Analysis
-
max time kernel
4171366s -
max time network
146s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
25-05-2022 00:28
Static task
static1
Behavioral task
behavioral1
Sample
4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0.apk
Resource
android-x64-20220310-en
General
-
Target
4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0.apk
-
Size
10.2MB
-
MD5
fef1abe663b0955779099437457b7f11
-
SHA1
14a3046f9d9cbc14459c70e3c4f9cdaed7824fa5
-
SHA256
4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0
-
SHA512
cbb4d8f85355fc0b0edab65f71e0e8258b507decdf5b370de48fd006364612c21de27f14ae4215f018df769d38d53dfee7e5765dfbf1ccc6ee99bba7790a8123
Malware Config
Signatures
-
Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
-
Loads dropped Dex/Jar 7 IoCs
Runs executable file dropped to the device during analysis.
Processes:
cn.lieying.app.readbook/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.lieying.app.readbook/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar --output-vdex-fd=188 --oat-fd=189 --oat-location=/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odex --compiler-filter=quicken --class-loader-context=&ioc pid process /data/data/cn.lieying.app.readbook/.jiagu/classes.dex 5306 cn.lieying.app.readbook /data/data/cn.lieying.app.readbook/.jiagu/classes.dex!classes2.dex 5306 cn.lieying.app.readbook /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex 5306 cn.lieying.app.readbook /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex 5398 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.lieying.app.readbook/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=& /data/data/cn.lieying.app.readbook/.jiagu/tmp.dex 5306 cn.lieying.app.readbook /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar 5696 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar --output-vdex-fd=188 --oat-fd=189 --oat-location=/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar 5306 cn.lieying.app.readbook -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
cn.lieying.app.readbookdescription ioc process Framework API call javax.crypto.Cipher.doFinal cn.lieying.app.readbook
Processes
-
cn.lieying.app.readbook1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.lieying.app.readbook/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
ls /sys/class/thermal2⤵
-
getprop ro.miui.ui.version.name2⤵
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar --output-vdex-fd=188 --oat-fd=189 --oat-location=/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
getprop ro.build.version.opporom2⤵
-
getprop ro.miui.ui.version.name2⤵
-
getprop ro.build.version.opporom2⤵
-
getprop ro.build.version.emui2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/cn.lieying.app.readbook/.jiagu/classes.dexFilesize
5.6MB
MD5268f27291868f262662f4c6ae0968201
SHA1480e2f9bd842af014155aa87e8cbb2d203bb2340
SHA2568b881d31d4ae823b4f30ff9bc4aaf852d473364c436ea07fb9640ca4b665ba16
SHA5124dc9b27e3528cf6d31a813764efe3cc81fe8c6ee16c3e20b261e430ef57179e889b846dab087f4527ea915cb5ee68ec992bb862e027bd3b10f8ee9eba808233d
-
/data/data/cn.lieying.app.readbook/.jiagu/classes.dex!classes2.dexFilesize
4.9MB
MD59fd0238ea765bbcc15ac0cf38d8a701e
SHA116a5aaf68ab36dfc0a2267bda4510d8ac77caad1
SHA25615eaefe0b9aac270dbd116b14940b50342bf14045e1c111d927c91c3a1ffafd1
SHA5120afb2e5999ffa6eeac77b2fc1d484a7f32f412f356be93654b937869378e78336d5d51b62d03338d1092274fbc89c7ada0b03484288aecf9d09b45ba96a5e8e1
-
/data/data/cn.lieying.app.readbook/.jiagu/libjiagu.soFilesize
475KB
MD55aea02f4e4c77fbf2e7a27f7ca9cc06b
SHA1522db1748608e9173547b29b7aa82ddc3542c534
SHA2565a1c513b347e2a929769e2be67552c1d591704f08f7b5590282b66cc2c7d7bd2
SHA5125c979a11f5e896829db906f533756efc1cf3c5a7e35ecc9e376a0aae818f2dada013441649feac2e188bd51affbbf35156e32fdc6552e185bddbc547f3850316
-
/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/data/cn.lieying.app.readbook/.jiagu/oat/x86/tmp.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/data/cn.lieying.app.readbook/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/cn.lieying.app.readbook/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/cn.lieying.app.readbook/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/cn.lieying.app.readbook/.jiagu/tmp.dexFilesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
/data/data/cn.lieying.app.readbook/.jiagu/tmp.dex.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/data/cn.lieying.app.readbook/files/.jglogs/.jg.acFilesize
32B
MD5df56b5cfa253bff45776ef14c73b22f0
SHA1f207fe2d680b947ca21ced40b70413848c07122a
SHA256473bf295046abe1e4bddb08298ba45c30be05e8790637cbcfdc820c1a7a2c1ce
SHA5127da9d8c03ecc6de8e53be80fb81f40ed6ac673c7d7387608393b03f3409ad15c669b00b03c317ea272b5f801a0556de4809bf4c8e68f835feec4d7449ebfebb2
-
/data/data/cn.lieying.app.readbook/files/.jglogs/.jg.icFilesize
32B
MD5cbdf2fec251197b973a02050e9af5338
SHA1cdcafada9d66aedf3e07a00b58799570f635a90f
SHA2566b47cfe505a5d695d34c6eb9f5e0b33a75447c4195609bff4908112a70cca1ae
SHA512732f61a3e58c5af8759d26882a09041c75ce6916e6eb2def87a6b44b9af079a6afd036461f9b9c32594ccee216def048f1d30ccfc8ec431d49f8c9b28670add9
-
/data/data/cn.lieying.app.readbook/files/.jglogs/.jg.rdFilesize
105B
MD5d53720c73612b1086f8317836c08b12b
SHA190c7e5dff84b08fd37a467fc0be0f79f8149efe4
SHA2566fbcf883870253637e3ed61cce507e34f56f8b61c05ee64ff6d4924eaeb3bcbe
SHA512067f829cae97a8e3ece58d86a1631147db3cc915ff928b61e8b4150412dba44498f64fed7dd57ff7e7d0d4d34708cadc796c3f1b05f1601f5c1c24e44217376c
-
/data/data/cn.lieying.app.readbook/files/.jglogs/.jg.riFilesize
646B
MD50bac5445fb5dcd94c34d4c9a1bf27c9e
SHA14ba072a6f70c8d4eb48219f0ebc0d0f92f41bc90
SHA256ffc0df7b9ee82949a43d64b4565d26eae616195d12babf8ee0734780b62fef88
SHA5128eaceceab1bfaba7c0c3a0ccdcc1da79651771c92b5c2720d04016273210ef1ed15d2f8d3c6837c724f1738423f15edf0fec8573396c496fe88dc600803137de
-
/data/data/cn.lieying.app.readbook/files/.jglogs/.jg.store.report_pidFilesize
32B
MD5bc6e795cda3b20b7d0b74143fb616e4d
SHA1251d04d843f33b9c6753c6c73a82cf778b93ddd0
SHA256f5d2ecd2265be406e90ecbb07eb8232bb88cf86db11a6966f4f62a67b8e7ba06
SHA5124bb2c8cf063270690022bedf1baba751644926b91125e421eb956b6ab7e6780508002b855e3ff8c25bc84499ab08d04b60d7a8d6ac6bdda127b7b0fa22b4758d
-
/data/data/cn.lieying.app.readbook/files/.jiagu.lockFilesize
38B
MD545d0bbde021a97e6e101f5bd80835f59
SHA1070ae3b499d454e045cb36d890192edd34f9a6e0
SHA25665bc7dfb1ca43e9d298f1749ecea93b61e14f7fb2a9544cfaa4a3e5c30764fec
SHA512e0399fcd01f399686b3763ed2c9e2078afe6eeee167d49250d7688588b023230eaef5a0fe9f6c2fb7e5b950fe1efb06f561d3ddfdafbcca3185495ee7652e840
-
/data/user/0/cn.lieying.app.readbook/databases/share.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/cn.lieying.app.readbook/databases/share.db-journalFilesize
524B
MD55c63a9a9908f577155c475a7a0dd6734
SHA1daa08698bbb5de1577a66e9bf5548748a6a2f9c3
SHA256459041023c97747927a45004304e45f9ef1b229171cc6e8cf138f38b976d9c3f
SHA5120b5058b9dff06f179f55b9a1f6e456b4ae264c77b147058edce8fadd0cf7e5866041150d77b42bc3404b8c82e1b5c47e26bb757f012c78fcb2829d9d94921f05
-
/data/user/0/cn.lieying.app.readbook/databases/share.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/cn.lieying.app.readbook/databases/share.db-walFilesize
60KB
MD533c12dc64295e08b088fa6671ee235e6
SHA10bac65a7b1269e0d1b0601eb54a4c133725b4574
SHA256210cbd427cc0a8423147466295bec57c3268526451ed68519b0d4545a49c9351
SHA512d601d276baf18c33cc0abb7b71e0f81745548692431f961a3eddda2b86adbe598906825a7255af2c6354345ceca4ec2bb065815c90a51c0355c3d95d4a9dad51
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jarFilesize
75KB
MD540761fa7ae727dde30d7b03e76d6b838
SHA12ba6ce58c6cac2a10570626230bf5fbf8b975ac9
SHA256810a23ee70e1f8442b8f8e1e535029334f2602b5a89b7e7128170086b464111e
SHA512ddc2e5e56ae3e2648f204ade8601849ec8d2d77a4f1cff01464f2f2bc33dd30eeb3ad35ef9a0af63b83a964743a57742fe125200fe38bbf6574f4f5ced2b2533
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jarFilesize
344KB
MD57b2139455e0cb35385fe53aeb6863986
SHA176e64187c1d4dda28e9765d827a599ea9bf6b5d8
SHA2568ae702a1b05d29e146f3377cb5e1ef917f3829df36756b58218f05aaac9eedf6
SHA512505e0a76defedc3bb07e997bc0a34c56bb1844dca7d737220ca5af9db4d095d619c9420d19d1e10ac01fdc5544acaa3c5136629960c6f63c9763a24d7cab87e0
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jarFilesize
344KB
MD54c1957b1658d0b0576e8d08c6ab0ef98
SHA12d6988b335a59c1890a273c772898c68b71e32b3
SHA2561212f0deb67bcc63bef035ed8186e6c4350ceedbfc644a254a1c94d8af7dd230
SHA5124ac44ce3b26fb7df74fa0544defddd5c6efa4cd7cd1f7d02fca16263ba2d99502ce261e56841d26a9c6552d35ddcc9d2a79e41f260efd9e71ddb57911ebeec05
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/113782.jar.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/113782.jar.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/1449654910/oat/x86/113782.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/libcuid.soFilesize
129B
MD55f8242aa1a43beca3e3c54a5b1104870
SHA12bd3133abbbac0410975b5b9e04fb8947c6db733
SHA256c32457c36fb86f9facb9dfa4abb04dfe66d9c628d1975025f8cd4835be2dc6b9
SHA512f5d458067d6c1434fb63fb0a4841d0895f7b25f46b4de03f17ce3656ca5c24f386f0b7ec2daf8d961fd551d87ca905d212b8159cd50bbe4b19561dafecb65718
-
/data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNjUzNDM4Njk3ODM5MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjUzNDM4Njk3ODczMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNjUzNDM4Njk4ODg5MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/cn.lieying.app.readbook/files/umeng_it.cacheFilesize
415B
MD5fa43990c6bc3e2ede0f672883b32a879
SHA15b6102d5b429ae6f6a5787a1df4e7187010b1fa7
SHA25682b2d3c9d67a550bbb986a4ae4371e91e9b18dc3073a38f16df15b7ca96a574a
SHA51241b1901abc4b08af26fc3648d01ab14efb9654d5e88564eb12d8af82c2e2d582f24ded5d5a2304672bb1e87b7ba8ab881b6acd38beb42e89dd9153a9f28fdde2
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xmlFilesize
121B
MD5fdc039de96c8f9a9da0c1d351f702720
SHA16851df4d452d0c2768fd0553452e000d0d89f641
SHA25645e87de65d35f17c3b9f6045a4d35cf3649707db5eaaedbbeec64948562323ae
SHA512841d96fb3d6d23dbb255ee23720b9b71448a378d5d13c173d9738ed54347852befd18b529c219fb882b3ddce0556e2a68443a1164ee9c049370c4692c844ce99
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xmlFilesize
166B
MD56b32ea04f27115024ef6733bf379be08
SHA1bdbc85f0dfa3c5c114f11e5053ccd3245b276780
SHA25616b2771200547590d5298187076e08478b3af286e404f3d1ed83a1bdc35801d9
SHA51218c528e5df902d336617da96cfadf40c81d99e1d53bc06805335d7362d32f91c7b42ac4eaf75aaad885ae04b3a75277f8bf9725ea18d78c743a4fbbf70b93b55
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/LY_AD_KEY.xmlFilesize
213B
MD54f73934de579b85a4f332a7d62a5956a
SHA187ab9f6cbfecc4edd8980185a2a9472a543c2316
SHA256e8a9181d1b6b004a3cf046dce455c2e14ee05485706e073bd6c56f5f3cd6c5c2
SHA5122d6975ed8e50ff806fcd01c27919c5bf1825c4944be15de669e5492032847222ebcea51aa1bfbaedcb59a09a6298bc32957bdccf6a78125537b01fe5a8e1bae1
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/PreferanceUtil.xmlFilesize
120B
MD5cc9a89efd437686c99ea5643b3fd4d0a
SHA1d1b57c08b77d6f127828b3fe259e5d5e905b8fb4
SHA25645e505c35bef4f6706fca79db6b8524de0268d46a76e30e0b41a5aa293e8e3a0
SHA512d281a88ecb72f3f30144527fa62518b5f5357af918f4fabf6ee4084a22b269341387e95c059fc1f68458f174d6436dc93180648081c100f0385558281340cac0
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/PreferanceUtil.xmlFilesize
165B
MD501e8a5c2f200ba11e18a9b5b3972559e
SHA1e6c28f6f949843b631880a72be59572b5c2f06de
SHA25679b1f940ca96d66b89aeb5adccc0775152f65421033a436a6070495ea024ef93
SHA512b1492205aaf8e097a7ad5863fe8320aed66cc989900460bdeb5fff1cd5b81ebf9537cb7e8df39a060f0628db5f40a5708dbb9ffe5849d7237bed43468e7e4eaa
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xmlFilesize
127B
MD53270a16455e8b9c48b0310517e7c357e
SHA15d3dc91b67ea8039cd3c1c808affc87cca319ed2
SHA25609176caaaf7e129dd7c7e0ea6e1117a175fee401e79e81824b3931f7f944dea2
SHA512b161cefb8c43043eaf2cfbe592ebf8cc5b1bb2a36824b17d57a37a24f34d32da09d2fff3f3b33bc730c0c50256b2adb82abf6dbd34d9271209dcb5261962eb76
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xmlFilesize
182B
MD500aed5744f239a3adaf0c786ba2da6d3
SHA1f9dc2ae0c10749c543b4fb79c73147bcbad95da9
SHA256241c25db32e4554d689a0b6953be22745dc6147b230345c01d2fd4fada2c5485
SHA51263dfb8c35f45c780a4d79bbd7f7a10b170b6a09c22aaf9354e2676b8f72377c0030fa3eeb899e7c3df9a335d8eba0fb309caed36e4bdc67328fd873ee2a6c6d9
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xmlFilesize
250B
MD591ebd2327ad4505779c7ce157b084916
SHA1ea5864e9fcff157722ea4dfbf9a7b94ed240c810
SHA2566c9f615b55dc9178d4ae7d5bcc0fa98c6f8d65f3add17e805cbdfabe47b4b55d
SHA5121115275277a9dbd4fa84fa2319116332e81f4097c5d2f0dc9960e642d4e8be592ba1cb3fea2702f99f4899d94999ed67f71462a1c925448c780a90bbf9c12d78
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/__Baidu_Stat_SDK_SendRem.xmlFilesize
377B
MD57bd6dfd94ebb942c4bcba47bbb72ca0b
SHA12a4351bfbd73f41ecc8d1d626d42e5385b9d3a36
SHA2562ac6a70f2245b4f14bbb10612adf8ab441f9971ce833f6ad04d673a61e0bd5b9
SHA5125af3f884823a8c3d399ee496144c9cbe2fe787c297bc0a52575277cf747648d432fef96f57166ccec5eca415d2ef17ed59986b80e848fc8dea18b09db0c49a68
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/com.aikesi.app.DEFAULT_PREF.xmlFilesize
135B
MD57f79e63e35345d31632f4cf29af83f9a
SHA1fcd4091b13d116c12ffdffabe8a995427c182751
SHA256e89f0525549b380043e7d367eea7e2445e087cab83db3cce1b4d831906f7a1fb
SHA512ab14890b2685c726e7a26bc706ae9521d7e15951c517af29a724a6d595a69f3ecfeb39ec35034959718ecdc6729328d70b8614135e0f6e61b0eb4a739c57416a
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/info.xmlFilesize
460B
MD5dde3c9f9e98dba8081664ac59b76fe06
SHA1c59f0f9f31cc6e81748ac482ff92e8e464bb17e9
SHA25643746a9baa75b3c94d15ef8d22403159703a3f0f6b664ec795c17b74c0c6a7c4
SHA512b61a0287e50b6fc4dfff704178fbf1a4f92215ba443cd22196f86c70dc03d092f8b4c3a4de996c3b42a222995069e1272861b59237f45c6bf5d0a94d8beb1df5
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xmlFilesize
111B
MD5b45bc95f1e16960f1f9916f35786d4ab
SHA1b59708f39392406f9da233769371fae4675215a0
SHA2561e07e7351026b39f4ca2f60e100e0f328d9992876564c780949e96ddc73b6d5a
SHA512d35dd3b9f41d1a253e7aeba3470e96ea6e0deffccb61fe2019d9928d10b574050854b5090ee3713b84079e903e87319d6b6a48580222811cdc5cebbe1e913368
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xmlFilesize
171B
MD5373a1a1607848f1a1c4ad99f380b5eb6
SHA1631a862607ee3c8f48e28bf154d4b68ce4904e83
SHA25616b470c6d96ee6f451aeff40708b59a67e035f23fd918b622154a1c4be739d05
SHA512dbb82bed1b0fb1c78860bd497aa8b3c9d29b4bf97c14a00f0e8f25ff4007e48520027d977d8ae3c2fb35273810e8b84b6c04a15508bf9ff03e2d8cc8acf5898b
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_config.xmlFilesize
236B
MD54af3621d089afb8b4bf935031f175fbc
SHA183b0756cc2f2afd06d177dc4cdc4306797efb95a
SHA256cdc738ade8be56646baa6a0539c52daf166880129fd313045116204f9ca8e326
SHA5129bb74b5e5d5648fa395d6833a444633584200f177a8125943d11a2ca29dd32085dbe108195b91544dbe569785e0c0c317a8f0c4ac712627d11e82f0141192b9d
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_common_location.xmlFilesize
390B
MD5324cdd9e86b8fb412defc558b036680e
SHA18f54afa42baf41d538f0f02bcc9c4e8e0106723c
SHA256234373510f164b28162a7b89b5ebe1d0955697d97cf2f991e269b10b1f80bfaa
SHA5122b08cd705f8d22da534285b6d47a88b35d37b4d2bdc7207cfd65ae0493629d6feccc3bcf55791a27f40448e784d66e129ca8bd92e1a3bcf532b21c3a293e5fdc
-
/data/user/0/cn.lieying.app.readbook/shared_prefs/umeng_socialize.xmlFilesize
125B
MD54ccc7dab456b62a3bffd0cfbac0f9772
SHA1e8a9c50b68cc8929ede3352751f6c62467e670a2
SHA256e0087ca822cf9a97e7130685c1f2ce255d82a031e98c6c450c56f5205df6e49b
SHA5124e7c32841c7b9caa0e86ac086c541c2b7e296f780624823f79eb30567f17eeab5adc48247fbd43f7d8dcb6a760a4274b17b5d81586ca5784a4c044e4898d27cb
-
/storage/emulated/0/.73a66ec8/d22a94de/2ec7ea/1f8b5f544ecbd7768735c7c53ed211db.xmlFilesize
214B
MD59758b00743f4204b97a2b56b85615827
SHA1ebe98ef8765da82aa714520c74d69ee17fd3213e
SHA256e10a7158e4fb68dff6f2530f6f954bb25f197806bd8cbca11a50b1131d2b18af
SHA5127204501749f8aed90a638f3b5459f7225d0796169d8646d75a3015263e7b0ffbf63c65320156c42765229df89ce6725211a9eb12803a3dd49d109a458097b153
-
/storage/emulated/0/.73a66ec8/d22a94de/2ec7ea/1f8b5f544ecbd7768735c7c53ed211db.xmlFilesize
135B
MD569e6e3711a29fef5608540737818437b
SHA12232574f9132beeb355df520cc393e613389f876
SHA2563d202fb9532fad392bc3332ed081918a764873ddc685109663c65cd10278d896
SHA5120019568cf4223a8191296426ef5da4fefef48bd014866f8bf3e9aeb45d3d02b1251107403a48d4090639cb06004dd284e240abf749ebe093e681a5736f6d2d09
-
/storage/emulated/0/backups/.SystemConfig/.cuid2Filesize
129B
MD55f8242aa1a43beca3e3c54a5b1104870
SHA12bd3133abbbac0410975b5b9e04fb8947c6db733
SHA256c32457c36fb86f9facb9dfa4abb04dfe66d9c628d1975025f8cd4835be2dc6b9
SHA512f5d458067d6c1434fb63fb0a4841d0895f7b25f46b4de03f17ce3656ca5c24f386f0b7ec2daf8d961fd551d87ca905d212b8159cd50bbe4b19561dafecb65718
-
/storage/emulated/0/backups/system/.confdMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/backups/system/.confd-journalFilesize
524B
MD5c27a903249ae078ddd6a28c4fea9a779
SHA17615e95f1fe70edadfcea9118829bc3645f26925
SHA256c4286a1baa7805bdb92aaf21b4e19d764b1337fb56adb171807d575061ec2ffc
SHA5127fcf3c71e4278f1dd5772da0de9a3bbf96de23db793144ded2093eead84eaa3a14e9963c861a19b5d7ba3da223a21f599da52bb9be1743b07b6fca10c6b4c588
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/storage/emulated/0/backups/system/.confd-walFilesize
36KB
MD548a698fae983bd0094c8d11047981bad
SHA1d596ed6ee015459dd1d545e865e41c71b807adb2
SHA256855325d7479d29da5f5a3520cd368a4aefe8256329b22760c731ab8d2afc83c9
SHA51272606ee0d8625afff704350b162575502ac2288c660f5591c5cc32f1c0637ec8afb0f200fd8f3bad569fe191a6731b4e122bf82929547f50a26c73bdabcd3d4d
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD559fba23a249fd2401efd0642bf6ba11e
SHA158c392e80569e5c9fd336d993a37c60e1be34a7f
SHA25674c8d1b4f7ed95de3c0ee7c60805a33ab8485ffd551194665dca5d23e6f5b7ba
SHA51251857874d3799b4386e50def85218c98249973f9e6d0e4ccc2e1a0322375f2650f119a7998c9a54aeb00e284fc1553242491f61b0736e30eddca813255349ef6
-
/storage/emulated/0/backups/system/.confd-walFilesize
12KB
MD50f7b92443a5632379d115d710d7981ee
SHA10befd2f9dee9e94db614cb210ed2fe58d2f8bdee
SHA2560a75dd6ae0a98963f3dc34c4857eae2e2d0d4fca965561d9fb36b8c05b163700
SHA5120a2f6ed17c495a1b368422ab099e67d4feeb6cfac14b61200d64f98dc88db8d8b106801246b9a6b998f51a33f56385f4f50706f1d993e609b9c531c8aff649a7
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD53836682a989875f1a31bd7e47670338e
SHA179becd44831c7f861e3e338f5b118bc600a0900d
SHA256e1d7ec325033549e476be67d1cd1de3d0a0f1a19c0b4e6856fdc9cbf90e724e0
SHA512435cc77abca9b04a4667368ac266224961679e9a099955b30fd189e34a4112eb57fa2c0f4fd2eebfcdc45820ed2d9bd76ee2d712f18ea60600a4d6628fd90e2c
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD5f4ebfc231aa9a556decfd3d3e37d8096
SHA1946d5abc813eeb4b7c5974401ba7ba393194500f
SHA2566b46a5dda49be45af59f4c8dcfdc147264509c5f790c4dd035e20241b59876dd
SHA51297d52ab506c6e98f4426c31c5a92b51042047cddcc42b0639a9ced0a23d03b569b7daed122e9ffee2f30c67b4564adcfc7c54e2c86e816685a4b9b8612a98642
-
/storage/emulated/0/backups/system/.confd-walFilesize
12KB
MD5c9907a4b5be88b3d05f936526e5f025d
SHA113e487a874406b61e042b54accbd3c5e16ca8b03
SHA25655d02c0d7badcce65183062ba5997def745697fd12c0298d8eb3d457cda017d6
SHA51260807f1a7b5b4c6fade29294709a87af7e3b7b9fba8e783fe8a4a57d2f3aa8b9c18febf883da9a67a495ec7ddb391db240cd31e56ae0d9d1d430da1fc6ea4f93
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD5947dfe75864a79a643aae68742839927
SHA15e523b91b2e6436f42fa2647d855fa3f13d4b11f
SHA25699b750ac5793cd6bb1c32e222532dfbee0044f8ce9cde52eb4e9c8f614d73a44
SHA5126b4fde5fde271833fe9518cb6a73297a6c059b03bcff38d3ea5f8c15ffa7b6299ffb240a4981af4f2ded92263ebc099fe50bc1d20a13883b51032608a332ee29
-
/storage/emulated/0/backups/system/.confd-walFilesize
12KB
MD5e38d371839361d591a8f3681f30d61c8
SHA12685bfd7fd4b11e670a92c1639105b0048de3220
SHA25645d6a5dc521cdd012180eae13ec4ee206ce4e754650a3baf520c1611ed029f05
SHA5129d2cb235607aa954c7aac48095b481ff0a540bd509ad73e17a55e3aaa2073cdd6a85e6738f0aa657b0f1395e51344b4142256aee3e1f98cf09843e38ed1696d2
-
/storage/emulated/0/backups/system/.confd-walFilesize
8KB
MD5fceaaa0b5c2a08dd71c1b2e50e81463c
SHA133d33a086b9cad686474b8806fbd0670d37902ed
SHA256e4dd2eab2f2cda69d2ea6f9771ab2f6e357ecc9b1cd314d0d04ccad1322cc6c5
SHA5122bf060449bff9afc2a8e84fe3658a0095e5071430da54ea8e8adb0fbe174661f0254837a68941c622ad82c03ca0933a44bf06ec37f4f06b49ae790546a0e6827
-
/storage/emulated/0/backups/system/.timestampFilesize
25B
MD5d0ead37d05d9760825b62a7ef80721c7
SHA1dc46091bdede64506ddbf8da8e63792d44f34eba
SHA256aeaae423ecaf05e5aab6e1e0c9c048da10a87e0869aa2495abba44d4ee692615
SHA5127fbc8e32d25a256b3de76e6ea31728fd04cc62b652fa7175c92f40ede305bdad8d5248623d19cd371f17dd74187a1ce7836f96289143a08c871b8e5c8f8240b7
-
/storage/emulated/0/novel/channel-ly.txtMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/sihelottery/log/2022-05-25Crash.logFilesize
3KB
MD52de6f7f0dac21c66f7dfdd745222218b
SHA19454d9d589a17c8cd93cfa8be05474753a3e9ab0
SHA256fa1f975e5d4211133f79f0e23aec877900e598aa6c05da202761fb364051ea33
SHA51253f5bc052e6e6f69472426ab2d68eb485179de2f5f9e94778d0f3e3664bae0a688d3047347de178a04178b152be372d7cea764e99a4aaf36d4e15e2ee50c4be2