Analysis

  • max time kernel
    176s
  • max time network
    184s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    12-06-2024 11:41

General

  • Target

    a08ae7f9e72abc34b74fd74289d05ea4_JaffaCakes118.apk

  • Size

    18.0MB

  • MD5

    a08ae7f9e72abc34b74fd74289d05ea4

  • SHA1

    44169676a5b2003eb20c6b434055aefd58460ce6

  • SHA256

    c6f1bf7d3abd0ca101f6572c7ceaed15a4f823388cc99140594f8672c6d20536

  • SHA512

    d3ee5f7d72c0bd79d847aa50fd704d16522ef4cdee93a06974088835010ff5c27607d7d030950c78beec27cbfe9979ff6e045ff860e1825724c851e6c5840ead

  • SSDEEP

    393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3us:+NKMf0ApyqHLF9Twc2SWeZ

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5166
  • com.xgbuy.xg:pushcore
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5242

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

    Filesize

    486KB

    MD5

    50750315eef281575611bc425174b939

    SHA1

    acaff02526d7b4c257e00002ed09af364f66a401

    SHA256

    c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef

    SHA512

    60584a993992a68e8d0a53be705e3a9d52fc126df26b9bdcf80d14e659f1d70bceb926e0a99a69fdf40f1c09fd61aa52c2d2c008ee5c3ef59af5922a75161ea9

  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/4804f76c1982138ddd57254b068134862ad1ad20f5f58897a3e0f1f5f1c2f990.0.tmp

    Filesize

    106KB

    MD5

    7459aff7652a92bd0f6067f2d6e82f00

    SHA1

    df17e66aaa9218124c14a31c0b4830f1e3d85bdd

    SHA256

    57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935

    SHA512

    58a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae

  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal

    Filesize

    180B

    MD5

    c431b647d9e627aeb642ccd41e648883

    SHA1

    6a343358d01c533ed2bceee807e09f82ac3069e6

    SHA256

    bd98dbdf310b0c2f45f49a2d8a7a817d67d29cd9824404651bd91b0d6a775d38

    SHA512

    9da75841dd9c139f97e41f6be96a1b77ad3a454f4bbd14452224acff8d5488bd4c798bb723c0f5fa4a867809be72cf686b9f76d15427a0c7b871ef504deccf68

  • /data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    e3e070d2e3d5e00d107e25f0a579af3d

    SHA1

    09dde77eab58605bea42a61dc35e975e8b62c14a

    SHA256

    15661794bafd16a8807927482e516ef2225cd3a9692bfe724c0c45697928b4c2

    SHA512

    d9b46d05cb538ced0f5f45224fb36b9471e8075e3eb4c9f05d84bf6e12a1e6aaecccc13738ae52f1cc9c2a2041b406b12441cb652892bfd427f1b574c09155f5

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    57614907e977d461aac82a0fb2e929e5

    SHA1

    1148327b939a1abebe7fbbea77c6020251787fb8

    SHA256

    3b69497a4778bf9ecf8a48fc7f6aad5be35ab45396394895ccb5c9604c5ed5a4

    SHA512

    7538d5b043504bc707e8ca3709dbe20dbe4a7d4ce87984fdb3e88247c2332036c4ac42a1700c883bd75e959c71818888ffd845d324d7d64df072f48586bbcb8e

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    cb8eed73d4f87c56f3bf0a18033f4e16

    SHA1

    70d4f486d64b37c01d83a5a413717fa89ea3b48a

    SHA256

    f08cd6666ec97a7e8bceee8310205875bb5360e3aafa02b6855bc010768e85f0

    SHA512

    1d541d39d9c59afa2c5a9e6ee4792cf81ab50fe80758c6ee238b1261b16388ade9b9aa0c970ab0da3dfcb4d67e32dc0ce3e59cb2e6dde1ee6028e6f0542d0472

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    336b65764d8d2da57075bb11b1b03a27

    SHA1

    c2733af0f1917e9a2a2218a3066da8be4df5d962

    SHA256

    a675b404e6f352aca628a401bdae630c4e6a310d66499e8b7c22c33b3ab4c743

    SHA512

    889352c961276d97aa322bd8460b789fc911ac94d7adfdb28002326a61909444103bb4615b366702828176f07fb223cc900af4d033c5142a948813467ef6dfca

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    20KB

    MD5

    a9d212f4b1910c1ce9ea4d39f5cb198c

    SHA1

    ffceacd41ce6134db4e91acaa40dc0d9b19be03e

    SHA256

    1cbc759fe6259593c7f9944ceed97c358b8fa3cc9a56ec636f6c48e822ceac37

    SHA512

    3b1ef86ba55ec9d870054ee3af7a414e21c99d5b13578a5b169cc84238a85d4e8401a6b126b07abf57a9a230ffc1227f42bd9b80daa96db88b4870c07d92dfea

  • /data/data/com.xgbuy.xg/databases/Reyun.db

    Filesize

    28KB

    MD5

    cb9a196d71e9c2406c0d757f92e96d10

    SHA1

    06785ca5045d6d199bd714bb4716c76562254da1

    SHA256

    aab3d3bb516f73b32743332ee2348d408128e203c0d958ba722fbebfffe06659

    SHA512

    3f650983b07cbe217d3d3a0feef104a9eaafad71ba2212e756d52920ae29a7ac8145d20536db065aa149ae3c9c59ca587945b985cfbf2c85afe7687def6da427

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    512B

    MD5

    9eae68c80769260675a3d4301c8a5837

    SHA1

    5c90d75ca7801e528ba2add5822081be1150b781

    SHA256

    dad8814095423252dc462743aeed3e569eec0eb1ef757f212dead8b5fed64175

    SHA512

    5c9916fe506c35841bc02044ee55db1e2f7eae89d2e81713d6ce4350defc1ba02b9bc47a97a9695ae2be0d1d481cb3e77193e0afb44852cd505758f00fd4ab7c

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    8KB

    MD5

    b08351185e1e5d58cf9ff19b95a92f37

    SHA1

    41941904aba4ecf250eb4a79af300ae85e75222e

    SHA256

    4d6e292fcef1fd90824c7f568521e92981120c93e591302eac368d31dc5baba5

    SHA512

    c9d6d5d2c80f0cfc45bf41d3a982dd25830b706ae49bd8875f572b6601a6e7079a73f5d0290508275963faead73f35af4b69134160a0ae3394c79de03aa8a30f

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    4KB

    MD5

    36fb083f52dcb3eb4693696213a1e211

    SHA1

    8b0f71c06e083e137d8849cb149656916661a9af

    SHA256

    d2b43fb17139ca2ddd3f98a632df12ac7cc537719482a1ef28a274e2bb5cbc7c

    SHA512

    2d61943ff034db004a8c2a65c7f192f10d5ff449b4fd286ce8f3d90c0359a4ef8256ac097e81f4eaa80008070c1d1d99386e40105c8e50d87fe3374518b8c263

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    8KB

    MD5

    fbc2495fdf06daf332cef23047f3ead9

    SHA1

    933798975bd4e0c4e86cf56df73556eb0766b76d

    SHA256

    839a7e4ae8c3f7896f33b0555b7ee2001e55addc59d44573e2bca75f92df6ecd

    SHA512

    e4003ab2d86d7eb7ddd8f1b98e1795869efab07f39ae9090eb538bc6d70a12d7577fee45bc2f3c41eb761a0c4731db3155e82681ac4f8f00d58a266f1ddc29d9

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    12KB

    MD5

    5b2074132647761745b2a336044930a7

    SHA1

    a99e0ec6a856b91cd37028be76fd0c100c2e1a4e

    SHA256

    6fb597a6ca4e03f1c46a28ed6774922d94da084d984380e510e39fc33de4e62c

    SHA512

    a6e2ac58ff5e4ba026cdf2d6b14baa49dbb5eb438160d1903401ea04619220def7cd3f6b9232d0f2542d4281e2c5faf84a3ab04c82528551a10ac6c30f465937

  • /data/data/com.xgbuy.xg/databases/Reyun.db-journal

    Filesize

    16KB

    MD5

    632a9ba3799fc94c034c1c9715a71874

    SHA1

    c6fbba9eda95d1bb6945ba8b271273f62925139e

    SHA256

    2edb87d90e639c8d4e1ff13ea71b171edf60e87eaac03029cb2725140fbc7ce2

    SHA512

    4bd87e99ea5d0e87a185446797a83fd993a4e6156b43f0bd18779af58428d188631c687382cc73bb8f65de01f3835d6e9911f44d9826734485bf60fb40f82367

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db

    Filesize

    28KB

    MD5

    ac5e251ee7a3db01fd27f13fc5b482a1

    SHA1

    fa3095c7b4aba7aad6ed11e2f23b03a9de7acc2f

    SHA256

    6cd5f9eb2a70e647806bec6f65f83f422f15367ffd3b6679751098faa9097049

    SHA512

    95bad67eae10e9bf5d7603f18cf768f64b953e66bd28f1937c4ff3a75e62720790887e737546bc9577c5e19b187e57afcd368d653e5bcc8672ea8f2b28193e36

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db

    Filesize

    40KB

    MD5

    3a03afb60ef6268b8f33ff660f935ba6

    SHA1

    712bb84696cd07b45ee04823c9a532b3d086d3e8

    SHA256

    052c20b77384449a2c93df8477b90706867f3f039dda7d024f23673c1cf8d594

    SHA512

    ea47b128f98d4f737d1ac0c8cf2c94909c6b71e5a7056277c125337f72609ae1d2cd62b208a76c8c2f5e889a467f302773f958ab8537ca4fa097089dc70a736a

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    12KB

    MD5

    694466515b7c26596e4136bf7daffe5c

    SHA1

    ddb99080146a83c54be804e235a5a30154e78ee5

    SHA256

    b5259f3c0bfa4004bf28f79c9289c14dbc21b8dd556ae7762bc27ef62a0f8665

    SHA512

    cab322701480129992bd80a03fe3fcd725b4efd84bd9b0a6ffedae0dd72d5e2d19da8aea362e9cd1dc5bb07c7e6c08e4e307960d433845d8d91d8d79d960a17b

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    512B

    MD5

    fd8a9e65289c8a1d0146648329fb8ea6

    SHA1

    c54b9b0ffc0bc395884de50cc60f36e9a77f88eb

    SHA256

    d5ee931a471d4c357c00908e2ecdc1e1f9c8b5b8e90835ac19ad912921823be0

    SHA512

    4f292f5399a404b3ef274889707f7bcac87138ef239ad8295305a57821b556dadff7d356836aeac06ef2a232d8a8e51e38fc1e2fde9f27f8187722029c49583a

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    3a4a00f3d06458bbd6b9e0f9da4e2b54

    SHA1

    962c4477465572e18b4a9eee60ccbd744778c960

    SHA256

    5d69be9c5759d037d118a7046f1f4b26a6ae343bef74ff680b0a592f955647a2

    SHA512

    f6e42b1e6cc8677084f79cf6361269a3c4c2f747983b9998f802823926785cc50bd63123e4ce0aaa0875993364a30163f088d187523dc90829f5de1710bc6669

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    58c33b847e9fdee0fae84049ff1c4dd5

    SHA1

    77ac04342963f0dbada73ea99828f397cf975d44

    SHA256

    585f45509e45e6540e0b03fc00c33f1d7612c435f14a68ff1c4b9c4d4d0156ff

    SHA512

    b77dcf721583f608cfb4f160e71042b0112f8ff33dac18a408e62be8a97a30be79c97ac9fc4f08db039badf236778024ad33308d3f848529e9ba0ece19578ef1

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    12KB

    MD5

    d17314e270ab64baade31c65aa11b170

    SHA1

    c1a31cddd1273461ee4b75cf6b398df7a89ef3a6

    SHA256

    2e844b7111815bfa9d47767b79fd64999567d5f5bcef3ae2aca6b0358983df6c

    SHA512

    3a4dc6e43a2c4f6ab3996906811cca79f91469c501842cf40315ee935030a4cd3c1d52fd68fdcd0d912a62d17f3159de9c49075720e5ef2bfc6a90da254830a9

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    16KB

    MD5

    335ae6d3db75c80549769fd278c422a5

    SHA1

    ec865563653752c7e383506ec964ca944f822950

    SHA256

    7b9d936c5559231cc4f4bb82466af1b920eda9cff8f31dde7a08ea8305cfe5b9

    SHA512

    a2f6949b44d4df46e74e79080622986f52e69de801c48e83c799f7c2c91497c5d1d6643be7badb9b8d21e5d2605b4efe10e2b082985aae39e47b55b0dc320b6a

  • /data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

    Filesize

    16KB

    MD5

    8bba3201ce0ea0a08bfb5467463e2cab

    SHA1

    dc069e463f0dd03f7a8ff47a31e37ad9b7b23ae8

    SHA256

    26adf3f1cfc70e71c63bbbd2e02bac0bef186eaca5398cf726e74b974120b7d0

    SHA512

    293e4729b4b226669651b747e46e0edb5777e680a40c756bb803598d0371f4f53fc00fe4d364830c87fb512a074fe9f29b3725448a99d4246e51939300007969

  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527

    Filesize

    28KB

    MD5

    0e062d995e5372761dc3ae3385e1828b

    SHA1

    736a9077e2a378b8b01c032dac0c42ff6a8fc9ba

    SHA256

    e1ed9a4e1f53b32cba6f801afb79e50cbf15bdb68a14d5bfcffbf983ac4a2fcf

    SHA512

    0a915650daad56a46afdc498e81adee0ff1aac1f582776ecbe55ce7421a1b75c97aaa4614da79fd7ded6df69fcbee31aa6409f13bcdd4fdb33a8149fd8bd2776

  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal

    Filesize

    512B

    MD5

    68c44633523de61585d0ff729f3cd4d9

    SHA1

    999ba84ff333607bf622a529b9356f40892fb7d7

    SHA256

    7ebd29ed4293ca6350e95913d2ba38df6f99b19ee1a684033f0038b8d4d8f71a

    SHA512

    1c7d63f99efaa21d667d90fe1e0f1c188fb1d4188aeff05ba932c01d33b0023c6a730b2d0e9f3ac06c166b1871e9397c8af7aac6ea4cf6bdaf653a8c0d5af24d

  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal

    Filesize

    8KB

    MD5

    3dd51c13284f3279c7a1e922858f1b8e

    SHA1

    43724b77587a5f7a63c27b105eb80d64ad8cec5d

    SHA256

    55f6aec7c923c1b18279d36e339c77076acea7fed4bbdeb3f072990a6ae63465

    SHA512

    4e00204e15b5057d11f8fd0ff2c7d01e268ff0cc43c6b400cefad116a54643e3165e544fa869b8dcb1427e62a47a647ae69a30c6dcfee93b28ecf77af459923f

  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal

    Filesize

    8KB

    MD5

    fb0a7c690e27a7c8c75250f607fc2eb9

    SHA1

    bd478c4f4dbc6047863f4fa1f707a007eaa25435

    SHA256

    e9abb8dd79f11862ea32eacfc980596a06ab7aaee6cde80c51a0801fe09dade0

    SHA512

    b2eb89ab3f0d7c6eea650f5e9b2b69f7740c195f327704ac29c9540fe35f65305dd54d03345cc0978104ebae7ec5063dcd363acdeb175581fc8b1c2e586ea8e1

  • /data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest4758450615018444924772381017608398527-journal

    Filesize

    12KB

    MD5

    b65f50cb0405dd0656a2ebc5be738671

    SHA1

    5e3eeedb6a3e85f57d868bf17a822540ad6c5c4d

    SHA256

    b546eaf6513481379e30bc6e10caf8321ef592923b497c4f191754e64a913026

    SHA512

    1748556db0d60c7b3c84a1b24fe774a726aca0f6965cc367e60eb37c0890363e0e123abd817bb402e81361921817ffd0d7da8467a6814dc827bbbb945e481e72

  • /data/data/com.xgbuy.xg/databases/xinggou

    Filesize

    44KB

    MD5

    50d32d5b90a4187cd5ea6724b4ad4687

    SHA1

    00d2ecca8152fa3f3d2a95b20ca8a62b70e4f82b

    SHA256

    d454ed2623fe4754309678304b4cf8005ec8f77156ca1ea9acca6257c697f9b3

    SHA512

    6cd199595f762181e1dc308418710d998318093393e28dc4b1a09a283adde4217b29b6a7a794003a633ede20b0fb141d6a440f196a55db8d1a760c52a5658067

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    512B

    MD5

    6dc928029e1f31745ce73c22b005864f

    SHA1

    da67ebfe97ca68c083adb5d5fc34f7a35568bc6c

    SHA256

    4b9f3ef8300c3d4afd331352c287e9034d8477c82289c69afd5f525ca85000eb

    SHA512

    8455cba63df4319a4c23984953bcbe14fa02b2be19f41729248c3e12b121598a00bdb8791882c65b3b218bb4e4e8084c1dd9cf5eb0aedabf7b548b5629d0ea03

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    49379c6b5438ba4c88d8a79de84899d6

    SHA1

    22ba091d274e5b49240d1abe903a3895d862bd43

    SHA256

    ac3fe2ffab808f1e368a34472d91eba46262b040be2d24bd97d83c6c9cef138d

    SHA512

    34217fc988059573fb8a6704ccb170d1de3067f58186d366b93626ce48d5e283e957a76884fa2495c5e8ce073fd86af7a4282dc11fe3bf35d40452861130ea07

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    03c3403252a5274afc1aa220414d6c7c

    SHA1

    049fd1bd88508341226ed5e70030d9d3cd760779

    SHA256

    672985b3c3aa7aa974775d3a2b82cb3179b8e608341c5ec4ca143314875d7ede

    SHA512

    00b3470210753346797267815d38bd438f7dfa188c945658e2ecc8e92194b47e27e5fd7b7c4d575a261ad0c96b6bfb9e191f94d18e9e96ec9dac5317d61fa135

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    e3de6b760297172cac71d2b4019edad5

    SHA1

    dba76a08fafc8e036e3a4c59275c4d6cebff5d09

    SHA256

    68e26f6b28006283f4ca921919960deb768bbf76a90a8489afa53d973d9226e1

    SHA512

    2b06af436272d266e2a90e932f091e808826f93445577fe30597acd28f097b5f37fb7b5d9531ec4a7e0fad58fa81b99384c8414a508a11d59f0f0fbc61194d40

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    0ae76b5d0366c84171c416cf0c3ad6c8

    SHA1

    2aa82101d24128592b01c267f1f478e625e154de

    SHA256

    56f0cd538f4c4035fd167a755c2fdeb17821f1d43a4714b59d37a4b3f90d3f6f

    SHA512

    ec1ba24a2f2ed25626480a5c8743398dc254ccf5d35ff4ee32b72c84faf5b04d4c3d0094d3201e2f740de7b2b02a8d92ff86ab51090ef4c277fd98f8f6d07499

  • /data/data/com.xgbuy.xg/databases/xinggou-journal

    Filesize

    8KB

    MD5

    cf1a4cd892e3b4e76f23a409ae191187

    SHA1

    b89532b5ef200d5d8f76bbf830f0a3802b5b3f24

    SHA256

    2830cde7880b3d986e17df0f48507959e3be88000e28b09daf9c658daf38cc95

    SHA512

    48355abf9c9f3975018f65ef109d216667f2e31b2f725afec69961fcdc32a7905ed84db5c740f6be7f6cd20d0b14492f518d383d967f0f4f6d3b699111ad43fc

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    3911ad10a2d9a4f7ef7a09639a1b8cf3

    SHA1

    d8d5dae863fe04bef8d987202e25e065efce1e1f

    SHA256

    0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

    SHA512

    d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    81024874f926b0c0c9e613997c9370b1

    SHA1

    a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

    SHA256

    da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

    SHA512

    8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    10455f8598c5ef2aaf709266dd504a5d

    SHA1

    17672975d2bd141de3cc05be252ff67f7367973d

    SHA256

    a592c650fb6343c262a5f57916dd7c7169fc2491acb8b20676fcb7a310afbdb8

    SHA512

    411a66e9e2e7cbfab05ad8bbc506dce41f237249afe36873f22e8cd9fd84945b5a38022f678f6070642abe4276be4c95319dd47d015ab8adf65559e3fb9bb098

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    439b00716a6cd356e64d6671dae2b33d

    SHA1

    d23bab9843bf3d8fae206c46b195a7b4f769be2d

    SHA256

    9ebae3170793097473ad18e4474e8b40e50a179bb6608e16ff1a52113baa600f

    SHA512

    ea5b3024fec3f2c64c5dff5c52a9d540ec17c5ab3190fd3b502ad056cf0be93314afecd4dd6e08e674a69d777a1d1da8e9ea532753b1530c462a94c0d86fc54b

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ic

    Filesize

    40B

    MD5

    1bd86b90e1b355f123e5ce8c93c3de53

    SHA1

    bee5683d6124650c8be0b3740ad66e771f29b178

    SHA256

    3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

    SHA512

    6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.li

    Filesize

    85B

    MD5

    eaff68b70e2b1659349969df4edcb95a

    SHA1

    fa043c3079d8c9ef88a9fdeeb578f9dea8641d3b

    SHA256

    d02d08e197863d695a40307d8e2ad33d6efc862ebb9536129cd59b1820192607

    SHA512

    72b4e5b8f72b516378468577d6293f8be3121240d3244848f1acbd10702c6a1ac806b6d51b190accb1fcdefb2b9a938ae0c419958c887b8f2d97b51f69a89e27

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    dc2e848be2824acf32cff8ee979e58cf

    SHA1

    de0d519b548d2290385fe035f031fd2c4a61a0eb

    SHA256

    77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23

    SHA512

    52d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    39663441e1fcab0e54bc62a83dca03f3

    SHA1

    4d5b247db9fbb1c8fc072ef4112b4265aadc78c1

    SHA256

    86d2d27f7d96283056a00550a1c7a5eaa9e68de920c20b44d1aabe079425c42a

    SHA512

    b2daec5c4ef1ffa57139a2f8dc8f960929095ce2b78fc7b00085d2e64d84dd4ef890e8a43d31ca92e370a91abf69ff8598d23f805cc2958277f92033c6ce89d3

  • /data/data/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    79d5ebf1aa047b25470d1f57692ddcbb

    SHA1

    b8424fb4981a8394fd8a30175aad703aeb9d912b

    SHA256

    d35218e03e53be4c4a489a463296eaf925c612a5d2bbbe85c3ea6c8d1374c356

    SHA512

    b04fffbfdc3796e3fe0bef4ae978023211a0a33ec960e4c001604882c498fddfdad281f01715dfa4d762ad8cc71c93fa3c7430e02b49afb42e64e051622ce912

  • /data/data/com.xgbuy.xg/files/Mob/mob_commons_1

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

    Filesize

    23B

    MD5

    8e24e79baab91c4d0604eaa9006a0cb3

    SHA1

    e427afc94a4b957a7096f73e395a10ea404c076b

    SHA256

    65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

    SHA512

    45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

    Filesize

    62B

    MD5

    36a0ef77b746a61f975e918fc9016d84

    SHA1

    53ccda16edc92f153cc37beff231de260508ab54

    SHA256

    d2c88e5cd82aa38849e300745306391a6400da7edab2a514accc733b48d1ea01

    SHA512

    f669ee921f9c4d78e1dbe74b43af18f693f1074eb359b86c25d1b1f0c4ea41ac6d894e39d3545a9316c8014b75f48360f9d18b9a0ea4ba6d52a6853d13ae4b40

  • /data/data/com.xgbuy.xg/files/Mob/share_sdk_1

    Filesize

    86B

    MD5

    73e28886e8a06ad432e13924fae88dac

    SHA1

    2162988c5de7c3555a3f1f3e76a499a43154bade

    SHA256

    ce31b6414f3fde7a5c4a56a861e0cedf4ccff303862a84bf57cf67a52e38ec77

    SHA512

    31e4547998b78313e8191881104c292f41eef7446aed9b5513d892169e1487022f1a8bb3cc0f9e0ca22efc69a5286b31f0635baf35afce83104f1cdadc508ded

  • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

    Filesize

    119B

    MD5

    1464895a4fbdefc86ecf107de359499d

    SHA1

    310fcc9c4fb05a89e4f8ca57a55311d94bd78a89

    SHA256

    fa2e6cba79fcf9ecc20107dc10ab179f044eedb54ec82fdc953c0a4d1a8a4ef7

    SHA512

    83d3cb152090c3f778970a220836821fe0776e4632b0d26605e4f9ef4a82f0d21a8569af9d2c39df6bb9b447f0835140319a7d46ace0295b4ac3454e4bd3fb01

  • /data/data/com.xgbuy.xg/files/jpush_stat_cache.json

    Filesize

    120B

    MD5

    f7f07bd5d8f707a631d9f80a791c8691

    SHA1

    c6d27e09efc06a4b72390c1b49de47c83a25f200

    SHA256

    c7af435a519f62c21f92ac7bb3469b56e79631f3b8188e8b0742b17d9c687ce7

    SHA512

    2a9eaf16ece7c330266173647549c70c240050e6b8ac26e8cdc91f6b945b7ffbd4ec079a95c44d1046b30f4a67cf2a7801be7bd820b594017d19a9ba979851e8

  • /data/data/com.xgbuy.xg/files/jpush_stat_history/active_user/nowrap/281208f1-4b68-4da8-8b98-d0570b819c97

    Filesize

    159B

    MD5

    afaf86bad9146d30f74e5faaca09d1f0

    SHA1

    96c91621cab199b87c33284429297c42b68d7360

    SHA256

    13cf556e92e7b03549b1d40b00f1be5f8e22771087ede66b75dd5b13589e87f0

    SHA512

    0e089f8802a1347fb498d7efdbbe41e68989dad4ea22eaab435b981e81e90373fb3aef09f227e0520f817d9f5d091361b92dcdb6c3e5066d952a9ba37e53de0c

  • /data/data/com.xgbuy.xg/files/jpush_stat_history_pushcore/normal/nowrap/4843f74a-cdee-4d86-ab92-6f9523c419c9

    Filesize

    187B

    MD5

    6321b5c966a83cac7c135754689c59e9

    SHA1

    f40e6b1c5e5888d8fb857febbeb1a699e2d76fd9

    SHA256

    2e527de356e8c4750a1c65bd1996f7a5cd55a74d3ab5a9fc95454d6eccd5f094

    SHA512

    fc3b24bb87957e16d143ade0190232e46db4b929a90e160658eb659b8ce091bec5788f5b44f964ed924863118d502adc620837beba1db1698ab3f983a4e54b06

  • /data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4MTkyNDk3NzUy

    Filesize

    1KB

    MD5

    92fd72303adaf2ef7d03c9a28aca8262

    SHA1

    53626ebb0b124c62f5217a93117547245b3e8d84

    SHA256

    ef6ae20de956836c904aea410d1d3585da306cdc96ee99520ff91362e9318a7c

    SHA512

    907bfebc07ed436ebf969db5235113a333cadab181f9449e24044fe6954f0fd7e4eee55bffc15fc1b368268a18262f27458caa881f48a1468c6fca1da3cce23b

  • /data/data/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4MTkyNTMxMjMx

    Filesize

    1KB

    MD5

    ca3daef2cc852d6cc8d31b87afced17d

    SHA1

    33bc8cee4db380135c000e4fc8ba714f09c51577

    SHA256

    ba071991ac126429d96704aeaef7f3308f58fe66381e96b1ab93643d0e43456c

    SHA512

    1ee8e70f05ebfe0ac7b2cdea17333ea2dd5b5f7543540f331f290fae11edc51e1619c1e14533e05e5cd1a33afb85ed11263563135d380cedfdc6c83f0d69e4e2

  • /data/data/com.xgbuy.xg/files/umeng_it.cache

    Filesize

    350B

    MD5

    12fcaafe668838eeb687e711c150df46

    SHA1

    82361089cb39da96335ff69cd27c588bfdea3750

    SHA256

    6566816f092b65089aad200b1535d34ef703fa5b2e498795e5b16647420e3a1a

    SHA512

    b866e65a051810031778d34610e010d444678ea070a9efcb98a9cf56cbc347f5f7f632d774776b7493a6b7e6b50ddbc2d305e9a73df2364e986b09fead315094

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.6MB

    MD5

    af40ddebf367d3418c410ba2bbdb34a6

    SHA1

    9a5c0f557da523fb37d3ea9f1dad84e45b78b8ab

    SHA256

    fd4c1d3b24b0138f6f355235f35815ff43de7e73e5029854ac0581f6d5b4cb45

    SHA512

    6ca004321a8ef7f6a08b5be12833971bf017ff58c753ebe73d682abcf5633f084b9b1f5c3453432894f8ce8c9b306963b345cc0d6503450667d9ef66d3ac0ae7

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    56a56032a56816197231ccd2c1447841

    SHA1

    42b24c7723619c5bbfff5625ee1f4ff7a9afb34a

    SHA256

    920b1975141f98268ddde30a18db00a3c92776c8472763640b06009b90ccf039

    SHA512

    f47a2ee1f15a58887d5158bf141277a7d6488fcd31a9c85ca0d6706a4252433b812e8a49e956fba313393ac55333bee777394d300e136d489a484f5e883e3165

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    2.1MB

    MD5

    63eb01b23dce33b6abd34b5693031ca8

    SHA1

    870abc96ae069aa034b1b647244af5465a881ddf

    SHA256

    3798ad86a5974af83d89bc71f1737c1747ca4561beb07f74a214675efab02629

    SHA512

    eac344e6167fc50acfca60a177bccf404cd0eb595b0b3e948f88af21ac3d7c14a49d0d7162bc5ef529b9107132c8ac3d0242186ac1b0ac231acc31e8f969311a

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    66B

    MD5

    19402718bfb1c685a726b4e1d846ad98

    SHA1

    02a7e30044a67085f2f1da24e16e4ecfede65b72

    SHA256

    079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

    SHA512

    25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

  • /storage/emulated/0/Mob/.slw

    Filesize

    66B

    MD5

    093d6d3426351dbbd68f2a6f70dfae8e

    SHA1

    9fd1d9088b5b354c772f7ea865ec8450c09bbdd2

    SHA256

    7065930c425107957a2db95b13c8b4bc1b7225c945a2a1fd941f833933af395f

    SHA512

    4926afa7a570010742fd2e92f9b5813b82e4370c8d44f8e0ff897313a120c2a0e0b14b52629da31c16171c4ec1a435e83efe368dba7535c4ced8a4081a8e2984

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    37b7921f7a6c62d143054fa735256334

    SHA1

    4a3580846a2168045438d7279f0b1409e95c523f

    SHA256

    f17d73eb9d92f67e4e25bce9453a1cf3c36a7b2da77a69c2995461ba826a1b42

    SHA512

    85f77f9aa7dbf282187de725bd88cecfddda0f75623d9ccc8c5fe9cb6b88f4816a82d64121d80d1491c0ae6867c4b873076f13a21d38c684d08486f1f2ebbbcb