Analysis
-
max time kernel
176s -
max time network
184s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
12-06-2024 11:41
Static task
static1
Behavioral task
behavioral1
Sample
a08ae7f9e72abc34b74fd74289d05ea4_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a08ae7f9e72abc34b74fd74289d05ea4_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
General
-
Target
a08ae7f9e72abc34b74fd74289d05ea4_JaffaCakes118.apk
-
Size
18.0MB
-
MD5
a08ae7f9e72abc34b74fd74289d05ea4
-
SHA1
44169676a5b2003eb20c6b434055aefd58460ce6
-
SHA256
c6f1bf7d3abd0ca101f6572c7ceaed15a4f823388cc99140594f8672c6d20536
-
SHA512
d3ee5f7d72c0bd79d847aa50fd704d16522ef4cdee93a06974088835010ff5c27607d7d030950c78beec27cbfe9979ff6e045ff860e1825724c851e6c5840ead
-
SSDEEP
393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3us:+NKMf0ApyqHLF9Twc2SWeZ
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
Processes:
com.xgbuy.xgioc process /data/local/bin/su com.xgbuy.xg /data/local/xbin/su com.xgbuy.xg /sbin/su com.xgbuy.xg /system/app/Superuser.apk com.xgbuy.xg /data/local/su com.xgbuy.xg -
Loads dropped Dex/Jar 1 TTPs 6 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoreioc pid process /data/user/0/com.xgbuy.xg/[email protected] 5166 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex 5166 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex 5166 com.xgbuy.xg /data/user/0/com.xgbuy.xg/[email protected] 5242 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex 5242 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex 5242 com.xgbuy.xg:pushcore -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.xgbuy.xg:pushcorecom.xgbuy.xgdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg:pushcore Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.xgbuy.xgdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.xgbuy.xg -
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
com.xgbuy.xgdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.xgbuy.xg -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 2 IoCs
Processes:
flow ioc 51 s.appjiagu.com 88 b.appjiagu.com -
Queries information about active data network 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg:pushcore -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.xgbuy.xgdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xgbuy.xg -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.xgbuy.xgdescription ioc process Framework API call android.hardware.SensorManager.registerListener com.xgbuy.xg -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg:pushcore -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg:pushcore -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.xgbuy.xgdescription ioc process File opened for read /proc/cpuinfo com.xgbuy.xg -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.xgbuy.xgdescription ioc process File opened for read /proc/meminfo com.xgbuy.xg
Processes
-
com.xgbuy.xg1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5166
-
com.xgbuy.xg:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5242
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD550750315eef281575611bc425174b939
SHA1acaff02526d7b4c257e00002ed09af364f66a401
SHA256c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef
SHA51260584a993992a68e8d0a53be705e3a9d52fc126df26b9bdcf80d14e659f1d70bceb926e0a99a69fdf40f1c09fd61aa52c2d2c008ee5c3ef59af5922a75161ea9
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/4804f76c1982138ddd57254b068134862ad1ad20f5f58897a3e0f1f5f1c2f990.0.tmp
Filesize106KB
MD57459aff7652a92bd0f6067f2d6e82f00
SHA1df17e66aaa9218124c14a31c0b4830f1e3d85bdd
SHA25657c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935
SHA51258a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae
-
Filesize
180B
MD5c431b647d9e627aeb642ccd41e648883
SHA16a343358d01c533ed2bceee807e09f82ac3069e6
SHA256bd98dbdf310b0c2f45f49a2d8a7a817d67d29cd9824404651bd91b0d6a775d38
SHA5129da75841dd9c139f97e41f6be96a1b77ad3a454f4bbd14452224acff8d5488bd4c798bb723c0f5fa4a867809be72cf686b9f76d15427a0c7b871ef504deccf68
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
20KB
MD5e3e070d2e3d5e00d107e25f0a579af3d
SHA109dde77eab58605bea42a61dc35e975e8b62c14a
SHA25615661794bafd16a8807927482e516ef2225cd3a9692bfe724c0c45697928b4c2
SHA512d9b46d05cb538ced0f5f45224fb36b9471e8075e3eb4c9f05d84bf6e12a1e6aaecccc13738ae52f1cc9c2a2041b406b12441cb652892bfd427f1b574c09155f5
-
Filesize
20KB
MD557614907e977d461aac82a0fb2e929e5
SHA11148327b939a1abebe7fbbea77c6020251787fb8
SHA2563b69497a4778bf9ecf8a48fc7f6aad5be35ab45396394895ccb5c9604c5ed5a4
SHA5127538d5b043504bc707e8ca3709dbe20dbe4a7d4ce87984fdb3e88247c2332036c4ac42a1700c883bd75e959c71818888ffd845d324d7d64df072f48586bbcb8e
-
Filesize
20KB
MD5cb8eed73d4f87c56f3bf0a18033f4e16
SHA170d4f486d64b37c01d83a5a413717fa89ea3b48a
SHA256f08cd6666ec97a7e8bceee8310205875bb5360e3aafa02b6855bc010768e85f0
SHA5121d541d39d9c59afa2c5a9e6ee4792cf81ab50fe80758c6ee238b1261b16388ade9b9aa0c970ab0da3dfcb4d67e32dc0ce3e59cb2e6dde1ee6028e6f0542d0472
-
Filesize
20KB
MD5336b65764d8d2da57075bb11b1b03a27
SHA1c2733af0f1917e9a2a2218a3066da8be4df5d962
SHA256a675b404e6f352aca628a401bdae630c4e6a310d66499e8b7c22c33b3ab4c743
SHA512889352c961276d97aa322bd8460b789fc911ac94d7adfdb28002326a61909444103bb4615b366702828176f07fb223cc900af4d033c5142a948813467ef6dfca
-
Filesize
20KB
MD5a9d212f4b1910c1ce9ea4d39f5cb198c
SHA1ffceacd41ce6134db4e91acaa40dc0d9b19be03e
SHA2561cbc759fe6259593c7f9944ceed97c358b8fa3cc9a56ec636f6c48e822ceac37
SHA5123b1ef86ba55ec9d870054ee3af7a414e21c99d5b13578a5b169cc84238a85d4e8401a6b126b07abf57a9a230ffc1227f42bd9b80daa96db88b4870c07d92dfea
-
Filesize
28KB
MD5cb9a196d71e9c2406c0d757f92e96d10
SHA106785ca5045d6d199bd714bb4716c76562254da1
SHA256aab3d3bb516f73b32743332ee2348d408128e203c0d958ba722fbebfffe06659
SHA5123f650983b07cbe217d3d3a0feef104a9eaafad71ba2212e756d52920ae29a7ac8145d20536db065aa149ae3c9c59ca587945b985cfbf2c85afe7687def6da427
-
Filesize
512B
MD59eae68c80769260675a3d4301c8a5837
SHA15c90d75ca7801e528ba2add5822081be1150b781
SHA256dad8814095423252dc462743aeed3e569eec0eb1ef757f212dead8b5fed64175
SHA5125c9916fe506c35841bc02044ee55db1e2f7eae89d2e81713d6ce4350defc1ba02b9bc47a97a9695ae2be0d1d481cb3e77193e0afb44852cd505758f00fd4ab7c
-
Filesize
8KB
MD5b08351185e1e5d58cf9ff19b95a92f37
SHA141941904aba4ecf250eb4a79af300ae85e75222e
SHA2564d6e292fcef1fd90824c7f568521e92981120c93e591302eac368d31dc5baba5
SHA512c9d6d5d2c80f0cfc45bf41d3a982dd25830b706ae49bd8875f572b6601a6e7079a73f5d0290508275963faead73f35af4b69134160a0ae3394c79de03aa8a30f
-
Filesize
4KB
MD536fb083f52dcb3eb4693696213a1e211
SHA18b0f71c06e083e137d8849cb149656916661a9af
SHA256d2b43fb17139ca2ddd3f98a632df12ac7cc537719482a1ef28a274e2bb5cbc7c
SHA5122d61943ff034db004a8c2a65c7f192f10d5ff449b4fd286ce8f3d90c0359a4ef8256ac097e81f4eaa80008070c1d1d99386e40105c8e50d87fe3374518b8c263
-
Filesize
8KB
MD5fbc2495fdf06daf332cef23047f3ead9
SHA1933798975bd4e0c4e86cf56df73556eb0766b76d
SHA256839a7e4ae8c3f7896f33b0555b7ee2001e55addc59d44573e2bca75f92df6ecd
SHA512e4003ab2d86d7eb7ddd8f1b98e1795869efab07f39ae9090eb538bc6d70a12d7577fee45bc2f3c41eb761a0c4731db3155e82681ac4f8f00d58a266f1ddc29d9
-
Filesize
12KB
MD55b2074132647761745b2a336044930a7
SHA1a99e0ec6a856b91cd37028be76fd0c100c2e1a4e
SHA2566fb597a6ca4e03f1c46a28ed6774922d94da084d984380e510e39fc33de4e62c
SHA512a6e2ac58ff5e4ba026cdf2d6b14baa49dbb5eb438160d1903401ea04619220def7cd3f6b9232d0f2542d4281e2c5faf84a3ab04c82528551a10ac6c30f465937
-
Filesize
16KB
MD5632a9ba3799fc94c034c1c9715a71874
SHA1c6fbba9eda95d1bb6945ba8b271273f62925139e
SHA2562edb87d90e639c8d4e1ff13ea71b171edf60e87eaac03029cb2725140fbc7ce2
SHA5124bd87e99ea5d0e87a185446797a83fd993a4e6156b43f0bd18779af58428d188631c687382cc73bb8f65de01f3835d6e9911f44d9826734485bf60fb40f82367
-
Filesize
28KB
MD5ac5e251ee7a3db01fd27f13fc5b482a1
SHA1fa3095c7b4aba7aad6ed11e2f23b03a9de7acc2f
SHA2566cd5f9eb2a70e647806bec6f65f83f422f15367ffd3b6679751098faa9097049
SHA51295bad67eae10e9bf5d7603f18cf768f64b953e66bd28f1937c4ff3a75e62720790887e737546bc9577c5e19b187e57afcd368d653e5bcc8672ea8f2b28193e36
-
Filesize
40KB
MD53a03afb60ef6268b8f33ff660f935ba6
SHA1712bb84696cd07b45ee04823c9a532b3d086d3e8
SHA256052c20b77384449a2c93df8477b90706867f3f039dda7d024f23673c1cf8d594
SHA512ea47b128f98d4f737d1ac0c8cf2c94909c6b71e5a7056277c125337f72609ae1d2cd62b208a76c8c2f5e889a467f302773f958ab8537ca4fa097089dc70a736a
-
Filesize
12KB
MD5694466515b7c26596e4136bf7daffe5c
SHA1ddb99080146a83c54be804e235a5a30154e78ee5
SHA256b5259f3c0bfa4004bf28f79c9289c14dbc21b8dd556ae7762bc27ef62a0f8665
SHA512cab322701480129992bd80a03fe3fcd725b4efd84bd9b0a6ffedae0dd72d5e2d19da8aea362e9cd1dc5bb07c7e6c08e4e307960d433845d8d91d8d79d960a17b
-
Filesize
512B
MD5fd8a9e65289c8a1d0146648329fb8ea6
SHA1c54b9b0ffc0bc395884de50cc60f36e9a77f88eb
SHA256d5ee931a471d4c357c00908e2ecdc1e1f9c8b5b8e90835ac19ad912921823be0
SHA5124f292f5399a404b3ef274889707f7bcac87138ef239ad8295305a57821b556dadff7d356836aeac06ef2a232d8a8e51e38fc1e2fde9f27f8187722029c49583a
-
Filesize
8KB
MD53a4a00f3d06458bbd6b9e0f9da4e2b54
SHA1962c4477465572e18b4a9eee60ccbd744778c960
SHA2565d69be9c5759d037d118a7046f1f4b26a6ae343bef74ff680b0a592f955647a2
SHA512f6e42b1e6cc8677084f79cf6361269a3c4c2f747983b9998f802823926785cc50bd63123e4ce0aaa0875993364a30163f088d187523dc90829f5de1710bc6669
-
Filesize
8KB
MD558c33b847e9fdee0fae84049ff1c4dd5
SHA177ac04342963f0dbada73ea99828f397cf975d44
SHA256585f45509e45e6540e0b03fc00c33f1d7612c435f14a68ff1c4b9c4d4d0156ff
SHA512b77dcf721583f608cfb4f160e71042b0112f8ff33dac18a408e62be8a97a30be79c97ac9fc4f08db039badf236778024ad33308d3f848529e9ba0ece19578ef1
-
Filesize
12KB
MD5d17314e270ab64baade31c65aa11b170
SHA1c1a31cddd1273461ee4b75cf6b398df7a89ef3a6
SHA2562e844b7111815bfa9d47767b79fd64999567d5f5bcef3ae2aca6b0358983df6c
SHA5123a4dc6e43a2c4f6ab3996906811cca79f91469c501842cf40315ee935030a4cd3c1d52fd68fdcd0d912a62d17f3159de9c49075720e5ef2bfc6a90da254830a9
-
Filesize
16KB
MD5335ae6d3db75c80549769fd278c422a5
SHA1ec865563653752c7e383506ec964ca944f822950
SHA2567b9d936c5559231cc4f4bb82466af1b920eda9cff8f31dde7a08ea8305cfe5b9
SHA512a2f6949b44d4df46e74e79080622986f52e69de801c48e83c799f7c2c91497c5d1d6643be7badb9b8d21e5d2605b4efe10e2b082985aae39e47b55b0dc320b6a
-
Filesize
16KB
MD58bba3201ce0ea0a08bfb5467463e2cab
SHA1dc069e463f0dd03f7a8ff47a31e37ad9b7b23ae8
SHA25626adf3f1cfc70e71c63bbbd2e02bac0bef186eaca5398cf726e74b974120b7d0
SHA512293e4729b4b226669651b747e46e0edb5777e680a40c756bb803598d0371f4f53fc00fe4d364830c87fb512a074fe9f29b3725448a99d4246e51939300007969
-
Filesize
28KB
MD50e062d995e5372761dc3ae3385e1828b
SHA1736a9077e2a378b8b01c032dac0c42ff6a8fc9ba
SHA256e1ed9a4e1f53b32cba6f801afb79e50cbf15bdb68a14d5bfcffbf983ac4a2fcf
SHA5120a915650daad56a46afdc498e81adee0ff1aac1f582776ecbe55ce7421a1b75c97aaa4614da79fd7ded6df69fcbee31aa6409f13bcdd4fdb33a8149fd8bd2776
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal
Filesize512B
MD568c44633523de61585d0ff729f3cd4d9
SHA1999ba84ff333607bf622a529b9356f40892fb7d7
SHA2567ebd29ed4293ca6350e95913d2ba38df6f99b19ee1a684033f0038b8d4d8f71a
SHA5121c7d63f99efaa21d667d90fe1e0f1c188fb1d4188aeff05ba932c01d33b0023c6a730b2d0e9f3ac06c166b1871e9397c8af7aac6ea4cf6bdaf653a8c0d5af24d
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal
Filesize8KB
MD53dd51c13284f3279c7a1e922858f1b8e
SHA143724b77587a5f7a63c27b105eb80d64ad8cec5d
SHA25655f6aec7c923c1b18279d36e339c77076acea7fed4bbdeb3f072990a6ae63465
SHA5124e00204e15b5057d11f8fd0ff2c7d01e268ff0cc43c6b400cefad116a54643e3165e544fa869b8dcb1427e62a47a647ae69a30c6dcfee93b28ecf77af459923f
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal
Filesize8KB
MD5fb0a7c690e27a7c8c75250f607fc2eb9
SHA1bd478c4f4dbc6047863f4fa1f707a007eaa25435
SHA256e9abb8dd79f11862ea32eacfc980596a06ab7aaee6cde80c51a0801fe09dade0
SHA512b2eb89ab3f0d7c6eea650f5e9b2b69f7740c195f327704ac29c9540fe35f65305dd54d03345cc0978104ebae7ec5063dcd363acdeb175581fc8b1c2e586ea8e1
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal
Filesize12KB
MD5b65f50cb0405dd0656a2ebc5be738671
SHA15e3eeedb6a3e85f57d868bf17a822540ad6c5c4d
SHA256b546eaf6513481379e30bc6e10caf8321ef592923b497c4f191754e64a913026
SHA5121748556db0d60c7b3c84a1b24fe774a726aca0f6965cc367e60eb37c0890363e0e123abd817bb402e81361921817ffd0d7da8467a6814dc827bbbb945e481e72
-
Filesize
44KB
MD550d32d5b90a4187cd5ea6724b4ad4687
SHA100d2ecca8152fa3f3d2a95b20ca8a62b70e4f82b
SHA256d454ed2623fe4754309678304b4cf8005ec8f77156ca1ea9acca6257c697f9b3
SHA5126cd199595f762181e1dc308418710d998318093393e28dc4b1a09a283adde4217b29b6a7a794003a633ede20b0fb141d6a440f196a55db8d1a760c52a5658067
-
Filesize
512B
MD56dc928029e1f31745ce73c22b005864f
SHA1da67ebfe97ca68c083adb5d5fc34f7a35568bc6c
SHA2564b9f3ef8300c3d4afd331352c287e9034d8477c82289c69afd5f525ca85000eb
SHA5128455cba63df4319a4c23984953bcbe14fa02b2be19f41729248c3e12b121598a00bdb8791882c65b3b218bb4e4e8084c1dd9cf5eb0aedabf7b548b5629d0ea03
-
Filesize
8KB
MD549379c6b5438ba4c88d8a79de84899d6
SHA122ba091d274e5b49240d1abe903a3895d862bd43
SHA256ac3fe2ffab808f1e368a34472d91eba46262b040be2d24bd97d83c6c9cef138d
SHA51234217fc988059573fb8a6704ccb170d1de3067f58186d366b93626ce48d5e283e957a76884fa2495c5e8ce073fd86af7a4282dc11fe3bf35d40452861130ea07
-
Filesize
8KB
MD503c3403252a5274afc1aa220414d6c7c
SHA1049fd1bd88508341226ed5e70030d9d3cd760779
SHA256672985b3c3aa7aa974775d3a2b82cb3179b8e608341c5ec4ca143314875d7ede
SHA51200b3470210753346797267815d38bd438f7dfa188c945658e2ecc8e92194b47e27e5fd7b7c4d575a261ad0c96b6bfb9e191f94d18e9e96ec9dac5317d61fa135
-
Filesize
8KB
MD5e3de6b760297172cac71d2b4019edad5
SHA1dba76a08fafc8e036e3a4c59275c4d6cebff5d09
SHA25668e26f6b28006283f4ca921919960deb768bbf76a90a8489afa53d973d9226e1
SHA5122b06af436272d266e2a90e932f091e808826f93445577fe30597acd28f097b5f37fb7b5d9531ec4a7e0fad58fa81b99384c8414a508a11d59f0f0fbc61194d40
-
Filesize
8KB
MD50ae76b5d0366c84171c416cf0c3ad6c8
SHA12aa82101d24128592b01c267f1f478e625e154de
SHA25656f0cd538f4c4035fd167a755c2fdeb17821f1d43a4714b59d37a4b3f90d3f6f
SHA512ec1ba24a2f2ed25626480a5c8743398dc254ccf5d35ff4ee32b72c84faf5b04d4c3d0094d3201e2f740de7b2b02a8d92ff86ab51090ef4c277fd98f8f6d07499
-
Filesize
8KB
MD5cf1a4cd892e3b4e76f23a409ae191187
SHA1b89532b5ef200d5d8f76bbf830f0a3802b5b3f24
SHA2562830cde7880b3d986e17df0f48507959e3be88000e28b09daf9c658daf38cc95
SHA51248355abf9c9f3975018f65ef109d216667f2e31b2f725afec69961fcdc32a7905ed84db5c740f6be7f6cd20d0b14492f518d383d967f0f4f6d3b699111ad43fc
-
Filesize
40B
MD53911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA2560ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8
-
Filesize
40B
MD581024874f926b0c0c9e613997c9370b1
SHA1a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA5128ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830
-
Filesize
340B
MD510455f8598c5ef2aaf709266dd504a5d
SHA117672975d2bd141de3cc05be252ff67f7367973d
SHA256a592c650fb6343c262a5f57916dd7c7169fc2491acb8b20676fcb7a310afbdb8
SHA512411a66e9e2e7cbfab05ad8bbc506dce41f237249afe36873f22e8cd9fd84945b5a38022f678f6070642abe4276be4c95319dd47d015ab8adf65559e3fb9bb098
-
Filesize
340B
MD5439b00716a6cd356e64d6671dae2b33d
SHA1d23bab9843bf3d8fae206c46b195a7b4f769be2d
SHA2569ebae3170793097473ad18e4474e8b40e50a179bb6608e16ff1a52113baa600f
SHA512ea5b3024fec3f2c64c5dff5c52a9d540ec17c5ab3190fd3b502ad056cf0be93314afecd4dd6e08e674a69d777a1d1da8e9ea532753b1530c462a94c0d86fc54b
-
Filesize
40B
MD51bd86b90e1b355f123e5ce8c93c3de53
SHA1bee5683d6124650c8be0b3740ad66e771f29b178
SHA2563ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
SHA5126ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe
-
Filesize
85B
MD5eaff68b70e2b1659349969df4edcb95a
SHA1fa043c3079d8c9ef88a9fdeeb578f9dea8641d3b
SHA256d02d08e197863d695a40307d8e2ad33d6efc862ebb9536129cd59b1820192607
SHA51272b4e5b8f72b516378468577d6293f8be3121240d3244848f1acbd10702c6a1ac806b6d51b190accb1fcdefb2b9a938ae0c419958c887b8f2d97b51f69a89e27
-
Filesize
32B
MD5dc2e848be2824acf32cff8ee979e58cf
SHA1de0d519b548d2290385fe035f031fd2c4a61a0eb
SHA25677b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23
SHA51252d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9
-
Filesize
314B
MD539663441e1fcab0e54bc62a83dca03f3
SHA14d5b247db9fbb1c8fc072ef4112b4265aadc78c1
SHA25686d2d27f7d96283056a00550a1c7a5eaa9e68de920c20b44d1aabe079425c42a
SHA512b2daec5c4ef1ffa57139a2f8dc8f960929095ce2b78fc7b00085d2e64d84dd4ef890e8a43d31ca92e370a91abf69ff8598d23f805cc2958277f92033c6ce89d3
-
Filesize
27B
MD579d5ebf1aa047b25470d1f57692ddcbb
SHA1b8424fb4981a8394fd8a30175aad703aeb9d912b
SHA256d35218e03e53be4c4a489a463296eaf925c612a5d2bbbe85c3ea6c8d1374c356
SHA512b04fffbfdc3796e3fe0bef4ae978023211a0a33ec960e4c001604882c498fddfdad281f01715dfa4d762ad8cc71c93fa3c7430e02b49afb42e64e051622ce912
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
23B
MD58e24e79baab91c4d0604eaa9006a0cb3
SHA1e427afc94a4b957a7096f73e395a10ea404c076b
SHA25665ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA51245bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae
-
Filesize
62B
MD536a0ef77b746a61f975e918fc9016d84
SHA153ccda16edc92f153cc37beff231de260508ab54
SHA256d2c88e5cd82aa38849e300745306391a6400da7edab2a514accc733b48d1ea01
SHA512f669ee921f9c4d78e1dbe74b43af18f693f1074eb359b86c25d1b1f0c4ea41ac6d894e39d3545a9316c8014b75f48360f9d18b9a0ea4ba6d52a6853d13ae4b40
-
Filesize
86B
MD573e28886e8a06ad432e13924fae88dac
SHA12162988c5de7c3555a3f1f3e76a499a43154bade
SHA256ce31b6414f3fde7a5c4a56a861e0cedf4ccff303862a84bf57cf67a52e38ec77
SHA51231e4547998b78313e8191881104c292f41eef7446aed9b5513d892169e1487022f1a8bb3cc0f9e0ca22efc69a5286b31f0635baf35afce83104f1cdadc508ded
-
Filesize
119B
MD51464895a4fbdefc86ecf107de359499d
SHA1310fcc9c4fb05a89e4f8ca57a55311d94bd78a89
SHA256fa2e6cba79fcf9ecc20107dc10ab179f044eedb54ec82fdc953c0a4d1a8a4ef7
SHA51283d3cb152090c3f778970a220836821fe0776e4632b0d26605e4f9ef4a82f0d21a8569af9d2c39df6bb9b447f0835140319a7d46ace0295b4ac3454e4bd3fb01
-
Filesize
120B
MD5f7f07bd5d8f707a631d9f80a791c8691
SHA1c6d27e09efc06a4b72390c1b49de47c83a25f200
SHA256c7af435a519f62c21f92ac7bb3469b56e79631f3b8188e8b0742b17d9c687ce7
SHA5122a9eaf16ece7c330266173647549c70c240050e6b8ac26e8cdc91f6b945b7ffbd4ec079a95c44d1046b30f4a67cf2a7801be7bd820b594017d19a9ba979851e8
-
/data/data/com.xgbuy.xg/files/jpush_stat_history/active_user/nowrap/281208f1-4b68-4da8-8b98-d0570b819c97
Filesize159B
MD5afaf86bad9146d30f74e5faaca09d1f0
SHA196c91621cab199b87c33284429297c42b68d7360
SHA25613cf556e92e7b03549b1d40b00f1be5f8e22771087ede66b75dd5b13589e87f0
SHA5120e089f8802a1347fb498d7efdbbe41e68989dad4ea22eaab435b981e81e90373fb3aef09f227e0520f817d9f5d091361b92dcdb6c3e5066d952a9ba37e53de0c
-
/data/data/com.xgbuy.xg/files/jpush_stat_history_pushcore/normal/nowrap/4843f74a-cdee-4d86-ab92-6f9523c419c9
Filesize187B
MD56321b5c966a83cac7c135754689c59e9
SHA1f40e6b1c5e5888d8fb857febbeb1a699e2d76fd9
SHA2562e527de356e8c4750a1c65bd1996f7a5cd55a74d3ab5a9fc95454d6eccd5f094
SHA512fc3b24bb87957e16d143ade0190232e46db4b929a90e160658eb659b8ce091bec5788f5b44f964ed924863118d502adc620837beba1db1698ab3f983a4e54b06
-
Filesize
1KB
MD592fd72303adaf2ef7d03c9a28aca8262
SHA153626ebb0b124c62f5217a93117547245b3e8d84
SHA256ef6ae20de956836c904aea410d1d3585da306cdc96ee99520ff91362e9318a7c
SHA512907bfebc07ed436ebf969db5235113a333cadab181f9449e24044fe6954f0fd7e4eee55bffc15fc1b368268a18262f27458caa881f48a1468c6fca1da3cce23b
-
Filesize
1KB
MD5ca3daef2cc852d6cc8d31b87afced17d
SHA133bc8cee4db380135c000e4fc8ba714f09c51577
SHA256ba071991ac126429d96704aeaef7f3308f58fe66381e96b1ab93643d0e43456c
SHA5121ee8e70f05ebfe0ac7b2cdea17333ea2dd5b5f7543540f331f290fae11edc51e1619c1e14533e05e5cd1a33afb85ed11263563135d380cedfdc6c83f0d69e4e2
-
Filesize
350B
MD512fcaafe668838eeb687e711c150df46
SHA182361089cb39da96335ff69cd27c588bfdea3750
SHA2566566816f092b65089aad200b1535d34ef703fa5b2e498795e5b16647420e3a1a
SHA512b866e65a051810031778d34610e010d444678ea070a9efcb98a9cf56cbc347f5f7f632d774776b7493a6b7e6b50ddbc2d305e9a73df2364e986b09fead315094
-
/data/user/0/com.xgbuy.xg/[email protected]
Filesize6.6MB
MD5af40ddebf367d3418c410ba2bbdb34a6
SHA19a5c0f557da523fb37d3ea9f1dad84e45b78b8ab
SHA256fd4c1d3b24b0138f6f355235f35815ff43de7e73e5029854ac0581f6d5b4cb45
SHA5126ca004321a8ef7f6a08b5be12833971bf017ff58c753ebe73d682abcf5633f084b9b1f5c3453432894f8ce8c9b306963b345cc0d6503450667d9ef66d3ac0ae7
-
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex
Filesize6.5MB
MD556a56032a56816197231ccd2c1447841
SHA142b24c7723619c5bbfff5625ee1f4ff7a9afb34a
SHA256920b1975141f98268ddde30a18db00a3c92776c8472763640b06009b90ccf039
SHA512f47a2ee1f15a58887d5158bf141277a7d6488fcd31a9c85ca0d6706a4252433b812e8a49e956fba313393ac55333bee777394d300e136d489a484f5e883e3165
-
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex
Filesize2.1MB
MD563eb01b23dce33b6abd34b5693031ca8
SHA1870abc96ae069aa034b1b647244af5465a881ddf
SHA2563798ad86a5974af83d89bc71f1737c1747ca4561beb07f74a214675efab02629
SHA512eac344e6167fc50acfca60a177bccf404cd0eb595b0b3e948f88af21ac3d7c14a49d0d7162bc5ef529b9107132c8ac3d0242186ac1b0ac231acc31e8f969311a
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
66B
MD519402718bfb1c685a726b4e1d846ad98
SHA102a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA51225254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b
-
Filesize
66B
MD5093d6d3426351dbbd68f2a6f70dfae8e
SHA19fd1d9088b5b354c772f7ea865ec8450c09bbdd2
SHA2567065930c425107957a2db95b13c8b4bc1b7225c945a2a1fd941f833933af395f
SHA5124926afa7a570010742fd2e92f9b5813b82e4370c8d44f8e0ff897313a120c2a0e0b14b52629da31c16171c4ec1a435e83efe368dba7535c4ced8a4081a8e2984
-
Filesize
32B
MD537b7921f7a6c62d143054fa735256334
SHA14a3580846a2168045438d7279f0b1409e95c523f
SHA256f17d73eb9d92f67e4e25bce9453a1cf3c36a7b2da77a69c2995461ba826a1b42
SHA51285f77f9aa7dbf282187de725bd88cecfddda0f75623d9ccc8c5fe9cb6b88f4816a82d64121d80d1491c0ae6867c4b873076f13a21d38c684d08486f1f2ebbbcb