Analysis

  • max time kernel
    2662704s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:30

General

  • Target

    3e1cac4feab2b10e72ca7e718aa59f3ac91dacccb85eed50bf9611b2b6038aab.apk

  • Size

    16.6MB

  • MD5

    4c69e0a3cf71b3924368e3cffddad8f2

  • SHA1

    851765026a6ce7b43905f594717c342484f5a24a

  • SHA256

    3e1cac4feab2b10e72ca7e718aa59f3ac91dacccb85eed50bf9611b2b6038aab

  • SHA512

    1f74149a6284ff0becea4df2fea6cb9f55a31e6b9d9e9fd92b291e328fea16d0fcafe1ef70dc384368a80096dd1d3b9700587d28a65f1fa31c231f0a74faf155

  • SSDEEP

    393216:Q5Gx0Q92WgVwWtbK1geozj2VL8bu59LwkeqrOiAQwE:QYnMWgJ5+gRTU9Y7ef

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Loads dropped Dex/Jar 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4280
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4307
      • sh -c ps
        2⤵
          PID:4635
        • ps
          2⤵
            PID:4635
        • com.xgbuy.xg:pushcore
          1⤵
          • Loads dropped Dex/Jar
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4360
          • cat /sys/class/net/wlan0/address
            2⤵
              PID:4492

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.xgbuy.xg/.jiagu/classes.dex

            Filesize

            6.7MB

            MD5

            6bb8df70476a3eec9342d2acbf7ffb86

            SHA1

            d5b0cfc197dfe28cab6053a04f8d781a2ab76a80

            SHA256

            6ecdaaade8b04b818e7895ac55eb46b6d86e640581a67b21c712e8e2633506f0

            SHA512

            9044d662a62825a97969f657282658c2b74de17d1d009036d623e4bc947e79a8c15f34fb02ec03e0bdf9ad192559c24b8b716bccd9965b93dfc597850df66bed

          • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

            Filesize

            382KB

            MD5

            bad90524bd3a2facf926e649e320a5b3

            SHA1

            0021e1051f80aef052862f69b97173483736505f

            SHA256

            77bb7b4333febc6ad0fa04ce2a27abae8749825e1beac46fe5f03662c8e4c1ef

            SHA512

            4673c453ad0185020b07f351004e56abeacbd15f90a2dfb59cdcde52b3354cd9f2db39b1d941409bbc4c6f46655b833c1100ab5587304f0d35b809a6e7c830e5

          • /data/data/com.xgbuy.xg/.jiagu/tmp.dex

            Filesize

            284B

            MD5

            f1771b68f5f9b168b79ff59ae2daabe4

            SHA1

            0df6a835559f5c99670214a12700e7d8c28e5a42

            SHA256

            9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

            SHA512

            dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

          • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/55af5d11eb82e27ef22ab82a376bf21b83ba87d781d0b8e1956cc4f18c5812b9.0.tmp

            Filesize

            79KB

            MD5

            3ccf674803e2bcca74d940a369b98a1f

            SHA1

            b82beb53b74476af3563d05f4b49b4628611c19f

            SHA256

            897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274

            SHA512

            b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f

          • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /data/data/com.xgbuy.xg/databases/Reyun.db

            Filesize

            20KB

            MD5

            c2d2587f46e90089dc467ff8e7a0b5d2

            SHA1

            46b74b025d7a72d7cc1fd1539a59758b806af4ad

            SHA256

            730bcbeeb8496311bed069a5250a73af693887ce41c854f1e025be99225b62b0

            SHA512

            e47fa64cd5ba2e150988eda394e433f18f712f09bca39f72788de0009ded98204e3953ab222215a69518745379fff228f03f42ba41dd274c782cfc2cd08c269d

          • /data/data/com.xgbuy.xg/databases/Reyun.db

            Filesize

            20KB

            MD5

            67dd63cac83a18a5031fd348672ea7d5

            SHA1

            a0498dd2a7e93e9bbd04b09ecf95cc657049fce7

            SHA256

            dfa5c9b8dc53fd06d8a899d815db0081d179bf934001975bdffdbbdee0cc691b

            SHA512

            bce74976d9cb8c985a7a7afd9f85b77583eac5177ba223a7ebea9f68d849e9f64765a9c53396d1b14a4b507d556cf98dccbb1e6e152573b443afe905014b1e3f

          • /data/data/com.xgbuy.xg/databases/Reyun.db

            Filesize

            20KB

            MD5

            5a898d98963c734e1d740ceea535551f

            SHA1

            1757b5f68ee955855f5cb054716a868ef1ff6904

            SHA256

            d553ed51fd04ccc58696b1172a221dbd5b311bfe8df0089942437e44eff750fb

            SHA512

            bbb8ea16a11c69748882d902cc6176655008696940c95cb5b2d30f7aa6f0b659c89f1ba2fa8ce1a5086a11c503781bcc28f102bffe4ebd7f23e502868ecc8cc3

          • /data/data/com.xgbuy.xg/databases/Reyun.db

            Filesize

            28KB

            MD5

            307544de02b1c6cdb9f22cc1333e8d7b

            SHA1

            2384b0c3ac25d140da0671f6a1c96179a607e4cc

            SHA256

            3ff93531ae1ab1acbd79988d9942daa812124c55c154a01d86f4169b0cd47eb8

            SHA512

            c7ab8530f267e3a310982af7ee53b2922c5ad6c5780e08796b19931478d8f67a6b481c1e53543fce682d34344701f65a64bab0a40b7175258eb11b9a7fa42b55

          • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

            Filesize

            512B

            MD5

            0f05826195a384c4314258e5c1491ea6

            SHA1

            6236b0903db8fd0c14dedb05e600c29ee07e0902

            SHA256

            259a67c7a70ef651fe1b459ef20de3b4b1b0d09026d630b5937851385b930df2

            SHA512

            c83348afc152e5c59821e2d3825dc7e8a54f25b0052965f0e231b49b729dc36b18e27129c6256621ca66a247df0bbe927c48ef4796fda7242f24b225ab47d09e

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

            Filesize

            20KB

            MD5

            35b282eb0b9f97de2ad600403e688d31

            SHA1

            e0ac956093e000fedbea6f4b97b2f7b8dbdf8916

            SHA256

            3fdbe94be87476863e933d34a5b5d61708c802674a46e723b957e1ed75faebf7

            SHA512

            798439174c1130c6dd9bdf120b4e547c6999b2408671fbafccb9ba972bfe798e5e7a6bd2bf1d87740d6dddc999f3f8ad33e5f056448fd3f323c41d4412bff997

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

            Filesize

            8KB

            MD5

            6615a46d8c55191895d17fecb5546c08

            SHA1

            711b039d61ba28ce533fe137b098b95be172467a

            SHA256

            8c1c8baa4288e908f6663770c2bc4a77c9d03904c7f3d93ccf1bd69f8fc0f7a4

            SHA512

            3f8e95fb20ddfc782531197d5ced7d9ea3d835a123ff71ecf5d9e1ef2ae6324b04fb5fbc01b51f389516abe9417ae9871fe32d09ccb8b3512e8e8c24d6d83f9e

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

            Filesize

            8KB

            MD5

            75aa325dc63806d6df06e17bc4ecbcbc

            SHA1

            c5bed7c679f354bd65427e94f71a3cd57057a69f

            SHA256

            d68c1b18d64246c573c24996aac39fae4364fdc2df758f6d7f6cb408e4d5c4af

            SHA512

            22efe01a5b20aa1fa995d4e65950c9055f7580e488e554259aeaa69657e926b8a47e1f0757a9fd08a87447877aac227032c5e574d9948963dbf9608a66c66c73

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

            Filesize

            8KB

            MD5

            217e22ec29134c6f7af5db9492396e63

            SHA1

            126a88628646e8e1e526f8c72a4c62d9612d971a

            SHA256

            3f82d748b72a92a80b8178c118f0371cd7737c1f07538b9c93d852d3435b0ed4

            SHA512

            74e13c089f1209dc1b9dd5c207532e5664ce06ae8232f216c103888f5b532e590c771a9bed11a5266a2abc7d4b817dd3ce5af03ddfbaf1dc0310fc6cf0a0a6f3

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

            Filesize

            24KB

            MD5

            7b78fec84dcbf91db485e6b90f992533

            SHA1

            33d07551815f073090c19e986c3c39de6f24af4b

            SHA256

            d38c7c8d66b51b7b1daa387d2d770cb6083249fbb6732f87e3d8c4307ef58a63

            SHA512

            544a91d898d8c3a465bc6819cf64bcaaecdd72b5434ecc17a57e875f0e47c566185f2d350ec0316dbd1bad522ea7420c71605291cdd4b8cc8fe0172d6db6e7c6

          • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

            Filesize

            512B

            MD5

            3e7ba70586e8c466b995e74ab5e0c7fc

            SHA1

            437ce336ffdc7bbdfba2374ab38c1c3a09b14c29

            SHA256

            930da7f618c3c0b54c4e24e0f8b99412afa6822a2756e9930f9a7a99160c6658

            SHA512

            f71aab7a38cb02cb73246de79bde6ed240ef95f08ba132fca072f0703b8c1bd25c3ca6ecab52787cc1f67edc629e42a490ac3eb9767b8e3fc75773a2c19061ee

          • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal

            Filesize

            32B

            MD5

            75bc1c5fc446d0d39b42ab0dcddcd87a

            SHA1

            a946d232747836340e9e3de5e3e4dac985fc04da

            SHA256

            022ee48574ae3615bd5d2bb14f2b1cffa77104ff6390f47f9ab0bbdc1c84cafc

            SHA512

            7d131367b15bf3d351460637a55ad72cfd87834c1e865f470b0d22127d3f14814a12367d607227e215a8f29bb5cabe345e9914fe07d4f7c8b274d80cfba2a57c

          • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal

            Filesize

            32KB

            MD5

            b8dabcb2bb0212552a9abce9be88ddac

            SHA1

            32d1634d739c93176c77bf4966c67b8d6510ed1c

            SHA256

            ade38d76d546096257c81e9da911da6bdcc0261bf03c12e441bbdd7964756c32

            SHA512

            99715e06b633bd271f46d77c5deedd48a2075b1a1766c37c75a191d7c6a2e50fca14555c88ca53212546bfa1c1dbd54be9c72a883af9760d62aae8a30b79a919

          • /data/data/com.xgbuy.xg/databases/cc/cc.db

            Filesize

            36KB

            MD5

            ce6135aa1b1fe4f2c2db2a546d2a5558

            SHA1

            79b59582154017aadab783dc266fcb158c252940

            SHA256

            7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

            SHA512

            2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-journal

            Filesize

            512B

            MD5

            455352bbac2e936fe32694ea063399af

            SHA1

            d71de9e4656ec8aaa105e8af75c02d034ddeb177

            SHA256

            bb77d24f90fa5fbfcb573be03e3c17619276edc0f135894af6658f73f1ea3a23

            SHA512

            ed0d34f5fbf26227cf31702a673fc00885827da8de8a1910a1e746f19e650016adcc259114775a645180d563b2b2c134eef23339b3d6a0143bdff4e37d80cf07

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal

            Filesize

            48KB

            MD5

            5046174aab5a439cf0e4be413cc4e1cd

            SHA1

            9aca14bce45a90533baf84ba120c444340bc6cc0

            SHA256

            67d33645850d118e94c7d64b32a1bcad8f68ecf6d7b449b45d5ef7510dd0cad6

            SHA512

            0a96e06563ef8fd8c7f0e210e449fba4e15ac44aad0529bb88f371ce9492ad65c737b56e319a783f6628120a8ed448b34a7ec43349fff976ea8e96acf7803ee8

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal

            Filesize

            16KB

            MD5

            a422ac7b67ce78d74a729e0c0394aa70

            SHA1

            cd4bc65121dc643d658d6bc515154c3d4aa7375b

            SHA256

            72c2aaa35f9cd157bebe12a3567a87d0d499c7ffd257da7b1d0dcf364fe1cb03

            SHA512

            fb8be3c8979df4842f7534417868285f287c6084b0b1117e5329fb639bb7080b3b067463d4e113a99a6f0facda27501d970b44df59e7cd7c6046e88977e7924b

          • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest80610321578615913274607665814205415984-journal

            Filesize

            512B

            MD5

            86ba574f71eaffbd00b8a2a39d386798

            SHA1

            b95b5dbdc942ada5ab9772c22e50d447e7c9955d

            SHA256

            0d0a41fc8bb09ab4bf042f944358dda513fc0216aa76c27a48d3d7b00297cf1a

            SHA512

            ab478d454b6cbe318bd101a2e8737c289cb8b30eeb75ee475ef7c309dd18fbcc7c6fa85c375500f6e8b885d6ecb826cbe86817653ea895b6683c0898715dfb80

          • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest80610321578615913274607665814205415984-wal

            Filesize

            48KB

            MD5

            63a56b289603a5c4fb36349229c2753f

            SHA1

            fae54304558d189fe9f152b35e6f472b776f7b4e

            SHA256

            be8005f39bf6d60c9b4de62c091fa9748778d1ad444c9ad9b6823e3d387b8100

            SHA512

            916ee2406b8cf84544fed4569c5109281f0116cac5f8e0e604d8c88ebcab7dc7747bf4bac5a46ff8ca69c68563cb3e8aead2d08804f539b92147efaad1ca475f

          • /data/data/com.xgbuy.xg/databases/ua.db

            Filesize

            16KB

            MD5

            2dba9c7a0349f7f287833d6c1dc22bf9

            SHA1

            e9efa2985693c3e29607e62ab8a45226e384329d

            SHA256

            87ac23c160d7301f459696dec1c8b3b2ba852677ea23d6ead1ad55f8f2bb1383

            SHA512

            f1878021a65db8b39874fb1a6f75ff24f0b299d9dd06c0e3932eaad2e7b6f0ade8b1d0b59c2cfc1da2f93f9da9eb1f993dbe233bb0bbc3d3a7877de97934a804

          • /data/data/com.xgbuy.xg/databases/ua.db

            Filesize

            16KB

            MD5

            83abffb0ed58f5e1ac63fbc2bf541270

            SHA1

            82badad2500b4890da0105bf263803b582e0e695

            SHA256

            cc3dcbee5e455ce5b3a8cd853b5c5b499f1b625fce23fe8f17ac77b5888dc948

            SHA512

            3ece1cae251e832e45eaf4283e4031a9b69e41f6f04ca9909bb4e460cc3f043fcad38f9e854fde0eca48a8c28d9d06082c5721187233012c726010041a83286a

          • /data/data/com.xgbuy.xg/databases/ua.db

            Filesize

            32KB

            MD5

            801fc8f995fdf63eafa45c9367e28425

            SHA1

            b0e19776a4fddc6cd54a8c079fef5b53fa5e726a

            SHA256

            ec3c5c4b0e5202a6886de4fa572d9965119c2408b10a464f25c345cc50f846a2

            SHA512

            a875881e6a0ea863378930698e572df03873c6a12058ecf0e2bbdc19dd6eb22bf173b6f31b0ffb5cca4e10a482bde0bb89fae7d6e9da664d8b551ec24b9fdb1a

          • /data/data/com.xgbuy.xg/databases/ua.db-journal

            Filesize

            512B

            MD5

            a56024630667ed766799b38ea99a3fb4

            SHA1

            ad40bcb8546fcc0fe1ed58639a2c5f8fba170497

            SHA256

            ebae973ecb5518f5c2d6aca7560efecb5897b0b085d1f77ed3fa93bfa1813ed9

            SHA512

            bd451b83198f1d25a7a913b1d26b0367f1e96e4518bf0eee511a45eff30c18b858c8b2016f0cf6771ca3326984178ae05943030d58dda82cf0a839870d4ae686

          • /data/data/com.xgbuy.xg/databases/ua.db-wal

            Filesize

            16KB

            MD5

            f4d20a2863aa9be23bcbd5b49c1ca2db

            SHA1

            c5b8377b446edad84243827e0844b7b82a89dc0c

            SHA256

            35d10255dc7ddc75ed2542bc4efb3c0ca7e9f1631fd3fc146f219467e6e2f38e

            SHA512

            2465495a799590ac23b8d02ded50697949cf68713bd625b2f59378a7967520265d3357005709a46f4f09be4e00a9103352ba432898d6653ab24ff3872e754cdd

          • /data/data/com.xgbuy.xg/databases/ua.db-wal

            Filesize

            4KB

            MD5

            283f23f618e3fd146f5ca65593e1de89

            SHA1

            36f1468dba14c5d5f3eca17d40346012e2e61999

            SHA256

            2214286c3ed39831ccef90cb752a3dfa22fa1343a9084786bb9314d442693724

            SHA512

            884aa60a6af4d098d8a888e7f403b7a079aab7e2a230f395862d709670b199f71b5ccc4391b723d0e69eba04af0544422bcbb3d6b9cd197dd05c0f59f60f4f9e

          • /data/data/com.xgbuy.xg/databases/ua.db-wal

            Filesize

            12KB

            MD5

            4481accb596947c4e3e08afd32c64f86

            SHA1

            383d80aec0f1b84626f9af2b917660b45faaa28b

            SHA256

            45dae312d66995340656dfb384a49893f6098bee77f4c8339e46f3487a789f3d

            SHA512

            d18a43e5adcc2ab97cf398d4a428714d58b5a7777953399c3136a2c8f180bc3cc5112c019fb194783750b34824e2651b5e8cbf472b55afeb2f7919ab32066c12

          • /data/data/com.xgbuy.xg/databases/xinggou

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.xgbuy.xg/databases/xinggou-journal

            Filesize

            512B

            MD5

            953241a5ea6dc7140afa646206040536

            SHA1

            fbf6bb79806a7ce56688f58a316822f1fe187edf

            SHA256

            014aaaae96c89749ddca3b7b39eb7930a42e019c76a761e73c3a3e21c49767c9

            SHA512

            ea1ef5819e8a8e4868572f0c579e0a45e438228ed8f262a02b1357b9abea5c648a47bac8e9a887e5a47e7f096ba34c98f0b32d64785dcbd1f7c7f974b4940fa6

          • /data/data/com.xgbuy.xg/databases/xinggou-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.xgbuy.xg/databases/xinggou-wal

            Filesize

            48KB

            MD5

            bee1911057169367b720819a8d997da7

            SHA1

            29f611f6ff033711b886a2e006cd52a8b8d00199

            SHA256

            41264baa29ef5b44c789c8c1711524549639ec72271d1f15e5359306129d3c69

            SHA512

            44bfb38af6d4535214c666f60a8855a6ebd422b77377e8fed971d680bff40ea499167cb6287ca002467c76d7e82158a58f205982d2c6520bc21b92d67a4477c3

          • /data/data/com.xgbuy.xg/files/.imprint

            Filesize

            1005B

            MD5

            ca29436325e5aa01efb5c83d1d12b716

            SHA1

            0b2f35bc1018b9b4e3cee0affca5c7ec0ac821c8

            SHA256

            60bda682ff5f36cf9806ccb9d82d27c9f39ccdb93721948e355ef107efbbb557

            SHA512

            85f73996924be211ccfa52d3dbf7d224fd4538744a03d73b49381fbf2c30111ffe0a704a0efa3304f8a2e7f8eb6cd14e8ae4719bf6d9cd9d610de17994fa4d1a

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

            Filesize

            40B

            MD5

            81024874f926b0c0c9e613997c9370b1

            SHA1

            a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

            SHA256

            da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

            SHA512

            8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

            Filesize

            340B

            MD5

            28fc0851b4df2ab78e979b9878cdfebc

            SHA1

            246358519e063f7036546588f95e81bb9509b52f

            SHA256

            654b9d5a8f91c984dd624a73231e12edeedd2ce983d940eace0493780153b007

            SHA512

            04875378cc28cab89999b55771934ccd34f2c8e897f0105b41e6387aff5d49d53c6d7e2dbb4bf45e6a3a26587b029cac6b65df288646217dd8da1ede8aa5a08e

          • /data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.json

            Filesize

            162B

            MD5

            6b07f23f8f26974a1ee03bef61c98ada

            SHA1

            4706bb41192885e48efb5d3aac2dd4f064502c00

            SHA256

            20a334dd7ef4aa92bd0fc2ec6ad70371b7a7abe231cf9677ef4a2feb6128d642

            SHA512

            3d3dba0fa3f84673ac95d5770e110e5612d650035402701d62379f9e95d8a6979ef6ccb7c3a325e533225d9f8d54dee8619b6f9a4b49fbfcb829ce9ad52f2d2a

          • /data/data/com.xgbuy.xg/files/Mob/mob_commons_1

            Filesize

            2B

            MD5

            99914b932bd37a50b983c5e7c90ae93b

            SHA1

            bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

            SHA256

            44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

            SHA512

            27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

          • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

            Filesize

            23B

            MD5

            8e24e79baab91c4d0604eaa9006a0cb3

            SHA1

            e427afc94a4b957a7096f73e395a10ea404c076b

            SHA256

            65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

            SHA512

            45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

          • /data/data/com.xgbuy.xg/files/exid.dat

            Filesize

            56B

            MD5

            0e98e94fff7442a084e0ffc6a3955301

            SHA1

            a1bc2783f3c8a68e0fdca77a86bde658d5766012

            SHA256

            874ae9fca11af75bf408c2e34c19b04cffd8db600b8367e8312f9b5072fb1e3d

            SHA512

            73909d187ffee61bd4fa2af8f048da43ef57970a3303cfdb5070b16a5e1ab10e2b23353d794f835ca6e9f5c8d747a7b718d5a679b9a1fd372052baa690edfa92

          • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

            Filesize

            131B

            MD5

            db4eb6ac3358054603d2536009fedcc2

            SHA1

            0183437c2bf4d7be4d57206a930ffacd0860f135

            SHA256

            c5532ecdf77a0986958ad5010243f1564551196cadbea088ccfe003b87a112aa

            SHA512

            327a1143687b267b661d06598e1276233931349ac4ea5412379a2b499d141e432b4890076af2cca04311eada1bddf5301323426552ba846b52a5acc9b1b856e0

          • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

            Filesize

            188B

            MD5

            74084c496ba04cea16bd90f6a66d9394

            SHA1

            ee099e7e47dedd0e8440da5edd08f179753d0b9a

            SHA256

            1c66f512feed710a1e32431ad6ec197dfa592962c853af83815ca212dfe6885e

            SHA512

            1ab9ebb749eace0abc32697f26a2f2eec86990afab70ef2b625088555dd5820ffd3bcd5045c6f81bfd2841f3a677774dccdb9211c0f7376811f59fc9e466daaf

          • /data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20231225_log.txt

            Filesize

            201B

            MD5

            1c10bfa7a2f8866a3d1a2183e7735003

            SHA1

            4a92214b5a32876e2ef79c7b1ca531baf4ed3865

            SHA256

            a193b5bd2cce37ef02cc35c1ea3960a56d4bad76bcdcc04e421378be8de413be

            SHA512

            54f070444a6bb511c8207973316095c853da020dd6589244ddabd3e4bb428657bec1fd90cf2bb52f2f3bd7d46e45ef93937fd9d4ebeb4530ecb09a74cb0b4313

          • /data/data/com.xgbuy.xg/files/umeng_it.cache

            Filesize

            413B

            MD5

            feb52e187ac94bddb89aa7b62ed34c05

            SHA1

            624a8c0a94b8f45a65414653123d260fd83465ea

            SHA256

            479fe77b15d15527ae59e01087b57fa73aa7ff0d000999f3b625536e593210e1

            SHA512

            71e8cc4268bf3a9b179bb5f17a6d8b40ca01538e367d206efcb6438a2969e20635f5f774bdce8fe71e4b28d1adcec79a13dc210a4701c4da2995d7c62b14f06b

          • /data/data/com.xgbuy.xg/files/umeng_it.cache

            Filesize

            210B

            MD5

            a93881fa1f867960d1c1e5c1503f4f9a

            SHA1

            a93c085a103b9ce9c641ca59c46bb35316fbb512

            SHA256

            cface5ce5ef0135940fd0ffa5284c854e4d56232e7c92faf72a3bb1dbb7a3e58

            SHA512

            0d98e7eda059c43edc2d9d9111395c08d8233e7985ab403f9c0f058bda29f5ec866e9b39445bdba4f4e2c099eb96671ee2633fa425f77376e806676b1a3ad64c

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex

            Filesize

            6.5MB

            MD5

            ea230c41109b6d85ed8b60803ddd012c

            SHA1

            1ffc8dd9a9e7e8f4f2113971dd1a066b6a435fb5

            SHA256

            54184532003f43f62b305d091f9f5b8d0513228371b450fd4c174261a0ed3826

            SHA512

            a673ca2509d3b6a27c17074806b4400957156f8e3d96c50579e542aaec086e04e04bcf5401c38c528dce3452470ee2f642c118accea7633960a6a1d49ff5ad73

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex

            Filesize

            6.5MB

            MD5

            181690db447e06d29dabd29938791062

            SHA1

            6cf371262c1e7c19a7a535e53e2675354b444b6c

            SHA256

            2203ab50ff2bdba7b615fbe529c3883d4c8a2b01cdde651766801eaf917656ba

            SHA512

            b8cca62f06986fff8bd90610a501856c6cd6837713fe1b6d4096dc447fbf06f735de9891e7309d2bd7c97c8a4e4206d6b9af6babb209d9c942cf918dc313b592

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex

            Filesize

            1.7MB

            MD5

            63a7726b1c8a14af3d809e458dda15b1

            SHA1

            79a22af9fe1a5e7eee1c4baf9945de1b04863ac4

            SHA256

            d6f38b35a61e0c0f216fcca8755d0b1e44929fee0caa9a36941bfa6b52582d9c

            SHA512

            bd415efb8b26fe055389b5afbdac7431af39a391a96691cbf4cb13e436ae73e003d2ef7e0a99666e7e6a9e7190db1bc0763ba84260adb8a20e883fb9dae9ef4c

          • /storage/emulated/0/Mob/.slw

            Filesize

            314B

            MD5

            08f6bd961403bd8c321a79d94465c0e3

            SHA1

            d70b91a660570cec04a90622d1c1689ae50b3ba0

            SHA256

            1c43efb780c69abe334969677a1f25830ffdcf962c5f842b252f8060bc528c23

            SHA512

            41c89b0bfdb06b75c448de50e6a236b467fabfa288bd70b0418277707075031ba1928e8751874fd2d97fce9276bf3f637839817625a86e1403bd257ef5ec78c0

          • /storage/emulated/0/Mob/.slw

            Filesize

            66B

            MD5

            19402718bfb1c685a726b4e1d846ad98

            SHA1

            02a7e30044a67085f2f1da24e16e4ecfede65b72

            SHA256

            079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

            SHA512

            25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

          • /storage/emulated/0/Mob/comm/.di

            Filesize

            57B

            MD5

            70a42cba408700f9a6c01c7941a8829e

            SHA1

            eab01cc2c0671538795fb0b1146017dc099d0984

            SHA256

            499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

            SHA512

            8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

          • /storage/emulated/0/data/.push_deviceid

            Filesize

            32B

            MD5

            8ef58ce198dd3a05d3c33328b43b8ead

            SHA1

            2be04cdaf41fb66383abb4e7ade34902e5da41f8

            SHA256

            d816514fe3514d071f42c5a68fb5d852597cd9ce8eebbe01587552d13d6ff31a

            SHA512

            2a0aa67df8fd5d9e1c556a3f348c35682f8c117c0ce9ce9867b3fe5517b29fa9564d457cd832a5a735f75c3a83307611341173b11c15a91bc1b7bd46557bbc79