Analysis

  • max time kernel
    179s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 11:42

General

  • Target

    Dooneh.apk

  • Size

    13.5MB

  • MD5

    36c300197182e64d87440159098f71ce

  • SHA1

    9f5cc990ff32291c76824e3f5fb44cca60164ae4

  • SHA256

    44388e1ea127dca2b4400fda9f5a30e17dc4862ff142c7492f0bb9b7f793215e

  • SHA512

    b3498d50cd098fb4c15364803c155853f58512a08615d26bc3cafbcc31a4ae808999bff2351dea76e95270ed4f9de936dea34bea6e53de00fe2f0d056ead6d9f

  • SSDEEP

    393216:cEJdST96fM8Mcd0Z970eW2vkSGhu1YXOK3InCl1TPQpDgiKrk:bJUTEfL6ZN0ZSwBXh3IKRsEQ

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 7 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.dooneh
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Schedules tasks to execute at a specified time
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4253
  • com.dooneh:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4327

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dooneh/cache/sentry/3fe3baeb-b3cc-4cba-8a0e-68df03712c4f.envelope
    Filesize

    582B

    MD5

    a43c58ebc2db63b1fe5a11fcba93b274

    SHA1

    59e2ee1d87ef644e44d5d86c9da3d6cb10ba2750

    SHA256

    e1128ba46ee8cfb5f8ce8da2212a9109bc518b181abf447871c906cae63798e0

    SHA512

    1400180a9736d70363c7ca699720745818aab7fa638eb654520459656a800af37779bdfce8be927e72f99dedbff54f9d75349e0da6d1f598741aa802d39cfec6

  • /data/data/com.dooneh/cache/sentry/session.json
    Filesize

    264B

    MD5

    a60083e7ff347876696d3a3792353b84

    SHA1

    dc8256b0f335798bada80447985e95065f868b78

    SHA256

    1c342f48540334cec54aad77365bf7a30bc099afe58cedc90c078738ca419b93

    SHA512

    6f13d83b49ea5359dfdbf7a31e4444d20344124aa024e7794cee2f0268ae1dc079a1bc4d91a4a1e24f963eb26255d08124295be484911fbde01bcbd27334a0e2

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/DIQAAAAAMAAAAABAYAROFA2CAIAAAABAAAAAAAAAAAAAAVAAAAAAAAQAAAABAMQC.temp
    Filesize

    1KB

    MD5

    f4d9ff5730337d707ce78a8dde0d7340

    SHA1

    3b0226644a98fa4b1b57e8216c99b4efbd571187

    SHA256

    811b3778a5971dd245451f639055f6d594e2af1e157f2c6c0e07a7817c33ceb2

    SHA512

    fde9233a13338cd59bc3bb8afe0d6b98d84d3892df469b7b5dc570cf200396c3cfcb5d32458ae0bf7f67ecbc6c0833781f499498ae80e7b5b1a3906ec454101d

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/FUAQAAAAAAAAAAABAAAAAAYAAAAACFQRD4KBEAAAAAAACAAAAAAAAAAAUABAAAAACAAAAAEASAIQA.temp
    Filesize

    1KB

    MD5

    4fee2754779a9a09c60a6263c9a9f4a6

    SHA1

    dd82f18a18d052a94d094d2a02700123d6044a78

    SHA256

    7199f83084f82e354d10fb761cac1ce915d6e7d0d42183981cd86068dbdc00bb

    SHA512

    a895e66bd6d2af9f382b87dbe5f7cc39179a7170d33a136fa97c85288741b04486d0c231b87974752a74906c57d6349366b45fa3dffea7bee5c4a444458ce6d9

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/FUBQAAAAAAAAAAABAAAAAAYAAAAACFQRD4KBEAAAAAAACAAAAAAAAAAAUABAAAAACAAAAAEASAIQA.temp
    Filesize

    1KB

    MD5

    0a59d26bc3965777d507068a08c6f118

    SHA1

    74bb2d04e8505a2b87a6c07ff117f4be69613fc2

    SHA256

    8974e20fad80a5f3dd81e916d7cc5df22c48c239f5f057d0ddf06b3892175bb6

    SHA512

    8eb62224d9165f2c0bc12fc668370e010c3f920514c469368a3a6ecdac48ae36d5c0ee2f39a4fad0566b4c6f431b58077c9a8aeed14a4a5e91a1e6128a43a89a

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/GFQQAAAAMAAGGADDACRQAAAAMAACHQDCABRQAI7CAMAAAAAAKQAAAAAAAIAAAAAQGIBAAAA.temp
    Filesize

    4KB

    MD5

    17fbc0fac4910b5b6af3b4f3fbbc3867

    SHA1

    3eb8c85aae1e34cac7b291b6cbe94761604fac65

    SHA256

    195e614024a9e3dd0f04be04ef716541b8e2ef800951a5d6cc1704cbda9aabf2

    SHA512

    726d1486e25ddbbd3d59736ef84a60bb6c1f4e2b077325a6497adcf0520192445c9d5f44293f4fec2e837c158dadbb32285af400a1d6421f296331feb7fef209

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/IGIAAAAAAIAAAAABCYBR6AAAAAAAAAAAACQAEAAAAAIAAAAAQCIBCAAAAA.temp
    Filesize

    1KB

    MD5

    847224c5656a346064986af3867225ae

    SHA1

    2664a76a11e071381be2716cf8d0e41330ceca68

    SHA256

    bb5e8a122191a1c3b698491de865b929ad7d5d75bc04464bd0738ec1334f9658

    SHA512

    57100c5939f5d364f15f98302c499f254fb5c53829da9dc027aea8aa7fdaa827c98c15dd3c0f3e09301eedc30eeaccde25dadb7bf2c1cec937ee4090054b1212

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/K4JAAAAAAAGAAAAAAIWP577774BSZ7X7777QCAAAAABAAAAAABBAMACAAUAAAABAAAAAAABBEMAAA.temp
    Filesize

    940B

    MD5

    605c4b8adaeabe0a72ec4d2d7d0e7ea7

    SHA1

    c802f038b72a4736561342e81773a513bdb90d86

    SHA256

    3aeb5ae934e20973fbe4771e58e0559afc479401b6b692deab799ff5759fe6fc

    SHA512

    1ccadbdae0a85f54997a973da204b9cc333c64ca61e6640b9eb30a80a20d34eabcc34788f42f761984f9b0cae932835030c0cde0d057b81a87d722f194f4ed67

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/K4QACAAAAAGAAAAAAIWP57ZDH37P7777777QCAAAAAAAAAAAIACQAAAAEAAAAAAAEERQAAA.temp
    Filesize

    772B

    MD5

    f33a0343730ae1ea70b1b49057a24866

    SHA1

    a11bbc5f6f80f8ae4f68f828a8620a1bf0b696d9

    SHA256

    78224a13b2364551cf16e21bd8aac3d431187ff5bb99bf93b6c0a89f8bd5ed0c

    SHA512

    d3b79c6c9649ff2007143d6fbd31d45c300e8edbeb611cd2dd414a8862c78fbc9bd024f024653b19109cc8746079e2373af8c53e5e018eb05408b8589912d4cd

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/K5IAAAAAAAMAAAAAARMPZ72HPQCFR7H7777QGAAAAAAAAAAAIRDQAAAEAAAAAMARAAAAAAAAAAAAAAAAFIAAAAAAAEAAAAAIDEAQAAA.temp
    Filesize

    1KB

    MD5

    9aa4d88217f41c84839c710c6e52224d

    SHA1

    7f468dc123485359f2c40e4d2763ac175300b9ad

    SHA256

    93ae4ed981316c462ebcd303a487add0b3e22b096e32ff7938cfdaf5eeec4d91

    SHA512

    e3d6b76743dd64063c82a4bf8453218101ac45096ed2c2f45f39c4b6ecbcfc8280a7ac0fe3df4980fcc3afd4b1d3ac15199c9712e9f87f3366e907e0023a2fc4

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/K5IAAAAAAAMAAAAAARMPZ72HPQCFR7H7777QGAAAAAAAAAAAJBDQAAAEAAAAAMARAAAAAAAAAAAAAAEABMUQAAAAACAAUAAAABAAAAAAABBEMAAAAAAA.temp
    Filesize

    1KB

    MD5

    bf2cbff34900818f09fb4e64712ce1d7

    SHA1

    7a8509ea8865254edbd588ea71fd265e10707727

    SHA256

    001003fd4f1f77b4df5e2f63f10ddece3ff305a2dbfe54854a29559afb6875db

    SHA512

    664e25b053a63e841900b5312972c32881d534d4c3d1d05b4941a2ac776b78872caa42b7fd4bfd507eb645864c6422e57aaafbe0d88837049383722943d40e67

  • /data/data/com.dooneh/code_cache/flutter_engine/241c87ad800beeab545ab867354d4683d5bfb6ce/skia/2f5a91c531de1d00ee7d0f7f8f230abc4f46f867/KYMAAAAABCYIR6AYYAAAAAAAAAAAAAAACUAAAAEAAAAAAAEERQAA.temp
    Filesize

    1KB

    MD5

    1db03099f6b5ee55ff853699c6f371e6

    SHA1

    b4af5ef13a55d056a2137ce48143ed41a634ad48

    SHA256

    5ebecfe108dd16123b7eea9c7e224fa05be7e875bcfd20ed5acc9cc2ad524439

    SHA512

    796085fd0558bf3f71eb8ee459510e0551b4271c35f004134e06d1a1dabbf458f5d2525307dc121a84b66cc0299945d3bf6820ae45a92583426cb4c685b02cca

  • /data/data/com.dooneh/databases/com.amplitude.api_doonehtest
    Filesize

    40KB

    MD5

    55cfc645bbff94d3bd68fd9002f74615

    SHA1

    e0b2a049d178c6f3837c43da6c0accdd2cb662db

    SHA256

    3f1d79542d39399f078104b3e4c13385e0cea4a22c4f89277822c3e1a7fc1ea7

    SHA512

    fab7af03f88c5bfadcba0bc930a6a2891082957bfd403fa9c92eb7155c6c6b005e6a44741398f363a88264a72c065ac8aaeb1fb81c0556a16f7bd8c291074508

  • /data/data/com.dooneh/databases/com.amplitude.api_doonehtest
    Filesize

    20KB

    MD5

    18ea38daa7168b3c491a2908c3864916

    SHA1

    e7220e02518cb82cb4d73f69acf01c22e83526a3

    SHA256

    a92b8f040cc9aaedac76573671de30cbede48dea8002f4b528178b99358048ac

    SHA512

    873ee039c22fd868cdbbd905d335a487c7cc1be96f0efa227b817f082abc892c7d6b3721301f7c3882c6113fcb36fdc8d8fc792ac002fe05283531211a4b9429

  • /data/data/com.dooneh/databases/com.amplitude.api_doonehtest-journal
    Filesize

    512B

    MD5

    aa4226090bdec850e4fc3fac2fdcc602

    SHA1

    8eb000e4e01ea208b064582d363e787c9677a937

    SHA256

    5197d4278cace6803946c0008b9d7b8e01b6e6cfccf5cbd181a1569f222cfcaf

    SHA512

    b298bece5104fb0006b89a21ff3ad13d1109e1bec31f56cb2f63c33e79270a4868fdcf5e4e70e583ce27bdc582696b64a2293f4beb01dcc2629535e64915e1fa

  • /data/data/com.dooneh/databases/com.amplitude.api_doonehtest-wal
    Filesize

    52KB

    MD5

    5185b0135d2a259ed3808437018444ae

    SHA1

    7a719e4b2ec855807c2f555507d018e52e62b8fb

    SHA256

    742364feebf1ee0b6545560c606c3b35d9ce4469956091acd51aac5a45b01161

    SHA512

    9eb6cc927b3352498797209e0c4b457eb8488c969622de731cc8efa1cd518821e51b4dd0f9f9b64bd461ed331d6af0fc7899902dbc175be69d838e14af526949

  • /data/data/com.dooneh/databases/com.amplitude.api_doonehtest-wal
    Filesize

    8KB

    MD5

    48820e9c9b14c51cfb19f6421b84c0e1

    SHA1

    7a055c6814b4e47a99b00b39e083a9647d15b88f

    SHA256

    d0b7bad13ccfdcdc55c099d520053ce6a760280a563e9c69f5dc02e941b320ca

    SHA512

    17e6f2b93c66cf1cfe7d929de8080635ce53bfb102fdc0445fedfef7028f05f4692ffcad8854e1d3828030682c1e175a80d6d430a159f2487e656709c06119e1

  • /data/data/com.dooneh/databases/com.google.android.datatransport.events
    Filesize

    4KB

    MD5

    7f4f4b7701c3272a4bfc9fe661c72250

    SHA1

    2c140f2b2169e393f0fc41cf0b3cd264cc1207a0

    SHA256

    3d8779efc6c90b32ac5a7c756b95eb5f627bbd930ef6126e0dcd0e938aa6539a

    SHA512

    9e7154a2d3cf74b10734b8026a7cb5b049d44f00fa55364549f5f0a5a0aa17a0462bd5caa9c959c092100199937494ebb7a428c4b816ee41d80c7d56babf7c4d

  • /data/data/com.dooneh/databases/com.google.android.datatransport.events-journal
    Filesize

    402KB

    MD5

    39ba744bae29ede5831454ef48ed13f4

    SHA1

    48a8025727f444ebb3be2cdf913fe105727b38ef

    SHA256

    eb0bf85d9c6215132cb8b85c66fe90b3ccc3c86e8ecc83513bbc23a8a10028fd

    SHA512

    7bb556db7d7f0ddf6aebaee934fa5e3c5fd16a8ffc6dd70334cd76953e2d4c4fdf3d8bb432221ff09fc4f30372a100a670301b8798ab3f9747abaaea39543a57

  • /data/data/com.dooneh/databases/com.google.android.datatransport.events-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.dooneh/databases/com.google.android.datatransport.events-wal
    Filesize

    52KB

    MD5

    dbd54372c195b82cf180fea745e701d2

    SHA1

    522654604dfc9b53aa39c35a80779b25f1109ed6

    SHA256

    f689448fb4acb0b016d688925c00f7733307a2c6087bb623ccbc2722c194cd92

    SHA512

    665c08363de8965f1c5a3fad7c0028e8288c346462fb0fe4f33f5c9fe058b81b47a6f8f59ca9723498f9de5f9c8d3ce2619e7b7ba3978823d8f56dabab549bee

  • /data/data/com.dooneh/databases/flutter_database.db-journal
    Filesize

    512B

    MD5

    d89c2ec1601d37809a97cf41aac453bb

    SHA1

    7d19055362d616f30d127c642cfdf37f1575ea2c

    SHA256

    1aa288195294681982c36de41ed79a86f64bbc21959b8d561dd8c39e064ef9ce

    SHA512

    2c56bf8c668c61402d7909429586d0771d9690b673edc98802c586962c03a2ddf3f076805b07dc1009451dc6b6d1338c394fc2efdd4fdf9126ad54f379ff8146

  • /data/data/com.dooneh/databases/flutter_database.db-wal
    Filesize

    40KB

    MD5

    73718744caf263849e49cb01fb0d9faa

    SHA1

    c17c4d6eaf7f0bf66525ef542fc55fc37b7dac7c

    SHA256

    58d4190ae7d83c25c49d010ff81b2df409a9dfa817a727944a576944ca013ca6

    SHA512

    68f77fc98429da05c2b5942a27ab26282baaf8c53956146fe3bedb5a7ac48d1cb5fd250f358fa77721665596df4a949ab681cd31bd293ab9c7b9d3613aa1dde1

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    5b28371265698dce63600f3ff292e9fe

    SHA1

    440bc17e300b8c12f49218b6dccaf902f5b02f34

    SHA256

    4607e564194052c9e168d3d4298b71e10d707f3017001943e3d474c88269efef

    SHA512

    cbbace0218ba2d54bada7c998c584c6853764326b167777eaf15c5cf0f5840d0d1fd997baeb24906faabf8bf54c2b53d14242bc00e40526489f599a8babea59f

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    c26b6c3e33a31133808a864e864b47cd

    SHA1

    a9ea56d10bda4f4c86db3f5bf71df8e429777a78

    SHA256

    a1e5013fc81f66dde43d567d0c4e38e401fa5e42ae6610b8ce6396400da008f5

    SHA512

    0ff7ac4bb92347178ef288928b095ff9f728afe535d39c7a8fdb584009bb5470e0c0353016a8020166999fc5669a9797170afd05c8a0c48e93a7615c56b2d42e

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    5bc1a4ca14653cc9c88fc3709d5d70da

    SHA1

    9885575486bb544fbfbfdebcd659fa5c38e43390

    SHA256

    e422e1bd4d851b2c32ec55a03fa9b9ffaf53595718432ed301c4995e72baa27b

    SHA512

    ede2467664ebf836efc481f911b5b3661df1c2aa176aacfe0d54a34edd58b71745c718a9ee6bfff24979c4f602a0e79e0def577987f1387b073ff0513b334366

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    2ddcdab926e8427a24f0cce61db2462f

    SHA1

    8fcaa5d8fe420eca36c2119d50a4dae035a2d825

    SHA256

    2e5672c4e0745d74375e984c8b6da862112dc66911eea1a5dbf479252f459cd3

    SHA512

    72df8c673b1c826cc6b6a25a5c62278a3c01e0bece41c22a24a9cdeb68e7af94278dc7a99c380d605efa6dea4edda99d17be0da64e1cdb7610cd620155c6602b

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    130475242219f28c5625194e114a6d38

    SHA1

    b007a2a31f2483695cdd9df20d6f580610e30220

    SHA256

    9b51d708af93accfd6a8db86796a1746132cecf7dca1918c1ac312a408f71a63

    SHA512

    d56e0b91e6b56925ef6e71208286c29bd821314958b80770c0a3ef7d6b72abc36961ab889d92bb4bf299ef1b61e47ea4fccbdca6f3fdb57042d3069f3bb32fcd

  • /data/data/com.dooneh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    3bbc448e82203584c268f81850f31334

    SHA1

    fa82d7727bb83ed350bef5b1ea2c42c23dbfb7ba

    SHA256

    6ddcab41db0fafd4adfd9bcec13ce64dd9ed8b0d77c1cdeb238435bd70c7ced3

    SHA512

    b6d63a12e76de8881eca3541165d74093fe30972a40783f4b09aff2b97b1d88b5f7b69df8d3ca411c633cad8758f1dbe0b15597e03652902aa3f2ea1a9eefdea

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    c65a32bad1e5cd529e05f1a5f93d4c00

    SHA1

    f221bdd8870a4305d843937d691837707d8bcfa5

    SHA256

    3a8a0cf4f82119022257d1195912a048e8fc3bef438f9afc13bfa653165a69b2

    SHA512

    b3efceade42025c489c785f5c38c00d27c8298f5a7e4b1df76088e64eeedae746b7853c679e87c224d8b084c0e02d289224ae4bfcc516caa7267e5936ad427f0

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    771864a5b89066e50238dbecdbdcfb37

    SHA1

    bead58a87435e3f4d63545f17d75f8037bb9c232

    SHA256

    297775c47c739f48ccfdcb05be2311263a92f7ec583023e62bbf06fa21eb108f

    SHA512

    57bec0127e05251421a1e06346a54b52d8b7858dafc949fc121121e60ff51bc5fce793426a5887d1398136aa06a5bef96d6a9b00651739e2de10bb6a87067f5a

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    808f43c0d202d5243afa698da567379f

    SHA1

    85be9833963a7ca1ba27d3b94c2800ff5615ccf5

    SHA256

    de5cafe368bc8ae8dfafc2239d2de10abb28fe36fa8701dddddf14c2a6fdd40f

    SHA512

    fccdccbfed3c61c1cdbd5400a99ab606587327fb722ae906d3004ccd88cf049fd3d236a52c572fc4756ec1c27c71fac7bd83b9bc7012c8d6aea67ecd70cefcc1

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    7615d42cc47e35baebdbe0a7c80099f2

    SHA1

    13be7984209649e561fe4582b8176e22feced5a8

    SHA256

    c39ebc159a5e210a88dbca1010157ddf3bb8ee1361e441f10240849469685bc5

    SHA512

    81dd6ac44b1b689a2801bc1f9a829a2b26d9842cf12fbedd1f1ccc2dd829612e2b403ebbf508e8b97103ea22ee8ea55a05f1969cb334ceb3f17ac04f6052883f

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    001931dbcebc6ffe9edf9ebe37523066

    SHA1

    89876adb69740095e9f90e2564045356d0fc537c

    SHA256

    a2cb9eff070abf7632116fc1c9a956943dbd124ffadf9ea775a9f70157c0577a

    SHA512

    3570a2aa481aed91c9c189c2ec8630531928380edc5b983c08eeaec194019aea0886806a0522d4aabc8f1004800552c9f6d6832bb636d2fe2fdde2b305ac85b8

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    a7438dee83928433e2b793f0aa08c741

    SHA1

    7c013d67a9f9ad4eebe44f814c2c3e7f7aa20e1a

    SHA256

    45dff8a6a71b551c2af6954f781d90dea24d4aa1cd93ed07b525407e75e04255

    SHA512

    7f8a5eecf48a2aec5f959b74be739b9e611ac72aabf3ddadd2554b5ae81795da305c51145d912f683b391baa2e11500b18eeb77d5c3e63c499bf5bca1817dcb8

  • /data/data/com.dooneh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    aa5472cdd9098f4454d4e6d920fb6a17

    SHA1

    156455059fd0e24019d8d33b7fe46cd992f8263a

    SHA256

    686939144be59623309521634e207429be3b65b3974ed748d554e46e59e97f71

    SHA512

    a9f9079c13d7bec3258c8e5c32ec7d72c858f78a8bc39ef8cff4bc670a9bec76844cacd97f62e3dbe6ef7dd0c51d9b60c89d49f1468991d90b739de258a19199

  • /data/data/com.dooneh/databases/ir.metrix.sdk
    Filesize

    32KB

    MD5

    1c4274aa7a9a5cac8c6d1df71e4588c6

    SHA1

    abaecd685e01cc68801292e3dc7085654a22feba

    SHA256

    3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

    SHA512

    1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

  • /data/data/com.dooneh/databases/ir.metrix.sdk-journal
    Filesize

    20KB

    MD5

    e6ced3480054401f1b991a49d424e56e

    SHA1

    c54eb734dbd65c5017da6fdad5fcd88ef5032ee1

    SHA256

    2717a7fa5e87402c195f4cf64d61f721ead1b0d9248efe0a8c884e426b25c9e8

    SHA512

    aa5adc01d8da3cb94b2d94bebbcd6d958da3811ce03fbfb871e4eb2ccde3dc837dab9f24aaaa15357a59ea23c2e86583d23d98ae19683db7f2a19678e5321d1e

  • /data/data/com.dooneh/databases/ir.metrix.sdk-shm
    Filesize

    32KB

    MD5

    73a66e1c840534e34782e8da8e1b3978

    SHA1

    de6d867e8f9c407e19dc2b1e3a06f85fa1e4ae37

    SHA256

    8232b223c3d83f21dae9855bc8908600a43867d3ff4406c7d0ded2695137bae4

    SHA512

    f47a33e00759fe475958d6dcf88bc9fdc7b67dfeb028bf73fdef36eca625fc64e9610b3126d284a7ec890da6fdb638cbfb95b812d407cc4c5cfb860f7e040323

  • /data/data/com.dooneh/databases/ir.metrix.sdk-wal
    Filesize

    32KB

    MD5

    fc1392a4bcb7e723deb9e9aeeb99f5ac

    SHA1

    46c1e3aa299b7777c917745dd94a3b133e87c7ab

    SHA256

    7a209c5fe8b1c30951a3b71cea0093edadfd65823461d0b6abf7d848b00e1d4d

    SHA512

    0b1d9be66da528b1f918f9c33c717ad58c49b7a67875a70c08d4f283652d7476b76b82bd65fbfac021d88c7e516c0cbf7be78991ef3ab8cb08435ffcbdc9d969

  • /data/data/com.dooneh/files/INSTALLATION
    Filesize

    36B

    MD5

    0fdf2414755083e73eb8c253054c6bac

    SHA1

    35956057c077f243cca55f6c6de463e7329212cd

    SHA256

    84c8c5dc852130630ddd353f4d5766ef34613d36442a145ccb5e2cc128194e09

    SHA512

    fb6b47eeb615a3ac5d76e7f1dd954aca5e237ccbd04dbea707135f2d9aa74c1722d023b28eafc56016b580c8a84e597756f9f07056efbb6db47d9e5a05886e6d

  • /data/data/com.dooneh/files/PersistedInstallation230935193355673009tmp
    Filesize

    225KB

    MD5

    68db85cbd21aaf5fa3fce17cadf78e25

    SHA1

    15a323b7cc3bc806e540afb9a6c2d434b8b3ce38

    SHA256

    dd2631aebc220cdfdcc01a1567aeda77120e0a288aa529ca930214b1e69f69dd

    SHA512

    c26bf25a0b6ed657cd33d6589ef35c5dfecf9d4e1eb452ea0e50e9052742d73ec3f25541f75de61fcd20db983d52183707256b6d8312c0b9d8aa4a2c03b80281

  • /data/data/com.dooneh/files/PersistedInstallation3592598946927193397tmp
    Filesize

    8KB

    MD5

    f9f6823c09ffad131b9ee7c37279522b

    SHA1

    4c4b121d01d7f5eaac48745ff86b194253dbdb81

    SHA256

    74118cab9a8a31030cedc05ad8cd9b6c2c29cb1bf289e0474e20e99442d6aa3b

    SHA512

    2157d20c580e5b9cd1ce9f08623242107445f14e5a0cb50f42926a3f35df6eccff63c4bbeb70d56bf70d9088d70f6d8e91f36333e217be5d1ec0232413813cc5

  • /data/data/com.dooneh/no_backup/androidx.work.workdb
    Filesize

    36KB

    MD5

    9915505773fbc044374c8b1166bf06b1

    SHA1

    414cf40f2780bdf895c964da5a0bdcb5ed86337d

    SHA256

    c2dbd95be690a3cdc4987a576d60f706bba6ff8ba30162baf525175405325d5a

    SHA512

    0e63f9d78053e237a6d4e3fc63ac72d19a7b64c37d427537e3062d5ba14e0c0997b6f486c5dd38cacefe108827a80a93f386baa489bab0c1902bfb0513e2efe0

  • /data/data/com.dooneh/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    ac30110205858f63902d7b90f63466d9

    SHA1

    35ed3141c7dcb6e7c6103fd2a011b0fb97d29698

    SHA256

    70b3fcd1c8871283d00cbd03e29a6bb2f7281bda26855dc9e0a62a7c85a4b939

    SHA512

    9db2433ef4932d5e03dcba9ae90fb3b524153b6c0428b4cfab47637e8c9b7d566650f37d946614a97b0f15ee4a59cd9b4ebcafc346b1506fce551ce517b62ef4

  • /data/data/com.dooneh/no_backup/androidx.work.workdb-wal
    Filesize

    402KB

    MD5

    eddd31532a5ff0240ca92ad9c55aacd0

    SHA1

    5fb626d8aab44eb9405f42d8df86fb8e90ab164d

    SHA256

    1d11d603112867b1f25782b25311d12bdb7b94f1896ea71c41295cda38343015

    SHA512

    06514ca2b2d3fd73366bb508f47ebbb394ebed45b39ac610edd6df8a2e5817a9e1d61973a7db4f49de0548c1da24f8b4e3b520b831a4727c5eb1050f7a5b4d5e

  • /data/data/com.dooneh/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    b40445cbf599dc250833bc6e78ae542f

    SHA1

    91011eee23323a058117f95885871838ceefa7f0

    SHA256

    5bb90653d111c8da4c0e4154f3fd74379159df5090a29129e40315bacb324468

    SHA512

    12430ada53e48653969bd4a90a903831f81b30b62ed25c317262e8b73291684c9894b7c57e04d1479df0813e34b2768ef6d3bb6a3e2b69740b5f788fdf453363

  • /data/data/com.dooneh/no_backup/androidx.work.workdb-wal
    Filesize

    189KB

    MD5

    19b8079d78d04f37d406fa0f941c55cf

    SHA1

    e721b7f32ce63747bf378b57ad294b1c4aca946a

    SHA256

    93428d763dbe3d2ce679c57db9e9ff548e389840a5b69d685ece16cfc64a3010

    SHA512

    bdd4124f08a2b7e077411ba36597a3d3c7729baa8490a7e3cc034a325d425bd5f9f079d4059eb240e235413ea219ba4f248b0df743b273e4194b182e5a515974

  • /data/data/com.dooneh/no_backup/db_metrica_com.dooneh_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    512B

    MD5

    6d15df34a12b203d92d96b1ab66201ed

    SHA1

    368bb710d2c7f098352b44e42cc7a86701d7c239

    SHA256

    814932e61bff1e2af1de83dfec680deaffa30152ec5dd0a86fdb440065a28afe

    SHA512

    8175cc1a35dd0e279fd507e417929f1010aeb569184aa20df0d248510103eab717bec5c8c56d36b25c9b3bebda0415df266c2dcba4080a43f57f0440d8fbf3cc

  • /data/data/com.dooneh/no_backup/metrica_aip.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    6348ba7d161ef4df0fde3ecf81ebd26d

    SHA1

    bdaac3978daaac3668c9232ae4f9a596125b1028

    SHA256

    b1f4414f9224f914ba001a61fa70b4b1c246c3e3c68b4d0d07966df403ed4344

    SHA512

    20ecef66c6892eed0edfa224326080e226bf06343d880f2ee86046066d2cf6a875d29302ff560e7893688319ee20e0ae0e97ae86daaeeb3882f28ff755805b9e

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    7b4f0e11dfd46df634650e5b6c42d33e

    SHA1

    cee27ffa930ac18a2f4c7e696f41c0ee4b8a2ccb

    SHA256

    191caaf0e01be9f0d4797820322400560d38563ff044dd518db92b645d9bf37a

    SHA512

    4416f56ac19669b2b1a7d2c1cd1257df36a558966d81344ab865268c7faa7d5093ab50c05093678f3f5796f1e77c6e69413028233d6f0eaabb471c764f317f13

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    088da8f6a4c9bfa92733a71c6fa5091f

    SHA1

    f0b5df64b8f2b6543d3ee904b02732001fdddeeb

    SHA256

    7eb77bd4611db5dac584132da33477a5df9f28fdf4a06fe05acd5c2a65651f9e

    SHA512

    78aacbabb31d00c21b6ccb8f6d422a04ae96cb4f0d9adef68d74bd0565405e6a76f6be48e3400cc40fed3b7c805021c3148711d4e1a38baa5330a55c1cff8b75

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    d32c2b6567a4ae62147aebfb0031230a

    SHA1

    db29c321bc38755bfa3f78199da17561b5daace3

    SHA256

    edd3214a5af2d29b2fe8d2ae5053dafd7409b369e939eb3de5713a77f8627b1f

    SHA512

    339a44fed4d2b4ad89e85ea4f670f31d40f4ddee5579eae226be5fa5b1891a0897ac21cab816c0930fcd5dcb176ec48f78d8306d2592226772727097961f9251

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    3ddfe3547d50f157d1172ec14f6ea184

    SHA1

    022f17bbda5b6787b402de745977b48bc5fa985c

    SHA256

    513097c8a4361f9df19cff0843496411899d69f188513153fd2997e699328a63

    SHA512

    ac02daf359d4ba8ff3eb4b7fcaba9097450e514fb0bf6e1dc0c393e358f1c2a60edd91204b55cee63bce3fbf543c3ae62d9f54c9bd7c9e5fb9b6693184e661ac

  • /data/data/com.dooneh/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    73a2264fb53059c8bf121d0befce6d7f

    SHA1

    126c9d5564e9c0399b02bb6e331c466f6043be51

    SHA256

    dd74eac9711288bac976702de635bdd50dd02a719900cf19d85180a4db0ae002

    SHA512

    50b27c53b9657fad7c95ad3ef9a5b8e3d8b0126329df6c36270c1eab822b0177b05382fa85f88b5fb16d8982fb54c5681c7bc72ed7f0460e0f8bd1067888667e

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-journal
    Filesize

    32KB

    MD5

    f10a495d6145abb5dc2c2f06f59b88c5

    SHA1

    aedfc3a00a5a591b9697421b6104a5673f01536e

    SHA256

    c23f40e409560ff907820394e9d05b5b751d0c05416850110634eea4edb593a4

    SHA512

    5155c0d6fb21acc6f5a44597cb8ff394db1146ff978f3f8f32f41ca572ece58c5976920326222b2e913b6947a9cfbdb3244534b26cea63e312a4091036ebd148

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    32KB

    MD5

    0b58a4479b9bbc352106e7fe8999b9d6

    SHA1

    d743c91f0ee4a25e354c5376254aeca365bf2af5

    SHA256

    593dfae858834f6e6953415a46b52ead19c388b220b9dddac11db7645e4edca1

    SHA512

    12cd890791c09766b48cf57e1c89977588bfa2f72f41b03e42fd1b2b51de20b4f09e28cd20eb6416518f186d75438fd91c1406af119ea6987da61ca71e90978d

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    8KB

    MD5

    b919606ecde427cc0fff44fbdce8a0e6

    SHA1

    4e4a8964094f163abf2320b35d5d66488cd099b3

    SHA256

    9e1d54420ccaae3d89345d2f41d4ba92fde0401bc51e5bb48529e878a8ce1f8f

    SHA512

    4f6acd2af1f345326247e13015db424475ac8ab248605df930535a38f98ee6909b7830bbb1ea8dbad597bfbd5dbb57b8032465998f101ba708516b92fdc22b92

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    8KB

    MD5

    e59c787b95f81cbf0784aa4fc18a9a93

    SHA1

    22850ad466ae8c4597b88a3c917e6e24518f9724

    SHA256

    e7067f9dac12b26f2f680630dd1b124d59ed5177e41fd5b0cc294dfcc36647eb

    SHA512

    da7f242f35a02b1f0f4602d1a66da10dea298fde59c594dc3c10ed06bb049fb34cb1632477e81665cd4b1676d657b7b1638059d8461bceae088f3ab371161493

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    8KB

    MD5

    fc659104470018165f01ad9572699659

    SHA1

    4ea8887dc3d8300eb425b8a4fdd99502cc81f343

    SHA256

    5098f4b63647d657929a49a1a977c1bc430f00f264300fd7d2a4328d1d0e85f8

    SHA512

    3624124ab04ae14320399d5b0e01c217c5aac9eaec35bf61555cc9b482c0d48565e5af333549f741ddb6495feab689c6f80521abc86d8475af416e742ba11e78

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    8KB

    MD5

    b7b66ee36f99d3d67755382363bc927b

    SHA1

    8b39507ec46fb4ce359981ab0b59b87bbc53eded

    SHA256

    d50f334481d7f0110f0945f1bc42fbf706e235a3f99f87cff23a06ea34370637

    SHA512

    11871910aad5fa54e515fb12d18757e7d6c7bfa48142b0b6e66ee9842997b5f5652aaf3ee29eb61defd1d91262cb7412b61a90fde5a991ecb1c88793dc86b059

  • /data/data/com.dooneh/no_backup/metrica_client_data.db-wal
    Filesize

    8KB

    MD5

    99d5708b5d3da8611aeb1d19414b1d2b

    SHA1

    87db7c18103ace5d4d56778dcf67debc494c278a

    SHA256

    1bda9176ebc6c3ed6c9aae734cb125153219e2d28fd33cb697edf888354e2737

    SHA512

    70f1617a7cfb372259d6e51e8e692aba0167ef8d1f8a9430ca126608746e306ffea6fca1871228903bd0fa7ff95f5a8256719ecd7e2ffbb089a6330897bcc9b6

  • /data/data/com.dooneh/no_backup/metrica_data.db
    Filesize

    44KB

    MD5

    5ca365efa098e8633061890218f52cd8

    SHA1

    87a97421f7e93553ef4c8300eca02b550a64781c

    SHA256

    b818b579d6a4097debb10a3bf85bbbe9b4d3df694ce39c6f3d26b5ee74528d00

    SHA512

    b4aa636ab2a845a1c2a22fef6388d3ba30bc67565d0920810f56ed93401825bd70c7645f87d5713bd9fbe08fc225a6292dcb8ac036d2035ab215612ef0c2d49f

  • /data/data/com.dooneh/no_backup/uuid.dat
    Filesize

    226B

    MD5

    aa2fb04da6ebe1159a74a80c59ba59b6

    SHA1

    694bb58d7af309a7ef4a90c532aad613df56a7a6

    SHA256

    298017478acbcb873f47689e2047805919e2a475a7718be1cf970d8beda1e14a

    SHA512

    60b053e5adaf5f20dfbc1907f5e161d6d9b039466fea5d36da2800c5523ee6cc3c1a266d6064dbfb80e6ae944be571028a4f6e2d07c533e5a685635609b2a80e