Analysis

  • max time kernel
    21s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22-05-2024 12:07

General

  • Target

    Iva.apk

  • Size

    12.8MB

  • MD5

    68f89249da57ce542529621ba77ccd22

  • SHA1

    0111b4fb40a0d66c9b37a0ea95b79d2984888159

  • SHA256

    9bc616d3f73cf00e3849bd1dbddbb5cbb07ef5197baec80d86fff512daaa9eb3

  • SHA512

    505d80fb63bd7a06cbf733377817ef655cc05ac23fcf34055c27a232ee637460b4cd469fefb976325e7da7a0955394d042d44faa09ce714b8f5f463428aa2afb

  • SSDEEP

    393216:ykZ964X7Ja41sL1+rzOT91JJ+np/T1JEC1Sj:ykJ7wEsjTry7w

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.sadadpsp.eva
    1⤵
    • Checks if the Android device is rooted.
    • Requests cell location
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4566

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports
    Filesize

    24KB

    MD5

    8c7220cd6358a9a52ed1496028bf41c1

    SHA1

    2fc8bc8ca00ebb56fe7563c709f7870f2557c98a

    SHA256

    6328bd61e6da04bb8aab302a75bf31a67b02f674e6db3734c93112cd00450693

    SHA512

    6bd69ccfe0c9a54dab68988432069a199ab9d0cb5076804620904bc3b04bed3173f1239ea8d0fef3ca2de61999af00d58144cba60353a93b82908c72f232a9e6

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    512B

    MD5

    1c41e92f1461ea5e0f7697981d5a64e2

    SHA1

    a3bf16e57cefebcebf124cddbfb51a8bd700ef0b

    SHA256

    31addf5ce1a662f8b0c70001c2e222f9a55a28555c0341e6226cf465761eb456

    SHA512

    3ee3534c1e28c3b80809b09523a774e78ed33774aa07fe60dff1c9d92fd9071967f1015df616dc56cde2d4a296575dc1a2c2380fcdd2d849b62940904a98a84b

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    8KB

    MD5

    c0927cf8d931bdf48833400cff966ccd

    SHA1

    7c79baae946af1238d6bd54d42e7b2d9a262d0fc

    SHA256

    ea9109cde124ea1119eaeac908952ecd4ceba066bf74aa0a42b8af801e162111

    SHA512

    7c46c4812c2d4f8c73a4bbb3624df6786642cd68f36337cb059e585fad968a2c8f6b35c79b057da32431a468873dbaa749dbbc9cc93b30cce3d90eab9b07d84f

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    8KB

    MD5

    1ec4376a5e93fcbbe187e7833a2dbf8a

    SHA1

    1db8d6e34270639c10971a74a22a013598b1c858

    SHA256

    3cd79fbc19e9fc0c1eb7f742d41da076f08ea2cb8efbb9f5ef467e9d839a74df

    SHA512

    923ca4caa1ead078cffc55493a8aa76d569824a42859f620428f5d32e1577345b4eba2b1cf478e6bce64bb3a234942dc7a3b65ecb7d7fc38082aeb912b81da9f

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    12KB

    MD5

    32b1a3d638f36b54982cdcc0edd7204f

    SHA1

    bbc930b4487ed0ee6ca463cc17d13f0ac54a29ea

    SHA256

    82b29092119672d79d97d2188a2c091aba562e728f5c451a94f5cc5b04ab407e

    SHA512

    4d0385ff845e2a1b33803a977814220efe4ea8f39c05ddf178a598ed035207d167c6ff191f5fcc31a32f6e4071e24058aa540be19e866b507e6b74c189d3fde7

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    12KB

    MD5

    4011ae2656007b1960d45654c2546a65

    SHA1

    1569ccc1c0c71a9a8de358d938f31279f1927dbc

    SHA256

    a93f76f8680523959ad0d78cb19fa6856681488f54e2e6387db5b467b3a41e25

    SHA512

    4cc26320097b81bd4114daf45b661ae923f5fc8ff46ea63c56a2bd0b6abff39c482c1f8d88a37b4048393c4a10302c8c17e48f65319f019d9e80a093c11ebac9

  • /data/user/0/com.sadadpsp.eva/databases/crash_reports-journal
    Filesize

    12KB

    MD5

    3af1aefc61aa379b77e029c54d67ef12

    SHA1

    273803504aa3879f9fa07a734ad8adbe583a9ed4

    SHA256

    692c64d0d4d832b0398c7b78e0f410da3d5e339ca6104033ce8fb2335db8fe55

    SHA512

    da695c2211e478a122126f61229a82230772c709a002d9179fe126f7b672999cac59424d877e985b9f97c5caaf51db649288326241d6e3b019abb2824c12e905

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db
    Filesize

    28KB

    MD5

    2ae43ee2b3c4733ab15b43e4509828e6

    SHA1

    7e5d8204c8348b5f73cbab41bca0506f484b88d9

    SHA256

    d4a8ec0b6b6a5b33cde9f56b6b35d8204f51be1065c6edda5cff66092b0504a5

    SHA512

    b395b2a173c8bacd0c50f6440bca23ac197d4980964519c8bf3817679fc8d0f6867035c510f4c9c7b0a8c56b1f82c1648b892c0c46e7fb04f0a20b9747675e30

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    9f73102a632d2cfc3764b9ae91f3cbfb

    SHA1

    991b6b66b93f222aea9fbcf9ac85b6efa856678b

    SHA256

    e16f3dc725b38242a035ebffe462f1fa2e1e1cd71031c5e792ffdaf925ab3e0f

    SHA512

    031836a59edbe87f58ff3070c0421fa176e6ef20f5443d19d9e135509c5a202efba7343ee6f4b742d1b70ed33cdc5ef33f9acc73d72f7c1e305b2ec2ff1e3181

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    4KB

    MD5

    0f5471aabd17db6e180575db87a4786b

    SHA1

    3ab262e1ada9c7bff8aad92acdb06f9c6fcf5eb2

    SHA256

    0715347e6d435bcd9c42185cb57069ddef905fe6d659ae446a0a703da67d932e

    SHA512

    522c823d2856fa53c4872809a79594668ebe652f9f6e154c09610ad02afb2d90fab0152e4e935d5fddfa1780a09a200b5b7270425821e2d31be6deb624e907c1

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    30cdf6be5dfbdc8727e0dd0d353c4e2d

    SHA1

    bb6f84419e15eb2ca22740e3cbbcbdd104a9c117

    SHA256

    8f8831c114af641e2461f5eb3c3bd9f62484573b602bd02c1a7fac854b8132e5

    SHA512

    f443e192d61ea47769c8fb360b6ef2a32b7664ddcff45c2049114b60706b2d941f8080f6eba1032f2179af568f7f98bf8c8daa33e54c70f4d07be94875b12afd

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    6a26b1e1f751461259b7c9f7b5914770

    SHA1

    3c6cfc8bc7e9764f0fa27ff47c225bf273752c58

    SHA256

    a407c405fb1438da0016759a9e75bdf5b9a1f5132deb86c1ac31241b5a2c993e

    SHA512

    7f94b110424a71c6926213ef926570c2ee2f17320843ff936740db99cc2caf3b722c44ecd18f48cf84eccb246b2e658e9754ea4f83e4e316596b4f8079d4805e

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    12KB

    MD5

    72326f78090f588033a681e61aa3fb0f

    SHA1

    539a827dfe9ac4cd0b82aabeddec6b66c5a4335c

    SHA256

    6cf44026cd301d26b173e22de9aee024f8b5a99d659ce628e3d93c8ed7fcba41

    SHA512

    9b1a88ed918e3fa07526816fa2da0bad15ae192797910057930cde04473539b870ebf4b70790306d801085ae42c36818c818fa2ef5bcdea8117459917971c0d2

  • /data/user/0/com.sadadpsp.eva/databases/google_analytics_v4.db-journal
    Filesize

    512B

    MD5

    6e5aa018248810a16fb8fdd53fbadae5

    SHA1

    6fe7fd998ae2331741f1e691ea3e524218a5fde8

    SHA256

    54e2496972a572f1a56c0413c462def636cea51b9f686755e7da1286c2d87933

    SHA512

    698259a807eb225d24534ba18de6c498e24b2c34de0aaa1e671653e846795c7bfcaa6e46dcddf01f7e30050f33a83bc7663a0a102644dab3754f9cc5697c7831

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    58b109629496f2b7926eb7342dd2b429

    SHA1

    9d8b7e69041f9b064a7e671c95f3c242c515b769

    SHA256

    05bdf043c6d4a87e64f51993259f4f49a71e436f199c162c1826bbf7fe7c2086

    SHA512

    ebc0c86bb2e0f25833b7e7438388ce936b21ff3a1e761bfc7457743473cb183af4e63ca39242b2293791ff8cd63740783c1c9aa1f68b05e2bb66a7ff99fdfcf6

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    0e9c21a3ea4828f21116ad0f861b05df

    SHA1

    26fffa8a154108a4005c9a7ab55a1f43029ae0eb

    SHA256

    064dc6853dad8b9cce14425013714ad391a15f440a7ab3dd3824747826562683

    SHA512

    ee3ea9aa1fe1e5c3d7d43c8276848d6b2c3c414ecbd0b4d884c23e7fa11677df84a2575aae97e12eea130de33b72ec1eb816865313694641d434a36f2ecde08f

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    3e97a1082f6355b8d930bc2231c41804

    SHA1

    64fb1b351ad153b5a7185858eaed94fcc2ba1695

    SHA256

    54e24c69b12f8b40d83ddd7d9677f6644c75a10df0fe8227ef955ced9d3009e8

    SHA512

    44d7aea9984e06c3b97189851fc215ebc4f9bdcffc492538b131ec03e7af3a60a977cd87671b6f0b70e1266dbf9eb908d217ba3dfc5f26054e004daafaa1029d

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    8a678f6224b7054e880ead9e4cc3ba8e

    SHA1

    e58186b92dd0cec078fdf7fdaaf390000c884ec8

    SHA256

    9bf4bbad4bb9ade10de25b9c31e9690f1f2ac58326feb3b81d27da4bfacd16f8

    SHA512

    267d073d51cc6df6368234d65841ad6df8baa3b9116ba4e86c4441a212ced2ef0e99b728662b9c3188f217fc77feedf5434fdce56e09b87fae433ac4e556defc

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    d821628f5d31625210213f1e46015447

    SHA1

    fce9334562ee4b4d289bb133f5b490d82ea65e21

    SHA256

    fee61cd95346537effa9350397f400438a966bf27e37ff83393677cfd1d6ea8f

    SHA512

    93c54aa97cc458e328f9413a792e6844217eef6d5c2f8896590197c21db9ac8136973a7999f9cb916fbf2749d80014c6796f0ffecad30b78cee1e2458c9a98b4

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    1c5cfb68204b9632821603791d7c34a8

    SHA1

    d4f1cb2f70d32563786ebc419db50067994aad1b

    SHA256

    45be0e76c5282ae04bdf202e48801437dc60b41cf5873f6172d932b01e0a9806

    SHA512

    771020c4b97e49b071df128fef7eca81024f708da44248fef0b8a5e198c2450a5a965f5b9f563a0887696c9b93d94a319315e4229a6569719132fc5f33c0d44a

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    4KB

    MD5

    ad0915bcd3db506664236daa59b2f2f3

    SHA1

    f91bbd0c71b6c50cdb6673ebfc95632a0d801fd3

    SHA256

    47f3ae0fdd2183c3106fc9375d3e563db92c4a06c54e420b991979df4f39c884

    SHA512

    5ffae3e5bb3222f3e9ca3b594d4a9fefa22f3eba8caaa673906c2b3f7016f0f34e8564c195018a96cc5dbb478f248dd09a18cbc0316fbeb5babd6adc8fb14250

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    8777f4f173ea67858734aad2f6e93253

    SHA1

    a6e1108ffe65924031fa5beac858ef40cc0fcd31

    SHA256

    0dcb87ded127e855dc6f9aa037339825595ce131bc7c8397ec7c4eb4b488913f

    SHA512

    46de9b65d86257d8898cfbdacc39c73b91aa05c9778906a1a57b1e56d001f43fe9447529b5e9ccc9ea7a57bdda59347a2e3a802dc4d5e66ccac6bbb8ac9f2872

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    1a2c1c292bd58499803197a1941017af

    SHA1

    bdd9fbc803874cd0a29e1e9618471cdeeaffb94a

    SHA256

    398a6caecb38bab5a8c19187a90a77a96a283192f822271c7f6de8ba17d3600c

    SHA512

    a27b70094caf468f71ea3c4632098d1edb082862d7bfba7ad0eeced4273bbfab9cd4b443d833cf3cb74b7754c8b8aa9786b98512b8b24ab6916a14bf9dd21090

  • /data/user/0/com.sadadpsp.eva/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    a68c92cac8c7b06ddcc0df7786a5f758

    SHA1

    4908447c1f14e14f50c6e503202996988aeeb923

    SHA256

    d1c2db41aa796b8459b7aa36f42bbced7e6cee586ce151526f06fa3c9f90764f

    SHA512

    9f50dd03842bf76179f1011611c83a3b3e148de1d9cee370576e0d152115e7b5b5e0485b2216d92ababe52d8b33126d3eccd50247905d513e51b6cf638b24741

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    36KB

    MD5

    6fed4082e8a5c3622e8dc1a379c5b887

    SHA1

    522de0f90fb47b2b50b72fbd0b633ebcb75a3b93

    SHA256

    b93a222b68237b01981ca0e657618bb4aab5e5fa0e5c9eedd6b7b3c55f644212

    SHA512

    3856ca72e37eb35e04ef15e9312c3c3881b72bbf90c96c730d194f0ca544bebcbc0db886f1ee921806f4f4e4c08221586346be25d03b6f84ef0dbe2c94c8970c

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    28KB

    MD5

    1215cc612c1c4b0ac9eb220337d114ff

    SHA1

    aed7ae2fb58aa584254e35539643d0e3eb6e40d8

    SHA256

    9a6c15777fa6fba55e91cad7baaccafb92f644fdde81e9c54e7c43ace8fe1845

    SHA512

    a9dd436985061249b5b02aa7a338474c3b002e4d34bc4f5651e20ebddc3073b6ae09ce130aa8cc701738c0f16b2fd9c50ba15a8f5e8c386ff9d8f94e06cd1fa1

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    28KB

    MD5

    656d5de5cb8a287d21252d7ca6957e58

    SHA1

    0ee56f63a7864c3c05961718144678666eaa9ff3

    SHA256

    43ebc4209e5972905f47bae53c51edfa185376b5e022d2c8187c133185178dc5

    SHA512

    60f89f50485a5b2ce261efd600305608f52f71c2fbf181f304e4759b4cc6b719b8ed7ecf1f6a9c7c0efbd4aa4830ea0f0987406bab75b1acdad45b8270ff83b7

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    20KB

    MD5

    d55e0b84a0d8da06935927db0233a2d4

    SHA1

    fe71e1f3116efc154145b8f294611ed581ea4cb8

    SHA256

    4ef693ef596bc77453239d8c53357fb3062a626ac1f280c8cca8c776ac0a0707

    SHA512

    a98d27129c404ae41fa79587fa6f2c019b5ac8a097923c08821ea0b1d5bdbdde1414aad577e430f1134bf5cf194646c369dccb95abf3550bb62bcd05491a299e

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    36KB

    MD5

    81ef11423b78896ac9279478f10c1991

    SHA1

    ad8d31a5c1fa86661485874646fa95a9dfcaf71c

    SHA256

    db75bf7a07fe5526017bc2c6e68f6e1b95e32b235ea56ec4c5fcb8bd25262c2b

    SHA512

    6dfc8b15b6580dcafb56c331b4e17b7c7f3b92c0068cebcc0bee8897306e78f9f4d798c996c7e7c7837648e3779789e3918a796d72ecff3de663b28dc115143b

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk
    Filesize

    20KB

    MD5

    6a067ac6d02d25646cb02549abdccb82

    SHA1

    3a1e3d4f73dfb11d78485cbc8fb633d2bace7420

    SHA256

    fb8dff77ee2fe1822fb708c56951d163e0a12336ab8b2ae10bf195262462d04d

    SHA512

    665a1df4cf2f05933a93da151b1c94b26b860471fa1d9712dc877daea2790459c6c32fd682c854555b06c04046741467ee0e2ab90f754713936f40ee51bec226

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    12KB

    MD5

    069fc5178fa7af95453d37fbaf723ae9

    SHA1

    e2e5dfd9f3f6f3c3dc3f2c730bd8a456b4a58af5

    SHA256

    3e8f01dfe5697b5280b67f759c2acf49dcbdffd72b1262d647aeafc13ad7a2ef

    SHA512

    74456a5a0427fe39d08652e78d48836583681f4f23f6120b946869dd6c29fa0f586a2a17c96124cfcff317787c56260033133e9b4498df6fdf10f4c942af15dc

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    12KB

    MD5

    8ff0d1ab8df62a7f6ef028bc2d977a4f

    SHA1

    96e5d72c01f8749f982e8acbf6cc04a84a200bf1

    SHA256

    93823e1c741e75d58ac7a9b3c4b3242f007af7109e09beac4a839e8ecebc2929

    SHA512

    497793b1e47229d510ab15d010d1e4c8e4b3f9da1cfd8cc02d1075de843188c84e1c8d721714c8b2351db26d47ce6da43e7bf7a877996b2d36601742f01c8b42

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    512B

    MD5

    302f5ab2a67605790e71a8f60a8d5db7

    SHA1

    d8194237aa7cfcb8cde9530e16339f04687959bb

    SHA256

    37872c49e55009c5b441a4b4eeed4c672b0611d992be0b1b0edbf3d149293b24

    SHA512

    31f60af1b4af0fdbaaa985bedd5425093828fe92e3e6d22347de0a4c44ee9db6d78e3aa371e03c358f19f5cdaa802fe65df968a297591fb4a32ba4e89f10898b

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    8KB

    MD5

    1d76d586086be9a4056c89aabe7405ff

    SHA1

    0a21a9902bfa3dfb00994a2ae12d8dcd92843752

    SHA256

    137551d37d0a57681650b592c61e15a3de489c2e2d8ca45df922a49e61b2aee1

    SHA512

    dc72e96be5b4930dbe03356f5a97e1b1224f9479ce8c2dfbb38c9a4f18dae07f83516f439adc5e2d7e9a91659d3e37cf2a891240b01276c07d00e01ea8930bc3

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    8KB

    MD5

    7457a27e6b3b3aac4e43a7e6b4937ce5

    SHA1

    87d563d59060348638baec0725c86c1cb4ba9c0c

    SHA256

    b0200cb308b2c38a2289b3a2329ec9ebe58b656725bd81568a6cbb910fd6c127

    SHA512

    2e15d7dbefe3aa2f228209e010be82d6ec4bffc7f85026505a6ef9198d33f3800f47619254d9f1605dc314a05187cb24f167d8a122fe96afaac2107b26e819a2

  • /data/user/0/com.sadadpsp.eva/databases/ir.metrix.sdk-journal
    Filesize

    12KB

    MD5

    c634b5f8d3e7189020ec2df17f670340

    SHA1

    c988275c74c12d0f0b618155c59ab8583814c7bd

    SHA256

    1f77a70a685d218b6f631f2e728d2e8a5ea79ea8ad36471a2646587edf7be088

    SHA512

    6d88b63a2cff4461b1e248e78917ebab9be52dd2ad3ea49cf4e558f75d5a5a679c33ad3449039e2630202c726698a8583617eb0130bb4b540fed1b11260fbcb7

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2BeginSession.cls_temp
    Filesize

    77B

    MD5

    d5f8b8f936804dad05ca9d00e4e5081a

    SHA1

    3c5063cbd4b30d85763f1b0a67da304a932d16ba

    SHA256

    59d7c9724be67197fa9b0d082ecf1004c6c87198d85edc921e5df2e875861950

    SHA512

    de9164329ba58ede492c23f6ad4e21b06e9257cea0867453ab286dbcafa36f0c91f2e0762c7cef162e9da18f2281c2d25ba47cc4d181614b3c514d2f26fef1b1

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2BeginSession.json
    Filesize

    132B

    MD5

    76163520c6cbd9728413c2503cacfc79

    SHA1

    57e21a5eb63c0a460c9f3ed95a905e7a8b0c2b24

    SHA256

    7784044703edba5973c42b2f113d572fffdb87c432a13799375f47a35e7f3b61

    SHA512

    bf31bb8f8241970bcc4d997ea4d1cd9d0f6038a08b5b97521f5971f732a5c0db37d592174ab6212064249ad0c7ae256f2b37bb904fb8807f0178ae020a1985c3

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionApp.cls_temp
    Filesize

    112B

    MD5

    741b803bd4243a5147c1d82f5fc4b00e

    SHA1

    1db9f5f600fa69ae830ae318d2fbdd3624bc7864

    SHA256

    e6000ab2f580dcc341079cd8fc8a56a124dd861931c1e44171052069edfa7b4c

    SHA512

    c60eade134268754e55e580959e475d119d3a1480ce8cec768063f292592e08857e78eec745b34eb3aa0a4ff2f99c2f5478f8422b72b71aba8d2851c23f2bf07

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionApp.json
    Filesize

    226B

    MD5

    d6710a20ded6f88a9059e7f7e388cf51

    SHA1

    3078c800a9008395c420023e3b6356e9e0217ce4

    SHA256

    1f45885777008835164eb640472c6e609dad857db2788bb9bd528c48365bdbd9

    SHA512

    b87a99be29516245522af6c1a4b539ee09a1bcc22bba57c99282efafb120356baadcbcd548f96045a965cb18c40eb5d34065cb0866d3304fc210b249b99275ca

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionDevice.cls_temp
    Filesize

    48B

    MD5

    fd6372364a5c5c9cf8945ac3ea7a5d94

    SHA1

    3c798cab71f6ae7a81e71e58712368231230588a

    SHA256

    7400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641

    SHA512

    a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionDevice.json
    Filesize

    202B

    MD5

    eeeb942571fa704cf8ae49731fbe9789

    SHA1

    b5989c4cb932ffc779ee25bb3f7bfb79cf720427

    SHA256

    78809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71

    SHA512

    71e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionOS.cls_temp
    Filesize

    15B

    MD5

    b3d9541cc92a9153d14e5160f8d8c008

    SHA1

    2e1ac80eb381dd82a03795b682f92020348c0113

    SHA256

    1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

    SHA512

    78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664DE7EB015C-0001-11D6-2F38898785B2SessionOS.json
    Filesize

    55B

    MD5

    fc1dcee4e422d77e7fab7c08c8a41344

    SHA1

    d5340127e9d5f735b9d33b9dc61c772fb0e2dc15

    SHA256

    b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7

    SHA512

    3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    399B

    MD5

    e90421fec2e737b81a605f20cf90ccc7

    SHA1

    a047234952c406c96a959bb9284e8a9f962eb8ef

    SHA256

    7bb314605da16497eb35a8e4d67b710d0a39ab846ae4118dc8f1561a39bfb056

    SHA512

    dff5144870b9715ccc8d2dcbbf3fc17cf81e7b58fbe859f25af74247b6cf85cd4b1235aadb8727e074934b056b350d407d05590c7c3b3efa36c02bdc7c7683d9

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    881B

    MD5

    1ba1ba2fd0ba61839d495ada88f4604d

    SHA1

    4c8456962653ed32b85fc9b3e30a7e1168f0af1d

    SHA256

    b98990a4453cbe45cc14d7e0004c6934a6287883766ad0092ca1ccf2f0e9d137

    SHA512

    a06e0817c5fe28bac681b7d95d147e05a861a2d7a26f72880b9b78b3f49d88f1804b8c9b8cdaa60e19935e7b791888338c689167ae9b2dafb57b85b386f75ba0

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.sadadpsp.eva/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_128a1d16-926e-4b5f-9b89-c7ce36ce31c4_1716381681877.tap
    Filesize

    318B

    MD5

    1ada58830bcb2d01df0cd453143176f0

    SHA1

    c3a0267561604370e92d8b19a6b9ddae1203ae2c

    SHA256

    2b72eb397947f894ab8f8e49a4f58e60bf891e62b850624fb6bccc6d7b0e5097

    SHA512

    4ce9604d4fe91cee2ca00cace5b9b791307c354feb49fe46f91c050189e7e33b17c6a4b24b18d7c292effe607209b0df892220bc01fc03b4559c945f0af633f1

  • /data/user/0/com.sadadpsp.eva/files/gaClientId
    Filesize

    36B

    MD5

    76108622a633a9436fc803929374dffd

    SHA1

    697ad73b8a1ba675b725a4e18430abe32d42a03b

    SHA256

    cb4e6d5ad22d59272f1630a3e4033a628a8a82a0c9ea67fcfe9487c497a2f799

    SHA512

    214023054e7df6f3ec438cdafc606ab112b4e958b892dca4d0a49741f9b05f52178524680456e1b8346c6061f7602375c0b4fb88ce41251fa423cd11febfb96c