c5a6811eb32bcfdaf8043a253f1eb8c544d46f602042fe351c501194d4f91b80

Analysis

max time kernel
636425s
max time network
161s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
28-03-2023 01:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0fbbf5bca438574f5592ac1f548d5d460ddccb4ad6225087a770b47fb717c427.apk
Size

5.4MB
MD5

ac71c730698b63a8fa3bcf2ba00ba35b
SHA1

90351140fa08992ac29f80a9a4466e05228a3e5d
SHA256

0fbbf5bca438574f5592ac1f548d5d460ddccb4ad6225087a770b47fb717c427
SHA512

a28b4e01fc0f78bdd101fafae29851ad4b916f449144ecddba35f269c8d397d3cc8ca60caea3d8db982897bdf100836021de1706d18f21cd86fb34ad4444cc88
SSDEEP

98304:zNdSPANRI/eYFzsyRy9XDG992B0oOvdAEpAmdy5FoQ/1NL9NlZa/I4MbcBMRpw7:m4ResyUdGb2BcVAGrdIFoQ/1NdZwfZ

Score

7^/10

evasion ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

com.RamadanPrayer

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.RamadanPrayer
Checks Android system properties for emulator presence. 1 IoCs

Processes:

com.RamadanPrayer

description ioc process

Accessed system property key: ro.product.model com.RamadanPrayer

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.RamadanPrayer

description	ioc	process
Accessed system property	key: ro.product.model	com.RamadanPrayer

Loads dropped Dex/Jar 5 IoCs

Runs executable file dropped to the device during analysis.

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/cache/1582435991586.jar --output-vdex-fd=89 --oat-fd=90 --oat-location=/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&com.RamadanPrayer/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/app_dex/update.dex --output-vdex-fd=153 --oat-fd=174 --oat-location=/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar	4367	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/cache/1582435991586.jar --output-vdex-fd=89 --oat-fd=90 --oat-location=/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar	4166	com.RamadanPrayer
/data/user/0/com.RamadanPrayer/app_dex/update.dex	4166	com.RamadanPrayer
/data/user/0/com.RamadanPrayer/app_dex/update.dex	4749	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/app_dex/update.dex --output-vdex-fd=153 --oat-fd=174 --oat-location=/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.RamadanPrayer/app_dex/update.dex	4166	com.RamadanPrayer

Reads information about phone network operator.
Removes a system notification. 1 IoCs
evasion

Processes:

com.RamadanPrayer

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag com.RamadanPrayer
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.RamadanPrayer

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.RamadanPrayer

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.RamadanPrayer

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.RamadanPrayer

com.RamadanPrayer
1⤵
- Acquires the wake lock.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4166

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/cache/1582435991586.jar --output-vdex-fd=89 --oat-fd=90 --oat-location=/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4367

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/app_dex/update.dex --output-vdex-fd=153 --oat-fd=174 --oat-location=/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4749

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.RamadanPrayer/app_dex/oat/update.dex.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/update.dex
Filesize
182KB

MD5
4d7d6a5f7db88dbeecf40c6e3c280dbf

SHA1
506af96427328e4fbc94d80a8bbc45979a793d2b

SHA256
02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68

SHA512
53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/update.dex
Filesize
182KB

MD5
4d7d6a5f7db88dbeecf40c6e3c280dbf

SHA1
506af96427328e4fbc94d80a8bbc45979a793d2b

SHA256
02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68

SHA512
53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/update.dex
Filesize
182KB

MD5
c9981fbf850c6ebd2bc80354c7543593

SHA1
3027bf57fc99fe14b523905161ddbb810c7e638c

SHA256
1616d5816242cf7152328ec448e60a74b4e7a0b337f7c52848357f9fdf8ef040

SHA512
0a51be034ec2ff63dee8f8bc06faa8ab73c50a5b113217c779fb53b9fef32cae58f520e74518dea657aa95c0633c4dbef8496f773522f48397eec37205d09d85

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/update.dex
Filesize
182KB

MD5
4d7d6a5f7db88dbeecf40c6e3c280dbf

SHA1
506af96427328e4fbc94d80a8bbc45979a793d2b

SHA256
02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68

SHA512
53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

Download Submit
/data/user/0/com.RamadanPrayer/app_dex/update.dex.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Cookies
Filesize
64KB

MD5
cb7543c4df600f2af58097cce0e334ba

SHA1
83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

SHA256
64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

SHA512
ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Cookies-journal
Filesize
1KB

MD5
158e7ca5f9909db6e92fee010d9ef22b

SHA1
0195e68269d2dee2dd6e30e194b5ff8593f8f76b

SHA256
432df2069d1ae3f5a265dd2b6cd4cf826b0123a50c1d1addf524f34624fdbc23

SHA512
8577800cadd09ef91f4b207e927d873056dc924c0293c22fcebcd4408a6d855b87242314ba528388188f5125bdce97d0a7037b2e945399d6ffa3aefcb2dbc067

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index-dir/temp-index
Filesize
48B

MD5
eebb5d1fe94e5c29c36911ae4ecadc19

SHA1
371ed1475e7701989ac56383335d160811a7a285

SHA256
ee41aa96e16d7d62c9301220ae3b1b9b866d8cc52147227b71bf0563c9685fb6

SHA512
69c9bedb0b05cf514a27548cf4c65d1ebc765e370a958940575e94c95e244ae40359ebea7467193cce685405c036ebecd8c8c3f67651284210cded48e84bbfbf

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000001.dbtmp
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000003.log
Filesize
261B

MD5
cf70098f21b07cd5c9c4593bea6460cb

SHA1
531cdcbdae08d28e2955263e46cb5d5e7bed18de

SHA256
15c2efa1fa20e150c595180ac85326bb3581c5fc1ba553d3d7299de4db7d4ec9

SHA512
133041bdbd017de5f6e32b1e26ec808d4dabfd5c546f45cb51b619841d02cbb3f6d31a6bd0942d2e53c489bbeadd5c59019b962cfe7da6f83a52016b138069f7

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOCK
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOG
Filesize
70B

MD5
cee54be32b0d509938233bb4d1173cc5

SHA1
58af504d47c185bceb381326e157f588c87318ad

SHA256
2419b6e79a8a4b08ed42f3ec305ea9eb567434f2123269981519f8be77fe28f6

SHA512
d7b04a7bace9cd212b347159ff486fbac3ef239d6b686de2d2cbfc75a7863d63f254db5decc0fc632dbe8a89d1fd9ff9af71f939f04e05a81e39f9257ff63f9d

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/Web Data-journal
Filesize
1KB

MD5
8e6731bb2db59cb05fcaaa4bb5a90651

SHA1
802f4d262ad614b8d97e900e4dc7246cbe668bd2

SHA256
239b0805beb2b01e3e554bb093b2e40c7b2a8c817565b48f1823028ac6a872ea

SHA512
a0a0d2d90c507a666cbf69081b38e4483a10dbb90405a7cefc76282ccb5f6484ff40a6602e2db6c9ffb8a22aee173cafb39614af6b7a27c75a3d813e1d199629

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/metrics_guid
Filesize
36B

MD5
946488525c8103dd72c7065df824ce57

SHA1
d30f7a1d3932d31a067a3b2918aba8bf4a9a1d40

SHA256
d3dacc6ad45afae71008f81fcdbbd0b40959216f44cfc3b2e91c48a25f524fb8

SHA512
f47146f32a7b76f59c34dc4d7fb88d339e8eee9df383a47f7b46f84e55d9dd9938cecd71d7a4e6e5cee3c9be45fc286a63e3150eb937578e0a04895b0d115dff

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar
Filesize
20KB

MD5
2048eb6124a452540ee51dae4145aadf

SHA1
d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451

SHA256
105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864

SHA512
bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

Download Submit
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar
Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/data/user/0/com.RamadanPrayer/cache/1582435991586.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/oat/1582435991586.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/3697e4be9cebd2a4_0
Filesize
5KB

MD5
0023fa18f1c9e51ff0425c3abcdf08b6

SHA1
a58e1e07b3ddeee487712fa392e4e09fadacffe2

SHA256
40b998cf9544d8c5e6b351e77519f9d6aaaf4b9eadacbaa18faa4ebb4972c695

SHA512
0f045fa8890beb67cb552c28d613209dc8520c6fd381946f6ea48b7b0f342b1cd4be9895956835076032034d398a8853f457f161377572db36c37d37ecafcec0

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
Filesize
6KB

MD5
39c8edef9716097d77f2d8c73b61bf6e

SHA1
818e504ddfaf1cc11281928168bb362517eaea29

SHA256
f2e62233108f116f4ee87228d03ab0d5503790e500afbe1021fc70119c97b92f

SHA512
aab037b3807fdf3330b6dba5bfeb5f2875a13aa81b7278e39fed625cd86b60879db60746a0b69ecee30dd133022a39ecef3d8692d93752359756722ac60c3c83

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/f038e94cb33282ab_0
Filesize
126KB

MD5
24d1852efa20fa7ff84c45426fd311d6

SHA1
70d5c07ca6421e609b1faee0b63b939c6b8e4893

SHA256
8fd3a76c5f9129dacb8e4e49688615932bce059036ee30c140a89c138bcbf471

SHA512
55a0c9b51eb6cae44ce5252189efce5fee5f8114911c3c0931019525bc00ff7308aa07cdb85ca7384934761520a726551a519ed1157bdf7c4caec3b735fda674

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/f038e94cb33282ab_1
Filesize
196B

MD5
89b6fdb4b38e54aa0680bed987c93b9e

SHA1
36b457dd7b681d6e5ac071405e81a4819d50a997

SHA256
2f6d8575c9283fc3566641efeda358f6135bb468f09e368ea9db7a7c7f319f77

SHA512
83e82015d7db7f8e1fe46ed970fb4eb7b416723494126f24d1cf3b601c2ece3368f38d7bf122db5bac61245303ff050404122d5704e036cc32b4e89066db681c

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
f3cfe6a405817e8321914b6c941d57c9

SHA1
bd8c90a6f3dc109e16b078808d47917036e1cf5f

SHA256
27811d3189f0b94e647631b5e28a782cda0233509490c113a40efd86129daf16

SHA512
5d46b6af750d59c03efc442af4aeb39f892a49d5dd189bf0f06e85644426758e1898dc7c6e168e3d18a4cd92843153c48e6c3a44dae20942013432c5a4ba638c

Download Submit
/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
120B

MD5
ec0e4097afb4dae4091db62d1eb2ad17

SHA1
07a42bd42acffbb5ad805a4e62dfca76f84624e2

SHA256
f52c3986a0d6a47819bb292787b859f25f6950095c9d0039d40c3e2bd97ef466

SHA512
1501ca441cc2589f67fd3e9e54d2a8b98b60281440da62501d8c032b321979fb13aa0ddf53a3e0528ebb896aa1ef2b936fd7eac313c40ed1dd579d47353d268e

Download Submit
/data/user/0/com.RamadanPrayer/databases/AddtoFav
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.RamadanPrayer/databases/AddtoFav-journal
Filesize
524B

MD5
31dbb0c522d863b28d80294e7195faab

SHA1
491c85536b6725c681af06058e46691591c7b07f

SHA256
6ffc6a6d52ebf203bdc8b0cdf67d2a6131cdbc8f060b285003aa1c36813d6629

SHA512
fac767cbee932afb8b55bdafe041a4912bb033cddcbeacca4db02614fae28129598e7e8544527ca01a005bd877618aac71294db777b7ba5bd349aea12fd430ad

Download Submit
/data/user/0/com.RamadanPrayer/databases/AddtoFav-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.RamadanPrayer/databases/AddtoFav-wal
Filesize
28KB

MD5
8260ae752855ac57d8961235c9680aff

SHA1
b5717a77f516efca1e374f538528926337eaaba9

SHA256
3f8776124c37b05f60a62563acb8c15a074bb5a540ad40d2817a89f0c5961dd4

SHA512
74eb170d106c1567fc1628842622560a568153f5b5d2aff15f85dd5401ec7d4a1ecda4c144d9d6e6d4ece6c793c1e692bac3ad19fbd669c34c3c1c0af57d6a53

Download Submit
/data/user/0/com.RamadanPrayer/databases/AnimalDb.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-journal
Filesize
524B

MD5
0199875cdbdb86c57249c092e20630b6

SHA1
cddcf44140d79e40a64a6443c11731903647ff83

SHA256
97e0878f54429b2a6d4b5b91a7c5b4c1d635dcd6979df97973b349c7963cc3d7

SHA512
e18af604f8f13aa829d0329d029bdc07a4ada414fae783a71a58e3d8b8fdf99ddc9b3b343a3940d26b290ef7f9a4c9ffcebf46cafb2fbaf3f9f8fb7ccb221887

Download Submit
/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-wal
Filesize
52KB

MD5
392d47e73cc43766e4b9fa4324e4ad19

SHA1
ee6f621a6a93ad9b99682ddc4a8744b042d57519

SHA256
157bcb740200ebee444c80c150d6536fdb28c451a8f057f45a210fb14fffd1b8

SHA512
216d0e5279101942a4c8b46c542c45927f9b01129eedee88509de04137b5d8c5a456303f8ffa56245a14d0af50ece07da634e1ab94400a49a3839a447d40faea

Download Submit
/data/user/0/com.RamadanPrayer/databases/OneSignal.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.RamadanPrayer/databases/OneSignal.db-journal
Filesize
524B

MD5
16cf38e603b1f3e66a53061244738d49

SHA1
375c03680dc4240e09afcc4b9c2fc53da29b4865

SHA256
40da347aee1412d87882bf1158efa97a1546c69a463939496f803fb28db7812c

SHA512
6473469c2bbd158d706db56cac06cf79649aeb5e93b9f780e5d532a542315b55c9953dbe94f1f6ca3bc68d212756ee612af25f0db0a9eb165f91624e8216002e

Download Submit
/data/user/0/com.RamadanPrayer/databases/OneSignal.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.RamadanPrayer/databases/OneSignal.db-wal
Filesize
60KB

MD5
b0650220e218350db9c80563ddc8c725

SHA1
7de38c4e55c307e75d2d3ab4b400932382b475bd

SHA256
1a19e1f7d42816343a9fbbb8042fdb974c4a6b8b2c7b698884a3f17423409d34

SHA512
1f120b9618a5e998f7f29423c859c279d3fcddbd5a08987573ed4e34526b8b6c2afb8e5f97ac3f47952ff3a983d7df82e123400f92dc4d26648f8bdccae53bcc

Download Submit
/data/user/0/com.RamadanPrayer/files/logFile.log
Filesize
122B

MD5
914b8ec3f00f2c16a38f1da9d920fc2a

SHA1
88f4b73598df4204505faac33af95d83f062e781

SHA256
31bc4d26a101a3bef18dbdaff7a85cc9af9730050648a16d9de95a0ce9c3ce97

SHA512
c296b81773c069d3c3f5ecd4af428abb887df7ec774622d338e5965b754e578de2fc5a8133ce64c0b9a7ba84e2a6cf6066d5adf4491889fedc7e88fc2e447434

Download Submit
/data/user/0/com.RamadanPrayer/no_backup/com.google.InstanceId.properties
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/no_backup/com.google.android.gms.appid-no-backup
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/GTPlayerPurchases.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/OneSignalTriggers.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/admob.xml
Filesize
133B

MD5
ccb79c2045031626e9595fb55998bffa

SHA1
41f3e41e21f9138339f8cb73f5d88884354e95f5

SHA256
0676dccfdcb0c0c1914c10a16c7c0c7fbd2a119608f45d7acc4f33764ac0e93e

SHA512
ca6e7894449f9256973de958baad276784f46eb8158b485324f8b19831cd60e9fdcae541166db9e0f453f11819ec3e0edcaa7d24b3e7c4e433584713a7ffb60a

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml
Filesize
2KB

MD5
1b04791a21c91a40ed2bd9277dc57ca8

SHA1
08a5de383bf9fc9bdc9905c03f28c2ff2f5ec75f

SHA256
1527116c1c048d060a81b2e67f1b61d668d9bcebb015054f974881e771217081

SHA512
94e2ad61bd65ce9e41e75588c17670444169e5dad66ccb04d262fc15981cdf492ee884ab86774dae7a3094a7eee7ac3263c88a022eb60c89a3bd9d96bcc894f8

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml
Filesize
2KB

MD5
f0127aec63c6be4aac7f0e0218e8a9ea

SHA1
972d730a711eaa1a1d7138ca0ff34ce90cea796b

SHA256
ca202392b31bf9f4605a362499fe0aee306ffee9cf44240f35e61589e9ce16c8

SHA512
8c11d642aebfcac20a4e194d6bfedd8f15e837bd7468402ae0fbf2c59d5c15f012dda9df79cf0453e3bd4bd1629836577245e1b8029aa594d5b25a332b14dbc6

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml
Filesize
2KB

MD5
1775d1f1c108d84808803d7f0fc43917

SHA1
5cda8ab8594bc6f31f55da295bba4bf306b5f4a6

SHA256
47ccd8b2a46dd2bf40e0b2b08228072f217d4b92ff5a25a5825ebe6ba86ccf34

SHA512
0592d86d0a1dece602666f81435fa853557ea6d1242b5d5d40e9f397e85e3b61dbebb351bd7dcc4109ab7b653f25f383eeb4a20df076efc0122d7bfa9cf904a6

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/data/user/0/com.RamadanPrayer/shared_prefs/mobileads_consent.xml
Filesize
570B

MD5
affde49859a21ef272f0dd10d0f3d561

SHA1
4b99d882b386f2c70c09f7dd8605f30b919b554b

SHA256
57a29e76736de1a31b5c05da1afe8967917607aea2755fd8fca25233965c8836

SHA512
83d298c4b82bb01a3d09e3741740e19bad926d79bf71cf4616f29b108b35657033ed437631b3573779ee108b0b6d7f9942ca28b4e84e81be2d06b621e87b16af

Download Submit