Overview
overview
8Static
static
6ba6b043dae...18.apk
android-9-x86
8ba6b043dae...18.apk
android-11-x64
8BannerPlugin-3.3.apk
android-9-x86
1BannerPlugin-3.3.apk
android-10-x64
1BannerPlugin-3.3.apk
android-11-x64
1CommonPlugin-4.9.apk
android-9-x86
1CommonPlugin-4.9.apk
android-10-x64
1CommonPlugin-4.9.apk
android-11-x64
1FeedPlugin-3.1.apk
android-9-x86
1FeedPlugin-3.1.apk
android-10-x64
1FeedPlugin-3.1.apk
android-11-x64
1LoopImageP....8.apk
android-9-x86
1LoopImageP....8.apk
android-10-x64
1LoopImageP....8.apk
android-11-x64
1WelcomePlugin-3.5.apk
android-9-x86
1WelcomePlugin-3.5.apk
android-10-x64
1WelcomePlugin-3.5.apk
android-11-x64
1Analysis
-
max time kernel
179s -
max time network
187s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
18-06-2024 07:21
Static task
static1
Behavioral task
behavioral1
Sample
ba6b043dae1acf029838cfa67a6f4dbb_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ba6b043dae1acf029838cfa67a6f4dbb_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
BannerPlugin-3.3.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
BannerPlugin-3.3.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
BannerPlugin-3.3.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral6
Sample
CommonPlugin-4.9.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral7
Sample
CommonPlugin-4.9.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral8
Sample
CommonPlugin-4.9.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral9
Sample
FeedPlugin-3.1.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral10
Sample
FeedPlugin-3.1.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral11
Sample
FeedPlugin-3.1.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral12
Sample
LoopImagePlugin-2.8.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral13
Sample
LoopImagePlugin-2.8.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral14
Sample
LoopImagePlugin-2.8.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral15
Sample
WelcomePlugin-3.5.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral16
Sample
WelcomePlugin-3.5.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral17
Sample
WelcomePlugin-3.5.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
ba6b043dae1acf029838cfa67a6f4dbb_JaffaCakes118.apk
-
Size
30.7MB
-
MD5
ba6b043dae1acf029838cfa67a6f4dbb
-
SHA1
8fc38ec5ea5b184a602185644ce7ed0f159c4ce7
-
SHA256
102062aa8ba6f669ecb4dbb3b39d877d8ac0ea9eba658a022e96856474e5374f
-
SHA512
a4c61c8083c54f705f5fb29cd405ee43a71640ea1d4a2ad770cb9977df99f9fb458b38f23ed81b8cc2aabad47113eead52cfd75cf4701d2e00116603f2a7384b
-
SSDEEP
786432:sslcsCHYYgWwGxzu9D9WI8oFYPZGlqGpFgdfmxY2G9hlErq:HVCHxgEA9BWI8o2oqGodfmyfWrq
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 4 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channelioc process /system/bin/su com.boosj.boosjapp /system/xbin/su com.boosj.boosjapp /system/bin/su com.boosj.boosjapp:channel /system/xbin/su com.boosj.boosjapp:channel -
Checks known Qemu files. 1 TTPs 2 IoCs
Checks for known Qemu files that exist on Android virtual device images.
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channelioc process /sys/qemu_trace com.boosj.boosjapp /sys/qemu_trace com.boosj.boosjapp:channel -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
com.boosj.boosjapp:channelcom.boosj.boosjappioc process /dev/qemu_pipe com.boosj.boosjapp:channel /dev/qemu_pipe com.boosj.boosjapp -
Loads dropped Dex/Jar 1 TTPs 18 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=57 --oat-fd=61 --oat-location=/data/user/0/com.boosj.boosjapp/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&com.boosj.boosjapp/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/CommonPlugin-4.9.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk --output-vdex-fd=66 --oat-fd=71 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/LoopImagePlugin-2.8.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk --output-vdex-fd=71 --oat-fd=72 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/BannerPlugin-3.3.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk --output-vdex-fd=72 --oat-fd=74 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/FeedPlugin-3.1.odex --compiler-filter=quicken --class-loader-context=&/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/WelcomePlugin-3.5.odex --compiler-filter=quicken --class-loader-context=&com.boosj.boosjapp:channelioc pid process /data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip 4330 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=57 --oat-fd=61 --oat-location=/data/user/0/com.boosj.boosjapp/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk 4370 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/CommonPlugin-4.9.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk 4399 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk --output-vdex-fd=66 --oat-fd=71 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/LoopImagePlugin-2.8.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk 4451 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk --output-vdex-fd=71 --oat-fd=72 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/BannerPlugin-3.3.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk 4490 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk --output-vdex-fd=72 --oat-fd=74 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/FeedPlugin-3.1.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk 4516 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/WelcomePlugin-3.5.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk 4295 com.boosj.boosjapp /data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip 4810 com.boosj.boosjapp:channel /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk 4810 com.boosj.boosjapp:channel /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk 4810 com.boosj.boosjapp:channel /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk 4810 com.boosj.boosjapp:channel /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk 4810 com.boosj.boosjapp:channel /data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk 4810 com.boosj.boosjapp:channel -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.boosj.boosjapp Framework service call android.app.IActivityManager.getRunningAppProcesses com.boosj.boosjapp:channel -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
com.boosj.boosjapp:channelcom.boosj.boosjappdescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults com.boosj.boosjapp:channel Framework service call android.net.wifi.IWifiManager.getScanResults com.boosj.boosjapp -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests cell location 2 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.boosj.boosjapp Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.boosj.boosjapp:channel -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.boosj.boosjapp:channeldescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.boosj.boosjapp:channel -
Queries information about active data network 1 TTPs 2 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.boosj.boosjapp Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.boosj.boosjapp:channel -
Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.boosj.boosjapp Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.boosj.boosjapp:channel -
Queries the mobile country code (MCC) 1 TTPs 2 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.boosj.boosjapp Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.boosj.boosjapp:channel -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
Processes:
com.boosj.boosjapp:channelcom.boosj.boosjappdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.boosj.boosjapp:channel Framework service call android.app.IActivityManager.registerReceiver com.boosj.boosjapp -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process Framework API call javax.crypto.Cipher.doFinal com.boosj.boosjapp Framework API call javax.crypto.Cipher.doFinal com.boosj.boosjapp:channel -
Checks CPU information 2 TTPs 2 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process File opened for read /proc/cpuinfo com.boosj.boosjapp File opened for read /proc/cpuinfo com.boosj.boosjapp:channel -
Checks memory information 2 TTPs 2 IoCs
Processes:
com.boosj.boosjappcom.boosj.boosjapp:channeldescription ioc process File opened for read /proc/meminfo com.boosj.boosjapp File opened for read /proc/meminfo com.boosj.boosjapp:channel
Processes
-
com.boosj.boosjapp1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4295 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=57 --oat-fd=61 --oat-location=/data/user/0/com.boosj.boosjapp/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4330 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/CommonPlugin-4.9.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/CommonPlugin-4.9.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4370 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/LoopImagePlugin-2.8.apk --output-vdex-fd=66 --oat-fd=71 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/LoopImagePlugin-2.8.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4399 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/BannerPlugin-3.3.apk --output-vdex-fd=71 --oat-fd=72 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/BannerPlugin-3.3.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4451 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/FeedPlugin-3.1.apk --output-vdex-fd=72 --oat-fd=74 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/FeedPlugin-3.1.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4490 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/WelcomePlugin-3.5.apk --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.boosj.boosjapp/files/mmplugins/plugins/oat/x86/WelcomePlugin-3.5.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4516 -
cat /sys/class/net/wlan0/address2⤵PID:4690
-
cat /sys/class/net/wlan0/address2⤵PID:4710
-
cat /sys/class/net/wlan0/address2⤵PID:4735
-
cat /sys/class/net/wlan0/address2⤵PID:4754
-
com.boosj.boosjapp:channel1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4810
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Foreground Persistence
1Virtualization/Sandbox Evasion
4System Checks
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
591KB
MD5c85e8919765cc22095d1b8e40601e34d
SHA122d48933b9f30a028cf4c9d993f59c767f9e8e35
SHA256f4ab50b1188cc9913c106f1f661162cb7db90aa288a90fa6bb41c5938b6afa8e
SHA5126715ed9290b868a5733f6c6001e9de1375a381b5f61552fc0adfd825c72977cbd34a347f7fecad8cbc798af7b5ef59f4a23bbe6fedb714e4dda65a1e5921c08e
-
Filesize
283B
MD51cc61f0f488a8745af5d6155dd7d3538
SHA1b47db2610b096418966f81b0268c2f85ed6d8951
SHA256397f5347812a76754d9c0adf7fd7a36c53a49b6271f595696790910c85b138c8
SHA5123f5e8f354e9dff3cade62fdbe2ef69af19655d555bbf888920d16e5e3bd9104e171649b773dfc5054cfd17229bb8bed666e985bf707ce64d5608cad19a3f81d9
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5a19dcecbedf0135dc041c3d28da3f67f
SHA129b0ad0d99652c46565825c8c45a5477c2696b6a
SHA256ab6dadc0110cce32c9e3f1acaf18b4be50623d9684447ade3f3b35becf820045
SHA512aa4cd11e8f25f12492d6c8914a8e681f825d24adb9d536f072a276a0af515eadeff5de671c71df5b28d34ae32eed38315a67819d05f6099956bfa5b6ce81e2df
-
Filesize
32KB
MD51729ed0e811efee491b9b7c369728a99
SHA144e06395e3f4c4543b6cb70733a98554c5202972
SHA256274f4931d8311ed5ce3adef6a17b65e90384df61706f2555e8681bc9a6ab4309
SHA512b393a91ec5309817640b2b449930123f9aa94719c7145bb75a3ebe7a969d15a147eb8652573fc8fcfd11323abf4cc32de9b12875e73e212d7bab76ed160ae55d
-
Filesize
48KB
MD544eb5ac1ef9c682a34fd4a4a8eef2a65
SHA17cac485909fd97a502b03dc08806e9d057e8fc2f
SHA256eae239a31eb1d3e6d42a74579268c39fc151caa1fce7cd53024d7ad0ce940503
SHA512b99df64f75b2bd4dc2828e424ce2d4def19b51871f8268912d0d7d2204f5dc63e37ea2b930690223fa276056009f3120b000aba93d0b25641069c8876dcc6e4a
-
Filesize
4KB
MD5244a37e30e952b5aa7721a7db3eebe25
SHA1bc55bb5d0780a19402697be7695f70f2be9155e6
SHA256eb09afe9b2a6b92a541f2ab626a07134d4adf8649f0dc2267f91b5dded211690
SHA5121b504d142dea3be489b1ccdefd1375d25766416b74aa8ba0b78e54fcf364e01abb6bba9cd1926bc065d3cf1596bb32e907fe3d0f4ac7ab017e3990e81f0841e9
-
Filesize
512B
MD51ad7e53d2434eebb4d0fa7f69c790a66
SHA194c4f84bb4cb74aea3de897cecedd1f05292f39a
SHA25680b7e4f95b0a5beca6cafe37bd5e7a21c703f7cd42f7f8768e25c3a7765944fa
SHA512f54054e7a6c09ff6279495a521a5fcdf71e9c928ac069cffd9e439d41eebdf6e2d6f871dc725e51fac24888712d3143c673f3236b622b02b91b2c1a11b788333
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
60KB
MD5ed07e6677a1ad32881a8737f6df12c99
SHA1a92f9044f31fd272778b9ed80b5ae69792fa0595
SHA2561706c9637d9751d04ddb972cf50824d474661f7d45ff85515d373e25879309a2
SHA5125a0d5022dda3cf3b5d7131b988a14ee10248bda1150f637ccdb399ca878a15c3af8068bc5b16ac87bd220db6edbaf4f115131fb3349e3a8907017628d97d611b
-
Filesize
512B
MD5427708d7e00cf011b4b1a0afa4309663
SHA1877814bb80f0f816b25e055f11654d44acf02aec
SHA256caa76eb9d0c7d043153b62502f5b847cf9de11c93ae843a19ac90741dd7ebf2b
SHA5128618fdeff066e2f342b584d1f590664715f37ed8f4b1f2bf452772f7102f0b3fbd954a500d1b4d51707fe27d5c2abd0dded4f9e24ff5e893c11aff677a134d7a
-
Filesize
32KB
MD567f0f9bf09666c7166c7360a9035691c
SHA1b15cbb8555ed42b57fdf4b47968552d97576385e
SHA25677029d5989f28f38408c881f354befc8c12dc62824cfca2460fbe9cb312ae2a1
SHA512d9d09dc3f6a3bf779d526351a7c18bf190acf1a7b6813052db775363af5dc84bf83bd27c20cb39aa74035991d278e30b487e959e2d795af52a03d9a8c9033506
-
Filesize
20KB
MD50d43a40ececc156638b249123b86a1c0
SHA12cabf1b3484804df0d2dbec5c71d162d7bf0504b
SHA25617e64d3597f717786213442ed14d4bd0f88d9dd9993cb83b1a80ec4c72eeea70
SHA5122b3c95678db0a228a4f2f5144e7398aba570e9bd81af3a664b00843a02dd360992e2c1a081d86c1feaa055f3311e52e428645ed7284218a73ff0a2a898bcbe01
-
Filesize
512B
MD5d436d63c8183f67aa628c5a853c1ce21
SHA11014923b0b60257a798faa68e64e16fac0e6e5b3
SHA2564496afe460aaea63c48e66d69a0072f3e8ee84841da64d30d270d700cf3d6f4d
SHA51230dc1ca6cd48cdd40ebb1fad3fc5176406b3d82eed7bcf7092a095573fa301c8641872c20d03b2a3d04ae7a36875f83e38b1c5be45a61dd0d8a3f84914906faa
-
Filesize
32KB
MD5c7da3c600c6b6102da18b8643e0010f7
SHA125b6a7dc816330cfbd173bc50f2a9334b22182d8
SHA256b221a9a9af89c96101df97fbcbbb2fbba94c77ce74e2a3db847a61518e9d8198
SHA51260d8f0869785ab39170f15094901c4d0719e5510749a47bab7a845f9a270bcbb594e4de5030be247618ab1a1a0eaf97c92e7a75f7001b4afb34cd8ca7fb76ba6
-
Filesize
36KB
MD5486e2bac2b3e9e1cb411d2838a4854bd
SHA181dd0a7537f4af319b830ae834908986be85da8b
SHA2565644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57
SHA512c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681
-
Filesize
512B
MD5f74012644d87d7d34eb035d541bac344
SHA1a1c3ad9eeb1ae02f211a172b42ffe04268ebec45
SHA256da17b3ef7341c0aa3781c89b5a22dbdab4ecf4a79bc4cc6dd82dbb88fee0b54f
SHA51234a44a4162aee7e538f9022ce661bfb18b3d44913ed02dd92ee15f63fe3ba9e9d0034d8c58bb056a780fc8079bd1d7c62cc0f0a2db01e48945c5a444d7fc46af
-
Filesize
48KB
MD5e377af911c1211806c5e38e718096c2e
SHA17e80753f3ccb3264211ef739cc18ffdca6a123f9
SHA256fac57e5e3d514e2d13a26916fe6b5eabee466be726b9b5a30e8b0046576066bb
SHA512f81e1d8b17b5e4b05a5233d6f63fea04748b6d56427fb218b5919e67da627a6e82bfca0d0edd4bfc70930615d4376b19e678cbf3bcf04ac9aa40a2e096a6f1e7
-
Filesize
20KB
MD50400a013f94c4f951c5f682fd8e519e6
SHA13bffffdeb152b5b06023f2b39b65e4e82f54d0eb
SHA25614595b6ede801287aa1a1640232ddfe4057647e9551d540774cea818358bedd0
SHA512b58c26d658c4f93bdb2987cea21074127698e7f9dce8c204e5fa34604682fe7fd56482e75c601b2d8420c8eb6fa928e2bd14979277ab91a46e3f45acd0b13929
-
Filesize
20KB
MD538616785cca0600a03205f84fe330b4b
SHA16ac41a6bdcae297d56dac5fdde70be5faccf0832
SHA256b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8
SHA5127ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08
-
Filesize
20KB
MD5d152ec71ac8a7adbd55461801d909dac
SHA1fd8855a67cabd7cda12130febbfd8b6f95c65c55
SHA25601a12ae93fd4ff410467b5c0bcf03775726203859be15e358ba4ea97da090384
SHA512bbaf958ce7fa2842f6b5b218628f20ce556882b103f9198c29e673a1abc8535b8b62ff7e1c3eb823d9ea6287b1877fbb196d207ad42c987d5b8000ddb6848f6b
-
Filesize
20KB
MD551b386a412ccd431ae9a5676d63f76d0
SHA1dea54876cfc6ed2bec459fa18f32aedc15271ffe
SHA25610b4bc51de44530d614591f7f35b305a62a3ec39f4e80711df64f7a70da47eb9
SHA512d2cde83adf0460c2e1514039b6d2e82ffc1e26249d59b2567ac8fa9c0a471db8fc625567c1b4081546081288d5adb1f83de0f47612bc7f5b5e9d856f4bccd321
-
Filesize
16KB
MD5a9d396dd68d8efb29b166ccb8d45acf7
SHA1b2b856c96b595f8096cd4bd11794ef5cfa5a6c41
SHA256d88809e2f57cafdfec2021b8462bc72f92c011ffab6c1297754a6094b76f92c8
SHA512ada927070e8d24b05b3ec855b32703951d5074023081640457be83362d9704a06460c15747db0a92179b9e79137113a1df807b8c54152bcccc0170cd0cea2844
-
Filesize
20KB
MD52ecd0c804f00c1c14c129fa80f1acf9d
SHA185d9eb3fb06084ee85f0b65851e56e0ae4b509b6
SHA25650ac87143939d4cc2c37b814d5e7c2dd973812fe8c5eb9c1d52cb0d8f447cd50
SHA5123b7bbeb06c8f29e6b76a72523e181fa0d7e1b58d9c9088fa7f7eaba34ddcd37946ec60545846f8a6d489fd11b4ee483b8bb3662cb044d6310a94f2b8cc46a128
-
Filesize
20KB
MD50c2927c1b64b8018f6c9880ed4df6ddf
SHA11c479fa10eadf08a346d0202e8cf25b4bb9c7b3a
SHA256104ee34d9d9e244d22b1c265b3f67e4b793aeb16f156fb5e936ddad945245bfd
SHA512865d48c6f9dd6575ca1a9d2a94d1a1e901c1d1e9c2a967c430fc9328ab463a70c0ed1b882833e9a1de042353cdb9f0391ca5989d58edd4fd7954937052d8a31b
-
Filesize
16KB
MD5b1b47e4d0ed11f51ff8dc30934e55549
SHA1494781529ad9c140ed9412420651137121e2409f
SHA256a65d837ffa188fa86c51f3ad57d2c13c3449d7b838bdc1058351a3971894df2b
SHA512f272bbdd5a6ad4916e12b31dd75961663c02abc19f66b9ad7899c2d9d04f87be87bd857bcc1a676d2b53423b50c2b059cb98c40f0307ae6e7cc73e47b0733da9
-
Filesize
20KB
MD5cbaaf6622edc37eb6642fd3b84642411
SHA1c9d83bb85c7631ac5184c58bbe3f20de8aaf03dd
SHA256aa768face94dcd972ad215b1fdc67bf4cd7826d11e72d6cb096ac3783b615212
SHA512617f327c7ca13a2ff45137e2dc0ae8e510c2398fcc70474b75b7b32e7dedc69ad9fff011ef0da775f8a32cb5f54044ca1bd358a2e2a9a778e8c8692f29ecdecf
-
Filesize
512B
MD54bdeca1426565690786b0ceed53532a8
SHA1a510d4eb635c31cde2f2437d7639cbacd2694e6d
SHA256a9f805216fd5dbf34ef9b83681c7f917a9e1b30edc5baca3d474617fdd0939f7
SHA512f70323496fdbbd0f12dd9b46eb72b5bdadd212b805f5d9ca471f9cb6a325f5f33a177a23207a62f495ce2fb6e26dbda65c43c8fb7176fc44ef4d7a822f178478
-
Filesize
8KB
MD506a319c8e37b7cb9ae8cf6d88e063bb6
SHA1c50ac78b2e05b8e3f022d73807acb9822734addb
SHA256334504479584c2263101ea1e93ab593acd50235350802bfb40c63174d33cd150
SHA5125d483f249020a12a30e13bc9203973e19c6a193eea4ebb328c9630538d31023b3e2fb90aa310d102039711205e7829f2e337b194dc27f439c9c474421bd50c8a
-
Filesize
32KB
MD5fef9dc82bbd310127027aa44c866bfd5
SHA14c99dbd8ed08bf906e8e292473347834caa95306
SHA256bbbf6ca3145771c3d4414e47401678ac920b908726835bf29b066dc4f61c5272
SHA5128d72beed58eee776714f1977b66c9c67a1bf4697627f933ae80a3ec31738b2dfe1fe19de29c98a27e2e40f8d5f4fbbfa4ee938f4ebee3e7511a187a108e6b082
-
Filesize
8KB
MD52df0fe69b8d0b8cc1692af9470f016a3
SHA150eaa314fff1a06d2713e134b2ac5f658e5d4f53
SHA2561710c63a5d0d988fe51eb0fced890db4c2594a9de9712ea4dc53aadcbfc3c1dc
SHA512ebc6a0138bbd3effeb4f9575ee6847dd2d403171af224459765a9d3dab5db83c7be3a5b3a961407c976aae84b8d5740c05abaf155f5dd192d6657533d0b433d9
-
Filesize
8KB
MD50076808f3b251923deb0b5acf9ee7a73
SHA1c639672c0690ba8526acf8741bced5d8df489342
SHA2565e4de3cb205d715a8d606d231894f00fb08963871093b19f496fefc4aabe19a9
SHA512506e31ad029ad7c6b10a62be1e9b8aa1ced659bfefd929510a92ef7090e933100f2e6007258a719725e80577f4d4f1cd5caf9b6f6df7a9f204b08c7fd72c0da7
-
Filesize
4KB
MD5f18f35620e1cd00b905309f00c3ab6c7
SHA16144896817a30a022ea43da9b772abe8590188b9
SHA256ae452e317ed0b814ad5411f4e0348963b8ee5b98521c4c1841b587667efd6c27
SHA512803fd7548d4aba0c7264c2b22cc2cc5ebdfba11f53cc9ef4aff83b451d9ce26a9e3b61cc0074f066bf124ae5228ee75213d6b7410b1ddf8ea8e3664669935fc8
-
Filesize
8KB
MD552f2505f2ff4e2c80e07255bc8747bb2
SHA183c206e797fe6db1d3a378c391750c87b2e6b840
SHA256b21dfd7cb995dcc9fab19c60cdb4e165501327f3aed5e92468fdb6a758ef3d45
SHA5123a45606d02a78b982090bfa18e14ef6c9bdb0d367233b7892bc344f8066dd71c2ac46d07ec71bb478a0e45af82eb88fa6932478b6ec9c737be94761caa2a98cb
-
Filesize
8KB
MD53c6da7ce19176535e00bb5fbfd48571a
SHA1c2084466043f940e8cb7be5b68e772eddee2a094
SHA256de9a7cf32dc72edece730937a9747ec4dcb26f63ab07f266329b6dbc2e0c293b
SHA512535a210f4708df035d153029ffbbf69a294246979acee7433e4c91d7e392a46382e7e5fe200b3ec968c4889eb8d35e1bc6c0e53f9df289e83dfe761a0a2ce525
-
Filesize
4KB
MD51a6fab890c0f772a7be30ad660b84bb2
SHA1910069dfb48c7786b7b48706bf9a34f8027b568a
SHA256b6cfcf4c894f06c57b8cd46b9c37933d946a5e2f4e12239e3591d5acdd14b355
SHA512f7ec5327067f12437db55c096dbbfd8af48f4b20c7f0d13db590c13903bb1679725aa11e358ee2b755e890034566a942946d0a4e010ea26dc15d529b8cdea276
-
Filesize
8KB
MD5575468423d8b1dcbb7c1557881f5f0a6
SHA183e4b99a961dd37ad406e4be4af23de4b988e28f
SHA256adf66cac2c0ad57ddc8c4b39d36c2f52e4039d55bfd35a62da1a011b85ef3bef
SHA51254ac80feb9847d3d7adacc4addd0a718e0a23b75b36fadd57683cb9f7849486b996a0009a0238acdccb79734a508dfc2114c2418efe9986a6f29d4a4b476239a
-
Filesize
40B
MD5f56a21ef8a42e1ef37f9d477df2e806e
SHA1230c6913ec1baf15a80a304ecdce801773bc594b
SHA256c9a0c5f4945f75c35d27700a4f0d2e9371d7f48b21cd73d4369e97f1e0da11d4
SHA5121c6e07fa2a6521bd5c4112a36c87f50dc45ff48376270a842b67b5bf1b7a7ccfb7f684e51205226de2d43d802e66d773549bc3937a78339acce1e396321fe27c
-
Filesize
16B
MD526ce109804c5050778e382606000bdfb
SHA16e1e4c1b9e8106d4769f005d9427c65f92d4e6ea
SHA256ce2b52896e7c9f2c2477810d25fd5a60d302dea370cccf43a03c13191d42c67d
SHA512184593c7258ab3a679209b5b19ef612ce952eae284d90bcc996c893d1c563ece6cc31210a14790b0cd9a4da8506138abb74ff91b1acb234c26cc4a14fdf19173
-
Filesize
72B
MD5f58f13d0fc991322df1eec4c68481464
SHA1fac54fd6dfb4fa6e0b0f548eb024573dca8cd259
SHA2561d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396
SHA512e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535
-
Filesize
143B
MD5e226bf9446849dc009baa24a537ac74c
SHA1b6b4de6d0febe5a29c94656ddbf85823f20d6204
SHA256f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19
SHA5120acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541
-
Filesize
189B
MD56a8863dd4be7802445180fb86132a879
SHA1318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768
SHA256003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08
SHA51221c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780
-
Filesize
262B
MD50438489e26550304ace8e365664531ae
SHA1cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4
SHA256a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb
SHA5126e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4
-
Filesize
334B
MD560c124bd7929a3611512c8da9dd12057
SHA1a74bc93cdfd9ea7a05e1b73aa7de65e84d099ecf
SHA25688521b33820729b8e7c7fc10a5a33d80992e43068e9d21f193514d38d7ab845d
SHA5121e6646539dfaf5c6193d8f920672343f3fe2a85b58a4d3c641f98363d7c547f2294f13129a11776b2851b6b27d85457b1678d88786e1df4a8bf23a704006b7b5
-
Filesize
980B
MD5e3db27fa586b8c6af9cdd489b940b379
SHA1d978b1a3b7b0a323b949d5a87a431f1f935ac1e6
SHA256af0ffb5363257baefe757ad2a9eea1fbba447e522a08c56e67f9faa548c724d9
SHA512501cf06588c17a54ca2edcf17f051ffb869541eadb6b5b6f9cfc6cf168484c62eceb73c01f0a3a1b64a0c9d7d1d519f813e412c4c0cf0ceec9cf7769216288f3
-
Filesize
911B
MD5e912b83392f9da37db9a8393fa6a6345
SHA19f56e1760e1d6306a1ea680242d53418d3664d24
SHA256e5f1eaec2f95392f423e945458c8715d14ddc3737d896c2ddafe467dbd075121
SHA5121c3aa5303c03212a25b2b665820ca2a8017b6b283da921489f4a6a9a8627d44973db2c1ca9ee8d5c868b9360545db8f10e9e18e36207d16b3c28447d6d0c3ec2
-
Filesize
41KB
MD56e98d0f748fef73f73d4c33cbec90a85
SHA1133c10709d7d698627678fc80200df00bb92401f
SHA2563157c0d97cd4eea26b5d7571b6e86234569b8727aa75bb81a4e8ef1042f75bf2
SHA512dc03643cd5c0a037b7ec67d07e162a46c2a81cab6d23630b57c84ef13832126c3ff3e9af90ec1aa92c6a36fd583ab3ad19476c2cc3f7825b4edda046ab1ff9a0
-
Filesize
329KB
MD5c8a29ee2f97f0b23b5a7a8a761a1127a
SHA17b373c9f903589658caf9bb1cd2dc256c1b53fa8
SHA25624a4b05d51d51c3ff5aa038f588f08b02dff644b32088ad08fa3491227390871
SHA512bb3fe5412e86c551ea56a8e4ba0f8956e8154c3fe3eec3175c0e6278bfa4afa9d4096bb9bc2a47d9bde4eb1e5f9254044aef727c64ae0ed162e77c91c9b433af
-
Filesize
41KB
MD531fb4ea4b7b1c4e305b19b204ed56416
SHA15e1b803a606f22747c70db967bbe08fce8d30097
SHA256033de5b281fea7494034304685a30fa5ac8b0fec1e9c93191c44817ffd3c25d7
SHA512c9cf6eb88db19025e9d1c832c9326f9ceccdc2b262b15096261edb9abd43d49ce752c563026f691c79ea656007997850959b8e96cc5a1a22a1112fdbdeb490f5
-
Filesize
41KB
MD5cba94726655188bd7135f9b969d429a6
SHA179cae31baf627f57d3a3e3a54c9fd80d0e20d3e4
SHA256b1e2ad86b6eed3fe868807485b89ceaeeaefe9492eeded127b68cbfe23b446aa
SHA512c7a1e0f3a1b7841adc5237f23197f70021ada9213366a4fcda3c7585fac16afbc6af42d73e1a799a29d4a09a26e60939bdb1cadfe8b4fd3a476adc43b6e97d0b
-
Filesize
32KB
MD50e49c1d3529c097889057689f832efc6
SHA141a841ac36613fe194e672c5c41c63868d49a04f
SHA256f941368285f17053a917594393fe6961b0a688b187a13681b635f652d0eaa740
SHA5123e28c8d015a575e3f99051af410156d421c87e2d0040af2aa4f6db14a917004b166883f859009e5bf520a583341c5fdcc84e58ca86543e459279080a14b42235
-
Filesize
206B
MD591a03601d8b5f158eb4b2def7471b8e1
SHA16805865763f2f07bc467369ce22375cb9b57aee9
SHA2560c3581c146552519f7cc951822a59f5da58f052c8df89246c7451d546d6e5473
SHA512feb6661b181e0bd3c993dfedd4acd9831604ef1842d4574f742f6be8570eca91b051d08cba799517c5c52ddcc47decc16c7cbbd7266c344d56261a755a434ec7
-
Filesize
65KB
MD50c2f2989749ff3910446998637c28286
SHA1054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3
SHA256f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d
SHA51272acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f
-
Filesize
65KB
MD5522947eaa37b029a247e3973f3be3621
SHA131c88e0d7c9b51904c0f598e80245bba41b1c7d9
SHA256d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156
SHA512f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c
-
Filesize
65KB
MD584d6e4606f384f115282afb042fe8e08
SHA15364e0a78640bdf7a8fdf67d44b6ecb7e763e773
SHA2563db4b0a27e652a47902be1fd29405e9ce262afeca1fe2d5fcf0fa71613e156c5
SHA512f5624699398e11f5b3fc4f23f3edab99561bf2b79d2121925c779e6e47127ee90385990a018577621560463fb7362f602ba463e3153c37adf6355a90590d9022
-
Filesize
65KB
MD55acaff6f33f64df3c5b00e3949c72706
SHA1615f663b23bd7fadcf9832367b851a0a55e90f50
SHA25636f9d9d9acbf12bfaa00afc7d51083254c38245c22cc106d4f8b7102ff1af8e4
SHA512ba24acfce9cd4ae884c96eb2552b2962b89e9030f0b048313502a3c4c2108153db075e169d1c8277c8ca9ede6d5fbdfbaf2ade94a36d14ef7d1db69bf256d4e0
-
Filesize
690KB
MD5876c12c275a5f6a2935585319c7edbb5
SHA17497878970fcdce66c8752315ffd2edd679e73fa
SHA2563e2bfce42db1f772a328cb4eca031c2d2babbc618f5561998af3b9252d5a85a8
SHA51221615f9280e36a0703c3348454ae87f1b51a8ebc7bd9c12b5f67303a5cdfe1ee65cfa60d984bfc60e446d9753e0712bb6c6250dfd45cc8b7a58e4889efba146f
-
Filesize
690KB
MD56e72f2a3a4fbdb44cfd8453a27b21a80
SHA19098aae5b597823f2fdb8010bd8157b54e91be19
SHA2569e3a1b473805c7d0efdf5b1c83932f5f11c02bea82f0df4dd1485334de69bbde
SHA51291f00c33aa076bba18ae1c964bf462f19a98c2f4681e1ef9c2f77edb3988bfea5a31c84a670f6726f508130b66afff6e4f19a20eb2f12ccb9875e49d2336647b
-
Filesize
56KB
MD508310c215f1e2bf4a9044116d57c7225
SHA103f003eb05bb257680ad995dec01871ebb75b174
SHA25635c7dcbab430252b3aa414b7b5331e4d0225916bb99bbcd7e4eb4f4c1ce9e5af
SHA5125921376b25962ce64970c6394234cc2071cd5cfd9c968fd52e6e80adf8b1a128b1e73fb968615c688153c7b84ae9d35f6be4d496ed5f2b8b5120319e0fbf224e
-
Filesize
56KB
MD59b3e57093d6be2f9ed42764975abc0ec
SHA12ec7a07dfebbd11cf41225d67530bb04df4418f2
SHA25676da28a51ffd5729cb377fe415d8a9d6b423413adbd4fe6906e64cdfedfd1386
SHA5120b423f1084dc272070cf56b6e9c5a61829ac513c3ea29b01ee24ab41f9a4fb8387c7b325ffd5c583f322fd8bea0e813b7546affb5d6e6649ce539a69ef3c05a1
-
Filesize
56KB
MD50ef9cfdc11ad939c376f32c18d2e9908
SHA15a806751b5bd1e03c84c69a9aba9fd58c56f3b28
SHA256afbbb1261672e0b6bffb6e523297c15d9c22d56670e926f926f10740241cf7ed
SHA512810c7f8aee4e246bc37a806ff06bf86ab1b6ddebb4a4ff88b87890aef22a4e7c7d8b893f5d607d43de10d54f8facc361c6fd8a7f7ee32bec50ec8e6af1f0a18a
-
Filesize
56KB
MD5e2bdce8e50320cd3923894667b372034
SHA1033dd624d148c43296ce57577c0ab603d1db9aa9
SHA2566956d576ecf93d893ba3a7d7f5ea0c8f45c8701902715c65ab7f277a672196b9
SHA51273b18489a01b90b5001e39adacb44c11258b0ccf436969b3c89c71bd5baecd5005be8e1abfea52b9fc6d62ebddb1b9ecf37f2c6078c9f6b4fe9044fa5d011295
-
Filesize
40KB
MD5faff2592fb26cf90cad29ecb642e4a00
SHA1488378ee4a643d360ac88e81281008f51031fc59
SHA2567650c182e2b4e006a8d72d1ebf88e87052b6d1f24993a00a72a6658e5789fea1
SHA512c897c45d7d17696aa4b83adc4f56af9a85d9555bbc9730735ee720048e6b58c2e22627076272b0e361249854c146a8b96250b176b94c81d96a793c23377aa08b
-
Filesize
40KB
MD5421bb0e31e3698c8ecaa037ca0bfff1b
SHA1013b29a25185821970c1df09c17317f7ac88cdb9
SHA256ce560fb3ad7f4be563e4d0bce505c0591fc39acaccca3e74fb693f280f59b330
SHA5120666c1cf78485b008ee2b5431984e0461e760b18804cafd0f0fd1a9dfd5f37bfbe3a41857d8e533ff5614ffcc7725a8e4dbd9083e8870409e61f38803c3f5d8d
-
Filesize
111B
MD5f7c3fe5a38590152d7defbd48773cabd
SHA1144818fa63245d09b8a609f78ef8f24e488c361f
SHA25694234eea61dbba16798f7e0631c90ba17bf63d6f5025f0186bac675afba0e2a3
SHA51280643beaee1f60091e107f1d5ebb8d0dee7e1038e1b9856df425bbe2c95d2379c66efe328db7a2c6bbc9d08d787619732626fbef5450e973f563a81d22e2cc5a
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD508ab348c67c727ee6295934bb9db8e46
SHA1848b96c7484beb4a2df4b7ceea595f0ae090d35b
SHA256d67d6bf6d96eea3fbd955b5ac50ca5f1da3211c1f41b1b201c7af7817a8c5680
SHA51231c50670afbe3b365e8bfe83d052f0590e2a5e2dff7adf619c21dbd6ced64f1c34d68f73ff1217e7595572d6c3c5097789e120cc8b13975ccf86d4848ee907cd
-
Filesize
167B
MD55319b01e4f84eb44560a82e6d2e6d927
SHA1cfb8cf94770835224a6dbd6f7809f485e27e5a84
SHA2568a2d0bc535cf8be0a11f6743f0da7baa7e171201569d3985e4a7cc14f9349fe2
SHA5120caea13f8edd4101c09329e0a102b20eb2421784248d68aec8119adf274c8331ad144e870ede4db5aba771403216abe1679b72e922ee1c0a1a55b615f4067c5b
-
Filesize
512B
MD55521288798d99faafb208b6483a93960
SHA1f087534d1728429dad9f2d32acfc1b74f396ce6b
SHA25663d586edf477e6431d67e7d36f11b7ffb119f5e7b2541a75e9e3be489c070146
SHA51206919abdb88c98b4fe786f224a2c68918ce3235214f3cb7ea6e11c3a222731ee55d5b58453f7a1e0efd3ee011315ba0710cac494b7dc571b8dd46b93c09d462b
-
Filesize
512B
MD50784b9a26173b7f39e7d690b3ba283a0
SHA1b2e76cfe12c9d2bbace0434a8673f9b8f036ef5d
SHA256951cc1b54924bb2c30758e6e07f545f4acb77e29be8b947d1108bb95954652da
SHA5127733da1710e75680b2a4b675d24ff511d582f9cc299bc72ae05d1712d466a139481d6b34ac57af0d2b1fcbf7d6725bcef154c120417444f1cba44daa9176e266
-
Filesize
6KB
MD56437ac0f1ff68b2354ec77b351cd9910
SHA1125252b6c71165b463de6f2ba3b324f6a7ddc9b0
SHA25666881659414534bf471ed8de84dbde56165bf2ecb726256474ebe686a898fcb9
SHA512814f28a5baaa8c1f3fdb8e5feda16d5e11165040ff341d85a5a7e12d0535cee50c0efc9f6def0934f8b1e8cce3e9acdce6d7d12418e65d89bfdff7eb8705e109
-
Filesize
1KB
MD5869e30ea13dc89b7b9875b2e72240981
SHA1535059acfb73aca31cfc0308241ccd2b9b3d8500
SHA25690f70cf06b13cce6fa424de1911e3eb7fa1b7ef51822c2a874a201e48575014f
SHA512e40215cd1f571bc85a0c720804d2f5e92fb66508057417b186250284c76e9fc317591c631315f9bb018a8ba0e55e88d1d5803154505511c1e646f5385c2f0cb2
-
Filesize
37KB
MD5ad737723dd1eb868ca35b5502f126470
SHA1044f1b4b4827e71ee0101f6edb3dafe002ee6016
SHA256bd057849cf59aaffcb979432080b1944893208c5a51da51f5b11ac01f11feee6
SHA512a4c4b16a14331a23006784145f90b7ff4e5fb72b41d2415ac02c88998fa10378890690bdd1e81f3a7b74bed010d2c6cc326585010ba099b19911d89d22df8cd3
-
Filesize
32KB
MD5b78b6f75fbbf2b57f0f556c610f45487
SHA145c2bb3d8f1b4ba0f85a1702977067865f8d5816
SHA256ec1b496c30c166a1d07b04bd204a7d115c70f2e614bc0deb483ee9a6e835ad1d
SHA512adb9f8a97fd0e6a540b5c904ed6d0d19df18f9a246a764d7a8e1e6a8ce32af7c92ada1e8d04bdb0dce89f21c89e8aea944fa18197e2375bb54932c240ef02ed2