Cybercriminals Are Misusing Google Ads to Trick Users into Installing Trojanized WinSCP Software

WinSCPSEO#LURKERMaliciousGoogle ADSDSA

A new ongoing campaign has been observed that lures users mimicking download of a legitimate software, WinSCP which is a popular SSH/SCP connection platform. Threat Actors are taking advantage of Google's Dynamic Search Ads (DSA) mechanism. DSAs are designed to automatically generate ads based on a website's content.But in this case, they are being used maliciously to create negative advertising. This strategy is particularly insidious because it exploits users' trust in legitimate advertising services such as Google and the usual expectation that search engine results are trustworthy. The effectiveness of this approach lies in its subtlety

Indicators of Compromise

Domains (2)

gaweeweb.comniubab.com

Hashes (9)

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

IPv4 (3)

194.169.175.221141.98.6.195194.180.48.42

Notes

<div><b>CONCLUSIONS</b></div><div><b><br></b></div><div><b>1. Complex Trick:</b> This campaign is a tricky plan where bad actors use fake Google ads and search results to fool people into downloading harmful software that looks like WinSCP, a popular program.</div><div><br></div><div><b>2. Taking Advantage of Trust:</b> The bad guys are smartly using Google's ad system and creating websites that look real to trick people. They know people trust Google and familiar software, so they use this to their advantage.</div><div><br></div><div><b>3. Many Steps Involved:</b> The attack is complicated. It uses different internet tricks, like making sure users are sent to the right harmful website. If something goes wrong, users end up seeing a harmless music video instead.</div><div><br></div><div><b>4. Hiding the Bad Stuff: </b>They use the real WinSCP software to make people think everything is fine, but at the same time, they secretly put harmful scripts on the user's computer.</div><div><br></div><div><b>5. What the Malware Does:</b> The harmful scripts they install are designed to connect back to the bad guys' server. This lets them control the infected computer and steal information.</div><div><br></div><div><b>6. Who They Target: </b>Anyone trying to download WinSCP might be at risk, especially people in the United States, as the attack seems focused there.</div><div><br></div><div><b>7. Part of a Bigger Problem: </b>This kind of attack, using ads and search results to spread malware, is becoming more common. It's not just happening with WinSCP, but with other software too.</div><div><br></div><div><b>8. We Need Better Security:</b> This situation shows that we need better safety measures online. People need to be more aware of these tricks, and companies like Google need to make sure their ad systems are safe.</div><div><br></div><div><b>9. Could Get Worse:</b> Since this strategy works well for the bad guys, there's a chance that more cybercriminals will start using similar methods, leading to more online threats.</div><div><br></div><div>In short, the SEO#LURKER campaign is a clever and complex way of attacking people online by making them think they are downloading safe software, when in fact they are getting malware. It shows how bad actors can use our trust in familiar online services against us and why we need to be more careful and have better security measures.</div>

Mitigation

<h3 style="line-height: 2.21538; margin-top: 0pt; margin-bottom: 11pt;"><span style="font-size: 20.5pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">MITRE ATT&CK Matrix</span></h3><div align="left" style="margin-left: 0pt;"><table style="border: none; border-collapse: collapse;"><colgroup><col><col></colgroup><tbody><tr style="height: 24pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); vertical-align: middle; background-color: rgb(218, 187, 246); padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.38;"><span style="font-size: 13.5pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Tactic</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); vertical-align: middle; background-color: rgb(218, 187, 246); padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.38;"><span style="font-size: 13.5pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Technique</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Resource Development</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1583.008: Acquire Infrastructure: Malvertising</span></p></td></tr><tr style="height: 80.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Execution</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1204.001: User Execution: Malicious Link</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1204.002: User Execution: Malicious File</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1059: Command and Scripting Interpreter</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1059.006: Command and Scripting Interpreter: Python</span></p></td></tr><tr style="height: 62.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Defense Evasion</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1574.002: Hijack Execution Flow: DLL Side-Loading</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1036.004: Masquerading: Masquerade Task or Service</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1036.005: Masquerading: Match Legitimate Name or Location</span></p></td></tr><tr style="height: 62.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Command and Control</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1105: Ingress Tool Transfer</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1573.001: Encrypted Channel: Symmetric Cryptography</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1219: Remote Access Software</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">Persistence</span></p></td><td style="border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">T1053: Scheduled Task/Job</span></p></td></tr></tbody></table><span id="docs-internal-guid-5fc32125-7fff-cfe7-6f53-1c0d38a619b4"><h3 style="line-height: 2.21538; margin-top: 0pt; margin-bottom: 11pt;"></h3><div align="left" style="margin-left: 0pt;"><table style="border: none; border-collapse: collapse;"><colgroup><col><col></colgroup><tbody><tr style="height: 24pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); vertical-align: middle; background-color: rgb(218, 187, 246); padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.38;"><span style="font-size: 13.5pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">File Name</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); vertical-align: middle; background-color: rgb(218, 187, 246); padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.38;"><span style="font-size: 13.5pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">SHA256 (IoC)</span></p></td></tr><tr style="height: 44.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">WinSCP_6.1.2-Setup.zip</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">6EB977F30B1D54E450118381F345DB2546613D1AF5D4D097B0E8D4769962A581</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">setup.exe</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">24385D352B83222DC5AB92FA57B6649854ECD74DE378E279D8AC20A0B3B16009</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">python311.dll</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">BAFEDBA6E75D64E7820048E7ED6625451D22382A4F5F77F822DAEF225CB6EAE8</span></p></td></tr><tr style="height: 62.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">msi.dll</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">EE895FF48DA45393C4573E9E9E5C062DBC0F747BEFF89B7DDC53BDE41F773A41</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">1CE2B14E35AD00D6029DE24D192CF3CB3DDA09D22CC6851E9EFB0DA1B3EEBC1A</span></p><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">EEA0EF246B99590072FCBC004724FC96613E4BD31F05345DE7FBB0EED3B7BBFB</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">sex.dll</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">D5A5B4CB023DB243D1A65489B75A3252948252F21D9609E6C65A059D7ACF0566</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">mix.dll</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">AE346633270EB0FB0ED97E0B2E840AFD333D2EFA967CF90FF35CF55FD4B3D86E</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">foo.dll</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">3164D0A9CB3D1088EA89F1429B51DBEAB4EFA44E200F0CB9F7908D0AA9D8159B</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">slv.py</span></p></td><td style="border-bottom: 0.75pt solid rgb(221, 221, 221); border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">D4CEF07C9BA72CD4ED63F6FE7B3C86188CBF7DC9E2988791907186E744A235B8</span></p></td></tr><tr style="height: 26.25pt;"><td style="border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">wo15.py</span></p></td><td style="border-top: 0.75pt solid rgb(221, 221, 221); vertical-align: top; padding: 4pt 8pt; overflow: hidden; overflow-wrap: break-word;"><p style="margin-top: 0pt; margin-bottom: 0pt; line-height: 1.8;"><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;">B663EA82D4BDB6DE13264E637F817F08AD6EB107606E2385485E467EC4F7F54C</span></p><div><span style="font-size: 12pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51); background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-variant-position: normal; vertical-align: baseline;"><br></span></div></td></tr></tbody></table></div></span></div>