Analysis

  • max time kernel
    558867s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    30-11-2023 17:36

General

  • Target

    93AEAFE9E0507E8B1CD2BA4910506F2540B8569EAB9D905B2BF854A3822BCBAC.apk

  • Size

    1.7MB

  • MD5

    781a885c06ddadc9af79ee6e29692343

  • SHA1

    1c689daa60597faf80128d4f2c091769b442b14b

  • SHA256

    93aeafe9e0507e8b1cd2ba4910506f2540b8569eab9d905b2bf854a3822bcbac

  • SHA512

    f164a3e842ee34ab821e4dc1a3d07fd31098ba7253349c73d71521ea3497e62f195a9302e2b55a64add84c78460947822198be2c681b1e48de1ff4893b246cd9

  • SSDEEP

    24576:llrXiRyMkn0nJkqEAo++iHTy/wyKlW+v43KKP6Pq7jZ1aeAn8gSN4JS6LtuCZ/O:TiRHnJ0AoCCKX19g3VJgSuJS6RuoO

Malware Config

Extracted

Family

hook

C2

http://194.33.191.250:3434

AES_key

Signatures

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

  • Makes use of the framework's Accessibility service. 3 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 26 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.vaditegacuza.niye
    1⤵
    • Makes use of the framework's Accessibility service.
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

    Filesize

    325KB

    MD5

    dbb89ad36991f5470181c511e6fa9611

    SHA1

    98a5e1d854bba41e20e2cc9bcf034c484e52ae79

    SHA256

    1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

    SHA512

    c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

    Filesize

    325KB

    MD5

    dbb89ad36991f5470181c511e6fa9611

    SHA1

    98a5e1d854bba41e20e2cc9bcf034c484e52ae79

    SHA256

    1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

    SHA512

    c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/0.pobfs

    Filesize

    325KB

    MD5

    dbb89ad36991f5470181c511e6fa9611

    SHA1

    98a5e1d854bba41e20e2cc9bcf034c484e52ae79

    SHA256

    1a26f37e56faf9cbaa5c3372a1642fe953a4998a402d32ae261a1b95d49a8f54

    SHA512

    c35f063353e9b36b2909a95bf0e5db58079193548432aaa285b736fe27342871a3d4683c88b2653f77dec70f26a63870a26de05fa751b8d113297805a28c5792

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

    Filesize

    5KB

    MD5

    2d1def7ac15ade5f18651146391a720f

    SHA1

    8814fb8a8fa77a1f049c3ac663004f47889f41f4

    SHA256

    43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

    SHA512

    2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

    Filesize

    5KB

    MD5

    2d1def7ac15ade5f18651146391a720f

    SHA1

    8814fb8a8fa77a1f049c3ac663004f47889f41f4

    SHA256

    43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

    SHA512

    2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/1.pobfs

    Filesize

    5KB

    MD5

    2d1def7ac15ade5f18651146391a720f

    SHA1

    8814fb8a8fa77a1f049c3ac663004f47889f41f4

    SHA256

    43f32677a17566d00a3431946abe13b965295bf3dac762648ee6c2a39fdfebe8

    SHA512

    2c9ea44520973eb987d69f3882c9db63b15409b079e638e60e131a8f5897242f8fe67475748f78989dbe5480f3db3f29699cd2e1c4987860989fc7297fdf8b91

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

    Filesize

    16KB

    MD5

    599bfe661534b5296f77ac5c73fcb96b

    SHA1

    f15a7562b8f7a409642e070d260a7a579fd6a3a5

    SHA256

    f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

    SHA512

    ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

    Filesize

    16KB

    MD5

    599bfe661534b5296f77ac5c73fcb96b

    SHA1

    f15a7562b8f7a409642e070d260a7a579fd6a3a5

    SHA256

    f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

    SHA512

    ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/10.pobfs

    Filesize

    16KB

    MD5

    599bfe661534b5296f77ac5c73fcb96b

    SHA1

    f15a7562b8f7a409642e070d260a7a579fd6a3a5

    SHA256

    f045760e24f1307f360c41628ae5db9a2ef2cc07b991eb6379a1f3f8bc82bf28

    SHA512

    ec56e6c5da05e48599777c173ff45cd518d95654ca049f34a033f1ec00db5450301741d1198bf9924674819848e8a1f91c957d9abc1c5533ab9ff8bfae8bf9b7

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

    Filesize

    23KB

    MD5

    78eb86ac9f50b0153136bf2d3b0a06d7

    SHA1

    013d885c6587c23f613d2dce7af70686bdf46a3c

    SHA256

    72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

    SHA512

    4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

    Filesize

    23KB

    MD5

    78eb86ac9f50b0153136bf2d3b0a06d7

    SHA1

    013d885c6587c23f613d2dce7af70686bdf46a3c

    SHA256

    72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

    SHA512

    4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/11.pobfs

    Filesize

    23KB

    MD5

    78eb86ac9f50b0153136bf2d3b0a06d7

    SHA1

    013d885c6587c23f613d2dce7af70686bdf46a3c

    SHA256

    72b6119aade9bee0100676852db5b4ac5b9cd712ef039385175ccd6a3605ab9b

    SHA512

    4b5a112a57f08d0dc1a152575bbf3c787c45718cca02ff79dd56b8844dc33ad43ee066c9749a25a4c8b82c8d580288cf7f897cbf32721d6356fc0dcac9c95c37

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

    Filesize

    29KB

    MD5

    37b5354689b5fbdb9ecb624e1df2c2d7

    SHA1

    79fc074dd690aec6a468aa97a22400061ce216be

    SHA256

    f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

    SHA512

    11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

    Filesize

    29KB

    MD5

    37b5354689b5fbdb9ecb624e1df2c2d7

    SHA1

    79fc074dd690aec6a468aa97a22400061ce216be

    SHA256

    f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

    SHA512

    11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/12.pobfs

    Filesize

    29KB

    MD5

    37b5354689b5fbdb9ecb624e1df2c2d7

    SHA1

    79fc074dd690aec6a468aa97a22400061ce216be

    SHA256

    f872a011ddca16364bfa3cbebf6ad67ad1678781a719ef0760c5dcf3fbec6bb8

    SHA512

    11c53bf2efb1bd3c604619f632eb18a72b9deff3f432b5dec95cd437ce4d5d313b52d931a28d40b24ca97f97d2a38d16100ad5097e917cd9d67852de6b9c4954

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

    Filesize

    3KB

    MD5

    8c5290a975c07b8a4d250f8031cce928

    SHA1

    d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

    SHA256

    7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

    SHA512

    afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

    Filesize

    3KB

    MD5

    8c5290a975c07b8a4d250f8031cce928

    SHA1

    d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

    SHA256

    7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

    SHA512

    afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/2.pobfs

    Filesize

    3KB

    MD5

    8c5290a975c07b8a4d250f8031cce928

    SHA1

    d5d3f1c2b9178147c6ba808f2f4a3b8f5a3f1926

    SHA256

    7a8351a06e9aafca426e7b96bed2965156da2cce3f366046a9510c43dc08d35f

    SHA512

    afe6b2cae811d4ccdc6a3a7c8128dd7d7b4ab62ff470c241183ee733c435636ac74fa3ab0122509d757170f0556605520e7c5cacbdc0f95e76f6316e10bc7384

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

    Filesize

    1KB

    MD5

    4f789f3742376f7f03a5175fc021c69d

    SHA1

    ca8103c5aa1997a01c52eb46e548b32643a0210f

    SHA256

    619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

    SHA512

    f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

    Filesize

    1KB

    MD5

    4f789f3742376f7f03a5175fc021c69d

    SHA1

    ca8103c5aa1997a01c52eb46e548b32643a0210f

    SHA256

    619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

    SHA512

    f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/3.pobfs

    Filesize

    1KB

    MD5

    4f789f3742376f7f03a5175fc021c69d

    SHA1

    ca8103c5aa1997a01c52eb46e548b32643a0210f

    SHA256

    619db55473829e058a8a55d0c8c1aa73518b551eded2ee6f84fc320368f30ad9

    SHA512

    f1c1a0fff2323fe2dc8e1cd4ad83f1538ded2bc67eee6fcb15be1cb815f13cc304fd0340d5b3d2b0213f7fd5bda62bb92a7aeb7fd22eaf149ecc0b954362e9d3

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

    Filesize

    1.3MB

    MD5

    5a7b444e9a39d0cf70c730497558f119

    SHA1

    c1e20c0e6b2d53d55a49491db3a3ea382acf6676

    SHA256

    bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

    SHA512

    562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

    Filesize

    1.3MB

    MD5

    5a7b444e9a39d0cf70c730497558f119

    SHA1

    c1e20c0e6b2d53d55a49491db3a3ea382acf6676

    SHA256

    bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

    SHA512

    562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/4.pobfs

    Filesize

    1.3MB

    MD5

    5a7b444e9a39d0cf70c730497558f119

    SHA1

    c1e20c0e6b2d53d55a49491db3a3ea382acf6676

    SHA256

    bc662ccd084192aeefdf9647bc9ad34c60c3606e67d48361c449c24961f3cee0

    SHA512

    562f36a89e5df15711f624a473d07289a254a53539b460b14f8788bde3f299a9e39a22f080ffae181d2decf004f3d229774a82ba0964390b32cc513b5dc4603b

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

    Filesize

    141KB

    MD5

    6f29422100cacee72f7e69e0afb44ed1

    SHA1

    61ee66a218e9921c9100db8f2c4158914165dcb2

    SHA256

    209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

    SHA512

    2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

    Filesize

    141KB

    MD5

    6f29422100cacee72f7e69e0afb44ed1

    SHA1

    61ee66a218e9921c9100db8f2c4158914165dcb2

    SHA256

    209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

    SHA512

    2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/5.pobfs

    Filesize

    141KB

    MD5

    6f29422100cacee72f7e69e0afb44ed1

    SHA1

    61ee66a218e9921c9100db8f2c4158914165dcb2

    SHA256

    209e0f1c60fc529ef1e63829b26b463dec5d1b3d741ba073984436ec808421ce

    SHA512

    2a58004e8996dddb406aed913a222e39fdc9360edd113ab17ff6b9187f5f00f5b46a2a800fd15d48f31949bae3e7f5efe69f139ab2fbcb91179d06b7edf589c2

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

    Filesize

    54KB

    MD5

    13030ee39c315db4e40a30a5b53b2165

    SHA1

    5a96c26693eece9db781c07849235474facbeaf5

    SHA256

    c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

    SHA512

    6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

    Filesize

    54KB

    MD5

    13030ee39c315db4e40a30a5b53b2165

    SHA1

    5a96c26693eece9db781c07849235474facbeaf5

    SHA256

    c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

    SHA512

    6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/6.pobfs

    Filesize

    54KB

    MD5

    13030ee39c315db4e40a30a5b53b2165

    SHA1

    5a96c26693eece9db781c07849235474facbeaf5

    SHA256

    c37e8483cf9a87b46dcd54f692a176714d45b994c66e026c2732f286a6ecdb3b

    SHA512

    6952c8d2684065a01b924f79ffd4f2000312cd0ccc8f044fb543d0f6eb0901032f025b506b22b090822c528ab27f8829978572ac559494f302bb73feb925df96

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

    Filesize

    77KB

    MD5

    1f14f94e95c7da3ac26ae11f0eeb0944

    SHA1

    d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

    SHA256

    03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

    SHA512

    9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

    Filesize

    77KB

    MD5

    1f14f94e95c7da3ac26ae11f0eeb0944

    SHA1

    d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

    SHA256

    03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

    SHA512

    9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/7.pobfs

    Filesize

    77KB

    MD5

    1f14f94e95c7da3ac26ae11f0eeb0944

    SHA1

    d4d50f7f937773c4463fd1c0eabd449f14c7a0a6

    SHA256

    03db08171a0119ef25e2568a5055f88b56055fe63482b87e1a95301e40728b3a

    SHA512

    9243db5280d487d29ddc7ae77e82cb304687bdd37c92c74b36d306f39b938b3e0ad357775fae7dde7ec28a0c0b8ffc3632d8269551ab2887caf29b716aa6639d

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

    Filesize

    53KB

    MD5

    fa9c9d14b1e4a13b9df971f4ed4206d3

    SHA1

    28f3d0fb0ead794d3916227bc6fa615e31943760

    SHA256

    0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

    SHA512

    d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

    Filesize

    53KB

    MD5

    fa9c9d14b1e4a13b9df971f4ed4206d3

    SHA1

    28f3d0fb0ead794d3916227bc6fa615e31943760

    SHA256

    0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

    SHA512

    d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/8.pobfs

    Filesize

    53KB

    MD5

    fa9c9d14b1e4a13b9df971f4ed4206d3

    SHA1

    28f3d0fb0ead794d3916227bc6fa615e31943760

    SHA256

    0a726932fb40c00da4a3bc1dedc9226fd2fda297f587155f9a1767a975248e5b

    SHA512

    d90e31ced88ed6eb556ab02b133e5e7cf51301ac6030996f617e52baec809ded980dcb114642addfd779dde7b60742d20bdf44e6ee1507a36b12dc955d8ac072

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

    Filesize

    27KB

    MD5

    296b0f94b7a7d2e56b19caac227cdc19

    SHA1

    04374549ed20c760d0e730104cced8349fa11495

    SHA256

    d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

    SHA512

    e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

    Filesize

    27KB

    MD5

    296b0f94b7a7d2e56b19caac227cdc19

    SHA1

    04374549ed20c760d0e730104cced8349fa11495

    SHA256

    d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

    SHA512

    e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

  • /data/user/0/com.vaditegacuza.niye/app_pj52.flp.ko25.hw9/newobfs/9.pobfs

    Filesize

    27KB

    MD5

    296b0f94b7a7d2e56b19caac227cdc19

    SHA1

    04374549ed20c760d0e730104cced8349fa11495

    SHA256

    d4cdac8010317842aef5f3439d0b09b25b822d6d8d158aafb241e6c92aba9ad6

    SHA512

    e111ecb1179eaebe0be76da279ea95715829f2fa40a3adbcfc7e7744ea58c307a3cf2cec061ef2e68efbd57f4bbb68bb1dd09090654604520a97ae5da66e3280

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    01e42af208e4eeb7ec9f250bb00cf4c2

    SHA1

    a9d9320949baef06ace98e9bf5a83036e3dce097

    SHA256

    62475f00bc99aa822b4a70675c88da670593721f05b5fe4318c76891e64ba32a

    SHA512

    f77ce40ddef4f9b9044cef594c2f16bc0d4770f798cafd62eb7b9d6a4c62826c725f10e03f78b5a30ae796c14910e177f073cc16fbad1251d5a71eeae6b81024

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    ecbac13f761493879bd5880af310ea66

    SHA1

    175b458acf2f6780ada8705589c26e90fb475c82

    SHA256

    1e6a7220fb5a00614be6b638b178f0508164b5ac9a468fa5c57578f427d63b56

    SHA512

    eb3b38570c313b024e8314561609a4c38d0ac3b865ef25e59ff384fc20303772fad0f90d276293c1a947e36dc6586145e0b332e70e16b67d7d4ae190ba83c193

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    0ac0dd5eb916fb756077b53aecfc55c4

    SHA1

    15898c8bc6c831d8ec2f4ab93f59a88bbf816ad5

    SHA256

    4df635d812ef02c3185b2170557d6d0acb28d78928f8a201fd8cf2336a3a990f

    SHA512

    8b14885e42495af893818e26446979176f4de4f31f473b1b147cd69e06822999813364a459528945248fe709324d0a63bb8de2636372a2467ce1303f127010e9

  • /data/user/0/com.vaditegacuza.niye/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    96109b1b145fcb758e7a27f2708e0d67

    SHA1

    aeb2c9a3b9ed0c77a3f1b84b6fd37614215dd64d

    SHA256

    a52e68f9d647eeae79a72d7fd4b98eb7060d7880d6e6be90768ed11868433673

    SHA512

    5938a4db92d61a9b432c70cb5338a20b0710e9bcc35a9c82de3037f3edd670bdecab53e00dbbcf109e01fcf3a8c584fb65481a930346683bced43baf5835172a