6d3e4cebed2dfab0499a6550f971ca2815ad9d1f012da689e1c3099ca427660d

Analysis

max time kernel
3826490s
max time network
155s
platform
android_x86
resource
android-x86-arm-20220310-en
submitted
21-05-2022 00:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6d3e4cebed2dfab0499a6550f971ca2815ad9d1f012da689e1c3099ca427660d.apk
Size

6.5MB
MD5

4cd1987454fc68eafb95ccf5ed8f8c17
SHA1

a38e823ccac2ceb4a72b9598801be725d3be5a94
SHA256

6d3e4cebed2dfab0499a6550f971ca2815ad9d1f012da689e1c3099ca427660d
SHA512

8601047a5f134beeae9aa86bd103b33cdd63540afc4e8523eb9c259414805f631e6dd6ebb61c5161fd06ea845b8881dd40519deaefff56ca3f9db50010d74282

Score

7^/10

evasion ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

ir.hamyar.eshgh

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock ir.hamyar.eshgh
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

ir.hamyar.eshgh

description ioc process

Framework API call javax.crypto.Cipher.doFinal ir.hamyar.eshgh
Checks the presence of a debugger.
evasion

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.hamyar.eshgh

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	ir.hamyar.eshgh

ir.hamyar.eshgh
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:5350

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ir.hamyar.eshgh/cache/com.batch.tmp.dc679931-eaef-4761-9ef1-15980484bfeb.json
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/LocalCampaignsSQLTracker.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/LocalCampaignsSQLTracker.db-journal
Filesize
524B

MD5
62865e3dcb27be5a041e0c479e46b263

SHA1
78f9d51327c99f462007d0a340f8643722c21fe0

SHA256
41e74482c7754ac586a262a1d47d7586b7949d3e81aa1f180a66c39d3db97a20

SHA512
558db91264305035b115e7cccb058b4c91198d5055f77ce5e46fb08cc8f549fa9655365ccf093a4dbdf3ac8fc17b82389f91b294b3d2919e311a99304b57c2c7

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/LocalCampaignsSQLTracker.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/LocalCampaignsSQLTracker.db-wal
Filesize
36KB

MD5
3ce988891f81bd58fe16d4e3a32eb1da

SHA1
af5819272eeed678d7f2f588ef9711981e70e50e

SHA256
4c135b239974dab12bbfdfca7f5368ec30fa23ac902162c5ee8b58da13ff87dc

SHA512
afb9acda2c606405aa1007f48187a9bdaccd614545a72fa99493d69c62cba9f6a8130dd47b099539aaf5bce6da71db0e80db09f0a8e39fb55bc6bc9a8b42db20

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/ba_tr.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/ba_tr.db-journal
Filesize
524B

MD5
d51468efae5190a21a5f5f755c60ec3a

SHA1
58e59994c572da8a24f640c19b6d06983038c397

SHA256
5fd3eb7bbe381131648e9fe325e2d8a51fbda345b944b7a008a374e3726dd45e

SHA512
27c5077c90403b386d56249a3aba53ecaeb50007c16ccfb61429ff3cd8529a806bfc9a41976ceccf83d579493e12bda510b59e93dc5d1d99fdc0f4d64849594e

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/ba_tr.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/ba_tr.db-wal
Filesize
48KB

MD5
8ea87c1ebabdfb72abd39fe7908d385a

SHA1
4752fb5fc621d3f11413e4a543eb22f0315e5823

SHA256
be68c59a72bc80e11bb131614432f9fc872f5cb5631db5c7b61b6d1d097e6048

SHA512
ea5877e1300b13929bdc2ccd5228d106d9688b0bbcb8a69779fcffe22e7d2a350f490cfa6f439ad60aeecbcada45000d683df90a52e7f7f89a521559a9242e2e

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db
Filesize
20KB

MD5
93c7e884ca5b5943767da2eddfcc2210

SHA1
67ea8118867da60807409ec494b8edafb5f0e141

SHA256
cb60aafaabb74f0e2d0a1903bd01757c2d423a89fb49b29dce63becb359b4361

SHA512
df2b03b472681467e6413a4b2b2b908a91b24b38dc4e8072179519e7dae5b22f41cbb8f2cdd2501869fba96f5e24f79df67dc88bed4bc120f8d1409ff95d1cf4

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-journal
Filesize
524B

MD5
db2c0be51280c54e21f2af3f436f8153

SHA1
f477039ee9e4889bcebf8d03a45f4ede4d5e1d46

SHA256
5003d10da1594c1fa5898be061daf40dd5f54befc92b21580238fe0166b3895a

SHA512
bcf5b370cad72b2e76226156366fe94f39830e91bce5714ba855105b00ccd1f0c4ef6717bada9bf04d839326c0636a5106b923ca640c872c470bda11ea7aea0b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
Filesize
36KB

MD5
77a45090e61ded4fc85e7e78d2f81d1d

SHA1
f44886b275b44044a7dac80621af1083d88a6d0c

SHA256
cba35a0f0d2f846fa5fa31049c6b7ecee9eceabac4a68d07c329d86a72b69ab0

SHA512
a02e6c51f5f662a4c152c9c9afbc2e56c9f340f37e29e53d6f179e768a163b04712099327870a74a3c19d2e56ca24fd9044a1ff45fbe665bb4da3a2bab448422

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
632d918e611ddac529c22e29cc1d7b88

SHA1
cef515c0a5a3f734bd8857280a5c319cb7b2b424

SHA256
45aed76d1335e8945be4378b57630953bf54e153d4727e0e8bceb47b46399d95

SHA512
b601f8f533b3b15d16c54e4dd4944f4c94f8887655cb046859e7bd4646ef3edc09cd183361e66d0d5f9511231a528da935a3381537fbdd3cdd93a9244b90af8a

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
6902aaa0d4fb3fedc06d510e34db7a56

SHA1
e41d259f55d69ad1f21230db24561787d36ac77c

SHA256
346c470e7ab634ba00437a2e848d7a7aa427fc5d7314c5725a6941667858904d

SHA512
b6edfb9d2683fafbad6670072ef71cf867b30ea3fb1f3dcab6ca50371df1c98b6b432148491703c564b97562f918d66b018ce34517a9195c657d451781ec14b4

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
abf6d6105419497476c44a680a96ed68

SHA1
7816a9e6bdf1c73a617bb2737650abfe39a24cb5

SHA256
8a3e848257f1535d087f021fb6c3c2575803d20d39d52ced272eaec17a1151e1

SHA512
55d3409847764186edf3312b6cdcee293110f9007c61a987d85703a4c5965262c1186506539c7b6cb462e00bf86c9968449cc2662c456a40fc0b5d0d9628c686

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
1dc6666e31e85e6f558f7823ef727b2f

SHA1
7b4616ad2c9c371e5e7134ece58aa18cb7719ddd

SHA256
4f9d28b12eecb0091d3ba268f55b90e7006f7ac17339c83e950acbbacaa48f4d

SHA512
2b58e002d03615d27192955a19636766637dd76badb73491b8a6689a4cd7c0f266cef2e7014efadf7046ed27b68a07ccf8997a20fdb47e3608ed69dc947d0851

Download Submit
/data/user/0/ir.hamyar.eshgh/databases/google_app_measurement_local.db-wal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472BeginSession.cls_temp
Filesize
77B

MD5
569c33eb86018c7c6ec67a59c6f326f3

SHA1
01facb22747e007d45e07700febdb98ce0725993

SHA256
4f9eb3508eeb32f02e2d00a617c68bbbf51104187b2761cccea84a303e1f7a0c

SHA512
40261b6d0b35ddb87ec1c760df97f7c8cfef4635c2498b3f3f35de0f31bd5e91b4a5c091f31c61e8f0f482abf0e15ee44822d6ad88bd28683607933c6fe53a45

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472BeginSession.json
Filesize
132B

MD5
ef6c1bb9aea2c8cf35be91d7885eb257

SHA1
0bfd96152b498125762e435a7ecf173c77ae5fe9

SHA256
1ef24d0b3aceeb9d70e13b4027c1e0397654ce168013683a09604f3ecd8cc78a

SHA512
2b34d1633b9895401f104fb2ebc91012ee52ab3383da0f3541a952ee51c1915c59a63e140dd63b2dc8a1b0a9128f1720dc3309ff5d8f15e7d871411cf28dec6c

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionApp.cls_temp
Filesize
108B

MD5
e7038cd9adcbbd1470c89dd5b5fc0c5a

SHA1
2772db9ffb16cc064530440ad9c8cc99d9b04493

SHA256
13d1b1c59cdd41e6fdb9afa9c5a1ff0940dc3a6ad5918ce546860a73f9191d47

SHA512
26cc90b7af111801d162985c04f8bf8e3b3641e1c5a12ee9208072078ed625d35abac11e23baef9dde1e55fda9ed7c6c8a33134eb4cd6d59298fa926ad8e6e1a

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionApp.json
Filesize
222B

MD5
8fc72cdded99e5ee231ad30444f00131

SHA1
ed7a946baa8b3dedff28c3525e52fa4e784658dc

SHA256
bf46b4a6b170a3a7117a8e8108d0440531edb835f06bbbd0608a5b8af9f73f5c

SHA512
38b4e52f51e4f56ed731575df442f10c4908d147bf9688edb3bc77bd8efd1fcd840b04ef511342bfc317f8970ca2b03d4c156d9bca6eac1a8b52065ed00c3eb2

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionDevice.cls_temp
Filesize
48B

MD5
87f82426306a6a2fc47e8c551ff68a1c

SHA1
11fa3a7f8307a7192f666d0b60da27482fbde2a5

SHA256
d409a9658b6629c9a695287ed023fda41ad9a0eb7cbd25881549bf83cd98051d

SHA512
3189f184426e61975798bd447be9c6596166a6decbb316d74b9c69cad0b7593ff6bb629043c6f3d2dd8bf53b928cc4320cf7d62ee497cb1441e0204f6a7ad055

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionDevice.json
Filesize
200B

MD5
54db8dced402e56e37ab74dacfdb23f6

SHA1
65cd073e99f8c2b0e4955f1925246f4df78ef3d7

SHA256
162df8a12048e171d7340e11e27d0bdbf28f78a692f9705cef5f223a45c38f8e

SHA512
a5d4d0cc119f1476c4f55797c549fc931c776bdca52205f89d4a00969a7197087f46cd64d130fcacdc1f5cb6b43fdc4e83a5b460b92c4f16defb916569339758

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionOS.cls_temp
Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/628835E500DB-0001-14E6-9F2080664472SessionOS.json
Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/ir.hamyar.eshgh/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_659b5901-05d6-4bdc-80db-7ab56cca112d_1653093864531.tap
Filesize
344B

MD5
905f46b9dd7a6bb9f78f52b93fd4002c

SHA1
22d597aaaaac3702f1d382df5eac8b0c56df72e6

SHA256
a7569410043fe7b0c5c961c9449f96a86b9e128f010ef5139ca2ad2b72519f3c

SHA512
f55f2c426a15120cf7037af49b9462b45110ae3348a24dc9e3c2a1b86d7f62b7afdb83a2fbc9cdae26acf7a0d0ee170131348af0c46c25e37c4f6ab6fc80e82c

Download Submit
/data/user/0/ir.hamyar.eshgh/no_backup/com.google.InstanceId.properties
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/no_backup/com.google.android.gms.appid-no-backup
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/Stors.xml
Filesize
130B

MD5
8d3749ff572e9d51fa2a39f67c43924d

SHA1
c29363991109faf1c7b3a9bd1da7820925f80376

SHA256
a2d84091fdec9ed642015eb268ff592cb364d9da9e5a1f1427dd207b480385a4

SHA512
59ee089ed8c923ce23521640862609fc894240b6a165972f7acc2db24c205c98fa89f96dd266eee7c31ddafbeedfc2a2fe3429af5ef52b8b180060e4a0f36e6d

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/Stors.xml
Filesize
184B

MD5
c1d7898a1132ea582589647671cf4694

SHA1
3f01263e9b00e75be9a1e2906df8c4f5c194b1be

SHA256
9a445fd7ee8551908432d58ee12563ae062b0b50e1ed2502c86da532e20d3dac

SHA512
a343a66b9cc134a0bb7938ebc604212873b61ac6472e505a6c8d4624581d59de6df366a357cfa0c7142a9abc9d9efd307afd03c0e8c60f417c6b0b8e080d716a

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/[[kabouzeid_app-theme-helper]].xml
Filesize
121B

MD5
a6fca57a7b5db67174459fb274e929e0

SHA1
03a4a9a4d220e320451d2fba5dfb74cde09974f9

SHA256
fb654d4a48d122d64d0cd56a1d46c13a0f1bebb2731a0bbd84e254db255524fb

SHA512
547fa6400f8721d692dfa608a307e95de956da859e7c1ab03011a19e2a29aafe10b4d76c7f35ec74d50f377138fa669171a24180004ce01853168638983f80b8

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/[[kabouzeid_app-theme-helper]].xml
Filesize
383B

MD5
196d6ead38172ef73eb075a810f39bb8

SHA1
c21bd633b86b7f08cfae06612c7077fb58e33f5a

SHA256
d0f8f68bf1868589a538c7c7bc4547e242181d0a22f19f62a7acd541b299d5aa

SHA512
0b8d5bf99e71036320ad183f31d1f208aed9067819ec5570ca5b907600c0fea0a5567cc1f8003352ffbaad95bc60e2776fa7a6fb3d63b2a36fa6a8b5cefb7a2a

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
Filesize
125B

MD5
7f72a0e25eafdeb4c7d2dc814d70fc89

SHA1
bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae

SHA256
f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424

SHA512
696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.appid.xml
Filesize
2KB

MD5
9bb50b9f190aa608a9804a32742973fd

SHA1
c6709903cae856f825dfa71ca9647ddd91bd8f98

SHA256
0c903a5815e8236f47b459ff6a8591d363842e4f37af897868e5855b89e4b0ba

SHA512
d04ff513c1f3dda685d94b4f3d1a4cbf448d44797718c25e285e7e7f0b30b7db7a82559e817e3eea684aa0e14f5d2068a5083326983749f74407ea60fb7f2e55

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.appid.xml
Filesize
2KB

MD5
ac862951d5a5abe493a4639fb29aa970

SHA1
8ebf435fc0ec24a4ad1ca40171bb61463d19d463

SHA256
2a8e2f9ae9b5ec9f00aceac233e03f245b77978b70545371ee0cc828e1652971

SHA512
708e5e54fec1f6609ad3e5fd49e198e7593e5d0e5b4c854afabc932ae755e0802a116665d33a0f3655c37c0ddafabfa852daf81d8b3fed4f36b3857e46b66e03

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
443B

MD5
b70c290722d3ca210d29db5105f9b34c

SHA1
b42ce88763a017d56d4b4adff035523b1588dae9

SHA256
f9ecdd896d6115b76bebdc595b41bbb450450693650691f5b480eb1826e5d0e5

SHA512
8ad13aae243ef6eb5f5ded343bc49d048799084fe82e47b0c7978d2a86eed5bd52231e0dca3f0202a6e75aa54b00d92dac796adcdf4017d1bd52389fcd609abe

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
654B

MD5
ff4e27e276365754ef5a45461b690bc0

SHA1
0ca7356cc83b1c3832c0c7cf647b3bde40ee0e93

SHA256
deedcef46fda56cf058e289d7dcfb937b7ba119e9d347174c0512bb59e99a739

SHA512
f2b8fb21aca8b2ec3dbec1411b71084a72a184974b3613d83d354c7f3f17f1250030a83c1dae2b473f995834df2e32781434b236ca7e3ef7d073967f49ecc6cc

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
750B

MD5
7985040d282f14eaab4af74e18374f19

SHA1
e98c15134728e7cda7a6f12d3600129c8d378abe

SHA256
c00ef63619a1b601a5543671e4f51f538c33ff9f7d7746163c72841780622ee3

SHA512
6de300a856ed93ec4425df4dc76747aa4a180ee042eb6a4bffd9653dc60f6e3cbf43f86a42d32f1eee5a8af9bc922b75bd59de82036312718ad2ed5a8f8465cc

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
122B

MD5
250b4caeba60ddf53228405750ba66ca

SHA1
422ab714feb34e9f3b4f1cbe669887bcd581ddb1

SHA256
2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

SHA512
373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
827B

MD5
954066a2c89e41a649d75e3f3d4a15aa

SHA1
1894de67fc22e8200f6d91c11923e060b3ed575c

SHA256
a94d84754fe2e9cbfdc5a19398be51464fae7c0832a19c454ddf63ddaccf546d

SHA512
f271520aeb887112912f3e276a119bc44368768f29cbb4bd86b3ae52e1e0de3ae42a4a49e6f8e3a2383d0fbf21bdaa14797681c81ba88e84f5a65fa53c272a16

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
828B

MD5
6fd4caf106d1d2d8db5323a45f958208

SHA1
ebfd3c68835b3416b6187ebb92b82eeced416b92

SHA256
bd762ea5893dd9b751e1965655b0c289252a2288f39c4ac76091f3c446d0d737

SHA512
47e95663a559ddcd57c7322ad90f018027c357b7e616ffc5b74d73959b67378642a74cd6ba4834985cfc23ee457f574dd8fee2c7cafb4b1db129cc3b155a2bee

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
886B

MD5
0a38ce46e6d537543d9da6cc69c3e861

SHA1
221c27f31f4d5e556a2bff2d51967797d47a9650

SHA256
9099923be3bec14751e5287fcf0bb4ec960b73aed155f0b9a1648fd9c228a304

SHA512
35321c8b3423a1e1b3adc67e1b5bc99097602dda8e1ad19a24d5bb92fc5147e32fea7931c0378d84c600619cde6015c922cf063450a88cd90a40dd5c82e8d884

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/ir.hamyar.eshgh_preferences.xml
Filesize
141B

MD5
3f592c836aaefd97b6846bdc810c1200

SHA1
f2dcc34fe49a45deec63f413dfdb39a2397ab325

SHA256
246787dca5913cc01e571eba600fbc318fce75039f464bc8c259146b99206396

SHA512
d46d58ae4d152291c18af044e6873771645738821b20708a96c5ab7475002f0c180fabe94ea5a0c1f6343bfbf628b1477662f00f6d65452f0e974af4b7accdf6

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/ir.hamyar.eshgh_preferences.xml
Filesize
190B

MD5
f170fbbf29b28fa17db9bcf99aede82f

SHA1
7c44bb3d8ad13aa717836cdde28b1c82fc9ea957

SHA256
e7fd642e7a48afbbbc63702f6f15d01c0c8d42d300a4dbf32ffa9229de613701

SHA512
aae37e6bb2565d6c49478826c93013dfac0630dfaec2ea66300783f7d3680c773f6fd8b16483f54594f82831bb9d88c6f36b08e0af5f5852ba9d8f03dbf3701d

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/prefs.xml
Filesize
146B

MD5
c74eebc2215009e75c91b7b1bfb9bb5c

SHA1
1533cb74fc6a7bb1a743aa2b35818693f44f75d1

SHA256
b891c40d8b38c436f5af628decf67f8ff2eedde633fe410f6aae790f0d716974

SHA512
34fe486431e5e0fc9997ef2bddb253186d95193a813e765d8a4d8dd18e67cd451eb710ca8173d79309b7bb4b5d29d9d6a50dc7b377f03705c96878a500309005

Download Submit
/data/user/0/ir.hamyar.eshgh/shared_prefs/prefs.xml
Filesize
233B

MD5
66555f82fcc6b2c344777284dd7b06d1

SHA1
64abf2aa818ee2fd677d5ca24e67b5f91d0390fe

SHA256
9fe3a89e3b44f7ea9b9aca9d57b9a184f41188d68d49b14e804cd5ed8268021c

SHA512
772b80f116062ed4dcc8073071dc7e8d57dde9601dc5091d9d1ec79dc5812a90a87aa9e9503c7b9482240e162ba49b4f3e26e2f9730615e46653063d3015c38c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads