Malware Analysis Report

2024-10-18 22:59

Sample ID 230112-k1lfcafe96
Target Quick PDF Scanner.apk
SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
Tags
evasion ransomware
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5

Threat Level: Shows suspicious behavior

The file Quick PDF Scanner.apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

evasion ransomware

Loads dropped Dex/Jar

Requests dangerous framework permissions

Checks Android system properties for emulator presence.

Reads information about phone network operator.

Removes a system notification.

Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-01-12 09:04

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-01-12 09:04

Reported

2023-01-12 09:06

Platform

android-x86-arm-20220823-en

Max time kernel

2768468s

Max time network

133s

Command Line

com.pdfdocuments.quickscannerapp

Signatures

Checks Android system properties for emulator presence.

Description Indicator Process Target
Accessed system property key: ro.product.model N/A N/A

Loads dropped Dex/Jar

Description Indicator Process Target
N/A Anonymous-DexFile@0xe7912000-0xe79154c0 N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar N/A N/A
N/A /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar N/A N/A

Reads information about phone network operator.

Removes a system notification.

evasion
Description Indicator Process Target
Framework service call android.app.INotificationManager.cancelNotificationWithTag N/A N/A

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.pdfdocuments.quickscannerapp

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar --output-vdex-fd=103 --oat-fd=104 --oat-location=/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 142.251.36.14:443 android.apis.google.com tcp
N/A 1.1.1.1:53 infinitedata-pa.googleapis.com udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 216.58.208.98:443 googleads.g.doubleclick.net tcp
N/A 1.1.1.1:53 gufrayin.wixsite.com udp
N/A 35.246.6.109:443 gufrayin.wixsite.com tcp
N/A 1.1.1.1:53 gory.oss-me-east-1.aliyuncs.com udp
N/A 47.91.99.20:443 gory.oss-me-east-1.aliyuncs.com tcp
N/A 1.1.1.1:53 weco.oss-eu-central-1.aliyuncs.com udp
N/A 47.254.186.139:443 weco.oss-eu-central-1.aliyuncs.com tcp
N/A 216.58.208.98:443 googleads.g.doubleclick.net tcp
N/A 216.58.208.98:443 googleads.g.doubleclick.net tcp
N/A 216.58.208.98:443 googleads.g.doubleclick.net tcp
N/A 1.1.1.1:853 tcp
N/A 1.1.1.1:853 tcp

Files

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db

MD5 defff2d2526945fbed0ccaa8643c7623
SHA1 3428b42c2f5941f226fdc237365b7ed456cab6bd
SHA256 49220e13346febc4ebee1d76a8f9c49f32ac5f2b9e9271bbdb7ea5bc8229b00e
SHA512 694e0bbd928ea3a3290ca06ea608a80e080c238966d7f86185634538527b09e8a952d121d2447f6ac00cb5ac39c6346435702127bac5380818127e2ae7c56364

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal

MD5 fcf846379940d00e514d93a8a6c9e179
SHA1 a22da7b3b4ec417e064393f41bda4dcd989559b5
SHA256 ac10188ba1fa2c817dc002bfd4206e26d4645a9631a80448eb9939de55418141
SHA512 c5abb12adba03e49a310c6df2210b9ee1e864a6f37a33a96930e4beb2c7cf58b307e04283c7e776a80a4948004ad09aba027dbaa45bc029cd6b058e794c0130e

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal

MD5 7b95edc276a5a2287107ec714ee63072
SHA1 92ba8a7b43619b78354445b16dd1b144af07f0a9
SHA256 faca2e31ca42f6ccc1cd5811d088be13ecf2a47addefebd1835718a8dd5ba5bd
SHA512 1f438e38e1d638cd2a3b91691036e620451649d67d8a22702a2b851ec15f0e765fb07f2cc94a15bfc1a497bd5509a8c39bde0fa6b895298cb7c978d4592e0ba7

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal

MD5 477091d3ea47035b0109141f85ecea2c
SHA1 eada689d5cd91bc5b570c37dc868a835d86ec5b4
SHA256 2898aec991358aa0e576bb694762808d7eded7cc5d4503261fa2b21c3079c63d
SHA512 08f1efb820c06f365df591f1a85174efb36c6270656ab2114d0b73b8f7fbf7f98ce5e4f4740269fa15ccd1389936e14befede252beede1b4127dc25203eb51c4

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 250b4caeba60ddf53228405750ba66ca
SHA1 422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512 373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 e0432c6bb884ec76970463503a35fe0b
SHA1 f3daf88c12d92de685563e348b92bbe6d319df42
SHA256 2604bb9378672a2c846b85aaf8e1ff1a443e5840a6fe24ff787f9c19926da6e9
SHA512 4a6e1321e33b50591ad3f7ea6f135f0976bf80f90c1d3e884503708c57b0f145f2642e9c08b422d8803461b5101e122081f2b8276b14b2f4f18fef440f796e64

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml

MD5 21223e9184445fe043476484cd8cb1f9
SHA1 2b4813f849121d60ba35eb0889080668bb62c778
SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512 be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/webview_data.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid

MD5 29e0aa898b0087971b8646e61fe89be4
SHA1 c83d65f126d64088a0ccf2b69c5c89d723e6ff9f
SHA256 29bb239e15678417d20ac8d6146e4f3618fa2ca6a00cc6832619f99c5e11d62b
SHA512 9803751ea156a8b62addca1e0e7f4131c42ab19e1f7bb05ccb6e409dc27fa122bda6dda192a3a8570a4ba633453413369ac6bbcbd47b996f41a57e275dfea635

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data

MD5 dc79f9ce5f3ab5270b33e61119dfc959
SHA1 1844bf222a5144b513dcf2fb50a18c011701c647
SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA512 18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data-journal

MD5 3c54d99c6a7ad96bb0ff3624e8b3701b
SHA1 ff96f53dcbfa3ca405cd4ef47248d017b53c3247
SHA256 34415d0090565fd5fe4fa9e6a7fbb6d5abf4ef631e301bd60adf700ed11105ed
SHA512 8d6b2b06e2b07e1bcae9cf8f0d072576b64077c4d8cbb26d0e59c7f2634c08a53a710ae579fac9760344787acc6c67d67db9c87d56580a910f1394201deea265

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index

MD5 93027d42b314432c4216e6cfca48b384
SHA1 43448dd8102979c3926828182579691945eedd4e
SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512 a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index-dir/temp-index

MD5 8087447866eb7ba5cb78a1687c43f213
SHA1 1c1b5c15b25bcf1e2d1f8ecf2be986dec161f11f
SHA256 b69b39ae08a0298948a2a22d4f47225e11cb431bb87b378a7d79dda53beffe0f
SHA512 55a2c3e9efe567af6874a12be3e741adc52d2e1a9f28f8264f4ec6671a069b5aad1455798d2af8b27c27806b7b8ff3ef70e133f12b03365dddd7dc6255beb654

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 e3406461d4e47460597077a7cf29728b
SHA1 2f51672047febd02640e654b6b5e00050fbb5152
SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
SHA512 5ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 d333d060ada54af7a7c9706856c98dd1
SHA1 faf7456a4b03fc64e2b420e2c63ca7df709d78e2
SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
SHA512 152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies

MD5 1435b46c79d71a60a1cf0227279d0379
SHA1 3e9983288b794be580414f6bc543cde97164de15
SHA256 23ef939f05b4f615d96ef469d6814ecbd764dce2ec545a73f83f16bbb24754ac
SHA512 f79b675f4c74bd09db94bf327061f2ba64615590ea2517bf574128a875132fb5d8c33b4e5d15ae63d71b516adcfaf2c088ef0080b7683575846075dca77c82cc

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies-journal

MD5 224cf09d2ffbcd8c15d69dbb1118ecf3
SHA1 8a5d0fc7fa29f4f1a7071cfb288d7de8ffee1099
SHA256 dba54ce932086a7e44a20e11d58e95c041da0e43b91d87855d4f70cdf566882d
SHA512 9a90135d540f62907a4cab992ba35760902418cf170085786189d72852799d1c113ddad3409a6fe56720020036ff481686b6a2249530d4a9fa5588923f008433

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index

MD5 93027d42b314432c4216e6cfca48b384
SHA1 43448dd8102979c3926828182579691945eedd4e
SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512 a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_0

MD5 d3819f2cb9de81637c591d1b305e3f9a
SHA1 3d9e9b6b0a4e31393e9863d5fe811d2c0f36d222
SHA256 28b4ab49a4377df32052d7c2cdf124412c36535d99fcc64c0a607e50ada088e8
SHA512 02b5e591593edf59fb826c9d07d2b81ca39201114413c40d203de6bf74cec6919208a0ed264e753de05425fe88a9b23535609faa585cc9512fa0c852dd7094e3

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

MD5 01abfaa3cb46f01a9b1b8e3380bce195
SHA1 d03d9c02a6883cdd8df2f5ef5fe3be1e329d7dbb
SHA256 0dfee0e0b8ea303631cfe2eb23353334dbcc0664710efd504bc927350fc6b70e
SHA512 760d5431d974935af31474c40e347ac2968c150ef87ab4400eb5efb3ce52db27a4635c08cb25de0ca9a573cfd649118eb086efbf68f9b45421104b293821c6f1

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 f74eba087637b11c41879f7acbe22374
SHA1 904260ab7ba6092739376d532a3964dfc130dbac
SHA256 768b3085836ab8fb58da17904f2e221c382d6082e7d34bfd0faab1d81e8538c4
SHA512 0d947db25b9891ad78e48e5c8912ea8c17d8c7c80a41573497873c477b7c01084d418f9baeb5474d1cd8373c158ef9f3e44c43ea69d2fa45a78c9d11af7ad8ab

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/x86/1582435991586.vdex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/x86/1582435991586.odex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_0

MD5 c18fc7e0545a976de744c8cf7163ff52
SHA1 c5d49960491e54c815d0adc1fe5655747b9c3fec
SHA256 a16d01c3c73f36a88c2bbfa337036a04f72023a8d5c57fa2b2aa0c91afa5373d
SHA512 f804a20716ea0cf459b4b2c52fcfbffeaddbf313ee2ed67f29d02aa9b9684214b8c4ae92aa638dc83b29c59832442e0e82c3286231cfcf82073d0dd97e40b69e

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 6a47b29cdaafd523b0f5d99285af28ed
SHA1 7839c194f5ed6bc2471ec659e4fc2ac22f33810c
SHA256 74c8b205766682c26fa57fdf6bb3ae90c88a53c4434365105a71c0cc1b7723aa
SHA512 3e70241fe735c4bca1ad50cbf41dfaabe4f7439a0fbbb0ecc0b483070f04b61c1d10e95d4e280a2e90d51a1f34f798171e044b3635599361b3a96cc65acb4a2c

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 55ddff70fe6a18e4c21d49e9f892d269
SHA1 37944814ff5e967d423bd8ef52bb18cea594ed83
SHA256 649cabcec1ae46e9250bf9e9cfed82f8bb3bfb8dab14e2aa9426b7ee1e21d9a1
SHA512 a0cf5f06c2a1a0a420c01f2e454a11a5ce9c39fb2cb0026f0c78fcd15725737ea4c0ad3116f44e988464e678d84c82da9da3d2f33dfd3a4bb6dd9b8c6a6ebd15

Anonymous-DexFile@0xe7912000-0xe79154c0

MD5 665767f2c11ef8f609ed38bf23d5db97
SHA1 cf7ee39599a508e83a9dc49e55c48bc8c2846591
SHA256 dca2d34d6881cfa25c089d49e7f0e4b4fed7851e8443eae4ac3ddf9b4fa5107b
SHA512 4353f7c251a065fbd28ee71b1d0193b2cd2e8f57d2ef6e2bc6a1b7be65fb01f4415b14a8303970f183ee02635b97b0a3f26df22fa5ee58f722ec7895db907511

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm

MD5 3e314b1a29a1fa6ec13b1ff61e491df3
SHA1 b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA512 3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm

MD5 3e314b1a29a1fa6ec13b1ff61e491df3
SHA1 b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA512 3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm

MD5 3e314b1a29a1fa6ec13b1ff61e491df3
SHA1 b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA512 3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

/data/user/0/com.pdfdocuments.quickscannerapp/files/oat/zzxqmsm.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm

MD5 3e314b1a29a1fa6ec13b1ff61e491df3
SHA1 b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA512 3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

/data/user/0/com.pdfdocuments.quickscannerapp/files/zzxqmsm

MD5 3e314b1a29a1fa6ec13b1ff61e491df3
SHA1 b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA512 3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 2048eb6124a452540ee51dae4145aadf
SHA1 d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451
SHA256 105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864
SHA512 bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_1

MD5 ab9e996837a654d102e8b51b1f83f962
SHA1 f11db24516cd816076b3ae08f3070e8bfb5575b6
SHA256 21ea49139c02fea335daf669c2a186532a0e70b86081626eebb6166d02386670
SHA512 4a84d27736832ab12b486d8982a694e9d189f01506a905bd6c9f6f6746c5f253178c436233cdfe19fef9ae33cc43294d17b707b570657460f3d9ad17920ab904

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOG

MD5 f0511dd9be840357f08a6e77c6ced7f1
SHA1 75aa833e3b3525f4dd85478926535c78ea1b730f
SHA256 d2b503816f01458617905d54bf5c97803acb07cef3e4b610ca6fd92482b690b8
SHA512 964db1fc6ff9f68757c010ad9cc5fd441ccdb4d95cdb65f7a31d96a6136764d18c6cb55e8274af1d91f965560eff5fbb1be36f8faa85bd82c901df4d8c076380

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000003.log

MD5 21fe96821978b7e3eac608c8cef893d8
SHA1 01779e0aee03f03b5504c4d202911a18629f669d
SHA256 d1a155221bbee048db5b6d696dcff857590c975d3021a26032963b733cd24c52
SHA512 17c0979595d625429869667ec585164209fb4d6e63635cbd85e82f93c04086abb9f98c21b64a06acd39caa17300cf9872ea32e6c0b323b0e802167e7cb572fa7

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_1

MD5 9d868ec4ea120b5f219cc94992cc6f3b
SHA1 cf22a372f7d91284e98c02344728715e1729af37
SHA256 7036574434b2df5979293f8724222b3298c60d0077ea70a78a273a13c8361522
SHA512 65300671abc441d22ead9158535a05982ee14ccb0e4d2026c1efc5d60897c6ba0942048ac9d8e3ba7c5ce1f7ae8d659a2a835c4a70b9fd9d224f5153dfa306ee

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

MD5 eb719422d5b543c9cdfaf8421c086485
SHA1 19d44e92e9a0b9515e77b81bbac788b57a30993a
SHA256 9f9230f1545f0e8632beca28d33ca24f4555e21c7cb068f88dfdb591dedfb8dc
SHA512 4e550287a217aac13414d664d2f8a1bb1934efe596858a4f4773aa9e170cf332248640496921abff5fd03b14bc4a2124ea2a4264b557555c6162db2ef2087c8b

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/bc810d9ce0332bf9_0

MD5 be43a6fadc8f9731ca492e7c69e1f359
SHA1 c14bec4dbba9ece1b6986ebb793d4013d2c0c507
SHA256 94f47ec0edf04547d49e20b7c7fa01588895a97938187062d9b34c11d7837424
SHA512 099396c0576550f6d30e7f6860d6ec3a5c77183ef8bd1651c09dfa3700688c41c81d8b1334831cefe246281d559d964bed2159c44e4cf1d9baa8231f3f81d2b3

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

MD5 58fd1c3f8abb9c4e57882e4b113a55bd
SHA1 d7c177fe3bd6c304b040eaf8c73f87b2c5987758
SHA256 6b6124399d168ebff4b52bf959c33f4c174d5a13eb22075fd7d8fafbbfa6d0ba
SHA512 2bf946d58756e98c16ddafa49d6df6052dcaac71a8c72f16bded4aa54bf334e3d1f55adb456f2bf5b807b19a4a4a1c6f83f9099f8577553b7757f4311001f8f8

Analysis: behavioral2

Detonation Overview

Submitted

2023-01-12 09:04

Reported

2023-01-12 09:07

Platform

android-x64-20220823-en

Max time kernel

2772096s

Max time network

145s

Command Line

com.pdfdocuments.quickscannerapp

Signatures

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar N/A N/A

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.pdfdocuments.quickscannerapp

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 1.1.1.1:53 gufrayin.wixsite.com udp
N/A 35.246.6.109:443 gufrayin.wixsite.com tcp
N/A 1.1.1.1:53 gory.oss-me-east-1.aliyuncs.com udp
N/A 1.1.1.1:53 safebrowsing.googleapis.com udp
N/A 172.217.168.234:443 safebrowsing.googleapis.com tcp
N/A 1.1.1.1:53 accounts.google.com udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 142.250.179.162:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.162:443 googleads.g.doubleclick.net tcp
N/A 1.1.1.1:53 accounts.google.com udp
N/A 142.251.39.109:443 accounts.google.com tcp
N/A 1.1.1.1:53 gory.oss-me-east-1.aliyuncs.com udp
N/A 1.1.1.1:53 ssl.google-analytics.com udp
N/A 142.251.36.8:443 ssl.google-analytics.com tcp
N/A 1.1.1.1:53 xicikzavwmcm udp
N/A 1.1.1.1:53 qmcdwacfbu udp
N/A 1.1.1.1:53 ugtpejv udp
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 1.1.1.1:53 ugtpejv udp
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 216.58.214.14:443 android.apis.google.com tcp
N/A 1.1.1.1:53 ugtpejv udp
N/A 1.1.1.1:53 ugtpejv udp
N/A 142.250.179.162:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.162:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.162:443 googleads.g.doubleclick.net tcp

Files

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 031a58abf3d09a665df3ff943cf18e79
SHA1 2a89215c77e489c4175d4ddf70f73bffd1f445d5
SHA256 603e914c2f37dc045342afc0ea702f6b4f5072e64f3d50d3c38946f932112a70
SHA512 3ecf2717c2457872f65de939e12100934da685ced66ec58ffba4ece6d93adea4f04a6f47545009c762c43240f2336853d67219d9f1bece3034bb5f0899a6b69c

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/webview_data.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml

MD5 6ef709b8536878951e87c29a1518fc2b
SHA1 24376c70b00152501b3d98df61fa7db435339172
SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 7311330e83a86e6f4f0777298d91d81f
SHA1 4df964d07423589c0d2f83b9a3fe848b7ad1bfdc
SHA256 204e875ea416df1e96807f848d1ee840c567a7cb741e40633be055ed6aa15117
SHA512 ee8d2ebf13d49eb0d771e708d0f0ea8d67b6f997ddd76d47c9ea1b9b47f69d25a688fdecfe1a16812c5bdb40f2a726b11846b5f16b0d7e2f9fd84cc5cca96589

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid

MD5 e9652dab020657fb2a97798d0af7199e
SHA1 afa6ee8d5fd755ae85d00f9ab9bbb5c025cd8a98
SHA256 654c768a12a644c594ee52462f366ddf6234200d69993a56d511518ad224d097
SHA512 f327647fc85e988beca7544d1cdfb0ceb02c82aa88107cd1d5a42efc6ea3603cb06c076c709857c989a73c702aa51a8d3488e1eae61b63b336f6619b03ada371

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data

MD5 b663831f8cc130493476d94f2d7a5330
SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data-journal

MD5 a1700b133133de9a3e70ab8df6a220ba
SHA1 28a9a358aa55f8f55539f1886a80f5057a055c15
SHA256 9fb073d44e8818e61c450f1bc3463160e5fa779668a210e9b921d9297d1dae39
SHA512 93a5fd6bec6bc1ed316d6fbc5dbe03247967acbdb132bba20eb4b0ae10e4c017013206ce1c4c615a12385abb41dc252ba8b2acb99f6195561b8cde4c50aa2277

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 c769161debfde289e17cb801f0d105e8
SHA1 8498811eb343e5083e4f91dfe436d79430bd9d87
SHA256 40c1830ef407da123074d9f69302fe736ff5c624e03a6ed95b8b491d74c346a0
SHA512 4f15ed7da25391fa6e8f1ed2d12edbc9c30b28277e3c60bd708c3e86a3b9aea8d68c7d0276875937b0d9742f004ae42d6523d35c1b339c961d111d8d82b596b3

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index-dir/temp-index

MD5 137a03ea9336bb3947549eb1808995e6
SHA1 031d08fe7a23817434419abad24c89d641a6ad29
SHA256 e79af463a8a7eabd1f7835f312eb061c52d23864efc2c17dec33d1ff64ebab0f
SHA512 a0e73552a7b211e0a87a3db35f38ba9340ea7473136648b2919bbf7871906c3b6617690d1c685fc3996e21f7a7b7d47a4d8a7b0a95420cbf926e2c7b879daf79

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 e3406461d4e47460597077a7cf29728b
SHA1 2f51672047febd02640e654b6b5e00050fbb5152
SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
SHA512 5ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies

MD5 166b71053e98ad18a7cbee11fa70d210
SHA1 e7c01e6c2de6d3d88ab0c234cdbf29323f6c2b55
SHA256 775620fbd1142032702fad654b7f5809ba04eb90e126511c4595a1c9bef32fb7
SHA512 e7b65b442c7ad4a6f5d25c9f7136e8a5a3bec59c993202c967812dbdb6682f7320214e905cded79f45f9902cd23b04524b997f476f98a44f477b1d184a6f6049

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 d333d060ada54af7a7c9706856c98dd1
SHA1 faf7456a4b03fc64e2b420e2c63ca7df709d78e2
SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
SHA512 152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies-journal

MD5 c9f8c1cd01c58d9062bbfb90b4d8b7b8
SHA1 b11173a6855ff4d05fef2d9566c8504c8f610ad8
SHA256 6afa0b120ef9a7e83b7014f9be59da7b2785883b760e5579740e4da68673433f
SHA512 1bfe06c7d8a7d2dcac5ff3bb4a7214147178eebc5c690c2fdf17cb5ef6400c0706e410737ca0a2db41bca3fefe2e74c019acb347ac58eadf2600c0405acd9217

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_0

MD5 86877a06b30f852ca6871d56de3a3c9d
SHA1 d92593b92899f2e6769e0ea778d7ddcae3218953
SHA256 ff413556b78a6a12744eb28f0575a1fb59c57261910ff164fcf93fa52ec233ad
SHA512 a8eb5ebcbc50d8e3c824454fc2352bda4ef5e0a48b4ac50d5ecdba81be5208618e4f9af8fde339457f0c00ae95cdab5ef014c2d79a5b15072568c7ab40840477

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

MD5 486ceca406bd163eddf7040e7b7f1193
SHA1 cf7e52648825321890fd4d93b8cb83fe85e0c006
SHA256 5f257328ff71443ddb509cc7b07261b53720850624ac5c51cf86fe4a1ee05aca
SHA512 950217bed5b53b689290c962d2b5cdfddd9436ca095d9dbaa0427dcfdedb13c3fd5a2edb71e26b8eb3cbc1665a3e478b4b305646327c9e56c4a0fc6f8e5a2ef3

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 1b00303b2eeb1a33b99761d2ca5635d3
SHA1 8ff3b0ea0cf9ad3712e1ecb37d21c56a4f86b484
SHA256 b4276a3726af85c2f710b8947049e363a52aad75cfd0127c3775f893700153a9
SHA512 3daf2e7560953ad0ce8a2fd98a95a80662256c8bdf005a7529bea42375d2103dc60d001f10c0571dcc245fd42235db505bd9a4dbc4405c138d6a0a844b966e86

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 7193d2cfd62a4650218f625e4f98985f
SHA1 55212c410521952ee0ffe0214e85671c10371d48
SHA256 e19af5e811fc610627fabb46d45bbec55c6ab8a7e5d519f2f2191c3fb38a60af
SHA512 0331e7efd6a482b6fec11aefd0e7fe3d2e3ba399bf10142f45fbb60cad8f649e660e12e44eecb882a38974c47782165610cbed3a82b74e40dffaed989163fb39

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 5992af1f3dd4eb87af20b4c55b26e5de
SHA1 cc20d7438149e3b43b0bab76d3157583ec5bd4e6
SHA256 2955c491b28a39405e0567dbcc0297358b0d2cfad1a0fe5570c430fc3451dec5
SHA512 5033c9ccbbffb6e5d671bc8129b187f822280830fe819ed781221384c29cbe1971c4411e953ccf370c58fe9793fd2a44e1e35a1e3ff72edc8839667de6191781

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_0

MD5 c94bf691d09579a994b95aa0783db317
SHA1 6c027bc207cf3cc69f4f89aad06318d76533c8cb
SHA256 25e0ffbf5b4eb96cbb5ce0f9dcc7b6cab9cfe5c3fe981e24f837727e713541a1
SHA512 96291dfc57c06e6c5b0ccca0b56fce0b28e35ee00dcc2e4e7156f9811bfcc32bbe7e13d0aa9824564bfeeb32389c6a1239a919d11547ab4d5fe22a2611495021

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 f52ed00f8541e98d83eb2f1212b4215d
SHA1 10c7929e9bd60a378db7da3306604992c9dd965b
SHA256 aa03bd7674aecb8fb50d5559d56e070d3024cae8c3aedbe8a96c61b7c5980892
SHA512 9a2598ffe422867802b9a470f020af0223c7521e7d8f1a39b4661f0b970d6558a70d39c4a808950c82dd6597964801e731e1f99a4f0dd61f2527c809fef88d3b

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat

MD5 87507ac873bec0d865eeba796e81dde6
SHA1 6e9c070c0cc8000f998ddbf7ab4b983d968fa043
SHA256 1e246a799cb7e91fe31d70bc23e0882350a2b6f3ea1a3aa3bc2924571502a2ad
SHA512 8543c53415bf681134df801648e1b72e3b3416e1af32a145129927bc5b156de7503b58cecd2b85992b7d3b4f2d744733faa161b2130f6f89ed9a6ddc94ead342

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/.com.google.Chrome.94r8p3

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/8223efb232e7bbbc_0

MD5 f57d3c7582e2ddbd6afd64154c2f37b6
SHA1 e945ed330a68ea55d66cf92560abe5b10f9d47c5
SHA256 09dbf5da28a0f33234fc3a151e68d3cd92f7e80d20a9b50e71939775c3bdc166
SHA512 e1989a0d77b939e2313041955671f9a9b6cb7cf3b334e6ed042cde54fc6678903c183e8b72859333156981a49660b71c3d830c43a65f30f4c0532b806e80abb0

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOG

MD5 e089352626e97af3f3b6f27dffb53c79
SHA1 9458e77fb6e0b666dfd2ccc9104ba914d2690c44
SHA256 eb6390c919453f361f9c01a8b90cc5ae54e7afc3fb418d25f524f8a7ace81d6b
SHA512 c056d7d6cfb93b71e79369b8ef83186aba9caa4437ac295bdfbb3d3b303890b37f446ff3c23b13b20828a770d1515a75302f0cb42ec67cdab071ae716f8f41de

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000003.log

MD5 d067d3917114d9d04a14da14687b37ed
SHA1 15f73e44a21cdc369cf9bba872dab333c192d4b3
SHA256 01f50c030d3508a33a0e4e824d86e1255b5b4072d3decf123fd49a5b6a71a91b
SHA512 1f788ae2fd139c292485f358a489e5dbe2cdffe2e56b0f04cd8a7891524d2bb3527cb0ff7cadaa76f930ff390ea98534760092f9db3db854998de3ce81cb6203

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0

MD5 049a099d8697911236c1834a822bc017
SHA1 cbe268ed79ae883ded1e79c8539b1185f0948e65
SHA256 92e8107184f8ee5762c7cb2c82e9966722c9b429d12469a950e5add8cee9a577
SHA512 9bf11070a3dda967f64f67b52e8d1836824d27b5b795d65d98293773d4f655a0725ed089db86320119ce3ba761342d7e32dc9a3d37709ef3732ba7c17ec17763

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

MD5 ea5d717bb4bf41a802ac35caf56a139a
SHA1 f09582dc805b0da4da2429a7fdfd02022f913f00
SHA256 00b315f4553dc133b796ac2d49b08ea09c75ba10d3b6b8fbe6073ee6be1781fd
SHA512 002c88a1ce316aff908a95e719f77472480d31762de614412fc6530e220be888474dd237a0f7626934e0a3eaa17c387e036a054598445bd35d0b75b2336730a4

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/bc810d9ce0332bf9_0

MD5 19d3e7325a95860523b523393ce43063
SHA1 e0dfbff24d5a27c6875fd2d486345d7afa0a2ddd
SHA256 c6a7c09af3119d4bc3d2a545f7c49b1eb8c209ef54e411ee33c453cf4b00338a
SHA512 9b11f5d9504963142a5d837b3acb8f352188ad851276728997254570242559f0977310187da234694f1b5ee3f74a1fe2e598ad4151c072b2105f518bfc47708f

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 80d35d854bdce0e8a679515f47e6f707
SHA1 c8419e06958e06516851808d38cafd685e0a0b19
SHA256 b796b21e9b516fcc635d8c88a7610a03084b8b974958a0bb943f909db572cc29
SHA512 2ddd88a573c222b1cdfb82b8e25be661ae78ff92596cda2fa086798cf6fa8defdf055f76a0817bdb96aabfd0f84ddf1b5f8ca933e18c03de7feed934204d2240

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

MD5 92858c2e243d7960d7b7feeee150523b
SHA1 10764ae60b22375495b9e182a8249afbbd2a02d5
SHA256 2d1500e675c806339b1179394040c00f8df596e4e4a6da921646d9635a66f222
SHA512 417ed0a6b8971b20d15630240d9ae696a741fc16e015ead580c32a3696fa3d261d99909e417d5f12ebcc88d7caa30af961ddf1ee571dc6c082aa4a4c40b51bcf

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5 32305c3f78c3b014a5d80b642b494de9
SHA1 4a409bea24a0f8ec1f41fca6cc65a5d3eb0fe92f
SHA256 65f4cf3e788a9cc22e591f602f03f29e934d5138d2d22e48834383a8e5b6227a
SHA512 11afc6773f81eba968066ad3c7089cf5c799f924ce5c813df66c6121895b171f01de1d1b41145a5483d694dbabb6b1fe8be2221bdc177a2b3d28227a14af97f2

/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

MD5 9b1f8b8c13434c173aae99bdfbd5ff46
SHA1 a940e122dd4c52e548c8ad81a76be73c67045b02
SHA256 03930576c11f14022cbb7aa26128184913242ce9975a605582e3d120b6c9785b
SHA512 ba71faae76fdc970d913b36bab53593804f7e3888a757354783c729b055b357a1ac7a5547bba6b8a8d98cfb4284b00ef19932226fc8bdf365447e3f8cfc6eff6

Analysis: behavioral3

Detonation Overview

Submitted

2023-01-12 09:04

Reported

2023-01-12 09:07

Platform

android-x64-arm64-20220823-en

Max time kernel

2772105s

Max time network

136s

Command Line

com.pdfdocuments.quickscannerapp

Signatures

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar N/A N/A

Uses Crypto APIs (Might try to encrypt user data).

ransomware
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.pdfdocuments.quickscannerapp

Network

Country Destination Domain Proto
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 172.217.168.206:443 android.apis.google.com tcp
N/A 172.217.168.206:443 android.apis.google.com tcp
N/A 142.250.179.130:443 tcp
N/A 224.0.0.251:5353 udp
N/A 1.1.1.1:53 android.apis.google.com udp
N/A 142.251.36.14:443 android.apis.google.com tcp
N/A 1.1.1.1:53 infinitedata-pa.googleapis.com udp
N/A 1.1.1.1:53 ssl.google-analytics.com udp
N/A 216.58.208.104:443 ssl.google-analytics.com tcp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 1.1.1.1:53 gufrayin.wixsite.com udp
N/A 35.246.6.109:443 gufrayin.wixsite.com tcp
N/A 1.1.1.1:53 gory.oss-me-east-1.aliyuncs.com udp
N/A 1.1.1.1:53 infinitedata-pa.googleapis.com udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 1.1.1.1:53 googleads.g.doubleclick.net udp
N/A 142.250.179.194:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.194:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.194:443 googleads.g.doubleclick.net tcp
N/A 142.250.179.194:443 googleads.g.doubleclick.net tcp
N/A 1.1.1.1:53 infinitedata-pa.googleapis.com udp
N/A 1.1.1.1:53 infinitedata-pa.googleapis.com udp
N/A 172.217.168.202:443 infinitedata-pa.googleapis.com tcp
N/A 142.251.36.14:443 android.apis.google.com tcp

Files

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db

MD5 5a621faf40dd05d5f55201d20ee7f808
SHA1 ef655ff3ac151276b85085d01cde5bfb52c74ecc
SHA256 ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
SHA512 4de7d77332e1484df9cd641d8ae08e3c94b2025b8179094fb97fdac5be4b78734f29b4ee34f60de45d0637b7ffd045ce8426195c183ac130c65c49f53caeaecb

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal

MD5 1762bb819df58f79c4b41baa85cb2b05
SHA1 08ff5103fdc246e9446b6bdf0e425e3cc4556a4a
SHA256 382f25e5046fc203433bdd64d62b26c90211b0e53cea13d0e615ce301f06dbaf
SHA512 76615dfd2a0aea0604a49702c2792b0a3b6b498cc8fa53782698a67633e7ad4f320be829a33aca0d9b7eba5cbeb92797c3c3e46a403c510d6ce8dc4b9349b5d9

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal

MD5 60e6311a0efa24eb553b5fda740b8e9a
SHA1 77fc9551b4172bd154d490ac1328a7222ef1c21e
SHA256 db5df1bbfcabfed58e801105b0f906809a0a1764d7c69569f3da76f27b7916e8
SHA512 db95245150c2abbda15293403c3c75b7a970e1656360f412562504dd7e972cd8314e0308e63616716aed778fbbe1bf83dffda635e45cc61e3c56f3b184cdcd8e

/data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm

MD5 4ae71336e44bf9bf79d2752e234818a5
SHA1 e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA512 0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 d7b87c43125e0308f48681504ea9b4f6
SHA1 be42f4285ca95f0a1f8c3bbd366851d4913a9b99
SHA256 56343e3eb05b82287c2c02ff1a00c8e8dd9a7e090388ec5ae7bf2f842ae4b92a
SHA512 42fb12fb20861b68f3ddb90f64cbd4021b32cf44d3b90e020c8622d5d026c1ebac92a2bf6154c9fc14abdc66893be0e073314de7bbd77c2d3b50141e64b56dda

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_seed_new

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/variations_stamp

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/webview_data.lock

MD5 bbe5e29baba7a7794d8a28cdb0d239e6
SHA1 4f05b1e93b23a6b0fd05a8da7bef1a182629747c
SHA256 e2cfc89e10d493f5d2a0f7da9794d951e0caa27069537309b4471dd1b53c64ca
SHA512 a31bd8c4e84ec1662d050dc6757b3715b3477e6b7642cd04896366e499fcb101f3d7b861838df545f548c7071de1fee87fa3b2544efef0f6be109418caa663db

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml

MD5 97ccd9a2b2063143df56b6937f961ca4
SHA1 5e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA512 86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Web Data

MD5 a48cd9324b1f8754b07f00d863b840f3
SHA1 11c6614775b35a58f440971dfc87c8aaac6d6173
SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA512 35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Web Data-journal

MD5 d55d0458a15bc2ef520b8305b4e1d0d1
SHA1 ec747fbcb23c9c6919491724ba17fa9d7d6080fa
SHA256 776382485fd231488b44afa33d43c3abad3c7848b5fb897e487ab3e88844d187
SHA512 1f83f90676018b317774d3a9b5774bc231d92c3f1fcdc6d777900d4ff628ed203a6a46f578cb6a86f2dfe85f79d7c64b95ad3a6bb5d34400b948c60ec737121f

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/GPUCache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/GPUCache/index-dir/temp-index

MD5 911da97401427c1ae9fddc84c4743f2f
SHA1 c575928795e019576ae8a710849a15ec7b5ac416
SHA256 ed0f8f012a1b2fa465f2c75c95f0ba67035aa9c673c0c2827b3f8de0368f1046
SHA512 776f9c4ca306b3e9060ba9828fe63def6800c782d94c588071c86bb16195f39542e643ecc7919b60bb04d7f0af0545162b982b76939158a37ad3e23767cf025a

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 e3406461d4e47460597077a7cf29728b
SHA1 2f51672047febd02640e654b6b5e00050fbb5152
SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
SHA512 5ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

MD5 d333d060ada54af7a7c9706856c98dd1
SHA1 faf7456a4b03fc64e2b420e2c63ca7df709d78e2
SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
SHA512 152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Cookies

MD5 dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1 ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512 fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Cookies-journal

MD5 f37430e33b4b77a116a3b6167d466f40
SHA1 13a5fe65f2f8541691338ac3f4c71eb9c92fa2df
SHA256 87d09653e7453019c7c7ffb3a4172c7ff56783a01490a8159eb4c748aabac8c7
SHA512 d42afac52d1be4aa538d185e5ba8cb86ae23d2853fe13230d87a7a765e43bd72282e1104ba24d459f20368cd96c8f2f6d3bb177023fe50cc9d01c10abdb92a6c

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

MD5 2cc7e4d7d738870594367777e286aac3
SHA1 5c2f6a33379a7e513362ce9ffe7520c7c2d342f9
SHA256 129881bf86c464155cb5726e921161e66a0335a8fd0c3ba621b0529e0f9a97f9
SHA512 14fb7c4c87f8127469702509c8b8ef19f2ecb194b608ee5d85d1980130a55dabb2645fa27fe493bf42163659a3da7f9ecd66c242f0e98fb19567f5d24e0806ca

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

MD5 da8eaf665df9cf06e5c9d57b49d8e267
SHA1 6a1b6dd586e62c666eb1a5f866d4ca159ea906cb
SHA256 b95f27a0c2728f8d005f362acad71223d4fa0c351b2434da6c195b52162b34ab
SHA512 ce470a6ce3304e2082e982d57b95cd8f87b4a0d4f57254fe161a5e2d2a90ef85ef36dc15366323954d049e10005daa7dfa485f838571a866e3f3396a16329eab

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index

MD5 6d7d499960179766cd4261d12dacc411
SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index-dir/temp-index

MD5 43d47b52efb21ef99b3e4fbbdc6216b7
SHA1 c37d353d9b4da4125ced7f012be67b1a8abe9224
SHA256 2d4fcc89e4e12f25f0331461d2aad01d0b154c46655de990810b5d14971524e7
SHA512 184583e4b89d9e72dedce1dcd8ef1689287e67958ba3113db2a86f0de73f3b942c42cafef78e0d1d0028b2ea3a480b6281ee7a50a9879867ed1e887ccdf64349

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

MD5 a62b20c6608b3694260e345c1d80b467
SHA1 ea6bec313d9a059a7f4e1e72bf8cfbae621846d8
SHA256 6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
SHA512 f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/font_unique_name_table.pb

MD5 f080fa2a56ab5479d58063e5ea871447
SHA1 4b3fd57a98916fa5784305b76ba30af26b5253d9
SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA512 8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

MD5 1a4c2137fd9881cca508c0cf4c353da0
SHA1 3303e97bec38693b4d640877a04d384ae8e4fd2c
SHA256 dfc8d42f4ab782c7ef53c1fb2a970d95866b009bee948e01c9d809e71b0d657c
SHA512 3c9327f93c7f90789c784cba5e4a1ebc15b0429ed6db62133650c8bf34da7783ca27bcf285fffcf82ab96b262133cac11b2bc9c13aaea582a2811db0743b4109

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/com.pdfdocuments.quickscannerapp/cache/oat/1582435991586.jar.cur.prof

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f60eaf12735df878_0

MD5 50e4f810044b1bd5ac5620cd68ed335e
SHA1 6c1a59447f60c74e1123daa2235194d52eb0a818
SHA256 8d4f20d754da7886e6d63c4b92276e453b8e5b71bcbd7c8ad47288d0661c499a
SHA512 9e99022e524755f96943f0a02279c6b3325a2f95dba05520f8aade888c239fdb1a30e5de4e918d25c7d5fc987c24c84f0f10e3403d0705b0335aff584829d6cf

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 257bc414fa3f5aec41b040998cd22902
SHA1 3f9b9f834c33c8973c3374dbbce0a9ba579418ce
SHA256 0df62825dec9b7d8d425f60da3bb20db5ca01a6827bc7f6ab91f19c16c40f362
SHA512 5a840e54329bbac3e99f1682da558f1df8356fa743dffa3b521fb12526abd4f741e5c13160031e9da849e63545754e3c7027bdfa2c2883b2d616a7bdbaea945c

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 f1e34facbed935cb96ac869a3d70d484
SHA1 09f4425594ad828408d8bf5efb6b7306d7b73cbc
SHA256 4bc74de3ef726f90f24bb2eb3d0a67a5752ef2bd298fe099a8e6ded58646c4b7
SHA512 30e669da77a1c3007d725a2139d3c1ca61daa55cf88f59e9a941bdf487aa26ab68ba8c2816f2f8f2e318ea4f498a2b9de31e607ea2da1d9749183ab401599430

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat

MD5 66e2fd1467725137753abcda122d6c77
SHA1 c033b54b72e49ce0224988a917d616388a48b8db
SHA256 3f9d45c8c338ccacf3d1016f9ca1f944c2f8280317b08224f322618e96e70c14
SHA512 91403ba6c4496a8242aa5cf1213c6f1897469d332d0edfb587fad53ebd78e15f19ffd2013a9032a35cff79b8584416b50ed1ca02ac66819a6efd9d819330cb37

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/.com.google.Chrome.MgOrPd

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f60eaf12735df878_0

MD5 af35cc057387f1c333bebda0077c0f5a
SHA1 ac240389ec57788972ea4a117fc2a5f9bed4c46d
SHA256 824ea5b41faf1691cc83d007456633aede9d83ebd573adc6580396085fda31fc
SHA512 ceab8f248dd444360402ff6523cfc3c7dd508cd263b8e3081ae0e015611cf9db94a23a5356591a425258a06c129b48df14e21859967a8e3555e0ced1f2f736c8

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/LOG

MD5 0be87b94d9daa72a19c86ec8811d4476
SHA1 c93dc3c3f56d833601d4d3198e5d294381f6f2e0
SHA256 0b80b6796738bf4b796d68578794b8b2a6b0dd145301385e1f9fe5464e169919
SHA512 24a10a0dd5ac997f3e91208afdd7d6dc4f4a93ec740e167c899a0d6dacbff19aef773cf507d42b1c94c7157a6809d11fe4993da1c3109f105b5260725400aa98

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000003.log

MD5 e8d2554b0572178014ddc6dcd7d7e335
SHA1 9a131c87eddbb3a5247d55f6c9b529632bbb1830
SHA256 38f4e63d116626657f68ef1dbb08303f1d2c5005612952f3f98e167b7f504a9e
SHA512 d8514109030652db11e2490acafe6da7f4be8867dc05d05ebe265aa02e8a4289a7b6e906336e867aadb0847f5db344da98f40f7ea48e5f4c68d5871313178cf4

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/dfe6b2497a7513ba_0

MD5 5cfbbf6c33aea722740f9f69644c660f
SHA1 f87d0290549597c0beb26009ccea95c00b7ad675
SHA256 b1ba6e1165044b8a961fd8df40c035cb6ec986c30ff80274ff69ba5860bc95d6
SHA512 831fe05b8d742960887f047fd81e5ede12ffe44a98c8a3f3ac69967bda8da7b039a8240880f0ac45fad3552012a8f17bea9155c451abaa3543789e3650c7c2ad

/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

MD5 bdd885e6253f71c60ac69a184bee3c55
SHA1 7ec527aff50022faa59add8381d774ff77d39edf
SHA256 7d61612130f655f3031c08152cfc93a9946e3fb7a55a5a30ecee4579625b7aee
SHA512 112ca5dff808265216cc46ef9152729b8bc62299bf6bd5f9ff19b5702fd1b8dc1afb0aebdbc03acd76c5e7a4770c5bf778d69f4c8443062e99e23b0a0ebc9526

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/LOG

MD5 2af530ce9bf74f614d773c286511ce99
SHA1 a84d584640cf3353281cd4a258a3d06ec244429b
SHA256 22877f1678307cb7437f3473d7a8514da635435c0be1720fd1d5ba6e7cf8b45d
SHA512 6ef97e46922e9e5bb30abbf90cbbaf295ada2c4cfc8a619a89d55fd4ed4428300f91f6b75992a8682298f4ae3b3919b3e0dfc40a7a08eb734b6ef4351df1b4e3

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/LOCK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/000003.log

MD5 046cc08d163fc4578cd1b77a5d0965ac
SHA1 92f503e605c30974baf385f1619f1269b81dec57
SHA256 693a60684aa9ff4f01cb6027e9c938f4701c0c898afc224a0776cb1e18e87166
SHA512 e8b1df36a237bcbbad897146ca247edf75466b2a4030fec620c46932b5c31137f2931cd2758534e4308aed3fb9cc40edf2d7646a38530bcc5e6d7069c19a3b1f

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

MD5 4f4f5bf50639c744aeffd58ed14c61f8
SHA1 d2d0ccea6588a5640853c710a7d850d9c0e5fa87
SHA256 b8f8dff3044a82ad0bd8eff5d8a46c8efef3b9ac5a6f38f5a8e8af6c31ed0921
SHA512 06688356095d96d77638db7ffb2d14bcb8a462914f9550b26d504b815cfc233ec7a77dcc21f5c8334eb14cf97d9bcdbe0493bc83b576f20d3e1938024e896a2a

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/03dba5a7447d7008_0

MD5 840a03643bbbf64be6415185041871e2
SHA1 2eefa7a8b2fb149459914111f37d9ff583b2202e
SHA256 b1f5ced2c75e312106806b3929db34873f42ddc688225da964fa285aed6c7e2a
SHA512 b776102da24b08506272defea705c8c6ca466334cba2fe57a0f96e868a0d0b0d9d47e950f331f0569d8cb0841d68865610f912f2435c004653a9c88e0e94f74f

/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index-dir/temp-index

MD5 5bb7c9f5cf4acb53c13acb6510c4ee06
SHA1 b7dd7c5c715f75007ad264526f902dff4d9f7070
SHA256 d15c0f718e776b6c1820a689d526a291690afc11bba8956e7d0a7f73b1d69af3
SHA512 2b7e53d268e8636f149715ee6bd89135a560cf092711e2acf20bbfcb55f034e2fe0304fd1218565ee2c37c80b753492a1dab94009fcc63546654e55f0c2a8385