Analysis
-
max time kernel
177s -
max time network
186s -
platform
android_x86 -
resource
android-x86-arm-20240603-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system -
submitted
05-06-2024 17:59
Static task
static1
Behavioral task
behavioral1
Sample
98daf1bb869a3cc4d8a4eaf1ca70658c_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
98daf1bb869a3cc4d8a4eaf1ca70658c_JaffaCakes118.apk
Resource
android-x64-arm64-20240603-en
General
-
Target
98daf1bb869a3cc4d8a4eaf1ca70658c_JaffaCakes118.apk
-
Size
22.6MB
-
MD5
98daf1bb869a3cc4d8a4eaf1ca70658c
-
SHA1
a04a9f75ab925443dfa2b4316b7ea41b2aa502f5
-
SHA256
5577c3572eec192271402733140e270bbfff6ebe7b6e6d70bf4a8acafd9ef5f6
-
SHA512
6e45a53d41cc3f8bf156c7e6bca0eb9b38d9a6ae1ee22e4b57c8c62cb6c6305238e461ac3b2090d7f9d1f982c174633a68988d54f8ebbbc786f173ef29235cb3
-
SSDEEP
393216:LMtQmQpJ5nFAbKb3TkLk9/jsEbYmIdC9KTLdmffVMyeUyqTwIII:LMtZWJ5eAALeAgYhg4Tp3uTMI
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /system/bin/su com.plan.kot32.tomatotime /system/xbin/su com.plan.kot32.tomatotime /system/app/Superuser.apk com.plan.kot32.tomatotime:pushservice /system/bin/su com.plan.kot32.tomatotime:pushservice /system/xbin/su com.plan.kot32.tomatotime:pushservice -
Loads dropped Dex/Jar 1 TTPs 8 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.plan.kot32.tomatotime/.jiagu/classes.dex 4247 com.plan.kot32.tomatotime /data/data/com.plan.kot32.tomatotime/.jiagu/classes.dex!classes2.dex 4247 com.plan.kot32.tomatotime /data/data/com.plan.kot32.tomatotime/.jiagu/tmp.dex 4247 com.plan.kot32.tomatotime /data/data/com.plan.kot32.tomatotime/.jiagu/tmp.dex 4247 com.plan.kot32.tomatotime /data/data/com.plan.kot32.tomatotime/.jiagu/classes.dex 4366 com.plan.kot32.tomatotime:pushservice /data/data/com.plan.kot32.tomatotime/.jiagu/classes.dex!classes2.dex 4366 com.plan.kot32.tomatotime:pushservice /data/data/com.plan.kot32.tomatotime/.jiagu/tmp.dex 4366 com.plan.kot32.tomatotime:pushservice /data/data/com.plan.kot32.tomatotime/.jiagu/tmp.dex 4366 com.plan.kot32.tomatotime:pushservice -
Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.plan.kot32.tomatotime Framework service call android.app.IActivityManager.getRunningAppProcesses com.plan.kot32.tomatotime:pushservice -
Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.plan.kot32.tomatotime Framework service call android.net.wifi.IWifiManager.getScanResults com.plan.kot32.tomatotime:pushservice -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.plan.kot32.tomatotime -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.plan.kot32.tomatotime Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.plan.kot32.tomatotime:pushservice -
Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.plan.kot32.tomatotime Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.plan.kot32.tomatotime:pushservice -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.plan.kot32.tomatotime Framework service call android.app.IActivityManager.registerReceiver com.plan.kot32.tomatotime:pushservice -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.plan.kot32.tomatotime Framework API call javax.crypto.Cipher.doFinal com.plan.kot32.tomatotime:pushservice -
Checks CPU information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/cpuinfo com.plan.kot32.tomatotime File opened for read /proc/cpuinfo com.plan.kot32.tomatotime:pushservice -
Checks memory information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/meminfo com.plan.kot32.tomatotime File opened for read /proc/meminfo com.plan.kot32.tomatotime:pushservice
Processes
-
com.plan.kot32.tomatotime1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4247 -
sh -c ps -ef2⤵PID:4757
-
-
ps -ef2⤵PID:4757
-
-
com.plan.kot32.tomatotime:pushservice1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4366 -
/system/bin/sh -c getprop2⤵PID:4530
-
-
getprop2⤵PID:4530
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4609
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4630
-
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.6MB
MD5a21a9dc62ee865aa85fedfd623754fd1
SHA14e84ddce9d9b6402db9f34984336a0fa97f3cb30
SHA256ba2c9ebee2e4fd715955f44fe0ae99e426a25ce9146889b986be049a3c80ce4c
SHA5128d7bbba6162b21c66be3205c55e0337538b1416a1d6367c83dc36de66d98c0e87241bcc156f4146f57af5ea586919e9327dbac50a067bb760a9ec288848cd927
-
Filesize
5.1MB
MD5a81dd0f7f7d734b5b8268bbfaca596db
SHA12b30bf7eb10c8b26ffe48dc7323d01ac1d4acfff
SHA256ca5f159120a46da65e18ac7f2e2357c7b97ad3a05bfce7eaba53f4dfa083e98b
SHA5121642b0dea92e273c691cd7c6af74374bb7a7bf50ff962e8b97d07c46c76c91d64f6e1aa6531f80673c4f43a1bd46cf7197c2fe3ecd005d23d7c233850d4cbb62
-
Filesize
614KB
MD54f96450368abc4976389ba6a8868c92a
SHA104cc1bbd8c890fa68e860000deafaa6e5c686465
SHA256c0417a15db824d1b60046cdc6cb1219c51dfe63c13882b5ebb1921c186bf1d6c
SHA5123c2511e8c5c88514989b982dcdc7f960b13d583fce123edbd95235d008659d75ddab93ffd9e0356e7816a5e5068ef6f6b3cc6564f90862202881772433e1715f
-
Filesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
Filesize
512B
MD54f392f68e85d4f91e7bc7daa48dae724
SHA1035a900d0a8ae1231a4b94d19e621508986146a7
SHA25673eabbe2be69b6d6a0881d3a1e8707507f5a2ddd58157a5ded3fd484810ed9a5
SHA51235187e87335c9e202075810949de84c171fc157d4d06c5c9d35dbc2758ba495213b7eb8794b5c0b554cd75e104c6893eb7f121c517e5c8fdcc34963ca7e57ee8
-
Filesize
236B
MD593181c61f27516ef718ebd297593f0d4
SHA1d87bd42a02c2018f242960cffba58a2abb85696c
SHA2560ca910a30c3e8c1df38a4cf12f5e4fbcfc3b36a60a67077f06a1abfefba319bd
SHA5123be9476312a7d1d72565d8c2b64e4ef4b94ef71da5007b4f9d8b26aca1f60ad1170b6b591d73a485bace794c46cdb34f5bbb607f34012dc3370ceab29df057f5
-
Filesize
58B
MD5444ee9e696b94249f5cec843a82c3045
SHA11997dc5db1af2e30bf13b3d6206ac829e4effa72
SHA2565657ce0b4d438056160b751c03ae42c95f516aef16c6b69ec9d0a420caf3e274
SHA51209b1fcc347abd9cdbd1b6b4bd3020093dda99840f0163caebde37bbbdcadb611b6a87df7ef51703aa627f3c4e3886c188456e5489339a38383732e102221c5fb
-
Filesize
512B
MD5432087ef95f7134d7576a25aed0b3bdf
SHA14e039f0014cd3f1b43a45a3e2e413f574d5754c1
SHA25640a4808fe347c95daf751347def0ebd58c86479d3aa651f4e6bf7b9fb65b77a8
SHA512ab2809c1b84887f44e1b7cb87cdf8ab946e84dc71e6cfcef98058424608c83ea00a04b98365ecfc57bf19c3d94211a93ced00b3b011cebd64611642c98955b2c
-
Filesize
370KB
MD517abbf4fe4dfd442393840709a06cf7f
SHA1bc8048d0d9c0089c9a1c91423fea33b629cb5b05
SHA256a03eafeff6ad84bd769934b4943f06c57b8a7f9cefe494754e16d20490f52726
SHA512707fc6f8e9ab7afbdf5181c3cde563485e20b40335b37ad84de924405054c020b232834885a1df0616625e9eb02503b1956f7e09ebc2627585980e799bc97384
-
Filesize
64KB
MD5f6bbef0084c821d5b84a9950e229b844
SHA1b4393d460cda1891633fd57f6d770c96398f4136
SHA256936ed13b0671692a2c1e4d7d18e175134bc66423fcf0fb9cda5f7c8422707e34
SHA51293d697a0b5dff379daaf58444242f935d229d445f18cf610fa261ee4898d8af304e12d9035656f24a23e67917f7f45642a131e46a65ce322e9972f629fcdd38b
-
Filesize
32KB
MD52d1174690b0efd411c55c6a2d2501a24
SHA1041345be0e98666f539a8e672be53e5bb604fd21
SHA2567c146ad0cd12f03cb7f7d3aaf77617997994ae449c833907efc90f30dea95a67
SHA5122ec6b1107fdfe151155477c736361db80ab155695199ddc086d92e05fd98f5d176399bc28df173fe532d8b733a60339a8de2a8660ac4cb611db64d54a80269dd
-
Filesize
32KB
MD535274d00c1ac9259da1ef2e3a9a8b6eb
SHA1944118aed9da0a5095a92cafd1f124b011e3cfad
SHA256d225f0d2418936d3f7bf10c5ae4a247b91cca71ab7a9ea79cc5902f77c284978
SHA5120ff421cc1b90a85ce1afc2ba4880bff850ffa3cfaf2c2b9edd00b4913162016d5459e2a3e35b49beeb20590644b288da8506ffb06ef5106b54b3472250667b4f
-
Filesize
28KB
MD5271e3c29aa8b492b2e14ebc1b7b8f86c
SHA194a53531ea0d9697bdf22964ffff56c4e55dbc76
SHA256c36c15657aefa2cbd73e65c946814e9784f800443c402b4094feeb94aace39e0
SHA512f5e7e31e84331f80691e4310a3e2aab3de2eb49d56e7c791e0c9faa9d844088b8f25b6b0a707a11f83ee264f34b093628cf2be0cec904fa8b4be4b9c478444d1
-
Filesize
4KB
MD582b67c2da6111d5bbd2d914af4fe7225
SHA1e8c5a38db837d979cc2f041da25e352dbfacc6dd
SHA25693a35adad2570a687e0bfdb43b7aac4719be60a8aa498636ec8f7d5d4ff0a9b5
SHA5121397125b5e587402d36adebaba6df2f4616d53dcdb61cfe680cc7c93918e99e01e9b927ebdc9087df85722f768aad182f5a886147bddd8c36164189bbe2ac39c
-
Filesize
512B
MD54bde88430ef3cbe9061197fa2e37150a
SHA17e4633af9fe635c099168c57f791dca84c4c5274
SHA25617e8c6bd4860a8762a508fcfdc17fdae35aa0c8e5a090a47bd80d2f975bd29ee
SHA5126f766e2e753f269aa606739a21f40ac1a5f02ecd5cd963d36d89900ebd9a158da374619581bc53c6c82113260a70a15cea5b10c43029ff77709f77b319d8a857
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
76KB
MD5837a8728fd58d33b8456e9fc77b40dec
SHA1e3e3fc63157596325941ffc8dba57b84d04f692c
SHA2565904ad9ef02d153d1b8dafa174f13394e86671c7d54d6f19ccfe7fac7300b4f6
SHA51231f62d99d631233f7b30a19473846715e274774eca8b1221bb6ae81f28492a8e46b9682fb5f9a4e77791885b45dae8529f1c3c70ceb9cf846afe7ea4222842bd
-
/data/data/com.plan.kot32.tomatotime/databases/pri_tencent_analysis.db_com.plan.kot32.tomatotime-journal
Filesize512B
MD50dc3037cb909fc3aeca9566ba5040153
SHA11d7a1a2bb7b7780f6e41092f6cbb51d57dcc5c55
SHA256c718036d90cbe7449be8495f0604cdf7629b5940b50e5d3bc93a036a04596f71
SHA512cab8c7671b13844b262e1ff756b19fa6a1d1a583261f929d6a64b68733bc4151e10d1c7792d335f3fc4a807fa95631e43581db8a4e3dc9289703402e0ce588de
-
/data/data/com.plan.kot32.tomatotime/databases/pri_tencent_analysis.db_com.plan.kot32.tomatotime-wal
Filesize64KB
MD572e2bcb98006f0907d669ca93d1e3040
SHA19dca10abfb121c79ec8ebc49100ad30eca9f7645
SHA256338ae4a1d23915a83e81045d0ba5cc60b9f00d502f84efcb446fa21ba92457b5
SHA5121011e8a632a0411f473f0b3d7b6ecc6b78ed720da1d2af25a99ab244c556bd9e408f79361d03749d182647965ab26e787a6c382ad0696fe09c339800d1dc104b
-
/data/data/com.plan.kot32.tomatotime/databases/tencent_analysis.db_com.plan.kot32.tomatotime-journal
Filesize512B
MD507862928582ce4b30fbf2d119d209336
SHA111845ed04674b4a6542ff5aba51f2509535fd22b
SHA256fb65348554d9f56e7458c01017f41ee27a11a855608057889efaa56764542d1c
SHA512079dab6c6cf052002da918967d09675ab1e432d51aac4ad14064bb7daddcab0bd86ab81183ca553d230c885f81c3f8ec4abb601cc46008b5f60d3207eb710e44
-
Filesize
144KB
MD532e5360d2092678c4ca6e5244f38fff0
SHA1bd52a218584f2709f589b3a2b007ff23c483c3b3
SHA25654cdc8c13305af7b10bf410dbda40483c3b624241b6d78d09c4921f00a629aa3
SHA51215f3393b350aaef7350d5a9ea35ad3b60aa0630d71b92fc0eb6d7bf136409b492c5e0f2327096abfb86cb207a79c08ac487032ff6642d1213b2c1337fe9ea288
-
Filesize
32B
MD5fe1b0013d987d87bb876d9aea163f7f9
SHA1722e8b5be909e81807bbcd3b8fa6c88020e9a5a7
SHA25653fd64fcd498741b20acb3ee7e585f98356207cc6a4e1b12dea20ac2bb98e85b
SHA5123df0bb170fc84ffc9ce2d14508df1838b1777adc2e76d38a023206d1c1a37d36b70361ca7733385907bf6f332828545d6f84f2d52b27eec3a68c1e62a84ffb6d
-
Filesize
88KB
MD5b6416d6d58174c6565491c2b0c2e8e4b
SHA103e3277006fdd78cfcdf1e4cd79ed98ef5f83a4c
SHA2561a977e509a34ba7945579a18260a5075744ee4d45a9f64136b265ebba663b5c7
SHA512e3f57a88c0adca9cfbb62e62fc6f81f469734f67025a6aba42e2acc3a23c55f1fe80958c9313ab1c0ae3182a8bb0417e968a766032c325c92a451f7de6dac3a8
-
Filesize
32KB
MD571dd433d1036ae8e9743f03d2591840a
SHA15c7c95ac059211d21359107ff042096444d332b8
SHA2567c70807c39ac4e9263853ec034d8f7dfab6aa71f03d3ef5476676cc536f1d864
SHA5129e0dea86620a75c9b329e5599da9d9dbc71671a41a792ee5dbafd0c7ddd01ec2d3211e43ae2b31220b88dfce3350fe73c02398013b88a565ca31332d85c86e8f
-
Filesize
512B
MD53d0444144815db2493c739c04f84f463
SHA1431580e6080f96b4ae07a1b18f4ed401eb709174
SHA2565ec9998d205630ae7f00d92fa9b4ed1e1575a2b67d232cdcfa2525bbba0df915
SHA512056a4eb1ffdcec95d0047160988fe60edcb2880d16fcc239dc03ecaa19e229ace974d9253563d2378d28f0af1cb856d76e10732e810a005ea0951cc7900f0c34
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
314B
MD573a3fd2df4d3c110ae4ee494f2a53ece
SHA1f4b98f632b9b7bafa36979accb40687966a4df5b
SHA2561aad3b89925f13da6dcacb20e46c14bf32b76f390b40ee02aa2cc5c8fe8391fa
SHA512ef7b45f49857a8b513e5dd8c7f92c6385bd70ae4106063189fd4596f0b0e88e3d40961f8fbafaffb446a821f85ee798df13c962fbd415509317cb955cec177ec
-
Filesize
84KB
MD5fbba008510d807be009acf5b5bfcc63f
SHA19ad9576e7a4cf91876c28a6254ae314f3797a69d
SHA256aa488bcb83b16726f7d1618dd1232ac8e7eacc99e6b8411c3c7ccc5ca4fda9d6
SHA512dda2226c807f5bc6ea27bf334a65d5b8dd09b927a360c2588f73eaa9fc95ea75e635257c7c0e0d87e8fb5499cd5c8834054935f60ce0ef043bff0599092301b9
-
Filesize
307B
MD5cc441357a4a0b910bf42eec82558de8f
SHA1a9260e895508bb1a1510ff87d1eda7c1b81a599d
SHA256eef38865aaa0469af3259cb0add130311d13c64f2900c01c43d58e247fb6d9b3
SHA5121f4ce3a72f8931b84cefb50653176e00ec4378b0ba4c43e91f74ddce50a5f390bcee3b3e1f01ba0c464e4c2646ce049af3d6e40c6aefeb261c30fdd5f84ed9f8
-
Filesize
248B
MD528cd15af90e074563903d50ba8128652
SHA1aa008f9a50e1e2cccfc506042567c5a7ca3c6d9f
SHA2565ac073d7086d7c27ddd9384e691f12e9183221ec292bc0d737199f63a4f7bf97
SHA512b8e7d4b7d8576061bc2abb164431e7ba6300bb1ac461f89150274fcb1f6a576b5ef0c2734e5ff296f1f44e7d76b799446de20d44a1f34ce4b596b3d2bbfc5549
-
Filesize
248B
MD5d3ee77d2ce3ccd4816507653d55fe763
SHA1b3388ddd7c1e7def2cf288e8be57c981bdb512a4
SHA256ee1cec080d5cbf781cb19f22322291112e83bb72cd8b9fef0d23d8414b5b26a0
SHA512bc2057eb1855c056275bc89bd5c8b04287367346e8717d86766d66385ccd70efa33372dbaa176f041474381f55d3e1ead5535d9779ad9e8e238dff6c05d8acf0
-
Filesize
326B
MD554d056e5893f0c0129e802ce2c7a4ba9
SHA1107f85b18a36a527214dbd9300646f55f15d12a4
SHA25623b36f1118c7c20d9a7c1f7007e6fd76ee3b875d39789fc07265c0ee1b5fe381
SHA5123810ca40b526d5b77b6631a2db71d1e05228bb60ad3240d9f2a28a9b4f8ed2a15355f55854fe62dd8a19850a459275612e3e5c1aa7a5444041405b3e0d9f93dd
-
Filesize
115B
MD55ef398f730a418d0dbe913123be26317
SHA16cf02343f3cbc8a5fce531220538bb7cb73467f8
SHA256836e993264828db11a8d99c6a7f7239a86fe75a3297fd5eaf7fd860221645375
SHA512bfea01a679d50894810264424ad742a6d5b267d92294a44ff361ee4548134ae110be3c050823860bca26823e181224d9c170d2d05a440a351240bec0f1ee9c7b
-
Filesize
43B
MD5449f958b1eea0fa18876f66b085f1cb7
SHA1efd3da254373d1d09b3bdcf38940060995a5c384
SHA2562db42e25ed63f844ce62f6d15215130562b2d790022519e9cd1b6fa3a1adaca0
SHA51267992e968cb2991ad8f4b9fbda95efc5fdfac1bc156f8ddb1249e955b751a22b5488ae904933417f537c7e6c120368019d9ddc9121e168d31a2bfbd726809c9d