Analysis

  • max time kernel
    2768222s
  • max time network
    164s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 20:49

General

  • Target

    8ea8c506cd1732ba60c230b9985ec9cb2d37f487f12a6384d569b7b9df11fada.apk

  • Size

    31.3MB

  • MD5

    138c861b1d352bc97f43a7b4cb886cd5

  • SHA1

    646e4db9fbba604c4d03da53d3c165d66f2c7152

  • SHA256

    8ea8c506cd1732ba60c230b9985ec9cb2d37f487f12a6384d569b7b9df11fada

  • SHA512

    c9788a425b60a0b3064c6bcd879cb869fe105e1786b726f54aa70e0644f70b1e0b15ad2705aaced01400bbd58e78e5bad3c9f142f36bdf575f6fb0e67a820ac5

  • SSDEEP

    786432:+jfI1EJhMnadYVgGjPkCbNnaXsDQO1Tyfz0ecf8813W6:+AEWadYVkUaXvOJnfB1R

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Checks Android system properties for emulator presence. 2 IoCs
  • Checks known Qemu files. 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 5 IoCs

Processes

  • com.qujianpan.client
    1⤵
    • Makes use of the framework's Accessibility service
    • Checks Android system properties for emulator presence.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4275
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.qujianpan.client/app_aisdk/_aisdk_local.jar --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/com.qujianpan.client/app_aisdk/oat/x86/_aisdk_local.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4323
    • getprop ro.build.version.emui
      2⤵
        PID:4431
      • cat /sys/class/net/wlan0/address
        2⤵
          PID:4513
        • cat /sys/class/net/wlan0/address
          2⤵
            PID:4539
          • /system/bin/cat /proc/cpuinfo
            2⤵
              PID:4565
            • getprop ro.vivo.os.build.display.id
              2⤵
                PID:4679
              • getprop ro.letv.release.version
                2⤵
                  PID:4708
                • /system/bin/cat /proc/cpuinfo
                  2⤵
                    PID:4730
                  • getprop ro.build.version.emui
                    2⤵
                      PID:4747
                    • /system/bin/cat /proc/cpuinfo
                      2⤵
                        PID:4785
                      • sh -c cd /sys/class/net/wlan0/ && cat address
                        2⤵
                          PID:4828
                        • sh -c ls -i
                          2⤵
                            PID:4848
                          • ls -i
                            2⤵
                              PID:4848
                          • com.qujianpan.client:pushservice
                            1⤵
                            • Uses Crypto APIs (Might try to encrypt user data)
                            PID:4628
                          • com.qujianpan.client:pushservice
                            1⤵
                            • Uses Crypto APIs (Might try to encrypt user data)
                            PID:5025
                          • com.qujianpan.client:pushservice
                            1⤵
                            • Uses Crypto APIs (Might try to encrypt user data)
                            PID:5397
                          • com.qujianpan.client:pushservice
                            1⤵
                            • Uses Crypto APIs (Might try to encrypt user data)
                            PID:6721

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • /data/data/com.qujianpan.client/app_aisdk/_aisdk_local.jar

                            Filesize

                            820KB

                            MD5

                            aa7aa46f0cd80e489f94b8bfdb33aaaf

                            SHA1

                            df529afef261f9dea7d80557162206c86106e89e

                            SHA256

                            e0acfa01e36b962d1c1c9191557a938efdf3246f419f1eb6c9df29e0c196cc68

                            SHA512

                            f7ef44c13ef790865e58a529f573bf4290b4574a842a9ee219cae8bce3dbc5690f46e34c4172fb211291f52cb7d1efde1b24cf45702cf155a9601276486222f5

                          • /data/data/com.qujianpan.client/app_aisdk/oat/_aisdk_local.jar.cur.prof

                            Filesize

                            362B

                            MD5

                            19400e56758810ad9afd424c19531dca

                            SHA1

                            8d605c729a1959cb049d2edb4e0ff007c709604a

                            SHA256

                            508c3f35e65b8593b905047d28517b336e86357f03682c1460f7da647c11ac76

                            SHA512

                            4ef9bfa3bcb22f8f19f8fd69c2c33ae91b239769ae7187eaaf1400eb61839f416d5395a8eee23457d72b62ae458f65e5a9c1a0008dc29a45fc1dd8906926cc29

                          • /data/data/com.qujianpan.client/app_crashrecord/1004

                            Filesize

                            58B

                            MD5

                            0d210bfb2a0e1f1b4c082a6a0f79de07

                            SHA1

                            bb8ed9e364db79d1d9f2fcde3f15091893222faa

                            SHA256

                            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

                            SHA512

                            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

                          • /data/data/com.qujianpan.client/app_crashrecord/1004

                            Filesize

                            231B

                            MD5

                            01994f5e692611586a1bb629fc954faa

                            SHA1

                            8790a458a4c835f89d960a02e6a2a0436e68829d

                            SHA256

                            850e167ef924021d45818776400e0e1683a04bcaf5cacc4fbd301b714dc344ce

                            SHA512

                            f8f34bd5eaa2472b5ae10f5855158b95716d714778106db261fd0c1c72f76ec6f15a900bd731f0acc4bc99788dc964263541aeada43bdb7a83e80ccac78dbbc3

                          • /data/data/com.qujianpan.client/databases/bugly_db_

                            Filesize

                            4KB

                            MD5

                            f2b4b0190b9f384ca885f0c8c9b14700

                            SHA1

                            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                            SHA256

                            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                            SHA512

                            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                          • /data/data/com.qujianpan.client/databases/bugly_db_-journal

                            Filesize

                            512B

                            MD5

                            d6fd42e940fdbe291d4b78b0a79c5b81

                            SHA1

                            8e5620a2892392f0153ed756f8660fa631b7eaa4

                            SHA256

                            e286d2bc1be37756f5293a895f601a526af89e86821eef8eb6f6795e8d8cbd46

                            SHA512

                            2f90512dcca958f1ecc624a973270f71498335daa2df12e3379bf030ea80e11fa00156a347dc5cde3614a18523dcf025f86578a5ee296e8a6bdd10e3b69de03c

                          • /data/data/com.qujianpan.client/databases/bugly_db_-shm

                            Filesize

                            28KB

                            MD5

                            cf845a781c107ec1346e849c9dd1b7e8

                            SHA1

                            b44ccc7f7d519352422e59ee8b0bdbac881768a7

                            SHA256

                            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                            SHA512

                            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                          • /data/data/com.qujianpan.client/databases/bugly_db_-wal

                            Filesize

                            68KB

                            MD5

                            953abbeccbc96632decf2cf577b9df5a

                            SHA1

                            8b2819ecb985caf7c1021ce2847fed5678432fe1

                            SHA256

                            f86281930ab4b62b9cfa822fe543a939d4dd2d0cf6be4557edb560ee094acea7

                            SHA512

                            337fc681a91b00a65c4df147ebfea0a2f5930e3d78b4244dc2fa41b784996048b221562e53de3c998a35a4bb3dac0fb18857b6faec62365a988ab0ac38e9750a

                          • /data/data/com.qujianpan.client/databases/downloader.db-journal

                            Filesize

                            512B

                            MD5

                            e443b83c15e4fa77c019170eec169306

                            SHA1

                            be46390ef91148adf93b23665f53ec8ded46101b

                            SHA256

                            faeb4bbc63a0771160e53ef3d8085e5c91d603ac3eb6482e3d58933d10654f81

                            SHA512

                            03ba603497df318b4748ff5160ea0d80fd5de5d50ab916eaef2eb9ae145951fbbed835294ea28164d624cf9eb8f80cfd9b1fdec7f60734ffbabff8102eded483

                          • /data/data/com.qujianpan.client/databases/downloader.db-wal

                            Filesize

                            16KB

                            MD5

                            ac0622cba0fd9368802c883dec066af3

                            SHA1

                            7e0d8a68940484727f8c3d4b4a735d6076964f86

                            SHA256

                            dcf8195d72cbd5f85f8096619eb109989164f7b9cbe9363b349f8e0a2ca32252

                            SHA512

                            3c23eb8865030ca74544ff232b55814cac2b19d804420683602887dbf9ed7976fd78b422a5329ce62f88b258adc4abdf9fd5fb53636f6be95fb2c75808d5f9a2

                          • /data/data/com.qujianpan.client/databases/finch.db-journal

                            Filesize

                            512B

                            MD5

                            dbd1712461b400d661ab93da888bfdae

                            SHA1

                            a7f80fffe2c40203318ecd3a641a70edc6da021d

                            SHA256

                            038018ab87e0436e8b6cbf968c8f1338de60cecc7b79fee94fe1faad958a31ab

                            SHA512

                            fb8c031a7891d1c4af4a8c24a1934469f45c041fafb917aba5f64fcc1e394d46268a03f61cb9f6d8f9ace29433a380ff69d29a68979277f72719ea2425866bd6

                          • /data/data/com.qujianpan.client/databases/finch.db-wal

                            Filesize

                            48KB

                            MD5

                            00ddefb333504fa17ea4288bab7337cd

                            SHA1

                            0f64ad8c9b52e83918265aa45773887f27df1031

                            SHA256

                            ecce307ccc3f478a0c813e3c16ba10f3407bd07d88d02ec0b4520ae570729b48

                            SHA512

                            311b66cd4491194b9c50054b3d8067e303784446b1992a0fb6662eb334ac61463b3a39071e5e566130b702bdd1c1cd92238cd0c4ac6c50a93f7ef9e387488e87

                          • /data/data/com.qujianpan.client/databases/pushsdk.db-journal

                            Filesize

                            512B

                            MD5

                            df4e687d72410016a2583125686f6013

                            SHA1

                            f206cec08d6b99b3153fc32963c7163969fbd69c

                            SHA256

                            f430475e90db7a724405eaeb9c1665a6b8c90db71389f3b174697d4744cc5d80

                            SHA512

                            a28772f1edfe131a57755e55b8dbfcfb5c3c5f32316e6fc628fe2b0d45a287ff161304998c4437d5521c1bfa5a0f3f6595e864a5d8e76514c618f01e58a2a6f6

                          • /data/data/com.qujianpan.client/databases/pushsdk.db-shm

                            Filesize

                            28KB

                            MD5

                            e19723f62cf325c828d821d8617ddb97

                            SHA1

                            417c2586d936e86686becc90db870da5fee7feb3

                            SHA256

                            90737620c80067c96282e07f600ca16d9a5584ab727e41307ee953b724f7cbd1

                            SHA512

                            68fba8d1a4b31b44afd18db8738fc0675160b0a8653f877e6cf005b94459dffa8da947f7f5b23fc22a38892f6a350442d4c08a159320d60a37a42e9e0405da4d

                          • /data/data/com.qujianpan.client/databases/pushsdk.db-shm

                            Filesize

                            32KB

                            MD5

                            bb7df04e1b0a2570657527a7e108ae23

                            SHA1

                            5188431849b4613152fd7bdba6a3ff0a4fd6424b

                            SHA256

                            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                            SHA512

                            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

                          • /data/data/com.qujianpan.client/databases/pushsdk.db-wal

                            Filesize

                            124KB

                            MD5

                            18f1bafbe90d07e4c4dd97803b70054c

                            SHA1

                            6138a217b08301028d096ffab294868fe25b55fc

                            SHA256

                            fd9b3ecfd44edd7d5a5bc5524376fac51b131da70040f8b13dd3983efcb497e2

                            SHA512

                            45589caee345efa8c72121f0ed27bc3390943800f3a8c6c0d2ab432dc0b69b2c7b57d2fd34db28b3deb3731c85a92217060dd3123fff39e37e6994dc6d092e2b

                          • /data/data/com.qujianpan.client/databases/pushsdk.db-wal

                            Filesize

                            104KB

                            MD5

                            ec442ab2c163eb48f442a89431d7f87a

                            SHA1

                            e99e8b7e7edc50e3729d6c1226ddf814812667ec

                            SHA256

                            95bf11f1162a5f28eb76527a2e444807f736c779a758f8b4685ef37b148e4abd

                            SHA512

                            c798c938e393c72cf61e5fb691440f898077feb13592412ae1259539d8c5601ec3525998282f89f10ccf709c94d79ae5f7664ea878231c4ed420c304f78983be

                          • /data/data/com.qujianpan.client/databases/ua.db

                            Filesize

                            36KB

                            MD5

                            0adda9c85a5e4808f5b1b74c0a8591a5

                            SHA1

                            5048107883ab1e345af9cf2e6849ce46e0e612bf

                            SHA256

                            1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

                            SHA512

                            646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

                          • /data/data/com.qujianpan.client/databases/ua.db-journal

                            Filesize

                            512B

                            MD5

                            e46dbd47a969e929ace5e067c5c9d520

                            SHA1

                            11c36626fcc5a90dd6a0d5ca04f6023f940c81ed

                            SHA256

                            dcf92267c7f3269e8ac6c0bd8beb41b76724e29729f8d4358d5a5c48eb4317b3

                            SHA512

                            d2f83eb56f565426874563eadbeedfb1c95c3828f632fe8f8ff2d3466b8d496b949b70aa73fe188f91bb3458a8d3a12647be6bde6b8d4e6410a6f6b28fe06681

                          • /data/data/com.qujianpan.client/databases/ua.db-wal

                            Filesize

                            48KB

                            MD5

                            ca655c94acc1cce7e1aa754203cb2a39

                            SHA1

                            a0f92df28fb67209638401faad55d2c804e17a48

                            SHA256

                            de8043828c69cc7e9333665839662883cef1f3c1761fa92db450bc1b27c32e1c

                            SHA512

                            6b76a43938a99f2b831b85331874a9260cf9ad0ff6c4c46f4e133938a8c908f3475e8c0f113145ad4b8cffa68693336ee89934a86f9dc5c426cd9a22b4894e08

                          • /data/data/com.qujianpan.client/files/infoc_sdk/urgent/83_1a95104b-42e4-4cde-83ee-0a5a3950e363_1703575163597_0.ich

                            Filesize

                            158B

                            MD5

                            61cdf4454f7fb00d496abd8379151b9a

                            SHA1

                            145aded4421e63592bd6e75f1bf7059f212e17e3

                            SHA256

                            96b705c4142f663c444aa3d944f9ba6ff48370bbbd43d5325e30774710de2fd1

                            SHA512

                            67e18da1f0b52c7413ca11a44209d09295f21959cbaec864d98a660779f541c3361911bd796e7b321acb9061c4b138336f5b2fb01746b34ab26c18b6041a9029

                          • /data/data/com.qujianpan.client/files/init_c1.pid

                            Filesize

                            4KB

                            MD5

                            8cd267a0fa7a4fae3366de4aef32b252

                            SHA1

                            51268dbf7c12baaafdb853ebd375a7cf6d356184

                            SHA256

                            44ddf5bc134f99689acda697dfde1933632945eb1f53debb5674f5aa792a8315

                            SHA512

                            9db3e2d4dc16e7a750b78f8cd08bc5d7e282fb895310b16e9e7d348759b51e08092383fec812f88699aa926ecb0c23a10bd5f91ee93e8bc02dffad387b241685

                          • /data/data/com.qujianpan.client/files/inno/com.jifen.accuid.i

                            Filesize

                            32B

                            MD5

                            d6540a9feda6a22db69d1d89a64f8425

                            SHA1

                            293ddfcabdba4aebe62bb844c18f9ff3c77e9255

                            SHA256

                            1f00c46a3c478d83871ba057d02792c837548b67a9bdb59814731f02d21e508a

                            SHA512

                            15b62155af700b1ddb2a254eaf8fd01671befe445f13486ea397c33ebc7c782c6990e27335b3916d8f57f03746c0659280d071868ab051602a6a534ce3e27ea5

                          • /data/data/com.qujianpan.client/files/inno/innoMacs.i

                            Filesize

                            89B

                            MD5

                            48aa50820e570e79e57289312a15bd34

                            SHA1

                            8cd76b150b98205579ef2d29f6bea9c5b16afc5b

                            SHA256

                            f7c420861688fa0a3ed895773e610e5d084fb7ac28318fe208a5cd0d8e3b2639

                            SHA512

                            307e459489142e01ae1f36482e3929cded6beb99834d8e7da99da76822900a8d3c835c19d13c677edf70f20b25d86fe27bd4add5472183ecfeba720a357d703d

                          • /data/data/com.qujianpan.client/files/inno/inno_cuidSour.i

                            Filesize

                            2B

                            MD5

                            6bb61e3b7bce0931da574d19d1d82c88

                            SHA1

                            7984b0a0e139cabadb5afc7756d473fb34d23819

                            SHA256

                            1bad6b8cf97131fceab8543e81f7757195fbb1d36b376ee994ad1cf17699c464

                            SHA512

                            4fcdd8c15addb15f1e994008677c740848168cd8d32e92d44301ea12b37a93fbd9f0a0468d04789e1f387b395509bd3b998e8aad5e02dd2625f0aac661fb1100

                          • /data/data/com.qujianpan.client/files/inno/inno_dbcreat.i

                            Filesize

                            1B

                            MD5

                            c4ca4238a0b923820dcc509a6f75849b

                            SHA1

                            356a192b7913b04c54574d18c28d46e6395428ab

                            SHA256

                            6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                            SHA512

                            4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

                          • /data/data/com.qujianpan.client/files/inno/inno_gadvid.i

                            Filesize

                            36B

                            MD5

                            f74b66d5b3d1b07d0cf343d94cc0e38f

                            SHA1

                            5a061bb84231aad79891904574c366f07686d8cb

                            SHA256

                            f5d655c5f3057c1a0b71fc552bda31f6ab39d41b64bf411a5559506f007e1440

                            SHA512

                            91e635704109ae457b07636c881716580851512ba14e6072bf437292d1c4cb4a1c2dbb43a402cf3abf1d74d600bf2b5455206469f5c83d0ec086e18755093a05

                          • /data/data/com.qujianpan.client/files/inno/inno_ipv6.i

                            Filesize

                            30B

                            MD5

                            09bfdd2d4768244acab79ac6a84acf2a

                            SHA1

                            448fbb8afdfd997500339a4f9b3a565707b15162

                            SHA256

                            eacf070b2a7c8d8fd8284d036a510dbb720569c23b95f21551daa42726ac4d4f

                            SHA512

                            8d5cd3b5c3d9a346e886755345e9fdeaf7ef320dcd743457c287d3c878770174bf38b0950c0d4b4dae7ff0932c09ba2e7f6a63e5a63b203027226a7b839e7c38

                          • /data/data/com.qujianpan.client/files/inno/inno_ncuid.i

                            Filesize

                            32B

                            MD5

                            de488761c557a2118a50622ffbbbf40c

                            SHA1

                            985533439173b6bc589a86160dbb2272a0126baf

                            SHA256

                            48b8c61ad097558ed8c5696c2d160a99348a4df95ae1b740eeaae3eede070548

                            SHA512

                            64cbee3886e3c814c59b32a32a266679d53cd5f284722dda581aa8cc7e6ab8b6d65e9e9975fca01674fe8a7df3fea0b51303a8d1eccdca678e7a5797b55aeccb

                          • /data/data/com.qujianpan.client/files/inno/inno_ot.i

                            Filesize

                            13B

                            MD5

                            8f3ff74890d53ccbb9752cada75a036a

                            SHA1

                            777e728e8d044dbd17141dbc8efedd14dd4ac8b3

                            SHA256

                            8e46ed2bc9294de518c604950ebdd06bf4e43dccb7c22d8ffff55767752ce9d5

                            SHA512

                            4592486ecd9db13975d0109fe9502d63040d9d144f2058d7e29d4d43b18bf7a333615f79d7d34a40cdfe6f50351c3390841647e37d6625eca008d3e0a92db974

                          • /data/data/com.qujianpan.client/files/inno/inno_scshot.i

                            Filesize

                            1B

                            MD5

                            cfcd208495d565ef66e7dff9f98764da

                            SHA1

                            b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

                            SHA256

                            5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

                            SHA512

                            31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

                          • /data/data/com.qujianpan.client/files/mmkv/InputProgress.crc

                            Filesize

                            4KB

                            MD5

                            620f0b67a91f7f74151bc5be745b7110

                            SHA1

                            1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

                            SHA256

                            ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

                            SHA512

                            2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

                          • /data/data/com.qujianpan.client/lib-main/dso_deps

                            Filesize

                            296B

                            MD5

                            5d66a7bc9036b95ed31df37ee882c747

                            SHA1

                            a1c8ee1c04687a68e6bef67c62ceae638ee2a2c1

                            SHA256

                            81d442816fe9166da1b3f945b3ac700254d7a6a40179ab39b1d55fe8d755c98c

                            SHA512

                            47ad297750027d19554d90ab5f93b44bfe2bfc0310eba9a5c48829738b91bcc6c5138a08a422063637e847416c3f77feb9a77d2dc3f4a712941107191a9ffab8

                          • /data/data/com.qujianpan.client/lib-main/dso_manifest

                            Filesize

                            5B

                            MD5

                            c06857e9ea338f3f3a24bb78f8fbdf6f

                            SHA1

                            c5a0a2529d2deb60fec041b4fbd722a2ebe31702

                            SHA256

                            957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

                            SHA512

                            29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

                          • /data/data/com.qujianpan.client/lib-main/dso_state

                            Filesize

                            1B

                            MD5

                            93b885adfe0da089cdf634904fd59f71

                            SHA1

                            5ba93c9db0cff93f52b521d7420e43f6eda2784f

                            SHA256

                            6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

                            SHA512

                            b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

                          • /data/data/com.qujianpan.client/lib-main/dso_state

                            Filesize

                            1B

                            MD5

                            55a54008ad1ba589aa210d2629c1df41

                            SHA1

                            bf8b4530d8d246dd74ac53a13471bba17941dff7

                            SHA256

                            4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

                            SHA512

                            7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

                          • /data/user/0/com.qujianpan.client/app_aisdk/_aisdk_local.jar

                            Filesize

                            2.9MB

                            MD5

                            f76155b875cdd13011cf3eba03327eac

                            SHA1

                            a26fe92cef66c118f09e1aed1f71d3bd8d4f9f14

                            SHA256

                            7d5b9ce923c4cd29fbed72a306776562936a665b3a7f10751ba55562644071a6

                            SHA512

                            156492dc143ef75ecdf4a24ae57a7815fe240b917ad965ac4b6542cc8ecf0ef503a50c55c822df42a3b2787b9a6404d298522cb39b11a4a759860d153c35942e

                          • /data/user/0/com.qujianpan.client/app_aisdk/_aisdk_local.jar

                            Filesize

                            2.9MB

                            MD5

                            f4cdef526375f8df36a827f7561be792

                            SHA1

                            be9c11930207f7f68be6351f6e2f136e637f3eee

                            SHA256

                            6c2e48cd53f047058a805b463afb68c9cc17d2cc92b8ff21c7be0a0fd6f3d635

                            SHA512

                            d3510f047bb3a03645530efab705c72da135dbea9c6f9a5a988443cf1446da17677764d360960779ee715250038709cfb7fb4dcdba8c2f635017f8ef3a6fb21e

                          • /storage/emulated/0/Android/data/com.qujianpan.client/cache/tt_tmpl_pkg/template/ad6bd3e6bc7eec226d76280544f2ef19.tmp

                            Filesize

                            1024B

                            MD5

                            e09ae7ea4cb406cf54cf60d5ffec01cf

                            SHA1

                            d69665ced20ab4c8780df1941a42c2e8db6b8c85

                            SHA256

                            2e3b52320109821d5c6972a38c767572fd4067dd5ab13c60388e72d0dc6b6ee1

                            SHA512

                            05fd9ba6d9c7ccc553278336802f67e4d0d683dc50b6e4b175e0249900d95a8ebc44bae222682a5fbeb7fce5b36bbb99ed0534e93acdf7a4f0a12c7b2fc6afc2

                          • /storage/emulated/0/Android/data/com.qujianpan.client/cache/tt_tmpl_pkg/template/efbcd986c1fee7f430303b1db3ac9661.tmp

                            Filesize

                            79KB

                            MD5

                            cc029228bf8d47199f8a646fe6379e61

                            SHA1

                            bf0252df22d0c3f40b20ed7f8a27da08d8ff47c1

                            SHA256

                            082fca1376fa2039cf14eab6236004c7015d05adb09a9a8cc57d8912b997b200

                            SHA512

                            426182b255c4af5fbda5b561a26bc077fc30fbda5ee170847e7f0519730d34d87bf231c43cdddc36b775b03bc79a685b23ddd7615c808faa1f086c4e1fad5b5e

                          • /storage/emulated/0/Android/data/com.qujianpan.client/files/tbslog/tbslog.txt

                            Filesize

                            1KB

                            MD5

                            eff3a0c057598952872cfc9179d45408

                            SHA1

                            3958ea59c8a0608fb85a6cd03b0e4f7d74ec1332

                            SHA256

                            a3781b390019b20af0d42b87e767239cb4657968d5f4312419aa47ea686b4ea6

                            SHA512

                            3cd54fee9f977b13a8ac3b33bc2091f169b77eed187477ca6a2fd7dd86c0df80b366767f5d1cc0debfdce913014c0a96797fdf7873c1861c67c1d349d29272bb

                          • /storage/emulated/0/libs/com.qujianpan.client.bin

                            Filesize

                            67B

                            MD5

                            09a375497e2d478484b65aee8b31f7bf

                            SHA1

                            0116bc41beacd23a749ebc466b47cfba9faba774

                            SHA256

                            40f00535032fbdb359185f50e942854fe785a050f6d4bf2b45f8f1ca901e7aad

                            SHA512

                            a433e6fb89ad9cd01ba8f4d00f6e8594b843947175ee12f3d3c64194e82a5906ace135bed05d3ac1d404c400783dfec91b4cfbd3bdf7c261d25231ed3adf854e