Analysis
-
max time kernel
2690723s -
max time network
165s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23-12-2023 15:49
Static task
static1
Behavioral task
behavioral1
Sample
421da2fbe63afcf1d8b4c25d0a4dd5aab14804d1213b7222b9256a251828390f.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
hack.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
hack.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
hack.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
421da2fbe63afcf1d8b4c25d0a4dd5aab14804d1213b7222b9256a251828390f.apk
-
Size
20.5MB
-
MD5
3ab0c3c14249dd0b17f06e816605109a
-
SHA1
a73ad235741ba6e305ed1fd4c38c2dc6231844c1
-
SHA256
421da2fbe63afcf1d8b4c25d0a4dd5aab14804d1213b7222b9256a251828390f
-
SHA512
5c212881fb10019958fa11d376641f41d31ce94319d4e1f5125f05e3aee48b89ec684f59a13711d158015b888faf668e4de9f2b506a7fefc726ada8012105b48
-
SSDEEP
393216:xo1v4oouF7UrwaAQF/QBYdtOBdPFE6by2c70yW6gYj6lkXiJJznXiNo31nkNAX5M:xoNguFwrwA4GtOBdPW2r6f6Z1XSInke+
Malware Config
Signatures
-
Requests cell location 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.xiaojukeji.didi.customer Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.xiaojukeji.didi.customer -
Checks Android system properties for emulator presence. 4 IoCs
description ioc Process Accessed system property key: ro.product.model com.xiaojukeji.didi.customer Accessed system property key: ro.serialno com.xiaojukeji.didi.customer Accessed system property key: ro.product.device com.xiaojukeji.didi.customer Accessed system property key: ro.bootloader com.xiaojukeji.didi.customer -
Checks Qemu related system properties. 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: ro.kernel.qemu com.xiaojukeji.didi.customer -
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk 4334 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/oat/x86/hack.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk 4285 com.xiaojukeji.didi.customer /data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk 4394 com.xiaojukeji.didi.customer:pushService /data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk 4436 com.xiaojukeji.didi.customer:pushservice -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.xiaojukeji.didi.customer -
Uses Crypto APIs (Might try to encrypt user data) 3 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xiaojukeji.didi.customer:pushService Framework API call javax.crypto.Cipher.doFinal com.xiaojukeji.didi.customer:pushservice Framework API call javax.crypto.Cipher.doFinal com.xiaojukeji.didi.customer
Processes
-
com.xiaojukeji.didi.customer1⤵
- Requests cell location
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4285 -
cat /proc/cpuinfo2⤵PID:4313
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/hack.apk --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.xiaojukeji.didi.customer/files/hotpatch_hack/oat/x86/hack.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4334
-
-
cat /proc/cpuinfo2⤵PID:4364
-
-
cat /proc/cpuinfo2⤵PID:4650
-
-
com.xiaojukeji.didi.customer:pushService1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4394
-
com.xiaojukeji.didi.customer:pushservice1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.xiaojukeji.didi.customer/app_storage/com.didi.soda.customer.storage.a/80218301-1251443409
Filesize187B
MD53274316df85a7d21bf0d72f525a22c52
SHA1084e3b74f016d5893269477c20cbea720313c430
SHA2561303b926c2c2280e5f2a72310379eaed4debfa10bc89e37e62af733eaa45dd32
SHA51275101e4b17c9eb8fe19848effcdd50437290812214fdbd8a8f95f3520704343a0ec157ea111983fd3cb59b77c4aea73f1a3595a82f9d65ebd8285df27e931dc9
-
/data/data/com.xiaojukeji.didi.customer/app_storage/com.didi.soda.customer.storage.e/80218301-1251443409
Filesize175B
MD56b76af6995a6036d4bf617a4794c11f5
SHA13cc868759f1acbc99d77fd36b09c89e2fb2afbd9
SHA2561a1918bbe1a461301b9040087473ef5fa4a17f7421dcec073edbc24e2c1460b5
SHA51215c8c3bf506c43c3926ce9e5f8d937800d6089ac692d16eee8ea85efcab905c94476650c546b040e90b0d4dc4c1bc5bd5fa5a6e8cc576fe43bb4a6933b4222d5
-
/data/data/com.xiaojukeji.didi.customer/app_storage/com.didi.soda.customer.storage.e/80218301-1251443409
Filesize175B
MD5526a03b40b0e192830b909ad586151a7
SHA1162a0a8bcb5e2784341da0632306612328079ec6
SHA25697f71e9614aa3fa822096011128f4657627b5aa0ed3e8a167c660521e09ab28c
SHA512a3953901ee5b5237f05088b3a90ba19d4fcba59088cabee8bf7c096c0c8f949b77d4a9f02f118662d2cd2697bc41b400db9b8f4a29f8f6a9d3d5708f3767472c
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD59e907b9b661df8a95728c73bb786e6fc
SHA17d7e2ded8781a70fa0e0c9dfb54bb9441d9260a1
SHA25643a86ec0996334901a1f70c2416dbd337922fa59013c17e65544b1dfb35ea0f2
SHA51218c82512954b21145568a1b22e36f6a604083e2313d5f1636dcc513f6e71c62c0b59c0490581d317d8b32b19155236786e82ba2750fd1290e5a760057025d1c7
-
Filesize
32KB
MD52076a049d18b3fee0cb6dc963515746d
SHA1ff9d31dcce07ee55f29e14835058b77df410dfdc
SHA25634a29bae467237389f0e1bfb3b79016cefe97bb4b39d3db44756e41919e2aa98
SHA5126a4dbc02dc4367985e0116e746e0c808472ebbef031ad79ca98922818d16a253d46bcaae57c4d2509acec20ef30ec9b1bef764f559d6729f40e6796ac8151db1
-
Filesize
16KB
MD5c35a1670f90dde8ec881921caf434b8b
SHA179bb039250d786b3e02ae9b2a725af916fd81a25
SHA2563fa80f48f8fb018b37647bdb4bb34d4686447a119c9882af6c82878c6f9854ff
SHA512a5c31ff102bedb2642957c36a9440e6e5b550630470357f50b42fc9708e20b0e5b952a0443dc2bccaf2f24f68386e9c682d3befcd8472f20343fc228e9278f7e
-
Filesize
28KB
MD5dda91f551d7dfd0b8ff11fe48abb2a39
SHA1bc271137026cb9e5c04796769129e5cff30c3251
SHA25622b8d547daf6107bc0197b855bdf6cafaf0804b7c1db2d3e2d5225f2411a8367
SHA512c15b4e022aefb8dc4531d249761c825ce9c15cf702dda0893157f602af2d28ad0a67a083e22d5b8ccdaf61696c4411e756a29d4051131f702885d66c92793b6e
-
Filesize
512B
MD5640a4fcfac51c95182e8d3a5b031b952
SHA1afa7e9124e3e71af29145e63db758733c736202e
SHA2565d36fbc38d5c5a5c6af3cbb0a95e370631ccaa87c8a384f6e25c66ec5ee5f575
SHA51230d079da90063309086cd7cff390d95a9f4f4d34969e73b79c6df0e96e2ab291a692dd561d21546bddb82ac25f553e22cfcb3769403365f889fe7baeb8a1344a
-
Filesize
32KB
MD5c823e5e427b8535539f93fa709fa934f
SHA1f69e15e59764020c041e4917e78f3fc5f2c1db57
SHA256c45518723f018b2e6d46a97d357dadbced1685c8c2f0ad41b2cb6fd2ea867b5b
SHA5125dfd07e1e2eec88075bec1cef11b02131f49dcd97698ecff7a5708c49a539dca2f31ced12b8c585228ba4ed279634a494aedefeeace18c8221fb685a590fed0d
-
Filesize
4KB
MD5cfaf64f16141076dd1c68585aa68c3bd
SHA1475c0ca7b07fee220b13e6c873279fe0334a48e4
SHA256ecdfb8a76f01416b6bea1e2ae4d604b05e5a9e8b92fa6e9b2ad94f541ce7b30d
SHA5128f47c98a4cc82969bf2f52af2af29734345b502e1bf566ab91ccef8fea22e01591cb2a84d396a9483f6fdf8a6d1ada3bd8212c3c02a4f80b33457ff81b33a6dc
-
Filesize
746B
MD50831d25235066a2175656d9555a4813b
SHA11cbfaeb526bd38176e1e2053f76c47043cd08885
SHA2562e979ed75e52ffcbcd84a54fd1b1e76b94e2f5f98c6f8a431d96a8226c01ac20
SHA512e1d57728371bc82ab9801038afc48dd93109b91930ec697adb5e75009daf8c281bd184dbab75c37e1700afc3027b6899bc284343465dbbc86c144e443cc0cfd4
-
Filesize
16KB
MD5ca5a9ef73ec69417b4bfc8c766caa798
SHA18f2dce8c54d83bab9f95adb0df94cfa8b38f17d4
SHA256eb30cb7ea7231c8588cbd8fe2356dbe485d18d8e9aad29b91c5bf55b0e34cfd4
SHA512f200c41ca17e4012ed1c2f62e5b1ece7cb6b083d4be907e68cc0e3eced8d44111586c6ac73409a86bed554d875f347f61eaa23e650c5837c7b0172e1385639a9
-
Filesize
99B
MD50548f1c054c8c0030f388633a615b85f
SHA1355d09a1c609d2a5ca68b74cb0e66b35866ab4e1
SHA2563716240a82a2c4d56d1a1550c206a48430553856da1fe7b16c999ec0fe817fa7
SHA512ae33e9435578d79e0c6698be878f35c838a568b6aa7215b00a6bdac6e5b35f7c0bc87a81c9d76a387bd6e1e233225a9ac2782ddd501bc679cb76d1b24aa4234a
-
Filesize
746B
MD563f8ccbd6d43328f456c8f2d56d56547
SHA13cb0bdac74d123b13b2aa56d7790d7f49b610f94
SHA256ecb2aa8e3c0cb32e63542cf2f0a9f7ece00d6e2d2bb2ee516a4c09570d920ff3
SHA5121de01f36459b4557a0358087f8365ba0e92dfbf014d97992b647713e1e7c0d746833f32a928e158755f14da761d76288009f35addb1512ab75ea480a2bc2276b
-
Filesize
58B
MD5b92e8193087da930b1123e3c3f34a2b0
SHA10e6abf7293d9805c9d1cdaee6a35f9a7ce4ba5f2
SHA2562a311385b7e04b6c896f8b265b2bbcf7d99950a73b6f5368e6a50d9f9a652f22
SHA5122b3ffbb2d180ec51106cc73f6177d36e1b81c11d05707cc4075b7150635deef5f69513a28ba4f93fc5a9d8cfa2feb5016378812ba74edb911a6761dbdb8a266c
-
Filesize
564B
MD5284c68a33b525c847db567c6e9dcc7ce
SHA1607aab3c867289a34bd2f69e3e87b8d8dfe53e40
SHA256eef02d73ac6a92bd87a56dbc3cdf71c3cca737e1eff9310c7534b6a9a88be87c
SHA512c17e50549cd49c0df2bcf6bf50ad1044d555379c034992fe60028d252aff1290737dc8cfd9a554429e26865ca1d49e61cfafef1d49a95f4423c847d93ceabeb4
-
Filesize
106B
MD5c7e7aa169f4dc6bb101318f3318d818d
SHA13b173adb80c902b929839c0bf67cfb7be947a1ab
SHA25690ec15435dc0448688d688759770a86dff452d2c4daa61d9634034827eb71ac8
SHA512a06dcaf01ff4c1aa0d84d64496bff5f547526c7e76d28619888115fda3cf52442fe9c6d0c1e03dddd0324ffba824620fd79369045268ed0e82df29b94bbd3d6a
-
Filesize
460B
MD52f9ebaa804fc8607621cffb5f45eb777
SHA1fb303780396621f1e9f1e2765d845967ad054eea
SHA2568915ff957af6abc477af8c06c06d3205a7ed26914416fab9f7c8f7aaf7e02f56
SHA5128850ca23d7e87862c386412e0362ebd799136e37ede456937029a4605268ab749f629ffbbc68bb141156bf6a96880ae98b35b1e9bd841f448398dc78c78d63f2
-
Filesize
460B
MD5257ee52ea6bbf3fe02973e5e2b64d990
SHA1748d8acbfd20b23ded9d58f9229638520fc25460
SHA2565b903d81bf2a8ffca93cb2e5485702e7cb9d1ba64a6fe515e972c208394a3e0c
SHA5123a2f5014388b53d8c7f7fccd99d28b5212f6a8b2f619358648bcce7264796a2ae994fd3279cb4f8ab0f2303ad8b774c5ecd2ef5393f825b70214478851084e2c
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
118B
MD52048b3cb4fb9484e9f27e97b4a4714d5
SHA18a27b5fa1d4bdd0a5d8889e2eda9b58cc651c02e
SHA2567cedabd4163018d05fa310bee54c6194546c88fa93e69c2759917de6831daf1f
SHA51282075688b9cd53f744781fe3b349092879edcd3d0497e1672e0fc0f4c70ea0464559951e4934a293404479c2e1c6a96b4c73f54d0b260137ed13496acf0c10b7
-
Filesize
147B
MD5bb3be0ef572329fd6ee6c6f5e2f81657
SHA1a846c39f3292f54f85b1dae77e89c333616f7247
SHA256eb8f93b407faa7ed6fa87b427ddc6fd44a7002bb5547fb18915f39db9d317fda
SHA512341c58ce705553376feb9da914b3fe0c547100a7c273191dc526321a779de9b5579cdef58251a57c478ec5923f7bd63f11f29dbd18a565674e6e16d909ac7982
-
Filesize
250B
MD5cce3602581bc346af4904dc189cd9a64
SHA1aacf794317d68ec41c22130ed0d200d278cf3ccb
SHA256e8f4f6532a40710eeff62b53a386afa82966f6fc54274310c84d89da5b621b46
SHA5121bee0feac3b23d466c4cdad64aa8a3836c46ee4e3f2812dc6da4e70ebd877283753a74bc7da4133605da693b02abd15c5e9136f9399066b54f624ac3fbc3a7b6
-
Filesize
102B
MD5c9b903bddd00e424e73100118c22db13
SHA15c0af094150199d89028a2b9a49a370114f83e39
SHA25687553180040c170173d29bfaae60abceeb489c53277912600856588fb500730b
SHA5121b40b7e7c49320a8dec5f04095f2eaca9d994f8a3e73de9d215f970e9f283000801ff5094b051e0849926634f6059fa597e7dacf5da068c776b2bb409118f622
-
Filesize
322B
MD535f226c04f5be821812e7c23660eb636
SHA1d5d46a9cd7e3fe309989d7600d739186b231145f
SHA256e2d18879c5f0c52e3f3ac17c5459932f40b3f5a76520a310b941666e62a2f443
SHA5127747c0408ab41c010ee023c761bf123234c80f2a1a9c7f285e112632115098b68cb2cf9de6ec7985bf214b9ff67d805e03000e24f91431583af18e0dab8aabc4
-
Filesize
389B
MD5f934715902409b4fb3aca651e6757291
SHA11b6727586f1f3fa9205c0d99b1bd60d0096f48d8
SHA256f1a8337f210e0365c5d3b5dcadfe9cb7c8eb3cd29b0dbc7790304735262520fb
SHA512fd45e5ae1ff70401ab53042fb8e70b43cb5a866f252e0cada17578c73e3b32339129c7bdde4e26c927991e0a065a6aaf943ff663d89414aac30eceb324ed881d
-
Filesize
975B
MD547ddc99bb2578bd60e535c55e514a2ce
SHA177f5854b474c00275f66132ad1061a78eff37cd2
SHA25664dde147eea40b1c2cfc0b6b57fc3047b92a30366ed2965a0954fd2e0d3d2958
SHA51254eaad1025ea5b1bb33efe1101d85dd4650b4f74fc781f3614ef11431835a144535d98bb6a8afb8621b8bb43764c51ebab90eda5c6961889a36ec0b6313be9b9
-
Filesize
1KB
MD532129b18d518b56ef3b86dc47a3a015d
SHA12d7ef2e21a197a25af0067032c4fa9cb1c83afb1
SHA2565a91a6fbd13774334324827a9c7001621434b8a881a3a5e4fa399c1e6cbf19ce
SHA512defe72d6f25e8c942475db84a0cdb38a87c1243de761e4a705ad58a9a43e0315a5694ccc285b71daec24c2963916d05dd04820ede2d23c9af4cae1bf858b5a50
-
Filesize
1KB
MD5c3bdb6fcaede9bd465c0e6674f3bc7ef
SHA128da239f82e132bbcd2dc15debf590ea706b2f8f
SHA256699af0420594482f6f2bd6f037bb72ce41ebd65621d418fd6e01effba6ba7fa7
SHA512614da22b3b82e60c2c9e32e21cca47c74648d547837390273ab85013370d7c3fd5c23fa8077e06b72d84117fb23d3a70290a91507553baf7bf13ff87eff059b5
-
Filesize
149B
MD5fb4e01a020562b8f8d51ad077e1e166f
SHA1238a7f1a7289c1c2cd83944fe02ffb178616e87a
SHA256ba4d2c8b3309114bc6c7313bad0b06e52ea5203122d43f9d60ba85cc638c7c24
SHA51277b134dbdf0cecf00b8a9ad0f5f2fe11a18f5e6d10aff22c7c33dfa0fd1d3a2f9e8930296f5e4b4a514986528fffa53115caff761a6e218c07d7e794f7c4b762
-
Filesize
178B
MD5d332ac099cf30c7542c2b6d3726b1cf5
SHA16db7047ffe9a43dedb73b01b3beee390b71bcf28
SHA256506972d9fb977d2f845228fd265b006833fd72d49cda1a583bea9b5004ef226b
SHA512bf262ac235cb3d79edf0258592afefa9a90c92ee0901ca7a26504a3cd8bd9c26657e1b62fdaac4e87038a871b4202a28354c9a23c7a7c123716ce53fc46bcab2
-
Filesize
148B
MD550552d2679789065b51fa48fa702e8d8
SHA1bb37650cc237a256c6d77c6d2ea0f29334e5b417
SHA25633812e866a1bef71bfb1eeb8517aeaa803bd95bcb90ff6f84fa9813d47d84640
SHA5122ae531b02fe8cc3ada0bef16c7d7d8b64ceed644c26ca8badcb3862910bfe06ab0536dab16a06ee091be101aa33dd4683d4c243985db352347478a1b0b5a28b1
-
/storage/emulated/0/Android/data/com.xiaojukeji.didi.customer/files/omega/omega_e_1703497689182_xSQfXm2MTd2cFQZnvOt1vw_1
Filesize1KB
MD5a8f4bf89e3c80341ccc322793e00799e
SHA1af5d47106756e6e3b814fb95baade456485925c1
SHA25610ab004e82bd8900df789508482ea61b5463a2b2358eef184e93ab502413ba18
SHA512df83c468bca46065a0ed9e78ae551ad854be6bb0b31cc40b10d3265eb865188e671c4e0d626d90e557ff6e1cef2c83ee40d2b9947e7c903cea5a63c5a7e04b29
-
Filesize
4KB
MD58ec3c1ce38dd5210e86daf3da7873532
SHA1cfca861075521305b66cea846ee16e58d5d18523
SHA25602617439f54861e576aed9142d7e3b9b3671eb924bfd92e3bbc9c89bd5c7b0a5
SHA5126838192aeb19fdfc0ea6ef70b926e79d9cc765d3e33a66e07ef9d18d0058619afb69fd82c54d98948980ce4d76bddedc1a04fd799e9051fbf0e65c7c742129b8
-
Filesize
46B
MD51023e94a99e24a51471e31bf42c07baa
SHA1a28ef9546746f5753c6b1134133f30be4442f9f4
SHA2561c01f2288f0582cb85f3c123de5173ace32cfc531914d5894a5da96f460f771b
SHA51272b140cad58d07496526aa62724f686fe5f462a8b9bd27d0cb396b85c955fb41cc621b7158bc080ec623c3ebc51f257436b7e5ff3b71b1448ee6fb7fae7bac0d
-
Filesize
39B
MD56a3a5c784473816c81c4f83cd3d3c9d4
SHA14271b16d6d730c460de5c267cf831548483fc9bf
SHA256b2ceb3b1eb153426bec7a103d3ca04b2b137239c1305128d8297f88472938e7e
SHA5126cb9971baf255d7097c24f5a91c79490d86f9176aa45b238947dab4fd48476ae61d806f443422d85d2edc47bdbe397605daa4bbd28a0d64ca7be40f8b28a4e36