Malware Analysis Report

2024-10-19 13:16

Sample ID 240402-mb7ndsfb66
Target 30ed3d74c98ae9ed141c8ae7a263decef971003199f053bf55676ffe2b1caff4.zip
SHA256 9ab480c3dc42f9e5f1265bcce9ae752a3ce97ae7108efc97b8ad05c5490ad8d8
Tags
discovery irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

9ab480c3dc42f9e5f1265bcce9ae752a3ce97ae7108efc97b8ad05c5490ad8d8

Threat Level: Known bad

The file 30ed3d74c98ae9ed141c8ae7a263decef971003199f053bf55676ffe2b1caff4.zip was found to be: Known bad.

Malicious Activity Summary

discovery irata

Irata family

Irata payload

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-02 10:18

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:25

Platform

android-x86-arm-20240221-en

Max time kernel

5s

Max time network

134s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 46.200.250.142.in-addr.arpa udp
GB 142.250.200.14:443 tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 rat-remote.online udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.213.10:443 semanticlocation-pa.googleapis.com tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation908514344626613124tmp

MD5 f184eeba2d0504cbd51775907a05739e
SHA1 84a2ff0656a2b8c041e8f2b82dc81aa916868389
SHA256 c98d8fa72529f8dd97badc52322223efeaa8c745229a17e186c7de154467c919
SHA512 16580e370709a4414d301ccca893fa3828b6b02910cd5dab5c208f0918d271ba2ebae13513317386d456ccd3bf8bb7f7b3cf787098298a992575e73a3ec2a320

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 1fe5991f4b28eeca05d983a1b731110a
SHA1 c5b1d93321e07d769ec6f29039f53d24d26c6a1f
SHA256 bddccea4043f88e40a7f8816aaf65af7e744c1a12eb58854dfe72e35cf442628
SHA512 0f44bcf0e34aadec18eda42ebf79ef7408c2e49142397fefb48d8cd3fb2516bc4e6cde61165209ea0bfbce9ca052c01bfc60c462f3c19a9d50295439534b387d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 48b7bc5ca936bde232c6265f9957dddc
SHA1 79a141073e9e58f79d33a940ed0ccef6b42da9db
SHA256 f7a10d114d7248e14104b23edb972c2a5a98795511cadfb4d84a7061dcbcf4a7
SHA512 47a159bd7eadf242925af89eb3ef058d3329ad138ba3f6881b6006ca4d3f7f6bf7fc2ccf549f838552fe5070a343f54cbd791c3b2a70b7ae1aec1578130eca64

/data/data/Mad1sal.com/files/PersistedInstallation7563384619727334598tmp

MD5 7de921e15b01de9b3f098196f180fd2f
SHA1 2f53afe294ed6c881c679f7c94d7acb60789e752
SHA256 7c32855c4d5a8ba43688c3a98b7cbad864213d30d2b432b1722e64d1e8a0f2bb
SHA512 95ba7369fa1a52facd1f3483db987a3f24ce05502ad60d5c726507d4cae6ba36ca6bc44ce67e7c628ddadcbe1256b5877b60a681e1739f4903af95fbec949e0e

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 3b76538c13fa86776232171c8ccbaab1
SHA1 fb000209cd6285392775e3f824e0aa4b5b24d03c
SHA256 e65340593bf103455cf9b60df568d01c0f10bf562f77a18ebbbcdecec417b89e
SHA512 b20850807dcbacf153a3bc63ffbf8df4af4d72061cbe48f41b3423e7c5da1af98f4f5d1f86f8c97c069f72b7f196528fc3d629ac7f29616816d75b660f6d561d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 70ee6f4878fe819852bcd51170167c92
SHA1 3692dcb5cc2f20b29042ae1dfa9bf2bd30b9d392
SHA256 d36753d1d999775610617b251c0d8cc74ad69c5e4f277c71868a5b1a0b64ad67
SHA512 0747221b0a8b11b093ad89773481e680f395ffd7fd2aa7ad86622d663ce5a5a39e821f2ec2883516ab2da055d56644e5812f34ccbb6d1ed3b45709dc0a34150b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 6e648cad838df46324b9eb97cb02fe04
SHA1 ac70e5a8679c445e6a9ed521871cff76de1cc913
SHA256 1934b2f911a9f859ad8779fb2c727a4515f1448480da6acbbcfec7da456a5fdd
SHA512 4a2d1046a08cc7a7195f6855ac242bc63f8686520091f42d161e5ebb1e8aea2a7f4ce546e4dd3b66e351cbabf09e54a82b7b1cbc6e8b0c9d5c4be492be73060a

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 c419409e306fa1407e7a925e772202fb
SHA1 619f94aa004ae43c6df76227cbc96b7ed19d7a06
SHA256 952ed667e7e715dec1eaee15b7fc907baff3c30184e60903a73ba4f1336213e1
SHA512 0e9fa99045bd771c8ed9a60a202cead8b5fdb5e8e6ac06b1408fd2ccbf3a0c961e07f018f7d537218172f7b0c283d5d3828fdf4c8fd3e539a9033696eaf7dc94

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 090edb0a6bffd48a85decdda2d918ca1
SHA1 eea3b2eb39282555b19f5f965d881a3bbe3787d0
SHA256 c6072e43afaf5cb783aea6ad5d5d4e57af518f9537c0ca7625c9119c0a4a7027
SHA512 7dd47bd0ecc712c9324315cdbcb3004bcfceade0055f9f698e477caac9b48e5f64c489d941918f82045dea3560b2b47b605d3aa74591c435503660928e1220bd

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 11d48d85bbf9246dc65d5f7d1cfef763
SHA1 898c91906eacbec1951c03add839bc88f4b38faa
SHA256 4cde269e6bbe15f463fdc78fe4cab91c47fed2e56980a050dc843407cd8d420f
SHA512 03fb06bc853e90efb9869a889a1cd1dbcf95375305969d3c47dbccf344575ef5056d63ff4696b84776f8ca1a09ee83e250f774e28cf231d6087aab5d7361fc85

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:26

Platform

android-x64-20240221-en

Max time kernel

6s

Max time network

135s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 46.169.217.172.in-addr.arpa udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 rat-remote.online udp
GB 216.58.212.228:443 tcp
GB 216.58.212.228:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation1264502034500787666tmp

MD5 6f966203fc2571c91b9637e990dd50d8
SHA1 c73b5381a9f26eff16aed32f7a9f70985fc51a3a
SHA256 befd9b112a632518071efeb0e262febfa7b19452f9c617941edebb1432ddc61b
SHA512 16adf71005e871c989c3afbe202e7b92d809d768a0e4e321803f6f9d1637815d7d46ae93ac78dabbf12e09ac212e868132c0b46080ed971e39265d3c9d7bd893

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 69fe63fb79daae259afaeb152dd8cc51
SHA1 2c36bfa7f448a0d6d250616a4bab6386647adfac
SHA256 bc3410c5bad317ed26d5940733a8cc45fcd70faa245452d8314273e9bd9c43ad
SHA512 b0919dec02f4ab3c47410ee096b13ebd35f2a2a324a31674737a8a0f0f96e7ce03ca1d918cfb696b6339510bedaf3500364df3249441cde3f483f7418ec5290c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 85e6dc3f714b061ab3c27d1a25182e97
SHA1 cbd090817ccdd90bb36a3511a7ecdc491d9f950e
SHA256 84b025cf55ff1ed50f2eeb8bea49e163752db02f53e934d14e606343ade36fbe
SHA512 9e070e5ab6f2958b8579c58b1b65b565f7d92f3f69cbbdc883acd5308068d94d8b6edc438a2d6b354c898e3783056cde7bb29bb2773e9c738f6bf92466436010

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 8dcb494691ad8b661f906a736e77f93c
SHA1 fa1684dacc7b56f40c8075201c0cb535b401b280
SHA256 df29d0d393bca8f589c6c0b60fc9b88f3a38fad91720cc0bbe406f0c2521597b
SHA512 f822f0060d81bcf634c17461576b558c62b4b8f2504b75d6176610454e0f377f10f1f0933eb6dce4c8e66c0ff2b7c189072ea335ea55874c080f0552ecc1a632

/data/data/Mad1sal.com/files/PersistedInstallation6657300930527691738tmp

MD5 98f22c0abb23e9aac6976b8ba347d163
SHA1 f5c21d2fb4a35f22c51b936167cfbb45e6c9efd8
SHA256 a9db689e4a4315b84430b6b8f00075257f0bac4fbf103576cf37bfa19c9ef9b3
SHA512 6a80211857df5649bd2f17ede30c0bffc310dc16568ae474a784e0b807b7ff38b1cbc94ebcca2f6ffe9b5e178ed6b3b2154f88eefda70ed56f34f33c9b5fd911

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 1eb3d2871d14394686e68ae3850b4b11
SHA1 ec491c70f8808ab8c8db24ece57b5737a9422db8
SHA256 94c38cefc8736cfe34cb69fb972feb50b782b05d82be6ae0e60bb39309f9197c
SHA512 5fde6baed2af4c04674e4fd412e6939272f001804ef284d85e5b455d953f7be6057ba3edff1061577f861552457db693e681fa9070fe847d3863e9b58d0cb2e5

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 57ea54382150d85dbc4fde4f1f9ae550
SHA1 06d52296be8b02e6a58d1543b4cb1e060e71d86e
SHA256 af1a4c7520435147bdb0f32c87340923346a5a3f6388b0bdf033b0f04e061d0f
SHA512 93bdfadae490f8d850003fbdddd0c517123285b098e8941875ad28d3d33998961b2c9d1f41148e66feb3bb3be7fa07f159886bf8b4846ee57ba927f57eeaf19b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 3902a9d5ab40427db98a426eb076c5a4
SHA1 c792c265a9d1dcdf0b2b21f796a007efc2808dde
SHA256 2d1d6032cd1b2180456892f8f032ce80d1c5956efbbed7d02181d954be3ba436
SHA512 0814eb49000e086af380f82af024fc80a5daa9d57e708bd0ef613ffa5b0df4cb98d6c30197179ab32f8032a068e21aefb639084c776f3123b56794bad55d647c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 1cccc6917580b66440201a54c4810a36
SHA1 f3eb8dd68913e96d14eff992bc664d080ab55d45
SHA256 935393d8734d52d97d3920793cd196c9c7ec86454c0ebde2a407e3db8426a2bf
SHA512 7c41dab27bb6ba734863bdf110744b7ac73bd2836ddb34568c649602df0274ee7dc1024fe4124dd2faf125a747f57acdb6a0c7d418603efb5965d8238639b13c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 08ceb242aab501e43067fbee2086506f
SHA1 f9f7baec1217c873d48e3f5fe5d16d715865c003
SHA256 d3dd6d7658ae4a22aa4aef437b04c938f52e5c2e355dfb0f429fc5d745003a4e
SHA512 0462850e5b191aa152357b7196febbff250000abb7291ae77f43fdce7852edac418fe8b427ff91933375f3dbd9160e40ca278def3f6bb0e0b3869489ff4ecfe4

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 dd9f7a73ca4ece834a1b3b8406e50827
SHA1 5bab675f3826ad3af95553989ea687dc0b6ffe1b
SHA256 61ef0ae78eae30fe64e287dfca317b7c53df48b41ee6e4da9562f647e724e02e
SHA512 51e4c703a72679930b5fb5a6a0279b291c55782c1606a60410b8a2140c9a844fb1002c7cee677ea1322e20e75cb9cbdcfd49abe0c5bc2a993ac385f1d79d6bea

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:26

Platform

android-x64-arm64-20240221-en

Max time kernel

144s

Max time network

153s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 rat-remote.online udp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation8628036303416978849tmp

MD5 f61d18897d4a32043c34949c50bc30ff
SHA1 d078edcccc8821c22f0b29fa1876edc8219f0f58
SHA256 9a520c3ecc80a49c6c60a9344907fb1ac3dd76c1eaaeedf67c8ec2d0ff8f03e8
SHA512 39be4c3f4039fe7453defed216a9776e7036857a6697021350cf0c754c81d07b8c920dcc9968743cc3a2fd66ea07419e70892131abcf5f9337793c4bbc1a7794

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 85ea843051ae80356ea76e8be5c3c407
SHA1 7e40a80984f399bda70f4768caa028fc4fc22503
SHA256 32d6c5da04599c242fc912348e9bb592f6d3a66937574e9358070d49d0b9e8ad
SHA512 6d21b4927efbb649f00e17cdf9d6abe4d0a06d4a730f213599dbb268c0a79ef1b2eefd5fb366952c85d56c448d690ee44431453f5e5f0fed6d3d13c6c7cde561

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 8e0a716f61a46bf40aa222466e3a6781
SHA1 68c174a340d10c2566a7840a3471471f800820e4
SHA256 1a620cb431c2cf4ed337433d8756537e7cf9a76db4349f1c328c3478dafce165
SHA512 2dd310d9b6ae36a95578ed7bd0ac4b4fe110c092c8ac41b5b5443add1dffc09de6f8543d7403142492cf6d3af1b11632ed9fc07ba282894c7a853325bd791f36

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 77addf69b748562a14ba8903a8082d80
SHA1 02f057d40407c705d86369fcf0f9e255efda5971
SHA256 1fa26fd2c60a4b181b0c4fb032ba24d2890a42da28c50962b007e5eb9e39ed54
SHA512 edad54c773d51a68a3b403bbb5947dee21d99a07cd9f164644e2c2d451620f588978e990a8d3668ec05591d7bbf18555c00f2ee9dfa935654399b5c9d504387d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 4ccf543c6543903df525d8f5607efce8
SHA1 b8383584aa07f62d822f9218cd6f53484328dd99
SHA256 f1af07f8fff5d7e8a71864fc8884a3848da667d27cdd3a6d1dabbb616e9a727d
SHA512 012fcbb39985fc2bd148a2d89a68ea9398cfcd3b32c900f30fcf762151f9f0f9c7d61981c7056aaa1236a8e8e577c4ef7872c70eeaac0842af47cefeaaae13cb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 d7c3ed246bf9a6751a340557f0c66b66
SHA1 7c21ebd41c7a51ccb81f23b9b608df6a16d06c65
SHA256 4550df50809078d834036a4e4e7e52dc7ff1cbae6524c4189472dc49ac04adeb
SHA512 90bd40fa6636307c458b1f91c3b6347a903c8d3f1a1818d2950e5f7f35bec084eee72349590f47663b6a63561ca9e2abdadaa36602d2147d4d5ba4999fec92b7

/data/data/Mad1sal.com/files/PersistedInstallation4180533474613936985tmp

MD5 842b3187e634bd42638ed89e6c4eb1b2
SHA1 624427391979e2314322b59edab8857567bad7d5
SHA256 a27c808afb6db16faf07a717f6b4a979c8efde5b59472e2568b01c9fa5faf645
SHA512 1b22c43db68943205041175b115c7b5ce7cc13db3406b7927678289b201c983c3f62f53887bfe42492bdc9c6e317f17bd28721ab7ea466ee79d0d2dbb8675ebf

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 1eab4b65e624079c4d8ce5f49f757d0b
SHA1 993f66f2292eb88a4f68050289b53189e07c6980
SHA256 c23a05bb404b74dc5c2f6fb3fda6dd0c53ac7f287a0c4454721e64e399e42741
SHA512 a27b3c35cac001bda5fedee4f18b36abfdc37e8a879b5dd74b4f377ff15ee80ea6527fb8ac28dfe7a5b5c24367c2b7a67032da92acbe8a6668f3e3e21936cd54

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 17d8f9f15919f4301f4bdf03c82ec026
SHA1 5d4fffacc3522290fbac428520946d3cb6dda499
SHA256 f739f3034aad26517ab1dfb46fecc5a5d943e11996c522c2121b137c77cc9f97
SHA512 b615d1822c77c918937c90390ca52f44556d7c5a1e45c21cfed93331924a1d219f88d610b7ddf2810ac370b8598d3f75c6381364d17bcf167c5886e528b7105d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 84b49680914cb7862be634cccb977e12
SHA1 c74e6ce34224cbef6c458748e7101e1df7c11170
SHA256 99329c82493aa185306df9ce08c0f6ddad448cba89cdeb7cce6b977d07ee2e7e
SHA512 61454fda04b867fd188078dfa00d1759bd2cddc9b142dfe5c0d5339a7c7d24d5dd934e5abb62d5d041ebd7d720c6fc44389e396d41b32070b0e054644eaffac2

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 8146b772283901c779bc75bb9b4c8d59
SHA1 1084e04650f5df8defcbac59530924b01e374e46
SHA256 748cbcc53c8c1ee42564e81780cd7b19a4b98d26aad8ec0c93bbbd61c7aeb764
SHA512 e84f6e461323b15fd29613896f190aa65246358f41f8221e8bb88228af6b5ca80f57f5b9b02869a60835e641b63f44af2196e6d8e6e3d2bf711dfc1029fa4381

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 1fbc97cd828d6c573256cf4eab5c3e4d
SHA1 9ef0f0358e41ee8c0ead86e32116db0c5eb8a59a
SHA256 e92754035f99f062cbe378d94ccac058de12a7110c8e838f680b1088624baf4e
SHA512 55ccb5e78cd178d0faf001bc5d31d2278c03620aeba663ac53f104f635d98abaf5d1826328e931905944ffae954fd11acaf01abb12e760ece52e27c97de62504

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e