Malware Analysis Report

2024-09-09 13:19

Sample ID 240613-cckj5stfkj
Target a374ea484b5b9f62807c93ce9ff0555a_JaffaCakes118
SHA256 b2bdecb3d47499dfbc886fc0569c4b6d348cd1f0deb39a0ea74b2dbbaac92be3
Tags
banker collection discovery impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

b2bdecb3d47499dfbc886fc0569c4b6d348cd1f0deb39a0ea74b2dbbaac92be3

Threat Level: Shows suspicious behavior

The file a374ea484b5b9f62807c93ce9ff0555a_JaffaCakes118 was found to be: Shows suspicious behavior.

Malicious Activity Summary

banker collection discovery impact persistence

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Queries information about the current nearby Wi-Fi networks

Queries the phone number (MSISDN for GSM devices)

Reads the contacts stored on the device.

Queries information about running processes on the device

Queries information about active data network

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 01:55

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 01:55

Reported

2024-06-13 01:59

Platform

android-x86-arm-20240611.1-en

Max time kernel

12s

Max time network

184s

Command Line

com.legendpark.queers

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about the current nearby Wi-Fi networks

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getScanResults N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Reads the contacts stored on the device.

collection
Description Indicator Process Target
URI accessed for read content://com.android.contacts/contacts N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

com.legendpark.queers

Network

Country Destination Domain Proto
GB 142.250.178.3:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.exc.mob.com udp
US 1.1.1.1:53 sapi.map.baidu.com udp
US 1.1.1.1:53 www.easemob.com udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 data.flurry.com udp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 api.exc.mob.com udp
US 1.1.1.1:53 sapi.map.baidu.com udp
US 1.1.1.1:53 www.easemob.com udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp

Files

/data/data/com.legendpark.queers/databases/queers.db-journal

MD5 d272a09b5a40d972554391498c9e08d6
SHA1 7e4dbb275cbaf273832fe8f6e07331fd3b9fe3e2
SHA256 1fa465d1deb13020163d933cb7c988b2c61a80fbe91e46a6132091f45b7459da
SHA512 0a869f5fb1e7ef11d7770fb318ce6e5785ba15ba1253a72712eb775fba5e8f59b224414f1f68a8557a667104e9f5074782e152ac9cedaa2ac3f380ff9cd35b99

/data/data/com.legendpark.queers/databases/queers.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.legendpark.queers/databases/queers.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.legendpark.queers/databases/queers.db-wal

MD5 b673ff9eaaac162498aaa24508f6c869
SHA1 24c9f9d9a0b0d10495a17467b48b865cce198e77
SHA256 6ecbbdce91a1e06baa0dddb266b14fa45c7d1f0cef630f3f0a67655e82f1c4f6
SHA512 285430b720b273b913878155e02381dcf80e25bf4f54882642442edcbb22991d2c86a8e0341f9f4cfe1bbf55c5a16b61d5b34c8235aa9a0cafc8b0fb9e684ff0

/data/data/com.legendpark.queers/city_cn.s3db

MD5 1e26ede75ab06aaf039d0286044d1f3d
SHA1 f7d0b79011ef2576362b3433acf4cd7d4616aa93
SHA256 b36cdad53946dadac3052a4df87ba7a5f969cdfe3504f16732550b03fbff3b36
SHA512 078569270edb6a18ea2932266d396b9e8b4ca501bcee4a02f76257b869406953fdeb026a21b134e4acc1b4226736d9d7d670f6350c9ee64e5c0ec139375117fe

/data/data/com.legendpark.queers/city_cn.s3db-journal

MD5 f0d42c581bedaf036209e5a2125c5e53
SHA1 dbf96c84fbc92741fe5a57f1e774bb5f6fbefd3e
SHA256 ac6204f24400bd101aeedc0101dc3b27da4740afea36481ac144e0f5dba23d7e
SHA512 0b5013e74da95c0208940e37772b155b2a2f90fb0dd346388e5a3ed545bfa54890811a9730bb41979966507f099febc70325a283682b0da4327e785954829b1d

/data/data/com.legendpark.queers/city_cn.s3db

MD5 48fe7215f56557bec6136282393e2682
SHA1 4332b60fd7e93485fc5c8dc80b42fb6f0950612c
SHA256 d29cf2a295b192ac45df8e06bf2e5ca5ce479b03c539874c456139ec653ea6ce
SHA512 b3b6c3020ba4a3cf004d088cb3503e0fb9e10157a751f9a14729964771079b0b9cd8412ee387a8f23e6412736d2c44cc96f1cbea173c8dcc6eb1a8bc86f29aa2

/data/data/com.legendpark.queers/city_cn.s3db-wal

MD5 fae9e760f741b45aecebf34ad14f4747
SHA1 b56e8dfb1b99fe80f9f25ce03462058ea93c686c
SHA256 2936bf1e8304fe7f6dd35d7cd01d1994948ea8d2c14b610ef4d966cc7b36a8c5
SHA512 aa17342005a6c29571c6ffc5defdeda66e501efb184dac11e6d9db6ded0cc8f4a14a2aff17a47910a340d5b51d9e950af3ed8bae96cdeefcbb89121572c7eb98

/data/data/com.legendpark.queers/files/ver.dat

MD5 8e31aa8d6b61e8b044ac3346e87098d6
SHA1 70e4050667039f00eb5231bd731b9f3cb5daf00b
SHA256 d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b
SHA512 2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

/data/data/com.legendpark.queers/files/cfg/a/ResPack.rs

MD5 0357e8edde36315c0e0a4f5385de625f
SHA1 2e6c6f15010e88dac5078f34e31a8ddf5e032f2f
SHA256 44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d
SHA512 497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

/data/data/com.legendpark.queers/files/cfg/h/DVHotcity.cfg

MD5 883c30365d5d377966125dd0c079debd
SHA1 d296ec1e3f4badb6e3e6166c1473fb55d4265761
SHA256 50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa
SHA512 00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

/data/data/com.legendpark.queers/files/cfg/l/DVHotcity.cfg

MD5 1c6abcbbd253448057930ad1cc59ac75
SHA1 a5845d1c4bc87b8b4785b456d76edcb8309eda4e
SHA256 a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136
SHA512 71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

/data/data/com.legendpark.queers/files/cfg/h/DVHotMap.cfg

MD5 c16f5ca1517683c46e02a6b71aab3c00
SHA1 2d09a048d1b8d556d89d4d723947e9e234b5e59b
SHA256 13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9
SHA512 a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

/data/data/com.legendpark.queers/files/cfg/l/DVHotMap.cfg

MD5 cc3fad9057e0940ad4d4c7ad27922023
SHA1 403cbbcd7b819733b5caf49ed2a58d654441e99d
SHA256 f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864
SHA512 ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

/data/data/com.legendpark.queers/files/cfg/l/DVDirectory.cfg

MD5 65685a117c72fe8fbf5a92b07073c99e
SHA1 b115b527f74e4c291edcaab19b316a446aca8f5b
SHA256 19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8
SHA512 e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

/data/data/com.legendpark.queers/files/cfg/l/DVVersion.cfg

MD5 d54b7b380a5ff46c78283013a07d8e0f
SHA1 f697c5f7028ba2679a96d6bc5291c38ff96d7982
SHA256 c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c
SHA512 ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

/data/data/com.legendpark.queers/files/cfg/h/DVDirectory.cfg

MD5 4e9eab735928758b860e48b2f9befd7b
SHA1 7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569
SHA256 1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4
SHA512 c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

/data/data/com.legendpark.queers/files/cfg/h/DVVersion.cfg

MD5 298924848d2517a508f43ff0cc51bd3b
SHA1 b9fcde7b86653ead6deb57280a6049cf87745710
SHA256 0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b
SHA512 63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

/data/data/com.legendpark.queers/files/cfg/a/mapstyle.sty

MD5 46a9f9a5221dbe4ff71bfcd2ee045c5c
SHA1 915cb3bc2f0096dede38afc1cd7f09c8782360a9
SHA256 ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9
SHA512 185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

/data/data/com.legendpark.queers/files/cfg/a/satellitestyle.sty

MD5 3f1348cd6165c9a66a9892565c917ca1
SHA1 96f0c939438c494cf3fd89246d458e92c0c7203b
SHA256 5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a
SHA512 405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

/data/data/com.legendpark.queers/files/cfg/a/trafficstyle.sty

MD5 6a86f30539dfc9332cd235fc48fcb62c
SHA1 5c202003f6346edb85175b8df7c460793f5512c6
SHA256 34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f
SHA512 f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

/storage/emulated/0/baidu/.cuid

MD5 49dd5c26d62f03b537b094d0112e2091
SHA1 038b7b57c4d746873f8ddc62efcddbb1d7579280
SHA256 78bc9e432951ef8761bfe7e80953e7ac8c6ba8bb696b8ea7dff59d2589e1aa2c
SHA512 49c49d70e21b40e71e99ca45ad8f18158391d303791cb2b31a23483ad783849ede5c24974a9f073d299b4871321f9d650390cda16c2c1938e7ebb1c30c0e222a

/data/data/com.legendpark.queers/databases/smssdk.db-journal

MD5 0e92d055a8c67320eebc20676268982a
SHA1 f549d91715c8eceb7ef68d6a381212273bfc2ad5
SHA256 07db08ce478a998f0047ee7dc05c1779e9d3bbe8fd944c7642d5d07707e407ce
SHA512 109d097a1c7cca147503d979dc34bee1b88af3f74a79fb2daeac570d7d97b444b2cd5e5e534dabb545c4c3a0c1d736e3225eddce86153a43cb5c792724a38c92

/data/data/com.legendpark.queers/databases/smssdk.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.legendpark.queers/databases/smssdk.db-wal

MD5 b3e6191d9be77041d7b9949814def8bb
SHA1 15395e6ec31f6d8ccb003ec3779699d791aebd0c
SHA256 337231f7ca85f0892e5055dca0412d4663ffebe5a4aa2fe98de8834eb3dd75f2
SHA512 200274ddd85f918925697b950a9daccb3ebb95af8f1c8777f63c4a1d10e4a54d87936e820b3a4216cf1fe4e1b169f6ce27a7424d419045c1477854311705239b

/storage/emulated/0/Android/data/com.legendpark.queers/cache/locationCache/journal.tmp

MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

/storage/emulated/0/Android/data/com.legendpark.queers/gzxy#queersios/log/20240613/000.html

MD5 669c407a7e88e42069cd073d55e2afb6
SHA1 8cd2e9b5d4dbabab13da7952cec75af242e5b0de
SHA256 2c62e438957b40021c67c5de5d83ecd334666fcaeeea199915f4371bb46392d0
SHA512 60c46b49a18f02635f81d41ffb4d8d960ab43e591a9531148b9c8f2bcff02b5546a712a9acafec69529dc90806b100931a777f3d56608bb40baf427dd5d19419

/storage/emulated/0/Android/data/com.legendpark.queers/gzxy#queersios/log/20240613/000.html

MD5 d49e5e24cb2157a6569b0524e776575a
SHA1 eabeb64a5d7cfee475a3e9e1893ff1494cca4b63
SHA256 1ac0a40647ab86812f54f87979d50e31f26124c0d7f4d5684b07628560c38d20
SHA512 3616159f119b056783a3091b9b6005c3a5eea829ac2d0b6bd58c172e8ec610952701d0136104ac236b9d89d3e8422b7da1ffd12e1abee2288463d11322df4b5b

/data/data/com.legendpark.queers/files/.flurryagent.2c72ac63

MD5 b9b0a1076b815599a84cbb3e1923130d
SHA1 fb6b4a7f04cc5365977f3d20471767d2e6cfa279
SHA256 d636890635b5119ca5ed3ac157200e1bc99b631f8a4903849f12c40c423d9591
SHA512 53e10f874c2b90487c61d71ec107fb6924ff1931065713e8277f137a6a244d65870f5a8912405c2b348bf3bbcf2f22362d8edcebda3459c538a770a9e451320c

/data/data/com.legendpark.queers/files/.flurrydatasenderblock.81460a7c-6594-4f4b-9de7-5e16ce1c2c76

MD5 e55692ce893f0a0d23bec4f910ced9ce
SHA1 9df65afa010553c43d8c8487388411041ae0f4a7
SHA256 1808ed1204f92887ec6ec6a00001bf78c9a305b4fcb868690544958a0997877a
SHA512 af1fce82e07947882a336667b789251350fb0796b2a10ccaaf665b3e96a52c4d3a09793a2e56f557d4ea4c32e66e351e449781b43f1426a167a90f11fdab6b39

/data/data/com.legendpark.queers/files/.FlurrySenderIndex.info.AnalyticsData_S4QVYX5VGK3ZC3NJNBPB_172

MD5 8e1f227a1ee9f9db6b9f6b7a5d4605eb
SHA1 0d743e6a57acd559f5978fc05fb0509996a7c1ca
SHA256 b326de9b63349f934c53e33e5aced506de68c69b6336b4cf23a4026a9821353f
SHA512 e75bfc7cc48a52a01f716d17c5cd4d554d07496954fbe9cbefd40916166ce84d6f3e9309424f1ec0a85022ef8064125a10f821fd921b4681e23d371b03b245d3

/data/data/com.legendpark.queers/files/.FlurrySenderIndex.info.AnalyticsMain

MD5 0f67117f86b59d91d7b7e8c7e66cc991
SHA1 a2d5004e8be83a82f3521d562a8a2dea9c6caa23
SHA256 9e4140d4ace5da3dfae294ae41aaee7b0479637be90ecadf5412eabaed0426ef
SHA512 79232f56e8bfd782d93ca7feba514dd326c12ce9b739f8becba1645441d2e13af8530e572141f3e707591ebbf06865ec3674e1fea5dc861d2516ed462b52ef09

/storage/emulated/0/Android/data/com.legendpark.queers/gzxy#queersios/log/20240613/000.html

MD5 ccbc38019808c5bd0934ee8b8b38ae8e
SHA1 de51eb389e9054a005101ecd2f00de65c2a87945
SHA256 7da212f0fe486f7bdbc632f79cb048259fe28fb33422313781a76894ea71f205
SHA512 b0892c17ad38e3d9c216d5deb3868a8f3bb49466ddd1d4b54b930e00ba27ba26e687fe2167e32b4c390f309b126d78a91e07914c50d1eae7a3d39d6920c6d9e4

/storage/emulated/0/Mob/com.legendpark.queers/cache/.ba

MD5 91c6c181ca1e9edd22da34dc027c4a2d
SHA1 3aaf5a00c37690d9e0fc2fb159f4d984627746c1
SHA256 10c0cd8d73c0aec713430310b75fcd80bba48d036c8949021e7a6feebb1bc2d5
SHA512 30d1eb145673b9fcb34607f6c6c5910d38aa48f7736a8474ce896a4541296d9980365313d35ad243e2084e2535ee6e572629dc9257ec15203ee34293a08a76ae

/storage/emulated/0/Mob/com.legendpark.queers/cache/.ba

MD5 5cfaf9bf218dd1ca5acfab7418b6865a
SHA1 ae6d624f33d1fca7ca81d62e2a202d861f2b0da3
SHA256 3896a989512bb6e69cd35a27432c1d107521aaf0a5b972e585b3e0c51179954d
SHA512 3234c1cd7ac02f1883ec2dd3d0d3d425fdb9da5dc491ab5f4022afa74e53c8452035265daea4158930e1e1037ee38917ae00f8fe9c48876d1fb0ed3aae59710e

/storage/emulated/0/Android/data/com.legendpark.queers/gzxy#queersios/log/20240613/000.html

MD5 1c127033647eb3c602b8acc98da4b6af
SHA1 b94c968a37cb250aa10fbfb206f9c85ebbc387b3
SHA256 12318171fe001287f724ab3264bc06e30ddb8cf0ea9f06ee49c867a7dbfcfdd4
SHA512 61495d0d65169c0490beeff5e69521031b506043b6b48a4b6878dc6da286a32c43a934198052adc1cef20a700fa697a161d75d10d0853f80dc3f3a4cf2afb526