Analysis
-
max time kernel
149s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
19-03-2024 13:49
Static task
static1
Behavioral task
behavioral1
Sample
d643cedaed6ecab4cc237a29fedc34da.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d643cedaed6ecab4cc237a29fedc34da.html
Resource
win10v2004-20231215-en
General
-
Target
d643cedaed6ecab4cc237a29fedc34da.html
-
Size
57KB
-
MD5
d643cedaed6ecab4cc237a29fedc34da
-
SHA1
e80fc9e9eb4283dd0836f1e79982797ed3dec0c1
-
SHA256
e8de789a44a1ecf0d7fb2483ddb03dd627089b54a87ecd5573d14e79450044d3
-
SHA512
2a2899b469e924848e0bd084b91c31b41990a7e7c26c41f7f5dacfd0e294bd087411fce4368633712db58304e1c578c1bf81184a28cfcf0255a753446fb4d0e9
-
SSDEEP
1536:ijEQvK8OPHdsAXo2vgyHJv0owbd6zKD6CDK2RVroVhwpDK2RVy:ijnOPHdsB2vgyHJutDK2RVroVhwpDK2m
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.dailymotion.com\ = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{75501F21-E5F7-11EE-8F92-565622222C98} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.dailymotion.com\ = "24" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc2330000000002000000000010660000000100002000000011dda5e5895fed93a81172853c967131289b9c43fb8ed45b53a0d67bce375d43000000000e800000000200002000000054e7dc09c31789abd1496e85a0ec4fee17ae22b4aeb8d7ab585f36402e2c921820000000f42a1092beb38bbd8fd785564fb987de03ba290710a15798136c989b0ba4bede40000000f8ffdc7ceed305437efff5fa57e53df59c29a04b8122e08be4b635618126e2136e0a15cac00598c88754088b502814043fc1cc5ba9e1779b4d68e47d2629d4cb iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "62" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "18" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "80" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com\Total = "24" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "18" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10fab04e047ada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com\Total = "62" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com\Total = "0" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "24" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "417018018" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.dailymotion.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.dailymotion.com\ = "15" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\dailymotion.com\Total = "15" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.dailymotion.com\ = "62" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2908 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2908 iexplore.exe 2908 iexplore.exe 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2908 wrote to memory of 2256 2908 iexplore.exe 28 PID 2908 wrote to memory of 2256 2908 iexplore.exe 28 PID 2908 wrote to memory of 2256 2908 iexplore.exe 28 PID 2908 wrote to memory of 2256 2908 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d643cedaed6ecab4cc237a29fedc34da.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2256
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
5B
MD55bfa51f3a417b98e7443eca90fc94703
SHA18c015d80b8a23f780bdd215dc842b0f5551f63bd
SHA256bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
SHA5124cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399
-
Filesize
67KB
MD5753df6889fd7410a2e9fe333da83a429
SHA13c425f16e8267186061dd48ac1c77c122962456e
SHA256b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78
SHA5129d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD52db38ed15e90d61a5544b1023f576f90
SHA1577d562264e629728d22398b4dc7ad37d90036a0
SHA2560c10555205560ffbfc8fb7ccf8bfd245639fe13645e57ffa61d71eaa3c4529e4
SHA512862447e656d251a90e7b8e1a7651c88fa4b6cf4ff1884c937afa64533175819811601ddd72673fa909d613e144bddc3ad41d150318aa8867fefc9a9bd0b01bff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64E544B76338020D780BCC40A2A2B366
Filesize414B
MD5cbcbb6484659c50fbd0637205a659cee
SHA1970892011a1d298b3096b2dfc8c6d173e0e26b86
SHA2564148df47086c362b3d8d8afff55854776c678edf75302334eb06792f542e24e7
SHA51260d864a8231465c804673e2647d2a99094450d158b4d780478170aa65d6756906b2231acb3df7795a7cddfd3f1a82c663adbf58c006f5bb3f62d83a82de4a47c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52bc308982df5afe3a02e809d92d7fef0
SHA1cb7c45f0c3d55833f3cb671d1c48b170dee21e7b
SHA256f5320875b335d3296033b94f84d6a2f9b209e559c1f012dd24a06c4a010f8e97
SHA5124161fc55ef0f553332ee68cb175142b84a81d3165b0f49659a17fada47f692faae746d2941a48589fb39983abac4f31529be122a6f41c36bf634f982d51f34d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50ad7aaf7228be96eb29a3123899857f4
SHA192c90c9d5932b839cf8401769b4835838f92eba9
SHA2562c2b4d9b0a80f74e430a7ca913aeba2657c41d369e560ce811febfd17760f3af
SHA512b2b63632513649a37522876221bb99360ef9acc48d8411ba36b6c4f263ea327b22ff62f188fa1aff4108d026335077f82635ff80aab7a19095f803e2f55c6760
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59907fcc6cedf7c46ec013bd00ecfdb3b
SHA1bac6c19f9fc23f5eab9b626cd5adf5ba4b3ebbbe
SHA256b82d5cc2b219daad4bc296ab5ffc08ad47bf28737d993332ed5914f2fa7376f2
SHA5126b6f156f96d5f91c5e86950fd9f3d1057788f3f0bb9c0df10b7b72ff104a6aad5799a76d6d6497835aeccdadf127d19ac8a907fa47b20de40862aea07b89d8d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD551f70176c2bc883e42040b8f8d95ddd1
SHA1616ee5804111b22e83bce96c878c6845f5818120
SHA2566c49247b5c2cd294f2e459e62c28973dd45ad5f6cbfb55b1b0c79cb89f131b0b
SHA512f1fda1f2b3063f3cb5d0638563acd38ac8e5b82d21fc793e59caab1be6fb3d59f7824565c57375c04a01205e253d0952132ddf4d74d9d38746945d5497aa20dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a564fd6a09e1cdc0c7280a13c3d2e6e
SHA157c8364857d2504f1f771e32fc63fbbd307d3677
SHA25687329628d2fa911ef9307ff3c5a62f8b3da02766ffb45d85c5c64fb268d9b387
SHA512c57c6810d996adddffed08b092f051c73323f73b253194f6fc37ca4df61399c8c8623a8ef2b2fc8c8452df2eb9d6e62782545bc961f4c7412ca1d49c2a1b2380
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58925ca46535ed58a181007dcb15ba2a9
SHA1cccc5c7459cf51d005dbc805fde242374e5255b1
SHA25699e913836604d497293ab7890635cbe8be628a9b7e58339fb31f9a78b9ca864c
SHA5129d56a38cf6fb56a3267279beb0634850fdeece8cab7983f5c4fc38ea0ec17d168747e1899bb7311074d8bff83d0a53a6b968b5fb2da226c2d228b9f39fb813de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e9188b28130d84a3e042ede37941c51
SHA11f5f1f7cfcfc97703428c7fae9a7b09bb43637af
SHA256ce95711e95d1f3ab27517bbf7a2772efe9b33b0a980b9547f661c4a27286302a
SHA5124f30c1b1521c5325f4815be15896e4c2aad24d31ed213a673fc86d9b310ebb87f4fa1aee0230545e69fa197fbc8e6b11cfb027c086a7c67c6f49c00ad6f3bbad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b173480f87882d9072a70618ec186642
SHA1db8d2f3dd2b5e9b0c2c75e6269b20373a6e5f610
SHA25636966bcb08ba4ce8c206a97ee210ce230fa97506a9afe5123a579b2cdd45ffe2
SHA512333e8b953fd0de2da5648a7ca71fe4cbe41aaef525c7e255f98b35e5c2006196d1ad0e7828b25813d4737276f663d63489b75cb111b81ea41c5ab1a06fd6d1a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565997f6f71f5060daad5910383c1cd7f
SHA1af477630aed4f9f9d277562b1d786670cfcd215a
SHA2567624b2cd9685283343904b2918c49271f7ec5cc8752643aafe6ccfbffa731601
SHA5121b9387cac8a183709b05799b1d524130272a7428041f9c5d0fe0583493cdaf7dc403c0127c4ad9b3b3801e3f9a6f2744d19e09feae2aece0fbf3bda178a12557
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59cb6ff42fc760922de5b886c6565424e
SHA135cfbdb98b0d578dacfe73b785178fbc90e4669a
SHA2562fb464910e2bec7e1ec6b110a4f4dbb4bba6f40e0531e5369fc913ebf7c8ca1d
SHA5127ab8fcbb42f7ab2c5012f0b6d1c8d88cfd8769017bd65f9b19da7d7253fad1c4c669aed29ad5374ce75f5781f2829128f47abb284cf9e8fb984c1d7b0247c3ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566dba270677985c14d71e25f23d935d1
SHA171423e3d57f0d4c7a22649c2257b57cf02089f55
SHA2569fb05252a9c5406290d3ec480a78629e0d053fa3f9e6174c83caf88d0a1cf801
SHA512ab0680d3977f2332ef14e1616e9d0a78f8d23a0af960e68dab5c7dec2f768958749a576018e6db213a5e23a745b1545bf7efa839e9215a61697d8adc7e885d2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a78dd4f64ba3c5734c8dab78e837c95
SHA144c5cb76cbf3fc0d82fa025946aacb5374ddddef
SHA256b00f868d2f13b604fa310e638ab6ea99be62509cd78c1d6144b8bda7d15fe551
SHA512fac2bf9e7afdb7b6ec116f9f0a627430cf398fbc3123c2af46a6593d0050646f882bf0293c47eb9addb7a5edf735d07bb37021ebe2a8cbf8dd0424f26257faf1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56842e4dd348a17bd0e00ccddf0a81e82
SHA1fca5b745c02e9e0fa0a5799f535735dcd46e7930
SHA256e061881e3f9c6357e0c61fd3e03d8aada3ed5bb1ca4059d13998fa4804ee0414
SHA512ed38a8cbc2d231a2b73fd1b0591fac98ae0aa9ad9d19e84b5eb14683379fc3cd20ab21e20c91d14b4c4314e7302c10f91fa73d3de2ec35e26c39debb12306439
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51fdc4f227f98beb1126f43df8f8668b4
SHA1b48b4f634bdd9dd5496c20bc4a2e5d66f9af3968
SHA2564489d7bca619a365c7a111d0330f3e82ae1c3f220edfbb5e131346dc06055a24
SHA512bd35368d890233cd8d4b26150a953a1c2de231b34b64ebf1e8e9e0ede3fd96526ba0ed24a2bb6acc7a68e2f6780f6ed3003b5c9c164ffbc2f2f1710db944cb49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5954842f1c737205288d62aa3b98bc157
SHA143f37253787b3c02dbe14e26836f99578c951538
SHA25691a077aa4d8903927939350e9392d5586a345a07c2c2942d90427b181bd5eefb
SHA512a76721ec20e318b7b49df14177cdfc19b9b7bcbf9fd90ee6647b2909c948032dabe500a2b1a06db35474272a9db26fe9ef3b398b6ef2993f090b7af02f8cb0bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab6a06c2c09d68d41b09137bbf218549
SHA1008f34ed9702dd2f77945b966b232276f08df672
SHA256184e70f1cc42a1795c61a2f0822b361d3233dcea335c9a4bf8d88ce3af892b7a
SHA5121a10a2ff51c93ce95090d1fa2e7129e460496e3fc24fff0fc668d3937369e1ec4a26b5fb33e0487e89a9f82d8e5380241df820962ab653ae3f2f5e0e4ba3d6a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51171929c48f37b57ef1be57529aaf7d1
SHA1458ee2af41dfd8cc8ff20d0d591b28f93f388146
SHA256d2d7112f88380cb5c52992f8bad8f9639c6a1fb3e2274c53c9178b6e98e887ad
SHA512eedb34ca053d4ba177de941d136eee77c2df9a0df2baba28daf9a0c580f88d069c3558a99a3f5c6b8ce69120bc40550e4cd54dd0d191311469fcbccb921ebb1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cae8d74854d63d4e173df8bfc1fe1645
SHA15004329714cb5e125312bb367cc34f9a6d2deffa
SHA2569f7acef119bf8a9c4ae2e58e38bcaca140afc2982dc958c7909757f2fe147dd1
SHA512819adadea120f65d4fda18efb6741161aab7b6c1ecd0b85ae7f03f2f11c8260f27d6d9d4939a3fba2d25868111857f65ed3fa95264b6c3f730883a32495d6d60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bbe40c2855083b6c0fa9e6887401f4b2
SHA129542b8159f50c438c6c8fc228cb7e4cbbd5539e
SHA25662b9d1fbcafb3d8c789f530b80aaaa4a2f1b1fd259c49ce3f29def6728c65230
SHA51262a11613529aa03fcf1489b61467b3b7c58d7e7eef1d83f0d550d41223bd19a69e92b5979e51793280659c31028130d146e0ba4a940dd8965c3a21ae4afd0cc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e27823d4cbb903c1723870941f9353f6
SHA1bc9810b2e16fbfc0b9bcdd18d273086e11e68c32
SHA2565a3735b73344019a47ff5ffa23cd5911cbc9f7a743cb18fcebb30f8ce4a8e0f9
SHA512b203296adfe95553efcd132d10168b4ffb94a748decc3112153392fcc28cb6108493541249ed53c9a8653ffeb16d0ef1d5910cdfa0a47a4bab8cb4c2a989603a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5173e469eb9b61cb723dc92784fd421a1
SHA187e88b4f059c1fe81d48650e90a7b80ee3e73307
SHA25612952fe5a132475578eb493fe6105353dfcb40355e6914fc8353564428eebef0
SHA512eba202c39780434e65922356026f97d375d620afaff9b90ebef3369ad5d2f32062a2d007a23e995d0e8a48f4a8960b9094a822554e8b200f7a522015140b0967
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD503ee1109e98ce057954d15212e045a86
SHA1ac760cffc51177846e919a36dd1d514dc82c73e8
SHA2564d4e33f33a6c55c43e335ab38ba40ac8136850e472d23fb0f133fc792ae258d3
SHA51218d16e37766a1d992f370b80221f70a4c91b9050dd97b90882e4fd4db5f4c331d125b00b9192b454d09d63eb25e2238f922d1c0c0ea4dc9c54a693ebe5ae5d59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c909b2f655986dd3d74f65b451431537
SHA188dc3cf12d4b756654e3c863ef5c5b45b27f8bab
SHA25648244dbd70421310effb972621c5dbaba99a20185383002257ba035371dc0ae7
SHA5123d87a08deaca52dddf2d7afd1d2079c198c85c2b8165a1fd2c026c02360bc56e522673414cd3ec437bf70689782bbda9e7a3287aafa104b0276acfdbbd963c18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e63eab1028f3569188b6e99cba3b0eaa
SHA102f690927ac4fee68ec5bed8682e2ee264fc5e8f
SHA25676f80cb881b510beceffa9e85f6b0b20cabf66d008c551c39e6ace6446840ad7
SHA51207b28676842d3e6d7abf98229763f9d56c71fc7ead78f02f6bdb9b8796a593ea4d34e66446db299c5881716d159557c4eeb90a88b5f9f6668373a589018bdb84
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520d64ff062ea6f29325af922111fa990
SHA1e1836b3f5361af51782499f0fd6096f5e16ebf42
SHA256128a3a012a5642db744a0ff4c3623818fbd04b40e62e4e7c9d28b68c9582e6fb
SHA512ca0887bc63d4d28b3a2e9b9803defbd93027d69289d7f33b177960d5435dfe61f22cc668e6b42bd4c4f5cffbd06df4733fa9a6c53830d702d3a7971ad7c2fa44
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5283cb0685290d1652bbdc65776fa9d94
SHA16f380a91571ccb8b43162fcf9938de8c85fce092
SHA2560b4b57b7d0ba4f0a50ea5f683019fc1d91e119e2e786d8a6dd17013360d9dcc0
SHA51206c08c77e44450785a26dbedb65e2e6f40e6d88bbe1ade3b2b8899722ef7b3beea2dd6bf88ea84bdcba8de0e5a9afe414b6e2a8df203f03054b307cfcc0c2ba8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5532a8cc34a4a4a842205fcd4acaa7c7a
SHA132b1ea39d6cfb93ff59dfd3f7f14cc6c3cfe943b
SHA256312ad15b0a0d856018d7a90a9fd8f5aa6a244ca5855fd38263d5bb87438c6cad
SHA5126cd3f3e78390b217032d46fb68f3885c7a1e73574964d7c2edd1b7d909b939ef958392d366ccce3fa93211a7ac274957d441705dad634556f895cda4f63922c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bbfbb4ffafaff52f728b50281af8dd87
SHA1ad2b3831694b429944943480e66ae1d8c0725763
SHA2564e5c5b4f475ad847f4f5de92cb9a200e15a5095f5a9a995e1165252cf41b7879
SHA5128e6d8d2e62e2736aae735b8e40319eed97d1ba131539da190cc08f884ee69892e4ccfba4d57744adfb9be700ceba796172add60ce5bb7c03f53121ff39c1c31b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5014cf0244b5d99289f66bcfb12d69eb4
SHA119ed72c8224817e652efb0e54926af5ccfb29945
SHA2562768b5e76f259426c33af20eb347d1410ff189f9853447b901afc8698108fcdb
SHA512edfce7134b9521bd26dc26c12120f47bf91a583682a7a1d476ef7f12c9404f8397fc6633466369d1ae904bcbac346a745d0a002d6f9d8b5e9a250c9baa84a838
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ae4bec9c0855c6e607f80898ddbab39
SHA1ca7a6cd55aa5e0728e9c9566bedd9aa6acd4f585
SHA25625577539da80d6c41553e84743978cb366b5ac2df04e23505aa0f421c8cfcc0a
SHA512c970ee8841985e7e5670a39115b2a060e841ee383ed6c0de6786f7e45a96c32d343bdaa782e4f9b51c03bfa6159e40ed00cd13db207b5e4515683177f253b9cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD500679c0bbe077b740aa659c45b448a1b
SHA1b082701210683d8d6de3f6ebb51895c205395c17
SHA256372d3c2178e1292296d210d7ab74bffcd45d8d3560b59d683b05418ed0335700
SHA512c727c6f6aafb992e2348d77ed4708027449fa09bddc855a702d0a4644dabbbae852df43f73e391a5fa1221a029da14b3daca16b347af4afb358c78983c754817
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b93b30381c1a7d420dac08a6e714133f
SHA12c1ae5fd39b9967f18689a30b6edb97f870fae81
SHA256377f3957c04c00db24c5f4fc79589a48be58b69db517e47e4996db9d01730c0c
SHA51260602a8051caffa380437072a70fa93309644fa65781be989cf3d91f6706816af499706c744e7279187e1d57b1a938bc4aff12697c755f69a2a2a6e7e83758b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d34c0ddcec08eef779c30ae87041dd0e
SHA1c45124ef40287191c5f787cd1635a5cd00c86295
SHA25660f28f5883de96872057324d7721f97701653aa32dec1f006213f17e131716e3
SHA51212a227e57f067450c91ef3f09270b29c549d446ab839ebaf0296095690a7568e092097bba579f5422c8102fc0d3a690a15a09dd6f00fcbab1af967bc1a9e14de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b73d366d25b07e061b1313042f211dd3
SHA186359b55c43fb2b4222effccbe6b83c1b87fd0d4
SHA2569d6609526344deeb9b09df8b45b59fd34807fccc44d7c7b6246d17fa7e5ce9f0
SHA51280764d7005e9943978cf70ee9302d618881f1e767c21d2f4de67eae3b9f5ab1234a12a8fdb75e7cbcefdfe251e9a2359f1c2532be5aaf69961ada01a61facb68
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5faf39eca0d7ee13994b2f080088044fb
SHA17098d41ed97a1079415a37b905384a08d3dfd119
SHA25645b4a247791e953457be042b2ca002fc3a77f4971cda36dd92fb5a903a31afd1
SHA512b96bfae1baaca391bc44094921548c0a3a2bb49d15aa63a8a7d6f66b35bf66f89b7d73f667b3f4a5f85a97216bc6d949a561774d2f310448a6cf435b34b3580b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aca608b8938f806eb86f5e1b273214c0
SHA11e325551acd8aac5ba99d07f8639757ce53733f9
SHA2568ddace11370b693594f11981ac4ea2b0a385eb4e7c690a414164b5e55817102c
SHA512d49b4c847f832290952c6073d9c84a25c0954ddc269dc1fcc27c5b5519d5af66d6fbd64fb0970262876ddd444cee9608e9a84aa08db0b7084b31a10587f015bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541a8ab43f1515553a93628dbbf93e7c6
SHA1957fc69dc0d22204a80660a527d44975bf1ac4bd
SHA256ea4a54ef7f19dd5836b5cdc6fbeb91118a4fc610265239f386c4830014c7d593
SHA51232dd5729ef902f42669046f9d3cbe338dd1f2c86588c9ffa64a8138139a04e8e562145f033a205eedfaf9f2a2f68e81ff7b505beff208bc36084ded32575381c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54cf60784ed2c250edc041ea3968ab9e9
SHA15615e4251d713e307e8d2ad8120c0ca8e81f17af
SHA25684f55b971c3cebbfc78a43b35b79238601747370d3c255036f6670e2be8abdeb
SHA512f4112b485a96a6ed92144be978c1db1d3afc652a218490f1fb84bde6b3b867a6e5e509f3e69a1b850c573aaabbaaa175c759028cb3f7da372e4711770c5e572c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ba602bad81719adebdc4f5462066f611
SHA19525bfe19d83b313146c3058721079d01c706e99
SHA25677504584b1354b8503c00d20541ab318a84f41400aee5cbb72d0f77323ea76c5
SHA51201f1f25fcf29218f8dab623f9fed90d93c46eb99f82ea5dba4efe09516b56b38ba6139ab8459c558878bdd8ae375c3e7effeb16cde3ef28698538ad110c78daf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD500d9563180fc009d5236674086f69496
SHA16c81f10fc93c15b7cd50db1149762be9482f5492
SHA2569173bf811ff310b92432bb08009e8bf20324cb577caf13c586e34db2e188b00e
SHA512b695176aeb1cd70641ab42f9f77678b94aa22c9c98eb1a124ba309e7f688340a8b347a875ee166f25efb74cf59dcae9b2d90b3136c20a7c797366d7475f9d1eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d0de0be3389921a8be2a46327ee25472
SHA1b20690eeb958a6391e52f4897c8a4d5197f209b0
SHA256e834d2f45f7774aafc76aa7c9d0ea6ee6499a7ff4bf76f7892a4ce7e4fd408ce
SHA512725b90674c1fb3b91fd3af7bea99fc2e4397e970615bb91dfbc0d386ea5c001cd1731e9c3e8e4a4de0202430ad130b3d52d8862165153ac225ffd0d60cd4253a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54ac3f4934647a1d743c55b65cbc6de66
SHA1749c4eccbb39cdb8ef3fce8f6603f88be4e0fbcb
SHA256c3cbb583f76a745be9ca65ad4b5aba92b536c7cb9b7ff732edfd2da17200520a
SHA512ae26510f90168d4bc3a143e5df21868e7a7e5246c0e57272d9601233951d24d87fedf28fef4749313f7523bdf73f4574e735b48e3f11b7103d470d0a64758f5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD56e56ddfed12ac058c9483d85a9e69e49
SHA1ca55c33c8fdd10364077addf5975c8cd8dc28dbd
SHA25601591067ea1079c7e41f3bb1d9115529168049266ee982e7a75e3a1a4740072e
SHA51214c58c5a57e94ad86ceb0a5e9b34e6a9a12d5f2d4a1e5a20c0aa3d84913ffb6c1e5d23db0f8c580f898773f7d8313502d9dc3855c655874cacd8210db1ba2f22
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
166B
MD58f7cdd0498a148b9f37cb6f5dfab4336
SHA1930da050195e80b1cc1a1eae6884a175414cc7f6
SHA25615426b197a4b00a050269dbc3f93fd91220d86e217ba9532534dd1a775a8d3af
SHA5126851ad454351c4ecfdc389ef61a3933dadaccea9e4fe03536087e758b88dd9e0493e871c73ddef339dbab0bcf367d99a9039fc89326bd7809f5dbcdcfcb3eb3f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\f[1].txt
Filesize35KB
MD5b699c1e007e41328e1e9e05adb8b6030
SHA14d47f1e41cf30551914102048ec636acce90a092
SHA2560a3563d6b28c07efaf6ac0f820a305aa6775c40ae60aa8f041a682224c26056d
SHA512f8f7f1357b83c8c19e8a2174b8138acbc010b4cb2b37c54f823c2636f83385a8a1dfe2b8534c67cf20c59055422a3ddbdd6a289e6d820834decac7e9a2bf6bc0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
175KB
MD5dd73cead4b93366cf3465c8cd32e2796
SHA174546226dfe9ceb8184651e920d1dbfb432b314e
SHA256a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22
SHA512ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63