Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    03/11/2024, 02:36

General

  • Target

    893a1f486715b1052900e52cad0747f9_JaffaCakes118.apk

  • Size

    3.4MB

  • MD5

    893a1f486715b1052900e52cad0747f9

  • SHA1

    d288b802292628a3b0d2572f0178c4eab723515e

  • SHA256

    e8021f5725bc0cd7cebf4d771c4e6c5af37bbefa2b3dd623f20fa9e172753e58

  • SHA512

    0cd2f470e36f24cfb95d81be752d5e38e22f6bd41f95f1fe8442c19e5a51190e78caf051c4ed9a3577857badb8bf1117a1d2ed31e158fd8f90dc3d9ef944474d

  • SSDEEP

    98304:eibGOeNUyD+b9a4063RwGTUgpM7TeT0Czh6Ru2ijtkKjGrI4hjf6g6:XYNdDD8KGT8OT0CBfIhjfg

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Reads the content of SMS inbox messages. 1 TTPs 3 IoCs
  • Reads the content of the SMS messages. 1 TTPs 1 IoCs
  • Requests cell location 1 TTPs 3 IoCs

    Uses Android APIs to to get current cell information.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 3 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.ijiehun.tcmn.zimon
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Reads the content of SMS inbox messages.
    • Reads the content of the SMS messages.
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4241
    • chmod 666 /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.main.apk
      2⤵
        PID:4351
      • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench92420/apk.zip --output-vdex-fd=69 --oat-fd=72 --oat-location=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench92420/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
        2⤵
        • Loads dropped Dex/Jar
        PID:4370
      • chmod 666 /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.smspay.apk
        2⤵
          PID:4436
        • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench81368/apk.zip --output-vdex-fd=64 --oat-fd=68 --oat-location=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench81368/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
          2⤵
          • Loads dropped Dex/Jar
          PID:4454
        • chmod 666 /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.recordupload.apk
          2⤵
            PID:4483
          • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench70316/apk.zip --output-vdex-fd=84 --oat-fd=85 --oat-location=/data/user/0/com.ijiehun.tcmn.zimon/app_workbench70316/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
            2⤵
            • Loads dropped Dex/Jar
            PID:4503
        • com.ijiehun.tcmn.zimon:pushservice
          1⤵
          • Reads the content of SMS inbox messages.
          • Acquires the wake lock
          • Queries information about active data network
          • Registers a broadcast receiver at runtime (usually for listening for system events)
          PID:4301
        • com.ijiehun.tcmn.zimon:remote
          1⤵
          • Queries information about the current nearby Wi-Fi networks
          • Reads the content of SMS inbox messages.
          • Requests cell location
          • Queries information about active data network
          • Queries information about the current Wi-Fi connection
          • Registers a broadcast receiver at runtime (usually for listening for system events)
          PID:4329

        Network

              MITRE ATT&CK Mobile v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.ijiehun.tcmn.zimon/app_workbench70316/apk.zip

                Filesize

                33KB

                MD5

                4b8840d88282bde1f62e77a79b0d81b8

                SHA1

                b20b2c503b922f829f21a4e84b382793e44736eb

                SHA256

                92bf450ac00d08161d419e007a98fdb27ef75f1ef81bee7daacc15a4fb1ce373

                SHA512

                9568e5379ed25dfdc2be1f09528dcd0592bdda6f5abee06449f1e9eb767b6fe5f23b22515617a2cf025c91378e814a08ada368d82ed23f93b498abc6a299027b

              • /data/data/com.ijiehun.tcmn.zimon/app_workbench70316/oat/apk.zip.cur.prof

                Filesize

                220B

                MD5

                ac97742872d43a050cbc234647b6cd9e

                SHA1

                4e93d4795db34ed732887d1e4fd900cc4072823b

                SHA256

                493950e2d6f350744f0d7f4b19a675d5e809e8992b6b8b9273f2abc984c23b37

                SHA512

                5fd9d8432529563c445284f4c8e8691259f30de83b1108264b4594020f517edb23e349dd91b383bae83abd061088a1930a94b85ac5aef6b8c64a472b4ec499d1

              • /data/data/com.ijiehun.tcmn.zimon/app_workbench81368/oat/apk.zip.cur.prof

                Filesize

                234B

                MD5

                947337c8a37efd664b2fe99b6e6d484d

                SHA1

                8d176ee49ee055847b008b001d2209d9936ed887

                SHA256

                192a30bdd83dd718c07bdbdd47aba0a6e874337d543f3f717c3b0506dabd3928

                SHA512

                ee0983a54f31ba4b1143f5da0ef16678d49fb6491b8808c2046a96f3270440c745b4ba57b7ca61cb13b6aa9c898e06b8405eec05f9f2b71d4d664fc92a491ad4

              • /data/data/com.ijiehun.tcmn.zimon/app_workbench92420/apk.zip

                Filesize

                52KB

                MD5

                d2c240e94e0ae128f30780cad1e01a2d

                SHA1

                f621faf08c22d33c994c2be866a206f21ccd08c4

                SHA256

                69d6d3c3d93cb8cd1918479f3c195e5771556751f079ab899b40cbc0bf784773

                SHA512

                5fea51708a643d7097daa0f4e2fb02228496c8cf8e10cb7116a11fdee52d770f927223af0481c0e584d3e4e0455671f086eda6cace9c0a0c478603bed1b8e4e8

              • /data/data/com.ijiehun.tcmn.zimon/app_workbench92420/oat/apk.zip.cur.prof

                Filesize

                371B

                MD5

                a1e1553cb9206ef952b40f67b7678e4e

                SHA1

                9bd11567c0db1cebc60175c5a86db03fcc23b9e6

                SHA256

                47bb2b50c8865f05d88ca014ec32bda7881de72b19db7f44447049d4171f95d9

                SHA512

                0d2ff57237099d51c5618864fc2dd2d471199d1f9bcf5cf9c9e34a0f534071f278968098fd6da8c67c90f9eb6a2121bfc544f8d116c55372b83329b93bdb239c

              • /data/data/com.ijiehun.tcmn.zimon/databases/Data_sync.db

                Filesize

                44KB

                MD5

                9e46296abd9671544c86897bd6279d05

                SHA1

                9bebb854898ddeaf5ea435f2e8402c0900f65acc

                SHA256

                ab005d005b39cc485a5ea651c01257b948b429954c52bcea1deb5dabec88b4ad

                SHA512

                3c0883657dbe73068e4ff17e1b8895f6650b74f8f6593249e5b57befeee127c2e03aeea522596d69428a4a7c87978a9d5f225fb11c759e59caf6fe49b6cb7d41

              • /data/data/com.ijiehun.tcmn.zimon/databases/Data_sync.db-journal

                Filesize

                512B

                MD5

                7eee1e378183b5429854cb8817b33c33

                SHA1

                2ef1910793d26a1c12be4a4025ac4669a5db54d2

                SHA256

                3ed896688249b314cf5863fe06a6f93fa89c121c6c7004d32d58fb015f7af1f5

                SHA512

                5d5a391a10edc952e5dcc3c9c2760ca7a0a2acf952b06294dd5a171e1bc68fee387f3d701ac1cef56432fc7dc6f31b3bc3d8e13c58cd442a2801286a24afd64b

              • /data/data/com.ijiehun.tcmn.zimon/databases/Data_sync.db-wal

                Filesize

                410KB

                MD5

                6f8bc4b4032d44d139976df0a317a899

                SHA1

                e7e7aecfc64c6d68ee6eabad57cb4ff7d2016ad5

                SHA256

                1123e60cb5bd4346ec79bcbe5cb65fd3039700de0db456847e4619b0819e4677

                SHA512

                d7eef5e2d7ce6192c5cd3c1f531e0f3672270f9eca0639243eaa9a5f831fd2fd10f4dad8658f7bc3467b39f660ccac79e4d46cfafb52b3ba11ac2c9c33b450ad

              • /data/data/com.ijiehun.tcmn.zimon/databases/ijiehundb.db-journal

                Filesize

                512B

                MD5

                9c8383aac0faee2940a872d85759a7df

                SHA1

                666ab41cfd158e65be0ac6469612cb57c486e2d1

                SHA256

                c6f8c03a52c091a046ef1d0bc51ad06f2a01937164f676fc169fbe73c37ce410

                SHA512

                1630805197b242a3251f62d4dae546a99b8f53dab3f079cfe112c84e15e89c8397c8dc6b49aa9fabf9b10076596f2d0588e358a93293620f772823dce3b33ae0

              • /data/data/com.ijiehun.tcmn.zimon/databases/pushsdk.db-journal

                Filesize

                512B

                MD5

                02201106109ca01f289221abc5afa4da

                SHA1

                3e27c69bf62b971efd43594a3459a5e8a93aad11

                SHA256

                9ca51495e92d190070a569ad02a986d35e83e1f6cbaeacb50b8f00c7ac3d708d

                SHA512

                b381445e88bc4443799a0c60f3a4bcaf31c8af798478cf2153c3a6e751e217957c7f40072e4d3b4ea6706761b674a6d63f5b9a4d1626dee705dc97aa43c8f020

              • /data/data/com.ijiehun.tcmn.zimon/files/classes.dex

                Filesize

                3.2MB

                MD5

                7fecfe56a65a35ef7446b3e6a6b5e68a

                SHA1

                8c2d91c3cc219af11c3178ea3db24471b045d897

                SHA256

                4b9f72b1e678a8cf79d6a066d5a24090484337a12746377dfce6955e66580412

                SHA512

                69d871f71f7425fa65d1f8bce4aae3b3c7ba53c1e7d90ea071cecc2e2257b201044d599c8a1604fc2079e06b0bbd9aa4fedd1e83a23ac335baa730943a0f8358

              • /data/data/com.ijiehun.tcmn.zimon/files/lib/so/libyummy1730601428761.so

                Filesize

                515KB

                MD5

                f694c22726bfeaa847291d2d41710aa5

                SHA1

                85a1e2da8829f2ef415fcdd5f354fcb3a04232ee

                SHA256

                5b2806af24ee1f986bc7ea9759c4f38f0af7b5455db114514e6b2378bf210e11

                SHA512

                5d86dac9b72333d8c14f3df567b6003ac1c991678bfa8ac0d2118fbade4ab0dd4550b4858bd53e506182626bd669d6ab674d9cd338fc1447b7eb9ac2b0aea545

              • /data/data/com.ijiehun.tcmn.zimon/files/lldt/firll.dat

                Filesize

                56B

                MD5

                772c8fad5c82337ba4bdffe3a2746952

                SHA1

                164651bc46500355b59c08b79723d96a2a1a380c

                SHA256

                fd36ffda5091073af3aa5b3c4be7a0c46a39d2c27082ba9a136de608cc674245

                SHA512

                ab395666da3107324bd577eee4cba8dcc48b80f185ed24a9c8fb035a65e33a018519c488d8dc7b8aec39ce302c6bcb7343a3a0567e29370560f4bf90c2bc99d0

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench70316/apk.zip

                Filesize

                78KB

                MD5

                ea2c56e01d4d4803ad4fe0a432156f53

                SHA1

                d74571d110071290ac0aceeab2506407aa89fe58

                SHA256

                6335d32862b6562b5d1794d81255fc6c0a1bf293c4467134e75aa3e6693af628

                SHA512

                fe608c26d7ad3d0afd07bc044b7959af382517456612ad5942bcafca9fca6f4ada465991337cac8a50efbac0544aba34c29df6730b9363aaf91dbca18bdd4cd0

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench70316/apk.zip

                Filesize

                78KB

                MD5

                7a361eed4e47494e4e01399c006386e5

                SHA1

                e1f751886a31c11517062cd4c9e8035da14ae861

                SHA256

                7685dd09172ea69e8514df9d9147e41b3db044b92e38a6bf9ee93e871eae3abc

                SHA512

                3dd8449b4a46d6811bad7f919215cffaac2a17dd33f414ff1735be4c9417c4011aee2481b6752905461a8b1bd910d88687fbf9f938ed914090cafc818937c97f

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench81368/apk.zip

                Filesize

                445KB

                MD5

                5691f7b43e5e85c5bb8c8686401d6bee

                SHA1

                505c6f3ee485bcc43713ea7a95bdcc2bd877dc82

                SHA256

                db249c66c85777c2bdf50a7b4d141fe8d44d10e9ea753e1a84a9b45815701ecf

                SHA512

                ebb8e598b714bab571be88f2fdad74e211f384fb60d75473ae073a8e5d0382a5cff38610232c72052e5386fd16f0215db415b6029a19716a42ef2e05255f6910

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench81368/apk.zip

                Filesize

                445KB

                MD5

                ec5bd8f7d54164d97c1f187fdd2b25e2

                SHA1

                ccdd9d9fdae3c9f14482a50357424db5bb2e8959

                SHA256

                d8d29e6481959a97b321fee29dd0f75f4e29079d6abf26d6c9726c68a0f46e88

                SHA512

                445b3c26db9bbb0dc9ffb0e5348feb77bf7c63c9fb4513c051cf9db230c824967dbac987d8b943fbd9cd155f170827ebd6414a383754dc5e76d758c439f14429

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench92420/apk.zip

                Filesize

                121KB

                MD5

                7d22fd28f6117a3e63b22ee8e551d146

                SHA1

                acd579d2b0c151a143c390132a275cc2fe367129

                SHA256

                f0c6a6b5bf208ec3583674fd513a4540d7a14f3efbdfc7723400495099b61fa2

                SHA512

                c2a27e57d7135ad4cc16f328f86144014485dfd76218df963f96800aee38fb35e2f3e8ecbce3807a9facf6581fb940980583e98485cb5714cdf1626ca1097901

              • /data/user/0/com.ijiehun.tcmn.zimon/app_workbench92420/apk.zip

                Filesize

                121KB

                MD5

                e21aefab9a36af0bcc31c591915e6c89

                SHA1

                b0a4984c5d4a053b44f28994c4eeee4c925b11b7

                SHA256

                64c88bd9d7ac8b3d4ce115db92d8380889f2fee4a666fefa2a9a5900b346eee8

                SHA512

                9181e01087d05d5d70ed06cb4848e6173162ad2dda5a88bce6b0a2bcfc41c73f1fbd6cb98fdc9cd317eb77f6107102b04d2f174ed1b2c6a789de0171d7649901

              • /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.main.apk

                Filesize

                92KB

                MD5

                f06548d9f381c7faea3de1d5d5fe2511

                SHA1

                88568e4a7e3d447e18f6f6d8d9e24e2b8648f112

                SHA256

                5020c33f58cdd5d4bdb484ffc058f424d48bc39a8ada569a23232f1623db97a9

                SHA512

                e25c50362f34d7cc414a7680f8b30ec41105806b2882315f6eac3d86ca165e3275b0f28d587c69d64cea530e6ca8caddc334b828868caf391d282fab12dc47f6

              • /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.smspay.apk

                Filesize

                572KB

                MD5

                9c67cab273960eadfc0ee5024e457c13

                SHA1

                f840f68a743a5f440a248ccbe0873fe06b481a0a

                SHA256

                ddbf8be53798214874c27063dac8a9cebed6fd096af3275ff8d5f9840e2f795b

                SHA512

                36692ca7e6317992063890e5169d537649bc72ad20f48ffc2a20500e59adc01c4c22b77d4c58a99d5e66be7b3af74af411ecfaa493335c19b1a4b61329aabb72

              • /storage/emulated/0/baidu/.cuid

                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /storage/emulated/0/baidu/tempdata/conlts.dat

                Filesize

                173KB

                MD5

                4b92939025036a559e6ce11ae7a36c13

                SHA1

                2f1448b4a793489643a398ecf6a04852273f43b4

                SHA256

                96b319c06d352f45d9b69ff7cf399056a8f26034d31a90b142f9259d09df825a

                SHA512

                227bc54c61e60efdca45217b21a11c05a5d8b85d861e3f6cb8e436d7699d4fe86a9fc20b55455431ced76a48e609950585f423ea29fb19647537e8e51474d9cd

              • /storage/emulated/0/baidu/tempdata/lcvif.dat

                Filesize

                96B

                MD5

                81fbe135dcc257376a621a805f1f47e8

                SHA1

                7621e1dd8745fe6de9b68728351a7d34aebe3e5f

                SHA256

                a63ccfd51b9549c9283e22ea27ca608e90ff76ee5abb991c0bedd3fbf65aa9d1

                SHA512

                6ae7b7945b4362b9f62d461397f6a67d50bf3e94100b21e1596fa60c6a5fc4d2941750cbff0b206c4eda983c10d9aea9e4043ecbb14fa99121002b289c6e2658

              • /storage/emulated/0/baidu/tempdata/lcvif.dat

                Filesize

                96B

                MD5

                065f10fdfc05c23b6c64a5527e823dc8

                SHA1

                7d01964fdd9dc9eff09b085508891569c78c21c0

                SHA256

                6570fbdb962448c066b5932aed910a8052c0812ea68118d530544201b60c13b8

                SHA512

                401136a2a44a10a24a8c7705b95622549a76b88b8da71e270049f5af80075a34e10dd380037afbe11131f5d7daa97dcfc62401ac61c5df58191413be6fb5616a

              • /storage/emulated/0/baidu/tempdata/ls.db-shm

                Filesize

                28KB

                MD5

                cf845a781c107ec1346e849c9dd1b7e8

                SHA1

                b44ccc7f7d519352422e59ee8b0bdbac881768a7

                SHA256

                18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                SHA512

                4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

              • /storage/emulated/0/baidu/tempdata/yoh.dat

                Filesize

                24B

                MD5

                a936690571e9104e1922dda4a0ba5bd1

                SHA1

                65f49c57edde2f96be2a1dbdfc3f7351f1e66554

                SHA256

                f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

                SHA512

                3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

              • /storage/emulated/0/baidu/tempdata/yol.dat

                Filesize

                38KB

                MD5

                55c24dc00f667f62ee0cc0dfca41fc28

                SHA1

                1811dd0ba5f5bdfeef743332b7ef1b8e4097a23c

                SHA256

                8199c84eb1412ac9f13edc3bff4cd66e788847143bd0c8497ce7f699a0d68e77

                SHA512

                b5a5269065f4bcf05c560315255c49dc7eafc015458eca425f6b44eec0ee74c3e1d481e06df70deca25056a8fd070efb5adcf364061a8e5c1e26fb8e102caf69

              • /storage/emulated/0/baidu/tempdata/yom.dat

                Filesize

                40KB

                MD5

                478f527e1a074d19892cf017489dca64

                SHA1

                76e4f87ad054bbaf0d32242327fa30db3985bd28

                SHA256

                58b849fce81b041841d75ae3904f64297b20d6738634ba1c88da609d9996a5ed

                SHA512

                25fce920e5bed423ed76d10eae6b74365fb9cbc7325f525fb7ce9ce4ec52e1fe7c3fcc571fb0f37b9617ffd1d5aa7bd5d2475996ff5b81ed11886fc8d5d2d7dd

              • /storage/emulated/0/baidu/tempdata/yom.dat

                Filesize

                32KB

                MD5

                bb7df04e1b0a2570657527a7e108ae23

                SHA1

                5188431849b4613152fd7bdba6a3ff0a4fd6424b

                SHA256

                c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                SHA512

                768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012