[Android Apps and Games] GenericAsianGuy:
UPDATE (2015-09-12): an older version of QuickPic has been found (v3.4.9.1) which is before all the cloud integration (and server callbacks) were implemented. In fact, it does not request any Internet permissions at all. If this interests you, see the bottom of this post for the original Play Store APK and also the re-signed (neutered) APK. Credits to /u/var_without_a_clause on Reddit. An analysis of it (click on the "File detail" tab) shows that it does not have any server calls as found in v4.5.2 (e.g. http://ver.q-supreme.com/update, http://alog.umeng.co/app_logs, and http://alog.umeng.com/app_logs)

Summary:

v4.5.2 = pre-acquisition version that came with cloud integration and unfortunately some server calls. To block Internet access, use AppOps, Privacy Guard, AFWall+ and/or XPrivacy.

v3.4.9.1 = older version without any cloud integration/Internet permissions/server calls (may contain some bugs due to its age, but I haven't encountered any). In fact, I think this version is more responsive than v4.5.2.

Here you go, this is a re-signed copy (v4.5.2, which is pre-acquisition) so it will never ask to update:

Re-signed (aka Neutered) QuickPic v4.5.2

(you need to uninstall QuickPic before installing this)

Primary (xda-developers.com): View attachment QuickPic_4.5.2_neutered.apk

Mirror #1 (robustfiles.com): https://robustfiles.com/dl.php?key=/8TVR/QuickPic_4.5.2_neutered.apk

Mirror #2 (mega.nz): https://mega.nz/#!blgGTZCZ!S5uijYQHReiGWqixCkmMZ1Ztsigd3YwWkA0SAuCRGuk

Mirror #3 (zippyshare.com): http://www92.zippyshare.com/v/cQIiYRWt/file.html

MD5 of re-signed QuickPic v4.5.2 - 304159a86a8d207d864c26644adcd624

SHA1 of re-signed QuickPic v4.5.2 - 3b5a20be24afe2d791dd9785ead4d7948a30bdc9

SHA256 of re-signed QuickPic v4.5.2 - f7e383dd30687467ea085ba81b48dc6762be18bd550599a13824cfd65074d6fa

Note: if possible and if rooted, I may recommend using AFWall+ (Play Store / F-Droid) to block QuickPic from accessing the Internet (if not using any of the cloud services). Just install AFWall+, change blocking mode to "Blacklist Mode", then tick LAN, WiFi and Data for QuickPic to block it (and really any other apps that don't need Internet access, like games, camera apps, galleries, calculators, etc.). I believe even pre-acquisition by Cheetah Mobile, QuickPic would connect to servers like http://ver.q-supreme.com/update, http://hub.q-supreme.com, http://alog.umeng.co/app_logs, and http://alog.umeng.com/app_logs.

Original Play Store QuickPic v4.5.2 APK

The above file was created with the help of this guide and the original QuickPic v4.5.2 APK => I uploaded it in case anyone wants it as well. As verification, you can find an identical copy of the original v4.5.2 APK on APKMirror: http://www.apkmirror.com/apk/q-supreme-team/quickpic/quickpic-4-5-2-2-android-apk-download/.

Primary (xda-developers.com): View attachment QuickPic_4.5.2_playstore.apk

MD5 of original QuickPic v4.5.2 - abdd8eedc39d4cbe6eeb6452fd3e04ce

SHA1 of original QuickPic v4.5.2 - d8efb2339485b670be5555e6027f0eebe5cf5dd1

SHA256 of original QuickPic v4.5.2 - e40907a528a6d6eed43aa2ceebaa5b3f99d8bf5484dedd2e762e5f1b1f182e9b

Online Hash Checker here: https://md5file.com/calculator

I provided the MD5, SHA1 and SHA256 hashes of both the original and re-signed QuickPic v4.5.2 APKs so you can be certain that I didn't tamper with it other than to re-sign it. To verify, you can follow the steps I took to re-sign it by using the above guide and the original APK if you wish.

Re-signed (aka Neutered) QuickPic v3.4.9.1

(you need to uninstall QuickPic before installing this)

With this version, you may not need to block it with AFWall+ or XPrivacy (since it does not request Internet permissions). I am personally using this version (Greenified, blocked in AFWall+, and blocked in XPrivacy except "Storage" and "View") since I don't use any cloud features (as found in v4.5.2) and I find this version very responsive.

Primary (xda-developers.com): View attachment QuickPic_3.4.9.1_neutered.apk

Mirror #1 (robustfiles.com): https://robustfiles.com/dl.php?key=/x0tm/QuickPic_3.4.9.1_Neutered.apk

Mirror #2 (mega.nz): https://mega.nz/#!G4xhALRI!XklhIxoWKjfG-2cLFAYi2Pfmln1BOwg2UH_ZbkSO9qA

Mirror #3 (zippyshare.com): http://www26.zippyshare.com/v/ezc0xlGt/file.html

MD5 of re-signed QuickPic v3.4.9.1 - e1e8a26a65fcd56f782c63de7a600f68

SHA1 of re-signed QuickPic v3.4.9.1 - 8dc89e69b84a8635fb8f75115594c21443d2cd24

SHA256 of re-signed QuickPic v3.4.9.1 - 0607f0d9202149b4acac3ed3b54ee632e0edda100ac47ef9e189aa9cb08c47c0

Original Play Store QuickPic v3.4.9.1 Version (note: Play Store will ask to update)

Primary (xda-developers.com): View attachment QuickPic_3.4.9.1_playstore.apk

Mirror #1 (robustfiles.com): https://robustfiles.com/dl.php?key=/FSsB/QuickPic_3.4.9.1.apk

Mirror #2 (mega.nz): https://mega.nz/#!C5YlWTyZ!whTqGHZAznhym7HTWI_T7VwaQMSHqi3MfaLELz-y9nk

Mirror #3 (zippyshare.com): http://www26.zippyshare.com/v/5wXSGWmc/file.html

MD5 of original QuickPic v3.4.9.1 - 73afea1666145eb3b3ba16501125c745

SHA1 of original QuickPic v3.4.9.1 - d558b65d76f2ba2e6a18c7a31d8377bb1f9b3524

SHA256 of original QuickPic v3.4.9.1 - e66b1e35220d2647c454e40a0ef10348139a451f4a69a636715ee3c6829fbae6

Have any concerns about the re-signed APKs?

You can download the original Play Store APKs (either from above or from APK Mirror, etc), compare the hashes I provided (or find hashes elsewhere), and re-sign them yourself using this guide or a tool like ZipSigner.