Malware Analysis Report

2025-01-19 08:05

Sample ID 240610-rzl4tazbmd
Target 9b039c97f1a3e5bbe3c4700071f4ea1f_JaffaCakes118
SHA256 401189077a68c2e612d561dbba153b90ec3b57bd59bda1f09fea7dfc3571bfb6
Tags
discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

401189077a68c2e612d561dbba153b90ec3b57bd59bda1f09fea7dfc3571bfb6

Threat Level: Likely malicious

The file 9b039c97f1a3e5bbe3c4700071f4ea1f_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Requests dangerous framework permissions

Makes use of the framework's foreground persistence service

Queries information about the current Wi-Fi connection

Queries information about active data network

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 14:38

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 14:37

Reported

2024-06-10 14:41

Platform

android-x86-arm-20240603-en

Max time kernel

103s

Max time network

186s

Command Line

com.sina.wbsupergroup

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Makes use of the framework's foreground persistence service

evasion persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.setServiceForeground N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Checks the presence of a debugger

evasion

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A
File opened for read /proc/meminfo N/A N/A

Processes

com.sina.wbsupergroup

getprop ro.miui.ui.version.name

com.sina.wbsupergroup:remote

getprop ro.build.version.emui

getprop ro.build.version.opporom

getprop ro.vivo.os.version

getprop ro.smartisan.version

sh -c id

id

sh -c date

date

sh -c service call iphonesubinfo 1

service call iphonesubinfo 1

sh -c ip link

ip link

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.74:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 api.weibo.cn udp
US 1.1.1.1:53 gw5.push.mcp.weibo.cn udp
HK 36.51.224.128:443 api.weibo.cn tcp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
HK 36.51.224.128:443 api.weibo.cn tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
HK 36.51.224.128:443 api.weibo.cn tcp
US 1.1.1.1:53 api.weibo.com udp
HK 36.51.224.49:443 api.weibo.com tcp
US 1.1.1.1:53 chaohua.weibo.cn udp
HK 36.51.224.18:443 chaohua.weibo.cn tcp
US 1.1.1.1:53 dp2.im.weibo.cn udp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
CN 123.125.105.23:4828 tcp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 216.58.213.2:443 tcp
HK 36.51.224.128:443 api.weibo.cn tcp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
HK 36.51.224.128:443 api.weibo.cn tcp
HK 36.51.224.49:443 api.weibo.com tcp
US 1.1.1.1:53 plbslog.umeng.com udp
US 1.1.1.1:53 ulogs.umeng.com udp
CN 36.156.202.75:443 plbslog.umeng.com tcp
SG 47.246.109.109:443 ulogs.umeng.com tcp
US 1.1.1.1:53 api.shuzilm.cn udp
CN 47.95.162.60:443 api.shuzilm.cn tcp
HK 36.51.224.18:443 chaohua.weibo.cn tcp
US 1.1.1.1:53 face.t.sinajs.cn udp
US 163.181.154.231:443 face.t.sinajs.cn tcp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
CN 39.156.6.245:4828 tcp
US 1.1.1.1:53 gw5.push.mcp.weibo.cn udp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
CN 49.7.37.93:4828 gw5.push.mcp.weibo.cn tcp
CN 180.149.135.154:4828 tcp
CN 47.95.162.60:80 api.shuzilm.cn tcp

Files

/data/data/com.sina.wbsupergroup/app_flutter/isolate_snapshot_data

MD5 ce7a7df756bf811bc0bb769cb93996a4
SHA1 cb4ca18bffd05947785f353490be47c12f549456
SHA256 e4cd528926d18b533a433fda3c5ff63edfb083fd33271634dfd188b9bd2f19ce
SHA512 3f8cf47653bdd95a85a67eeba1d893591ca392ff8bd6d7a7b713deb9aadd63d74c5cb22668e137c283acf73d22a126873ce27f0481fddcb497f14dada982421e

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DABeginSession.cls_temp

MD5 da245a9a0510bf8b64f2730cd5448606
SHA1 8f35a779c4c8e2fedabaaccdaa328687ef7ad05c
SHA256 ca8b444207d4003a4728a599a0b5db2b66cd3a867dd033d7d4d455c7d7b9c79e
SHA512 c58fa58493bd9bfe0abcfcfaddfc761fa0f166106aeb2a3fbaf3954e789ea18a957ffa97b6c23633277320102945af2280c7e60f44f39112e9eb8cd7006ecb39

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 6148f528f2bf20b7102ea4857af803c6
SHA1 33b9fa140de56f00e74cb84532e7348722f2f8d3
SHA256 e357fc62ff09d92ae055cc47cf0af41b395e7c6523ad12c0496317bd432bdcd0
SHA512 7333e2b1ac645b391ab5ff07abfeae3506f2b037531cee67111bdc1a33a7913369d1053a9cbfede55a5c492c84bf91a7decd41701fcbfeb66c7284f9e713f8d3

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

MD5 0dae4b4a62f20326761f63400e105ef5
SHA1 d59fbb35cc5c466430ea78280bd2801c6f87d141
SHA256 5bf2c7494e00958b588ddd24689fe32e52d957bed431bf7b94dbc161e81bc510
SHA512 11bff1ee1f69d9b281aa0a969a51b60f1d583332f28ecf3347e20a37b4eca56f4737a12dcaad16ae94f93cc546d54722c08e71d046a844a046063628f0b69108

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c6d90512-f0f9-4a13-91d4-1e455a0e5d81_1718030305891.tap

MD5 859b88519419bc9bf8f86f4675796496
SHA1 404b89de1a413fba8e5baf8b65b9067125700f4f
SHA256 cd8ff6bc3cf7db50a3d7c1c150dd265d3372e8b2e9df36bf604eeff7fca697bb
SHA512 a0a630f86029566876aad0e06b1cdc2dff5825c3d448c1c7161a0a63bb389f1002ad553b8a75229e85ae90efadfe1b6bcf9e0f5557c206c713ba95494f4b80d3

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DABeginSession.json

MD5 9ba5c4f52686e2059e7c24fe2e82a9f2
SHA1 0307e50f1a31821316708ff26aea3de85d02d7c4
SHA256 4ccce37764ecad3752630c3394631405a2cbcc7aaca8c434fd2394e878aa8834
SHA512 e0a4cf943330d4275ed4f570c4f4ca6ae5b604e4b02fb4c84612e84ae3674bd26558d8f4490af062e4d8b5c43b7201bf4ba9c000d195be2f3d8d68398b994a45

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionApp.cls_temp

MD5 2504e04551f082019ca1c1560f27ac8c
SHA1 c468bdb8e00a3ea27aff58d649afe510dfe12494
SHA256 013d02b0f1a7d3a91964c4d49e77ef82e27d6e3936fb1336bb8fdc80b23c78ae
SHA512 0a3c1b76bd5d55bd91b5e52e583372bfb6a86b6d0af73b2721e6a202a7c46dbe15bedc4bb5e589f5d6925a9fa55b103950b0275463c3e0ca349a2655bbd4fd95

/data/data/com.sina.wbsupergroup/app_flutter/vm_snapshot_instr

MD5 3ef951ac6d009dc2e00035c045e09b53
SHA1 66a27d656e6d7f2531582fb8f525997f56812374
SHA256 e5bb2217cb66d9479b8df60acf9bac182ea28800f95c028065be905b58f0bf50
SHA512 edc25f707125e6213446daea7906205220bb30212507a8e6360307421d0911c241a7ac148300a66a5e890b34d20354cffeffd25ba186ebe1eb1e58e74facf2eb

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionApp.json

MD5 a8db071714086745e80fb0f647a2cdd5
SHA1 4aeed4002cc246945eb2af21d8298c0f75bfa9af
SHA256 32e43bd089e7fe0ba6c5dbc80c0ecaf3841ccb3d034126c1430a9cb59c89ce31
SHA512 52c4966ec0d1d0dff1487610234c263df6a1690195ca6cad64a92083267543438a05ca56123133ed9b2a017e72c82c8db40656bb078745b9b5e478d7a329c9e1

/data/data/com.sina.wbsupergroup/app_flutter/flutter_assets/kernel_blob.bin

MD5 87174d1a22b56c1b287dc33c14dc4904
SHA1 56d94d801575a4d6d64ecca6c57afe77eb861d30
SHA256 3b827e1f0fadb6fb33ce6540d77d2e123c6515ece7e04f749a00feac92486d4a
SHA512 0df105d7d0e7646c9a134af2302960a230d6963d73651d0d7eeb0a57a338f0ffcc221bbcc990d5cf9e51df279cc4d79fecd3354e54bbbaa16f26f93678b8ce32

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionOS.cls_temp

MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionOS.json

MD5 93023624eb8dff5c20050da136aaae0a
SHA1 acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256 968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512 bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

/data/data/com.sina.wbsupergroup/databases/account-journal

MD5 83e886f8e4b224fd509de747812c4336
SHA1 ae89138a1a5af9b38e3ca880248a53729963ab73
SHA256 a5414af79f855953d1d58e63354552bb25ff8cb1fb93be7f466323e3d11bf918
SHA512 c7d89916caf0f4ed4d70e6016d887d4ba9cddc4c8073e79d5f07beb128da784d15e74a02ba28e332774ef8822db6e758c486ddd17f6be87a67db8e60df24b0bd

/data/data/com.sina.wbsupergroup/databases/account

MD5 c16fdc58a2012ef6ea544f9a250925a3
SHA1 8f0db7ba5d9a1563f383bc9e82c18c0dd31da438
SHA256 2377e7eb1d5a4da7d6e9abfdf10bf3e51d00bfb6a1895bb638dfd334d8b68a10
SHA512 f5b7d0cadc0f8447d808fc883a15691fbd1da7382619328696d0f951f5e19912f7588ba9df52f09722f3845efdf957661bd063c668c9035f8da4641d1b7fbe15

/data/data/com.sina.wbsupergroup/databases/account-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.sina.wbsupergroup/databases/account-wal

MD5 82225a29b3fcf1113ab5598d4c741fb1
SHA1 040a2a992ab7837db8236bcc32baea3b9410ebee
SHA256 34ebcb3345809d63aed61835de02d3013d3b18c60211d9b565de6524fa714fd7
SHA512 98f90ae33957ebffaddf862be9181f5af1e9e311fe2e959a148fd4687605618866c4cfa60e8e6c88b912ec513dbc49d273915017f156cd38a0b731ef1a0f9753

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionDevice.cls_temp

MD5 1259ecf4689f83376bf373856c23d57c
SHA1 19507a1426d938dd77930f194bd65779565f5982
SHA256 2861892e8f098662c173abcaf15b2480496b48dc1e96eb777cd6a3124dd63e17
SHA512 0ab328ff2fdbb8b4778315c9ad769b3205a29c39771162529bd5598a5e370468e75edb05b89cf0d6f3e18d226fa2bd19fb70e68fb59023a80fe49f8e3185b230

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE101CF-0001-10DD-69694344C0DASessionDevice.json

MD5 bf39402cec32b3b22f45932e330f6403
SHA1 d90fe34fc808631ec2d5f76dc2220be1d4aa1796
SHA256 96d1b75a26e06e0bd0eb99f517829437f210c282e3fced029cf6fed57679a221
SHA512 1240ec10e14123dba77449c3820b1e44c1210dd624f74c3b8ff71ad74ae083321244a3196ee3c8365626c335f30ffd1551d17c0a60c1ad224bdf9d8401554f42

/data/data/com.sina.wbsupergroup/app_flutter/flutter_assets/vm_snapshot_data

MD5 caad8d5ad171836d0130ede044d6b632
SHA1 2af2f8c8d15ba0c1719faa00be119073655fac63
SHA256 a68f282f65710babea02ecd7677090cb3494f800cefc7922ebfed420abbec510
SHA512 3f742c399c7420f6fe972be4f07fa159ec1704d772e54c108f1ecac4d67ebe808c5e90b926ff05ad9e280ffb4c9b0f25b381dd3d03160d459c345771a2e136ff

/data/data/com.sina.wbsupergroup/app_flutter/vm_snapshot_data

MD5 531c4310bb6d49f7da034680f016cd6f
SHA1 64203cf61e35a69f35816bc913c84f587740922a
SHA256 55ab937feda5451c2eb5596f9d7a2e7daaacffab44b0a28050004f35d8286602
SHA512 9b629e96f686fb32e26f970993b73029793c0ee4a0bf6515daa88e955e8d2bf1e9c03ba9c62917d4b919de4c1b3cca9ebc01a6042143b4bd06cdc7ef72beb9b5

/data/data/com.sina.wbsupergroup/app_flutter/flutter_assets/isolate_snapshot_data

MD5 62516ab6e86656384b25eeaa8012d31a
SHA1 80148eabb857c88625351da0ce9bac7fb740fb29
SHA256 6244ec5da05a29b3e1e2653eb7b0330c14274f85c1454fe99ce81e72e46b5bae
SHA512 9792ca0fd88cc86f19393ba5382aa9f969c656dea7136fc8a3968beffff7dad19f3112e1c7d86a67afa11ba1a656a703d883dc12b6b296262a5fbda74a89f568

/data/data/com.sina.wbsupergroup/app_flutter/isolate_snapshot_instr

MD5 54c0c783315704f65296079510523760
SHA1 f76f9b7cb5ea76c5a89619989015e3142d727b4e
SHA256 e54b33f16980fb7298ba0c8ed32252adeea64470fb48cb64865d7f1230cce9d6
SHA512 16990554ef6e3aa0587cc2170a974f4832f644fdaca67e9e9349e1be6a7fd534c8618f3913c1e9cf32b5c2269c3a45e0ac770d07a51a7e68810bfed03df62c31

/data/data/com.sina.wbsupergroup/databases/db_ab_test-journal

MD5 ba7382f897a9c35f2356a961d907e847
SHA1 7eab2963527ac1d382cc944f2df820647cc3ab62
SHA256 9c9eeea6213c79fd846c2edac2f42191bd26ba1d63c572df77f5992a6c9de553
SHA512 c30fdc9b1d04a2e984a808ae1e4dadd7d20be71f1e6c8f152d55c3b858db90740c03307cff840023cbed692b0df9ab81208c35a6140573a9505cb9e7344819dd

/data/data/com.sina.wbsupergroup/databases/db_ab_test

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.sina.wbsupergroup/databases/db_ab_test-wal

MD5 cade55618b8b34ce99669bfc83f95ef8
SHA1 b7aa16fcd4dcc95e630c54d3f40173fc713e2919
SHA256 e97a14979c4230f668b235bb1bdb0877e451c6b8f63fc16d668d6288a2c8d83d
SHA512 c05e929232a48b957e81a46fc95125a3e4b92bcb74ee0de5384e925f77c48c499c26f98ebf6946f988c3ae0411605a741410b63353e28da93f9db5ea51deb71d

/data/data/com.sina.wbsupergroup/databases/db_d_resource-journal

MD5 9c729c3fe38ad61e00d0cdf3f42b413e
SHA1 e10fc82c1db0a58a9f48698310ce99488f424219
SHA256 5bd1c8313236786814a9c4d5352540bb76cebe1d1982abdfeb6936e27e3990a5
SHA512 dd8017aa3f7e1f83a1e83ee868a84213802a089af51299e705cc4acfca0a0908c6d4c2137d356d8201283213e06fc006c1d6735c083e3774528a8ef19a06c6d8

/data/data/com.sina.wbsupergroup/databases/db_d_resource-wal

MD5 5fb475a1dc5deb13d9121170a9382435
SHA1 087d76cf0cd4ea1bb1ec5088e55a2850af31bca7
SHA256 bb69f2482a9549e7fde27c511246f65f4f89250e75e8cf89184e4b63cc88d9fe
SHA512 0e59cb77b4abb10ad3461878c16ffaa10639c22010b02e3cdbc9ec08d5ca02b6810337d23d9f5ff734b04560e7d64ece1a6d757c3a217b501bf21d14e2abb96c

/data/data/com.sina.wbsupergroup/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66670FE801D0-0001-1142-69694344C0DAuser.meta

MD5 3cb5b468f075dbdc5153fb86d10122e8
SHA1 dadf10813240a19acdd7fc6e936936dc993fffa0
SHA256 6645fe3d64531ab8b0d6a48cd0fdaf8486dd9ecab0efb086db789f9d48e754b2
SHA512 243e72d433a3d09bfb8b38836cfa4f0a10695541abb9695f7b56aacdc8ed74c3671bb3c06ac5d8efa75d643ff31e71de5bd8c31da39d6b53f42f114907d401a3

/data/data/com.sina.wbsupergroup/databases/sinamobilead.db-journal

MD5 4c259a5c866dedd0eb5fe58ea8ab104b
SHA1 3e85dc4befdc0483b0d04167a712d129b51ffad7
SHA256 00d3acbbd1e1f3a7edc2701cea9e207f5b7023f16247ee4e32b73bd8d34de5bb
SHA512 12896d49ebaeacb84d204dd2684db192fe67b2d74b48bb2bc6eddd96e2fb3c17779c006566f4e94dc16ea05b5c3b89b44d834fe7eb98f25ea8655648908b7a1a