Malware Analysis Report

2024-09-09 13:20

Sample ID 240613-cpe57avbkp
Target a382211e61779345c915a7a2bc050508_JaffaCakes118
SHA256 e3a6b6fd2901ca871c5ce374acfba477996478345151a18c0565e591c715c873
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

e3a6b6fd2901ca871c5ce374acfba477996478345151a18c0565e591c715c873

Threat Level: Likely malicious

The file a382211e61779345c915a7a2bc050508_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about the current nearby Wi-Fi networks

Requests cell location

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 02:14

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 02:14

Reported

2024-06-13 02:18

Platform

android-x86-arm-20240611.1-en

Max time kernel

176s

Max time network

184s

Command Line

com.wArtMusic_8049627

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /sbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.wArtMusic_8049627

com.wArtMusic_8049627:Metrica

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stat.appioapp.com udp
US 1.1.1.1:53 ads.appsgeyser.com udp
US 172.67.136.41:80 stat.appioapp.com tcp
US 199.115.116.164:80 ads.appsgeyser.com tcp
US 172.67.136.41:80 stat.appioapp.com tcp
US 1.1.1.1:53 www.artmusic.in udp
US 1.1.1.1:53 config.appsgeyser.com udp
US 172.67.168.94:80 config.appsgeyser.com tcp
US 1.1.1.1:53 cdn.appnext.com udp
US 1.1.1.1:53 admin.appnext.com udp
US 54.86.62.87:443 admin.appnext.com tcp
GB 108.156.39.45:443 cdn.appnext.com tcp
US 1.1.1.1:53 onesignal.com udp
US 104.16.160.145:443 onesignal.com tcp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
GB 108.156.39.45:80 cdn.appnext.com tcp
US 1.1.1.1:53 global.appnext.com udp
IE 63.34.114.190:443 global.appnext.com tcp
GB 108.156.39.45:443 cdn.appnext.com tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 certificate.mobile.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 startup.mobile.webvisor.com udp
RU 213.180.204.244:443 startup.mobile.webvisor.com tcp
US 1.1.1.1:53 u.startup.mobile.webvisor.com udp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.204.244:443 u.startup.mobile.webvisor.com tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp

Files

/data/data/com.wArtMusic_8049627/files/webWidgetConfiguration

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.wArtMusic_8049627/files/widgetsController

MD5 0137e32f076e5306b944eae7c8da1c24
SHA1 8e0ccd7cbc8d3804707a4dc89e58ad0cff08fe13
SHA256 99a8584ef7cf5155dada97090025b8d48c5c725b347c6a00babb878fc4174ac3
SHA512 876af5c3ebb54ddbb2c66f8b38ee862b07a5a97f403f9a265e07cda413984a37402eb11ed267df1ec859e8399b22413c899429ba75a54c62337d0ce3e9115aeb

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db

MD5 880011fa7df8bb90a5adfab8364e2e49
SHA1 8640c23913dc2b771465a63c5f9417bf5327522f
SHA256 b9b37a47c3aa2e7b718df97281ea8885b70c12c9456918127987552ab36098d7
SHA512 e32127b9e15767334e13903462b81df74cbb3bd894f35d64aac97e08260ecf3245a3574234f13021e6ad3cc8cbdcaa6824179442e06e2a18c28c44a22515a5c3

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db-shm

MD5 8a98e10466f8b6ed7993c99b70e9eb56
SHA1 2f10e1e6c31364b9070ec8af75651fa223f28369
SHA256 02e5ea2a5f6ee2680febb6050b89e7fecbc617be36d67ac10302fd057d96b8b6
SHA512 5b38356c35c31f18ac46e9482c3a1ea1a471786dfb235590deecad85fb6dda1d9b0e79a482b32a44265fbde21c9ff2d8f79a8e7e15335d362e63a6bea874f57d

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db-wal

MD5 a4c245e52ce5ac1988f00e595038f47d
SHA1 4e71794410189f7bd954de5fd7b4dacf3e939124
SHA256 40f96048c974b711894fc0df384e8afbb3151b20d7715ac05553194cca0022fe
SHA512 fb68f127ff0867e4b41f1f52680047337649e501b574eaef858a7f7699433591142f715819f1e5a6a8b93e88d10d4158b916afb19e39bc55d5052570567f4625

/data/data/com.wArtMusic_8049627/cache/volley/-1148440341470717438

MD5 d8aab8354d4220cbf7fc9909179fd4c0
SHA1 69ed8601b35299c9ff3c1561352c1e7b5e5dedcf
SHA256 3f9f41dce657a7c8ddce946fd793442de4e96ea91ec7663544d684bcb58ff5ed
SHA512 d6f77ec382d2c9cecc79e008c5c895acd599677e1a546f3eeffeb8d074c4ac854550984461f0e2b810909a475a20d84ba39697ad7f03b11d4d3abc829a43592a

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db-wal

MD5 44f2642289dfe93885ee8efa14ced8eb
SHA1 0c1fdb40840c6bb8d9ac8af82e080b3fa61bb616
SHA256 96cb7959a5520906151a3bfebd8c96de8d2ceae5e71c23a14cce75c86d20b929
SHA512 756d5a8d6eab5e09436f3484d3dbf3c08e8993d0f3d73e45afe596494f028d13209cea0b7f48404d79f5422ea552df638ca94ade99e2d85f52f55e5689d1f68a

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db

MD5 c7cb94b39881c1c65edffc4318a5540a
SHA1 191b5d6bff54fc06f7531b8627299e1dbbb75afd
SHA256 54e10ed896126ced71b0b83878b5c8b579e5492afef7e757402787952a8c36ff
SHA512 70ca6bf229ed23abd6cc582fc2dd4a3ad1c3932d67c2a510f7e8193c53239799422e22fae609b91b81ac073ca547a8fe1e9409d9115c0d2f6c6decde7418769e

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db-wal

MD5 3892af0e00239f85dcfc45799b332a07
SHA1 01d374d1f161de01348ea279e397dfd6612a2015
SHA256 34c02462193ce710dbef84424deb39ff8c4d091c387250bba98311cefeb916f7
SHA512 d0a85b1125d2262ae10c57b33d2f8fc3f42c4d62c2993997a274c8eaaf45351b5bdc4797f1e9208865471706bafa3044f7ba6efbc19aeff3bca56c3ae80edd42

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db

MD5 3d217f15f1d841d9b1e74880eb7013b2
SHA1 c2c2fff02bdf86a6016bc54b332837c4d39e2c2c
SHA256 cc6c3dc1d93078874f8a83364194dce5d64db2c424ea9737fec3db1f26cfe0c4
SHA512 93807010ad6f72e3053c18bf7e2cb9420ada5c9e3644c2a1610708bdad43b84704a2055bf48ece1025ca3dc9d9add172241f042329f7b41ab4a921284d5fdfb5

/data/data/com.wArtMusic_8049627/databases/db467-journal

MD5 641b12a6031f2e3b7ad12a422a4d72a2
SHA1 0287428de8ea9a1076a407fac15fe4117698740a
SHA256 362d30f5f109d369456fc660633a223cd94923ba7ab6b6619cd205178e4003e0
SHA512 a98ab454969ac43156e215a0c24c82ac7ae8d424782700a3ed71dc5efa5e428ce706fbc73dd3e5d069ad12b4409a9c5321870da85c0a80133a487f9e6817a505

/data/data/com.wArtMusic_8049627/databases/db467

MD5 fcc5df7d5be08d9040f251658007df47
SHA1 da96a3b1ffc1f06e7eb02e5da13cb77314c2c273
SHA256 d339f90feef472879f5660254ca8d38f41bf6188ba4d67b33a60848ad72435ca
SHA512 a67c700f8530eb812216f22e06c94cc416ea874253e165e96dce79754eb8817a8910c4625794fb5370efb7d35784adc5060c911aac5f744aac34ed871aa5e5ba

/data/data/com.wArtMusic_8049627/databases/db467-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.wArtMusic_8049627/databases/db467-wal

MD5 613d9240bed9850ed4b62f6a2bd8a72c
SHA1 3f8f2347667232f46aeb2b687ef09963b3f28889
SHA256 debca9b2cac3162c854194a212460cb4a445972a1ab33768d2e9556ef0bd9d68
SHA512 bb7e68d23c7e6f0cdc00f6f4f27ebce172d0b6b92a34e6fe4132fdc9dd69abdbe8a9e222d26195db1809cad368fbd68c89c6d06f11b42f3d42e4cc8ceeb64407

/data/data/com.wArtMusic_8049627/databases/db467-wal

MD5 58f79db391b628a7af4544f990f2bcaf
SHA1 c49150e9534a5c0ad16bca3825e00aea0fc648dd
SHA256 cd1c307af93cb455818ccbe1501489f79807bb1b0876cd2a987517b508505f8b
SHA512 0a7a2873b58ac2ba741c31c68ef29be64488e940c749d85e9d60bf37ffe72984aa02793850ad49d4991c529021035a8bc441bbc2f892996207beda23cc580e18

/data/data/com.wArtMusic_8049627/databases/db467

MD5 af14fe3a5420b196c04f7cea67d50a75
SHA1 f248b6b0233d3c953d83a898264c820c754b3b26
SHA256 d90ec9c8b9fdfcd4764352e68c5918ddeb1f3a056cf331a65738e1a0c99e16f9
SHA512 5dd93f8b5b9ee6352c8e1af1518025701ec074f903f61101e64566d59242009a9958ddf168319fd1e7d831e4e83306a13101d0e65cd99caae548d86f9d5dafd7

/data/data/com.wArtMusic_8049627/no_backup/metrica_data.db-wal

MD5 1987e12ff1b10d951a11bfb5b31013ea
SHA1 582139dd9edbf4c3ae7bcd36f3fc9f3d596cd70f
SHA256 bba881303239f2fb2496b7100d3e0629101abac29e132a565556ea62650e674c
SHA512 c28c0f98eb56190420ddb772e19444aea381d598fdf966dd17900bf1f48912a560dbb24f7c4a0f37a9940ef2b33a1e674919f8d75c9ec477f94c3ead3dead5b2

/data/data/com.wArtMusic_8049627/cache/volley/1438757193-806202615

MD5 8957855c34ffcf0bbcb42f604c969b6d
SHA1 975585e3e929ce87683a24e7a907b0077ca71664
SHA256 c818014b03d1efc4e8305debd6393ade5e07709330372c8d1116643b7a5327a1
SHA512 f950f364e349799f8a883c6cef2a55ddc9eb8fed71c0cae4a417bef501d87f89df778caaaedcfc1ee0d19f37701c0c453b05c93b57344b2262a3d27aaab6a20d

/data/data/com.wArtMusic_8049627/databases/OneSignal.db-journal

MD5 8488c2f346306f7324b5d0d1862ec714
SHA1 620bb420d9bc4cda86135a2d51d356674d4bc0aa
SHA256 12cb56a62bdfacb4352a069d9c973b8f81fea3d603091752d3c4ce26922b42f1
SHA512 003384f94e59aae7e2111e9d0329f6255f0ebfaeaa09f41f79365aa6768c9de6d9d26c223b88f63c74e47978ca4fd8f257e762765362a090f0dbcc4763a2c830

/data/data/com.wArtMusic_8049627/databases/OneSignal.db

MD5 dc85609a9b708226108450f778162d61
SHA1 2fa99197d64537a69d0aa23875298ad4db532654
SHA256 83cf7954811f1796df6f5cbf2054989ddc062752569a33c43b5abc0f97d5f1e6
SHA512 e2f6ac63775eaae2f2dcf0f0ba0de20290295710c1227fc2d58c98a48c2e15331f197922d59007a4ed1ce4b3c6029ccacad38845b8ba1bf12e63d7a1b3b3cfb8

/data/data/com.wArtMusic_8049627/databases/OneSignal.db-shm

MD5 f72dd4ca5a656792fc4e0f45e276e2e8
SHA1 28048e50bde79629b395833650ab447d9782bd8b
SHA256 9878dcdbd5147ddb82c7d38835cb7cf346175638b634afb4fcc5e1cd4e760a0c
SHA512 d4e40ac2be6ddc3158418c13c22a25c681b874c802986e1b938ff8681e1a4439c833d1378db8a6f25baa6e0c1f5f2d174f506657fa1db4df1cde4c167f3de703

/data/data/com.wArtMusic_8049627/databases/OneSignal.db-wal

MD5 a2aa6b9eecb32400192e23bdc2054bd0
SHA1 35e4f968814f952c42eec4f56635e4c32bb7d8e6
SHA256 ff7ea5192752c009888ddfb3303c799ba03a14efdb59d4b8ca76ec47c1d8fdf6
SHA512 61e204d9d6d729b1447aec5984c83d0508f00119564a9f6e22ee12c8d98ce1d2b3ba0dd485e9adc7d4942c1822703a0841046bce8b6b7b34eeb90a1adfac1228

/data/data/com.wArtMusic_8049627/databases/db467-wal

MD5 ee8a8083189bf24cfcc8b11fe8548c0b
SHA1 9b059726eaeb893041b92d43cf0d7d4ad14c58dc
SHA256 0bfdb3eda7ba1009ba61925c99246620f30261b491fff6722362829712019ca9
SHA512 f35e67c143ad46eddb38a6b3fe3160f8ed93e0dd945a4593935264370165327b1491dc6d12ae710257aff8c269e404fa2e9303f9d8180c62fd2a9f852fe8e600

/data/data/com.wArtMusic_8049627/databases/db467

MD5 e045dbec43958410bce70ae93f7a271d
SHA1 e863d49f3694830083b3b01c185fc9efcd0b60b3
SHA256 af83f7efd7955c2a1d42e01e10070d62b9ab181a5e9955e18257316702ef4f7f
SHA512 8492a9453a9977503d6a1358067cd7b303f87c5c3dfb02dcab89d2f8f512fd0978620b856a4b80bcd308c97f23e89cadf84dd8b5a129d2609b8796760243c4b5

/data/data/com.wArtMusic_8049627/databases/db467-wal

MD5 2c0b5c7dd940046f2bd1de5e4f0a1ebe
SHA1 0852038b876bbde5170de7a50eac3f333b1a2c8e
SHA256 34ee6af1886b8a52acf8e3e1e3b6c404130c0c0e90d4aca352a1a6c76852ba39
SHA512 bdd5cc6eea6e334d7b6b7a37d1b7892a35e0d9eba10edd725118b9737ad7097b5898585e518075ded1d87de1c9199e0b4ace58f109e93d87342d6145bef30761

/data/data/com.wArtMusic_8049627/databases/db467

MD5 dd42a7643c383f6aa383ae34bdc529c5
SHA1 f4fbb1d60628710adf8a17522f9d332ad1e3be3e
SHA256 c4568291b733af50cb3843dda5e19d8380dd67a447cb168ea4fa2b7a60ee3c5a
SHA512 2cb5231ab240306c758cdf69e4ae5a7b63514b71d910ca90d18e0e1b6b8d84a713f9c0009681eda8a4f2aaad7e5cde336f85135e2dac2830adfc36fd74fc2d87

/data/data/com.wArtMusic_8049627/databases/db467-wal

MD5 7ca9ab471b0465845a79ea276d3d27d7
SHA1 7fab7e666a03a06b866fef0e6eda66b414160b2f
SHA256 2f5d7d498b7d517ecbed2b5272ac763e07b9e572c99c47cd6a09495f7c1eeb6a
SHA512 6f5b40349182c70f3a8e5172917dcc661e47d17a8c267203925794eb2d56c4602c6588fa444a19c9d82ec62c7edf132936206a391c3bbc75799177d6f66e3b50

/data/data/com.wArtMusic_8049627/databases/db467

MD5 3302e5513705acb31ed7c649c53a776c
SHA1 8b9162970d24954b2aa5002c86dce9df979f53ed
SHA256 9543aefaa155d586edb5dfa8797d4e8242e59b6e8b4ad5697d58c74a170a5d6a
SHA512 63b3de3fc12e338ae72c6b4b6ace1223be060a1cf19c32d81fe25f22ff49398a8378ddb899fb6c019be000d14c30b6352cd67e0b1fe434109f8b3cc7c44ad123

/data/data/com.wArtMusic_8049627/files/data/appnext/videos/video-741151-15_o_1691532156.mp4.tmp

MD5 74b993eff25c18a2eeace0795274842d
SHA1 36b19be4a4edfe95470d6e26f01e13e5794b7d63
SHA256 1ec36d8e915adae108b716b933d86ae20520ab81a2b77e0c9da77736e8832f87
SHA512 a74aecefba9480a30d00c9a02362073fca0546f8f60fb21296e432b9a7d1ccfa00e0917c8192839d04c35e44d425f92ad7edc96a1feaddfcd4343e1a78970b3e

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db-wal

MD5 095c9dcb1c8370584795449ad32d3cf4
SHA1 88067d0f152b88e70bf588df760b8f9a60b6ee7f
SHA256 e26884bfca75d64009c2fabbf9590a8e65670615ac9d460ba21147ba278e27e7
SHA512 012cf5f4862426cff14c0644356dd4aaebb5d360a602bb35e65ab6101c47f66d4028d1f35d37789706c6db9a67e0a1ca54276ed9a558c8277d005a08b5bc9772

/data/data/com.wArtMusic_8049627/no_backup/metrica_client_data.db

MD5 39a1d727789b05441b79d06b3c5b25cb
SHA1 17b7e2680ed4dce138940fef8d35bb6fbf6ba615
SHA256 e5477375bcd6083264430987d5f628f4a2c0e15ae2d6f71efcae9fd08858c4f9
SHA512 2c0cce59e14466d931f3d9ba197fd4a17b7fbe1be7e9154eff9041e0d768fcffb24590ac4226f2862c20afcd405a7935533e861c50b71e90229141be01bb95bc