Malware Analysis Report

2024-12-01 03:06

Sample ID 241111-ka6zcsvrct
Target BitVPN 1.3.2 Premium.apk
SHA256 4c82c3931397402388e0b72bed12280b99d101a668fc7e9aba0bc836ba95a5bb
Tags
banker collection credential_access discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

4c82c3931397402388e0b72bed12280b99d101a668fc7e9aba0bc836ba95a5bb

Threat Level: Likely malicious

The file BitVPN 1.3.2 Premium.apk was found to be: Likely malicious.

Malicious Activity Summary

banker collection credential_access discovery evasion impact persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about running processes on the device

Obtains sensitive information copied to the device clipboard

Reads information about phone network operator.

Acquires the wake lock

Requests dangerous framework permissions

Declares services with permission to bind to the system

Queries information about active data network

Makes use of the framework's foreground persistence service

Listens for changes in the sensor environment (might be used to detect emulation)

Checks the presence of a debugger

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-11 08:25

Signatures

Declares services with permission to bind to the system

Description Indicator Process Target
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-11 08:24

Reported

2024-11-11 08:26

Platform

android-x64-arm64-20240624-en

Max time kernel

51s

Max time network

61s

Command Line

me.bitvpn.app

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/me.bitvpn.app/cache/hook/classes.dex N/A N/A
N/A /data/user/0/me.bitvpn.app/cache/hook/classes.dex N/A N/A
N/A /data/user/0/me.bitvpn.app/[email protected] N/A N/A
N/A /data/user/0/me.bitvpn.app/[email protected] N/A N/A
N/A /data/user/0/me.bitvpn.app/[email protected] N/A N/A
N/A /data/user/0/me.bitvpn.app/cache/hook/classes.dex N/A N/A
N/A /data/user/0/me.bitvpn.app/cache/hook/classes.dex N/A N/A
N/A /data/user/0/me.bitvpn.app/cache/1582435991586.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Declares services with permission to bind to the system

Description Indicator Process Target
Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

me.bitvpn.app

me.bitvpn.app:remote

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 graph.facebook.com udp
CA 159.89.115.144:443 tcp
CA 159.89.115.144:443 tcp
US 165.227.7.100:443 tcp
US 165.227.7.100:443 tcp
US 206.189.178.251:443 tcp
US 206.189.178.251:443 tcp
BR 54.232.123.148:443 tcp
BR 54.232.123.148:443 tcp
GB 178.128.162.58:443 tcp
GB 178.128.162.58:443 tcp
US 1.1.1.1:53 ads.mopub.com udp
US 34.111.158.155:443 ads.mopub.com tcp
CA 159.89.115.144:443 tcp
CA 159.89.115.144:443 tcp
US 34.111.158.155:443 ads.mopub.com tcp
US 1.1.1.1:53 www.facebook.com udp
GB 157.240.214.35:443 www.facebook.com tcp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.151.23:443 graph.facebook.com tcp
GB 157.240.214.1:443 graph.facebook.com tcp
GB 157.240.214.1:443 graph.facebook.com tcp
GB 163.70.151.23:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
GB 163.70.151.23:443 graph.facebook.com tcp
GB 178.128.162.58:443 tcp
GB 178.128.162.58:443 tcp
GB 178.128.162.173:443 tcp
GB 178.128.162.173:443 tcp
DE 46.101.202.27:443 tcp
DE 46.101.202.27:443 tcp
GB 206.189.18.15:443 tcp
GB 206.189.18.15:443 tcp
DE 46.101.182.84:443 tcp
DE 46.101.182.84:443 tcp
GB 178.128.169.218:443 tcp
GB 178.128.169.218:443 tcp
IE 54.195.98.157:443 tcp
IE 54.195.98.157:443 tcp
IE 34.247.151.224:443 tcp
IE 34.247.151.224:443 tcp
GB 18.135.23.51:443 tcp
GB 18.135.23.51:443 tcp
GB 13.41.41.4:443 tcp
US 1.1.1.1:53 conversions.appsflyer.com udp
GB 13.41.41.4:443 tcp
FR 13.37.174.209:443 tcp
FR 13.37.174.209:443 tcp
FR 13.36.119.254:443 tcp
FR 13.36.119.254:443 tcp
GB 216.137.44.35:443 conversions.appsflyer.com tcp
US 1.1.1.1:53 launches.appsflyer.com udp
GB 216.137.44.35:443 launches.appsflyer.com tcp
US 1.1.1.1:53 gcdsdk.appsflyer.com udp
GB 18.165.227.44:443 gcdsdk.appsflyer.com tcp
GB 18.165.227.44:443 gcdsdk.appsflyer.com tcp
US 1.1.1.1:53 ld-bitvpn-webserver-481332435.us-west-1.elb.amazonaws.com udp
US 1.1.1.1:53 www.skyvpn.net udp
GB 108.156.39.109:80 www.skyvpn.net tcp
GB 163.70.151.23:443 graph.facebook.com tcp
GB 163.70.151.23:443 graph.facebook.com tcp
GB 163.70.151.23:443 graph.facebook.com tcp
US 1.1.1.1:53 d3qdjiavzzagsg.cloudfront.net udp
GB 163.70.151.23:443 graph.facebook.com tcp
US 1.1.1.1:53 d2tv7wzvhihv37.cloudfront.net udp
GB 13.224.227.208:443 d3qdjiavzzagsg.cloudfront.net tcp
GB 13.224.227.208:443 d3qdjiavzzagsg.cloudfront.net tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.213.2:443 googleads.g.doubleclick.net tcp
GB 216.58.213.2:443 googleads.g.doubleclick.net tcp
GB 18.165.227.44:443 gcdsdk.appsflyer.com tcp
GB 216.58.213.2:443 googleads.g.doubleclick.net tcp
GB 216.58.213.2:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 d2tv7wzvhihv37.cloudfront.net udp
US 1.1.1.1:53 d2tv7wzvhihv37.cloudfront.net udp
US 1.1.1.1:53 d2tv7wzvhihv37.cloudfront.net udp
US 1.1.1.1:53 d2tv7wzvhihv37.cloudfront.net udp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 108.156.32.169:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
US 1.1.1.1:53 www.google.com udp
GB 13.224.227.208:443 d3qdjiavzzagsg.cloudfront.net tcp
GB 13.224.227.208:443 d3qdjiavzzagsg.cloudfront.net tcp
GB 216.58.201.100:443 www.google.com tcp
GB 108.156.32.169:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 13.224.227.208:443 d3qdjiavzzagsg.cloudfront.net tcp
GB 108.156.32.169:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
US 1.1.1.1:53 dt-apigateway-log.dt-pn1.com udp
GB 108.156.46.123:443 dt-apigateway-log.dt-pn1.com tcp
US 1.1.1.1:53 gcdsdk.appsflyer.com udp
GB 108.156.32.104:443 d2tv7wzvhihv37.cloudfront.net tcp
GB 18.165.227.6:443 gcdsdk.appsflyer.com tcp
US 157.245.81.164:28489 udp
US 157.245.81.164:54189 tcp
US 157.245.81.164:80 tcp
US 157.245.81.164:443 tcp
GB 108.156.46.123:443 dt-apigateway-log.dt-pn1.com tcp

Files

/data/user/0/me.bitvpn.app/cache/hook/classes.dex

MD5 e6404cbd0ff319bb4d6ee7e9295993b0
SHA1 c1c0b245b1207ed3d04728fe9747b5d3df2147df
SHA256 5263f77ab5fd646186a611252fa4bb31557ce89fb75cb4309878d03388cfbcac
SHA512 027abd595a5d8536cf52e9a464808850c1aa8bc5f7bcc3f66c66dfafa3a35d4c17a4d7a86d069ff814638c877a96c9c882835c12496e5c9494f9a9d80b2c7317

/data/user/0/me.bitvpn.app/files/e5920648/3462627070.apk

MD5 7d2f24be96633b739e6f68dc1f0841f7
SHA1 bd3e30b25e9a4a1cec71c2f4e9b08da0c733b830
SHA256 530455d1a9b923109e485eb5775a07c5ec8c655f0248902113c373d07abcfcad
SHA512 43ae57ff9c95fa52ab1502f4a8b0e2f9aacbc5204582e5ec1723c18625b5790da7b7fd664243ce76e6cb6b87d6cf5afbb25e0a8d7c2fe00fc323c27b09071c66

/data/user/0/me.bitvpn.app/[email protected]

MD5 6b831d63f747500541b6373e3c886e90
SHA1 a8f3ea9275f96618fd28e5aa1862c2e0c0d9af60
SHA256 de2b72f8f21ad6e9f7ef601a5faf616c80e2ba5a8cc60268d0daee09b1c880b4
SHA512 8b52863574cd3266fba606806415661aa032ff320d5812778ef09d433f1535cb2519c57a5797649121682f127375217b33975753dae0cacd0576b157000713a7

/data/user/0/me.bitvpn.app/no_backup/com.google.InstanceId.properties

MD5 467566826ec599aa8dd1b9d21f669490
SHA1 9c68f0e68c80ca4d33d9eb9be6e83d44678464fa
SHA256 513346d9f6ed1bba5ad8ea5511aa9f5ec6b0c4b9185135e5a35ae990795258c3
SHA512 d465ff9107aa83980f5c5e01ba7b4ab04292cd82718d4e472e616acc7692fdc8bcb0c6595690881b927259d793b5015b081e0739b73c6ddf2d0945d6a7ea3c54

/data/user/0/me.bitvpn.app/oat/x86_64/[email protected]

MD5 909f99e5aba02b01846064e5873d170d
SHA1 4382e846240856bb8748effd85ea2e413c9e5379
SHA256 ea8be22f5338838ea267610aeaed2cf5dc696ac29d0291e6f0cead868da02464
SHA512 c17c90c34e8dc3b3bf8b46fcdbc9c845706610c1ecea8481cb6e7b261fce699d69caa7635e662e160872ba806c4348f5d2174836a27a73e33eb8054b81a1fe3f

/data/user/0/me.bitvpn.app/app_KeyStore/.ringtone

MD5 fc1dcee4e422d77e7fab7c08c8a41344
SHA1 d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256 b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA512 3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 9d138717c8e34f7b2dc0258be4bb5a6f
SHA1 1f03a254151d6ef2f28b0e797aed8a8b6bc63634
SHA256 66803ed19ad617b8f7756daceb4fd0fcf1811afc88f1d53d19a8ccfc332387fd
SHA512 3dfea96a4c243e067a334e503d1c3f627ed3cf83a431fe49fc1fce29142cdf2cbe4bbf5b0ced9fa96f55203fda5cb7ea8268d80d0dab6f33defce07eaa859bed

/data/user/0/me.bitvpn.app/databases/Dingtone.db

MD5 3830a9ebc8e0856bcd17a049eb020dbc
SHA1 944044a4b3af4ad680894db54a23561f97d818dc
SHA256 79945c6f86579a4c837856d39d767e119a502015d6f49cfe82aefd945681c517
SHA512 1082f864d293c4789fb74092ad18eb8a43c8ba282aced74a2cb8efbf2254e868ab5d902ef01e4c96a81f9f846d092a816ebb1df907409324488cbfb7067e9e7f

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 b401afbc4afeab6fa91d0e9ff8e749d0
SHA1 23f738768a57627d05fc2a1d32f7a691b37886e8
SHA256 339004adabf8ff59420e736996bde4d7e916aa7d06e4822d09728c579fa1c900
SHA512 0df7a85763f3ccd99885c65bca1bf2468353879165e90e433b89d6588173500f25a8cb70e2cab65976c3ca4c6d81b06196d4e7f03f14b69bfeff4a9ac49dffb9

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 45d2a91faba370ea199da5fd6f083536
SHA1 eb2b698ccf772ed3ff1ec1a3b54402048cae428e
SHA256 fa25b36979fb88721f54dce970871b5a84409bbbe4199c1be2c24b8a20dacc2c
SHA512 91a4f2147c6295c0e008062f5f2288aa986b0c88ce118c274f69e26f7420ffd8984888c7f5206f0e2dd05237cc81f615b36973159576c6cf8fd2ed2de8ad7088

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 548fe4b04ed40b1bc20c239927588739
SHA1 1319e6bac11dbeabadf2fc8a536f7cb622bae0bf
SHA256 d67837bb9f9c81c3c02a626a29eb98b41557522961eeecd46789ce2db282ac13
SHA512 56ab3f2fe97b7a518c6751df5b26b795504001acb4aa9f9991fbabe77a7f8cec34f071716fb0e56521ae9d62b08e77e67a0e6b1bbdbdd0820f4669abe0adfc33

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 bd5a2b1c768778ed5e13b1fcbd498c57
SHA1 67b9f8c8aa1a0c15c901b82947042dfcc81c0dbf
SHA256 c1aa2152d784e4be49c6c1cff50812d4c3793e72e8fcc97455dd7929573cc4b7
SHA512 31bee2a902634a3cdfbbeb356541452e2e2f573ea2bccf7c48b38c125aed5966d0323bfc530efc2946b1b7f5fe2571d7809328b9efc7b4c0402c381ae46f1504

/data/user/0/me.bitvpn.app/databases/Dingtone.db-journal

MD5 4a32d40fe5c719ed1f94d93f5fcc00eb
SHA1 74ce0208846005d766b73e4048b6a25bea699ed5
SHA256 37df3f30ba8a413ea9972b97a3cd5a7356b3db2b473bcc98cd77a1a67382fa85
SHA512 2f75e394f723eca6a4b630497758493f375d4abf7560ac543682a545b16edf57ea984360875a7d6d4fb5535eef3cfc9d2fbff5a89ff02ffefdedde5161695b15

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 df07ee9439c9735b668123ea2cda7577
SHA1 f65f8508cecee43bf7800dd50c9d7075bd5feaa0
SHA256 18563f6706ed53255c148fdfccaed911bdcaf8147309313c2dca1dd7032fef71
SHA512 ead57b7dfe7bbc6a2143d87bc54569af511142823974593965649127e12eae54bcb83926b7cd8c4e56e38d75ce4632b6fbc1c381a450e67e6d53b988b0a57371

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 a0ff9dfc08e74ad22f6cc6d2866422d8
SHA1 ecb2aa29fc7d8ab5366b340383751f5f6fcc55a7
SHA256 5fb2af676097006d897567c856063c8ef890e8672eeb848bae762b5781d9233e
SHA512 c12cb4168195fb3ab642061c989892290e66936eababa3f51b59ffc595acf05de66af41157b4ca449a5d919341bd59c9a1b32b1b1e297c77a1dfcbd714fcfa42

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 ed57527ba4cea8b26840eeea5008d992
SHA1 c4d85584473eaa9c559fe7d99c524b22b0bb9bb4
SHA256 9b7cb89d13815e3934d86fdf64b88bcb4f798fd2ebb0039e4dc063c26c2678d4
SHA512 a25bdfb22b6199892188da35fc749c91b763b20524dc9cf0bfa0d5566dd9dba76dca5a6dade5dc58b07e895124d1c735e716f88bb7b3f1eec63b02afcfd07cbb

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 20e7a49d0a18af5e66a13cffb644e47d
SHA1 8ccaaa8417f8bbd46a866271040c1f9ade5ce86b
SHA256 08218a96f0f20e9de54a3d9c1b072c3fc034f0e88be8fc7b58e47f15f99e46e4
SHA512 736076fc2514312792112efe43c3ce20eb69e4f675d68d677d26ff01166be4d8b5d4532af767d81044e6d753c6f6a7d451b246319bdea2a0714caa61f3b767da

/data/user/0/me.bitvpn.app/[email protected]

MD5 1771e0fe2fb13c8732eebaf59fa8a09e
SHA1 8dbbfa21ed6b4ec50597b5e9c2b37b7e5e907ebc
SHA256 60894302b8c073f3c813e7d50ba32a67fddd02c1e857692cec5ef83df7a118a0
SHA512 9bd4907fb083aea5a3abe44892b6e0c7912dae4469cb224c153a08641ada37ba73cae31cae261940cf3d6e8c1772ca9fe39257a5f3b67e3297873dbbad9a7176

/data/user/0/me.bitvpn.app/[email protected]

MD5 21a76ea438006556bfdce47d7e0f2d4e
SHA1 d41a92ac7ca463067003a4929467c4b50270ce24
SHA256 838ae3037c72673861ee6d32edb66f6c2e18c5e12ee7cd03e6063c475aa3b3da
SHA512 ceb8b862dc63301022c2742f3dc5956224e9e016455dd911668d8a8cff1ad55a074fd53555f3a9064b8aad96c7d72c3467c54f5b26db5260a8292af5d9e429f5

/data/user/0/me.bitvpn.app/oat/x86_64/[email protected]

MD5 984cd72a214a1433185bf04db590b000
SHA1 5d66cd5e7d58ca9076608f4b659344308156f482
SHA256 f498984ed4c27d52f9c9c4f05fb159e58921e05c1d6de61b07e95f414b3e2937
SHA512 c27df00ea88090a64d51bc3e55b9288c9ff9951a1720351b695ae05031668a170bc7c992d75d92a11d3e54a98666ae20bffabe24ff414d16b87305243f6d4192

/data/user/0/me.bitvpn.app/oat/x86_64/[email protected]

MD5 681e71f5654c8fb6803e6f645f973586
SHA1 312033805b017f4c3f51d7c4ad1fc2a9d4b84b17
SHA256 62cba63eef65438bfe47ef56d05ae9b61db3207e502681f45ef9b24bd8b37ef2
SHA512 e865133ed6abfabf4e9690002c16ac8e02dd1550771298966b1b0682108862bfe2d9365e673580395c42d546ae03344216a789389644861c05ea7374ab12988b

/data/user/0/me.bitvpn.app/files/persisted_config

MD5 1f3351764227e7ee75346b80b3b85833
SHA1 2bd53df1f1aac71a1674de61986202bbb0bcdb99
SHA256 f5204dc7aad6feade2901c601875c3df844f03b767060a1b8caeb19e4c8cf723
SHA512 0c1f7d92ca9f5a9b4ee1fbde2ef883b8d61fe70301539586e6f422dda682e361ae5668f7b0dfaeb75a66f1474f8f69fc84a903014b913f56da1dd3b339dd014a

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 b2520b34069ede62c3c5e6809fb08d6b
SHA1 915221e5e84f549dd6d64cc19ebb583c45f66772
SHA256 f63b45489f06943c8ed8dbd1839a04637b537a9cd4599399628a753ea35bab0e
SHA512 7f62aeca27d77791306494e498c07a32d10b0985af1b61d63bebfa57cb86b4d30a40d97429de5a3206ae5df246e1705799c8a973059e3a55e24bfaa899b5a858

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 f33fae07046d336a629558a565e55c16
SHA1 2376750bc177f2949ba66f28b6d6ed0a98eca52e
SHA256 740f5d759cf76841937bab217277f0b14722fa84717d5821920800f58165721a
SHA512 d7e21f3316804c4114583223b35d2d828cca1243beeb7800f8423363be181893d97a5a03a8f837cc30e3a12b38209170b7184205e5f04443e31dd692bcc6fdde

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 426b8a4f919895a00cc320dd455bf366
SHA1 0f1b84303e93897b683ea4202c8fa73e3edd9a76
SHA256 b94460c33cd495a067a8e53b62983c443af7f315c89b6498ae4b477c91698d3a
SHA512 d4dc45e9c80cd56d638d98c6aabee5000c0b6e8806a4f7dbc27f34e4f8e878f6c168c56759ac4345b5a6c9916bffdde45763bf86a723ae1be69c39ad3e7f9cd7

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BBeginSession.cls_temp

MD5 c568f2861948fdfdc164d6b6e950f76e
SHA1 fad5c9978e786c740b38ea57c80b9963a8d8b382
SHA256 fda304cd8082fa876925caa28c307673fc556b9fff18c08d2080de012a7f151c
SHA512 87d50ecc2bc2b152e9d9f7fe40411564e18d7df07e8628f0f3e1c043677849b081a76c8191b4ecbcfc03d94ca7596263bfdba492e748a70538e946de43c435f2

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_917777cf-7400-4be3-830b-25c95dad3eee_1731313554629.tap

MD5 781d0624d49d8f3296d28cae9e6d65a5
SHA1 b4240ac29ab9a1dbb597b6a007aee864bd22801e
SHA256 bdfdac5b68a7bbbabfdb8f22c9390eea322745159be4c6303ff34f14a32de2b7
SHA512 9bd1cd918bc07a0fdc901036f84501a2fa4ef0db3c73176ffeb4690b91e7dec69850cec452908e12012f62f4167551e0091616037347e8c5afa069c2dafecdf8

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BBeginSession.json

MD5 54354f066398af1542f553795b8dda66
SHA1 e56212f127606356d402dcaa122958f20df6814e
SHA256 b5313e82c442a52dbbf353797cab28455fa6780281b622d7015f929c6fc8d9c6
SHA512 28ebf72a26d174f060cffd8a13bd7dbb9f01c386da8c5e67fcf3d42bf762312d4be7cceb9ffb18ca361a3e70f29fe1cf1913d3d74dd155e431984350b9b9e4f0

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 cd23464cec13a970998b49653bd4c84d
SHA1 efced6b98a0c1018a88c42beeee218578c65bda8
SHA256 77815c0519404bce59f4bb41d6c64e3bed8f14fcc8f8298f4f41b9bbb1ba2dd1
SHA512 dfe952a5a393829f6c7e8deaf1aace298d7df0058bcca91195fed922014665cb6408c3d72ef0cc5046301c57c3d2941f42fd6a70deec0066676c6e4d602628b1

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionApp.cls_temp

MD5 fde5164db6cc21a4e4421de84901f504
SHA1 e0a4b0788757f7b46ca9fd6af0e0a211e4558989
SHA256 c7e7f35c22768c738c7f4e05eceed5544932173e7549043b6b2fdf05f96e2cd4
SHA512 acdd521411126fe89cc11088385d9fd8ea6e88d047c8f3d345b51a00c806352c03eeb23aca969b7ea0e32e96bff31ff945293229e071d9a756519cc3700cf36a

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionApp.json

MD5 a5faa2c8259da504ed474cecedd5401f
SHA1 62487ae1b8e6bbc7bacf5d58061f47aff49455cb
SHA256 77f1f6c5b8f5c617106b2e506af48de3d6f8422685ee7627659b51ca4d5fe75c
SHA512 02d7cf8d0617258cc7108adf4677f256b9dd91ca87ebad0f1ddb7a79a15a5036dae4f1bf3fe9824e8714fc1621a6da931d53904b3ab7c44335141e07d086753a

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionOS.cls_temp

MD5 b3d9541cc92a9153d14e5160f8d8c008
SHA1 2e1ac80eb381dd82a03795b682f92020348c0113
SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA512 78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionDevice.cls_temp

MD5 61fe9b2429eb44075b12cfb3c24be443
SHA1 7767859c0d7016aacc4f506fd06b65507a891b5f
SHA256 c25c4343eb1a5f5bdfd98236189db99a2b1409fd660727641972dd37006ce116
SHA512 96d60f2f791246b119f59cdae19b930f8a2b9849c1dec76e439c59933d2b60cb6435c6bebec7cbd84a0694c45ec3941f23cd796081482e1e91b625c03eba070a

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionDevice.json

MD5 fac05273365282d26c4497679d20904d
SHA1 3b5033dc1142fc5d80bbec64456d0a058aa6f0e7
SHA256 d52e892b9eae1463272e56f61f6e4e81633454e772c1f3eb92ced87e4c25a978
SHA512 d979cc47aa4dc814ad55bd0abbd401354bff65301ff13657a1e7b216c4bd0f2dc9f0d00503d80e4b46e58181353bf4d30c6e0493d4ede5e49a20fa1340c5b61d

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945Bkeys.meta

MD5 b0b6cac0742a6932952f1bbfa885240f
SHA1 9d4635e4b25fce3354ec197bd7a1d858640112bf
SHA256 7454b501468c11d71ecfa32478574b6072d7bd4b3c915da6658bea3c43bcd4ce
SHA512 8da4f891cec9e8613698fd5a5b538e1840c3158f275b04d529358c0f632f436ffeb17a17648b67cf332f151139fcae91e11ae200e317d3974036b10cdea75702

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945Buser.meta

MD5 c5f5e3f5f7c86ce08fcebe1d43542af9
SHA1 8721bfa901217a89873a715acf1a8e11059de64f
SHA256 f43a189552793dda153f54a49806d52845e34073b07c1fddf6b7c9ead7612369
SHA512 46da608c0754a8babe2409e3dacf8a832bfc96efdd66807616662ea851d338d395dd5c288d5ac026c8beb87f1f5d5e3e882cf774b971906cc0b0d0b901a5764f

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF89006A-0001-1174-019BE507945BSessionEvent0000000000.cls_temp

MD5 e943ea5b52804bc8b5fe389fdcd88546
SHA1 4e6b7f258776d2fad27751a46ab3830b25137975
SHA256 5b3ce2a786be76eda9850eba9d91c537c68590abf14ca76823b077a66b1f1161
SHA512 80450ef935c8b465c74e728ac0837a4849b947efc446571ea1c713c4fbeb82f4950b655776e82e7f5118e109710035274ad937bd876a07694dfa4f477820b7de

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db-journal

MD5 a03c295101b833ff981fa35c63137abb
SHA1 493402fa7b58f11d6ed97684cefc1f33eeb1795b
SHA256 a57d314ca37584e16dd84508b4d081b517eedb7db1419b2ebe90582860ef839e
SHA512 0e9645b9dbad317bd66f78f5fc0226c1ed1d167f28dcec6bda9355639ff16e9ad21c4dae216166c5bf949e05a8c86e5c3993b5787a4b093c485c26db44429815

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 13cf2dc4da705062144ba9e4bc1e5ab8
SHA1 aad4a0c78fec303effd6aa277f0f23b96b6b7b87
SHA256 4f0574988d4cc7a0210964344aee8d2f66542b58c2864c08a2093088d5038dac
SHA512 be98a5e3c31eee85e8a398110fb7d6b4e0081e48b61d6255b149e75d02572b1ab76eb941f4430cf0374189ecd618622b82a1966c630bbe9de731f658fbdd06c4

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 ed8fe620b172096e96782cb8a85ce72e
SHA1 f3670624520c4a7b9ca7655b152c89844df6efff
SHA256 0ca90047c76a43999f9e31ce60b7c92ece9ed59ab42ed72690231640bdc4c4ac
SHA512 641a781e4b1a8a28c2e6de3b13b2dce0cc20a5553da9626788c8e76cd04856fa715a64ffdb1edcd8ced52eb53c0027a4a9b465b6a12afccff75f534b137c931f

/data/user/0/me.bitvpn.app/databases/dt_event.db

MD5 80be1b92d9f549045ecdf42cd917e40e
SHA1 92bd12f6f4b5a50f39bd7cfcf0db490cdf7e1786
SHA256 d84bb9f7d4e19f35d6bdd5ffcfd732641b74bb253ab625dd94bc7b28563fe2e1
SHA512 13a732be18e69c179e05b9224cd4013a3f025fb3b53d6c969b8974cb4804eed6f0ccfcaed503a40205c04c35e35b42c88533204f321f550e2525f01a2c434432

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 58b0eb9593cc30ff245da515f6c9e3de
SHA1 0346bde3eff2e52bfecedc0e12e454667da4c50e
SHA256 875c3994b6199f501911cc3d1560007e0b2a0b1408c0f32d8e2ac25f643ee3ad
SHA512 8fee49673196811360ce44072de5a658597c9c509b1047cf8a4f79ac7419d1663562109e09279046a0cdb8a1c9a022bdabfb73aadcf7db2347de09bb7e96b111

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 0b1610944e4df9a6c8ed04941dce895f
SHA1 804cc25c963e57193c36d8f4e3b84efb64f5c09c
SHA256 57ff5957e766ab446370cc580878d68915443616c251fa3000ad059c6e91b420
SHA512 a78d668cc9c27075df6a69e8a1664f513985d0660d1999c2f3a8f04c2816a4122766f2cae7f3fbd2d148b0d0ec16553e3572b1956269f0542c01bd5eb939e90f

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 f5e5069d41fa0ec56fad4aa125264ea6
SHA1 54da424c85d1ca9c5a834977465b38d4e6377207
SHA256 53903f79d5288407306c599df9a28b1806108b89188ac847f577eb8d6925d9a3
SHA512 2c7e287c073a82d8aa5a5c975403b147d69d4ad064868e2924a3d998fbeae9112982d75fc029d134418bec253ba06fd62a8d12c9f06e6ca80b9d3750b9ca5fa5

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 f297b3104618880ae7a25b6d6ae7f53f
SHA1 ee4479770dd9f4d08f1a486861a6ba4bf8ae593c
SHA256 9bc8143c6761207014b2706b8341474570d253308310841949ede49f4cb4dcb1
SHA512 1690662b18eaf5dc2e46916595f9fb7560e7691479ab4a763df3eaffe47a14a7365d95bc4356d5f583a3a3fc21e0080102c08324d131a62959b9727ff827a68e

/data/user/0/me.bitvpn.app/databases/dt_event.db-journal

MD5 78fbc9a3e3baf9c06dad49bb3fc44616
SHA1 b12bbd042a26c3bf444773de97341fbf59919d7c
SHA256 3814de475d175fd3434eeec1e406a0bfd7b2b9c93cc4ab3318753ad8dc322d74
SHA512 03cd68dd6a57ce0eca0593a80277220f1d39d63284b6ef20caebac5e2e51b37d72ba077a98b406b8d46af0f25ff94bff03690917079db4e2b2f43e0734691a0c

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 615aa46ed57bf840610b14840fc41845
SHA1 ade84904e7b0873a9769e3942a8cc745f229ced6
SHA256 237e5be865365be4857050b201c9404f543468f776b295b9e9dcef91b0c6a7c6
SHA512 5204c260aa9de5928dca6b40940ec3cea6ee19bc31cf7ff3286d60a399bb8b5319ac3b63ba1a0b7bc3b906dc8bd34f776a3c6be903d42faebf5fde1a793390b8

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 17644de7cd616eb32819f2a1bade387e
SHA1 c07514d6952f4b4d7349fff7f5578b16bb8f1844
SHA256 d5e2cb9513eb398289c86080dea2f154136421e13201719b46e0e1e72a8e2883
SHA512 e87d520b9b92fd029b587c687574310beebb707070c34c327d94c498a9ae007e1062715d9b50335d83c2c8a961733917b590e9ca11d649012b517ed210f8b9de

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 05bacd227be346148751b31e4f101189
SHA1 995b6a14708d02c1508b6a7e88704183e2d93951
SHA256 e4e38e95b556e1da79c55a50fe74eead4c6697d204822cad4048b8be419305cf
SHA512 39df83f6bd09dbb5528d794119a6cedd0bfc83bb66a2ff555754d256ddb7edb863dd8ef781ccdeedcc4beae5d818d418202f837e964ba185e50b4e47a88468eb

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF9E01B5-0001-1290-019BE507945BBeginSession.cls_temp

MD5 7d0e94eff3c66e01d01a92abf5febf27
SHA1 cd8b726cd25f9f3365607b169440e6e0294d8c6b
SHA256 2d4358eae3722ca4cc25e03d41da429a3246baee6193185929f7f868907358cf
SHA512 2c77031fb1f3364d24bd7c9ac5d3e260acf8edf5aeada35514564af0ae6bc95255cd8b62c14bc79185acfeaa4b2992c733b1b348332bff40fc162f3c0756cce6

/data/user/0/me.bitvpn.app/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6731BF9E01B5-0001-1290-019BE507945BBeginSession.json

MD5 3a9021f11409102890d4586c1696bb88
SHA1 47e8121f7056a403fb3d06f19ee403a875ad459c
SHA256 4884988d86098ac263e5bdc48a3ee34a0917b522a60445fa86c643a9c38b695d
SHA512 dd4e65a697f7d4b6b4d1972a187fc773a16d6efb5273ed8c11b74039050d3b82ee3432257ae7c6adc24a079e94a1c5a9dbd83b797bee8a1341fe2f415bf74075

/data/user/0/me.bitvpn.app/databases/google_app_measurement_local.db

MD5 c9583133b6bf28bf878ffdd38fbeaf28
SHA1 e3e606865033d43e7bdc4b94e0c5e88e6433e836
SHA256 cfaf0431498f1acb807f1b0605e059edb0084f0dd8d44e3d241291f6e566e2c5
SHA512 28e4fb14ecb76ae1d790cf2aff48ccc8494ae72b711e33c68ee3f2f7269f9349e7f742d857cec86a9eca36cb384cec4072568ce1419fa79ced2f4ce1565c57ab

/data/user/0/me.bitvpn.app/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/user/0/me.bitvpn.app/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/me.bitvpn.app/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/me.bitvpn.app/files/AppEventsLogger.persistedevents

MD5 c079b7e3a041a99711719dce5a056588
SHA1 c062956fe63fa229703ee3a70844da71d425a0de
SHA256 174ba5e61d6eb37a207ff502622bf67a5c9f59a2102ed8e69f9bf6f8df609a7e
SHA512 ddd016827b9347fe9052dfcc4f5c3497c5f0c40d7f3ab85b3af86ae2f13a02ea4146cd8c9993c64267346221cbfe5e9f16056b31f2f4547f08e0a95c0ff35fd1

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 cea38d37bb13431c4a603bb19f5f06a9
SHA1 a2788ea719fe39f867496d5439301846b43e17c9
SHA256 71b1262f5daaf06423692f9c611258915ddaebc9fc4665ba9c388ae0080b6b06
SHA512 b1ad28d4e125e9b5a2f77142f8ef35d05b5d251da4acc783615d3bafd209fde1014e82ea046f459ccc6bb3cb5292b5c64692c42cb2cb7a7c31812df84829b328

/data/user/0/me.bitvpn.app/databases/superofferwall.db

MD5 cf837a15248a6d563219ee4bfafe8a8e
SHA1 577dc78b6588e8de95200a7a58922ef531dbc8e6
SHA256 67c29738629ae45b97c036af5b4ceae6b1e06f9be21115415ef92ce4cbdb87f2
SHA512 e36666c72c8629732221ea792a3678e9420d812baa00356892f757f35dcad39a0a872487db00d560ea14dc69b426db659df812190add406193fe56f113ba466e

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 74ac66dced9a26bf26a494b1eaf503a2
SHA1 f77921e2372d2e24f1ddb2a20e6efaf3af348e0e
SHA256 77f91dbecedc2556e2c2294d43f099a84aeff96b941d77c58ff6a0c3a416d2ad
SHA512 e04154fb1ab01994b4519d542ed35f9314c6e17ec493173f22a752b486897110416e2d41d746552b11e5ce47e3f02db3b173b18f9658f04440ec598904dadbfe

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 4aac63871826b645f58643c4dfca7421
SHA1 312c443149d72cf22f34536d3ba30deb0e68f89e
SHA256 d8a8fc5a46d4555b573347174cbef8521050ac3875a84df8f9872f5fe8fd9991
SHA512 383b33ec49bca9fde42fca7b9efed027e089cf13e3b3a68de58d007ae39d6d77af436b0c86ad9b8dc368add4100a1cc18cd6053b84a7f45ea8863cb96a033293

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 799302b5927253deaacdbcfc01857301
SHA1 88f4e8bc4a12cb288e4fed40ccd73b498617be26
SHA256 5e84a22dd414e7a0c674eb07e80d058519c3348a39cbb39cc26fac05a2fb68a0
SHA512 e27fc0a7be7f26db1a6acb7fc1e6208892331b2073df231cd975c66349f132e805a22878aa042692beee1472d2a3f4bab8840dfa678a1aa830a8f8910398314d

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 6812b6197d335d1a4a2b44a45047c1fe
SHA1 c501972f1a93bbaf8628e2a52564d945b2776b1a
SHA256 9e04e2f1284e515e8e89a567bd27d1cf4703848f490fc3b0f828f2e36237d9c6
SHA512 39da788695fab7673bf30132a8fda4ae7d19c6f18370578efedd29c14411d2e0291b0d3a8d6cf8af0d1fde78ff8ea8060e9f2d867f98ea98f139d4fa39f8439f

/data/user/0/me.bitvpn.app/files/persisted_config

MD5 a51569cd7d77df32ed7d4cc44dcd52b9
SHA1 24013d6355d3a52492400dd53033ee3b7c944272
SHA256 2732511c6e04a7d12f9f66dd3668cceafb83ce505fe14da8b287446e4e065543
SHA512 121feadbcbf6b490ec0432473196ad60dfa2874e4d62425dfb6fb182d320f1f65e898a3dce47ba5565682ededd9dc0ae79304dcc8a1956ad913b0520a1a593fb

/data/user/0/me.bitvpn.app/databases/superofferwall.db-journal

MD5 84e28e039cf25e523e2dbfed63a8def9
SHA1 5aca7ae9068ecabf34dede45b5a5915a5bbc86a2
SHA256 4d6c2eb2053ec1b27aefe479819c274f1533a7d8c9d5b9e3115512ac4984e7ef
SHA512 7adb2cd06bf89bb214113341bbefb194569aeba2b9feab322ac2ab7972ee24bc3b5d109db44b58b900b5ce69b24f1b4513a7e9d42010e687179a0611c25de55f

/data/user/0/me.bitvpn.app/files/persisted_config

MD5 350b13cde1c31e9a744c2b6e0c04664d
SHA1 8eacecde385a368e68deda12b1767bc5aa7ebd22
SHA256 7bd2c2cbc04a151affec5cab4f4686bf11a1941cbdb1bafdc8399f60dcfd344c
SHA512 1f73fa81aaadcfd8e9cab7415dbdfc442103cdb754877863a53d9a5a2236156effe9bef2a9aba1e5572782016650a280e68dd69fcb75cc0dc2f1f15759369f0d

/data/user/0/me.bitvpn.app/cache/volley/1967220337-444769339

MD5 bd5971a0345cdee33be231b0b37b47ba
SHA1 3e19f2237fc793a8a2f16532cadb903fc1402c23
SHA256 5792daeaf8ed0b86f94685ee0895fc0a2b62acd06a235046b66a4a2d1003c624
SHA512 3ffd8c9f27ce6eee99d1a7b6d2ebeb1260dac20c2dca2d57fab69bf5fb3aeed63729da7006a8a92656867b9211e4c45b71f1f5e06daf2e22354af159cc5b5800

/data/user/0/me.bitvpn.app/files/AppEventsLogger.persistedevents

MD5 014ba391469604c81baf5d091bb5fd7c
SHA1 499e0b82215a2628c4ed6eb97cd9f356c414bfb2
SHA256 38ca77cb065042d1c1d88df7befaec0030980bcd714398f1885a8eaa060e6f31
SHA512 0c3be153f975b2104a1d05ca259e82e9ffc26a9a4e575e35a6e57f10919ac419f12507fb6f8616c6f7ad00ad22239658fcfd3bbf09ca43d293560982ba85160f