Analysis

  • max time kernel
    177s
  • max time network
    185s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 17:55

General

  • Target

    681c366ff94e2a930fa7f021ded75e85_JaffaCakes118.apk

  • Size

    16.6MB

  • MD5

    681c366ff94e2a930fa7f021ded75e85

  • SHA1

    7f05053d8c70e3140abe4a5131fc43d3e94e6a5a

  • SHA256

    f024f97046d58efff0c01ce897f84c175518b5674708691f9f3a8d3e749a8e37

  • SHA512

    f62603b3e802029cb4b250e3b6189568cdc82022163284e01f5fc78ccd14cfa8c2e88679d6b931b99c2fb39841dc33d9ef61c0f15ef27266419ad2cbdfb3783c

  • SSDEEP

    196608:o1YsJlaCGns2Bx+FgjwXiO73G+YQ5sgE2VL8ffFuap9L4jEwPxP80H+WpRFdV:o1pJAOkxNwXio3jNVL8VuK9Lwjeqzr

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4294
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4321
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4352
      • sh -c ps
        2⤵
          PID:4660
        • ps
          2⤵
            PID:4660
        • com.xgbuy.xg:pushcore
          1⤵
          • Loads dropped Dex/Jar
          • Queries information about running processes on the device
          • Registers a broadcast receiver at runtime (usually for listening for system events)
          • Checks if the internet connection is available
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4398
          • cat /sys/class/net/wlan0/address
            2⤵
              PID:4557

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.xgbuy.xg/.jiagu/classes.dex
            Filesize

            7.9MB

            MD5

            8c75e390a9ec968a05dd88761f097992

            SHA1

            1e95065d5c550c5d7a9ef1475d658072385b4049

            SHA256

            99b73b316ba1fc5060f143bfe4d00136c83c7daea9b4371a23f27054b2bfd839

            SHA512

            ab4068f08224c9b0b493ac6d4d55abe5f0f9413e4d5929f3c42919ef7cb5a5a18e19af52878383521459e881f6392d2147d216f79af46cf87874e74bbe108400

          • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
            Filesize

            382KB

            MD5

            aa01dd97609092ce310e17bf791069ce

            SHA1

            f000840a8f68ea7beb2e29ea466088daf55609db

            SHA256

            e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

            SHA512

            766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

          • /data/data/com.xgbuy.xg/.jiagu/tmp.dex
            Filesize

            284B

            MD5

            f1771b68f5f9b168b79ff59ae2daabe4

            SHA1

            0df6a835559f5c99670214a12700e7d8c28e5a42

            SHA256

            9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

            SHA512

            dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

          • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/6936001b0843c9baaf6a3f320fef658f74b649cd15210e9aafd88153117e16a1.0.tmp
            Filesize

            79KB

            MD5

            3ccf674803e2bcca74d940a369b98a1f

            SHA1

            b82beb53b74476af3563d05f4b49b4628611c19f

            SHA256

            897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274

            SHA512

            b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f

          • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal
            Filesize

            179B

            MD5

            572e99e56905de66bd575bbfb70c07ef

            SHA1

            9c450ebdf2a4591fb24ba098b7d83e7cc6b1ee8a

            SHA256

            48781da7a8683a58fbe4ec6bb4291c553e94b87c81e81b52fa94a3db6f8f614d

            SHA512

            c6e78adb63e30af05f6915f2e8416460235d888697c62f0e3dcdf48803143e5052c2d925607cd61e7a273ce684bb021e4db9c0d15082d27b87a50ce0c3aabaab

          • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp
            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            20KB

            MD5

            4a063d4f68ed1d866275688ea0c48899

            SHA1

            00c3eeb3c7c67ea52dba8b20bfec4b7dae1a6cfd

            SHA256

            e7206739c6d8743edd8ccde3fb2ef8a4acc9a24b2d1cbb29296d16a07194d76e

            SHA512

            aa6fc41675bf5185546feff1f1574ed5257fb6ec0b1546098acafd1a03c99f229f0c1ac619e7820ef4133c55d5e3214f09602bffbdd34b956f0c4dfc80f71bf4

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            20KB

            MD5

            f0cce2bcc4f1651e3fbfe88a9858e1fb

            SHA1

            12eeb459caa51e21439d5efc865c9e9a14145165

            SHA256

            de9f4f419d742798069a0e7594a58560a1867342a110f718e8b71c16db8e1adf

            SHA512

            916ccf825f45d2824dc784481cf60ca4dac6a82f7d6ad048b80dddb7d139319d2533ac017c0479e8475576a4e1ddda9b940bdd91d6a8e163d43e13834db0d112

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            20KB

            MD5

            42c3330d22b4ddf1ca7fcee0c5237ece

            SHA1

            cd1037cdf0a29808562d5cc0ef057058e5d1feac

            SHA256

            d59a17512ac7d4f3942c3ef45fbff08ffc2dbf639995d782521e726393043fe8

            SHA512

            94e42918967238af29a2a1b02b9957e04b50d5993f3e2da35ec3b9ba991b8fce712a50a5f9152e0742ec9ccaa19705905d6a215ab250fe6154900c1cb7963bf6

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            20KB

            MD5

            9eafbc07b0e92063c97f5622dd48ae69

            SHA1

            5efef51da7cbc698a98d0e6a5e5b5b87223ca719

            SHA256

            5aa2d54361ebdb788277006f52656a3e6804aa2fac51099ee14895eb903687d6

            SHA512

            602f407a755bbeaeb614c4c8019a4562ea940d2d59dc779b67a80b2baf01c8399892ceb08e58a551cb8fffca039e36ce86900ba5ebf0561120542bd02b06f562

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            20KB

            MD5

            90eaf294b608eb389a2fe2d6670704ca

            SHA1

            1ce320fcc978a96c73e8139318d8e036371777ab

            SHA256

            ec389e05cb7c78a0882f44e45cb432e7115c7df53616d32bb608b7c64aa41b5c

            SHA512

            1dcfc5b16e0b210e8293ac4505dc3b2f568f4b516d87f7e480243be5bf9de1b45809a29f5cddb69662c1d3d119c71a4499249eea1cc962fbea0a1868c3fe5d10

          • /data/data/com.xgbuy.xg/databases/Reyun.db
            Filesize

            28KB

            MD5

            d990267f7b04cd73b77baaccb2c2cf62

            SHA1

            626140e3890dae34556dd509ea6738216a5236c8

            SHA256

            b39bef91e0fa6bfc3b3e57fa6e13c559d5eba9cd21f2cbb1a0d6536565ab3b88

            SHA512

            7a3e4ab7ac4f55dfe9658e53f25c5c99abbf0cd60ed13908ea73bcf05bdbd6ab742879293bd40f4a0f0c6dbc1bbb66e9be2814a77b6511f3f2b7b55d9b1c42e0

          • /data/data/com.xgbuy.xg/databases/Reyun.db-journal
            Filesize

            512B

            MD5

            a8bdc61c8c1b34d49bc2cc8021dab208

            SHA1

            89ecf913ba47334a3d94d3107aa250d5e50c1096

            SHA256

            0859edf1f21d7ee6ff33d4d350c8f1d7bad7e773a9bd70f839a1d82401a18656

            SHA512

            c31eddc6558e49d5a6d29eaa7fc1500ed2c59f7434fbbb6c83e9c5aac6edbe7ebfdf28817d1a06338a534a15f20fec0501dd51c8fd202474f5bf9228132acc1f

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            44KB

            MD5

            1669586d537acedc42710e709c9a921b

            SHA1

            f9d77807701a89d6fef26febeeca569d818ee740

            SHA256

            15ab2aa66d49d3af596a38cd3521bc32409c53a923d27a1524c7f05b5ed046c5

            SHA512

            32cab2727181af526b2737c0e934cc7bf93ebe99e022163851b741972c11a1fcfdf77e49c7500346620a9535053b98723fdd39504e28a8cc20105749ebbbc65a

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            8KB

            MD5

            f7353c32fe4859aa6e80c9ac6416d54f

            SHA1

            db72c47ce1222fa44fb4afce3f84685cbb6be5e7

            SHA256

            2e7c03377ee5735c8ecfd641a7a619438460ef78276803d347f71ff357079153

            SHA512

            ec892ca05cfe76138afcf01adee37dd844f0117654cebebce002830c25d3bfec8e98b8a6f7146cb3cf149623a4fde291231d9ab7cff1f253a0dc9d33bea2e736

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            8KB

            MD5

            88d479e12f67c16611e11debab9872ba

            SHA1

            98f34978e98d40b51b251261f5594a5dfdc3e33c

            SHA256

            3068a595b6ae24aed30e6376f21b5a27d4397b4e308f9470fca6d0c5d4bbb995

            SHA512

            c42f0daccca7eb1886d442540e14c942624c2b050f07c303d12d4fb99c04399c11b44449994e9465952cfb007bd7013fcfc859df97dea4e995c3dc10ef29c21f

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            8KB

            MD5

            877c7271070a2bb70c2e86b509923b34

            SHA1

            7a55183e70fe5ab1f57f02cfcc9ef6c802fae93a

            SHA256

            9d0052db136296abaae670a8e51b06acbf61983f39a5b0ff0f1777f4431ea4ee

            SHA512

            3b755c8adfc7410d7acfc550fcf4d4e2a15602b0212363e10d06bce65ac486b634a5b29731a0b8a51a543dfce9b413ed9bc536b427867e671421fe2010da7135

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            8KB

            MD5

            0680b172f7b7250e3c2057ce87604ad1

            SHA1

            1da9b3de154e2bf9f5db23da45303c13c3058b40

            SHA256

            ae0ef1c8696a612da2ea246731cd92f0c006592061e35d4295831f6d5674ef3f

            SHA512

            fbe5b28152f0adeb71d08642343cd4c6826e714f1dc0bbf58c9acbe0152179355aeeb85061547d6d02cc61e27b2f115c35d54dcd24d11aebe6482043cc1bc8f6

          • /data/data/com.xgbuy.xg/databases/Reyun.db-wal
            Filesize

            24KB

            MD5

            6a2bb5227effb17078c0c96371ef4ee6

            SHA1

            a69158fdf49f4cc7600c58e86d72b83082c748a8

            SHA256

            2ae85d6086656d057df8519b2bd911f7edd744d28b520d6e5373c345449a3fde

            SHA512

            c00f1adf31837829139b9c364a6f55adea6eea2166e8d6362cfa4d75ffc4c463d360848bdd22ba7bc908d8ff7b3812eaa139f079e4e23c696078f7a86e994c08

          • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal
            Filesize

            512B

            MD5

            108f2f062157546d35bd17edd99b74d2

            SHA1

            a32a5d2f0d6109f12b87b4a43c1fa0f7b92efcba

            SHA256

            283fb7e1a5c12ddc9799801e2f50f4f7c5cd86063cab0aad74e287f91d1cf77c

            SHA512

            110624ac4704d86983eb7f2eb01eb9aa0ce0d592d78741bce794c614c52a9e9ed4fa8270171b576ee11ea61902ad595d7bb28c62cb1b63c3f48446fe3e494879

          • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-wal
            Filesize

            140KB

            MD5

            0920f80d710f3722e8261c3e3fe8d40d

            SHA1

            9e304087d1e2d29456bc7c3757e56105c28b3965

            SHA256

            73d93e74c5e395a35499192cd0cd3dd0641a44b6dd27f0a9711967f38c9246fc

            SHA512

            ce855bafd757c434e03d1dd4836c8d0fda35c75a7a8a66b7a4ee264779359e23f986ad222b0a826bd6197bd2c7fd1d0379070a0e9a14d5544f849aa490b2640f

          • /data/data/com.xgbuy.xg/databases/cc/cc.db
            Filesize

            36KB

            MD5

            5d7ea1a23af19b4340cc8d90f28297d5

            SHA1

            4cfe95b23a9e98378d69c4290af81b51fbe76aea

            SHA256

            474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

            SHA512

            33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

          • /data/data/com.xgbuy.xg/databases/cc/cc.db
            Filesize

            36KB

            MD5

            ce6135aa1b1fe4f2c2db2a546d2a5558

            SHA1

            79b59582154017aadab783dc266fcb158c252940

            SHA256

            7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

            SHA512

            2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-journal
            Filesize

            512B

            MD5

            b40af7abde15f306ebaa150b3f47e260

            SHA1

            7ac69dd391733ac5f1fafd0af3587a02d88c149a

            SHA256

            5097a4aac0382d81b0c6954771e191427c64f156b5e3c4456367fbc6d5de1dda

            SHA512

            c83a7086294c7787462a8fb6feb8c58c3a076b6375f7b56f921d3a22bdc5cd14c28afc65d98304c8d81e2da0fc42bb6ec36352fe126ab13e0f8eab023d20c447

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal
            Filesize

            48KB

            MD5

            68ba42ccef355c282d33f5f5cc87c5c9

            SHA1

            deeb4e1930f7358c2b4eba5ceaf37094991d34ad

            SHA256

            bf84dc70feb213453798dc3950998d73992c934abefd986be9c5685ab580cb4c

            SHA512

            207dc5b087a565ceac30cab9151763d64358cbb02c0da9706ec19f9dea4327ae28edda47721a2aaaebb483f6e5044ad54f52684ac599bcbb83fe042bbd1ed2ac

          • /data/data/com.xgbuy.xg/databases/cc/cc.db-wal
            Filesize

            16KB

            MD5

            a7ca265f6f398a90f01fc674356a5d28

            SHA1

            3d44d052c4e9ddc2a732bfbd347bd08464bae172

            SHA256

            d68a233c84d1097d0114282e1d3b0b15db31e049a5f3fb3271abd1b5b8dcdba4

            SHA512

            72b0c526715ffa71de659ac7eed0440cbb3dcfa878237d667b66a0d3816d56f6fdd7f947b6ee32944fb42d09d161c2c5e8bb9b741cfc46e6f851bd96f0bc9d46

          • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest29344629250127783453056847431962027643-journal
            Filesize

            512B

            MD5

            aa5b2d6571606d945ef609446aeb275b

            SHA1

            7bc8a43f31678726ba1a6b068b38e29403a204ce

            SHA256

            7ee34010e13b75240434fbc2ebef407ace0a9ac567035780c264bc2d0fe2c153

            SHA512

            9b9e42de85ccaf60fda72f48bf6743c918d3eb1b9c85fe594009a9a4e8d8700b4689da128012ed73278cde310496fbc8eda7c481d53bab896caaa1956bdf0d37

          • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest29344629250127783453056847431962027643-wal
            Filesize

            48KB

            MD5

            f26012205b7b8cfa8ae2c1bfffa0028c

            SHA1

            dbfd87de750312c7c44cbbbd7ae5b77c9396769c

            SHA256

            ce8fb1dc93bb445d8b5c5e427ad1de8734096f444c2afbbd589d8cf9f3076adc

            SHA512

            75d101718887563e68fef331bafbbfa5ae8b8f8d0e250070d044f27df9c07def3eb928570f38afe7b16383c30ff947bcb1124abe1f0eb4f983226deb1841e151

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            32KB

            MD5

            1924f7ba587e43bc0691717945f5037b

            SHA1

            0e84172e309fa5f9db5e350be52bea91bef3b695

            SHA256

            a6753c389180ba327716ba78ad09ca14eacb033e1da8fdcbdb9e9461f8a38157

            SHA512

            15356bf0ec0edb85d4ac37cb94672bb3f21db10317ceff84160e037dfa9ce8411713277e282cb8c76f7ff6522fe3f61af785eac38461d94241c874345fe881ba

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            16KB

            MD5

            2b4991618da12dda259fb0fd04a0c59b

            SHA1

            f1645a774f6e1d068bd31d228bdb2654de499300

            SHA256

            5a91d02303938401d4005cafce79147dd604d307242501dfc1821d266a828d77

            SHA512

            90c082b8a431d1df75ad75526c433f0a6761b8ee98519a722e1b3bb8f9b8611013bff60bdb624b92d63ad93604226d8e7739e3c20799b66d35147dfafccfbbd1

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            16KB

            MD5

            6251cb3f8e0f2d796a37ff518056e198

            SHA1

            b825745ed79dd0c7b18d9fbcf11618a11260c61f

            SHA256

            8997e6221ddec958de6c53bdf5ffcf7f5ac7bba6ecb5dcd02ed53eea1049147e

            SHA512

            fc902415268bdfa1495594bc3afdd056cfe32aa45c1cb1feef89617fcae951c424aa53c3794cf77630e8fe95a72466ad59a1dd17be327cace7a9eed6931a8d8b

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            32KB

            MD5

            d604a3bf1f8d992cc320ea5b1f7609bd

            SHA1

            247f88df0b55c7d523ea5398637711a0e4a483a4

            SHA256

            329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

            SHA512

            67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            16KB

            MD5

            3985e460bfa35d73e29fd630169aa4cf

            SHA1

            422077c0c8ddd5bb4419e628fb5f01e5a9aa7f2e

            SHA256

            40ae95d719259ed299eb76af4baef9afbd64d1311eea62e38b90d2ebef8372fc

            SHA512

            b7f5f2352a9ceef32de523e2443f19bd4efb2cf80e8e95c3cf76abb5a2531e9f730a26c47df71aff38ab393956748a92231d3c0f4205bf90ac75f694ece675df

          • /data/data/com.xgbuy.xg/databases/ua.db
            Filesize

            16KB

            MD5

            e894d4146a6d83d697486d622e598681

            SHA1

            deaa825dd9fcfbb7a552b48a5f31dc6d8fcafab0

            SHA256

            57ca6f43691e33ec3054df952e33ca3024100d33b6723d52ccf4acd35e7d4b5f

            SHA512

            f7ac35dc5ab460555f3246c383ae6d52007b5118ab2fbabac79f9c319e5b6dc56648e08e5ad4b4849e356167c1228dea17ba9264ac7b91549855ce5ff38f168e

          • /data/data/com.xgbuy.xg/databases/ua.db-journal
            Filesize

            512B

            MD5

            b639dc00e148599b8512bca954d51511

            SHA1

            e58920acaf13b366db4e7126fd651487e92a54a2

            SHA256

            87a08deb736fffead9e87d4af6c614991f4fe05ada6cbe58434b976786f60044

            SHA512

            a03c1c167af3bfd176360aed2d288867c63bc18ded5e9082ae93e62da003fdba49c23a4504cba8be36ddbea55708193063570aa5860a094a62d0b3fef7f1e3af

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            56KB

            MD5

            fb80c23a984e8c9528dbe9d6c9128db3

            SHA1

            9b25c5212187c7f3e203e1c90cdadb11cb9ace3c

            SHA256

            42b11ae5c02358135a8a57922c8e66d07db2114d9ad053272785bbb0c75739e5

            SHA512

            0e723f2c782a4be5dcb2577d23bf07cf05dfc42d548c204147ce69d760298669ecc93d3a033ff2a63e556eee999a310db26ec52e095ef7e0d0e77a9a8a0fc293

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            4KB

            MD5

            32e21181afb53b3cd247083b6bd61a15

            SHA1

            c8f4a2bb5a21c6b92c4b7048e7e3b5d21ed21121

            SHA256

            e23fab70d862026a06a39b7f0f9ef0bc8f5ab88b56aae77463a11d4047a2272c

            SHA512

            8da85521d4c6e2b4c99c7b58812405bc0c33c551d60ca49260ed2cb6872e5aeb75c70dd3a99ba5895af0024c3a659b58f7872b15946d6680a2a065a4243729fe

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            4KB

            MD5

            2615ca998bbf3a9b97989db9ee862e35

            SHA1

            4782f5d1df1bb7d31bb1d996a20dcb4eaf38dc3a

            SHA256

            e6227b2ba3cdf2a0820f32d180a70a8d1bfa65495f67a105019b8505eb7bae70

            SHA512

            3e18245480d2a9395c525e877fdc7895902e59ae4aceb77ce00ef8b7f14950176a0937e1097a8cf52911f0bf9b16535c3697726a61f323b5017167d9d91fa787

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            8KB

            MD5

            13960cf37bb5dc0b28e10e1bde44151f

            SHA1

            d4b7cb586c2277dc48aa7042f326738ab42d4ec7

            SHA256

            e0ef7cd5c10a28ab2f56410802047d493e95b4adeaacd1c2361123bb584aba8e

            SHA512

            2b249f53fb765d91d1b9672961b11729aed90c6244e23b55b1ff618d76e6ebf610c04e63186c7a8a65f7f4e21a2564e48c7cf59c2c976e3c091b83a8737c51f2

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            4KB

            MD5

            101f2ac2f56d7e65f5fb384cfac79bea

            SHA1

            38b98c761c45ba75dd27b8de4e904ab660d22b41

            SHA256

            8fac69bf39ce3e3cebdf87227564128cbe6998f820b8028842ea81c027bcf3b1

            SHA512

            f1b5213bf5029e8f2a125149ef1eda76a06fc69cac72edeca3010277cbc7abed5082d52bc46ad832696a7ea653fef8bc3c9f4f71fc0e020a5242a81b502c5376

          • /data/data/com.xgbuy.xg/databases/ua.db-wal
            Filesize

            4KB

            MD5

            b0ca910cf831eac9075dbedf46f6af81

            SHA1

            c6b2ef8e21d2296cfab0d8b28188a2d92226fa85

            SHA256

            4dd0a50872b63b6cee954be629a83a4b63cde07cc0d9f33237242b75269f93c9

            SHA512

            eba2f2fdaf4632108974aa485bd42c55ffb9af025fabd120e266deb911ec6f6f1b696943d4550e8bbf009dbd8c0cc0e1ce0af52cd0b1519c22d88a9f72920703

          • /data/data/com.xgbuy.xg/databases/xinggou
            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.xgbuy.xg/databases/xinggou-journal
            Filesize

            512B

            MD5

            9c91f198e7ef6eeaa2229387b787017b

            SHA1

            eaf2809a4745d2961dc4567f65533259ee438222

            SHA256

            b341147461aaf4986b2767a798723602cd52fb3a9b5279bbaad8ee24431d4a54

            SHA512

            1b41cf6b8b3075cde2e69a5eef86c2dade16b57ed46e85bdf8b18eb5374473ef7c97f6183703efbe0989190a4f8e0425fb56790f0e7f0106e0518ac636dc8cb5

          • /data/data/com.xgbuy.xg/databases/xinggou-shm
            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.xgbuy.xg/databases/xinggou-wal
            Filesize

            60KB

            MD5

            a76c24f36d6bc4b8ecb031b5073351ac

            SHA1

            4f2e7a958b8b87e7001ac925566c038c2ec912c4

            SHA256

            cca0c893bf3cd42199c5280e9024107a531fc3544e91103f12492d4f5d0bf98f

            SHA512

            66a1e767c3ea08c9cf55dff783d523af3d4e5faa35c60e5b5a831b49266c24c2c1a7131241a56127810e800cf9b975146b6df02485e950a4f1b9b0ceac408549

          • /data/data/com.xgbuy.xg/files/.imprint
            Filesize

            1012B

            MD5

            3679b3ad9677b0c55df8bf7eff78d940

            SHA1

            62943a721adfd229b4f2d81b21464ac16e6ee1c5

            SHA256

            7b56ab54e7bb41a9f4474c0eec7bd875ed712bc7b110998e00211309ccacaf57

            SHA512

            6ee9253af9c27aca673a6dd25838ae5df5a8d1dd5ff081aac08f31b40acf27ce5aaeace042698ed5c6e0cfdd5abf6011a843fe8507dc295f1448228fd4ad8345

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
            Filesize

            40B

            MD5

            3911ad10a2d9a4f7ef7a09639a1b8cf3

            SHA1

            d8d5dae863fe04bef8d987202e25e065efce1e1f

            SHA256

            0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

            SHA512

            d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
            Filesize

            40B

            MD5

            81024874f926b0c0c9e613997c9370b1

            SHA1

            a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

            SHA256

            da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

            SHA512

            8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di
            Filesize

            340B

            MD5

            4e7a0f474d364152a6d295e1e0e6dbe6

            SHA1

            52babe6bce87df9eb8cfc221de408b04fddc8b9c

            SHA256

            bf973c5e8edd893d8e712ab1a39fb055a1c7487e7fca04338fc6a35820dd9689

            SHA512

            0d39cc499f723b4f9ab89d88e9959adcb9e67b6b2ec398b3c49f82840f239ac8995a76e04cea82402c6bf53e62a56a3f501aa66257cf47c6feedf466f582f14f

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di
            Filesize

            340B

            MD5

            cb449802a2a7b0cf75551f3ceea8013c

            SHA1

            002161da47fa3709b70cc42f157f92ad359e4149

            SHA256

            cc1db56f7c49d44d9aefeba22a0caa0e7be0002e3e700d3c2c7e10ed1fc65a82

            SHA512

            7ef16b50b9e31b6e10dd3fd835ef1cd1fa0d799551e29aa69037839c9e28afa91ad5249d2e052a5ea75cbbbea733ea770dca8e945a64814240d5b21465dc7d27

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ic
            Filesize

            40B

            MD5

            1bd86b90e1b355f123e5ce8c93c3de53

            SHA1

            bee5683d6124650c8be0b3740ad66e771f29b178

            SHA256

            3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

            SHA512

            6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

          • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri
            Filesize

            314B

            MD5

            6182f54f4fcd05468b778f52df47de6c

            SHA1

            5ed5372e624975d3a06f0ea6cbc40ed05e45f363

            SHA256

            8272ce0356df941504605c9b8746f6e4c8090dcb99bccf3e2366f73996c805d4

            SHA512

            57cf0b53becb056f70379454c5004646079a22a2b5efe77fce25f0702290c6105239376f79dd1cb398b699dece2bddd041e52edbe941a8016fb726dcfd9a5f66

          • /data/data/com.xgbuy.xg/files/.jiagu.lock
            Filesize

            27B

            MD5

            ac0c8c633ed4e58bc0acbf34f1528359

            SHA1

            178eb8842df6688a04fd731a88990131950a05fe

            SHA256

            b2adca68c234c3e41d8913c90d7f64cd5e6d4fb2045e4d703a0063b7752f72ec

            SHA512

            82333fd80ba3b12e91554879211465cc0ee997cdd7ae29409ace4e7f91cea04c7e93d7af267c370458b954e1c70f2c4be4c2037a782b48fcccfb19fd862af913

          • /data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.json
            Filesize

            162B

            MD5

            74487263acfb79c0e5d3745aa32b9566

            SHA1

            3aeba7b6880532bccd88c3737033130d27e8c3a8

            SHA256

            e6916cf1ad8929a4848434537842f15184dce3404f7eff97fef9d0e6ceaab6bd

            SHA512

            3c3e81d8b85d7d95f24559a37f6cd59991bef6301bc13a574e47f7e62537f280a6747f5cc6cbeed43717e397d0d5ef22462542eecac308e0213c37bb5e99d33e

          • /data/data/com.xgbuy.xg/files/Mob/mob_commons_1
            Filesize

            2B

            MD5

            99914b932bd37a50b983c5e7c90ae93b

            SHA1

            bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

            SHA256

            44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

            SHA512

            27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

          • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
            Filesize

            23B

            MD5

            8e24e79baab91c4d0604eaa9006a0cb3

            SHA1

            e427afc94a4b957a7096f73e395a10ea404c076b

            SHA256

            65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

            SHA512

            45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

          • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
            Filesize

            62B

            MD5

            748abf4fca87d27963744ec3d8d40492

            SHA1

            4322f1a706544094151e2066bcb99c08308f1b50

            SHA256

            f7299c5605f2d2ffa87dc5b35846cfa94f2950f7b6dbc165869ab3036ceef8e2

            SHA512

            6df6c66dd1c0aea245265f62b3c7029512c3a3aa2bcb54be80ce490cade3a488656f682ceb3e333286f7be651de957b11b6d8b1b99a1c838f1f8e0f9b527f096

          • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1
            Filesize

            86B

            MD5

            dce26bf2857163727475adf9721a971f

            SHA1

            807e0f4f4bdc23d05338b2623d8d4fd94ce19894

            SHA256

            e48602f223e3e464eb20b78e1d407af7a2d2cc0eaa02bbd502d76b85cbf853d5

            SHA512

            68a75523fdea3e17d02be54d304607e5dc4caab1999a96dc757ce09a23c74dc3cba5f263744955ca03a65e5e4f63ada1bd7a126535cc6611ad2d2117b444c715

          • /data/data/com.xgbuy.xg/files/exid.dat
            Filesize

            62B

            MD5

            59be4d0fe77a5a8431d115e9d9c31842

            SHA1

            e642c0110af965d8548c3aa8ba5d1009de8038b8

            SHA256

            7de9a2adb18cfa3769474a1b578c780c360ce634c2fa3cfb187b4d6c1634289f

            SHA512

            8f72958d4e2a18d15c12359d4007da2fd6ff07a2b9fb91ea8c21ecdbdd26ea3ade6d66eb192b696bef501c30fd361db47c5b985ead54d15f3faa33fb1648871d

          • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json
            Filesize

            131B

            MD5

            38b0f5fb9ccb2c6e99fef8b02347a4e4

            SHA1

            6c8a702cc0915a7fa5b8c729fce5ce870e61d8d1

            SHA256

            59836dffe1e1d0b5315379963213b4b1a39121afd83b32b37514d024a91b098a

            SHA512

            3e9120f3f8e34a17a95e91f1c5e96ebf8414e2ff32b8d5231b2c337573d77f58a770d23423d050cb1dee92518ce6a78c5cd7e28b33bc558f4d5d3e974b059c5c

          • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json
            Filesize

            189B

            MD5

            58e9a356a703ea642d81630bb5f08700

            SHA1

            66ea31a975176efb741aca023aea72c8b45a255a

            SHA256

            91df2976e6d79972c4bdc1e0b210d945c550935f5df82a3e57009c9376cb9684

            SHA512

            257b69d503b5b3e74bf2a93fd701424cb668fbc93ee998d18476a1fa467566bc34654c7958f4d214772f6025afeb4a76b984839a4ba331360ef6cc18c1352b8f

          • /data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20240522_log.txt
            Filesize

            201B

            MD5

            b81c17d49259777d2440fb315e8a4929

            SHA1

            fdd12ffa44fe699f2c1faecf0a033c8a4ef6ec5f

            SHA256

            1802cdb178f0c071f61003447b71a7dba3486ef3ad6874c26e1406af5487f051

            SHA512

            f32402004c4905018ff0063cc166aaaa748cf76be387a602e6d38f2481b0529871155ea87a85851d8bb51bff5408183ca2a8091c31079c527ecc289259269df9

          • /data/data/com.xgbuy.xg/files/umeng_it.cache
            Filesize

            413B

            MD5

            a8ba77c9a820f490271390f3c33f7a8e

            SHA1

            34d47509925c93272d0a2fcdf254b4f873fcdea2

            SHA256

            85a33150bd9b50a9f28e4674591d53a48650f1137b5ba17b5eeb2f04bee83209

            SHA512

            7e3b83dc76ff1e03304a938934979bacbeb436bfd3ee07d7825b4d4c22def31b9edae98049d8ffa02c34f7fa29c2259d29dd277de21a87c45240d966bbc4f3f1

          • /data/data/com.xgbuy.xg/files/umeng_it.cache
            Filesize

            210B

            MD5

            ba063881d2e70d5f44893e2dbbb85f09

            SHA1

            89dad993cf1a6b81afbdb2ef452644c336cc1425

            SHA256

            16fa9f73c1127c12081f958537c31c3636bfc6501cc444b2cb9d91deb19b2a56

            SHA512

            265f787ae355f787503d894e28d33757dff18de3413a5e3dd2a1a21b91892c5ba573634e1c091f736a03f08eaf997e1491d9af45382fd523a8b69f5a85ad4b7f

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex
            Filesize

            6.5MB

            MD5

            1dbe6a71dc9f9962c8ca204a3d9d4fc2

            SHA1

            2319b0a59cae71ed2aea9ba06d238d252a9b4f3f

            SHA256

            bdc777733b09a7ff625fe12a8e26db5fd8c97cac9e05763c634ecef3b29abc14

            SHA512

            66f7df09ee2782f70c44e3bf9fc1b9b75a92095fe0207b9fb797c62954fe4b273bcb13775c20bd0a51a197419f8d8bd236b64d1209e36c95e0da78167ab2156d

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex
            Filesize

            6.4MB

            MD5

            f0cb2118e5b6e7703b7d2a731d6c8b7f

            SHA1

            911c04a303612bcd850c132b7b5a6e938ef33c84

            SHA256

            3e099421d21b8e5809126661de7334b303763e8979b605ddc821bde25dffcb54

            SHA512

            16e4eadd2c9f334c92d3c82710b3fec24b8a11db3e2512bf9610636b31068703420fb03afb78978f69cc8640deffad4a597ac2ab733d8280eaa77b3f9456cf91

          • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex
            Filesize

            1.8MB

            MD5

            d7356ce1f1f641e074476fcca090dad4

            SHA1

            c916c4f129d7c0d61e6732b7b57151d64c07c0a9

            SHA256

            4750ff4133d94f916a88701077e2f0e14edeed819bb3344b9dec7e581a667fed

            SHA512

            d1648e0c71588c2f4802635c80dba48690c133c471adc5df4949a3f469f0877c7edd67e3a54de78e4a536f87c6f3bca07eea10487ca5ab39b7bec0b9b74aa116

          • /storage/emulated/0/360/.deviceId
            Filesize

            48B

            MD5

            1d8d16c4e3b19ebf18988530d9b9a757

            SHA1

            bc94c1cce05cd848a53271ecb9c5311e27ffebf5

            SHA256

            abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

            SHA512

            4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

          • /storage/emulated/0/360/.iddata
            Filesize

            80KB

            MD5

            db00d2ae9ba04bb254cfa6bffde27e28

            SHA1

            63ee14eae25fe1c598b189370cfcf9a30e43878a

            SHA256

            95443ba53f6b0e73fba3136717046c667ac3000357064652b569322ba7904917

            SHA512

            abe6409b32be38b3d247d3e8ea81d4af1f79e50ffb088386d015c508053d5d25ef85bae24d2a2360d2ac48a0c66681525926a5845134dd47a621acee39ce1f63

          • /storage/emulated/0/Mob/.slw
            Filesize

            66B

            MD5

            19402718bfb1c685a726b4e1d846ad98

            SHA1

            02a7e30044a67085f2f1da24e16e4ecfede65b72

            SHA256

            079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

            SHA512

            25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

          • /storage/emulated/0/Mob/comm/.di
            Filesize

            57B

            MD5

            70a42cba408700f9a6c01c7941a8829e

            SHA1

            eab01cc2c0671538795fb0b1146017dc099d0984

            SHA256

            499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

            SHA512

            8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

          • /storage/emulated/0/data/.push_deviceid
            Filesize

            32B

            MD5

            897d7885808ae11bc1a53158c0b592d9

            SHA1

            d01a8a5efdb3748619dd8dd0fcb66f3273aa1340

            SHA256

            001e50b5089aa7a9271b6e3cb98784978a39b9587f4ba377ac8464d9ce5eab16

            SHA512

            2218a0ce3a29e255596934abe463915759d4611049ea4fe1fecb30e0cf4091274905e4e98195daef9271b8cc5153764271921a23ab425280dab2ca59a89de2d7