Malware Analysis Report

2025-08-10 23:58

Sample ID 240518-k4pbeada6s
Target 53fc2c64e3765111d7c625393cc9f12d_JaffaCakes118
SHA256 6d2153eb47d2d681579af1d4ba8ba7a9222710a696e96ff43fc9f7a1f82bbda7
Tags
discovery evasion impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

6d2153eb47d2d681579af1d4ba8ba7a9222710a696e96ff43fc9f7a1f82bbda7

Threat Level: Shows suspicious behavior

The file 53fc2c64e3765111d7c625393cc9f12d_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion impact persistence

Queries information about the current Wi-Fi connection

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks CPU information

Queries information about running processes on the device

Requests dangerous framework permissions

Checks if the internet connection is available

Listens for changes in the sensor environment (might be used to detect emulation)

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-18 09:09

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-18 09:09

Reported

2024-05-18 09:12

Platform

android-x86-arm-20240514-en

Max time kernel

3s

Max time network

131s

Command Line

ai.tick.www.etfzhb

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ai.tick.www.etfzhb

ls /sys/class/thermal

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 1.1.1.1:53 www.tick.ai udp
CN 203.107.1.97:443 tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:443 log.umsns.com tcp
GB 142.250.178.3:443 tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
US 1.1.1.1:53 adash.man.aliyuncs.com udp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
US 1.1.1.1:53 umengacs.m.taobao.com udp
CN 110.253.189.208:443 umengacs.m.taobao.com tcp
US 1.1.1.1:53 amdcopen.m.taobao.com udp
CN 203.119.217.116:80 amdcopen.m.taobao.com tcp
US 1.1.1.1:53 udp
CN 36.156.202.68:443 plbslog.umeng.com tcp
CN 203.119.217.116:80 amdcopen.m.taobao.com tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
US 1.1.1.1:53 etf.group udp
CN 140.143.10.144:443 www.tick.ai tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp

Files

/data/data/ai.tick.www.etfzhb/databases/MessageStore.db-journal

MD5 df2f1a199727e43aec33a71cd4e73a15
SHA1 1d4c9bcfa0d12ea1cf2ffcd3737a0e29bf71e83d
SHA256 f51d9f145588721a4c5b3bfaa1d16f3cc307dae433d5177cdac747b00ad0fd04
SHA512 963ed2492e45a394aabad5801380fb6feae7957378a9fd77c8604b9fae2fa77d3e864e315c82c7bb8be18fdbc36133b3892e2a78430ab9911a023840569384ab

/data/data/ai.tick.www.etfzhb/databases/MessageStore.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/ai.tick.www.etfzhb/databases/MessageStore.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/ai.tick.www.etfzhb/databases/MessageStore.db-wal

MD5 323c548221bd44db58166c1f2991fa85
SHA1 5187216a07b00777655413eb63daecad51fa3f6f
SHA256 6fc1da7c8e64a54fc3cff612d58be2fa44d001c953e3cecf822fb91a6c3b7669
SHA512 180d53212360fd65e0d98ea28fd9031f494d531178ba0e19ecbd6dba031ebb11ec33f27929b8e6675adf1480264b4473044b0d5167732460f2c94139124a9d19

/data/data/ai.tick.www.etfzhb/databases/MsgLogStore.db-journal

MD5 1208a7281f22f61d243379e6933f0df3
SHA1 0244ada7dd75ea24f67283603764409e5f081538
SHA256 8174c9d8153f9337db0ce630744f7bc5db1088aa05dcdb43ae0b959ae11570bd
SHA512 02cca0972beb984e988888d238f40c4762e1d0535b2cde1d22758cbbd4ff53bd7b39bc250e789cecaa3b7083dbd5b98e570127e28f2e40e264a59fee17818521

/data/data/ai.tick.www.etfzhb/databases/MsgLogStore.db-wal

MD5 6558dc2e2362d37223a2e3c956644383
SHA1 770ff8c469d08df27a16bf952f8e10e056d115a8
SHA256 d8712b7ee4fb3d5550757d48dc936e6119624c97e8512e4e6d58e7ac89c53c4d
SHA512 ecdc13c0de00ad494cb84997f17111deb3d1ff1b32f8e827c52e42b10ce00700b7a4e02839d18a0e522f41e3153e120724e55b59abea49502d9762ef8175da6b

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 7af6dee4b96e9f87844e7628bd4583c6
SHA1 2089fbf3ee645a5a13d2b3322a3fc24e4dde494b
SHA256 08c21e77abce9ba25adf1b120b037443d3e767d9b1cb83e1258b159b5a831c78
SHA512 1e1755690a68a580c95f9e86784a50f6ee979710e389efafdb70b1b447439aff0b2b46f833326a5cb79e265a3c2de062ed43ff54b8769c1ccb20fd0d9c26295f

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 1749f6d5138ec3056f0f53bb0919afed
SHA1 0be4cbecad98a3cce6cdb69d869c7e2502decc03
SHA256 914e752a72ab0d60880aaef0a79f6c3199abd692f305ce04c3444ceb6de2d7c0
SHA512 f91198f763078b28e5f76ee609ca75a75ecc78e1975d5a23f23b41f159a4d32c4da5366b914be1cd5617cca6477910c0ea367ebb66b2547a3c4bc1f79ad5363c

/storage/emulated/0/Android/data/ai.tick.www.etfzhb/files/tbslog/tbslog.txt

MD5 a1d0d72ac1065fb8c559bedbc99049ee
SHA1 e1d62a10ee19713b64552259a6c0cf8531cb80c9
SHA256 7e68d9c7eb409d06dfa3bdaa20d0dd1bc85f204a8dda0311b3e0b526b4232771
SHA512 1363a56173be71c66c1ec5f80f556c372f523204e5fb8d63a9e29da78ac406f25fc65f96acb10fb08e976196ac988b73a298a2a5c5968d4cdb8f62c3be9833cf

/data/data/ai.tick.www.etfzhb/databases/accs.db-journal

MD5 2057acff31deb522db69a75569733605
SHA1 150f3fa347e93b986d17e894e0db9d2ce0194962
SHA256 6e9b05e1c08833bf6c4f13004ae21d46ae694c28f0438d1bc113ae047e496595
SHA512 4b0ef741bda4f8c0aaecc1704ef7d61ed5512bfc41bc8f0fed5e8c3ff8d12f0061e3feca987610e40a4c7167c3bad1c3a8a1b78c974389ad515e2747655c45ad

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 635a6e68a6ccf47c40914d7832c27c1f
SHA1 e1096dcdc90becddad8dd805332d469d7ad01034
SHA256 dfffd499b2e03cafda85e5315fccc389a1dbe9671539def78a16f12b006ec160
SHA512 93b583248004e9a19004f34c148d9974029f26f0e9bce2ee28f3a840f6aa9ba7249c00de3ff7aa828331f6b72225bea67f69cb6a432415b12d3251578d5e6ec8

/data/data/ai.tick.www.etfzhb/databases/accs.db-wal

MD5 4e10263cdb38d819ba88ddef94df3b55
SHA1 fd072793af2aee3353bd6d09283e2bf1c1dc1916
SHA256 4990c3943d44e9a21c2004f79f8f2dd4e43c2e334e0c3a29b7ff8a4fb28dc20d
SHA512 b1a865308c07d82845b65ceba484726ede2ba013282ee35ff6196e58f13ffd2031e84c44ee040a9d417a71be071820bb8bb9a68c0b48c43eb9b55eca1fdf52f4

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-18 09:09

Reported

2024-05-18 09:12

Platform

android-x64-arm64-20240514-en

Max time kernel

4s

Max time network

171s

Command Line

ai.tick.www.etfzhb

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ai.tick.www.etfzhb

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.42:443 tcp
GB 142.250.200.46:443 tcp
GB 172.217.169.42:443 tcp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.178.14:443 android.apis.google.com tcp
US 1.1.1.1:53 www.tick.ai udp
CN 203.107.1.97:443 tcp
US 1.1.1.1:53 log.umsns.com udp
CN 59.82.29.162:443 log.umsns.com tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
CN 140.143.10.144:443 www.tick.ai tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 adash.man.aliyuncs.com udp
CN 59.82.40.77:80 adash.man.aliyuncs.com tcp
US 1.1.1.1:53 umengacs.m.taobao.com udp
CN 36.143.252.67:443 umengacs.m.taobao.com tcp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp
GB 142.250.187.206:443 tcp
GB 216.58.201.98:443 tcp

Files

/data/user/0/ai.tick.www.etfzhb/databases/MessageStore.db-journal

MD5 9e867308d3c483ceb14320a411672921
SHA1 2ead49c71ab17c573aa60a4eadd5d998405627db
SHA256 c74d76aa246fba6ca910c38ad4426432b42dec3395a858c667d0a7806480dfc1
SHA512 19c237e761bc9562cdc5919e2f9a8cd73ff2d9799168ef8462a1d10ca68196e9ec550c21e8c19a27d554b8de22ef8a99eb331cfef3dbe03b9a2ae630307a797e

/data/user/0/ai.tick.www.etfzhb/databases/MessageStore.db

MD5 f1abc67cc72bf5fe66779fa5dd1dfeac
SHA1 660f6d1cffa2bf57ec29105e40d08ab103cf18ad
SHA256 a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a
SHA512 dfbe97f3c1f3a3ebd63fc5bcee1b1dd1b91dfe01ac95af8fe897f44079e852421fa0c4cf038da6e43264d50f3e612ddc2be9aa17bf47ef604ca428fafe0858de

/data/user/0/ai.tick.www.etfzhb/databases/MessageStore.db-journal

MD5 d3fcc2bcb652153e9467e59e78f6967f
SHA1 1b06905cf1f0c3e06014ec234758372a3a055114
SHA256 5b3a8cce3dcd4da8670402231e145d0f694b9ead191984f531bf0e328e78cf05
SHA512 3dd48791e9e52359c97bbf3498bc7e699bcca104a3fd79ebbaff63ead33dba7f5cc9e5554f91f6cf33fb3fbf2c3c7577ab3252e22b42344f4b4885c3094455b3

/data/user/0/ai.tick.www.etfzhb/databases/MessageStore.db-journal

MD5 1e560747e885fb54e2f184c8ad100b81
SHA1 b0f2568dc068c00a69c6464604e9674f3030e6c1
SHA256 ec09f22763f70344b7d36647259ea14aef8536013c7cd23172bb49f59f30b95b
SHA512 f7bb1d749cdceb6f4a2f6f3e3f694e70771fe2347b44093d8088390f7748dd278c36b5eb86a71ac8d4c36c7b4e6a02abf09d7db5be2ff508aee23f2b5fca5a5e

/data/user/0/ai.tick.www.etfzhb/databases/MsgLogStore.db-journal

MD5 232c83f98405e5c3e0b06d5547c247b3
SHA1 d26a337eafe6301a2fe1bf2a9353efccdeebf295
SHA256 d0e5d864c1433f34e11ee69e8ead0ed7c8b81ec199a03b29d134f40b49b7f447
SHA512 e333b0f12ee06a9d048831b617654c784316963fae019b5d494f23d09a94cd81777da62b2de1b1a6081ba851909c5c9b3d3a9178947d07828f87dc6dd22fbbee

/data/user/0/ai.tick.www.etfzhb/databases/MsgLogStore.db

MD5 a860ba3e3a648f73fc11269ff9ea9c16
SHA1 7167faf1666bdb05633e945dddc3d6af6c35fd0b
SHA256 4087524ad761d0669a39007849311b2b0a32c1a62d0a7ff04d4a77d702bfe27e
SHA512 279991548672e18e99522e1402ab96a3b1887a6ccbfa350cab5c5f5096807beb647b9cef0a5668755798f8032e243aab9ea5f1cfcd934671153d54fce48ef8c0

/data/user/0/ai.tick.www.etfzhb/databases/MsgLogStore.db-journal

MD5 638ca6ca2e5b463fe33d542ccf9e7a6a
SHA1 d1feb48ab8d243568afd55ef8ff9e91600c25c95
SHA256 63ae241f41234b252609f8e7215876e7f2a0ab72ee80e85a81268d6778412739
SHA512 8ef2974f7a9aa17d8a68f52e821f9944763f0bc2eb17e2d834d773bbc94f10d82f7df9e47d9da324e6610013d6f38cd52387b730cfc39afa80c440c7b870972f

/data/user/0/ai.tick.www.etfzhb/databases/MsgLogStore.db-journal

MD5 d9401452667b4ef27d2aa61e580dcc77
SHA1 a0d0984edc68ba6815bd9d791ab74f4f78b1c182
SHA256 5449af113855986c3444048efbb1bab81e218bc6395f3929ae05a2bea9c9d4f2
SHA512 dc50a33dc758ebe2df1593877290290ddefcea7b0bbef66467f94efa04b165601b1a3434fa9b42fd2029c2610aaa171fc7beb4bdcee4b66bb4ad4f26e56eda9c

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 5896a73291b533628e6e1964dfaa4337
SHA1 86cab9ebd844f11a1a8a9698079405a9f4c5d43e
SHA256 5009b579e35ecd71f895d355ad2b2c0dfbbbbdb1698ed3acf7ec05c9d106e641
SHA512 28534a44115fd28a759dd60910cebd1271e0698c7ccfeac6cfde92059ebcb5fe9284c768744e309443a00b8da2d33adf75792be2fe1b908221becd72c84b6e7d

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 e4cc327e331000d11beaa260bf5eb2d6
SHA1 fc1ba4eacf0e3a533e741efc0baece58d634d12a
SHA256 d5afe3f184bd489afe204b4bebab6d73fbdc83c6fb3f2d19e8c11a1cc6cb9c84
SHA512 2df5ca8e052069c07b0705a02f4c6f83ca00bc9d1a757f962731f44488836e6fba69a80b840c5e3781843caf8f7748ea592bd275a0e9a571041ffbff66a53241

/storage/emulated/0/Android/data/ai.tick.www.etfzhb/files/tbslog/tbslog.txt (deleted)

MD5 56365b8abd4178b69cadaf8766b246cd
SHA1 1b7986335d329a72892ac9bbb1cf5f77de4b1366
SHA256 8334ee2b559cf4b7b09310d58b7f6011b44bcaef09881ce116179e35cd0b5166
SHA512 9deb641da235f472d0c2dabf778e44bfcc7dd4710f026fc16708d84045c0c67f5dfa62862b06714d4d7eac40cf1b762575dc128b3abeb474616a9ec6180599d4

/data/user/0/ai.tick.www.etfzhb/databases/accs.db-journal

MD5 3aa36948be983c77ad01686fd9fa86c3
SHA1 31df846094d46f18c33f50c4505b86bcbe6369c1
SHA256 c056a35acc5e875de2b2b5157988158238854f62ba94f4a9c40c8e01ad5fa084
SHA512 00492639d51f9d0e530940d431c81d31e700e704844e34666eb1516739d7253a3d64d28b7b13966a10e224620207f26192c6034fa89ba084aa68eb30a097f5a7

/data/user/0/ai.tick.www.etfzhb/databases/accs.db

MD5 064201502ce25754236b3b5c12e24c65
SHA1 e2c89961dcf8306440bc99f7b058ef4680eacf0d
SHA256 b4ef8a71919ac4b6ef9a895a991b527f5c3316fd6204eb815366c9614dc71f00
SHA512 3f5af9d3e7fbca1c0a3f9ad5a8d8d8e1d3b3e3c79cfda89b6baef007aeafb4ec5738626fca1f682b73b0305a94a4e2bf17c0bdd4fc7fbacb80ed02c7affa44a1

/data/user/0/ai.tick.www.etfzhb/databases/accs.db-journal

MD5 fa3d8cae216803adad791879c92f5d2c
SHA1 8eaa95481129413df146d5859b69e8488b8edf0e
SHA256 7a30fc2194a74866c28b4e63a71bb9cbfef6bbf0ada2754ff8fe30021feabe07
SHA512 ffbf3e6526b3a7a3577e8d3dc0e07a224c4b776128294293c135868e9f50fd713402f70fedca904a6bdde034caf3a977a1c2d2155f11ab7f5a8289722b348546

/data/user/0/ai.tick.www.etfzhb/databases/accs.db-journal

MD5 0274ce81bf023849d507e917f377bbfd
SHA1 6924ce67937d687cb597e1612710bf809e6e6ea5
SHA256 99258dfce2b3aed768c09364138baf226e3ab0da8908c8bb160712a455271a4e
SHA512 ab72be635dd17c6cdaa4ac303e24c0cc170444cba623ee0c4042897df72eff23f332c846e6b5274042fc3d9b1f758901b95b2b3db2ddf36a8098d695a5f6c8d3

/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

MD5 acf6f9e6cf8f19f87e0ff53417bc1bdb
SHA1 56136495298796371f2fb7496a596003f0dfe438
SHA256 08e67510c4931728dd3c301095ee1f851cd2a827a7ced1ba27713db020c3cce1
SHA512 8a4306df0ba55c9feae00582555865902a9add5d84b328834bd3984a5dfba1cecf47e744d9882f7b0418fb353bb58661d0717da081ac4fd8d22ea1222f245f9e

/storage/emulated/0/.DataStorage/ContextData.xml

MD5 f35948dadadc72dd54a8cb7a01636706
SHA1 874c102d418c31d8c162de67f2956b0912711443
SHA256 bd64b39511ded4d809376e5d245ec45687b6164629a10e426a27437309eb1033
SHA512 2e81b8de37c48a1d6c95a47b46697fafd280374953b1615e07f1e0e2c2ba9a724548a3af4a070cc0505c3a0222ace50e8c64139871548904ed1879c949fd1d13