Malware Analysis Report

2024-10-19 13:10

Sample ID 240618-l1gylasfmj
Target bb57dadf7fe0fa3c7dc37cc913af429e_JaffaCakes118
SHA256 2a341703b9ed7bbd8f91d9a46857773996effa7346913ee66f90075fd6cd167f
Tags
discovery evasion persistence banker collection credential_access impact
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

2a341703b9ed7bbd8f91d9a46857773996effa7346913ee66f90075fd6cd167f

Threat Level: Likely malicious

The file bb57dadf7fe0fa3c7dc37cc913af429e_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence banker collection credential_access impact

Checks if the Android device is rooted.

Queries information about running processes on the device

Checks known Qemu files.

Obtains sensitive information copied to the device clipboard

Requests cell location

Checks known Qemu pipes.

Queries the phone number (MSISDN for GSM devices)

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Loads dropped Dex/Jar

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Queries information about active data network

Requests dangerous framework permissions

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-18 09:59

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to read the user's calendar data. android.permission.READ_CALENDAR N/A N/A
Allows an application to write the user's calendar data. android.permission.WRITE_CALENDAR N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 09:59

Reported

2024-06-18 10:03

Platform

android-x86-arm-20240611.1-en

Max time kernel

10s

Max time network

134s

Command Line

cn.nemo.video

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/data/cn.nemo.video/.jiagu/classes.dex N/A N/A
N/A /data/data/cn.nemo.video/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/data/cn.nemo.video/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/data/cn.nemo.video/.jiagu/tmp.dex N/A N/A
N/A /data/data/cn.nemo.video/.jiagu/tmp.dex N/A N/A
N/A /data/data/cn.nemo.video/.jiagu/tmp.dex N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Processes

cn.nemo.video

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/cn.nemo.video/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/cn.nemo.video/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 1.cn.pool.ntp.org udp
US 1.1.1.1:53 sdkauth.hpplay.cn udp
CN 1.14.243.123:80 sdkauth.hpplay.cn tcp
US 1.1.1.1:53 id1.cn udp
US 1.1.1.1:53 av1.xdrig.com udp
CN 116.198.14.34:443 av1.xdrig.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
CN 1.14.243.73:80 sdkauth.hpplay.cn tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 216.58.212.202:443 tcp

Files

/data/data/cn.nemo.video/.jiagu/libjiagu.so

MD5 f0f9ef36b67807a253b5932f865eae7b
SHA1 6a8d66c6efa2750b54cb763f4ad044bba4154e0d
SHA256 646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75
SHA512 e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548

/data/data/cn.nemo.video/.jiagu/classes.dex

MD5 6bdb8a6ae2e7080f11a78ebae416f259
SHA1 107edddf6e930be10ac34a4da64b508f0f90a823
SHA256 e948e189fdb4b455b564209a2992b075d3d6457482ad23d9a5d34f33aefc6d9d
SHA512 a88b6d143cda0e6812eccb269a6120c060d5d0030bc4b8c5e6c64d6ebb4bd713e068f1fbb63a393b984c9185f2e2cf5fb8dc341a6f8b2a6d15bf744c45fbeab3

/data/data/cn.nemo.video/.jiagu/classes.dex!classes2.dex

MD5 c75c8b35441e2c758c26784420d65528
SHA1 3cc3b2d553acf10426e9a554878370aae93d1aaf
SHA256 381f7a1e8f6d0ca1e97bfecb7fcd68e2d10edf5b990a621a62aa448ed75688a4
SHA512 3fe026fe8901ad66d9220209f7550440ecbd0be3f3ee0c9df21bc17f542a00e56902ceb5222040132e2a7a040e585158fd8bf92d7157e58b856451662443b0db

/data/data/cn.nemo.video/.jiagu/classes.dex!classes3.dex

MD5 9f570d08e489ab7baac6f0a2282391c3
SHA1 8d0158c012f87deced934989760bce1e77e7412d
SHA256 9736f47d880b6ba1a30e3921c2796c54a82bd9116d79f65f75d51f34491be46f
SHA512 89793409caa7de063f42b07ba327ca193cc3876e5aa4e738e926e7d4141b70cff6ad2139fa97076369d95734c6758f3c011bc622ba474f5db5fef8dbf0c0ecfb

/data/data/cn.nemo.video/.jiagu/tmp.dex

MD5 f1771b68f5f9b168b79ff59ae2daabe4
SHA1 0df6a835559f5c99670214a12700e7d8c28e5a42
SHA256 9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512 dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

/data/data/cn.nemo.video/files/.jglogs/.jg.ri

MD5 f7bc4918c40bacc811a3952104e6f3f9
SHA1 bf2963dc4508e123d51af8990be45b43918c3a8b
SHA256 d0dc6345709523c671b806b7e23e7c1c3616353af786f7cc76c1ddda5956155f
SHA512 ffe43402a5f80418165a0fc3b13688dc36baa6c45918489a75114c22f41d0cc7d4206aa5ffaa4a56e8eaa511c78be3da7538550a90c858d89bb9322e3aec0e40

/data/data/cn.nemo.video/files/.jglogs/.jg.ri

MD5 bd35185e77531fbb4617d61879c76d59
SHA1 3de1b46a911ae928c3fdeff83e64773269d10e6b
SHA256 0c147f8b67c53c69270cd45e96390ccbd97ab33792c230fe5b602910d7c732bc
SHA512 91c521dec94ce2616f042ade62688b8b3c2a1c897156ffb783ae424b11f4c291dfc26d9737cd74dc6b1a2e60f88988b8cb05c590cf3278aca537f780d60acbe2

/data/data/cn.nemo.video/files/.jiagu.lock

MD5 746467234bd4a46f9b19fb2db9a136ac
SHA1 ccf366a166cdce24a28f65c2da01295ed3f668a2
SHA256 169f6b8ac05ba555ae8fdf20258b2396096268dd283fd45226c64e44877adf75
SHA512 1c2b858fc2953a23437fb136b6c9cca55f09f8789accf042990a747bba108ede4393930deda59ff697b318fd8aa86c9e58ea9492ea8ec504489a106ae8442a63

/data/data/cn.nemo.video/files/.jglogs/.jg.rd

MD5 e9dd5724b89823f0d18fe0559da47015
SHA1 4255013aa9c6f2ce471d54f3e75d6e234b0760d5
SHA256 6933ff556876c098ec931a83192d924bc47ad9b7cde221eba40a401cdfcadb99
SHA512 7de25d23ef036aeae8f32e8255639730e58094d3908ce4fbba38d681aa02f40356a8036845f0a916cc8824f6bc3e2e1675d71ca006f6fb21dfb0429e0dc3a1c4

/data/data/cn.nemo.video/files/.jglogs/.jg.store.report_pid

MD5 58abb42959f81635e0633dc003aeeab8
SHA1 8f1b845cc7153a04536ae5389a30777fa5c201bd
SHA256 a81b9386a1288e9f5188b9ef09835f15f26de198f13dd186e373a87d724bf8c9
SHA512 fcea0cd494d54453d268fefff606264b87f29c553593b74e90d86f2a7219f4d7b7b1130c62360030fa99170a628a4bce71746fa5ccf1e7a0bf52f60b5a06c938

/data/data/cn.nemo.video/files/.jglogs/.jg.ac

MD5 c827813d03100a06126d2c96c281628c
SHA1 80b891050eae61521e51245b39431e2f4b560355
SHA256 b10695dd25e6dfb188e5987930b68b4de6f82de38dd5ee0d1757024f87e8fa34
SHA512 9c36308db5cc11be1ca631a8912c6720b791d7e155fd51c8a0e51da3df44c26b7cd865143a5f2a3e82ecdbc96c84fe3ac98947e1fad88e89b1ea9196dbadd3fd

/data/data/cn.nemo.video/files/.jglogs/.jg.ic

MD5 997c17c78b8044e1f246e94b177fa433
SHA1 202d324da949bb65d90b4c269338735bb8148ed8
SHA256 83dc5a3b75b6aa9826ef48b760910f0a0b5388f9aadb98b11521e345e5d27d2b
SHA512 555cf6b2cf404189668d21866668da76fb3f17de981744cc2298a9bef40d74d5a7e621301220624a62f2b2df353046e8378b3a1c640f5197bcbff8a696792d94

/data/data/cn.nemo.video/databases/bugly_db_-journal

MD5 065f344ce9fa043ad436fc4e3f6232e2
SHA1 d463acf6a6b516e187c6eb7211dcda3084e2e15d
SHA256 647fa01d1531536bed3a1dba8914df097300d76fe856be4c330706231c750328
SHA512 e23ff6f9f73ce2cab055268e0cf1c2e6576aceeda10f32ea94beb764886b5653b06a66d0aa7937b38b65360b8b52ee6deb3f7df42cf7b212a1f36dea4f952519

/data/data/cn.nemo.video/databases/bugly_db_

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/cn.nemo.video/app_crashrecord/1004

MD5 87a750ded08309e398aa58e5fff7cb3a
SHA1 ecc4d1ffd2f89ac04fd4e7209236f76ab3cc0220
SHA256 ddd912705b726a4b4f7a5fb2c59f6e548968f6c86aba2de11a3ea6c84f75e86d
SHA512 940b0f178f0f142af240bf619f5f27d0b0a50e7df481db9edb093270c2b1456ca721b82ead556e6971542cab61ed4dea6d239db695b989398b7b7907540d5c88

/data/data/cn.nemo.video/databases/bugly_db_-wal

MD5 f5429f48a4fae354089bef25be48f66b
SHA1 e80c69e3333bfe5cde455cf98c79ce8500178d6e
SHA256 7eaf7436c31816dffc0c5a113928e379f7574fab48750aae2751c503faf122b6
SHA512 c638800fec82e7c6d4b1e8c2dafddad26033acf678628e2de99a234fbf7fc7b867c45972f47e0b7915fe43c8110efdaf50650323e047016978780b46f797e1c0

/data/data/cn.nemo.video/files/TDtcagent.db-journal

MD5 2b440a80e43498ea014f805970ae1c71
SHA1 77a656d0200f367913d05b17760d90c458a15a2d
SHA256 fa3dcd1ef6d7ca858c774a9472ee8000971ea4da62b2399a064e272c6b166330
SHA512 a583d729a6b9aba9a79a9de2724f2b9223b6157646b5fd25dc8500719ba82dfb9e8b99b4322976ab56e161bcb931d7ebba56f84aaf9970b2d4f0dd9de275d073

/data/data/cn.nemo.video/files/TDtcagent.db

MD5 a64ed0db240d3914f2690223fd92d8ad
SHA1 05611a85274356de18c74747de7f30df7f286ba1
SHA256 a0a6b263087fa8fb9d8d85ace11c0391b7cf399da8b4471c62c8b05cab975813
SHA512 2ea50db3f02da45df15f983b0edc5ff060468f250293d09bd1bd9cb5ea37cf282a57cb69cbb6638dfbf5a161dcb002438895449364b636fa7849e5cfc883da13

/data/data/cn.nemo.video/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/cn.nemo.video/files/TDtcagent.db-wal

MD5 e4af7ae316831d5524a64386b5519cc1
SHA1 1d190f77486909d595373ffe73a641845c0317c3
SHA256 c2ec9857d7e319a456edc2205971283ab9248fa0dfc77dc8d4914f7fc0809ae0
SHA512 dd1ab8bf85abc681791d0d8d18a1d2a8c498b311c25b4407c329cb21daee40d5277c46808c4379498e450f14be37a697bd9b08757e1e569f9220a20afac4a2b5

/data/data/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar

MD5 60676ddd81ca171fe877178ebc276785
SHA1 8b215665227943f07fa57d39c096c1c1e081b57a
SHA256 09f41bd9b4647e87d2886cdaa6d6bfe45bcd91ae8e80a73907cf74e11f41a7c5
SHA512 35a4941fd0343b5ba6060fca872e5c110107d13a37ae223ae90930abdd94ec545a7a3f0a49604807132e7e455a8c022dd2339768f07e3b817456a96461fdce4f

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-18 09:59

Reported

2024-06-18 10:03

Platform

android-x64-arm64-20240611.1-en

Max time kernel

48s

Max time network

179s

Command Line

cn.nemo.video

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A

Checks known Qemu files.

evasion
Description Indicator Process Target
N/A /system/lib/libc_malloc_debug_qemu.so N/A N/A
N/A /sys/qemu_trace N/A N/A
N/A /system/bin/qemu-props N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/cn.nemo.video/.jiagu/classes.dex N/A N/A
N/A /data/user/0/cn.nemo.video/.jiagu/classes.dex!classes2.dex N/A N/A
N/A /data/user/0/cn.nemo.video/.jiagu/classes.dex!classes3.dex N/A N/A
N/A /data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar N/A N/A
N/A /data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar N/A N/A
N/A /data/user/0/cn.nemo.video/files/plugs/qy_rx.jar N/A N/A
N/A /data/user/0/cn.nemo.video/files/plugs/rd_rx.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the phone number (MSISDN for GSM devices)

discovery

Requests cell location

collection discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo N/A N/A
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

cn.nemo.video

Network

Country Destination Domain Proto
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
N/A 224.0.0.251:5353 udp
GB 172.217.16.234:443 tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 1.cn.pool.ntp.org udp
US 1.1.1.1:53 sdkauth.hpplay.cn udp
CN 1.14.243.123:80 sdkauth.hpplay.cn tcp
US 1.1.1.1:53 id1.cn udp
CN 1.14.243.73:80 sdkauth.hpplay.cn tcp
US 1.1.1.1:53 av1.xdrig.com udp
US 1.1.1.1:53 0.asia.pool.ntp.org udp
CN 116.198.14.14:443 av1.xdrig.com tcp
US 1.1.1.1:53 android.bugly.qq.com udp
CN 14.22.7.140:80 android.bugly.qq.com tcp
CN 1.14.243.233:80 sdkauth.hpplay.cn tcp
US 1.1.1.1:53 is.snssdk.com udp
GB 79.133.176.224:443 is.snssdk.com tcp
GB 79.133.176.224:443 is.snssdk.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 i.snssdk.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 79.133.176.224:443 i.snssdk.com tcp
GB 79.133.176.166:443 i.snssdk.com tcp
US 1.1.1.1:53 conf.xdrig.com udp
CN 114.67.244.173:443 conf.xdrig.com tcp
US 1.1.1.1:53 ad.quwin.cn udp
CN 47.99.142.202:80 ad.quwin.cn tcp
CN 47.99.142.202:80 ad.quwin.cn tcp
CN 47.99.142.202:80 ad.quwin.cn tcp
US 1.1.1.1:53 rp.hpplay.com.cn udp
CN 47.99.142.202:80 ad.quwin.cn tcp
CN 47.99.142.202:80 ad.quwin.cn tcp
CN 47.99.142.202:80 ad.quwin.cn tcp
CN 106.2.6.50:8866 tcp
US 1.1.1.1:53 ez4q2.cn udp
CN 112.65.70.244:80 ez4q2.cn tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
CN 14.22.7.199:80 android.bugly.qq.com tcp
US 1.1.1.1:53 api.km6868.cn udp
GB 216.58.201.110:443 tcp

Files

/data/user/0/cn.nemo.video/.jiagu/libjiagu.so

MD5 f0f9ef36b67807a253b5932f865eae7b
SHA1 6a8d66c6efa2750b54cb763f4ad044bba4154e0d
SHA256 646dcd8290a30e992553186392239da39ce7c8e7c2fd87b3d6a880551782db75
SHA512 e7ea65467e557e4992e746d808cae3e2d16b42187b1a94326c47c689cef9fe21a2a9d2b312c60c8ff40e128dacbde84cd6b93a191ae38496584a45fe60c04548

/data/user/0/cn.nemo.video/.jiagu/libjiagu_64.so

MD5 c26350f8b4709f13c7adeac3c1ec791b
SHA1 0d773039deffff4f2bcab5cbc2ac04c4a2e7de9f
SHA256 947093725142dabf77b01a8c9020312dc4544403c0a86e8a55d0174e6808e87f
SHA512 56a1d1b7255a311317757850bfc7f5b4e59333c386f1b17555a2f03090a5bd5db66b6da2c59e90ed674f9bba1c991956877b95da8d2a75fcc1b8f3f6b9a979be

/data/user/0/cn.nemo.video/.jiagu/classes.dex

MD5 6bdb8a6ae2e7080f11a78ebae416f259
SHA1 107edddf6e930be10ac34a4da64b508f0f90a823
SHA256 e948e189fdb4b455b564209a2992b075d3d6457482ad23d9a5d34f33aefc6d9d
SHA512 a88b6d143cda0e6812eccb269a6120c060d5d0030bc4b8c5e6c64d6ebb4bd713e068f1fbb63a393b984c9185f2e2cf5fb8dc341a6f8b2a6d15bf744c45fbeab3

/data/user/0/cn.nemo.video/.jiagu/classes.dex!classes2.dex

MD5 c75c8b35441e2c758c26784420d65528
SHA1 3cc3b2d553acf10426e9a554878370aae93d1aaf
SHA256 381f7a1e8f6d0ca1e97bfecb7fcd68e2d10edf5b990a621a62aa448ed75688a4
SHA512 3fe026fe8901ad66d9220209f7550440ecbd0be3f3ee0c9df21bc17f542a00e56902ceb5222040132e2a7a040e585158fd8bf92d7157e58b856451662443b0db

/data/user/0/cn.nemo.video/.jiagu/classes.dex!classes3.dex

MD5 9f570d08e489ab7baac6f0a2282391c3
SHA1 8d0158c012f87deced934989760bce1e77e7412d
SHA256 9736f47d880b6ba1a30e3921c2796c54a82bd9116d79f65f75d51f34491be46f
SHA512 89793409caa7de063f42b07ba327ca193cc3876e5aa4e738e926e7d4141b70cff6ad2139fa97076369d95734c6758f3c011bc622ba474f5db5fef8dbf0c0ecfb

/data/user/0/cn.nemo.video/files/.jglogs/.jg.ri

MD5 9bacae80b44c2d5aefabe521d5013d5b
SHA1 89fbd6fb66c1dafe6238d730c95d2066d9b21d5e
SHA256 35c541241938ec6d2123ae36b12315d94381912513352f91457dd90daa5800b4
SHA512 025679f6e5352955ba785485673fdac95ff9b4b203ee750852d2464530fe475b5e3f2a7da32415c15b47c2e6ead95bd1eaea2cb59ce20c3832496c286425bc43

/data/user/0/cn.nemo.video/files/.jglogs/.jg.ri

MD5 594de2715a5faaba3df4fb3674fb7325
SHA1 017ea87056dd4822d254827c446f407013fd0f48
SHA256 a512d8922355ba81047ae2a560f7d86cb6103456b032e71d22a11e028f3ab9dc
SHA512 09cf96218da31a6560bee73505105cbabc8d8caec2af758dcbb83d9759ed62aa930933e2333cca203947e0cffe4231eeb1dadfa76748cf291e77ce4c1425f8f2

/data/user/0/cn.nemo.video/files/.jiagu.lock

MD5 6bf46030039a8f9efdbdeb792bb272cb
SHA1 b8937cfb48e224780848fb6386c5e4672726b059
SHA256 c5e3739570d122a7af53fa677d404e9c9483301cbf10596739383baa53cc7458
SHA512 3b889726444a72728f8fcb4011ada3134f8bff1d4dec0992c79f38a89cddc55dcdd5bc97ecf976100a4d35491e9aa64d5f0728dbb06a6b58b216d666887a18e8

/data/user/0/cn.nemo.video/files/.jglogs/.jg.rd

MD5 7e93b565ddea5a6c1c225e18ee7a75c0
SHA1 5090aeb61a22e77abc4220fd81769b75c00c5858
SHA256 82d7bbde0a93aaffc92202d667553cb88c558ab0a79a5f4657e36cc9bc8a952c
SHA512 012e5d29f5f0869b0440542ab46e8d40c75643763d1c839c17d9ea74dd4cd70e3de48b8d6ba32928e201626b0ceeb982b571388e4aab58cb27384fda22781326

/data/user/0/cn.nemo.video/files/.jglogs/.jg.store.report_pid

MD5 58abb42959f81635e0633dc003aeeab8
SHA1 8f1b845cc7153a04536ae5389a30777fa5c201bd
SHA256 a81b9386a1288e9f5188b9ef09835f15f26de198f13dd186e373a87d724bf8c9
SHA512 fcea0cd494d54453d268fefff606264b87f29c553593b74e90d86f2a7219f4d7b7b1130c62360030fa99170a628a4bce71746fa5ccf1e7a0bf52f60b5a06c938

/data/user/0/cn.nemo.video/files/.jglogs/.jg.ac

MD5 c827813d03100a06126d2c96c281628c
SHA1 80b891050eae61521e51245b39431e2f4b560355
SHA256 b10695dd25e6dfb188e5987930b68b4de6f82de38dd5ee0d1757024f87e8fa34
SHA512 9c36308db5cc11be1ca631a8912c6720b791d7e155fd51c8a0e51da3df44c26b7cd865143a5f2a3e82ecdbc96c84fe3ac98947e1fad88e89b1ea9196dbadd3fd

/data/user/0/cn.nemo.video/files/.jglogs/.jg.ic

MD5 997c17c78b8044e1f246e94b177fa433
SHA1 202d324da949bb65d90b4c269338735bb8148ed8
SHA256 83dc5a3b75b6aa9826ef48b760910f0a0b5388f9aadb98b11521e345e5d27d2b
SHA512 555cf6b2cf404189668d21866668da76fb3f17de981744cc2298a9bef40d74d5a7e621301220624a62f2b2df353046e8378b3a1c640f5197bcbff8a696792d94

/data/user/0/cn.nemo.video/app_crashrecord/1004

MD5 f5ece0c8c0d053c7e254f596a6d67983
SHA1 85886fc96a7663729f0b22762b7138583070360f
SHA256 162c3b01ca35156cc27236e1b77b0392ba7e39044dd412f2784806956771f788
SHA512 ce281917009292d71e5bd4bb5888126040a2ca15318ae138d448ce399b512fd357eadb29d196c80af8d794d7617bb088bb37125dcb6b92016aae485a05201f71

/data/user/0/cn.nemo.video/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 5d293a63dbe76bedeafe863d84e35161
SHA1 83a6f885ba3cd3f827bc454140f106848d885d01
SHA256 e71bfc61c8f46b2028c89ca8638c3ee4dd51d08777d5b185d93a6a627b73a99e
SHA512 baaa0cd655955fc89e574381504ed36e54f6614afb64bb9b78bab5ee3c0e3f629055640f0e6180b65dc199aacfd95875bbe4e04b6cd36f3269b91351ee7ba164

/data/user/0/cn.nemo.video/files/TDtcagent.db

MD5 f382a52cf8568b9cf2673ed5ef041014
SHA1 c507f0a1052262ad5eb828b64190bd0422cfd76d
SHA256 978e10b07e91ca29ede5c387dfd9e501a19cc5a02675196d716962e7697de695
SHA512 d3c06ea93abc8226595452003d40d66b74697a921c74c87f5a0e22f31f27e842a85f9572d8a372549154feb6b564dedb516443faf02f6ea025db9aee5455fabe

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 5b0332892780c711001ca95544e2e8c5
SHA1 5f1307c15cd0e24b44830854617fe74b14ee7412
SHA256 ed1f36b49f1e1dcb2bec4831b8d41777972e5fef2c7662bf2fe41aad23d930f8
SHA512 51365844c39ec83cea9ba3959fa04d434eeb109b6d3f25f84db6b86bf17b69e5f90bea74b22df93af3524e2efad3cb1e077d0a831aea8863c34195e7569986c3

/data/user/0/cn.nemo.video/databases/bugly_db_

MD5 b590f094b09c1d3f0226565415d1b4fb
SHA1 46023a4b6a5565f21e17290a34d386b2e3f7e93a
SHA256 60e06fbc870410a5141ad8064898486883f4ec48bdde07cdf91bde059a1faa39
SHA512 7a2e3ed176cd14344c439652a95f743a505142dc72ffdbf0f18546129a11eb2d68751201d6655b9b02ab49b3fbe4076f198d1f7bda67065c8b161810b24152f3

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 8cff2b1630f05b4b9b6415a2a7141301
SHA1 d6f72df5f9ddd422fe3bd1cb58df2f4209ed7944
SHA256 5e4798a725ef4fdb716e845a98f8001b6c5c413f10cbf0e58b39b0ca5b7a368a
SHA512 f75ee383ffbfd3ec33becddf23cc217f182de2a0f7e2774b1fad9670ba2fa98045f89bc31f81c198467bf1d41da3e65102cd849f8f50cf1efa4d3abbb1802e06

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 64c1e73d4fff96c4f6dbcfdc4065b351
SHA1 b1eb1d170df1e3b6f059ab77413d42105049d542
SHA256 55a2f11a786662b65bf3a4b8d9aa00723865c73fb96b3f38e6e5751f634dc441
SHA512 981b16d31c15b632dfb25a3c4b239bb1089a3bb9ce4c0e236f3b06407e909d4a107c38a4506cf62baaf284bb0a0c1b7dc8ad53719095c894a5ff652e0fbea047

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 4c6a40081517bc610cd79de8713f581e
SHA1 9c477dbdaeb4b643f579100d9b2a7f452e2b3f34
SHA256 6af25f77b315b758af37d69f4b6aef79b341629795c02c157a87a8701a8de764
SHA512 d37773b81720a374f9c9b58290acda6a4497a1003bd04937be87439bb31e1fa7b7360d7acf918393a1a9c851d864a3d354f810d063590e11ad99c44377afc4ee

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 30a8036ee19a1fb0a59775dbf81ad99e
SHA1 7f0103419899ff7c1d23f495be37c76b552371c1
SHA256 a7259dd5e5003713481dc219130e3a8407ed982a5d9af8d0e50f513d9fe43347
SHA512 7781ab4bae389539cbfc5a555e7e67b642b4f27bbdd358f6918ce56034306db96091bfc9c80ad46a10da9ee222b4c06f45073e8eb5b5b19217d4d428e95f7475

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 26d4ccfe95bddb113be386a1b47a89cf
SHA1 e6c7872456c0caa4d1dc9ef4a3143855883a5c32
SHA256 2aabf573a9ac4a4eb54796821715ba725b11d413b2eb8a717c0565e7359e69b1
SHA512 1aa0d82512f14468b08ca84dd84fa262058abfe7d23fb090aaba1605f74ce4601ec1c8325f8c2cbb89b2775015138c982993fb03b2db8bdf37209673351409e2

/data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar

MD5 60676ddd81ca171fe877178ebc276785
SHA1 8b215665227943f07fa57d39c096c1c1e081b57a
SHA256 09f41bd9b4647e87d2886cdaa6d6bfe45bcd91ae8e80a73907cf74e11f41a7c5
SHA512 35a4941fd0343b5ba6060fca872e5c110107d13a37ae223ae90930abdd94ec545a7a3f0a49604807132e7e455a8c022dd2339768f07e3b817456a96461fdce4f

/data/user/0/cn.nemo.video/files/plugs/GDTUnionSDK_QY.jar

MD5 a2ea137e9af9525308cd4191392a8cc8
SHA1 8fc27bd1f60e967066032ba7fdd5c9596b1e7327
SHA256 a912da000f86e1a24732dc9783db1638a6041955800f595ac0bae83c29cf4ec1
SHA512 0bc50fc4c913e3fe7a78936d6860566d5fad0d721c99120c39e7cd8629983a6d41768a5f99f8b9f61a23ea647ffa64492084bcd0daca9837d5ec6685dcc54d3b

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 3f118e88b58d7a9ea81fdf2baeb9d341
SHA1 3149ef5a57e5e28723df532cd29a97d134389c07
SHA256 1c8ac9507901dbb1130d48d2ba1a26bd2852c7bcded35714ed772d1c9950f39d
SHA512 bf8a2ba9d57b5e13c870c7ad53818221d160dc6501def9a481928dd4197705a82f5f77715cbb8b3c085a0dfd643e605a23704ef2acd074601745551db1483a37

/data/user/0/cn.nemo.video/files/TDtcagent.db-journal

MD5 08a9b3cb961551cab63a1a69956a608e
SHA1 948ea344c871ed1be0ca4f4047d117ec532a3bed
SHA256 0d28b2a03c2f9832d22ab456ce1134c0b7b78f0ec28a6b14294b7f25eaf41cf2
SHA512 572e03702c2c371dc90c5ecf5c46b1e99179f6788d05dfbb79a212a59d845f159a28fc68fd290c652ea10971a3d90c7228bf01b6e0b360a44cfcfa928d95e547

/data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar

MD5 f4684dfb35fc0f653818fde3bd690a59
SHA1 1f9b58fab12be5de7f7be04cb2d7261804527fe6
SHA256 5694fc379fb421bc2043cd0983c541b6c725707576517f16a211f406114d66a6
SHA512 163bbdb19f3cf5cdd3fc5d788a517fa18d4f822f92394aa4c43e3f1bcbfa6f85bdb6d8c1dc0b4580b25f60c0d190aa15fc9552aaf07fa7ec4b68d726e6bc5113

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 217d32fe00a155a15f70a0b26a3673ac
SHA1 a64538d4301a28b6408b30b139365494c1966dc7
SHA256 8620f4fa7eebda75cf5145ed37f71dfe89a89e7304da85aae289ff33694835c3
SHA512 d3260c4868844943e18d0d04ed58d54359f302bae927f608460fa298b2834de50726429c5d46b7504bf92ce26e7754f48d7d2abe00e7a64abb094f079bcd281e

/data/user/0/cn.nemo.video/files/plugs/UniplayAdSDK_QY.jar

MD5 7dd54da18e374951d02257dfb5497d13
SHA1 c5360fce48a8ee766efa47dbd400fed121c18790
SHA256 b3c2f314207f21870873ddf0ab3083429444397dc3a6785aba88d5b3ebc9c0ce
SHA512 410849331271af51fa6351e71b74c1b36916cf1e546aa83d2a0aeb77784012b41a43d3acd9ec5e4487fc95c59504a1c64c81c91f6813803e374dc29623f9360c

/storage/emulated/0/.tcookieid

MD5 180289282d6157acf328948c994a16a4
SHA1 24d220c490d4223f848ad6e60f71d0bf305f990f
SHA256 133889e21310102c5d0284a536c5542ee981e5dfed1716672edd9ca36e7d9303
SHA512 212cdcd1286638763a81eb72edb912caffec66b56d793927a716882337339323108177ff25df7d3d200021481dfa7f3e06c5c881cf1e07bd619e08c25298f9e3

/data/user/0/cn.nemo.video/files/plugs/qy_rx.jar

MD5 1d09446939012b63fe8c234dd7bcde2f
SHA1 a2d05fb0688c5190027eb6cd5419f01fad1c0f9b
SHA256 08f6c7d75c11b04ed096fbe434ff5535747ba183325018320a8b628325fde358
SHA512 10a8826c54d3ada0242879c9c3ad9b78fc3161ecfdae52fb65e12e6439c49310daf07c9fe07932d0986d087c2d64198002153f5be951c80e471ead5fc5f1350a

/data/user/0/cn.nemo.video/files/plugs/qy_rx.jar

MD5 ef49957529c6b3d540ef9f396d77690c
SHA1 6d05848cd76908e4915400359613b17db1e7a12c
SHA256 b4b83a381f35fecf3dad1d8b53255bbfd8a17f0327079799bcaac615dd4273c6
SHA512 e58d524b78971218480bd68a230aed0d6e1fefbb34e1e00dd4bb8d105b62558461523274dc12d8c85f112858b8ec8315cf1556cc27a645bc01eacd0ca282fa4e

/data/user/0/cn.nemo.video/files/plugs/rd_rx.jar

MD5 55eff9c5a10d76dc628cd56e84600b3c
SHA1 ab7d07ba5b42a9871f48da6bb1fb47ca39e4b05f
SHA256 630535a46f2e198a255d92398631e1ec3665e72a4f71d34c9e0258adf42b0ec1
SHA512 26b68413612e6b6c942f54b2c042f5a2699e7a9953e43fc21d64e3476b128855cd0219a825ad3e3c518bddca468a03787859df89ce65006c0e7b876eb6899142

/data/user/0/cn.nemo.video/files/plugs/rd_rx.jar

MD5 60d14559ff189148554dd71a3185436d
SHA1 76d63e09a33db9abc628c21937810e6c1142c946
SHA256 543056c991dbe3bfd0ae71f9c8287628f2fd79caa5946277832231ecf4054ad0
SHA512 b1c9da42549c9cb5215d080224c4efccd31b669830d7d830ee797193f937304b9e1c3ecaeaa6c168cceffb4514d2adf2bebdd38b58ae5357d68209e093542420

/data/user/0/cn.nemo.video/files/gdt_plugin.zip

MD5 de1bca9b11af69d7c05cd14cd6ca0d31
SHA1 9bb5400e03f8f3a152cfd99da458520ca269750e
SHA256 707f1acb77ccb3a758b60394df0de659367bdbfe13c50e60d312edbfbfab695b
SHA512 df3cbd76812d5ff5905e0f9f3d5ae985701a1003fb7f69bac15fe80f8283173c676377e6fa8491b7e06480989f6622cfce0f2a1baa72137b8b1cd4a80ba6ceff

/data/user/0/cn.nemo.video/app_e_qq_com_plugin/gdt_plugin.jar.sig

MD5 0fddd6bed2bbdb1d9e283824f83e8e8a
SHA1 7758b58ab7b52810e09ed2d725cb959d1bfb2ead
SHA256 4c8ac02deacf9ab7a4ea1ab1d237ff3d4cbffb30b9ae13c5057323b578e124ef
SHA512 3a6d9d4899b241e10ae06e72ddabc1560efb1891dde3f497be18448ae8c9dfc2911a59b3820a3e6a0d21507ebf0793b6ad0da829a2943a2f3b78ada730456507

/data/user/0/cn.nemo.video/app_e_qq_com_plugin/update_lc

MD5 41bd2262f893325edaefbd1bbab4537c
SHA1 c25221d899e5464429e354d0042d2291cdd5177f
SHA256 c5c041820625b9ce0544b3cae7d9e171324060f8a0db5a485bccfa433db54cc2
SHA512 ba107dfe2af0472d35f1c6e28a0e500e59a54a2be010ef69c4e86cb0b2f4614786a64e6c4f59d028eaaa07b9e4342118e5d7632c8d76ace590b3bf1982687451

/data/user/0/cn.nemo.video/app_e_qq_com_plugin/gdt_plugin.jar

MD5 a20b450b9eddfc89b600595f52e69835
SHA1 8fac99e31e63859f9779ce28e526b7a7bd5e1033
SHA256 cbece95c97f4e62939f1623c2cbdd9c3271a6600d35d756a0cd9795bb264b690
SHA512 c135b78fa9105bcd61807c52fb3bee327bf000b8d88676be69f6128062cc53fcb2ebb866e8cfabfb2afb3fc96b06ca9394bf60648eec7e783ecdb7862bd45a59

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 fdc84f46d9f7973817a8b3ae88521a41
SHA1 1fd49a40be6843efa45cc79517677a716c992d01
SHA256 b31c656ee58dbcbefd5586ec402439c622a58070242d4b42055c4181d16aaea7
SHA512 230b4bdda1c2088211505de5d0d967e1b6d0611d6cde63f449624911933a124f59adc57569a26951fee4dd1bcc6030c9e8ea44e3eec5a943ab84261bf0ed4ded

/data/user/0/cn.nemo.video/databases/downloader.db-journal

MD5 4b24f6e8258614d81f0fc8f2f88291ec
SHA1 02cd62e0e0db9c8b75541046b85a60b78071aa49
SHA256 cae5cd699d87c2ce9816794d58e694f32945698d38d2be03bc83c9810578956a
SHA512 1390979170f4270a3730f92e590c59f4849c71d8afc57c5bd96e4cef1fc62fced8bb5658328d48acd53af9ac25585e5f193bda0f9429a1e1e3ab84c20710fc94

/data/user/0/cn.nemo.video/databases/downloader.db

MD5 40b7d099fc8c4320b1bb8dbc6e03151f
SHA1 bb556886aaa719ae155b8e499f530fe970e6e5c9
SHA256 02fec0e756afa49755e14043766cf3ff533addef9567b0243e06beeab805ec0e
SHA512 dd476b16caee9c451571a95c98fda38496c8a75a4f5e778b4900e122ce34a7b474831c6ca84d1b42e83af4e6cb0b693ef0fcc8fe5c3e4162f7effc6c85f6fe3a

/data/user/0/cn.nemo.video/databases/downloader.db-journal

MD5 e0229bb5977cf5455555979b354b5a8d
SHA1 1c22c9f680c1fd6c29bc5a36bdf02e38c0e18075
SHA256 6e58b26cb8f33aa5bbf9183fe9c0170ef7ac8b658057acb202df09b8e02fa39e
SHA512 f307a02644e17cd48d4c15354bc519817450706858a49aed09aa2b81c9651368eccf418a27d4d9c56433fbde9d554089e948ae422fe5d0965ea7b6e22b2a78f1

/data/user/0/cn.nemo.video/databases/downloader.db-journal

MD5 f448f19de4be6512af0bcc9aebe74a20
SHA1 2a1559119ca3386c230785f48cd132e6b2e6dc80
SHA256 e86b44e983eadc28b2974f76e3b7c9aadf53c019017312c3f5d947830fbb5a16
SHA512 fe035a56afa0216c25801a260e9db2a90ab60c82959b76a65029193dc1dc08ace3f6ca324d48d847d57f510b2f566af13901334db326098367454ec94da76adb

/data/user/0/cn.nemo.video/databases/bugly_db_-journal

MD5 02267fd4419ab985816942f93b71582c
SHA1 9dd8d2ceb7dd27ea0b63b8c7a4004bc245c3b51e
SHA256 aa44b6a81ffa65a72466838b98cceda4d19a32c5cff3dd710d101f1c2b188e22
SHA512 fee9c5562467298ce871dc80364e1b07d62683d6239fce538f64ef874daed2ae922cc06f4f2fbcb556bc51d6756540cfa0f776864eaa1183a4aadae9a8a387e0

/data/user/0/cn.nemo.video/files/TDtcagent.db

MD5 46e1eddcc9a90441ab6886d1da1b2787
SHA1 360e02a8565916166f624d4a5af5efabb61725c6
SHA256 eaa194def90576eeaa03b5709af3d6a9bf2ff12956d330e43b0aea9b54ffd263
SHA512 d3c265d2cc40fc26d2a2b8c90537af3400ac4c1e769f5ccfab77941b73b79c9dd8e4e370324f72053e2ebabf55b2c7960f4d129270d252505f85d10c128016e1

/data/user/0/cn.nemo.video/files/apps.qylog

MD5 8c9ca0e1fa84086d47bbd786685ccd73
SHA1 cf15ed448f0bb103b443f8ded803f07776f51786
SHA256 36f36b38b498ffa622beb8d1c59f3e94efdfc72724bbef0f32a5b7cb88fa2c5e
SHA512 fcd3e694e86e22c7accbdeb702b06946a1fb6091f4918055dc5ef30f2601d438b553a5d28c9e39a6b4f0f40fd0b647aace6ab2f1cac798ab029a20558fd106f2

/data/user/0/cn.nemo.video/cache/tt_crash_log_dir/1718704849112

MD5 d27afc1f4b84f3f1b4595f88eba2aa3c
SHA1 5aa2167ed222db66df2d1c8f181653a940f5f7f8
SHA256 9c67749f2de43a118ae758745f2dce114ea85925a8cff13b764b229becbb360e
SHA512 4b0dfbfd250bae767a860d77d5e015c273960756291357e8e248092dc498c430d65406fa85e336aff888ae5a64829bf4faa021b35348fea93673fcc76713c828