Analysis
-
max time kernel
179s -
max time network
186s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
18/05/2024, 16:30
Static task
static1
Behavioral task
behavioral1
Sample
55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118.apk
-
Size
17.9MB
-
MD5
55b2e5c53bfe00713164c2aa2c9a1702
-
SHA1
87279d1e3732d87e3b5a5c72f138b4502f27124d
-
SHA256
1fc3dbc5a4161d462272560b4b0ab27c588bf37afa2595ed627dc81c3a682f46
-
SHA512
3bafe2fc651e56ad7f1d84b379d5273545890d2ee8b06e67bcc9a5daba7145dfa98b026a1e4b81aea1ca9c6b029b49f590b6000f6b6e8135e4047e9ce727c618
-
SSDEEP
393216:ZONPXBL3FFxnm1ucDS+N6cP+r2tF9Y83E7gf/dgmRYtjm:ZO5xpm1dbNLF9RUc2mWta
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /system/app/Superuser.apk com.xgbuy.xg /data/local/su com.xgbuy.xg /data/local/bin/su com.xgbuy.xg /data/local/xbin/su com.xgbuy.xg /sbin/su com.xgbuy.xg -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.xgbuy.xg -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.xgbuy.xg -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.xgbuy.xg -
Loads dropped Dex/Jar 1 TTPs 6 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xgbuy.xg/[email protected] 5141 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex 5141 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex 5141 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected] 5274 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex 5274 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex 5274 com.xgbuy.xg:pushcore -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg:pushcore -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xgbuy.xg -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.xgbuy.xg -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg:pushcore -
Checks if the internet connection is available 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg:pushcore -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.xgbuy.xg -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg:pushcore
Processes
-
com.xgbuy.xg1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5141
-
com.xgbuy.xg:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5274
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
485KB
MD5015df5724b50b4fbc6dd0caf7ccb817c
SHA1980780e98c9958aec97ab7a0de8d28a4c5fd9429
SHA256183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6
SHA512fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/1b980bbc765294097260c5501e33520cf79efb2e8ca5547693e262f223514bf9.0.tmp
Filesize106KB
MD57459aff7652a92bd0f6067f2d6e82f00
SHA1df17e66aaa9218124c14a31c0b4830f1e3d85bdd
SHA25657c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935
SHA51258a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae
-
Filesize
180B
MD558e858122926a2ffbf7f8613880a93e1
SHA1fc663d137bb6542a6bc5eda6bf58bb705d134049
SHA25616ebc4d11ca39242bbcec662681a2a6e7b3c837c02f6de8c7ada1f94f122d2c3
SHA51247e20a60ebe479e44c5c13240a248dd295e7927115fa97ab8b511834124b5dc0c959a9ce9610c1da90be139bbfba3b7dea224ce12da334a63c75a56c11041923
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
20KB
MD54f0a10a9e9cbc262d63234913ad348c1
SHA17a9f20665f4e6fdef92cc3b1466521021f6ad77f
SHA25619bdfb52be4901ac03157cd8b38bfb775c21514c1efb52be2b6f444cc8660cb3
SHA5123dced44e7058bf79745ddf1a166ecf0f0467a5a204859143b2b646291098afcf250d40c7b5a77cc160d1d6f21fe82555bfb5bfe9becba0c9807f5b671a8880e9
-
Filesize
20KB
MD5acf36ca1581d9db6cbd837ce0f8ffd9f
SHA1518bca3d541323f6e9af4267b79221c1348eb9cd
SHA256cd64793b738dc577cdbdd1a367f436163d21afed443092147135fe8529843e34
SHA512715d503a3bf3620b108dc2fc975b4bf67a831f92be7c08c31ea80df10291f7afaab3d3dacf402bde31597984b4bd9ea4621f557ea4f0d6dc46e0dc538d7b6c71
-
Filesize
20KB
MD5368ef4343c6d546657941863786e198b
SHA1bd48143f8165335b405dedc78a0b98ab718716a2
SHA256724ebab6fcf9aab41d6268c893d84b9627a718cfc3f22776af1301234aae23a6
SHA5122fd983c3906f827ab1cd4260c0ab349f25ccf06ea3b320c2877fa68adddcdb9b1b2f8ec5aa2f15509d3e76671835df36761f88bc33f824521764a2459e22a4f7
-
Filesize
20KB
MD57335d24396f8de81e542cadc763b2c4b
SHA151aef6f5f151c93244230f514fad9dd5a59cc089
SHA2567637a094c2948e4caba2d45acd70f1b75518f03fea3b307e87bad88ae75c8de4
SHA5124605f6c3f5501cffadae0c25ea1e641038cac5448993ddeb5a5f09eedf903ed9c93a2480709d6b21335fa315431232841d635f4e7012ca1a8f5f663dd2106755
-
Filesize
20KB
MD5ac9d7960df73168e3194cd414ed0c289
SHA1ba9c061aac258db39b8962b1eb871aa04eabfa45
SHA2561125f7f3d3048e372e497ecbec7b0496daf7748dffc2ba3623dd17fc7d896942
SHA512d6e144bfe0ad15e25fcf388b143a0e49aa8e3a126fb5387dd37e20d99175dbd184687c8bcde73995eb47e17d936b9b6bd9adc25d5c11e8e35232ff68cd6fc099
-
Filesize
28KB
MD5695d042471bab19efd9178108b460a85
SHA1b6a0b9333ba6df4dbbba8fb4e27cae5d29522acb
SHA256b4a39783fe584d59be86b9c5eed863520146a3d3c8c7a100fd5c3bbc7c1d3d2a
SHA512ca32f09d8cfe4b280d998fbe275a1e30416f6824d7bf7cc24ffb7f5b54d87fc37eb3ac62f4eaba7ef82f2da477761083dad37cbc1c3caa69b554fc96772c31df
-
Filesize
512B
MD5096f0fcefcd9070cc50d76ea4c1ebb51
SHA1266ee54cc5900bcbd371b51c5b2c948eb2db45f6
SHA256f2ad3b93d24344eb5cd5db018c744c9e8046341ff62b502c439762c43e095fbe
SHA51229216918437beb5bc1cc70bb7e192995f692b37b5ec6119138461ab5fbde7d91c762c6514fa5ecff229e35c91b7591677dd82fe43cf3d929e9896ddab7005241
-
Filesize
8KB
MD56c575a0301d17b804be42beb79566894
SHA19308a3e631c50615c5a81a675249a78ff693f0e3
SHA256a2494ad73f1f35294ed595bf14e35687c82335f0e56eae70712bf04018d751b8
SHA512e079984004bccc2eb98379b4220da76f28ad5db493008e4ec470e06f4d284ef995ec4fa647877f09ee6e108041ba6cbd57756f53504266d44d5376e28a457992
-
Filesize
4KB
MD59096e3a831e64cd276f2175690d24734
SHA1c9c7747afb3ca7c2eaddd1fa78a53b78d5c20454
SHA256394c4b6ebb58a754380f8d82270d35eb7b0b98938eed8d94402d61c9cb7ff178
SHA512cc4d279f247c8de1bfc6b82c4cce599e3a45277df916da8abf2f9a28ec6335dad13143986af69e4c4da12d772264292f93471fcaebf820bdd3ff4109621ff8dd
-
Filesize
8KB
MD51f17910f6f7f64804027c196780f9f9a
SHA1568420abc0fe5f8a504b29cf245460ff14f625f8
SHA2568d94601d3af1a81b5c7650ca0f5b8666fe65ef8a29bfa461690b861a407ee059
SHA51292585400691d9b1e1ecbdbe0d289caf752699acc67d8557f496d12814c1cc4a1bb41cb00b7b8b1f0ee12b6a2570c2276695469a83df2d504db2caf2b80a9a479
-
Filesize
12KB
MD53a351f0facb417433261ba446d8696db
SHA1eab2fd4cc4c3e8088ff9796528d594aa012a7139
SHA256d8fd2505a62396b433b6eaab21ae5d56cd9063f75c4fe363c4c6b618de766625
SHA512e974f8538daaf215b6925c3a3cb30c41fdc2b34df61ecea8564fd6a1bac52488147a4c620061289c13e3b097367a1cfe00cd0cb86f20ac33e2ab1007ea1c8961
-
Filesize
16KB
MD5e479ace33903bf3df95af0dfb25dc4ae
SHA174c9b5fa909103ec27105681246406cbeb08aa77
SHA256a2531e0af59c1caadc7486c953c37302fb25c443adb8206d30514be554bc39fe
SHA512f3d006f7131b4e9a9b710d9822fbab770007d1a43694cbc147ad6b54a6bd1aa3552b526a1baac80799eaa51779646a408619b24d82dfdf0980daf84f2f27200e
-
Filesize
28KB
MD55800c2a2e7d9bb3ed39eb1156e78a096
SHA192468db904e8ec42f24f2e28043d17053708b26b
SHA256012afc042b8d1e19366c9087cdbad33090ee414dc7b9d0dce3e6518570f3ecc4
SHA5121ffe2244b6abcca29e855dc1779635a56972fb382b45d07a5c09fca77b707e0775a35b1507c5fa5c71bd0208b005bcaec3a3026e5fd8ec28d43333cc88204ded
-
Filesize
40KB
MD5adc460ff0a21ebad0648037879c1dca1
SHA17548e567dce1ad5c463718983a1612698cbb1e0b
SHA256f2426051cd3929a2399501af866e2c0d1dc9b5372d896c1f799239b466a48ca1
SHA512a6381da30bb7f83d6d4a0d0cb5537156dcf0af256b0a6bbbabbbd8d2820ed93426c0e564c2a6e204ec7483eb02f596c28abbfbda28824f42bf1acae545ff2b43
-
Filesize
12KB
MD5e6cdc8925f76d742cdb55ea2936412ec
SHA15b961722a5ab324272c9da5f6bdc84031e45ec3d
SHA256a6d16d580d28a189e8ce5f8fd0fd65eacdd6fc76bdca82c87c5a755b790cbce7
SHA512d9f06df1a4fe1b35cedaaf9c80686a92d4fb49dcc98fce9deb337293bdb7850444157d7e8b7326bf05f6ca3a147e1122d4bb5a2b12a324783bc88ff0e750f8e2
-
Filesize
12KB
MD529c331496122b4d43d3084cf1a9656ca
SHA183ddf8f694935ea37afe1ff5d746eca568c14383
SHA256724e3bb44b251e3962d49503a25c8e31131dec732293fd725cf9de626a9a4944
SHA512738903761300eaa257b4b6a41e96a08bee5b445f9675c804f688c1dd6b54b9ef427f2eee76fae738c96a26427c8e1f0da327f31aa46626d11665b7f5ed33bd6f
-
Filesize
512B
MD53efb742e3032f51fa210480db176b624
SHA172286e88b8c9f7b2ac298a35ed46a0beadc14f82
SHA25626e1d88e4036e3eaf7799cbca3a56868de5de5a9ee33ea80feb4ed1581675686
SHA512182de4f58d1bb08ac21aead6988206469659ba3ce89850c706ada4cd740a735b0dfb854f8086bf2685c3db217e05fcbbd47425948cb0284e200c72260786303b
-
Filesize
8KB
MD503b40a0c2ccfa915e1b49b09d867e239
SHA1a785dff0609f5fe6d3634ed97cf0f0abe3a7fca9
SHA256e6806c30d9fff81964b14c45c63748335df0893bfc5ebb77d8d6e8ac03aebad1
SHA512aad701fd35bc7bd4a4130a9d5eef804f2ea0b96c48a1bfed39cde3061116b66d0ee32feff4a2d1f753cc2308ad546591c9f4b56f9cdf3a79bef189b0d7cc609c
-
Filesize
8KB
MD50c75a9e8a5ac5bf1b3a3cd4eb0fd8028
SHA183ebbf2e93abd7db097c7e92f50a82e81f2e9444
SHA256981e509cc95a688bfee722e4666f070f60e4db8c0a0505c0c9a6057fbe58890a
SHA5122d752db7ade5b28afcf775366db060b6bb00aff27f67d176b649ac18a1db8a848c05eb3f0cb75c8e482fd909e13d47434945f9ce9ee8daa4026e5ed15c9e86a2
-
Filesize
12KB
MD548701c899ae9913ed4499fccf9f5f049
SHA15911e3390689adb14d246c76c70f5adac20adab3
SHA2569bed16c1c061683459729f73b798e01d4bae4022dd07155b0305d73a65696da8
SHA512944a3c13443ec11db272e64a72540a60cc3f262ec60177ed1a91393095ceb390830d6173dc256d6535eb282fee34e7cea3e9a04626e846087d61f87a4bc5aca7
-
Filesize
16KB
MD522ec89342756fc9f6b4d34b262d25f27
SHA18a3f296bc5750ef9b390e7cba46f772265218340
SHA256bcdebedcf3727dce7708ba0f2aa9feb6ae34cd4a1648e12627feeddff71d4def
SHA51215da27fb89eb756e0a21399d07cc67d86f0ec49d6132a0edd2c34c8be0616ad2afec053d53c0e3be0b87766afa875c3e099e77e8f57887bddbc9fc536fe7de28
-
Filesize
16KB
MD53621c59109bd5307b0a5613f4d820beb
SHA1be3f30c170864c5bf1ad12b3d7fe035d114c22c1
SHA2566cc20fe3802b44cc935257c4be4ead83e5e64d5dc72788dfadd012d6b9294420
SHA512ac50b2c6ceaccfa5aa92bc3337abe4bc6483efc731505386bf96fa53268825bc758086017cf82982f1927840b6dddc2e58cd6931cd1aac5514d5c66f130207ef
-
Filesize
28KB
MD5dd4eeb4c8de3226da99e908da9c16393
SHA17fe24ecc7e468133f2959147ffceef63f0398e9b
SHA25610197be3a481d90ecf3bdcb894d7a5ecc821747ad33aa78706406905c39f71a4
SHA51233f4f483ecd28224e62de19e7c93cb2054ad0411f4b52acc366df51422c61ad851735c4fbbd812b5e98d13d0f51bb414964c6f249eac709b0e1740ae361202cd
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal
Filesize512B
MD56c6e5fc5722536cae935d2475979f736
SHA1437c7a22a685e1447f587b9629517c7d2f7c75b7
SHA256c20c4da265de74b0dfd4b52ebde2bb3dabadd1ec2c51ab094bf3d340455b8b65
SHA512f3137c4d6264dde20b430286d4db4bc33572dd04b842d20676b8ec93d716018431fef129f33eaab41aee987dd5d850857497fc4e16f7aed7437f11f8650a3309
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal
Filesize8KB
MD5f0b13b464c106ab26cfbc036a6b7717e
SHA1b7cd3d56044d51f00fad01163134edc1fd1c6a21
SHA25667aee281a1f1a277508838e762f3f42fcc3272fc0f202db40ea8049cce4f528e
SHA512e2e9986fdf32bb64fdbc727f984b7d5dadaec2982eef81e11e6402a020ea6457279dac30320ab56604fe53507230d10ef4340a51039947c97dbf2b4d19e65f6c
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal
Filesize8KB
MD528ebb0173c146d3f1441ec292ab026fc
SHA1949f9bdcffd20368d052fccac2c6f27413411fcc
SHA2564ea19d59533fafaca611e7538bc739ddb1c5f314134bf6cb6fe9b2fd3b0f7d0e
SHA512d21974cc96e3f10d37a8138849807f691cdbeaa70e394f78945038f2a948413996abd63a4d7f081be9fd41b62d7d199a9a7d06476f563f61cae71e4fa2dbdd5b
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal
Filesize12KB
MD57c77a2749dbfb4e0171436836c4a2f93
SHA11e86a20c6f124f544e3a01938c217e603df62cf4
SHA2565a067bca30c8337615186aea66b1d99caee3d3bb979df191b5ea03ea87d25286
SHA512e235a6e18f70376ecbb196df46f75e8e8471be26dd51282903a63fd14dacedceb84a1cabc4a014f8067d0c5a435a3a8804cfbee1ee5b3cbc65c3b133980a1b68
-
Filesize
36KB
MD5b7036131b84bdf2b66c67fde18d62308
SHA118b1e5a358d68c846495cab5cfef7c6679659093
SHA256c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295
SHA512256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067
-
Filesize
24KB
MD5bfb75c588197f265fd0f2f4836dde90b
SHA147f49c9e8ff8491f6291ddd2a3feef9a3a42be5d
SHA256059c8625f653d73d9781f025fb1d5affa811d51e5163e00c0aae43795fc8d055
SHA512c5cdebc414b441a729823555d6dfc4558eb58a00f14a048a57d7a976ca8105f679a556e6697fd20e61e8b64e2dc187cd3e611313f1b005c796426c26d2e8ba88
-
Filesize
16KB
MD5c367d31b9588f4108b003e1b14d8f095
SHA10fbc664603a3f89b2715fdf2cc0d52655f59e279
SHA25647d2a9200c32f25bbf2df2a9bfa14d80787ef46cdbd0a13f1380fc31972befa0
SHA512bb0cc19ebc60e2d82227e33599557e136477a6aff6192035b4dfef3d917ad2a1b911c33e96fda6747de1362248b81ad90eb80fb7d6b668a5f88e3c08e252d106
-
Filesize
16KB
MD54333272fcdc30e5cde92ca348ac016de
SHA112eb0f6f1aef06dbaa2714c4d9f2144760813c25
SHA256dd77710039a8ead2e76366651b4b605ac3c7f975bf947603fa5bca0018b908e2
SHA512f707748ec64c6e7752f6834d3c938ab0a4b5f54bb47abcdaec61fe68a4c2b2e096422e5bc895852320d6207cde7aa06eb16357a7850bfe3a79719c0a65eeaff3
-
Filesize
16KB
MD5e1cbc99458889f9d54cc192a59379112
SHA1d9ae0ac84f9bf0b98d6c30cc498f4bb4068d47b0
SHA2562ab8b63a049429539d1deb7793286e634983114b8c42e21c7c203fd635e3a239
SHA512a08922d1bccde38abbcd5008f748e66f16641d3daa76bcec2a4a0b3958bfc79b65ecfd47c4cf39b8eabd6c814bacc4ab91a2f86ac7bd19ff91e319c6b839010f
-
Filesize
16KB
MD5d934ca46515a113be1c5d061f5e3fb90
SHA1869d4e565f52adfa0059bcb9891bbc4581de00f1
SHA256a9834467b3fcd54fadab63f7d852cec49a27a5e065feccec85d3854fc5333f71
SHA512e1342c1db15e682a3ba0bd986c9a2c3ee4f7c3efa5e49dd153fa0b0e1e33690c79903c6482c01442126857a1e5b31c60291343691ddd9279dc37204114cf3f1f
-
Filesize
512B
MD5d896d74135df7f3a8759bdcf02d00f20
SHA15a1bd10caf2d9d6c2e60598c89d87caf93058749
SHA25621fd30c408ad7d6a83b1e6c6dc77edb6bec7144e286161ccb1ff0214a8cfb460
SHA512c4369a26d8ae98b3454551311015996da29de6d31e3b95abb70d81405f40f7e1a888f1eec91e0da058ae8beb1bc6fdafef72b0af6095fec5e234a0b846680638
-
Filesize
8KB
MD5a0bad22ce17d79b6d694cfd2a25ceb71
SHA16cd93d906a14a38d020f3706a4e6f9921ee4bcb4
SHA2565ce21bcd8ba3883bdd16fbc2243bd3a8398f604ccd9503487e2abe6fb848819f
SHA5125852777b0ff06a21bbe8bae1ae04c254bfa3862375e0586c016d22a1424f642ca07aec5e0db4047c21810db3c618afc16ad802955ae3a69a600971667f5a69ff
-
Filesize
8KB
MD5a0da50ef88f1652519e002f86dce10dc
SHA12c91f7fa3b8a4031d46de5a2aef78055a0cd6d1b
SHA25609b340943e538fc81fa3946353cc3ef78f0b26dc8b373097e749132ec5c5260a
SHA5124959f470dd9ebd7a29aa2dba49de74c0ba9fb63074704096118f1937e9090bfcd80b28d0abd1c7b0efcbd1a22a1115f25b3e271e6a5078a50ab3a9fc7f2a912f
-
Filesize
16KB
MD5f90be5f3e4d0971ba82ff68462a254f7
SHA1c64963ebe00a0a9ebb36ca79d900635f25fb4496
SHA25612f524f41d5afb33f8d6c44ef2528b0d30cd5d0f8f2f6b9c4cf7308c160a7258
SHA5126fd46d72af225e01c42c262cacbb126466cb3d536bc315a2a2c1b07391537a34996a7bc3a11b99f41c7297761df112aaf4497652140a78a51fa6e52a71c0efc5
-
Filesize
8KB
MD5e1dcd0e63752167ff6a343e4029dd34d
SHA1ccf801128ecada6e2a0e3b99ddc08e176f4770b8
SHA25673123e5b8d0a6d220f6f79684cea0b2698030ef6d5c6401c5ea4d85e383fb03e
SHA51294c4985a5bcb5582ff6c34b84cbd797d4aa12c745a1c31bb81ba8ba99cc494e0c07e1014f07baf86c88788fc3bceb338e7f5875c1e2f4a429383c28b8fd070dd
-
Filesize
8KB
MD517373741f8c46e60cc7428c4a0d8fe07
SHA1ce99181ee0169cf361336e3164344446fb5062d2
SHA25633831b85e2a44c8501a2ee59ffadd41aa5889f06ae55be51e74fd012ca589c43
SHA5128b8afbe87a0f9d4f4fb936fe24f5a220db801da29bd225ca1d9d1c4ba9c18bc7b80b82652af51bf92da5aa20fe7f57aa5e68515b0ad52ecdefa303b0cd144ee6
-
Filesize
44KB
MD56ed98fcdd3c07e754d91a6b161e90a4d
SHA1afc6d1d9fe61c9d5e359b3797102d18e33b36ec2
SHA2569162b4bf4a80cce0438cc90170757e589ccfccc3d8ed1489ec634495cf59006a
SHA512e1fa246f12041bc7b2d7bbd74b176c638ee9316810322c7ba1d53c2ff343e27bf491e8c14e70f5ef3bc8808a6d9fe3b7f5882dc172d72bb91e1e21384368250a
-
Filesize
512B
MD5ca57b55e7c6d34a5293c1c24da26f41d
SHA1e9412e4e2a3ed9059d4125cb503d5155afac66ae
SHA2569eaf8e8151da6b9b0895e83306b706b89e034e735b5cfce78093881daa74ba51
SHA512ab7f6127edb4b0603731649a534021d746538ef7303abb1686ab8f8c1de696f5f7f7e3544344d837ca952594de10a146df8f674f2e68b4bd440ccb541293f1c3
-
Filesize
8KB
MD5d81373d5c8c80b327345298b2b72965e
SHA1efec905d6546a4a631e14b6cb85b6069755e06e5
SHA25628db5d8dcfa152330f0d90d0488a3916e1edc31d726f882507b52a43d69e34ae
SHA5127cd0b2d08117c7b04befd9bbfa3d1088b3ad5b1fe526bd655edd9100b24671aa4284badcf64ea10a85ff7258d54ab7daf89a4c4cb3323c78ac4f29cf3c42a86d
-
Filesize
8KB
MD5649dd404c895c13a35fa9ffea6c66e01
SHA12ba2e1be5c2931dabdf068f18d78c78d5fc79ec4
SHA25646b590dace2529252d9a18f49cac33efd012798286a39b93a3e253a0a6109311
SHA51294a0793c8eea7213c634c1952a672fb2e458d93672e4cc8bd42f0ee6bfefbf302d617c881da1988a92bc1ad11c3aebddf46c7e9539b27d9d0b9a641e96b21a53
-
Filesize
8KB
MD504baa30fc400330280ce590aef9ae874
SHA12a3dbb5326ceaf1de81fb6f650031cb5a8bdfd79
SHA256327c2f5456e5fcba656d05a1c9edcea12569988d231020e88f60fe85519856f1
SHA512800f74d5a5e79a1876a47a3a985818ec3aa46b2c405b74aaf3e9d3d8609c3834c1b964918cab8922298f88fab6bee684650a41a62f76cc2333d814fc5bd53461
-
Filesize
8KB
MD53e1ed5f64d7f57bac780953514673abb
SHA1456f63848c6e8d8edec00f1a57b2609f20338881
SHA25659fb0bf5c6759e86d2d80a1b034010dc5dc4d67795681f2894ff9be3582a103b
SHA51293d71638e4abeee3248e44c6417149773a431eff8fdba674cb3d31a41738ce4afd69d4fe1403558c136c5d10a39f27fb1aee7564a1986472a23bed7469ad68d6
-
Filesize
8KB
MD591af9db987dabb7d445de296d10016f3
SHA1c692ab1437c4e985f9b1967be760a5ddf396b450
SHA25604a0f6c5f1fcdcbee15a3d5394fc296b2ac4b5005f9ba16ec4931d08d00f0e0f
SHA512b3059310295e557ce2a090f5cb62d8ec75669327f61760befd32b1ba6c4c6f80fbfdb5d507cd1df8de17dabbfcbd05e5272c7447bc4da02fb7857c81d09b77c3
-
Filesize
1KB
MD515b1cc5543d779efbfdac078f99b3521
SHA1160d308843a074c7baa72a02a8c8f88aa1dd969f
SHA256b3accebaf9bc3d88e77a3050063bc943dc532935a6968ab28fd1821523a16b41
SHA51275ac146f81b211778d2edb13243022b36c129934424b62c9f6f8142ac823709f5f8aa87293977879eb9e95353e5e8af365685ffdd33c7f19e9cb5a31e067e456
-
Filesize
2KB
MD5b21c1b57c7621522edf8c097aa17b785
SHA1e7242d2c16afe99a8859794a5bdd514db76b031e
SHA256248b5f76618f346f4f383aedd851fa2aa730712529f86b4b56c908d1c7f5f5b4
SHA5126ccf3be890bb47a46f7f6579d2500f03518cc8a464e21aa82dd6298ca86f5066dee72ed9c3e68f643d4417e3fc940791c5eb746cc91e361b8552aed130aae99e
-
Filesize
40B
MD53911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA2560ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8
-
Filesize
40B
MD581024874f926b0c0c9e613997c9370b1
SHA1a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA5128ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830
-
Filesize
340B
MD59f5c5980b52b8523382a920aac96cb25
SHA1ce444ac72ddaa146205794678781dfde9d676441
SHA256a358f0d9f4f71f701031db7e681d449a2517f1c79babca466134a36d993d7cd9
SHA5127485e0a6deecc071f08cade8acd6b27f839b6634aecfea84d08861ba32b4abe75bdf41ca3817fa0a3c0bffac62c4ea200905ed115b354cafba7b5193813f1161
-
Filesize
340B
MD5f59e0c80f9840fe4c83210598d9d5c79
SHA1cfcac5e16514c4d580a21f2c69a09ec4008e453a
SHA2565daada0130594051e3b1d475506c2afdeef7f01d69742f044f44c02725a4065d
SHA5125cea2453072391bc4e12d2cbc12c979bc2a05909871f4cadccb0e397d90ff6df8de94a232ca26c7d27ffa35481c7d49761e3b5327328880c9e3764112f16f66e
-
Filesize
40B
MD51bd86b90e1b355f123e5ce8c93c3de53
SHA1bee5683d6124650c8be0b3740ad66e771f29b178
SHA2563ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
SHA5126ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe
-
Filesize
85B
MD57a29efe01c6ecec7a3476cdee3333173
SHA10eff9818109b03c39bbe3b8312a6f2a36caea233
SHA25677092b91dfeb0ac74571e3961b18317750887562478bf525de869bd111481d5f
SHA5123d47d09bda5c5cb0cc7d9434d191f0e2abf77f08990d7a783a184b7eb46c9e7c84dbe2d36b263f5b24a0c9b4ae3045c071385b13ff9da3d1a404c52d070ad9d0
-
Filesize
32B
MD5dc2e848be2824acf32cff8ee979e58cf
SHA1de0d519b548d2290385fe035f031fd2c4a61a0eb
SHA25677b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23
SHA51252d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9
-
Filesize
314B
MD589a76a5325e76dc78e3318bdfd32569c
SHA18a0ac5215ed78572c4a64e293b8a65f09c4f6f48
SHA256fc5fce689ad82b7a6505ac1ce7e4acc8e29dcfd4724eb3ef11875c98c8fb859f
SHA5123e3a4af4b7c8ff553bb9ca0eed85d6e3fba3aede504ef957b3a2a0877b3d298f69fb604019f537ba66872cce78cc34b640efb95e98abc67f7f8a9072b55a1013
-
Filesize
27B
MD56da56c6723f7906a36ddca4581bfbb04
SHA16cdbbd5e8519b5ca90cc50cb4bb3f69d1d3ca1b4
SHA256a1c664043e6c16dc343d3105695b30d8549434d898d3a728727987d2c760ca41
SHA51202ef38cb5cbb0ba54de677c9a28df98a54fff791d2f03e01e1e6a71901ee05cf066a205f556a4b5133ec044813ef0ed2bdda1860c80be3ecf36222a9f113b31d
-
Filesize
162B
MD5e27685f16ac02c5c6aa8c3b0ecb34f1a
SHA19ca55d35d926dcd503d353fb6966716a0559825a
SHA2561753d0dd3395ea9942f70b1ab239607239c168a9d9ad3dfb7a675d3c9a3cdb04
SHA5129f335200ec2c35bb44696595aca5f6ec2f475d9b47a18a2a9138509ecae47a9a3a0bc14fd2c082e77a63e82d4fb030a058441ad8062a2ee687d11983e1fad1ce
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
23B
MD58e24e79baab91c4d0604eaa9006a0cb3
SHA1e427afc94a4b957a7096f73e395a10ea404c076b
SHA25665ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA51245bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae
-
Filesize
62B
MD51e4d56d56d427cdcd0a9ee77e98700ab
SHA11f5678acac9ccc5efbad8270fef4282b94253a4d
SHA2569a651d86e405053953e0221a3a3ad4216d643d3125b7fe64d3f9d29f0d012db4
SHA51242803101ed8a7099e480c903c59fe76016f76ef8409e8b202b3d32286cebe3009925bcc2a6fe71d91f0e044e937c39e9fac270aab169dd20cf9869ec60756850
-
Filesize
86B
MD5dd86fea1fcb715dff3d54e3fef1704a4
SHA1f5bf18d31533a61f17f9241dbea487c93cb69f30
SHA2566ff216dbbd287090da39bb8aa427cc3ec0205ecabbf9b23823553227f5a3e15e
SHA5122b5db39979ce2c1788617981f86028f3b7547cc944904aaa68bb44a0e361d4f83d186ba6e8cb74dd071a24c569d84c7e290451c6db3b18c767d94a582290b1a2
-
Filesize
62B
MD566178996687d502992af9228295e7630
SHA113261a5bda439d7a7bc1535bc41f20cc55bea85b
SHA256f9009ab18d02e894ed20e7da2b6ec349dbce7223c12951e90e0bcc4d5de0fa6e
SHA512f3d74c34266db31fa11b265186dae2bb9db943d96db7110602b59a9beff0cdfb76af038cd2fde5a651809be53f1d47a1a75aa1fa563d35bef0023c17fa3a7e51
-
Filesize
131B
MD524e0348178abb1afcada698cdbbe9009
SHA1e0783957bb550dbfb72080523d5e46edcf8c581f
SHA2564e27d867ed0f88b0f52fa8b35b468a167dbd429b7e9e6ca98f93e32ca3f0484c
SHA512a2247b4dcf316dc46949ae4d1f59696b0e9cecd78a4192b4e82ca4c04af5378c7607032b45f82a9ee40aa0fa614c843f36c39f8ea946db32b8948ea023c0a66c
-
Filesize
176B
MD51728fbe25e53f5ff6e3898c1afb28e36
SHA1b37c8dd62f232fc5f96e11d0c61e94a1eb77617d
SHA256426532f872a36b9e16c33aaf268910b2c868d5d4f8325294b1633dc3bc6cd008
SHA512edce42c3f7678e260c051df1c74dd98453bb5d2322ab43493d74edff4c101468ae77bc2b0ff887a4bdb1e2d0e5377e6b12b82c422cb06a2e201f1299fa5f23fe
-
Filesize
1KB
MD558ef04a39493bd8a62a0b48aa415aa33
SHA1ccb661d756d2eb04f6a4052aafce63f8f408ca32
SHA2564a8f4a1bf82f11bce2f84056e476914176110cc50f51cf45255cc3076be6bf84
SHA512a5cd1bdc3bb01da98a866cb563961a07ad03c245caad6396443c4f7cbc9b046abec86581af54e99c01be096e04e60909d509c0a40a17513e1dcd1cbe055b9c4f
-
Filesize
1KB
MD555c1e11c835df22ed6231d71b0d3830c
SHA16bca47930db2f0efe5593162e808a2b1a05091e5
SHA256486e8d4b04121623c938455ef91b6afd8566b57e9e220c772a9c752bf31f8e8b
SHA512149c6c239f7700272fb44743ca36d285f2fece8c5c5a3460ca0314f5c70fbcb1821459728e90364cb9815b96c9b1a1d9a3227a9a2bc852b32e4e66c46186c734
-
Filesize
350B
MD56d8b1dd9049c53ed5e556bf9173ea819
SHA19dbda6ace714fd3b5e2c58528bcd8c113298934f
SHA256b72829930170c1851d5d8ececb0afcdfca417ab2550fe26e364d44d6ab0a6a45
SHA512c818168403cc09aa2d7d8353c4a8458350d557a704511c276fd6bb9e82d5166449e817c2cbfc4f4ed592ac2ac232977ad675ce2d731c40085622b496b83bd686
-
/data/user/0/com.xgbuy.xg/[email protected]
Filesize6.5MB
MD5bc7b7cec4c2313b65f6d767a77164dd0
SHA1f0a2fb5db284bc60f424c2084984c830cf4d2ca1
SHA25684906c5a9b057b44e0df1fb8030d13110748ba30ef7a8017abdd3157ef349ffb
SHA512379bec4a7a82a83c32e93cb3d5d0e0622d78ec79a5e17861f9600069283ffeac13340003fd2323c884a114bd45102034b3e5e609b3390ce099db6ef71a144432
-
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex
Filesize6.5MB
MD5f1e1513c1caa393fe8e9a3f9fff03e7c
SHA1db053d40d0ead70c10b229d129359601a8b5debd
SHA2564e81f36348e9d21ea9121450a9c68817efadedf40bf365af9d54a6033b363934
SHA512e9c0cb206d14c55f3bf375fddd0d1edcf2e4540c24ac5df6e1c4884e87be9861a87b4fa5a49162fd054bafac7ed223e6f79686ffd71224f64f7336173298c03b
-
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex
Filesize2.0MB
MD5e0cdaf1a37a325beb335128a913ce71e
SHA11b4f9eda9ff72406032655f7a7f97e361d90bb2f
SHA256444121cbd8f09a2461d84bcdecea5c61c0a5bc7b0fd3671d6a1ba5a91281cbba
SHA5122f24d69d48c4cf889db9b6d2d5c867b8ea758663e0e83ce1e7ecf650a6b5850669d35d46df3355a643bb2732b590d4609eabbe4aa74d4a4b076c3bb8e8a17d8b
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
66B
MD519402718bfb1c685a726b4e1d846ad98
SHA102a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA51225254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b
-
Filesize
66B
MD5093d6d3426351dbbd68f2a6f70dfae8e
SHA19fd1d9088b5b354c772f7ea865ec8450c09bbdd2
SHA2567065930c425107957a2db95b13c8b4bc1b7225c945a2a1fd941f833933af395f
SHA5124926afa7a570010742fd2e92f9b5813b82e4370c8d44f8e0ff897313a120c2a0e0b14b52629da31c16171c4ec1a435e83efe368dba7535c4ced8a4081a8e2984
-
Filesize
32B
MD5d61c686e85e5dedfdf2bc23da26054ae
SHA13df83c52722a9ad9124339375ce7da678a91cec7
SHA25698b04f4fd02def2558d58b133cb33877973e4ecac72f50e896848873505a312e
SHA512208a92768492400ac804f5bc1d93a603db94dfbffb5ee8896caad799b3a2b167c37fc46fd2391779fe425e6cfb159cf7d02bbb078ab648a07d254c91b16a78c8