Analysis

  • max time kernel
    3962145s
  • max time network
    56s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    28-07-2021 08:09

General

  • Target

    Google_Play_Store.apk

  • Size

    4.1MB

  • MD5

    c964e7894329592360aff35b7b23205e

  • SHA1

    cfecbbb47621aae31c38dd3627731362faf1638b

  • SHA256

    e3242bbd0a14045280fe57c7eca7c16a332a79edf58662c3e4ffa825bf78568c

  • SHA512

    439c8bc169dac94fedb73c2e8c77c09d6cd0848765ec6ebe41fb49464ce6b48c1c3dee7c925da34c2b91a39604b0365eddba8fe60cf5946c0bd7128e51f30bf0

Malware Config

Signatures

  • Alienbot

    Alienbot is a fork of Cerberus banker first seen in January 2020.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads name of network operator 1 IoCs

    Uses Android APIs to discover system information.

  • Uses reflection 8 IoCs

Processes

  • damage.found.shrug
    1⤵
    • Loads dropped Dex/Jar
    • Reads name of network operator
    • Uses reflection
    PID:3606

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/damage.found.shrug/app_DynamicOptDex/oat/ygDNLCw.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/damage.found.shrug/app_DynamicOptDex/ygDNLCw.json
    MD5

    d0cc1d856bc60542ac6bbd8b52f219ba

    SHA1

    42e30dadf7bbb78e547e412278b51f8803a039e6

    SHA256

    15c592305a47f5711e95708cd693b06ad287e2bb554a1ea27035aadba26af0db

    SHA512

    bf7398b9fd56f374959b26a9f3aece8c951839f159ea92cd244cefbf064dce3bd722777697d87f55da6e2c703289a30cc8b6f2e90432af207c10829ab91f53bd

  • /data/user/0/damage.found.shrug/app_DynamicOptDex/ygDNLCw.json
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/damage.found.shrug/app_DynamicOptDex/ygDNLCw.json
    MD5

    3e37b15fde55e703ee0f4554398a2550

    SHA1

    9532871ca0013e8bb09e906a12b72d53da4ede59

    SHA256

    cd8e0953fd083ad63eca7f5a5e65bd19debd20784414c3dcc9895a3cc06d6e23

    SHA512

    80515c06b687f23212e9390a5f2be4842be7efb6e1996f79ecb6877ff683161585a2bb89371558b9debb5ab3a7b53da3dd5549baaae0e0d0379a2bbab0ec43bb

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    b246cb895561ee58e2034983c8183b70

    SHA1

    e737bc9d58e971c56e43d4241a4f16811a47a277

    SHA256

    0481d8ff40c216e880ac02ef6591dd87eccb71e23e22052865638aa3ec913153

    SHA512

    ef1dc1119553c149f6977054c385ac0a708831024f683d2a902200b0454ea3a2574a157daaf1e96058be2149c236312b6b223366101d62f937270c213ccca738

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    8d602076270f90e772647a9b855a96e6

    SHA1

    9679889edcf2c004b306e057751be151062b7a1a

    SHA256

    cacb442b855cf1b4e85aa87dd685e3d51bcd39a984ea0e4646eb77be6482157a

    SHA512

    35c11bac3cf84fc3ebfcedb881dd3899d875ce81adfbb7e8b738c7cd3a11d4ea59fdc421f56b8d9e7d6263d6d8623a227aaf2750b9d7381e3ecbbe3cec4058ea

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    d90dbc2101f0bca01c6de272271b03a4

    SHA1

    8a01ba821eb0d3a971b5dbf8c6e41239953c4902

    SHA256

    b4c7e6822068df1d616b36fe8c0e87c78f2311b1ed2c0b08d7391828fedf77df

    SHA512

    75a80d7ab331742c48bad29023270c6bb4f9fc430c043a1967579a7a5e5e9e412b746a2a786ffe58f3f5e88f7db7b887174b90b9e4df1d8bfac9d9adfc6445e5

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    633da8857a38d9d52c60a86657c3b54d

    SHA1

    168dfee6daf21809b26065bff7cc9f601bda36ac

    SHA256

    bf2bbcb38a09aea295940bb05ddbbea218708c652927e9c6fc9b0bc7878a6848

    SHA512

    eb01440d951da24cd9020a804dc127e824fed976dbeb1fcdcc77c133ceadef2f7f7371f149ca070dbc236a3279ce94daf32f9657dd428d066be63dba0d05aecb

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    7df4c94b179cf37d079752d5825677fb

    SHA1

    6bb8fe4cfeefff864a75d4780db988b7739eda64

    SHA256

    c50327605d678866efd782ce486b822955a5171af0f23b2551dbbe81736cce36

    SHA512

    f4385ea89a3724eb0e01c06fb1a99a48dfb82ea820c3d8d45e5afd5a892be6838159a70dedd1033e259d3a8788a93310d8e29aef4b52330563032b20f3297680

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    25c0f103bcc3dbae810a7603d692cbac

    SHA1

    c5a6de7ef871724a474f434ab499d9059a016d38

    SHA256

    8ef17e01faf511dc7a97a2f0ca320262d9fa991591d20fa80faf65925366ef4a

    SHA512

    48df58d1df589f7b5588f3db1971cf4607a641b82f50c0164192520e4473d21c71d76ed3e476d9c5ef5549455f16be3893ee13b5c50df4de97dcb4e34bdd9dc5

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    595afff5ce7b69f60edc734afa9f5289

    SHA1

    10afe7db69afa4ddc757bd98aaa43887bb3dbb4c

    SHA256

    b58607ad8cc7746ecf1e95bfaec749326967eeddfcb3733c6ca11d17d2379f7d

    SHA512

    741baa5118076cdd7215543cb1f0f34787ead1a14338ab9c1cc551747e02e8f01c25bf435da95ae99fce3f9e1691c60aef1e5cf2b1553de4167387aad46787c7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    886b5c457f586e1e357281f1ced83a5e

    SHA1

    e2981e73f0531cacf15b85154f599f84d43f6d9d

    SHA256

    1b97d191288de817ffee423a34b74b6b52a6ec0d0f6c29ea5e75752df76c0bf4

    SHA512

    e478f57ba9f6524093d2e3888a7275ec34976f8434d2d42edb38d533109ceed6559f2518b5fee01cc7c9cd6784b9015785465dc8ff6806615f4e254d580269a7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    28e325889de9f7d7757795ff276f5328

    SHA1

    d34cf1c9073c39723d2a969c43802f3fffee0344

    SHA256

    c7e4217012494f8771edc371e2362a4a051f88b2d19a4a394b151c2f88e3c430

    SHA512

    5dabc1f8e630b0d5db7d282ff366e5491e8116dbd0bb8bc0ba9932a7c702e75e79c0294a0ab4a3779a2981867752d05c96e4f2675914d547f6393058eb1e7a82

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    8d042c0370f90185c1c849dbc201d68c

    SHA1

    501e7c5b803d88538ae463d1b302a3fb411ede81

    SHA256

    2dc94fbd0c6882c267215a1dd60003b08882a0df4dc81c130f457c3b23d90ae5

    SHA512

    2439accf7170c519869859a6edf6f3bba00ece23ac85b1259074f81d8e5298f47883e8abb2c90b3aa78b1df959c8e6d72d3a700c561927b0997964cb1ad9e5aa

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    0d5d440a3753f541c4d37864f3c7672c

    SHA1

    1348b68ccf3768de88a46784fe9f00feb91f4f54

    SHA256

    034fec5eef9842ac2045ae0dfc7973c5c3b85630cb37adb7851cc4e0e110045f

    SHA512

    f7e19b2bb89a80c42b610ab44f7d537abe119cf010075ad70effbbe3388cee715b1d6a8531a90152912d31ff539fb345c9900fef8d0d95ed183c4dc61ca86867

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    33add9d25fca02df1e34c2c67f5d1b57

    SHA1

    0d7165274a895c4f24c0e0e140cc3d14da13ac28

    SHA256

    64ad39641ca0ac89f1fc622390b8c74109fa32801fc9c103157787c18849b2db

    SHA512

    e56a489a816d224f80ee9c2d7818cba9393ad4fa57d21c9085c854f9a47a2df363ae1681deb53c1a458755f55f727b2e34cb8d5ae47342007afde469461166a7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    f86acf08c8d30bd87711bb03e69f1d7e

    SHA1

    ff4eb6c7b5bc3bd6e8d6cabfb373fb4e2dbe6878

    SHA256

    7f6ca9db98cef4b8755b284b895440a6811330a6629bdbf6316822334166fb7a

    SHA512

    f00c734ac03b0366419112b80cafa2b63139bc26e03e7d970d9b6adba7dc173da4f92b2c12b11fc5e831956e506c6c7ae6d8ed68294d58b696455cc56a63dbd2

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    bf208d8efdbbb396598317a5f793c6f5

    SHA1

    9712990c1651b0f5fa98a5550fd483520f7a5402

    SHA256

    df986418e5699e6c700a556e2cdc80e15d4c04b4ec6911f110e321a9f3b4dc8f

    SHA512

    9a22516abc0fcd4a92c28f7697f127c21d421f916653363fed9adc389aa1e632dc826ccde688524a15aa2d9931b24df58dc51f6cfd1d0bb4a783c52e70cf0fa2

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    f33ad66c1ab695fc890d985343595ea1

    SHA1

    0a3be2917f92f05e5f1ab4a86556b449aa79f260

    SHA256

    9db0121f51b29c85cf1fa2a39336f705afcae2576a1a8495b5d1c37ee5bf56a7

    SHA512

    704964e8790db1506f6c39cf8272ada3d18bc7cab3231a976ddea6f0a35c669ca44fe702864e5800b0eea5f428d1ae9a4fdda0b13f2f3d12c7dd2ce56a8e079e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    f94eba00c032f168b61deb0a17df7ed1

    SHA1

    1db8628820dcecb3551da408de1a82d4d7d37c85

    SHA256

    ad2c1067b76e69aa0438afc4834b5bf8d6256ccdc1dd992e50331b5901f7dcfc

    SHA512

    e7d2101e9ac7e6ad88980fe73aa59390733b57fe651aa8b01e05e3dc6e573c6a27300ee3f03bb8cc5e3180590b887099efdd91012dfe20c39ab707df7144728e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    b735808111da2b2fb2743d38b5396990

    SHA1

    f647128b20135a2f67449cc05a6e3acc4e4795d7

    SHA256

    9247c4b6c1cb471d9860f23ecdee17858cc2b237cf16f91a4ca4f9f60175a097

    SHA512

    2c8a83b4e9081799cb6b84fdc48b36ba166795eea780f732d4e8a4aef7139b9dbca6c684060853d353d3b4ba900c14cc38040d0c81981f2b5f35a8f39b14c12a

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    bfc29d8bf3f94a49b7d4ec18d6e0a15f

    SHA1

    67e1ccccb53da893d2a79b88b944e8e6106f7f3c

    SHA256

    9c1d68576501f6031011f10481ac43a7515c1f6e09cd6da6061732f90425c1ee

    SHA512

    df0d2982c6ebcf97840b8204d5b50fbe7fca18375beb4fb0998da8c177a69585da9ba4943076c5a7b7df298e72192a39e295407cf645670e014c1f1de3477a82

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    ce1356ed3226f5c74aaef1fb1cb9d352

    SHA1

    406334f4d7cf6c7fe7b1aadf12c1cec022d75e6c

    SHA256

    43562f07c15e71f31b6a738dbb693b08d12401845abb049531a7a068e919fb33

    SHA512

    94e5e372e35f3d8c62d62b723b276e0b68bddf60aba29b63b6501c17ff2baa7c2ae384b0c1546da2bd86a6b817c71d5893f67efce6004f0241d7d66c05677454

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    15f8c6f93f7bb80f72393d885cba1127

    SHA1

    9592912c8b112d1558a6b769edff40328aa06fb6

    SHA256

    4fd98eea0fc1ade302fbabd33369cf7b65f96927aefd1c32c85311164ed98f66

    SHA512

    2002c5c4eb764d64e5c1e8b4efc2786e0591470fdd89fb80c0286995c16eb398c6867bd1ad12b7dc01fef9b504bd44936476599cb202521f8132874e9c7c901f

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    119c04a76d4c6da62fc06554a5750aab

    SHA1

    a82b165f391e6b7d6ee8c9fcf2e54b36d709bcbb

    SHA256

    db863267ee59e56c4348f1e9a792297b612702b6641b3a6cb7cfaf1d9fafdf2b

    SHA512

    e404c509651feb1e04a9abbbd8d48787e6ff2e97a7e75f3176b43611da4537ced867cfaff115dfaa2abf029732e1657e7616254913815e13b547ebbc0a6a98ce

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    471b578877146fe1773a9dfed81b9d58

    SHA1

    dd71deadd0fa1dca72623794518f2550dc5b1bd6

    SHA256

    401f73b1de05bac291112bbecaa55cd8fc82bb1ccb4bfc74ff38474c56805f32

    SHA512

    6bce28ef42f17cbb68b18399844528c68071ac50a2c2290cc3b004c4cc2e979c35f743cbe8bf6f947b9fbe1e6f03cc25b54c9606e47f8d2dde15b8674caf5630

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    ce5864c20f9d1873735c46e1c8955de7

    SHA1

    2f46a20630731b2a1c0934701e4e27db915592ac

    SHA256

    58becb70f4bcc560dfef204a331a942932bff15de3ba2fbd7587e8e1508eaedc

    SHA512

    c1957be16a47baf80fcb04750471173209640acb926b1281028d341abff949c2d692e97053d7581132767ac1ba1defe9c957de95131807233ead922d3f2b849e

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    10480e990fb3382d45b36634ba7e1270

    SHA1

    64d52f2fb8e70cbda63b4bad9ac3b4ff89024675

    SHA256

    b480887121bed06646523da590488c9c130dd4aa94288fc29ab30e82c3b0c281

    SHA512

    02e9a9379f65fef86079184d26440a1295650ec24f47374f5d419c070caf3bc56a69a78f288b3b4b6a6de27a0628a1d864251b9d1de6a86e96e9d3d4ae0fc906

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    f2091de4f9b9f021abbfe83f5deaab7a

    SHA1

    7d77a0dd764f94f92dfc314e9211ea9d5476bc0c

    SHA256

    de27893f7152d47d3ccc3aa33af99e5fcfebc01929b5459f1dd3e84ac9835ef5

    SHA512

    f3270de72b354ef4b642617600882e8f450e664a41fa1b969e3abfd5f718d388e3896d9db7f515610a07d81ea0cabe7376c883293d7ee073e6a1ce67d7111d02

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    9067ed45f3e411d3d122a265d16dffa1

    SHA1

    3ea43d093f6e0ce5d8438bd1321a840f15654c61

    SHA256

    e014f819a755af34008570952adc2fe89475938a11e214647ae2cda18643834d

    SHA512

    0850578b87d966d683ed36584676f23dd1999cd604531bcf098b770a018706617f0945473656dbb84a727956e4bf9f421f281e1b3c68a93ad9920fb2b59e6e5c

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    7fd86927344c5242ce24b5b62b8a24ec

    SHA1

    a542eff4954a06592c10096273266f0b5fa991a5

    SHA256

    c417708e77fd9f184065a07977de16e5cc0d5d2df80586897670c3482a006779

    SHA512

    4033d091933fde1bab2e127daec4225d7be275f36c04e3a2dc3c2e013e1d9c08be3ba94623c052876720306cdff84708e84d0310a14f506fdb9f27a6546ed1a6

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    599912df4df2cd731b4353d40c5f5c69

    SHA1

    ee3f3c16c00607163545631974ffe8cd845f0608

    SHA256

    cac5b5ebcc91e06acf6963f494d8f0e56081b93a763b84854862d8f6de2757f3

    SHA512

    d63dd8763d92096042cac843819cfef264534c43e9acb65fce4493f3f3a9c4a8c4d956908f962cc23aa33297bd3b236f908cf8c2886e9c4df5f80495a79d24ba

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    0e4b06a91ab1a3e865f5419c29223950

    SHA1

    4be4f5f7465c03c28cb4da878af276a769633f45

    SHA256

    9ed6f98f13b0cb7292bfd82aa81b3436cca33594f68f27af7a83236829871807

    SHA512

    224e9266601c8d70e4feb6da1c54a577d215c6379c053a0b8cbefeb189c4c7bc865c141945c865c12e4b7576388efc60250075368b1b86c82e02f5a8df7961f0

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    f4b79b11d52604ebcf5d73cd0fae8732

    SHA1

    d6c82ee9853c92ddbbe08db880bd3a504b8888d4

    SHA256

    82388a88aa8745f480ff09e1913598ab4bf66fa3d6178a83afd4b7f86804ee7a

    SHA512

    e840fd58e7eb16179ee235a1873eff0232fc9732594d65240f403e9b81be5d303715aa2f2ee5d775cf0df83a34256550cc2d53bc5e42d78311e8d0e24335e2bf

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    2f5a396ea473e0e2678edfbb0d5d888a

    SHA1

    f22a67212d70fd19574d35fe73966d520bf4634c

    SHA256

    3c3de01244fc60142467326fa03a0e6d769d369a574848c4c6f692a44d071b88

    SHA512

    131529eb7ad741cef3777a53b1c05a4c06576070df96b88b49993fec44baedcedc00b09b450b7bbad9554284ee6c623a209c08b15723c517860c424e85c38b77

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    ab87d93d9486c79c0a95535a07334b0b

    SHA1

    21db60e5c64b32de67f66545f7f487d527e7a8d1

    SHA256

    8b16f6d3560471e3897033779649c9c851ffe150a36af972aa08c48db564a2b4

    SHA512

    2c831d06431e571e7c6dabe0eea5dc3f9254781c7b5819cacb2dcc7cdab8c0a9985e4662d18f219aeb85631bd3f5ba615b774f5402425dedaebff53509ab9a78

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    457813da37a8ff4b9680827ec6615017

    SHA1

    0a23a92445ddcb100876ae43ebd9d54375d10101

    SHA256

    7f27faa98360e6ea2de5aa64c743bffddfcfac0842bf675c96414b11561cf1db

    SHA512

    7e6d9f79cab9a787311f3cf7993f6517223f5f277dba8ecb4006e649d2f6a06fc96ed8626730cfeb4c1207da89cc6b177e8eab4e1ad49580ecd6a4039f50c243

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    7a639014d3b43494840dc9ddffd7ada8

    SHA1

    c128d644da5e0d2d5279b2c5cff125f2780dd150

    SHA256

    6d1e13e338bcfa6e98e52836a92e61b93c8f118f8e6eea8887174d55ba4ac984

    SHA512

    a3b3caa781bec875f56a005eef1340f5b91acd03594bb2954c6ad29f8c85367d7b2078e5d92193ba9424a26bd105cd981a020ce58d0fd2848ccc786bb3d89ce5

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    cb34e5945d67e16192d467f10768ec9b

    SHA1

    dd8e53ffcaba9ddff002c7dfd7fb1bf0748bb205

    SHA256

    9adc1b6f22b2a420ad2c3cd8d83020bbf64cad735f1cb5461fc9ac20c6c1f048

    SHA512

    811a52c9022099fb10f34555f91e434e4b1a0073c3bd6898981e098c56e1ce596ba8f975a71a5a585bfb08471aeb4e8b00a4013369b046b480ebe20171acf20f

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    8e3ab43fbe6d8e4f88a59114d175f072

    SHA1

    c278a8da2b94b5624e2cefa9cf4dcc8303253a22

    SHA256

    0cffeccc6846cde9a9245f60e1e95dd9b964fe34d2baaeacd91e4513129207d9

    SHA512

    6e5bf218d910cfa8030c6298b9b8c056fd42f2406445bee877cf17500ad8b5f2e344ba6bbfb2cbe80290b332c7b710fb2335ac9f8471887c72b3a4fe3f672ceb

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    9f06fcdb93eb94afab469e4ff3df24ec

    SHA1

    7a48570c434ae405672b486aae75933f34fe07cd

    SHA256

    d08c81b92c12eac5b25c0655a7a8436d094a40c7ead9aa8de4b96d98baac7c14

    SHA512

    b721cb70d3d3e1f4996024222f9c6d82b91885126e55bbf76a8f22d657432debc2ac0de84e87b10f4be721cbcdcdf4b62f4c6d4c1ae158f1ac9cc21dfc6ead1d

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    c4b7fefae0053194d0bc5b4eb96ae701

    SHA1

    eee3ee4d35702da5c762e209fd42d87856828edf

    SHA256

    badbeed6100af12df41a887c2adcd52aaaa3de3edc7fcc1f44da22d6b6f214ed

    SHA512

    8ed97c410472cc8df6ec3ba254dd028cfd67aed6d3faf3643f60c5872bb44689ba765a2c4d2137b59534baf4a705acea27991ff0931a41a37da9f99fc15945e3

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    53e148ca1056d3999d498cb075791e1f

    SHA1

    8d17bb4f25c6b4a29737806b883d515dd83b4c50

    SHA256

    a25b584419ffb79d26a45504a79f8ae3c1016258a0535c281e8cd12cfb2a7ec4

    SHA512

    86fecd5e15fe9fac24af2a28170e54c57d5d6a1e0b7631380e5f13b98cedd165318e6e1dcdb6837c09e09702cf2a4101ed657723afdf970841c66dc28ddbc474

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    b73bae8d038c1b9e0b00061094dc8b57

    SHA1

    d8486a76183815a752f48bb9e41620183b85899a

    SHA256

    bafa3689a3fc166e0689817e1060786878ae727f53bc52315df78db8f7c7a3cf

    SHA512

    5b8d2bada6253dc2487c198089aeca6912d00a817c0ca54edc0d4c3fb4384138362262526ee55bd7ec636ae93caed89349cb303b980479d24a68fcd8dc4d9685

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    4369cfb2f47f59772b7fe249e0c7bd35

    SHA1

    46ffcb18c5584c23fcb2e7df9966637a70bd43ef

    SHA256

    1526659b4cbd4db0f163bc3e0a93c8019bc7afedba3fcb6a80057b1975cbaa08

    SHA512

    85753522cd9fc4966ef714c7d3980dae754cffefd9187a1f2e1b2e5f69f4a13af566d00a2b28625bceb1b267a3c37e1166399236c47dd1d4585d7d1009422233

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    40445e6e050069e9bb9ea16306384ea7

    SHA1

    91e8b2d7b0da71c43a3f6c97575e7e6ccda4714c

    SHA256

    b829a70963b097229229805e7565c43aa3cd0939b93ecdca47393f05bbc5ec22

    SHA512

    de5523a99dc734a3b5bc80f2115b6024cb4f818ed0e071cf350ae94bca7cff7e561d1bf7be2c22d9d560b5ff11fc03627c1afb2f4649c8efe32f258fc9231e32

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    a4dcf02e294052d9f6e29a461802ecd4

    SHA1

    13f1edf7334ae8683724de216f6116a3e3a240ea

    SHA256

    6b7e3c9fe5a384ba3d0f908099f96f11c4b9b003181e42569a24da350fa3fa01

    SHA512

    0c0352fc7f36c0e2c906f04e19408576c80e5b704de730500d0b142de69a271e4d00c103c927a52a23279be45a9bdc4a52971e4543514e1f6d21247822b63422

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    9604fda409b09ef505df847ce868147a

    SHA1

    1e2d99019b99ea70934406115dd0b31d6d0670a5

    SHA256

    b087178917ba273834b116f76b16ef242b8fa760f46f4b1d553eb6dcc94fe363

    SHA512

    ed6e353c81bdb85f1809e326d299f33cb3e945a56801e48cf81812a0649d0c245f204d79aa6730c6d1db2130782d183d8fedbafbf0599ea2e0468a63abb70ab0

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    3001499e67207fd72b5c86f5b1ce5136

    SHA1

    61e583aec66a801e60ad1e90e92e818e4a32045a

    SHA256

    9c2fdc88ada6cdda6016971d0082c482deb22c7f558ff27d2ee711fe701e4531

    SHA512

    e118d66ea41fab97bb747cb52a6b5e1f1e31092292046da8db145d82d59341386e6ef241c08a13446858d8bc07e4bb06d558f21be20041513d7b4d8365a20b23

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    90dd5cdd0f2e55e69ec75096047b29e6

    SHA1

    268a6ef5372245c7f2f9930d4f64a8e38568ce1c

    SHA256

    dd23b83f19fe52d8ed5a92fa13a3aafb91c3497c2f653409aaaeb9622f504972

    SHA512

    058020b1d605b4c7253a6c19dde96966a16fbe8e8cb89cd526e67ed6992cfeb575804d4904e67047d5db3c65f27261bbd446f9e8894533bb9c8ee683c5269353

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    16573f05f06adaa9211c7eb5b0ace6a8

    SHA1

    b11125679406b514ab26e69bdcac634acfdc69b7

    SHA256

    a226cb14262fef7ac35e24d10b1d9514426a27e18e24daff2cc185430ffd224c

    SHA512

    f305df222285110cf53bfed61fd50264ec72455c8b7c7716496830777be771d928182612bbbda90e0779c73ed5c0a25c84bba972edc245f0b53016091030318c

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    6317f031257911e12cea46d38c162439

    SHA1

    bb52b56141f15d6f3e0539a304106482531f4633

    SHA256

    2c4f04c55cf2dad519a3c7e4ad5b23a97130a788b8365f684cbb496228ce5c8d

    SHA512

    0da9f10f253049787064e4c06dc7ddc27709c0ee486b799fb7518ddf75d8fef2d487592cdc90c4b22a979515750d491e76de9ee89a490050088c200e0c5fce08

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    6317f031257911e12cea46d38c162439

    SHA1

    bb52b56141f15d6f3e0539a304106482531f4633

    SHA256

    2c4f04c55cf2dad519a3c7e4ad5b23a97130a788b8365f684cbb496228ce5c8d

    SHA512

    0da9f10f253049787064e4c06dc7ddc27709c0ee486b799fb7518ddf75d8fef2d487592cdc90c4b22a979515750d491e76de9ee89a490050088c200e0c5fce08

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    6317f031257911e12cea46d38c162439

    SHA1

    bb52b56141f15d6f3e0539a304106482531f4633

    SHA256

    2c4f04c55cf2dad519a3c7e4ad5b23a97130a788b8365f684cbb496228ce5c8d

    SHA512

    0da9f10f253049787064e4c06dc7ddc27709c0ee486b799fb7518ddf75d8fef2d487592cdc90c4b22a979515750d491e76de9ee89a490050088c200e0c5fce08

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    0437584b8a9fcbfd098a861f2814b81a

    SHA1

    7671751095f37c5ddd330a4cf44cbc70ce203277

    SHA256

    a96b609fc6dd5a46918e0ec6fbeff2f3290e5d47cc86d217ee856eb83de66e0f

    SHA512

    561b63f6fc563fc63842f7a7a1956184b7c9560ebe02189231372ab9cd9a4ae08a3f954d85afb42758258836261192f5990b8995630af5a247b779d3b6c6f7c7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    04c80c23e01be8fbc349639dd77212ee

    SHA1

    8a8b8d35c2c7930ae8639b45269c46ac902d43f8

    SHA256

    01e6e46f5e50de59ed2a5bc3d594b201a6631353208c5ce63f23c650ed055324

    SHA512

    59058ae2090a9237075463041fb237c9c5086f1942eb7de5ee133a3dd3d938dfc89f356093e73c4c25f4f0a579ab2f9d6a467b004b0cff64d448d23957fb117f

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    fb02e83d563a7de9a4d4df7cdfa663a6

    SHA1

    682d9427ee3985221df88896210b3fe29e2f66d0

    SHA256

    d772946060e188607c967039caa23e63372b28e3685d4c868f400dc90deaa419

    SHA512

    0d3b70f512c9c8203f6e9ea42fb0fafd588c4cc40eb070cb2388bcc69f35bf5c4950c56624428f6846e91b97729540794d7950bcc5cb0d2491fa672e613e5a91

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    0fad02d5d9f2df1ff9c0972e7b06a100

    SHA1

    34625b5ec450392226f35d3ab2e478cae69ea26a

    SHA256

    f6c07a1b9ce65c222d60b79b8baf2f7cce287cae61c4bd3bae18bd2804e5eaa4

    SHA512

    ac48e5c6cc079f0f2e1656cb1360b828675893ff4411d5ea45a187b736e3d6692f4bd803d24dc6c566ed026bbf427453058c1ef717d848f70431d2a8e739f011

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    a2be78c98cb5048a35cc698ae7b47819

    SHA1

    0ed4012b2ea3cf9ad75b74effc0dadceb2653b2b

    SHA256

    cd6d1e37979eecbb43bb99dfbcc5710f07196e88bdb1db520a62f621829e7822

    SHA512

    efaa781ee0b136fbe35eb271c7ffaf6527d36a169c4cc7947509da348f6dfcdddc5828ef34c4c7df27929b8c6c479658161675b2b086a0d8b2fdfb6b5ea64334

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    14527622fb82e6347565ad12b9c4835f

    SHA1

    cab41af6a246d39f7d977255e0eed736e1db2d0b

    SHA256

    8b305416f23735e363907cac83cbb7d111a5610bd3548b28bea340ddcafe2af5

    SHA512

    5398cfbb122d4d9c89945ea4386be3c7ae7ea0ad13c64999449d7896d2c5be650f6f6898b1bf8a0d0ba0a139ac95968bcdd0579b42e684b81a121ee72017a84f

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    90971a2e5c83bd45f66d55b038fe770d

    SHA1

    854e1c7996aa992063347a3afc437b2fec34f0db

    SHA256

    e7a21f83377a4f1cf00a484ac294c2d7d6ecac7f93d4a01a0580e5ac5fbd346d

    SHA512

    3691736ac44fb97a360d21c841711ca984c38373ac5192c02e3358f7770ee9a95e66b0e2d9a6785c4071ce04449dd4f76804d5f01dea7581a66d785f445b5d8c

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    85c00d3d7e4c956827faf60d2d269dc7

    SHA1

    4c3ab50aa58ea7a78810f9f75f9747b3bfb2b94b

    SHA256

    e4f7eaff2c43ffb94f4e39124e279884f9f05101533e32ffc2347ebe53e7ff26

    SHA512

    8f846c57d9f91623140fc1680084566adc9bc7d120bc44f353faef9d0b7e4a794de929a89567badcfe86d580eda55bd84afd516be9a479371b71bd68d480e2e7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    00222f22e75af578f8dbc28757486ee4

    SHA1

    ccf3423ecc0a3acbb0e9c70128d1686bb5989b5a

    SHA256

    9b13b1a08a4bbe1c962e2cfa7ada6ea8d7700d21c709cdeab5fbb7df11621a34

    SHA512

    ecfee33127a8a54a5e8069befa90bb8e219de84c759ef1ec857208d8bda38125533077d466e6323b7dff05cff625e936f386e29f4f4fef42a545ea9fe5bed415

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    b355a841bee68f3a15ab5b6b9668dc84

    SHA1

    61ca9139bcad921f137fdf8f941658e916ca11c4

    SHA256

    aac6cd757e1808f3514088699b5307ba2e0c3027c55473cf577076df5a7363fc

    SHA512

    057d3e23f9ea4396e368ac221e2be5ab60ac8540429054ac04eb65a6cd37f683d1b96d191aa5323973af0be3ad8d7017f1e07daa3521214f2952fa2b0df1c29c

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    2650c77a87cfb4bd05c67f2bf6bdc264

    SHA1

    57159d3d529e0861ba4b614f3be548cdc1fe5236

    SHA256

    b0e06333ce57cfee3bba2d03cc4bdddfff09ab6bb704e48c57b20dc1757e451a

    SHA512

    03c5a60ec154614b10b765522ca8d6e5d70a56de9a122185cb63671b9c3eed51680cc3f91bae39839746b9a9dc507fdd2be823fd404aa387d490aec73b5d59c2

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    fbab51c92e2bb02561fcfa322ebf5986

    SHA1

    c8495e923fa6dd47b66d29e3d27c5cdb14c2de4f

    SHA256

    25a359d6290c91e1f7ec8399caaae4b12b1235d733f30747a84f665cd7563361

    SHA512

    6061a67efe994b72ae5c872179a02596e9cd7ed87e59e8c9f288344391e3389dca2277d1285051f249c1c2936d687b66bb1d36853c7dbed1b60afe8805d6a7c7

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    ea40d2db06243fd32fd2670bb327adfb

    SHA1

    f91e5235ce508ed50406e96ffecb586e5a8f15d5

    SHA256

    7719331328e5da8e4e22d3f71d8a263a524ef5d92b50887857d16d9d6ef63565

    SHA512

    c16a8e3c446508f257d4d63479e7bc14b95356eab0bf6790350a6e0bd7c8fdd1be9a1fef12d3c19b9a3d59a7d3fe9182b2572b24c8d69c101648a0874f358f42

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    7b0e5810d6d7efcd1d58818fae5fde7b

    SHA1

    2bfbe0e5828c5b77d30bfbb802a21eb3748e47c8

    SHA256

    8ff0d89ee6ca7b09af159b3ae4297c9e6632446bcd58a2aaaf1f78bb0534abe7

    SHA512

    5c2ce4dc140520edc41fdc02786c36626e14d004b1c928b020e4e2e301bdad5d567062f0cf61bbc91aa602a45a477eb48776174f06d67b5297dac59ad2df3552

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    a07721fe64f8f12e18079dbc291a4061

    SHA1

    05f6b77c5bd185a747c541f2f70ab1db5ad591f1

    SHA256

    d5d7b93ee78d91964e63b712cf399f70cb767765650de04a21fdace12c25e892

    SHA512

    6fddd44fc86d3db8e4cf0efcfeecc9ab6dda9a0ea52092d50271c0dc0d5271576dd8a17329e2c4a70796c088474c12f3d8205329a0c9fc5149fd4fea58fb4f9a

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    5bb24a71440e971caeeec2386b986883

    SHA1

    3ea03a4ade2c636b7de8046dd93f4378c3dbe858

    SHA256

    ea60b819f2c4efd264430e68f34203c645aa500f971485f8a5848ebd6f27f34c

    SHA512

    551e484403b251de0fdfba54c6c313b20826bff427d5da600d3ebfb2ceb318d595aee527809a87bfff0db2b92dd7bb56d755c399e425ca41814f06562a95879c

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    71cb1e1849fefb3d50df1d0e9d7dbff3

    SHA1

    04164fd7268f0698ee900b39b0f1e8fbbdad2852

    SHA256

    c11c6a08bbb15dda85a592618f9ae03d189f2d26b2f7f439504938dad2dc1d74

    SHA512

    c0ba29ce912f4724a300c2750c2c602dea4a6f6abc13b117c8a4caef20cdbe2fb184019f479e206583f0a714c586257e252a752468cc1dc0c9fe0674d6ab56bb

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    d239229331d6abc2866c22efdb2ead0e

    SHA1

    69f872f6f336e4bf1992db4b269a43c60c182584

    SHA256

    29f9d99ba9eeba9a40d606492e2e8b6b8d144336f35732c54f3d3da522219f27

    SHA512

    ab5464827ba5c2b562ea90650b986b435ed51820053907c54b9efc993d081e176ea3c54de0089927ff4c0f1a0cd3958291dfbf90080d4c9fc663a24f00fff7da

  • /data/user/0/damage.found.shrug/shared_prefs/ring0.xml
    MD5

    701786fca3044ed5bb6d6a6ec13ba853

    SHA1

    af2d7cb28445e0b13ccfc4cc3602e9a6c3b9ef82

    SHA256

    a8bdc194a8503311013787967001922b2619ec4bbd92f12639b5c013074847d9

    SHA512

    9e3acb9118955cf26806fb4c9ba2f9f47322bb5ff24678cabd95f9c60bdc8cb35152318d10a5a33ac1bcb2d006082967fd28fd3cd02ffaa034348a8b556f807b