ca527d0a6c31782bdfc73aa32e46d9f241087bee5bd9b9164248ecd6cc56255f

Analysis

max time kernel
174s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 11:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

shadowsocks--universal-4.8.7.apk
Size

5.4MB
MD5

a52724759f70ad5c62ce284c136139d5
SHA1

249747b674d5b33d94629e35d9b012a63e3a8d8c
SHA256

ca527d0a6c31782bdfc73aa32e46d9f241087bee5bd9b9164248ecd6cc56255f
SHA512

8cde58a6edacf0ce0cfc4bc2242c6b95a2a13980fb7efb2a7ef23ea702508169990a63a6ee3736afe83d2ffd2c6d7cbc38ef82ecfb8f63a0f6d7e0ee43ddae11
SSDEEP

98304:ZQSKS9+bQrPKcmSBd3eXu2cuiv89C2G04+eYROp2maik9pr5b:ZZbKcm+83cuiIC2GFbUOp2malR

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

T1426

Processes:

com.github.shadowsockscom.github.shadowsocks:bg

ioc	process
/system/xbin/su	com.github.shadowsocks
/system/app/Superuser.apk	com.github.shadowsocks:bg
/system/xbin/su	com.github.shadowsocks:bg
/system/app/Superuser.apk	com.github.shadowsocks

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
evasion

T1633.001

Processes:

com.github.shadowsocks

description ioc process

Accessed system property key: ro.product.model com.github.shadowsocks
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.github.shadowsocks

description ioc process

File opened for read /proc/cpuinfo com.github.shadowsocks
Checks memory information 2 TTPs 2 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.github.shadowsocks:bgcom.github.shadowsocks

description ioc process

File opened for read /proc/meminfo com.github.shadowsocks:bg
File opened for read /proc/meminfo com.github.shadowsocks
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.github.shadowsocks

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.github.shadowsocks

description	ioc	process
Accessed system property	key: ro.product.model	com.github.shadowsocks

description	ioc	process
File opened for read	/proc/cpuinfo	com.github.shadowsocks

description	ioc	process
File opened for read	/proc/meminfo	com.github.shadowsocks:bg
File opened for read	/proc/meminfo	com.github.shadowsocks

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.github.shadowsocks

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

T1624.001

Processes:

com.github.shadowsockscom.github.shadowsocks:bg

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.github.shadowsocks
Framework service call	android.app.IActivityManager.registerReceiver	com.github.shadowsocks:bg

Acquires the wake lock 2 IoCs

Processes:

com.github.shadowsockscom.github.shadowsocks:bg

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.github.shadowsocks
Framework service call	android.os.IPowerManager.acquireWakeLock	com.github.shadowsocks:bg

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

T1421

Processes:

com.github.shadowsockscom.github.shadowsocks:bg

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.github.shadowsocks
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.github.shadowsocks:bg

Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.github.shadowsocks

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.github.shadowsocks

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.github.shadowsocks

com.github.shadowsocks
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4311

com.github.shadowsocks:bg
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4482

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.github.shadowsocks/cache/1582435991586.jar
Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db
Filesize
4KB

MD5
fcda7c2b49f91c1ef80010290303c782

SHA1
5021b54b3718c2ba69aa6eeb39629a4c240ed108

SHA256
6879f973e7f6625cb7c3fa222f66e7ced18c2a7cbcf13759d7108f12f9e7820e

SHA512
7a41ca0b22bf7d5653f070ff791f1e07b4992fab34bc3bd54fdad4e606f4acf931c2b146c3caf3ca28260d4389c997f417d82cfa28567f92ea0ad0ba6921b184

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db-journal
Filesize
512B

MD5
2a5943f6116d0b810c586fffc3b1b964

SHA1
3db332229c2298d53e0e1ffa4a042a34d8d468c7

SHA256
df9d517868707ccafbe0c00eb556b9b2eca8534506f56dcaf8a7d9d0b21e8a8c

SHA512
373c086f296004ae9f1788498e97225f0a9c3eea31442b3643614c957c35dfb4e1b29f70ed7d2fe2d9702fd53b9d227d55af332ea99642b250bdddd4cc9f4034

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db-shm
Filesize
32KB

MD5
3ea49b6daea73c5b4784aa732987f2ff

SHA1
c5c3d654d5b27407f1faa9bfa1365af4af69355f

SHA256
5d8d2cc081ee1b2829957770780150d79bc0a99110ad360d3aaed3efe612bfd1

SHA512
859e3abe51e018e2bba79ff619efe71b5eb2b1128df1cb282d60fc68bb75b60d00e94ba6370da89cd9c61eab885711383425d4d7c7e193024ebc9d97910736ef

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db-wal
Filesize
16KB

MD5
6c3de212f7246c2532e8e4eb2bc40290

SHA1
64650e4cc260a99cdf846bea80ea5c118f3ad4a9

SHA256
18e351296911dcac65e8d2576d2d5d33f664f55e03af9b070a1e0272c63116ab

SHA512
06138bdbae8a90923f77365f4777b046201decfb784a253370c1a86570782ddf387d8fc36e47da50980621cb5c8f0ac00b3e19b39616e6674d9fb63c262788cd

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db-wal
Filesize
44KB

MD5
3b1132fbe56294eadec87dd058f96ff5

SHA1
8df11859518724df2e29c105f8ca97d60f67908b

SHA256
74225a4b09b725d54fa7885868ec7f25f81c8b88254500430a50ca452d33fe5b

SHA512
80101d9811408abfbfe58a613e6e6ad0e06743cad716cd696ec061421da16c8874bca780b7600da16f133b5d8489a635da532f550e09598a181c929ba719a147

Download Submit
/data/data/com.github.shadowsocks/databases/profile.db-wal
Filesize
52KB

MD5
eafa0c30feecf98d2b31370ce176c598

SHA1
7fceda582f7ad23871b4c3356a6eb3f68cb05f2f

SHA256
45c4c62504ad301328a4ff3b1253d1ee90da67233361bcfb377e7460f678aa51

SHA512
c004c932bf9bb70b29c7816066eab52dc200bc06ef18705c5920fa47e74997a70fe902ea2e6596add205a8573b4e6fb3325b94838166de506555f4652d220bf1

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-journal
Filesize
512B

MD5
21a90751fb325921e05b24386bac8044

SHA1
60eb056bee1c5f10892cefb33b2f1aee15ada7dc

SHA256
20fad85a4bfab06c89550f14e05a82173eb5ff0500be7bc54f6db0381ded219c

SHA512
0e7383605370a086b100478b683d4e8aabe23db4e3f4c132e2c6ed21530f89b4eac34eca00571f14ea232f66c36e3480d6ed1bbed85cf98522014ee4569c3c8c

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-shm
Filesize
32KB

MD5
c2592d699966b6e25c7781e6ef515ce5

SHA1
14a52932e963ef66a1aa1300814a19c1519cfd01

SHA256
c4718e1aee9045bd162c65f1acfed79a340a4746c7aaa61083bb4071648dd2c6

SHA512
75dbcdbc2764ddfe45f34c407e9d0b929a9c215b91c8a600a0c91b941c4648e02ff362813aed73f6976e017874d2663fec7416a063b43d091c33ead5624b199d

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-wal
Filesize
88KB

MD5
5c86e5a17a5e460ea3075e5787968023

SHA1
bf96163122d12854052e7d004b614bacf66163f8

SHA256
6af295343eb2f1225ee082a35b4d87cc054a089577f18d56f403a7d3142d1c5e

SHA512
6a0172c74991ee1417850ba55d4c5b609d3c5e798e67d81efbd3712ab8772a4dcffdbd0908eff06a2d8e6a5563f9a036a8a6608fd5d150b810fc071a79e9af58

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-wal
Filesize
16KB

MD5
9fdd5f7d7d3efef3ebf60646cf015926

SHA1
c73728ed866fc0e384330944fffde4829d6f6bb5

SHA256
9113244e409ed61397c1d6e1a369705a091fbb7e52af2e3a9e3945fff39b2c86

SHA512
727e52221d8c533fdbc87ca1e5f48939d58e0babee0253fa50c46e5309b6170259f71a3beb801604fa8035321bee53e018249ffe9e9ce81e7d4180ad07457e2f

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db-journal
Filesize
512B

MD5
82e3ffd3dcc964ba96014c143c21ed2a

SHA1
d676498aaa0897c60b2bad689ee53851e6e46bcf

SHA256
df2488f7aa2d3c328bb8085718806e8b64e6e503dd17a64fc6c3f25d8458ee96

SHA512
60b0ab6659ea9777205f525c5e2a270fa3de5cffbdaae028c6e71bda65863498553b5c8728c0165872302e6c4d0d0a03b2c0f1e27d588bc1cd52d6723de1ef4d

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db-shm
Filesize
32KB

MD5
637bed2ffd3ce0eebb89fd7b3be4f0e4

SHA1
fe68ed1b71b32c400b273aa7dd4f275e338adfde

SHA256
631a5935167d317ae5d8ccd04b7f78e4626330ee4abe2336bf3e0f0c65258ed2

SHA512
cd1c305527bca34f116a8f4eaf79d923662b1e453d8109aaa0ccf4a29a54aae9827bb012ffd3348b5971b93be963ee8409584d3f0a028f760d222b13a63500c1

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db-wal
Filesize
36KB

MD5
e3c5368c64c0c0d36bd6423a00a8d8ce

SHA1
756d9fcbaa70ccb3ac9c11df4c1ed8d296a433d9

SHA256
96fe8a1c3abedaebc7502bf3a299b0cdac7da5324776640ac396433c582f9451

SHA512
3d547a6d76eeb542be3e2949a1491a97ae704e688d0e573d13407fdca28e82b34e279ccc199f5c96601c71cfb862cbdff8a7d0331b479f3ea0a4b742b90b1eb4

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db-wal
Filesize
52KB

MD5
0f326de8814af74089ae390ea51cfed6

SHA1
3bcd692a8c3a9f3d4d2e35908dd62bd1c3b8c9af

SHA256
422b7f7253bc6f3c4724e287aad43bf75696347f68d8e5f6e7635621e0cd38da

SHA512
d1751fc4117d46125f22e49b73372ae19ec4294e2a6e3d07b7217cdec5bb99c943fbddbcb2fd764522b2988d44b98ca89f139b2901a5cd846f8b20639810b5fd

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/config.db-wal
Filesize
16KB

MD5
846e77915a1c08a6315365088aafff96

SHA1
cd63f9b402eb27976333aff2feaa089a6a6f1c3f

SHA256
fd8c219344bf2aceb6fa4dcf2e7f31fc8d4edcf896b16d0e0458bcacf4746ca8

SHA512
34f0a95b49c097d9a948d1447c69907206943a6396472cc1b404588eb5e0d7f272745cbeda4ec6cede470d94456b97810379ea6084f0d972067998411facef8b

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
8496c712a2a9b2b70f0b8f37baa94d4f

SHA1
842727dfd9efa6c324aebf1357a467d576587b84

SHA256
fb0e260bd86c066357f996100632aca48327615f423e23b6035f8367fdc0ee69

SHA512
247142634bbd116738c764b29a8993e99ab9c102b0c62386b25737f3ca4ed580619121244561443463687b8489de91a52d07bab55a5020c84b57269e5190f945

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
df1a0755e18d1241cf9fe69de0342d7c

SHA1
031724728de0abed4b74fbf68b1a65216e099868

SHA256
88a2e69ec55fd521be8aca67b236316e06e68927cea7ca5bfc6008d6b24b801a

SHA512
dbec051f30b21e52d6db320ed91e30001a63d87e538425eac766c217547d9c2b2f1d34d3c53f6f26d7ba2cdde9b4162fc0ffb811473497ff6e9f686f472f767c

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
0a1c0167c59b2f23af4aedc79042ab67

SHA1
889b45bdcc5f3b73d792fbb2c21f016067457d79

SHA256
a3b61e9ef037c6fe3ea41ccca1287108046824d220ffd34f2560ebdf63efd47d

SHA512
8fb68f4575a5df120cf699de629aee1d0144b4c7036b2b0bba238b409d04f88728fffb0e91e2ead27bea3642ccfe8bc99339f93c087484c1c5996a89880c59a9

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
3ba6985c4ca036587f166383a130cc54

SHA1
91e64ed4a2d0df4a4492feef9b7bf56161f5477b

SHA256
f50296b098b30da021bf8acd78ae559b0f901952af3c71fb41b771a73e3ee74a

SHA512
101e0ca10d862782fec2d83a24731d233c52741cfff6ac12895cab8859bc18db071d73efa0b0653bd335954676e5c2f2bef8a8bbe5a8e41a7ecfdff14372dde2

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db
Filesize
16KB

MD5
e8bb3c3ae8625dff076bea83fb8c2bb5

SHA1
08494aab5895fafe217f89e9f9d792b202501839

SHA256
8867cb523c463efb04cc21440734a4aae5f9c6b7af613476a9f619c243cb3596

SHA512
452f17eb97001065a3476bef75a0cb874a8a25361c035e6139df0f12b222597d9d73b0202ad0c2d3570472cd736870d7da2db2f64ac14cdfb4a8588d1b0718bd

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
ac5fa863c226eb061b32fbd9c3440c8a

SHA1
f555b94bdf6aa70cb93c3288f2e8cacac8f41542

SHA256
f74c873c35cf9e3dfde60d186cd320b67a0a1e1b60ddb825f778283d94102b9d

SHA512
59f08a5c3cfa4d30ce44c0e788c090e68c694b684865fff456ee93be05610740acf96dd450f600c3e1de8bdc78f9e1d4ff680aec990b47370696d688a98bfe49

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
61cdd5a5cb97f7c5792b0a858479b1bb

SHA1
77cbd32f985c6caaacf87c5cd9a4e3e39949fed8

SHA256
1346394ef9605b964ac6103f5d06d4c9d38560702e43e541b5f3bab42e8c1177

SHA512
a67155c23176b7944ba97cfad0d14243bcd2e169b0fc0789292e6aee92417dbaec0a6fa8676a64c8b47aafde9361cd29cfccfcb2bac81cc5137073fa22d4d227

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
36KB

MD5
3faa9f7c9f3a6169422ec865e6964271

SHA1
c968507669c834bad5f67c1f1f5ba268318251e3

SHA256
134dfcfeba8120497a14745093cc15f191bcfb00277f4185f36c856505ffed55

SHA512
5e49f15896f070152f6ee78f7a04ebe17b746fb9a973e0c42cc536b7a105213e52d0124464d732ea2e7e27bb40c35193447e4fbff787099695c0c78e9c5d5155

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
de5232781a7e7556187a722c533da211

SHA1
16cf1b019dfc7ca18bc111998009b5ea3da84a3c

SHA256
3065ead84af39e551db4ba96d97558b66048914da4f84af8f7bb5776e7a78d65

SHA512
adc0068683f417479dbe1de640bc1385620fcfc1a1cfa94525587d75247fa47bad04477e960231d8c911d8e1a76acad56e0437f7b6d70978bbe33335675f6305

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
8KB

MD5
1c21cd8f8907408747736af4eee0b5fc

SHA1
727924f9ad124138f28a0c491687fbe855f496af

SHA256
7ef1ce1238b0cf8e0f128f719adf56c42af51b3a8d46f1ac8696e2925a8c24e2

SHA512
ddbbfb0b7a93d1605a0c8de847b50843a35ce89ab8a2016e04a07ccf50c1e46ef779f9a54eaa8c17a82b2a6eb0ac6367e337b705ea33f4df4993037b0b68c09d

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
c12701d0714d23fda0a327601e761053

SHA1
fa45c5ab2f9eb39ad94dd6aaedbb8f519eb4cc5d

SHA256
e522a3da4d3b511df2ee6b5f4e77ee74ba39b795f031069f5a51048aaec7aed1

SHA512
4930f5c36b2a2edf56c14c36e4909130c9158908c5ce266642fadfbc554239075612d1b16c95929a5f68d2095e3e8a96d248edcabb1df766fd579b6474d022ea

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
7b2c5eac3828ca87a471d04c301bc595

SHA1
47775a03e2db796d6f15a79ebd7fa07d274640ae

SHA256
62554be92faa594c5632c195e081dc88b19b6d35c1e98bf8f19403400cad1c02

SHA512
77c2c22369d6812642914aaac9a009de0d835895b2c709d5dcb8941f0d99211d2b488bcc19d5ccf0ceaa0c57f53a0e2618a663a6862115db2cf2fdeb77a4fd6d

Download Submit
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
68463b306920197321eeb96d6f425931

SHA1
bbd84891309c6eb16379c73250785f6d5d027be1

SHA256
9a4843d3537aaffdca4578ac56b5751dabfe434b16175376f43e4b9476cae422

SHA512
ac765020037d029cd963ea997798dc4582dff0e52a6f7a7b1a2bad5a09ef876014a7e0a022c3014058fa6a11520d0a36fdd77731c3504f53a6ba42b4fbfccbc3

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46EBeginSession.cls_temp
Filesize
77B

MD5
522c2ff37e22d1d8aa4c134f1c4fb114

SHA1
bba054cab56e26230db50f10f67c5a8c79da2d4a

SHA256
24ec3da055d51e94c517f7108f28de6776e51f6e080c87a173490a59146aaba5

SHA512
d5c847fb1224edbea23f97f3e0f962612fadd70f9b9f6dccf8a9f81de4c55eab3510c215d5447775dac5cd65c0619a86fe7af4403c95e25630bc1b5a6c8bfd8c

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46EBeginSession.json
Filesize
132B

MD5
1ae26461a2af3dfb906ac2551db73898

SHA1
6f20d95579520ba301b0b705881ef0758b6edb42

SHA256
237a5ebf3e7695e65210f9e47e85f2dc8099102a30cad795273ae82159b5bf59

SHA512
983de865f465ffa2b06d31f9da6c6c1504ac9f9fca9a27f060387b26d17e257ba9fd343fd075fbeb4d234993e0561dccdc471516c743d704139d2cd6db2fbd71

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionApp.cls_temp
Filesize
122B

MD5
f416827e92bbed28dd1ea55d2d655011

SHA1
91e40ba88b952f9df87af55860a7d1595434b8f4

SHA256
a334a15765ed9c843da5aa70f263df5b56aae57489f7ecc61cfea3f87769b1be

SHA512
8035f278d6e351061177a51fe036cee2841d622bf290cd6fd724be7e298552925aa70a71ff3c3c494f3e7326b622f3d80182f43b8b910a014ab4229ca6e6d4d5

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionApp.json
Filesize
236B

MD5
94d45461741c994cf8da8dfa6b30d042

SHA1
e26f0969bdec68187b4c5d48c3ae78fd24b04b29

SHA256
f8e0cd2f01dddc5987477fe8169f5dd5f6471097f6251ecc3f6a959ff92494c8

SHA512
3ff47a17565e5b538a442c7fa9715641002cd033bf5dd83a4045ead9c370ce2f50fbfbfd097bbd6fa465ef08627af642556724fb57e6d3dc54ba895a0f6d2da1

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionDevice.cls_temp
Filesize
48B

MD5
cf9cb0612d588a1f71b63084cea67316

SHA1
3d035bb92fd3f8997160cf8025c40239af74d3ca

SHA256
0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9

SHA512
70f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionDevice.json
Filesize
202B

MD5
75db92d50c80a89e068550028c62acec

SHA1
d78ea55f5dc682e4da456d26383249f608fe894f

SHA256
1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2

SHA512
dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionOS.cls_temp
Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionOS.json
Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
408B

MD5
eeae62fd4264f071b55e6cf017e2e914

SHA1
ce26e4fc06c848fbd8bbdc9fba1cb0b5d8e76948

SHA256
cc32e699ca02203c3e1840ce98502dab21d183e783cfef0426a128d89d4df25d

SHA512
21c4d23a816bebd8919a302785194787bd4a7ff5d651c1f6069b8ed72b811d4d62ad82971f9fb36ecc06b6690bd58d9b3a36ffdbb494ce660907141674f4d97d

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_07cfb99e-94c8-4d57-8e3d-72c439ede46d_1716550905828.tap
Filesize
326B

MD5
e43336c4c663b2841c733fbf328f6a63

SHA1
1ab57141485f76b97d5595a52e4b3c8deac361d9

SHA256
074c14998919b87f9a440c6fe3e04fc3fefaad2465405124684f0ca3be208c90

SHA512
61d66d83753ab88cc09cd833ca3ae66cb8ca5965bc942e9c01c8019dd61d0fc3a576cc351f02685a6607b53ddb798086c3267c1b0826895df551d863537f765f

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-china.acl
Filesize
198KB

MD5
0f998459988dd814771a6a80051c3a06

SHA1
8be300862f840f88ea78c739ceecb9649edc054f

SHA256
ca23e4ac7900d90781749447a26555431aee3422454175efac45a92e0c47f64e

SHA512
153b39ba7fc61dca92091b60084bf4f4be6792498c694826e309732c4e8547e89f81183b5379889198c8f3a7b1e09f48aeba879e462f4eda18a89dbf07c3d60a

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-lan-china.acl
Filesize
198KB

MD5
36b6597a6fe49c2291d91182e4a616ac

SHA1
f27cea071e6fa5ee800da1d1c2b671a764f813e4

SHA256
f0ada5e2c85a680957d57f36f49a16dfc1c63371fc3b14bb5569ff994db3a379

SHA512
6df27ec6b482bb433fef74e1e3875cfb1c88e54cdd47131ba8f37bc6304da44c50c4c65d7528754c48e61289e9f8e7652d0f40a29d9563f2f6ba6ecf2c788c1b

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-lan.acl
Filesize
4KB

MD5
cd711183aa12c22c5e488f2a3bc7d52d

SHA1
8821455eee528a40ee29398a2b78a26952278386

SHA256
19d75d4d702d1f18dc12332199d33ba1af23335aa209616023c3f840e50f9a9c

SHA512
46d4f68ddce4e631cd8bfcb9ecab07b9414e98631b123d81c993e6085f1fface2a1992f2639bba312cd3fae53f05622305e3680fbde71e97b392b0a8a4006ee5

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/china-list.acl
Filesize
81KB

MD5
16e47ca3b94c3eab54f5c7dad952f418

SHA1
fa57754fd569c1cf5599410ab2d8965846cd21a5

SHA256
70ffbe6bce4993177f055862ed8a49f218710a6ebc844c7b90544a3a0a20b7f9

SHA512
f05bc16210dc79fe23761e81033c6e0c7252288ca806a91b16b05798c3c9fe428254ab95e3d3d60e10e6490a9932b371aef0e78cfb7c908a8e11e8d556f1ded3

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/com.google.InstanceId.properties
Filesize
2KB

MD5
ae122301816e318065653cfa30741b8f

SHA1
909db98f8cdc8020cfc74b16f1ec34cb8973160d

SHA256
83f53df4696e692b17315a2c83c85bf0315753512b535aed09fc48f269d6d6e6

SHA512
9ee75b1c513e5db3efe80154300b32f931c441f9dded1d1d90135c6564c9e18541c626c49d08bebd5bdb5db0543df15bc0a4b1c918f5d8ee9708268a474f33f9

Download Submit
/data/user_de/0/com.github.shadowsocks/no_backup/gfwlist.acl
Filesize
116KB

MD5
2fc44e9ce6440b417e9f57c13a456ac8

SHA1
240f86ab493f3468c05c259114f2c43d2979b4bf

SHA256
bd2b34d3cfb997633057d9926f4f03867eea6843ed15b42ab1fbe4cfb3d40e87

SHA512
df8638ac85063fe42471f6d4d5591653cbb88c5fa6c1b2a2001ec6c92b214e146eb9483b74d95f886d9c7e7a3171577cb112e23484c77a9832d931c8de07284a

Download Submit