Analysis

  • max time kernel
    69s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    21-10-2024 22:03

General

  • Target

    5d2008a30c4709c2581b53201621626ebae70191fe56d729145a1b6cb853a3a9.apk

  • Size

    5.0MB

  • MD5

    efe46569bcd2b8c72d2c8569504c0905

  • SHA1

    d49e5b99abed6ab9c512d7ad9466efd0845ea57f

  • SHA256

    5d2008a30c4709c2581b53201621626ebae70191fe56d729145a1b6cb853a3a9

  • SHA512

    87a85998527376833f1e355c359ff8d06e80cb24b01485736b60f544aee24baa75bb402e3345e8ed0f5fece9cf9e24f4891a1364a893b6a6f62ad1414d3e7f16

  • SSDEEP

    98304:9Jyy0wXNj8iWsFhcYdCv0NAwtOxYxvHi2JNg9YUO5z2oW1WP:eSBbKCOmxvCw+9I2oWEP

Malware Config

Extracted

Family

ermac

C2

http://81.177.140.60:3434

AES_key
AES_key
AES_key
rsa_pubkey
AES_key
AES_key

Signatures

  • Ermac

    An Android banking trojan first seen in July 2021.

  • Ermac2 payload 1 IoCs
  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.dagterjias.matreyqaser
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4986
  • com.dagterjias.matreyqaser:AppMetrica
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:6421

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dagterjias.matreyqaser/app_desk/IHf.json

    Filesize

    1.1MB

    MD5

    dc4fba25843d694bf29cad157a8a0e60

    SHA1

    5a9ab65b4ec2cccf4a795815dc54743c8091396b

    SHA256

    3b1fdc480723d56713a682ff00d5a47f1b61d4d174333dd6ca71e5bec536a3c1

    SHA512

    585af367eee46c25f83dd55cd944ff4c8930f73e7db56866c5a9eeee120944ad5459755e6483b5f755900602c125140e2a6fcc518e00d141c644518041d58165

  • /data/data/com.dagterjias.matreyqaser/app_desk/IHf.json

    Filesize

    1.1MB

    MD5

    4dbb6cab0dbdcf77c832c78e1a1b6714

    SHA1

    bb36513d6a4235e2e202f2a5ba8ced27bcf62532

    SHA256

    637f481c42ed111f491b6068eb5b91696614bbf224511a6049909760061fd0fa

    SHA512

    0d5a3f1f585e0e624ca0814e317080268eeba6b53809abf327ba39df898cfd1c8eee5bd1d29431169756fd5cd1a9a1714b176d335398f278e5028b8c5d2b2943

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    4ab57d9943a6d1530597b9d06e88a91b

    SHA1

    f97e4a024f9e45d530b142f5a07c5f558ee79dac

    SHA256

    c3e9cf1dc94ab1fa984d6d722b5f8f0451290d75ab1dcfccb1737cc5768c2e90

    SHA512

    71c28e26a2f137f01324b77c2641dba1943b32cd8bc1f2a8b823c4e5cb0a1f0f925d268b12262fcb53dee6bb6db266a0ed283c41ca91bed9eb45be3e04e5a676

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-journal

    Filesize

    8KB

    MD5

    0e98bfedb39d02fe734d950c47bddb70

    SHA1

    726eb285db89b0e9a7894be224c59bb4044d58b3

    SHA256

    c319c9feea49608ebed71e5498d370bbc0f1222ae133e88b245008db6e88f1f5

    SHA512

    56a9c0d47bca8b75f01dc0a4cf3579f9f046cc755644a91e542be491bb02f9d032c5a2e73cb99b1233be3b5700eb8e9708e7b95e36c585386d0031c8cc4f58d8

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    106621ca7cfb8a62ee19316093b7161c

    SHA1

    821fa7cb0742a7631c320a94a3c6a9659343f21d

    SHA256

    3dee762a8e12d59b3ea3d851a760c0dba7f2c3f411c319eff184e01a911adf28

    SHA512

    6b2facec2f05dfbd040ffa55da00455a9376f50f28b59cc9ee07fd259141bc853d31b67c629fdeaa2f234ff00855177d7f08061d0ae271ba296f2c39610521e8

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    ae79079f104cf15770df296913129ce4

    SHA1

    1a582b8263401c338864bd4b1dc773b186bcb39c

    SHA256

    547a42312e8287d466b8466382404824b6053fce2699d376df12b8d90a0e8719

    SHA512

    6eabc53bd7d76e24b183e4cc9480a25273ad0f7b3b7df74555a72905d1a9123c88374a1e151d40d4679973887e0facc4a1c6d14972032903226feaf5a5631897

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    b1bb73fbfc9628afe1e63b41be778a46

    SHA1

    962db33b1a48f15cd6eca907dd62cce75d99f6db

    SHA256

    0853697feba8909795c96ba6d7279314237e4146e469544c1356fc05633252b3

    SHA512

    bc4a80f24054f7eafa99d37acd93951f92e4bb63b618dde4a425634472cd983c59186c9fcc55a9a188495d6acdb6dd3a6187a2ea21d3e7cd75bc21dac102985c

  • /data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    546bcf06197277cabdadc4c398f1b376

    SHA1

    b6fe469dff59e840e265a4795dbff8192a8f1dc0

    SHA256

    144eb34b6467c012e5ebe7219e0f4163607c656db91c4f79fbbfe439bc8e5352

    SHA512

    65431f517c4bca1099cb8079765fc2ace262b643ce2f856fbce69c42474f93db7534516cd62753ff5dfaf31ac43627d3be9ac7db910df8abc3251379e35ab848

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital.dat

    Filesize

    57B

    MD5

    12c96a1fb5ecde9dc099d8882fafabaa

    SHA1

    7b2458d53f180303be4818d55790e0f42af3fb91

    SHA256

    a16727143ebb79c47ed6934b02bd442fa0df3092e4eb55d48628f51926957977

    SHA512

    6101240a40e5bcfbd97444405f3382274a7d06178f3cdceeb6ef959cfa08a6507d597751497e55a984a79700bb8743caa13f7441082fd6625ee39d72e73ed02b

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital.dat

    Filesize

    56B

    MD5

    9b87f6bd635015120cd29152dbc2d1bb

    SHA1

    d6be2873028cb102024f1a990af377127d34f423

    SHA256

    da470bc8b40e81e7a924ea977c0b8ff98e073a2a1763b4c74fe299ca9b44d718

    SHA512

    8967d1de1c298445d4519a25ecb43aa4e1c9bfbf3b5e8bf3fa6c5ae7339e3717d4b82c0e9bca1905c25db5f9717912522961f571c503c986b796000533bac797

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital.dat

    Filesize

    142B

    MD5

    d8f36f70a88fcae62d4349b5c4fbc5e3

    SHA1

    8c2876bbea0ba119d53c7597daea0828a98168f2

    SHA256

    db503ed463d3eb1c1061cdde97a3d7b04ae0eee70f40fafe69955df8f323efd5

    SHA512

    3ed6d1756c63f060c4a48ffb173728e73d212ddb86120a3186cc04a2455f5ad6c2e50c2fcaea81bebc06a7aa65d727b493e4f88eb30c97ca8497fea741097f72

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

    Filesize

    284B

    MD5

    9f7e7b943ced94ecea9c61007a0fbb9a

    SHA1

    f8eb0646149acc824d3efb1857a79ce80c4493c4

    SHA256

    443943337c9eceab0d9a07857e161bb50014d575613f4da438cc7964990ede84

    SHA512

    bd92be2a381a0fb26e7b5b5d3b99e2b1a4c35e5a10468574eb6ef47e10c4a91d1cd662afbc96657a528637fd124d53a24a4f4ddcb6ea3a84c893af4929b2a3a4

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    231B

    MD5

    98b2d2efad651b6b9499597686e942b6

    SHA1

    52fcb6e1915b1d06e38bb8dbf3bb21e73d679a80

    SHA256

    82dd852695effd9bad6688aa3461ead3e1c5c07f2c7bd89fb839808e2da10242

    SHA512

    f14e9f4553be24e3caecb2d186d6c4d2c681dedcaff89f1b5460ed5a5d392f8b2ebc319aa6f05148fae2f81506c991df9ea2453c0e1b842ef46869bedb33123c

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    233B

    MD5

    ec4aebc8afbdbe29919cbf297466e5a3

    SHA1

    030860d66c0b1ea21d1fc224579f38d7dfbedb09

    SHA256

    2158b572216132f3cf56028506793105b6a6807e26f9e0ff105c1c68036c7d34

    SHA512

    ec804fd96b6ed99d28901c2a2bbdc8b8fea35477b24474c006389939035f5b75a39067bad20c4bf70fc8545dbce81eedfe9d4f689a639a34ea9625b6f55e1a1a

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    242B

    MD5

    5824da486c1145a967733467cb95106a

    SHA1

    2134afe277fd91f14f07a51d3d3300a2d7ae531e

    SHA256

    32382257f2df077c8ee446498ea4dc7aeaab02521b10c0a20b0877bf1e41cc9b

    SHA512

    be71c8fe5b3a524199fc9083b0fcfe38dd8a071ad905fc8cdb6357f534b3a2542caa3d7447b28a0da0452b82da74c62a41a25c04bcdf535f338f43ed4ba7cfcd

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    242B

    MD5

    fc2e05efc87ccc5458c8dcca2f2793a6

    SHA1

    7f4010708a789818e359b6928a0f51a65fec0e75

    SHA256

    898dd53083e1215c06088dd078e4b901ec985ad8eb39366c5cbc1216dd2391ed

    SHA512

    52c337ad615d97ebc51cb8a80ebda109e00bb869f5f1d0f4bb52cde6170241740ff0cc941e92b9e01500ad4c36c573d286fae65704d22e61d088570ad9ed54f8

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    271B

    MD5

    e72e350c1ece2c1849c3c735bc98d527

    SHA1

    168a9b1f4e2c4ecf86042088cdfaf19cbfaf35c5

    SHA256

    796343a423ce421d49911b1d3ac65c32cf5c57030835c8d66c0d7ac74d64b1c2

    SHA512

    d554d0a81064d68182a4fabea2f83a052d67128961495c6ea858915d7563d075060ce06b9ca50c86266eb7c1f6530185bfa9a3bc6f03a628e656311b66dd4fd9

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

    Filesize

    280B

    MD5

    f83d7545a7033805b585f9a5d586fd17

    SHA1

    004d0b47fe5f1e95f38f7c342526ee2f3c0c430a

    SHA256

    5f930350c32acecfc653e06d563c6401a1285ea04d89f9ce7cdaefa68777d055

    SHA512

    ff061738244aec9e2cecc5552e946f0140027cdf32942d8de03ead607b1ee7ee99c9d7f361284e4deb7ec7365d13b8c70cd930bf4cd9793167b6b66b6dcb81f4

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db

    Filesize

    20KB

    MD5

    6b9b90946bbddc5245495daaf01fb5dc

    SHA1

    149eb809466eb856f41d17fd40ff09c20b5601ca

    SHA256

    4dc9329b08cbb1ec1841231cb6e911e64c93072cc332bd4966f5bb23cc797d44

    SHA512

    d99d8506ee152c97988107421ffb2cfe5e18baa6c0d65f3b6d25c457edce1a0b8b906d5bfd27ee99e5ee8b5718a3fb885dca6bd72fe5e853cee492aa4a5944de

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

    Filesize

    512B

    MD5

    d35a213a1d97105a0081506ddc6d4aa4

    SHA1

    72dbe83f205e320319bdbe61bd574217d0382a9c

    SHA256

    ca999e273fe07bd3002792dd72517f8ddfe508d015d3e79d4279faf25f1dadc1

    SHA512

    046e50948fee0dc8114d797195940ece7f21899742cea46dc8441f73277c37e874ad3e90bd12fc3054a85e72d8c3113d7da3c8ce4c69fb51e6d2ce1483b6feda

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

    Filesize

    8KB

    MD5

    28e5d2fdad506944db033a5d21b7cfdd

    SHA1

    af44481f2459eafc5b8a908f7e4dce70bcc478d4

    SHA256

    6f9057d3502af967dae8a1df3fa84aadc2d62fe2c783dbe2a2859ace59170da4

    SHA512

    c22c14b3722fedfa83c2800eb4c983f083c5cd2176cdd3a86a0e4c1a9cb70be96268e66b7e8cff265bca2d011dde7cc70d7c48c382acdeed80caf53c2856e706

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

    Filesize

    8KB

    MD5

    d4a9578bbad083059794577d20a8951b

    SHA1

    95c4533f31861720da481b36c5436c9a25e21036

    SHA256

    63a718577ea40f2fa6c10b0816c3d8322f00274e7117ca27c783b75463ac7293

    SHA512

    ff67b670fa4417fb89766b2b1f7cabfb89770133fa18853e54fcb14ccde3ae6c9e18f15d9c47d05c3c9a574b09c27f22d0f37dedfa84a40f82512cdc18f56ef8

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    a5091d54db02fd255ce41776745be47a

    SHA1

    07457aacfb2a04980757897892a406a6bf3710b7

    SHA256

    c217d63fd4376e839d0c0de96f5b0e1bff362e5916e158cb93c4a29df71075ad

    SHA512

    67b8bdf5bc9550fe83528addaa59b1f24aaa2b6a42af01618026de42a03abba96aa4a9c68c9a5ebde042da62fa412fcc50181fd67f3f3dfe1b7fc588346ef0b5

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

    Filesize

    20KB

    MD5

    974b336056bd71dfc5a8d25c74a7666a

    SHA1

    f0f770b5a42e4dcc3fe4dc8db47d42d785c25b25

    SHA256

    2ace1b7f79b692edbab8c854b8f7c9efada454341fb92769ba375e2366bc86c4

    SHA512

    edb573c3f3b9c51ecdbb8abf16bc799f9beeb9f74cc6e9d4ee9f4e7e40ca46837fd4d47ad430860fbb95cd14c34267c8282693f3872f4b7df3b6cf8e1fa0964c

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    12KB

    MD5

    057cce51d31b783c53842a5aa75eb645

    SHA1

    23b7ba02476329f49fdc943e4602d102aa7eeea9

    SHA256

    8ae325da133d1a702894e28b3fc77269a03a8a63cfb7ad9981ca5c2ad1550e4d

    SHA512

    28802f7e07f112efff8f831de6f7ca2fa4a7e8a97074b4d5155c09f27d519efad80184ee07491c122b64469dd09946524c53b050efcd08f37efdc6e1014b4743

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

    Filesize

    12KB

    MD5

    cd07d9bde43c30db976baa69942556f4

    SHA1

    1410aff5590fa3e6e5430cac7d6c0a89e8c5a958

    SHA256

    aa27a2fb31d1ce8c467190ce749d08856ac6061b40341c121dfa37c3b1f160bd

    SHA512

    907fcc65a5d3e8fe196dd7e4ac54cac6cbd45da3dfeb78dcfb4ccfc57d4e1d24ad127b00c0187591023926f6fcf647034c24f46e43a62b52d08072d4b1b6d55a

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db

    Filesize

    36KB

    MD5

    ff6ec7bb01670754d53b537b2ae9e0f3

    SHA1

    0715b3cc092178a3e8c5d3ae89e6f05c90b30e06

    SHA256

    6fd93adabc1600f78d0374cb97a1928364d139e0e8dd819d87a302ef29ee2696

    SHA512

    8fe5ccc3ec5408327c5c79cdf8deda1d41e004934b0155dae096fd2399524cfad322ebfcc3958cb442c86d431ef169ea99623b8cb8e6922a8c9b819ab3e5fd53

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    512B

    MD5

    91c614acbca971ac27ae5486e8681291

    SHA1

    3c73ebeb3ae4380c34eb1377bdb475252120d0f5

    SHA256

    f4c55d69ea2410a3613492b0f5c3a369c62a94772fa5c76c9a5411ff214f2407

    SHA512

    f241b71985c5c66edae9738d65e826853d8b6b0a013eed08b16699c34e1a1b608113f6075863c9bd86bf2b16140e272e02a5cf1968f686cba7c47b01ec338dff

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    8KB

    MD5

    535b96cd4b98150a2bbbcebf38c8ef1e

    SHA1

    8212fa131087f42a7870139b86ad7db42316fe40

    SHA256

    1b0a3588b4f6e96ec42ded9926c837227082fccd85e96f871e104fa38a7e6108

    SHA512

    6f4a6a7e52fa48218f0fd95404109e2879316418d3668e68dc771fb52dce7b8710172fc13bf1da5c8b3b53bae18079351ed49c6bc6fe0c30f06dd4e546b5472a

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    8KB

    MD5

    9485780ba8986eece42934c565faccc5

    SHA1

    17762a0e55802a2c9b15f43daf5f0f74035ab42c

    SHA256

    35838d187155aa3dca05aaabc1efbc9311ea64c3bd088e5b69854363fda16a0e

    SHA512

    bf550f8d12f1c759ddfe71de145c6b01a8ca28d97d517f26dbcd418f3ebfa0271caab61e90e0f85792bd370f5d446f1ed2e55236b38abfee6228bbf257f717c5

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    12KB

    MD5

    d802041c09d2e4d3604d386039de2cb9

    SHA1

    a96fc534da227ab924bae50d13cfb9269d5da348

    SHA256

    abc425dedf4b14bb91803b42824ae305d6f7f7cef7c352e84bc80d8e9f826186

    SHA512

    bb7160cabf272ff962e126f636940e372f0f17c9626bcf9acffb5118dda6d444284c2f0617eb5de32ec1a4e0f5775876a6fc31eb48014e000828e0b2d1842795

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    12KB

    MD5

    9b7a69efff3964097ddf5c8999cbe9f7

    SHA1

    dd91d33a64c97ddd3fe38f011cfee889f2c01301

    SHA256

    35ba3c9b77202b331ee350661bae11c0028cda4e1daf25d9532e132f4d0d05a6

    SHA512

    fcf853d96c2695f981e4367df08c0d1786f73cafcaa925405fd61be1e5f121482a90d9d086297c7268c250c05d6c9a09a40533ef4c12a5c2b8ec33c0666fac55

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

    Filesize

    12KB

    MD5

    86d12038dafeb79a0b1f509ff27401e9

    SHA1

    6cd10f12fcdecfa8af5a913d92c3463bbdf3cf48

    SHA256

    564d271cf2e139f953187c3c1be307b04d2491091211facbe1b9917ecd3403c5

    SHA512

    137b4ed3827c0def2672f97f6695397bb18a87c6c516d08a786c856558389f6745784a188268f29d3724c2fb3af508310f7dbd77eefb72c3a6c4ea9064c653db

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db

    Filesize

    36KB

    MD5

    d2f2ec7ba047d99d46f8b3c7fbfc4d93

    SHA1

    7fb45c24b25846526889abc24eed2552d9585687

    SHA256

    42e543a609708851ac4569b245d1b9baf6da042e69f3299fea3d295ed91b64aa

    SHA512

    cac23410a596f97664f3f8bf4dcfd96c4436d0a557772c84db3d9101a2fecbb6c1cbfdb27456bfb83859200a3d7bf9d222fca854fd83a33e06eb8243971f032f

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    512B

    MD5

    eb3c58ba4d6335d582de5cc0dbb2ead0

    SHA1

    96ae988fe3c7ff50a0a831c98b58168a46901cfb

    SHA256

    98b36b9d61f9e2395b508470548dfd9eeca623116cb9b8f6d595cbaaa66811ba

    SHA512

    ae52651823af157e6e0ac2efe218e7f9d93bdaf934c53b30caa99c5c9c67dffedab93e0701c563297ab936156875a5dc5a7620d20046027afefa26c54ce2fa52

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    8KB

    MD5

    ca3e1f5b8b5cf68ed2550a73d895249d

    SHA1

    e0e766a7ca1e2501ffda219882f086b61c4c9c42

    SHA256

    ccbac00fa77a9ed2f7fbe4158ccf0ea61cb85e4b64fb7472c7a6cfcc8f83f628

    SHA512

    fd51dfb37fd572694d07a3aebe83f3f72c9d22f1c288026a54a7be004b701dacd6c7715cc64cb245197f3d55aa83e5d0141bc6da2401e5bcc196affe36be57f0

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    8KB

    MD5

    75264259327fae3b01b8c1a280103c74

    SHA1

    7d078be541fe05e348beffe66b11a9d965cb3776

    SHA256

    34534490d88ef15f9b9711fa1657f4c03c286c228e35ed6b2ddb717ade96ab95

    SHA512

    8d78da5b6ee750745fd8678de5e7fff366a9488fb125c6df7f552871309826df265c362d8f093b8e71fa82b7b1272034bb6fcaf5711d193d3d639510761f9f9d

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    12KB

    MD5

    1c99c5c159d4c7c442dd4e33968ca0dc

    SHA1

    72efcf7294e5838147107c6f7b9e771f071e40b2

    SHA256

    c9e4e0d4874ad0cf65e10e8795947f3676b16803d2308061fe86c99207712876

    SHA512

    8f87a65c4e901b6a657074704ff7caba7bbea097f3815ed2b093a1ee77ec7dea5d6e2a3a4645accb2f61b2a452c803be27e8b81697ad9651a9e719544d5225b6

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    12KB

    MD5

    5f595e35661244f91b27333055af2999

    SHA1

    91ad2955b59ee8bb9cf9c23d9f86f810a1434d95

    SHA256

    cc1672b1dca1d254f93ddcaae890cf341ae10afd5538dc1f739c40bd713c2743

    SHA512

    24682fc964fe60bf98fc3125e57974852abae50f99d85fc0c37e42bb5a33465c3c4285b0b7def3f83d55ed293ccdae0911300951949b5f85ca18b16e7981477d

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

    Filesize

    12KB

    MD5

    04bc6cfe311128da8ed4b1a87e81347d

    SHA1

    ccf9571d06e7fd5435df46ae7d2a7988ff054bb8

    SHA256

    d31793cb9732e9ebd2a4ed4b9492f554ab56127644f554c4a553d70f87a6d21c

    SHA512

    55754cff5a18a04a9ac6b20afc64bc37685dfada7d7d9c839c066506c8913531c6cfe1cdc969f833b24162e884841e1aa7b2c3f232db55a4a78f548b36036cbd

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/service_main.db

    Filesize

    28KB

    MD5

    8df0751b127d60208383f69bf3293a7a

    SHA1

    b946dbfbc10f5c4fe691803c675de786a1ca25ef

    SHA256

    b980d38e3dd6c821a17738c6db95026ea1f79eb82650b69329030bb137b95663

    SHA512

    e11e897d6650f3ca8e8a7e0d3c5bcea315d90b826276848e1b20547756f1c23b25fb28a857fe39c611a0822a6fc7406b2f095ca59d124155b3ba4f4f3dd9a20b

  • /data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/service_main.db-journal

    Filesize

    12KB

    MD5

    a44931bfe12599aaa4faa281b9af572c

    SHA1

    ef76edb572226dc495a1fc1cd99666b03f21a67f

    SHA256

    b761e3f4f288dc2d4d41079c43085568c7f1e52c30cb051559160acd7449e7f0

    SHA512

    09e22def8b6e854a70f23d9e88cd57b747e7a41ba12b3363b61187774f601a69e8d3db20272c3be687606b5ee7b65d4aa92fa34bd6360e83d032a55ccf523212

  • /data/user/0/com.dagterjias.matreyqaser/app_desk/IHf.json

    Filesize

    2.6MB

    MD5

    0c4f55a0aea0687aa04f097cabd75e84

    SHA1

    0b29f7ffc114a63f7c9146ae67dbda76d7f12faf

    SHA256

    90e0cc833139874f4f78b1364feb6e56a71ed2819c74580db6e1da12d8a34a34

    SHA512

    1230587adce6dedad093ffdad99c0b0a4ef4c2fb3d1d618a9e9e2703eb5131c8efe3960e6d52d1a30159b5926096eb6f40ffa09fd9b5399dbfdfe11889863c7d