joker | 0ee19bcc2b664aa10892f8e0a0aaef9e37ffa4f8f9cbae03c5cd1ca2406fb42f

Analysis

max time kernel
32940s
max time network
72s
platform
android_x86
resource
android-x86-arm-20220621-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
submitted
15-07-2022 13:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0EE19BCC2B664AA10892F8E0A0AAEF9E37FFA4F8F9CBAE03C5CD1CA2406FB42F.apk
Size

29.3MB
MD5

37a3e8b3d977a930214ec10f6a793537
SHA1

b31dde48fcbc6b02c28c4cbebb3cdf8014d0d5ef
SHA256

0ee19bcc2b664aa10892f8e0a0aaef9e37ffa4f8f9cbae03c5cd1ca2406fb42f
SHA512

9250357f552769322ecb0c76f491c3804e24c7d3cdf05d63957a9ec6a303cdc1320eb4acc790cb3aae9088abbe713abc62e3bd64f0866ee689a0bdc7063671cd

Score

10^/10

joker banker evasion infostealer ransomware trojan

Malware Config

Signatures

joker
Joker is an Android malware that targets billing and SMS fraud.
infostealer trojan joker

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	ed.scanner.documents.image.file

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ed.scanner.documents.image.file

Checks Android system properties for emulator presence. 1 IoCs

description	ioc	Process
Accessed system property	key: ro.hardware	ed.scanner.documents.image.file

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
Anonymous-DexFile@0xdcf00000-0xdcf02bb0	4788	ed.scanner.documents.image.file
Anonymous-DexFile@0xc8692000-0xc8697004	4788	ed.scanner.documents.image.file

Reads information about phone network operator.

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	ed.scanner.documents.image.file

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	ed.scanner.documents.image.file

Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	ed.scanner.documents.image.file

ed.scanner.documents.image.file
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Acquires the wake lock.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ed.scanner.documents.image.file/app_webview/Cookies

Filesize
64KB

MD5
cb7543c4df600f2af58097cce0e334ba

SHA1
83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

SHA256
64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

SHA512
ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Cookies-journal

Filesize
1KB

MD5
f262300928a1d5ad65fe7e42ba7e1937

SHA1
0ef75e83e8dfa71478a8b46123121a45d15c8d56

SHA256
d70c85c6988d9213fd71dc4b2fc3fff7b03f7b1f375e53703dfa53ba41bee338

SHA512
fcfd2794d6ddbec67cf35bba23b1c79be3f0b2ccc7faad0f9c398df739b160bb4a0eef5c2ffe238e4133385430d97288676da50c658dc5c6f87379e03b7d2438

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/GPUCache/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
e57da490ec9d4333da4674a3ede06948

SHA1
5be5a8d81074e7731ce9b4d062f6def2a37fc643

SHA256
c434d2f9d07f1d8bbf0c06751622d896a44323c0e732fd853ddcf39952a93f86

SHA512
7bca38130e7dee8155ade4ad66f6cbf243f26cd2cffe3e497944a2d1ba9920af8cfd184c3220b57abc365d466e93e8152980529e305588dd7c8a7fbcc4793202

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Local Storage/leveldb/000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Local Storage/leveldb/000003.log

Filesize
763B

MD5
8efbc003462e87327f54379f7680bf17

SHA1
abf9a2698aa00dd0e29dbba1461155341b118519

SHA256
dbc8d2b723d3e3124de0980eea25ada228ccae64ab224f2022d884389fc91174

SHA512
3689e47c97e73c560ae82c6f0a3df8f683aab3116c424a7591bb48237eef26116bd3d6feca08b7cf14655b71e6c7dbf0373a70cad7adeea783d1a9c0546809cc

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Local Storage/leveldb/LOG

Filesize
70B

MD5
ad424b5fdc0f3f5b34d6aa3584eaef17

SHA1
a948fb02050cfa2ba1998532b4ed62d6a8326d9d

SHA256
51a11c8873bf9fe9acde10c04def987bb63d7009a94fef164eda8912e5f81013

SHA512
45ada9ae6cebd89bbe202cb3c460cc766c21a3c490d6a7967da361be4ccdae043e0f63230f37aabe789af266173b9a21ce3f13a87cefa1a0c6a123798590d7cd

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Local Storage/leveldb/MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/Web Data-journal

Filesize
1KB

MD5
f4312a89852856984a8b0cbe11a6d7fb

SHA1
6f8a75980cb448381595033aa53976c158b97bff

SHA256
d9aaa31ceaa704e0dcd4f70bb0e03cf98956efdbf711107366544ced406c1e39

SHA512
053684402ea1cdce153a3856a5aa2357dda7cd93286573199db888f62df9519941dfd02d4f856d553e381ca09b2a596413f203a1b477acd755de7a84db93b305

Download Submit
/data/user/0/ed.scanner.documents.image.file/app_webview/metrics_guid

Filesize
36B

MD5
f477791ccdcc8d215670bfcf92bcab6e

SHA1
f9bc12f8919e46a55af4ec1dcc7521a1c4543300

SHA256
7a379cc940928711c4f17482d077aa8ba5361de2d4fe3cfa0398b1fa7938c7a6

SHA512
87159ec8b63f2c33ffc543e407f895dc44a8238e1fb7f078b0481b64cd14416f0816dbf7b244812d88478bf609c6d3221a488adc80710d20ec39bd68612e947b

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/0fa01fbf2056a11c_0

Filesize
6KB

MD5
f527daef88e9cac0075e4dd6076b4ee9

SHA1
89ba435258a9ff9490fd9fbbf94eb0f1d1a196da

SHA256
648390d027ff69dbd9e7097fa82811ed89c64c038b2ce4fc8bc9769c4d9099ce

SHA512
1011d94911a0922fa851d2455f91abbf7238e9de9628a90dc462dec909896eea4ac7ee15514def5ddcfa1ba753ccba351202c6da67f160a1975a00e192b17c53

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

Filesize
6KB

MD5
77336b4c7fd1519d7df6c5438a0cbc24

SHA1
7cabde29394c1ff4837a57d2c8ca28b700997186

SHA256
65b93ef048a6416402f816a0bd322ab508db3a919272305964d09cfd7241933b

SHA512
2b6efebced6a591e8471d08d36ab3e3052c9c74cfa588ed1556fc76f242b70b727a611f41bb0a0b355990a6b8f0fc679a7294f573d45eb4a341b0ea98a958f4b

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/f038e94cb33282ab_0

Filesize
122KB

MD5
d4e262f11b8925320ab402c023f8c13d

SHA1
856fcfb3b138d9ff1e92a273ffe00b1a61318dd5

SHA256
02dd75febc94b11475deb0c7be59ddd99cc93b16fcf500a7c5a7b122888feb4c

SHA512
b726144a3a7f138b76718773e76d579374e07ef758b8fc6d165074da099f51345c35d764795e2e47fe097e526c4822fd908555da420cc90e09b50b15f1e98f58

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/f038e94cb33282ab_1

Filesize
196B

MD5
0413d51b7cdef8daa7111f23411c0d02

SHA1
ebd1223f7d5a86aa5ee8052df47a4ca0797f9a2c

SHA256
4968d24e1968d7bc8e56f6fe36430d2ce1edc2a9e10a337a5b253ff5bb06a6a4

SHA512
5503ce18cd204d81383740b6f36f1b0a4a4ba559fc7c6c5facc75098fe7c3d9c707483ec51e4b63bb3efffa3eeb93ec36727988e216b6675a454ecf9440fa5ca

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
48B

MD5
6551b9d00b9edfb9c005569537520886

SHA1
26c1bad96e47a17ca215b9e1c011fc579fc35449

SHA256
b23b5934dac862026b41f5c050930125474634436536d0f1dc1329ec25b11797

SHA512
debea85fdfc537e2d5e722673769b462f179034ed3cf3914d235cfb715774653acf04d73649aa50d5c69e2cf8e1b82692ad7c3ef380dfc0c985dc93cb7a44fd1

Download Submit
/data/user/0/ed.scanner.documents.image.file/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
120B

MD5
999b159ebc018f750b703927b7769c19

SHA1
1cad53f09f4865c89d2a11bc245341fb382a46a3

SHA256
e876dc03e7152e2d806d383eab61dbed4e1912aa77706d539f06d2b58000bb0a

SHA512
d8e905e75810456451d6e56d8df6125cc7c781856c631f1f77af05522e10f7fe96ed6e3825dbb50a01bc52950c173f5b55fa21941170244d5639ddbdf1b080a8

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/androidx.work.workdb-journal

Filesize
524B

MD5
244324a77572b015bb0972bc3a89989e

SHA1
a79be364233ad0e64f9d91641576daa2b31cdea9

SHA256
afb4775535b1e555278cf4d6d3cf8f410460d4b6293dfee876e1ae286736788d

SHA512
f9574ae93ddfa90dcac0e5765d4414762e3471a237c3bbe1b6798e45f7a901402c8fdd118242cb9ff1e3679f6a0536ea933edc3fd4b69f462ee7f3a37b7b7cb3

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/androidx.work.workdb-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
2d2a63c0124a5370c5cb737dabffefc9

SHA1
0bf1588b1d4ff7d37616d88165a942b128a7369e

SHA256
ee8782294c20c755044b9786ea0eaaec2f35ce558ea1d6f7a3ecac03a67ee99b

SHA512
f68dcb590680bb280ae3ddd1a1a998b4f4ab074dfd58cc6fa2aee7c895073ac988080de69ac17977d1df9cffefdb752a5b37729f0a0e95724c50a81916af81f5

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db

Filesize
20KB

MD5
4207f970921a298ef7e9ab13e2ec05ba

SHA1
85af0ee97a40da7b07dd8c25805c5a1ff0c3d83d

SHA256
cfb8a66d0ad7964376a4bb10b1f87e579fc827201c373817deffebf13cb7f446

SHA512
a70bd6a3a9b6315767ca9d3e6712ad32ae20182be701e301bdfb0d8ba0cb817b2e4976e154f491aaf8b463242609137b630c6b899f4fb45a472206138fc3e8d6

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-journal

Filesize
524B

MD5
608ce6553e36d2a8e302988093cef9ba

SHA1
17d17a6be6dc823fb7c51f472d274aa378d4a636

SHA256
d2061e2e7a1f905eef932c48f078cf2674d2aa4c6ddc81718a29ee516a96c5a6

SHA512
f8868cd86aa29d3d5b869260765d690ba8afe86380fd2289ea7e3d2681af042fa9962b97741f24cf34d434982fab6f709a588d2ea082a28dabfcd74d7a42b070

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
dffb7f32b1b48da7fca02193a09865a8

SHA1
ed64a60e7119e8db07404dc74f33bd7f9389a0c7

SHA256
ced72d37c702e4fc4aac626ccf3bc48ee90889f904e961fa496ee240fbe6963b

SHA512
1a6897969d03b3aa389e55c137c205b0a6ac23c358ee01bbff7ee6db5775c5e647d6c53a9316156785f891b8066d8e050bc353cca5913aa7e58765745898d7cc

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fa0fab142fa4996e4d11a4a9cef3dea8

SHA1
f47de2071ea74356ecbc4ee6db6d5ce53894d9e6

SHA256
5bcaae54a5b02cac1892aa47f08928e5c9663cbc66c342ef937a8244e740679d

SHA512
a6f44ef9c18913c7e65f8fe1b13780cad80e11ad1632bd93682fb011db1ea684abe1b1970b5929c1cf1c43c38bf1e523a3ddb0853528e80223753dc009708996

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
37d06d0d3558037157f2865c6ffeedba

SHA1
4fa249b335b1b664dc4a0bc3db274d730fbe8175

SHA256
3a12496cb0bbe7e471bd8c1591bacf7309d57f6284f7ddd6a395abfbab321a25

SHA512
6193cede25c0d25f583bfc09bf61ff62e9bd97c9609b4a007a2f711b8fada0cc3d2e6f628c94385ddff6652f8a2d1667b2adb99348924bf577152bd9f4c7ae5f

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
366ac85abb72701ee32ba35370588356

SHA1
2329e22cd7480f8777e0d6430ccdeb5f08d8c21a

SHA256
540d80bae04087c24a4103558e4e4ec29e403ff93e65d09bcf896bc10d126df1

SHA512
f9fe50de18bcf41e41e0f6909a49d42a082f185355f09163d39f2e39a3ae2b784e74f0429de3cb300112a0949225050d48e4e0d17660b1f2fbe337e179a5d5b7

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
585c657e7cff36195d454fea01c966d9

SHA1
2f1cd736163477d01f280bd6b4f6d1e290feb9bf

SHA256
b804d74ebfbd84632c0e42f930b3a56541a901760ce260895f4a93c1e366e303

SHA512
0b51fd9dae3b57882e4adabecadfead032770762489cbf893a32e1bbb063277e4e63986d0ba456f61bdf6df67d7354fe54f2e5b939c84e81bf510ac27b1fbaa4

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6b679dddb244bfb17ec68af11fb243e0

SHA1
b4e1817cfdc7a0561c43a3e6bd08bff92d525c0e

SHA256
2a7196502b87531c4be9d3dc0891cced6de3ecf3ccb45940186879dc0f8e7e4f

SHA512
50874a32cb08bef1ec56b26d7b85f2edbc995762a69632b56dcb16084f0db1feb873507254c5359e25ac25ee6711215c8c81a1499404dac9569d8d086dfb6217

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
75fa4d29bc6e8c248715b3a9aa496f7f

SHA1
51ab0633f0f4e551f2b3e9b0bd812a6ed3aaf928

SHA256
ad142904aeb84d80f6ef8c310e364a599cd823dce9180c97fe7441180f4c769b

SHA512
02bc2440f951c415f7c84cf3c244b3c42e457b9b3f5c653d1ea5a5ce476221a53300d6b5e60c1d572532434109355d786e62af4e3dd6dcfdc3305b2aed9366ef

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
cbbb1e1341c302591062e958775da6ab

SHA1
096fc7e7cfdd74d6151157f1b2cabdb749875efe

SHA256
bed6dc2aa5787e78001883686de474aba11cc8aeed08436f88e504008f494b9c

SHA512
e83f228c7302de54dcf599d1c62fdc688e5c3d20d01d91561ce2931e8336f1b3115eae86988b589020e698a9a5f8722a34a8c2cd51012f2f74f565450f7bd2ed

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
edf154aa4dba5df5f34afdd08780b0e6

SHA1
ba43af8374db69da02b3742bae3a292ae7b8afc1

SHA256
d97786b0b25eb0a5eaf6347eaa39811b143825423e7d87285a0f579468b74fb4

SHA512
8ab52d558bcdc629b9ec0fc75e701d2ddd9ecaa452ea65c4b3cb71c31a84e3bfec27ae32672938a56466e09f5ae783b2bccedf2bbc55bc78abf4ab892d60ee52

Download Submit
/data/user/0/ed.scanner.documents.image.file/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
06b5b5ab9ada72214276a64a5df9b14f

SHA1
84786d2da121734f88b61ab56a8a6f1de1937bfe

SHA256
3c890533fedf75eb745e3879c7589da4757969d154ff61ada5664aa73c77cf15

SHA512
1bd0b27ffc70cfc1b97989f8ad539262b03a482f5a5b96997e3dfa7d143769513da1d8406996f000ab3d8768c2921bc67ce198154e8af5865d4f2e7452378491

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics-ndk/62D165DC02EA-0001-12B4-BB4C33979937/app.json

Filesize
186B

MD5
c10fb5fe3b07a60aab3c71142a2b811a

SHA1
20141a3896f332f72272fdb961cfabbf67f0eb91

SHA256
504f693ddd0abb3f6a64177dec58f4897156d699dec3c0a0cb9dc72294c6e11b

SHA512
00f1f956509afa4739515605835104ac855d79e402d38ae505e3fc7f6b6d79dcfd9f1ebb6c3ab4bdc9ab2fc6d7e4bd0c62489928b1ba2ebb34f561e3f5b226d8

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics-ndk/62D165DC02EA-0001-12B4-BB4C33979937/device.json

Filesize
191B

MD5
0b9ab72e30e5d89c06d1e333c10a51b4

SHA1
2ea6dbb80a981cab8903f5cc7a6b16a6bf09c1fe

SHA256
4b21b1e77df1a5363909946900c2b65b49b5080a2f43fef6b8ae616f31b98116

SHA512
9e4506c26c2c3cbea421d600b3605eb8298b534e3dd77cf34d343e90072e24c5c4259651b03c872445f3671f10ddf5368d82230741c180e01cb79e43730096fc

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics-ndk/62D165DC02EA-0001-12B4-BB4C33979937/os.json

Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics-ndk/62D165DC02EA-0001-12B4-BB4C33979937/session.json

Filesize
137B

MD5
3298820e4c2da461da8bcfc10754bfc0

SHA1
a542cb3cfc7492cb0c56e32e7e8eae2254f72a40

SHA256
5ed1f7e0671775bc6bf2dbd0d6310de119c993f80e9eb1ce13b29e792d95013a

SHA512
b0bdd5a4662a8221318c164788d3843af9091ff78635ec02b57583110e43a42d8e6dcd56ca63e4dc107a7a9a31138cda583e7cd84244cb488497cc33d343dbaf

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics/62D165DC02EA-0001-12B4-BB4C33979937BeginSession.cls_temp

Filesize
82B

MD5
630243420d58e9d08616ea77227939db

SHA1
f33609d793572e4bc6339bf68f149673fba3b6e9

SHA256
e97d066b29f752c5962835e009808c4e58f38ca44e2df0908a029601c702002e

SHA512
b40c95f63eaf9e5e09b70f5fbeaf7bc4b2d21aceef5c7864c95fa76e0c7938e10520c6666475626e541b01b8a8677e91b6e32cefc04a0f1b90c479c4ebbebe23

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics/62D165DC02EA-0001-12B4-BB4C33979937SessionApp.cls_temp

Filesize
81B

MD5
286fdeacb90ee93720e27f57ef36b072

SHA1
7086ef617c70f6818e3ee9d5c59accf4a679c193

SHA256
db780583f084e77c6bb20b1731ac454f4e4e6b822c45d8f07d7732f213c3c25c

SHA512
e1cc910fc33e07c0a718a21bbe43fdff7b29a18005ff31f3d0588fefe5df882aa8979c023dc8ae23e75fbbfb97ab0e698318d78da4f63ceb779cde195183ef8f

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics/62D165DC02EA-0001-12B4-BB4C33979937SessionDevice.cls_temp

Filesize
48B

MD5
01e5862a63438b9fe31b444c3b19b976

SHA1
7686c83984c837a10ea1ab52ce9e93f3c8a8a1ef

SHA256
ed1d2040f86949a2120888624637eb3a5d2b27f8af8276c4819ea6d90cffcb7d

SHA512
15dc4fb9035c09448ec88dda9a5cf147214201c8b44dc7f00a2c04e89d1b5099f79db1f370e30d8a3436881660c7c861e559b397e180146ef9c266cdc7020d01

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics/62D165DC02EA-0001-12B4-BB4C33979937SessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-62D165DC02EA-0001-12B4-BB4C33979937.temp.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/ed.scanner.documents.image.file/files/FacebookSdk

Filesize
280B

MD5
0e5a43ffb34f30044bceca9fc9eac86f

SHA1
99f8dd7ab39705a51429366fc62df2266ce0049c

SHA256
901143d1fe3c675ef79ab590292a65686d350f2cb34e50d1e86cfb04d643c378

SHA512
52bfa74b1db2aa12f40d9b65379a1eb9c704cc6dbac871425d90f8970d1bafba7d2f0ee3a69535a36a5ea55da7f38b260dd4f6de7c86f11f6b6d20ddc0fb671c

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/FirebaseAppHeartBeat.xml

Filesize
121B

MD5
531ddc656f97e52d2aca4de86957c7b5

SHA1
453e7f91d4437c017fef7f4c5b668e4148983e39

SHA256
724185eacb0439ea02eaa9f51b60c2582f4f3785d6d8f12ee540f470efb8f133

SHA512
42c48cb06b22ab15e7be7acb822421d622698370377f3a9e65c2350c8e988a083cb4190f82d3903548d9d6d0a257105e5dabdbe876d73595c201d986a6f4933f

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/FirebaseAppHeartBeat.xml

Filesize
175B

MD5
e7aaa283fa33d2fcd2f81b02e8c0fcb6

SHA1
37a993c082608f308dd9535454bed7150599057e

SHA256
3b698a5b324cc17b6fadd6f433d544bc0b759b1fd6ce21ce80358275138834bd

SHA512
427d8d0127954e1e37806b01738accf9ed3a6465952142a11b29fec48148a64a8d49e5792805c9d6800001483949085412ef07fd0f4bdb90cc10b3ece48a8a78

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/admob.xml

Filesize
375B

MD5
9349c2586d440ed5a7bdea59b56ac091

SHA1
ef4f8e4f12802b38449e587abe648efc652e402c

SHA256
dbecc6e7744955cf59a22f386244d10b43676976fb5dd4f8d49222365e947251

SHA512
c9dd152dfff222671785feae2d4fbad86657615c0758f4335ccb566bad374999f4641a8eac4145549f57fa47ddeeaa10c77aa977ea1c603e0999ab3b98a31260

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.facebook.sdk.appEventPreferences.xml

Filesize
160B

MD5
ef05eb7877e7cfad5089f0579950dca7

SHA1
03442d1f3a641e6da03d480c8b3ecccb59d43cdb

SHA256
259236f84c35ca4da94b5e2213aa990a1c9a591b26d353312a22d52d3cfcaa9a

SHA512
0f217ad86b648f67a44905fc7a297933861a47fa002ceec2effb4f3ade144d91f7576f2437a594afa0cf81edad2686536af3f65ad2423d439d04ded850120532

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.appid.xml

Filesize
165B

MD5
b0634e807fd9fa8dee6c43d3b19f6f0a

SHA1
e62958c796457108670bbfc2e4101de76d34a794

SHA256
f2f7833760345237dfe08cfeb73563d1d6338a24169497dab70a1965ba5dc323

SHA512
68c364a03d0fa1637523d38efbc8ee057175202dd57f22c8f1202e768bfa95b210ec9906e0ccb51c6bf5ee6ef21d7b89e7db529cbc22cd4c30628a34a8369743

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
449B

MD5
f9db5a9e560a56079f3f789cf677ee3d

SHA1
4ba6efb09b1bfaceb7f55954de761c56c0279bd4

SHA256
05cea8e57e36cf3ae57c900cec7b0522fa1af1b39dbddb5031893690a347a06e

SHA512
fb15416b3c9a040a04e0b8d8ff2a772e50f795365a9bf7ed73c4b800657870167bbc0fe7ffade343c9b8998da1ae00bb54325a7ed4f86f0091c201ff429f13e5

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
659B

MD5
5f1a39b65294c9926baa1a0286e5873d

SHA1
7d90d43da8a43c5b31deb3d99fd6f790a992571c

SHA256
703a4717cf8a23e1c87e0fe2e2d9d02690f86b8e11c6fd04baae12321e3438c7

SHA512
792f0f7b6165d7f74ef9fa735a3200e03ca24367f5e16355806e61994f26bdb3c17e40f9d1355249e7bad14da1e85e70f5581a9f5f2b81b8e5afcc942d7701e6

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
122B

MD5
250b4caeba60ddf53228405750ba66ca

SHA1
422ab714feb34e9f3b4f1cbe669887bcd581ddb1

SHA256
2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

SHA512
373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
660B

MD5
330b07826a6bdcea7ee43a0747501bcd

SHA1
790b806e2aa90deaacd5b07564ac48b8ef31146c

SHA256
00993d054a85a8d127aa08fba14491660139098aaf06b517f5bb75f6d72e9aba

SHA512
31ac59269720f858e192b6840170ffb8da9fb7dde96fea3be9582d6454a5451bb3ea982dafa2cad62aedfb6e7b5d500e97401dae319424d63454b06ca3a20638

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
319B

MD5
578dee6ba5c5baaf36b5717948ecabc1

SHA1
e7b125c86ff24661ca6ff3d85b15da4fe24f6b09

SHA256
ab602ee0d7e590bd0f7bfa34a4c604c056a2d0c862ded16d27218518eb3a5462

SHA512
65e1d00bb412e7cbbdfdce99ed662e4721c7d7c7c57fd6e85871729f0fefb861d3dd38989d2c761f90c3c9681358bb12ec770e27d7fc1525e45b01b23fd2b2df

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/com.google.firebase.crashlytics.xml

Filesize
224B

MD5
2b7eb933896af30410a2c28250695a1a

SHA1
a8d27328004e9e79ab0c425af423b3c69738e5dd

SHA256
6cb20f08e019f19f0c71b33d769b13343691ba67c6d7d0aa9db96999ea16d2df

SHA512
dbd284c3553dab7a473ab936b632fcb91627f9dbde4ba5e49703cafb6e6f5afc84bc3a3dae215350400d5bc26d31e92fda1d330b9d3d828b8cc50149cec9e27d

Download Submit
/data/user/0/ed.scanner.documents.image.file/shared_prefs/ed.scanner.documents.image.file_preferences.xml

Filesize
117B

MD5
ae495810b2a2226cd77fa03914e4b406

SHA1
9e86a4e02ab3298ba8aa7419e459bd7ae0cc4a28

SHA256
ff061213ece7632d4cd646e88cdf44d7a2718b4dc407c6fcdc0a8d1a3ca52e45

SHA512
4be95fb1284afaaea83c0ab97e1dd3963eda7e55b9307189e6f846c356bc1c380d3ab73b96a2f69d45f28a5c151e9d228b36ac9a8b3e381ade09ed8ba4fc7a0d

Download Submit
Anonymous-DexFile@0xc8692000-0xc8697004

Filesize
20KB

MD5
21a76ea438006556bfdce47d7e0f2d4e

SHA1
d41a92ac7ca463067003a4929467c4b50270ce24

SHA256
838ae3037c72673861ee6d32edb66f6c2e18c5e12ee7cd03e6063c475aa3b3da

SHA512
ceb8b862dc63301022c2742f3dc5956224e9e016455dd911668d8a8cff1ad55a074fd53555f3a9064b8aad96c7d72c3467c54f5b26db5260a8292af5d9e429f5

Download Submit
Anonymous-DexFile@0xdcf00000-0xdcf02bb0

Filesize
10KB

MD5
1771e0fe2fb13c8732eebaf59fa8a09e

SHA1
8dbbfa21ed6b4ec50597b5e9c2b37b7e5e907ebc

SHA256
60894302b8c073f3c813e7d50ba32a67fddd02c1e857692cec5ef83df7a118a0

SHA512
9bd4907fb083aea5a3abe44892b6e0c7912dae4469cb224c153a08641ada37ba73cae31cae261940cf3d6e8c1772ca9fe39257a5f3b67e3297873dbbad9a7176

Download Submit