2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137

Analysis

max time kernel
2681886s
max time network
162s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
23/12/2023, 14:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137.apk
Size

14.0MB
MD5

f1a6c100aabc0ee827ed2e82add42e26
SHA1

352de0443a116b1f4d77588e9e37f03565f56fda
SHA256

2cf7003f283eb4b2ca640366e5de8b4b7ded5ef901bc88b883c6999a13f14137
SHA512

46b4dda7b277bf02f39128403e609e9a63b1693d5211b0b18304148fa63065131fc651d8236ec718f665ea3e4931587f5141682c28d6945182c7781bac459f09
SSDEEP

393216:c3JcdPkBOg6kdEtFgFP2UhYVNxJB1VxNOQ7W7n5Cd:c3xwgTEQFAJ9xgQS5k

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 6 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.esbook.reader/[email protected]	4480	com.esbook.reader
/data/user/0/com.esbook.reader/[email protected]!classes2.dex	4480	com.esbook.reader
/data/user/0/com.esbook.reader/[email protected]	4527	com.esbook.reader:GuardService
/data/user/0/com.esbook.reader/[email protected]!classes2.dex	4527	com.esbook.reader:GuardService
/data/user/0/com.esbook.reader/[email protected]	4572	com.esbook.reader:monitorService
/data/user/0/com.esbook.reader/[email protected]!classes2.dex	4572	com.esbook.reader:monitorService

Queries the unique device ID (IMEI, MEID, IMSI)

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.esbook.reader

com.esbook.reader
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4480

com.esbook.reader:GuardService
1⤵
- Loads dropped Dex/Jar
PID:4527

com.esbook.reader:monitorService
1⤵
- Loads dropped Dex/Jar
PID:4572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.esbook.reader/.jiagu/libjiagu.so

Filesize
496KB

MD5
f07656a2f51ecb23edc102003c32b764

SHA1
3ef18f74b609313887b9e825c56a54b5a9eef20e

SHA256
f6847402ab69102f8495aac58b9beddde9a71dc52470c5de17e382eec2a6b913

SHA512
34b337d2cf98ec3009f80ff299e43984a1c911e5f9eb5942a915915cb7b5b591ffc9f1b79a7989534c2583a703a3f0857e74be68cdd71388f68d5bef354f7238

Download Submit
/data/user/0/com.esbook.reader/[email protected]

Filesize
6.3MB

MD5
e9bffb4daf4deab4a291178745ac3c17

SHA1
acf0e12f74651ce66ff82f34411de0674d45aaff

SHA256
6f668060e83a60d7da0a8365784f444d51b7f937c0889c076ff532189a160526

SHA512
3218517afcd3fb4841591cbbb5c4d28b4c0eb69d914285970ccde9a02b738bc71f1de0bae1a728365641e21ffac6e90d3d82814171c182bd0e4d56f16d46a54c

Download Submit
/data/user/0/com.esbook.reader/[email protected]!classes2.dex

Filesize
5.4MB

MD5
4673a5bf505aba8a47df901582a512c6

SHA1
5a572aca85b0e03ff5b29e87a8eb7e4615896704

SHA256
ee6ee28a3890f8aa63332cf6e7b9fa453f4227040a52e18c71216f8a53995679

SHA512
2aa592d02e8d49f2f7d5cdee444e7208e64f89f97118cf3bf81b73a89ff5fc4b9e118621eb46046fab616637ef40e681b9251a75364c80f048b0b4a0281cebbb

Download Submit
/data/user/0/com.esbook.reader/cache/volley/1308751843930951143

Filesize
865B

MD5
c2c72d3c490879406c7753c9b3dbcb47

SHA1
e7e67cdc4e3d6ffeb85ad682da95c2948c2063b3

SHA256
200761aef0d94479449df1c2c877de12f2a863b05ecaff3f487a7dd58c145ef5

SHA512
1a02647c78abc8b713c1687d1f65158c63833bfaf87cd40eb574b5be94dc247c374fa06726806390d683d6ec8ba1322af1638d3009082ad4bc4653fa9ce2fd48

Download Submit
/data/user/0/com.esbook.reader/cache/volley/22499870-1734338901

Filesize
3KB

MD5
108d0678caaffe211a3f1f89350cb3a3

SHA1
aa88b53ec3ca5389d6a0064c51abd83a3a12f8a3

SHA256
4f8c7f36350617d396c3f479a9e659b638e686a66d83c7028fd8c7f9dedbbadb

SHA512
8fcb9d3b1656d93e979f0bdf06c6fd06d4fe739270a278d6676337012a68e1ff373735670b54f1ab527b65974a4fd0f47c89f306531adc23086cf883bfb1dcda

Download Submit
/data/user/0/com.esbook.reader/cache/volley/446798030-541737787

Filesize
745B

MD5
2cfc7b87fb6d6add4f6efe030382c87b

SHA1
606635ba5959d0d94e1a016e4287fcf23f4e6c36

SHA256
1fa6ca0bc5c68d118853c9178d7347bb96a40872123c095cd41e5168af5852cb

SHA512
c93edcb990ac217b2505a4db86989216e46c26fef289ac064cc7256173a743a30b8f9747b35bd070dad3b97bbc622aac911c5893044524840320b671b6ce045b

Download Submit
/data/user/0/com.esbook.reader/databases/btechainh.db-journal

Filesize
8KB

MD5
fba04c58e193e6f357ee17937b0b73a2

SHA1
962e58219f03f809fe6fd8224e1c1c8b7d922d03

SHA256
00bc23808468622a10793d27675389d28241c6cf01aaf6b918d34bc28db4f69c

SHA512
7bfb46d3de64f4110efafe59700d77a335bdaaa49396bc9f36d9545460ce7478f73d41bbfc6756b5cb48b8144b1229f77ece9fd0d18ccdb8aaa821c45e95958e

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data

Filesize
12KB

MD5
f41f531c07d4141546a531ff9caffdcd

SHA1
9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

SHA256
bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

SHA512
e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data

Filesize
32KB

MD5
d29f63f493fd0dc6e3477691bd482f5e

SHA1
eed583faec6083e35f413d658c4096d7c3969113

SHA256
7e1af693875baaf6298f87220806fdae1e54a3b535d2af4db8622052f1231db6

SHA512
0bc96ec710a7301dec9e34d82f85529d32bca0ec966866d32c28cb52e6de9f43c463e1e0e42346769e32d21f1cb5c49146a41bd501b519b2aed09dc2c82d2ba4

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data

Filesize
16KB

MD5
155133ebf1ee3e0a1a71816f929b4765

SHA1
2c83e69e1d7c8ad5c1071951f748f91e0d849a60

SHA256
659e6abb88111fba63e0a0d3e3bf75fc53404fede7552b1bdd889f5ea3f28702

SHA512
1c30ff73a6ccd915836e338a281b9f044ae29e9bdd849eb0cbc937866db6c9bbe7240158cac8aafd8d45ff868a9d8e1c714d652a3b4a6048af5029bcc876b189

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data-journal

Filesize
512B

MD5
b5c134d3a1efb6c1339f998862dc6230

SHA1
d0bbdc2a8496486c92b94a49a3d859f9f9d33a79

SHA256
ca28331bc82bfbf3d65d426c68592e99faf00c994f4e0925b571b6e35d9c62b2

SHA512
f29c90d626e4661ce3bbb66fa49aeec11a22a66364eaa3b9213ac58dfa254dd336ba8115cfa88322d0c47ea409dad7b4d9b03c700e1a47015c2a0d2b1f1fc242

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data-journal

Filesize
8KB

MD5
8e8db72ffa5953f459098f9576537a13

SHA1
84bf3d333c2c64d6189fc47fc91bf2888708ba65

SHA256
4883df64e7d9c527d950576a2876cc4b3b4f3ce5dd5a2fa21b965d87f851aa1a

SHA512
347b4a9eaf6cf08b8cfbf46ecc7c7cb29bf9401e96b7995892223686b2024ec16e7bd03e386f4e7e7d89dbba1e3982685a55b9e75de5f5eed55fa7a6ec214764

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data-journal

Filesize
8KB

MD5
e8cb7b3c9afbd6044e7f1cd02e612e63

SHA1
d4ce8fa73bbd9eec55400051b6e7a2986855dce7

SHA256
0bcb671806af38e55605fe05b81b5bd29227f1c7a2d8f8c3f934a1f4f5f3ef51

SHA512
4c70f5726772b1886c897e5a40661bb382e932adc40b3dd1ab884a4af5b317796cfeafec4abd9c1bbb43c5fda9c537474c4c9f0daac02aba1be97ca87d0aaccc

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data-journal

Filesize
8KB

MD5
90b2995eb6ba9f6ed469b8719488176a

SHA1
98fd2d0ab0087d06cb8891cf33aceb936cbcd61d

SHA256
12114c5d375b34eca72468dc1d10c61f9e2e5745eab5053a13719e41b754073d

SHA512
7e37dd436773b0e2b4ff6f7cb02f0cb118583de29f9703426c9432d3c65ed55fb5e5e02774dbc477b2934c14c201fc8394d68d19f3830510f875e0f249a8d733

Download Submit
/data/user/0/com.esbook.reader/databases/deanag.data-journal

Filesize
8KB

MD5
adaead8f616618830cdc06a4c6789f37

SHA1
104c08648c52a056835af547922fb05b0c14c82b

SHA256
585ca179101d3e23e72f36932a38cf84a09b4b2000e8d19be00b4cbb03dd60ae

SHA512
333718baeeef8dafc495cda84b45c36c1092f31aa6d792f1b30849eff395831de431e00718b44f93276f9180493d7131f89e7c503b4b6707f6edb2c8c51a3da8

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data

Filesize
12KB

MD5
171aedf968e17a2744d2585715606cb9

SHA1
bbeddeb3b89fcf809619c35b4a318a80e7d5b029

SHA256
d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

SHA512
78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data

Filesize
24KB

MD5
c4c37a6830543f22e62e816f544a0a4c

SHA1
66520c54ce82d2ba5ddfac1d5ce8a72b452205aa

SHA256
b129c0070689f522d43f66200c24a463fd92a496204c0951dc3c90ca916c5bbb

SHA512
729f1f392613d990f7f720441b488cb44ea6a440eebe2b4ed67e32671b2c438f1c35cbd5c4c6bc1970c1dfefce57a599e5eb841958e6ca8c86e455675c733f38

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
512B

MD5
f5f20f1757fe2acba895312efe329973

SHA1
00c0850cf0ab0ba2d5d25a4a9518914793085f32

SHA256
1bc0e164e1614bb94076581ca28a7696f3af14c40b99d77d6ad86079a5a7b43f

SHA512
4e3ebcaea840c1aab08c69fa5e91a39b5882042ed5e15b5a74d320ce193b02353dcd3af227c1adb9a7f6830b37069a93fc8a6066da6059bf78c1398abd95a8c3

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
8KB

MD5
560a2f1fbc76c68b57bfe7b280a067eb

SHA1
6d786e79ef7061142b732b28ac79647f8e2449e7

SHA256
12896c3bbd4b96338c2618aadc93c5d150afd5c04f23015d45a4853fc8a75a4c

SHA512
a5f64588c6a106c76c77029042dded0f3f7d1d4c23c5227e691d488275beb65f7e08b13a58dc9b14d42818c34c3fc707323623ca839a5f2e8a0b205b19b4037c

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
8KB

MD5
39b2d9095bf714e43840cb16cdb775fb

SHA1
cd24165d2bef61c8e45f3f41cffc11c6bec5e070

SHA256
6784ead682a5c216448e16e1d5a4d8d091a55934f59b86027acb680432bdacdf

SHA512
e3e3e82e53c47800a3c3836cd46c00dca5559b9a508f690abb8a842291406fb13210233c1db456dc6504791d7c3e08f7ea4eb77193c9b2a77be488bef74c64ff

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
12KB

MD5
c52f60cddde21324e366f04593f0a15b

SHA1
a4144b9adea3692cef5637c9af4dfd8fa7fe6d6b

SHA256
69ae38be937d0eb60cd8864608bda9a551a49602d79f21e27d4d10951de90deb

SHA512
cbd7897491ddf7fae346e6762c4a032aa5a5a0cd682466cd481c0f8ca911c3f5f0a5c7208776131bff074979d48a681dc52b55aaa34d645d7531ed44a8e5e444

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
8KB

MD5
3b3d61001b1d19342991f35f9c21a11d

SHA1
91f99307afa666fd66986bffcbbd0d0dcea63e4c

SHA256
e87864ba167758a3c100dd9d906339f914cbd14cfce5c547791c820353d7b1fe

SHA512
743c4414ac1edb7550ccc000c746fa5782850b3364e53a85d061ccc064fdade11bfe13f7499887579f41f37c09330a94403d9816d8edd6e801c6cc1db5ad4609

Download Submit
/data/user/0/com.esbook.reader/databases/eanag.data-journal

Filesize
8KB

MD5
940bda7aa4662eeb19ec013fdefe8b20

SHA1
3839ff8874220a0fe521fedfc63b0d966b453117

SHA256
aadc45d787e8881e4e846408d183e355b340ad4172717662b2cb47d451849a6b

SHA512
623510e03b509ac5285ad73015ff1523e0549acdca749366772b2c6ad6032a1c53a3bfb0e2ed093a8e6312eec736a074a700c80fad43c6fa0c462ac1d64d0e6b

Download Submit
/data/user/0/com.esbook.reader/databases/easouBook.db

Filesize
36KB

MD5
5fb166a2c6c1d5f2c04146cc6df02e09

SHA1
7c113bcbde50e9836e77a860d9f66a0163f7d922

SHA256
6f0bfc6e50dc7372f25edbc7ac51ab72e42b11315c58258ae5a0ba78bb585ff2

SHA512
4dc04c5294f0b8bbcfed36225d278259f00ed18ba51ad8ca6fbe08c5b68a35fc58d99974beaf97d221f535f1058a70448cfd214dc50b3d28f4a85802cadc80cf

Download Submit
/data/user/0/com.esbook.reader/databases/easouBook.db-journal

Filesize
512B

MD5
03b07e1bab6341b54bf7abaeab55913e

SHA1
fb79b7a2b4408d6143ecc77b2f729dd8a5c0cbac

SHA256
1a9db3349ba76482cc58241c17ce0403b68bf379955c3a574e88b7d696944087

SHA512
a7988795406e19143bec880939e517914c685774daab0e4304634b95486a00d3e2142bb9e04951d34312d5c498668b043cfec236d00929f6d323921a5d935d23

Download Submit
/data/user/0/com.esbook.reader/databases/easouBook.db-journal

Filesize
8KB

MD5
d4ac30cd7a56d79de3ee8afac2228e95

SHA1
bcbf950c45c875eedd6ead43f66c9fcfd4fcc0d4

SHA256
0ca7f1e858fc781732011c7ce9be17cac39bd7318786074aac5a3e125a1c7fd3

SHA512
62c4bbdb121a97915be77f6c957cf391475154f7b8fab322e8b74b9578ff8b5d8218ebafa2f734f748e09d7083bc0ab387b53cedad3a3bc2a42fffc7fd9f5242

Download Submit
/data/user/0/com.esbook.reader/databases/easouBook.db-journal

Filesize
8KB

MD5
6d5f150f132d79e7e89cb90b11f633aa

SHA1
6337d9642b5962afc52ebbbb7a7732618c2a431f

SHA256
f8279fd93a8fff46c5079b7211f82547f979423c4794deb1013b019101c4e634

SHA512
3ff246d556dc9dea228a7afcc44045a8e0f562f6d898a4075c676d30c7ed52b74b4285f82b0a86d68d0da613a6c29a3a68350d9a99140cd375cbd36bc277bb78

Download Submit
/data/user/0/com.esbook.reader/databases/local.db-journal

Filesize
512B

MD5
2af3a0e401f0a24b613179364a07b5c9

SHA1
b0f2ae35eca3b0ad8d7988f504d6839e57778c06

SHA256
76bd702e428cf71604d482817c3a795ae31d126b13c23c376301a907a6f21a95

SHA512
4fdce9a38350e07c35f4ad765ea123ff632e3c68619fa74ec229657234cfb61ccf40a8477289411bb94d21149729e827b4e801ee04ce767c2e74390fe7d5ee09

Download Submit
/data/user/0/com.esbook.reader/databases/local.db-journal

Filesize
8KB

MD5
c91e9e7bc95b0350ac664d211433381c

SHA1
3a96f76dca1d24dea3cd0585e8265d9cbfd554d4

SHA256
6f3f6cdedf6e47ce5b8826a041837713ce14a40d3e6ac2146550121d9ffb454c

SHA512
741d7559abefc90bf3a3f9479caa1e9221333f60c039f17484d3cba18899dec17351bf67510860a6ab3a8227e4f9a61cc4300fdeb102bba92a7bd2a8edd05d1d

Download Submit
/data/user/0/com.esbook.reader/files/.jglogs/.jg.di

Filesize
340B

MD5
28b04325be75b4a4e47b39fcdecf7c4f

SHA1
77eacfea5d300f5c6463cdf3005b400f31645abb

SHA256
b6305cc0cdd58196f53ae9bba682c37919bcae450142b01d3a228c5226673596

SHA512
0a52422c7c5822c2ffe8bcb1555edf3819bccc5b013593d10c9f3c1699d25eac69306e26ff4aa2eeeb0ca44750bd82bc830b3c25d776d3299a41659518f6eeaf

Download Submit
/data/user/0/com.esbook.reader/files/.jglogs/.jg.rd

Filesize
32B

MD5
21df193af663041a3b3e91a1e8ede548

SHA1
4da19a8ee254017f4b4a035ea04412d2deb70574

SHA256
c410c4f820489c237482d0ca5c84b53c5b3787443452bbb12ab797306fde6edb

SHA512
c9081ef32d712a3f75749b00422a8a2e1aec83bbbd5c46be1965e9676d876d37421991be5f356207915a36f2f7c57f31fda100ea7f1528a4b614cd636203b7f2

Download Submit
/data/user/0/com.esbook.reader/files/.jglogs/.jg.ri

Filesize
314B

MD5
c351fdf1e497103905d500021ff60510

SHA1
50196b91d563a8bbf3a88707bb798c1c31fd1c92

SHA256
47432d004233639c4331b70f26cc2526212c3b75b9a462047d140b796815cce1

SHA512
e8dca84f61a92963e957864760c86718a12261d69a1e88c55c887d4499596197f106e9de16d284fe4da2487079d23b4ec72ff6e2c7cb6e3bda31c133fe8c3e35

Download Submit
/data/user/0/com.esbook.reader/files/.jiagu.lock

Filesize
27B

MD5
8c66b73f803b1af053a723d747fd65a3

SHA1
2cc66478bd6f80ad5ca1348b521b596a6706703b

SHA256
f5c42dce59d6def24f678296d801fbcdc8933b81134f66611e51195d7e0b3182

SHA512
61905e7d42b6e50c87c6af53008f3652241daa7c7baaf2825214a018a296686a441872980ff6e218f028822e1c45669aa188166bc7433aff73cf01afd6d0267f

Download Submit
/data/user/0/com.esbook.reader/files/__local_ap_info_cache.json

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/user/0/com.esbook.reader/files/__local_last_session.json

Filesize
111B

MD5
6d57efd6998227115dda0f945da48192

SHA1
3e40926f85e5142028406769c85044f1a12ff6ae

SHA256
5900477f1b9eb6ff515cf8c7a3a9cd05146c48d9c4fcda960bbc303a10b3981f

SHA512
5de00ed7f4558319bfc84d48f93ed180c387fa14f1bd41c93ada82fb7625ff4fa8df4176878d2add76924bd3067e19fd3eb718e2763c40faf5db5c563fe87f44

Download Submit
/data/user/0/com.esbook.reader/files/__local_stat_cache.json

Filesize
485B

MD5
0822cb595f98d95bc1c8156038b5d5d0

SHA1
fc11e7a9f05c788bcf5b2d0dbd6d125f35d77abf

SHA256
79051bffb4e94aacce9361e51535ca8a812dda5fb11b14cd8ede0661cbc4b84b

SHA512
2fbfc40b265add687467f4f9a54871236b82fdba6ce9d4af947ce8bba87f059de488572df2ffea0c4729cebb5ba02794c4a61a40e6606ec7658b3030ebe54eb8

Download Submit
/data/user/0/com.esbook.reader/files/__send_data_1703488921686

Filesize
521B

MD5
50f39ba9a9cc80905fa1597f2d2035f0

SHA1
58e0896a222f08839c5602fe80e843f4195bb263

SHA256
954767408b71822b2c57ad7697b12ab7d3c4faa73cee46bff0e61dd2d0ef8655

SHA512
268e68f6ae888dde63f48615b58832a189ac78756d7fc3a93fb50a9e4846ca4f25996b5703c8c817bb7f8503f5ac5269b7b77f6332d95fea3f9a52b7f929c43d

Download Submit
/data/user/0/com.esbook.reader/files/__send_data_1703488932933

Filesize
686B

MD5
039e24e73ed6caaf7442fa057c50a01e

SHA1
baa68f6b9dd0d8c4a21a2c27551a102940330186

SHA256
8033b5d6dfad92c0daa620648091c051c83d26e692c6cc38260efe428377fb8f

SHA512
af0dd0f7c77df8ebda20294c11862540ee4285e2fe23dd6a7de15e2fac585afdd91adde06908c20b25a9dd74779d58c277c59365e706f7a7673c506225c92d6d

Download Submit
/data/user/0/com.esbook.reader/files/jpush_stat_cache.json

Filesize
119B

MD5
3cfd440eb389b0daf315acfffbacdcd4

SHA1
41927a8f8272032f772fa06a3fff6d8b674c56e0

SHA256
9d9384a30291e1b1037e43808827db5749aa5f227f5bfc5e4bf22484ef112473

SHA512
52aebe761aaf0dd73d359fd7b01e7a4f3d2e68716a3f0b4cd1e77806454b04d0b788b49cc46f6ab70545dc48f63a7b2d306959e713cdd139941246dfb73c78cc

Download Submit
/data/user/0/com.esbook.reader/files/jpush_stat_history/active_user/nowrap/61c53640-7477-440c-b00d-53c3e5a52304

Filesize
159B

MD5
176d35f1a2df7d3727b87bc11c96dec2

SHA1
4ba47fbbb7b42fdab5914e676e4a394ec6e4ef78

SHA256
ee44b22c288cedee295be4e9b5797b48ca2c83e7be87f71698919e735cc07c60

SHA512
18a84019b1a57716e79e413772b24fb59a08133827464cc99dc5f55df3345f0216401297a1d960cdc7931e72efa4321bafa33aeb4c2c5cbfe27b4591f6d589a6

Download Submit
/data/user/0/com.esbook.reader/files/jpush_stat_history/normal/nowrap/ddec62ac-bb82-41da-9c5c-4a9f42ce87a4

Filesize
187B

MD5
3d8e960d76d118756b02ce045d738d0b

SHA1
a67fe38bf530772fcc186a976ffed945e1b86b3e

SHA256
77428ab7415baf04a3f10a409be60d6286fd71f72921de18839ae9cc9b2822a8

SHA512
92acf162111cb12edd1ed0fe002b765b412a25409a1d46b0ddcd8ed55c092976a876c3b3b1101e77ca2032868fddbc5407d53db64c3f78500cee7d105843312f

Download Submit
/data/user/0/com.esbook.reader/files/jpush_uncaughtexception_file

Filesize
272B

MD5
55f6da7b1e1a20202184aa6dd5913451

SHA1
627b37d6204ac7e2e938330a17df0ee9c59edd9f

SHA256
a252d9dfad183a91da3d0ae4302911afe62e30af615a11801db5a2c48c17b616

SHA512
7d1a8db1428bfd4175215203b1df9b51c55c382a8cde49f949045ca5fb45c354eb3f1b5e566cbc5c16655281d74200311f03e7bc875f36808e4be2fcb16df6bf

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
e335f0f164a730389357dbfc5f3dd364

SHA1
706e175cf0514cd13f49a464340d39aa1ab3282c

SHA256
f906792205b24fadd486029734bb690eea6c1cf07e2058fd2955c8b1e5092839

SHA512
46596cbdcf46957f2e3600c293491c021fc7bc09c04326cda882e9d84425de305683cab066622e209aa16a6c964a65718ba63c51768dd8e8a5b3c61c35d8edc2

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
109B

MD5
47645c5dc07b275d501abe7bfc281905

SHA1
d887e700edf14e14c4ce751e6dffafdbb4cad15f

SHA256
6b9b365e1344f18f4b44760df9fd9b2c9c109cb46259eb8c9d4f3884645a0f1b

SHA512
5b1e8c9c9326a32f80b4fb760fcbf6e3be0af792d48a19a20616d8727d3b30342b017807e8042e4b37a0c6f23e97acdd584be9245ce20ec22973e5fae6d391e4

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
221ebb0c0498409f9f58da319cc96bbe

SHA1
379fa2aafc2d26bca6ac45fffdcd8d870aafc5ca

SHA256
16e89f3d8cbece407f2168bfdb90d3047bd71b649a6a9f3d504e32f5401128f6

SHA512
0240c2ee7ac7ab10c8c2711f7b6706e2bf36a18790117a8cd4be1d5b6489960a3e7f8086b162ae4447dc5749f6337449e5db7c16c37a5aa97d000ec8fc623a0b

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
36KB

MD5
46f44c7b766534c5f2c5ed0fbc0c19a8

SHA1
30381d0e392910289b9a90e25426bf702640207e

SHA256
624a0103ed1f3c41e206cd8ee5ab00bef3d0b8bce9fe01b4b17c01f1dd4f38a0

SHA512
0678ec37b014545ac873ece5a04126d50ce75c819fa8ec68b2a66a3c1eb11f52c1a9a5b5943835ce6535e1cc04424df5d66bca040c8fa51b9ed67190c55dc13a

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
653bfc10aa83ce29ca83576cb4987acd

SHA1
bac595902c2b03207e4ff75a4a5f7e3eb499a322

SHA256
f486669b5031fd35ec9c35e6214011b6a0ea51170e79f4d4cc6e585817a3ba61

SHA512
4bf29c8e7cafc4b82e04158f709bc5e1103e9c14a30ef41d567b47452922d75674a9249840451dbb181eb4813b52a590b341572fc084fb7e343bb11815b3589f

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
8KB

MD5
c88314f1a7b0f0f2d9314f8d9292875d

SHA1
3e7a7f00f2ae210cf415291ac0c91d44baf0f089

SHA256
a640417be1d264cc0c2d5da1ba3eae100a8e521c596bb26cfb7323859bde4dd7

SHA512
ffae50fd220a80ca2213975645ee9b4789dc452b9ab557de61acf427c52b6782a307eb68d33a36bc5b181a9a470839302ab00be134510701c73c61e19fc684c0

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
4KB

MD5
b9f105d22e04fe7799b7f8847b00356d

SHA1
14cc20ed6eadaf06543d5a8ba708a8a0968ffd46

SHA256
0a31029d09389c1889694eedd585a72e9f451b7eeb7c58500aaaf3daaea50389

SHA512
3fa9c63eaab38b6ab94fe12943da96a115e044a0a3a0cc9cbc8b4a6f31e104f4c8aa368c5ccc19d18b8f04cca83c5111ce9da7e875114709266aa6e62566efbf

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
8KB

MD5
7ab6702cfd728a45c2bb10811dc5c51f

SHA1
8c63e9bef709ebf388bf88182a47df5d5e2e2ef6

SHA256
01bb74958de324019260fdab5a99b7395d837c366ce7811c00583dd6b50e0512

SHA512
a6efef83ac9389d049efe9f35a9dfbd8df8f7485f7e19d5c6a1a4e36774de3b65f1ed1a8f7c5e4f616930e6f52e2c32eff434b8daaa50614ba20f1856f3475b1

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
12KB

MD5
70e3403861935759013de054dbd73657

SHA1
fd25797e6c3d536695d96825135372c055503e01

SHA256
f172bb3d5bbcfaa781d1bbb7fb2b35af2f996afd6de7d36c317df7881d2ed83e

SHA512
4e237786696717b8bcb8d43382ef43074b04054488b929857d2dac6ec739b8f579e56656c6400d0797f1b7c23c36babe7e12bbc72323bb0e858c962174410e38

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
168c65d8298d33d3b15da6ba0e686109

SHA1
77e860d94703fb70a31602b033c7673f4b830e71

SHA256
9d198b37d9f0b9a9891631383ab2876b57933388d08c595939d76221758514fc

SHA512
0acf23b54bdd02712cf7ee3c29ba7358cc94ea98664688d4e76837160c9629165472139a0698d9438525703f26b62922299851aefec6d0c9b9090115faf8b49b

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
80901e949d5716cbecafd20d0712559c

SHA1
5b0d1c23c60508cc9ff23640a6c00bd0ac761843

SHA256
4b6d9fe5299f10e7e4ab3a453802e4b04738927a5e89dcb5052ae211b09bb7bb

SHA512
2247229859b08227db5d5b7358a9988147f9c660b83a8a3f041c7d5ebc40bc583bcb2b2d7605973bea27cff2640b40c9ffa34be22624e2c855e98be492c98aa7

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
32fb1c831691d205b3e1bf2038c8ee7e

SHA1
5aa2f15de9fff139870b5f92f86ac501cfbc18ab

SHA256
58379922d92aad3c67750964ec5fe317ccdc953b7e11e68bd5297d2c17e4c007

SHA512
ac8e955fe3ddbdd2dc32c5087f6d9173c4da0db47862abbfcd60d2a8d26d6616054b12beee76131648af32050ce287f03c327c001b9592b83fa541be4f494952

Download Submit
/storage/emulated/0/easou_book/cache/alipay_msp.apk

Filesize
8KB

MD5
0faac5dd904c76c6a4dc9f102c9136f4

SHA1
46364973e73930d51ad14010be53f37ab5e16875

SHA256
06bc31a64f68f1166fe43f33eb981848187f40c88dd11f5c8a436af689b79433

SHA512
90f47fa470b7e20b00f4456935a7e3687b96cd3edd067617dc5a20f96755be6d47b34a6195a8bc30b26697f60b746275d7e6331409804955804c0d80bafc2f3d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads