Malware Analysis Report

2024-09-09 16:24

Sample ID 240610-r2p89azcla
Target D SPEED 2.0.apk
SHA256 b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8
Tags
collection credential_access discovery evasion impact
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8

Threat Level: Likely malicious

The file D SPEED 2.0.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion impact

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Declares services with permission to bind to the system

Requests dangerous framework permissions

Acquires the wake lock

Queries information about active data network

Reads information about phone network operator.

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-10 14:41

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 14:41

Reported

2024-06-10 14:44

Platform

android-33-x64-arm64-20240603-en

Max time kernel

148s

Max time network

145s

Command Line

com.dspeed.pro

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.dspeed.pro

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.228:443 udp
GB 142.250.187.228:443 tcp
CN 218.78.108.200:10001 tcp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 216.58.212.227:443 tcp
US 1.1.1.1:53 dtunnelmod.com udp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 1.1.1.1:53 i.ibb.co udp
FR 162.19.58.156:443 i.ibb.co tcp
FR 162.19.58.156:443 i.ibb.co tcp
GB 142.250.187.228:443 udp
GB 142.250.180.4:443 udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 142.250.187.227:443 tcp
US 172.64.41.3:443 udp
GB 142.250.187.227:443 udp
FR 162.19.58.156:443 i.ibb.co tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 142.250.180.4:443 tcp

Files

/data/data/com.dspeed.pro/files/PersistedInstallation3402126223614182591tmp

MD5 da8a9b353faab036ce3f0252111f9b82
SHA1 5963f9878f4d1e865d867888d05b2df96edfbfe2
SHA256 08adf853a66c33a046508773febf6ff7de875c25a2d3369399b2fdab8fd592c3
SHA512 77ad1251a0092230dabd6b95ffd37fbcba47f8ef72d634eafdbd892f149bf867fa45a14e0512b178169172e5da1c4eb72ada8819ee2695c6f013d645f92af6d2

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 addf66bdbce715d5144e4d8f479d7ee6
SHA1 025d0e48f274301ce227019f5ece5dcbc48c1bff
SHA256 f443766818a3ae89747f8a2881542cbf3b609508262df1f685c8e9efe57cce1f
SHA512 3bf3ddd26f6c04738a8a987fa6d72d5d4bf5a1f0f0b4f6d3d08a6cdf2f5f037040f85d15c511fc1ad5abda534bcc2928038fe49b444f75d642edb3129d1b6427

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events

MD5 ffc8787094f9c841a026cc92084597dc
SHA1 39ab2420aadc4a35af842e48db3bd135060586b5
SHA256 723729c71701226eb6e27739c68347cc73b7720c5cdc9e41f8743ddbe5b8fc71
SHA512 42d9b69e9ce4f6f15380870d25fc375a18118378a15591a883b578d0d6092bc6062d4a4e1526576482f9a1bc48a80e61935996c995fd6311c96fd8b060b28709

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 afce0619a71048478da25771dbb210c1
SHA1 bd0d18987fbc1108354e8889b0be98ecaf91a28e
SHA256 659ab1ad6528ccbe6a97dc808a99308657f0c7a2b0cf8cc7d1f2bfd9844c2dfe
SHA512 88dc3353bc92bc3cbbc0a2cd7f84ecd009b19b98d5882ffaec5ebad859d784cf115b7f9f7ceeeb4fdf2fc1bf37677ca68078ca1d02d797a6d7322e32311a77a2

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 e40509f2c17c6b5c392d254724d451e4
SHA1 b6424d0e957e17361f842b19ba6764f3ee91ab01
SHA256 a6c87ff0f83a7145a45711d6b832b8ffa530f3588cd1d64d7c772d073e279ca7
SHA512 f1232dac7745933913ba3c813af17473316df7468d50ae49183ac1edb200fae13da3ed5535ca074e5cb3caf903cb1ab1866d2c453b19176abba25016110949b3

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/666710B500910001106AB887D694B26D/report

MD5 e427134f55bd9cd6c5dd0e889129353f
SHA1 34b42e1712684b59450df69e82faca85fcdafc65
SHA256 b9368cfdeb288ce41ea90c5cb552510471f1000315400ae5635787b1165c6461
SHA512 2f6132bb1c5f8c7b7cb5e630d1ac1566080b40f6cfe0144798d694de55e08de876cb97c97e7be74c77da9ded1a781caea2ad2d62f36c9dddc874a33be20ab478

/data/data/com.dspeed.pro/databases/dt_app_config.db-journal

MD5 77ddac957d2185c1b67056143d9e818f
SHA1 15baa0ff63697a23ea7efd42211791bde3228b84
SHA256 d3bcba4cf1bafeaf7e92f868992e80fe4e23b5598946833864c5b49272609f8a
SHA512 7fc0706b85076b307d4a7a2872fa6bf1571cbe25a8b50d689aa2906f49c938714ba83a0ce02a2b6c94fd1cc75587b9d9f17e5affa442d58be7b6a97c23fc4bc4

/data/data/com.dspeed.pro/databases/dt_app_config.db

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/com.dspeed.pro/databases/dt_app_config.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 a594c6025f360b88611135b6a31e8e5e
SHA1 013a916c1c851be93357430bc9a4ed2e12f06524
SHA256 f4b520a88635dd355210549b72b897262b7f092a6283425ccfe363ba927cb800
SHA512 06964f4e0de8d4ed24c0b99fbbeef0abd22dbcc3a621ac689000069488abf3afcbc4c89dbad1dbff079d4891feb4625a8ee583260a017a993ba9f821a7d43be9

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 79f24383bc82b32c4794a82518eab736
SHA1 ed1d98e75578178df247754e74450e9fa05db3b3
SHA256 37510a640dba1d643e3436079cdf5217d836bece207a8f76510549938c198b8a
SHA512 1e00db1d69ba871161b5a25cd98ad11a0e6d57df8ee79240a6984bcd280073c2b7b5cb66bdf71df0ac1ba47d5405566b234fec27849062c09c6344b93f35efe3

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 0ac19c96f10050b44f3eb093dac2ef4b
SHA1 ec90c61935ff965110dcb4a1c5c7a59f3550355a
SHA256 889e67347544ba095405d27149e49cb8f1ab031bb903ae05c421987ec2c0af32
SHA512 a03e3498d0bd8d96f778bd3e9557331356820202c9ea041aa3efbbba6c2cc75fe0d5d25e1b8ec889335c87eb4bd835bedaf7766386972ca7e2060f0ef1c39ce8

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 c6f180e9f49df9611b3de494bf10cdd1
SHA1 fb74e38f7b305487b170638c476f4f1dc7a662ee
SHA256 124b863c8da3890b01bd8a5d685304fdda9585bef88ed0324c3f438d4350d516
SHA512 6cb140e212e9a761b52f7f80291537d37c6d5deeb781bfd2aed8ab0d658840ead60ec2e2e610c00321d25d86d19833a3dc81219a1df99abb661f8943a4a5bee3

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 8e9177fa4df80cc4747a1ec1bb8bda57
SHA1 1005b760e6701ec7a4dd63123abe00fbf94c93d4
SHA256 622702c06c185d74f3762891547fbdb07d56e5dbc434e2146b2574ca48102115
SHA512 295a961f31bfa87adf564e4c049b3a4e2dc6ca0e48103d32c501e1d6ad3d2a44d2eaf8a5eb95703b1e3c043e77db67501d7b43e862a0c687b5514acd907a07bb

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 c32eb746774b74911b83cbbc44da1490
SHA1 8e9454f79fb4069b89e440e42b12bdf0a198906b
SHA256 3947f694f3f0d93d00b8e717e7eed00d15aeb8432a8f3e9fb02fdff24a5e51fb
SHA512 a96bbbe24f15d82c0dbfa869679db3598ced71ffbccbe0fc8e37ad1efc36866fb764afd0134bc0358dc4ed8378ea9259e8f047e91b93523780c0b1af48815b17

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 59f4a0eefaccd620f83a5c82fdd60c7c
SHA1 9717ab72dca574c630d7fd5ce5d0eec6b973ef36
SHA256 903837010da50329571f3b1e2ecb9348ec0d06ed7335d2e014e31c3e140161b7
SHA512 20ab92778366dca33afda8f6569ab0629954e383c447c02668b8f384e834151f080fdfe218acaef84b0c7b1110a54d0a14d5c0dd2b966b9b8bb2b693f09116e1

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 4d046be6a55327f253c985f0a5492c33
SHA1 6ae34df876b77ea272419cff410c2d430b614da7
SHA256 4b56ef8333f2fd5c5f6fc5a0eb554550faedaa56fa73518d2c5772be818dbce2
SHA512 25b9a09157d0da419f2bf669031161df7bc0e3f14ae1fc40336d6565852fc6f3642fa8673d9b064b127fe7aecba6da53de8e58b44813244d68eea64310627e58

/data/data/com.dspeed.pro/databases/dt_app_text.db-journal

MD5 32ff57bcce2d087bb6cdf61b2eea3d52
SHA1 49d2ea208ea1050b53ca0c705d280f8fd95d7e93
SHA256 5ce1b997602f8b9b1ba8200fbddd375a5d5a4827d56d73d45e65ed75b8ff793b
SHA512 504648579725fe2bb9606d4b358148ab17ca1758b378aa0d71e9c6abaf42bd5b1da8896a71bcca2fda2fae86c5e98e74f57ccab6a3045323b048798b153f7586

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 51c8e6c58f1c59b9268805f02a9543fd
SHA1 c82aebe5fc9de0b27c573797f5ca361f7503d9d3
SHA256 6d68cac957c0478e2604968e89bed839a29a2fe22fe1fe050b9c089472c6f208
SHA512 095a9d424cd23d097e5b0822060e907363b7e9b25f09dec2ca8a9594d2a6343b1ad6b855da81762265fd38f718eb5b9de98d7481e2fdbab9efa4a3977c2d1b5b

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 c825ff159fc2a244719eff6fafc4b9d1
SHA1 b693090ed04d8e1245dc3b9052e2721d0767e7aa
SHA256 8e323cf0f7bd032bdbc78968758b98c3bd5ccdd29f1c6bb7fe3584db1292ab46
SHA512 818b23a760abf28b2da00253c2551f3469f9867ba46aac50aa17bc2515ea8f3403e7049b8160680755e981526abce369c6fee07a0e7bb99695eadc7ba4d98a01

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 61d18925258418addb75466434941b43
SHA1 f7c3555d3f5e2775997419c8982521b5a6bc19cb
SHA256 826f645391b21cac0575bfa2b37dcde4f56717d847bf4123c9c28b40d957ccc5
SHA512 27c7e658a175354b48ece8f3c10c230f5ee6bed4583074f178c6c9e4e984aed647aa643c9adc5c68870902bd0327c844e1b57c67bc3f0690a3b7f5c89947a275

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 1270e80481b41d33a7c4c561bba64bf0
SHA1 0372d3143c20e443642ce49edac3dc8e65a39a6e
SHA256 9b031a6972a83325f6eb62f5ce88743439a5afe3ba0e141da63cbbce6c7ab92a
SHA512 1d2d55dc52bcc1d9716de6fe728db8605c24021f8eb6637ac495151ad0afede6ed158a2b25f4b1f17344475b7397562bb7ad723e524cd32bdc2d17a1cd404189

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 2fc9b49c465e235e630989cc609ec24e
SHA1 fefbf86a7745d72b8feb8e23507cf9c920df3ec6
SHA256 3832295f1f66aa243b3675a5962bd8397e75e899a32090df7ba612ef6baf504c
SHA512 7510a62c8939ff4aa695b75246734a3e133532d2d6ead31b000a155d717465ddd732e4cf409e7e02d7eabf83b08d749ea2deb32c7f7ec1b1ee69e980d405145d

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/666710B500910001106AB887D694B26D/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/666710B500910001106AB887D694B26D/userlog

MD5 a65ed3504fbc75efd6d91759f45943e5
SHA1 04fd3c17ab004ca0743c9807cf8a2870f4608538
SHA256 cace5b735b8e8be7b04d8f3cc0f503f94cf803bfc9859bfd1dac25efd488fb43
SHA512 4b22a6f707a1efbc2a1d5aa30a3e7c176eb0e3572be8bcf0188b8818336f000fe8efc9eaa50f682560621b8fdb86f0af7469de66d08bf268beb6382c8d396c22

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 752b89b602d9ca9791a1778428c7193a
SHA1 5ca28113076df568ae5e7adec2ffc0fe877c833b
SHA256 6270f1ad84b49b0ac67c598449a0591e0555dd926588a967a591090fa007a066
SHA512 24137a75fac6001c36304fcfc61f03b04afd4cabcb44d9680875b55be911d244b2603b1c0008aafd0c1158f8d351ef0adeee4ba74721bf25724e273751877ac4

/data/data/com.dspeed.pro/databases/dt_config.db-journal

MD5 5d37dcac40ce3d32fc717bae0d5b5c5b
SHA1 e438314491a89951df51e57e4f59da2d08f570cb
SHA256 66e828f419fc57a7de282892eed7adc3ac3663b2fa483dbd5392de2a956d3a2c
SHA512 92483ef3925977f54afa6f58328ed0fd7da9922eafc9ee120118f07c8b205b7d1b0c9dc4a71e7ba05003e5ed96b3d7147539f7c406f85f69526e413153c2bbda

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 6dddbbd31339a92e67769950fe97c40b
SHA1 028671fbe14b5498ce3dfd31f52560acd44d730c
SHA256 6834b8ba6a968677e4a69f24340b7fbb38612ec7d5eaa3bc41e7cd643240702b
SHA512 ca1f78080db9682804c61b3613a97694bc654bc78502d9e42c58b326aa0a461c07b8523399fddad7510aa00c7816685d7f3a7a90f9930e5f08c86ef8e0ac358a

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 6fd327b25f7cf0927ea48d55ad542558
SHA1 7e4d98bc8ef1de8b49444df5ed1cc60d66d58f6b
SHA256 61bc69af4ea8e8816ae87f3a4fb5927cf4dde1174b08a6d207a82af469cdb3cf
SHA512 fc01f91eac32998890b0af82918fec0b8ee5e5c7478b001364d7f1cb7bd1d6ea700cc6c377e96817c4d2acaf403e3ea3ba019ecc4340835c0b420315aeafb4a9

/data/data/com.dspeed.pro/databases/dt_user.db-journal

MD5 73281fb2220243ff577c6dc914ac5535
SHA1 6b5a507ef1a166a9fda4105c8ba421fab096a448
SHA256 9bd0211ebd30ff575deaec3a6dd8b5424e69b137cfa639ee2f9c046c0196d487
SHA512 172bca9cc2d42685a740da9223c58fb841a6148a5af4bc6e415723c42ff5473820976b45569ec8f50c8f32afe61897c2b336e65b1dd880b9f13c1b291ee31ed0

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 7a041b8a406d67706a9188f9ef8df760
SHA1 14baac2a4e0e785e94a7f9f9b8e60838886623e9
SHA256 db8e24bfc9063cbb740bca8306852baae505efb8972dfc43cf162f2fe8301514
SHA512 a6317cc4415019d5b360af3a7d3d2c40f9c4b8a32cffa613efeb879a728431949e120ee0ee7497fd31a623fa0aa8d9261623b0b913b1e7ed5f9df15c77468940

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 2680e6840f21cfe938254b26f4273584
SHA1 412f9779857d9b738ad1f275cb5440ae87edf033
SHA256 56f7581fd726e6f015d9420b8efc3fea50cb562b745297c3e895e71e847ab86a
SHA512 85404cbf36ce299fb0dacc6580b7220cdece065c8f97316b1900a92dad4623366f70f98be802d0ba1ac368132194eff3cdf21fb3e4eeebbe7eca21f2f41c4a7c

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 2bb6c525bf2df7281534473321b44b3f
SHA1 64c6e973f128ee2728ff787616190b77edef85ff
SHA256 10d16c6b24040ff612c4f0c97875d2147596c830c58227ccc63a9846f4016108
SHA512 494d19d48c76355a0a9fd1bcc55e460a414db3381b2a8c71307680f27183f306a89eee872d88c0fb7d7624803b9b8e0a1de910d0c713e4aa659a706a79fe31dc

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 4b0ac0373ec73a600fa86c4fad52cf77
SHA1 6e70d584a9f0259a65bc9571503e03654fce6454
SHA256 6be2612eb495138ea747056c52f1780af70515e2dc879076941939e5be350dcb
SHA512 0264ef9e7fe2ec3f06a8a00aeb2ad9d6c2d3ed8a81cf56e2391058dbec562ddd0629ae6e50eb98bd2577a45ebab5427b263eeb1c546a4feb263bc01308582670

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 49ea239ba2c55961bc3b5b038b0ef339
SHA1 83c7c9234e4a4fb8ce0695a7ecc56b8c227be777
SHA256 ff438855579fe827cdd83b68c38caa1c6e289e574ae8ad458d53c5a77d61708d
SHA512 efbbb4d192748f9a4b97d13ed01c5d3299f123a3b8b31ee4796798667d656c7d3282d810c91fc7cfa984df6b3e9f66aeaff1f233fa24cef1b0e8cfcd74fafb2d

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 2b7e704c18271c9ecd3e18983b150f29
SHA1 72e3ce1b596e9abcf343c00e63b585b16331b161
SHA256 c60c63d2b12fd93f60aa935d03fa244d903d9dbd9ffb296e283c1c1ea1323942
SHA512 c8778b1d1c8a18dd9a2cacd5deefb0ff1f057afd4b29a566cad0d4622174f77d3e10fc421061dd686a270e6b1504893402ebab9ebdb3191038f769f79769ef25

/data/data/com.dspeed.pro/index.html

MD5 5abc965994aeeb8bc919b1959513215c
SHA1 e41190c75b0989c0f89b7f2d4f8d99fbdf3b3c8a
SHA256 213ed92c960cca5c05f4976cde9b151ec5ee865cd2c96ba27b2be4bedfce8b4b
SHA512 b92c5a508394d896005a232aee078e09633a72d63d2945f7fafda6cf592fb5490170f23f39b6bf6d78fdd9626d102890add87d252d4ff34b2eb6cb4a0b7b0eac

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal

MD5 7cd5abde13dccfccecbf60e93d1c1e47
SHA1 4b81b9809b638abb2f25071e1e829d8b5d244c6b
SHA256 6eac6c50e4fc07c6b7490c2cd17a2778b7eb24c5015306cf626f27ee8e61f4cb
SHA512 56d878481470aa0aa6806a731121c41719a947e515737b3b99c9b158626e68215b01e3d3b675450f1ec14061c4afe0cdccf04129ec1816d2da84f2e54daadc96

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/bf5abb9b64ac8e52861e170231292b05101d19dec515f52a200b6f52e97e38b9.0.tmp

MD5 af8b1be242926c09328bbe626858e698
SHA1 ccba4d3546693fa44d318fe56b4ffb710a5b2427
SHA256 aa473103c8791d2b2f19e3ef8bede1dba8b45bfa992a03a8259a9b6828f04b7c
SHA512 23baf22a36b90c7d4115d6c2b5f53ff25e4063a0cd3b7140605f1a4567ead9ad463e190e858dc6a246197b5aac70398791d300c3cad33d2eb25cadf56ef0671a

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/e9c19613f0c45f78824781da0b47f88eb82d5754747d5c02e97f85e9eb6c303a.0.tmp

MD5 1327fdedcc36062720af925df4894721
SHA1 85defdcee41569391953db7b3c78211464bac1d8
SHA256 c6d65c4c892c1106f29d152528b7654dace3c0196de8f3fbd0d8c61750d7d1fd
SHA512 c45885f2257c7cecf6804b266d64e589b61dfc8e54636f1743194ba4375b03b70533f6ac853f9a1fdc30df3bd7a0289110881e91e3ee544352f60ff9473ae2fb

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 5754e43fbb223fbc8a3d76868f38818c
SHA1 887f0a45939ba7aef208f0eaab59fa80ef48ec81
SHA256 ba25aa69f9e41da6b5ef84c254c9b1df3af9325ca5765333eb2bb7aba6f5b9a5
SHA512 8924ad4561fabeaccad4247a32dbf5d873b1477401791eb2ed93361102b91ee4d3539029694baf0205a7e57ea2975282493b5b1f4a4de9f4fe9027fc42d49344

/data/data/com.dspeed.pro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 cf8cd84e00e520fae9d150a5c193277d
SHA1 d1b0777e35869e29ddda4a5321504f4463c1bd0f
SHA256 c9ee4656dc1ccda8a08b517b3a6e80f0c7ce0cdfc8fb1726552b0c5057ee4177
SHA512 eb1c8234aa5f50c65506cec1fa10c13de311fe042a8b8a0b74845173bcaee4af98d25f4645365199ccd34987226d5147b89dc0f7844ff38f1b8a32b29d4e521c

/data/data/com.dspeed.pro/files/profileInstalled

MD5 d6c0ab02a875b67a1c09691428b916a6
SHA1 d11b9e7852705c0145d7008fb35cbc7d60cf8399
SHA256 4724e13c479ea8a209d58afbc7fd760ca9a2f47d03e1dfced0c29bff8dee2d12
SHA512 33d9279aa55495cb790548244b50e414f1e5a4f8efb4d9f40bb88485b853d8fd787517fb0c3fdfc95244cce20b7646284087028d29a6bba7b2b7a8f1e99c1c42

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/63d80cfda6b3b3ac17bba3a88fa19b505fe630baee0a13d965c4437c952e00f5.0.tmp

MD5 5ea2ac56fa9163295e80aecb45e6a9a6
SHA1 7ef98e2b6819db6792e3e82ab6487e4f03e0af8d
SHA256 63cc1164e86e77802cff0cae8ed36a368867a036dbfe2e8d4def832e995dbfa0
SHA512 4ae701814e91cd6e43eff687e0c5722ece2932e53db0e0abed93ff5913afd06d038298244330a8d484732f350c9f7c2a03b322a270b3712416093ebe40a84bdd

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/964c6a9384b0716b9bcd7e588b415002750675bbfe8d6afb9e8d4560f4bc1cd4.0.tmp

MD5 7e4f9490d965fb2541f31c3ffa1e49b2
SHA1 f580024e1472fda18c4f3dae122887157c003182
SHA256 110d397c07d4f9868f052af9c2936b6b8c5f2a2fedd14f9b025bfe330f3102bc
SHA512 355bd9567fc4e1eb9628a0cf4caeb96d3fe084b4b9105a9f41e4f9880142d6fe5eeaa01ebe806ee96c20c41183fc8b7161d19ab11461bc607dd7998a66f8d264

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/0679a432e6155e657d7d0e6d19bdadc44729f66e227ffa9f296e863743f205ff.0.tmp

MD5 c3ee3a78917b75680d83c9e46ed3f278
SHA1 cff2f3c610fa42153c259c5759f4b5021e257e27
SHA256 881305c0dbb60813ba2487600a37b13032d30e3849f7ba1d71c4258d5f78a84f
SHA512 5a00e8ad691cbada7414fdeab1097134e613c23dbf9c56e117aad4c7081323588c18eac5497ca8262a3d24e8bbbf582bc1bbece8d893779d90346eacf951e825

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 78c4f5479c6a2627553d2915955ac932
SHA1 045102cdca4addcb74cef1354b026b9339da42d7
SHA256 c220631bac4c91220996830e2b771e5111a5b8ec77afd66130207c602285a0fe
SHA512 cb41d93a342560fb51caba800bc2242670c80b240e661ff7b2e95c0fe839e82f342736f84f249601ee3b67e281b87b6448027bd44e674b2930a55be383b3ffe9

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 ed56e6f9140c287b8f05da68130c2aa4
SHA1 4ca63fd802687eb5bdae878eb04ef9875d331c6c
SHA256 12c57dc25a98ad9feba3464d2f59abf40ff49d5cd1d1cd2ed02d42c355a012b2
SHA512 3b3ba956f4d2a45c14563fbdebe36924ab07d6c4f2be411c09a161d4e17c6e9c79de72ca969a4143dc4eaca124d46ab0380a0a203871f0304e5665ea8df18d1c

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 5392f1644889c5323c2aa96b1e3549b0
SHA1 b502bbd5941ad8ceeaf921bac93bb3f6f5a64306
SHA256 4d6619a93463e933371bc2825f3f6c7200902872861ad8391a6d5e02881e6410
SHA512 3ad5c3c71ba7e99f9714a7c7b3d772ecc6c83dcd5335ace96b14fb321fa8d1efca719be6f53f50e811c7f11d1a7d4db8c05276b4a9f314b555872d79d794cd90