Malware Analysis Report

2024-09-09 16:28

Sample ID 240610-srjjds1gpn
Target D SPEED 2.0.apk
SHA256 b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8
Tags
collection credential_access discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b43104d4889e4b4c905394d43a580ddac211128a1db8094f00f6b99de264f1d8

Threat Level: Likely malicious

The file D SPEED 2.0.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion impact persistence

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Reads information about phone network operator.

Requests dangerous framework permissions

Acquires the wake lock

Queries information about active data network

Declares services with permission to bind to the system

Makes use of the framework's foreground persistence service

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-10 15:21

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 15:21

Reported

2024-06-10 15:23

Platform

android-33-x64-arm64-20240603-en

Max time kernel

107s

Max time network

117s

Command Line

com.dspeed.pro

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.dspeed.pro

Network

Country Destination Domain Proto
GB 142.250.200.36:443 udp
N/A 224.0.0.251:5353 udp
GB 142.250.200.36:443 udp
CN 218.78.108.200:10001 tcp
GB 142.250.187.227:443 tcp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 dtunnelmod.com udp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 104.21.56.57:443 dtunnelmod.com tcp
US 1.1.1.1:53 i.ibb.co udp
FR 162.19.58.157:443 i.ibb.co tcp
FR 162.19.58.157:443 i.ibb.co tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
BE 64.233.166.94:443 tcp
US 172.64.41.3:443 udp
BE 64.233.166.94:443 udp
GB 142.250.200.36:443 udp
GB 216.58.212.196:443 udp
GB 142.250.200.36:443 tcp
GB 216.58.212.196:443 tcp
GB 216.58.212.196:443 tcp
BR 187.120.18.204:443 tcp

Files

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 3a9024c4438e912c76e21a7283eb4158
SHA1 885483ea209c64241818c80bb31b38f64d0b76d3
SHA256 9ddc479fc588e7d406273a73337615c8e99eeb3d192d93eb1e44ce2584dce07b
SHA512 bffb6123f21ff38ef06a53fcfa0926eb74706541fff662b8596ef7f6270f1f51743566e98b54f47dc781577e45f695f6de71b1aa5c587e54035b77282c6ebd7a

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events

MD5 14a62a6ac04f19140c5f80b19e8a7016
SHA1 a08bc9108055a45caec3337f2ad7a76aafb11c2a
SHA256 b3773b522b300f30f55a85f61068a59ac572369f864e5fa14ec2f1fcb6da5f53
SHA512 54e7088e476bc06eb80c033d15d549710d5dfe2373ace43d16d7d32809d9c47e5aaa1b25cdd154a0428f895bf71ecde4683d728537c9f45f5d2f55b3b3ab9f54

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 983095bafc52c2225909a716ade19c9b
SHA1 95c0fbe0611d87c2b28feae44ce422eb85038aa7
SHA256 ee7ff147fd06c91d0d1f21136ead8a784badd64ec6299e6cf280b540bbb06ff6
SHA512 2553f4a7d934c122c2700fa5b56a41b5ff1d79a3d5b2a6fda3fb6fc704f75dab6e0ad376cc776ef3c7068371a869b7a21cef48c603ba266442d5a2680c1f2cda

/data/data/com.dspeed.pro/databases/com.google.android.datatransport.events-journal

MD5 7305d8baaea0e1c03d6d8cdde16c438c
SHA1 32bd6cabaf9ce6cc4ad3b4af7a91cc35a1576bac
SHA256 ff13b9731e579c8e377339827c9a771c9510fa075dbf5071d89847b2e5652197
SHA512 d8cdc6e532201a9996490fa76e3a1b57bb41805f9c4d80cf846f7269bfaf10d074752a8768b4e51b51d0e06fd3285c25c9d55f596dc5945f1516a277d15d63c1

/data/data/com.dspeed.pro/files/PersistedInstallation9076744611722830777tmp

MD5 9c0e1ac478e7b163af672c0e94c5e1a5
SHA1 975c49fb47adbe62537fba632169d633656eb5cc
SHA256 02cdee04b4e6f72bccfd582ef941cb58b3bef727741fc15704625441d4f6806e
SHA512 c778538dba1a441b6855eb2a3cf947f1607faa08c041904f376d5c05f66cb283bb82db101d3ce6b77e675203c0dcd6ff0832faa99e4db55bc1b242bb2f7b163b

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/66671A0D0011000110680C8A4373B89F/report

MD5 80ed804c3c061968e92f684802cdc8cc
SHA1 60ef428fbcba3c67ffedef6c7bafd73826aabd34
SHA256 09b90cfae38ab407441655ce5042fd5bfe0907211c3c27556372d9ef77bae67d
SHA512 1bb24c931e2ca4cf2d42587c480f5904b5656dfec5ec47244f77c3994562b033b86cabab56d44d5ab4246306b6d86d1e251f356fa4eff2aedffc70d460c204f4

/data/data/com.dspeed.pro/databases/dt_app_config.db-journal

MD5 fc58eff4529dc05b6d5d44a918c783a7
SHA1 d71f03bb2b6fc055dad9d72f6fa2bcf8a0825bfb
SHA256 3ff720ebffd2cb2bc3c8c7ba5d0b7c03d11f7cde3b4921781b56c8f932bf7355
SHA512 2955ecad9e2b26d86a92a241f0d545a7768abc38cfb1bc04f953eae526cac4214d9645ac82323d759ce52d1b2b1ce9d007fe66aa49fe0282bc5551537da9e248

/data/data/com.dspeed.pro/databases/dt_app_config.db

MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/com.dspeed.pro/databases/dt_app_config.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 b3ef5aef61fe6a620551f9e8433c0bab
SHA1 c09e60d59ff40386fb9f9375d77c628f77951322
SHA256 de94cfe46ce833a5db455b56e984e34b64f6c9e471b90f2fb88b746e06eb8616
SHA512 3bc07e5bc20183a63c81841b4074c8ac5a26e1475d2cf4d0608a54b4996bd6b59fab658d8847798aef2ed307d1fbcc7853fbd7dc734be9adfb904ffc61d64b3f

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 03da740968604e199aa34cfa78d1defb
SHA1 a1bcf0e2f83a0b5d265b0ec7abaae1b59c12d580
SHA256 a2c641784d9c27ccb6fce9cc3eaa7cefd6663f00aa3623807e05cc547337f3f2
SHA512 d87251dca0a0fef983accac2df27d5da85784c11b6a0d2486e14d70c56617ed5c5648fa0bf694673d5d480a381a42b81cddcdc7e35d5ecdd39e48918dddc49f4

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 69ec762b7ca2c883833b25205fc36d9c
SHA1 9d4e28658b34630119bc47da73b47a73783c3ab8
SHA256 7b3043d493ee59e0366bec9ba860636f71e2e9b46313d644251ff8792e36a64b
SHA512 00e3b2e65420cce3055f26c77bac1e4909b88ccd5d9b593bccfd33ca86c934fbb305dc1cdee26af08beb42bad87dcf14ec1cabbcda3533aa59406d6df3a3b1ed

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/data/com.dspeed.pro/databases/dt_app_config.db-wal

MD5 a108235d7151e32458f7435972d0f00f
SHA1 eb91a4fdf292044018b6edae84d5acd6b963c868
SHA256 b8419f306f3feb9deca9ddaeec7cac3847577d4944dc6a77144abccc4681862b
SHA512 f70f93d57fb37ab9d46f9f0c6817d4cb8f1e168ccc5810d7dcb4d6f746a370fa7e1e52ce4b7fcbb28e0dd8145a9a42a0a2a2ff974d132b6c0a1e2158af2da92b

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 9813550970abd0e4246722c4ebc3d203
SHA1 6d7441cd49fa26e855c741f37892ed785a8bbee0
SHA256 95e9ddfcf9c1cf2e8a28373667cef18074f02effdc58c66e1a0c258905cc0980
SHA512 710f012ca9aea47351aee0136dafa7a3f7f27dc1352356428fb8d5db6e469098e208682701d710a481150717aae5bc6240fb65a494519cc51562635710f889f6

/data/data/com.dspeed.pro/databases/dt_app_text.db-journal

MD5 57ad31016bf876d7e21d0e638c19c5ea
SHA1 883217fa35bdafd26c2291d01ec6b1ec8178a53a
SHA256 58c6f0fe7fd6f27e14c469da8b911b967565d1a47a94f03072febe169a6bf1ff
SHA512 7130d74749ab6f54f706f895c079ef0cabfcc8eb96d2a07c15f2c24b2abe8cf225183534384c8edce0fb54de9b22312de4c9342124cc805a0d5eaae55e1a52fc

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 b5a6d50cce1c639dca823c8d6d42d334
SHA1 a8a5e656331a2b6db52f8bbd049df4506046350a
SHA256 480fe1f957ddd50c436dcc6c3f3ab7952fae1022b4fdd2c97b20e78bb2987f95
SHA512 0e77d208718b0770606de7256b4acf1b92facce52085d16d9457a938ab528dabbb78aaec4a49f19d20d90f9a0be45a5714a1f48ec4548ff620281044737a9043

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 b12a8b2e7ee7ded36f48a3450e644bb4
SHA1 94d03869ff27844e5661b1823946c9adeec971da
SHA256 74dd7842090abc358010a4dd456961fe1071511ecfba30ce079991e90813c34e
SHA512 78870ebf21795f9013866493e2ab5e31e7e5d30681a76cfd554ec8afc59a60811bed8de7085a38917cbfb24f0eb561f321ef8be8fc816e3ba21e2d72bb6f7984

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 87c88081f8fb6e48aebe86366e2f7a0c
SHA1 17b1f432fff2dc753355cb8ecacc5902e0b9f10b
SHA256 32eaa27fdfeafd70b5b54237f9869f4310f0e9ad35580695fec7bc568c9555a9
SHA512 2ed925736d05276179f3d45693b5ed214627794ac23741efdfbd74ed325163ecbd2af5f9945603e9d13fd3e01b02f94f976005cf1753bd20dcabd4ad4ca43ed4

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 2edce7701b9aabe781de7596758a80be
SHA1 772390a62e2d9fe38fcd6e0f8012c51d9bc4825b
SHA256 05e380079fe77d6b1c02e072142c01ca93236e8cb19a188cb0500a2fb4e450a6
SHA512 518ef6d7d7dbeb9e86d90075110b812c51f23cd48fd8a8a354afa012a326b5a514b9beb1dd0a85aa7db5d01ed70cd0e8dc2409ee013923ab58fb8fc641bdb02a

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 217fa5bef7e2c70bf72bdd7689c65294
SHA1 53458c85a402355cb17d8c0ad43e7b149a7afb50
SHA256 be9d47f3c878fc68f79887430ce8c16d50986c19d9a94136487acab64e0a4564
SHA512 faba9ec838ab2fbe69f8eb320bde042b7ff08457aad63455c994b9b6a45c119472faa2dc1e66ee1cee1619668c6556fae497118616720af5f8c443c71a744c70

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db-journal

MD5 af3747cbfb8abc42f708e22e09cd9c9a
SHA1 4f329128db85c4c50325b7b67b40015ac2a80d1b
SHA256 a90da428c7f3f391585173eae80d50d30a0f6a57bcd9821db4e4add4a21658ab
SHA512 71c89dd149d919a85a27766921fda8538171d2eb689deb44c643f275854f2520fe9155d00509d0dfe5b1747c9ba74423541a5f3aa502bb5f4e4974dc9cd52d7b

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 82e67fdbf31a04bf23e7b75334be9e9e
SHA1 419984e9a8e5ee7dd704818fe6c0421004405f07
SHA256 1b1ff10ac01e355b5f19d743a4088979b5153aca9f793b1bb7e9bf2e9754e74e
SHA512 002f590d8fdb39c844816746706f2e4a07bbb1002fdcfeb352c740f0484be079eed38a1a17f0f829d40e20793d772d32aec804fc540c29892c6ae58436106627

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 f40c16850d08a448ee62c80576f14329
SHA1 ef7d33267c4ce18e21d16aa5dee02489f0058996
SHA256 428a127111b4eb0f35af03d4f1004e6d6d5733e36e01c8d5f5b161b7bd9b319f
SHA512 c5e850c513bfa2b1a2efc346551230ec529e67c70cc9fd57c684452fd29bc7f8ac8679d45654481c4aaf41c9af8ed2e206b6cad58eb0939397d0745b10ab07fb

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/66671A0D0011000110680C8A4373B89F/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.dspeed.pro/files/.com.google.firebase.crashlytics.files.v2:com.dspeed.pro/open-sessions/66671A0D0011000110680C8A4373B89F/userlog

MD5 1e21d5de29e3ff195a6bb8f1a5449f14
SHA1 b15834c1d0b8ba25090da30ea843c512938c6321
SHA256 842a3b14a9be455701dd65b644c7ea8918bfaca93bd9021c4433c14c01a933ad
SHA512 7f7c61200bcc1096a512ebe508ebeff49d66d940e46bab5c3c1e2cb295fb94574f4bd79d5a6fe209b8ae5804789cec7c0e03872b7b689eced8d65a7a782c69f4

/data/data/com.dspeed.pro/databases/dt_app_text.db-wal

MD5 6d383b41bc4ec78415d69a371ade2ef9
SHA1 fdee247138e8701992e02a4044499a7a02c0cd88
SHA256 0130be1566e2e0f08c26fba62a1def225c3676ffba2bdf83a1270e92a148f604
SHA512 f99b3bd9a5c82b26ae482815846110f786f572244fa17c0cbac84aa5ba0cefb2a0a635b728f4e7e8084db8a524f3124fb07393782121cb3b22ffb34d227bdf63

/data/data/com.dspeed.pro/databases/dt_config.db-journal

MD5 54a3ad61c6f0f2bc72e77eb6c5700e0a
SHA1 59a10f204311505baf67f98f3bfd5441184285d3
SHA256 d4ac0fcbde5ff1724b4da602add1e7b9f98e7fa6af2ce0625a3094c0f1f58a2b
SHA512 13e96ecfbf83aa01a130399d0001d393e07283428b156833f3f63fde9d50dd6521b08d21885143fd663fb081469db46a25b69eb697a0272bc8a317851a48eac0

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 1869da4ae9c950f3a98b509122240d27
SHA1 edf5d5e34c65161b1d277f90270d51ae40aa3282
SHA256 019e759cf64960876e322e97c81f2ca51e9f4ba856f3108c5a0fedad122c9ea5
SHA512 94f008b1971807f27e0ea844ab92229fad557df8eae8436c2c5f32aca4dfcd41ed99a92488f6a4459f5a48b6a1e101539740afbd79f17e76e7a4a2bc88b3190f

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 6b16d8cab67060c09fbad9f805a5ac6c
SHA1 4e51997c9bb93c2b3c4a780340862e5db1c9f034
SHA256 2746147ca86f3b4e6f83b44f5ecafe084357fbabb5912126ad3cafa481351087
SHA512 2331b7325419f4cc4e9c37591f3c76c93994b129121e0fa20a18c8068ca74cbe3ebb45a5064a7244cece52bcb06e20360c59332828b498563c39affc1febac71

/data/data/com.dspeed.pro/databases/dt_user.db-journal

MD5 d4c90aaf1efd76075744fe921ffcb5df
SHA1 fc1039c08a2585e972216805ae51538d98778bac
SHA256 8bb96d9ab57b771f6784bf7f419caa6173ee69196a9d604d5c9992ab9c5cb1f0
SHA512 10e44ac1ed114f3d09cc52cd72cf5fc6a71fc1a629d557532efb66467e5cf9b5425864b6febe05c99abb79b7518977352fc9013d2a4ca4288bf2177f415980ac

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 3f65144dd1072208908b5187cd9316f3
SHA1 3ed1e49689e895096d9fd349990fbf509d3ec659
SHA256 3635308b40cfeadaf71490241e7067a60450e0d6556f5d665dfc3375edd9853c
SHA512 9dd94a39f885c5e7bb377e461349345a5dab1ec956a384222491af4ce44b81b7beb27228ce213ae30d59dc784c068ac88e79873f27ad19eb980fd56961d24b41

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 58e3f13c0e64f8144c3e2722490ea2f9
SHA1 f64477fdbccad200f46681612218b27d2dd4c5cf
SHA256 02edad5713279a7b5c30b2a3ea0c6fe373c74eb86f8cc48be2ebf57371b47a1f
SHA512 ee9de77603b45c11b7f153cac4badb85a6cb5297293fa06dfee98428e9a2106aee8948d101338346a9c0d27c5646a579b82a5aae12c4a0636cded1ffe2f0c161

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 c8dbbf27f176f4cf31ed15f57a9ff872
SHA1 4e3582cd4598b627093541544951e3774cfbb582
SHA256 7634383efc7bacc648f34e52190ad38921722783917ed4e61c8fe866df88fee3
SHA512 3aeaf1f672b22f2653efe8b6ce63d364af494fae6917c45343e8929f17a5da9fa34f320006176d15e8d9604901f4884f9187e4ef9239cca8e5c3ef2f6d111ecf

/data/data/com.dspeed.pro/databases/dt_config.db-wal

MD5 1fa1b4816525a283cf69386a99da5a50
SHA1 e1670e394ae893387b65b93fead6ca4c189311a9
SHA256 3e5884ee405670af0da74126087ba6a0377329cb3016e88a6aa9ae2e047c017c
SHA512 54117da40680f780576b74c055f46a52f5395bc9b9f4cca818e3a779c304d475590b071e24fbe746aa6ac2fc7ab728e7192a5f9b6e98d3aed10c73446084c08b

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 4ec53472e307749562ad32e05e621f74
SHA1 7870e842dca0c03e4276c2c7f99d58aabda374a8
SHA256 b0146b983fc95118210194011b902bba7955132e45811c266b548a688db9cc74
SHA512 1b77b23c4dfcf1ff53744d97933514faf0765dfa1fd3bbde6b4b508f0fdd0940225b4c61ad99035fbf9d836a56a19b7330caad6df3eb5b5118b2eef759366fd5

/data/data/com.dspeed.pro/databases/google_app_measurement_local.db

MD5 2b7e704c18271c9ecd3e18983b150f29
SHA1 72e3ce1b596e9abcf343c00e63b585b16331b161
SHA256 c60c63d2b12fd93f60aa935d03fa244d903d9dbd9ffb296e283c1c1ea1323942
SHA512 c8778b1d1c8a18dd9a2cacd5deefb0ff1f057afd4b29a566cad0d4622174f77d3e10fc421061dd686a270e6b1504893402ebab9ebdb3191038f769f79769ef25

/data/data/com.dspeed.pro/index.html

MD5 5abc965994aeeb8bc919b1959513215c
SHA1 e41190c75b0989c0f89b7f2d4f8d99fbdf3b3c8a
SHA256 213ed92c960cca5c05f4976cde9b151ec5ee865cd2c96ba27b2be4bedfce8b4b
SHA512 b92c5a508394d896005a232aee078e09633a72d63d2945f7fafda6cf592fb5490170f23f39b6bf6d78fdd9626d102890add87d252d4ff34b2eb6cb4a0b7b0eac

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/journal

MD5 a03b950e142e45c90c9e1ea78e992983
SHA1 51e9ac168a838819bf7f7e3ddbf9786665101a78
SHA256 890e7326dde3395f5853ec38dc93a6933caee5706344ab4079773f1d9c9669ac
SHA512 f873adbb6876f162e9d433e82db12dc5061e64b3880ac088b0078ea1df96d28239fa30b543b7b047c02768c706cc6822eaf200f48017d4851d09321983d07b70

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/bf5abb9b64ac8e52861e170231292b05101d19dec515f52a200b6f52e97e38b9.0.tmp

MD5 af8b1be242926c09328bbe626858e698
SHA1 ccba4d3546693fa44d318fe56b4ffb710a5b2427
SHA256 aa473103c8791d2b2f19e3ef8bede1dba8b45bfa992a03a8259a9b6828f04b7c
SHA512 23baf22a36b90c7d4115d6c2b5f53ff25e4063a0cd3b7140605f1a4567ead9ad463e190e858dc6a246197b5aac70398791d300c3cad33d2eb25cadf56ef0671a

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/e9c19613f0c45f78824781da0b47f88eb82d5754747d5c02e97f85e9eb6c303a.0.tmp

MD5 1327fdedcc36062720af925df4894721
SHA1 85defdcee41569391953db7b3c78211464bac1d8
SHA256 c6d65c4c892c1106f29d152528b7654dace3c0196de8f3fbd0d8c61750d7d1fd
SHA512 c45885f2257c7cecf6804b266d64e589b61dfc8e54636f1743194ba4375b03b70533f6ac853f9a1fdc30df3bd7a0289110881e91e3ee544352f60ff9473ae2fb

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 5754e43fbb223fbc8a3d76868f38818c
SHA1 887f0a45939ba7aef208f0eaab59fa80ef48ec81
SHA256 ba25aa69f9e41da6b5ef84c254c9b1df3af9325ca5765333eb2bb7aba6f5b9a5
SHA512 8924ad4561fabeaccad4247a32dbf5d873b1477401791eb2ed93361102b91ee4d3539029694baf0205a7e57ea2975282493b5b1f4a4de9f4fe9027fc42d49344

/data/data/com.dspeed.pro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 7b3b0c0a90443ab7363d857d18b54461
SHA1 940757841131b07a5a4f025e3c934beae0de42ca
SHA256 4b82f1a94a2effe1a526452c87370d629d89c59425ecae31b3aacf31b5554520
SHA512 e23dd8b381f02a6a5c300d3e0bb7db8deb4ff59403c2ec19c0926d77e4dd5a90fdeca4c63b626981598f2877cc636b587f8273c6420c4ad60bb521b6a5c2b27c

/data/data/com.dspeed.pro/files/profileInstalled

MD5 2079820dce9aceaa787b8552fea65720
SHA1 c57e5dff5c170aff980acfe65dafe4ac5d34c34e
SHA256 2be1f69902fb82fc48b1c9bee262b7371f193c59ce7a488920541d9b91af605e
SHA512 5ca515ad298d3cd5fd2631414d2b4293f78723c3d2f47bbdfd24594462f971160d5eefb55d928e465ae7ad87caf3be84f548cc50a7d671760030aab170ebd3d5

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/63d80cfda6b3b3ac17bba3a88fa19b505fe630baee0a13d965c4437c952e00f5.0.tmp

MD5 5ea2ac56fa9163295e80aecb45e6a9a6
SHA1 7ef98e2b6819db6792e3e82ab6487e4f03e0af8d
SHA256 63cc1164e86e77802cff0cae8ed36a368867a036dbfe2e8d4def832e995dbfa0
SHA512 4ae701814e91cd6e43eff687e0c5722ece2932e53db0e0abed93ff5913afd06d038298244330a8d484732f350c9f7c2a03b322a270b3712416093ebe40a84bdd

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/964c6a9384b0716b9bcd7e588b415002750675bbfe8d6afb9e8d4560f4bc1cd4.0.tmp

MD5 7e4f9490d965fb2541f31c3ffa1e49b2
SHA1 f580024e1472fda18c4f3dae122887157c003182
SHA256 110d397c07d4f9868f052af9c2936b6b8c5f2a2fedd14f9b025bfe330f3102bc
SHA512 355bd9567fc4e1eb9628a0cf4caeb96d3fe084b4b9105a9f41e4f9880142d6fe5eeaa01ebe806ee96c20c41183fc8b7161d19ab11461bc607dd7998a66f8d264

/data/data/com.dspeed.pro/cache/image_manager_disk_cache/0679a432e6155e657d7d0e6d19bdadc44729f66e227ffa9f296e863743f205ff.0.tmp

MD5 c3ee3a78917b75680d83c9e46ed3f278
SHA1 cff2f3c610fa42153c259c5759f4b5021e257e27
SHA256 881305c0dbb60813ba2487600a37b13032d30e3849f7ba1d71c4258d5f78a84f
SHA512 5a00e8ad691cbada7414fdeab1097134e613c23dbf9c56e117aad4c7081323588c18eac5497ca8262a3d24e8bbbf582bc1bbece8d893779d90346eacf951e825

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 2335516fece99c5d077b2fd71805011f
SHA1 d85626b14cc77ef0b4e9f562f89ab94f9e58531c
SHA256 bcf815bb463c096eafffbf13f5297c8ca92fc6304fe855f91fb30016f96358ae
SHA512 8e57c7825b7a86aefbf38dc22156f5ba91be8842d44f62e0836d76a2880554b2f23d7a57f6dafa9a207e20104674abf940101c72973e62d754f41bef70f86b88

/data/data/com.dspeed.pro/databases/dt_user.db-wal

MD5 e17c781f7b815cb88697856ede75ee37
SHA1 0eec75f0a55e58d3b88ea90ceaf5c7c7bc15762f
SHA256 f001ac813078b7db5d3dd4b3bda94c4ab8caca9b8b82908193e3567aaed27eb1
SHA512 b6ee8b7a41b8255bee010bae02ad0c7f4c5ca6e1de3d17e092ba099b265490009cec3dea62e883013dbccc5e0938e94bd0fcfe23d22a3c770c7745aa55ea6322

/data/misc/profiles/cur/0/com.dspeed.pro/primary.prof

MD5 8c368c42c32ea8c6742d0e79fdf9f427
SHA1 48e0b983a7588055061d08b181480860d8b0bad3
SHA256 b7cf8ebb4778fe57e3a7bbc04345c915f5301fec743732c0ee2c773fcdc2404d
SHA512 12824316a50422cb2e199a32e4a87a7d45d09cb1044878064c352098dfe242bd45d53d764a93f23f81f4f095b6a673237c1da6881df9a50cc764e94afa17b63f