Malware Analysis Report

2024-09-09 16:13

Sample ID 240423-bpzn6aah21
Target 52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db.apk
SHA256 52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db
Tags
discovery irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db

Threat Level: Known bad

The file 52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db.apk was found to be: Known bad.

Malicious Activity Summary

discovery irata

Irata payload

Irata family

Requests dangerous framework permissions

Acquires the wake lock

Checks if the internet connection is available

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-23 01:19

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-23 01:19

Reported

2024-04-23 01:22

Platform

android-x64-arm64-20240221-en

Max time kernel

152s

Max time network

148s

Command Line

Madsal_remote.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

Madsal_remote.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.212.238:443 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.178.8:443 ssl.google-analytics.com tcp
GB 172.217.169.4:443 tcp
GB 172.217.169.4:443 tcp

Files

/data/data/Madsal_remote.com/files/PersistedInstallation5137487735242736570tmp

MD5 790915aecf14b3238f31edf34a57e571
SHA1 ba63ae7706ba1d5967559e56491abff6e97fa6cc
SHA256 8cdd17cbf2d98b04ab784c9a3d4d24e570f8c1d426f289e38d9e39d0b8765ef7
SHA512 b1c1a5c631e95d0e544b4c651149cee406170a4cb243a1117fc677ed2e5c20533cae6dea41b435541d4fbc973cae5c195551224b1cf3aeece8c446fbda492d06

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 2c98825ecae4dedd00dbcbc3387e2352
SHA1 39c737dc98e91f0c055cc52e752b886e4de213a5
SHA256 88b84a56ad218553a33bbf1e6c6966e84928a0d4dbcff201701cfde346bdec43
SHA512 e826c35f4912eca2ecf2060b310c0b5f4feee80ace7169a67ca3e9b8afd37074b3aee523fae9cf8aa3dde3058ab053968c657c3da646393d4a74e46ef3496566

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 0d5089f5d0eac22e9a426ced7c50cc6f
SHA1 ac696a6b6eef55d3c3919e9d7b937cac84457b05
SHA256 3f133a61a470f021031f347d98a6cf07e2a7268c9ea01477a2c9f6f6ef338ed9
SHA512 a3be202b1bb6129ac191164f66af65c9b06254007c2e443a91baf377bdbc2ae5d64307ed7c44e0b25eb40bc5b2df83041be9af993fc1e6ff7027c6e413892fc6

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 e8fec71dd09836db969b20ca365addc8
SHA1 dc618b34eef7cf4e8c5a1df619bbf5768283a1b1
SHA256 1c941598cebefe30aa130cdca29fc0799fd26f127753661f548fd0ecb2bb3b5a
SHA512 22eadacc1a64ccc9d489d67a356d8b33c17c78e8a3b99ad573924674e87358d9a32ba965a9c169de61b0f365fd15fee5795d1cf85b47a200dedb291adac4ae9d

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 06010282b71af2462e01a083c7986b43
SHA1 3c8e2f55ee99b123de9f7ffb62ee10546413b383
SHA256 97b7e7dee2a7a1eba9c972e9033e06d2f39fa6d0ac5444ae6c52fb259b6e4e0a
SHA512 3bfe598c6f6f76bad3cd554fe8bcbfe6597e6f58b7fec297b2cc4eb5678223d7c018d70dd10a02eba233e038ed747f6aa266615a9a7151a8bb596d833fc832c4

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 b8ad6a9863807e334b25fe2f68d1dd51
SHA1 3026347f53c0a7e4b9c239607ce987023d65e5e2
SHA256 7741175d85650b8fe2104cf054204f96ec3be8e89e76ca360ebcca9e81289628
SHA512 7a7af6a84cc4b4f5df66f93ee91957e4ecabddc0414c75c3c38a96bca09f9a204ac7ca0f5b950f2d051a9344f07ecf2aa1753e3840a9edc2162af75d7ba135ad

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 839ebd24c6b98c60dec0dbf73eada0e8
SHA1 291fe2bab67a5755baa4b9b0f2df4c30673a03bd
SHA256 a478e147260ca610129f8e722112afc3cc5588fec512e9f9e687fe09a4866df2
SHA512 cdf24a69e785f25ea945708ffb1d6c9b3d11910a63a3e1d240ca7498c6867d480137cde7ce8da6a805f341330b34791cc0be0f03ea32c254f1c849cb21755dcb

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 07e4f7c84d1380abdbb7ec11fbc3c7e7
SHA1 a9e66b9e6c6b944a0e09eb1011d816f03d4ef16d
SHA256 70f953ae941adcf0736597bdc184447c95cfb7eec17b2b93dc627fde8a16192b
SHA512 5cb970bd7413f58d9488ff102f197a30f140a95c4b900c1b537be048a3ac5c967b3af63e4b9adc70c39ae473f04b45e0222b61ad85623146c6c2b16528e6c10d

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 32afd5195da8da130bbf1ae29ab01482
SHA1 325521b2d3eaeb1209e6f1e2de898eb0ed47a6f3
SHA256 0b2b4d2f3c5e977428d320ac56ef93de7ff54b5fc2f57560a58c619d0296ed85
SHA512 acc0822d71865c3dc9da2fcd0fa073147cddf40ad4c799aedaa85eddaa0e1ffcf7535e63a4e8ea0d82bb8e27d209c2140573ced586c466b85327acdea350607d

/data/data/Madsal_remote.com/files/PersistedInstallation7662391735856084132tmp

MD5 047014c575815cbc1cfdec68a3514d8f
SHA1 bbeeac5baf795abd7bb11c5eedf150863e16e8a7
SHA256 bed5ac031b33255dc3117402e116bdd34c744385bead7988dc866deac571c61a
SHA512 35f1613ee000ef85aa0c019c4d995bd67f8fb2da6cff7322928b4bd341a8df9d9fbb2a046ae06cbd711113c831bd20de5d2336f2f56028f99a43edf4250c3ea2

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 3d2fdafa8fe4151c9f8c33139ef99905
SHA1 5c239acfe2659c9211be286515df16078c296ded
SHA256 a2fd8f2082877a744af3089ef3ee59da99a0bb76d8369c0d65403092f98e1a3b
SHA512 453d5045fd48bc9da500cf12537e3ef012f6195fbe18d75dd198de5ce87721dbc6a29156c1ba76163f6df89f7630c36f3f39a32d1ecb4aa66dfb0f5e630af209

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-23 01:19

Reported

2024-04-23 01:22

Platform

android-x86-arm-20240221-en

Max time kernel

122s

Max time network

132s

Command Line

Madsal_remote.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

Madsal_remote.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 172.217.16.234:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp

Files

/data/data/Madsal_remote.com/files/PersistedInstallation885712363075109515tmp

MD5 c1310bd8b4e3ce3b396d6b2625b3b54e
SHA1 96d72ff34ce1a2810acf661d0998d067f87e8ef0
SHA256 3f43bc572547ba05258ed029d94d9309ec57331c9a21b62125d57c0041266d62
SHA512 f9b32a459dd08d5a688e7f5122a7939fb88216e063b0b9ee2235e5f90f9333474d5a4dbea52654f35afa2ac6da76825f541f2b06fb1c2d445fb87ca1e6cca791

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 a442e4cee94217e2793387623365daff
SHA1 5bc2807146871a5654d96168d4f7f4bc4244a9cd
SHA256 72a2c0fef32fea22d817bcb0f13c3afbae75360b9850c16f0fbfb74be18f357b
SHA512 94ce299abb064fdf969eea1ea8a86ac66a6fbe5dda79cd10bfe0b1c17f32867d4b59c080d054bf21ac0359f99a771a24e9c7857c34c0386e9ecfe0f9d47f8375

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-wal

MD5 b4db57be69aded56807aed87f5b00d45
SHA1 6efb3bd455eb081ef16756b6ad0b3bb84dfe76d9
SHA256 d6f69ceab578d5591405be3ef4c5e2f23d6e0f537847a4f98878ff9b2f476fad
SHA512 046984dc1f63dfd19485c4100f73604440fe3381a44d84ed9a4ff8ebcbb29665c906f4899f9b3dd7c35f9f89837334f2fc6d3e69958481199cb6657877072af9

/data/data/Madsal_remote.com/files/PersistedInstallation5113554689100926935tmp

MD5 84a16bcb8c3dee6c501c160dd371c928
SHA1 6f46a5c68d96b668e0ece52153305fe63e779f5b
SHA256 7dc59d468d702ebb80023b14b24cb07f6ffc314f2662ab0d8f9a1dddcdf5e3de
SHA512 7203baac1e56e56517c93423fb5b9e7530be531c820fe70ccd9360b7df4d0d6275c295c8b58fcf8046140ed0d46937f4d8f1517ddca1fd33970dd28c46f62932

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-wal

MD5 ce32885d04fb1b309586557d26fea21d
SHA1 c42d2bba3aa12f0dccff0366550cd5d19c073a10
SHA256 e57e61e2fbf2bb92f9522684788fe38502307ae3eea2021b9edfbb1ee37f9097
SHA512 8a6fa8807d14813519f3a5775795342c7c1a47cc7b127e79260ce9c9f10a2b49dd8dc4ab4aee1e9d7a1e40109de3d6c0e1367d9c80af14419a4047c616fdae88

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 2628543390b1e02c09b8fbf0c38544ff
SHA1 76719f251c40ad33ce5b71b818ad5798a5731e7c
SHA256 1c73f7318d9f876d95471fff589da6210d5e65ce0e5e4f0ea26d09b0d25128c3
SHA512 31ba28dfbb2205562795116ac521bb30335a4189978f171113ba249e6ea7ccf14d87ea1856c3f249bba440c55204555230af1bc9b6459ae7640ecfa1466bf862

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-wal

MD5 1ecf7d337c86a3826d0b957eb17d0dec
SHA1 82717815fa6b78f5bb9abaf334826ea4f0f6f1e5
SHA256 2970a215c7e9fc5bd5e3a16c09eb3a326e34cf15e82a639bfbce938502917d0d
SHA512 c6d1fb0ad1a7760250bf69ef7c78b194c1487d265701f2755e5549b9702e0a79551682fa71d3b5c496d4c4e14ed8b7fee54cf6433a9d445ce737804016706901

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 b021e757e88093fc10209bb6a29ffc07
SHA1 8cec929abea17be2e07f5bf28dcc94ee35c44d38
SHA256 df7f6e4d27e0c7e967c5905093f94fe32a793c1b0967708fa42214307a73c83c
SHA512 6294479f4adcc28c0eb0ed5af9afd6a9f328fca0d687b4511acb38b1b256308132600d5168892089b2132c83695dfcbaffd3afaf5320adeff6caa3c016aeb689

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-wal

MD5 7994cf444bfa37d2995666f3d4b75d8a
SHA1 bd914d34b41477d56f8ff1e7a98d93d73b6e90b8
SHA256 45e42e097687c86c8dcb3d0495c0a7415cc36b34de56c0fcf24bab42fa509221
SHA512 7068d357bee42a460e719f9468f51ea59372cfcf99df341211016e7fc274d2847783bb9f25f1c641a25c7e93b7205823de4c83612ae2552be23704af6f789868

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 de847a2dda6af9414581db3a8ada2290
SHA1 acd53eee0224dd37646f2176727f6ae41ef6b32f
SHA256 c25d58dba3268f98a497d76ba2f825ff91cdde18efa1008d4ae2c74a1e8239d9
SHA512 004e796e65f11e3a9c234bca25acfa97f0819478975286a5fddc0242e95d29185285ec4996abd69c2518f5a81b9d5b877dbe578a0d2d9c3cadf85e8af4e30991

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-23 01:19

Reported

2024-04-23 01:22

Platform

android-x64-20240221-en

Max time kernel

152s

Max time network

167s

Command Line

Madsal_remote.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

Madsal_remote.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.14:443 android.apis.google.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

/data/data/Madsal_remote.com/files/PersistedInstallation4347600409775372390tmp

MD5 f9aaed453f03022ad3f26694c127f901
SHA1 2bd6d116dd0507e80d76b9f32018111f63b9596b
SHA256 408c65a2fcda5038b1612a870363df8f6eb37007a67e4fa4801022e28aae6630
SHA512 2ecb0dab9ba2daa9378f25fccfa41c9c4921d58405bc553523409045305623534973440b199e32b7c19aa0aeab24804bd7e6796d3e945d20ad3dd777562a4dff

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 56996f0df8ea19a9f024d0804512f42a
SHA1 71c3bf9f9fad4495680adbf4d0713ee4994a5699
SHA256 afa974e957dcc79ed6d23565cb7bbf0a3b6c28febe4f32e09b4888beeb7f554a
SHA512 37937b1dd6a1c82d5e6fa64f4ee0b7dcc1a607df4974e34ae0a98ee918d6244bd277d5c3df4b49d1c053dcf320d3e6dddecec5cf9fdfa5f064666e5d8ff2f6ab

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 a5111664c39fbd184d15d62c4896efce
SHA1 a5da91522ea797cad71e8198c482628425223294
SHA256 4e042cc9a7bf2bd27751c88fb88019db704f6ef2b5eabc043239f0db6bfd73fb
SHA512 e799a395abda86bfa719c5a67b3e6874fd439f0721e76fe21258222a6cdfb3ecbf68c3df94cbb59850622d080f39a442d542e2fda7635b240661810769876577

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 a9db06040ca40f7f156fe93eea42f767
SHA1 8fb2e3faf62ce6dc60df92eee78caefce7442f60
SHA256 8219875b956029dbef6c66672d3dcd938f9e0defc3dc4b8c05a2c6c96abc0f7a
SHA512 19eda108a22a61468a81617fd022391816bf80aecc279e32537c9e94ac8b7a87536306bf8193ef656fb7071cc7fb09c5f4969e3051e620b90dffd39141bc7c74

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 f30a7134c4c848b87e7320422bea2447
SHA1 62a538af189611fd7a9010daa4b10a4bac1fbc86
SHA256 53614b1a7cdd2c34b99de172caa61581445e50ca60cd5f9e7bf5d9c0ece27422
SHA512 090dc3939972d69d5dc8d072cf720edabf04fc483874b56d8e60f3d68be7a811e6354ca044f3f9380de76d77e9aad26e194d52fba08813ab24657f1d255e167f

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 4093a6cee5218f0b99e36031f11d44eb
SHA1 febea1ef552f76aad249fd60eede27cf74e12872
SHA256 2a39a8a6cffb6cc8ac548949300674829ffe4e885d51e50c113a27bfdf827859
SHA512 0055534e9290f2ad372d5200ea204c3627954f8e34b7bcd8f3859e396a7ca3e838db58162e6c7dc0c0cb074b5c05631011bd9ed0e898d2a27a9ba2e89994f480

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db-journal

MD5 324e421f2c1c62cfd4ad5bf281473a68
SHA1 dc0ddae81072a3e429e51271d5b8ab175bf7a8f9
SHA256 21b51d283e94fbda2ccf9b06511e7153174716be9403acd0dc46c7c84b922968
SHA512 5b26395b785555cfa3f701c95fe6c7517e478c5f517f247d8c07d178580782455edaba8fb428f10cb2655d202ef6caefe3b116fdfe6a21e5cdafe27616bb5b0c

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 82f7b6fb04d28c98d234a21ebf8e24b8
SHA1 546764a1905eb35e127fd7d7803a1c5f42fb6200
SHA256 b6c45fff825f5cab55651c31fa76d9b9ae828779ce1308cbf8f9adb1f487fcab
SHA512 65b27880f149511af22a40a685be3795a38316bebc229808ba28b65169d64bc625c10270ce685bcfc8b086f0f54bbad020524768798936628ceb5b4739933c88

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 56980d120760839916fe69f3daaa4ed2
SHA1 55e69456075b3a9bc1c64802b7a8dc54be22eb9b
SHA256 fdfbfbb0c9f6a7059f85d08eb436a54384416953b4852708736c52de7f28a214
SHA512 1a6acdc996c2905c2222c567720382f632d7b021089ee400bb1cf6f92b8618b073c21c4678df57de1a1a39403ef24182f35969ddec0c89a6f717c3fe237b4814

/data/data/Madsal_remote.com/databases/google_app_measurement_local.db

MD5 532712554c1658a74393f7b28234758c
SHA1 655930b18e8d79ae8a3303086229b50f144b3fe0
SHA256 2aadf99452a0d4352a786c5e2dca07667ded79f78b2a3116129c0884d817a85f
SHA512 b2db3c1c0ef1b7fcbc3d6b21f47c7c18436258ccc7e624854f5b8e881f84dd4035e48528ea0207c0d7cc751fcfb9f863354e1e08c8c32c8897d0f8b2ff7dae7c

/data/data/Madsal_remote.com/files/PersistedInstallation8441239477190307787tmp

MD5 b83ab79a5e7510c68a1f2d6117a2469e
SHA1 db064b51fbb1ca86497d046a27602908d17dcbb4
SHA256 794eb6f0d065625236ccd8f3d5c55be95c7929658c867c85acc4b1cadfe6da63
SHA512 28c6f06c37a529a8cdc59e4d2af8ba2b01ff1116fc1660fdfe098789f9f5b8bfd422086ac6ff74ecf584041c6c74864d3612d6a1fdeb47b09a7b7ec9eb1dbcc7