a4ba9f35cbe
SHA512 c62476e26df32b11bf0d5ee0bd21787d24709725808aa3f9f19b23d6f3bac258c7db9978ecf009e862616731e971f70b3b05443e8a0265a7d29ef1ddf575d2e6

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db

MD5 12627a2ec645c4a4bc50dba5903afd59
SHA1 504005c938517e61bcf68b65a055c2faba635c2e
SHA256 f177ffae9650eb4f407c2d9a510bb5a5abe1ece2fdfe24effc62478a1bfa5903
SHA512 7ff69589296e02383a217373399e75d8a82fa17146e4273f4c0eb630f096dd9f394a3324d60858b02f7e5cf177c82c6d966f5cbedb68ae6a98df7cc851b79cfd

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 dffd9b0e9694c097502a7c454d7a4520
SHA1 ce56d8ee99290429b026c9856cd7c97123e2aacd
SHA256 8825624e6be9ee74bd8820fc06c15d4f3d1a5e604f8df3b20d8418253bf19cb2
SHA512 74d75ec92baf72d82ad7703d9fe2784fd8962e56be6a7aa72d466e68ca25038e6397f836dac95b5fb8890dde95ad9ecb4b95f400c2dfae6d855492e5a6efaf77

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 15ad68efd917d2eb7af0edd912ed4408
SHA1 a037e905f2c99504b7a3e53231c8206b2ea5be08
SHA256 1c195f4b4c7d26782b22c5f0023fb3fe3ce72234c8b47ca6e82370c111742f86
SHA512 6b33ce8ec68b18663883edeb2aec0ceb1ca7066237be3763571dc4549835fdedd95dc43a1af9cff9969176cf9000018b5283b31fafbd2791490ad060c79a465a

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 28082098a8094a756e72674f4433aceb
SHA1 86e7ab289aeb42fc3c0311371cce5a47ce9f68ea
SHA256 196184fcf93e475c0e01b9fd192d2bd26d961f17e154fdd0cb4e720b12175ef9
SHA512 cda3aaf1b284f22749fa1cbbc9489dd6a90e6d2a0ad8c411d18bf5454e89ff0eac4bb20d189ac72fb4a73a5eadaa0d1a064df1d6c749b329354df1b67e52e945

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 717a834e5f89f8dddf84b039f441de0a
SHA1 73f4beea8fdccb51425dc4b74b42b1e9e74799cc
SHA256 22225b83996a057c2a66a007c249bc98281a9cd49a22473934a1a2f084640c26
SHA512 a8b66e389abd2ee0b9a3840db2e786f0d7be9450f25ce7b83459dc7f69bc76dd588e82df05b5f228ae506793ad647a0bd919ae523a945e96d7339bdbeded7eef

/data/data/forat.group.mokhtalef/no_backup/com.google.InstanceId.properties

MD5 e2ee41d23749f7fd2f3f3686709da528
SHA1 44d3e9c41e8b6f627d4b6fc98d1a6d52604f8acc
SHA256 b511e922a5b43001c7472f3c293e63802d63bf41cc1b36db7912635730528586
SHA512 fcff78639a44f6a14ac414e63d8246b167135c9b578de15c937d5606bacf2ee09434eeae8f7f9904691de5aa49c2d2ce799b04ceb81981b1402ed1ec229316e1

/data/data/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 42cdd14bac2793e8fc04f16bb025a458
SHA1 da6bbd3bea1a5dd2848d6c1ce4a310763feefb1d
SHA256 08b694dbb4e5c03dad4cbe4fe8d6b39a52b85462f2301ba409eb3d83a6506c72
SHA512 2ecd58b36eff9f6d332108821b5ec615896e276135d18eaa639f32ed4b2304b2ae417c9394d0f3c2b356da26ab4e5f9d4978a8711dc204ab2027c0229f7c3f02

/data/data/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 1f60c6b84faefcc43fe4040f6b6f2a74
SHA1 0902054f6bc78e09bda7dc8ca47a7a64e1407095
SHA256 981953604d6b3e7c5b4493d8b6308f795120248204569fa7e67de0abfaa3d48d
SHA512 da4294ff7e2ad2f3d3b487c2645c930636103fadbe1f2df82a4f1d0623090058c186c86d5f5f6629d85d2b667c12296e81633c4e951afe813881630e0edd9bbb

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-23 13:40

Reported

2023-12-25 03:41

Platform

android-x64-arm64-20231215-en

Max time kernel

2668463s

Max time network

132s

Command Line

forat.group.mokhtalef

Signatures

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/forat.group.mokhtalef/cache/1582435991586.jar N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data)

Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

forat.group.mokhtalef

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.46:443 udp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
FR 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 sdk.cheshmak.me udp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.196:443 www.google.com tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp
US 199.59.243.225:443 sdk.cheshmak.me tcp

Files

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 5f4d3b881ad4c3e9c1967013540fce13
SHA1 22b7ab0b099aff04945a67fe92700c518d19a2c1
SHA256 bfb6de463fe90a08f960d5e36e43759430f5c0072b6388c1e9d4352a4f28d962
SHA512 8d57095b4c46dcdd9591ab8ca9b56be664a8c3611ca208102c6039602372d4f1cff4509efb2d212350c3f5573eb2a9e8a407a090b79621e44106fd8e8ca581f9

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager

MD5 4a1f18b25648733896b29fdf2a1d89be
SHA1 b8883150a1eabcf6784dd19b959ad4ccfc020744
SHA256 18bc4e177a262bc1db79293c918c1e1fd9d22a43cd8af9f6f820e02250d6b9a1
SHA512 d241d2a4828c236d31c0cd712787bf83d946c91ee126dc696bc1d237798afea3d19fb94a59fc1255a8af3b29174180e72be5910561190475c35d21c31a17ba0e

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 8760c0e565e55b1b95078b85ce2feba7
SHA1 90c4277887192dccd0741c7674988ad971ce7e84
SHA256 69881703481e5411f73c86aa01c107e59c7e87a57124e7948bac0bfb8548173f
SHA512 95c872637850e7d87f00f861b0be186c247b12d81b6e7a9e8b58bf2d3f030285fbb79b9987ab2aa4001b1207ce1ae4c8b472ad89c5c4130d2b871e5dcd85437e

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 f979bb4eda8ab914e310aadd5fbc7c57
SHA1 48d8b52db77d44b0986931a4d78da985a1d8b105
SHA256 c252f69a647222c828b6352f66b4ada85105a1df251b35798d94efc7c91b9ebe
SHA512 4d4b068ec954adf16af545a9ccd0c0e00a4c4c5b30561935eb844ff856f8c7b0cdaa82998632edc37b6647531e515861f2d5fb962adb8cc5a66207d1c16c0acb

/data/user/0/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/85db2d2c-19e3-48a8-8d05-db7355210e51.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 68a0f9b445279f2a4e100d1e05db89e4
SHA1 d061e5d2a7fe1902bd50665138e9f21a305fb07d
SHA256 aca9b071cccea2cffe9b81dedde8df2a940159b1a064670b48b6e1ac74bf4ba6
SHA512 532cffd10651722c0dec00cc9d8999c026a8c60f4cf2d05dbcf03df2065daecd29bd1717900c54cb65953c65989ef7cae0c5e942f52c8fd3338512c3a8ebde5d

/data/user/0/forat.group.mokhtalef/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/17cc929f-5fa0-4c5f-9853-1cb9cd3ae114.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/user/0/forat.group.mokhtalef/databases/db_default_job_manager-journal

MD5 fc2e40483b11350452cb63e93acab001
SHA1 26afbf6ef2f851ec59c7851fe5bd40f9363d4301
SHA256 527659a9fc7c3c25faff02bcb0b881eba0a5bf1dbb7d45d3b3e01130f729f206
SHA512 a0fc83833af4cfe187e18d3e02cf80f191cdabe62b56b607daefa23f778b1b83485c137425ae2503aa49a0c5f255035ee8a4f4f7f24a3552b3c7e635af4d0e58

/data/user/0/forat.group.mokhtalef/databases/cheshdb-journal

MD5 e94512183dfe0823322ac916ebf91aaa
SHA1 a71fae05f1a45f6c03d5f0c227032c8d8d1e36b4
SHA256 e64e6778297f09caff42ebbd2ce534bde4c52a89344fe52b4b02fd3379d8f4f9
SHA512 2aa2180be94edb2e7a86427fdd941b171503aecac66224e561d0a0dfde4318f463bdb1426d4fa686a901358af6acae26bce955faecfe35de798431220057fa73

/data/user/0/forat.group.mokhtalef/databases/cheshdb

MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

/data/user/0/forat.group.mokhtalef/databases/cheshdb-journal

MD5 4de2853ea4b2370efe015444f558e06e
SHA1 fef30d4ec123a3dbd97ea258a3dea9e78d934ac3
SHA256 4dda37e93c79edda0698f932f26f69a4ee81aa73ecbcce6699c362fb26aa3e41
SHA512 369120ac8000a34d56f8ca212bf58b6c847dfdeed85a82cd10c4d4c0fabba9c1b7fc997f2f3ba29a0efc36befc262d1369175d61bb62132dd865b2439115a392

/data/user/0/forat.group.mokhtalef/databases/cheshdb-journal

MD5 9fcc102b351a67689f8fadd4b07fc61d
SHA1 c144b4f2d2d1ffb07a7e1a9edfd6ad19a12b38b3
SHA256 7773c29e89910cdc66fcf9949117b982f83e1c423bcd116eea55447b81ec1cea
SHA512 a5193fda9226af576908f131db349366e8dc8a9ce5fc9d45d8f7014c9103d44e162b7da8e3608eb420f47c2b6570cc8b6cbd1dff43a9f8b1d4d2fa3745ca3e22

/data/user/0/forat.group.mokhtalef/databases/__pushe_base_lib_db-journal

MD5 5c6030c5bf2b3a7fca2c0bf5a2bc722d
SHA1 5886ac9ff673d9ec0ff6c110a110d7601005d3ad
SHA256 bdaa4264bdac6e6749cb88ebdbb2b9e60e29216dea75c3898a90278d7bf0eed8
SHA512 5bda854995b51e8ffb990d7194637eca593a9be60e2df05c6b4cd02c0f8bc362ba6535928cf942c83f7b35a61738a843cfb3eb7f797433bd02561bffc2ceac05

/data/user/0/forat.group.mokhtalef/databases/cheshdb-journal

MD5 105295c40df7b31f3032f6183f8e2cd0
SHA1 da61102b522b26e0d71aa16b232a4df9849e37a2
SHA256 096ff92812969e252a64666f6e6356aa18b387b6e0c81df5a15c87d58a9c0e27
SHA512 6fce8d9aa3619e2e2d60c8e979cba480de41aa10849de69b2d4142c018650d4bfee0cf5a54bb414e99120587eb345425e407c190395dfba598c3da0e62fb2489

/data/user/0/forat.group.mokhtalef/databases/cheshdb

MD5 0e390b0be8849ab6d0b3979e7c440ed8
SHA1 1bffa589016d08192d2393eeed5f66d6bea3abfe
SHA256 8f880e7c771c0b86526b0221a3381fc50a17ccd076be811b7b80bc3495ee4d0c
SHA512 d1b12b2410fa6882b5ebd8dcb7309e4b5375b89a4522e264c9caa5d97838911f48d496758eb7871d371911e907619cb8411b759d7016c5caa76d092031f2618b

/data/user/0/forat.group.mokhtalef/databases/cheshdb

MD5 8a8a2b7c66f4716e5ee6cdfadb16659c
SHA1 6e48fab131a541c04960b26b64a7d0a687e0aeb9
SHA256 34cf2ee3c88a3ba595cf12836a72c342c7a8858ba357370dee506d7df2a26dc5
SHA512 fd8d9e8be5a2e168c4af7588a560b0c27504ee751f2f0afe203a3f195ff17238b6f14a2dd4b225262016e69e155c17157a92e536a948bc3d788bbef53bf4496b

/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/forat.group.mokhtalef/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 79ef80cd2a43dfb42dfbe3a6e5156f0b
SHA1 e94a197ce07eaef51cae794fb154641c8dd1c9cc
SHA256 9624949739e5f55a7133ba7c9eff34a4d59f35b4f461715a60585873d1e5be59
SHA512 b0a3d49e1f4b30ce9a65a2750fa036ffebb31430912b80cec8996f7ec394e8a823b8dac117443ef48bb5ee6d77db493b904e3c82c35da9de87e0630610a6a127

/data/user/0/forat.group.mokhtalef/databases/evernote_jobs.db

MD5 58c0b6e45328752b20ac6e719ac034f8
SHA1 372b2638afd00bbbc4034657b3df3d2e428fb367
SHA256 9d74f93afa5a179b1ba2f19f154b2880aa8b99c88209802099045a0874d2426a
SHA512 2d347d5824b9ab701e341c89e8327a95fd6bab8e92ee15ce9550da368d773e22bff304072a4854df5ab763750a7401f7aa61a49e3292d62c27fa9f20536eb3ab

/data/user/0/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 2c988060778aefb76faf0337eb544994
SHA1 5f622230ac3a3504425b1d16184e5e9439cf36be
SHA256 753ab868f72675a37612aac43cb5cf5c359e68a6a40d3be23e9dc93a4ac3311b
SHA512 21a4e921799379a7f36ebce52a2a7f59a42ded5c70dcefc6bef385414d81dbccfb284aa3c30d9ca012f2e07f8585c8c6035c3730816fc7ae8d3f369dedb10e51

/data/user/0/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 e1e655930676e20eacc4664934f1e3c1
SHA1 c034347a87fbfe82d96fec5765099862757ffa28
SHA256 1fd5a43d4861140eeb4c8dcf8c16bd9bcb914dc9371ea32ddedb0593799d6948
SHA512 8c6edcf7a4c6bf49a9e1c967f140279d12785af9e053fa0b50cfed62eeb3d9f54c553b0d432f80ba677da167e24ec453987ea79af5d25882bb8903862013ef78

/data/user/0/forat.group.mokhtalef/databases/evernote_jobs.db-journal

MD5 40be47356fd43f03b22f17b9426010eb
SHA1 2d5faa86333a83f98f6599f7432c2204352370d7
SHA256 b13f5b01c79fb3296a99fbe38e4b64833eda05dee2f4404ee53d4e607c470a24
SHA512 f6fe83efff7cadc43df97349a1bf76bc70085744675441bdefb00d3af07260e4e8ab91ed4df273d8e9489b1beadef831e9badb885f45f0d88497b562b3dc6da8

/data/user/0/forat.group.mokhtalef/databases/cheshdb

MD5 56e7bd26a9faaf542ebfdd9c7fa5f5f4
SHA1 f33356b57f529d04f59d323f0f57b6fc89e6044f
SHA256 715f19343d032faf2624b042ce2a5778819a80060a67f15813dfc94765de30b3
SHA512 39ee3385c8062f48b58b806723526f31e110478f50e135fd26a644e00bbaa41fe6942988597246db3c306fa5b4094f6bc2afd7d3494b627e3e06760d0ae0b633

/data/user/0/forat.group.mokhtalef/databases/cheshdb

MD5 b460b12de614aef439f22cf274fdcc51
SHA1 e1319371b3970a936f7d56fd882394fd4d4cafb8
SHA256 49a829f7eb8306da3294a389e85e1cd88fff789e31e47e3bff7a17ab31f6b01c
SHA512 dd2d4839df4fcdeef29d46533a23ff724373a7708d9e12a174ae9f4f2717df2255b6c74b348e32990468e865145cbf7146f0d7594a4047cb769753799348cb35