Malware Analysis Report

2025-08-05 19:10

Sample ID 240518-tz73dscf69
Target 55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118
SHA256 1fc3dbc5a4161d462272560b4b0ab27c588bf37afa2595ed627dc81c3a682f46
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

1fc3dbc5a4161d462272560b4b0ab27c588bf37afa2595ed627dc81c3a682f46

Threat Level: Likely malicious

The file 55b2e5c53bfe00713164c2aa2c9a1702_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks if the Android device is rooted.

Requests cell location

Checks CPU information

Checks memory information

Queries information about the current Wi-Fi connection

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about the current nearby Wi-Fi networks

Queries information about running processes on the device

Reads information about phone network operator.

Requests dangerous framework permissions

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-18 16:30

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-18 16:30

Reported

2024-05-18 16:34

Platform

android-x64-20240514-en

Max time kernel

179s

Max time network

186s

Command Line

com.xgbuy.xg

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /data/local/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /sbin/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.xgbuy.xg/[email protected] N/A N/A
N/A /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex N/A N/A
N/A /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex N/A N/A
N/A /data/user/0/com.xgbuy.xg/[email protected] N/A N/A
N/A /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex N/A N/A
N/A /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.xgbuy.xg

com.xgbuy.xg:pushcore

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.74:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 log.reyun.com udp
US 1.1.1.1:53 s.jpush.cn udp
CN 116.205.165.66:19000 s.jpush.cn udp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 a.xgbuy.cc udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
US 1.1.1.1:53 plbslog.umeng.com udp
CN 36.156.202.73:443 plbslog.umeng.com tcp
US 1.1.1.1:53 downt.ntalker.com udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 182.92.245.193:80 downt.ntalker.com tcp
US 1.1.1.1:53 ulogs.umeng.com udp
CN 223.109.148.179:443 ulogs.umeng.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 110.41.162.127:19000 sis.jpush.io udp
US 1.1.1.1:53 t.gdt.qq.com udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
CN 116.205.165.66:19000 s.jpush.cn udp
US 1.1.1.1:53 api.exc.mob.com udp
US 1.1.1.1:53 m.data.mob.com udp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 easytomessage.com udp
CN 1.94.119.240:19000 easytomessage.com udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 downt.ntalker.com udp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 1.94.119.240:19000 easytomessage.com udp
US 1.1.1.1:53 s.appjiagu.com udp
US 104.192.110.60:80 s.appjiagu.com tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
US 1.1.1.1:53 tcp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 im64.jpush.cn udp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 113.31.17.108:19000 udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 52.81.118.135:80 log.reyun.com tcp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 139.9.135.156 udp
CN 124.71.183.120:7003 im64.jpush.cn tcp
US 1.1.1.1:53 plbslog.umeng.com udp
CN 36.156.202.78:443 plbslog.umeng.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
US 1.1.1.1:53 tcp
US 1.1.1.1:53 139.9.138.15 udp
CN 124.71.183.120:7002 im64.jpush.cn tcp
US 1.1.1.1:53 119.3.188.193 udp
CN 113.31.17.106:7000 tcp
CN 223.109.148.176:443 ulogs.umeng.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.169.10:443 tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
US 1.1.1.1:53 downt.ntalker.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 116.205.165.66:19000 easytomessage.com udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
CN 113.31.17.106:7000 tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 116.205.165.66:19000 easytomessage.com udp
US 1.1.1.1:53 b.appjiagu.com udp
CN 180.163.249.208:80 b.appjiagu.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 1.94.119.240:19000 easytomessage.com udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 106.63.25.33:80 b.appjiagu.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 52.80.199.120:80 log.reyun.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 1.94.119.240:19000 easytomessage.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
US 1.1.1.1:53 tcp
CN 223.109.148.178:443 ulogs.umeng.com tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
US 1.1.1.1:53 log.reyun.com udp
US 1.1.1.1:53 downt.ntalker.com udp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 113.31.17.108:19000 udp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 113.31.17.106:7000 tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 113.31.17.106:7000 tcp
CN 116.205.165.66:19000 easytomessage.com udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
US 1.1.1.1:53 sis.jpush.io udp
CN 1.92.77.21:19000 sis.jpush.io udp
CN 116.205.165.66:19000 sis.jpush.io udp
US 1.1.1.1:53 m.data.mob.com udp
CN 52.80.199.120:80 log.reyun.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 223.109.148.141:443 ulogs.umeng.com tcp
CN 1.94.119.240:19000 easytomessage.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 1.92.77.21:19000 sis.jpush.io udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 113.31.17.108:19000 udp
CN 1.94.119.240:19000 easytomessage.com udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
US 1.1.1.1:53 tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 113.31.17.108:19000 udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 113.31.17.106:7000 tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 113.31.17.106:7000 tcp
CN 223.109.148.177:443 ulogs.umeng.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 116.205.165.66:19000 sis.jpush.io udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 1.92.77.21:19000 sis.jpush.io udp
CN 116.205.165.66:19000 sis.jpush.io udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 1.94.119.240:19000 easytomessage.com udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 1.92.77.21:19000 sis.jpush.io udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
CN 1.94.119.240:19000 easytomessage.com udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 223.109.148.130:443 ulogs.umeng.com tcp
US 1.1.1.1:53 tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 113.31.17.108:19000 udp
CN 124.71.183.120:7002 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 124.71.183.120:7003 im64.jpush.cn tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 113.31.17.106:7000 tcp
CN 124.71.183.120:7000 im64.jpush.cn tcp

Files

/data/data/com.xgbuy.xg/.jiagu/libjiagu.so

MD5 015df5724b50b4fbc6dd0caf7ccb817c
SHA1 980780e98c9958aec97ab7a0de8d28a4c5fd9429
SHA256 183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6
SHA512 fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

/data/user/0/com.xgbuy.xg/[email protected]

MD5 bc7b7cec4c2313b65f6d767a77164dd0
SHA1 f0a2fb5db284bc60f424c2084984c830cf4d2ca1
SHA256 84906c5a9b057b44e0df1fb8030d13110748ba30ef7a8017abdd3157ef349ffb
SHA512 379bec4a7a82a83c32e93cb3d5d0e0622d78ec79a5e17861f9600069283ffeac13340003fd2323c884a114bd45102034b3e5e609b3390ce099db6ef71a144432

/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

MD5 f1e1513c1caa393fe8e9a3f9fff03e7c
SHA1 db053d40d0ead70c10b229d129359601a8b5debd
SHA256 4e81f36348e9d21ea9121450a9c68817efadedf40bf365af9d54a6033b363934
SHA512 e9c0cb206d14c55f3bf375fddd0d1edcf2e4540c24ac5df6e1c4884e87be9861a87b4fa5a49162fd054bafac7ed223e6f79686ffd71224f64f7336173298c03b

/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

MD5 e0cdaf1a37a325beb335128a913ce71e
SHA1 1b4f9eda9ff72406032655f7a7f97e361d90bb2f
SHA256 444121cbd8f09a2461d84bcdecea5c61c0a5bc7b0fd3671d6a1ba5a91281cbba
SHA512 2f24d69d48c4cf889db9b6d2d5c867b8ea758663e0e83ce1e7ecf650a6b5850669d35d46df3355a643bb2732b590d4609eabbe4aa74d4a4b076c3bb8e8a17d8b

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

MD5 89a76a5325e76dc78e3318bdfd32569c
SHA1 8a0ac5215ed78572c4a64e293b8a65f09c4f6f48
SHA256 fc5fce689ad82b7a6505ac1ce7e4acc8e29dcfd4724eb3ef11875c98c8fb859f
SHA512 3e3a4af4b7c8ff553bb9ca0eed85d6e3fba3aede504ef957b3a2a0877b3d298f69fb604019f537ba66872cce78cc34b640efb95e98abc67f7f8a9072b55a1013

/data/data/com.xgbuy.xg/files/.jiagu.lock

MD5 6da56c6723f7906a36ddca4581bfbb04
SHA1 6cdbbd5e8519b5ca90cc50cb4bb3f69d1d3ca1b4
SHA256 a1c664043e6c16dc343d3105695b30d8549434d898d3a728727987d2c760ca41
SHA512 02ef38cb5cbb0ba54de677c9a28df98a54fff791d2f03e01e1e6a71901ee05cf066a205f556a4b5133ec044813ef0ed2bdda1860c80be3ecf36222a9f113b31d

/data/data/com.xgbuy.xg/files/.jglogs/.jg.rd

MD5 dc2e848be2824acf32cff8ee979e58cf
SHA1 de0d519b548d2290385fe035f031fd2c4a61a0eb
SHA256 77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23
SHA512 52d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

MD5 3911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1 d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA256 0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512 d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic

MD5 1bd86b90e1b355f123e5ce8c93c3de53
SHA1 bee5683d6124650c8be0b3740ad66e771f29b178
SHA256 3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
SHA512 6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

MD5 9f5c5980b52b8523382a920aac96cb25
SHA1 ce444ac72ddaa146205794678781dfde9d676441
SHA256 a358f0d9f4f71f701031db7e681d449a2517f1c79babca466134a36d993d7cd9
SHA512 7485e0a6deecc071f08cade8acd6b27f839b6634aecfea84d08861ba32b4abe75bdf41ca3817fa0a3c0bffac62c4ea200905ed115b354cafba7b5193813f1161

/storage/emulated/0/360/.iddata

MD5 19402718bfb1c685a726b4e1d846ad98
SHA1 02a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256 079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA512 25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

/storage/emulated/0/360/.deviceId

MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

/storage/emulated/0/Mob/.slw

MD5 093d6d3426351dbbd68f2a6f70dfae8e
SHA1 9fd1d9088b5b354c772f7ea865ec8450c09bbdd2
SHA256 7065930c425107957a2db95b13c8b4bc1b7225c945a2a1fd941f833933af395f
SHA512 4926afa7a570010742fd2e92f9b5813b82e4370c8d44f8e0ff897313a120c2a0e0b14b52629da31c16171c4ec1a435e83efe368dba7535c4ced8a4081a8e2984

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 ca57b55e7c6d34a5293c1c24da26f41d
SHA1 e9412e4e2a3ed9059d4125cb503d5155afac66ae
SHA256 9eaf8e8151da6b9b0895e83306b706b89e034e735b5cfce78093881daa74ba51
SHA512 ab7f6127edb4b0603731649a534021d746538ef7303abb1686ab8f8c1de696f5f7f7e3544344d837ca952594de10a146df8f674f2e68b4bd440ccb541293f1c3

/data/data/com.xgbuy.xg/databases/xinggou

MD5 6ed98fcdd3c07e754d91a6b161e90a4d
SHA1 afc6d1d9fe61c9d5e359b3797102d18e33b36ec2
SHA256 9162b4bf4a80cce0438cc90170757e589ccfccc3d8ed1489ec634495cf59006a
SHA512 e1fa246f12041bc7b2d7bbd74b176c638ee9316810322c7ba1d53c2ff343e27bf491e8c14e70f5ef3bc8808a6d9fe3b7f5882dc172d72bb91e1e21384368250a

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 d81373d5c8c80b327345298b2b72965e
SHA1 efec905d6546a4a631e14b6cb85b6069755e06e5
SHA256 28db5d8dcfa152330f0d90d0488a3916e1edc31d726f882507b52a43d69e34ae
SHA512 7cd0b2d08117c7b04befd9bbfa3d1088b3ad5b1fe526bd655edd9100b24671aa4284badcf64ea10a85ff7258d54ab7daf89a4c4cb3323c78ac4f29cf3c42a86d

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 649dd404c895c13a35fa9ffea6c66e01
SHA1 2ba2e1be5c2931dabdf068f18d78c78d5fc79ec4
SHA256 46b590dace2529252d9a18f49cac33efd012798286a39b93a3e253a0a6109311
SHA512 94a0793c8eea7213c634c1952a672fb2e458d93672e4cc8bd42f0ee6bfefbf302d617c881da1988a92bc1ad11c3aebddf46c7e9539b27d9d0b9a641e96b21a53

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 04baa30fc400330280ce590aef9ae874
SHA1 2a3dbb5326ceaf1de81fb6f650031cb5a8bdfd79
SHA256 327c2f5456e5fcba656d05a1c9edcea12569988d231020e88f60fe85519856f1
SHA512 800f74d5a5e79a1876a47a3a985818ec3aa46b2c405b74aaf3e9d3d8609c3834c1b964918cab8922298f88fab6bee684650a41a62f76cc2333d814fc5bd53461

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 3e1ed5f64d7f57bac780953514673abb
SHA1 456f63848c6e8d8edec00f1a57b2609f20338881
SHA256 59fb0bf5c6759e86d2d80a1b034010dc5dc4d67795681f2894ff9be3582a103b
SHA512 93d71638e4abeee3248e44c6417149773a431eff8fdba674cb3d31a41738ce4afd69d4fe1403558c136c5d10a39f27fb1aee7564a1986472a23bed7469ad68d6

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 91af9db987dabb7d445de296d10016f3
SHA1 c692ab1437c4e985f9b1967be760a5ddf396b450
SHA256 04a0f6c5f1fcdcbee15a3d5394fc296b2ac4b5005f9ba16ec4931d08d00f0e0f
SHA512 b3059310295e557ce2a090f5cb62d8ec75669327f61760befd32b1ba6c4c6f80fbfdb5d507cd1df8de17dabbfcbd05e5272c7447bc4da02fb7857c81d09b77c3

/storage/emulated/0/data/.push_deviceid

MD5 d61c686e85e5dedfdf2bc23da26054ae
SHA1 3df83c52722a9ad9124339375ce7da678a91cec7
SHA256 98b04f4fd02def2558d58b133cb33877973e4ecac72f50e896848873505a312e
SHA512 208a92768492400ac804f5bc1d93a603db94dfbffb5ee8896caad799b3a2b167c37fc46fd2391779fe425e6cfb159cf7d02bbb078ab648a07d254c91b16a78c8

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.xgbuy.xg/files/umeng_it.cache

MD5 6d8b1dd9049c53ed5e556bf9173ea819
SHA1 9dbda6ace714fd3b5e2c58528bcd8c113298934f
SHA256 b72829930170c1851d5d8ececb0afcdfca417ab2550fe26e364d44d6ab0a6a45
SHA512 c818168403cc09aa2d7d8353c4a8458350d557a704511c276fd6bb9e82d5166449e817c2cbfc4f4ed592ac2ac232977ad675ce2d731c40085622b496b83bd686

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal

MD5 58e858122926a2ffbf7f8613880a93e1
SHA1 fc663d137bb6542a6bc5eda6bf58bb705d134049
SHA256 16ebc4d11ca39242bbcec662681a2a6e7b3c837c02f6de8c7ada1f94f122d2c3
SHA512 47e20a60ebe479e44c5c13240a248dd295e7927115fa97ab8b511834124b5dc0c959a9ce9610c1da90be139bbfba3b7dea224ce12da334a63c75a56c11041923

/data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MDQ5ODc0NTUy

MD5 58ef04a39493bd8a62a0b48aa415aa33
SHA1 ccb661d756d2eb04f6a4052aafce63f8f408ca32
SHA256 4a8f4a1bf82f11bce2f84056e476914176110cc50f51cf45255cc3076be6bf84
SHA512 a5cd1bdc3bb01da98a866cb563961a07ad03c245caad6396443c4f7cbc9b046abec86581af54e99c01be096e04e60909d509c0a40a17513e1dcd1cbe055b9c4f

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/1b980bbc765294097260c5501e33520cf79efb2e8ca5547693e262f223514bf9.0.tmp

MD5 7459aff7652a92bd0f6067f2d6e82f00
SHA1 df17e66aaa9218124c14a31c0b4830f1e3d85bdd
SHA256 57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935
SHA512 58a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae

/data/data/com.xgbuy.xg/files/jpush_stat_cache.json

MD5 24e0348178abb1afcada698cdbbe9009
SHA1 e0783957bb550dbfb72080523d5e46edcf8c581f
SHA256 4e27d867ed0f88b0f52fa8b35b468a167dbd429b7e9e6ca98f93e32ca3f0484c
SHA512 a2247b4dcf316dc46949ae4d1f59696b0e9cecd78a4192b4e82ca4c04af5378c7607032b45f82a9ee40aa0fa614c843f36c39f8ea946db32b8948ea023c0a66c

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal

MD5 6c6e5fc5722536cae935d2475979f736
SHA1 437c7a22a685e1447f587b9629517c7d2f7c75b7
SHA256 c20c4da265de74b0dfd4b52ebde2bb3dabadd1ec2c51ab094bf3d340455b8b65
SHA512 f3137c4d6264dde20b430286d4db4bc33572dd04b842d20676b8ec93d716018431fef129f33eaab41aee987dd5d850857497fc4e16f7aed7437f11f8650a3309

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714

MD5 dd4eeb4c8de3226da99e908da9c16393
SHA1 7fe24ecc7e468133f2959147ffceef63f0398e9b
SHA256 10197be3a481d90ecf3bdcb894d7a5ecc821747ad33aa78706406905c39f71a4
SHA512 33f4f483ecd28224e62de19e7c93cb2054ad0411f4b52acc366df51422c61ad851735c4fbbd812b5e98d13d0f51bb414964c6f249eac709b0e1740ae361202cd

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal

MD5 f0b13b464c106ab26cfbc036a6b7717e
SHA1 b7cd3d56044d51f00fad01163134edc1fd1c6a21
SHA256 67aee281a1f1a277508838e762f3f42fcc3272fc0f202db40ea8049cce4f528e
SHA512 e2e9986fdf32bb64fdbc727f984b7d5dadaec2982eef81e11e6402a020ea6457279dac30320ab56604fe53507230d10ef4340a51039947c97dbf2b4d19e65f6c

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal

MD5 28ebb0173c146d3f1441ec292ab026fc
SHA1 949f9bdcffd20368d052fccac2c6f27413411fcc
SHA256 4ea19d59533fafaca611e7538bc739ddb1c5f314134bf6cb6fe9b2fd3b0f7d0e
SHA512 d21974cc96e3f10d37a8138849807f691cdbeaa70e394f78945038f2a948413996abd63a4d7f081be9fd41b62d7d199a9a7d06476f563f61cae71e4fa2dbdd5b

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest71175366210517887233815755425039807714-journal

MD5 7c77a2749dbfb4e0171436836c4a2f93
SHA1 1e86a20c6f124f544e3a01938c217e603df62cf4
SHA256 5a067bca30c8337615186aea66b1d99caee3d3bb979df191b5ea03ea87d25286
SHA512 e235a6e18f70376ecbb196df46f75e8e8471be26dd51282903a63fd14dacedceb84a1cabc4a014f8067d0c5a435a3a8804cfbee1ee5b3cbc65c3b133980a1b68

/data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.json

MD5 e27685f16ac02c5c6aa8c3b0ecb34f1a
SHA1 9ca55d35d926dcd503d353fb6966716a0559825a
SHA256 1753d0dd3395ea9942f70b1ab239607239c168a9d9ad3dfb7a675d3c9a3cdb04
SHA512 9f335200ec2c35bb44696595aca5f6ec2f475d9b47a18a2a9138509ecae47a9a3a0bc14fd2c082e77a63e82d4fb030a058441ad8062a2ee687d11983e1fad1ce

/data/data/com.xgbuy.xg/files/exid.dat

MD5 66178996687d502992af9228295e7630
SHA1 13261a5bda439d7a7bc1535bc41f20cc55bea85b
SHA256 f9009ab18d02e894ed20e7da2b6ec349dbce7223c12951e90e0bcc4d5de0fa6e
SHA512 f3d74c34266db31fa11b265186dae2bb9db943d96db7110602b59a9beff0cdfb76af038cd2fde5a651809be53f1d47a1a75aa1fa563d35bef0023c17fa3a7e51

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 096f0fcefcd9070cc50d76ea4c1ebb51
SHA1 266ee54cc5900bcbd371b51c5b2c948eb2db45f6
SHA256 f2ad3b93d24344eb5cd5db018c744c9e8046341ff62b502c439762c43e095fbe
SHA512 29216918437beb5bc1cc70bb7e192995f692b37b5ec6119138461ab5fbde7d91c762c6514fa5ecff229e35c91b7591677dd82fe43cf3d929e9896ddab7005241

/data/data/com.xgbuy.xg/files/.envelope/i==1.2.0&&2.5.3_1716049876696_envelope.log

MD5 b21c1b57c7621522edf8c097aa17b785
SHA1 e7242d2c16afe99a8859794a5bdd514db76b031e
SHA256 248b5f76618f346f4f383aedd851fa2aa730712529f86b4b56c908d1c7f5f5b4
SHA512 6ccf3be890bb47a46f7f6579d2500f03518cc8a464e21aa82dd6298ca86f5066dee72ed9c3e68f643d4417e3fc940791c5eb746cc91e361b8552aed130aae99e

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 4f0a10a9e9cbc262d63234913ad348c1
SHA1 7a9f20665f4e6fdef92cc3b1466521021f6ad77f
SHA256 19bdfb52be4901ac03157cd8b38bfb775c21514c1efb52be2b6f444cc8660cb3
SHA512 3dced44e7058bf79745ddf1a166ecf0f0467a5a204859143b2b646291098afcf250d40c7b5a77cc160d1d6f21fe82555bfb5bfe9becba0c9807f5b671a8880e9

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 6c575a0301d17b804be42beb79566894
SHA1 9308a3e631c50615c5a81a675249a78ff693f0e3
SHA256 a2494ad73f1f35294ed595bf14e35687c82335f0e56eae70712bf04018d751b8
SHA512 e079984004bccc2eb98379b4220da76f28ad5db493008e4ec470e06f4d284ef995ec4fa647877f09ee6e108041ba6cbd57756f53504266d44d5376e28a457992

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 9096e3a831e64cd276f2175690d24734
SHA1 c9c7747afb3ca7c2eaddd1fa78a53b78d5c20454
SHA256 394c4b6ebb58a754380f8d82270d35eb7b0b98938eed8d94402d61c9cb7ff178
SHA512 cc4d279f247c8de1bfc6b82c4cce599e3a45277df916da8abf2f9a28ec6335dad13143986af69e4c4da12d772264292f93471fcaebf820bdd3ff4109621ff8dd

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 1f17910f6f7f64804027c196780f9f9a
SHA1 568420abc0fe5f8a504b29cf245460ff14f625f8
SHA256 8d94601d3af1a81b5c7650ca0f5b8666fe65ef8a29bfa461690b861a407ee059
SHA512 92585400691d9b1e1ecbdbe0d289caf752699acc67d8557f496d12814c1cc4a1bb41cb00b7b8b1f0ee12b6a2570c2276695469a83df2d504db2caf2b80a9a479

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 3a351f0facb417433261ba446d8696db
SHA1 eab2fd4cc4c3e8088ff9796528d594aa012a7139
SHA256 d8fd2505a62396b433b6eaab21ae5d56cd9063f75c4fe363c4c6b618de766625
SHA512 e974f8538daaf215b6925c3a3cb30c41fdc2b34df61ecea8564fd6a1bac52488147a4c620061289c13e3b097367a1cfe00cd0cb86f20ac33e2ab1007ea1c8961

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 e479ace33903bf3df95af0dfb25dc4ae
SHA1 74c9b5fa909103ec27105681246406cbeb08aa77
SHA256 a2531e0af59c1caadc7486c953c37302fb25c443adb8206d30514be554bc39fe
SHA512 f3d006f7131b4e9a9b710d9822fbab770007d1a43694cbc147ad6b54a6bd1aa3552b526a1baac80799eaa51779646a408619b24d82dfdf0980daf84f2f27200e

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 acf36ca1581d9db6cbd837ce0f8ffd9f
SHA1 518bca3d541323f6e9af4267b79221c1348eb9cd
SHA256 cd64793b738dc577cdbdd1a367f436163d21afed443092147135fe8529843e34
SHA512 715d503a3bf3620b108dc2fc975b4bf67a831f92be7c08c31ea80df10291f7afaab3d3dacf402bde31597984b4bd9ea4621f557ea4f0d6dc46e0dc538d7b6c71

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 d896d74135df7f3a8759bdcf02d00f20
SHA1 5a1bd10caf2d9d6c2e60598c89d87caf93058749
SHA256 21fd30c408ad7d6a83b1e6c6dc77edb6bec7144e286161ccb1ff0214a8cfb460
SHA512 c4369a26d8ae98b3454551311015996da29de6d31e3b95abb70d81405f40f7e1a888f1eec91e0da058ae8beb1bc6fdafef72b0af6095fec5e234a0b846680638

/data/data/com.xgbuy.xg/databases/ua.db

MD5 b7036131b84bdf2b66c67fde18d62308
SHA1 18b1e5a358d68c846495cab5cfef7c6679659093
SHA256 c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295
SHA512 256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 a0bad22ce17d79b6d694cfd2a25ceb71
SHA1 6cd93d906a14a38d020f3706a4e6f9921ee4bcb4
SHA256 5ce21bcd8ba3883bdd16fbc2243bd3a8398f604ccd9503487e2abe6fb848819f
SHA512 5852777b0ff06a21bbe8bae1ae04c254bfa3862375e0586c016d22a1424f642ca07aec5e0db4047c21810db3c618afc16ad802955ae3a69a600971667f5a69ff

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 a0da50ef88f1652519e002f86dce10dc
SHA1 2c91f7fa3b8a4031d46de5a2aef78055a0cd6d1b
SHA256 09b340943e538fc81fa3946353cc3ef78f0b26dc8b373097e749132ec5c5260a
SHA512 4959f470dd9ebd7a29aa2dba49de74c0ba9fb63074704096118f1937e9090bfcd80b28d0abd1c7b0efcbd1a22a1115f25b3e271e6a5078a50ab3a9fc7f2a912f

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 368ef4343c6d546657941863786e198b
SHA1 bd48143f8165335b405dedc78a0b98ab718716a2
SHA256 724ebab6fcf9aab41d6268c893d84b9627a718cfc3f22776af1301234aae23a6
SHA512 2fd983c3906f827ab1cd4260c0ab349f25ccf06ea3b320c2877fa68adddcdb9b1b2f8ec5aa2f15509d3e76671835df36761f88bc33f824521764a2459e22a4f7

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 7335d24396f8de81e542cadc763b2c4b
SHA1 51aef6f5f151c93244230f514fad9dd5a59cc089
SHA256 7637a094c2948e4caba2d45acd70f1b75518f03fea3b307e87bad88ae75c8de4
SHA512 4605f6c3f5501cffadae0c25ea1e641038cac5448993ddeb5a5f09eedf903ed9c93a2480709d6b21335fa315431232841d635f4e7012ca1a8f5f663dd2106755

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 ac9d7960df73168e3194cd414ed0c289
SHA1 ba9c061aac258db39b8962b1eb871aa04eabfa45
SHA256 1125f7f3d3048e372e497ecbec7b0496daf7748dffc2ba3623dd17fc7d896942
SHA512 d6e144bfe0ad15e25fcf388b143a0e49aa8e3a126fb5387dd37e20d99175dbd184687c8bcde73995eb47e17d936b9b6bd9adc25d5c11e8e35232ff68cd6fc099

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 f90be5f3e4d0971ba82ff68462a254f7
SHA1 c64963ebe00a0a9ebb36ca79d900635f25fb4496
SHA256 12f524f41d5afb33f8d6c44ef2528b0d30cd5d0f8f2f6b9c4cf7308c160a7258
SHA512 6fd46d72af225e01c42c262cacbb126466cb3d536bc315a2a2c1b07391537a34996a7bc3a11b99f41c7297761df112aaf4497652140a78a51fa6e52a71c0efc5

/data/data/com.xgbuy.xg/databases/ua.db

MD5 bfb75c588197f265fd0f2f4836dde90b
SHA1 47f49c9e8ff8491f6291ddd2a3feef9a3a42be5d
SHA256 059c8625f653d73d9781f025fb1d5affa811d51e5163e00c0aae43795fc8d055
SHA512 c5cdebc414b441a729823555d6dfc4558eb58a00f14a048a57d7a976ca8105f679a556e6697fd20e61e8b64e2dc187cd3e611313f1b005c796426c26d2e8ba88

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 695d042471bab19efd9178108b460a85
SHA1 b6a0b9333ba6df4dbbba8fb4e27cae5d29522acb
SHA256 b4a39783fe584d59be86b9c5eed863520146a3d3c8c7a100fd5c3bbc7c1d3d2a
SHA512 ca32f09d8cfe4b280d998fbe275a1e30416f6824d7bf7cc24ffb7f5b54d87fc37eb3ac62f4eaba7ef82f2da477761083dad37cbc1c3caa69b554fc96772c31df

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 3efb742e3032f51fa210480db176b624
SHA1 72286e88b8c9f7b2ac298a35ed46a0beadc14f82
SHA256 26e1d88e4036e3eaf7799cbca3a56868de5de5a9ee33ea80feb4ed1581675686
SHA512 182de4f58d1bb08ac21aead6988206469659ba3ce89850c706ada4cd740a735b0dfb854f8086bf2685c3db217e05fcbbd47425948cb0284e200c72260786303b

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db

MD5 adc460ff0a21ebad0648037879c1dca1
SHA1 7548e567dce1ad5c463718983a1612698cbb1e0b
SHA256 f2426051cd3929a2399501af866e2c0d1dc9b5372d896c1f799239b466a48ca1
SHA512 a6381da30bb7f83d6d4a0d0cb5537156dcf0af256b0a6bbbabbbd8d2820ed93426c0e564c2a6e204ec7483eb02f596c28abbfbda28824f42bf1acae545ff2b43

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 03b40a0c2ccfa915e1b49b09d867e239
SHA1 a785dff0609f5fe6d3634ed97cf0f0abe3a7fca9
SHA256 e6806c30d9fff81964b14c45c63748335df0893bfc5ebb77d8d6e8ac03aebad1
SHA512 aad701fd35bc7bd4a4130a9d5eef804f2ea0b96c48a1bfed39cde3061116b66d0ee32feff4a2d1f753cc2308ad546591c9f4b56f9cdf3a79bef189b0d7cc609c

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 0c75a9e8a5ac5bf1b3a3cd4eb0fd8028
SHA1 83ebbf2e93abd7db097c7e92f50a82e81f2e9444
SHA256 981e509cc95a688bfee722e4666f070f60e4db8c0a0505c0c9a6057fbe58890a
SHA512 2d752db7ade5b28afcf775366db060b6bb00aff27f67d176b649ac18a1db8a848c05eb3f0cb75c8e482fd909e13d47434945f9ce9ee8daa4026e5ed15c9e86a2

/data/data/com.xgbuy.xg/files/.envelope/a==7.5.3&&2.5.3_1716049881263_envelope.log

MD5 15b1cc5543d779efbfdac078f99b3521
SHA1 160d308843a074c7baa72a02a8c8f88aa1dd969f
SHA256 b3accebaf9bc3d88e77a3050063bc943dc532935a6968ab28fd1821523a16b41
SHA512 75ac146f81b211778d2edb13243022b36c129934424b62c9f6f8142ac823709f5f8aa87293977879eb9e95353e5e8af365685ffdd33c7f19e9cb5a31e067e456

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 e1dcd0e63752167ff6a343e4029dd34d
SHA1 ccf801128ecada6e2a0e3b99ddc08e176f4770b8
SHA256 73123e5b8d0a6d220f6f79684cea0b2698030ef6d5c6401c5ea4d85e383fb03e
SHA512 94c4985a5bcb5582ff6c34b84cbd797d4aa12c745a1c31bb81ba8ba99cc494e0c07e1014f07baf86c88788fc3bceb338e7f5875c1e2f4a429383c28b8fd070dd

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 8e24e79baab91c4d0604eaa9006a0cb3
SHA1 e427afc94a4b957a7096f73e395a10ea404c076b
SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA512 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

/data/data/com.xgbuy.xg/databases/ua.db

MD5 c367d31b9588f4108b003e1b14d8f095
SHA1 0fbc664603a3f89b2715fdf2cc0d52655f59e279
SHA256 47d2a9200c32f25bbf2df2a9bfa14d80787ef46cdbd0a13f1380fc31972befa0
SHA512 bb0cc19ebc60e2d82227e33599557e136477a6aff6192035b4dfef3d917ad2a1b911c33e96fda6747de1362248b81ad90eb80fb7d6b668a5f88e3c08e252d106

/data/data/com.xgbuy.xg/databases/ua.db-journal

MD5 17373741f8c46e60cc7428c4a0d8fe07
SHA1 ce99181ee0169cf361336e3164344446fb5062d2
SHA256 33831b85e2a44c8501a2ee59ffadd41aa5889f06ae55be51e74fd012ca589c43
SHA512 8b8afbe87a0f9d4f4fb936fe24f5a220db801da29bd225ca1d9d1c4ba9c18bc7b80b82652af51bf92da5aa20fe7f57aa5e68515b0ad52ecdefa303b0cd144ee6

/data/data/com.xgbuy.xg/databases/ua.db

MD5 4333272fcdc30e5cde92ca348ac016de
SHA1 12eb0f6f1aef06dbaa2714c4d9f2144760813c25
SHA256 dd77710039a8ead2e76366651b4b605ac3c7f975bf947603fa5bca0018b908e2
SHA512 f707748ec64c6e7752f6834d3c938ab0a4b5f54bb47abcdaec61fe68a4c2b2e096422e5bc895852320d6207cde7aa06eb16357a7850bfe3a79719c0a65eeaff3

/data/data/com.xgbuy.xg/files/jpush_stat_cache.json

MD5 1728fbe25e53f5ff6e3898c1afb28e36
SHA1 b37c8dd62f232fc5f96e11d0c61e94a1eb77617d
SHA256 426532f872a36b9e16c33aaf268910b2c868d5d4f8325294b1633dc3bc6cd008
SHA512 edce42c3f7678e260c051df1c74dd98453bb5d2322ab43493d74edff4c101468ae77bc2b0ff887a4bdb1e2d0e5377e6b12b82c422cb06a2e201f1299fa5f23fe

/data/data/com.xgbuy.xg/databases/ua.db

MD5 e1cbc99458889f9d54cc192a59379112
SHA1 d9ae0ac84f9bf0b98d6c30cc498f4bb4068d47b0
SHA256 2ab8b63a049429539d1deb7793286e634983114b8c42e21c7c203fd635e3a239
SHA512 a08922d1bccde38abbcd5008f748e66f16641d3daa76bcec2a4a0b3958bfc79b65ecfd47c4cf39b8eabd6c814bacc4ab91a2f86ac7bd19ff91e319c6b839010f

/data/data/com.xgbuy.xg/databases/ua.db

MD5 d934ca46515a113be1c5d061f5e3fb90
SHA1 869d4e565f52adfa0059bcb9891bbc4581de00f1
SHA256 a9834467b3fcd54fadab63f7d852cec49a27a5e065feccec85d3854fc5333f71
SHA512 e1342c1db15e682a3ba0bd986c9a2c3ee4f7c3efa5e49dd153fa0b0e1e33690c79903c6482c01442126857a1e5b31c60291343691ddd9279dc37204114cf3f1f

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

MD5 f59e0c80f9840fe4c83210598d9d5c79
SHA1 cfcac5e16514c4d580a21f2c69a09ec4008e453a
SHA256 5daada0130594051e3b1d475506c2afdeef7f01d69742f044f44c02725a4065d
SHA512 5cea2453072391bc4e12d2cbc12c979bc2a05909871f4cadccb0e397d90ff6df8de94a232ca26c7d27ffa35481c7d49761e3b5327328880c9e3764112f16f66e

/data/data/com.xgbuy.xg/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 48701c899ae9913ed4499fccf9f5f049
SHA1 5911e3390689adb14d246c76c70f5adac20adab3
SHA256 9bed16c1c061683459729f73b798e01d4bae4022dd07155b0305d73a65696da8
SHA512 944a3c13443ec11db272e64a72540a60cc3f262ec60177ed1a91393095ceb390830d6173dc256d6535eb282fee34e7cea3e9a04626e846087d61f87a4bc5aca7

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 1e4d56d56d427cdcd0a9ee77e98700ab
SHA1 1f5678acac9ccc5efbad8270fef4282b94253a4d
SHA256 9a651d86e405053953e0221a3a3ad4216d643d3125b7fe64d3f9d29f0d012db4
SHA512 42803101ed8a7099e480c903c59fe76016f76ef8409e8b202b3d32286cebe3009925bcc2a6fe71d91f0e044e937c39e9fac270aab169dd20cf9869ec60756850

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 dd86fea1fcb715dff3d54e3fef1704a4
SHA1 f5bf18d31533a61f17f9241dbea487c93cb69f30
SHA256 6ff216dbbd287090da39bb8aa427cc3ec0205ecabbf9b23823553227f5a3e15e
SHA512 2b5db39979ce2c1788617981f86028f3b7547cc944904aaa68bb44a0e361d4f83d186ba6e8cb74dd071a24c569d84c7e290451c6db3b18c767d94a582290b1a2

/data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MDQ5OTA0Nzc4

MD5 55c1e11c835df22ed6231d71b0d3830c
SHA1 6bca47930db2f0efe5593162e808a2b1a05091e5
SHA256 486e8d4b04121623c938455ef91b6afd8566b57e9e220c772a9c752bf31f8e8b
SHA512 149c6c239f7700272fb44743ca36d285f2fece8c5c5a3460ca0314f5c70fbcb1821459728e90364cb9815b96c9b1a1d9a3227a9a2bc852b32e4e66c46186c734

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

MD5 81024874f926b0c0c9e613997c9370b1
SHA1 a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256 da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA512 8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 e6cdc8925f76d742cdb55ea2936412ec
SHA1 5b961722a5ab324272c9da5f6bdc84031e45ec3d
SHA256 a6d16d580d28a189e8ce5f8fd0fd65eacdd6fc76bdca82c87c5a755b790cbce7
SHA512 d9f06df1a4fe1b35cedaaf9c80686a92d4fb49dcc98fce9deb337293bdb7850444157d7e8b7326bf05f6ca3a147e1122d4bb5a2b12a324783bc88ff0e750f8e2

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db

MD5 5800c2a2e7d9bb3ed39eb1156e78a096
SHA1 92468db904e8ec42f24f2e28043d17053708b26b
SHA256 012afc042b8d1e19366c9087cdbad33090ee414dc7b9d0dce3e6518570f3ecc4
SHA512 1ffe2244b6abcca29e855dc1779635a56972fb382b45d07a5c09fca77b707e0775a35b1507c5fa5c71bd0208b005bcaec3a3026e5fd8ec28d43333cc88204ded

/data/data/com.xgbuy.xg/files/.jglogs/.jg.li

MD5 7a29efe01c6ecec7a3476cdee3333173
SHA1 0eff9818109b03c39bbe3b8312a6f2a36caea233
SHA256 77092b91dfeb0ac74571e3961b18317750887562478bf525de869bd111481d5f
SHA512 3d47d09bda5c5cb0cc7d9434d191f0e2abf77f08990d7a783a184b7eb46c9e7c84dbe2d36b263f5b24a0c9b4ae3045c071385b13ff9da3d1a404c52d070ad9d0

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 22ec89342756fc9f6b4d34b262d25f27
SHA1 8a3f296bc5750ef9b390e7cba46f772265218340
SHA256 bcdebedcf3727dce7708ba0f2aa9feb6ae34cd4a1648e12627feeddff71d4def
SHA512 15da27fb89eb756e0a21399d07cc67d86f0ec49d6132a0edd2c34c8be0616ad2afec053d53c0e3be0b87766afa875c3e099e77e8f57887bddbc9fc536fe7de28

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 29c331496122b4d43d3084cf1a9656ca
SHA1 83ddf8f694935ea37afe1ff5d746eca568c14383
SHA256 724e3bb44b251e3962d49503a25c8e31131dec732293fd725cf9de626a9a4944
SHA512 738903761300eaa257b4b6a41e96a08bee5b445f9675c804f688c1dd6b54b9ef427f2eee76fae738c96a26427c8e1f0da327f31aa46626d11665b7f5ed33bd6f

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 3621c59109bd5307b0a5613f4d820beb
SHA1 be3f30c170864c5bf1ad12b3d7fe035d114c22c1
SHA256 6cc20fe3802b44cc935257c4be4ead83e5e64d5dc72788dfadd012d6b9294420
SHA512 ac50b2c6ceaccfa5aa92bc3337abe4bc6483efc731505386bf96fa53268825bc758086017cf82982f1927840b6dddc2e58cd6931cd1aac5514d5c66f130207ef

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-18 16:30

Reported

2024-05-18 16:34

Platform

android-x86-arm-20240514-en

Max time kernel

179s

Max time network

185s

Command Line

com.xgbuy.xg

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /data/local/bin/su N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /data/local/su N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/tmp.dex N/A N/A
N/A /data/data/com.xgbuy.xg/.jiagu/tmp.dex N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.xgbuy.xg

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&

com.xgbuy.xg:pushcore

cat /sys/class/net/wlan0/address

sh -c ps

ps

Network

Country Destination Domain Proto
GB 142.250.187.195:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.202:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 m.data.mob.com udp
US 1.1.1.1:53 log.reyun.com udp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 s.jpush.cn udp
US 1.1.1.1:53 a.xgbuy.cc udp
CN 110.41.162.127:19000 s.jpush.cn udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
US 1.1.1.1:53 plbslog.umeng.com udp
CN 36.156.202.75:443 plbslog.umeng.com tcp
US 1.1.1.1:53 downt.ntalker.com udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 182.92.245.193:80 downt.ntalker.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 180.188.25.46:80 api.exc.mob.com tcp
US 1.1.1.1:53 t.gdt.qq.com udp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
US 1.1.1.1:53 update.sdk.jiguang.cn udp
CN 110.41.162.127:19000 s.jpush.cn udp
US 1.1.1.1:53 sis.jpush.io udp
CN 123.60.92.210:19000 sis.jpush.io udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 api.share.mob.com udp
CN 180.188.25.42:80 api.share.mob.com tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 123.60.92.210:19000 sis.jpush.io udp
US 1.1.1.1:53 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 api.exc.mob.com udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 180.188.25.46:80 api.exc.mob.com tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 downt.ntalker.com udp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 s.appjiagu.com udp
US 104.192.110.60:80 s.appjiagu.com tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
CN 52.81.118.135:80 log.reyun.com tcp
US 1.1.1.1:53 tcp
US 1.1.1.1:53 139.9.138.15 udp
US 1.1.1.1:53 119.3.188.193 udp
US 1.1.1.1:53 im64.jpush.cn udp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
US 1.1.1.1:53 139.9.135.156 udp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 36.156.202.75:443 plbslog.umeng.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 113.31.17.106:7000 tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 120.55.96.240:80 a.xgbuy.cc tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 180.188.25.47:80 m.data.mob.com tcp
US 1.1.1.1:53 downt.ntalker.com udp
CN 52.80.199.120:80 log.reyun.com tcp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 113.31.17.106:7000 tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 123.60.92.210:19000 easytomessage.com udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
US 1.1.1.1:53 b.appjiagu.com udp
CN 180.163.249.208:80 b.appjiagu.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 123.60.92.210:19000 easytomessage.com udp
CN 123.60.89.60:19000 easytomessage.com udp
CN 106.63.25.33:80 b.appjiagu.com tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 123.60.89.60:19000 easytomessage.com udp
CN 113.31.17.108:19000 udp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
US 1.1.1.1:53 log.reyun.com udp
US 1.1.1.1:53 downt.ntalker.com udp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 182.92.245.193:80 downt.ntalker.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 113.31.17.106:7000 tcp
CN 52.81.118.135:80 log.reyun.com tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 113.31.17.106:7000 tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
CN 52.81.118.135:80 log.reyun.com tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 110.41.162.127:19000 easytomessage.com udp
US 1.1.1.1:53 sis.jpush.io udp
CN 110.41.53.90:19000 sis.jpush.io udp
CN 52.80.199.120:80 log.reyun.com tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 110.41.53.90:19000 sis.jpush.io udp
CN 52.81.118.135:80 log.reyun.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 52.80.199.120:80 log.reyun.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 113.31.17.108:19000 udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
US 1.1.1.1:53 tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 113.31.17.106:7000 tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 113.31.17.106:7000 tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 110.41.162.127:19000 sis.jpush.io udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 110.41.162.127:19000 sis.jpush.io udp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 110.41.53.90:19000 sis.jpush.io udp
CN 110.41.53.90:19000 sis.jpush.io udp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 123.60.89.60:19000 sis.jpush.io udp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 m.data.mob.com udp
CN 180.188.25.47:80 m.data.mob.com tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp
CN 113.31.17.108:19000 udp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 112.60.15.47:80 t.gdt.qq.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
US 1.1.1.1:53 _im64._tcp.jpush.cn tcp
CN 1.94.137.47:7000 im64.jpush.cn tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 112.60.14.125:80 t.gdt.qq.com tcp
CN 1.94.137.47:7002 im64.jpush.cn tcp
CN 113.31.17.106:7000 tcp
CN 1.94.137.47:7003 im64.jpush.cn tcp
CN 112.60.14.21:80 t.gdt.qq.com tcp

Files

/data/data/com.xgbuy.xg/.jiagu/libjiagu.so

MD5 015df5724b50b4fbc6dd0caf7ccb817c
SHA1 980780e98c9958aec97ab7a0de8d28a4c5fd9429
SHA256 183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6
SHA512 fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

/data/data/com.xgbuy.xg/.jiagu/classes.dex

MD5 bc7b7cec4c2313b65f6d767a77164dd0
SHA1 f0a2fb5db284bc60f424c2084984c830cf4d2ca1
SHA256 84906c5a9b057b44e0df1fb8030d13110748ba30ef7a8017abdd3157ef349ffb
SHA512 379bec4a7a82a83c32e93cb3d5d0e0622d78ec79a5e17861f9600069283ffeac13340003fd2323c884a114bd45102034b3e5e609b3390ce099db6ef71a144432

/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex

MD5 f1e1513c1caa393fe8e9a3f9fff03e7c
SHA1 db053d40d0ead70c10b229d129359601a8b5debd
SHA256 4e81f36348e9d21ea9121450a9c68817efadedf40bf365af9d54a6033b363934
SHA512 e9c0cb206d14c55f3bf375fddd0d1edcf2e4540c24ac5df6e1c4884e87be9861a87b4fa5a49162fd054bafac7ed223e6f79686ffd71224f64f7336173298c03b

/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex

MD5 e0cdaf1a37a325beb335128a913ce71e
SHA1 1b4f9eda9ff72406032655f7a7f97e361d90bb2f
SHA256 444121cbd8f09a2461d84bcdecea5c61c0a5bc7b0fd3671d6a1ba5a91281cbba
SHA512 2f24d69d48c4cf889db9b6d2d5c867b8ea758663e0e83ce1e7ecf650a6b5850669d35d46df3355a643bb2732b590d4609eabbe4aa74d4a4b076c3bb8e8a17d8b

/data/data/com.xgbuy.xg/.jiagu/tmp.dex

MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

MD5 99425412299295600269f6f71edaffc2
SHA1 9dd93d5bc8b5a8543b6048440d24b8804dca9cd2
SHA256 7c5254164b9567e702cabccfca1442c1d64775f7371bff082c28b812e691a695
SHA512 e0c05c94ac45770f801ab59859ea6d0f8e8a289310deed449e50b7ce8861c6d9d8a93d88761d9b595e6a07fc0b63d4b9b173aae2f2c72cf1a496296c1b7436e9

/data/data/com.xgbuy.xg/files/.jiagu.lock

MD5 49e2b6f4b0ae1fe8455a74df6ed11801
SHA1 93a535f4a615a9756e8c41853e09c85de8ee456a
SHA256 77b6a560f0ae8809696a8e0537564539791288a7969a54acbfe3cab53c898a26
SHA512 4a5ef0cd63fc5f2483b83e1ea5c1f948f2377c358aa503788174b366437378be23c5fce9168ed70a8ed3333169788e431c3b0600d62398c6194ba62f949db96a

/data/data/com.xgbuy.xg/files/.jglogs/.jg.rd

MD5 7cef4bf7b995564773e94229541dfd48
SHA1 4270195392562f55dabae96238b59d535f5d35f5
SHA256 b599c40c0ae5855d3ebfb7b876a0390274d0432e41e5d58b4f347e941f2bbb1f
SHA512 74c9fdcf8183f798bfc0eaff0bf1b0950a72bce6689e2c00ecba8e98d975a4e0e872f8ea406f400de8f6941fcd56bf75820e044585ddb52df1d9b851cdedceb3

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

MD5 3911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1 d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA256 0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512 d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic

MD5 46c7a3c0004f15ed66fae7917cf02459
SHA1 8b9e502e201cb9a38680406b53e6b9d563d161b0
SHA256 62ded4545adbc4d2227296ccc92293830f9bbb2b00adda3734ce5879c9192517
SHA512 cbf444b650193ede5f99717ee5e01d9785f9c2bfd4df669d3a4c47969a7f2d447e5083e11ed932793f613d4b808f428437fa6a2be7e302601bb773077a3c9fc2

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

MD5 679d2b83bdeda825694991b7e7a16d11
SHA1 e727e7827c799b723770bc89371abd513dfb0148
SHA256 3c12d5dcfaacbf4100dc6e0f56fe6fa753d5608b5b1abc3fa4cd5eee6dd8e7a2
SHA512 1460f2da5d9747c03435cc83572974079328c87b7625a1e76c77580c88122a90e43dc6467be69e75b5091e85a881a99102988a8bae0f665fb5145473adc42b2d

/storage/emulated/0/360/.iddata

MD5 5bf85148841d8383d6d7b986208f4e57
SHA1 3ae0cec3700200310342e6fe027dbf002e8dbb87
SHA256 5c84aa5fca03441f84293fdc45f10fe0873daebdee032eb82ffee4ce4bf8654c
SHA512 900486ef249d3e04f5cc092b1203a3a447a80ac84a870cd749fa428e850e13e2290d00262f99ebfc5be55cbd771c9b18eb0e4133cc668b6086fe525ceb1c96fc

/storage/emulated/0/360/.deviceId

MD5 1d8d16c4e3b19ebf18988530d9b9a757
SHA1 bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256 abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA512 4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

/storage/emulated/0/Mob/comm/.di

MD5 acc2a2f5cb76c41d2e97e0d409b53bdd
SHA1 ed06f22ff10e0912f50d53bc775ed2ae70f85d5a
SHA256 12ee2ab25175281fd1efab755eb5a5b442e91d263646c52118e6b1e97856f448
SHA512 faed72411dfb1546a82a302b6aadf921bf66a09aa4641a6d1d523e5b58c063d5210089ca2d7dec8aadbe1efec4748a8abb36ab9fe1ab18539a92b76730b85419

/storage/emulated/0/Mob/.slw

MD5 19402718bfb1c685a726b4e1d846ad98
SHA1 02a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256 079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA512 25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

/data/data/com.xgbuy.xg/files/.jglogs/.jg.li

MD5 6633d0ab5ca39deff748c4edf9a404ab
SHA1 32a91408eb4d67d59419324c1b4d4cedc91518d2
SHA256 eeb1129638836ec0be8cdda1c871bb977dabf316e524fccdecbb89a6ac65dc73
SHA512 2c49539c779d7d208aa7921b3c3bcabb44b1efab3d2ffe052080b6b6bcdd95e6a27f22252234dc2b72391f39166dac4a96ed0837fbb573db0f9e11bb1e269067

/data/data/com.xgbuy.xg/databases/xinggou-journal

MD5 53625dd9f10304cf6feb0f39475b18e1
SHA1 f53d8a7531da9291fc988670e0781c30f9a87b23
SHA256 1d1ac765ab6e2b5be4c2b00d9d6a22e57927f99298bac23f7ae36ac1b23d2fbd
SHA512 fe9c6b41d9929c9b254edb32c910009efa704f54e7f65e11f4aa2bd11dcd17728e4d5cfca3790d0f78af9cebce908876f3e714a6e3f92f26b1a7dd4b83690995

/data/data/com.xgbuy.xg/databases/xinggou

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.xgbuy.xg/databases/xinggou-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.xgbuy.xg/databases/xinggou-wal

MD5 939439b19d6bfa272d7f98441e25cf8e
SHA1 c831bbd287046a623b043f0d284d4629f8b9b0ef
SHA256 ee5979578eccfe0359084ef167df1bdabcd37454344550f66884367799f37e2a
SHA512 9b3a76b94884cf06778bf163dadd845aaebcaa6364c9fde55811c27bff2acf0db804e557dc93c20b7ce5179c6f8f200b8fabb9cc2736239cefcd9e358148f342

/storage/emulated/0/data/.push_deviceid

MD5 6a65db3c56fcf56897d18b9cb35ddebf
SHA1 51660e17cadeb6aed417a246d7ff2311527051ae
SHA256 2123ea93e50eae952c165c41fec69dd7414031a5e747f7f869e2872a747fa545
SHA512 7c6651e6a33da8c5c9386c5ac1e734948645ea7ad096274c76cbd641559a2cf86d34347f152fc43c110b3a8e8394c70883fe1a1e805839b425a259c077ba4d5b

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/data/data/com.xgbuy.xg/files/umeng_it.cache

MD5 54c441dd1738bb22acc490e5a213d416
SHA1 246efd747bee9fcdf628977e8cf6f21f7cb2bdd8
SHA256 4aa30aa51f4a39fdf38fae83f43ff157cea933049d31ce3ed5200cee04725575
SHA512 cb3b92aa0a636f817007103558f71a6ad1a4ee23b87cd030343208d6012274bbc55cdd16eb19fa78d96761dec88b975387431c856b72691dfc60b5b2769bb1dc

/data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MDQ5ODY5NDcw

MD5 c122f4c875713eb15884e99e0d94a02b
SHA1 bbb5aead8ec659e336d89a1badee9fab4e203e33
SHA256 0798e6bcc72ce742221c70d8738f316d5572c07368786755f77ce96a9b3c4bff
SHA512 933886bdf55727899a545f53f739da632f2659b7d158a1530ae2ff55a5d261be066577485d84ed3f1724bb7f6bc71b4de6d04cfb700d248c133274b68171cdc7

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal

MD5 37063fe243e9f0c0f014f25134b1fc00
SHA1 21d2f46acd1389325f9d3802807689f712f28a10
SHA256 a45f75c5ecf2ad7f9c8c66b70a6a719abdeb7ec73e80550f9e313bda34c305c9
SHA512 371dcd1f2d607836de0c7d6155bfd8188a292dbad5f4091edd34c81059f2f3bc2547f9ed73f77227f2e6e88ca133a9d51a2b50ea85da02514153592cf73dabe0

/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/1b980bbc765294097260c5501e33520cf79efb2e8ca5547693e262f223514bf9.0.tmp

MD5 66c0c680753df4ee0641951b8cb1d613
SHA1 9573fb478fdd97f871e9019c3b88f27adb879a29
SHA256 97d7cb4c347498221f9b273a11449ce621cfc8c6b2770f4d57a8b3dfed67188b
SHA512 0c169a3f5dbec49a8e14d3381e4e71aab60b454365e84879f1892335ba0294be71950eb9bd0de528cfaa51f702384a66361972875dad163d46b7ab05c23881c0

/data/data/com.xgbuy.xg/files/jpush_stat_cache.json

MD5 33c3ceb520654f941204559ca973ccde
SHA1 70cbdcff3399ce530b58991bf95fc17da5c0be59
SHA256 7bdda750d21632872c52e9e2507acc91ae02b703137df30e93a4a3748bd51f17
SHA512 e8f427c9ee383ab641d55ec369ff92e921c2812d4d23d83b919a96789f9bb68e75a939fa4e02ea164332053ebd2eb26477804ca3da1313940ac5d8a928066f09

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest27558214461684365095532231094976515190-journal

MD5 aaf1760705b3ff534f6d2bc0d8c0ab7b
SHA1 c8e9ac761b53116114fcaa7813573cf6113e3681
SHA256 feb013638a737be95684ea524f386b25de5a929e475d376dc899a04b42c06508
SHA512 606694a3ac0728a8c2a9b9b685395c5974871b241f87f1ab3bc44c62f9eaff1c94b0a0d4eaae9e5f9825afee76c92a87c6358f6c48000db5ddd480da831b7cfd

/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest27558214461684365095532231094976515190-wal

MD5 aa83663f8a3fcf5b5eae81611791c153
SHA1 824bd1d232104992a1e4225afea45fc8bf445732
SHA256 f8eee341f86a2453198eef355f7cf59429e43d39b3de2ee779c7525a61e96469
SHA512 d346e717631ffa8ee83f9fe9fab923db0a1cdfbe27c02cda2393f87dc1747eff970069039c9f7deb4daaf7d08c9dd35e1e8bfaa47b4c3b7eaa4564f99be0edbf

/data/data/com.xgbuy.xg/databases/Reyun.db-journal

MD5 69011f8bcecd479ebff8fd6288727396
SHA1 d67baa35131b6cc56c1065ea5b7a2cf092861de5
SHA256 c3978c1b6d8f2a01f2acc16936c6f5f90c1bbb8385d6c0e6cfa1428044da6467
SHA512 28e75c5b9d13c3e61b2a27eeab9b64087631275d458174f0c70e1485da540c24c72db1b0224294790e62ccd2085b168c54c96fccbb9ca5a85d2d7fc43f67cc26

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 94ebbd986e7dca5e08e2680e99140410
SHA1 515a2c6b500b430fa20b4b6b846547b1b8074f80
SHA256 bfaeb947296cc0073d867f963bfedb3ee19840eeace225b3fe113e7e0ec6e21b
SHA512 addb470fdf8f0bb73086cacb1db7af24b70f0c1ce818c1fdb17221d6b135ca65d9defc6f73745c922092b0deae99413ef0b8074ad7380f814eb66e3ad6b7ed0e

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 2c24065e0798a84662569be5e7010e27
SHA1 f179eca5db0ea5dd5edb93540e39e7ee1c6cbd44
SHA256 f60f883dda63de5d0b3a7a279e01b4ce5be5dffee7b24b9bc8ca0e2ae0afa86f
SHA512 ed7a770584ed970892b568638c4ea83ad0c2dfaebb24d290d06298f0362237b1706bad8a23fa6ccb15d297f0a9183e2a0dda6bf2f257b100bdbe46c5a7591a3a

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 e33d4971517fffacbc6048e85a4f684e
SHA1 4bcc3873a7f8157add3caad326736b7c150b405e
SHA256 cbddd1cd3381bef2a8734d6dd268a519b4fa997527e2aba2a859c99382bb3a3e
SHA512 e5c7406e2ae5feecddb31ff34555278daa2fd0a9b80246e73b062fbe21ef9ff12c890b85b2644bb5d25c70e9a0237c7b76f7a5e757aa13769f1e85097604736d

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 2155701619d357f2080fb6530518abe2
SHA1 89bfd35cdb4ddf366987305cb81600fc86c0a813
SHA256 a786359ace431e01487f729e760876a7e904506d27e1efea4bb155cdcd556423
SHA512 9c79be048188576b27a78b8b5093a71491eb1da41160dd7bccd1ad6b6cb3b959ddbd8dc64cfe043fba23588249cfde0f0b0b0a85c00157e02c44f9b96a90ae57

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 afc6269b05c94f54f7144d3ca4fd4c99
SHA1 3465639d8f2deca3247de6c6d32fecabe8a97342
SHA256 9a667f4075246e837d7ae69c2a1ee9fc72ec0917db26c6a9f00e2bb866b50a95
SHA512 d8753f46236344782e3d3a85b20c2bb005320cbdf10b79a3133d386ac2c231b35e6dc32b005b7a67cb674c196efcdeacadcb6a5d0ad6d2927429ac0af2306d1b

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 ee9a0e23d0b5b009ef52465efedb9ade
SHA1 3f35f333f67a203ec9e140524bfb4f50c63f7f53
SHA256 10c9d6da788e38ff94185e7e324200d1ecd3856ac303d7d11a8e0fc17444be03
SHA512 6ace02f374bd84a13b04c4e8462f2550d5446549b610ac22915082cfe288e38eacd4636787955495ef7ee144131fa7afbb3c68e21d35d4e90f9280e3444a3855

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 c5c949a0a72ff264f077c699aca7313c
SHA1 a90336c734f8c766c335db2213ae011a2c865403
SHA256 e63362d660933da9232a66b551591cf30596f4949adc4772b4f962d96e36db9b
SHA512 5cdf6fc271fa61ec3d90985dba41920d902c67e17bcd49a0d4178cc5a3414f944a4f7e151d1a4bd56d4a1390a3398eda1f305ea053042fd4466b9226e43e5e19

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 60d2d332ac7346b1d9f692c4603dde37
SHA1 f6e63e2c4aaf205a5842673d89ee880696156845
SHA256 a6dbf7fafc753991ee79844edc777c68897ef7ae5ae021951777c58ed3173d57
SHA512 43d97445ab07edaee9546ce8b275c166f58bd42a8d7ae08f1f86ca3f16e48f3d73ae319e8c55598d1e9ddca32d8f4cbadf5161beb4859eab057e39bebd822e72

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 54e95e85893e6ecb123558e746df11d3
SHA1 64cb2ee6de88d17593644d74fedf1b8e7607f94f
SHA256 988e50a2e11f16b6ac5005c212d68c707b60c9750fc6b634f3ff3ee570c6749b
SHA512 0ad9723ec403be1e5cc5953a6c1160ed406042a103cac312401b42996b996c08b706b4c96622e8bfbc3d725b9c3e5ba8668cdc1e58ccbcdda1d1fb6c9e112895

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 323fbd5f1cc6eb881352f680324c70e4
SHA1 2daf9aa12720553da6214737ee620007e07ba50e
SHA256 0b979ad0b422ed8c0a867c72372c2e0778ee7cab3525123a14251d6156cb3fb3
SHA512 db1ee462ac8ebaa622dd5fa14196d2cdb3bcebbb169d0023cd174c521d7c63c7e02bfea186a83f58822c94755d99677d9584944fb31205a5d1e86044e321076f

/data/data/com.xgbuy.xg/databases/Reyun.db-wal

MD5 4fd8e11c4617b28fcbc2498fb918bfc7
SHA1 4adb9ff40eced15732a47496406abc1795bcbdc2
SHA256 c1ee7f416eaae990c05c6cfe95a492da016c3102710e569c9fbff45291254d7b
SHA512 e518912063f950cc17955b8c73e60ec3677a368b20f058216aaece616d1a7c9c4e67196878e4790d3abd98dfdab2cd9bfd4a81d2fcdd213fa1267a535461e3d7

/data/data/com.xgbuy.xg/databases/Reyun.db

MD5 02827dd47b68b98c29dbead61d6550e3
SHA1 a7b2cf853ac3c4d606b816ba273e6ba8e1cf1f40
SHA256 972a7555e13792edd22ebc4238ac271689b06499e55528cb8da5d7b5985ea2cf
SHA512 ea966e60fa5843b7f23788ecd2b5121be53fff79bb7819e8b39bb366bdcfe9976ad9d0b0edecfb9a3d45a957879de40859c3b34cbc7456e6821655cd9de89d5a

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

MD5 04075dd9ff800e5f2e286897366e2ae3
SHA1 bfae973c98f0efdbd861cbf7ac6721b04789b229
SHA256 759fb4b13adc181ef86795c3830d15bced2ce03289d147f661fc545f7ba88d5d
SHA512 c6eab7b9111e16d1e9a6fe65062a6d6561069fabbdb7c04fdad12007220a0e65d125c89371a358ef08618758003118d74f609e435e6247bdb4af4926780d8db2

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal

MD5 709a8fbf1194d0e8255cfbe1f6c7cada
SHA1 c2aaef38fc2f0068f59debf8a33542f66011dde5
SHA256 d3c36e6205b98f06b66f07ea9493a3d0abe212e12cec0194176b8b129b354dac
SHA512 f6c57903b0c226162ba8503cf7dde6717bddc3078fa6448c97473a32019b0e7c1846f157745c78cb1beaa7f8428893dbfe5bb92e80fe03db3bf237dfed0ab0b4

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 8e24e79baab91c4d0604eaa9006a0cb3
SHA1 e427afc94a4b957a7096f73e395a10ea404c076b
SHA256 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA512 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

/data/data/com.xgbuy.xg/files/jpush_stat_cache.json

MD5 eb2badb04dc5e6c4835aad1c0dfd6dfd
SHA1 46f19a57ab6b692cb6187a71a2df7dcc3b220b2e
SHA256 3b6621e31827a4992fe3d6c3f55648c74c87672f798dff74d8e77fbef2787fb8
SHA512 ba2866117d9830aedc023cd87b75459b19bcf324054ac1b6b5e0abd04f78dc4374d6fba083e02733fcbca941eddcdbeb03b773af6a1fdf3ef1a7ec6a96e57b24

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

MD5 b90bdce8aed0632eba067ab5b6f95f45
SHA1 781ada9099f1ebd98e9e6bc0671779f6b769c371
SHA256 39695a78529da49c5a2ad4c631b6a281e7774ba731e77f9979c8b07ca647411c
SHA512 fe0b4d42fa9c41d0143d000d3bbb583240a961068563d957741cd1490a18600031befd00518865623f68485a9d9311879f929063ac92906d3c7e76102c33dbf5

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 53938cd100aec1fe03e1b969f1a7a349
SHA1 bddf641d4297f59a2947a502174173c93c97533a
SHA256 3e31522b85c9fe2a779f18919c31f705d24b507e8e986c4c2f2ba7e3a1f5f44f
SHA512 5e019f327ff7de50da47add7fe3f3786a1c2904d4487444579ed17f909120fd011a8f0bc61449b84ecf2fcdb550d7bfd50974b575413f463aa0a5e032936cb87

/data/data/com.xgbuy.xg/files/Mob/share_sdk_1

MD5 31c4d6e58faec74097ece9c9d08f54f5
SHA1 e5ca123dc7bc4b6b76b03b81318e11e8d1cea547
SHA256 13da06a4e200a1c105d63f997d649843fb00da5afe4bbabe660dd74eaf922a45
SHA512 74a3076776a1fe69214b6ccbf374f2e8a6d483584604c1b50e9e002e8b51f8f3c9c7162df6392acb60642dc6e0623890c489d14826f6f07f548a95a1726c8a40

/data/data/com.xgbuy.xg/files/Mob/mob_commons_1

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

MD5 81024874f926b0c0c9e613997c9370b1
SHA1 a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256 da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA512 8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

/data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MDQ5OTAwMDU3

MD5 4ed8c275d677a7781450390a87745fce
SHA1 86c7a13f11f77d3febaa012ca178176a89516609
SHA256 156cd83a732aa76f24a88713ba031f6667a1b5b404a25f0d248caf6afffe6704
SHA512 77ef807921474725fa5fa091804c21139666cabcd558f22926c100ce3cc84d1ee7af9d39b4de8c954b782fe1f652663698f01fb60f6911bf4423ef238d33660b

/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal

MD5 cc86ba17bcbb77275fb78e305dbd1f9e
SHA1 0b4219c9c150f0ee1f21e70122c8f24226e5486b
SHA256 4ba49fad46c3946796a3d07ef7b2185b665f900d425ccc2873e69aa18ddf6869
SHA512 7aae5876c52cb710672dd4931946758bf509bbb258dbdd77d7418ccf355839d694cd84d682a23dc4bcb82513409bac33d91476059a591ac8b2ad5db43708eb4d