Malware Analysis Report

2025-01-19 08:10

Sample ID 240605-z4c1pshe71
Target 99451137f00605153d5b8f493bd46061_JaffaCakes118
SHA256 f46751f850bb6b2c48f0bcf1e9d7eb525219b95426e098cbc996f442e5be0204
Tags
discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

f46751f850bb6b2c48f0bcf1e9d7eb525219b95426e098cbc996f442e5be0204

Threat Level: Shows suspicious behavior

The file 99451137f00605153d5b8f493bd46061_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion impact persistence

Loads dropped Dex/Jar

Requests dangerous framework permissions

Queries information about active data network

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-05 21:15

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-05 21:15

Reported

2024-06-05 21:16

Platform

android-x86-arm-20240603-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-05 21:15

Reported

2024-06-05 21:16

Platform

android-x64-20240603-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-06-05 21:15

Reported

2024-06-05 21:16

Platform

android-x64-arm64-20240603-en

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-05 21:15

Reported

2024-06-05 21:19

Platform

android-x86-arm-20240603-en

Max time kernel

47s

Max time network

145s

Command Line

com.qd.smreader

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar N/A N/A
N/A /data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar N/A N/A
N/A /data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.qd.smreader

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.qd.smreader/app_push_lib/oat/x86/plugin-deploy.odex --compiler-filter=quicken --class-loader-context=&

com.qd.smreader:bdservice_v1

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 pay.sm.qudu99.com udp
US 1.1.1.1:53 sc.sm.qudu99.com udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 142.250.187.206:443 tcp
GB 216.58.213.2:443 tcp

Files

/data/data/com.qd.smreader/app_push_lib/plugin-deploy.jar

MD5 e70723b8f6c4c7c09a6019733022cf53
SHA1 e3ca32166c65e4dc73c21347ab22d54a7b5a9a83
SHA256 32d35cd80b0302e3fcdd7349b4ff9a7b689ce080435109607ff79a834ff710d5
SHA512 461c0499193c5ef5aa4e2e5d358031e7d28c98c8e1e38d22b710271bf3b561c28232bfaadbc2c275357e31b7b0ad6bca798008328ac3cff3701c1c9cca2ddddd

/data/data/com.qd.smreader/app_push_lib/plugin-deploy.key

MD5 1ea8459a688352c3573a8e80727c2644
SHA1 9b47864e96eed98798a6da2b8860c8f8a68f089e
SHA256 be2c0f9e472138a78d35f29013fc43dfeae991806dfebbc5be5c8dc86b8a1093
SHA512 99a26c03e760fdac91546a47e18e58851996b7e38e93812a6be23f1eee64370323ac492c4c224bd419d91566356fcb8eca3989ff4f2ce41db3d16301fa9dd75f

/data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar

MD5 bdfa71feb08b80b649fddcd7488b03b4
SHA1 bcacf11199fd2c353034a7271b5dbfe2dd4cbddb
SHA256 f8bd07a7afce2d102976afaadd33dc70336a0b06682ac8d6fe9544a08d086d1d
SHA512 37dc848b995def498d0c832a76ed0ad429db18f26a5e9659c2b77a63bff555560160b6be4d22387eb529b2291bb27ae21718ddadb315bd1aa4c092d6330f049a

/data/user/0/com.qd.smreader/app_push_lib/plugin-deploy.jar

MD5 5597a541eabd3fb792c581587550dc4a
SHA1 6500b0ff20c75717e1cb67dcee76b4641a4e8a35
SHA256 473b02216f8d2b5ffb26571e51ff322e3ce04ba45418408452bea103576ee8e2
SHA512 39b4acd82f67f11140cd1b0b4291e656a4a46ba63064509977f3f1de24a931dce83964f031e16ccab95cf0540ac5f613ca87d7665ce99f1c1ee4a0778e2c19e2

/storage/emulated/0/smreader/download/backup/NdChannelId.xml

MD5 b19a3dfecdb941466ee0f0bd55bbb5f0
SHA1 91fcaff506c2163f41c9cadedc63e85ffa4162a9
SHA256 0ba0f81b413c37a8962a3a65ecc08aa7e9640634ba2c034b5241a73ea3e5dd3d
SHA512 a7bb16725c14656df160429b33c7c906c49c3b6e3715d092abafdf63f7a9a75fed5b04af9963758b857b42e796ed54633f701af42b3ebb55f9614a9591c1fb24

/data/data/com.qd.smreader/databases/E-ZINE-journal

MD5 3e2a18a9ff5fc9e946d85948e30ea2b2
SHA1 9c17f3b5c2540a937268a9603108e5cc72576c58
SHA256 313f331be20d8682dac94bc83fc32468e14387f88956ee4997f11bdb96d398be
SHA512 7882c2c0459c1f2f1006b8839e964fe2290287d08c9053ac9b4de49fb66dd81d344644330b7fed3a96812d43bf295093c5cf40dbedd0e53f0571c76f64d91abf

/data/data/com.qd.smreader/databases/E-ZINE

MD5 ab5cfa7ba22af723ec58ff00a45293a5
SHA1 9e3566f0beaf37064e537590f49124e72273defe
SHA256 c4e4eb2d9cddc5b7e31ffa2e185a8db5b229201c29537fa5979623881e33fda0
SHA512 bead2a3b903bc223eccf977b2e96af48bbb9a232ad56af718ed0ac30f217f2fa4b49df3bbfe062390966e2d711b69d6aa103022c8028bbd64f9d3e8b45a36ee8

/data/data/com.qd.smreader/databases/E-ZINE-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.qd.smreader/databases/E-ZINE-wal

MD5 fa4ece774714f1beb898c64c09c2232c
SHA1 9a157a0bec4d5f3227a8e17a514dd351a425dfb9
SHA256 efcfc41ce4b252fb05aad85a853c58971b58c1a37d33e8cc984ce120a3ef112c
SHA512 36e138a9dc3b81995fc4b292709f37f4ef338920c59ac417e08ca65158f4e2cd599d7c7aa3507d01bd79f80718afaa02a69ac0f36fa9cf8d1f2571e0f4d3528a

/data/data/com.qd.smreader/databases/myHistroyDB-journal

MD5 167405c7b4254f29c070c36146fbf6ba
SHA1 42953ea5fd20d857b98c063ae44e4b3e3d177311
SHA256 d492eec16ba54e3e0b1b31ebf86d2e21525de5abd11dff757d770d57db9820e4
SHA512 811fc7d1297a41af5b7817d55feb14958645eec55d3171bfaec506ab3f9266e8e08a11d71d666bbea305c439ecc256b0599544f711cdcf64262091835dfb9e85

/data/data/com.qd.smreader/databases/myHistroyDB

MD5 3875a9bbd5168a9896d4eac5d478d32d
SHA1 85ad2a8f732cb7f42c6028ae2ebd9e6f2de614db
SHA256 a13400d8504c5e81e91137095715d91ac6602d53f658236349915062ce7ea589
SHA512 77ec2eb38b390c373d509f866439c6f17d3dcf13863bbb1806b92531b33cdbf04b0bb7b19c80b13aa423b451131b191000e82f1b25cb40c1cabde44892857a7a

/data/data/com.qd.smreader/databases/myHistroyDB-wal

MD5 f8368c0b3bd916d6109604a1630dffc8
SHA1 83330ef6f362742d12a89c15fd53b287262ca4e7
SHA256 c2f36c90f2aa2459ae2aff55589490c82e72276078c345c50208797014c686a9
SHA512 f7d8781bc554c6d914c5bd260218e5a5262cc2932dd6b678847114e5c7f36d932996ddbded7b4bb50b6a068c7bede5d115380546470a512192326e341cc0cc32

/data/data/com.qd.smreader/databases/userSessionInfoDB-journal

MD5 c8d064b1cf11901287ae9b186ebb9955
SHA1 c901278c3776be787f10dca3a59c0c72851002cb
SHA256 5042d106fbd28c2ca6b692c8f0949c995a0e92747cfcc0ee6becf60db6ac141c
SHA512 4cc6936f875956a9c593ab7f2456af5d940563586133e3d1b252c4837d51e200085cacffba6055366d8df8771c17f3f290b55bf39cd416d091a88d921d682d0a

/data/data/com.qd.smreader/databases/userSessionInfoDB

MD5 51dbfd1f58ef760a73c16b7cf21a172f
SHA1 ef79f5e3ceadb3cce7527e3020ef152ddddb5b51
SHA256 22bfc9b030df162b7994f436d6ae4fcf17a229c7835a69481fe52d2a34e7a1ae
SHA512 f6783cae912b5bfc7161ffe830d87e01eacc151439369d11666d3f3d8c24867d9acc198e670df467652596dcc0f9dd44d8f51e409f289a0246ff92d3ff5a0622

/data/data/com.qd.smreader/databases/userSessionInfoDB-wal

MD5 56f2c0a8592c0d4896f492f3d1e05045
SHA1 27259a9e96d27305ad1351b827782a7fe74bcf05
SHA256 a164b58f789ca066c9c842847fcb053cdd5e346f07c76d298a8b62157c92262d
SHA512 b6989f808f2215ae4c4e4a142d7843e29b0a5ef7e988f4499b2ef397af0e98a06effdac3cd36226506c4bdad3488d67da3e9e5af3d20f8f300c85cf733a8223a

/storage/emulated/0/smreader/download/__zone.cfg

MD5 2da2aa192a0634a1903320d880d02e86
SHA1 2944802d6d92a23103558c9987d077d3da3d51ed
SHA256 1c5b52c0ead5d34abb08c2c66039424cac56f2858765a007edaa373aba1d01f5
SHA512 1fbadb1fd26fc968f541fcbb40d5e40e32c9f3b8c7c58fb42103f3a44c6c77f20ddd53e0200b13b20ed2ca400251b19af5554f583b9a61aa001e4c09bbf0969b

/storage/emulated/0/smreader/超级保安.qdo

MD5 654ee64896ad5ef6b527ae9c2078b121
SHA1 af6c3c7a5ad1fdfbe83acfa7f08f101a6a290107
SHA256 8e488fbcc217f97999247d4e20495869fd7680a22c6adbaa457143bc867e1036
SHA512 03023b105df46f5d6301a16b5e746d9843a1f024f0a732090367fd3407a3676373e127e47f0e2c3bd8b47ce18d86f9e33abfecc46b0db0650a3059723c1008c6

/storage/emulated/0/smreader/极品司机.qdo

MD5 04f75cc0efefe092eef3e844e4bb9c0c
SHA1 61d75600166bc7574c1c7fe87d3483d1c3d8cd48
SHA256 2a9f61711d0393b0052c879ccd8d1a924aaf885b1af40e8b839d4f1626337b8b
SHA512 d95edf70b80448af7b6fff91319f8f34bf82a41b0c4727b74315caeb2b5d227a5da609e54bc526e4eb90d7cd139cdfab770a8ff7e28985d4acc371d955abba2a

/storage/emulated/0/smreader/神医天下.qdo

MD5 3a22da04e1403d1136ef6e90657c8445
SHA1 71bce25c0c692e4f913f04c70c320c30f6469955
SHA256 ad8c29bb52b3767444914f869b823e7be718f1873a2fb3baa6c500e678901e6f
SHA512 c54349e5f3cece9e3fb79eee6a14c27a5d9a1e1e7508f5976e2a994b3eb2162947f1a96df0a76ebc89ae20b38fd6ea7a89950d56a1bcfa1837462c4f1edb7a4d

/storage/emulated/0/smreader/武逆乾坤.qdo

MD5 e6bf3f5e2b50fdc6ef38926f105fa275
SHA1 f182fd8052dd62670b077a1bf993ac9776d8ef60
SHA256 1cfcd2260ef459a712789dbbd2b028a68dcfdfa4dac9c985597815ce89626fb7
SHA512 33bced7099d252ac0b38bf7146d62af3adda5e1f87489e8310b63f054c4d8f4b23b5f4ce7c8d51fd57fe92283bbb46bffaa34bc25be138f5d57920bfdde0c656

/storage/emulated/0/smreader/修仙狂徒.qdo

MD5 45b02ded0f38e612f41dd7e5987b0096
SHA1 4746862c7ff1e975ced553c50f4c9b5bc1ac7eca
SHA256 4392f563f9aad52f187942ebb0aaa7e545da6e08304300900814211b4b368b68
SHA512 394b69f853012d56acdf0eafc0a9812fedfeb37919399e11273394f385488cb9a9edf22e54d0f3ad9c18801c3bcbfb6ca69e7049884b004c1d3d55a5a105f99f

/storage/emulated/0/smreader/七夜强宠.qdo

MD5 0817e0a5b4064cf158b549a5f6ce2476
SHA1 217a07134770278b366185556a88505fca4ea8ad
SHA256 d3997f44651ac17314f3ec52ab2e6c6724a65a156a6f94e1b46c2c9e839d01af
SHA512 d29c4b5ae15b101ba97e2d07e5a92ca4c1a72f7bd9ec6198605749a15b300fae89cb7ec3e0e76ad51bb75d850be120e3a2e29c746483f31f1ec7790f419c247f

/storage/emulated/0/smreader/最强农民混都市.qdo

MD5 cb34ebce4b61716a32af3a825a9bb7ff
SHA1 8f2df3aa9b0e160d220019002d689a108cd45506
SHA256 1cf72ffb51242cc27255d3f6418e4d83849ac42dfc423b391bc9a2099af3c4aa
SHA512 88bacd1f5e5c4901124c8623a7ac3b99784d4a5a614d59f21944e21b2b55e399cf006b1244aa78c800795530b54cc81e4428e13ab97cc1463a5f583a643e7631

/data/data/com.qd.smreader/databases/book_shelf_item.db-journal

MD5 2b7d5ef9d84f51776300c089a0debdaa
SHA1 47a887df92d5c020047c9fc18b1ee63c83aa37d2
SHA256 2b5ea30da8140451d8ac9f560f5ea1cf90742baee35dfcbced4ab73f89e16a11
SHA512 09b2216b86d5ac1eea8d8c17e91a1e745f1dab77feb5a4416d846ed25778b29cd294407ed74d13fa6659c6f1453d4c22492714a3ca38195cdc1be6cae99eab4b

/data/data/com.qd.smreader/databases/book_shelf_item.db

MD5 456386faec935c42eb1e9c4bf6ce0285
SHA1 d4393ff4d9ba79ccd1bbf82cbcc3de98b02775c0
SHA256 2bc0187c68c45b2b1fb3b8becaf86e87beb87e0cf5dd623ab5d7448a80780bb9
SHA512 e142f039b7300393f72d08440cc5b99a20fac6d8978028c6e82dbd88267f7592483c53d29b2dfd65cae9519829550c6c38d09b9b28662089ecf3d13e0e3473c9

/data/data/com.qd.smreader/databases/book_shelf_item.db-wal

MD5 e4bbceffd1f9afd8dc89fbd053825818
SHA1 ddf3fa49941da64102baf5a5e7ff4fa2d12f4f65
SHA256 72ffb04dbc2bba52d89ede07e72fdb0f68561dc37308addaf0f16ecc9c876d57
SHA512 69cf1388b0a1ff781cc29cb46ae615aeebbe24de801a1b3be996790e34bab83f4b46c37240d53ca8ca107f213bd00403eb54c553cfe56e4bb5b4fa6084dc752a

/data/data/com.qd.smreader/smreader/Images/default.jpg

MD5 f26c63fb07cefa83dd0529122d60cba6
SHA1 5aab5f4b8e98e5324380696e7b99190691e4f4f8
SHA256 7ea728f4790ea2709965e1b2a256d3ab6508700beb49290cb5748ee602969c45
SHA512 49c11448367f5720e40dd9ac2f70da5ddc7fa46de0739bae6dd16c9af71e87ed26aa9b002e9c3f197c49183be6e1a995d5f13f709f36699232f58bebf8aa1437

/data/data/com.qd.smreader/databases/NdlDB-journal

MD5 0383d08da3763ae1b32e57db858c4b5c
SHA1 b924f148334ac1cf50d7cc7d84faf246c34422c2
SHA256 2a09ef1d860add17b60d384621f5890aad4148fc59083115d932d3b0bfbcf3a2
SHA512 339550fd0a0b78919ad4b8b804dd9c95c9d2c3af9fc3a9278912d39fcf5b7353aa095d2c99d2f30acf4688b70a94523f0a1f31a1cc8077c6be461b8add649de4

/data/data/com.qd.smreader/databases/NdlDB

MD5 20b7ebd1d91a67efed7892cc32f4aa34
SHA1 78611a6315cd264b19f99aaf13dfca143d5d602f
SHA256 3ebf578084feaf79c0da378154260f6718e8fd23bdb6fe6f07f6d932ca2d3087
SHA512 389404e1fac28f18b2f190adfa0942777c04f5416c117ab3884a764e98dd1d863d7b6350c5b94e4cbe6d1acff4bbd364c1994177f0dc420f009f67df59c62bce

/data/data/com.qd.smreader/databases/NdlDB-wal

MD5 d9b4f30b7f464fdfeed31c752b62ae79
SHA1 c02e8daef671d367d42feb522be35c05e8887ffd
SHA256 579292b863cda2ea28ec37c2e0607702e1fa29451bd513324823f99af5467185
SHA512 9768f35571a938e96bb9b97a46c0591eb002a2844f7541e2cc3ccf03006969934ac11ec8d4a9deb88cea708db55c592c0769403cba09576f4ca4413c4995a448

/storage/emulated/0/smreader/temp/host

MD5 daf3deb11e606ab6d48ae48a8c1a839c
SHA1 852c3320148d4edc5cc80a5d6e2ab3179b37311c
SHA256 d2a2b8fdf89a3cf183726fb475500780ee1e94133f8263bebc5be8dc1238f030
SHA512 0d0faa4528b82feafbd03c24d4cc15eb179ffdf846f591ad04e12cb9f13fdd546411adf965a98a55475bc5faa6a36158ec85424951230f11785e49261469dd38

/data/data/com.qd.smreader/databases/book_shelf_item.db-wal

MD5 63cc2ca14e5406cd81bebab396e5ed2c
SHA1 a94d3ef25cceda0f42fdd0391b22c5beaebb720a
SHA256 daf000c740ab867e24e965530f62ed8ba96509eba8b52f2a1ee544691dbfc89a
SHA512 f760817ece590d6e924fd64fe1ce0bcb525299fa78031726eec70ef9177f5063c26aa993e3ce70ee85c1d710942e193c29ca73ca2346841d7ea4fcb3ec149ad6

/data/data/com.qd.smreader/databases/book_shelf_item.db

MD5 a52023c3fb205aeb2941fb9883f5c1e6
SHA1 8003b5ebf90702e364afc998a1b85b81698ac566
SHA256 1a4fa24198312c2bf58725c4d7b304b9476668151a3b2bc9e323b0b88c8b3bb5
SHA512 b772b4d3b378340b4ae3259f055b3a392985792e0d8ce259595edca053fc5dc9b018249d7b5824ac0236e935271fa7d5e763f5a1082b508aa7ce6a35973b3603

/data/data/com.qd.smreader/databases/book_shelf_item.db-wal

MD5 dbaff5a04e8bf2ccbc4595c6e80ccc46
SHA1 9aedaedabe071984a7112e1b6d3b40df1f953e7e
SHA256 314101f5a51a70a305b7e8161df30f144a01853608f04844993bfee153c2fe72
SHA512 877596cdf957e89dea68a2baf9dc58277e2d9ad6c1a22ffb130e0a559753c15917ec016bafc9cfa36cad2020cd9551e71958b3e7af6321efb40a46e00ea06d04

/data/data/com.qd.smreader/databases/book_shelf_item.db

MD5 bd22bed1dd58ebf0a0a8beee3ddbbd17
SHA1 dd13aeb8da009a623451344550851eae40afba3b
SHA256 422e2b09cd3fa404a31d9e191d74ac27412448c5626e4d7d73d213918d0032e1
SHA512 88388136820faf6d649970a98c9226727d3162284789a80e7c57bb2c0b4cd943d7d4778cc34c9046db2b129a3b1e3b8453d3bacc39b6916e3fd919659f0003d7

/storage/emulated/0/smreader/covers/c0d33053e1ca47ee29b3dcfa25dabaac.jpg

MD5 893c0fdc5ee599b57edf94cf1643f3c8
SHA1 d6942dec391a997bc281dab07b2b2940c8fc2b2f
SHA256 32ab3d46ea345f5aa3f5ad261c69252be0a936ac2576d696ddad8c486f1244c6
SHA512 e656b0be7a69b022139903003a9a38e52bae6839c7027ebabecf88ceca8aee8ff229ddedaf6bfc6c68417a636efc882ea9f222861adb70b5c82598906c26a83d

/storage/emulated/0/smreader/covers/_-8074455167367.bpt

MD5 078608c54a93455f159f7e1868f55f83
SHA1 28a1f5706c014f10fdbaa6cb1f300ae3c48aa8d8
SHA256 532f5b550bc3195c5420c39e81eb3e356ab802207071dd445d38f239dc21ad13
SHA512 62dadad3275eb2c835c9bafaf4486c3352ebb393f6ba384ce04b636645e8f673405ff318320db516d66dafff0c18aa33a04362a4344c50938063f12f8c6680b9

/storage/emulated/0/smreader/covers/3ce6755251df0efd34a9559b97dec9d0.jpg

MD5 1c7cae0b7d7f0e672bc888c91f31f375
SHA1 7d781a07905df02a49894e7851b4fe3193e11c01
SHA256 69ef60fd9c79d278b05c30cdd38cc9a18c0733a918d6c959ad728a961b960ff1
SHA512 2ac324f306825a0351c0cf3a698aada791ab35a490fef313bada6df6b50bbfbc7cc93299fd6eb537d336d19c5a0a396c13cbb7ebfcf4cbc6ebd818b7b1ceca48

/storage/emulated/0/smreader/covers/_598366807277.bpt

MD5 2e3c54f74025957d26cc9973eeef727c
SHA1 3df7718a3d725ed16417e6923a95b647c39f1810
SHA256 8a3e6594c3f0f8b311d4d574510a5cc59e0f079043f3d4f949a3ac2ba668e6cb
SHA512 a18d6e931878fa7d0ffb9da09038a2d067aed7ce57193780279e8a8be80f9e30f4122cef55f0ec58458ee420bcf9a84c3789c2fb1331c58535b7b16e2b7164a0

/storage/emulated/0/smreader/covers/b34b46582569c9686770c446b21ec8c6.jpg

MD5 68b3eeb13fc0c57a68df0be08a61b548
SHA1 4292ed80a3fc52ebf1f15c5641d77bfc0f7a20be
SHA256 a286927954a6bb86769f32c9c286f00726c66ce7a7c5efff8773069a267dbe7f
SHA512 e390b7413358b1f7d7c8ebbdbc201ee0496e7478e0b727c78af93a398c22585fe512b12f6a6597973cf317f5b86ca011b9dd721fa9cbaedfbeaebcd4203c08e7

/storage/emulated/0/smreader/covers/_-5609062997349.bpt

MD5 b747556cc5925846dd46099e6d4e9d45
SHA1 020b02c3bcf8efd9f156e0ad87d45dec3cb11766
SHA256 8aa5b46c4bc3b03f68007697dab3abc864fe7a54442127995a58473703fd1c83
SHA512 05a8e1b4d50489d3f85dccc4f596aab2c3217880b0204c6ec82e8595b9d3510b8d63627d1b935757c7b5eb9ed28a0615b93eb91befd6e1e771307590d5df18e5

/storage/emulated/0/smreader/covers/887fe16dec9fc522b389f7b308c00f9a.jpg

MD5 ece2da7317f0912a52adff957f3dac85
SHA1 943d0fb2a5c4b93cb605db43ea44292f0d79198b
SHA256 02c55e37f2bdfa6e03459fdd2002f71c6ca10bb4faf1dfaacf924caf68f05723
SHA512 548c0f1a8b0de3ba8f19379f0121c9d50201c376bd2907fd1983609dd1772d83b66d2abcd9c1c781147b8a83594e9b378c8823f7064d792d7b78868208379004

/storage/emulated/0/smreader/covers/_-20274239316462.bpt

MD5 ca464e525cabfe7b7917566e6bcc81ad
SHA1 915a711ae88f64b4f1f45e7c96ddcf421181e157
SHA256 a662351100bda90cdc0ac25f3330055995db775396db5f52b45bc63b608760fe
SHA512 565444291767af2c47938cee9909f268609fbce60474c38ca6077ca743417baf7672104b30cfffc17ccbf016b1fe610b605a4d244bdebdc7c425ae2c9de1f9e5

/storage/emulated/0/smreader/covers/34265ef324d8a01a7203a5c23195001b.jpg

MD5 a7bd10a5d0f3d93898428098278dc944
SHA1 f4c87a5326d1f4664fa7c0e2d21235da07ae3f7a
SHA256 f7427faf3b5ec0b61198c31947ec0db164a4da4ef050f2affb5c218030bae6a5
SHA512 f5bce6fb8dac4b2c1a925ecf27f430cc47ded9f74beeb6206c0ab898278154f69bd371355c82e8979e781f4cc12aaaa84ff87be1faf871880171baafc24bdb91

/storage/emulated/0/smreader/covers/_-13814862286429.bpt

MD5 971d99882fe9c37d3c52af128f8fefec
SHA1 284b05643c5a9606243d9216717dbbb46e30021b
SHA256 7c25b2b87fcb7ecb4b1e355529d809967e3a92592bf052f372849e3b12c23b89
SHA512 0783f0f0e654c65d2beb4c44ceeb3ebbb5644bd69c5fc44820c0d9598218a12bbd322c3dcf8d6478da6f4722d15f3b225f1ed0dc4430f91908f1d8509bfccb7c

/storage/emulated/0/smreader/covers/55ca39f19adef3eff28302f92b2c7c40.jpg

MD5 2783f4a1f7b2bf634f58a63926f8bda9
SHA1 38b98b3f7ffe613e8b5611f24c42e4c93297f5e9
SHA256 531e33a49cc4db4d78662475024de2f306f725f25f166f0968bb9989075e7961
SHA512 6138d0fdc6ab3d2a9647917f193f6621336a71c20c6523b8f402fe4e698822983f021dd3e6c26aab099fca8bdf993f65a2576ad7a59b216b0b35361c0d4ba511

/storage/emulated/0/smreader/covers/_-7948288317386.bpt

MD5 4c4fd6c57256e194f94d53b00f7c8ba2
SHA1 952622b337ac948438b34a1b7047233b768a8af0
SHA256 da61969282d8b7750277c6a01e96b6cd8a336b55479b38da2d0d4f079682f2fa
SHA512 5b11d0cecc2c164321142cf9999c058b2c2830275335406b02ec67589c8ac716351399fef52bd68ccbf717b10a92b250b6db8d29fc2d3c52d7e9ca757c19faa3

/storage/emulated/0/smreader/covers/52658e6468e3d760af612ae69694f4a1.jpg

MD5 9a2e9b874dcdca64d52afaae38b60d3e
SHA1 deae4c977b24610675ba6df6efb6b46646bcf855
SHA256 ebfff8149ed9ffb613a216c0308c7a1ddc5dade56082625313d5ec48921ef775
SHA512 61e83df02bc597cc0d5c29af06dca6162db2bc9ae394f317a4d409e7febd737faebb0fe9f918e76e83282ad579d5d83c4289a5d5071b44e083000791bd90a5d4

/storage/emulated/0/smreader/covers/_-14423504617939.bpt

MD5 d328b15c04baaae58ce4826ba11bc342
SHA1 d2c69a7af13353daccfc75ce5b4c30bbcbeaed0e
SHA256 11353bb79a1b51e6e01ddb70250be90e9c6b2dc1538977fef555597467d8c59d
SHA512 b07e26433d6ed4c8a88bdee14e72b42111d402e87e714c7917fa654932b86b29ed7d7b9c40f3a3da7673b356acb23ef39d6378cb4f4ea509c74b59089937bfec

/data/data/com.qd.smreader/app_push_lib/oat/plugin-deploy.jar.cur.prof

MD5 66ba494911a19b36faad69caaa5e7055
SHA1 de9d85144e20d7fb9bc791fd93eb96959f70735f
SHA256 8eef9c2984d37cb5c6d3f25496686b3333e7c3190287b15ba7137eaefeac4697
SHA512 e55590a3ec26bc6ffee23e57f8421b5346751d0a32d2ce8eee94125c661b4789b48c107b94b6231286616aee18d603f81c3a5f41ee86ee2c99b3269c465af4e9