Malware Analysis Report

2024-10-16 05:20

Sample ID 240709-akktrsyeqh
Target secure-vpn-proxy-master-lite-1-3-3-1.apk
SHA256 a6145c0d4b786def1ac5aac78bf4e93cf7cfca6981f7d849a4902be812630c36
Tags
collection credential_access discovery evasion execution impact persistence spynote
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a6145c0d4b786def1ac5aac78bf4e93cf7cfca6981f7d849a4902be812630c36

Threat Level: Known bad

The file secure-vpn-proxy-master-lite-1-3-3-1.apk was found to be: Known bad.

Malicious Activity Summary

collection credential_access discovery evasion execution impact persistence spynote

Spynote family

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Makes use of the framework's Accessibility service

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Reads information about phone network operator.

Looks up external IP address via web service

Requests dangerous framework permissions

Makes use of the framework's foreground persistence service

Queries information about active data network

Acquires the wake lock

Queries the mobile country code (MCC)

Declares services with permission to bind to the system

Listens for changes in the sensor environment (might be used to detect emulation)

Checks the presence of a debugger

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-09 00:16

Signatures

Spynote family

spynote

Declares services with permission to bind to the system

Description Indicator Process Target
Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE N/A N/A
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to read the user's call log. android.permission.READ_CALL_LOG N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-09 00:16

Reported

2024-07-09 00:16

Platform

android-x64-20240624-en

Max time network

5s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-09 00:16

Reported

2024-07-09 00:19

Platform

android-x64-arm64-20240624-en

Max time kernel

179s

Max time network

189s

Command Line

free.vpn.unblock.fast.proxy.vpn.master.pro.lite

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/cache/1582435991586.jar N/A N/A
N/A [anon:dalvik-classes.dex extracted in memory from /data/user_de/0/com.google.android.gms/app_chimera/m/00000000/AdsDynamite.apk] N/A N/A

Makes use of the framework's Accessibility service

collection evasion credential_access
Description Indicator Process Target
Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

free.vpn.unblock.fast.proxy.vpn.master.pro.lite

free.vpn.unblock.fast.proxy.vpn.master.pro.lite:Metrica

Network

Country Destination Domain Proto
GB 142.250.187.238:443 tcp
GB 142.250.187.238:443 tcp
GB 142.250.187.238:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 yandex.ru udp
US 1.1.1.1:53 mobile.yandexadexchange.net udp
RU 5.255.255.77:80 yandex.ru tcp
RU 213.180.193.198:80 mobile.yandexadexchange.net tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
RU 213.180.193.198:443 mobile.yandexadexchange.net tcp
US 1.1.1.1:53 serveronlineopenvpnpro254-63936.portmap.host udp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
GB 142.250.180.3:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 ip-api.com udp
US 208.95.112.1:80 ip-api.com tcp
NL 198.211.122.23:443 tcp
SG 178.128.84.1:443 tcp
DE 46.101.221.238:443 tcp
US 1.1.1.1:53 struct.fastputon.com udp
US 1.1.1.1:53 d26luj26sdukyj.cloudfront.net udp
GB 143.110.166.114:443 tcp
US 1.1.1.1:53 d31cbt5x9vkoz1.cloudfront.net udp
US 1.1.1.1:53 bestow.flashput.com udp
US 172.67.180.131:443 struct.fastputon.com tcp
GB 99.86.249.164:443 d26luj26sdukyj.cloudfront.net tcp
US 172.67.177.249:443 bestow.flashput.com tcp
GB 108.138.225.156:443 d31cbt5x9vkoz1.cloudfront.net tcp
US 1.1.1.1:53 client.acdtop.com udp
US 1.1.1.1:53 152.134.57.52.in-addr.arpa udp
US 1.1.1.1:53 ec2-52-57-134-152.eu-central-1.compute.amazonaws.com udp
US 1.1.1.1:53 138.138.125.3.in-addr.arpa udp
US 1.1.1.1:53 ec2-3-125-138-138.eu-central-1.compute.amazonaws.com udp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 firebaseremoteconfig.googleapis.com udp
GB 142.250.187.234:443 firebaseremoteconfig.googleapis.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 142.250.187.234:443 firebaseremoteconfig.googleapis.com tcp
GB 142.250.187.234:443 firebaseremoteconfig.googleapis.com tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
US 1.1.1.1:53 tpc.googlesyndication.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
US 1.1.1.1:53 www.googletagservices.com udp
US 1.1.1.1:53 api.evtpub.com udp
DE 3.125.138.138:443 api.evtpub.com tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.169.10:443 firebaseremoteconfig.googleapis.com tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp
DE 193.161.193.99:63936 serveronlineopenvpnpro254-63936.portmap.host tcp

Files

/system_ext/framework/androidx.window.sidecar.jar

MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 86e55b459ec4ac1193155f7dc684ea01
SHA1 37e0fe35ed7bd45d8436c411e4d9e793316d32eb
SHA256 5cfa4dceb625a8b1fabeb4f018ab552b7bd1dd66700e73038a13bafbba26be3b
SHA512 987170084cfdb3c026cfe4d316e8faccf5c661e955d1a1f5c9758e99e8219b72806d56dc027af1c4b305ce9965b7787c12a4ee2fa1950ba94cdf95cb2fa1741a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/androidx.work.workdb-journal

MD5 71b9d4bb574cb9d7eef480f7226d3c15
SHA1 c347fde2ec7ca4a66737a10f9f9cb61e8d7f3111
SHA256 24c60aa9df80b084739062e923e6ceb6afe0eef563bfb122ac726d813afaff39
SHA512 93f255f16fdf2255ed80cec8dfe582760b388e3f2ef0dc76ccd00063619f5cd5775cf0fbef3a0b9d0d60f3b8fcaba80e55a621952e135db34b6b26542218ef17

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/androidx.work.workdb

MD5 5dd42787e5504883c456e94e34a80767
SHA1 b335f1c0ee9775266df5c6da9877e1160e11a867
SHA256 763ec18bec25656ae5da3e0358c19c1d587d5d4d9083b08964b813220ac49c42
SHA512 0013c159783d9a19dab867da1f463d46095a347dd75511e7d15566f83b1fc5cb2cf9356e16baaed6f79be576678dfdcb941a7187ac059c0735fdc47fe6a1286e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db

MD5 bea4e3d968b0099ef1bd20d425f10aad
SHA1 0332f8c9eecbc696c98eb77804fc2c3151fdba9e
SHA256 e94e6ee2c5cefa5e1aaed8130fbd1eabccf3f3cdc1bc78e9bfcf43bac739a1f9
SHA512 bbcfb2510dcde49a0587bc0b761286044e326de46cd7235254959c936e4a4d03da6748e2aa43ea4ebb6a7b58bf536e320d32fb006bb286738b7f128d2fcbc61d

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 b6ee01290b1aea6e9293e354e198ae2d
SHA1 29fb6b738c432e1c89b4d6d0d2daeb29ab7e51c6
SHA256 e7bab5d58dd6ba3e131c2b892c6733aa33023824aae8007008cf048ff5cf2f4c
SHA512 3a8fd94daf145b38318ec8a721a07b1ea5ae551b395dcc55a290efb61a5ee20a7b198df2150d0a8a49714d12d3e9037320f662fcd6c3770b5e975fb86e986731

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/androidx.work.workdb-wal

MD5 7d292509a602d93ba4bf2de61f43d5a7
SHA1 cc3f968dba8b83c5a0f0c57e9c81fc83e98e75f8
SHA256 b897cf078ac246c422e5df623c0e291d645a16fba09a2449739156522b0c1f1d
SHA512 16d3ac406a8a9afbf1667b9a8f2a81bc90316b189523c4a209b135ab33d18bc55df58acf7ca6d5813f2e7167712d58ad86f033aae65b8c8e7bda4793a08d7918

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 8f0235ab1fb53bf331582bdced85ae31
SHA1 4c3712631d81f0df776aaa54eba7c9809e110484
SHA256 366a7d2867dc532f7f59cd97713ef8dfed9cf405df2d0258dbedf608e23a8297
SHA512 d37c577b8bcbe15f817ec603ceb4df16554a06c337544e3994bd07ffddd441b8e3d040e2b8c98b8ece33f6f0cf1d7c3652fcaebe8ee25ea49c87b50f1bc5464f

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/uuid.dat

MD5 a647d111a1b63492704500d2ded3e987
SHA1 d98138d07092e7ed9dcd7a472e159527c1b5ea2e
SHA256 726358450fcf0ea78647d6212b939950907b6c60fab55131e1694ef01fbcd630
SHA512 3060e60b5f47b628ffe5ea7f4d9292a08c100ed03082b5b9db97d62aeb1be5a98a76f356d8e18c01d83a90bd28cdedfdc994c699feaf154e23beb63575bbe360

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 26bb92dfe6ebc83b56d46667c8b77cb1
SHA1 15d3057c1bbddfaeed59b568f2b978bfc0cddaf0
SHA256 691424712d1546138c1ab0b71f9623272473d6e5870e9f7fe3721b008a85c8aa
SHA512 5c3e0ee509ed76486eaefe6f984e55ee8fc33f6a3f97eb7468c6db9b9223c3c51b1a030c3c1bafc61019fd7e5b55e85600c7771494870182e88c7cdb992d072a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db

MD5 209cc9f31ad579c63cfc5c7879c79726
SHA1 64ef11a4745c89a12ba7cb918bad3f54d2ebad81
SHA256 918bfe382e827bfc42ab65128a21c1994863cd9a4612d0f90ba5abb0e4443629
SHA512 9789af94904a93b4243ad168e5055f6262358606e5b1ca03b273d477fc8426ae13f23764fef475dbe92fb6868a58c7e89114c012f57f7a502269d6dc67bd617a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 74fd525bf75f9a0baf873cd0a237b6c4
SHA1 cebab4b7af93887ab6555c4bc61a4ed61e296bd4
SHA256 7de04b6b30fda640c8d7e700c0a09d900d720b2d80c1f7fda70f3d90121b0b58
SHA512 2842c06119bbe6d5916f400cf1f31b0b4f049d54522ffa1bb6ddd61828f446bae102921a3cbc738f06a34aeaec2e0e8729dc02d33130b2bac6da8d9de8f624d6

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/androidx.work.workdb-wal

MD5 d8a296ed2b07f5e58184b233f4cd23a1
SHA1 08ca41231a0b67827c53954a4c59c9832ef3feac
SHA256 5334310ba0aa157177fcad665f7e076910e1e1e3d136d69ff8a9f2eb97eb9e77
SHA512 37f7c2ecd91bd093752125d167e7bf456d75084dac4f7ae1980d1c1785e1263a5f7f2d00c3b53d567be1d7dfa03bab975e0eaf1df3ee35e78a4649296d6fd45a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_data.db

MD5 7330a75c6c229edbb5bff97004216d41
SHA1 0b9ec9869db0cb5503ed5198783e9a94f72e1775
SHA256 0da2f2d2ef7f7c501d261e6adb9c98a72ccc7d2588192434342a40a449988a0d
SHA512 7a06d9054b0fefe60a4b71d9f5e9b7f153d3f7a739ea76dcccba955633e004177314efac55aeb64b855482b80d5a87bb4daaac6fdc204307ae9de8854e2f5fc7

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db

MD5 c9a74c9afdbbf060bf162fed5cada628
SHA1 2de0de2cbc0f3f981a402e8fd3be7506de62b0eb
SHA256 4bdf0cb9a341051ab4b0a63bad2963ccce8a595d9f547e56109ccadb11145637
SHA512 f615ca7efef0b5e8c2e7e13b608137f9c9dd08473e20b46c81cb5b9dcf02d2fe2d60fc96cf04d2ce673ce009de21b0ab59e81535593a27ddb8b07acc765edb04

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db

MD5 25284566bc55294556295ea7d3cb58db
SHA1 28cd7ec548c3c0232514bbfd01122ec9efaad086
SHA256 51b68e0d6b3dc8ecb8ea24493c570723f1aeb37090df373497d44abf66573952
SHA512 ee3e25f4ae34d3411c6685c52ef3553b5d1eb7e52f895b3ead87e8b3739f80e7f3593939411697e73f64da695f1b40a9dd96803a164ed7d5fa808ecb08e10697

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_client_data.db-journal

MD5 74632d64a2101a3b15b43dc26eb8fb8c
SHA1 e89cd1745bfb5d84c881c2bd2b6812f6abb4e7e4
SHA256 ef75405ce277bf7d1fcd1f09893b9b8604c7a477ff39346810261eab54864c1f
SHA512 59c44ebd318127e80399ea8f73ae7edd55a69144a8c3ca5bcb07a81db0165f439eee17e5d265ae7c9b48659ef9fd7b5e014f69cc43a47eaca200d66149ff9224

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital.dat

MD5 9f44fe90e6bebdcde277b86ba4404deb
SHA1 aaff46356a9d54138e51468011d9c96f4c4b8815
SHA256 8ca628104d4cb34a2ed7843d981917146250f83a8be79213c5db1c4dffe6a542
SHA512 159476f8f2bce88f3dd48e01284210faf142ce5886ab3ec81c0f34c0c72014da8fcfa116d9b394b8e0a011f1d2d25a2d1268c579d944ee24e8fec7f04bd3c9b8

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital.dat

MD5 42b672c566d3188654274808a31b06dc
SHA1 9a0e0f8a05b89129503a4acff1ee82359ce7658a
SHA256 566647110cfde7368d02613e90f05df337efa0f2b2b198047c38d0ecf52bdb85
SHA512 d334d82a846b39e20cb866cab5876027416e95057bca74ac0b9cb7c049087f05970ceb5e148ac2f239ce2e5d444bb04665dc9d9d0c5bb236bcb509c2c0b752ce

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_data.db-journal

MD5 b874c2b6463d67653a6ed4b781719e79
SHA1 57ce51c1162a2181dd40b4cb54a53175eb38c717
SHA256 140027b97abd1cd8faaa85e2fe0d3b4be89ad95bc37043131d3bec1204d9dc52
SHA512 8c0e1a05a5cb9ccda1c59b884ca192b55ff2431ea4884b33b5651ad08e3609b44bc8df99bca5988517230dd85db9e83a0f989721cc836033dad727945baf9d6c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 3495fd89cadaeb8a942b123a1d4afcf8
SHA1 41ec5e47760e8ce087192ec70a4a62feb333fe64
SHA256 5f7fc0cf2aecee0f10464b00b6f5bda2f6b1ba08ab41f8eecdd5ce83721a4e08
SHA512 af153efc93ca67677a33dd8999e0903dc875d196b9b4735eaea73a80c965f2611b42c757c80d006109abb675012b94b170c8d637376d6958d9de489c7012a2f9

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 4e0d2cbbff311f7af447979465c2501e
SHA1 edc68e219bc1a5f20b44f453d5806d7e6c0eb586
SHA256 3552af6e329341ab6511cb4306c31239ddb27aaee9003d6625f86a4329742524
SHA512 b9bf27c6b385b8cf44fcd37a26c1d768ce41e2c5cdf6b3930141ba7705878ab03b70c3478297ea2d63c374d8a376c2c43a075375d137277849f4557436bb77ec

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_data.db-journal

MD5 91311730748ef7be3ba1e1f92cdbe699
SHA1 0c479419d7b09c983d7bec8ff1144794e4271c07
SHA256 b261b01987a72b17aac92460a2fcbc4672fb3f2026a05d807f5af58f182e013a
SHA512 24a9245cfb8076408d833115f568bf846c904777ecd1750b64b3f05f4993887d1a47455ddb3268fbd36cf540762f0eb07fdbb7a00c1dbc8e45a96df908c36e11

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/metrica_data.db-journal

MD5 5996a664a6164617c1305ec1976ae618
SHA1 ab3d82a7b51744b09a33ff935c5479cc89297371
SHA256 3082503760987356b064ae40ee1fc76c78cc75db6ee7df0a8bf52f0f552f7e83
SHA512 8e04694e7b24791fb2c9d6abb58a174478fb2c24f553ec57bba1a6434b4b76eaf93eaa305738c4a871a71d66c48e9ed586630887c7e7d5d929c2d5168a2bf6a6

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 265533df6fda07f35dfd41a191eb4da4
SHA1 6ca1538411d76500a9cfbdc5902f38f08ea2e0f7
SHA256 5cfc03480db1e76b443777af81561be972f4318b52ef983e9bfb73dee808cd35
SHA512 9da70306cd7f914151e04748604e2fcee62cfc7922e74cb261ce6c9d9041fc5c13394cabfe81eeef7540fab77e420d5d97487cf2c429f213455c4af55fe86a88

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 8f4ba2a13ff662468cb3a884386174ed
SHA1 7ed79e6904d483d0acfa7002a8cd5c011b3325b3
SHA256 c2523d4992230a4ff12151163d79e50e90f64bfa022c363363575a6081ea6b9b
SHA512 c9a810d8f2018d72a356dab193b691461ef0f0cb21e78df5bc1b5c4c670809ed25009e1606c0ae41fad084a25df78b6d2fd514088f5129c9217f000516e8cc61

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 4d1bdbe080b9a667d2e2ce79f6752134
SHA1 cf9a70406be317e582d3e23b73fc07dff1f9cde8
SHA256 6547a139b08ab245285af022d1b08bde24a43bbe0e541e26cef8f7bf463826bf
SHA512 aa3d5401ed02d094c273d25332127847575156b0dc072cc3a9dbb8773941e2aa9616e6cb917a547160dbd67f852f7924b93d7aa23e772361326cd76645725647

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 d85061fe4dec8e68dfd508d45c45e7b8
SHA1 810f832dbab8aaf54cbbac56dabac17884d33354
SHA256 75366c09442839df430125438529610514eb50b18e2ee5487fd8d1b9a646347f
SHA512 a8ab956cd1aa4ba461ad8b133aba969a34ad12888fdc5b06c3ac70570fc1685af0de5342f54b18f8f8d0b9dd7fbd72ed32e5296e5c5bdc881c18cf235513e54e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 f6ec4844d1e85c8d86d6bd9f5c4da17d
SHA1 0270a10aa365374ef432d62350bd90e5fd4b6e9d
SHA256 99171ede1e8a4670e74b73543e5ea347994a290d11df30935f9086c96538130f
SHA512 344c53380843ff70b83cb9c2275cc5e132bb35c59d1c03b5d555f2cc1fa139257863aa5e5527a4be5933543cd934f8940d35aaf6a55aa5306a1f881f517e7ccd

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

MD5 f2d54dd5d7e1702e67e6c8c43ed94d99
SHA1 f2244194de93a5088e7dfc9774addb31242172a7
SHA256 3927845b3e72c284670191922ae47e92c7635ce576c500ad8f488b1b1bb3ce82
SHA512 e20cc7839018647144d2b08a512acf8f94d0970ce945de294eeaa3307be3352ce8ace24adb5ee4ca9c669ac96f8ca84bb31c8e46fcfeebfe98a161bd7040078c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital.dat

MD5 02fb7983e184ec36589fec385bac480f
SHA1 50187b8a01b229a763a33764894f1cf949739e9a
SHA256 fe0c74e603bae194cf27a837736b411a92481c8c17897b6a1887456577d449f9
SHA512 83a43b888310cfed24914cd7ac8dfd440a0e3cc6b67d3717892ddf8d75e284f97a66afb761b9a87b71d932a9988b86f4e1614423527929e67fc386115ec2c16b

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 68f0b73e3b6d7b9db591c1d7779bf210
SHA1 8a938d4d5c3a3a40a8f7e61b5148878ed866f354
SHA256 a12799e970bc86c3266ca5e73e48bc650fbc29827f9e32f127da44b1acd06c5b
SHA512 9f901fca08878db3c8db18f58d12ef986698bbea3ed8fda7311b17ba117230429c8273f0ab1268a05008b2f271ced8587b48d808c350bdb347011ef42358561b

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93

MD5 3c4f11db6cc1ec2fc1ef211b88298a39
SHA1 082dc590e9ffaafe8c241624abe258d910038bd4
SHA256 4a7945b09a8dab1e879130741e7591442f2523794c187b7a3d0a1ebf2fcf865b
SHA512 12bf87b6402544e46bb4f8a1557554fcc3d47b70bb52fbe128ffe1d8f850c12dd246ba165f40c9d8d0d198108f785027ac2ffdd874f641fc2f395c63e833a0a1

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 a495b1f2574210667b51ef304208a407
SHA1 dd7d36783916219ebbb9c51e5d08295076e3077c
SHA256 16e234ab563122fff6038f6f289af12f9f6d1195857a902a9392c9fcee34073f
SHA512 56185baf82a1e16c3f270fe4b1d1e73d64a12fd71f40fc4741ce370f531909d5b0e12bc1d9c626f8a7827c7061c018117e946295ab1f8bec8c53abc643e532ac

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 316aedb2ec1e82096606b45c21e01ef9
SHA1 201f6bab8f3b14a088e80294c29bc731b222ac24
SHA256 67958f476125858a783c52372edf034f514d31c5c91982762da0123fe5de32cf
SHA512 1926fffa6041a1eed4773457ddc1ddc382cebe67fabfefb8fd84aaaafeffb023f8f1d64dd34eb0367be115a71be12b1bc7791f0553516b289c41a08d5991b780

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital.dat

MD5 d8afdeca0789595da6f33aad997f3f0f
SHA1 25a779d3e61e6a7ed9c8dd5ac8baafe41152b5f0
SHA256 5dfee368650c281d7bcee9155b151f73f3fc3214070941d979382588832b8746
SHA512 8640cc81ad354ea63a33cff9f5fb2a99bd614f8cbcd2269bbff1abd5303f3199f07e4347931637dfeb245200c0eaaa1e3127576c5a857c39b71c5ea7100f8dd3

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 853f16d365bedea960c54ac640e0273f
SHA1 a73d3bb4fb734328e4b7d594acf3ee4636a61c58
SHA256 b4c5eeafab290bef76b62092c3e74f7d988bcdccc97e207f665fb25474bff06b
SHA512 dadc1f61977659b688b2b6e4648a5596222ea609666240db7771632569521f6fccbbf85ed766c5256911058148bcc61b570ed4baf8822ca1a1c02e18a61f830e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 e98c0c3c58e8ffa74a1ebc8720341b48
SHA1 340ea3a1783a57ddc3d266cb0463905673ace8bb
SHA256 d897cf380a852b8a91d97ae41f3bb0403fd663923d61076c5260950d164dc2d3
SHA512 f3bca99df70f0893e0df8f9f2b693165bb0fb1e577930a883cdaee61a8da886e128209eff811497d789606d606baf28144e339371879580ddb4216bb0fc6678c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 430ddedc04318774d0f5e85240c8e882
SHA1 6dbc5e56251da48baa22996869770ce2372dad6b
SHA256 1501a61656eedd2defbea59dc64a1caf83bd441482873574c77a2cf71362283a
SHA512 8b454d9ca462ece0f38d976f9c20952738d0ee605c9b449ec2baf917364e4e3dc3ef521c9f266e8135dfffdc6786286c915d5a89eb0d4c1d6c5d73035bf046f8

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 84875b388bc13af1befc6c387efc5177
SHA1 95a1d7c45f69c54d36fc7ad061d811da80e12d7c
SHA256 6344c3adf7544dd3a07f21a053881c4d493a2879f43e45fa4b12a9ac927dada6
SHA512 b8cdb2564534e0e1d75f1dc2fbf3032607f5fd05323e61859c1babb334e60bbd4f0349446fd5007dee1ba6c632f16a06df842ccacdc330329cf4c0b89e508f2e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/db_metrica_free.vpn.unblock.fast.proxy.vpn.master.pro.lite_478cb909-6ad1-4e12-84cc-b3629a789f93-journal

MD5 77a1665c79cc76ef635ef7069d52d5a9
SHA1 82bd8413c6dc53d105f4305192cd938012c055da
SHA256 9dba8c8e8d8fcf571ebce28a0d19ffe037bbe1ad794cf25edcbbf2c42364210e
SHA512 afbb97b356c300c7083a70cc1af4069d391db38c2aaac1d9308a36b0ed97d91fdec10ab9493f3a254812913e08e984153d8ed8b704269bce2f07768e990df566

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 85cbdd024440e8c3046b6565ec3ce74b
SHA1 23963a067b4dce259ccb35ff34e957578a37b6f9
SHA256 d6ae96d77006d7ab90a8ef1eeacc3c26454e970f4184bf895683bc2755996e1c
SHA512 3b8c2c79348590cb3546fc0fe6226136c06c411f60149f2994d035c2dc2fc42f83f6e0a77428b6bbb4caa66f183e303daf242cf8a23be2f5384d2250c405e440

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 ace7e7c0c13482697589f1ce21256f86
SHA1 46a5d8a5447071a988c2289c29e63626132c18b5
SHA256 a818b6930e47f6c5e349c02d07b5add4865bdf4be40c2384d75f1cbe86605b1a
SHA512 87f2c69de5805592c132d01fd4243d74f0b284e140587cc084afbb9162f558c11df01cd004c32b87146bf25f4e4f3fd42fb53fe92f91ceca8bc9f97e4ac0805d

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat

MD5 f9007db52955f4dceaac7d5fad3a2715
SHA1 87be185893472a7e9563cf7e8614516e3e452af8
SHA256 a422c5a44468e5a6b497602f1fdbe4f4241e5a70c62e68a64d8b1c5c3387936c
SHA512 19547fbbd3b7c40cad260bd9782255a0da8da0cf9ca6fbf390b451d27227f0707539c3dcba8890766e8f8a680bdabd81b4461e80f0d0b7136476fc7cb4123a5e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/no_backup/certificate.p12

MD5 2db6cbf782c7fba7c0ee7565864cc880
SHA1 4a6f0d4db715029abb71da92dd10475b7a33d12e
SHA256 f2479c1200d2b19bdb183abf1dbc6ef8cf3d71d26a78c3f807c17a162dfa5b65
SHA512 0b8c056ff10ea79a76f204e5cc2b94d3b09665eeb3f058e785dc69935df9749498644ac1262942a9ccdcfc0690ee98d20e74b7b37ecb6a0c228df5e67b9d727c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db-journal

MD5 95df6ea6570c7c89140eb023924b609d
SHA1 af3a49a67632981c57a17983cba00c8d2eaf1dda
SHA256 470fc1bb0caecd0c90f9b69de1b4b622b229b794924378a64838f4fda9793d6c
SHA512 46080126bd9205df176969ff7d534257b0b2297c2d48cfb6e63290ab0c9d27c610ff6c190269a7d4b24a021882cdcb4f2e2bf39acd2795fb17805f57589bf1f5

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/frc_1:290015074752:android:4c4973ee949e1961_firebase_defaults.json

MD5 289c4d437bd3a098a3f30a12057784ed
SHA1 d57d2b73380f6a2b8fb598d7921a4f67e09ad0ae
SHA256 b98059ccf71616e6802ac0b44c58b63cebb070296f8b4e0801bb37118e9472c7
SHA512 96decfe69a9e0e802acdb745f9de0e8f72c268f277e2f1e2c22d43f32119aa322fce851e1d7c4dfe4e5e0105015bd3887e7ba7bef7c5887c46aea1029ee4995a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db-journal

MD5 ac6f93ba679952abf8128cdd87bb34e8
SHA1 ccac23fabeb3f3a8ceaf31ea250ab0eb7fa2e6ee
SHA256 6a06a39318e4fab2fc42c3f9d79e63d1d835a005baf7bd5fc6835619ec46b47b
SHA512 fa6e5c3db51b07ff09518f9ea717cbd3aa3a7815a6756e24a5823f7119dbaecce8704336797b88c10f6e3dcd0e3fa06f540da2ef0291caa23bd3cec6b6e81574

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db-journal

MD5 bc074dbfd2cf5950dd7e1a3fd94e45e6
SHA1 5a3ae81b74431d5e50a76852351fd4bf12d1d744
SHA256 73b9d2a5854a035dc0f07b45339775ffb727745776b4c0f7471fbc87c14acb6d
SHA512 23b5ea2205c4e9c206ad7e51f8893710dfe100101be7ec8291c00dcfa13a9cd7603ccb5650c60df0b126c03247c71a35aef46c8d153e09da099cad6a156a7ee6

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/PersistedInstallation7144399518233806045tmp

MD5 50491a3f146442760e2291fb1e3337f0
SHA1 069986950c6fee70a85a1a06013c740585cb8815
SHA256 e1169504d9703e20728e7e5d675db5e09f31159eada29241d7aa26424ed868c2
SHA512 e495d4fc13cf7ce783c2e0d5f3916a3fe47a227f1221fb641200baf85bf17fe076af0176fbd2c92f15f0d98102ef52a81987e65ebaedc38765c56151fb039baa

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db-journal

MD5 e09cffc7c7e9a299481037932f75a759
SHA1 8f841ce7c87199dd6fb73f5d89288cc91a2bcb19
SHA256 4a34d0894f69252fd62e315e1571af34a7bb5959561ad897417252c68373f460
SHA512 53e57f6225ecc10594a84fa50aa7ce0532a264300792f9f14ffbd044e25a97358cd41c26a265e985cb47b9984899caec43fac5defc4858d4f8e1eab73f653336

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db

MD5 453c93891cda92f4d107da73e6ae9a1b
SHA1 b74b9ae94ae2a283856a3cd11d22aeb53f61fbba
SHA256 59348da256d16fb314436bc58997c8f33264f6e6b99ecb36bd224321001d66d0
SHA512 ebff850cdb59c836b74c2700db451ae6198aa5a048c9c211f76c77f1ee1c92bf76ac3afd29a3094bb554e084043bb695a2d6d7b6bb4f50745a038b6b0bf1fd7c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db

MD5 b6084a40082883192a1ff2b5723caeab
SHA1 13dd633be07762c540f0c384ba4a9b451c5c06aa
SHA256 b131df0aae992d9fceb0e535e7fa2de8bc87ae27a5e23aa4c4d92a8629f5d48a
SHA512 f072c5b06d711b1f7d9c5bf6d8fa1c44d36256b604aed822e14838d24a5ee779df615985da4a0d5633db4d69d1fc178ebb6b50c1bfdfabc18c783f248552884e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db

MD5 4da91296651d9bb73d44a5f7434ade8f
SHA1 1a1e591351c7f8d011f4d929bc1dc9840019b9d5
SHA256 e3a070610d95868516d9b56bdf099453d96abe78523cd8b51c5e559df5733186
SHA512 dd43f95b8494663ad702cae0cc05d35a4b5043770d23a0fba6fc208f87284bf4b55583da8c34805d0daa6c920ed51fca316d4e78bf4387e850d972d2948da79a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db

MD5 e5cf0b005b6630d09cff94a73ff31771
SHA1 ecb183e367b4cbde2429d2608d3ce8849f41d4c9
SHA256 49f258215b7c61a78d12353af2c6dffdf9f9d4e9c4df1bb24d751ec4205ce826
SHA512 a4c5e284b6aaf0f3d226170e01e54310e724a9181f2c5220377a05e085fa4104cf60084ee8a6291b8d8f827b0b9fd6c8ab20d5540d797fff8dd207ba169e9347

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/databases/google_app_measurement_local.db

MD5 5a632d16001448560c7231d277a88802
SHA1 9e6661b5d6db5fd79af72f16cf9fcecada429ed5
SHA256 5c324ad0f95b6c8cc30b1c22ca886c9009bb005d7d84683d737531853a3bff33
SHA512 bcaf38d1d96f6504a20ae587b15a6a4fe23844e44d86746c57431a930a03a80239423127a2e1634eeb71324a2aa9cf3027f5e476cd0b9efb5e53e5294853782c

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/userlog

MD5 1f5908f64b73beeeb6f6343ea0483507
SHA1 4e7c301f0a99e34393e175aa9ea6a3e9f2f677ca
SHA256 8d0d636c176f2d5387496990a1d8a9630950254a420ab00bbe91944e7deda844
SHA512 26fe2f1e55f2224921863ce87995a94c81c04918091eb21800e8871fe50195e70ff1f08a37fc57e9424621cfe255a211dc2d42a5207702c20fd0e6afec27b8c3

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000000

MD5 2b49fb245173b0943a7315d0cc603b1d
SHA1 bedbfd5ede87695f2e6e23037340665706b5d659
SHA256 d5a7e8f79b62a7065d660555007cd00e583ba06b0ec64c6690aecd55f18b7a10
SHA512 bf3f377e64e890035c4693cbe2dcc9ce94e8eb1e64e191943eb092ddea48abed6821317e3d91a816e6979d1199d0c5a680a21601af005c4b442758142183028a

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000001

MD5 bb2481ee236460abf573145dace6880f
SHA1 4db14ed0c4746bed9dc0d0eaf80026928c623cf5
SHA256 4f278d810898a5297b54da7640c16cbcf2fb16c9524ce32edc154bc853d49034
SHA512 a0f574547224b1ea67c9a5f4d54ba3e0e12627c94d52a7c362add89e592772e1b3c223f263687db0ecf31a6428d5146de1a8881cdbb66d04fe7c473e08289d92

[anon:dalvik-classes.dex extracted in memory from /data/user_de/0/com.google.android.gms/app_chimera/m/00000000/AdsDynamite.apk]

MD5 22f5f412be1e027b1b27130f2e5b150a
SHA1 77d3872dc8d055c0bd8513d5374f5cc5b70f57b0
SHA256 7e6ef684cac56dcd6ac78ac8b297af364d050bf2513e22c9cae71ce083a8bd5e
SHA512 6c82f6ecffd3cc5820bf30b71d5bb766f5d46ceb4bbfdce261e52c5480952653bd0b551627e5a434f6866f07b85b14ab3bfe4875532528433eca0b2dc56c42eb

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/frc_1:290015074752:android:4c4973ee949e1961_firebase_fetch.json

MD5 d23886a71959fa8f1b4ab63a94dbdb34
SHA1 7782b11bfbd4a20a48358284b769c82badfec202
SHA256 b5f8cf1d9517bfefc61eb329093345f03f74198e7a40c9554204f8d02adbc5b0
SHA512 ca276000ad06c0eaa15de72191158fdc8fb3bf4c6e92cf74e4b915156e253ab4eddddf0d134f19f0998f3cb4a16f7d0d77e2d8d70e02ab609339424a2d581942

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000002

MD5 fbacdc2282340ca09667918f91570687
SHA1 b8fd1a07bdbb9cb230ea55e52ae1bebd00d96b3d
SHA256 c0f7653495fba19fe0e0e061bc499ac50b9a6fb0bb91258df70e4505fe4bbe8d
SHA512 5c33293789031b249fae22d76de3eb2348c3e2b68c50fa9e2e33ddd9b8790bcb3a3cbf156f99b195a2c0111a821c3d841f30eedf5a0fb6c3b67052c5c35e238f

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000003

MD5 4af627eb63d961b34052ef0dec162c29
SHA1 1e7e049db4c12edec7637f1c6cddc8b4a88a587a
SHA256 e2ed7a10238be8f6bb558960b36771ae0be60b02069afddaa560c34d75a0931a
SHA512 4e02a3feaa6f6645b7a90a18ac0b99ea3d6384132ae71c6f95f702bd42dc1ea44438fc845f7e75b681db81cb23a15a596cc6c526ba30c55b2851f35df234bea0

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000004

MD5 cfa52b6ac5856e02c13af2f994505014
SHA1 7aa18b0cf25bc7ecceb56b494e847ded798b7808
SHA256 df70d14dcf61943eafbf2ed5a9aef1ebfe29e1cb2bc87f9c5fbe314cc0359c82
SHA512 1d964b065f76c1c55f4172ccbfc54221bfa354088061183159cb729e521613f23e8f4120303112cb01fe5386a407f68ba89e79e2765c8f8f794e7c3f488c2f5b

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000005

MD5 825b1747cc5902c209970f794b191474
SHA1 68e904190483c98127c1b5eaa5d3f3643af531c0
SHA256 5da211728769c62d1e1ef139e0aa03e28d5a0d0364261dfee2b29900fcbe8d57
SHA512 880b7bf54c638e067c7d98f3b4f319b2f7284918169719a7951f46d0b85348ef0e1e5dcaf5ec00d5e2db0bfc98351341e9fd8e0e7f397d60a18448d882a1a223

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000006

MD5 84ac0202f555a6ad9c0002626c1a1de5
SHA1 9ac503d183eee3c4d406985eda0639afb6b4a97e
SHA256 a72dea01a8572533b40c976018f275ad5aaf1b718c2d833837d5cd5e295f9954
SHA512 4700cc554e1cd12f9d56592247d0748591523c43072e769679a7cfcdb5cb787d112838de42c0fb12f9c48ed94fa1f467a29ea98f8462ad9d09899c02334de4c0

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000007

MD5 833f5b904ef9a682c9b3505dca93746c
SHA1 e35259c2f1ab8bbb56fe7801b52b3b97f3c56cec
SHA256 661b8b2d30f30d9b495cf9060972bb52dce12fe088dc7cbb8fee7759a04662b7
SHA512 03a11aed003c873d6aaa1ee9c3a3368b84714e2a2a6ff3331eac85fec24a1e0e425d31d998a286c731f90f43d516a6a1b00af9e9365e1e281d80fbbdefad3eca

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000008

MD5 f1652c2842f29a8ba500776d95abce27
SHA1 0787f82c0ee4d061f440520ed7b665a9a68e3d91
SHA256 7febdf025cc7edeea39a8e72a03916ad82387ad6652e94a7313e07dd078ebffe
SHA512 921bd56096ebe96bf546b023f5eb7ad8bcea5af623f3b0b1133d7859ca1f18eb2baa2a9e7bae3c49675c3433d1bf2f57a1c675a873699fcba160ad43caee3582

/data/user/0/free.vpn.unblock.fast.proxy.vpn.master.pro.lite/files/.com.google.firebase.crashlytics.files.v2:free.vpn.unblock.fast.proxy.vpn.master.pro.lite/open-sessions/668C817E03CF000112201EC4C70806A2/event0000000009

MD5 4ae59131b97bdc5c2e01f853765e43eb
SHA1 a28ab5a3035c8949d2432b5cbe45917eb058760a
SHA256 9b8110072dd6b76de4dac786055c3e19d8c9e3ab830ea62e7936589c44a8f206
SHA512 5f478af1ee2e20680f82b0cab846575b581983bce55cedaf31bc25d0094d414a758615e66830a8c55067f1657d4ef143179b426d222ad1e9182036992e500ddd

Analysis: behavioral3

Detonation Overview

Submitted

2024-07-09 00:16

Reported

2024-07-09 00:16

Platform

android-33-x64-arm64-20240624-en

Max time network

7s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
GB 142.250.200.42:443 udp
GB 142.250.200.42:443 tcp
N/A 224.0.0.251:5353 udp
GB 216.58.201.100:443 udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

N/A