Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    28s
  • max time network
    61s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    09/10/2024, 08:09

General

  • Target

    04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712.apk

  • Size

    96.4MB

  • MD5

    e2c2ae5d4181e82c2c8511aa3c573260

  • SHA1

    bc55e49227eb619229c7583d40514100c1877867

  • SHA256

    04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712

  • SHA512

    4651550ae57027ef3c4511a9195d9a349830dbe61b440a052ff0168e2161332793f50a47a67078b423f6a673f875a52e9e64465a913d914c82623165e02341fa

  • SSDEEP

    3145728:THfDwzvQgwXhessH6zD7ysCtmsigFxE8Oad:jf8jQgwXhessH6zJ9gQid

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • ru.rostel
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:5173
  • ru.rostel:AppMetrica
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5312

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    69B

    MD5

    905eece3b8aed7c7e4203500257a6260

    SHA1

    197652a815a892b7d970972c75ecf41374e325a0

    SHA256

    f6fc9d23b3d268f81fc0fa2218007110339693cc79d34beaa6c1e582c6182ada

    SHA512

    4b568109ae4d25d6bda65e81a0256c956dfa957d02738844aa9b5f47a80ae4950cfdcd7685c63615f6a2693460392ce5ccec8c1c00b61f62252107084f2d9ef3

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    88B

    MD5

    f1b4d63f45ed944cbfd2251c99b5ea02

    SHA1

    43fd3ed20c06997a33a48ec505a571c941b9acbd

    SHA256

    2e735633a0357ce7d52661da69c76c65dffa938f0f0d3afbc20a84a912c5470f

    SHA512

    4cf134d75be12f62df9250059059a194530041a7b3d49cc60760e12b4b80b3c4c73e3021899fe05a2d21aabcc799325cdb153192648e3b9db588f23cd62df2e7

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    119B

    MD5

    44f1cf0ce9349872a44c2e0c74c7c1e9

    SHA1

    fdd5d6c61f1fc7994293968864a9c39728764e22

    SHA256

    7c36b241c27cfa85f486b5936037f17aff6adec3a5e543459051d0135525cf5b

    SHA512

    15d43e320160bf3963c3a73251c58cc98b47c768de5b3fdb661137c5862760ee579a1909a92b773f06a20b7bf7684fb92b8ca76994b211033ca94a1f8385ce9e

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    149B

    MD5

    67aff113534a75df0fbe31cbcb067a55

    SHA1

    ca4ca362e62c86b204e16f303719e99da79c8d90

    SHA256

    5dd9f623372fc6b1508ebc268ab9b6de53384a5126d55c1b2e46ba711633c721

    SHA512

    317b9b0df7d05d40f7901935678dd553ae530cfeeecc226f1f8caae174edaeb47bad033028f3cb5444e44af9a52c7ee73042fa520b0c57b9a7ff8d8b0f429c7a

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    181B

    MD5

    1f8b73ca65dcf9f75ba8de8a3637acb0

    SHA1

    7e5597ccd4aad6ecc2051b81cd2a7a51fa1c0cba

    SHA256

    557b192cfa4339c8181d3354d82ce4147b70e59861f530a5763c06e48635c4a9

    SHA512

    230560956ec362a9a425f59e2633dcef4a2d10ddd4000b572bb794d62eec821005e6199dc40825cff4169da64a87704d9f53305e8560a82843f47097ed3d5165

  • /data/data/ru.rostel/cache/default.tink.new

    Filesize

    205B

    MD5

    734a85420cafa394bc9a509bd05e87fb

    SHA1

    6da174f92b1c5447ef17cdcdd4479d6b7b4c2280

    SHA256

    66e7b2ccada982912483293b08887569f96dc63064360fb28c690e7fb3e021be

    SHA512

    a7110e06b31915e771b11905d5d14749a43e6f99facafa0f5e7cf5b1624ce7997ce956e8c92b888c3e24ee40e6c42672e14e8e5ff6c4ca85b4164ab882e21d20

  • /data/data/ru.rostel/cache/mpgu/api_cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/data/ru.rostel/cache/persistent.tink.new

    Filesize

    271B

    MD5

    5f92dc2f2e77ad3956ea4f09a4cd81ce

    SHA1

    c1796cb1b0507b765d95af73dd865bd9b733b033

    SHA256

    843a41c42d3af13fac752b734003e7122b2c4db68b4cea0274e4ff6cf1814d37

    SHA512

    086b4393b848df27ab66777f13e890cc3670a163a99f57ce8e2a7ae812e8ca368629cac92391348b0af4de5a7427100f85fa31a24e6efcd3e591136e5c376d8c

  • /data/data/ru.rostel/cache/sensitive.tink.new

    Filesize

    512B

    MD5

    049e435200ad27c1bee0019c6746c8e1

    SHA1

    111288e2ef2e596469bfdbed7f63709a13fef5d9

    SHA256

    396209b13fb22869eb44d901c1c4758e64722ff6aa327eaf6e915ae8816f5dc9

    SHA512

    18f3ed29a8676278bf0a257b7a89462c7f661c95dfda560e0327493bc54eb8f2e48d3461f55ffcab7793ce7e6fcbc19fc4474ab7033b43fa34e984ff1b4c4a7f

  • /data/data/ru.rostel/cache/sensitive.tink.new

    Filesize

    12KB

    MD5

    6ea0bc02eb6112eb64fb3333676e4b74

    SHA1

    72c5b61fc7993f10924023c258e7e4236ac50565

    SHA256

    4402772cc5527ab63b17a0df354ec80f81700576bad690af9c0ec08edc62def0

    SHA512

    61aaf3f2212c1365408bf3dd4530f6a8a214fb397ddfde26bb8abd4175042e7c11c5216491708064a3189fb868076dcc9ea203b6cfd73d6c34835f25bfb2ace0

  • /data/data/ru.rostel/cache/sensitive.tink.new

    Filesize

    136B

    MD5

    69f87650ceee72ba927a1af17380f8bd

    SHA1

    cb689b8c52180ab9b72c5b95f043188bf60e70e2

    SHA256

    5b206e0e96a7b07e986ded752770bea29b9ae3d74c3bd02feb45a8bb8642dfb2

    SHA512

    73ac3c7fa750bb1df935bcd12a80072e1b6ce45c9155544df031f4e0e5f7cd1e6bfdd0fbd5b6b3cb877b3ee386c53038bc6b6b67ee2ba53a8dd1fad42ea08447

  • /data/data/ru.rostel/cache/sensitive.tink.new

    Filesize

    156B

    MD5

    ee71d62e05dc2ef4f1b506812c2f1ac2

    SHA1

    f6a03afc6818aafd4da51f18d4e626817343a787

    SHA256

    c2d579c9f91be33063b577fcb944f5f8b11ca789ecd9523fa490aeee16294134

    SHA512

    923afadd5178d85e75df6a79fcca8c4ee9955deca5fd15d984481ca2688a7863764c02502e7a59da49e825e769a31aaae3c8d1342ae8350dade8a43c00c4e5b7

  • /data/data/ru.rostel/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    bb537c4bcc87fc808371715827b94dcc

    SHA1

    9811cd4eae0d50b1c25e962b6a3cabd6f82e6f7c

    SHA256

    abe19a0f326c6e6fafdd69549fc580f560c2640026e002cf994949513900923b

    SHA512

    5dffdee7b13004998811566eb9b4c18f1acf1190439a1ee38b52869506824e0e7390b433895d668d9565f41b06866722888dcd5d9cb24ac4117bf7d58259965d

  • /data/data/ru.rostel/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    94731f161e9ac65f4153129da3f7f852

    SHA1

    4673e831a906cd58feb4b48b14ba6fb14c4997bd

    SHA256

    64d775b99f2dce91ef0079d86c9d2b29a8f1f42b7fdae74c0b4f4295b02279c4

    SHA512

    6d98b49767af818611f3035eb378dba6cfab406443f02f24eec00fb8cc625afcc9c0950591bb21be100f41494c6d7ae15c566a52d1a4ddb10b89bdde86fe40ee

  • /data/data/ru.rostel/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    273d305990096f0aaf75f4e92358fb47

    SHA1

    bdcc485414076ea54f7a28446149701099b4c8d8

    SHA256

    842e39c61386df7259bd4ebf91226e5a1865a7446f34910012802f7bbd48d1da

    SHA512

    cdac258071bf1409523e2c7aba8b5661c03fec791ef83b8d0bc493a34ca56810ce30be495dcd28eab38698dd22a8b6785bb6fa821c6785bc453585b0f400f31e

  • /data/data/ru.rostel/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    0ae21cb669b4e9231482460c3a56460c

    SHA1

    f99751e77e73218baa4bf7958daf45d1812ff123

    SHA256

    e72891f3ee412986c90714b6531e622b4ff72545d0ff3c0375aa514dd3537a11

    SHA512

    8d1b8a9a90cb05480a27f779d486d5383ff4bdf2f4491eb728672c4fee22e61ec4223a700db2190e610eb32fe15f3878b90060c1ddf42127137d2e663d73773a

  • /data/data/ru.rostel/databases/com.google.android.datatransport.events-journal

    Filesize

    24KB

    MD5

    72b5bc410210ba2b9aa4d50d0b0e7f28

    SHA1

    13b5896ed490909f960c4968e057e504c092eba9

    SHA256

    427c7a7ab2a64f923bd4672d6964899852b74011b63dd1b3f2987414ccd279dd

    SHA512

    929f38aca1b34ba42605f4ca74849408abddd977ed132f422159873057c4c5595a7b0a1b4ac6b0702c7852dc0759961bcb65228a9b305cf9140b3113623186e8

  • /data/data/ru.rostel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/ru.rostel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f546729972333bf1aaf96aab038d00b9

    SHA1

    1851a3de56a7986e06fdba98aecea4ffd11e34c8

    SHA256

    f276564d6acc8c2922dcc9077632cef2e98525ed41fdb7f2e86d2d7e11bb3b85

    SHA512

    1196e146b1a32df6d4e119525a6c3c58b66d08927eb1d0d7b4def9bd873f6217b1c16671f9b00d471b87ac4ddf1b4b08d829adf60b3873e6636b213ac41e72ac

  • /data/data/ru.rostel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    46adef583846ae20f39682b9b91162ee

    SHA1

    b989795de07fc6a4f4697a01eee189e87a256155

    SHA256

    4e3cc9343b553ddfedc4aa1b755d68b51956b51e0dc1a7051b0ba4aaf5b055c7

    SHA512

    aa15f513148bec83cbf1090913a1946c366606d0121e92895898def30e2ebeb377886ebf355b7a00b9c2683c19954fd7bd868a46cb9f528623ee81b4b7f24e7c

  • /data/data/ru.rostel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ab16fa27eb1eefe07224d24815eb5242

    SHA1

    88db8bc4abadce9f5c8b0f6226d64a9a90cd7ebd

    SHA256

    257f33b247f12fb5ebf4719c6c24577d27532c001cb55258a9809c12054be923

    SHA512

    b02d367d11c69960afe8d4749d95fa9886d855613e0259a609a1ba4c46eec85c64f42d058acf216c99a3893c1425da7c9ccb9aeec15ba79af8fd6395037f76a9

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    12KB

    MD5

    136b274a6497d90f2f6834202c6bc56b

    SHA1

    e5d8d1b0470cbd42cce13c9cc4c68f9856423cdc

    SHA256

    e71e8dda2d373aa30a3c674dfe7f121850b6e496665a68c8f8db2702281a7783

    SHA512

    b67288c4ca7fc5e713b428450248b080ff7781e746dd9fb9a02dd8213f0297eaf002919a3797375ca6f24a7c331f3f70a2d7320f5bd0720c64aa3ff69de1a9cd

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    20KB

    MD5

    02715ce0cc82080138cfe9bc0ec96b65

    SHA1

    0120fd2fa12033dda25026623ff143893d8a6195

    SHA256

    5e49853be9fce5cffd548a07460653dd14386edcd1da0a37361dd8749db1ca99

    SHA512

    112ad5f6677776cb95cb7002916282ac5099a3f8c5f9827aff06e9d100c08603d44a777d35240445359c6b30e407dfc5ac1140acc2e33ae34ac4628259b9734a

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    12KB

    MD5

    7019863dae80e6af4fe49506b4faf98e

    SHA1

    9893387952a139f2fd45190b8916bceaf7cc58a3

    SHA256

    91cc6a4d3bc4cc3d6261671410fa27a6d96c921a6211e1ea0a8f23d81446820f

    SHA512

    da9ff938f30196a2fbe2b18115fdcf36cfea2cf46c48d491f84e0c0e54845e6d4d7e6ad3a2d1460bb4ccc1d6505178f88eecdd3ac28407b1d6370d84ca4b1696

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    20KB

    MD5

    e3464c9ffcd218957fd2fd22ef0d2e7a

    SHA1

    f0f13d9c35ac3ed81100f595d8da884f1366926a

    SHA256

    0af2744e5adb526ad597bf8030755d7941f2f1db5a75c4418de547c162806744

    SHA512

    0111549bec3664a8e7a5a261ee5eb06fb608a0e39f2e1f8f6be29b3f3dbecea8bc7f5bd76fa4ef2dd448555c5cb3753dca5c6174a2709dec5c757b989d563dc2

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    7883045cc9515ac870e25ee7c3da26c8

    SHA1

    0840869e2117decba45e3d1562ff6885eb873062

    SHA256

    766137791734ebd7d20afd03752c574c5e7e94f723344d22ac473b24362d995b

    SHA512

    5f794aca9f3955ab7be0afc0482d18fe0b5c3b82f0fc6796636ec1fbdd0ec958bebc4fb62a9ac51389ca6e82c6db55d286c0bd72a07ce4ce8d522d31345b97be

  • /data/data/ru.rostel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e7ba8dd031e04269c07c2e71df43aa17

    SHA1

    adfcd8c86c7814a02b15a56d52faaf6deaa026a7

    SHA256

    b1233379b09289f26ba31b525ef2ddc46c976413ec72451b28207dc5f7bd319c

    SHA512

    ca2577fe61478eab8e05e8f747526cdce0b36e866ea03f27784ddcfaf78d480877034db4ea49a1d62795cca13e0581b0b623f2ba2e84f1000688d48b6bdcbc92

  • /data/data/ru.rostel/databases/health_check

    Filesize

    4KB

    MD5

    e883e174928f415a80d82e479f4a4d7f

    SHA1

    b1922533ab3cf56590923aee4f3ef46db8b87116

    SHA256

    d6350121ff3729ff487150a354ff4bcd81d8df7aa381d1a2a5b2bea8bbf41c23

    SHA512

    2f6e878e54eb1340e99d18d306d3eb9393a8ba678abd07ac85c9182ebfa658d60b376b5f27cbb11f3d18ac849939dc2ee460a4c30000a37e313f59ca2a1e4f8b

  • /data/data/ru.rostel/databases/health_check-journal

    Filesize

    512B

    MD5

    e014469fae2468e711744ed38be07499

    SHA1

    f2e3f545bfd9defa401996df5a69c388f4098b09

    SHA256

    732e252e45b2e7763857c64bf0792424aef06d33827a6f7db51205f8e4363436

    SHA512

    5fbdc0d04e49efb28dc88aba6c1b0bb3957199d38b4f8630056add0ab82ee3482864bdee90992d159e8fce37e5133202e77f6f187a82b58fd932577be8303a17

  • /data/data/ru.rostel/databases/health_check-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/ru.rostel/databases/health_check-wal

    Filesize

    16KB

    MD5

    cdecbabf8b5e2a7e2833dafc25b8cb41

    SHA1

    50ebb12849915ff84d427ff2e88abb7ebd36b0bf

    SHA256

    0cc36cf8b1a2f06711e02557b50767592a6584f15e12a65e5eaec076620fc00f

    SHA512

    25a55bf19b8b0d8868afb852d314984e2aa50c5a3d6453f885c4f2b6dd9c0716b0c36d9517eaf8fa54bfe49413e833d458f75e92d8facb8a67af67758646b554

  • /data/data/ru.rostel/databases/health_check-wal

    Filesize

    36KB

    MD5

    0f242a6e291c26622a847a40f6a96185

    SHA1

    e6b06434334443334cae47b5e0ca57545e19f707

    SHA256

    39c933fdaec22f3d2f64cf19f4c506d5c0730123e5558b6d783449a9bc30d60a

    SHA512

    1a3670e53322397d06928d467f3676bc8c29902a8cb2b619bd0497079bbe82f3405b08b5495e440b9d955cb3a7be8e473faa4437de061426428675ebfeff4268

  • /data/data/ru.rostel/databases/health_check-wal

    Filesize

    44KB

    MD5

    540566825eff190432dbe3b4453734d1

    SHA1

    699556b1e19bd74c0462de4b6289c7e14cb56ccd

    SHA256

    05dfc7ed8477943bf27573a43b18166e40a364891821e76007e0fab85877ede6

    SHA512

    4c0ffe5c38f89dbef3551adc1dc55f31f755080e310ba2b517a0f185a44e3af1048b550f405d324d3e510faee1042671df932b9cc5a7bf5658897a9686b3c0f8

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063AC001DF00011435D806745A20B3/event0000000000_

    Filesize

    74KB

    MD5

    e7c62f583b91c8d73a868d3acf548053

    SHA1

    2fed8e7133d1c0078849ce024413540c12f9f521

    SHA256

    5a18f76f906c608bff3b200cd7eb4e321e9a6761840f3c2f08ec093d48814b7a

    SHA512

    6d1583e305ea56c21b4f03cf5cee7933f86b61f7df09296cbcecfd7cabf220d8d62dbe7358619e02b8ad52ebafc46166d6e0370389b127394ab59c60dcb19b9d

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063AC001DF00011435D806745A20B3/internal-keys

    Filesize

    107B

    MD5

    58c6ffd18aab0e3303cd49e1d2fdb9c5

    SHA1

    7dd517bc9278addca0e9c229dca834edbe030b44

    SHA256

    2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f

    SHA512

    eba20532172d1bff0a750a5293024efd98c0c5822f3f15b469d1a54ce917ea78cc7f644c3e7d7a59dabac0226a942474c2a481f970ba8b519c24bf0765c799b3

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063AC001DF00011435D806745A20B3/report

    Filesize

    12KB

    MD5

    eb4450159a46c77da8dcd946bfe00b7c

    SHA1

    ff7ac42b2da3028dfc2a80e5e4bb1b11b7cfb9a0

    SHA256

    89b7aa6aa18d537ca16031ab9ab1df1f5aacfe443352e2e5be250c711df6461a

    SHA512

    095ac3cc586a3c42ae40814557ebc110527ad2f92e965f8a63fabe377ca28c218945aa763056c0b29405589216c220c5faecd5d5644c68a856d728083c52259b

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063AC001DF00011435D806745A20B3/userlog

    Filesize

    8KB

    MD5

    15fa139c87007685dab00b411319676f

    SHA1

    0a2f56667fb2508c08081f4a48ae23c5c7f10f01

    SHA256

    139961683f4a7ad1cabf4df0198545d36ee7aa496a2dcf0e6b9373dde7dfa8f7

    SHA512

    a494e279ce90ad932a941001bdf29363cbaa81a2b22d5c8e80df8aea1d208cc055e8e90f8d663d4c4369b99282745c9d40f8eee8c092e8ccec741536fa375391

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063AC001DF00011435D806745A20B3/userlog.tmp

    Filesize

    8KB

    MD5

    036bb31505bf783b6a123c6824c241dd

    SHA1

    0df645e3e7f7ffd161006b8969a8a2c558e30525

    SHA256

    eb09f57b8082b978238a74d770f3163ec3f311b649d326cae2fefb527ad30806

    SHA512

    692e29e9caa09c8ca862320a3e8d013e3a207ea91c514237d473a2cf7b1d3c990a3e23712b05459c9e6238126f28ad7b25b4b123fd4a8bdb2981efef0b79b4c6

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/open-sessions/67063ACA02A300021435D806745A20B3/report

    Filesize

    801B

    MD5

    d89667b88c499f3e1e9049c4b0710c24

    SHA1

    b48f3524fc09287c3437fba64de5bd9751fb6225

    SHA256

    a74415276922de9b0b34774ec3256123c52330e0367a00900b8cd128e444f4cb

    SHA512

    ec781a0582162fef0e2e54e4b675cd267ecdc6444341c7b77b978bfd0bf6daa7241d8a5d3859c990553f4cb5ad147771ad53e762f98b21e6e653a7b594f09744

  • /data/data/ru.rostel/files/.com.google.firebase.crashlytics.files.v2:ru.rostel/priority-reports/67063AC001DF00011435D806745A20B3

    Filesize

    75KB

    MD5

    a9f1397bd7cbf6447d036fab706915f5

    SHA1

    cde7bcd21a2087c2bb65102d1f961360588496de

    SHA256

    d4a01797f3fb72da4e0952268833e8801c68196bd9c8d1ceaad30db1b21961d4

    SHA512

    20b43884e96e1121b0b2427b3f82c17e37c8442a034b520c1f632cd64f46c33f7ce5b7e15be01f6a39ef3ef2ef54246fd430cce7dd84664a9da36a576812788c

  • /data/data/ru.rostel/files/PersistedInstallation1927458492129984902tmp

    Filesize

    90B

    MD5

    b6d9d09ffa80b4b0bc18f7e713451012

    SHA1

    031c23e7a02ea67675dbdce982d9b38fd6b6fb92

    SHA256

    44bb072752f176e9ea12aa2216ebd72c234eb44ed169600251c174f4d11b20e7

    SHA512

    a26bf2621f09c5f0a8f22d1466790461815d69b013ec3e3cc7d0999f3a4032b1118539fe75245ba2f18951dabf4c49945bb4cb85e64de8fbb4f4a4e8f30ae7ed

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    32B

    MD5

    1d564ae5e5ccd2b71e544469e4db3af0

    SHA1

    bfd4428043462fb47606517a69a53c7f5158df47

    SHA256

    e68b1c6a3871b3897d94db0e6d30d92dbae56917011c452aacb5cdd71a35eb47

    SHA512

    8c71f13eddcb48fd7274e1f8d1263322b34ecd1afa6f4a57c7428e71a3e46b909a0044598d022376d15c1a0b926064a5502d7ea912af00f56d29d5dd44a050a0

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    64B

    MD5

    9cd809d180b7e7cbf27c80335620358c

    SHA1

    f825976bc1b648022870e18d242ecb683f59d335

    SHA256

    c6448224c9627806f59576774497ba308f8d57bd6b1f32aafb8ad86eff8300c2

    SHA512

    82b4c71f5823f49047e56677dd4f96454694a87c4285a60fdb759c46c0e968f1d3e3b1402380886def30e2b22eb19b2aa513c330ff98b1c0c3a9f08da29f9bea

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    80B

    MD5

    f1621a021808fab8f3dd3c22742c66ed

    SHA1

    b9e7de0a7847e126c4d9275148704182be11b2e5

    SHA256

    687fc6a4e0b32de42804cad96ff8aec7d25f2093151124a87c46c5916ce9694d

    SHA512

    a2bf6446acf67622f8d2271d7de695604d3a9d22815ce832b0e826edc4c6a91f1bdcb4fac427f225b05ec5c67c6a2f48c7ee5f59027383187605cd70e512344a

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    112B

    MD5

    2cf6b48c801ac06bb889606858aac1b8

    SHA1

    cd982839cca51bb42bb89965b0a6345fd5d4d862

    SHA256

    144f21d87f1ffa788e2aaad827da52dd88b04d462f9f3a468ce7808a5f398f6d

    SHA512

    2961bc2e05ae5fe199d63d328b315e7df28295bdb29558ec4c52f2a554afb91851d33f4219d07883c9db0c1a524c25fef21db0fa99b1717870a125f4e646e7ea

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    144B

    MD5

    6cd3bfb7c6c6ac9eaa26fedf0ca4e941

    SHA1

    9e702d38c29089c42a2e35fad79355fd96136969

    SHA256

    b68880b243b812d7681fe0ecde3816773e331515afc64d4e6f3a9cf2c672a606

    SHA512

    8f7512e7d3010c78e2ad9c250b824c911b5345e1100d833b0ba899277bd72df031ad2d50a868aa9f63c168609dda28cb629804faca756be63930ad707ecea5b4

  • /data/data/ru.rostel/files/datastore/default_encrypted.preferences_pb.tmp

    Filesize

    176B

    MD5

    6fa8432197722f44b405d8371a9f2c2d

    SHA1

    2ded0ca38d6a5d4983df27dc46830ce8675bec2b

    SHA256

    f1adf9c3e3f2f14c4de1f6b71e48d0415ee5fad4381426433e07349785636977

    SHA512

    b1216e1beaede65554abc1599ac53d084fe0f09887ccaa54a8e2a66c84703dfbbfdda3fb837f876c9bd7f28da9dbc36030a874e77915f51d29d5d45c78c31de0

  • /data/data/ru.rostel/files/datastore/firebase_session_cnUucm9zdGVs_data.preferences_pb.tmp

    Filesize

    50B

    MD5

    d5f6cf114596db1c81c3ffc86083cf07

    SHA1

    038c60148833ba1bfe29ea116646ec1a8ca470cc

    SHA256

    838df78338c0e1a2ceda3d2349b8c1d60d321e218bb5d3f2a793db193529fd52

    SHA512

    a2dbb8a7d0ed3044dd2c86985faa33bdc6806f803c047fd5fcdb30c11575837690c7faa0d43f47a6c83d32c46ff51d11ec38274c2489f1767d6b547dce701880

  • /data/data/ru.rostel/files/datastore/persistent_encrypted.preferences_pb.tmp

    Filesize

    242B

    MD5

    1ba807d930e57dbd26a3054901854bfb

    SHA1

    03ef8106467345e8c44c2770e57a780de099f92e

    SHA256

    4911d9d358dfa0a668f16c572c3a6ab8a18c24a48e4a6637c4ab5643c98bdef7

    SHA512

    e6f4ee368d3eca50b25c3dfd04c1a3d4ad91dca30fadc9e0f5b82a8494da25aeb251986328140b4c23f806dafa57645cc821f32965899547f13e1ade0b176b99

  • /data/data/ru.rostel/files/datastore/sensitive_encrypted.preferences_pb.tmp

    Filesize

    100KB

    MD5

    6dedc579edbc73afc5296afcdc25c9cf

    SHA1

    cfcb03ef541a3915e1f41f26812cc09da62cd572

    SHA256

    232c48e2cbd0a57983a78d48145341929b268e72d778f3defcf819c49cdb813b

    SHA512

    c93e46b1f6dac59cd9ef9e922432a7df1caabc3cfee6695474d93e89cec6e714fb7c08863155d9d3ba5600969e7a860e0730b7e9147b1a7e1437697f64c4f0ee

  • /data/data/ru.rostel/files/datastore/sensitive_encrypted.preferences_pb.tmp

    Filesize

    20KB

    MD5

    6b9b90946bbddc5245495daaf01fb5dc

    SHA1

    149eb809466eb856f41d17fd40ff09c20b5601ca

    SHA256

    4dc9329b08cbb1ec1841231cb6e911e64c93072cc332bd4966f5bb23cc797d44

    SHA512

    d99d8506ee152c97988107421ffb2cfe5e18baa6c0d65f3b6d25c457edce1a0b8b906d5bfd27ee99e5ee8b5718a3fb885dca6bd72fe5e853cee492aa4a5944de

  • /data/data/ru.rostel/files/datastore/sensitive_encrypted.preferences_pb.tmp

    Filesize

    112B

    MD5

    8b747277f4ef33a8ee769b39ea41aa49

    SHA1

    87a106ec58f30b900c8a0606d9bb6e79b21d4b18

    SHA256

    65c88dc45f9925772ffb11bc7a6063592d07d3f80327c70323a148a586780d16

    SHA512

    c36f5e0e350d30ee156ecb7cbd275be71093436101e5d5c22b6b0d3cf415c47b878cd4c232e55d74269ababca790f7f12a327a1eba0a003079cce50e8d9aab2c

  • /data/data/ru.rostel/files/datastore/sensitive_encrypted.preferences_pb.tmp

    Filesize

    128B

    MD5

    3f3d7a9ea73b4663bfe3476178fe5cba

    SHA1

    69a421a9eac56d3fb5a74db6db9180b3188c02e1

    SHA256

    c38bf5320fedaaed11046ef9796ee1ac69147924352353869ed2509ab2a4667d

    SHA512

    c30f18f300992bd26aaabf8bb6a42b21b112f0b10a70c24bb42c5701d73a985926e3dcd1638284e078044a9363b3283954827f354eb2cf3e4b48d5e1e2e4fc4f

  • /data/data/ru.rostel/files/iit.trust_crypto_app/persistence/persistence.json

    Filesize

    231B

    MD5

    7dde3896065e4d83a7f6295a91568ce1

    SHA1

    cb4f77eaa4b5bab0d6262a045e335b03913941f9

    SHA256

    5047cffc18dc109f355681427bbc727ffcac5c9f1314f4838685bd52d9413e33

    SHA512

    863971499a69700968525dd93375bac0d38552bf9c4931fd1ef33eb0987af7960f549bc688decaa006fc45a321359e05baf27ae437edfc5d74d37c25fc4459c4

  • /data/data/ru.rostel/files/iit.trust_crypto_app/persistence/persistence.json

    Filesize

    498B

    MD5

    290ec1c02e5d526e633153ebbf72e2ee

    SHA1

    322c023b824ae431eed5caad86e5c278f4facc2a

    SHA256

    9960597ae0f07fdc7d3fa704a696fd4ff32239fa7f6eb64280b498964bcc6d78

    SHA512

    451dd75ac6a29ddd708620a81feaf37b2b1e6f69dfb13e4739d35bafc93ceb484707c2e4c632aae90fa0bc859b5cef5aa9bcc0f23ff6e049526ded5f47bd30e4

  • /data/data/ru.rostel/files/iit.trust_crypto_app/trace/trace.txt

    Filesize

    8KB

    MD5

    21d27b6e22d9ac036eee2b0df7d1a949

    SHA1

    8049c576fcba22768dcfa5dd466ea08c50b8d9f2

    SHA256

    6c6449d6b85236ae4bc1cd64163827d933a3d359d97746f1fe50eb75ca103063

    SHA512

    9334bf98270ed05b4f0edd32669afaa2bed831e28016d4bf823c840a87a7b1ca416658f2173627592cbeb48dbcee8dc1e91352b5d4cfebe22794007f1c122f62

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/appmetrica_vital.dat

    Filesize

    57B

    MD5

    36c4c04f18751a35735272fe75245bb4

    SHA1

    20f0ce1fed0140a5d8cd780f2f3a65a216a12416

    SHA256

    63b787b203598c2bdd67beec527955292661f1c98f95fb2c251869007dbaebea

    SHA512

    8677b61abdf143abbf9d408d9615a2647921071b8d891189637a5549cbeaf22bad7babb738998a5b345ee41efdfacd6ad1cc800f9b0e18c3674d337c21cefafb

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/appmetrica_vital.dat

    Filesize

    104B

    MD5

    7d00b954990d4ce769a1732ba253e242

    SHA1

    7e4cb7ac9d567111a312e6c05144041c0a8f1e69

    SHA256

    49e6aae179a1a2add4a31a9ccd7abc85cab2f2cd122b82e5d47c5ed33b8bfd16

    SHA512

    ba5cd6f7920786b6aa6ef215d1a2171cc316c933171d6100c1efc62e72bd71329f24aa93cc2485676d30259683f2e92ecbae532f2543e953bdf02c6b62bac838

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    4bee623373f16a81564b7dcec1b52ba1

    SHA1

    d0634f775952cb552e48a55778d995a0bb31d202

    SHA256

    a62741057e928d6f95e27a22c6d9c846477c4f1970c9ef09709dd7ca5d2e4391

    SHA512

    ad5cb175853e2045255d8af7c2f3e69452b27ae50037614268ed7e1b9cf37dc61b39ea2933024d9922bb191e9e15d10101c8a6ee3d4f78aaaa0d0cf41ef63e8d

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    5d9b9d0efa7cad2ae6b9537556ae438e

    SHA1

    9883f40f68460b43f8ead45eb8f77229589e7b59

    SHA256

    e2e6b41fe172044dc03dd0a06f99cf1ee5b287674cd87107f5782c1aa1f62b1b

    SHA512

    462dd1156f434d645f400513d19727080027949caed9e1d7dd03d679b11729a216c70c5214e01f1feb3493fe40a253cd515f79440527c0c9a19a2d2f53e62246

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    90f0ae891f74c0a5ac6d1f41d6c722fa

    SHA1

    64ab6406f4f49524e511db132746f721529cd3ed

    SHA256

    00cb429c8d37d9652b43ee6fa1e3df418367be9b6dac1fe25eff19bbbcb65a73

    SHA512

    df00b5b5e4fe25ebf3d98bc69a6364e80b3b36385a2e9d924f1e34534ec937489a124894ebe980c6676803cd8ef6edcf1234883c658dbd8966c0e85e0b1ad19a

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    d5f1f9c8b83db444b045c9ad68de65f5

    SHA1

    b01c8b2f9325706ba606831e068fc46aaad552b1

    SHA256

    f8eedcdfdecf5e2f539cbb1687ac867c30249159c314ba1df553ef4990beffc5

    SHA512

    2ba4d6203a4ff4914cc75d35b6675dc297d9ccfb29516fe641336e75b2b0806552b1b9e741ad7f9c96d0318c9edd7c89c2f23005249af48cb6bace5d4a3cd834

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    60655a2ba67877364e1f0c0a4095b282

    SHA1

    14d375f4acc6cbc7b919c6767c6ea9d3295bc507

    SHA256

    52c9ab05d0ca613f8e8c3c4bdbfafc669e71717836a476fa5d087977e0aef564

    SHA512

    18054de31c312563aea68fe4096e1b996752c2f6dab98690f85a46c9685d77c30cb8cd296b55c6586908d86aa5d92aec24d24e906c5e704f7061230712351224

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    bccf416c16966b1848eae69838f2a6cd

    SHA1

    c38fff38a89711f5fce0721da55a7e525499d978

    SHA256

    f231730b21bd5df2149255a3674dbc5faad7b58a84353e89012d532620964f58

    SHA512

    c2a00b44d62ad7239225516226bb3586e51293e01bef1cc910a5cde619fe5b85ab12796fee1bbfec775818ecc2c1763fcbf4d1439cba0ce0e5d281bf19114318

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    36KB

    MD5

    a82e59975feb43753bacbfaa004734d0

    SHA1

    470ca55da569c65641f58622c5875ce217099019

    SHA256

    54dc9e62d9eb2d5320f7e49b6c16b7ddbc23d87641482b508815fed20f45ed70

    SHA512

    cde98150931247e37a0fa200b3da590238cf1bfa57077c694156ce99b390a3b4e588526b7040b2fde959fb14e4b6dedb54d76769baa37ce733f9107d626efba4

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    8KB

    MD5

    e7cc2c4be0e193f81dfaefb4fb8cf566

    SHA1

    aff5e84830a5bfb339d566424f5840453174032b

    SHA256

    d61f84f9be0517c785a57fe18acee51913fb0baa3507f7c554193628b1bb2402

    SHA512

    2945b907db8c5ad5bf0e64fa035fb8875979e03f5a5a7cb2a5c03279bf505a0a79d924c1ef871d9bee549345e339c19af0146ab791d8e2192de27ba272db322d

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    8KB

    MD5

    aab5d3885c1ec5f49e5502c157f64979

    SHA1

    63dd7de69e09a2f44ad370cf653d26a1e480d654

    SHA256

    58caa8ea5239a3266bf94a90ce6812334b0f8ad1d7419b8e36a01525f6861fd7

    SHA512

    0a69aa8f729035e3e91c46a001d262d35bf8aba8b464ce0a1f3778d6ddb1b9c4b4bfbdd226a53f5053dd3054035a294ef778b6ea3e77957b87820e6cc3a96576

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    12KB

    MD5

    f130f0352f7ab08378f88a9e7e4c29cf

    SHA1

    200c603e0b88fd118be955d5d119d147622a41c9

    SHA256

    9261cdd004cc04e4cd51d6d87c605450c6652d9e84ecd32edc1fad4752e11ac5

    SHA512

    fa1972761e5f1fa4fa65b44e4e274bf5171b9480e0b0ea3d9ca9dd180597ab0c47554280ea1df2c75ef4f3791b67c157f17f0aa54e6f5e2e045147a2af16c0b4

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    12KB

    MD5

    9ce8513a4a93c3a2a991712b413fd733

    SHA1

    f563f36c545162cda54f724c5f0fa597b0bd9d33

    SHA256

    2a137c9bd7418e19380e966ccf7e20e2e8cd580806477346922a56fabf8c8fce

    SHA512

    73bd23f3ca28bbb38c091e701c90a8bb991967ec82a486bcd49e1cbf4251cb9c5d879a7490bc9ee3110ed7179a63009cb1a261be1171b15c52bcd8be109adf75

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    12KB

    MD5

    b8f777c646600d29a9cd79d3529663d5

    SHA1

    0a4db9fff7c7bd38723366352b4bf4c472c81f2e

    SHA256

    c9453acae141c01f0bbda29d502bdb10ea5fb4413d9bc5f11799038e275b41fe

    SHA512

    4a3f2be3aa2ea65cc33f1d51926c558517cc104465512f6a47d601caf67bfd5acd7874f75d4c28be3309ebc8bcc8f5f375a422ff18964b9be8129aa792e107bf

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    8KB

    MD5

    c3a1f85e3695e8e364140d769665f3d1

    SHA1

    eb0eecdc6c4be9e939e5fa1994f29a9b7bbb188c

    SHA256

    caa932b6da3d3944076e6b68f98cd922b5320e55b5c91afc7293136e0b8cfdf5

    SHA512

    257776bac58e14b7bc38a4cdb633e9024adfa832bd392058e8ad008a1ea494940bf3555e1de86523a5828098455275a8b0aa299ab58abed2baaff0cfa042532f

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    12KB

    MD5

    7ce52803c266deb24c965738681286e4

    SHA1

    00702f5301457be9cc85cdf72ed43dfcaf2ecf03

    SHA256

    5d769ee43446710037cd3f1edc88ad4acdad2a505c877d21bf552e8f33cac3f0

    SHA512

    efd51c9e449d521b01b8989476fa5f7fee6b4c442569d0690da8adc1a6a4894277b8c8e68edc6d479cee9e977a874aaa5c3f9cc72b7e85cfb652ae56ace39cd0

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/service_main.db-journal

    Filesize

    8KB

    MD5

    a61b80ae03816553b8509805027a2b06

    SHA1

    c8f1a619f0309166411434ea56834c2967b7f870

    SHA256

    e76c73bf75bbd094247d8b26c23aa9d6b49620df820c656540314ca4cbbfe3f6

    SHA512

    dfbd4f3102ed8c54773b4acee0045943e22d6f7525238819fd0e3da61a71467cdd8f5eb1da752462f1064be62ebaa7143163c8483abad282f7f73cabd5edc653

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/service_main.db-journal

    Filesize

    12KB

    MD5

    96103744701bbac640b7e8ae6f89861c

    SHA1

    54f6e04c1388b31a24a64a74d5637d030116f51a

    SHA256

    5de582ec6a0f878e7109eb907d938cc5feacdee0dd31868372a312f2708e0e7a

    SHA512

    b982a54852e7c6b1ad9afbc370a565d776751c0f651dd2cebd7fc5b95f22f49fdf9a90f8c3187e5963dcf58c1a7789db636170e7fd21bcd1d0f319ad75321351

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/db/service_main.db-journal

    Filesize

    12KB

    MD5

    9867df51b774724cf37b12420625b75e

    SHA1

    e3f089eaea6d62e260b86ad1f1ec39fdc147b6e3

    SHA256

    4e02f7f21623f6b372ca55dd92997bcfc2c81bcdf42a239c2d7b42229ef48af7

    SHA512

    fc9a7dec977d1395cdeb21a531211dfcf3895f14c217e8124393d0698bfab109f78d5c672a85ca54be9d1c4df2c26321151a9b9006c9e59298b1bde0f508c2e5

  • /data/data/ru.rostel/no_backup/appmetrica/analytics/uuid.dat

    Filesize

    12KB

    MD5

    21ed78e71548392bba08bd086ff82823

    SHA1

    2cf219ffdba8c86703ad5c3592abecb50ddb90f7

    SHA256

    3c9cd85b40341faac0836e3a8a01007e50b0a9c4b735c78807db1fa391b8b81a

    SHA512

    05bfb9872695422dbd0b3f121d2191b9010ffaa3601a501ddbbc35953ddb1a04846955fdbd0aae18d7f4b7a685da22f8f74835dee7dd4d7dab6f8116789ae971

  • /data/data/ru.rostel/no_backup/cache-mpgu/toggles.config

    Filesize

    512B

    MD5

    11b1ecddb6e5922e21ad7abd0fefd3f3

    SHA1

    09af90057a08e0eb49d984636ce1f4dcf305c5fa

    SHA256

    80b8ef459e2e3dbda081800a25e4916d6ec028104049fccdf296501feb994d09

    SHA512

    96d3f6df441c34094ed95099a94c712474079a7f547d92c6589b62001f1dc714222b37e09490dd53287dade27e25da41da96c95e5574b7eca2ed6317295f3099