Malware Analysis Report

2024-10-19 13:15

Sample ID 240402-mcdfyaef6z
Target 77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.zip
SHA256 2c28b815e18eeaae191f871f57d2f04ce6bc9974553684341433baf430034433
Tags
irata discovery
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

2c28b815e18eeaae191f871f57d2f04ce6bc9974553684341433baf430034433

Threat Level: Known bad

The file 77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.zip was found to be: Known bad.

Malicious Activity Summary

irata discovery

Irata family

Irata payload

Reads information about phone network operator.

Requests dangerous framework permissions

Acquires the wake lock

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-02 10:19

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:31

Platform

android-x86-arm-20240221-en

Max time kernel

129s

Max time network

139s

Command Line

Madsal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Madsal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.178.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 eblhg.com udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
DE 23.88.0.184:443 eblhg.com tcp
GB 142.250.187.206:443 android.apis.google.com tcp
DE 23.88.0.184:443 eblhg.com tcp
US 1.1.1.1:53 gov.kavir-host-sub.ir udp
DE 54.37.198.227:443 gov.kavir-host-sub.ir tcp

Files

/data/data/Madsal.com/files/PersistedInstallation7963138342202539025tmp

MD5 201d348041da5ea3565409a06add1218
SHA1 d69350219285f17283c331e70d2ebaf881c0dded
SHA256 390be59bfb099f8aa3de7b0823913cdf42d95474fa3340b25a37a37fd4cf8a3b
SHA512 a84aac7d229557be40d660253343afd524f1ba0a77ca70b02e50cb06eadb84ffe7b2b32af6e5e52a22443142d78041378ba1b10fdf857101aa79bfa72cd033e4

/data/data/Madsal.com/files/PersistedInstallation1573412168957387895tmp

MD5 3a926bbc1016f19e5e76f6a2f385fc98
SHA1 774d123883a2317ddcc0ce487c0b6d822066598b
SHA256 5537c0c7877145e050c00ee7d9fbb2a476b2140a4c28de417a125a561aa2c66f
SHA512 31ba0db2158892e90dde19ac2197dc6dffcd325bfd0cc5291f86d291295706f6e1caa168669c9d1bcaff1f36421341495869dd70831c470aa8ff72ddb7e8e245

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 9725856742f995ca52e2e7c47a57d745
SHA1 a8741b3b3545e9d8c00aac9e12289c70fbccee5e
SHA256 5cae5b876c4fa8f287b5ae4c287e13a3b0ed9dcfc2afa37574902ac83353a81c
SHA512 607d0686a9604c67a85ef4f7f5e5bf6318b26e235210f334bfcf1e8d3e848ea65681f2c043d0a96a7de0d5e93219a3dab788e9d01ddccc81462bcbeacd8de6e5

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Madsal.com/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/Madsal.com/databases/google_app_measurement_local.db-wal

MD5 a8b9dd6b0c565350effb60aeeca2ae1f
SHA1 256158fa31b571417024712bfdf4b905a6500cc6
SHA256 4abdae0893fa8b5fc01fd2ec56f34148519862a1151dd25f12f63ce44fde65ef
SHA512 aba85d0217fc3f77dd5392192e451351a4f613cd3c286996a5e113250372511b0febaaef339bee64a1b2c339569ac9744caae2cbc88eb55224c2336c2bb93cd6

/data/data/Madsal.com/databases/google_app_measurement_local.db-wal

MD5 8273c0f1af5093a66cd225475a0b7b7b
SHA1 65ea04bd9295b8349b79773b8ab338f5e65229a3
SHA256 708504dbf41c2d438561f1245bca0a551260bc205d50ff49e983b5bd1ed35e13
SHA512 c491f38956cd2b6e92ce5c45bb30fed955f31bd33b71b32927e57c730a2bc099ef351bb154a47d1e0b30b08ca46e832e9c03aeb780aa96bf3d1ba73b3d55701f

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 43afd3ff8248a00c4191f0ba94678c3a
SHA1 6349c6fc56b21745818f61f35ede4936427f6b71
SHA256 608113f9e22781b8b6bf6c051ffbe8e8ab7025ce2905084fff8c3a9a2f60f54d
SHA512 731acfd91c6e0308d22a54eb5f15935bad1024ee54b5f055a93992efa39f7491b2aa65991b9e9149ec535118b994135cd8994b4df803620c261e82b7b13161fb

/data/data/Madsal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Madsal.com/databases/google_app_measurement_local.db-wal

MD5 49db0273c9af00460f6e8449f2f05865
SHA1 fb99d93d4b79800b510494ab2ecec8cbafb3dc3a
SHA256 db63b35eed9fb3878377bfef8daa9f42e780577d9c6f21b025f42ab53d0d4df8
SHA512 f7b3606d38f4ddd667e82adc3b20efd224642ce4add32f52e089af973bd703dc41a4baf79f6272c395de94c17bc0c7a974b1257713bd82b5d76eefb27112bc50

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 4a48d98f5101800cecc2d5f802581d5d
SHA1 86361e79587d23d096d5dfe49684a47f6a3a00a4
SHA256 0137d420abd9d2afdd127952c7da60ddfd2adf0766cb3788347bc2f6c38be6b1
SHA512 0d8380f2227d5d793a66ce1010481220952241202c828fcd1d05d9f0c56fee68866eced0f8f788fecd8ffc2944a79b135a5577fb72eecf0362d27b599499807d

/data/data/Madsal.com/files/MrAventer25413652.txt

MD5 0c1e3840fbec04cddaaa9ede4033f2f2
SHA1 82b7f73ef5d71cfefc1645b528ed20a2aed07df2
SHA256 481a2a8e5761a29c6939f2bf541ca7f06c1c8d671612b5a7dad02bb889051df3
SHA512 bec4bf1b315544e5d9862d476ee3e85a89803fcdb471833cb4bf04f31bbf4276fa02aeb6f9da36ef4c68de824e676a506c46ca45fe72a834a1451382e0ebba5b

/data/data/Madsal.com/cache/1

MD5 356f657f4fb985b265cdd0bf49ff86c9
SHA1 18fc997765c9745a4cc1e8d74f3af44384a2d8ea
SHA256 a87e11a79ce9d5f80492712865012c67337fb60da0f1b668af8fec59646523ab
SHA512 4c748f56fb334e4f04a8c8d5b0117ad49df89e5e89c974d9adc77c22448ca19e4cee0af0644d03cfa3005bfbc2556888ededf467cd1b05a0519d3e1347663be1

/data/data/Madsal.com/databases/google_app_measurement_local.db-wal

MD5 e3e1587f49bc2c6c3450430265a832d0
SHA1 1519766413aacba52ae4a1e723521aa01ee6d3f5
SHA256 8b0d4709317a2e701800081226f405b03bbfb997366a861ad523ad40528b7da2
SHA512 7597531091136e4a8ba5120d2421ab97db36857f6b81b0173a7481c5d1d3b0fba67f2191bf773b96628f4b601fd63c0506eb12b9bfefa0e82ad5a92af3691733

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 23aa259bce106e43e134a38f14667bf3
SHA1 712a0fc6d3ecddd778fcbd4b9fc6be06ab81856b
SHA256 07161bb149670b3507b5f149f9439b112ad6cb543b49e2a425fe9922f73536eb
SHA512 fdfb9f00ab91f71419b0338aa8d6e829ab56dce3ba705f22fcfa7a7219ee98fb24cce9f8b010f78d405fa825f4bd5c90fc67caabd8de70ae01aa4f7652ea99d6

/data/data/Madsal.com/databases/google_app_measurement_local.db-wal

MD5 7740464622bc665f1f657df829147788
SHA1 c0032dd0a49a428213376a1678cfd2a86090c3b4
SHA256 fa5f6a9cd1f38789c69fb628a1748b2265f7ffd95d5bb46331af09e608f84fc6
SHA512 4596eef45754cb3de68f06ed27254d6e3e40b91601570dbe890668421507a2e48dd007be66f4d8d152e4e1d1f6def53e2064f00b2350155a78884067692e84af

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 208c341b57d52c27863375ab427f46b3
SHA1 8bdb5645314536272a81d62ab669523e3f1dcc81
SHA256 a1721520c1f7260cbc39fda0824613085c4706328cf4ffd26a3f1e2e35400db3
SHA512 b3678d683a20c62522b538a66eb8100014c4c36a269de24dc9a3fce4e2008aff74b4fabb59346a43e8766742230192e64d2a8a7bc6665464800639e6659009ae

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:31

Platform

android-x64-20240221-en

Max time kernel

134s

Max time network

157s

Command Line

Madsal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Madsal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 eblhg.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
DE 23.88.0.184:443 eblhg.com tcp
DE 23.88.0.184:443 eblhg.com tcp
US 1.1.1.1:53 gov.kavir-host-sub.ir udp
DE 54.37.198.227:443 gov.kavir-host-sub.ir tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
GB 216.58.212.202:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
GB 216.58.204.66:443 tcp
GB 142.250.180.14:443 tcp

Files

/data/data/Madsal.com/files/PersistedInstallation6203242947634796678tmp

MD5 7135cd25dff504db5af4c22c2aa47f25
SHA1 6c390a5e929ab1215eeabd2d2817afb7593f352f
SHA256 6fc3e60c3ed7dd95c6242808e2af8444379f27e0c85c2941954a7768400c4b54
SHA512 307a871b5f3ff147affd3a02b631f4eb6394162e33b42280e7b445b1abc7e8a70489cc5e4c3b9e3271840da2cfffed82bacb8a2907176f09e558b26642256147

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 31b26ffa9e022959cd98cd776a20079d
SHA1 7c81cd439429d272d7baca8b65e39b3398686e65
SHA256 10878bbd2617b26704b92f1025f24fc41067797154e23cf21cd2700c05177b81
SHA512 721624f12017c17edda53b2d1f451b0f847e28da0528047e72111b10e089d4ddba89126841b6648d41998ea61aff588e44124dce4466fd6906e2fcda8ee4f995

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 91b5f2e7edaff9d67a5ec1f3f4c21352
SHA1 8573aa93b1f751c54470e61127ed6a451614e2ce
SHA256 bb94942ac90f8e03f30f877b42f1a2199d6d9400d364f46c967f4c8331723f28
SHA512 5af95a3300e9f9aad150ab491feb4ca063aedcff72cdd7c990f50f4eee8f7207a72436ee2732fa759c38c170adf0988b112920e122c748c2b20886ada616d64a

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 8b408cf33804680c91a679ef05f0de59
SHA1 e08d877c14b8b1fcf7697ed2ecb641cc6a781814
SHA256 ab07666324decfe39ebb65eba96601191f52b85d0fc04ed3714e4d9eb8aef5b3
SHA512 e4a511fa82e3a437bc052dcf2a8b934dd2b73f55d6af9226116a2506d6219307828617efe78313a0ff194bf38f7c96b3d0146c1bc39c98c9c865c824ff28749b

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 cbdc140bb2070a411a9f2bcf29ecc93e
SHA1 b369afc1669036752ce8d0b7dd7cc81669224b7d
SHA256 5511d59d4a28f93bd182b6eec78851651c7f03aea3c304d29142cce6c3edd860
SHA512 a32486724ac2dea5053eee473db6a7e22a168b1905458473e369ec2e77ccc5bd80042c4ceb118bcc98e858c75699e5e264a77d9bf2fbff3f5bca8822419e31df

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 859b44862d3a696b5a367d926a0eaafc
SHA1 2f6c8139b9d0c0c3a438a1fde56c19e488264862
SHA256 301459cdd9b12075870e843d3ccf4a666b95a54a90478b56c279a4dbb49006b6
SHA512 9ce96c650546a805032775aa34058024e6d7552dbb10ad01a335788d4611a964a5260b7a60710b02482b9289e5e61da2c40661180fcff6da261e9b3600d600c4

/data/data/Madsal.com/files/PersistedInstallation6454942237059408673tmp

MD5 d32c53e192c4f52022d4fefe60b0dd45
SHA1 7ad7aa040a0e9f4818a80b2eb914b6fef8f3d42a
SHA256 12a17267253e4e25c4fc006da45e6c6ff539c37c3fe5e2babeb221aa6818f2cb
SHA512 91acd0489651701b15e715fece8694f3731cbe8238e2655403db3256831f43b693d43257b39b53fce24c61c8178f6f5dc692b1d6434b7447aa3805ba23c85ad8

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 9cfc671e728ab9b397a591a34a5f134b
SHA1 600c243c8e76a7097268b5643ffa3b30490ee2bd
SHA256 d055068981b43d2b935bbd46f17ba8a56e43ab97089fdd49e3344dbb267a9fa5
SHA512 276dea4d29199193c6c59a150e4f8f6453e76aaf11e1007e70f81dbcbcd470c3526a8f0550d5d1c71bc2acab2c52c876e0e47614ff103a85da75beb5e058166d

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 de9b4197942a2e733bb68446c265e54b
SHA1 9804ae66bb6a1ad71191c6f3baa811f00ce38d52
SHA256 1cb10d991047d1a48def8578e253a173fd70676aceac4a5edfc9d896a49e899f
SHA512 35e278f8d02ccc4dccf3137ac34a23b8581d7f199912c1b4853ba36ea6df05f094e21c991ff4e204b20e81d0aa0ef51f923642a9860b6aa7ce3bd777c5576afd

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 de70c660906b01852fddb01a6c2294e4
SHA1 1f5ed4c8da4ac3b84b298126417d2b372c41a789
SHA256 c8a144f35336c63514a624689dabee84381100daeaf442577337460f503edfa1
SHA512 e29b0d3f1ba03984807ec80c67320fbd7a77f7605eba598d2ed0517e8d8b6778e58cbf4c9eb8617f67eaf5003db1005a1961048ad8ce49c38ec839425dcc2b69

/data/data/Madsal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Madsal.com/files/MrAventer25413652.txt

MD5 0c1e3840fbec04cddaaa9ede4033f2f2
SHA1 82b7f73ef5d71cfefc1645b528ed20a2aed07df2
SHA256 481a2a8e5761a29c6939f2bf541ca7f06c1c8d671612b5a7dad02bb889051df3
SHA512 bec4bf1b315544e5d9862d476ee3e85a89803fcdb471833cb4bf04f31bbf4276fa02aeb6f9da36ef4c68de824e676a506c46ca45fe72a834a1451382e0ebba5b

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 a767d3048e7a811b1002442795299f23
SHA1 9245394e83e88158aab878e00f7031e78616d1d0
SHA256 aa4d50436784f7f68138d46ba4db69a45d85bd5e485370c6caeafd8701662a2f
SHA512 29426b73cfdb3a7b165e8661d3a52fbc155179bfa7332acafdbab9c81e9a42b6b3ea48b35c6203de66b0c3ea384821e3e339ee059eb375411ad0d8ebf18e6647

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 f9a2cfd0ba410d2aeadcc81587038a4e
SHA1 6ab343da5818a6c17cf09e6a0120fecc4c937e3d
SHA256 a512e12e9afed6e187dcf3c520bd66ecbd4e43a5eaf8c8d656000c7184974cf8
SHA512 13e06f054faacab34364054ac675ee1b32a1e9960daf488b22abcbe29250150670cb338da50afa31b5981d9f52dd1a731c39d670db52344bacd34ea60df6310c

/data/data/Madsal.com/cache/1

MD5 356f657f4fb985b265cdd0bf49ff86c9
SHA1 18fc997765c9745a4cc1e8d74f3af44384a2d8ea
SHA256 a87e11a79ce9d5f80492712865012c67337fb60da0f1b668af8fec59646523ab
SHA512 4c748f56fb334e4f04a8c8d5b0117ad49df89e5e89c974d9adc77c22448ca19e4cee0af0644d03cfa3005bfbc2556888ededf467cd1b05a0519d3e1347663be1

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-02 10:18

Reported

2024-04-02 10:32

Platform

android-x64-arm64-20240221-en

Max time kernel

151s

Max time network

159s

Command Line

Madsal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Madsal.com

Network

Country Destination Domain Proto
GB 142.250.200.46:443 tcp
GB 142.250.200.46:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.179.234:443 udp
GB 172.217.169.46:443 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 eblhg.com udp
DE 23.88.0.184:443 eblhg.com tcp
DE 23.88.0.184:443 eblhg.com tcp
US 1.1.1.1:53 gov.kavir-host-sub.ir udp
DE 54.37.198.227:443 gov.kavir-host-sub.ir tcp
DE 54.37.198.227:443 gov.kavir-host-sub.ir tcp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 216.58.212.228:443 tcp
GB 216.58.212.228:443 tcp

Files

/data/data/Madsal.com/files/PersistedInstallation4609787707906999848tmp

MD5 8c4a3a85f23de5109aab87f9b88f1745
SHA1 1c5ff13ab71ad858092ec7b04c8d0a3584bb6f1e
SHA256 795d7ca50bebd5fe1c2a46ab969fff3db02e7220e057ccb639d04134f3ea8859
SHA512 ebf9db92df07d6d5fe77bb04b23ff7cf0ddd49b8fb4f19781b09a14498706c95c5c808ce57f2ebf1d779804747030b351457013834c623a2c68485cddef7371d

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 0b64446c856bde6ce6cbddeca40b2ade
SHA1 8e26c67c8983c069aaa7a538ee8a571d7aa47013
SHA256 7f595daca5e50e0ce7c26160dd173ea6326459da01e65679ccfb2ad66c369e10
SHA512 e3da7f1f09d04b999d46b2a3ca876481e6ccbb940b1938c7f2727212ff1bbd444759bcd05ca22867bfa72ae7d226b0292a4cc76872e09d1c1fd416ed2d58179c

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 0b920281ba9531e6c966532175ed8290
SHA1 9beba9adb41a0327bd6be4cbe8e72dfccbfb84e9
SHA256 3d8b251178f5e7d45781c0cafd6c178463162b48d43b61ba94899f51a0617903
SHA512 45985e042c743bfb29f778a55d6c97b6cedb645a75bd36251bf6739fbb3205d4f376ef82c69658de8d564ec1910a0021e022073f11b3f7446e90a6109f4d8322

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 a5e1548aeb9557fc1954b06ee833c557
SHA1 c8ddec3e797ddb306bb4d665fc74460fb5d04392
SHA256 65f89f6ba966618a79f943f16900cf834a46830e0ea0fea24e277694e75fc1ce
SHA512 bc403868d610ca6e586956b4b4b7b8c85e168790032c169e5dd0ee337f089de58c56b38c73569e833259ad5eebf378e9c2bd5a8652305cdffde10002f981ba21

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 1c100a1ec648e7668129db5f699507c9
SHA1 b410474f59ef75c6bb740b0b38ba91a865e05044
SHA256 a790910e7678d2871afb280a100032d6ad0e4a2ceaa1344bcce6f5a3c2e4444c
SHA512 1612a54b3c7ee5e3a9dfc8fa3461ba3fa9228c616c0f20926021d0813add1b6b989ebd8dbcdca240b7526141432ca483fc658600014f7be9fd1e792b481c9e03

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 a0649cad56ff90ad2b8e9e2cdd753387
SHA1 a9ff65a8e3228ddf90ac3eb9195d27c86d1d1b85
SHA256 a28ea4e8d560da13a1f76813ae92a23e7af62576ac236436ce284af1a37629ed
SHA512 91af2d1285ec4f06805537712bf4e528b7abfb9d2854c2eaab3fcb12632ebb1442026d9e2676e33deff79d6c9feaa57821b633d56e9fb19aa6f758d9568d8fab

/data/data/Madsal.com/files/PersistedInstallation5124406311624958817tmp

MD5 3956e6abdb7b96059c51d4b6ca6d891f
SHA1 3ca9ec2527c43e353bf7da9f65281ee239b8b7ea
SHA256 b28b39dc784312c8a97d31dc52d4f1db77753f51f31b0d56f6f74481928ba8f9
SHA512 16a790ed83767ec482039efdc7b549da0be3b4ee303d1dd0c87aef04dc8f474c11384f1aa75f9a0f1e187859ab84399877975f0598d90eb1491488049b561823

/data/data/Madsal.com/databases/google_app_measurement_local.db-journal

MD5 441b511e68e02a4394080df1714df769
SHA1 c60db7fbddf521a4c216b741255c70ac497e700f
SHA256 f7c825a29620eef579d0a751997ab5553bbe1e64d5f83fc7c9ba7da70667d3f1
SHA512 65f07bf3ddb4919bd3303abb5556c0badabcb491edf12c062b6168c0ca8469ee279122b5b74c05077cc3fe360076831e1e06e3d15aee644ab476a8487dd3013d

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 ab83affe2ae354aa08768dd62e0b5905
SHA1 cfc89a8b4ce7556753ba96016c96a59cc0cb0221
SHA256 d606bede7cded0429d9d14d7659bd70079a51897f6510297641667c1716bbe0d
SHA512 c374c4868a0e627c3b7c75137a5f521cff3bcfec4f7f77df3bd2d5577b5deec984ac923890fb42fcc867c7d2c7acc703eaa54f6e600ea30b0aa3ff6314e7332c

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 43aca43869c050504caeb075730983e1
SHA1 2627be7e53c2e266f8550f2eb2dd791098ac9616
SHA256 8c7dddb4b4a0b6d058293ed46ad0029b6c7fc11756632bdfcc562690b87121e5
SHA512 f2ab9df89715a4cfa4e730f77f1ffbb152e7e92fdaebf56e32f7f5a0466c8e188d1c43bbc6d75736ae139a37035c1d9c8eb248d73e3490c485b9389609eb558f

/data/data/Madsal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Madsal.com/files/MrAventer25413652.txt

MD5 0c1e3840fbec04cddaaa9ede4033f2f2
SHA1 82b7f73ef5d71cfefc1645b528ed20a2aed07df2
SHA256 481a2a8e5761a29c6939f2bf541ca7f06c1c8d671612b5a7dad02bb889051df3
SHA512 bec4bf1b315544e5d9862d476ee3e85a89803fcdb471833cb4bf04f31bbf4276fa02aeb6f9da36ef4c68de824e676a506c46ca45fe72a834a1451382e0ebba5b

/data/data/Madsal.com/cache/1

MD5 356f657f4fb985b265cdd0bf49ff86c9
SHA1 18fc997765c9745a4cc1e8d74f3af44384a2d8ea
SHA256 a87e11a79ce9d5f80492712865012c67337fb60da0f1b668af8fec59646523ab
SHA512 4c748f56fb334e4f04a8c8d5b0117ad49df89e5e89c974d9adc77c22448ca19e4cee0af0644d03cfa3005bfbc2556888ededf467cd1b05a0519d3e1347663be1

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 4388f584e55b22460837d3be2ce5cef9
SHA1 7b63bd04d330f88d3495f1b5ba9230d05b4a502f
SHA256 cd2dae4c08aaf8ab02e50432e090845cd6f5c137ee087588d3195d1bd10e27c6
SHA512 f0fafa30a51abc20158a885a5eb254d49d4626e3ef18a57f464542c98a57715c79c1a7d6cf9b63037c730bbb3e80644bb5bc2786fa1314bae782d65657576fd9

/data/data/Madsal.com/databases/google_app_measurement_local.db

MD5 27d12026c1888625e656e1c26329c7df
SHA1 ad9b1cd04380633ba06eb1e633da77718c92f9f1
SHA256 4d65201866f3872b8a0813272eb90abb4c1ed91f5116ceab178dec8afefb74ec
SHA512 6f00289152aa7b66150f1cc2a34418d0c0aa879001ca07ccf465b69de7f1a23277e5600c33b706d29ab4810d0b83b97a914278057ffb25e673ad056fd5c46561