ermac | 9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9

Analysis

max time kernel
146s
max time network
152s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
06-09-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9.apk
Size

3.4MB
MD5

f7f663a3b26cd563077cf724f71748a4
SHA1

f112338a92c5a909a5bfc8d69514e459f362c036
SHA256

9087be49b1576e694e8d8efea42cce4a16627a46c18b6410a515e27a4e472eb9
SHA512

50eb683d6a3b655207c5b857105ab3da62fffa9ab5472f5617b4090975dc52681aea6fef6f90eda90d84988df8689df4fe292b1c533e3c57d807fe8a7d19c90e
SSDEEP

98304:IQFkmPjVe6MLT6GZdAHaGRwjCBk5fWVzqXZBGNbgTZ:xdhe6MqG/waGwmBYfWV5gV

Score

10^/10

ermac hook banker collection credential_access discovery evasion execution impact infostealer persistence rat trojan

Malware Config

Extracted

Family

ermac

http://45.67.229.3:3434

AES_key

rsa_pubkey

AES_key

Extracted

Family

hook

http://45.67.229.3:3434

AES_key

rsa_pubkey

AES_key

Signatures

Ermac
An Android banking trojan first seen in July 2021.
banker trojan infostealer ermac

Ermac2 payload 1 IoCs

Processes:

resource	yara_rule
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	family_ermac2

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook
Checks if the Android device is rooted. 1 TTPs 1 IoCs
evasion

System Information Discovery
T1426

Processes:

com.modii.moddon:AppMetrica

ioc process

/sbin/su com.modii.moddon:AppMetrica

ioc	process
/sbin/su	com.modii.moddon:AppMetrica

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.modii.moddoncom.modii.moddon:AppMetrica

ioc	pid	process
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	5123	com.modii.moddon
/data/user/0/com.modii.moddon/app_hawk/Knqg.json	5331	com.modii.moddon:AppMetrica

Makes use of the framework's Accessibility service 4 TTPs 3 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

Processes:

com.modii.moddon

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.modii.moddon
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.modii.moddon
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.modii.moddon

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.modii.moddon

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.modii.moddon
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.modii.moddon
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Acquires the wake lock 1 IoCs

Processes:

com.modii.moddon

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.modii.moddon
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

Foreground Persistence
T1541

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.modii.moddon
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.modii.moddon

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.modii.moddon
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.modii.moddon

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.modii.moddon
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.modii.moddon

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.modii.moddon

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.modii.moddon

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.modii.moddon

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.modii.moddon

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.modii.moddon

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.modii.moddoncom.modii.moddon:AppMetrica

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.modii.moddon
Framework service call	android.app.IActivityManager.registerReceiver	com.modii.moddon:AppMetrica

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

Scheduled Task/Job
T1603

Processes:

com.modii.moddon

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.modii.moddon

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.modii.moddon

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.modii.moddoncom.modii.moddon:AppMetrica

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.modii.moddon
Framework API call	javax.crypto.Cipher.doFinal	com.modii.moddon:AppMetrica

Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.modii.moddon

description ioc process

File opened for read /proc/cpuinfo com.modii.moddon
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.modii.moddon

description ioc process

File opened for read /proc/meminfo com.modii.moddon

description	ioc	process
File opened for read	/proc/cpuinfo	com.modii.moddon

description	ioc	process
File opened for read	/proc/meminfo	com.modii.moddon

com.modii.moddon
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5123

com.modii.moddon:AppMetrica
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5331

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Input Injection

T1516

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.modii.moddon/app_hawk/Knqg.json

Filesize
1.1MB

MD5
3f03263b7b94c298a2aafd9244022de2

SHA1
b16191ec3bf119ea4c915b2242303a96ac2be659

SHA256
df412fa8de16d9edc3843c410b2e826b71583acbf635cfccac77fe1861ebd3df

SHA512
1cae0ecf88d1792af56e3d4a494776cec07878dac8421a042bb058927d5818a5fe3d3be7d41bc27329db8d5afdaffd45dbef933302c2c365047588f0b1db3057

Download Submit
/data/data/com.modii.moddon/app_hawk/Knqg.json

Filesize
1.1MB

MD5
32559f50b9f50c2ad549586b0a78f39f

SHA1
fb94d3b519a70acafdb075b5b0a96b4fe6692309

SHA256
e234b51c961a4e19651a56cc95acf5b9c65f370ea32ce51dba415e902bbcbcbd

SHA512
7acb5774c7f5a616a85d1a560078621dc45548544bbe7c785094dde7fea4dcf2396b1194602367e3a2573192874b99acb66a9b13aba990a898acf70aa3c18bd9

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb

Filesize
4KB

MD5
48d49307f1995cbaf5c4923449e764d8

SHA1
f7fa3bb434b87a7a1f53c389ee5c5f2feeec33c0

SHA256
0608e0cadd41b1214172db7ee11e0dde6ba1d657381dc07f28c2a06dae71c1ab

SHA512
fd6f2974f1c02cbc088994b82ff690a64378a421429d0355ec243a4c4b3339c31010a6c8435678c515023b95b220181a9ad0f701407baa59cd653e23ee988417

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-journal

Filesize
8KB

MD5
c2600c3e213c56740c23be12e9baed31

SHA1
40a81092b309fc195221e8466ec964c92c6d0390

SHA256
e8e420e6eca5874dea4697e0726081ec4a36ddf01cd542860488d97dd0258c4b

SHA512
0c63ea4163af309ca06110e7e979b802e7564d540bec108352e83ce15eebe21d242a610d7fcd1737a9738e78a285bcc45f5ad5f81db16c6044635a91e9d9d553

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
106621ca7cfb8a62ee19316093b7161c

SHA1
821fa7cb0742a7631c320a94a3c6a9659343f21d

SHA256
3dee762a8e12d59b3ea3d851a760c0dba7f2c3f411c319eff184e01a911adf28

SHA512
6b2facec2f05dfbd040ffa55da00455a9376f50f28b59cc9ee07fd259141bc853d31b67c629fdeaa2f234ff00855177d7f08061d0ae271ba296f2c39610521e8

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
2fb4ca373a8275163fb9577821ec9025

SHA1
655c9145aab7994bcf5ace71f4ccb6ebeb4cbbb1

SHA256
8ec956d52a3896e43b37be95060f8f3b6b33956274df28db3ddb73aaea6852d1

SHA512
c886cd758d3e088640c2513b556a3c6f141d49dc01f4cbb85e0a11bfddb1806a630ea2598c579f6e935b99873661384df90d9f3a0f378e07b8913ff0fb878121

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
321617da7fdc16bb6189a6021d545e1a

SHA1
3829e5e50f33743f792fb351c0eca3b0faff0ea6

SHA256
b891f82d5d0b831f083a3ec71eb3c4a2008d313d38b748ad7355d5d6573212bb

SHA512
b3dcfb10378b16e02f5f0230527c8118a6f9ae821fb8dc5e85e97e07e9153ac86afcc98c0b5df0df7bd19310709726d1a92f6c3d85c6ec2149d07121cb773cde

Download Submit
/data/data/com.modii.moddon/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
4aa9841d05803fc789a02c402f7513eb

SHA1
b8bb0efc55e44d61adc45a0955ae40f45bf5e7e3

SHA256
800b69e9e0daf38e6cb84a1a28f02c2233ffbfb6f26f111d1e29ce5bc51dcb5f

SHA512
a087a27da4ce3c0f0198b0ae740f5706cfde8022f819bdccae1d9fce1d2cfa7e975f49603fb196a6b156644b87cda8fdeadf93de156d1a06d5237f676df2d239

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
284B

MD5
9f7e7b943ced94ecea9c61007a0fbb9a

SHA1
f8eb0646149acc824d3efb1857a79ce80c4493c4

SHA256
443943337c9eceab0d9a07857e161bb50014d575613f4da438cc7964990ede84

SHA512
bd92be2a381a0fb26e7b5b5d3b99e2b1a4c35e5a10468574eb6ef47e10c4a91d1cd662afbc96657a528637fd124d53a24a4f4ddcb6ea3a84c893af4929b2a3a4

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
231B

MD5
98b2d2efad651b6b9499597686e942b6

SHA1
52fcb6e1915b1d06e38bb8dbf3bb21e73d679a80

SHA256
82dd852695effd9bad6688aa3461ead3e1c5c07f2c7bd89fb839808e2da10242

SHA512
f14e9f4553be24e3caecb2d186d6c4d2c681dedcaff89f1b5460ed5a5d392f8b2ebc319aa6f05148fae2f81506c991df9ea2453c0e1b842ef46869bedb33123c

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
233B

MD5
ec4aebc8afbdbe29919cbf297466e5a3

SHA1
030860d66c0b1ea21d1fc224579f38d7dfbedb09

SHA256
2158b572216132f3cf56028506793105b6a6807e26f9e0ff105c1c68036c7d34

SHA512
ec804fd96b6ed99d28901c2a2bbdc8b8fea35477b24474c006389939035f5b75a39067bad20c4bf70fc8545dbce81eedfe9d4f689a639a34ea9625b6f55e1a1a

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
5824da486c1145a967733467cb95106a

SHA1
2134afe277fd91f14f07a51d3d3300a2d7ae531e

SHA256
32382257f2df077c8ee446498ea4dc7aeaab02521b10c0a20b0877bf1e41cc9b

SHA512
be71c8fe5b3a524199fc9083b0fcfe38dd8a071ad905fc8cdb6357f534b3a2542caa3d7447b28a0da0452b82da74c62a41a25c04bcdf535f338f43ed4ba7cfcd

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
fc2e05efc87ccc5458c8dcca2f2793a6

SHA1
7f4010708a789818e359b6928a0f51a65fec0e75

SHA256
898dd53083e1215c06088dd078e4b901ec985ad8eb39366c5cbc1216dd2391ed

SHA512
52c337ad615d97ebc51cb8a80ebda109e00bb869f5f1d0f4bb52cde6170241740ff0cc941e92b9e01500ad4c36c573d286fae65704d22e61d088570ad9ed54f8

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
271B

MD5
e72e350c1ece2c1849c3c735bc98d527

SHA1
168a9b1f4e2c4ecf86042088cdfaf19cbfaf35c5

SHA256
796343a423ce421d49911b1d3ac65c32cf5c57030835c8d66c0d7ac74d64b1c2

SHA512
d554d0a81064d68182a4fabea2f83a052d67128961495c6ea858915d7563d075060ce06b9ca50c86266eb7c1f6530185bfa9a3bc6f03a628e656311b66dd4fd9

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
280B

MD5
f83d7545a7033805b585f9a5d586fd17

SHA1
004d0b47fe5f1e95f38f7c342526ee2f3c0c430a

SHA256
5f930350c32acecfc653e06d563c6401a1285ea04d89f9ce7cdaefa68777d055

SHA512
ff061738244aec9e2cecc5552e946f0140027cdf32942d8de03ead607b1ee7ee99c9d7f361284e4deb7ec7365d13b8c70cd930bf4cd9793167b6b66b6dcb81f4

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db

Filesize
20KB

MD5
6b9b90946bbddc5245495daaf01fb5dc

SHA1
149eb809466eb856f41d17fd40ff09c20b5601ca

SHA256
4dc9329b08cbb1ec1841231cb6e911e64c93072cc332bd4966f5bb23cc797d44

SHA512
d99d8506ee152c97988107421ffb2cfe5e18baa6c0d65f3b6d25c457edce1a0b8b906d5bfd27ee99e5ee8b5718a3fb885dca6bd72fe5e853cee492aa4a5944de

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
512B

MD5
801dc69fae598967455439d5860a18b7

SHA1
d2567e198e6512201cb27e1d511e81db993b0286

SHA256
080fb1e26433f8ce09139f570d5c35cde46d04ade1e03261e67943af0c34cc37

SHA512
7e9289031992acce18b75c66d2782287d3f3b0cd80f6e2954ece349caab9699a84bf3cb40f38272ac9e7646c1eebf31274b6f65d4d5d1f147116c484e61d8501

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
0c9298b574a1d1427cbfa57a10ffa4a1

SHA1
341ca4cf8417df0e47eb75bde3033ad4cba23f55

SHA256
94e69cd51a8141498d9940454761bcd124d91ed93c624d20c4cfdfe463f1c6d0

SHA512
d728e1c610503aa8d5c40d3646e011a4587519727f741bbb6f41fce9af68fa9c338cf5bd57fbb6e391de4036545c0e66b626c10a0c27592ff7833f96a3bd9195

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
d38b4293b4868c5b498dbc7fea4040ff

SHA1
4ac7449e147b1c0696282cbe88ff1c7f5f886825

SHA256
050b1d09de40f8951cb17951dc5ca4dcd725c143fe8d53c58014f0034d67b553

SHA512
4e2f38d6740773de9f88a7d6f3b64a1e7a40bd4cf58e01a575fe21828ff41c7e8ec130f2b4e2085e092e37e148a75b1ff731826618bf1595880e38cec2a00fb0

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
5a97a6843fef2feb400cd47f2fcaadc9

SHA1
40af736b776239966d0e924af90f457bc5fbcdfc

SHA256
64bf1d22e67507fdcb1ef9c6728b5bb27d4bdd1acd89ec884fa987070901f7bd

SHA512
62fd72d832f440f533c539a5889d528de3aadaf567afc7703d231a77d235caf5cf7b111ed1a7714d47e9a1fda386932e13524f54e2a4514325bcd98020bfefa6

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
5043eab842b5970f45a21ad0186bc643

SHA1
9a282d87dedd64d70eaef6ae525d9e63997801ad

SHA256
d58a6095d3ebd771223d0dcc4f3027beb6b9e4fd1d8616512b91746e18d7a61a

SHA512
a9f02f41a5e710dd64bbcdb9a2c578233f1e0bc854af5553905f52993842b7544154ef9eb8e9d69ce02392620f2c8ff28bf1f471d765fd8be7045a90b3a5ac05

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
b0c560abfa06af1efb455b7b08ecd390

SHA1
954de66c929ddac4c06cd30d61e2db50f8a0f2e2

SHA256
bf92d2c0faabd4db536f0a303b66abaec1529e20ef88639864bdb7bc0c7ebdd4

SHA512
a54a228a43b297c0ff3ab260ff2a0de83bc821221accda6c93d9022bc843b1973d76c354a33550416952681aeecff35d988b3970479b8d6fa9e5b8b6745e583a

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
848a4da58f79ccb0b980c045443ee732

SHA1
88eecb0669464581db001a04cd877f60c431b696

SHA256
e952ca65006b0833d08cfa8b217c5a187d432be7f153f3c4ab08bdaaa24bdbd2

SHA512
9c5249fa7868498b1be26d7ffe69c33edc6daf50f5f4234bfaed0086d7241931b30f85db901f38637ab6a98d416d50520699b07eacddd55b047b4fd0bb430ab4

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
36KB

MD5
f059094eeafa37cb6f46d5eb919e9153

SHA1
a4f9b28517e9a94e413b10e88e35b9ad85d740a6

SHA256
4cbd6882705692866fe2b05b3b378fa7cc26c7d617850e83a86bc076dc9789b4

SHA512
72c067e29be6a89224ccec7d1bc61dbc48ef65037144d8f5a03a1e9f49bd7f2ce76dd4d487500f868b220709b1c66ad2d718430e09658f7147eb85e3ad2efaae

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
55c30a4e3815b6422d3a4acbf9b161d2

SHA1
f6202be63ff1b76cbf75b3bd05cc90108019b181

SHA256
58aa272fda42d8c366b9ee8626b40595b398730646007f140e1730300cc4091b

SHA512
2787ce6d69a534244966d683c45c4397967e2ccc08ae2285106b861da06d56bb3e03856aac590ac886eb32efc0d083843fe0a922ee6199e68d1018db8f948010

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
512B

MD5
a9660039f1aceb5d23cd21466abc1fd8

SHA1
22837e1f59424e25260ef5afa106e601f523f5a6

SHA256
e6b6f1ea80ec1558279fd6e81f0a77a12bb42ca2338b8845f21a3c71641149f6

SHA512
6583082148e623a5620efa83b384244672af493af51f1f9b7103ffc36652a94a1e5f3aacaa4965a207e87c5b812d5d54592affd73197d4d4c78efed1e8e19209

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
259d46532c1cc68ae1ac466475433937

SHA1
bb05b52d414b9474b3540b5ded654a3af96af346

SHA256
bc598990f971924630c930fe17897f5115a7bbfc432eb62d0fbcd92ae44b61ac

SHA512
a4379ed271737ac18734c18a8cd5a9010f7eed5446d42799c40b8e5bded0983427daf58f46a7f512fe4710ed52399e2a1557c6e09f37336b51b9a1aae7facce8

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
6fc95c3c340ffd5bc838ec6a2e557616

SHA1
b80aaefe1e3a823d546e03dc70e5f94e115cab28

SHA256
3c12d1486483f33c61fd02e415f48a7628d783b4c8208ea3532bf73dc2adb848

SHA512
f4e85f743e11697fde975a03fa2784728b55fcbac740b26d4ea0be67f23451bb9f40d8e712ec80fb07e2d972ca2b492b51318d37a0cf1a6672f7115bc5951112

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
12KB

MD5
9b2608654fa4e3bd5b50ecd70260a7b5

SHA1
902296eb3dc8cd2b9809efe552e41d64068bedfb

SHA256
e6ea05a788cf5a0d4d9f0153370726d9c78351834b7a8029d577d726ee011c7b

SHA512
bda041689ab1523c679189f6d709bc8cadb8db3de44d1ea5c144bed67faf45b82afeceae07551258d43b664a81cb83ef56e3d50cf86253b666f537ac13177e93

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
20KB

MD5
f0d438c8b82b4de41cf2236efab0d5cd

SHA1
235920ff48d48ba20b2f022daed3cd03fedf113d

SHA256
281b1068559c286c1dd41c6b3312a0376650a802117f3f199cc253eaa3476ee9

SHA512
10517c18f508959ea244e22352be1a41126373b9160965596d8b58b31bc836220cdce824a1f54061aaa9829fe2c27291fd38a7c1445f8866c88386e7a2d6c11e

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
20KB

MD5
7e0623830ec3e630d83ffd1987845af6

SHA1
c40d16264e08912edcb098f1f4dff04d24b894bf

SHA256
cff80887bff3444ff1240832ae009bd16eb709f235e3a3d5d7a9a8734d39664b

SHA512
ba3c3327b9b155ee3d88f1e6b64a39b5121d8a7cc7d99354d0cf0cbb78f3bdcc5ab6efbc0660d0ef6a8a2362e1a81bcf97a9cbc924780b953e5db1d00a0a2076

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db

Filesize
36KB

MD5
490c5e48e12d4fdc470fd644802cbe5f

SHA1
b13a4254a90f7adb6463259097d157d63183e2ac

SHA256
76a9cd6e98be6215dcd354b1c4e89d7b1a0bff39c28481b205ee49676a1d129e

SHA512
b3cbc7103bd8845e380225cabe80749c6a22f58f6ec4e78c1cce4626a8e5e58db182ce3ad37dea9abc3117c8d35a9490f80fdc839e2d16a9eda5898ebfe1806c

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
512B

MD5
c8f2abc02b963a643be1bfa2de177bd2

SHA1
534c4f77e47b078a82f5c3eeef4e4b9b50b1bed5

SHA256
bb29e47696d18ac0d4d1a0fd1d54552fdf083549e8ea6069f77492d9b232bf33

SHA512
476e423dd5b5ac0088d9a3415fae7ea43b1c3ec0a74e0f71c68e384085a7dcc762b0f966c40a0a2304024afb5ffbb2b455b65754e6d83dcf5a68bb079e2c2a23

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
2d6ae2da444df147c8fb12d975aa2034

SHA1
79d1e19b69eee6130c23b577989266e428c3ce22

SHA256
d0bd13d68b1ce875e197042d6a5129272fd2d093a88072c2245e49b82be876a1

SHA512
b04355e398d4eb7c89b887bd0bfb3d16cb428375f19c38b22ea0649ffd735330dc55a2772ae77555df2170ec83fbe6d3fe56aef040c15a54803f7cee2ed88eb4

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
c42fa7c4161e12cd7cb9421c68fa6a88

SHA1
46f06017bee2585d8ceecfa895c6c403bddbf884

SHA256
9edda263126b2d5a926ef2faaaf36f6a4bdd4df3d990f439335ead06d46d12cc

SHA512
a0f244db451a1126f6fc01c338507396720117847d168d516f7959b794b21d75b9d5c37dd729faf5dcb5a9ce3a0da7e32160c5719b889bcbcb623493547128fc

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
a1013919396407d45392f2bbe6672a4a

SHA1
0c0667ef2e75547e925538b34b41afa425009b53

SHA256
a825177c5c4158adfa39ac1c6608d59cf5773dc2a10785ee2e3bbdf089dc2dee

SHA512
4311f328bd8bc708039338f241c5ce87a9e8503a61869cc63d253578f6482284b932b4d01e4a1a3689a65e699c4b3110ba0abd171256df7c06b829aac9de7cdc

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
8b5e413806223709cb55db8c5a114680

SHA1
ba5bc443054a8fb974beb13bfe4b64820c1edc2d

SHA256
5c111db2946d58e2f208fc1d01c0f93d6c527e4da7c695e33e4f4e078d5664a7

SHA512
a30a529792697e5288c9cc28e4b51c28189258962bd28d4dd21ccf749e79ce9e2d7c2f40cfd28eb87520908333ad5ba3d9cd31470e8c5b67c719463612834bf0

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
7303ad3a52ae9a6d72fdc95276dd820c

SHA1
5fe069047476239cdcccf3277c90fd6627765fe9

SHA256
37209244360f43dfd5d8eb6ee3f2343b82f7428b94d9e34a43c3397d474ba05e

SHA512
ca0c524136c8aa8856737a05a5fa94e64e76a5f5afa386933525686e99a7be1f70fdfb42d378d21da24237064d637693f06f9487234a722d14a80092e6a498e4

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
8KB

MD5
2d8f8d057835484cf65b3d547ba934c8

SHA1
9bd1755372dda20f31596aacfdd0fc12d5a00e4c

SHA256
f5b6bc4cf6765ea9feeac27dc95673e1b1643dea6540df3d4e2e3c221b0b6f2e

SHA512
9e51a45e3a893dc89c49d3e3996439ed31f2c6846f3f0f4a59cc04d9fcbdd8f87eb05b493f5955ddcf599d148f78689acc5e1d487756dc98dd99f61cf2aa2817

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
8KB

MD5
3842a3b4cabb18a936f5f50f9a1ec4e1

SHA1
ebaf29cefebc89b8ea1aa42ed7067ac5ab5c5b5f

SHA256
8538e93dcf9e1c2712c1e0963721ccebbc40bb5ed1b2fcf037512b2fedae9d70

SHA512
2b67bc9f68f7ffe3e007583dd1064b7b0adf62b83fa5ed9a6037d1a8cddc6bb27246779d096d4cdf4fe587e11f6add60e0f907d5f2fb545fea5a1cc3265f7884

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
c7bc70c8eb1a6c039889838df8ddc989

SHA1
1dc6ec62b03d5abace46ef2498b48fcaa18e43a7

SHA256
caccd4327339890b297afe40845bf7abf0a5a788a25d5820a444b5f9ea7119c3

SHA512
ce40a138226dbe653dd75f499764ede6a0ae43f2faccf91f98cbcc2d2633abcfea2a81de601f5c3d8d44c1785878a21672ccce131b80ad45b3bc93d7aa547a1b

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
ff7c073ec7016155d9ed27d5fd888cc5

SHA1
eb5ddf5955f074656686e0b974db18554ccaf6fc

SHA256
47d736ee251f5eb76866c7275bba98ed5835890e01082ea1bf764e1b924a56e1

SHA512
7b284cc7f1db669709312282c131c44ba31fd99cbb63ccacb9be902e55b8e44971c5fc2c050ad1697910f0a2a13fd18ed5b1e31330e1c6671230b3a58dc353bb

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
ac737735b76b504443f3cef066f2b7f2

SHA1
743aa0e3b44a333e45e7f4a011ad23e55016947c

SHA256
bdfde59357f599561c78a63fb3d36642742037b5f3f8ac73c3b79e4df2f48cb3

SHA512
e2188c6dec615611ae681dc030ddc04b9bfce13d641d62d622bd9b021ed27373e92e50b4ee7251c03693383e53ca1f3e7af4082d7c7642171381bcaa229ce47e

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/db/service_main.db

Filesize
28KB

MD5
73932b967ec4050911b2f75fe5a8292b

SHA1
57d227b8a52eac7f84a68aa0103bc748cf6a625d

SHA256
83ca85d1f53ad99a0f62704aadc781551c4fcdc54ddd1bac2e03a07af8c49804

SHA512
3988f635025aad1b6ed67d20f72234e1c360dce09e248a10846a7fd58fabd12b55c22b5720c87636c8e2a4d61ce6e518fb959d46ee3dea216b4559d3fa3531fe

Download Submit
/data/data/com.modii.moddon/no_backup/appmetrica/analytics/uuid.dat

Filesize
57B

MD5
12c96a1fb5ecde9dc099d8882fafabaa

SHA1
7b2458d53f180303be4818d55790e0f42af3fb91

SHA256
a16727143ebb79c47ed6934b02bd442fa0df3092e4eb55d48628f51926957977

SHA512
6101240a40e5bcfbd97444405f3382274a7d06178f3cdceeb6ef959cfa08a6507d597751497e55a984a79700bb8743caa13f7441082fd6625ee39d72e73ed02b

Download Submit
/data/user/0/com.modii.moddon/app_hawk/Knqg.json

Filesize
2.6MB

MD5
2c52f9aa03255f0ae50d86d8eda3df7d

SHA1
9659445ba578c41da8ce57d11fcbde18cbcfea66

SHA256
66cc8de44ebb93bdc4d1a872afac51b14720d57fe2c69226cc567e318e596eed

SHA512
d9ca61080dd932a9cc379a61d00f987dc1ef38cc1dbae50bec6026f80ae4c61a608ff8ce014a8273277c2756c98ef51273a3e187aa0467b96a853e0dcfae48b1

Download Submit