Malware Analysis Report

2024-09-09 16:12

Sample ID 240416-ltb4rseg58
Target Mad-rat.apk
SHA256 8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80
Tags
irata discovery
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80

Threat Level: Known bad

The file Mad-rat.apk was found to be: Known bad.

Malicious Activity Summary

irata discovery

Irata family

Irata payload

Requests dangerous framework permissions

Acquires the wake lock

Reads information about phone network operator.

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-16 09:49

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-16 09:49

Reported

2024-04-16 09:51

Platform

android-x86-arm-20240221-en

Max time kernel

123s

Max time network

138s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.204.74:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 172.217.169.10:443 semanticlocation-pa.googleapis.com tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation3813708813376051143tmp

MD5 422fdb0ece15d983520a23a19cf4aa95
SHA1 2940f42fac73edb26db7d878830d2170ae968137
SHA256 608e0832a30e546c00d79a40e1605f5c22f34af400fda7545ac456eaac0e33bb
SHA512 803c569ddbb702a34a8eaf5401adb1c0d97fe7c3627565c851492c6e05ba2b0f9fba4bc5c66f44f2b447c5bdaafb78aaffbfe01c1baf07ee267bf3a1a28e977a

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 058d8e1e2c12d403e6532b6f6e74c55c
SHA1 0c49d6b98ff20f8e3afabae2e91501addba322f8
SHA256 85f849213a6ddd080332b39b9d57d5f5c948adff56ceae2b72f38a627a059312
SHA512 c2fab1f9d5624d54db9ddddbcc3b0dd0064a38072c9e7767033e0198aa6e82d52b7929c77797ce02efffb39a81bc61cb6d1307f1f17950abe92f1db544311d37

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 5d5f458372db723bcf3eec0728886343
SHA1 f122295559f91238d702f9374993674f3b739bea
SHA256 1fcb477b1c2b28470bae83a9c165a56d58ba6439bba3a9abb49a2c0d86507b27
SHA512 17d8c23754e146b211bbd4abbf26d78e2c8e621fca757fb3cd2b76f9a92f64214a72e6f1a3fc2cb9ba8d8f1dff75c08eddc63fdc0806caf6607f36dbeeee9a98

/data/data/Mad1sal.com/files/PersistedInstallation8681227812943961534tmp

MD5 311972678809e8ee23e5067f5a582d1b
SHA1 9623c4fa9d52030c5752b845d2e46ea701e56e34
SHA256 99338f7a354d92f1a374bb91a87e491a3a7b1e72c48220bd1d979a9dc562b292
SHA512 31d046ae280677faf8253f47c353f5ad1a33b46fae7fe5effc895b634104e284ef8119c7e40233d2cee5d499b4db16c4a4ceb147deb90309585be54aa0e8904c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 54a82f2934861d6f86b989fd58cfa3b6
SHA1 83c619ecacdda6a988806cd37f01cf85acafa29c
SHA256 d8a6ad14f4835f7e7cb19f3e923f3ef1811f9b9a97ec9f339a359cc2a68713b5
SHA512 b9a5d932aa712586c31996d7ebb48b465c3414f089539531db25c56c59fe3f85d804b6e4408a0233e36cc8188c57ee23ec8268a0cdf39127cd6170fc0d449919

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 efe1b14aa9bb4209cdd1d9125564dcb4
SHA1 b8df8c310d797a552fdbf4ee41199675380e5b7b
SHA256 3fc5aae204851673d1cffc5b3fae0e91b09298978f838bc97b69129f780a5b62
SHA512 8e2c999deb93ba032fe4947ffad6650988b4cc2199b3b566e6824440dccc32864ca1570e49ad338538906e25ed3ab06739177ac7bb0f34226a1448a21e050f4f

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 96c0fa55f17f20a1a05c8d43a944898d
SHA1 0ecd8f38511c849d584cc2f36f314725eb846487
SHA256 f81be406d0ae269ad78298e1cc3bb61fc521531164c071ca8069ed5f5c074372
SHA512 2793ac6ba3bfaa2cdf4204bdcbc0b2015b32fe939e2bc47438389e9f5ee9fb0e43c313f5a273417a114597393002708067a6ef682fafd904f7e24e04ea176cb2

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 d1b910e4178b2c03afce44fff7c74a9e
SHA1 54c53d6514d52ec2200908f4d31df947b1085707
SHA256 9b73b324fbe44f5d52be698b6d81114c70bf16e1338aebad5a6fc74966e47374
SHA512 772b9e5cd1a7e8ccccd8d8aa327b7c85539c956f7abb5006a16786ccdfebe216cb41d6081dac2c4b0ff673a1bd554c9543d8c49f65b95335bb63c9554f500512

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 06c39e92729b77c6b8a2380e3a73e6e4
SHA1 16724cec3be8f72280ed0a68dc24fccf1c434ba8
SHA256 2009b8633805ba9f461472c4e1f16d67b18cfb4e68d1250f4a62d50026162de2
SHA512 2584d2aad5d55d1c0a032fb934aacc63bb82682e659f1bf0cd3f8bd6771b5095156f384456c8aa587827469e2b4de5a260a1bc858a3851078bc66420c8a2509b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 657955392e90d094c0d952c4405e5b86
SHA1 1f8d737f80bb1db80c8835d4a4a0b8da8c9b6d0f
SHA256 8c6623aa091005db5e5bc8ace9ab3a94959ba4290b2d4f67e16fac3cb7b1b5aa
SHA512 6075b3691b38960c0cab2e0e74a4c84c547447a7e3fa417c0e0990a0d58dd0e193da600190bcd2aec34b98865496eb73800b4605dc3c3a860bba5bd5a6b5fa1f

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-16 09:49

Reported

2024-04-16 09:51

Platform

android-x64-20240221-en

Max time kernel

5s

Max time network

146s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.178.250.142.in-addr.arpa udp
GB 142.250.178.14:443 google.com tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 mad-sal udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 172.217.169.78:443 tcp
GB 142.250.200.34:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation3479907061871936511tmp

MD5 995e162f7336fed9f2609c20e23540d4
SHA1 4d49eaa8ecf23eadd2e3fbd57ae25875d72267e2
SHA256 b69f929aac37b2e4612078fb8c140e27692e56b152b75896bfcf029c30377eb4
SHA512 581840365055c8d7150b45178779bb6c755c5d8f2d20328f38b4041acd53e14ec2a3689e1cf5ad574312a42757f6c3e843107097e35610bca1f66050d3801059

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 32510c21a1d7249485c8f0f0bf906701
SHA1 b59ff2795048a7e0528df13f969eb1819bc03a2d
SHA256 38828934f3bb5c51a4b6d576e904e2bcaa51add8a3c29487ad9998f2b4cb0747
SHA512 5779ff3a2fa409621f8666bea818573b93df8b75d72fffa4cf3f658c9128b5ce0b59d22782d5f87fa0b30ef1defcf847b71a5356068c022d1c7b16ee5ba89aa7

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 1916feac633a2da67564dac4292ef2a0
SHA1 ef4c604c35878e68cc5793815889dda9047ea5b0
SHA256 9a214a3e96d937d16b7bf4e0c7cc493e3f23bfd6ac7896920bd779817b4210df
SHA512 cd0252bfd0277fd249dae59b9737bde7a0b1fd4f177b46e35d5381dcb760e1b7bd9fad057b4ca862463b4a6795c866dea114a3c41f906b7c534412912a7eed42

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 91e69b3da64957ba57c6e53aaceddfad
SHA1 de45906548196cb08cced0cc23f6d4c717b9a50a
SHA256 a32e586af6138a71ad9d8f878ba700795641457bedd4984001c7ed8f8d590be7
SHA512 d1e4d4cd0f82c99b276726f8e30fbe5fa0738407816a83efd4f08fb80706d72076a2a0827a8129ff2ca8d76447a7ec5051fc210678bca3265ece2f2f815b0964

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 8d86677e3147a76c9ee5267effee7a41
SHA1 54d2943454941647c4f7a8c76a1dc1f48b10065b
SHA256 7853291a925314393c04a415a7c00718cdc1243152019f660fc5dbd16028134f
SHA512 5e2f9640caaf33d17962093c4c07991d9cd6ee9de1c79b03731a585d7a32f4d88f1b4f0c07bccca67b2dd4fe91f689eb1a16665f35228a182793fb376be3b713

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 1857e6ebe22fe2abd6bf8045d0b26d16
SHA1 03c57284fae0d2852255a35aa067852f5bc69081
SHA256 5939bde21b095ed4ed5a917db6402e29ec2a0cd8b1564303e3f93846aa0d3899
SHA512 225c07f8e99bf076f239b61902292376e8436b5299a51af21b08979b823a34609005a84c45b01bfe2357b7d85ccefbd65f386423d86522d01273cad4e1e293ec

/data/data/Mad1sal.com/files/PersistedInstallation4107024692136650433tmp

MD5 e6d1b2d4e973356cb5a52004610ce1eb
SHA1 1979a5a1e9b4f60b6e9b7e224a0094822cc526b9
SHA256 c1d83a9951a3b27bd09b3566e31f06f336148783d279b7ddd4318fcbdb2af5ec
SHA512 01ad027c2179c6bbb959600d12277523a60470168ec4e3d2590b489da5e824e7d1ddc348f90b5c9a99aca7f5d9cd4711cd8dd16af65a42404bfceb07c0e04317

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 f397f397d6634c9cddb693fbd2d7cf19
SHA1 07f856ef6db5cabb81fe92e9da87abef5bdb4897
SHA256 28a6d381ef5c9a67a0c65928cc52abc26053f81bd415b9c35bd74817ba25a66f
SHA512 49d8dfde2c045e0ae66c0a2609e5cfeb282a3794b464842818372d5b5cd0e9c545d773517918205a89ba2ab63c38404588c6be19b4362b657036514b8a4a8e56

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 3acc25c342045bb8a025523c9dadfd58
SHA1 ac6173d336e695254db40fe7f46f5a4f18b4c7f3
SHA256 04da59b52cc67d33de7775e4221665966d26226b3c26a2fabdcfe2204263a61a
SHA512 f2c837ce78cb6ddc4397f3fb7227cc15850f625a5d4df6500e430bca9df12bae5f9e3ae35713aafa30ae13a0af396730dc14f826411a1d1cb1e7476cd0e2ede4

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 11ca45125530dd3f0c8de4bba920fc42
SHA1 11352f104efca152f7239de8444e09dc7ed53c80
SHA256 2ba434716c22da506333bca39047bf2df743e57886648e958f5129cbea8b355d
SHA512 9fb95f25b78f7bb5dc41d81717f0ff36a3f4a60d2aadff583dad95be5a63a251e22be1ef3850fc3db5138dd92b51d808901ac72ee1a36e0e46dd299396dd1602

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 79cc765177142ddddbe168c0454f3fb2
SHA1 b8d4e231d92ae26c2080993fab2cfc95023438ab
SHA256 4ce6853a6604c16596749b04727e55e330669de7145ac67eb83ca4559c2eba96
SHA512 a56d49d879d865b9f09e54a1061d99cce83eb536c07d8e3a579b82ccc9511e1639fec707e0dbe6c09caa38adc6030452f6897d5e3b40049d1cb45208a8a43984

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-16 09:49

Reported

2024-04-16 09:51

Platform

android-x64-arm64-20240221-en

Max time kernel

145s

Max time network

145s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.213.10:443 udp
GB 142.250.200.46:443 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.180.14:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 mad-sal udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation8460427846129876639tmp

MD5 59543318089501cf705b187cfd3695e9
SHA1 6f6bcf0905ca327eab897edc3104278cdeb929ac
SHA256 2ca8dc7a454cb5fd2ae88b8f0764c0f28c561cf83d8d74780dee7c7704dff759
SHA512 b5919dd0bb092e125644dc60bbbeb8a895896aa37752200ca38aef150d7810c677f55d785f68d10e94b61921884c6c31417a5a1e1bb7ed8fd98243d067ee0ac0

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 731e69faa6e4d28bf42a979536ec116c
SHA1 38a4cebaa165e85bb83169afbfbd733f806820bb
SHA256 b5f09ab58b8e49780a51d6271b8fc887a8815a932c0f7700b5b1b8924c14c23e
SHA512 b055c3ade015a30568d69d65377ee08e2bcfdbc3bbca828484e05ab90ba51e43bb8c4ad46a2109db081c08c3a518af09f5a448882f122f0ef34b6ba07fa195a6

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 85c7ab3bd59a950c001ea53552a03157
SHA1 4e6abacfeb24d893e922abbdbe78a9bbccd07092
SHA256 137d757774ecc999d12231a5cd216e937980cf97b4dcca816d1dbf15d8eb4d20
SHA512 6c182973a80ac516bb9fe404ec683b344a96ba6f8737806af8c00a98887994c180583f02c251b26af926cb3308ef2afae4dc24c86758bc757b4213a4db76c3a4

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 116bfe3585d38f8e18b948aeaf085f3e
SHA1 582a79384b2ef1998841c762679b760a0781d225
SHA256 222cc19fdb343d6ce2438526e194ecc1a5104fe140931fa2bb0349e76969f314
SHA512 0c2b6911a066b0a186f30e1ce416adc14906963f03d647f2ee5c772f649a33faba13debc26cf1fb1ae380e2756ba4215e6bdc11bf4b6ba850811a0dae3df58ec

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 cafc7b3e2428bfe92771065499543959
SHA1 69afad8eb37d38a34c2bd2d1e939c8ed7efae4f7
SHA256 0458d4318ad0ab644ac4e36eb28819139907d09e9f3f64b54e58ce83749d4930
SHA512 e4ac29c0e4ba83dcc1967660c911cd92ed62c38436b7cdef1985ab1c7ba11902abe10e2b78c57d45e566a7c10268d07b4a587b6acbda80aad193d29788c54db4

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 9b9c3290837581d2aebacd810f05d190
SHA1 047ea6e97292975ba5484aadcd4368369d4c5ce5
SHA256 f84df6ccb0eff5bc908d1a5c3f3ff8cb8e6a6068e9bc8b92896d2e79a7365574
SHA512 8595c93a4e816e1e559e75086541e4d991207d2cc44f484c0e37feab39e388516c469e616761cdb915bac726543c4931f2883edca154786c61cf6555542d0933

/data/data/Mad1sal.com/files/PersistedInstallation2701557404293826939tmp

MD5 ca95f29bba6ada8ebcf0be11f5a972e9
SHA1 27267325196c47fc9160da3d4e677e1463d7faf2
SHA256 cb29c53cdbeb62bc41ee81e55d971605c8f507f92923f7d1fad368834dc1ef31
SHA512 aeaf4824c63249e1a9c075d818f00042d013276eeaa75a1063c47ccc6efd48fa3b449ec69076d261d580c01c0603cebf3dad6e39cf0e9c53d58ae4fd76c6ce86

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 6192fffc985d7f0a78b84b705c88cc88
SHA1 3d297a5b15e2ddaf650485d7869229a73f0b7a09
SHA256 326afecae0e8fb100f6e99af09198b9c195a6db33c0ca9340c19387c9fb13728
SHA512 717a0d2d24a55d6affec65507a4cf9a1ed6d12a995fb20631e7cc847dc5d2501f00187b8aa328ab7d5f84031d229184e7030975c0e0a694bcc61a85b82922598

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 841176fb7b0d8c0a23ef79815d2d6f63
SHA1 db310cbe2d7580c1330ef5623bc6deb33cf32470
SHA256 8d14e5285f901fe07b67640cbba256640c4e09442e7dd2ed076abab7d931f250
SHA512 59d3a3207b0663835b286bfd914e62c9526ad1514b571c86b3a6cc3b5d30e93086dac305d82c4a030d77568014721bdfd4af0c20f0954f7758e3884023633e1b

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 5d0c6f05fb3801a2d2d8c68505fe2a02
SHA1 f4f55b4b951c2627df309b7068f2224912ea8a94
SHA256 0988d511303d7ad9ae36cb60ded6379194368e82c1eb2171f6e7aaf43635fb88
SHA512 6dfbcb0ff832dbb9bba4dccb77d51483e65f328a5f66554ce219ca2eb527104ee42c576eef6d619164960be37e0c16ec115fcc134694fbbd0d2ca84af6897a81

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 4708eca476b3c89430b35b440d1e9c66
SHA1 cbfe7cf41bd96658b4e588f8425a87d8c9d701e4
SHA256 d637dc13765cf9a2b29f530e77be54d175e10a58ac9c267fa59ed10b87a16881
SHA512 f4481171e61896619b901ea234ae51df74c74438b083c08bade76f452e766270f60a93f83ccf3316e82dca6c3e2a5cda03bdba1b02a153afb06dc948e67115f7

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 fb5499753ae4115256583ff305664fb0
SHA1 9aa6f37d6aef49584dffa19ba7d5ef78c86d0ee6
SHA256 63d8cd89218efa13bc7fe329fb750fb0b340fd42fb9f565962ff1f701ef38772
SHA512 d8bd59f1e6379b6531d3d75eb15f09aabd8c9927d7e7a37b5e3e06905700056b5c100e1b4346a2b8040421c1189f20c38e2b6c9a2e5e8c02a006a8a19608ec05

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e