Analysis

  • max time kernel
    147s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    27/04/2024, 07:24

General

  • Target

    02b798fad117345c1e3fc64b1c9c1329_JaffaCakes118.apk

  • Size

    16.5MB

  • MD5

    02b798fad117345c1e3fc64b1c9c1329

  • SHA1

    21fb328f69d039c8cd6468e021f2cf2cf1055189

  • SHA256

    339da7f70e17f4e0b45fa575e0732d167bf0e5525d41a6396f6597d49dac6b96

  • SHA512

    21d1ec278f0e7a67118c353397021dcbb414b634203b444bd42862864977e25a62ec85bf4cb1870d0d008e25e285e3577d09300455543f7c547572eed053fa80

  • SSDEEP

    393216:1pPfwXAiPg+CCabhBuK/3TPu2tlcBku1awFgfvA:1pPfwXAiPDoHuyDul6w

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4271
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4307
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4332
      • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/user/0/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/user/0/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
        2⤵
          PID:4587
        • sh -c ps
          2⤵
            PID:4631
          • ps
            2⤵
              PID:4631
          • com.xgbuy.xg:pushcore
            1⤵
            • Loads dropped Dex/Jar
            • Queries information about running processes on the device
            • Registers a broadcast receiver at runtime (usually for listening for system events)
            • Checks if the internet connection is available
            • Uses Crypto APIs (Might try to encrypt user data)
            PID:4379
            • cat /sys/class/net/wlan0/address
              2⤵
                PID:4510

            Network

                  MITRE ATT&CK Mobile v15

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  • /data/data/com.xgbuy.xg/.jiagu/classes.dex

                    Filesize

                    7.9MB

                    MD5

                    7e53e6bd38d2747bab7302eef4b527e3

                    SHA1

                    59e12de4f96f70ec23752c4a6276e08a2cd3c785

                    SHA256

                    7f7fe0bd3db1cf258a65bd02faf81ae41a090ac8daa5af669696f6bc8879a553

                    SHA512

                    c723a776999987c0c73bb7bb80cb35634904013187cb55794d934de1e5c971edf68d7f21d2ce3c6357a41154c04e3c03456795216e70756db6e3c5aa2a19ea3a

                  • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

                    Filesize

                    382KB

                    MD5

                    aa01dd97609092ce310e17bf791069ce

                    SHA1

                    f000840a8f68ea7beb2e29ea466088daf55609db

                    SHA256

                    e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

                    SHA512

                    766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

                  • /data/data/com.xgbuy.xg/.jiagu/tmp.dex

                    Filesize

                    284B

                    MD5

                    f1771b68f5f9b168b79ff59ae2daabe4

                    SHA1

                    0df6a835559f5c99670214a12700e7d8c28e5a42

                    SHA256

                    9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                    SHA512

                    dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

                  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/e0bac8c3c005c727bb9b0b2d00be3d7cf020743113c01c46c33a507d6275519a.0.tmp

                    Filesize

                    79KB

                    MD5

                    3ccf674803e2bcca74d940a369b98a1f

                    SHA1

                    b82beb53b74476af3563d05f4b49b4628611c19f

                    SHA256

                    897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274

                    SHA512

                    b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f

                  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal

                    Filesize

                    179B

                    MD5

                    558e7c199f33a5304e4801764cd264ec

                    SHA1

                    9e9960d6db26ea7b066101023cb69041c6654ea9

                    SHA256

                    3c3af02a5f4e4d2b1334666d91e97bdfab7454f30723623c079f4cd9d0ba81e9

                    SHA512

                    fbd1e67831ef14fa6776c1b265eec6670b9be62e77599609cbbfbc6cba254d219392d37a5ec4d796349d954f37610579de457d005af864e2ac36a8cffb0d297a

                  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

                    Filesize

                    31B

                    MD5

                    8c92de9ce46d41a22f3b20f77404cc1d

                    SHA1

                    8671a6dca00edb72be47363a7071be65cf270373

                    SHA256

                    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

                    SHA512

                    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    20KB

                    MD5

                    7fa807b443bd20034ead49613db8924f

                    SHA1

                    0a16c49d06495f7910d72b73fde152a5d659273f

                    SHA256

                    2af93d6b50f0642d80d484fa86f7895d076d78866779fd83462597df74cde46d

                    SHA512

                    0cfef6a042d654c7c0d8e76d918e42d88ddbddd9fc173c5d390d65b71d60a6817a1c2c9e4764996250545bb0e1cc6d1ff1ba974ed1c8c6bc9b753d450f0e240c

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    20KB

                    MD5

                    178b22392b76828bab247e58eece38e6

                    SHA1

                    f2e6d2e8d276a1fc3cc2654a7535e024cf3bfcd6

                    SHA256

                    f0f84d07886f0ae8a3772d410645a10e5422b6927194b47ab76d1ad2e29aa79b

                    SHA512

                    9d426e540ac73c10fcb09dd1dc3d2c16e55dd6fb0acaad5ccbbceea2bfc810f4f34245170db90f63450ac390f971d668addacfbd632a9a1861dd20920b68b475

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    20KB

                    MD5

                    45f34978e1cbb936700398d4f7f17aa5

                    SHA1

                    4dcf02ab2a4c9794cf812c2b11a7c04054cb3b88

                    SHA256

                    67aa180b98b5c5058b9cfb74062aa3069efe1329bd1f1b05b77cc3fb4d1b1778

                    SHA512

                    5a462a4b6c106afe4a4cb464f0786e3e17c1f8d14ead760a20e68b378121405aef14b351bd0d0cf8f84b4510b0ef777596abcb2a79a1da6cfd621fa9830b87b3

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    20KB

                    MD5

                    93c7beb84dc66b0808421a9c753be764

                    SHA1

                    f3944ef864c9944198cfb54eec638b5e931df99e

                    SHA256

                    2029c870ea454ddf21a809d43a96efe20eff00d54377c995cb5de473075418b9

                    SHA512

                    3ec1b3d0b3b90c79b4a9e4121c888904f08b5f3e72e67cdd94887231ac941478a02bf19e2de14f1c7dfed1e3a0270e513305b4882793e0c96138a169f0d72924

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    20KB

                    MD5

                    64f0829320a07bb0d47146a41b311d2b

                    SHA1

                    d67d5f4dbf38076b9f748a4c67c852b7f0c4c8cc

                    SHA256

                    6b983047302f81d151385354cc5225ffe3250b64cab689c05640d4f075982b44

                    SHA512

                    8a86a3255fcc3f1b5059210b67a1b091f80b528c0d0694c7dd4578cca1c42ea23b48ef58c2bbe7ae40a4af0976dc3a7b87fd4439397a38650d677fe4b0eff75e

                  • /data/data/com.xgbuy.xg/databases/Reyun.db

                    Filesize

                    28KB

                    MD5

                    fe3590a1c763e8ffe5044a6e12ba3252

                    SHA1

                    eef9fc46b2ce679a3b6b139ad4110de5b20381a8

                    SHA256

                    9df6f060ab12e82e985bf502c7eddde00d4a55324add92051748577bcc316ee6

                    SHA512

                    2f35b91f302f389219f008be0ed65f26e7f575cced5e72628a96880356203240ab319248f70fd9566b8b052253185b03781c159f693cfb401cfce3e6f59175d2

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

                    Filesize

                    512B

                    MD5

                    704c56bcfa3e424d5f25dee1c41b0573

                    SHA1

                    775fd8932e6f7bfac3d94531805a126c6650cc45

                    SHA256

                    96075dd2e04a087f1e429aad199a66aa14f8cd8e617f0ed0e7b6f562a494b87b

                    SHA512

                    cde77fa59387a392d8413a8636b23debefd5dbea0db5216a7995fd5844c01a00b8cef25e555e06ccbabc769e9d06af59271114d3adf71545677a16e5391f6a85

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    44KB

                    MD5

                    d646338d0f55482238617dae8286d751

                    SHA1

                    40727dbd537d6b4113585adcebeaf6ba0ac2bb85

                    SHA256

                    8da0b607df80a0db71632118e74e4e096894ebfebbe5690362e59ef20eaf0c4e

                    SHA512

                    aae1bef487a72510aecec159c0152eedc6b1716b00f4fdff209c092f10b52c728766a170cf935da6d8a19b2dfdbf9ff9a60d06cde82d069b49580209866e35b4

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    8KB

                    MD5

                    0a94d2863cb61334801e4cc642aa4d31

                    SHA1

                    7d6578a17ce478831552a9098c2d7f9ac88e6cf4

                    SHA256

                    2c54c27ca61430c6fbf3f90c7993dd729a41c59dec637859918c152f9706f27b

                    SHA512

                    cdbe889cb610d68f17e9ff058fddf9a18d7bb54a00889253450b07428bc0b2c3f1389837dcef93ff6eec15784307e9d57e74b64621a33cb51fb49fde117dbeda

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    8KB

                    MD5

                    6f0f35a3e17e25a03b1ac3eeebbb67a3

                    SHA1

                    b160150fea5908d63394d6d84adf3921bae6329a

                    SHA256

                    82391389b98db2179e5f070e670980f1fbee0231e6de20c7f1d03374d067a0d9

                    SHA512

                    a1dd7a31a5b72c084bb7be6c7362ca8afa0b40be2b9b61d4e2a7d078f228705646f98affc2a4a7c87569b3f18eb98e8fbdf45893f747528182f91b69307ff539

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    8KB

                    MD5

                    bd3d43e75346b567db3c42a0a3e0b8cc

                    SHA1

                    6858ccbab3ca8c96aa9fc182c21a63fc4369c620

                    SHA256

                    ab393ade146847e10b4fc2ac404876acc20ae4d60f056d1e5b70a027c1b327fa

                    SHA512

                    6fface26c8b858f521e793fed8b5d8455169784fa11952ea7b9f61193272b216798309cdaa06346f030b30439372fedefe4e1233f5d92c404c0987b570adf333

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    8KB

                    MD5

                    15c78d0a08a8a69c85020a36b5de5f3e

                    SHA1

                    2bac383848717467cbc2e09cf6f6f8e7378dc704

                    SHA256

                    b3197a767995df5f6a2fd2a919b957a97fdb3cb0d31ab58b2f210833950ea2a6

                    SHA512

                    3ead9385bffb14203f195321af9d0ca735de63a588492ea5ca31f21a7e2ce5b948ebb0cd853148f0017ffcd47e80446f3b349bd7029f66787b89d339833b1cef

                  • /data/data/com.xgbuy.xg/databases/Reyun.db-wal

                    Filesize

                    24KB

                    MD5

                    756497b7565d925ab59a76b2ff576be5

                    SHA1

                    173cc3b4ce04053d56263db712f0cc521266022f

                    SHA256

                    749f980102300c9aceedf90fd4edfdc590ece16cf9dd6ab0f4a325d53d9646ad

                    SHA512

                    a047c21f1cdaef6b1e352ae3891cd25757ea593272743b65af002a47089393686a1ddba1e07703e98bee9f1dc81657e25452a7dda248f7ff4860d6ecd522aabd

                  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

                    Filesize

                    512B

                    MD5

                    60d0a39c60f2c56dd1f8eb001b54ed65

                    SHA1

                    ce8c59e41f5bf2350bf8738e548ea4e5b20a6cac

                    SHA256

                    1f0681c1d3b97946207e75b212c220586759065219cec4f08f96e136d80ad48d

                    SHA512

                    31c7ccbb0bb37a4960d00c18ff314397ae30ec6f81e6bd337c994fb0edda44336329b4cc5c7d8a5335d4cc7f9a052b037825c739acf7757eded458190f9a1ea3

                  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal

                    Filesize

                    120KB

                    MD5

                    12ee5defe4b4411122c6c7ab27c59182

                    SHA1

                    924df85c99a373735a88a18bf99dd3f0f9dfeebc

                    SHA256

                    c32e99fad61a9cc97623c6fb365bc2190a4ce008e14dae2bb1e6d454b2d7a3eb

                    SHA512

                    e17b3e9ca62373982743904335c274be7107afc46eedacb1e590ca782fc2b11fa16ee77bda5b8ca7b28f59b546fe3b2a194a420d6e26deb00499530a2c6c94a9

                  • /data/data/com.xgbuy.xg/databases/cc/cc.db

                    Filesize

                    36KB

                    MD5

                    5d7ea1a23af19b4340cc8d90f28297d5

                    SHA1

                    4cfe95b23a9e98378d69c4290af81b51fbe76aea

                    SHA256

                    474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

                    SHA512

                    33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

                  • /data/data/com.xgbuy.xg/databases/cc/cc.db

                    Filesize

                    36KB

                    MD5

                    ce6135aa1b1fe4f2c2db2a546d2a5558

                    SHA1

                    79b59582154017aadab783dc266fcb158c252940

                    SHA256

                    7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

                    SHA512

                    2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

                  • /data/data/com.xgbuy.xg/databases/cc/cc.db-journal

                    Filesize

                    512B

                    MD5

                    5d2f364f89df9e5508fec9f42740dd1b

                    SHA1

                    fef04590d70de5aa1944db64ebdb6ce5d3c3c134

                    SHA256

                    4920e86e7bce870b71fcd79eb84df1e75761887c80131dfcdb2afa0f29ac6e4c

                    SHA512

                    0d37569faf7ed91cef37dc61ccefb946deb1ef614a91485ccce430bca9afbe4065b17acf61958f013e78cdbe10d5543a35e0bceff299894a3ac787b1d6daebdd

                  • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal

                    Filesize

                    48KB

                    MD5

                    6508d80cdd11f82b4a42a62d515aa1b2

                    SHA1

                    a803ad91a686ad83183c7686808bd1e143f286b6

                    SHA256

                    899ae4283e3441e4f9cdb954ea8c911e9b22ab3e8afeb1244786ad4874a453a0

                    SHA512

                    7b30ab5201b9d583b004174c2b5732eb23a48344371df3ff1c030073ff5b6a4863281c8b622426ff8ea34e092ddea9dad84efe36f5ca1ef637df2efb805768b5

                  • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal

                    Filesize

                    16KB

                    MD5

                    f6209e4445331833b334d3aa64c5d740

                    SHA1

                    945ffb2c1bdf893fcceb780acc94b373817a001c

                    SHA256

                    5021b21b29433ecce7bc45252b1f539e3fb8f80416022e68b415ae4d33c63a8d

                    SHA512

                    84e52a043f941db6bc796c8274242ba1444dd4e597d4d6f18c78531cbe7eae77dc7f73f6d335a4ec5db38b1f9753b6a8af7ef3b1308826e3318167a0b6a24184

                  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest6266908529471348109171960520237667175-journal

                    Filesize

                    512B

                    MD5

                    aa3dcb9ccf86ef9701234ca7878cdff4

                    SHA1

                    f3f97a225db3b8ee7a516d4d1ddc3a4c09425a8e

                    SHA256

                    96cebf46a0df169054fd760dd7521dff406421271e9d967df3c42c8656ef7e9c

                    SHA512

                    96d8edd21ebf3e51bdd49165527c37b7f4e46d7da9ae07defac265c4a94c8cbe01e16456a2c79047635dcb3a81827c11ce4c67ff84ef041ddd136866d46e0d7c

                  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest6266908529471348109171960520237667175-wal

                    Filesize

                    48KB

                    MD5

                    2ef5cdfe74e8971ad00bcc756c591ef3

                    SHA1

                    a10b0d5679dffedd5622e8d0c42965d1890ddcdc

                    SHA256

                    1cd25c7a06cbdfa364e71b12d00508341d8116854495dfbfdec9b8da0dd969b4

                    SHA512

                    25530db443162f7f15a9d315b0934108540df151ba1fb8295d274cdee3641e555947e2d2dd1278c72d6b67af9a6d1ffe4a7d2665e795aeaa6ec8444cd5ead831

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    32KB

                    MD5

                    e1dfe4d573b752627dd60b9d35a7e203

                    SHA1

                    604f3e209554ff427231cfae3d6d29e89f010a68

                    SHA256

                    1ae0eb3ae7b5f2ded4c39048737a7ea91ff2ff2338e7f410c4ce586f3b2e4b0c

                    SHA512

                    bce7c891aac552515363ab4fbe79ff3f91554b4de1d2c1939189308f7d0ad2be92aed24f572cc125d817b2bf79135d1a1e8bc942f962502600cce8df4a549a8b

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    16KB

                    MD5

                    476b5c6d57cadac278f55a0b54d274ab

                    SHA1

                    091a15366db49c64444540f50ae497064b35f664

                    SHA256

                    a4f6a6df38b0153f584bf86181158e6706002de6aea3603bcb70a06c84cafe7d

                    SHA512

                    c2f35469bae7a40d7ee0bcce8f0f231c93c59ecc65ec8562002b6a72225efa832dedb01f72f04b5efd4182092a204b6f1c7775ce7c54b32cb5714246fa87c417

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    16KB

                    MD5

                    f2b01ab749e99a1634c411e9fd3f0b38

                    SHA1

                    be1ce1b35c029dc1fc270502f611130a5f6d9eff

                    SHA256

                    0180932b3a945f5a556513b8cedb44da7ade5962c541abc2a0cef48bebc15ce5

                    SHA512

                    0d6feef90c014cdf0d75bbd58b5adecf0e2839131b37062c386df4b3883c9cda4b826088b20c11d81172a077b9491d9100f689eb8bee39675cf1f05728376fa8

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    32KB

                    MD5

                    d604a3bf1f8d992cc320ea5b1f7609bd

                    SHA1

                    247f88df0b55c7d523ea5398637711a0e4a483a4

                    SHA256

                    329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

                    SHA512

                    67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    16KB

                    MD5

                    8642259967eb5a925ff2d7fb27f7baa7

                    SHA1

                    1f210b5f013b580d16d4424b77bcfd8627c77001

                    SHA256

                    a8b802aa0fa12c8ec67d70d5fd5c332ffa2411f4b009e84ff83a2974db87731b

                    SHA512

                    fe25ffa19c33ab0f35db539a2d4ab4f4c3415e71ddf56db3f72a13586e9b6e92d8c610f5af83b6e6702dded3f9a6c11146c3e208e39a4759564fe21f8d041a51

                  • /data/data/com.xgbuy.xg/databases/ua.db

                    Filesize

                    16KB

                    MD5

                    d307509ac037c43b1a65edf2759151bc

                    SHA1

                    068074b9f317976d07e4b3e7cf8179c7b34fd767

                    SHA256

                    aebc7171db2fd7a13fee1c8f4e5b777686ca074a07ce8c1ce31b239a6f1e6357

                    SHA512

                    494e4f2bd09b31006af71620ded0b893bd4742eb3deca281253131cc89577ed6a2a59814a85c9d4fbad6c752c9b8ef7152c71e0ce60f7dd4555ab0352d69a7a3

                  • /data/data/com.xgbuy.xg/databases/ua.db-journal

                    Filesize

                    512B

                    MD5

                    6053f74450f1ba52fd51fb9bc5873472

                    SHA1

                    3fbb9aa35dedffc95c18fb6dc26a7609d983c3de

                    SHA256

                    4d52cad1ae28a46cb25fcb308481bd1e233860c39c4597f60d0ea68e69d08c4e

                    SHA512

                    ad491482ece8c5a99b992f9a67dad718388219a1ca999a96746d78c22726120520b0167df03723313f85837d8b2718d8b2efbab6eacbf256e3353e06a36af55b

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    56KB

                    MD5

                    33b7af8e29877f95e15a94052e38f586

                    SHA1

                    da9746ce98b499ff44dc23e235ab2dca8f0dd513

                    SHA256

                    fb8a3d030ca366056ad77e948b8d604733eb4160e15e5eb579853de2098fdc9c

                    SHA512

                    c4ba29bcdd1f44c0688640b1352417b93ed73a4283bac8ed70429253fb0585a660845bb0a75a2d2ace56501e0c007045a366d6830703b94bf29ec31977e37b17

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    4KB

                    MD5

                    e5a8d49d9532674300bee0ed7a23be35

                    SHA1

                    b9ee315c1d8747994ed69d208022816315caa5bb

                    SHA256

                    7a75d71a2357ae2cdd75f9cdda72f489ed4d4511f29dc366780a3bbd971ce83d

                    SHA512

                    cba7af747ee5b719382b365c7612b7640a1408f68f5dd18b4ba4919203c53a01332bfe91f041eb121af108a5a68eee714966ebb46d8c22ad3de15e8c22dbcf4f

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    4KB

                    MD5

                    2c759606f301d0498f5593e3e98e1eec

                    SHA1

                    3d0309bac49451df8eadfea8a647fbd1d635aee7

                    SHA256

                    42bfebf5c3d8f171ee3d7d1af299ef1e4fdad7fa54c4533450bacd5ef1f06b87

                    SHA512

                    220551ef1aa198150afc4ca3fc25522aee2dd24a5cfedebe0559aed0f5270387d1fcde6127c4dd2ec05013d51bc281c2f24bf417def461750cfaf6c887b83a69

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    8KB

                    MD5

                    e95d9517dc3cb48661f6cd18a84018ba

                    SHA1

                    6476acc5553bbb996ab67c074a054aee93f225fa

                    SHA256

                    fa96bf3714be784debfdc28f735056f92fe2976654217541d6a59fa147842ce6

                    SHA512

                    cd73bebbd9e8330d38082f63cd738a60baecc6c5c58a281a9b8abf96b51e57c53154b31b0bdd2671d4f04441333adfb8c5bb2ade222f2aacb70c543a9f499412

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    4KB

                    MD5

                    8923e5b401a1daff877f61ab95816917

                    SHA1

                    87aa369692f1596f05ec86b25d812dae68c4488c

                    SHA256

                    1c5580ffad30f4a1051abc3a1713eb1c170517971f4e3595f7e3a9220a4eedd9

                    SHA512

                    d063bc09afb94bbfb7f29711c57344d08b31fc627f0ed03140707905a5a6c2eb7ff978f2516d7583ba0f27d9ddea4fed93bf4ab153b14cf3f5fdb8d32ea5dde7

                  • /data/data/com.xgbuy.xg/databases/ua.db-wal

                    Filesize

                    4KB

                    MD5

                    b85c4397d8de907e3f4c6d0629daf950

                    SHA1

                    70682edc07a8bf44ab276d4c2de5c2017fdfa932

                    SHA256

                    0dddfe0b6f3c468cd5f56e30f191c6428f4bf116df29f34f1661c7ce23c2e22e

                    SHA512

                    f04f5c5290921d7e48af72891ce5ac75672905bdabbda0ed0563d2cc587965b499187f79823a4d61d6bbebba16871c9f73b2f8cf5730fa7730c539f88b9023bd

                  • /data/data/com.xgbuy.xg/databases/xinggou

                    Filesize

                    4KB

                    MD5

                    f2b4b0190b9f384ca885f0c8c9b14700

                    SHA1

                    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                    SHA256

                    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                    SHA512

                    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                  • /data/data/com.xgbuy.xg/databases/xinggou-journal

                    Filesize

                    512B

                    MD5

                    ffb27a1a32a7671ecd616c6b8bfea2c4

                    SHA1

                    3ef839674ec1ad0d6962db3dcc13a94159e92829

                    SHA256

                    6b2cffb4601c20338ba6f426b2263c17ed074b86173683867221c31a7e06daa5

                    SHA512

                    d22046cb6c7ab0a982b5f8469f12184164f292f10417c1e961759d9c57c35b7cd8e9bc59bdb2bb9394b81963ab6b536ede977f867f90efb9f90537482eb052a4

                  • /data/data/com.xgbuy.xg/databases/xinggou-shm

                    Filesize

                    32KB

                    MD5

                    bb7df04e1b0a2570657527a7e108ae23

                    SHA1

                    5188431849b4613152fd7bdba6a3ff0a4fd6424b

                    SHA256

                    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                    SHA512

                    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

                  • /data/data/com.xgbuy.xg/databases/xinggou-wal

                    Filesize

                    64KB

                    MD5

                    db440df00b9dc997b2f6c00ff7f7049e

                    SHA1

                    6bdecd1be99cde8af9cb9eff9edcedf218e74f57

                    SHA256

                    c1c7a0af9d57f49c3421f4cad7e6eac4e4598c712404d38b9ce74b5ddf619a05

                    SHA512

                    77497006f51dfde41ea23ef23d31f86005734bf55c37dadd3cbb4d8daf42df47db122e2f75f92c7ab8d605e15e8bf3f5b6af95131257bb32fd946911a71bec69

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

                    Filesize

                    40B

                    MD5

                    3911ad10a2d9a4f7ef7a09639a1b8cf3

                    SHA1

                    d8d5dae863fe04bef8d987202e25e065efce1e1f

                    SHA256

                    0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

                    SHA512

                    d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

                    Filesize

                    40B

                    MD5

                    81024874f926b0c0c9e613997c9370b1

                    SHA1

                    a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

                    SHA256

                    da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

                    SHA512

                    8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

                    Filesize

                    340B

                    MD5

                    c6a6af8dd3ec1dab6421d7a0f8d52149

                    SHA1

                    068ed63a9d7d4f5d6946049d5f884f10f7c6b8e3

                    SHA256

                    3d64dbeba7324158eb8bb90c2b7c0dc272f28fb4984a37058990fd0ea17a4df8

                    SHA512

                    0ba0bc4f4069a4c11caba541e91a8c8a33d5f226e502280b276156047a221463e7b2d1d57b352a77ef83b5daba0c358c19a75bff461f377f729f595b95beed37

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

                    Filesize

                    340B

                    MD5

                    76a2a719057915ec939c12eacaddc2b5

                    SHA1

                    ed23594ef452f5115665da998eff89da66583215

                    SHA256

                    c645d1e83da5584201cec06abd94c45ad19b7dab3e826a45dad44a2947ecf128

                    SHA512

                    5bde6a892001aed920cc62fc3b1d7ac7e01b9d1fa6bc16b097a037ae22c04aa5bb4883ee2cdc8b72ae556f52cc2b55f07409335a8ad07e709299e6e839a2e08d

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ic

                    Filesize

                    40B

                    MD5

                    1bd86b90e1b355f123e5ce8c93c3de53

                    SHA1

                    bee5683d6124650c8be0b3740ad66e771f29b178

                    SHA256

                    3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

                    SHA512

                    6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

                  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

                    Filesize

                    314B

                    MD5

                    ce3ccd78e2a87984e7bac95ca0dfa645

                    SHA1

                    396fb053c323d881ac45fb7a5dbd316ba4718c83

                    SHA256

                    dff0c2dc83c4940f51c02e0f0bf2556337f3975da88d6bada38a905e95851e3f

                    SHA512

                    3e93116d130a7d81ad13d1d2b05221e91114cb03119eb986a1173f721cd50b42d3c50add0b35619e25257b6efe8cac3fa31a9bbf95bcc09da45c99d8513ca715

                  • /data/data/com.xgbuy.xg/files/.jiagu.lock

                    Filesize

                    27B

                    MD5

                    e2fa20448b5e30311d0940897da426e3

                    SHA1

                    9bbda56cbdb50f882edd1ee8ce2150b463446a5c

                    SHA256

                    ebd81a849ce578038f02e7f8f3f1b3cf55aa5c017c5aaa7de840a8353e9790b0

                    SHA512

                    a6a791a6b3020fcc4018b48d52228d6130223d7e8f18e9f12587b1e1d043e24b739ed286e5e9a11f82b754fe3b176f7e8d30d4f2efa3ceccd75966a9e1eba6b0

                  • /data/data/com.xgbuy.xg/files/.um/um_cache_1714202838848.env

                    Filesize

                    1KB

                    MD5

                    9685862a810bedc046221e87af4fb1ff

                    SHA1

                    d4444b528fc644c1412a5b7b286a5caa3270c24f

                    SHA256

                    af475d0bec5321fe43ecef2edba2e83960bf9e6b58f7f1ca339eb19cd0f6b575

                    SHA512

                    d66255940618f07853be310c4b08a82b3804fc37c4cfd6f8dcfcfb86e20e2692756131e47d4f5cb88f0773e4b688ffac34e82025e61122db2c907d6767bf0132

                  • /data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.json

                    Filesize

                    162B

                    MD5

                    0c8c381a1574e0fbab3ac4edf098f3e4

                    SHA1

                    32355bb64631366f6daa9711efbb38cfbb979b04

                    SHA256

                    836bc5b80a5b59ed1b6d704c32feee250e7bf68a2bdb744e0d3a88ff94e88547

                    SHA512

                    894bbbd5aea544f658c2c2c416f3d3ffe1051acad7a115c5c00691d6487253e97a3b0bf2d179998d2f0ab969011448dde9910539ddba2b488634225797d54e21

                  • /data/data/com.xgbuy.xg/files/Mob/mob_commons_1

                    Filesize

                    2B

                    MD5

                    99914b932bd37a50b983c5e7c90ae93b

                    SHA1

                    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                    SHA256

                    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                    SHA512

                    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

                    Filesize

                    23B

                    MD5

                    8e24e79baab91c4d0604eaa9006a0cb3

                    SHA1

                    e427afc94a4b957a7096f73e395a10ea404c076b

                    SHA256

                    65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

                    SHA512

                    45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

                  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

                    Filesize

                    62B

                    MD5

                    04e27aa530f8ddfcd7af4796f678eac2

                    SHA1

                    d6cf935578d345baf9a6ee0ce22c30d9ecc2ee74

                    SHA256

                    9ee2d9fe4b39410aa66483e000cfdc5d67f7e0f4a46004ce3ff2ae99b31ae75e

                    SHA512

                    a31e8843a89202e2c81f9a01bab03b7346bbcceff416575a7000572295af95acf52e7270f70bd9ed4202c7786b8685461851a53e76aeaf54d06e8f6bbd448830

                  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

                    Filesize

                    86B

                    MD5

                    1ccacee3be18563d28703d785e6d3763

                    SHA1

                    d93b3d3e873f138eb0dfcdee920b54a4052be38e

                    SHA256

                    48b1c8cb0d7cecad763b1523c79de2465cf461dd35339e67375a9966d21be7fd

                    SHA512

                    cf181460ab3e746c1c0f30e8d2026f9c64d867c37ff38af7ce7a14229f641502f0de520652f637e6fe95f5aae2d2e66af703653df967b046fcef7033672e58e8

                  • /data/data/com.xgbuy.xg/files/exid.dat

                    Filesize

                    54B

                    MD5

                    c3945eee7af929ac31ca730a73b8f9f7

                    SHA1

                    6838bfb2600a62118e1f0e5361af040fc97a2571

                    SHA256

                    df6aa8a523a254be3be311f843bf6893f5dadd63791f24eb978c199b3609bedf

                    SHA512

                    60a8e59d28874f32d2313ed7ec3f82eea5b813e9182b0782a4dfda371ba1fd0c0063decf0afd854eec8e3872faa586839c0521bc3b0d6afe19ea2d14de63b6b4

                  • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

                    Filesize

                    131B

                    MD5

                    7b7f57d9049559e33bcfd43d02527aaf

                    SHA1

                    349a4aaca945d765d32d54f54297e2acdfe9a471

                    SHA256

                    3e326719b75f9f8d4052922edc54fa7898a714e98110131ad0ac28c4b013d768

                    SHA512

                    2cf7d1fbb36e1bb73564adaf40855fdad68c5c750e3d11ab0596065fd410d443c7e03fa2a6d402620cd465255cf86a2db20cd8cecabd134d909d0cf0ce59491e

                  • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

                    Filesize

                    190B

                    MD5

                    cf3e5eb6b70ca0f736980f0997cb0ec0

                    SHA1

                    c1358b6c0b9060193e839c69882fd4a9627b863a

                    SHA256

                    c1e0607822a27a54be06d3f08522dcf98eda1801d176517bc77e2e1410def5e4

                    SHA512

                    2c72bb8e19db54b691654fe626eb99a08dbcd60e79d25a411a5abc4afc47ddf7a4724bb739ea5113c0fb923b6196db11137844fa161ed14bd81291124e6c68e6

                  • /data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20240427_log.txt

                    Filesize

                    201B

                    MD5

                    68a87c20a01e801061d57c34259b55b6

                    SHA1

                    24fbb62d506633151c7cb0a356cc9ade89ff1da9

                    SHA256

                    10e9d06e78d6c6dd9c972f8c4f19140bf60511f45102c8720f80a18408182f9f

                    SHA512

                    9b2c2b53b673501be577af44a8fdb71c67eba17788889073969263db8a913b2366ddc69681841b0253facf9034e5a1f2991dcaeec805ac26800ad22cd31929e7

                  • /data/data/com.xgbuy.xg/files/umeng_it.cache

                    Filesize

                    413B

                    MD5

                    0fc5dc7544d33ebbb022ed8e2b7e2f9d

                    SHA1

                    1b4367e76927378c024074fefc3cd7b270b67e72

                    SHA256

                    bdeb74bf7c6eb74bddea137995c55aa08087c511cd570c94e4254364f9513466

                    SHA512

                    4df8a3c15f6ef527e894ad1acf056f08046c63011080350b082bbae2f3ef03b2a289142f3d5b4616ec2b59d6335f2da77591d459ffe8fd49ae61928145d7b7c9

                  • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex

                    Filesize

                    6.5MB

                    MD5

                    dadda7503d34f5837057a447b26a85e5

                    SHA1

                    0077dc17f302ac7bf06b6f4e3775377bc5fe72a2

                    SHA256

                    e6077d585def4f989ac0297320fb2c167473e3872d65866d13c0214768411243

                    SHA512

                    68bcb5dad0827a2989a7c1627f2482ccb5decc8f2df3fb084a2ae8cf6335a6fd1d7bf14b4b271326865478d33ab0e2f7f925271dc9a98a23ba53f8bfd3ed8b0b

                  • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex

                    Filesize

                    6.4MB

                    MD5

                    339e9083af803d077b7e38493243e830

                    SHA1

                    fa24950f7715915588ebac65c60c729bb3d5e9fa

                    SHA256

                    c9e7fba1d66520cc6e815a9b01b1b88497757cacfb4a9a9a171751cb8af65c2c

                    SHA512

                    84e0b0a8b5e46a073636ec128586ff3ca395405fc16e0fae33a47af322ccd4d661d436f4a5d6e6a2defb3280bf691afefca15ee75a8bcc3467640984a230e72a

                  • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex

                    Filesize

                    1.8MB

                    MD5

                    e23b82e4088d57e290eb7afbbb930e58

                    SHA1

                    a7e63435534fc9d20ad52e65af45192c4e40d6d3

                    SHA256

                    ea6c2b12919796b88faf62fa6e710b5ff448a936cf4088445b8dc3d1123e7da7

                    SHA512

                    23a28693e48f70bb26bb2a1efd7109aa7a0c2da2ba8ec2dc8b397006914c1e9544f0ba31166c4e66048d216cbc2361e09c3c679b92fd5134c45f981a826e7df6

                  • /storage/emulated/0/360/.deviceId

                    Filesize

                    48B

                    MD5

                    1d8d16c4e3b19ebf18988530d9b9a757

                    SHA1

                    bc94c1cce05cd848a53271ecb9c5311e27ffebf5

                    SHA256

                    abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

                    SHA512

                    4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

                  • /storage/emulated/0/360/.iddata

                    Filesize

                    80KB

                    MD5

                    5ee94c14a7ab0836572993de24035d15

                    SHA1

                    4af93f6b7c4a09bddc74accb621d07d077d91862

                    SHA256

                    167ed81793e2961e762e861db32bc1a8d1c81397310e52deaccc60c0586098b7

                    SHA512

                    82464ede20a9628516b6fc47f99ffec19a56a12928a37924d7621939fe3a5b890eb65c1e674f2493c24787bc9dc87a6578cbd8ae79634fd8ff987a64b83e4a95

                  • /storage/emulated/0/Mob/.slw

                    Filesize

                    66B

                    MD5

                    19402718bfb1c685a726b4e1d846ad98

                    SHA1

                    02a7e30044a67085f2f1da24e16e4ecfede65b72

                    SHA256

                    079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

                    SHA512

                    25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

                  • /storage/emulated/0/Mob/comm/.di

                    Filesize

                    57B

                    MD5

                    70a42cba408700f9a6c01c7941a8829e

                    SHA1

                    eab01cc2c0671538795fb0b1146017dc099d0984

                    SHA256

                    499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

                    SHA512

                    8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

                  • /storage/emulated/0/data/.push_deviceid

                    Filesize

                    32B

                    MD5

                    bc26d934b1925e515c00d27dc354ceed

                    SHA1

                    1a46eb128ccdf79199d7b28d40cb53deb1b5e91c

                    SHA256

                    782c59057b78733d31e1c5605bb3dc4ca84e1a9f2da2ada304e7515a87a03023

                    SHA512

                    c332642f0869d47b9b2146f8bc2def3359deb3bf41c79fcda18f44ddbbeadecfa700b395cfca3ebd309c2d36d248eaa5db4ca177f998d67433ac7609f1a41dd8