Malware Analysis Report

2025-01-19 05:32

Sample ID 220621-k17nksegh6
Target cryptoapp.apk
SHA256 b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
Tags
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490

Threat Level: Likely malicious

The file cryptoapp.apk was found to be: Likely malicious.

Malicious Activity Summary


Makes use of the framework's Accessibility service.

Acquires the wake lock.

Requests dangerous framework permissions

Looks up external IP address via web service

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2022-06-21 09:05

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2022-06-21 09:05

Reported

2022-06-21 09:07

Platform

android-x86-arm-20220310-en

Max time kernel

2243654s

Max time network

152s

Command Line

werwerwee.qwetrydsf.yfdefes

Signatures

Makes use of the framework's Accessibility service.

Description Indicator Process Target
Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId N/A N/A

Acquires the wake lock.

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A icanhazip.com N/A N/A
N/A icanhazip.com N/A N/A

Processes

werwerwee.qwetrydsf.yfdefes

Network

Country Destination Domain Proto
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
NL 142.250.179.202:443 semanticlocation-pa.googleapis.com tcp
NL 142.250.179.138:80 play.googleapis.com tcp
NL 142.250.179.202:443 semanticlocation-pa.googleapis.com tcp
NL 142.251.39.99:443 tcp
NL 142.250.179.202:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 alt5-mtalk.google.com udp
US 173.194.202.188:5228 alt5-mtalk.google.com tcp
NL 142.250.179.202:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 alt1-mtalk.google.com udp
DE 142.251.9.188:443 alt1-mtalk.google.com tcp
US 1.1.1.1:53 alt8-mtalk.google.com udp
US 142.250.115.188:5228 alt8-mtalk.google.com tcp
US 1.1.1.1:53 icanhazip.com udp
US 104.18.114.97:443 icanhazip.com tcp
NL 172.217.168.238:443 tcp
US 1.1.1.1:53 xireycicin.xyz udp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
DE 142.251.9.188:443 alt1-mtalk.google.com tcp
US 1.1.1.1:853 tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
US 1.1.1.1:853 tcp
US 1.1.1.1:853 tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp

Files

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 20837fd8daf2a2de8d6c4ccd8e90653a
SHA1 7ac08617bd4585151c239325aea243d9eca586f7
SHA256 e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec
SHA512 a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 5cb0f79f329d68334f33e63750d88a49
SHA1 85428f62ef95c797f08ec410ba4fe84c91e817d1
SHA256 d79335b3b09224ffbb05b0a7d45d12d4bc1f2e7bd9263a7e5377fe3c1bc3604b
SHA512 039caa2de53e409b5b0db890149a612fc84bb726c9479aee85027838607d062feb6894fb0e24a2eb400b3917989ebf644153ad4fe83b0bd4632d74d3dac1569d

Analysis: behavioral2

Detonation Overview

Submitted

2022-06-21 09:05

Reported

2022-06-21 09:08

Platform

android-x64-20220310-en

Max time kernel

2240056s

Max time network

166s

Command Line

werwerwee.qwetrydsf.yfdefes

Signatures

N/A

Processes

werwerwee.qwetrydsf.yfdefes

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 20837fd8daf2a2de8d6c4ccd8e90653a
SHA1 7ac08617bd4585151c239325aea243d9eca586f7
SHA256 e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec
SHA512 a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40629fd218a1921144fccde51155abc1
SHA1 259981316f38f3b538443eac60839b8b0268c774
SHA256 edc51de6ea378118e3aee11c10db88b84059deeaaed9434cfe4154d73b149306
SHA512 013143b1efeca433127b20ae5ff045259ff19ce90729a66c218921d825293038747f5251043fd511533263eddb8f7ada758b75f62981044da872e2e5322b0943

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.device.prefs.xml

MD5 712377113b5f65a63497d9e6cb7bfa4b
SHA1 7b7895b8467df264b803d0f178a9470df3bf05d8
SHA256 08d15a700022c487d32faeed3fecb27730afd6ba3e92a1feffd929925082e0e8
SHA512 4f5640b965489f5d6d63cd12365f0df7b8db72c50d3d1962947d6e6e82fb86201fd5bfb24f3b20bd19d935ad5ad1ea9815d7a4cebe89cfad063ac93d1815aeae

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40e6801daac7f1acd559c527a34cdf6d
SHA1 832ac9144f5b1d76b309c0228e63d0878e8a8f7d
SHA256 a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5
SHA512 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db

MD5 8390c2b1be3f22b325d49a1b8d43e9d0
SHA1 967d7eac4e7a34e76c93859061f20bdd415d2c51
SHA256 8d40fa321b7d2238bad107a970c48604484817b8408f93eea1df484e5857d4ee
SHA512 0ce01c23b3b1403ab70dc0695fbc7568c9b51c5e0bd1686c19e99e37ae0fe354ec9aa476c1bd14d2bb3ad446269a2e6fd541d158156bd7467b3ec779ec67977e

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db-journal

MD5 2d4ca27524fb3a6794f2a2d365b0e212
SHA1 a2f80823f230bd69921e93a6a330d897727d1e4e
SHA256 06fe1a9579eba9110b17e83023f16d43b3e5bcd58d37c9ef5a964592415dad5a
SHA512 d65f09388f62d1d6b4d83666ea14aa2ce4b3ebb3ec38e4e1db5d1822e74e3422c6eb11b54af881a44dd934d57adf47cec193c16e9ef447dcdcd4de9eb601aadc

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 a44c2fb81476599162792952dc18e93d
SHA1 8b2dd43570ac7ccda7648c90f13788c1d507e51c
SHA256 8f27506efdf280d6a67f8cd3fd10307cc597e7dd40315f0cb100b171e432b0a7
SHA512 fe17a9cb751a4c4c7185e178b66a91e1113e4bddaa49429a0d36e1e2137a08d0bd8ec5531602debd1ae6e48a8e7a468d5b6ed47d8122608f755809d4b13f1734

/data/user/0/werwerwee.qwetrydsf.yfdefes/files/downgrade_schema.json

MD5 70435833064f71228d8d001901b56873
SHA1 2d68b64360bb323366fadab675f387c74b42a23a
SHA256 73353cdbb7fbf2ee224948f35a950ad7bbaad5269b59471e690b34988ecc19e2
SHA512 fb7642c1c01aeacc3d5748b8be977ef272e7e9325cfd9e64b8638d4be84ff030cab8483a92ea677ffc246223df81e4b2c544e121943ac9acc8e79b6255b5b55a

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.managedusers.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40e6801daac7f1acd559c527a34cdf6d
SHA1 832ac9144f5b1d76b309c0228e63d0878e8a8f7d
SHA256 a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5
SHA512 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db

MD5 76cbef82d3b437bd45b75916cd149421
SHA1 4e7269fabaf558b9bf478e961e93901211d74ecc
SHA256 7963d050e087872bc6b68543358494523653b63b4a4da5a46f3ff71f884bc5ab
SHA512 a75bad1ac63eb07a64407b0fece0f056bd02585062d65b4fce6b8f3884c0ca26db990268d625c995db90bf6ebc81af5adfd03e6ef3fe0d0147b764e1aa58cd5d

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db-journal

MD5 f3b7f3bf6b30870569ce297a13c72bf3
SHA1 293a0eab851a0d05649da13b9522d4aee278a289
SHA256 b83dac38b13c8815344ebd99992b33109a701add44a7b40be12a4705ce2164b4
SHA512 f56bdd2cdd0b105f23dabbfde09dfcb9814677a3f93807d55fa887422f8b04232d202d679abea5a9836523c5c4140eb2f8e9b89e788ed87912a9225704b7f26f

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db

MD5 e14ecf37ac4e0141a761e05e83c52d10
SHA1 83beea637b3ed3071ad86337113ed3f911ef1f97
SHA256 86c382b3414ef54712b27832b0f4f40d70fd34135e02889b3a37c24a2e1dfbe8
SHA512 8d14128e4d7a75bced9aa9803fe80cb77277f626dba50206917527677d31ba07f086aeb53153bf5da6196e04ce357b9864305d7e0fedc0382feac4d95b845d97

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db-journal

MD5 15ee619fc113d6c23b81832a0691a9e5
SHA1 29f3ecf136c38e683590271f029bcd563f6b3827
SHA256 ff134c7d459b1937354f0d7a4bbd0342a340daa25bc5fecae2381c640bb814f5
SHA512 4f557a3f909f2c02d30aa8eafb4e580cff32ede083b3b37cb89df8d488a50f79b4c5f025cfae251866e8bbabe9c012552825247a20ddc79306b923c5d4cb3238

Analysis: behavioral3

Detonation Overview

Submitted

2022-06-21 09:05

Reported

2022-06-21 09:08

Platform

android-x64-arm64-20220310-en

Max time kernel

2240065s

Max time network

169s

Command Line

werwerwee.qwetrydsf.yfdefes

Signatures

Makes use of the framework's Accessibility service.

Description Indicator Process Target
Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId N/A N/A

Acquires the wake lock.

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A icanhazip.com N/A N/A

Processes

werwerwee.qwetrydsf.yfdefes

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:853 tcp
US 1.1.1.1:853 tcp
NL 142.250.179.138:80 play.googleapis.com tcp
NL 142.250.179.138:80 play.googleapis.com tcp
NL 216.58.214.8:443 tcp
US 104.18.115.97:443 icanhazip.com tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 xireycicin.xyz tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp
RU 5.101.0.44:443 tcp

Files

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 20837fd8daf2a2de8d6c4ccd8e90653a
SHA1 7ac08617bd4585151c239325aea243d9eca586f7
SHA256 e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec
SHA512 a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40629fd218a1921144fccde51155abc1
SHA1 259981316f38f3b538443eac60839b8b0268c774
SHA256 edc51de6ea378118e3aee11c10db88b84059deeaaed9434cfe4154d73b149306
SHA512 013143b1efeca433127b20ae5ff045259ff19ce90729a66c218921d825293038747f5251043fd511533263eddb8f7ada758b75f62981044da872e2e5322b0943

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db

MD5 95045c2acf741b5b882d1ba5e55f0b25
SHA1 7c97b33fbd75fbe1ac2f35bb3bb9b043617d9df0
SHA256 e20491ccb0c8b34778a43598536ec49313a08eab1757847acdf16f3bc490a1a5
SHA512 a7baf7ad9f5883d540348fc23f181d135ad03afc0af8260c701f1601761ac8b62335d1587648034872110e0aaf3d7cfb419b633e93842d525668eb402d67edbb

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.device.prefs.xml

MD5 cc7677f1ef8000370125a5fdeba8276e
SHA1 f756ca95e558b857a9bc2180c1339a2475faec6e
SHA256 eab1c250c551613fe74936d8540339d24660417606d7b8d068516afdede23baa
SHA512 17587701950873136b29df172a79e0f1914935064daa163664dbe7b7ee331cd8c5f43e9421370a13461f0d943b715b1f9b6277ceb90efdef555624c1742b24f6

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40e6801daac7f1acd559c527a34cdf6d
SHA1 832ac9144f5b1d76b309c0228e63d0878e8a8f7d
SHA256 a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5
SHA512 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/launcher.db-journal

MD5 550d898f1c8f726e72a7ebe43d0a4931
SHA1 d1983065236732447c4fca5c46ebc47f6aa8ec38
SHA256 bb77c898465b78834208f42e13619d179c48ad4a00034af43377eea948ed41c7
SHA512 63a1e4f86d1f6d8e02f452cf2e35393981d1e65edc8e4d6a1c610a68514ea3902f85313339c4f8005c9f0033f7383c6ad5adcb976b24f70217541b9b621481fe

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 a44c2fb81476599162792952dc18e93d
SHA1 8b2dd43570ac7ccda7648c90f13788c1d507e51c
SHA256 8f27506efdf280d6a67f8cd3fd10307cc597e7dd40315f0cb100b171e432b0a7
SHA512 fe17a9cb751a4c4c7185e178b66a91e1113e4bddaa49429a0d36e1e2137a08d0bd8ec5531602debd1ae6e48a8e7a468d5b6ed47d8122608f755809d4b13f1734

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.managedusers.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/werwerwee.qwetrydsf.yfdefes/files/downgrade_schema.json

MD5 70435833064f71228d8d001901b56873
SHA1 2d68b64360bb323366fadab675f387c74b42a23a
SHA256 73353cdbb7fbf2ee224948f35a950ad7bbaad5269b59471e690b34988ecc19e2
SHA512 fb7642c1c01aeacc3d5748b8be977ef272e7e9325cfd9e64b8638d4be84ff030cab8483a92ea677ffc246223df81e4b2c544e121943ac9acc8e79b6255b5b55a

/data/user/0/werwerwee.qwetrydsf.yfdefes/shared_prefs/com.android.launcher3.prefs.xml

MD5 40e6801daac7f1acd559c527a34cdf6d
SHA1 832ac9144f5b1d76b309c0228e63d0878e8a8f7d
SHA256 a7d09131de77bab23af3f8f10290af517d6f0bafe3c0257b108edf837f3097e5
SHA512 77a0e86e62336afda48a3d51c2b4a79e32003a77efcccb0f2619e827c787701c258e8b29bcf3f994555d00a05e8039f2461caec57fef90e7a631f99d9630a1db

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db

MD5 b913c5077b4eb27051ff24af9a367bdc
SHA1 f7e1ede0f8686b05ac865f6deac3fe68829bd5e7
SHA256 a51866efd189ca9b62dafb3ae6b15b9ae8d738e6a760037f1fb0cbdd02d55edf
SHA512 51fb33f3fb4a2602e35cb518e7862c837aa91ab5a343fd352536cf59370aec91618f96dbca74b3a66b000c9ece57a3b793623f887fb27243c69933e0e4d6b3a9

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/app_icons.db-journal

MD5 02db05a1f7291999411ac2e163090189
SHA1 8fc9a55829cfdfe0011ccce09544b548cb1aedcd
SHA256 2a0d68f3878b0038d44e9a9ad0e1af95d155bd9f73b9f74e549aec86e66f87eb
SHA512 c7a5ed9e6a34e3833df0bca931b363c6b41b4504cb6d4eb45f85ff9b5f8903e83706beedaffc06563967d58b62cc5270d0782476466623cb3125f923752d92b3

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db

MD5 0678e6e6b1f4348088d4da865feed17f
SHA1 bb776ff575af7d93e0d673a42a23072e74e06956
SHA256 1620d357c5776920f359a8791327d4bb155107ee0b7278ebf8cd810595376d8b
SHA512 77b3dac14800fcfb6af4822ec77b0f85db66c626d72463e405fbfe5b90ae99a4a9096a877a08ccd5494e07d4c86e08be0ce9cf3d86af87445f7380e5730602de

/data/user/0/werwerwee.qwetrydsf.yfdefes/databases/widgetpreviews.db-journal

MD5 b913f730ed536fb1346188731c863d00
SHA1 7cfc2d05947178e1c8f6ba49f1077ee929160d48
SHA256 f8ddd234a3dc5b6979f7142980fc1dc3bd6e4d9fca95a09818bf761f21a5a1f5
SHA512 16b097ff0098fd2092f2f869eff5c4c0d0dff5525b79d2a5b2329d43ad14e6a914e18cf852b59c3e2307be70d7d620bcc823c77a8649f328312190f25a764c24