Analysis
-
max time kernel
3536573s -
max time network
155s -
platform
android_x86 -
resource
android-x86-arm-20231023-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system -
submitted
15-11-2023 11:40
Static task
static1
Behavioral task
behavioral1
Sample
Cool Photo Effect_1.6.apk
Resource
android-x64-20231023.1-en
Behavioral task
behavioral2
Sample
Cool Photo Effect_1.6.apk
Resource
android-x64-arm64-20231023-en
Behavioral task
behavioral3
Sample
Cool Photo Effect_1.6.apk
Resource
android-x86-arm-20231023-en
General
-
Target
Cool Photo Effect_1.6.apk
-
Size
98.5MB
-
MD5
e02e5e024b86607bfd4464c4eccad502
-
SHA1
34e51607e9697e67ccaa2975822aad1906f72067
-
SHA256
11d84c07e2903a06ad01d1e91188dc72a5a34b82f8a06a413464387d0a5756be
-
SHA512
886568471c4d67ff69b28057429b78b2c8384b2a3d2a6d977ebecf4f35c94e0db373b857a8b1c10a25ab48d8aefb831274e6cd2108c9ccb642917d8c896faf1f
-
SSDEEP
1572864:+jEhT1CL4aKxtb0RrMG5b4Iez0ZpyA340PBw/nNNgCt:n0JK1t
Malware Config
Extracted
joker
https://ebysto.oss-me-east-1.aliyuncs.com/tap1
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
pid Process 4267 com.lab.photos.edit -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lab.photos.edit -
Loads dropped Dex/Jar 5 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.lab.photos.edit/cache/1658186039475.jar 4458 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.lab.photos.edit/cache/1658186039475.jar --output-vdex-fd=102 --oat-fd=103 --oat-location=/data/user/0/com.lab.photos.edit/cache/oat/x86/1658186039475.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.lab.photos.edit/cache/1658186039475.jar 4267 com.lab.photos.edit Anonymous-DexFile@0xcc880000-0xcc881480 4267 com.lab.photos.edit /data/user/0/com.lab.photos.edit/files/earstne 4267 com.lab.photos.edit /data/user/0/com.lab.photos.edit/files/goods 4267 com.lab.photos.edit -
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.lab.photos.edit -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.lab.photos.edit
Processes
-
com.lab.photos.edit1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4267 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.lab.photos.edit/cache/1658186039475.jar --output-vdex-fd=102 --oat-fd=103 --oat-location=/data/user/0/com.lab.photos.edit/cache/oat/x86/1658186039475.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4458
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5d532cbd4f180fe5fc0d6bb5f0e1677a2
SHA1991f862931b10f1e4efcb27f60dbc596ca4fbc95
SHA2565af63d2127385ce87df5e729040874f5043b20ce14e4c60dd95e410d660355da
SHA512a071eadc4a25a4ce82510e5c6acc34f6d9c324e782be149209eb9f484fa6f1f8809261627368573be434ab513e1f66bf2dbb48cbc849b431d9dfbccdafce4dc4
-
Filesize
146B
MD5374b008b39626f4fad55d2ca6543f833
SHA1aee5ee4f542d2ea89e4ff50bb6463c23d31677c8
SHA2560465fd5e228676707d0d9606a581fb582c520ea4ed4cf830bdc4340cef609913
SHA51267b639016e4c4b07299355bfd87131858b046fd2667ef561bd85e56bd5451139f2ff955d40d7b275a49ca9312cbff79c08b13b1dcdb036c4b8f0bb239b9ef477
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5323c44b1fb4c7544f93d619fdead50ad
SHA17fe12cb3eed665c0f77b06f6c49e587399ab7cd0
SHA2566ef0484197e499bf78113aa52aa5bf1482536a6211176cc4c89837ad0d56449f
SHA512a7019c5c9ecc1fd6b36f6a24e137d3dba9161725922a502b2ffe5571136fd2ffedd7257ff0f6c2bf9ba64d2e6ac41dfae465d67c0f5809338798402bfdbe10b4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5ed15589e2c1a6c2f39195b102bde5e55
SHA18fa578684b153ff82b853bf766cd217da04dba8f
SHA256fffa3e4f8651fa0a1cb5e1096b5f41c20f7b5f4a09e46d8ab007c3178ddbed36
SHA512423d614e9710947d0eba18e2c324c19926ffa58cbddbc09a444277e70f70cb44377598c27681af79e4e8d47a01c976d29254eecaab1a273a047ccb16b15f15ae
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5c44684089819768c5968fe19f25638e6
SHA16983c54cd5236e4dfb6259198be2cf75dfa51a9e
SHA256ea8ac3e83f6ceff2ccfd34eae0839a2636a839695a7f90b7d2b128b2f4ff8e14
SHA512e00c23f221f5f61631feec95eb980ecbb792df20040647c0db879ac00f9343d99058a1171e6c9deb95321b0e4b26416a7f64ac4a1dcde0d70ac6f8511d10ffea
-
Filesize
16KB
MD549d872b1a5f87fdd84eeeb42463d974c
SHA18295b9e425478b6473c3b022e271068dd701ada8
SHA256342cff14c63faa70342caac75440e2e1089a88482c80374a6aac7e0874ddca78
SHA5126126cfc019007eaf3b7414652908810f30d48037be3fa5589a623017567fae70fcbf0e07dd4be185e3758dabd5bd6af5cdd12d643c8eac2ac05e1bdb9f0f65d5
-
Filesize
16KB
MD54f891c458fed9488dca0d9470210dab7
SHA18f9823bd4ec0c8fa090a462d11e89e609e511a02
SHA256ca59dab54608e921b3a7849ad33d7958b8ad67be0b40e7b2edea914d9d36e6a8
SHA512b53e6d17f1c1e745509046c88a75b4543a306f18df8a6e0b143e9ded10120eb65d7405a9ebb97e80d0814b42c61ada77d579e51c2d7c7b51c3c8cfaeb50e1d71
-
Filesize
16KB
MD58cc6ba271bd70bbe301d4c4bcbd763a7
SHA1cf63c49ebe1b5a76506f86213eec230e51f3b150
SHA2562ac78e7758764bb4001792486d5d98f6678b288752ed3105175809f37c7d012b
SHA512c29471737ecff90b01799138b72d9e5c57181ecd0ec2654c819af8e6cee39259f5da297063a84bd5d8bbd3e5dd7095ec74f6ca72d956c7e7bd146f9222198a76
-
Filesize
16KB
MD509ccee72cf51692d49bc48a1687247de
SHA18af9c06a2a5fb1fd10352d1d66198378dad7ecb2
SHA25600722119e5f80d2844ab83cc2c30c5fce7cc0842936f9444dfbdf25d8d2f3b72
SHA512d6f9e9d11f54421bee47b3ccfe6d0637f8ebca60bf12188578d18d60b0fa0485b16043153febb953a697d49cc5fb01ad0879b31025e9dc236c79249874bb7882
-
Filesize
512B
MD50a3dc94f3f07401751ebffd2df842d0b
SHA19afe923bba6f72ed6dccd0c6e9789c90872af9af
SHA25630a9564fef3f7a366293b0233f8ff6be24e1e99de896dfbaf94d5607161663df
SHA512f3a00d0fa907875cc775966cfb129b7c4bf9d90f755d0783f745686fa693c3a9776aa7ef4a202339df4df934e87b0de40ce753a77804b37ff897370219be758d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
36KB
MD5dc3dba600343d40a18001e9b416e3606
SHA174f371418c05e825e42a52a0c43d81fc910c8d37
SHA2569cdb47124ea0b8ec4ac29656a27c8d89484b0f52ad8f2026c76636ae7da61b09
SHA512bb236cf64141b12a543ba56e3c5ee15d1f966913c8d2a50387e22a3fd265913a9ef76a455d874dc81688129ed67c59b6cb754780b34665e975f2fc09cda102aa
-
Filesize
4KB
MD5ad0057ed80ee96e79269704b0f60aa83
SHA112b92419eb04378a0d3f744baac29cbb1196a6f6
SHA256f9a4c529e7e52daddc7a1062049d2169464256936fed7a542a73f3b2a4e3682a
SHA5120e50db15728484da36c30fdee58ec40b77a5533b5d00254b4c4fb49bbddfc09e4f27c8bfb89de1d8b0892cc75ad788acf9590ae7110aefd6c7ba0e52d50ca7dd
-
Filesize
4KB
MD5db957a1a5455424600098fc76c430c72
SHA17428a44d004f082860ac08ae0062349b77586517
SHA2560bed8bd6ad56dcbb272fa8a7b39180f19216fd1ed2d60d310d8759014962d85d
SHA5123382a1579923746dd09a563e078bd57132a3c48b456ca3c7f8f7fdf8a203bffc0b1bf4579675e1f41161215fd51741da1337baa6226cc74d8f0867c50b8c9be0
-
Filesize
4KB
MD5bc474d79bcd46b7cadabb989d90326e1
SHA1f14b8e9f4b482a5437bec185dfef3c11a35b6f07
SHA25686d99d4ba260843800594390d72337741563fc775686fedaff4e2468fbc3f134
SHA5120f555385add3b048584a89b84608a768074ff191f38c8623325df78e822c671598cca23fe5c9cb2e14b94b697016e484e7ec61b843127e9c958c2dcbb5de1e37
-
Filesize
4KB
MD59f687cc804bb1c9ed63fff8d19bf4a31
SHA104fc19339ae917b9e88e40c0e47776d008f85b7b
SHA2561c60887c6098afd78db5a9c2a80cf3e85c0470e2fab12bba6a023b71cb228053
SHA51237b48671bda14efeb014ff31612fa466141e18fe3ccb96531693ba8d3b74e44623539a277558301f7e023cc37e9bc62b9d5366feaeef680435e1975a0e62d459
-
Filesize
4KB
MD5c1561c298a56000fd33750b752d3c0cf
SHA19b6c4c5ea6a3ef1b4dad259e3b3646636e66d277
SHA25675c5e3c76f524dbff3d91c53fe406b2f0dd904b9767b3ed86636ac1e166ff88a
SHA5129fcab491ca3f13d11e938db6a6b7d6061d96cc605306565e077669a461a2a37fa308e7c6aaf6a59bd24e6940a38befcbbd05d979e3409116f304708e7b0fab6e
-
/data/data/com.lab.photos.edit/files/.com.google.firebase.crashlytics.files.v2:com.lab.photos.edit/com.crashlytics.settings.json
Filesize714B
MD5d370cf4e08321ea1c97fbc9d2a42f259
SHA10777ae49067d4fea2096b585281255df6859cf2c
SHA2564908efc31eb335536f2e1b32c6f71c2a244274ab74195939696b66fcf891e17e
SHA512800392ad56f2417b29d65affaa150a6cc02fe4cdc6200fb22e7e0a648c89b12e7bd125ca83f8f207aef761c3e5fa5eee15234f273d018aeff55c18d9138c9d26
-
/data/data/com.lab.photos.edit/files/.com.google.firebase.crashlytics.files.v2:com.lab.photos.edit/open-sessions/6554AE830161000110ABD7256467481F/report
Filesize736B
MD50e20e64f04676697de0a4e5c378bfed8
SHA1999e0d4cd1c743fea8165569606069857fa299e7
SHA256e579658db4cdd02e83550a3eb53212eed25e0b435e67a70af2d5ff5892428bdd
SHA512feba33bf22601ff73e94eeaef59cdfc49d3dcd8e25c001eec1ca41957d589e379cfe5e791aa8619b7d15f9772f7dd5a8e13afa1b285e85996ef926baf1779f0b
-
/data/data/com.lab.photos.edit/files/.com.google.firebase.crashlytics.files.v2:com.lab.photos.edit/open-sessions/6554AE830161000110ABD7256467481F/userlog
Filesize529B
MD5b9c8e3e6e7630a3e7c29dce2381956d4
SHA1ab3d6b80ab353032486e83a181febc8664538bb4
SHA256ab36d63ec7cae1b980dbb29a5718933bebc217ba25f14f1fbc6f43db2f827176
SHA51234ab257dfd0c98549b35e06194681a7dbe32779cc2d3c851db79c33f3e78754816e8297a2a5e156d09ebe5489bc96220327bd770583b5a6b1c1045c749213e45
-
/data/data/com.lab.photos.edit/files/.com.google.firebase.crashlytics.files.v2:com.lab.photos.edit/open-sessions/6554AE830161000110ABD7256467481F/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
568B
MD5761b56374b6c8191fdacd14c187a3a23
SHA13c5142c3c61cb11ec362f7028d9fd05f7bdf3fc6
SHA2563a5ea43415e207af1cf9fc3346c71feca19ae3cc98974efe7c91d01ffecde019
SHA512b4837661eea1be6ffd6f8bc35e01fc16f5884f0cf19886935cb1704c47f5e70d50c25faaf13e28fd337e114259ae8f06fb6e0b5c87cb4e73b51f550cd332bbed
-
Filesize
90B
MD5f5cb8881634542530b965fbdbb8c8fca
SHA1f88ddfdb16afc580f3c2d023257e97b997917f07
SHA25630a1ec1d255e1f025ed1ae6469f625755f7cd68fcfcaaec76cc20d5ce5115760
SHA5122eda6e1ba5e7db6cb7ca248b3b17fcbe0276466cd1300e15cbe827dbefd365e5871f94aae983ee1473cdda4c788834bbc184e9b280c38013845b812114c86984
-
Filesize
3KB
MD54b783af48a7d2110217a31289d24604b
SHA198f19dd0d7e788006271075212bbd8e0ad2505fa
SHA256a36da52ae152c25d44ceb18246081aa19a6f002790d7a56ec5f8b19490ef0bd8
SHA5125467add202090a271639c2f29ffa61d0b80aef5d7745c7b25b6af097680f957addf75790cca763cd7db7247e68015cc204aa945bab0b50bcd9477f8e944fbfc2
-
/data/data/com.lab.photos.edit/files/frc_1:362684862920:android:6174cba3b2b31c27d3f0fd_firebase_activate.json
Filesize194B
MD5154de28d641314be4f30752d5f2b4127
SHA17ef2c208770554b6bb07e27ad9cfa8d0f16c7643
SHA256edde8a0e642168985bb451d4540b5bdfe72e540f528f6773f9a9f95d011167e6
SHA5122587ffbaeab92019d1a84c1c25c1d084478c9d416af7404bc9e100c5b184450968c3fc3e6af21fc6845da3afc45902d79b1858db9e8a302305f260c335aac68f
-
/data/data/com.lab.photos.edit/files/frc_1:362684862920:android:6174cba3b2b31c27d3f0fd_firebase_fetch.json
Filesize194B
MD5154de28d641314be4f30752d5f2b4127
SHA17ef2c208770554b6bb07e27ad9cfa8d0f16c7643
SHA256edde8a0e642168985bb451d4540b5bdfe72e540f528f6773f9a9f95d011167e6
SHA5122587ffbaeab92019d1a84c1c25c1d084478c9d416af7404bc9e100c5b184450968c3fc3e6af21fc6845da3afc45902d79b1858db9e8a302305f260c335aac68f
-
Filesize
32KB
MD588f00985d5e8cb60857698fa7fa2c2e4
SHA1d9d19d5e778aaba16c91ecf4cc93a01d9fd2e708
SHA256b32935ff80ccea3e131b80a5e74592b78acd6596a54093e740e1f062af3def12
SHA51213865c22218dba4d73fc5571e97390c4f3e0cdf8e6e117138f38afcdd91b4213d33465185ead0e5436a94bd511a4cdcbf4ed67b64a2bd9dafa611591dd3f4166
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD56c6bc768e27093278ff26ad39ce74933
SHA1fee33b1d7ea65ad782fc71f91f49b88fe281d471
SHA25648159264a9ed699980721005f6ca6a06cf4bcd398e0994d2dde089ba8d7c7746
SHA512fa8370635e75b280aa4dbf27c9cbb015de9bc87fda9d65d17a98d7efb3ceb71e155744dcae41484e4cf674009cc5af843135dc34483831f8f4e099a742735f1b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5591087ae7f32f7f102931268909c1b03
SHA1f6225da7d52af08c9b867fc6a2310deeb63f2440
SHA256c08f6cfb19cf9bac07d5f29c4070eda234269171c8423c54d16db296ca298a46
SHA5127873df630b7470c7e3f4e71cd41dbbb1222814667b41f1f5e3ac6056c051fe84de69396799bcd5648cf02970468f39b2235fb29d6f0562d17983ee36eef93063
-
Filesize
108KB
MD57d97e893208498d781410a888de504bd
SHA126b8c32214788de1b2380ee59e79b829dd278c49
SHA256a3446aedb9b0a27b76273fa62ec3e08ca4f92b6dd5185a967ca89dcf55b41b04
SHA512d3bbd0baf76e026bfab6ac93811145c39d7dbc4f7a80079344e967bfc1e71dc8d720fac8e17be0304c0cd7b99740068bec0ca8dc4585e33a7fcde656c2546712
-
Filesize
20KB
MD57bdd3f65716691c8dfdace47c31c1d1a
SHA15c7b7dd82688ab4caa558fd2791cb3321cf42163
SHA25686af332924931b41867b7365f096f1e9f02b5d178538675b6ab813d70bcccfde
SHA512cad1772608e1683a922cbaa105e8f141ea33d0e3b1b5302538f53c35e0b2e3bea06ee31ab2cdfc377b7a66b88c4419aca478ae007f4bbd6d775a2c34401c32fb
-
Filesize
20KB
MD53e4c7cfe03c0013124c0a0b4a7f79735
SHA17061aaa831e19f82510a07d6628550fa4c4abc87
SHA256a35c31d98ca212a0553053527fc39a7a8c8cfe22e87fd72d20f81a92cdc7bbaa
SHA512e9341778de8925924b49b64181f5091f0c96898e7587a05aefceb0ee87921c1bb392081a305161b04123b59c7d4209f279d92702090dac9331b852f6e755a1cd
-
Filesize
4KB
MD56317c76e2ce312adce1453de5d4703a7
SHA1e4643d25d919a1a506d36cc50e772e1060703de0
SHA2569ab42b5a4abced715e1a51d1fdf67ef793ca31d3826148a4bf246544ed5a2f6a
SHA512b937e635229551ab13515c21ee4186ac8a3686ebc419411e5c98172ae75df91740bffa1d5d77c2e6b205b045c1c04648d50b60e9fb513e7da60dab963794f902
-
Filesize
70KB
MD5525fee9bfdc95bdefe919eea26e3c452
SHA103f1325b711fd4445830e8e50e9d3f6730540507
SHA2568b3c121661902f58291d3437e12cadb89b101c4031ddace6bba8b7159186b130
SHA512eee2ee9dee6af18565a940835d2e4dd3cfcaa24685b71484c5f05c061f1e3432ee94b2f32767ed3f98499647873f885b0dde43b0f3e3af32fdbc8e94926e1bb7
-
Filesize
5KB
MD5b2450ab2585ef304d6eff393fa8d20f8
SHA17350c6adba89b7608ba9dfff7b099ac4613693ca
SHA256db211f72d78e154c0068681022e422946c1858d1184d31e5e439fb05d7624a38
SHA5121dcac23e311fd56e4c51de83908ab6c92b1f6e6aecf04d1883abf2d4863de94139680a896ac0a3c2d00e5aa3971ca12f434774c844c56db0355004298a7188f5