Analysis
-
max time kernel
22s -
max time network
35s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
12-10-2024 14:20
Behavioral task
behavioral1
Sample
2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk
-
Size
12.1MB
-
MD5
d0d130c855a790da28fdd744535ef07f
-
SHA1
e9760321509f198ffd80667cc8fa34c4c76f4cc7
-
SHA256
e6746d0069dea77ecd1d7a611c45e5af220643c23f7b473e1bc2ed8aa2923475
-
SHA512
e6a08e435d5ea53de01c765c7747e2bcfea9dc99e67ac4e8b5d5cdfd7f07894e9554b04aca9d0310a7cc09b180bfa84f7e9192c03e79ae8f664a230a740a2a5f
-
SSDEEP
196608:wvyd7pyOZgwi70nk6zLxs1yuyc3u4Ly3UUnKEO++lUU4tjBZPqECEtZWk:wvi7E4gh0k6z2UHc3u4GnKA+lUx
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
ioc Process /data/local/xbin/su oogle.chrome.web /sbin/su oogle.chrome.web /system/bin/su oogle.chrome.web /system/bin/failsafe/su oogle.chrome.web /system/sd/xbin/su oogle.chrome.web /system/xbin/su oogle.chrome.web /data/local/su oogle.chrome.web /data/local/bin/su oogle.chrome.web -
Checks Android system properties for emulator presence. 1 TTPs 2 IoCs
description ioc Process Accessed system property key: ro.bootloader oogle.chrome.web Accessed system property key: ro.product.model oogle.chrome.web -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud oogle.chrome.web /dev/qemu_pipe oogle.chrome.web -
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/oogle.chrome.web/[email protected] 4852 oogle.chrome.web -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener oogle.chrome.web -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses oogle.chrome.web -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock oogle.chrome.web -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo oogle.chrome.web -
Reads information about phone network operator. 1 TTPs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo oogle.chrome.web -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule oogle.chrome.web -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo oogle.chrome.web -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo oogle.chrome.web
Processes
-
oogle.chrome.web1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Requests cell location
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4852
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
4System Checks
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD52d4cfac89857972794e027a1deea71e9
SHA11a262111bdec486a67187a88815a7761ed39427b
SHA2569ada893acc122895cbb535cdf71634e935523e00ee0dc42fe629ba3f8c637838
SHA5122c958b1050a66c2c6f7bd5a89e62717d752e5f42f2bbff119946f0381f7ce045ed6e1ced03af5739127fd070d6bcf1e25f1bf1708b5c379bae704a29cf6a646d
-
Filesize
512B
MD5e659b14e922baaa81255fca2048b9c2e
SHA17e83ad29fb3fb45b5016f63f1e6efb3ffaa475fc
SHA2565693c837e562f5677707a23a2b7e842379a9055f6700b27c483a4ce2dbb70fe3
SHA512404c0ba1ba96d80b0073795aa6f86697ef924e285177888a8945f36818cd9cfe03b67cbcf3b0cd161b26082923408c0be4301876875b34ecda0bb38cb3da676a
-
Filesize
8KB
MD53006e18629bc632f8a8615d0ef87efeb
SHA17bd04a40285287412575c0ccc072e38b133fa17d
SHA2561e0ad6d7ad9a09685896cb0d7a1ae4c8f41e8d047b5597605101d97a962d3583
SHA512591cec8c227678be2ef96325002cd5adebe66819daed8e346f0dad824445a53c2e38184790f8ebb72e1022160c9cf71a2fc2e607f91ac1c822c15aa3ee2afee6
-
Filesize
8KB
MD5f738b64b971362fed429a4f0f810d19a
SHA1a015d2f77cd36ab1c2dc88ab77b8428ba183ca66
SHA2560743d8c484629a72aecf32a27e1d21ae959dc62117bbf8aa038603a3cf3f0dcf
SHA512bccc103608586ae39a9534829306eb5681aec10bb689b79fc9ee531371ea2d35b05afeb0e695ae44fad317f62ec4e499d9ce2874c5ed1d01cdd91a6b3fe26f90
-
Filesize
8KB
MD55625beaba72e3d719b5a42897c20431e
SHA13033c6476833c2fff3e955fdb6ce45dc6378fe0f
SHA256b18088ca27ed269ccda506d1c6a7815abc5b8a7dfdffe974e9b8bc8e3dfeb59f
SHA5120c6af94e92388d89efd1cde021497f05d511415fdd01cc6f21f5c566eaca5d3214902db8bdadcced3d43841eff5c71f41e1d2346c5dbd16aef5b818021d0bef5
-
Filesize
8KB
MD533e61e6c73343bcfee53416aaaaaa318
SHA1241fa01be41c6a0faf2efba53c888bb29260d76d
SHA256335cc08717f577a47b92fd8d5706e79577907dfe0231acdd7342058650db267e
SHA5122da5aad11b73323870a01c6642948971d1dc550f3674182f2109bd849ad5078b388ec9672a2cff797899d5be05162d448de2b5b3271d3ad364ebcac704990b19
-
Filesize
8KB
MD5e43819741d6a996f492a158005517276
SHA1c7774e0af546476ffed1504c803e191042794a7e
SHA25648184046fd4594cc74917582207d40cf5a3b5a18b470e063e99f7bf7470614b3
SHA5127830493d4a0234f920acd5b1c1a66a9edb7231b261bdcdb75d0bd0d92908bd8f9f3be492d95e7a68c80cac3736e4bac9cd443de2aefc78886394d277e22f2c47
-
Filesize
16KB
MD5dd86ba8ca8332be839abe05662eeffdc
SHA1f424ed2fbda9913bce3cebfecb4df0862f4cf370
SHA256ed3420372ecf7ae52236d827997f5614aae367f27c3d8331a0a7eedd532e8ddf
SHA512f8d93163e71a6091e90443a3e9d940f9086529133e46b1b7a9dfe89a5f0bbe2498e87fc68fc6d3da607529bfdb570e570183e6d4dc7ffec1cd7c95879538d692
-
Filesize
16KB
MD5d745c5eb9933cf41e15c243bccdfac22
SHA17a9f309b4eb5262abb266a815199fb563f752775
SHA256eba67ec390bbce0e0372b83c33cab94528f8dc4e98c7ebafdc85c1861764616b
SHA512513e77b6349033c164d117c0d9856116282b967c52aabd13923cb22bb8563f2c1129b2b1f2e49f782acaabcf9a21e34850c5b0dde251072940b3892a380cb789
-
Filesize
16KB
MD5d92207f7ccd2b6ee6d554b44a875f892
SHA16933861fb8607e4fbe2ef738d06bebce298d68bd
SHA256812d144658541473c642d5be6f59fce5fc8755f7afdce8ff039ca227c73b704a
SHA512cb56365d01ffe16196c5f7f5451882d09989c4d6b4002e830d7368a159d41914b8ffed6af79dc10efc4b5057c99c2678f4f11b42b680bbb707ee59d31482d032
-
Filesize
16KB
MD5be41d0c07070be0f4874aae122b6592f
SHA1f98d8190a25cd5ae12f1e0455dd4fd5df8d70ba4
SHA25666292e46ed04cae33bd61ee0a77ef7fe480d7a057cfa24d5ac17b54d9ab38718
SHA512a49bc25de254923b2eb74085615c19eb7c92d02b2c62c8500ac24716b6828d8c162efdab61432f888349046d027d9b406e18acffa7d1311b49b4684c8460ce9b
-
Filesize
16KB
MD5f29acb55f769909f6733e8e18bf0f5ee
SHA101719692447d8e31b3c395173e1e9f8d09b87e9c
SHA25625a8e9b69255126aa7e8cd57698578dc114559962c57d4a7da858455927674db
SHA512443cb130e46da0b91122fe171ce69b4eb6963fc699f17586c35ea6b28801f70c0a1a5317b6e69ecd6d6c2b601e79dc0f65397eaa9ae224833924d1e4b90b9f76
-
Filesize
16KB
MD58eaf76a70c2cf0928c73018de276c576
SHA17483083748a728bbdc770a67e8e4c879a9fa4815
SHA25659deb6a8d60f09ca3990f6ce7e6349252e5ef55da6ebc3c68fa49fca65a0a6d1
SHA5122cb5f91da299b6563a8f7d7076f6c9f9163167452fa11c4580ff28147ac44e8bdd2c88d7a8c3d729d6c9b0a307076f63723e9fb1912f6eacf94fbcdd8afbb20e
-
Filesize
8KB
MD5010712408b72453b6a88c78cfde7089b
SHA16a9341691a7c6a3484a127d75b2c53f97059fd48
SHA256e387f17574be9704096acecf52756b3d6e3f5c1702e753ea974108fae7acd06e
SHA5127334d74f84bc08cc44783a9fd09ea7246007ca48779b4293e5f075949a16aa5ce265e879e2a6c74dd9e6fbc74c7540c31e8673b508519f5b078cb64fef5b71d8
-
Filesize
8KB
MD5ba3e300954f24e67e747f592ca9badcb
SHA185e3c4726c07d349779481d6e898dcb17d7f4654
SHA256046a53dfd09b9d2a74557bc1bce94fc8bbd13ce213f7a91711084b26c1a28615
SHA512a807084dd9531ee5a3247c850cb0a45fe97f7a2879e0ea0a481851a3bcc7dd63509fb2e2c0939a1230fb959d5fa4aa8f0ced4707b5274b413854219b62aeec44
-
Filesize
512B
MD5a4c2945b572f7a25270afc120bcedcf3
SHA176c75f75d4a6129bc62a715b8c514ca80984653c
SHA2561cc5192bae95e36ddf99c5be488a508b30a236bb0e98852ec4318dc53eb79cce
SHA5122072618fb398a051886bc02e77d0aac11f57ca3ff64c78a5042d79c8e237da4a34a80c3c4349b9b460ce3947a8e8687a786b6b99a06bcfea013d5e5eb0f73cd8
-
Filesize
8KB
MD54d611ac0b3c701595b24aaeceb861182
SHA122b2887fe42ae6a012dc551ef5be826985f7c596
SHA256783328fa106424aaf5a6dbf9b3304fde6ae33075eb0b0b8473932384716fa9c4
SHA5123358b3d1e5cd9261ce52ad33923a63b4d88d8cc17752f3738f939918b7ca77a81d12fd0a461e6e523d67fd930edefff095817ae623dfeffb53ff8287db827f00
-
Filesize
4KB
MD5b86f25993fdb09741a94376904fc50e1
SHA15018cf63f2be7952635e51a96df525671167d650
SHA2567286b34238c08d6f68cdde3c8d4f6b3cbfda5b859d7c5caad57de5d249450ccf
SHA512f11abe6202b121be545d94056184d7737716c11151bec2d6df17264e97d580573ac28e5eef17b6be2bbd81c7a3d7a22219f3239b6608139189b72665f862283a
-
Filesize
8KB
MD5ccb61bd80a799f732e832a2917af5d3f
SHA13ae89cd1b757372f080cf99a3199d81b4701e367
SHA256dacb4830e48c521c0ef20563dc2f277b881de2f6dfb0d7e00f4ec041814a2980
SHA512fa7a9002f8c6363e15ded9b721d64ed9cc4cd5f3ac668fca85befebb042a5decd615aed424316154e2313a62468026af6174c6f25ed00f3e4c38fcee14dec90d
-
Filesize
1KB
MD5ca5f71ac2d8722b7ecc79cf7280c4e2e
SHA173e01ee50d3a9b77345950a7c4eb974b0e9d1260
SHA256661af6f88a63c184976aa63ba5dd83107e1e074b11253835064f9cea74b32068
SHA5120a123881d663dd62ac650a2a05f10234ffd120bd2054c07bd1bada86fb9b5b229377cceb6f92e07356b6a603883d6553dcd9363083acae6b33448dae0d62a44e
-
Filesize
2KB
MD502d28ac2d17fe30a954942fb6fa47657
SHA1a738a7d3a1fbb396a5387819b8106011bfbd35a0
SHA25675e40d68562700c230e7c6ad2bd89d8304d6baaf1a37eb82bcfa8f05439c4a91
SHA512a061b0074781ae0d97f1351fd955342a852b7fe893a9fe992461c044be73fec04336d8508704801573aef6afdf7d356f6e4274f15d7642db8d3103467f884420
-
Filesize
719B
MD5008ad37c8d89f1f02004d2b63a20fdbb
SHA162536b74feba7abaa70b7b0c7d304abcdf623308
SHA256248c48a58bcd53389c33ef11839900915e7a50deb9747c1ed258b2a8e2a415fc
SHA5123782948b8c629005d360bb1170d157ef09d0d1b0fe64eb067144f20673e37e619074f880b07dd3ffed023c80176b9f99328ded0b7a6b61a1479d32d124e717a8
-
Filesize
785B
MD51cc961a176032fc935e671957856ddcb
SHA1818562479af03f2cc3c1936bff5c7b13f5a6ca6f
SHA256e6e9d42a25a60b9a933ac266abcad0f2575f3b7e7ff39f880b0845b7e4e4b0df
SHA512c6761d342ce60ec7d7f8fe47f51503dd4ef7cce2d3dd399de9a9683477e70f17659edf35516f33ba107f8fe8088f8a1424e02a377bfe2909f590074aa7e6391c
-
Filesize
8KB
MD520c44d4c9e888f58fdee04174a718c3f
SHA18be4e9f28070be23640ad9a9b23c3470157703f8
SHA2563af88d263df16ecad89d8178f7baa546e46f5b3e3e40c05c31885a19cf45383d
SHA512199bde1384227d3f7478646e5b99cfb8ef694435a59ac9e10dbda510bc6672d2ca95bfeae88dbce65afb50a6b200ebe5da459109e7e05a7a5c33bda3d4557241
-
Filesize
1KB
MD5203a342363f3c8ccd4061caa2ac216e4
SHA1cb71e91b8bec2d09609f607dcd04c7b8b38d4d38
SHA25619bc60ff318b14608531a652b324455be016e710f24ceb4c3ece24f5d2f6e0cd
SHA51272663d37343139c54b34c057975bcce95e8f8998d470771b5ac3ee4fd3c47779630007f05b36eae28ccdb98ff2915a5f740b12828baaecd596cbdc2d36c7d074
-
Filesize
1KB
MD5ebc06fd3d86c27a426932a83325eeffb
SHA1461c990e677114de3baba2a33f0a60c0a10bb9d2
SHA256ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230
SHA5123b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b
-
Filesize
1KB
MD5355eb0af21063fefca005d93d6afa9c9
SHA1f854e3d2f0c0470a54e55f31017f9c499bd3671d
SHA256b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d
SHA512ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9
-
Filesize
1KB
MD5cac9a26c27728066be7a285defc0df6c
SHA19931d42eea7663aaec4eb901bcf279b246c19e34
SHA2569347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d
SHA51211a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5
-
Filesize
2KB
MD52d858e8af5d9426fe061df5c82ffa6ff
SHA1bc1b2eab876aa221b6449d11e482de24b777d58f
SHA25673d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c
-
Filesize
895B
MD576ce13c6312eb334fd351e3b5cff4bf4
SHA1203bd863b812c071ab3ae25bf4ab2f9c4d42942b
SHA256f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
SHA512d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783
-
Filesize
753B
MD5317f802aacfab6282b8f74f280e841c1
SHA13b746a76f6322e97fd6c09a43d03ac14631d93e1
SHA256f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196
SHA512a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301
-
Filesize
1KB
MD59ee047a6801bec9459a9dd5ec7068078
SHA11aaaffc208e2d86e53fc031e8413169850e65746
SHA2569f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
SHA5128245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24
-
Filesize
1KB
MD512bfe20382337a84c0fc004a52b9ba9b
SHA1ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9
SHA256621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
SHA5127a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4
-
Filesize
895B
MD5a40e6a567b7aef329bda0ac200f7a23d
SHA12fa463649c7ba586b28670675a15e0d7a630c7e0
SHA256ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
SHA5125e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f
-
Filesize
2KB
MD545c24a8686a0978086c99f7039accc17
SHA1c63ae2601322045390c7a4f230602b74ae18d2d8
SHA256bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912
SHA512d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727
-
Filesize
153B
MD565026ee778e1372d9f4aed742772e893
SHA15a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA25615070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616
-
Filesize
19B
MD5e330240f5bf26a49dbba840d1b7fa74a
SHA16651c382d91066bd443e4c55f950834eb7e52c56
SHA256acef5ade0cbc6450604e277377260f5c1259ad46e890f1cdb3106cec6d599273
SHA512cc4b165016c8b1207921b107eb20540b8b2d85a00ac774d64f7697e6cc67bf83882ecf59d131e4717be80fd3e8710c4946df90d7379732c0634b6ee3dd3a8265
-
Filesize
676B
MD51b759349f0bf3e55c51e2a2c2802b3cf
SHA15a608a093fa5f513d1ba52e8a9e01f693c47da98
SHA25659d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
SHA5123b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6
-
Filesize
2KB
MD52e74eb9e217f000ca9ff9116aa76b062
SHA1e1256b0d2987e1e69ca40311f6c22517493de720
SHA256340181b01ec540f6f6dab8d842a0daf74a95e967fb638df96b4eb57169d94dfd
SHA51211d4641c8818a18655f3f24b9e7d6ceea9d5e145f032fef86e2be66c514cd8250b9b19e73e441d03f8562dabcc09b0942c9f7c805367cc98b6e50b352f9a179b
-
/data/data/oogle.chrome.web/oat/x86_64/[email protected]
Filesize514B
MD530c6b0e2f2dfb42dc034825ff4ed8ea2
SHA10b765403b50fd2177b696c77aa429497feda3187
SHA25643279ad9e065cd8c121ae49d18bac026d061901f3e9b28922a0fd6c6a62d191f
SHA51264f8342e60c9b39378b5272c275151d02000de418342c8fe5f1aabc2739e3d1a90bc1101183c9419666196b5d0014962a983f848e6d85d9d55218259a0b6b9a9
-
/data/user/0/oogle.chrome.web/[email protected]
Filesize3.2MB
MD569cf159b893eefff9a8106cc3ee37e03
SHA1165207adfe8c6047ce9f3dd38aed50796c1660d1
SHA25626fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
SHA512379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa