Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    03/09/2024, 01:33

General

  • Target

    https://getsolara.dev/download/

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getsolara.dev/download/
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5408
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffb5fdacc40,0x7ffb5fdacc4c,0x7ffb5fdacc58
      2⤵
        PID:1584
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1888,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1884 /prefetch:2
        2⤵
          PID:3644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2124,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2168 /prefetch:3
          2⤵
            PID:4592
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2216,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2400 /prefetch:8
            2⤵
              PID:2588
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3140 /prefetch:1
              2⤵
                PID:3760
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3152 /prefetch:1
                2⤵
                  PID:5036
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4436,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4476 /prefetch:1
                  2⤵
                    PID:5736
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4656,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4660 /prefetch:1
                    2⤵
                      PID:5204
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4756,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3260 /prefetch:1
                      2⤵
                        PID:6132
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4752,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4780 /prefetch:8
                        2⤵
                          PID:5808
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4020,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4896 /prefetch:8
                          2⤵
                          • Modifies registry class
                          PID:4352
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5152,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5216 /prefetch:8
                          2⤵
                            PID:2464
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5004,i,14171853426298997357,52437357122323222,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4996 /prefetch:8
                            2⤵
                            • Drops file in System32 directory
                            • Drops file in Windows directory
                            • Suspicious behavior: EnumeratesProcesses
                            PID:5980
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                          1⤵
                            PID:3276
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:2628

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6a944813-8c75-409c-a2d4-04eb5012a3fb.tmp

                              Filesize

                              9KB

                              MD5

                              dab82813e839310bee8ae30f6359505f

                              SHA1

                              ae9039931888a23acfe33c4cf0f8751772123a7f

                              SHA256

                              2a4154d214e81b1775d2c4db663a6c0e5f268754e5668901a6d3bb9baa1eb9bb

                              SHA512

                              65c881a7edabe758a943628bb6081886566ea9eb332d5395ceabd76ff73f623d87b795f7217bd5c8fa9ca9ce1bbfa9a88c055f1de37e2ff62b38e383f76cb8cb

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                              Filesize

                              649B

                              MD5

                              c48b1f3df7afa879a5e7c49796af86de

                              SHA1

                              159b727966688aa7a821b485139b94090669c8a4

                              SHA256

                              d297b8309572b3530ca70f123f513c7e8f5ea7fbfe729888fe96a77298119931

                              SHA512

                              300a0a8096e726167996f0c1869626e1ae6a13f2896e01f6d73f041c23bda00ab012795c6007815e517f2d681ef6296a2004035cb5df621f68758bb1220c7650

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

                              Filesize

                              20KB

                              MD5

                              d517ec714cf5a12b9dedbb94a419e40f

                              SHA1

                              dde9afb02dd9c4aa7aa902c8e464e3bb7db6139a

                              SHA256

                              d358bafe59e817c89c2cea04468ba69cab3677723fc2fad09c291e86608478c3

                              SHA512

                              2b356aa332078ab59377c96a223e69773018e5721fe313a7306bc2301dd278581f5be2be6f2bf219464acc1d5575d6502e81c0f150fcd1d5aca25938cbf5166b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

                              Filesize

                              146KB

                              MD5

                              dfa98a3dddf7192fdf437dc219bfaf3a

                              SHA1

                              d833ff16111439b74079e531ddb2ae3f8cfee490

                              SHA256

                              ebe139c8fc0b60610698782039690b6cf1a2a5bcf7126221323e189c451c53f5

                              SHA512

                              accb66017be0fc502e58ae3fad1c98cd17d2333b1824baa73146066e13b3ec43167eb9ec26b67d833dfedde5b4190a1a14d74d072f8a88fea5bc1bdd1fa8d3d1

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

                              Filesize

                              744B

                              MD5

                              174e7d3489e9577dda4a94a9112bbfc0

                              SHA1

                              fb4c301492894fc475fb590d534e48bdd44f6526

                              SHA256

                              5d74f87dfe40cae1c134f9ce3c79cd6667f3ff2ec3bd499317410ed12d65622c

                              SHA512

                              b5dde4b965dc4367b50b4921211fbfccb0a06e8b7589059636db3fa6f846129e1bc08d87cd06bf960b2f5563d0a514be2969f177efc0a0546b722067be07a4e4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              1KB

                              MD5

                              4ace10ca0f58267e98617aa7e5c0fe73

                              SHA1

                              8a47c73f5631df62e7075c4d02c0443caafa850f

                              SHA256

                              6da1ca8350ae17f26a57a49de4c2b7f401c3ec9530aea5385817dfe8be584505

                              SHA512

                              4887a5453f389f82d37193d8c8ffcadd60834763cc1e5df61b46062ba51b36fbaa8d27ebfe70a34610de7752052445373ed27e47ce2512cc6d2178d677904560

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              9KB

                              MD5

                              f6336725c74c0ec1f384a0fdfade038c

                              SHA1

                              6606639f06fac457c29cad10b279ad10e9c1e56d

                              SHA256

                              d2bb8b1caa31886396f8329a164ff6f4471131e85e4edaa405135a35802b0f87

                              SHA512

                              91aa26809ed178a4e6ff642a072c3309e816cf3f79eee3735f22c17b41aac019340fcd962b57b9dc2f39b39750aa07e2517e42b3d69e23e1ac060cad1ae60173

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              7KB

                              MD5

                              9c3f7c8537e9555e52e10fb4fef95326

                              SHA1

                              4d37c3f73627a5eb3f6b077b6d8257ec585346f6

                              SHA256

                              3d905d756123602d1ae94914b83cddb5116447947d9b2200837941b49bd2accf

                              SHA512

                              e3f25542662973eb1a54b9e46424028b87477f3f788344f31b96eb0bf614f7b5d32cb7d48cc0293d32658731f1a46e279afba08a3d1a4448772def7295d673fe

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              b860fc2982492f82a8d5aaa033399bdc

                              SHA1

                              d25d99bfbc4f39eddf09814999d02b4200e84331

                              SHA256

                              d8d466b0f2ab9fe85fb183b10b42996fc5fcd2ce7a32271b0157b5f47872b3ff

                              SHA512

                              5fe839a8206a9a62de5e27e12567e5ad0d49f8dfbd6eccc34eeee16b9645ebb4d01ebe7f843ee65bc156b9327e5c304aab254d71043575848b11914e419e548f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              54378d31d462106892a6387c1e7c7ce3

                              SHA1

                              15ecde2db6feab1174d14aba700b87238d0d3959

                              SHA256

                              d580a9d76c18ea8c9d8e7ae792a3c63c317ffcf59ae1dbb16ff8b05eb9faddd5

                              SHA512

                              799ab8037daaeeaae59403bf85383510394e8102ad904415c96d61e70d35598a3939c0d2242ebc8e4d6963ad7715d515651a13ab24ec881c459b787ba36e31ab

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              39e0201272a0a951c96bd77d637a9295

                              SHA1

                              8c584d5b53fbcdcd290d3c360241e27ed58da960

                              SHA256

                              addb48921b2b96dcf7000df82a690739f40ca2624f3b03f5f9f5a5040b6da454

                              SHA512

                              19e839e0f0adcf2ef14e015d7f39aaa00c311dd2c891fd7e1b104433ced06ca6dd59a5929e417fd140a86ed68e30b412d7e5c5535c24691bb6eff7b815f09a2e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              98f20386a73d21fb1bf38918590d0820

                              SHA1

                              889de9191b3ee0c09bb11d1c2c3bd38ded4f0742

                              SHA256

                              d167088b15643e4376e83143cdc94b7e67672b6d0a606e8e096f728b96e6bc86

                              SHA512

                              232fcb1d03e5ebedf676667c1fc4440af590bf68adb32064a7dc0763de8749955891bfdef9d34613659acb816b43e980fd6b211642e9c7974bea4669e784ac14

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              59b9fa0c40be2b6e8d126aac5f471fc3

                              SHA1

                              962a87a2de532ff423ae8f9333aa2633d7931a70

                              SHA256

                              7fd2b8f44cbe7239125c478d4ae490c90d5a45c1f1cd9f069c8c292b49870804

                              SHA512

                              d85d4b90e58625a6498e8494e9bd8d19abefd4a7698220c058f35793478ee99964f0fe3792bfd12693f179c38ae6031e90d5dc0601ace809b5faa1f73b834513

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              dc6512e541568deab5064b29af021d48

                              SHA1

                              5c69d1b99d0a200eb0688c42c2ec3abe5f521993

                              SHA256

                              7d7f01eb813883fdf59285f613db3f694ad4daf342afffe26cfc1cb2ade0e168

                              SHA512

                              e6edd54c7be284e50d4c9ba597cd7de1707d033f8fa0b4ad294e722ecb1347e709e14ffb20561b29af92894b7de088f0121f8bfba30d365df189539b0fe73d74

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              10b5505b2987586d8efdb59d81b408fa

                              SHA1

                              2a919fb10c21c5384d275bbfb6d147e21cbb3f2a

                              SHA256

                              c78c2f111d58772015d3f28ebd782cbe14f2d3064825e0ffb55e9838d1f7033f

                              SHA512

                              a1dae43db381a993a119cdeab008478eb03760f768d6cb1ff933e959ce39345eeb333d08582268c6999fd9a1d290ffe71d7e20bba14a04091542a0a00ee46557

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              17f6269a03f6b64a8d06ab93f43c0bd6

                              SHA1

                              5ea19bbaaa67a3ee9e0dc9dc9f19b99d82b5d9be

                              SHA256

                              8b00afb3ba620be9ebf149aa726f18ca0a0cef5ee5838562b641d07149cc403a

                              SHA512

                              612b146bf64297a124574f994de283b16ce17c525bf1b1866d1a892cad56087fedf7ae42ef67e4d45d250c31b8665538658ca48b6a5a48d45f57579c2694917f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              debaf3847b07ebd1421411915b645285

                              SHA1

                              b79823e5a1912734edb4c9d9eb524de02c20f0a9

                              SHA256

                              80dead39bd7a104d8d4b93f261425608561e11848553d32b68348460096a7668

                              SHA512

                              ff73b5fb710e8ff4f7e89e4412bd7d05e89ee63b3dd762280a13aea335177786b41a141f799c86be0a1082b0d65bb9f1a2f553c129fe4abe5be69dfbbb4be6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              554134779c2443507fa87105616ed54f

                              SHA1

                              2a919ae80bc51189e6cf88fb3b7874ca3ef9c8bd

                              SHA256

                              e00f5d4783eacdd6ef02586bf665b04866811a36efc064839b4ffcedab6c4666

                              SHA512

                              5adf748dc24e96e59f482ecf0f79a9cb89e6794e7d13896666981c31c937596b13454433fb375e45f913f3d7d04a2be4b150776dc99df53cf72a053c0ef9329b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c76402f7-7735-4c9a-946f-b8fbcdd3e5d0.tmp

                              Filesize

                              10KB

                              MD5

                              925782fa979ac76338754d84ca13f28e

                              SHA1

                              64ec2d7f5179f29edc2b581a18e35caa89d2dc67

                              SHA256

                              4873ae4234ea23568f3286989995d7e18dbcb57d0c778244e92d242c5b760b47

                              SHA512

                              8f1f92cac06edfba2fe706ac32e81ef9b0d51b61675ae9d0850c1d8566f342ce1590e9c6566b8d7efb44cfea2b2e619ae0cecc41eae1a9316eb820c7b094d0d0

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              8348d4a3c663ec3a7be5c4ef6c71a992

                              SHA1

                              d09fc9fe4f19bf725d2bee6c5b8af25d0c654269

                              SHA256

                              93f98a17bf016832420f2ca2f2c68c5cfc1e534171416fd1b4b6d4ee97da18b6

                              SHA512

                              ab75e03dfee37ad2935836ae43d5c0668b03e7c2381f1824c680b104e5bb5f6191d77bb7141f740a2516169c15b00628ab77ae31bd2c22aeb931d9195e038d35

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              d2e3c847e47aa69682077b03e508ee23

                              SHA1

                              44b9980b260628c5eff89e903f384ac345767aa7

                              SHA256

                              626b8a346ee9e104e6d7a6108d472e5009d526c9a28af83585cacaa4e89ced1a

                              SHA512

                              775723b094310d2ba254b48c03cbf11f784333b94fa6f13beefbbca12a4eb2542f1bec8210ea959fb16b8873772d68df0cc5b5f7ef77e0d37c5e2d58f1d9a67d