Malware Analysis Report

2025-08-10 22:58

Sample ID 230328-cbvzgsgd46
Target 0fbbf5bca438574f5592ac1f548d5d460ddccb4ad6225087a770b47fb717c427 (1).zip
SHA256 c5a6811eb32bcfdaf8043a253f1eb8c544d46f602042fe351c501194d4f91b80
Tags
ransomware evasion
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

c5a6811eb32bcfdaf8043a253f1eb8c544d46f602042fe351c501194d4f91b80

Threat Level: Shows suspicious behavior

The file 0fbbf5bca438574f5592ac1f548d5d460ddccb4ad6225087a770b47fb717c427 (1).zip was found to be: Shows suspicious behavior.

Malicious Activity Summary

ransomware evasion

Loads dropped Dex/Jar

Acquires the wake lock.

Checks Android system properties for emulator presence.

Requests dangerous framework permissions

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data).

Removes a system notification.

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-03-28 01:54

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-03-28 01:54

Reported

2023-03-28 01:57

Platform

android-x64-20220823-en

Max time kernel

636443s

Max time network

166s

Command Line

com.RamadanPrayer

Signatures

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.RamadanPrayer/cache/1582435991586.jar N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.RamadanPrayer

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 onesignal.com udp
US 104.18.214.59:443 onesignal.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 www.abdulapps.com udp
US 1.1.1.1:53 somrasdc.ddns.net udp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.136:443 ssl.google-analytics.com tcp
US 104.18.214.59:443 onesignal.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
NL 172.217.168.194:443 googleads.g.doubleclick.net tcp
NL 172.217.168.194:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 www.abdulapps.com udp
US 188.114.97.0:443 www.abdulapps.com tcp
US 1.1.1.1:53 somrasdc.ddns.net udp
US 1.1.1.1:53 somrasdc.ddns.net udp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp

Files

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db

MD5 45fe88536ca123cdd397cc385fc1e24f
SHA1 67c0eedebeb6e49992778b2203157d9fb198f43f
SHA256 f33b9aeb205561f50780e0485c499d62f25744538498e08d9dacbac42381f697
SHA512 2b4dbd963e3852e4e28e4a28af94949412a93f8e652478c95c134e6a53fd0f525a3a87090a614c5a5fad4cfc1238d3b23f838a7685f5c48ed257154d5c575ce9

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-journal

MD5 d292d75c70cd744f907d04967fb48e52
SHA1 de1727a56e9a5861b14b3b8352c4535c5ce5c55d
SHA256 6c75f73966ca43b67cd23878a9857cfcffe5d936a55f4d0a8f927828fd83be74
SHA512 dff4067669dd95987b108c4ea119511030009cafa40efca3eacbb77bb738c1903e7f11e0e31d26989010a374140891546d478b997e13803708cf8949840f78ac

/data/user/0/com.RamadanPrayer/files/logFile.log

MD5 c36c4755bef6961ed6bbf1e23f2b6dac
SHA1 e64a51a2e3628c4aefc4f3d8d51d6a8206d62912
SHA256 965ce2fec8d28d252d6a55cc3b1569588163d1c2a2b794f375475fb78f1906d9
SHA512 4a447403727c6be0f850c9866904fef23f615310716f6954b37c13ceccbcfe064553ec2d5a8180cd009de692964c9b8c40970a7e23833b7ea0f1da67467a88fe

/data/user/0/com.RamadanPrayer/databases/OneSignal.db

MD5 ccbbe2717fcc1d4a1bb418edaabc122a
SHA1 d5abf70653c0df3b216dacaa23155295cbf3358d
SHA256 2c2b23b76dd34ab8250c3f76ab82f7c4bf018f83353efbcd5a03c9735ee538a5
SHA512 66632d23510c21fc4744db4cadbe5a38d32d2a03414f4f04d93e5389e3599495995c47dd23a1b3d379de7ec780538e0f420bb5fdace799acc43e457f0f9eec3e

/data/user/0/com.RamadanPrayer/databases/OneSignal.db-journal

MD5 e8aca243e1f4f742eed41a0c2b406215
SHA1 22e4aed38077d55ffbddefa0333a313b1fc305c8
SHA256 148a00d3632e55fd85d3ca257573f63d0ef6cf427013a415527d44036c86c929
SHA512 75cb0fca215d0c9f76b196971eb59d228d167f6a8abf11cd4d6ee6407fc4ae9e6681e7ee91cba73e11c1ffc3d5effd62994a91a8ad88b623558be0e3eaf55e61

/data/user/0/com.RamadanPrayer/shared_prefs/GTPlayerPurchases.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/shared_prefs/OneSignalTriggers.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.RamadanPrayer/no_backup/com.google.android.gms.appid-no-backup

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/no_backup/com.google.InstanceId.properties

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/webview_data.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 1c471c19702c88521b8ab182ec289ee7
SHA1 2e3e44fdb525129dbc160fd9f3fe1fd299df7166
SHA256 1c37ed7a8e0d614728fbceaffd7badbcb0c702d170f3a0d0ef12657af041ccd1
SHA512 5379027c0b3ed5c228935b9a4477bad6435c3e06a03821f7b161d8a4db48803c290c75a8831fab023b6f9fc54d8510691163eaa1492b5674ef31ab8a864a70e8

/data/user/0/com.RamadanPrayer/shared_prefs/mobileads_consent.xml

MD5 affde49859a21ef272f0dd10d0f3d561
SHA1 4b99d882b386f2c70c09f7dd8605f30b919b554b
SHA256 57a29e76736de1a31b5c05da1afe8967917607aea2755fd8fca25233965c8836
SHA512 83d298c4b82bb01a3d09e3741740e19bad926d79bf71cf4616f29b108b35657033ed437631b3573779ee108b0b6d7f9942ca28b4e84e81be2d06b621e87b16af

/data/user/0/com.RamadanPrayer/shared_prefs/WebViewChromiumPrefs.xml

MD5 6ef709b8536878951e87c29a1518fc2b
SHA1 24376c70b00152501b3d98df61fa7db435339172
SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

/data/user/0/com.RamadanPrayer/app_webview/metrics_guid

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/metrics_guid

MD5 e0e86ea10530cf8ff0476dcc4ff8b2c9
SHA1 e741d92410234a217c0cf805d20f242119264487
SHA256 b0aa8fb73f220526d2e733636cda319642a501303f839b020b4dedccc1e759fc
SHA512 85af7d9f1d531be425fb6caea7825fb843082a9afbf2238c8344ef464b78dc9771a530f9cdbc0ad307ce35634fdcfe8641458cbfdc09a4038b3002525c3c20f2

/data/user/0/com.RamadanPrayer/app_webview/Web Data

MD5 b663831f8cc130493476d94f2d7a5330
SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/Code Cache/js/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/app_webview/Web Data-journal

MD5 fb1563630947c64a59d9d15aadb65ab2
SHA1 d7bd18f7c8c101ed90c65c8c2729acb39479582c
SHA256 47bf6e3361b95f1c10d474cd99ecd36665cd8e910c0a53471af3b21794d46535
SHA512 77564cadf900e84749d8f43b49775693d8545ea42c0eaa1a733f42f81447fbff7b3f7cbe444201de62dfbba5b4fff06a97db9b8655fd813e277837e2c72a3202

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 11db2d3ce658111aa25a900da1f2af26
SHA1 0da933374f3ad588e6f45486f1c0be031b198b5c
SHA256 549260d030419a032f3bddf2e99ec0592e7cd3f21ff6885f9bb36b301fe537d3
SHA512 190dccff32f2e0fa2d6572f55e0448c50cf396533bd701ce5d248b74d350cdcde61ac8fb503af45a9c927faa52280bd94e4bd4ea80b90dbf6d012fcf513da0a1

/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index-dir/temp-index

MD5 41c684e129fc65afb6a7d514d2ca3723
SHA1 1fc77447bd9ba74c953933649d6761f62abeddae
SHA256 812a6f0f3efdbb2236ef40b1b7927b509b4151b5a2c82ad42c6463c960a77e83
SHA512 b9c5a5a2e182d06268e4b8a09eae61ac8c0080ce9b232b0ab22689045f706f70929e4202bf1ad43c4a60e56d35f95717f859091ba89224266770b9e438fe28df

/data/user/0/com.RamadanPrayer/app_webview/Cookies

MD5 9b23e6a88d5a95f155f205cb04b93cd0
SHA1 b62dccbbef087a0731f226b96d15d35d8aa5e5fc
SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
SHA512 bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

/data/user/0/com.RamadanPrayer/app_webview/Cookies-journal

MD5 14c2dca473e2e209d0177fb6faa55d05
SHA1 d4982b39da822179c7725726af6e7a88c565608e
SHA256 414d6a1fe49d69b0624d0b8a25431f45007df20c6921e68fbfeca4f71c0ae961
SHA512 60abd60ef9b7118226d938a5abaa54e450def4ead732b6730a2e6281e3121cbfccba83163a82197e71719d7283d142556a0b00c6b81ab922219e261b134b28b7

/data/user/0/com.RamadanPrayer/shared_prefs/admob.xml

MD5 28d2816df26480bc30699ecc6982dd75
SHA1 2239762601f62cbf51cfae2ea6c999a7345b6c72
SHA256 c441aa2827a5738d1911ccc2f8f286e30002a35dde10526a988c7fece6ce6392
SHA512 b733e46e689d02dd20f8c80c6061dcf887d35dfda0a227ae31c090f0f8b9e6efc486732178b7701af5a39d08811801430c911029d0773d3f917979e67b2129cb

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/f038e94cb33282ab_0

MD5 9fe88325ce8a9a6e8067cece2d3d7bd8
SHA1 bf352e6bcdf87819c589d5d87f1b72b79b534d11
SHA256 1663ffe09728a40017c0698fd96e1192062a9d7ce3636fcde1042859449c3c34
SHA512 1a53ef8345b2f276593c1ac9d226516d68a464a6f67971ed9c277ad93e2ac2a3f1919fe1b40bf15592a0af66b632611b16a8a9aac2190fc89d2cffc1ebf2a068

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index

MD5 ec67ce48e6cce53e6b1c71ad191c0cd5
SHA1 021351eaa5c355e7ea416f955bccce722fa92bd4
SHA256 bcff128f5551578fb989fb22a770c78ee0f2d6ee5e89ef61053303714e657119
SHA512 f2fc19821084f4fb890416072f49c596ca54113315e4b0de582c92cbaf74aee16207c782436e3f7ba4ab35d38c58c06890fe94d3a88b652ddcec4b5dc1b31846

/data/user/0/com.RamadanPrayer/databases/AddtoFav

MD5 d930a09ab945b23f7f395f96d1f604a5
SHA1 60822ea0f4ec84489ff2570d57ff0620816cf97d
SHA256 e7c552be21db3e6cecb74114ec05e8efae81abd5d888112e4248e29cca47aae8
SHA512 aaf6591e95be1b771af1f8d5710448dd2714893f8c9eb9f12618c2c8d51e2d30860e375423c115997ee8112d886ea4fc1854a228e5fb914465c61dc3a7374424

/data/user/0/com.RamadanPrayer/databases/AddtoFav-journal

MD5 adb873dc5a556d6043bb667a1dfa0dc5
SHA1 405dd0e2ff85fc572477b556295c63468e75cbcc
SHA256 c026e69461d09a08813694a4e4e362756c1681c5d44a79c8396c86794e124a0c
SHA512 7d3c36831e62a84f3a195bed61e16baf62ef6254a9a1d7c9a4f2092f40fbf005b53261c6cdb87b693ac6583e0585fc559c3acd8c1692c8e9720bb518d92004ea

/data/user/0/com.RamadanPrayer/cache/WebView/Crashpad/settings.dat

MD5 16cbbd559163f412b98cf206fd49a147
SHA1 b63bc0f0ec722321e2ff4bfddd5f6d3af5f1d32e
SHA256 fdc8378e7afe8bae9b7eee4e601ef50cee14fd04f1319da687b6bb6d5d0acf23
SHA512 f1afc749a791b951d3b5369f840de47b0e66ec5cc25cb4e299c95d16a7f25a6cdae1cfb024f7959d8ccb520f5a1d514edf8ef28bfd4b3cce497b0b8db7c7483a

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 abf5311c487b8f7bd506dcdd5be8bc97
SHA1 20d59ea190f459a8b602ccd7f308cfea3660fb22
SHA256 a15fd2717f98983d57b1cce09c2c61404e2e5d64cb73cba3889a8eb630b755a7
SHA512 b21b30104f127c818efcdf421ae316139456cccd2f3380152861bb326ceb7f2dc8af4c1f1b2bf025f027ca9df8d5205cfd7a0175be5b451ad4811c563f86f34a

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 cbfb9b1113447db03993fa5bf557ea03
SHA1 dd0061ff537a641046d184d1c4bfe2e7685a62f7
SHA256 e30a207e02a25ebd930350685bf81e8712272ae76f71e1c199bc59260c1a8ed2
SHA512 6e8b2cdecb7d905564620b7c0ddd8c230784c7847a0f33911b71339cd12a43c4b412467f6490fba7ff8fa18a852939dbbf1312359466f7338ccb0fbca86e5fac

/data/user/0/com.RamadanPrayer/app_webview/.com.google.Chrome.1axS8k

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOG

MD5 29910d41342127aaf9af54ae4943deb9
SHA1 0411b5008b711e67d59f07836d6bc4c8411cf80a
SHA256 328faaf46013346323da89868eac2d4661e215b7bbaaeedef69f9b3ca123a0ac
SHA512 c83b43b6ff2ea31e39fb218a0580fc336e6f8b3318e68c845e9b648193b994d56b2256535be81d5be41c5c30c29c90f39d0c1c6695f9a4e0c6c25b48ca418af9

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000003.log

MD5 09cc496d307e3b2208e1228534e71929
SHA1 5b3394bfbe959715ae1ffe3a98691fd1088b2185
SHA256 105be29d28bcba27d3db4b4020e90a6052f7ea1c79ce8e990e7e0426aa2e8a7a
SHA512 4d499fe3faab0ff0432f35a960a409a9e2bbc5f00c8fd509e701fffe61bf2248c0db398aded3cb5ccf68a06aed3e9a5c305369ecd41b44dfa5e149b773dc64ad

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0

MD5 ad9e91594e2dfaa09a1d2e0af29cd820
SHA1 7b811999cb516b378d3901ae8d91bc15f96bfd59
SHA256 8de286f8779025c4f1c48ff3f2b936d4e2a3ae1e9b76fda48e40783bb2f78db7
SHA512 563b23c85116a08b46f517635d8f6cb126702604720a495c17cbad57546b1386c7eb8c813e4624589b621f89b08d1b8b7162a9b14dd78c7c2c3e5e4ecdd90863

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

MD5 a561c0c9a2f77995c208a6908a86bb4c
SHA1 c2d7f25c527b5d13fddb89ea93b814152f1bbabc
SHA256 83c5705a9e6ed91f6e59dc1afd199e8ada9e6b5531840c82e4c0c43c2095e269
SHA512 ec9a106ac5f89be5d8f00e6c2feba974680fd61119c1ee39002e08143fc0d419afec3bb67144cefd1ed13a087becbdfcdaa00be7a4d19e0e1e485f76d78f34b1

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/3697e4be9cebd2a4_0

MD5 9b4f1103c66291d1251423079406aac6
SHA1 74ae65d155a17ad93c98c99da799552f98093233
SHA256 ed463b17ee007671e40fee9c54293d932126dc9f94369d71255451999f90ad31
SHA512 b017df2a7a8123b7fd579e2b09318fc2907769d6acaea02baed8c9d592a11badac6e77940b07f39978790a9906b620072f8ab3a25aeda2325625d419a50e9fff

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 517aac9d283e307ed7825cdde4642fa9
SHA1 3c9d5b3fa8b311dbfb9cede3d193047924846c09
SHA256 adeeb732309e3083c9e3f403df52eb9a125f612ce9ed7d6ec76973a62c25bf28
SHA512 fa888f6f34b7191bbfeb3809bf361355949aa61f515d0afc4c6b617b46e1f2e61e44190a9c5d848915f4d583f5e10457d3249c7e3f8203d6f42939aa2a724055

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index

MD5 cc767c08cb222c98b924ff75fe50ec9f
SHA1 49ffeec7f9b38ddf365b1c86f24eba825af3088c
SHA256 6caec5969442a62c7cebe2983d9c399f761f0aa54e5a04fe006df2ac121df821
SHA512 0ea94b822444e510bf38b4a4014d2a1fed007cae426c26185db470fac4f57d0a5fd45039f5e49463416474982ca86e58e509b5c1dfbd44701e2730e5976b3d81

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/oat/update.dex.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Analysis: behavioral2

Detonation Overview

Submitted

2023-03-28 01:54

Reported

2023-03-28 01:57

Platform

android-x64-arm64-20220823-en

Max time kernel

636436s

Max time network

161s

Command Line

com.RamadanPrayer

Signatures

Acquires the wake lock.

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.RamadanPrayer/cache/1582435991586.jar N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A

Reads information about phone network operator.

Removes a system notification.

evasion
Description Indicator Process Target
Framework service call android.app.INotificationManager.cancelNotificationWithTag N/A N/A

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.RamadanPrayer

Network

Country Destination Domain Proto
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.208.110:443 android.apis.google.com tcp
GB 216.58.208.110:443 android.apis.google.com tcp
GB 216.58.208.110:443 android.apis.google.com tcp
US 1.1.1.1:53 growth-pa.googleapis.com udp
NL 172.217.168.234:443 growth-pa.googleapis.com tcp
NL 142.251.36.10:443 growth-pa.googleapis.com tcp
NL 172.217.168.202:443 growth-pa.googleapis.com tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 infinitedata-pa.googleapis.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 onesignal.com udp
US 104.18.215.59:443 onesignal.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.208.110:443 android.apis.google.com tcp
US 1.1.1.1:53 www.abdulapps.com udp
US 188.114.97.0:443 www.abdulapps.com tcp
US 1.1.1.1:53 somrasdc.ddns.net udp
US 1.1.1.1:53 infinitedata-pa.googleapis.com udp
NL 172.217.168.234:443 infinitedata-pa.googleapis.com tcp
US 1.1.1.1:53 onesignal.com udp
US 1.1.1.1:53 accounts.google.com udp
US 1.1.1.1:53 accounts.google.com udp
NL 172.217.168.205:443 accounts.google.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 somrasdc.ddns.net udp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 1.1.1.1:53 sbreqahigyw udp
US 1.1.1.1:53 kxxdjlk udp
US 1.1.1.1:53 asooivbzidhyiqm udp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 1.1.1.1:53 asooivbzidhyiqm udp
US 1.1.1.1:53 sbreqahigyw udp
US 1.1.1.1:53 kxxdjlk udp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 1.1.1.1:53 onesignal.com udp
US 104.18.215.59:443 onesignal.com tcp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
NL 142.250.179.163:443 update.googleapis.com tcp
US 1.1.1.1:53 edgedl.me.gvt1.com udp
US 34.104.35.123:80 edgedl.me.gvt1.com tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.250.179.142:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.136:443 ssl.google-analytics.com tcp

Files

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db

MD5 4c3c0b6e50a1bc0c7e957d03d80eca89
SHA1 9dcbe7038bf011359dff7e9b2c964f47215696fe
SHA256 34fd5bfac344980b0b711f6809f716811c26171f9b5e9eea44c63ca4234f424b
SHA512 97e41233f80a79d1ebc31f02353cf68f9802b620275f471276a9cd90210a3ad84167bb78046e24f88af024159a87c9aa62e4b9e3e3a7194d056fd686d2f93b2e

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-journal

MD5 a231a7837a1124143452446e1e38f387
SHA1 37568016988795acb4d0236537ba2764e60a068c
SHA256 a46c3c214b270247d33429ebe186b79f94f8d6e0cf8f327f36cbe36c3fcfb6ac
SHA512 74553ab6dfddd65c72a85921ff4231be0b1198bc9000d94a8bfae8147828bfdb171d3f7d65012c76f92c8d8272c7898bdc1b46683e59945e099919117dd26fb2

/data/user/0/com.RamadanPrayer/files/logFile.log

MD5 a71990f58fdc6f1318191ce38548877f
SHA1 6392567b6d55011a5ffadd87e05188255aece24d
SHA256 9a77c8f8d69a93471ccda12458cfc80e8de68cb2a2a8435906f02bd1bb22ab18
SHA512 de2402247670b070210b2b6b01bc2e4dfbfbba67b46348ad764a503100fc2134531dfc7a9252bf9996dcb6f45a069f6a7d7952d63d3a1443e83a53d009450219

/data/user/0/com.RamadanPrayer/databases/OneSignal.db

MD5 3b31c4b342229229e419f5fda347d720
SHA1 519a2cd88778ea43ca2a4dcb95dda849e9ab2a77
SHA256 c20e895f29ec3874d963259f985b025935e8e0454cc78f98537d593b513d79e4
SHA512 7822c6dff23164ebde1b6d2d8385a0f535f5cdddba5dca90533a596bb15d2d43570911981955e6e54ac0ae24acba85ae79f57d2a58dc3ba0304cb279dd6a94d4

/data/user/0/com.RamadanPrayer/databases/OneSignal.db-journal

MD5 cb81b70f93d32b026611cfeb181079e0
SHA1 32aee0171f2ac66af47ff6d69e1fdf2c62d53eed
SHA256 11c87cc7f948ca78a120734e415044b76c90953a17126790e86dce99a86ab9f3
SHA512 bd6c8353ad5a7cd407846a95c6c9990bb30721fa2c1d5b2a597cb82f014a13c08da407333c9db854878522585637c8c666fb867a490c88b0cb00e3d2cd1ddff8

/data/user/0/com.RamadanPrayer/shared_prefs/GTPlayerPurchases.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/shared_prefs/OneSignalTriggers.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/no_backup/com.google.android.gms.appid-no-backup

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/mobileads_consent.xml

MD5 affde49859a21ef272f0dd10d0f3d561
SHA1 4b99d882b386f2c70c09f7dd8605f30b919b554b
SHA256 57a29e76736de1a31b5c05da1afe8967917607aea2755fd8fca25233965c8836
SHA512 83d298c4b82bb01a3d09e3741740e19bad926d79bf71cf4616f29b108b35657033ed437631b3573779ee108b0b6d7f9942ca28b4e84e81be2d06b621e87b16af

/data/user/0/com.RamadanPrayer/no_backup/com.google.InstanceId.properties

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 a51fd769ee2335845258da7b2bf4be22
SHA1 64f39f39554de1e5f4f73b79bd0ca7f4a99491d2
SHA256 c59be24f161af792d2249561677e2b78f36b7001482f7f4a9f86a0d8cf0b3727
SHA512 1cb60f6b3d135b8dca9d94f1f7eb51ff26dda31e8a24da2313844d6441ecd34e9d3f9052595f224ad868e6784a8a336330c0166d7b23571fa83bcac4874f55f0

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.RamadanPrayer/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/webview_data.lock

MD5 ffa7b65bdc1a004906439a350b510022
SHA1 7e80e40988fd9a9720c3ef966c53d6666bf2b653
SHA256 91a25383c0291b7ee6f94400ea0c48cce36f96bf33d8fb8cb0a3e5a48f21fb88
SHA512 440b18008e142815fbb8765a2897833a8ad6cc15b3d5c5733a6f38b8b78dcdeb0e0c74ebf42858e5e182ee745044e4f2ca8be94e04ae7b7c1b9a0c6342c33c2e

/data/user/0/com.RamadanPrayer/shared_prefs/WebViewChromiumPrefs.xml

MD5 97ccd9a2b2063143df56b6937f961ca4
SHA1 5e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA512 86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

/data/user/0/com.RamadanPrayer/app_webview/Default/Web Data

MD5 a48cd9324b1f8754b07f00d863b840f3
SHA1 11c6614775b35a58f440971dfc87c8aaac6d6173
SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA512 35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

/data/user/0/com.RamadanPrayer/app_webview/Default/Web Data-journal

MD5 864fbf555ead1170e2808d9cf9c8d04a
SHA1 74aa3996df8ecefcd8a1d9b764cd089253434880
SHA256 0aaef70d334cfa98a24cdb84c405d73e599774ce8d27c6969b25e7fa44c39e5e
SHA512 f36e3e067e0fcf9b788db5d5175dd4a9704f95700a86e2817440bad2c1403f8d0ae5a5c20c262870f95085dacd35da1eebe0700cc39394ef057eff296e8f4c0e

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/Code Cache/js/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/app_webview/Default/GPUCache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/app_webview/Default/GPUCache/index-dir/temp-index

MD5 25584d8823ee6b8d241f07a188d60955
SHA1 8b718fbfab8def2ef9c202fd2b572544a30260cd
SHA256 cdf9c482b90ae46e4331cd14a7ea9176529dc7a2ca800db76a038e18c41772cd
SHA512 77b156a16ca99ee870769f7f1350349055bd353337c86d9742f19f29e6d60b8c9d2379c8a723f166609e97dd29c02716713665257081e1b8077da45f1faa811c

/data/user/0/com.RamadanPrayer/app_webview/Default/Cookies

MD5 dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1 ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512 fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

/data/user/0/com.RamadanPrayer/app_webview/Default/Cookies-journal

MD5 51d4cb89c40fe9a751616becb6da2ed1
SHA1 5789a4b0ce6861097b738b1588840415c15586c3
SHA256 c0f055b15d2680bb444ab44ac06f33e26bc3e775c3db724e1606e33c8c714ea7
SHA512 4f78f8c50d49ac5196db0eb52aefd81aec66a4e35d181566325b0f074ebebc85940530959adf1146860eee870f0c288d7fdc8f1ea9e1237302624a6729a5d001

/data/user/0/com.RamadanPrayer/shared_prefs/admob.xml

MD5 bb6c133f1deafedd2cbfef4447fe76d3
SHA1 c4e2bff06bde9f6fa1417b82933b441dfcec0f5b
SHA256 a068ba205a3d4715930ce7fb2675e815f52ac3c86210945520de6c65b3526551
SHA512 5b11d3283b967836acc95f14bc90ecb3ba4abd85c10a8cd30f83d18ec73dcd3a7d88980d7b0206bb3d28e2ddc64beeb01d6600affd434c95b2e6e74ab3682fd3

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

MD5 a62b20c6608b3694260e345c1d80b467
SHA1 ea6bec313d9a059a7f4e1e72bf8cfbae621846d8
SHA256 6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
SHA512 f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/index-dir/temp-index

MD5 cbd47e356b91d85f631596362476dac4
SHA1 e5b1f74bfe64fa692d194a6d54dfac785c97877e
SHA256 ead275d2ae126de3b81f0871722894cdb728f0b7a0e3a47bce0c1b6811bdaccb
SHA512 ffac75b9a845d5f8ff120c86436a324147d590dd65cdee3b02c92bc4e4ac262eee0cf3eb46a3a22e1d9eee21b2023673c726c0cdceb985cd659619624990568f

/data/user/0/com.RamadanPrayer/cache/WebView/font_unique_name_table.pb

MD5 f080fa2a56ab5479d58063e5ea871447
SHA1 4b3fd57a98916fa5784305b76ba30af26b5253d9
SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA512 8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

MD5 90341ecbe25cd37fa4e154c8368d0521
SHA1 e72f8242147587b7f365d00544d3b0de09407702
SHA256 ccaf1907c6a49016c73e001bcaadeecab3648002ae0169b51776db62d1dab7c6
SHA512 79d4dddc32597e23503eb092b0d701e4b5f99092b8f284bca23a293babea5b198090b99b3b735ee680381a543281afe8eea2f60c404db8b7d91f90a41c49f868

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

MD5 fdf896da2359564f9e5e8b52d53de56f
SHA1 873d87ef90f7fe40b4563fd1a759ba111fc3a8b5
SHA256 eacfa4ac061351f54cfd8408e46b70323a97b63fccfde6edac1df4e0cb3aad69
SHA512 8a60941247f7d42ebf9c51e55ea4c14debf6e8e4da4b8212db4c7f3f64c40feb6c07f05aba52c7cf41288a596bb93f1e1ef4af2cb26e94aebdc962746c132c15

/data/user/0/com.RamadanPrayer/databases/AddtoFav

MD5 8f55811c1a8ffa61abc97a647e6a7b64
SHA1 d7728d492750e1eefecafb88e53e0ca4fa8582ea
SHA256 f82f8ff3c36f58e99e00341400c0dafe5ad16eb5029343599115ad002fe129a0
SHA512 ce3ffaae0ccb0883a7690e812e15e443be72d220257eb08e43be9e5c487bf91bc36b73144f9e3d837bacaadbff955c97a842c5aa0a01dec0ef4746d16166f3df

/data/user/0/com.RamadanPrayer/databases/AddtoFav-journal

MD5 faf38ccfc9b86bc11bb855628e396642
SHA1 114c988bf45a250f828ddd03e915b9fd955253e5
SHA256 1cf86b02ac949026faae30266dbc5ef7d867f7118b7d74a5625d326b3d11d914
SHA512 255a97929b5ebf53a8ead5e5e5e26a7527533787f763068f7e5f4abd07b4de9a6e198940eb328fb6b74941f1ca4aac51d21f0d8d079410aec2da8a15d3286772

/data/user/0/com.RamadanPrayer/cache/WebView/Crashpad/settings.dat

MD5 0b7eff258bb1002be7e948be168060cb
SHA1 9b3a9bcd4197443b38260b80861f5f16b4473eb6
SHA256 0824206e718bf94cde3115c61cbc498e42c86cbada694a2f60708acff7623c06
SHA512 b81de1a2af8dd690e1b03911c1daec2ed27da67bb4474da050addba250390e79b4f50e75827bc824b109bba2806719ddb0375d2fa04226bd041f4bc79a165fcd

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 fbd72e358668560f693b9de3587adf3d
SHA1 fe7a8ecfa46c4cce758122262247721f7a90f5e0
SHA256 2e12af221557398e6bb01d357792886f542b4eb35f34ba6b31cada5195c33cb5
SHA512 49f752586258f2cccecf5aae266729417e8a58e481a8b68a48d6638d37b9c0cbf168a536e99ab408c9a1f42967926d7a52c398f9077dd33f39c232f5e4d90b3d

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 c7fec933a31c54675e126c9b0b2a4fb5
SHA1 b742c5dda1beb864e392aae20428a3120b2eba2f
SHA256 160656f64f16e493eb03cc4f4a438687bd03acdfac0d828d50ef5f07e1d0c343
SHA512 9b6fa8b85768ffb58d1b72b8a702e68263e6006e613c95797376f7467a3110f63cfdedd1065e827b5342b26e518e8da5324e56848d4e21c224fb70f8fd0eb1a4

/data/user/0/com.RamadanPrayer/app_webview/.com.google.Chrome.oNfPsc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_webview/Default/Session Storage/LOG

MD5 59fb0a65e5aa9c40057d00a0e50e0ac2
SHA1 5e5f31cb728ada370cca92c1b145c7658d46200f
SHA256 4e7d4218d3e38202e200497ac871c61dd5085ab8e3f62bfffe7007bdaa3f9e7a
SHA512 2e62a52ee421911c8cac53693ddb901b3dfb009a8418e7cae894602adf3951682a2fba836a340686b0f6d63dec995aa8047fdc7a8b769d8c8df7b1ed5345b850

/data/user/0/com.RamadanPrayer/app_webview/Default/Session Storage/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/Default/Session Storage/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.RamadanPrayer/app_webview/Default/Session Storage/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.RamadanPrayer/app_webview/Default/Session Storage/000003.log

MD5 9f7eadc15e13d0608b4e4d590499ae2e
SHA1 afb27f5c20b117031328e12dd3111a7681ff8db5
SHA256 5c3a5b578ab9fe853ead7040bc161929ea4f6902073ba2b8bb84487622b98923
SHA512 88455784c705f565c70fa0a549c54e2492976e14643e9dd0a8e58c560d003914313df483f096bd33ec718aeec7667b8de063a73627aa3436ba6e7e562e565b3f

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/oat/update.dex.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/WebView/Default/HTTP Cache/index-dir/temp-index

MD5 2d083d90b23be353e569013a7b5e425a
SHA1 7d9412050ecaf6de4c1461fa70a8c23d42547df2
SHA256 4b4dc14eb7a65771c7344a8dc0454b45a2d3863ce91aa5399f3ba17d05e1b4ec
SHA512 0002b82ccc4bc020f218159cf6c1acd3f30d44a1386fab57a06b396ed914fa7135fb0fb06fdef28887e63dafefcfe2b521793899f20de6c03cb5439c76899295

Analysis: behavioral3

Detonation Overview

Submitted

2023-03-28 01:54

Reported

2023-03-28 01:57

Platform

android-x86-arm-20220823-en

Max time kernel

636425s

Max time network

161s

Command Line

com.RamadanPrayer

Signatures

Acquires the wake lock.

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks Android system properties for emulator presence.

Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.RamadanPrayer/cache/1582435991586.jar N/A N/A
N/A /data/user/0/com.RamadanPrayer/cache/1582435991586.jar N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A
N/A /data/user/0/com.RamadanPrayer/app_dex/update.dex N/A N/A

Reads information about phone network operator.

Removes a system notification.

evasion
Description Indicator Process Target
Framework service call android.app.INotificationManager.cancelNotificationWithTag N/A N/A

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.RamadanPrayer

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/cache/1582435991586.jar --output-vdex-fd=89 --oat-fd=90 --oat-location=/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.RamadanPrayer/app_dex/update.dex --output-vdex-fd=153 --oat-fd=174 --oat-location=/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.251.36.46:443 android.apis.google.com tcp
NL 142.251.36.46:443 android.apis.google.com tcp
US 1.1.1.1:53 infinitedata-pa.googleapis.com udp
NL 216.58.214.10:443 infinitedata-pa.googleapis.com tcp
US 1.1.1.1:53 onesignal.com udp
US 104.18.215.59:443 onesignal.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 somrasdc.ddns.net udp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 104.18.215.59:443 onesignal.com tcp
US 1.1.1.1:53 www.abdulapps.com udp
US 188.114.97.0:443 www.abdulapps.com tcp
YE 134.35.5.153:443 somrasdc.ddns.net tcp
US 1.1.1.1:853 tcp
US 1.1.1.1:853 tcp

Files

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-journal

MD5 0199875cdbdb86c57249c092e20630b6
SHA1 cddcf44140d79e40a64a6443c11731903647ff83
SHA256 97e0878f54429b2a6d4b5b91a7c5b4c1d635dcd6979df97973b349c7963cc3d7
SHA512 e18af604f8f13aa829d0329d029bdc07a4ada414fae783a71a58e3d8b8fdf99ddc9b3b343a3940d26b290ef7f9a4c9ffcebf46cafb2fbaf3f9f8fb7ccb221887

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-wal

MD5 392d47e73cc43766e4b9fa4324e4ad19
SHA1 ee6f621a6a93ad9b99682ddc4a8744b042d57519
SHA256 157bcb740200ebee444c80c150d6536fdb28c451a8f057f45a210fb14fffd1b8
SHA512 216d0e5279101942a4c8b46c542c45927f9b01129eedee88509de04137b5d8c5a456303f8ffa56245a14d0af50ece07da634e1ab94400a49a3839a447d40faea

/data/user/0/com.RamadanPrayer/databases/AnimalDb.db-shm

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/data/user/0/com.RamadanPrayer/files/logFile.log

MD5 914b8ec3f00f2c16a38f1da9d920fc2a
SHA1 88f4b73598df4204505faac33af95d83f062e781
SHA256 31bc4d26a101a3bef18dbdaff7a85cc9af9730050648a16d9de95a0ce9c3ce97
SHA512 c296b81773c069d3c3f5ecd4af428abb887df7ec774622d338e5965b754e578de2fc5a8133ce64c0b9a7ba84e2a6cf6066d5adf4491889fedc7e88fc2e447434

/data/user/0/com.RamadanPrayer/databases/OneSignal.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/user/0/com.RamadanPrayer/databases/OneSignal.db-journal

MD5 16cf38e603b1f3e66a53061244738d49
SHA1 375c03680dc4240e09afcc4b9c2fc53da29b4865
SHA256 40da347aee1412d87882bf1158efa97a1546c69a463939496f803fb28db7812c
SHA512 6473469c2bbd158d706db56cac06cf79649aeb5e93b9f780e5d532a542315b55c9953dbe94f1f6ca3bc68d212756ee612af25f0db0a9eb165f91624e8216002e

/data/user/0/com.RamadanPrayer/databases/OneSignal.db-wal

MD5 b0650220e218350db9c80563ddc8c725
SHA1 7de38c4e55c307e75d2d3ab4b400932382b475bd
SHA256 1a19e1f7d42816343a9fbbb8042fdb974c4a6b8b2c7b698884a3f17423409d34
SHA512 1f120b9618a5e998f7f29423c859c279d3fcddbd5a08987573ed4e34526b8b6c2afb8e5f97ac3f47952ff3a983d7df82e123400f92dc4d26648f8bdccae53bcc

/data/user/0/com.RamadanPrayer/databases/OneSignal.db-shm

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/data/user/0/com.RamadanPrayer/shared_prefs/GTPlayerPurchases.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/shared_prefs/OneSignalTriggers.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.RamadanPrayer/no_backup/com.google.android.gms.appid-no-backup

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.vdex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/oat/x86/1582435991586.odex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/webview_data.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/WebViewChromiumPrefs.xml

MD5 21223e9184445fe043476484cd8cb1f9
SHA1 2b4813f849121d60ba35eb0889080668bb62c778
SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512 be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

/data/user/0/com.RamadanPrayer/app_webview/metrics_guid

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/metrics_guid

MD5 946488525c8103dd72c7065df824ce57
SHA1 d30f7a1d3932d31a067a3b2918aba8bf4a9a1d40
SHA256 d3dacc6ad45afae71008f81fcdbbd0b40959216f44cfc3b2e91c48a25f524fb8
SHA512 f47146f32a7b76f59c34dc4d7fb88d339e8eee9df383a47f7b46f84e55d9dd9938cecd71d7a4e6e5cee3c9be45fc286a63e3150eb937578e0a04895b0d115dff

/data/user/0/com.RamadanPrayer/app_webview/Web Data

MD5 dc79f9ce5f3ab5270b33e61119dfc959
SHA1 1844bf222a5144b513dcf2fb50a18c011701c647
SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA512 18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

/data/user/0/com.RamadanPrayer/app_webview/Web Data-journal

MD5 8e6731bb2db59cb05fcaaa4bb5a90651
SHA1 802f4d262ad614b8d97e900e4dc7246cbe668bd2
SHA256 239b0805beb2b01e3e554bb093b2e40c7b2a8c817565b48f1823028ac6a872ea
SHA512 a0a0d2d90c507a666cbf69081b38e4483a10dbb90405a7cefc76282ccb5f6484ff40a6602e2db6c9ffb8a22aee173cafb39614af6b7a27c75a3d813e1d199629

/data/user/0/com.RamadanPrayer/no_backup/com.google.InstanceId.properties

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 1b04791a21c91a40ed2bd9277dc57ca8
SHA1 08a5de383bf9fc9bdc9905c03f28c2ff2f5ec75f
SHA256 1527116c1c048d060a81b2e67f1b61d668d9bcebb015054f974881e771217081
SHA512 94e2ad61bd65ce9e41e75588c17670444169e5dad66ccb04d262fc15981cdf492ee884ab86774dae7a3094a7eee7ac3263c88a022eb60c89a3bd9d96bcc894f8

/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index

MD5 93027d42b314432c4216e6cfca48b384
SHA1 43448dd8102979c3926828182579691945eedd4e
SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512 a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

/data/user/0/com.RamadanPrayer/app_webview/GPUCache/index-dir/temp-index

MD5 eebb5d1fe94e5c29c36911ae4ecadc19
SHA1 371ed1475e7701989ac56383335d160811a7a285
SHA256 ee41aa96e16d7d62c9301220ae3b1b9b866d8cc52147227b71bf0563c9685fb6
SHA512 69c9bedb0b05cf514a27548cf4c65d1ebc765e370a958940575e94c95e244ae40359ebea7467193cce685405c036ebecd8c8c3f67651284210cded48e84bbfbf

/data/user/0/com.RamadanPrayer/app_webview/Cookies

MD5 cb7543c4df600f2af58097cce0e334ba
SHA1 83cc92f38c27fdb4fa519b1ce2f37912f24af1f0
SHA256 64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233
SHA512 ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

/data/user/0/com.RamadanPrayer/app_webview/Cookies-journal

MD5 158e7ca5f9909db6e92fee010d9ef22b
SHA1 0195e68269d2dee2dd6e30e194b5ff8593f8f76b
SHA256 432df2069d1ae3f5a265dd2b6cd4cf826b0123a50c1d1addf524f34624fdbc23
SHA512 8577800cadd09ef91f4b207e927d873056dc924c0293c22fcebcd4408a6d855b87242314ba528388188f5125bdce97d0a7037b2e945399d6ffa3aefcb2dbc067

/data/user/0/com.RamadanPrayer/shared_prefs/admob.xml

MD5 ccb79c2045031626e9595fb55998bffa
SHA1 41f3e41e21f9138339f8cb73f5d88884354e95f5
SHA256 0676dccfdcb0c0c1914c10a16c7c0c7fbd2a119608f45d7acc4f33764ac0e93e
SHA512 ca6e7894449f9256973de958baad276784f46eb8158b485324f8b19831cd60e9fdcae541166db9e0f453f11819ec3e0edcaa7d24b3e7c4e433584713a7ffb60a

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index

MD5 93027d42b314432c4216e6cfca48b384
SHA1 43448dd8102979c3926828182579691945eedd4e
SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512 a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/f038e94cb33282ab_0

MD5 24d1852efa20fa7ff84c45426fd311d6
SHA1 70d5c07ca6421e609b1faee0b63b939c6b8e4893
SHA256 8fd3a76c5f9129dacb8e4e49688615932bce059036ee30c140a89c138bcbf471
SHA512 55a0c9b51eb6cae44ce5252189efce5fee5f8114911c3c0931019525bc00ff7308aa07cdb85ca7384934761520a726551a519ed1157bdf7c4caec3b735fda674

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index

MD5 f3cfe6a405817e8321914b6c941d57c9
SHA1 bd8c90a6f3dc109e16b078808d47917036e1cf5f
SHA256 27811d3189f0b94e647631b5e28a782cda0233509490c113a40efd86129daf16
SHA512 5d46b6af750d59c03efc442af4aeb39f892a49d5dd189bf0f06e85644426758e1898dc7c6e168e3d18a4cd92843153c48e6c3a44dae20942013432c5a4ba638c

/data/user/0/com.RamadanPrayer/databases/AddtoFav

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/user/0/com.RamadanPrayer/databases/AddtoFav-journal

MD5 31dbb0c522d863b28d80294e7195faab
SHA1 491c85536b6725c681af06058e46691591c7b07f
SHA256 6ffc6a6d52ebf203bdc8b0cdf67d2a6131cdbc8f060b285003aa1c36813d6629
SHA512 fac767cbee932afb8b55bdafe041a4912bb033cddcbeacca4db02614fae28129598e7e8544527ca01a005bd877618aac71294db777b7ba5bd349aea12fd430ad

/data/user/0/com.RamadanPrayer/databases/AddtoFav-wal

MD5 8260ae752855ac57d8961235c9680aff
SHA1 b5717a77f516efca1e374f538528926337eaaba9
SHA256 3f8776124c37b05f60a62563acb8c15a074bb5a540ad40d2817a89f0c5961dd4
SHA512 74eb170d106c1567fc1628842622560a568153f5b5d2aff15f85dd5401ec7d4a1ecda4c144d9d6e6d4ece6c793c1e692bac3ad19fbd669c34c3c1c0af57d6a53

/data/user/0/com.RamadanPrayer/databases/AddtoFav-shm

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.RamadanPrayer/cache/1582435991586.jar

MD5 2048eb6124a452540ee51dae4145aadf
SHA1 d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451
SHA256 105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864
SHA512 bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

/data/user/0/com.RamadanPrayer/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 f0127aec63c6be4aac7f0e0218e8a9ea
SHA1 972d730a711eaa1a1d7138ca0ff34ce90cea796b
SHA256 ca202392b31bf9f4605a362499fe0aee306ffee9cf44240f35e61589e9ce16c8
SHA512 8c11d642aebfcac20a4e194d6bfedd8f15e837bd7468402ae0fbf2c59d5c15f012dda9df79cf0453e3bd4bd1629836577245e1b8029aa594d5b25a332b14dbc6

/data/user/0/com.RamadanPrayer/shared_prefs/com.google.android.gms.appid.xml

MD5 1775d1f1c108d84808803d7f0fc43917
SHA1 5cda8ab8594bc6f31f55da295bba4bf306b5f4a6
SHA256 47ccd8b2a46dd2bf40e0b2b08228072f217d4b92ff5a25a5825ebe6ba86ccf34
SHA512 0592d86d0a1dece602666f81435fa853557ea6d1242b5d5d40e9f397e85e3b61dbebb351bd7dcc4109ab7b653f25f383eeb4a20df076efc0122d7bfa9cf904a6

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOG

MD5 cee54be32b0d509938233bb4d1173cc5
SHA1 58af504d47c185bceb381326e157f588c87318ad
SHA256 2419b6e79a8a4b08ed42f3ec305ea9eb567434f2123269981519f8be77fe28f6
SHA512 d7b04a7bace9cd212b347159ff486fbac3ef239d6b686de2d2cbfc75a7863d63f254db5decc0fc632dbe8a89d1fd9ff9af71f939f04e05a81e39f9257ff63f9d

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.RamadanPrayer/app_webview/Local Storage/leveldb/000003.log

MD5 cf70098f21b07cd5c9c4593bea6460cb
SHA1 531cdcbdae08d28e2955263e46cb5d5e7bed18de
SHA256 15c2efa1fa20e150c595180ac85326bb3581c5fc1ba553d3d7299de4db7d4ec9
SHA512 133041bdbd017de5f6e32b1e26ec808d4dabfd5c546f45cb51b619841d02cbb3f6d31a6bd0942d2e53c489bbeadd5c59019b962cfe7da6f83a52016b138069f7

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/f038e94cb33282ab_1

MD5 89b6fdb4b38e54aa0680bed987c93b9e
SHA1 36b457dd7b681d6e5ac071405e81a4819d50a997
SHA256 2f6d8575c9283fc3566641efeda358f6135bb468f09e368ea9db7a7c7f319f77
SHA512 83e82015d7db7f8e1fe46ed970fb4eb7b416723494126f24d1cf3b601c2ece3368f38d7bf122db5bac61245303ff050404122d5704e036cc32b4e89066db681c

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

MD5 39c8edef9716097d77f2d8c73b61bf6e
SHA1 818e504ddfaf1cc11281928168bb362517eaea29
SHA256 f2e62233108f116f4ee87228d03ab0d5503790e500afbe1021fc70119c97b92f
SHA512 aab037b3807fdf3330b6dba5bfeb5f2875a13aa81b7278e39fed625cd86b60879db60746a0b69ecee30dd133022a39ecef3d8692d93752359756722ac60c3c83

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/3697e4be9cebd2a4_0

MD5 0023fa18f1c9e51ff0425c3abcdf08b6
SHA1 a58e1e07b3ddeee487712fa392e4e09fadacffe2
SHA256 40b998cf9544d8c5e6b351e77519f9d6aaaf4b9eadacbaa18faa4ebb4972c695
SHA512 0f045fa8890beb67cb552c28d613209dc8520c6fd381946f6ea48b7b0f342b1cd4be9895956835076032034d398a8853f457f161377572db36c37d37ecafcec0

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/update.dex.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.vdex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/app_dex/oat/x86/update.odex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/shared_prefs/mobileads_consent.xml

MD5 affde49859a21ef272f0dd10d0f3d561
SHA1 4b99d882b386f2c70c09f7dd8605f30b919b554b
SHA256 57a29e76736de1a31b5c05da1afe8967917607aea2755fd8fca25233965c8836
SHA512 83d298c4b82bb01a3d09e3741740e19bad926d79bf71cf4616f29b108b35657033ed437631b3573779ee108b0b6d7f9942ca28b4e84e81be2d06b621e87b16af

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 4d7d6a5f7db88dbeecf40c6e3c280dbf
SHA1 506af96427328e4fbc94d80a8bbc45979a793d2b
SHA256 02b5b7f5bd80be7679fabef06f6a3abe9011bcba71664b704727b21ff15c3c68
SHA512 53d72724946c410d476fbeebd316b23e71f7c4e4c3b9abcd96fec1f61258035a7d12281b41db66da575b061570002721ea3901aa03a418da501574f2dd138ff1

/data/user/0/com.RamadanPrayer/app_dex/update.dex

MD5 c9981fbf850c6ebd2bc80354c7543593
SHA1 3027bf57fc99fe14b523905161ddbb810c7e638c
SHA256 1616d5816242cf7152328ec448e60a74b4e7a0b337f7c52848357f9fdf8ef040
SHA512 0a51be034ec2ff63dee8f8bc06faa8ab73c50a5b113217c779fb53b9fef32cae58f520e74518dea657aa95c0633c4dbef8496f773522f48397eec37205d09d85

/data/user/0/com.RamadanPrayer/app_dex/oat/update.dex.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.RamadanPrayer/cache/org.chromium.android_webview/index-dir/temp-index

MD5 ec0e4097afb4dae4091db62d1eb2ad17
SHA1 07a42bd42acffbb5ad805a4e62dfca76f84624e2
SHA256 f52c3986a0d6a47819bb292787b859f25f6950095c9d0039d40c3e2bd97ef466
SHA512 1501ca441cc2589f67fd3e9e54d2a8b98b60281440da62501d8c032b321979fb13aa0ddf53a3e0528ebb896aa1ef2b936fd7eac313c40ed1dd579d47353d268e