ermac | 5d2008a30c4709c2581b53201621626ebae70191fe56d729145a1b6cb853a3a9

Analysis

max time kernel
148s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
21-10-2024 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2008a30c4709c2581b53201621626ebae70191fe56d729145a1b6cb853a3a9.apk
Size

5.0MB
MD5

efe46569bcd2b8c72d2c8569504c0905
SHA1

d49e5b99abed6ab9c512d7ad9466efd0845ea57f
SHA256

5d2008a30c4709c2581b53201621626ebae70191fe56d729145a1b6cb853a3a9
SHA512

87a85998527376833f1e355c359ff8d06e80cb24b01485736b60f544aee24baa75bb402e3345e8ed0f5fece9cf9e24f4891a1364a893b6a6f62ad1414d3e7f16
SSDEEP

98304:9Jyy0wXNj8iWsFhcYdCv0NAwtOxYxvHi2JNg9YUO5z2oW1WP:eSBbKCOmxvCw+9I2oWEP

Score

10^/10

ermac hook banker collection credential_access discovery evasion execution impact infostealer persistence rat stealth trojan

Malware Config

Extracted

Family

ermac

http://81.177.140.60:3434

AES_key

rsa_pubkey

AES_key

Extracted

Family

hook

http://81.177.140.60:3434

AES_key

rsa_pubkey

AES_key

Signatures

Ermac
An Android banking trojan first seen in July 2021.
banker trojan infostealer ermac

Ermac2 payload 1 IoCs

Processes:

resource	yara_rule
/data/user/0/com.dagterjias.matreyqaser/app_desk/IHf.json	family_ermac2

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook
Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.dagterjias.matreyqaser:AppMetrica

ioc process

/sbin/su com.dagterjias.matreyqaser:AppMetrica
/system/bin/su com.dagterjias.matreyqaser:AppMetrica
Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

com.dagterjias.matreyqaser

pid process

4836 com.dagterjias.matreyqaser

ioc	process
/sbin/su	com.dagterjias.matreyqaser:AppMetrica
/system/bin/su	com.dagterjias.matreyqaser:AppMetrica

pid	process
4836	com.dagterjias.matreyqaser

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.dagterjias.matreyqasercom.dagterjias.matreyqaser:AppMetrica

ioc	pid	process
/data/user/0/com.dagterjias.matreyqaser/app_desk/IHf.json	4836	com.dagterjias.matreyqaser
/data/user/0/com.dagterjias.matreyqaser/app_desk/IHf.json	5114	com.dagterjias.matreyqaser:AppMetrica

Makes use of the framework's Accessibility service 4 TTPs 3 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

Processes:

com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.dagterjias.matreyqaser
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.dagterjias.matreyqaser
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.dagterjias.matreyqaser

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.dagterjias.matreyqaser
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Acquires the wake lock 1 IoCs

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.dagterjias.matreyqaser
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

Foreground Persistence
T1541

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.dagterjias.matreyqaser
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
evasion

Prevent Application Removal
T1629.001

Processes:

com.dagterjias.matreyqaser

ioc process

android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.dagterjias.matreyqaser
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.dagterjias.matreyqaser
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.dagterjias.matreyqaser
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.dagterjias.matreyqaser

description ioc process

Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.dagterjias.matreyqaser
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.dagterjias.matreyqaser

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.dagterjias.matreyqaser

ioc	process
android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction	com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dagterjias.matreyqaser

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.dagterjias.matreyqaser

description	ioc	process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.dagterjias.matreyqaser

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.dagterjias.matreyqaser

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.dagterjias.matreyqasercom.dagterjias.matreyqaser:AppMetrica

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.dagterjias.matreyqaser
Framework API call	javax.crypto.Cipher.doFinal	com.dagterjias.matreyqaser:AppMetrica

Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.dagterjias.matreyqaser

description ioc process

File opened for read /proc/cpuinfo com.dagterjias.matreyqaser
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.dagterjias.matreyqaser

description ioc process

File opened for read /proc/meminfo com.dagterjias.matreyqaser

description	ioc	process
File opened for read	/proc/cpuinfo	com.dagterjias.matreyqaser

description	ioc	process
File opened for read	/proc/meminfo	com.dagterjias.matreyqaser

com.dagterjias.matreyqaser
1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4836

com.dagterjias.matreyqaser:AppMetrica
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:5114

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

User Evasion

T1628.002

Impair Defenses

T1629

Prevent Application Removal

T1629.001

Input Injection

T1516

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dagterjias.matreyqaser/app_desk/IHf.json

Filesize
1.1MB

MD5
dc4fba25843d694bf29cad157a8a0e60

SHA1
5a9ab65b4ec2cccf4a795815dc54743c8091396b

SHA256
3b1fdc480723d56713a682ff00d5a47f1b61d4d174333dd6ca71e5bec536a3c1

SHA512
585af367eee46c25f83dd55cd944ff4c8930f73e7db56866c5a9eeee120944ad5459755e6483b5f755900602c125140e2a6fcc518e00d141c644518041d58165

Download Submit
/data/data/com.dagterjias.matreyqaser/app_desk/IHf.json

Filesize
1.1MB

MD5
4dbb6cab0dbdcf77c832c78e1a1b6714

SHA1
bb36513d6a4235e2e202f2a5ba8ced27bcf62532

SHA256
637f481c42ed111f491b6068eb5b91696614bbf224511a6049909760061fd0fa

SHA512
0d5a3f1f585e0e624ca0814e317080268eeba6b53809abf327ba39df898cfd1c8eee5bd1d29431169756fd5cd1a9a1714b176d335398f278e5028b8c5d2b2943

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb

Filesize
4KB

MD5
d522c7d3391d1beb1a3a2bdfa85872e1

SHA1
0aa2995e3fc04c24e9b4629287c8bcf7d41e3651

SHA256
8507ef3c35674f4f2640e5995e79b4e62aeb2495d4066e5a8e21042d1cf6d1c7

SHA512
78c97f9014e6e30d331769b84f9d5f863d9fcdd8a220fe48e254ed3e23a755baa8090c0d0098b377160180c4a24173219fc265a4a49c509f4dab635b6f729384

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-journal

Filesize
8KB

MD5
b5962c3907c3f5e6634f4ac5d741554f

SHA1
eeb4ca3e00d866f343d3b99f15ce7562055d1444

SHA256
f624e4f64e8f58e205178f28e6217d5f96daef5def415ddd70cb5fb43de9e83f

SHA512
137aecfc95d592664f4e345df5ea46bf2545edee8ac20dc071c4936240e68eefb53c531502de636e13af69f162858d60018e02dbb49de58c695f17b3bdf9bc42

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
106621ca7cfb8a62ee19316093b7161c

SHA1
821fa7cb0742a7631c320a94a3c6a9659343f21d

SHA256
3dee762a8e12d59b3ea3d851a760c0dba7f2c3f411c319eff184e01a911adf28

SHA512
6b2facec2f05dfbd040ffa55da00455a9376f50f28b59cc9ee07fd259141bc853d31b67c629fdeaa2f234ff00855177d7f08061d0ae271ba296f2c39610521e8

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
8868624f910e2dd4f708dade4b39edf6

SHA1
0cf3bdb35b49754281f0d4fdd319278639aa25d5

SHA256
531ced1b44051acd072811b354d2dd1fb1aac0a50c8f8ff44bcca1c5b239d4e9

SHA512
ce49f71e49e1fb4fbd5977075f925d4e2d4d41283680418f482dea5cfbbfb2528b24c80bf74bcb4dda5c3c9d6098d403fceb6c27bb2a8a2014a34a959812adba

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
3b914da42be44b305d86fdb3bd9092a5

SHA1
cfd7251e34f91da9027c72d61b000ddbe35a06d2

SHA256
40846b5f84a706bce5ff7f17989a9e7592163a64d6c26de8cf8bf7d61feadc45

SHA512
eb2977f8bfabb3b1904e1a0ad60aeeb3e8eaa296929a4e4ecf9de2d4c99b9e69d527cd0af524a108cf37cbf1a463f76fda3bd935a3e9ef7f3ce915247498edb5

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
b2cf3a449229b874523e5e727bd47225

SHA1
91306eaac71be6c28f7d98bceaac04df59b5227e

SHA256
c61d9c39860b0f51c0e092ebd9a68b4ed55c8f46b4a1602e9d4ebb5bab9a1bbe

SHA512
dadea75bea0fcf67aaa01c05cd25ce2c0db2268da9b90b04f726eb4a81b6ba275ddadccb856478616c1d57340e24c16ada6199679c22cc0f7b4ac40243e8b9f8

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
306B

MD5
5707e25e2291451c00f9f521b4e40d35

SHA1
5faf97808030f711e760c4f21faf2a730d75d25e

SHA256
e0648c8a6908b98c9d7f733b532384db884a5f238b9e670e27ccd36e5e786477

SHA512
8d17a2b951e333928dbbad4b8fa844e70dd9fb0b4dc8fcbec713a1065c8bb8333a2ab381fd6b659a9ad9e55265cfbfecd5556a59c0f3ecbb65610032e8c48be0

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
231B

MD5
98b2d2efad651b6b9499597686e942b6

SHA1
52fcb6e1915b1d06e38bb8dbf3bb21e73d679a80

SHA256
82dd852695effd9bad6688aa3461ead3e1c5c07f2c7bd89fb839808e2da10242

SHA512
f14e9f4553be24e3caecb2d186d6c4d2c681dedcaff89f1b5460ed5a5d392f8b2ebc319aa6f05148fae2f81506c991df9ea2453c0e1b842ef46869bedb33123c

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
233B

MD5
ec4aebc8afbdbe29919cbf297466e5a3

SHA1
030860d66c0b1ea21d1fc224579f38d7dfbedb09

SHA256
2158b572216132f3cf56028506793105b6a6807e26f9e0ff105c1c68036c7d34

SHA512
ec804fd96b6ed99d28901c2a2bbdc8b8fea35477b24474c006389939035f5b75a39067bad20c4bf70fc8545dbce81eedfe9d4f689a639a34ea9625b6f55e1a1a

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
5824da486c1145a967733467cb95106a

SHA1
2134afe277fd91f14f07a51d3d3300a2d7ae531e

SHA256
32382257f2df077c8ee446498ea4dc7aeaab02521b10c0a20b0877bf1e41cc9b

SHA512
be71c8fe5b3a524199fc9083b0fcfe38dd8a071ad905fc8cdb6357f534b3a2542caa3d7447b28a0da0452b82da74c62a41a25c04bcdf535f338f43ed4ba7cfcd

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
fc2e05efc87ccc5458c8dcca2f2793a6

SHA1
7f4010708a789818e359b6928a0f51a65fec0e75

SHA256
898dd53083e1215c06088dd078e4b901ec985ad8eb39366c5cbc1216dd2391ed

SHA512
52c337ad615d97ebc51cb8a80ebda109e00bb869f5f1d0f4bb52cde6170241740ff0cc941e92b9e01500ad4c36c573d286fae65704d22e61d088570ad9ed54f8

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
271B

MD5
e72e350c1ece2c1849c3c735bc98d527

SHA1
168a9b1f4e2c4ecf86042088cdfaf19cbfaf35c5

SHA256
796343a423ce421d49911b1d3ac65c32cf5c57030835c8d66c0d7ac74d64b1c2

SHA512
d554d0a81064d68182a4fabea2f83a052d67128961495c6ea858915d7563d075060ce06b9ca50c86266eb7c1f6530185bfa9a3bc6f03a628e656311b66dd4fd9

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
300B

MD5
f29ab6dcd5e048071d9b2637dc0f5543

SHA1
aca288f3214f266441fadac5d5807f88f7a2bf03

SHA256
225ba4ddee5d92624a576dbc154f6ae6ea6a5801f40c474512a2fde32ed96868

SHA512
5e95da1f6e9a02d491c34903d5ad2c8b67efe88c49d13f704d2d5d5e582d61d54bf8de313f42d8759761d6ffd53abcf2ccc32d7d6a0338d905f32c7a98c845da

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db

Filesize
20KB

MD5
f5337276357c35867d9766aaae120b37

SHA1
a75c3c04bf49cd633c77e6864905cbeb2dca18d1

SHA256
28f7b362b96a3206ba1df7aa193f282f181a17219008a801eca73e6706525273

SHA512
07f7288d32e4a7e5256477488e2e4c28df5ea0aaf97acff29de7363933f66103ab2cad3a6ba49c3f61132edbc44338e7ccb77d41283609b4cf0a072fa8a5c5e7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
512B

MD5
624bef922ad8c4dd57543afbf7871276

SHA1
4b730e24c5ca42ebbdc3399c181a29d23e71e3b0

SHA256
f20a3e224b4e097f88bf45c125cb74eece97f862e9c91a0cb82b9bce9aadd8fb

SHA512
85e895c0c68961029a2cd9c55c078ee018ae9963d30622072eeee878dc45800b6a66ff2f33b361639f2a90400fb7292c5375d1cf653e98c0b2e7273d35eae620

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
4067f751b47fc9169f62d6ad5d873842

SHA1
a5edf6ddc3e2a9c6404e3fbad3353a5ea1cf7af9

SHA256
0df0917129dde6328f80bd789e5d42bc05c855d5ecc953314ef1670280d25720

SHA512
fba3f11cb390f2b745fde71fe6be87aa4e9f237f2a41d301cfbfcc7fd79960ea6c9db3ecb9cabc62a1fc31d0b82d373742ba191ab5371dfe23d4e061403b2334

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
24c5678367e5627bf0a3af96994fd4c4

SHA1
ae93817c7416bf4ccafb453a4598eb00539e0f5c

SHA256
fa9d0bc9f1393abef98c6fefa12cd2b5ca23e49a8b13ebfa195ef13954c87bf3

SHA512
cc42fea0854ddfaf8c57f697ce54a39c722061b83ff77211eed9b7cc5c59b07c420af43aa4c9a54c3249abcfb0c36f11380c7d1c16d27207dface4336d825949

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
275706e104426985ab5e8b16548eed74

SHA1
bbc8ebad0212ad7bcdfbde55b7967ec8a609632d

SHA256
cf25f7b28330de697e39d040085abac47ca30b5fe6cd9174d0bdd44ccaa82d18

SHA512
130b4e7ce8b44968124270ebaa8f324e1d3fd5452ace621dc8ddf21d0ce4dd9a5529ee9ce0ab8cd85d60e6a295e7675948a80bc96d7f1985b53a973bef2149c6

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
784b088b7e7b381257b32dc3944e2e98

SHA1
28b3a1195d6cc8e05a0b8386cf6508d63b82e664

SHA256
30b5cf15d62b1e3544a4f10b4b29cfbd7a4121e847459f1f4cb159e6409ea439

SHA512
58871cdc52c47d16b1a2ec1f565267f706bac6c166af8e223d3c06fa125cc3f0c1924c668f4d5f5f64dbc4b24110570e113490450105a5c04251d4d3ffe8bfe7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
495eb4c8a5d3085564b481abee6e47e3

SHA1
14a98a989d63e81057121b5ab7052878cd15cade

SHA256
d88ba22e895de5fbe4b007017880e3a94e5b197564935be45f6b426d3e7c5413

SHA512
848af5d63e8db85f41a5f8636a4768200da3c2aae10b58bdae84128f2a1442705f3016f1e9eed41fdb8f5404acedd2e392610b908d22e10365d69dc3ec16d84b

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
eae35b30c9258c4989aa1b96ce4c0410

SHA1
efcce5ec62b4b28abd7ea99d063085d4c7b24928

SHA256
6df14a21327ba590c2c938cfe5dbe9c0bac943880425d08ef86ca15bf6ce7653

SHA512
44c0ee7fa4dba2e87e192ab84afb9d786ae6ea31318cf5dda44ea697a5caa4a92b8b9c904701bfd0343ed5e1f710e9ff1847dc730d265983a4757f76f89caf72

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
c89baa26bd2d4f5ef1b7bd100a34e263

SHA1
bfeb3dadafc2d3562c61f3f8d50a47294865aaa4

SHA256
e85452bb3d293259d99b8f4a5621ed70bf72589be2a156e45daf80d3600f5382

SHA512
260f3c6fc203dfd95e823dde506ce78cd5fd8dede8bd4264ba7293ac5971c3ca881c9a3b23446f862760185602ce2f0a613dd9e9b8b363aea08bcb19624c8559

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
512B

MD5
72171719d7096d9c780fe4be50df1c74

SHA1
02991d04c09ba7f1c99f50be114dcb7c1163d08b

SHA256
c305c1747c185a5a3f2228a2f94ef738c65e49bb604032f66082b78925975095

SHA512
fd356712cc6bb798af29a361ba682c6e7002cfdd3606fa955ab7a09232c4a51161675ec1726feeda6148772c860e48215cb791cc920e843a3d010b5e10e25da0

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
f3deea4fdd967c743c3b3c03cb5a2fb5

SHA1
10a4c4a09d6bcada50b9568b23630a7676e8fa99

SHA256
da53a432488b014f8ed9661ab1bfa7ecdd18022a0c4ef78df5bee10ac10686a8

SHA512
a5b0badd1bd397cd70384f4ca7a023e51dedbd12f224a2746a18220597bba6aa00d8b416860406c14fce7027385eb6b21c57d7e981bb86eebdd8efef9ff021a7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
98f48123d36246a82022ee834e607e2e

SHA1
7c9bfa6ef5233d7a34352c72990a6f900f4e50e2

SHA256
df946c57c233627d405bdc80fcf63ab0b12e1dc2edae58b01df31f4afc1d4a09

SHA512
c57cea2d4815df6186e54b146ca566851befcc812cfb0f3f5e0cd475eb1df9ce20eca9e4e759855901d7d1552bbed6719f54542edc1bb772ce9131e8e4512b8e

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
12KB

MD5
a211ea529af8964e4822825d4e4ab302

SHA1
d6b881116e3386cf7aaa0786cd92e3f332c84aa4

SHA256
30c3823b9e14d7d4e96e1b46e6d11e2536318b73fca178691b8c03461648a047

SHA512
caf4f06d06ffb685caddf25657b21bd82751cbed1a0f941f2a3004857786b32841c32a0f799797444e7c1bd97d34d44cd4742da74164b903028c8af4b1402d7b

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
20KB

MD5
0e6565a249de89db71193cf98f13bdea

SHA1
038e798862c08e78a5632a09fe0d69be377e1f16

SHA256
01867a8e882e269085964cc305b1cc2c7f5cc29c0502314a025ef6c6f2dd161b

SHA512
7e5a66829b1a262e445c53998ef4fb591c0d071fa0b2192fe3b493fc50b9d2281a5d8690e7f7d0092f9a3e743612c32e582f0aa63f6feed2bf3c996b0d681bee

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
36KB

MD5
894f392c0709052520bf7f000bf7995f

SHA1
12c24101d0d09e3e8ef4b7799d537c86ccc25f2a

SHA256
95f6ec3b4106bdcfaa76101a1e440299ea7f6bdafafbb01d2d3c17f98e81c22e

SHA512
8c07549c95678990502405b3f3f994f6f9b8d006c0ebbc6515c7906d49f8e5db7564f8e7d653d4c27c2e4e08a8326e0dd1bc8f1fa201984f9cd9f2e9f75ffa9a

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db

Filesize
36KB

MD5
28a10bca8cc98a7c50cef46fdcfbd7c0

SHA1
59aa264a299ffa20705ec0cfc8c7f544080bc47e

SHA256
d817473598240f6afa5a397871f1ae5d129e0f54ede71e2076a0b3ca2b183c4a

SHA512
19b809f5dcdd9a88f22b3a0f45525fc4ff59723f35c747844fd8e33eabcc711e0be5cfa036af11899129201ff20e0d6ec2ad5642553424dd78f717cc8750339d

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
512B

MD5
3330bb10a6ce7438436784fdf28316a0

SHA1
0d28cc4cfe6adca8aa6abda025a7530411993ad4

SHA256
a203eaa429b06bdb9dfe6f30e930aa69fe3edb1df0e64b1af55708146f5ea563

SHA512
0e9ff6a218fb96ad44c8a3799ec4d3a97edc52335ec3c7757f651e091631c2cbe26ad19cbbc391f70a516af29fb081e2de1979b3026e4f7679a350fce12278f4

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
2e649e43f115b7e2d45ecba2a20887f1

SHA1
1d4f93b4f91e672cc9934bc470f0a342e39de54c

SHA256
e5741211d4d4269be10ef64c7f9b58cf7082192c73075e767c1d6e145f36d856

SHA512
3f279d6d7d182c58c2eb98e0aef3454d9e9fec898527fe3f20d59d442b2667b1e306e96915ca54c5b87382b5b01363f3fc62ee6cafbe62e7901f1f0db8cebca5

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
398b0373ae5419aa77f7dc269eb62e99

SHA1
c5ba950ea3301451f5f98369010650676e80513b

SHA256
c19701bed50601c80d92cbf3e3eb15ce81f2aec8a8a68c06e9fc81685b811946

SHA512
07f452421a8365e81679e42a7b7e6815e3a19785ce7ce8bfc045b60819502fe2abfdff90696dc4c6879486630b3162bfd9ed14104ab3a070d7b39183db63193c

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
8495e1844eb9c2bf5b40f57713e02e34

SHA1
28210c86dc8c1cf36fddbc9519bd7927933d9650

SHA256
63ec99e1772800d4906d85c8c6580be72d0af6a182807f30d7b0df9dc37efd95

SHA512
43dc9edcd3d735c713a751db987f773dfc195392fd9ea066fecaae52d56e7c4c9ba8af5c59cb2655e8f7f054b89b3f9141c2ffda8bc42d4c431d6249d85d42a4

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
85bf29d4fc28fce0b8b69786e4b0c51d

SHA1
f97582388515844368c8f959ec927d437d35e8eb

SHA256
8e04d2f398d3972b820aa54b40cfff2378d64642d98ec7cea623366a16803f63

SHA512
bb2de132b98e3c5c51e06901a8cb8e0433c93a42a27a473824146981ffc5f46c312aef15aa2111cb7ed56fc433453b4840eaf07c721fdf34ef96b1819583aa50

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
0efbc1ca43e29168721cd7875995248d

SHA1
06d993eb96a5b64e8303f183ed3891eba58ea953

SHA256
b516478bd015ddcfc66be316c7ada07acd1a50744d159fa3677b8623e95ee80f

SHA512
b3d11802517148c6d59c3fd16e32cbb983db7aa8c9a8845697caa79245529fd76a070085fead63c0a48c180fea1b928539b2ce90eedced609f19ff8c45b69c73

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
20KB

MD5
83d293a112d46aca394a5179e1fbb59b

SHA1
5e0e4cab6e9b34b487e1beba2f9b49382878122e

SHA256
9c4c536f7a9f72fbf825128715c3836e1ff5b11cc91524a52f374e3238fcb214

SHA512
7c5c6a3273ffaf499610aff28ae0e87e744cfee890fbd1328197fca6de8e18d3a3d911d1415cc7af9d265c850c30500b7a56b9fe67f823f968afa3d251016345

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
94811f12f005a49a7ac28d314aeb7c61

SHA1
d29ad8c4938da4fa6fc1f2b77bb7e785f58d1fe3

SHA256
c1d3b3cb7b78c74c16e02e714ee53e17dd75425904cf32d723abd355399a6098

SHA512
69b33b6ba898f009c448d3fa6ff4b7feac57d5c738fdedb2a41f9194344aa1689b5105c27509766fb4ccf474af392d803a3238bed1d4c76cd3775eb16494cd76

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
9e15aa6ca30f73d115ef3d0d544a2b00

SHA1
6c9bc4e75b341278c39c1ed69abd8e06a5811753

SHA256
a83203216a6d8dbf006d3d041010588422d3af4944c537ef53c2ec450afaeaaf

SHA512
928f81dce54f12ff57df000c7ce6be5bfb0c7557cbd6062de17f3be3808c37ab31fec56d281f014f2369293311b4d0182237d8fcdb641214ffc729330d5d1849

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
baf412efd2dc3ec9f619efa1d4881a9c

SHA1
2966d1140c523b5d56b055ce7181bf58ac5480fc

SHA256
b18a797bc70eb01ff1aaf314b89cd48ac3619eb0c9041b4d272e70f6c52ee8ed

SHA512
d8cfe8eaff0b6a439bd7fb0a843793865b65465995d9b819fc740b49555dc6bc291fab87ae314886b8d8d7bee0ea7b4259d9c9d1dc6676281abee72d24230d22

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/service_main.db

Filesize
28KB

MD5
f149581d8bfd4ad893827671b4c94f60

SHA1
2a9061fb0844d83f4dd246fe06fb7e5e590a6e34

SHA256
6f8748b83428607bf706a28883b9257ba79b110fc22e8fc0f8680264b79bef9d

SHA512
27bd424646247c4a515f3b23c1be9a24dcdd7caedf8f7de9e5fb83872a1dafb989c4bc9dc50b41f2678c33bca04e5e015404ca105c40248c718802929dc5be7d

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/service_main.db-journal

Filesize
12KB

MD5
5ef701b3f78df0c7545ca211b249b69f

SHA1
8dfdd46846f3d0f6a7910cfca6e27fe7808b0060

SHA256
b73ad7972f5462f22a43dae90da826406b88ee4c5d2549e0330df5fb4ee9c335

SHA512
2ca7718359fe9098ec8666312099a57341bc1b4f5d1e5598baacb7514547b7e5b5c1ba81dbaca1f8e30d40f749ada8524f6179d903d9c25db41ebbe3fe33175d

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/uuid.dat

Filesize
57B

MD5
12c96a1fb5ecde9dc099d8882fafabaa

SHA1
7b2458d53f180303be4818d55790e0f42af3fb91

SHA256
a16727143ebb79c47ed6934b02bd442fa0df3092e4eb55d48628f51926957977

SHA512
6101240a40e5bcfbd97444405f3382274a7d06178f3cdceeb6ef959cfa08a6507d597751497e55a984a79700bb8743caa13f7441082fd6625ee39d72e73ed02b

Download Submit
/data/user/0/com.dagterjias.matreyqaser/app_desk/IHf.json

Filesize
2.6MB

MD5
0c4f55a0aea0687aa04f097cabd75e84

SHA1
0b29f7ffc114a63f7c9146ae67dbda76d7f12faf

SHA256
90e0cc833139874f4f78b1364feb6e56a71ed2819c74580db6e1da12d8a34a34

SHA512
1230587adce6dedad093ffdad99c0b0a4ef4c2fb3d1d618a9e9e2703eb5131c8efe3960e6d52d1a30159b5926096eb6f40ffa09fd9b5399dbfdfe11889863c7d

Download Submit