Analysis Overview
SHA256
724ef3e2314ce8f12cff0a520c39cec0082b19e080f2429be43bc595a440c23c
Threat Level: Shows suspicious behavior
The file a7be06bb1eba10dbc966a9520df54f49_JaffaCakes118 was found to be: Shows suspicious behavior.
Malicious Activity Summary
Loads dropped Dex/Jar
Queries information about running processes on the device
Requests dangerous framework permissions
Queries information about active data network
Queries information about the current Wi-Fi connection
Reads information about phone network operator.
Registers a broadcast receiver at runtime (usually for listening for system events)
Uses Crypto APIs (Might try to encrypt user data)
MITRE ATT&CK Matrix
Analysis: static1
Detonation Overview
Reported
2024-06-14 02:41
Signatures
Requests dangerous framework permissions
| Description | Indicator | Process | Target |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE | N/A | N/A |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE | N/A | N/A |
| Allows an application to record audio. | android.permission.RECORD_AUDIO | N/A | N/A |
| Required to be able to access the camera device. | android.permission.CAMERA | N/A | N/A |
| Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS | N/A | N/A |
| Allows an application to read or write the system settings. | android.permission.WRITE_SETTINGS | N/A | N/A |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW | N/A | N/A |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION | N/A | N/A |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-14 02:40
Reported
2024-06-14 02:44
Platform
android-x86-arm-20240611.1-en
Max time kernel
173s
Max time network
183s
Command Line
Signatures
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/tmp.dex | N/A | N/A |
| N/A | /data/data/com.xgbuy.xg/.jiagu/tmp.dex | N/A | N/A |
Queries information about running processes on the device
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
| Framework service call | android.app.IActivityManager.getRunningAppProcesses | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Reads information about phone network operator.
Registers a broadcast receiver at runtime (usually for listening for system events)
| Description | Indicator | Process | Target |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
| Framework service call | android.app.IActivityManager.registerReceiver | N/A | N/A |
Uses Crypto APIs (Might try to encrypt user data)
| Description | Indicator | Process | Target |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
| Framework API call | javax.crypto.Cipher.doFinal | N/A | N/A |
Processes
com.xgbuy.xg
chmod 755 /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
com.xgbuy.xg:pushcore
cat /sys/class/net/wlan0/address
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 216.58.204.74:443 | tcp | |
| US | 1.1.1.1:53 | semanticlocation-pa.googleapis.com | udp |
| US | 1.1.1.1:53 | api.exc.mob.com | udp |
| CN | 180.188.25.46:80 | api.exc.mob.com | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| US | 1.1.1.1:53 | api.share.mob.com | udp |
| CN | 180.188.25.42:80 | api.share.mob.com | tcp |
| CN | 180.188.25.42:80 | api.share.mob.com | tcp |
| US | 1.1.1.1:53 | log.reyun.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 54.223.95.86:80 | log.reyun.com | tcp |
| US | 1.1.1.1:53 | s.jpush.cn | udp |
| CN | 124.70.128.38:19000 | s.jpush.cn | udp |
| US | 1.1.1.1:53 | a.xgbuy.cc | udp |
| CN | 120.55.96.240:80 | a.xgbuy.cc | tcp |
| CN | 120.55.96.240:80 | a.xgbuy.cc | tcp |
| CN | 180.188.25.46:80 | api.exc.mob.com | tcp |
| GB | 216.58.201.110:443 | tcp | |
| US | 1.1.1.1:53 | android.apis.google.com | udp |
| GB | 142.250.200.46:443 | android.apis.google.com | tcp |
| US | 1.1.1.1:53 | update.sdk.jiguang.cn | udp |
| CN | 124.70.128.38:19000 | s.jpush.cn | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 180.188.25.42:80 | api.share.mob.com | tcp |
| CN | 180.188.25.42:80 | api.share.mob.com | tcp |
| US | 1.1.1.1:53 | sis.jpush.io | udp |
| CN | 119.3.253.130:19000 | sis.jpush.io | udp |
| US | 1.1.1.1:53 | api.exc.mob.com | udp |
| CN | 180.188.25.46:80 | api.exc.mob.com | tcp |
| US | 1.1.1.1:53 | easytomessage.com | udp |
| CN | 1.92.70.140:19000 | easytomessage.com | udp |
| CN | 113.31.17.108:19000 | udp | |
| US | 1.1.1.1:53 | tcp | |
| US | 1.1.1.1:53 | 139.9.135.156 | udp |
| US | 1.1.1.1:53 | im64.jpush.cn | udp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | 139.9.138.15 | udp |
| US | 1.1.1.1:53 | 119.3.188.193 | udp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 113.31.17.106:7000 | tcp | |
| CN | 124.70.128.38:19000 | easytomessage.com | udp |
| CN | 119.3.253.130:19000 | easytomessage.com | udp |
| CN | 1.92.70.140:19000 | easytomessage.com | udp |
| CN | 113.31.17.108:19000 | udp | |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| US | 1.1.1.1:53 | _im64._tcp.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 113.31.17.106:7000 | tcp | |
| CN | 124.70.128.38:19000 | easytomessage.com | udp |
| US | 1.1.1.1:53 | sis.jpush.io | udp |
| CN | 120.46.84.108:19000 | sis.jpush.io | udp |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 1.92.70.140:19000 | sis.jpush.io | udp |
| CN | 113.31.17.108:19000 | udp | |
| US | 1.1.1.1:53 | tcp | |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7003 | im64.jpush.cn | tcp |
| CN | 113.31.17.106:7000 | tcp | |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| CN | 124.70.128.38:19000 | sis.jpush.io | udp |
| CN | 120.46.84.108:19000 | sis.jpush.io | udp |
| CN | 1.92.70.140:19000 | sis.jpush.io | udp |
| CN | 113.31.17.108:19000 | udp | |
| US | 1.1.1.1:53 | m.data.mob.com | udp |
| CN | 180.188.25.47:80 | m.data.mob.com | tcp |
| US | 1.1.1.1:53 | _im64._tcp.jpush.cn | tcp |
| CN | 124.70.211.119:7000 | im64.jpush.cn | tcp |
| CN | 124.70.211.119:7002 | im64.jpush.cn | tcp |
Files
/data/data/com.xgbuy.xg/.jiagu/libjiagu.so
| MD5 | e5a53000766ebc433b27d6a66ec4f555 |
| SHA1 | 2c8f53f1c03aec2005bcad67d731f07261dabde0 |
| SHA256 | 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e |
| SHA512 | 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d |
/data/data/com.xgbuy.xg/.jiagu/classes.dex
| MD5 | 5e99738dac60d8528303c05236b49521 |
| SHA1 | 09defe8e673554d1fbfb6818d7f6b06926ef21e3 |
| SHA256 | e4d0cea4069552ea69782c90b6d51278d0f422dfe2052e7f78c992e07186b109 |
| SHA512 | 7291923d241870717b7ea2d2f8672dc37248b3bb8070056ad923465e55e347a3da20620e79edc8ce0939083e2d3efb3d574ab9cdf4ef88364d1164dfbb49f49a |
/data/data/com.xgbuy.xg/.jiagu/classes.dex
| MD5 | 343543170cadbcad918429d62ea0b7a2 |
| SHA1 | 9a55aefb843427a4fa43fb62e9fff30ee674b04b |
| SHA256 | d2c01fef1bee484e1ee39420ba919522325c02eb4809c799fbc2b3262f2c447a |
| SHA512 | d07071e13fcc2c80e2ae4bca90e9b4b23ff7a212353050ea600b3bccfa6f1ed93584d6c5ef84addb07fa418214a1b7431c8fd037edf3c7de44391ad8bffc04bb |
/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex
| MD5 | 09623bd5b2ce2e506e8dffcb2cbc3e8c |
| SHA1 | e49e1b0d7af536becc5e4701b663ca1923b09c80 |
| SHA256 | e671a6a2653b372037b959916daf955753b4cef04d60fca7a2728c60cc5656a1 |
| SHA512 | c5ffb5d4b6e41531768e4635626b1ff26d8b676166d5eba1baf195d92cdad8c0ab4ccae5236897e9eaeaeb2e2cf2116d3a62790ebdbff45ede9e201139c70450 |
/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex
| MD5 | 668702b0562aaaae77078af0889b6745 |
| SHA1 | eb46db301936ec7c0433aec9512786468d593988 |
| SHA256 | 744961b59ffd06c0769febccd0c634a0bbc36a16c8ad8715d177b4a737fa3123 |
| SHA512 | 00d36a6f14c526c5524ff1cf13eb46364397b464def62f99df58716f49b4b80e448cc3c16b056a1d4f3c2cd888dd1b31636cd56e86adad286643dafa3526df62 |
/data/data/com.xgbuy.xg/.jiagu/tmp.dex
| MD5 | f1771b68f5f9b168b79ff59ae2daabe4 |
| SHA1 | 0df6a835559f5c99670214a12700e7d8c28e5a42 |
| SHA256 | 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939 |
| SHA512 | dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri
| MD5 | 3e2162601f044dbfc3ede3a963f10634 |
| SHA1 | fa3cb7f78277fbca80c3604b741465fb8ce57da1 |
| SHA256 | b2f6bbc609ad2c27a8a047bd089f71d540ef9f94c78434109b9eaed187656df5 |
| SHA512 | 8b46991d1df394f496aa8078ca20b19da059630deb29f12c55bc2fa3fbce225c6214e593d91f291fc74a9e826e29579dc37dd2f2f05183427391c9f1380e20d8 |
/data/data/com.xgbuy.xg/files/.jiagu.lock
| MD5 | 1daefe97cd32ac2d505f9874f663f932 |
| SHA1 | e94f0e850097af45726cc9fa605bd06784122d43 |
| SHA256 | 8ae7215068e541c63f44e97f3d2e5b34d73f2cc934454cddadaae554a738aebe |
| SHA512 | 53a8a2ff2b3ea50568fadb176dba3154dbc0700b57588bd75531f147650634eb9e4e532cd54d27d1e3b02a4b918f413d19417eef971022cb3e870d5dcdb89768 |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
| MD5 | 1264f30db5bc978090c891fc9ba97820 |
| SHA1 | 22a1664ca5bac8af36bdaf8e4098c02c7fc9c1fc |
| SHA256 | 6383110e70c2cf20a67539bbf759d99229ac2dcd214cae6a3c5de840497bab2c |
| SHA512 | f3ec53223344ea4763479b39ae62a3dde4b83e0db05d4707c9e2c914725943063706c6c53e6fc043ee13640ac98242775c901b84ec76eb3edf11615bd0084488 |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic
| MD5 | 9afbf0dc0b4a4fd0a874cfec2c55461a |
| SHA1 | a42766499eef11be1120ff87588b7f715c1b2a7f |
| SHA256 | 75c6a927b6cffe50b1a48e8aff766f5d543dec5aec8010b835ab4c4d8dd3da37 |
| SHA512 | 863cdc25dd26bc2db5a80480a5d5bd16965ce02afc94f732f31c24bdcd3daaae24d41504f0eefead9a8ecc402aa2e798ce100e8a225b13b38b05aa433456185d |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.di
| MD5 | f2b4b0190b9f384ca885f0c8c9b14700 |
| SHA1 | 934ff2646757b5b6e7f20f6a0aa76c7f995d9361 |
| SHA256 | 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514 |
| SHA512 | ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1 |
/storage/emulated/0/360/.iddata
| MD5 | 9e5fa6551e30e7b58dc9a9a28f2edd9a |
| SHA1 | 285517a3a800736c6a6660da5df3b873e34d4c9f |
| SHA256 | 968baa7c9996237f0da467a5d5506939cab671faca38b0a739f4c5863a67ef88 |
| SHA512 | a9927cb646d975f18a77723b1796f11e150127155a23ffaaeba6f18ee3f99176c139cbbc7d3355bea890cec0a815896ba6f996a850d56789fc0719a2c30e4f4c |
/storage/emulated/0/360/.deviceId
| MD5 | 48ca3a96fef2a3e8a533bd34df9a1af3 |
| SHA1 | 006db215f500bc3d6174d43fe07d12474922e274 |
| SHA256 | c31812e805ee9538f3a0e348a09d002b767f7aea8590966a873ac8cff2ef015c |
| SHA512 | 9c664c49e7337728398c65455de60285265412ed398f543979ca391aa2677ca87ce6eac8fe443dfa9f6dc1495ff4cc5c0c6c7dba51adfae6f27cdb55ef603245 |
/storage/emulated/0/Mob/comm/.di
| MD5 | acc2a2f5cb76c41d2e97e0d409b53bdd |
| SHA1 | ed06f22ff10e0912f50d53bc775ed2ae70f85d5a |
| SHA256 | 12ee2ab25175281fd1efab755eb5a5b442e91d263646c52118e6b1e97856f448 |
| SHA512 | faed72411dfb1546a82a302b6aadf921bf66a09aa4641a6d1d523e5b58c063d5210089ca2d7dec8aadbe1efec4748a8abb36ab9fe1ab18539a92b76730b85419 |
/storage/emulated/0/Mob/.slw
| MD5 | 19402718bfb1c685a726b4e1d846ad98 |
| SHA1 | 02a7e30044a67085f2f1da24e16e4ecfede65b72 |
| SHA256 | 079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0 |
| SHA512 | 25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b |
/storage/emulated/0/Mob/comm/.di
| MD5 | 70a42cba408700f9a6c01c7941a8829e |
| SHA1 | eab01cc2c0671538795fb0b1146017dc099d0984 |
| SHA256 | 499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f |
| SHA512 | 8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c |
/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-shm
| MD5 | bb7df04e1b0a2570657527a7e108ae23 |
| SHA1 | 5188431849b4613152fd7bdba6a3ff0a4fd6424b |
| SHA256 | c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479 |
| SHA512 | 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012 |
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1
| MD5 | 8e24e79baab91c4d0604eaa9006a0cb3 |
| SHA1 | e427afc94a4b957a7096f73e395a10ea404c076b |
| SHA256 | 65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d |
| SHA512 | 45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae |
/data/data/com.xgbuy.xg/files/Mob/mob_commons_1
| MD5 | 99914b932bd37a50b983c5e7c90ae93b |
| SHA1 | bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f |
| SHA256 | 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a |
| SHA512 | 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd |
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-14 02:40
Reported
2024-06-14 02:44
Platform
android-x64-arm64-20240611.1-en
Max time kernel
13s
Max time network
132s
Command Line
Signatures
Loads dropped Dex/Jar
| Description | Indicator | Process | Target |
| N/A | /data/user/0/com.xgbuy.xg/[email protected] | N/A | N/A |
| N/A | /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex | N/A | N/A |
| N/A | /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex | N/A | N/A |
Queries information about active data network
| Description | Indicator | Process | Target |
| Framework service call | android.net.IConnectivityManager.getActiveNetworkInfo | N/A | N/A |
Queries information about the current Wi-Fi connection
| Description | Indicator | Process | Target |
| Framework service call | android.net.wifi.IWifiManager.getConnectionInfo | N/A | N/A |
Processes
com.xgbuy.xg
Network
| Country | Destination | Domain | Proto |
| GB | 142.250.187.206:443 | tcp | |
| GB | 142.250.187.206:443 | tcp | |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 216.58.212.234:443 | tcp | |
| GB | 216.58.212.234:443 | tcp | |
| US | 1.1.1.1:53 | ssl.google-analytics.com | udp |
| GB | 142.250.187.232:443 | ssl.google-analytics.com | tcp |
| GB | 216.58.212.196:443 | tcp | |
| GB | 216.58.212.196:443 | tcp |
Files
/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
| MD5 | e5a53000766ebc433b27d6a66ec4f555 |
| SHA1 | 2c8f53f1c03aec2005bcad67d731f07261dabde0 |
| SHA256 | 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e |
| SHA512 | 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d |
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex
| MD5 | 5e99738dac60d8528303c05236b49521 |
| SHA1 | 09defe8e673554d1fbfb6818d7f6b06926ef21e3 |
| SHA256 | e4d0cea4069552ea69782c90b6d51278d0f422dfe2052e7f78c992e07186b109 |
| SHA512 | 7291923d241870717b7ea2d2f8672dc37248b3bb8070056ad923465e55e347a3da20620e79edc8ce0939083e2d3efb3d574ab9cdf4ef88364d1164dfbb49f49a |
/data/user/0/com.xgbuy.xg/[email protected]
| MD5 | 343543170cadbcad918429d62ea0b7a2 |
| SHA1 | 9a55aefb843427a4fa43fb62e9fff30ee674b04b |
| SHA256 | d2c01fef1bee484e1ee39420ba919522325c02eb4809c799fbc2b3262f2c447a |
| SHA512 | d07071e13fcc2c80e2ae4bca90e9b4b23ff7a212353050ea600b3bccfa6f1ed93584d6c5ef84addb07fa418214a1b7431c8fd037edf3c7de44391ad8bffc04bb |
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex
| MD5 | 09623bd5b2ce2e506e8dffcb2cbc3e8c |
| SHA1 | e49e1b0d7af536becc5e4701b663ca1923b09c80 |
| SHA256 | e671a6a2653b372037b959916daf955753b4cef04d60fca7a2728c60cc5656a1 |
| SHA512 | c5ffb5d4b6e41531768e4635626b1ff26d8b676166d5eba1baf195d92cdad8c0ab4ccae5236897e9eaeaeb2e2cf2116d3a62790ebdbff45ede9e201139c70450 |
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex
| MD5 | 668702b0562aaaae77078af0889b6745 |
| SHA1 | eb46db301936ec7c0433aec9512786468d593988 |
| SHA256 | 744961b59ffd06c0769febccd0c634a0bbc36a16c8ad8715d177b4a737fa3123 |
| SHA512 | 00d36a6f14c526c5524ff1cf13eb46364397b464def62f99df58716f49b4b80e448cc3c16b056a1d4f3c2cd888dd1b31636cd56e86adad286643dafa3526df62 |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri
| MD5 | 2c30620befc2b2631a01f8a1ca06406c |
| SHA1 | c3fddc6146327e521b45582ddf92b16499714e6f |
| SHA256 | 1f16858c5a6d40121b0307223d83cbaba07d6c2be7569ad6ad507f45cd082236 |
| SHA512 | f969f6a49d6ba13d95fc65782586159c1ccf878c0b546baec171732f829629b432a3eccd02a3127996b142baeb1b2c92e15b1854f27758d9b5bb63d260311b0a |
/data/data/com.xgbuy.xg/files/.jiagu.lock
| MD5 | 1257ac8c6530a39a95f846116dacd3a6 |
| SHA1 | 42487c018167f7e6f00a9360bf52dc3b17b280af |
| SHA256 | f76e6745a8346cadc42a0c6bb8e8ba7b014e671ffcaf6de5d7b62adb6fc3a0e5 |
| SHA512 | e70a052a16db8b8b3b9f001614c160bd94b85549449ada1f765c143e4dfd06ff5fcd817e3a83b9276edbdfee4f2b448c6743d2095266e4972c649dcc2b628474 |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac
| MD5 | 1264f30db5bc978090c891fc9ba97820 |
| SHA1 | 22a1664ca5bac8af36bdaf8e4098c02c7fc9c1fc |
| SHA256 | 6383110e70c2cf20a67539bbf759d99229ac2dcd214cae6a3c5de840497bab2c |
| SHA512 | f3ec53223344ea4763479b39ae62a3dde4b83e0db05d4707c9e2c914725943063706c6c53e6fc043ee13640ac98242775c901b84ec76eb3edf11615bd0084488 |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic
| MD5 | 9afbf0dc0b4a4fd0a874cfec2c55461a |
| SHA1 | a42766499eef11be1120ff87588b7f715c1b2a7f |
| SHA256 | 75c6a927b6cffe50b1a48e8aff766f5d543dec5aec8010b835ab4c4d8dd3da37 |
| SHA512 | 863cdc25dd26bc2db5a80480a5d5bd16965ce02afc94f732f31c24bdcd3daaae24d41504f0eefead9a8ecc402aa2e798ce100e8a225b13b38b05aa433456185d |
/data/data/com.xgbuy.xg/files/.jglogs/.jg.di
| MD5 | c91ec50b617060cbe0bc05a7b6d6eef6 |
| SHA1 | 1b75cf521777b8ddf4a651c1fc79fbc93959ba78 |
| SHA256 | 3f07f59f7404afdd34e196df5204bd24512ce8de0a117ada116f70125c591667 |
| SHA512 | a8bae98ada727de416804ddbbb79e19ff04b3744128cabb83f3b13a1e1ec423d26b067f6369d92da42fa144714c13f5d4d4da349f819f087feddfb3dfc27e8dd |
/storage/emulated/0/360/.iddata
| MD5 | 3b6b1810efdef52d6a493510a31c2532 |
| SHA1 | 185a4da50b3e2d327daeeafedc687f36e89fdc5a |
| SHA256 | accc1ff30559f080e4662a82c4dcdc499d3cf9ea4b2894870ce89046dbe73372 |
| SHA512 | c523f762f32cabe0d1c697cd5bd31233bbbb092c25b68cc1f64cf75938dcaad9d650569c6f2cc8782fbd4790a827b8d0b1740d9956a41362566fc9efc92a4b26 |
/storage/emulated/0/360/.deviceId
| MD5 | 4c4c5285293d5141f582aefa4e038669 |
| SHA1 | e01852a72e5a8e6f7d63a21426b515118196047b |
| SHA256 | 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731 |
| SHA512 | 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399 |