badbazaar | 9bbd7b10b12fe4df281432fbde3da2c87775e7caeb636c75abd10e8813f1d9ee

Analysis

max time kernel
47s
max time network
62s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
20/04/2024, 19:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Shad_3_5_5.apk
Size

77.4MB
MD5

b568541b504f8d05a55eaf0a61197e58
SHA1

00f5d53f3e0f8bdba698bb05c8b123ab0707a750
SHA256

9bbd7b10b12fe4df281432fbde3da2c87775e7caeb636c75abd10e8813f1d9ee
SHA512

ae7823b0a67903c52da354d6f8669111fe341b3c8c0971f2f9b03357111d0e9bcc0983136b1965ce32a3c0c1c101330da304c847a86de418ca7c21e7add50e92
SSDEEP

1572864:jX0e9xWRA7ZGazs61kZ6Bk08GKVSreDSI1yX+5Dnm:jvxpFd146B/RISru6X+5Dnm

Score

10^/10

badbazaar collection discovery evasion infostealer spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	ir.medu.shad

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/contacts	ir.medu.shad

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	ir.medu.shad

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.medu.shad

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ir.medu.shad

Checks the presence of a debugger
evasion

ir.medu.shad
1⤵
- Checks memory information
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Acquires the wake lock
- Checks if the internet connection is available
PID:4433

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Protected User Data

T1636

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ir.medu.shad/cache/image_manager_disk_cache/243a80ddb75be08002eb64eae69225fb9c1fe1eaec047877af5c3185f9588b05.0.tmp

Filesize
2KB

MD5
c86959302d29a4f82b3401f5ca6301cb

SHA1
362ba343c5e3d0aa30283cd2488a4606814b9c13

SHA256
706d62e85b7f954f7e872c6a0f446adb5c24b49ade0902a67bf4409c9997a6bb

SHA512
b518d8411426450ca45e0e3d74992161e05c1fbccf707d51f6f89f5953f2c1f97281af70032cb05c1d6aee3b6e295fb3ef62a2194d1775f16ee19a0bc60cebf3

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/70a2d1e5d27bac6f7741b6f09f91521b82c42723eefee64913f31f206b8b93aa.0.tmp

Filesize
6KB

MD5
09822b83f1466db5abf572cea66f9509

SHA1
67fd48b627c4c17f589dc4059a21aa2f06694c7b

SHA256
7ad9fa232a0183160fd535fe9c601d09d15671cae7c797a9c9bfd6979952e4cc

SHA512
cf6319cdd31a2cc7b265a8d29b8a13627b2753ab421d42e3754263e17ec9a278facd9d34ed085b9fc52fdb8cd157cccf22eca2fd592f19b6997a9bac6bc72ffb

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/journal

Filesize
325B

MD5
776e55040f7fddc5424b834e0c976d8d

SHA1
d2215b86fa0bcb04380452bf3209f49b7b15928d

SHA256
93a35c38789188a0a1198c62b95c424bd6e3ce741716531eac132c216a43eb8d

SHA512
3d559e18bcab9b8930daa87e9ade74edc1b7feb784b694af6fe6f983a9a330da471e10744fd1a45de7579534c64e795e01308b064fd8b4648e67f50ac2299cb4

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
fae06ed896b307256ea8823529894082

SHA1
13dca902f31afa56fc4e9510812d9bf6bd500a81

SHA256
9d1c1de6edce943d5d968b2f9bbaed06f2c703a86a85e44e2782e0623e3e1094

SHA512
21c4a4183b95305e8f9aaee470d623aa3686c66ed065b2563c0508684dc921ce7c14c9f6339f8469055465fec3210ebc1488f5801955784198ab7dd287c91b0e

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6f3d5c0c65c8db26a0fd8e3b0ed6f451

SHA1
862a2b1f198d9bd1e077a1ea80cca40961a44641

SHA256
e1ea123eb99152b0fb0b9a02cbc44a743cf79e866622617e1ce04c3dac8d8600

SHA512
0fe8f5b33528479fe03b3829eec0fd62de2c31107862fb66defe091b1c245ca690b007922641307cc7f06964a3d9f60ad1b05bc07e161e637d578437a632e4f0

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
c1a9e84cc343950ec0bd59c865b60298

SHA1
723cb32d1075bc323a035c9c8f59233a7be3c3d3

SHA256
496eb23492412e748e3fb6207a5d443d627a50523fa975d342740591c574adaf

SHA512
fce569b8f8c3f7f4271d66940f13020f8f75c2f97074d549b6291fa658642950b6a44868c8b8a66deecfe6d643b33d57690601bf4ddc3864e46d446f81fd4664

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
e89c09af342dffb5f497ba56e67af48e

SHA1
63f89072050a2a698a4860c12dfe57ed4f3da2fd

SHA256
50a85ad719066039302453e1093e1e65c4a66b80c2d2cebc748667b4f8b5f20f

SHA512
2937bedcd2597ff4731867d76af37550940bfdce6693f43c69774cf2cf07772b21e0ad9c04de7f5cc14bfafe475b9f990041fe2d6062f579904379ceca9c8d60

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a575630919b8ec6b7540ed777ed31aab

SHA1
0cf9d83e7134a771dd255a1ee1309908a84a5a3c

SHA256
f823a43f718675a2eb822244b192a38e10923863258ecc543d9dd800ef688748

SHA512
5544efbfe3a63eca77b5763a134c268a25bb405f844a0033d87aedd05c4aa0a90bde89ebca568baacda5eaae22a18cae18c5fd912bbca6284eb592e095138858

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e5de38d8b9b0b5b9d8b825b84ffac4b3

SHA1
9900a4ebc66f50e4128692bf9fe6b81afaebdcfd

SHA256
48c84b69487efd7524500ac14c6df59ae47ab3366419a0ac50c197210b316a41

SHA512
44f9adcd86072e172336e99a6a3733a7b06e877c05eefb2a56c9206c45f3673f6275b85f7b37834914efddf0d7f6516768a6da5e32c2ac4ca403bfc0c597227b

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8c6bd6e6db3f81f184a206b6c39b6876

SHA1
eaa09b2df4fe330e9a2ccefcc7bc388e51fe3b42

SHA256
819d6e7cf1664cd523b4a49865631939f037cb07dd9f0f38d81a156e417bbe30

SHA512
4d286ba85820e915653ab1185677694caf180e7b9cf3afd7d2cd9770dc843bb68d2dd6cc1c1461f769c23d8fe9acb145d575ddab2e3d39a3fdcd0a7495d6ac50

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
97a7a5857a11c0b84407b6c84fb1033d

SHA1
6007a985fb96acb8eeeafdc3bf1452740e22558a

SHA256
6d567302d7e6fc4235e20f9f9b2fd986ce7777c8c14274803755fc00425614cb

SHA512
6dbdfe947ef48abf39a76c7954f63f4f898b765871e95615d353887f124031b2e54da4a23deb012d63e572a6070d3bebb4eb50d9087f54decae1daecb354ed2c

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
aaee43bbc007505f2483450d6304a9ed

SHA1
31073de662ed06e8b924dc8f513875def25c1b3e

SHA256
b1ec01658001ab9c3c3da8c3a6073bc8330dfb20022acb16e394cce2d7d773e2

SHA512
91b138e014cf6432d160d767e1a6409ba2f8c735337913f473d55896d1446181ff8ac3a3c17916b9dda898126f6d79198a38f6f3d3b6a8db28da5294a6500816

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
abe03343fc30d44b3cbc12d46764b1a2

SHA1
6de8cf97783d43b6691d7a718fd7732c1e49992a

SHA256
07d33e6e407196e94b8bba1ad582bc4ebf3419f7e39d62d0b086ee796f0c0c98

SHA512
43e2b90eb0eb5fdda5a7619f2441f850a87127608fd8eb2496fc8f6b805e3d9581eb6dfbb25e68aa6904e534c3bb8c02441e12c7cfca19836421c6ee364804ce

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
9767578caab87e0c077b4fb31ac289dd

SHA1
e41ed42bd55367d7966df75ddace9d11e0c6a0ae

SHA256
26f3d20145240d51e6108e17d197cc4addbd8d0d13d658e665598da7cf16cb69

SHA512
03d00b3ef36b3d1e9ce14b0138883f0cf0d5d84236ce3888566907a458a77b62b24d070c6368b3cbf48840bfb98e66a07240304b71a981ed27327c14adb9c357

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b16f48e392cc548f38a7376c159aa971

SHA1
54d0e1072d9a02a2053f7b6730d8d0bd85a32d22

SHA256
bb6d9379ff4ed8fc045296672c74faa1fb872276aad5e7e6cf15782682328710

SHA512
dfebfcb62f09d0a06be652e646b0a6a30277788a589d2cdec7e7b52bec99299f9b143bc034b139318fa0bf808cf6911f5a0f9682bc6214192bebbb7c6bf84aea

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
b7186c549d37d07c14cfda3c030723d4

SHA1
23e9100f764cd6157ff34ca4be6e35b80a885a9a

SHA256
5038b1a8ab8a25286f11755bced507247d07bf6acc079c6da6134d84f9e73387

SHA512
5b35620d711151f5b617a37e4c6830ec74a9e69dae3c8edbc4254e931776fca2a63ef4083db589f74480cd9067de973f9ea285ea1a8dd32ce4e37d9e29b08956

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
2902f3dfb070975e72c94c512bcd43fe

SHA1
01523d6ff94b2f49eb2702428174eee39cab047c

SHA256
8821c28990195ef4086e59dd463c40c522dce7d7e84b9fbb9305cd36188f45bf

SHA512
91e1e1f01da45bf5f9dbafb2afe56120ddfaff26da4db8bd67580bacc4892ba4621c6a8045374e22bfce2bc420dc84760ad9f095e93bfdc286aef3783f013619

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
babdac3607a4ed52092efcd0b4dac7d6

SHA1
25f0876559447891f4d427082225b61279aea223

SHA256
22104192bc7f6d245415fdeb0ef5d523c601ff5fa0553ba26fccaedf354fa6d9

SHA512
6ece3344047aafbc17c3e606f20481a0f19dc5d6e7f4d158c4f5c9a82b1565465a7565e2435e86020e7e06c2458c69b63c7ce78458c3f260e3f66ddf425fa560

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
837dfca0c7349e9b57c7942248d615aa

SHA1
3bfbe3ab7d1c87120b4244099593c8c3178b9399

SHA256
c9b8aee19cfc32279c23e9c25d2c9775a2c8484fdc4e189e373fc27198fcc678

SHA512
9af8c91b670d238e25d38f8b57f92ab89645d31e61f89fd7da5624c164d42cb7c6e68ea075ad2d57bf81693e5a96fd284a9025576d5ed51bbbaaf7f0fe954428

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0

Filesize
20KB

MD5
62cab0842fa9a68566b11c3036a04d76

SHA1
a6ff4b0ac16b1777574a0a092172c6d72cd0e2ce

SHA256
3fd994ba809bc4ea79cded082f0fa2b859e27a6f9a30b34e728c7d3822698a96

SHA512
1367b1a66c3129c34d8d20d0c6c7e3e6affa0ec48d601c6604f3ae94b1d3167fa30b4ffadd4a24ed0d3334b8aeffee6b54771934c784d4f2a73aaff927a8e7d1

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0-journal

Filesize
512B

MD5
905744fc7a35471dcbd29324b418aad1

SHA1
c62ad13a4bac8f7a80dc18cd8be9c7fd4f2d64c8

SHA256
5b31ed858460ab9a4c5bfdd1f592c4f390acdcd96ab5bb01642af867fa6202fa

SHA512
e92552f7e68cf39a9759fcf9c0f3dc2a0e14f4168c637c9eed7405430030c2e3013daf0451e8f8c442f92aafc2c6acab06ac4b7b7791d076bbda54fdbac46043

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0-journal

Filesize
8KB

MD5
041c40c053b88a7c7aaa820ac338e8e5

SHA1
a4cce80d2bc3bb63a2bc35ccbf3ee4038e95ebbc

SHA256
21d12781722e62e4d8e6ca27b8e380e9d975733dc980b25c306978ad35ae39bd

SHA512
18d809feefbe77af25f8ae3eebabff35f5772615b180cc7cfde6ed115536b3f919bbe87e22599b72e53638bf4a19d8c48cb5f67df0d5d8656feb188402d192b5

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0-journal

Filesize
8KB

MD5
22b310cf86d3996c591388307514ea79

SHA1
d4e5620f13f11ffbe9268e24ff7947da8a254882

SHA256
6c58b710271927e4e4981625bd6e1bcc736dafc5f54ba556fa5e02f7b3aa43b4

SHA512
451bf10af26146a67158c2aea1689d372ee8d72efd17e4f598cfcef50466a2f612d4ed28f121c0734666a7b93ed3fa2d5f1d1420056bfccb60e949aa92fb5e58

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/com.crashlytics.settings.json

Filesize
708B

MD5
ee3cc8b5f5b42981ddd49b4996195305

SHA1
c08e6b10ab8bfff80ee54a1f3e9d85cae423fa9c

SHA256
18d75a90c592d3ae0078465bc262cb7f1a1b86d18320fe577da99713bc6d57a2

SHA512
6807870bc57e9ef6f067e2185b9062eb5cf2e2c8c27305c2ce212d94c78e0c17cb15e63cfc7ad9f6d29627a14d81a70c953d19ccc557559ac33330627a84f18d

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/keys

Filesize
76B

MD5
5cb3b1a52ae2faa82d7b765c3130b04a

SHA1
fa685df7ca4fbea3a6595b6f84d8e7d381f11926

SHA256
17af450a0b56d2a4d31925178aded86b950e799e16ffc4e8380a7fed2cabc47c

SHA512
03feb879998f97da55ca46c4768d7c38174c9ad0e75aa8db943cdf40164b249209d94831dc2889bb01daaa515b4ec7a2ec23c67cdb444b682e554a0dcea70671

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/keys

Filesize
111B

MD5
49e3d97da768841e202893929a2a9414

SHA1
435def111b540c784bf8450d74506aba27bd7b04

SHA256
b293510937800e89c84e2c59f090ee1f35284b1b90b26ab050ec7d37d6bbcf0c

SHA512
65934b49db8acc020e25ed4b0f5c0074c52332b9b172076a36f16b78619cfd9e84c2cb4552dc20a3909a444a94cce5648b76c4d81850755884b131ce85f1f51b

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/keys

Filesize
135B

MD5
80224de7c7dfcde1679eb35a9e35951e

SHA1
0b754ac36754bfb34667384011419820c42a44e1

SHA256
df5b89a5f5e218ab1706f3232f840dd578f4b4f92dfcd80eb1e94c75b307c325

SHA512
6835af8a0fcc7c9eb9db71484912972816e4b7bbc29f4d3cec307c654be9976e572a62477876942978174479723c0cc630b7f45aeccd3a5b6031201f20718ab2

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/report

Filesize
738B

MD5
415bc425177304595d988417e5625272

SHA1
74fa3fac8b42f030e2d82f093fd26a9b5a4f2ccd

SHA256
7be1b478e377250a414250a91aa043ccdd6022354cecfe12f3d043ce362bb7a2

SHA512
e41e8ed9896f9ff014a6ca5a9ae49558696f42540f84d3184ea52cc5f32353f8a0029c2363c67835e1f43d881fc772c403995b6ec7c75c2ec0173824e888023f

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/userlog

Filesize
630B

MD5
4bfa196ab0e6ce17d99e01e53c966ac1

SHA1
89c09d25779527a1836f7d3f6630f1b8629b7069

SHA256
86f2c05947dcbf63c6b481be3862422634498085d37466ade9cf7c1884442662

SHA512
f7ebb266f25e62fed96b021988a02e1a759361832658a6ffc86d4975814cd3ea35b68a7d1a638ba08ed6332c5c0796e13d777cc1a544120dc65cf5ebbf58cf63

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/66241D91036A000111510BF0C2F97EC0/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/ir.medu.shad/files/PersistedInstallation752613304021555193tmp

Filesize
567B

MD5
c482abb7114613eaf2a8e33441eeab52

SHA1
332649f1cf404203266323858ad121e6d11cd38d

SHA256
80b17bba8f936cfb71f7b254a1151d38ff688b1d5c2107c788e6dee41158771f

SHA512
01016d6de0968dfbd72ae47b4ea3b14dcc791340cef9dcb29d7a866f1466b21940afe5f1768bbc354703f15d090755bbd612929e1661bfe3db1115a2970a575e

Download Submit
/data/data/ir.medu.shad/files/PersistedInstallation9018781153830709244tmp

Filesize
90B

MD5
8387d51456960710947b574e5967b0aa

SHA1
9f582b306eb0aba88ade0a4b3c452fbda8a853a4

SHA256
b9b476d975d29696ff978595bade5810bf99f66dff2b238bbea1ab4656712caf

SHA512
ac128c2214c00f0e4fe471c5ed8d62bfb943e404181f85fb614c73b893e7e0784fcf77541a17533e7e218795263d1dcbc8b5d9638d1e276d3e22f8e8bf4df1c7

Download Submit
/data/data/ir.medu.shad/files/account1/cache4.db-journal

Filesize
512B

MD5
03110b59adfa41f598f467f459eded7f

SHA1
56ca37b26d194a1ea27b447da2520c08a4bdc078

SHA256
03bb7afb32a22a775a24187ae7a780dfd5535c9246b04c0cb8493be504c5d026

SHA512
c1f68186016eb617693407d6e990267ee13a33d21b7c54695903b9b6e2850b06ad988cc3aa25a9ef6d4e077d625d7a34aac40058333475eeccfe7c0b901575fd

Download Submit
/data/data/ir.medu.shad/files/account1/cache4.db-wal

Filesize
1.1MB

MD5
2671f9b72e33a062566c1e8329161a40

SHA1
7ed0fe2d29823f4fa77e7a48c9e0667ec1c6c229

SHA256
1e72f29960fc5101c76580d688bc94550d6c3f4754199c633ae5f1551db8256d

SHA512
737ea313a5358763652ba4fd2cd491ee544940e4d7101ba56b539086f2e6365700bf5417da7fffc39cee400079eb30cbe5c2cf8feb132a3d5aa347eabce56679

Download Submit
/data/data/ir.medu.shad/files/account2/cache4.db-journal

Filesize
512B

MD5
8436fa114ec9a95626e4b5caa4b3f2fe

SHA1
57275386106cf3c766496725d5d6bbe95d6e90cf

SHA256
a8ca13c0fe8045cd2603cb730411cdaa6b91ab6c363c9f2210d97b1ce01e94b6

SHA512
d67e2dd5cf00fd79444a7f2e71a27306d186c961dbc2e62f5503ea0518cb81f11b78e26e74c1c609d0b7412a00608e56779388d21440e6548a7ccc9baa6c3f60

Download Submit
/data/data/ir.medu.shad/files/account2/cache4.db-wal

Filesize
1.1MB

MD5
443f7e9862486765332b13b6e379de8b

SHA1
2fb0404f61df24ea2379afd275a1ffcc9a250324

SHA256
8ce70fec5658c340c4fd0dadadade64a79cdcc7faa4fb620f9b7ea6fa6980960

SHA512
8c41316290b9501180f0d90bf7631dd27a88ac75fb8beac8b9b7172144f14ea9bf58c5c3c5be807f89cd8520e7221ff1c63da2eb434a60d426ec93897fe097cb

Download Submit
/data/data/ir.medu.shad/files/cache4.db

Filesize
4KB

MD5
3ff674d0f9e82976113f39dca75b8f78

SHA1
fb1bf8a36688935c194e63dd8f18107e7033f5c0

SHA256
d4e1b9bdba21d5fd3b004eb02f191389d2b3e21f5a793af5d27a199f90c5493e

SHA512
41eb558e3b75e601a0fdb733833c5504fc869ba664cb537b2e2c84353218a9dfb7f94b4f20957f38043bf336ffc7a201834e4c4a5217fd2761648ef7cbbdef7e

Download Submit
/data/data/ir.medu.shad/files/cache4.db-journal

Filesize
512B

MD5
bca84e91ed811006231420452680882b

SHA1
caf87984699d0b2c9d59562b3df1ab189219bf1f

SHA256
106f66a5aa3270b88c8f2891eb491a67736bcb86f90fd4d095d0d217bd518aca

SHA512
e01f2a0f8fc2ed018cbfa7c44d6d60beea9af69fe52a0744e9c7315dcd7340e8f062cd0473e7ad2bc6624134f05862b50f5f4f335af78d5788a22e011b66f528

Download Submit
/data/data/ir.medu.shad/files/cache4.db-wal

Filesize
1.1MB

MD5
1dc37e86a2bb63b4bd6e43527f602f90

SHA1
a8c18d27c262fce890ee573f4235eb0ee3ae7ab5

SHA256
cbf7b2c6d6a865c72d56298ebf52393235b56ffa0234e2df2c703da59f683c2b

SHA512
cfa3b163ca633839111f6390ba46316013f581ba681c89fcf00866de0b970c1908466f679ff513b27191bdbae22f030407b238aa12c7ef3d9f373f0cda3b9834

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
d9b7083d3d776dfdfb4d7aae224cb577

SHA1
1c561633ae2868019ffa26a2630faf97d335b2ab

SHA256
7cbd34411a65908581eb3aa3ad23025b2bf0d49c8ca46b9c6104ac8051c1efa4

SHA512
8c1d792cd83a98bbf2445c80a5102eabd6977900b611db4d527596e0c72cf94c140c283649e8f123aff3f0767489875de2c2c3cc3f34adbc7fa6b6a140667852

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
fa6e60fa5299ffcab2350ffcb4e4fad4

SHA1
4f5cf2d266c7e2fe17269728a2603428c3ec31ba

SHA256
c4934c3d00db00a9c651a53887afe9b5baedb20fa816a72081c072652c7eae7c

SHA512
4a436857e7c52a636bad6bc4bea443dad5616068a6398e312cfa2107a62111133587136cd7bf28bea38065652bb40619d4e302fc89eba250e4fa900403c38061

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
fc946ff8076766e35af707c1ac666a33

SHA1
8a0dde98342a84744809f8850deb83e2775c0ebf

SHA256
7864b816646d96fa3f00e15a14661ff85437aa00bb945d7b01af6d09c6efb9da

SHA512
0942da5bb1115cbb2b3a1bf52333e91959869f12fc08d62500b22f2956665859b316ca85912fc7716eb3c1a7ff7ca297db7920bda592ee8179c3d0f813a111fa

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
8d0fe62d49a8790ecac7f4465389beac

SHA1
64df6c877af513979f51f2e2f92900938e8338c2

SHA256
eb3c9c0a455d04be573488dacd6bd23c26d5b4a1024e714cf86615d3641e6192

SHA512
bd374019527c98e9ade9384da87a9f2aca509c63635d68c66391ece508652b58f0e7eb935025c0b9aae54e6a9a23a62c4b3cb25595b1385a898d99baf9e74469

Download Submit