Analysis

  • max time kernel
    65s
  • max time network
    176s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    27-05-2024 09:35

General

  • Target

    78b1f8eeb13da6bd497f1d622664f2d3_JaffaCakes118.apk

  • Size

    14.1MB

  • MD5

    78b1f8eeb13da6bd497f1d622664f2d3

  • SHA1

    1f3edf8d270f15312b0fe71b5a97a112245e06a7

  • SHA256

    e83067807fe391cf0b07f2a58efcc9da935fca1adf13bef5ade5c491e77a0fcb

  • SHA512

    1b688c66631975aa0b6ddc3fc8379200bf95b13744523ba0ef35eef3b8a816fa289104f75f3060fd32e36a9724335ca73a3c66866f6c6ad5a2fcd6ffc5b55422

  • SSDEEP

    393216:P8dFKv0m2ak+b0ALzfHepYR0tU3pAeXBPmoPTbdhtrsXD:PQm2Xu0qxR0tQKeXBPmgTbhCD

Malware Config

Signatures

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • ir.ziba.kuku
    1⤵
    • Requests cell location
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5131

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/1f9fe285-f575-4fd0-a0dd-0695f74754ac.jobs

    Filesize

    176B

    MD5

    f56f328eea1d5c96a1b96dbbf59488df

    SHA1

    440c784cacff61932e2f61580b7cfdc3a4943c95

    SHA256

    90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918

    SHA512

    36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

  • /data/data/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/d9c54db8-df65-41f3-b4a8-149f22725a69.jobs

    Filesize

    179B

    MD5

    ac58f99a1b179d71e8621412ad31c6a1

    SHA1

    b51fdad95876f5615735c2ab411031ff67d5e946

    SHA256

    9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb

    SHA512

    faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

  • /data/data/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/f0653c34-32dc-450f-8ebf-fb9aa1c86c78.jobs

    Filesize

    278B

    MD5

    2beda353a0e70c9a68e88fd9a2b812e3

    SHA1

    f8a465b594165af0f90680449c87dbd383e79fe2

    SHA256

    7b8f1b78ee6c789e9c7f191b034b61a5afc9269d82fb0fd2aa8c3a76055fe2e7

    SHA512

    8a0b6d8e3d4f9b792ef3823034094d6bc9423299dc42949fc1add9cc64f046705475831ef9d5bb8f933d698150dcc6f5c3d854f9303f97f4df08a09c8bcccf27

  • /data/data/ir.ziba.kuku/cache/1582435991586.jar

    Filesize

    9KB

    MD5

    e8e0527a01aefdb89afd2c508f131da1

    SHA1

    f1103e6b260c657ceb3d95f1b023af3fda8b133a

    SHA256

    f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

    SHA512

    fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

  • /data/data/ir.ziba.kuku/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    5f5002b054938356da85e163118afa81

    SHA1

    a5913210273644f5f37cacd14c8bba37793169f8

    SHA256

    7eee7a269afd7375faf459de7f497d13a6ad371cc7abbc0696cf9f2f7f9b8cc1

    SHA512

    df70579f2c787f0fee9b6f99cd81abfa6474ab771d4a2e1e75f6a8ce01f77f6021f5618686ed164c44071c034cdbed4baa302613d460bb5a4d3fe6d90ef33c8e

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    87d4e004291d6f4297ca5c9458f1cfb5

    SHA1

    60e0c6f13710bc68ee4782557b33c9623fb19000

    SHA256

    de457adeab09c4694920ff42b7b7c79928cb5688a5e819b157fd6b66ae97a5e8

    SHA512

    63d4d5ab88c77238ea13b65f89f53a07ac6fbe33696abf8df79191db878d95210ae81302b553a4fa7dcc9e14f2dfc27d237c55e7fb591228c56255830fe18f02

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    e2bbb0c4340b42a0741851f132bf6de8

    SHA1

    8d647b96b89f1f201d7af35a0df505e363c01706

    SHA256

    b1885e432945e02a1c0963bd510023f097600b26279cd7d3313ad48095a2cf92

    SHA512

    b49d142fa2cfd3b56f5312509d427ecb4856af25a3d10798fb6c7c136278b2ab36b873928f4bd8694e4efe65b41ca2994c48834744139d2264e265fcad9614d4

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    9dbffd78aa58594e31bd0ce27fd3d08e

    SHA1

    68dc68e43426b54e87ad0c3347231685b61c8028

    SHA256

    e2183cd35680a9943b094896a002c0c4d9761fcc74b9d4ed3f5e8738c2ec150f

    SHA512

    f9d413c57ac1d3748248a17aa6bd83407e972992c4896d3069d3244cfea5a611fc51407d29e7842d7b6bea31da9bb18639fc96640c75e6c7a6bde4bca3606a35

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    7ef42da0136cd7028981b3a897a8205a

    SHA1

    b097792cf4dbcee27fdd82123f859fcce6ee68b9

    SHA256

    7c9d34fdcc8642d76cc394d40f03859d0436c6bc82de673d5868f89b428a45a5

    SHA512

    30ea7339d3c479358286c746c679ea9d38bd3c14e96898400feefdf18b9983c8954bbe0014d59be8dfbea37b83774f9314f62f497e49c4a7844885be8a3d6edc

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    5f6e773ae9e2eae10d19075bfaaa235e

    SHA1

    9c25cdf7bdc2f8b75828e264c2a69d2d044e823c

    SHA256

    09f0ffe42d46986f5ebde5cafe29745a6c1c86910c7ad64423a6d24f297c3559

    SHA512

    ae416ec6f68b3678442494332620b6b45bdd53883cd6b6b5bc7b8714d87905885f0f8853ccd1e2a5ae9472f9bab0bfc16060f70ee739e6c37c2be3852bb36de5

  • /data/data/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    24KB

    MD5

    ae7594f1c3bd449ffe44a260a2de4e5a

    SHA1

    fbdec281a99ea9ab76222a3e03ccd29af07b0994

    SHA256

    be67aa9c3174c9816ee09bd773a2494be270a25d38e373ebe300a121eb1b7a71

    SHA512

    deef517bf7d5482484723f984d5824e7d27e8b92756929a927ba979f7c11729b03fbc3a26135f91cebf0f9716996ee2dc123e46bafed4ddfcaee4416d56b4604

  • /data/data/ir.ziba.kuku/databases/cheshdb

    Filesize

    24KB

    MD5

    259a1e4e7ebc4b0d0341ffcf0c3bc2ea

    SHA1

    9b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c

    SHA256

    4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1

    SHA512

    dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313

  • /data/data/ir.ziba.kuku/databases/cheshdb

    Filesize

    20KB

    MD5

    143ed322aba34b18e4ba464f0e26e236

    SHA1

    b072771fecb1222863d3071788e455c363ae5edf

    SHA256

    db1a37a93b08115e2ad1433f881635056108e6915a1d01f383810d5725a3fe6c

    SHA512

    d8666ecaae21936453f4f5dc0388cb55ec65a8935b6cdc2b9704991c7dc3f12a943103ff350d3230145534707554494f99dcaff6b1fcf0c9c295a28ee433baf0

  • /data/data/ir.ziba.kuku/databases/cheshdb

    Filesize

    20KB

    MD5

    7741e134c0fd0ce00a3035553caf4a37

    SHA1

    41180ebf079dcc61c6f010656ff08569f748fed5

    SHA256

    204bb09ae9afe7e944b4ee977dd4a42ee6e9b983f9ba2133874b034de2cf87e8

    SHA512

    2d92be366d98d221b9a6162ba2ace51300d22528ced54d60be5769a524d3b80d7f822e3cfcabe2bea4c44766ac46531106c965fb26b0225105893febf9277dee

  • /data/data/ir.ziba.kuku/databases/cheshdb

    Filesize

    20KB

    MD5

    71238a2eab270a6f5d99f9d5d5640888

    SHA1

    ede363e1a57bc47127fea41b9917a945da1c869a

    SHA256

    ced6cc5477eebf068c8ec568dac33ba4554724b69b3a2007b616fe0cb447b521

    SHA512

    e0d5ce7f32383b17e493549e4655b1252de134251d2d4be7a4f9c790518bf37b3b0779d6c95b12e1eeab75376807277a45fb476f0bd07b92a5ba4169442757df

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    512B

    MD5

    9a882e6974645d95bbf5964a8c19e74a

    SHA1

    b159bb309eb9bb437c2934d502ef1df977d4dbaf

    SHA256

    256e1c70421eb1392f38eb90baa57f3f1a0e6ac33e81b680401ed85f98c6d4ff

    SHA512

    a1e665c2b5aa242346930a0dd26541583f0325c946f1505209e71a01ec5f578ecde1cbec9db8e18a26376152d1fd9862de355f79dfa04e7c96067baaf2ceb1af

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    8b927abd524a3df93d12decf412f01e6

    SHA1

    532f2edb565164edab1423084fbb0f1abaf6bf64

    SHA256

    b09ff59c9e2d7118f4b4cb517b405f5b849f16562de8ca38840c43c98f001e6f

    SHA512

    ed512018b8085fb6b1b88b0d784189b60f919dfb9ae3b10227bddd9e38b98edcdaad5a626a50de54daea9ec5dbbbffab253dd375ac4077ffa036ca82ffff850f

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    1ce0ebc4409c93a0b9f8c3cbb9379392

    SHA1

    da2ab93f9fcbc7c85f27127ccf6faf7488fca781

    SHA256

    f883fc24e70e140717fea7bf8ac63425155f783cc88a2fe1299a79121944b928

    SHA512

    9596064fe6e15eab5efb127a6b2080fcf29ffda41f8861b233b1186dc957847fe63ade7e9a7b73f809dd8ba519a2d490e09c6edc7d6ad4669971a63ca8a8891d

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    6da074e2745e2976091226734cfe1431

    SHA1

    1fdee0726f39fa33708317fefe59abcb9e8aab49

    SHA256

    a5414524e88003eb4dd20f49160d97ea6e8f3877878b426907ee047f41959402

    SHA512

    25eaff136b8d699cb4bcc7e2c60d36433b6480a8b2bcb599a54867232973cf4a488dc61d3267c6a2c5d105b7ddeeaff04dec46632e02829a0cec70d1cde8c4d0

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    b851f7c145af9501b908ac4497d9b53e

    SHA1

    926c9f497c7477dc3a5ce88cc1498827dfcca768

    SHA256

    dd131e1c80c5359efd4480bd5e27c0ca7d6780eaebc1226c49a341cbecff1f41

    SHA512

    67e9e8f08f4c54c3eb13a62575181377e66e376256903578f7712b03ecd4b1deb9e990d9e62c76687c54fbc3d20fd3f522261c29f539bbe944cace6ed6e3c188

  • /data/data/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    5c4c9761348a9b1bdc91c8eeb7f3941b

    SHA1

    623348b8d384efc63b4203580b88e876236dd55f

    SHA256

    71f4e26c032763b5a52e147e413178e677adcf9189402aacad283a55aecc116c

    SHA512

    659f07f1f803b466ce9aaf5a592a761b836d774f86a4f530640296ad461efb40bc4e2ea4b1487ce9631d977d5175927ec72c1bf1ef30b49bc96524ee9585f789

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager

    Filesize

    28KB

    MD5

    4adb7a83903a01e4bc957df50590782b

    SHA1

    4e35b4e34baf2a9c7a7509acbf46802ce1c052b5

    SHA256

    52109b2a4b4395f5c201a57f25f043d95e4fab7ec7708f0e197a7a97ddbe2039

    SHA512

    3c5849e5471821de9940154a045cde13b0373b93fd0f0d682d64c7e538552cadf48e5d15da5ae2ff1a8fe87f7e55d758a4a4bcbcb4d06bd34e8862be619bca32

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    2995516132f57f2cd02bb6c1f9f90306

    SHA1

    643c34c66076e0aa20b26f31feec8621634754a2

    SHA256

    1f4d443bce689fa32598f11028bf9105f60cfd9274e64223893b4795a2299e54

    SHA512

    4875a032d99f8601967b02d7d05a924233696a029bce83c2178c5826321cbbcee5684ded6fff80de82b61148dea9f367fc6a8ee91598bf6add1fd9ef2d2fbbcb

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    51ec54754be20780cd5333a08d93aa95

    SHA1

    4e29003551cd5a3b14053321c3fab6da10dc9f92

    SHA256

    5768e31d38e7b1c4fdc535041914c18f59fa92dc032b69363ec5989286d7aae8

    SHA512

    8cd1d4f996bac878504bfb1830f09b76e8559f0e05058b8976313e219e5075a513fc6ba7f640ef6ccd1891079758cfb18216df2f6e031e007c7042b53e91bea4

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    512B

    MD5

    333f8b11982b6f6bcee1a1dee6c4166e

    SHA1

    0e20633a9690b60332fca92e19b80186187f34dd

    SHA256

    fc23c2d63eeec5c4680f47d28ef66e230d335556867879059d16a1c4cb43b04d

    SHA512

    155702b50b967632a32f1a555a5fb4d67f7a1581e0901be3806dbc9cd473398bbe587a0eddeedc7a613fc8205876570bf61cfe7ad18dfbf2002c3a6d312c396d

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    f1d42ddd47991089c32999951e69bfb6

    SHA1

    849f48cddffed62687ddd0577a939f53dd32bd5e

    SHA256

    14c9cb798915b122fd67ba490340e7902cf90f870e161c9554527fb432012026

    SHA512

    a12535ec9e8dfa05752283d411dea8801491a9dbe15e37feb6d6741e4e4bb0e5596fa632f1b98567a1e0d465e1a67575ea0c2d6bde4311e75f0bda658facb039

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    ef934eb790eee8a8fed0b6f6a3010d8b

    SHA1

    8e63b075323372529c24c7b884fa27e7b0dd30e1

    SHA256

    1a696fb09986b051f2a425927b0e3492e4d3a56bd5a5e89b1941544ea13d2f45

    SHA512

    4220b8be0eb6a4fd77cd2732e88476bf9f6949f1a63f65c866ab54702d58c3a35dfe0772bdd3c6637451580e502e888f8c0474fe24998ae572d8a9336766965a

  • /data/data/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    12KB

    MD5

    072c884cb0b616cd271fbef664c66046

    SHA1

    5ff2b872d21e0c0001b04d41fa45f01c03ce5014

    SHA256

    1f76be7517f6b602c9a392201c61c62059e83646eeec89fcc3bdf9cf32f04ef5

    SHA512

    922db0d1c806169973b340c03cf39fe5f38d707c760898625342a82b63c22a3fed13f44d10c7e1066275c8665f1236fc4b2a2b9cf8acf4663839a283c855d233

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    250977c31d2d57214e0c619da6a7644b

    SHA1

    fa34d27cbc66d6983c8c3d7afc1b65af22ec1040

    SHA256

    fe913cc2ec525566edd7d2c84a7fb3e6f78d45b45629f22ee6a06a8e12e43764

    SHA512

    cecd1fed712ee69eb72d05215feb603833a5cb77efeeba572b13225d2a5820444d9459e03ee7eee401e76cb9b4f11271efdba04bd01098168d42775c8a9ea30a

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    0d1d353a7e06edef2b8b52d75ca4afcf

    SHA1

    a16ee7caa3ebea37e98c8a342be8ab9ad1073654

    SHA256

    b62ec50ce753d276003dcf2d798b2a8d04f83bd914a90ee34a8a2d38fe432984

    SHA512

    a9b57739f54ad81363524c5e7b88dc73e36a075c6e033e7b7bb26ef3657a663a11fed3b86d4026ec4c76cc0e77ed0f90f50f4d32aeb72186ae9e87b058e00b65

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    5af835e7600fbcd84cbb287a255f56b3

    SHA1

    a0e7b9b939ea94007b2f82c8e745bfd559df1950

    SHA256

    28a43208868dfe8f733252fa0c2c11a1aecbd99a6a22c6442635173781204620

    SHA512

    c964fe36e9850645f10bbb150dc8219aa4d7d9b042fc4fe8f18e43b4c239ccd36670da2dc04bd9c963f5f376e6be624abf43feb7237536f5a0c4bfa0248a2f05

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    c0d4b95f5605acf215ca3350b96aeaee

    SHA1

    3086c79326509791fa9d53bbb91e0eeab168d352

    SHA256

    bdd1e6bb5313bac990be41c4a36efff27e47d492ce16153d575cb15ea621f9db

    SHA512

    d5bf55e2b7d43a45248fdfbb93df18c6b78a5a68c5548439ac25ab3e8e2d154b20507b2c80820a579de66199596cb836418a9645eafb35a3d73ad0e97fbf8445

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    68a8fb37be8027f18fe063b02c581b92

    SHA1

    88d5580dc1f3ba34ab6de8852e79048ee46030e2

    SHA256

    dba37972d50a47db42a93ab38afb4b0f7a85321bd1bf199bb1d3f5f1d1dc4fce

    SHA512

    f4fb88c7cb67c3aad426d0de5981341fa41329f50ec837f8f0d66259e84fe3a84210fd83d694569547630112176d479cc806478ab9ea6df3fd9771d96d6f742e

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    91159dd2d2d8168aa8c6a7dc7fb0076d

    SHA1

    0afd6af9651421600261dc752f9f7da1ac6f4a86

    SHA256

    45c36c912315415f244cc3af52adf6c099f9569d48a92f7cb80c4ba3629f40dd

    SHA512

    6b807afd551dd0a43455911b753b0bda9f89c3c39cfdf1b733dcb6f829fe9a03786caf91ae30200faf428058671d7f3b781e908503e3849f30099f795942d171

  • /data/data/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    356582cb0d0b8d14853e1976119f2f12

    SHA1

    bd9163e75eabd7bf3d9535d3a995f8269a511d14

    SHA256

    7745d3acc265858cb01302d07cadf245c093154309787438d7761de9925e0694

    SHA512

    84d822a2a77a4bc24904f1922e2f166a291fbe6bce15b6d8cee08d65caad0bdd8c876caed678686552deb8047a25f7242bec0cdfd9e788d86b8610412d8b2737

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    509cfce954027c7b1105ca5b97c018b2

    SHA1

    80db6573043b887ddf5421544543f287f6158b01

    SHA256

    01cfa9eb10cc94d809d80c7aebf3b28551c454c45e999fcfda6442a5c46f3c09

    SHA512

    435f1e6fd8aafdadef9500a2833240c466b937084c10f0c8d180ba4c4e0a8b114e738892204ca3ab723a3388db90b6685a5902d329b18374c9b032f8a0a43ae5

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d6ea0f3116d6863699a23ef2cb39f87b

    SHA1

    7711f2fb3812cbdedb1fe9650df46c443a0b8214

    SHA256

    b18732e92e2fb9fc7b860f0be8722ef7459362ce609d0fdf1519c549c1cf5aa3

    SHA512

    fdacfd825ccd82bb546500e3b049d6169fe0804d9f9b7332320a59ceb223509a1f5e5c0463680a6a5a478f1d9f548130591bf97cc230eaddf2ea80269f65d1a5

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7c7ff19012a7d3439c0e8f682590b5a7

    SHA1

    168c2fd4827c6d7b408968f5d3000b3db46d78b0

    SHA256

    7deecdb1446d11ed0598cca25a71594c8090d43e58e16e92684c0c21d8cd2c27

    SHA512

    f5749943fcddc5d0df8d5c0c8bd5c492913a693256b4eddc2fd02199bef89cd238ac8395ae196e62090fc4ca1e87a679f35aa04d5c87da55d14acb754d5c4dc2

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    847fcad4256817d0f88d0d4a24d84e8e

    SHA1

    2a3060e63db577ec4c6b2a0a302a0bb32bbd77f9

    SHA256

    55ee9c114fe30bfc7fc20a66565169416b586215ba80f0b7b0491fa3fa04d2b9

    SHA512

    886a7123b9579b625b2abee3b09ae8df90bfe0bf57fb34fb11d559a370aca9d59e92a073884d1d17a3f839e14a0cde1d3f4522b2c0b2776292780476a8b636f6

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d2845eee747d763d7fcd0542c31e4578

    SHA1

    e3c77884173f1d760fc4af130a3572094aefea10

    SHA256

    acb3d51741d0541bede39514a7eb7329b793164de404bd840abc165ce01a1314

    SHA512

    8e116650ded8ca5087671390b11811512c72b1d235fd8228d7e6952dacaf4df79380e6f0be1b5568ac831696956a615f6ee0247d138c271ed042e91cf6b6e218

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    5e714268965229e1421c785d03832792

    SHA1

    3c398cb0ad153f29d3c05099b9706e5af0fcd798

    SHA256

    4e3c4496a1f0e0c59d71455c430f5748b03930c0d278969196a0aae99afa9bb6

    SHA512

    1875a9c39ec9d2a7926657435174165e6fe288b0a81097864d04b025c98b442121756920dfc6d9b23fc0cd293e3d5fd96dbb1a094f79d3eb391a09c7f171a030

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4d895d5761417d100b86c6b7e8573ba5

    SHA1

    65821c684a4c8156dff7cda2c710a674cb8a9a55

    SHA256

    293e9c3ef663b01abce0be089887504fc0014b974ce877238dff1d8b9c4eb5c9

    SHA512

    e330e8c5a918ad0ec633b91429a2d5f77d733d781513d2c3119e667b724afe32f441b54122d57652706e722f5e5eab7d8d630caf648b8294286d97697931bc0d

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    214fb8c1d0bf63b139e8b8b7c7170cab

    SHA1

    a90df4742edfa9795fa79b01b1dda821871ef8f2

    SHA256

    dfae44d2a3872b79b366fe81130623f61ff62151c2376108fc9fa766098ea6bb

    SHA512

    d8ae6e50895c53c34ceacf283dbbc2403f06a21acd3870eef8cd813b0f72acb502ef53df30e820592aedf920091d186fdf988a0dcf09d26c4606a053f63bee5d

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1d7c90ff00c7bf5cd0a9403d8ab2e21a

    SHA1

    d8d6e66a510b67622d862807ac0d56725bf58ef4

    SHA256

    d2a70c846faf0599b45169e7eb1d18f00d8099a35f8a9d9e2a76c4d4ab7fcf76

    SHA512

    5e07614f2b46de5812574b4315667fdf7cdecce44ff574a0bf4b0daa88a3e8480864e6cb786c5e31806f0914b94e8c7c4b92afade32dd34b94d9cb5e2e3ca26a

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    840b47f18d4027e9e256b4a5071f0265

    SHA1

    b102a96e8d131366af51d06b4f42f2323d31b925

    SHA256

    c84e39b7f98dc673629d786ea8a5c8b5213fa0e8a6e1bda054acc11ebfb086b6

    SHA512

    8719bb17748fb830f4f5f57b1f537781960a2af2caeb00cdac55cb19e4c8e6144fccd205f19e34bfe223572348e8b93e757a8490726ac48129c1e1d57f3f7c66

  • /data/data/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    500187b6faecef11f3c0b600c60b2f92

    SHA1

    1f26f2a1372842ea9fcd41ee8eb259b32f24d23c

    SHA256

    abeb294fc222fbd99d6983e59d3602670d5827d1ed53572aa1ed8f91b63815a2

    SHA512

    0e69603b0b32b7bbc529aa2ceacb658d5fe2f4dae72b8f90c792894dad857d21450be096fc8e0f69a26f6b2b26da5ecaf92e8e5f34f2238af16545c04c594aa7

  • /data/data/ir.ziba.kuku/files/info.db

    Filesize

    11.0MB

    MD5

    8bedf997089a2734cd138da037dbe00c

    SHA1

    86d4064bc54dc8e7d06c0e03d21921f2f5c00ecd

    SHA256

    742b2d55b43405d8eebdc38cac728b3c0f63e1af3817d9eade6f67cdaaa73414

    SHA512

    ce38ef86fded49c53db632126b3b621efff4eee6e1478ed79c011aefde72cc6cb4c63bca60df340af1ea6846a4deefe3b63efabdaa804b698b5144dac1f0da1e

  • /data/data/ir.ziba.kuku/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    df88a9b108314dbf96029396ff3009e6

    SHA1

    2abc0106ee62eaea15a59b6c1348905e9e9f17db

    SHA256

    430ad806173274861199b6c87ab5a3bd4ccc3780a7d442a59736d76325d6ab22

    SHA512

    4075219995ead45334551997035bbf34589eca86a89f7504ffd27b2c57e794dae8ae1bcf6a7fab7bf984a9292b0436da0468fcb1c9147dcb5efd2ec393c07ec6

  • /data/user/0/ir.ziba.kuku/cache/1582435991586.jar

    Filesize

    20KB

    MD5

    fde2ee00cbd121cfab5290b078aa3ceb

    SHA1

    e2b77d5320e155e413d040a8c20020962065b2f8

    SHA256

    2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

    SHA512

    a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56