badbazaar | ade8d0d4511caa63f0d62075e99e39126b5a907a01986ee5575c82dc5748a384

Analysis

max time kernel
36s
max time network
50s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
20/04/2024, 20:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Shad-app-3.5.5(www.farsroid.com).apk
Size

77.4MB
MD5

116d717823c9cd6a8ed989ee5d0c5be8
SHA1

7c944b80159e78116578d57acdca2000309171f0
SHA256

ade8d0d4511caa63f0d62075e99e39126b5a907a01986ee5575c82dc5748a384
SHA512

ea9621106c0daa87f3d0c77624374b5a3ac4411fa94d455e5146170cd3f57374dbde99faf4c4f983332dfaa1145e1177a618083df1a24aa4eb1084bfa9ac6f21
SSDEEP

1572864:jX0e8kxPDkMFD4iJC4SVB+lhspXvgJRAPGpw8GSTimL:jukJRuivihYCPdpSBL

Score

10^/10

badbazaar collection discovery evasion infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	ir.medu.shad

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/contacts	ir.medu.shad

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	ir.medu.shad

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	ir.medu.shad

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.medu.shad

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ir.medu.shad

Checks the presence of a debugger
evasion

ir.medu.shad
1⤵
- Checks memory information
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4227

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Protected User Data

T1636

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ir.medu.shad/cache/image_manager_disk_cache/243a80ddb75be08002eb64eae69225fb9c1fe1eaec047877af5c3185f9588b05.0.tmp

Filesize
1KB

MD5
2c5aaf7eea3f5a3d3da135d58cfdc31c

SHA1
620ae454d340fa2730b21ca73b0a6809cd195729

SHA256
3f0f66bd874a1e23a20d901fbce4e70fae8dbd9cecb857702f4773cac3e43318

SHA512
3328693a30e9120db642586c4d4f3c0ae9e1900388b22fe0d187ce3e28f0c185e12c6d19c3b595bc3d6432d56c8a6e50b01aab52d932aa9269e59dd1f5e240d3

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/70a2d1e5d27bac6f7741b6f09f91521b82c42723eefee64913f31f206b8b93aa.0.tmp

Filesize
6KB

MD5
cdd8555c0161ed300795346dd509d2c0

SHA1
c9c32f5250652c2bbc73d0cc3d0afae829892aae

SHA256
7a902068e063acee78dc9de7df025310252dac051cfe4758f5f43e3be259b033

SHA512
83469dee91de7bf3f1e03a011f21ac7ec068bed93d5e21dae43fc5ba971122e50c622e1f2d02a97e820ee0a20cd943f4ca85b969990f556180df0c2009800192

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/journal

Filesize
325B

MD5
6deb46c2e3ea9d424ed08e6e5c44ed2f

SHA1
408c16e37d873a7cac453d5b879f12249a58720b

SHA256
b17e20fb3659e81ceecf1ee8e5585f2954f268bf325d631e5c992beee89192bb

SHA512
42f46f5e287e409c4f553fa2dfa60b9cff8eac93bb95290fb35b045fcd8f819d56a4192ddc838de226f08844e549ca6efc153e7bf6a5590ef80cbd22c9c611a5

Download Submit
/data/data/ir.medu.shad/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6cabfe189a33339850eab85703c938fd

SHA1
0943902a944ca4634d7fc992a483759204c15c95

SHA256
44c6bc36187132157602582765eb447dad17181f6849bce47168bf249dc8f348

SHA512
9a0a9fec8f5fd0c8481c1e81ae070cd7bd0f75b24e67795a6f0263fcd710c93e74d049e39e04d44260f6aee7d122d105b79d0d4434d247d894f173dbe470fc8c

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/ir.medu.shad/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
fc9cdce74ad5106f41b84022e93ea346

SHA1
0eeb4ac25527ef3542a8c63153b483f63b811cdb

SHA256
b16eab99834985d64aab430b6b96b55d7d09ceecc8c043a2a83adf3c43d18272

SHA512
d3b3dd73b323e1fefd07a16efc8c292d76823f0edb1dfb72b348d754a2cb8637f25240fe53fccf12205e140f7a38874166aba92c61b871cd0ceffe0b487d8286

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7809e697287a4f100e2da20fac437b4f

SHA1
828f5ba0cfff6cf35c38946b12e8878c62e32d89

SHA256
0b82012ce67a22f5edd5894a271516978c096758d54bd15c2e5a7cf8ca64f899

SHA512
67f7a5ba7b76044908401b809e93bd9b29b94710e4b6802c6d15d913c5e428fbd5476e744feb0026c7fa22507c312cfe8966dddfb1069808ca5be14722f7eee4

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ac964698ac112fe96a26c3a3038b447f

SHA1
afa7b638ecb22a99530fdabdf7fe5b2de5c22634

SHA256
ca9f1ccfbe46ee4a7b5538ad4efd3952d27cb63f4f099794a8a52b0ff653e296

SHA512
1ac8d88db058d4a645fbd59f1f9e4ba408290f1540bafd55bbe95e07c0663d52f458e915600b2f09333f50fa263a5bfca527a9be69b52ea5eec2f4fef4fceccc

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
85618a5813ef1319b7dfb7d725813883

SHA1
e17ea595bd78e03e3d45222f19cc757ae1b7e17e

SHA256
5fe4b58d1ab50f8d75c240bb2fe81924f65284b6427092f6aaf052d2986b965a

SHA512
419c5aa9dc7bf00d32fe65a5aedad82374cbb0bee628478a0e779185ffc353c49ebcdca82aa4d47c7980d4de5c2accd7b1f2b783f17688f4a9eeecbf856e50ae

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d396bee91682bc360cdd2fe3f5e26126

SHA1
7239803cde8cb56c13a72212324b56f87ad2c570

SHA256
090922806c2f913e00d4f9138b24277bd16d0a52ad586011345c002ed74387f8

SHA512
8436997ce1279f0b611440061be011ac5638e3186bcfc40a4b14de2bb064d8a4b528571ec41ec6b231dfb5141727c19202be4116e49a959cc946e82245007421

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
3507acd01f28f38db322c7b93d1b92b5

SHA1
71c7fcb62f16d8d6b19f3f9cc756c45ef20ea7bf

SHA256
81dcc52d260f4d6e273d2be58c2944457619f22ff044d2a4c5bb1c253d062d6d

SHA512
4ffc3fe571f9968d70495e12c25e5201272140379b0e442448c512a6a8ae12a86e3f2d80c42e7a73830d1930f3f5438eeb07cd858fe28b00799538ce7b6534f6

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f57c043d62e56dc72e795f8c94f79995

SHA1
6adcdf7538b03f36b2e79522154df614a9316205

SHA256
8dfee17087e1b0f22a0cadde021d5bdd6b4d6ce778b3588b11339e0c0e05618d

SHA512
f54f6b60ad689a441183c3dfad755a9dd8199433d9af1782e7c0993f777df0a5c60fa06cfaefb7bb17a9eebbe3f5377a448aa4b1595f5914ad8dc991e099f40d

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
730dabe60ad3424e2cbea6c1d8c7b758

SHA1
551a6606fe6e47d252ac615f1038c9305b10d177

SHA256
4548001131fe9e842537af5832adb9edfd52a7ce171c5b8dfe92baf730ef27c8

SHA512
bcdc086db91268f3425000e1b87599cdb32ae3dbdb2cbbc88d80c60d84e5678de1b61202e748f641e201d099cedf0fae22b8202cc60b1c42830423c68bcc6327

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
58b5ce6722f3df20b7d0dba7b882d5ff

SHA1
71f99c26aa6f30a72c5524a7582c360ac3d34a86

SHA256
99c7ac57a783e6bbbf2e7466423dafa2189af6e00d29ea698ee0e61b634571b0

SHA512
2b5d8d6fc4467d5f81605e88f799767d151b5e7f5c5695eb311e9d1f75ab2304721596d93f170611a91228c099326429278d5ccea091c6cfca137934a6a44d9e

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a6d71c73be18e077e1de359748d7676d

SHA1
3b9c59ec04424420a1a2bdcf9965ca86cb99efab

SHA256
3940df795e76f8ddf998c27445c1f62be6967a31d3a85ef82907fdb690398877

SHA512
25d482b5ca4a03ca35d9b92a4a8340372b69cbdf4edd7fcc9c54f5cabc46573511426f3a43a840649b4b013ff1a3b78b5ebd3f878060dd7055ebd1c1c5a1710c

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8345d16773f550a10e94c939f9452fbc

SHA1
ea4073a1e7403c1cb2c281bc3dc0996452473706

SHA256
b692b8a77e3f2c49e07ce9e74895902764101171eb15b34451329985a6c33b61

SHA512
84f2ad35b8866a914771872858325fcc8e42f14edbd4b38d163d96dab3bab44ff48370f5b3840668c94300ef145f197f4ac92b512f1b42de6d134bad9e7daf8f

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c90638410d57f31d2fd596509f553455

SHA1
0ca23e11df6d2350aeef671bb882a9b0d3ce3c10

SHA256
95715e5f83f6243911b87655f5648d5be4b3740b4f83d4f9a7ac5766748d3894

SHA512
3e8cbeb66fb1bab65397239026a9cf8f63466a8ea40483bd6b5f1d900f9c9bc3e0e6ddb139fa5908007d6b3193431d7ea106bdd831b98f0281bb7502aac6c507

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
df4435359d82d3c29708c18fbfbc1ee9

SHA1
078d26a9b650493942d26a73146dc8fa8f28ad81

SHA256
9b7bfc3f9c00b2eabeb7dfa34b8bc257a9d82fc6388ad32498621213e8742bbf

SHA512
827c6f6872a5a4ac46a318f49aea542174e591af1145355e258e59b203a3161fbc5f64f16283a8ef39c4de455eff8b49c0ac925ad4c2ac80185a0523f3fe7129

Download Submit
/data/data/ir.medu.shad/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2443645e547670e33752b8d13b097832

SHA1
3b322d9d8a00f320fc2d084ca3d85aa622bd7b05

SHA256
34d317f63e5e13eb78ed4c6d59f72a493936664c906a1b9e6f1be1de3c8118be

SHA512
114ad433315afb4f466eaa1030f4fa205c5dd7fdc22228f848da4b809161f2a523c08e7a50361cfbc958cef7953865d2e2b713da5ed28adb5512671fb40cbbe8

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0-journal

Filesize
512B

MD5
dccd8808d3f58cda372073532e5ab0d4

SHA1
04cbb4c4b80fcede34445099cda404d2b9dd969b

SHA256
65d435208e95943e04d3be62507652b9819dfc0b58e6a24231d5c936fcc784a3

SHA512
a8e916a19caecd3311e7a11c73fdf3bba04c8486ae6178c686fb48dbef0d424be3ae64b7989647b266acc384118aab0ff0b057b8a4fe90204fa8d6f86c5b7eb4

Download Submit
/data/data/ir.medu.shad/databases/شادCache_0-wal

Filesize
32KB

MD5
a0d74790785ba53d738fcf7054d5d0db

SHA1
f3216293e2e183c7bf3fbb3229d8ede69c83eb60

SHA256
69598d81064d7531cfc903526c16bebca068577e2117b5eba700852b53a8a7b0

SHA512
80995dab4848b01ceedd9b0329bcc72241f006470859614b37175541391e899973c7d5fed03dd611d2e65d445c412ea812e012c857a32137c46feb14d3994051

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/com.crashlytics.settings.json

Filesize
708B

MD5
23b01c9aff3ac2fe1409b0203dd5b4e7

SHA1
ccc1fc389a26aaaeb10cc832e3dae1350f42bd18

SHA256
a713fdcd79b980694a351ef7e96aa5a4aefe8d45026c800c144e23fe4cb4c9e1

SHA512
a2a603db0f37cc39dddf02444a6006128d92e3340dff22d520ce8a604d447349cc42b426886947181eba296ad2fbf688563cf810c2d1dc882999cb4ba58d504c

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/keys

Filesize
76B

MD5
5cb3b1a52ae2faa82d7b765c3130b04a

SHA1
fa685df7ca4fbea3a6595b6f84d8e7d381f11926

SHA256
17af450a0b56d2a4d31925178aded86b950e799e16ffc4e8380a7fed2cabc47c

SHA512
03feb879998f97da55ca46c4768d7c38174c9ad0e75aa8db943cdf40164b249209d94831dc2889bb01daaa515b4ec7a2ec23c67cdb444b682e554a0dcea70671

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/keys

Filesize
111B

MD5
49e3d97da768841e202893929a2a9414

SHA1
435def111b540c784bf8450d74506aba27bd7b04

SHA256
b293510937800e89c84e2c59f090ee1f35284b1b90b26ab050ec7d37d6bbcf0c

SHA512
65934b49db8acc020e25ed4b0f5c0074c52332b9b172076a36f16b78619cfd9e84c2cb4552dc20a3909a444a94cce5648b76c4d81850755884b131ce85f1f51b

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/keys

Filesize
135B

MD5
80224de7c7dfcde1679eb35a9e35951e

SHA1
0b754ac36754bfb34667384011419820c42a44e1

SHA256
df5b89a5f5e218ab1706f3232f840dd578f4b4f92dfcd80eb1e94c75b307c325

SHA512
6835af8a0fcc7c9eb9db71484912972816e4b7bbc29f4d3cec307c654be9976e572a62477876942978174479723c0cc630b7f45aeccd3a5b6031201f20718ab2

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/report

Filesize
737B

MD5
803c3b8bb6766b621b2cd353d6a69f1f

SHA1
e76189147a339b53694ac105387766068db2bb53

SHA256
3204a93681aa8e393c3f9d2f10b77cc92dd4292d2c68844815b11c861c2d3bb1

SHA512
57c183ef82c8908ef776509b46a2cafee87d38f13f80cc99b478a0df039700a2ca69182f9d2c061910e6d330b599344b1dfd4436adde8ff82b2febab54a2009e

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/userlog

Filesize
634B

MD5
e0fb288cf273574e466bdd5a36e04dfc

SHA1
6ac41d6fe6f75c825c8c62787fe60c759aed22af

SHA256
e506526af3bf9006daa3c8b6859b9a93bc53d2a4496e2997d55a8e5e916851bc

SHA512
2e462ac792c8fd5353ffcc2837e184e49b3d7e072df1845940059fc719356fb2a942b123556cde76447ecc424708ea2f214e77d4043fd3be5874c95fdbdccfd5

Download Submit
/data/data/ir.medu.shad/files/.com.google.firebase.crashlytics.files.v2:ir.medu.shad/open-sessions/6624219A0172000110835F6FF9F24A05/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/ir.medu.shad/files/PersistedInstallation3165934415607077772tmp

Filesize
90B

MD5
78225211009340a78f79290750d87cc6

SHA1
c38557e492c971295c493274c0b148548c9bb7bb

SHA256
a60ed9d33c3ec009f42195a008b980bc27f559f82eabe9f779c5d12c969cca19

SHA512
861d647563ee8448e9655a6e3354e7ed731e120bb195afe37a0a68c78d689fe6e3739bcf717322ce4f8dedc0d7b8d954586909d1454191d61aacef0b90f56c40

Download Submit
/data/data/ir.medu.shad/files/PersistedInstallation3298643080228153273tmp

Filesize
569B

MD5
54b3d8ed27d93a4ffd4f98a1fb8dab45

SHA1
e0999d80e9957ae22110a17e8748c273fd938873

SHA256
5a4a583fea331d7b361bd2405400b615e02aafbf084f4e938c04f6b70a54a14d

SHA512
cf598a2fed03e90c2a12efcb47b17bb629eb58105c242d033990fa8bfc3fe4ade41eebb0d85d6e50d7585c1937fe2ec6cd569cc1438457d082abe871e70a0f6a

Download Submit
/data/data/ir.medu.shad/files/account1/cache4.db-journal

Filesize
512B

MD5
0cc7bc0b9fbaef37e3ca883e2a3c899a

SHA1
0927001b2b70cf493427a8b38e92274cb0b0c296

SHA256
1c8df51109fd8f8f3d966572a25b90d12adfa1b0658b124c489fcd21e3304bd2

SHA512
4e6446474ee1bd661ca020dffa3fc5b0e590b91fd1ae13d307bc9723f80c22ac575278392bfa58423e6928f6ce2682ca5ca0a438018b9d7c384d3d29df47bf4f

Download Submit
/data/data/ir.medu.shad/files/account1/cache4.db-wal

Filesize
1.1MB

MD5
1a22c82bd54fe91a40f6c05fd917bf39

SHA1
012d7170c77f5a738e77b193335a3de673f915aa

SHA256
2181ea2024d0a0076e1bc09df49f5eb249d40760b2045b8dac17f8d7c4df4b10

SHA512
2344c5de9e47bceaaa8eea43df77e260433bc56114b79350d7b9a004c415551b68810e3d68f1a77a4b6a42556fc87c061733722074b2560fc6e0b0b161939bc7

Download Submit
/data/data/ir.medu.shad/files/account2/cache4.db-journal

Filesize
512B

MD5
3fbdba04a75d2742fb80e2fa3ce6a7b2

SHA1
726aca469943aa9c3dfde7225fb5bae2dfd695d3

SHA256
8fbc4d68abbcf16f9b24635d59e00c20ff52e93579abfd60cbfb4165e125bcad

SHA512
6a7b9892e92adb0436c0a244bd3233f4c09f43f525d06fc36eb2c0c5cd7575bc0e28dc2a8ed6e045ae6db29a9e469b9d8abf64a49fabdfec790818995c25047c

Download Submit
/data/data/ir.medu.shad/files/account2/cache4.db-wal

Filesize
1.1MB

MD5
bb4c96e293df11874de2f1831cce5468

SHA1
367b397edb30a140f651378f801d866eb1eb0291

SHA256
ef6a2b0cc102aa34381a6cb88fb917d3616fcfc982c7d36d54114014fd2268df

SHA512
28f09b627c47f82bcf9e4dbc18fccf56eb9cdc915dc2753a2eeb300f5fdf2fb450770ab435a00a43701e9752fed559f70d26431c19d6abb5ffbf192fd1329f8a

Download Submit
/data/data/ir.medu.shad/files/cache4.db

Filesize
4KB

MD5
3ff674d0f9e82976113f39dca75b8f78

SHA1
fb1bf8a36688935c194e63dd8f18107e7033f5c0

SHA256
d4e1b9bdba21d5fd3b004eb02f191389d2b3e21f5a793af5d27a199f90c5493e

SHA512
41eb558e3b75e601a0fdb733833c5504fc869ba664cb537b2e2c84353218a9dfb7f94b4f20957f38043bf336ffc7a201834e4c4a5217fd2761648ef7cbbdef7e

Download Submit
/data/data/ir.medu.shad/files/cache4.db-journal

Filesize
512B

MD5
e601c6a71d306cf23a6b8f79d2a6f931

SHA1
0ff3f6d898a51978283c6a293534ad31749728a0

SHA256
53de4da4bfa5ff0ead8f31b798d0e2f419b11193c3c5bdc5abe0bf1537f10704

SHA512
767038fdcd7b850a9630f081faf09d666af8a700022cb9e8d9675c98f7efd60cbb8c0d3750294f7bdf5bce9346274c273390edf77afca89aee30e1cfa699ebc6

Download Submit
/data/data/ir.medu.shad/files/cache4.db-wal

Filesize
1.1MB

MD5
fe2c4ec5a4f6b7ce28d607526c8074cb

SHA1
a7a0b8d60b6218d3e322e85dbd2bde316f74dff4

SHA256
97285e3452a596e892dcf75127ed226858e7d6d0e866795051c74b78e242d01e

SHA512
15c3eba5a7fa99209c4e4e49f11acd8141459e1dbd4aeeeb6c7982b2f9fb3c2cbfef5ac2820063c8584e8525b3078297a9d257a99c651cd90f4aa10958b62920

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
661551cfd146522589bb53c63806df75

SHA1
709cc660a9aadac547b16537c06e7190ac645363

SHA256
889d860d94c6ad25ae622f7d09b52853b587d5996164aae61cbb1cf05f89df89

SHA512
e029715962bb492a54541e66eb6672c007fc5b7431ca52ff1a55f4c15cc5e1a663a8dcc51cebbd0e2950b3595d8acb2d3a9a989659b5c3eb6895626b48f60da1

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
0014c3109a996e3e60ebc2f1b272ece6

SHA1
d1b0cd3ea30e112897e09a6eef102457f0adec7f

SHA256
def00e7f448fca3586c5fb46cf4f19ca7cad5538843f03e82e02a29554a30844

SHA512
8d15a11f328cdb22ee37d31dde0799dded553de4606eb09e5812e7fa5ab61a57a926448fc19abba36eca27199e3258a98b154c38a11bb74df4ffe0eb886eebab

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
f118aee4b855fb5afb47f5db0ca84668

SHA1
30188e879d28be791f84cd2a4a9408e9b02c11a7

SHA256
6043c68c63327fcaa9e61b361a1c6296350a6eac770df09efabd1bca67da9d28

SHA512
f8c1ef475fe2081b0862cb700bb5ba3299e20482266e805cb6daf16ee359684fe0cceaa02e6a9268fe71d0bc6da56752caf96ab71ebdb63d67bd0c109b40a300

Download Submit
/data/data/ir.medu.shad/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
77a90b75eb28695573bf5085a5fc7662

SHA1
b3c53f252d9bf1e4ac256ce729989893179db64d

SHA256
17bdd6a28044f1c080e3e12e74cd04bea2eb9d8a53f09d8534d1c2b4f173cd9e

SHA512
053d45fa80c13382f95c400cccf93150148a6d2bb4d8f25303a545814352c56d77503e14b29b371be965732fefc91f254c3ed042d70c5df0ed8f4d13ab9271c5

Download Submit
/storage/emulated/0/Android/data/ir.medu.shad/cache/000000000_999999_temp.f

Filesize
1024B

MD5
0f343b0931126a20f133d67c2b018a3b

SHA1
60cacbf3d72e1e7834203da608037b1bf83b40e8

SHA256
5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef

SHA512
8efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461

Download Submit