Analysis

  • max time kernel
    178s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 11:53

General

  • Target

    BaSalam.apk

  • Size

    14.7MB

  • MD5

    a973b538df92c14d3573be32454b1639

  • SHA1

    f3b7e2e07510d5b889d617dbbf78714a92fac0a1

  • SHA256

    e29fa10b148be279c203e1f9079e7245b834f7912534c1bf4180af37686f621e

  • SHA512

    bb3a1ed95f5c9d03b3bcd511537da816e35ca1f4c867f87bb055bf4f7ca5ca392f5a446ab1ae21699488d50040bffd9ac3c333a625dd96f7ba0fd1411224fe4c

  • SSDEEP

    393216:Le7WIw0L7MzJ3lfSPvS5xrOQi7JAgECYt5TI1mNRI36It:Leu0/Mz1laXWrOQiMC25E1mrwxt

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks memory information 2 TTPs 2 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 2 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Acquires the wake lock 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • ir.basalam.app
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    PID:5264
  • ir.basalam.app:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5383

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ir.basalam.app/app_google_tagmanager/resource_GTM-5K2DSCF
    Filesize

    18KB

    MD5

    f5a637ef34c05c98226eb85c0dfbd980

    SHA1

    8c6b7dc83c44ab05f733ec609e31a3a6a21a739b

    SHA256

    3c64fbf1d5b4cf74eb7cfa7b3fb604dd79336fdf433107d23a8e901924bd4ad9

    SHA512

    6df8f2edf60d6013e943b0befe02240008a4ef36eb3b741bffd0f2546dd398e0f422337077da1b43d8695ab7e457f027bdfe010cf031bb5e32c2b20dc7124b8e

  • /data/data/ir.basalam.app/cache/image_manager_disk_cache/journal.tmp
    Filesize

    31B

    MD5

    20c9aee4c7a4b9099a6b2a4a4b63efc4

    SHA1

    e93abde77e673c94567a44372005a73bb13deaae

    SHA256

    7819f0013afe759615190ab44fe5082739f2648e1365210f5f86c8147d5d776c

    SHA512

    3428c96e40c562ce95cb4f7175b68df1158885a0ccca1a80f6a4979b7f84c775e0f73d3c0a788d61f1d7dfa0805aa7daab10a2a8b537d751fa889fad35f3b173

  • /data/data/ir.basalam.app/databases/OneSignal.db
    Filesize

    52KB

    MD5

    6b375a9c6c11ece1386ac46f183b34f6

    SHA1

    adb8447f30bf3a9f93595a1c7833f802c3a4794a

    SHA256

    2db1c36a003244efecb0e889e0286adb92446b690ab322ae725adf2999fca53e

    SHA512

    1971e5e4801a29f9346de53730fc0f4c130ecaa7ab87e221c519f9674ba9abb41d0b1fdb6094f85343f1948516b8677f23458777782e4a0225595a433c2b1e52

  • /data/data/ir.basalam.app/databases/OneSignal.db-journal
    Filesize

    12KB

    MD5

    e5bcce247352fbb2543ead34dd37e831

    SHA1

    a5327bf0058adacbb1770fbcd269e44b6b463e4e

    SHA256

    0bcec55505d90809157c23e9092ef8ebf74875d4e72462173363807837a233a5

    SHA512

    a49ed2ed203d866099e2449b605add06b6a382ff3abf91c318ea0373fe38945841534661f807a3adbedd31afc113e69f9eec50f73f914c00eaa8c12b773ef584

  • /data/data/ir.basalam.app/databases/OneSignal.db-journal
    Filesize

    12KB

    MD5

    f16a34b9e112091c5266f476894435ab

    SHA1

    3b88a01a363cc325b6636d7157705b6d382e7d2b

    SHA256

    418fe9e236665ed07128a116a293212a87b017977b4b1545afb39bdb56762532

    SHA512

    820d1ae84377ae0e7ac1dba0d9907894885346e90aff67317f483b843b08c36c9116b9436602e3d8b6d215863ab10b349b84419bf8fe20d2fa191580040cbbf7

  • /data/data/ir.basalam.app/databases/OneSignal.db-journal
    Filesize

    12KB

    MD5

    d490b761865cf96265cabd70b9e16fdd

    SHA1

    707e89e82721063c12e4c4d47407aab439b823da

    SHA256

    e44c1888994bae9dc7051adb38450cccf712fa5ce666e3b6fcf9a37c5466b525

    SHA512

    fbc9f772fc22ab1a760138a85c887b84667c0ab22148c14ccc120a57b7655710a94626c4267ddef61b930b3ab564d80f501e68fbd77aa72d3a353432df040096

  • /data/data/ir.basalam.app/databases/com.google.android.datatransport.events
    Filesize

    40KB

    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/data/ir.basalam.app/databases/com.google.android.datatransport.events-journal
    Filesize

    512B

    MD5

    cbfd709137b85b834b04185ac65590a7

    SHA1

    4cecf60e30c3ee1f80f1d3862c88747ba61ac320

    SHA256

    5988e0bb6381cb22eaf1b892a3d5429bf469c2549ea08a9cebfb8c87276cc165

    SHA512

    5e1a7e37b27e816edbb62e396fc277fb638ed818f039a352c5ec5f51e57dc32ed9b1ef4296d6c92f0cdeded28ec3a7a3a60e407f7cc324edd08037bb0820f96c

  • /data/data/ir.basalam.app/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    ac87367d9df9c353804eacf351f46a86

    SHA1

    db0754bfa921ae0adc0196b25d42a26f8b48fcfa

    SHA256

    0268b147ddd5567b9d74c1554b342640cba6388305fe7d5c4513c01c4666d033

    SHA512

    f0d64a453489751bde8fffd9c340e2c5bfa7ce430c66b9a9c239fe631a33ba23ab3860ef54e521dd9632916f2582b0db360b689e4f0b8f5b09b987c313dbaf49

  • /data/data/ir.basalam.app/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    d1067f083e97ad75b739ab684b2f7fce

    SHA1

    b13aba92ae1041db6c6f35b7e4e3914e0885adb5

    SHA256

    9d4ad50e03986b7fc2a57a874c0c6392c01b46a9f80da3277a6970ee32d10598

    SHA512

    0ec0ce202d2efb8a1226954c15ec3f3eea1654f03431372c2f5025f80f369c6ba2fa594466c61a3aeff38751407e35f4add4d2810ba0fb20530f770fd6a5fd06

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence
    Filesize

    24KB

    MD5

    97d327641032c2c2818b3d7dd14accef

    SHA1

    495d21ee1f04998d4a681f20ef35e5d13a4240ad

    SHA256

    fa53f92d25d9fbf8078453f2b1fd177916be5cba1dd626445dd45c99c8a80529

    SHA512

    23bffa6b698b6825d71e230ea74206f04b5047ba4ac92a3b108d04bc2bf539e74cb5c8ac12156bd2e57a447f84d4aec667af3389e8d23477a89c2572776ab560

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence
    Filesize

    24KB

    MD5

    2bf42deb7479455820484c92d1a33710

    SHA1

    2fa93baf827200a7fcba063572ed4d53645fa692

    SHA256

    4dd25ac0c151a275cd28ff85ee6b55eb2794d7ae59ce487b31309911f4f5bb14

    SHA512

    c142fb5be9fcffd685275344466a41942c9a88cd3e43740c81d691f63e03f8154b2fc768e382a203bb293cc879eddeedd4d8d753b859a56569d8b37648d7eadb

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    16KB

    MD5

    9a971eb09124105ad19e7015eaceb709

    SHA1

    f7ab8d1b9069a786c464e7c286a97052fc4bd2a0

    SHA256

    9456029c2d05bb309ba70621d042fbb7281936a2dff3802fa60aceced79eca14

    SHA512

    54470895d35bfea63784ba465014ef8f3bfb36f78aeebf782f74739d128484538cc538c6232dca9a100f020c85d44660f9b47041242c032062478bc4ef7c57c7

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    8KB

    MD5

    5f972d8200b63a1f3922119aa8c0844a

    SHA1

    c201263f42f82ca61e795cb4839aca1e0a9ca798

    SHA256

    b981e1cc88721abd8fcd5fecd02b7325a53d44cee588db929b7af7f4245f527e

    SHA512

    e5512bc6563454034f751ebaf984da82cf52ab8793bed65c5a5addc8fe7aa5faffc4da7006ee1648a7d80b28bc92c98f2b1aee2686c961c855e9942601ad000d

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    12KB

    MD5

    225b6ef7c084541645bd13cd241dff4b

    SHA1

    405f088bd4490f301c5629266b4c2b1776bb5f58

    SHA256

    12874b94e5f1004424714804332b41bb07b39febac88d897010a829a3e78d228

    SHA512

    4ff4e9b0f4da05115960a9cfc045899dc85d537717fc77feb06681bd1e74d917fa33aac6b377b1fbb8f0e6e12b51fc15828a71b31cfa1df21cf30a0cbe01a514

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    16KB

    MD5

    200596365efaf39b8f03721deea64aed

    SHA1

    eddb8a28a4fb829720e30c7f893f918c2cee9973

    SHA256

    b0c1a48118a8f48f8ce7a2972bd1c0bc03e47c9b688843465b96e5a80a9c0921

    SHA512

    d48272b38904cc38252191f9b5fb49b94014e2ef276a2aee4ce40891ccb5f6f9a9c9a5dae4c28e8c406f4202a52d8366b0405b3849e47c1dd4edd5ab1f5d62f9

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    16KB

    MD5

    777e3dce8b234e605cca3602d923e149

    SHA1

    c0254f55f7ea0478aa8419f23204662675654684

    SHA256

    c7bcfce52564737abc42be8cb38d3bd83aaeae4479e638a7797cc0cbec082462

    SHA512

    91f6943ce18893f49c63576be2bed698ba6d0ac72dfcd64d285717dfd7ea9ae9c9b206318e2537f758775f42560391df1c47eea34c6b98e9d2e8fae024362b0a

  • /data/data/ir.basalam.app/databases/com.microsoft.appcenter.persistence-journal
    Filesize

    12KB

    MD5

    6f22f2e600f1c95a088b70eb935a9756

    SHA1

    1a060991c80c3a8177b70711cadae590dec0eeed

    SHA256

    57129f4760bebe0f6321cc339a679307c9174ba5680e32e7977fbea2afd5a463

    SHA512

    33a15fd884fb62d5255f0ecb110f639139f1417f86728411dfc409154ffcf8aee485d7522c20ca0f1e21a80ba8564e979592ff77667d4af921fec0afb0e81867

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    0afae8e7002084d7d864aafd6bccaeb6

    SHA1

    48753ea0cdf8bb39292abaa3e95614e1b787abea

    SHA256

    d361b74893144d86fad8da7c557b38f165c6206af7cc419435056c82dfe22cc0

    SHA512

    3ce5a8feb0e5e9cb2bbd22e9e687790913dde5975da7f90265f847afe26c1cee595eb08d52ed32c93b6eb52ae2f05d50521199a0acf5cd02645355a4c5d8f05e

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    4ccc350ec6718547412baf3800f5ca26

    SHA1

    3eb1549ba57c9469baedf52663eb1402ee40c1df

    SHA256

    0f79dc19b0c0170707701f8587714c9e4dc55e21cea9e9039c0c90e35262e76a

    SHA512

    719a6a43a4fb25b6498924d26006a95f3ed63c005fa2644e4aa52aeb9d805823ad67525083ea335283496f5b428e11629199f156c7c6f6fd479e187ea1be0b18

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    9854b4ba5eb9d2bbd29ea06fab1e9e55

    SHA1

    b525e9e73fb3293b5dea3f01993389fce2819327

    SHA256

    63fbf7cd0af71e00a520dabf4c705b3adaf6a0c60438c3031a4f0b1e033656e0

    SHA512

    affb86f640461908801feb13f885259d71c6b37548f0b395940f02716a22845563f127096c2c76927c193c7d0c7fbb4abff64a439287eafcdd1f34d30e5a8d47

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    719dbd1328124d8402a11d83d4302c08

    SHA1

    e3e013764a451e664f397bb7945081fdc8c6840d

    SHA256

    ae36236185825af91a38d12ba57438f5acd06e9598f571f690c06d9b2816ba8c

    SHA512

    5c1fa481d1189f6e8f645c8686e244949d79abbd83ad064227fdeecb6e843fe637ae68ee7ddeaf1a096abf04cd7b8c93f62adb536a754af63372f8fd5d8f4fb0

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    5ee1d2e9f9b64eda6e52b6821cf7fd88

    SHA1

    412acc88d898727c8562a81a87a468983bf644db

    SHA256

    d9f38cef67473f6e69ee9a9e448f54244fbb9d52fb84d9ae82fcd6d2619c83f5

    SHA512

    4eb2d7404a67a0e016bc7f89bc5e2f22f090235232422f95bc7c9217dc53b0ef02ae5cceb7fb91221e270cf74f83c8af5c9b6e0907adf00b89104ab250608d13

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    8ac97da545e64ef30f8a5604488439c2

    SHA1

    b9d96c7ce95b330dbbbd73bae7e884a55d52289b

    SHA256

    3c3248787f576399b2bfb8bf43b0a92e3456b0de1e8daaf9000a5297bbd5d2a2

    SHA512

    f93097e77af9e3966050ff0d4356ad9efd458b05ea38334b3a9a75f34b81286114805bcb89d36c147f0dbef6ee7d260432663f44ccaf67a81269744c4543b19f

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    4f8c0d9efc4b33e18a9fdcb357927f75

    SHA1

    6b68aa50335204b2fe918109772c99df031d5cb0

    SHA256

    b5b38b0f6c12cbe3dcdb2cd96a19d620f33d68ca9a68e0f9ca1c4d5c0f67e0b4

    SHA512

    66bc35941b9de5806f1822ac6434c04a3b5b47ecfcbf9e6388e04c1cd24e2ee31326e119b930dcfaa1f4a25a6fb205b293629da5579fd60bace16a83fd69c26e

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    4KB

    MD5

    b59bb50323206291b77ec0a7fc5f95d9

    SHA1

    956d4782f118dbb32decac26e9d19624b057910b

    SHA256

    642fec2b0819f395ad1d9780dd3735ac7f69ad94d59d5c7c8eb884201c40ab08

    SHA512

    eea67c1d1cd930aa8c04e6c8be993652f3927ffb7f745ec9457f5c95bd251a783f61c4c92640b6db6b3d8114036c3e1deb9997bbb4c4d6f7a7af734908340ab3

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    e5bbfeff17e6e3087c4725470630b502

    SHA1

    20094dd86aa4883550ba20c58e9fa691f21253a3

    SHA256

    5ba5d068ca68fde88cb0f3977c712c91d5c7301c3e26f483edc2adfb298298e6

    SHA512

    878b7863c59b166e45827fd8b16a85ae5255bc0d18368cb283c708f269b78cfe07d7a409ee398bc197b0e2b7cef9cb1bf4c5c92999f5ad0455c979bbef91d129

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    e769ed36c2b043109d8e85c7231e5d80

    SHA1

    e000307ac2bdaa259a9d365edeac093c5e05e8cb

    SHA256

    7b9d0c2e868a8c337b6b65e925e7cd59145498fae70d49ef32bd3c3f92caa437

    SHA512

    3b9129ad6cdcc0fc0941d8d932efd0f88cb1e5eae1280e135aa0407cdd168a4b7168fe316f4bce2d56ef424c4ff0027a93c6a3735b68ca245180fa3d5491f864

  • /data/data/ir.basalam.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    943e4a8657e5767904c008dd5db9b4c9

    SHA1

    99be3169a2a53e0a262363bbd976dea85efd0de6

    SHA256

    d445d2de76dff80def29d123a206e9bbeeb9a1203c3493cfc5ff09710b297cf3

    SHA512

    e15f6a91b9c6ab926ce304a76ca708935415381167ab9c1bb0c79e83f4506778f29765c8a7275368188266a9ce6bf70ac78dbab1e77c965324eb42855e33f050

  • /data/data/ir.basalam.app/databases/ir.metrix.sdk
    Filesize

    20KB

    MD5

    832d863d00d7e9fecdce010d6b7a0fdc

    SHA1

    230f04aa6d9ec91f10201a39e906e98ba8ee0161

    SHA256

    1ba717ee45058b7981a72f399fc9bd23052886ca14e7d2584bbbdece0b73ea4b

    SHA512

    6517722af64bd2d5ea9d7352194b29b765ab1e1cd8e5b3fd9cfe2ceb3550d1cf665648c0439d93890268090ca0b7c803db416dcb40502fd84d7d8fc2a2f1a0da

  • /data/data/ir.basalam.app/databases/ir.metrix.sdk-journal
    Filesize

    512B

    MD5

    f91cc4c727363e9d98a2a2e0f61f73e2

    SHA1

    98c8f92628f5d6e259b5153ee69e4bdc51008973

    SHA256

    9768d588f24c5e48a05e893aec7f3282b584bebfdf243f611c70202cc6904dd8

    SHA512

    760bd303670b67f32b216f06450d4f22c8306aa37c7a4ab1dca194e6f0c0549ea7cd8565e24d78c392828aa0fea4f2affb399eceec45a6ce8a4810577e42226c

  • /data/data/ir.basalam.app/databases/ir.metrix.sdk-journal
    Filesize

    16KB

    MD5

    da302f4c2f2af1c7d2853868d977034e

    SHA1

    dee40a4ac285574b4406e6b86cd8dc117335b9aa

    SHA256

    4572f0c744376b9cb8b41643a0985930304b8aae138270bde618dba3fc8271b1

    SHA512

    43ec3874298a6649cd37160e6d7239499f9b28889606b6509e21b281520102e92612190eadb4b72e3aa3fbef07bcb2825d2397df39983ecbe75ee511f97e219d

  • /data/data/ir.basalam.app/databases/ir.metrix.sdk-journal
    Filesize

    8KB

    MD5

    c494ac8c5533ec563f14055d6a6fcf6e

    SHA1

    bf815b450803faa9185bcd4f6281d0e6b5353c9c

    SHA256

    63e2acff2ca104bfa30ac328a573f646c5d6426e6654106e694fffae7eee7acf

    SHA512

    7dfeb080f36527296860e4a2c6e9bcf77b65f1ccb18ffcd8658c4dd805754818fb2925d9f6f5facca1731e8a628bf9df83e53f011db191880399aab3837d1627

  • /data/data/ir.basalam.app/databases/tracking_db
    Filesize

    4KB

    MD5

    e47f3dbb540f43e904e5cacdb2879e94

    SHA1

    f4d94b834ed1cd089c1543b79ce51565cf39c00b

    SHA256

    d92bcceee7095a98e5b788dbd2c87b7d6be0c9c205acfb4a4789b17869a4be59

    SHA512

    80dac75f79fca9303469b4b344ce97d3e14bd49b9fbd22b83464ed409a15395a1597f5f30897bc1ddd38273df0ada6740513f3725c70095c56ea3f539c882bd8

  • /data/data/ir.basalam.app/databases/tracking_db-journal
    Filesize

    8KB

    MD5

    0e6acbaf4072e245a30193906fe6c837

    SHA1

    dde82db672acc4af4f2a445843b1151e1f1630ce

    SHA256

    3426a8bf2eff8f351d9368cea9d1fe5b0cd0da1a1855df2ecd631750906ae573

    SHA512

    9836bb50f5ed25d241c7ec6f1012b6558ffb31500f0d6884edd636996bdfa37abdc804637cfc4671d90adb175633324bd9df78e251decebd4d1c343df4213324

  • /data/data/ir.basalam.app/databases/tracking_db-shm
    Filesize

    32KB

    MD5

    50acb33a1115c0ef68834ed06822335e

    SHA1

    061d16326984b1ef2f281adcc7f437226c02ecb5

    SHA256

    e4ce33c3f05254c405051d0d4fc3efaee576e819b857483d45ebc17c252453e4

    SHA512

    b575bd0c45374e450d56d1b81c883d80be6881e4a01fab5cc431b7ea0cb4a80a698d223a30940e49a903e16f85368330ffa78ef17035c942ee789b137583d82f

  • /data/data/ir.basalam.app/databases/tracking_db-wal
    Filesize

    36KB

    MD5

    13b1fa4a939274c8d98be0f7365b4bd8

    SHA1

    ebc43a2bf14c40f841c86baa5d43a6fd33da5e09

    SHA256

    27742e842047fa547c890030fd00b10f20f854e13579f85a3c1d4e6660d58b1f

    SHA512

    334bf53138506881a73ff1b6574cae1edb688b3fc9af81ac387a1fe42459a86d810fdb67f4f01cadaf30a4b8a0f5eb077aa9d1e0e93e93f2f93f504d1a4e691d

  • /data/data/ir.basalam.app/databases/tracking_db-wal
    Filesize

    40KB

    MD5

    8c5d4fcde89ca519907022524796e523

    SHA1

    79e754ca0c354531e451a1f45c2cde08166c4774

    SHA256

    3ecb1f8d803c1fc9dd84803d507d82a851efa12bc204ee500b9f8c9ddcf60f01

    SHA512

    527984b91a6e2b29f3096c6d24e98ce739906281dff9b1881d2fece2a27d639a0cb8a6fab67e10e6012f1d6782a9c064357ce16d943a7654ed428b0dadc831b8

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/664DE13F00BE-0001-1490-F367B8E3B203BeginSession.cls_temp
    Filesize

    75B

    MD5

    45b50985d7f708ac62749416a575b149

    SHA1

    8e16134bd7c1382d99e8385b7be9b2640e4f1f74

    SHA256

    a0fb814e85c5f0d2a7ff52fd33c4f7e82b1b2ea61e0882f74f508c96e3e976a3

    SHA512

    43d1d9ef6635450206cad0b8109ec8129e31f033bacb6b57de30b385320933318e5ca4de2615942589586bc304b62434cb5d45e6c79ae66edd02fb96046c5999

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/664DE13F00BE-0001-1490-F367B8E3B203SessionApp.cls_temp
    Filesize

    69B

    MD5

    a34b620ef31cf85ab7b1d1e094a3be49

    SHA1

    2aa09a137ebe99dca890a6930b13018e953ff187

    SHA256

    b50517de72e326a739c5a1df5577022406cdf2667140c24694c762e4b4289b18

    SHA512

    65c2af3cf3b55c954f3c33428f7885f8dd3a249a72b85c2a9c0789bd31e9d9cf2901b0887a6b5337e413dc9a81e44fd7c57f65e01d69a294b650274550f804e8

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/664DE13F00BE-0001-1490-F367B8E3B203SessionDevice.cls_temp
    Filesize

    12KB

    MD5

    75a0e5e334fbbff507a17e9cf8d2f556

    SHA1

    fa1a7632d0ea1d0ec448567b2b3aa8a6255ac180

    SHA256

    b3988c6da38f5ef43a0c46935dd75794d6dfcec6b72a0669164e7b529c77af27

    SHA512

    909869112b5423f610bec36856ce74ad0c5e62ba87626a2a298db3061f5eee7e27b37e2b28f692b4b7a6ee0c62b09b0d89acff6387c8d421946204724917f415

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
    Filesize

    710B

    MD5

    9fe7fcd6e0819836e473468d386115b9

    SHA1

    7437ffde47ce765fd0ce7dc6591afe426d8fd483

    SHA256

    f7f958ce3005d6ac685ceb0659f35baabce8dbb65976566284d646e4edf50dfb

    SHA512

    f97f58b141eb9005f9d281841559727ea9b519322ea5e13a75caa2e9547091c4b54ff382178f394ed51021ff7cf966e12b7c59482871a5d427a869d2f1890002

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
    Filesize

    710B

    MD5

    096aea7468dada1833c3d7fc42c0535f

    SHA1

    2f15e81c17b292922cac5649a861ecb9d1c4bf2e

    SHA256

    07eed2e6987e2d4e5173deadc553f2921b116c5798fd7a3203aa003a517bf33b

    SHA512

    e35fb99d75d8935e99d0b03152ab652918712e77425715e7fe36dd10fc47ee226a68b8c9250e9c29758c7f4a739200b7cb8d33dd90c6d81f17fb7fec87ede2f6

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-664DE13F00BE-0001-1490-F367B8E3B203.temp
    Filesize

    470B

    MD5

    b810a3572b55c5c451877076b0311335

    SHA1

    037e2703a8feabb2cb110589bbed2669b004bfb0

    SHA256

    472a39ef8d24b74478d2c32dfbefb549d6df15920abc9652bf5a2c124897056b

    SHA512

    6d8472b327c2db9388adb71c8e87b4bda069e1dcb54f2aa60930e8ec7a56cbc13834287fcae475e8100c5d34373af44549497d312397fb1bb28c35ca0ac4a876

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-664DE13F00BE-0001-1490-F367B8E3B203.temp.tmp
    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/report-persistence/sessions/664DE13F00BE00011490F367B8E3B203/report
    Filesize

    8KB

    MD5

    9c000d6e2aa617082d1716ba4ea6ca22

    SHA1

    bd3a688fef0998ffca63c8fce941dc5e1503c0ec

    SHA256

    34de8570c64b2d5144eef32dcd1c3d34ffbb98fe997a643bfaf08ecbfdb6a520

    SHA512

    ef6a64777c0d2cb2f619e85e100833bd7c8f04822e080d8476374acdadab6f864a7fa567f38bb7bea3d2ba38c4389af1be78b7f137ddb32a640d5d72c12fa31c

  • /data/data/ir.basalam.app/files/.com.google.firebase.crashlytics/report-persistence/sessions/664DE144022F00011507F367B8E3B203/report
    Filesize

    740B

    MD5

    fccf25300571730a7e73450bc9f073a5

    SHA1

    f2589d0edd26ab2775c0b20d50db1b0399c45648

    SHA256

    e4468fca0768f8f6893785b67754e9839461a2c31d3f9caaf3c4297f73d10724

    SHA512

    24e90c75ab3131941399b06ee7ac130849d2cde743761b6a92527562b5d25db4e3b1ae325766203d786019ebfd201d12ca4bb96b9acb3d20261583911be8e68e

  • /data/data/ir.basalam.app/files/PersistedInstallation3245596294115052570tmp
    Filesize

    90B

    MD5

    fb5a4c04dd6e957a4254f6b62d613ee5

    SHA1

    94c3963b5d785069286db49c428b1afdde7de54e

    SHA256

    92e84254a02fcda773f0ce51b6703657b6ed18c8a590f81310c20294d4835625

    SHA512

    7da53f687a8cfe28712211b7beaf975d6c0c3dd02060b5a6dcd817e016a6bc1ee433bfffd3c9975de1d3d138666446bdd1fa75fa0feb98a2c0a6db20bd212046

  • /data/data/ir.basalam.app/files/PersistedInstallation5201632703672585325tmp
    Filesize

    8KB

    MD5

    be30a758aedc8e08e1919bfd1a11da5b

    SHA1

    311959f02ed41e33249da70180b74e5ce249c924

    SHA256

    3c83b942bab675809aa2afbbf445bc94c0cd0e0c2333c88b98a3b8b0168ecc7f

    SHA512

    710499ff1a7fcbbef42456e09b5045e978703d8a933d39190c763c157189f72f4cad7eec92d9dbb00c229d62321b493d9bcdc72a2ad881c5f5ef067ad921702e

  • /data/data/ir.basalam.app/files/PersistedInstallation6940381382780966995tmp
    Filesize

    569B

    MD5

    4c364cedf816f62ca3c50bfe69c987f3

    SHA1

    fea11a083fe52abf4bdc611159487bd1872e802f

    SHA256

    fddf671d6f0736107158871ddcf7ba3b67a541311c7692686168bc835c05ea8b

    SHA512

    385b33b96105858deab9559ff0a22dcb720c7902e46a3c485ab29fa9961cb1d1348c80ea7f4557f935e034160721e407bd4dbef9d53612cde3835c5de4a48135

  • /data/data/ir.basalam.app/files/PersistedInstallation7508781934022075075tmp
    Filesize

    90B

    MD5

    a288c0a040fe3315ed560e1a266e1673

    SHA1

    e99fb8c4b56bb0246fbc8dd3fbc5ac549d795996

    SHA256

    6465c9041d86bebd5c748ab8d6646f5074a0c54ec86214716b929afcedb7567e

    SHA512

    d2c6aab9863867404252b11d82e26a98c9495e2e872dcf175e6c7189f98fb0d48ec9dfeb566dcb7a89a1ab1e78705e3d3a461b009b1c21ceb1ecb8512100cb19

  • /data/data/ir.basalam.app/files/PersistedInstallation8047608277355602458tmp
    Filesize

    90B

    MD5

    b2cb3dbe94dcd206678ddd302ce3cb2c

    SHA1

    6b01e02d818ced005835ed96994c6e3d60b2bdb2

    SHA256

    0dadf65eecbafe99579d477522940b25807ea2f3455b5d55e976c912472feab4

    SHA512

    6686e24ff32c5e6b67fdaf7c0cf5b70077212e7d34cc0a8415f44a6ac4e2d6fde3ba9fbb300b914eea4d1920f957e9f539f30d2feefc17b47f55ace17d6d6055

  • /data/data/ir.basalam.app/files/PersistedInstallation8844489205148012034tmp
    Filesize

    561B

    MD5

    8fe96ca393d4a633718309c73b672364

    SHA1

    d21509f938cabcb19d80c0f44cfa4a06cabf9493

    SHA256

    8c0fdd39f24e7acf00ee28aac8b85e424ca26400308032d9f550b017327e1361

    SHA512

    cf914d8f6b7b81149844b99b3c209a4961b2517e25d187ac62183e5c8ccfc687c1df512d8eb25bb22abc943457c2afea50314756feab259da56eb488c07a8a8c

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb
    Filesize

    20KB

    MD5

    5add457641272e4f94594b8bef331b31

    SHA1

    dc3f469f810b92e5aeaceac2b9bc97c5ece4a489

    SHA256

    cf9b5be1f32566289080dc2ad19fb9dfd237d4f47c24a969fef4d1ce8aca96c5

    SHA512

    22114b2b0f8175c07f87b8ca9312448e18932a4584e8af1b65523475abba78730ed781ea147f0e60b9a907a4961bd87739b37279aacb7575f527127821f0cdf5

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb
    Filesize

    104KB

    MD5

    4ac51ea0d7a19a460595bdb4d012b911

    SHA1

    0ea2f83a00b1b76864fa0a4a6044c5ed60086f03

    SHA256

    7883f7e42ecc887be5f8dd6ed3fbcda75455417563ccc2dc4f4f22b1f2e1b10e

    SHA512

    669ad74da4a3088f9ec268ec567ba1dd7880818a7b68dcaddd48a0c3c60e4b7e74a32ae61627160b6f40cfe8dc27c0e5bbb99b920ca18daa14f5b3eec58762c6

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    0f949f6e9a7e871e0e82604542a80cdf

    SHA1

    88c000ef99f1c7063813ad672aa7870b7567ad1a

    SHA256

    ad6df6cdc7bd176e15e0adc7e602c480f0bf01959ae9b194c6e311b898d7f0bd

    SHA512

    6123df115f5cc3b557893971d05f8e2f7cec1d8f9825ad34be5d8eca7c914282610af8c567796fb3e131ece2e52a8b10a5a24326827e76877efaa3da160c7e59

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    4edc242e3ffe193c957f0ad4b64fef14

    SHA1

    49b80e01726cd3a0a093144f6b87bb4d69631a20

    SHA256

    bde9bca53c6e7dbbde04f72d6899f9d28cf6886cb74eba51c0ffa0b97b6b827a

    SHA512

    a9f1ecfa1efe5b5fcde06219f489948c4a42e479f7c56b848de031938721e7c8e0f73fd3142771de18545cbcb54e17fada9077bae438a6885d908fabed58c435

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    b3d225f326d4e16b8de5cd08078ce56c

    SHA1

    727363eaa162ebcd123f82c4bb85250988acb400

    SHA256

    db073b676d8b0ad8d5dd0b5345d8ec02c171b9e19844f5938a05837dc7bf5f65

    SHA512

    c18386f42ffed910428a1229d23daff731f85f913aaefbb8ce120899249f9f128cc57e98ad8ccc99df79e095f24bc4e1376cc5d2f1c770e39ae9177cad050651

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    e7436409eacf12a2897308dcdf0b4eac

    SHA1

    6b1130dea09395ba5e325d2b7fbb73935f48a6b0

    SHA256

    794b846e1e99d1b0a87dac7ec2574316ca17066ca5efc1acc2772e70fc315f63

    SHA512

    e61184808feed334f0b36e68b8fb22b239c52245e6e805d9d202fa18b6bce945f454b01c152bafeba7d11e780bfa2f5a5941b265bad8cba1de4e58000de115c7

  • /data/data/ir.basalam.app/no_backup/androidx.work.workdb-wal
    Filesize

    426KB

    MD5

    4be0afbaa011fdf559423a9e837a1fcc

    SHA1

    1b524f68aab1b27b72b22de89a0ee791885d2690

    SHA256

    5fb431050158b6eac97033d5d1e4895287fc1e016b4eee33d004b63a85d72fe0

    SHA512

    24a55d9f8366a1a05dcc25244cfa9228228353d4409be67bdbdd0d074789dbfdbc0dc58b664e86c8ac232a8a73167299509051d183af072baddf5f4bbc79b8f9

  • /data/data/ir.basalam.app/no_backup/db_metrica_ir.basalam.app-journal
    Filesize

    8KB

    MD5

    2643898322fc01ec7d55c5ec7037b27e

    SHA1

    c69e05ed951701670e6494e15adb603d5adabdca

    SHA256

    8297f75502c8aec223fcda76e6393f95de7c447a7ba56d83774ee63c58eecc38

    SHA512

    6a47d872763d98570fd1351e75f7eab8cb762138315292dd217e1e2fb49488eb65028a1d4fa16863e590024cf0c447f7e490abd864c2c0daebdb51292c0900be

  • /data/data/ir.basalam.app/no_backup/db_metrica_ir.basalam.app_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    512B

    MD5

    1978e45878f8ff2749b76f9b654ca684

    SHA1

    081d8cd51c7c7bb61aa1275c0530998a4a77294f

    SHA256

    4ad2cca90cbf7267f351e16fbf26dcd0c09f784ea77e71cbdf41938686815388

    SHA512

    60c4366ba31a3948fbe6fb99879ecc0d2c3803c34c63fd1c66331537882a31e83be7f9e0645055eb946a75ced8f0d7e8b2850c02c3bdff0bcc36c27b697af246

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db
    Filesize

    116KB

    MD5

    7aea266319188a36176a5d9da9884e66

    SHA1

    cf4cb6ef25bf3ce8b21db1bfda05f99241780c71

    SHA256

    45fe1fd9309f0eefeb08430f0f5df14a65c798a1823aecd41abdf7dacf344090

    SHA512

    983d6dc552dfa8853ae8e448d33a0bb83f5e21a3191a1b04a883c03e15c25f1639b736f0cd79b34f127ad59a28e9ee01a07a972d13f8cd422ca91a696ed0e163

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    6f657e6e1947173a6054b5e81154b7ff

    SHA1

    aa9235c63903f909d0dc3c4fbcd6c981917af419

    SHA256

    dba6b237f36bba6546ae6762913cc62f2e61898be0b8996a62aab2258e8c5547

    SHA512

    4327c7d208a4b2b5481b84b2a4364a291dc5d9af167bd58645abc297a1dcd5568b2614b53de10c6e22af3ff7e637d17a1ca825b73ef305f10592b3fd90a50cf9

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    5918d550f8ce9f9217f6038a2a7a68f9

    SHA1

    d203cebb7672f291dd044ddf8861d61fce81dc8b

    SHA256

    128b3707160c0bdd8aa875ef2c417ce972a4c504434476a76ff55d3efcb45111

    SHA512

    c9c0fc767b59c1adacb051f82e59b47c99f641fc36a264d9dac1c73b50df20fa015fad8aecf168b1e2ff7da6990b7a7b78cc1530478e4f8c5c26735d71c6d616

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    03b11f567e624c03af2187e30cf6cbec

    SHA1

    5512f6c81f027b3aa675dc976491940d5b72d015

    SHA256

    90952c9d8703e66cf4ac461a5d11ac9fb2bbff2332e80aef4fce6b636af79f02

    SHA512

    062f63e3e889ae75ed10a171b9486326531162e45d5efa2ef3e6a1481dcb774feb9c62bf8176951a2149601def809a882159efceb6e00d65143fa541b74c2c62

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    7c882a3092ca975ac853443f965c6809

    SHA1

    ddafd52758fe4c246c50e7b8586ef3f18b3f5003

    SHA256

    9534dd458f99cf3bcf2f2d5d7dc2eb669b776d74464857ad6c6cd182ff016ab1

    SHA512

    cb1fb30da6f92c4dbddd1d70d29d8904a23d8e1e23112aaa8165edb0f69d924c6b9e8dd567de28848205a74525ec13bc0929ebed11c6b23f1553ad67f3164a66

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    7d9158a684f1a92bebf3c4a0e46f5d52

    SHA1

    cbbfd9c87dc5fcf9fd5716fa7dbc0deea23ab2b3

    SHA256

    e6e12b145b6f727d6ef86beaa79f94bea7973a73108cda8e8f6a2227bec51495

    SHA512

    25a266b8b51c267de1083504bce7f89559c9833d593d3325c157c4c5b72047f5e5f069b733b5131583bcd049bc0bb4d07ada9d42306a320cbdf6972d6fba919e

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    ac8b09cb8ec34bdb6156157bba624c5c

    SHA1

    9e7382e46a401638cf7a953f3e71d682ddedabe8

    SHA256

    8146fe9c132722b5e455c90a7dc4b364e20e9bf0195e7b19fa9c8a60f9895029

    SHA512

    cafaee4bf21d84b836662ba6dbafff7246d261a80a763136e3644e066b98de129ce82e4c9f1423fc0e58db2c8463b08ea8cf966eced438e23e014da21d4de23a

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    36KB

    MD5

    39c0ac70a932b447ac889c9a034ae55d

    SHA1

    61a2dfcef8a1ebcc4086694c528b47d34af0a3c1

    SHA256

    25e494bb7734cfc93c8e7b36eba5b38702893fe246305c56ba13fe805302bf20

    SHA512

    ad4d2e41d17f185307d02a9472007c4d0c2240ddcfde1ff5b2ba25da7912d0b3fa4db9a555e01a29212fea1effa14f7b1fcdae3092077d8052a3a99dcae4e161

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    51bbe0cbfe3a8de0507f5a1975012fd7

    SHA1

    73edf0cfad098030afc46666bb805f89432a0028

    SHA256

    a49f99980ebdfa58b7e996e103ab32d8e4def663da8f4bad3c71207b2cf76d56

    SHA512

    591a143dc70d1c9fd77b3dc63970c886d492c06accf8e2740a9615261f811aa5ce5f64212957569e209c20ce8a9f918eb9ce6e53191250a4ad1063ba5a603609

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    d7cf7257d7ab77cf5e21a08a725687ab

    SHA1

    fe97fcaef7bd3ed5e5b68a06d4bef7c797c5ea28

    SHA256

    a680866013ea9b33042e04175b65a28d183ca619b1eb0ae460431ddd33ae254b

    SHA512

    e86144d5552b16b9fa7c5fb2323b5d208bb3e8d0d7f63ee735813e27135f39409e16b3f1ddf0bca164d290e6e0d09e53839efa56b8fce5b2891862d49f8bd4d0

  • /data/data/ir.basalam.app/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    fd5a920648b4486a86f245fe5f33a5c8

    SHA1

    7df371b2145d4e3a91a4b9cb30c9b3f908156943

    SHA256

    7501d2f6ae4a799df0514908b0b93d7d6b5240d6282bf0020e890388ba07d558

    SHA512

    dfc108dd0bb640bb22891213c94a25de05dd3ae0938b18fa84940786eb8695bacc00faecf0ef9ac9c49345007fab438ba160d665971b72aa4e706e4e952583d9

  • /data/data/ir.basalam.app/no_backup/metrica_data.db
    Filesize

    44KB

    MD5

    41e6762cde4db7d9be7b519cc69dac65

    SHA1

    bfdc304aa6083ef42e17d84c79652cb10c19cf5d

    SHA256

    2d749f6ddbd09fb6b48542c208d0d102f37fc320a84859631168be7e8e295c23

    SHA512

    ebf7ad4b2158a6b7e9464391ab73dffbff5cfe781adae3b5f732e067bcfde104b85135857887f7ef4fdc4157aead5d8a0bc377c6f389fdbe6a876d00f53cede1

  • /data/data/ir.basalam.app/no_backup/metrica_data.db-journal
    Filesize

    8KB

    MD5

    db6c6366a7c22f2d98e5ebcd5ff74525

    SHA1

    13cd0a1c979c3a79fc26655dd814ccb65c0f35ce

    SHA256

    5b9cd15938ca9844ed7e43432001a35c05f16660ff80430be4ec8b9b963f64b5

    SHA512

    696a98770b21ca9e2d3e7e2330d7718daedc4e09975428ae3ffee4b996374de2c921538e7821e2fbc958f5ef56cc12512ddd4d28be8ccc4d09d6208a4f50ccb8