Malware Analysis Report

2025-08-05 12:48

Sample ID 240122-xq85wadaa3
Target Pou.apk
SHA256 8bcb032467286a2c975eef66f7904dee937635f0ffc9587f7a83b76282a30e31
Tags
metasploit collection credential_access defense_evasion discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

8bcb032467286a2c975eef66f7904dee937635f0ffc9587f7a83b76282a30e31

Threat Level: Likely malicious

The file Pou.apk was found to be: Likely malicious.

Malicious Activity Summary

metasploit collection credential_access defense_evasion discovery evasion execution impact persistence

Metasploit family

Metasploit payload

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries information about active data network

Reads information about phone network operator.

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Acquires the wake lock

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-01-22 19:05

Signatures

Metasploit family

metasploit

Metasploit payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Required to be able to advertise to nearby Bluetooth devices. android.permission.BLUETOOTH_ADVERTISE N/A N/A
Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT N/A N/A
Required to be able to discover and pair nearby Bluetooth devices. android.permission.BLUETOOTH_SCAN N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-01-22 19:04

Reported

2024-01-22 19:06

Platform

android-x64-20231215-en

Max time kernel

32s

Command Line

me.pou.app

Signatures

Checks if the Android device is rooted.

defense_evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/me.pou.app/cache/1689111357674.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

defense_evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

me.pou.app

Network

N/A

Files

/data/data/me.pou.app/no_backup/androidx.work.workdb-journal

MD5 d6bafe3d95302c147b810bfc4dd5ca01
SHA1 365f53d3d426dd016047e43cb788dd88b78d15de
SHA256 277d3fc112a5472379f38a904f6f5abf9642a8983cabab6e02ca789a3b2eb6be
SHA512 d196299494d00f2910d1cc58e2251ef7f4a30e46ef3febdacdcfd9512d716785f7c441ac8f5cf522c2d013ccc281df4558c76be81d91ef05fbfb21777ee4f156

/data/data/me.pou.app/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/me.pou.app/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/me.pou.app/no_backup/androidx.work.workdb-wal

MD5 96bd905cdb0ec3783775afad25a22b7e
SHA1 df72340f85b9e1f8135f3c22a1c1f2d15c9b3477
SHA256 baccfeb4a91b990cc1ec5392c2635435afb082bbc8b2ccf2a01b5b252295162a
SHA512 85b829fcecbc3390addf52a5d38fd00d5ea98e088b095fb9eccdb03e38d9ee882e5621dc116e80aacfae945391d12eea527f32afc5120a7591b5c895a63f0836

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5 52c04ef0ad65337f3eef7dee10b769fe
SHA1 0e273362347194c68b01690e088b16c6d46e8b64
SHA256 5c95975a3e983586df877a7ef21f61c1313c4879a8eb2c38ad99834539d24a1f
SHA512 77a2405fc81a95ec6e5444eae1bc5695b71d8a244fe0bb38d9e169fa992ee939bb172fb94d70179477592f28cf12d2f1c4da55f41c4864a9782c4717378125c3

/data/data/me.pou.app/databases/com.google.android.datatransport.events

MD5 b71c84133d70bffdd47907a3df7e5816
SHA1 3ca4f72e51d45eeef242918076796351a6699ae7
SHA256 ccf23d76f5cf39eea46f9b4c41f1125ab199e3e3715f746dca18a661e5ba1fdc
SHA512 2fe626b5516b1fa0e7328606bbd2ad6147e200ddacd54b1b4d43f7f0790316014ad3250c854c48d3f917a690b959ec277be61cb0e783b78b605406e36ae56914

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5 665c1c9f42e979a2e0bd51513f1d4dd5
SHA1 cdc3be50ed816fa0dab499de182a8505e62d69aa
SHA256 c1a5fe38ec04784f1f8b78cebbb2429040b69a03f04dabc6d2e25b29a8f34492
SHA512 f746da9ffceef13258a40b8c33c056c23e987046071c967cd3d5ba26c5f4ef512d195cdef7a2629a2783a9f51384d5f5ef8d9964935f3c7160931468d2896458

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5 1810000437378c4ae6b91edb074dca02
SHA1 5bb81024f683baad8f876c23519152be4c8f922c
SHA256 d700b55fed2786dfff173fcbfa2f6568d48c6eb955814dbd90a2d98034292b82
SHA512 17fe2210e201d00aebc968a057f9cf2ff4c1410150199f884aaf11b1d65e1da0c2521e40309bb70e8b22164d0688a8d0f8adadf432ef44533b59c379926e6c5a

/data/data/me.pou.app/no_backup/androidx.work.workdb-wal

MD5 ba03aae7d6d9e1f0113d5b749c67f1b5
SHA1 2a9e7a0dd9ad21dc60e54b5ee16f115cea2b1106
SHA256 238a12710e963c692b21a4bc05eb0f8c713e7c3aaf9cd9291d258769617ac2b0
SHA512 6e8af15ac4341e1b49a31c7f8eb775dc0250523e345c76d8497b81d2f840201571892b7c3e39f13a916bbc83e93b6ff446d6f16a58c1d8c29f85e73abf2ed6a6

/storage/emulated/0/Android/data/me.pou.app/cache/soaps/113

MD5 699e6a4bba2a86afc6eb9d974e3c0cda
SHA1 83ff07ac825faae8d7656616a43c4b67d2adc999
SHA256 ceda5a93548764a83d426b30d0bb0a1efab63420968c99e865c375db344cfd38
SHA512 3af522e90ad5c36e3d7f3fa53a007031fa1c98dfc48fe952633f9b80fbb84baf6838edc9e769665c5a58f80fe9336b4c217245def30a8cdad99df6a349937ee8

/storage/emulated/0/Android/data/me.pou.app/cache/showers/103

MD5 fb8a6b109dc4682614328d7a83425657
SHA1 6f1c60a9e7c2fb45f6c605a70500da2ee69eb595
SHA256 c1728c43d0733e5df4a49a4e79b05c4dd11cc555689c210e4b0b71c08dddf2e7
SHA512 99cbe57d862d572f0a0b990623845496510bd5e47cdad17a8cb5b3bef5c17477f915c6df94e7ef4a5022845182a75bd1f8845cc7ba40a1b1879dbe879721ebad

/storage/emulated/0/Android/data/me.pou.app/cache/soaps/113.ch

MD5 1b88e0f5b78e3c19abf71c6777b06c8a
SHA1 f7f3692702d1cacf30b68157a12ff9951b83b9ea
SHA256 60cf10e2f7d1c67bbeacd92c6e84a741f66795b8cea18627cbd3132bd365163f
SHA512 8e20943173ab1255fe619742a89b637eedce28a9457d47d6d73735ded6e077b2a934769295b8e8d192c37348beaa0beff7f3ec7fc5d23006ebce71fb6caeb78e

/storage/emulated/0/Android/data/me.pou.app/cache/bubbles/13

MD5 6cda1df3f664d36ca1ee3fed31e9b739
SHA1 e4594c67e1330bb9ec6bc00544c6a3bc4ac82ae2
SHA256 324636a91903a2ef6d91e46872a33aca1bde6f3e328069d610aacb288dc28634
SHA512 7c4b8ad3a5fb4b3f7f6c07fd3fd3bbc66300fa31fd837c81608ddf9856f6559bef7475290423ddca156e0cf605aea4ebb7e6b8478bdba15e5b9a05d4e86bc84b

/storage/emulated/0/Android/data/me.pou.app/cache/bubbles/13.ch

MD5 c91e21afa527ae0b4afa33981c0f2313
SHA1 33ced643d56c65eb040873d356910ddc0ccaab97
SHA256 735e7538c474982961e7ccd688526c9b5744ca4b66f30a467226dc80a3b49c7a
SHA512 c2e59f5f590fef380b8ad4d0b53fcb277eeba174236030ac60c7263a12e7fd76facfcbe59ec9cb00942da1d9be80bbd1f8bcf9d051ff4b8629386b3a872ff33b

/storage/emulated/0/Android/data/me.pou.app/cache/balls/118

MD5 24c4cf3a6b0399d591795a6d0a91b5bc
SHA1 f72a913a88f585a94704da443c80472da0913bcf
SHA256 af06584f3be258750f35b755661b01f3f1d4d0e8177de0ab819a5ed88e6c077b
SHA512 fe59fa02bf9e5cca0e90b66478540e9a05172f1c4a85097422333531d5ad3439ed79e92dbcf808aa42acc04d853664940e359b546091c3b8010248d97b097884

/storage/emulated/0/Android/data/me.pou.app/cache/showers/103.ch

MD5 52a645835621e86af7986873e5014a0b
SHA1 03a1970411864b51a16572b0c177d4f9bb7aa116
SHA256 0905a2e284b139201f4fecd2bd4dd34decd1002a7ce2c2fecf1522b53e5c1210
SHA512 67c2fed613395885aa6eb6d4824762f04b3373d3479931496a1e39daca4164649020dc9fd1e91946dfa5f120784b823cdfdde1a77609b3f18773dcf4dfa9d719

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l1/18

MD5 ef40b359dc52f1b47f35b4e32104c630
SHA1 3b7b8c87cdc1b9e2aa0ce5420c4adedb4ab844bf
SHA256 a7cc1b4ac22bf48816d43f25f4f586efbf21e41b0fcfc266702350e9fd5cdfe8
SHA512 df8228da7982fe1a7857e4255d3529798611742d99afcbe416c88537f4a81497962ada189652341997b5a02510a9c7c24af919eed8289b9fbfbea33cda959976

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l1/18.ch

MD5 f015845b88839b7f324c10b086399fbf
SHA1 d4451eec791149e9ec400c22fc8bd86ab3a2f3e2
SHA256 9fa074a0d222d1585034c37a4b8fe0b3b35d22be49b2c0dea766bb33d94abc22
SHA512 bb8426c7924c003f7e4dd9cba8de22080251e725656781722114ed5015595b166849ab6264858536a9e4f3bb4db7db1e26a42c94a1087645087f805e0a252dfe

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l2/18

MD5 2151013335dd84eb18ff760ad4599c90
SHA1 320e34ce1e3e1718d788d040ea97b40dab0a4867
SHA256 79a515d4ca2bed27d3d983256c967cb1cdf30b62c6267f18d240e35692da9eed
SHA512 4cf4ee3e964f9e340a70b3aa1eaa3552ebfdf639fc1b25802f646a496df914a3f3456ffc80d39f27e7a4c65af9924da376a05aafa7fa7145ac66280ca3a5e35b

/storage/emulated/0/Android/data/me.pou.app/cache/balls/118.ch

MD5 89227f477aaf801cef0300efc334e914
SHA1 d3dfb4b8eeda6f42732aada5e3cbc1618c7f6519
SHA256 987567deef4a726d5ddefcf5f8e6f79f28a1e7a3417c73b18fa3ce3fc90ecc59
SHA512 d35c1104291389e875cfd5bd73616de0e1ab4503fc063fca202893718596b332906c2da052c08c30f1c8bbfaac7d00158980338520b1886304dedc45b9d92908

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l2/18.ch

MD5 0d771ed479ef7e553602874143a6f5b9
SHA1 802f451e59e58ac8aa2c57049ec3290ee2991817
SHA256 82d852810433ef0409b5f212fcc66cda05e98e3225b15fee4f8b1b6042b2ba60
SHA512 f18fc913074de2593c71e370d6f3faa15e30e7a92c31e676817e63d18aa2eed7e6ce97dd73327589f24a6a0c7e06382984ca52639513276b41e80c3650f6d2e8

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l3/18

MD5 f680d7c4502095e1bdf9049ba050177e
SHA1 3fd0618db5d141edcd79b46bfc028b0056fe2156
SHA256 2f3ef8671c53c4cf53c4e87379c3cf90f5db826ab0e5b4f7140e139e664c9095
SHA512 70d759ea63f9e553489743f58f9a47968c481c21409c3e4fa3b25fb0f320f9d65e927f18185780c8da0031331c5e53452a447539ef8c688d9994b2edf1400f25

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/1818118

MD5 1edd8cb53af6d172ff0838db7a9c5d89
SHA1 a6fe223875cb8166aa2894dfcb0dafc3f251e23f
SHA256 26de06ec02bad7632e43e287e738f1022402448689feaaaffd849318276aa149
SHA512 c2176225d09591d8371b30125d18b23c825a0fa258c1b13a78078811e768f83f1d2b3f080ea685a1332b20877901ccce7882fbc6e63f60810ec4e7b7eb0427e1

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l3/18.ch

MD5 8ce3250c4202ef20199fc69aa1b29f27
SHA1 41ca679d2220ea385098c1676f74a258cd262f98
SHA256 a191fa73d97867f5275d7df0339a147ed2ed9a678f62d619d5f72585b68f6464
SHA512 b5296ec3a80374e4f52ec63212c3a5c3a2b48c030310928977aea7266edb773916413467975a834ad82a8c2a152ef0a7848d862d3c8c8b170dada6d1d54d5e8a

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/1818118.ch

MD5 7c5a9a3eedd9f2d48575326909ef2290
SHA1 fdebffb112ac4ff447664925d24b9c2a9b926916
SHA256 a1bbd290b46176fc3c2be93c466a452779aeda35599a97f28cbef490cd27b047
SHA512 019aab3dd362574e0186b765976cff2d1e060c3f3b0fbceefa64f86d6025c62a90ade5ef32deb853dc2eb09b46a0dd023a08c66c24ecd24f26bbec04bb94f7ab

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_on

MD5 d0bc12dab1847b5b3e1f7ef3095e8874
SHA1 d17343aaca977a1c7a9744392d6c67bfa892307f
SHA256 4bcb144a298f2336dceb5912294af79be9fa2b1ebb504d9e3092b9b3010e3599
SHA512 fc3df5c623c9f3559adeafc51e0199eb2dedc0fc651ce70ea8b49389ac7cc647b223117f179d3cbdbb147900a1ccd73846f89ba3a4318288d763b1227aa40859

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_base

MD5 094c6f05a3e389511609295f57edcb8e
SHA1 60e617f9425840101c17da97f99f41a546660ce2
SHA256 c81526c04f341fede147f7fb658e1e5b9a070cae5a3d6df4c3e4ab55aa4e6ff8
SHA512 3f48980d739ea455d9f4a9225281073985cb8bce5c158803b5d96f222414b1cd363c282925e29b695e562e94428cf85a64e5692b3e2383acf4948924e40e7193

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_on.ch

MD5 8dbe0dec73c1ceec0e0a2796225fc859
SHA1 a0beb5cbd695dc82180bd6dd97ea1b1a3620ada9
SHA256 373c2ba9afb1dde2c45ce317c99095a2edd1890421a03d790f75b9eddf6019ea
SHA512 beafd6d2ebee3e12175c6015fc6f1c4201529748e6a8fb215766bfdb2c3bd3ad63281947ff41919cbb3796cab330dff1e072ebc27e39ef60c381657e3cddcdc8

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_base.ch

MD5 d0511531a009f75a36d3d3c5d1d6ec04
SHA1 625a845594fef154ddbae4483676b9bbb921c3b9
SHA256 19c71d6b0538479068fe80795b0bd03834b7999baba8ba7a8faa6d80cb8b61a4
SHA512 ad22c796cdf14e4ab258893de7aab51875935e737732a4f5924a395d588d1ae37dab1ca90e74f49b1149c2b71b58738d1d1df2ddf7c03113f48b0880b2d8c946

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_off

MD5 19c1a6dd650dd0e5da7d1274b41895c0
SHA1 873a0a936e25b2844dd3af4b6e86676f72f43ce6
SHA256 8328a7731ef341b695dfdfb5ca2f5870a8c892e7281972c886b43cf81f5b99aa
SHA512 259b76c1315603e93a61ce22286138ef637e2bfd7e4950a820c5672e408f8d7e00ffa6ef6f2df7074265f55b161be15f8cb5741edc27563976758b6023579a6b

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_off.ch

MD5 659d04f5dd8a242ecac8e44e59df94cd
SHA1 544971105708916c9c634373d2fcef5407935b99
SHA256 08ed33616a3bb991cf59c9cc7d3a25b7f18efab03c60816242332434eb76354a
SHA512 af0e7a05ce6cebc7c44980e00096db5e6754fa063890feecc3279a876447a800a78f294b8e94d2a21a424046acb360f2e743dd35bcb58ce0d415a1d31ca5db20

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5 3ca3859f45ead14249648cf8fa99e22c
SHA1 89aab598689161019a98e085867fc6c5b058430c
SHA256 398eea7db9fb7a477dd6b1cce8cdd7786529fc77a413f6e1583b6a15e43afabd
SHA512 e2db4ec498509829e698cd421fd177f69ff36b0282da7ddca14c889ac7e940ee3a46c3fc88752b5d5a2cdf8d92a5be9fd005b08ff12ed0a02c641a867679eb6f

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5 d042029775abb5e7214d98cbdd01c21f
SHA1 c4a1fa912e085cb59e865a5f9276523cec4e9aaa
SHA256 3259b19a10a3e9b0be41677e19c3e659d5cfa64dd96700bb7495ccd1d50822bf
SHA512 6cd636d0a8bef76edca8186beb30fee70bef0140a444bd3c16751ca852fb25f9f8bdedf27ae963683fcb02d0d566bc199800104d6a8181c95a86fd5d3a81815e

/storage/emulated/0/Android/data/me.pou.app/cache/fyb.vamp.vid.cache/journal.tmp

MD5 8c8bcb7d36cb5a71729c00c4e7f2d330
SHA1 a352667c61dc45f43cae74a7102fa692fba98d3e
SHA256 fddce724f39edc9ae1df4f8920e512cfd0fe3a9017b32031f1ca0e9ec06a1150
SHA512 4589f9c835a12ddaa04617822b93aba809aa85b392dc8596d47368a31648c542a0eb96643ca3a8d21d31aa1a790580a3258afdc3d202d31c5a324a4b591ccb62

/data/data/me.pou.app/no_backup/settings_vungle

MD5 db204687bdc4f7bd81811e34a8a47e21
SHA1 d08c3f08973d88b113c49d78ef36aa2a9428005b
SHA256 71072937192e9b9593810cfd2765c6aa3a7a212d605558f456ba2726e5599877
SHA512 080d678a563d36ff436a5a32ca317012cc7ad3f328bad46af468d8737d61e63ed4d0b78d071e8ffb40443f02dc511e351c869db1baa64ac0e9660b7582faea6f

/data/data/me.pou.app/no_backup/settings_vungle

MD5 76893789e22f40eacb88bf7c6443510f
SHA1 b919d081b28686c900ab71ef457a84044b1418bb
SHA256 09a38c629758b13d853b1c9c77b7c53a40000e1c7eb5210366ddea12cc56e767
SHA512 1e49886a76d8289f9d25ba4ecb50feb28d7b3c3227eae03e19a53b2eb7f989a61a4964d4e52801c589547a4c772f5280641ca64eef09e267058fb1abd8be4e68

/data/data/me.pou.app/files/ia-global.config

MD5 e64a19390d25a23138d690208a413d19
SHA1 679597d6d751688f3007893cd6ce26c46311874d
SHA256 f6d4c62a65670989f51a9a79c1f128fc621a7c881c61ac48788a95e8a66dbb92
SHA512 bb4ee25474ca8589bf668c6b3a4e9b018f5991b0df89014ec067da8f6181872851b77157380f18ce0e30bd00d40bee983a54525980a32f5bd9cbe7a5eb6ff965

/data/data/me.pou.app/files/inneractive.config

MD5 923a9c0f8347e249c11ee278b50fca39
SHA1 c0b391b4f2d139f6465c8f695a7bfe84a80ca077
SHA256 6ba1ffdea315f0c898c62d50ac0eb8e9cd65b23708aac18d440f8f98ed415f02
SHA512 ab214f9a0df187f821a85663f7e400f87a4331a4730907b9cbda939137fad770c7b0b959f6519c0dddf2591b596c549e0f7b842e7ab4a89e1b2296ce128c7d3f

/data/data/me.pou.app/files/centering_v1.js

MD5 1a6fc162ef74bbb81000ce9f3deb09f5
SHA1 87fae4a5adf526ad381e74314bb6c9a33acd19b1
SHA256 12415e46d50468c0dba50c1248fb2e3ddeacb0c3b579e4cbd8653c92cc7ab008
SHA512 9338186d34073b0979b33bc75f07677742a353685bbd8ed7d053229cbf94ebd0ca9c3b8714419aeed805dffceedf9f23a8cd17a9b0cc6ebdacf06b17676da29b

/data/data/me.pou.app/files/ia-remote.config

MD5 4bb6e0ddd7c44914f9ab6c6147c4518f
SHA1 61e1be8d81f73a85247d63148ecd2729c1408e9f
SHA256 3da2a166a35b790de49c5cc0acf7ee9502f85d9d30b1404f37f5bee036895ced
SHA512 e49ec58ea4089378d360c9585de6b9c955d5f079e4ba7cb7cab0995ec36c4afb891ebb2fdc3c2c9548f53b2f5b41b619cc928985a94d00d75193b579b152299c

/data/data/me.pou.app/cache/1689111357674.jar

MD5 189d24556179c74f72678b58e01308c1
SHA1 d4ed4dc1b0fb6741c6c9434348b159dbea92e0b4
SHA256 236eb17c5c14261b62630ebdc5830f4a97d3cf0dbc7bd1de98dfd17d55474353
SHA512 27dc7bd75c982173c58d3a02e793616dd6364bbc3d593d1453c5c1cb5dc0ef560b5931a7736ae12c69486fb170ee723bf124747d1b2727a4026281dccbdae9e2

/data/data/me.pou.app/files/centering_v1.css

MD5 86bc728fbe3c2cda67077af62fccb1cc
SHA1 75ba28bf1573c17236706e3cfdcff49dc56047e5
SHA256 a4e4515a4b5e7e7f9c22f3fd21bbf3a95db9442d219190c81b703afd3c6d95a9
SHA512 7d7f37731b35c1caad17d0bb21f9f5805c567ad9cf5f1312f21949726bbbf175515d984dc3ced6fc5000e42191b15eadc862135244debcb05524a239e6b35816

/data/user/0/me.pou.app/cache/1689111357674.jar

MD5 2800ad09ca14a7a986a6e8becbbbb158
SHA1 cff8d824d09296149af1f7f7ad12ebb701f4b8c5
SHA256 5b3ace2783fb2b21f30cd4e20a8645e6bd6d59347c44cbfd11141b0d9afcb33e
SHA512 c315532db47e93c406308f997b1f81876dc4394838b64f93b3afce0748f1cd1c5b5e490856e5c7be0fc7aef063c0f4dcef73de0cc1a712eebc4f80a443cea7d3

/data/data/me.pou.app/files/dt-mraid-video-controller.js

MD5 a5f21f07a7924ea7a982f749c99651d9
SHA1 f38c1ebc4faa66e6b54825d6c3aa0143b9b9b286
SHA256 c9ec744882d29487c3149856a365d5f8aac057347cb1153a25b48bc8435e1fb9
SHA512 c3e429c5c0440748a1efa46276cc5d1f32fa05b91db1d46d742aec98e6470b872c469b612a7d6c2a293f69308d7456c9118f5e960521df27d081952f240dad10

/data/data/me.pou.app/no_backup/settings_vungle

MD5 e48e278696c264000b1de6e50e69b2a1
SHA1 a524457feb6cbfa0c7fadad163f30eadbe5bd149
SHA256 6020b3ab2484ccf43fb11321afa92e820bbbfb346f1e92e9c983e30dbedbe3a1
SHA512 0df50c22fa9aee56f57441303a89b1c8a927d817e46ab2fc3f84910c7396aab245c77d64809f1637bf5a1817e8f682b1475b104e39793af65f1fc8485875fa18

/data/data/me.pou.app/no_backup/settings_vungle

MD5 f4273e79959d516c9c05e9b292c37d5f
SHA1 a183fbfa93006a71f0545cb17a0a900418a1ffeb
SHA256 bebd547e4c3dc2976a8f3eb80df1c2d99d4a6ee36f01e2210cc1d87bdb74c42c
SHA512 bf73a806cc1553cde4fa0a73793b42df7d303a43a97ff9f1884a7e086070cc4005269b3b8a85d7db63cec4641ad1b5f2b63945ccb9d6db16657a9c546b4ca3b7

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/me.pou.app/no_backup/settings_vungle

MD5 76c90d2387fbb3cd82b9f7684a1e320b
SHA1 6d9a96f99341cb66c812960d5570949196207c78
SHA256 5ab98d4971889d04447abddb8153d728a36355076b543179e05d98b11a10f758
SHA512 9334328f5d171947e06d930859c3e1ff2c420efd0adebe0704ba0b835cd989e903693b935edd55758f74f3d64465fbf1f73c177cab2a6449982d0d7fafc26850

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/journal

MD5 3c5caa8f8745c75d24ff12033779ec62
SHA1 f4ad6ac09d91b50e47ce5317302080fe6357d44c
SHA256 c29ee0e65ec1e27741b7df7bf9175a2e57964821949c50b25aca894a3870e25d
SHA512 6a7d707a5f3e4cbfd56835c44f3048e740025a06fa70c7731a4f36f3c7dd1e0e964b7c4cc684fad2f4d3f5b10ccd492134561107fe058bea4dc3bfb461d02cf6

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/6edf839634bfd370057dcd99c1fb266c.0.tmp

MD5 fb02997b8f8f722cd0bcb74045d0d57c
SHA1 e576111beed1872625d76feedad28f0b0dba3aec
SHA256 943ec2e56071af18cfbca7df55eb86232325f6e29ae08546606e3287a106f4d3
SHA512 877d8c926d3f0a75ae36db044d23b2ab5637b5c58588907f5aa6895d398529a82aa325a86d574e2d43736f6dc688a0c07eb40a82812a1999643c69e2a1ac6c25

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/6edf839634bfd370057dcd99c1fb266c.1.tmp

MD5 16611f68d602c081f6a4751bdffbb7af
SHA1 94e86159d355d850bf5f839c7097790dc56e40c5
SHA256 811e3fb666ff12a09ddcec8a11a210b56e6e77d3fd0bfcc3251924b99df86d1c
SHA512 de4133f93bc691c0ba16d0ae64d45610a32d04f586a467c93af7ff6a54df69331a00df057e6408b5a7ff8d2daeb5ae0804657733fb503d320aeddb6feef45f03