ID: Sample Name: MegaCast_1.2.34_apkdl.com.apk. Cookbook: defaultandroidfilecookbook.jbs Time: 00:33:00 Date: 29/03/2018 Version: 22.0.

Transcription

1 ID: Sample Name: MeaCast_1.2.34_apkdl.com.apk Cookbook: defaultandroidfilecookbook.jbs Time: 00:33:00 Date: 29/03/2018 Version:

2 Table of Contents Analysis Report Overview General Information Detection Classification Sinature Overview Chae of System Appearance: Location Traci: Operati System Destruction: Spam, unwanted Advertisements and Ransom Demands: E-Banki Fraud: Networki: Boot Survival: Remote Access Functionality: Steali of Sensitive Information: Persistence and Installation Behavior: Data Obfuscation: Spreadi: System Summary: HIPS / PFW / Operati System Protection Evasion: Malware Analysis System Evasion: Hooki and other Techniques for Hidi and Protection: Lauae, Device and Operati System Detection: Antivirus Detection Initial Sample Dropped Files Unpacked PE Files Domains Yara Overview Initial Sample PCAP (Network Traffic) Dropped Files Memory Dumps Unpacked PEs Created / dropped Files Contacted Domains/Contacted IPs Contacted Domains Contacted IPs Static File Info General File Icon Static APK Info General Activities Receivers Services Permission Requested Certificate Resources Network Behavior Network Port Distribution TCP Packets UDP Packets DNS Queries Table of Contents Copyriht Joe Security LLC 2018 Pae 2 of

3 APK Behavior Installation Miscellaneous By Permission (executed) By Permission (non-executed) By Class (executed) By Class (non-executed) By API Disassembly 0 Executed Methods 0 Non-Executed Methods Copyriht Joe Security LLC 2018 Pae 3 of 49

4 Analysis Report Overview General Information Joe Sandbox Version: Analysis ID: Start time: 00:33:00 Joe Sandbox Product: CloudBasic Start date: Overall analysis duration: Hypervisor based Inspection enabled: Report type: Sample file name: Cookbook file name: 0h 2m 45s Analysis system description: Android 6.0 Detection: Classification: Warnis: Errors: false liht MeaCast_1.2.34_apk-dl.com.apk defaultandroidfilecookbook.jbs SUS Show All No dynamic data available No interacted views No simulation commands forwarded to apk Not all resource files were parsed Not all resource stris were parsed Report size exceeded maximum capacity and may have missi behavior information. Report size exceeded maximum capacity and may have missi dynamic data code. Setup command "_JBInstrumentAPK" failed: Unable to instrument APK Detection Stratey Score Rae Reporti Detection Threshold Report FP / FN Classification Copyriht Joe Security LLC 2018 Pae 4 of 49

5 Ransomware Miner Spreadi malicious malicious malicious Evader Phishi suspicious suspicious suspicious clean clean clean Exploiter Banker Spyware Trojan / Bot Adware Sinature Overview of System Appearance Chae Traci Location System Destruction Operati unwanted Advertisements and Ransom Demands Spam, Fraud E-Banki Networki Survival Boot Access Functionality Remote of Sensitive Information Steali and Installation Behavior Persistence Obfuscation Data Spreadi Summary System / PFW / Operati System Protection Evasion HIPS Analysis System Evasion Malware and other Techniques for Hidi and Protection Hooki Lauae, Device and Operati System Detection Click to jump to sinature section Copyriht Joe Security LLC 2018 Pae 5 of 49

6 Chae of System Appearance: May access the Android keyuard (lock screen) Acquires a wake lock Location Traci: Queries the phones location (GPS) Operati System Destruction: Lists and deletes files in the same context Spam, unwanted Advertisements and Ransom Demands: May dial phone number May use Goole Cloud Messai (GCM) or Goole's Cloud to Device Messai (C2DM) services Loads advertisement E-Banki Fraud: Has functionalty to add an overlay to other apps Networki: Checks an internet connection is available Opens an internet connection Performs DNS lookups (Java API) Found stris which match to known social media urls Monitors network connection state Performs DNS lookups Urls found in memory or binary data Uses HTTP for connecti to the internet Boot Survival: Installs a new wake lock (to et activate on phone screen on) Remote Access Functionality: Uses DownloadManaer to fetch additional components Steali of Sensitive Information: Checks if a SIM card is installed May take a camera picture Queries a list of installed applications Queries camera information Queries list of installed packaes Queries media storae location field Queries stored mail and application accounts (e.. Gmail or Whatsup) Persistence and Installation Behavior: Sets an intent to the APK data type (used to install other APKs) Creates files Copyriht Joe Security LLC 2018 Pae 6 of 49

7 Data Obfuscation: Found very lo method stris Obfuscates method names Uses reflection Spreadi: Accesses external storae location System Summary: Executes native commands Kills/terminates processes Requests potentially daerous permissions Classification label Creates SQLiteDatabase table Loads native libraries Reads shares settis HIPS / PFW / Operati System Protection Evasion: Uses the DexClassLoader (often used for code injection) Malware Analysis System Evasion: Accesses /proc Accesses android OS build fields Checks partitions Queries several sensitive phone informations Queries the unique operati system id (ANDROID_ID) Hooki and other Techniques for Hidi and Protection: Queries list of runni processes/tasks Queries packae code path (often used for patchi other applications) Uses Crypto APIs Lauae, Device and Operati System Detection: Queries the SIM provider ISO country code Queries the SIM provider name (SPN - Service Provider Name) Queries the SIM provider numeric MCC+MNC (mobile country code + mobile network code) Queries the WIFI MAC address Queries the network operator ISO country code Queries the network operator name Queries the network operator numeric MCC+MNC (mobile country code + mobile network code) Antivirus Detection Initial Sample Source Detection Scanner Label Link MeaCast_1.2.34_apk-dl.com.apk 0% virustotal Browse Copyriht Joe Security LLC 2018 Pae 7 of 49

8 Dropped Files No Antivirus matches Unpacked PE Files No Antivirus matches Domains No Antivirus matches Yara Overview Initial Sample No yara matches PCAP (Network Traffic) No yara matches Dropped Files No yara matches Memory Dumps No yara matches Unpacked PEs No yara matches Created / dropped Files No created / dropped files found Contacted Domains/Contacted IPs Contacted Domains Name IP Active Malicious Antivirus Detection Reputation connectivitycheck.static.com.example.or unknown unknown false hih Contacted IPs Copyriht Joe Security LLC 2018 Pae 8 of 49

9 No. of IPs < 25% 25% < No. of IPs < 50% 50% < No. of IPs < 75% 75% < No. of IPs IP Country Fla ASN ASN Name Malicious Reserved unknown unknown false United States GOOGLE-GooleIncUS false United States GOOGLE-GooleIncUS false Static File Info General File type: Zip archive data, at least v2.0 to extract Entropy (8bit): TrID: Android Packae (19004/1) 45.23% Java Archive (13504/1) 32.14% ZIP compressed archive (4004/1) 9.53% Java Script embedded in Visual Basic Script (3500/0) 8.33% Java Script (2000/0) 4.76% File name: File size: MD5: SHA1: SHA256: SHA512: File Content Preview: MeaCast_1.2.34_apk-dl.com.apk 296bb7c79c3b760a78c86c4d189a3cd1 5b42089d16f10b83f0bbb9f7cc e8c3827 c5585ac261526e10bb7a442d2c47d1f6b4ae68239a2090 ef6d1d10e7b23ef92e f42307f5366b96927ebdb420ab1478b4fc23f5d5995a cf32ae8341de a938c1e8e2ffb a3e93659b7b80984dd64824a1b98cb2fb8 PK...S...~...AndroidManifest.x..y ]...!.C...Y.!i.. %.3!k. File Icon Static APK Info Copyriht Joe Security LLC 2018 Pae 9 of 49

10 General Label: MeaCast Minimum SDK required: 16 Taret SDK required: 19 Version Code: Version Name: Packae Name: com.mea.cast Is Activity: true Is Receiver: true Is Service: true Requests System Level Permissions: false Play Store Compatible: true Activities Name com.mea.castcom.mea.cast.splashactivity com.mea.castcom.mea.cast.activity.mainactivity com.mea.castcom.mea.cast.activity.ffmpeactivity com.mea.castcom.mea.cast.activity.helperactivity com.mea.castcom.mea.cast.queue.ui.queuelistviewactivity com.mea.castcom.mea.cast.chromecast.expandedcontrolsactivity com.mea.castcom.mea.cast.chromecast.subtitles.castlocalsubtitlebrowser com.mea.castcom.mea.cast.activity.settisactivity com.mea.castcom.millennialmedia.internal.mmactivity com.mea.castcom.millennialmedia.internal.mmintentwrapperactivity com.mea.castcom.mopub.mobileads.mopubactivity com.mea.castcom.mopub.mobileads.mraidactivity com.mea.castcom.mopub.common.mopubbrowser com.mea.castcom.mopub.mobileads.mraidvideoplayeractivity com.mea.castcom.startapp.android.publish.ads.list3d.list3dactivity com.mea.castcom.startapp.android.publish.adscommon.activities.overlayactivity com.mea.castcom.startapp.android.publish.adscommon.activities.fullscreenactivity com.mea.castor.mobilytics.aa com.mea.castor.mobilytics.va com.mea.castor.mobilytics.sva com.mea.castcom.jirbo.adcolony.adcolonyoverlay com.mea.castcom.jirbo.adcolony.adcolonyfullscreen com.mea.castcom.jirbo.adcolony.adcolonybrowser com.mea.castcom.vdopia.ads.lw.lvdoadactivity com.mea.castcom.vdopia.ads.lw.mraid.lvdobrowseractivity com.mea.castor.nexae.sourcekit.activity.vastactivity com.mea.castcom.offersrisads.lib.interstitial.interstitialactivity com.mea.castcom.offersrisads.lib.interstitial.cardsappwallactivity com.mea.castcom.offersrisads.lib.interstitial.sileappinterstitialactivity1 com.mea.castcom.offersrisads.lib.interstitial.sileappinterstitialactivity2 com.mea.castcom.offersrisads.lib.common.linkfinderactivity com.mea.castcom.oole.android.ms.common.api.gooleapiactivity com.mea.castcom.oole.android.ms.ads.adactivity Is Entrypoint true Receivers com.oole.android.ms.analytics.analyticsreceiver Intent: com.oole.android.ms.analytics.analytics_dispatch com.oole.android.ms.cast.framework.media.mediaintentreceiver com.oole.android.ms.measurement.appmeasurementinstallreferrerreceiver Intent: com.android.vendi.install_referrer com.oole.android.ms.measurement.appmeasurementreceiver com.oole.firebase.iid.firebaseinstanceidinternalreceiver com.oole.firebase.iid.firebaseinstanceidreceiver Intent: com.oole.android.c2dm.intent.receive com.initlib.installreferrerreceiver Intent: com.android.vendi.install_referrer com.mea.cast.utils.installreferrerreceiver Intent: com.android.vendi.install_referrer com.startapp.android.publish.common.metadata.bootcompletelistener Intent: android.intent.action.boot_completed or.mobilytics.extra.ar or.mobilytics.extra.ca Intent: com.mobilytics.activate (Priority 911) or.mobilytics.extra.ncr Intent: android.net.conn.connectivity_change or.mobilytics.extra.pcr Intent: android.intent.action.action_power_connected Copyriht Joe Security LLC 2018 Pae 10 of 49

11 Services com.oole.android.ms.analytics.analyticsjobservice com.oole.android.ms.analytics.analyticsservice com.oole.android.ms.analytics.campaintrackiservice com.oole.android.ms.cast.framework.reconnectionservice com.oole.android.ms.cast.framework.media.medianotificationservice com.oole.android.ms.measurement.appmeasurementjobservice com.oole.android.ms.measurement.appmeasurementservice com.oole.firebase.iid.firebaseinstanceidservice Intent: com.oole.firebase.instance_id_event (Priority -500) com.mea.cast.utils.transcodiservice com.startapp.android.publish.common.metadata.infoeventservice com.startapp.android.publish.common.metadata.periodicmetadataservice or.fourthline.cli.android.androidupnpserviceimpl Permission Requested android.permission.access_network_state android.permission.access_wifi_state android.permission.bind_job_service android.permission.change_wifi_multicast_state android.permission.internet android.permission.read_external_storage android.permission.wake_lock android.permission.write_external_storage com.android.vendi.billing com.android.vendi.check_license com.oole.android.c2dm.permission.receive com.mea.cast.permission.c2d_message Certificate Name: Issuer: Subject: classes.dex CN=Meacast,OU=Meacast,O=Meacast,L=Meacast,ST=Meacast,C=Meacast CN=Meacast,OU=Meacast,O=Meacast,L=Meacast,ST=Meacast,C=Meacast Resources common_btn_liht_ray_pressed.9.p PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 391 outer.9.p PNG imae data, 218 x 218, 8-bit/color RGBA, non-interlaced 979 abc_cab_backround_top_mtrl_alph a.9.p quantum_ic_play_circle_filled_white _36.p PNG imae data, 24 x 24, 8-bit/color RGBA, non-interlaced 225 PNG imae data, 108 x 108, 8-bit ray+alpha, non-interlaced 1013 ic_mr_button_connected_03_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 615 en_rules_portuuese.txt UTF-8 Unicode text 2600 abc_scrubber_control_off_mtrl_alpha.p ic_mr_button_connected_16_liht.pn PNG imae data, 12 x 32, 8-bit ray+alpha, non-interlaced 159 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 745 select_dialo_multichoice_material.x data 788 mr_dialo_close_liht.x data 536 ash_rules_erman.txt UTF-8 Unicode text 2783 common_oole_sinin_btn_text_da rk_normal_backround.9.p quantum_ic_keyboard_arrow_down_ white_36.p PNG imae data, 222 x 96, 8-bit/color RGBA, non-interlaced 1086 PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 173 tab_dropbox.p PNG imae data, 49 x 48, 8-bit ray+alpha, non-interlaced 918 star_filled.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 507 ic_mr_button_connecti_06_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 618 mmadsdk_fullscreen.p PNG imae data, 300 x 300, 8-bit colormap, non-interlaced 4139 Copyriht Joe Security LLC 2018 Pae 11 of 49

12 en_rules_czech.txt UTF-8 Unicode text 1561 checkbox.x data 580 ic_mr_button_connected_17_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 521 smb_loin_dialo.x data 1184 ash_rules_cyrillic.txt UTF-8 Unicode text 2366 abc_cab_backround_top_mtrl_alph a.9.p PNG imae data, 72 x 72, 8-bit/color RGBA, non-interlaced 246 abc_list_focused_holo.9.p PNG imae data, 18 x 18, 8-bit/color RGBA, non-interlaced 245 quantum_ic_pause_rey600_48.p PNG imae data, 72 x 72, 1-bit colormap, non-interlaced 109 ic_mr_button_connected_10_liht.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 648 abc_textfield_search_activated_mtrl _alpha.9.p PNG imae data, 36 x 10, 8-bit/color RGBA, non-interlaced 193 ic_roup_expand_10.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 416 ic_playlist_play_black_48dp.p PNG imae data, 192 x 192, 4-bit colormap, non-interlaced 358 quantum_ic_volume_off_rey600_36.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 628 quantum_ic_play_circle_filled_rey6 00_36.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 1374 ic_vol_type_tv_dark.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 185 common_oole_sinin_btn_text_da rk.x abc_ab_share_pack_mtrl_alpha.9.pn data 716 PNG imae data, 16 x 16, 8-bit/color RGBA, non-interlaced 274 Version.src C source, ASCII text, with CRLF line terminators 1986 CERT.RSA data 1382 quantum_ic_skip_previous_rey600 _36.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 203 en_exact_russian.txt ASCII text 831 abc_slide_in_top.x data 400 quantum_ic_pause_rey600_36.p PNG imae data, 72 x 72, 1-bit colormap, non-interlaced 109 ic_mr_button_connecti_00_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 623 ic_broken_imae_black_24dp.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 254 ic_mr_button_connected_11_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 465 cast_ic_mini_controller_stop_lare.x data 332 quantum_ic_bitop_updates_white_2 PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced p Holder-mbean.properties C++ source, ASCII text 121 common_oole_sinin_btn_icon_li ht_normal_backround.9.p cast_abc_scrubber_primary_mtrl_alp ha.9.p PNG imae data, 96 x 96, 8-bit/color RGBA, non-interlaced 935 PNG imae data, 15 x 18, 8-bit/color RGBA, non-interlaced 214 rectale_inner.p PNG imae data, 210 x 118, 8-bit colormap, non-interlaced 221 mr_controller_volume_item.x data 1620 ui_settis.x data 9740 SAXMessaes.properties ASCII text, with CRLF line terminators 2308 Jsr305_annotations.wt.x exported SGML document, ASCII text 133 javaee_web_services_1_3.xsd XML document text quantum_ic_volume_off_white_36.p PNG imae data, 108 x 108, 8-bit ray+alpha, non-interlaced 1097 ic_swap_vert_white_48dp.p PNG imae data, 192 x 192, 8-bit colormap, non-interlaced 632 sep_rules_any.txt UTF-8 Unicode text 4632 ic_broken_imae_black_24dp.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 463 quantum_ic_cast_white_36.p PNG imae data, 108 x 108, 8-bit ray+alpha, non-interlaced 1017 abc_list_divider_mtrl_alpha.9.p PNG imae data, 1 x 1, 8-bit rayscale, non-interlaced 167 settis_icon_sv.p PNG imae data, 144 x 144, 8-bit colormap, non-interlaced 1278 en_exact_dutch.txt ASCII text 812 star_empty.p PNG imae data, 18 x 18, 8-bit/color RGBA, non-interlaced 271 ic_skip_next_black_48dp.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 340 desin_snackbar_backround.x data 564 ic_media_play_liht.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 320 protobuf.meta data abc_tint_switch_thumb.x data 732 abc_text_cursor_material.x data 600 Copyriht Joe Security LLC 2018 Pae 12 of 49

13 abc_alert_dialo_button_bar_materia data 1660 l.x ic_mr_button_connecti_19_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 646 common_oole_sinin_btn_icon_li ht_normal_backround.9.p PNG imae data, 73 x 73, 8-bit/color RGBA, non-interlaced 817 desin_layout_snackbar_include.x data 1388 ic_mr_button_connected_03_dark.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 444 abc_text_select_handle_riht_mtrl_li ht.p PNG imae data, 176 x 88, 8-bit colormap, non-interlaced 513 abc_activity_chooser_view.x data 1728 quantum_ic_forward_10_white_24.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 858 abc_screen_content_include.x data 556 common_btn_liht_ray_focused.9.p PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 370 tab_dropbox_inactive.p PNG imae data, 32 x 32, 8-bit ray+alpha, non-interlaced 1184 select_dialo_silechoice_material. x data 788 quantum_ic_skip_next_white_24.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 222 abc_btn_radio_material.x data 560 quantum_ic_stop_white_24.p PNG imae data, 96 x 96, 1-bit rayscale, non-interlaced 95 notification_action_backround.x data 496 en_rules_russian.txt ASCII text 3042 ContextHandler-mbean.properties C++ source, ASCII text 1583 frament_explorer_container_path.x data 1524 mr_media_stop_liht.x data 536 sep_approx_any.txt ASCII text 830 abc_spinner_mtrl_am_alpha.9.p PNG imae data, 18 x 24, 8-bit/color RGBA, non-interlaced 342 quantum_ic_play_circle_filled_white _36.p quantum_ic_cast_connected_white_ 24.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 1331 PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 282 oole_disabled_color_18.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 727 ic_mr_button_connecti_07_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 424 desin_bottom_sheet_slide_in.x data 620 abc_list_lopressed_holo.9.p PNG imae data, 6 x 6, 8-bit/color RGBA, non-interlaced 211 abc_text_select_handle_riht_mtrl_li ht.p abc_text_select_handle_left_mtrl_li ht.p quantum_ic_pause_circle_filled_whit e_36.p PNG imae data, 44 x 22, 8-bit/color RGBA, non-interlaced 186 PNG imae data, 44 x 22, 8-bit/color RGBA, non-interlaced 203 PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 1223 bottom_bar_liht.x data 644 meacast_backround_white.p PNG imae data, 250 x 260, 8-bit/color RGBA, non-interlaced ic_mr_button_connecti_21_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 631 abc_ic_menu_cut_mtrl_alpha.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 705 ic_close_24dp.p PNG imae data, 18 x 18, 8-bit/color RGBA, non-interlaced 169 avd_show_password_1.x data 1144 ic_mr_button_connected_04_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 599 abc_seekbar_track_material.x data 1532 ic_mr_button_connecti_18_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 637 sep_exact_approx_common.txt ASCII text 1685 JAXPValidationMessaes.properties ASCII text, with CRLF line terminators 2782 mr_vol_type_audiotrack_dark.x data 424 abc_btn_switch_to_on_mtrl_ p PNG imae data, 27 x 27, 8-bit/color RGBA, non-interlaced 1124 abc_btn_check_to_on_mtrl_015.p PNG imae data, 128 x 128, 8-bit ray+alpha, non-interlaced 476 ui_settis.x data 9484 quantum_ic_pause_circle_filled_whit e_36.p ic_mr_button_connecti_01_liht.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 326 PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 455 Copyriht Joe Security LLC 2018 Pae 13 of 49

14 cast_ic_mini_controller_forward30.x data 332 mr_button_connected_dark.x data 2728 abc_text_select_handle_riht_mtrl_d ark.p PNG imae data, 44 x 22, 8-bit/color RGBA, non-interlaced 187 en_approx_italian.txt C source, ASCII text 831 video_play_cover.p PNG imae data, 68 x 68, 8-bit colormap, non-interlaced 2861 abc_action_bar_view_list_nav_layou t.x data 396 abc_ic_star_black_48dp.p PNG imae data, 192 x 192, 8-bit ray+alpha, non-interlaced 1680 ash_rules_elish.txt ASCII text 2970 abc_item_backround_holo_liht.xm l data 1136 abc_tint_default.x data 1232 ic_mr_button_connected_07_liht.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 658 quantum_ic_volume_off_white_36.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 753 quantum_ic_forward_30_rey600_36 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 1003.p la.txt UTF-8 Unicode text 7462 en_approx_romanian.txt C source, ASCII text 830 quantum_ic_stop_rey600_48.p PNG imae data, 96 x 96, 1-bit colormap, non-interlaced 112 notification_template_media_custom.x data 2856 proress_bar_loadi.x data 1296 abc_action_menu_item_layout.x data 804 ic_play_circle_80dp.p PNG imae data, 128 x 128, 8-bit/color RGBA, non-interlaced 3392 quantum_ic_pause_rey600_48.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 105 common_btn_liht_ray_disabled.9. p ic_mr_button_connecti_12_liht.p PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 338 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 611 ic_mr_button_connected_00_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 635 ic_roup_collapse_04.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 431 abc_scrubber_primary_mtrl_alpha.9. p PNG imae data, 10 x 12, 8-bit/color RGBA, non-interlaced 208 ic_mr_button_connected_08_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 424 abc_text_select_handle_riht_mtrl_li ht.p PNG imae data, 88 x 44, 8-bit/color RGBA, non-interlaced 318 abc_btn_radio_to_on_mtrl_015.p PNG imae data, 32 x 32, 8-bit ray+alpha, non-interlaced 356 sep_exact_portuuese.txt ASCII text 812 Goole_internal.wt.x exported SGML document, ASCII text 213 notification_template_custom_bi.x ic_play_circle_outline_white_24dp.p data 3020 PNG imae data, 72 x 72, 8-bit colormap, non-interlaced 830 chromecast_device_item_layout.x data 992 notification_b_low_pressed.9.p PNG imae data, 12 x 12, 8-bit/color RGB, non-interlaced 225 quantum_ic_volume_up_rey600_36.p PNG imae data, 108 x 108, 8-bit ray+alpha, non-interlaced 1026 abc_tab_indicator_mtrl_alpha.9.p PNG imae data, 18 x 18, 8-bit/color RGBA, non-interlaced 199 or.apache.xerces.dom.domimplem entationsourceimpl ASCII text, with no line terminators 49 notification_template_bi_media_cu stom.x data 2864 ic_mr_button_connected_01_liht.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 657 ic_amazon.p PNG imae data, 48 x 48, 8-bit/color RGBA, non-interlaced 3214 quantum_ic_play_arrow_white_24.pn PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 195 en_exact_erman.txt C source, ASCII text 826 quantum_ic_forward_10_white_24.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 590 common_btn_liht_ray_focused.9.p PNG imae data, 39 x 57, 8-bit/color RGBA, non-interlaced 338 backround_splash.x data 652 web-app_3_0.xsd XML document text Copyriht Joe Security LLC 2018 Pae 14 of 49

15 abc_ab_share_pack_mtrl_alpha.9.pn PNG imae data, 48 x 48, 8-bit/color RGBA, non-interlaced 305 abc_ic_menu_cut_mtrl_alpha.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 400 common_oole_sinin_btn_text_li ht_normal_backround.9.p PNG imae data, 222 x 96, 8-bit/color RGBA, non-interlaced 976 ic_roup_expand_06.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 469 abc_ic_menu_copy_mtrl_am_alpha. p abc_spinner_textfield_backround_ material.x PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 260 data 1328 abc_btn_radio_to_on_mtrl_015.p PNG imae data, 64 x 64, 8-bit ray+alpha, non-interlaced 785 cast_expanded_controller_activity.x data 7620 abc_dialo_title_material.x data 1156 caption_preference.x data 856 ic_media_pause_dark.p PNG imae data, 48 x 48, 1-bit rayscale, non-interlaced 90 javax.x.datatype.datatypefactory ASCII text, with CRLF line terminators 53 cast_abc_scrubber_control_off_mtrl _alpha.p PNG imae data, 36 x 96, 8-bit ray+alpha, non-interlaced 326 ic_mr_button_connected_02_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 470 meacast_premium.p PNG imae data, 48 x 48, 8-bit colormap, non-interlaced 2163 quantum_ic_skip_previous_rey600 _36.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 533 en_exact_cyrillic.txt C source, ASCII text 830 avd_show_password.x data 824 ic_oole_play.p PNG imae data, 72 x 72, 8-bit/color RGBA, non-interlaced 3157 slideshow_dialo_layout.x data 1784 abc_btn_check_to_on_mtrl_000.p PNG imae data, 128 x 128, 4-bit colormap, non-interlaced 275 quantum_ic_skip_previous_white_24.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 152 or.apache.xerces.xni.parser.dtdc onfiuration ASCII text, with CRLF line terminators 44 activity_sile_app_interstitial_1.x data 2548 cast_ic_expanded_controller_rewind 30.x abc_secondary_text_material_liht.x data 660 data 468 quantum_ic_cast_white_36.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 1286 quantum_ic_pause_white_24.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 105 popup_tile.x data 1876 folder_outer.p PNG imae data, 218 x 188, 8-bit colormap, non-interlaced 609 settis_icon_sv.x data 2152 abc_btn_switch_to_on_mtrl_ p PNG imae data, 41 x 41, 8-bit/color RGBA, non-interlaced 1548 ash_exact_french.txt C source, ASCII text 830 ic_roup_collapse_12.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 267 quantum_ic_replay_30_rey600_36. p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 2027 ic_vol_type_tv_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 260 quantum_ic_forward_30_white_36.pn PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 1966 quantum_ic_skip_next_white_36.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 252 abc_btn_switch_to_on_mtrl_ p PNG imae data, 54 x 54, 8-bit/color RGBA, non-interlaced 2606 common_oole_sinin_btn_text_li ht_normal_backround.9.p PNG imae data, 168 x 73, 8-bit/color RGBA, non-interlaced 854 oole_disabled_color_18.p PNG imae data, 18 x 18, 8-bit ray+alpha, non-interlaced 281 meacast_premium.p PNG imae data, 144 x 144, 8-bit colormap, non-interlaced 4568 blue_button.p PNG imae data, 128 x 56, 8-bit colormap, non-interlaced 454 ic_mr_button_connected_04_dark.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 419 ic_arrow_down.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 182 quantum_ic_clear_white_24.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 436 mmadsdk_lihtbox_down.p PNG imae data, 300 x 300, 8-bit colormap, non-interlaced 3407 abc_spinner_mtrl_am_alpha.9.p PNG imae data, 54 x 72, 8-bit/color RGBA, non-interlaced 593 ash_approx_french.txt ASCII text 1224 ic_mr_button_connecti_14_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 454 Copyriht Joe Security LLC 2018 Pae 15 of 49

16 ic_arrow_down.p PNG imae data, 24 x 24, 8-bit/color RGBA, non-interlaced 124 music_thumbnail.p PNG imae data, 160 x 160, 8-bit/color RGBA, non-interlaced 3496 en_approx_erman.txt ASCII text 1853 abc_tint_spinner.x data 776 radient_playlist_b.x GeoSwath RDF 544 en_exact_common.txt C source, ASCII text 1093 list_item_folder_smb.x data 1228 abc_btn_radio_to_on_mtrl_000.p PNG imae data, 32 x 32, 8-bit ray+alpha, non-interlaced 324 desin_ic_visibility.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 868 popup_list.x data 1936 ic_mr_button_rey.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 454 ic_roup_expand_14.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 265 lib_list_view_item.x data 2368 ic_media_stop_dark.p PNG imae data, 72 x 72, 1-bit rayscale, non-interlaced 94 abc_ic_menu_cut_mtrl_alpha.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 494 oole_standard_color_18.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 982 FilterMappi-mbean.properties ASCII text 115 abc_ratibar_material.x data 712 desin_error.x data 468 abc_menu_hardkey_panel_mtrl_mult.9.p PNG imae data, 128 x 48, 8-bit/color RGBA, non-interlaced 1122 chromecast_device_item_layout.x data 992 meacast_premium.p PNG imae data, 72 x 72, 8-bit colormap, non-interlaced 2938 mr_roup_collapse.x data 2028 common_button_reen.x data 836 dialo_loadi.x data 492 en_rules_dutch.txt UTF-8 Unicode text 1867 ic_mr_button_connecti_22_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 634 libswscale.so ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, stripped ic_mr_button_connected_00_dark.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 447 activity_interstitial.x data 1152 abc_btn_radio_to_on_mtrl_000.p PNG imae data, 64 x 64, 8-bit ray+alpha, non-interlaced 651 abc_action_mode_close_item_mater ial.x data 796 common_oole_sinin_btn_icon_da PNG imae data, 96 x 96, 8-bit/color RGBA, non-interlaced 1032 rk_normal_backround.9.p abc_btn_colored_material.x data 428 banner_backround.x data 520 play_icon_sv.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 326 cast_ic_notification_1.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 293 ic_mr_button_connected_05_dark.pn abc_menu_hardkey_panel_mtrl_mult.9.p abc_scrubber_control_to_pressed_m trl_000.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 629 PNG imae data, 192 x 72, 8-bit/color RGBA, non-interlaced 1779 PNG imae data, 18 x 18, 8-bit ray+alpha, non-interlaced 196 play_icon_sv.p PNG imae data, 24 x 24, 8-bit/color RGBA, non-interlaced 246 messae_fr.properties ASCII text, with CRLF line terminators 3594 ic_mr_button_connected_14_liht.pn abc_scrubber_control_to_pressed_m trl_005.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 718 PNG imae data, 18 x 18, 8-bit ray+alpha, non-interlaced 197 mmadsdk_close.p PNG imae data, 160 x 160, 8-bit colormap, non-interlaced 1039 XMLSchema.dtd exported SGML document, ASCII text ic_close_24dp.x data 884 abc_ab_share_pack_mtrl_alpha.9.pn PNG imae data, 32 x 32, 8-bit/color RGBA, non-interlaced 297 meacast_premium.p PNG imae data, 96 x 96, 8-bit colormap, non-interlaced 3417 abc_alert_dialo_button_bar_materia data 1704 l.x ic_mr_button_connecti_09_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 603 desin_bottom_sheet_slide_out.x data 620 en_approx_common.txt C source, UTF-8 Unicode text 4874 cast_ic_expanded_controller_pause. x data 660 Copyriht Joe Security LLC 2018 Pae 16 of 49

17 notification_template_media.x data 1440 abc_ic_star_half_black_36dp.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 328 music_thumbnail.p PNG imae data, 120 x 120, 8-bit/color RGBA, non-interlaced 2663 ic_check_24dp.p PNG imae data, 96 x 96, 8-bit/color RGBA, non-interlaced 310 ffmpe ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), stripped ic_mr_button_connected_01_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 663 ic_mr_button_rey.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 395 notification_b_low.x data 644 quantum_ic_pause_rey600_48.p PNG imae data, 96 x 96, 1-bit colormap, non-interlaced 111 ic_mr_button_connecti_00_dark.p ServletContextHandlermbean.properties PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 451 ASCII text 214 abc_tint_edittext.x data 776 ic_vol_type_speaker_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 724 star_empty.x data 864 en_exact_elish.txt C source, ASCII text 830 play_icon_sv.p PNG imae data, 48 x 48, 8-bit/color RGBA, non-interlaced 414 video_thumbnail_border.p PNG imae data, 2400 x 1612, 8-bit ray+alpha, non-interlaced abc_vector_test.x data 812 settis_icon_sv.p PNG imae data, 27 x 27, 8-bit/color RGBA, non-interlaced 325 mmadsdk_unfullscreen.p PNG imae data, 300 x 300, 8-bit colormap, non-interlaced 4164 ic_broken_imae_black_24dp.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 466 encodi.properties ASCII text 84 frament_recycler_list_view.x data 576 ic_mr_button_connecti_03_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 689 mmadsdk_close.p PNG imae data, 320 x 320, 8-bit colormap, non-interlaced 2202 abc_ic_menu_cut_mtrl_alpha.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 253 ic_mr_button_connected_14_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 510 checkbox_on.p PNG imae data, 256 x 256, 8-bit colormap, non-interlaced 1846 desin_ic_visibility_off.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 507 floati_action_bar.p PNG imae data, 104 x 104, 8-bit/color RGBA, non-interlaced 3290 select_dialo_item_material.x data 648 ic_media_pause_dark.p PNG imae data, 72 x 72, 1-bit rayscale, non-interlaced 92 quantum_ic_refresh_white_24.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 641 en_rules_huarian.txt UTF-8 Unicode text 1887 abc_primary_text_material_dark.x data 468 ash_lauaes.txt ASCII text 888 folders_frament_view_layout.x data 1672 abc_btn_radio_to_on_mtrl_015.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 1208 abc_tint_spinner.x data 672 cast_ic_notification_2.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 535 quantum_ic_stop_rey600_36.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 117 ic_playlist_play_white_48dp.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 277 playercorefactory.x ASCII text, with CRLF line terminators 684 ic_swap_vert_black_18dp.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 244 icon_new.p PNG imae data, 136 x 137, 8-bit/color RGBA, non-interlaced 8061 removetext.p PNG imae data, 16 x 16, 8-bit/color RGBA, non-interlaced 3230 video_frament_view_layout.x data 1936 abc_ic_star_half_black_16dp.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 197 ic_fortumo.p PNG imae data, 192 x 192, 8-bit/color RGBA, non-interlaced 5721 en_rules_reek.txt UTF-8 Unicode text 2918 cast_ic_notification_1.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 211 abc_ic_menu_paste_mtrl_am_alpha. p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 348 mmadsdk_vast_opacity.p PNG imae data, 480 x 480, 8-bit colormap, non-interlaced 3125 quantum_ic_play_arrow_rey600_36.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 246 sile_app_interstitial_activity_2_b. x data 708 cast_abc_scrubber_control_to_press ed_mtrl_000.p PNG imae data, 18 x 18, 8-bit ray+alpha, non-interlaced 197 quantum_ic_replay_30_white_24.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 642 desin_tint_password_tole.x data 484 Copyriht Joe Security LLC 2018 Pae 17 of 49

18 quantum_ic_skip_next_white_36.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 292 desin_ic_visibility_off.x data 1864 ash_approx_any.txt UTF-8 Unicode text 4678 common_button_liht_ray.x data 836 abc_switch_track_mtrl_alpha.9.p PNG imae data, 35 x 25, 8-bit/color RGBA, non-interlaced 538 ic_mr_button_connected_05_dark.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 459 common_btn_reen_pressed.9.p PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 515 web-app_2_3.dtd exported SGML document, ASCII text abc_scrubber_control_to_pressed_m trl_005.p PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 595 en_rules_elish.txt UTF-8 Unicode text 3013 cast_ic_notification_small_icon.x data 332 mmadsdk_vast_replay.p PNG imae data, 320 x 320, 8-bit/color RGBA, non-interlaced ash_exact_hebrew.txt ASCII text 812 ic_roup_collapse_08.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 467 ic_mr_button_disabled_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 889 ic_mr_button_disabled_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 891 mmadsdk_lihtbox_down.p PNG imae data, 100 x 100, 8-bit colormap, non-interlaced 1034 abc_spinner_mtrl_am_alpha.9.p PNG imae data, 27 x 36, 8-bit/color RGBA, non-interlaced 367 notification_b_normal_pressed.9.pn PNG imae data, 8 x 8, 8-bit/color RGB, non-interlaced 223 interstitial_item.x data 2068 LocalStris_fr.properties ISO-8859 text 3360 mmadsdk_unfullscreen.p PNG imae data, 100 x 100, 8-bit/color RGBA, non-interlaced 4245 cast_ic_notification_forward10.x data 332 ic_file_upload_white_48dp.p PNG imae data, 144 x 144, 2-bit colormap, non-interlaced 294 abc_ic_menu_copy_mtrl_am_alpha. p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 202 abc_tint_switch_track.x data 668 desin_layout_snackbar.x data 564 ic_mr_button_connecti_20_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 446 hamburer.p PNG imae data, 80 x 80, 8-bit/color RGBA, non-interlaced 311 abc_scrubber_control_to_pressed_m trl_000.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 267 ash_approx_hebrew.txt ASCII text 812 cast_mini_controller_radient_liht.x data 560 abc_ic_menu_paste_mtrl_am_alpha. p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 243 file_icon.p PNG imae data, 256 x 256, 8-bit colormap, non-interlaced 2325 mr_button_connected_liht.x data 2728 tab_dropbox.p PNG imae data, 64 x 64, 8-bit ray+alpha, non-interlaced 1231 star_filled.p PNG imae data, 48 x 48, 8-bit/color RGBA, non-interlaced 637 abc_tab_indicator_mtrl_alpha.9.p PNG imae data, 12 x 12, 8-bit/color RGBA, non-interlaced 192 notification_template_lines_media.x data 2880 quantum_ic_play_arrow_white_24.pn PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 157 abc_btn_radio_to_on_mtrl_000.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 984 abc_spinner_mtrl_am_alpha.9.p PNG imae data, 72 x 96, 8-bit/color RGBA, non-interlaced 513 NCSARequestLo-mbean.properties ASCII text 256 ic_mr_button_connected_06_dark.pn notification_template_bi_media_nar row.x abc_btn_switch_to_on_mtrl_ p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 664 data 1668 PNG imae data, 81 x 81, 8-bit/color RGBA, non-interlaced 3755 abc_list_pressed_holo_liht.9.p PNG imae data, 9 x 9, 8-bit/color RGBA, non-interlaced 212 ic_mr_button_connecti_05_dark.p ic_mr_button_connecti_16_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 456 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 635 ic_close_24dp.p PNG imae data, 72 x 72, 8-bit colormap, non-interlaced 372 desin_naviation_menu.x data 528 en_exact_czech.txt C source, ASCII text 830 Copyriht Joe Security LLC 2018 Pae 18 of 49

19 abc_list_selector_disabled_holo_dar k.9.p PNG imae data, 42 x 126, 8-bit/color RGBA, non-interlaced 307 folder_back.p PNG imae data, 60 x 60, 8-bit colormap, non-interlaced 1194 cast_ic_notification_0.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 354 ic_vol_type_speaker_liht.p PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced 255 ic_file_upload_black_48dp.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 175 lib_list_view_item.x data 2180 notification_template_bi_media_cu stom.x data 3144 abc_ic_star_black_48dp.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 467 cast_media_route_choose_dialo.x quantum_ic_art_track_rey600_48.p data 1392 PNG imae data, 192 x 192, 8-bit ray+alpha, non-interlaced 868 mmadsdk_vast_opacity.p PNG imae data, 160 x 160, 8-bit colormap, non-interlaced 1275 web-app_2_4.xsd XML document text upnp-cds-1.0.xsd XML document text 8723 abc_ic_star_half_black_36dp.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 253 quantum_ic_stop_rey600_48.p PNG imae data, 144 x 144, 1-bit colormap, non-interlaced 125 ic_mr_button_connected_20_liht.pn ic_mr_button_connected_05_liht.pn abc_btn_switch_to_on_mtrl_ p common_btn_liht_ray_normal.9.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 734 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 629 PNG imae data, 108 x 108, 8-bit/color RGBA, non-interlaced 3524 PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 390 abc_seekbar_thumb_material.x data 1232 ic_mr_button_connected_02_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 659 abc_screen_toolbar.x data 1580 desin_layout_snackbar_include.x data 1480 abc_popup_menu_item_layout.x data 1884 ic_mr_button_connecti_10_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 607 javax.x.parsers.documentbuilderf actory ASCII text, with CRLF line terminators 51 ic_mr_button_connecti_01_dark.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 458 mr_dialo_material_backround_lih t.x ic_mr_button_connected_21_liht.pn data 564 PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 517 popup_tile.x data 1740 en_exact_romanian.txt ASCII text 812 quantum_ic_replay_white_24.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 457 ic_hihliht_off_black_24dp.p PNG imae data, 96 x 96, 8-bit colormap, non-interlaced 1421 app_rate_dialo.x data 2072 abc_text_select_handle_middle_mtrl _liht.p PNG imae data, 20 x 24, 8-bit/color RGBA, non-interlaced 310 ic_pause_circle_80dp.p PNG imae data, 128 x 128, 8-bit/color RGBA, non-interlaced 3323 mmadsdk_expand_collapse.x data 580 ic_vol_type_speaker_roup_dark.pn PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 402 quantum_ic_skip_next_white_24.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 357 quantum_ic_refresh_white_24.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 849 imae_thumbnail.p PNG imae data, 160 x 160, 8-bit/color RGBA, non-interlaced 5303 ic_playlist_play_white_48dp.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 277 abc_activity_chooser_view_list_item. x data 1272 abc_list_pressed_holo_dark.9.p PNG imae data, 6 x 6, 8-bit/color RGBA, non-interlaced 211 j2ee_1_4.xsd XML document text common_btn_reen_focused.9.p PNG imae data, 56 x 78, 8-bit/color RGBA, non-interlaced 446 abc_ic_star_half_black_16dp.p PNG imae data, 16 x 16, 8-bit ray+alpha, non-interlaced 146 quantum_ic_skip_previous_white_36.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 201 notification_b_low_pressed.9.p PNG imae data, 8 x 8, 8-bit/color RGB, non-interlaced 223 activity_ffmpe.x data 5268 Copyriht Joe Security LLC 2018 Pae 19 of 49

20 ic_mr_button_connected_05_liht.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 455 common_oole_sinin_btn_icon_li ht_normal_backround.9.p PNG imae data, 144 x 144, 8-bit/color RGBA, non-interlaced 1412 ic_oole_play.p PNG imae data, 144 x 144, 8-bit/color RGBA, non-interlaced 6822 ic_skip_next_black_48dp.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 340 abc_btn_colored_material.x data 1908 ash_approx_spanish.txt C source, ASCII text 830 ic_playlist_play_black_48dp.p PNG imae data, 192 x 192, 4-bit colormap, non-interlaced 358 list_item_folder_dlna.x data 1536 abc_textfield_default_mtrl_alpha.9.p PNG imae data, 12 x 11, 8-bit/color RGBA, non-interlaced 182 ic_broken_imae_black_24dp.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 271 imae_thumbnail.p PNG imae data, 80 x 80, 8-bit/color RGBA, non-interlaced 2795 abc_list_pressed_holo_dark.9.p PNG imae data, 12 x 12, 8-bit/color RGBA, non-interlaced 214 custom_thumb_state_default.x data 888 folder.p PNG imae data, 160 x 160, 8-bit colormap, non-interlaced 1744 notification_action.x data 1172 info.p PNG imae data, 45 x 45, 8-bit colormap, non-interlaced 1276 ic_media_stop_liht.p PNG imae data, 96 x 96, 1-bit colormap, non-interlaced 112 ic_roup_collapse_01.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 375 quantum_ic_play_arrow_rey600_36.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 466 ic_file_upload_white_48dp.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 156 abc_tab_indicator_mtrl_alpha.9.p PNG imae data, 48 x 48, 8-bit/color RGBA, non-interlaced 208 abc_switch_track_mtrl_alpha.9.p PNG imae data, 47 x 32, 8-bit/color RGBA, non-interlaced 741 ic_mr_button_connected_06_dark.pn PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 471 ic_vol_type_tv_liht.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 270 common_oole_sinin_btn_text_da rk.x data 700 dialo_imae_slider.x data 2096 activity_no_play_services.x data 412 abc_menu_hardkey_panel_mtrl_mult.9.p PNG imae data, 96 x 36, 8-bit/color RGBA, non-interlaced 817 ash_hebrew_common.txt C source, ASCII text 2854 ic_mr_button_connecti_17_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 453 abc_ratibar_small_material.x data 712 abc_list_focused_holo.9.p PNG imae data, 6 x 6, 8-bit/color RGBA, non-interlaced 222 StatisticsHandler-mbean.properties ASCII text 2222 desin_bottom_naviation_item_bac kround.x data 876 mr_vol_type_audiotrack_liht.x data 536 abc_list_divider_mtrl_alpha.9.p PNG imae data, 1 x 1, 8-bit rayscale, non-interlaced 167 imae_thumbnail.p PNG imae data, 120 x 120, 8-bit/color RGBA, non-interlaced 4155 en_exact_spanish.txt ASCII text 832 mmadsdk_inline_video_proress_ba r.x data 1196 ic_roup_expand_03.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 414 notification_transcodi.x data 2308 en_approx_czech.txt C source, ASCII text 830 cast_abc_scrubber_control_to_press ed_mtrl_000.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 404 abc_color_hihliht_material.x data 548 ash_rules_polish.txt UTF-8 Unicode text 4167 support_simple_spinner_dropdown_it data 508 em.x stop_96.p PNG imae data, 96 x 96, 8-bit colormap, non-interlaced 751 ic_hihliht_off_black_24dp.p PNG imae data, 18 x 18, 8-bit/color RGBA, non-interlaced 343 ic_mr_button_connecti_02_dark.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 658 abc_list_divider_mtrl_alpha.9.p PNG imae data, 2 x 2, 8-bit rayscale, non-interlaced 171 quantum_ic_stop_white_24.p PNG imae data, 72 x 72, 1-bit rayscale, non-interlaced 94 quantum_ic_clear_white_24.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 347 abc_btn_colored_text_material.x data 608 abc_text_select_handle_middle_mtrl _liht.p PNG imae data, 60 x 72, 8-bit/color RGBA, non-interlaced 753 Copyriht Joe Security LLC 2018 Pae 20 of 49

21 ic_mr_button_connecti_11_liht.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 423 no_video_backround.9.p PNG imae data, 84 x 84, 8-bit/color RGBA, non-interlaced 333 ash_approx_polish.txt ASCII text 2228 abc_textfield_activated_mtrl_alpha.9.p PNG imae data, 19 x 16, 8-bit/color RGBA, non-interlaced 192 ic_mr_button_connected_07_dark.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 662 cast_ic_stop_circle_filled_rey600.p PNG imae data, 192 x 192, 8-bit colormap, non-interlaced 1210 abc_list_pressed_holo_liht.9.p PNG imae data, 12 x 12, 8-bit/color RGBA, non-interlaced 214 abc_tab_indicator_mtrl_alpha.9.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 210 inner.9.p PNG imae data, 210 x 118, 8-bit/color RGBA, non-interlaced 474 ic_mr_button_connecti_06_dark.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 437 sep_exact_french.txt ASCII text 815 mr_linear_out_slow_in.x data 408 DOMMessaes.properties ASCII text, with CRLF line terminators 5162 quantum_ic_play_arrow_white_24.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 283 oole_disabled_color_18.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 516 HandlerContainer-mbean.properties ASCII text 144 ic_swap_vert_white_48dp.p PNG imae data, 192 x 192, 8-bit colormap, non-interlaced 632 ic_mr_button_connected_17_liht.pn PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 741 quantum_ic_skip_next_white_24.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 292 mmadsdk_vast_replay.p PNG imae data, 480 x 480, 8-bit/color RGBA, non-interlaced list_item_folder_dlna.x data 1584 abc_textfield_search_activated_mtrl _alpha.9.p PNG imae data, 24 x 6, 8-bit/color RGBA, non-interlaced 190 mr_controller_material_dialo_b.x data 3420 classes2.dex Dalvik dex file version abc_tint_seek_thumb.x data 608 quantum_ic_closed_caption_white_3 6.p PNG imae data, 144 x 144, 8-bit ray+alpha, non-interlaced 581 ic_mr_button_connecti_22_liht.p ic_mr_button_connecti_07_liht.p ic_play_circle_outline_white_24dp.p chromecast_control_dialo_cover_pl aceholder.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 627 PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 600 PNG imae data, 36 x 36, 8-bit colormap, non-interlaced 483 PNG imae data, 158 x 106, 8-bit colormap, non-interlaced 1427 abc_ic_o_search_api_material.x data 832 ic_mr_button_disconnected_liht.pn PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 538 ic_mr_button_connected_18_liht.pn quantum_ic_pause_circle_filled_rey 600_36.p PNG imae data, 48 x 48, 8-bit ray+alpha, non-interlaced 518 PNG imae data, 54 x 54, 8-bit ray+alpha, non-interlaced 496 ic_check_24dp.p PNG imae data, 36 x 36, 8-bit/color RGBA, non-interlaced 179 cast_ic_expanded_controller_forwar d30.x abc_text_select_handle_left_mtrl_li ht.p data 660 PNG imae data, 132 x 66, 8-bit colormap, non-interlaced 420 quantum_ic_volume_off_rey600_36.p PNG imae data, 72 x 72, 8-bit ray+alpha, non-interlaced 782 NOTICE-resolver.txt ASCII text, with CRLF line terminators 388 quantum_ic_pause_white_24.p PNG imae data, 96 x 96, 1-bit rayscale, non-interlaced 94 item_folder.x data 1652 ic_vol_type_tv_liht.p PNG imae data, 36 x 36, 8-bit ray+alpha, non-interlaced 190 quantum_ic_bitop_updates_white_2 PNG imae data, 24 x 24, 8-bit ray+alpha, non-interlaced p ic_mr_button_rey.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 879 ic_roup_expand_11.p PNG imae data, 96 x 96, 8-bit ray+alpha, non-interlaced 307 abc_popup_backround_mtrl_mult.9. p PNG imae data, 64 x 32, 8-bit/color RGBA, non-interlaced 850 ash_approx_russian.txt ASCII text 1427 ic_check_24dp.p PNG imae data, 24 x 24, 8-bit/color RGBA, non-interlaced 142 play_icon_sv.p PNG imae data, 96 x 96, 8-bit/color RGBA, non-interlaced 723 Copyriht Joe Security LLC 2018 Pae 21 of 49