Analysis

  • max time kernel
    1707055s
  • max time network
    151s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    31/12/2022, 02:12

General

  • Target

    e4305512e4a6b14ec75236850dba045a277f55d345082f0f42d8f80b46acded5.apk

  • Size

    20.5MB

  • MD5

    c5159910afb81d35b905a9a42daf4599

  • SHA1

    2b9861ca638d396234a4334dd19cd4df81571b3c

  • SHA256

    e4305512e4a6b14ec75236850dba045a277f55d345082f0f42d8f80b46acded5

  • SHA512

    9fe52ceb5a76757375620b701c008f7576aa6f27a9ba6569aea162a3dcbf49407924c318a39fe14a3b4a0212b77ae9a97fa78648be6d617946ed06dc896fb995

  • SSDEEP

    393216:n50OddosJA35z7A79L+BiJ1mbgafiubcjZTbxT9i/zVN2I+TXNhcKpPbNiRSKcsY:nWexJA35z7c5R/mbBffcNTLi/zVN2IkF

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell information.

  • Requests dangerous framework permissions 4 IoCs
  • Reads information about phone network operator.

Processes

  • knvfuqkfu.wfphefw
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Requests cell location
    PID:4035
    • su
      2⤵
        PID:4196

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB

            Filesize

            148KB

            MD5

            6e44c1e446fc76648b1abd5511baadf8

            SHA1

            f9dc9bc2c1c3c2bc2ca102808ed07268cb8db278

            SHA256

            398386c5a253bfad322e9e40be1c349442b79fc3f4b0f6130df2130ba40918ab

            SHA512

            cae9530c5acb8a9ff489c45d3a17b62104db5be45d50a99979d151c93d4560b1712591609e389aa6dd0b31a9d330b97c426024e414a727d20bd3b78f38d174d9

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-journal

            Filesize

            524B

            MD5

            6b2c5c96caf618cac5de6fe6d040aad5

            SHA1

            d6aabd56c47b6a94b82922e073c9bf26cb0429c9

            SHA256

            1772330669f09154db7da88659cdc6400ebedf4f7b1d800dab62adae076bb5d9

            SHA512

            c0a94f9a7ad530158765569948f2f52c9a8b7960555ba30f43da03cfd41f01f41764fea49648edb4b8e260a2718d3ffdbac4d10bc38ab3aa9310960faa779549

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-shm

            Filesize

            8B

            MD5

            7dea362b3fac8e00956a4952a3d4f474

            SHA1

            05fe405753166f125559e7c9ac558654f107c7e9

            SHA256

            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

            SHA512

            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            ecd00289edf3ab05aa12713857c30273

            SHA1

            065a2ad097a7412de0a4ef57cce2be942fd4c7b5

            SHA256

            4c9400c5d1e0efecb2a256810176f46bb968d208fefe055c026eeebbf6c89684

            SHA512

            042813994fb327672932231f937c0320182b145aee88b907c536eae9128eb039a804cf66e0cd77b48737a35fc92b8df43bd65cb692b875e5910884a0a2399848

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            fe175164cc61f767a79dd06cc55c21fd

            SHA1

            10b0a5c1689ac28723622e4fcc13e13559537080

            SHA256

            12c1138b8a953f4efc4dad3458d7e0bbe9ab22cbd28649702de1fefbf7f4aad1

            SHA512

            b8b40697e8c719c7cc0029445c978c64cc01b8b413aba83c2691bd1b704af2d7871934c903d0a2f334843ce6468a9260f169ff0b52c032f7d9460308fe4b22e3

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            7f7f6c0e589f78f3dc2694d23aaf7955

            SHA1

            c025b0ee127e44e29025ed346fdc2e940cb2c03b

            SHA256

            d01ba9ddcb9bce614f2e601b59f35f0cf593f0fc248519cd329cf021e802154a

            SHA512

            a698adb14d30d34bcb6148c742c5045cf12127de5dbaad248a1628cc8aec98a536ca72ed17f0cd0e8c034e3f77b372e23480b6bcd7ee29845ca9aba44f82f0ff

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            4KB

            MD5

            e3c4c8a128ae152bd18d6dc53d4d2a99

            SHA1

            9403823718805fc0e4c38b83d9ce6a51a15a04c5

            SHA256

            e4d5f866152ae7ac85410b0776f6f9ae971fbe93670b6975bf8eb2b5c6f21031

            SHA512

            1519733c745d224ebb2d3bde837f27813ce1ed068e2e31bed5e078c108811797e3c7179c51c4982fb413ac14e119436b0063631104e3d65e2fdc49fee78ab99e

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            03936264957e29401089975fcb1f2a33

            SHA1

            eb57be35e81240d72bc5b88786d64fc5a2f9026f

            SHA256

            1ebb82362c34acddf27c116d81a6c45b9aae794b6c2ecdb2880751f9cbe36cfb

            SHA512

            1da5ae2f4d8f43b8f4b2223b62d7ff673f772d267c410f324d9d7cd1fabf2266b0f4a84baea76c015939f0e0476637ec00b1d46aa2f6662b1ce34a8afba294f5

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            5846d71c9bf4f16c007b2df3f53af005

            SHA1

            d6d252dbf4c3540631e555da643f5690a66bc772

            SHA256

            1940098355a9ba8c63f9398a83cf66dab377e3028db853a7f1506583a0cd7e11

            SHA512

            f1ef7b3b9a1a32140206704dd2159e69f195fe474389c5627e0a211be2d856c2b79ba63fc2c9a3f7d10ae68e186d6fb923ab5008e2c747f5a6d3e0b533c59777

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            8d34f57bcf1f9128868827561abd9a1c

            SHA1

            ae8a60ab75bf300f3daf9505e9af5207a8dd7936

            SHA256

            1d63b19e1722f983d4b08c90f08940bed9b1f0e78ecb38429641a33cb4c7204d

            SHA512

            d1eab9fc885f568437893286863fa83d13cbd125b0335bad92aca443b36325af4d0423b0f59356d2f69183334f77085cff01e3bccb99c20d11133ef214a77238

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            2e7ca151dd644cf5eba7ef1b40942cd9

            SHA1

            2817c4b9a3c6b17d10f7e32249d000a747521a7a

            SHA256

            9aa3f1f7bea454b061dede6ad4b1f576cabd3f010f2ee7d72040430ebae637b4

            SHA512

            ad38869958cc3548cb4f1d8e25128f473adab281522ef83e62c3e4b515a9805ae58f7fea9977b9548c5604fa7099ebdf4cf8dbb19ed666b35085272a93ea5579

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            48218d4641df9a7d89ed137ebc8e8b5d

            SHA1

            54370bed5c70d2caff357062a2f5711a5426a4f6

            SHA256

            970681c480ad2c7436987a66fa467dec0cc9b36bbbf7de299438f6e59948fd10

            SHA512

            52977c3996a9cd09abd099b8a3ef1b5466d92377d6f30f1ac4f604709970c091954fef35a1e0b074c69e84770487c1baefad3754c5d006042643f2b3a2cddcce

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            bc58e38bc8da4861ab73c2ca274ae9ce

            SHA1

            6836e59c2d22177bb3761cfc1cf81f5b54d71b8e

            SHA256

            8515db3a5ce444bd19c639ecb3fd17ab35873a21f82c182f1cbd06f4f8e2c495

            SHA512

            66af6054fd6f8845a191984b95f8c5f5bed14b54f9c7c1cf778011873747107899b8d7cadaa01a9db1132c1859849f4871d280c090bf261193f1f511c3dc18aa

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            01d5eede473d935eb3eae9e8209f061d

            SHA1

            44295069b3126a96189b574fe9297e0c396b3c4a

            SHA256

            a9c9f02db4a3cb07e9e3c3d4e65f25ec5722a5def73ab8bf15c14f2e287f8055

            SHA512

            3bcc8a54578650308c66e52f36453f550a17b97f9e8f34ee1c651cfed3d060ab38afd13339d87c075427c1b766443d4f5dae626a64111064c619f614179d4b2c

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            8a644eaf55181167aa812ce890a207f0

            SHA1

            85418b5651053ba383d29eae14716f9103ba4940

            SHA256

            3ef7cdae184580d0045dbc366b9c83fb20dcc36b68a1c4917a3b1a49d1d3701c

            SHA512

            77a4bfb566a73b894b34a68a4161f2642627c16e843990265680807e26586f6ced3e573f4e970e4179177b9d7b013b42cda86d62e16121956f4f04389fc0c1ba

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            df6b607f32244e6239b6d8a4ed971a22

            SHA1

            bff64d5f587e4baef5e18f62c836922cee13ce33

            SHA256

            6ec9947f85b9d3f51b7e815f91f28ebc86e15b13dc623e6b1e3c5f10b1b23150

            SHA512

            4bdd767aa08db2a38fb6b621d0fa26cc864c8953893a78b19be10da22c0349b7c907a92f60a27fc7b0bd1f97a09dbf07bccc245bccc2700356c9ce5b0eac3b30

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            408efbd38b2a9fcb76a17e08bf257316

            SHA1

            7bd1329ffcba121618c97b825f65f29b0f3f268f

            SHA256

            18df597fc13849b74927e02bc6519ee3c8f11192ebe737b9a96d8a148688a06b

            SHA512

            23132cadfb96392326ccd17c5c86c3ca49df595912cfde5dc8750062342f9e5b27138100c7c892462c32483f7b90cc4d7216756c10fc46e0a8bd09e4162218b2

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            dbb44c0873d91ec39fb627418296a56d

            SHA1

            d56afb879e9ae761e0985cd967ac5475add8f9f1

            SHA256

            c124cf028672b8d99d37b59d718d2b80ec95c6c71305324db0f49577ef2aa27b

            SHA512

            e6422e2db32a58867cbdfe1b19cdfc86ce62ca87d95b61711c19fd9ad720cf9fb370cc2b2cc4ba3f106c5cc887a7c7e15f8e2f0b7b14d94daecaeb66fa114684

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            8KB

            MD5

            e60347524619e17599f386c651183eef

            SHA1

            c40e7e22235536afb61a3c95beb5c09ef781de22

            SHA256

            7c937c219efecc6df02bd5a8711002ae45ff8b9274bfe906eda228a549defcd1

            SHA512

            1c439c2f30b4ffe9bb2a22ce6e0ac19ff6e717d078cf184ba64c7c732353745927f45587c4b78ca84ff6337816c214d381c921dc6cd81f93caa9125d94fd6d71

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            1.8MB

            MD5

            af222f32d0dafa8d4161648c388e2a85

            SHA1

            8a2fd67e91722dd2c404a3cf402e1ea232924c6e

            SHA256

            ddc9807c7c3b0cc60ff16505d5e60e840f3c73cfc8658aa5d57c6d7b4ec84444

            SHA512

            ef1d1fab2730bf0e48e07ff2d091a82f0e11637a915c1d21c14ab123110d050a29bee0ef294c69f2fd9d506a28853e6e9c1e80b95f7e2abe171ac9bccb441c54

          • /data/user/0/knvfuqkfu.wfphefw/databases/SettingsDB-wal

            Filesize

            458KB

            MD5

            69f206e25d0f5c1f4347c4e653ab4bae

            SHA1

            03d81fd77c6e02f8c7d4c75ab40250b8133e0cec

            SHA256

            4079e0376beffea86c9bbf3431c6a4b99b5bf611320534d021defa9cdc4b85b5

            SHA512

            f9367485d6f5c9e3283d2324dd087013e5cd10a8f5a3e189f955246a22d96f4d27bcd80fe542cf458a02bda3578c08e5dc52c5a9b71ea6e42e1227cf4ccdee8f

          • /storage/emulated/0/.am/dm/md/main.md

            Filesize

            2.6MB

            MD5

            36270b3861846e7e12faab13b6b6d36f

            SHA1

            ca4b8f05c063edd7f9c9219cd617c2ebdeee02e7

            SHA256

            752c0037e303f3fec1016e2a3357ce6e3463d78f14fb3585449f4c6538208c47

            SHA512

            b6aba7f4a4a8ae32706fd3bbad5c4849584febc8b2a199c7b988f8ed1ad86c6c45ddb5bee1bf9e7abb1a182cf4274fb82680b05dfa2cabc09587877cc7bdae23

          • /storage/emulated/0/.am/dm/md/main_tools.md

            Filesize

            1.1MB

            MD5

            1fe00742fa33e342b615aed5f9aca8e8

            SHA1

            ff0fa37046a3550ed7c29c1434224eae620d7bbd

            SHA256

            a4eeb9a0d5b4244debe042bb9208748c36855659ce53b89092e6f1d7a86ed137

            SHA512

            dacb5feb55dac2fbb1cab6d1bcae6205e04fc70123f2dd3adda1ecc75fd29a5967bf2a982cd255ddcded4d6ca890b1a5e70f3c1d91432cba3b7e0acc65c12467

          • /storage/emulated/0/.am/log_.txt

            Filesize

            22KB

            MD5

            5cb22b8c9ef6dfcf7277b58cfc069e04

            SHA1

            4408393d57c169a2d52bd2fb83f9802b91fc8384

            SHA256

            7ee4fd72bb7b5d0cd0e5ce8f3137950b6143d9e78f3005aed6e15701a8f8a1e5

            SHA512

            eefaec9c57d430033f8a474b056517e58c139d2cf6e5fc388f676231b3cba31db9e8434e04f60e6530125bbca65b7ee93400ca725f8ac1eb466e3e9d252299e0

          • /storage/emulated/0/.am/log_.txt.zip

            Filesize

            6KB

            MD5

            505bc70af58ad01c4ef104c2df5fa7ce

            SHA1

            7de63a31c4a99db4c1a7867769168251789fd167

            SHA256

            4b70353e04d14b9aa1f9ec03a86406021e2a20225a3a9237dd6a37c39080c44a

            SHA512

            0f9b1bd478f305353d0c61e7ffa06e575630aa809c32157c98261f28c7538d9b634a1991d9958cf3445025ce34a1a5341ed42ab0a7a2416ff0caf838e09700af

          • /storage/emulated/0/.am/log_1672449198472.txt.zip

            Filesize

            217B

            MD5

            71d85da912f4b0c45a19a0c58146438b

            SHA1

            fa6c5c1af836a3b4e35f9bd580614016b049b144

            SHA256

            334c5138252895302bb698d3e3fa24df44698a2cc4c1e975b27c6bab306a37bd

            SHA512

            ce50e9c72aa6a448e2fec3ea4a94b4e80b0c1a377a1cb194f606a41c5ba634b5dfaf6d44837ba80fa1c2af252c5b09d2900a6366225eac790cd855d19016c220

          • /storage/emulated/0/.am/mch.apk

            Filesize

            63KB

            MD5

            8accd9a542a0274ae4cff9d007d5b375

            SHA1

            9d743ef6332b815b42fa136e1f7379961f31b995

            SHA256

            e06ec0f874cdbbf85e1c762f0559a514948d5a71636e020c58f53d750e93a855

            SHA512

            0c10dd9ba0b062df3b71514edcbbf16f65f265874230188fe80a63eafee416cefcaa847646386125141f4d20c50c035073b6c83a5afdceb708753f697e358b7b

          • /storage/emulated/0/Android/data/knvfuqkfu.wfphefw/files/Download/mch.apk

            Filesize

            63KB

            MD5

            8accd9a542a0274ae4cff9d007d5b375

            SHA1

            9d743ef6332b815b42fa136e1f7379961f31b995

            SHA256

            e06ec0f874cdbbf85e1c762f0559a514948d5a71636e020c58f53d750e93a855

            SHA512

            0c10dd9ba0b062df3b71514edcbbf16f65f265874230188fe80a63eafee416cefcaa847646386125141f4d20c50c035073b6c83a5afdceb708753f697e358b7b

          • Anonymous-DexFile@0xc7cac000-0xc7f39f80

            Filesize

            2.6MB

            MD5

            69a3736008554873bc18f05dddbd12d5

            SHA1

            f267d6f8a7ec69a9fd25a2a09e3b7cdf4a67fb0f

            SHA256

            5547b9a2b8d838fbb383910f05ffdf9ea512ee1f135a7af41bae23b195735c68

            SHA512

            b08318b3f9c00381b32b8d4a793091439b27d097f8a18d29168cc0eeb959afc11d8f13a3e237501a8f979f68d476f45e12efb96d0591c34c087392b93f5ef42b

          • Anonymous-DexFile@0xc818c000-0xc82ab044

            Filesize

            1.1MB

            MD5

            ad5ae33d62fa2ad03600f3f967c3c700

            SHA1

            a870d474111f7b75ce8296bd0e9b99b88e5043d5

            SHA256

            9da1b581c166901960789c59e4256666e3b57ebe7d813ac4cdf4ab43fd9d7d2a

            SHA512

            7ca1f0afccd88cbe2c46c1900b6014e08837ca57cce9ad0d42760a04c5766a22ba7c571ac7f3e046b26c2809af0b272c3d545480f7550179d6074c83f139a554