Analysis

  • max time kernel
    175s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22-05-2024 12:28

General

  • Target

    ta.apk

  • Size

    4.8MB

  • MD5

    266346a51fdd14bab856229ee06cbbac

  • SHA1

    a12ad675e66990f329d2e0448c58c83a817cb9fa

  • SHA256

    b90ff95b4ae1f141c6f9becce2c849db4fba9e0ebbd2ff6f0a7861a6bd45bcb6

  • SHA512

    6cba307c5dc0c632dfc8f59c94cbf58b3ce7cd753c35c903b2243c5ca8d022be47c14274a01d97368c6f3fa118c1e90b3ae473a973e27fbb758c35e8e7249f54

  • SSDEEP

    98304:w4pYozRwnk8AHgS0rrs7sA92/D2CEj8Lg1afhL:PyBnk8YcU7L2qPcg12

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • rhen.taxiandroid.ngui
    1⤵
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:4617
  • rhen.taxiandroid.ngui:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4673

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/rhen.taxiandroid.ngui/databases/com.google.android.datatransport.events
    Filesize

    40KB

    MD5

    55376d979d33933bacdd1b4989c0530c

    SHA1

    fe209bafa9d8832e57717ac778b16439b4b77d36

    SHA256

    4a87a1ab8424dc8c441f6043705552c1f9963f3432d76633711129d03103afd0

    SHA512

    6a9688e371207a034aacf6f096933e8ca68676211bb5de4a72f5c1bb84b57bb2f1cab100ae66fdcba04ec43314055adb56c749d24eaa9b392d56a98ccd138458

  • /data/data/rhen.taxiandroid.ngui/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    c46f7b58eb4e868dcd7c322e86e681ac

    SHA1

    76362e5eeb169e71b5118498c98eb1cab3e253e2

    SHA256

    e81840fedc5a662cdfb8f431662a554cfcccf5f84079522fe86b10783030340a

    SHA512

    b958b64fede1466d44f88eea5fb4a0701ce4bf67f78ec0f5a7b20f275bd7fa88772b71ce3cf9597efa030870ff87aae3c632611c3729d6a8538d07ee9a856442

  • /data/data/rhen.taxiandroid.ngui/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    a6a4c02687b808ead8593af249093534

    SHA1

    e00a85b9f99219ffe514bfaf7bc7c1a8727bf376

    SHA256

    dae79a3937b8eff24748d20238e25f8351441a1e20825257e7cceec49db23405

    SHA512

    cbec7f07c41c3dd1708cc9b96b68d64d01a88e0b86647686ae97980e2dfaf65ea11aa5123be2112c182b660d23b81147cfb8c2afd8fd6d4602e7aa04ee4dc3f0

  • /data/data/rhen.taxiandroid.ngui/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    5eeece133089e08a0e708153246dd172

    SHA1

    5706d05654dc26ff3cbd5be4b7cf4c3362642aa8

    SHA256

    a0ae88c77d91f4388ca3f563061c426f7eae89b6d61c3d8a4691cf10104a3d22

    SHA512

    0805f31ad7da73d4cd7bdf8b7de46636c4e32945eb33c4f3e7302cda8e3048797fdd78881e45ea30ec7935f7bcc995cd92ac69fa2c2b38d31fdbaa60e3fc2a44

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital.dat
    Filesize

    20KB

    MD5

    db6f13e28075f1b8c55bd0eadaa98cd5

    SHA1

    ae413feb187622072e1c8ce57e51095ccbaa20b8

    SHA256

    d4e9ea3a67bac8ab25373ff69db9d004e310acd331b012dbc1fae27c900775a8

    SHA512

    697120935de9d0ee9bbe1d946302f0715262bf37819be28caae1f5211bbce4fed30f0fb8e58dd7dd1ef319832754937edc73ff7bf0e032865ccc038591761ee3

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
    Filesize

    284B

    MD5

    8270b6d6bd2a07cbc332a4729d8df3ea

    SHA1

    d58d6a5c07b4a5fd837d88524352836b9910c2ec

    SHA256

    468e1763ed8fa5e9e21db7a79001bdb14a2220027d7485517de80060f5b1a9ed

    SHA512

    579d0bdba869f3f23fec210aa2617da824767ca48cf5aff1f0de794f4a0d194f66ad99a2a954575485c9a306feb1cf546875af3abf945e684daa4a299a0bbd21

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    192B

    MD5

    caf5782c23120d68a3225965e4d52448

    SHA1

    d7055419c9da7f68dc6329b3d66cb6405b424e80

    SHA256

    0db88089e3f969a41eb656ff377055f7807019ccd9904a974915a36fdf437d1b

    SHA512

    c06e6f3f8e8eb0990d14c256f5c88e3c27338feb3697c6de4c6f6c2bf9083bb9a55b167035acaccad45ca12b0ac78b0e85c3eac6a8bfd5a43946edf36eecfc6f

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    71B

    MD5

    b47e70d400c336e5dab823496b8fa7c7

    SHA1

    6b15a98f195712208db2c1e185dec67b5af3e2e0

    SHA256

    b880b3735f98c3912746b94e8a66757a97357e393cfac8ce0f4a6efea28ef431

    SHA512

    33335135b70331fba29702b1b2455779dcd4cf33761da57d7b67db70a40fbf523068b3bc79348b917a756ceba9de5cd74158c0bcaca85f9b593c898d6a247a3f

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    194B

    MD5

    1cad49f030eb39201ce7b4a4890d2770

    SHA1

    142d3e3b1085d7ab24c2f5bb9b68c8e343debdbd

    SHA256

    fe99ba3702b71bbeb36739f6a47a1f1e851089639da528e2c2109ac100d10345

    SHA512

    a6e6739aa6db9ee774f0a583b7e252161a166e437318381a5b3decb72475496b707a313b4ebd3e56b9f5f25c054e86961e524a407ed03157ba20a040be347152

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    203B

    MD5

    7231221ea732e7c1911590f30e77d659

    SHA1

    a9f85015f568b5d587ad7f27c0072a25d61a98d4

    SHA256

    c3cd10a7ffeaadc8278333e69540f9c88ec934cafb0d666cf25cf17f9f8b2854

    SHA512

    3b2893032ab09bd15097c122cf3d7957ad9f17be11f9afc9e518a19e9213e6672c6b794efd8cce42ac51a86bbada5b50d22b74908bbfb77109338d4c064df3c9

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    203B

    MD5

    1ae9664b1876552827548ddcd9c5731b

    SHA1

    1da0e8bdf4c32e5f90444368052782784c488ff6

    SHA256

    2552ab135c34e7bfe75a008b3184036ae14d0ca66d9146f316d5390f98787b3f

    SHA512

    2457b4bbb28e4f16db9cf91a8ac7706d8d9afd6d93ad9991493de9bb79aae9da3afa15e75e7f62dcf763aba77ed9d1b6773d1646abdb6297eff9c805ef1b8f22

  • /data/data/rhen.taxiandroid.ngui/no_backup/appmetrica_vital_5de3ea05-4ba8-4c0d-9ae0-5fe77164d45c.dat
    Filesize

    286B

    MD5

    87f9947183232cd1b1ee12641ecc5351

    SHA1

    87468ef89d9af731179236fa6602dbb019363d35

    SHA256

    35012bb2b52852d99ec0b0cf9c570ced6e8a15c88e6eabe854eed809e9991cee

    SHA512

    dd6bb4d16411ffc65413cb7f317371c9a4370bf6ae120b8ef8499b7154cbb7807f0ebae6eb8b2beda15e1f9634a35cf70597064680c3d1284abb001d07ef25c2

  • /data/data/rhen.taxiandroid.ngui/no_backup/certificate.p12
    Filesize

    5KB

    MD5

    685abd8ee4b7c18a2458ea1508390be5

    SHA1

    fc35ffe3900646cafe2ea3c26dab9ff3f8ac62fe

    SHA256

    c9a5cb8c37ea2d780467974ea17fb755fedd0580568090a79973fd4d8ebbf1d1

    SHA512

    053a5371e3d4a50f81322e30f562e53f2271381c31606710f8fb424548c2471e5bb53378f4b60fb0361efcd45fda9f660607e1e8787ee4393aeb9158fdbd6e40

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui
    Filesize

    36KB

    MD5

    a53f09e9e086590430ee330677e3d049

    SHA1

    0a05b5aafc5272a8fefacf0e7a8d68e069389fca

    SHA256

    4d13103f158b587ecab514987c6fce41e272d5091a6685a40f0a4f1cd2340fb5

    SHA512

    f6b84e2659e39b8019d85a9a909ffcec9f5a7bf7b123c671a4b1df4596be6c8556e7ce7ec0fd8debcdfa99694e74ae0d6b23299076fca1b731a64afb5636426d

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    512B

    MD5

    06de5f3e872158d4d22409a8be46967d

    SHA1

    2775d6a0c09770c08c526cd655f278caa3583640

    SHA256

    8108e6472941d291cbed3dd1bb3bb317bea189fbab734381761776084968086c

    SHA512

    f0dbde047f3e069c5f92cea5db7a9368c7040604a8777ba90d36083e92655fd3d7effcacd32153fff8999e3d4eca3b357e8dd08a64fab9d106a74c282d86df61

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    8KB

    MD5

    1d7415519fb01d467cb1a918ae5d42bd

    SHA1

    04002a90839734595ee0576680fad0b544ce472b

    SHA256

    a52c5af0968e4c2de30eac4045fb2a9f42c88547bd35b94346ec7ae878ba7bad

    SHA512

    7b1703d85d6cd32206b38faa02c4c910bf73bbc8a6b5e0d7480c93e9cc88f94795d670e1db2f007b648cbf2596cc53021a7dd6f8a981116321e194e3604306aa

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    8KB

    MD5

    eef83b21ad7b71515c6c55c92b0b2330

    SHA1

    117b6961c292a67d87f2962d4e043cf94e5b6a44

    SHA256

    ce49d40f2e40e3cd366907dffc7a67543e1b63d9cbf976f2c738d0c111efd109

    SHA512

    bcfc4c1feffbe8c0df3a16bac7c883367f86c2f1e2744beb0891c409edb7cf90c97388371e79a143861b69da5112659e53a978fda1e29e10cb702ca06db836ef

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    12KB

    MD5

    a8fd2efdfcd3526d5f2155ac137ae54e

    SHA1

    8a3ba3212f28ff916645751844b6174c9f0c05a4

    SHA256

    cddf05c3c3f62e863b3ba6dff4a673ecf336ddde8986ef30c930caab91f0e5ed

    SHA512

    423beceece59918650afc3c03080efaf2647f93ff83e3f1ffc8b442445188269446e99c900f6078622517446b09be16eda400d53fcdfbb8890087407009b4349

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    12KB

    MD5

    80395f7b5dd09964e143f2f6c80fa225

    SHA1

    1317293bd885cf0b4c284d8bd66291a970dbc878

    SHA256

    5ffa346120da8b007ce1b1a73288adcb6f50c15d4a2003344f54c31fde1e01b4

    SHA512

    4caaf71815ee47f4ee288594a2a06c054287e52d1abb7e73116d19e8fbd5d70a75ead449df30d6330bc4af164d0ababad3dd14ff646c59350717ecded3da9fed

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui-journal
    Filesize

    12KB

    MD5

    1c42142767a9a6e253feb72624f9a7d1

    SHA1

    551c129b3a3e47867cd39f79248985c376b48f3c

    SHA256

    84b505be6a5982d2ecb4f62461c66f9b67abe1286ebd6e3a5db9cf9227007fff

    SHA512

    95d822ebdd9663d2180b04dc439592e68b219d036eb33b75ce1a1e5420078f5f865be1b54c811f5dff6d3dd44fece0ce8f84a5851e82a254a3fa85fff2a70c3b

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180
    Filesize

    36KB

    MD5

    9a4a0e9b2e08f5f7ec87716e348e13e4

    SHA1

    9c1e16544e5b3bc4cbe354cc85697223c1806151

    SHA256

    5842db613c662fb3753e6acc3bacf3e031dee60f15679714cb82387dc59934c7

    SHA512

    151103da5be3eefbb3ed5200ca56215ce4de6a3417831cbb9c8095ad7cb7754e98526afa406ff350d44c473a52978d63c22eef2398a659931335ec8e39a66d9c

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    512B

    MD5

    8f2dddfaaf0adbbc18ca0973d7e7f5ad

    SHA1

    44b2c48f2af11dc6524396a7635e8d28a49eb4b2

    SHA256

    57f64e3d79e43c8aff29cbd5055878b459d4dcfb85347f2568d81323c35a4ee2

    SHA512

    e630835d2ac3f030f7d3b08e04ec58641e85db3611c7acc5e02e741e1c13c2c0ca0922bf3babaf71ad99cd5ec69450004542eb1585d66e044d3ffdd79e67295f

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    8KB

    MD5

    37ae583011bd42a0b198f1c60bc26d17

    SHA1

    4dbd7ed0dd65fb1ee297b2fd6713f5df303b3aa4

    SHA256

    36064f2587570d101ca922bdde51a0eced1364ecc145cb4d9358aeebe59dd388

    SHA512

    d0cadf2b776cb999ef531831102d9dce20598cd2e7201a42265dfcc19145c7084b37caccf89dbb8374d66f4892783808a99050ecc67124f7e191c8eb6f63eb39

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    8KB

    MD5

    7ba9578880c36a88cc52296c7cd4e26c

    SHA1

    70901aaf165bcd3199aa1b9759d465df812f73ae

    SHA256

    c9b67b27b6cd2380daa54c4841360f081891eb221a6d684c29e1018c10b5338b

    SHA512

    b012fa3c5c151b5820c849aa8305ec17ac6b4fe6f5cfb2cd7947e50e1a9e65b467d622ff013d6d667e4a075356483f0c3740454f56f98808e78f50c2ea46d5ee

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    3dae8defe4360b0de62559c7ba04a2dd

    SHA1

    cc02bee481f88c13ab3e72508fe67b16fbb2f571

    SHA256

    fd6b0568d86c9012e20532160aea2ae15df480d76e96756e57a9977089adcdaf

    SHA512

    6ad82f91383cd639c8f0404a4fb0f8c10cb5bd9e03c192c5767c99cc84cd7c6d4c463d585a4af2ced01f9d28a27de58799c3b99067611c9c8ee09052329fa3f8

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    d475c9bb7fc96fdef368f28fba192336

    SHA1

    63133a105705211a6a5c307001512e7ea97b8cdf

    SHA256

    2c0405716870d68edd11666520b9927b12d8348996e519d7a32541d7c5ca67ae

    SHA512

    d3a43b55e00befd6708b6aa87d33a8dddabad54c8d9eecc24a96dff3b7813c3869082333a71863dc61e294e9c48b0b5bea5583b9335138b4057aad6ec06ae0b4

  • /data/data/rhen.taxiandroid.ngui/no_backup/db_metrica_rhen.taxiandroid.ngui_20799a27-fa80-4b36-b2db-0f8141f24180-journal
    Filesize

    12KB

    MD5

    2cce4fc62ae69e4f1e9457aedcede65f

    SHA1

    85d9a1b629b714fad4a4fa8767f2eee666042229

    SHA256

    96c228dfea72a1a9ad6fb5a7fca0e67a60c8c15b00ef6a6bdc8b37a53b9b571d

    SHA512

    9c24fdc95b15460e3918629127da85f13ac911f969fd70256d0869c5e4064ed1d422c827df70c19782865ac5f156fee7e19d71b543ccc376752c8eb4316b8e27

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_aip.db
    Filesize

    20KB

    MD5

    bc13fd4c536bd6b82b881dfe658b7c54

    SHA1

    b418a2467bb7c451ab3adcd02e3f16ac0d43ef84

    SHA256

    028b0b253bb1e0218714b57af1d6ad7feed128de9eba0f9702eb1920fa46d6fc

    SHA512

    5fd119a7978b8537199b0836376ea4c9e4dc627e5590c8e54c66c5b36ed79cc2ea6f50fb4507c683d5c5c52e623f8ee3092d4d36ea71d7e64ffd192dd39e4e3a

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_aip.db-journal
    Filesize

    512B

    MD5

    4a04f93795eac1b2015205d419bc57e1

    SHA1

    36a54c414631d5ab10e630ea2f4b8f79adc72867

    SHA256

    8156d92c072735b80e89ad26a95413330e9ac0438bd3a4143a0963cebb4e9ce6

    SHA512

    c15741c4258d5a3e82294e7130bd6df6f743f75dbfcd6d1be15561f4a6f4cad4ba54e3fa9626e560c989e69384e496d3b5dfb07fe26be66cbe6bf98908159d77

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_aip.db-journal
    Filesize

    8KB

    MD5

    4b55419e06f98ffd0888a0e64f1fa643

    SHA1

    7a2b92970275ed30787eb72b515921ed38b2a2f5

    SHA256

    0a12d351a820939bdd5f8d4dfc16ab7f98008453c279fbcc504099b8812d1f12

    SHA512

    a6e7fe1421ba8e1f07f746ef6952e2db94fb3e0f75ef68ee70b82002020ff2ebd5fd608889286cae0b6dc4a528c10b283da24c5377e452c0e464c27242a23227

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_aip.db-journal
    Filesize

    8KB

    MD5

    14fe77771eb1107c73c02a1170b692a5

    SHA1

    4e81746214272605b4e948dbe56db09046817fd1

    SHA256

    9cc8534721153ece07a71ed81a9412d0b5b492c113f0d8e90ea64ca32ae1230c

    SHA512

    dc14ee4a0ee6e266e3e131b77d9f25d4f3ac9002fbaddf8d3ba0dd346f387bb820f679481cb1bb2c6dbf315503d395aff3eb2ee7694522739c7320669cb3d6c5

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    2dfad1124cb7f9a7ec9534accc3a0853

    SHA1

    efd1b57fe0ccd4bff6c11005bffd0c467dd7daab

    SHA256

    6dab51b89037ab71d43136ff3a8b4a3276fc0f2dc2ef848937f372f54980b007

    SHA512

    fdf50173a54d71c1d63c4258ba5b571efbc2379afac9289cec9ecb14c22d6a790deb9522b76a628f0b012c06541f3ddd8e451d8b2671d73cc0ce5bc6d0b82bce

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    21b086203a800818821da66de1f4ddb6

    SHA1

    aabc9e1af51ff563f04cdb80296d3c49a3597db9

    SHA256

    448175aad39ab7b292f3c169f3f888b59003b81f2dc2e69e9f6b2aa38c1b1be8

    SHA512

    303aadb1f1b89d3c3360a3d517ae712e404636ac554e5afdf2ccbc02ff567a41291749484fa781bc5df61ee72531d085c42305336e6d9e6726423952f9148f5a

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    3b08d8afaab5ba5661a541b432dffd7b

    SHA1

    952c96fa07c244e5d5bf7e7e2e9943a91e7d58fa

    SHA256

    37591978e8562a817bfb991b14dcddf9811e5562e71a801ef805f5115e09b941

    SHA512

    a939d5dca6b90f9a0e6c88a0137d522fd51b7af331e57d8cf6c9d5296f2ca0bdda3c5a9af55a5006a5300e3bd840339b684b554ff03b2c95b3144558a91177be

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    46f045dc011a3d80c4a5dc8d32148d0e

    SHA1

    31906cff3493d6ca754562c0c97f62948c5a0ed2

    SHA256

    c4e47c1b9e45763092d0dde25d7bc55f6118fc3894e71ec9416d1b0677874c09

    SHA512

    e2b4f5d58829a361d4abf1c43942f715c3da9d1a65e0716c0495d4d61b03699c17431ccce6746584a5eb1a2d5a6829dc951d57e3dd8cd4b480ee2b51b5516d4a

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db
    Filesize

    20KB

    MD5

    f908b0cd6180bd257cca427e3f5a8451

    SHA1

    7b840ee58351cc5c555f8058c6eb8b845b0b3e4b

    SHA256

    97775a46c65b4cf8f25d3237b14c616c7137ec35da904f91f583263388d44433

    SHA512

    18be573a58c2c9eb084e792f9ba35afd9225bca963e5cc8d4a945f6e71391be6c16f4ed6be0d9e444e752e7d3be1704e25a545cd5b76c23e828788598012981f

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    8KB

    MD5

    51bbe92f2b1bfbb04d5d9e8c6f4ea8c4

    SHA1

    3b654442d0dfbb32942dcd078d58dd60d5828631

    SHA256

    2fba69457a8b37ec354d0c20c86084283bdd5ddcfc9e5fbfd56e643bb3705077

    SHA512

    98b2255d7e228f0c4f4f0dd3f85b6978868d50d8c71e46c38d0d4f00610a547b6a06bb968b2e40a71ecc492baebb85780862107473f9b8b39dcc0298be212cf1

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    64fdafe479ccb2fd8aeb05631a7fe82a

    SHA1

    c3075423b1b4f31f6772c51b28a30f5dcfab2dd3

    SHA256

    e2ecf245e44055512ae5218fd333a307ccf983bd3940e88131203ae8a51356d8

    SHA512

    28069246f8595bf398f1578bab21c2ad1c7539c936bc6d6f26149086fced1c97c7c0a61c0c9298efaf86a3057448045f2d6fdd2df08f8526304ec91ffd27483c

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    1648e29a9e5f28b2785fb064a23c1e74

    SHA1

    ccd3d60241ef3d6c1e99ac6996a39ebab5e1b749

    SHA256

    43bed667137696fc70ae7106ec1071a89250bb827a4a5756ad8a78729337a517

    SHA512

    b3a9ebce9c10f89ba9cc7bf887ded27ced99fc80a1d4ae840267c8eb59a25fb95477634f404c2b64d0bc5cc62cddb2e065ba3d90fda91a5250ffb9871c83a6d1

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    20KB

    MD5

    c7ecee6a1dc05556178a2f4d78968be1

    SHA1

    556143e558666cd1c4bda447c4532eafb1559f39

    SHA256

    11d52888a65b035102f1f5e13c146779ac64a3e643349563b444e13731f19060

    SHA512

    865b05d50d187c0ac2029e4441a3562d020505cf859883675b733404faf8128ab8a1a4a39ff9cac5450366367294544510467d95785484e9c6e4367425a5b349

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    9cda5e79f5e74a0aa3bc808d073ec5e1

    SHA1

    0466658e73923e4896f2e740dbc4c30be216059c

    SHA256

    91b82801d06abcdf7cad73d843755f6fb97afcfbd40fe64f021184d2b496bc05

    SHA512

    cdc349c0336b76a5d02e81e00afeab12a252ca4417a870951de35d3d7ced822df9e02ca58aa120f5b7b2c5b89b243249542cdc98e04080aa4d65fc0e5f8a4342

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_client_data.db-journal
    Filesize

    12KB

    MD5

    13bdf96f753298492c91ef3522df7595

    SHA1

    6cc9a95fc6206248802694e3b650cfa0606a242c

    SHA256

    6eebe4766cdc7b0d493e7e103aac01fd6002d271e7f333b86ac0dd92c65807c8

    SHA512

    77899fb7c7dec9c515eae9e55c405363e10891f86f232070a18f710ac35dd003cbb545de96be9896d2c10be8fd5b2b809f76d5a8d47153b220acd57e8f75d140

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_data.db
    Filesize

    44KB

    MD5

    550e49db68800e0f7077a66e301b0ada

    SHA1

    4b1c922b560c53104719445915ff3c6bfa5a4cca

    SHA256

    d8a96080e4ae2130ee61c7d38e2b3d8bdf44e1ece5dbc2642451e3517d67266a

    SHA512

    68aef1a3c59e24e13b885866e00eb9371f4704bf4e80e38f6a0051dfe0df128377791dc2f59cfb04458424e1dda5ef69efc1ee79b3343669d3d11c9d3accd304

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_data.db-journal
    Filesize

    12KB

    MD5

    f1d7889e01d76321c4c866f1814b132e

    SHA1

    7e435218103bbd903a54c0fdd536e4ec323c6ae0

    SHA256

    1a0919b892f0d91e525286e9e7f8014b205fb0b591abf8ba6cb6f192a50398d0

    SHA512

    c8600c76407a59bd1726b11765462cec1bf98c756ec21375575bd212245ecd93fdd350ad93bdcafa44f633a7e4603092d347a4a32412593e679741d56a6d06f0

  • /data/data/rhen.taxiandroid.ngui/no_backup/metrica_data.db-journal
    Filesize

    8KB

    MD5

    556df015cc73ff42c5f2b0bc13d3d17b

    SHA1

    dde830a8bba66d24bac3f1875cbd437d61a187ec

    SHA256

    e02b51f0a5c4332c4f54f928700aeaa36f1338173f334b601f64fb4ef1064b93

    SHA512

    57d8c5f674861407548424201cfbf620dfcd301ddf0b0341127c10aea7a35db78d40d78a19152f53ba9d661360a6d4f310d1bfc30890c833e151cce7b3d3b6dc

  • /data/data/rhen.taxiandroid.ngui/no_backup/uuid.dat
    Filesize

    32B

    MD5

    90a27b2f75e69b54126dfefa0fef202e

    SHA1

    912da448367ef7f0441a9eb047f196e750d57cdd

    SHA256

    76e08dd01321b3057efe29289812cbab0d967d35c78e0acb936ad5eed05769ce

    SHA512

    f607cfb84da05ad621cb9a8cef5d51a1628233d5b520e81c98ce6a1737cf7ae20dc123b280a982aa58b11a4abaa85fecf4a1b2f573d763f598b349a1842fb0d5