72hex —-» MD5(32hex)+SHA1(40hex)

[Snoopy]

its vice versa in this case (was just playing around with this), first sha1 then md5, given this

2F059A5F49AAFD2127DD6065494A91FF5B515E46 (sha-1)
A5F1BC60BE71C3DB0DF946BD0548C145 (md5)

the passwords / lockpin is just plain 6 numbers ...so you can bruteforce this md5 on your own quite fast or use any of the known lookuptables

and yes sha1(pw) == md5(pw)