3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897

Analysis

max time kernel
2602782s
max time network
167s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
23/12/2023, 15:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897.apk
Size

15.7MB
MD5

d92ed047115c4385087cb94be8158613
SHA1

42504f9a197f0b666e9658a44db4cdb84a427784
SHA256

3f5086d178a5abd1eac3274e3e156ae07e52665c7a9e5a52c324af40d4792897
SHA512

d341a36b62733e729ff8974d178b27e77ebc8faa853c1d15e8ab2fcedc3eb7b4692a38d95ac42cd1a0e19219a0a3a4b36e8c703a4bfd844b6e2b18c2bbecce4e
SSDEEP

393216:8v9S0WCRwuhUeGxKRFKnNfUVPjBlJ10JdrqBq:8v95RwCUeGxWFKn0LfRBq

Score

7^/10

Malware Config

Signatures

Checks known Qemu files. 3 IoCs

Checks for known Qemu files that exist on Android virtual device images.

ioc	Process
/sys/qemu_trace	com.android.app.quanmama:pushservice
/sys/qemu_trace	com.android.app.quanmama:channel
/sys/qemu_trace	com.android.app.quanmama:pushservice

Checks known Qemu pipes. 3 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

ioc	Process
/dev/qemu_pipe	com.android.app.quanmama:pushservice
/dev/qemu_pipe	com.android.app.quanmama:channel
/dev/qemu_pipe	com.android.app.quanmama:pushservice

Loads dropped Dex/Jar 9 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.android.app.quanmama/app_SGLib/libsgmain_312768000000.zip	4551	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4551	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	4551	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/app_SGLib/libsgmain_312768000000.zip	5056	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	5056	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	5056	com.android.app.quanmama:pushservice
/data/user/0/com.android.app.quanmama/app_SGLib/libsgmain_312768000000.zip	5330	com.android.app.quanmama:channel
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	5330	com.android.app.quanmama:channel
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex	5330	com.android.app.quanmama:channel

Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 4 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama:pushservice
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama:pushservice
Framework API call	javax.crypto.Cipher.doFinal	com.android.app.quanmama:channel

com.android.app.quanmama
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4474

com.android.app.quanmama:pushservice
1⤵
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4551

com.android.app.quanmama:pushservice
1⤵
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:5056

com.android.app.quanmama:channel
1⤵
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:5330

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.android.app.quanmama/app_SGLib/libsgmain_312768000000.zip

Filesize
65KB

MD5
522947eaa37b029a247e3973f3be3621

SHA1
31c88e0d7c9b51904c0f598e80245bba41b1c7d9

SHA256
d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

SHA512
f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

Download Submit
/data/user/0/com.android.app.quanmama/app_SGLib/libsgmainso-5.1.81.so.tmp

Filesize
591KB

MD5
c85e8919765cc22095d1b8e40601e34d

SHA1
22d48933b9f30a028cf4c9d993f59c767f9e8e35

SHA256
f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e

SHA512
6715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e

Download Submit
/data/user/0/com.android.app.quanmama/databases/MessageStore.db

Filesize
36KB

MD5
f1abc67cc72bf5fe66779fa5dd1dfeac

SHA1
660f6d1cffa2bf57ec29105e40d08ab103cf18ad

SHA256
a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a

SHA512
dfbe97f3c1f3a3ebd63fc5bcee1b1dd1b91dfe01ac95af8fe897f44079e852421fa0c4cf038da6e43264d50f3e612ddc2be9aa17bf47ef604ca428fafe0858de

Download Submit
/data/user/0/com.android.app.quanmama/databases/MessageStore.db-journal

Filesize
512B

MD5
781aafb614d47448829e5e29ff921c86

SHA1
9ac475e8e0b898df95dc8cf80469f65ecd6f68ce

SHA256
23aeef0667ea6c5c74e77aa9811684f5f235b76c12f92af8c7dcaff1bd0f0657

SHA512
6df611cf74d843ccc9646e3f651a9b3eddc27ff30f926e4f8cae6982d126977f3759ebe0cc00499450518e0fb515edcc8be7a16e9b790ba04683d5c9f1f44832

Download Submit
/data/user/0/com.android.app.quanmama/databases/MessageStore.db-journal

Filesize
8KB

MD5
4c3f8b76ca7b3f3ba06be6807f8c4a21

SHA1
dffd57a7b449e2422c210bbad98eb25867e95036

SHA256
57c77647461bdfb8cbeb22d76893a0a52d07031307c9e72cd15eb4a7cf2f22f1

SHA512
039759c40854a499eaeb979b45956f87ba236736d83ab26391c72e21afe8077c2ab2c071462ff3f35219f511b03de82bc8ce183077f862b99a447c37b326ba6b

Download Submit
/data/user/0/com.android.app.quanmama/databases/MessageStore.db-journal

Filesize
12KB

MD5
85a72b453180efe63d8af2a600783cbf

SHA1
20c20450936015ed06911c377ce09a7980c566fb

SHA256
db59db238a82984b1703fa1786f3e30922c0e9f596dc60c3471a45c2056f000e

SHA512
857f7b641e8fee33a76ebed6c0da2e6c78e296cd7e3f07f9e34ffa91cb020f14508b14d45cddb33d3925e088b4d56f35ab4777f664c212863a16510e0095d571

Download Submit
/data/user/0/com.android.app.quanmama/databases/MessageStore.db-journal

Filesize
8KB

MD5
15c5abe91b4fdff888ab163a73306c9e

SHA1
2aa49193fde2f7057b5eb25862c5b0a75bcb8168

SHA256
603f0d09536adeb9e5023a6ae218c11de1eb5548619bf04dc5e147e2e007b9af

SHA512
a90758d434bdcbcbeccf5a2c9b59a4c96c5a1290791f39bcb897be1b3f582066da71879eddadbde474ed4b2cd0afa419f875f9275f07f40c396d73e83d429dad

Download Submit
/data/user/0/com.android.app.quanmama/databases/MsgLogStore.db

Filesize
56KB

MD5
a860ba3e3a648f73fc11269ff9ea9c16

SHA1
7167faf1666bdb05633e945dddc3d6af6c35fd0b

SHA256
4087524ad761d0669a39007849311b2b0a32c1a62d0a7ff04d4a77d702bfe27e

SHA512
279991548672e18e99522e1402ab96a3b1887a6ccbfa350cab5c5f5096807beb647b9cef0a5668755798f8032e243aab9ea5f1cfcd934671153d54fce48ef8c0

Download Submit
/data/user/0/com.android.app.quanmama/databases/MsgLogStore.db-journal

Filesize
512B

MD5
b8026352bc3dce911ab68fb256af1ba5

SHA1
084af7d143ea8a97494b245923b092305dc55cef

SHA256
302743686226c09f496430551d9d27f97eadd9a7a16891d336bee667dfd486f4

SHA512
51893444fe212d8e7a24f76b01a3cc4d151434d8c53d1d1cd075a5eb1a9ac805e7f518edde3b77e067336813f6821c6a334658fa3856996dccf2a9832336e910

Download Submit
/data/user/0/com.android.app.quanmama/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
6374c0f2ed4ccb10a345ace9ff2675cb

SHA1
0d007a109ee874ffc40ca6da36e93cee6ba45cb1

SHA256
4fda9880371ec2e35d0460209f7609039cb29731084116288ab93ccd05d9d7f0

SHA512
dbae6685bcb01c572645e736612018530eae9dcf61f5715f7aa08d3cf8ceb94a8b74023a6f1569491cd184ffbb8c3a82e159d924a8a965aedfec84545a638124

Download Submit
/data/user/0/com.android.app.quanmama/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
dd971edb5587ad4ec8ac838eb8d11ab4

SHA1
49befbe022b935989c28b91e254f92ebd074a989

SHA256
4aa0c71eca8c4a1d9bd84de34eeb8d9388165e04d09e571a57305e00db128035

SHA512
c292d459ed197e1f93bdee5339dca41a40f7ec1776a2cbe1fd62d466a42bf372aeebd723c7211b7df5856ac9c868de08a53498cef661dcca84988d447d6b5529

Download Submit
/data/user/0/com.android.app.quanmama/databases/accs.db

Filesize
12KB

MD5
f41f531c07d4141546a531ff9caffdcd

SHA1
9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

SHA256
bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

SHA512
e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

Download Submit
/data/user/0/com.android.app.quanmama/databases/accs.db-journal

Filesize
512B

MD5
d8be26fb27e7d7dfb5c686cd7c43d839

SHA1
d44b620ec51066c7e8fdbb87823534f7d83fda4e

SHA256
0120cb80533f23433aeacccc30b8cd2ff6b0b3d3bc8f67b2a00e46b11636b920

SHA512
eef315ac1cc64207bbbf2f3a52c8569e03c7a265c60e93482fd109dd504482a98c0a270b50321fbc322442c5715e065cc0ee442d771a615ebee18789f062678a

Download Submit
/data/user/0/com.android.app.quanmama/databases/accs.db-journal

Filesize
8KB

MD5
56687eeb8ae69a58e2d13903f577dba6

SHA1
952a7e959a892b31e65b811b8728585670a68d68

SHA256
94597234ecfcccef159ee429d6fe6fee6f50b6bdfcd1dbd7a69daa8d06be6eeb

SHA512
60534e57aad14f7ac6680930b908982ed2c1557aa0434899924b361fedbc15387c0fed89f4d4bf01001e83cf29e80508c772b0590c4b22088ff14384b791e6ab

Download Submit
/data/user/0/com.android.app.quanmama/databases/accs.db-journal

Filesize
8KB

MD5
21760530efd72f48e158c649e128eb38

SHA1
c96ff6bd8dcfc01fbc0c941b5a0e8603c8df696e

SHA256
6ee7a6319b3bcd97249a9389ff54c08024d23f18cd363702673f87c954f91ec3

SHA512
1fb12014ac5c94061364293b14cec00b79cb2c14cf702fb45e0223c42f1253fdf84a33d6213d0d01007a2ce39f3590efd401adebe68b970219e7d26e36eb9486

Download Submit
/data/user/0/com.android.app.quanmama/databases/geofencing.db

Filesize
12KB

MD5
171aedf968e17a2744d2585715606cb9

SHA1
bbeddeb3b89fcf809619c35b4a318a80e7d5b029

SHA256
d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

SHA512
78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

Download Submit
/data/user/0/com.android.app.quanmama/databases/geofencing.db-journal

Filesize
8KB

MD5
cdd898c5297947c0f99a8f91c0e48fe3

SHA1
8295a84fa458908fa04de2e1ba0cc571014e073d

SHA256
78c9a4ead2f3bce4d9c8429495de42668e107a03a30e66f3251f9556c09d1ac6

SHA512
5ae4bb4725bcac93261e2796953f5ff0fcf008ff0a9a20e2d7564b8da867e68d9726d3aee2ca06c9aa542101d3fa97b8f2862e2c88d6c889cf585db4a7c51352

Download Submit
/data/user/0/com.android.app.quanmama/databases/geofencing.db-journal

Filesize
512B

MD5
17ff4ce37a507928ba27e2864f7d4e9b

SHA1
fd9cb41050bdef41357db4561f8a5e47986c257f

SHA256
642d2386180fa68587db13c998b2a51f7eb126004b96728dddbfbdb13658404b

SHA512
f77fe367109c5d2eacf2346d66ae3c8faa440f322dacb604108433c13e1909d6462eccd6809f057fab165c57e7d88440f03ea1b749e7203f7b050688a46a8d59

Download Submit
/data/user/0/com.android.app.quanmama/databases/geofencing.db-journal

Filesize
8KB

MD5
e5d691e2fb593a1b88178abcd434ddc6

SHA1
5721fb60c8296efdf73848b4579bd883ef8dd5c8

SHA256
0d697a7f036f58aa60745d85fa06e86ddc56cb8a41511e69e9addd023ea15183

SHA512
a3b6ba21b414d97595066e6d77aa0f5dbdf2e395ef54ce9543df75bc945ed978310c931500083994f795ba31501b5088f025fe924e9d8cfcf48ea0a00f46ad21

Download Submit
/data/user/0/com.android.app.quanmama/databases/geofencing.db-journal

Filesize
8KB

MD5
241f92250ee440c8a2f51102892486e5

SHA1
2f41130ecbc35854b86a2607599956a969e2fb27

SHA256
c7287a665005aef0fa8200298e35b862dafc3d303471d9265533897cdbcd1764

SHA512
f99904fd7576a7a137b8cc1a449ae5cc311ed5c4853c0d37bbca29185a8a47164364ded0ebe74567dcdbfb131d75856160289786fdba73583e436b3c601e78e3

Download Submit
/data/user/0/com.android.app.quanmama/databases/message_accs_db

Filesize
53KB

MD5
f91d897fa2e2e6b48fe3b84cb133fd55

SHA1
ad279938abebe1874609f640a92e824ac3809f8b

SHA256
b76b0641f5b1984419320270805405c2eca9c8fde21195675e32e1f3de03e63b

SHA512
f53f441235519f1fb0abbb4090f3c57c56b3b0b5cb15b1c7d3eb4ac6195430400fffbb0412a60531c3bee3438095d9b233d9a8538189b9fa615e17d3336a5fe9

Download Submit
/data/user/0/com.android.app.quanmama/databases/message_accs_db-journal

Filesize
512B

MD5
05853bf2d0a7e64b6188de7502d610b2

SHA1
436037a42753414c8b07e337597ccb8c249f8f27

SHA256
c814f17f0a578b6f976c017a0c4c2ed0b6e5a82279f2556a880b052c42f35e21

SHA512
1200ef39988c35e6f47a70ea0ff88cfabc503bfd4ea8c5a28b8a4f73c2f3255ec079a4087392628b0c79bcc0cd074ff6096f77923252924bfee446d65f54b4f1

Download Submit
/data/user/0/com.android.app.quanmama/databases/message_accs_db-journal

Filesize
8KB

MD5
324747a19de87afcb433b771f2297968

SHA1
ce9796fd996eaaad47591aef55c2c9a77994fbaf

SHA256
6a9e514f8e054077010d37370552005cf470bf303ec412b9678c809bdc2a0bcb

SHA512
1ba26b97451056df4acac5e042f3299b16fe84767dd19540f9ddff0cf8596bd20308c6a6421012dd8d02fc1094266c614b189db401d0ee5c96cfb429bbceff64

Download Submit
/data/user/0/com.android.app.quanmama/databases/message_accs_db-journal

Filesize
8KB

MD5
9c7b2eef9f77510e252e7233583b5c41

SHA1
544ae132f96f97c19148b86b0b105693afecd9f7

SHA256
43f41f544894bf700b74b088bc8cf85ddb6de2fbfc31092a54e0b533dd8731f5

SHA512
a047595fcc9bbea7b2d9e8fa5ab2793c574513c9237a6b0f5b5b6b775f370f85647b74d795fd0fbc908fe36d3d0c2d57e435d5cb289beec82db8e85d516fe34e

Download Submit
/data/user/0/com.android.app.quanmama/databases/ttopensdk.db-journal

Filesize
512B

MD5
80e6ec2ed17cf021b4eb6ad4aac155cf

SHA1
dd2dc2483e3c77149aed30031eba10036105d67e

SHA256
98d07c41960f57168f0252d3efc2a0d843033b7642938fa0144316074ec192f5

SHA512
ec7f4ed9fb1bdcc15b5b5921ffa3da7013a2890ac79d29222c981ca5c71184bfb18fd58022f09ca6e1fc9bdee7e6dd650a1114ee42cceb0554b87f571d9c1c61

Download Submit
/data/user/0/com.android.app.quanmama/databases/ut.db

Filesize
32KB

MD5
9489d52975538d10ffe51678f7fc651e

SHA1
a2e977267c2990bc19cf28a5f3ad22e1fc549334

SHA256
c5ecf03058a050ee965b54ecd78f9c7154a3292aa3a126a3d9f4a69ff087d149

SHA512
51f0fd399a9181e411d3157225e4df8d4bc2f7bd9d7c0bbe0803af909a06deeb348c99c916db71448ab0dad7d768efd5aeae7c6d92ea41913a6cb5c09fad384d

Download Submit
/data/user/0/com.android.app.quanmama/databases/ut.db

Filesize
36KB

MD5
5d8939f13bd6c983ed26bc2d6bceebc4

SHA1
b8c9f59c5dcc060b1491239ada83bfd4c02a6ef8

SHA256
bce2f802e36b04b212c8f7397d0192d6c1cf07d90d3873164550e3a1238b420e

SHA512
0f81fda3a716954ff8ae06cc0f59e7ec49539aa0a0cf9b2a837368669ed945616817011c7f3770c4e88506122c7ef026c8bb948143f000d2d0bd1f3d2900e82b

Download Submit
/data/user/0/com.android.app.quanmama/databases/ut.db-journal

Filesize
20KB

MD5
581d30da4a5c7ab22cb11373e957e4b8

SHA1
f9b5f22d6bd1325e55f9806d168806e26088b1fd

SHA256
11e914e34201ea421f21526f76873510709356f9ac6a5ae5a3d029632418b238

SHA512
afa81cbb6cb20efc0091600101d669202b16d0dfa69190c543ecc0ba1ab226df836ab398cf55218cb5677d025382ce547639932681125e84cd92579d6e2fb846

Download Submit
/data/user/0/com.android.app.quanmama/databases/ut.db-journal

Filesize
20KB

MD5
093b1b0d7afa4fc57d03f7d2868d3df1

SHA1
5b061cfcbc55e3afc69f9e82fe3e8df259c537f1

SHA256
cc234dc7671e64cddae5c98c21bfc76f22c804e7cc1ca6bc033b62fa54a8f557

SHA512
b7d2c8c941e3dec9bc98c77c8357cf42007d84d282580f07ae23b0ed204ad6de020006b41b2b6ce50553a224c246610dcd5b1564d3ad2d67f9c0e676b3355264

Download Submit
/data/user/0/com.android.app.quanmama/files/AdDex.4.0.1.dex

Filesize
167KB

MD5
094767f7c1787846b9a4be050cb801c5

SHA1
f4892b93191ba3c2f06cb66aaa446589edd9c446

SHA256
25380360545288fee582ce904d926952f7f0627f8f191b55643e5e876e56da9f

SHA512
8d891e690c96048cf55db2f75041d7e531c8c114c52e4e6b8d37bba1062f87034b644afd1898da8c0894996bf0fc573e8101ca86f0e34a813982581ff2363877

Download Submit
/data/user/0/com.android.app.quanmama/files/SGMANAGER_DATA2.tmp

Filesize
466B

MD5
79bebd3f615b89b2a3084fe4285f5212

SHA1
d9f0781f6c1a9a0899c55ca1de417cbbd269e947

SHA256
e3c3d9f72981bad63ca340016621ecbbbbec9142326dc0d26d00e9b65c6c40dd

SHA512
4961bbbb0f6306521450c044a7c297f8afbf49a665ecdf9d4243fece04e5c5392dd60d00ce4bf08c37fb2ffb9d15fc9325b797296a924c3dd36fa2c089c4f4f1

Download Submit
/data/user/0/com.android.app.quanmama/files/SGMANAGER_DATA2.tmp

Filesize
12KB

MD5
70910bdc7450176b3abbe6f16e1518eb

SHA1
6d7d652f1ea72c53e643d1cffa612e40cf3dea84

SHA256
5f3de4ee9b43b99b782f0d12748b19c5bd5c8c5ae38fc64da753e5d5af4706a5

SHA512
d6acad6168e8eee77ec185b92c78c9f81a3d08837c2a8637dda00d806991ceed6b19aa574b33e9abb38a16cf19a6cb3b5a3e48576c6a6f9e1f5ddd22e081b1b7

Download Submit
/data/user/0/com.android.app.quanmama/files/SGMANAGER_DATA2.tmp

Filesize
8KB

MD5
c6dffd2bbb3c6801c59402deb58e7642

SHA1
1dd440e3acaeb4c9f3905d22b7693412474ada7c

SHA256
1e5c7567e90f72b34e8dc56681ba6db3b3d8fda1d40a55639abdf54be8124f99

SHA512
ec2058cc4af02216fa8017d9a8a56867fbc6374f824145e4e94b3ca98bcd5b5de3ffa6d17eda2af4c7981c206c46a4e62537391eedcb446025f1b295612b4398

Download Submit
/data/user/0/com.android.app.quanmama/files/SGMANAGER_DATA2.tmp

Filesize
2KB

MD5
7d37a7eedff2b911732fe51bbef44906

SHA1
b8fc2ec8355ad3284c2be7eb80ca49306761a587

SHA256
cf635dd7486bc3534a2732de0d96370713597987753727685c16d89f6cfe6d0d

SHA512
55a4d7752bb6345ed6ac1e01b4b94f42a9bc8910d9f3f43a657bd1615af378d8a614e50db679fda4509f3604db81825c3f1860ca3b72e76982c92d7471e16bdc

Download Submit
/data/user/0/com.android.app.quanmama/files/SGMANAGER_DATA2.tmp

Filesize
12KB

MD5
88e86ee27d404c4fccb82f694dbe5262

SHA1
9b1da6edbbecd6a724e811e477fd81ff1d2b7e9c

SHA256
fbb354dbbb87ff7a5e9a9f6a5534ace460ab542241094009148efa686b08d92a

SHA512
d85f123ff3594faba47cfe08e0996604351a030d11fb57c19d9194022666f8a50d424b740fbd43c161c12d2576e19e094e291512efea7b3263588b7e14b977af

Download Submit
/data/user/0/com.android.app.quanmama/files/agoo.pid

Filesize
85KB

MD5
a2d027403d5311c0a69ac5d6ab4d62ce

SHA1
5750edc8076fd613e3f12884ff6ca7b8dfab0074

SHA256
782ac0909fb60172b4210d6b8a1e0e064a6b22a0808c0936bf6b5202e827b954

SHA512
e2ab87bd7f43140edd306d10b659f2ad5db0a37af15e638564d9fb584d2b8a2f31f2dda4ce468e93ff1563c7c2ffaad8df1f42733b07f8fc18d1cb9a518812ac

Download Submit
/data/user/0/com.android.app.quanmama/files/mipush_region

Filesize
5B

MD5
ae54a5c026f31ada088992587d92cb3a

SHA1
d2eaf2aa1512d6596e0a5bae633537c6b8e779a3

SHA256
10436829032f361a3de50048de41755140e581467bc1895e6c1a17f423e42d10

SHA512
d6afe88ac526c5e817a9877009da962246da51846e688dfc5f40f45ef8c2fa97b8cbb3f2972e70fd1e9d5f612e1d788b1f20fa81e412bac00a1688c0d31fc059

Download Submit
/data/user/0/com.android.app.quanmama/files/tiny_data.data

Filesize
53KB

MD5
9a81f22478bcda218333800f14b23e90

SHA1
329892bc074d895bb78d5017046b4626515bdbc5

SHA256
334630827e4c558595d4663ea6765d2cd61553bc9c7c45f676ff46d223b29fbf

SHA512
d439eebe501c91efeef20f7644eecec022d2583ec9e045fc415040c8fd2b9624a9a190fb3e5b260340c82c7d3bc92db0bba392eb42bcb3b88fdf5737287437ca

Download Submit
/data/user/0/com.android.app.quanmama/files/tiny_data.data

Filesize
212B

MD5
ddcc0471bb499fc8c72149fb865d4250

SHA1
c1934d047ce4917d2901dcf80f9166c48f97ad96

SHA256
1d7c926a33e42c3a53972c8761516877680e3b02c891a32c59f4f906ad0dc4c0

SHA512
656efef51a48a9fda2feaed36b86611e53af9b2cb37aac886ee7e83cdbe9be446514221c65c8d3ed18d1b8971491b1b4c7fa3cdc93190e18cdacb04fbe7859a4

Download Submit
/data/user/0/com.android.app.quanmama/files/tiny_data.data

Filesize
212B

MD5
36dc6b398ef3491f3353f8100cb3e116

SHA1
12bcdaa4fe028324e38aea47b912067df74f84af

SHA256
8597d6887a4fd4834ceeddb6381d1ae5a1865feff8dbed91ab93ab4c74fa0669

SHA512
5ccef1fccc2884eb8eec2d7619ea75c9649960fdc4914da962b72c1059f25a9f8a75512cf56eb7bf2da1ed429a60ec15a6671dc527b55269592833b875de3098

Download Submit
/data/user/0/com.android.app.quanmama/files/tiny_data.data

Filesize
212B

MD5
a9b6bbcfa82b8dd419013761b25c54f6

SHA1
3df4b6e294e8299dc6108bdf239e11bc3e77cd08

SHA256
fe5ba29d5d130eafc954b34867689967ad023d2eae3131872fb39c408970e570

SHA512
b334e3b014a22c4b0ac5cfa3e37883349c2950ee8dae8d7131d2a4d91d9d0d1d89931f4085c4c922b525a37f047369e944164c79a8868b3424437520d67b3887

Download Submit
/data/user/0/com.android.app.quanmama/lib-main/dso_deps

Filesize
420B

MD5
7c91089542b71046f64145eed7f8d1c2

SHA1
0b6536367fd0b80c3d4e67e867d60837b4fbdd56

SHA256
1945aaad34b5d293a4c8d007b6e3dc48d99950d50635854b995fd42d1060729e

SHA512
b01aa2289dbfbca66fa7459692e2f69387df96ecc10aff0c554a896b98fd9968a3561729b94fdc674bf331ecf6fd88db6c63d48f9168d1ba8a8545bcbc3c9a81

Download Submit
/data/user/0/com.android.app.quanmama/lib-main/dso_state

Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/user/0/com.android.app.quanmama/lib-main/dso_state

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/user/0/com.android.app.quanmama/lib-main/libCMBaseInfoc.so

Filesize
85KB

MD5
890069dab4abf77bef171f685c309a1a

SHA1
bd4f633e11bedbeca47e14eb1739a580a7c8033a

SHA256
023a29dca888fcf158af3b597296505f723df765ce4ef32c25be455d4be4c0f7

SHA512
261e28b157855dba945e3565f3a9fcaa8875ba6581613352d5c45fb354508e9964c74901dc30a834a6b5ce8ee0d4fc64766786837a3a238d584c89e47f3b6361

Download Submit
/data/user/0/com.android.app.quanmama/lib-main/libiflyads.so

Filesize
53KB

MD5
928426c5c0461bfecd3815d48a7d9e76

SHA1
70bf0bec530ae7d6d30df638b55ef0c734cb0edf

SHA256
1c2c43ee46136c1628bf2a724a476c437faff702090bc39556d2d50e2f7ceddf

SHA512
8ff6e1b09dee5fc4a2f430b39a11417ecfbf8c3078fa3ad59ea7145b5fa99a819756d14f1b9aa2e2ddfbbd228ff92c353f6c8b4259382daae766cb7196097a0c

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
41598ce607c3af458d20de51e839305d

SHA1
c9aa7280ae2baeb87fe968f85453e751dafac30b

SHA256
8976e3b7575aec77f831f944ee03e7afef2be6a0f78dc21bce2bfde2b252f6d2

SHA512
8245b62600b34b72ef1d79aeadc8e83f22db410de43f0f332a37b05ff758ac75b6762ef6fe638fb21a4768ed908a7e2b7a1557ffc2ca1c391455efcd241f96fb

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
56KB

MD5
92889a79527dfa3a1c0fbf0963fc9ced

SHA1
ed4c460fb5a0c43e6d6f4d9b7d30cb0cb720ad80

SHA256
cb0a1d8c8cf0bf450c91882932b0742ecc8ac5697d00a1b71162e419bf662e7c

SHA512
da3341781cfad0842b24b285ae52f6c9f3d282380878adba059d2904badcc680085234fb663f6a150d40c9c71f7c72b7aaff5e94934465c3c525b2a1d74d0404

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
f2c48f7609f9c00d48ef2c43b6b37146

SHA1
d8796c634c09732946306bbb53eb78c4e2d8fe3a

SHA256
57db4b7c7ae27889a672f82ba5bc00302a8c02058fad15ecc0c9d2cd375ee22e

SHA512
4626c439b82b3b1f8bf19a8e1d98e58f0f09cc11b6419e993153b7d3843762f13e974494b12327d7239b196a56a2cc224025e06852011c3c0c2d71a117330d66

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
fbf42b61da0bef69fdb224bbfcaa90b9

SHA1
c507230c04be6d8c26a3b1f8f2b1200d360efb01

SHA256
6294826df9fd1f628daf6b170267d59c30fcbc04d806e092e0e117ebe9749940

SHA512
b3fa58d9325360627bdff30c4345d50722457b4e3938f122a260d23ba37b600af363382f0a2ad76a1a11e93277654dfefb816bd1760b146378b48de9de6d8958

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
8KB

MD5
09652c5dc3eb5a879624dcfa67c1c299

SHA1
0fc7c88f97f824a3623a21bf989dda782fee1099

SHA256
7a47930883ff11edae81766cd329d89d800647cc27d4de8b898dace7acd567bc

SHA512
ec3307df8f45c9f3d2c6efd30f6a49af87292b014404d2f1c82658667cba6eacdbe35c3f7b616ccfbbc222e03e9bcaf57a2b13ff347078ea233186556cf5e4bd

Download Submit
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

Filesize
512B

MD5
7c48cb00648f4b26517ceda17f5d8edc

SHA1
17c0fc04d564c95b716932bdce977c6107a4dd5f

SHA256
3a931b59679eac03d87c8942647fd6674d890fba76b81eaa6b4e1476e8ade4f7

SHA512
fd3910610b170174a715bd5119aad10752399cfd803ba8c3d1344a65d3376ab829d4041f0f96690c92b39b461ae685f7d22a202e896685b1740a9dfdde61fb6a

Download Submit
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

Filesize
12KB

MD5
ea0a93d92360635705ff65d766ed36fd

SHA1
17f1ff58bbbb46839f4c9f6d88ab45d5e8016052

SHA256
eab1915142021298f0f829bd0d8e33a225365fa37083a3882c6116a3b4f08f28

SHA512
b63067678adcbf7980466987a0531ff070a0986cd59a2bab9630d330936acd9f6c7a3291e67b1c5a18efd4463a88fdf58f6b3549d43c2b399fefbdb54db6cb0b

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt

Filesize
1KB

MD5
260228448598b0e9c6caee9f261ac1e7

SHA1
a979da4d8e0546b0157b046efc0be9ffdf7fd6d1

SHA256
2e5df1f20b9a408498285bbc9fb96960ddcd919501ca2cd09d4cd37f1dc4cf5a

SHA512
f3ad4d9e86f1721fc560ea506f67bfa1e7d54dcaac5ac18308ddf09d37d6f18c789196cfb408add7b88a4b73235201c68be080528b26eeb651b28428d3cf14f2

Download Submit
/storage/emulated/0/Android/data/com.android.app.quanmama/files/MiPushLog/log1.txt (deleted)

Filesize
2KB

MD5
f4c8680bb9290d3fe6fa42447b1af7d2

SHA1
eb1bf58a03e5041fc3e2711f7eb1765d9b6c28ea

SHA256
f0ed8dd841a528cf9cd2d5a7a341d9dedc8908db67242d74d2cfed7c1602f737

SHA512
8649ff63a5342b2c5fbe41271d17c31c3c22ebeb39a5907034dc24f5b44c018a4309770718854916c4fd6232e39e88950a0b14b4e7dfb3270f42ce7011bfbedb

Download Submit