Resubmissions

23-05-2024 09:50

240523-lvfhkscd39 8

23-05-2024 09:36

240523-lk2m3acb43 8

Analysis

  • max time kernel
    31s
  • max time network
    451s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 09:36

General

  • Target

    base_095844.apk

  • Size

    45.3MB

  • MD5

    939802cb653046411cb7b6951ad6e7ec

  • SHA1

    52f193e06c5f4991c6f402791b90f7183bac4204

  • SHA256

    bc0439149e747ff8b39325d2d3b32a5bf109297fb67540238a80c0a4475b7097

  • SHA512

    f1676b1d5b13c3f4501b62b6bdfbf023df27f57d8c5b9c7741d41bed32672abff5da645ea68a6c4bda1fe1d0d7ddd707785230619aceb08587fbafbf12679f58

  • SSDEEP

    786432:/1twDHEuONnTXrEu6KX2JRP7wis+nNXUdZO0D5eYny5rAvzE7fz2:dq4D1T7tXX+TXU9D57y9a4O

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.appsomniacs.da2
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4559

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar
    Filesize

    4KB

    MD5

    311be70af04aaaa7742dce5b874809bd

    SHA1

    4ac8ef4bb43ac432b2690c62fa96e3341564b51c

    SHA256

    fbfc5ed2ff5576fbd77d6eb57e3e47aea497f75db735985b44ab7ce2f17f518b

    SHA512

    613cef9f2a37540852d2286301b631d777f7ca31974872deaffa236c76574922a3d9c10fc3356aea943897ccafdbc7fd424ccc0611e37bd4c0d048f2671cb5e8

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db
    Filesize

    28KB

    MD5

    cc41397c51d7cf40566de5688cc3fcda

    SHA1

    b86c6e0b509b08d9804b8432da94488b0e229540

    SHA256

    8b3ed11ef6c57c78d3293c7a4988e103f7671bd60f22bbcdb2975baebef30171

    SHA512

    ca2685f419c3f7600f70c225632222a85bf500f84e68529a468bdbee012a0c604a9f25d3dcee292a4e7823883529e01879ee3bdb05cf2ce1dde286ae83d38171

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db
    Filesize

    32KB

    MD5

    ffafd4e2bb6347387cc29b444813c1ee

    SHA1

    b2a684c39ef53eda0a187d61850976e9d6e73efc

    SHA256

    7464a2d0243b3acfd1eef4ed30a700e908221d7607d23f4577d4839e46c06097

    SHA512

    3905e2617c9d5de3491ed0c86a744fefe1779a832a50f9b32535d70a65623a4b657d5771273733e6f3a096957698b732c2de7c0de2eb333499fd75c7f54fdecc

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db
    Filesize

    24KB

    MD5

    e082a577b0eaf9202144b220a1d5ba74

    SHA1

    64383ca5c11eda75f8a73483ce1766f5745c97ae

    SHA256

    39091cfbc1cf073d32db32c7a606b3a77aa6b8f31ef3c9ffe1050038662d7d47

    SHA512

    dea5f58c7d99804e552d0397fb9f0a38482dd4cb2fef52cdbd15ecf1d751ad0c071dc475e74f8c572d98ff2e599066db697cc10c7a26b71bcbb944f93ee545cf

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    8KB

    MD5

    1901debbf938c8c1c88e45197928a678

    SHA1

    2c45933b323e853e2a54db7b5c2227df80ab37f7

    SHA256

    3d0d7eedc8f4674cd90b29b6ca25d0ffe9861b453ab13e9663c09cd435fdde9b

    SHA512

    65ec0a6c004527dcbbc19e05510ebf2cb82a7f0cd8ece9f1a92e9b4647006f28fa1e8733b70e0ffa7525402a51cd9360d0c1e243cea25e75d541f98424cb301f

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    8KB

    MD5

    7b6c2e8fe833f15aa41216e2f22d9a50

    SHA1

    47b23e919bc6282e3c01ac2554827ab6a1fea56c

    SHA256

    5e3ad8be00148c807e5ee612d9bf1bcd09b88e86b9e6b2b911ba8156fe6df788

    SHA512

    77d27bd74172fbade06fa3210c6b65369e7dfad6f0679f825d8d9febc738268025aa6d4019961df7b6effea11430db7b487dbb549dc746709b38de99aa88b023

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    12KB

    MD5

    a2e5b85a8e8c4bef8f334b64b9d6456c

    SHA1

    0c762e33b7d1c17ec90fb2c0cbc33d888b1a9a16

    SHA256

    d39a86a57c6fa51aaef69f526eb8b2ef114611043715e96ff3780dd088e26198

    SHA512

    1911ffc3d8c0a889597fa8c74acb9dcf623ba83378ebca3288f5e0a8a0fbb7aa33503b8a2c5a6c21f8cc4cfa58192c1a4c22900628ad29409e83a4379b2ef9bc

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    512B

    MD5

    d9aaa16fa7e95adf5d742491ad3766d9

    SHA1

    1eb76f7ea3921b3092b7d17da2c43768f32734e9

    SHA256

    8f3ea57c5823c1f38a3e0f1ad866bca5df913877b08e0e2ff984df71cbe24bfb

    SHA512

    82488bc0d3ef0ff646f8fea136dcbdb4f7f40b10346a53f8227d2e361b99f58e34e38c99179315dea5d20e52b91e6d1657a1e787ff6f5289c270d080a39784f9

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    8KB

    MD5

    1891751e451dc6c3dbb817a6969976b8

    SHA1

    6622c84cd727b4ae7d829ce0bb77c94cba839526

    SHA256

    81097715b8d5dd10ebeaa105332d4081ec36c6cfe1c721c758fb3baeef1a0261

    SHA512

    17882f5513ac543cf978b01fce03af03e9619a347858e247b0c824842a826d97296fbbf3181eb8eb972fbc8c88384460025cdcebcd10e0474f2e833327da33b1

  • /data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal
    Filesize

    4KB

    MD5

    f8cdb52218eb9eaf496d28e73938ec24

    SHA1

    3ca006c05e69537a2fe02616e69918916110ee30

    SHA256

    d48d5339d8f65427898160043e74c37c933935029ed186f6827b3ee656725f0f

    SHA512

    8bdc838e137d66f087fb58f8b6ec32820f1d0df3106d925b9c0cedb8ba703364ca74c5b83824b2718d865dedfe73d0ad71011c4eb8b8efec18acfbafc4e817b1

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db
    Filesize

    28KB

    MD5

    1b994cab8b15b9b60b9c5b0606f62849

    SHA1

    ac84964d6370451e75a94ee673dff41a354adc68

    SHA256

    404dfbd748a7edf8a07480f43c7307c2c469948b2f0cf2ed1b5ae4642d0da639

    SHA512

    f1946e52da7183a6b0a97cc3aac923bde69a22ff8b6b65815d87b78b68cc48cd7f4954ec68e961554a58badb3ff07b37d4e5e50dc7ebfc27c35148984ebcaf0b

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    512B

    MD5

    7b0824af7f2cb41a47427eb878d2339b

    SHA1

    cac9e026e35484fca3e9becef2815d052863b1f6

    SHA256

    d00a2470a22440dd1e38c378b6449e656fa19f9a82ce9fd3fa2586d877af5c3b

    SHA512

    dd29ee31f863f94525bb8f2342de1d5b3acbdfc350d7df53fe65da2a48dd1eafb61e584a1d59e58114408477a3c03630b26660306dba75f23e4a6a7a19e9bc49

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    6530cb438ce1ff875f8f03ead14a95fd

    SHA1

    92d21d6122502ed6b4dc4e0337d1222317305dd8

    SHA256

    0afc1996fd57f14a9fa5860669f1b1e4e6ad91df5e376c3039576850848acf4a

    SHA512

    71cd90e1d3cafd9be5da9083771489daa76dbcc6791c5961496d0f0bff247f1127be3b8a79373779745b17ad9bf982aea26a5d0091c8d6d083bc0abf18cf6c9e

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    4KB

    MD5

    462b11193fdee4a2121b7939395c9e75

    SHA1

    6ea075fa7a19901782c400989e9728bf8029f37a

    SHA256

    6f7fd7cba99ae26a141f6d03ea256862ddd5c0a5a19289ccdb2fcba31bd3b79b

    SHA512

    66342f7ee3026b89305496395d880f6edea08f1de8f2a6e4b211c3e49019369451c74f710a766b2da913544268ebf8e8a5500b5d48a32c783a5e94d916dadc51

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    e9a4bd1ca692f336d43da2f5643363be

    SHA1

    d135b3e7b45a5b28aa5ce1b41a1b0d368a9888ba

    SHA256

    b08cdad270b289443301f46b90c8c23da318c48995bbe8c75534a8dbd05ef5ae

    SHA512

    535c469120d3c03c99971fa13d427fcdf45db749dcc38c6e5cea6232ef45889259a657146def88d25c2c4c7325ae6f66cd15c6074d9675fa55bbaba95377b310

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    8KB

    MD5

    7ee00f6a9968c381fc5de13dfc8fcfa0

    SHA1

    45416966c6097c3de9eeac2117afe8a8228e1c3b

    SHA256

    5e2713f60ca31485e4d2197eaa99f3ee5d0af955a91ebbe65b15308f01d9c644

    SHA512

    95f707e70dea5be2f1373a729fcd19d0a4769290095c82a28b4b718e8bd97b30ed52bc5a2bc95fb2d7f36d51749983ccfd1327c8920c19f8555623a366abd058

  • /data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal
    Filesize

    12KB

    MD5

    d001df743b1833554f9a6c5478fd9450

    SHA1

    98d65a6bf0fc967822d85126eeb74229f48aabe6

    SHA256

    dfee2444634c9c20544e97921c8cc5ca58de2457a6872faaac39f798e3563161

    SHA512

    78a58d0996147d6e1032d338a414b553ac154f6e6397711aa67d905db1ace47508aab6b23129c4b12e34e5e9da7890172abb0a502908d0251b9638ddc02a0efa

  • /data/user/0/com.appsomniacs.da2/databases/http_auth.db
    Filesize

    20KB

    MD5

    ed710a8968441282a5939621c2771927

    SHA1

    b6ac28b3e32ea66790c52d6934608b5e71f3d5b8

    SHA256

    6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2

    SHA512

    547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

  • /data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal
    Filesize

    512B

    MD5

    95ac1f9b94a866fe3660020561584ae5

    SHA1

    7b2e2fdce1e23fb411dd82dd52243988e44c3048

    SHA256

    f3e3ef60bb7882ab7d7a038299f945b35b63bcc37144cbef91d00ca0190b6893

    SHA512

    6b8a51d8624213023b0069d56f676aec5cbd15f780ce031de0509500946fd11775e4df1f8593cd688f49188fb9c3559223c166534f2a25f60569ffef9d8bf4cd

  • /data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal
    Filesize

    8KB

    MD5

    9720aeef4f6cbb4379b39a7e728119ed

    SHA1

    4a0a27c2e6e333814c8225101afaa8b0911c9ce4

    SHA256

    06d29d3014d142af6bdda675f96e82645d98e2b890596ee81a9cf1c34bd87226

    SHA512

    c5e6ced23605f60c12b18be2df7f0dd10a2efde2bef4cfb1370b9fff578176d1c1daf9223d517f5d14dedadd909cf290843350ea9b5daffa15ac7853203f9e58

  • /data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal
    Filesize

    8KB

    MD5

    79b766f988c0f719e4b25c99215034e3

    SHA1

    b0939a6476f1872839dbda4a0ec170420c6c74b3

    SHA256

    bbf02c9dbeee6f2eda02a1f4a7e3f2d2b238107472d04124c4a3cf1e4956996d

    SHA512

    4708fadcc88d7019d883b726f79633ff8cf028d5ec22f5b280f607a2ea0a129044db045f0513bd857562dd4e7f51ac418fca40ef72c396a2f934cabbd58b5448

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068BeginSession.cls_temp
    Filesize

    77B

    MD5

    1ac3b3916b066f0d2dbd495272f395aa

    SHA1

    d9646e775d604b8f68226a1bc929010a686dbc9e

    SHA256

    785fa1cd5428a0a0ff056331e7b5a34d6e55e938d40f51edb077557ae9b921aa

    SHA512

    f5006076eb6ea0d28df17df2b4024b1a2532a326cf7c6dbe9cd4ffa2763b94584ed1b2c593ff23c1b9efd6e4b547c84cd2d4943b538f803bffcebb9a421c1117

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionApp.cls_temp
    Filesize

    116B

    MD5

    aa0850fc6bb8d0093ec043c6ad8f1071

    SHA1

    217f3fe76ec2da5a26a51a07520579819d48f502

    SHA256

    16e61e8f0f8a8128f18d3555d063b051c4f478b54fc101d0e4edd09f68086654

    SHA512

    c66d8e89fef2ac3183582dd28d480f7178f3c8087467f7d4d2c6f23da87e86822f10f942fe4fc669a11af8dbfc00f4467c3ea57ee09cf842ac029d77bd8c242f

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionDevice.cls_temp
    Filesize

    131B

    MD5

    680477477b2cb205ff4c21d1acf2e085

    SHA1

    33d71488e2d1b998f9dd466b1d378f44721c5a88

    SHA256

    2b7bcb2143ac88b86d95356a6491c03a5d836b5f9aeb1620c66223d10ef2bbb1

    SHA512

    a4b478d21e1795ed9ebc0c925bd55c22bdd43443ea5313f245789beca5d8600c51e9e6ea24b7ab1f5b0578e7f2cd972d447ab202e2cfd1d24c06aae951f8a7ec

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionOS.cls_temp
    Filesize

    15B

    MD5

    b3d9541cc92a9153d14e5160f8d8c008

    SHA1

    2e1ac80eb381dd82a03795b682f92020348c0113

    SHA256

    1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

    SHA512

    78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068user.meta
    Filesize

    29B

    MD5

    e9fc232a5518ecd2a9d6c0c53bd8e82f

    SHA1

    c214410a01d1b1dfb7b6273122afd7df33b71c5c

    SHA256

    1b9a99edf5032c8a0da18006c336d6f0c9a9049551d8dc5fdb1d587ce01e317c

    SHA512

    aea0238674e561ddcc4a6c597d82648e1ce5d6573ec8a3c13a59a30f5522583d7f8ee29e8310cfddfd7c9d3635fbae385cfc1105c7bda358a5215c7b52664fbf

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    478B

    MD5

    cabf692451cc8e5d945658072ace4a77

    SHA1

    084a38b51bfd2df1069c3305fdb00cab3fb916df

    SHA256

    42f25ad238b231543eed065f40320108a08ccaf5767ef0edc5318969616bd3dc

    SHA512

    645d45f82196873442778d57fab46371aa4eed27e6679ccd8f830956d6228bef6eaaee4fd23ad3c6072ae342c5d52a58767c63c394f316f19df1c1caea9fb2df

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    1KB

    MD5

    894264a69905e3773ca3b3e413ea2555

    SHA1

    4018675d820ee7a9a8459655c313c49f0ce7d9b4

    SHA256

    fb87a178e58c963c123e5b7a75fa22b6a85a85d4819f5770a57d3a989124235e

    SHA512

    21ae536d071a8fa37e3b4c8893e83b7ccbb7a3fe89699d12fe42555907d05c8337db9ebea82214c227fcfc07868e6e3383ed5c79c8e93fd8e7722781edaaffc9

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
    Filesize

    1KB

    MD5

    ac9f1d30f40098542953ff1d8f28406b

    SHA1

    28fbce8d9090b15c2555fd20a913e1b80003cf5f

    SHA256

    b09fdd4f4f0982ecb8d45e986da7a6cbf006f334fc077f3f08469b3f8e8dcfc0

    SHA512

    fc6377247f9c9dba0ab6a04915b994ae920a8bd4c9470f0cb40243e57c0cf04fa56a59ef4d566902282342bbfc13dd72581a818029007b9a396d0afce1340d3f

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_22a3d605-5184-45dd-b37f-4aaba7802e49_1716457151616.tap
    Filesize

    378B

    MD5

    8882090ef1c8ba478c975c513006a4a0

    SHA1

    cbabdac65fda8a5f114e8f87e2854cf6e9dcba42

    SHA256

    8e36e78272a4842f5271fae3862b0cfd9f253d5dc3d5d17b7ea5c18373209978

    SHA512

    df621a5e558cb0933508ec837832c2d9eab4ff77c5dc7b08c8d6d1b01c20eec5f340fbaddb19b18bd740ce2279a8e24dcd85aa43e3438fdc3c6a882af499e107

  • /data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c8d269e8-4f3f-4e6f-a727-f2236a51cbd7_1716457156631.tap
    Filesize

    444B

    MD5

    3ca4230fe93bb0341951ed433cc3e0df

    SHA1

    50f0377bcd8bb33d5b6e1e5887fb7e9acc1d4f64

    SHA256

    c68a524bf5ab9d0dba4f72041e5f1efd658530cc999a9916f457e5ee730f343a

    SHA512

    00274244d54d3fa911358c33ae9fe2d88e7739c5e2b482ff331a5f450a212652ca027de2bca86285d0af77fdc337ceb7e95f1f335453ae2e11a179cd3d70ac90

  • /data/user/0/com.appsomniacs.da2/files/gaClientId
    Filesize

    36B

    MD5

    b74fe5eb778fcdc90ee2122ade34d99e

    SHA1

    91a33ef98e995d9d1e9ac84270e555aa3ec445a6

    SHA256

    850859f388a15e99be492689987955ac8ae9ec1a52ab3be83a94ce8943d9d7ba

    SHA512

    1578935942f794287b11c6a7f827164c9d6ddae375b3447a6d23dda5c9985b824de5a3d841e5a049bcb2e74731669d36948e643e002f64f86af259f579ecb660

  • /data/user/0/com.appsomniacs.da2/files/gaClientIdData
    Filesize

    32B

    MD5

    52d0ab1d43536d3f287aae9d8690701f

    SHA1

    556f6403cea1be54fd17643809b9defa11de8ebb

    SHA256

    07807569abdae473ec1e3544d9684ff8565be663f09520c659362ecbe590a37c

    SHA512

    25ba09684340c6bfec92e61086a9d993c77e4a94e5a547a8f8f63ef4db5a810ebd3fbba7602e44b86e3ec860ea5d2c4dee70d176598048568c718d63fbf647af

  • /data/user/0/com.appsomniacs.da2/files/nr_installation
    Filesize

    50B

    MD5

    7ef91a43fb98b8973a8a701e1b132214

    SHA1

    7b2ec76297247afc17b8b1bb3dfc39f7767a2131

    SHA256

    fb59a528a67d741fc90c8fb23cab4342a4fa7f9084f59c8e17d2ed5625b3b7de

    SHA512

    eaaeb3e0417a17cf17db401923055c166b7d1bd33de8b5491f3af39d91577c403d998e0e54015b1ffe52c147d3407944ba6c1efc72b2eb5f8c22dbc515402464

  • /data/user/0/com.appsomniacs.da2/shared_prefs/com.google.android.gms.analytics.prefs.xml
    Filesize

    129B

    MD5

    2604071fd44244bfa5acaec2fac807e8

    SHA1

    519ffee4a9ba2534f821ad374fbe08917cdbd54b

    SHA256

    db273166f1f939d77a57c2ee6ec9d6d79aea5c974e78b60dfe4ac733cef05100

    SHA512

    d634bfa41cb92cd17426ee9b06f317dffdcdacb25d2be3dd8df27f2f6f9a300f40c355ea6cf0ca5b13d00ff71962d7ce214e48f0ec7b840122e92d5214ec4298

  • /storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/1381250003_28x28.png (deleted)
    Filesize

    539B

    MD5

    759a106983ec92f34344dc5064efd29d

    SHA1

    2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b

    SHA256

    1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81

    SHA512

    516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

  • /storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/93371e08674b64643f2db488eaa3bf42e3bad401_v23_phone.mp4 (deleted)
    Filesize

    1.0MB

    MD5

    c464a1b1c31bcd1e90234ce75a857a2d

    SHA1

    fe303800d2417feb67c4e3fe15e4fbd4c1afbae3

    SHA256

    1e47928c7a950e2121fb6799123493dc80db34dc30b9525fde4e10e2bea33376

    SHA512

    8edce4d8601bddd3ef9a1f71c7fe9e04669ca4be2d0c457d84339766c3398bd59e042430065f2d7057f264dcbf896c684223d23e8b565ca26db0435d303e5f9c

  • /storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/o8136b7f_8468ec184d704b7245eb491f322a8c19910b2129_raw11.raw (deleted)
    Filesize

    372KB

    MD5

    3de8269c6731278f9b008671578f7685

    SHA1

    8468ec184d704b7245eb491f322a8c19910b2129

    SHA256

    58876258778dc523b6dbdf5a534e54919f2402b964afce1b97b18bfe087264de

    SHA512

    e1d6413a9a039f5a2e4402c5bce4c40bb45c708b375631c88ac0b058934c964c1ad6855b969775c57f871f2407efc5cc0cadd5916952be98ed102274cc1f414c

  • /storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_off.png (deleted)
    Filesize

    6KB

    MD5

    d9a4fb40256f67255242c0f41a0d3de3

    SHA1

    1c99e725cebba2c3f5808d5e00c73af58f0790bb

    SHA256

    a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b

    SHA512

    a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

  • /storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_on.png (deleted)
    Filesize

    5KB

    MD5

    74485ec832d65f19b05f5027220df53b

    SHA1

    49116a6b85bec84512241c9dc6e511ce10bdb7b9

    SHA256

    7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268

    SHA512

    9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657