Analysis

  • max time kernel
    137s
  • max time network
    179s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 03:31

General

  • Target

    6d344f8e6df0778fc71b22a0d15c3d6a_JaffaCakes118.apk

  • Size

    10.1MB

  • MD5

    6d344f8e6df0778fc71b22a0d15c3d6a

  • SHA1

    150a096dda5287e662ceb61dcb1a8dc6f0372d36

  • SHA256

    59eaf7a4c8b247c79d2c91b288e1b4e3fddad745107d55ad945e2a6596ac80ef

  • SHA512

    b40ab68cf01a4fd6a5c06c4dd7de69d2f391c56ac570ffebbd8503f04148ed7c6cfcbea119b84eb9d33b9cb752604c6b783d95355a2b1a9476e9d39df675a6b1

  • SSDEEP

    196608:w3NLc3xdOJD5EhnXu/S2cUkQ+g8pAwY485Leap7Cbt1JfGb0Q:w3lc3gGRXu/S2t+2wILeap7CPJfG4Q

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 4 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Requests dangerous framework permissions 6 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

Processes

  • com.esbook.reader
    1⤵
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4259
  • com.esbook.reader:GuardService
    1⤵
    • Queries information about running processes on the device
    PID:4288
  • com.esbook.reader:remote
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Requests cell location
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4362
  • com.esbook.reader:bdservice_v1
    1⤵
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4439

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    32KB

    MD5

    92b58b51e9fad6410ef3708fed1945cf

    SHA1

    93de530ff18548d606878a4c4d8055b690baa8ab

    SHA256

    78ba8d5a8b3a2787f78f3ad50bf624fcd73c4ada967a00383fb50b83f5dc7608

    SHA512

    4bc19f181531fd072ac77a87c263fc9d6634d49319fc7806d6754fa2e7be4fa3ebd4bb05bfa39b735b06d3d7d05052a83f2ec195c1ba083c28e01705c6369d93

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    20KB

    MD5

    8f4c801b8b6526fb94648867c45ccc7a

    SHA1

    aa7cfb80ec9c3cf21bcc95a65637013a3d672596

    SHA256

    3d17c006829691895553ccf937645d7da650416a14bbbd3acfb636b7ca2c243c

    SHA512

    b4288bd08fa8b9dfaf8ca0d9f6898e27a7dd9339cba8de578e74798275f7b2c7e77727bc316ec7132e6526bec0b715de51fd09d7d1894a4ef19561d6610bd2ed

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    16KB

    MD5

    2a96f594efbca2fda100850dfa0479c2

    SHA1

    3ab9ea9445b023190a8dd501d1262f5ad9e2da68

    SHA256

    e22b797cdd431cf21fe39cd8e6c4a585e1c612f9012a5380f181b6b81e22503a

    SHA512

    069ebaf9fee78b0c43fcac8e0ab4e8cc71449b276df7659cb664cff81afadfd5f165f8ca7da7c725d5176e1a36a466e06b4695941b7cb28f71f3ff8809193a39

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    16KB

    MD5

    dd0df44fe7ffa9dd21c1a25373b31b36

    SHA1

    791db7c09afc1e58aac629939ba0def48b713b67

    SHA256

    244a9bb6e32bdc002f6845faba1affa607fefcf77fbab05f5fe94a720996994c

    SHA512

    4f9179e05f77f116c26dd73263f1f18962aedaf979f030b8d1d98bdb22a19c1c9628eb5d5814cf390ace3fe291227733e106254ace1c6155d2e0f835cf22464d

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    16KB

    MD5

    2675e60242d6ab3cc95053bc56ceeaee

    SHA1

    456d9af4e138759a276679b65b131415f0f1a75b

    SHA256

    109d37017d513e9454f25f4a89ef9f68d7e934afa24ee443c5d28054b13b26eb

    SHA512

    a893d760a54a576ff901d7fa9d7ce16c22d5c9f05fefd69f2709f77cfbcfb59f3e739aed493f2fec890d988e7eb9acb71e91bca7ca0bcbfe163dc9f05a9bc40e

  • /data/data/com.esbook.reader/database/pushinfo.db
    Filesize

    16KB

    MD5

    9bb4c9ee3e6a8fe57bbd22fa06bfa72e

    SHA1

    59475fa7d4e63b821de2a522c1cca4ff1c52cc72

    SHA256

    957729905f29c983b36199f03b0cd4ae79d3de1242474c0163891063bdcd3dae

    SHA512

    27d28d9ec3362eb8334e9ec2126771e8284ff08ff7a56669847eb562c2211ee54e914e8bc87bd56e18634352264e633184ebd45bf2b1381bf7f48fdf7b50ca1f

  • /data/data/com.esbook.reader/database/pushinfo.db-journal
    Filesize

    512B

    MD5

    156e62dd7e169a155fe38c1ef3e67b43

    SHA1

    5b654005bae1391eccdaa641ccdd212443c65544

    SHA256

    9ecdcf18d761495125ef87e23eee1419be29dedd5253b32983356471e0fcb1a4

    SHA512

    e582d79767a2924c0557a93a1f256e378726ec2f3442f5964104be2f3d1117f6656fa30dd2c587a0d64576b5a423e43e4500cd6fe850e7e2b4da042e1a350a78

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    44KB

    MD5

    115501c598587fca353436b093335ec9

    SHA1

    24789d06a7fd0683c5fe3874a5636538cd71db26

    SHA256

    ac11222de38ba71c3aeac81150252fb495409a201a574a8dbc0fc225c56b382c

    SHA512

    0d0d195cc329bf457e3765fef859b253db59c917cca51e330c63371348055e957bce058ffb32c06fea9bd849b0c18f96e4e80d239c450d5f77f12b95580c877e

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    8KB

    MD5

    8f8c6c976f0c42f3956d17ad211d0090

    SHA1

    ea7eaa86b659de459837da033f56f6863a8aa325

    SHA256

    75c0e629331b8fdf0d39ee88d503d2d934b3020885a50a8fe2f2d6898c6f72cd

    SHA512

    0086b4659aa8e1ad8c12a2939fa634534622d348e226e820f34d7e657402855bdc34a23c42736da4d8f97675de38fb44034833389e0cc67b4d70f6ab5540fb7b

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    4KB

    MD5

    49b21998e2d94ddb78ea51d35bdda096

    SHA1

    3328dcd8c754daf2baf655eea1d7b9a7483bba52

    SHA256

    be44899ff9508a55cfa1040e8e90577e2a55c1c8887d58dc2f7320440f7576b5

    SHA512

    6b7b86a681b651c34b9dd346bcb4b4433a47db55ba864f21798f23872f4e1ed657e3180c70552f0154ee94bba8f196e9cd45ab88c396ca7ff459a6a2e4ae4a4c

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    4KB

    MD5

    907a8ae8e5b78dd3b4dba8ad8dcd1d3d

    SHA1

    0c507a3e40f8e5dd5a40110cc0a704736ce3baae

    SHA256

    8193edec3e624f86df3d71085d60a18f5af147a4ad3dd5cec604450622fc548b

    SHA512

    c80f15decadac0d1e8fb6af5e70497ffafd9e565bd0dfbe02b247a824ab6fd98622a373bd70c2a42681e5e36861ed9c8fada93a2060147981b0535588527f3b8

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    4KB

    MD5

    e6a80bdadac12c3ac97668d26268569b

    SHA1

    91c392855faf93737a41fcff6cb03c61df608f96

    SHA256

    db2473578238a7e97265bbb86dfd235f539f59cce07bb950e2aa87ca5b29f9cf

    SHA512

    b18bff9fec0b4f5920f52ccf7dae6e619299cf01bc400d68812b85a614dee8e80b5e1383b8ece07c29c2e08d2a2dc2aeaea4760a6c69a5a1571099bd2981a5d0

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    4KB

    MD5

    9a7f67ce15c29f10e1eb72eadfccd8a8

    SHA1

    80580f4fdf288c3214a3a4bec37bd2e3cbbba39c

    SHA256

    eecb4927161beef5a37690d3e02f17fc218940e332c006f53e1a600df11dc881

    SHA512

    b142d0213e156799158ad73281031526f8deeee16b993961ccf82afa73dcdf03bf29e3a920b0f341cc528f701364dc6997818effa4370900e3ca374b7813db03

  • /data/data/com.esbook.reader/database/pushinfo.db-wal
    Filesize

    4KB

    MD5

    1d4ef3c0090cde452b44034539a57436

    SHA1

    b0af044d8423fcf458ae003b3691a5d6ee42c674

    SHA256

    b802c67c1d9c5f339fadd9323433928ae9ab1849b031c73e8337b267abc4d649

    SHA512

    8f99600358110e572e553b1e497cfbc30243b865bd55f2397d05e31a63e1f6c3f8cc994d5d466e4841b15ec104e6781a0876da4de489467cb8cd8027d6d8e096

  • /data/data/com.esbook.reader/databases/easouBook.db
    Filesize

    36KB

    MD5

    54117a2602693fb02dd4a864090fbee8

    SHA1

    75addd47ed60fc9b5e9fd8ef832a8c501bff92e9

    SHA256

    61a47d536972582cfc9fa85e469887258d6e9cc89fa78156397b39b43870e32b

    SHA512

    eb6db9939a23707de2e2569f5c59e4621bac3b40883ef0325a10136dc1105590aa4888f73789f74d4a1f543e81213896195ca3d5c571a3f68540e4cb98daf41d

  • /data/data/com.esbook.reader/databases/easouBook.db-journal
    Filesize

    512B

    MD5

    649f02d15f7bc9afe4bc62c7fa63a4e1

    SHA1

    9d66a52c5a4fb7f03fd64ca6c3817c6f623ec8cd

    SHA256

    74a679d0705455fa7d7da8c46d94ab1d947a857aca6667e2500aba0340b147b2

    SHA512

    e1508eacd2d59179bee264188578227ac05649ff079c03fc87544fbbe24b6612333dd05834c52c4d11163dac98537f99de1332dbe291f54c7a08043813733a1f

  • /data/data/com.esbook.reader/databases/easouBook.db-shm
    Filesize

    36KB

    MD5

    b351022ad1d994673a5dfe1202e5a7a6

    SHA1

    3408461be90fec68e152e9c55d744a3ba0208bb4

    SHA256

    a6403c270eedb11277cdfe3354033b604818d943f9a5df64edd19472e5af30fd

    SHA512

    d71434a5a8b48eebdc86ba3098864da6fd960b1a30a2213014911bf9607f5724a19d33c2ec7ccaacc0743a62cb05dbd245aac1697cebe5417bdb6d69d02ecb24

  • /data/data/com.esbook.reader/databases/easouBook.db-wal
    Filesize

    48KB

    MD5

    827c8c248d949188561280085a3c4315

    SHA1

    d79c73f2a7af637d7a35bc0d4f02d63753969b67

    SHA256

    418f520362aec5ab7c72b08ba553d7ab8a81765036bcad05ebed3b999a4b187c

    SHA512

    5575d366575c3ed035792f5b2c96a592f945df26a955841278a3347ef8d4438ab81f253567f85b2730e78e652c73ebe8cf3c37a312f99b2cb33f67aa38e769ca

  • /data/data/com.esbook.reader/databases/es.db
    Filesize

    20KB

    MD5

    ea3aa6fb8d9973497ece1f2cb4bb7878

    SHA1

    a0578081d82c1e833a8d73d0ba90372cdfc7ac4f

    SHA256

    61d50595229cf66b791bbcc066ab175098f745c66700361957c8b974a194789f

    SHA512

    587da63d14dd7a4ce3992d92e2774d1b4e5e207bb4f51d095f1030d863a029e60ffcc6add7ed320291f009e75bd13334fbb075f3aa5352c5ba46cddf57fba315

  • /data/data/com.esbook.reader/databases/es.db-journal
    Filesize

    512B

    MD5

    e3d26d0735dfe98f32d4f8573fa3dd35

    SHA1

    38f6c3d476ed29d2d40b04397609e50e65b8470c

    SHA256

    e3f05b85c12233ac7cfa5921ccca99255c63ef8eebf478bc5d426b5f7e80fe1b

    SHA512

    717007d193da65ef40e700f8a6e76bb10a6696fbe460d5238721bec8a4d51add7999bf6cba6289cdd85222311be09ccd6628e29c17e08f1e9a96e6d97a819089

  • /data/data/com.esbook.reader/databases/es.db-wal
    Filesize

    32KB

    MD5

    1a58bfc256b048665fdecb7c3d88bae1

    SHA1

    05fe1485c4b4edef9e52b2c29f378a388d06b7ac

    SHA256

    cc5d293f956771367e5be4078963d9c85b795e4792a2847361b4f137f309c2eb

    SHA512

    4c9d9c1816171491412b685930c24f47e86fc25f47477898f5e8f79a9c20e5a1bd72c12ea69fab67a829e6b38ec335ff13e429d10098c8dea133880a9550ff4e

  • /data/data/com.esbook.reader/databases/local.db
    Filesize

    20KB

    MD5

    03d87ea09812d7985aa851cf47db1a5f

    SHA1

    04964b114a6c15512a89e3973f15f1fd31b03a26

    SHA256

    662892ab9c3c2a5f013fd65b89e79f51b8a03040ff632afad912f0cd5e97064a

    SHA512

    433c0e6577066fe988031d77007b07ea183382eecc7563173a84a6d9b5cd58cd8ae79d633f6ba4cf6af4add3afa1d1bfefdf7ba1d5b1647ebed2ac672b685be0

  • /data/data/com.esbook.reader/databases/local.db-journal
    Filesize

    512B

    MD5

    9877b25e952098f791b2e6dd4bd63c5e

    SHA1

    2cc5bac5cd6085115aaa23f430efb55c8982227a

    SHA256

    0a5e6aa92e391d17ec39bba2f76eb5935a426ee7bd645c65aae7f2d858aa9d48

    SHA512

    d5f609980d795b369885c805ac3ceef423cf0049eff92aa233ed90068ec6d0f2e234472c4737fd1091cd62e72ade25571a4badefd30c0edfef78ea57975cb0ec

  • /data/data/com.esbook.reader/databases/local.db-wal
    Filesize

    32KB

    MD5

    33403eaace226588c96304213c1a5d19

    SHA1

    1d3d5c466eb81477f629a1cdd16fa5af3e2f5a71

    SHA256

    051da6cd1ff3a3bf9a929d17f6eaaf978c5137227d3d8307e75cf483828ca024

    SHA512

    ae1f9482b135aa5e6d5eca068c4966f66e08d5bc8fbabf151132871acc70432aefa9201e2ac317ea20b817749b7952cc42e5ead653378f41f24cf757cd679659

  • /data/data/com.esbook.reader/databases/localEasouBook.db
    Filesize

    32KB

    MD5

    35544c6fa94194e0f24859d5b373fc23

    SHA1

    327224ff92a31bf94a2ab2c529b7d3e70861afc6

    SHA256

    14f1b1b5116efd987e09056ad277f402e2f19e84d148bb7b7df4ba2c6d35ca2c

    SHA512

    e293e2788c5e381e12996222d4220b3a5a20c809dda2da820d6bd5618aeecb275cd2d85696e07698b3afeadf941bec1cb4cc5c2b6c1f55e37080101afafb3f5a

  • /data/data/com.esbook.reader/databases/localEasouBook.db-journal
    Filesize

    4KB

    MD5

    0204d4404e6f320e1f3c35ae569e0a58

    SHA1

    18160436dff32977e2f133b88ca64144bbd3e2f1

    SHA256

    e10427fd8a14edef1e4a14219f83f994d97b577999a919b011f14105684acca2

    SHA512

    dd4ea426343c72ef5254c24dd73e84e53f91f768b9d5fb66a92bdf3dd488c5f4ba64353103b4d610d7a1c50c823514dceac4b904f6921fced765241a709efe74

  • /data/data/com.esbook.reader/databases/localEasouBook.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.esbook.reader/databases/localEasouBook.db-wal
    Filesize

    36KB

    MD5

    80e9731a215437ca7697a9218a8c517c

    SHA1

    f0b4545946d5548bb10b2160fc9209b60fcc3416

    SHA256

    600eb00ee4aa4d7cf41e5b30d1516db0ebc44b45337739242562c0d209918c7b

    SHA512

    2a5d8fa03b088c8c62704bef47c142f714bd10e06973461479afecb80dd8983b216acff2df8339ce757f77978c3079e24b9124f396976db6ce4c15367dde984e

  • /data/data/com.esbook.reader/databases/pushstat_6.1.1.db
    Filesize

    52KB

    MD5

    9f499dc96e274be3491121b87faf9eab

    SHA1

    edb3502f64e08f13a3ee0a0bed471ea983db4e59

    SHA256

    491d90c326b63257eef94bd1fde87de7a40660c20240ae4e373228afda569639

    SHA512

    f3ec0c8c9aa392e311adbeac85977a8d8fcbe03c41f4e4cbafbc61c69f7842621a51081c5e33f8bee3699b398f1548709f032e80021107275540d2e4675b1a76

  • /data/data/com.esbook.reader/databases/pushstat_6.1.1.db
    Filesize

    40KB

    MD5

    52bd693bc636e3add52e6250b74041cf

    SHA1

    d737256f57ebbdf7ff52d62abd7b292c1d980479

    SHA256

    d362317eaef664c94e7790f3fc9b2ce55aa6d2e6de9a7e91e587598f1578b399

    SHA512

    7379182dff56705028f447889439839ed814df25407a9da5ad0d7e5bd4607a026853b8babb3ebe5fec5ef6feaabb3fb815daec378f3f3477279286abf3cab0a4

  • /data/data/com.esbook.reader/databases/pushstat_6.1.1.db-journal
    Filesize

    512B

    MD5

    1dd8bbef7788527aa60cda8be54fb854

    SHA1

    270fc258cde09a712587ebb54b61c0ed26fe9d97

    SHA256

    a5c9af85e44a1b5caa37ff0af50dc24db6454e5621bf03591ca65f5771a1c0e9

    SHA512

    f793b14e2ab182c890621481a9323cb254eecd19b784ab1190272069f63119314cd3cd1e9e2a4284d5c7774dd06912d5e40cfb08cb2b49e759da571a3dbbbe5e

  • /data/data/com.esbook.reader/databases/pushstat_6.1.1.db-wal
    Filesize

    72KB

    MD5

    ce1fc0f698e4cab9cb054bbff6cfd77f

    SHA1

    967baee52d1b52ec458efa2a806f268d7818cac8

    SHA256

    c825a8117d5fea06d00331ead6ec9ccfe18be0fd16c4ed69e2ed3f4f5c5df091

    SHA512

    a31eee434cacc5d7e5c05d28c89abe92ad0cec63c982176c5701a1dee0553718c453d459e18bc0e24d8bbd2ce509e196500f15353243c48150204b53255aa3d1

  • /data/data/com.esbook.reader/databases/pushstat_6.1.1.db-wal
    Filesize

    12KB

    MD5

    b253d80f26b79527ee26b49d3daaeb60

    SHA1

    2d9914953092423a22e07be6fc6daeebf0939845

    SHA256

    e2572d17bfdad333f10a71e8f391e84c519513b071a03960a62e6660800493f6

    SHA512

    5a0d46ced5370ef2790bbca09aa558e899449092e7bc6bf4a16b9aa1ceb01098f37d28d207bb3a7e12d86a2bb4236ea382143da397046a72f98223778a23de41

  • /data/data/com.esbook.reader/databases/u.dbv5
    Filesize

    52KB

    MD5

    2e00c7219d68da39392ea5baccacd378

    SHA1

    1c3c557e40b9da9694f4ecc1ba65e578d402f1cb

    SHA256

    73882c7f19132ca8500194982aa21fa9cbbac13af401d31da4e7b532c6da286e

    SHA512

    29fb7368d44ec760fbd02efbee71d7536b22c1b2e064182784eb611cea4b5b728ed30226a87a078acaf5480d19f453c9af96e85390e0914be8c9d34ac8b3bfb4

  • /data/data/com.esbook.reader/databases/u.dbv5
    Filesize

    20KB

    MD5

    29a4fcaf94a81898ac1567235de01d78

    SHA1

    dcb6eba4b9c974cc262cc13b6ac37a7659febdcc

    SHA256

    fd24e7424fccea77a3068e63d12e7dda5bd18eee1a5057cdcddfc6014d8bc1a9

    SHA512

    81a2953c187618a645de6e56e958e25ff3cd636623e344fe47e61d62925eb555456612242c21d437b935c0d05489b0f52870909bd1d01e753d9603f873175c03

  • /data/data/com.esbook.reader/databases/u.dbv5-journal
    Filesize

    512B

    MD5

    54170f69e23b8e99e38e00a239adbe5c

    SHA1

    164c0a60cfe126f41e054041566b43055d871826

    SHA256

    0c70a371365c2064a346f84d6ad37a79d36ca101a2ae286290f78d7f55bf1b3b

    SHA512

    3babb57ac3ce23ea72b97bece55eef620e650e38a9e83cb58120518c64990e07eb3a1447ecfa076a2b47e969439645ed2e452bda894f7555441284dcc4bd72e3

  • /data/data/com.esbook.reader/databases/u.dbv5-wal
    Filesize

    72KB

    MD5

    00d8d2338f3bef03b58cc438313364eb

    SHA1

    e8025d5541f129d16e1fc0e9ea170eb81a28deaa

    SHA256

    9275108daac7d65ecaaf22f7de0ee62c03af9e53d3695ad2cd7d86e081ff4d37

    SHA512

    18c34d8e60f846a9b83f9fd6170c5496322c36f7a7137af1a7204a2d7c3d20765d74828d95a932f34c40bfc5dbcbf6303a5896cff697307257b60ad82511dd6c

  • /data/data/com.esbook.reader/databases/u.dbv5-wal
    Filesize

    8KB

    MD5

    eb895a63ab4ef84a94307ba5f6d0b2c2

    SHA1

    8c04967e7e9a82d1918f705dcfdf340cf5d94cd6

    SHA256

    39b90ad809c00a3706a7032b0bf109def1d22cbab470221026b1ee57e84dc34a

    SHA512

    8e9878b953b5dad2550519ac21d1a1eef3947760cec48615aab81b2a7cc872b8eacf03dc0c1f91ba6f78c618a5475e57a7ec6843ce1f01ab7856381e02886932

  • /data/data/com.esbook.reader/files/__local_ap_info_cache.json
    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /data/data/com.esbook.reader/files/__local_last_session.json
    Filesize

    111B

    MD5

    a8f83f26b97126bd86cf07d44be7d809

    SHA1

    53989cc40dad260dfdf2af36862b26a0763b1d47

    SHA256

    a1ad4c12283443edb118c4b0cdf86e8b4b0432d4f459b4cdca5624c451dbe851

    SHA512

    5af79fa719d2e5029dc6008b981196b43d4205d33b435bcd772c0fde6def8983db5af607e2c50ac3196fb140b7ebd480559aa61e4ef25ea9c9c187679047eb31

  • /data/data/com.esbook.reader/files/__local_stat_cache.json
    Filesize

    510B

    MD5

    c5ffa8f4d3b98146a8f3a01347819aa1

    SHA1

    7a432ffc0f8669318aa50adfc8b6e83ea66878cf

    SHA256

    9c0a65ed0a3c706cb52410533b4a6d6ce4cc2c0d831d2546ddf7b029ca9422a3

    SHA512

    9b906661c252163e5ab4417716da79fb9379ddbbd51b3e9a1542a4419a01a9884df202faece66a36f3b82aa9920c1f0630028df838508b3e6498aa261bce6be2

  • /data/data/com.esbook.reader/files/__send_data_1716521549480
    Filesize

    546B

    MD5

    397bcee7697c4c08e6f1317ae3b1d35e

    SHA1

    d973e8d413c101da949b35bb09caf346de740249

    SHA256

    637f6b33182beaf0a814ddf45004b36187d441895ec870cf74419ed5df84ac83

    SHA512

    638cb3b9e8ee38cc1c544b4fa4bc9047f291ff01ef993974d4568cc2d39658c6060991327d15e8a40dae67a57ed69a0f17cdc76fc6350993b2e7df330d5b516d

  • /data/data/com.esbook.reader/files/libcuid.so
    Filesize

    129B

    MD5

    3d54e3eee1b38d69a60bdaa07996d7e6

    SHA1

    0023c6cffe4818f9e4e2aae831d3ccb1f08f00a2

    SHA256

    c7457c35a7cc570df0751fedb3416605174d92acd4b211e142556d30feee3df6

    SHA512

    832f9095a3e1edd0553642d9e20c9a8a5e2db90ca07457d82b7964e23204ae1678374dc885b3de34d1664fd1902f7a9d805e8c5ed8c4b3f7d2cbd3ef031150c4

  • /data/data/com.esbook.reader/files/user_log_0_d1a36_1716521678966
    Filesize

    430B

    MD5

    eb022a88155174665d0d03ce95a363f9

    SHA1

    6726ad9f2c671d76d0f55fe643db3280bbd8297f

    SHA256

    929cb167168bbf2948a621ac0b4b4b147bf21d3bbf46c0f5c082d19bb0636028

    SHA512

    9b16ce4a3e1f4b4a217aa60102d3553bd7faece8f07b9d2bc72a4c1ebc5762060d01ab9ac951f7e5fe5338979132f0b543e443439ba94f38c6c50e4131fd85cb

  • /storage/emulated/0/backups/.SystemConfig/.cuid
    Filesize

    89B

    MD5

    217c75401886ddc8965f8197cd1f7b00

    SHA1

    ad88872acebf80cd351649f331772f8b4e1e585d

    SHA256

    4f7e39bfaab091e597aca84620195c7788bb9848c05cde918752ba7d7aaf62b8

    SHA512

    944bfdaf6a2b94aa1b6de7ca18ec8c23460da7a31d6721faa0010b503da2dba216000cf90f34a382818b7b31b883738e2139d9a87a85c23fc33f1654631ab64c

  • /storage/emulated/0/backups/.SystemConfig/.cuid2
    Filesize

    129B

    MD5

    dc2a97ac61dee7804f33c9ae5426a6fc

    SHA1

    19ad485211b417eafddad06221f87e3b97134a04

    SHA256

    b6b85d2cfa570a09d867603c3947693ae5eafe46a1a59a108315bc13b4164d4d

    SHA512

    2afda105f3358d89cc2c58580896dfa8c28fc63a07745d36b76b42c3d0646e912758755df9070b9490d2efdd07612b5ab5dab14c25b0a5dbfdb5462be572bcad

  • /storage/emulated/0/backups/system/.confd
    Filesize

    20KB

    MD5

    048c73f536f234f0ad0d2fa8bdbda899

    SHA1

    dba2e666721e0b0988807b8bb3ce0452dad3448c

    SHA256

    f1a64586ce75e770e2f36a7ef6f7419e26ebb9e9e786df3c5adce50a196d2d07

    SHA512

    6ae398c682724f0008ce47cfc790a7ad3dd7cc801fb3a8a692d28da5533ea7ed830ea36933bd3e3219fc8cbade90f073c2c418611921bc7d6877d94b6745c4f0

  • /storage/emulated/0/backups/system/.confd
    Filesize

    24KB

    MD5

    20b4c5a4e7944c6575524b67929456e8

    SHA1

    8c00624e72d53734b11bbd36d92523e4d80ed5b1

    SHA256

    269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69

    SHA512

    c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa

  • /storage/emulated/0/backups/system/.confd
    Filesize

    24KB

    MD5

    6b12ac5632b0bdc33be51adbf7328320

    SHA1

    cca69f04387de52fe5a5fd5c34a66968e5dd50a3

    SHA256

    4619b14cb594e3b3a65e8795c2f80765fb2f84bac80212ff71ae616aadcecddf

    SHA512

    1c45d5fe2556d92b266856247cbae54471641d0b2ca6e0042cd82b0af10cb13dfa735f71c1a6014916de9c37d096a2b50d789692d99f4b918519b10ba38565b9

  • /storage/emulated/0/backups/system/.confd
    Filesize

    28KB

    MD5

    fcddbfa3db71e0427d5d15869e01d1c1

    SHA1

    8eb67ad23fae4b755efa1ec8c678ee2864a8e3d7

    SHA256

    e9b2568e809411f2e97fca32590911acaa470593f38f4443ec2b8c142ff352c1

    SHA512

    7e3ca0981b007687c7c9ece769cbad2cec15125d0b52cfceeedfe89353cf40ca40affcaa498c297e4963c4e472b5cc2f84fb7c1b3baa3ed1472127518b753fac

  • /storage/emulated/0/backups/system/.confd
    Filesize

    36KB

    MD5

    dd8414a2a611f31f0151414e3dccd224

    SHA1

    c22544118c92470bdf87ab2696dd2a0536e26571

    SHA256

    9e70285b60a77b09b90626d5dd3ab63921531686b21d0da42d719e439f6c4fed

    SHA512

    3dda49229ee6778c40af33082ffd547417d513b508d32802e11105c3a4b96f9e2c685dc08385662f90f00dcbd9d43dffdd14389c218409bca761ae026d4fbe57

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    512B

    MD5

    dbbe3032b5321f0ddf6a4d0e03a7b0c0

    SHA1

    1e5d02f4c6ab00bd167cff85b152801b1a1db9fe

    SHA256

    d9fb7c30168eccddbc606e1d977e89e17a02bffc8e8db3edea067b807f34cba0

    SHA512

    6d81b0372564682b6918f0068a37b09cf96660f7f32628f9afcee5066e4217052fce7839aebb05f665d26c2cb5447dbf3ee6a8f82d0ace455978b998d587f2c8

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    36KB

    MD5

    7249ffa5c74bd8d973e5e488979126a3

    SHA1

    503b399728f18c22ecfafdd7682fb0a93d5f9211

    SHA256

    163d6d6f7d7b9bec49986fad191834b27243baeb7a9d0c8415f9df3397e87d21

    SHA512

    f04b4482f13a66e49bae30982ce540c384fffed9823d4460c5aabc3e8e147adf8f0bb9328ded4c6e79f653216e2a031d52cba444440363f7c98e89113a10aff6

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    12KB

    MD5

    cb0f6fd54c673e621539d63a744841a0

    SHA1

    1d111681d419ba4e72a1e7258904b49d7d4ae791

    SHA256

    0a1425bb91d5cd4e2902f77fb0a670c50c5ee8ec18f3d378e691a1d6853a2e77

    SHA512

    bf4168a137fe79b3e853c515d0a98f3c8203ec7d46cae94e15002c7ff37cfb270393163fd09b347967b0b2ebaae13f9a02daa23e3f36afbbc7e17c6f0fa3f3e0

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    8KB

    MD5

    52fe5ee3b5bfb463f2945c149d7d0c19

    SHA1

    f8d078bfe5a4dab3b066fef088ecd92ab28e396e

    SHA256

    35e3c75ff708ec0645bd84332ecb7fda739933cfaa73699e6cc89982ad2884da

    SHA512

    0b265c909d7493f67d101b43c97f75554eea9415511a3cf2b0139931173abffe063e074fbe8438cb833f2c10e05594fe46a9ea58f0f465dcbe3ad3b3ad213539

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    20KB

    MD5

    9726de9d228bdbba8d6a5c6b9ce28085

    SHA1

    73fddb37cab597dd427f67064ebd20a2f9d9a981

    SHA256

    a5a332dbe83ee2c83f57159839d425b4712ed6080abbadfaf57064e679832f5b

    SHA512

    04361fe8d4d1c49427dc60de9844d77677876c6adf063f0f4e1bd6c80df176008a8c93ce51f7f729c3ac6df0c14b3674862f51cea64cdd8d27165eff1ad96613

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    20KB

    MD5

    714a7bd2eb84760f68096474a31a4848

    SHA1

    fab2d86964a4981de948cea57f09844c0a43ddb2

    SHA256

    c3ed4446be4851a6334d0326e36b55ac4d3cf83bdd822ac958f0b8f940f65734

    SHA512

    ba2c6bd999c7ef93ddc628989e92a24a9808a4285b68da96429a883faf51f10b47c72cc88f70b18c556a9b52e12356ef05dcd7be0d1b0d9cf38762fcb78bd080

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    8KB

    MD5

    09c35f6dfd556d0397fa1bf16b231a66

    SHA1

    0485140c07eb59be4669178d420b8fad121ffabd

    SHA256

    1ecb8de93ffb153c732f49c02cd61a24bdf7e7989b63d5c133dbf8a2d7b6f928

    SHA512

    691b9537174a1f7b6c1c0b87093895828b182fbc9f14bfc1a3105a38647838b0d9e8be6c6d949c05ce65e38ef3a3631bc30427b68e3291ae60cd06cb0b659305

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    20KB

    MD5

    3c6e31562fbdb98b0ab88259696bcef4

    SHA1

    d9ab890f5d38e0d23a68ec9b4c3d71eb43bd48d2

    SHA256

    f547754f4eceec74efe6b9174e80607bf757a7a7b3a96dd9910e3c6e22804469

    SHA512

    6e888c32f7b11bc2a4224c17e9fb6f4c1392d5f09a439da8381e24293b255bd123fe107e5c29857493ca1c3bee3f2ddb7a411bde705e56421091d9490751e3e7

  • /storage/emulated/0/backups/system/.confd-wal
    Filesize

    8KB

    MD5

    217da2606ed39dca93e79d7d2d27469e

    SHA1

    f785f67ffd352f644e4e634cffdb626226db111d

    SHA256

    fae4139584b4dd37ba571425c876a364824b0f58ba6a85a52d38e744f6a16e59

    SHA512

    6476bc4458d61067b02d18a8f7eb28a995aaa6ca36289fc5925abce158df687f8abe3db21c8f01a31af418afc0a719da2e48c1db97dce6b7059c7733da6d18cf

  • /storage/emulated/0/backups/system/.timestamp
    Filesize

    25B

    MD5

    2bc3f47a03e850fb7f487b0e7476e28c

    SHA1

    e02f41792b0ea47fe9d7773159ebda08cf42594b

    SHA256

    507e4e7cba9b2d8b2f62fade21a31389dc14b3d64f24c00a8b30be9a1a25fc8a

    SHA512

    066c1ee1b7c07c2f2eda35dc3ee57c346ab9c700e64406d74194ec5b1c5335f79a03c36ca797ad95f2ed809ed17f73728c3e546c83b1c36e5ddaaf4674a28856

  • /storage/emulated/0/backups/system/.timestamp
    Filesize

    55B

    MD5

    433fca84d848a1fd9d31e35febbec958

    SHA1

    e06dc8e6805789ca0f618c625902d3f5f86ec60e

    SHA256

    904fdc15c334737d2a65442c82c55a7598ec525f8bbfb718db129226c1ef3cad

    SHA512

    e26a1a732dc64a29a70385d6a6485cb14cd7a1723f762984a494ead97cd4fed2983d8830d4dd006e8a8e879382ecbf28541b3bb2b63bce70e8b28a889a9b703a

  • /storage/emulated/0/backups/system/.timestamp
    Filesize

    84B

    MD5

    76e2431ec81cf1a6a3b70e79045991e3

    SHA1

    5c729ef91114a8177d842ee0804100483f4b61e3

    SHA256

    1040a51ed194bd0159e26f2707e9900dd3b30c5169f3f75cbe4d11a2e5a99b23

    SHA512

    79b1a510787725729f2fbfdb414627a75ea62f674ff0e108a878be911897dfd3a022c40c91681524ba02c34bf0bb54a17dc3f127bf9d871061d921c7848f7933

  • /storage/emulated/0/backups/system/.timestamp
    Filesize

    114B

    MD5

    121ae41dab8305ec00ebd0dbc2bfdc0b

    SHA1

    759da7f3e3fbba1bf3fc77170f4adf26b1b1ddee

    SHA256

    300be1550d281f939fc3961f8349a7e4c70e0ddb49912ee7d0f039440bb90e15

    SHA512

    f5b9a758002111124b61e81aceab0e19c3ff3659e701a7700a15c405dc86f5289f15bf235e2a706c26ad9528ea196eb4982d1e128e35ce83cd2492c4250416b7

  • /storage/emulated/0/backups/system/.timestamp
    Filesize

    138B

    MD5

    0043d5c69ea251995e33a129e4cd3a5d

    SHA1

    59b2c628fde4c4714dda4e23e85d54ed57d1d68a

    SHA256

    831f39a187b55ad62bdcc67a58d73c835bd0471eb459c8189272d491251861b4

    SHA512

    36967e652f600da1ff2d2678feca94944e5d6615a03139fcd8f6cda1f6f44483ef31f7d4406c87735bf4d8013c0bb565242ae309431f978f04887302a2f5e984

  • /storage/emulated/0/baidu/pushservice/files/msg20240524.log
    Filesize

    56B

    MD5

    a5b5459fba2811819f1548c7855c24bb

    SHA1

    6feb35a12851badfe04279adfeb311c5b27516bd

    SHA256

    8883c53be6ffaab84213c9392adfe80c56a1b00351bbe91fde36761ca4829362

    SHA512

    9fc65f471748638ea2b5410f9334c401cdd84ef2af2362c6f0bcb8579187f0929cdcc8efce965984e320c8b6bce421da930d7635bedbf90f3edf0905509eaab0

  • /storage/emulated/0/baidu/pushservice/files/msg20240524.log
    Filesize

    87B

    MD5

    1090ba5237ee036f31dc372a3f2c25fc

    SHA1

    592765a0f028788f16fc6f29b3705cf920f568f7

    SHA256

    75687425635310d6ba4ab58ef32626dee5d655ca9f6a40ae23f7a00d685961d8

    SHA512

    6ef4876cc359107e0e225a8ddecb69f945967b2c3102b0b6ead881b0d7196997d2a70316660ae4d3332307b55e3b6af8247ae7d061bc73a7e8d87268f269c086

  • /storage/emulated/0/baidu/pushservice/files/msg20240524.log
    Filesize

    96B

    MD5

    5b3a8bb567c4ddd8a7324d76d7ad4eef

    SHA1

    93b2d7227fac62a9c195b7e44bd7ce07d0b327cf

    SHA256

    8b89fa8ee911a01468e6fd357e95040832ceef906471cdeb65313b564fae359b

    SHA512

    5c3fc6d6206afaf8dbba1c38862fd7b1453fe3a38331b3747a2cca9d139432fdc42690f6272c45edbac17c8df892c37047852b278ab29958f96a167972a92a64

  • /storage/emulated/0/baidu/pushservice/files/msg20240524.log
    Filesize

    95B

    MD5

    ee3c7a3dab64c14c584b67a2b72bbc64

    SHA1

    9a6222660f2b627ca9421be5a12891c2fc8e5564

    SHA256

    d34a172e0e655c1cecab2f6ab0d4a5898a73b196a7fc53ee29831d7888da77d8

    SHA512

    8f73f89834839d98549e9fdf31673218ac613fb40875b223a1a6635fa91ebb72a75e905fd680562aff86d58c0388867341bf6b2ec57a4feddfa24b55918b70f2

  • /storage/emulated/0/baidu/pushservice/files/msg20240524.log
    Filesize

    270B

    MD5

    fea5fa17908ae139634797fd9625c8f5

    SHA1

    7f6fb8b1eef6121c4eb72a70376f536dbfdf61ce

    SHA256

    3187bda7ad9297d21eb61095cf096ececa32641b8b4f1182f7b94c5eb480aa43

    SHA512

    527fe54cf35e495409cf2c53bd2162e9a8edde4c217edf3a66949bcd4569dc5260809c9f07a195895c9a25f4acd8c7134cb1851347d1b8cbfa3a607894dbe311

  • /storage/emulated/0/baidu/tempdata/lcvif.dat
    Filesize

    96B

    MD5

    530d3e4c52c59b53fcef0b95c2b5a96b

    SHA1

    198e867b2dbad44286ba7200bad151a719e52ec1

    SHA256

    2a70d8192db5f9f3ab99bfdc9bccfb267092cf5aecf6172bf16008aef640b7e9

    SHA512

    fe7b706eb182dd5a860cfe2c3f676936d3e38227d79e2f8069a02c3841ea1d09b6c6008bf1c76c5f079e34068569332b04c9a4ecd32a5610ef1dd6060c77bf1a

  • /storage/emulated/0/baidu/tempdata/yom.dat
    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

  • /storage/emulated/0/easou_book/cache/alipay_msp.apk
    Filesize

    748KB

    MD5

    d06ea38e4210a87d6b96f8b0491df677

    SHA1

    3ba573396398757088e559a9d372049a377eb05a

    SHA256

    76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1

    SHA512

    3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30

  • /storage/emulated/0/easou_book/download/easou_baidupush_log.txt
    Filesize

    129B

    MD5

    86dc5ac1b32a92b9a827253cd8f1002a

    SHA1

    b57def17dc6823e47b13f5763155ac08af5b7bbb

    SHA256

    b2bfa4f631035e1708788e67282784000509de54467b994f9d99e97cf8549066

    SHA512

    cf121cf216d3bcc382339b2306b9f350ed71fd576812d45bc3a24df8b18c914b2cdeb5406fee825c01d9c89d2e3c35fb73cbf56783fa87d9b8ec66e2065052e2