Overview
overview
7Static
static
7Feed.and.G...yC.dll
windows7-x64
1Feed.and.G...yC.dll
windows10-2004-x64
1Feed.and.G...ow.exe
windows7-x64
1Feed.and.G...ow.exe
windows10-2004-x64
6Feed.and.G...ss.dll
windows7-x64
1Feed.and.G...ss.dll
windows10-2004-x64
1Feed.and.G...rp.dll
windows7-x64
1Feed.and.G...rp.dll
windows10-2004-x64
1Feed.and.G...me.dll
windows7-x64
1Feed.and.G...me.dll
windows10-2004-x64
1Feed.and.G...ix.dll
windows7-x64
1Feed.and.G...ix.dll
windows10-2004-x64
1Feed.and.G...ty.dll
windows7-x64
1Feed.and.G...ty.dll
windows10-2004-x64
1Feed.and.G...md.dll
windows7-x64
1Feed.and.G...md.dll
windows10-2004-x64
1Feed.and.G...ET.dll
windows7-x64
1Feed.and.G...ET.dll
windows10-2004-x64
1Feed.and.G...in.dll
windows7-x64
1Feed.and.G...in.dll
windows10-2004-x64
1Feed.and.G...at.dll
windows7-x64
1Feed.and.G...at.dll
windows10-2004-x64
1Feed.and.G...ig.dll
windows7-x64
1Feed.and.G...ig.dll
windows10-2004-x64
1Feed.and.G...on.dll
windows7-x64
1Feed.and.G...on.dll
windows10-2004-x64
1Feed.and.G...re.dll
windows7-x64
1Feed.and.G...re.dll
windows10-2004-x64
1Feed.and.G...ty.dll
windows7-x64
1Feed.and.G...ty.dll
windows10-2004-x64
1Feed.and.G...ng.dll
windows7-x64
1Feed.and.G...ng.dll
windows10-2004-x64
1Analysis
-
max time kernel
128s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
20-07-2023 23:41
Behavioral task
behavioral1
Sample
Feed.and.Grow.Fish.v0.12.0.23/CubiquityC.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Feed.and.Grow.Fish.v0.12.0.23/CubiquityC.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Assembly-CSharp.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/DecalSystem.Runtime.dll
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/DecalSystem.Runtime.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Posix.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Posix.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Security.dll
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Security.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Simd.dll
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Mono.Simd.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/NATTraversalForUNET.dll
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/NATTraversalForUNET.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/NeoFurUnityPlugin.dll
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/NeoFurUnityPlugin.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Open.Nat.dll
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/Open.Nat.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/RakNetSwig.dll
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/RakNetSwig.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Configuration.dll
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Configuration.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Core.dll
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Core.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Security.dll
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Security.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Threading.dll
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow_Data/Managed/System.Threading.dll
Resource
win10v2004-20230703-en
General
-
Target
Feed.and.Grow.Fish.v0.12.0.23/Feed and Grow.exe
-
Size
20.3MB
-
MD5
79853319c5343216a687066f2504d781
-
SHA1
c8af33228c63aa4731d1d7d35f6cefe31309e212
-
SHA256
020202cca85d7c01003b8b062eef89b9d7da92c622977edfd5b6f8fb5f61586a
-
SHA512
f002184e59d83ae36a6a98a8bfa7e59ac9778828c2188d15742ae36e26ae90eefda479659657b1d38f9c1b8da8d130b5f0d99ae643cf0cac49bd64c6dd0eb604
-
SSDEEP
393216:gzIhvTDsrB7wDkkXPjboYgIkLImtt51xpu8:c+4
Malware Config
Signatures
-
Drops desktop.ini file(s) 1 IoCs
Processes:
svchost.exedescription ioc process File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini svchost.exe -
Drops file in System32 directory 64 IoCs
Processes:
Feed and Grow.exedescription ioc process File opened for modification C:\Windows\system32\symbols\dll\msvcrt.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\glu32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\UxTheme.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\mono.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\psapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\shell32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\imm32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\msctf.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\profapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\winhttp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\rsaenh.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\cryptbase.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\CoreMessaging.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\CoreUIComponents.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\rasadhlp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\DLL\hid.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\user32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\WINMMBASE.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\DLL\hid.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\ksuser.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\DLL\dhcpcsvc.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\rpcrt4.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\opengl32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\Kernel.Appcore.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\cfgmgr32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\WINMMBASE.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\WinTypes.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\kernelbase.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\d3d10warp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\cryptsp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\ole32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\shlwapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\dnsapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\winhttp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\msvcrt.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\shell32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\msacm32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\bcrypt.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\user32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\DLL\iphlpapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\shcore.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\Windows.Storage.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\sspicli.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\gdi32.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\ucrtbase.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\version.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\DLL\psapi.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\mswsock.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\WLDP.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\sechost.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\version.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\shcore.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\DXCore.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\ResourcePolicyClient.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\WinTypes.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\msvcp_win.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\winmm.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\ntdll.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\XInput9_1_0.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\msctf.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\bcrypt.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\dll\ucrtbase.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\symbols\dll\rasadhlp.pdb Feed and Grow.exe File opened for modification C:\Windows\system32\UMPDC.pdb Feed and Grow.exe -
Drops file in Windows directory 64 IoCs
Processes:
Feed and Grow.exedescription ioc process File opened for modification C:\Windows\DLL\kernel32.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\shcore.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\MMDevAPI.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\winhttp.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\CoreUIComponents.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\XInput9_1_0.pdb Feed and Grow.exe File opened for modification C:\Windows\UMPDC.pdb Feed and Grow.exe File opened for modification C:\Windows\ResourcePolicyClient.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\sspicli.pdb Feed and Grow.exe File opened for modification C:\Windows\DLL\hid.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\ws2_32.pdb Feed and Grow.exe File opened for modification C:\Windows\oleaut32.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\version.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\rsaenh.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\ucrtbase.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\msvcrt.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\rsaenh.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\bcrypt.pdb Feed and Grow.exe File opened for modification C:\Windows\user32.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\imm32.pdb Feed and Grow.exe File opened for modification C:\Windows\bcryptprimitives.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\msvcrt.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\dxgi.pdb Feed and Grow.exe File opened for modification C:\Windows\kernel32.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\msctf.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\devobj.pdb Feed and Grow.exe File opened for modification C:\Windows\cryptsp.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\gdi32.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\DLL\hid.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\dxgi.pdb Feed and Grow.exe File opened for modification C:\Windows\cfgmgr32.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\CoreUIComponents.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\advapi32.pdb Feed and Grow.exe File opened for modification C:\Windows\msvcrt.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\msacm32.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\combase.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\CLBCatQ.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\ksuser.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\WLDP.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\dbghelp.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\dbghelp.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\ntdll.pdb Feed and Grow.exe File opened for modification C:\Windows\winmm.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\UxTheme.pdb Feed and Grow.exe File opened for modification C:\Windows\DLL\dhcpcsvc6.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\WinTypes.pdb Feed and Grow.exe File opened for modification C:\Windows\shlwapi.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\shlwapi.pdb Feed and Grow.exe File opened for modification C:\Windows\d3d11.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\profapi.pdb Feed and Grow.exe File opened for modification C:\Windows\hid.pdb Feed and Grow.exe File opened for modification C:\Windows\cryptbase.pdb Feed and Grow.exe File opened for modification C:\Windows\player_win_x64.pdb Feed and Grow.exe File opened for modification C:\Windows\msctf.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\d3d11.pdb Feed and Grow.exe File opened for modification C:\Windows\avrt.pdb Feed and Grow.exe File opened for modification C:\Windows\Windows.Storage.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\gdi32full.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\bcrypt.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\version.pdb Feed and Grow.exe File opened for modification C:\Windows\dll\winhttp.pdb Feed and Grow.exe File opened for modification C:\Windows\CLBCatQ.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\UMPDC.pdb Feed and Grow.exe File opened for modification C:\Windows\symbols\dll\shell32.pdb Feed and Grow.exe -
Checks processor information in registry 2 TTPs 6 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes:
Feed and Grow.exesvchost.exedescription ioc process Key opened \REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Feed and Grow.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Feed and Grow.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Feed and Grow.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz Feed and Grow.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe -
Modifies registry class 1 IoCs
Processes:
svchost.exedescription ioc process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3195054982-4292022746-1467505928-1000\{D553CB9C-5903-4F60-8D8E-ABDBE7A563FA} svchost.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
AUDIODG.EXEdescription pid process Token: 33 2156 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2156 AUDIODG.EXE -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Feed and Grow.exeOpenWith.exepid process 788 Feed and Grow.exe 116 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Feed.and.Grow.Fish.v0.12.0.23\Feed and Grow.exe"C:\Users\Admin\AppData\Local\Temp\Feed.and.Grow.Fish.v0.12.0.23\Feed and Grow.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f4 0x3f81⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\Videos\Captures\desktop.iniFilesize
190B
MD5b0d27eaec71f1cd73b015f5ceeb15f9d
SHA162264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA25686d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA5127b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
-
memory/788-133-0x0000000005A70000-0x0000000005B70000-memory.dmpFilesize
1024KB
-
memory/788-134-0x0000000005420000-0x0000000005520000-memory.dmpFilesize
1024KB
-
memory/788-149-0x0000000005A70000-0x0000000005B70000-memory.dmpFilesize
1024KB
-
memory/788-150-0x0000000005420000-0x0000000005520000-memory.dmpFilesize
1024KB