Analysis
-
max time kernel
175s -
max time network
186s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 15:43
Static task
static1
Behavioral task
behavioral1
Sample
67c5c456a19ef4ef94edf666ddcc3c91_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
67c5c456a19ef4ef94edf666ddcc3c91_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
67c5c456a19ef4ef94edf666ddcc3c91_JaffaCakes118.apk
-
Size
16.6MB
-
MD5
67c5c456a19ef4ef94edf666ddcc3c91
-
SHA1
9180c1a88fc45e968829c77a859483677a97fc94
-
SHA256
2660a12e02d535d2c3a8c119f7f6131ebe19ccf6ecf771b4a870eeb306a6088b
-
SHA512
40b2b935c62b4ca9b5b2b1742def4633bc7077b15f2773a81fa8d38c5516fabdb47f5c6f48b179cc4127c37c2f11f69be9897ac82122873c55d5db09c538b4cd
-
SSDEEP
393216:334RTvYoXOoWJSIFqorjyVL8VuK9LwjeqzG:33qTvYoKvPt9ZH
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 11 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.xgbuy.xg/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&com.xgbuy.xg:pushcoreioc pid process /data/user/0/com.xgbuy.xg/.jiagu/classes.dex 4321 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex 4321 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex 4321 com.xgbuy.xg /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4321 com.xgbuy.xg /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4376 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4321 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex 4424 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex 4424 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex 4424 com.xgbuy.xg:pushcore /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4424 com.xgbuy.xg:pushcore /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4424 com.xgbuy.xg:pushcore -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.xgbuy.xg:pushcorecom.xgbuy.xgdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.xgbuy.xgdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xgbuy.xg -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg:pushcore -
Checks if the internet connection is available 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg:pushcore -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg:pushcore
Processes
-
com.xgbuy.xg1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
sh -c ps2⤵
-
ps2⤵
-
com.xgbuy.xg:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.xgbuy.xg/.jiagu/classes.dexFilesize
7.9MB
MD50cd77d33f6caa924c186679fd337f145
SHA1102cf7a11549a293b17e48eb237903c03add006f
SHA2564e1fe7a6d13c8cc085744cb354f09eec14c52bd30c31c5cf0aaf20592cc147c1
SHA51292c2dff4e242edf0e1e788cfa6c34ce4f713e5cf1dd4bc2cf2f1a538030706fc6474aea028442db0743d8f7ddea5d2750e6ec96147b3206ed956cea9f568b7c0
-
/data/data/com.xgbuy.xg/.jiagu/libjiagu.soFilesize
382KB
MD5aa01dd97609092ce310e17bf791069ce
SHA1f000840a8f68ea7beb2e29ea466088daf55609db
SHA256e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
SHA512766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
-
/data/data/com.xgbuy.xg/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/e0bac8c3c005c727bb9b0b2d00be3d7cf020743113c01c46c33a507d6275519a.0.tmpFilesize
79KB
MD53ccf674803e2bcca74d940a369b98a1f
SHA1b82beb53b74476af3563d05f4b49b4628611c19f
SHA256897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274
SHA512b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journalFilesize
179B
MD5558e7c199f33a5304e4801764cd264ec
SHA19e9960d6db26ea7b066101023cb69041c6654ea9
SHA2563c3af02a5f4e4d2b1334666d91e97bdfab7454f30723623c079f4cd9d0ba81e9
SHA512fbd1e67831ef14fa6776c1b265eec6670b9be62e77599609cbbfbc6cba254d219392d37a5ec4d796349d954f37610579de457d005af864e2ac36a8cffb0d297a
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD5d6f43e138b0890303ac8a4e55cce62c9
SHA1ff82f12351b51c4703a96e74df329d780979ee72
SHA2569d3398a9ff05fa1523e340ece5d4ee2b3f1a978e35578d66594a2e62dc4ab5e5
SHA512500e5dbedbb433818c4ee222a1de786e1c8e062530f71853932b0ef0f76cdacb735dadc524a18612316ec046a73f46dc5b4d6eaa9d64ed6184cc028416f36f5d
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD5db30efd81873399643618e43ff24e140
SHA185e54e64a1a0aa02ea460cb18a20aa2fbbb0b892
SHA256ed561d6973819717298177eb9ecfc8a2451335c85aa7d030bcde8d697e947d46
SHA51242d7efc94039e17aecd7dc7008e77a0500d52ea55092f2cb2bd098cbaeb7e7cf50d2d7c7d33d1ffe6d8952a88bf2e3fa20eaa7b453ccc73734f237c7fbf43f55
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD58bf3010d28edbeaafb6d1f4dd1af474a
SHA1a103f41ba978f8896e6a2cef7e40ba3f668bb645
SHA2560fa9b22a4f523644a09d977a27c76241bc758f9d1518e8fe9c36018551ca881f
SHA512d202774ea851e25924dbc70e47ca8118471684638fb76faa2bde85ab0f46034129bcfd1b0171534a5b19aec72feb8f2f65f98829e4c5ae7623e19dc6a6fa813b
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD53a56aba03da9b5b104706faebd508360
SHA1c97e0402d7f2ba0eb4141facd49b35ff0e4461c6
SHA256fd6b28c77f3aa9dd5e7b75793c37149395830219d8011d41690c57ddb8c10943
SHA5126694df221e68e0940065871c961f761bec68eb8eba13b09246fb51ff95d324162842cb47c2768171d50e230490355db34c3b194dbeb91dd454b56ee1abb7ecd8
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD51f9848bb76b7d938aba249a58a0f66b7
SHA14761d7e79cbd2532c75bf476ed738cf33f903770
SHA25658d04a38ef9b3621eafbdb243eda90663059dd40c644570bc0715a0f6b4559a4
SHA5123d4390ad34001a8f476437931556b1b11b826570730b42195e80051d83bf750bc4ba8dfa1b10e47c180319440d76fdc44b10c5d4671b041fd0af130fe6898708
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
28KB
MD5bc7b719100783c8cc3d502068e0139d8
SHA1caf13a241ec6e4ebb7ec1f6e731f41f3e6acada1
SHA2561118965e862c46595893a9cb77b67edeec6004c3c06338c9e10d9e0d36b51831
SHA5126a6851c9c3d3ef2886d7ee1b2feb6e9856bdacc52c8a82e368c01ae853b78161f833d65a05e757afa727e4b81e704fe1b049002d99e8c78f4a302d28e3a23b6f
-
/data/data/com.xgbuy.xg/databases/Reyun.db-journalFilesize
512B
MD5a7c26dbd41f38a6b56221a2e95b87f0e
SHA1c54122aedd48f9eefc6ac238eb14815a5075114b
SHA256adcb5b836d2bf6059a081dae905229cbe10d0ce7c7f28f9b14645ac54368b552
SHA512fadfd647aadf029dfd8054099b3bd9c9b2dc127698650b4680456bd63d4327156b4790f7c0394c5d6040057d9f89cd53557b97ff381e851befc6f112193d93c7
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
44KB
MD5a0dc8dfeab879f06ec64f4fb604a26c1
SHA180efa046e126e2b54a16406476615a9aca869f6b
SHA25675c89a34035216dc7078867e5b456c906a401c35db280653c5955d3b0e873c2c
SHA5123343bfa009e224e53c2dcbe6b416a59bcdd2d1a9000838054eb8cd66f04ac5ff60a1ca02fb24519f5a5e7f683c9906b9d27ac8e9e39c98182ab860cdb7942f9b
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5889cf3629c90515514cc3d7076314a68
SHA1a9586a3c841e2cc15d6027fbd3b3ce39ee17afe3
SHA2561fa0e382e1969958d48763a6fcffab64a9b02e6519898735a70ee0859839938d
SHA5127af6345602fc6c2f9bf7ecf3c287d43ca412683516de7d045f62e47016f20956b93d1c10eeaeb3574d698c418d796cf49192f03cc71b65300cf69be68e90540e
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD52975e332b516e91f14c61034bed361a9
SHA1ccea6687fc48e8c512869e44f17356590704639d
SHA256787dc4439b198597e016eba59916f2b85a74c5e62180ff12ee21b344697c4892
SHA512b00606da7227bc9b1a016c6e0a2dbb35ece3800b0dd56145b277098416f0c20230c476b8e22e0dcfb8af03f6b23e9cff51ec313875e958183373c57fe489339f
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5055a9de505a955b604dc598b88146ef3
SHA1a2dd1a80d5d1ba5c494f90b7271c63687bc0b914
SHA2561faf461b3978cca97f764e1638489c920279fe62bcb51adc09dcd0535e57b9fe
SHA5128540bfb6ff8e141440004203c015d13bba21e0032fe069e92f751c2a72cb27d6b61c3bee30e6093b7c1b16977c7b87b451d990d77d363a5fc1854c8152acff3c
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5a0b681a2f4da0128f58d0c806897e2a1
SHA1b3fa629a5eac839b110ed9b7da7cdcc21e19e7ab
SHA256ee0a47109c15bf437186175943466a5bd0ce2bb496fc67e23bda23ae61cd890a
SHA512e6d39c8c0d2cbf43741d25415b248b3b62d592218a4ff90c79b6011e1a1093bce976a996b97e1f6c24ea0de6a4ed18d3cc0380d07e0ccd3764ad2bc652af9e2e
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
24KB
MD5275e77e44c74963d31ea51f1ac8645f5
SHA1c5f98427d9a33a2e5ead3a4dfcc0da2e31264526
SHA25650ad94c4fd135d9fccae5bd435b429a0cfff4ad2ae7b1a46340be61cfc8ee798
SHA5122a2c96095048e3b2a2981bb60f2a483768f578a997f59417f809afd24e57c647267ecbf58e556c1bd001b85165b7b85c2057c04cb159c25f785bcc3099e3a1d8
-
/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journalFilesize
512B
MD51c775c81ee11c491b49efe8a65667799
SHA1ce935de37318c056808573bb12d2a1baa119b6ed
SHA256f264b9430018e314bb0d99b5194f62418841114c243f15381f6d0961239998b0
SHA51292a35abde7402978195986eb6503a1a495b7a8555457f60e58db85ffdacd8b121a9099913068e91497924dbd958f531e740a8226b1b2849a2cfcba6e6006cae2
-
/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-walFilesize
140KB
MD576f2e649b4292634e8f97036dc02fd87
SHA15a1b5f2cd778144d683ed80d86833427573fd736
SHA25697df07f0a8f9f5011f6c83f062f6f804578d790106c80bd423f99c1bc33a88da
SHA512e2cbdf43132136f2619ea96d0c35ab85fb061da0c9309a26864c15d5946c3891bdcb9af688864875c39b906d29a098a7bf7d6a1acab9c9b094531ee89ea5eb78
-
/data/data/com.xgbuy.xg/databases/cc/cc.dbFilesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
/data/data/com.xgbuy.xg/databases/cc/cc.dbFilesize
36KB
MD5ce6135aa1b1fe4f2c2db2a546d2a5558
SHA179b59582154017aadab783dc266fcb158c252940
SHA2567b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA5122839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-journalFilesize
512B
MD5569b1f9be479d91fbf8f697ed8221953
SHA1219a4f9bcd37b5e8109c65f68f15285d18e5f5fa
SHA25698e0d8baf36255c2d8506b6e0165e1476b4247ebfb5e690293670e06ef27d402
SHA512f2b817cb275cc0cfb197f891a60207c033c8e442eecb2433281ee420f120a87421a4b439626f139150564507b6572550bf7105d38035527f1416e3a55b63c167
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-walFilesize
48KB
MD57a2c8518b338900dd47e8097cb199acf
SHA1d2d19474157f2626a2ae20f70dddd44fc49981c3
SHA2568080697f9ff41c74342d84af699bf027a89d182e8acbd80d2e8d644019f479dd
SHA51272a78caa9994243ac152150d85cea492eb7c819fabe27b0fcb40c508a48dc1b2731e8bdbd1328742367881809963c8352b4a68585c570d592ade0f6b1d24cf7a
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-walFilesize
16KB
MD509c5d1f65cf639f8f5e1168388b4d4ab
SHA1ab60794d61f186c1a8b62fcf6590f397e77b58b6
SHA256cae68c4ae60433f2ba037d32222795d12f3133200cf88ea7bd10ca550389f17e
SHA5128ad8d56307dd8ae7d70a5fa5abc1b93abc9652996eb396a53b5e8e278a4984baded0cbf3ee9871eccc02b7fd97c7ebac6089693f756602d9dbedc9af1b666b52
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest39995181792382332586699837428746669934-journalFilesize
512B
MD5dc41413f48d1dc714cc790ccfd7e9d34
SHA123394730921ee3201f1d6a321a4b3a2ac9a5dab3
SHA25622df58f022c671c23b651f768ad688dabe5f698a36aed2c1763b9bdc6d8ee245
SHA5128ec618ddd1b574cbed4b6254321ff1be7a86fa57f40dfc981c97bbaa1c4e894458f86109f5074c20eea4a21641152773f7b21be67f1462fe2beed0d746d09108
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest39995181792382332586699837428746669934-walFilesize
48KB
MD5f6d7267d1817a807d7f712a6bae8255b
SHA1dc24e77b6af4b239eae7083a57dc598bbbd480dd
SHA2564bf219ae76c5df6762a78546a866c0e9844f98be589d50916e6113190472ea8f
SHA512b9c3213dc8380b80545653139d685e9c577c275ca534d43e1a1aad9d8eec4b35d7c5c84bf818a157158ae4725c4ae8a1040c42da7d4260af338f7dc54173c90a
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
32KB
MD5bda95fd3b8ff94406dc3276b62cbdd88
SHA10b31dd1b467f0d1a5c00f8cf51f92845f2bddba6
SHA2565ee63a8368562513adf8befcff741f61dbcb8f3ec574c951af9209b8a1e5ed6c
SHA512b0835d7e7d76035356a9795416ec92bf956c6e20cc8ee7c82e47b1d532efe49f93bed3cb43934142a557ffbbf60e201d66824f63021f4527582858c3be38f21f
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD5083036232fb8d2ebea1a693f936f8079
SHA11bb8e688756490618106655a54fef2b0c0e68e58
SHA256dc5a94a8655f8fb80dbcfb705ca04789eb407b519a667aab602fd37b65feccce
SHA5129d7145f8c574ae57fd72df648b8cf4c8a1d1ccfd9ee4a7a905247367fd913c4ac742f791d438bdf56ecd9998704c785d999d170d2b9eff61c366d8408287cc9d
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD5f649a7f435f4e3bfd0daf92f98c7400d
SHA1470dcc251b66fa18069b5b43c2fb098a8508db7f
SHA256f2978c657b81a507e8e4843f05fc6f1b621923de627627e0f7a09bb3f6290ee9
SHA5120b5ebe1268fb062906d5d4508209aa801a38224a83cc6c75c22c53f0383c54043cc2ffffb0cae3d1bf0ce92704160d91c4ab6380386182ccecb9959181d874e9
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
32KB
MD5d604a3bf1f8d992cc320ea5b1f7609bd
SHA1247f88df0b55c7d523ea5398637711a0e4a483a4
SHA256329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17
SHA51267e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD59f92716909898e8756277e2faa556ec3
SHA153d19eb9ae195347630a83155e37fae344f673ab
SHA256ee1b08d3053c23d004a70ace747777a4692798fd5972f6fbd9e22df95ca093c5
SHA51267cd24f8cb161f9d8f1c79567c3f0282ef09a1b554d4306f0b7b03fde1b727ec8cdcf35e2bf746dddfc0bab7684d2fc69283bf28da88cee39b7cd9ab56da27fa
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD5a0de9fa963e49e2966a7b48139a76bfe
SHA12011a59ebb5d80638bd50dcf096c171dbf36a3a3
SHA25622f79d9a6bbc2b12ebc96e3ccbc9d202fff71cb870beab9ece64d2b694de35e0
SHA512fa72ec86def0aaa8533f799f35bf331489412c4db461cee95cd0bd6c0dd4b4059cbd6d37e4161af6c3738b7591ec7035af3e5f377e4bde3fd50e9327d55f826a
-
/data/data/com.xgbuy.xg/databases/ua.db-journalFilesize
512B
MD59f8cd665e916e2cd54fdde2241d2e520
SHA15098b2219ab3f3755b05b7ee239460e9755dc34b
SHA25651cdf93015cd00e8f1f4c40c65c528d6199d472ca6ad4be4291015a6b8725568
SHA51239656c3a06b5f48a4c056eed671ce19e0112fa64b91f6e2d3b1486ae0130a4d7cee771464af8f44a05219473cb15bb6dadd6fbcb020bf70d95194705aeec3266
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
56KB
MD5f5fdca50e8aac8cc740e64483d0db4d5
SHA16504ca3422f413aca4cf95053185b7131c28d4ab
SHA256a3c22bb35e534146892f4d9df908302577788b907b414a091bed50dd76341abb
SHA512e2fd894ba7e1ad13ab3ba620d49e3a10999d287e9e0656c4e334067ba0ffe16111937aeef081f30cf1afcece0b3a36e89904a275b3713fe6113da30bd17b1150
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD5b6fa279dd84510228f9607c7f476b937
SHA1a668f29302291f76a3d61fd5833b71247264912d
SHA256455d12d5248b6b0e6dce84d9a1422b96c663c2066198017598ea1b5974ef77f1
SHA5121fc189242f47d1a5f835314f512df4509cf78422dbfdce93011d53654cdccf7ee0d2c9d82e0a01902a4f990765b1d344e4ee859bc86c270f7c3c014d04c25fc3
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD556fa543618ecebd9850bff5b99ecc24b
SHA16db5599e0a24ee0169f7dc2a87eb3fa950ef5593
SHA256f09a342a78b884b7c0e3a602ed58d1ba879ed0424a607c030f4e607174f4bc13
SHA512319e90ddca04ec6fea8e44946ec5a17bb327c08327f4ab15d5f29510cbe96d94ddece439ada274519ce010bfc52b20db0e9c952624b7cc81b2175209c2e893bb
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
8KB
MD5254e3531d39c50621e6ffe28d6f9e234
SHA1af22c1d653464b337e6ccad09d0e837312982eeb
SHA256da718a38903b61739516b8ebd4937bc4d2d001e905d0d16e325037c45bd53546
SHA5124f9c71aaa2253991afa743b011e6972c3144bbe1c8504eb3bb78fa6b23df071147f64831b379dae808167bfbc7803be543546fa4478dfd8c42d064b3c606cac4
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD57a713ba9e41ed73f42ffbebbacb6cdd4
SHA1532b05be812fa7ced8b9cc3ef51ad1dd1224ed71
SHA2565eb7f8ff17c0bae32560b4c8f6620951bf3fae75d719cf6fee660e802b0c4628
SHA5125df96cdb08150e6ee92d0ce760c9ea706c012b579d815a617d93660736457b10d278be3bdadcd8a371e33951bc36086ab9746bd4ff7ab2321fea3eba0a8798a9
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD5e91c98476835a1c8643ae4aaa48d1428
SHA144fc77c21f1bab84d55c95bb77b022429e484a5a
SHA256f97952aecd93f5fb55e0231e300978ae83c9cb56f633b9ef230d58c703c3492a
SHA5128a839147f6f77621d32c3634b56f081b29a72e21eb44958efa7dea0ad0742d0d94a6676abc5e8dd05fbf4f959d8ae228c149075cd1c6e50c7b03cf27e729b5aa
-
/data/data/com.xgbuy.xg/databases/xinggouFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.xgbuy.xg/databases/xinggou-journalFilesize
512B
MD549619e5def286093898aacd3a90e51a9
SHA1c11c81468e23a289490ec9e324e4b9cb83138a2b
SHA256f79e8323c55947c6fc8d2071232ffaac257ecc808e8a303c89689de3a213a0da
SHA5127733b75925142665b83302d00879376f985bf494ebe5e177b48aac19a0ac681557982182969127ae08889b576cc0c240645cd9c9cc8aa3e3a8b9bd50690f6046
-
/data/data/com.xgbuy.xg/databases/xinggou-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.xgbuy.xg/databases/xinggou-walFilesize
64KB
MD575251640852104dcbb4369efdc9e00f2
SHA115351a449d97e629c427d6cc00e2098158bca64c
SHA256fe9a2486d940f92084e9bc67e4e33293a94d246d62228a1d9e26e042bfe0641a
SHA512850b3c95c6996ffd78edc055669085b6eb18d3a5d32feda806937d7856d8c6b7a2328a76567aed2a38ec1c8968df2db73322e4406fc5c729d4b58b418aaa7293
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.acFilesize
40B
MD53911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA2560ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.acFilesize
40B
MD581024874f926b0c0c9e613997c9370b1
SHA1a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA5128ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.diFilesize
340B
MD5a5a3db5e4ebc2727b304781532999f40
SHA177520f999396c7e904c78515489605a1450cf7b2
SHA256c8d3dcdf46bf656a4ddde9db46204881586e19b246ec49e8f1b35cd568b7d6dd
SHA512992edae934289a4425c154c048875d6711fd5c6d4f9d5147f358c482c10f0fce4435499751ebdea83d5fffea4ab38266adfa28e72ca486539976787c5a425331
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.diFilesize
340B
MD5a074a85cdb5f870b3621f9db9397189b
SHA1826fd1c30d54c9287ff23fd5088589aabebd5224
SHA256a408b51b68e6a441790836cbacd22e333f6a58d911203a40bbf8a2e5253675f4
SHA51275deb19f079f22e2a19ee2fbf5652a5935f4f33593aeb7d47fe5224cd3604999c005821fd456a9d9e6f958b7022a8fe84bf70bae7b18640d85bda8f19ee1f25f
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.icFilesize
40B
MD51bd86b90e1b355f123e5ce8c93c3de53
SHA1bee5683d6124650c8be0b3740ad66e771f29b178
SHA2563ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
SHA5126ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.riFilesize
314B
MD582d10e082565900ca41be5c34ee22901
SHA1e599890852bc5abdf894a9ca33b85f2bf2a1fb41
SHA256db8edbfac4f97606e418141a3715e818781cf73a106aa21bd0f216d715ff0bf0
SHA512779e32c5909442ad7c57875fbcde2969e31c9330d072f12633d683e36906b489872cd5e94fc1619edbbd09df62d171db3df72724d1cade0df3e39c217c95abf6
-
/data/data/com.xgbuy.xg/files/.jiagu.lockFilesize
27B
MD53264791b81efe58d2c2bbae7c7265f30
SHA120bb6a54411eb44d290d0517017a4a029f1a6bf0
SHA256a7ce8b0f7483918b64d3c71240dbe98ae61635a63d7108e5dfeafefe00c5ec2c
SHA512ab16d8556c1f391956624ce448bedf6ca8cf56abe47d83dfbd7a867c9280cd59ca15dfb210b2fa39f3bd04e46dbc90e998b1b9bba76230eaa8e11407dffca78a
-
/data/data/com.xgbuy.xg/files/.um/um_cache_1716392748080.envFilesize
1KB
MD5426b287e2c30728ba92e9b8d79b1ef60
SHA1b61b6886f2e62622e3da390fa8cbe387f097a0e0
SHA256bc0add48f5d14ff71c316da78a23337918615c668577d19d73842f44bc60e4d1
SHA5123e405ae7e610501157cea9f8ed69fdc46c67a2e369523abeabe065b7235cea4650cbffe5fb16b97d4a65db084eb8d8de076a36c968b46291697e08b48fb89b97
-
/data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.jsonFilesize
162B
MD53d37fe2cfa0c8c82369daa050aabc7b3
SHA1131881ee2f13d5fede2a7fb5c65e3585d1199a0b
SHA256a451ab42a080f19f2622cfa9f797f3e2cf29e909fbb17001d54fb544bfc179ee
SHA5121c6e8e604ba761e4971ccaf7d7e0b44cc2209d1a16b9ffa13620664b41fe0e5d69972746ae68be8a6af165f93ca40e773e71a785a8d74208f970b1d5d2b9d6eb
-
/data/data/com.xgbuy.xg/files/Mob/mob_commons_1Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
23B
MD58e24e79baab91c4d0604eaa9006a0cb3
SHA1e427afc94a4b957a7096f73e395a10ea404c076b
SHA25665ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA51245bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
62B
MD553647322d2ed3f9d4b35f9f16ff094a9
SHA174bd4097c28fcfc69e113ae6400b5a45e5a6be55
SHA2568f13be866f4780abf0bd8dedbd64a81b287da930e33d602cb113556da17ade1a
SHA5126b6393009feae1b9e7c198e5d67c618eee8f9fd0f7cb35cc0bd4f515fda9e58bf825d63645516f2e14a6f8bd5e550c6a29f124bcfe048ca7643c3824840cf5bb
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
86B
MD527a5c3d007f8a0e7536229162c8b7064
SHA1f61c571c9dc985926d3027b5c1c070bd3edb410a
SHA2566eb6187f35eda98f384d11dfc091e1c1dfd2322d5e75913b76530cde5c405820
SHA5126ee51a8713e588db6c4f96aa908a3ea21c9fcaf9d53420a58ff5a6798c0114120943d4f2893408fa61145447cb9411f974e90063de0a989605b9f6f402906468
-
/data/data/com.xgbuy.xg/files/exid.datFilesize
65B
MD5d62aa0dda3292239a6323b8516244d38
SHA1f134822734dcfddce1c63dd011cd1fec0f176c33
SHA256b21d25fc5951a6fe40a349fc049dd642c5088bb6358ad5a7fac06135a2f10646
SHA51229844820a29643b7e8c75b9bc00b4dcae4408e1ea62a92c817bc7265306b9f99223f3ffc83c2d0f02a3b74a26c09b80224444c6ef431d42282414b580a1753b0
-
/data/data/com.xgbuy.xg/files/jpush_stat_cache.jsonFilesize
131B
MD5d54c01c362cc8b487e1f11b984b7d96e
SHA1c3966ee9fdb88823f5db71f63319ebd30de56891
SHA256d0fcaecda412c28cd3981c17e011f33eeec37d13740fb5f7024fe956214d41c3
SHA512a2159908597c3b859a2ddb18554d1350acaa8bf01850043195e56e20366cb3ac60cfb7acfe7392a8842634a4d377b14c3375dc186b1a35cbd459eff74f3791be
-
/data/data/com.xgbuy.xg/files/jpush_stat_cache.jsonFilesize
190B
MD5e8ebcf1adaf4789c3abe9b255034d1c0
SHA1eb536143b8679472b0c8469072d6166d35ce65b8
SHA25697555dfc25a50a26a2cda6f5a4e31c3334d7979b42b08eb3fa26909522efb975
SHA512d03dab78df776a09b22ab4591a2557b7c8aa506f4f5d9f5be3d8ea23f216a346920705454cecb41386d6eb78a47e7bee91fd095462bf233279ed0117472636e4
-
/data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20240522_log.txtFilesize
201B
MD5485c1d3bc30f989ebbf469409aa2e067
SHA14e823f64709dd96513ec703355906c6c97e895e3
SHA256b4db09f7c07eef3c31db643639a4fe7cba2b0d358ea2587d2887639e01f42c82
SHA512ac3e735c85a789c139c9babe23be5ea413c3d348cab15ca8cd6ee41dd352e44413ebf98f78284973a1b0ba0987329e5fe90aba86c16f279cb8ce4274ff976300
-
/data/data/com.xgbuy.xg/files/umeng_it.cacheFilesize
413B
MD55a0c916d522515079693c9e9157e3413
SHA174d96aa1f9f4116e91c7797b0288059ad4aeec6a
SHA256841800661a86a74aaf4097d314e82209f6145a506ab791502d497343c0430182
SHA5120b91984ca20fc5f440ab1de8dda64d88695781236bf171bccdf949e8e1c591e346fb501de1270232e5bd815d36e6d095fc0fbfdedff0e69e1874f354df5a14a9
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dexFilesize
6.5MB
MD5e9795f4ac90154fbfa4f9be0bf8cc219
SHA1ed4516b59cff0329cdb619aef02b305f62b8f913
SHA256d92af3ceb4890498e9ad673ea8a1d4c94b8e20f6432b69ec11e064d615ea6871
SHA512a1ee6169b27836a126a76ead7cdf03dee197b14c2954c533f2c5246bb48dbac7d8a8b226ad072b7437bd4e2d39a8c4122c08ab84028afab65ce3cb6fe1dfd6b4
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dexFilesize
6.5MB
MD5316c471e13373205bb78d2d14de594bb
SHA11844dfa0141a5ffb3c6d22b5d4c8b05866a9d5f0
SHA256223340fd297581f1e0eb42638aad112136d3cc5dd5ea075fc9a2c52b18e90c77
SHA51280b5b66db493adae54d47446f73320892bd48b76b50f890991f0c2b11d6aa56302b7fdafa15481c93c6a5b8b9f708374e443377b5c5afb250ef8cfaf9a05e4f9
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dexFilesize
1.8MB
MD55ab9238a7658f6db6e09f787a2c5368d
SHA175f48fb1354061c10cf0ce81628a7f8517e7e50c
SHA256600b2db9f847e857793c62344886e4c6f0964d1d5c6b84bc5414aa072e06d6f6
SHA512e37b975a409cadaec368acc9eeb53691e207d685fd21cb955bcdb11031b4546da13c7c65e34835d151b13e8cb283b6bc7057a61e851c5a9f1221a28a3e29370a
-
/storage/emulated/0/360/.deviceIdFilesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
/storage/emulated/0/360/.iddataFilesize
160KB
MD52d5a5fd3baf10e344a005be89327797d
SHA1bac7f0735b01134aa9f2e2cf3ff0a930aaa99c90
SHA256148efa92cda6f518e03a53c895e43eff97d280ca9665bab186f9afd51e922032
SHA512ce230a2582977b988dfb0b6ccfcc1f7a7ca3ebf0f4086ce0545bcc52e36645f7761328753d5c4dad6f9576ffe62f38217288efadbf1db660960ccf54e441f0e8
-
/storage/emulated/0/Mob/.slwFilesize
66B
MD519402718bfb1c685a726b4e1d846ad98
SHA102a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA51225254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b
-
/storage/emulated/0/Mob/comm/.diFilesize
57B
MD5acc2a2f5cb76c41d2e97e0d409b53bdd
SHA1ed06f22ff10e0912f50d53bc775ed2ae70f85d5a
SHA25612ee2ab25175281fd1efab755eb5a5b442e91d263646c52118e6b1e97856f448
SHA512faed72411dfb1546a82a302b6aadf921bf66a09aa4641a6d1d523e5b58c063d5210089ca2d7dec8aadbe1efec4748a8abb36ab9fe1ab18539a92b76730b85419
-
/storage/emulated/0/Mob/comm/.diFilesize
57B
MD570a42cba408700f9a6c01c7941a8829e
SHA1eab01cc2c0671538795fb0b1146017dc099d0984
SHA256499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f
SHA5128900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD54e011b084fc5e6d3b2e703560d135bb1
SHA14a58324f0279d6d228ead133a3a3608a569a2305
SHA256ccf332bd41a2cc312c9a4ba7e9c4e430d9fdd4407ae2129c7003c8cb50a25f9e
SHA5129c5b7f51c1e8342888b804f824c27c353adef8e6ffed72254886572136e9f01a8a30a58bbf55a7f77844bc1d67ae7ed617681a3718fce492a1e4463027bb3230