Malware Analysis Report

2025-01-19 05:30

Sample ID 210819-v8mddtw1z6
Target 86924_Video_Oynatıcı.apk
SHA256 e9109889d12f015832c3155da91f13dbe08784d553e5df41687af5bed789a9dd
Tags
hydra banker infostealer obfuscation trojan evasion
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e9109889d12f015832c3155da91f13dbe08784d553e5df41687af5bed789a9dd

Threat Level: Known bad

The file 86924_Video_Oynatıcı.apk was found to be: Known bad.

Malicious Activity Summary

hydra banker infostealer obfuscation trojan evasion

Hydra

evasion

Requests dangerous framework permissions

Loads dropped Dex/Jar

Requests enabling of the accessibility settings.

Uses reflection

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2021-08-19 16:05

Signatures

evasion

evasion
Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2021-08-19 16:05

Reported

2021-08-19 16:10

Platform

android-x64

Max time kernel

1596818s

Max time network

276s

Command Line

com.vhrbutsu.roowdte

Signatures

Hydra

banker trojan infostealer hydra

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A

Processes

com.vhrbutsu.roowdte

Network

Country Destination Domain Proto
N/A 1.1.1.1:853 tcp
N/A 216.239.35.8:123 time.android.com udp
N/A 1.1.1.1:853 tcp
N/A 185.199.110.133:443 tcp
N/A 1.1.1.1:853 tcp
N/A 1.1.1.1:853 tcp

Files

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/tmp-base.apk.classes6903458164449220526.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/multidex.version.xml

MD5 bb20dbdf8cb8a2c4aa2f0b818583d794
SHA1 750e1a10f7a28f24fe1bb43cd499f0884d75795c
SHA256 af2a9627f8d2c8aee22a49787c11370c8ba72a379bb56721a6d9a6fe0888bb90
SHA512 c4c87cb9b5cb900556c11eadf8528e10f87dc3a4f34bf5997f3ee8511d733ae94b038a2485f502ca58033c08344c48286f740181ed11ce2e314677f2adb1f8af

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 08df60a2945b66167b9e7c50df7570d3
SHA1 cc94a65688ebe7f69b1fdc7beccd4a0dddb3084d
SHA256 6a2ff302ad5e3a5fbebfac0c85db6c78f67604bd78b809a51215b31d6590b59f
SHA512 bc6d5b5e5594c736a554b3ed9c9b507cc959b17c9952751e57a60b5c7f08c6a75d2c38403500a43eab1a1165f6b1e22e6e2b5de4a65072d1ef998457d272a6c4

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/prefs30.xml

MD5 12d6ab1d27552f5788e1667ec0eb1360
SHA1 f0c1a775a55b7bb45fe65579b526cf4360c0c4d6
SHA256 52e178aa40fd1c71b3a4e8fdfb73fba744ac754430d94697f4d2aaa6823c0d18
SHA512 87eb0dba3f5fbb8801a5b8a07849c8634698d64333f77d548f4596221d2f3d7cba7288ebb0fe0b7f9357add2636b07c6e9cd24aa887dd6cce6d22a1b7e2d3d32

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 8eeb640f108d2fb9f09aa2f0cb35f4dc
SHA1 8fbbebf439fb86c33883418de1303ce49641bdc2
SHA256 d4bda4ab0e675352057bc20e3b81a33a8f4bfdf3cc3c14ba5e4a0216619b7e7f
SHA512 63dbbe2f58859008c65d603137c1da4b7a7904d8f6ddc4d74ab07d09a83ee44e5464bd5f1dd8b41b11be0850a27723a7202fad6f3ecc14b950336c6596e915f2

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 009018845dfd06af55e2c62a84fcb038
SHA1 34858e8d0da7fb82f6275cd980a4a04ffbb4e58c
SHA256 3858472c260e1901f5cf13d78546c38be77f1e05a9a634470521cbff5cd693b4
SHA512 7c382389bfb2009d5d44ed4013510ecc998926fd4ceb3e0547d7f319a2c8e25074564ded6667c8a306c60b8c99a94ce447c9d9b9f0c2d5a536839f1c545d08f2

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 e1c0819291a17533f0ab7468fa6c18ba
SHA1 08e949a5175872b5fa0d9c31f5f5e2d451c257a1
SHA256 1dcbfd167da4594793896abd7b13ff463be89dfb22736077212763c358e1424b
SHA512 24178c6b61cf4702af2d5ee074c1a3d921f07d34c061f3b19872b33bdce56bac5d4482d0a2558fc735f161e7088e0df38f309277ba8493f8f5940cc6374a2318

Analysis: behavioral1

Detonation Overview

Submitted

2021-08-19 16:05

Reported

2021-08-19 16:10

Platform

android-x86-arm

Max time kernel

1596846s

Max time network

21s

Command Line

com.vhrbutsu.roowdte

Signatures

Hydra

banker trojan infostealer hydra

evasion

evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A
N/A /data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A

Processes

com.vhrbutsu.roowdte

com.vhrbutsu.roowdte

/system/bin/dex2oat

Network

Country Destination Domain Proto
N/A 137.220.134.18:46322 tcp

Files

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/tmp-base.apk.classes3553328596705164831.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/multidex.version.xml

MD5 1fbeb3561db410bd5043dc11011b4f42
SHA1 dc2a4a33d65055414a09cb28f2b65d45ae3d9f57
SHA256 dface8b22e45bdd8d31849c7796a82a4405000f8acc76922413e752e465ea3dd
SHA512 f18dfce3ae2855a77d3f168b35e7670bd0555b8d2be45db90a3f20f6303d980b73c824f80f7c5da8d4bfce71348a64e4161757624fb6958a80d6a1956a3f35b1

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 882d3539d4d3cfb14f7b1b1619863748
SHA1 d33479184eb86303d3d1e3a5b451fde8f6a05417
SHA256 522dd68da0e33e1a976caecc641c1854c5a0ce4ceb13e47e8fab8e417d4bac45
SHA512 ab109f9be275f4a35ee1a415a014ea97949a19912739c3a375e0754e1834961168f3f2477fc6be02df4c768643826cf22ef25e8dda90b3a4eda31b1005693c9b

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 851f040e3119b9a684d93aac78356579
SHA1 591f67ceb996db688b0d2989f042abacf8232564
SHA256 4112f979e9dc1d58bc40882d81c37907f21ec758e735ac1a0d85e9c78c7ae9d2
SHA512 71313fbff9b8b26e54c07fdb555ea065e9201d5242659e6404b154329723d9168f2d3c8b8770c4c9eb679870769435294681e2c504fb5272442db4df0a1128ef

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 1fb873d4c4a7f32666c9494cc74c55fe
SHA1 1bf8b2a51ab5c6210a08e166e074cdd422b642ff
SHA256 7d781336570aa919752dbe017a2f8a8020c45d3832bdb335ca49b7ec4f0430b2
SHA512 969e8a88a6b0a6076b354d3637e3f5cb0672243d1bfbd7a6fa70a949219980edfdf9f065135535de8acc724f4a9378c6c12c7092ed9760fbb06a966a0b39671d

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/prefs30.xml

MD5 1c6b6a6a91f2ccf7ac553f9a439ad69e
SHA1 270b45bc1c3255f95fecf8bfa85f7dbfc8fb5748
SHA256 a7958ee3107cac53056bac67328f317cf9e3aaf4533e1072f0c4f0334ebbffa6
SHA512 8a61fcab1bc82977f72af693d4a749ad41df81a9a9c6eaafee0f4ffd36a34f069a259c6b20046a8bce58a6eab526df122cb82e8d093be73cf5ff9d41e489bf8e

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 1d450a0ce8f0d549d94fa2576f8d347a
SHA1 b18c42ed9c1eca9c901013de85cd12bcbb1b7190
SHA256 b28bdf3e50f1b5f7c53c3d3db7a6e6c2ea4b0bc350233505594016cfab065709
SHA512 d7f92e528cf50f39e54fe5f229308e0a4317114069f255e4ed17679fcdaa6f7b26b7dba2d91f100a002e86854613350d95ac3953cff9aa092b3c135847c53add

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Analysis: behavioral2

Detonation Overview

Submitted

2021-08-19 16:05

Reported

2021-08-19 16:11

Platform

android-x64-arm64

Max time kernel

1596575s

Max time network

342s

Command Line

com.vhrbutsu.roowdte

Signatures

Hydra

banker trojan infostealer hydra

evasion

evasion
Description Indicator Process Target
N/A N/A N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A

Processes

com.vhrbutsu.roowdte

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
N/A 1.1.1.1:853 tcp
N/A 142.250.179.202:443 tcp
N/A 142.250.179.206:443 tcp
N/A 142.251.36.2:443 tcp
N/A 142.250.179.195:443 tcp
N/A 142.250.179.206:443 tcp
N/A 142.250.179.206:443 tcp
N/A 142.250.179.202:443 tcp
N/A 142.251.36.42:443 tcp
N/A 142.250.179.200:443 tcp
N/A 172.217.169.14:443 tcp
N/A 172.217.169.14:443 tcp
N/A 142.250.200.46:443 tcp
N/A 142.250.180.4:443 tcp
N/A 172.217.169.34:443 tcp
N/A 142.250.179.232:443 tcp
N/A 142.250.187.234:443 tcp
N/A 216.58.212.202:443 tcp
N/A 216.58.213.10:443 tcp
N/A 216.58.212.202:443 tcp
N/A 172.217.169.38:443 tcp
N/A 216.58.213.10:443 tcp
N/A 216.58.212.202:443 tcp
N/A 142.250.187.234:443 tcp
N/A 1.1.1.1:853 tcp
N/A 142.250.179.195:443 tcp
N/A 142.250.179.195:443 tcp
N/A 216.58.212.202:443 tcp
N/A 172.217.168.198:80 ad.doubleclick.net tcp
N/A 216.58.213.10:443 tcp
N/A 216.58.213.10:443 tcp
N/A 142.250.200.4:443 udp
N/A 142.250.179.202:443 tcp
N/A 142.250.179.206:443 tcp
N/A 216.239.35.8:123 time.android.com udp
N/A 172.217.16.234:443 udp
N/A 172.217.16.234:443 udp
N/A 142.250.187.238:443 udp
N/A 172.217.168.200:443 tcp
N/A 185.199.110.133:443 tcp
N/A 1.1.1.1:853 tcp
N/A 1.1.1.1:853 tcp
N/A 142.250.187.237:443 tcp
N/A 142.250.179.195:443 tcp
N/A 172.217.168.206:443 tcp
N/A 1.1.1.1:853 tcp
N/A 172.217.19.195:443 udp
N/A 185.199.110.133:443 tcp
N/A 1.1.1.1:853 tcp
N/A 178.132.78.156:80 jannatedge58.xyz tcp
N/A 1.1.1.1:853 tcp

Files

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/tmp-base.apk.classes6207349440568762581.zip

MD5 d76fe1c1dddad2a8125a6e779509ea95
SHA1 b8ee8267c46f2f0083afca14385e120cbe7e7b5f
SHA256 35bc197d193ce3bd382cafb7cb966f6f5cc756097f2ad39834d86ace5beafa08
SHA512 064ec71266de4921d8a2298cb7e663b2918f869602427151dce6da276f93f83a4ce6a8277310639234945dc7c4bbcf48462f6716494d0c8d1047cfe59debda5d

/data/user/0/com.vhrbutsu.roowdte/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 70807430dc7b7a5604d7789aabf3472a
SHA1 914caef8c743f8c31b88aa7d135f708802632f63
SHA256 51ae52921e03707e3832c80662b9bcc276ab4034e2723123e5cd462713e2e9b8
SHA512 65f18ed2f9302e27df84b23f8e41ee40d0779532784021aabe286a3f40790a453f0ff07b6dda918bd13f5aea604191ee736e176f2a795cbc03483d230fbf7981

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/multidex.version.xml

MD5 e8dfe3f56de9fc83b72f3657affc6d47
SHA1 2c35d9f18237449a812ca4f4573f472e8da091c7
SHA256 660770cbba9a7b94e112b5e65387cef9c4f153e1d1da2a0de1be1f3750d4fbb9
SHA512 f8fad397c6658799f153f7fb7066a5c2991a0a58486a54967d24e3e71a26b54f81d4c7d202d14176ac803b4e578219c97ba07a342f8334b5b396d6f1da7337a5

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 e22891fe4be7049a3ba193c2432b9f6d
SHA1 e477b1ee3528edc790eba4708267d375feb36324
SHA256 90c2a360779f45aa236ef62ec74cf5212e3b3dc1b3887bb37a61eb7cac0895cd
SHA512 732c777f28535965ce256960b03d37c9e62b9af6fc398003b350bb0bb9b4540cffad0e8147b73af3b74228776ac56f830caa9612de91243c9ad36464c6b4eea1

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/prefs30.xml

MD5 1c6b6a6a91f2ccf7ac553f9a439ad69e
SHA1 270b45bc1c3255f95fecf8bfa85f7dbfc8fb5748
SHA256 a7958ee3107cac53056bac67328f317cf9e3aaf4533e1072f0c4f0334ebbffa6
SHA512 8a61fcab1bc82977f72af693d4a749ad41df81a9a9c6eaafee0f4ffd36a34f069a259c6b20046a8bce58a6eab526df122cb82e8d093be73cf5ff9d41e489bf8e

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 5f3a39d17c633680e598958c7c138c7d
SHA1 6449c969feee8fb9c125092e9a15e1dd0214c846
SHA256 d303caea4b692c546260aaabb2bba25cfcc8d2cf389da67379ee4f21f54b51ab
SHA512 38c73e1f0dd401ca6acbf1cd42da223b9c9d64c209c9b402e09123a68c96992de5670edbc5a07e04ff64964391c1cb7c25e168634db6776decde460b739314de

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 93af96df46527485b0ed723515b87fb5
SHA1 8522e9ac29b35e744d70a8b88192166b2a6f4454
SHA256 0de46ff2c269a1bbec97471fc85ce490071f253931bf7f46fb3ff67e6aada314
SHA512 24978956143b8b90c53e76cde6b610d20745005c0593d61c60d6536de535049e4d20d3b6914c4abbb05246cddbe9aa49883fa91eec1324b8cba9f5f6a76f1e58

/data/user/0/com.vhrbutsu.roowdte/shared_prefs/pref_name_setting.xml

MD5 49b78bd6adf622f5d467eb00d5a4222c
SHA1 db01dca9bb7b9c55d3823a62b2626e096046dc4b
SHA256 68a53eb6c381f5972562e00abc67fed3c3c7bce92a716f2df41ac4cd9570c8c5
SHA512 a82c7d5c28b12af748bffaae7a7a4340e9cc407ecbe482d468452d00c3f9d4bc69f0f25ee9c9f55811cfa573598ba4fb7d25eede3ff60d56cb23b53f6a749c1f