ermac | 9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9

Analysis

max time kernel
51s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
06-09-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9.apk
Size

3.4MB
MD5

f7f663a3b26cd563077cf724f71748a4
SHA1

f112338a92c5a909a5bfc8d69514e459f362c036
SHA256

9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9
SHA512

50eb683d6a3b655207c5b857105ab3da62fffa9ab5472f5617b4090975dc52681aea6fef6f90eda90d84988df8689df4fe292b1c533e3c57d807fe8a7d19c90e
SSDEEP

98304:IQFkmPjVe6MLT6GZdAHaGRwjCBk5fWVzqXZBGNbgTZ:xdhe6MqG/waGwmBYfWV5gV

Score

10^/10

ermac hook banker collection credential_access discovery evasion execution impact infostealer persistence rat trojan

Malware Config

Extracted

Family

ermac

http://45.67.229.3:3434

AES_key

rsa_pubkey

AES_key

Extracted

Family

hook

http://45.67.229.3:3434

AES_key

rsa_pubkey

AES_key

Signatures

Ermac
An Android banking trojan first seen in July 2021.
banker trojan infostealer ermac

Ermac2 payload 2 IoCs

Processes:

resource	yara_rule
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	family_ermac2
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	family_ermac2

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook
Checks if the Android device is rooted. 1 TTPs 1 IoCs
evasion

System Information Discovery
T1426

Processes:

com.modii.moddon:AppMetrica

ioc process

/sbin/su com.modii.moddon:AppMetrica

ioc	process
/sbin/su	com.modii.moddon:AppMetrica

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.modii.moddon/app_hawk/Knqg.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.modii.moddon/app_hawk/oat/x86/Knqg.odex --compiler-filter=quicken --class-loader-context=&com.modii.moddoncom.modii.moddon:AppMetrica

ioc	pid	process
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	4243	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.modii.moddon/app_hawk/Knqg.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.modii.moddon/app_hawk/oat/x86/Knqg.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	4216	com.modii.moddon
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	4423	com.modii.moddon:AppMetrica

Makes use of the framework's Accessibility service 4 TTPs 3 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

Processes:

com.modii.moddon

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.modii.moddon
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.modii.moddon
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.modii.moddon

Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.modii.moddon
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Acquires the wake lock 1 IoCs

Processes:

com.modii.moddon

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.modii.moddon
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

Foreground Persistence
T1541

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.modii.moddon
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.modii.moddon

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.modii.moddon
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.modii.moddon

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.modii.moddon
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.modii.moddon

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.modii.moddon

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.modii.moddon

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.modii.moddon

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.modii.moddon

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.modii.moddoncom.modii.moddon:AppMetrica

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.modii.moddon
Framework service call	android.app.IActivityManager.registerReceiver	com.modii.moddon:AppMetrica

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.modii.moddon

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.modii.moddon

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.modii.moddoncom.modii.moddon:AppMetrica

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.modii.moddon
Framework API call	javax.crypto.Cipher.doFinal	com.modii.moddon:AppMetrica

Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.modii.moddon

description ioc process

File opened for read /proc/cpuinfo com.modii.moddon
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.modii.moddon

description ioc process

File opened for read /proc/meminfo com.modii.moddon

description	ioc	process
File opened for read	/proc/cpuinfo	com.modii.moddon

description	ioc	process
File opened for read	/proc/meminfo	com.modii.moddon

com.modii.moddon
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4216
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.modii.moddon/app_hawk/Knqg.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.modii.moddon/app_hawk/oat/x86/Knqg.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4243

com.modii.moddon:AppMetrica
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4423

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Input Injection

T1516

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.modii.moddon/app_hawk/Knqg.json

Filesize
1.1MB

MD5
3f03263b7b94c298a2aafd9244022de2

SHA1
b16191ec3bf119ea4c915b2242303a96ac2be659

SHA256
df412fa8de16d9edc3843c410b2e826b71583acbf635cfccac77fe1861ebd3df

SHA512
1cae0ecf88d1792af56e3d4a494776cec07878dac8421a042bb058927d5818a5fe3d3be7d41bc27329db8d5afdaffd45dbef933302c2c365047588f0b1db3057

Download Submit
/data/data/com.modii.moddon/app_hawk/Knqg.json

Filesize
1.1MB

MD5
32559f50b9f50c2ad549586b0a78f39f

SHA1
fb94d3b519a70acafdb075b5b0a96b4fe6692309

SHA256
e234b51c961a4e19651a56cc95acf5b9c65f370ea32ce51dba415e902bbcbcbd

SHA512
7acb5774c7f5a616a85d1a560078621dc45548544bbe7c785094dde7fea4dcf2396b1194602367e3a2573192874b99acb66a9b13aba990a898acf70aa3c18bd9

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb

Filesize
32KB

MD5
1c4274aa7a9a5cac8c6d1df71e4588c6

SHA1
abaecd685e01cc68801292e3dc7085654a22feba

SHA256
3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

SHA512
1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
cc201859a49005e9b8406dcf6cc45368

SHA1
bdcb04bcc10f625aaa021633e01399e0c0b538c5

SHA256
98643878ec5a0ee67f29f0bad4fa6529d0fc1fba3aa0dc27b2cacdbda7e5d237

SHA512
9d6e96740e3628bec5afadbb5cb182640eebcc98d6b0347f7fb03723562a2d0146d71a8cc37da3f9f91521c4c1bc564f890c62c9aad7810bb5464b3c02739eae

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
38a82973b07f8aba5a3b9a0197c7b87f

SHA1
1b88b9d8acb19f6581342b7b4eda3409a92648f2

SHA256
f1a2a127588f28d819260b0eb22900ece8c1f3b7e218fd040af2fbbc846a6a11

SHA512
708e9c2dcd52b97deba1eae352aec3397a158bf634988ad1220fd288cccbb9b6373a9125b81dffd50f5c7964849414e70970c3c0103a47328869a052de2df434

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
da32dae6342a5d31f50b8420908ccd3b

SHA1
bef0eeb3caa7fe7caf835980991fa14fa14b14ae

SHA256
886f5a8b769645d7e8d550a8acb5a9647b3699a1ab04a391cc54c2664c1b0b43

SHA512
fa1d96416becb0670896c669a95c816db31b58da27fe0d3474433ae1d5463f71b0f0bd0f5a5c2559d59ff32adb21afd774b8c5fe07300dd54e05f80a9f8f2c9b

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
f92f8ae14d822caf7e671a62b0065c30

SHA1
6a0803070bdac22f990e3df1382269ed15ebf091

SHA256
763c4c83aff2790f870b163a3bc64d0d598c3e8af69a74817413b6ec0a88bd82

SHA512
f0ca5dc64b162c1ce5656e46be704a48a1a0248c72afb8f7ba270eb105a6c300fbcacc8b2d04dcd7d7524ca748b1f5441ef9b295249de5ab1438df4cfb46ca47

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
231B

MD5
98b2d2efad651b6b9499597686e942b6

SHA1
52fcb6e1915b1d06e38bb8dbf3bb21e73d679a80

SHA256
82dd852695effd9bad6688aa3461ead3e1c5c07f2c7bd89fb839808e2da10242

SHA512
f14e9f4553be24e3caecb2d186d6c4d2c681dedcaff89f1b5460ed5a5d392f8b2ebc319aa6f05148fae2f81506c991df9ea2453c0e1b842ef46869bedb33123c

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
233B

MD5
ec4aebc8afbdbe29919cbf297466e5a3

SHA1
030860d66c0b1ea21d1fc224579f38d7dfbedb09

SHA256
2158b572216132f3cf56028506793105b6a6807e26f9e0ff105c1c68036c7d34

SHA512
ec804fd96b6ed99d28901c2a2bbdc8b8fea35477b24474c006389939035f5b75a39067bad20c4bf70fc8545dbce81eedfe9d4f689a639a34ea9625b6f55e1a1a

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
284B

MD5
2b6bc414959c0002122fa72465f5173b

SHA1
1dc8cd5b1714c28221776699736bca2ede576c08

SHA256
23af5b438c083baf3d50d3a4be3ff8105efd5a945a2eacce80deb42a9697338b

SHA512
c8c38f51fff2a080bd6d607f9aa230e5d549464ad0fdf32d77bd5d51729d7ac191d6f986ab17553933a1ac54fd58436198fe7b00aa7ae3f57ff5bf2a256eb107

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
8KB

MD5
ba0dd179b4b0ecab3f6548ef13b0fe69

SHA1
b2978995bbe1677a6bab5cb73d4078f63c37a8cd

SHA256
7f33823711fa43d2b56c761af9b53e39127d80845f7a8f8f1898a296cb6688e8

SHA512
e0ced9ba32271576eb94f878f2c63954fe92af54c4c1877260ddb319a2e34d4d3742d7e615496f07475d78b917556e7858e6dc4d721ed3517c1c0787deda919d

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
5824da486c1145a967733467cb95106a

SHA1
2134afe277fd91f14f07a51d3d3300a2d7ae531e

SHA256
32382257f2df077c8ee446498ea4dc7aeaab02521b10c0a20b0877bf1e41cc9b

SHA512
be71c8fe5b3a524199fc9083b0fcfe38dd8a071ad905fc8cdb6357f534b3a2542caa3d7447b28a0da0452b82da74c62a41a25c04bcdf535f338f43ed4ba7cfcd

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
fc2e05efc87ccc5458c8dcca2f2793a6

SHA1
7f4010708a789818e359b6928a0f51a65fec0e75

SHA256
898dd53083e1215c06088dd078e4b901ec985ad8eb39366c5cbc1216dd2391ed

SHA512
52c337ad615d97ebc51cb8a80ebda109e00bb869f5f1d0f4bb52cde6170241740ff0cc941e92b9e01500ad4c36c573d286fae65704d22e61d088570ad9ed54f8

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
271B

MD5
e72e350c1ece2c1849c3c735bc98d527

SHA1
168a9b1f4e2c4ecf86042088cdfaf19cbfaf35c5

SHA256
796343a423ce421d49911b1d3ac65c32cf5c57030835c8d66c0d7ac74d64b1c2

SHA512
d554d0a81064d68182a4fabea2f83a052d67128961495c6ea858915d7563d075060ce06b9ca50c86266eb7c1f6530185bfa9a3bc6f03a628e656311b66dd4fd9

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
287B

MD5
289793eca4e8b555cbd5715ef6ad391e

SHA1
f4f322844f6b0a5929d8e288188dc240c37470e3

SHA256
17826663a01c69d1402cf8afecbcfb0314d1e836778d8771e76839cb5010cb5d

SHA512
7613ffe2b38fc8620354e64c129ccdbd55b440a9618ca440f0742410f9a1ff467e2829398d794bd8eaebce2866d049ba987b6fa624af021249c1a9ac49e2fb5a

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db

Filesize
20KB

MD5
121df713ca66f23fbd3fd6c5f5bdde5f

SHA1
e5db0948d95baa8b9d6c25ce02657e7b24127b12

SHA256
5e87dfae334f113e058130d79dc61a34f3d91583584829676c38b4909d31f115

SHA512
ac3fe1c94ad38e4e6cb0622478094e281f4a6e1d8674ed9a508fe396deceaa6e388f223028d8d545a7abd24658c68401f38b5174f81e50db67c3ef5e6442ce94

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
dc8e4f57c05a0ea2caeb8d02a52c41ee

SHA1
8eadfa75c43e123e968e507e9b50d1f3ff179d29

SHA256
e4bf6f9773f8acdb124bb398a393201d8ac79a61df277a594a7cb7b033ed22bc

SHA512
ac44800fbe5949a3ded1d567823979182cac2bb2c6789ebb3174ced70a76dba2036aaa3666b4a603196650f36b6089a14c54c59c52fe513018be3aea44f97721

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db-wal

Filesize
32KB

MD5
14162e1d6fdfa9943627a1ad4ceb11cd

SHA1
c9fc26dd45963af6d302f8883bd54f9dafc81612

SHA256
a72807cca48b39692b5803c92a69e5fb15e9338d62de405da61d503b9f8ad2d0

SHA512
f0dcd3a2bd97dfb39ff24f6d60585a95eb1e4b3a4f51af288b171920a3f0fcb80c3df37926e132ebe88d1ce3d5c00ad514d4f45837f3d6efb61802e47c4a2e92

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
5dca09950419a96f727c80384db5a662

SHA1
541470157b3824aa4eea60f9799e22efe296c369

SHA256
5b375bcb27b2bfd6ece47345d1537a49a66d9edc918bf31fa0281cb053c274ba

SHA512
f30940559d2568d4630d39944867a38be8fb7ee93ecd79848356d40ea285165934f1df6ce08f9390e556cf6deaf0f154f1d27c04eb1f1c27fb3e904c15fb2ad7

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
5c129b9be3d0e1e5bd93a9aa98b7fa01

SHA1
3a82cdce609ca5a313a74fe1e241ce4fe10f3426

SHA256
d1e5955342bbe1269c7779a9db4910fe62a92a307edfc71165ade4a0e77ef16c

SHA512
cf6aeb23dfe635d50db93d5dff6331f03fa861daad2dc35db83126dd48a48248efbb946ff23db1bed4069012133e66c5511e24fb5a2e5b4447ec6be5ad6178d7

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
217KB

MD5
5d52894d413b89953112b17cd4529c89

SHA1
b9e94c34b33ff46b0aed020adf18d09bd2739612

SHA256
be02f4cd3cb6b623e553aeb2a1860925efc80fdfd4d496229058484084664db6

SHA512
93bd180b1da15a6a08868a01adaa9607bd1f8f3aa1bda628ecad05aaeef6034157c65951fdfec170b6283bd690769be1d4d01dc032db4930f3247810022e9e6e

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
ee944aeb58e8420b1c944d5afd6f5153

SHA1
85156463778d0da50f761ba23d3ec4fabd7fd86a

SHA256
e499fecc841f3389e72a57f35a6cc15492982cb7987b03202702f1e8ae6e8d6f

SHA512
898ab6ec3649c5efacba96b0bafdb8a93c0f33629541c78179cb537218de7fa3d83264a763703a1198412e14e04facf8f63f6d16bf5406338ca60a76a048351e

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
32KB

MD5
db4aebede31910e527eda680775b6a87

SHA1
7e3cfc14af7c89e81f6a7b7c0893bce027d48d61

SHA256
14cc31ec4e754e0ee66ca092a529a49463ec7f5f87f68d47d64bed35b975a81e

SHA512
ee070c32a00b736a1769d7f6830db70a133f210c20a0b198b12d04f5df04b8cf2c2f1f290dd761ae166cf30de8ba289c06382f30ec11d20cbe11053d0cde8da8

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-shm

Filesize
32KB

MD5
9eac29f62be79bfcb2146bcf79c0b660

SHA1
df5f49d122c11922b95642c37baaf1b91ea39120

SHA256
27b66d31c376bedd13ac4f58dc63b9aade986fbb6d53b0b9de4914af66ad609f

SHA512
3229cd47a7857d0adaed3d35d7d2f8bc347988c1e88033a3f682adc746791a7d90adf78e6f780aab0be8719653649a83807a60519d90c476aee48943fcbd21ae

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-wal

Filesize
32KB

MD5
89a876458a06a208d5e323a31547d63e

SHA1
718ab868ff7e043045a70620ee9e4b870af41e9b

SHA256
a7681eb6b178b2fd771b9241b74af0eee3630035e4a2a4c50aced855970f48b5

SHA512
3439ff60d3ab14edac2ffa9a99acdd979d97d2f678f3a30debfe5b2258215441481e6cad77a71f20a46f5c1478254344f840d5620e53c88f95aeaf36718ddaf9

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-wal

Filesize
8KB

MD5
555873a576bbf3684ba007ed36ca96c8

SHA1
eca8b82e6ed256424ab01cc931c11d480e7b8437

SHA256
1283267b509e82bd82fbdf9495a974756b45a42340627399fc2446694c02557f

SHA512
b6e14da590746b561b312728cad0f4b453bf1f2f6b63c832ac6adbba02993573e0cf1bd1052046efcdff6853f97c83ca1c345202451dff28f89eb3e78b221555

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-wal

Filesize
8KB

MD5
6f9740e82a1a1a1b5a7700a23d820d82

SHA1
81d7c51b4cb17400cbaf07bc951b5176133810e5

SHA256
e1b074bf22639bf5da1e31274e8dac2b07ccca2f456a4576deb3a0fa31b70d27

SHA512
97ea826e4efaaee842be6bfb90d581defa3507fe3c9c42a7a731e1e3f9b644a472eff940e5784a91380f3eb9f8e2fb47cb3d5bcae85f6589a0ef4cfa7f6b2ca8

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-wal

Filesize
8KB

MD5
b92c50fbe01f73c003a5950c70449032

SHA1
09bd72654b625ecc3936c2aea4ef6aa499295ee1

SHA256
9355d1f7829245eab7a584fa59c9d80ebb2501df3003efb6fc08af16073c6fbd

SHA512
e6a32fd3f95c6fe9c5c597af128e758220deecf08bb5d156f7acab047fecfcd80b41dac9c548973cbf89efd320044874b369b9104c73036d2de4e366f29e6e5e

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-wal

Filesize
32KB

MD5
26f4fcc69218759e2eb4539a51713809

SHA1
975add3a437eaabea1e4573513c80eec4ec1859d

SHA256
ab96e84656ec13b063b11818b58adfea8042a8905c9b9023b54746d20d813173

SHA512
4ded0c2e07b77386a9894275b2af85e3542c9a026453677504f2c15cf42678c8c7edb468cca1fffe33ddb00e01d4274fc10a1e2320836305e0cd7fa8047555ba

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
512B

MD5
e6d710d758edb2dfe2d8ac65217b221a

SHA1
e7c461b1f18f015af7f6a2300744a18dc202fa4d

SHA256
fdfde28a2d401e7efd078adc404f74ad58430c95ba4e611dbdf0ca47a3758e71

SHA512
2b01282d2ac223402e80a038ab576310e6cea42eeb8a73253193adc03771a4fdc5286058ed77b55adfc079d62ed60863dfb4d53660f19032992b17144463b6b2

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-wal

Filesize
217KB

MD5
9aa72003da0151b08b4789ffd1a342f5

SHA1
a95bac79b282acee722dedd925aabd50f88ae2e9

SHA256
3d4185503ee6e6e929cf13a9e1d35d2acafd2b31e946d6abc9ef8281b3017e9b

SHA512
001cb8252e4adc549a5a704328d5b1698451ead824c06cb6f47242694b6126f599ccc6d116aa86bf88acf22a44402d45fe7657e71bc8229b1c483dbcf203914d

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/service_main.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/service_main.db-journal

Filesize
512B

MD5
163e8d81bf2049b65331f9ce0643aac9

SHA1
bc0026899250f3713520368e2454a1cada03a061

SHA256
2169b22865b0b2da5088e5e20fe0dcc488632d8c725f80dac2e98a590dcef292

SHA512
459773bba327e3c75a0a212d74f8d3ce32482e1720c06a49a626cd3801d8b136af50e211a3fdf65f030a6a8bc33f644e273dd6d307dd7363a4d2424d0380a284

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/service_main.db-wal

Filesize
225KB

MD5
274e7fa92eefcb78493733cdbcb020d1

SHA1
b7d4f028e1a4aaeed86dd359dd1bfc7dfa2dc7dc

SHA256
e6bfd24e5d3c4b75e67461edaef0062607adbcc0830182ce6aec4836fc9f35b5

SHA512
ea1731e073b1ded364e6ae5c73f78687c862b19191ea7d20c81a0ff5ac6ec546164a8287e27a2c0757e767d827e954dd472a8f35a7a90cf47e11ab1590ee1e15

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/uuid.dat

Filesize
20KB

MD5
79a501be1fc302dd5fa0c638776f9f2f

SHA1
9f96b5912627d2715792157cc9bd4b988d2d12ad

SHA256
f825519197bd6d35c9c3cc7576929a4e784cd0d79f96a340a8defe9cb5d89a23

SHA512
c7d7bbe04144db9b9a5331d819737f8d7e597772754356fc98b54ab8b0dfdb51f4786cfc314ed94f06ef4d16a523720f135c1d5b6b7843d72cc3f4dcd0e2878f

Download Submit
/data/user/0/com.modii.moddon/app_hawk/Knqg.json

Filesize
2.6MB

MD5
f30f2176cc01ac749480cba74fbc3ee4

SHA1
f94b253dcde13e96a716911efb474e2743e02c6c

SHA256
14c8101c7f7ca0e10d56dcdfc43252e1a0064aa12ddfbe1d7503aad3b691d539

SHA512
1caa62d861e57868f4f5caa7b53861f99a12f5f4604dbd23fe284ec3ea8c6e6b0f40f28334c90e69e6b0b6a14b59e948b05f474becbb30d21892cdf6b079192a

Download Submit
/data/user/0/com.modii.moddon/app_hawk/Knqg.json

Filesize
2.6MB

MD5
2c52f9aa03255f0ae50d86d8eda3df7d

SHA1
9659445ba578c41da8ce57d11fcbde18cbcfea66

SHA256
66cc8de44ebb93bdc4d1a872afac51b14720d57fe2c69226cc567e318e596eed

SHA512
d9ca61080dd932a9cc379a61d00f987dc1ef38cc1dbae50bec6026f80ae4c61a608ff8ce014a8273277c2756c98ef51273a3e187aa0467b96a853e0dcfae48b1

Download Submit