hook | 93aeafe9e0507e8b1cd2ba4910506f2540b8569eab9d905b2bf854a3822bcbac

Analysis

max time kernel
558866s
max time network
153s
platform
android_x86
resource
android-x86-arm-20231023-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
submitted
30-11-2023 17:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

93AEAFE9E0507E8B1CD2BA4910506F2540B8569EAB9D905B2BF854A3822BCBAC.apk
Size

1.7MB
MD5

781a885c06ddadc9af79ee6e29692343
SHA1

1c689daa60597faf80128d4f2c091769b442b14b
SHA256

93aeafe9e0507e8b1cd2ba4910506f2540b8569eab9d905b2bf854a3822bcbac
SHA512

f164a3e842ee34ab821e4dc1a3d07fd31098ba7253349c73d71521ea3497e62f195a9302e2b55a64add84c78460947822198be2c681b1e48de1ff4893b246cd9
SSDEEP

24576:llrXiRyMkn0nJkqEAo++iHTy/wyKlW+v43KKP6Pq7jZ1aeAn8gSN4JS6LtuCZ/O:TiRHnJ0AoCCKX19g3VJgSuJS6RuoO

Score

10^/10

hook banker evasion infostealer ransomware rat stealth trojan

Malware Config

Extracted

Family

hook

http://194.33.191.250:3434

AES_key

Signatures

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.vaditegacuza.niye
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.vaditegacuza.niye
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.vaditegacuza.niye

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.vaditegacuza.niye

Removes its main activity from the application launcher 1 IoCs

stealth trojan

pid	Process
4240	com.vaditegacuza.niye

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.vaditegacuza.niye

Loads dropped Dex/Jar 39 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs	4265	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/0.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs	4290	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/1.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs	4314	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/2.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs	4339	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/3.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs	4362	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/4.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs	4418	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/5.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs	4444	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/6.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs	4467	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/7.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs	4490	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/8.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs	4520	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/9.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs	4555	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/10.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs	4578	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/11.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs	4240	com.vaditegacuza.niye
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs	4600	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/12.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs	4240	com.vaditegacuza.niye

Reads information about phone network operator.

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

evasion

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.vaditegacuza.niye

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.vaditegacuza.niye

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.vaditegacuza.niye

com.vaditegacuza.niye
1⤵
- Makes use of the framework's Accessibility service.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4240
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/0.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4265
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/1.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4290
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/2.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4314
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/3.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4339
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/4.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4362
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/5.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4418
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/6.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4444
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/7.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4467
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/8.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4490
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/9.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4520
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/10.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4555
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/11.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4578
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/oat/x86/12.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

Filesize
325KB

MD5
dbb89ad36991f5470181c511e6fa9611

SHA1
98a5e1d854bba41e20e2cc9bcf034c484e52ae79

SHA256
1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

SHA512
c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

Filesize
5KB

MD5
2d1def7ac15ade5f18651146391a720f

SHA1
8814fb8a8fa77a1f049c3ac663004f47889f41f4

SHA256
43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

SHA512
2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

Filesize
16KB

MD5
599bfe661534b5296f77ac5c73fcb96b

SHA1
f15a7562b8f7a409642e070d260a7a579fd6a3a5

SHA256
f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

SHA512
ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

Filesize
23KB

MD5
78eb86ac9f50b0153136bf2d3b0a06d7

SHA1
013d885c6587c23f613d2dce7af70686bdf46a3c

SHA256
72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

SHA512
4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

Filesize
29KB

MD5
37b5354689b5fbdb9ecb624e1df2c2d7

SHA1
79fc074dd690aec6a468aa97a22400061ce216be

SHA256
f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

SHA512
11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

Filesize
3KB

MD5
8c5290a975c07b8a4d250f8031cce928

SHA1
d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

SHA256
7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

SHA512
afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

Filesize
1KB

MD5
4f789f3742376f7f03a5175fc021c69d

SHA1
ca8103c5aa1997a01c52eb46e548b32643a0210f

SHA256
619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

SHA512
f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

Filesize
1.3MB

MD5
5a7b444e9a39d0cf70c730497558f119

SHA1
c1e20c0e6b2d53d55a49491db3a3ea382acf6676

SHA256
bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

SHA512
562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

Filesize
141KB

MD5
6f29422100cacee72f7e69e0afb44ed1

SHA1
61ee66a218e9921c9100db8f2c4158914165dcb2

SHA256
209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

SHA512
2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

Filesize
54KB

MD5
13030ee39c315db4e40a30a5b53b2165

SHA1
5a96c26693eece9db781c07849235474facbeaf5

SHA256
c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

SHA512
6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

Filesize
77KB

MD5
1f14f94e95c7da3ac26ae11f0eeb0944

SHA1
d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

SHA256
03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

SHA512
9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

Filesize
53KB

MD5
fa9c9d14b1e4a13b9df971f4ed4206d3

SHA1
28f3d0fb0ead794d3916227bc6fa615e31943760

SHA256
0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

SHA512
d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

Download Submit
/data/data/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

Filesize
27KB

MD5
296b0f94b7a7d2e56b19caac227cdc19

SHA1
04374549ed20c760d0e730104cced8349fa11495

SHA256
d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

SHA512
e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
09e5b8c12f2b697a97aca948b994083d

SHA1
1770f90efce68989e30d363cb9a66912cecdc6d8

SHA256
c71f8acf614ba2380c900ab99cfd5f07fd39cc0aeafbe0c8deec7029eed35be0

SHA512
f6d8a3797d35ea03ccfa73311293733ca5b494b8b4dca080617968ae23114bb447d950359624ed516e8abfd7711dbe82289355e97ca0f516df347028b29c195f

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
c42bb5e9d55935e85cb787c3dc196a8d

SHA1
39784f0545867dbb93147a98324aefe312ae8a54

SHA256
d6755a2a523e6e4aef7a0268c4cfa1fd84cc1aed517c1a2e2f7605d875b27037

SHA512
8dc848d92a601d004aa9683e00c3df086711baf5cb91dce4f8b76a31a4eab411c0742830c70a8d20230316a9044831559f878eed49c48427729b786e5fd4d5a8

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
ac3916a435578f1b8d1115458a57011c

SHA1
9bb393147485564f90261e175be4e885097cd247

SHA256
109966c50a6fa38269cfafba0cc0bf0e4c2f0823452a14e7dc0f0a8d2f278195

SHA512
8e0061c22fe40252f20ab03d45c63d38b3f07d235ec92be02b7f76b41033f84da86b27f98618eed226e976c7a29683f63f7c1de6b3282285db1185017c397bdf

Download Submit
/data/data/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
b47f7dfc930858a915d0ad4836548176

SHA1
51a9f8e72b75cd8a8347cdfbec4db6a1b0dbd1a6

SHA256
7690e1af38f536b345ecf1409927cfaf5b9ca0e9020b9f30e676fec1d98f0d13

SHA512
94030d8d8612f427281a1d666d35c5c0958ca22b6319474d54318d00c8cfe3bd78fde546068ae796b19378d3cdf2d8471f78d5bd9ec1e67ce180d27baa3474c4

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

Filesize
325KB

MD5
dbb89ad36991f5470181c511e6fa9611

SHA1
98a5e1d854bba41e20e2cc9bcf034c484e52ae79

SHA256
1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

SHA512
c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

Filesize
325KB

MD5
d13c161980e98d695c9a67298433ecac

SHA1
7c80dd8d608cd86f7e872a256b7162a202819dcc

SHA256
0345f969e46d3e2890ea0a517d1d4a348785359b96e72a74846ca1ef83d50b7c

SHA512
2077d88c112136ec5849afac29afc9f9e79aa881ca2ef53335ba62812b179ea6a078a2f4cad761b509bfb64c60daa678c349a367fb620e3918455498632ab45c

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

Filesize
325KB

MD5
dbb89ad36991f5470181c511e6fa9611

SHA1
98a5e1d854bba41e20e2cc9bcf034c484e52ae79

SHA256
1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

SHA512
c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

Filesize
5KB

MD5
2d1def7ac15ade5f18651146391a720f

SHA1
8814fb8a8fa77a1f049c3ac663004f47889f41f4

SHA256
43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

SHA512
2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

Filesize
5KB

MD5
2d1def7ac15ade5f18651146391a720f

SHA1
8814fb8a8fa77a1f049c3ac663004f47889f41f4

SHA256
43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

SHA512
2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

Filesize
5KB

MD5
2d1def7ac15ade5f18651146391a720f

SHA1
8814fb8a8fa77a1f049c3ac663004f47889f41f4

SHA256
43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

SHA512
2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

Filesize
16KB

MD5
599bfe661534b5296f77ac5c73fcb96b

SHA1
f15a7562b8f7a409642e070d260a7a579fd6a3a5

SHA256
f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

SHA512
ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

Filesize
16KB

MD5
d1c85834b76ea94cc6f859976bf4baf3

SHA1
7e700a61cd9c5618ba431927c38db0711fa787fd

SHA256
2da4b4184f01d0d114a3a937df77a9b23d6ec0a5116f16f45a3c3994781e6ce8

SHA512
e39bf1d44ec7003693cfdec41ce5a5772a99acea7ce6e2ee9f11d6604fb51838eb6dc4d01ea604a6790f5f428526dad4e13b767ebf499b828da97aba5498bc1d

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

Filesize
16KB

MD5
599bfe661534b5296f77ac5c73fcb96b

SHA1
f15a7562b8f7a409642e070d260a7a579fd6a3a5

SHA256
f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

SHA512
ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

Filesize
23KB

MD5
78eb86ac9f50b0153136bf2d3b0a06d7

SHA1
013d885c6587c23f613d2dce7af70686bdf46a3c

SHA256
72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

SHA512
4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

Filesize
23KB

MD5
78eb86ac9f50b0153136bf2d3b0a06d7

SHA1
013d885c6587c23f613d2dce7af70686bdf46a3c

SHA256
72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

SHA512
4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

Filesize
23KB

MD5
78eb86ac9f50b0153136bf2d3b0a06d7

SHA1
013d885c6587c23f613d2dce7af70686bdf46a3c

SHA256
72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

SHA512
4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

Filesize
29KB

MD5
37b5354689b5fbdb9ecb624e1df2c2d7

SHA1
79fc074dd690aec6a468aa97a22400061ce216be

SHA256
f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

SHA512
11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

Filesize
29KB

MD5
84462f2b9c02fc74038a6276edbaf2cb

SHA1
3d8a74b5d510ea8d42cfac1fff81d7db554450d9

SHA256
9e1fcc2075a652630815c5ef0716783c5d0f69057076b72cfe0f889ea91e2911

SHA512
d0b01563baf4c100188ca8b2e969dd97863144f240cbca0c2debe163b9cc1eb5bc41dd2320f5a357cfd4a16f34c692d122c5ffd1035f258774410ac2ff2b67ab

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

Filesize
29KB

MD5
37b5354689b5fbdb9ecb624e1df2c2d7

SHA1
79fc074dd690aec6a468aa97a22400061ce216be

SHA256
f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

SHA512
11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

Filesize
3KB

MD5
8c5290a975c07b8a4d250f8031cce928

SHA1
d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

SHA256
7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

SHA512
afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

Filesize
3KB

MD5
8c5290a975c07b8a4d250f8031cce928

SHA1
d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

SHA256
7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

SHA512
afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

Filesize
3KB

MD5
8c5290a975c07b8a4d250f8031cce928

SHA1
d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

SHA256
7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

SHA512
afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

Filesize
1KB

MD5
4f789f3742376f7f03a5175fc021c69d

SHA1
ca8103c5aa1997a01c52eb46e548b32643a0210f

SHA256
619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

SHA512
f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

Filesize
1KB

MD5
c4eb377e4cf08bf93f9f585c132f1369

SHA1
ce5c9d6701fdb8f65bddd5dd1df1654885e357ec

SHA256
6278b275c74cd5bf9c800bcd4eaeda0dae6e2ec3237f16f2d2654d6b30830454

SHA512
10ebda902b2c0146b430a839ad34e4dcb7bf2886f6156169610409c4ad47e7c20d5bc748a52d69527f175eebc61ed6bcbb70b1f00485b8506cd9e2b8dea529eb

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

Filesize
1KB

MD5
4f789f3742376f7f03a5175fc021c69d

SHA1
ca8103c5aa1997a01c52eb46e548b32643a0210f

SHA256
619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

SHA512
f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

Filesize
1.3MB

MD5
5a7b444e9a39d0cf70c730497558f119

SHA1
c1e20c0e6b2d53d55a49491db3a3ea382acf6676

SHA256
bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

SHA512
562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

Filesize
1.3MB

MD5
de8758abea0078a3941c8a5e36305c36

SHA1
8d7393c29940b6ed1ce6382d36c641429f632201

SHA256
a4bae66481ec675815eb5b0a90e742c883b22e40233801842a06e0a2468705d7

SHA512
89cce149e71fedaa8fb87f56404526e5b1daaaca4930a43896ff5b2b6b2620c30de114d7d0731c102fe4ffc090a50fa8d9f3b60f1ef4846c6a8c6e25c49325e5

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

Filesize
1.3MB

MD5
5a7b444e9a39d0cf70c730497558f119

SHA1
c1e20c0e6b2d53d55a49491db3a3ea382acf6676

SHA256
bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

SHA512
562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

Filesize
141KB

MD5
6f29422100cacee72f7e69e0afb44ed1

SHA1
61ee66a218e9921c9100db8f2c4158914165dcb2

SHA256
209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

SHA512
2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

Filesize
141KB

MD5
dc6f8bcf220d6aa4ba59b29456fc0942

SHA1
d4eac58dd3340c603b7d8693d26405bcf464ba62

SHA256
79ca3a033abc8d581a8e8fd1ccf93db9c58ff50871a1ba36e5292391a4bfbf7a

SHA512
e97b0afc5a0383136857e1f3fe1e631ba31785f42c1c94e2fc5932a20f38076aa22791584ed17293368919dab6dd7dc8f1c8be575f5a413e4a79dd73d7cab4b1

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

Filesize
141KB

MD5
6f29422100cacee72f7e69e0afb44ed1

SHA1
61ee66a218e9921c9100db8f2c4158914165dcb2

SHA256
209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

SHA512
2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

Filesize
54KB

MD5
13030ee39c315db4e40a30a5b53b2165

SHA1
5a96c26693eece9db781c07849235474facbeaf5

SHA256
c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

SHA512
6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

Filesize
54KB

MD5
15360ea29a6b9914d237103c08c65fc0

SHA1
12310d370e6b29dca9639e9be8cf32962428f1fa

SHA256
6864b86ec8f68a0ecee6e515578a002d7708d4d6b8b1e1a9731497647109386b

SHA512
708bf62cc2da19cbcab32d830bc1c5fa326135869873c4d167ec0aed0211dac3b4c85a34f561a27673b9dc7c15b24ee6c4497d6d5e1626870c4a28739f8932bc

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

Filesize
54KB

MD5
13030ee39c315db4e40a30a5b53b2165

SHA1
5a96c26693eece9db781c07849235474facbeaf5

SHA256
c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

SHA512
6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

Filesize
77KB

MD5
1f14f94e95c7da3ac26ae11f0eeb0944

SHA1
d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

SHA256
03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

SHA512
9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

Filesize
77KB

MD5
ad4e0ffa07e8d92b3c71114a6ef64464

SHA1
24e755f2fb869f4ef3cbddd9c1da3b650e6d4f55

SHA256
0c4e8c789f2e562970fd862af28a16dc240315363932d8cab67784bdf55026b1

SHA512
1b497d08cb05639a3282ef7c155628dc4a824165c0f534252debfc71a33f2212521fb9cf8510f399e13b88b2732aa668f15830caa9615f2a24491cd78cbc39fa

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

Filesize
77KB

MD5
1f14f94e95c7da3ac26ae11f0eeb0944

SHA1
d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

SHA256
03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

SHA512
9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

Filesize
53KB

MD5
fa9c9d14b1e4a13b9df971f4ed4206d3

SHA1
28f3d0fb0ead794d3916227bc6fa615e31943760

SHA256
0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

SHA512
d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

Filesize
53KB

MD5
eeb008a0df7b8325d6fa69fa2baf7222

SHA1
8dc7c0d826e16e722e89ea8d4db1cd8100d05489

SHA256
df364665ccbea8bafca123b01dfd21b53e94372e838c730e37f3931fa530ea36

SHA512
4a190ed6c11cc9c2402606fbd74c297aaeb1ad8f1b977b0caf895873e72abdcf89d1612983af7b84cf9b4aa3911594e4d87dacf960740da06dbf766a3060f4aa

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

Filesize
53KB

MD5
fa9c9d14b1e4a13b9df971f4ed4206d3

SHA1
28f3d0fb0ead794d3916227bc6fa615e31943760

SHA256
0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

SHA512
d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

Filesize
27KB

MD5
296b0f94b7a7d2e56b19caac227cdc19

SHA1
04374549ed20c760d0e730104cced8349fa11495

SHA256
d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

SHA512
e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

Filesize
27KB

MD5
960df8a209832d47146d904f3a7be43f

SHA1
f2ac318561fdf60526bcb40f5fc768563100ebfc

SHA256
9c9d1b68bbabfd5530b9840b55686fcee4ab6964a7f1c5ff36ec65d7a3f0fc17

SHA512
ec67b3b9f1d57eeb5b871f9d1d8592f6471df2c2432157fb64ba51320d34dd45983f9b2ba9a512ef8f61b64f2ba0ad3d994b64e95e29075dae2f7c03df0432aa

Download Submit
/data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

Filesize
27KB

MD5
296b0f94b7a7d2e56b19caac227cdc19

SHA1
04374549ed20c760d0e730104cced8349fa11495

SHA256
d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

SHA512
e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

Download Submit