Malware Analysis Report

2024-09-09 16:12

Sample ID 240428-s7j5vsba86
Target 05885556125e088105e7f1f923014c05_JaffaCakes118
SHA256 06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6
Tags
irata collection discovery impact persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

06d5386ed44bd77c850acd5a9ad2334a706cb91bd23af95d94177f36ff1a4ab6

Threat Level: Known bad

The file 05885556125e088105e7f1f923014c05_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

irata collection discovery impact persistence

Irata family

Irata payload

Requests cell location

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about the current nearby Wi-Fi networks

Acquires the wake lock

Checks if the internet connection is available

Reads information about phone network operator.

Queries the unique device ID (IMEI, MEID, IMSI)

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-28 15:46

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-28 15:45

Reported

2024-04-28 15:48

Platform

android-x86-arm-20240221-en

Max time kernel

62s

Max time network

154s

Command Line

ir.cook.without.chicken.d

Signatures

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.cook.without.chicken.d

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 sdk.cheshmak.me udp
GB 142.250.200.14:443 tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
BE 173.194.76.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.201.100:443 tcp
GB 216.58.204.68:443 www.google.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 1.1.1.1:53 bidttpw udp
US 1.1.1.1:53 bcvlzwkf udp
US 1.1.1.1:53 neslqdniumxj udp
GB 216.58.213.10:443 tcp

Files

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 b071d7956d31a421b2735d680d160f58
SHA1 b4306e1f131af3e140838ae50cb2ee3ac0a58c0e
SHA256 3cfc6cacd2e4157761522c08ab1664aea17d65ef0dbc565349320ff43f230f92
SHA512 adf8a8caca91e0465c58354d5538e440fd6d5dd023baaa2f2dc0e4366b49e221b868b72fecfb6cb7b6c3f8d6cb3628be9d4fd16893fd7eaa5e06f197c03eadd4

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-wal

MD5 a68b686baee54d44a298f9233ae9fe6c
SHA1 2d6a92be81c928d52299b9cb872cb54b5fed9112
SHA256 2c5b298c13780e3f5fd859d7c0bb254dba0fd5f22eebcf7be4043c652a945360
SHA512 d224dc624b377d1072520d29e73145b45cef12219ec4d5c3d497b2e668273b1d3cdcbabb4276c8305a95d59871029fef8d3cf7d7c8c78c520c4a520973edee32

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/d83bfa33-c198-4550-adc3-15adadb7e970.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bd0e2a1b-80d8-49b4-8082-57459a45689f.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 d80e2cb7333fa4faef38247a1f5d0bff
SHA1 24437904f4a2cf9293ed40d022360d78a162c7cb
SHA256 1a1baeac89b684639f73cb9180fd16af27630dfe96e9d3dd02246f349eb27e37
SHA512 4a74208f6fe38ff08732956a96d911ba88550894e99c3750acfd5eeceb2044418bd12fc302f9923c4b6eb6e753ac4b93af7a5ecbd596a4298549977a23b5e459

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 1f347cea6a53594be878e35079bdabc4
SHA1 ae24631f83d3c875dd678040baafb5e64fc6ba6e
SHA256 46cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5
SHA512 6f09f140cda839271dcc15857faa5ec7fed65afabd0ed53164744e0b15c145b4fd0ae3f6ef0ad01cdf4eb612510f7f150ea72781740a9c6d67ed1075e5e026e9

/data/data/ir.cook.without.chicken.d/databases/cheshdb-wal

MD5 6e363092689cfaacfb3ff2abb110ac7c
SHA1 9f78083e2011232bc8b0dc4e49fd8feae70bb047
SHA256 545a71ae0a449d2f466e8797b184d5f5f29b9a1f111ad0747292490abf0ca642
SHA512 bf5579c5aabd78c43887e3a0d5318482280eda6b00fa4283c4ac735b6d2bf143a910d6a4e5531fb819c0523dbd13f5d394ef1a15a5bb5568c8c4b164cd920a13

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 ef71dac0733234729bb24963c5eee798
SHA1 b126f51eb79ef9669c763c1e91cdc8c55be52327
SHA256 7afaa1a6c8ebf806346a0e44d8d705a931b1f6767bc57a81d84c244b04c89f00
SHA512 a4f167c8392516679697384c4a9231c668b52191c03e30d4c7cb8fcc5821654111361c3045e82ccea8847ac014c73bb8b464686106b570b7fa8b5fc26e29f49e

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-wal

MD5 167519845760a35606372157da4a21af
SHA1 6c794a44bb3b44b62872ce3e923f1ef5e5d49b11
SHA256 595116538e94c13a845e013490f32c94a22a320ef729121d4c4ce20f0227fcad
SHA512 ae4ae20057d51fe6b2fc645fe28723e572a7b42872f19282c10230a5859043b0ea8a942e9269c8c83d2bae04ee2b70615067d9995256a8e39c167581c88bc265

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/f8dd1468-5ba3-4ab7-b813-6bef72010391.jobs

MD5 3d2c5050dc4fcdaae63cabfdf78541c3
SHA1 142b838b4ec00d4a17ef3df582510fb520f2db6d
SHA256 08a6d2566a899916eb9f73883f04663ef8360f3c4e1c3bf803bf434879fcdb4e
SHA512 bb347feb583b61e5f7c2c9a657a31d619698cd0dfa1508434b4ea3e53f24d383cf1e4346746a6af3b659eb9ab758a6e3f0c8f77904807e7df5a1abaa2160e479

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 4cadb463fda82a56c5f44d6247a28dc2
SHA1 3fe4ad46712563d8786bb1ce522b028a3f6a063a
SHA256 2f22def0576dbb1f5bbea809348ee4348335dd7dbf214fb39b884d46da5088b3
SHA512 799faa61e81152fd213bfb3f574329394b2f21753a3a11628720637d0f3d8b3237a9dbcce69a519c0f5cbf5ae0fa7d9d5868f404c5617cb05e999ef0a0ddaf51

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-wal

MD5 03e89d7b93a139dbb8fccc89a1fff295
SHA1 08dfc2ac2212bc4a4629ca6c2d395922902d57ac
SHA256 53b902657b85116ce7bb878391112345029080e2490e9ca2ed885145c5577d30
SHA512 af123015a77b38b98c34756e15c285d9810e60fc6e2742115ffeb2625df8d746c9eb1cb8d34899759348e1541bb84f6a8fd490d6fd20fea0cb6e102b8de1b7b3

/data/data/ir.cook.without.chicken.d/no_backup/com.google.InstanceId.properties

MD5 0cff5799e9365e905efc423965b4298c
SHA1 16436d4db0f93d7dc21621d46cf7a82eec958684
SHA256 e7ae350813411c7fbfdb91a7e2235bb5a42a73783c148763995d0a29331070bd
SHA512 2f627a042f257d7589c3e23df9aab9cfc0a2aed73ceef8a54f062dcfea1303bcd661c5b8e3eeada5cd7a545c03bd88df70b18620c32be8bb323f6a874c6022f1

/data/data/ir.cook.without.chicken.d/databases/cheshdb-wal

MD5 25e8b1220e4007d5ceb8eed159be072c
SHA1 ed1f07882fd3641c7e68d2a9bcc00cc01870b931
SHA256 d45dda9ab5498aacdfde28a425c9e5e14921936a37c7d265766b5623a47a23a5
SHA512 feacc7d36ffd5b8fc01ef8c16c69df0544655daae3810d72035f6180faf67146bc976cdb0543e335aece5c522078e7ae1cce9d73160c0cd038a8b294964116f7

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 ec444c07f630afc0eab78ff766e0574f
SHA1 0fd0d96569aa549deb48f5f29eab58d5aa44415b
SHA256 8717a20ab4fcc221a5092e339e444e6607ce245d49186d019a5337ba52360201
SHA512 2dbbeda063562ec81120d1aca33237e91ad51ddf21317eb9750a29c394432bd8fbee8c02ffe5df46ed6cda1a01547c4edc368ec6481afcf3dbf79727be9a07da

/data/data/ir.cook.without.chicken.d/databases/cheshdb-wal

MD5 516f820a9cbca20079f2d4940ec7e5ef
SHA1 f555e50b2c212cf6a840a04f44310ad1bc7c9c6e
SHA256 7259a1fbb6830e22afbce85eb04e01f1fa404de93866b5cea0d0e9e98a864cbc
SHA512 e292446455cf4a9486849cab3c0e9e28ada5df56a13ff0effc433d55e32d1f81b404eabeffcf451a99123a0f417365d62cbba989655396492dba6f50582a67ac

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 2546ef175692989db720348fcac80663
SHA1 45d0e83d16b3d3a643662353f6d1f8e1cafb8bba
SHA256 76108fc850895fb87c003f19c748834c43b6f816ba17d5fe453d6e808b14db77
SHA512 1d91f4e9b95930032b62762b6f7ad02defdec1d87be5b43172d699bcbe02c1567b41ea057e2ea6ca4684cd38ac3096f1ea6c240e3ec00a5ef1b878ed70439efc

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7ac939b5-b6ac-4859-b7f7-7bc54d514775.jobs

MD5 252224bbdde14ec5e454ad590bb1e0da
SHA1 f2012e631f66f1aaeea3ec1dc01bdc1e8df9a7c7
SHA256 41009a07cc2dabbe514d76a8bc79f4d7af26b41c7a15177372abc7401d277025
SHA512 23021abad2827d6b33b0872fcba04f4bb7103c1c39a82f79f1ec8bc166b350d92bd950919f3a71ceaec2436fe81ca05bd384d4845f5fa4bebc0362457baf781a

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/1bf65ac2-1dca-4b99-a74a-293ac05cbc86.jobs

MD5 45ffc2018598c0fb272dd2bd8c6d24f7
SHA1 481134ca4a6c7869e8bcb7747179ac0d4a4894a9
SHA256 17cef06a653856b59c07570990124d3f49e327e5f6c5b17da4973a2acb22585f
SHA512 130e634c5500255dae227727839254e88c56e8e537d45bd4d35967f6a19dded1453ad3e31ecfb389b5a35a5c7acec665ff86f0699b5e95d7809f5f95cadc4d3f

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-28 15:45

Reported

2024-04-28 15:48

Platform

android-x64-20240221-en

Max time kernel

61s

Max time network

157s

Command Line

ir.cook.without.chicken.d

Signatures

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.cook.without.chicken.d

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
BE 108.177.15.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
US 1.1.1.1:53 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.212.228:443 www.google.com tcp
GB 216.58.212.228:443 www.google.com tcp
US 1.1.1.1:53 tajpksnf udp
US 1.1.1.1:53 xqthgvx udp
US 1.1.1.1:53 iyunjuxdyyxhtyz udp
GB 216.58.212.228:443 www.google.com tcp
GB 216.58.212.228:443 www.google.com tcp
GB 172.217.169.66:443 tcp
GB 172.217.169.14:443 tcp

Files

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 4f750c5b13f85541699cf8e4a8c4c6aa
SHA1 24c6d1e18dddbc298c4f61ae0de061804613d2a5
SHA256 e5ec6f794107d3054c3960f9f8120b28b3fcf9683a3d87532885977120edb2b8
SHA512 26ad1ebcfcfe9d0539aee492d52838678b5fc0b619a1046fa9ec20b73ab8525aadde42eaedec127eb04c398ef65355365dcbb23559c92f27d3b6f5b51b598b91

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager

MD5 aca2740f249490616bbb5e94ac5caf9e
SHA1 1dcbb4cf496a9e6a6ded523f40941cc7c92864a9
SHA256 3c02a762c8e27764484387cef51f9a0e543674f98535e06113157cbbfd2aaa5a
SHA512 c3fea2e59bbc63a3fcaed0f787d6a3cffd45861cc74a1c73e9f48cd5ec55e23408edd51224df15d29de7b3ff14d2591c0be8f07f1cf6e7fd78ccde0789964dae

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 0aaf3f2e43a7f2d4d01fe66125e5d676
SHA1 c317322f2e030a131ec1337390badee8a1fedf90
SHA256 3397925a37b8db077e4b0216143f0f8ce9108ca03ca9fbe2c4e36a94cca9510c
SHA512 86cd6c75d6d350e44345b1debeac6e10c1489d9f5f20e22a54bd4837b2052bdaad3555ea5ab130cc381543c72bf5ac8851e90b9af85749acc0737ff1fd88cdd4

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 320cf146869961ebec86364f42a23c61
SHA1 c2f0068a506e951e16517e456da8a301bd0dc249
SHA256 50818c993fd591b5ce7c75720a7b08d320157f036a919db39d62e809f1573c10
SHA512 4d4fd1b57053203b143e3b71161461965508072944cb2c03cd7f7d9e2763be302d16fd06692e1d389c9c0247886f92ff13d9b0f7da2801ccd57690f5227dbe30

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/31b76c16-11f2-4f2f-b570-4037b7b31989.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 58800ff47c39eafa2326d223912e4c70
SHA1 f33a18f243f4c7ad390531d263e0b5e406a30cab
SHA256 cdb32cb55b041a22f8cee3aa3c4ac8d4fc2d32e63c27e947ecab2f9e42d899a5
SHA512 1b9d16b0d7ce386f96d72b48120aa412fead99c4bf73c1eeb3f665da8bd47f2d163c0e11ee7f19c822c4def3dff4739775b3a8ecf2880f1d8ec2eb69d83eb1b3

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/79aed659-4235-4fc5-af0a-0d535df456b2.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 c0905b77114f711153a0f1c50007b648
SHA1 af75280bb6c63a7034a8ab203984c117b29ef8af
SHA256 d5e893559f3dea54aeb1bbbc540c47f1ba9080f1142d0f0b6eec1d2f67de63de
SHA512 7c6cbe82b3c01f39d0b0fa5dc9a3644ee6a4a10cb30af0d976c75c3e023dca56fe2648dfd7afbe56b95dd17079614a8cef4c8225c25f039a382c1cfc4bce3d42

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 b67795864cd0c3185d0d619b32f3992f
SHA1 d5790942a4255752586ba2dae4485721b4ad6294
SHA256 35fc633150a3ae7988bc59aae59c16051f0821201912d1256031cc1ffc2410a5
SHA512 a8c2bd6d77f2396536378d1edaa5e01b996e5c357d2a6c9ff5c0b503687af9c2fc964368b040bccc8b322ff2f8ac18f2ebdbe25071c364a4b56724ac7977e0ec

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA1 9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA256 4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512 dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 fc7ebb34e3106d44e3158f1b214e0348
SHA1 4df22f0c96e8455c56db15d657f3ca54f293fbdf
SHA256 71b1765185e82206537c980696657aaa429d3077cb0f54e92d8120186d5ae3fb
SHA512 dc534bbc08d7f15f99ae0c2ee397e99686b7e727d89c041c178b6285d4a5e92a55e48240f4717de98aa4f6b4d357b54a1a076e37ab38e183efbd00d67dd30168

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 b0daaf258e9134352ef3c64fb7614448
SHA1 4aa87582bbb6af2e7d6707046a203eb689355db4
SHA256 36d70c48f12aa0badc7695bbef61705efebbdce9b8e2fd07c7295a15e47f5bff
SHA512 a8f6ec928a6f3fb4ce9e85a516d475cd75aa48e673a8c49da64ae5ae3e28370ada9f7744de12a3ecaf754741270aab94cff2a991a3a3c27492f1f1d1b5e49ecb

/data/data/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 675411f98e6afa48601c5f9ca4016ec2
SHA1 54b8c63a69bf0a5c18b6f2bd1d45628f0409e9f1
SHA256 179fde5cf1ece56c99261de0c52a23633f22bfb28798845a26083d29ee5da12b
SHA512 a52bd92a7a0a9cc188135fffd126e1d155e5f1475377e0a0ec61fc5b48aaf14ac3b542a97237fa31bb6adbfeb139ab115b00018c767c72946404565a8e94097e

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 35015b421ff2c51729abc9226f52fac1
SHA1 a74f85057aac2c0f3400f8c5a4725f4551f61ceb
SHA256 cbc2ced02e2f421f3317530ce24963941899550666f51fd33f18490cdcfc776a
SHA512 69392990032a6e4ae4f0234347c09076672b088b9c319f8f71036331359a06ec815bfa6ad904d6155e3895d9db3961cc5b17436bc1130ddc54dcdad247aec7dc

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 007faa97f5f134218d8639e65e550cad
SHA1 8da2fca3e82e7308766aca13fe6cfcdbfc0e2b0f
SHA256 54005574548bdbc4a244a66b3fd3e5d9fc594d2d808645a30fe6fa5e321b2e7e
SHA512 9b703359fadedfac62a60f2f1ec0eb51590128957f7372e0e0e4678db14021b363a70c5e00efa97e705fcb213be43e7d45b206968da29d3fde09bf7b118ea808

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db

MD5 7234d3e6555ea6474f2d263a7299073f
SHA1 2e882cd02e9801dd37783575b59dae3d7bf1674a
SHA256 3cae73bb309303d4bf6341c563a37a1cd24989f94b3809fb00d8e9498c854671
SHA512 3d4e312afdc4ede2095d75c146845dcaa49a3ab1616df4ca99a8b1ae2e837d98f2f402a97f0626cabe816d62e01370f5631e14f5880e559f6cc12309373f88f2

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 b433d1d51b0b4e72c2fd063e2db566b5
SHA1 3d024e0a737e00bbb44274f563214ea9d12b4b2e
SHA256 c1f538dcd7c97e4b2276c89c138dc1b1b843dfd1190bea950195152ff435370a
SHA512 c796365f26f75cd38fb4ad6a40b73b9bda3e812bed4e86ecb3aed947b0cba587d1116255cc53bea9addcf6b6d421ddbd1b23d2b3592755221d798151cc2e5c32

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 7c104d6c2f2a4a48de469b17dce1bcde
SHA1 cf61f47e019a71c26ca0e3149fc6d3290856e0ee
SHA256 a01bc68ea619ff2413b255f28a3b4551bf3e8ddb4a5e18f267a70f087b5dbc76
SHA512 20969c016c98c7da22f8927d83d999f7c1412f395f665074ede79fb565ce7e754f96bd7bb5bcf3fdf59e2dfacc33017b93c27783a4b004e2ddac945cf6686ed2

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 c022b5a56ac00cfdb5496bd1a6413346
SHA1 23762fdf695fdbaf5e57d740b9e91a5b98a6f3ae
SHA256 59fec03d1c29411c9e264fb17c3fa8124d737e0d482c5879687bcdf8742693dd
SHA512 7b3768cb23a5dbce5338e89877f43f8b9bbc8a9a2cf918e397ad71f336e6e5ff555f4768fff3b998f4cbf74d9e2b5268fd906777cf73fef8dd35b4a8413f1988

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3c481203-591a-41a1-bf6d-e6d840881654.jobs

MD5 a53175b06451313722be163a44a7b3ae
SHA1 abf7171c61749bd070d042d24d5e13c9152105d4
SHA256 1823ca7cd72e0f9667ab58cf9782caf89ab45ce09ebb1bd127bde11c6b85f44f
SHA512 c5d390a5b11ab199200606629d1b850a7fca6c5f0a91a330e59c8ab3eadabb22294a2247a4e9dee76daa642c3ff041e0b9ae4fb9c7be4af00de22c39dc30035f

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 69647246a049347d469f0b97f8a4401c
SHA1 60f6e54653dd0281a3735bf5dbc014320af77540
SHA256 47bb0c8a00307bbad7b133ff217ce256df9824c493e38fbde24a64175486cc7f
SHA512 075f60a57eaaa6795230852158002a09b7e5e81234e0519985e0b776364632a935257e21d6f109793d67396131636743afe83f549d3dab54584230f2ccc08f8b

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db

MD5 341e06e56b7f494176c277fafa2e2890
SHA1 b598aefe52d069fb52cb00062d2c6cf4c6f9225e
SHA256 e97adaf40a8adf12d89ccd72c0c20d9628134650cc3363904d9593713cfaffe6
SHA512 2f44b017be0f9a73e392195232b4c4a5f5a65e76d8ed94c6691545bdbaa0823d4c64ea64322f39fd017b38227e0a7883780b93b933b7ae9f177798f048a16650

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 517a0588ae6e22c083ee523193d91c60
SHA1 3aae6b993417ed096a90810537a5743ce9d59174
SHA256 cc4030674a1f40558528959fc076646a4c7e5c1995618a09ed8e7b5694b9f062
SHA512 316f90f31641f290ec4dfbca265ddb7aace73d93f13b041a14c4e5d63448991b61864795c6ce367875e865c29a7b94475c68f9396c5daebc7a55dc7f7f648603

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 96456c0b04725ce1e1ab9c698b5aebe5
SHA1 ff5d58e04cb79358f17118468d33ad466ca9dc96
SHA256 7308c53a484883cdf521fa1b59df6fed6f82ccc00b00c8b48b6655a782f50b63
SHA512 4dbfd9bd46837f887e4b1569107739b9518d19f68012c86fb412cecec194aa5c569a9ad4f38801ee0f6760d8b4b6c09286186d58057af8b8a8f89c0411381a13

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 eea4dc5e8c3d1584adba7021c31b06b2
SHA1 029461e917f267e3ae8a0df8cb37975b062cd595
SHA256 860216a647ed48074a558711b138be982ce73d18e6275e77ea5babfb1b1b9cf7
SHA512 17fc779357159e6b2ae74f3fe21ce39df908ed582cd4f2ed5f07aa27283d393b52f8f3360559f9198700f22b058df018bce9c0c78bfd3bf743ce5fe7ab7a224f

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 cbbf575632f6b65a3d02a8b89b023139
SHA1 91cf6370319fe7e673528394a780ff8e24db68c8
SHA256 4fb1ea61ebde5a8deb98594b28fc5eb5113055ba80de5eccc0a1b49bdbbecb55
SHA512 5190ffd7e480f1ed6926dee875084c57f19de5a41b46d21ef543d27dc7590da760dd088315d1aa076b11a5d9df3f5a257fffee6a48cf32581e66372b96374fb9

/data/data/ir.cook.without.chicken.d/no_backup/com.google.InstanceId.properties

MD5 968be0fdf42f51c9ff4d83cfcafd136b
SHA1 542474bf5034c352374af20b125eaa620ae261a8
SHA256 53b62a8d2a82018046a71b82065991a555ec0fc798f01dda138e88b5b7162448
SHA512 bd6ea11037c8e660bbc1649bb5834ad46f1c4211f7a9d3e9de19947be1b40f40788d768a46f2e5b3858f958aeda3509edfa6b0fce0634400412c37929df6eae7

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 92e885d8504f66eca87f7f1623b64357
SHA1 d3cbf26944488cfb9ce219fd1f273392cf0ea472
SHA256 79ef3ed8381cec565180b0ba1634cab5ab39654127d7b89e2f8f31a4de319ca0
SHA512 e7744e2e055509b1733ac0b0876ebd6660e0cdb9e02c281fc72da314af0d7f6e03e51b2de3f443233486c5d2bb853a14b8a8b0fe684681f7de0859ae151ee9d1

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 0d3d525f89e9ab3ac9a1a39f24853442
SHA1 8205bfb2d677c6d1e83c96333cfda5892a128c3c
SHA256 900ef7677e2b26ef5b1b6087115f6a356e868c7363536421d9a3eb6b1cee51c4
SHA512 5b15ef596e8c4378e88a18586f1840749b40be7a5f45571ea87c982674745da926b13633768fc16ecdfbdd023c4721e82505d01213de1019410f94018b24f143

/data/data/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 27a192d589cc91f166e2f93515176ac8
SHA1 4e832a6dad208698c10b7a5afa523869de5e22c5
SHA256 a9c349fdba0b4ce0ddd14822d193b3ebc12d56f460e8b6ebcd8dcc8c6ea66190
SHA512 a8999c62c3737689032b41396d311c12fc0e58d3b46ee177327092a863f88a6d7cff9e1e70754c57947f22444a29c96c4459eb6b0abd3c9e94732522f85f9ad7

/data/data/ir.cook.without.chicken.d/databases/cheshdb

MD5 b4766fe0768b39e0846cf218b438b0ea
SHA1 bc7014f289ac033e1b17a5e530402a2140c302fc
SHA256 19e6421e01d096a72ffa97c4a24147f4344d85ece7aca65ec52d78a49b608da3
SHA512 8ebdbbd7884680e25df505a8d8ded66fda6f987bda8dd3dcf27410406d4692c7911b815967ee2b47bb3d44cc851ca8be1d1a0bd99c7c67d6eeca585a08f7f6ed

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 67268a5cac74197eb0ba5ec4feb1de3b
SHA1 bc8ff71331053f04ad614bc7c6b5dbdd26719897
SHA256 5adabb338f5a6e434f77d431b0cfba547ec89fb2ffddc7461c1ec4da2054c220
SHA512 cc9aa12742a2778f4da74b2b66bc9c37fb2c7418afa892c27e4f4639118063d6b4aee404f3bc35a70a011a44aad381221d99447fbc79645dc7b7673028602861

/data/data/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 43af1a28038abe4fac6c1761dc10c57b
SHA1 b4d0ad138541d2572989ba62a641eb697b2c7a11
SHA256 74bac62a08e283897e8945fbeb034ea41110cb7f5985fd11fb2f3a7d7c4c883f
SHA512 0187d7fa491072e994df6bb3182cf912f7c4d891022aee2d63b16dab918bfd7bafef8a7374b0b44a4b6733c54979dfd40cb8c9c1d2c46c82c8f6f7eb20d83266

/data/data/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 eb29aab9faa229c7b58116de879a300e
SHA1 b007240747564240ac1836544c7135564c4c0951
SHA256 bd1fb235250cb528c3d718a3d96d16a6e8acf0daa2c765cc837dba7510c26975
SHA512 b38c812b5dc4063b0ecb2255ee8ccbe05a10f58723e0d2fd8d88a600fdc37c4e913c6658d9409cf2dbdf5dccf1b37df5e10290d9bec9c4d5a0b225b0f3efddff

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/95727606-6ee8-49e6-89ab-a2dbf825781b.jobs

MD5 93ddaa403c8e921550e1baaad6de2b0d
SHA1 8833181298f9714a4343293b52877dfdbbbaefe8
SHA256 599ecd20d3581db6cda8f439fdfe73d26024b6569084634ea02a78f84fb476f4
SHA512 8757d35ebed58938f12e0177aeb239483964435625d74ef2ef44540c04382bb77ea3e640fb0502c6b57ec136bc54ba0d56bebf110cd0db490b9e7d9b7d19ed9f

/data/data/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c4790d17-3cae-4517-bf36-fcc5b9c2a644.jobs

MD5 fd72997555cbae6a39ebb96a1f5fcfa6
SHA1 a600cb9605a6467a425662ae512c61f3c0d5bd09
SHA256 cbf1a725e5061e93eb96e1cdba667c03465fc10d23a7fefe7dab7e49cd2d5d10
SHA512 49634069aba4632a4acad3f4d88a61ac3c81463fb2584d8a7f853b51a85526a5000399d1437385786e5d3d96caab05e2d26c83576b5a37a6aba572d376616b44

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-28 15:45

Reported

2024-04-28 15:48

Platform

android-x64-arm64-20240221-en

Max time kernel

61s

Max time network

150s

Command Line

ir.cook.without.chicken.d

Signatures

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ir.cook.without.chicken.d

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 sdk.cheshmak.me udp
BE 173.194.76.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 74.125.71.84:443 accounts.google.com tcp
US 1.1.1.1:53 vioyetj udp
US 1.1.1.1:53 aakmcgwblivf udp
US 1.1.1.1:53 omnpxubsj udp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
GB 216.58.204.67:443 update.googleapis.com tcp
GB 216.58.204.67:443 update.googleapis.com tcp

Files

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 28d6248b8b794ae8eea2e7262f07cdf6
SHA1 e003f2398a25a75881bf6c2076220267c8a45f19
SHA256 d10aeac993d94af1dab3dba552499f811f0b537a19ff38ecfd8938ff39c8fcda
SHA512 d0e8a7e66bec6aa41867d3d0cc7092dd3ddaec87bd23030a08ad41a14e0ec3adcb47a10bbd99fc8e0c57c9923feda14c965f0b13838de8b917bea437d568441f

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager

MD5 9000a27583e7083745d853ea082ab3ae
SHA1 74d9135b80ea483ae876c2670300086d1646dd2a
SHA256 c96efaff60100dd321f142480869a2213f76bba72bfbf03da48f9c96d15565ba
SHA512 a7d8d46203c84b49973d1afc119b7ccf04ee6dd82d16942d9389333b4e6d9a8ca1a799863d8faee7193df3b4a143ad818bf6391d040fc0f8d45dc5b796d7a292

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 3a4baa9f8305c41dcde17ab0e2ea158e
SHA1 cf8f055146f5911a72c0e5eca1f1990ad286beb0
SHA256 558d33a7e5b55794a58949bdeb2587535961a5a3c4a0b41f04900be5b0a2aa8d
SHA512 209363fd748b55f96474ce05057bfe0ccca9df200bc210194ebaa6d402bad4f740300308f1f4be2da012a4b8a8bb5a0aa4083a0c6cb6e62dd64bc67b84f6d0db

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 57deeed0961420d00574e489e18cd45c
SHA1 e80e270dbac6b49ce5a079ee1dabd1b1634144ce
SHA256 360afee2630e0abdf81546dd43229c5527d2adddcb5a07b38cffa16afed588b4
SHA512 5c4d4f54c4a2d62d3734ed71abf236995fc542320d7336e471d11478216936e8586edd4656d4fc71e7864c395fbfefc2f99ae27969c06b40e11e1df1506d9cf6

/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/32d29971-486c-4115-8275-313d3145b7c8.jobs

MD5 f56f328eea1d5c96a1b96dbbf59488df
SHA1 440c784cacff61932e2f61580b7cfdc3a4943c95
SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA512 36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 3a77d0585c76db131ebff1290fd3bb4a
SHA1 9469fa839911d0151dac273716f09ff340b443cd
SHA256 56c1a93fb6a244100f33e7bbb592e462abda5272e36dbd941676d644ca68d025
SHA512 dd6de7ca07f5cb30bcbe890b0190dcde183af6b24321eb56c8b836d57482fce9cac8c065d7a9d69d5ac6bc7503b7dd8763803c8f7ea149f280c132f49452baae

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 b7be9bb6f5fe1e799784b388cc36edd3
SHA1 d7a7e3333c6d4f4cb10bad2eb9f08c4432c17b22
SHA256 302b69925ba68b4b4998c5d1c2362bf263177c46fd3e2ebd540e3b5e65982ab6
SHA512 1ae82bcfed9ff22ad425b5c4aaf136acad05a632cb15ba16519f9e23e55821ce031d2d58de4e5d520ce9eb013f979a1271cb4020d6d463331cea1c0978cc68a6

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb

MD5 0660d3ef5f0245096a9fa0f61d6a8666
SHA1 282222362a5a05e3153b7f6b49ef35c667b19542
SHA256 1091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA512 18bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 9a20f5d9d2b0b2567f9c91ad7b80bf85
SHA1 78a3c37015c9f039b0d4d0d5cd0fd9d2ef23cbc1
SHA256 78f482fb730fb2817b170848a914c4e57ad3be675ead0fac98419f81939321c2
SHA512 5031875a5add11b5f2e00d42e2dec195cf0a37c512159b545878c7ea6cd76886fde7a37646ee5e39bdf0e581052d6eae9a205868d97854356e369e9aca8a47c2

/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/b9bca99c-94d6-4635-a4b9-0532e3316c0a.jobs

MD5 ac58f99a1b179d71e8621412ad31c6a1
SHA1 b51fdad95876f5615735c2ab411031ff67d5e946
SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512 faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 4d7d9efcc331c42e28383d9835299dfe
SHA1 98e3862a06028d7a21d49809db10b0017b0c7940
SHA256 b5dec14ee82d7f20896b8a10524286b9011cd43a7546e2ff937a80821dad6459
SHA512 c6ec195845b0a8978a978618ef91d79112275a6ee440ae3e06f86663a23c37743d6ff38bd87298e2a07e7a15c8cb1619114fd09968fe6b3dd03220610c9c126d

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 611461d020dbab15ebb1505bd483e8eb
SHA1 90b2703ec33ac4ea56b3625a68f659af2f20be11
SHA256 5361abbfdfcafd983ddffb613cc9d847d6716a3f9e748593e697654ef95d6d13
SHA512 3d2f9607547d912644012bfd1cbd4edb597d88696f8226f0316e21f4357a357382e27efc10cadf21c4e80da5a42d40e52d303918342feb8559ac9b57a07de7dd

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 e83da97522c0b6c72cd702b41bbf3a99
SHA1 505f4319744bd12f345e937d1117f43d3de31655
SHA256 415a1001017a3a28e86d51f0e90cb4cbd850ed1fa7fe50ce0c73bb17503928b1
SHA512 a5f69e131fd118d5a8ab66e669756222045a0eb7bce9d3a3106b0418c959ff848e130beffb16e6845adaa8445fd97f9a00a7070382ccf29273be7caaa38219e2

/data/user/0/ir.cook.without.chicken.d/databases/db_default_job_manager-journal

MD5 02fbef1f2510fdcdcac4112b3365458d
SHA1 e6a72d0fb6fd03687c4435d4ac5ae5c10ad53e10
SHA256 9695dae86649e6673fa183f485397d513e3028a775cd69126a8edc6abeab7e1b
SHA512 d12cbf9488593397a8714bf95e2fb7967dfb5554b2723aa780a1c73ca232eb06f7e64cd2f6eaf6057c338e87b49743fb70f4c8ad16f14db34e103ca893ef2708

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 c6d1007e20b0165a39413e53bf2e921d
SHA1 7dc6b4f4f39930674efa62cf2f410ed479c0d981
SHA256 02e2ce8e1d11824e79cdc0d4686be46aa70ebbd3a6bb027b632ef99f527b2e57
SHA512 70475aac3f60e8e3d58d217a2a769ee7ad7a62b4dd7b1776fb53f95d0484464125c423943ef7048835956b598f7f30eade43ee79fe9bb565b76f448e75e81d6d

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db

MD5 629fb4a604ecf596d9d418e7c8411c96
SHA1 af85db32aa1aca8844c5dafa194149c41565ca8a
SHA256 601e66535ee9683b49bfdf1ab8b88e2de4e15b2e1ca6ccf0066150a4f350c3d7
SHA512 783f0a1a10d86303410fc5692dcb3727b0bd363ab0651ac5f76ae525356b7d6e244c772475f990ae60888acf6cf90a5f5de98db07ba37a56025a88a8ef37c472

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 42c6e55e8d9de46f66b7a9fe5f282404
SHA1 dadc8bcef62314b0fa9684c96da3a24e6918ddd0
SHA256 f797766759d98c1ed5e9383bd9131dd14e0d6326ffe668d1165de0e8f303c0a8
SHA512 db74dfba2b1ea24e9bfc764e1d2dddd8289467284c0211c4e226466bb1321984cf884e6c77806ed3b47b03416ccc88eed1577e3b82334d5a50ee61aeef51c8ac

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 5ff7bb14ca00c9e4623d29298a5fdef2
SHA1 de4ec64ae968ac71c1989930458970bc35ef509f
SHA256 3fdf2192e22e423da169499ff43926ee05b78aecde09cad668cc43b7e533cb32
SHA512 f15f4a2a9282d133bd89995bdc544b27a76c6e70e862efefef727d4840ac858f01765af00aa36d54baf5711bb3b7d34085c435c6961f991cd132be5ab2cb2ae8

/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/32a5d47b-aae3-4975-a0e6-fbc55079fa5c.jobs

MD5 3c194b281da731d3d0a33ab8e74f9245
SHA1 222a12fba94ed5266aec478c50da161f68c0f799
SHA256 3fd9a9d558649f5ef59f544c58d5719665555d13e400f13f0a597282b1477c6b
SHA512 066cbad83ec427f5447ac20b3ba40e8f41841d09e2736e182ff3158d1026b4e0ee4cd84a204e638ccde14d7427b4650087ac581e7b18a6b6216cee6decf6e3dd

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 3dddec0c6c5b17b1bca5a0d25b6ace7a
SHA1 ca065377f40ea881e475fe9fbf6a91b72bb7833f
SHA256 a031c412264089cfc35b44b5e479ff4cbb62e08b58072dd6fabef8bf68b3e33e
SHA512 b5e4cf7d784b873fd18ccd860ac7c965fd8f3a3128f5b47b1a0f0b2904a267e20c25dff440270f90848106d8cf84e9e888f4d781702e29c1319647e036ebac27

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 80135e4ba0fc2ca58fe9c98b5eb41957
SHA1 4b8af2b9d89260d9040b50dec44bcdedbcda8b0b
SHA256 aaef5c1f237ad2a1f9af78d6768e6733aaeb0accddf2ce4db2d1f3cfa0619de9
SHA512 bc7b264afdd2816e4a0e8da195b540586b11682bb17b0b2a3d704f0ebfec7ed25353fb572cf73647ac73cf932a1c2e41c3608c8edafced1f0744a16c3aa9bbcb

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db

MD5 027516b86b55b941e3de3106de206660
SHA1 49d69d0b51fa73b6a9e489bb2ef2eae515f0279b
SHA256 2558cd9ce471780e82b0f771413ccb0253ba9ac1e252606e564eaf7290175b4a
SHA512 d38c9ac3c492758c30b211d53eb62f3560e95e8df048216db7849e2fb9e3dff606331681c8e75bfa5bb8e876dac2ab105a1f279022ce186a5e7da760f1d89f96

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 ae7e4d092443f18c65f627c8f39c6651
SHA1 1287eeeb179a93276641a48908b2d68783be9c81
SHA256 c29bf296d732bde54d8fedfe6008f9303d0ba403c0d53650c44aed3f56972cde
SHA512 f33b274a50e4c0af716594f823b46f670bd584a00f97565cfa96f684aa0cf4b314295e63a1841c4a35a4e6368c2454bc7768dfc5339c5617bdbba360702a90e8

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 ea9c5efcd2a891d82eeff59fc64bb2f1
SHA1 3402de381b619f7dab42421110c2b1fdc2f24d40
SHA256 00f4d2d26e6d8ab17ac49907a5462f5cb5bdd50af7007dbd1d6036888db9966e
SHA512 7ec9f7b3781329be35ecf2ee2e34ccd276967a8ba23611e4acfb7075e174bf1ae6d6234f5b8b5d1378608a16ecad09996a6ec39aec2b4c6b3c69ab81890fc93a

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 129a1667cd3edd78d14285d1ac472dce
SHA1 351e504ef8fa89af655cdf3f3a23f83be6a4a77e
SHA256 4777893a05504f3fca8c1e04dd178f3d41acdb8bf7552d403693a9f3cc5075fa
SHA512 34013c26c0dad9e0779b580a73591751d994eb4adfe3ee6ac067a143ccdb2b3fd32429f956556c9e3c0db0698f14d7fcb0d55f5c093169c847be364718bf8648

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 a8dc8e1889ca23f545a2e6cf10b1c2da
SHA1 989dce9ef1737f115a0d83f02a84a15274420fc6
SHA256 7cd27d8c874c39f586d64bea94d5d7205fec5959eb076897fb7f6990747ec7d4
SHA512 059ea88ff479b0385b45110abb1de45cfb3323b1e77c216198a9d9a3b1bb8b0cf5465c310188635d4721e1071bf91a90c48ee672161bb6b84ad988de42abb6b7

/data/user/0/ir.cook.without.chicken.d/no_backup/com.google.InstanceId.properties

MD5 0897f11e866a0bcf76626d81bf019707
SHA1 f2632ad54d2aa7d7bc434913f9416b82b091a2f7
SHA256 da4519826d830ca46a422f89c2912e96df4c5d33cea06b8a454080e9683b78b6
SHA512 31c476218a0833544831ef4279262abe4d993506d8f158070f03a1f26eba294a70d383db9221b53309f163ef9699f20552df2a1c21f1cfe89663c75a22c99c96

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 43c72da3c326d03aa7b92bfed9c08c21
SHA1 d9da8e5d9e55e09a548e2f56f22d4245d0ff69f1
SHA256 4b0fdb8f490f61be16b141062d43010b1b4ca4b774bb282b3fe9eda40c934bda
SHA512 ec5f089939fae3de85778e85a33531a3939ed93896775dbb5b046e0650085ff494af801cf502c4753562ed3e2e2eb4740a8b37301c8537491604fcd048c6c48b

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb

MD5 b2f8960d70ccd5b0f93d958a1c3fae36
SHA1 e1e523460b5ab4b5c0de3548af405bc1e4b3a885
SHA256 5bd20a0df92836fb761f7b01ba21596f8a73f9b1d5fca1559c5ac7302169dec2
SHA512 2827453eabe68a61cd742cfd35cb4bc0ffc6a230da50a8753b8d66fa0ecf8f51ea96093e10322759514bd64e8533ca8d8c3c1b398e8fcecde314bae310ac31e8

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb-journal

MD5 0299ff46dbc5a250832913bfd44294a8
SHA1 baa5c9628b42306e9635ab181b322d312fc4acc3
SHA256 823c338430cf097afac80fd5671f953f6783ea6a420e9342e258852ae235d4a1
SHA512 d93329ba9db6e7197ed30cbc7cd86d7b7259ccb648f58a04828721e18dc63a4e2d8a4bea867a188dd0d790fe85f879ca1f3512716f34351fe2ea0f2da8faac4e

/data/user/0/ir.cook.without.chicken.d/databases/cheshdb

MD5 9ddb97320e1a3790950b8e197b8f5167
SHA1 298f39b53424bb3c52ecec9bfec07224ea40fee8
SHA256 e7d9c828ea655da6c9b608cd13df8ba3b5b0932e1eadf0171642eb22c5f3a560
SHA512 95a824ee85fffb2118a077c17d3af01c6a009e3325aad0c99c1d975f01e6b06485bc1578a4a9b8f467312862b66aa41ea6b1e23354cd2ddda9111954e2737324

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 5af8887b7b4d3e316f6ec5d93cb75c4e
SHA1 b6ea5338346937bdaacb37c621b058cec76f2a50
SHA256 9de78ae3d9b399aef985c9a8f5a70b1d89a448fbbd59961afdd9ab6b8845ab1e
SHA512 9b20f0164048e6868036a23da4faadb9a5b611fe3bf0e5f0e18e92ab33300bcb3d23c061201ed6a4de35a15c99640ebd367692e7ca0ea6cff88f2cf182e80877

/data/user/0/ir.cook.without.chicken.d/databases/evernote_jobs.db-journal

MD5 61ef46ca056b6903f7f5c84d992b9ebc
SHA1 500142ac0c98b609592df60d61a3bc545593a570
SHA256 e2b2a0a398f013e43c466999a344cd756b5ef4e8257d6493b94a26ce2ea8fe8a
SHA512 df223a3c73d1f8586ce366430e1283a25b15a828fd179916b3eb3b8e35d5fca2f7bfbd72125c1c78b8415fe8d2ff21499f47b0b35692864a7e9e8535a6728e13

/data/user/0/ir.cook.without.chicken.d/databases/__pushe_base_lib_db-journal

MD5 60df6ab668cd1c442cf821624a6fc7c4
SHA1 ea260e9f7ec1aedb6bc8dea9cdb577d86503748c
SHA256 e768dd2b3c29c8ce9db4abee258ca7e99a5819554b14ef8bff02ae59786d2f8a
SHA512 9c6d83be5de0528d87330c2bf59f95f6009f8c189e5466890a125d0adc177c51333544acb510c2dba10690b3f9444e2e13ed967ace5d016536dc9eca1e800d9c

/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/63e92a8f-8dd6-4bc9-97db-a7e3df6caa4d.jobs

MD5 b702b601467951f6afafcecad184a8ca
SHA1 2c6a2407630105484ae3b0f11b7c38496e920d98
SHA256 114fdd4f80467e7df69a9ee47d4deb8d29b317e537f48058dc5b7058ffc7bc1c
SHA512 c939d0589dd6da716d20ba1eb7b8fb9a41e78cccafeadd37b78403f551bc9052710e5670942a0bf62ba9071d8782cdcb0a6975971b7fad95f0a0c1b19255409c

/data/user/0/ir.cook.without.chicken.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/335c6409-c93d-47ee-8d2f-1a227bee0461.jobs

MD5 306263dd7518243f29c11a123f6acbc9
SHA1 397a9073624a15e1529a82ccb0b8efa10ab988bf
SHA256 941c0f94a7a7fc40a0be23c55e16f725cc564752041c5064013fee563b39367d
SHA512 f936fbb0f6ef0a50737555cbc6ce72c5b76ea2debc52044bdd813932690b07f20530e229e486b34f6013705d6994ab84982320e2fde977bbac17221c0b49dc8a