Overview
overview
8Static
static
63ed5507879...18.apk
android-9-x86
8ugpsdk-core.apk
android-9-x86
ugpsdk-core.apk
android-10-x64
ugpsdk-core.apk
android-11-x64
ugpsdk-lib.apk
android-9-x86
ugpsdk-lib.apk
android-10-x64
ugpsdk-lib.apk
android-11-x64
ugpsdk-upgrade.apk
android-9-x86
ugpsdk-upgrade.apk
android-10-x64
ugpsdk-upgrade.apk
android-11-x64
Analysis
-
max time kernel
150s -
max time network
162s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
13-05-2024 09:33
Static task
static1
Behavioral task
behavioral1
Sample
3ed5507879f0f301e9406b9bedd63542_JaffaCakes118.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
ugpsdk-core.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral3
Sample
ugpsdk-core.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral4
Sample
ugpsdk-core.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral5
Sample
ugpsdk-lib.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral6
Sample
ugpsdk-lib.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral7
Sample
ugpsdk-lib.apk
Resource
android-x64-arm64-20240506-en
Behavioral task
behavioral8
Sample
ugpsdk-upgrade.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral9
Sample
ugpsdk-upgrade.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral10
Sample
ugpsdk-upgrade.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
3ed5507879f0f301e9406b9bedd63542_JaffaCakes118.apk
-
Size
15.2MB
-
MD5
3ed5507879f0f301e9406b9bedd63542
-
SHA1
e87f459a0348ddecfedfc70d2778f3e99098f050
-
SHA256
47cf389d2af4a899439bd8f2453235fda639538ffbbffc1016fa05d28aa6e0d4
-
SHA512
b7f4b3cbd605b24ced8c1a0cab72326a3da580ad14cc0a9da5831738b5a04ddf4862e14d1636c998be122c2e21c7230dcd3b5515f3d292685ac3d49784799d60
-
SSDEEP
393216:9IyP6h5RlrhgF4Y66iU5vF3ihbVXPott/VBEwVxgt2+pHYeV:9I5pgF9f9tUhtPotHfQtHYW
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation cn.ninegame.gamemanager -
Checks CPU information 2 TTPs 10 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo cn.ninegame.gamemanager:channel File opened for read /proc/cpuinfo cn.ninegame.gamemanager:core File opened for read /proc/cpuinfo cn.ninegame.gamemanager File opened for read /proc/cpuinfo cn.ninegame.gamemanager:channel File opened for read /proc/cpuinfo cn.ninegame.gamemanager:core File opened for read /proc/cpuinfo cn.ninegame.gamemanager:core File opened for read /proc/cpuinfo cn.ninegame.gamemanager:core File opened for read /proc/cpuinfo cn.ninegame.gamemanager:channel File opened for read /proc/cpuinfo cn.ninegame.gamemanager:core File opened for read /proc/cpuinfo cn.ninegame.gamemanager:channel -
Checks known Qemu files. 1 TTPs 10 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /sys/qemu_trace cn.ninegame.gamemanager:channel /sys/qemu_trace cn.ninegame.gamemanager:channel /sys/qemu_trace cn.ninegame.gamemanager:core /sys/qemu_trace cn.ninegame.gamemanager:channel /sys/qemu_trace cn.ninegame.gamemanager:core /sys/qemu_trace cn.ninegame.gamemanager:core /sys/qemu_trace cn.ninegame.gamemanager:core /sys/qemu_trace cn.ninegame.gamemanager /sys/qemu_trace cn.ninegame.gamemanager:core /sys/qemu_trace cn.ninegame.gamemanager:channel -
Checks known Qemu pipes. 1 TTPs 10 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/qemu_pipe cn.ninegame.gamemanager:core /dev/qemu_pipe cn.ninegame.gamemanager /dev/qemu_pipe cn.ninegame.gamemanager:core /dev/qemu_pipe cn.ninegame.gamemanager:core /dev/qemu_pipe cn.ninegame.gamemanager:channel /dev/qemu_pipe cn.ninegame.gamemanager:core /dev/qemu_pipe cn.ninegame.gamemanager:channel /dev/qemu_pipe cn.ninegame.gamemanager:core /dev/qemu_pipe cn.ninegame.gamemanager:channel /dev/qemu_pipe cn.ninegame.gamemanager:channel -
Checks memory information 2 TTPs 11 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo cn.ninegame.gamemanager:channel File opened for read /proc/meminfo cn.ninegame.gamemanager File opened for read /proc/meminfo cn.ninegame.gamemanager:channel File opened for read /proc/meminfo cn.ninegame.gamemanager:channel File opened for read /proc/meminfo cn.ninegame.gamemanager:core File opened for read /proc/meminfo cn.ninegame.gamemanager:core File opened for read /proc/meminfo cn.ninegame.gamemanager:core File opened for read /proc/meminfo cn.ninegame.gamemanager:core File opened for read /proc/meminfo cn.ninegame.gamemanager:channel File opened for read /proc/meminfo cn.ninegame.gamemanager:core File opened for read /proc/meminfo cn.ninegame.gamemanager:core -
Loads dropped Dex/Jar 1 TTPs 47 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4276 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4192 cn.ninegame.gamemanager /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 4739 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4739 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 4739 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5300 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 5703 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5703 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5703 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 5877 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 6042 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6042 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6042 cn.ninegame.gamemanager:channel /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 6325 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgsecuritybody_312768000000.zip 7945 cn.ninegame.gamemanager:core /data/user/0/cn.ninegame.gamemanager/app_SGLib/libsgmain_312768000000.zip 8793 cn.ninegame.gamemanager:channel -
Makes use of the framework's foreground persistence service 1 TTPs 5 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.setServiceForeground cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.setServiceForeground cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.setServiceForeground cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.setServiceForeground cn.ninegame.gamemanager:core -
Queries account information for other applications stored on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser cn.ninegame.gamemanager Framework service call android.accounts.IAccountManager.getAccountsAsUser cn.ninegame.gamemanager:core -
Queries information about running processes on the device 1 TTPs 11 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.getRunningAppProcesses cn.ninegame.gamemanager:core -
Queries information about the current Wi-Fi connection 1 TTPs 9 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:core Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:channel Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:channel Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:core Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:core Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:channel Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:core Framework service call android.net.wifi.IWifiManager.getConnectionInfo cn.ninegame.gamemanager:core -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 11 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:channel Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:core Framework service call android.app.IActivityManager.registerReceiver cn.ninegame.gamemanager:channel -
Checks if the internet connection is available 1 TTPs 9 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:channel Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:channel Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:core Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:core Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:core Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:core Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:core Framework service call android.net.IConnectivityManager.getActiveNetworkInfo cn.ninegame.gamemanager:channel -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule cn.ninegame.gamemanager -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 11 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:channel Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:channel Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:channel Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:core Framework API call javax.crypto.Cipher.doFinal cn.ninegame.gamemanager:channel
Processes
-
cn.ninegame.gamemanager1⤵
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4192 -
ps -ef2⤵PID:4226
-
-
cn.ninegame.gamemanager:core1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4276 -
ps -ef2⤵PID:4333
-
-
sh2⤵PID:4434
-
chmod 555 /data/data/cn.ninegame.gamemanager/android_observer3⤵PID:4469
-
-
-
/system/bin/ndk_translation_program_runner_binfmt_misc /data/data/cn.ninegame.gamemanager//android_observer android_observer /data/data/cn.ninegame.gamemanager/ biz.assistant.9game.cn 80 /stat.html?platform=android&version=5.3.4.6&ch=KM_74121&template_version=2000&build=190610174549&app_name=jy_gamemanager&app_flag=0&network=4g&sv=3&model=Pixel+2&api_level=28&ui=bTkwBZjcAwxSdqPitlc/AG1mNQvjo99gag==&did=&ut=ZkHennKG/PUDACZuE+4GDpl+&from=uninstallself 6d7a4da2-5ee1-4486-af97-5e5b234e35ba 02⤵PID:4434
-
-
cn.ninegame.gamemanager:channel1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4739 -
ps -ef2⤵PID:4882
-
-
sh -c type su2⤵PID:5252
-
-
ls -l /sbin/su2⤵PID:5272
-
-
cn.ninegame.gamemanager:core1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5300
-
cn.ninegame.gamemanager:channel1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5703 -
ps -ef2⤵PID:5741
-
-
sh -c type su2⤵PID:5951
-
-
ls -l /sbin/su2⤵PID:5972
-
-
cn.ninegame.gamemanager:core1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5877 -
ps -ef2⤵PID:5916
-
-
cn.ninegame.gamemanager:channel1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:6042
-
cn.ninegame.gamemanager:core1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:6325 -
ps -ef2⤵PID:6358
-
-
cn.ninegame.gamemanager:core1⤵
- Checks memory information
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:7185
-
cn.ninegame.gamemanager:core1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:7945 -
ps -ef2⤵PID:8033
-
-
cn.ninegame.gamemanager:channel1⤵
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:8793
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Foreground Persistence
1Virtualization/Sandbox Evasion
4System Checks
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13KB
MD5e3789787b2ca116147f6ea9ff258afbb
SHA1b90671722513b279a13e31eb85cba3b8e46c7350
SHA25602cbdccd49d5ceeb5e7cb0f93fad094cfeabc291c0b1752e225cff2dcea01b50
SHA5123703d0904ce6ef876cb55908c2f4ba934ead08f1477c302f5ae0c35921e885b86d52fb1592a4a203df6b2c77afb36427abb967e94cfb53d14e131331556fd4d2
-
Filesize
591KB
MD5c3e1c716c31c80e55ac568cbaef5417a
SHA1124184c2101f2584fcb338ddda16271288462e1a
SHA256f55ba7e605f21b42f0b0215badc0e0748b6eff388634de215998f065be02cf56
SHA512af14e69655837bf7dd98b44ffb666e8dea10a9e29a26c6f27851d44edf1d5743c697f3ceaa634d2b74ad13bbc94933dbac811eca2213dd9abe1b49b1503ebd9f
-
Filesize
173KB
MD5f2924610bce895641ee7bc3889887800
SHA1632d98a039a3cdf9af8416bbe866f56f2be43e3e
SHA2566c117bbf6273a92bccd8400dd5109b4cf174a62cd5b07907382355c966c53838
SHA512e3705d180f13fb5c24f90fa2e9a88de30fbb029171a5cd8ee127f89465d72b02b3ce73756c6a621171346dec92b19791f5712eddbd6c8872c6d803582acb9454
-
Filesize
173KB
MD5bec212e01fa36f5f91415104bd0200b7
SHA1d1e993973672603f61b4dc4f90dcd63005b52264
SHA256b658bfa84760ac93380a7b172741a42533651f7eb5eec68e2588fe5d5e30e7b2
SHA5127353a1eae31502b81c1ac8e8d6a0ea851716a6dea5b902899b735bab8e707c818c27ca3ed121e74b4d941e21c24dee90a29c6bde9f0e91d79d65232b2738cd19
-
Filesize
126B
MD513b1c34fa44e5135c55a6555d949b6e2
SHA15004385fad4dafb4744a33e21730039100545de6
SHA256298be9789dedc29bd48fd12ccced2283d7a3354f8ba012e38789c2f2b9bb7d7a
SHA512b44c2b074411976c41ea93b9417bf41caa4aed5379d83aef4888ec3d60a1ef9e5f40324e4c11647a3252f9f3fb3a2c54f88aa14243b4b48397a10a15910e1afc
-
Filesize
28KB
MD5d1163b65d98692136821b87d5d6c8ff0
SHA1b67f29105aa92e42386efb884f322207f9e6ce41
SHA2562a42e8976b153b12737a9e1517e58646783400b0522ea0bd736e949b54e02bc2
SHA512f11b1d75c61edeacd7ba4005ddf17aa11316759b57443cf47570c159c7e91ea12c321d76f09a05a71cc2ae666d881bd78cda1b5c495089f8039a52289a03ed8a
-
Filesize
28B
MD5a6b82836984a849599f0836f70c65347
SHA1cb5314f5476fb7f5ba900d9427c52f5fc4ad96dd
SHA256d18323d53773f6858d8ac4097926789961b18af86f3d70bd2f3335012dde561f
SHA5127f39aedb797a9245a9f62a06d0c62954b0b86259f1210aa6f3f9307e4ca3beb6e5823b30298d06a13fc3f5ff5d55b4a5c0ce7b4e258f0765b0e3477c21983bc6
-
Filesize
332B
MD5d3fb69526bfdd3937eaae0c10eb21d9f
SHA193a6bb6c585660268314c41cdf9891a8ec0e5827
SHA256f1fc25280e5064073857fe0877a2cf1fae5a5aa2026ba0f378178030166c6e42
SHA5129b65078befba6aa4cf0f311481c6c828730167973a58ff001992d9d6ad04ba383d5cf304b1acfeab9da28855eb7d2a8c7e45fdcb1f0337372389e565e8039a0b
-
Filesize
238B
MD5a634bc80252f9bb180dbb6ffd04c4774
SHA1b11461bf40f9b5a9bf736c373e69be730644a4e7
SHA2566133647058cb6cec7bbc2e837501098286272bbffe588380cd4eef1d8f57772f
SHA5124ea2df7ae58064797f2ca5073c675e4deb4bcd0746fd4067b55c5be4c7d3d84df7f62d008b4ce3b35a7c4eaa3e97549b959fe0e4a2d66ec76bf0ceb83d75b381
-
Filesize
243B
MD5263003924ef7decb98579cb7146fc241
SHA1fba1865be96ba6c7589a703511205900d90cf93e
SHA256f796ca16a8b577a5695494c53976cad8e32dafed0f75a3697e1d16abebdb19d1
SHA512236dcaeabd3fa7b5e5a422c3e0bcca843fca4c5f15f42499104c674f8dceabff1559f2d89b889f074316751bec64ef05f58a58d038af84e3620f4d96275c0e1b
-
Filesize
167B
MD5a54cf0286153de3148fd037d3c2948f2
SHA1284fd5afead8fcb09236d0f424c6ae716a1502db
SHA256e60e5b1551bf0fe89615a6ae16a47f0879844823d4f0e736ae5d368231d2aaa0
SHA5120620e5c9154217a7573610bb6d879db24574ae5d559582e95315722a91e7861eeb86e8c1de6eef671cf23605f02f0eaf0ebcc0d2dfbac35ce3814f0399ab86c4
-
Filesize
173KB
MD508db5d230c54575cb1050cc38afd05b5
SHA1fc3652850657b1305a23695fca6cbf1b24b2141b
SHA2565f3d056c1364877eceb7c49cedb5ba37b524eb54fbcfe490b3106982adb79682
SHA512b48710c121a61a4dd57f7867cdec07212e6ebcf329fd176a1bd94a1bc78888617af5f4c979be8e4da10eab13190d11d9f6c009176a14a6dd4518bbd7ed896f1c
-
Filesize
25B
MD5776574fbd8fac6e9e0f3f6ba5417c0b9
SHA1a3b01cce57e0913fcca577c105313b1215bf7aa1
SHA256ae04202b7e0fb1176ea86a15d43b1a0d39027bb377e49dc592ffc0645acc87bb
SHA5121d360739290728903e92dcc72da778430fa7fdf8216b092bbb2d843c6199cd8e35a51f8609bc9425faac0a70a7798fe0bb06d67bdbc505c5a42db9faafa8d2a5
-
Filesize
173KB
MD539822126b3f3e84c427028e62e5c7f83
SHA123decd31b84ab58412976e2a04a21340065fa455
SHA256a5f3d5bc7e0ffe247c19827416dc255133b1b8690fb851952ce82f28c52da25b
SHA512da9e3df436583ad598474e283180a13b8bda89fb6c841295ab89887ca2b58bbb769fe065a4ec8040bb91d2d08d96404ad92843831d10ddd36fb47b0f89ad12a4
-
Filesize
56B
MD5a3864c5fda53d263609f4743d96bf164
SHA14a645e4c39dc1729f0e51cd4114f42a68f87024e
SHA25698265cda49279208d3dcbc093dcc70cff9830c29d590f1332e99495365eb9371
SHA512e4a47a18de53290a8b1faceb504b350cd39ae880a3954831d12715c6aa0543d3784afad23ccec30849baf8732569999965b52f10cf8e7fc0bf7e1210022085d5
-
Filesize
332B
MD5765b73b1bad78eb57477206a38cebb0a
SHA12a5388027b32394539d13943381506e222d3d2ec
SHA2563e11778dda06427ed12a2af2472b362afe130d669ce1994563c33f224d0b94d1
SHA51272070f325f32756c61cdfe3744f469566112ea72cfa07d48dece34cbc5dbda65c78a105a960a17140900f7a59ed2f8c8505007d7c8b3d337ec8760b30ee101d7
-
Filesize
333B
MD5df319092fd979745eba37e2c925b2d58
SHA1472255eb54d764bf3dd40d48080365de57547e90
SHA2565a1fc366fd1ec905071a063fe342cb5e38f745f2a115edd2e1d6c47ec7151d67
SHA51242b5016694a17240684a2dae8aa3e2b9e63c621749b8e04f0dcd425b92aa6a1677d3a09e66beeced97bb5b484ca08a5f8ebc4e72f950d6df4d51bcb2910aacb1
-
Filesize
213B
MD54919e281318337654a40e5cf2f1d34d2
SHA1b1aab7614ae05839b4fc05c1f03270edf652a485
SHA25613effd0872130baf34e96f37b8ebf082b7ac54f01b3f160857628b959226706f
SHA5129e54e45e72b9be0559c7405802a59f86d5f3d0424781e68253ebd2dac1f97dc72d5405b46e289c7fe4914602dc14e3428e6f2a669546bb8a8b001dda0decd5d9
-
Filesize
608B
MD59306d77ca8d1befc9d2972b785847ad3
SHA1e753102f5300837a76fb78a3e96480d5a8d60d65
SHA25614d5fbfe6c571b660bf0d7785408cd666aa4e0f80d5dd3cb8e166e110b61f739
SHA512eb814cb718d3dd3a2c669449245e0f88f5d337ce8ef6af220e219d521c1f47c6cf9709907965f812a1ccfd6e732ca1a373bfe1fecdc16abd0a232392cde0bee1
-
Filesize
173KB
MD58f53b79bda6068b50236ac116bb9d2f0
SHA194268245bfe14a33ec886c9190cbc5a35e1650c0
SHA256bc8b54b6bab19d10eb719bdf5df48bb54316c720a0748bd664b8e153cf534612
SHA51265e0519428bf584115060b7615171a0985d6e889da1edf9e42213e7c13aa2571df33cfda896aaab594df9dfaf53c5e70c83ce3fa61e90fc812dc4de2f36cf8ca
-
Filesize
276B
MD50f5a5bfd94250836a5976eafd282f0c9
SHA162be69bb0f05bf559a9a4c6f61e8bee59efdf7a7
SHA25621925d1ec3a71b10a0acadb37a3b59460df92d7e02c3d74d188e142d533d549a
SHA51243e22fcd1f356e651580e1c3a83cdf014f277d9eab795dc3899d877c89808dfe3a319318fb55569bd02420bea5979c0ad3aeafb8d44369e826b19fd857f1b951
-
Filesize
276B
MD5a2359e19ac4c98d0cce0fd2a2f9ea892
SHA12230584952f1a5af11689c04f84586151bc72a29
SHA2565cab4c0fb5fcf623f81029b785e9c8e2b567b36d65e646f9aa1f2640272c3040
SHA51257a48dcca180f9d31c17426d1b40e87e6cdf6774a287d5ff1a47a63db119172da4822936b2c6cd64f193303d0a12dfd9a1320dbeff99e6dd6cfecf56434a73da
-
Filesize
32KB
MD561fa1f75ed15a099c7987c239b01a156
SHA18a53fa7d37dcc97d116b4c07ba6f75a5ec3542c5
SHA256b27e8ba4e28e223c897d724c299c6eff2897ea1e9d793da7011a346c418c7cbd
SHA512e0b0a638478bbf0a3874e3312b7ff1d2319675992a30a568fc753a8e9b3e6626de58e4ee9c6f5633795ffd25e89a355b162c457112318bb1a8f46ef0e8a6c11f
-
Filesize
32KB
MD55431d2794c90710ef9f935529b561c74
SHA1fb366b5c8b474881393d5fad519ceb4ca79f52fb
SHA2562d611f89a66849591762abc034873ff697edc61b2c710d0a1f78d48df99a0999
SHA5123e877c9f53718573ffbec82238100831541815a91968ad2540748c78a40a91210788504a793032a17b78392ad05d4ac3070e2cacc14cc2a3b2268b3a67764d79
-
Filesize
36B
MD5f89ae44bccf2dfbdff8a6cc244273eff
SHA15e76f1f10285dd44db880ea681abd630da284a8d
SHA2568ba1030d94decd4facdd2e43796da6ea6c995ac94a5d4717f0b89b975d13b797
SHA512bcca739878be5c2faa1b4845111460c09fe473f7b5c6534b0477082078bc42cdc4540cb3df4493891823cd103568f8bf25eeb3a4a53ed9fa8f274a25cfe3ac70
-
Filesize
4KB
MD592404a207e81cf78a766cef2c7a56dac
SHA1c257c54d62953970ff91cc5d89bb72f7e6b3d0c0
SHA256bed911b601bb63785e90a8b830c9b09053686a82fa0ea4c526ca289b87c62763
SHA5123a11a8ede477a51da74e2349e5ac36c0acba8cecf94a22c6a3cab24dfa85d774d4248c68de871d1d8fc7e18a68e07ae46ea4605af9b8d95cd21321c251912213
-
Filesize
512B
MD5cdcaf5c66391063d4ffd38be4f61532a
SHA1fda1b3ec0ffc65ffcdd991a34b232c29451ef808
SHA2564f4590b6554d90c898b0342e9bb269c6036849790d3f22d0bf10a66138a6df32
SHA5129cb3fa33d19bc88b7b0e9ed2aecc86fb17c60e2004b54066b7f5fbaf41184626ec9bc85feea9a6ecd03690c3b7a93971c2a9ca3ebd111fb162f2c2c6e8b7f47e
-
Filesize
32KB
MD58a597b367453b10310ea37c0dd40614d
SHA1e62404dbf458f7af66d6c7eea20a100b0b179c82
SHA256b3bf545a27307ef35b78c4c314af14b7457d452789e5b5b7daeee61443fa932f
SHA512f39fabfdee42bf8acacaea7ec0d823cb868ac1c94b4a0351aae12d57b00f68253df8cdcffc4e2ba629047e363f6396987607687ebaa0db98c81e3848418ee561
-
Filesize
32KB
MD533c024a5e4155174917dd67393c66301
SHA18d3d9df5b1b310ce82db6c717ccb2d2c5fc3c299
SHA256d91cac9ade199880fcfffa7fbb4573d40fec43fc75a9ae47c1f6e980afd23fb8
SHA512e1fd418afb3eb3598c5e7a49498f5e974ea71a3166787f98a56a1e8a932ea8f17b6fec3766b38917190d6ff6ec2e70efa44ed80e211bae3d37d143c06831d73c
-
Filesize
512B
MD5d510c6ac1ac0d0fc7bf1fa68c7cdcefe
SHA126d29485624af9d2b482fc973fb0b58eeb508ea6
SHA25643a4fcb04cf124ae2bba23c68c6769323053cbb744d05c2e0279ab1dfa8928d8
SHA512517e3999f40418db74fd12b8f0ccfce017197ec32165550b393a1fccda9bff92485a60caf4bb4f22daa2ab7f97c599ab8e118ad52b6b4bb24ef003aa1a5a448f
-
Filesize
28KB
MD5dc368805088f2942f209ceb815b58060
SHA19d5dc0f2bd7533bb0e94b483392d7ef592f33957
SHA2566da7e463afa9e72ffc00faf8471f4250051242f465213b5fb4910c46d6ba2a3c
SHA5125dbae98cdfd892c9d77f907315fb3c532b8dba4f220a7de413ea9d49182ab38304745a9d2d8f78529f79bf1ccaf27d9df039b7edadd609a84b2072284721b7d5
-
Filesize
512B
MD564825a26028b3b5d952b003af99f3ba8
SHA17008e792a7a26998a826d0175901e27bab1270c3
SHA2563eae22869c421cd2af70e31fb77cb57c5b24788d525df8486be2daf1c96fa6b7
SHA512a54f04ca968a156a2faf9d610b317af76830be969290739f47eef8f74ee1563fb01014b8201d23486a4287498f6f6773841ea7dfd8473ebceffb83ebe4f99551
-
Filesize
16KB
MD5de29978b168804d5bffe6a5f6b90e92e
SHA17ceb04a7fda7bfc67968f874627739491b7c0721
SHA256f36a454f61a3f4a31e9731d2911a5dc1233872d8b2eca65fe1d764a507fb6272
SHA51279e2060ab8cd590ab50ebfdee2eb0f7078a28effba94baaad5ce598ff3d03b9fdb555de5829d4d40b6a2c9466cbb064ce17789bb3c3384d2f9d435c23a4da204
-
Filesize
48KB
MD5598837e9451758ab777bb5c827b34295
SHA1147f9c29aa496d85d589e1bf61a31476ae42e264
SHA2563b40005b8400f4b6957e3a7ff17887b4c4758820218bc876d3b87ad423f4d879
SHA512ed9839ae99d45f079d22419f0efd0c8a9d21a4409ed223783173d127fcfc8532ba003152c68150591f235b71dbd42b3fa6407d74564ebf2f1764b02a33c2a11b
-
Filesize
177KB
MD506c44e54451e8a44e92838b7a60f9065
SHA17d85fe25331791ca9bdd396e998a8aa8cca50a6d
SHA2567138a06adcf8b1d6d43f105c65136a992a720e7e0175ab918a9619f319947b63
SHA512d9a25f2bcfba4b5ef741d22e06d3befa8c1571e45ffd5f3f2f88b81343db1e154a2cc794e9dbd5a82067bcec64dbcb351ea8112c3a230cf22f16cb9b099d86ae
-
Filesize
512B
MD533b48b7f4d5b89c2779d6462d4060859
SHA1423e7ba0f4c78ac895b51b2a6ef00cb6572ae4d7
SHA25671b245ab5067e146968e96a02a69b32be32b1a83b7216f59f3eb49df21807b08
SHA512010665a43e3ee43fa26c67ab878d3a7d9329f322bf5fdc60e51ed7a93bf762a25e5cd6a79e431eccca7f1543babfc068f5575b3c1888bf0e509edc191209f729
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD502f0e8857f7511ab537a658467199c77
SHA17b20cac289edbd83f07f9e91c77179118e5900b4
SHA2561c4a90c7ced721f57bb56e6dab0a0403e57c474fb40d5f09f24dc251d54fd8fc
SHA5121edb7e60176513905201347923eb725a44ca3fae9150ed74cff5d737f7d938c0510e842789bf2625778e305efe76a91c70846af078febef4a10edb3fd69d56d2
-
Filesize
64KB
MD57bdd61e87ca6745d5a499262d078fa32
SHA1b2969e6a519824ca8b0f905119992a2e121f038d
SHA2569f02a96ee930befaf18e50b86cd9774a4da67715cd79831cc5e00df371f00c58
SHA51220b6be790f98d4ba579233506dcada953f9dbb353fdb556a568932c7b1cd68298bce0baadcb9fc14accc4ab4f792d8c2bbd6e28305a4d91eb43b0b60c63e2985
-
Filesize
173KB
MD571910e6e335954cc372f149e6ccee187
SHA1a0b3c18937d49490bd519ec027cabdf6287e1ae6
SHA256feb52b9880dd3cebf36f7ca4e3622f9fe867ad8b06edb6b73edee2629a6b17d3
SHA512c56d90265c512f0fd9f4bb094c7b3eb48de0f3d26706c90ad2179054cd66f2f0cd3f10a390a7d5c19b057dec216adb9bba74805b0b6bf06144525f1999e80899
-
Filesize
32KB
MD5fda78afcaa014af4aa292d0a1958600c
SHA1ee3cb497cd5c4d2756bb05255bfe784e6521635a
SHA25681988813da37ad7071a1b705ccde72915cac3d504ffa40e74b4257b091770477
SHA512e1a69415be1d4db29852eb88f31bd4726c9de35538039c53881936cb70ee528516f140adc04329a35d53935fa38544cc51223c76e0760343a140adda91346742
-
Filesize
406KB
MD5d7a73c195cb96fbc7fcb226a8c04104e
SHA1459dd60e5e7a1c03f7d8761bd23e7164b872dfbb
SHA256a2065cbbea76287e5dd7b6c9cb732c58c8380dbdb36e44223199e9af90cc33a5
SHA51238992bb00524939df957fe3906994c068c568afdd94fd27d4eac27fb633a2988185e8b2bb5ab75dc2da0909c2b07a264ae6ee4a78615fc33a7ceb16875796a5e
-
Filesize
252KB
MD53d6b501a3d6dfa30c367943b7547f4aa
SHA12d44678a1ce44d179bfde9e6d60ddc88b5c06a9d
SHA2569afb7dfbf7b343725351cbb39fedd41d822216a0158a51c7cfe88f79a30cafa1
SHA5120428f00654786b0a0347490e8836606f5c14254eadf03183e4b422240161d20ffe2d6f59f81e87b2dcc8bc0e085149370a794bc1dfe9d044e22b357050c8d6e5
-
Filesize
40B
MD5d9f3d0ba0dbc708f1c94e3e3ec3276ae
SHA1b8cd1dd76e50af40e81aeb4e2a731074424ca515
SHA25685a6f2585834a3bfe6a4ca211fed2d9ce80fbb5f8a2d8e9f87c1ec17fd259b78
SHA51237a35831a08e1e76a2b722f0e4b08a7d3590cc4d2fd3a228744dbe6c97ea8c157846ad80821b750a56d80af7cba880102c5735e35654143af0a00db65672fed1
-
Filesize
32KB
MD557b67a8bfa2bdc1bac2f5492a2414deb
SHA17ff0e5f03d7616b670ce777f2f098b2ead928aac
SHA256e4874531fecf8888beb4c731566d3a4868de1fec6ac76c2f42eb4840d2bda221
SHA512800f7c584112ede01def0f5927dc13f284784ccc7dd21ba9d7b5b56cbd89bbce06f1ef2b1a5dd33438c7a9174b22bd30e9874867b16f5b2588942e32b0c49e06
-
Filesize
36KB
MD5d96e72efb54478397e142c179d6f1603
SHA1436faa6a14da189906e7c6365e718cd0e465a692
SHA256f0895459ff42805c1775314a9a602a4044bbb86a0b01ea8e81730cc656e4c593
SHA512e80e0f792f28e872cd5d4a1186ac4549714844854c1bde9d818c89ce735056e36b0846f1be34b926ee760a0d037625971e1f21e6422599af7dfd81272cf48782
-
Filesize
32KB
MD5f999f279b035c4b9c0f98589ed74f28f
SHA157ba84d7994a00c56cc1b35032861953165b1254
SHA256f297b928b3fa60ad73f1cf8c0626e8c3690d14499d85c6d268cb260ad64c7956
SHA5123d4af2cf167503b2770d102dc17e103247039b0cb2c937287b63056d7c8f9722f4d6fa6ed9efabc0bc675f6155b995fcbe52c3357ef3eda2850a1844e22a1b9f
-
Filesize
136KB
MD5090e2dc7842e3c9cbe750ccac37893c1
SHA1220261c655e321b76ed770062a9a74e2d2a6e0b1
SHA256ddbe455f73ff7cf3ee28aac2dff91a3fc0bd8a5d858533163b093814a5356b58
SHA512e735bea5412e884cc942c64ff391fd65060350932b680296ce27b9c1aef2825ada0973a18b55893489c8562875e6656701342e89fc5e28667f3dc7de50c3297f
-
Filesize
32KB
MD5b3b6cc4272b1131daff526779c629563
SHA15101616e11cb112e8acca77578bed552affd4a6d
SHA256a21f829fb70e388adcb9a63af8bbd94b2b8af84726c69c0e898da482ebbde1f4
SHA51293e89df87969e130e65b16a5b3da9da68c0d34801ceb0c7066eb0678f1e223b72c22c8cccf514cf527e7f6907e9993c007080301a091ea312b4a1d56e3b68789
-
Filesize
1KB
MD513df105c7900a4f653857b6223b26867
SHA181ad2f9167b45de3232d53f923e03859d056f680
SHA2567a82bb78056d7e7a11331c1133db5b163ded88bfe69513ee8ebb3bb7be5d8f95
SHA512018a16abf8cdb9843828ea05a4c4133ee42d033a279748707d6573328cfb47b9ee05f7e8c14eb6069fc53b6e9cc75362668076f5b2ec50acbb0b18bed97897da
-
Filesize
78B
MD527244545bd773c4d96f6190102daf59f
SHA1a62745d0cfa6fa4f8d7490d54aa6345394725923
SHA25612db5fff5a21fd678404521e33a999a9c0f0a7ca3a78614df8e02ad75c6d5093
SHA51285784a00236733d47691f313c94af98f144518ca91f7d8da5a6474915f1e834e0e02511f7b0659ed79e23654fb92b891044cb74651733c20206539e4d8d81e19
-
Filesize
91B
MD5d4fd129de8a57d99dc02d1a8297e9020
SHA162120a190f9bdc0f20a979276c5f900a7687196e
SHA2566ffde954b97bd24bc779abee6e40122b2592a2ae6035a87b7bbd850f0b05172f
SHA5127f7abdd5008f18e5c86db31b13f09b672f610b09d37fc3d9793ff3dd83f755e48b2663277579b6363bfb96a6f2d6a14e41c5a9477c5929c2b6ad5a08e82c5091
-
Filesize
464B
MD5ce6d5a61484d0ad926e379f14630c1c6
SHA1fe4e3edb4d3c397406ebeda664fffa2879e8538f
SHA25668f8dc6be3246d655d7c23cbd48ca4ec138736d16c87d2940c3fee5720f1a386
SHA512ebabf5c702d4fb3982884527636f272bcff88d08a820dc6de5836794111f61b25dc32e1c27b37edb1f3c56f97c36d8f04d24baebde423aa239c4e6fbe2682cf6
-
Filesize
78B
MD519e132bd4bf01fb41d2e7a3f1e31b640
SHA1ded32c80bf49669e73491542db559a90522229c8
SHA25673c14e46faadf03743a193c94fb6e1af6366757aec3cd31d54c6f7f72c21faf7
SHA5125dd11397036504c05d903e2e75e75eed3269ebb906b4c89cb14a03769f22d6e7b3a431838052dbd66e12cdf11880c8b3686a80aa38197bd869a7e51e78b306da
-
Filesize
97B
MD5b2d184d8603436ad331516179aa0a32e
SHA16c27dbbf85b076bfa5883f463d19a56bb9c5a1ce
SHA2561023e887eef9a64145ddeaabf227508f9ad6086e17391377239776ab051658e3
SHA51282af49bcc8189c8374166936ac18e3921234a8c3cb4cf7df1e9ad580da954f5857962566bbb42403d397b3a4a577468ec1bec7479cc58e5549fe91f46e60431b
-
Filesize
82KB
MD5ea2287adfc276a6771e58d7955848fa6
SHA1d40ed1a926ff835b1f3de50e959ba236e5da42f7
SHA25657265b551c5ca96d6d75e8105796073e5ec48fe031797752840774f91e694aea
SHA51276fa9513e2ff751525c560f923b03ee0309c285178c2102bacdb04e150debb48894bb7319832a6b75df760d2700b0293acd0931d521f720faeeebb4cd322420a
-
Filesize
11KB
MD5babe80bf05a533dd9c79fdfab24d54df
SHA15f0833842c0e7028344dbfcde470d383236b123b
SHA256b397a4de59008174fdbdab5d840ab3b99bdd9c1ef4bc8cf36e86ad59e5c3fe7c
SHA512a329385c3cab0d4940cbc689b17bae3d45ca4dfde0da76592d89e820b7baf9817530a775f092002b1490afea5dbbb1db2c8199f4b8359ce10d5964cb470b45fb
-
Filesize
982B
MD59811af05f799e72f91fc4e9378d8e2df
SHA1deed8d10c389c6e0bebbd56b52a7dceb00494213
SHA256774b1fc638f06453370f7dd6e02c8e3b393cc7a2cd3c3764d371f8b2c61503b6
SHA512b0fbad77e6b2809ffacb47df7d33beadfc65b7f50067a70ceb0a488f48cd9081f4b36bc5376d08bd67b58591f1e275f712eee15d7488b3c8413cecc6ea4cdb4f
-
Filesize
982B
MD5ced0650dc19ac1ca88feb6a624678afd
SHA10db71eeb4b8e928ae6bf91abec64872396ced0a0
SHA2562f4aac663456b623bff8a7071837a4588af153735dfb3b6dea019372f7000280
SHA51270bf27013732946401a2c6fb8e3fe73543f2eabbafd2ae2dcc1af2d145e3722e11d7450f0d2baf657a835a535004cdc8cc90794d216395332950164d25136357
-
Filesize
398B
MD554cac572cf779379862a7429a27e8112
SHA1a2b97bf9d9eb48eca5fe1314f736139f9da76d87
SHA256de5a4a3ee7b048c3289711e0451e0d982cf9e8553d07b6e76a2e4fe8bdbaae25
SHA512270025d7abb689e109b5a85cfedad513bfdb7140feecd6eeaf5f3366be5ef76d9277aa0460f86bd3908fbbb23b01c00d1946ec9ac110b0ab2fe84ec0fa0f293d
-
Filesize
173KB
MD5fcea5e12ab16778093d978481a333683
SHA125408e78d9191083800ce33a61987c23787fac87
SHA256bad6e5e16d0c901e82b788257c6f03660739daddaab1e7b3002587bd6c151f3f
SHA512021cc604322394e196a66fc2548cbf80d6b08782952a6ee1bdd7ea15c90edff09e630c59dfed5b69795791ff026f7406e306ac767000e694eb62d7a7dbc8728a
-
Filesize
32KB
MD5f08d7b662e585b02a82ba6448a1abf2d
SHA102811c505b102cc4337c5ae862baa1cab166019a
SHA25648178cfe75966d16f37517274e2039246bcc6d93d85afe8ee1a3789b8812f108
SHA512c4130683fdfede75684ef77131f964002fcd9c3f0563065b70d3b4679330b610da65eb0946f216ab9ebad62acaf5ac839b43e2b87189a8373fb348c665fc488a
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
4KB
MD52b0ba4307a4c7ca9d22faf68358de91a
SHA13068e3deca7a36426f440a3e6726878b3f5137c8
SHA2565bc0bf8e1d39663c1ff8c019e8c54c3ac97c973bd97972778d3174c696d89944
SHA51259af66fb4194477f815e64634830d3f8233d4fb5adcdfffc5bc8c4f516bc5ec2dc18b128ea727b6108c9e0dcbbf774ea7f8f76184295ee020842e01e192ae65a
-
Filesize
32KB
MD5d6eb491b7417b589aef398a916234e05
SHA1142403f921a07fc2c372e677ddd8dfbf79651bd4
SHA256a6614536325c6c5123a528dec762126738836763ff4e55cfe0ca80739220cc7d
SHA512aa98997346bbd803a8efb99b2ca4365b4987e7ed3b6a709391c0ba34388153965ff6bfc8f1a930266f1c111516385270efe99d0a095ecec247ae1c71d1f14fdf
-
Filesize
32KB
MD539a4d347e434a108fe7237aeeb826e86
SHA10ff480446ad30c6fef9b78f7aa8abd8e783d875e
SHA2569223e33eace7d10b13327f7f6f19e7a464ab746a67ba804b9696a4c888930349
SHA512d193c38e5efbdc1173b7a026805140f37225ff22ec0bdbf400f9fd0bff4ed136dd2ee5123fa5b16b7e5f9df0231e7157c733689b047225349507c0f5c9954628
-
Filesize
32KB
MD50e6230fc94dad2382c00bbeacbeca958
SHA17c920f45f191162f1b1147a09b69763f4c516966
SHA25614fa79fcaa19f932e3e523cfb650c2883bb7a3859ca5d68f545cd71be72d301c
SHA512d04dff1abd6b9f96a30b453d73cb9a049f453ee972ac3eba025043024ade392e70cbd6022b18af417fa0c745258b79d03f3ae459c6bca5c167b241a6e1864e64