3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897

Analysis

max time kernel
2669636s
max time network
161s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 15:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897.apk
Size

15.7MB
MD5

d92ed047115c4385087cb94be8158613
SHA1

42504f9a197f0b666e9658a44db4cdb84a427784
SHA256

3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897
SHA512

d341a36b62733e729ff8974d178b27e77ebc8faa853c1d15e8ab2fcedc3eb7b4692a38d95ac42cd1a0e19219a0a3a4b36e8c703a4bfd844b6e2b18c2bbecce4e
SSDEEP

393216:8v9S0WCRwuhUeGxKRFKnNfUVPjBlJ10JdrqBq:8v95RwCUeGxWFKn0LfRBq

Score

8^/10

evasion

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.android.app.quanmama

Loads dropped Dex/Jar 7 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4319	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4319	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4261	com.android.app.quanmama
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4628	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex --output-vdex-fd=114 --oat-fd=121 --oat-location=/data/user/0/com.android.app.quanmama/files/oat/x86/AdDex.4.0.1.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4261	com.android.app.quanmama
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4751	com.android.app.quanmama:channel
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4751	com.android.app.quanmama:channel

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.android.app.quanmama

Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama:pushservice
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama:channel

com.android.app.quanmama
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4261
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex --output-vdex-fd=114 --oat-fd=121 --oat-location=/data/user/0/com.android.app.quanmama/files/oat/x86/AdDex.4.0.1.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4628
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4650
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4689

com.android.app.quanmama:pushservice
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4319

com.android.app.quanmama:channel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4751
- getprop ro.build.version.emui
  2⤵
  PID:4864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.android.app.quanmama/app_SGLib/libsgmainso-5.1.81.so.tmp

Filesize
591KB

MD5
c85e8919765cc22095d1b8e40601e34d

SHA1
22d48933b9f30a028cf4c9d993f59c767f9e8e35

SHA256
f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e

SHA512
6715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e

Download Submit
/data/data/com.android.app.quanmama/databases/MessageStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.android.app.quanmama/databases/MessageStore.db-journal

Filesize
512B

MD5
31e8216f817af084f233030a2a603d24

SHA1
0fba79f11ac25c89101848ead0480562482c6c19

SHA256
796eccbf64efa1c3ab4067f78f3100cbe0e78e85778be63c35edce1ebb0a6b65

SHA512
0323b623cbf6b449a43ace585bbeb2332561dc1368e9146d75fca63b82d008151d235d027be238bca0c08c966b3d1c93aeda12603f1de9cf15d806c69b1cd5ac

Download Submit
/data/data/com.android.app.quanmama/databases/accs.db-journal

Filesize
512B

MD5
5ad5d8cdc1bb996baffe602dc91b4076

SHA1
dc129f8213e545d81e59ded579783455b7f87e89

SHA256
723de9e693c6d82cc911ed6a63a95f218cfd7c100d607cb01a3592c0ea9e91b0

SHA512
24571c69ffcce8f1c124a68305efd0016974cf94ea8f29a914b1d81ddcffbe57e347910f9c2c2f199def9fdd031b164fc27538240cfcdc86a69dea13fff88835

Download Submit
/data/data/com.android.app.quanmama/databases/accs.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.android.app.quanmama/databases/accs.db-wal

Filesize
32KB

MD5
d91776037fc45b2ea2b323e7b8edb4f8

SHA1
9f0ed406689378a75f4c6cc5d593ea0dc33050d1

SHA256
9ee964d0e7f13bbb3e93e927db28d6e276d52fdb72b0ae4ed2811ad7d8ebc4f5

SHA512
6c0e4f7f59bf6a3bbb9c03a5dcc857589014c21770d38bd815117d51efe7f78d865fe9eae697f935c0f699c8f1073149076a2199387f9205a37bfb937c1d7b71

Download Submit
/data/data/com.android.app.quanmama/databases/com.android.app.quanmama-journal

Filesize
512B

MD5
4f148b7d3c5ead3ba88cf9bf4aeb752f

SHA1
ddd7951d045d70d62a93f6b9649b1b6337ef9997

SHA256
457fc807402b622a7df063c848dd8d3a4a3fab5a57394bbeaf2ed7f351b1ac7b

SHA512
58d355518b279a830e4b0094a55cd2cdba5007fec6a9705c122aeaa6433cb660a6ad7d09fef5f7259e7d8fc88c68234dc0ffb5f882950980124b4ac9f9e9bc08

Download Submit
/data/data/com.android.app.quanmama/databases/com.android.app.quanmama-wal

Filesize
36KB

MD5
e3da9ba2ba8f16ef9bd94f7c9f6a796d

SHA1
9b72405e57ff59a9063059608f4d1068d82527c1

SHA256
88aa495588e397145dda4c629530ad87fc657cdc15eb178bb3d1ed5b86219c55

SHA512
ece9caff3e6592ecadb19bb0dcef632350fe152ae692343e93943dd3fbde5378d3e36aae8c1ad8dd48980b62f393fb2cd812aface28f9016982927af8214611e

Download Submit
/data/data/com.android.app.quanmama/databases/downloader.db-journal

Filesize
512B

MD5
b8066fe96231626862cf8c951973bcf7

SHA1
f28f59f74f2efe47d5d39885598f5a24947e8ec3

SHA256
16d82d7be45300aabfba3f8475fab75a8e7cd4b97a2ad442e62274a7d1d29a38

SHA512
224540e444eeb70d91124908c777175e3fcba3cdde366444f5212e66c2a7ee122ed14fa2200de5e8b8883b3c724f7772120dedf71613e34777cf30aa9227e61e

Download Submit
/data/data/com.android.app.quanmama/databases/downloader.db-shm

Filesize
85KB

MD5
cac64e53c9403df536fcd99800aa6af6

SHA1
17f7e2f1bef4276702222d24b98025c2953f1fb3

SHA256
592340ddde8df2787c10a2b964c5a708a6371f545f25ba23b4a805a630d11958

SHA512
3a86e96a68a1b17372a1630a2076bc9d97856b0f8e86ea173210352ec33778f8f655ac8b9e0bd6f668898e46c4b018034ef278e9918ee36511e58737b99641c5

Download Submit
/data/data/com.android.app.quanmama/databases/downloader.db-wal

Filesize
32KB

MD5
66e15beacb9e4967c67769ecdacaee0f

SHA1
5ce0bae3ac1e761a12b1be54ffb39de277b78a10

SHA256
066648fbf1910969dbac117aedcade2dbee61213bdc0bd5fbf64dc1ab39deeb7

SHA512
fbdbbb4d9c18d207a2c9d50db29aaba4c03f589f2901368b5bcf55bdec2cf3b485c614151ac37d7c27c013cc70ae84100d1f2de9de73868f74a179a09103dc50

Download Submit
/data/data/com.android.app.quanmama/databases/geofencing.db

Filesize
28KB

MD5
1deb6b895a2280f63ea2f3783f0a5ebd

SHA1
c01eee51a200d2007d3972b551e2515fc8f96d95

SHA256
c14b81f1de9ea7414f9ab576df19d63c1d4f22750ab37f0800a7a0ee6a15a70d

SHA512
269affd56d83a323141c44f786128a60d501d4e0ede0c4b7d9b5757a2e40851872c801dc1355c62c0607b95b1e42e2bf0b824d0230e1455655d1bb020c6a45e4

Download Submit
/data/data/com.android.app.quanmama/databases/geofencing.db-journal

Filesize
902B

MD5
e1ff2f26e2483cae55c9e47d23fcb8e5

SHA1
aa26f55a47dc4ca4bff78dde9b35a9a6df4fa0e0

SHA256
76cbe57b78bf73054ae97c65b430e4be2b56549dd0d8fc02639ff723e795fde9

SHA512
08a4447ee37f43df6f4b264be84ade56265eea2c780fa160fd5e8b2ec40d99fbe14a073d497dae7d271e7d0ed18ba837468927d49c753a5f44e76d4e8e361a35

Download Submit
/data/data/com.android.app.quanmama/databases/geofencing.db-wal

Filesize
40KB

MD5
513950cb30fcb13dbd2d9dd398af39ae

SHA1
2b30839992b29bf40a3f84669f2519eb5446ae5a

SHA256
b7204c7b08f78b906db409db05c5e57aa24fc5e988b7b402e75d542b73cbefad

SHA512
e6bbaf16d62ea7f3533cffa765e662c4219f4f6885338e1aa602cf383ab9b31e652a15028d6b27abbe06859b5984a0a58a059ae051c5d093df927369da3bec14

Download Submit
/data/data/com.android.app.quanmama/databases/message_accs_db-journal

Filesize
512B

MD5
f323808929ce20d8db21993b796c92ce

SHA1
e076cf351bce91d4f70d4e667fd2aecc11afa051

SHA256
450a8f586f707ccf5a18cd0ee69eda1a0cf65fba3b774e5fd4829fbcafbf56a5

SHA512
31faf65156538ed0e644b0640e5ce2d215f01a6e48771c438ad58d167c3e090f8c2803cb56f550ae6c8c83e18a472184dddff474dc7a93c9c3ac975d8325c7b1

Download Submit
/data/data/com.android.app.quanmama/databases/message_accs_db-wal

Filesize
16KB

MD5
475e196d268515f77d709ac87099a8b8

SHA1
6459d95186f2900d19c21f6a6fb0d9e994c92c13

SHA256
5c52504261b5b07ab761dec463781668e738c175430df6777ef4d468d88e8169

SHA512
815080f9e2c170daa7f450c6fdf71b25b700ba910f9297e1732fc27e0d7ea305da5668bde7bf8deca29d6ef6190fac46af408ef85e38d028bb8d27ba2c3dc5e6

Download Submit
/data/data/com.android.app.quanmama/databases/ttopensdk.db-journal

Filesize
512B

MD5
5ffbb305e522f2aff767e66bde872054

SHA1
5bde4277246506a30a7fd009ef5e1e01835ade6a

SHA256
286d9a6528ae7a524cb2b3ad1308c5f488460a86923c6db7ab4fa46c1d6747b7

SHA512
402e9e2d2eebc46a9a1d848293608378d4103055d84d40f5a67f8706a27595908f7dfe3e6a077f4b343b5c7433cb582a2ae665b46d97cd8f81fae5ad743e139a

Download Submit
/data/data/com.android.app.quanmama/databases/ttopensdk.db-wal

Filesize
16KB

MD5
bf9b31a6c6f2a78cd5a13eec20db9953

SHA1
f2bffc77592b1e40b84213a126f5780e450ba1ba

SHA256
85f1ffed93f81ff52d800aece94e96db3b51737c391df47200e6fa86ca70dfef

SHA512
d0456a97ea4a5571038254e496c7b1914bd7e79d8e9aff7740ee5d1a7a894e400c6e2cc43f2397fd4aa27edf7a119505718e9aa9e52f299e6471429d46180bf9

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db

Filesize
36KB

MD5
0adda9c85a5e4808f5b1b74c0a8591a5

SHA1
5048107883ab1e345af9cf2e6849ce46e0e612bf

SHA256
1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

SHA512
646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db

Filesize
24KB

MD5
9de38130c71aaaed86324a056a601c2c

SHA1
0cfb519dd26428257d8d19707e6c99f16ed71dbc

SHA256
8fcdba3f1c2fceb17480072cc04acf808f5b14025f84df83c34f1c31e203a33d

SHA512
f0bd8a68d172b85d0a175c8f90785af3c7083da8885b9721814580a1b66ea119ccd4f0c0f85de7104dac4031723f1bfacec7f4c442cbc3fc5fc81eaf8bc6dd26

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db

Filesize
36KB

MD5
f489288447c59155ab7b46d2ddf62919

SHA1
459d9c8fb1a09b3714d55f7e8d63c618fed194b0

SHA256
2f1f93bf1904d53746f5a395f0be5df70864d4274361cd1f7ab303cb522ce42a

SHA512
52c9cb196a29b91fe4f55fe074657087fa3fee34b27f7d348c8a38be1358a1054237c7b5219a57d178845e771812a5e749cbae69b4762b6660282c44085cd9ac

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db

Filesize
36KB

MD5
8e57507457d8d852831bae19f59d70a6

SHA1
7a787494c6a7f69a95b96b811fbfaa3f25396a03

SHA256
60cfee6e12b3cee2a623c517b02dd9a3c0ff6859cad5805ba0bbdab661220fac

SHA512
c663eb14236bdfe8e7d57bc7777e12bf5ce4590cd7a0f3c5946a05ee3d3f53a831b67d2de8b42f3660af13a456a095672deeab13c02af3aa5af30cfe3e41ca8d

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db

Filesize
36KB

MD5
5bd1d9d62fdb376190fb0ff0917f2885

SHA1
447ba51e98f5b879edf216e2981369d5e68c00dc

SHA256
ddccbc540e8df517baf6e5dbc39d39bb43dfea3f0b45ea96c39ef3b631cdd392

SHA512
620f8a1bb203373d266634aeede1d43b6af87af399d6ae54e30c6fadfde66a2f5c6fc0e5b1adb017db8dcb1c2642efe60b604ef1118e756052f020d9d984ab30

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-journal

Filesize
512B

MD5
8af0db6c0fa1527426bd3f25870834e9

SHA1
14caf0c4115d97cce4617963b5a8321f2a81f9e9

SHA256
89ebd17234b0b733e92473adc281808d154303ca4ff189577584ed89e67b35d9

SHA512
2725150a925b5e1527daab25177214dfb470de5a8a2a4d72307cfc6dd16584ee45887ce451af724c2d81f3ac7ab05c3509b92374e2c8bdb39ded817796e1da0d

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-wal

Filesize
48KB

MD5
754ef8a1ead89f436921a8159f1a3b32

SHA1
edc2369f249d7ed12e38b05d358937ae677e2ae8

SHA256
15a97ac73fa518a9db9e4d3cb9b1dacb4061a4005e4787c7c74f033f9f179c12

SHA512
2a02af951fe549481f35b872466b40d35f0857f6583ff0bfbbd1aef9a535d42f102803f7a47ad6ac16bd6700909da5cf0a6d19bfaf782c14fb3b962e689519df

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-wal

Filesize
12KB

MD5
4a8c9066b331f3b9736198dc37a270b1

SHA1
63d1e9391a6d4cf9c856c5e6b3690245df42e992

SHA256
6e37ba9bd11383bd66ac513e45b4b16f41d4a5c06cfdb08a7b99687cb6ddbdae

SHA512
519143498d0deac5f4a8ef0a36992c0d3ae7d2dbae95cd48509e183ff0a617da348d7be538928fc883afb347323720830921b7c52f8dba84bbcc28d2cb2e9c62

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-wal

Filesize
8KB

MD5
376aff1137caad9d0168b52c5a32a1a8

SHA1
2e3b2a732358613ffc235be78b03b3a9ffeab2ce

SHA256
ef1fdb0c2255c58ef9415642f94d2ad9f92e570f60f5585f4eca554202ad7e3d

SHA512
4ac8c52ac38c754b4259806406727dba39fec3c329a97007747a2a90241a33b91f8486fb56a8cbdaed99cfa048fb6501ad199e34d1ed114671da3c6b14d923dd

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-wal

Filesize
8KB

MD5
c8c8e4243588cf792d07ba46c381ba91

SHA1
ab0f5f1b3c394e04a39437a8db555cb9ec28b4ce

SHA256
d31712ec7e273a8d015070c809391a5f5b2fdc53a5bc2252f68c2db8f0889c5e

SHA512
c343e5d869c93451b4cd46b10d095e7604eda283a265f3f52c2d09efa39cedc7bc420cfcdf147947e78e6ff9d0bcb17aad0ac9a5ae32c191a4b24c07ce1ed725

Download Submit
/data/data/com.android.app.quanmama/databases/ua.db-wal

Filesize
4KB

MD5
6f2315d91fe351249f4da25cfdbd5788

SHA1
45bba3f243ed0672c4306bec6f4affb6c5f8e9a4

SHA256
6cd19a21a63f03f913ba360b58018d71556ad6ef919854a554f2418129a09edb

SHA512
9f750ba8c12b81a90ff8325c672808a6fe9bd2828a122a15b247bad7271602c4eec40e07c203f9a192b5f29cf88d58a8fdba5b3f3585a85b6d1426a977abb1ef

Download Submit
/data/data/com.android.app.quanmama/files/.envelope/a==7.5.3&&5.4.5_1703476558202_envelope.log

Filesize
1KB

MD5
d16cc4925a2866272fa1820d0acab2ec

SHA1
c20c9bf4741bcb14d2b9f4529b4127edea95e293

SHA256
eb4ec421a682a9ac7b9dc1166390cef58fddc656e44d79743935717de04f2d3a

SHA512
16d6f75e6231d38c6f45683d8f016322cb20aedf91d8585c3cef4aee51e02213c7c4c1ac6c20be2d50043cf56da2dd3f5cadd347a8151c4b8dd2d60770aa4c65

Download Submit
/data/data/com.android.app.quanmama/files/.envelope/d==7.5.3&&5.4.5_1703476559274_envelope.log

Filesize
1KB

MD5
dc89ab00ffbeacddbba7ea69f9764ae6

SHA1
2ff8590dff509ba43a4082302bb4447bd3d9929f

SHA256
95f0f3273a47f26f2c99ca1dbee8c1eab647665943350a8e80fd52bb01056377

SHA512
470373aef8b7f79c70cdd0ab9e786abebf1241b5b89d66f9f7e878b399531c7717bcd8913f5b9cff578a075f86a88f670e2d60ef2b6bd3f6d0d25cacffb79a86

Download Submit
/data/data/com.android.app.quanmama/files/.envelope/i==1.2.0&&5.4.5_1703476555065_envelope.log

Filesize
2KB

MD5
a355973b787af28a6da12d3077e69030

SHA1
09345dce04860038411ae885fe38a9e94c210671

SHA256
18dcbb2de9c0b601b7bf593448d77d37ea1f1bbb2478f23b0d479a4d42c1bb2c

SHA512
a9473cbddcc3a776a88b207109f8bd4db48e6d27151fca8a5a433120ff1264c69dbe0294471e9af8d8cd9d49452f27c130575b9cc5905babd80296bc5a63c4ef

Download Submit
/data/data/com.android.app.quanmama/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
249580e94c5f591c03562a714be65f6f

SHA1
d0981a151c91a71ecef8d18ad4761881728a2dfe

SHA256
8965b6be286b4706b16bcc42196f9d1556b8b443b98572376a1c4f508396802b

SHA512
2aa2791a513d1ea29adf8a1f3db3bc59a741d527c34855421f60a8ef87974482d7677b2cae5c5a0ac0f3daed83bc244a4524836f63c888167261764865c9d553

Download Submit
/data/data/com.android.app.quanmama/files/AdDex.4.0.1.dex

Filesize
167KB

MD5
094767f7c1787846b9a4be050cb801c5

SHA1
f4892b93191ba3c2f06cb66aaa446589edd9c446

SHA256
25380360545288fee582ce904d926952f7f0627f8f191b55643e5e876e56da9f

SHA512
8d891e690c96048cf55db2f75041d7e531c8c114c52e4e6b8d37bba1062f87034b644afd1898da8c0894996bf0fc573e8101ca86f0e34a813982581ff2363877

Download Submit
/data/data/com.android.app.quanmama/files/agoo.pid

Filesize
167KB

MD5
09ed689abb62b6677d214c5230a7120d

SHA1
345f14a06b3397be45d077136372046df565dd94

SHA256
91a7b3d106592037b378077d9c4e5b8ad641c90c431c83c8337b6e0934afd0fa

SHA512
0b81a7fa71f89bafca45e622519a4b1b910cf5259442f422c3c77936aad0bfdec5d953fdfb8fbfc20640299cd616e18a87b71022c97c5691397e29b12fa58d90

Download Submit
/data/data/com.android.app.quanmama/files/exid.dat

Filesize
55B

MD5
5381a14cdc2342534b7d930b8ccd21a2

SHA1
03c7678fc4e52a92ffd80e3ddb15a1348a592f93

SHA256
d030a4ef35bd997f739e2ffdee68dd7ff02365d0f61862ce86a1ffad0ba045c0

SHA512
a642efa87d0f36eeb99676ca649e051474eee32eb520ec10f9ab0a3cb49a5781dd5ba3be39cbc0f5d9b4df7fd1eb3a30510a1d694c2a81d430201665afaef120

Download Submit
/data/data/com.android.app.quanmama/files/lib/libCMBaseInfoc.so

Filesize
85KB

MD5
890069dab4abf77bef171f685c309a1a

SHA1
bd4f633e11bedbeca47e14eb1739a580a7c8033a

SHA256
023a29dca888fcf158af3b597296505f723df765ce4ef32c25be455d4be4c0f7

SHA512
261e28b157855dba945e3565f3a9fcaa8875ba6581613352d5c45fb354508e9964c74901dc30a834a6b5ce8ee0d4fc64766786837a3a238d584c89e47f3b6361

Download Submit
/data/data/com.android.app.quanmama/files/mipush_region

Filesize
5B

MD5
ae54a5c026f31ada088992587d92cb3a

SHA1
d2eaf2aa1512d6596e0a5bae633537c6b8e779a3

SHA256
10436829032f361a3de50048de41755140e581467bc1895e6c1a17f423e42d10

SHA512
d6afe88ac526c5e817a9877009da962246da51846e688dfc5f40f45ef8c2fa97b8cbb3f2972e70fd1e9d5f612e1d788b1f20fa81e412bac00a1688c0d31fc059

Download Submit
/data/data/com.android.app.quanmama/files/sdk/cube/kfmt.dat

Filesize
408B

MD5
8be321c14d720aa8b37792053ac10afd

SHA1
53ef170af2df58761fc6f425ba5a687183ffddff

SHA256
9cd76f9f41b08f2298aa009e90a4b9786f18ef07e4bd9341ab55526788c42005

SHA512
09199e56d71c8a2c1307ef45f0560c7e872049cd05c654c0f4e6d8e584926adc554c0082a7bb2319fb6c96dc7f538f73d4d0e07b81116230bbf08dec2af96ee2

Download Submit
/data/data/com.android.app.quanmama/files/sdk/kctrl.dat

Filesize
31B

MD5
2a2192aa1825f721342e8f418cf25f87

SHA1
b6d5f1fde59149b38d0349d36ad839e19e34579a

SHA256
cca47abb2e808e38712dcbe95b29e715e93b29e034ce5ba453c6daf94d546128

SHA512
8cebbac2f56bca0f6e8c07b9dec64b1a758e6916c852786ffcf059709afc20713fc84582a3939b737c130a07f74d6bf63e08d95855a49644afbb5a0be40618fc

Download Submit
/data/data/com.android.app.quanmama/files/sdk/kfmt.dat

Filesize
1KB

MD5
c027559fa10982ecec114fba27cdddd1

SHA1
430cae49caca243bfe90054db086b7209bab9e77

SHA256
c888185f2d8f68f54db45844d911302a03324efcf418d12786208b2ebf10fe93

SHA512
c550598cbfbd206395c4e74b6142de395e8c2ca25fd068f457b6908d32a462d3169e9e9ce1bd0199d5a8bdfb88096039c57ffbb97c2beec75bb4b18d5e7d1491

Download Submit
/data/data/com.android.app.quanmama/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNDc2NTU0NDkx

Filesize
1KB

MD5
d8d0d9f78c0f3bca702d28860d35e9d0

SHA1
ca9aa63cff7e84a6e78e8f80cf8db5419a55c93c

SHA256
3a20144c38baf986c3ac54ee005fd54bc16ec11704929d2db2952a2d2d3c74b6

SHA512
4c1b2567e5acb401e31cee61247d8fd15866c7654de0ae4e631cef74536abdefd77f3bc452724f63895b7100ca316e75ae0cd8374f5e232dd32b24aed658cb44

Download Submit
/data/data/com.android.app.quanmama/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNDc2NTg1NDA1

Filesize
1KB

MD5
19fd426044f6f3845b7fd1f1cc5ffe1c

SHA1
60ca8e09b65cbcf0d14e27a6343ae34dc2e83f1b

SHA256
0868884cfe50fcbd0ee6a787381a12b21cb64886c7d206a36d7b9c0d3d47be19

SHA512
375c5745f71134e89347386ace5417670e712c8d1dda1b83bfd0cb42293ed586e823ec4aaa674abf1355b30f50bba219cec16dfb641ab8225e92e0e37bdff931

Download Submit
/data/data/com.android.app.quanmama/files/tiny_data.data

Filesize
212B

MD5
6d841ab00162a698e96257ae0e1e4271

SHA1
662bf84f3a0efcbe60888b4c902f41a0c878bd03

SHA256
a5437c160168ccb49b71b330a46c79b62826f8bdab39134a91fe4b55b89384a6

SHA512
8b88bf0d6a705acf1e466b9619be79618131f39584a078dcae3b9a6c9b48798dd8bea150e4cb713ef92415b410938b8ba142be8489e597df19e0770c40639721

Download Submit
/data/data/com.android.app.quanmama/files/tiny_data.data

Filesize
212B

MD5
7a39be8835df1e90342cd0515a06d1a3

SHA1
1bcbafd7afe0757e6df3395ae02e77580b2987aa

SHA256
761689d808fd58817c4084e3192bb16fc3f1e61a0ffb7d4b9ef112868a1cbf28

SHA512
952d982b625ea2fc728edd3049788af3b4c0878e54a1e8285700371705bb229e2da83f643cb2423102154eb0c718c1419e7931282e73c8898d4668293d267b46

Download Submit
/data/data/com.android.app.quanmama/files/tiny_data.data

Filesize
1KB

MD5
3dca349bb1fa6d4c8a12eaa61c662c7c

SHA1
0e3a8721288f0148e7dc7330cefca69242be55d3

SHA256
ad56d3322a98cac897504e11d16e8cbf778f33b79d394194aa05823e8982459e

SHA512
457f02935573ee8573b35222df7245903fe13004ede85872558437b7802f768f277c1a21772102473ae9e904c71f7e3580b5991ff90a7bd8ed787280669f0040

Download Submit
/data/data/com.android.app.quanmama/files/umeng_it.cache

Filesize
498B

MD5
600943129f665b11583f54ff689ac21c

SHA1
98f10cc8275874d5d2a08be2b14261e5adde4e73

SHA256
8f1f34192fcb2a60ed7ac31571416c3c04d7fcfd9815576dd458f2506405907b

SHA512
e34ba7a26b19f307986d34336953aa51d57f2750761090ad5526d51e31adc967735da47a7c88741192edfd03ca6468e1cb2b06fe5d2b8a2f57c510e38282ebf8

Download Submit
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex

Filesize
167KB

MD5
e219450ad75a76c0857cfa550ad7cb83

SHA1
bbd815ed12843103dd495d5ea720128f44095574

SHA256
a14c6120eaea0f511352d2016fc8dafd6213e04baae103c7daf65e924977eb41

SHA512
847ad6b02516c51131b02b93efcf3cb4c60257a2bd2e3fcea1570bce19f712c7fb6b51ee22d1b6b1f5383a784e5476e5c968b4c43b47ec00ec2faaefe17ca712

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
5ee41eeba2c703d0b29e2daff325386c

SHA1
c62b9abe71c1715f22b69e267a6a99b491c3c10d

SHA256
885c2eefdf6dd71ec8f3cb8315b62aa05b835ee3f0cacb4d7a9fd22b13aaf536

SHA512
e6648f1c552740f5aaec8351cff3b7a6c84a673b63c86589ca996d9df6f8756850ac9992ba25c42dba117a23985c6d4c9e07cc8ba7ec5281044d7f9093247862

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
0d4f60640a53f890728abaff0566b4d6

SHA1
02ba86e6ee322b65eb298f56978ae90236c4d10e

SHA256
2d0a959d1e17a09d2af017955518ea580dacb474c621d76602c0fadef8c4148c

SHA512
9404e4095d597c4145fd1a28db906d16cba2c6812e973f285f6ec7be3c035a8b743b384c4db338033b4b16386a23a9a6ccb9ded790ab1e16053d30ec364a8ade

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
4KB

MD5
239eedec59c2ea2555e2a602849aa802

SHA1
bf5ea07bf93c3b7855ba28f21a6a1d882788db79

SHA256
5c750e6bb81f52960cddf9c384958059b6435937d74eed69bb3242b36ce90fc4

SHA512
c655400222f02380de56903505c3cbd8cf102a56d408e7ad3f9ae3268072fdfbe19a8806338029c03880e8e58e9efa171372ed20bbd241b6d743fa40834991be

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
82db95676afef70483701378ad677bcc

SHA1
4183520eaf9b8cc45583d06f8c7dfc9adc853e30

SHA256
038a41c74f2606f46fb130efb176f6450bb74373d8c064961cd784821344d187

SHA512
7a8c960463f5f0d794d0b757816c911af17a3d783cc9e69cf3d62bd039cb935442a9dd4f61498c2e4f5130115070a82139f2e4bf6585b3ad896c265e4e6b6f2e

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
67273b63e88ebd547eb7f0d8cdaa1363

SHA1
75ec6f231b5d69021846d1a5bde2ce53fca16045

SHA256
4648eb3131ceb7ad450e1e5dae144decd12648cf25cdd86b2e9538fef8a11530

SHA512
2aac342108e8daca892389a975a17720eec7e9149f2f3bb894a39dd43870167c27f5cfe29eab9a7baa62ca72667611650ce39acabfe0b3bb548d6a75f2c91ef9

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
32KB

MD5
5db32c08c318d7a7331f72b19542bb7d

SHA1
eec67ff2ae9e34e811462b37dfa102c19bc1557b

SHA256
77cb52731d3bd9d81bddb400b7c80c5358ea18a655bf3739a8dfc606d6aa1601

SHA512
0dc99c1d5746c192c65b061b1d344580a94ce7d2e700a6182b4dbc09be7f72d0880b340301dc6017910c75312c676f57732c24e5b4298879e020b45e43abbab0

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
28KB

MD5
6b47c9438b8774f04df8979de7c541f4

SHA1
21fd76ab2e14a40c0201aa0342a631247bbe1699

SHA256
c27ef8cd28905250b27b83f7ccb1646f22372731100cb56410e46c9de65de167

SHA512
ca190aef5454261aa1f33ee856379e6d903d75ecb7a8c9b9f6d755c2c12eb8009b41bbcd44bb989176c202955fbee406efff1971fbfbfee679e06d8d1dea7347

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
1KB

MD5
065b8c48496302933d5af0497e2a60ea

SHA1
8b9b9a2fef51794851db0a975ed53e37acbc601d

SHA256
4adcbfca7e7b0c16bb4d39ae0accf7ed549d97d1b5795346a2d5aab005423b6b

SHA512
15d5976c539979dad1642ab6ef1d89ce1e72d9ee09796ecbd44ad6d6e9ea8c29f3af33daa226e4c2086c85cba50a2230577380cf2b38d164dc70a155af926638

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
902B

MD5
337f31686caeae104214d25b6d29fd03

SHA1
1f711b2ecddba0fdabae513cf2237290222bf02f

SHA256
c9da22700c57ae05aec74cef00423cba5b394d4b2efb789f90b0c4d30c374531

SHA512
7bca8639d0b27209a5929b989848b431d0e7574944db25cf576afc10d30e318915be763adb7c27fe097c0c1fe817592953dd332b39e6f88a12f9097a21b09a5b

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
1KB

MD5
a8cdd20d6fa4acce92b2e273eabfe942

SHA1
2bd540b3b6c83dfce374de103e5cbcd7ea252119

SHA256
ee2350509ef1393934e308495b010046f07a28a287b999a8d5b8f4969591ef1b

SHA512
560ef16068453b89eefdfbb6de48857084e0885265f3cff7762edf58d8367e1272a0ee4693745844d762c6abc09e2733bc6bdad4a2b44f5660b4ffda4beb54ff

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
32KB

MD5
13bf0837d231a5cccceb50aff67f84d1

SHA1
d86ac5e25134b937e991b1a2b1638ba679b49738

SHA256
0c68febd78a2045c79e2117f37613dd1da10ed5b36903c7b1874442cc2b053ac

SHA512
8177f4a306f6bc28277bc401157a503de9d4267e41b87c147c774ccedf64b4b808451e67f60ed5319e315dba2fef515cc72b88b9f51c4af33b32d1988b7585de

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
242B

MD5
b5bd1b5c4e6f22d3e5067956137a79b1

SHA1
723105d14e3869731b594c842eed4929d3eb09d2

SHA256
9c53c4ba5a52c369c8dcf8087401feefc63eac29b38af8d527e889b33bc44db5

SHA512
fee00135dc14c4a42e0e2ef35f4fc55132579095a6ce7525ea9d341be3763dfeb054d99e97e9c820730592805861218d538239e3699a6bfbcbf7ba61ed696dc1

Download Submit
/storage/emulated/0/system/info

Filesize
212B

MD5
50e6bdccd9932fee227eed29504b0bc4

SHA1
6a67cb765a924ef2df894133353558454012cfec

SHA256
5e65f73068756ad3fad2d63c27a4deb29ada0ccb038f660eea4ade2231dd54ae

SHA512
8318d24ffbc8febc5d2b709aa81f592d699fd854a4fdf2d71d4e79de537d4324901477fb77bd99e18142ec1ae44e8839d209f911b2591016c9ff8a18b8c9c27d

Download Submit
/storage/emulated/0/system/info

Filesize
65B

MD5
a97674b770329f4dc9edd18aa3ff16ab

SHA1
dacc1d74a803f49638ac3055fb30a9f909e8f1ae

SHA256
0beb2a5cc57aa7bcc0598c1ca52ae5d17b5aae0b363b06a3c3f0356fec735840

SHA512
594cfd73afd436080bc7e6983fc1354206d40b57e2d3ff7049edeaf41fac89fa76cf6130408e9e04af88e062330980617e4a4bd691b6a1e5ec48f2f035da20a2

Download Submit
/storage/emulated/0/system/info

Filesize
111B

MD5
2abc6edc6b9672689ed4a30976d15d05

SHA1
43d331c66c90baf93a2f50b58415c03edd2ecf1e

SHA256
f2ea41fd2ea211b392b3ec73ccf568e55f246a6244717a2cea9c228686de348b

SHA512
f35a1def788bf6fb5a557349ed01fa12f6115602db8b09f0c61b339a0bc5979d9b354c183db1bd600ed15868eaaa06a5d14504e7ecb999656fb7425a5ae86189

Download Submit