Analysis
-
max time kernel
21s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
22-05-2024 12:07
Static task
static1
Behavioral task
behavioral1
Sample
Iva.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
Iva.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
Iva.apk
-
Size
12.8MB
-
MD5
68f89249da57ce542529621ba77ccd22
-
SHA1
0111b4fb40a0d66c9b37a0ea95b79d2984888159
-
SHA256
9bc616d3f73cf00e3849bd1dbddbb5cbb07ef5197baec80d86fff512daaa9eb3
-
SHA512
505d80fb63bd7a06cbf733377817ef655cc05ac23fcf34055c27a232ee637460b4cd469fefb976325e7da7a0955394d042d44faa09ce714b8f5f463428aa2afb
-
SSDEEP
393216:ykZ964X7Ja41sL1+rzOT91JJ+np/T1JEC1Sj:ykJ7wEsjTry7w
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 9 IoCs
Processes:
com.sadadpsp.evaioc process /data/local/xbin/su com.sadadpsp.eva /system/bin/su com.sadadpsp.eva /system/bin/failsafe/su com.sadadpsp.eva /system/sd/xbin/su com.sadadpsp.eva /data/local/su com.sadadpsp.eva /sbin/su com.sadadpsp.eva /system/xbin/su com.sadadpsp.eva /system/app/Superuser.apk com.sadadpsp.eva /data/local/bin/su com.sadadpsp.eva -
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
Processes:
com.sadadpsp.evadescription ioc process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.sadadpsp.eva Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.sadadpsp.eva -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.sadadpsp.evadescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.sadadpsp.eva -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.sadadpsp.evadescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.sadadpsp.eva -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.sadadpsp.evadescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sadadpsp.eva -
Acquires the wake lock 1 IoCs
Processes:
com.sadadpsp.evadescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.sadadpsp.eva -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.sadadpsp.evadescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.sadadpsp.eva -
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.sadadpsp.evadescription ioc process Framework API call javax.crypto.Cipher.doFinal com.sadadpsp.eva
Processes
-
com.sadadpsp.eva1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.sadadpsp.eva/databases/crash_reportsFilesize
24KB
MD58c7220cd6358a9a52ed1496028bf41c1
SHA12fc8bc8ca00ebb56fe7563c709f7870f2557c98a
SHA2566328bd61e6da04bb8aab302a75bf31a67b02f674e6db3734c93112cd00450693
SHA5126bd69ccfe0c9a54dab68988432069a199ab9d0cb5076804620904bc3b04bed3173f1239ea8d0fef3ca2de61999af00d58144cba60353a93b82908c72f232a9e6
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
512B
MD51c41e92f1461ea5e0f7697981d5a64e2
SHA1a3bf16e57cefebcebf124cddbfb51a8bd700ef0b
SHA25631addf5ce1a662f8b0c70001c2e222f9a55a28555c0341e6226cf465761eb456
SHA5123ee3534c1e28c3b80809b09523a774e78ed33774aa07fe60dff1c9d92fd9071967f1015df616dc56cde2d4a296575dc1a2c2380fcdd2d849b62940904a98a84b
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
8KB
MD5c0927cf8d931bdf48833400cff966ccd
SHA17c79baae946af1238d6bd54d42e7b2d9a262d0fc
SHA256ea9109cde124ea1119eaeac908952ecd4ceba066bf74aa0a42b8af801e162111
SHA5127c46c4812c2d4f8c73a4bbb3624df6786642cd68f36337cb059e585fad968a2c8f6b35c79b057da32431a468873dbaa749dbbc9cc93b30cce3d90eab9b07d84f
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
8KB
MD51ec4376a5e93fcbbe187e7833a2dbf8a
SHA11db8d6e34270639c10971a74a22a013598b1c858
SHA2563cd79fbc19e9fc0c1eb7f742d41da076f08ea2cb8efbb9f5ef467e9d839a74df
SHA512923ca4caa1ead078cffc55493a8aa76d569824a42859f620428f5d32e1577345b4eba2b1cf478e6bce64bb3a234942dc7a3b65ecb7d7fc38082aeb912b81da9f
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
12KB
MD532b1a3d638f36b54982cdcc0edd7204f
SHA1bbc930b4487ed0ee6ca463cc17d13f0ac54a29ea
SHA25682b29092119672d79d97d2188a2c091aba562e728f5c451a94f5cc5b04ab407e
SHA5124d0385ff845e2a1b33803a977814220efe4ea8f39c05ddf178a598ed035207d167c6ff191f5fcc31a32f6e4071e24058aa540be19e866b507e6b74c189d3fde7
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
12KB
MD54011ae2656007b1960d45654c2546a65
SHA11569ccc1c0c71a9a8de358d938f31279f1927dbc
SHA256a93f76f8680523959ad0d78cb19fa6856681488f54e2e6387db5b467b3a41e25
SHA5124cc26320097b81bd4114daf45b661ae923f5fc8ff46ea63c56a2bd0b6abff39c482c1f8d88a37b4048393c4a10302c8c17e48f65319f019d9e80a093c11ebac9
-
/data/user/0/com.sadadpsp.eva/databases/crash_reports-journalFilesize
12KB
MD53af1aefc61aa379b77e029c54d67ef12
SHA1273803504aa3879f9fa07a734ad8adbe583a9ed4
SHA256692c64d0d4d832b0398c7b78e0f410da3d5e339ca6104033ce8fb2335db8fe55
SHA512da695c2211e478a122126f61229a82230772c709a002d9179fe126f7b672999cac59424d877e985b9f97c5caaf51db649288326241d6e3b019abb2824c12e905
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.dbFilesize
28KB
MD52ae43ee2b3c4733ab15b43e4509828e6
SHA17e5d8204c8348b5f73cbab41bca0506f484b88d9
SHA256d4a8ec0b6b6a5b33cde9f56b6b35d8204f51be1065c6edda5cff66092b0504a5
SHA512b395b2a173c8bacd0c50f6440bca23ac197d4980964519c8bf3817679fc8d0f6867035c510f4c9c7b0a8c56b1f82c1648b892c0c46e7fb04f0a20b9747675e30
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
8KB
MD59f73102a632d2cfc3764b9ae91f3cbfb
SHA1991b6b66b93f222aea9fbcf9ac85b6efa856678b
SHA256e16f3dc725b38242a035ebffe462f1fa2e1e1cd71031c5e792ffdaf925ab3e0f
SHA512031836a59edbe87f58ff3070c0421fa176e6ef20f5443d19d9e135509c5a202efba7343ee6f4b742d1b70ed33cdc5ef33f9acc73d72f7c1e305b2ec2ff1e3181
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
4KB
MD50f5471aabd17db6e180575db87a4786b
SHA13ab262e1ada9c7bff8aad92acdb06f9c6fcf5eb2
SHA2560715347e6d435bcd9c42185cb57069ddef905fe6d659ae446a0a703da67d932e
SHA512522c823d2856fa53c4872809a79594668ebe652f9f6e154c09610ad02afb2d90fab0152e4e935d5fddfa1780a09a200b5b7270425821e2d31be6deb624e907c1
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
8KB
MD530cdf6be5dfbdc8727e0dd0d353c4e2d
SHA1bb6f84419e15eb2ca22740e3cbbcbdd104a9c117
SHA2568f8831c114af641e2461f5eb3c3bd9f62484573b602bd02c1a7fac854b8132e5
SHA512f443e192d61ea47769c8fb360b6ef2a32b7664ddcff45c2049114b60706b2d941f8080f6eba1032f2179af568f7f98bf8c8daa33e54c70f4d07be94875b12afd
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
8KB
MD56a26b1e1f751461259b7c9f7b5914770
SHA13c6cfc8bc7e9764f0fa27ff47c225bf273752c58
SHA256a407c405fb1438da0016759a9e75bdf5b9a1f5132deb86c1ac31241b5a2c993e
SHA5127f94b110424a71c6926213ef926570c2ee2f17320843ff936740db99cc2caf3b722c44ecd18f48cf84eccb246b2e658e9754ea4f83e4e316596b4f8079d4805e
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
12KB
MD572326f78090f588033a681e61aa3fb0f
SHA1539a827dfe9ac4cd0b82aabeddec6b66c5a4335c
SHA2566cf44026cd301d26b173e22de9aee024f8b5a99d659ce628e3d93c8ed7fcba41
SHA5129b1a88ed918e3fa07526816fa2da0bad15ae192797910057930cde04473539b870ebf4b70790306d801085ae42c36818c818fa2ef5bcdea8117459917971c0d2
-
/data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journalFilesize
512B
MD56e5aa018248810a16fb8fdd53fbadae5
SHA16fe7fd998ae2331741f1e691ea3e524218a5fde8
SHA25654e2496972a572f1a56c0413c462def636cea51b9f686755e7da1286c2d87933
SHA512698259a807eb225d24534ba18de6c498e24b2c34de0aaa1e671653e846795c7bfcaa6e46dcddf01f7e30050f33a83bc7663a0a102644dab3754f9cc5697c7831
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.dbFilesize
16KB
MD558b109629496f2b7926eb7342dd2b429
SHA19d8b7e69041f9b064a7e671c95f3c242c515b769
SHA25605bdf043c6d4a87e64f51993259f4f49a71e436f199c162c1826bbf7fe7c2086
SHA512ebc0c86bb2e0f25833b7e7438388ce936b21ff3a1e761bfc7457743473cb183af4e63ca39242b2293791ff8cd63740783c1c9aa1f68b05e2bb66a7ff99fdfcf6
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.dbFilesize
16KB
MD50e9c21a3ea4828f21116ad0f861b05df
SHA126fffa8a154108a4005c9a7ab55a1f43029ae0eb
SHA256064dc6853dad8b9cce14425013714ad391a15f440a7ab3dd3824747826562683
SHA512ee3ea9aa1fe1e5c3d7d43c8276848d6b2c3c414ecbd0b4d884c23e7fa11677df84a2575aae97e12eea130de33b72ec1eb816865313694641d434a36f2ecde08f
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.dbFilesize
16KB
MD53e97a1082f6355b8d930bc2231c41804
SHA164fb1b351ad153b5a7185858eaed94fcc2ba1695
SHA25654e24c69b12f8b40d83ddd7d9677f6644c75a10df0fe8227ef955ced9d3009e8
SHA51244d7aea9984e06c3b97189851fc215ebc4f9bdcffc492538b131ec03e7af3a60a977cd87671b6f0b70e1266dbf9eb908d217ba3dfc5f26054e004daafaa1029d
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.dbFilesize
16KB
MD58a678f6224b7054e880ead9e4cc3ba8e
SHA1e58186b92dd0cec078fdf7fdaaf390000c884ec8
SHA2569bf4bbad4bb9ade10de25b9c31e9690f1f2ac58326feb3b81d27da4bfacd16f8
SHA512267d073d51cc6df6368234d65841ad6df8baa3b9116ba4e86c4441a212ced2ef0e99b728662b9c3188f217fc77feedf5434fdce56e09b87fae433ac4e556defc
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
512B
MD5d821628f5d31625210213f1e46015447
SHA1fce9334562ee4b4d289bb133f5b490d82ea65e21
SHA256fee61cd95346537effa9350397f400438a966bf27e37ff83393677cfd1d6ea8f
SHA51293c54aa97cc458e328f9413a792e6844217eef6d5c2f8896590197c21db9ac8136973a7999f9cb916fbf2749d80014c6796f0ffecad30b78cee1e2458c9a98b4
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
8KB
MD51c5cfb68204b9632821603791d7c34a8
SHA1d4f1cb2f70d32563786ebc419db50067994aad1b
SHA25645be0e76c5282ae04bdf202e48801437dc60b41cf5873f6172d932b01e0a9806
SHA512771020c4b97e49b071df128fef7eca81024f708da44248fef0b8a5e198c2450a5a965f5b9f563a0887696c9b93d94a319315e4229a6569719132fc5f33c0d44a
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
4KB
MD5ad0915bcd3db506664236daa59b2f2f3
SHA1f91bbd0c71b6c50cdb6673ebfc95632a0d801fd3
SHA25647f3ae0fdd2183c3106fc9375d3e563db92c4a06c54e420b991979df4f39c884
SHA5125ffae3e5bb3222f3e9ca3b594d4a9fefa22f3eba8caaa673906c2b3f7016f0f34e8564c195018a96cc5dbb478f248dd09a18cbc0316fbeb5babd6adc8fb14250
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
8KB
MD58777f4f173ea67858734aad2f6e93253
SHA1a6e1108ffe65924031fa5beac858ef40cc0fcd31
SHA2560dcb87ded127e855dc6f9aa037339825595ce131bc7c8397ec7c4eb4b488913f
SHA51246de9b65d86257d8898cfbdacc39c73b91aa05c9778906a1a57b1e56d001f43fe9447529b5e9ccc9ea7a57bdda59347a2e3a802dc4d5e66ccac6bbb8ac9f2872
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
8KB
MD51a2c1c292bd58499803197a1941017af
SHA1bdd9fbc803874cd0a29e1e9618471cdeeaffb94a
SHA256398a6caecb38bab5a8c19187a90a77a96a283192f822271c7f6de8ba17d3600c
SHA512a27b70094caf468f71ea3c4632098d1edb082862d7bfba7ad0eeced4273bbfab9cd4b443d833cf3cb74b7754c8b8aa9786b98512b8b24ab6916a14bf9dd21090
-
/data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5a68c92cac8c7b06ddcc0df7786a5f758
SHA14908447c1f14e14f50c6e503202996988aeeb923
SHA256d1c2db41aa796b8459b7aa36f42bbced7e6cee586ce151526f06fa3c9f90764f
SHA5129f50dd03842bf76179f1011611c83a3b3e148de1d9cee370576e0d152115e7b5b5e0485b2216d92ababe52d8b33126d3eccd50247905d513e51b6cf638b24741
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
36KB
MD56fed4082e8a5c3622e8dc1a379c5b887
SHA1522de0f90fb47b2b50b72fbd0b633ebcb75a3b93
SHA256b93a222b68237b01981ca0e657618bb4aab5e5fa0e5c9eedd6b7b3c55f644212
SHA5123856ca72e37eb35e04ef15e9312c3c3881b72bbf90c96c730d194f0ca544bebcbc0db886f1ee921806f4f4e4c08221586346be25d03b6f84ef0dbe2c94c8970c
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
28KB
MD51215cc612c1c4b0ac9eb220337d114ff
SHA1aed7ae2fb58aa584254e35539643d0e3eb6e40d8
SHA2569a6c15777fa6fba55e91cad7baaccafb92f644fdde81e9c54e7c43ace8fe1845
SHA512a9dd436985061249b5b02aa7a338474c3b002e4d34bc4f5651e20ebddc3073b6ae09ce130aa8cc701738c0f16b2fd9c50ba15a8f5e8c386ff9d8f94e06cd1fa1
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
28KB
MD5656d5de5cb8a287d21252d7ca6957e58
SHA10ee56f63a7864c3c05961718144678666eaa9ff3
SHA25643ebc4209e5972905f47bae53c51edfa185376b5e022d2c8187c133185178dc5
SHA51260f89f50485a5b2ce261efd600305608f52f71c2fbf181f304e4759b4cc6b719b8ed7ecf1f6a9c7c0efbd4aa4830ea0f0987406bab75b1acdad45b8270ff83b7
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
20KB
MD5d55e0b84a0d8da06935927db0233a2d4
SHA1fe71e1f3116efc154145b8f294611ed581ea4cb8
SHA2564ef693ef596bc77453239d8c53357fb3062a626ac1f280c8cca8c776ac0a0707
SHA512a98d27129c404ae41fa79587fa6f2c019b5ac8a097923c08821ea0b1d5bdbdde1414aad577e430f1134bf5cf194646c369dccb95abf3550bb62bcd05491a299e
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
36KB
MD581ef11423b78896ac9279478f10c1991
SHA1ad8d31a5c1fa86661485874646fa95a9dfcaf71c
SHA256db75bf7a07fe5526017bc2c6e68f6e1b95e32b235ea56ec4c5fcb8bd25262c2b
SHA5126dfc8b15b6580dcafb56c331b4e17b7c7f3b92c0068cebcc0bee8897306e78f9f4d798c996c7e7c7837648e3779789e3918a796d72ecff3de663b28dc115143b
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdkFilesize
20KB
MD56a067ac6d02d25646cb02549abdccb82
SHA13a1e3d4f73dfb11d78485cbc8fb633d2bace7420
SHA256fb8dff77ee2fe1822fb708c56951d163e0a12336ab8b2ae10bf195262462d04d
SHA512665a1df4cf2f05933a93da151b1c94b26b860471fa1d9712dc877daea2790459c6c32fd682c854555b06c04046741467ee0e2ab90f754713936f40ee51bec226
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
12KB
MD5069fc5178fa7af95453d37fbaf723ae9
SHA1e2e5dfd9f3f6f3c3dc3f2c730bd8a456b4a58af5
SHA2563e8f01dfe5697b5280b67f759c2acf49dcbdffd72b1262d647aeafc13ad7a2ef
SHA51274456a5a0427fe39d08652e78d48836583681f4f23f6120b946869dd6c29fa0f586a2a17c96124cfcff317787c56260033133e9b4498df6fdf10f4c942af15dc
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
12KB
MD58ff0d1ab8df62a7f6ef028bc2d977a4f
SHA196e5d72c01f8749f982e8acbf6cc04a84a200bf1
SHA25693823e1c741e75d58ac7a9b3c4b3242f007af7109e09beac4a839e8ecebc2929
SHA512497793b1e47229d510ab15d010d1e4c8e4b3f9da1cfd8cc02d1075de843188c84e1c8d721714c8b2351db26d47ce6da43e7bf7a877996b2d36601742f01c8b42
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
512B
MD5302f5ab2a67605790e71a8f60a8d5db7
SHA1d8194237aa7cfcb8cde9530e16339f04687959bb
SHA25637872c49e55009c5b441a4b4eeed4c672b0611d992be0b1b0edbf3d149293b24
SHA51231f60af1b4af0fdbaaa985bedd5425093828fe92e3e6d22347de0a4c44ee9db6d78e3aa371e03c358f19f5cdaa802fe65df968a297591fb4a32ba4e89f10898b
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
8KB
MD51d76d586086be9a4056c89aabe7405ff
SHA10a21a9902bfa3dfb00994a2ae12d8dcd92843752
SHA256137551d37d0a57681650b592c61e15a3de489c2e2d8ca45df922a49e61b2aee1
SHA512dc72e96be5b4930dbe03356f5a97e1b1224f9479ce8c2dfbb38c9a4f18dae07f83516f439adc5e2d7e9a91659d3e37cf2a891240b01276c07d00e01ea8930bc3
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
8KB
MD57457a27e6b3b3aac4e43a7e6b4937ce5
SHA187d563d59060348638baec0725c86c1cb4ba9c0c
SHA256b0200cb308b2c38a2289b3a2329ec9ebe58b656725bd81568a6cbb910fd6c127
SHA5122e15d7dbefe3aa2f228209e010be82d6ec4bffc7f85026505a6ef9198d33f3800f47619254d9f1605dc314a05187cb24f167d8a122fe96afaac2107b26e819a2
-
/data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journalFilesize
12KB
MD5c634b5f8d3e7189020ec2df17f670340
SHA1c988275c74c12d0f0b618155c59ab8583814c7bd
SHA2561f77a70a685d218b6f631f2e728d2e8a5ea79ea8ad36471a2646587edf7be088
SHA5126d88b63a2cff4461b1e248e78917ebab9be52dd2ad3ea49cf4e558f75d5a5a679c33ad3449039e2630202c726698a8583617eb0130bb4b540fed1b11260fbcb7
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2BeginSession.cls_tempFilesize
77B
MD5d5f8b8f936804dad05ca9d00e4e5081a
SHA13c5063cbd4b30d85763f1b0a67da304a932d16ba
SHA25659d7c9724be67197fa9b0d082ecf1004c6c87198d85edc921e5df2e875861950
SHA512de9164329ba58ede492c23f6ad4e21b06e9257cea0867453ab286dbcafa36f0c91f2e0762c7cef162e9da18f2281c2d25ba47cc4d181614b3c514d2f26fef1b1
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2BeginSession.jsonFilesize
132B
MD576163520c6cbd9728413c2503cacfc79
SHA157e21a5eb63c0a460c9f3ed95a905e7a8b0c2b24
SHA2567784044703edba5973c42b2f113d572fffdb87c432a13799375f47a35e7f3b61
SHA512bf31bb8f8241970bcc4d997ea4d1cd9d0f6038a08b5b97521f5971f732a5c0db37d592174ab6212064249ad0c7ae256f2b37bb904fb8807f0178ae020a1985c3
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionApp.cls_tempFilesize
112B
MD5741b803bd4243a5147c1d82f5fc4b00e
SHA11db9f5f600fa69ae830ae318d2fbdd3624bc7864
SHA256e6000ab2f580dcc341079cd8fc8a56a124dd861931c1e44171052069edfa7b4c
SHA512c60eade134268754e55e580959e475d119d3a1480ce8cec768063f292592e08857e78eec745b34eb3aa0a4ff2f99c2f5478f8422b72b71aba8d2851c23f2bf07
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionApp.jsonFilesize
226B
MD5d6710a20ded6f88a9059e7f7e388cf51
SHA13078c800a9008395c420023e3b6356e9e0217ce4
SHA2561f45885777008835164eb640472c6e609dad857db2788bb9bd528c48365bdbd9
SHA512b87a99be29516245522af6c1a4b539ee09a1bcc22bba57c99282efafb120356baadcbcd548f96045a965cb18c40eb5d34065cb0866d3304fc210b249b99275ca
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionDevice.cls_tempFilesize
48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionDevice.jsonFilesize
202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionOS.cls_tempFilesize
15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionOS.jsonFilesize
55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tapFilesize
399B
MD5e90421fec2e737b81a605f20cf90ccc7
SHA1a047234952c406c96a959bb9284e8a9f962eb8ef
SHA2567bb314605da16497eb35a8e4d67b710d0a39ab846ae4118dc8f1561a39bfb056
SHA512dff5144870b9715ccc8d2dcbbf3fc17cf81e7b58fbe859f25af74247b6cf85cd4b1235aadb8727e074934b056b350d407d05590c7c3b3efa36c02bdc7c7683d9
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tapFilesize
881B
MD51ba1ba2fd0ba61839d495ada88f4604d
SHA14c8456962653ed32b85fc9b3e30a7e1168f0af1d
SHA256b98990a4453cbe45cc14d7e0004c6934a6287883766ad0092ca1ccf2f0e9d137
SHA512a06e0817c5fe28bac681b7d95d147e05a861a2d7a26f72880b9b78b3f49d88f1804b8c9b8cdaa60e19935e7b791888338c689167ae9b2dafb57b85b386f75ba0
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmpFilesize
16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_128a1d16-926e-4b5f-9b89-c7ce36ce31c4_1716381681877.tapFilesize
318B
MD51ada58830bcb2d01df0cd453143176f0
SHA1c3a0267561604370e92d8b19a6b9ddae1203ae2c
SHA2562b72eb397947f894ab8f8e49a4f58e60bf891e62b850624fb6bccc6d7b0e5097
SHA5124ce9604d4fe91cee2ca00cace5b9b791307c354feb49fe46f91c050189e7e33b17c6a4b24b18d7c292effe607209b0df892220bc01fc03b4559c945f0af633f1
-
/data/user/0/com.sadadpsp.eva/files/gaClientIdFilesize
36B
MD576108622a633a9436fc803929374dffd
SHA1697ad73b8a1ba675b725a4e18430abe32d42a03b
SHA256cb4e6d5ad22d59272f1630a3e4033a628a8a82a0c9ea67fcfe9487c497a2f799
SHA512214023054e7df6f3ec438cdafc606ab112b4e958b892dca4d0a49741f9b05f52178524680456e1b8346c6061f7602375c0b4fb88ce41251fa423cd11febfb96c