2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137

Analysis

max time kernel
2833060s
max time network
156s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 14:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137.apk
Size

14.0MB
MD5

f1a6c100aabc0ee827ed2e82add42e26
SHA1

352de0443a116b1f4d77588e9e37f03565f56fda
SHA256

2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137
SHA512

46b4dda7b277bf02f39128403e609e9a63b1693d5211b0b18304148fa63065131fc651d8236ec718f665ea3e4931587f5141682c28d6945182c7781bac459f09
SSDEEP

393216:c3JcdPkBOg6kdEtFgFP2UhYVNxJB1VxNOQ7W7n5Cd:c3xwgTEQFAJ9xgQS5k

Score

7^/10

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 IoCs

description	ioc	Process
Accessed system property	key: ro.product.model	com.esbook.reader

Checks known Qemu files. 3 IoCs

Checks for known Qemu files that exist on Android virtual device images.

ioc	Process
/sys/qemu_trace	com.esbook.reader
/system/bin/qemu-props	com.esbook.reader
/system/lib/libc_malloc_debug_qemu.so	com.esbook.reader

Checks known Qemu pipes. 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

ioc	Process
/dev/socket/qemud	com.esbook.reader
/dev/qemu_pipe	com.esbook.reader

Loads dropped Dex/Jar 13 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.esbook.reader/.jiagu/classes.dex	4257	com.esbook.reader
/data/data/com.esbook.reader/.jiagu/classes.dex!classes2.dex	4257	com.esbook.reader
/data/data/com.esbook.reader/.jiagu/tmp.dex	4257	com.esbook.reader
/data/data/com.esbook.reader/.jiagu/tmp.dex	4289	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.esbook.reader/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.esbook.reader/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.esbook.reader/.jiagu/tmp.dex	4257	com.esbook.reader
/data/data/com.esbook.reader/.jiagu/classes.dex	4316	com.esbook.reader:GuardService
/data/data/com.esbook.reader/.jiagu/classes.dex!classes2.dex	4316	com.esbook.reader:GuardService
/data/data/com.esbook.reader/.jiagu/tmp.dex	4316	com.esbook.reader:GuardService
/data/data/com.esbook.reader/.jiagu/tmp.dex	4316	com.esbook.reader:GuardService
/data/data/com.esbook.reader/.jiagu/classes.dex	4356	com.esbook.reader:monitorService
/data/data/com.esbook.reader/.jiagu/classes.dex!classes2.dex	4356	com.esbook.reader:monitorService
/data/data/com.esbook.reader/.jiagu/tmp.dex	4356	com.esbook.reader:monitorService
/data/data/com.esbook.reader/.jiagu/tmp.dex	4356	com.esbook.reader:monitorService

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.esbook.reader

com.esbook.reader
1⤵
- Checks Android system properties for emulator presence.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4257
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.esbook.reader/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.esbook.reader/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4289
- sh -c ps
  2⤵
  PID:4691
- ps
  2⤵
  PID:4691

com.esbook.reader:GuardService
1⤵
- Loads dropped Dex/Jar
PID:4316

com.esbook.reader:monitorService
1⤵
- Loads dropped Dex/Jar
PID:4356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.esbook.reader/.jiagu/classes.dex

Filesize
6.3MB

MD5
e9bffb4daf4deab4a291178745ac3c17

SHA1
acf0e12f74651ce66ff82f34411de0674d45aaff

SHA256
6f668060e83a60d7da0a8365784f444d51b7f937c0889c076ff532189a160526

SHA512
3218517afcd3fb4841591cbbb5c4d28b4c0eb69d914285970ccde9a02b738bc71f1de0bae1a728365641e21ffac6e90d3d82814171c182bd0e4d56f16d46a54c

Download Submit
/data/data/com.esbook.reader/.jiagu/classes.dex!classes2.dex

Filesize
5.4MB

MD5
4673a5bf505aba8a47df901582a512c6

SHA1
5a572aca85b0e03ff5b29e87a8eb7e4615896704

SHA256
ee6ee28a3890f8aa63332cf6e7b9fa453f4227040a52e18c71216f8a53995679

SHA512
2aa592d02e8d49f2f7d5cdee444e7208e64f89f97118cf3bf81b73a89ff5fc4b9e118621eb46046fab616637ef40e681b9251a75364c80f048b0b4a0281cebbb

Download Submit
/data/data/com.esbook.reader/.jiagu/libjiagu.so

Filesize
496KB

MD5
f07656a2f51ecb23edc102003c32b764

SHA1
3ef18f74b609313887b9e825c56a54b5a9eef20e

SHA256
f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913

SHA512
34b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238

Download Submit
/data/data/com.esbook.reader/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.esbook.reader/databases/btechainh.db-journal

Filesize
512B

MD5
96584d15bfd8989d2e76dd124bece56e

SHA1
2c05ad617a1980d8d649e2a86dd5022d716312ae

SHA256
51435ba51b4238b6f7af0731f60419fa2d3e3184ca7f33f07ec985200f34842a

SHA512
9aee92c013f787b9ef54b7ecf1b38ecdbd303e3b886a770b9b3164784a4b9b46a2d8cb5df914c5fc3dfcc39ef8bb3ad3885cf17ebcd106af7dd29c7e39b9f2dc

Download Submit
/data/data/com.esbook.reader/databases/btechainh.db-wal

Filesize
8KB

MD5
2bb7d06525e840af185f3b99da2d0c02

SHA1
9d80210f6129f831781d1de09a675f059b79a10b

SHA256
9e73391414ae375771490f9bdf9863c70cfb0062bdc7685935b5ba018c4b4a8e

SHA512
91695a2d9d794ec248a5a32b47fa974a485c6ff9ca101fc3d85641e40226e9f1a250522fa785c38aa92840af0088b8a677400add5c472f52492fe6b5bc0e278a

Download Submit
/data/data/com.esbook.reader/databases/deanag.data

Filesize
32KB

MD5
eab3b84607ff867577f25d65817e59f4

SHA1
be0fb853bddc5d5e761a5219e4a8663a72f120f5

SHA256
2b062ac016919c7f3096a0c9314bd94e1789bd2705ae71e588d95215baf23bf6

SHA512
24bff7b40713cbed7f43f2d4299b63da780fef8148c33c2a9ad033e6598a25cf0644b8d45cd5e540b59d81decd56df6bddf415858fdc6a48f0fa1109adf1ebd2

Download Submit
/data/data/com.esbook.reader/databases/deanag.data

Filesize
16KB

MD5
536d3cd1adbcbd141ac03d7f124cb0c3

SHA1
fab48574936e196b8286ba1a2679a9cf26ca35cd

SHA256
a24d7aa618e1d0aae7b4ac386db63eb146212397fb372c0e0eb64aef3f7ef855

SHA512
b3246c47d7637a75e3a1a6253bf37644c3fa6c12db4f381739f15910efeb80d8a75dffd5177abf72fdf3c5203119e964bf4bfda78e964cef6937a7466c386582

Download Submit
/data/data/com.esbook.reader/databases/deanag.data

Filesize
48KB

MD5
34f94d53d27cd6429ba91f2ffe3cc370

SHA1
da1f60870fe2abbdd0db2988b8e505dc4e3eace6

SHA256
0f71dd0e840b3adaab6172aa33166fea3673506ad839fcf81ad9e9a1b80ca8e0

SHA512
7ecfac4faaeaccccfadf34fca17224a3ef5ee8c8c03a797b5b214bbabc33ac070e071e7be036313bc2283cd3f83893f1a00d8c4abf26b28da8c1f01c20d29d9c

Download Submit
/data/data/com.esbook.reader/databases/deanag.data-journal

Filesize
512B

MD5
b5a2737539622aed3221470b0ba8ef0e

SHA1
0aa72e8be089c8e12bf9472af899036ef14832e9

SHA256
f7a34f66fe607b1b7e59aa2f645f9903888bdbf91178a052bbd837ebc78f7ca4

SHA512
87cb5cf705e4f2e28611cd1142875434d9d6213f44d05fdbd6f11571984f21fc47f0ebdfff34ecd022cd0f1a088cc7a989a09f6506c3b794b32f0955215967f7

Download Submit
/data/data/com.esbook.reader/databases/deanag.data-wal

Filesize
16KB

MD5
b5cba38550efbeb6f18cc5ec9e04674e

SHA1
eafed990e8d222e5ca9ef752f8587dff6183c67a

SHA256
29e63931a5c2096197e019ced2592d31a2f89cef0791cfeebf8d6ad3a3f13ba4

SHA512
34f84238774cb55497e3f3848ccb44560e384623123094ac96f73bba1a7529e8986065bfed8cb197450e18d52133d2b1f00e59c0a6c3def77829c331fd59682c

Download Submit
/data/data/com.esbook.reader/databases/deanag.data-wal

Filesize
4KB

MD5
ab713fd11df9acf342beb475cd03b545

SHA1
7b866aff18d1f34d9438ce53b5c98cc2c2bf515a

SHA256
75b11059a37bbe8f6e44545e3ca566992650ac50d5f5773cac37ee14656634c5

SHA512
ec1d4d6ce4f72f85f8f5422a436fd5303ef6371ac505a8928640e6698156be78780365b3c482cd01fb57f92479b630ef34609e27954d499e59a6dcb3b74e58d9

Download Submit
/data/data/com.esbook.reader/databases/deanag.data-wal

Filesize
8KB

MD5
80e5c6194f8b06eac27c5225c414fe90

SHA1
ca35282e06d1206622b69da93d0480bc9155d390

SHA256
e80a8afa28884b74241ac6ee99362a82cff8fadf628707f3400564a218a9d5f9

SHA512
5dc03a4767a7336cb310f2980b7ddac4fd947c253c7e9ed681f5df12c358f75ccb3c8ee2bbd5427e721ff49ecb6f13ee6a2eaee2482d98ff0c93770bc21a62da

Download Submit
/data/data/com.esbook.reader/databases/eanag.data

Filesize
24KB

MD5
87eb0fe1f4cde0a233b22fa875d3cc32

SHA1
9313f745d5e678f6d1cc1cbca411b4a983999d95

SHA256
c1e708e383dc33069bca0f700e4387adae6b883abd7aa4684364b74882fec038

SHA512
5decb04cd3569c2985c2ad3d178ab8332d2cca01f0e394c91daf95a6a7ff77aab5737a39c61b33394dcc2adfb63acb726e342d837df5a265ceebbe6fa6b2d53b

Download Submit
/data/data/com.esbook.reader/databases/eanag.data

Filesize
52KB

MD5
65770136bf4e778b182dbbf086ed2fd6

SHA1
2eb4a7774950324868ce7c4e714aa9b2ea8fe6e4

SHA256
c655b154460f5a178df20c1fd23be1ad8d3e0e7c933ef01737edc6e054a424f1

SHA512
ecb32fed18da19623c948993c658f44a59644ef8db28fa18221e970d1935099851eb76cd1dd75c9d13b599db1843c1f53106f3552d05b57f81caf0c9548c178d

Download Submit
/data/data/com.esbook.reader/databases/eanag.data

Filesize
36KB

MD5
5bd1d9d62fdb376190fb0ff0917f2885

SHA1
447ba51e98f5b879edf216e2981369d5e68c00dc

SHA256
ddccbc540e8df517baf6e5dbc39d39bb43dfea3f0b45ea96c39ef3b631cdd392

SHA512
620f8a1bb203373d266634aeede1d43b6af87af399d6ae54e30c6fadfde66a2f5c6fc0e5b1adb017db8dcb1c2642efe60b604ef1118e756052f020d9d984ab30

Download Submit
/data/data/com.esbook.reader/databases/eanag.data

Filesize
44KB

MD5
88633624ad9fc78f2c6a9b6147fc5149

SHA1
e36993b82e2f3f15700d409f0c926d35d4af84f9

SHA256
53291e08c2bacadb9808ed50cf173a3beabe53ae06abe83a40a7dbce5a6d5cef

SHA512
34a3d0bf690f514fc9a20277d5f68534e402f70c1d65ff738612f1506b9df7631e027e7d05fec9075e796ddae9312d062885dba64122d0ed5391ef50ebe835cc

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-journal

Filesize
512B

MD5
0d0f218d767a01880eb7574b17e20b03

SHA1
7c515854c7561a52511cc14dfc36b715b64c3bd0

SHA256
892c58d833bc05d6c26bb2cfca7437057b88876d0b9c131bcc59c427d5c88be4

SHA512
53124e95711eae4a7d5e36971778ca3242cb6ca56ced0c2afbd90cf12d63e6a872ecefc7dfc159b0b282c8687e1cb5d6efc95ec537db14990448cf523a3a04f5

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-wal

Filesize
16KB

MD5
79d14cd93d5b01eef0deb4bf879477a8

SHA1
3afee244d490017bf1257fd36492d974cc2a508e

SHA256
1c9b3c174b48fdba6066669845054c142929a41ecf178dc6fbbd325d22b53b62

SHA512
02bce140d16f914233ae84493e56463885e5f22f01ca9a99edfb813692dc505f18fca556d2fe6b29eebc21057e90981d94d952e7fd29979ea6972d0f3d2b35a2

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-wal

Filesize
8KB

MD5
6b5aa6e44473750babf69b32dbb07b60

SHA1
8c60487cea95159a58c3985848227a7362742c32

SHA256
94156c7ae0c1c2e22805732cbdaa3109f456192783e0448537a4cbc02672b556

SHA512
51c5a5764783f0a3d4b53e1bb4c829d9844b71c106b9132b8e1d734ff39e2c8fde882e5a124e11e3d911d93e760f5e9966b204e9a788ef8d4c448d270bcf2422

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-wal

Filesize
640B

MD5
fceb75ea2cc35bb7d181d269ffd83faa

SHA1
90c7c53cb1137c255972c1509ebb99483e67c1b5

SHA256
95f79f47f91e83cb0dc8609818176d445b35e2e9e48e2d27562b4085e86c7801

SHA512
803114c2c2331149f0e94311356ed86d7129fe918df80a7238f66e7c7663c1967965bb1aee71a653f72ac858c091d0d10274b2ac00e5160d777fce6190323dbc

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-wal

Filesize
4KB

MD5
7b28319ac7c89e8d8ba5a6a1bf352ca0

SHA1
5a8400d6ad8a392b88db86af07530dc084d646c8

SHA256
079eb9fb9a148d610063bc81363176d9e528b270381d64261e461f0914c34dba

SHA512
3986789fcd3e81d22b08364839aedaae2f011fd18e59bce369ccf0bc3987a572cdfbd6a7cef885f8ae414fb4c3d1adb1be73d0d6a4c43db8f825ba3556c43251

Download Submit
/data/data/com.esbook.reader/databases/eanag.data-wal

Filesize
4KB

MD5
2d482b03818f2f3014d75bce5edcf64a

SHA1
358ebde89f45f81973e8735830440f2a8145edb3

SHA256
e3d05bd9856d04c781497de0df91c9104f83db5e1f826def15d7031efa72e716

SHA512
16bd26aeaf781ae593561f4885b782fed760436eb90c5c4bb7f41c80cdaea2637030c2ca52926b40e69770e9160bc450d9ebcd35bc9ccbe18800244b6f947e73

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db-journal

Filesize
512B

MD5
5c4e9115802c9fce9ddac9ad7eac1c50

SHA1
ecace35c803c5fd564edd6e0033eecd0bb3528d1

SHA256
06c39691cd59a8e83a1e8c6c57688bd8ac3257788d7fa87155f0e917c1df8056

SHA512
157c925afe4159b53d687e3c336573a352566d85ab87a7794042e1e52635aaf93e1bdfdcf9eae45a450ffcd4f2abaf8aa8ec4e9ee5d820a38ca598a2a5312956

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db-wal

Filesize
48KB

MD5
14401d4e4592e83f0b914bee203e9deb

SHA1
2c9c2ab04c92f5812d50c21d61679acde6c6824d

SHA256
765606229895642633154650628bff1c0fca26b51c7c816616fb01df7e0da180

SHA512
798d4203b638eb62c26a49042ad4eb3719e018a5e4688ad178fe1ab5c170c225d30004d74b5a157308d88bd4042f18075c9ea8412397792e2ade69afe9192294

Download Submit
/data/data/com.esbook.reader/databases/es.db-journal

Filesize
512B

MD5
17de04fc2c8bfdfe63bcb93724c4483e

SHA1
a1edce0669d57c1265cbce005332bd5c2151a8d2

SHA256
4a5f137ed58689e099b4ce7a698faa1c411bb12f0252c4db3f036acc71e56fe1

SHA512
0286ffeee80d2b0ddb39809505907c7ed910f7a81b349bc137b4d1792f97c06230637c805e1c565dcb0ef3ce4b8d78a59c585c52fc12b8d407d85fd4a4f7a45a

Download Submit
/data/data/com.esbook.reader/databases/local.db-journal

Filesize
512B

MD5
84143258dd86f695532c893449ec7aff

SHA1
2c34fbe16a7f1a6f0798dab2f303020ccdcd1617

SHA256
981debe15f55293de0fcc9631a735b381b73c23abac968327dbe03fe98ccc20b

SHA512
e88329ce7eec1f069bfd54526dbc292fee7da60d1a77ec352643a4df18616f2d3bed3f91302d8d37311e2e6e9680e29ed112b249b60ea785bbdb4e7dd12c0926

Download Submit
/data/data/com.esbook.reader/databases/local.db-wal

Filesize
12KB

MD5
cd68a030a414f300db983f296e329d9b

SHA1
c1f444e70d55a27bf3b57cce986c23013fe93194

SHA256
5dfa32575a95b59f5416782b0468f392af48a076487bf4d7145ba98bb2755f39

SHA512
5e33d64f407f8f8c0f47ad7a4e7a32d7596c43f9cd3f6067a96ec562ea6b7016061a9d49493ea5e4ecf945abcabf0b26873ded417a8dada87af0c1e64b133491

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db

Filesize
24KB

MD5
a2803d106194a082003b0f5d7038f9cd

SHA1
3940a183cff3bd6365f1c9f46802c07c89033ddd

SHA256
999154a4ad6c28534b577705b3d26bae32cddafc4f2e599c164e549bd4c1a8dd

SHA512
ea73b2f9cad170d7766a83be81f10763f494262ff5efadeccffa128bc7e4f49a56cb109d6808b534155475637dcf328aa24f89a8943461afd5046215215e3076

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db-journal

Filesize
512B

MD5
fc090a20d14f72f702b08bcf14905744

SHA1
902f22ec8c195a60881ea1fee291216df0503031

SHA256
1456db722eb5f775739a2f58c8e31717fe4b9aca2a93e47bf03af39dade469b9

SHA512
f635631bb16d584ddf8bb50d7edbd52a0e94d16677f498035933818deb86e0d4611628017859f138e428b91f78606932171cbb12900785670b563dfd839285b0

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db-wal

Filesize
36KB

MD5
523da488d34eaf89e09a55dde0b21eda

SHA1
9e206f34522a3ab2041136940848b956ea9e54fb

SHA256
1b0c028c7ad538e0a9a9ae2e744d700615704250c73723b552cec370d16e4c47

SHA512
4b2129fde61ac67a98ab2edd6261d5e3125ce0964060c837d2ba2dbd052c6e1c46768addd85797bec4df9c2c7be934572dc101c3ccacb74d2faaab969f132bc2

Download Submit
/data/data/com.esbook.reader/files/.jglogs/.jg.ac

Filesize
40B

MD5
4070f23ad271aacdc37e31d67e98ef43

SHA1
e9f7c4b765a5356846535e43f9a7c5bbd599881e

SHA256
22ccf0117497fb2b57af231f230fbe5989fbc5e7c7930366ac9fb451069789cd

SHA512
0c855b92162174555941878996b72d0eac5a1a1e0abbe056b5a3f5b5a40130650969063e7f482386adbc9d5dbe5ab114088ea24cb28af8fbc9d478f1fe470225

Download Submit
/data/data/com.esbook.reader/files/.jglogs/.jg.di

Filesize
340B

MD5
de22c416d95d39e2ab0225b9de103d6b

SHA1
40a67dfb279d1aa243412f3c890a027fd89a9849

SHA256
bba535b50e60230409067e639649f584502b6b51ee90fe702d95314132cb4330

SHA512
2fdb0c3952ffd8c49094aa4739de0fa4210014f975aa235e20723627994de3e2facbc28c4d678591753284b6fc6ebe9afb35207843ce3b5c46c9188b7294b4e8

Download Submit
/data/data/com.esbook.reader/files/__local_ap_info_cache.json

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/data/com.esbook.reader/files/__local_stat_cache.json

Filesize
509B

MD5
04530e8fbb37b4c300b41f746f9e61ae

SHA1
048764efd0429ab0da075a364c978450b588ee37

SHA256
7b0275689ad8a4620d06ae02468dd149f6ca5dc718f67693a7bbeeea6829d013

SHA512
d3d04f87e747962e0c0aba5430d8f3f991f0cdeb1412f4e64e3e9e3b1b457266008a3eca7e81cae3593b43b8cf78f4714cbe311f4b0341720fa1ccab178ad56d

Download Submit
/data/data/com.esbook.reader/files/__send_data_1703639986682

Filesize
545B

MD5
905e8e61d9d94e0346966e5a23ddc81c

SHA1
143e7c8d662f71ce247b179b353dd1156ba18155

SHA256
978038905195b2854eeb757460fd2e420ce240342460fb6faa223c4db6e68a7a

SHA512
bbf3a54528ce43844d9b51b27e6d2d6c20b517a5c7b7a7700ec7feca8cf37a6cbcd46de81681876a512ab3d80ae97a899b6462ff18a111adf068035bd3e7893c

Download Submit
/data/data/com.esbook.reader/files/jpush_stat_cache.json

Filesize
119B

MD5
0c81eb4dbce613811df13f02322dfa70

SHA1
06b5d01bfc67c18b88c104bc78e4d8a3a044eebd

SHA256
b2d42fe99e6038ad6ad72b39c9a9839f25165694154f665cb21d1fa14c64f84d

SHA512
439034f6aacdbe04e70739f6dad85fe0eabd83be08c1f4a62a8177ed4fa8a232c2946b37103ad22d85c51aa48c6da2f7bd34cd3c4e76b6ba3cfb64ca17f07eb6

Download Submit
/data/data/com.esbook.reader/files/jpush_stat_history/active_user/nowrap/1ad6fc44-826c-4e34-acbe-80f155cd47a5

Filesize
159B

MD5
cc21f351bdc383b27bea2d6ece95d61e

SHA1
e4ef2179b022b4ee376db8cbc2b91ff01c45d338

SHA256
a6178fb2b74aa75cee752a0db31e7ec02d018c1ea226717e4184481e2a7147fb

SHA512
d576012caca691abc74ec5de24fdf320f3affd4b1629d489f5d917bc198d5d325e568c02fb7784eb58453d4e42d462d6d1b6058525b0db8c6566d46b4775f8cc

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
20b4c5a4e7944c6575524b67929456e8

SHA1
8c00624e72d53734b11bbd36d92523e4d80ed5b1

SHA256
269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69

SHA512
c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
28KB

MD5
25552946357c3379249852c79c8be90b

SHA1
14426bb50539b48f8f930c42a8592eee343e2df9

SHA256
1310f85be7ea703be3ac52e2ede2ccfa776ffb034c2cabb7e2729f2eb930ee7f

SHA512
97ed40ca5648144655775aa7334651b18e10211b3d9fa9348c6a93290eeecd8145c5e0cefa5505b42914e87062476c3066deccd8be93442285a2349849d07090

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
626ceff952ff6e0955f2ab8efdcb7627

SHA1
f8044f45e40e33af981fa371e44e822cf4dde2ee

SHA256
7576c245fa8219fe4755b825e0900085d84369a718a24238e2a36c8523093d43

SHA512
d7d309d4446cff738ff8ea1e09c22bb9eac8f0dd674d4a02a737894ed90465969f83eb8d5acc32cf42ff3cb209684cf1ffcd778d56de3705a67186e6787a3d94

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
a0d73c6287377f45469286e3d0ab0815

SHA1
3916c1c684f2a3425116984c639edb4b236348e1

SHA256
6869e8833ae54d1b810db25edb836fc31f0c578e8d27497c5bd34c546e5787b9

SHA512
8a04f9ef712bddc37f321b9d9af44d67989bbaad8e1f5c4b44c928f477589d53ad4c28b2e5a1de54d7af3a62783cc8ac2107175ffe319c706e0aedbef95e9c6e

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
58f0543dff6c39637c3bcf761b5ede5a

SHA1
48f536ae5087d0c928b0e53e74500c043218600f

SHA256
d447b23db9e06e01a022cb01cca79072d5ec68c59404bd684d886e0fbc77c063

SHA512
34aaed055d263c9431798b000b73b94bdb28d18e9e2ee6213a473bd175072f46f745fb440e1c4e5f2a3613d62364af5b21057c74203c51b7205fafcbc17c42d5

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
6e50626b6172ce0d6c003bc303aa0ac2

SHA1
f6ad13408a364bceea398c7097ae55a7e52a4b09

SHA256
d448f4c143635542262f70648f69d465993aafc51173276a612164a5011c60d6

SHA512
a42c551d17a7fd398483a44f58eb01e626d5b8d32fe8afd0878b331981c09c54c71f6f11a6d355c929c16fc442ba907332c71f9b0a5de2048275ab3bfe70002b

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
0fc9beee2f84cbae7298e28d3c050b89

SHA1
4f21168a410004bfb5feeaf761c07f2bfb7ead07

SHA256
ad8e02aa55140f566e564143bd0dd9c09821ff7e26b5d06f0aa81eff8dddf898

SHA512
fd69006bfd527e3935644d526815088de9a442cdfcf92601a8847bab21b59ccb1cde352f073a96aefc8a1b772ce810face5a88dd32819a7e0f055d8a7e5244d4

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
4d6c6971e3bf6284150a34e23fda1a2a

SHA1
81404a3338cad1402554c2e94be5d86eb5581d75

SHA256
c02966a1f4a633561e1b823a7aa346b41f40d1f56c80727b4e96f9e0d4190624

SHA512
84e2538fc3c7bcd52f3be48ad150706d729a42d21b587ec613cc90c28ac3c920202565caaf68888c4852de5eb1167ed206a046335e69c175a9b4d8a11d6df77a

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
ecef9376eee3413373db43d9ec9e16f6

SHA1
138a686278965a8b06622ce5c7668b141719c09e

SHA256
d093962ee45257c6b5c5f2fbfc27a5b071a9383582f5b13aca47c5a610054c56

SHA512
1bffe75fd4052bde7105810ebefa67104e1134bd4e764142864e70e1ce990fdb7a469db58d033ebe48aa0349d4403c15630cfff9617a95105f7b863bb1860486

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
885c178a1cdcb10fc3efe195721513b2

SHA1
b0492892bfa57ebb7dba94cf49b1c853729d57a7

SHA256
5e7b368d29b078cbf2b40f4ade1050f1241409cd855b34db5e5f8787d8bdadc7

SHA512
d3e7346b374d21f9e07fdbe764f4b26108f70d999fcfe331b5733894ad275b7b67406e321de98d1e5b621d21088fed749ee0b22cd3c853efb324710d20070be9

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
b159df1e197615df942c50787e0e55c8

SHA1
867dcd525ee536aebf9c066a30c34cf6b81d0ec3

SHA256
caf5717838094e554754520d8aaff57bc068f2592397dd3da595518399ed2679

SHA512
b4900854a7c4ea973456a6068c1f91aeb1eb0b5b920a67c2f7e0e9ab72553a99c7d86399b25115c3401fb758d203cf22c68e46eb70ffaf0e1bff779d9ced19da

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
ab452134341819d6420dbd025b74c494

SHA1
63d97ed9a77a04d893162c741d0c4988f73e8842

SHA256
a2f8a25c792c31f930419488ca60e7dc5c6399a78c052b31a29adfc07b170f00

SHA512
9cb452cc4b221a755ab631ddadffc26177404b28cb8e48466778c1bde1f12aa2922eb0ddc96c0fc35b82c7d52669c13ebca3938a76baf4d203a58999d4e48f8f

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
810493250b4a21bd9840a714d84803cc

SHA1
8dc4bfdf4ed4efc940e54f08dcfc4e66892edb8d

SHA256
2aa5891fd426f240354ea24c89f77cc93e7d1ed5d0a5e985679dda20782a3878

SHA512
29b4744df5bb8505d511bfa3b084b3a1d98c32aedbeac27783ac3978905ec0115dd20f6b02bbf6ad3c111bbcd88c17f6114d378f8b129217d1b2892facdcbeed

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
138B

MD5
6df2fcef82c9df6dece516ef19e4f4f5

SHA1
d8fc9810a6c37c000acdc59c6dba51d93315751e

SHA256
b460a47f6eb474f80c3eb0fc0013732af57d5373c6cb959969a898e125c88b3b

SHA512
fd73cb20a606b0487d9d8431aeb44cdbd75e35ffac0b90ace3110dc3cc792271354dab01d933dc0bb54590ab4bba3753b707d4ba15c4b60b7b7e4bb5c8870f75

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
8e6feea21ac383dd1f72348159435d59

SHA1
b24ac2d9f87c0840591c6714e27a5577f5b032f4

SHA256
5a1eedadbb8f598082ec75981eb3eea8c351a57f611a6ede59c07ccbd76025aa

SHA512
96db2acc794a8eafe2a01557f6fce5061a34c05cbe634ddf51c9f3a5bda2d339267bad89171c04f9f7dbb0e2ef3beac4ec4f39fcf04a1ce5bcf1d75cd3a744c9

Download Submit
/storage/emulated/0/easou_book/cache/alipay_msp.apk

Filesize
67KB

MD5
5f6e3e22696a862528745a8449105602

SHA1
431ce0deb4f3d86f19bbac79dd9bdc1891f3a8b5

SHA256
0def758b8ae330891899a3cc3c764dbb726cdba8d44c1cc43082b552da966332

SHA512
8613f975b9680bd9e1f94071faca94e7fcb6e557d996017faac3897c5db328f9718df9946594f9dd84370fdd0a66bbcc60e0cda9182d22bc61a3ea90dc471ebd

Download Submit