Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
18/03/2024, 11:35
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://dm-cn.aliyuncs.com/trace/v1/report?bid=1811124&env=600000071475529208&mac=303740&mf=catherine.guo%40derteblasting.com&msgid=cdda7d73-bc1c-4ad1-a503-b0cd19c28169%40alibaba.com&sac=0&tag=pcbassembly&tid=1811124&to=andrea.rapacchi%40mazzotti.it&tpl=&ts=1710742960&type=1&url=&v=1.0&sign=b7e64220f5d56ddde348245eb940a332
Resource
win10v2004-20240226-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
https://dm-cn.aliyuncs.com/trace/v1/report?bid=1811124&env=600000071475529208&mac=303740&mf=catherine.guo%40derteblasting.com&msgid=cdda7d73-bc1c-4ad1-a503-b0cd19c28169%40alibaba.com&sac=0&tag=pcbassembly&tid=1811124&to=andrea.rapacchi%40mazzotti.it&tpl=&ts=1710742960&type=1&url=&v=1.0&sign=b7e64220f5d56ddde348245eb940a332
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133552354276648128" chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4244 chrome.exe 4244 chrome.exe 3492 chrome.exe 3492 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe Token: SeShutdownPrivilege 4244 chrome.exe Token: SeCreatePagefilePrivilege 4244 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe 4244 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4244 wrote to memory of 3228 4244 chrome.exe 89 PID 4244 wrote to memory of 3228 4244 chrome.exe 89 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 976 4244 chrome.exe 91 PID 4244 wrote to memory of 4388 4244 chrome.exe 92 PID 4244 wrote to memory of 4388 4244 chrome.exe 92 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93 PID 4244 wrote to memory of 3304 4244 chrome.exe 93
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dm-cn.aliyuncs.com/trace/v1/report?bid=1811124&env=600000071475529208&mac=303740&mf=catherine.guo%40derteblasting.com&msgid=cdda7d73-bc1c-4ad1-a503-b0cd19c28169%40alibaba.com&sac=0&tag=pcbassembly&tid=1811124&to=andrea.rapacchi%40mazzotti.it&tpl=&ts=1710742960&type=1&url=&v=1.0&sign=b7e64220f5d56ddde348245eb940a3321⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4244 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa6f5d9758,0x7ffa6f5d9768,0x7ffa6f5d97782⤵PID:3228
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1644 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:22⤵PID:976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:82⤵PID:4388
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2152 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:82⤵PID:3304
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3032 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:2668
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3044 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:1976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4808 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:82⤵PID:1600
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4940 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:82⤵PID:3848
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=1448 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:4264
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4552 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:4928
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3868 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:1344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5112 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:1872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3232 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3492
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3804 --field-trial-handle=1856,i,10876836965118138531,5941071008979271647,131072 /prefetch:12⤵PID:2668
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2552
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5c93e658df025490fd376966106d93e2e
SHA13d3758b024480f8ec3b38252813e19a47c944e26
SHA256cb53b1b843d9746dc7e3272a9530a3a0d9e32d95a0ff8a7b15a79c9c45fa17f4
SHA5127290e8dee645b8310f1e05735c3554b1e7e8764ce4b08eba35205371a6082c493d98e20de43c1015c567733805fb2ca54a0f46e5967a1e090848c7209a4d60a9
-
Filesize
1KB
MD5bdaad050699bfb13cd3a06a4e25882f2
SHA125f817fb69f24fc671d11091e8e798e758a14f24
SHA2564ba7096c5b5ce696f422765094daae3855709a98fc235fff4d41d5188c9d7611
SHA5126535f361edd70c63a88113919eb1abea026dd476486ca03879047fb79152dd85a2d8cb02fc1b7fdbfea2f21267865d50a4d9ab7018af68b93971b663bfcc95f5
-
Filesize
6KB
MD5ab6d5b1db154428922a352da6c57588b
SHA197413c1a8eb4206205834de9770e4319f9ffe097
SHA256161add0bdcf76026029f9aa61146e5585e510342930c03a08343c5f7084e7c5a
SHA512926fef9891633a0e5f0539cc640f4e1d32ebc8cf540f464562f44e95ee1ba41c6103af910c8fc9a2bd12de74c8d8955a7c93ba35339d876ac9815d0cf0aef11c
-
Filesize
6KB
MD51578ab0c62b2ade3ce6ed9d1c40eaad6
SHA1fda79a13eaddb263e0b47bda16b9b3c2a0d5c357
SHA2563e5ee3dfa6488d96ddfae72a2b2935b7fbb5e3aa1b2d3b05df2c08496a22671b
SHA5129883e16fd22384c681624df7d0f7c946dc4b87f153728ae9558a756ce1c8d42ed51ea28e035f44b2759894810255a897594e4e17a599fb1771dd407f6bd0921a
-
Filesize
128KB
MD553535a6b7ee1f2214796bf62ca8256b5
SHA151ee908ccfec7ac912e1c5f6d36158727152d48d
SHA2560c28ee749dda2403f5f869e9247050bf807f56e6da87c5085362a3f7a0589751
SHA512afe12b9bfc702094a37714391abf09e82830598d72aef573528581c5226be833f3271b21b6976cde903421e54328ea0212b1c1543acd676af47fdfe3e01bd4a5
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd