Analysis

  • max time kernel
    58s
  • max time network
    334s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12-02-2024 16:07

General

  • Target

    FMWA9.93_Official.apk

  • Size

    69.6MB

  • MD5

    921ce55fa82f0025debcb7cb3cee27d8

  • SHA1

    cca091918c4b55d00dda82221a198023aff27dd6

  • SHA256

    75f804d346dc48de24e447e262da09b75bb20405095bcee2ab2a775800158ef9

  • SHA512

    569a25d5c9488e1aef22f064d5f751cfb2cdf5aa2e56747759cb7fba17facc373d8e31577a25a8025e5b3ae9c884f3d9603e4db7abe99d1ed3af2ed3dc0ff8e0

  • SSDEEP

    1572864:tHMbZg+KOS73QTXvmpQWACjrXS0CYZZW+jApvoG+oQP1o3N:tHmhKOS739QWAGXgYZZW1toGq9mN

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fmwhatsapp
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4643

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00005LightWallpaper.jpg

    Filesize

    3KB

    MD5

    033211178942b0198b9f6549c26e87a7

    SHA1

    5fcb4ce18615a586539a7a1b0bdc7c250bb9b9e3

    SHA256

    3ff51b1c6e9a829e60499c4d9b15e2792263166f6be6ae997b6f2ef9d1272d6f

    SHA512

    d41bca07134428f90325aea460db0b1014b89b2b2043d938c99d3da4cff249e1b1a85e8afc04eb47527eb23ab28dc1926bf83fd03dbd30502320a2a28002e47a

  • /data/data/com.fmwhatsapp/cache/downloadable/wallpaper_tmp/thumbnails/light/00028LightWallpaper.jpg

    Filesize

    9KB

    MD5

    fb9b168a5224ad8ac79d0ac2a05da6da

    SHA1

    82852b2e992306121e31a81144cda8a1ac2f8e27

    SHA256

    8507e48d67270c95797a4d6fa9f244f773629e8e37477c3c72d0135d4410adb3

    SHA512

    b1fb8ee860f80516e025028f1f14209e380660c013dd9529abc1c728ee8b0b0c7c0a94db1c295bf42d676f8adc3b78a724454e403eb9d78014ec50465d449f54

  • /data/data/com.fmwhatsapp/databases/BTOR.DB

    Filesize

    12KB

    MD5

    f41f531c07d4141546a531ff9caffdcd

    SHA1

    9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

    SHA256

    bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

    SHA512

    e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    2bd783f87f3dfef1ce90835ba4bebf66

    SHA1

    a0f35c3fde04c7efb61e63b8ec2ccb2d240c8b81

    SHA256

    a3a65c65a10313a662660cc4150327f71ad9302ffc865741b62721d608c73d86

    SHA512

    31785db0bec6d789bd95b969a1c918cb18da78e3025e0078df3d3e47cfa14fa9445a6a2b52d5eac7fca756210d65ce5fc84ce3e5c4990a3dcc4b05a212ee7336

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-journal

    Filesize

    8KB

    MD5

    f45e858f924a5048e504d50bfa0fbf0b

    SHA1

    daa8bac7bba91ee6c380eee711c1b248eb22dc80

    SHA256

    015386ea9a5a2f5194035d32631ab38f24a5dc1599c32e750a0774f2f80c8b12

    SHA512

    f3717b55730fa8fe84b14599660679869e85e59ea6a553bf18179fa9df96789830ac4a8788e74448628f3291471c392c72cbc1732f193acc34cc63d8196e5914

  • /data/data/com.fmwhatsapp/databases/BTOR.DB-journal

    Filesize

    8KB

    MD5

    143b6a4501076516d14a4f5fe7b29da6

    SHA1

    0193e05ebbe7a5bbcdbba1b4e0b54417ac87740e

    SHA256

    6ee694d9ca1fbf53be014688f69b4930481a7188b96c0dd692efa4dd33b512e8

    SHA512

    2304871e928c833232577778717812fb0b62e25c85ddcdf53ffdd8c2289b7d480085876a32829bac4ea25cb8d65b813e3a7f033ae29b9e3b246a2950683f7497

  • /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager

    Filesize

    16KB

    MD5

    15532ebb0379d48368f7621241143284

    SHA1

    77ed78d133ad590e83ab0a43f2c89581d5bcc501

    SHA256

    28724d67710ca6cd878315b0065b97a63762dedc54f13af1a71ca4070d421c2f

    SHA512

    d1e0227fc9ee4c10f7b53baad4335e5035c4d27e37cf5fab8018dce19fb0a3e40c662337e1c38d606eec7a9899072d36a27e3dc4e9037fedac9cf9a8aca01a20

  • /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal

    Filesize

    512B

    MD5

    6b1b0077e11c200e26aa77757e38db98

    SHA1

    0f6f2b4e41c4a579f181429e83476c6c977a4331

    SHA256

    140a5f23045a09ba57ffa11f22dfac34fb16eaa5bb8fc0383292524edfe14c3b

    SHA512

    9e34af6cab20bfa39bdbca16e2e954653a7da630e2b402cc137c688e41fbac42391a9dfc80113c56190069090e38de42a0d75ba3bde3f9d7b8cdb5cda1ef432e

  • /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal

    Filesize

    8KB

    MD5

    3c665c304f6610662f2e86f0bfed5910

    SHA1

    40a267892ab5567b05ab9122339599221f99b220

    SHA256

    d3a846153b8006c0ad85331492742457d96dd5f9f7e6f51213d67e1cc267cf9f

    SHA512

    6dcd054e15b7ad9dc9fb7bab840d90f8320572b470d5b0ae263af2342df5a831f208c167b3a4697a49538a5790045d2f850ce19bfba5dd5ccd3548641d15bd57

  • /data/data/com.fmwhatsapp/databases/_jobqueue-FMWhatsAppJobManager-journal

    Filesize

    8KB

    MD5

    56582c865a26227a8927fc4a8f927993

    SHA1

    6095939e568f65c5fceda15d2e404c147c3d1a31

    SHA256

    6992019597bd0438ad7aa50e547a9f11208b1587620cce1bc226e505e3c623e0

    SHA512

    60f8894389421c5ae2656be7e0cfd325ad9ba22bbab03877a746aadb6d91368b1d554ad6bf4f52f0b934507dd906ead4a1f7ee4b23201ff57862a9b4da9bdff6

  • /data/data/com.fmwhatsapp/databases/axolotl.db-journal

    Filesize

    512B

    MD5

    6a85a4a887483d2b812e0efedcbadb39

    SHA1

    d8629b6b230f3c6fcc21efc22aea8e6b8f004d26

    SHA256

    bcd88773cbac49861b8b5053008f773f87825b70c3153d7e89d6a8e8343a4ded

    SHA512

    886b25faacb7b71ca0b246e39633e8f3711a7a3c60fded842165be6ee97da79a5c57d5063611254c0feffd5c5f9b34f56bc7ad4296472dbd5e112120179a7bbb

  • /data/data/com.fmwhatsapp/databases/axolotl.db-shm

    Filesize

    16KB

    MD5

    ce338fe6899778aacfc28414f2d9498b

    SHA1

    897256b6709e1a4da9daba92b6bde39ccfccd8c1

    SHA256

    4fe7b59af6de3b665b67788cc2f99892ab827efae3a467342b3bb4e3bc8e5bfe

    SHA512

    6eb7f16cf7afcabe9bdea88bdab0469a7937eb715ada9dfd8f428d9d38d86133945f5f2f2688ddd96062223a39b5d47f07afc3c48d9db1d5ee3f41c8d274dccf

  • /data/data/com.fmwhatsapp/databases/axolotl.db-wal

    Filesize

    16KB

    MD5

    45ad8e25f2a6e0c40034ab87f626bb53

    SHA1

    6d15d79a4ff845ed68053478a3e6e2c0e71b78b0

    SHA256

    c2701a63e32abf8520179addfa59e4ffefa5f9fa093498314e6663be36e57da8

    SHA512

    bf09bc73b6be28faee7d3e8b5b289864b0f12c4ec490690b3bf2fc14cfa6db8d511da559ab728e3c8d70d977c25f8bcd3f6bb918a274bcf97c67457157ea3fa7

  • /data/data/com.fmwhatsapp/databases/axolotl.db-wal

    Filesize

    40KB

    MD5

    62feb917a7b41dde249bf50396e30902

    SHA1

    d3d6ceffcda667e28f971f67154140e186318de3

    SHA256

    8051de6a4eef85671e7502cd73d25d3c8e9328f2d244383bdac6a8bdd412438a

    SHA512

    1fc0c1dab4b3793bd40c12c50fe5825b954343a1cccf99c8def6c99117db6b5d6ffe60e1c790d7d0dbb80e58ff319e341d115f16155991a9e659ed879b248dfc

  • /data/data/com.fmwhatsapp/databases/chatsettings.db

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.fmwhatsapp/databases/chatsettings.db-journal

    Filesize

    512B

    MD5

    33e2f9eba66f4cf3a9e9450a8237a2c3

    SHA1

    4136f64ea60011839ff61143c343db792473e63b

    SHA256

    0a7bf3dcab3969509c2e7b515ae7724e7bb8baa92efb7afe9932eb1e5b1b7c0c

    SHA512

    3d7e3f0de7643c4059a44bc28a47dac5444e2638a642494c1080f6777718aafe15eae40312335cd1313edd9ab87f6be497bd6d78bcfaf7a1d60d52e24fde972d

  • /data/data/com.fmwhatsapp/databases/chatsettings.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.fmwhatsapp/databases/chatsettings.db-wal

    Filesize

    16KB

    MD5

    66383c140eabc1ba26b3fdc65c11a72e

    SHA1

    8e31eda340a94f208ff01b568f28ca01c582cdb3

    SHA256

    5d2996c54693688f4a67ac3e61406dbd8bdf2b05173dc719b4790ef4f70c53c5

    SHA512

    a067c08d050dd69b6a914e180209ddf86d92e1a853ef5cb95372a1df33e9c2b8ed446edb6d3484fd4b6502a120052017dab9dfbe7b8f7b54c0f109e1d02a4e47

  • /data/data/com.fmwhatsapp/databases/stickers.db-journal

    Filesize

    512B

    MD5

    30876fdd98880284b958a8b7836bb1f6

    SHA1

    ffe3378fa1e0697b745deedd9aa6f92a86d44ada

    SHA256

    4704fa59cf8a72fc8b412a4b244b099149cbb58f211bb650303388f2c021d6f1

    SHA512

    65287032d4db9e2c8759010b4eb7f39b2946e64a47aba491fb897cb453e6336a12641fe9922741b7eea595cf74859cdb03c9ca86738f7032f6b885d1472254ff

  • /data/data/com.fmwhatsapp/databases/stickers.db-wal

    Filesize

    16KB

    MD5

    e5786fd137f4f7c61b3d40c5775410a1

    SHA1

    aa0172c5a4aec746674a819c947e67864e2eb16e

    SHA256

    7d3d2e64cab028745160aba9262288c098ae1e64ee822cdc6149f13e6af506c6

    SHA512

    27dbca77c3bfcf9d6c9db650380217c50dca2c7552dcc5c44e9509a876069cb13334008d52bf4389a15c03d60dd0c8edcf904898b34a0ec72264269009e2bab7

  • /data/data/com.fmwhatsapp/databases/sync.db-journal

    Filesize

    512B

    MD5

    6432faf77f690c732c3f358c5f882273

    SHA1

    32179b5ac16d77a39317ee9b11575df3ac82ff48

    SHA256

    b5b995e9216510e450ce2158e7282543acead4aaa6364f4e14be34b0bcb211e7

    SHA512

    706efa4fa4d80db6262d8d48029fed47be125a40b06d13dd48547048f204021abf85f601928bfbca36d7595f6093805ad8454f85db008c14ab4ce31ae840d07d

  • /data/data/com.fmwhatsapp/databases/sync.db-wal

    Filesize

    16KB

    MD5

    e9a1ccdb0f5d560a9e96de9bfb49fd4e

    SHA1

    e741b7b94e7e0ac3dbe621514b502391d3f20fd8

    SHA256

    900687a1a83cb2b55616970565cfd058d146ab19bb8afa832b67f341f1361da1

    SHA512

    16f8a85b0aafbf3dd1b6a676efbef1d6de2b8729d8470e10224468cc8e63811b7d38f46982bf19c1e8d2498ada4fc6f09b65bf8fb74eb16c96230f0bf4dc8295

  • /data/data/com.fmwhatsapp/databases/wa.db-journal

    Filesize

    512B

    MD5

    40e97d4e0f1604979f301ff8573529d8

    SHA1

    663aa372c945251ab423febf49bb4aa4c7728edc

    SHA256

    29c409397821c5221eb686dfd183d80e5716a689bc4fbc6789df4e34cd14bbbd

    SHA512

    119cc8a82a20870078f413ca3b5b8da35ec60fe077d1a5cd56202daa60ae71ce99b11eb48c9c51417bf14df76a7bea9ad7d079461af3b16655f4bde91bbe94c9

  • /data/data/com.fmwhatsapp/databases/wa.db-wal

    Filesize

    16KB

    MD5

    2732ad364160dbad766dbda1ada5a421

    SHA1

    3e9f56558f76cbd6fa8a0230f244deebefb377a5

    SHA256

    16853fe0c0419ea19f3a222c0d019fa041b6f5d1b7f66136be92207755934584

    SHA512

    b6ca1e6dc137aa946f3642e0b813abdd77c38a01d6d17388b23785254a6892d87d2e5af61ff1011b5c141e0396036e3b797769ecc535a98ab024a504dd5f7cf1

  • /data/data/com.fmwhatsapp/files/.trash/40afca54-09b7-4b00-9aef-32f4a559d7fd/5d27b3dd-2f87-448c-83ac-04fda35842a4

    Filesize

    54B

    MD5

    d292323d1e075fb042e84cf6444f9c84

    SHA1

    e18f001838c1e0cb6991b6a4b7e4813ff07ca04b

    SHA256

    bb62afd1b6c8760e879bcebf19183716effd58717b8b9de764453e2db6e8034f

    SHA512

    6050c900901bd506d7d2408748b5fde8d1621c9c6e451e0565aef4d22108eb6ad0aec16125257363cb15bb71ff670c33ff73ed22aa61c3c633082c679b6f135a

  • /data/data/com.fmwhatsapp/files/.trash/40afca54-09b7-4b00-9aef-32f4a559d7fd/5f15609c-ed4d-4f14-9e85-a8059617aa88

    Filesize

    525B

    MD5

    c7263af93ac3aa8ddcd5165fdfdca7c8

    SHA1

    0475e5960f5fbfc1ee1732e779b2e3f76512349a

    SHA256

    54985bcfd8005f0048fc893e930a3bfa5534610efebc0ee2862e02f8e9acbecc

    SHA512

    ab9b93f580bd83e5c054cadf208beb0188c5ce4685f6bcfe5b03a166e0e5a482c6393e899238d0f9fb1e24770392e9e9435f2ce61e6779452e67dd05049cd534

  • /data/data/com.fmwhatsapp/files/Logs/whatsapp.log

    Filesize

    185B

    MD5

    0fc5f46a0a509f3e913306b1d4af28a1

    SHA1

    085c6b4b55810084f2d039624aede6e4f93eeb1c

    SHA256

    b24a32dca1e36d9a59adbecc00d1dc24140c035088323eda7a5031abe7243d55

    SHA512

    ab42abe12fb95498194c5eeca5c16d314c0103d10a39cb20264b12ed1290ea088f5108037951f5b30b8b30ddf508f31809b5a0578cf763be220b90c2a57f9594

  • /data/data/com.fmwhatsapp/files/decompressed/libs.spk.zst/.superpack_version

    Filesize

    30B

    MD5

    44541b61ee8087ff358ac2bba36f0cc7

    SHA1

    dd742468046732b6834ec09bc0a90acc1adbf80e

    SHA256

    a9c6c5bd5e3e5713e8a93988352f1011c16b15bb34c3adf076f7f6a01a5fc443

    SHA512

    6f6bd6c5ef4c02fdc393dc2b964387b6b7edd96e2ca138464072071355ca55a5d835eb60efef9c7a78743bbd37562e42c4cbe0c77eb6cf584bf8ef79754b79e1

  • /data/data/com.fmwhatsapp/files/extracted_pack_file.pack.tmp

    Filesize

    211KB

    MD5

    0c723e248d4fbd04fba6b9716c4c4da7

    SHA1

    a665110bf4b35616b3678debd41e5d7ed86fe4a4

    SHA256

    fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6

    SHA512

    f718a2d52c84107d89d7476555f9dd193c4be7e16b75c26c1081aa93ebd2c56398035c7882328ffb3aa2c21f32b03ad223de01eadf786cfc6e023f9a2f7df8c4

  • /data/data/com.fmwhatsapp/lib-main/dso_deps

    Filesize

    384B

    MD5

    5d865b4b6f43a1664dc85ba6db1b2802

    SHA1

    8fc0e754d9348b88b5af6624b2672dc0028d53ad

    SHA256

    d13ca5aea408e4bc506349099cac6395cc861306c06cedbad66572f603c91c29

    SHA512

    f39ba76b9c1140598e6faa445cbe1e7944962d6e0dca3f334174786c15264e3e77c51716802a71c94cee56d19fbb78996e91b40ac46ebc4f21c7749f7abb6e19

  • /data/data/com.fmwhatsapp/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/com.fmwhatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/com.fmwhatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    f24c35f9ce2ca54dea31512501d26d9d

    SHA1

    1603217db78a7b07b0cbc7fcd939b851f3447173

    SHA256

    ce966cfc8604102c2efa33046b7c45b66e1fb0dc1175ddfbe27ebdb45bd27eda

    SHA512

    4d07c2ff4f11cc0e24f96685b1b321cfb6f5ca4e4fe299ac4c2711e147b7e6742275f46e45b74febfacd9e9a2a5400dc2ff2b65c910b376cd0aaa51a58d841c0

  • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    b4ce041ff165175524ce875d97f2221f

    SHA1

    8e7b8e8fdd2b60666d511915664c7f7e23692b30

    SHA256

    c50125ec5c2f635cc41eb9c4db0fb68b52f1d71af4726a834d0ce72d35c613c2

    SHA512

    b331a87632ea6485a6c71cc5314360063c73366fc742228ac0f87a814f5331f9546985ae5f282a1a334325fcdab7969614a18a2ad0d3c565ef7bbbdda79444fd

  • /data/data/com.fmwhatsapp/no_backup/androidx.work.workdb-wal

    Filesize

    112KB

    MD5

    bbfb1cbd7873f0bdffd8eed1941cf119

    SHA1

    43860d69648f058e304ce91a42f8a97279950301

    SHA256

    356d960958d7a2d43814cea7662e475b06d7b762772f70f122d620c47b8d928f

    SHA512

    b0b6c2ebce94f9643230032546cf3ca5accf71151817adb3c6a45ee3906265ecb1e3d28075a4f6ef39e5d88ab30255d65ede4012505f529a76ef540aade0e6d4

  • /data/data/com.fmwhatsapp/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    fe4a50a275c77c66751148f086aecf99

    SHA1

    60563d3388a564847df2a5571282bd61edfcca7b

    SHA256

    e48d0564da7454796af12aa93fe1dc28c968bdf239ac739f4899f3afa42ae6c1

    SHA512

    fca2e8192d7e72ba631f665674c8e328ffbaff9c167671b093e3f40eb399ea45f628c5677b1e9015f9d575ff1cec1581a2fc47df096dabd56572ba096c0accad

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b