Malware Analysis Report

2025-01-19 06:55

Sample ID 240523-lk2m3acb43
Target base_095844.apk
SHA256 bc0439149e747ff8b39325d2d3b32a5bf109297fb67540238a80c0a4475b7097
Tags
discovery evasion impact persistence collection credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

bc0439149e747ff8b39325d2d3b32a5bf109297fb67540238a80c0a4475b7097

Threat Level: Likely malicious

The file base_095844.apk was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion impact persistence collection credential_access

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Loads dropped Dex/Jar

Queries the mobile country code (MCC)

Reads information about phone network operator.

Requests dangerous framework permissions

Checks if the internet connection is available

Looks up external IP address via web service

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-23 09:36

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-23 09:36

Reported

2024-05-23 09:39

Platform

android-33-x64-arm64-20240514-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.228:443 udp
GB 142.250.187.228:443 tcp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-05-23 09:36

Reported

2024-05-23 09:46

Platform

android-x86-arm-20240514-en

Max time kernel

407s

Max time network

416s

Command Line

com.appsomniacs.da2

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar N/A N/A
N/A /data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.appsomniacs.da2

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar --output-vdex-fd=109 --oat-fd=110 --oat-location=/data/user/0/com.appsomniacs.da2/app_.gpg.classloader/oat/x86/d75c8e1bbeab9e1ddffb9d332585db71.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
GB 172.217.169.42:443 tcp
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
US 1.1.1.1:53 mobile-collector.newrelic.com udp
US 162.247.243.24:443 mobile-collector.newrelic.com tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:80 config.inmobi.com tcp
US 1.1.1.1:53 ads.mopub.com udp
US 34.111.158.155:80 ads.mopub.com tcp
US 34.111.158.155:80 ads.mopub.com tcp
US 1.1.1.1:53 rt.applovin.com udp
US 34.117.147.68:80 rt.applovin.com tcp
US 1.1.1.1:53 a.applovin.com udp
US 34.117.147.68:80 a.applovin.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 34.110.179.88:80 d.applovin.com tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:80 assets.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:80 img.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:80 res1.applovin.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
US 34.111.158.155:80 ads.mopub.com tcp
US 1.1.1.1:53 sdkm.w.inmobi.com udp
US 20.33.12.142:443 sdkm.w.inmobi.com tcp
US 20.39.59.188:443 config.inmobi.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 appsomniacs.azurewebsites.net udp
US 1.1.1.1:53 appsomniacs.azurewebsites.net udp
US 1.1.1.1:53 ua.supersonicads.com udp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
GB 216.137.44.27:443 ua.supersonicads.com tcp
US 1.1.1.1:53 init.supersonicads.com udp
GB 18.244.114.88:443 init.supersonicads.com tcp
US 1.1.1.1:53 outcome.supersonicads.com udp
GB 18.244.114.95:443 outcome.supersonicads.com tcp
US 1.1.1.1:53 www.appsomniacs.com udp
US 162.250.75.11:80 www.appsomniacs.com tcp
US 162.250.75.11:80 www.appsomniacs.com tcp
US 162.250.75.11:443 www.appsomniacs.com tcp
US 1.1.1.1:53 ajax.googleapis.com udp
GB 142.250.179.234:443 ajax.googleapis.com tcp
US 1.1.1.1:53 region1.analytics.google.com udp
US 1.1.1.1:53 stats.g.doubleclick.net udp
US 1.1.1.1:53 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 173.194.76.154:443 stats.g.doubleclick.net tcp
US 1.1.1.1:53 appsomniacs.azurewebsites.net udp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 1.1.1.1:53 appsomniacs.azurewebsites.net udp
US 1.1.1.1:53 appsomniacs.azurewebsites.net udp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
US 13.66.138.98:443 appsomniacs.azurewebsites.net tcp
GB 216.58.204.68:443 tcp
GB 142.250.187.195:80 tcp
US 1.1.1.1:53 mobile-collector.newrelic.com udp
US 162.247.243.24:443 mobile-collector.newrelic.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 172.217.169.42:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 static.xx.fbcdn.net udp
US 1.1.1.1:53 m.youtube.com udp
US 1.1.1.1:53 images-na.ssl-images-amazon.com udp
US 1.1.1.1:53 en.m.wikipedia.org udp
US 1.1.1.1:53 a.espncdn.com udp
US 1.1.1.1:53 s.yimg.com udp
US 1.1.1.1:53 ir.ebaystatic.com udp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
US 1.1.1.1:53 www.instagram.com udp
GB 142.250.180.14:443 m.youtube.com tcp
GB 18.244.122.174:443 images-na.ssl-images-amazon.com tcp
NL 185.15.59.224:443 en.m.wikipedia.org tcp
GB 2.16.170.123:80 a.espncdn.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
US 151.101.2.206:443 ir.ebaystatic.com tcp
GB 157.240.214.174:443 www.instagram.com tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com tcp
US 1.1.1.1:53 www.google.co.uk udp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 hhzfxiw udp
US 1.1.1.1:53 uegwsfjmmusqdoc udp
US 1.1.1.1:53 ouwpskcljeaoby udp
US 1.1.1.1:53 consent.google.com udp
GB 142.250.200.14:443 consent.google.com tcp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 216.58.204.74:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.16.227:443 tcp
GB 216.58.204.74:443 semanticlocation-pa.googleapis.com tcp
GB 172.217.169.42:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 whatismyipaddress.com udp
US 104.19.222.79:443 whatismyipaddress.com tcp
US 1.1.1.1:53 ds6.whatismyipaddress.com udp
US 1.1.1.1:53 ds6.whatismyipaddress.com udp
US 1.1.1.1:53 app.fusebox.fm udp
US 1.1.1.1:53 cmp.inmobi.com udp
US 1.1.1.1:53 a.pub.network udp
US 1.1.1.1:53 ds6.whatismyipaddress.com udp
GB 18.244.114.17:443 cmp.inmobi.com tcp
US 104.26.12.133:443 app.fusebox.fm tcp
US 104.18.20.206:443 a.pub.network tcp
US 1.1.1.1:53 maps.whatismyipaddress.info udp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 1.1.1.1:53 optimise.net udp
US 1.1.1.1:53 api.floors.dev udp
US 1.1.1.1:53 d.pub.network udp
US 34.111.152.239:443 optimise.net tcp
US 34.160.128.112:443 api.floors.dev tcp
US 34.160.152.31:443 d.pub.network tcp
GB 18.244.114.17:443 cmp.inmobi.com tcp
US 104.26.12.133:443 app.fusebox.fm tcp
US 1.1.1.1:53 region1.analytics.google.com udp
US 1.1.1.1:53 stats.g.doubleclick.net udp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 142.251.168.156:443 stats.g.doubleclick.net tcp
US 1.1.1.1:53 api.cmp.inmobi.com udp
US 1.1.1.1:53 cdn.whatismyipaddress.com udp
DE 3.120.230.251:443 api.cmp.inmobi.com tcp

Files

/data/data/com.appsomniacs.da2/files/nr_installation

MD5 b507ca39fa183996ff4ac756a3a5274c
SHA1 4e47373ca0ab5eb09068db400de0e9716cd4c1e0
SHA256 4268c7f7e3917d2556188d80f9679104d278c3f9eb1fa6ab2553125733576669
SHA512 c90b87ddd05e1e795b7adee9677e05964af6de4968f815c43704d7149747c16d1290f15f160f5d2311efb8e7ad56b86166d4d4e3723ce3c14229c37773696865

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0ED3039A-0001-10DF-EE3E42494801BeginSession.cls_temp

MD5 5f52e3ccef82b0271b0e38058a5fc6fc
SHA1 727ef03613cada9c6b557deca0c59862d8be7394
SHA256 fe467a02c4f6557561ebc50cb09981a49854ad912ffca852d38b4dcd93e65031
SHA512 0c061ce23cb12a11be442d7f68ee34cdd71375505b4993d6e173a8a61f162b80e3895e65c928f0635833c1c7308a8c0689528e8687b5ed14ff7b6fe8fe933c2d

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0ED3039A-0001-10DF-EE3E42494801SessionApp.cls_temp

MD5 cf3534ca03c4959c7e6d4220437552fc
SHA1 5807ea37ddee2083bdd085936368c8f4b0f3e25b
SHA256 820fb99721b4c4ad93b855eb4f8b672e5ccc1804e56857117b7584333924a3b5
SHA512 4d1846b25890b6baae754f85b23671572099e11b299c780fb8cdaa02c6833c819c177ec1d67e7528049347880a1daac63b5c288a990eb3e65acbcdebe6ad416b

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0ED3039A-0001-10DF-EE3E42494801SessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 c1597944ac34ea7e46e016fec54445df
SHA1 d8bcc3601e28c2f8976f93f9c4b5699ee6a97388
SHA256 83bf28791e296f8411fab17affd10ecf22a914c92659e3ad5281dd51c7decb54
SHA512 fce5a684da6c040cb72df5d070d3f21f6c52c9ae92e8827982b8f2b08bf9a2702a761a56c1ecb73a3f50fac7b1102ad64473c56f53909366942efb1ee178bcbd

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db

MD5 ddb4bdcb3bdc63f92be9f90d11fb6ae5
SHA1 9a88231d8dfc76709b97a80e174b9b833c84ed31
SHA256 cdd5efe012fc241e246a1c7dac53f045e633fd01448e6f253ab4ee2d684ec2df
SHA512 fce4fc192e4f9918289dfbee67fe8c6ccc92aba705962cd31fedec3a2d6777246dcaaaa0dc908a3b3e28efadec74d5a76f2b34381bf28ec00eb7c364c64ac0f2

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db-wal

MD5 abf565a0daa2b416e3808d6d446480b3
SHA1 bd2d30318f588e7be215498b049631683d8d9f80
SHA256 eb925fcda9e1dbc7bcd87700c5ab663c37b0d4d6127e90094af7c1357aef48e9
SHA512 0d65fa5b9117b4ebdf1380bac46a167e0b4ac45dc69b52c05281e6aff0c2e19cb20ac1b2e9211ea17b9becaadc9ab5204c044721f48746acb256f5a4fc61fd90

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db-wal

MD5 e56a13c2f6fb1d19454acbcfe828a77d
SHA1 89d2fa2a2a3aec6a0d9479cbabac5c97270ed6c9
SHA256 0ff403fa083c39c1b744388a1da63146cb1cea73b6c5a484ad80adcfee5a1c97
SHA512 a7e023d26e1804a2dbee0b77b4def6c87db8ec363b008ef112098ed941887c296ab8744dafe334f3b91435f6b719585b6802f0342b8db0ce1fd3002f5d4f9af7

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db

MD5 1e711c453ec9d9ea0967de3e1a758672
SHA1 3fa272a9300dc4df6fff54931ab035085834adf7
SHA256 c31e408d60d92fbe3818c73092aadf4661a6f2150bc7cb787cdb7a7293b90aad
SHA512 887eb56fac50b32f811bd9cf5ed383a8a38f32eea79de1d36b568743adacc9ff3cc48a2a57b14161b88590a3facfc46478cf2518d56e2d7f47b9f3737ba91aab

/data/data/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar

MD5 d75c8e1bbeab9e1ddffb9d332585db71
SHA1 e0315ca8cf540c87b5fbb1a7929b63b83ff7a2d5
SHA256 cc8d498ff06d960ca3fe78bebd47552467c6e0d5fd38845f450b9a07b9aacd57
SHA512 4dfe89a728a3bf549f18b7e42310c06136365449d92767445e8ef09fa1bb5963ee87dbdf0334d57d1f06818d2bb4c03fdb1b7e7264d1c4cd73492d7b3bbcb60c

/data/data/com.appsomniacs.da2/databases/com.im_6.0.0.db-wal

MD5 ade34e285eb46e91a83b10113eb94f29
SHA1 6216f0891b9691ab439e4cae5bb4c5a889899a4c
SHA256 c277fdc0875e85b1f09432f279cb808b379edb4e40f09e6ace1ed52a34612c5d
SHA512 58ef0fd7a26b33a7d60dd7fcf4532f3945f4e30a26879c6c7fd30c8771971a0a2c67872db1f0f3c0fb21dc23e6a1aa544e83feb137e6e32cd1060747a19c36d6

/data/data/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 7b2ac3d7e515441c83a1f5fd2c3a827a
SHA1 0e7eefaa80a8d50b23284069c443cd7961bf1af0
SHA256 7e6ae9cd5e6b3505c841fe048799a589f1986b95c5e293e418497e9156fb71bc
SHA512 a25d415ef8308dfb5bb9fdded313e7930c735455df9e1585030c330b8a2575b051e4b4dbd4b38a9efaf10c671d8575ecdc713c9cf3bca50e8ee526b46e5b6c69

/data/data/com.appsomniacs.da2/databases/google_analytics_v4.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.appsomniacs.da2/databases/google_analytics_v4.db-wal

MD5 90316b390a1b9f2d2fe4d65108949de6
SHA1 f705f318e3e1e31c00265dd5971d562154396c4f
SHA256 def97ac6abf0e7957571f7256f4b2afa01e03045f5739f4181eed0a65b63049e
SHA512 2204cc87f4a13d1da8932b02c69d5b1fd81b6036159868706340aa61d47ea42ebd3ea3fb8e989bbd0f2eb30dfdda493ff4c447fec7dba7e40a2be8c8fa7acfe3

/data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar

MD5 311be70af04aaaa7742dce5b874809bd
SHA1 4ac8ef4bb43ac432b2690c62fa96e3341564b51c
SHA256 fbfc5ed2ff5576fbd77d6eb57e3e47aea497f75db735985b44ab7ce2f17f518b
SHA512 613cef9f2a37540852d2286301b631d777f7ca31974872deaffa236c76574922a3d9c10fc3356aea943897ccafdbc7fd424ccc0611e37bd4c0d048f2671cb5e8

/data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar

MD5 ca8c0b8b591117fe727f3f016255b3b4
SHA1 bc8d180834c3a67689895a57f02470536ebaa00b
SHA256 f21d332aad5756bfd0f5deb8df9d1a3341c8d444277d2471959ea43025626e39
SHA512 4cad332b20e498f48891b8cefd532b8dfd3a399434c01a4ea333e7e49bd0d13f74d7de8d3344db21828a6d37220ab9b20fe145d4a1e7ab4df8541ef9544203bb

/data/data/com.appsomniacs.da2/files/gaClientId

MD5 7bda4ef8673170e11cbea331ecabfd89
SHA1 4db03e8e08ebb0c4c5e85530bc82246aeabb3467
SHA256 772d3845a639e857f0f4f57e129d4c51a410c42b5a74f6227ca546aab09ebea6
SHA512 a037cbdc1df33d493bf22cd3b3f1e0b7c0569a0a723f0e257c3054f0ea8722494cd5f4cb209ba2ded97245881fee8a06265e76676cb829e32dd3b1a27b8e60c3

/data/data/com.appsomniacs.da2/databases/http_auth.db-journal

MD5 4976a73b41af9a5533c26aecfcd41630
SHA1 ee81bca2d3b163e1cf41da462be5d55257a86cf4
SHA256 b175cbbfa1b70c86b480ccf2857c6d7c02ef4b9932af2bb6d7446bfe56879452
SHA512 bbf7d14a896e55b2a0cbb2973368d092256c23308671d5093f79de5fbc15ff7b74e4f205bb9e4d91f37aab3fd6dac56472f4bda82381d7ad5488e8775c62f41e

/data/data/com.appsomniacs.da2/databases/http_auth.db-wal

MD5 99373c97657b8acd68dc5ad56c025c1d
SHA1 8023fff6e7bed22fea1426946bfa72e9269c0e3c
SHA256 f1d958cb19d81e678ef538021cdbf4dbce3d6862639cbb56c6655bd60f5b45b2
SHA512 b528b352908bc7f90ea8a0030554d5c2afa721fe5a9f0fa69db854e644523f28dab80d05440b7af7f86af2b19c1f2ff41b2eaf0f18c96615261f397e496ae434

/data/data/com.appsomniacs.da2/files/gaClientIdData

MD5 6a4206e726998f813868b3ccb7759385
SHA1 71e7be53905e196c4c95ad64da16ec667b48b1f5
SHA256 f5ecc33f2e218d8ffa442c5c4fec21d84653f068e0b514a142523c55e401ae8b
SHA512 9fe53aa6f16126e2c0bba4718d33c458520a25850b4c7f8cd08ddd2568a7d2b9f055449ce6bd7c75f4cc40ec2f6d0b66ff2034ac9669444d345c0dae04b1925c

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0ED3039A-0001-10DF-EE3E42494801SessionDevice.cls_temp

MD5 1ce57e002ffa9f9b127d893ad3c7339d
SHA1 ca79f97934f0f08eb122ed50628267a1ca16503e
SHA256 e3f8616c2c76da3ac98b008c09380dd7a67e8f3cf126f339543bf222cb46ff36
SHA512 a75ed15d60a0fc4868174eb2ed84bf942b42b0426e8a552544be2fb40da6e9c31d42f7fd6e071d245a6d692cb1847ad3cc649bfff0ab12db694c56e570cd41ee

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0ED3039A-0001-10DF-EE3E42494801user.meta

MD5 0244abb9fe81de2d6acc325b9db59ec4
SHA1 6f619589dd99e2720cdad4df6ec636ba4f4c6ed3
SHA256 e6a15a8166d50d9adfea88b1c10654aef29e84362a05f868604298f92374abde
SHA512 ce6b1e72453f94fa78ddca2d0bc929cb524c4302afedfb9557c1c95eaed2f1b120023384730a0b8925e448f7d404c449324ddd0f3f5db0028b390fa1bd2aaf34

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 43dcd15c86c485e207071c998ecb6e34
SHA1 7edc1fd8dfbbbbf78c34af1a3a28d5930da8cdaa
SHA256 d5a5a50e794bf25c78327db3575aff77d691360863d42d4f3a56f686297e20a9
SHA512 57557b278e9534f72ac688c8524f3d52f8a5ce8f51935b4d76c9c296ad58783682dc2727ba43b0752962414f7d25e481975426bb88ab16d01ba34ae28ef68bc5

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_ccddd431-eb02-413b-812f-07bd7004c188_1716457177415.tap

MD5 1b9b19e17e749f7c456223b89136d558
SHA1 e321030a256a85ab0b53a03a1ccbe96c83086866
SHA256 76b33cdcec59ae81e3e40f83ea05f8de40a1cb1123ccd9f4cc73a57266628d99
SHA512 1098fce438bf1a7cd4d25ea224db6a7c3baa7a893938446dabebc77db40675bb05f7369dd713f4a4f919e5d50fd4fe17f1e473ce3d4b87693be0e9e1e04b6710

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 a0fc0deea2bdbe5189d00d9a99cc15c7
SHA1 2227a83db9b1695dfa74a7e4da4bf1f803654ba4
SHA256 d53fe7758084674c9c8f54ef57ef6a9c2515aa9261140454047f59fb380afb63
SHA512 1959dbc397a0662c0cb26cb451f6315d2bf372d0afa7fc0c9dae171d3b951d5e5577263f7119b8fe9bc8d52c455298a5a10a55f37c4f5b5e778761e2e995d1a6

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_off.png

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_on.png

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/1381250003_28x28.png

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d73af2cd-9d64-437e-8a7f-ccb3b35546d2_1716457182824.tap

MD5 296a931edb28f896a68711f0c5a98418
SHA1 0284b62908005d7787933c13e615817e07a31d6a
SHA256 c15c43106f3a5fcf071719fa42ce65eda0b50014136ff8320561e87347b9f191
SHA512 3ab45307ba78b0f220c00d77719797221fa13dd8593071dc88c9ecf8c97390e0ee0ad966766869701e470bd807dac4797911ad3cae0a8c1d1a7ebe6b6c243d22

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/o8136b7f_8468ec184d704b7245eb491f322a8c19910b2129_raw11.raw

MD5 3de8269c6731278f9b008671578f7685
SHA1 8468ec184d704b7245eb491f322a8c19910b2129
SHA256 58876258778dc523b6dbdf5a534e54919f2402b964afce1b97b18bfe087264de
SHA512 e1d6413a9a039f5a2e4402c5bce4c40bb45c708b375631c88ac0b058934c964c1ad6855b969775c57f871f2407efc5cc0cadd5916952be98ed102274cc1f414c

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/93371e08674b64643f2db488eaa3bf42e3bad401_v23_phone.mp4

MD5 c464a1b1c31bcd1e90234ce75a857a2d
SHA1 fe303800d2417feb67c4e3fe15e4fbd4c1afbae3
SHA256 1e47928c7a950e2121fb6799123493dc80db34dc30b9525fde4e10e2bea33376
SHA512 8edce4d8601bddd3ef9a1f71c7fe9e04669ca4be2d0c457d84339766c3398bd59e042430065f2d7057f264dcbf896c684223d23e8b565ca26db0435d303e5f9c

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/o86adc78_55a30ff3ee62229c331f70a23e092304027c5496_v21_phone.jpg

MD5 30f7bc6bd4b24102e04b583e70ff4982
SHA1 b75d8103ddd1e97396eda85d394881c6148e96c7
SHA256 db65fb42d0064df4405cc9f159948b90f3ff2902e5303d5580496490c4f1c707
SHA512 faad66f2c0a9eca144a9b9d4e82416af0f6eeb61fba50014b53a63f8b21ba8cd06ed16c58124581d60539f7c3a4741c5b2afdd31eb2e38db9f6b5abfa6dd51ec

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/a53fa94488f68d80bc466af75ecd368d3770633c_v23_phone.mp4

MD5 4e4b7f9a4283468093a62204d93383a9
SHA1 b15cc4fd5089faf81a13598a53d1f2d3eee92d71
SHA256 42054811bb10a64d201dca880bde0994e834d03886e53cf9e2b719f0fa2c4aea
SHA512 d8575141c2005a62f7b4c2e6515b35d433f95fec8b819b81ccce29e6c8920106ddae4366db96713f6d22b26e13ffc7d3fbe1ac97a330ff9eaf42acbf3e595d46

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 bb8e423c605f615368b3f40ad5e54144
SHA1 85a505efbeefa8d3008dae3ce13a8952ab5e18a9
SHA256 9248d510c1626ed7ef55c8846fa4a5904e44e88a0f654b2268a812371b730ce4
SHA512 73ac1276dcfd7cd179dd0c3c336dc0c96f0e7842917e649f31a623e9ae8e380988c37e92f1509e60c080c6b6364e3f3517036ceeb9d58d433bb478e304639112

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db-journal

MD5 3a147b32c0ce2e30be3d834d1d81d426
SHA1 d892e02ef14443f588e319ce40d558cc48aeaa0e
SHA256 6e72275baec46b78f09a2ed39e79e409d76da012e75bfc7bebf5316a5fa92087
SHA512 34645915312e0dc64da2308198f4ef51b9f94da391cb47b9277e6260894149e64a917deab338ffa6da897697cce1cb7882e5a300390cea779cf0ac230949872a

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db

MD5 92cdbf0b16a6bb1cc3df626a5f6faf71
SHA1 5d999ffd0b264b9ca05f2a381d9ad2f0680cb262
SHA256 202a9d2f44af092b1c2617323f3869e9074319543695a386124ac1d32d3552a4
SHA512 7366e97fb399aedcda2f2070a23b9dfabe01aa3dbe7d2f3dffe3a2bec62234544fe34fd545ef9471b99c8246f10c13fa0d62f14e7542ad6d778f69b1942b29e7

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db-wal

MD5 3aae538f16fa546401fac1573114b8f9
SHA1 87bfbc8d8f119c74bf42aaab02ac5634581e3fa4
SHA256 b4a5b9bf7f023b0370eb10aa7e5c595bbdcbc91adf11eadc747a0a8efa19759f
SHA512 5a7d673b16b4a0b749d1cec72904cad4460dab4ddfefe2c5e432e3765fcb9c62f4d70dcb9b87ad03b488b379ca3b4eb00f041d03a040bfac8d3f10b1452645e4

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db-wal

MD5 8a70b684383fa65d9af3bbc74f5a8852
SHA1 4b6acb6ea5a24d9e3519c6a5f4e65c075ef1c969
SHA256 2f9642505972193f8059f8f60d760ef9a2fce828f6fa9bb6e49cf94a7339f022
SHA512 090a3d2f185fa3ce56b6aa5ce80dac72f99fbac15820daa25a01a153f320033cf902c473500e6b34434f2937db5f4d17fa4cc65993ea40ad59cb3e82ec9ba023

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db

MD5 e1488bdc1b6fc55707b0e573c73372a2
SHA1 9f685b84ef307720b388e46a2fe7d9b88fc99b8e
SHA256 b1b8dc13cca9852b031834f208e95fd5a4cf373b4dabf869054915bedaa07ee5
SHA512 a98ede5300456906ac44dfa2711cf6fa0f6275104c35124f54ecedffad80e9b3b606a141145a263e401192a4df9e8ac9942837197b48e17973fc2a98ffedb171

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db-wal

MD5 b2b866cb0a5b416e36e25f90579f2e77
SHA1 9269536512b4491c592997dfd51cb39ce1c54133
SHA256 9cec2c9d3f1121b6accb4606b571cdb07976fed76c4f35bc04e58b02b5307f19
SHA512 496fc60b84f57d577d153e1887c74b4467ba918c61588ccd87003aadb2217d16586a438c2fbd4f96fa314aed37bdecc35078e9d4f0ad25daaaf540d454363ea0

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db

MD5 4fef56a643beef33c1d633dc0492beac
SHA1 bc1ef7b3b0b2e58770e905cb03a04fdd757e2dbf
SHA256 65ca3e2441dadd910a705147654c61010dd415bba8883c31fd053a8a92eebfa5
SHA512 e6816fc8b10f521c87eca9398b96f1c7388f70be9d6e6b44f164614f36a1aefeab43f048552b42be2ae37e3a9f6385f72132c845ec121e575253cab790a027d7

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db-wal

MD5 7b7936993d859b5733cb66421464bbd7
SHA1 0bd2bc9d4884d9e82a2424000fbd56fd6bf292e9
SHA256 b8bdc0ecf3afd0c93113613774f0d7c25251757ecf2e552bce8fbe32b0288929
SHA512 6644fadecebd71fb75f9c7797b6a86320b72de432f652264224252dbe43ff7d256824350015168abd75b3862c1ee6b0961a0ea2f9a3e0dad539c04f69a7345a0

/data/data/com.appsomniacs.da2/databases/supersonic_sdk.db

MD5 a91db09771ff00665e6840bb7dbe321a
SHA1 5e003ef59a94775ea119a2a0089f8254d403eb70
SHA256 0493feb1da39b6531b031ebd9a031629a12d13506e771888a0962250c011e0cf
SHA512 14b07c286e79e22e870f8b4f30e654b18fb70f32cc339faf5879e0d39947ee005bbc288612cc5cc7f556a2b46a0f9e232a0e1b40a82956a6e82a172b3625ea8b

/data/data/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_65e99802-8a72-4c5d-982f-bd35c9cdb830_1716457449042.tap

MD5 7b24d4fe53660a6b054cd5b215b27f45
SHA1 ae837e4feaa566afca501e2f8fa0bc12e0200e70
SHA256 2d8d7a13dfda6ce788d0cee4bd02963cf5700ca3c9fb14c6d9c114f8d87dafc1
SHA512 2663e74c5f7a937e9150724493ec9397c415ecbe4caf7e34fc242c49bbe343a147f8207809b00dd07a3ddc7cffac4eb600fde447dcb70ab681528dcaffce14bc

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-23 09:36

Reported

2024-05-23 09:38

Platform

android-x64-20240514-en

Max time network

7s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-23 09:36

Reported

2024-05-23 09:46

Platform

android-x64-arm64-20240514-en

Max time kernel

31s

Max time network

451s

Command Line

com.appsomniacs.da2

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.appsomniacs.da2

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 mobile-collector.newrelic.com udp
US 162.247.243.24:443 mobile-collector.newrelic.com tcp
US 1.1.1.1:53 config.inmobi.com udp
US 20.39.59.188:80 config.inmobi.com tcp
US 1.1.1.1:53 ads.mopub.com udp
US 1.1.1.1:53 rt.applovin.com udp
US 34.111.158.155:80 ads.mopub.com tcp
US 34.117.147.68:80 rt.applovin.com tcp
US 34.111.158.155:80 ads.mopub.com tcp
US 1.1.1.1:53 a.applovin.com udp
US 34.117.147.68:80 a.applovin.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 34.110.179.88:80 d.applovin.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:80 assets.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:80 img.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:80 res1.applovin.com tcp
US 34.111.158.155:80 ads.mopub.com tcp
US 1.1.1.1:53 sdkm.w.inmobi.com udp
US 20.33.12.142:443 sdkm.w.inmobi.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 pornhub.com udp
US 66.254.114.41:80 pornhub.com tcp
US 66.254.114.41:443 pornhub.com tcp
US 1.1.1.1:53 www.pornhub.com udp
US 1.1.1.1:53 ei.phncdn.com udp
GB 64.210.156.19:443 ei.phncdn.com tcp
GB 64.210.156.19:443 ei.phncdn.com tcp
GB 64.210.156.19:443 ei.phncdn.com tcp
GB 64.210.156.19:443 ei.phncdn.com tcp
GB 64.210.156.19:443 ei.phncdn.com tcp
GB 64.210.156.19:443 ei.phncdn.com tcp
US 1.1.1.1:53 media.trafficjunky.net udp
US 1.1.1.1:53 prvc.io udp
US 1.1.1.1:53 cdn1-smallimg.phncdn.com udp
US 1.1.1.1:53 static.trafficjunky.com udp
US 104.21.56.52:443 prvc.io tcp
GB 64.210.156.21:443 static.trafficjunky.com tcp
US 66.254.114.156:443 cdn1-smallimg.phncdn.com tcp
GB 64.210.156.17:443 static.trafficjunky.com tcp
GB 64.210.156.19:443 static.trafficjunky.com tcp
US 1.1.1.1:53 unpkg.com udp
US 104.17.248.203:443 unpkg.com tcp
US 1.1.1.1:53 eg-cdn.trafficjunky.net udp
PL 93.184.223.43:443 eg-cdn.trafficjunky.net tcp
US 1.1.1.1:53 ht-cdn.trafficjunky.net udp
US 1.1.1.1:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 1.1.1.1:53 hw-cdn2.adtng.com udp
GB 64.210.156.6:443 hw-cdn2.adtng.com tcp
GB 64.210.156.6:443 hw-cdn2.adtng.com tcp
US 1.1.1.1:53 storage.googleapis.com udp
GB 216.58.204.91:443 storage.googleapis.com tcp
US 1.1.1.1:53 whatsmyip udp
US 1.1.1.1:53 google.com udp
GB 172.217.169.14:80 google.com tcp
GB 142.250.187.228:80 www.google.com tcp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 apis.google.com udp
GB 142.250.187.238:443 apis.google.com tcp
US 1.1.1.1:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 1.1.1.1:53 policies.google.com udp
GB 142.250.180.14:443 policies.google.com tcp
US 1.1.1.1:53 ssl.gstatic.com udp
GB 142.250.180.3:443 ssl.gstatic.com tcp
US 1.1.1.1:53 consent.google.com udp
GB 142.250.187.206:443 consent.google.com tcp
US 1.1.1.1:53 encrypted-tbn0.gstatic.com udp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
US 1.1.1.1:53 lh5.googleusercontent.com udp
GB 216.58.204.65:443 lh5.googleusercontent.com tcp
US 1.1.1.1:53 cdn.ampproject.org udp
GB 216.58.213.1:443 cdn.ampproject.org tcp
GB 216.58.213.1:443 cdn.ampproject.org tcp
US 1.1.1.1:53 whatismyipaddress.com udp
US 104.19.223.79:443 whatismyipaddress.com tcp
US 1.1.1.1:53 ds6.whatismyipaddress.com udp
US 1.1.1.1:53 app.fusebox.fm udp
US 1.1.1.1:53 cmp.inmobi.com udp
US 1.1.1.1:53 a.pub.network udp
US 104.18.20.206:443 a.pub.network tcp
GB 18.244.114.118:443 cmp.inmobi.com tcp
US 104.26.12.133:443 app.fusebox.fm tcp
US 1.1.1.1:53 maps.whatismyipaddress.info udp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 1.1.1.1:53 d.pub.network udp
US 34.160.152.31:443 d.pub.network tcp
GB 142.250.187.194:443 tcp
GB 172.217.169.78:443 tcp
US 104.26.12.133:443 app.fusebox.fm tcp
US 1.1.1.1:53 optimise.net udp
US 34.111.152.239:443 optimise.net tcp
US 1.1.1.1:53 static.libsyn.com udp
GB 18.164.68.30:443 static.libsyn.com tcp
US 34.111.152.239:443 optimise.net tcp
GB 18.244.114.118:443 cmp.inmobi.com tcp
US 1.1.1.1:53 api.floors.dev udp
US 1.1.1.1:53 securepubads.g.doubleclick.net udp
US 34.160.128.112:443 api.floors.dev tcp
GB 216.58.201.98:443 securepubads.g.doubleclick.net tcp
US 1.1.1.1:53 region1.analytics.google.com udp
US 1.1.1.1:53 stats.g.doubleclick.net udp
US 1.1.1.1:53 www.google.co.uk udp
BE 173.194.76.157:443 stats.g.doubleclick.net tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 1.1.1.1:53 api.cmp.inmobi.com udp
US 1.1.1.1:53 cdn.whatismyipaddress.com udp
DE 3.75.28.93:443 api.cmp.inmobi.com tcp
US 1.1.1.1:53 sb.scorecardresearch.com udp
GB 18.154.84.63:443 sb.scorecardresearch.com tcp

Files

/data/user/0/com.appsomniacs.da2/files/nr_installation

MD5 7ef91a43fb98b8973a8a701e1b132214
SHA1 7b2ec76297247afc17b8b1bb3dfc39f7767a2131
SHA256 fb59a528a67d741fc90c8fb23cab4342a4fa7f9084f59c8e17d2ed5625b3b7de
SHA512 eaaeb3e0417a17cf17db401923055c166b7d1bd33de8b5491f3af39d91577c403d998e0e54015b1ffe52c147d3407944ba6c1efc72b2eb5f8c22dbc515402464

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068BeginSession.cls_temp

MD5 1ac3b3916b066f0d2dbd495272f395aa
SHA1 d9646e775d604b8f68226a1bc929010a686dbc9e
SHA256 785fa1cd5428a0a0ff056331e7b5a34d6e55e938d40f51edb077557ae9b921aa
SHA512 f5006076eb6ea0d28df17df2b4024b1a2532a326cf7c6dbe9cd4ffa2763b94584ed1b2c593ff23c1b9efd6e4b547c84cd2d4943b538f803bffcebb9a421c1117

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionApp.cls_temp

MD5 aa0850fc6bb8d0093ec043c6ad8f1071
SHA1 217f3fe76ec2da5a26a51a07520579819d48f502
SHA256 16e61e8f0f8a8128f18d3555d063b051c4f478b54fc101d0e4edd09f68086654
SHA512 c66d8e89fef2ac3183582dd28d480f7178f3c8087467f7d4d2c6f23da87e86822f10f942fe4fc669a11af8dbfc00f4467c3ea57ee09cf842ac029d77bd8c242f

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 d9aaa16fa7e95adf5d742491ad3766d9
SHA1 1eb76f7ea3921b3092b7d17da2c43768f32734e9
SHA256 8f3ea57c5823c1f38a3e0f1ad866bca5df913877b08e0e2ff984df71cbe24bfb
SHA512 82488bc0d3ef0ff646f8fea136dcbdb4f7f40b10346a53f8227d2e361b99f58e34e38c99179315dea5d20e52b91e6d1657a1e787ff6f5289c270d080a39784f9

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db

MD5 e082a577b0eaf9202144b220a1d5ba74
SHA1 64383ca5c11eda75f8a73483ce1766f5745c97ae
SHA256 39091cfbc1cf073d32db32c7a606b3a77aa6b8f31ef3c9ffe1050038662d7d47
SHA512 dea5f58c7d99804e552d0397fb9f0a38482dd4cb2fef52cdbd15ecf1d751ad0c071dc475e74f8c572d98ff2e599066db697cc10c7a26b71bcbb944f93ee545cf

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 1891751e451dc6c3dbb817a6969976b8
SHA1 6622c84cd727b4ae7d829ce0bb77c94cba839526
SHA256 81097715b8d5dd10ebeaa105332d4081ec36c6cfe1c721c758fb3baeef1a0261
SHA512 17882f5513ac543cf978b01fce03af03e9619a347858e247b0c824842a826d97296fbbf3181eb8eb972fbc8c88384460025cdcebcd10e0474f2e833327da33b1

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 f8cdb52218eb9eaf496d28e73938ec24
SHA1 3ca006c05e69537a2fe02616e69918916110ee30
SHA256 d48d5339d8f65427898160043e74c37c933935029ed186f6827b3ee656725f0f
SHA512 8bdc838e137d66f087fb58f8b6ec32820f1d0df3106d925b9c0cedb8ba703364ca74c5b83824b2718d865dedfe73d0ad71011c4eb8b8efec18acfbafc4e817b1

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 1901debbf938c8c1c88e45197928a678
SHA1 2c45933b323e853e2a54db7b5c2227df80ab37f7
SHA256 3d0d7eedc8f4674cd90b29b6ca25d0ffe9861b453ab13e9663c09cd435fdde9b
SHA512 65ec0a6c004527dcbbc19e05510ebf2cb82a7f0cd8ece9f1a92e9b4647006f28fa1e8733b70e0ffa7525402a51cd9360d0c1e243cea25e75d541f98424cb301f

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 7b6c2e8fe833f15aa41216e2f22d9a50
SHA1 47b23e919bc6282e3c01ac2554827ab6a1fea56c
SHA256 5e3ad8be00148c807e5ee612d9bf1bcd09b88e86b9e6b2b911ba8156fe6df788
SHA512 77d27bd74172fbade06fa3210c6b65369e7dfad6f0679f825d8d9febc738268025aa6d4019961df7b6effea11430db7b487dbb549dc746709b38de99aa88b023

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db-journal

MD5 a2e5b85a8e8c4bef8f334b64b9d6456c
SHA1 0c762e33b7d1c17ec90fb2c0cbc33d888b1a9a16
SHA256 d39a86a57c6fa51aaef69f526eb8b2ef114611043715e96ff3780dd088e26198
SHA512 1911ffc3d8c0a889597fa8c74acb9dcf623ba83378ebca3288f5e0a8a0fbb7aa33503b8a2c5a6c21f8cc4cfa58192c1a4c22900628ad29409e83a4379b2ef9bc

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db

MD5 cc41397c51d7cf40566de5688cc3fcda
SHA1 b86c6e0b509b08d9804b8432da94488b0e229540
SHA256 8b3ed11ef6c57c78d3293c7a4988e103f7671bd60f22bbcdb2975baebef30171
SHA512 ca2685f419c3f7600f70c225632222a85bf500f84e68529a468bdbee012a0c604a9f25d3dcee292a4e7823883529e01879ee3bdb05cf2ce1dde286ae83d38171

/data/user/0/com.appsomniacs.da2/shared_prefs/com.google.android.gms.analytics.prefs.xml

MD5 2604071fd44244bfa5acaec2fac807e8
SHA1 519ffee4a9ba2534f821ad374fbe08917cdbd54b
SHA256 db273166f1f939d77a57c2ee6ec9d6d79aea5c974e78b60dfe4ac733cef05100
SHA512 d634bfa41cb92cd17426ee9b06f317dffdcdacb25d2be3dd8df27f2f6f9a300f40c355ea6cf0ca5b13d00ff71962d7ce214e48f0ec7b840122e92d5214ec4298

/data/user/0/com.appsomniacs.da2/app_.gpg.classloader/d75c8e1bbeab9e1ddffb9d332585db71.jar

MD5 311be70af04aaaa7742dce5b874809bd
SHA1 4ac8ef4bb43ac432b2690c62fa96e3341564b51c
SHA256 fbfc5ed2ff5576fbd77d6eb57e3e47aea497f75db735985b44ab7ce2f17f518b
SHA512 613cef9f2a37540852d2286301b631d777f7ca31974872deaffa236c76574922a3d9c10fc3356aea943897ccafdbc7fd424ccc0611e37bd4c0d048f2671cb5e8

/data/user/0/com.appsomniacs.da2/databases/com.im_6.0.0.db

MD5 ffafd4e2bb6347387cc29b444813c1ee
SHA1 b2a684c39ef53eda0a187d61850976e9d6e73efc
SHA256 7464a2d0243b3acfd1eef4ed30a700e908221d7607d23f4577d4839e46c06097
SHA512 3905e2617c9d5de3491ed0c86a744fefe1779a832a50f9b32535d70a65623a4b657d5771273733e6f3a096957698b732c2de7c0de2eb333499fd75c7f54fdecc

/data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal

MD5 95ac1f9b94a866fe3660020561584ae5
SHA1 7b2e2fdce1e23fb411dd82dd52243988e44c3048
SHA256 f3e3ef60bb7882ab7d7a038299f945b35b63bcc37144cbef91d00ca0190b6893
SHA512 6b8a51d8624213023b0069d56f676aec5cbd15f780ce031de0509500946fd11775e4df1f8593cd688f49188fb9c3559223c166534f2a25f60569ffef9d8bf4cd

/data/user/0/com.appsomniacs.da2/databases/http_auth.db

MD5 ed710a8968441282a5939621c2771927
SHA1 b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
SHA512 547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

/data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal

MD5 9720aeef4f6cbb4379b39a7e728119ed
SHA1 4a0a27c2e6e333814c8225101afaa8b0911c9ce4
SHA256 06d29d3014d142af6bdda675f96e82645d98e2b890596ee81a9cf1c34bd87226
SHA512 c5e6ced23605f60c12b18be2df7f0dd10a2efde2bef4cfb1370b9fff578176d1c1daf9223d517f5d14dedadd909cf290843350ea9b5daffa15ac7853203f9e58

/data/user/0/com.appsomniacs.da2/databases/http_auth.db-journal

MD5 79b766f988c0f719e4b25c99215034e3
SHA1 b0939a6476f1872839dbda4a0ec170420c6c74b3
SHA256 bbf02c9dbeee6f2eda02a1f4a7e3f2d2b238107472d04124c4a3cf1e4956996d
SHA512 4708fadcc88d7019d883b726f79633ff8cf028d5ec22f5b280f607a2ea0a129044db045f0513bd857562dd4e7f51ac418fca40ef72c396a2f934cabbd58b5448

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 7b0824af7f2cb41a47427eb878d2339b
SHA1 cac9e026e35484fca3e9becef2815d052863b1f6
SHA256 d00a2470a22440dd1e38c378b6449e656fa19f9a82ce9fd3fa2586d877af5c3b
SHA512 dd29ee31f863f94525bb8f2342de1d5b3acbdfc350d7df53fe65da2a48dd1eafb61e584a1d59e58114408477a3c03630b26660306dba75f23e4a6a7a19e9bc49

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db

MD5 1b994cab8b15b9b60b9c5b0606f62849
SHA1 ac84964d6370451e75a94ee673dff41a354adc68
SHA256 404dfbd748a7edf8a07480f43c7307c2c469948b2f0cf2ed1b5ae4642d0da639
SHA512 f1946e52da7183a6b0a97cc3aac923bde69a22ff8b6b65815d87b78b68cc48cd7f4954ec68e961554a58badb3ff07b37d4e5e50dc7ebfc27c35148984ebcaf0b

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 6530cb438ce1ff875f8f03ead14a95fd
SHA1 92d21d6122502ed6b4dc4e0337d1222317305dd8
SHA256 0afc1996fd57f14a9fa5860669f1b1e4e6ad91df5e376c3039576850848acf4a
SHA512 71cd90e1d3cafd9be5da9083771489daa76dbcc6791c5961496d0f0bff247f1127be3b8a79373779745b17ad9bf982aea26a5d0091c8d6d083bc0abf18cf6c9e

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 462b11193fdee4a2121b7939395c9e75
SHA1 6ea075fa7a19901782c400989e9728bf8029f37a
SHA256 6f7fd7cba99ae26a141f6d03ea256862ddd5c0a5a19289ccdb2fcba31bd3b79b
SHA512 66342f7ee3026b89305496395d880f6edea08f1de8f2a6e4b211c3e49019369451c74f710a766b2da913544268ebf8e8a5500b5d48a32c783a5e94d916dadc51

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 e9a4bd1ca692f336d43da2f5643363be
SHA1 d135b3e7b45a5b28aa5ce1b41a1b0d368a9888ba
SHA256 b08cdad270b289443301f46b90c8c23da318c48995bbe8c75534a8dbd05ef5ae
SHA512 535c469120d3c03c99971fa13d427fcdf45db749dcc38c6e5cea6232ef45889259a657146def88d25c2c4c7325ae6f66cd15c6074d9675fa55bbaba95377b310

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 7ee00f6a9968c381fc5de13dfc8fcfa0
SHA1 45416966c6097c3de9eeac2117afe8a8228e1c3b
SHA256 5e2713f60ca31485e4d2197eaa99f3ee5d0af955a91ebbe65b15308f01d9c644
SHA512 95f707e70dea5be2f1373a729fcd19d0a4769290095c82a28b4b718e8bd97b30ed52bc5a2bc95fb2d7f36d51749983ccfd1327c8920c19f8555623a366abd058

/data/user/0/com.appsomniacs.da2/files/gaClientId

MD5 b74fe5eb778fcdc90ee2122ade34d99e
SHA1 91a33ef98e995d9d1e9ac84270e555aa3ec445a6
SHA256 850859f388a15e99be492689987955ac8ae9ec1a52ab3be83a94ce8943d9d7ba
SHA512 1578935942f794287b11c6a7f827164c9d6ddae375b3447a6d23dda5c9985b824de5a3d841e5a049bcb2e74731669d36948e643e002f64f86af259f579ecb660

/data/user/0/com.appsomniacs.da2/files/gaClientIdData

MD5 52d0ab1d43536d3f287aae9d8690701f
SHA1 556f6403cea1be54fd17643809b9defa11de8ebb
SHA256 07807569abdae473ec1e3544d9684ff8565be663f09520c659362ecbe590a37c
SHA512 25ba09684340c6bfec92e61086a9d993c77e4a94e5a547a8f8f63ef4db5a810ebd3fbba7602e44b86e3ec860ea5d2c4dee70d176598048568c718d63fbf647af

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068SessionDevice.cls_temp

MD5 680477477b2cb205ff4c21d1acf2e085
SHA1 33d71488e2d1b998f9dd466b1d378f44721c5a88
SHA256 2b7bcb2143ac88b86d95356a6491c03a5d836b5f9aeb1620c66223d10ef2bbb1
SHA512 a4b478d21e1795ed9ebc0c925bd55c22bdd43443ea5313f245789beca5d8600c51e9e6ea24b7ab1f5b0578e7f2cd972d447ab202e2cfd1d24c06aae951f8a7ec

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F0EB803B4-0001-11CF-C0443010B068user.meta

MD5 e9fc232a5518ecd2a9d6c0c53bd8e82f
SHA1 c214410a01d1b1dfb7b6273122afd7df33b71c5c
SHA256 1b9a99edf5032c8a0da18006c336d6f0c9a9049551d8dc5fdb1d587ce01e317c
SHA512 aea0238674e561ddcc4a6c597d82648e1ce5d6573ec8a3c13a59a30f5522583d7f8ee29e8310cfddfd7c9d3635fbae385cfc1105c7bda358a5215c7b52664fbf

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 cabf692451cc8e5d945658072ace4a77
SHA1 084a38b51bfd2df1069c3305fdb00cab3fb916df
SHA256 42f25ad238b231543eed065f40320108a08ccaf5767ef0edc5318969616bd3dc
SHA512 645d45f82196873442778d57fab46371aa4eed27e6679ccd8f830956d6228bef6eaaee4fd23ad3c6072ae342c5d52a58767c63c394f316f19df1c1caea9fb2df

/data/user/0/com.appsomniacs.da2/databases/google_analytics_v4.db-journal

MD5 d001df743b1833554f9a6c5478fd9450
SHA1 98d65a6bf0fc967822d85126eeb74229f48aabe6
SHA256 dfee2444634c9c20544e97921c8cc5ca58de2457a6872faaac39f798e3563161
SHA512 78a58d0996147d6e1032d338a414b553ac154f6e6397711aa67d905db1ace47508aab6b23129c4b12e34e5e9da7890172abb0a502908d0251b9638ddc02a0efa

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_22a3d605-5184-45dd-b37f-4aaba7802e49_1716457151616.tap

MD5 8882090ef1c8ba478c975c513006a4a0
SHA1 cbabdac65fda8a5f114e8f87e2854cf6e9dcba42
SHA256 8e36e78272a4842f5271fae3862b0cfd9f253d5dc3d5d17b7ea5c18373209978
SHA512 df621a5e558cb0933508ec837832c2d9eab4ff77c5dc7b08c8d6d1b01c20eec5f340fbaddb19b18bd740ce2279a8e24dcd85aa43e3438fdc3c6a882af499e107

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 894264a69905e3773ca3b3e413ea2555
SHA1 4018675d820ee7a9a8459655c313c49f0ce7d9b4
SHA256 fb87a178e58c963c123e5b7a75fa22b6a85a85d4819f5770a57d3a989124235e
SHA512 21ae536d071a8fa37e3b4c8893e83b7ccbb7a3fe89699d12fe42555907d05c8337db9ebea82214c227fcfc07868e6e3383ed5c79c8e93fd8e7722781edaaffc9

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c8d269e8-4f3f-4e6f-a727-f2236a51cbd7_1716457156631.tap

MD5 3ca4230fe93bb0341951ed433cc3e0df
SHA1 50f0377bcd8bb33d5b6e1e5887fb7e9acc1d4f64
SHA256 c68a524bf5ab9d0dba4f72041e5f1efd658530cc999a9916f457e5ee730f343a
SHA512 00274244d54d3fa911358c33ae9fe2d88e7739c5e2b482ff331a5f450a212652ca027de2bca86285d0af77fdc337ceb7e95f1f335453ae2e11a179cd3d70ac90

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_off.png (deleted)

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/sound_on.png (deleted)

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/1381250003_28x28.png (deleted)

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/o8136b7f_8468ec184d704b7245eb491f322a8c19910b2129_raw11.raw (deleted)

MD5 3de8269c6731278f9b008671578f7685
SHA1 8468ec184d704b7245eb491f322a8c19910b2129
SHA256 58876258778dc523b6dbdf5a534e54919f2402b964afce1b97b18bfe087264de
SHA512 e1d6413a9a039f5a2e4402c5bce4c40bb45c708b375631c88ac0b058934c964c1ad6855b969775c57f871f2407efc5cc0cadd5916952be98ed102274cc1f414c

/storage/emulated/0/Android/data/com.appsomniacs.da2/files/al/93371e08674b64643f2db488eaa3bf42e3bad401_v23_phone.mp4 (deleted)

MD5 c464a1b1c31bcd1e90234ce75a857a2d
SHA1 fe303800d2417feb67c4e3fe15e4fbd4c1afbae3
SHA256 1e47928c7a950e2121fb6799123493dc80db34dc30b9525fde4e10e2bea33376
SHA512 8edce4d8601bddd3ef9a1f71c7fe9e04669ca4be2d0c457d84339766c3398bd59e042430065f2d7057f264dcbf896c684223d23e8b565ca26db0435d303e5f9c

/data/user/0/com.appsomniacs.da2/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 ac9f1d30f40098542953ff1d8f28406b
SHA1 28fbce8d9090b15c2555fd20a913e1b80003cf5f
SHA256 b09fdd4f4f0982ecb8d45e986da7a6cbf006f334fc077f3f08469b3f8e8dcfc0
SHA512 fc6377247f9c9dba0ab6a04915b994ae920a8bd4c9470f0cb40243e57c0cf04fa56a59ef4d566902282342bbfc13dd72581a818029007b9a396d0afce1340d3f