Analysis

  • max time kernel
    106s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    27-05-2024 09:35

General

  • Target

    78b1f8eeb13da6bd497f1d622664f2d3_JaffaCakes118.apk

  • Size

    14.1MB

  • MD5

    78b1f8eeb13da6bd497f1d622664f2d3

  • SHA1

    1f3edf8d270f15312b0fe71b5a97a112245e06a7

  • SHA256

    e83067807fe391cf0b07f2a58efcc9da935fca1adf13bef5ade5c491e77a0fcb

  • SHA512

    1b688c66631975aa0b6ddc3fc8379200bf95b13744523ba0ef35eef3b8a816fa289104f75f3060fd32e36a9724335ca73a3c66866f6c6ad5a2fcd6ffc5b55422

  • SSDEEP

    393216:P8dFKv0m2ak+b0ALzfHepYR0tU3pAeXBPmoPTbdhtrsXD:PQm2Xu0qxR0tQKeXBPmgTbhCD

Malware Config

Signatures

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • ir.ziba.kuku
    1⤵
    • Requests cell location
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4657

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/9d0b8f83-e8cd-4d67-b1e3-19f3694ea627.jobs

    Filesize

    176B

    MD5

    f56f328eea1d5c96a1b96dbbf59488df

    SHA1

    440c784cacff61932e2f61580b7cfdc3a4943c95

    SHA256

    90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918

    SHA512

    36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

  • /data/user/0/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/acc88c35-6068-4501-adea-3844dffb7a86.jobs

    Filesize

    278B

    MD5

    a23a4c61acb2e05b9e259ddb5770e6e2

    SHA1

    f55e68345c2f4a64bec8ada8fc5fec3fc4f73a48

    SHA256

    cb8d1058c1ecc093378bf7310d80f518115b8358e4e42d3bab9319c8f3b47787

    SHA512

    f3318a940eb6b79a318ff7f34209eac33472b883332283b991db52ee67ccfc17de2ee41d73877e7c2e3d080ee7b7b398ece0bc39b3c89531f95874938878c4af

  • /data/user/0/ir.ziba.kuku/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/f6e3e1af-4736-4cdb-b8d3-d0cc9a19a2a4.jobs

    Filesize

    179B

    MD5

    ac58f99a1b179d71e8621412ad31c6a1

    SHA1

    b51fdad95876f5615735c2ab411031ff67d5e946

    SHA256

    9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb

    SHA512

    faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

  • /data/user/0/ir.ziba.kuku/cache/1582435991586.jar

    Filesize

    9KB

    MD5

    e8e0527a01aefdb89afd2c508f131da1

    SHA1

    f1103e6b260c657ceb3d95f1b023af3fda8b133a

    SHA256

    f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

    SHA512

    fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

  • /data/user/0/ir.ziba.kuku/cache/1582435991586.jar

    Filesize

    20KB

    MD5

    fde2ee00cbd121cfab5290b078aa3ceb

    SHA1

    e2b77d5320e155e413d040a8c20020962065b2f8

    SHA256

    2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

    SHA512

    a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

  • /data/user/0/ir.ziba.kuku/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    19f254c3d228c389b0f8cfd9b6312b0f

    SHA1

    e97013337826d02ea26f264a76c9a16570b87786

    SHA256

    fdde6299876940da06386f5c0b8fe251c2ec1e5fc268456b749879b0257f0854

    SHA512

    de9baa8d9d4fc399afd04c1e2f21a9e5adad1f02794b69dbb7ced7969cb36d145bfca2aacbb95317d5b72d9b2f0170c0eae1b48d211c0d0aa75f1662ac37aaac

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    a145fbda78af7a3ac683a639d4f860eb

    SHA1

    5c4e0187352500090e9189df0528583f8599a2c3

    SHA256

    5b6a13c95fc718265ee236c0e58ec9deb202089a0bb195e848c931104069437f

    SHA512

    87813d12b43ee25d07c1075e4fa7a2e445575ba85e2ecf5f3f884def54d8be5fa2f6def62878c6f3a7fa28ba5fdcadfd8ed084fefcb756bbe4c937d21d16bbf2

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    9326319abc9b37968cd21e211e680a30

    SHA1

    1d9fc6f09cdb369bcc7d3fc80a09ef4c6437cb10

    SHA256

    9c0b6d83b9b32e1d7ee1d85850a07f163232d1055d056391bf26f9b5181ea696

    SHA512

    c53e13e9551a75e5b1b938107d6cbe10f7050eec53153634c5a64ce0a8baa28d08cf5db64ace5399fa4217ac6ad38899b168a1c495095e00ce9f45746163184d

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    b66c898e091f982514d478274c2cfe11

    SHA1

    d734fff4e2427f676ca298be872bbeabf7025ffe

    SHA256

    a50383c713867010a19c9fc620d2ad8247f351a3e479d7f4e4de4e833272ae3e

    SHA512

    037a3984b8a7828bfffd0d09a5b411e24179749db7457a1517852725b1da1a963f5843ad486283753b4aa84fa927bbd54816ca2145e31d716bd211f242afc477

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    5272b3df4911f2288cfc8fdde406f41e

    SHA1

    c992311bce8cd08ed5456980d0096d981e8b1c74

    SHA256

    0e33bc9d35282f3542fa4c1d18ef975e4c6752930debfbcb96b3a92983acd0e2

    SHA512

    ff39cdb8c06f301e01ea4490b21646b46d6075495f965dfec576a6646ebacfa331219190d6cdc7519b65bdc05a4a1f3558509d7ee9ab0f4a3476f0437852966a

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    97e3eec18b0c1b8864db7f3064fb0c46

    SHA1

    9e2f15f79e58295a8cb58195914eae2f9f509bfb

    SHA256

    1897a13ae0c7c68681e6719be0c387077c4a658c960781ed2c79f89d93764c4e

    SHA512

    ed473c26f2090f2767cc3cd1a87236deb370aef26e769d59a96bc161aef07b03a4e5018e97486d5f610e955a9ce7b3e7c134164ad6928a070e9c7bc79af83114

  • /data/user/0/ir.ziba.kuku/databases/__pushe_base_lib_db-journal

    Filesize

    24KB

    MD5

    c84dee9cbb8af5c0fb40bbd26beb1fe8

    SHA1

    bff5ac2a18d742616aae40c2be7bcc3b83edc71e

    SHA256

    95798e6dc29ada873803d1923ae82757a8d6f0d46c52f6b5f1b50299bf224861

    SHA512

    a09617f4e67ab829d90c902c08f484ce64102fd203fe9328866bd8074341459917b3d44f2b7e63bc0097ae278c6aef6e58f1de038290c63090d0b4f346ba4d23

  • /data/user/0/ir.ziba.kuku/databases/cheshdb

    Filesize

    24KB

    MD5

    0660d3ef5f0245096a9fa0f61d6a8666

    SHA1

    282222362a5a05e3153b7f6b49ef35c667b19542

    SHA256

    1091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2

    SHA512

    18bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7

  • /data/user/0/ir.ziba.kuku/databases/cheshdb

    Filesize

    20KB

    MD5

    9d795d55388ddd51603dd5b9fc9175ab

    SHA1

    57443d4d437173fb2a5a39cb21bf9be298fc3deb

    SHA256

    f1faec60f808bd84ac15069fe4c61e3fa1b5f5b294a2d64af9f1c5fb2cfcb1da

    SHA512

    e1f2684dc693162d14d647bdd30bf04dd34f3abf4c5af5388951d3dba60a4db5b3cc1b25ac4b30332c77baab15b15df9a8fbf9b62d261f1c7e13dae71c0b466d

  • /data/user/0/ir.ziba.kuku/databases/cheshdb

    Filesize

    20KB

    MD5

    70a15274db6bb5918af1bf60293a6e50

    SHA1

    868c4ff4aaeb09fb4282435790da3d4d0993bb36

    SHA256

    219cc1587234655dbdf7fb7e9ba8c13815866b0c3f04f51ddf7be69b66024802

    SHA512

    0b4dbf01ff6cb8bea0a6e6a4c8d24b34564428648ba68f6c4f16a6d0d63795e50c4a570325da249feeaa43c5c24be38b33165af473cdba29da1a3c16804a2084

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    512B

    MD5

    ba7cb0438a4fd5716fac4423a1d3168e

    SHA1

    1fc41debe6a81cb31828cf05951a153ee5f31811

    SHA256

    4b246165ab8b3aeacea9eb76b648ee42273036c54a66feb8fe2600ab05be455e

    SHA512

    c3694935b2337431f068592789a70f3da0f124127bbf9b974ab750f61fc4b380d32897bec25e63412c7089c875bb2f41ee840496a09f6aa963044a66fe6a36cc

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    4c943c929256cf6d097d13f3d4cb539f

    SHA1

    ea8981b82bb6308def53807b71d6310c9cf5404b

    SHA256

    336ad9b14bc7b4a6e329e8a09aa59dc93409b12bf169040ff450642d6970bb88

    SHA512

    e5dd2f4738ec91b0d3c7acdc519f25db2438b4c50666d5dbd3009869caeaac1bd218283d9a80ebbd369d770176095f91a05016463f9af7bc387fcf2ea4e48052

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    0ca68ece9f497a1cc99d8f48a6b01446

    SHA1

    3b94b147e4dabb1cb228b1fbd0a627d04a814c61

    SHA256

    21ded031d1a9fbb79928111e4e211bf569fb4beeda04ccf4a4550c7c5bdb1b8f

    SHA512

    9ac88f72666ac65d64679f408458016574196c0f9049e78711ce59aeaa48ab6143ecc552e454ca2c855cdbdc4b031255989978f343745e2328b4e07e0c5e4145

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    8KB

    MD5

    f11a8711bf00682e143d214ad3ff4cd6

    SHA1

    ef5f1908304ca11be09cc43e4061f52a91b3bf57

    SHA256

    4fb8d9f78b87a57ea6632db507abc3f76d5f795ed08bfde2f46c2c66e4cdac4d

    SHA512

    63c71076b16c4795956a345a6c0ab4e7e87197becede09f66b07aa455d6dfd106f21d9141df2f72c3c157e5fffc5f217a84a6b00430b89787632adf0e3a30d84

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    54589528429b090cd4fd19d25bd2b1b6

    SHA1

    e1b6cc59d38803a77b744b44e3588aed5a34e481

    SHA256

    284632f7da0856c967ce31f02ec7436b7914d387521dbbd5030eb5d819fba2ae

    SHA512

    0684c41fe3baa01ef2767d7eb2c1a1f0f591e1b4492de2d7aa39874c24c9f8cfe7fa7bfbd03a6f8bbe184141b60f17cb00739bb3dab6152c051462fd266bb1ad

  • /data/user/0/ir.ziba.kuku/databases/cheshdb-journal

    Filesize

    12KB

    MD5

    f9236ecf2974d43957b06b73e8e08160

    SHA1

    d55d692a52d45bf9d90da2559e3dc66f5d726466

    SHA256

    c29bb9a95220a9c4149fd8c85a7d450763e8af31c32dfc1865c4c95bce768a43

    SHA512

    52bb3be6d7cbacbff1d32a16a974afa901cb129ce7ff70b2f5eecd05b98c2cb2da38beee61a87f382c25f87fad0d8e88df3c5cf0f649c8a678d555afdeb37ca0

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager

    Filesize

    28KB

    MD5

    acbe6507c4ee08675128ae77ea493add

    SHA1

    d609289b26fabccb90251e86b7169271e7c5a3dd

    SHA256

    465e665486cab28a43fe488ed1747ec4e6a19d2aad178d6fc25a60e1831ac550

    SHA512

    8e9d736064b7b937a4e5e19ea8e73abe19e1f3abf70ae2f40b641545bdb08799e784bff3f6610af2ef471582591c0dd5ca1db16d4c2af685bea50927765a126e

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    c25046750a017bc64d51f9735b070762

    SHA1

    c36fb1cb3ef804cc7caae06960822e4830a0df42

    SHA256

    ff15910ddda1fa3489571f2da482dd22232483d78a53aa90dabdbee49c0a1fa7

    SHA512

    2f054b275803b410799319906552570fcd45e516aed699e1a43874454651f7969393db076b9c9ea5fddefe4576548593d736df8689b7f437199ddf5846425736

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    20KB

    MD5

    b8763a4c574cb66c3174eb8fb666b893

    SHA1

    240fed5e52b5fd55014fc3ff52a6c16f53a6b313

    SHA256

    0f503b7316ca5b5dc3c082ea7d70c2075920caffa4e0cea0a619e02aba7f359b

    SHA512

    92ab677aa3bd441184b9ee7e91018e2effa7bd11379904d0016302381dd9522859770040e5ba4b72dd5fe891854048f6eb6d9873c33b0fe76d32a1bd00069052

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    512B

    MD5

    06cdac3ce0c65fb8df827ce91548281d

    SHA1

    da588e19f11fdaf638effa4d10a21b795f71099b

    SHA256

    878efebd04a61f145b25a9eb62e360dae46477514e7e5a9b1a0f1043289990d8

    SHA512

    a4300323f74264409a2bf42ef140c687d12fe7dd8e20514e078ef0f8b7143299383acffd03481d80ee0c678c290db92c4d8fe2bb043e471202dec254ed206930

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    2f3438526fe1133e611782ec27021fed

    SHA1

    f391fde74d576baa5ae09748564b1ea1daa6a6c9

    SHA256

    2660a2115ac534891f9f9ee006e13c515cc756252ed1aed13ff64b7616b83890

    SHA512

    fc2a1430357206123cf0e3cb230e450e3f4d732907eeaf591d28d2a1ea45b0b7e9b5e1b36d989d0a714c6287bb434f3a09b1aca6c60001e5d7a008bfb9c13715

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    8KB

    MD5

    6a31abefdfe3d18e80373c7d2c6c3e20

    SHA1

    78ef1c130959d093ae8cf45f4176596832e98bb0

    SHA256

    7fd76f4410f427e8d9904719ce5c584425a484c2d1e736c1b092a0e329000bd5

    SHA512

    d7036087591968b0cea74ed382b20fe739a8e1424ba5616d30783a3baa3a4e5842800c2363e436c23998a786719babc2f7889890130746380ffb4c895344c959

  • /data/user/0/ir.ziba.kuku/databases/db_default_job_manager-journal

    Filesize

    12KB

    MD5

    e315978ad4784a033b48dd99663cca9f

    SHA1

    d729f21bc1f34c5ba896ceb119198e3a6e1116f9

    SHA256

    1062736128dfc87ca1f1aa391d261b56288eac69a58f8bab020aadde8e49cb2d

    SHA512

    b0262f4285e2cf6b5889c1fcb639bd7f4d38a000437a42b0201c737fbb7e393c92916bd086dcc23b358437a52cc9a0e26c3933ee56544c4116de19bbe0b31015

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    387e85f5daa29343e1e75576a3c40fd4

    SHA1

    a647ff7deff08673a5ce792f896250fcef65402d

    SHA256

    8736868cb3c3f001b0e3de69adb63825883b26c59761de7d1e3268a100b5f02e

    SHA512

    30bdf48e685937674e00c5d84be99fc9138f746ba627fc5d3ff0602810f6e748911e824b2864b311c2704e76b345bfa23cf9af58e90086d2867999b856093cb6

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    df4899ac5f0b5c86fffc1f8c2642972c

    SHA1

    ea27c5f8ae737f64284bcfae22b6c0c8ce514ed3

    SHA256

    1b760b6e9259afba9cd01384c846a333a77e93d689cec0fb756ebbb5b53a0019

    SHA512

    a3a817355479a1e74eb74ed6ff4f638c60553754d5f5e01dd0635000706e3d41f7eee5872bdc6ea7935727c2248f7c7bcf4e3f6675f279d082f77dc44aad6d21

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    0af3b5d31a10128cff8c6e2a524bacd8

    SHA1

    60e2402c17e5ad578dda5d63b300f93cd44f58aa

    SHA256

    a10bbeeba74178d578d177c07669e5309c849dd036acb865132a79cc6a7daa53

    SHA512

    304cae3580117b60b1a6f450b20e79f852074a64173d7c21b13fa1b908c8135881874f12f7446ee1f7e47befc254f01be2cf62b76710fef57f8f44df78eb2886

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    2f3f1271e86d9c185f05b655ca0c8c8f

    SHA1

    4bb3e7ec4b78e9d58c541c32490f90569448d038

    SHA256

    776d7464da44b5aa68b3e20876fc56e83dd7aad4db5fad919ecb56ea16a8b267

    SHA512

    9c44c3d6d6ec687fbba7af927e5fb1cd5b7e1ae3f5d568b127de292e500ddf0b404d4f22174d4cfea59699a136abbe6c86d7cacd596e41ec48853f8da958202e

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    d503ecaf4b16af3cc46c8c4e7edaa6eb

    SHA1

    5c8e54f9789aaf324941a1fe3ebaa6c74d3898b6

    SHA256

    cb485f31dad45b915942c298ad923ddb30b646c81390b9c4fe5441e245df89f9

    SHA512

    470c07143c3ca423b63a9640d6f87feffa62a06c2fd2648857726c9379e986228c416cd7848d2adb58b0e889911e246deb542320ad2a0c9da46fe92bf258176f

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    ab01fa43a74d39cf38a0fc51faf86b02

    SHA1

    33a62786b7c55093c4d3f463c61e0b0d9eb3aab9

    SHA256

    0b9296755bf98f06dfa92c66dcae087ed30ecc0466e4eeeb2cb457ae14a7ef4f

    SHA512

    64587cf4f737eacf09292c90b812a6e82d8d221fac6f512cd4d665ee2877f138cca2d1e605082c86b52877cc419999dba4bafb50048b1ec550f700681647a4d1

  • /data/user/0/ir.ziba.kuku/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    58d46c058e9aea00a30deed30545519e

    SHA1

    04e6c6fd8a81d338bf9aa2157d62cffde20609f0

    SHA256

    d977a8e8bab147a996408bfa97c4b34fe93e8002d81fac3710344e4e0d4cd0c7

    SHA512

    877ccbcf00c3b251122a7c7993a4be23564580b428adf1c5c00362de4cb57d583a809b78d21f7a54688f00f29bccb54a4e924d84582685a5c048d75464f32b28

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a87146d523a71a935861a85e1ae0c1ac

    SHA1

    9ea31458469d57947f0cbe35183a17f412f15dc3

    SHA256

    1125f74e501c666e94ae4f4f086e81dc38c76eb89ea09ea5c5898360281863f6

    SHA512

    7944f52d5fb327f455f7316831942af41591ead41319ddb349082910f3d9ba89059c6f5fcd1bb0e3adcf0edb441e43b0ca77491f86894aaf328ef3e24497a092

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    77ece321274579ecb00ff2ebefd62572

    SHA1

    0dfc23deadc477947d9e1d22a9783bb62cda8a39

    SHA256

    0e62c1ed45051fa4d95698dd5c5b2e223c0f1f2b0920cfc44c1d0a70c986de0f

    SHA512

    2682f3cf4d6be407400428529afb4d27fc10d3cc072816068989d29e746a40774a572adfc67eea617043a2b430a748cc02f8de646ed00a7e9014cbb8f5ea5cbf

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1264e7a8d78a644c72d955f4659d7670

    SHA1

    426f2cd5c6933092cd3b1714acb0c3c9f72d739b

    SHA256

    1316bc795063415e78c9e31dd768c7f4c29c337c82874ad5b2afeef008d67de0

    SHA512

    9a97ea1c8f72cd1a90c9fd733051c880a215a5514be49575707420336784a6ce89f0d3b9ac897baa757b2704fa7aa19cab2eab6f3eac99b16adb706eacb42ce3

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb78f560fc67e8c1d9d4dd30694a050d

    SHA1

    a9c088ed3042cb6bac9e15fd29d8afe2d8f028a3

    SHA256

    ac5d5bb67b5902fd0cb3ff67d7798abc5183e360be24e680f616f9320e4dcd46

    SHA512

    612761a52baa11903ebeeb8c3bbbaff19e069b4bf2f2cc276b974e7dce398130544fd65b3b175bcfae6fa83bfaa38313d486fc6d7d9c4e36c1e91f09f807e1a4

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e11508d350c851e5ff3f545f75b13340

    SHA1

    db5dca6efba82aef45e193a1b812cfdb80883e06

    SHA256

    88d8c9eadce4fbd9b93b7400b96dbc534dc0d221f79a8a1a38e456e06ce49f6f

    SHA512

    0e3a2cd80b52f60fb1c070ac99cca14d4579499f1bc498818c57670fc4e79d9c75ecb06a3cd2df16510a3649203a613ea8489fe999cf9475b8558980cfa9330a

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    6c2edfb821c347d1b168176074b939b4

    SHA1

    f73bb2583923d87d4b665396b8319404c0964007

    SHA256

    f994871d1788eaa406eb991071ecc1b2cb4021194d74240495ccd1416c0ff5b3

    SHA512

    004d8bfaa2a0cd7847834f99f1c81d6990782e19f8527b4e19433f64efedbbc9a0a8cf55cd1165c80131dab2419001072e52a5cc5fb0d6b41c429e46b3e3bf33

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    addd7b7c67dca813f526c4e3d36fd993

    SHA1

    31fb1df3d3d2157e138f9c6848a58aa181c5387c

    SHA256

    c74ae6b6693c50777ff5f45dfada3b371b666f2b474fbf5bbbd31e05dcb629a2

    SHA512

    97a55fbef48e8b95baf8964cd0b4d5c3b42432ab6338a9c3c7607c9c6a5d4ffe129de7080d7051f11b27313dd099bf85a04c0d6e226a8864474fdfb1406e3846

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    a998252f0ef7b61d1e463687fd866fd3

    SHA1

    816ce6dfc4fea75462fca28f1d7a0c3fa8f05d61

    SHA256

    410164347ee07d9778a892d210ade7e12b04bd80cbbdb1880797ba991d9d2665

    SHA512

    055c8c30cf61a2adcf06c5de13376edf19f618b2c4895ac7095e649c643b94a6df2c1e812a3663d5e28f380b7cf746c6b288288d2f139524bcb88c8ee90c0d12

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f7e66894f3efae38581cdc93c4a49dde

    SHA1

    6413a3b8995f39508bcd2677e4df4216e0bf2b44

    SHA256

    f5557e916a41601067793ed1450e107de9de8693b01d4bf545932fe17cbdb114

    SHA512

    cd9632012821bf4193034c52593396b2d4d52900fc38b9d2c8ede2baebe16566bb197c814567e167a5468971dfa871b829d6803c10ebdf6de348be60299f45c6

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8d168bfc7b1ae497c345d78871cc91e7

    SHA1

    152df08780c1146ce2bd898eea80653d763db706

    SHA256

    e2e0b6c5a1912cd740efbe7c5f2d54ba27d8a11757e25646f244452ec5b61251

    SHA512

    654644e9e2a61e39ac041462d2adb18056c189d1560044c3244a2631701ebace1cfb31d86272cdd025b77241758aa61818cdcdcc191847618195981cc52b63d4

  • /data/user/0/ir.ziba.kuku/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    3227646332cda47db869288e55e75ab8

    SHA1

    4e802c280df3218583985a929e2dd309702a0957

    SHA256

    91a200b344cecce5bcce9cc4740036c1d18d69ff42607cd377a1d7ef98c6a649

    SHA512

    d88e32458cee4423c21df1dc03436129a76d0966abe1cdff07498fd2f0103e48f3fac896a871e39542e7fe8b4339934941d80609cf508e393cf701cf03ae5530

  • /data/user/0/ir.ziba.kuku/files/info.db

    Filesize

    11.0MB

    MD5

    8bedf997089a2734cd138da037dbe00c

    SHA1

    86d4064bc54dc8e7d06c0e03d21921f2f5c00ecd

    SHA256

    742b2d55b43405d8eebdc38cac728b3c0f63e1af3817d9eade6f67cdaaa73414

    SHA512

    ce38ef86fded49c53db632126b3b621efff4eee6e1478ed79c011aefde72cc6cb4c63bca60df340af1ea6846a4deefe3b63efabdaa804b698b5144dac1f0da1e

  • /data/user/0/ir.ziba.kuku/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    72895b52856e14c8c0a3d505d49ed4c6

    SHA1

    f5f4bd5b4cb01faaa5d419b92697fc05cf7a2f49

    SHA256

    02f55885f0c3b8429a17d933ee73df4b43a75fcb65dfdb8cbb00b53a36a47731

    SHA512

    419f2f70f5903508030338269de6a13f7ab7960a354ff6d3163008da8576703486da4ca60ff7e9bbfc86d02de4dd85a64095f401870a54e0d319e5364eb63717