Analysis

  • max time kernel
    177s
  • max time network
    189s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23-05-2024 08:31

General

  • Target

    6a592437092dd4f89a94e334c0221c35_JaffaCakes118.apk

  • Size

    9.3MB

  • MD5

    6a592437092dd4f89a94e334c0221c35

  • SHA1

    900cb99618aa32d629d1daf045307490e58f1aac

  • SHA256

    db56d6a70a6be2b40372a9f26e80bb068147333d5707f5a7998376336e6928d7

  • SHA512

    3f0eeaa4e24a7db82f38ebce38136ac14ae91a3f9b3b37be76dfc0c992c7ff3c0897d4bb9295d921dfc9e73978803b637b53c7c6153a01af028b2aff30eb71dc

  • SSDEEP

    196608:OW3LkXd6vX9pGx//JCsJWdyJ/JldbQGTGEkaEFp8:OsLkt6//GxDWMflyGaEkaE4

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Checks known Qemu files. 1 TTPs 3 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

Processes

  • cn.creditease.android.cloudrefund
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5163
  • cn.creditease.android.cloudrefund:pushcore
    1⤵
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5210
  • cn.creditease.android.cloudrefund:remote
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5370

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004
    Filesize

    251B

    MD5

    281ba9de8357ea644b2fefb47b896f52

    SHA1

    8fc8cf0d2ea8981831b7d90d41d68a475d1c83e0

    SHA256

    0f7eb41de9b6869e16f0abbcb6b651214c61c0458c5d2725f67a88bfcd7eeab4

    SHA512

    1d16c630da869da75908ccfc1e20164303e26c13e58d2b1ecd86586574cfc1d4e93c3e799797e77b2fa60ce34b8a7801ec7c8d4090c81bd9a9b115a55da37e33

  • /data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004
    Filesize

    242B

    MD5

    011145a494081a16e141ee13f26b7642

    SHA1

    a01d3bbc001f20b0d3f17d96fa2bcc4133ab64f9

    SHA256

    07c97e94641eb4f5771bcb1bc8bc0b6f3a121b3cbf11743488104387d7b25e41

    SHA512

    000a9e533e1f826e55d098e4a108d03dde1717822acbddc4af6b697497e39d608d23dd70febda6afe6e5b084cd02739aa3c21a9dd8f62d014ce62b4c49151e3d

  • /data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004
    Filesize

    249B

    MD5

    98dbc4a859f4fd824a85024aa0b88341

    SHA1

    0c528af0738e9316754a444cf5a46c666c17ffe6

    SHA256

    4c86fd01947e3fd5ff1deee2ef2bae50671fd8c04d5dc641d742ad8557734f2e

    SHA512

    ab566642cac85e13caf66ecde4b4f77c0bb2c22c7d6fc238b3012a44c5b5d20b11d3d30eb82aa24aed16b8606448b09e1b25dc4f1b77bc9febbcb7bd005bab37

  • /data/data/cn.creditease.android.cloudrefund/app_crashrecord/1004
    Filesize

    8KB

    MD5

    ad0c3c06abeb3d71ccf773b4ece2a8e6

    SHA1

    d99b310565d7c63424593be542a5202892071265

    SHA256

    3fdb05adc1979732789568dd2665866358e9250867e54cd5e9cfecc0a72a3b16

    SHA512

    7c484699bfea48bad921f9273417d46b1cb21db0cd4ba12dc997525bdfe25f3789fca68bcdae7a825059166646c6794e7343eefdd81f29e1159e8ad508a9ea93

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase
    Filesize

    20KB

    MD5

    bab92ae94367c47ad573850702a1b59d

    SHA1

    f477fe4343d1dcaa96a255c9281a81ebe1b81e99

    SHA256

    e4be24b2ba6294fe808a138e29218aa548a220d12e20f8f1cc70679569a7c1a8

    SHA512

    203dcf1de30bd91159d4d7b757a25383ab5858b585dd133351543f7477986fa8305f19bf002c9c2086486d04f280a1e23b7bde855de455fad04755c4cae479da

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase
    Filesize

    4KB

    MD5

    10bd3ae3af030e244bbff2c1f991bedd

    SHA1

    2920d0fa298d2e69d01c7e91fdc85dd8033218a6

    SHA256

    d5c6c1607d48b9c620c15f0072468f5bc45acf9cd08c1df8fa5260e937cc2191

    SHA512

    51ac4a34b5220492737ed5120caf1325f1b6d3c051f309751c5a5f7fbb0dc33ee11ff91dbe4c34e0e4b51e0a27db8b83388d4de419e2ea0d81c70293bc9ced12

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journal
    Filesize

    512B

    MD5

    7a3a213e5dc377d8c776b86d66a91305

    SHA1

    c86ed2f4171b418a5b08d55643e4ec39746d1472

    SHA256

    1c4b0cb636d377091ef25485e9f55ad255457786602d3c7186ac13d262979ecf

    SHA512

    b8657d56f834388c9b02eb0dd166c5f170908e58c4d358bcc66753df364847b89164c8a14c21a466e94dd670144e21a67088772254abb8ce7d6cf12c7263a059

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journal
    Filesize

    8KB

    MD5

    c849265f45e406a75de0063e50f9c1bb

    SHA1

    b8ae1096f03ff3a47462720f666d9f695e39bacc

    SHA256

    34ef98f4c3d940b0ec1229710214bec46077408c8a8c504d85e568a76c3466ce

    SHA512

    f02035f34485ff264e3f5e3a3bfe84681a658976d5306f637f1f81e75aa8464bc1b652157611d14d05df3f4a3ebb2eb5e4dfec671ae8837005964a4d03dbff7a

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journal
    Filesize

    8KB

    MD5

    763df1379890f07d5caa651c51e9608e

    SHA1

    db4943beceb033a98b9048acb226fc7549d6aea6

    SHA256

    87d3df4bab4ef98d6401efe6617d976699d56fa9bacbe697fe2f16886b231eb6

    SHA512

    ec1f249eed6c94c78f3ce710e047b48401d14f63d5f4f828f7e658d459a528242515fdd0dfbaf1bc8f5e100d8652f10a7cf3f31f05e8f92405f6852827966299

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-journal
    Filesize

    4KB

    MD5

    542fbb7eff3c41dddc79fe49f294be6a

    SHA1

    122628d3e2be22f8bab389970d26e9bfc2ccdce6

    SHA256

    84ff7800dde050f8a9aa7f2231c2c373ce14fd848d23624f8081b588329ec24b

    SHA512

    299772c3198c3d01e2b9c9ba095ccae68a2339923fe8f730c58a06cc0367b7496446ee3afee0a73fcfa715694ee435111e5f84d91ad7a961c4cbdf21f624b142

  • /data/data/cn.creditease.android.cloudrefund/databases/analysis_cache.mSqLiteDatabase-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_
    Filesize

    16KB

    MD5

    3ba5680a98ae1d09069d3d1b1ebcf3d5

    SHA1

    83a57d9e318b6cafdbba70edfb7c30b0fc597287

    SHA256

    1616c34daa17e79f2fe390adb3689020fc7f4e66bdcc72d00ddfafecce3653ea

    SHA512

    ab4d1bf5ae0b6d45d44bfd52d4cb9dd93a1745d5b0c84eed0997d9325b130540418d7cd352283ed91cec68bdd028467dbb5782988ee0c75b08d85b8f23afc763

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    8KB

    MD5

    c28aa76d86a5da0380790f3ca5b78afc

    SHA1

    bcf82fcb766817258ce280e8d5b67284dcce07c3

    SHA256

    9d77429b775096784a4bdcc145309e4df05ca60debe08566b1dbd87e4cb1d516

    SHA512

    4df4df52e63fda620a2f534ace54b2923f5c1bea0b603ae29063e41c1b18189a21a40f18b4ba5aaa699851ce3ceb77521899f342d3b9f956f0ad1a2bca4c570a

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    8KB

    MD5

    821859ca58b9a7a981ffb31d0523d203

    SHA1

    633329d2e793b6accb6c29c6c8b62d1136e4a0e5

    SHA256

    04e1d52e955330539f88621b9157b01e4d5a188fb81f9433bbee00cbd0acc7f8

    SHA512

    d5924c30b4bd9141e2f0f2b1139e8a882e6c1425b9c4014dd4989f32fd2ba87232341bb2b1065e3de7f2cb73767578d1c465183ed38e0b929d7b18bff31f372f

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    8KB

    MD5

    813086e5377d09687d5436cfabae63e7

    SHA1

    3eccee78c6f46fbf3e92bbe9389c8a48facd8319

    SHA256

    dc5eea8428e146cba141ba87053212188341450f95fafc3f8b55b693ffaae6b3

    SHA512

    336c901d367a1fc0b46ae0c2d61c44647cd19547fa6cd70225ea0b28787cfbea3410b5e0869a0334478ff64f1d9453f41ca2a005ab1f1711a530629e7e1e3dea

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    512B

    MD5

    0a8e83190d84399cc7d3ffb1447b58d3

    SHA1

    73e433478642f1d28ce0c260cb772857ddc04bb3

    SHA256

    5a8c523bac2f473c0f1402cd878b504a8b83e579d0ae7d380229eb423f18d3a9

    SHA512

    73bd3a5b44289162193c939e27653941a0b754efbda9d7756d5aad6869a2d07477bc75f0d11d3bfe702e65825da24479bf80506b55f8b4c7b343c7a2e2bbfa06

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    8KB

    MD5

    6b712bd8e7ebdc21890abf4d6ef12997

    SHA1

    d87d5438b68ec2a09714190094a06f857dadad63

    SHA256

    c69140f3da82f2ffc81cc045b7f16ebca769405711a1177827fe25ac551abc0c

    SHA512

    93e1f137c33c01e03abd8685a21d044cd56c26622886c7e71de013b23e82eac292b51c3b4654b35e3094424ce8faba58f27bff1d80f2562fef3c97a19d9527e2

  • /data/data/cn.creditease.android.cloudrefund/databases/bugly_db_-journal
    Filesize

    8KB

    MD5

    f6788811a7872e365a23b554feabb095

    SHA1

    dc4dcdc9b7a88eabc34517aeef7ec606bd2423c5

    SHA256

    e66c412f24a72c554dbb822ee939b99a51fede7e8e04b7c03af0b0135ed8e145

    SHA512

    15b2cc9fb95f66c06e026dc5690d2f86aa12504d1264ee6dbad694cef2e10832656978b1f106b8c2937586507ef83b77f4ef552023437cb31a13af1da86d23c5

  • /data/data/cn.creditease.android.cloudrefund/files/__local_ap_info_cache.json
    Filesize

    2B

    MD5

    d751713988987e9331980363e24189ce

    SHA1

    97d170e1550eee4afc0af065b78cda302a97674c

    SHA256

    4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

    SHA512

    b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

  • /data/data/cn.creditease.android.cloudrefund/files/__local_stat_cache.json
    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /data/data/cn.creditease.android.cloudrefund/files/jpush_stat_cache.json
    Filesize

    119B

    MD5

    75c9e678309d082437a132ee30cd9f16

    SHA1

    a8d3a9da8d7bec23510b5d280d4a5881acfcf6c3

    SHA256

    d8cfe1ba233091fbd122025df17f1994de62a08ea891ac2a4ae4bfce0c91f502

    SHA512

    c0d83334b7202095d7a227e4df9f7fa1f3e85e0965fdf6d841a39677a5c990c961748c7f301ab2c2587821f0a500fd3ac0b7f669b220f54525921aa83257a6cf

  • /data/data/cn.creditease.android.cloudrefund/files/jpush_stat_history/active_user/nowrap/c184bc80-0810-4ff1-b2d4-0fea9e5963a7
    Filesize

    159B

    MD5

    033954a56798b4a58eedb60625ab0561

    SHA1

    8a588bfce0732a9704f1fd027fbd973439f70ad4

    SHA256

    c70f60f38f98c69ded260438a5e6c4eaafa1fbba349b89b0610f765ec1b5ae5b

    SHA512

    4fc73f23c2767c5f19eb7b572f72191d59bb7a9d9a07477b1b0ac2ce1c58334b9f7575ac198f00b4c3411d6db88f295e075093a25db1ca36d4ce839bccd3c08d

  • /data/data/cn.creditease.android.cloudrefund/files/jpush_stat_history_pushcore/normal/nowrap/b31e95f9-2583-4e36-aec9-de7fd39c612c
    Filesize

    8KB

    MD5

    f30364098d3a8c37c248f676c38d8375

    SHA1

    10b368b99f08a6d8434579f7b6ee260c52b2270e

    SHA256

    0994496dee2f5f7b6b1075a545519cfbb41d0df94d47f55c87d4c89862641174

    SHA512

    452448d2f45fdcaa18cad7b1235e4237fa22b175a39c67197d58b4989a25d8789e80eb0947aebf3bfb92a50bd818867a57832484d5bf797fdcb3a9df1b5cb381

  • /storage/emulated/0/Android/data/cn.creditease.android.cloudrefund/files/tbslog/tbslog.txt
    Filesize

    52KB

    MD5

    5d3c0cf3d5f4007a51cb8eaa7fdd401b

    SHA1

    fad794eb8512b3f684b2d912342a08716e493ba7

    SHA256

    81eb5f047a0a980cc43dc20501eec001c48229361a2c22c5a6282e6bed6d5b0d

    SHA512

    5ee0d75cfa9609d44053ff9e7a46b39219766de596f8b677e0a21cd4892421ff05db7fadf80831ae8b79fa1c228162223f0e6e6d3502a101fc21a1564a7e0bcb

  • /storage/emulated/0/backups/system/.confd
    Filesize

    20KB

    MD5

    86fd363cecd64e68f0abb73e3e479259

    SHA1

    8978e8efea4fbc25d8684b8048885de685dc6efa

    SHA256

    b07191e27017423ecd54a64605e1ff0af532186e2585e741e3f365fee52169b8

    SHA512

    3f8d091fe8a621cc5efd08189a732d06aa283a6a6d898c5ff481428a3406587c8bdae7229b30e73e45e79e5a668acbf139e2caa2cbd86c77bd2c83b626de025d

  • /storage/emulated/0/backups/system/.confd
    Filesize

    24KB

    MD5

    e4abcbf91bd52cefe86643b15dd73bc1

    SHA1

    559da0412486f0fa3186a2bed5a25e3f0118f636

    SHA256

    26a744b5da74774a5a0e1c91e67287f35246b420beb58dea98dd768b0c20f048

    SHA512

    5bb4316f105a55bf6c45a99b3a2e8c397e1e26af4eb15ad2d4ee5eb1864e13ebdde355256787edc0502954382d847c618240a7098acb8daecae2acf548b5bb1e

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    512B

    MD5

    52a800bf1c55dde881ef38460fa28902

    SHA1

    9d588e106e13b166d4aa25f2eddce1f2f2791778

    SHA256

    fcff8d3393320dfad6eb63e8379a6f48058b54874d37fdbd6ab7cf4f633fde16

    SHA512

    8fe59d7a37fc65c62511e8c90a7a5b62509e91b9f59ed64f4e87d732377dd7fae98d52255bef5fed6370e82748318ae5c355f7c69ad728c4f623a3e194e7ec35

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    8KB

    MD5

    f742706ba505aca7bde7d1d5aa2c457b

    SHA1

    69d1f7e5fbd5869267e94ff383d886a6d482a151

    SHA256

    5ff3a6d4f8602aee2107e7fe22c4b9e75f6d966f60950cc06a1efab7b8e3646e

    SHA512

    31f033750352d17bbf2e20233d94011f9aa95812ece42286c499bd5ca43425f4b9dda133ddda7faa7fc4170a5a490d74676f21bae0a6912a3b1b17d7a596acb4

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    4KB

    MD5

    6b5cf01106f372229006cc068544c1d2

    SHA1

    899a88264092369aceb39eb564dd96032ae1fb33

    SHA256

    f92a65a95a01dba46c117e5d7bffa3188efc87c7d5767168c1c00b4013f9a54d

    SHA512

    c4790e39e33391f2e02840547fe52a20c5a253e9a338d976fee2e2d4ea650311dbab61d398e9fcdf20abf6a44a0bc13b616b6907e642ddb2ca30afd9fc76a6a6

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    8KB

    MD5

    a7bbe94769222029002aa18e16dc6948

    SHA1

    251a8bc9631d9f2c430b5208d0f196efe7ede034

    SHA256

    37af84ddc37e3835562208e912c30f228e2ef69e61734e2d0a8c2d15009bc28a

    SHA512

    e698c551915323c2df3591c2d20d1506b8ad5cfb733f3d386c413ed53a770349d88902daca9cb7b77f3bbfd879af034d8f084f073161dbeafeaebd935812b644

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    12KB

    MD5

    8bfb7b43ee4b29b301913a9102e181e7

    SHA1

    88c146a0e74ce72b700369b348e41d91cee9cb49

    SHA256

    ec6dc5c7ca3b15612f4086acf9b07b140b7b1c724ab0cb59034a47aefc0e9d03

    SHA512

    4e1389470f7756793ca9cb0922b5b7b995536d40eea016eb8c2835e13bd072b8213b6637468e017104623eb1c68e0fbb3b18e44f79bc82b6d94190e6e64fe5ee

  • /storage/emulated/0/backups/system/.confd-journal
    Filesize

    12KB

    MD5

    4abb6202e24c2d01b088e04a8ede0c97

    SHA1

    5910b4c36c54d227ec93d5320382f8ff1b3b429f

    SHA256

    28aaa4e626ab9afa47c21cbd6571f827a35d00de1a33cc573b17767941ef44e8

    SHA512

    0d4509332b1c491808c6d350d5bbba423d6d2360d749abcd42d37d96353ef2f6b451c9f351b46972cd4eceace7ec12f532918ac43cbb338b7ab768fe5ed93b5e

  • /storage/emulated/0/backups/system/.config
    Filesize

    25B

    MD5

    d1611d458631e8da3530ea21401f2c63

    SHA1

    1014f61672b7c14fd89ccd2b84f941023c7497ce

    SHA256

    1c87a7aad1327c2d403e11ddaad1de71cca705b1555b5aa9273b7cf1afc7cc14

    SHA512

    0957a653fed411487d1d5783ff555068f052c09ee4fd6ce706eeef45cd441f217ada07a888c911878a3d4e341d8f660b0bfa9fb29829595aa1f811c6cc1e497a

  • /storage/emulated/0/backups/system/.config
    Filesize

    50B

    MD5

    fcbff6231dbb382ce16af40e72544462

    SHA1

    9d5e8eb802c08192a29a70907d8c71410a8ae9fa

    SHA256

    9b2bc86eb510c6ce41ac0dafeec950992d0460b807b9dba322ae97c397c71fb5

    SHA512

    a96fbfbcdbd24f17c3ce672199f7e9881536a9cab2054753e81d04e8ac7262f74cef94e593b82a6d5c13e405ef5241d827936c80e762d7e5ff0eb5c1d7c6c878

  • /storage/emulated/0/data/.push_deviceid
    Filesize

    32B

    MD5

    f5ae0a25f1ce986be0919c8ea79306ec

    SHA1

    7a0324477e47bce3336f63a2b90566c78c91499a

    SHA256

    b0231d6a4cbb5da0acc5687033bfbab21330bf34b60d143a3abfd660f12479b3

    SHA512

    4476b163a939847c2423b3fe3ae7ed8c943c7106da73c72bc15ff3e96a78e6e0107000dddd33f3b278f9a109a69e95f86ba70fb59f1d1c13243ca078993a099b