Analysis

  • max time kernel
    2479022s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 09:35

General

  • Target

    9d4daa43b379d6d1461cdc72b55c14d5def16c01c6eca3ffc9193274917ccfc8.apk

  • Size

    18.0MB

  • MD5

    ab7c12191b728cbe796f2c97d85dd73c

  • SHA1

    bf8f0fc6126bb9d7d79e0ef04b08a48738edd59c

  • SHA256

    9d4daa43b379d6d1461cdc72b55c14d5def16c01c6eca3ffc9193274917ccfc8

  • SHA512

    33b44fc2a1a40aa446610f9a0a105dca3c40811c3b3fd2cd61e946619014e4045661dd00c7a50ce822fa0ad455b7f9534b8d11202bb1900645400e195b582a19

  • SSDEEP

    393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3uz:+NKMf0ApyqHLF9Twc2SWeK

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4492
  • com.xgbuy.xg:pushcore
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4555

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

    Filesize

    486KB

    MD5

    50750315eef281575611bc425174b939

    SHA1

    acaff02526d7b4c257e00002ed09af364f66a401

    SHA256

    c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef

    SHA512

    60584a993992a68e8d0a53be705e3a9d52fc126df26b9bdcf80d14e659f1d70bceb926e0a99a69fdf40f1c09fd61aa52c2d2c008ee5c3ef59af5922a75161ea9

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.6MB

    MD5

    af40ddebf367d3418c410ba2bbdb34a6

    SHA1

    9a5c0f557da523fb37d3ea9f1dad84e45b78b8ab

    SHA256

    fd4c1d3b24b0138f6f355235f35815ff43de7e73e5029854ac0581f6d5b4cb45

    SHA512

    6ca004321a8ef7f6a08b5be12833971bf017ff58c753ebe73d682abcf5633f084b9b1f5c3453432894f8ce8c9b306963b345cc0d6503450667d9ef66d3ac0ae7

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    56a56032a56816197231ccd2c1447841

    SHA1

    42b24c7723619c5bbfff5625ee1f4ff7a9afb34a

    SHA256

    920b1975141f98268ddde30a18db00a3c92776c8472763640b06009b90ccf039

    SHA512

    f47a2ee1f15a58887d5158bf141277a7d6488fcd31a9c85ca0d6706a4252433b812e8a49e956fba313393ac55333bee777394d300e136d489a484f5e883e3165

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    2.1MB

    MD5

    63eb01b23dce33b6abd34b5693031ca8

    SHA1

    870abc96ae069aa034b1b647244af5465a881ddf

    SHA256

    3798ad86a5974af83d89bc71f1737c1747ca4561beb07f74a214675efab02629

    SHA512

    eac344e6167fc50acfca60a177bccf404cd0eb595b0b3e948f88af21ac3d7c14a49d0d7162bc5ef529b9107132c8ac3d0242186ac1b0ac231acc31e8f969311a

  • /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/8629d67571a4b27d4ec7af580cf1e40900ac4eace93076b6c452f349c85d1b5b.0.tmp

    Filesize

    106KB

    MD5

    7459aff7652a92bd0f6067f2d6e82f00

    SHA1

    df17e66aaa9218124c14a31c0b4830f1e3d85bdd

    SHA256

    57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935

    SHA512

    58a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae

  • /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal

    Filesize

    71B

    MD5

    0967158a5c7ad9a2ca87a731d15129dd

    SHA1

    51fd97817a26b127a21c05fcf58b682f5a81369f

    SHA256

    d89077cf376a761bed9c41a5cd2aca9fd78c737c8edd044a643b3038ce24fb1e

    SHA512

    ffabfc634fa0a82377758940ae42f339bc1c72365e476ce71fb07dab992b303a420b2f8aeb264ba8ee58c08f09fb20735c6ef767d31213b6262b3311faa8217b

  • /data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    069898869b3a952d5ad130c27540bc40

    SHA1

    a3e36be8492f1cad5f94afbde176181d9a201563

    SHA256

    04f9454d154d1f16e1fcfa6d884a55aebd2a4d2b6e8526d504bac0a3a7b3371a

    SHA512

    87fd48341bdcb38aba0c0ab5e57c085e1c668e3eec083e8eeed26d61b61fdce413dcc9d65d255adafde4fffa035957440c92c93e93a414a8e32d16ee8ec18033

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    a4e705c14d7d2e02dc2a6d7cce89c21c

    SHA1

    a5792a72755128133d56a29f97f402c629df7f8c

    SHA256

    d92a9126ed0008ab7ca547cf862c184aa9f02e233e07112353f08f6797e102a0

    SHA512

    cb862056103a0c65d646c644b7726c5a4e79df2fbb8d00d15c1de5c4ea5dbf94cc04740a97e58cce3cbdf8f4466d1461415c9ee466bedc60f3965896ab9191c2

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    9f331af3befc1c2006a0abd2f555a783

    SHA1

    6967d39e249a6da5cfa6395903d464ab6e387f0a

    SHA256

    392160865e6a6ca154901522e0996dbfc7717a8262b42188c53a7d754dba1cde

    SHA512

    d99665e1a84265f29b6842a7667c056e5964c88f13a75cdc94a2f27313ea0aef70b0ec6417ea2938f226eb1d8371b1032228565b79e8fe0e575386221f289e18

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    b6ddce86e82ef1312c07bb5e7431db29

    SHA1

    8c64de23cb3942c34c7d1c33827b9e6ebde5801c

    SHA256

    e735cff28fc848e5a26154437d5fc28cb1705c1d1db1521e87fa1007fc2ae4a5

    SHA512

    682c933e031da1ba5304035732132c33530ad57c10cf58a4c2b24dd0a3dfe1df6c7037e5e45135b39595dc878432f697745e7bc152fbe041a3ed1ba59f43c520

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    3ac0f77bbb63f89bb3bbd54948279084

    SHA1

    2e878e2e9e0f1478eae72edefc18a5e7e92d94cf

    SHA256

    a3a2459b3624072766bb61d3a0826e409b27beece57f35c95d1db77391a49b6a

    SHA512

    ae3e9a3e6481c03de4abeb0828e05b17012fa8f2777fcb4045b4d20e068439816fd8555c0f7001fb06910ba73549a7822b562c4f1acdaf0f2c7430ddbcec661c

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    fe57a266904a237d770659bbabb98b77

    SHA1

    53e1a35dbeb68ab0ba46ccd62d6423d5d3d80f7e

    SHA256

    54969711c66c9cb36114defebf522b43c7fe20947081da095161c43d90d0e4d8

    SHA512

    482a1ed427349feeae05f88970e204cf8e5d7b4272dc4f21d763fd2b6625dc7897d5aa3895edc0122a7933bba66324c8c7c8c180c4eff67eca974e1d83949470

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    512B

    MD5

    5a80b45e115e7728103373feea245a8b

    SHA1

    a9c890e01212f5fe0283cf93d84f112eeedb8336

    SHA256

    b25acdb7e7b214a5bfbb4e2d6042ba0b895d13ecf6296ac8f95929ab0a5c4950

    SHA512

    4a14127007746c97cea072c8e04997f06fdf311db9f1551eae6b89371f34e50d03291a41fe904cf4ccc8d4f3198ef44d9ccc71038a77b89178a5f134ddf0af74

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    8KB

    MD5

    968fa16a4ec3ad60b685a20d4016c00e

    SHA1

    9e273975afa1d47f3ba77c9c7a0faf7d5467b12b

    SHA256

    8358e8684877f7a283816a09fe53599462060032746301f58cbd3106ebbc2d47

    SHA512

    e94eb2cb13fc7c6a255b2a2e4bfaa75438901a578d2ab641ea1d72f56191e3305807e199cb551bb73f54f328289eb6da298fe945de0d2bda437a382a130a6927

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    4KB

    MD5

    bf0b9ce63b9feb6262da665e9335fa44

    SHA1

    2c0d5a870ca457b9649e6419ab1f845fe6273fb5

    SHA256

    ef229ed0e30b62ee47ab4628613da1a8bdd66991add35ea50a2f8c6b80cff6b5

    SHA512

    4ed91ef0f50e291126cba06a4d3061804b7c9dcb6e55ffb0f7f915ecaec4d9619f83e644bc182bc3ecc73cf56a70bb516fabd69234fd8393ebaede23f44d9680

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    8KB

    MD5

    a68373133bc8e9eada0ab49ac880a110

    SHA1

    016a25e8456b68fbd8a5a25b1ebb6431ab60619b

    SHA256

    54f4a775f3743078a32526f9bd25df5dcd6d498c5ee8fa2769404f942946366b

    SHA512

    e8fdd6d12e18b2b1e28112d545a1e447f90788b9ff3339faa95fa260e3929ee52dd80e76259429313a8f0725fe8fa5ed41decc23daf3e918cbac84cf05e93041

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    12KB

    MD5

    10066f9ce7b943ab224bfa5042c934a3

    SHA1

    9d7574c716aeefb248ba4e6b462624057985b655

    SHA256

    439200e4dd7ef9c73cb2a83ca2849844a847a9f5a76b01f9c308d53d358d5477

    SHA512

    52aede333164f4a9c28f35aa726f6cd59620497e4b44340106961254e54d5fa8eaa10f2349a54a50b6c237dcd4604d54e1acf29c15d59e6b26e761423c233f20

  • /data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    12KB

    MD5

    15c2de2c5e4f54d2d97b160bbf3cd939

    SHA1

    ec1617a91bb49fe8474f89cb96c27e60b8fa185d

    SHA256

    955fc9f2ff3fef52f673a06f4331469fef42697a339b9c1324372e3110f06593

    SHA512

    1f270bdc18916f7abd7edcb72947de92742371c7acb4ea973dc57a3711b86af0d7afb747e1a26cc007ac2aaed25c4c9be3e796e1c0a5fc812bd3bb874ecf9c3f

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db

    Filesize

    20KB

    MD5

    61c6e06afed0ed244319a8b366ccac7f

    SHA1

    e22ae75378d506a7b13191e12b48341f5d518091

    SHA256

    2d8d6058ca911211fed5562ac88fc34a45718dbfd2e6b8aa26b52f121a48aa9d

    SHA512

    806f9ad0077c1f3b8a71eebc3a327eb7037717dc9c33b71219c54d7ccf955fa5c60fbab06dbfae8d022cf0acd0d8eb6bee231d74afcb926a923b9f32f39785fb

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    512B

    MD5

    8d0588b65cd6281cce9387d6e35be75c

    SHA1

    99893a827ac02fba9f8435279cbd267172fd8bc3

    SHA256

    e53faf3c059bc35ce5cd986c3feb0a0ec9a57f51600a27760a4e5a630f96f0a1

    SHA512

    33f4e0e858fbc6d178e521a9d9630efca9d6f60b3ff482c7768b430d5474daeac3a8ef9579d670d871d10c08cb881479e4eff1dba9cfc6ac83347c0ff13e375f

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    204aec46ac52a5293a3570289f102227

    SHA1

    b632fd52bcf02425abd45f2a412eb075134369d9

    SHA256

    e6b70c95a4e92a0e3028252f977ae8e533e9cdadf1060f242a798df2bee28dc3

    SHA512

    aa23c4736db86cee5f0f630ecc0b8cadfbed0e1cc03cc048dcedd351d35378adf8190c28dd0f94781bddb8cbdef4a3315fce4deafb4641753f0f463087711187

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    2e53a08d8c6c0fecbce0c8ea13f46b5c

    SHA1

    8dd9880b0e9942f48aec75332a4b3aa034404643

    SHA256

    986fb6137a09aa2c016872fcf6ff693015b0fba03d79c9a92984428c3316061d

    SHA512

    c5ded55a4537599fe9a71f29a364c1c145b10c3f84d6f54884e31ee0a3346d5e3afb342a02d63cb90659b8a861c4de13a98b1ea71cec95f7558e83d6dbcf9fbb

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    12KB

    MD5

    8f105101972f728453c4751152d79868

    SHA1

    3b4f867dffba2267a2ac90ace4c56d8a163cb0d3

    SHA256

    78eb598b855a1244d9c162c90b5cc619437030cb15993429194e9faabecbefb6

    SHA512

    5a5830677590ecb8addc4114111812f9676d884d05c1647a7117b22c19350a376773bd77e9d4449b8603e1cfe50a2d4cf89bb02396ae1a52041dba20c0d438c7

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    12KB

    MD5

    4e7e40c10d93c54f7e322f2531531eb0

    SHA1

    c0359a20c0ef4c9a8a41fb29cbd473fa15f45151

    SHA256

    ffef9931b06d0261fe19599133c0003ee14c7111174f2a00fe2ed3fa98d3cf3a

    SHA512

    6b05fc481a01b53a35e6fab4a2cb0119282724fe5f1a93b9d5083a805fc8d2b156b39c702223a66215371497b64ff657f9de62a18120291324fcafb64c1ac2f4

  • /data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    16KB

    MD5

    3da97ff23e409eba10866120ad9c24b6

    SHA1

    9a807b626d7d41f425eeb1813b47066bc461fdb2

    SHA256

    ff3cc0ad1ef92ac88c432537f32499eb8f4a703d74021028e37085feae0e42bb

    SHA512

    aefc87539ff5e3c1beeea33c551e3a945d74ba593d3eebf4e1054b6e9696fa8b1749661e667077d40863dfd8fe48f0b645e073ca45575e6f6188720605b658b4

  • /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest12866850165785990287795968214906091663

    Filesize

    28KB

    MD5

    a75a4afd62320f79bb26faeef97a4ad1

    SHA1

    7a686f3cdfe3ec5b07f79c5528066c5876613eee

    SHA256

    ed5e67acd80786b3eceac08728c72a96b94381c520a8cce254ada1ed640c8ecb

    SHA512

    2bdc63f5d9a8c0904be867c1b86ff304c687fab780223c89163085f8dc6856c8e31555d380e09635748031dd923321f9acd19ed80548bb55eb8510d7132c5911

  • /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest12866850165785990287795968214906091663-journal

    Filesize

    512B

    MD5

    79797bac188b98015d88cf5b564f0417

    SHA1

    39c429bc2ac8bbea59d78fc5e684265b67c5da47

    SHA256

    75df14dd52e0b03074d9a34c5366bed3c4f6b149a74ee0b0f0db5597e47ac47b

    SHA512

    81433f61def4228bc8f8e07d8b1ccdae00e205ae8d3785fbf45dabad7a1e3818577883af9d3484815c34aa42a7dd56adc21115550ad2acf9ccf78495960c0325

  • /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest12866850165785990287795968214906091663-journal

    Filesize

    8KB

    MD5

    22b08105551386dbcef18c63923db9eb

    SHA1

    ead739bbe2f48dc2464111058d080482b1ef6ef0

    SHA256

    b01a6e809d66fd86172b85c50075213846e8921be5ae07417cf9e47d14bf101f

    SHA512

    14655f7af274c0bee18a52375dd4a9f538df4a0345ee84ff95e221e9248bbf870c8022c326647e0c0a73376b6ff40e04065dfbc6887c2406a945055ea8b194ca

  • /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest12866850165785990287795968214906091663-journal

    Filesize

    8KB

    MD5

    ba508c689280fac4459702daed8bb258

    SHA1

    5098c44c3056a4f763db57e4574689052de85376

    SHA256

    e1321e42d63bbc34841e9e6040530e1349067eeee79829a04fdb95153dc213bf

    SHA512

    4eb77ea6bece73eea9673e76aa981d29215a3b5bd0c0979399a3322c89f09da6d954ccbef897b0c3117dd3ef90b10477a475b19176b3a72cc5143ed54119b761

  • /data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest12866850165785990287795968214906091663-journal

    Filesize

    12KB

    MD5

    3a3b404e0e8a475200ab0b1aa0c64d93

    SHA1

    920862b07e6fb833f356e905e21107c95ea1d1c6

    SHA256

    c21e6d8c7d6ab99f55a2bead61774d083b66ae0d2dc50a6c3d39571b9e6b475d

    SHA512

    8f7e277e2f549b7464bb91aacb79dde81b10322b7538d04aad42e02fb19a3f8ddc304ecc4532af14295631750949535b36cb780505a3076845a1720a8e176b7e

  • /data/user/0/com.xgbuy.xg/databases/xinggou

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    512B

    MD5

    efa1816aac43dcd342620dae8c671f78

    SHA1

    8d6c1de68d10deeb9a5e47ce3714fee97963c863

    SHA256

    3e46ea120fa879315754eae0bfe7297c655358c0329c41febce5d0b4d04f80c4

    SHA512

    0ac4d2ec0aad25a15c11aae9d90e8d1589b351038f838085572bd915871f1d0f9df919af641d55961fc63d916c55f7fc6abc3309ceefbd1849810b11ab12dd06

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    6bc1f2bf478138d4a62ceb9311933056

    SHA1

    26ddd1ec4656f6ea0c7e7f34b57a33f62df25f4a

    SHA256

    d63fef80dcb65d86e29612a0ff10a6c159d9a1705b97f36f86cdd2786436767c

    SHA512

    20ceaf688ccaf52bc2153b26cc96bd756791700e5bfcd9166dbec15f1bcc183e5c1e4094c9c36edb16b6b563aed0ce168f08648f7efce3056235e781e40eb7d1

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    a134671381929103695db7b0b7ae5726

    SHA1

    24fa6ada3943ff8fab4541dcab3fd00893eb1d08

    SHA256

    b2c3ce21f41c973570a7b88bd542031b6e6b9edec4e9e53909cd602b884ec227

    SHA512

    372826bcfa93b834ddab59477deb50c98a05bdde98ad7100c8c22e7f97439f79a53c2b490c6f98ecbf573be1e1457aa520decebe14272a0cb8e83c7666429cdd

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    512B

    MD5

    5d598175bf74439d6fad11121073e111

    SHA1

    038287bd445ad091d0a8c65fb84d1a65d467f16b

    SHA256

    daaea181ceee1a2541c74ba4e0c99e76874b8fd4c06ea2d8473a611f80428073

    SHA512

    e2ec42dec917f18b62fb4effa50a0a552c463a0f3dd9dfd34d4fba9924d3a849ef36e1ccb3b9780fe148503d6807dfd6dc35556fc464851a384af651a4ba34a0

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    fb452b13f6dd57c8435e475d85bf98c1

    SHA1

    468d129a124c4d35435959fc6ae059f1b67bf28e

    SHA256

    7f5020d2d4a3bbc232bbd56319c2ac5fc5c17d50149eeb85becd1f590d260da1

    SHA512

    8fd3523bbc67b4265426225ab61ee012a054344613f1a5a47ce813a2ddf00fe80c9518b2d9f5043188a3c95a5f192d97922d88a9a10f2e128dc3396cdeecb799

  • /data/user/0/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    619032a703f93b695eb9331e6b925327

    SHA1

    78c0e6f1ef213c9067b4434caaed23cdb6b029c5

    SHA256

    0e2bce10fe4d2b14787dfa1adb24bfbff6a63e70c1ad086087351623088bcf17

    SHA512

    b6e364396125bad91c19d4d6ec33c37485fd578f902d5aad7feba937064c1c7054ad61e3ddd88cb6d70896b0fb39a802fcb64ddbd4acd710349cd9f0a36b783d

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    1264f30db5bc978090c891fc9ba97820

    SHA1

    22a1664ca5bac8af36bdaf8e4098c02c7fc9c1fc

    SHA256

    6383110e70c2cf20a67539bbf759d99229ac2dcd214cae6a3c5de840497bab2c

    SHA512

    f3ec53223344ea4763479b39ae62a3dde4b83e0db05d4707c9e2c914725943063706c6c53e6fc043ee13640ac98242775c901b84ec76eb3edf11615bd0084488

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    81024874f926b0c0c9e613997c9370b1

    SHA1

    a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

    SHA256

    da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

    SHA512

    8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    8f736b4ee72f56d9aeb30d2b4b9b2cf5

    SHA1

    afdad2e67c6ebbc24da4a4b5c742eac2cd349089

    SHA256

    04b1267edb930fdf6e28b2a9acd55c144eaffba69a85f659ab442346df82daae

    SHA512

    669dc23f89e7a42df9c7f6c7be3a07c7b1bba67afdb501ff46ee5117567f494df1eb847aa8252a9e41cc26aa7bf446bc32a2db293231227244d74f443dcc7739

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    f4f5d8af6f96af4b5ded5cbf5adbd0cc

    SHA1

    e3bf6300264b644f9d511aa05d527c13644aa828

    SHA256

    926231c2aaf8dffeaf896e9ac6f89595179971be9fe6b26e2ec8fe59004cf4be

    SHA512

    3085b93b7ac08e8ccc3edb5807a1a79af99e9ff472e43b2e508f2557cb34298d6223cca7f774dd887e54574a7150d557f5dfff1ee8a5af0c2a94ce6aed24567c

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    9afbf0dc0b4a4fd0a874cfec2c55461a

    SHA1

    a42766499eef11be1120ff87588b7f715c1b2a7f

    SHA256

    75c6a927b6cffe50b1a48e8aff766f5d543dec5aec8010b835ab4c4d8dd3da37

    SHA512

    863cdc25dd26bc2db5a80480a5d5bd16965ce02afc94f732f31c24bdcd3daaae24d41504f0eefead9a8ecc402aa2e798ce100e8a225b13b38b05aa433456185d

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    dc2e848be2824acf32cff8ee979e58cf

    SHA1

    de0d519b548d2290385fe035f031fd2c4a61a0eb

    SHA256

    77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23

    SHA512

    52d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    2663e4e07c4e1d6eff429d1c4b51af06

    SHA1

    e29144d129f5dcd3b2de15443f1abf767db57ad7

    SHA256

    8b6227531c89ee396ac4fab6ce196801e9e57aea981633183e3660a28d0f59f6

    SHA512

    48b60d4260e0ae4b35e78be07d433a93866f0e1b2b652a213c39b7133ead49b1d4d984877b1fea7262f7ae9a66f12711ab9f89e81b5c1c58b31430f4ff3b0277

  • /data/user/0/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    21bbc071d8dbb0cf24737b5d7e5246ce

    SHA1

    529e190033f88b1af9849e143880d196ccafc7f3

    SHA256

    bb297b5ff706e641a92d6b0760fb9dc3a14747b53f1f5c881bfadc98aa4ae58d

    SHA512

    51ced5eea423093f00e6e5222d6159a2664566ff821501f7e903ddeae0524d3b29225640b73d3789503514f5d64adc1400d8cfda1c12b145cdc60a093a5c23e1

  • /data/user/0/com.xgbuy.xg/files/Mob/mob_commons_1

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1

    Filesize

    23B

    MD5

    8e24e79baab91c4d0604eaa9006a0cb3

    SHA1

    e427afc94a4b957a7096f73e395a10ea404c076b

    SHA256

    65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

    SHA512

    45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

  • /data/user/0/com.xgbuy.xg/files/jpush_stat_cache.json

    Filesize

    119B

    MD5

    43104bced6ee32d57946c63e42fdfc01

    SHA1

    2e0aa5c6b9065b5fefdb38ddf7b4daad1a744ad8

    SHA256

    05369830465978c5f7c86afc42c5506c42c5d70b3dad0ef35b15b4b9df5934c6

    SHA512

    8209036cf933de460e922669b379ca833726f6b8c5a5d19b40dce1b808b9982cea43e0976460a9ac6c81a07793b5ff862d343852b10871cbc2340170f7015d6f

  • /data/user/0/com.xgbuy.xg/files/jpush_stat_history/active_user/nowrap/ff6fe131-ba34-4bde-aa1d-f9d64a0c684f

    Filesize

    159B

    MD5

    06d933e1281195bf289b61d5b7a2d724

    SHA1

    1e815ef8d51d5fee2e2e3e1b58eeeeb4963ed8c2

    SHA256

    9f35fc8968dbfbd3e67499ea7a8751db9c0765d9cde461b79d3fd03c9fa9bf28

    SHA512

    7c12c614a8452effb0e5adf891af67095b0dc031ace9cd2e66262d9c7034b6631242d8e7caf60dfc77e3a0017f3d47a7513316575d435da6456c9e9c7dfcb7b0

  • /data/user/0/com.xgbuy.xg/files/jpush_stat_history_pushcore/normal/nowrap/a47c86a7-bf16-4806-89ca-64c47f71d3f5

    Filesize

    187B

    MD5

    0f1ea0a101e527a43e94b8c6be1aa8a5

    SHA1

    eb87a4217d33e7079da26a986ee571e00b60c4be

    SHA256

    71c295b14a423e71a742a89afb528743fca82107f7dd957337e683664d1813b2

    SHA512

    265b4f434f1d77f45d86c30cb2068dda8c2cec6c097dd66a0b7ac602518937132d646b1a0da6f76f63e8ce539c7ccb5fd30ea8045e723c139bc466ccd8529345

  • /data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMjg1OTQ2Mjk2

    Filesize

    1KB

    MD5

    2f0cc590da60559549efcb985c1e09c2

    SHA1

    eb2b8f7029368e4b44739ee377d509507ec73e83

    SHA256

    5526fb6310f4816e3e5e056feacc4470207309488a5679b489a4498e7b97e7b8

    SHA512

    60da7d7c5aaa759d2cb86417ff5a56a39f5e8b4e33253946d71c89d72ec7d01bc72c57ff25888a3c966ab120d5102956e51906e01d7fd8c16621205928845dec

  • /data/user/0/com.xgbuy.xg/files/umeng_it.cache

    Filesize

    350B

    MD5

    1ab4e77a151af55805a3f54a20fbe3bc

    SHA1

    10358c388c6b487a17722c677470b81be971bafd

    SHA256

    ea3aae3f5a347a472b68e78930029373b84e99de51571756420144ebca1555f9

    SHA512

    b08d7f804f49590bca0bb30a99acd8a19bbfc4da83684174995fed8afcb5e8e3b1e1691b9aba9d246e08c235da774244095928c96dbeb6fda90f95a755a4702a

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    e4150abd502cc5e9f88cc21c331c1fb3

    SHA1

    b26301baf9ce58a9f82cbc029bfcae9f13d3934a

    SHA256

    b28dfc3f54653b89abdf7e39efc7e93cc949869405c019804405968e602dec6d

    SHA512

    4b2492d758216ccd051803fc134a4126a0c2cf32886da7f444196eefccddf1d9535867311e7e092cf322814d0fd16e1ba59de04247e3d29655c554c547716c41

  • /storage/emulated/0/Mob/.slw

    Filesize

    66B

    MD5

    19402718bfb1c685a726b4e1d846ad98

    SHA1

    02a7e30044a67085f2f1da24e16e4ecfede65b72

    SHA256

    079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

    SHA512

    25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    3471342f23f66c4e1a67097169d25d5c

    SHA1

    c7ca881763b943e1dba0ee2fe1c80226b83b4411

    SHA256

    454e6ca4164d673d4f04edee9299f20c4e3ddb40b0a28430eeece1866fbb72d3

    SHA512

    a41129d7be4e3687f70bd6bfa7d4f7e5dc94d5a8a9cc094541479bf49e8fe957a93fe4129a838678a12e06149385cfc4f15a3585911ead6411a687d1bff7c2d3