Analysis
-
max time kernel
179s -
max time network
184s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 08:06
Static task
static1
Behavioral task
behavioral1
Sample
a8a91b51afb1cc174ebcb207d5ba7129_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a8a91b51afb1cc174ebcb207d5ba7129_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
General
-
Target
a8a91b51afb1cc174ebcb207d5ba7129_JaffaCakes118.apk
-
Size
16.6MB
-
MD5
a8a91b51afb1cc174ebcb207d5ba7129
-
SHA1
989ad96e52d21904e974da95da8c8a6437609a86
-
SHA256
af7d7ad5718e1f2b319073395ac9a8b4331a1f6a7f0a21e7e5cba8354ed43c18
-
SHA512
99fbbf5d27bf95407f44efa5f99bc465e62417ec4569865bc3ad7c0ed4d28de3a11210c5141830d601905bf7566e939f7d53e2d08f2ffcf3ffc60119eb00aede
-
SSDEEP
393216:Eu4YKsYJ74h4YjCjloVjNVL8VuK9Lwjeqz/:Eu07Jsh4HWYt9Zy
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Loads dropped Dex/Jar 1 TTPs 11 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.xgbuy.xg/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&com.xgbuy.xg:pushcoreioc pid process /data/user/0/com.xgbuy.xg/.jiagu/classes.dex 4232 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex 4232 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex 4232 com.xgbuy.xg /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4232 com.xgbuy.xg /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4319 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4232 com.xgbuy.xg /data/user/0/com.xgbuy.xg/.jiagu/classes.dex 4370 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex 4370 com.xgbuy.xg:pushcore /data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex 4370 com.xgbuy.xg:pushcore /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4370 com.xgbuy.xg:pushcore /data/data/com.xgbuy.xg/.jiagu/tmp.dex 4370 com.xgbuy.xg:pushcore -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg Framework service call android.app.IActivityManager.getRunningAppProcesses com.xgbuy.xg:pushcore -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
Processes:
flow ioc 33 alog.umeng.com 67 s.appjiagu.com 106 b.appjiagu.com -
Queries information about active data network 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xgbuy.xg:pushcore -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.xgbuy.xgdescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xgbuy.xg -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg Framework service call android.app.IActivityManager.registerReceiver com.xgbuy.xg:pushcore -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.xgbuy.xgcom.xgbuy.xg:pushcoredescription ioc process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg:pushcore -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.xgbuy.xg1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.xgbuy.xg/.jiagu/tmp.dex --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/data/com.xgbuy.xg/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
sh -c ps2⤵
-
ps2⤵
-
com.xgbuy.xg:pushcore1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
cat /sys/class/net/wlan0/address2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.xgbuy.xg/.jiagu/classes.dexFilesize
7.9MB
MD52a9391172256c79ef8abbea96b7b1450
SHA125b4e1b87a12410abac9b6931ac4045c3b09ab76
SHA256057524f76c6240486c41ce6bb5004173c81552e9a6019452025c8e28ba1e3559
SHA5121c53da79ecbed23afe1f7031d5d8029049567279e9297ca335fff52004b74f8d66bd00e3d2ea8f9f32faeb051617bbd686f05ad8e691cf5b78f450ad8b1cdf4c
-
/data/data/com.xgbuy.xg/.jiagu/libjiagu.soFilesize
382KB
MD5aa01dd97609092ce310e17bf791069ce
SHA1f000840a8f68ea7beb2e29ea466088daf55609db
SHA256e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
SHA512766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
-
/data/data/com.xgbuy.xg/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/6936001b0843c9baaf6a3f320fef658f74b649cd15210e9aafd88153117e16a1.0.tmpFilesize
79KB
MD53ccf674803e2bcca74d940a369b98a1f
SHA1b82beb53b74476af3563d05f4b49b4628611c19f
SHA256897e90108102b4d93eed118fbc62f4bd208a2651c52da15431f3ece36f4ff274
SHA512b98a53d48cee9d8d4fae804736e7b66c28beb429d4e84cad49f4f3e92f5a226c99eebe093fabee98d657d41729eab74fdf6081cc29b693e076b213e0e8e60a5f
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journalFilesize
179B
MD5572e99e56905de66bd575bbfb70c07ef
SHA19c450ebdf2a4591fb24ba098b7d83e7cc6b1ee8a
SHA25648781da7a8683a58fbe4ec6bb4291c553e94b87c81e81b52fa94a3db6f8f614d
SHA512c6e78adb63e30af05f6915f2e8416460235d888697c62f0e3dcdf48803143e5052c2d925607cd61e7a273ce684bb021e4db9c0d15082d27b87a50ce0c3aabaab
-
/data/data/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD5a5537108bfb619ea01400c9a60df911e
SHA1ea5bb6d86f731ba001165266b41442011398f595
SHA2563e8681ab415322316d9ca9350db67515a20354bd556fae51780fc64cef28bc6a
SHA512447f32d84c97728be3ade978ad4d663bde6efe796ea4c5c012fed1789e2cdae52549cbd295b2e018ff57aa8cd216aed2e5d0ed9581774b0518d0c43fa8dbbfe2
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD5723a499071d1e8d7958a7ebd6b50c8b5
SHA1942156ad4d1b888c2df56981c39facac3cf15b84
SHA25670eead4ebc7b41d473bbd768bc101fd7fd86b7197020840ab9eb48d27adf8e83
SHA51252b4a2e13cce913ea13fda844a236f00f95e5ed82983eb2a851846bdb593698ac5e2c441b4093ac9a9dc35bd5dc5a52e37ce489a16e810b721b4ce9bdf78de4d
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD563211d62691b52db001db4e8fe925d16
SHA183d60d623f2a104794ee950e26d821fca51ae6f8
SHA25695a3d890cb782e1862e5f59c649bff6a9e04559e9c8b7228a1a533709aa73e98
SHA51205bd7e9e9979eb168b8fce52410376cf12f3d422dbb57e2f1c217f741b8974faa63af205561935a310fb6022a63c9f490b1491371d8b8ed868445de2dbf9a57b
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD52bf1170a6e1928ebc9a04cf3662c8fb1
SHA10d9215b8aa1ee54df213748f5e610ceddd9985e0
SHA2560598fc7294ee177c26c9097735bda7bf601892fc569141ed301fa19ae8d36270
SHA512a54a01282ae75216f3f137d506a2b979ac746625e44b0adbf3f698115f8f86435496a08d58e3ea8f2aaa20b16d00ac6df919f9bd46c2ff399e880707a58cdbbf
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
20KB
MD53bcd1be77748fb947498c28666659720
SHA17a44b0d5928766f7971b356cacd0d3ac405b5452
SHA25639c14c56eeec25308d900b729e45deeaee69f567402767c3338d2187c7be074f
SHA512290b95f999dc8a7f57ae5960e45f105e321ba993179a02ebf3b473771b2522efe39776b4f885bf59168a0ad462286399a1acb6b4e47561a6599991142205d3a9
-
/data/data/com.xgbuy.xg/databases/Reyun.dbFilesize
28KB
MD56ddb59748048e2722cc2d542126624c4
SHA1537eb3945c2ce4d8bc5314cc52cdb1cdc08e32d7
SHA25603bb33f41e7b54ef658b491057c0557523bd34ce676bd7346e066daddc650c3b
SHA5121062c83442308d79a2c01404f7dca253d1d52bac2581580a5ff27eced81b89c0ac560534b17ec9b33901fd2c8864c84bc33354384abf59eb296ceeb94fbb77a1
-
/data/data/com.xgbuy.xg/databases/Reyun.db-journalFilesize
512B
MD5f7fb91f55e8414e98048eb6393a8954d
SHA18ff3c0b726a29cf2f4c9a1faa880a45fc245d656
SHA2564eb8e0acbfbf969904e217f549af16ea4de86e09527f3816a77f366a6f8c8028
SHA512640f4e3d9ef2a7619d0999b35acc2d1a5d419510c35aa7acf6cc59559fc2c1c6ee587db7c252ed8bfc293843c832718ca4e3471d5e7514b9087b4446b1169e59
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
44KB
MD5ec9ff9df3c096e34b91770d4b2e1ab50
SHA1d26cae8254319086e263e774bc1a295f6ad20ff2
SHA256f8b549f85557e1f385a52f2fe0b397e62b29a7fed81f62653cb9c1ce08f1967e
SHA5127b57f3397fc587a4057f8d2570ab69c6052f964ded3c40af33e313019d231509ff9ee1c9c5a0c860f26ce630cf5bca0bd64b1e85fd501a361e0bc9528e7fd313
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5e8313ece66e1668b0f4e5889d1788f3b
SHA1bb0cfce750feeac810c207a35419fa6f7d01a773
SHA2569049c63b155c68da2db7ad9844b5a2f84031881424d0a09f87aed70dfa026f52
SHA5123ad2588b2fec7648861df25552f895af9ef3537675bce41b10bd42e5f695c971455a6e3e2e770bd877fe6310cdff8869ebedc95046456a345bf82a4d7cb71958
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5c51ef43381120adf64d514a9256cacfc
SHA139e245786995fd234a202562c3f46eff10bede9f
SHA25693e48f7bd6f7400f855e2716e24be1532ef1cec7b8d4a95b157f53119aac0416
SHA51299e581bedee057e007590a16019ce8beacf7dfd6b72628a99ffaf7d15f53a53f225a1b3e148ae5db2620561ca4767df0ffdbb3e3fc936ceb033dc5995eb25945
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD5fb6087569237c1e0287c15f1f1dcb034
SHA104d0ddedeb2f31e96d282dd79a80e5ce70891420
SHA2562d5f57af67bfc9a59978517dbc53c6c23d8fd49487a420f581bfae3ab0138e1a
SHA5126e29f7818f2d57e106f62ef609cf26afefbf289e2974c1c592e7c8f675e1aad5f2f34790d32b0ed5860510cf8d46c1b3b81ac4c148727924d69e2ce1fabe6703
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
8KB
MD59ae7e07a674bf05c0549197f191b8a3d
SHA19a4f1589e705288975b2edd1bfd159af14892683
SHA25667fbf1ae091ddb6fa3cd39833538c968bd040c1a4a08f68ef0dd9267de2313bc
SHA512e1673f913b1a41a28b89d98fba287aa24dead3e4f7bec04407b67106df954c24613b0ef0766a071ffc5be686f503866f2f6c3bed4a56eacbfb5a4ff66f72bb24
-
/data/data/com.xgbuy.xg/databases/Reyun.db-walFilesize
24KB
MD558333d49c3db5f28420673f577093224
SHA16b93144859b46ed782a8c9cb6c767f404647c7be
SHA2567f73dae2130e4fc735cfaf13a53943fe3d2421f997c7e515aa538b2c854d628d
SHA5120cbfb01a38d36efac09e60bddbaa7e7bacca9ce1c4dfd6f254b75de173135b2e547612935ac9ea7411b0b829bb207fd1df18e9f4a4b92039d71a146c3a4cd719
-
/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-journalFilesize
512B
MD520494cafc45f208fe91868114b320ea1
SHA18f751e0cf8fe6dc0d6fe5ab908eb1c8accd001db
SHA25618d4f707c0969d042d5c15d6938f12016a16bfb9592de7458fcb6368de1ed3fa
SHA512269d23abd8aabb53af1223f81e0b2eb87e97212a1e5385f1f62c17323ccb6d24bbd53baf000598d79700d799fdd6322e1cb60cc4b305d31f0124e86277faba33
-
/data/data/com.xgbuy.xg/databases/ThrowalbeLog.db-walFilesize
140KB
MD595d413246bc457b5b89cdd9315650ee2
SHA1c3783f3cd2b5c6b150642eb30e843612348223aa
SHA256b157e0f8a745696ae44367f26a08f1ca3957a8e6de07ffcb79397857d373bb8f
SHA512de5c717539741138498717dc189731fe6fb1489fb0a79bb3a3b0c887d00c815a2acb8a9ed1fbbf2a08256124da3bd1e130baf4807ffa81a47d2f9237cbc7e174
-
/data/data/com.xgbuy.xg/databases/cc/cc.dbFilesize
36KB
MD55d7ea1a23af19b4340cc8d90f28297d5
SHA14cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA256474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
SHA51233071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
-
/data/data/com.xgbuy.xg/databases/cc/cc.dbFilesize
36KB
MD5ce6135aa1b1fe4f2c2db2a546d2a5558
SHA179b59582154017aadab783dc266fcb158c252940
SHA2567b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
SHA5122839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-journalFilesize
512B
MD54e3a676a4e91714e4563077470d55183
SHA163d7f84711e4487f8c34a195c86727e48909b014
SHA256f09ffb3dac62c61d6a720847c5285f7b6f4f8b35cfd3673ba5af1717dcbe0670
SHA512c931260161bc2223a23d19fa30076c9c346ea8b0c5ae2e19ec4051b2f65bce0127a15fea91a3d27dfc67a5f074e50bed730cd1e6ce43d6292806f5b832a5fbde
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-walFilesize
48KB
MD5c238699d3141a00acf54abe4ec616e68
SHA12abdc0a852c0225fb19c8d9a1e95ac569b100aa2
SHA256802b6ee91a25270c96e4759db5842e1e4d3831f785b4f8f04edd700947b9021d
SHA512a68636b8463705200921d45d09bb0db6734e37057dd22eb4562ecb902420e177d003b6e245d1f01746757364e1e0ad3338f1b3580b1aad97a69baffda9c7bef0
-
/data/data/com.xgbuy.xg/databases/cc/cc.db-walFilesize
16KB
MD596f09b8ce2548ed1d317d7180d05af30
SHA170a76b3ad9147d86b64c41ce7f271bdd8e14f681
SHA256ba211cef4f28d325bafc4f1946e1b77d57e0c7e204348f7c1dcb4d5276589f6f
SHA512f1e7688090082043bf403bf1e1f2534584ef3e16dc6e262a057b38c97a31de081e7675e979e3022d99465f075555bac57720e34447687fba8ecb2b67a7bd4e84
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest61734289485615521022680076755503589452-journalFilesize
512B
MD50f7787acfc8ecd3cc850d4e3e243b53b
SHA1913b9ef3ef28cba552ca8aa6704298196ec3154f
SHA2562f39cffb4c60f05d338d0f830f2291f33fa4d56d61235d9a7340339af265f2f2
SHA512362e93776cf011bd374effd2689677de6a6edc3b3b7a5c773668e7aee801fb16d2dc3769ecc4e9f29346d3bb5aae48f0e228edeeac803232ca4b839d0313ae3e
-
/data/data/com.xgbuy.xg/databases/je_1000_ISME9754_guest61734289485615521022680076755503589452-walFilesize
48KB
MD561960bfbe78ecf70eba43e3a95c8d284
SHA1e60fb2ce7fa1fa937d7c8af612e1564c452eead3
SHA25658082bd60fd9550d466bc82e943f60515c3a61b00664a3ea0ca120bdc611615a
SHA51248b16f84a0a873034781ed8a7ae2ab590c6912818799e8feff06ff6ecb2bad0402ce7ea002354f0c217bdb74e45f55f42850bf68c15d7c1caa078bdec5423995
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
32KB
MD5b217743ac2109e6d1b9145f4190294e8
SHA13dfc286cd4e25580eea1523dfbb85ff6e90b0502
SHA256785e0545fc54f32d55a30fb48a33b0a002167928a80f9f4ccb7f5633178571b4
SHA51215b696ea1c87893c36ad619d39a0343a114d7bd59891308add8f03e0543cbf9ff0c71f963a3b024b0f8331e860360970a7e2e178580233f8baf82b6459dbb7c9
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD575bc09d1d85eee3723d0468ce0a78c28
SHA1f8c20cf1ac99c0d3b557258fd1c9365499db686e
SHA25613b9fef682ad1c58729aeadf6470383f1e86fee80463903247ae0b747ca04029
SHA512b7bf2b09e1aebf112fbb6a48e95dc50fe425c37d744cd88dee0c521dc6de4397b246e25c91e7813632983b87d0a02848a244ed63929e10fd81fe6ecc53e0d770
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD590cad8be1ad4a8c3a49b763b3c7dbe37
SHA1bd5fb96c0619b9c6603201c7fe840a2e7e7f2f76
SHA25602fefb6b3d206c1a3ec8cae2c673fb91090840016ed01e1c895e6d697ccf3ce9
SHA5121c1a8f1d8a242e869f2a08b530217d5299495eca2df45024e572f858ff4edd278842f35f429fa855e4cca37f5cd0fe4f8515c06c048906f42a022702811d3ce9
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
32KB
MD54bf0021e406c8d3978ef44fe72af7c43
SHA1946c64cda43b0f70acf567aaa47228a0742ab2ab
SHA256cc206d818d6335b822158a12df27ff1f235d4090eccd4eac15b44703d33bebb7
SHA51204f33d0923fd68ec5a55964ab56b3895789e1e13ae79ecc65cb33fe832bab1d54d274abfd8de344ad2527aa30c91a2348d5afaa23715cc5228cd7dc7b3333e19
-
/data/data/com.xgbuy.xg/databases/ua.dbFilesize
16KB
MD5892e081b694fb8bbc8143a945a37461a
SHA1ab1c3a2f46cbf15b4bd4edc1c996c06c37daed49
SHA256e8f94f4cbbf7b2d6fe22bb1062480a6ad24eed9511781b522819048626bc4e8c
SHA512416b954705913997f1bf44d1960bdb0166e46d3cf026c725f3d79055a300cf2997ae15e30573ea926dff195200a947a9463cf98707f10425d7e29d265fb45f1a
-
/data/data/com.xgbuy.xg/databases/ua.db-journalFilesize
512B
MD5104d03c261a30b4de6e8e000df56143a
SHA1adacc74b1a98e4c7e9635c9e0ce989a5a513c0cb
SHA2569c852f891faa7fc46fa78235d73ca7ec85776cdd24ae40bed5027547965198a5
SHA51289773c5850976ed749efba9f8b52c47f7febbc729afb5a2828cb2915dcbffd604d43cfb9bc76160b5dd16cd5d5da1a5031933c22dcb53e3b6923b233dcd1a4d7
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
56KB
MD5fa40f016296c6b16ebb0ae68b78834d3
SHA1529372fcbd6b0e4af72c278fbf590b6db251ad57
SHA25618c927c72cdfaed66dfb96c69592357436288f653497b12a683e839f7aae602a
SHA5125e1cbd40f5d12fe8d9e4d6506d819a74756e27b98968c2dd0841c0669d8d0b2b22fa714f8f0a00fb382a659b422b12c23cbdf366e9c4ebcc3ac6a01f91ee1cbe
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD5ac350075380202777164398261a0de00
SHA1442118f4ad5befe03152a2c19c3f232863ae5cee
SHA25693e8470fa42e155dde0e1509307b87c075c3f1387e74b0346cff72e2cb351edb
SHA512b5126612a8e6db059fff7fb28c44267284a254e10923da805cb7fcd609aa413e260a674b48ab19822a8a76c4dc2b9ff8d4d487c7c878a73c36a256db08622b07
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD54a18adf0d7e69aaeed2b57fdd13a3c1b
SHA16c76db5e4f519a668d4574b5b031443d68e93273
SHA2568513fb513638f575d1a705857fa733cbc44542f21ae379c9f8b9d75db15e0f40
SHA512973cc1d8f2c305d5c21e46100136c637d26f7c4721b4b624f4c9b61318dce93589a9a76259516c75613b356f3cd71ae93142d34676b0b433ac126c6b06620552
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
12KB
MD526872eeb7b5e46cf811aeb0f21fa7774
SHA1e727f9256b36795f8eb8af3a259c83c344008c48
SHA256da1d46e40625dcb26e8277e293ed316bb84961002bef8aa5485b7107c2b1b4a2
SHA512498fb81aa728a5f870f8519eb0ad82ebbf72e84791865f1010b85e8c30c65bb774e6719e82e5f122af29a641242650612f0e013d75162eb6bfa3ab1e4e54d702
-
/data/data/com.xgbuy.xg/databases/ua.db-walFilesize
4KB
MD5da1223286e8343e1cc222daebb90c116
SHA1c5b365e1fafa75cf759526f6c46912f9fcc5564b
SHA2560af44f683ac6aab488c6f1d2e3b410662f78ef9d3ac5f3f7d121ead8f1324c27
SHA512d02eb1505523494fdf702f5f3881cc4ed9cf20ed67ef18c708de01b7ea7759e0c5024741d3f096610cf690818bdf3c2c32e7e302f06f84c1536632911d8caad0
-
/data/data/com.xgbuy.xg/databases/xinggouFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.xgbuy.xg/databases/xinggou-journalFilesize
512B
MD5509fd1d14ee805fc7542cebcabfbd03a
SHA11c3d6cde4084384c6ff4b2d9b3b493bb4d2f3af7
SHA2560749e30c8aebba50cff8223e020a42e8c416320f98653370adb00385324d4a8a
SHA512daf40c3f6dd27ba7b6e9f2228590cbcf03dc8e73cd4fd2388d8a2c667786b1c59ebbdb7f1952ef11710ffaf19e756b51bc9b2653232269dbab752f57ad737059
-
/data/data/com.xgbuy.xg/databases/xinggou-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.xgbuy.xg/databases/xinggou-walFilesize
88KB
MD5e80f02e3185881472852608a206eb5f2
SHA150cfe14e4de8e6f8165c05dadd470aacd0c3289c
SHA2562e68fb4f140ffb5422fea343fa92a71fd14410cab7a3b73560393c3feb9d13a1
SHA5127107cc0aea43f164690104bdf29929c8bce210bc02949357b541df9665db2d588fd4bab40331616bf5d28adbb556c212ebf92a6a948a05a210e9aba730b7f476
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.acFilesize
40B
MD53911ad10a2d9a4f7ef7a09639a1b8cf3
SHA1d8d5dae863fe04bef8d987202e25e065efce1e1f
SHA2560ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d
SHA512d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.acFilesize
40B
MD581024874f926b0c0c9e613997c9370b1
SHA1a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c
SHA256da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6
SHA5128ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.diFilesize
340B
MD50bb7c3a2ef9b37873f0fd46738beecc4
SHA183a05b54fe10a8acefb3472fcb6d7339e6d3778c
SHA2566d0161fc56783e13b8a09b09d29ddb20b229a52a1c6c4ec70cc3b0bd6b745ff9
SHA51259cddf24fce0d11ce43310f41b6659d49c215586925ff8216f512244ebe58d2a6d1bcebd8f8539463d30399bd0945ef4e43d634bbf3ddcabc6ea3da7ffb307e8
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.diFilesize
340B
MD506d1051e1070e16924f5661db6832851
SHA143f09c9ddf2a1d480a33ff22cc65521238b4279c
SHA2569a04296496d4514f74fdb307df12e3776703e84a680c18f6ea657228cfc8dc53
SHA5125bcb18a3e9f422918852612365e27ef3f4f229c8c13f3393af16e3ed4610197d11802917dba3b8bedacef66abc9ae718ca79e7becd47d91c05fd58ed591fa77a
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.icFilesize
40B
MD51bd86b90e1b355f123e5ce8c93c3de53
SHA1bee5683d6124650c8be0b3740ad66e771f29b178
SHA2563ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152
SHA5126ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe
-
/data/data/com.xgbuy.xg/files/.jglogs/.jg.riFilesize
314B
MD5e55c7417bbe93fb7bd3d667711f837de
SHA13554e28c2da952d90ccd20a84720a64e41f5d1b5
SHA2566ce35149a94df6e0db563b0759c62b68e5d5710e35be7ffd71ba3722b29ee586
SHA51238f5d5c898b48e8cd38a26da05adb4787f06649ca3617a8094217d3abe11a2a30f750bdb1236753b5e5bdcd623bbb69e72884934497ef322644ef9d919be7e4c
-
/data/data/com.xgbuy.xg/files/.jiagu.lockFilesize
27B
MD5e64a3665cf7c0618323c6fa3e4252b6c
SHA11f86f75deab64a7094da0ad65cc88c4b3a80b766
SHA25658603efc4c072d623653119fa4ca621d2af3b225c2a5175f7b7eeea9b013ad56
SHA512acfdb551833004837687b06be92e65c6ae162fa8b7796c0b8ec017530e92a5a6273435bfbf48a7b7c224935154a36fdaa94779a06a6331bf0cc9e646e6c81e5f
-
/data/data/com.xgbuy.xg/files/.um/um_cache_1718352569311.envFilesize
1KB
MD537b83a4e7052df3bda295f16cf777c10
SHA1cc623b34f63e0a02a50b69ee6ef3cc6ac3bdf537
SHA2563f41cda46ae7fa5054d6501ac3dcdcc916d2801673a8f7f922cf4c2decc4d767
SHA512a4ac303bca524a951d4f991a0f7d23bd7abf97e9aa2c405d3306ac4525f12eeb01c110afeb1e1dc88ed12276cac92ed52217c1843cc0ecf08f5c2ff78ad1c092
-
/data/data/com.xgbuy.xg/files/.umeng/exchangeIdentity.jsonFilesize
162B
MD5b5489f94e71de3c8e334370b31bfa54c
SHA1d0701d7671478ffb86caf35bb73040923cc1f56f
SHA256dc1c1960fbe0fc32369798ba68dce21002951edd23181b6682dbbc9a6bcb5f7b
SHA5122b270abf1f5088faf81a91b2bbd61baf68557d1e6c072cca4ba0da55a39015d2eef425af711085a6f769ef3a643ceeb55bcd956f10c8916a2f69585469fc4cf0
-
/data/data/com.xgbuy.xg/files/Mob/mob_commons_1Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
23B
MD58e24e79baab91c4d0604eaa9006a0cb3
SHA1e427afc94a4b957a7096f73e395a10ea404c076b
SHA25665ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d
SHA51245bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
62B
MD5b3edbfceaa3d514fe2e1965d3168d04b
SHA1e04b2ca314724b5776ef6d889f957813074e0a25
SHA2565286c004d33d5129c513d1184bff9f2621be901d65dc24912a3f701dc6cef459
SHA51268a9fa5a3d084b6d58d00d36a9fa5877eb97f07196a9c8a81411da1f014c1121f4a08e816a9a7272ac77306b6ffdce80a17de08086e8376e193ac7f662b3bbd7
-
/data/data/com.xgbuy.xg/files/Mob/share_sdk_1Filesize
86B
MD519fc1a4d57694247cb3f741e16c6517d
SHA1a2253da8b4029540045f4f4ddb8c6e1a004dc743
SHA256b1f02e3e91baadd1d5a2372f1d57123039783d6cfcda893d0228411b342722f8
SHA5121072b1eb22c8cf81a115079afee1b6d9a65c5833f36a9b0651ee5c4a27293cc2509947342b7f842d489993b56f7a271e965e69f85f3f30d15838daaf278e8c28
-
/data/data/com.xgbuy.xg/files/exid.datFilesize
61B
MD5664fc8c499e175511e48239606c1f404
SHA1f2062707f1e5aaf6fcca4210d6b55f1c4fff3862
SHA25656f77e614ad04d160ec0f07abf441c14aa9ffac9b59b564e4b3576022eb48213
SHA51257367759b5f38876c008eec244514193ac0e3720e5868b47294b673854862fb07cd593036163a24f6f286e3c9e89a6ff60ff944e30cab6861f972a29bdb6bbe4
-
/data/data/com.xgbuy.xg/files/jpush_stat_cache.jsonFilesize
131B
MD5d5dd55f3eee38ce77fcff63bacd4a841
SHA1c911902d9ce3f5707903b8c52340e56f8dd3fc0d
SHA25608cc6031bcd8d34f0902f370b3f7edc3c4a324a26a3072be52bfec938a7e7b9e
SHA51274e85509e9456cfd35891de709d9c4a79c44cab1a4780bf3f881e7be4685a6bd5af7f09c1d0c0dfdbe92b67684b9e2a01074398cdfb645f5a9bae47fe1157637
-
/data/data/com.xgbuy.xg/files/jpush_stat_cache.jsonFilesize
188B
MD57a64550bfdb57b6eb0d058d5e4ed7c2a
SHA1adecd24fca91f3172726212af1d0afd35dbcee35
SHA256f62a043c6594a24ad2e17af5e096766c0a3a49efe3c9d41c95f5f11e64602b1e
SHA512dca54294b293da7a528fb7478a3f1072f31c6fe4854a79ee9ccff817fc97940e27cb25bac5931829cecd451b8e7410a603a5c62e92f44c2a97981db5a0f12eaa
-
/data/data/com.xgbuy.xg/files/sobot_chat_log/sobot_chat_20240614_log.txtFilesize
201B
MD5d857ade3951ae644fd726b26e1c6bc3a
SHA1002ec40b697988b20bfbc6e8a4bebf7b48f111a8
SHA256335b0d4c03ad25df5500a917ffc641e378fa8c909d837e347fb6e28c8aee6d47
SHA512c81cbe1886810b19776f2b8a1c36ef62f09933a6b92cc6234f42c7846d371cc7fb9c5294103ef3dd906b291a26da51e98edd072992f042bf78ec77133441655c
-
/data/data/com.xgbuy.xg/files/umeng_it.cacheFilesize
413B
MD5df75ec7b58d24cb9716d249e14611221
SHA192c5cb9af785fe78037c7971d98e3f1c9fdc6ddf
SHA2569fbf9e1b2f4c765033bf3d5172e771de4cdbfbd5fb314d988d1e00bad31863c6
SHA5125c28c0d0e75155b40a6eed66e4294fa4240081ff08eb3d681c2534588f85d742568b9ebab0c42ecfca15e85fdef59423948771d102e5955651084058d0c91382
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dexFilesize
6.5MB
MD587cef9b102aaad85568ed5ee5a204093
SHA127adae802d638c1efbe07557afae0f3b1c1ede13
SHA256e9c4e1b3287e667d1999f5c892b93be28b8305bf21eec2da29fd59cfae6bb1c5
SHA5125d0a8805d4fde75e5a9c256ac13015ab15fec4e19e812eabde3f53fb66e678524809d15c928d7afecd9ef47318795aa03ac3dd625a565959f2ccb763ef19d01e
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes2.dexFilesize
6.4MB
MD565ed291041391a1b6c0ff144294f991a
SHA14671c8cddbadf45093b4ca5b6b76f136acbfa113
SHA25617566bfa92a31333736ef97ccecf3452705b8c8ebf4b9a76eb3d68d26ab98633
SHA512fc72d30fa6e33ae66bd2fe48947a890e8b4b67612bdf1e9ebd9ff3b4c2ab292a62e51019c6465e9d8b05a8a11059b61a3ebdcf2ee8d8a2b17584d84082d6515b
-
/data/user/0/com.xgbuy.xg/.jiagu/classes.dex!classes3.dexFilesize
1.8MB
MD59aa3ab46eee6fb5cdc33cd55151c1513
SHA1ae69847969f519b4140da13b2b3cfe17aa8d1f5b
SHA25618190b59e0ebf193fe76239b78d50ccd6724a1e90bf7bc992c81d3813f779668
SHA5122f871033d5156d7aec85260b2882e4f402014c022fe68c63095ab5a63a91712051ae6339279d50efbfc4cced73776f8e8a0a275bd05d83cf160122366da29ea0
-
/storage/emulated/0/360/.deviceIdFilesize
48B
MD51d8d16c4e3b19ebf18988530d9b9a757
SHA1bc94c1cce05cd848a53271ecb9c5311e27ffebf5
SHA256abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7
SHA5124562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82
-
/storage/emulated/0/360/.iddataFilesize
80KB
MD5b443c49cdf8cea5b3af432d1ba454733
SHA139b20314401df6f9a9e161c194a54d5e17eff9d3
SHA25684e4a233eba35244b14cfdb47a65cd8eddc1f65f251a6f802abf70e0ad8dbcfe
SHA512b911c27955e36d236518c28ed0a84c1ee118a66d4a05d7680354feed3e425a0ecbf7304f1560f02343d1d47e51daf967e497cf115c2117f43c9346c8ed95cfd1
-
/storage/emulated/0/Mob/.slwFilesize
66B
MD519402718bfb1c685a726b4e1d846ad98
SHA102a7e30044a67085f2f1da24e16e4ecfede65b72
SHA256079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0
SHA51225254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b
-
/storage/emulated/0/Mob/comm/.diFilesize
57B
MD570a42cba408700f9a6c01c7941a8829e
SHA1eab01cc2c0671538795fb0b1146017dc099d0984
SHA256499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f
SHA5128900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c
-
/storage/emulated/0/data/.push_deviceidFilesize
32B
MD5da98e123a6210c5fae8dcdabd4c3b159
SHA1e035ef66591e76f91b0bc2c735dd6600fda57a31
SHA256718aedf5bc58290f5fa09029c565b2883ea1715fe31f35b8919563dce3b4fed9
SHA5129a547e00bd4852a695be0e7e923819e021747963e4a782f0730c8b8f8c882aedbc921591a25b3d88ca1e6e9a63b6905ef8c533197cbc84d6ee80311005bdbbee