Analysis

  • max time kernel
    148s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    07/11/2024, 04:36 UTC

General

  • Target

    ทางรัฐ_2024-09-09.apk

  • Size

    12.2MB

  • MD5

    55c730ee53c5219d5560f0458f597b0c

  • SHA1

    0502f8da6cdb72e4219d1419283822770e2f5dcb

  • SHA256

    b7f463544f358f027da0fdb27632d8f6a693bb6dc1eebd452267573a675d3e2d

  • SHA512

    3ee2fa06955d55b2689a25c5925efd87749db328c9330d90dcd99d51cbc6b5e7f46ea1969c065572a3aa0d44a08e830a71dbfeb5f355428f1ba2c645ab6b8ab1

  • SSDEEP

    196608:RjnYPwZmu4xX7EJIHWC3+oGxLVnu/6EL5ko1iF+EiCOGBvE2XHU7gGt6BZXKE:RmrxX7EuHWsTmRny6ELT1/1UvdWgnXn

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries account information for other applications stored on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

Processes

  • com.easy.rometelchnology
    1⤵
    • Makes use of the framework's Accessibility service
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4407
    • getprop ro.build.display.id
      2⤵
        PID:4826
      • getprop ro.build.display.id
        2⤵
          PID:4907
        • getprop ro.build.display.id
          2⤵
            PID:4938
          • getprop ro.build.display.id
            2⤵
              PID:4970
            • getprop ro.build.display.id
              2⤵
                PID:4990
              • getprop ro.build.display.id
                2⤵
                  PID:5040
                • getprop ro.build.display.id
                  2⤵
                    PID:5068
                  • getprop ro.build.display.id
                    2⤵
                      PID:5164
                    • getprop ro.build.display.id
                      2⤵
                        PID:5224
                      • getprop ro.build.display.id
                        2⤵
                          PID:5261
                        • getprop ro.build.display.id
                          2⤵
                            PID:5281
                          • getprop ro.build.display.id
                            2⤵
                              PID:5319
                            • getprop ro.build.display.id
                              2⤵
                                PID:5351
                              • getprop ro.build.display.id
                                2⤵
                                  PID:5381
                                • getprop ro.build.display.id
                                  2⤵
                                    PID:5427
                                  • getprop ro.build.display.id
                                    2⤵
                                      PID:5456
                                    • getprop ro.build.display.id
                                      2⤵
                                        PID:5475
                                      • getprop ro.build.display.id
                                        2⤵
                                          PID:5517
                                        • getprop ro.build.display.id
                                          2⤵
                                            PID:5546
                                          • getprop ro.build.display.id
                                            2⤵
                                              PID:5568
                                            • getprop ro.build.display.id
                                              2⤵
                                                PID:5607
                                              • getprop ro.build.display.id
                                                2⤵
                                                  PID:5637
                                                • getprop ro.build.display.id
                                                  2⤵
                                                    PID:5656
                                                  • getprop ro.build.display.id
                                                    2⤵
                                                      PID:5694
                                                    • getprop ro.build.display.id
                                                      2⤵
                                                        PID:5728
                                                      • getprop ro.build.display.id
                                                        2⤵
                                                          PID:5750
                                                        • getprop ro.build.display.id
                                                          2⤵
                                                            PID:5789
                                                          • getprop ro.build.display.id
                                                            2⤵
                                                              PID:5820
                                                            • getprop ro.build.display.id
                                                              2⤵
                                                                PID:5839
                                                            • com.easy.rometelchnology:main
                                                              1⤵
                                                              • Queries account information for other applications stored on the device
                                                              • Queries information about running processes on the device
                                                              • Schedules tasks to execute at a specified time
                                                              • Uses Crypto APIs (Might try to encrypt user data)
                                                              PID:4646
                                                            • com.easy.rometelchnology:s1
                                                              1⤵
                                                              • Queries account information for other applications stored on the device
                                                              • Queries information about running processes on the device
                                                              • Uses Crypto APIs (Might try to encrypt user data)
                                                              PID:4680

                                                            Network

                                                            • flag-us
                                                              DNS
                                                              semanticlocation-pa.googleapis.com
                                                              Remote address:
                                                              1.1.1.1:53
                                                              Request
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              Response
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.178.10
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.180.10
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              172.217.169.42
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              172.217.16.234
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.179.234
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.200.42
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              216.58.204.74
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.187.234
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.200.10
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              216.58.212.202
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              172.217.169.74
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              216.58.212.234
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              216.58.201.106
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              142.250.187.202
                                                              semanticlocation-pa.googleapis.com
                                                              IN A
                                                              216.58.213.10
                                                            • flag-us
                                                              DNS
                                                              www.baidu.com
                                                              Remote address:
                                                              1.1.1.1:53
                                                              Request
                                                              www.baidu.com
                                                              IN A
                                                              Response
                                                              www.baidu.com
                                                              IN CNAME
                                                              www.a.shifen.com
                                                              www.a.shifen.com
                                                              IN CNAME
                                                              www.wshifen.com
                                                              www.wshifen.com
                                                              IN A
                                                              103.235.46.96
                                                              www.wshifen.com
                                                              IN A
                                                              103.235.47.188
                                                            • flag-hk
                                                              GET
                                                              http://www.baidu.com/
                                                              Remote address:
                                                              103.235.46.96:80
                                                              Request
                                                              GET / HTTP/1.1
                                                              User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; AOSP on IA Emulator Build/PSR1.180720.122)
                                                              Host: www.baidu.com
                                                              Connection: Keep-Alive
                                                              Accept-Encoding: gzip
                                                              Response
                                                              HTTP/1.1 200 OK
                                                              Content-Encoding: gzip
                                                              Content-Length: 1108
                                                              Content-Type: text/html
                                                              Server: bfe
                                                              Date: Thu, 07 Nov 2024 04:36:58 GMT
                                                            • flag-hk
                                                              GET
                                                              http://www.baidu.com/
                                                              Remote address:
                                                              103.235.46.96:80
                                                              Request
                                                              GET / HTTP/1.1
                                                              User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
                                                              Host: www.baidu.com
                                                              Connection: Keep-Alive
                                                              Accept-Encoding: gzip
                                                              Response
                                                              HTTP/1.1 200 OK
                                                              Content-Encoding: gzip
                                                              Content-Length: 1108
                                                              Content-Type: text/html
                                                              Server: bfe
                                                              Date: Thu, 07 Nov 2024 04:37:00 GMT
                                                            • flag-us
                                                              DNS
                                                              android.apis.google.com
                                                              Remote address:
                                                              1.1.1.1:53
                                                              Request
                                                              android.apis.google.com
                                                              IN A
                                                              Response
                                                              android.apis.google.com
                                                              IN CNAME
                                                              clients.l.google.com
                                                              clients.l.google.com
                                                              IN A
                                                              142.250.200.14
                                                            • flag-hk
                                                              GET
                                                              http://www.baidu.com/
                                                              Remote address:
                                                              103.235.46.96:80
                                                              Request
                                                              GET / HTTP/1.1
                                                              User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
                                                              Host: www.baidu.com
                                                              Connection: Keep-Alive
                                                              Accept-Encoding: gzip
                                                              Response
                                                              HTTP/1.1 200 OK
                                                              Content-Encoding: gzip
                                                              Content-Length: 1108
                                                              Content-Type: text/html
                                                              Server: bfe
                                                              Date: Thu, 07 Nov 2024 04:37:03 GMT
                                                            • flag-hk
                                                              GET
                                                              http://www.baidu.com/
                                                              Remote address:
                                                              103.235.46.96:80
                                                              Request
                                                              GET / HTTP/1.1
                                                              User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
                                                              Host: www.baidu.com
                                                              Connection: Keep-Alive
                                                              Accept-Encoding: gzip
                                                              Response
                                                              HTTP/1.1 200 OK
                                                              Content-Encoding: gzip
                                                              Content-Length: 1108
                                                              Content-Type: text/html
                                                              Server: bfe
                                                              Date: Thu, 07 Nov 2024 04:37:04 GMT
                                                            • flag-us
                                                              DNS
                                                              rpc.dzky3.xyz
                                                              Remote address:
                                                              1.1.1.1:53
                                                              Request
                                                              rpc.dzky3.xyz
                                                              IN A
                                                              Response
                                                              rpc.dzky3.xyz
                                                              IN A
                                                              54.255.6.196
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=3
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=3 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:38:10 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: 1WGLYIB3IWg70rZBv8YrbHYXAKzaCBZQ
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=0
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=0 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:38:10 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: BLVpe6HqWWWjl6M84sp1viC5ONkRhlGr
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=0
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=0 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:38:39 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: 9NPDPEbky8h6pw2eauaBlWzD4a6GgK1v
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=3
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=3 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:38:39 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: CtG3qDwUGhSOMtLtc40usU5i0eHYdYHe
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=0
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=0 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:39:09 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: 0wvPyWj3B5Oi4Z10OWBuVXOpVx2xB7F0
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • flag-sg
                                                              POST
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=3
                                                              Remote address:
                                                              54.255.6.196:443
                                                              Request
                                                              POST /x/command-report?state=0&ty=3 HTTP/2.0
                                                              host: rpc.dzky3.xyz
                                                              version: 08310554-Rebuild
                                                              type: encryption
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 55
                                                              accept-encoding: gzip
                                                              user-agent: okhttp/4.11.0
                                                              Response
                                                              HTTP/2.0 200
                                                              server: nginx
                                                              date: Thu, 07 Nov 2024 04:39:09 GMT
                                                              content-type: application/json; charset=UTF-8
                                                              content-length: 185
                                                              content-encoding: gzip
                                                              vary: Accept-Encoding
                                                              x-content-type-options: nosniff
                                                              x-frame-options: SAMEORIGIN
                                                              x-request-id: VO6jd2VLbFnt73dNZeAKj35PLoAufZDq
                                                              x-xss-protection: 1; mode=block
                                                              strict-transport-security: max-age=31536000
                                                            • 103.235.46.96:80
                                                              http://www.baidu.com/
                                                              http
                                                              661 B
                                                              3.0kB
                                                              11
                                                              11

                                                              HTTP Request

                                                              GET http://www.baidu.com/

                                                              HTTP Response

                                                              200
                                                            • 103.235.46.96:80
                                                              http://www.baidu.com/
                                                              http
                                                              701 B
                                                              3.6kB
                                                              12
                                                              11

                                                              HTTP Request

                                                              GET http://www.baidu.com/

                                                              HTTP Response

                                                              200
                                                            • 142.250.187.206:443
                                                              tls, https
                                                              902 B
                                                              40 B
                                                              1
                                                              1
                                                            • 142.250.200.14:443
                                                              android.apis.google.com
                                                              tls
                                                              6.6kB
                                                              9.8kB
                                                              17
                                                              27
                                                            • 142.250.200.14:443
                                                              android.apis.google.com
                                                              tls
                                                              1.9kB
                                                              6.0kB
                                                              8
                                                              11
                                                            • 103.235.46.96:80
                                                              http://www.baidu.com/
                                                              http
                                                              701 B
                                                              3.6kB
                                                              12
                                                              12

                                                              HTTP Request

                                                              GET http://www.baidu.com/

                                                              HTTP Response

                                                              200
                                                            • 103.235.46.96:80
                                                              http://www.baidu.com/
                                                              http
                                                              741 B
                                                              3.1kB
                                                              13
                                                              12

                                                              HTTP Request

                                                              GET http://www.baidu.com/

                                                              HTTP Response

                                                              200
                                                            • 216.58.204.74:443
                                                              semanticlocation-pa.googleapis.com
                                                              520 B
                                                              10
                                                            • 54.255.6.196:443
                                                              rpc.dzky3.xyz
                                                              tls, http2
                                                              870 B
                                                              3.7kB
                                                              10
                                                              8
                                                            • 54.255.6.196:443
                                                              https://rpc.dzky3.xyz/x/command-report?state=0&ty=3
                                                              tls, http2
                                                              2.2kB
                                                              7.1kB
                                                              18
                                                              17

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=3

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=0

                                                              HTTP Response

                                                              200

                                                              HTTP Response

                                                              200

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=0

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=3

                                                              HTTP Response

                                                              200

                                                              HTTP Response

                                                              200

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=0

                                                              HTTP Request

                                                              POST https://rpc.dzky3.xyz/x/command-report?state=0&ty=3

                                                              HTTP Response

                                                              200

                                                              HTTP Response

                                                              200
                                                            • 224.0.0.251:5353
                                                              3.7kB
                                                              11
                                                            • 1.1.1.1:53
                                                              semanticlocation-pa.googleapis.com
                                                              dns
                                                              80 B
                                                              320 B
                                                              1
                                                              1

                                                              DNS Request

                                                              semanticlocation-pa.googleapis.com

                                                              DNS Response

                                                              142.250.178.10
                                                              142.250.180.10
                                                              172.217.169.42
                                                              172.217.16.234
                                                              142.250.179.234
                                                              142.250.200.42
                                                              216.58.204.74
                                                              142.250.187.234
                                                              142.250.200.10
                                                              216.58.212.202
                                                              172.217.169.74
                                                              216.58.212.234
                                                              216.58.201.106
                                                              142.250.187.202
                                                              216.58.213.10

                                                            • 1.1.1.1:53
                                                              www.baidu.com
                                                              dns
                                                              59 B
                                                              144 B
                                                              1
                                                              1

                                                              DNS Request

                                                              www.baidu.com

                                                              DNS Response

                                                              103.235.46.96
                                                              103.235.47.188

                                                            • 1.1.1.1:53
                                                              android.apis.google.com
                                                              dns
                                                              69 B
                                                              109 B
                                                              1
                                                              1

                                                              DNS Request

                                                              android.apis.google.com

                                                              DNS Response

                                                              142.250.200.14

                                                            • 1.1.1.1:53
                                                              rpc.dzky3.xyz
                                                              dns
                                                              59 B
                                                              75 B
                                                              1
                                                              1

                                                              DNS Request

                                                              rpc.dzky3.xyz

                                                              DNS Response

                                                              54.255.6.196

                                                            MITRE ATT&CK Mobile v15

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            • /data/data/com.easy.rometelchnology/no_backup/androidx.work.workdb

                                                              Filesize

                                                              100KB

                                                              MD5

                                                              43d852535b91ed4570a3e754e56da094

                                                              SHA1

                                                              dde469498b12e372b9aefee8c8141492351f8c87

                                                              SHA256

                                                              50c4d4f814f7c897aeedd7ecfe75ffe86bfa7c2c07294ce870ed905da855e56f

                                                              SHA512

                                                              4278f1822b7b193fc20296218f6a65c3af5cdd5b6accdeb2cdb9dd7451a6dce30fc96f4198a25c2a95e1ea316fe2a6fc3d7d905f99fc397410553bb26c6f774c

                                                            • /data/data/com.easy.rometelchnology/no_backup/androidx.work.workdb-shm

                                                              Filesize

                                                              32KB

                                                              MD5

                                                              bb7df04e1b0a2570657527a7e108ae23

                                                              SHA1

                                                              5188431849b4613152fd7bdba6a3ff0a4fd6424b

                                                              SHA256

                                                              c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

                                                              SHA512

                                                              768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

                                                            • /data/data/com.easy.rometelchnology/no_backup/androidx.work.workdb-wal

                                                              Filesize

                                                              402KB

                                                              MD5

                                                              7e96659314d617916fba5fb3315b5f65

                                                              SHA1

                                                              5e16f6ed78ba928be36abf354c0bd6bc6249c598

                                                              SHA256

                                                              524e369636c8f6ea894c0f18f5b7ddcca57fd11958d533795f00b72930077002

                                                              SHA512

                                                              788935bbf87408575a8ecb5771c43966ec7b8239950b01b0c1ca11a662114c3afc5449e306b5b2c0d2d6885500bee57fc40b4f40d0d3238f82291dbf8d1834ed

                                                            We care about your privacy.

                                                            This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.