Analysis
-
max time kernel
174s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
24-05-2024 11:40
Static task
static1
Behavioral task
behavioral1
Sample
shadowsocks--universal-4.8.7.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
shadowsocks--universal-4.8.7.apk
Resource
android-x64-20240514-en
General
-
Target
shadowsocks--universal-4.8.7.apk
-
Size
5.4MB
-
MD5
a52724759f70ad5c62ce284c136139d5
-
SHA1
249747b674d5b33d94629e35d9b012a63e3a8d8c
-
SHA256
ca527d0a6c31782bdfc73aa32e46d9f241087bee5bd9b9164248ecd6cc56255f
-
SHA512
8cde58a6edacf0ce0cfc4bc2242c6b95a2a13980fb7efb2a7ef23ea702508169990a63a6ee3736afe83d2ffd2c6d7cbc38ef82ecfb8f63a0f6d7e0ee43ddae11
-
SSDEEP
98304:ZQSKS9+bQrPKcmSBd3eXu2cuiv89C2G04+eYROp2maik9pr5b:ZZbKcm+83cuiIC2GFbUOp2malR
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 4 IoCs
Processes:
com.github.shadowsockscom.github.shadowsocks:bgioc process /system/xbin/su com.github.shadowsocks /system/app/Superuser.apk com.github.shadowsocks:bg /system/xbin/su com.github.shadowsocks:bg /system/app/Superuser.apk com.github.shadowsocks -
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
Processes:
com.github.shadowsocksdescription ioc process Accessed system property key: ro.product.model com.github.shadowsocks -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 2 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.github.shadowsocksdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.github.shadowsocks -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.github.shadowsockscom.github.shadowsocks:bgdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.github.shadowsocks Framework service call android.app.IActivityManager.registerReceiver com.github.shadowsocks:bg -
Acquires the wake lock 2 IoCs
Processes:
com.github.shadowsockscom.github.shadowsocks:bgdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.github.shadowsocks Framework service call android.os.IPowerManager.acquireWakeLock com.github.shadowsocks:bg -
Checks if the internet connection is available 1 TTPs 2 IoCs
Processes:
com.github.shadowsockscom.github.shadowsocks:bgdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.github.shadowsocks Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.github.shadowsocks:bg -
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.github.shadowsocksdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.github.shadowsocks
Processes
-
com.github.shadowsocks1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
com.github.shadowsocks:bg1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.github.shadowsocks/cache/1582435991586.jarFilesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
-
/data/data/com.github.shadowsocks/databases/profile.dbFilesize
4KB
MD5fcda7c2b49f91c1ef80010290303c782
SHA15021b54b3718c2ba69aa6eeb39629a4c240ed108
SHA2566879f973e7f6625cb7c3fa222f66e7ced18c2a7cbcf13759d7108f12f9e7820e
SHA5127a41ca0b22bf7d5653f070ff791f1e07b4992fab34bc3bd54fdad4e606f4acf931c2b146c3caf3ca28260d4389c997f417d82cfa28567f92ea0ad0ba6921b184
-
/data/data/com.github.shadowsocks/databases/profile.db-journalFilesize
512B
MD52a5943f6116d0b810c586fffc3b1b964
SHA13db332229c2298d53e0e1ffa4a042a34d8d468c7
SHA256df9d517868707ccafbe0c00eb556b9b2eca8534506f56dcaf8a7d9d0b21e8a8c
SHA512373c086f296004ae9f1788498e97225f0a9c3eea31442b3643614c957c35dfb4e1b29f70ed7d2fe2d9702fd53b9d227d55af332ea99642b250bdddd4cc9f4034
-
/data/data/com.github.shadowsocks/databases/profile.db-shmFilesize
32KB
MD53ea49b6daea73c5b4784aa732987f2ff
SHA1c5c3d654d5b27407f1faa9bfa1365af4af69355f
SHA2565d8d2cc081ee1b2829957770780150d79bc0a99110ad360d3aaed3efe612bfd1
SHA512859e3abe51e018e2bba79ff619efe71b5eb2b1128df1cb282d60fc68bb75b60d00e94ba6370da89cd9c61eab885711383425d4d7c7e193024ebc9d97910736ef
-
/data/data/com.github.shadowsocks/databases/profile.db-walFilesize
16KB
MD56c3de212f7246c2532e8e4eb2bc40290
SHA164650e4cc260a99cdf846bea80ea5c118f3ad4a9
SHA25618e351296911dcac65e8d2576d2d5d33f664f55e03af9b070a1e0272c63116ab
SHA51206138bdbae8a90923f77365f4777b046201decfb784a253370c1a86570782ddf387d8fc36e47da50980621cb5c8f0ac00b3e19b39616e6674d9fb63c262788cd
-
/data/data/com.github.shadowsocks/databases/profile.db-walFilesize
44KB
MD53b1132fbe56294eadec87dd058f96ff5
SHA18df11859518724df2e29c105f8ca97d60f67908b
SHA25674225a4b09b725d54fa7885868ec7f25f81c8b88254500430a50ca452d33fe5b
SHA51280101d9811408abfbfe58a613e6e6ad0e06743cad716cd696ec061421da16c8874bca780b7600da16f133b5d8489a635da532f550e09598a181c929ba719a147
-
/data/data/com.github.shadowsocks/databases/profile.db-walFilesize
52KB
MD5eafa0c30feecf98d2b31370ce176c598
SHA17fceda582f7ad23871b4c3356a6eb3f68cb05f2f
SHA25645c4c62504ad301328a4ff3b1253d1ee90da67233361bcfb377e7460f678aa51
SHA512c004c932bf9bb70b29c7816066eab52dc200bc06ef18705c5920fa47e74997a70fe902ea2e6596add205a8573b4e6fb3325b94838166de506555f4652d220bf1
-
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-journalFilesize
512B
MD521a90751fb325921e05b24386bac8044
SHA160eb056bee1c5f10892cefb33b2f1aee15ada7dc
SHA25620fad85a4bfab06c89550f14e05a82173eb5ff0500be7bc54f6db0381ded219c
SHA5120e7383605370a086b100478b683d4e8aabe23db4e3f4c132e2c6ed21530f89b4eac34eca00571f14ea232f66c36e3480d6ed1bbed85cf98522014ee4569c3c8c
-
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-shmFilesize
32KB
MD5c2592d699966b6e25c7781e6ef515ce5
SHA114a52932e963ef66a1aa1300814a19c1519cfd01
SHA256c4718e1aee9045bd162c65f1acfed79a340a4746c7aaa61083bb4071648dd2c6
SHA51275dbcdbc2764ddfe45f34c407e9d0b929a9c215b91c8a600a0c91b941c4648e02ff362813aed73f6976e017874d2663fec7416a063b43d091c33ead5624b199d
-
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-walFilesize
88KB
MD55c86e5a17a5e460ea3075e5787968023
SHA1bf96163122d12854052e7d004b614bacf66163f8
SHA2566af295343eb2f1225ee082a35b4d87cc054a089577f18d56f403a7d3142d1c5e
SHA5126a0172c74991ee1417850ba55d4c5b609d3c5e798e67d81efbd3712ab8772a4dcffdbd0908eff06a2d8e6a5563f9a036a8a6608fd5d150b810fc071a79e9af58
-
/data/user_de/0/com.github.shadowsocks/databases/androidx.work.workdb-walFilesize
16KB
MD59fdd5f7d7d3efef3ebf60646cf015926
SHA1c73728ed866fc0e384330944fffde4829d6f6bb5
SHA2569113244e409ed61397c1d6e1a369705a091fbb7e52af2e3a9e3945fff39b2c86
SHA512727e52221d8c533fdbc87ca1e5f48939d58e0babee0253fa50c46e5309b6170259f71a3beb801604fa8035321bee53e018249ffe9e9ce81e7d4180ad07457e2f
-
/data/user_de/0/com.github.shadowsocks/databases/config.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user_de/0/com.github.shadowsocks/databases/config.db-journalFilesize
512B
MD582e3ffd3dcc964ba96014c143c21ed2a
SHA1d676498aaa0897c60b2bad689ee53851e6e46bcf
SHA256df2488f7aa2d3c328bb8085718806e8b64e6e503dd17a64fc6c3f25d8458ee96
SHA51260b0ab6659ea9777205f525c5e2a270fa3de5cffbdaae028c6e71bda65863498553b5c8728c0165872302e6c4d0d0a03b2c0f1e27d588bc1cd52d6723de1ef4d
-
/data/user_de/0/com.github.shadowsocks/databases/config.db-shmFilesize
32KB
MD5637bed2ffd3ce0eebb89fd7b3be4f0e4
SHA1fe68ed1b71b32c400b273aa7dd4f275e338adfde
SHA256631a5935167d317ae5d8ccd04b7f78e4626330ee4abe2336bf3e0f0c65258ed2
SHA512cd1c305527bca34f116a8f4eaf79d923662b1e453d8109aaa0ccf4a29a54aae9827bb012ffd3348b5971b93be963ee8409584d3f0a028f760d222b13a63500c1
-
/data/user_de/0/com.github.shadowsocks/databases/config.db-walFilesize
36KB
MD5e3c5368c64c0c0d36bd6423a00a8d8ce
SHA1756d9fcbaa70ccb3ac9c11df4c1ed8d296a433d9
SHA25696fe8a1c3abedaebc7502bf3a299b0cdac7da5324776640ac396433c582f9451
SHA5123d547a6d76eeb542be3e2949a1491a97ae704e688d0e573d13407fdca28e82b34e279ccc199f5c96601c71cfb862cbdff8a7d0331b479f3ea0a4b742b90b1eb4
-
/data/user_de/0/com.github.shadowsocks/databases/config.db-walFilesize
52KB
MD50f326de8814af74089ae390ea51cfed6
SHA13bcd692a8c3a9f3d4d2e35908dd62bd1c3b8c9af
SHA256422b7f7253bc6f3c4724e287aad43bf75696347f68d8e5f6e7635621e0cd38da
SHA512d1751fc4117d46125f22e49b73372ae19ec4294e2a6e3d07b7217cdec5bb99c943fbddbcb2fd764522b2988d44b98ca89f139b2901a5cd846f8b20639810b5fd
-
/data/user_de/0/com.github.shadowsocks/databases/config.db-walFilesize
16KB
MD5846e77915a1c08a6315365088aafff96
SHA1cd63f9b402eb27976333aff2feaa089a6a6f1c3f
SHA256fd8c219344bf2aceb6fa4dcf2e7f31fc8d4edcf896b16d0e0458bcacf4746ca8
SHA51234f0a95b49c097d9a948d1447c69907206943a6396472cc1b404588eb5e0d7f272745cbeda4ec6cede470d94456b97810379ea6084f0d972067998411facef8b
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD58496c712a2a9b2b70f0b8f37baa94d4f
SHA1842727dfd9efa6c324aebf1357a467d576587b84
SHA256fb0e260bd86c066357f996100632aca48327615f423e23b6035f8367fdc0ee69
SHA512247142634bbd116738c764b29a8993e99ab9c102b0c62386b25737f3ca4ed580619121244561443463687b8489de91a52d07bab55a5020c84b57269e5190f945
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD5df1a0755e18d1241cf9fe69de0342d7c
SHA1031724728de0abed4b74fbf68b1a65216e099868
SHA25688a2e69ec55fd521be8aca67b236316e06e68927cea7ca5bfc6008d6b24b801a
SHA512dbec051f30b21e52d6db320ed91e30001a63d87e538425eac766c217547d9c2b2f1d34d3c53f6f26d7ba2cdde9b4162fc0ffb811473497ff6e9f686f472f767c
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD50a1c0167c59b2f23af4aedc79042ab67
SHA1889b45bdcc5f3b73d792fbb2c21f016067457d79
SHA256a3b61e9ef037c6fe3ea41ccca1287108046824d220ffd34f2560ebdf63efd47d
SHA5128fb68f4575a5df120cf699de629aee1d0144b4c7036b2b0bba238b409d04f88728fffb0e91e2ead27bea3642ccfe8bc99339f93c087484c1c5996a89880c59a9
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD53ba6985c4ca036587f166383a130cc54
SHA191e64ed4a2d0df4a4492feef9b7bf56161f5477b
SHA256f50296b098b30da021bf8acd78ae559b0f901952af3c71fb41b771a73e3ee74a
SHA512101e0ca10d862782fec2d83a24731d233c52741cfff6ac12895cab8859bc18db071d73efa0b0653bd335954676e5c2f2bef8a8bbe5a8e41a7ecfdff14372dde2
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.dbFilesize
16KB
MD5e8bb3c3ae8625dff076bea83fb8c2bb5
SHA108494aab5895fafe217f89e9f9d792b202501839
SHA2568867cb523c463efb04cc21440734a4aae5f9c6b7af613476a9f619c243cb3596
SHA512452f17eb97001065a3476bef75a0cb874a8a25361c035e6139df0f12b222597d9d73b0202ad0c2d3570472cd736870d7da2db2f64ac14cdfb4a8588d1b0718bd
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-journalFilesize
512B
MD5ac5fa863c226eb061b32fbd9c3440c8a
SHA1f555b94bdf6aa70cb93c3288f2e8cacac8f41542
SHA256f74c873c35cf9e3dfde60d186cd320b67a0a1e1b60ddb825f778283d94102b9d
SHA51259f08a5c3cfa4d30ce44c0e788c090e68c694b684865fff456ee93be05610740acf96dd450f600c3e1de8bdc78f9e1d4ff680aec990b47370696d688a98bfe49
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
4KB
MD561cdd5a5cb97f7c5792b0a858479b1bb
SHA177cbd32f985c6caaacf87c5cd9a4e3e39949fed8
SHA2561346394ef9605b964ac6103f5d06d4c9d38560702e43e541b5f3bab42e8c1177
SHA512a67155c23176b7944ba97cfad0d14243bcd2e169b0fc0789292e6aee92417dbaec0a6fa8676a64c8b47aafde9361cd29cfccfcb2bac81cc5137073fa22d4d227
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
36KB
MD53faa9f7c9f3a6169422ec865e6964271
SHA1c968507669c834bad5f67c1f1f5ba268318251e3
SHA256134dfcfeba8120497a14745093cc15f191bcfb00277f4185f36c856505ffed55
SHA5125e49f15896f070152f6ee78f7a04ebe17b746fb9a973e0c42cc536b7a105213e52d0124464d732ea2e7e27bb40c35193447e4fbff787099695c0c78e9c5d5155
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
4KB
MD5de5232781a7e7556187a722c533da211
SHA116cf1b019dfc7ca18bc111998009b5ea3da84a3c
SHA2563065ead84af39e551db4ba96d97558b66048914da4f84af8f7bb5776e7a78d65
SHA512adc0068683f417479dbe1de640bc1385620fcfc1a1cfa94525587d75247fa47bad04477e960231d8c911d8e1a76acad56e0437f7b6d70978bbe33335675f6305
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
8KB
MD51c21cd8f8907408747736af4eee0b5fc
SHA1727924f9ad124138f28a0c491687fbe855f496af
SHA2567ef1ce1238b0cf8e0f128f719adf56c42af51b3a8d46f1ac8696e2925a8c24e2
SHA512ddbbfb0b7a93d1605a0c8de847b50843a35ce89ab8a2016e04a07ccf50c1e46ef779f9a54eaa8c17a82b2a6eb0ac6367e337b705ea33f4df4993037b0b68c09d
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
4KB
MD5c12701d0714d23fda0a327601e761053
SHA1fa45c5ab2f9eb39ad94dd6aaedbb8f519eb4cc5d
SHA256e522a3da4d3b511df2ee6b5f4e77ee74ba39b795f031069f5a51048aaec7aed1
SHA5124930f5c36b2a2edf56c14c36e4909130c9158908c5ce266642fadfbc554239075612d1b16c95929a5f68d2095e3e8a96d248edcabb1df766fd579b6474d022ea
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
4KB
MD57b2c5eac3828ca87a471d04c301bc595
SHA147775a03e2db796d6f15a79ebd7fa07d274640ae
SHA25662554be92faa594c5632c195e081dc88b19b6d35c1e98bf8f19403400cad1c02
SHA51277c2c22369d6812642914aaac9a009de0d835895b2c709d5dcb8941f0d99211d2b488bcc19d5ccf0ceaa0c57f53a0e2618a663a6862115db2cf2fdeb77a4fd6d
-
/data/user_de/0/com.github.shadowsocks/databases/google_app_measurement_local.db-walFilesize
4KB
MD568463b306920197321eeb96d6f425931
SHA1bbd84891309c6eb16379c73250785f6d5d027be1
SHA2569a4843d3537aaffdca4578ac56b5751dabfe434b16175376f43e4b9476cae422
SHA512ac765020037d029cd963ea997798dc4582dff0e52a6f7a7b1a2bad5a09ef876014a7e0a022c3014058fa6a11520d0a36fdd77731c3504f53a6ba42b4fbfccbc3
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46EBeginSession.cls_tempFilesize
77B
MD5522c2ff37e22d1d8aa4c134f1c4fb114
SHA1bba054cab56e26230db50f10f67c5a8c79da2d4a
SHA25624ec3da055d51e94c517f7108f28de6776e51f6e080c87a173490a59146aaba5
SHA512d5c847fb1224edbea23f97f3e0f962612fadd70f9b9f6dccf8a9f81de4c55eab3510c215d5447775dac5cd65c0619a86fe7af4403c95e25630bc1b5a6c8bfd8c
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46EBeginSession.jsonFilesize
132B
MD51ae26461a2af3dfb906ac2551db73898
SHA16f20d95579520ba301b0b705881ef0758b6edb42
SHA256237a5ebf3e7695e65210f9e47e85f2dc8099102a30cad795273ae82159b5bf59
SHA512983de865f465ffa2b06d31f9da6c6c1504ac9f9fca9a27f060387b26d17e257ba9fd343fd075fbeb4d234993e0561dccdc471516c743d704139d2cd6db2fbd71
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionApp.cls_tempFilesize
122B
MD5f416827e92bbed28dd1ea55d2d655011
SHA191e40ba88b952f9df87af55860a7d1595434b8f4
SHA256a334a15765ed9c843da5aa70f263df5b56aae57489f7ecc61cfea3f87769b1be
SHA5128035f278d6e351061177a51fe036cee2841d622bf290cd6fd724be7e298552925aa70a71ff3c3c494f3e7326b622f3d80182f43b8b910a014ab4229ca6e6d4d5
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionApp.jsonFilesize
236B
MD594d45461741c994cf8da8dfa6b30d042
SHA1e26f0969bdec68187b4c5d48c3ae78fd24b04b29
SHA256f8e0cd2f01dddc5987477fe8169f5dd5f6471097f6251ecc3f6a959ff92494c8
SHA5123ff47a17565e5b538a442c7fa9715641002cd033bf5dd83a4045ead9c370ce2f50fbfbfd097bbd6fa465ef08627af642556724fb57e6d3dc54ba895a0f6d2da1
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionDevice.cls_tempFilesize
48B
MD5cf9cb0612d588a1f71b63084cea67316
SHA13d035bb92fd3f8997160cf8025c40239af74d3ca
SHA2560d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9
SHA51270f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionDevice.jsonFilesize
202B
MD575db92d50c80a89e068550028c62acec
SHA1d78ea55f5dc682e4da456d26383249f608fe894f
SHA2561dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2
SHA512dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionOS.cls_tempFilesize
14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66507CEE00BD-0001-10D7-BC37A0BEC46ESessionOS.jsonFilesize
54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tapFilesize
408B
MD5eeae62fd4264f071b55e6cf017e2e914
SHA1ce26e4fc06c848fbd8bbdc9fba1cb0b5d8e76948
SHA256cc32e699ca02203c3e1840ce98502dab21d183e783cfef0426a128d89d4df25d
SHA51221c4d23a816bebd8919a302785194787bd4a7ff5d651c1f6069b8ed72b811d4d62ad82971f9fb36ecc06b6690bd58d9b3a36ffdbb494ce660907141674f4d97d
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmpFilesize
16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user_de/0/com.github.shadowsocks/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_07cfb99e-94c8-4d57-8e3d-72c439ede46d_1716550905828.tapFilesize
326B
MD5e43336c4c663b2841c733fbf328f6a63
SHA11ab57141485f76b97d5595a52e4b3c8deac361d9
SHA256074c14998919b87f9a440c6fe3e04fc3fefaad2465405124684f0ca3be208c90
SHA51261d66d83753ab88cc09cd833ca3ae66cb8ca5965bc942e9c01c8019dd61d0fc3a576cc351f02685a6607b53ddb798086c3267c1b0826895df551d863537f765f
-
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-china.aclFilesize
198KB
MD50f998459988dd814771a6a80051c3a06
SHA18be300862f840f88ea78c739ceecb9649edc054f
SHA256ca23e4ac7900d90781749447a26555431aee3422454175efac45a92e0c47f64e
SHA512153b39ba7fc61dca92091b60084bf4f4be6792498c694826e309732c4e8547e89f81183b5379889198c8f3a7b1e09f48aeba879e462f4eda18a89dbf07c3d60a
-
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-lan-china.aclFilesize
198KB
MD536b6597a6fe49c2291d91182e4a616ac
SHA1f27cea071e6fa5ee800da1d1c2b671a764f813e4
SHA256f0ada5e2c85a680957d57f36f49a16dfc1c63371fc3b14bb5569ff994db3a379
SHA5126df27ec6b482bb433fef74e1e3875cfb1c88e54cdd47131ba8f37bc6304da44c50c4c65d7528754c48e61289e9f8e7652d0f40a29d9563f2f6ba6ecf2c788c1b
-
/data/user_de/0/com.github.shadowsocks/no_backup/bypass-lan.aclFilesize
4KB
MD5cd711183aa12c22c5e488f2a3bc7d52d
SHA18821455eee528a40ee29398a2b78a26952278386
SHA25619d75d4d702d1f18dc12332199d33ba1af23335aa209616023c3f840e50f9a9c
SHA51246d4f68ddce4e631cd8bfcb9ecab07b9414e98631b123d81c993e6085f1fface2a1992f2639bba312cd3fae53f05622305e3680fbde71e97b392b0a8a4006ee5
-
/data/user_de/0/com.github.shadowsocks/no_backup/china-list.aclFilesize
81KB
MD516e47ca3b94c3eab54f5c7dad952f418
SHA1fa57754fd569c1cf5599410ab2d8965846cd21a5
SHA25670ffbe6bce4993177f055862ed8a49f218710a6ebc844c7b90544a3a0a20b7f9
SHA512f05bc16210dc79fe23761e81033c6e0c7252288ca806a91b16b05798c3c9fe428254ab95e3d3d60e10e6490a9932b371aef0e78cfb7c908a8e11e8d556f1ded3
-
/data/user_de/0/com.github.shadowsocks/no_backup/com.google.InstanceId.propertiesFilesize
2KB
MD5ae122301816e318065653cfa30741b8f
SHA1909db98f8cdc8020cfc74b16f1ec34cb8973160d
SHA25683f53df4696e692b17315a2c83c85bf0315753512b535aed09fc48f269d6d6e6
SHA5129ee75b1c513e5db3efe80154300b32f931c441f9dded1d1d90135c6564c9e18541c626c49d08bebd5bdb5db0543df15bc0a4b1c918f5d8ee9708268a474f33f9
-
/data/user_de/0/com.github.shadowsocks/no_backup/gfwlist.aclFilesize
116KB
MD52fc44e9ce6440b417e9f57c13a456ac8
SHA1240f86ab493f3468c05c259114f2c43d2979b4bf
SHA256bd2b34d3cfb997633057d9926f4f03867eea6843ed15b42ab1fbe4cfb3d40e87
SHA512df8638ac85063fe42471f6d4d5591653cbb88c5fa6c1b2a2001ec6c92b214e146eb9483b74d95f886d9c7e7a3171577cb112e23484c77a9832d931c8de07284a