23:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 24:T2a28,"libapplovin-native-crash-reporter.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked for Android 21 built by NDK r23c (8568313) BuildID[sha1]=6a7c22837aa286d5f3fe79eb7844471d0b730040 stripped"- [targetUID: N/A] "libnative-lib.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked for Android 24 built by NDK r29-beta4 (14033849) BuildID[sha1]=34e0745693d04862078b838d36e62caa82e134d3 stripped"- [targetUID: N/A] "libunitycoherencenative.so" has type "ELF 64-bit LSB shared object ARM aarch64 version 1 (SYSV) dynamically linked for Android 21 built by NDK r25c (9519653) BuildID[sha1]=85abeee7dc2146af74926146726b1800605290d5 stripped"- [targetUID: N/A] "libtt_ugen_layout.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 19 built by NDK r22b (7171670) BuildID[sha1]=ac15077ce04b446da7ebbe2e872420685e21d0cc stripped"- [targetUID: N/A] "libnms.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 19 built by NDK r25c (9519653) BuildID[sha1]=22286b5dd3be90902b89cee1fd08588ad636549e stripped"- [targetUID: N/A] "KEY0.SF" has type "JAR Signature File ASCII text with CRLF line terminators"- [targetUID: N/A] "MANIFEST.MF" has type "JAR Manifest ASCII text with CRLF line terminators"- [targetUID: N/A] "libapminsightb.so" has type "ELF 32-bit LSB pie executable ARM EABI5 version 1 (SYSV) dynamically linked interpreter /system/bin/linker for Android 21 built by NDK r26d (11579264) BuildID[sha1]=08b31b5559460aaf10a4d3e9c5404aa20b746182 stripped"- [targetUID: N/A] "libapminsighta.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 21 built by NDK r26d (11579264) BuildID[sha1]=ae3cf606801d97dc1f9225c41d8d836283651edf stripped"- [targetUID: N/A] "librtmp-jni.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 16 built by NDK r21e (7075529) BuildID[sha1]=10ee3af09dfb7b1968d58c0d6f6a21c1ba73e84a stripped"- [targetUID: N/A] "libpglarmor.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 19 built by NDK r25c (9519653) BuildID[sha1]=c3db5b1bd64ae94f3a3dafabe2f2ecdea96a7895 stripped"- [targetUID: N/A] "AndroidManifest.xml" has type "Android binary XML"- [targetUID: N/A] "libpl_droidsonroids_gif.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 21 built by NDK r26d (11579264) BuildID[sha1]=f76cf9be0aaa7b544be1ec6340864b30dd5a2dbe stripped"- [targetUID: N/A] "kotlin.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xaf4 x 0x160a y 0x66b z 0x6f74"- [targetUID: N/A] "collections.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xabb x 0x70a y 0x66b z 0x6f74"- [targetUID: N/A] "libbuffer_pgl.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 19 built by NDK r22b (7171670) BuildID[sha1]=66a36bbb57cc940fc182f1b55d30016feddf471f stripped"- [targetUID: N/A] "libtobEmbedPagEncrypt.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 21 built by NDK r22b (7171670) BuildID[sha1]=4bf28347a950f68ed606efb31f1ddef43843f483 stripped"- [targetUID: N/A] "reflect.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xafa x 0x50a y 0x66b z 0x6f74"- [targetUID: N/A] "libfile_lock_pgl.so" has type "ELF 32-bit LSB shared object ARM EABI5 version 1 (SYSV) dynamically linked for Android 19 built by NDK r22b (7171670) BuildID[sha1]=509b080cb9f5abf45747980bc20c1d801cdbf6e8 stripped"- [targetUID: N/A] "ranges.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xaec x 0x90a y 0x66b z 0x6f74"- [targetUID: N/A] "KEY0.RSA" has type "DER Encoded PKCS#7 Signed Data"- [targetUID: N/A] "annotation.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xa87 x 0x30a y 0x66b z 0x6f74"- [targetUID: N/A] "internal.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xa8b x 0x20a y 0x66b z 0x6f74"- [targetUID: N/A] "coroutines.kotlin_builtins" has type "Adobe Photoshop Color swatch version 0 3 colors; 1st RGB space (0) w 0x1 x 0 y 0 z 0; 2nd Lab space (7) w 0xa4f x 0xa33 y 0x6861 z 0x636b"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel-savedstate.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-livedata-core.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-runtime-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-viewmodel.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-livedata.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-service.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-process.version" has type "ASCII text"- [targetUID: N/A] "androidx.arch.core_core-runtime.version" has type "ASCII text"- [targetUID: N/A] "kotlinx.coroutines.CoroutineExceptionHandler" has type "ASCII text"- [targetUID: N/A] "kotlinx.coroutines.internal.MainDispatcherFactory" has type "ASCII text"- [targetUID: N/A] "version-control-info.textproto" has type "ASCII text"- [targetUID: N/A] "androidx.privacysandbox.ads_ads-adservices-java.version" has type "ASCII text"- [targetUID: N/A] "androidx.viewpager2_viewpager2.version" has type "ASCII text"- [targetUID: N/A] "androidx.core_core-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.webkit_webkit.version" has type "ASCII text"- [targetUID: N/A] "androidx.media_media.version" has type "ASCII text"- [targetUID: N/A] "androidx.profileinstaller_profileinstaller.version" has type "ASCII text"- [targetUID: N/A] "androidx.work_work-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.datastore_datastore.version" has type "ASCII text"- [targetUID: N/A] "androidx.customview_customview.version" has type "ASCII text"- [targetUID: N/A] "androidx.drawerlayout_drawerlayout.version" has type "ASCII text"- [targetUID: N/A] "kotlinx_coroutines_android.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "androidx.sqlite_sqlite.version" has type "ASCII text"- [targetUID: N/A] "androidx.room_room-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.savedstate_savedstate.version" has type "ASCII text"- [targetUID: N/A] "androidx.appcompat_appcompat-resources.version" has type "ASCII text"- [targetUID: N/A] "androidx.startup_startup-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.annotation_annotation-experimental.version" has type "ASCII text"- [targetUID: N/A] "androidx.activity_activity-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.fragment_fragment.version" has type "ASCII text"- [targetUID: N/A] "androidx.exifinterface_exifinterface.version" has type "ASCII text"- [targetUID: N/A] "androidx.lifecycle_lifecycle-extensions.version" has type "ASCII text"- [targetUID: N/A] "androidx.databinding_viewbinding.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "androidx.privacysandbox.ads_ads-adservices.version" has type "ASCII text"- [targetUID: N/A] "androidx.core_core.version" has type "ASCII text"- [targetUID: N/A] "androidx.localbroadcastmanager_localbroadcastmanager.version" has type "ASCII text"- [targetUID: N/A] "androidx.asynclayoutinflater_asynclayoutinflater.version" has type "ASCII text"- [targetUID: N/A] "androidx.customview_customview-poolingcontainer.version" has type "ASCII text"- [targetUID: N/A] "androidx.vectordrawable_vectordrawable.version" has type "ASCII text"- [targetUID: N/A] "androidx.legacy_legacy-support-core-ui.version" has type "ASCII text"- [targetUID: N/A] "androidx.cardview_cardview.version" has type "ASCII text"- [targetUID: N/A] "kotlinx_coroutines_core.version" has type "ASCII text with no line terminators"- [targetUID: N/A] "androidx.cursoradapter_cursoradapter.version" has type "ASCII text"- [targetUID: N/A] "androidx.sqlite_sqlite-framework.version" has type "ASCII text"- [targetUID: N/A] "androidx.recyclerview_recyclerview.version" has type "ASCII text"- [targetUID: N/A] "androidx.documentfile_documentfile.version" has type "ASCII text"- [targetUID: N/A] "androidx.legacy_legacy-support-v4.version" has type "ASCII text"- [targetUID: N/A] "androidx.savedstate_savedstate-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.coordinatorlayout_coordinatorlayout.version" has type "ASCII text"- [targetUID: N/A] "androidx.swiperefreshlayout_swiperefreshlayout.version" has type "ASCII text"- [targetUID: N/A] "androidx.tracing_tracing.version" has type "ASCII text"- [targetUID: N/A] "androidx.dynamicanimation_dynamicanimation.version" has type "ASCII text"- [targetUID: N/A] "androidx.legacy_legacy-support-core-utils.version" has type "ASCII text"- [targetUID: N/A] "androidx.transition_transition.version" has type "ASCII text"- [targetUID: N/A] "androidx.slidingpanelayout_slidingpanelayout.version" has type "ASCII text"- [targetUID: N/A] "androidx.versionedparcelable_versionedparcelable.version" has type "ASCII text"- [targetUID: N/A] "com.google.android.material_material.version" has type "ASCII text"- [targetUID: N/A] "androidx.appcompat_appcompat.version" has type "ASCII text"- [targetUID: N/A] "androidx.loader_loader.version" has type "ASCII text"- [targetUID: N/A] "androidx.print_print.version" has type "ASCII text"- [targetUID: N/A] "androidx.work_work-runtime-ktx.version" has type "ASCII text"- [targetUID: N/A] "androidx.interpolator_interpolator.version" has type "ASCII text"- [targetUID: N/A] "androidx.viewpager_viewpager.version" has type "ASCII text"- [targetUID: N/A] "androidx.browser_browser.version" has type "ASCII text"- [targetUID: N/A] "androidx.room_room-runtime.version" has type "ASCII text"- [targetUID: N/A] "androidx.activity_activity.version" has type "ASCII text"- [targetUID: N/A] "androidx.vectordrawable_vectordrawable-animated.version" has type "ASCII text"- [targetUID: N/A]25:T84a1,Heuristic match: "vfs.cloud9.ap-east-1.amazonaws.com" Heuristic match: "platter-app.com" Heuristic match: "playstation-cloud.com" Heuristic match: "is-a-libertarian.com" Heuristic match: "emrappui-prod.ap-northeast-1.amazonaws.com" Pattern match: "http://tizen.org/system/model_name" Heuristic match: "is-a-therapist.com" Heuristic match: "simplesite.pl" Heuristic match: "simple-url.com" Heuristic match: "bigoad.com" Heuristic match: "is-a-lawyer.com" Heuristic match: "auth.us-east-2.amazoncognito.com" Heuristic match: "s3-1.amazonaws.com" Heuristic match: "dev-myqnapcloud.com" Heuristic match: "is-a-cubicle-slave.com" Heuristic match: "emrnotebooks-prod.eu-north-1.amazonaws.com" Heuristic match: "is-a-liberal.com" Heuristic match: "isa-geek.com" Heuristic match: "awsapps.com" Pattern match: "www.ro" Heuristic match: "us.com" Heuristic match: "us-1.evennode.com" Heuristic match: "unicloud.pl" Heuristic match: "config.pl" Heuristic match: "dnsabr.com" Heuristic match: "from-id.com" Heuristic match: "skygearapp.com" Heuristic match: "s3-deprecated.us-west-2.amazonaws.com" Heuristic match: "auth.me-central-1.amazoncognito.com" Heuristic match: "s3-website.sa-east-1.amazonaws.com" Heuristic match: "001www.com" Heuristic match: "theworkpc.com" Heuristic match: "discordsez.com" Heuristic match: "s3-website.us-east-1.amazonaws.com" Heuristic match: "pabianice.pl" Heuristic match: "s3.us-west-2.amazonaws.com" Heuristic match: "s3-website.eu-central-2.amazonaws.com" Heuristic match: "is-a-rockstar.com" Heuristic match: "wpdevcloud.com" Heuristic match: "from-ca.com" Heuristic match: "s3.dualstack.us-east-1.amazonaws.com" Heuristic match: "taveusercontent.com" Heuristic match: "s3.us-gov-east-1.amazonaws.com" Heuristic match: "is-a-green.com" Heuristic match: "is-a-guru.com" Heuristic match: "operaunite.com" Heuristic match: "outsystemscloud.com" Heuristic match: "emrnotebooks-prod.ap-northeast-2.amazonaws.com" Heuristic match: "is-with-theband.com" Heuristic match: "is-a-blogger.com" Heuristic match: "s3.ap-southeast-3.amazonaws.com" Heuristic match: "auth.ap-south-2.amazoncognito.com" Heuristic match: "s3-website.us-east-2.amazonaws.com" Heuristic match: "from-md.com" Heuristic match: "s3-us-east-2.amazonaws.com" Heuristic match: "s3-ap-southeast-1.amazonaws.com" Heuristic match: "gotdns.com" Heuristic match: "airkitapps.com" Heuristic match: "auth.us-west-2.amazoncognito.com" Heuristic match: "s3-eu-west-1.amazonaws.com" Heuristic match: "is-an-anarchist.com" Heuristic match: "blogsyte.com" Heuristic match: "s3-ap-northeast-3.amazonaws.com" Heuristic match: "analytics-gateway.ap-southeast-2.amazonaws.com" Heuristic match: "mydbserver.com" Heuristic match: "boutir.com" Heuristic match: "sells-for-less.com" Heuristic match: "s3.dualstack.us-gov-west-1.amazonaws.com" Heuristic match: "fastly-terrarium.com" Heuristic match: "withyoutube.com" Heuristic match: "emrnotebooks-prod.ap-northeast-1.amazonaws.com" Heuristic match: "pages.wiardweb.com" Heuristic match: "s3.ap-southeast-2.amazonaws.com" Heuristic match: "s3-website.ap-south-2.amazonaws.com" Heuristic match: "media.strapiapp.com" Heuristic match: "gda.pl" Heuristic match: "s3.dualstack.eu-south-2.amazonaws.com" Heuristic match: "s3.eu-west-3.amazonaws.com" Heuristic match: "emrappui-prod.me-central-1.amazonaws.com" Heuristic match: "auth.us-east-1.amazoncognito.com" Heuristic match: "googlecode.com" Heuristic match: "auth.eu-central-1.amazoncognito.com" Heuristic match: "ecommerce-shop.pl" Heuristic match: "paywhirl.com" Heuristic match: "auth.eu-west-3.amazoncognito.com" Heuristic match: "auth-fips.us-west-2.amazoncognito.com" Heuristic match: "postman-echo.com" Heuristic match: "dopaas.com" Heuristic match: "from-nh.com" Heuristic match: "s3-website.eu-central-1.amazonaws.com" Heuristic match: "s3.dualstack.ap-southeast-2.amazonaws.com" Heuristic match: "homelinux.com" Heuristic match: "blogspot.com" Heuristic match: "is-a-llama.com" Heuristic match: "emrappui-prod.ap-east-1.amazonaws.com" Heuristic match: "dynns.com" Heuristic match: "from-al.com" Heuristic match: "auth.ap-east-1.amazoncognito.com" Heuristic match: "auth.eu-west-2.amazoncognito.com" Heuristic match: "s3-website.dualstack.us-west-2.amazonaws.com" Heuristic match: "servebeer.com" Heuristic match: "emrappui-prod.af-south-1.amazonaws.com" Heuristic match: "pixolino.com" Heuristic match: "sells-for-u.com" Heuristic match: "blogspot.com.mt" Heuristic match: "emrnotebooks-prod.eu-central-2.amazonaws.com" Heuristic match: "s3.ap-southeast-4.amazonaws.com" Heuristic match: "discordsays.com" Heuristic match: "notebook.cn-north-1.sagemaker.com.cn" Heuristic match: "s3-website.us-gov-east-1.amazonaws.com" Heuristic match: "servemp3.com" Heuristic match: "s3-ap-southeast-2.amazonaws.com" Heuristic match: "auth-fips.us-west-1.amazoncognito.com" Heuristic match: "s3-fips-us-gov-west-1.amazonaws.com" Heuristic match: "emrappui-prod.eu-north-1.amazonaws.com" Heuristic match: "vfs.cloud9.ap-northeast-1.amazonaws.com" Heuristic match: "auth.eu-central-2.amazoncognito.com" Heuristic match: "s3.us-west-1.amazonaws.com" Heuristic match: "grayjayleagues.com" Heuristic match: "auth.ap-southeast-1.amazoncognito.com" Heuristic match: "dyndns-work.com" Heuristic match: "emrnotebooks-prod.eu-south-1.amazonaws.com" Heuristic match: "is-leet.com" Heuristic match: "analytics-gateway.us-east-1.amazonaws.com" Heuristic match: "auth.us-west-1.amazoncognito.com" Heuristic match: "appspot.com" Heuristic match: "s3-website-us-gov-west-1.amazonaws.com" Heuristic match: "ladesk.com" Heuristic match: "emrappui-prod.us-west-1.amazonaws.com" Heuristic match: "s3.dualstack.ap-northeast-2.amazonaws.com" Heuristic match: "temp-dns.com" Heuristic match: "codespot.com" Heuristic match: "mytabit.com" Heuristic match: "iamallama.com" Heuristic match: "auth-fips.us-east-2.amazoncognito.com" Heuristic match: "blogspot.com.ng" Heuristic match: "emrnotebooks-prod.eu-central-1.amazonaws.com" Heuristic match: "gdynia.pl" Heuristic match: "s3-website.ca-central-1.amazonaws.com" Heuristic match: "s3.eu-north-1.amazonaws.com" Heuristic match: "dyndns-web.com" Heuristic match: "dyndns-free.com" Heuristic match: "from-va.com" Heuristic match: "members.linode.com" Heuristic match: "vfs.cloud9.ap-northeast-2.amazonaws.com" Heuristic match: "s3-sa-east-1.amazonaws.com" Heuristic match: "freemyip.com" Heuristic match: "s3.dualstack.ap-southeast-1.amazonaws.com" Heuristic match: "emrappui-prod.us-west-2.amazonaws.com" Heuristic match: "analytics-gateway.us-east-2.amazonaws.com" Heuristic match: "gentapps.com" Heuristic match: "emrappui-prod.il-central-1.amazonaws.com" Heuristic match: "isa-hockeynut.com" Heuristic match: "cafjs.com" Heuristic match: "s3-website.af-south-1.amazonaws.com" Heuristic match: "dyndns-at-home.com" Heuristic match: "is-a-photographer.com" Heuristic match: "is-a-student.com" Heuristic match: "s3.ap-east-1.amazonaws.com" Heuristic match: "s3.dualstack.ap-northeast-3.amazonaws.com" Heuristic match: "static.observableusercontent.com" Heuristic match: "from-nv.com" Heuristic match: "vfs.cloud9.af-south-1.amazonaws.com" Heuristic match: "is-a-anarchist.com" Heuristic match: "ddnsfree.com" Heuristic match: "s3.eu-west-1.amazonaws.com" Heuristic match: "from-mi.com" Heuristic match: "hostedpi.com" Heuristic match: "s3-eu-north-1.amazonaws.com" Heuristic match: "emrappui-prod.us-gov-east-1.amazonaws.com" Heuristic match: "auth.ca-west-1.amazoncognito.com" Heuristic match: "auth.ap-southeast-4.amazoncognito.com" Heuristic match: "s3-deprecated.cn-north-1.amazonaws.com.cn" Heuristic match: "auth.eu-south-1.amazoncognito.com" Heuristic match: "eu-1.evennode.com" Heuristic match: "s3-website.dualstack.us-west-1.amazonaws.com" Heuristic match: "notebook.cn-northwest-1.sagemaker.com.cn" Heuristic match: "s3-ap-south-1.amazonaws.com" Heuristic match: "skierniewice.pl" Heuristic match: "is-a-republican.com" Heuristic match: "fastvps-server.com" Heuristic match: "onza.mythic-beasts.com" Heuristic match: "net-freaks.com" Heuristic match: "vfs.cloud9.il-central-1.amazonaws.com" Heuristic match: "s3-ap-northeast-1.amazonaws.com" Heuristic match: "you2.pl" Heuristic match: "point2this.com" Heuristic match: "s3.dualstack.cn-north-1.amazonaws.com.cn" Heuristic match: "from-ak.com" Heuristic match: "s3-website.dualstack.il-central-1.amazonaws.com" Heuristic match: "kasserver.com" Pattern match: "https://fonts.gstatic.com/s/roboto/v27/kfomcnqeu92fr1me5q.ttf" Heuristic match: "stackhero-network.com" Heuristic match: "emrnotebooks-prod.eu-west-2.amazonaws.com" Heuristic match: "authgear-staging.com" Heuristic match: "emrnotebooks-prod.cn-north-1.amazonaws.com.cn" Heuristic match: "aliases121.com" Heuristic match: "s3.cn-northwest-1.amazonaws.com.cn" Heuristic match: "s3.dualstack.eu-west-1.amazonaws.com" Heuristic match: "emrappui-prod.ca-west-1.amazonaws.com" Heuristic match: "krasnik.pl" Heuristic match: "is-a-designer.com" Heuristic match: "myqnapcloud.com" Heuristic match: "messwithdns.com" Heuristic match: "lpusercontent.com" Heuristic match: "analytics-gateway.ap-southeast-1.amazonaws.com" Heuristic match: "dojin.com" Heuristic match: "simplesite.com" Heuristic match: "vfs.cloud9.eu-central-1.amazonaws.com" Heuristic match: "s3.dualstack.ap-south-2.amazonaws.com" Heuristic match: "s3.dualstack.ap-northeast-1.amazonaws.com" Heuristic match: "s3.eu-central-1.amazonaws.com" Heuristic match: "gdansk.pl" Heuristic match: "s3-website-us-west-2.amazonaws.com" Heuristic match: "auth.af-south-1.amazoncognito.com" Heuristic match: "servecounterstrike.com" Heuristic match: "dyndns-at-work.com" Heuristic match: "is-a-democrat.com" Heuristic match: "ocelot.mythic-beasts.com" Heuristic match: "gov.pl" Heuristic match: "sphinx.mythic-beasts.com" Heuristic match: "from-sd.com" Heuristic match: "emrnotebooks-prod.eu-west-3.amazonaws.com" Heuristic match: "s3-us-gov-east-1.amazonaws.com" Heuristic match: "aivencloud.com" Heuristic match: "from-pr.com" Heuristic match: "emrnotebooks-prod.me-south-1.amazonaws.com" Heuristic match: "from-wy.com" Heuristic match: "is-a-hard-worker.com" Heuristic match: "googleapis.com" Heuristic match: "s3-website.cn-north-1.amazonaws.com.cn" Heuristic match: "yolasite.com" Heuristic match: "s3-deprecated.eu-west-1.amazonaws.com" Heuristic match: "s3-external-1.amazonaws.com" Heuristic match: "s3-ca-central-1.amazonaws.com" Heuristic match: "auth.ap-northeast-3.amazoncognito.com" Heuristic match: "s3.dualstack.ap-south-1.amazonaws.com" Heuristic match: "s3-website.ca-west-1.amazonaws.com" Heuristic match: "mex.com" Heuristic match: "vfs.cloud9.eu-north-1.amazonaws.com" Heuristic match: "s3-website-ap-southeast-2.amazonaws.com" Heuristic match: "homesklep.pl" Heuristic match: "s3-fips.dualstack.us-gov-west-1.amazonaws.com" Heuristic match: "lubartow.pl" Heuristic match: "adobeaemcloud.com" Heuristic match: "art.pl" Heuristic match: "s3-website.eu-north-1.amazonaws.com" Heuristic match: "s3.dualstack.us-east-2.amazonaws.com" Heuristic match: "from-mt.com" Heuristic match: "is-a-socialist.com" Heuristic match: "dyndns-office.com" Heuristic match: "emrnotebooks-prod.us-gov-west-1.amazonaws.com" Heuristic match: "s3-website.ap-south-1.amazonaws.com" Heuristic match: "geekgalaxy.com" Heuristic match: "s3.dualstack.eu-central-1.amazonaws.com" Heuristic match: "vfs.cloud9.ap-south-1.amazonaws.com" Heuristic match: "from-vt.com" Heuristic match: "from-ar.com" Heuristic match: "torun.pl" Heuristic match: "s3-website.dualstack.sa-east-1.amazonaws.com" Heuristic match: "auth.ap-southeast-2.amazoncognito.com" Heuristic match: "vfs.cloud9.us-east-1.amazonaws.com" Heuristic match: "is-into-anime.com" Heuristic match: "s3.us-east-2.amazonaws.com" Heuristic match: "beep.pl" Heuristic match: "miniserver.com" Heuristic match: "builtwithdark.com" Heuristic match: "s3.eu-central-2.amazonaws.com" Heuristic match: "auth.me-south-1.amazoncognito.com" Heuristic match: "emrappui-prod.eu-central-1.amazonaws.com" Heuristic match: "s3.dualstack.eu-west-2.amazonaws.com" Heuristic match: "s3-ap-northeast-2.amazonaws.com" Heuristic match: "wpmucdn.com" Heuristic match: "dyn-o-saur.com" Heuristic match: "gotpantheon.com" Heuristic match: "auth-fips.us-east-1.amazoncognito.com" Heuristic match: "barsycenter.com" Heuristic match: "krakow.pl" Heuristic match: "s3.dualstack.eu-north-1.amazonaws.com" Heuristic match: "plock.pl" Heuristic match: "s3.eu-west-2.amazonaws.com" Heuristic match: "blogspot.com.tr" Heuristic match: "pagexl.com" Heuristic match: "s3-website-ap-southeast-1.amazonaws.com" Heuristic match: "zakopane.pl" Heuristic match: "est-a-la-masion.com" Heuristic match: "s3.dualstack.eu-south-1.amazonaws.com" Heuristic match: "auth.ap-south-1.amazoncognito.com" Heuristic match: "siiites.com" Heuristic match: "emrnotebooks-prod.ap-south-2.amazonaws.com" Heuristic match: "us.platform.sh" Heuristic match: "eu.com" Heuristic match: "s3-website-us-west-1.amazonaws.com" Heuristic match: "homesecuritymac.com" Heuristic match: "s3-website.eu-south-2.amazonaws.com" Heuristic match: "space-to-rent.com" Heuristic match: "emrnotebooks-prod.me-central-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.us-west-2.amazonaws.com" Heuristic match: "dyndns-server.com" Heuristic match: "blogspot.com.uy" Heuristic match: "homeunix.com" Pattern match: "https://play.google.com/store" Heuristic match: "apps.fbsbx.com" Heuristic match: "is-a-teacher.com" Heuristic match: "s3.dualstack.me-south-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.us-west-1.amazonaws.com" Heuristic match: "is-an-accountant.com" Heuristic match: "s3-ap-east-1.amazonaws.com" Heuristic match: "ip-ddns.com" Heuristic match: "s3-website.dualstack.eu-west-1.amazonaws.com" Heuristic match: "s3-website.dualstack.ap-south-1.amazonaws.com" Heuristic match: "is-a-conservative.com" Pattern match: "www.ck" Heuristic match: "s3.sa-east-1.amazonaws.com" Heuristic match: "s3-website.eu-south-1.amazonaws.com" Heuristic match: "from-ok.com" Heuristic match: "s3-website-ap-northeast-1.amazonaws.com" Heuristic match: "auth.eu-west-1.amazoncognito.com" Heuristic match: "try-snowplow.com" Heuristic match: "auth.sa-east-1.amazoncognito.com" Heuristic match: "u2-local.xnbay.com" Heuristic match: "myiphost.com" Heuristic match: "is-slick.com" Heuristic match: "vfs.cloud9.me-south-1.amazonaws.com" Heuristic match: "giize.com" Heuristic match: "wpenginepowered.com" Heuristic match: "s3-website.dualstack.ap-south-2.amazonaws.com" Heuristic match: "fldrv.com" Heuristic match: "is-an-entertainer.com" Heuristic match: "bplaced.com" Heuristic match: "auth.ap-southeast-3.amazoncognito.com" Heuristic match: "s3-website.me-south-1.amazonaws.com" Heuristic match: "from-ma.com" Heuristic match: "emrappui-prod.eu-central-2.amazonaws.com" Heuristic match: "s3-website.dualstack.eu-west-3.amazonaws.com" Heuristic match: "from-ri.com" Heuristic match: "ownprovider.com" Heuristic match: "s3.dualstack.sa-east-1.amazonaws.com" Heuristic match: "eu.meteorapp.com" Heuristic match: "from-ms.com" Heuristic match: "sdscloud.pl" Heuristic match: "wphostedmail.com" Heuristic match: "pythonanywhere.com" Heuristic match: "est-a-la-maison.com" Heuristic match: "s3.dualstack.cn-northwest-1.amazonaws.com.cn" Heuristic match: "emrnotebooks-prod.ap-south-1.amazonaws.com" Heuristic match: "s3-website.dualstack.eu-south-1.amazonaws.com" Heuristic match: "serveftp.com" Heuristic match: "pgfog.com" Heuristic match: "emrnotebooks-prod.us-east-2.amazonaws.com" Heuristic match: "s3.dualstack.eu-west-3.amazonaws.com" Heuristic match: "myshopify.com" Heuristic match: "from-dc.com" Heuristic match: "ddnsgeek.com" Heuristic match: "auth.ca-central-1.amazoncognito.com" Heuristic match: "s3.cn-north-1.amazonaws.com.cn" Heuristic match: "dyndns-ip.com" Heuristic match: "s3.dualstack.af-south-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.ap-southeast-3.amazonaws.com" Heuristic match: "neat-url.com" Heuristic match: "rackmaze.com" Heuristic match: "lynx.mythic-beasts.com" Heuristic match: "s3-website.us-west-2.amazonaws.com" Heuristic match: "swidnik.pl" Heuristic match: "js.wpenginepowered.com" Heuristic match: "mydatto.com" Heuristic match: "africa.com" Heuristic match: "hashbang.sh" Heuristic match: "vfs.cloud9.ap-southeast-2.amazonaws.com" Heuristic match: "dnsalias.com" Heuristic match: "pro.typeform.com" Heuristic match: "from-wi.com" Heuristic match: "gleeze.com" Heuristic match: "is-a-caterer.com" Heuristic match: "dyndns-mail.com" Heuristic match: "s3.dualstack.me-central-1.amazonaws.com" Heuristic match: "is-a-painter.com" Heuristic match: "s3-website.ap-southeast-2.amazonaws.com" Heuristic match: "vfs.cloud9.eu-south-1.amazonaws.com" Heuristic match: "s3.dualstack.us-west-1.amazonaws.com" Heuristic match: "simplesite.com.br" Heuristic match: "emrnotebooks-prod.il-central-1.amazonaws.com" Heuristic match: "townnews-staging.com" Heuristic match: "withgoogle.com" Heuristic match: "saves-the-whales.com" Heuristic match: "vfs.cloud9.us-east-2.amazonaws.com" Heuristic match: "s3-website-eu-west-1.amazonaws.com" Heuristic match: "s3.dualstack.ca-central-1.amazonaws.com" Heuristic match: "eu.pythonanywhere.com" Heuristic match: "securitytactics.com" Heuristic match: "is-a-cpa.com" Heuristic match: "s3.dualstack.ap-southeast-5.amazonaws.com" Heuristic match: "poznan.pl" Heuristic match: "servesarcasm.com" Heuristic match: "from-ct.com" Heuristic match: "s3-me-south-1.amazonaws.com" Heuristic match: "is-uberleet.com" Heuristic match: "quicksytes.com" Heuristic match: "hatenadiary.com" Heuristic match: "s3.ca-central-1.amazonaws.com" Heuristic match: "leczna.pl" Heuristic match: "mydobiss.com" Heuristic match: "myshopblocks.com" Heuristic match: "s3-deprecated.us-east-2.amazonaws.com" Heuristic match: "s3.dualstack.us-west-2.amazonaws.com" Heuristic match: "w-staticblitz.com" Heuristic match: "emrappui-prod.sa-east-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.cn-northwest-1.amazonaws.com.cn" Heuristic match: "emrappui-prod.ap-southeast-2.amazonaws.com" Heuristic match: "from-ia.com" Heuristic match: "is-a-geek.com" Heuristic match: "serveirc.com" Heuristic match: "s3-website.dualstack.ca-central-1.amazonaws.com" Heuristic match: "now.sh" Heuristic match: "s3.us-east-1.amazonaws.com" Heuristic match: "serveexchange.com" Heuristic match: "is-an-actor.com" Heuristic match: "cn.com" Heuristic match: "s3-deprecated.ap-southeast-5.amazonaws.com" Heuristic match: "is-into-cartoons.com" Heuristic match: "s3-fips.us-gov-west-1.amazonaws.com" Heuristic match: "health-carereform.com" Heuristic match: "dyndns-wiki.com" Heuristic match: "vfs.cloud9.ca-central-1.amazonaws.com" Heuristic match: "dyndns-home.com" Heuristic match: "doesntexist.com" Heuristic match: "s3-deprecated.us-east-1.amazonaws.com" Heuristic match: "unusualperson.com" Heuristic match: "s3-fips-us-gov-east-1.amazonaws.com" Heuristic match: "eu-4.evennode.com" Heuristic match: "s3-website.dualstack.ap-southeast-5.amazonaws.com" Heuristic match: "from-ne.com" Heuristic match: "emrappui-prod.ap-southeast-3.amazonaws.com" Heuristic match: "gentlentapis.com" Heuristic match: "lublin.pl" Heuristic match: "s3-website.us-west-1.amazonaws.com" Heuristic match: "zgierz.pl" Heuristic match: "blogdns.com" Heuristic match: "vfs.cloud9.ap-southeast-1.amazonaws.com" Heuristic match: "s3-website.cn-northwest-1.amazonaws.com.cn" Heuristic match: "servegame.com" Heuristic match: "emrappui-prod.us-east-2.amazonaws.com" Heuristic match: "emrappui-prod.cn-northwest-1.amazonaws.com.cn" Heuristic match: "emrnotebooks-prod.eu-west-1.amazonaws.com" Heuristic match: "homesecuritypc.com" Heuristic match: "emrappui-prod.ap-southeast-4.amazonaws.com" Heuristic match: "emrnotebooks-prod.ca-central-1.amazonaws.com" Heuristic match: "from-in.com" Heuristic match: "s3.dualstack.eu-central-2.amazonaws.com" Heuristic match: "digitaloceanspaces.com" Heuristic match: "kozow.com" Heuristic match: "teaches-yoga.com" Heuristic match: "hobby-site.com" Heuristic match: "analytics-gateway.ap-south-1.amazonaws.com" Heuristic match: "vfs.cloud9.sa-east-1.amazonaws.com" Heuristic match: "stufftoread.com" Heuristic match: "is-an-artist.com" Heuristic match: "dkonto.pl" Heuristic match: "is-not-certified.com" Heuristic match: "selfip.com" Heuristic match: "cfolks.pl" Heuristic match: "from-ks.com" Heuristic match: "dreamhosters.com" Heuristic match: "from-ky.com" Heuristic match: "loseyourip.com" Heuristic match: "analytics-gateway.us-west-2.amazonaws.com" Heuristic match: "auth.ap-northeast-2.amazoncognito.com" Heuristic match: "from-wa.com" Heuristic match: "from-hi.com" Heuristic match: "doomdns.com" Heuristic match: "s3-website.dualstack.eu-south-2.amazonaws.com" Heuristic match: "sinaapp.com" Heuristic match: "servepics.com" Heuristic match: "emrappui-prod.ap-south-1.amazonaws.com" Heuristic match: "nfshost.com" Heuristic match: "s3.ap-south-2.amazonaws.com" Heuristic match: "analytics-gateway.eu-central-1.amazonaws.com" Heuristic match: "durumis.com" Heuristic match: "s3-website.us-gov-west-1.amazonaws.com" Heuristic match: "s3-website.dualstack.us-east-2.amazonaws.com" Heuristic match: "s3.dualstack.ap-east-1.amazonaws.com" Heuristic match: "s3.me-central-1.amazonaws.com" Heuristic match: "w-corp-staticblitz.com" Heuristic match: "xnbay.com" Heuristic match: "mytuleap.com" Heuristic match: "is-a-hunter.com" Heuristic match: "appspaceusercontent.com" Heuristic match: "dynalias.com" Heuristic match: "emrnotebooks-prod.sa-east-1.amazonaws.com" Heuristic match: "servequake.com" Heuristic match: "s3-website.ap-east-1.amazonaws.com" Heuristic match: "vfs.cloud9.eu-west-2.amazonaws.com" Heuristic match: "analytics-gateway.ap-northeast-2.amazonaws.com" Heuristic match: "likescandy.com" Heuristic match: "de.com" Heuristic match: "s3.ap-south-1.amazonaws.com" Heuristic match: "trycloudflare.com" Heuristic match: "s3-website.dualstack.us-east-1.amazonaws.com" Heuristic match: "yali.mythic-beasts.com" Heuristic match: "authgearapps.com" Heuristic match: "mysecuritycamera.com" Heuristic match: "emrappui-prod.us-east-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.eu-south-2.amazonaws.com" Heuristic match: "s3.ap-southeast-5.amazonaws.com" Heuristic match: "from-pa.com" Heuristic match: "vfs.cloud9.eu-west-1.amazonaws.com" Heuristic match: "s3-website.dualstack.cn-north-1.amazonaws.com.cn" Heuristic match: "from-or.com" Heuristic match: "hatenablog.com" Heuristic match: "rhcloud.com" Heuristic match: "from-nd.com" Heuristic match: "alpha-myqnapcloud.com" Heuristic match: "framercanvas.com" Heuristic match: "s3-website.dualstack.me-central-1.amazonaws.com" Heuristic match: "jpn.com" Heuristic match: "u2.xnbay.com" Heuristic match: "3utilities.com" Heuristic match: "analytics-gateway.ap-northeast-1.amazonaws.com" Heuristic match: "drayddns.com" Heuristic match: "streamlitapp.com" Heuristic match: "lodz.pl" Heuristic match: "from-nm.com" Heuristic match: "onthewifi.com" Heuristic match: "is-a-nurse.com" Heuristic match: "from-sc.com" Heuristic match: "is-an-engineer.com" Heuristic match: "auth.eu-north-1.amazoncognito.com" Heuristic match: "sopot.pl" Heuristic match: "vfs.cloud9.ap-northeast-3.amazonaws.com" Heuristic match: "wixstudio.com" Pattern match: "https://fonts.gstatic.com/s/roboto/v27/kfolcnqeu92fr1mmeu9vaw.ttf" Heuristic match: "emrappui-prod.me-south-1.amazonaws.com" Heuristic match: "streak-link.com" Heuristic match: "s3.dualstack.ap-southeast-3.amazonaws.com" Heuristic match: "woltlab-demo.com" Heuristic match: "from-wv.com" Heuristic match: "streaklinks.com" Heuristic match: "herokussl.com" Heuristic match: "emrappui-prod.eu-west-1.amazonaws.com" Heuristic match: "s3.ap-northeast-3.amazonaws.com" Heuristic match: "reservd.com" Heuristic match: "quipelements.com" Heuristic match: "s3-website-sa-east-1.amazonaws.com" Heuristic match: "s3.amazonaws.com" Heuristic match: "s3.dualstack.ca-west-1.amazonaws.com" Heuristic match: "s3-eu-west-3.amazonaws.com" Heuristic match: "w-credentialless-staticblitz.com" Heuristic match: "co.pl" Heuristic match: "s3-website-us-east-1.amazonaws.com" Heuristic match: "appspacehosted.com" Heuristic match: "est-le-patron.com" Heuristic match: "hotelwithflight.com" Heuristic match: "auth.eu-south-2.amazoncognito.com" Heuristic match: "getmyip.com" Heuristic match: "s3-website.dualstack.ap-southeast-3.amazonaws.com" Heuristic match: "oncilla.mythic-beasts.com" Heuristic match: "is-a-musician.com" Heuristic match: "ooguy.com" Heuristic match: "analytics-gateway.eu-west-1.amazonaws.com" Heuristic match: "firebaseapp.com" Heuristic match: "onrender.com" Heuristic match: "cechire.com" Heuristic match: "dyndns-remote.com" Heuristic match: "from-fl.com" Heuristic match: "vfs.cloud9.eu-west-3.amazonaws.com" Heuristic match: "from-de.com" Heuristic match: "is-a-bookkeeper.com" Pattern match: "http://tizen.org/feature/platform.version" Heuristic match: "s3-website.dualstack.ap-northeast-1.amazonaws.com" Heuristic match: "s3-us-west-1.amazonaws.com" Heuristic match: "s3-website.eu-west-2.amazonaws.com" Heuristic match: "emrnotebooks-prod.us-gov-east-1.amazonaws.com" Heuristic match: "s3-website.dualstack.eu-central-1.amazonaws.com" Heuristic match: "webadorsite.com" Heuristic match: "blogspot.com.ar" Heuristic match: "emrappui-prod.ap-southeast-1.amazonaws.com" Heuristic match: "s3.dualstack.us-gov-east-1.amazonaws.com" Heuristic match: "blogspot.com.au" Heuristic match: "ciscofreak.com" Heuristic match: "s3.af-south-1.amazonaws.com" Heuristic match: "qbuser.com" Heuristic match: "s3-fips.dualstack.us-gov-east-1.amazonaws.com" Heuristic match: "auth.il-central-1.amazoncognito.com" Heuristic match: "mydrobo.com" Heuristic match: "s3.dualstack.il-central-1.amazonaws.com" Heuristic match: "workisboring.com" Heuristic match: "s3-website.me-central-1.amazonaws.com" Heuristic match: "is-a-doctor.com" Heuristic match: "auth-fips.us-gov-west-1.amazoncognito.com" Heuristic match: "dyndns-blog.com" Heuristic match: "readthedocs-hosted.com" Heuristic match: "s3-website.ap-southeast-5.amazonaws.com" Heuristic match: "from-nc.com" Heuristic match: "s3-us-west-2.amazonaws.com" Heuristic match: "s3.il-central-1.amazonaws.com" Heuristic match: "emrappui-prod.ap-south-2.amazonaws.com" Heuristic match: "s3-website.dualstack.ap-southeast-4.amazonaws.com" Heuristic match: "emrnotebooks-prod.af-south-1.amazonaws.com" Heuristic match: "s3-website.ap-southeast-4.amazonaws.com" Heuristic match: "s3.dualstack.ap-southeast-4.amazonaws.com" Heuristic match: "blogspot.com.by" Heuristic match: "mymailer.com.tw" Heuristic match: "s3-website.dualstack.af-south-1.amazonaws.com" Heuristic match: "is-a-landscaper.com" Heuristic match: "blogspot.com.br" Heuristic match: "is-gone.com" Heuristic match: "br.com" Heuristic match: "servehumour.com" Heuristic match: "eu-2.evennode.com" Heuristic match: "is-a-bulls-fan.com" Heuristic match: "from-oh.com" Heuristic match: "myvnc.com" Heuristic match: "sieradz.pl" Heuristic match: "from-tn.com" Heuristic match: "s3-eu-west-2.amazonaws.com" Heuristic match: "s3.ca-west-1.amazonaws.com" Heuristic match: "s3-website.dualstack.ap-southeast-2.amazonaws.com" Heuristic match: "blogspot.com.cy" Heuristic match: "ditchyourip.com" Heuristic match: "s3-website.ap-southeast-3.amazonaws.com" Heuristic match: "uk.com" Heuristic match: "servehttp.com" Heuristic match: "airkitapps-au.com" Heuristic match: "s3.ap-southeast-1.amazonaws.com" Heuristic match: "auth.ap-northeast-1.amazoncognito.com" Heuristic match: "blogspot.com.co" Heuristic match: "is-a-chef.com" Heuristic match: "dyndns-pics.com" Heuristic match: "myactivedirectory.com" Heuristic match: "barsyonline.com" Heuristic match: "writesthisblog.com" Heuristic match: "is-a-techie.com" Heuristic match: "4u.com" Heuristic match: "studio.cn-north-1.sagemaker.com.cn" Heuristic match: "nodebalancer.linode.com" Heuristic match: "reserve-online.com" Heuristic match: "it.com" Heuristic match: "s3-website.ap-northeast-1.amazonaws.com" Heuristic match: "s3-website.eu-west-3.amazonaws.com" Heuristic match: "likes-pie.com" Heuristic match: "emrappui-prod.eu-south-2.amazonaws.com" Heuristic match: "eu.platform.sh" Heuristic match: "is-a-financialadvisor.com" Heuristic match: "us-2.evennode.com" Heuristic match: "emrappui-prod.us-gov-west-1.amazonaws.com" Heuristic match: "is-a-nascarfan.com" Heuristic match: "s3-website.dualstack.eu-central-2.amazonaws.com" Heuristic match: "elasticbeanstalk.com" Heuristic match: "is-into-cars.com" Heuristic match: "is-a-player.com" Heuristic match: "s3-eu-central-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.ap-southeast-4.amazonaws.com" Heuristic match: "emrnotebooks-prod.us-east-1.amazonaws.com" Heuristic match: "from-nj.com" Heuristic match: "caracal.mythic-beasts.com" Heuristic match: "s3-website.ap-southeast-1.amazonaws.com" Heuristic match: "us-3.evennode.com" Heuristic match: "s3-website.il-central-1.amazonaws.com" Heuristic match: "blogspot.com.eg" Heuristic match: "servebbs.com" Heuristic match: "s3-fips.us-gov-east-1.amazonaws.com" Heuristic match: "dnsdojo.com" Heuristic match: "from-mo.com" Heuristic match: "mazeplay.com" Heuristic match: "from-il.com" Heuristic match: "pagespeedmobilizer.com" Heuristic match: "s3.us-gov-west-1.amazonaws.com" Heuristic match: "s3.me-south-1.amazonaws.com" Heuristic match: "s3.ap-northeast-2.amazonaws.com" Heuristic match: "blogspot.com.ee" Heuristic match: "s3-website.dualstack.ap-northeast-2.amazonaws.com" Pattern match: "http://www.apache.org/licenses/" Heuristic match: "emrappui-prod.ap-northeast-3.amazonaws.com" Heuristic match: "from-mn.com" Heuristic match: "emrnotebooks-prod.ap-northeast-3.amazonaws.com" Heuristic match: "blogspot.com.es" Heuristic match: "from-ut.com" Heuristic match: "shoparena.pl" Heuristic match: "issmarterthanyou.com" Heuristic match: "polyspace.com" Heuristic match: "emrappui-prod.eu-west-3.amazonaws.com" Heuristic match: "vfs.cloud9.us-west-1.amazonaws.com" Heuristic match: "s3-website.ap-northeast-3.amazonaws.com" Heuristic match: "studio.cn-northwest-1.sagemaker.com.cn" Heuristic match: "fentiger.mythic-beasts.com" Heuristic match: "is-a-personaltrainer.com" Heuristic match: "s3.ap-northeast-1.amazonaws.com" Heuristic match: "s3-website.eu-west-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.ap-southeast-1.amazonaws.com" Heuristic match: "co.com" Heuristic match: "dfirma.pl" Heuristic match: "gr.com" Heuristic match: "dnsiskinky.com" Heuristic match: "s3.eu-south-1.amazonaws.com" Heuristic match: "s3-website.dualstack.ap-northeast-3.amazonaws.com" Heuristic match: "servehalflife.com" Heuristic match: "from-tx.com" Heuristic match: "streakusercontent.com" Heuristic match: "emrappui-prod.ap-northeast-2.amazonaws.com" Heuristic match: "ddnsking.com" Heuristic match: "est-mon-blogueur.com" Heuristic match: "s3-us-gov-west-1.amazonaws.com" Heuristic match: "emrnotebooks-prod.ap-east-1.amazonaws.com" Heuristic match: "emrappui-prod.eu-west-2.amazonaws.com" Heuristic match: "is-into-games.com" Heuristic match: "s3-website.dualstack.ap-southeast-1.amazonaws.com" Heuristic match: "dontexist.com" Heuristic match: "s3-website.dualstack.ca-west-1.amazonaws.com" Heuristic match: "emrappui-prod.cn-north-1.amazonaws.com.cn" Heuristic match: "emrnotebooks-prod.ap-southeast-2.amazonaws.com" Heuristic match: "herokuapp.com" Heuristic match: "emrappui-prod.ca-central-1.amazonaws.com" Heuristic match: "is-an-actress.com" Heuristic match: "s3-website.ap-northeast-2.amazonaws.com" Heuristic match: "vfs.cloud9.us-west-2.amazonaws.com" Heuristic match: "r.appspot.com" Heuristic match: "from-ga.com" Heuristic match: "servep2p.com" Heuristic match: "eu-3.evennode.com" Heuristic match: "s3.eu-south-2.amazonaws.com" Heuristic match: "emrappui-prod.eu-south-1.amazonaws.com" Heuristic match: "modelscape.com" Heuristic match: "is-certified.com" Heuristic match: "damnserver.com" Heuristic match: "libc.so" Heuristic match: "libjnigraphics.so" Heuristic match: "libandroid.so" Heuristic match: "libglesv2.so" Heuristic match: "libm.so" Heuristic match: "libdl.so" Heuristic match: "libpl_droidsonroids_gif.so" Pattern match: "https://android.googlesource.com/toolchain/llvm-project" Heuristic match: ".data.rel.ro" Heuristic match: "libtt_ugen_layout.so" Heuristic match: "librtmp-jni.so" Heuristic match: "libbuffer_pgl.so" Heuristic match: "libapminsighta.so" Heuristic match: "libapminsightb.so" Heuristic match: "libunwind.so" Heuristic match: "/libc++.so" Heuristic match: "/libart.so" Heuristic match: "libcorkscrew.so" Heuristic match: "/libapminsightb.so" Heuristic match: "libnms.so" Heuristic match: "lib8acc8aaddd70b203.so" Heuristic match: "/lib8acc8aaddd70b203.so" Pattern match: "runheader.bin/proc/self/cmdline[xcrash" Pattern match: ".solibcliblog.solibz.solibm.solibdl.solibpglarmor.so/ds-c|w{9jlx~=d]f;iydhhgh,ilfyd8n}dbp~db\:-h$!@" Pattern match: "http://schemas.android.com/apk/res/androiduses-sdkuses-permissionandroid.permission.internet''android.permission.access_network_state$$android.permission.access_wifi_state99com.partidas25.futeboldahoraaovivo.permission.c2d_message%%android.permission.post_" Pattern match: "https://youtrack.jetbrains.com/issue/kt-46465"26:T2c65,"versionCodeversionNamecompileSdkVersioncompileSdkVersionCodenameminSdkVersiontargetSdkVersionnameprotectionLevelschememimeTypepaththemelabeliconallowBackuphardwareAcceleratedsupportsRtlextractNativeLibsusesCleartextTrafficnetworkSecurityConfigroundIconappComponentFactoryvalueexportedconfigChangesresizeableActivitysupportsPictureInPictureenableOnBackInvokedCallbackauthoritiespermissionprioritynoHistorystopWithTasktaskAffinityexcludeFromRecentsinitOrderenabledlaunchModedirectBootAwarerequiredscreenOrientationstateNotNeededwindowSoftInputModeresourcemanifestpackage""com.partidas25.futeboldahoraaovivoplatformBuildVersionCodeplatformBuildVersionName**http://schemas.android.com/apk/res/androiduses-sdkuses-permissionandroid.permission.INTERNET''android.permission.ACCESS_NETWORK_STATE$$android.permission.ACCESS_WIFI_STATE99com.partidas25.futeboldahoraaovivo.permission.C2D_MESSAGE%%android.permission.POST_NOTIFICATIONS**com.google.android.c2dm.permission.RECEIVEandroid.permission.WAKE_LOCKandroid.permission.VIBRATE))android.permission.RECEIVE_BOOT_COMPLETED..com.sec.android.provider.badge.permission.READ//com.sec.android.provider.badge.permission.WRITE))com.htc.launcher.permission.READ_SETTINGS++com.htc.launcher.permission.UPDATE_SHORTCUT00com.sonyericsson.home.permission.BROADCAST_BADGE44com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,,com.anddoes.launcher.permission.UPDATE_COUNT++com.majeur.launcher.permission.UPDATE_BADGE33com.huawei.android.launcher.permission.CHANGE_BADGE44com.huawei.android.launcher.permission.READ_SETTINGS55com.huawei.android.launcher.permission.WRITE_SETTINGS!!android.permission.READ_APP_BADGE**com.oppo.launcher.permission.READ_SETTINGS++com.oppo.launcher.permission.WRITE_SETTINGS00me.everything.badger.permission.BADGE_COUNT_READ11me.everything.badger.permission.BADGE_COUNT_WRITE''com.google.android.gms.permission.AD_ID**android.permission.ACCESS_ADSERVICES_AD_ID00android.permission.ACCESS_ADSERVICES_ATTRIBUTION++android.permission.ACCESS_ADSERVICES_TOPICSqueriesintentactionandroid.intent.action.VIEWcategory!!android.intent.category.BROWSABLEdatahttps33android.support.customtabs.action.CustomTabsServiceandroid.intent.action.INSERTvnd.android.cursor.dir/eventandroid.intent.action.DIALtel:com.android.vending!!com.attribution.REFERRAL_PROVIDERcom.google.marketcom.amazon.veneziacom.sec.android.app.samsungappscom.xiaomi.marketcom.huawei.appmarketcom.oppo.marketcom.bbk.appstore,,com.applovin.am.intent.action.APPHUB_SERVICEcom.facebook.katanaandroid.intent.action.MAIN%%android.permission.FOREGROUND_SERVICEcom.amazon.privacypass.ATTEST88com.applovin.array.apphub.permission.BIND_APPHUB_SERVICEKKcom.partidas25.futeboldahoraaovivo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONapplication sZSwLLXAZJpdLoP.ProxyApplicationtrue%%sZSwLLXAZJpdLoP.ProxyComponentFactorymeta-data))com.google.android.gms.ads.APPLICATION_IDapplovin.sdk.key((com.onesignal.NotificationOpened.DEFAULTDISABLEactivity<>com.partidas25.futeboldahoraaovivo.activities.ActivityRedirect==com.partidas25.futeboldahoraaovivo.activities.ActivityWebView::com.google.android.gms.ads.flag.NATIVE_AD_DEBUGGER_ENABLEDcom.google.android.gms.version77com.google.android.gms.ads.flag.OPTIMIZE_INITIALIZATION33com.google.android.gms.ads.flag.OPTIMIZE_AD_LOADING..disabled_com.google.android.gms.ads.AdActivity00com.ironsource.sdk.controller.ControllerActivity22com.ironsource.sdk.controller.InterstitialActivity--com.ironsource.sdk.controller.OpenUrlActivityprovider44com.ironsource.lifecycle.IronsourceLifecycleProvider>>com.partidas25.futeboldahoraaovivo.IronsourceLifecycleProviderreceiver""com.onesignal.FCMBroadcastReceiver''com.google.android.c2dm.permission.SEND&&com.google.android.c2dm.intent.RECEIVEservice((com.onesignal.HmsMessageServiceOneSignal&&com.huawei.push.action.MESSAGING_EVENT++com.onesignal.NotificationOpenedActivityHMScom.onesignal.FCMIntentService!!com.onesignal.FCMIntentJobService##android.permission.BIND_JOB_SERVICEcom.onesignal.SyncServicecom.onesignal.SyncJobService!!com.onesignal.PermissionsActivity))com.onesignal.NotificationDismissReceivercom.onesignal.BootUpReceiver$$android.intent.action.BOOT_COMPLETED''android.intent.action.QUICKBOOT_POWERONcom.onesignal.UpgradeReceiver))android.intent.action.MY_PACKAGE_REPLACED((com.onesignal.NotificationOpenedReceiver99com.onesignal.NotificationOpenedReceiverAndroid22AndOlder''androidx.startup.InitializationProvider33com.partidas25.futeboldahoraaovivo.androidx-startup99com.unity3d.mediation.admobadapter.AdmobModuleInitializerandroidx.startup++androidx.emoji2.text.EmojiCompatInitializer??com.unity3d.mediation.unityadsadapter.UnityAdsModuleInitializer..androidx.lifecycle.ProcessLifecycleInitializer99com.unity3d.services.core.configuration.AdsSdkInitializer$$androidx.work.WorkManagerInitializer??com.unity3d.mediation.applovinadapter.ApplovinModuleInitializerCCcom.unity3d.mediation.ironsourceadapter.IronSourceModuleInitializer88com.unity3d.mediation.UnityMediationSDKModuleInitializer55androidx.profileinstaller.ProfileInstallerInitializer--okhttp3.internal.platform.PlatformInitializer>>com.unity3d.services.identifiers.UnitySharedLibraryInitializer00com.google.android.gms.ads.MobileAdsInitProvider88com.partidas25.futeboldahoraaovivo.mobileadsinitprovider$$com.google.android.gms.ads.AdService??disabled_com.google.android.gms.ads.OutOfContextTestingActivity??disabled_com.google.android.gms.ads.NotificationHandlerActivity::com.google.android.play.core.hsdp.service.HsdpShimActivity::disabled_com.unity3d.ads.adplayer.FullScreenWebViewDisplay<>disabled_com.applovin.mediation.MaxDebuggerAdUnitsListActivityGGdisabled_com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity??disabled_com.applovin.mediation.MaxDebuggerAdUnitDetailActivity99com.applovin.mediation.MaxDebuggerCmpNetworksListActivity@@com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity55com.applovin.mediation.MaxDebuggerTcfInfoListActivity33com.applovin.mediation.MaxDebuggerTcfStringActivity99com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity99com.applovin.mediation.MaxDebuggerTestModeNetworkActivity55com.applovin.mediation.MaxDebuggerUnifiedFlowActivity;;com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity11com.applovin.creative.MaxCreativeDebuggerActivityEEdisabled_com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity55com.applovin.impl.adview.activity.FullscreenAdService33com.google.android.gms.common.api.GoogleApiActivity22com.google.firebase.iid.FirebaseInstanceIdReceiver66com.google.firebase.messaging.FirebaseMessagingService##com.google.firebase.MESSAGING_EVENT88com.google.firebase.components.ComponentDiscoveryServiceWWcom.google.firebase.components:com.google.firebase.messaging.FirebaseMessagingRegistrar11com.google.firebase.components.ComponentRegistrarSScom.google.firebase.components:com.google.firebase.datatransport.TransportRegistrar__com.google.firebase.components:com.google.firebase.installations.FirebaseInstallationsRegistrar11disabled_com.facebook.ads.AudienceNetworkActivity//com.facebook.ads.AudienceNetworkContentProviderAAcom.partidas25.futeboldahoraaovivo.AudienceNetworkContentProvider11com.google.firebase.provider.FirebaseInitProvider77com.partidas25.futeboldahoraaovivo.firebaseinitproviderandroid.ext.adservices00androidx.profileinstaller.ProfileInstallReceiver00androidx.profileinstaller.action.INSTALL_PROFILE**androidx.profileinstaller.action.SKIP_FILE--androidx.profileinstaller.action.SAVE_PROFILE44androidx.profileinstaller.action.BENCHMARK_OPERATION..androidx.room.MultiInstanceInvalidationServiceKKcom.google.android.datatransport.runtime.backends.TransportBackendDiscovery>>backend:com.google.android.datatransport.cct.CctBackendFactoryYYcom.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerServicehhcom.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver77com.ironsource.mediationsdk.testSuite.TestSuiteActivity))android.webkit.WebView.EnableSafeBrowsingAAcom.google.android.play.core.common.PlayCoreDialogWrapperActivity//disabled_sg.bigo.ads.ad.splash.AdSplashActivity88disabled_sg.bigo.ads.ad.splash.LandscapeAdSplashActivity//sg.bigo.ads.controller.provider.BigoAdsProvider22com.partidas25.futeboldahoraaovivo.BigoAdsProvider33disabled_sg.bigo.ads.controller.form.AdFormActivity##disabled_sg.bigo.ads.api.AdActivity((disabled_sg.bigo.ads.api.PopupAdActivity11disabled_sg.bigo.ads.api.LandingStyleableActivity,,disabled_sg.bigo.ads.api.LandscapeAdActivity,,disabled_sg.bigo.ads.api.CompanionAdActivity55disabled_sg.bigo.ads.api.LandscapeCompanionAdActivity22disabled_sg.bigo.ads.core.mraid.MraidVideoActivity''com.pairip.licensecheck.LicenseActivitycom.android.stamp.sourcehttps://play.google.com/storecom.android.stamp.typeSTAMP_TYPE_DISTRIBUTION_APKcom.android.vending.splits""com.android.vending.derived.apk.id%%com.android.dynamic.apk.fused.modulesbase!!com.android.vending.CHECK_LICENSEandroid" (Indicator: "tel:"; File: "AndroidManifest.xml")1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 18dcc14481c7… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 18dcc14481c7…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\",\"applicationCategory\":[\"android\"],\"identifier\":\"18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":24},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L23",null,{"initialData":{"schema_version":"1.0.15","sha256":"18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791414341188,"unified_at":"2026-10-07T23:05:41.188Z","metadata":{"hashes":{"sha256":"18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","sha1":"1784d363dafe27efd286b3fbd6a87ba49bd2a1a1","md5":"99d9fa7933bea4e06abbe0b7ed7a0a03","sha512":"6090b4518fa91517346ced9c137002a8a2feb3747c32352c889540b91c4534ac6b3a5786c467aff7f3145a7d3e18cda98faa79f7f94f105a9f68f33c52edd211","ssdeep":"393216:SPzma79TthNtYiOoFJH7M5uaUJnwBqR8o6RzPxhGPQ0vw0WV0PjE4JDtk2jzesbg:SLz9TtxIXUJnURFhGH4Nww/EUBk9mf","ssdeep_chunks":["393216:SPzma79","393216:Pzma79T","393216:zma79Tt","393216:ma79Tth","393216:a79TthN","393216:79TthNt","393216:9TthNtY","393216:TthNtYi","393216:thNtYiO","393216:hNtYiOo","393216:NtYiOoF","393216:tYiOoFJ","393216:YiOoFJH","393216:iOoFJH7","393216:OoFJH7M","393216:oFJH7M5","393216:FJH7M5u","393216:JH7M5ua","393216:H7M5uaU","393216:7M5uaUJ","393216:M5uaUJn","393216:5uaUJnw","393216:uaUJnwB","393216:aUJnwBq","393216:UJnwBqR","393216:JnwBqR8","393216:nwBqR8o","393216:wBqR8o6","393216:BqR8o6R","393216:qR8o6Rz","393216:R8o6RzP","393216:8o6RzPx","393216:o6RzPxh","393216:6RzPxhG","393216:RzPxhGP","393216:zPxhGPQ","393216:PxhGPQ0","393216:xhGPQ0v","393216:hGPQ0vw","393216:GPQ0vw0","393216:PQ0vw0W","393216:Q0vw0WV","393216:0vw0WV0","393216:vw0WV0P","393216:w0WV0Pj","393216:0WV0PjE","393216:WV0PjE4","393216:V0PjE4J","393216:0PjE4JD","393216:PjE4JDt","393216:jE4JDtk","393216:E4JDtk2","393216:4JDtk2j","393216:JDtk2jz","393216:Dtk2jze","393216:tk2jzes","393216:k2jzesb","393216:2jzesbg","786432:SPzma79","786432:Pzma79T","786432:zma79Tt","786432:ma79Tth","786432:a79TthN","786432:79TthNt","786432:9TthNtY","786432:TthNtYi","786432:thNtYiO","786432:hNtYiOo","786432:NtYiOoF","786432:tYiOoFJ","786432:YiOoFJH","786432:iOoFJH7","786432:OoFJH7M","786432:oFJH7M5","786432:FJH7M5u","786432:JH7M5ua","786432:H7M5uaU","786432:7M5uaUJ","786432:M5uaUJn","786432:5uaUJnw","786432:uaUJnwB","786432:aUJnwBq","786432:UJnwBqR","786432:JnwBqR8","786432:nwBqR8o","786432:wBqR8o6","786432:BqR8o6R","786432:qR8o6Rz","786432:R8o6RzP","786432:8o6RzPx","786432:o6RzPxh","786432:6RzPxhG","786432:RzPxhGP","786432:zPxhGPQ","786432:PxhGPQ0","786432:xhGPQ0v","786432:hGPQ0vw","786432:GPQ0vw0","786432:PQ0vw0W","786432:Q0vw0WV","786432:0vw0WV0","786432:vw0WV0P","786432:w0WV0Pj","786432:0WV0PjE","786432:WV0PjE4","786432:V0PjE4J","786432:0PjE4JD","786432:PjE4JDt","786432:jE4JDtk","786432:E4JDtk2","786432:4JDtk2j","786432:JDtk2jz","786432:Dtk2jze","786432:tk2jzes","786432:k2jzesb","786432:2jzesbg","393216:SLz9Ttx","393216:Lz9TtxI","393216:z9TtxIX","393216:9TtxIXU","393216:TtxIXUJ","393216:txIXUJn","393216:xIXUJnU","393216:IXUJnUR","393216:XUJnURF","393216:UJnURFh","393216:JnURFhG","393216:nURFhGH","393216:URFhGH4","393216:RFhGH4N","393216:FhGH4Nw","393216:hGH4Nww","393216:GH4Nww/","393216:H4Nww/E","393216:4Nww/EU","393216:Nww/EUB","393216:ww/EUBk","393216:w/EUBk9","393216:/EUBk9m","393216:EUBk9mf"],"imphash":"Unknown"},"file_info":{"file_name":"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk","file_type":["android"],"file_type_id":"apk","file_size":30066298,"entropy":7.84,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1791414161000,"last_seen":1791414161000,"last_multi_scan":1791414161000},"additional_metadata":[{"name":"package_manager","type":"str","values":["jar"]}]},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":24},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":11},"sandbox_signatures":{"informative_count":16,"suspicious_count":1,"malicious_count":0,"total":17},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Reconnaissance","technique":"Gather Victim Network Information","attack_id":"T1590","attack_id_wiki":"https://attack.mitre.org/techniques/T1590","identifiers":[{"type":"informative","value":"Able to access user sensitive domain"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Persistence","technique":"Socket Filters","attack_id":"T1205.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1205/002","identifiers":[{"type":"informative","value":"Able to monitor socket connection"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Sample file has high entropy (likely encrypted/compressed content)"},{"type":"informative","value":"YARA signature match - AES encryption"},{"type":"informative","value":"Shows ability to obfuscate file or information"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Shows ability to deobfuscate/decode files or information"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Credential Access","technique":"Securityd Memory","attack_id":"T1555.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1555/002","identifiers":[{"type":"informative","value":"Able to retrieve credentials from memory"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Able to access file/directory"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Command and Control","technique":"Data Encoding","attack_id":"T1132","attack_id_wiki":"https://attack.mitre.org/techniques/T1132","identifiers":[{"type":"informative","value":"Contains ability to perform Base64 encoding/decoding"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Drops XML files"},{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"tactic":"Command and Control","technique":"Symmetric Cryptography","attack_id":"T1573.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1573/001","identifiers":[{"type":"informative","value":"Shows ability to use encryption for command and control traffic"}],"sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]}],"sandbox_signatures":[{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to perform Base64 encoding/decoding","description":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")\n Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")\n file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"libnms.so\")\n file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"libnms.so\")","origin":"File/Memory","mitre_attack_id":"T1132","relevance":1,"id":"string-338","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Cryptographic Related","name":"Sample file has high entropy (likely encrypted/compressed content)","description":"Sample file \"sample.bin\" has high entropy 7.8799","origin":"Binary File","mitre_attack_id":"T1027","relevance":1,"id":"binary-71","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Cryptographic Related","name":"Shows ability to deobfuscate/decode files or information","description":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding\n Matched sigs: YARA signature match - AES encryption","origin":"Indicator Combinations","mitre_attack_id":"T1140","relevance":1,"id":"summary-32","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Cryptographic Related","name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for crypto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to perform Base64 encoding/decoding\n Matched sigs: Sample file has high entropy (likely encrypted/compressed content)\n Matched sigs: YARA signature match - AES encryption","origin":"Indicator Combinations","mitre_attack_id":"T1027","relevance":1,"id":"summary-28","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Cryptographic Related","name":"Shows ability to use encryption for command and control traffic","description":"The analysis shows use of encryption\n use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - AES encryption","origin":"Indicator Combinations","mitre_attack_id":"T1573.001","relevance":1,"id":"summary-31","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Environment Awareness","name":"Able to access file/directory","description":"Found string \"hprof mkdir failed!\" (Indicator: \"mkdir \"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")\n file/memory contains long string with (Indicator: \"mkdir \"; File: \"libapminsighta.so\")","origin":"File/Memory","mitre_attack_id":"T1083","relevance":1,"id":"string-779","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Environment Awareness","name":"Able to access user sensitive domain","description":"Found string \"withyoutube.com\" (Indicator: \"youtube.com\"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")","origin":"File/Memory","mitre_attack_id":"T1590","relevance":1,"id":"string-761","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"External Systems","name":"Sample was identified as clean by Antivirus engines","description":"0/24 Antivirus vendors marked sample as clean (0% detection rate)","origin":"External System","relevance":10,"id":"avtest-1","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"Found string \"withyoutube.com\" (Indicator: \"youtube\"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")","origin":"File/Memory","relevance":2,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$24","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Installation/Persistence","name":"Drops XML files","description":"\"AndroidManifest.xml\" has type \"Android binary XML\"","origin":"Binary File","mitre_attack_id":"T1105","relevance":1,"id":"binary-39","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Network Related","name":"Able to monitor socket connection","description":"Found reference to API \"setsockopt\" (Indicator: \"setsockopt\"; File: \"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk\")\n file/memory contains long string with (Indicator: \"setsockopt\"; File: \"librtmp-jni.so\")","origin":"File/Memory","mitre_attack_id":"T1205.002","relevance":1,"id":"string-879","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$25","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://android.googlesource.com\"","origin":"File/Memory","mitre_attack_id":"T1573","relevance":1,"id":"string-98","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Pattern Matching","name":"YARA signature match - AES encryption","description":"YARA signature for AES encryption matched on file \"libpglarmor.so\"\n YARA signature for AES encryption matched on file \"libtobEmbedPagEncrypt.so\"\n YARA signature for AES encryption matched on file \"libnms.so\"\n YARA signature for AES encryption matched on file \"sample.bin\"","origin":"YARA Signature","mitre_attack_id":"T1027","relevance":5,"id":"yara-103","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to retrieve credentials from memory","description":"file/memory contains long string with (Indicator: \"/maps\"; File: \"libapminsighta.so\")","origin":"File/Memory","mitre_attack_id":"T1555.002","relevance":1,"id":"string-5073","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Found an indicator for phone dialing capabilities","description":"$26","origin":"File/Memory","relevance":10,"id":"string-37","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]}],"intel_graph":{"map":{"File:096bf3bbec1cb64c3f6c6f5d0aedec2133482e81ca12c88b16efcecdeb9ceebe":{"type":"File","value":"096bf3bbec1cb64c3f6c6f5d0aedec2133482e81ca12c88b16efcecdeb9ceebe","filetype":"Android binary XML","filetype_short":"DROIDXML","mime_type":"application/octet-stream"},"File:0e654e03a38e119de0f4d11633711bd57e1e8b1a876eda74a90100a2a6e7daa4":{"type":"File","value":"0e654e03a38e119de0f4d11633711bd57e1e8b1a876eda74a90100a2a6e7daa4"},"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec":{"type":"File","value":"18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","filetype":"Zip archive data, at least v1.0 to extract, compression method=store","filetype_short":"ZIP","mime_type":"application/vnd.android.package-archive"},"File:1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a":{"type":"File","value":"1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6":{"type":"File","value":"19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6","filetype":"ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a":{"type":"File","value":"215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a","filetype":"Dalvik dex file version 035","filetype_short":"DEX","mime_type":"application/x-android-dex"},"File:23ecbc7cbb354f31ba37a1be1793d3bb53c00c92cdcf3867759d09d938a1d7c3":{"type":"File","value":"23ecbc7cbb354f31ba37a1be1793d3bb53c00c92cdcf3867759d09d938a1d7c3"},"File:26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722":{"type":"File","value":"26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:392e3c26cfb642e0afe8683815ab84049f4b4c3468fbbae3ebf3656f600c52f6":{"type":"File","value":"392e3c26cfb642e0afe8683815ab84049f4b4c3468fbbae3ebf3656f600c52f6","filetype":"ELF 64-bit LSB shared object, x86-64, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe":{"type":"File","value":"3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0":{"type":"File","value":"481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3":{"type":"File","value":"536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:65aef928f88f3ebcc9209d8e2901e3e7ee5d4ba57a0419e261547a584ca5cf3d":{"type":"File","value":"65aef928f88f3ebcc9209d8e2901e3e7ee5d4ba57a0419e261547a584ca5cf3d"},"File:704774c4fbd32a1fa78e6341253c6bd7aa2fbb5e43f140ded498025b670c05d7":{"type":"File","value":"704774c4fbd32a1fa78e6341253c6bd7aa2fbb5e43f140ded498025b670c05d7","filetype":"Dalvik dex file version 035","filetype_short":"DEX","mime_type":"application/x-android-dex"},"File:8ef88c6fa0f30551dba95d36bd4e1810cce9ad08a7f0e7e4fee78c2013279dd5":{"type":"File","value":"8ef88c6fa0f30551dba95d36bd4e1810cce9ad08a7f0e7e4fee78c2013279dd5","filetype":"Android package resource table (ARSC), 1993 string(s), utf8","filetype_short":"ARSC","mime_type":"application/vnd.ms-powerpoint"},"File:96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1":{"type":"File","value":"96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1","filetype":"ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90":{"type":"File","value":"a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:af2274ced26c37fdcb9f132e28e15fea327e18f43eb890962f2132957ce6fd40":{"type":"File","value":"af2274ced26c37fdcb9f132e28e15fea327e18f43eb890962f2132957ce6fd40","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:b37ce414136587a9746f7ee3cb16b2e5a5f7606482e167d7b2f9a2ff4634eaa2":{"type":"File","value":"b37ce414136587a9746f7ee3cb16b2e5a5f7606482e167d7b2f9a2ff4634eaa2","filetype":"XML 1.0 document, ASCII text","filetype_short":"XML","mime_type":"text/xml"},"File:b54ed9a16b1deb2a07023979bea91c96b9f6b73a024174e59dc1cb0456f8fa05":{"type":"File","value":"b54ed9a16b1deb2a07023979bea91c96b9f6b73a024174e59dc1cb0456f8fa05","filetype":"ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c":{"type":"File","value":"b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c","filetype":"data (from pem_certificate_decoder)","filetype_short":"DATA","mime_type":"application/x-x509-ca-cert"},"File:c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82":{"type":"File","value":"c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:c4240215bc20e71b01cc62b43edebd02749b3249d7daa8e7f1dc1514f064c274":{"type":"File","value":"c4240215bc20e71b01cc62b43edebd02749b3249d7daa8e7f1dc1514f064c274"},"File:d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003":{"type":"File","value":"d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19":{"type":"File","value":"d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19","filetype":"ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:e3ac3ed5edcdbb05dfcc8935c6801a1a9f9259806055a2de55779b3efe615c9c":{"type":"File","value":"e3ac3ed5edcdbb05dfcc8935c6801a1a9f9259806055a2de55779b3efe615c9c","filetype":"ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:efed4cb521f835ba926144e3d97ed8b4c45fecb4df2e4096c365437f3abfcb1d":{"type":"File","value":"efed4cb521f835ba926144e3d97ed8b4c45fecb4df2e4096c365437f3abfcb1d"},"File:f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267":{"type":"File","value":"f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d":{"type":"File","value":"f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d","filetype":"ASCII text","filetype_short":"ASCIITEXT","mime_type":"application/x-pem-file"},"File:f9d35b836ccb5380803aab5e6c76d708b1536fc6c82f27185e8cff5913824e1c":{"type":"File","value":"f9d35b836ccb5380803aab5e6c76d708b1536fc6c82f27185e8cff5913824e1c"},"File:f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85":{"type":"File","value":"f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85","filetype":"ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)","filetype_short":"ELF","mime_type":"application/x-executable-elf"},"File:fff8bdccdfe3e441eb1620ac2f18192235768e69b01287ffaaf228091bddb31e":{"type":"File","value":"fff8bdccdfe3e441eb1620ac2f18192235768e69b01287ffaaf228091bddb31e","filetype":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (752)","filetype_short":"XML","mime_type":"text/xml"}},"chains":[{"id":"1557528643692806467","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:096bf3bbec1cb64c3f6c6f5d0aedec2133482e81ca12c88b16efcecdeb9ceebe"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612151","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612153","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806464","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806475","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806474","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:392e3c26cfb642e0afe8683815ab84049f4b4c3468fbbae3ebf3656f600c52f6"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806469","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612148","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806468","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806473","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:704774c4fbd32a1fa78e6341253c6bd7aa2fbb5e43f140ded498025b670c05d7"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806465","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:8ef88c6fa0f30551dba95d36bd4e1810cce9ad08a7f0e7e4fee78c2013279dd5"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806460","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806462","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806471","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:af2274ced26c37fdcb9f132e28e15fea327e18f43eb890962f2132957ce6fd40"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806470","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:b37ce414136587a9746f7ee3cb16b2e5a5f7606482e167d7b2f9a2ff4634eaa2"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806472","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:b54ed9a16b1deb2a07023979bea91c96b9f6b73a024174e59dc1cb0456f8fa05"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612152","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806461","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806466","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612149","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:e3ac3ed5edcdbb05dfcc8935c6801a1a9f9259806055a2de55779b3efe615c9c"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612154","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806463","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643688612150","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:fff8bdccdfe3e441eb1620ac2f18192235768e69b01287ffaaf228091bddb31e"}],"verdict":{"verdict":"unknown"}},{"id":"1557528643692806459","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d"},{"edge_kind":"extracted_from_archive","from_key":"File:f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d","to_key":"File:b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c"}],"verdict":{"verdict":"unknown"}},{"id":"sandbox_files","root":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","edges":[{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:8ef88c6fa0f30551dba95d36bd4e1810cce9ad08a7f0e7e4fee78c2013279dd5"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:e3ac3ed5edcdbb05dfcc8935c6801a1a9f9259806055a2de55779b3efe615c9c"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:096bf3bbec1cb64c3f6c6f5d0aedec2133482e81ca12c88b16efcecdeb9ceebe"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:704774c4fbd32a1fa78e6341253c6bd7aa2fbb5e43f140ded498025b670c05d7"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:af2274ced26c37fdcb9f132e28e15fea327e18f43eb890962f2132957ce6fd40"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:b37ce414136587a9746f7ee3cb16b2e5a5f7606482e167d7b2f9a2ff4634eaa2"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:b54ed9a16b1deb2a07023979bea91c96b9f6b73a024174e59dc1cb0456f8fa05"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:fff8bdccdfe3e441eb1620ac2f18192235768e69b01287ffaaf228091bddb31e"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:392e3c26cfb642e0afe8683815ab84049f4b4c3468fbbae3ebf3656f600c52f6"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:65aef928f88f3ebcc9209d8e2901e3e7ee5d4ba57a0419e261547a584ca5cf3d"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:efed4cb521f835ba926144e3d97ed8b4c45fecb4df2e4096c365437f3abfcb1d"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:c4240215bc20e71b01cc62b43edebd02749b3249d7daa8e7f1dc1514f064c274"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:0e654e03a38e119de0f4d11633711bd57e1e8b1a876eda74a90100a2a6e7daa4"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:23ecbc7cbb354f31ba37a1be1793d3bb53c00c92cdcf3867759d09d938a1d7c3"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85"},{"edge_kind":"extracted","from_key":"File:18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec","to_key":"File:f9d35b836ccb5380803aab5e6c76d708b1536fc6c82f27185e8cff5913824e1c"}],"verdict":{"verdict":"unknown","verdict_source":"sandbox"}}]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":44,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Extracted Files"],"sandbox_reports":[{"id":"6ac6cf8e4ad9dbb410041c95","environment_id":200,"environment_description":"Android Static Analysis","state":"SUCCESS","verdict":"no specific threat","submit_name":"Partidas De Hoje_v6.0_MOD_androidtunado.com.apk","analysis_start_time":"2026-10-07T23:02:43+00:00","indicators_count":{"informative":16,"suspicious":1,"malicious":0},"tags":["Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":[],"extracted_files":[{"name":"b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c","sha256":"b8d25b845f276e25851f7a86261fc9c98ed4802240c31b21d466958d5e25096c","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libtt_ugen_layout.so","sha256":"481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"resources.arsc","sha256":"8ef88c6fa0f30551dba95d36bd4e1810cce9ad08a7f0e7e4fee78c2013279dd5","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libfile_lock_pgl.so","sha256":"f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/arm64-v8a/libapplovin-native-crash-reporter.so","sha256":"d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/librtmp-jni.so","sha256":"c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libtobEmbedPagEncrypt.so","sha256":"536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"assets/vwwwwwvwww/x86/lib8acc8aaddd70b203.so","sha256":"e3ac3ed5edcdbb05dfcc8935c6801a1a9f9259806055a2de55779b3efe615c9c","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libpglarmor.so","sha256":"26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/arm64-v8a/libunitycoherencenative.so","sha256":"19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libapminsighta.so","sha256":"a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"AndroidManifest.xml","sha256":"096bf3bbec1cb64c3f6c6f5d0aedec2133482e81ca12c88b16efcecdeb9ceebe","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""},{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"classes.dex","sha256":"704774c4fbd32a1fa78e6341253c6bd7aa2fbb5e43f140ded498025b670c05d7","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libapminsightb.so","sha256":"3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/arm64-v8a/libnative-lib.so","sha256":"96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libpl_droidsonroids_gif.so","sha256":"f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libnms.so","sha256":"d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"assets/vwwwwwvwww/arm/lib8acc8aaddd70b203.so","sha256":"af2274ced26c37fdcb9f132e28e15fea327e18f43eb890962f2132957ce6fd40","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"META-INF/KEY0.RSA.pem","sha256":"f9a9aac323db0929a8ed1fcf5c7352ea928134ebefa7847def6893df0a8d7a6d","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"resources.arsc_public.xml","sha256":"b37ce414136587a9746f7ee3cb16b2e5a5f7606482e167d7b2f9a2ff4634eaa2","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"lib/armeabi-v7a/libbuffer_pgl.so","sha256":"1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"assets/vwwwwwvwww/arm64/lib8acc8aaddd70b203.so","sha256":"b54ed9a16b1deb2a07023979bea91c96b9f6b73a024174e59dc1cb0456f8fa05","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"resources.arsc_decoded","sha256":"fff8bdccdfe3e441eb1620ac2f18192235768e69b01287ffaaf228091bddb31e","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"assets/vwwwwwvwww/x86_64/lib8acc8aaddd70b203.so","sha256":"392e3c26cfb642e0afe8683815ab84049f4b4c3468fbbae3ebf3656f600c52f6","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"assets/audience_network/classes.dex","sha256":"215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"libnms.so","sha256":"d0f423d071fa3970142fa843a06e142f7685d46c8e0a1444434cd4e890ca5003","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libpglarmor.so","sha256":"26c29311485d8a9306761ed7451f6e7bbe5a6681b459698d838c6ff20e4d3722","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libtobEmbedPagEncrypt.so","sha256":"536c0713b93d6df6b22776233694ed858f36705b385dbc24812085a24d84eed3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libapplovin-native-crash-reporter.so","sha256":"d3bb134c06aa92af3995b1aeac1e77ef429c707bf5f4c2ed196d045d441cdf19","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libnative-lib.so","sha256":"96ecd17e8a8aca7a1f3a8148c6c80f4208e0cafd655add01165d2de78b996ad1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libunitycoherencenative.so","sha256":"19ca71817e9aeee4a8e2449588cb112324869aab0cf828a8a320abe7b9c7e6c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libtt_ugen_layout.so","sha256":"481afcbe3dd231851a0ab2571ee2be15558e85bd4f56cf40d33c9abd0bea65b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"KEY0.SF","sha256":"65aef928f88f3ebcc9209d8e2901e3e7ee5d4ba57a0419e261547a584ca5cf3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"MANIFEST.MF","sha256":"efed4cb521f835ba926144e3d97ed8b4c45fecb4df2e4096c365437f3abfcb1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libapminsightb.so","sha256":"3c897b4ed3ce6d6a5ddc3f21fa4f56272e440cb5d63e76e1590d4c73a0db30fe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libapminsighta.so","sha256":"a525aaed1fb487739d1151de68f02f1e4344514a305bea2a3457138a8c2a3e90","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"librtmp-jni.so","sha256":"c359b0b37d80b83660147dab69c35b0d92e4b3f7a35900d0bf2f3ed740428b82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libpl_droidsonroids_gif.so","sha256":"f99c1a89dd587b62287925d79065fe179dfe572c0625d231dfad9d2386b7e267","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"kotlin.kotlin_builtins","sha256":"c4240215bc20e71b01cc62b43edebd02749b3249d7daa8e7f1dc1514f064c274","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"collections.kotlin_builtins","sha256":"0e654e03a38e119de0f4d11633711bd57e1e8b1a876eda74a90100a2a6e7daa4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libbuffer_pgl.so","sha256":"1959f8616e7ed8ae3a4c4edc4bb557c55d1fea3de0096b3842e37f42e2e7222a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"reflect.kotlin_builtins","sha256":"23ecbc7cbb354f31ba37a1be1793d3bb53c00c92cdcf3867759d09d938a1d7c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"libfile_lock_pgl.so","sha256":"f9e3402f0cff891a4dcf38e7c1876c889b97ab61daa426fe36ca28b28c1fed85","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]},{"name":"ranges.kotlin_builtins","sha256":"f9d35b836ccb5380803aab5e6c76d708b1536fc6c82f27185e8cff5913824e1c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6ac6cf8e4ad9dbb410041c95"}]}],"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{"sandbox_job_ids":["6ac6cf8e4ad9dbb410041c95"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Sample 18dcc14481c7… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 18dcc14481c7…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec"}],["$","meta","4",{"property":"og:title","content":"Sample 18dcc14481c7… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 18dcc14481c7…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/18dcc14481c7b184eaeaef6a23b992fdf0ef085375570d5d1bfd6ff63524b9ec"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 18dcc14481c7… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 18dcc14481c7…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L27","11",{}]]