Malware Analysis Report

2025-01-06 07:49

Sample ID 240530-p68kaahd41
Target AdGuard-Premium-v4.4.143_build_10169991-Mod.apk
SHA256 5fa50b51c86a3087e4c368e17f913d066180d6f4444a0fe02ac25c36e54f3637
Tags
banker discovery evasion execution persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

5fa50b51c86a3087e4c368e17f913d066180d6f4444a0fe02ac25c36e54f3637

Threat Level: Likely malicious

The file AdGuard-Premium-v4.4.143_build_10169991-Mod.apk was found to be: Likely malicious.

Malicious Activity Summary

banker discovery evasion execution persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Makes use of the framework's foreground persistence service

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Unexpected DNS network traffic destination

Declares services with permission to bind to the system

Schedules tasks to execute at a specified time

Requests dangerous framework permissions

Checks if the internet connection is available

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-30 12:57

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-30 12:57

Reported

2024-05-30 13:01

Platform

android-x86-arm-20240514-en

Max time kernel

43s

Max time network

74s

Command Line

com.adguard.android

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Unexpected DNS network traffic destination

Description Indicator Process Target
Destination IP 198.18.53.53 N/A N/A
Destination IP 198.18.53.53 N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Processes

com.adguard.android

Network

Country Destination Domain Proto
GB 142.250.200.14:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.204.67:443 tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 sb.adtidy.org udp
US 104.18.25.57:443 sb.adtidy.org tcp
US 104.18.25.57:443 sb.adtidy.org tcp
US 104.18.25.57:443 sb.adtidy.org tcp
US 1.1.1.1:53 mobile-api.adguard.org udp
US 104.26.12.10:443 mobile-api.adguard.org tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 filters.adtidy.org udp
GB 89.187.167.3:443 filters.adtidy.org tcp
GB 89.187.167.3:443 filters.adtidy.org tcp
GB 89.187.167.3:443 filters.adtidy.org tcp
GB 89.187.167.3:443 filters.adtidy.org tcp
GB 89.187.167.3:443 filters.adtidy.org tcp
US 104.26.12.10:443 mobile-api.adguard.org tcp
US 1.1.1.1:53 local.adguard.org udp
US 1.1.1.1:53 local.adguard.org udp
US 1.1.1.1:53 family.adguard-dns.com udp
US 1.1.1.1:53 family.adguard-dns.com udp
GB 172.217.16.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.180.14:443 tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.14:443 tcp
BE 108.177.15.188:5228 tcp
GB 142.250.200.2:443 tcp
GB 142.250.200.35:443 tcp
GB 142.250.200.35:443 tcp
GB 142.250.179.227:80 tcp
GB 172.217.16.228:443 tcp
GB 142.250.187.234:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.4:443 www.google.com tcp
US 104.26.12.10:443 mobile-api.adguard.org tcp
US 1.1.1.1:53 alt4-mtalk.google.com udp
SG 74.125.200.188:443 alt4-mtalk.google.com tcp
N/A 198.18.53.53:53 www.google.com udp
N/A 198.18.53.53:53 www.google.com udp
US 1.1.1.1:53 otijxeoqqk udp
US 1.1.1.1:53 osozmuws udp
US 1.1.1.1:53 tsticwcfrcynwxn udp
GB 142.250.200.4:443 www.google.com tcp

Files

/data/data/com.adguard.android/no_backup/androidx.work.workdb-journal

MD5 447af9b839158890db6140e6efcaac97
SHA1 6fa7ac429a1b51615beaa3532a728ae1235a7acd
SHA256 dfef51a8c32953adfbcbe4bca891ede4c37db4eee3a2feb95c4f02838178af5c
SHA512 0df03a07f16a4051ddd33ac64aa3c46773d9438b017558d96caaf970d9799c73d215ceca31f6ed5fa07d5f0b6425c0c80846f43bdb0ce45a9a3e65e58dabba35

/data/data/com.adguard.android/no_backup/androidx.work.workdb

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.adguard.android/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.adguard.android/no_backup/androidx.work.workdb-wal

MD5 fe1723b4f8e47099f686a34b449ff60f
SHA1 43c231159c56d7c8d91da0bd79fa69702c4bee41
SHA256 7850e8556f6e0ad6465a2d3f8b0fa4783f09388d53f0759ebabba2fc96f3699d
SHA512 0385e65203faab4cfc5c8b7f44fe24d919705a747da4a30a4c890babdb09d7c549f2cb953a34ea53797ab44217b809a1d8db7dc4ffc2751dd2fdcf7716572f7d

/storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.log

MD5 6e5038e0020b07c9fafa6b465f209390
SHA1 3eaa9eb725ba38d9abefb89be3ec2819e77192b1
SHA256 497afc46661264bf2f916b4b552df8b2ddb3177a1043e7c7a1c16cc968bc18fe
SHA512 d9bdb30ae301b8b5731560dcdfa6d7b4834cc01ac30d37c537bb5315135ad54742169a53e82d4621776da69231ea8400a414a3bac91278826760cc4bb36874ad

/data/data/com.adguard.android/no_backup/androidx.work.workdb-wal

MD5 ae7c426b7257f3fd338cd826a679bfbe
SHA1 84913ed9dfd3771218024f201d7edafd08eddbb9
SHA256 06056c8feb84a97d83866b50f4b20845e81084d490eed5bb12a41ab4dbaad114
SHA512 8eb8b4559c844ba675435f69708ab1bc205eaa3f6a37717ebe745470bced3a092cf831b9fb4ea898a62942749d9de9e76be72dc4658f0e50227ade121b94d510

/data/data/com.adguard.android/files/adguard-core/version

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

/data/data/com.adguard.android/files/adguard-core/gm.db-journal

MD5 3b2301ab26d6f6c8c8c2fa1bcf7e6887
SHA1 0a181f102eda5efcbecb0e045b90dd8fa19e95f4
SHA256 dac31484827783cc39d0be17fa52f6c79debbe3eb8a3cfe89a234836fa1f2b9d
SHA512 704866f23d359ba1e5bcb3ad25b1ad663a4599ca01d3986206a9efdfa9c0baed8da4d4e431cc3d211680649d582b6ff2ab2d322b89336ffafab800ad4c0939ac

/data/data/com.adguard.android/files/adguard-core/gm.db

MD5 c6531d46a45a7cafb7c8abbb4e5877b7
SHA1 e42c5f4bf86012762526320fbd1fb649710ec2c4
SHA256 4c7420e050ab58d67a85db5c62bc654142a7057934c080ebdc375f2d60d80ab1
SHA512 68efa5e3a5f230c988d028d938bbe1da4aa4796136c0397ebb36376cf459b2b9361ad63e044f381ac50fc8db68421049536e34ad662e9c9c2714f5c23923a0e6

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 c35eda9e65954e2b8827623ee7499215
SHA1 34a1fead8ffe5974d4cfdf6743d57d2c7a1b6c5d
SHA256 ec9e5bbce3bd7fffa92f6686697e3cb1c8d188f5739c7a0253c6dc20acba75ee
SHA512 d9dc5bae672320fcc1cc07fc2de40292dae646d4b8ba9d5941be7785c9decd98883c867d7bbffe4973b823980716d7da8be8301ea4916b0ab2cabadd5929adfa

/data/data/com.adguard.android/files/adguard-core/sfbr.db

MD5 881d9a1f1e2d7bff76f67b0b971970c6
SHA1 0405d010e628b260ef88ed9849c453aaba6e655d
SHA256 37f832633654734b82d8975c9970dd0e4cdd29e47c1bd2ed20d04300db318fd0
SHA512 c221160918560745c32416ceafcb3e0e4be59681afc29b7eab55f4970228dad35c6b0bcb264b0a8d7342114f38021d13b32fa469876916256be6b4071d09ee50

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 854204f44281d9452587a4bc0bbb110d
SHA1 6b1f518005c06b2a0bf6d243cbd059bdda0c4112
SHA256 f0172b21249d5ed84039b1b88d0091444410f76b552ed0b8272ee792a6de2280
SHA512 e2fc5fa13f4391888e368fb9430b7ba7c8bfeb6e02bec505cd22f5452f311382b3226999436ec3805e7a3889b563edffdc873755a72ca70ef6412ec7a0a1e327

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 0b264471751ad06bd5925899c990ead2
SHA1 56193f90e526fe0fe2d72ced319b1acf84d4d46c
SHA256 61cf74c98e9c46f612ef18ea02b32ca6e02f9148b2dc43dc14ed97ca1dd0f976
SHA512 a847500b21dcf0dc0c86d5f9b1290b603606aa130fdcecebefc8b4e81a193c93cf7024d9a7bce14d9604a08e7f99e0c957e74560d729efee274f862333467dbe

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 62a5f7d998907f33549fe1af0a724074
SHA1 005a5a78a98d09d74af90b17a9faa59320a47ed4
SHA256 16a584fb589529c65933199ae254b9c71f34fc88b631a8029a54678038f37d8d
SHA512 aff0a55f472f6e8c9bc537a657e4bf006ae5fb1c12827b58781be72bdc74d816fd857489860e5a550cc6d623eb41a4f8873d11c2c7412c5b1292f3b9bee27a7a

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 739f496d2f1eed117e7535e6aa121723
SHA1 d02c77ccd1d931a213aa214fee11c70c0076b418
SHA256 9adfc83c66f3d3b9fc7c1ee9a2f39ae69c75b1097057fb005f6aa4f8fb29b721
SHA512 a1da9e84202bd789b634745aafa1e8d2b8e0c496ccb2c22d005e5943ff2041f0fd640084b092026b6ded0e324622d10fec86f73b2a216bcf32071de6e854a362

/data/data/com.adguard.android/files/adguard-core/sfbr.db-journal

MD5 79b06ae6a27299a345e1e217efd2786f
SHA1 ef2fb57798a14bc409381fc4411fe6306a3c134b
SHA256 d359c70baf3861b04efaf516c1be208fb0e5b6943a4daac85ee6c65aaa7cd1d3
SHA512 74dfbe5bbd98afe50cb243fbe25a052527061e0794d96ae87c7fe82003dca1a3de3046a2487630f5fce8ebcd0e8e058c6eec32acbb4581fc69d3f19323e0a9f9

/data/data/com.adguard.android/files/adguard-core/sfbr.db-wal

MD5 4cd508213073d6cb97717d17d9fa45f8
SHA1 5c89cda5fc9c3c99f89559717d5a6dc969138cf7
SHA256 f8f713e1060e2da23557fe3cdc753f04ddae1fb60740096b441e4a78a2472307
SHA512 cd320da5dcf7c4fa4567de6f0f452a553c50f5f84a2e9a3f66e5d7dc730fc53c9e5a1967ecb7c270d154639bc8bcd43161b496e78fac95b2002b6a78b1a72f3e

/data/data/com.adguard.android/files/adguard-core/sfbr.db

MD5 20788906439c45eb55e45d52eadfd849
SHA1 8c26b6e1d395c2083ed1ad312a35db0a6882ea86
SHA256 f82e84353a599bf61ee0469545bfc4a026b30c5c659c0b5ab998582ad0c249f9
SHA512 e118359ea0af00336f81174cb5af092309cf726d3fdca7e4aabce1b494b87a9e7705a71d45870cf1d9741c3cee4843c292d81524556f64063d476eb3b1db112f

/data/data/com.adguard.android/files/adguard-core/sfbr.db-wal

MD5 d65fa13ad8dde867f377383bf776432e
SHA1 3b802d882e8367af533740e6d4453b4993c154d4
SHA256 7ee73fdce9f31221746fb3373a485c133767586aad8aa20b22dc94ffe4ccab1f
SHA512 40d9ace5d32f57eabd39469a8d8066f99e0d1fcfade7321920fe2247dcdd1d4d943f5ee3e8b13ef71c5d0e41a39fbcafca7e65e6c9d9cd5314b095fb5520d497

/data/data/com.adguard.android/files/adguard-core/sfbr.db

MD5 5b382e87d199b42440c387ba5180a9be
SHA1 53d9f350dd2ab8053dfce9cce78c81129e2d9613
SHA256 dd84e24a1eb0570905e5844b244dacf4a5b3a7ef5831f3356822c0cba796a0ae
SHA512 7c2ddfd0c0d6f4058ba1556a28bdc489b9f21e461e7fcf9216bc0521d19298f174f2d293c122dd9c32992997b6d0aca490744469476c94afe0f042d87889dc2c

/data/data/com.adguard.android/no_backup/androidx.work.workdb-wal

MD5 59b80bc28bb45c59c85cecf8508cb74f
SHA1 4b0a427f962dcadb3a1f98608fe23e4658cfe743
SHA256 555a95985f012b30752e21d42a951d986d95fd013f7efbe5a3cc768558b31586
SHA512 67637902d1f7fd683fe6098ab2ed5cfd4821296c3805eedadac00bb8e48cea06a476f505e1f6e4f3234f524444d3af438f45543c5d0fc5aa2a4cbfabe58df25e

/data/data/com.adguard.android/cachebattery.dat

MD5 2c6460bf237cf1cc6d15e68b2cec4037
SHA1 82e6d7f35ce9facfb13d23041d345d13cd12d767
SHA256 47c311013b8f27d90f930f7043389c51f1ec7400fbfd68a15159aff7bbe19d20
SHA512 af54977ea66b005bac5505d0f1cb26bcab4a28bd6bea0832c3d7b650d600dd16c8b1a8d7b8324f422f625ce0ee3e0c27d2b993c8e4b971308782806fffcab19c

/data/data/com.adguard.android/files/adguard-core/sfbr.db-wal

MD5 f7562506789bee0ced429af4c182a19a
SHA1 c2f68607e5e54fa44382e5bc25701ef1c9282347
SHA256 a81bfaa608a5b4753fbc1f11a0014edbc53ee077067bd24764bd9983ef54fcb4
SHA512 358ab70e2e3546dc6c2701e74f55ac4decf7e08d622a92256a9b329110f65f1e276633c93b7963070b0943a6cbe4c5c0db4ed12af42eb585b540c1bed99e0506

/data/data/com.adguard.android/cachebattery.dat

MD5 7d4370a747694d5c9f669a7e78bdeac4
SHA1 fd6d221e1175215b9d109bc0fec95b6cb3e4ef55
SHA256 41e5182fe2eebe81e553ed09c553c8c4e31e1fa8263a1bd71c0b7ed927cde83e
SHA512 08faa90611145aa47c5bd397cf9dea67065ea721d8e6cb8c95464a1a278fd21a00b849d6098cf6896a5b4e25f3b97f26c709915e54a89fb2dde2f01845ef8a00

/data/data/com.adguard.android/databases/base.db-journal

MD5 0b6199f94cd42cc56016c00ca16cfaa0
SHA1 b68f245caafca0f95578a98e391c69d385d0c707
SHA256 f63e859c566ffe01d915b04957f2e14475502486c8100a66de356954137cd695
SHA512 00c7f5bf9b5babd359df6cbffec57a31c1d4f9d8d7774906191028d7b31c3d0a9c03f304f9e62d1a449c0567d7b3fb1cf34ba5419c2f3eeb07d6fa69c8fe9796

/data/data/com.adguard.android/databases/base.db-wal

MD5 e14ad7898db2fd6c69c44f8d27af2bfb
SHA1 ab65b8a44fbf29fbfd6fc8f6ce1430a0bddc7783
SHA256 2b973a384d0eeba222b13c22c32cc1af56b272ee23eadb2c8fc7be00c871db63
SHA512 8abe5bae6adb46aefb978ad76ce16cb7dcbc0911544ddb7bb4f7948a1cfb380e0f709872668dc319e5a856b2d5c0330a176699e0887985df412cf57f90d5891a

/data/data/com.adguard.android/databases/base.db-wal

MD5 c33e12b74f7b3c5f281d716fb508a107
SHA1 b63e60118545345c8d95752febf63b0bdad1b228
SHA256 fe8da4dc99655a6db90533065cd768bcf6861b552b2935e14e846180daa2205d
SHA512 47328eced6863fbfe3afa9c2ec7c49c060bce8c82917e3d713004f61cc7761cab361c63bc59d300d85151e2d0658ed6f6c0d00204900c48853e557cdd441038e

/data/data/com.adguard.android/files/dns_filters/filter_15.txt

MD5 bdbaf973450ef04d945605d8bd7643bb
SHA1 8c5582051597c9806408d8aa5021dee0c152c31f
SHA256 bfe52dae2b17208d59e7cb90b38483ab946b9a9134eefedc92a857deb9e25bf0
SHA512 e100fb0db28370c371e29ea2c137c20d7ba5fd752da55617b4dd703bec84ac707196bdd0bf890d7f5cf8e2b090c5da9ac96806dff078d8cfd7f5cf9976d5b5e6

/data/data/com.adguard.android/cachebattery.dat

MD5 beb8213aafe845739e87d031ea67f836
SHA1 da57add1ee436ddf0e2c8122d4f6a135920db479
SHA256 bc5ddaa250f0370245fbdc687e1981c39d7e9836b99f7765ed1ede797a541679
SHA512 5ccd40a138f6a9c2fc151649ef7c36f70673b2a29101102440b2d4c844a3e8fb17fc9bc367d080615b90f6a4c9c8a0f74faecf2cf37e3fe902e4bcea25d922af

/data/data/com.adguard.android/files/userscripts/AdGuard Extra.source

MD5 6e26999895f418a56f8b8b0c4fb77b7d
SHA1 b221721c040942b6c2c3a9db5a8c4a96b78534f2
SHA256 4fb173ece62dcd8de44d164899b9f5d768f741a8a8c7d5d74800ff5efb41cc88
SHA512 119f091d969540fc333009fb467505aaab067951aa14ff2a6713dd65ffd6fd6341f4389a34b32aaa0ee3c22290d5d6989ae4e7f32c0afbc2d2a70c1f5aa4f247

/data/data/com.adguard.android/files/userscripts/AdGuard Extra.meta

MD5 e4e691ac4bd2a4b876f076a9c2a9b5bf
SHA1 a8375223b4904afcf357534c18f3ed7bf04ee41c
SHA256 e26c7419a679084a1176cb0cc275d2a3ae8899325fb2e5e2fac46b7ca5630445
SHA512 dcc169993668b82479da852153c1d4fdf2667fac0187974bf51981e51f52a0c053906573f90cc4972029ccabbc2a51ece98e92c51230d0315bf4fea21444c5a5

/data/data/com.adguard.android/files/userscripts/Disable AMP.source

MD5 737775aaa7d13a389c27c4fb9d51689f
SHA1 eeb6fcbf81f3a0b76edc4b63db10c004421ceaed
SHA256 1969ab9a0badce06d282518b8c25f1a3e1e3d77cdaff0a631e04b2b886bf066c
SHA512 af07f1f135c660357db3255deaa68458d4262837a7459566d0452a383a881cb4f42cf870ca1bf2ac313aae4d5f00a6a8f7760bec05c279153d54cd658aa07ef4

/data/data/com.adguard.android/files/userscripts/Disable AMP.meta

MD5 53d32038f71686e3e153d066b9b4365a
SHA1 f1f57703519678e338ec8571bc7901462df62bd3
SHA256 d5a09715ea16fdae4195aedbe7687117ce8cf3e8fe668701e6d543f5b74ccdc8
SHA512 31aad6afcc41822c5713ffae67f8b06d3a7b661c784ac04301adb800eccd8328f4b7239bf6aab72a5447b42f5a3316029411ee092dba7ee080573b960e319cfb

/data/data/com.adguard.android/files/filters/filter_20.txt

MD5 0e2f28af46ae2e42f71efbc14d4d3a11
SHA1 ab4daf9d880cdb7a7717731affa9a5afa482c186
SHA256 0b7a7412eef90226a210372d084c678e370cb5db4d3b7c3c09d1be555f2918f3
SHA512 c90fb376911cae230cfa487d4c51adbc5b644113848be9278e5e54a1db184837b42ee4af0ab67eada083f83f96f00cbadeaa80fe5ec487606d34a4ac29a1bda9

/data/data/com.adguard.android/files/filters/filter_22.txt

MD5 3b4d80f4378b355090a31addc0364036
SHA1 8bd7e7a3e90e1137416723e6f09d2a02eb2ef90c
SHA256 95a944213d9d9cac6832f052517384672265572f077142371da14cd384aed5ea
SHA512 e99cf074f6695724942369faf8081c6b897a0b5e3b8e691041f638a6f1733cfe59e4ea2ffaff9d458f1ef417d2bca377199af3cd34cc0a6c8d4f7f4bcbc9d5c7

/data/data/com.adguard.android/files/filters/filter_21.txt

MD5 72896d4053194da4bf9af1ee0dc87026
SHA1 bbdae1b183f3ecd8978b7ddeeb39f84c6b11d519
SHA256 17cb9f45704134d6f95cd3f00e81f74346409b42e09f86ab3c1f6dd23ce5aeca
SHA512 d1ceff9976f67b6c4c8c9a62bbdf8ad6e67036406c20cfafc2b251b2445e159e5cc71cd9bbbec591c5d5692a6bf72a14b6ebc454192f821f8cdc7da277e5468a

/data/data/com.adguard.android/files/filters/filter_19.txt

MD5 d54e43f274c2659d9980ead7af97ed9f
SHA1 a935f069791045f11aeda7ff25ac0c05065f9e6c
SHA256 d165e19e1ca02647ebc705276740483731edbc907df507af470134b19166d5ec
SHA512 be36c4da3984ed978caca12145d69319a2e2da273e12873f592011339fdae0926ae26c905c193266b2ef9658055978b62c160b98e0351d21b0f505a595aeb3f5

/data/data/com.adguard.android/cachebattery.dat

MD5 34e662e54562d678f66b3ab1e1e29303
SHA1 57f364bbf392263b635285231ac722b28860ecee
SHA256 4e37bf1c5ef4dd90c49ab745a18de5d0e9e0334582884e1490d02b3cdfaf52fa
SHA512 759cd6bdc1c6513918ae3ef6a36da3e248a04c89061ac5d882c919715ae27d623a5a8c754529ae531e38752a1375a307376c6f88708531250ca3b9a68b74dab1

/data/data/com.adguard.android/files/filters/filter_18.txt

MD5 45bc3c5576469f1e93c5580ea28c05a2
SHA1 5f627f4b3f4d47a4864d17df7ef8b0d603657f4f
SHA256 5bc520818c768e336b4019e586a313e4fb478d2b2a8307f964ed9c4ab8de2791
SHA512 fbd5e140f699c241cfe6538cc9336e366381871b140847b50040e33b9ed73a15bf983fd69db120078d148f2e1a88d89422a72a1697d03414e15902f9854cc60d

/data/data/com.adguard.android/files/adguard-core/gm.db-journal

MD5 4fd196f41fe43170e64c50c43e516ddd
SHA1 5819532e8c76081d5b153f19145c3edb91f55c4b
SHA256 7eb361899c6f3ef1e15b2452e00b349b8c6d483db82b0dfbe31f8501ace576fd
SHA512 4eb86a6308e86a7d157876560933ec8a9e663e808ed950532f6cf164c8aef5d19e671ef480dec5f4c218bfa7f1c40653f0c24de84af51e209233603137350680

/data/data/com.adguard.android/cachebattery.dat

MD5 ca84550806f71871d0f2c699b9b4ff45
SHA1 456dfda691fc1359b3853fbc9714668ce47ec480
SHA256 dd9827db0a19bf72aafc81e38438bf766544bef003021ff37df698018578ee7f
SHA512 997c021663a25c6730af737c771b55cc0e13815352d29630205a5c202a0b89a785aca7a1718a49d712c7f0362c3010b10c5540a03c35c347ad5487bf39576246

/data/data/com.adguard.android/files/adguard-core/sfbr.db

MD5 7c05c3092921fab0d177581b38ae3d30
SHA1 020d79a4211667e5528b5f91bcff9dcc97d9a53f
SHA256 d745f0750d1c5c7fe997d97ccfd80928cca5eb3d6d5f1b38ef81dbc199763204
SHA512 4c88b5c405bc5ca5d8fff1e1cf3d4ce2f3b488b9fbc17e162c53308e7ebfed3bdb73c257093109d733be0ef024aea2a42d43a4a56424815643977008f038f2ae

/data/data/com.adguard.android/files/adguard-core/sqlite_temp/etilqs_c985b97fe9b33b25 (deleted)

MD5 9862be85630295f41c6530c9c699b17c
SHA1 73ecaf01c81a33bcba9c395cf3f83b0a7db649f7
SHA256 231c64782ba9df4b957e7ca9dbaacb8e19e5cf421cc88a5c8701b8c1ba18d69c
SHA512 277e0577a70c83a8744da44fa8083698b59ddcec7c76eca5982c35f0c1ffa2faf0c5a45e03704f9f2d9e23d16bb67f6c64afca803dda2b5180d6d3daf260d770

/data/data/com.adguard.android/files/adguard-core/sfbr.db-wal

MD5 70d9dd4a500a9e92c395ed9f4b350a3f
SHA1 d64bccfdf66acccc0fda829e4fbc1827a6f8035c
SHA256 fa9cebb07db5f8242d686fa35339cad629cbbf18790318432244d8528303dbbe
SHA512 8bb806a9eda68b572a25a37405d85cd57d10f7355669a9949d699b84cbb622ed3f915700c8585d9aec32212f5dc85c8d55ed98cb64c8fb32ecefbcd2e6ef97f8

/data/data/com.adguard.android/cachebattery.dat

MD5 9a627f89ae4c430bca17f3eb1bc6644c
SHA1 081105f36f72b77f2f982f33c68c672c23cb35ec
SHA256 90a297df215018a7e635a81f5425ecadfcedb0763da66eda61f9a52695cb33bf
SHA512 b263e77886eafbb4d732ac86f9824739a1d5b2cde0352141aad4fa9f01c6e913485be5cbff370bd1c73610e552a2f7d9d58c42cbbfda54834c7771d05a5b843d