Malware Analysis Report

2024-09-09 16:25

Sample ID 240610-snmrms1bmg
Target D SPEED 2.0.apk
SHA256 b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8
Tags
collection credential_access discovery evasion impact
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8

Threat Level: Likely malicious

The file D SPEED 2.0.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion impact

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Acquires the wake lock

Declares services with permission to bind to the system

Requests dangerous framework permissions

Queries information about active data network

Reads information about phone network operator.

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-10 15:16

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 15:16

Reported

2024-06-10 15:20

Platform

android-33-x64-arm64-20240603-en

Max time kernel

179s

Max time network

139s

Command Line

com.dspeed.pro

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.dspeed.pro

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.212.196:443 udp
GB 216.58.212.196:443 tcp
CN 218.78.108.200:10001 tcp
GB 216.58.204.67:443 tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 dtunnelmod.com udp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 1.1.1.1:53 i.ibb.co udp
FR 162.19.58.156:443 i.ibb.co tcp
FR 162.19.58.156:443 i.ibb.co tcp
GB 216.58.212.196:443 udp
GB 142.250.180.4:443 udp
GB 142.250.180.4:443 tcp
GB 142.250.180.4:443 tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 172.217.169.42:443 remoteprovisioning.googleapis.com tcp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
GB 216.58.212.195:443 tcp
US 162.159.61.3:443 udp
GB 216.58.212.195:443 udp
US 1.1.1.1:53 xablau.online udp
US 172.67.179.3:443 xablau.online tcp
US 172.67.179.3:443 xablau.online udp
US 1.1.1.1:53 tenor.googleapis.com udp
GB 142.250.178.10:443 tenor.googleapis.com udp
GB 142.250.178.10:443 tenor.googleapis.com tcp
US 1.1.1.1:53 media.tenor.com udp

Files

/data/data/com.dspeed.pro/files/PersistedInstallation34346444590762675tmp

MD5 230684b9bfc20843b44d683324d62c1f
SHA1 5639fa161844cad5bd686aad866b10e793c6a8be
SHA256 43564ab8d8d93b804b9267cb6bc2b781af273fe85667ac68e4a49e72d0671f83
SHA512 1ba3ce248a3fa4eb56ee3e8774784f08b87f3cb28f921f427a0d89b81f14a07b5e77557912e592134ed0107905f192be6c6c1c8d0adf1dc8e752c2bca4a93154

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 d1cac5b32973b1139d52c56990699eb3
SHA1 7c19389ef0f1d5ad5dce2bcc57b2101a9c2d01ef
SHA256 3c800045405bc4885243cb22a1cbfa634193e6d8681f33bfba202e9478959134
SHA512 36fcc08a2977f5eacaa1b7f185bbc59ec757a39d06bc203c8c88902f0418ee71e896b29e7ecc5ae5db16c80adfd51b202a0407ed1b9e9936c0affa5604059223

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events

MD5 3e601b6b285b0b6810ff9bf6d27a0e6e
SHA1 a812f8483db470f730e6913285e553656d759446
SHA256 14adb94fac14aac150bac49b201cab08bc8f5572ccf5062d8467e63145921f03
SHA512 a2ecc37ebfd8340bdb7b76762bc35d6c35eb4ddfcb6ea7430958173167a5fe4d4cb1a7b0b01ae74f3487bebbf5a27d511251bfb4cb9754601a9c407fb68ce3b0

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 6e603ab24f7d677934130453b929a1bd
SHA1 4d432592a592fca36593c166c528f308b753f609
SHA256 e8189a8189297f8e36408dc68fa2975737b3735fea407c7a357bd9c184f77914
SHA512 d099de959921de7d7e943ddbfe628c4c2f46909ead65cb8e05895c3dcdbd8a74ce544a874441c23c4c640bbe18d2113bd68eee260b695630c11c6bc81fa121c1

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 6a19d2cbc35510077f05540be8e4ce92
SHA1 78de46bb488d467686e80a94541edb3a2051d35e
SHA256 2401772367f81eb6b28f64493d5f14495f0da0128c11831c1050f717ddc8dce9
SHA512 1200b8a7e00765b159b13f150a8117c4881719f8dee8631237d1d8988a661ca873bf4244f6598a2c8670bc67a34c2556289a82776d868bf546e091be6968e186

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/6667190703B4000110811952A866FD5C/report

MD5 c3d43216787dea69985da0e120a14555
SHA1 24f729a99fbefd957db47286b51ad5b297dc0eb7
SHA256 0302056d69143505c38c914614593b665f39c382df4e3b0c5f1843bb692e7a5e
SHA512 e9ff6805d8e3777785b9c4d4f3b99e4dc80a5798c6acf5a6e17233de0c6c3d18f6032dec0f37155bf8d78d3e283f2a229a0ff0a3e75b42d454e2c0a2470fa700

/data/data/com.dspeed.pro/databases/dt_app_config.db-journal

MD5 8cbb15edb369b1efe3b699dc71cadcbf
SHA1 f283f0ebe966055458f35c466da3af094baba828
SHA256 ee1ef22f2156b5121120151db347794e074cee99742898be1a40814b4ac56e28
SHA512 971bc4d20bc3342492a187d7ba5632615d7ded155211090e4ed7309232c6ea6b5b6517dd0a112fb2229238b219af4eb43ea3359fdc6f36512cb57fcac2cb9163

/data/data/com.dspeed.pro/databases/dt_app_config.db

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/com.dspeed.pro/databases/dt_app_config.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 7808e24086f667d55000200bbcb13f2e
SHA1 bc8115e3cabe7e9d0d3a6ec98343af86126b0c2c
SHA256 f2ab91bf33bb68a84da999a5a3a6fd566a94c160a06b1d1876ec3783026a16b5
SHA512 404509fb352acf58d5c274f04e3f9de8672be5f11a39d2e5d0ca7461b0adad55e1861d27dd0ff7f6620aad7b2aed68742f20a9b68eb1e1d6cd67d5d5b55c014c

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 236147f96e53d9d283b99439da389d3b
SHA1 2e07f7d86a8e11c72b6d8636b2ef2e4589280a47
SHA256 d8d652c009209d2aa86c0a9ab3abae19455c89a872ea27f123852b1e6d83c7df
SHA512 b6048698d80e4b34f776aab44ed4a21227b5cb74c6d1dd9f1e24973c67e60824c4d095f0eca1be513ecc2b745eaf3b0ed988d8aa2873c38860c4c5d48d62eb33

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 8ab01603dc1e34502cc49893bcee30b8
SHA1 5b6434b2927806ff567cacae5f77ff9831d80e9b
SHA256 1bccd16055149ef773dc70ea6c6a97ea030ea826fe389a0f06565ed838e28ceb
SHA512 db5d4511e257ff0bf994606d1844749cb207cba1dcecd09d851e62a6d8275273f207dc3ed106dffb7864377f85843a5db295690ec699e3d9283bdf73c3d31229

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 039ad24b30e63848c22dfb4ae8754091
SHA1 a94576bf84dcdb4786b69d3ec1e28e12fef2baf7
SHA256 1f6acd2fa4caabf129f6af928d1c8bb32c008ee899e4b34094db3dee1b906ed1
SHA512 19c3847f7b4d56f261ec30fce9decab723a0120fee2097669d85ca4e5f44788fc1deab93969e9d95f8df329d2856dd45fbb47b1feb10d9e863d3e3ea290c4e09

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 b8e3ce0be0ab88847b3b2d226d61053b
SHA1 31f96b6b344f0b732f996f3f91cffd2005f0371a
SHA256 2996205ec847e9ed126c0bf3fb4e745704ac72c5cd254b0c9600b6e71a072dbd
SHA512 7fd61e41265d216c4f30e8663e5c566206d6a11a8084747bc06d6a3a5c78713cf7121fdae71cfe3cd5eed974f0c852f93d937e2530ab232c312d116f3cf83fd0

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 7e59abab4a9cacbdc13a9dcf65c1175e
SHA1 69fbddf0072cb4ca8c4adf7b9178866d91f246c1
SHA256 1afadb520ea213e16dc962fba2292f7448e06e3b1b1e4b83ca6f291592b9527f
SHA512 7439dc7707023fa3fefa5813f8a7f96f63efd8581dc7864eefd39766cc9d837f0d2e385046c65b3a1c160f02067d7350a08de6c38bceb88d5ccf5603b30bc9d5

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 43c8b0b2bdda2fbc9cdffcbd35b71c39
SHA1 9b21321de179d46245be1b9c60b57d75925aeed9
SHA256 146dfe11657202e7142d0764b27913427715784c405e535cc52d7bdc183d08b4
SHA512 79891732fa09e578911e18d24c95b98c4b52fffc55e14502cbb8aa45e5d387d17f56c71017257b42545a085b7388557c2647bdd3650163276e1997932341c9f1

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 fef8ea1b10626ddc5309e8d5524a4595
SHA1 6279439e1579e061a1c4b4bcd86369b0344bfb70
SHA256 7c30399ad7f9d72a68c0bb357e53b0845b7405f3b1e9bdf85751bdc89f61bdf8
SHA512 08db1eb2c05c28b51411017d7bcf94ba6c412cdcc14a67f79f1576e4a030a4bd5292c3e4c517cc497d36b8001c26d06270822d78aa05b96c8420081e17be8219

/data/data/com.dspeed.pro/databases/dt_app_text.db-journal

MD5 9c6786bead5018c880c73eb4ee04fe5b
SHA1 0310fe43f4bc24ca04a3c29732feb2790a2fcf52
SHA256 af26bdaf99a40384f353c38da0f6135afe32093fb8102f3412183a6a20944d08
SHA512 626fef47f6018eb73ff204f6bc8e2e33ea76f9b0fd0a20e0b25e05fb5fc3394cb882d3066b0a856d632a4d9b1556194b0abe40a7d107ac06638b432c49b9c417

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 bea28b653f9e5af7c08864791fb28164
SHA1 dfa387754685ab78225fae57bead5b9ab4b400f6
SHA256 2e1cdb34a3face9aadfacf94c5d2c1b7e1e53122ab5aabfb87626e1134714739
SHA512 14d177d4e20064e2710d4f6142056dafe6386dc34cd0e604b68db4942181860efba3475ae8ffee10ff06ba7ebc03f7164e5237912a636f46a8a5fadb24ba77e9

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 59ebbefb783d0d0805dd83b6ab32101e
SHA1 3bcc99fc315b76e8c9bee78f14d7f77b9cc90872
SHA256 b37d792db13afadb68ada495fcb881f97ec18618ecf3e45f0079461bcee6b8b1
SHA512 cada8bfe1e3e8973927d8ce9d37729cf40e8f697ba02c355a47dbc25f6d7f0c10881622168124ebdcfe27766c8113bdd157a19addb57216c3f93466249e54fa8

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 028c25b45f36ad2d42975d30b01b6f90
SHA1 d16f05677ba9d23f0292fb2ca898ac0069f94c07
SHA256 8e722f0537ef854b71868b8137900a17c9cab2e4c82f64a37831ae9e1282dab4
SHA512 27dc8b13af3bd1634e672711320f3c6131551735606efa9bf7b53f55ea40c1295ea4f2c75094d6a242096c8e68101f0191b03077bfa3d923240930a8e1558aa5

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 e2917d422ce835ab1fb63ba44491d740
SHA1 3bb1b8a0f8f05bf21830ffdcee5ba373a0d798e6
SHA256 b210ce0121a6747a95773c3f85aaa4dcee3fa6ada1e4a615fd40737f7d191be2
SHA512 387ffe60895f54fbed9047af839a8bc7fbc18503ca4b45f08c97eb3f91a175e957df3504560646330a513fe5f05c92c74087c8e6a2049cf79a0202b49c3ad5c4

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 03b872b2387e0bbb155e15734479e9ba
SHA1 b6efb0e17fa784adfb306b9a05550084e4924a6f
SHA256 8bf78aaf5dad28334ab0a6fb1aa868d1e1a430d12e450496675100d4e1a12b51
SHA512 f2f415cc8fc22dbe91badd00cdb68c88648ca41cb86216538b56040b2d9206ad806dbbd29c6dc5ab6c2946c2369b0aeeb55dfdc62e093ae495b75de0c8865bdb

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/6667190703B4000110811952A866FD5C/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/6667190703B4000110811952A866FD5C/userlog

MD5 ee43bcb58aba0b85076b6f6c4109a6a7
SHA1 7628c3b2fc283ab03ca179445fbe6504e5d6d106
SHA256 96553f32a811456e89bcacfa77445e09e3aac9579b3f8a0b746ffec16780108b
SHA512 fcdd0f8085f09f5d439b8c8ff4dfc42577e007a5a48ca03f13e84607c34168c65453363c4a7eacd290c001df264b843670e75ddde76885497ff7dfe99d8b8798

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 77f33d5f4be0492f7ddc8380f865872a
SHA1 230ebeb32ed35484b867393102617410c5fa716a
SHA256 7f991fb5c61a1bae37a10dee87f7ae5910754dd7dffdadddc70a517b4e644be2
SHA512 07916f455baacbe93c15382e2f4fa88f3ef921c59938025fcee6281c1970116f80deb34e9013082b71b2df5c5dfefc4de87c90ae9513a0e440e438435191ab84

/data/data/com.dspeed.pro/databases/dt_config.db-journal

MD5 8ab7e482f304a4abb60b8acaf4814d47
SHA1 3aa5f614fc35b6460f1376d18f94f1a6d4c3c255
SHA256 f2dab51db818f8420e6bfe21c633a302f8f7533a718060eeec08571e0137bdf1
SHA512 7000e2e3b9ff4d3dabdbbbff4147e96f1d7016edbd3658aad77ecea9cce1327baf293dd6a33be279e76fa94b176adfe1903af18db5d40e5e99219cc902110798

/data/data/com.dspeed.pro/databases/dt_config.db

MD5 9009d829930ef768b55d9a0d97503419
SHA1 aae21df607df15c2fa60c6ab470837230fee963a
SHA256 63dd340f0ecddd125c1039b5b5549bca25dbb7e831abfc4cb25ed4f8f3bd0a3b
SHA512 5ef4fe988c0102219a66baf8c2e0f686badfe0e1b5754e2c5d96dfa58950154e8db4711d2aa1ac9838c8156a2406c77db762ebb2669f22bb38e50a3c3dd880a8

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 76fa1b7d8f6c89af7c56f41e411f824c
SHA1 a78ac3e6c5aa159829888d4b802ce2906249a9a0
SHA256 b14299c673b08f04837c4bd727cf4ee14c34c7743e0c55d7f641bc1b32b4f080
SHA512 59e03c6c45bd709261f32d87e45c8da005f1cad4e7fbf86dc19ceb78dcd2fa61b4c2f5504d9a4838a8b85b48f2530faa173a0fcb88bfee179a5355c96348b1e7

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 94d7372a3e25008e2289d7b8341efce8
SHA1 b141a24f3690d31b3df74be3efbdd88157e4897d
SHA256 b8148d16c4e5f69bae27d398d58a426bb842ccf516082261f113ad26e3e7fbef
SHA512 bc5b2dde97d933dae8319e6bf75dab91ce0e401d74226e5716416fb03c5f1d839c84ef482aacb1c9bd8aedc0885f12d20acd6e47dcb238c616189608f2dcd1ae

/data/data/com.dspeed.pro/databases/dt_user.db-journal

MD5 9cd81a3501a9613188917ccf990d15fd
SHA1 dc99ee2ebbc62a6b6e82c7fc5bd5b0f4045ab6bd
SHA256 b162f656cfa33cb4f47fb9bf973427b7ca0e52efccc703caa2733f93c17fd1a6
SHA512 29a6954b10d68aa87a7bccfd01847da5c19cd5e30def16db09f78f199572701edda1d6bbaad6726244bb52582e7bcb0f86c335c8e333bf148c37ab6f6481464a

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 e909dc1c7749872829c85f0189bc7161
SHA1 8b8b141cd9dbb6d89866a41f2d8d9843471caf20
SHA256 ce9770d59e4506f3a229162249d37ced47f4a1f84d38b345555dc014d96ff59f
SHA512 40e644486400aa2cd7d764bc33ec8ff6ac07b60b45c51b1583d1b1ba582589758c43715e2ea6a234bb08255663d007444ef155d3b7c3a14fd2bd1319b0e9d23e

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 ab73bb685e83d57e14af84a6021f2145
SHA1 dae27c21e315a04cd830e8dc9972785cdc9acba2
SHA256 6f884205b63d0dbe15dbecf48db0c0560114238d476e99c27899c7dbf6262247
SHA512 8952afff5c3c5e6ebc38db3ec651928b15c1a9c4ef597933b8239ef6a6b3f20b6c5a9bda31f2403171cc007db42099b60e2abc253d24e3f2e66f755d0a1a2984

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 9636debe0c821f1024f7fe9dd3552b0a
SHA1 29c86d82092ccabc6664fd93a755e3cb3c6bd05b
SHA256 0554abcc5d9cfb39d666d6cc1743383aeb1aaa206e56effc561517c6b55ae8bc
SHA512 886c1d3fa865f02b7fdf3fe65cdc011dca45be1e38e949120eb6276cb7b5763b65fa7a4ca2f0a9aeeea70073b63c2e0d48dc9029812a9408ecfba8d9169814a4

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 23aab43e435c7fa0d5d2ce44272ac14c
SHA1 22e127b65167f0f645f4ca2fbbaa79ecd3366590
SHA256 7e381428f69f7fb5fa7452e7980392b07824556cc6fb93f926cd0b8acc0cef29
SHA512 1d66dc11f76210923fe9174ec9fab0137ee5b15635f4e99ae328322c1bb304e5bb84d8a93fb781f49fca52dcb9d7ba4ed70082faf8174aeac2010687a61130cb

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 1f67e42f5d1cf85187d098467dbf7141
SHA1 9859441fbac000e4bc40a35423fbdb03d75fa155
SHA256 9049e6e9f3e98c5af60d3a46b28ddac82daebdb51d865d3dd39a612b65bd1be6
SHA512 41d710baa3caddb5cac8b0accb00a1a7003a37f8145a9e47265046bb7dd637c0e1a5a19f9d03ffc71f7580271b0ee01c4984edb16629aa9fd1b5915f8c8d9b67

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 4ae7bd6e273a646f9443bac5245f2b32
SHA1 3efc2c3308bf69aa35313f88b3e6e239e4ed7f9b
SHA256 f6c1498be2c2842b7ad4e6d25d34c270099e970bf39b96106b93414ecde9f2fe
SHA512 fbeca1aa5184089b73e09ec78bbf8e94611acb569e3e0911f6fc7ad5ce2d544bd1d22008dcaeb2d308d87f438b57a5ae1aecda67d1901fe986588b322db5ba9c

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 5754e43fbb223fbc8a3d76868f38818c
SHA1 887f0a45939ba7aef208f0eaab59fa80ef48ec81
SHA256 ba25aa69f9e41da6b5ef84c254c9b1df3af9325ca5765333eb2bb7aba6f5b9a5
SHA512 8924ad4561fabeaccad4247a32dbf5d873b1477401791eb2ed93361102b91ee4d3539029694baf0205a7e57ea2975282493b5b1f4a4de9f4fe9027fc42d49344

/data/data/com.dspeed.pro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 3bf3fcdf3ff0e1a79eb015a5dadc1479
SHA1 569b2d32c111a240271b3d135d4be18678dd924e
SHA256 7ae927434b8169eae17011eced142565e499a4f9d404ceb7ba57986fe85e6a3a
SHA512 ef28bf4999f7048d85b279b3ccc9b311868e64fc13eb98c7529583f5c0227df2d81a12be0978e64f68054d276dc172d214f71b44c9d05dfec31db0deb824bfa8

/data/data/com.dspeed.pro/files/profileInstalled

MD5 5429d0d9779419b4733daa4cbab06598
SHA1 c464c30ea88c7beebefe7891ba9f097b1104edf4
SHA256 001fbe0f710bab9029ccdba645e997a9a57d00608948dc251e5a2790d1f22423
SHA512 1479c3e6d92924bddd9a4cfb91651950f06dfb72a210cc7c2c75d6508e095f191843c158cfcfc19ef032425f36efac6daa7ca8bfb11b1a5f6e8e05ee4aaae0ae

/data/data/com.dspeed.pro/index.html

MD5 5abc965994aeeb8bc919b1959513215c
SHA1 e41190c75b0989c0f89b7f2d4f8d99fbdf3b3c8a
SHA256 213ed92c960cca5c05f4976cde9b151ec5ee865cd2c96ba27b2be4bedfce8b4b
SHA512 b92c5a508394d896005a232aee078e09633a72d63d2945f7fafda6cf592fb5490170f23f39b6bf6d78fdd9626d102890add87d252d4ff34b2eb6cb4a0b7b0eac

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal

MD5 a03b950e142e45c90c9e1ea78e992983
SHA1 51e9ac168a838819bf7f7e3ddbf9786665101a78
SHA256 890e7326dde3395f5853ec38dc93a6933caee5706344ab4079773f1d9c9669ac
SHA512 f873adbb6876f162e9d433e82db12dc5061e64b3880ac088b0078ea1df96d28239fa30b543b7b047c02768c706cc6822eaf200f48017d4851d09321983d07b70

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/bf5abb9b64ac8e52861e170231292b05101d19dec515f52a200b6f52e97e38b9.0.tmp

MD5 af8b1be242926c09328bbe626858e698
SHA1 ccba4d3546693fa44d318fe56b4ffb710a5b2427
SHA256 aa473103c8791d2b2f19e3ef8bede1dba8b45bfa992a03a8259a9b6828f04b7c
SHA512 23baf22a36b90c7d4115d6c2b5f53ff25e4063a0cd3b7140605f1a4567ead9ad463e190e858dc6a246197b5aac70398791d300c3cad33d2eb25cadf56ef0671a

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/e9c19613f0c45f78824781da0b47f88eb82d5754747d5c02e97f85e9eb6c303a.0.tmp

MD5 1327fdedcc36062720af925df4894721
SHA1 85defdcee41569391953db7b3c78211464bac1d8
SHA256 c6d65c4c892c1106f29d152528b7654dace3c0196de8f3fbd0d8c61750d7d1fd
SHA512 c45885f2257c7cecf6804b266d64e589b61dfc8e54636f1743194ba4375b03b70533f6ac853f9a1fdc30df3bd7a0289110881e91e3ee544352f60ff9473ae2fb

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/63d80cfda6b3b3ac17bba3a88fa19b505fe630baee0a13d965c4437c952e00f5.0.tmp

MD5 5ea2ac56fa9163295e80aecb45e6a9a6
SHA1 7ef98e2b6819db6792e3e82ab6487e4f03e0af8d
SHA256 63cc1164e86e77802cff0cae8ed36a368867a036dbfe2e8d4def832e995dbfa0
SHA512 4ae701814e91cd6e43eff687e0c5722ece2932e53db0e0abed93ff5913afd06d038298244330a8d484732f350c9f7c2a03b322a270b3712416093ebe40a84bdd

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/964c6a9384b0716b9bcd7e588b415002750675bbfe8d6afb9e8d4560f4bc1cd4.0.tmp

MD5 7e4f9490d965fb2541f31c3ffa1e49b2
SHA1 f580024e1472fda18c4f3dae122887157c003182
SHA256 110d397c07d4f9868f052af9c2936b6b8c5f2a2fedd14f9b025bfe330f3102bc
SHA512 355bd9567fc4e1eb9628a0cf4caeb96d3fe084b4b9105a9f41e4f9880142d6fe5eeaa01ebe806ee96c20c41183fc8b7161d19ab11461bc607dd7998a66f8d264

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/0679a432e6155e657d7d0e6d19bdadc44729f66e227ffa9f296e863743f205ff.0.tmp

MD5 c3ee3a78917b75680d83c9e46ed3f278
SHA1 cff2f3c610fa42153c259c5759f4b5021e257e27
SHA256 881305c0dbb60813ba2487600a37b13032d30e3849f7ba1d71c4258d5f78a84f
SHA512 5a00e8ad691cbada7414fdeab1097134e613c23dbf9c56e117aad4c7081323588c18eac5497ca8262a3d24e8bbbf582bc1bbece8d893779d90346eacf951e825

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 81943a663be4708cb6ade7fbe65519eb
SHA1 fba77a988816c0e7c3bc3dcc7300b0549bb879c9
SHA256 272768e8cc91f509f73d6397d8f4e3edb514320634341fe01b23a1919bc69162
SHA512 610a51b5de8cb82b2ed7c071e90544adaa1f3ddf0d5a050870d6e6f642d5698310b9a3f7f2332122ea53f9fdf850575c4a2c4b1ecb6c9e1b266ad76292ab3a67

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 da00c42bbf13b698e6101dcb6748ca28
SHA1 08cc270f589973e12a0bdcf9c1f150ae47540308
SHA256 1d2fcf38ff9056eb1f0d90c23df314ce587b7f321b1d050dc44e54422fc66ca7
SHA512 bb447aba918e5bf5fa6ce512407a7da02fd69e011fbce263cb91992f374746f47b456509abadf9ee896a556dfe49bddff44abfc6d95ddc3e567d3b41089566b2

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 588d4814d821aed87a1655802dfa3473
SHA1 c1533251001940369704b02724f891eae3198224
SHA256 40879fb2f4efc4233da808bd3f45bd2ea0634c3d94a67d48e709cd2a486705a0
SHA512 56a260c550ad603dd7ccd3c59a84e5fdd6792e7e1dddf89b504f39ebe840cc821525b386cc0791c7b66204360f8c17f38b3ab27ff53ca913be52c5e152e757be