Analysis Overview
SHA256
b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
Threat Level: Likely malicious
The file cryptoapp.apk was found to be: Likely malicious.
Malicious Activity Summary
Makes use of the framework's Accessibility service.
Acquires the wake lock.
Requests dangerous framework permissions
Looks up external IP address via web service
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2022-06-21 09:05
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS | N/A | N/A |
| Allows an application to send SMS messages. | android.permission.SEND_SMS | N/A | N/A |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2022-06-21 09:05
Reported
2022-06-21 09:07
Platform
android-x86-arm-20220310-en
Max time kernel
2243654s
Max time network
152s
Command Line
Signatures
Makes use of the framework's Accessibility service.
| Description | Indicator | Process | Target |
| Framework service call | android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId | N/A | N/A |
Acquires the wake lock.
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | icanhazip.com | N/A | N/A |
| N/A | icanhazip.com | N/A | N/A |
Processes
werwerwee.qwetrydsf.yfdefes
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| NL | 142.250.179.202:443 | semanticlocation-pa.googleapis.com | tcp |
| NL | 142.250.179.138:80 | play.googleapis.com | tcp |
| NL | 142.250.179.202:443 | semanticlocation-pa.googleapis.com | tcp |
| NL | 142.251.39.99:443 | tcp | |
| NL | 142.250.179.202:443 | semanticlocation-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| US | 1.1.1.1:53 | alt5-mtalk.google.com | udp |
| US | 173.194.202.188:5228 | alt5-mtalk.google.com | tcp |
| NL | 142.250.179.202:443 | semanticlocation-pa.googleapis.com | tcp |
| US | 1.1.1.1:53 | alt1-mtalk.google.com | udp |
| DE | 142.251.9.188:443 | alt1-mtalk.google.com | tcp |
| US | 1.1.1.1:53 | alt8-mtalk.google.com | udp |
| US | 142.250.115.188:5228 | alt8-mtalk.google.com | tcp |
| US | 1.1.1.1:53 | icanhazip.com | udp |
| US | 104.18.114.97:443 | icanhazip.com | tcp |
| NL | 172.217.168.238:443 | tcp | |
| US | 1.1.1.1:53 | xireycicin.xyz | udp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| DE | 142.251.9.188:443 | alt1-mtalk.google.com | tcp |
| US | 1.1.1.1:853 | tcp | |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| US | 1.1.1.1:853 | tcp | |
| US | 1.1.1.1:853 | tcp | |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
Files
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 20837fd8daf2a2de8d6c4ccd8e90653a |
| SHA1 | 7ac08617bd4585151c239325aea243d9eca586f7 |
| SHA256 | e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec |
| SHA512 | a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 5cb0f79f329d68334f33e63750d88a49 |
| SHA1 | 85428f62ef95c797f08ec410ba4fe84c91e817d1 |
| SHA256 | d79335b3b09224ffbb05b0a7d45d12d4bc1f2e7bd9263a7e5377fe3c1bc3604b |
| SHA512 | 039caa2de53e409b5b0db890149a612fc84bb726c9479aee85027838607d062feb6894fb0e24a2eb400b3917989ebf644153ad4fe83b0bd4632d74d3dac1569d |
Analysis: behavioral2
Detonation Overview
Submitted
2022-06-21 09:05
Reported
2022-06-21 09:08
Platform
android-x64-20220310-en
Max time kernel
2240056s
Max time network
166s
Command Line
Signatures
Processes
werwerwee.qwetrydsf.yfdefes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp |
Files
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 20837fd8daf2a2de8d6c4ccd8e90653a |
| SHA1 | 7ac08617bd4585151c239325aea243d9eca586f7 |
| SHA256 | e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec |
| SHA512 | a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40629fd218a1921144fccde51155abc1 |
| SHA1 | 259981316f38f3b538443eac60839b8b0268c774 |
| SHA256 | edc51de6ea378118e3aee11c10db88b84059deeaaed9434cfe4154d73b149306 |
| SHA512 | 013143b1efeca433127b20ae5ff045259ff19ce90729a66c218921d825293038747f5251043fd511533263eddb8f7ada758b75f62981044da872e2e5322b0943 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.device.prefs.xml
| MD5 | 712377113b5f65a63497d9e6cb7bfa4b |
| SHA1 | 7b7895b8467df264b803d0f178a9470df3bf05d8 |
| SHA256 | 08d15a700022c487d32faeed3fecb27730afd6ba3e92a1feffd929925082e0e8 |
| SHA512 | 4f5640b965489f5d6d63cd12365f0df7b8db72c50d3d1962947d6e6e82fb86201fd5bfb24f3b20bd19d935ad5ad1ea9815d7a4cebe89cfad063ac93d1815aeae |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40e6801daac7f1acd559c527a34cdf6d |
| SHA1 | 832ac9144f5b1d76b309c0228e63d0878e8a8f7d |
| SHA256 | a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5 |
| SHA512 | 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db
| MD5 | 8390c2b1be3f22b325d49a1b8d43e9d0 |
| SHA1 | 967d7eac4e7a34e76c93859061f20bdd415d2c51 |
| SHA256 | 8d40fa321b7d2238bad107a970c48604484817b8408f93eea1df484e5857d4ee |
| SHA512 | 0ce01c23b3b1403ab70dc0695fbc7568c9b51c5e0bd1686c19e99e37ae0fe354ec9aa476c1bd14d2bb3ad446269a2e6fd541d158156bd7467b3ec779ec67977e |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db-journal
| MD5 | 2d4ca27524fb3a6794f2a2d365b0e212 |
| SHA1 | a2f80823f230bd69921e93a6a330d897727d1e4e |
| SHA256 | 06fe1a9579eba9110b17e83023f16d43b3e5bcd58d37c9ef5a964592415dad5a |
| SHA512 | d65f09388f62d1d6b4d83666ea14aa2ce4b3ebb3ec38e4e1db5d1822e74e3422c6eb11b54af881a44dd934d57adf47cec193c16e9ef447dcdcd4de9eb601aadc |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | a44c2fb81476599162792952dc18e93d |
| SHA1 | 8b2dd43570ac7ccda7648c90f13788c1d507e51c |
| SHA256 | 8f27506efdf280d6a67f8cd3fd10307cc597e7dd40315f0cb100b171e432b0a7 |
| SHA512 | fe17a9cb751a4c4c7185e178b66a91e1113e4bddaa49429a0d36e1e2137a08d0bd8ec5531602debd1ae6e48a8e7a468d5b6ed47d8122608f755809d4b13f1734 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/files/downgrade_schema.json
| MD5 | 70435833064f71228d8d001901b56873 |
| SHA1 | 2d68b64360bb323366fadab675f387c74b42a23a |
| SHA256 | 73353cdbb7fbf2ee224948f35a950ad7bbaad5269b59471e690b34988ecc19e2 |
| SHA512 | fb7642c1c01aeacc3d5748b8be977ef272e7e9325cfd9e64b8638d4be84ff030cab8483a92ea677ffc246223df81e4b2c544e121943ac9acc8e79b6255b5b55a |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.managedusers.prefs.xml
| MD5 | 9781ca003f10f8d0c9c1945b63fdca7f |
| SHA1 | 4156cf5dc8d71dbab734d25e5e1598b37a5456f4 |
| SHA256 | 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793 |
| SHA512 | 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40e6801daac7f1acd559c527a34cdf6d |
| SHA1 | 832ac9144f5b1d76b309c0228e63d0878e8a8f7d |
| SHA256 | a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5 |
| SHA512 | 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db
| MD5 | 76cbef82d3b437bd45b75916cd149421 |
| SHA1 | 4e7269fabaf558b9bf478e961e93901211d74ecc |
| SHA256 | 7963d050e087872bc6b68543358494523653b63b4a4da5a46f3ff71f884bc5ab |
| SHA512 | a75bad1ac63eb07a64407b0fece0f056bd02585062d65b4fce6b8f3884c0ca26db990268d625c995db90bf6ebc81af5adfd03e6ef3fe0d0147b764e1aa58cd5d |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db-journal
| MD5 | f3b7f3bf6b30870569ce297a13c72bf3 |
| SHA1 | 293a0eab851a0d05649da13b9522d4aee278a289 |
| SHA256 | b83dac38b13c8815344ebd99992b33109a701add44a7b40be12a4705ce2164b4 |
| SHA512 | f56bdd2cdd0b105f23dabbfde09dfcb9814677a3f93807d55fa887422f8b04232d202d679abea5a9836523c5c4140eb2f8e9b89e788ed87912a9225704b7f26f |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db
| MD5 | e14ecf37ac4e0141a761e05e83c52d10 |
| SHA1 | 83beea637b3ed3071ad86337113ed3f911ef1f97 |
| SHA256 | 86c382b3414ef54712b27832b0f4f40d70fd34135e02889b3a37c24a2e1dfbe8 |
| SHA512 | 8d14128e4d7a75bced9aa9803fe80cb77277f626dba50206917527677d31ba07f086aeb53153bf5da6196e04ce357b9864305d7e0fedc0382feac4d95b845d97 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db-journal
| MD5 | 15ee619fc113d6c23b81832a0691a9e5 |
| SHA1 | 29f3ecf136c38e683590271f029bcd563f6b3827 |
| SHA256 | ff134c7d459b1937354f0d7a4bbd0342a340daa25bc5fecae2381c640bb814f5 |
| SHA512 | 4f557a3f909f2c02d30aa8eafb4e580cff32ede083b3b37cb89df8d488a50f79b4c5f025cfae251866e8bbabe9c012552825247a20ddc79306b923c5d4cb3238 |
Analysis: behavioral3
Detonation Overview
Submitted
2022-06-21 09:05
Reported
2022-06-21 09:08
Platform
android-x64-arm64-20220310-en
Max time kernel
2240065s
Max time network
169s
Command Line
Signatures
Makes use of the framework's Accessibility service.
| Description | Indicator | Process | Target |
| Framework service call | android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId | N/A | N/A |
Acquires the wake lock.
| Description | Indicator | Process | Target |
| Framework service call | android.os.IPowerManager.acquireWakeLock | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | icanhazip.com | N/A | N/A |
Processes
werwerwee.qwetrydsf.yfdefes
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:853 | tcp | |
| US | 1.1.1.1:853 | tcp | |
| NL | 142.250.179.138:80 | play.googleapis.com | tcp |
| NL | 142.250.179.138:80 | play.googleapis.com | tcp |
| NL | 216.58.214.8:443 | tcp | |
| US | 104.18.115.97:443 | icanhazip.com | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | xireycicin.xyz | tcp |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp | |
| RU | 5.101.0.44:443 | tcp |
Files
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 20837fd8daf2a2de8d6c4ccd8e90653a |
| SHA1 | 7ac08617bd4585151c239325aea243d9eca586f7 |
| SHA256 | e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec |
| SHA512 | a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40629fd218a1921144fccde51155abc1 |
| SHA1 | 259981316f38f3b538443eac60839b8b0268c774 |
| SHA256 | edc51de6ea378118e3aee11c10db88b84059deeaaed9434cfe4154d73b149306 |
| SHA512 | 013143b1efeca433127b20ae5ff045259ff19ce90729a66c218921d825293038747f5251043fd511533263eddb8f7ada758b75f62981044da872e2e5322b0943 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db
| MD5 | 95045c2acf741b5b882d1ba5e55f0b25 |
| SHA1 | 7c97b33fbd75fbe1ac2f35bb3bb9b043617d9df0 |
| SHA256 | e20491ccb0c8b34778a43598536ec49313a08eab1757847acdf16f3bc490a1a5 |
| SHA512 | a7baf7ad9f5883d540348fc23f181d135ad03afc0af8260c701f1601761ac8b62335d1587648034872110e0aaf3d7cfb419b633e93842d525668eb402d67edbb |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.device.prefs.xml
| MD5 | cc7677f1ef8000370125a5fdeba8276e |
| SHA1 | f756ca95e558b857a9bc2180c1339a2475faec6e |
| SHA256 | eab1c250c551613fe74936d8540339d24660417606d7b8d068516afdede23baa |
| SHA512 | 17587701950873136b29df172a79e0f1914935064daa163664dbe7b7ee331cd8c5f43e9421370a13461f0d943b715b1f9b6277ceb90efdef555624c1742b24f6 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40e6801daac7f1acd559c527a34cdf6d |
| SHA1 | 832ac9144f5b1d76b309c0228e63d0878e8a8f7d |
| SHA256 | a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5 |
| SHA512 | 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db-journal
| MD5 | 550d898f1c8f726e72a7ebe43d0a4931 |
| SHA1 | d1983065236732447c4fca5c46ebc47f6aa8ec38 |
| SHA256 | bb77c898465b78834208f42e13619d179c48ad4a00034af43377eea948ed41c7 |
| SHA512 | 63a1e4f86d1f6d8e02f452cf2e35393981d1e65edc8e4d6a1c610a68514ea3902f85313339c4f8005c9f0033f7383c6ad5adcb976b24f70217541b9b621481fe |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | a44c2fb81476599162792952dc18e93d |
| SHA1 | 8b2dd43570ac7ccda7648c90f13788c1d507e51c |
| SHA256 | 8f27506efdf280d6a67f8cd3fd10307cc597e7dd40315f0cb100b171e432b0a7 |
| SHA512 | fe17a9cb751a4c4c7185e178b66a91e1113e4bddaa49429a0d36e1e2137a08d0bd8ec5531602debd1ae6e48a8e7a468d5b6ed47d8122608f755809d4b13f1734 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.managedusers.prefs.xml
| MD5 | 9781ca003f10f8d0c9c1945b63fdca7f |
| SHA1 | 4156cf5dc8d71dbab734d25e5e1598b37a5456f4 |
| SHA256 | 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793 |
| SHA512 | 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/files/downgrade_schema.json
| MD5 | 70435833064f71228d8d001901b56873 |
| SHA1 | 2d68b64360bb323366fadab675f387c74b42a23a |
| SHA256 | 73353cdbb7fbf2ee224948f35a950ad7bbaad5269b59471e690b34988ecc19e2 |
| SHA512 | fb7642c1c01aeacc3d5748b8be977ef272e7e9325cfd9e64b8638d4be84ff030cab8483a92ea677ffc246223df81e4b2c544e121943ac9acc8e79b6255b5b55a |
/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml
| MD5 | 40e6801daac7f1acd559c527a34cdf6d |
| SHA1 | 832ac9144f5b1d76b309c0228e63d0878e8a8f7d |
| SHA256 | a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5 |
| SHA512 | 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db
| MD5 | b913c5077b4eb27051ff24af9a367bdc |
| SHA1 | f7e1ede0f8686b05ac865f6deac3fe68829bd5e7 |
| SHA256 | a51866efd189ca9b62dafb3ae6b15b9ae8d738e6a760037f1fb0cbdd02d55edf |
| SHA512 | 51fb33f3fb4a2602e35cb518e7862c837aa91ab5a343fd352536cf59370aec91618f96dbca74b3a66b000c9ece57a3b793623f887fb27243c69933e0e4d6b3a9 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db-journal
| MD5 | 02db05a1f7291999411ac2e163090189 |
| SHA1 | 8fc9a55829cfdfe0011ccce09544b548cb1aedcd |
| SHA256 | 2a0d68f3878b0038d44e9a9ad0e1af95d155bd9f73b9f74e549aec86e66f87eb |
| SHA512 | c7a5ed9e6a34e3833df0bca931b363c6b41b4504cb6d4eb45f85ff9b5f8903e83706beedaffc06563967d58b62cc5270d0782476466623cb3125f923752d92b3 |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db
| MD5 | 0678e6e6b1f4348088d4da865feed17f |
| SHA1 | bb776ff575af7d93e0d673a42a23072e74e06956 |
| SHA256 | 1620d357c5776920f359a8791327d4bb155107ee0b7278ebf8cd810595376d8b |
| SHA512 | 77b3dac14800fcfb6af4822ec77b0f85db66c626d72463e405fbfe5b90ae99a4a9096a877a08ccd5494e07d4c86e08be0ce9cf3d86af87445f7380e5730602de |
/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db-journal
| MD5 | b913f730ed536fb1346188731c863d00 |
| SHA1 | 7cfc2d05947178e1c8f6ba49f1077ee929160d48 |
| SHA256 | f8ddd234a3dc5b6979f7142980fc1dc3bd6e4d9fca95a09818bf761f21a5a1f5 |
| SHA512 | 16b097ff0098fd2092f2f869eff5c4c0d0dff5525b79d2a5b2329d43ad14e6a914e18cf852b59c3e2307be70d7d620bcc823c77a8649f328312190f25a764c24 |