Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
09/05/2024, 01:25
240509-bs4saadb89 808/05/2024, 23:29
240508-3gq6lade9x 308/05/2024, 23:20
240508-3bpqksfe35 308/05/2024, 23:17
240508-29zsrsda5v 308/05/2024, 23:12
240508-2663nscg6t 408/05/2024, 23:09
240508-25jkzsfa47 408/05/2024, 23:04
240508-22b2qscd7y 608/05/2024, 22:53
240508-2tz4labh7x 808/05/2024, 22:31
240508-2fqyrsba7t 708/05/2024, 22:31
240508-2ffg2aba5v 1Analysis
-
max time kernel
1799s -
max time network
1689s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
MICROWAVE.webp
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
MICROWAVE.webp
Resource
win10v2004-20240426-en
General
-
Target
MICROWAVE.webp
-
Size
59KB
-
MD5
8c9beb192d4d9b3b8f605ce2f730a1d7
-
SHA1
810a8fd46963e2cde9bc714177b893a633016e82
-
SHA256
5e9abe7c0a9ee33a8597c5a923af28f91e90e706741c3e3191d9c261ebac78f7
-
SHA512
25bcd758eba766fb2dbe89630ccf4a80c3913715452f46990e31d7edced41359e99a142ded140ab8106a5e1b89b8a2fca8815b64caa1aafeed86648c0fcc2f11
-
SSDEEP
1536:ynOnmqlCB6c9CIdgYABxXIV3wYA3kKSG+VOe2asU8aaowh:OOKBf8agjlozYe2ya9h
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe Token: SeShutdownPrivilege 2676 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe 2676 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1192 wrote to memory of 2676 1192 cmd.exe 29 PID 1192 wrote to memory of 2676 1192 cmd.exe 29 PID 1192 wrote to memory of 2676 1192 cmd.exe 29 PID 2676 wrote to memory of 2968 2676 chrome.exe 30 PID 2676 wrote to memory of 2968 2676 chrome.exe 30 PID 2676 wrote to memory of 2968 2676 chrome.exe 30 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 2664 2676 chrome.exe 32 PID 2676 wrote to memory of 1376 2676 chrome.exe 33 PID 2676 wrote to memory of 1376 2676 chrome.exe 33 PID 2676 wrote to memory of 1376 2676 chrome.exe 33 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34 PID 2676 wrote to memory of 2496 2676 chrome.exe 34
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\MICROWAVE.webp1⤵
- Suspicious use of WriteProcessMemory
PID:1192 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\MICROWAVE.webp2⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6e79758,0x7fef6e79768,0x7fef6e797783⤵PID:2968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1160 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:23⤵PID:2664
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1508 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:1376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1592 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:2496
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2288 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:13⤵PID:2232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2284 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:13⤵PID:316
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1324 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:23⤵PID:1616
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3372 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:2368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1560 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:1304
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=1968 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:13⤵PID:2544
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3372 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:13⤵PID:2044
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3688 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:2168
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3484 --field-trial-handle=1292,i,519328902724641922,2204645937359974546,131072 /prefetch:83⤵PID:656
-
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:304
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8534db3b-bd73-4154-8832-dc1d1cdd3839.tmp
Filesize5KB
MD50383072d23bc4b03ee9857ba79fce585
SHA14a948024eb6d18ba103b7269550f45b64511ebb1
SHA256e1fef1d5e45bb4a5ba0f2013f58a51344ef8f8730109eace9e978108fc4cb053
SHA51233cf77f11ed4a2992f4366c81df1b940849e2b52d7ca9f0afe28faa3d7afbe1c20648a2c28ff90c3b39679d632566a577c6110ffd12c64de2974624cefad0315
-
Filesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
5KB
MD507fcb126cdfd40c9b18fca502cc35803
SHA141cb7e44e1582d9d5bcf90f4849a3c33cf09a37d
SHA256b03eada36e8eebffc844b11a4fdcb684b72ba0a6bc4455470d8b6bca64caf5d3
SHA51226071324de3dfc75fa5b0cd7c7f4dc6e44abd3d78850aab776ea60eee6bced9a46f28b949e0c5da5d996f21410b2c313a9dd5cbc2c427dc1a7d51ae7943d4d44
-
Filesize
5KB
MD53fe46489390184e9455744a71b7d382b
SHA1ed13c53b310232b7bb66defa6887182cfc10e7ae
SHA256208ecf7d5f65c1791d8f9bb0ed1616f2b1f80bd42474f27065cea484a87d6c52
SHA51278f3cb42104ef0264560597818b7179fcff400ead5355a35d5fbae484cea385512a4cc3f1266ff6547460bf36a4c3e1c181dc603c0b267cb031de0278cf7c70f
-
Filesize
5KB
MD50d2ce913933465cc57b4f678e150eb36
SHA1c0f4245f2ced5029f1a4061ad7ccfe72a55d5750
SHA256d4da36dcbaa0d4d03e8bec37bbc6537fd187f38b6653cade25efb425ecf27e78
SHA512774b12201f7bb66432d3dd444cc79548dbcc6d161d2b481c274424952f69bf790bd7b39b55ff2fce3fa9bb06e6be4ca49bc1172a01107c549dff6cd84955a82b
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
277KB
MD5b6e7721d03d069a06734024fecb1cd7d
SHA1ce5fb7254be85732b89259edcbf029cce690e2ef
SHA256494f783c014d67d521ab46d18762bcab5e2f5d472000b2a9ee169f75254e0212
SHA51220d482647b0cff63a70b713837227942a8287054cbf95d93e765ab04511e92e93315118778ea1422f298d37f0c09cefd2a085425e167d014a8c62da14571a568