Malware Analysis Report

2024-07-28 12:05

Sample ID 240612-sbqyjayhkf
Target KWGT_v3.74b.apk
SHA256 e75af86214947ac6c0f151173c76eb00f23f26ba71564b3a8beca28245695723
Tags
collection credential_access discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e75af86214947ac6c0f151173c76eb00f23f26ba71564b3a8beca28245695723

Threat Level: Likely malicious

The file KWGT_v3.74b.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion execution impact persistence

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Queries the mobile country code (MCC)

Queries information about active data network

Acquires the wake lock

Declares services with permission to bind to the system

Requests dangerous framework permissions

Checks the presence of a debugger

Schedules tasks to execute at a specified time

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-12 14:57

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read the user's calendar data. android.permission.READ_CALENDAR N/A N/A
Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 14:57

Reported

2024-06-12 15:02

Platform

android-x86-arm-20240611.1-en

Max time kernel

176s

Max time network

158s

Command Line

org.kustom.widget:editor

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

org.kustom.widget:editor

getprop ro.miui.ui.version.name

Network

Country Destination Domain Proto
GB 142.250.187.234:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.187.227:443 firebase-settings.crashlytics.com tcp
GB 142.250.187.227:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 geomobileservices-pa.googleapis.com udp
GB 172.217.16.234:443 geomobileservices-pa.googleapis.com tcp
US 1.1.1.1:53 api.openweathermap.org udp
NL 188.166.16.132:443 api.openweathermap.org tcp
US 1.1.1.1:53 api.waqi.info udp
JP 139.162.71.178:443 api.waqi.info tcp
US 1.1.1.1:53 fundingchoicesmessages.google.com udp
US 1.1.1.1:53 play-lh.googleusercontent.com udp
GB 142.250.187.246:443 play-lh.googleusercontent.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
US 1.1.1.1:53 firebaselogging.googleapis.com udp
GB 142.250.200.10:443 firebaselogging.googleapis.com tcp
GB 172.217.169.74:443 firebaselogging.googleapis.com tcp

Files

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-journal

MD5 41fdb56ff998f801ad0d9df16ccbf17d
SHA1 b1d46cf4c1c454f62b51e0b543238255508443ee
SHA256 4652d94064c27e1048e3d79ee1ff8ef609063551e57d206527112810cb856d11
SHA512 9c9d43c305729f856cd768abd6f957a61d14e12ef95dd515d7c1ee9e0401c1fc081d8b6245752efe40ba1eb4e20980047d64020155b52802f93f20795a7302c6

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-wal

MD5 07017ebb5c4f1d46428406bbda8d106f
SHA1 4a6597f6cf4a174cb223e9b5b74bba063ea14df5
SHA256 678be5d189fad49921d2c72ea8da4f3a10369bd0658edfdfb4360613cf835c80
SHA512 b7fdfb9ef2c5ddaca359e1c9d4d34e9151a85a86a969642616e53436d2c6b443cdab9031a8fb397de69356fa8cc8a39b2c2ca633ab522fb5c6ed9530f94e627f

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B302C6000110DDC270481D1CEB/report

MD5 46212678b31b4b2a17ecf18fd7791ea7
SHA1 a83a246caf50eaf17ab45c49236c20d6858baa1d
SHA256 70e72b135c03afe16291da9042b02759497943d4f739d0277264143dd1b67ff6
SHA512 4dee573217125f446057756044821313853766418f4343afcb17527a3508bd94d7306adbee7bdda36d8fb1ababffc5a6df11efa9114aac97ee1f1b391bd69b0c

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B302C6000110DDC270481D1CEB/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B302C6000110DDC270481D1CEB/userlog

MD5 92c4f26c6374307eefec11e36c105bd5
SHA1 029bd56c9188edbede215ca873f3e2549ee7b182
SHA256 8fefc13a6601edf68d3c540805fbd8d5a36f58fe540894e0a31fb227073dc9f5
SHA512 e536bc28e10070f1507bb89aa8476d495e29bd556e9e099c81109872390e6ca0a8cef3315cf4e03c137c6d3581b58cc7948d89a257b5929c77fd297daa7ed91d

/data/data/org.kustom.widget/files/frc_1:415510900161:android:b9af1b0edbcc3626_firebase_defaults.json

MD5 a8fe71e4c3a36d5d4af1a86321326deb
SHA1 4f0229b1ff96af447505c0256a1317fc8067235e
SHA256 ffd4dca7e58fbee4ac30c37efc1e5ac0470f6924bef9b2517370a071971364f5
SHA512 f1f2872514b7c8f40c8941d1097ab46240eb03eda59ca0deb95e7801222d05ac15dbe9bbcc6554e0dd6085e1968f14c461881e3901cb92dcbf0e1fbdda29628d

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/com.crashlytics.settings.json

MD5 3c8fecf1f35e875dd346854ea5126f1c
SHA1 6c310258b815a5ac25342025b15d863970b8ee3b
SHA256 9d20a7c0c6c16e8c0b38b61337f174db021bff2fece29b8600a980a736c04e98
SHA512 5b1c91f4ccc3bc7997109eb0986020eeaa8490fd1963aef03ef4a4db237190d34109dffe937959b104c886be285a6b199e20aed0ca6c08d02bc1d1c6e5b4b980

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 53160b5a7529f883d6029bf1a83d47d4
SHA1 a2279e8e5baa26968dbd0094cc207695fa7297ad
SHA256 0f9e73e73bbaa39c4050464003e679b35b27e7a384de666c5ee7f5ccb37bd4a5
SHA512 495156e7cf4266704742fb06a8f4096973d1725884ec80e202ba8927b7e9841a7970fb04450e5fac148af3a20b924f94640ed79ca61da7c2021c09084e4087de

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 53bad4cf1f3f63386342f0f25689e820
SHA1 f27aca27710e647c48ba8d8e7bbc1ffb57048d64
SHA256 0747e9b16bf1239bd40885618ebe9750bee27cfa6f762edf1e3e380ace1a2ae9
SHA512 de9ef312f0b392bc1113ace04c09c67ff011ae0997b7020b91e67afff17e4521365f349bd636ff8a184603ae5bb80bbf975dcdb7af6482b7449e7a3fa5e7ed73

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 585976e05352a3f2f535ea7f0ff8a795
SHA1 a330cddd665cec882a01ec634516afe6e712d929
SHA256 727c1cffb3dd7836920b43cd842ece9533a4855fa216786b2d29b42521647b9e
SHA512 37bf316426b29a289c9d1d55f19d54c0d97f8a83b20424b63737399adb3ee2454f0aacf8284fab59939637c573ab549c6ad88ada8cb69b2b13794dfd56bd0be0

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 e030894a019156b56f43eabfc600fb59
SHA1 b85bf422dc4b6bd147e5e4b8d7b6241566a1134e
SHA256 1ead75055b9bcc91dfcfd165005348eff8a2ba1c6088100d7c6d1f91fb24bf73
SHA512 910d5996ab470a88a27ddad8918ea0fd4606ddcc6c7c9c0012c16ba07b643c1a6b3ab6d5b7b3ddabe3a77ffb064d8e57090a50b323a3c478a5d3598b16ff12b8

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 8a63fd6bf52f6e34ae5c946b721c197e
SHA1 75fa2efb266bb808ab854952bed8a4e875449c83
SHA256 8bb05ae990bb4774e4c3e788c3dcd957352ea22b4fe0464478a0570f97b21833
SHA512 af94c15f282c182d3f5e0b5c30424f19bd3dd81e0104f616e5bf9cd4db602925ed092ee7577130969b8ea987c469bff414dddee7c5fa771ce36ef88722eb2cce

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 37d09defb8df1bd9a8a9f92a08b5a2f9
SHA1 bde4e2d9f9b9f2f9e6f5fe95e15fc80ccadfe041
SHA256 192d5b00ce7a9beb6aa80a21b1d9bf8311a13e87e01208aa3da48166ebdd50ac
SHA512 854cad482e2d7845a59942c5e501347f8782785840ad1582ee1092112ba2dc96e52dfba528d21c34df790f228ec81d717fdf290b6c520f1aebdab869b78f3b3d

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 39c24828fa33b81fc10b7cca67947365
SHA1 a263f3c2714902a63039f809d78eaa43885d8d45
SHA256 eb2b0ee1c1ba0dd91aa940afd100b25dc0ace94bfefb6717aa363c04a02c6240
SHA512 13e7f12b566177e10f407c27418ff521fe2d9bcb5e2325bfd3b7bc18061dcbf20fac1cb6671b70c2350f7274dc6c4be46ff34c8468bf18cbb27232572529e16e

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 5f428c194b0c83a5629da6b8d38db226
SHA1 d82f8e482ebca54740abc71958933b9f5a86c552
SHA256 402b28b0c12a45c56019d1f11fef193adf8d95cfc58737c946783cf0ba78071a
SHA512 4fa36e5618341ef9229bda9ce852603139c09e8ec432bbadcad87c430432092d04cd0c45956f6a4c2ec932e0374d7631cce06067c2ddf1f9a168f13c01003861

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 c2f62d0c03632a4c992961fbfcf091ec
SHA1 f1508510ee578356739f9091d9705a6366a836c4
SHA256 447783df4b77f70d3ecb80daee811a7bc70d0567b4c0b6938730455bb779fea8
SHA512 f6db07d71f09582afa8e6e38b905b6880232f24918fe4fbb1217ac9cd47d796df1a8493156a4d82e1b5973364fbdcc649973dffed1009953cf593ee442e7ddac

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 14b3eb4ae7da4125743e22d905cf5ede
SHA1 894511bc15174c1b743c1ca99bc674fc07457226
SHA256 461a4be357cb9b910d022b2c8b88d1b6272f4d43b61262de72144ba26c12fcc9
SHA512 e1761a6abfaf61dfd00365e1e46d30851f97c81859fb322cfbb3cc78d1aee2e95135eda3b7cf629fea45c34e6e7e1e3f72d0a4d728d7bfa42977460ffeccd86a

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-wal

MD5 871ab1c77bcaac333fda29e17c993077
SHA1 d6ff2682cb866d4c278ddcc3cd2a761b8e1828fe
SHA256 9de8e7b81d7f85c4565f8ee85cd08517ee2cffe1c3549af2338b8940ebbb61c5
SHA512 3d5393aa7d41c4360eb4f2fcfe874d6dd2ea12188be7735193781c352c61c4103a78b8755018722c17224940a5fb2cfe0e89e2c1a7e1128d229590762e6fc238

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 5286c38b2729c9e43bd5310860780bbf
SHA1 4f68fd4edb0d046f769afcc9b79cc977a4b1e6ae
SHA256 4040a68d097522c67cddb750a47f53cd2193945e3d960aebf7ed344a15ff7041
SHA512 f9cf4769ff2c65e6551797d2922e663c53d98166214d8d8d527538d55caf4d15410daeb74404fe8fb33db22c7e0f28e54f965df501fe75952702cf1e85517afd

/data/data/org.kustom.widget/no_backup/androidx.work.workdb-wal

MD5 f3d35e87dec8d43b8f6a9a3f37c6bfb2
SHA1 bca28a2dbbaf15b9e87c4aba2486a986434e05b6
SHA256 865d01a4fe7c04be7aa40a9dbb34229dfc6ef43442b291cae205ca21bd9956bc
SHA512 a995b13a77264fd8090290ac31cdd48067fcea774f7a5f44ae3b6663845a475436c12d950cfa02c8fe76af2ce4e8f543c322a053d70d1559530b8190944c9e83

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 3a0a7d2dc82b366dddcd339259746e4e
SHA1 926d3022a0f83cbef31df219b68b4b242ce9e4d0
SHA256 134458ea5562e28f28ec37ddbee832d4901c91e63ba82ec3b27744b04ae9af1d
SHA512 2de2b1edb63340f6ed997f679ac7bb9e6391cbd42a3d8f9d37ae41e0ce3e9b7bd85ce32fa6c6c20ab315f02ddc4fa9e2c34f0f988ddfd9738f701e846564b53e

/data/data/org.kustom.widget/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 b8782c1cceb46769673b26514dac2d6b
SHA1 4237f715ea58abf41888e447565bf1da612d4b46
SHA256 88f023c2b1d6acd68da7a74b72cdd17f5bd86e538734e8d0b3a9adaeefba3378
SHA512 e17544e82d79218494c4ee98efd720bb3b5fb819fa2b60470480c45198393f90f5853f78e3b7e15b6f6ede71c500b4fc88258958b75e34b8662e610af7f2de3e

/data/data/org.kustom.widget/files/profileInstalled

MD5 2f1a31b551ad9ec2d41e5f3556f73f77
SHA1 c1255aeb1f84eca896f82ee83679abb8ccfd97a9
SHA256 519518c314fe5a97b48a847c195a51efcb277acd3b805ae9edd5ea738b063c72
SHA512 76b7af590396742684e267fe50dd147f249d0d4ee877bbf02e243ffbf14efa467ffe02c1118a70ee810eda44aa534b9d0190c4ab8f45320583d6aeb001412ffa

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 a07148a1c50bee65242f05da055f65bb
SHA1 165d773e07c4eea64b89f7391f3c4b1200ad4e07
SHA256 dfafa9d08732fda85dcd2c7b63bba71ae466e32a9048a04801e12dee2e3127fb
SHA512 30f421c2814f0f397c69b9f8d5bb51faed5aa53ad37a38cee973b8cd4d1f28a4a4c4e11d3496e43822bd5ab99ab5aa35afd6b2554415f26103a0c92c79b71fe3

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 a5ea4c21a9e63e111874acfc7157cc03
SHA1 fae5b756bc9ee99646c8cda39e74f53a6e69c41e
SHA256 4f56410b5c32e6475aa8666ebff9d18fad05c3412375d0079c85b36d5e5fd810
SHA512 9b1a7a556262957a1aa3658e576b46349f3976cf0c07be70d3357aa5e04c8791fc9589e195b6f0a40ee8728303fe8a3ccf027d57f05ebcc7549e5b7216026b49

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 fd8e958b71739c23ab4063b6f57cf9d1
SHA1 87cbfc1537fdb2f4c0cd0b9609a45ba60c19c4d9
SHA256 68b47f869d7b416f7297860263b3230c6650cdd930313df6a9b8aedc67f9e85e
SHA512 018a687d2e0b41ba9c54b02f1e6a50ac7584713ea7b194d4c4b183f0bafdad8f5e4f27701ae806d373f95f1d7b5fd5d16a83adc19e1b838a7c8c99a7e459124e

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/journal

MD5 2afe76b3ac27618e40a21002504f0244
SHA1 95f476ac2feb42c631353eae9e2711f8a900eb8c
SHA256 321d9e2b460577f963aaff6a80716085dee052a166c8f08838d622fcb291a503
SHA512 2bac282eb49402e7bf2db368f6e9a6b6d61eb52f70ec954a310d0b91454d36a6717b0e683989a3e03fb2196e90df69d992fd99539657a8eadd11fc05a41fa871

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/dca02b25a792af9b54a0d094ce3900ee9d90877efbb9023de21759f34c3b7438.0.tmp

MD5 4bba4439e02064f0171c7dbde4a3948f
SHA1 02505afdedbf4e2106a5ae6e381c14e55631306c
SHA256 0ee91e78fb8330a933c06188ce9e16c5fcad5d0afd7141c936936d733f245526
SHA512 4163e8041fbfe0fb0afcd96c3f8fab00843f4ff9cbebc8608bf9d5a835511c8997a23086ecbe7b4b54faf292ace9cd56e3568c9b7ae9b08b634a63effecb1b1f

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/0ee48af6fbf95265c225098094cec9a26add7af92881f598a28602ddcf17b90c.0.tmp

MD5 b0bfbe31b1d4d505b70b46e1bb8af72d
SHA1 7d23e10f4e42a163570fb6ed5a0668beb3141c6d
SHA256 b8e9ce26cbc57331104be3c10e105453e523fe04401a33d904fe770e1f0c05c1
SHA512 cc591ca6907f9758c4b41f58724083b8c9980d61d83e319e771102127e3b94d5f2cd2a5ed2d2e03ebd50966e4d51308a5fa6ce9c4c7db0c80e845ae9e22d1cfe

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/journal.tmp

MD5 33be013af3745eaf6a09cb468112723d
SHA1 5ab9c85583d2a13030d63f84d4c1050fba604fba
SHA256 77bcbd3efd354f8f8a3802814478241477173a7229724cfba57f2f8037298ddb
SHA512 c12f28cd58964c3090ff2f18ecac3787483549234792d4af2e42ca3490d6304d1d6a38fade75f577fb889e3e097bd145958a301aa4fa78ff012608692f83bbf7

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/464f6365e089c575430ece2d38d836cc661567f6f819c1f42d2c2db1840c1a3f.0.tmp

MD5 de6c20639a597d261d3e97204a4acfd3
SHA1 2957af45ad8018114561e04407911061b40c3f15
SHA256 fd1dc3c8e8c8fd1fa2b6b67a7396ae7f2e6366942c5a7ad887a4825f8775e3b0
SHA512 7161d5059eea07aa32b63030d367702b6235157fe16ddfb32b59b4600ef5f3d111f202c04cff6c2d38b04f8565fd4130510be04bf166e97bf0a3535a0fdc99f8

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/journal

MD5 3369f6c86630179fa75083659b43f2e0
SHA1 393df88ab8d1405e2bc596e11ff609cb2d72976f
SHA256 edd5ed042f61e9151365913484adddb7829d2654ff645e2f50e20e2525cfb7a8
SHA512 f83f76ff30e805e059128244ed7a821e328f4337558c139e9b8f53a33214875c68ab7a15a90021238d511283476b5032805d47526bb0a3ff2039b8b2acbeab34

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_2787530502_1005858493.0.tmp

MD5 7e7d4fe0f8d3c3c125bc0feb7574abff
SHA1 ad7f0c030ee80b1c22c91b12995ad7f9308732b9
SHA256 e9f9fe472a666bdb297635d4576a8f5158cdcbfc32d1639ee92cbae280a809d7
SHA512 e91461cefed3492c565693766235b62d30ece1816e7d1d1fb92aaa79e146a8eccf60d98faeed79236a3b02e6dfed482275a4cb6ef5888f80d6ff4a0c8f544ea6

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/2620d2e2e580756a39f4b0fcad7931f761aa482575836bcd74ed4ccf9dda51c8.0.tmp

MD5 d03860954b35e5893cc431d4f352f880
SHA1 d3ddd67782da4cb8722d6e56141425373a093862
SHA256 a229168cf6b8fcf24894e75d8b53ac18ad3c2e459750bd1a30e88b5b582edd26
SHA512 fdd7d788bae7997797f62c38f36be91bf84ec7fb46ea62beeb4578523e5607a5101799faa8b76fc57a953b557e647ec0d6dc3f3f6bd8c29cf5f21f00865b2db0

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_1198109874_2611096681.0.tmp

MD5 d7ade31e79b3baca1de636c99e0a10e1
SHA1 9c4c29f5dcb0ea4472c4cf0323d54cc367aaabd8
SHA256 ef218ab77aa7271c48ae2b8e649865754a967855d3ca10d6cabe366c4b77729c
SHA512 462c93855584aa1758b210018326b0392e402c92eea6aa01b589e68ecfd8651400291b50b0f7c1c2f32326672a2f683d372e6d556bb176211d5e7afcd80931fc

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 b7d678b765044f42a1fcaf80957010f3
SHA1 2bf0e011ba0f8b088e9bdb50dc44daf04ee6ba06
SHA256 9cf0ed40fc56416213d0a69350c52f5d0bbfd18c984c6c83ce77b03e17bf1a9e
SHA512 3ca213a6204a187a9ddcfaa3ba91daf7e592a886b8c6fd3c7a9e616bdacf4dfdc034f07a0d92d43638e92a4433aaef3c79d056e54d4afbfef1f056e50ff00c60

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/63c2537308df6628adece1b7f8819c66a3eac0f4b419057c5163984dc59e09c3.0.tmp

MD5 cf42df84c8514bc589c9a84f8ccfa725
SHA1 fe3e7a9c6708cbd7bc112cc104dfb68ead3f51a5
SHA256 db7a0b1b882d110c5959e850e9f947e783c3a7bdbe9a8a9cf94324c6ad2c78ca
SHA512 bab13c820af0e11d3f7cb82d7f4760e9a4c5ea3325bf8b2cefa22469d97b43e6d8e0b39c6ceb4ec5270d925f937915751a42a73ffd73a92fb1093527b72bba2d

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 3b89b6cc3faca17b3414a913c5c1f6ec
SHA1 d1ed7dfc716c8991a95700f9c22c3800441fed54
SHA256 b23c875f9665ede9e255e6fbe9c6fd3b604ccb7f2823cd7c0aaf79a893462968
SHA512 97d9a0f3f087ac365aa16bfa4cf67ecf9f26c70baca518508cf862760ecf1013983464db393fa5ba37f63739294c5e258656ac4fdc416bafd8b93841265980dc

/data/data/org.kustom.widget/cache/kfiles/editor/journal.tmp

MD5 c05445c797391cbb7ada1ea112c156b0
SHA1 4efe77692e4daf2ed39968aa5f4ba2afd337e52f
SHA256 9235c993681f94bd0a33c69d56a5391ba13660305b819e472aa7aca9c37a1b1a
SHA512 d1c1c904ab2a0ac4188aad286820e3cee923b683e4bd5900beb2a84314f285291c0adac29006593c73434c449c7913e568ca6df2ed23e715b56bd3e79f2f199a

/data/data/org.kustom.widget/cache/kfiles/editor/journal

MD5 426e5bd42b73f68803e8c3be394b6b67
SHA1 81351fc6498a83547615496ab8c304456c3aa795
SHA256 1fb67a86b028f8d39d573d3dfa0412a52c011d733d1445bd9ce87f9e558db99d
SHA512 e3fa5fb99dbb4c972fdb569274eb2150500147ba1c5cced1f6395476813c135df53d26fa37cfea5ccd322e1203978e73487edc72d7369ac25a9901e31ba0862f

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset.json.0.tmp

MD5 772527b6a59eab85569625fb2c977925
SHA1 1aa9b23c308c9b83182d4cbf1077ff3419bdb9ad
SHA256 02b5532792f86969a76429f043759932709849b5b0434aaf5cce67b48c7af87e
SHA512 f3ca10d87bd5eb9b189ebfca98e313f8b005c04ad5fe7741296ec7b1b0371334f6a70daebf10e72bc9fdb1b6ffb8d82af9ff336f03d0fc34135c69b44fc5285a

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset.json.1.tmp

MD5 e7e0231f57b3e3b4921a9dc0ac382c80
SHA1 8630ebeb3fe0a07ba3fcdad70eb5cb3cfa9e3060
SHA256 b7a2177bd57cdaa31d32b0cb6fa69333610addd14e0820521481a946eb82a73d
SHA512 fc7a4b0878f36905ad4e6d1b1da71a78893da912d1147f500aa1d1b666c48aaf174e50be8c5295e5315fb6302abacdb54fadcfa6c836b11ee00eb47c9100450b

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset.json.3.tmp

MD5 d273b077c0c8595bcb8a2c2e30e9b764
SHA1 11410ddf12b63359dc982466682254e181b7df00
SHA256 b217c203c33fd9682533182920bee6d55373556528474b1807c38350d4c525f1
SHA512 fc61ad12c9ccfa4f590163c69e2c540ae92b211a061b7d115a4e7c3104604508421670a0500dadb671154fb64d3e19dfb7336c4559b3d20ad2ed40aa36571185

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset.json.4.tmp

MD5 c8810986a142a2aa05ef67b298affe14
SHA1 42b1726ae8c3e39d63c8dd3ee029b746ee63681c
SHA256 2fd5806dc5e61959a3efe672dace6eafe88d5dccaf49f9db0927ecc8d841fa77
SHA512 e0bf53930ae9f690afb1415cd628bbe8dcd203c685bf222d12767f74adad8e918ab5e1ac1b0cff375c159411fa8abb3e0f9ba880319f85e01e32c2e487673c85

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset.json.5.tmp

MD5 1fab7409b29980759aad8d27bdd1d496
SHA1 4ec07ddc3135c0e46e3d6da993a2d612ebf4cebc
SHA256 ab11ca3eac289581be83dc73d596d65048b686495eb3744e935d5ca6f122785f
SHA512 c475eab820200d49ec93b409cdd743aed86568a81d386505556dde7184aa098ade2e9823dd4dd72b9ae424d58ef6c50090a22fd1ab7957af7f7a05c371836799

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset_thumb_portrait.jpg.0.tmp

MD5 f1993f3d1f76e08d45d1d322d87259da
SHA1 917efa9906146fa1d9730fbb3ab96166c2cdcdb6
SHA256 6dd2ecb727196a256a4b5fd32994977bc39e5dd7788785900dfbb775ef94dd76
SHA512 997f6c1524e228e569595a3844e4da36ef2710d6d8e2d8a37dcec145489f64d6ea833b03a6eb433cdab63cb3b3f409c8ff06b689de59f832c2d796687f1117c1

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset_thumb_portrait.jpg.5.tmp

MD5 9d6a163b6c0e55bb6e184b921ca8e16e
SHA1 43ba0ca3f5e9219064202207aa3a0a7c3604e0d6
SHA256 e57cec85bd7582bd8b15b6866e94e47b0ed6f61d6170e7cdf54889299c292120
SHA512 26a51d6653c19be63878f98bcb45c3505f4c35d0698c289fafbb5c4dbc6f3dc19a1fb2aee4f248536f4df02e57aa935466f295982d258911d7c707f9196138a3

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset_thumb_landscape.jpg.0.tmp

MD5 4968e3bec2bf83f36ad3542a7c3399ab
SHA1 c7af150fa20d322f8b016b86e4592d1c8686c19a
SHA256 f34229340bd57baafd2d1bdf3a4721a295adefe7a9f24ffe3a8ba803f10b3f78
SHA512 df1eed27de3230a947e71ad05d0586cf57d406da03b5d507a3ccb8d60cb8ad98dce99235968b4805db903128233c31cf4764f998be73d29c42ea1e2641e41994

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/preset_thumb_landscape.jpg.5.tmp

MD5 e13af1f13fc2b4920b8313b611d07f57
SHA1 3a618736b993ee16a1cd38c1bdbadae8d15a404f
SHA256 2fc8e1a8da6902d986d71a73ced8eb65496be8a4114eac550ba9d8319ae13ff9
SHA512 3920817cc9dd48ba8ca0cc215770df58e188b32b5852bc3a227da230a4f74258419bfeb0f85f26a3e95a809882d810570eff731ec41ff562efbc4a2298dddfc6

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/Material.ttf.0.tmp

MD5 beb9fc5a0d1c578c5ad74ad9e2d533e3
SHA1 b5a6828b839ed7894cc92560e7a1f2806e9b91ae
SHA256 c91c82d925ee16899ee50d99beff41be6e6e11176b031b783dc1549d8ae495ad
SHA512 0573b97599b141d733d1ad83be3a90ba943e4bf06d26d16090d6e527785291d72ac314d32074ad528fa1105587c497be14975d00e0c112525a6a4eda1a6fd41d

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/Material.ttf.5.tmp

MD5 1af056546f4c665ea6ee90845eda768d
SHA1 392fb8eb21fd200f4eedf88a7cdb25ca08ff0534
SHA256 bc5acd4a098109a2720798bbefa528fe00248b6bfe6ef21335c9b22a62e5c8be
SHA512 f3b1089a3de83465751d6ba17551b92245656aa0d623f8131c65f2ebfbee1b4816b2eab0021d20c1547966e93d4ce2f64506a7fb71ea678313869017caa218df

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/Material.json.0.tmp

MD5 ef44f9382b313836575925620e3cd47b
SHA1 283ad10397ac5b0f714bbd6447ddd21e65bcb8f7
SHA256 585ed6afdf5740c01bd4c5c472e47aea2b67fc22807b5649fdeb3bb45395bf21
SHA512 2f4b354b4b0e7051ae827d8792b03a4f7a303682c1098809183a1a11dd7e306a1fe86c57e1b3a07f18e74781295cb55292ac32a5b75f226995e3af975efe8378

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/Material.json.5.tmp

MD5 e508e310e86fb4a1ec52a9e8dc670c81
SHA1 f8c084b9d58a4d79b778e2e019798a4838ef9ab8
SHA256 5e45f0710258695f1e0df2322c2d77821f635b2e896334cb8939654f44444fdb
SHA512 6374b50cab0bdd5133924437fe5def100b760338a81b6075703fcd50fd23ddd9361c82fb43dc496a1f788e560ecae9ca363e4f5ee69b92b20ba6eabe1ddbb9b5

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/meteo.ttf.0.tmp

MD5 d3a5bff230f0c845fb2f46d4d05789cd
SHA1 989329ae889943b6dbd8ce2bb6a7f51611af2297
SHA256 dcec686ca06532c19eb2f393906071b1a0a8903ea051c3136c53fca33308eb16
SHA512 b00145436f9756c4b60445fadc2dd8231a27f319987c67c3f3d9abc7e8c90836aca3b25707aa2058cf156916abb9fbd28b8e52a23ddbc0b57653f98c2fdc2e66

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/meteo.ttf.5.tmp

MD5 1f4fa7fd33016c551811e7be77889bb1
SHA1 edd8eb3880641f700b74cfefcfbe22cf0cea9f04
SHA256 3a9dea7358cb7ceee96cd6a649864906f0d1389f9dd8c65cd6a3129b01c6d321
SHA512 0d8d8a484c58aeb1e343724293adaa7b89630dc4ce421b91fb7288bc91a7ce660fb17196f7a0d6d2c072705db35da9003485eb0af0853fb657a574f207328bf8

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/meteo.json.0.tmp

MD5 e31aef368f97f45eacabcc288619ff73
SHA1 6747b221496272c69fde57604217dbfdd4512798
SHA256 ea56840dbecd309e7cd845649a4986cff5061d1613cd161911fb2433d24593e2
SHA512 88803036f9bea1b1405e86b6d1c82ed871fb17cc841a46456c80b27d99a72d46a37efe5ca298eabbf28d247cb78e71e88611e871b46d0dbfb5fd76e3966ec7a9

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/SmartAnalog.kwgt/icons/meteo.json.5.tmp

MD5 d19d2e803f3bc4b771cdf3557bffe574
SHA1 a84d6000343f38706f5d530f4d9a70c65106a35e
SHA256 5d7247a2bad4df58ca51cc4db8ca6161156445b93dc3d3e6616dbb577c7d9f19
SHA512 9ea0d90dd4e9678e01c11d6abc706a3a682bcb44c07fd0282429b16c6fc836efff41bd77c6ff7695aecb4719a36b0a196afdfb6663b592b73c902b708786f10b

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/icons/material.ttf.1.tmp

MD5 ced364d674818d27d9043155608bb1e7
SHA1 65dc45f6e9cd83af939ee8352419e1d5e320e80a
SHA256 753afb7da5708c9696bd3a21002b7b896143b6026c89b9b4d8d9f57ffbbafd1e
SHA512 dd685098aa0c560f529c0f83f41e9e476258ebe03a2e0a9eb011b3129a8be3eb41c06d02c9b8b017ca6c98fc4e2416a0a0c13eefe9ce5b9df036d9e138c34ca6

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/icons/material.ttf.5.tmp

MD5 9dbd80213762562f7c2725a9f84a3074
SHA1 d86df2e09a1ffd0cc0887c8b027889f9a116fffc
SHA256 599312b1a0a059c4d4c47ba9a8b61ef0fc2b38ac68016c1a63136576b330e027
SHA512 0de6acd534c45a25a876b8bfc3135066a210e06685c8ab0fc5ce147f8716f769f37eb9a0642643530faab24f74f3d8905da069d8ee3edfd57e72c2b7e28cd2fc

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/icons/material.json.1.tmp

MD5 2445a1d7fdcc79b652aeff2cec994afe
SHA1 b8e09b4aba191ddf8b785ee8da55b2b7c4ba10f6
SHA256 14ff30682726204a68cd0b634001565b381ccab6f5d8c9a2163cc3a3580309ff
SHA512 10ed46aa4670d9c62fddd9a2264558293adeb9f86f5cfad511ee6bb94d8b23ec4f850e5872a9aa62ab628a17eb505218d63dcc2cc96049273282c026260c6cd2

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/icons/material.json.5.tmp

MD5 8dda12240dfbbdf862dadf1ccb37a582
SHA1 de16588046ee888cb40ef3bfc198034ddc36d703
SHA256 9088c899f21baed2e3484c3ceb5cdf82422d70b327aadba63414abda3c6118ed
SHA512 9631a13576b931936ae1e6ba967e8c45a44c8dc5d46e58434eb540ecf14aba47c605988bfa30f1f1421464efdca6454e066c38a0ffcf1173a9c071ad20cc4c97

/data/data/org.kustom.widget/app_config/widget_000002.json

MD5 6f41584daeeda306f19cb737e704a354
SHA1 03660ec90d05b876452fe8c7b6c10620b7dadffc
SHA256 f0f57e7345e3b7ab67af7c84e6a86a723c6b10b98d2389b7df434a619829693e
SHA512 2ca97ec8effe3ef6ba57cbb04253259c315e7aca8e00afdca065cdf2ba51c0d19733189ade3bec02c856212159cf8759f0df016478f60170ed56bfc618be3690

/data/data/org.kustom.widget/no_backup/kwgt_000002/preview.png

MD5 43ee4890c1ca013e6a1a6e44dba8ea6e
SHA1 ba4d5d264551a9defc8250dedcdbb8b31d51375d
SHA256 ac9b169082d02ee63998ae38fe9766905d736089e8f53028e00afd52fad0b946
SHA512 dadbc18607329fe6c4b5f5e59ed8820bfae4bc93ef31998b2bbae2297f72c71ae6ff3b348d2feb4cc3a4e9d38db26fc8b0044859f24d0da40377a7825ee0ab13

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/5ccef0950b8cc9f99e55d85d648bac79cf97cb52fbd1ece65dd4a5ae0b848c90.0.tmp

MD5 621a1571c3cb18fd83fd5863d799c65e
SHA1 c0afe04c7d964b32fb57ca9a0d7c0be5235a4e52
SHA256 740b5db960d9f055131dcd6b2c2223ee431a028686dbd094cc064fb5f2c164b1
SHA512 48b5037fd75e63e3fce48aa5b9d53b44f6504fcba5ebabe1135f0fd06a8e1de5e2ac2b7e225e0c9021af8c2b24ff1624028b986c11b71fdc2a2dec7a9e6cdfb4

/data/data/org.kustom.widget/app_editor/0000000002/preset.1718204456602.a.json

MD5 96e1b79e31f0ec23069a8e09103c22b4
SHA1 9bca91082e277cef7d769c10d012bccfd26e30fa
SHA256 5ef4449c72490ceffd6b52f62f005db2076c0303354c7e8010780984cd11d4a0
SHA512 5a4103c8fc62187809be60673bd41509ef9693d44000a15daed952f0ff9f08d673877f3a4f7389c81a6f128b5e6507157175e959cc597f30b92b942cc0b90ea6

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_1622873362_1310055521.0.tmp

MD5 3fb1840ec3df6caef0e1ef9bcdfce608
SHA1 6bfcc82bc91036044fb07ba22c368fda6f0ca08b
SHA256 0513123179b2de1877918faf244ff47c6ae5d444c78e7c7fa173820c923f262b
SHA512 71f5c7f334580e373068b4aaddd8ee36359d53c4b8c2ded4b022ee6a71db68f0c29b5978a68b0ae941b8382f74e3734369a9fef3d8180bb119b000fbadd25f44

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/38f627f3c501966a3999f3692443d24b2cfe8ea833c2da0d8576941752b2b8ca.0.tmp

MD5 e2ea1301bd978bdd666bd52259a4dff3
SHA1 8b1890cf1e9f70e7af379315ce966c1bb8a1c82d
SHA256 9cb882134f13348c9f041d53a67d4b9a2407d96f1007a864eb1e2b2a6890287c
SHA512 856bb82cb7972e9d6f3f43a57a7814e10148dd483a1377205857a4b3726d24c7895341ba056209412410f6ca9f826224a4bdf4ac54c45f43312fb2605bff66e2

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 a57d591389c06f3befb125024a9d5632
SHA1 5e574103a512c45498f6061ee852efde031d5a9a
SHA256 e7e52d76b8c5ff7b047f4e6229a0f6663c3e7cda9d75c6191ebbc6f847ef3d59
SHA512 d3c0f1dde2339536575baa28fa8c00ce6057007e310cdd95fcbfc2efafe568edc3ea6a233f51468c1aa282df139f082969ffcd8709156eba0da7b17815f985cf

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 23ebee0acb8df3215e23933ddd4d9563
SHA1 320119779bc83e4370f675695f8df40440fa1d5c
SHA256 b3620d28e7fc37f42e675329d9533bc78755b2f94b4277df10686e1c67e02196
SHA512 f418204530ff81048e353b631b1efa30e4287247387e552ace3a71175c03736e31e728ca51c60015af9c47db16a5befc28ebdb0701e40f63dd7924294e0f26ab

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset.json.0.tmp

MD5 2716f6bff00c28bfca60de09d756e7bf
SHA1 f085cf4f3dbbb987f97e636a2a5c959f3bb859d2
SHA256 d264c5f51f9d69106661fb44236c519027fd88d467857c71ca2d6aaabb0a0a8c
SHA512 9eff074ea8a127c962d38e530a41f72a6cb86090b18c88d19005c6729f2692d523b070540427dc02c73c107adcfaea43d7862f4ba685b55d0bb73c1733cf3993

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset.json.1.tmp

MD5 fc57db4302585ed40305e69061b2bf9d
SHA1 690b3c7f7f02ed6d6f1a105ea160ed4ebd1b9fa8
SHA256 59fcf69602bc1262f1d6d7cba1116fe099af49955de13e0de9b7f1c7654dfba3
SHA512 e81d670f1283ed17c55e7670cb01081c110943c77cd7904083c5bf3c59813de9f6bed88c4f4b3cc9b0c1627b8a809cee0366d89d1ee2a1c90d0268e1b37a5861

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset.json.5.tmp

MD5 1ad0addf293460c4c42645163845bc91
SHA1 f1eb9a14e4a574ede52e8418d81d2f1c33476e3d
SHA256 f02af098bb1224de7c626ad9b7d59ebaa4bcd98841a40f2b57dc504867e44434
SHA512 0e24a30a1dcdc2102971048b643001d6329a17682cf6f2837733e05518779a122800f9f816dedbab4f5bb67a3233504268e231a5692605e2bc311b64301f5c8f

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset_thumb_portrait.jpg.0.tmp

MD5 e9b880079d05488180e48b574d016998
SHA1 345375d539d785a1f9f3e2e1c6fc703d2e08866a
SHA256 263800988c6fbf9dec0103a90ceee56889a9577d08758611f13f9cd192860059
SHA512 1e6f5793d04b7d68a5000507483e8a3e93087512c5a9e04793a6c1b11fedc64423ecd5d73ac7fca8046561ea1c9927e322f933838c6df9528794cdb7bbb036a5

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset_thumb_portrait.jpg.5.tmp

MD5 448d3ea5f9c1ce0034729ec32ff6a47a
SHA1 02ecaa5f5ca07ce5923b0fa82582702a0bd90bc9
SHA256 21bc9f60b9679a156d138ceb1c20b854f8ab8524253c2999240b7afefcc8fde8
SHA512 8028a6d7385b21ef2087516a5fbe088d0d54102623b4639a18ed704d33746b12a03395101a9f6d7a234dcf3757cef84587580e210e2e49659942d44d11c39d86

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset_thumb_landscape.jpg.0.tmp

MD5 3235665822bb26a30e8fbf1e91548cf1
SHA1 5431dfd6767e3c66a7f2b63dab36cf47e2164e4a
SHA256 c251854a14b49e9a928d52b7d8be4374ec66c42a184c40749710c4d26990ac01
SHA512 812224a1875f3e15d335ea9829577cb75d3e442907e1ef08c7b2118575271f601f93ccf75bc9c19a840b7c8009127cc3824deb2bf54dd024c20fa95d4129692a

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/Series.kwgt/preset_thumb_landscape.jpg.5.tmp

MD5 5f6842ea5cc99fb74cd03672bf72c74b
SHA1 4fea1706627247d2bfa34130f03fa4598d3ac951
SHA256 691d2a33a9eb079780708e6608084aed386e3d972cb8e91d2b8696c16aaeb4cc
SHA512 2d728d321679df29e13b37dc5ffc49d19a063554be44b8ffd22e23f42d819f34a17aa8e44543b3c4d62304e944f93ece66d9983e55a641906e4a1a2bdc10de8c

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/PoiretOne-Regular.ttf.0.tmp

MD5 3b585e0e2f91bef9ab6ea74f7e302f20
SHA1 dcfa209f6dddabfdfb12c5f8a9ba2e8f1b55573e
SHA256 7529dd3270b310bb6d6f16556765870c6cf7f601994e5ad1407305b08236ddeb
SHA512 1c102d22ca761aa0293a53a015b4e9af189ef5eae5ad6e40861aa009020c1d7de1fce18bed22c16dc353fa12022cf1ca4f659b46c3d2464b51c082e2e4ddf0c0

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/PoiretOne-Regular.ttf.1.tmp

MD5 17db5b971b344f69e5b8a62082a20ce9
SHA1 1d9808c664ae2dbc10e593fccd4add13c6eea113
SHA256 0b3c3f6f5820dbc007827c7ca0072f7fa9b405e4186dd9675cbf559fa4a69ea9
SHA512 ff69449fc96b9656ddc2efd543bafbf45ed7ef3ee91b0acd67727a9581fac8c4d3cd10e0e3cc8cbbb312443c0c93187a0fb4532f578256b268b86f2711ad107e

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/PoiretOne-Regular.ttf.5.tmp

MD5 6738d769668636e0288529b1857af50a
SHA1 12978194eb55e6a886490b772457a2d9b3fc664a
SHA256 9825ec0014cfc1a2e15ccbe9e2b0bc3eaff98a2586fbd0982e681097bc2b1a43
SHA512 ea36011af3a0cbb4995e7c20ff3d5c4380d059db3902d4aae964c9fbab8802031ff60ea7b59c61dc5d9e7ee0c4c492f87a75613c9376bf633aed0204dcb314c5

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/dd95a18aeda6d02019dcc3210b0dec372318c81ccc0ef83511a7bc0dc8cb1d1c.0.tmp

MD5 4dc805e20df963bf5b8e7e72183f0afa
SHA1 fd3e90d0fa7f7b0976bde1eefa9c64b737ddaa11
SHA256 2c0a1e4761ff6b506cd3101020192aa5eb9986f5f59b0d0d6b11bcbf3dd345be
SHA512 2ed97fc69b0eabeea34828dccac17eee460e4775da1a253a9ec81b32764bd4c0c4e653a0fbfe767b0becb3389d41bcca4cf7c58decd7d50c0082d73c4a2ec5ae

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_2341770615_0124925422.0.tmp

MD5 8c0812ab5cd26f38ac495b68741db745
SHA1 124fec5132632fec1bfd6cf5bb543944e47bf8e6
SHA256 25721fffa0dcc096026a27ec6df020c31a388e76d00af378c70b76cf4341cb9b
SHA512 87417a21528d5debc3da4c511634f500506f1df89f63e38a282ab985fab2bdfd389f926fb26d640b6cfedf8dc2e1824adbb10ea74bdd43d48c6e23d1c2c1183d

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/81a513f98fa1c7f90b0e8cbfab8cbc8b552a94e811ac2dd35013e0a0511fc869.0.tmp

MD5 fbbad5d1d34493b36fcacf01d6b6fb61
SHA1 0ef614203ec151c1e83150dff57b9ed643b720db
SHA256 c37529b5dca97086515af82e3b64359be943d4b07502793cb0e756285527ae6c
SHA512 399c86b5b1288970b52a26f04c4b0faa9e7924ed5a7aa18cc2563ac000bd2fa585a43788a52bf7cb26a79cfedf0b2d7b59da73c353dacd2f1976e45b94f4a9be

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 2912c0d2b5afb1cb7d7083d152a0651e
SHA1 8c945a5b2809090fbb0dc3f63a265c134eab02c6
SHA256 d979161f7e43345536e852e218fd1df373d6a1538f0274c919f9c4d5e668188f
SHA512 e068fe7dc81d2491ec613b15c2003a03dff26481a31ce702bd945f46fa1cfaea36169e86938850718c303920017d747a0fdc3e7dc3c1639920d5f2775aff627d

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_0271189870_2893180965.0.tmp

MD5 ac624b875253cc3c3df091df0a25deca
SHA1 bc7d7c8161c21b84c79cc9bfe466c597936e6bb8
SHA256 0a527161eb3905cdaf0dda077816d7d319fd773c7506126ff5c50183bbe79a08
SHA512 7f0d937fcf3fa4aa44afebcbf757bc19148937fd068710d5d27b30f98f6f57be447fcfc11be58d3b5b837dac9683824e4631ea910c54725ba8993690c8afa97d

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_0407599633_3715743240.0.tmp

MD5 276450853034c5257d0f35f2aca8fb76
SHA1 62a60fef67f927119d5ce8e0e4fa8ae074c14b52
SHA256 e7b6e7acafaeccc0cd9940d996c789ff8dfdf9c5258f504aa2be447b474bbfdf
SHA512 e1d4f9ac0a8c84c7a7f3f852c160510033fc8562de7d3878a7c2c0e7bae43cedda0812f10c7691f32e0ca66702d17e8ebd1c95bd44e5f5e95e18516a6e2575b8

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/f8e1b7793f6f52291c69207c5dffddb4646186255f688d713f765a7510c683d7.0.tmp

MD5 dfa15ed5b424f292e32c609a42610703
SHA1 3c617163d45b801b8d5a3530ea4cc123f5ad5557
SHA256 ad3374590eafa5d2eed501c65e533cb241e7d9ade36f37e11cd087de837239ae
SHA512 da6f3ce8f7aaaeb87f0e15b618b94accfce484a3213bde7c3f2845b438d6fb423c4c387616e6765c10774eed266d0f9499e42b84f4ebd4a813124becb906523a

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/dc43145cce10029e0d753aa9d9e8d857ae5fb375db0b41af98490179c45f70ba.0.tmp

MD5 e64116231ad00e84d25bb63e88894a2c
SHA1 9496996be237d320dddcb8c8766b4dc8506741be
SHA256 57db45766c95d50582dcc1ad97b3c03dfaa63332dc0630bbda8727fcaf8671e0
SHA512 94472f92b68ed9d57b21cee0e48a50b36fe840e50c801df1e3c9219fa9e741d3d1da350297ac559bd74a0815ecb201f80ff203238501c0e4b57f5b078eb02271

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_4180418837_0825531660.0.tmp

MD5 08f66182f4bc97f7a089d79f46b20a9b
SHA1 31944a101ea002b73d12d3bffbb9fe4c5fb5c0bf
SHA256 36d7cbfcba89e0a9706f101d507120f330f55058fd2540e6c4a28ed70ea38a57
SHA512 abca9fe945d169abf34c601e16d917bc5782a4d7df53f39bdd5a2389e86ba43bb5b3269ff3a153aafc7f10ecdc4967d796f270f17ca16d34a663a1d30f62a2dd

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/54d13dd5d3ed90a26013185a0db9a934fdc4f86cbb4c80411f1b2d82c61b8a70.0.tmp

MD5 657fd807e721c7c4757f3d61f7a23915
SHA1 f0858bf1e85013e24111b052586506a54017a299
SHA256 b59ecced8ddd7babbb5919820e5a4779681c53b669b9b5f48fa030708351f147
SHA512 1266bceebecfdb52c95c026400bc0e5d57ae524e2ae87a076addda5a7db4060658f90a0328c30ff26844ca974f2f9e86899fd055a881482ed5edbf12b935dcc6

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_3420149405_1015381140.0.tmp

MD5 d11d7225cf39d96876b115e9202377ab
SHA1 a352a7583ac1b383ca83926a745d7fbe18f1d7ff
SHA256 56079fff082078b17dd245a339d49cbd2474728461953c7a90c3978a330b7a9c
SHA512 9b18e081c18a647fa752b96fe6e7faa670d333e0ecf5fdfd53597615d2f575897dfc072f333c07fda1306adf1a2d20fb59a1d20d01acd47641b74374134ea015

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/a8a427e8f60e95902778e54320b44d28bf6a50ebca4f66cb66541db4d287b70c.0.tmp

MD5 19ec61a483e9af9c4620da940e4ed042
SHA1 faddc38a2beb036f8c5b34d66f3643289937b748
SHA256 db4b37f92269616c5f9331c4c25da577af45cd8f04bd0a4a57103599ab7d43cf
SHA512 a85196b61a11f26dfdcebfcd2b17808d7c057a2418f05f53a4d91e08418d1210a939d1537d293602329c4e40109e07ca16697a0714c4c0821bb24482ae0947f3

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 b265f158ad1e815b5191416215b86a88
SHA1 108a00c643bec84f6a00725512b87821b920c563
SHA256 d5a99150576aa2b3c3156043908e5dc2b29028515b921e2eb2bebb127d7a8dd4
SHA512 1385a781af09631f3a2411605c042818baec2fb45106c12d0bd41ff681b0587e6e580914062989ed4e27a291040ef22b2f0b2d7426b4995c1af06e8b0e25c295

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_1623724542_2039406773.0.tmp

MD5 f4a84418884dc9a537d6de9e06212185
SHA1 a6394b7ace7af3bad372b41ef7eede343e8bcbe8
SHA256 b1a95cdc52221d90bf4b8cde347482e5c9007280a93062dcb79c4b02d905a8d7
SHA512 60c536cec7a0f7c0b0ec94b290ffd36f0e98bd251f1a0df66b8c8727b0b3a92deb08c38f7991efdc1167f1807f1d92244a47e2a84a1c698f19d5a08c39accbd3

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_2919978316_2260823067.0.tmp

MD5 f736ccdb43007d3907075dec4ef736aa
SHA1 1546bb443c8a010a2268c6a1d96ab85c38521b40
SHA256 e2a67143850539d765f243c3dd0f1741aa1f8601dd41ea558466b4286dddef5a
SHA512 4936bcfb492860beb16c15bdf0d8bb4c2654706f37b8b441310ca7589eeb563e6fe645d7207b9f2060975bab2748c95aadea1936fa414d8ff054e0068c53bdaf

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/9f8163172e34639754aacbc041ac437dc3721af52a0f669cc36242caa786c2d3.0.tmp

MD5 62e26d47f1123bebb837f3aa68a9a935
SHA1 07eb9ee9b0872ede73c60659b3f741e6e2a0cc3b
SHA256 6e9ce3edf9aad321509be868648c57be0ed958cbc5a4a5db3554fd11d5fc6ac9
SHA512 bf389f8fcb62790fd38c5df6756aef65922754cd5307c4c900332786bae49b9054575ed05bace440601f42020a9bf29c721e76041054c2d563d72178e9ff0a6d

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/711494152eb00ddb2990ba2fe057d015370119a9aa9b0c7eade2709aabf40377.0.tmp

MD5 884f567f86cb89879bfc7fa2d2e6f777
SHA1 13c7958510e2a090b2129f8d0d845ca8c0f81d61
SHA256 b917d8f781b3f59faf8c525e2d08c7ff7c376944f376e0edeaa199adbcb91d23
SHA512 d18ea91e9b870dc61ba024d35ca74fa40278b7bae055a0b0eb16b98c8c4fdf438686073b06881ca211348c5c677e3032bd2ee6d6e3fb862a9175c7e482298c7d

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_3847794794_3487925177.0.tmp

MD5 05f636a8be10eef171eb731f057ead5d
SHA1 46c982c74893dce33445af370f7338229f6f5f4c
SHA256 1f83b2e7b2747ff872a877e58183de045a655672f77573e6a8af664f99100ebd
SHA512 4b6504a6c8551bb55f8384534606031e9d539b8347b12f01cbe7d3ef1a4446a371813c2f971f6b386d90d7109795053d5b90fffecbe3c054619fcec7cdc7218f

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/1a685a93ef3e539d8ac872f913a4ba80bd5592363c1f96a610ebdcf6d5f4b7d9.0.tmp

MD5 af0208b23080b82117acbfceaa476240
SHA1 e7d64f1f7a013a1e4cdcdc1deea87ace5b7667d6
SHA256 1574d664f9519f21790e165e697266075ac1d2dabaaf83bd56210fe4cada87e6
SHA512 f41735361c30a8691f22101f3106e0cd8a8358093acc9149ba5b1a3f6c2e7db816c6ccd112ccc0c55f68f31a4a27159da49481eb560459266cd655b25a135b85

/storage/emulated/0/Android/data/org.kustom.widget/cache/loader_metadata/org_kustom_widget_1618248600_2482190031.0.tmp

MD5 3aed32bb35ecee9246a8beb763eae14b
SHA1 2c3610a8c26b104247962db8343a17c830bb0cd3
SHA256 ffb44656d3569e04b221fb003ff80b537f2ed9e69f39ea62cf9c706d50c0c991
SHA512 95d910a76aea919ee32e206bf5ce0a561e56f8af8a8c67933abf74ecffd7c1cca9b9bfec4bcc36ed4dbd21df6c6a857cdbb6236dfd1463b9bb104ac8b9d7bef3

/storage/emulated/0/Android/data/org.kustom.widget/cache/image_cache/103232a3dd2b63ebe650c80ca992c5c05572da9bd73dfc1d71b30431ef2b42e4.0.tmp

MD5 3461277ec0d9084227347eafab3f907c
SHA1 ec0821ad3fa4cdcbc055b25e6ef3be5ffe2619bb
SHA256 0dfa58e3ca638d89f4fa95a1eae07ce3b75d9e3d525f3d6cb2030a8604461209
SHA512 31f854fd2abb203d30eb30c1f2cac21a75f4358145c983141efcf66646dee61301bdf62b3f8c19cbcdcb1419f40174c4368a87e7aecb50f0c4b78128c394a38c

/data/data/org.kustom.widget/files/datastore/loader_preset_settings.preferences_pb.tmp

MD5 94d4f1e0c44c8c0c805c85313d3a6b22
SHA1 15bfe22e431c81cf004d1114443da79663b79697
SHA256 6f68baba60535c21098d33a1478deb595debe59f01ecc254a5d21ebd4bc1fb8e
SHA512 9f4f9bb741400f2ed86a98e879b4f50e787d09ca437c7283bb683cb2d96e2658f4bc20094cf5915b42820a4215ae5afa39841054b72e78c5aa113a8b0de000ea

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset.json.0.tmp

MD5 43f8a3d3522b4788aa3e4c14b211e5bd
SHA1 33f65a7e771d1009db9b3a3bff7b5da8d47678cf
SHA256 72d989ffd66ae462424339099420345e4517558a51497e6823242033c9707cb3
SHA512 974a7ce48cec26c28de12d8237597a2c2615833c236b168dc4ab714edaee153c5fee1bc4705ad89705662f61802275e0dd2f082fbe4110e0d5894da4983b7bfa

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset.json.1.tmp

MD5 0099a4b9fc6322af9bf89b022b77f8fa
SHA1 7b57513fcf7525589427cbecfefa8acbefd9d1f6
SHA256 cb727c2c7a8e95cdc489df05c359a4064b53d3aa27f36a5f964b1f828d417061
SHA512 0087a4131a5106e0e40e259705a2ac5e1d0b386be1f4b1ba0c0ed2c7f9118cbee336e6bafa4344c2b69c13d9f4de06b5590a07f6585239edb7b1629037819e4d

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset.json.5.tmp

MD5 d90a8399e377920f9f6d23e801e8f5b7
SHA1 5a140f596973e510416a3e9c0d260333c33afe1e
SHA256 7bb6bd3181c35d94da4fcd59d4abb504499164590d756db0d0e736865c72abd1
SHA512 b15c0e4f5b4d73855ffd7038cb94f3cc4801dd628a5cedcdfb329461dc2eb514226cdba3d5be018ad668303c22e19d0d61acfeccf5217e95de7ce73b40c64947

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset_thumb_portrait.jpg.0.tmp

MD5 12b08b874e2bedb4179d7dc55b7dfcca
SHA1 517b4d57c09b8d2c938503252a1f1016a35fded9
SHA256 c22587b012ff8c83b113c0d69becb87e7bd59d3b5e81b274c70655809e68c515
SHA512 11916b2a12a7b5cbf6b18d1a264763d9037102db63c8353409575142541a387d6aac8e2d9b3dadc3aed2ee61c4b29111e6bbb4416fa74c5271e3b8e25bb0c66c

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset_thumb_portrait.jpg.5.tmp

MD5 a2288e421970007c3c010dcd67e3ac8c
SHA1 3ed2b23c0fa578e534e600ae715aa048e728e89f
SHA256 2651e7f69f66c20aaded9132b90f4544d046d9c0bdb05e401bcc0b0d504dd380
SHA512 82a6c09fc00e0280b2ff6444398b69be604f1177c48f87a7c6fcee07bc8a62efe22453d6273706a9200c1f364b91a9280617073921e58d68f234ed2ac4cd8771

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset_thumb_landscape.jpg.0.tmp

MD5 635e6f6bd60ed5dc10a3a49aaa310b77
SHA1 635715367870642178b6f3c52a87596529d491bc
SHA256 b3d6e36ac903b2fd82b219f279db9ec7c392b0affb02ef6d6403cccf1e0a5170
SHA512 d7c71adf2964c34ce8e22441b9a535e5584db558b38baef73770876f5125aac0f841650ea7ccaf7a85638e90c527bae590f631ab9a46b64b7bef71d2fcdccf9a

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/widgets/TextClock.kwgt/preset_thumb_landscape.jpg.5.tmp

MD5 4fb6ed19ad751dc9bf949d47e0f7c2e9
SHA1 480a13c6cdd148dccfddda4172bca33beaf7285f
SHA256 4b161dc8a52504be1cd599acf5343060e615a1d825e289f533f8b7aaecd9034a
SHA512 697a05c1cc5b84396c47467ac5321efdab6e599af8412b3918cd4fbd30e4369b2658dd491d8cb130c77e7008c2e5cceba3fdb00816c11097d257fc8984512b66

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/Walkway.ttf.0.tmp

MD5 a890a72c36efecedab9165c538f7500c
SHA1 f07b2e62f92788e56560448c3b42e50b56aeb2e6
SHA256 769bdd46e5442113d6f34bb14eae3a68c2e0874971b9b8ae567cff123a79054a
SHA512 d9b9cc89c1c4877b0053736db1c9095d171685f9ebc66b3df07a42090e6cbae48d1868f8accc4350cea2bbd6e7f0a2a03bc16ea12bf652820aea0d564d5d5234

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/Walkway.ttf.1.tmp

MD5 a3a861c4afc11053cf5a4fc6c054c5fa
SHA1 283860a180cf1fa2e62bf3d3e69d2908b8263932
SHA256 2c34156c09f3b7f6f065bd215543950ab59e2ffa6f5e7f22b306ec26df823f29
SHA512 f03f7ca3cba6148f7a1e625d9b2cccdcf484fb30f8b90ba640fad0018c16015d92a42ad6e354c389ab1ac064dcdbedcf1ec74036c52b7c112cdda430555bfcee

/data/data/org.kustom.widget/cache/kfiles/editor/1079410976/fonts/Walkway.ttf.5.tmp

MD5 1c786d9aa52973e121c7c455f138ec96
SHA1 0809c71c67342304f53ce99972377ac131e11e2b
SHA256 5037ca17bc153e85fc26f624aab6766835c89773f25f2d58dc6751b036e2266b
SHA512 633024a6ff95067a1929ae4c3863099bf315f98dcbadcceb6fe5d7a5c677fdfaaad2d295852d0fd233e4776f857719e4e58147ed07d085397401e8ac79854d80

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 14:57

Reported

2024-06-12 15:02

Platform

android-x64-20240611.1-en

Max time kernel

18s

Max time network

162s

Command Line

org.kustom.widget:editor

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

org.kustom.widget:editor

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 172.217.16.227:443 firebase-settings.crashlytics.com tcp
GB 172.217.16.227:443 firebase-settings.crashlytics.com tcp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 172.217.169.46:443 tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
GB 172.217.16.226:443 tcp

Files

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-journal

MD5 9dc521bedf866e18c030ab55dda62184
SHA1 284c970e5fcd9f2a6a29ee72a23e14937e8764c8
SHA256 cc0cceaa5e56f2388bf8c8ea7c3a9ce4a6432b9595388b283a4a507b36702247
SHA512 e1876a090296aec9999104c8a9bbd307f0d71935c529fcb65214f0307173ba8d3a4e4844a76c3cd5446d32a8815910c84ec5f0a854c547894ac626dd8db8883d

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events

MD5 e567eaadb5d0ef3a0f58f328a7ef5553
SHA1 c1fe4d6d4c39812f18fce30c1a23dfe6e9e7ba96
SHA256 267f906826627fe01f69278f899ef5ac7694fe8f8d73a66da9ab46a0325fa6cc
SHA512 cd48c0a2125efa02dac145837bdd9433c792126d61f983492b4cdea5f6498acdc5660c1f606ee4ae912ab765212c38599817c2db7faef1a70fedad1f3a031813

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-journal

MD5 0c589c4770b66792ec609f837a1d0a70
SHA1 e86dce1b67873130471effe62cac6f01222de860
SHA256 409adee614562e8e135af616c206693c38c766fbc262ccbe5f4a44137daa7013
SHA512 4403c61142648d2ab6e6f4c54cc259b28ece01a5a45ac132716b032bfc7c13a926b9a93b437f1171384dcbf4273f470a156747c071231fdd3faa7c9290cc1f85

/data/data/org.kustom.widget/databases/com.google.android.datatransport.events-journal

MD5 76f7fbe468ad3d07b7ef84b4b5a5550b
SHA1 a979e2a25e5e1fcbb628eb8e61a48925095cc5d5
SHA256 554426eebd1f18fbc6fba480c35b18ff1693ccc644d144d223cfde3820085d2d
SHA512 fb6eb0adb8626ae26f426a26a64bf4c4431427a1dfb1f3b45963fdf6d445c5cc825e5d0e8bc8b6c85e151e701779e16752b529535912964abb5d726497231669

/data/data/org.kustom.widget/files/PersistedInstallation7051897724930528627tmp

MD5 0f9bfa42f132694053deb4d0430420a6
SHA1 f9dfc8c3c0305b9c8a765762ee3d713ac904968f
SHA256 2f1b64973dfd7397b13a91951b768a601935c4011b7866a3ea771ea678b7d87d
SHA512 b3451e34c54b9a9e00376e0977f66c2422ac6aa1a385ffccb112d921179e7666c02303cab752259e5c94e4c59a7371dd64d2a12d5619632b4f138e8d8f3bedec

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B600700001148C06E791A793BE/report

MD5 c77c2aa36dfd1b3928e63f2fb1f1513b
SHA1 4367638d67ed7b7b8820560097419ec81666cf6f
SHA256 f9ee9a7e981979a3b8abdb302b64cb8eaf45b60ee4d3de0a279ff4eb91950450
SHA512 2b1e332c7c4a2d385a8c34ad3dddc93ff4f7c2e0f0ef1f2ad3703698f062630876d8494bf1d39f6e5581ab926bc38fe118eff2e06d594a72377fca2e095078e2

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B600700001148C06E791A793BE/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/open-sessions/6669B7B600700001148C06E791A793BE/userlog

MD5 e101e4b41cdf59173f0baf5503a64da5
SHA1 6a8dccb4b5360e89a85b6848a7704a8722f9a990
SHA256 2c6f4eefe32d2e891c583462ee20f4de6f02e6fa2b2b83d3c4431ee633e27060
SHA512 534871119d4b802bdc35b39edfc132a30a5ab4b6e562746ad1fdd590237e79a0323688b95c2403c566a849188982f06137b8e6ea35176329b52e520a2f29a611

/data/data/org.kustom.widget/files/frc_1:415510900161:android:b9af1b0edbcc3626_firebase_defaults.json

MD5 a8fe71e4c3a36d5d4af1a86321326deb
SHA1 4f0229b1ff96af447505c0256a1317fc8067235e
SHA256 ffd4dca7e58fbee4ac30c37efc1e5ac0470f6924bef9b2517370a071971364f5
SHA512 f1f2872514b7c8f40c8941d1097ab46240eb03eda59ca0deb95e7801222d05ac15dbe9bbcc6554e0dd6085e1968f14c461881e3901cb92dcbf0e1fbdda29628d

/data/data/org.kustom.widget/files/.com.google.firebase.crashlytics.files.v2:org.kustom.widget_editor/com.crashlytics.settings.json

MD5 98acab3691abeaf80e5bf8eb1fa160a7
SHA1 d385a341bd4573a48c7a2c01f09c4765a53d687d
SHA256 02be0fb8df085b2f68938e2d695bfaae4075a5912c6e212ade59d27614ef955f
SHA512 9060f8b13d0e40fe64670024fc956d2312821e4b89d967fbb2cd230437b6bd28e94aa2a4c72ec927e71ced6b919a3794d7cda6153086cf495958b90c7910f545

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 d17d6b664a9ed63a5dca3361c8bfbc81
SHA1 f4bc095c9ea8a79c27a07d218180fa30a2de118f
SHA256 f5d76a7d479ddd07c272a56c2467d4c2de7614a0c64d1c220a89abb5df70665a
SHA512 fe7206978e8f644e74845009fcada514276281b19ae3ccb042d2cb49eeef89a2a0cf5ab5fcbc9ed3ce23be289dbf8e93f75803379ea0c5248da27096ffac7c8f

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 c756d29a2a8a2d14f7ab312ce8a7a27e
SHA1 5ecb5397d7342f5980dec46ba50998c889a8f878
SHA256 dac179f7170e7760b8b6cafbd24989ceb51b82e1cdce10db321de03bece00674
SHA512 248b6b317ad45f3facb97a6b5dd668f9298d3587f6f4a5bfeaa0729fa2d1da8c09d244b95b5db4abb19a7f499fe02699ec39a400718397fbbac73cae1cf50ffa

/data/data/org.kustom.widget/files/PersistedInstallation7085661805923718694tmp

MD5 a4db0847e94ef5e18499797a1aee0dff
SHA1 c9f7998e1bcd17f7133a65fb6b7db98514703f25
SHA256 5af0eb4416a0dda76ba6c5d21785be63867d895a3f972a21e4a7553283f57ff9
SHA512 bae0f84b9372508b262b6f5ef1dc836ba206ee486e1209efe15ca710903a495030a4d034cfa4893d820d5790d801033844adf775bd9bcf8aa3df81fdc85c9289

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 bbfdbbfe2f018c6577780391da1945a7
SHA1 b5d92691d013fc8abd16f8af2afd36937576f138
SHA256 b2d989d40d1740e606a17f69a34e702f5c26be0deb5f930a0550abd73ed7b380
SHA512 41eb247e266f705c2d81246066a20a4a806f7ca25181bd5426433d5b15d0c12af87e5b540bbf2a69a53444a80579a11337f02ac2c72697454ab46dbbac05bacc

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 064cab7679ce730116cdb3b390897fc7
SHA1 d3ad5dbb9b5ad6b74f472dfc5c2b860a53899507
SHA256 199899547f15e83658a225966ec177539ed3a4966bde59f9312c4b5613a35624
SHA512 d76f981cd681ffc1205313ced0ba36a441e22f9532ce9c90542adc0f8125543897b4b326b8860a9dfb9e13e08832915c2406e42962cc64ec4f3cad4a0d411253

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 18c27a31acbf2806827086c043ee4b5c
SHA1 f4e232126891e6448934f0fdd4bbdac408db857c
SHA256 fa9e6c53e2db2c967f89ba6a6454cf5407553513129d79956d31933d6fef04d5
SHA512 db69630db66d6d0723d52132192cbc4687c8b9b84fc43b5f615e72775b2cf43d8b6f931387d344a3dc1b8f623bca04b8440296e624e3884324ca0771d294f5ff

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 25015d49318913b24ad2111a96176ff0
SHA1 733e141272ddfbaf55a616b35d62f286f7904c2d
SHA256 c2239bf391e0a889087831a23b8952a62285cb29ba3f936bdc21476f41995d8a
SHA512 e8ee6cfa554207c9a25157fc04e5eda65e040ffaa5766979ebdd3ad5b7016ff99da7e5508c38af46c1e9207f313acf378f5f3e6a3f1dae585a60a34583f184a2

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 c29fc4c1d168aa7930c8e8b743246b35
SHA1 99e45652df9c80c7338dcc50622d0929a3270450
SHA256 42f9d5db3c06f8fdd78868ae840c1e3cf9d30fdbd8cafc060f870e14bb2e4c6e
SHA512 25ba616c12b264e59080ad29da1bd3a46019f8362ddeb60c04445fb8ca8454c0bb02c0e43966d00660560a8ab0ecb057596bb7918ece1f7b12555b94122b8e2f

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 fc291aecc6861cb954b4486f2fe03ac3
SHA1 c943c701291d03cf3cc824d9d87f14887bf89643
SHA256 1f1b15128dbf1dd6fe4b2a122b69dbfa8438c4e32ae714bd1ca238750bc043f5
SHA512 957a194aa0988af0e66fcefebf9fd4668fa4cd2b116a4bebeaaa48e1d4580dab994e983af12ab95a49047538b727f688b228748c359e5cee6c32ad312564bb2a

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 db61c15b612d0e2ed0d6ef2da64583c6
SHA1 a154a57aea17478566230c6b58d43eb3baf67c4f
SHA256 95f990430446c077232d6247d359ac038f8e199e702efb1c479239265a83bb5c
SHA512 f5d48259643aa8147f9dc2bfcfbea1236ca4bcdda066a39dad6870829ac1fb48b6b82edfc61aa73c9a4f7b0b6a9321816455d8d6ff80af2fea38d33328fbd25c

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 7436c7d358b6fb3b3b91d5ac20156fc5
SHA1 f12d16216671f3e683e8c84ee99cf2f4069b6ceb
SHA256 1611a164aca46ef632917d098721221fa9c46e25ef1fdd2bd4ceb34263946083
SHA512 ece5e663406a5342b6746f8c8b66c0ce7737366715bcef7c2d6513f914298c708bd81ecfea72ad612746fe630533052f0dc087cdb5f9ef70086d6fefe21b98e1

/data/data/org.kustom.widget/databases/google_app_measurement_local.db-journal

MD5 38acb6549cafff42fc51b91766eb0230
SHA1 956695467f14f3ee1b2341d7867db10f00845515
SHA256 81ba07630604392880496834316e99c6115cdaed48c214fa65ede9616d8428e7
SHA512 982ea7b3c90ed230f13b221eade98ebee2b559b580ce46ad2f876156921884cdf2268cf806c0604d8eab989d4b54b3448a10c5f04ae325bf759f1840ac3ec39a

/data/data/org.kustom.widget/databases/google_app_measurement_local.db

MD5 6f80c720174f59e408694981b8f0a5b9
SHA1 6f496d9f74e2dc90cefe1080e8b84ee57736d36b
SHA256 d76f16ff5330a8a1c9fe6d621e5cc349fc0ee4a095acfa1bb4110b6ea365bff8
SHA512 24677ce1546e6b62a2a14cc2b3b24e99d326551121bab004af31f5359ae6e6df8aae73679c274700243c35fdaeb97d1670f5693902116b27cefa3db6ca6f76c0

/data/data/org.kustom.widget/no_backup/androidx.work.workdb-wal

MD5 2dd7610fd89ebfd2f964e81df15cd811
SHA1 86cc40a82ccbb585c16197c0b2421be5ea38b99d
SHA256 b9469cc10bfe61a773011c7280a3e796c7531ecde965e5eaf7c210796cf68e95
SHA512 57e0598c9047f5f8cdd64d783c7024ec4b2325a29e783f44c2ca6d570148dbaa0aa51afd151f608c8bbf0a2c2972d539ff77ddc6591600c34d2def7a2410709e

/data/misc/profiles/cur/0/org.kustom.widget/primary.prof

MD5 3a0a7d2dc82b366dddcd339259746e4e
SHA1 926d3022a0f83cbef31df219b68b4b242ce9e4d0
SHA256 134458ea5562e28f28ec37ddbee832d4901c91e63ba82ec3b27744b04ae9af1d
SHA512 2de2b1edb63340f6ed997f679ac7bb9e6391cbd42a3d8f9d37ae41e0ce3e9b7bd85ce32fa6c6c20ab315f02ddc4fa9e2c34f0f988ddfd9738f701e846564b53e

/data/data/org.kustom.widget/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 c41c905b55a74abbf46fa1adbee4a212
SHA1 cd1942fdf84b28d70adefd459d0b090365129557
SHA256 69fc8066798448c8a3a275309bbbb2351677271d469b9b9ddf964b9a8ffc3fd8
SHA512 271a21f84b8b1e0394d21cf0c6561bbd402ae662a0a75192001b7239c9bae5aa90364f8c2c3b1018144dd32f29905a4cb11489fc17cbef683528f33342e44f9f

/data/data/org.kustom.widget/files/profileInstalled

MD5 162e9c02331fc2169c3c3a4f26b675ee
SHA1 5c37ee55ff2f15c29f156f897ad21a3fdbc1642c
SHA256 a1ca62ebb815213b283376c6a84ffb6605176082708488648847f4d95f8ca93d
SHA512 3ac682d16bedf960ecc5007c41af53dd66e67081373d9fa57c08d0757e9f44875c4521dccb1d014988c411c1ccbdcb6d13cdbae7aea84fa1e50cc4cbfe5ed8fc