ID: Sample Name: dronefly.apk Cookbook: defaultandroidfilecookbook.jbs Time: 13:19:28 Date: 14/06/2018 Version:

Transcription

1 ID: 6401 Sample Name: dronefly.apk Cookbook: defaultandroidfilecookbook.jbs Time: 13:19:28 Date: 14/06/2018 Version:

2 Table of Contents Analysis Report Overview General Information Detection Classification Signature Overview Location Traci: E-Banki Fraud: Networki: Steali of Sensitive Information: Data Obfuscation: Spreadi: System Summary: Malware Analysis System Evasion: Hooki and other Techniques for Hidi and Protection: Antivirus Detection Initial Sample Dropped Files Unpacked PE Files Domains URLs Yara Overview Initial Sample PCAP (Network Traffic) Dropped Files Memory Dumps Unpacked PEs Created / dropped Files Contacted Domains/Contacted IPs Contacted Domains Contacted IPs Public Static File Info General File Icon Static APK Info General Activities Receivers Services Permission Requested Certificate Resources Network Behavior Network Port Distribution TCP Packets UDP Packets APK Behavior Installation Miscellaneous By Permission (executed) By Permission (non-executed) Table of Contents Copyright Joe Security LLC 2018 Page 2 of

3 By Class (executed) By Class (non-executed) By API Disassembly 0 Executed Methods 0 Non-Executed Methods Copyright Joe Security LLC 2018 Page 3 of 25

4 Analysis Report Overview General Information Joe Sandbox Version: Analysis ID: 6401 Start time: 13:19:28 Joe Sandbox Product: CloudBasic Start date: Overall analysis duration: Hypervisor based Inspection enabled: Report type: Sample file name: Cookbook file name: 0h 3m 33s false light dronefly.apk Analysis system description: Android 6.0 Detection: Classification: Warnis: defaultandroidfilecookbook.jbs MAL Show All An application runtime error occurred No dynamic data available No interacted views No simulation commands forwarded to apk Not all resource files were parsed Report size exceeded maximum capacity and may have missi behavior information. Report size exceeded maximum capacity and may have missi dynamic data code. Detection Strategy Score Rae Reporti Detection Threshold Report FP / FN Classification Copyright Joe Security LLC 2018 Page 4 of 25

5 Ransomware Miner Spreadi malicious malicious malicious Evader Phishi suspicious suspicious suspicious clean clean clean Exploiter Banker Spyware Trojan / Bot Adware Signature Overview Traci Location Fraud E-Banki Networki of Sensitive Information Steali Obfuscation Data Spreadi Summary System Analysis System Evasion Malware Hooki and other Techniques for Hidi and Protection Click to jump to signature section Copyright Joe Security LLC 2018 Page 5 of 25

6 Location Traci: Queries the phones location (GPS) E-Banki Fraud: Has functionality to send UDP packets Networki: Modifies WIFI configuration Checks an internet connection is available Enables or disables WIFI Opens an internet connection Performs DNS lookups (Java API) Removes or disables configured WIFI access points Scans for WIFI networks Found stris which match to known social media urls Urls found in memory or binary data Steali of Sensitive Information: Queries stored mail and application accounts (e.g. Gmail or Whatsup) Queries the list of configured WIFI access points Has permission to query the current location Data Obfuscation: Found very lo method stris Obfuscates method names Uses reflection Spreadi: Has permission to chae the WIFI configuration includi connecti and disconnecti Queries the list of paired Bluetooth devices Scans for Bluetooth devices Accesses external storage location System Summary: Requests potentially daerous permissions Classification label Reads shares settis Malware Analysis System Evasion: Accesses android OS build fields Queries several sensitive phone informations Hooki and other Techniques for Hidi and Protection: Has permission to use bluetooth to discover and pair with other devices Queries list of runni processes/tasks Copyright Joe Security LLC 2018 Page 6 of 25

7 Antivirus Detection Initial Sample Source Detection Scanner Label Link dronefly.apk 2% virustotal Browse Dropped Files No Antivirus matches Unpacked PE Files No Antivirus matches Domains No Antivirus matches URLs No Antivirus matches Yara Overview Initial Sample No yara matches PCAP (Network Traffic) No yara matches Dropped Files No yara matches Memory Dumps No yara matches Unpacked PEs No yara matches Created / dropped Files No created / dropped files found Contacted Domains/Contacted IPs Contacted Domains No contacted domains info Contacted IPs Copyright Joe Security LLC 2018 Page of 25

8 No. of IPs < 25% 25% < No. of IPs < 50% 50% < No. of IPs < 5% 5% < No. of IPs Public IP Country Flag ASN ASN Name Malicious Reserved unknown unknown false United States GOOGLE-GoogleIncUS false United States GOOGLE-GoogleIncUS false Static File Info General File type: Zip archive data, at least v2.0 to extract Entropy (8bit): TrID: Android Package (19004/1) 46.91% Java Archive (13504/1) 33.33% ZIP compressed archive (4004/1) 9.88% Java Script embedded in Visual Basic Script (2000/0) 4.94% Java Script (2000/0) 4.94% File name: dronefly.apk File size: MD5: SHA1: SHA256: SHA512: File Content Preview: cb3f3a0ddfc5b9d26a8dc65b15d9b9a6 40b09141e66dce8c315f0ee90f4b1e3a5e5cc b19dbe5f82a dcbdc0585a020e08aa fa148cbf f346666b3ba03ef56a040bd0f ada92ca2 549c86682c55302aeef99da3a6b382b3c86a8bd12f156 35b648b3e86dad68d6a2b841b9ded090 PK..._{..S..A...META-INF/CERT.SF.}Y...<' "r..3.(...ZZ.B...8..cw...r.g=k...K...T'/.4...?... _..1J...9]...}..._...d...N...q4...Yi...,... File Icon Copyright Joe Security LLC 2018 Page 8 of 25

9 Static APK Info General Label: Drone Fly Minimum SDK required: 14 Target SDK required: 23 Version Code: 2 Version Name: 2 Package Name: com.dronefly.sample.dronie Is Activity: true Is Receiver: false Is Service: true Requests System Level Permissions: false Play Store Compatible: true Activities Name com.dronefly.sample.dronieorg.droidplanner.sample.dronie.q com.dronefly.sample.dronieorg.droidplanner.services.android.impl.ui.activity.usbintentreceiver Is Entrypoint true Receivers Services org.droidplanner.services.android.impl.api.droidplannerservice Intent: com.dronefly.services.android.lib.model.idroidplannerservices (Priority 0) Permission Requested android.permission.access_coarse_location android.permission.access_fine_location android.permission.access_network_state android.permission.access_wifi_state android.permission.bluetooth android.permission.bluetooth_admin android.permission.change_network_state android.permission.change_wifi_state android.permission.internet android.permission.write_external_storage Certificate Name: Issuer: Subject: classes.dex CN=Android Debug,O=Android,C=US CN=Android Debug,O=Android,C=US Resources Name Type Size abc_ic_commit_search_api_mtrl_alp ha. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 13 abc_screen_simple.xml data 82 abc_list_focused_holo.9. PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 222 abc_dialog_title_material.xml data 1156 abc_btn_check_to_on_mtrl_015. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 322 google_analytics_tracker.xml data 1892 abc_list_pressed_holo_light.9. PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced 221 abc_edit_text_material.xml data 1360 abc_menu_hardkey_panel_mtrl_mult.9. PNG image data, 64 x 24, 8-bit/color RGBA, non-interlaced 589 GoPro_Hero_3_Silver.xml XML document text 262 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 215 abc_scrubber_primary_mtrl_alpha.9. PNG image data, 15 x 18, 8-bit/color RGBA, non-interlaced 214 ic_stat_notify. PNG image data, 192 x 192, 8-bit colormap, non-interlaced 109 Copyright Joe Security LLC 2018 Page 9 of 25

10 common_google_signin_btn_icon_da PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2513 rk_focused.9. abc_switch_track_mtrl_alpha.9. PNG image data, 35 x 25, 8-bit/color RGBA, non-interlaced 538 _disabled.9. PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced 1212 common_google_signin_btn_icon_da PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1295 rk_focused.9. abc_switch_thumb_material.xml data 560 _normal.9. PNG image data, 146 x 62, 8-bit/color RGBA, non-interlaced 164 powered_by_google_light. PNG image data, 240 x 28, 8-bit/color RGBA, non-interlaced 496 places_ic_search. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 09 abc_ic_clear_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 308 Sentek GEMS V2.xml XML document text 254 abc_btn_radio_to_on_mtrl_015. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 85 _disabled.9. PNG image data, 165 x 0, 8-bit/color RGBA, non-interlaced 98 powered_by_google_dark. PNG image data, 240 x 28, 8-bit gray+alpha, non-interlaced 255 _pressed.9. abc_textfield_search_activated_mtrl _alpha.9. _pressed.9. _disabled.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 181 PNG image data, 36 x 10, 8-bit/color RGBA, non-interlaced 193 PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1618 PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced 95 abc_screen_toolbar.xml data 1632 Canon ELPH HS.xml XML document text 260 abc_list_selector_disabled_holo_ligh t.9. _disabled.9. _disabled.9. _focused.9. abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 13 x 41, 8-bit/color RGBA, non-interlaced 22 PNG image data, 146 x 62, 8-bit/color RGBA, non-interlaced 1252 PNG image data, 0 x 0, 8-bit/color RGBA, non-interlaced 1152 PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3080 PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 331 abc_btn_colored_material.xml data 1908 common_google_signin_btn_icon_da PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced 884 rk_disabled.9. abc_menu_hardkey_panel_mtrl_mult.9. PNG image data, 192 x 2, 8-bit/color RGBA, non-interlaced 19 abc_list_divider_mtrl_alpha.9. PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 16 common_full_open_on_phone. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 456 abc_spinner_mtrl_am_alpha.9. PNG image data, 18 x 24, 8-bit/color RGBA, non-interlaced 340 common_google_signin_btn_icon_da PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 142 rk_normal.9. _pressed.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 1901 abc_btn_radio_to_on_mtrl_015. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 563 ht_normal.9. ht_disabled.9. PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 2331 PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 1865 abc_btn_radio_to_on_mtrl_000. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 85 abc_btn_default_mtrl_shape.xml data 1092 _disabled.9. ht_normal.9. PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 8 PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 1190 Parrot_Sequoia_Monochrome.xml XML document text 263 switch_thumb_material_dark.xml data 468 ht_normal.9. PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 163 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 209 abc_list_focused_holo.9. PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced 244 abc_list_selector_background_transi tion_holo_light.xml data 508 common_google_signin_btn_icon_da PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2332 rk_pressed.9. Copyright Joe Security LLC 2018 Page 10 of 25

11 PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1824 rk_normal.9. common_google_signin_btn_icon_da PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1221 rk_pressed.9. abc_cab_background_top_mtrl_alph a.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 234 rk_disabled.9. PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 888 abc_fade_out.xml data 396 Mobius_A_Lens.xml XML document text 248 abc_list_pressed_holo_light.9. PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced 212 common_google_signin_btn_icon_da PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1860 rk_normal.9. rk_disabled.9. PNG image data, 146 x 62, 8-bit/color RGBA, non-interlaced 1282 builddef.lst ASCII text, with very lo lines 4662 abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 12 abc_ic_menu_paste_mtrl_am_alpha. rk_normal.9. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 226 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 123 abc_spinner_mtrl_am_alpha.9. PNG image data, 2 x 96, 8-bit/color RGBA, non-interlaced 513 notification_template_media.xml data 1428 _normal.9. abc_list_selector_disabled_holo_dar k.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1026 PNG image data, 42 x 126, 8-bit/color RGBA, non-interlaced 30 Parrot_Sequoia_RGB.xml XML document text 25 rk_normal.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 195 _focused.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2251 device_filter.xml data 184 abc_btn_check_to_on_mtrl_000. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 214 _disabled.9. _focused.9. PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 104 PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 104 abc_list_pressed_holo_dark.9. PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 211 _pressed.9. _normal.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3080 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1035 GoPro Hero 4 Black.xml XML document text 264 abc_list_selector_holo_dark.xml data 1208 activity_main.xml data 8036 abc_cab_background_internal_bg.x ml abc_ic_menu_copy_mtrl_am_alpha. data 436 PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 263 abc_ic_voice_search_api_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 2 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 261 version.txt ASCII text, with no line terminators 15 abc_secondary_text_material_dark.x ml data 468 abc_list_lopressed_holo.9. PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced 212 powered_by_google_light. PNG image data, 180 x 21, 8-bit/color RGBA, non-interlaced 23 _normal.9. PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 1869 abc_search_view.xml data 3696 _focused.9..xml PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 2338 data 836 list_item_tlog_info.xml data 444 abc_btn_radio_to_on_mtrl_000. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 651 _pressed.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 189 Copyright Joe Security LLC 2018 Page 11 of 25

12 abc_ic_commit_search_api_mtrl_alp PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 226 ha. abc_ic_menu_cut_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 10 abc_ic_menu_selectall_mtrl_alpha.p PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 30 abc_scrubber_control_to_pressed_m trl_005. PNG image data, 18 x 18, 8-bit gray+alpha, non-interlaced 200 abc_list_selector_disabled_holo_ligh t.9. PNG image data, 21 x 63, 8-bit/color RGBA, non-interlaced 240 abc_fade_in.xml data 396 ht.xml select_dialog_multichoice_material.x ml data 16 data 88 abc_ab_share_pack_mtrl_alpha.9.pn g PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 305 _normal.9. abc_action_bar_view_list_nav_layou t.xml _disabled.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 292 data 396 PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced 1922 abc_scrubber_control_to_pressed_m trl_005. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 631 ht_disabled.9. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 93 place_autocomplete_progress.xml data 496 abc_grow_fade_in_from_bottom.xml data 860 abc_btn_radio_to_on_mtrl_000. PNG image data, 48 x 48, 8-bit colormap, non-interlaced 621 abc_btn_switch_to_on_mtrl_ PNG image data, 81 x 81, 8-bit gray+alpha, non-interlaced 2804 abc_list_selector_disabled_holo_ligh t.9. PNG image data, 28 x 84, 8-bit/color RGBA, non-interlaced 253 abc_ic_menu_share_mtrl_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 20 abc_cab_background_top_mtrl_alph a.9. _pressed.9. PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced 225 PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 108 GoPro Hero 3+ Silver (Medium).xml XML document text 268 _normal.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3035 ht_focused.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 403 common_full_open_on_phone. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 456 _disabled.9. _focused.9. PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 213 PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3340 Canon S110 S120.xml XML document text 254 common_google_signin_btn_icon_da PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced 1233 rk_disabled.9. place_autocomplete_progress.xml data 396 notification_media_action.xml data 616 notification_template_media.xml data 1336 abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 180 abc_ic_search_api_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 669 common_google_signin_btn_icon_da PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1242 rk_normal.9. abc_scrubber_primary_mtrl_alpha.9. ht_focused.9. ht_disabled.9. _disabled.9. abc_scrubber_track_mtrl_alpha.9.pn g _disabled.9. PNG image data, 30 x 36, 8-bit/color RGBA, non-interlaced 218 PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 4335 PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 120 PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced 105 PNG image data, 30 x 36, 8-bit/color RGBA, non-interlaced 212 PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced 682 Copyright Joe Security LLC 2018 Page 12 of 25

13 abc_list_selector_disabled_holo_dar k.9. rk_pressed.9. PNG image data, 28 x 84, 8-bit/color RGBA, non-interlaced 254 PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 2442 _normal.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1542 abc_scrubber_control_off_mtrl_alpha. ht_pressed.9. rk_pressed.9. PNG image data, 18 x 48, 8-bit gray+alpha, non-interlaced 205 PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 165 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1254 ic_stat_notify. PNG image data, 2 x 2, 8-bit colormap, non-interlaced 398 rk_normal.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3694 abc_ic_star_half_black_36dp. PNG image data, 54 x 54, 8-bit gray+alpha, non-interlaced 328 abc_btn_rati_star_on_mtrl_alpha.p PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 52 _focused.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2029 places_ic_clear. PNG image data, 36 x 36, 8-bit colormap, non-interlaced 29 abc_spinner_mtrl_am_alpha.9. PNG image data, 2 x 36, 8-bit/color RGBA, non-interlaced 36. xml data 836 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 286 _pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1595 abc_ic_star_black_16dp. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 599 places_ic_search. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 259 abc_action_menu_layout.xml data 584 ht_pressed.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3214 ht_pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 189 common_full_open_on_phone. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 456 abc_ic_menu_cut_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 910 places_ic_clear. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 241 filepaths.xml data 380 place_autocomplete_item_powered_ by_google.xml ht_normal.9. data 1368 PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1801 abc_textfield_search_default_mtrl_al pha.9. _focused.9. select_dialog_silechoice_material. xml _focused.9. PNG image data, 12 x 3, 8-bit/color RGBA, non-interlaced 180 PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1813 data 88 PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 19 abc_ic_star_half_black_16dp. PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced 146 powered_by_google_dark. PNG image data, 120 x 14, 8-bit gray+alpha, non-interlaced 1125 GoPro Hero 3+ Black.xml XML document text 265 abc_popup_enter.xml data 512 notification_template_part_time.xml data 616 ht_pressed.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3500 abc_btn_switch_to_on_mtrl_ PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced 1548 abc_tab_indicator_mtrl_alpha.9. PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced 199 abc_textfield_activated_mtrl_alpha.9. abc_list_selector_disabled_holo_dar k.9. PNG image data, 12 x 11, 8-bit/color RGBA, non-interlaced 186 PNG image data, 21 x 63, 8-bit/color RGBA, non-interlaced 239 abc_btn_check_to_on_mtrl_015. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 404 abc_dialog_title_material.xml data 1112 Sentek GEMS V0.xml XML document text 253 _focused.9. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1899 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 284 Copyright Joe Security LLC 2018 Page 13 of 25

14 _focused.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 152 select_dialog_item_material.xml data 648 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 214 abc_ic_star_black_16dp. PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced 193 abc_scrubber_track_mtrl_alpha.9.pn g PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced 20 ht_focused.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 135 abc_textfield_activated_mtrl_alpha.9. PNG image data, 38 x 33, 8-bit/color RGBA, non-interlaced 202 abc_ic_clear_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 421 rk_focused.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 2633 places_ic_clear. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 11 abc_list_lopressed_holo.9. PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced 214 ht_focused.9. rk_focused.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 2051 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1330 abc_btn_check_to_on_mtrl_015. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 46 abc_ic_star_half_black_16dp. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 36 abc_ic_go_search_api_mtrl_alpha.p PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced 102 common_google_signin_btn_icon_da PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1826 rk_focused.9. abc_action_mode_close_item_mater ial.xml data 592 abc_ic_star_black_36dp. PNG image data, 54 x 54, 8-bit gray+alpha, non-interlaced 522 _normal.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1000 abc_alert_dialog_material.xml data 3328 abc_seekbar_thumb_material.xml data 1232 abc_list_divider_mtrl_alpha.9. PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 16 _focused.9. _pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1844 PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 158 abc_list_focused_holo.9. PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced 244 ht_focused.9. PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1394 abc_alert_dialog_button_bar_materia data 1692 l.xml abc_ratibar_indicator_material.xml data 60 abc_ic_menu_selectall_mtrl_alpha.p abc_textfield_search_default_mtrl_al pha.9. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 262 PNG image data, 36 x 10, 8-bit/color RGBA, non-interlaced 196 Canon ELPH IS.xml XML document text 260 ht_focused.9. abc_cab_background_top_mtrl_alph a.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 2115 PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced 246 abc_search_url_text.xml data 596 _pressed.9. abc_btn_rati_star_off_mtrl_alpha. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 991 PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 1345 ht_normal.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3249 _normal.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1532 abc_spinner_mtrl_am_alpha.9. PNG image data, 2 x 36, 8-bit/color RGBA, non-interlaced 368 common_google_signin_btn_icon_da PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3431 rk_normal.9. abc_ic_search_api_mtrl_alpha. PNG image data, 24 x 24, 8-bit colormap, non-interlaced 389 powered_by_google_dark. PNG image data, 480 x 56, 8-bit colormap, non-interlaced 5146 abc_scrubber_control_to_pressed_m trl_005. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 39 _pressed.9. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1640 Copyright Joe Security LLC 2018 Page 14 of 25

15 notification_template_lines.xml data 2848 _pressed.9. abc_textfield_activated_mtrl_alpha.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1526 PNG image data, 19 x 16, 8-bit/color RGBA, non-interlaced 192 abc_btn_switch_to_on_mtrl_ PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced 2606 resources.arsc data abc_ic_menu_share_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 899 abc_scrubber_control_to_pressed_m trl_000. PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced 145 abc_primary_text_material_light.xml data 468 ht_normal.9. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 142 ht_pressed.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 115 Sony RX100 M3 0mm.xml XML document text 259 _normal.9. abc_ic_menu_moreoverflow_mtrl_al pha. _pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1608 PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 133 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 99 abc_scrubber_control_to_pressed_m trl_000. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 415 abc_ratibar_full_material.xml data 664 abc_list_menu_item_icon.xml data 688 common_google_signin_btn_icon_da PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 116 rk_pressed.9. notification_template_big_media.xml data 1640 _normal.9. _focused.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1615 PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 2139 ArduSolo.xml XML document text 1501 places_ic_search. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 915 ht_pressed.9. PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1189 abc_tab_indicator_mtrl_alpha.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 208 _pressed.9. PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1548 MANIFEST.MF ASCII text, with CRLF line terminators abc_btn_check_to_on_mtrl_015. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 432 abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 19 abc_popup_exit.xml data 512 ic_launcher. PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced 2156 ht.xml data 836 abc_scrubber_primary_mtrl_alpha.9. PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced 219 abc_list_selector_holo_light.xml data 1208 abc_btn_check_to_on_mtrl_000. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 22 abc_ic_star_half_black_36dp. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 421 ht.xml data 836 abc_list_pressed_holo_dark.9. PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced 212 ic_launcher. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1381 abc_ic_menu_paste_mtrl_am_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 462 _normal.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 188 abc_scrubber_control_to_pressed_m trl_005. abc_btn_switch_to_on_mtrl_ PNG image data, 54 x 54, 8-bit gray+alpha, non-interlaced 602 PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced 3853 abc_list_lopressed_holo.9. PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced 221 abc_ic_star_black_36dp. PNG image data, 108 x 108, 8-bit gray+alpha, non-interlaced 983 abc_background_cache_hint_select or_material_light.xml data 42 common_full_open_on_phone. PNG image data, 128 x 128, 8-bit colormap, non-interlaced 482 Copyright Joe Security LLC 2018 Page 15 of 25

16 . xml data 16 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 25 abc_switch_track_mtrl_alpha.9. PNG image data, 4 x 32, 8-bit/color RGBA, non-interlaced 41 _focused.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1192 abc_btn_check_to_on_mtrl_000. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 26 abc_btn_check_material.xml data 560 abc_scrubber_track_mtrl_alpha.9.pn g _normal.9. PNG image data, 15 x 18, 8-bit/color RGBA, non-interlaced 201 PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 190 CERT.SF ASCII text, with CRLF line terminators 6585 Sony NEX5 16mm.xml XML document text 256 abc_btn_radio_to_on_mtrl_015. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 1208 abc_list_selector_background_transi tion_holo_dark.xml data 508 abc_ab_share_pack_mtrl_alpha.9.pn g PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced 29 abc_activity_chooser_view.xml data 128 _pressed.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 1954 place_autocomplete_fragment.xml data 1692 abc_background_cache_hint_select or_material_dark.xml data 42 abc_ic_clear_mtrl_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 10 _focused.9. PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1206 ht_focused.9. PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced 193 powered_by_google_light. PNG image data, 360 x 42, 8-bit/color RGBA, non-interlaced 5549 select_dialog_multichoice_material.x ml data 82 ArduRover.xml XML document text 51 abc_list_selector_disabled_holo_dar k.9. PNG image data, 13 x 41, 8-bit/color RGBA, non-interlaced 226 notification_template_lines.xml data 266 abc_tab_indicator_mtrl_alpha.9. PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced 210 rk_focused.9. abc_btn_switch_to_on_mtrl_ abc_dialog_material_background_da rk.xml PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1939 PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced 1124 data 844 abc_spinner_mtrl_am_alpha.9. PNG image data, 36 x 48, 8-bit/color RGBA, non-interlaced 483 _normal.9. _focused.9. PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 99 PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1600 abc_ic_menu_share_mtrl_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 389 place_autocomplete_fragment.xml data 1692 _disabled.9. ht_focused.9. _pressed.9. PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 1122 PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1985 PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 234 places_ic_clear. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 313 abc_spinner_mtrl_am_alpha.9. PNG image data, 54 x 2, 8-bit/color RGBA, non-interlaced 593 _disabled.9. _pressed.9. PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 69 PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1033 Canon A2300 A2400.xml XML document text 254 GoPro Hero 3+ Silver (Wide).xml XML document text 266 Sony QX1 16mm.xml XML document text 252 abc_seekbar_track_material.xml data 1532 abc_ic_menu_paste_mtrl_am_alpha. abc_popup_background_mtrl_mult.9. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 152 PNG image data, 192 x 96, 8-bit/color RGBA, non-interlaced 24 Copyright Joe Security LLC 2018 Page 16 of 25

17 abc_list_pressed_holo_light.9. PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced 214 abc_item_background_holo_dark.xm l data 1136 ic_stat_notify. PNG image data, 48 x 48, 8-bit colormap, non-interlaced 548 places_ic_search. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 412 common_google_signin_btn_icon_da PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced 1519 rk_disabled.9. ht_normal.9. _normal.9. PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 34 PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1608 ht_disabled.9. PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced 16 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 353 menu_main.xml data 568 _pressed.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3020 abc_list_focused_holo.9. PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced 245 abc_search_view.xml data 3648 common_google_signin_btn_icon_da PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1948 rk_focused.9. abc_btn_check_to_on_mtrl_000. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 281 abc_color_highlight_material.xml data 548 select_dialog_silechoice_material. xml data 82 notification_media_cancel_action.xm l data 92 Sony RX100 M3 24mm.xml XML document text 258 abc_ic_star_half_black_36dp. PNG image data, 108 x 108, 8-bit colormap, non-interlaced 1101 ht_pressed.9. PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1654 abc_list_pressed_holo_dark.9. PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced 214 classes.dex Dalvik dex file version common_google_signin_btn_icon_da PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3384 rk_pressed.9. abc_secondary_text_material_light.x ml abc_textfield_search_default_mtrl_al pha.9. _disabled.9. data 468 PNG image data, 18 x 5, 8-bit/color RGBA, non-interlaced 182 PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced 934 Canon SX260.xml XML document text 341 _normal.9. abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1666 PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 133 rk_disabled.9. PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 1630 abc_textfield_search_activated_mtrl _alpha.9. PNG image data, 24 x 6, 8-bit/color RGBA, non-interlaced 190 rk_pressed.9. PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 1804 abc_btn_rati_star_off_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 81 abc_ic_star_black_36dp. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 652 abc_ic_clear_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 264 abc_action_bar_up_container.xml data 448 rk.xml data 836 ht_pressed.9. abc_btn_rati_star_off_mtrl_alpha. abc_item_background_holo_light.xm l PNG image data, 148 x 65, 8-bit/color RGBA, non-interlaced 120 PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 16 data 1136 ArduCopter.xml XML document text 1501 Sony NEX5 25mm.xml XML document text 258 _pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1686 abc_btn_radio_material.xml data 560 abc_btn_radio_to_on_mtrl_000. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 984 Copyright Joe Security LLC 2018 Page 1 of 25

18 abc_scrubber_control_to_pressed_m PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 26 trl_000. ht_normal.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1916 support_simple_spinner_dropdown_it data 508 em.xml place_autocomplete_item_powered_ by_google.xml data 1256 abc_action_mode_bar.xml data 500 _focused.9. _focused.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 3494 PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1105 abc_ab_share_pack_mtrl_alpha.9.pn g PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced 24 abc_ic_star_half_black_16dp. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 19 common_google_signin_btn_icon_da PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced 1835 rk_pressed.9. abc_ic_voice_search_api_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 409 abc_btn_radio_to_on_mtrl_015. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 356 abc_btn_rati_star_on_mtrl_alpha.p PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced 84 abc_slide_in_bottom.xml data 400 abc_textfield_search_default_mtrl_al pha.9. PNG image data, 24 x 6, 8-bit/color RGBA, non-interlaced 190 abc_ic_menu_share_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 480 common_google_signin_btn_icon_da data 836 rk.xml abc_btn_rati_star_off_mtrl_alpha. abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced 1521 PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 328 places_ic_clear. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 388 CERT.RSA data 1203 _focused.9. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3800 abc_ic_menu_cut_mtrl_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 258 abc_ic_commit_search_api_mtrl_alp ha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 11 abc_ratibar_small_material.xml data 60 abc_ratibar_indicator_material.xml data 12 abc_btn_colored_material.xml data 428 common_google_signin_btn_icon_da PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 30 rk_focused.9. ic_stat_notify. PNG image data, 144 x 144, 8-bit colormap, non-interlaced 133 Canon S90.xml XML document text 248 common_full_open_on_phone. PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 521 powered_by_google_light. PNG image data, 480 x 56, 8-bit/color RGBA, non-interlaced 9864 abc_textfield_default_mtrl_alpha.9.p PNG image data, 25 x 22, 8-bit/color RGBA, non-interlaced 19 ic_launcher. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 4933 abc_scrubber_control_off_mtrl_alpha. PNG image data, 24 x 64, 8-bit gray+alpha, non-interlaced 22 switch_thumb_material_light.xml data 468 abc_switch_track_mtrl_alpha.9. PNG image data, 94 x 64, 8-bit/color RGBA, non-interlaced 1025 AndroidManifest.xml data 636 abc_btn_borderless_material.xml data 00 abc_search_dropdown_item_icons_2 data 2204 line.xml abc_ic_menu_selectall_mtrl_alpha.p PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 139 abc_list_menu_item_checkbox.xml data 536 abc_scrubber_control_to_pressed_m trl_000. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 404 abc_alert_dialog_material.xml data 3284 Sony QX1 20mm.xml XML document text 252 abc_textfield_activated_mtrl_alpha.9. PNG image data, 25 x 22, 8-bit/color RGBA, non-interlaced 198 abc_scrubber_control_to_pressed_m trl_005. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 28 Copyright Joe Security LLC 2018 Page 18 of 25

19 abc_btn_switch_to_on_mtrl_ PNG image data, 81 x 81, 8-bit/color RGBA, non-interlaced 355. _focused.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 106 Sentek GEMS V1.xml XML document text 253 abc_activity_chooser_view_list_item. xml data 122 _pressed.9. abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1034 PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 199 abc_list_divider_mtrl_alpha.9. PNG image data, 1 x 1, 8-bit grayscale, non-interlaced 16 abc_scrubber_primary_mtrl_alpha.9. abc_ic_go_search_api_mtrl_alpha.p PNG image data, 10 x 12, 8-bit/color RGBA, non-interlaced 208 PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 145 abc_ic_star_black_16dp. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 263 ht_disabled.9. rk_pressed.9. PNG image data, 0 x 0, 8-bit/color RGBA, non-interlaced 981 PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3650 abc_spinner_mtrl_am_alpha.9. PNG image data, 36 x 48, 8-bit/color RGBA, non-interlaced 489 _disabled.9. PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced 1305 abc_ic_search_api_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 855 abc_ic_menu_cut_mtrl_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 255 abc_slide_in_top.xml data 400 abc_slide_out_bottom.xml data 400 Canon ELPH 330 HS.xml XML document text 256 abc_spinner_textfield_background_ material.xml data 1328 abc_btn_radio_to_on_mtrl_000. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 326 _disabled.9. abc_ic_menu_moreoverflow_mtrl_al pha. abc_dialog_material_background_lig ht.xml PNG image data, 218 x 92, 8-bit/color RGBA, non-interlaced 1385 PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 306 data 844 abc_expanded_menu_layout.xml data 396 Sony NEX5 20mm.xml XML document text 258 ic_stat_notify. PNG image data, 96 x 96, 8-bit colormap, non-interlaced 93 abc_textfield_search_activated_mtrl _alpha.9. PNG image data, 18 x 5, 8-bit/color RGBA, non-interlaced 182 abc_scrubber_control_off_mtrl_alpha. PNG image data, 12 x 32, 8-bit gray+alpha, non-interlaced 160 ArduPlane.xml XML document text 51 ht_normal.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2221 Canon ELPH 520 HS.xml XML document text 256 _disabled.9. _focused.9. abc_control_background_material.x ml PNG image data, 0 x 0, 8-bit/color RGBA, non-interlaced 952 PNG image data, 111 x 48, 8-bit/color RGBA, non-interlaced 1102 data 380 rk_pressed.9. PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1953 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 351 rk_normal.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 246 abc_list_menu_item_layout.xml data 1404 abc_scrubber_control_off_mtrl_alpha. PNG image data, 36 x 96, 8-bit gray+alpha, non-interlaced 326 abc_ic_go_search_api_mtrl_alpha.p PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 13 abc_screen_content_include.xml data 556 abc_tab_indicator_mtrl_alpha.9. PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced 205 abc_edit_text_material.xml data 1040 _normal.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 218 Copyright Joe Security LLC 2018 Page 19 of 25

20 place_autocomplete_item_prediction data 1820.xml ht_disabled.9. PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced 166 powered_by_google_light. PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced 188 abc_switch_track_mtrl_alpha.9. PNG image data, 24 x 16, 8-bit/color RGBA, non-interlaced 428 rk_focused.9. abc_ic_voice_search_api_mtrl_alpha. PNG image data, 333 x 144, 8-bit/color RGBA, non-interlaced 3988 PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 30 abc_ic_search_api_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 450 abc_ic_menu_moreoverflow_mtrl_al pha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 154 abc_ic_star_black_16dp. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 459 abc_ic_menu_selectall_mtrl_alpha.p PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 190 abc_btn_rati_star_on_mtrl_alpha.p PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 859. xml data 836 abc_ic_voice_search_api_mtrl_alpha. abc_menu_hardkey_panel_mtrl_mult.9. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 235 PNG image data, 128 x 48, 8-bit/color RGBA, non-interlaced 1122 abc_shrink_fade_out_from_bottom.x ml data 860 powered_by_google_dark. PNG image data, 180 x 21, 8-bit gray+alpha, non-interlaced 1838 ht_disabled.9. PNG image data, 109 x 46, 8-bit/color RGBA, non-interlaced 30 abc_tab_indicator_material.xml data 564 Sony RX100_M3 50mm.xml XML document text 24 abc_ic_star_black_36dp. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 364 abc_spinner_mtrl_am_alpha.9. PNG image data, 54 x 2, 8-bit/color RGBA, non-interlaced 595 abc_action_bar_title_item.xml data 940 abc_popup_background_mtrl_mult.9. PNG image data, 64 x 32, 8-bit/color RGBA, non-interlaced 850 abc_list_divider_mtrl_alpha.9. PNG image data, 2 x 2, 8-bit grayscale, non-interlaced 11 ht_focused.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 2800 abc_btn_switch_to_on_mtrl_ PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced 148 _disabled.9. PNG image data, 146 x 62, 8-bit/color RGBA, non-interlaced 961 abc_ic_menu_cut_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 492 abc_ic_star_half_black_36dp. PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced 60 abc_textfield_default_mtrl_alpha.9.p PNG image data, 19 x 16, 8-bit/color RGBA, non-interlaced 198 abc_ic_menu_cut_mtrl_alpha. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 494 abc_ic_ab_back_mtrl_am_alpha. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 212 abc_ic_search_api_mtrl_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 386 abc_list_lopressed_holo.9. PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 211 abc_primary_text_disable_only_mat erial_dark.xml data 468 abc_primary_text_material_dark.xml data 468 abc_cab_background_top_mtrl_alph a.9. PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced 229 abc_ic_clear_mtrl_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 208 notification_template_big_media_nar row.xml data 1660 abc_textfield_default_mtrl_alpha.9.p PNG image data, 12 x 11, 8-bit/color RGBA, non-interlaced 185 abc_menu_hardkey_panel_mtrl_mult.9. notification_template_big_media_nar row.xml PNG image data, 96 x 36, 8-bit/color RGBA, non-interlaced 81 data 1920 _disabled.9. PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced 1529 abc_btn_switch_to_on_mtrl_ rk_focused.9. PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced 2259 PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 2040 Copyright Joe Security LLC 2018 Page 20 of 25

21 abc_btn_check_to_on_mtrl_015. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 593 abc_ic_voice_search_api_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 58 common_ic_googleplayservices. PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced 465 ht_pressed.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2234 abc_action_menu_item_layout.xml data 804 _normal.9. PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced 1591 abc_list_pressed_holo_light.9. PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced 211 abc_scrubber_control_to_pressed_m trl_000. PNG image data, 18 x 18, 8-bit gray+alpha, non-interlaced 19 abc_slide_out_top.xml data 400 abc_action_bar_item_background_m aterial.xml data 336 abc_scrubber_track_mtrl_alpha.9.pn g abc_ic_commit_search_api_mtrl_alp ha. abc_ic_menu_selectall_mtrl_alpha.p PNG image data, 10 x 12, 8-bit/color RGBA, non-interlaced 19 PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced 228 PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 21 abc_ic_menu_paste_mtrl_am_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 348 ht_pressed.9. PNG image data, 222 x 96, 8-bit/color RGBA, non-interlaced 233 isoparser-default.properties ASCII text 1223 abc_textfield_default_mtrl_alpha.9.p abc_textfield_search_activated_mtrl _alpha.9. PNG image data, 38 x 33, 8-bit/color RGBA, non-interlaced 204 PNG image data, 12 x 3, 8-bit/color RGBA, non-interlaced 181 notification_template_part_chronome ter.xml data 616 common_google_signin_btn_icon_da PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2361 rk_normal.9. ic_launcher. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 312 abc_ic_star_half_black_16dp. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 309 ParameterMetaData.xml XML document text abc_alert_dialog_button_bar_materia data 1648 l.xml abc_ic_menu_share_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 00 abc_screen_toolbar.xml data 1580 Canon S100.xml XML document text 289 abc_ic_star_black_36dp. PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced 1269 notification_template_part_chronome ter.xml abc_popup_background_mtrl_mult.9. data 660 PNG image data, 96 x 48, 8-bit/color RGBA, non-interlaced 1256 abc_ic_menu_moreoverflow_mtrl_al pha. abc_list_selector_disabled_holo_ligh t.9. PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 110 PNG image data, 42 x 126, 8-bit/color RGBA, non-interlaced 305 abc_textfield_search_material.xml data 880 ht_normal.9. ht_disabled.9. PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced 1196 PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced 928 abc_ic_go_search_api_mtrl_alpha.p PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced 112 abc_cab_background_top_material.x ml abc_btn_switch_to_on_mtrl_ data 412 PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced 3524 powered_by_google_dark. PNG image data, 360 x 42, 8-bit gray+alpha, non-interlaced 3844 places_ic_search. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 483 abc_ratibar_small_material.xml data 12 Mobius_B_Lens.xml XML document text 248 abc_ic_menu_cut_mtrl_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 404 common_google_signin_btn_icon_da PNG image data, 0 x 0, 8-bit/color RGBA, non-interlaced 123 rk_disabled.9. abc_tab_indicator_mtrl_alpha.9. PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced 192 abc_ic_star_black_16dp. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 333 Copyright Joe Security LLC 2018 Page 21 of 25

22 abc_list_menu_item_radio.xml data 536 abc_btn_rati_star_on_mtrl_alpha.p PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 521. xml abc_ic_menu_copy_mtrl_am_alpha. abc_ic_menu_moreoverflow_mtrl_al pha. abc_screen_simple_overlay_action_ mode.xml _disabled.9. data 16 PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 262 PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 205 data 828 PNG image data, 165 x 0, 8-bit/color RGBA, non-interlaced 1223 rk.xml data 16 abc_ic_menu_cut_mtrl_alpha. PNG image data, 2 x 2, 8-bit gray+alpha, non-interlaced 05 abc_switch_track_mtrl_alpha.9. PNG image data, 1 x 48, 8-bit/color RGBA, non-interlaced 1060 abc_ic_star_half_black_36dp. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 253 abc_select_dialog_material.xml data 68 abc_ic_star_half_black_16dp. PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced 235 notification_template_big_media.xml data 180. xml data 836 abc_ic_menu_cut_mtrl_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 400 common_google_signin_btn_icon_da PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced 2180 rk_disabled.9. abc_ic_menu_copy_mtrl_am_alpha. PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced 202 abc_spinner_mtrl_am_alpha.9. PNG image data, 18 x 24, 8-bit/color RGBA, non-interlaced 342 abc_btn_radio_to_on_mtrl_015. PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced 946 ht_focused.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 2691 abc_ic_menu_cut_mtrl_alpha. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 905 rk_disabled.9. PNG image data, 165 x 0, 8-bit/color RGBA, non-interlaced 1299 _normal.9. place_autocomplete_item_prediction.xml PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 2936 data 1936 GoPro Hero 3+ White.xml XML document text 264 activity_main.xml data 8180 ht_disabled.9. PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced 119 _pressed.9. PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced 2813 abc_spinner_mtrl_am_alpha.9. PNG image data, 2 x 96, 8-bit/color RGBA, non-interlaced 518 abc_ic_menu_paste_mtrl_am_alpha. rk_disabled.9. abc_btn_switch_to_on_mtrl_ abc_popup_background_mtrl_mult.9. PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced 243 PNG image data, 32 x 138, 8-bit/color RGBA, non-interlaced 2432 PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced 104 PNG image data, 128 x 64, 8-bit/color RGBA, non-interlaced 185 abc_popup_menu_item_layout.xml data 1548 ht_disabled.9. abc_primary_text_disable_only_mat erial_light.xml PNG image data, 168 x 3, 8-bit/color RGBA, non-interlaced 1052 data 468 abc_btn_check_to_on_mtrl_000. PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced 308 abc_list_pressed_holo_dark.9. PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced 221 notification_template_part_time.xml data 660 abc_ab_share_pack_mtrl_alpha.9.pn g PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced 28 _normal.9. PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced 1810 abc_text_cursor_material.xml data 600 activity_video_stream.xml data 32 Copyright Joe Security LLC 2018 Page 22 of 25