Analysis

  • max time kernel
    2903821s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    25/12/2023, 03:00

General

  • Target

    01834530bfda29817969d6fd3e761dea.apk

  • Size

    27.4MB

  • MD5

    01834530bfda29817969d6fd3e761dea

  • SHA1

    f62875381866cd5ce8da829a6b887b0c7a79c4b5

  • SHA256

    a4a2bffa3a5da79dd0b1ab50b36aa73bcf12c5c71d411ad678d51768d025d5d4

  • SHA512

    1b6aefc0e1d3907ab3c1837bf5ca1e8d3530c2b5dad29a04cf9d09483a01db3c634c6da50cf1c11da9d937b258989281f669741b1627b027c1fb0f179edece8d

  • SSDEEP

    393216:HnjeyqCu9Mi8SxawnXFYT+jUv1C3jgVW7zlX7NlPi+eZu8aJ6k3Q8LssFzq131pq:JKekXFYT+gvUTgkp5UA8xo+v9aos

Score
7/10

Malware Config

Signatures

  • Checks known Qemu files. 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 4 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.u8e.ejg.pgu
    1⤵
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4284
  • com.u8e.ejg.pgu:pushcore
    1⤵
      PID:4412
    • com.u8e.ejg.pgu:pushcore
      1⤵
      • Checks known Qemu files.
      • Checks known Qemu pipes.
      • Loads dropped Dex/Jar
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4697

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/com.u8e.ejg.pgu/.jiagu/classes.dex

            Filesize

            7.8MB

            MD5

            7296c453f3e6025b50c78c803d3667b0

            SHA1

            329efdde1dd45a9181cc787f5c8f35805800b031

            SHA256

            c44ffef21d08d282eed6a4afe4a1724d1cdf0418b23174451d8c0eadd262adfc

            SHA512

            292cc26837d1e7c6c4fde98dfd1390062ac68dc6b7fc06c5ddd5c39a8f1efeda70d5b065493120c1f3c0dddd761535df6fb159f505f71f006f8be314c5c1f7c3

          • /data/user/0/com.u8e.ejg.pgu/.jiagu/classes.dex!classes2.dex

            Filesize

            4.4MB

            MD5

            6a985dfae032a4de5b79d20c3d2a4673

            SHA1

            f744293839da3ba7d1e287c0770bfce5025127ec

            SHA256

            3a05b091005bcaab4306f9cd1659dfc5ebdd02e6ee407862b10b6cfb18d3e7ab

            SHA512

            9e74a12ddb7dadc13a21f2b5da39d23149a9a698c96611063c4a482bf439c6341e2d8c3e8e375395bf811935b3c07baeb1456b14d502061081013e4e1c582b14

          • /data/user/0/com.u8e.ejg.pgu/.jiagu/libjiagu.so

            Filesize

            495KB

            MD5

            de685970891708f6edfd18f03c6557ba

            SHA1

            ac50f88327652a72df73d43e9260faf169283c34

            SHA256

            b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e

            SHA512

            cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

          • /data/user/0/com.u8e.ejg.pgu/.jiagu/libjiagu_64.so

            Filesize

            526KB

            MD5

            f3f377aff0413b6667306b3ad51a032e

            SHA1

            0e03658be45eb84be83a147329b82885da1b4702

            SHA256

            78bf69f4b3eea98355f96ae381547380263beb136fe29d630e2e3216780fdac8

            SHA512

            a23a89fb8721736f4c82f779f515fc2f702c0d98d696911802d57600ba4066762ade878535abdff7ba529e167d035f7b97e829dc3e1b7d04825b00d31f7d3b0b

          • /data/user/0/com.u8e.ejg.pgu/app_crashrecord/1004

            Filesize

            225B

            MD5

            162af4a7a6481ca317b02781c1b6925c

            SHA1

            ed6ccdbfdf37c6132affda2b8eb3029a776fcd88

            SHA256

            51ccb3b74ca6351ac35ec50fa63457aa9a052ae5a3fa66e91b612d91581d8a17

            SHA512

            78c943b5506c3332924321679540230fd0557bc5fadbd00b5e7f48d8917257bde94f441c364080423e5e5001eae0f7c70e95e25233d38ec6564a1b6e26864202

          • /data/user/0/com.u8e.ejg.pgu/app_crashrecord/1004

            Filesize

            58B

            MD5

            0d210bfb2a0e1f1b4c082a6a0f79de07

            SHA1

            bb8ed9e364db79d1d9f2fcde3f15091893222faa

            SHA256

            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

            SHA512

            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          • /data/user/0/com.u8e.ejg.pgu/app_crashrecord/1004

            Filesize

            526KB

            MD5

            d690bf750b5322063ce6807632ac17d2

            SHA1

            9f87c8b81b6522e8a0fe524d29fac99d39785910

            SHA256

            18a5414cadeb20bc13108ed26d61f25b4dc0e7679df8a019dd06ecbde743523d

            SHA512

            cdee8133675539b2e073af0440288c14b5bea1b665ebb75f28ef07c0a59cd2202f9d3e1f7a4c098fa2e0917b07b999dc87af4c7205a0434ca2c4a69269b5175d

          • /data/user/0/com.u8e.ejg.pgu/app_crashrecord/1004

            Filesize

            307B

            MD5

            5317238879e3d55e9e885cb9e7fc489f

            SHA1

            901e7eb5c922688b750d5eb4b4447557cfa945ae

            SHA256

            b0b589d18f0d8ad177068f06374bc77bf5c6001b3820c88be3cce5be281347db

            SHA512

            9a6934626a25c03b5596b47634503d7fbf69ac9d243ff8947ec377f18389e808d78c0d7cab8481f6b3bff6ee27af276496bb30e270acbba8d62e0d90e1ae6cc5

          • /data/user/0/com.u8e.ejg.pgu/app_e_qq_com_plugin/gdt_plugin.jar

            Filesize

            1.1MB

            MD5

            916b6c21f7533e80bc072c41cbefe6dd

            SHA1

            57ade89180d8592eb704d1d434f78737b35bb205

            SHA256

            38d83e8745a1e6adc5c874a81316f1e39b148890b5ce7241e503e3b1d351e38c

            SHA512

            48a10d5c89998ce4f9ffe18892bfc94e661784faa1beb96dad36793d880edd1c6855ff6e6a668d4e2159b1775d3154c9c65ee0d44186ddf1ba9bf2e3ed181461

          • /data/user/0/com.u8e.ejg.pgu/app_tbs/core_private/download_upload

            Filesize

            56B

            MD5

            1317fb24188e9ab7be554767b62e842c

            SHA1

            0c22ef6f592a7c7f35b61b395e63a977fa004b7a

            SHA256

            a4d3119e098a3e23e701d05b3b57c089d0e432c92e08d4bcd82e9a8902d5d224

            SHA512

            a9a43d13c913d2ed5e2b69dae22aecad161261d4b32734331491373a3b5ace939a724a121f16b7dcfdd5129139ddeb761f026993a7b358915f7fb8310a01e5ed

          • /data/user/0/com.u8e.ejg.pgu/app_tbs/core_private/download_upload

            Filesize

            56B

            MD5

            34e6407beacb47ac9660689f32f2cc07

            SHA1

            8c565f40966cd400588cce151cb3e3f2bd9cf5a4

            SHA256

            6896a47493f7852fc50b91ac7f46c41c769b0e2936830732f0bdc05731a343eb

            SHA512

            6186c199038cb06c79deccc3ef9a1d1922efdf6cb5754c0481ba5268a3b3ca8b58ecdf9e05374e064c00375bc6d63400abeb7a867b7a8ea21af3066a2312d09e

          • /data/user/0/com.u8e.ejg.pgu/app_tbs/core_private/download_upload

            Filesize

            84B

            MD5

            fb720b51b3231a95fda7a28907564b4c

            SHA1

            abd653e7edc80454b4f233b393f222e8cc871d3d

            SHA256

            17978e621fe3a93d8f08877b57e8221382c1a0e1e2b5cb9c4aba144ab50e274a

            SHA512

            df916a7657f764d21dc793ab29bcd89573a1bd47912f71aff0269cfc93ee36d144622bc41877a3a8e87b44f01ff466a1f4eddea4c200ceb84cf54b01e1d2e252

          • /data/user/0/com.u8e.ejg.pgu/cache/tomb.zip

            Filesize

            8KB

            MD5

            4a7febc1bbe5e4974d85bf409b5aab64

            SHA1

            79189839e97da3a6359635f434053a67593cb7a5

            SHA256

            1502b35553b83c1a9d91edc17c218cf7697d1b3849e35c13bb83580a0e576cd1

            SHA512

            f77610400cc9492cc8cf6aa89764b8885b074e852f840d6e2db863eaa3fabaaf2fbf1fa4286f06887f9e7c1e4d7d804f3b9616b6d078786c1e213e2583399542

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_

            Filesize

            495KB

            MD5

            39e3ff812292c049a42f40014ef23869

            SHA1

            0cff0c1e3585ed06fd390dc6584a78ffc7606b15

            SHA256

            460c8568f8fcd0e7d532303e7a952db1ea10673a5332e0892fd4ab45f89a5cdf

            SHA512

            be0b98e5772a2e604ad11169cea3995004097a316f375ffa1acd46c1eac85e9bd21349b4b39347c1a73bcd7c8eea5886c34aad13f3ee29cdbbae58974c998566

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_

            Filesize

            12KB

            MD5

            edb655088d1ed9f33f9d0d499b7a3ef5

            SHA1

            565c4f4e43179dbfc285cd6331dc8ac75a901af8

            SHA256

            bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

            SHA512

            98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            9703f5625898752057c7ddba205f9c02

            SHA1

            2f44602f6b10331889c006a1e58e2cdbe30eec34

            SHA256

            f7378799396f86359b643395607d93810034923757eaba7dbcbe2175f51985ed

            SHA512

            5210626cb00e7ba6f2ae1de142dc0dfab9b3dd38ef0f9d8ccb9de6160be026a40ccf73350e41a73c40105af564c0ae2fc060330a1724168fbafd06a02488b88f

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            8KB

            MD5

            e443d040ae6d16b0271e5281c4867945

            SHA1

            19119bc90ed293ef0f2cf37131abfcbedfb79c87

            SHA256

            2f65577c6fbd64ee37a286977076d839418604858b4cd504c94e11b06c2a1ebc

            SHA512

            12159382e3402f602854d14bfc60c1110487a5e93419303122b3035971c15138780484e1dafc6d55b64d232d8640885fd4ab45ee2bfd068a545440e42f6bfbb5

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            8KB

            MD5

            25b4e36edb2d13de5b9a1afdfdc8deed

            SHA1

            70f5503648f5811b853b408e78fb0d6d935a9771

            SHA256

            30eebf2e843cffd179647c13c2c1eaaeb3944e0d9828d9a12e006fe9b5cd5d7b

            SHA512

            aedb9c596fdd26b8f917f150a93e59de428837826c5f418e529e52e1398c7de6a74c4915d2008fe1a6502dcb5b24011a745be3e0db6461059ce26d2c3997f5b7

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            8KB

            MD5

            c3045bbebc3435c54c98a1e54f066bf6

            SHA1

            694197ba97dc3a0e80f165bda3a7a4313b468fff

            SHA256

            57b815b17264e0ad090934e8bd3cc97cf59e9b9c317a18655dda1461ae5b4b27

            SHA512

            22395227964c598fe921a26adc76a9038c88980b3a872a1f1a775118368ddb40e9fd690e1a11e234e28a256cad591beb6d3a8b21b132230ab5562a93c2af3006

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            4B

            MD5

            dce7c4174ce9323904a934a486c41288

            SHA1

            e117797422d35ce52f036963c7e9603e9955b5c7

            SHA256

            0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

            SHA512

            d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            1B

            MD5

            0bcef9c45bd8a48eda1b26eb0c61c869

            SHA1

            4345cb1fa27885a8fbfe7c0c830a592cc76a552b

            SHA256

            bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

            SHA512

            91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            180B

            MD5

            6c6cee748e9c187bf8a8dfeefcec59f5

            SHA1

            867075135b4a7e91d4320bee8cae2d75b5874b14

            SHA256

            ccf0d53de9d9e8fc1111a6b2a4f98d4b24df1ff162dd063166028d08e7cc9e6e

            SHA512

            ee50f110108506a39c478cd30d2df75bc272262e9c34931edb0d9d803234eaf47e52f70d562b7aa0fa487290280d1a49ee3dd1ca9bed00eb663f649deced7bc7

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            8KB

            MD5

            279f66726c74e6455406ec740b1e5c4e

            SHA1

            a8cf7eb57bc4f4cfa68c253c94f5a90f7aa688f9

            SHA256

            76680267e34504df2697544f2b765523dd287af81db2b1e1b4383d483772992b

            SHA512

            bcb989406625026f1f2495facc153bb3347d72bf9e3316d934bcbc35dff59b71b543c423f06f69f13d45ac8cb98accadfeb1af7e6a494f04bbb41b424f295b19

          • /data/user/0/com.u8e.ejg.pgu/databases/bugly_db_-journal

            Filesize

            8KB

            MD5

            cc2d6dedb83300b457e060cf1371a125

            SHA1

            bd3530c73968dbfb6ecb88368ec48f42fbca02de

            SHA256

            e8a063c24a2f6e0999cf28734ce8af554d73537684e3259b9ea9d24ed7eb0141

            SHA512

            718efb10601fe6fbc02c7afa2dfe73f1977185746da05520cd1449c14865efe323bc7a6371812097b59e8fdd468c1d304d15927b84b517b5e091d5f880abc67c

          • /data/user/0/com.u8e.ejg.pgu/databases/pri_tencent_analysis.db_com.u8e.ejg.pgu-journal

            Filesize

            512B

            MD5

            3dd6be5d0b2ae46563f242124bf6defd

            SHA1

            6936688f9c4c67db4fd2b5d6a67656628dbfa989

            SHA256

            bba5ce426490c49c4d150b230561270fadbddab16474cc2372d667c83011705a

            SHA512

            e05018b09e5583e19b7fc3820995fa6f975717fcbec9e8e269a4b4ca854df458fa96a91e8675404d0af72fe1b8ffed9a438b067279eca45c74bfac7217f2ce86

          • /data/user/0/com.u8e.ejg.pgu/databases/pri_tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            8KB

            MD5

            08fe4daaca33cf1745b1c5724ce42f59

            SHA1

            ad8c23ae5da29bb7c6ac99f84c22484bdfd81842

            SHA256

            6fb02e7eddd2c508938159c25fbcb84a52bcf2d4d39f04ade7a5c76de553dee3

            SHA512

            11c6d9dad0948f581b7138861bc9667f62d002e97677f2864cc1a8cdd26f356d61bc0e8897448b5b643a0ff11a13f85fd6f22d5f0e4fa583877384a3c946f741

          • /data/user/0/com.u8e.ejg.pgu/databases/pri_tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            8KB

            MD5

            0a6cb1c311fa60015705136c90622303

            SHA1

            81e586802d45c1d9259dfc22f621b71dc900b4bb

            SHA256

            c0d6db864d982766edfb5172dae30d857ff95421b2236141a8d88a862ee5dbf2

            SHA512

            7d4789b1ea26b03d4059649b99554771fab21f951e6a197b6fe69c6bdb248f9fc43a8b856754c4f1f225d029e1f966d8eb9dba9bfbbc3847f2617f6298a9ed2f

          • /data/user/0/com.u8e.ejg.pgu/databases/pri_tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            12KB

            MD5

            153b12238fe71fa809931d21fe582fdf

            SHA1

            303c3a78722f4a21611193e461c9bf5e8df84609

            SHA256

            c149dce1375ca0139d53fee6ee36bef36e80036c1b40fa3045ac73bb0a16d797

            SHA512

            8120a7ec674e77ff6fdfeb758fa3ee772000b69338778d1e180c4cbb3573edeb441a558d9fdbb1cfb47ba47007832d42ace2ef70357a703d26ebce9f03beddba

          • /data/user/0/com.u8e.ejg.pgu/databases/pri_tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            1KB

            MD5

            c3e4eefedd55eae4334456daa4aa0ad7

            SHA1

            ba9abe2d4d40bbd94530564b6eb178ec02a47204

            SHA256

            7081ba3d8887be22551f56b5f50da675bda7dd02f40e9fcb150ac84fccbe387f

            SHA512

            a302516427a81e59fe955f4316fd56b8e5207542b1abdd7eb3fc2e9dbc669849dce90d12d9160b59d45af233e63e2156f3a3f1e7807b7ae1b1225a94d472cea3

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu-journal

            Filesize

            512B

            MD5

            673f59b69631b45b9a199d72ac8df368

            SHA1

            5185a58ce32babfe3da9312f477b9a4a76f50611

            SHA256

            3ec16722f725f4614d607bd7a9fac3a6d441fe4ef9cebc20edc29dc10fa3c70f

            SHA512

            374f2717bd6529ad10e57000483bc1b2cdcd834b8f80b55c24f6bd0b9ca7c501e74af2e8812028d4189a3629bf002bc26446c1de565c099312ec3b951bf694b3

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu-journal

            Filesize

            8KB

            MD5

            a472e7cb842a7497ca13c146e2d1bfe1

            SHA1

            3a795e314525ad9def469e0b710b3856df64ede0

            SHA256

            6cdad1cc8f01135388ef9c3ea161d0925ba2e8d4b2caed2c01970be05b8565c4

            SHA512

            128902a02b585ae5a7d5e8d385febf17de844fd32fb1e5222f4d15c51d3e41df67a6fc45dc2bf85cacf1c1d8cd87bcb210d47ec37479085d19c766922589a668

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore

            Filesize

            40KB

            MD5

            70c25c1eddfc5f86cf2b4d9e6ed9f1fc

            SHA1

            577f3e77fd0cb710fea921696fdd06cf23a4a462

            SHA256

            9df6c3dd72c17b2d5138b014de834e5b9106367faabf7e65a075a76ce5e4fb35

            SHA512

            45c64cc05d1097b17d05a7ab91a8836de57cacc21f1c4fbe834dc4ab6654d910d4871c1b67fa494d11bb539fd752d479eabd02ad07914e16956e3160e9e25e28

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            512B

            MD5

            9eee20a25adc33ba22cdab599340a93d

            SHA1

            3dc8c1955d0391a890a783754c03c5c16f55834b

            SHA256

            01ffeab9050469d87d2e82496876a67ae768a5a1168f51734c907df4ddafaee0

            SHA512

            492279e04571e88e2ed7d51cee3bc745400b51b89b8be9dfbb6503b653a5f6aa1bd429c72da696daafbf94136a7f3a1e77e949fb7288754d156e9953842e9f4a

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            8KB

            MD5

            170907b005df4b14b1319d88003db70b

            SHA1

            b71ff3c12287c0878c43cac22bc66d4651375cff

            SHA256

            d753589ddad9e11e9a643f1acaf93b38a40de555d335af871ada23a04bcd6724

            SHA512

            e91ab7ec419234be4e79cdc5fb9bd8f84d466e496049da9851c158b444e94dda15883a7a88fc48a170b75942eff980d124a62fc027ec42d89419780fe7e5a64f

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            8KB

            MD5

            05520ad30139b8a481ef8e812e6a64c3

            SHA1

            09afc5272472d7583ab5eb5d22a9e33bb7b2b8b8

            SHA256

            54c5f5b76380d5590c96f2f42ddbf177df8a782b9ba9bec8c64910b93338e8da

            SHA512

            2cb30e2b06048a3942225a628626c957ce0e7a6cd473aa7427533f38eff0e6e555fe54c1d61c1e79f1c0c3593cdf85d3341d8c6c2901ce4a383aa2ead7b49730

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            40KB

            MD5

            4b9e930e9521854bdfbd4a4b50b4d6ea

            SHA1

            0486e059fd06e915f273b1a846db40c1dac05003

            SHA256

            26eb87134870d49cd9be8daf4a5ab2ded30eb915eb9bcc97d170752ad37b2a7d

            SHA512

            63da36bcb748b8d6e90b0b6e6ae0abce7fd39821521cee7d161399efb73001ce0b3affe9e29768a53ef635ee458492bf6734b3889ff4a06b171bd1136fac069e

          • /data/user/0/com.u8e.ejg.pgu/databases/tencent_analysis.db_com.u8e.ejg.pgu:pushcore-journal

            Filesize

            8KB

            MD5

            622031171fe3706871b43ca6a02c004a

            SHA1

            5f67f4ae9edee360acd925f4dbb05e07b2da3f78

            SHA256

            e9e8394c89917e04f84cea1292befe9bde34378310f159966b52667c08ee9325

            SHA512

            f72f6b854d1a4150df42300022cee242d3c8be3b897c71fe00300e04475cc152ca3827710aa6f968368d86e951892eadcf236929c62111c09ef3cfcb5aaf7483

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.ac

            Filesize

            32B

            MD5

            27c7ec0024efcef143655f8adab921b9

            SHA1

            f6b5f772843ec5469659fdff05cbc30a61bdb478

            SHA256

            85528957fa98b0ba88e5cbcf6e730e0837d547c8cbeffbc977db656295964050

            SHA512

            5e8bb235312f12cc8acf9c02e4c28ca12f5598fa1566c7a1ee5455c0e072be5aa4228c691608ae0e5f4a5b44635ff1807d66569e49d57c020796c3a3ef532c27

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.ic

            Filesize

            32B

            MD5

            20b21dfd4803e7446b3cf1398af2267b

            SHA1

            99c3aa77f22156991bacdb2cd58ad8122874fd57

            SHA256

            ed7f716d9c4757dd0af911ed9f63f3eddd56969aed00740aaa3c1292e39ac0fb

            SHA512

            205d1bd635335de8ad0b8524642249482f9997b8b8012c26e024141b225dbcc70a087717aae351bf3ba8b4cf21efcc7c36eb27d8e2788a692a48f8ec260aaeeb

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.rd

            Filesize

            32B

            MD5

            d335bb6bb06cfe7796f8b25112967040

            SHA1

            e82e234c2a66006cfdb3d5c1987efafaec5585df

            SHA256

            c205c5d39281db3bd9d50316043525493440681a1a0e7a527c5171319528bde7

            SHA512

            19d910c1d574244b5101815773b307fe4327e59b62ccf5d1c25d448f7409aa66c9f5196bcba524c469136c557d9a5d38cc6a62f7040077a967fdc20dd27b0333

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.ri

            Filesize

            307B

            MD5

            501a751e0e2e28814f8fb878a6faff57

            SHA1

            864cd58ebb88ede9728ee8f98755d8bc05f54f74

            SHA256

            e6162543a2de87fa593b3a11f0fc0a61c7a11631fc16caf5b24f5d40bb599161

            SHA512

            bb1ee63111403e0667e59e2edb44cf30a51ab3073bb3c73755768522ed6767c1c394dc0c46e8c3db3b9b2c17af8e11a7d3a67e740b356cfa7e84154e8611393f

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.ri

            Filesize

            314B

            MD5

            062fec472a02afdcbd10072b5d0b1ce0

            SHA1

            11cba5d4da10f80fd1b00529ceb4ab1e00ff2ee2

            SHA256

            02d76998e52a05b22c941c880d68d2ba375609a901128a77212868a04b0be60b

            SHA512

            c5a5ec4bf81354e36ac7a4d20c5e93e92b07657f737820510921c700c2d10f720e8cd85c163736807f8b883a07d91741e0887f70b79c37cc250a747579823665

          • /data/user/0/com.u8e.ejg.pgu/files/.jglogs/.jg.store.report_pid

            Filesize

            32B

            MD5

            4b677c3d901e9d0c3c3b2de7d2c717d3

            SHA1

            4c0b1df42b96bece0371d0605930063e088ea387

            SHA256

            1c89ca9b3b390faf459abcb84d51b1d6bd997ceec7b2fbf05a7aac7c16d01d41

            SHA512

            5eff468ecff4eb501d4cf3a6b0d1b2c6b2f506341f92c6b30a42021edee432104512af6e18e7a788152a34b995a80449052513a04ddd473da0e8a83deed0f7f7

          • /data/user/0/com.u8e.ejg.pgu/files/.jiagu.lock

            Filesize

            27B

            MD5

            3f881aa1ea2f41803ff999b3ac056e66

            SHA1

            fc84de1f2ae74c611c8209431a356d602825c2c3

            SHA256

            06cfa6b57150c04c02a04059d1758d63560e955edd16a5e7017c1a53263d126f

            SHA512

            b321d30e164a60ca026d74d01aa303bcf40640f58a7955d19bb0e462b6d8aebf2944fbd5188c82eaa7054ee4d13af40f71e84ec32e43a29665b1576d50591782

          • /data/user/0/com.u8e.ejg.pgu/files/jpush_stat_history_pushcore/619c4e5f62877a149369bffa/active_user/nowrap/8db28e82-717c-40fd-8299-d780c12d16e8

            Filesize

            159B

            MD5

            5032c0672946a361f90be10c409e8e4f

            SHA1

            4d864745a9199713a06c9fc56cf7d571ca5ff0b8

            SHA256

            ce89fedff9f0278eb88c0dd8dc9647f4000f06f42d3823bfc6f253dd079e5da8

            SHA512

            0a8dffa43b719c660c0cc03df82807417c7ae992e8128822c7fe9c7f887be5f3298b427914f7552dd42fc924b73d76b4a31ae8ad54baef46e8d276014170a114

          • /data/user/0/com.u8e.ejg.pgu/files/jpush_stat_history_pushcore/619c4e5f62877a149369bffa/normal/nowrap/09d4645d-96a3-42de-a159-c93ed0877f15

            Filesize

            52KB

            MD5

            807743e1a32c4abd70d47536a9894bad

            SHA1

            a4094c756c4a1ed4ab4b8feb2378a1924ac09112

            SHA256

            b03d4189b4f153cdb00f8a539ffdffc6fd2692b30c2f128544b88f4440a66d93

            SHA512

            852bfe85332537b935a54bc837bf055fd906475e8e1f8c08cdf06e54951d82568df62798cc3b4b82f5e0a9bc495c9e0918fecdb8e6f898495ebca3ab18cbe24d

          • /storage/emulated/0/Android/data/com.u8e.ejg.pgu/files/tbslog/tbslog.txt (deleted)

            Filesize

            2KB

            MD5

            885636ae2f28d47f8f5f0f0c2a454016

            SHA1

            15104ed89b08110c5b6a7526a579d9f35eb3a0aa

            SHA256

            f938bf691825706702d8085a40cf06849bf25670111a3ef6ece1788aeafa2636

            SHA512

            4fd0b7f71f3ad075717451f61c34ebf22bc4688584d6cfa22fd5e4c2074a136f0718e8c420749938ca4fec719a685ec807305eb56850e420865ccff9b4ecc6cb