37cc4d39e7b29ef0600a904e015b5115f572be3af0ba59160041586cb28be7b7

Analysis

max time kernel
158s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
01/06/2024, 05:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8973f5d4354705286bdf87be4527ba9e_JaffaCakes118.apk
Size 14.6MB
Sample240601-fxg7asba9t
SHA256 37cc4d39e7b29ef0600a904e015b5115f572be3af0ba59160041586cb28be7b7
MD5 8973f5d4354705286bdf87be4527ba9e
SHA1 4b4e981779c478b9228c220b3c7aba839954be30
SHA512 e5e71aa777397ef5ca83f171d7f49e6ae43ceced82b27368c916aca9075cae97e05bea48575c90456eaa24fd4ef3a6634da069cb04a8030f346f8525ce2a9633
SSDEEP 393216:cQDy0DhGyzU/oBxX5hVDfLG8pr5yyLWbp6Rj9tq7XV/Qh:cml/QwvX531lYyUMol/Qh
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.wattforex
/system/app/Superuser.apk	com.wattforex:core
/system/app/Superuser.apk	com.wattforex:channel

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.wattforex

Checks memory information 2 TTPs 3 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.wattforex
File opened for read	/proc/meminfo	com.wattforex:core
File opened for read	/proc/meminfo	com.wattforex:channel

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.wattforex/[email protected]	4523	com.wattforex
/data/user/0/com.wattforex/[email protected]!classes2.dex	4523	com.wattforex
/data/user/0/com.wattforex/[email protected]	4623	com.wattforex:core
/data/user/0/com.wattforex/[email protected]!classes2.dex	4623	com.wattforex:core
/data/user/0/com.wattforex/[email protected]	5100	com.wattforex:channel
/data/user/0/com.wattforex/[email protected]!classes2.dex	5100	com.wattforex:channel

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.wattforex
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.wattforex:core
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.wattforex:channel

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wattforex:channel
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wattforex
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wattforex:core

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.wattforex

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wattforex
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wattforex:core
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wattforex:channel

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
47	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.wattforex:channel

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wattforex:channel
Framework API call	javax.crypto.Cipher.doFinal	com.wattforex
Framework API call	javax.crypto.Cipher.doFinal	com.wattforex:core

com.wattforex
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4523

com.wattforex:core
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4623

com.wattforex:channel
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5100

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

cc.db

Path /data/data/com.wattforex/databases/cc/cc.db
Size 36KB
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de
SSDEEP 12:TL/0P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLV7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.wattforex/databases/cc/cc.db
Size 36KB
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec
SSDEEP 12:TLg5P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLF7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 512B
SHA256 8cf980740c20befead771c07e61fe8ce893e1fa088ed4fce730471431ec7cae1
MD5 45aec260cc493ddb8de10427c493539b
SHA1 febbb9207a01f3a7c197a0734b5952dcaf31aa23
SHA512 c35601074284da87654a6787e4cac36469a65d52a6d143f465af49b0e7e92e487528118af630fb7ad40812d3ccb646eda42a5c94bb536a338401e5457624cdb1
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 8KB
SHA256 f0f791d52342672c218775e523e863ba472de927b4e466c080e19b9204c21c6f
MD5 f6c58b65f4f8ab372fdef5d6cbff8ceb
SHA1 6956defb916eb80d1a7b36c49f5f8bf945a525b3
SHA512 e4e159f4414f2433c48ee370d82f108cae9524ec7b4c94fcdf16eafdcb49e0ed1e4d884710fd98abd0e537baa1f0278f61532654b6836f02857e4061cf80ed1c
SSDEEP 6:7+/l9Xkn1Dg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKc:7+tIqLiuWdYRmBEyPbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 8KB
SHA256 1b4094dc9d3f25bbac7036945b0b9136220c4ef6def13cc6372c96619557db7f
MD5 86885e3fb4eda0d96523ab31e392ab33
SHA1 b9ba2d421dfb6018eec62748b937b6a2909d6e80
SHA512 7da846eb8e87c4eb3e2d1a7c58bb59b7a813b60578bc3821bc8d6b5ad41cda6060a25821506bc6576aa85b327daa35916404a36d8699c9798ebe12871483d632
SSDEEP 6:7+/l9CPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKrT/7:7+t8qLJdeWRmBEyPbA7
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 8KB
SHA256 69ef11c0a10f76b0fd5072548293ea05af40a27c1a796873d479440aef9c2305
MD5 be19d85345df3c0b0c71478146f87fd3
SHA1 4ed88615db0563ba9a8c648082994bca7a25ed66
SHA512 81edf535cdd94d62648b09d663362fe510592579413c4e55a8661d397d4b941d7538be6a8454603446de7c15300d582257910466feeae422ca749a9c9e18336d
SSDEEP 12:7+tkRqL/0P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbE:7+tkRqLV7sL7yot3BVrHotGGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 8KB
SHA256 fbf1b49db11f1b90226b2f32a647788816d72a56dc625c03bddfabff4339b546
MD5 bc2dc65126905a0006076ec3edaafe3f
SHA1 e60f3317792756161d253a06f6b19869175eff4a
SHA512 55f5a29e752018dc196a369aeec04bab6afcd0be245b4b3a01306d6e6985527f81f435a0de5be19cb8d8f6c9f80efb588f017fccc210fcf025bc1776158ff951
SSDEEP 12:7+tlRnRqL+/3P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBE8:7+tTRqLl7sL7yot3BVrHotGGSX
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wattforex/databases/cc/cc.db-journal
Size 12KB
SHA256 b85b624bfd2973df16ffaa92a0c2c1f52308e32dc14a8f7dde0a46b84b377bb1
MD5 929801a948c116f8a40446b168068861
SHA1 11307c0d4c57c2ae216b09b053cb9cacf9effa05
SHA512 754cb72aa0cd2db7539a567bfcfeb0b0c9c1b11b534140d7630e7caf11c336c15df370a897627768c5225f4cd4e0e05a8db03eedea53c9927831b4d270bc4dc9
SSDEEP 12:7+tBmknvqLWEmlP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rmx:7+tB/qLsO7sL7yot3BVrHotGGSjh
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.wattforex/databases/ua.db
Size 32KB
SHA256 17786701d3fe001a7b577fae541871ace86c78ac03bf77414e8d601930750087
MD5 99cea499719e11c171cb62671c030d83
SHA1 a6dd7b73d1c83b39be1af9917db0856dfe77c06e
SHA512 8d07858e7021a7d0ce40d6013be34f4b41d6a5e76111905776fe790a5d2e47ab6e14933dd391085f1dad4783011a637d70fa52bfb00eb6ed330c96ba0150d9b3
SSDEEP 48:T0vf8SWxx1E6Ubxnp3qMMETD3G2H1JqsN/0pEX6LMWhpkgifWh/3seo:Av1WdE9L3PMEXWY1scHg3bkgifWp3U
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.wattforex/databases/ua.db
Size 16KB
SHA256 fab966f70a7182d5dccfa8bf597e324891c1c2f57178a30c25aa6cb0a51a8460
MD5 b2b0af231db6015a685651a2317bffb9
SHA1 e5820280de572e8f7a3ab50887dd30784cbf1a2f
SHA512 eee704b9e474fa50262f19cc209573527a7e35b7aeb023dbd59dcb772083e7c36f857d6a7928f6cb0d4dfba7e401f0b31172c9ea4b08af21f8f78693f29e95f6
SSDEEP 24:TLz4PPvP/BlmqygGSP/bHxk21E6HWO3jt6:Tkvf8SP/bHxx1E62AM
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.wattforex/databases/ua.db
Size 32KB
SHA256 949c594ac28e39bd7c1592cb87625acdf8672a415da1728e79280ad0cb6c4b33
MD5 36d7728dcd45b611ac3454ea90991343
SHA1 02f38b8ddb7d8f9a460bab76192c8620e1a9d76f
SHA512 1231fe3a8ef026aa7080fb9739c1c92618fd3915b8ca63a47df890ce25f5dd9367d3b82bf8970d695c5d13e3771cdd1bf2fc27903c0e8565d70d354e38bc986f
SSDEEP 12:TL9HuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLD4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 512B
SHA256 d659dd825ae0dc7dcb290f161355b3f722911a6e7b0d3d9af24fdeab3345f589
MD5 f58ec9a92825feebf341bdca995d032d
SHA1 9234571e9f81535a96625f875adf2ade1c1431f5
SHA512 e0cfe0905f532fd9e0df87d1f4e5e3d3075abeccb6b0ec33b20e535258cb9ff3cca418b6058c970f7d097609d4bc637c8fc86eb3a0a515aa11da8923b13c9a88
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 8KB
SHA256 a792152a2b2abdc69778e2e2af7e3d914d51642b9e96302426f2d42f07520d45
MD5 f35e604dbd24b824c3396fc5c5ddb3b3
SHA1 f9cbd2b6d0fe847e995750c86bf83bb4a3a90997
SHA512 8cbecd6680d27f877aefa60fe6421227e3a39ab44675402736e8b465ad5d3ac5f4b44d3b07335269622e7b18c9bd0b78c8ff3bcaf1280e25945fdcb292d5a9d1
SSDEEP 6:7+/l9w4n1Jmvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKJ:7+tO8GqLiuWdYRmBEyPbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 8KB
SHA256 1c3daef0835ab30f18c70a0adf8246e9d5a6e43da6674a9534af1e2613f71660
MD5 f1524354202d6562f394150547948a09
SHA1 519aa0ac2300e0c6c1010f9dfb30b1602209e7e4
SHA512 ac1b9de264cb9f45e37648b4a66d66babf2540c39d9ecca43f0929bcffdf69e1a4d8dfa581f24f2c5b71dac23c87da2e3231f22f8a6139df8313efea1155448e
SSDEEP 6:7+/l9qPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKUg//jn:7+t4qLJdeWRmBEyPbUXj
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 12KB
SHA256 dbdb399080b17f070277e1907a9ef3e2b3f06f11392257079c39a3489efe78f6
MD5 c3e9998cab99cb1d3d222c8e69bd01e1
SHA1 4a4c9d92c18319851d3dd0212fbdd010055992e2
SHA512 d1dd88d6398ad5a3063684fcd27158b01d98a1125e918e9aa94e5c5e2dc990fa8bd4f52c8f3771d42518e329580dd3030106df27002989d2f76f65e2262cf1ad
SSDEEP 12:7+tg6nfqLsmuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbbm:7+tbnfqLz4PPvP/BlmqygGSC
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 16KB
SHA256 6b0e9ab30a834a3ea98a80fc05b9f5f09575189c1b91788aff88eb2150e80819
MD5 a8190bc8330d58f34b5ec67cda23f2af
SHA1 11f6a6443cb8a846f0e2d246f7e9b8eef9bbef1f
SHA512 f76f652194512aec5236d273697cad9cc5f4154c1ea191630ca21c53cdd3cadf56892b9ae54bd11011f790d6745c8e3771a016882f82f58ef9287c85e884d492
SSDEEP 12:7+t7BGN9HyfqLZDuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbs:7+tkN9SfqLD4PPvP/BlmqygGSs
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wattforex/databases/ua.db-journal
Size 12KB
SHA256 784e9851a009a29817e4c0a8994815d23957691b89d0d98821fd8cdd18018c69
MD5 23c4f449dc99f0f62f4007e1ad35eb13
SHA1 7be2d9103763a6d66e0a6e8d515f1bf79be26770
SHA512 29789b09d7d7ea48f4f7c942469c62d2a6df9897138fd8924d76de38f1e8a9d867a045e9cceb49442e9322cae82dd78a29593ae660f8089397cc8a92c13d61e1
SSDEEP 48:7Mwp3qMMETD3G2H1JqsN/0pEX6LMWhpkgifWh/3sepnlqkvf8Sm:7r3PMEXWY1scHg3bkgifWp3nTv1m
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.wattforex/.jiagu/libjiagu.so
Size 497KB
SHA256 3b45c7f50ed39223289cae4d34897e973000919881e286114b07fce912a756b1
MD5 7d21d414ae8ae5482ff494970c5946a9
SHA1 088a67727585e13c38708c6872529ee4451ee02f
SHA512 5fec709fe6ead7038073bca32dcaf91c6988f47cb77ea32e0974daea81b92a129ee25ed63b21cef816fae8331eefc097c9e2e360376f5b96571a79df47605b61
SSDEEP 12288:HotfCZt8eK9/lUjNzNF/L+6DnElDFhah6qYrR4yFNslUc:HMfw0apzNJLLEBFhahdQRTF2
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.wattforex/[email protected]
Size 6.1MB
SHA256 bf0cead0f1dcd5cd38b2589c4fd5a2d5183318283c46d0d3a190e5be37a35203
MD5 39ae613e58441ee8096274297c7a46cd
SHA1 37854237212c7ba1849eb56c93f97439d59a9545
SHA512 9a2a01a031f36c074861b9b4b46c674ad9cf9d478103dbb20a3de6e346a5010482573e4a7366d9708867f4198f8a9dd891575fdfdfa10e7e1963501b6f764dd1
SSDEEP 49152:oMgFYFlwW8mXZC2npSQ4ELzfW16Hs0cEFlOLe2678xkmJsmMLtOVAF:oMwUxz5W1AcEOLT678xPsm7aF
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.wattforex/[email protected]!classes2.dex
Size 4.0MB
SHA256 dea22daef068bd7a77e37ac50903ee0a1824d4dfee11a8dc06d6fc3b36e0e4b3
MD5 750e067a3e7263b22916f8bda31aa124
SHA1 2a72920d4c984c71e49b8c480c108c87d2a9fec6
SHA512 44147fc946b7af7db76d5c38e1881a0c26181e8511f7a98d986cf6eb52e52f3dc4cbee2e2d524f091b3b69fb1305a7221a2dd943d5a90ca9fcd69752ebb17722
SSDEEP 49152:Mm8UBHgqfF6P4VkspAI6ChkqlFhxtlEnJHIObbb1ric:MmBf6cn2Imb5
MD5 SHA1 SHA512 SSDEEP

Download

1002

Path /data/user/0/com.wattforex/app_crashrecord/1002
Size 12KB
SHA256 aa9205cf961b5a42bfd3549ea2936d0dfb2a3010de78c94e1757d2ee17c1034e
MD5 6b4a1012742cab21629b6bd7cb19e304
SHA1 38a2be0227d0242639e329d008aad519459a53bd
SHA512 6c6e9c891b573202c93d195f5806fc641ae4ff3da0da9d319105b54bc061fbb668a3f412d715074629ce713d26d14de2677a6b9cc58aeb9274805579aea0064e
SSDEEP 48:7MR/DG1z2NCBFdzqS/tTC10HxOY+UgD/tTkmsgl8a/tTC108xOY+MGD5qaQnYsSH:7Qq1aqvzJhTx2hkmsjahox2D5gQHn
MD5 SHA1 SHA512 SSDEEP

Submit Download

1002

Path /data/user/0/com.wattforex/app_crashrecord/1002
Size 12KB
SHA256 e819b6e03b9590cee30946fd540314e6a4540af94bea376357900377e1050550
MD5 e28db1cb9be0f71096944502c8a4b403
SHA1 e1c27a6a028eb6ed43e26cb808cc54b0369b2171
SHA512 c745c43d1c5391c54737a212fb219d91289c63c49f897539819fbe6dc814867e7a78e9aef3eb9cd5360d5c1cd0fe4b7f75d938eae00b1f349cf20e12b346073a
SSDEEP 48:6iETKHxY218v4KpJ2VsXoZPFdXr9+le24a/tTkmsgl8a/tTC108xOY+M/qeBQnYX:6TAx8vTbHoBYeIhkmsjahoxPAQh
MD5 SHA1 SHA512 SSDEEP

Submit Download

1004

Path /data/user/0/com.wattforex/app_crashrecord/1004
Size 223B
SHA256 3a1c978689d825d1dfab49b20d70b7561caa2bd050a9d2a95997209afa0c9a63
MD5 59391d4f1c1a780b352a3ac16b41e7f8
SHA1 ce4a0d3f53a21c2a874a643132b08a3ba417b192
SHA512 7dd099242ba9b88fcbabfd4e1de8dd2c21516f26788a2e99e656ededb8dc2835874544e313a4c63c2d212c25ee32ca4fcb74f84b3c00d5d56708feac0ce3a492
MD5 SHA1 SHA512

Submit Download

1004

Path /data/user/0/com.wattforex/app_crashrecord/1004
Size 20KB
SHA256 b4ef8a71919ac4b6ef9a895a991b527f5c3316fd6204eb815366c9614dc71f00
MD5 064201502ce25754236b3b5c12e24c65
SHA1 e2c89961dcf8306440bc99f7b058ef4680eacf0d
SHA512 3f5af9d3e7fbca1c0a3f9ad5a8d8d8e1d3b3e3c79cfda89b6baef007aeafb4ec5738626fca1f682b73b0305a94a4e2bf17c0bdd4fc7fbacb80ed02c7affa44a1
SSDEEP 12:TLgEB//UyNTSFbyBh43R90Ef7c7VDERmBEyPbAVOwG:TLgE1Bqj0W7yVD/GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db

Path /data/user/0/com.wattforex/databases/ThrowalbeLog.db
Size 20KB
SHA256 952ea6ce9e8f0436013be8556040c3110e04c26ec8afb24c6f69cae63bb1bd16
MD5 f43d046c5a453a8c6d13cb156d0df2e0
SHA1 9db79534df05a19116b3db20b8481e7177956ab3
SHA512 0ea34222e0a090caac0a6b433bc7ce132ed6a21790fe2a67642b79084ce75d36d3a67aeffc75e968c164767a760504c8412f4fde911ddce4f2ded81b8ded9e49
SSDEEP 24:TLy2nTpexi+TuGSEFIF9iagv+Mc6m6J5qIBPATGdoyMMwtXATw3G:TeygPS2IFW7nj/qIVATGdoyM3aTw3G
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/user/0/com.wattforex/databases/ThrowalbeLog.db-journal
Size 512B
SHA256 9dc970b99128525c8bd04db451e729704788ae1cde2e20c41091ca596f3bf8fd
MD5 9d9bc5ec9cb6aff76871ecb040bddd85
SHA1 9103f2dc2484ed53320f6ded6b2580e7c0440edf
SHA512 554785e5f09ca726017b04df2e24571ee2abec515ec2b74838d2aff3648f838523b0ade24a749e3fac9532a3928992e0a8b52f1a810ba80082794bf82edf0eb9
MD5 SHA1 SHA512

Submit Download

ThrowalbeLog.db-journal

Path /data/user/0/com.wattforex/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 543ce912e520321e19e56ab47ce260c44f2e11c13f9378571ddeab1b109f89b7
MD5 53359b7cc55b4b597d7d4fd079bbb877
SHA1 9985d9ad653fb779be5faba293dc7f8ad8c77984
SHA512 6bdab006ca06f66dff6a24ba49b18e6b90ca7c016cd8fd5043ad7abf622a4101b5ab01cd65594c31fb63d587cca989344be6dc0cdf97b7ec5c2a4771cd831149
SSDEEP 6:7+/l9rsmFn1wrg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwG:7+tJcrqLiuWdYRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/user/0/com.wattforex/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 d3688bc89248465f9c6ee43d2ca4236d26173f6c937ef35ac67b9c89f1d468b1
MD5 9874b67f5cb00dfc0b31cf3ea23664bb
SHA1 f1373270eea019ada524ed6523130855b4f5ee08
SHA512 63995c52db525e8f3b4051178bbe8bbdceb724ee3de6d9841a5335c0d56924136ff72daf7d5d183a5de926ecbfea13f98755d2de548fbbfe6c34d40a6e64b85e
SSDEEP 6:7+/l9aV0FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKGl//SN:7+t46BqLJdeWRmBEyPbdX+
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/user/0/com.wattforex/databases/ThrowalbeLog.db-journal
Size 12KB
SHA256 664a564cdd60ad3bb57bfa25534c6de7fef3d11dfb595bc77471365ea8b2db1a
MD5 775e99a1bd65ab963c585b5fc3807878
SHA1 9c2b4cf2e5a15cd64e52a7f210a424f72eb5c222
SHA512 c91d1dbf38b8d813410e81ec802c22628f565fddae2a86ca952e45d77e0449e7c8a67a3a952895d8d3f8f90a44fe37a55f1e02a57dd1456745457929085fe193
SSDEEP 12:7+t7BovV64g+2vqLmanOyNTSFbydJexF4bb84riiKj2OVRmBEyPbr:7+t76h2vqLXnTpexi+TuGSr
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/user/0/com.wattforex/databases/bugly_db_
Size 104KB
SHA256 3e32066d2d17cedfb733708e13251da810e50a127ce2b39e56cf888e4e1e160e
MD5 1195b2303adf0edb2d64f0f93356c00f
SHA1 31e0bc34266b87017f0f5b338f889e9388cd2587
SHA512 0e0dbbb6d6b3440de423d72809bd8c0790cd5b8c4dee8c653677e8e90caa0bbf813fedac498b2a1c1ad7810cf7265ced041b4d323d722fe692bbeb7d80dd4065
SSDEEP 768:gdlbtb4nTA4nTzmN1Jo4nTr4nTsQ4ntZ94nToMgBD24nTr4nTADwLxQrSVLz2X4F:QydQUT
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 512B
SHA256 5ddd91e5059b55eae716fdaf0c0b1e72a73f54976acd49998af86877ec90bc1b
MD5 892bbb7ac76686db44e9a42effa38129
SHA1 625167ffb9281eabb934413b05755ee6342113f9
SHA512 2e2175dbb2d60af1c5b2f898c793be36bc6e360de25d2cc5aa1b15312e8ce9fe1c741d73f459cb8f97023bf409a18591ee09e7f13f5bab49b5c82f0b58eb9832
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 8KB
SHA256 c0a21a25e15f2bfcdb2594327f6fda465aaf10808ef5ec78a6aefa28ad5abf4c
MD5 638b65063cbbe3a2d25fde2dccd43240
SHA1 174a7536ae2d6dc0d6602205f29bcc6cdd548bef
SHA512 89fa8cfde11b3da9d06b86574b5540c56ccf7cc14c540865b1fb6db99af1373291b1e9acd6cad99692efaaf35f87bf5b16c05992d8db069577a11809bf5a1b20
SSDEEP 6:7+/l9jOn1Nvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKC:7+thiqLiuWdYRmBEyPbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 8KB
SHA256 a8d01c25b20626e00c29f1b2758a38d9a4f203eaca23fcf952770bfad827cdf2
MD5 413a982a0e8b2ed32e09fa0691db858a
SHA1 3f01ee965fe29d6e7be48b3fc1e09ed40053de07
SHA512 3c6ba1cf3cb92a7907a70a5b8497e0242e205f8e24e236bde8a00c5e17ac649ffebae88cc4384b7909b4dc366dca1251e73401263b6d383d4a197e245b6eccdb
SSDEEP 6:jvvSCg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKeLy///bn:TSCqLJdeWRmBEyPbBLyXTn
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 20KB
SHA256 ab306df23097d0f6072a4c43791599e5411f2679c4e01672fa56486ef593b22c
MD5 a5fd4bac4358ac899494f2f3cc1ac5d1
SHA1 dc687a0a2cb7adf5bee3ca8462260fc559c32649
SHA512 be3fdb752fcbde4e34bda9a3ce740cf50a232e6ac5fe92c44d4b2d1ec913ce5646a172998900ebe3e391db561363fcad3c8282a6a346ea21e9a396d48b871c73
SSDEEP 96:3QPeIW53Azwh0x44h0xVIh0xvrh0xfq1aqvzJhTx2hkmsjahox8:3EFWxKs54
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 8KB
SHA256 8cd5124e4abf208346dadabc7f781b877d2609c05ac23f83a209756185af764c
MD5 6e55a9113f5be33a5b4640f59ca8b001
SHA1 99e1247eb22778eaba1c0763aad0c27c38d5ad4a
SHA512 f396ef07b10f9050dbf0347dc8eb5ec33868490998ac8b702acfd76747027f85409047254f8f582439cb1cb84da335d31a11ba28b6b2dc85a1dd415d6eb79496
SSDEEP 24:7+tHqLKXQQXBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSNn:7MHqOX85WuAriStwwuMN5meposSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wattforex/databases/bugly_db_-journal
Size 12KB
SHA256 64340fe7b5724bc824da5f26df387147518ea3d26f45a27e3fea660e9180e0d1
MD5 dad503de2912178e34c09a543e9c3a2c
SHA1 de68ced0f02edf96a134b14915bee43d9d3c9bd4
SHA512 cec9483d9c543e89207365644f72967cd6c4fabff5d4b155d801c701ca488c7b75af5af81bbf9daad4df8040e5f4c5f57b0e46b1a4023c39364a11390a1d4951
SSDEEP 24:GqLgQiXBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSy:GquX85WuAriStwwuMN5meposSy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db

Path /data/user/0/com.wattforex/databases/ut.db
Size 20KB
SHA256 ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9
MD5 75694e403dbc728c85b85d55d972d357
SHA1 346ce6fb424f486cc32f7f46649649470cd57225
SHA512 591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad
SSDEEP 12:TLeEwjcyNTSFby6nMCUl9ASJLSRmBEyPbAVOwG:TLerNQnSnAS9hGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db

Path /data/user/0/com.wattforex/databases/ut.db
Size 20KB
SHA256 61210807148a96cbec4ae4a7c425cac9dc493a6ec9227096bef037a170de827b
MD5 338d52d78cd07cfd517029d003f5409c
SHA1 e14e1afe5d8e0bb83566daee2322fc0963c29cba
SHA512 b07aea4a42447b1aecbf38b58bf57a2d9e109894c6b3bb247c96047072721754ab54e41fd8620bbafc9d4c28e3fb00f26dc470f1b84d3b7dccbf143530d51a88
SSDEEP 48:TeBQnYsSP/0/tTkmsgl8a/tTC108xOY+MCv:nQPchkmsjahox2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db-journal

Path /data/user/0/com.wattforex/databases/ut.db-journal
Size 512B
SHA256 0074d8124dd8b5c9355857e815131a1e1af8847960926820708a9a1e3a94ef81
MD5 108c3ce5fe9c0be850b5c610b9933e60
SHA1 6f29bc7dea52cc6c01b92e3b3e4a839038d9a49f
SHA512 3330e2bdefc8896063a7961c462d032451609372bf5380dd26afa7a093513a450fbbf3db301ff088437910b9839b55715f3aee6137ed39724e59310d8ed4b855
MD5 SHA1 SHA512

Submit Download

ut.db-journal

Path /data/user/0/com.wattforex/databases/ut.db-journal
Size 8KB
SHA256 9e553258da1df1d62370271e27214ad34b15dfa9f2b722ac58c340ab28b555dc
MD5 c820ebfcca061bc9f02f03e41cf3028a
SHA1 2b2a05dfccfb2fdefb7ccf977ad0391195eb8794
SHA512 bab6186d304d2a7c16bb53719d5e344c645407df34a360e0b14d8af6b6880aadfe28fc08e4fb89effe209e60d9c46166e4a71f49236e754876583b675466cbd5
SSDEEP 6:7+/l9yln16+g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKkF:7+tkrqLiuWdYRmBEyPb/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db-journal

Path /data/user/0/com.wattforex/databases/ut.db-journal
Size 8KB
SHA256 7371a2bd33091720327f6e45f028f41903f04fb74bf8faa04dbe3be05d2b8905
MD5 bf49cc2c0612f7a3e89f2bb3fb8144c3
SHA1 3d05b65a94b2c196cbbde3c48a29f017e1aebfac
SHA512 119391fab2b9e4db4defd7d8115b3e859e9487096d232d333fd896eec01c240bab01e161fffbd6254b9f1abe5a93bf5b88a88e481e749bc34e91d2bd077491e5
SSDEEP 6:7+/l91yyPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKugl9M/u:7+tiGqLJdeWRmBEyPbfisu
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db-journal

Path /data/user/0/com.wattforex/databases/ut.db-journal
Size 12KB
SHA256 16c1b0dff8cbdbdeedb1a79690c8ec991bfb9d97b84111a384cea6798465225a
MD5 0849ece357486a00ed14e9d0900f5733
SHA1 bb0af02e9d571bfe8f5e8a31b8bce92dd4974e72
SHA512 b6a9068d2ada3a8a99af2889c701a319e66981500107f545f0d95450da5308c0dbe88cfe00c0d8ad58fd0c1529c7585609b25f53b5b990cf979f8ae05b4d3825
SSDEEP 12:7+tHMSvpJ4QN2vqLeEwjcyNTSFby6nMCUl9ASJLSRmBEyPbS:7+tGiWqLerNQnSnAS9hGSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/user/0/com.wattforex/files/.jglogs/.jg.ac
Size 8KB
SHA256 70df6d67a7ff862c89d757d3c2b61f1759d52b524dadae470277ae7174c1ad0f
MD5 fa14fa93f654412e22556e6445a89e82
SHA1 859ed420bb0c07cb5293198b12d12d37bfb82915
SHA512 2622b95c4169e1e387555e770f5f079062d5c04ea1af5f3ca178bcf84f51cad151081b1f1cae9db0cd737ab4a96b3e7da929b3539241ec7b4aead41782902bf8
SSDEEP 48:7M91YCi7KjCZIGLCi7K84juFslgiuOCi7KyqFX85WuAriStwwuMN5meposSv:7aY37K+x37KtuFsJ37Kyb53Azwv
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.di

Path /data/user/0/com.wattforex/files/.jglogs/.jg.di
Size 340B
SHA256 dbcba207a9b2832267918a64b9b0141598d3db43b2d7e1ccd77433ca082c2662
MD5 201b61b87e9e780ea113685250179fc2
SHA1 c7c4e4fbd86dce31f517bb56e2f7c81fe4238eb3
SHA512 b1412512c445e59860cf637e9b123a4da1e02ed9a550082d5861e44676c8389b3958c4fe2cafcf580598a2a9e1f4b0398c0f3f10fe2099d329c9fdc76ae6ed03
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/user/0/com.wattforex/files/.jglogs/.jg.ic
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/user/0/com.wattforex/files/.jglogs/.jg.rd
Size 12KB
SHA256 8e4c6e7708d446b40665e5a818d26fcee3ba724cad8a67716f6df79ad156e46f
MD5 44b5b55ad710cc30a1660a570890f7b3
SHA1 a378851c6771c94fa5d0bf61f46cbb4d6a9a5ef2
SHA512 07da411c54833a9a589b33516638b863dd8cb356e7431eda2401a34c3189668445eb8fdcf293a716373223d227e0bfb9597a85eab8bab27b49e3ee6bf5930ca4
SSDEEP 48:6yJWrH4BDqeX85WuAriStwwuMN5meposSF:6eEHqDW53AzwF
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ri

Path /data/user/0/com.wattforex/files/.jglogs/.jg.ri
Size 28KB
SHA256 54d2df91f703f0b7542a8632da0cb1e1fcecf015990b6c35858f90b6778b94a6
MD5 859ee457772eb0aacbd6cdf510374dec
SHA1 9d72f683f37962bc2a118b104d40d6a6853ed0ac
SHA512 1687dea1c25761f20d6ea3e6a3eeab1309110b9f287f9a10db1deeb034d134fdbecdf4655ada921a603fa7d900df5feb589fed05141597153e4481d2aefd7196
SSDEEP 48:T2mX85WuAriStwwuMN5meposSP/QJCi7K/1YCi7KjCZIGLCi7K84juFslgiuOCiy:e53AzwP4J37KdY37K+x37KtuFsJ37KZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jiagu.lock

Path /data/user/0/com.wattforex/files/.jiagu.lock
Size 12KB
SHA256 13b0b06a7a4944cc3f134909c9d332a66678c305f527ca9ddd7de57fbd1b86de
MD5 aa6a2ca92d5b537651e3059c905570bc
SHA1 b1b5ef516e3ed7fc7e035618be064cc166024365
SHA512 801edfdc0fabe033bbfc2a4aee396a1d6b5d31056703ac5dfaf08044e1983e818ffc0f73022ba1615bf2ac856eecdb1a16d172e52367d228436c3fbe7a713a5c
SSDEEP 24:7+tY/AXO/b7qL3XRXBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSo:7MY/I6qDRX85WuAriStwwuMN5meposSo
MD5 SHA1 SHA512 SSDEEP

Submit Download

exchangeIdentity.json

Path /data/user/0/com.wattforex/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 6e238e599b4bf64c6f6ee9419d91c290c10234035d93507b58341e222b0de75e
MD5 485e008a935180d3099dba0c00ee2596
SHA1 097c6cb5d61f1443e8019b90416c8ef89aa09bcc
SHA512 21ad7d120d8288b83e904f72ed0c72bc23a37aa6fbb45a462bbaa72c189ea26aef8bd6d62917d99624b7439a2b80a4a3bb0cafdf45da57ad95cf2f97e4f81f8f
MD5 SHA1 SHA512

Submit Download

AppEventsLogger.persistedevents

Path /data/user/0/com.wattforex/files/AppEventsLogger.persistedevents
Size 403B
SHA256 52b55d38fa111c1e61b2ec28e6a4a0a2b5d3ed57ed9d8fe640ad3a7a7ad17b06
MD5 b6d5c985499674f5b5fa941dfebdc9c0
SHA1 cbd7f2cc63712dd400a00381dc75c4d18dc4aef2
SHA512 c4b290770b4e5a16924ded11929db74ce780969f295859eaf1d4308066a3d414f4fd12f5c80788f5790d09b6300b01dab1250c70370c943ea5a2ec27eb24c3a1
MD5 SHA1 SHA512

Submit Download

com_alibaba_aliyun_crash_defend_sdk_info

Path /data/user/0/com.wattforex/files/com_alibaba_aliyun_crash_defend_sdk_info
Size 8KB
SHA256 02fcc6cd2e7f72b17d3f1855064637dcabfcbff772ad1684f1442f57e3476ffa
MD5 d56036586fe7ea7626521360469d547c
SHA1 032a22dc5fd573570f33e27c2beafb1a416d7af2
SHA512 6e84fdfd70998b86b40639c484e42a22b4e297148efff5819ba1c368a87d53215e35dd05afc7db2feabd854d4c5f5e8551ca899965de85ceefefe461f634e2ab
SSDEEP 24:7+tOIwSqLy+1XBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSW:7MOI5qVX85WuAriStwwuMN5meposSW
MD5 SHA1 SHA512 SSDEEP

Submit Download

com_alibaba_aliyun_crash_defend_sdk_info

Path /data/user/0/com.wattforex/files/com_alibaba_aliyun_crash_defend_sdk_info
Size 222B
SHA256 5b01d57011d37b1696b648854a857864d6458647e7f80c30ac580deaf6128007
MD5 df21b227deba040cf0b040d0e65e4440
SHA1 a83676d8341a2ecbf72a0081329e0cb17776c1ce
SHA512 9703d6f599af75e19ac4542e4ade16b8fabb637477cdbd671dfda039364e649e41eba967ee5aef0c2a0055e70e5281fd9dab6f164c124b9a96ebda0f27b89a40
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/user/0/com.wattforex/files/exid.dat
Size 55B
SHA256 6129d31e2d70ba26622f4dc7e5930a8d4415ea8c2e308612fec5f4c701c30084
MD5 77e44a1b61f3f31dd96bf80cc09f0422
SHA1 01a86447ce254a2fe46a20e6cfc081c3cc64c3b1
SHA512 326682c324fb0f6f1da05ee32d1a907ffdea535883b46e8e2b32cf117badce4ddb7a74fe54c08b3ae2210ba94be8d3ebe0d31b473b9706acf47daf29979098d9
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.wattforex/files/umeng_it.cache
Size 433B
SHA256 eda65226f2646e25b1b3c5cb6690d7663fc85dcda79c71ec70ac58c83bbd5973
MD5 90bd7cc11711a23559c17a25f63396b6
SHA1 c5bb5013f9b929899ebdf3b0dd909ea3f2a524b8
SHA512 8207e77a9621f8fa83682d0cd1aaf0de4261e1ac474404d989063f26fc8e3ad4d99aba15aaf5a1c4087e9f5f0c18943788b69e91f141cf40fcd456ae73b27df3
MD5 SHA1 SHA512

Submit Download

unicorn#cheese#

Path /data/user/0/com.wattforex/unicorn#cheese#
Size 20KB
SHA256 84a34a1d31fcbea3af12b65e4e497d41a83ddc059e10a3982c7b1dee0014e1cd
MD5 f5d8e72409b41147fc176ecf4dc0c0f0
SHA1 49099174029c2bca1476edb32f7fed6b2080866b
SHA512 82da4b02b0ccef78ec0fd5a6cccbd9ca30512625ac83bb906a2f93affd18ab33f73f841628407f485fb4e86a0b6759675b5f674856cd2c439f02a64fcbceb687
SSDEEP 48:6iETKHxY218v4KpJ2VsXoZPFdXr9+le24AQnYsSP/ha/tTC10HxOY+UgD/tTkmsz:6TAx8vTbHoBYeDQPchTx2hkmsjahox3
MD5 SHA1 SHA512 SSDEEP

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 28KB
SHA256 120674aef523d783378174d56a87b5285e1009a41f2feac09faf035e437c56a1
MD5 f11107821c9c921c8ad8f1ab2d53650e
SHA1 1b5a180ec070b3def748f837b2d4d5ce17612443
SHA512 6531c8cce64ec1bb843ed0be6e7b91f23883ebf3a94a41e92eb6a4acd803977121194d2d3df684c81157b7e7c3e591428f3e1cfb70224432916ee15726752958
SSDEEP 192:VE5e5Gyc5cB4dc5qc5ljbc5aWc5urHc5uWN:Vj54Q4C3SGVR
MD5 SHA1 SHA512 SSDEEP

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 16KB
SHA256 1434f70eeb18d5131ba75158f6dd653d6adacbad669376f2b4dc2ba62fd5a1a6
MD5 80d2c81fad6f0a6ec1b23d3d636f73ed
SHA1 3a2fb3932415a0ff87e89594265c4be81b6db1ff
SHA512 846afd25fb94a2be0b12e2ee0066132d410f368d258b8a2db3dfb9b6baadbfe0bb3f8ce3d8d2e54b96681e3e868c5506e9a2a5392fae6861e9696ece62a75bd3
SSDEEP 12:7+t78YpqLqlBEwjcyNTSFby6nMCUl9ASJLSRmBEyPbaUz:7+tQYpqLqlBrNQnSnAS9hGS9z
MD5 SHA1 SHA512 SSDEEP

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 213B
SHA256 ed58f18dbe5f69e366e0348b4f144b776d8a662b09f966c6952115e16484f9d7
MD5 0f2366f1e06e822c14926daa1a8f8e97
SHA1 778ebd924f3dcfd5790fd30801d0cece40156ad1
SHA512 d65497e72f475f7915af9f27d4b4539ca7a0174c414e4fa90570de414a90e22d43e9dc3db90ea2ce7bcdd0b5744f235b72ccfa5dabcb0c3387cc3ebd31211acb
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 8KB
SHA256 d098ba29a0bda3f84675f65063733934e09a37e0c4a156aa45719bb906e76303
MD5 63918c8a24ea3dd5dc6db5e9459aa980
SHA1 e528496457234bf6f7efa4d4d23cb15da3d029bc
SHA512 02850c57c0b18545d4eb6ce346db749a251f2fb44633d2dbe506e7cd129fc2e4e33a4b88ff08c09940fddb3cf18613a25fef75f6f2b05cb43f10dcc660aa90f5
SSDEEP 24:7+tpOsFwqRqLW6XBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSY:7MgarRqFX85WuAriStwwuMN5meposSY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 12KB
SHA256 e76f6747177d20e35bba1f71a73670583718c670116458af2b014a6d5c5cd8e6
MD5 5941c6cf9e7d89e4ae0c8b77d6fe2334
SHA1 9822fa3f24d3329c4761d3f1f6c93ec527c7f8af
SHA512 932ec319f144e2862cd994a6904ed0e87fff729e07f0f3aab163fc059a71c6a8ac5634a32b0fdf364546c12dae334d6c40eefbdce647f27c8072df67f0d1f61d
SSDEEP 192:7n6c5cB4dc5qc5ljbc5aWc5urHc5uWkLeb:7nQ4C3SGVgLeb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 32KB
SHA256 e412fb060a2c76a5aa2fb4ab44fabf54f44e3425172e0950b2a7e855b44f5e31
MD5 17029d089c4d9b4928ce4e28af33fc93
SHA1 c20f09ed56c19aac38efd0c1eadcdb7f3d525d20
SHA512 bc5d2d9f170ba81b697ddfa943eff3e7e1359527a1f92f01027f8f061f20c567f7015aa4fe8b70e495f8a75d4be9b6b606c6323c672a805373777ebd52e35edd
SSDEEP 48:TTQnYsSyzd/tTkmsv4BbQ4XIVav/tTkmsDYt:SQ6hkmsQ1rXqohkmsDYt
MD5 SHA1 SHA512 SSDEEP

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 64KB
SHA256 de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31
MD5 fcd6bcb56c1689fcef28b57c22475bad
SHA1 1adc95bebe9eea8c112d40cd04ab7a8d75c4f961
SHA512 73e4153936dab198397b74ee9efc26093dda721eaab2f8d92786891153b45b04265a161b169c988edb0db2c53124607b6eaaa816559c5ce54f3dbc9fa6a7a4b2
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 8KB
SHA256 20cf4e76c24465b19de96fa3d7a7910af42e172118dcabf0a81eb3c988bb12b7
MD5 28cb02533f618878539785a0989d7434
SHA1 c9b2a131af297500f992bbb61c9fe4fc081652a7
SHA512 6c51509f597a4c7dffc460fef0a8d69c07c89bacbf1880db7823fd5e75e1dcd8359d82796efc6447967e72937b7d2f1ff3d10fbd64dea1e89ad3e7b0630686e7
SSDEEP 48:6yJoQ/L4juFslgiuOCi7K9qOX85WuAriStwwuMN5meposSf:6eoQ/QuFsJ37K9m53Azwf
MD5 SHA1 SHA512 SSDEEP

Submit Download

585c75ec92e5454f85460ae71ad07eab

Path /storage/emulated/0/Android/data/com.wattforex/cache/585c75ec92e5454f85460ae71ad07eab
Size 372B
SHA256 228483c8b8fccb43edec693449aee3f6a590bc970edc0b9fa055ed021fb040dc
MD5 bf17a004d9e8d4917171b5e9e2dbc811
SHA1 822019d0e213ac60c4617ca2d7b30e233cbfbdc2
SHA512 0fd1ad01f44822d936c802c6dd81dccc34345444efd331e425c311c095264d62087d8b0c10e77924c70e0f5eca9ef910694485695eb3d99f47b3acfc1ab68bc6
MD5 SHA1 SHA512

Submit Download

aae25ada3e884cb6bd8c1248446b208a

Path /storage/emulated/0/Android/data/com.wattforex/cache/aae25ada3e884cb6bd8c1248446b208a
Size 268B
SHA256 01781501148d11aaad64c79514f2efb4ff09e310b6096282eed6617d190c138a
MD5 82e3fe2d3489b4550943ac476a545564
SHA1 e18c1907542b972c903e2dd7aea93945619cd36b
SHA512 c74704293c5f678cf9e61cd57b2b6170e8155134eda243182a35a8be4ffec0cce488c2f94c3e30bd48204c6e28de1883b1139e7d0900458832828c224731d50b
MD5 SHA1 SHA512

Submit Download

.nulplt

Path /storage/emulated/0/Mob/comm/dbs/.nulplt
Size 8B
SHA256 a1ea68ae0189b2cc1ce2495b51679496c03f18b101d43cfe6b47eb4f63d2c558
MD5 731dbe49b40b4be56a514df08d3e6b3b
SHA1 c7c1801befecc9c704d2c444a407df411cce142b
SHA512 e7a20dc4eb7e310c9c8370b0ed8e8634dcd0e173c1bd5391e9bb6fe785c360925c939d19d9eb4959d866580d2b272187feb0cc8ce186913367a2022436a6afbf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads