Malware Analysis Report

2024-09-09 16:12

Sample ID 240417-ca39gaae73
Target 8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80.apk
SHA256 8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80
Tags
discovery irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80

Threat Level: Known bad

The file 8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80.apk was found to be: Known bad.

Malicious Activity Summary

discovery irata

Irata family

Irata payload

Acquires the wake lock

Reads information about phone network operator.

Requests dangerous framework permissions

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-17 01:53

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-17 01:53

Reported

2024-04-17 01:56

Platform

android-x64-arm64-20240221-en

Max time kernel

154s

Max time network

153s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

discovery

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.250.179.142:443 android.apis.google.com tcp
GB 142.250.187.202:443 tcp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 mad-sal udp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.200:443 ssl.google-analytics.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation9047946478576877154tmp

MD5 42564185a6c5c85c04cf5d4d3936d0ec
SHA1 80ec0800a6e7e9935399496388a7605124e866ca
SHA256 a2537fe50fe96779e3bf5817178d0e7044a1fe1aa8f69556f2a59daba52b42ab
SHA512 cc5ea699c8cb2322c62d4fb3311a715e4f860ce3e2c80adc0aa58ab91a4639a1f4e315dfe6780931f0b095a08940e3d4b757a773309d8a7f860ddf16da997063

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 c9c1268e3b951a32bd200593ab08a96d
SHA1 bb7300a6fe74b5c34ead146ddd8cf8001766c942
SHA256 b0fb00aa48b84cf004dc7953b43d077b1e6a2e71ddf36af536747fb813b58f48
SHA512 1d78768421ba1ad9dbd02b8f394c0cd33419f43ed8e671cf189d37c6d374413bf29d85d3dafbe51364f8bf156277b8fcd6dbe8736e8f34183f76f0c42a0ccd45

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 84794d2ac7e5fcee3396571ebcaf0db5
SHA1 490bfd9a66ba0ce77b7177ef77db67a91f4eb405
SHA256 569107864da85b569a113498074c7774c68d246318803eb7da879a9325f1797c
SHA512 532701b84eb5840cffe4c7c848a473223950cf0a87c996c618fb1a7cbd9d22169c8754e0038530d1f8b801fd0e3b0e28b75b8d16cecf5a01873aad665a2e00db

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 acf2ab0ebc56fa7ba24400ec09a2bcb7
SHA1 bf3c7ea6e766bdd8cbe9e57f12d7d64be323fcde
SHA256 fe7adc3f734c691ffed515d778ce40f39af6a6328c01f65a38c2e0f1037f0942
SHA512 2377e68673bed990fab88b7f43cd53a111a3f456c9f274c523a933b2e38352a306e9c8c56c6587d6a70e6319fb2589a059b856adb0218e909d0946950b0e9d77

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 8d83d2f6c71a5d2013ed9c3a59f1e227
SHA1 73eabd4ab1d83c361e54a433f519d134b1575570
SHA256 2b3cb0b6a951b701ba1fca01b6b43138f57f45c38ab74c65371d955f299aec13
SHA512 5cd4f9f096af6dad8c48c4bf84b27bcce45be59f73cd154313c235eec20ed2e3534065ac886a09e076360f27b78aa40ebe50514c83e9540ac29b2e07d96fa8a6

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 2713c7b8a846698236e80d685a98c0f7
SHA1 6b5c2b674ba53d9262a06c430d9043956cfad986
SHA256 4affc2c40cabaf6b298db6310ad662e3c90e28be331b579510f74f29fd620629
SHA512 d0ab8bef98196368125c961e112111b105af8bd97adafffa1a797d7a258eb5dfb4e4a09b2c0cb778eccfcbfd5bc351b6c9de8ffab8efef096b9e38ab6e7aad46

/data/data/Mad1sal.com/files/PersistedInstallation7865671780249610229tmp

MD5 cb80eea66219e72a3348343362328cee
SHA1 5b95e697881d056d1266c08edd5688e1ef829d6d
SHA256 4e823bba24f6e96e60e31291e5730220b5d5beb09ab4021a74bc173d041eb370
SHA512 0a7e177917cbce8da0abd5521947e817367681ee8937c515675d93cbb3993b6857a8688f08a1ced62e6368895f17de36dbf01a1c9dad74cd8dc034313e445e41

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 ed612d1eef62c2cbadd2f2a97dd154f9
SHA1 2e3af81e1493c975447370e0a18876fc4cc09829
SHA256 aadebb702b7599c4fda67c6590ef065d6953caee231d5934196f0e7ba7e41a31
SHA512 c010de3267df144b7fb0696c5a8fe2d09bcca306c38cb92b37bd09e763f124df7efb306f623601908de4f89f76ead19b311bbe6d06e9febdb4653c689f3f5e04

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 3f754ccdaccba64d64b0d792fa9b234b
SHA1 8314de04ac7631f61d79013073fa303bf3009dc5
SHA256 a855049db54cac1669687fa4a05e690d4769087df1811579f60bccb72c8f5adc
SHA512 144649ddbede844efb2d4a878b06fb9fd6debf7b8ca7b0ee30f3f253585fd7d7f51d400d73be18a3ad4ffa73f03dd72f07ca3dad3182547d4447e8a2886a684d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 4d5194643058564b2fc93e36e41c5438
SHA1 753acb1b1904dcc3c287444aca55c69749747236
SHA256 aeb31be5a9b999cb0a7338a1dd7310e3029e00673e1c33955341a1e7a52a6c10
SHA512 4c47b67af2e7fb79d793da8744c21fcb781df4090ed36840110c85664cf2c9b91526eb80a91a95f427067edde66db9f66c86bbe27d82c1cf5f6f16b79cd2d9d8

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 5e6161643dc21d5e1c88d043f930ee71
SHA1 11313bd3a323e9ac9240f98f799ee920f973f15a
SHA256 19561cad505feee837b7e2de883b911d079d7a01ddea01ed7631e7749c36fe93
SHA512 977e0f133c08535015eacc48758f5305928849956f83cdc3bd98b6656b797b1e614c5f1981c5521e67d35aa650a7e9a2c4f2618aa5ba400a97dd47067496da4d

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 3c48f1ece97b9370e90623822fd0ba79
SHA1 ba009a9a4057fe6cac76aa21bfd4541a20798311
SHA256 cc5dcc6667830562e73b671e17971a2e8dd7b3a69777fb923278a86e77054dc3
SHA512 c3478bf901f67a2504695821892695dc6602eead8de87ef29592a257c0a2bb8e3bb411a48e8524d44e122299babcd6f3977c4ec46517904bc1e73e3f77be4a91

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-17 01:53

Reported

2024-04-17 01:55

Platform

android-x86-arm-20240221-en

Max time kernel

122s

Max time network

137s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
NL 172.217.168.202:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.251.39.110:443 android.apis.google.com tcp
GB 142.250.200.10:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation6002418570198232823tmp

MD5 8ac06b3b3a2e0a669cc3e3f00593ad2f
SHA1 dac2d085b407789304ad6fdc8bb1c0f4ee30d33a
SHA256 a807f6222fc298f82d77e56cde3d0ce966f67a65edd7996fa2aea4f49f266aba
SHA512 cc3f309f3f3a47c33b128a7a5de9a889e0c5a661d8c32afe6fe04e2cc52dd6550001dcb44ad470cc4b5b67ecac21bf8e888819f2201ed9e971fe3ec23b3de253

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 eeaebf8a83f5ed2341f3e7502599bd95
SHA1 bba952ec57aa8d7f4262d4673326b7a3b144339b
SHA256 3d0799f0985a3f9a9d85631ca685adb55b1dcc81f251cb6d46c086931b8c97ac
SHA512 a61ba9c8fc67dde38000df5cfc1b6995a2ce08010bfbdbb9ef61e74ce021da1ed855b22b1fd96bc7fc457eb00fb8786a681b09c11175927b71295f640a044b05

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 096ad3dfc298106ec47ae3fd55204cd4
SHA1 9b50f6a88ede02363f826a42a61ebdec4d52cb03
SHA256 25a7b5fa29c815c06e0313f7d77b579f736a48fcf3f82a3e5b6fe7440b03117e
SHA512 5c6e5f1f83bd8373d79b72a71282672ab65617dd6c03363b07236793fe0fa5c3b1ad0e5dae2b665264415c337633f2f3b04c908dee631e75c2ddb1a367a39983

/data/data/Mad1sal.com/files/PersistedInstallation1905156470196096124tmp

MD5 8adc563d9a466e0103d66cfd3dda169e
SHA1 7ca2e1ebdcbec8840bf733c1160717476b349d97
SHA256 47b2c8bc517f60450df4effc543360ca115031333ceafed18d9769bea279bbbd
SHA512 ad65bbd9f309480db92039aff0d8500c9a9d72cec03c99461d6acdab840b9fb3274d17bd57fd31f251226d809cf5cd61ba367d016925722365929296a9d19cf5

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 e6a49ef501fad50d6dacac994e6d6754
SHA1 b8b2af1ef4e4f01f85de66ad66b2a92b74d082d7
SHA256 1d082693a7354d40aa9c756a82a0f20c054481cab69abafb894ea8ed24ccef7c
SHA512 7366d226e7582f291ccff7455a5a620efce392b0f745e385ea748262d307d265b2b55bcdc49e123e8ca1ed014c7e7c97f8bf4f51c8f75847452a4519e753a853

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 a9e33c3cf9e1adb35313644864468ec3
SHA1 60c755ed7b6a8ac622480bae2bc45862bc0ee6fe
SHA256 0d2f500d7faaf3d22733021f5299a80ded508e8e7e2c682b0d24bd6b766f24c6
SHA512 da10de0b01b923269dcb98ca975168f27e1f6a467572bb5fb7340029ab40b00a2d32033259ba78382a48cf2ab32a19a9c5f15f1c9f7cea5bb2c898f5aaa25968

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 f521a50264d47e66fb564f49827aa408
SHA1 a565dc1b4db3763cb960d62e1999db042d7c3b46
SHA256 18db9c11d263eae4e93553472572906b834ccab45a75562c9a8fa7b2d52b8d8c
SHA512 fb146a64ce72f93e25e0bdd681b405fde3a040d3ed99acab7cd238224d19be0e5863009ed99fe41fdc2fd94588e53c9e63efa4aef3b864569ad13979c6486a1e

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 ae0068ca3f74e309f8d55da512e41951
SHA1 f7aad573744f83ffbd801bf1c59157ad1ec9a43e
SHA256 fafcfc14751ec78ef0028c331dcf7de6d5483a36e766ce21c00815fd1c92fdce
SHA512 9ce90e7b1f713a695c5b9948a467f8eacebc1052fff9ac1fd8ef40b1fd029aa52abcd1615df9b918420974d80632a6d5b328ab1e83d69c192a038681fef5b6be

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-wal

MD5 ae7a397d8163c8955db78abe3d31b59d
SHA1 26caa8c5f775df7aab8d8b1d0eb90e31168305cf
SHA256 024491131135b1d09c1bc8ccbc614edf2e90a3c6cec07cfa67b0f79cf71aae00
SHA512 57173db1dd43d6d674a346c645b20d80cb0cb26b7f2c5f99038c461b60e650adb9c83811375c4097dbdceb5caecf90915a5384c998a5871cb5854269ab54b700

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 318c1486fe2ca51e7deaeecb079d8b8f
SHA1 93057dbcf5a4a2add05127a47b77f04387be39d3
SHA256 99db6cfa2a7fb1e3cc5e5fb636cbf18dd54a15e48ccaa4a4a0ea4c97ea661e5b
SHA512 0f6d7e499d557ab9a61d35dc380bf93db7e47641fe84afa0ae17c020a66cb9d9182e788d31b589a928be7edeb54b4b7f6fa8783347e82d9be34d36d4364df24a

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-17 01:53

Reported

2024-04-17 01:56

Platform

android-x64-20240221-en

Max time kernel

4s

Max time network

156s

Command Line

Mad1sal.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

Mad1sal.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 142.179.250.142.in-addr.arpa udp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.168:443 ssl.google-analytics.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
NL 216.58.214.14:443 android.apis.google.com tcp
US 1.1.1.1:53 mad-sal udp
GB 172.217.169.74:443 tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
GB 216.58.212.202:443 tcp
GB 216.58.204.66:443 tcp
GB 142.250.180.14:443 tcp
GB 142.250.187.234:443 tcp

Files

/data/data/Mad1sal.com/files/PersistedInstallation8981847119844740960tmp

MD5 1f4b07d7d797005f5d6c5c056f3860ae
SHA1 7517effa6346c3235f5d199900c187d90fa66886
SHA256 4fc5b17d7c6860c023865d16250aa0d4a27f7b644408d7e48f6cf3a5aa2d534b
SHA512 e0aa07e4dd0b4a873186ada253bb300b8e09a6a9905a8d6681ebdb66bab7e2fa10d44ad13f334d83cb70a897aba797bb294df6e26cadaab5f28362074b63ceec

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 32aa36a7eb580d03fee63899a1e9a329
SHA1 5260f93a29d99abe4fcdb901190f1f2ee415c4a5
SHA256 878abd3f2ce79b6b676fcac5ae540d4e5f912c84c4d8c3f4c21cbb4930dc7607
SHA512 9aba4cd61efcc77d37c586e9d6479bb21b4617ceda34b3c15485934572b1c1147283fe2b49a031c1b935c56f956313df78a155516167a4b914dd33a20e9ba4d3

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 8701e704f0ac02aabfd2df6ac77101ba
SHA1 123efe647795f765db3e211d87a0faa245f9c1ee
SHA256 b567d521de2465b33e2ad8768465659646d3aaa8dad716fb626d9aa3f09124a6
SHA512 d12af5ade36b2447ab66d4048b5d6b3c27f285e98340d4ee6928f8fd31db44dfc14f115066fd9b08f5a542fbd7bf04f573575de9eab63a08abd60f01de87394d

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 0f06f698456080e7852cfe83ae5a6627
SHA1 9ac10039ee0c7480eb8372ea7dc8b7a7ad05a505
SHA256 87594530d8cc6f1c879d3ac86c49dab1873da462ddcd7fe465775ffb38f089b1
SHA512 8e4b1834e76876f6c00afbed56506090fd64b8f9ef3fe6eb1265f3cbdb54fc93449c91bab1baae66134fc6121b93621387cf3293a6a15061b646d94506a8bc57

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 80f4e561fc15bdd887f4bea06a985567
SHA1 d5b0502e5c2198fc0568e4a0f477179378d874b2
SHA256 ed6a66526b43d4548b32bc0f9f6f7118f447d99cfa6f7eeb6e62ab1ddfa299df
SHA512 04f412fde940981f4195e92a9edc2bd47348bf186741ec7fa01c5c15ed69e857f232087bb7c1e02a52e437491a2f488c919c04b686718180289d25a705ef465c

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 d3021a01e214b9ee8d076e715815d8da
SHA1 edc4870108dbacf5aa923995cd431e17af9ede0e
SHA256 fabb22f69a2b61f0577ebd917c429b9b04782d5322a9f180aea83ee4bbc70933
SHA512 99a866e0e51e3ef45652ed29f99a07a592c4d9330d4b2debf9bb4cb1191c6280231ecd91ef72c81377a3159369f1c5bb486c4c4bce2dd4493fcc47a228479164

/data/data/Mad1sal.com/files/PersistedInstallation3840146753786284294tmp

MD5 cc8202306969b70b5d548bb360ad5223
SHA1 2ed0d7dd66b291a0054c02e2756718432891ea49
SHA256 3a40bb9ceb12ed90f44cb9bb78497ed4429aeb826cdeb8f2a12f0a677717241f
SHA512 1107126bf298f68656ed32b924dba68cc5caeb18f53ee72ac8de5110fa67385aba1c0bd9977ead8bebbac1519263feeb30b153a6bc3b414b62f60ee6b51e69e6

/data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

MD5 4c3fec667f92e7c15a18555728062cf5
SHA1 75335483513b8f42ab556c2dd5ba04988c511140
SHA256 ad4d0f8795813c21939be317b5327ee3a5cf28b4976ecaf0e6261aa9e8ca3a59
SHA512 5e5b6cddbddf951066918b378ec029f9dc3412950a6590dd1f72172bc755a8c00051e308e09e9d6968abee41586b82d1ea49cf4ad8048eb315eacd1eb30b66dd

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 a4d01f046a973b3e42a2503f60542045
SHA1 381402ffd82221737db1481507230b98250b9118
SHA256 f05045ca0475e5f27670547df20266cb08c01ee796e692ff02ccab97aef7bc99
SHA512 b2d42f85b01d434c8ced0dc5acd8a1019a58fa1d42337cad71c79fae24e98fc9a0b85a49228a4a91f14c5854f94dc708a7ae47d1517737f6dd8b6a5a374fddbf

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 634bec6b763a9e5768f1f164132f4999
SHA1 bb74416e3ee62428609da983f4344d06534bb87f
SHA256 e3ae17adb5c80f5072cfe6158c8289cfcb73f7e5dc65cb62c66b3e32ef7cac84
SHA512 e16793f84bc85be3682850b690c49fd60e932349e6219dbeccc252dadea7a67c2cd27cec79f7ce665125fad1ea31679ecae9bb376e0b1a2818a344790943f850

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 a4d87c3812bb6f643f2d4c99b8053044
SHA1 0777803265dcf6faa116f8c8bfd0ab0f4347b28c
SHA256 c99d16c21c1a5d3e3f08b0bb215cfad799da5bd09d02beb5bd6e2693a6ef0b97
SHA512 09e755806aa0b8ccdd46eec0d753ffa6cac50884c97ca8c2b1b42922ccdb9114e861df8b50159472735462603ce9e0bca94e369bab6b5b415ac05c17178c407a

/data/data/Mad1sal.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/Mad1sal.com/databases/google_app_measurement_local.db

MD5 a2746063b82ab419b67fdb867e46ffb4
SHA1 89c11cdf5e7295deb1c5a93b035380657cef3fa5
SHA256 63df9acc1ac565039be6a9ff25fa0716c6168274b40d13932fb511981ef21c2a
SHA512 e8c56ee996212280a8c970a6f20744c4ec2cfd9b2240738d07551e833bb9df38ce6656b221a7923760606b158918f9454312e7da103a8de56eef4702a4e6a922