Malware Analysis Report

2024-10-19 13:15

Sample ID 240323-pnw4jaaf7y
Target app.apk
SHA256 4d902fb20673432b824c46762f7f05548a4559b1b06c798813487da201241ea7
Tags
irata discovery
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

4d902fb20673432b824c46762f7f05548a4559b1b06c798813487da201241ea7

Threat Level: Known bad

The file app.apk was found to be: Known bad.

Malicious Activity Summary

irata discovery

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-23 12:29

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-23 12:29

Reported

2024-03-23 12:33

Platform

android-x86-arm-20240221-en

Max time kernel

35s

Max time network

155s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.180.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.180.250.142.in-addr.arpa udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.14:443 android.apis.google.com tcp
US 1.1.1.1:53 qxpqxpqxp.xyz udp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation8450371074193317214tmp

MD5 4e14d36b2e46171d94e769fd7a8cc07d
SHA1 6a142f90a9b5630c098332bee2a4af7922b06786
SHA256 ec833a2a4d303332c9fe9ea5c5d16069376c22fceb66b223d1cc30455eb8e003
SHA512 5664c8c9539de103db3b6e082d4973b5fcc7bcb859b244984a7e2d3f86dcac14091b78150dbc7193d0f6761e143361b048a799329671a677d084dd96bd557d27

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 947c83a1b606c906b1779324439a02d0
SHA1 79957c417dd4df2b7a8a8e267d9274b90d61348f
SHA256 704e9c07cc9562c2fb4562935ff85c1356c4fd2eca4801e259db830da3a1d33c
SHA512 c22a141af4405f0d48a794ca83283a4a5d754cf99664ac00bf3b954fdba9cd8cfe882d10a73bdd8b7ea8fa19b0be4c55534abc4d64e67ace87258fc1f73f4b3c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 558f1bf061df349c0cd2ce8e9444fa8d
SHA1 eba00f661efe3dc0b0c6340925b15851fb3e3507
SHA256 09bce1c650acc5a987381e82542abb727b46efa67ee6b7cd108c235440b046ed
SHA512 c4ce553d740608c339124a84240888f1981db567ff2fc77c3076281a10a4f4b27b6905cf7923508f239a18a639a358ac6dfda8afafe7a73a4da5a69e93fead18

/data/data/Mad1sal.com/files/PersistedInstallation6066239171832700310tmp

MD5 5e19322b23adf880046ea242501843b2
SHA1 2ea970c70c8c5251dc8a01f054e993b66bed242f
SHA256 c62aa6619867fbad6b026d2464d7f9c3763781e76f1396f36d69c59fd126800e
SHA512 7c9deab5d02219b2dfde563bb09fa30430746c45cbc1bd5acdb4eaa555c28f64f0f521ecc6d7c3f1dec0e4edcb83165af98e47d52936a0cfd73e6592a07d88f7

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 1097f10c2e50524b889c16e22ef00594
SHA1 a23ffbea7ff7c96c2f130c28518a4e0312158911
SHA256 bbe725324fd3d0579f2b732f3a15930208879efd17b65b0bd016a42cdd7dc0a7
SHA512 c95ce328348baf1bfd9b8259e305e6ab51651907bfe0376bd1a586202763675c23a75d5786f59d3c4dbb03335596486227fde0f504d1124e7e83c56e22e0b34b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 241a20194ffc051a47646b7e192ec342
SHA1 5d8e94d278f61b19d5a318bde11fef493fc59ca9
SHA256 e00296a20c0565e24d9b09f7953180c255b1cb3cfb6a0ca5879978c1ca083d90
SHA512 67c2faeb0d8cfa0ab648086ad0699a163a76f035c4025e2cfd5a2247f76dd99442271a12a33590c506ba0b63cdf838b8498301b5b97c54592f0c2fc392ecb0bd

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 2d09c079725009c3c63e14976559950e
SHA1 e9001f8369064959cefbe830a6bd512bfa9f89e2
SHA256 eea26b08c0bb420244afbf722291a5ade833c9b1bd8e536cf16312359e2d5762
SHA512 7afa8ebbccf70d884e6a873deda67381a55db3011426f9d3c119dc538c6fb68e551a83b7f010d7b4990fee80478f64fbaee539574a6471e133c3615ac80338dd

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 8cd2b49e0b3fd1d5c588b7c850be959b
SHA1 fb926c7ceed0eb41d5db725127d33f518c967c80
SHA256 957a2bc31b93e209dcafc9b0f78c9c2f2c0653c8524cdfac9613e0d174d38afe
SHA512 7a2e364952407e2458b2100ffee9705f17c81da4dc461bbb114a97feeae625d741b9797dc31134edcda25f120233a3c428c447ddbc42aee5264332ede790e508

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 857e33093f0260efef7e6f6a63869b21
SHA1 55d6dcdd88b008b430edf3aee441165790bd1001
SHA256 d1861e6b177608f077d08ea56960b15761853d119486d817bd4d0955458228f0
SHA512 eabba1e6d841b94fc881e1b8fc7bf6a4e4e0fcdab24c2ea0be8d01e18a0f2c1ec96701e5b9a0edf4d9d23dc34ccd191b4fa6ee61397ce9e97eab6abd11cd3eb8

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 94875d3d44783d69a219d9d7a56f3ca5
SHA1 7c083fcea36dc0a574f152fe23b2e48301bd9547
SHA256 40ee9043c0ae0f51ce72ff2fe2f0a6263d8d6f2ac7a319f93873adaa2ac400a8
SHA512 9b438bb9e14151867b5eb500980b2691959ec37d09e0827e500c003a5ef12199e1a6eb7a671fb8455781066697d14546f589b9c248f3a4c29254d3cf464a03ec

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 6c4b4fea810b2a1a1eb75fabf64d2aa6
SHA1 601eaa70c980182ab3fe41a18a0af92e628fdb97
SHA256 e9ec1a8b5e864d6f0f9540f28a06a410b021b6e48574ad2e91c4702834a1e285
SHA512 55c2232cc911faf3c87241a621e1da0cd0c842986cf66a3eb7bb554bfcec0bc6e6f5781c1e258f79609060af4d4a41a9d430a66791e3c4a9e4d3e3640d269108

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 aa0ea6137150c33cdd768660feb3e688
SHA1 1226891fdb82275940b73e2c948bd0dc75abf9fb
SHA256 db59eaeb797d6fbdc107024d9a0f7cff4a54856b60ce7dafaaed2fab2f223783
SHA512 2dbb0337f39a219c5d7a95b8a4912c134c7b25c7597ca5d674f16132abf3f76243d2095bc05d3d85f00a809344f1f89142f30e3bc1f011c84d0d5bbb4be86ab7

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 52fae48295b8f5f0dd8216dc2e8d9c72
SHA1 0f492f6f93ccfc94b57d6bd517914d617f05fabc
SHA256 174d1e231dbb305d1f43ab7932a6f39626583ce7c3f2426acb2b5df315f0fece
SHA512 8d4ebd9746558a531ccd03f06103fa3390133a6ea618fbbc5782904c80976956c58875efa7dfc792b942be2841a873b5dd035d4e78892c58bcbc20a26aa6e3ab

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 3e881d9a01ca707bed38018ac69f4518
SHA1 5820f9351d7cc8082de6e5686eb9f8fedf6fb830
SHA256 4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c
SHA512 8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

Analysis: behavioral2

Detonation Overview

Submitted

2024-03-23 12:29

Reported

2024-03-23 12:34

Platform

android-x64-20240221-en

Max time kernel

34s

Max time network

138s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 110.201.58.216.in-addr.arpa udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 qxpqxpqxp.xyz udp
GB 142.250.180.14:443 android.apis.google.com tcp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp
GB 142.250.187.195:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.212.202:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation9194918291532081327tmp

MD5 e95edaad5ee82a9ebfbc228b2fd6e253
SHA1 95b6aa50db083a0b83933e329fda646e4c78da77
SHA256 91a3d9cdd044017e6fe19db1de0933ccc725f3a1237d129f9075e157c5963602
SHA512 3b59865680f1d6d912afaf9a70fb0ca7e985a78cee3f70407f305897cde1532bd650939e27b51e0316036e2f07fec947a63543fa922d1fed5437ec571eebe317

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 742c4aca7eafb3401f5b5f114a3ede29
SHA1 7dc89046898148349a4bf8c503c5aa50635d5cb8
SHA256 3f9193e997738c4e85fa45d24c84615fbba22029f67f367f48d20f9fd88665e7
SHA512 fe7df5591d6e183b490fb59a7cac3797ca4a8938378af46b5ff4903f155bbd36eaaa7d1a487b3eb4f10e43ba2b5e5a0de8bca8445f2e9d277150a096b6b18d4d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 ca6bae6d088c1864963066908f6a0253
SHA1 fb6af915cb4d7b0a6dd365cf618fbf0cfdb27bb7
SHA256 1a1fa5b71c01a8ca4c7460a38d0429aeb777192543533468fa4db68e3c66a314
SHA512 39128833b88d349d0fe2a72214c7b190c68ba70c2d51dca055327109e86076eb7a239d8ef65f2ca501601a8f3943dbb29314df7fcbe2a5d6f32ca05b2edf2e18

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 a71265cbe57f44b09d408467ee3dca24
SHA1 fe6eac1de468846e0550f94d7020bb94e52adf98
SHA256 f08ed8b28403161679ecc578ee5a2caf1dccb5ed580aabc1a3140fb914ed3eab
SHA512 12e38a5908c798c56a1b6deab738a009a8e03039683e6b1ad0fd33f8021cd9f97455649f41c7ddd84078014a907466dc636142fa04b16979cfa84d14688dfebb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 65f68dc82bd35598ae9b1aea91870902
SHA1 0bbf2873ef1921430497803118442a13d66c4fd6
SHA256 468c74fc9bd8596e32f8db1dac9e00da12c2183ab1e7b47f3cf42a9a0c17881e
SHA512 dbeee2a6f2d08670b5afae13ca622f8f1307b39b11f9700854c79b44d7a55f1d8068218c90ce41c60c140a420bfb66074abbb0602488ce7ed299696d6edff3f7

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 268fb6da44d18a247e0ac986952d77ea
SHA1 b82e6f12d2f4ef2de672a013704346714d8015de
SHA256 1a93baf5ee84d7e8261e6e2131781a48f95a96929bbddd8341b8873bdd62e8c6
SHA512 bbff5710064c99eb541403e3f6846557ce8d2b663532c1f844199f022a557f4be1da32cf87b7c551b46a076c6c7b31ec4c6edccb713ee67f0e5afc3ce9919038

/data/data/Mad1sal.com/files/PersistedInstallation1841340897732502694tmp

MD5 55e2d63bccb0ed16abd8db3db61bf007
SHA1 706250c7e56f9e38ba64999f307308eae179c21a
SHA256 c61de6e6006044f51d748edf5c5d6301059590298720348ee882e317a971f154
SHA512 0ab0b08c92e818a8c18417060d1d9e5f0359859cb70a3ccd520ef33977d9dcca2ed3311c30a42f5c2cc6b178dbc2e3c14f9d2b95f8103b301b6ccc5f5bb20daf

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 00b45cf76844df0d21a3d2ca06ebeadd
SHA1 ba354a42e511f4419560d09625731a84f4544706
SHA256 af101e7eb5b847f14b0ffe171c25b7008b0a435e23d23964a7acb3626de446f6
SHA512 09d610f300a877c60b893cd94c40d82e7221fd54ab527c126ddc47d96d881898f9915b574ee4af5051c79c5742b784a71043d9855706100ef0f9f26a011d771b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 66e5a9ec25acef0d1bdaf5552a53dce0
SHA1 fabac2785cb9620f9de50110bacc784e6d07c20e
SHA256 f2098d859370db77d516b1d12a49baf234a7c7e69c8176238613b111cb136c2a
SHA512 0d328a0ed242db0dbe7e7ed299c3dba14268d446227054a4dd2e0c52559cc6cdc346b115fb349f9b02af859bd94818944c5c46c7758b4f0577cfd2bd6a80b4ef

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 f67e865dc9cd2783f322ade40182d794
SHA1 2b3212e7a3e3b257be885881f926559bbb4b0c9f
SHA256 53afa40bd1eacc0555e1c43eaf8b9182b37ef8dfc0ef0f5728d177412b3c5f89
SHA512 ffa5138978026fc9c4eca9e13e623d4598eb83d7eba81dcf4f9bc4358ba55ab66d469cb130eacc277c50586a79665466ad0c2aa0c6e92baa13213abc059353fd

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 520002fd698818aa355f989b3576117b
SHA1 9cbdab5120942e2aa92b33374587a1e703a1eaf2
SHA256 57abde44bdb2c8e3ffc0b57c97bfe987caea8af555def634fb7f3fc8a4a871a9
SHA512 bf25233872133be187703b4cda4301367398e09336a7e4d84d50705700100a3bb4c6b4911824d4a20b57ff6dc19475e0e50f57748824b66682e2eac49d9fe020

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 5bf79852fb8ded30be782b9bb7fa963d
SHA1 1d4b7586f99d55e2d1f66cbe4b42f01b63593d4d
SHA256 eb8fd0c569622385f70bf34c208695d6ff08d41419eb822eebdcd83d0edd3e7d
SHA512 277e36d2325157881e9d861f5ac396442f8d8d4e21fc038e2ac54abd4c45cc4c93f3fdeb99bb7bba9bb8f675297100d1044b8a655233c499a6ef448982b1ca23

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 adf6082723784327d7d1b34adf974e7d
SHA1 b1502f70eb881a1dfe41139cb719fefb877ee37c
SHA256 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
SHA512 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Analysis: behavioral3

Detonation Overview

Submitted

2024-03-23 12:29

Reported

2024-03-23 12:34

Platform

android-x64-arm64-20240221-en

Max time kernel

34s

Max time network

143s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 78.169.217.172.in-addr.arpa udp
US 1.1.1.1:53 qxpqxpqxp.xyz udp
US 1.1.1.1:53 ssl.google-analytics.com udp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp
FR 79.137.48.176:443 qxpqxpqxp.xyz tcp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation5149637594677908043tmp

MD5 3a6e9ee6c1ba7c681c841f63d9930501
SHA1 5c54a1360edbbec6193b6d9de75967c9aa961978
SHA256 1c081ce87a41db325eb82bcd572fd0c91798e4c0e0530353ca108b31f867c676
SHA512 f832ca347034374d63e8b227d777be1b9a8aaa7966d2cd0196aba458dea0b5010fbf2dc294b8b1cda3cce122e32c863b7522c75e5619d7f543208a24463f9f37

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 fcc6c2b72026d99e7f38d34fc112e34d
SHA1 cc6b01bd0223219aca44504ae90bc5aff07b6c8c
SHA256 c073e16e1a7118a89cc6a8b2b58d29d0a5441881a4a6ac0783c88a3f3b2358ec
SHA512 0bb8fa269a93fc3b7ff199ddf8ca8b442c84b3cd6240a1c003c986283fdc10770d2e49202162746738dd3fd99550a7de12b5dc33e3202a10ad61d0b4ed6a1137

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 b2e83623e3157675e796144d9de0ec65
SHA1 9f59a7f3027089d1a4a1c852c815016706789adc
SHA256 33a6e450ebae0d1ea30dffed934652b8e91e5b259677efe2348a5025e9f4467e
SHA512 42fe7006267339c6b29474303c9caa588c6241f90a7ce87fc78dcd1b4b89da6db55b5c8e06d5b65d9594a5a97e089d6375520e4d736311f1c095906ab3493bf9

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 448fd2112ffa165989cb5dbfe705657d
SHA1 93c923f51127d1a10268f83bd9500c63fb567072
SHA256 7f01c0aabf2fd5f1274c4858a5f581bb0003e6cdcf25b1779b79338710cc0139
SHA512 71dd50ebfc1dde9ff03f4d482b5b46bf26dade5e1c74c2fe4377567070bf9fdd2e1d4d2866d2ffd9c347ea80e8cf156f63b80fc0a5ddc878b8812a20552f515c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 7cd3e3f937166578be2951d9c0771a54
SHA1 25a84a66358228a05fdfb38def8b19442a630e17
SHA256 03cdc5cd8586638a6aa6cdec62a58748fc89b52e56072044b3df4781d98dc0ca
SHA512 b483d48fdcc07b12e7a7852f8e1b7b9116af831550931a722a7318da145f5a52b8ffb665d5fe47e00e2fa21cc523d29e623d792e6049569aab56c442a8570c0c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 d68919040c06ceee72d4014f267e20e6
SHA1 68235d458d7ca25df627c5b099df15fa81e91bcb
SHA256 2581e915ad056e1c94e5d2999adadf10c7094cba6c4266f63998f719b56ff4cf
SHA512 ea549e2d62be20e20d6b31c224238ebc1dd44a0879ffc8af2496df5da6db358a0f027969841be12a1f320433e3b3c56aa5068afd0ccd45f1f3317a496a8206eb

/data/data/Mad1sal.com/files/PersistedInstallation1017101871168503027tmp

MD5 e3a12eda1ed3fe93dfc220075ac2b9f3
SHA1 ea5289a147e4600998d8e6b0e95eddad4a4f7b34
SHA256 52f7318916a0cbaa483678eb4a3facae73e6d9feec23c5f1fe1ebb9e2584c43b
SHA512 463315aeb81c721535b05c94958f8c1e4a0ca914163aa5a26db01dc12a139b42ce1de347f34bb4889f4d4ef84c17b29696f31088cd409e46422fef4448bef9fb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 56c27ce36788b1209b88162da8f880ef
SHA1 3a1a70ba9675f70a654cb571fe1504cdefd5ce3e
SHA256 b5d104eca4cca812a83dd8195a937415557a9f85542727c70ec5eec6c2ecf6e5
SHA512 5801b443875001cb344f754a55ff6af9b82739f236c04e30b4de04f6227a6291f6b60d807e5c7766f92ce568571508d8473933906beb47e56d60b5ce28862acb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 c28fe31d4baca3f83e90a60ea59dc26b
SHA1 1842348525f90cc3f05d177909506cdfc6911b3f
SHA256 29267b2c087fd57a46d9c64446919bc8a5d35f9abd50f84126f789f8368b1ba1
SHA512 00c6734872dbf0719c58cf5ef90c7c8e9c113b8301c4315b07946ed712475d66bfb6e95a6b3379699c355f55ca54c89a6b2a6b10d8c2611958b8559674df236c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 2d2920d28cbaf7c4c42ab7a604c3fcee
SHA1 28914ed9ecbffe9bab4c04c12d1caea42463e44d
SHA256 53f2a8fc678267d39aaadbc0a2b96c3727e3c6323a04fd7ddfa0826d0fccc5be
SHA512 6ea0b222acc1af16b719c5c1ceb14d9ce1bf665aa82038cf66053035d4e5a6742facab6c9e0c8dabf3c61fd9385b51fd4330815ee9f568e93c80bd381e7ff303

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 fb0b70769cacda82bb0f6dd0da7bc1b4
SHA1 c64b0455147a2ac21302537e6ab3a6e958144ec7
SHA256 be6ade2f4b3e17cdcdbdf4687b9bcf2e03cb6cd79dbae397aea483c88ba60fb2
SHA512 ab7a60643a9f75269929f3eb074fb3c5cfef3e9839068eba2076c81a588441431a3b0ed42102c3e8b0a9623e7593ff29bbba7df091d862d24314bd97b52765ea

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 485c01be2571b9fa12305a15617740a2
SHA1 323532e157ab031406109aeaafc0f6da58f8a03c
SHA256 60298a9a84eff7fabe3e8474e8426e5851187ad34ac1a775a9864c66c4bb58af
SHA512 3d1dfd1c4165dcc4819f5417e666cd545d43de3a571a3f69f59e6c7699c2f64012463e515f1794a04d889dec73db092a1fb6ba43aefb3efe5cfd5903370e315e

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e