e9e1b3b67e882f20c754ec558a8f19785379aa771bdf1170819a897bb36c2742

Analysis

max time kernel
178s
max time network
189s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
14-06-2024 00:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a747d611b2cccd748f3ef31f298282b0_JaffaCakes118.apk
Size

23.8MB
MD5

a747d611b2cccd748f3ef31f298282b0
SHA1

06f7b762a7c1234437894ff50d0549ef803f0929
SHA256

e9e1b3b67e882f20c754ec558a8f19785379aa771bdf1170819a897bb36c2742
SHA512

f9eaa234bc22a0fd2f89777c86744898371a37b9440d26bec7a45a5b7640f155c82c9e489a6cd088caaeebc7ee7b0ff32304045b21aec35ffa0e341eb8d297ef
SSDEEP

393216:3RVT7GGpL9zqc4YSSkPcwT+HWmQ90tDcY3fISsgJzNRNa5eEcvO4rfsO831mw2ml:3jeinqPp+2mQOtC8zJAL47UF/HZ0L5G

Score

7^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 16 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.dataseed.cashnow/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.dataseed.cashnow/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.dataseed.cashnow/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&com.dataseed.cashnow:channelcom.dataseed.cashnow:channel

ioc	pid	process
/data/data/com.dataseed.cashnow/.jiagu/classes.dex	4323	com.dataseed.cashnow
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes2.dex	4323	com.dataseed.cashnow
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes3.dex	4323	com.dataseed.cashnow
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4323	com.dataseed.cashnow
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4356	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.dataseed.cashnow/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.dataseed.cashnow/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4323	com.dataseed.cashnow
/data/data/com.dataseed.cashnow/.jiagu/classes.dex	4690	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes2.dex	4690	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes3.dex	4690	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4690	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4690	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/classes.dex	4782	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes2.dex	4782	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes3.dex	4782	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4782	com.dataseed.cashnow:channel
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex	4782	com.dataseed.cashnow:channel

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.dataseed.cashnowcom.dataseed.cashnow:channelcom.dataseed.cashnow:channel

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.dataseed.cashnow
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.dataseed.cashnow:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.dataseed.cashnow:channel

Requests cell location 2 TTPs 4 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

T1430

T1627.001

Processes:

com.dataseed.cashnowcom.dataseed.cashnow:channelcom.dataseed.cashnow:channel

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.dataseed.cashnow
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.dataseed.cashnow:channel
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.dataseed.cashnow:channel
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.dataseed.cashnow:channel

Queries information about active data network 1 TTPs 3 IoCs

discovery

T1421

Processes:

com.dataseed.cashnowcom.dataseed.cashnow:channelcom.dataseed.cashnow:channel

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dataseed.cashnow
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dataseed.cashnow:channel
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dataseed.cashnow:channel

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.dataseed.cashnow

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.dataseed.cashnow
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.dataseed.cashnow:channel

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.dataseed.cashnow:channel
Reads information about phone network operator. 1 TTPs
discovery

T1422

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dataseed.cashnow

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.dataseed.cashnow:channel

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

T1624.001

Processes:

com.dataseed.cashnowcom.dataseed.cashnow:channelcom.dataseed.cashnow:channel

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.dataseed.cashnow
Framework service call	android.app.IActivityManager.registerReceiver	com.dataseed.cashnow:channel
Framework service call	android.app.IActivityManager.registerReceiver	com.dataseed.cashnow:channel

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.dataseed.cashnow:channel

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.dataseed.cashnow:channel

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.dataseed.cashnow:channel

Checks CPU information 2 TTPs 3 IoCs

T1633.001

T1426

Processes:

com.dataseed.cashnow:channelcom.dataseed.cashnow:channelcom.dataseed.cashnow

description	ioc	process
File opened for read	/proc/cpuinfo	com.dataseed.cashnow:channel
File opened for read	/proc/cpuinfo	com.dataseed.cashnow:channel
File opened for read	/proc/cpuinfo	com.dataseed.cashnow

Checks memory information 2 TTPs 3 IoCs

T1633.001

T1426

Processes:

com.dataseed.cashnow:channelcom.dataseed.cashnow:channelcom.dataseed.cashnow

description	ioc	process
File opened for read	/proc/meminfo	com.dataseed.cashnow:channel
File opened for read	/proc/meminfo	com.dataseed.cashnow:channel
File opened for read	/proc/meminfo	com.dataseed.cashnow

com.dataseed.cashnow
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4323

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.dataseed.cashnow/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.dataseed.cashnow/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:4356

com.dataseed.cashnow:channel
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Requests cell location
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4690

com.dataseed.cashnow:channel
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Requests cell location
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4782

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dataseed.cashnow/.jiagu/classes.dex
Filesize
4.5MB

MD5
abd42cae0bc1241661874e9ca524318e

SHA1
7e14261998cdc1043360fa673f07cec1409bc088

SHA256
ffc68ba621a4580715ff9c0f419f7cd7766a50f95a929fc1d3f1fd52a2386805

SHA512
afae740ab60e76dda3ec6c9bff90139ffd5d4a6ee7601770f541f0c36bf95edfad3b26dafa9c124c54eb9c63c37996f2ad539adc1e9d95e529c5e15b875dc32e

Download Submit
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes2.dex
Filesize
6.1MB

MD5
9e85a091cbe27950e0465fbebeed9710

SHA1
d6513c707535a92d81da172dd54829f61f655975

SHA256
7275fb51e56e93ebcb76b21d2508186972a19ba545aa52e80b9286834830a82b

SHA512
4e18e0336df440594793b61811ec99a5eb21d8c083ac0f586c4e53c340464322e5232fdec93f9d381c916aa24b9f0f78bf4edd45d298727e433c021a97686919

Download Submit
/data/data/com.dataseed.cashnow/.jiagu/classes.dex!classes3.dex
Filesize
1.4MB

MD5
c8199c5b7fa427c3435da127a28a8502

SHA1
98bc7d75374c81052a71b48dd3ddc7185f2c3e79

SHA256
d2ed74d9aa95bd735688abe791b1aa82b00af7cad7152a9fa1b32e7466ca9de7

SHA512
45ff81fda887bd73182c3cfaa74cfbf98a25c031ee874b190d2428420ac513945e6cc308de11e1f88f1416f849584b435549bbc545c983e338336bd698fb83e0

Download Submit
/data/data/com.dataseed.cashnow/.jiagu/libjiagu.so
Filesize
496KB

MD5
f07656a2f51ecb23edc102003c32b764

SHA1
3ef18f74b609313887b9e825c56a54b5a9eef20e

SHA256
f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913

SHA512
34b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238

Download Submit
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex
Filesize
284B

MD5
757eea85e09a10be12a976cffad7ac6c

SHA1
eb080a3aaf7bb16f2b3f38e35f7b7aecd8d5003c

SHA256
10b14100e544ada0418de6c344cbd4e0e1f1b82539801d3a07435c510190518b

SHA512
5a09bec4aed1091411d90479dada4e4ac7edde919f14710bb7929769a162f0bcccfcd7a1042c7b521882edbeff8102b2e4cbd002477686679989975340215f39

Download Submit
/data/data/com.dataseed.cashnow/.jiagu/tmp.dex
Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.dataseed.cashnow/databases/MessageStore.db
Filesize
4KB

MD5
75bd27519bf552c270c44329b9fc1d69

SHA1
93ac7a9e385cefe4c7d32c69aa0cb5230f4607b5

SHA256
aae3fa51e86f1856221301022986b8f1c46407e72174b244209127481950239e

SHA512
58970354a0f0b9e556e04680445beec8f1e77fbab46380ed5d7eaf64c3b0ddff791b28d7506b93330110c1e948ae3a04bcab2def6183483398b1086140251bd1

Download Submit
/data/data/com.dataseed.cashnow/databases/MessageStore.db-journal
Filesize
48KB

MD5
8c17cc29de20a1741d4ec64213a31e76

SHA1
97bc34c2d9c09c4d3893036c7ff0518051f3dec8

SHA256
6ff82663f2136d512b8b538fa6622a1ae732ad2bb66de0488c0b38651816b264

SHA512
cee1774195f8d1f18a59e92d2b25a90fe6fb3df15da4752f4ddd15a5c9f9f2f58f790560326fa53f51dddddaeb5e64a683ffa977a606a6b63ec8113f4c56a4bb

Download Submit
/data/data/com.dataseed.cashnow/databases/MessageStore.db-shm
Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.dataseed.cashnow/databases/MessageStore.db-wal
Filesize
56KB

MD5
58efabce74ad84f93e9c09eea0b57133

SHA1
8f403f65c844b409726c58e471c4820d7c6370c3

SHA256
33260725b4da22fca29eb7af805f7f4991e8ed6df20f3fbb846f59b927eede39

SHA512
8ba5b549ea3f30fed117221377a741744ffe20499eb20505d7eb3b391db3c7a15de8659f049334380b1086d0c5cdc5d5328fde323ca493f1ad1bbbc8f94e4e85

Download Submit
/data/data/com.dataseed.cashnow/databases/MsgLogStore.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.dataseed.cashnow/databases/MsgLogStore.db-journal
Filesize
512B

MD5
dc11ba7377712b3d54c0607a94bebc79

SHA1
721295abcb1c34fc63d6471987aff5b3f00e6d18

SHA256
da14750e5ab16e42cdbc647b6199c515b828d8d469f3c353393d6736e4225522

SHA512
7d5205c918189bc0591a7dc16afcc98765b41491cf589e373ef6129d19468a6d45ddd066d3f7ea22c639e054f1cff64664a99a7e553aeb841d8a9567b7c8a773

Download Submit
/data/data/com.dataseed.cashnow/databases/MsgLogStore.db-wal
Filesize
68KB

MD5
e6faf14167dc9f055943610b88a331bc

SHA1
2d53d4a99d1d4b1fb7aaf5d08325e8c2cd07b1cd

SHA256
99bc3697dbccd71d139461030c800f9a708351a6bcdfb59f8ea11fb16cc64d9e

SHA512
1d43341942c63cd5366c164bdddc47f02cddb54d812c358d3ef1341b69cf1c20545ebb46c9f97ca546ad4efdf87554dd192ff2a6428dd512baaf7749e14ebe59

Download Submit
/data/data/com.dataseed.cashnow/databases/accs.db-journal
Filesize
512B

MD5
1d1952de02bf409d0d4664f75ec72b70

SHA1
3d30b5833dbc446fe3d18efaf04d1df940b319a5

SHA256
37b1b6317a840d03b3785e91818d841d228fcb311286fc153c650fe7b30033cd

SHA512
fd5a604a7d7c3ebf01a392f9c606e1506a4064aa64b1c7fb8c53d5473bcb47be931d4b0e282a5d9bfae6132678a0ac89702afe4f5fb70cd42dcf15fd264fc8a8

Download Submit
/data/data/com.dataseed.cashnow/databases/accs.db-wal
Filesize
32KB

MD5
36fadb1e5bba96619f5b694cd8d1de64

SHA1
7c4e52a2685144a5c68da983bc3908f807923523

SHA256
7d7932a0aee53db64925cab354ee25b2bcbf2659e81718fde9fb0deaf825fcfb

SHA512
fcbbcc63cf3375e232da7085e91e4ba79b07a59b377a427b7477f8a819d1d23e93b9a5bf3726b654f0822217dbbadeffc04c1c6482ef0f700cd46204809b9cad

Download Submit
/data/data/com.dataseed.cashnow/files/.jglogs/.jg.ac
Filesize
111B

MD5
1a3cd611208f9994715d0f234f1bd667

SHA1
cd878ea334c5699648752778d9e8de4c3bf27350

SHA256
1a0099ed23c4e56942d89d581cc6d9d9f49634a21cee9a83b8b1e13bd465438a

SHA512
ab1bc5319f9f63bcdc4344b82800dcedd75dab1aafd1389f2810a27a33bfb83b3a749571a746bd25b5bb11c41e1e36461d0a2fdc9f92580109a4106cbd705cba

Download Submit
/data/data/com.dataseed.cashnow/files/.jglogs/.jg.di
Filesize
340B

MD5
beed91d933518b7e01dcec1151b05216

SHA1
b15823f628c8f5d63a1a9febb571ea1aa073fa09

SHA256
89c7b16910f49b8448f58b324cea7564335922b75f4f69ac3542e2a8d4f3484b

SHA512
70016d9f746286be3d68cefe71ab8c8b99c323f0127df4578a6a76be25e08c56b5e7b79ee3030e870489ccc666df3dad1befabac5b39256b958606a0a09e2039

Download Submit
/data/data/com.dataseed.cashnow/files/.jglogs/.jg.ic
Filesize
167B

MD5
1f8c0f248c70962665f3ea4fe3f26ef7

SHA1
784447f62d205cf64aa8fee35a968593a13a6c08

SHA256
0690793645c2350caa0f58bc4a94455c2fce5fea7d75f38a5bdc69c6fbfa3c88

SHA512
4104257cadd578aeb94963b2bad5fb23801efd16e9fdb721bedce1373f15c75c2e68ddeec9a1ca742764b7c5e4340683a5b498b3a33b22d31d372c593a768f49

Download Submit
/data/data/com.dataseed.cashnow/files/.jglogs/.jg.rd
Filesize
167B

MD5
b72f154f357389bcc6598a29555a0cc3

SHA1
77bb540e2e7a9e58024d9124e5ef412096b4fbb5

SHA256
e150119a9cedde2cd808e5ae754c302424ca3702237edd75741c27c6aa8e17b9

SHA512
2e4eff622502f560ac654865bc5341abbf9b8a8390c84dbbb53f979ef98251156ff652c7c5b9224f9ace330e946ae33b3e5923d1c2ebea6ae16756f230146c6e

Download Submit
/data/data/com.dataseed.cashnow/files/.jglogs/.jg.ri
Filesize
314B

MD5
bfbf8bd3e87ed169b4c9ec6cfd296820

SHA1
96e867d10a97c7b85d1aab94efe69304d45ff836

SHA256
dadff1bc7beff7b14e97d7a00b4f03a0183f68b4c9c271f57a30766a35b4c640

SHA512
d3566bbe76b0b4d5ce8b26e05dde40d04058502655e17028da4f2fe5fa7390bda88a27aca3a8cf9f90505b52649b0908b31a9f2967fa27c5535e052902dee3c5

Download Submit
/data/data/com.dataseed.cashnow/files/.jiagu.lock
Filesize
76KB

MD5
eaa18f5858bb6c30649afe3e4ffa4e1f

SHA1
cbba10689438075f1b9032a5f0736fb832f9c8e9

SHA256
d1621484786b1d80515aa3bac44d76cd5385e76a593cdc3f8e330e0911a09d5f

SHA512
5db04cb87e1b779cdba71ad9e8960178baa4adb1ee3c013b1622b1b8604eb2c9aede7da63b377f1568f2d2e28486fa4d56b948c794fc02087d1325b95c7b581e

Download Submit
/data/data/com.dataseed.cashnow/files/TDCloud_Control_Cache_Param1
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database0SaaS/1718324379833_4782
Filesize
2KB

MD5
ef7d5f52fe3e3fe8435c106bcc1c0fe1

SHA1
b52ec9448d4ae6be113b4ab2c36ccb81223ccdc7

SHA256
022da105bd102e3a8cf043cf77a2cae6cfa67e5aeb083b7718421d2e4e0cb493

SHA512
e205a2fc4c328d157f95b0e9761473174c36963dc0e9ca2f942df47fb5370a4c67a91322310998668ca5a33fa672cb7bafcedb58b888fb0a1ea3baeda5f9d804

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database2SaaS/1718324379082_4782
Filesize
2KB

MD5
6ebad54654b652e47f5a6053da0bb089

SHA1
273a6e508ce1f5a9a39b1af2ac6b07b3afabe1e7

SHA256
6786983bbfe835806d315361f7c07ac7cb1335f493d69ee8ff932cfee6c9fec9

SHA512
26745c21cb33f50de8918ed051bb0d930b1b4bfc9d414de5ee747918f4bdcea20b765b9525d7fc3938aa99623ec148781545b1e42c35b7a2d5e87fdf56ef32f2

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database2SaaS/1718324379853_4782
Filesize
3KB

MD5
38044346ba6c056845ba24771cde08c6

SHA1
f3dd7041d4b32814f1e76b520f1441432f378fed

SHA256
25d010b9987b0a1389038f792e605a6e747fcdbb8776fab7a1bc66d66a545cfc

SHA512
ff2b1bed04398d3e2fa481acfc4fb840cfdebad145cc652c7c1b296a69a307853095187274005e12a44cb2e8c70a87691673c446aa609d2bf19233fc5d178075

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database2SaaS/1718324431742_4782
Filesize
4KB

MD5
7bf265059c9c7c905df79b436e4c7bf4

SHA1
1b097c7fe8bfd77a47352d5c2669704fe894b308

SHA256
2e33f8d1b40ec70e32846b4c6d84921ea23f524df43d1b5ac44ade8348c470b9

SHA512
ea599288721794f3dcd6377b1037f7ccf37d5d1ea42ff811bddc21f505ec71e409f01fb95bae718a176e563695defc44d9a581a1f552f6b1261c356379cb1004

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database2SaaS/1718324431962_4782
Filesize
4KB

MD5
3eeafbcb9c7a98849def9c3928a5191a

SHA1
caac7378478a15a10f57aeefa1cce2e0991cd4bd

SHA256
c919db62241fb40a7de1cc3d3f927a41271e4bd7f6cf95fa2857457b8b34221b

SHA512
626646bcc6c0741180f25cadeca93c43bf01f4fffeee5888d38d31cd677852791c88a634b12441953fccca5b6c5814c7dc7afd1d85d447401636beaecfe7ee0b

Download Submit
/data/data/com.dataseed.cashnow/files/__database_reborn_January_one__/td_database2SaaS/1718324500874_4782
Filesize
3KB

MD5
9976258b020453851d3cec4d3ea42f38

SHA1
2bc0e47f83ad55f2fad56a863c35b7e4e707a52e

SHA256
b2bd570a5ca9181e9cb862ec3d4f76eb5b74e37fb61f3f3236449e7b757df2e0

SHA512
838cefec1b75210b3423dd1816261a0d0e72866930816ba44adc520388a437ca64d14727376b76de79dd13d49a3d029e0db45dfde60384d03e0669a0f1b130b4

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
3KB

MD5
88f28f75dca48ab3ae8a71d1a62f2190

SHA1
c1d97e01c8f6e40f73c564abd6a94863b5a12d23

SHA256
551057a99675c831dd3b0a25ceff52796ba1c94db94dbd224fa24bf92294719d

SHA512
42a6984dff00cc4e2c8300fdf5d8e024f3fbdeaa7d67347b70cf86323dc0b36b464024b04eb86b8f5c18e8b759eb835232e353f426c23052f29e271e34ccaa66

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
3KB

MD5
3bfc273856fd429e232c3c194171b588

SHA1
605cc88575746b435ad9d3db8d9587fc61b69817

SHA256
6d2bf8d26b1dc4746af8f97442cbf37b634b76b7d3ce1b88c5efa3bf12fb5073

SHA512
5a769f55f2e72dbed5e76907c203ef3d9bed3fd93720545debf244fbf02bf9b83e608b349a02564bb6489994729fa76afcd38f96061a1fb1af97065b542b0257

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
2KB

MD5
f61a9b0d93165fc9b5783fb79a768d28

SHA1
ba759d5c03b2a5572bdf4da61683b2a48a3eb597

SHA256
9118ceb11d0db186c9779d018db05e0388e3fada486ec5705ddb65f9c59d6dd3

SHA512
7a9964cd6b5084e5c45e96eba911be44f1c65d1c01b63f8982b4643a1947f90ef9faff4246842278c7a89cc75fab3625c3094edd9091592acdb2ba0048f644fc

Download Submit
/storage/emulated/0/.tcookieid
Filesize
3KB

MD5
134671b642235ded86674071a3e81475

SHA1
516b089dc2f82dc7d7fc712b62e02f710ae5d855

SHA256
52b36198f3f65e4b0bd99cea75741bbb92e19c807465b44cb977ab074a266e45

SHA512
e3a5dd93af5ae78f9907a274950ca8a169778093804a245f6acec4865bc8a26f534a8a5225992b9812ebe9b4713f886f58fa49d099a484b1c5d45f804a544a20

Download Submit
/storage/emulated/0/.tcookieid
Filesize
33B

MD5
5e35f6aa1d3456ad91463b45d0ae37c1

SHA1
7a5c41324709b14ffdea66d438917ecb1b552feb

SHA256
effd4dae14f598973a85d4233900afec6c46821dd852b0669e6be192da91849a

SHA512
c296aab11f5232b96e4f2e52e3ce910bd71698b0232178bd1a8863761af15d934830545ce57908ee0514c408534be40948f3f7a33776dfa235e557e3f3e989c2

Download Submit
/storage/emulated/0/360/.deviceId
Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/storage/emulated/0/360/.iddata
Filesize
32B

MD5
59aa25895507f6764d43ab6cb46cfd02

SHA1
b57165b724af2b43ddb272e4d377e059baf22505

SHA256
a108f168f05ff480cc58fe9675dfd1ad3e4046cf3f5ad40bccf29d52780ac313

SHA512
5e48166d51cd1503e189bc4d647efddb1d382cab1510592ef199cd2110b8a7491262eed38e0e951c4ab0e29e9998cf64a9b8503b1b9777e6067a04daea477ebb

Download Submit
/storage/emulated/0/Android/data/com.dataseed.cashnow/cache/1c67f332dead42a5a03eb2c59ec503f0
Filesize
793B

MD5
e3d1b27c44516a002d3f60289905ecc3

SHA1
428cbe3ca6280343e452f09a369eb15acdc8a735

SHA256
038ae856759f3c2ae31591163a2ba0b47369191daf28b228960881c9bb294abf

SHA512
6a7dc185d9166f7361945b6a80c282d97256a157f4f5342fba163ef89620e1ef0177e75420b8573eab2fd87e69d0a950e67c6431f9c88545a936a31b90076120

Download Submit
/storage/emulated/0/Android/data/com.dataseed.cashnow/cache/e82e8d32681a4f9a8bfd4939672cbd92
Filesize
780B

MD5
7e053b9ff60cae27ae8ad21d21632932

SHA1
674652aeea091ccc87e35cbe782b4c597c5e305f

SHA256
9573c317dab83c2c53eb65fe9b054b7888c116aa35f487ab26746e3ec383c9b3

SHA512
75dafacaf80780cb0140f5320234af957ed75a3af837069b52b1dbc44e67bb2e08f14dfafe1c3ca276e75b228c47b39f62a5d482fbdfb943d99f7e22ce5f4c8e

Download Submit