Malware Analysis Report

2025-08-11 00:07

Sample ID 240513-hha6jsah6y
Target 3e33e653272bd153a6e8386fd818ad03_JaffaCakes118
SHA256 0e83faa0b475403ce3e0dbd2171c2b59754ef30f77279dbfafea9ed670425cb4
Tags
banker collection discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

0e83faa0b475403ce3e0dbd2171c2b59754ef30f77279dbfafea9ed670425cb4

Threat Level: Likely malicious

The file 3e33e653272bd153a6e8386fd818ad03_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence

Requests cell location

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries information about the current nearby Wi-Fi networks

Acquires the wake lock

Checks if the internet connection is available

Reads information about phone network operator.

Queries the unique device ID (IMEI, MEID, IMSI)

Requests dangerous framework permissions

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-13 06:43

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-13 06:43

Reported

2024-05-13 06:46

Platform

android-x86-arm-20240506-en

Max time kernel

131s

Max time network

158s

Command Line

com.radius_circle

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

com.radius_circle

com.radius_circle:pushservice

com.radius_circle:remote

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.banjingquan.cn udp
US 1.1.1.1:53 apm-collector.qtestin.com udp
US 1.1.1.1:53 sapi.map.baidu.com udp
US 38.63.251.235:80 www.banjingquan.cn tcp
US 107.149.31.181:443 apm-collector.qtestin.com tcp
US 1.1.1.1:53 loc.map.baidu.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.245:443 sapi.map.baidu.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
US 1.1.1.1:53 sapi.skyhookwireless.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
US 1.1.1.1:53 dns.map.baidu.com udp
FR 13.39.183.91:443 sapi.skyhookwireless.com tcp
US 1.1.1.1:53 www.qiuhun360.com udp
CN 182.61.62.50:80 dns.map.baidu.com tcp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.102:5224 sdk.open.talk.igexin.com tcp
HK 154.80.213.20:80 www.qiuhun360.com tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.206:443 android.apis.google.com tcp
N/A 10.0.0.172:80 tcp
GB 142.250.178.10:443 semanticlocation-pa.googleapis.com tcp
CN 182.61.62.50:80 dns.map.baidu.com tcp
HK 154.80.213.20:80 www.qiuhun360.com tcp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
CN 183.134.98.102:5224 sdk.open.talk.getui.net tcp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
CN 183.134.98.76:5224 sdk.open.talk.gepush.com tcp
CN 183.134.98.102:5224 sdk.open.talk.gepush.com tcp

Files

/data/data/com.radius_circle/files/ver.dat

MD5 068053286848d141c606640e1801cc70
SHA1 101620e105d355047f4d3a9632ef2b5ec615b10f
SHA256 a81270762fce53af2db31fc437720236969b18f295a0bf3d4d507a9620959337
SHA512 939baa444ef2455505060a532929d736b3bd87b20f795c9a4b1206bf89d53c2136cb2d959cec9e97736058cb25fdc9e84e2fd7b9c542e1512eab640eeeecddff

/data/data/com.radius_circle/files/cfg/a/ResPack.rs

MD5 2715241c3bb3020da6c289d34b9df8f3
SHA1 6bb73060578b9997f943ee6085a6c97084be971d
SHA256 6fcf62679a7a4bafcb0f9b2e4fdc5666519806a81258464f9043d095f6c2b78e
SHA512 4f1cf7555680ca3b46f0cb092f12991af6d146d3a4c498c457e5c75ead3f0a264427355bc2cbf8780806866b39ada8c9c6bfbd0e9c5f2d3ff507f8c764982269

/data/data/com.radius_circle/files/cfg/h/DVHotcity.cfg

MD5 883c30365d5d377966125dd0c079debd
SHA1 d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA256 50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA512 00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

/data/data/com.radius_circle/files/cfg/l/DVHotcity.cfg

MD5 1c6abcbbd253448057930ad1cc59ac75
SHA1 a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256 a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA512 71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

/data/data/com.radius_circle/files/cfg/h/DVHotMap.cfg

MD5 dbe34a42cfc24f4165fa47ab6756d407
SHA1 24a627b951058f4862438fa1e6255f92586b8ff0
SHA256 62abd336e5eae558b6ba0e94b708663d89f7da73c413e9e90bfafa23a1c2294c
SHA512 30283aa4c070eb5be8b3b961725eae4a8c882028fcdb8038de7b245210350266eb2272677dd44f4feb388098db062bdab0145f31037438b28df0624595d35aeb

/data/data/com.radius_circle/files/cfg/l/DVHotMap.cfg

MD5 6092fe1b84c213f043edeb7bff79f40a
SHA1 6316b9b6ccecc36dc8d4d04c6b330cee168774ef
SHA256 0cff1e8f6d8e2bf7beffd508a941b5285d0fe0af64c1e2e6296e5a2db6b604bc
SHA512 f57064a3debcd593bb808db3caee3e3478cb89e69aaaee732098e9cd919d3fb5beba2ab72ced36b8fa923eb12fab1765a7750515abf9b50d6ccd46d49ad34aec

/data/data/com.radius_circle/files/cfg/l/DVDirectory.cfg

MD5 c3e9893caae1000dd079a6893a18c2a3
SHA1 e446cda2e2496e8de2a23ce7e888b93cb0d2ab7a
SHA256 9e2491c68ee457df6a73072d9c6d1273459a3937c5b1a2916649dd84ad468aeb
SHA512 4d931efe4c163fe8e75aa89e1543e24ff72f061bb13a5cb8b44f20a3d13b0f86dce74579569920f80d5459ed2e192cb89b59ee77aaa64673bf1af5081aac124f

/data/data/com.radius_circle/files/cfg/l/DVVersion.cfg

MD5 861eabc59a3ef30ae002a19e5295fc30
SHA1 3373c2ef608c6a89ad482227c523cc754c4db0dd
SHA256 22cdcdb51b2db55eb86074c9d675a7cd84219b76630cf83f95157977647e950e
SHA512 ba4be0cc4ddf3784f3e0eddd11b2c24c756532a50f3bc79af275afe037df5e065410fea0225b9b1e7fc4f89241977f9dfb97cfd8e9ba9be4475554ccafddcc57

/data/data/com.radius_circle/files/cfg/h/DVDirectory.cfg

MD5 4e9eab735928758b860e48b2f9befd7b
SHA1 7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA256 1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512 c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

/data/data/com.radius_circle/files/cfg/h/DVVersion.cfg

MD5 298924848d2517a508f43ff0cc51bd3b
SHA1 b9fcde7b86653ead6deb57280a6049cf87745710
SHA256 0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA512 63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

/data/data/com.radius_circle/files/cfg/a/mapstyle.sty

MD5 df0a726d27e19bc43c1ef45d0138da4a
SHA1 a4453894762ba7b541fc87e36f988fb369251e6d
SHA256 c4c41df82444ca3c8f6a40780a9ac22511dce1b8bc0d4ff6cccd778af0ac3ecc
SHA512 d553fe731069f72de17d2c96a879b8a3bee0a51dc9e4e3db6fc47a8d663d33a8d5b2628008491171ed4ee555db4d573210eb383b09c4d81d9176c21b8fb65939

/data/data/com.radius_circle/files/cfg/a/satellitestyle.sty

MD5 b220cda59031c02810ba642766c5e81e
SHA1 1fffe212739b6886ba298f4b806bec3fc6cc5daa
SHA256 7f61542eabfb309d4bde16e60963c3c48a4995df72659d6f84a5d930f0a878e9
SHA512 fff02ce54395dd3fc153557876b27888994def77b4fc03f2fa5a377e8b07fcff9acf38460df030acd090684c086b5c1c23a59f255490e698273ccd760c6bd0e3

/data/data/com.radius_circle/files/cfg/a/trafficstyle.sty

MD5 be7778f14fa70b5e3fb0834de023998c
SHA1 3bc4b22e1883afc0aefe872cd446bb76203b4b63
SHA256 bfe474a867d3d178f1f8859a833db63bc8c0470769effbb103ea3713f311e2f7
SHA512 a47a3cf5e0fc9c953dc94befe9847a4b335ea5c44d76c01f7a9f8f5d4e97b840f675cf308e9c7c4a0847484d254aa074336d9b4d1b40d0abe009d6fa812010fc

/storage/emulated/0/baidu/.cuid

MD5 6a070032a0a048846eca2d81f01524db
SHA1 6691d1c1efde37755be2415399168975c14370cf
SHA256 faa94d3c4027e69e654e8f3fa287e68765298e34e681c28d6dbbb4f75260ff76
SHA512 433902e3314ce1fa6e7fd8011e4a0be240843ec2432e4bea25763705e9f66fcac51d93a25984d75446f4a59d38b7f8bb5542613699ba3db434a0818117495b7d

/data/data/com.radius_circle/databases/radius.db-journal

MD5 2e4b6821db132fb3475a7b1a57252eb8
SHA1 5a3229a75452d16cf5a3ea6efaa773ac403454b5
SHA256 fcc13ac088ecbc86b43dec6949c583f3020f4289f3a9e5178e5da8274b73245d
SHA512 c1f6f0d7085c1099ecefbfbfb444f0ea69acbb49a119743289c5cacd5e56819aced635b2f7f1f685347a363c57a10136a89defc84aa8d2757675b54a57cac9cf

/data/data/com.radius_circle/databases/radius.db

MD5 17520dbe240769eac794aa9af22a3ad0
SHA1 da7875ff170bc4738d11d7ac7747deb037d5e91d
SHA256 5acf154e62d35252f781b631161bf13b95f0e34284cfe584daadda554eb53fa5
SHA512 e6157a6de40377c525763f3f14e477ee6e0262b6ed6362ea82873231eb0cb424816662480e8ce92183dca8917a82d9010d0b9ca80c5a67065de11b48f1ffeb0c

/data/data/com.radius_circle/databases/radius.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.radius_circle/databases/radius.db-wal

MD5 fdda76ab5d868a15566a34b5577a5b49
SHA1 43f64f690cba8e3884affa6e8c0645595859a533
SHA256 168be0189129dce44a308ba4b7dce3da578718fbede4ab63e282b42712fabb8a
SHA512 0b8fbd22c40ae084f4c7ff562ab222830f0e8e96cee64ac46546e4bd37e3cad732556bc70685b487628ee4f4bbb19520b04b14ef0d06848f960d40dd2a846d8c

/data/data/com.radius_circle/databases/TestinAgent.db-journal

MD5 dbbe3032b5321f0ddf6a4d0e03a7b0c0
SHA1 1e5d02f4c6ab00bd167cff85b152801b1a1db9fe
SHA256 d9fb7c30168eccddbc606e1d977e89e17a02bffc8e8db3edea067b807f34cba0
SHA512 6d81b0372564682b6918f0068a37b09cf96660f7f32628f9afcee5066e4217052fce7839aebb05f665d26c2cb5447dbf3ee6a8f82d0ace455978b998d587f2c8

/data/data/com.radius_circle/databases/TestinAgent.db

MD5 60b8f451ef199d7b056fed22a173e53e
SHA1 468339187f71f5b2e9e2ad4ccbf486ceeadf6198
SHA256 80e39bc86040437090c60d2b8cda8d46ea91b13ad92487b8e4597440463c4894
SHA512 0272f89f18513d0fa6c6f1906f4ee6720262f0fcc4510ca2285f8b8a618449249d9758e674bf77605c02d2e945d9586f02dcac7d4a82a21ca17787f937f49c45

/data/data/com.radius_circle/databases/TestinAgent.db-wal

MD5 3f84aa349cd7a5fbdc3d849c01dfba84
SHA1 283ec1e0b324c75ae473e6f4b946d79876b478a2
SHA256 37b0040ed5afe47e6c5dea7b88bf1816b4772cf5382f15bea3eed19cd7306a4a
SHA512 3989697926b45bd65125f9b0f0fbbc536798d906faff839c017a90b9c1b3f418247237c99fcfb20ad6eda9c61796b6aebe8b89b98a9e01554e74f9255808401d

/data/data/com.radius_circle/databases/pushsdk.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.radius_circle/databases/pushsdk.db-wal

MD5 caa436089b0bd83cd0f8b6f197be0b82
SHA1 cb9de325bde1794e9729d8531b446517f719bd8e
SHA256 b35ab80b4251d1af17a52cbb11059afc7c2fe07a9f9dc84bd714e6d9d7214af6
SHA512 5cca3438d9649091d319a6ef175eaf02024bb2f42c170a8c71f7d89d57cd899a66426733886e60bf429a20eb2cc9c73773590f39848fb3158b023ca439bc2f1c

/storage/emulated/0/baidu/tempdata/lcvif.dat

MD5 a54ebdd3c678b2eacfe25045cb46a84e
SHA1 082b30c3e116a586fa5a2b4c7ae54539a8d2aa16
SHA256 48c89c0bf4712e41f18fca64a4aca79e8f64f46e55fb0d555b1a2d1f43f899f8
SHA512 e159ab8439c1ced6bdee2a056e437db67cc8a3e88534f4afd2bc208689a942b16bb5aa208d825b761e587f196eb97f7326b5a8d099777211cc82d0a57a5bfa78

/data/data/com.radius_circle/files/ofld/ofl_location.db-journal

MD5 982d2f4ef70233a878060367ccb3c616
SHA1 6426fc5d18ac7c9f87622081e529177ba7b3c520
SHA256 236b5b619ff6f89acf2e310ed5c4155bac65b7ccaae7d5840dfaacc0e268b8ca
SHA512 23f69a9db607b048129a110a56c1e380d4dcfb1c51a6dfd74cfbaf2500d8a99ddae140d1acbebd9daac04b5bd29c85f897165b38fadd1e97a45c85c38f1c3249

/data/data/com.radius_circle/files/ofld/ofl_location.db-wal

MD5 4f281990d5265e2fa2d2441905451696
SHA1 c66f2b1e7c41fdfe2186405eb89464ee940f39e9
SHA256 c30b5c2b24cbcf40eccd7826d0dcc69263205ff9d5fd5a144537deef2faf245c
SHA512 b4b6bac4abc989e444187d418a93bd6ed2ecd23a038073ab3cec752a54edc2e30225a8de82e31b7c2e184a71c3126794ae5104847062d5a03e71c5edc7ac3753

/data/data/com.radius_circle/files/lldt/firll.dat

MD5 e26b16a0c62241f586b16fef3d6949af
SHA1 021195c3187f47d693c1a14c9dad11a3193fddc4
SHA256 fa20416ca51ed30163d82414aeeb2e0fd36be6ffaf934fae3d4847264ad98897
SHA512 37e05fa0c5d04b86eb58dea63ea891a9ad2b92630ad0c3697fd1a60e83be86c3cf456f595b2cc9d12ae919443b39186ede944926e6c2befe22024853d30c017d

/storage/emulated/0/Android/data/com.radius_circle/files/baidu/tempdata/llg.dat

MD5 161557b06b4a4d3ce095528dea370eb7
SHA1 8bfe9c4d916fe58d856b5a6ecaf8cd9ea4df2c9f
SHA256 f054ef19481234ee5b2db1d1c681839dab235a857ed3a4bc02efa8f785f478d4
SHA512 96ce8aedbdbb387438efc86aaabd13a6378628bfae203d2bc25ea1cd7daa6ddbd6dd2c81d631fbdc9b653a93011d3c80f0c085580275b683d5e0bce077e6e449

/storage/emulated/0/Android/data/com.radius_circle/files/baidu/tempdata/yol.dat

MD5 a936690571e9104e1922dda4a0ba5bd1
SHA1 65f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA256 f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
SHA512 3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

/storage/emulated/0/Android/data/com.radius_circle/files/baidu/tempdata/yol.dat

MD5 1681ffc6e046c7af98c9e6c232a3fe0a
SHA1 d3399b7262fb56cb9ed053d68db9291c410839c4
SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
SHA512 11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-13 06:43

Reported

2024-05-13 06:46

Platform

android-x64-20240506-en

Max time kernel

129s

Max time network

168s

Command Line

com.radius_circle

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /product/framework/com.google.android.maps.jar N/A N/A
N/A /product/framework/com.google.android.maps.jar N/A N/A
N/A /product/framework/com.google.android.maps.jar N/A N/A
N/A /product/framework/com.google.android.maps.jar N/A N/A
N/A /product/framework/com.google.android.maps.jar N/A N/A
N/A /product/framework/com.google.android.maps.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Processes

com.radius_circle

com.radius_circle:pushservice

com.radius_circle:remote

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 www.banjingquan.cn udp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 apm-collector.qtestin.com udp
GB 172.217.16.232:443 ssl.google-analytics.com tcp
US 107.149.31.181:443 apm-collector.qtestin.com tcp
US 1.1.1.1:53 sapi.map.baidu.com udp
US 1.1.1.1:53 loc.map.baidu.com udp
US 38.63.251.235:80 www.banjingquan.cn tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.245:443 sapi.map.baidu.com tcp
GB 142.250.200.42:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
HK 103.235.46.246:80 loc.map.baidu.com tcp
US 1.1.1.1:53 sapi.skyhookwireless.com udp
US 1.1.1.1:53 dns.map.baidu.com udp
HK 103.235.46.246:80 loc.map.baidu.com tcp
FR 13.39.66.229:443 sapi.skyhookwireless.com tcp
CN 182.61.62.50:80 dns.map.baidu.com tcp
US 1.1.1.1:53 www.qiuhun360.com udp
US 1.1.1.1:53 sdk.open.talk.igexin.com udp
CN 183.134.98.112:5224 sdk.open.talk.igexin.com tcp
HK 154.80.213.20:80 www.qiuhun360.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
GB 142.250.200.42:443 semanticlocation-pa.googleapis.com tcp
N/A 10.0.0.172:80 tcp
CN 182.61.62.50:80 dns.map.baidu.com tcp
HK 154.80.213.20:80 www.qiuhun360.com tcp
US 1.1.1.1:53 sdk.open.talk.getui.net udp
CN 183.134.98.112:5224 sdk.open.talk.getui.net tcp
GB 142.250.187.228:443 tcp
GB 142.250.187.228:443 tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
US 1.1.1.1:53 sdk.open.talk.gepush.com udp
CN 183.134.98.76:5224 sdk.open.talk.gepush.com tcp
GB 142.250.180.14:443 tcp
GB 216.58.201.98:443 tcp
CN 183.134.98.112:5224 sdk.open.talk.gepush.com tcp

Files

/product/framework/com.google.android.maps.jar

MD5 4899aca36d1ed747a447dcac0d101a62
SHA1 32e43edc0bf3e036683ea8639472e6cd31ab9929
SHA256 67a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA512 50b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f

/data/data/com.radius_circle/files/ver.dat

MD5 e157427446986159266ba8b4cce6e0d0
SHA1 89c62f147fb2e6fbe504ae97318df4e0c00c05ed
SHA256 cfa6dc2e06f8a48271c6555ed013fb362614b03ef6df736c8b20361f13d5a1c8
SHA512 7271096aae7f516cd3a03b3890b154a14014d3f90d9727e2b3b0e9c12db47511f52c1b379e4bfcf793ed356ceb6f49dfc5177db38a7e83835634edaee039136c

/data/data/com.radius_circle/files/cfg/a/ResPack.rs

MD5 d42b8af0da3a6d747f8d907c2cbc7714
SHA1 86e7c13793a941eae9f00c366bab49ac25b5fd63
SHA256 814e4801d30f81cdf51e3de15b7e8e97c79e002e41febc87fb113d87d81063d3
SHA512 cf57bb2ebcdfdea04998f62eee673a8cc1eab7fc4bcd6e6db79d061d4cd87d4492a00a153f33c1fda6ee274983db86c20a59fda7a35220a6555cba7525c99936

/data/data/com.radius_circle/files/cfg/h/DVHotcity.cfg

MD5 8d66122cd6363e13d13bf09e2942989e
SHA1 b9831ac603b58c35fe9767f5cab271eab69b7718
SHA256 2b6b6d3d34c1bde21b504a9788122dbf0cde5793ce1ee46ff27a29a89071026a
SHA512 be8dc31ae696a694182fd458949f90cc0e571e3596a097e585586b76a800f407ba091bdf5c22fef96a03d89b13c061b178992693d7cf334883a222fe61b59a5f

/data/data/com.radius_circle/files/cfg/l/DVHotcity.cfg

MD5 1c6abcbbd253448057930ad1cc59ac75
SHA1 a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256 a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA512 71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

/data/data/com.radius_circle/files/cfg/h/DVHotMap.cfg

MD5 c16f5ca1517683c46e02a6b71aab3c00
SHA1 2d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA256 13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512 a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

/data/data/com.radius_circle/files/cfg/l/DVHotMap.cfg

MD5 49eefa442e55be8652c7c3c5f28d912e
SHA1 941ef7e65d47d38dd5f47084663f4fd7f57fbbc9
SHA256 63d7b59dcdc791b5d1380a1d06b9e199f6136965dc21a887efdd0cfac9d0a1b7
SHA512 b6c9d8a985a865c43348e34d94f149e4b552359d9afc7f5db660535ea107fbbdcedee542b9bfa018f1881c6c021b1e9bd331debe9562dcdffe2f8b3655d2d3c7

/data/data/com.radius_circle/files/cfg/l/DVDirectory.cfg

MD5 277c60639bcaddabcf270e4bb7bd444d
SHA1 92b672d66a44f77f9a368ca01c8d2c35f2f62471
SHA256 2adb5dab9e126fbb01d8edb62aef1a74d9830b5e750ee50ae7edbb7adbe46ede
SHA512 89d8bead995de4059854d92bfc4129773f2cfab1c689e3a20481f222cae61f61c3cf8069b265670687b785febc354813c0858635d4fb2a3d6e9538878bc4fbe5

/data/data/com.radius_circle/files/cfg/l/DVVersion.cfg

MD5 d54b7b380a5ff46c78283013a07d8e0f
SHA1 f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256 c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512 ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

/data/data/com.radius_circle/files/cfg/h/DVDirectory.cfg

MD5 744ba4d6f58e22f8f82d56a50e4b5373
SHA1 535e389f9b7f2e0d14e550fdd00011dfc255e0b6
SHA256 8b47d5b310d68b6911dbcfd7ecda4d7131351f66365f81db82f2979ae2f53592
SHA512 e888ccb7fc6722eaf8fb6bb8370c55f9eaab299be08db7c57038efaf945569b62b7b6b2dde5169044c5d60a4a9a9051ee7a7c2146153aa7d22d8b7c8f3310055

/data/data/com.radius_circle/files/cfg/h/DVVersion.cfg

MD5 9f6586fccf0eb02527e22af17bd2e7c3
SHA1 1aa6cbd2a365dc0ef213701471d3ea28e206b5f5
SHA256 beabc02e6d616732698dd232ef8a3efd396aa61cf4468231d1ab6e3bd9a491ee
SHA512 c6c1df5a58bc9953e76742b8a1bba3015b4b03c3d28f91268c9be5de68640340d99d374112a4b80076c7b236016aefffe27bfbde53ab92ccf6f41cf879660866

/data/data/com.radius_circle/files/cfg/a/mapstyle.sty

MD5 e8ff2c53ea1010d6588705f9e7b19f0d
SHA1 6c6c7dbd36d5a1924c9aad4c9a4a77d52be42bf2
SHA256 b5391e2c45b4e357e633af3a24d585cfb33183294627360ae5555297518c86b6
SHA512 1a71d761668bde5228973aa097bbb2d31ca7f4d857e8207694215c2a0bf71e9eb81dd2176987db4096f7017b467a10ac7cf818f995b0a034b57204c57dc6616a

/data/data/com.radius_circle/files/cfg/a/satellitestyle.sty

MD5 3f1348cd6165c9a66a9892565c917ca1
SHA1 96f0c939438c494cf3fd89246d458e92c0c7203b
SHA256 5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512 405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

/data/data/com.radius_circle/files/cfg/a/trafficstyle.sty

MD5 6a86f30539dfc9332cd235fc48fcb62c
SHA1 5c202003f6346edb85175b8df7c460793f5512c6
SHA256 34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512 f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

/data/data/com.radius_circle/databases/TestinAgent.db-journal

MD5 105e4f190984ae63851ec4e21152d6b7
SHA1 b2a52d390cccc2602e91d446763bdbde9f5bdf2c
SHA256 e54ff37acb1961750d051c48ea9e1599b62b3e647db317613db6fb193c52be35
SHA512 9a28ff251f5ad057e8883fba4d20db2127945b3c7f277a4593d8e1bb4104dc16d0f441aa3a90e20d6120e01fc887b3bb69a2ddcd2bca6c89ba292b08a8873374

/data/data/com.radius_circle/databases/TestinAgent.db

MD5 09930ae30d80d4dae8417c342a534bcf
SHA1 624e4b304c585baa443675fbfe7cb2212df3f126
SHA256 481e7f3012a370ab3dc73f0ddc12f3582df08a5c2b290ce8c00554e46676db2e
SHA512 170714921216b53b64d4a06e02135a0cab99e751decf4805a987efebd8a495f4e7f4d3e003e81c9c13870a09a1254110dbe02bad2bf5322ac02386e8147b3b94

/data/data/com.radius_circle/databases/radius.db-journal

MD5 677fc90acc975b55cdb4cbd4a0e5fa66
SHA1 e49f5cc1b61aebaad293791d7935ca5796287efa
SHA256 8ed12d75850d93ca403b91368e03659e064de7c01e6760c96e72a630506b209d
SHA512 6a76c29cdf28ae0f249c497f5ec4b4c795e94e946e94b5e401602ebb9c21215b445b47581692ca1e236c00738c541aef5c4557e065a66649353920de28322abc

/data/data/com.radius_circle/databases/TestinAgent.db-journal

MD5 07639cdf14980851ee3186465a568ea6
SHA1 c5a89f4785f06489a657a3edea1188f861955a5c
SHA256 4f3318f8ca80f4e705588031464e99945e1f8edf867c582d9595d9934eafc6a8
SHA512 c3dba1ebd0f0ca2fc48100fa39e810748c2d385b29d984e4f52adaaa274e4fcc33e3ce9c2920b421e2515ef59dd158dfed5f931f4e0f2df171579633e9682717

/data/data/com.radius_circle/databases/radius.db

MD5 35581622e6aede038f47beee82f0baf2
SHA1 3dfe1d7937c2e28c430117b7d2ea201d3229b4b6
SHA256 0466e0af44f723ef4d81b7b058f4a5d746e52cfa406e31ff6916dac0b72bd6fc
SHA512 6bf7bc1d978a5763a785b8870481ec4fe61e9c4fb69f21b76796b7cec5fe07300eeb96db4c8216148dfd00e9c450afa37976f15211fde1ab3c93ff5ae30b05aa

/data/data/com.radius_circle/databases/radius.db-journal

MD5 bf439ab23e9f87c3465330c49b7db32b
SHA1 3f41f0ef5f56afef68f4c70ec802fb36c5d2bb72
SHA256 5987a848cbb0ff6e536b36a7b1444c1cb0df79e57407a69e99b39cc8b236e156
SHA512 7321aedd038d13a4c52d217c9d20b925570db8aca7f0a559c31721c6314bfbf142e464178f089464f2e358c49c86f281fe225e1fda738b4e642f685e18054d45

/data/data/com.radius_circle/databases/TestinAgent.db-journal

MD5 83abc8cc2871dc6647c5af620ed32fb9
SHA1 668702bc7b7ff0331065b1e0c737ffeaddd510e0
SHA256 8c3a9aabab8579c704738ce517f1c981e4183a4bfd213b9caa8c06e3a291c394
SHA512 9ebfe7e5d6527014f7e517908784e50cfc3ec1844ac74f559df1099bcb323c8e64a378a423b8de717d03ef2c9929b58b7cd8a65bff420e0035c74d1af04159a5

/data/data/com.radius_circle/databases/radius.db-journal

MD5 1f883a51d5380656e567c1340c5c0090
SHA1 f0d53822dff6848ae5b0884668e9645274436663
SHA256 41b5dd3db0600c1316bbf9af4ffc78ccddb9d9d670b0ae74f745a6c905407376
SHA512 baf5c17dd8763a56991f49719ff36dcabcf9ef4146187ecfcbec4eb91d1f17e6c9c2b726b9506d2394c464970e4e2d3f9c6b309227ca98e1d92b7ea716804129

/data/data/com.radius_circle/databases/TestinAgent.db-journal

MD5 0d53a6827ff413c86bc01efafe388369
SHA1 95440e9cac7d1cd17c63a15ad0ea4c855df33a90
SHA256 2e4efe6195d62c28b34421e99bce8d0825efabffa49a9477e2397453050ea925
SHA512 d376bddb7fa52ae6d8c71bd269b659ceda658f7a752438e26a9fc0b53dfc166bf86602fc6a090b9ba43bd9a7980eb8069bee4df4de103e2653a24800e76931c3

/data/data/com.radius_circle/databases/pushsdk.db

MD5 df0c2f3ec7d9c4eb72fd68191a8dcd56
SHA1 efdeca48e07020e02eab38af0f70784bc83c54f1
SHA256 6653d2c385bec275b5015135f9def2c922932bca0098bcc2377f9f3dfdb4fea5
SHA512 28bff4ed8a4294865ac94ebbaafc8e87c69a7faaaec3602df04365fa470423479d02a2618337e929f51af5bfa575f8806e7a54445190f639b164e46a61dc2c18

/data/data/com.radius_circle/databases/pushsdk.db-journal

MD5 bfe8087f617c70201999337699fe86f2
SHA1 bfc4b2881606bd1ac781616744902559e0b0bd5b
SHA256 569a2322987e14590d4901370751bfed814667585ae3ec4f30aa23549b64e528
SHA512 1bd1470624fc236150d88e3c5d75c30c56b1354bb169eeb6c8eea25ddc01fa91e2c9dee085e903234b633f7804ed0be2eb36ae23923b267debc409985211c6a4

/storage/emulated/0/baidu/tempdata/ls.db-journal

MD5 5471860b208bb84081284b85fca9ebfe
SHA1 82707b9f13f5f5d5036c72b893d628e4b130bc59
SHA256 e6d7e70b24d9e72eee0af473a9b82f1ae8ecc00fb720c835a89c972d19624675
SHA512 88591a13fd06cd59cc65de2b0a3fe08ff4a4eebdd5f7a11965bb156e144b9a4b827ae7e3d6c2680f340f8fd1862248f2ae08cf9f37c6889240bbe376c1ef6c09

/storage/emulated/0/baidu/tempdata/ls.db-journal

MD5 a381d9a6126136bcad6077f8e302be93
SHA1 553bb84f438a578466c3a86a946ff4f9bdf10e01
SHA256 269da11ddee782d775dec7ef374c9a4793475e286955e50c41379137d5a88d3c
SHA512 4de33e44ee9945a038025f71417c61d8f06a2b34b6d56b167c7378f4951183081c347b8532764202446c84346b5291f77fb93e35907ac64e661b651b3deba5ff

/storage/emulated/0/baidu/tempdata/lcvif.dat

MD5 53f7f6d70cb9c271676fe7b6f9f9358c
SHA1 15aa7853a12555e46c0ee6c56e3c84bd2f1f7cad
SHA256 4bd066b242e2e80f48e34e007b71ced7ac73446d86e9aa9cd4fd719f96171388
SHA512 95ea647c75bc737c003b4b7451f2add3e5a7fc84466ecc17c2b7ad48245e8a5db7ddeb7553b17470dc00bb604d8da3af29af5539c3531d9001a2ed73a52f73f8

/data/data/com.radius_circle/files/ofld/ofl_location.db-journal

MD5 b34359f87fb4895ff4e249d378b2240f
SHA1 18d1d3756766e01dbd33fb6a0e02e1c995478844
SHA256 e2e8821909468e996c47c21893fc8f541e997314fc24a6c8ae2089ba508e2efe
SHA512 b51baa737f8a2e9f8f372770fe44f3ab3dfcabb7e306b85d4453c11bd2afea922c6deb9f631e65f582d069921c064c69c0b349c139eb1908c3bd896eacc3a873

/data/data/com.radius_circle/files/ofld/ofl_location.db-journal

MD5 a0c3f5e318d6842529578db34cee8c00
SHA1 90dd5ae7d5b490c1a9c3e9bd2a0f84963e1e8af2
SHA256 3ec0af86069c65dd01d549e626a48c42e867e1202c55fd295b7072b50c06606a
SHA512 2a1aa91c1fe154d04ead75b29231b5607a8f0fc509e23e94a25116f61ed161f4482a605a8883a173c7461b4f70e829ad833e2291f1ce0a1c2b5d02cceafb6c99

/data/data/com.radius_circle/files/ofld/ofl_location.db-journal

MD5 aa7931912fffa542c3d5218d4c238373
SHA1 f035779c4d060cc093a38d5220dad8c209339777
SHA256 8136d1636fa8b920919e49528749b8fc464e12692706d8d6ef24bf99a02ddc35
SHA512 aeed9b595594180d1974dcee97f21c877fe5b792f204f3fab82d0116bcc69647514b7de1e40b8a9743f75f8c49d93e5d3aed000e46577630a3fb93260491b72f

/data/data/com.radius_circle/files/ofld/ofl_statistics.db-journal

MD5 dbe47f75934d2b2fc0c20b9d619c92e7
SHA1 505576885b0051646fa80c10b55c63aa3501442e
SHA256 a0ac6ea894c36ecf48a3bb94e91ecbbabcbbceefe70efd20dd7eca6856efc567
SHA512 33ab65422eab0f755f8154eedb8a9136d26ba592df1c0b7d7f1c477b03ba913a59fe912244534650564f1656596eb9ddddf7516bc59d4f918480a509306c69c9

/data/data/com.radius_circle/files/ofld/ofl_statistics.db-journal

MD5 40d6a66b32143ad95d4be89c5e81d896
SHA1 851c28c7cf8fd6be20326affdab806a73905c7ed
SHA256 5b2122519261f1d03a38b3883d7fac69d41191e956852d80ee220c0f70411356
SHA512 151ed94f14f43486d8389dca27266acd527d99f109782a06834dd4419a6eee33d82316a019e042df43a782da0276c73def22260bde7f8b2a9ec4ddef32f6b67f

/data/data/com.radius_circle/files/ofld/ofl_statistics.db-journal

MD5 66c830da62c112f2b34f64bb64c90529
SHA1 7999374973e593158773beb9da7db5330a736a22
SHA256 af81a54f41255fc802ce27529ea90e83a1fdb81700ea765d3a3a40525694f63d
SHA512 1b53332b464b1ace0fe365e60350bb1b3e7e6044a7fe1bcf85e2e6f18f680b4d7d12a511ee30cb6cf7e357b1290b72c22892a84e5e74b3a321de23648114ca53

/data/data/com.radius_circle/files/ofld/ofl_statistics.db-journal

MD5 9f1e821de9969b9b01f0f40c02b6d27d
SHA1 337e617224ab7fbac5ddfaaec1b0a152433e7399
SHA256 b3672547deedb2f7f25a60bac6500779fa82a86d394d8ff55ff9469cca2d894e
SHA512 7383ebebc70282733ca82943ce6f24e41d4b3ab1456b94483831abbc80e9d0e2de74ba6e7318d5bbd4e8d740bc6a45f74f05053defab3d84c8b0655099bdfc82

/data/data/com.radius_circle/files/lldt/firll.dat

MD5 ab587e03a93f8a7f9ceb7182ed451dc2
SHA1 2c8c0eee3b62a10dc77c6fde4a8e33faf8551e8d
SHA256 eb9ead4b9ea8593f613f50841f9bcd19a995738b367c6ec8a83c5e0500f55035
SHA512 a3e5cc81f1d3a1f49e6897bd50a4ab0e32c9e0d1f7af264853eecb37da9dc78f7e77b2f52ae967b037ece7d28a002429d017c736158302254b2ac03cf1223661

/storage/emulated/0/Android/data/com.radius_circle/files/baidu/tempdata/yoh.dat

MD5 a936690571e9104e1922dda4a0ba5bd1
SHA1 65f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA256 f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
SHA512 3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

/storage/emulated/0/Android/data/com.radius_circle/files/baidu/tempdata/yoh.dat

MD5 1681ffc6e046c7af98c9e6c232a3fe0a
SHA1 d3399b7262fb56cb9ed053d68db9291c410839c4
SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
SHA512 11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5