Analysis
-
max time kernel
60s -
max time network
183s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system -
submitted
02-07-2024 00:08
Behavioral task
behavioral1
Sample
Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Resource
android-x86-arm-20240624-en
General
-
Target
Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
-
Size
13.6MB
-
MD5
4d3833446c806d12317eff6fcf5a2ac1
-
SHA1
39faddbe2c58a373f7f4d26b9ec00202a79ef7fb
-
SHA256
9534297f808b1faa8d6be0dc9485c7081e0208211110bca24b1642aa4318c3c9
-
SHA512
391037468a8ee326d5e3d0c178000136bc9496822ad901b01576a7845fa1e8160971e7bded78ab19a894c8bc61b99e24a1807f799eacd093319a837d6e2c5189
-
SSDEEP
196608:S2ZyIdmW99evCihSdHO+L4kzTiBHY23XznWSgNLifYJV1Dlo8wnF1vQAAqWWpY1:tLdLVnF4QuHYODZgNLIqLDOvxWWm
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
Processes:
com.livevideocallingapps.headshotioc process /system/app/Superuser.apk com.livevideocallingapps.headshot -
Loads dropped Dex/Jar 1 TTPs 6 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.livevideocallingapps.headshotioc pid process /data/user/0/com.livevideocallingapps.headshot/[email protected] 4413 com.livevideocallingapps.headshot /system_ext/framework/androidx.window.extensions.jar 4413 com.livevideocallingapps.headshot /system_ext/framework/androidx.window.extensions.jar 4413 com.livevideocallingapps.headshot /system_ext/framework/androidx.window.sidecar.jar 4413 com.livevideocallingapps.headshot /system_ext/framework/androidx.window.sidecar.jar 4413 com.livevideocallingapps.headshot /data/user/0/com.livevideocallingapps.headshot/cache/1664557424545.jar 4413 com.livevideocallingapps.headshot -
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.livevideocallingapps.headshot -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.livevideocallingapps.headshot -
Acquires the wake lock 1 IoCs
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.livevideocallingapps.headshot -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.livevideocallingapps.headshot -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.livevideocallingapps.headshot -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes:
com.livevideocallingapps.headshotdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.livevideocallingapps.headshot -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework service call android.app.job.IJobScheduler.schedule com.livevideocallingapps.headshot -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.livevideocallingapps.headshotdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.livevideocallingapps.headshot -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.livevideocallingapps.headshotdescription ioc process File opened for read /proc/meminfo com.livevideocallingapps.headshot
Processes
-
com.livevideocallingapps.headshot1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4413
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Input Injection
1Virtualization/Sandbox Evasion
1System Checks
1Discovery
Process Discovery
1System Information Discovery
2System Network Connections Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.livevideocallingapps.headshot/[email protected]
Filesize3.2MB
MD569cf159b893eefff9a8106cc3ee37e03
SHA1165207adfe8c6047ce9f3dd38aed50796c1660d1
SHA25626fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
SHA512379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa
-
Filesize
10KB
MD5dfb68e70e8eb84d844c9ce623ee069c1
SHA1369e761858a904fe9fb89efcfc9bd3e6e56ee44f
SHA2568ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
SHA5120d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a
-
Filesize
21KB
MD5722310b17c81cc3d780d23e1a63eb450
SHA10a0c1a939f923570e5da88aa5c7b105052f056e3
SHA2569f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
SHA5121a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/04a7bcbca5c75df7a260225f9374d5e7dd90a407b2f3b71da06c750c7dc03350.0.tmp
Filesize12KB
MD55659261663599305614b8c84f371dc18
SHA1b454eab08d865fd3b2a9cda1df2408ec63e8800f
SHA25635907dd02ecf4555e1c38403b4b9b7f4e0fa318a34170f48ca5764205b412f51
SHA51246077af169eabe20b0b88742f3c8b0b0c0c6cd8858abf8f087158c26cd4c07234ee360b534ff3ac4b4b7307ecf11c5c146cf7eaac5989c576033ac98d63fc541
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/1948f864e3aa27ffbe89cfc101ddf528f961be59f97f4374936b2bc20b37705a.0.tmp
Filesize34KB
MD57a7cfe7c69ad23dfe99208a0e7798bde
SHA152e6a6b33835a93fe09b5cac6f39241cbd44935a
SHA256ad36c1065c6c01ae53a053d69d3cb7946b152c4a3850d847a672e66aacbfb196
SHA512e667b78719c9890dd0186525a9e8bd892ed691e110d8db4b5e4de361ec7e90c69c7381ae10a528932175089c486bbc6254814fe1a445e1faf801005fc5b7066d
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/1c8240bbe209742af60e4f7eb6aa776912a01ce366eab2dfe341558df897c664.0.tmp
Filesize7KB
MD5efc5af0448409c5409b3a5b8e9717735
SHA13f444b097808a613bf9d753f2b62b88dc3c30ef1
SHA2567b2e11d63ef8c0d7dfb94c6fb5f0fcf250f84ce8b09890f535233d2c2d051ed5
SHA512f35f94c39e8d442b777ff9fc86fd54bf6fa914f4fb44b340efa29e9e9749d370e2bc83eb859bb197b6c2445b9d5b51b519c2ce87cdb00b3c5acac19a6aa10a4a
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/5f0180edce05528c93da6925da294f8069a79d837fe9d27956cbe2dab28c408f.0.tmp
Filesize9KB
MD5594a8140a7673135e880b45e22351079
SHA12cbc062b951a464cfa3b821e6dcc428db1467425
SHA256f66f7e8abd791a8caa8eb6f21b44493c7b07230e69174900af73c27953d28ff1
SHA5129abcf3ae3ad84372d86d5547a7b7051bd577599287fc55f087a9baaa391871350104b1ba3d77e6e33012539502ba190a9d543000de4c8925221b9f15a097bb45
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/6811cd239dc1e7bda6030eb2476e1285b6b862fe78f491d94a0dd2a6ea5fb356.0.tmp
Filesize8KB
MD5ea4c64ba542553498bd3e002b9499e3e
SHA1db18346752fe61d3692c89af65f7db5e84fea30a
SHA256ed03c064c1fa9734cdef26b486e3d19ef1df2185c2fdbffb39d18c8054725133
SHA51213373c010a5270c0ab5513569961f6610d3be0f92e916cd644f81b022162cfb34d4e333a106369e4d5c06a8d66ca187e77554b15b1bec3e27e4b063b7115c403
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/75cfa8e873116b52fee15818cbb3be25beaac2906c55631dd3db663edf88ccf1.0.tmp
Filesize10KB
MD5ef95be57b8e7539b96a1d87a73d3925d
SHA1bc2d4f3703431637734789af5541ef9e001c854e
SHA25610ca0a8188b5e031cf2fb9ffcfee8575337a90ac51768304fa2e3d606640da6b
SHA512d9fcb4cd1f1ab0e39e4b5aa682689fdf7f4c786f908a6827bc963f1c10c6190a7698cbf70a25baab454cc31733fc12a18ca2e4702867610577041263b3f3e8c8
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/a7adc9bb063db8e517f822996dabc2483c75d381578d0c2d19aebb9285c43fab.0.tmp
Filesize23KB
MD53dbb3c2fcea9ff651357a06f4c1c7bfa
SHA119b0d18517389ca2585959375efd5afa3d62484d
SHA256fb784c7c8168f64c83cde27cc77deb0e145553792efa10170485a882db9439fe
SHA512511aabf0b2ba107de156d73c80e3bf078fb1b0884650ae1ff9bcbffb0546dc595ad2aada670c5230debd3a72384552868b0aa423099c7d0a10d079843152de3a
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/ad5e9539f9e329c40588e741d2d6672e1aaf47ee43c07e1f37fd0244c7085a13.0.tmp
Filesize29KB
MD585f50c572cffeb59d7ac4409af3fecf9
SHA1ef299d990a1306b079dbc1fbba535931eabd046d
SHA2569947a3bb980541c29511caaa998095c9966970abafb6b2fbceda9037d216201e
SHA512522400dc167e0190f463b6a407b85d3fff9c22ceb0ed9d74262a8a754ee6a677aa6f84c01168c8f3d4e91784175aa82ca52eb73e36a54d43acd56515e9ee943d
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/e2953ab708bfd244207a82ad11a474295ae6fb98c7e41df5a4b427905502a5c2.0.tmp
Filesize31KB
MD59c7148fe66e22172faa1ef0f8d0652da
SHA1a687fa365465b9c55fc33e06c892d098977a49fc
SHA25628459b578b282e4bbf2e43bf9c164ede19bb8f336669a17511d79a05f84e8fdb
SHA512749bb21941275d0cfdc1e2ddd4de00edd7689edca3b62ab78fff451608b74fe6178b57fff924a7c11718abbea98931dc2773d5a4a542b0ce5e3c13424b6180f8
-
/data/user/0/com.livevideocallingapps.headshot/cache/image_manager_disk_cache/e742c62d3fc7973a05f39e1908ec3ba91ed1c32d39c78ac5204a4d5b684f769a.0.tmp
Filesize21KB
MD5f75d1899de7d48004e93f3d5dfbc1ce6
SHA1c5f2c64b1a97bdaed8828b10f875ebd3931c2deb
SHA2569897c7d358154e0ac68a34eec0fb5788dfa782540e0fb3b490407c9b14731b04
SHA5122f6c444ce010b2ae153789aaac2cac4d1161a831f9a2b1aa61a405eb4405c5af84d75d0bd4cf8216ef31524024486e891f0dbc28ffdd610f95c24820f1d5a7df
-
Filesize
1KB
MD5c69c2d6434cee61433f3a7b048a3a361
SHA12512259eb8740ee13d4c0fe8e10a6a4cf9d773a8
SHA256958d30498908b177af468ab30f2a2c12717cdf3663a6eb8c670d6a5cd9cc89b1
SHA5120a65208752a28c25d32281c261dddac17706473e644ce44f921056e45f90fcfc439fdfa3bfe262e7434f0e8cb5d94dd7429fe7b4eb6e0b9211fac2d699581d2a
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
948B
MD5480d07e0214aeb0d51a0d29f6f0a6a22
SHA1bb1a0580bf436ffe93d91756a9e2e646e449be9f
SHA256e9e16898bfb89b40c3e9972f977730473d9b45ed0fdc5cbf868ff0e71f064290
SHA51231c58c4bbeb49cc1ca7c705b829c55b50d980e9248277f9c96f1602fb1e6be8e7e3d3add5d3b002d28015822dc277e21905eec9dcc5685567c36e5ab97444171
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5da2fc4940c9d7a648fa60f799489e732
SHA137d902b7d7acb2067097f993b5d9252ad4c77ae4
SHA256a5a035483de6229311f8bb80aada642d51fd93f3d3b8303f0a8d600ce04f0839
SHA5122da3bff2618de36b05396b4bc807814310b385994e3b11e548a9593431a0b8c9a647fe988789d78f36dddfc94a29c94ad5e04afbf3845d283e2e60dbaa520cb7
-
Filesize
16KB
MD547002ce67ee8563b2f97052521519693
SHA1419eb176332db0246cee098b25fc9116baae2d68
SHA256517d3246eb56a4a250a890adc1bd9e7e948184c93c80bd163796021e19881c33
SHA51282e840be059952b7c43c7befc9d92e03d59ffc37252553a5259f8de36e9285685c7d10cb24bb5aa24ef639ea07b38539353a07f36dfd1a7ae4982f55cfe9f62f
-
Filesize
16KB
MD5577f7664deca5548e623b7257609ee1d
SHA1dbdd285e53a652066b147bd1f7b747614110eb40
SHA25650977124071f98f7a3e0385c33c7dd718e8c1c09d4ae86e0e0ef8202e8eaf9f3
SHA512dd5e1bc9bff36c213daea8b4b0dc48c94e0fea4ae1a3f2d58a26e243bc776870dd98adc5a0e3dec9e3f861236ffe87d213afa88ebf1bbc762b02d0b516ff7b71
-
Filesize
16KB
MD5fc59b696a1abae68bc3948300402d34e
SHA15085eb4c0b6667eb087adda898ce9a1dd2142b1e
SHA256a27b2185eb1589e9a6a49b013e767517ea8cd4efd4ce60ae224a94729b31b0b6
SHA512839a8717b7d0ec645a8dc78e91360c89ad37d17cb827bb1f04935813bb3918c13280c65ebef08bb7a9e083ac192d92db4437e805aa37d642bb7210ef7c0352c7
-
Filesize
16KB
MD552a8ad2fb97e90edccfe6aee3e887d4d
SHA1b6b9a7a0b912946f1061381abdcc9b5421707ef7
SHA25639a75b715b495b79d39269fcc7eb5e12c18b2be8e891cefd0cf2791267b46a86
SHA5121c5c7ecfd74a170469a7b55eccfb050d6fa69966d83cb56ed53b8d7dcaa0787f8cd88df134a1f37c19b83d0b051b82073660301518bc189381dc804bb922a954
-
Filesize
16KB
MD508ab5e3344fb9104c5b436d1b6688018
SHA10badf640da6db214862198d0c7a0d465e9f3426a
SHA256a76fef05b828f29d670b5bdeeb87c5af5f70ff92db6f24db71e6967765d18ffd
SHA512e6567e1eb0af893f065d57944f5ff619d6a9369bce4352ef71ebec58737516fccf90d477e3f8b0e417ea7ce93db6010e7946fd162199ccdfad274a470ac620f3
-
Filesize
8KB
MD5f87cd2acf35457755370ecf77467b47a
SHA114396454d7ce0735d1f8231c15a03bb4b45d1817
SHA2565cd0431b66f3ea5e12794a27c4fcf4b38edc2d764e052db469301fc46f9f9e45
SHA512064247a1a4f9c21acdca3ea9ae716840bdaddc3065f78864e45ab9fca28504c31d815632427c0b8ef87af97c562ef1be7b4939097a9617c73a86618f0631af29
-
Filesize
8KB
MD58566389abed73ecfabe8e101766ac9dd
SHA1c2c812bf85b41b3a929cef2fdb88b380c47fe456
SHA2562cbb33d773e7c56bedee69d0475abbec4e7a0bb9e9e764c15218b39e88ebdb3e
SHA5120c6dfd22753725428962ee1126a58828d3206e7e83f2dc152ac00378a039f90c34cf72e0e2a691d14c63f172bb6ed99a292647396e3230e5031b01553dd3c69f
-
Filesize
8KB
MD5a27c16465d87ce8051f0810f2a528d36
SHA1a62e79ab8c04e90cd87260972847c3c233c85a52
SHA25605bdd687adc097620eb0fa9fecba50e8e626ab1279e6e27b10a7ae0a3cc51cd0
SHA512e6229e283a25aa780b6b521a0e47023930aab2d7b9600cb2bce28ac381970aeca82383fe67e6e84f15de26be37c7185dfc386c0ed1a13701c735dfcb580f497c
-
Filesize
8KB
MD5505828a80d3d0ab44a1634e45504e273
SHA1492882f795862e99e204c58732ba4d8cfc5a79df
SHA256f9e6e0894db50462970eb782c9fabb66688d31b88ff7da26a79cf213808f61a8
SHA5129702193ea7266382d535fcbb1e0aee5f07d99e8faadf66f7ef93ab7831a6ed4eff327e774b4628261a7e585c4f901d015ed3b4f5f305dca6de6f2d76f2b2e8c8
-
Filesize
8KB
MD53d95b865e5061c3c03ba181be7ce526e
SHA155fb64db63386d06a1343e163d52941b9bc6c9c4
SHA25659a5915efee2eb62e682ac3a225561f6627f242adb56cf830767869081f04f70
SHA512650bd4b01cc7fe39fa42a95b38e3bad3e75ace8bead416baa6cab855ff038bcc8690da449e37842c805a1fed34120404a0d29cc38ac8e180f6c456cf293ae079
-
Filesize
8KB
MD5afe49cd64e39fbc4aed685dff025cb46
SHA1c1f188d56fded33260bd5fea25693c9ea1a7167b
SHA256eab42fa061b51721d9094ed9fea827959773e06cb6b66b7daba608ad28dbd73c
SHA5126a9fe3dab53c7eb5e036ae044a121fc6e4e33c02f0a38730524d4ea07f418aa12f134f6a0258dd7b714c3405a008621e2de33eb24431a514657934d79ffbc195
-
Filesize
32B
MD5b9185ccc153417ddf1ae0e52bf8dca3c
SHA1cc3e35a33e8c1ed333349a58267c1a7e43483f90
SHA2565035df0dcaa7d86d046373b79032e8a46c5dccedf9af0bd0a167d93af323f412
SHA512cf666cc53bf8370bb160c5c2d5082a80c5e2d84828f99aeec7c1ad2a8eeb0afe693b17ffec860955612cba4e4921d3fb8d96ac226603fc0850f3605dc3ed8592
-
Filesize
24B
MD57d840b1d829b9b00f50e4d21ebafddad
SHA1c66e3d20f4c40ae5632e010df1ca93d9d16baf1c
SHA256f2d94fde13faadd882d895c981e50edfd2f441703c81b17ef842c8eacf4f4eaa
SHA512e5d21d9dd4c480112798e0be229db8c41ed3dc31822fc6a49ac5dfac2aad03c59d3b3d61c4555dc03426e72873b88f008343107f7fd02cc4addd23777298cb33
-
Filesize
24B
MD572608da9108faa8ac08989db671b3e46
SHA12120c7bb162c7c235a3d8eadc4f69af991ab5676
SHA256c8334ed3175ca316ac9e076884f9581ba91b0fb4e3b508d1cf8b45caaf7ae70d
SHA51272cacef6c650c39d4f5b3b753969a760f84db1fac953ae739ca6d778abc32b8041bd16d38e8b45840ca84282a103b88e3fa4d2e122f1603878af4f1aac9adb12
-
Filesize
360B
MD52e267ba4c3c366166869f745f92ad06a
SHA167cff48bc43d58a0a265a3cd8328c55f18c31daf
SHA2564ea3b8c458b0e8feeb4c17ad831f718bc4028edc0a985cf08c6e064888073112
SHA51236fc0c24d3f8d746f6fffce94efe48994f6a95349b7df4e301b22bff3a184a686f4381353fc010f24886973a2b76732fa6f85985a6494b31ddf57ee9cb2978fd
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2