Analysis
-
max time kernel
179s -
max time network
193s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
24-05-2024 09:49
Static task
static1
Behavioral task
behavioral1
Sample
6e190697a8bfbd23a8bab1ddd44e6955_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6e190697a8bfbd23a8bab1ddd44e6955_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
6e190697a8bfbd23a8bab1ddd44e6955_JaffaCakes118.apk
-
Size
22.6MB
-
MD5
6e190697a8bfbd23a8bab1ddd44e6955
-
SHA1
c78cf857dea2e75dc67a762309283adebb944525
-
SHA256
4ec6547626b74087d05fe305798994c3e5f65046df012d40efe670b373b7c592
-
SHA512
2598086fc109760ef111adf89d653729f2c5beeead4d0a7ea5afaf6e9c5a688ecb39ee3e208a334e610f63fe42d6debcc8ffcb76fc13da9ffe52f04c8e5045ad
-
SSDEEP
393216:zz1zzO1dhgH0Dmdo74Bx2nEdFM+ZWdr+1xsIxjQyVX1a+CrdkuS:PSmdo74gUpSi1xjQyd12g
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbeioc process /system/xbin/su com.cnlive.movie /system/bin/su com.cnlive.movie:ipc /system/xbin/su com.cnlive.movie:ipc /system/bin/su com.cnlive.movie:channel /system/xbin/su com.cnlive.movie:channel /system/bin/su com.cnlive.movie:CNLiveProbe /system/xbin/su com.cnlive.movie:CNLiveProbe /system/bin/su com.cnlive.movie -
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
com.cnlive.moviedescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.cnlive.movie -
Checks CPU information 2 TTPs 4 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
com.cnlive.movie:channelcom.cnlive.movie:CNLiveProbecom.cnlive.moviecom.cnlive.movie:ipcdescription ioc process File opened for read /proc/cpuinfo com.cnlive.movie:channel File opened for read /proc/cpuinfo com.cnlive.movie:CNLiveProbe File opened for read /proc/cpuinfo com.cnlive.movie File opened for read /proc/cpuinfo com.cnlive.movie:ipc -
Checks known Qemu files. 1 TTPs 4 IoCs
Checks for known Qemu files that exist on Android virtual device images.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbeioc process /sys/qemu_trace com.cnlive.movie /sys/qemu_trace com.cnlive.movie:ipc /sys/qemu_trace com.cnlive.movie:channel /sys/qemu_trace com.cnlive.movie:CNLiveProbe -
Checks known Qemu pipes. 1 TTPs 4 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbeioc process /dev/qemu_pipe com.cnlive.movie /dev/qemu_pipe com.cnlive.movie:ipc /dev/qemu_pipe com.cnlive.movie:channel /dev/qemu_pipe com.cnlive.movie:CNLiveProbe -
Checks memory information 2 TTPs 4 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbedescription ioc process File opened for read /proc/meminfo com.cnlive.movie File opened for read /proc/meminfo com.cnlive.movie:ipc File opened for read /proc/meminfo com.cnlive.movie:channel File opened for read /proc/meminfo com.cnlive.movie:CNLiveProbe -
Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbeioc pid process /data/user/0/com.cnlive.movie/app_SGLib/libsgmain_1204281226000.zip 5225 com.cnlive.movie /data/user/0/com.cnlive.movie/app_SGLib/libsgmain_1204281226000.zip 5310 com.cnlive.movie:ipc /data/user/0/com.cnlive.movie/app_SGLib/libsgmain_1204281226000.zip 5392 com.cnlive.movie:channel /data/user/0/com.cnlive.movie/app_SGLib/libsgmain_1204281226000.zip 5704 com.cnlive.movie:CNLiveProbe -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.cnlive.movie:channeldescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.cnlive.movie:channel -
Obtains sensitive information copied to the device clipboard 2 TTPs 4 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbedescription ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cnlive.movie Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cnlive.movie:ipc Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cnlive.movie:channel Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cnlive.movie:CNLiveProbe -
Queries information about running processes on the device 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.cnlive.movie Framework service call android.app.IActivityManager.getRunningAppProcesses com.cnlive.movie:ipc Framework service call android.app.IActivityManager.getRunningAppProcesses com.cnlive.movie:channel Framework service call android.app.IActivityManager.getRunningAppProcesses com.cnlive.movie:CNLiveProbe -
Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbedescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cnlive.movie Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cnlive.movie:ipc Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cnlive.movie:channel Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.cnlive.movie:CNLiveProbe -
Queries the mobile country code (MCC) 1 TTPs 4 IoCs
Processes:
com.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbecom.cnlive.moviedescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cnlive.movie:ipc Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cnlive.movie:channel Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cnlive.movie:CNLiveProbe Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cnlive.movie -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs
Processes:
com.cnlive.moviecom.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbedescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.cnlive.movie Framework service call android.app.IActivityManager.registerReceiver com.cnlive.movie:ipc Framework service call android.app.IActivityManager.registerReceiver com.cnlive.movie:channel Framework service call android.app.IActivityManager.registerReceiver com.cnlive.movie:CNLiveProbe -
Acquires the wake lock 1 IoCs
Processes:
com.cnlive.moviedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.cnlive.movie -
Checks if the internet connection is available 1 TTPs 4 IoCs
Processes:
com.cnlive.movie:ipccom.cnlive.movie:channelcom.cnlive.movie:CNLiveProbecom.cnlive.moviedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cnlive.movie:ipc Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cnlive.movie:channel Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cnlive.movie:CNLiveProbe Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.cnlive.movie -
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
Processes:
flow ioc 53 alog.umeng.com -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.cnlive.moviedescription ioc process Framework API call android.hardware.SensorManager.registerListener com.cnlive.movie
Processes
-
com.cnlive.movie1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:5225
-
com.cnlive.movie:ipc1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5310
-
com.cnlive.movie:channel1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5392
-
com.cnlive.movie:CNLiveProbe1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5704
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
4System Checks
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
603KB
MD5c9aad771b1b5a690ce8c1e566f82e4e4
SHA1863612b8e1883ce62fd22a9394a62941691d5b74
SHA2560e538ac8db71e741f3a617ff3cff0e2b3818b5a7e450061f8a257a2cd0908623
SHA512646ecc83dd4a219be10bde0fd3f113754dc836d6b7323614775c7a37a6ba389ae8fd07f3443c4469400b48d907e1967ca89e9864effb36d8c05713fc93e383fd
-
Filesize
295B
MD5d506121baf5ae8798db85cc40c9848bb
SHA15dd1573b0acad0ac8bf4b4d2cd4a63e85bce0784
SHA256bc02126ed24c645684aa7a60ab021a4b0275f593bb9b7281e9f265b8a47b1893
SHA512b5a5d98abfcd9c2ae50035231959b88a4f37bae454d14324d46afed33a0bdeb7021adbc72d7f86584415ad87af8cd04ebc51397b6e8b4ad9d415fad9a67e100e
-
/data/data/com.cnlive.movie/cache/image_manager_disk_cache/088bea4919b640ce81ba75285dd48e0f599dfd59e5b8c55e90f3d479db55e549.0.tmp
Filesize17KB
MD531dfc2e4863cf8b71b6fbc9a15dd334c
SHA15bf658b8a668a1b09cc38376a628409811655059
SHA2560fe89771d373cb69aa6d94f904193c266a2f2e8c9fece9b522f6c8d3253a9a93
SHA5129be1c61132ba53aae76cc5a1d1b799394968924b9118fc95e689540fd56edc494dca63b29ef552df6833466557c96953db7f9b7d976c0df5c430bd27d3e7ddc4
-
Filesize
179B
MD59da975325a8f5a04b68c035a0a07f1df
SHA13a16eb0b50c98eaf563c571853a470020197d6ae
SHA25625591d51d34689629311740a14adc7b5a919f7d92cd94cab99d5309be86c913a
SHA5122636662f4fdc5579250ecc925f87593b58ecd9123562fa04b9052dfdf9f28c69ce1de2e15b5af6654efa7479f0c2c5d607000314836262161f41c8958ed6342e
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
20KB
MD53074a7ce98b1cdd1cef004afed979310
SHA115662c40f0ff0114e95a3ae8bfb3193961b12a43
SHA2564f6ed5abb96987ab6fcc76a7e36bb90ae08272e3813686bb3e27c5d0a63545ba
SHA5123f380493647229177172e85b62035cd34f14a93e000ec08ae1d41d26198ef7bd91039f1a99fda55e07be37d3d45b4c463745fed322dfa82cff584f22adacda7b
-
Filesize
512B
MD50f9d6b28067725d24bce30538a48a5e8
SHA15dfaa71466994fa558fded5be81b2056be5b2978
SHA256a42914a935cf5d69b67ca40f6e37a7df74dc2b24662965a3532eda4a090cc8ca
SHA5125d0c540dc8f9b5ac822dbf59cd1959d5c12657b19c4f107db183cd76a3d935e78f65bfe14beb1b3a5465f0956bea4057cb278cf430ebb25a1bb963649983f946
-
Filesize
8KB
MD553611cd8ff00c3b2f0445b13c7bfbc32
SHA1f4fc4500897caf97afd1b5839852c3e040c84a7f
SHA2563cad4fe8ce8458484766e53ed131f3c44e9b0510220534eda85857a25222bcb8
SHA512076d5d7459309b8483615936a096ed2102e48a68c7435fda7b03a081887f9065ea31622e65fd5464d45704b2f3749ada4812fd5f61e8f8b2d6b49a8681189664
-
Filesize
8KB
MD5d81d65690b0840782d026b5ca97ad7a0
SHA19e063a5c64ee6a7ebe571c11503898ffccfd9180
SHA256a5fa5ea300ebd720dbeb1ba9ab4cb2417660bea9e2784d76627eb1d984aa59e9
SHA51297b2dc1eb8051d501caf8482a9d7899d5d059bf8898943600498889c514792d0273be880cd6c93c82c22895613d5aa08a51289bf0128eb49f1166ad07113b34c
-
Filesize
12KB
MD5bdddcdbd80ebc8c9d5d0a52617c8968a
SHA1c833254d9dd5d003fa91a9837aaa4ff6acd7551b
SHA256b9b9b22c9211e49dd7fabbd186b781e13f8b19e15b0e82bbad99c54c9fa1de1f
SHA51266f001b0d2c9de22689fd9000ba31739f2a01711ca93948ffcc8e96d5b37c35d24ff35f03511dddedc069324d7eafd2da46c672339cdcbec457f36adc896560d
-
Filesize
12KB
MD5e8ec186a168823ac4409dad3030039ba
SHA1ae1785de66126ec4da2733e28c4f96129bdde555
SHA2566698fb02a688c1f3a73193ff98dc99539826059b319b1f6c5215470356f14e49
SHA512cd7b4f6154deef0b9f33ac278accffb9e956e8b6338aa942e5c8ad870fd5ab65406313ec1504ca4fb348d766d732b5ad6fa03ba4c89d8664e9f3aa30a76bfc35
-
Filesize
36KB
MD533858cfae2bf3e4a3f27f62c5e6659d0
SHA1a8ec5e86939b7058d535023ee04f07883894aac3
SHA256a9ee15a6d8beb4e11baf5c57eacd663c2fd8e4e7d4704e3ce84599f55bfff1f2
SHA5128b1df5bdd6011587a913448b9df2a6300b94d0cff2ad8d6400a0070466eab76e731bae23af927c9757b0766b625ceee6f6fe9bc31a044a18ab8f6db020f3a4b0
-
Filesize
20KB
MD5d95e1280cc553509d7b5b7851398db12
SHA1121eb76ea37f3407d0f3b56392f6f67893fbe649
SHA25658e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c
SHA512f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284
-
Filesize
512B
MD5afe6396a7a18d0a2552bc1081757da67
SHA1a9976001c0b54836c302707761f32163617987bd
SHA256afd99a3f92cc58bc3ec765170ff7518806edef34ebef9260a8d2d268c39ff1d5
SHA512202df0e234c2e9c73f094bb13572ec18619bf1dd71332c3760204829df2ad0fe8a3a936bf3afd7b49be3df7617337cb2ab8142b2459ebbdd5de7c9083acd3648
-
Filesize
8KB
MD53e23baee4f5d38a8708af8c6119a30c0
SHA1854efeb4c6e82f0c14e19a92378526871535f944
SHA2563f9eee14d1df03d5c25e0ec6383fbc193a064e4898d55ba0b8802dc1ef8e8fc4
SHA5124d3f7ea1662a3daa913a4066095c06fd39054947aa7e918f8d4d763785205100846d017ec56bc9284479b472f80f9d87ac3ead9e8c0db1d608aac6f5c49e6e80
-
Filesize
8KB
MD587c5d49f363f6550c0a08e746fc4c07f
SHA115fff6a6801b6f0142e12f5c06adddb9fda9257b
SHA2566f62c0d57dabeb3d1d2a3bd5604bff00d2fa278835d8726a507b257edd969458
SHA512b25d85784ed57bd3bb018d129b42d0c3aac9a7738a0caba0f4fbaf1c9c73cba5c0420dcb7c96ed875072399fbfea19a1ea811a93ed40c434ee66ae2224bd53c8
-
Filesize
36KB
MD550f3d63f4b9241e212be8ec20bf3e374
SHA110353f506f0aa9dfab398275482eb42da167232a
SHA256be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653
SHA512dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c
-
Filesize
512B
MD5e767eb4c46f9e785f0a410e4299e38bb
SHA14be20e78a060dc94c414557be932204efc6af428
SHA256513cc9743b623068d6b84950daaf976fb32bcc0260f862fc10cba342bb45ed96
SHA51249e5f04ff03be9607d4d98219d7991914b77f1d0a29e34f4ba660f9190b5bf1478045e57bff6bbc35f2fea1316b9e4138650cfc375f6f5e95820f674b1660fd8
-
Filesize
8KB
MD56bb6736d690f33377f725eda7662e61d
SHA12072d6a7cf89bf1ae1fd3ee27e245cc164457dfe
SHA256c51deae94f191166ef87c5ef7795aa46130b7700246cae0e06e375fce1a75cf2
SHA5129a138e0428174ac27d86a081d7b517f82dbc19998437d214df6c482a279c6e86b38b507039df27b98b8534f3eaf616794ba2f92b56c2f87e30eea43396a66f5e
-
Filesize
8KB
MD5442d9b2e57690b7fc1a967fc2c08a0f2
SHA13d4b7b1613cc16bd268d6d899d3879e8fe98bfe7
SHA2562c882a93ee11df7e2187b915d3ab5488c157138206b72a92ac5bf656854d710e
SHA5123c00b0f3f59c7ad7a60ff8e462bb0c36bfe044ee0998feb71206105a03d6f4bbf78c5a3f8ff310808f070d07605d786fad3df8c17673ab85485c7e8b1e0e2a62
-
Filesize
40KB
MD5787eebc8551665ca88c0de0853dcffc0
SHA16683856ab5f01816a0412f0dbefbce8c56f4938f
SHA256076659a11ae75b83f2aa4f38a1461d5e328c6c30ac04fe33a0ba03df5b0420dc
SHA512fdf14168d1ed52f9de78618691b0c9d31a7f6bce938d6cc987b8cb4f82309a04037c70b71f23832e935757033749eddce4e41bfb92479b0f09c2d9759a833205
-
Filesize
8KB
MD5153629686c0ca3f04417a5959c936782
SHA170c22a30edd337fa2f54188a172ac1460f10a6da
SHA256b8857a4b78e1c64a6d6e8340d3d25f0e679020815ce4001e6eadb03335e27fb2
SHA5127bf28e28d21e2228b0ac13013bb490616f0466afc216f31545dcfa2d4522792b52d358c1b70b48c5656a696b4554d746091bc6c4f3fcd5579f39140523c94588
-
Filesize
12KB
MD5d1bb673ff6d510197ad93ab61e00ead4
SHA1a6f75e5b98303f7acbffd2283e6dbbba8f8a1980
SHA256a762c2839716b6b8f51748a6834b7ba789b7c0cfda32af13f3502267364752a7
SHA51289ee7bb8e554c2036fcba6daa874824ca2cac4b5354b1b0ff53fce3bb648922f0a2b8a93d377331fb45b1e2e7a7b819506acddd469f739acc95e119a35741f61
-
Filesize
8KB
MD55b0f7da48dd458002d6bad233b8bc0bb
SHA1962e4a2199f62cc1221050883e347547b3fb7e92
SHA25630e7081665729937264d334aaa6004fecd83a1fd5547779b390e66aeb2ce34bf
SHA51214688d609ef2d7bfb2ae79cb2a5e75553e41392b5b84131607d7a81ab92801a4d1cc2bb1bea6583d735fec8c5b5716c8469661166f88f41bfb36efa22c011635
-
Filesize
12KB
MD5f99dbd9a8e14d8763c0bf043941ea144
SHA16e08d23fb920e4c0bb419514f88effbafba7ed56
SHA2569a3f155e4e62da9d6815cddad04ab18475469b858d00b606decf32b06ff1b58e
SHA5121f295ab8f0409c36b83fe61625d45d3cd0c570fb194f5868fd0ce814604cd46fc103df1c18fcc5f683f986192e9dc9812494ed0b5893656cc32171427d5e2bc9
-
Filesize
12KB
MD5ff1dde2f79c87fcf4f829385a56af656
SHA1564ba74feb087b852bafcd078a6143196e215649
SHA25687e8b22475b4c5019b1e66b3f558d4c6c182abdedbc6663d1e4276f111980132
SHA5126388fd200f40e754c1e502450dcab8f303fdf4d4a18f2f3fabd3e43368090dcc5ece01b5e95b98c5a7ad44ebb119d5ba18117bae101b84b99ac68e88872c4acd
-
Filesize
40KB
MD5f26427e12937946199296a3cc63572ba
SHA1bfb49bc1dce68ef0bb8934f42dd8f6a9b9aa8de9
SHA256f6c58eb62b67fe0f9dd93ccea17d2b182d8361f62994d131cd6a86073d33c05d
SHA51295d8c012192557782ebf1f155b338ab9446a297e9bd91903a01897734bade21338209f145f4be98351963859055f3bfc5951c4cb880042334d7b96290216f3f8
-
Filesize
8KB
MD5785e9cf5d487fe431e5ab8b96e84e7d6
SHA137a949192659afd4141427a16853d29ba5ba3207
SHA25690597f076e583d02bfb580b3dad96e0b0c09760ba93526cb89a9be8002ec40a7
SHA512a5a146d8c7646c12beb7ec74303c0f0f3da59f6b077927dae98d9999bc5b358d6607414d07f2ec229f4202e548e721e82e79f1f329ee8500369673e74d2d3b3e
-
Filesize
12KB
MD584ca0690f2b15f4080e6aaeffbbabc69
SHA114f8f940402fae8089b0afda64fb1cb2ebfa2455
SHA256961ee9614c545423f654ed81f087ee53042e862f5eb863264c9db4077924241c
SHA512f1e1e2cc8f4791d14ee683904c0400d4708acdcee9ad01bd7d1ae99039a00018e82a8e933ba58f2822971e59594b15085292d9118296cfa1ed42b26caa31cd28
-
Filesize
12KB
MD512371bf7f629c814018838eb2c15edfe
SHA1637c6fb57cb4e734f97311174d43a74eacebcbf8
SHA256e438e91421dc7231f95968040c2833689673965645d987fa63c73f2a9d603ce3
SHA512c4c0542332aae7b56c8ffdf8af1fa94420422862021f5be5d4d79f26d817a04c9b42532915e28ee46fe5c2dfcce24ccbc6b2d984f3bf545a517fdb295ab19424
-
Filesize
8KB
MD59fa4a6936ba70661b1f10d8bb353c515
SHA1e78efbd527cc82dee8fae4fd8794d8809b4e8a1a
SHA256c6bc8a1f65dd292606900254ce3262eff9c7147e6f950cc667b0a8ed592d8ab6
SHA512037b8a0628802da3ce5fc85f977cfab1a1c38397cdf2733528dfa9a959e1535425cf999dd9a87f67dbfcaeab1b78c5059c6d3f1d8c877395ae5dde9ab7614448
-
Filesize
12KB
MD59320c71fa61e5ecc958159af02dc17cb
SHA1ca80add21cde5efe30144f03b17c314a8dd123bc
SHA2567d99b32468fa673589811317be7987530fd82d73dd4102207fb9d827d2e04826
SHA51233eb2e7740e3482453ce472fd529fd01c6715e15ef770aa240042ce0dcf7121e5f7d5c46a8e02c12d3600cb4247462e4354e7b9e07350abc843a4485bead5a19
-
Filesize
40KB
MD55db14d38990f05dd154afcb4ea653808
SHA1d5bff29b3366eca04ca45c1af527d1a0956fe250
SHA256154b400c415ab5c94c8d161f67bc41b0706a26246976c99ae4419e0a7a2fef4b
SHA5120d4ef930ed1e8daf986650cc990690d5b9dbadb7a5a35a9067e84478a3a03d660b3833fce2aa51ade21c048b360bafb23e4a1b43021eae96bb6b98c29a477669
-
Filesize
8KB
MD568270b9e10a4fb9dc4d35cd3ba84888d
SHA13ac44d54639e90ea6c39c9f7cdebc08401ef7990
SHA256b6c4a1c54044d8f39f7e5ca07f6bd190804f16c58b3583735181a3bb580f4396
SHA512436eec39a8de871368933a5a88aab3225fe4c332409a3d838fd6fa391292171062af9c59482ed98937622c639d762aed16b95ef31ae8879a434a5d3f948e3027
-
Filesize
8KB
MD5145c68d7665d661e517ae04e5f01b861
SHA18f7ade60ca209a3b75d227e5a96e9007cdba43ce
SHA256ddfc4c4849f6bc8ba95ff0d9fcf5300f7016128166586e21065c8d6ccf577efb
SHA512a35e3a3a4b405c5d88758545c1e65eadd18664920fd4f77ff7587b7af0ebd01b49bdefce19bf882ab2de95b033e59947c17c6a457b3ad30d3a675767b48a6fb7
-
Filesize
12KB
MD5cad06cf7a541a088b41f4e7f7fde868d
SHA1043b686f58b15e7a98e0e3b08d862d713cb9b9c9
SHA256dbfd05cbb855c35f88e8eb3047ef7a2c765ec7f66323037cf069b447fb781228
SHA512b29b72f1aca1071a08f379f0441cb4fcb5ad3ec638d3dfbc93eedab031ff373eb17d4e2ee2fae747728addf82b32e817c0efe244449d56ce594d67c3fd8eb4ce
-
Filesize
20KB
MD5b426b57e04eac286b5a434f6551f1ac0
SHA163d3cb1e45ebd29a6d64d7609a64571144796765
SHA256a52b0a9de3fe27ca79192d6b14d1def04f8253ce9e201276f0c981c70edb3ccc
SHA5123b2780b1fab582fdeaef51218cdfd349c1a7ac29151621a236dec42964e5cb9c23e6366e072e1fbed06c39b5d64a4cf596351e0251ff5ae3ec210a3c3619010f
-
Filesize
20KB
MD5c8b05a8c0c4e6e1f08939dc6175663eb
SHA1c11cd54690b1a791e6f9875cd7a6eb1400477a8f
SHA25627e0ae0e9fb24ac5c8a96467eaa79ff942eea58fe53b27fbcba7df88007018c2
SHA51238671eb70dcd442df70185c88655b181c2a4f02854a553c910e1e64c46761a7eb4393f045f58837336bfb16c0eefc41417442374335e2b40e3b1fe956431f98d
-
Filesize
20KB
MD5bc4c641571e0cef8e58214608e84c83a
SHA10a649d9fd01abb43d9459dbb01010fdf78ee32dc
SHA256cb2357c521fc3251b5869a85c562929556b2c1cfc896654fe6ec4c8362393dda
SHA5127443aa6c604edcb5a6d4574cf36d47abf75efa8c7ad8300d40d10e42482bf18415a08944dee66f5885218b89c18b7a24ca78a8247f8bc21dd163e1c013c9313b
-
Filesize
20KB
MD543c87ca89125cc3af23453435eb9a652
SHA169694b3abc19fc1f2de62827014e527727033a2f
SHA256f6f648c485f6d86b38f5401a9bf524c4724525c53c9f5617d12efe6be73bd4f9
SHA512110010a32a9c7b354f9d90ec412b7501768462685fa5eed3b503efdc8a2016b434fff3d68f388d6e2b3e64651339e13db22d0c5d88bc6f2e97b4e5ea69d726c4
-
Filesize
28KB
MD528d27ef39a31f9bf7dd4680b455d3163
SHA1d59803391b424aa5326fc6fabd5ee4034ec4a262
SHA2563b8e2b32a4c944513be56eb327b3d0d5721594b2a618092e4e76df24a21e67cf
SHA5125654fdd33c4f62f190735b7796d0f09ff1336a799929106a74837b4b6bc41d68ca3193cadaff15b1d176a802bcc5401212783c9dd81159fabe4a053610a65809
-
Filesize
28KB
MD5d3b1e848f1833e99362f5443fb630199
SHA1ab3dd511deeb50c9617e7f039f06d90e8dd60540
SHA2565301c3135027f9ca67127c63d779cd85f9261a306b462d52997701b76ac4765a
SHA5122518a349a5d8950509c532272d4ea1789339e93ede7c770e5b037012a740231bf92251e6b3335926a67fbabe8b22ea9a8ede6e677010ef680066a2d8941ed878
-
Filesize
775B
MD553406f5e9e6396538d6f0e3708a8bb82
SHA13ca19c2f474ae15948347f7dffd594beabf5c662
SHA2566e5ef590f728508572d8f18209153e71cad44f2ca2865b60267fa8dbbe808683
SHA512d94af9155861ba52ee57caeb30d69cae7bf24d572eae06b71fd469b6bad46f0ebf65cc624390ed8e33771e2a9be159d9fd588c8bd95b3c41380f82349e7ac6b5
-
Filesize
12KB
MD547185d89f6f4dcc64df09f82eac906b5
SHA13af61b78ed8a4d5ac19104464622d30fd486b6ca
SHA256cada7bf68063f18cd9166d67fdafc0ab07b58c16b448fed85f85c165a58ef3cb
SHA512d8386154db6b64ab6dd2116dbc710c17be2f95049501f2a721bf7fde8354d52d40bc257278a51b7384a80d349e6046ebb1a351d7078d7401db957a6520e5c7de
-
Filesize
20KB
MD5054d4c34bdb4aed847714c28a1287d7c
SHA1e1dba8458eefe3afa2d67aec28e5a28cf45ea03c
SHA256e14dc4e40655551cd1bccf8712eaed8ba5cfd6f61197b6bd6b258a9108a1c96b
SHA512f54344bfa348330fb623f907d072fa2a9c95acdd03e2d2a4571b0d5c2cdf70d54142316d72801dcef05b876b9805f0ada81024292760dcae1b2a172b90774ea5
-
Filesize
12KB
MD5d1fa2ba63dd386387b8b5fac05e44391
SHA11081c3b0c5bee3ccc44bd209601d20192999a108
SHA256940781a5a2ce40b47e93516f032c5dc8494e6f6813d3d37b2f8f26084beb8228
SHA512a94b3b412d7493238e916ea8de546db119257559f3eb36f8c6683e0954af1d7bf4a5788906fd7c7bc78db05f0fe931d6ccf31880826f157e8f486c083b13073f
-
Filesize
12KB
MD5932c8c7dbda1219c38b2ed843809b38c
SHA1ed006ba4d904b14490d48ae13b29ee5ed82fbef3
SHA256f5e5c36512caaf04deec631d46e9c8f5ae579991ee0b7d3cfd1c88ff0accba56
SHA512ea5f8bb6d7d9927a202098b9ad89158d56bd57734b1f839f32b2c44cee80d97d597ec843f030bbe09035f06bf8302c85a24505d3011dfccf3f08113d7eb5121b
-
Filesize
12KB
MD5b1fd9b4bec827f587e34730e3b202e3e
SHA1f0bf641013ce2cca9b72d9d49b4e6c0db5a09890
SHA25643d878cb6f12b186f106558975458d5dfb96d215afd3fe9446e47a2fbcc65319
SHA512cd8d746ddb083c4c8854111c3e6b6ef8bc5b99000ef464eae1a1a5457e167ee569206c2db21ab6e81195963a626d161e8dde00dbb3acbc9cedf6f0573b2aea88
-
Filesize
16KB
MD5ad053c0edd46d6552552332d41964d33
SHA1f23fb18ec700421a2392be6acfbbe1a75b7a375e
SHA256e81786cd8fccdcd25dc2edbe07338ab702db364da45f9073c66a819f62a68a62
SHA512b03b17d420f5f146ef72695faa97ea0817ecb372b21de4892c422f654b552e6f2aa257be55899d97fa191d01039aa6e13d9eb827755e4084b5469b55791aaa62
-
Filesize
830B
MD5aac5ecc599ebaa36ba353b62d546b25b
SHA19f211ed55af515f9588285ef661c8e75c98d5a19
SHA25683668be251551efa95ba760d5f863028a54f471a9ad5c73fd3ce9e860dad0fec
SHA5125832b0f5e11ec2e263558d933d24e5ca4d052daa6c7361655f550a2935e049c3fb6a7315806a90073131431ef22723085116d3931a6a907992ed469d15dfc320
-
Filesize
40B
MD5b50d365e6a94bed986da30fee1556262
SHA186af16401be85ee4e6e3f1b159cfd110c29fc856
SHA256a3b4edab685cf4e11c190a27138b17b5fb049289246365ee7934d8c564440644
SHA51227cad9f7dd5cb87c1fc79db5b11a2792da933e2ac6618b6e38f3c070db16b354e482095df4782f9922a6e66e8cdf5aa00087735dae715d7b09b024e2a744e0ee
-
Filesize
16B
MD5cd1eacc7a9058f02536137ef8a5ed026
SHA1cd4ada463963429727ef1661b7863645808db518
SHA256b1417d03083ac9ac93d37f6ea6b985674d7874f16b3d61a41d555bd8a465a1fa
SHA512eb63bb16686ed2ecce82a9b770ec1acddb748b412c05939d28597d0f7432311df0014a1404fdbf2d6ebd64ab40a4cdfff61547cdda3a210bb50527701a781061
-
Filesize
40KB
MD5d56e8498a19ccc4dd643d4b2fc2e1290
SHA1e50280ee3a450a946fcf84f4bca1d84c5ab0b223
SHA256be460817fa81d2e0f3c86fe86704e61f17ce3fa8f2b3fd9d536f15e749570af2
SHA5124e46925bd7eeb95e7106283a9f468b7b912e686d76bc6316a0c84698194018f8f46f9db267d8d3dc152b20d262921c108d6c7ee95e13b035a279448b3bf441f0
-
Filesize
469B
MD5fbe66e833c060c349ef963571ea4c4c6
SHA18d1bcbd60aad31f556493c61d1ba69e6d45c43ce
SHA25646e25a23f1b93fc57ea030c4b454a34aa993cc917044938348536068b6afab1d
SHA512147751f406eedf889ebb0fed4210c29618323068eca82ff02d8fd69c85da8ac71e797fe59d580a3ffa0ca996930cf126613ab6f8359d9be4a4d4021f69bfc31d
-
Filesize
12KB
MD5c6166d60248c9254564d75e3ba137782
SHA1a29db730dbb53a88c816df315e62b0351299f762
SHA25617255a28cd1e889a8a9dd64d55b1df7809e7bd58b4d8154ae6459a328889aa99
SHA5123a71b075fd304d613076b6a69906a8188eed3f65f25309648d09e920e4f4eb969cf60203a46ea593494d639b3f1185996af7b49be21b5168cbaa545b2823bc5f
-
Filesize
20KB
MD5378d5675e95e0bd87d27ee34f453ead9
SHA1344d77c5f6e5f3918282d2a6d04a1df3ab583d60
SHA25699e613dc3bc42a846d7a33a4889391cf5c89174698940fdaf8bdee0a08e3173d
SHA512da6f7f6234964a0d002da80dbe409419cbbeceecd421b69d621047810f593c10eee04f9602712d87f29299ab3a43e06db7769d4047ef2e5e3874f14602912d17
-
Filesize
192B
MD5213d6cc582aa97629911f4cf6dbb7f13
SHA1230b38498bd1bfe3b1fd0dc027dc039f961c0729
SHA256843f3a3e5de367f4b2c5927b99e629b40ec3887c998873c3f954d21b3d19a65d
SHA5128c627517acda637b8ad728fc8afb5b131aaafd40e2c2a3b5ad554e9cba1b60252ce8142be929b809b140ce5efb1d425ec36f5808cd6478e41729384cd719b868
-
Filesize
4B
MD52a10665525774fa2501c2c8c4985ce61
SHA1f7433d6fbedefa862aaf4175a7847d3dba4eceea
SHA2566da233543753c62bf28d31560b7742debba46ee56b37efa54b36d16d5bd1134b
SHA512fc3dd5235840e99bbc485049471b439d5e6f59461e1062268140d40e39d4fcbf6157ccc47745dcab31dd58d164b81ff831fb4f9c6ce1d0968ba0f09975d57be8
-
Filesize
328B
MD5864e5a0642c5a0cbd18105fb5004066a
SHA149b8f799f6e5e8f500dd1ce544b010d9c792781d
SHA256e9ce61f38e1799816053286cb0eba452e28efdfeb36c0aadef887ea5ab907aa5
SHA51269c37aac662debe51e0bf28281a71ccf44a53f64fc13559b3401fc49136c5402974c97bf0b317fb848aa595a6ea5bdbc1ec1d238394bc25324392eda2c967d0d
-
Filesize
167B
MD57981379f4dd7f8eebec94ee89224ff95
SHA11c80e0cda44f7c8d44c63dde912c62a3b461f041
SHA256e53386a2b795c591ac6b8d751a49439602e829739501da7de66419ea1691acff
SHA5122526fffc815d3aad67b3c34bf3d6acff2aa9436da85ee75b40fa784b247e82cd331625ec6417ec348fc41991717a675361c96c611c255dde8d8c083c1a69d965
-
Filesize
66KB
MD56bac0b55f44e56ee2f981ec97e82c666
SHA183f658166c66368c23596ed3358baec04e193c12
SHA25688b42e45697386e6089381a1d6e507ac61dd63f0537c3c81cb36a1fededed026
SHA5120b298208372d1ce4874576c45ded242a65dfde3a7bb54228d28cded2ddcf1d8a1bcaa6ce4e7e5f3eabddea2d852b7c171cba9073f9d95b899126804158e37c76
-
Filesize
8KB
MD5cb00befb3be9a490613d33d5b810953a
SHA16bf32d5f0116e261f6fd45412fdd1b9b44016124
SHA2566130a7c5ae311df4ae4c3ccca56d01c91a396cde8126b5201443bbbced72df96
SHA512851188c4729148a3e11ef14fe26631e3a9cfc7ab7bf5801255b83aede7447a68b3d07c18c3617ee2d213d3eb87d0dfd5aa68bcb0120b21baf3820c5db9dc069e
-
Filesize
40KB
MD5839e4dcf414fb3433798a20e0e749554
SHA14489f584f6274684cfb1979e1ce20e10638e4fa3
SHA256e22489df58084362202d94e05ebfd3f52512dcd119e6c8c032631c1ec62749c2
SHA51280a97b6f1032a2a92e873f0b8eb43bd5a4c3098daaa48efa603ea2175f9b7fcf09060e6148bcfdcca296677d7263d4aeec47018eeda5d535d7e689671c4a0ef2
-
Filesize
512B
MD5e9661781e0f28174f84409a7e6c130bb
SHA1b3b33e87d59f0a9209602cb7b507ba1bf4832f37
SHA2569f1a2fa8113ec1cebc713662f60e1f0f699c6be2345de32ad374478ceb287fd8
SHA51271e88f264a5be148951e8415a04f6477fbaf2aa023548b3a25863aed401c9d108b49f6a2975ec0582ebdd7b5ea8dee1c2f731fece91ff32c5053736aa050e92c
-
Filesize
8KB
MD5a03d2be2b89dabc8af1bf5923297ede6
SHA12e35ab6c42a63a6f94f822e346dbefb9982b9b40
SHA256406907f9e2c265e391d586cf66a9121bdad16950280d9ee5db03194e3ebbaedb
SHA512f2dcacb311c762a3e44e96f6cfa33736cef3d2f0206beffd7ebadeac3b6830a312b630fd6e2f7fa3b037df23e467047cdfd7f9ed6266482d42eb402959cff15e
-
Filesize
408B
MD58c3ae49cb579f1a6a0ffe2754060923f
SHA1ae72d3d2bcfe38bf7398fe3f7f5c0ca066bc5484
SHA25677e7c38f556cb2e0d4b4c372794af68c4c5471a56894b65eb402d0437f993c05
SHA5129fe5c7bba5970428da66214acd1dfdfb363dd48b8326b74b34e3038429c65ce81c69d3caabf9b436dccad60c35014c91d38ad522082befaccb47715fcc78919e
-
Filesize
32B
MD55fb9978f997d63b530bef34c2ee84b73
SHA1cc036d17b69e7e973ae7d73bb44fa661b2896cb3
SHA256950960fdd94da67e8fa68eebedb86ab499f57cba34669ad6aea10b26b0f3de66
SHA5127d74653487d0a29b38b236d9be1dcc25a46291153dcfd07b1738183373c90fd9c7634893c027b6afa63dfa637b87d645274786c77f0a78674cc2d7b71d0ca5a0
-
Filesize
512B
MD569fd7ce8c74403d8e0ef8976465c5db3
SHA14bb190249f2b1d3f626ccf94e1cbae7d91ea8307
SHA2560ca2865cc4bff1e48f9cd9326cdae281ea1e3f347a8ca5ef8453c0f05d591850
SHA51225a0d4ab51fc61eace74d21b980ac556501e1aa1f11330a3094de38ab6fe96bb59fd9381ff96771aa4455a426aca8a5bb91173f2abadf2eee99805bf22d932ba
-
Filesize
512B
MD5fb69fa2552b71a7817ac4ef74b22a984
SHA1b32ec4f32f81655291f9062024aff81d7852fd06
SHA2565c5f92deb7b626b30cda286bcff875b0c63561678554f65fb6e7305921ee0900
SHA51235f36aacba443178954d4bd7b61be9105b68cee6a1e85477dfc33bd14fd4313e1a7dd324453d7408beb9c08ab06a195497d2e48ce3f052f3dde482861a828d17
-
Filesize
1KB
MD5869e30ea13dc89b7b9875b2e72240981
SHA1535059acfb73aca31cfc0308241ccd2b9b3d8500
SHA25690f70cf06b13cce6fa424de1911e3eb7fa1b7ef51822c2a874a201e48575014f
SHA512e40215cd1f571bc85a0c720804d2f5e92fb66508057417b186250284c76e9fc317591c631315f9bb018a8ba0e55e88d1d5803154505511c1e646f5385c2f0cb2
-
Filesize
6KB
MD52f90168098586e654ce8673bca18f451
SHA1232d10f2e0c6a597367d142137a71453a93ba106
SHA2568169942c762b904a79c73ea251ab6f01a09ea5b93632b71e8c496e40b89e9374
SHA5128d7833b9fa3d5b1474371d3e50dcab267aa3f517dc178678fd21bfd826adc192701e49f0e11bcefbafb701c2933ecc7477763b1ba52444e462358bb4baa3c5e7
-
Filesize
512B
MD52118401268c1eb5a8e4bf28534d95b7f
SHA18abaed025c59fa8f5f328bb8879e766dce723f9f
SHA25602c7bb3bb7a49f230d61dd30e2988a9c25f5bc35341f28f971a087973726e342
SHA5126dc3d9b5b36fd711e4b6f087a6547a93c41fb92897d4f38651c6f72d00f15a2ccb43f5159dd6bbb93dd68494276096d72c6e3e78951984a5d203b4eb37c4a60e
-
Filesize
37KB
MD53035902584f53dd80cf8d75985309333
SHA17eec6d392b93ad6867acb1906d7c554bb1e29821
SHA256d9b8a9ee30569f5ea552bc8f354609d6d573c7a902c4afbf628cec57b5c4ac18
SHA51258f4885ad438ba2cbca5724a58715ddb9724f9554404f09f8544b12f86bebfe72a91f9ba45da5815a4a41d759f5b0ae4cee8bca4466a4af8e58e060c37655a22