Analysis

  • max time kernel
    4171366s
  • max time network
    146s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    25-05-2022 00:28

General

  • Target

    4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0.apk

  • Size

    10.2MB

  • MD5

    fef1abe663b0955779099437457b7f11

  • SHA1

    14a3046f9d9cbc14459c70e3c4f9cdaed7824fa5

  • SHA256

    4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0

  • SHA512

    cbb4d8f85355fc0b0edab65f71e0e8258b507decdf5b370de48fd006364612c21de27f14ae4215f018df769d38d53dfee7e5765dfbf1ccc6ee99bba7790a8123

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Loads dropped Dex/Jar 7 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • cn.lieying.app.readbook
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5306
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.lieying.app.readbook/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5398
    • ls /sys/class/thermal
      2⤵
        PID:5498
      • getprop ro.miui.ui.version.name
        2⤵
          PID:5647
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar --output-vdex-fd=188 --oat-fd=189 --oat-location=/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:5696
        • getprop ro.build.version.opporom
          2⤵
            PID:5714
          • getprop ro.miui.ui.version.name
            2⤵
              PID:5933
            • getprop ro.build.version.opporom
              2⤵
                PID:5969
              • getprop ro.build.version.emui
                2⤵
                  PID:5991

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/cn.lieying.app.readbook/.jiagu/classes.dex
                Filesize

                5.6MB

                MD5

                268f27291868f262662f4c6ae0968201

                SHA1

                480e2f9bd842af014155aa87e8cbb2d203bb2340

                SHA256

                8b881d31d4ae823b4f30ff9bc4aaf852d473364c436ea07fb9640ca4b665ba16

                SHA512

                4dc9b27e3528cf6d31a813764efe3cc81fe8c6ee16c3e20b261e430ef57179e889b846dab087f4527ea915cb5ee68ec992bb862e027bd3b10f8ee9eba808233d

              • /data/data/cn.lieying.app.readbook/.jiagu/classes.dex!classes2.dex
                Filesize

                4.9MB

                MD5

                9fd0238ea765bbcc15ac0cf38d8a701e

                SHA1

                16a5aaf68ab36dfc0a2267bda4510d8ac77caad1

                SHA256

                15eaefe0b9aac270dbd116b14940b50342bf14045e1c111d927c91c3a1ffafd1

                SHA512

                0afb2e5999ffa6eeac77b2fc1d484a7f32f412f356be93654b937869378e78336d5d51b62d03338d1092274fbc89c7ada0b03484288aecf9d09b45ba96a5e8e1

              • /data/data/cn.lieying.app.readbook/.jiagu/libjiagu.so
                Filesize

                475KB

                MD5

                5aea02f4e4c77fbf2e7a27f7ca9cc06b

                SHA1

                522db1748608e9173547b29b7aa82ddc3542c534

                SHA256

                5a1c513b347e2a929769e2be67552c1d591704f08f7b5590282b66cc2c7d7bd2

                SHA512

                5c979a11f5e896829db906f533756efc1cf3c5a7e35ecc9e376a0aae818f2dada013441649feac2e188bd51affbbf35156e32fdc6552e185bddbc547f3850316

              • /data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odex
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.vdex
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                f1771b68f5f9b168b79ff59ae2daabe4

                SHA1

                0df6a835559f5c99670214a12700e7d8c28e5a42

                SHA256

                9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                SHA512

                dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

              • /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                f1771b68f5f9b168b79ff59ae2daabe4

                SHA1

                0df6a835559f5c99670214a12700e7d8c28e5a42

                SHA256

                9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                SHA512

                dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

              • /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                f1771b68f5f9b168b79ff59ae2daabe4

                SHA1

                0df6a835559f5c99670214a12700e7d8c28e5a42

                SHA256

                9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                SHA512

                dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

              • /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex
                Filesize

                284B

                MD5

                f1771b68f5f9b168b79ff59ae2daabe4

                SHA1

                0df6a835559f5c99670214a12700e7d8c28e5a42

                SHA256

                9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

                SHA512

                dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

              • /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex.x86.flock
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/data/cn.lieying.app.readbook/files/.jglogs/.jg.ac
                Filesize

                32B

                MD5

                df56b5cfa253bff45776ef14c73b22f0

                SHA1

                f207fe2d680b947ca21ced40b70413848c07122a

                SHA256

                473bf295046abe1e4bddb08298ba45c30be05e8790637cbcfdc820c1a7a2c1ce

                SHA512

                7da9d8c03ecc6de8e53be80fb81f40ed6ac673c7d7387608393b03f3409ad15c669b00b03c317ea272b5f801a0556de4809bf4c8e68f835feec4d7449ebfebb2

              • /data/data/cn.lieying.app.readbook/files/.jglogs/.jg.ic
                Filesize

                32B

                MD5

                cbdf2fec251197b973a02050e9af5338

                SHA1

                cdcafada9d66aedf3e07a00b58799570f635a90f

                SHA256

                6b47cfe505a5d695d34c6eb9f5e0b33a75447c4195609bff4908112a70cca1ae

                SHA512

                732f61a3e58c5af8759d26882a09041c75ce6916e6eb2def87a6b44b9af079a6afd036461f9b9c32594ccee216def048f1d30ccfc8ec431d49f8c9b28670add9

              • /data/data/cn.lieying.app.readbook/files/.jglogs/.jg.rd
                Filesize

                105B

                MD5

                d53720c73612b1086f8317836c08b12b

                SHA1

                90c7e5dff84b08fd37a467fc0be0f79f8149efe4

                SHA256

                6fbcf883870253637e3ed61cce507e34f56f8b61c05ee64ff6d4924eaeb3bcbe

                SHA512

                067f829cae97a8e3ece58d86a1631147db3cc915ff928b61e8b4150412dba44498f64fed7dd57ff7e7d0d4d34708cadc796c3f1b05f1601f5c1c24e44217376c

              • /data/data/cn.lieying.app.readbook/files/.jglogs/.jg.ri
                Filesize

                646B

                MD5

                0bac5445fb5dcd94c34d4c9a1bf27c9e

                SHA1

                4ba072a6f70c8d4eb48219f0ebc0d0f92f41bc90

                SHA256

                ffc0df7b9ee82949a43d64b4565d26eae616195d12babf8ee0734780b62fef88

                SHA512

                8eaceceab1bfaba7c0c3a0ccdcc1da79651771c92b5c2720d04016273210ef1ed15d2f8d3c6837c724f1738423f15edf0fec8573396c496fe88dc600803137de

              • /data/data/cn.lieying.app.readbook/files/.jglogs/.jg.store.report_pid
                Filesize

                32B

                MD5

                bc6e795cda3b20b7d0b74143fb616e4d

                SHA1

                251d04d843f33b9c6753c6c73a82cf778b93ddd0

                SHA256

                f5d2ecd2265be406e90ecbb07eb8232bb88cf86db11a6966f4f62a67b8e7ba06

                SHA512

                4bb2c8cf063270690022bedf1baba751644926b91125e421eb956b6ab7e6780508002b855e3ff8c25bc84499ab08d04b60d7a8d6ac6bdda127b7b0fa22b4758d

              • /data/data/cn.lieying.app.readbook/files/.jiagu.lock
                Filesize

                38B

                MD5

                45d0bbde021a97e6e101f5bd80835f59

                SHA1

                070ae3b499d454e045cb36d890192edd34f9a6e0

                SHA256

                65bc7dfb1ca43e9d298f1749ecea93b61e14f7fb2a9544cfaa4a3e5c30764fec

                SHA512

                e0399fcd01f399686b3763ed2c9e2078afe6eeee167d49250d7688588b023230eaef5a0fe9f6c2fb7e5b950fe1efb06f561d3ddfdafbcca3185495ee7652e840

              • /data/user/0/cn.lieying.app.readbook/databases/share.db
                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /data/user/0/cn.lieying.app.readbook/databases/share.db-journal
                Filesize

                524B

                MD5

                5c63a9a9908f577155c475a7a0dd6734

                SHA1

                daa08698bbb5de1577a66e9bf5548748a6a2f9c3

                SHA256

                459041023c97747927a45004304e45f9ef1b229171cc6e8cf138f38b976d9c3f

                SHA512

                0b5058b9dff06f179f55b9a1f6e456b4ae264c77b147058edce8fadd0cf7e5866041150d77b42bc3404b8c82e1b5c47e26bb757f012c78fcb2829d9d94921f05

              • /data/user/0/cn.lieying.app.readbook/databases/share.db-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /data/user/0/cn.lieying.app.readbook/databases/share.db-wal
                Filesize

                60KB

                MD5

                33c12dc64295e08b088fa6671ee235e6

                SHA1

                0bac65a7b1269e0d1b0601eb54a4c133725b4574

                SHA256

                210cbd427cc0a8423147466295bec57c3268526451ed68519b0d4545a49c9351

                SHA512

                d601d276baf18c33cc0abb7b71e0f81745548692431f961a3eddda2b86adbe598906825a7255af2c6354345ceca4ec2bb065815c90a51c0355c3d95d4a9dad51

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar
                Filesize

                75KB

                MD5

                40761fa7ae727dde30d7b03e76d6b838

                SHA1

                2ba6ce58c6cac2a10570626230bf5fbf8b975ac9

                SHA256

                810a23ee70e1f8442b8f8e1e535029334f2602b5a89b7e7128170086b464111e

                SHA512

                ddc2e5e56ae3e2648f204ade8601849ec8d2d77a4f1cff01464f2f2bc33dd30eeb3ad35ef9a0af63b83a964743a57742fe125200fe38bbf6574f4f5ced2b2533

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar
                Filesize

                344KB

                MD5

                7b2139455e0cb35385fe53aeb6863986

                SHA1

                76e64187c1d4dda28e9765d827a599ea9bf6b5d8

                SHA256

                8ae702a1b05d29e146f3377cb5e1ef917f3829df36756b58218f05aaac9eedf6

                SHA512

                505e0a76defedc3bb07e997bc0a34c56bb1844dca7d737220ca5af9db4d095d619c9420d19d1e10ac01fdc5544acaa3c5136629960c6f63c9763a24d7cab87e0

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar
                Filesize

                344KB

                MD5

                4c1957b1658d0b0576e8d08c6ab0ef98

                SHA1

                2d6988b335a59c1890a273c772898c68b71e32b3

                SHA256

                1212f0deb67bcc63bef035ed8186e6c4350ceedbfc644a254a1c94d8af7dd230

                SHA512

                4ac44ce3b26fb7df74fa0544defddd5c6efa4cd7cd1f7d02fca16263ba2d99502ce261e56841d26a9c6552d35ddcc9d2a79e41f260efd9e71ddb57911ebeec05

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar.x86.flock
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/oat/113782.jar.cur.prof
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odex
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.vdex
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/libcuid.so
                Filesize

                129B

                MD5

                5f8242aa1a43beca3e3c54a5b1104870

                SHA1

                2bd3133abbbac0410975b5b9e04fb8947c6db733

                SHA256

                c32457c36fb86f9facb9dfa4abb04dfe66d9c628d1975025f8cd4835be2dc6b9

                SHA512

                f5d458067d6c1434fb63fb0a4841d0895f7b25f46b4de03f17ce3656ca5c24f386f0b7ec2daf8d961fd551d87ca905d212b8159cd50bbe4b19561dafecb65718

              • /data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNjUzNDM4Njk3ODM5
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjUzNDM4Njk3ODcz
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjUzNDM4Njk4ODg5
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /data/user/0/cn.lieying.app.readbook/files/umeng_it.cache
                Filesize

                415B

                MD5

                fa43990c6bc3e2ede0f672883b32a879

                SHA1

                5b6102d5b429ae6f6a5787a1df4e7187010b1fa7

                SHA256

                82b2d3c9d67a550bbb986a4ae4371e91e9b18dc3073a38f16df15b7ca96a574a

                SHA512

                41b1901abc4b08af26fc3648d01ab14efb9654d5e88564eb12d8af82c2e2d582f24ded5d5a2304672bb1e87b7ba8ab881b6acd38beb42e89dd9153a9f28fdde2

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xml
                Filesize

                121B

                MD5

                fdc039de96c8f9a9da0c1d351f702720

                SHA1

                6851df4d452d0c2768fd0553452e000d0d89f641

                SHA256

                45e87de65d35f17c3b9f6045a4d35cf3649707db5eaaedbbeec64948562323ae

                SHA512

                841d96fb3d6d23dbb255ee23720b9b71448a378d5d13c173d9738ed54347852befd18b529c219fb882b3ddce0556e2a68443a1164ee9c049370c4692c844ce99

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xml
                Filesize

                166B

                MD5

                6b32ea04f27115024ef6733bf379be08

                SHA1

                bdbc85f0dfa3c5c114f11e5053ccd3245b276780

                SHA256

                16b2771200547590d5298187076e08478b3af286e404f3d1ed83a1bdc35801d9

                SHA512

                18c528e5df902d336617da96cfadf40c81d99e1d53bc06805335d7362d32f91c7b42ac4eaf75aaad885ae04b3a75277f8bf9725ea18d78c743a4fbbf70b93b55

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xml
                Filesize

                213B

                MD5

                4f73934de579b85a4f332a7d62a5956a

                SHA1

                87ab9f6cbfecc4edd8980185a2a9472a543c2316

                SHA256

                e8a9181d1b6b004a3cf046dce455c2e14ee05485706e073bd6c56f5f3cd6c5c2

                SHA512

                2d6975ed8e50ff806fcd01c27919c5bf1825c4944be15de669e5492032847222ebcea51aa1bfbaedcb59a09a6298bc32957bdccf6a78125537b01fe5a8e1bae1

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/PreferanceUtil.xml
                Filesize

                120B

                MD5

                cc9a89efd437686c99ea5643b3fd4d0a

                SHA1

                d1b57c08b77d6f127828b3fe259e5d5e905b8fb4

                SHA256

                45e505c35bef4f6706fca79db6b8524de0268d46a76e30e0b41a5aa293e8e3a0

                SHA512

                d281a88ecb72f3f30144527fa62518b5f5357af918f4fabf6ee4084a22b269341387e95c059fc1f68458f174d6436dc93180648081c100f0385558281340cac0

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/PreferanceUtil.xml
                Filesize

                165B

                MD5

                01e8a5c2f200ba11e18a9b5b3972559e

                SHA1

                e6c28f6f949843b631880a72be59572b5c2f06de

                SHA256

                79b1f940ca96d66b89aeb5adccc0775152f65421033a436a6070495ea024ef93

                SHA512

                b1492205aaf8e097a7ad5863fe8320aed66cc989900460bdeb5fff1cd5b81ebf9537cb7e8df39a060f0628db5f40a5708dbb9ffe5849d7237bed43468e7e4eaa

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
                Filesize

                127B

                MD5

                3270a16455e8b9c48b0310517e7c357e

                SHA1

                5d3dc91b67ea8039cd3c1c808affc87cca319ed2

                SHA256

                09176caaaf7e129dd7c7e0ea6e1117a175fee401e79e81824b3931f7f944dea2

                SHA512

                b161cefb8c43043eaf2cfbe592ebf8cc5b1bb2a36824b17d57a37a24f34d32da09d2fff3f3b33bc730c0c50256b2adb82abf6dbd34d9271209dcb5261962eb76

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
                Filesize

                182B

                MD5

                00aed5744f239a3adaf0c786ba2da6d3

                SHA1

                f9dc2ae0c10749c543b4fb79c73147bcbad95da9

                SHA256

                241c25db32e4554d689a0b6953be22745dc6147b230345c01d2fd4fada2c5485

                SHA512

                63dfb8c35f45c780a4d79bbd7f7a10b170b6a09c22aaf9354e2676b8f72377c0030fa3eeb899e7c3df9a335d8eba0fb309caed36e4bdc67328fd873ee2a6c6d9

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
                Filesize

                250B

                MD5

                91ebd2327ad4505779c7ce157b084916

                SHA1

                ea5864e9fcff157722ea4dfbf9a7b94ed240c810

                SHA256

                6c9f615b55dc9178d4ae7d5bcc0fa98c6f8d65f3add17e805cbdfabe47b4b55d

                SHA512

                1115275277a9dbd4fa84fa2319116332e81f4097c5d2f0dc9960e642d4e8be592ba1cb3fea2702f99f4899d94999ed67f71462a1c925448c780a90bbf9c12d78

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
                Filesize

                377B

                MD5

                7bd6dfd94ebb942c4bcba47bbb72ca0b

                SHA1

                2a4351bfbd73f41ecc8d1d626d42e5385b9d3a36

                SHA256

                2ac6a70f2245b4f14bbb10612adf8ab441f9971ce833f6ad04d673a61e0bd5b9

                SHA512

                5af3f884823a8c3d399ee496144c9cbe2fe787c297bc0a52575277cf747648d432fef96f57166ccec5eca415d2ef17ed59986b80e848fc8dea18b09db0c49a68

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/com.aikesi.app.DEFAULT_PREF.xml
                Filesize

                135B

                MD5

                7f79e63e35345d31632f4cf29af83f9a

                SHA1

                fcd4091b13d116c12ffdffabe8a995427c182751

                SHA256

                e89f0525549b380043e7d367eea7e2445e087cab83db3cce1b4d831906f7a1fb

                SHA512

                ab14890b2685c726e7a26bc706ae9521d7e15951c517af29a724a6d595a69f3ecfeb39ec35034959718ecdc6729328d70b8614135e0f6e61b0eb4a739c57416a

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/info.xml
                Filesize

                460B

                MD5

                dde3c9f9e98dba8081664ac59b76fe06

                SHA1

                c59f0f9f31cc6e81748ac482ff92e8e464bb17e9

                SHA256

                43746a9baa75b3c94d15ef8d22403159703a3f0f6b664ec795c17b74c0c6a7c4

                SHA512

                b61a0287e50b6fc4dfff704178fbf1a4f92215ba443cd22196f86c70dc03d092f8b4c3a4de996c3b42a222995069e1272861b59237f45c6bf5d0a94d8beb1df5

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xml
                Filesize

                111B

                MD5

                b45bc95f1e16960f1f9916f35786d4ab

                SHA1

                b59708f39392406f9da233769371fae4675215a0

                SHA256

                1e07e7351026b39f4ca2f60e100e0f328d9992876564c780949e96ddc73b6d5a

                SHA512

                d35dd3b9f41d1a253e7aeba3470e96ea6e0deffccb61fe2019d9928d10b574050854b5090ee3713b84079e903e87319d6b6a48580222811cdc5cebbe1e913368

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xml
                Filesize

                171B

                MD5

                373a1a1607848f1a1c4ad99f380b5eb6

                SHA1

                631a862607ee3c8f48e28bf154d4b68ce4904e83

                SHA256

                16b470c6d96ee6f451aeff40708b59a67e035f23fd918b622154a1c4be739d05

                SHA512

                dbb82bed1b0fb1c78860bd497aa8b3c9d29b4bf97c14a00f0e8f25ff4007e48520027d977d8ae3c2fb35273810e8b84b6c04a15508bf9ff03e2d8cc8acf5898b

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xml
                Filesize

                236B

                MD5

                4af3621d089afb8b4bf935031f175fbc

                SHA1

                83b0756cc2f2afd06d177dc4cdc4306797efb95a

                SHA256

                cdc738ade8be56646baa6a0539c52daf166880129fd313045116204f9ca8e326

                SHA512

                9bb74b5e5d5648fa395d6833a444633584200f177a8125943d11a2ca29dd32085dbe108195b91544dbe569785e0c0c317a8f0c4ac712627d11e82f0141192b9d

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_location.xml
                Filesize

                390B

                MD5

                324cdd9e86b8fb412defc558b036680e

                SHA1

                8f54afa42baf41d538f0f02bcc9c4e8e0106723c

                SHA256

                234373510f164b28162a7b89b5ebe1d0955697d97cf2f991e269b10b1f80bfaa

                SHA512

                2b08cd705f8d22da534285b6d47a88b35d37b4d2bdc7207cfd65ae0493629d6feccc3bcf55791a27f40448e784d66e129ca8bd92e1a3bcf532b21c3a293e5fdc

              • /data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_socialize.xml
                Filesize

                125B

                MD5

                4ccc7dab456b62a3bffd0cfbac0f9772

                SHA1

                e8a9c50b68cc8929ede3352751f6c62467e670a2

                SHA256

                e0087ca822cf9a97e7130685c1f2ce255d82a031e98c6c450c56f5205df6e49b

                SHA512

                4e7c32841c7b9caa0e86ac086c541c2b7e296f780624823f79eb30567f17eeab5adc48247fbd43f7d8dcb6a760a4274b17b5d81586ca5784a4c044e4898d27cb

              • /storage/emulated/0/.73a66ec8/d22a94de/2ec7ea/1f8b5f544ecbd7768735c7c53ed211db.xml
                Filesize

                214B

                MD5

                9758b00743f4204b97a2b56b85615827

                SHA1

                ebe98ef8765da82aa714520c74d69ee17fd3213e

                SHA256

                e10a7158e4fb68dff6f2530f6f954bb25f197806bd8cbca11a50b1131d2b18af

                SHA512

                7204501749f8aed90a638f3b5459f7225d0796169d8646d75a3015263e7b0ffbf63c65320156c42765229df89ce6725211a9eb12803a3dd49d109a458097b153

              • /storage/emulated/0/.73a66ec8/d22a94de/2ec7ea/1f8b5f544ecbd7768735c7c53ed211db.xml
                Filesize

                135B

                MD5

                69e6e3711a29fef5608540737818437b

                SHA1

                2232574f9132beeb355df520cc393e613389f876

                SHA256

                3d202fb9532fad392bc3332ed081918a764873ddc685109663c65cd10278d896

                SHA512

                0019568cf4223a8191296426ef5da4fefef48bd014866f8bf3e9aeb45d3d02b1251107403a48d4090639cb06004dd284e240abf749ebe093e681a5736f6d2d09

              • /storage/emulated/0/backups/.SystemConfig/.cuid2
                Filesize

                129B

                MD5

                5f8242aa1a43beca3e3c54a5b1104870

                SHA1

                2bd3133abbbac0410975b5b9e04fb8947c6db733

                SHA256

                c32457c36fb86f9facb9dfa4abb04dfe66d9c628d1975025f8cd4835be2dc6b9

                SHA512

                f5d458067d6c1434fb63fb0a4841d0895f7b25f46b4de03f17ce3656ca5c24f386f0b7ec2daf8d961fd551d87ca905d212b8159cd50bbe4b19561dafecb65718

              • /storage/emulated/0/backups/system/.confd
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /storage/emulated/0/backups/system/.confd-journal
                Filesize

                524B

                MD5

                c27a903249ae078ddd6a28c4fea9a779

                SHA1

                7615e95f1fe70edadfcea9118829bc3645f26925

                SHA256

                c4286a1baa7805bdb92aaf21b4e19d764b1337fb56adb171807d575061ec2ffc

                SHA512

                7fcf3c71e4278f1dd5772da0de9a3bbf96de23db793144ded2093eead84eaa3a14e9963c861a19b5d7ba3da223a21f599da52bb9be1743b07b6fca10c6b4c588

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-shm
                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                36KB

                MD5

                48a698fae983bd0094c8d11047981bad

                SHA1

                d596ed6ee015459dd1d545e865e41c71b807adb2

                SHA256

                855325d7479d29da5f5a3520cd368a4aefe8256329b22760c731ab8d2afc83c9

                SHA512

                72606ee0d8625afff704350b162575502ac2288c660f5591c5cc32f1c0637ec8afb0f200fd8f3bad569fe191a6731b4e122bf82929547f50a26c73bdabcd3d4d

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                8KB

                MD5

                59fba23a249fd2401efd0642bf6ba11e

                SHA1

                58c392e80569e5c9fd336d993a37c60e1be34a7f

                SHA256

                74c8d1b4f7ed95de3c0ee7c60805a33ab8485ffd551194665dca5d23e6f5b7ba

                SHA512

                51857874d3799b4386e50def85218c98249973f9e6d0e4ccc2e1a0322375f2650f119a7998c9a54aeb00e284fc1553242491f61b0736e30eddca813255349ef6

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                12KB

                MD5

                0f7b92443a5632379d115d710d7981ee

                SHA1

                0befd2f9dee9e94db614cb210ed2fe58d2f8bdee

                SHA256

                0a75dd6ae0a98963f3dc34c4857eae2e2d0d4fca965561d9fb36b8c05b163700

                SHA512

                0a2f6ed17c495a1b368422ab099e67d4feeb6cfac14b61200d64f98dc88db8d8b106801246b9a6b998f51a33f56385f4f50706f1d993e609b9c531c8aff649a7

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                8KB

                MD5

                3836682a989875f1a31bd7e47670338e

                SHA1

                79becd44831c7f861e3e338f5b118bc600a0900d

                SHA256

                e1d7ec325033549e476be67d1cd1de3d0a0f1a19c0b4e6856fdc9cbf90e724e0

                SHA512

                435cc77abca9b04a4667368ac266224961679e9a099955b30fd189e34a4112eb57fa2c0f4fd2eebfcdc45820ed2d9bd76ee2d712f18ea60600a4d6628fd90e2c

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                8KB

                MD5

                f4ebfc231aa9a556decfd3d3e37d8096

                SHA1

                946d5abc813eeb4b7c5974401ba7ba393194500f

                SHA256

                6b46a5dda49be45af59f4c8dcfdc147264509c5f790c4dd035e20241b59876dd

                SHA512

                97d52ab506c6e98f4426c31c5a92b51042047cddcc42b0639a9ced0a23d03b569b7daed122e9ffee2f30c67b4564adcfc7c54e2c86e816685a4b9b8612a98642

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                12KB

                MD5

                c9907a4b5be88b3d05f936526e5f025d

                SHA1

                13e487a874406b61e042b54accbd3c5e16ca8b03

                SHA256

                55d02c0d7badcce65183062ba5997def745697fd12c0298d8eb3d457cda017d6

                SHA512

                60807f1a7b5b4c6fade29294709a87af7e3b7b9fba8e783fe8a4a57d2f3aa8b9c18febf883da9a67a495ec7ddb391db240cd31e56ae0d9d1d430da1fc6ea4f93

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                8KB

                MD5

                947dfe75864a79a643aae68742839927

                SHA1

                5e523b91b2e6436f42fa2647d855fa3f13d4b11f

                SHA256

                99b750ac5793cd6bb1c32e222532dfbee0044f8ce9cde52eb4e9c8f614d73a44

                SHA512

                6b4fde5fde271833fe9518cb6a73297a6c059b03bcff38d3ea5f8c15ffa7b6299ffb240a4981af4f2ded92263ebc099fe50bc1d20a13883b51032608a332ee29

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                12KB

                MD5

                e38d371839361d591a8f3681f30d61c8

                SHA1

                2685bfd7fd4b11e670a92c1639105b0048de3220

                SHA256

                45d6a5dc521cdd012180eae13ec4ee206ce4e754650a3baf520c1611ed029f05

                SHA512

                9d2cb235607aa954c7aac48095b481ff0a540bd509ad73e17a55e3aaa2073cdd6a85e6738f0aa657b0f1395e51344b4142256aee3e1f98cf09843e38ed1696d2

              • /storage/emulated/0/backups/system/.confd-wal
                Filesize

                8KB

                MD5

                fceaaa0b5c2a08dd71c1b2e50e81463c

                SHA1

                33d33a086b9cad686474b8806fbd0670d37902ed

                SHA256

                e4dd2eab2f2cda69d2ea6f9771ab2f6e357ecc9b1cd314d0d04ccad1322cc6c5

                SHA512

                2bf060449bff9afc2a8e84fe3658a0095e5071430da54ea8e8adb0fbe174661f0254837a68941c622ad82c03ca0933a44bf06ec37f4f06b49ae790546a0e6827

              • /storage/emulated/0/backups/system/.timestamp
                Filesize

                25B

                MD5

                d0ead37d05d9760825b62a7ef80721c7

                SHA1

                dc46091bdede64506ddbf8da8e63792d44f34eba

                SHA256

                aeaae423ecaf05e5aab6e1e0c9c048da10a87e0869aa2495abba44d4ee692615

                SHA512

                7fbc8e32d25a256b3de76e6ea31728fd04cc62b652fa7175c92f40ede305bdad8d5248623d19cd371f17dd74187a1ce7836f96289143a08c871b8e5c8f8240b7

              • /storage/emulated/0/novel/channel-ly.txt
                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

              • /storage/emulated/0/sihelottery/log/2022-05-25Crash.log
                Filesize

                3KB

                MD5

                2de6f7f0dac21c66f7dfdd745222218b

                SHA1

                9454d9d589a17c8cd93cfa8be05474753a3e9ab0

                SHA256

                fa1f975e5d4211133f79f0e23aec877900e598aa6c05da202761fb364051ea33

                SHA512

                53f5bc052e6e6f69472426ab2d68eb485179de2f5f9e94778d0f3e3664bae0a688d3047347de178a04178b152be372d7cea764e99a4aaf36d4e15e2ee50c4be2