Analysis

  • max time kernel
    175s
  • max time network
    186s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 15:43

General

  • Target

    67c5c456a19ef4ef94edf666ddcc3c91_JaffaCakes118.apk

  • Size

    16.6MB

  • MD5

    67c5c456a19ef4ef94edf666ddcc3c91

  • SHA1

    9180c1a88fc45e968829c77a859483677a97fc94

  • SHA256

    2660a12e02d535d2c3a8c119f7f6131ebe19ccf6ecf771b4a870eeb306a6088b

  • SHA512

    40b2b935c62b4ca9b5b2b1742def4633bc7077b15f2773a81fa8d38c5516fabdb47f5c6f48b179cc4127c37c2f11f69be9897ac82122873c55d5db09c538b4cd

  • SSDEEP

    393216:334RTvYoXOoWJSIFqorjyVL8VuK9LwjeqzG:33qTvYoKvPt9ZH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4321
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4345
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4376
      • sh -c ps
        2⤵
          PID:4692
        • ps
          2⤵
            PID:4692
        • com.xgbuy.xg:pushcore
          1⤵
          • Loads dropped Dex/Jar
          • Queries information about running processes on the device
          • Registers a broadcast receiver at runtime (usually for listening for system events)
          • Checks if the internet connection is available
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4424

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/classes.dex
          Filesize

          7.9MB

          MD5

          0cd77d33f6caa924c186679fd337f145

          SHA1

          102cf7a11549a293b17e48eb237903c03add006f

          SHA256

          4e1fe7a6d13c8cc085744cb354f09eec14c52bd30c31c5cf0aaf20592cc147c1

          SHA512

          92c2dff4e242edf0e1e788cfa6c34ce4f713e5cf1dd4bc2cf2f1a538030706fc6474aea028442db0743d8f7ddea5d2750e6ec96147b3206ed956cea9f568b7c0

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          382KB

          MD5

          aa01dd97609092ce310e17bf791069ce

          SHA1

          f000840a8f68ea7beb2e29ea466088daf55609db

          SHA256

          e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

          SHA512

          766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

        • /data/data/com.xgbuy.xg/.jiagu/tmp.dex
          Filesize

          284B

          MD5

          f1771b68f5f9b168b79ff59ae2daabe4

          SHA1

          0df6a835559f5c99670214a12700e7d8c28e5a42

          SHA256

          9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

          SHA512

          dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

        • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/e0bac8c3c005c727bb9b0b2d00be3d7cf020743113c01c46c33a507d6275519a.0.tmp
          Filesize

          79KB

          MD5

          3ccf674803e2bcca74d940a369b98a1f

          SHA1

          b82beb53b74476af3563d05f4b49b4628611c19f

          SHA256

          897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274

          SHA512

          b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f

        • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal
          Filesize

          179B

          MD5

          558e7c199f33a5304e4801764cd264ec

          SHA1

          9e9960d6db26ea7b066101023cb69041c6654ea9

          SHA256

          3c3af02a5f4e4d2b1334666d91e97bdfab7454f30723623c079f4cd9d0ba81e9

          SHA512

          fbd1e67831ef14fa6776c1b265eec6670b9be62e77599609cbbfbc6cba254d219392d37a5ec4d796349d954f37610579de457d005af864e2ac36a8cffb0d297a

        • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp
          Filesize

          31B

          MD5

          8c92de9ce46d41a22f3b20f77404cc1d

          SHA1

          8671a6dca00edb72be47363a7071be65cf270373

          SHA256

          68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

          SHA512

          30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          20KB

          MD5

          d6f43e138b0890303ac8a4e55cce62c9

          SHA1

          ff82f12351b51c4703a96e74df329d780979ee72

          SHA256

          9d3398a9ff05fa1523e340ece5d4ee2b3f1a978e35578d66594a2e62dc4ab5e5

          SHA512

          500e5dbedbb433818c4ee222a1de786e1c8e062530f71853932b0ef0f76cdacb735dadc524a18612316ec046a73f46dc5b4d6eaa9d64ed6184cc028416f36f5d

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          20KB

          MD5

          db30efd81873399643618e43ff24e140

          SHA1

          85e54e64a1a0aa02ea460cb18a20aa2fbbb0b892

          SHA256

          ed561d6973819717298177eb9ecfc8a2451335c85aa7d030bcde8d697e947d46

          SHA512

          42d7efc94039e17aecd7dc7008e77a0500d52ea55092f2cb2bd098cbaeb7e7cf50d2d7c7d33d1ffe6d8952a88bf2e3fa20eaa7b453ccc73734f237c7fbf43f55

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          20KB

          MD5

          8bf3010d28edbeaafb6d1f4dd1af474a

          SHA1

          a103f41ba978f8896e6a2cef7e40ba3f668bb645

          SHA256

          0fa9b22a4f523644a09d977a27c76241bc758f9d1518e8fe9c36018551ca881f

          SHA512

          d202774ea851e25924dbc70e47ca8118471684638fb76faa2bde85ab0f46034129bcfd1b0171534a5b19aec72feb8f2f65f98829e4c5ae7623e19dc6a6fa813b

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          20KB

          MD5

          3a56aba03da9b5b104706faebd508360

          SHA1

          c97e0402d7f2ba0eb4141facd49b35ff0e4461c6

          SHA256

          fd6b28c77f3aa9dd5e7b75793c37149395830219d8011d41690c57ddb8c10943

          SHA512

          6694df221e68e0940065871c961f761bec68eb8eba13b09246fb51ff95d324162842cb47c2768171d50e230490355db34c3b194dbeb91dd454b56ee1abb7ecd8

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          20KB

          MD5

          1f9848bb76b7d938aba249a58a0f66b7

          SHA1

          4761d7e79cbd2532c75bf476ed738cf33f903770

          SHA256

          58d04a38ef9b3621eafbdb243eda90663059dd40c644570bc0715a0f6b4559a4

          SHA512

          3d4390ad34001a8f476437931556b1b11b826570730b42195e80051d83bf750bc4ba8dfa1b10e47c180319440d76fdc44b10c5d4671b041fd0af130fe6898708

        • /data/data/com.xgbuy.xg/databases/Reyun.db
          Filesize

          28KB

          MD5

          bc7b719100783c8cc3d502068e0139d8

          SHA1

          caf13a241ec6e4ebb7ec1f6e731f41f3e6acada1

          SHA256

          1118965e862c46595893a9cb77b67edeec6004c3c06338c9e10d9e0d36b51831

          SHA512

          6a6851c9c3d3ef2886d7ee1b2feb6e9856bdacc52c8a82e368c01ae853b78161f833d65a05e757afa727e4b81e704fe1b049002d99e8c78f4a302d28e3a23b6f

        • /data/data/com.xgbuy.xg/databases/Reyun.db-journal
          Filesize

          512B

          MD5

          a7c26dbd41f38a6b56221a2e95b87f0e

          SHA1

          c54122aedd48f9eefc6ac238eb14815a5075114b

          SHA256

          adcb5b836d2bf6059a081dae905229cbe10d0ce7c7f28f9b14645ac54368b552

          SHA512

          fadfd647aadf029dfd8054099b3bd9c9b2dc127698650b4680456bd63d4327156b4790f7c0394c5d6040057d9f89cd53557b97ff381e851befc6f112193d93c7

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          44KB

          MD5

          a0dc8dfeab879f06ec64f4fb604a26c1

          SHA1

          80efa046e126e2b54a16406476615a9aca869f6b

          SHA256

          75c89a34035216dc7078867e5b456c906a401c35db280653c5955d3b0e873c2c

          SHA512

          3343bfa009e224e53c2dcbe6b416a59bcdd2d1a9000838054eb8cd66f04ac5ff60a1ca02fb24519f5a5e7f683c9906b9d27ac8e9e39c98182ab860cdb7942f9b

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          8KB

          MD5

          889cf3629c90515514cc3d7076314a68

          SHA1

          a9586a3c841e2cc15d6027fbd3b3ce39ee17afe3

          SHA256

          1fa0e382e1969958d48763a6fcffab64a9b02e6519898735a70ee0859839938d

          SHA512

          7af6345602fc6c2f9bf7ecf3c287d43ca412683516de7d045f62e47016f20956b93d1c10eeaeb3574d698c418d796cf49192f03cc71b65300cf69be68e90540e

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          8KB

          MD5

          2975e332b516e91f14c61034bed361a9

          SHA1

          ccea6687fc48e8c512869e44f17356590704639d

          SHA256

          787dc4439b198597e016eba59916f2b85a74c5e62180ff12ee21b344697c4892

          SHA512

          b00606da7227bc9b1a016c6e0a2dbb35ece3800b0dd56145b277098416f0c20230c476b8e22e0dcfb8af03f6b23e9cff51ec313875e958183373c57fe489339f

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          8KB

          MD5

          055a9de505a955b604dc598b88146ef3

          SHA1

          a2dd1a80d5d1ba5c494f90b7271c63687bc0b914

          SHA256

          1faf461b3978cca97f764e1638489c920279fe62bcb51adc09dcd0535e57b9fe

          SHA512

          8540bfb6ff8e141440004203c015d13bba21e0032fe069e92f751c2a72cb27d6b61c3bee30e6093b7c1b16977c7b87b451d990d77d363a5fc1854c8152acff3c

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          8KB

          MD5

          a0b681a2f4da0128f58d0c806897e2a1

          SHA1

          b3fa629a5eac839b110ed9b7da7cdcc21e19e7ab

          SHA256

          ee0a47109c15bf437186175943466a5bd0ce2bb496fc67e23bda23ae61cd890a

          SHA512

          e6d39c8c0d2cbf43741d25415b248b3b62d592218a4ff90c79b6011e1a1093bce976a996b97e1f6c24ea0de6a4ed18d3cc0380d07e0ccd3764ad2bc652af9e2e

        • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
          Filesize

          24KB

          MD5

          275e77e44c74963d31ea51f1ac8645f5

          SHA1

          c5f98427d9a33a2e5ead3a4dfcc0da2e31264526

          SHA256

          50ad94c4fd135d9fccae5bd435b429a0cfff4ad2ae7b1a46340be61cfc8ee798

          SHA512

          2a2c96095048e3b2a2981bb60f2a483768f578a997f59417f809afd24e57c647267ecbf58e556c1bd001b85165b7b85c2057c04cb159c25f785bcc3099e3a1d8

        • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
          Filesize

          512B

          MD5

          1c775c81ee11c491b49efe8a65667799

          SHA1

          ce935de37318c056808573bb12d2a1baa119b6ed

          SHA256

          f264b9430018e314bb0d99b5194f62418841114c243f15381f6d0961239998b0

          SHA512

          92a35abde7402978195986eb6503a1a495b7a8555457f60e58db85ffdacd8b121a9099913068e91497924dbd958f531e740a8226b1b2849a2cfcba6e6006cae2

        • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal
          Filesize

          140KB

          MD5

          76f2e649b4292634e8f97036dc02fd87

          SHA1

          5a1b5f2cd778144d683ed80d86833427573fd736

          SHA256

          97df07f0a8f9f5011f6c83f062f6f804578d790106c80bd423f99c1bc33a88da

          SHA512

          e2cbdf43132136f2619ea96d0c35ab85fb061da0c9309a26864c15d5946c3891bdcb9af688864875c39b906d29a098a7bf7d6a1acab9c9b094531ee89ea5eb78

        • /data/data/com.xgbuy.xg/databases/cc/cc.db
          Filesize

          36KB

          MD5

          5d7ea1a23af19b4340cc8d90f28297d5

          SHA1

          4cfe95b23a9e98378d69c4290af81b51fbe76aea

          SHA256

          474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

          SHA512

          33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

        • /data/data/com.xgbuy.xg/databases/cc/cc.db
          Filesize

          36KB

          MD5

          ce6135aa1b1fe4f2c2db2a546d2a5558

          SHA1

          79b59582154017aadab783dc266fcb158c252940

          SHA256

          7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

          SHA512

          2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

        • /data/data/com.xgbuy.xg/databases/cc/cc.db-journal
          Filesize

          512B

          MD5

          569b1f9be479d91fbf8f697ed8221953

          SHA1

          219a4f9bcd37b5e8109c65f68f15285d18e5f5fa

          SHA256

          98e0d8baf36255c2d8506b6e0165e1476b4247ebfb5e690293670e06ef27d402

          SHA512

          f2b817cb275cc0cfb197f891a60207c033c8e442eecb2433281ee420f120a87421a4b439626f139150564507b6572550bf7105d38035527f1416e3a55b63c167

        • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal
          Filesize

          48KB

          MD5

          7a2c8518b338900dd47e8097cb199acf

          SHA1

          d2d19474157f2626a2ae20f70dddd44fc49981c3

          SHA256

          8080697f9ff41c74342d84af699bf027a89d182e8acbd80d2e8d644019f479dd

          SHA512

          72a78caa9994243ac152150d85cea492eb7c819fabe27b0fcb40c508a48dc1b2731e8bdbd1328742367881809963c8352b4a68585c570d592ade0f6b1d24cf7a

        • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal
          Filesize

          16KB

          MD5

          09c5d1f65cf639f8f5e1168388b4d4ab

          SHA1

          ab60794d61f186c1a8b62fcf6590f397e77b58b6

          SHA256

          cae68c4ae60433f2ba037d32222795d12f3133200cf88ea7bd10ca550389f17e

          SHA512

          8ad8d56307dd8ae7d70a5fa5abc1b93abc9652996eb396a53b5e8e278a4984baded0cbf3ee9871eccc02b7fd97c7ebac6089693f756602d9dbedc9af1b666b52

        • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest39995181792382332586699837428746669934-journal
          Filesize

          512B

          MD5

          dc41413f48d1dc714cc790ccfd7e9d34

          SHA1

          23394730921ee3201f1d6a321a4b3a2ac9a5dab3

          SHA256

          22df58f022c671c23b651f768ad688dabe5f698a36aed2c1763b9bdc6d8ee245

          SHA512

          8ec618ddd1b574cbed4b6254321ff1be7a86fa57f40dfc981c97bbaa1c4e894458f86109f5074c20eea4a21641152773f7b21be67f1462fe2beed0d746d09108

        • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest39995181792382332586699837428746669934-wal
          Filesize

          48KB

          MD5

          f6d7267d1817a807d7f712a6bae8255b

          SHA1

          dc24e77b6af4b239eae7083a57dc598bbbd480dd

          SHA256

          4bf219ae76c5df6762a78546a866c0e9844f98be589d50916e6113190472ea8f

          SHA512

          b9c3213dc8380b80545653139d685e9c577c275ca534d43e1a1aad9d8eec4b35d7c5c84bf818a157158ae4725c4ae8a1040c42da7d4260af338f7dc54173c90a

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          32KB

          MD5

          bda95fd3b8ff94406dc3276b62cbdd88

          SHA1

          0b31dd1b467f0d1a5c00f8cf51f92845f2bddba6

          SHA256

          5ee63a8368562513adf8befcff741f61dbcb8f3ec574c951af9209b8a1e5ed6c

          SHA512

          b0835d7e7d76035356a9795416ec92bf956c6e20cc8ee7c82e47b1d532efe49f93bed3cb43934142a557ffbbf60e201d66824f63021f4527582858c3be38f21f

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          16KB

          MD5

          083036232fb8d2ebea1a693f936f8079

          SHA1

          1bb8e688756490618106655a54fef2b0c0e68e58

          SHA256

          dc5a94a8655f8fb80dbcfb705ca04789eb407b519a667aab602fd37b65feccce

          SHA512

          9d7145f8c574ae57fd72df648b8cf4c8a1d1ccfd9ee4a7a905247367fd913c4ac742f791d438bdf56ecd9998704c785d999d170d2b9eff61c366d8408287cc9d

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          16KB

          MD5

          f649a7f435f4e3bfd0daf92f98c7400d

          SHA1

          470dcc251b66fa18069b5b43c2fb098a8508db7f

          SHA256

          f2978c657b81a507e8e4843f05fc6f1b621923de627627e0f7a09bb3f6290ee9

          SHA512

          0b5ebe1268fb062906d5d4508209aa801a38224a83cc6c75c22c53f0383c54043cc2ffffb0cae3d1bf0ce92704160d91c4ab6380386182ccecb9959181d874e9

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          32KB

          MD5

          d604a3bf1f8d992cc320ea5b1f7609bd

          SHA1

          247f88df0b55c7d523ea5398637711a0e4a483a4

          SHA256

          329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

          SHA512

          67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          16KB

          MD5

          9f92716909898e8756277e2faa556ec3

          SHA1

          53d19eb9ae195347630a83155e37fae344f673ab

          SHA256

          ee1b08d3053c23d004a70ace747777a4692798fd5972f6fbd9e22df95ca093c5

          SHA512

          67cd24f8cb161f9d8f1c79567c3f0282ef09a1b554d4306f0b7b03fde1b727ec8cdcf35e2bf746dddfc0bab7684d2fc69283bf28da88cee39b7cd9ab56da27fa

        • /data/data/com.xgbuy.xg/databases/ua.db
          Filesize

          16KB

          MD5

          a0de9fa963e49e2966a7b48139a76bfe

          SHA1

          2011a59ebb5d80638bd50dcf096c171dbf36a3a3

          SHA256

          22f79d9a6bbc2b12ebc96e3ccbc9d202fff71cb870beab9ece64d2b694de35e0

          SHA512

          fa72ec86def0aaa8533f799f35bf331489412c4db461cee95cd0bd6c0dd4b4059cbd6d37e4161af6c3738b7591ec7035af3e5f377e4bde3fd50e9327d55f826a

        • /data/data/com.xgbuy.xg/databases/ua.db-journal
          Filesize

          512B

          MD5

          9f8cd665e916e2cd54fdde2241d2e520

          SHA1

          5098b2219ab3f3755b05b7ee239460e9755dc34b

          SHA256

          51cdf93015cd00e8f1f4c40c65c528d6199d472ca6ad4be4291015a6b8725568

          SHA512

          39656c3a06b5f48a4c056eed671ce19e0112fa64b91f6e2d3b1486ae0130a4d7cee771464af8f44a05219473cb15bb6dadd6fbcb020bf70d95194705aeec3266

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          56KB

          MD5

          f5fdca50e8aac8cc740e64483d0db4d5

          SHA1

          6504ca3422f413aca4cf95053185b7131c28d4ab

          SHA256

          a3c22bb35e534146892f4d9df908302577788b907b414a091bed50dd76341abb

          SHA512

          e2fd894ba7e1ad13ab3ba620d49e3a10999d287e9e0656c4e334067ba0ffe16111937aeef081f30cf1afcece0b3a36e89904a275b3713fe6113da30bd17b1150

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          4KB

          MD5

          b6fa279dd84510228f9607c7f476b937

          SHA1

          a668f29302291f76a3d61fd5833b71247264912d

          SHA256

          455d12d5248b6b0e6dce84d9a1422b96c663c2066198017598ea1b5974ef77f1

          SHA512

          1fc189242f47d1a5f835314f512df4509cf78422dbfdce93011d53654cdccf7ee0d2c9d82e0a01902a4f990765b1d344e4ee859bc86c270f7c3c014d04c25fc3

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          4KB

          MD5

          56fa543618ecebd9850bff5b99ecc24b

          SHA1

          6db5599e0a24ee0169f7dc2a87eb3fa950ef5593

          SHA256

          f09a342a78b884b7c0e3a602ed58d1ba879ed0424a607c030f4e607174f4bc13

          SHA512

          319e90ddca04ec6fea8e44946ec5a17bb327c08327f4ab15d5f29510cbe96d94ddece439ada274519ce010bfc52b20db0e9c952624b7cc81b2175209c2e893bb

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          8KB

          MD5

          254e3531d39c50621e6ffe28d6f9e234

          SHA1

          af22c1d653464b337e6ccad09d0e837312982eeb

          SHA256

          da718a38903b61739516b8ebd4937bc4d2d001e905d0d16e325037c45bd53546

          SHA512

          4f9c71aaa2253991afa743b011e6972c3144bbe1c8504eb3bb78fa6b23df071147f64831b379dae808167bfbc7803be543546fa4478dfd8c42d064b3c606cac4

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          4KB

          MD5

          7a713ba9e41ed73f42ffbebbacb6cdd4

          SHA1

          532b05be812fa7ced8b9cc3ef51ad1dd1224ed71

          SHA256

          5eb7f8ff17c0bae32560b4c8f6620951bf3fae75d719cf6fee660e802b0c4628

          SHA512

          5df96cdb08150e6ee92d0ce760c9ea706c012b579d815a617d93660736457b10d278be3bdadcd8a371e33951bc36086ab9746bd4ff7ab2321fea3eba0a8798a9

        • /data/data/com.xgbuy.xg/databases/ua.db-wal
          Filesize

          4KB

          MD5

          e91c98476835a1c8643ae4aaa48d1428

          SHA1

          44fc77c21f1bab84d55c95bb77b022429e484a5a

          SHA256

          f97952aecd93f5fb55e0231e300978ae83c9cb56f633b9ef230d58c703c3492a

          SHA512

          8a839147f6f77621d32c3634b56f081b29a72e21eb44958efa7dea0ad0742d0d94a6676abc5e8dd05fbf4f959d8ae228c149075cd1c6e50c7b03cf27e729b5aa

        • /data/data/com.xgbuy.xg/databases/xinggou
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.xgbuy.xg/databases/xinggou-journal
          Filesize

          512B

          MD5

          49619e5def286093898aacd3a90e51a9

          SHA1

          c11c81468e23a289490ec9e324e4b9cb83138a2b

          SHA256

          f79e8323c55947c6fc8d2071232ffaac257ecc808e8a303c89689de3a213a0da

          SHA512

          7733b75925142665b83302d00879376f985bf494ebe5e177b48aac19a0ac681557982182969127ae08889b576cc0c240645cd9c9cc8aa3e3a8b9bd50690f6046

        • /data/data/com.xgbuy.xg/databases/xinggou-shm
          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/com.xgbuy.xg/databases/xinggou-wal
          Filesize

          64KB

          MD5

          75251640852104dcbb4369efdc9e00f2

          SHA1

          15351a449d97e629c427d6cc00e2098158bca64c

          SHA256

          fe9a2486d940f92084e9bc67e4e33293a94d246d62228a1d9e26e042bfe0641a

          SHA512

          850b3c95c6996ffd78edc055669085b6eb18d3a5d32feda806937d7856d8c6b7a2328a76567aed2a38ec1c8968df2db73322e4406fc5c729d4b58b418aaa7293

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
          Filesize

          40B

          MD5

          3911ad10a2d9a4f7ef7a09639a1b8cf3

          SHA1

          d8d5dae863fe04bef8d987202e25e065efce1e1f

          SHA256

          0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

          SHA512

          d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
          Filesize

          40B

          MD5

          81024874f926b0c0c9e613997c9370b1

          SHA1

          a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

          SHA256

          da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

          SHA512

          8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di
          Filesize

          340B

          MD5

          a5a3db5e4ebc2727b304781532999f40

          SHA1

          77520f999396c7e904c78515489605a1450cf7b2

          SHA256

          c8d3dcdf46bf656a4ddde9db46204881586e19b246ec49e8f1b35cd568b7d6dd

          SHA512

          992edae934289a4425c154c048875d6711fd5c6d4f9d5147f358c482c10f0fce4435499751ebdea83d5fffea4ab38266adfa28e72ca486539976787c5a425331

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di
          Filesize

          340B

          MD5

          a074a85cdb5f870b3621f9db9397189b

          SHA1

          826fd1c30d54c9287ff23fd5088589aabebd5224

          SHA256

          a408b51b68e6a441790836cbacd22e333f6a58d911203a40bbf8a2e5253675f4

          SHA512

          75deb19f079f22e2a19ee2fbf5652a5935f4f33593aeb7d47fe5224cd3604999c005821fd456a9d9e6f958b7022a8fe84bf70bae7b18640d85bda8f19ee1f25f

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ic
          Filesize

          40B

          MD5

          1bd86b90e1b355f123e5ce8c93c3de53

          SHA1

          bee5683d6124650c8be0b3740ad66e771f29b178

          SHA256

          3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

          SHA512

          6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

        • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri
          Filesize

          314B

          MD5

          82d10e082565900ca41be5c34ee22901

          SHA1

          e599890852bc5abdf894a9ca33b85f2bf2a1fb41

          SHA256

          db8edbfac4f97606e418141a3715e818781cf73a106aa21bd0f216d715ff0bf0

          SHA512

          779e32c5909442ad7c57875fbcde2969e31c9330d072f12633d683e36906b489872cd5e94fc1619edbbd09df62d171db3df72724d1cade0df3e39c217c95abf6

        • /data/data/com.xgbuy.xg/files/.jiagu.lock
          Filesize

          27B

          MD5

          3264791b81efe58d2c2bbae7c7265f30

          SHA1

          20bb6a54411eb44d290d0517017a4a029f1a6bf0

          SHA256

          a7ce8b0f7483918b64d3c71240dbe98ae61635a63d7108e5dfeafefe00c5ec2c

          SHA512

          ab16d8556c1f391956624ce448bedf6ca8cf56abe47d83dfbd7a867c9280cd59ca15dfb210b2fa39f3bd04e46dbc90e998b1b9bba76230eaa8e11407dffca78a

        • /data/data/com.xgbuy.xg/files/.um/um_cache_1716392748080.env
          Filesize

          1KB

          MD5

          426b287e2c30728ba92e9b8d79b1ef60

          SHA1

          b61b6886f2e62622e3da390fa8cbe387f097a0e0

          SHA256

          bc0add48f5d14ff71c316da78a23337918615c668577d19d73842f44bc60e4d1

          SHA512

          3e405ae7e610501157cea9f8ed69fdc46c67a2e369523abeabe065b7235cea4650cbffe5fb16b97d4a65db084eb8d8de076a36c968b46291697e08b48fb89b97

        • /data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.json
          Filesize

          162B

          MD5

          3d37fe2cfa0c8c82369daa050aabc7b3

          SHA1

          131881ee2f13d5fede2a7fb5c65e3585d1199a0b

          SHA256

          a451ab42a080f19f2622cfa9f797f3e2cf29e909fbb17001d54fb544bfc179ee

          SHA512

          1c6e8e604ba761e4971ccaf7d7e0b44cc2209d1a16b9ffa13620664b41fe0e5d69972746ae68be8a6af165f93ca40e773e71a785a8d74208f970b1d5d2b9d6eb

        • /data/data/com.xgbuy.xg/files/Mob/mob_commons_1
          Filesize

          2B

          MD5

          99914b932bd37a50b983c5e7c90ae93b

          SHA1

          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

          SHA256

          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

          SHA512

          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

        • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
          Filesize

          23B

          MD5

          8e24e79baab91c4d0604eaa9006a0cb3

          SHA1

          e427afc94a4b957a7096f73e395a10ea404c076b

          SHA256

          65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

          SHA512

          45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

        • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
          Filesize

          62B

          MD5

          53647322d2ed3f9d4b35f9f16ff094a9

          SHA1

          74bd4097c28fcfc69e113ae6400b5a45e5a6be55

          SHA256

          8f13be866f4780abf0bd8dedbd64a81b287da930e33d602cb113556da17ade1a

          SHA512

          6b6393009feae1b9e7c198e5d67c618eee8f9fd0f7cb35cc0bd4f515fda9e58bf825d63645516f2e14a6f8bd5e550c6a29f124bcfe048ca7643c3824840cf5bb

        • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
          Filesize

          86B

          MD5

          27a5c3d007f8a0e7536229162c8b7064

          SHA1

          f61c571c9dc985926d3027b5c1c070bd3edb410a

          SHA256

          6eb6187f35eda98f384d11dfc091e1c1dfd2322d5e75913b76530cde5c405820

          SHA512

          6ee51a8713e588db6c4f96aa908a3ea21c9fcaf9d53420a58ff5a6798c0114120943d4f2893408fa61145447cb9411f974e90063de0a989605b9f6f402906468

        • /data/data/com.xgbuy.xg/files/exid.dat
          Filesize

          65B

          MD5

          d62aa0dda3292239a6323b8516244d38

          SHA1

          f134822734dcfddce1c63dd011cd1fec0f176c33

          SHA256

          b21d25fc5951a6fe40a349fc049dd642c5088bb6358ad5a7fac06135a2f10646

          SHA512

          29844820a29643b7e8c75b9bc00b4dcae4408e1ea62a92c817bc7265306b9f99223f3ffc83c2d0f02a3b74a26c09b80224444c6ef431d42282414b580a1753b0

        • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json
          Filesize

          131B

          MD5

          d54c01c362cc8b487e1f11b984b7d96e

          SHA1

          c3966ee9fdb88823f5db71f63319ebd30de56891

          SHA256

          d0fcaecda412c28cd3981c17e011f33eeec37d13740fb5f7024fe956214d41c3

          SHA512

          a2159908597c3b859a2ddb18554d1350acaa8bf01850043195e56e20366cb3ac60cfb7acfe7392a8842634a4d377b14c3375dc186b1a35cbd459eff74f3791be

        • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json
          Filesize

          190B

          MD5

          e8ebcf1adaf4789c3abe9b255034d1c0

          SHA1

          eb536143b8679472b0c8469072d6166d35ce65b8

          SHA256

          97555dfc25a50a26a2cda6f5a4e31c3334d7979b42b08eb3fa26909522efb975

          SHA512

          d03dab78df776a09b22ab4591a2557b7c8aa506f4f5d9f5be3d8ea23f216a346920705454cecb41386d6eb78a47e7bee91fd095462bf233279ed0117472636e4

        • /data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20240522_log.txt
          Filesize

          201B

          MD5

          485c1d3bc30f989ebbf469409aa2e067

          SHA1

          4e823f64709dd96513ec703355906c6c97e895e3

          SHA256

          b4db09f7c07eef3c31db643639a4fe7cba2b0d358ea2587d2887639e01f42c82

          SHA512

          ac3e735c85a789c139c9babe23be5ea413c3d348cab15ca8cd6ee41dd352e44413ebf98f78284973a1b0ba0987329e5fe90aba86c16f279cb8ce4274ff976300

        • /data/data/com.xgbuy.xg/files/umeng_it.cache
          Filesize

          413B

          MD5

          5a0c916d522515079693c9e9157e3413

          SHA1

          74d96aa1f9f4116e91c7797b0288059ad4aeec6a

          SHA256

          841800661a86a74aaf4097d314e82209f6145a506ab791502d497343c0430182

          SHA512

          0b91984ca20fc5f440ab1de8dda64d88695781236bf171bccdf949e8e1c591e346fb501de1270232e5bd815d36e6d095fc0fbfdedff0e69e1874f354df5a14a9

        • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex
          Filesize

          6.5MB

          MD5

          e9795f4ac90154fbfa4f9be0bf8cc219

          SHA1

          ed4516b59cff0329cdb619aef02b305f62b8f913

          SHA256

          d92af3ceb4890498e9ad673ea8a1d4c94b8e20f6432b69ec11e064d615ea6871

          SHA512

          a1ee6169b27836a126a76ead7cdf03dee197b14c2954c533f2c5246bb48dbac7d8a8b226ad072b7437bd4e2d39a8c4122c08ab84028afab65ce3cb6fe1dfd6b4

        • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex
          Filesize

          6.5MB

          MD5

          316c471e13373205bb78d2d14de594bb

          SHA1

          1844dfa0141a5ffb3c6d22b5d4c8b05866a9d5f0

          SHA256

          223340fd297581f1e0eb42638aad112136d3cc5dd5ea075fc9a2c52b18e90c77

          SHA512

          80b5b66db493adae54d47446f73320892bd48b76b50f890991f0c2b11d6aa56302b7fdafa15481c93c6a5b8b9f708374e443377b5c5afb250ef8cfaf9a05e4f9

        • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex
          Filesize

          1.8MB

          MD5

          5ab9238a7658f6db6e09f787a2c5368d

          SHA1

          75f48fb1354061c10cf0ce81628a7f8517e7e50c

          SHA256

          600b2db9f847e857793c62344886e4c6f0964d1d5c6b84bc5414aa072e06d6f6

          SHA512

          e37b975a409cadaec368acc9eeb53691e207d685fd21cb955bcdb11031b4546da13c7c65e34835d151b13e8cb283b6bc7057a61e851c5a9f1221a28a3e29370a

        • /storage/emulated/0/360/.deviceId
          Filesize

          48B

          MD5

          1d8d16c4e3b19ebf18988530d9b9a757

          SHA1

          bc94c1cce05cd848a53271ecb9c5311e27ffebf5

          SHA256

          abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

          SHA512

          4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

        • /storage/emulated/0/360/.iddata
          Filesize

          160KB

          MD5

          2d5a5fd3baf10e344a005be89327797d

          SHA1

          bac7f0735b01134aa9f2e2cf3ff0a930aaa99c90

          SHA256

          148efa92cda6f518e03a53c895e43eff97d280ca9665bab186f9afd51e922032

          SHA512

          ce230a2582977b988dfb0b6ccfcc1f7a7ca3ebf0f4086ce0545bcc52e36645f7761328753d5c4dad6f9576ffe62f38217288efadbf1db660960ccf54e441f0e8

        • /storage/emulated/0/Mob/.slw
          Filesize

          66B

          MD5

          19402718bfb1c685a726b4e1d846ad98

          SHA1

          02a7e30044a67085f2f1da24e16e4ecfede65b72

          SHA256

          079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

          SHA512

          25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

        • /storage/emulated/0/Mob/comm/.di
          Filesize

          57B

          MD5

          acc2a2f5cb76c41d2e97e0d409b53bdd

          SHA1

          ed06f22ff10e0912f50d53bc775ed2ae70f85d5a

          SHA256

          12ee2ab25175281fd1efab755eb5a5b442e91d263646c52118e6b1e97856f448

          SHA512

          faed72411dfb1546a82a302b6aadf921bf66a09aa4641a6d1d523e5b58c063d5210089ca2d7dec8aadbe1efec4748a8abb36ab9fe1ab18539a92b76730b85419

        • /storage/emulated/0/Mob/comm/.di
          Filesize

          57B

          MD5

          70a42cba408700f9a6c01c7941a8829e

          SHA1

          eab01cc2c0671538795fb0b1146017dc099d0984

          SHA256

          499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

          SHA512

          8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

        • /storage/emulated/0/data/.push_deviceid
          Filesize

          32B

          MD5

          4e011b084fc5e6d3b2e703560d135bb1

          SHA1

          4a58324f0279d6d228ead133a3a3608a569a2305

          SHA256

          ccf332bd41a2cc312c9a4ba7e9c4e430d9fdd4407ae2129c7003c8cb50a25f9e

          SHA512

          9c5b7f51c1e8342888b804f824c27c353adef8e6ffed72254886572136e9f01a8a30a58bbf55a7f77844bc1d67ae7ed617681a3718fce492a1e4463027bb3230