Malware Analysis Report

2024-09-09 17:52

Sample ID 240613-hh7vhssbqn
Target a443aa2abfa28649f099bafddba460cb_JaffaCakes118
SHA256 db0ba49c96a6326d78ab526f4eec7d9e4b3dc7a8484b27f46cfc11ccdac01835
Tags
discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

db0ba49c96a6326d78ab526f4eec7d9e4b3dc7a8484b27f46cfc11ccdac01835

Threat Level: Shows suspicious behavior

The file a443aa2abfa28649f099bafddba460cb_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery impact persistence

Queries the phone number (MSISDN for GSM devices)

Requests dangerous framework permissions

Queries information about active data network

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Queries the unique device ID (IMEI, MEID, IMSI)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 06:45

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 06:45

Reported

2024-06-13 06:49

Platform

android-x86-arm-20240611.1-en

Max time kernel

157s

Max time network

178s

Command Line

com.lantern.trafdete

Signatures

Queries the phone number (MSISDN for GSM devices)

discovery

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.lantern.trafdete

Network

Country Destination Domain Proto
GB 142.250.180.14:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stat.sdo.com udp
CN 121.4.186.15:80 stat.sdo.com tcp
US 1.1.1.1:53 woa.sdo.com udp
CN 118.25.249.121:80 woa.sdo.com tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
CN 175.24.154.131:80 woa.sdo.com tcp
CN 212.129.163.60:80 woa.sdo.com tcp
CN 212.129.163.180:80 woa.sdo.com tcp
CN 118.25.249.103:80 woa.sdo.com tcp
US 1.1.1.1:53 woa.sdo.com udp
CN 118.25.249.121:80 woa.sdo.com tcp

Files

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 7cb49bfd4b6e12f63c8a869a4684e73c
SHA1 8ca61ef3f2b3806d78a3b91a71721af27cfdda56
SHA256 688280532b2a4162329dbc978eed6a308d8e2e0a85f389d4a28995ce98b9e1d6
SHA512 60a654a6afa90f6403eb523db357e05963f26c1c5c3e80784fc9529da7988da54d68117f6434953f7d34c8a562117d1074a9713bed21813337957a892ea2f611

/data/data/com.lantern.trafdete/databases/sdk_stat.db

MD5 b6918f8c854265f0d90e3b433a9be320
SHA1 a74795f6655ef00e0f4e7775cfe2a1edefb22ee1
SHA256 781e57fb64f1ab117346582ee4a1f83d11c25dbf31daa2f781690b395d065f7a
SHA512 ddbe3ac010096a6c7087d2fe4828dc7c5e4c5ef11e6c58a27aa2de469330d17d03e10db99e706e9fb07ce37333713516144f618d81e2363732081ec4e33ae653

/data/data/com.lantern.trafdete/databases/sdk_stat.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.lantern.trafdete/databases/sdk_stat.db-wal

MD5 aa7a2ee587319f4302bbd8ba37a2ed29
SHA1 04d6a2fdeb37eb0f2b103e1416323d5b1a7c47e1
SHA256 c51b89386aa5b0c72a9209087c1ef9cf3589e71c7cd1059a747a1e5e10d1ed38
SHA512 136b6bf24aefe380bed468153ad8750c2925943d9845f578cbf1f62700c34fa7b514943bcf498ed79a95e91da057f4fe390d87149bb10ce848478fe14f9263c7

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db-journal

MD5 e129756037cb60cfe25a0b18f1761950
SHA1 f615eb9b225647e547f13b2d930b0b8fd11c7bc5
SHA256 578c036a226b429d03c01202d577e1ddb271ef732eac31200fe7634351b20d23
SHA512 ffb7e34a347b8de03a4d7e0b865c3c85e921432c603c1fa89c1fa6c1d61bf0bd27404e30e033993bc11b4fd58ab12db44b623bcc38ed00c43e260689adc59548

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db

MD5 3fe30614d7e0d11db870b4624f6c50e0
SHA1 053ff0fc621ab40f2afeddb3e7b4a73ee41ec533
SHA256 67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d
SHA512 c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db-wal

MD5 0aadb792902aaf2cd11308a3a9be628d
SHA1 3bf1de76d1bf1fb1be246334a55d645b349567c7
SHA256 af5544d87ebe1fa8734be0a9ed23c31cdd14f4b625c9c1abdccb06880237be8e
SHA512 7c3ec2a0727f9ac54d07dc3755f3cf4798a9441fb8a1dc56f4cab655a3b6c6a9557ccf35c262fecb55b8541bd8830d18d86ad0bafb341396da474e4ae996f1d5

/storage/emulated/0/snda-wpayandroid-data.db-journal

MD5 97b83d525150032dafd31ec5079a2e02
SHA1 75920a3606ea3cef2ceeeced15f39786e64f3362
SHA256 6a055cd390b5dd6d9e9eb4de8ee1e8d20e8a00f2e1aada9517973e2f6a6b7046
SHA512 4c55d15ea96d5be549ab35d08889610b259971f2b184175f33ae5a4a46f315dbe78d94dae20c7b85a088fdaef2d9a26bfda09b579ddcb896d670b030c8906cb2

/storage/emulated/0/snda-wpayandroid-data.db-wal

MD5 33c47bd533df00ecd4a9a9869c75b292
SHA1 c840c83e040501518a00066d7418c5ada6e11cd3
SHA256 978bc2abe4211be2fcc512d71ef4e3930d7fe3a48c3659076e4af23021ddec40
SHA512 1ddb6855bc0bc172cdd3a04dd09070536717bd9380ace6d8594d6efcddc9fb8518881fb2be09dce2a74ae7498b47f408b5c1dfb52e695ca065252868e6f4b2c2

/storage/emulated/0/snda-wpayandroid-data.db-wal

MD5 4d0ee0b0e9c3f9569fd88941a0ced8a8
SHA1 228d6fb31faf7c5b0984588ddaf61bf824a1dfb4
SHA256 4514f6cbd351aae9628037c351153e41cf856e864e465c8f5a346a1d4315266b
SHA512 3487132be2f689813e40f755beeeba08ed298dd9af92570c8f8a61d5ba2d7b5e5c366322ce2d14e7c7de7c9c29681aed1f89c3f2b81cd160cfc14f86ad8620dc

/storage/emulated/0/snda-wpayandroid-data.db

MD5 c878071c6f5a5bcdcbed7aff6b82954d
SHA1 25da9cf3c4d149e9e052cd573026a1063898e0a9
SHA256 c09749c1cac8c07704149005f2aa5ba91b048cf560a183e40d8526ed1f73dca0
SHA512 de59d18345c64f0cc1450e44674046616adcda4652fda73e6d7009a6c42b281c9a8f2bcdf909a643d18d9eefc7ec666960f71f7ac9ab351ef02192abc3f74964

/storage/emulated/0/snda-wpayandroid-data.db-wal

MD5 982d842b41e44451bfdfcfa8678e9e0b
SHA1 a68abef1fdf629fdf084e43dd0686bd2abd70319
SHA256 d9c9da55e19910dd8cf537f17c72ac9065abd00057c0a4499eb775e35fb55026
SHA512 fa6b96809ff3da602ac93b8053d3cfdc39e2b2a44992ef4ae8414a5623941ea491624c04b50ce3e1615a8f91b8e8ace8ef5ea8132e271417676880fb3b268dca

/storage/emulated/0/snda-wpayandroid-data.db

MD5 0176813e4fe84d82cbbebe274672e774
SHA1 ba75fc10fb2a482a02aec6c06976a96722a36987
SHA256 71b3894b48f11b1c53c1149b0d5df66bd350f7e3ac396b9e9827d67da1a04d2e
SHA512 d5dc63073d94ffdecd3f440ca6af02fe350f7eb0955456eb6a8b341c03233f08cece5c42b069e891a07150b1b2e5b06bee5fbfb0f23cfb263ba31ccbd7aac2ab

/storage/emulated/0/snda-wpayandroid-data.db-wal

MD5 8a7400d6a5f28def954c48503098f9b9
SHA1 e2fa72658c1e8bbe31694af5f2ff437cf002b99a
SHA256 1973d1a49d0bfb2fe9f658e19221a21ddc63c090d36d50412fd93e7f4afea091
SHA512 180f3b2e5efd294ac3b5663184646361610f17aa517985c4597c0935a427691a6e221720ccbccdcf0effca82c51f892d239bbbcd06ba80dc5ed2c908d9d78fc1

/storage/emulated/0/snda-wpayandroid-data.db

MD5 94f67ad06cdaaac1455fe557c8167145
SHA1 596f600f3f44411456a9fbb7e2929fc2be9c29f1
SHA256 86a28d48d4a9569df59c96b2f0539ddc488d835bbf7c0370ec70364a103f47cc
SHA512 dc0b3d2a865cb886f011bf239937cfffe055d69476df57f5811af5c7ca7265ccef9c10502a880cfaa7863707fb5d986d9f1c799b42d1940c9da9a163171db15f

/storage/emulated/0/snda-wpayandroid-data.db-wal

MD5 bf67bbe7b683ca6203d538b0aeaa6e20
SHA1 28819b107c9f457373d95a0a7e2a8cf56c3912f3
SHA256 fa61f1b430065121646feffeb34d2f03bca87776db02ba361d0988dacf9f6dc6
SHA512 8fd49bc29ffef84f19360998a6d43a251bd6c66cd5fd4792a3272b7db23da667035d3e8448457fb3e364df83994d3cd3965814a9572b35b70540d94e4acee1c7

/storage/emulated/0/snda-wpayandroid-data.db

MD5 a1b37d81509fe1f658799bb167ee22be
SHA1 d7ae81aef5659fefca0ef295d7a123c01c553596
SHA256 3fd0ca796c59e7195e85ce40da4f10646dd3a5fd65dc70dcb92624968932c2bd
SHA512 a652bca294f21c7448d0338d35884acb0c7ea7ae46dfb67c448e86e0193aaa58ed248f847b8d1d393d2786dd593c3372a8a0606147788e56b749f3b134c84899

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 06:45

Reported

2024-06-13 06:48

Platform

android-x64-20240611.1-en

Max time kernel

157s

Max time network

182s

Command Line

com.lantern.trafdete

Signatures

Queries the phone number (MSISDN for GSM devices)

discovery

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.lantern.trafdete

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 stat.sdo.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
CN 121.4.186.15:80 stat.sdo.com tcp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 woa.sdo.com udp
CN 118.25.249.121:80 woa.sdo.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 172.217.169.46:443 tcp
CN 175.24.154.131:80 woa.sdo.com tcp
GB 172.217.16.226:443 tcp
GB 142.250.178.14:443 android.apis.google.com tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
CN 212.129.163.60:80 woa.sdo.com tcp
CN 212.129.163.180:80 woa.sdo.com tcp
CN 118.25.249.103:80 woa.sdo.com tcp
US 1.1.1.1:53 woa.sdo.com udp
CN 175.24.154.131:80 woa.sdo.com tcp

Files

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 18e9a39d7cde44dc10c757b6cc230eeb
SHA1 7b6df3a7793f60a0e3280f31f57c226c48d76f5f
SHA256 8433a2c739c35dc0bb66a113587e99fa54d41f3c26878d6ff230b62c1434b31b
SHA512 1d32747bf5f99b71fa5d156121b09878852200711044639cf2ae04ae5883faf4599e50ef6f1c271cc24a09d15ba8b6475da24b8edd98a78daf47c45f646e2d5c

/data/data/com.lantern.trafdete/databases/sdk_stat.db

MD5 89d57c82f3a9eafd467c5353a84dc262
SHA1 a6948eaf5d6f5ea00ce8e64a82c2020c79b46336
SHA256 6b3ceacf1a4d17bf983b2e677e87ee25b32bbbfefa72b2843d477b9cb7dfe0d7
SHA512 5145515b63c9c2fce899a3baea9bc974f482cdff0592d9e2ad446747f1756158349bf94a0cb798d9178d072c882d0a6ed29d303b9a70d948a161dd35d3fe81b3

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 052546007b1dead4b2202a2c7dc35a7b
SHA1 a42e478d01e749399044094a2ea125841379ed9b
SHA256 5e8c244fccfc40bf7ccfa5b6954d0bc7c65ca45b6034d82b3ba49bfcd5015053
SHA512 f530bc2e9ee7792db763bb0b9ade232ff1a74830370a40e91c6c8daded6af704a81a87eb7a6932ae8263da5b5dee3e08ca2ed7623c9dec361c020edb372c7534

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 cb22839b39529476b11ec89ab19d5df4
SHA1 37864aaf81fa2cf788993635920cd8a6a1b8a575
SHA256 46a6c68d1f40c538eb61c68c79b747bb594f1a9862026445bbb8e737998b6149
SHA512 6f57ac954618cb9b21e2982769b53e0b05373da9547663976ba8047af57741ebb79953a56c71df97b7e343602d208340d52c550f01ee2d0f85c2237240361e5f

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 9f2487a2a66a2f7419a65a1be4f6c2ed
SHA1 1f15237d5f1573bdfd7b3aee9181c876e6f4ec3c
SHA256 5ad8190b399beeed6b6380e80b267c8f5ec16949af36a3e21e7e830be1069f94
SHA512 ea934daf028f5fca3a5d9ab1977815442eb10860d4c64fb477fccdd168ff607e063b2bd80325882a3f2619e8a07737231f8db0277856342f9d0a2c8923959098

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db-journal

MD5 e8f94821d29e3af08ab1b8c73c5ec7c4
SHA1 7be690ce309e1b468270a43cf15f682e783fdb58
SHA256 71f49248d66549762788be6ad135ecb26151f554cb0fcd5b5d31c072f7b7d716
SHA512 1ef0b0e69c90aa760b171d43cad5b314a610b8e611e6a5bd29fff75d5987966f7ecf81922ba52ac1af71522f2b6028cdbc0f2a95c931e05976d8a1842bc07d8f

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db

MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

/data/data/com.lantern.trafdete/files/snda-wpayandroid-data.db-journal

MD5 baac9ac3d0a0671825f424d8eee4afa9
SHA1 54bcc4e5a450bd4f1e2c4aafe5948186f0a014eb
SHA256 834706ea448b69e1e644c90361bdc46319e052cc643763c00e16362130190b45
SHA512 68fe5bc549657677ef4912d87153b6a38898cae2708aa54b0aacfc98a066e4053dbb719144de7ecebcca9da770649fcae61c0faacc4ffe96fbeb402f7a5133ce

/data/data/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 bcc2b44ba61c46b6e7f9870a5e8eac42
SHA1 01475cf9efb5d1612c55eb6950a4b6e55bfbdc3d
SHA256 2f7503845dad4bb81d7f748096a6de6175e32b2476d0faaab83b580db2c1f0de
SHA512 19d5f1feda4a4c159dc46114384d7a5090e8e042b2d95d4180877152eb4d2aae77121aad07fc9d3b28341d67b6a267deea2ff458e3f0f663aca478702285e9e4

/storage/emulated/0/snda-wpayandroid-data.db-journal

MD5 27a8d245e8e1744b2f6a3e466537fa59
SHA1 ce8e5ee24f1bcf4fd4e7f0adc5d1dfb372837bcd
SHA256 0e4a75ca186b205f5539800a28ffa56fcc67874563d7a7179a2a8b6858f764f6
SHA512 530e8f7900d8dfe5003e8865cca697e4dd156b578bcc13985255bfb5ff5c25d2bdab191a59919e5794ddcab0030b5ff04f69b9116f51ab81eac69d4b9e7fc96e

/storage/emulated/0/snda-wpayandroid-data.db-journal

MD5 de5e86769f6168875448127015cbf2db
SHA1 af9fa7137f2f1b74750ee2029b32e43651c9b080
SHA256 1286d6682280c7a809e2ecf13c0fa2524a9570e329a5ed610c673c837e8824f8
SHA512 cdd13efdd5b0ce124424bb7768eee187f82d5ce3c7f910a094c4f465d9b9c5868c48bc7c68ffd754c55d0f57f2a2d9253357c288940a4f7ce46c1bf76564f2d9

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 06:45

Reported

2024-06-13 06:48

Platform

android-x64-arm64-20240611.1-en

Max time kernel

156s

Max time network

181s

Command Line

com.lantern.trafdete

Signatures

Queries the phone number (MSISDN for GSM devices)

discovery

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.lantern.trafdete

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 stat.sdo.com udp
US 1.1.1.1:53 woa.sdo.com udp
CN 121.4.186.15:80 stat.sdo.com tcp
CN 175.24.154.131:80 woa.sdo.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.187.206:443 www.youtube.com udp
GB 142.250.187.206:443 www.youtube.com tcp
CN 212.129.163.60:80 woa.sdo.com tcp
GB 142.250.178.4:443 tcp
GB 142.250.178.4:443 tcp
CN 212.129.163.180:80 woa.sdo.com tcp
CN 118.25.249.103:80 woa.sdo.com tcp
CN 118.25.249.121:80 woa.sdo.com tcp
US 1.1.1.1:53 woa.sdo.com udp
CN 118.25.249.103:80 woa.sdo.com tcp

Files

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 6159312f37528729a612999ae833792f
SHA1 d0742146d9088bcee2dc70548003c7e2661f8f8e
SHA256 31b1dabfc641d380320fc528030bc7f30f02e53d5f3abb04aa5a872ccca81679
SHA512 d7c6c579009f23cd79e06c78298a851fd199fdef6068edf770e6163bbfd208a83f16b4c321cda0e5fe0f6a0045bb3a77becda8bde0a9553aacb465c63fb2f62b

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db

MD5 1e1aa3b43c86680a7e4c887ad446b7fc
SHA1 dff3bd511be73d9572499abd468dc1821ae142ab
SHA256 8d05d1704ba97bacc7860eecdfc8aab817681fef80aed580180ce9fb8a4c0e23
SHA512 21a171209f246f5adf5f346cb83f527ea64b212204de931e106b7b5af61694609037eb3637bda065742e5d433c6385c5e493bbbc28fd4b486656cb87b7ad528d

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 96d59d0e5dceecf4b64b84a1e842c28c
SHA1 5bece7abd8d86dfad62df5a021357675d1edafef
SHA256 cc787b6584d049ca566974c56e14c546ab7ff245371d53d766a934e54d919044
SHA512 99454cf1b801382e8792930822791bd7fd3d16a233ab483072c18f08ed5659392537ce59c39c6c3aeea8bf631f8f29d71dc7318e39f97723cde80d9878ebf3eb

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 dbb1cb0961b201aea90b2bdcd9ccd35c
SHA1 45000452b6c384df234f92fad739ef71f74a7fe9
SHA256 1f1ba78873560e8cdcb50b0263053ad910c14e8c03a8b60608aa305477d1de3e
SHA512 42953e2d4281d161a82bd789ae3fa3971a00712c72ac9486ac8eacf37207024a6733f20741cf0898ee794231a8a38a1272535bb354ed273d5c5755e4179ffc20

/data/user/0/com.lantern.trafdete/files/snda-wpayandroid-data.db-journal

MD5 aaebb4e39e7c3d0593b2efe5d3f87152
SHA1 0294269cfa89b1e54b057cd998a94724f72b8111
SHA256 341db1ac9f46df0b574c26675336bc49e5559c5e27781ac515874f4078911389
SHA512 303956d914e0583a82973c27269b1d2a076deee970e88f8eb376db8c09df4054e7d6bab41c60da2a91fc7db507d3979ee820173e2a92db40f4bdb7686ab02145

/data/user/0/com.lantern.trafdete/files/snda-wpayandroid-data.db

MD5 171aedf968e17a2744d2585715606cb9
SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

/data/user/0/com.lantern.trafdete/files/snda-wpayandroid-data.db-journal

MD5 f455ba9b02f5e0387903a480c87d0130
SHA1 21f38c7554a41056ef11290f6006ee7d24fded8a
SHA256 9f68cdf91a51a7ca59b2ebde5414203430119f4490ee3b6fa7c0b2352d4faf82
SHA512 4a53b729531cf329a7181474c368db6198ae1c94873bcda79d330dfbba06fe88dcd0b07fbf43357ea6232274b951077581684059ae848d8e555fb3caa47e0a6b

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 1fb2973aa61981b84f6e70e91cc4b422
SHA1 5cef69f7d5ec15d2e12233535a0ce6365a06dc4d
SHA256 220a637eaf7fdfdbe0cd7520877b2cf8226158c6fe481298fa1658aa5fbb182e
SHA512 bfe64939a7a7d37f87b204deea43011fbe30182b548fa539a4cede5c7dbe7328198f9d705de84dd6258304d028632e13a54b9180f102b1ef392b5737c5eefab8

/data/user/0/com.lantern.trafdete/databases/sdk_stat.db-journal

MD5 cfa10844bf0466e9e6a163313a6204fd
SHA1 9cc2b2303fdf5bb969636012da98ef137cfe8e71
SHA256 08cd0e058695e64060df1c08fecbc01a37e23ea744067655c57a208e15419c06
SHA512 6a4a61dc9a60242828e957c75354e584d0bd381570fc27dbff6f179e0f41bac6253287c1327ae57bc162e343f8612dbf02c03f27dafe932d05da6df8d00f01c1

/storage/emulated/0/snda-wpayandroid-data.db-journal

MD5 3f49fcdc1fab1f3e2ebce5dcda09ae38
SHA1 b83c0a5e47de639539081536bd55f19c8aa16cd8
SHA256 5c7395a46a1d909792310186789c2a832624cde54294e081c1084f81a07e0483
SHA512 9515639cf2bfaebc218368fa74764b333f62e289fbd577eaa85c3b9aaaf05cf03b4d1104d3417827f9e2a0be62e0bcce3313fc27c3338c0e0f9cb7bf93f6c1d9

/storage/emulated/0/snda-wpayandroid-data.db-journal

MD5 0133f3c185feca1d0ac8365e39df3c46
SHA1 e1f08d9375afbcd56d7273670d8e121d6ec6d83f
SHA256 8fb0e4817289d7f41605deeb448acac2db50e0e82b2614fabf298e5725d43bb1
SHA512 ef7f71e664faf2a2593dd825e40b089f16a7cfc82f8b06d9565126869034f34b6896968ff06428b3197572dc4b80a5464b640afa7fe0bd84425fc510b0c5670a