9bc616d3f73cf00e3849bd1dbddbb5cbb07ef5197baec80d86fff512daaa9eb3

Analysis

max time kernel
28s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 12:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Iva.apk
Size

12.8MB
MD5

68f89249da57ce542529621ba77ccd22
SHA1

0111b4fb40a0d66c9b37a0ea95b79d2984888159
SHA256

9bc616d3f73cf00e3849bd1dbddbb5cbb07ef5197baec80d86fff512daaa9eb3
SHA512

505d80fb63bd7a06cbf733377817ef655cc05ac23fcf34055c27a232ee637460b4cd469fefb976325e7da7a0955394d042d44faa09ce714b8f5f463428aa2afb
SSDEEP

393216:ykZ964X7Ja41sL1+rzOT91JJ+np/T1JEC1Sj:ykJ7wEsjTry7w

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

evasion

System Information Discovery

T1426

Processes:

com.sadadpsp.eva

ioc	process
/data/local/su	com.sadadpsp.eva
/sbin/su	com.sadadpsp.eva
/system/app/Superuser.apk	com.sadadpsp.eva
/data/local/bin/su	com.sadadpsp.eva
/data/local/xbin/su	com.sadadpsp.eva
/system/bin/su	com.sadadpsp.eva
/system/bin/failsafe/su	com.sadadpsp.eva
/system/sd/xbin/su	com.sadadpsp.eva
/system/xbin/su	com.sadadpsp.eva

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

Processes:

com.sadadpsp.eva

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.sadadpsp.eva
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.sadadpsp.eva

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.sadadpsp.eva

description ioc process

File opened for read /proc/meminfo com.sadadpsp.eva
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.sadadpsp.eva

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.sadadpsp.eva
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.sadadpsp.eva

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.sadadpsp.eva
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.sadadpsp.eva

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sadadpsp.eva
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.sadadpsp.eva

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.sadadpsp.eva
Acquires the wake lock 1 IoCs

Processes:

com.sadadpsp.eva

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.sadadpsp.eva
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.sadadpsp.eva

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.sadadpsp.eva
Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.sadadpsp.eva

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.sadadpsp.eva

description	ioc	process
File opened for read	/proc/meminfo	com.sadadpsp.eva

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sadadpsp.eva

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.sadadpsp.eva

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.sadadpsp.eva

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.sadadpsp.eva

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sadadpsp.eva

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sadadpsp.eva

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.sadadpsp.eva

com.sadadpsp.eva
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4219

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sadadpsp.eva/databases/crash_reports
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.sadadpsp.eva/databases/crash_reports-journal
Filesize
512B

MD5
e594557fcdcb2d36b78ecaf1aee70843

SHA1
051e8d5ebcb1810826dc448ca718cccee02ce275

SHA256
66906db44bf0450372748f918835f40bc044ef83b1bba31944991d67a75785df

SHA512
3e0797fcb310ab276c7e7529f0cd208d19f16ffde359f62bfbd06fea2bbe4f5f50500557d3b9d83b28451e20e0aa91fbf39cef2a13314943297e51642198556c

Download Submit
/data/data/com.sadadpsp.eva/databases/crash_reports-wal
Filesize
60KB

MD5
c529d0422415f53709e5f434145965fb

SHA1
3b87e9299ff3e99db964c96701f72fed902bc09c

SHA256
044be0441d8e9bcaf64bcecdb55b5d2f79b6afc1dbb9f1eb6a30d37160804f32

SHA512
43b8c92d024221004a398f7b347a9925b0bb5138d49f5cb8e233be051fb2c0c917ac0f5e3990271183b1a5eff6f1310f938522ed9254ebd1da4d1b88bcc1dea9

Download Submit
/data/data/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
387707899ff9022fb14b8423b71f7cc2

SHA1
bc8e260dee9fc340a1d855366b0d42edcc9d85b5

SHA256
caf1765f9a92f10b0b22ae09fb40bd35338661a3b1b2c9e3269adb838f2ae372

SHA512
515334bafe5849b909b8e41e3b51503c6b2f03388c0b93822f65ac4566929f6292b67f0494917ab063d4426b3fe89d6b26fef0aec6d958604b84356ba2bb7714

Download Submit
/data/data/com.sadadpsp.eva/databases/google_analytics_v4.db-wal
Filesize
60KB

MD5
72bf073fd9b02daaf56d9fc1ef1f504a

SHA1
bb657bd5510955bd0c7f25974d2d7cb1d09dea5b

SHA256
c7c1c5b4e17fffe39f31b209a1044559212239be1264f5c8884c8a7c36cfbd4b

SHA512
ca5a2af9b922c9344c6f13894b33578afc0bfdf2f465cacd7b394e131d259e2a69e9e3b1c4f099f4a8ff58a4a1dbfcd86ff1a961ad4c0f0b65cb8e2f195ae726

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db
Filesize
16KB

MD5
f6c265003adfe383b09fe63725ccb6d4

SHA1
dfb0e86c98671a4a8987987b37f95e892449724b

SHA256
481ba248365a5680306efd12a16937f2ce061e5f62798532bf22265360f340b4

SHA512
13a64a2f35a8e175e87d7254a13498a9e3e204fdc20ae992c6a8f6e08d11c7a816e13323d7391693d7b85843e0b7d24663cb86c7b9fbbf672213f662e25815e1

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db
Filesize
16KB

MD5
d23d1dae4596ba9f00fe4052971b0d34

SHA1
45335ed2ee8561f31243cd2d764ab6a698337815

SHA256
75f97d92ef71b5af8f7799bb228ecafcb46f9e873e12cf5c3ca7eacfa3860209

SHA512
bb33d43b16a8f2d173ddd9e98d63187efa69766505ec7d721b94adfadab7b1c65c6b9037d18cf5f1876d476e9c3b7bb49c921506030352e4e6ab83b98eecc4e9

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db
Filesize
16KB

MD5
79bba3cea0ff377b4e845a371e059c96

SHA1
a400eddecdae4aff760262dc3f05d8c1670ad095

SHA256
28787bfbe4cf00c15d5b8123c8c21988e3a27692af372e27835cfe56ef38fba4

SHA512
d8a22b9ef1fdf36d84a8bc992c64c159052fb19b2f95af7d7db326b4a3558e6562841977def624cacf32184a179fce7854b96994d9abb7e7a1fde0d5631b9bcb

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
a7d2955cdc3ce7bc7e78427edeb2c3de

SHA1
ecfe4ed7a89de45a133aadf4c976a957c57e0c08

SHA256
544f9840e197dc21850f2236be23ad6c03c9a5aabe3a3ea2ad89ff002416776b

SHA512
631bbb44c3819cf0a16b1f1f264818daaea60d3c3345ad6c0b8d7c160d4b260bca43509a490c9fb4d3d92a72331af937c53930019643748e4c48dcc15192482d

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db-wal
Filesize
36KB

MD5
1f825f685eac3d62d03c33e0b529012e

SHA1
c461f5a4c1e48d72e098e30b89eab3ff6b689a99

SHA256
ddb5346c0e5a8788b65af59a0d3b8ce69039182dd62af95c956a765c4d68cdb3

SHA512
54eedd8f430f3e59af42c63769e35c4368225640d85f170410de59c7dca855da65b750ce8f6a4d535e70cb541416d5b3d588de70613e7ad0345a9c985df7f142

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
95b9edc339de75c0d2855b29e0011062

SHA1
337160fb0d0c7865b8021712b01473dd2c36a2f5

SHA256
2d0c9368f00c9435690b3e2d12a36497cd018476d318ec9c5bfbe9571223c1fe

SHA512
8a015cfed7f167d8785ead3ad96a026103d340859d07fdb13b71fd96ba250eb70ec06227dafdc9c77bbd698774d8c8b3266c3d8a77286696e488bdb1dfeb7899

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
706739fe4da29d0befd4c79a016ce7a0

SHA1
ef17b5ca94f08d4f6fa302db8002b762416659a6

SHA256
351d0288797db37024a3d0c765801fc033e18d7ab6b90932caf28cade74ea969

SHA512
e0286add47fbac98762353b2ca856c5374e831b2f7b306aadc270707d4f2a153b75b117bbeb6175dd20f800703827d27957da86e2eb9d4c14dbec89e2a84481c

Download Submit
/data/data/com.sadadpsp.eva/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
89915c087200eadd7b37ab4fa8ecc7b3

SHA1
63007ea9560488da9089ac2a2266a288da49b689

SHA256
408261a2a68fb025081ed83a8b4f137afe639121663116108c8dcb998de16509

SHA512
252f41b20e36450c38572a8adbc52c53ce903f83a0e49f76efc95890f4ad1b29cd6bd81709d81c0384f86998278796c3feb5c2c7b3b948dff70cf78e5a68c8e0

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
20KB

MD5
264da3a5d973d8596e65bcc24f15f057

SHA1
8b3b1b595d8c005bd225d624d09b999785582cc9

SHA256
7702530df5bfca211bbbfc244ce55c6bbf58b108dc139c3626be57f7b3c4708a

SHA512
b9ae01e2731c8bd74a13ab5fca581354a61830851682062a3b7085684feb5a20c6e84d3ff1866336c657ba948607005064868ec7dbd2311e39e248d9ec63b6c1

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
36KB

MD5
01003ee5577d7e54760bad84e35107fc

SHA1
e78fc4a4791a5167d958eb6bd09f40b8e8f975a0

SHA256
fcb16004787c49174f7981ef0e0633a50966010461386f891d1bf15a2546a2ab

SHA512
008fbaef80090629b241edcc2a33ad8b8481a73c160e655442478c60a9b890a4b0d56b0ecbeabcbd8accf9c02ecfd5daf41b5161f754f598cd42978dc049244f

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
28KB

MD5
dc666f7fc7a1bc6806f35e04d2b85d99

SHA1
542edd4fc2f7fd25620b25409c649594f133a8fc

SHA256
d7f8f4dffceb012e0be37feea3aa158f1c934453938edf6132fc27f42c4f62ec

SHA512
ebc3212a4d8ab30eca2c1ea4ad84460f1de6cfd59bd7b507f5ad3d30ffd6982f952888f3f4669a4f6c8330bcca4b7e823ccbe36b6ef60bab8d0e35dc48286f7d

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
28KB

MD5
b8812cfcfd0174c98f5c3e3cd61cf5f2

SHA1
09399385ddb17c9896304c88a5fd2a9b487d0a48

SHA256
e52779c2071ff414343f143b1a6d59da79e348a02c3b7b3b3299494927e584bd

SHA512
26aac41925be4139211c7adce6b8cb713750d9a4002516390edce57026befbcbf44bb8d062bb8102ba9119fa098b6b635a4734055533f41e415a53fea7242183

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
20KB

MD5
c0b0c4945519133e8dc13ed99e30658b

SHA1
03b8440c3ad63ae1dc72e00388e8d3ab54e49f21

SHA256
16a81759b170dff411097f67576b1b4d864c114813640cdb860a95d2e77007c9

SHA512
f786dcae4e996d07782d3205568ab418fe2ccbaad8aa94781bc83607e5ae130a92ea5795bbb063ff0d7bafc411316def8abe6539321256f0405928e1986ce483

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk
Filesize
36KB

MD5
86cde66b2e6fe4fdf870acdd6ba69cce

SHA1
70d55dafe7a32dd0f9b6959e59f8cd0888b9326b

SHA256
0067b8b6d6fceb2c9d003c17ca24183db468ad977b8c4817e800cc8e56a10307

SHA512
aecc48f571c27e692f03eb68ddc2f975dd23191ac50558a12bb2c66bb91371ae679c49bb1ab935bdd68a3d5b2f970a7d9f41db7b099bb5318c426076ab03e4fc

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
Filesize
512B

MD5
ee09cb336ff0562c9b38ddb762d459d8

SHA1
ae8a344f967718fcfd0005080d81a4cfabd98a8d

SHA256
e9029720ec960cc0014c147ba9656404369e7954261c747a0a5159f5089622dc

SHA512
a84c907d7961867a7dc1d09d78edab7193419b868df4c04a8a02e80641c868ba32280f2609b879d9da74b4e057e4ab3a410e10420db311432cb8ad5ce42d278a

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
8KB

MD5
e743869fc3d5d7a7d8fe4e64834b2192

SHA1
2adee21425a102c6a76a2e00443c12395a032c81

SHA256
da6e3511da39b08f94a371c7e4795ec7f6e854c063a725db1968b2bd212bedbc

SHA512
5fdf50300345891407a1d4eaec79e8d6e9d79208be0d99a3f669c6389d6e9ebac161f48bcaa35115d5647432c1bf013bb242e1b5246cde60e3ec4c97faffab9c

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
8KB

MD5
a1d2b94628092a08edd6eef799fc3a70

SHA1
9fed2d02a066da3332d340afc3db40b3cb206a34

SHA256
df5f0aa746c30801433601c11756111a45974bbcf0f3407ef5e5c86dc0b2b641

SHA512
40d83c22696a6c14073b164e6bd5f54aa24bbb3eea9eee60cf982defe7c2610854e3bbb9bd3cb89b5166616dc982bd96bfdaca97ca1665b75d3e787c983c20d9

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
8KB

MD5
fdb228612d07b90e4ef609d535c14958

SHA1
ed9102e65619837f20c29a84c5309c676947634a

SHA256
32521a8593b9d1813eda951ae96078b043895a47daa7b8cb86ed328d07c3457b

SHA512
aada609f9b1c9b35fe400dda8f6ce54124fb22914d8d1a49360125aa7e78db2af91bbb94d597038298a5313198c01befd08c2379c0f56a58fcc510a492e8a732

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
8KB

MD5
bec6be4169abc0e17204efb6348fb72e

SHA1
25a85007366fa6189bad388741d3dfc78190d753

SHA256
937517e7b1b3c17986b8be3d06b7b45d132cfb5a6f281facbb75d72e258ad0a5

SHA512
8ddfedf9544b9c0c57fb2de110cfdf2f069df7d95ee24c75e2137963876652d06f8abe88ac1208f681d6ab7846526e021d4ffc7e279ed50ad7c262d51c495ee4

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
48KB

MD5
a7cd8b58d4be6d97abc8f118665f7f05

SHA1
680c5ac8434e225a47ebe9e52870e87428da9598

SHA256
6932a5651b9edfd537ae82037482e31c2ab37615719f2a8425579ccd684620be

SHA512
de249cff74f7ba51ce7810d2eb8f01169562822cc7383df2266cf4855140a375ab54ed299ed48f9f8710276ab40635ef9da55405e349ac48223b9c7429e815f3

Download Submit
/data/data/com.sadadpsp.eva/databases/ir.metrix.sdk-wal
Filesize
8KB

MD5
5ba899094c98c3c68a774c2d3f3d709a

SHA1
7ce03b54f2424f9355f2e01507b48a22e684abc1

SHA256
fa532d45fd91a425b113354d145d1eafdf7a7edf267b870f5cac2f29bd074f2f

SHA512
b555fde4d00c817df5a52aa24fb984ffd426020a5746cc9eae57a0d1fab6b897939cb837379a3b87c54d250f9caa233073e671a60e31a35a1c3722f505e12f70

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645BeginSession.cls_temp
Filesize
77B

MD5
9d2ceb84848c7f15d6ae5a2fdefcd2d4

SHA1
76abd9d0c92f7279a9b450ad85e297e6fa1205fb

SHA256
1b28061280849ee3855379e5edb73b7316d1316fbd73c1b31b83de7e6f474b73

SHA512
928061e5c51f9138586505afdb7216e18afa8897def9f5ec85b4ea535933768dfadce2afeabf2e6ef0708034cf962dc43838251b7c147d2ca810a05b573847ec

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645BeginSession.json
Filesize
132B

MD5
245590a56e55d18e51e50d7ded50d208

SHA1
ee1d05d2e4a60e2f8d286aa41ba1fdfe9c965cc4

SHA256
00c7708f29ded142eed3d2e4bb1b89f00a4d7bf3b840e02f5c2e9d739de17177

SHA512
335108e5f0bf81c60ce4ac92e1cb5ffe10a8fea62d4f718b13c7c035e745d5e5ef8ca8619be0fc0460540240172f87460f512f027268f65fdc8d4fecabc9e7fd

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionApp.cls_temp
Filesize
112B

MD5
c8b2e2a7b1040614c5a014aa8fbf9420

SHA1
07124fbfe568075cb9c2c2d6c62c81864a11d529

SHA256
4ee998ff3cfedf0fe337ab250b8525943db48d6890628e45dd6ecf3a9809fed5

SHA512
c5b3439b58b81c612f820517dba31aed40b8678ceb4334ee6b1ab3489506ac85980a6830255493cd1d3a0d40371d56f272af932838436e8423bf53540cdaddaa

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionApp.json
Filesize
226B

MD5
bc301e4a61f6ee8a38e09653e1463148

SHA1
fe55e791763a1c6d3ac4365f2a735f8c8799e24c

SHA256
bbe75d81fb0851e039ac7529aafc1ac324490e0ba9a87fa201e63d974d0d9723

SHA512
2bc2d6e2d1d0563de89469cbfc086ff5d5fc004899242c54243ca800081bcf0af6c41041a03d04817b391599a54be2d4549da90799887801dfe90bcef77fe56f

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionDevice.cls_temp
Filesize
48B

MD5
cf9cb0612d588a1f71b63084cea67316

SHA1
3d035bb92fd3f8997160cf8025c40239af74d3ca

SHA256
0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9

SHA512
70f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionDevice.json
Filesize
202B

MD5
75db92d50c80a89e068550028c62acec

SHA1
d78ea55f5dc682e4da456d26383249f608fe894f

SHA256
1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2

SHA512
dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionOS.cls_temp
Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7F80392-0001-107B-18676031E645SessionOS.json
Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
398B

MD5
e6a9618d6f732236c2bf224723a7ddd6

SHA1
352bea8bdb1f65f7dd122546cef599cfade8416f

SHA256
c2292e81cb24801f281a6eb25fc0fcc441c7849e0449174db588af643a97ff14

SHA512
67fe7d6df81e53a14a94c68d167cf880e1dbd71446a42fc86ad80a0aee5dfd6a425576f07803dcf9124b28d5b5008ef69f77a908145763a0dbdd175ccee9ee6b

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
879B

MD5
9325a6f36d21e24ba8f6374cedc8957b

SHA1
2cf3e3c0ab75c12f9c802201029dfdb226423c70

SHA256
15da3df6bd4844f45e107cc4fc8754db653bb2ca891135a5002024b89fafcdfc

SHA512
79dbd37319385217682b12b5e6c5aad6e1f84db4862e9775594739964bddaef06aa423e6c482e5fc5fbc299388d7bacc5ec8214c4cad1d1a112b544a0a778cd8

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cdfaabbe-b48d-4e3b-872a-38499592e067_1716381694766.tap
Filesize
317B

MD5
69a2e01d8881ba5a60b0246cdbd18279

SHA1
9c2f5cad59a353a600c47c7da591d0cb50963bf7

SHA256
67fc0d5861a2975f1284994582e21c88de77e5e6889118592aa45f397aea4349

SHA512
b472eb51611708674aa365d9a7e6bdc8e6871ca41e686d3a4a54aca4de832d561c007a471f6d659ed81a34fed8f52b88b999ba941be1fce2de89415221d59219

Download Submit
/data/data/com.sadadpsp.eva/files/gaClientId
Filesize
36B

MD5
f1e177f8d6a48e9904f5f704a34254fb

SHA1
4f0b4aa0ef43ad8a070b8df6710ddb84719ab8e2

SHA256
784eecceb34c3c2eb7db26edbee0d49e49dd73e3371606b63bd7f1c532d1d3c5

SHA512
cbc248dd37cbea22669ff418f66159f7c0c694b7aad26b19497e4e11280e15b2cbf432b4101a2d98079f9cc296e882a938a1173b991b58e5cf6c4059f04cf455

Download Submit