Analysis
-
max time kernel
65s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
25-08-2024 16:07
Behavioral task
behavioral1
Sample
app-game-release.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
app-game-release.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
app-game-release.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
app-game-release.apk
Resource
android-x86-arm-20240624-en
General
-
Target
app-game-release.apk
-
Size
28.0MB
-
MD5
51c256e21b7887bf60e6ff29ae6318b3
-
SHA1
999821825c9e3c80ebdae3b5983adc24d492ab93
-
SHA256
fe17c0b4f2513f8f7d94955bdef74fdde45c32bc9d705c1b7c63ba2a6682e2a3
-
SHA512
98d83f5c33671920441185297c41fa8edff1df2fc97a3f66d9027d76c0b47df3240abf396a692798422a53c5359a83897bc649bb80e7a82076a4367b590e21bc
-
SSDEEP
786432:Is/maHbBCZX/lhts9TFD3j43MJUkVVahzhAjSWxOM:IMR7B0XNhCk3CU1hVISWcM
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
Processes:
ro.alyn_sampmobile.gameioc Process /system/app/Superuser.apk ro.alyn_sampmobile.game /system/xbin/su ro.alyn_sampmobile.game /sbin/su ro.alyn_sampmobile.game -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
ro.alyn_sampmobile.gamedescription ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses ro.alyn_sampmobile.game -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
ro.alyn_sampmobile.gamedescription ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ro.alyn_sampmobile.game -
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
ro.alyn_sampmobile.gamedescription ioc Process Framework API call android.hardware.SensorManager.registerListener ro.alyn_sampmobile.game -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
ro.alyn_sampmobile.gamedescription ioc Process Framework service call android.app.IActivityManager.registerReceiver ro.alyn_sampmobile.game -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
ro.alyn_sampmobile.gamedescription ioc Process Framework service call android.app.job.IJobScheduler.schedule ro.alyn_sampmobile.game
Processes
-
ro.alyn_sampmobile.game1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
PID:4253 -
logcat -c2⤵PID:4320
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5e9a33eab775a460bb811563681fe1d4f
SHA13f50c146ed4a5215a4543e115d6689768351c0f4
SHA256bc8c92569e8645ad646b4ffa7de20782d94682997c505cc481ea02b4882199ae
SHA512a6922b71c268252500b0d1325ceaa80ada36c1e0f06c02dde3ae07697196615eca8666206ea47fc5e5d4634d4ba965b21fb3ffbaaac03d06f8b15519328ad68d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
120KB
MD596dd94ac5e2db514331d438a61c30363
SHA1df29fd0b3acaf2f5b9638922d0f465946163532a
SHA256fdfda554ee96714fd965051dc5e3dc1173d5efc8a097451a74fdabc28051c390
SHA5126ae556f9cbcc0ebfce6fbbfe915b8684f8352d683c553e794f6cbe8c4e9c79eb8fd0fd879ac27521151efa61af4be5d0d6a106551e2ee1bfab6e8376d9fe1d82
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5442aea7d776fbfbf5aa7a7a4f49ca2bd
SHA18f07602062430f23cf08caeaeb096faa7e7e1dab
SHA2568b72716f099b042033691c1b65b75d59a2b15746a51aea2679f40772b85fdf5c
SHA512026bc6bf86807c6c4862aa55718f680b8045622231a3eb508a7be17ac30373895320154c1fa3fcec75bc9745abc0ffc6fec55eee6d97f31a7b04fbe430af5528
-
Filesize
16KB
MD5dd0d14118f47764c1d91c7195e202a34
SHA10edd8c78a843314f40c9c72c2e8df3c71956d10d
SHA256610a1fd35a704691555865562c09c64060ccd63f61eb9d4c2fe7481080206b31
SHA5125f766d7b3a229c677b97daf74c6d52beaa66bc93eb91542d4f5cf76826229321c08093e97f63cb4fcda48bf098afb0a766fc7e9693d5ac4359cbf06afc41fcc7
-
Filesize
16KB
MD57a49412f815d045ca945f5888db916c3
SHA16176b734e9c11f365df064a9a9f16c1591e1f6b2
SHA25672b270255c223b0b963c12da3034c709eb968ed8f25b499ae023bfc1b9594bcb
SHA51223a15a3ade0a4de0c31bda1005254e84578050cf0b7dd4a182443954a6b820c7b772cd1b428db417f0c44eaf9683304c630861af89dc2610112e87286e6c203d
-
Filesize
16KB
MD57aedd292a5c5692e234ed2e4f8587ebc
SHA190a6a29c28bfc5a0f96254fc8a48f6420ad4d7b9
SHA25653c89841008ed0a8f78aa2fa0c2bc2eff29d1c3babde4924c6f9a423e9796262
SHA512ff9b8511cd2e6acfb5ae32d334dc433cd1706e6da6f3fa0e00634fe40bfc88dd2c39325407d556f58461b5216d7e3e47da0beada86af7de0c565159301d9e68c
-
Filesize
16KB
MD56626783af72a0ccdceace420b7e7e50f
SHA1b902a217ee0cf292c54c17e85c1ae8d11fa8812a
SHA25682561f2414a061fb1151f505c883b3890c63e28bdad0535b6e89eeea0365c139
SHA512793d8e1373c1818fa8baed46f4c2981b29cf2826935602efb825924cfa6534765f0204a7f9217fc87f5d82787e059cc97a2a1e935fe02183f116fbfc0487776b
-
Filesize
512B
MD58b5c395ab585eaace5f0fc9c68fd2b52
SHA1c0551e2a95961d22e8dce414b8d178c9a6980e42
SHA256669d64e401bb1f56b1470ef6b8a455d616ae66334ed74cbe1684185605f66436
SHA512f77891c9069b802fef7f3b22d90904367ad484328e65add08374e2d1a88152362f89755d3d063f181127da6754a4021cadddf58171857d71df4b0886b5c4cee8
-
Filesize
36KB
MD5bd1a4764fbeaf3aad917e36e4de360a4
SHA15dc9f3abbc14efa19659d40530549f43e0b4583c
SHA2569bf65118108df7a61702447979aa408e6153f789dde6dd2bbb67433167f4fc97
SHA5123328f1ec07f7be626ed2e61d45ef1d1a080ce3b8d4b1f864791230ece07064fb4673e2677aa0e7003a71a28de5fd9ae3dd74eabfded787fac4dce895e026b2aa
-
Filesize
4KB
MD5895698a9c1607f31d9d58cef3c23c783
SHA10a804dd60f7af332f42c546fdd1333b2afbc9430
SHA256edd88dd1e57016002dbb72bdb78e0bb013317069b71959bac27f733c4ea450e4
SHA5125f6bbd3c3b3d6da87d5ed6b2a4fb35789512ceef5631f9166a6ab2a0eedb9efa5b18884962eecda9eabea589aa3d9b5426ae3399c5ba9c818d6090203a795b98
-
Filesize
4KB
MD54c746a8a9f074065af634b4a0bdd2483
SHA13573892582cafd4dca753216e96278c39cd54626
SHA2562224d0212ceae77de0507ac04e813fe3720bdf9cb8e5175e31e5a65467be1582
SHA512bb23910d985aa38594aa823cd55760fe2789bff72337b81e18b324f619f5d4f319261a83ebbbff354111fff72b03983da35976bb00acf59b24d8280aad27fdca
-
Filesize
4KB
MD5012a302f7108ffb60d46999cb69c7238
SHA1d8981bed1df617af239a838b5b3010942dff08b1
SHA256c4889fb42a7e3518afd00b7ab714e340bdecec8716b616afc2183a4ac0b551a9
SHA512ba0329c1a98f5ff094c622d1532a3fe4e2a9df0b0426cecad6b9f9a4dee90c326d877da07a59609796b1ebbff7ba5ac08eaf501ba9f2fbd1916987d1e45a5271
-
Filesize
4KB
MD501e6b6354898d198646c6993887698be
SHA1746f719c3e472449637a48260d7e9e96405a2903
SHA256f7825a6c5143cbff288dd415d805f1bb9b470a555770389acd203932ec62627d
SHA5123a18cf41984f22bf984f446421eda3e9c68b8b3f64f272ee31de91f4226f0a7a12d657e02f0e4717c2d730f21e88d4b1e66728288b7bcfe0ffdec6e7ee3846a9
-
Filesize
4KB
MD5f135a82c6d7ff69a401326eab0d31d51
SHA1d804f76b5bdb9f40bbfe81a10f3e8832a0e66f77
SHA256144a18d313b22a1ff5de797891db29a2395d801841453e26867c26a260d4bf3e
SHA512831f81ae93a0bdab5f85a1e347e3441b1f34304683d070a2f96b2c3e11b99750f26e43f2c7d586071acd94afcde504200366092fa6ac9971f563e78017862611
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/com.crashlytics.settings.json
Filesize719B
MD554856e7a4a9815983d4a7a39ff55c2bb
SHA1d0d20cdac6ab455b5be5dafddbeb60b44a56571e
SHA256560cac5bbc990cf117b5bfbd84407f2a5a979231c6fb705f69b920641a9ce25b
SHA51244311082cf3187710a6ecde732cc4366a68f4b420ecc5710b94512dfa1482d99b43ffdef3e0efe38912d417fa5190feb817ba445f6eaec9a2299216195b74e11
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/native/app.json
Filesize220B
MD54df0d95d981d929f220d95f3ea01edb2
SHA11285b9f45296c6e374454c8d2afc1ac456ae5ad9
SHA25642d45de5301ee46ad1e2b9d45d912bef2ae0e836e6ed13e830d7ca624ecce772
SHA512874f6f9608d930f3952fa9cbe643821466514f36f984f956f3fe61a9b200a386bd1e97fbeb5adabbc1f794181908dd8d1a735dcb5a2f4e53e3fdc1a2263e24c0
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/native/device.json
Filesize193B
MD5488b1489ac4d3b89d10d3f873727ee41
SHA1f65273aa79f9d0205c11dcaaf257457d85a68ed9
SHA25625189431ccb3f67616108f0cafbb993d864566d63fc9c19b3e1b86f863a7c54e
SHA5127493d142c751abfea8b4088f8cb72491ff48864cc2ab189d63a38a57ad5babb475c44165775834620a877aec7781f2247f59bd3427c27d2e805797de25522b59
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/native/os.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/native/session.json
Filesize127B
MD5147209d33d28e10e87b253f7e8da6d60
SHA1b4270fca12017509e558949bd6dd6480da76ad3e
SHA25617c6950ba40362708baf61f439eeb5e90cf88a6a083de240c769db6e8b263fa5
SHA512482ff339c9f4ab5ec058d258f71a7bdf20267ea5b1575850f9af8ebb87cb9381e5007cea39369305a0f9846d18abb45d4a152e0aa930c5eba1686a9aee935618
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/report
Filesize795B
MD5dc3c5d5921c009e636626b29fab8f74d
SHA148a2b0a873ed483503410e9042dca765632a88eb
SHA256829b4333fad8702e1b04a167a571368d17e9280b460c19741d0e1c7aa9b2739e
SHA512189721097fd3e6356d6dbe1a2277fd71bf8031c6ca989654f00e504efbb62aaa0aba71980d294c763c3130d6bb7d62c61a9e62ba5d7ee0f13d22cf183db48b85
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/userlog
Filesize192B
MD532e32a75bdeff6976cd686505701c99b
SHA12a9c44d494eb76505af5ccab7e0a3ac5a5805f74
SHA25669b906e19f9e239861a302654124a3ffaf6c046d5bb51acef8716d798397e521
SHA512a92d37bef23a24e20ac022d5c59c0eefc173a44c24c5a69b67237de3d97bacb25e33a824975a9c8f69aa9e0e44b3b2479205cbc819e118b66cac696aa25f3e0d
-
/data/data/ro.alyn_sampmobile.game/files/.com.google.firebase.crashlytics.files.v2:ro.alyn_sampmobile.game/open-sessions/66CB5718002B0001109D9E8D83935B4B/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
567B
MD5015dd31ea03fe80e572ae878e9e43426
SHA15798629f8158fab0a818b16ee0b346988986ef82
SHA256ef329b0e0015ecf27b221ee1f5ef8746243efa13f426d000988492ab3c824c15
SHA512793991972027dffb49629b1a0431381dacbca6fadca915dcda14f3f004c5c9dc8238b63b61b2dd0f9b544ea84e00e24b358eacb95e1fa85b8cfc9b19388cb33e
-
Filesize
90B
MD5074ee6ad4f72900e65c8f5359a0d31cd
SHA13cba7ea879f1a8d9ef46ecf78cef605fe1bd92ce
SHA256f29e0bb9d14b2bd323408e7fcdb348f4609ade4c0d639c981fbef3c389e043e6
SHA512e52f284a8945d1da8c8dde83a188c37b701545ccb293fd5b640946f7609c70eba7c85048cbf3a4c70dc474627ceba9c33526fb6c33f99818cce7ad46deff7f24
-
Filesize
9B
MD5a5612927e7792641607f093050b775bb
SHA199216e1430784a2fc369f81e03a28e5f681735e3
SHA2564e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
SHA5123ce4dd5f437b9405ea6e4d6bcb16512c98914b2dd15a01facab5fc68126698cc37e0448fac28408560552e9688ad1b6948e0fb8c9d11f893635d20e970cd9090
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_data.preferences_pb.tmp
Filesize50B
MD50bb71fd044e736e1d0166e6a63f93396
SHA18ca183c6a748c5b91ee38a4adb4a87d8b0128380
SHA256ce1323cdc9e61c0d7f78a8893d7a6e6ebc7fa1620a706760c5aa37025333f419
SHA512d107f02fcefb8c5634dd34cb93d4385b23508fa0e21fd08ad2d37c1bc6a8bd641c71e8458434602baeb1631ad639e4785fa09073a4223c97577f1d71ebce396f
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_settings.preferences_pb.tmp
Filesize33B
MD5a65b9b3e4670dc3b48a9609f816ad531
SHA1682a73f2c248815fba0cb50c45031a53d6f8dbcf
SHA256a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
SHA5126c06e6791dd41c1c8d8e0246e9bf7fed81dbdb5e918e7dd78cc2af1f002f8a532ec28335b229a0ec5c1ee220861092cb1a7c7f4060663394e420d80ed391179e
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_settings.preferences_pb.tmp
Filesize75B
MD506bd63584cc699cbc92ade3aeab0ac42
SHA1e21167e5419847271e7f67b3b286916b8124165d
SHA2561e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
SHA512675f177e388425023df5e19cda634ab1e7673681feabfa7bb860089105353166491d15b8c86b5408833230dc5b0ac43e2b5a61e1d36ea0b40d6ce7166bfc385e
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_settings.preferences_pb.tmp
Filesize121B
MD51fbccf7b936a9b713de5d42c6d8a075d
SHA17c8bbdf9151e7f53e2675329d471e552446e9ad3
SHA256232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
SHA512b9177426b3facda6d86b5a83d05805a4dd2f5357d4979ca7282a13ce3f08ef7e7a0c5922675ada826bde264450b1b4ddcc54eea4de62249fd3eab1ec9acf32cf
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_settings.preferences_pb.tmp
Filesize163B
MD514770edbc1290230aebe82f8dcc730a0
SHA1f86874de3ff45c2dd7c982f9ada6b5fc979f082f
SHA2567495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
SHA512c6be6c93262e0c42527722af20fdd3be2c9936eb601280c36492e0bb2151bb63f88bfb150690ae361c75d01a33647c2440bb49e290af38c5c5af5a707320e3de
-
/data/data/ro.alyn_sampmobile.game/files/datastore/firebase_session_cm8uYWx5bl9zYW1wbW9iaWxlLmdhbWU=_settings.preferences_pb.tmp
Filesize212B
MD5d95dbc471d91504563d79b1d454e5bfc
SHA1a684e990384c549b937a84f4eafb4df192eda662
SHA256c0cc3839fdc734b5defc1646ff961d4a0621630ff17258c22760aecf6ff88cba
SHA512e9d3a6bc9be68d6d9fbd2a9ea5de2ae262502baf2929fcb1eeb646033c1079ed60efe580f71785a024076adfb301585314e4aa48cd941e7e4869cda2264d0767
-
Filesize
24B
MD5085e6b0c07e6e00df82d33689cc9aab6
SHA16d81f35e1e4557fe8eb69cab4bf9d70542b3d995
SHA256580bc3ade74bd9a4721c88bfdbc48be5e05724bcbb25078dd684f4cd2aac1ef0
SHA512f60557870ded52093f3dbc79db780484568e9c6765c6a2d802134e9cff2252a8788cfb5bf43c3a8d0d6f0db11dd2161e965a72b3536a3c7524aa11e10d187928
-
Filesize
8B
MD599ac9da402f89195b78f0eb18a25f24c
SHA13e88700f6ae8e00c3438e6bd2846f05a6039c2cd
SHA2563a48b70a1681bea0655aeedfb7e992485a9426b87c6ae35b80e0c2732917801d
SHA512a15a9dd857908dd554a1ec8a90ea6f50bfd12c8d7736f52f88699648c2fdb81039be96e0c4bc5400d7748b146f1ca2e164751589c0bbdd8eab3b40d01d9c97e2
-
Filesize
1KB
MD5b5185cb57ae4421ee19c6e30c678dc3d
SHA19161832d0263e3185cb6646e5f7c67a0e166596d
SHA2560b3255a410be7809a1001c1a117122c098e18c6e0dc862e0cdbade9bfdaab5c4
SHA5123941e9ec960811f59e434de7e47e5b1b8b76cef1cf254907378ddb59fb70a2c59c95f56660e1c98b33a0602a818e2b3356dee762b9553195cc3458c9fc02f00b
-
Filesize
10KB
MD577ab175776ce241feef94482a595d485
SHA189b123aa77309172052de813bca51bbf0f7ad59d
SHA25674a86d28ec167fd75f01897dac7264346e5a9e00ef835fc2a976be17f4b852e2
SHA5126a5b209af425b3d5ad893bdc15647a929074f85238cda40c39a882441cc65783d990f50be614f38fde1285bc5b76a9d2c11fe82e5212f58a73d06f2b9a71c099