Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 13:30
Static task
static1
Behavioral task
behavioral1
Sample
f12a7f0e8c168a1f3a57c540989c31b2_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f12a7f0e8c168a1f3a57c540989c31b2_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
f12a7f0e8c168a1f3a57c540989c31b2_JaffaCakes118.html
-
Size
22KB
-
MD5
f12a7f0e8c168a1f3a57c540989c31b2
-
SHA1
32e8f2d6b73d8b57bd019b1128f573235a944d70
-
SHA256
7e2272a2b8baee0afcb3f79f6d70edd1496011b55df3e3849df8aa8ce1520d2f
-
SHA512
29773758705c2f74756cd9f35b3a225ee530be6692938a65128b41107c113f4367dd8c8fafff6018578cc889a859a08c0cea7b30cecb092d90261b3c25874911
-
SSDEEP
384:F8an/qs8hnflvP5LEfqiSiDfQ3anVc1lGKYmhIow7tw/wlwnAwskkUgVLRd:F8an/qs8hnflvP5LEL7DfQ0qOKYtMOvF
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "171" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\ = "147" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{453B2971-FB2C-11EE-87AA-FA8378BF1C4A} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\ = "14" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\ = "174" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0023a5a398fda01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\Total = "147" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "419349674" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "198" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\line.me\NumberOfSubdomains = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\social-plugins.line.me IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\ = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\Total = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\line.me IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "34" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\Total = "14" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\line.me\Total = "24" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\social-plugins.line.me\ = "24" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\avgle.com\Total = "174" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e00000000020000000000106600000001000020000000d138eea5b5f0e70524a01ce32e2e40b07cc4b5b7ad8fb5ee8745d1a747fb4f0d000000000e800000000200002000000079255f9714cebbce247fddba9a4c88fe537cfcc1206b8dfcb05dc114d4756a5e2000000083521e3ef8a0d994c9647272fac76a3dd986d3e0db5660b2fa823e50d75b194540000000b938bdf86cd7e292c380ab1e0f057de4bdaab332e13e24c551a01245aa924003498dea581f7c4835ff4c0e86800c6828b5eeca5db2a60c16fa3667e644c0a503 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1688 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1688 iexplore.exe 1688 iexplore.exe 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1688 wrote to memory of 2660 1688 iexplore.exe 28 PID 1688 wrote to memory of 2660 1688 iexplore.exe 28 PID 1688 wrote to memory of 2660 1688 iexplore.exe 28 PID 1688 wrote to memory of 2660 1688 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f12a7f0e8c168a1f3a57c540989c31b2_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2660
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5f741810cb830974aebab5f43eb80bc43
SHA11019ffd11ba07f662659b7f244d2743b4b1562c3
SHA25620c4d592f763227cd6ed7fc812ae9d65edd6e046c30a70e7c694c579d9f1580a
SHA512607ca542510b2a90fbade08569e449fdf35673dc4f045c4ca61982666fe2dd694d265835ebe2d90146dfcecedc7f229804c8e235d8eb9ca36f761064522539f4
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464
Filesize724B
MD58202a1cd02e7d69597995cabbe881a12
SHA18858d9d934b7aa9330ee73de6c476acf19929ff6
SHA25658f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5
SHA51297ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD519d796b9bbb5808f1e7e3fa9b563a2cb
SHA146f2242a6e433de22f8c2eaaa2862fec00c2ffa2
SHA25663b293ff6ee3c563a77b9aa05c4a3a2d84632ab413b0545cfd1a68dc65b81433
SHA51259834c6adb5b29a68f09b0497ec95602bfdb35437d48951ea609e48b9ae1d13b929a31ed3cf8537fd72823907479587b2f245c8a7ac16076be8467e62f6836be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD582b0df283e1c51e6c44584e2af138f65
SHA18af8f4a475d4d66504f6f55f749350a13bcb1880
SHA256c74fe833ee1dc50bfea9c610401eae80467b1ff0b914cd735bdd1bfbd12a1e0d
SHA512ec4017d31960e803a79ff273a204a507ec2c3d3cd49628fe19e4d9347169f548d80fbb1306f4d2c6ddf68795fc3852ce4c414b878e4f27534e301364cb335b1f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51578fe23e79770951ac82fa005268448
SHA1d0f44cde368efafff3b62e14d2e308781192f250
SHA256d0515a97a4bdeaebe49f2d80a1b6f20ca1345de792041caf53d3b5e263006863
SHA512a4c02777a3b64194caf52636d14a35c4a728f11f0470f7f019672c6fe3a1bdeca5198a1b8448d08391930122efb4d59fc379f5607976e348c0c4c9978d4f7874
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54bc48d2707f1a5a055e061e5b88a0c95
SHA1959bcade2bcaeb86d2ac81d2d3af5523a191eb98
SHA256a6525a6ce0574d2f753b1ddd7bb10ea4bed96a67c63c6c4ae25ce26ba45a789a
SHA512f3a80eb946b68e1b1bca83e20ab55f56d7fe9aec1c7ab087f65bf59fa5e011dbd3a9ea1e83f60f87a255c149baa08b1e4398f56cea6fb1648095be538dcb30d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af6726614e80c17b1a23879e1d279b7c
SHA1b367c1738c075a10048d26d95d036b5e7c1f0990
SHA256c597c93378e953524c8288901667f9c3c6369c4a95b5ece7f731bffc4430fa19
SHA512353afbfe41dbb4879eb4de3165f820975de18189ddae70eee29868acd9ab252028cbfcc44616f8f7df5218fcceca70dec416a8467eea4021723f1e429363db54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff41aa00ff804fb714fa474544cc2c82
SHA162864a295796375e0f628d1210f05e74ed39fa06
SHA2567ae1d57cd0605874d3723176add25e52671ce8f76f32db1c5d8d35af5025f948
SHA512ae701f9f79d712651909ab31cba71dbc8b85b2c593d607dac35e7b9856eb795327e776552c5771a0edaf246ef6f31f62b295e015267c3530c1c8458084fab622
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c336c8c84fc0e7349d1e9096bfa5ef26
SHA19cbc252ca51852afa10a5424a7e800dbe7f4c7ea
SHA256515aa3999186a64389ad49803606eb1a8a2454724dce97b4e75f5fd4fd4fc3dd
SHA512aed71dd101fdf67f86cde3cc50f296a614dbba9700c3a446e71c80e2cd4c92757682104873f2155d57d36ba83fc59ae817b5fcdf9daab88640323377b2366aef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58373e1842cf0ae654c861f150fcb2647
SHA161eebf09b69b4c26c25fcc9553a82c97e7e45697
SHA2567a02ca22ae0d0285d3925938e54249a1452a30a26db3da494ada70d66aa1758e
SHA5129b1c90b2154282c191e13925ad5a7f4a85ef9820fa97d1dd804c0466c42347cf8f8ec3d1921118df369c4c5fcc7f68a6c6b3924781e844e6ba43372a529140aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd5322115a2854a2f521d7900421a399
SHA1a425de94fc8b7abc2d9470a6da4d12420904a090
SHA256cb367f7dd25d68bd104f8e5ce76004d27c7ee069457b9a7aec38a26db732e38a
SHA51221c4da3b90a6bab8d296f39452b70b07ebd898b8aa3b9f52f57f6807f2d4e4643700d9f180fd21476b538049e09db9529a640339e0df93e523a0b727e78f82f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b30544298d538c223d5def452c714f4
SHA12c922f0737c30c316518242bf2e132dec52a5c6e
SHA256c5d93de9362fc1472ba77b707ee48f74db68879fc43e23a388fe6471168ed756
SHA512119da1be251370f1d465ff40ae6155c679af6882e83785a3a53bd2322d85ae08571588507007b1628fe8f1214fb4834989638b494991eb6435d0f2d4d1d1d138
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a33bf0fd39d7e4cdc823de615c3bd3c8
SHA16ede373c1064f90fe4413405f2902bf0a939ad61
SHA2564ed5a566048fb51e719fb238a68aa2f55a8a0215c8c59d8685a28f9b1119b58c
SHA5127fc960b0bed0096f7423efb2047d6d71c9727b4d6c277253236878ee8fc9a8632d0bb81e78d11e5c8449b958dda7a371f521e3bbee8a2a51c89f9a74bd148d04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58dca23fcd85ed930535afdfb84250743
SHA14d421342465c0b517ec152a1ce3c1d1d13f64f75
SHA256c6a49e9988cf659e2425639774bc94a53292e5f54f292ade57a5ae87cdd288e7
SHA512485b722095f61decbbe34007a076c3ec82e6858e18d86bd6791bf977659b0da836085e135dd8aeaa50c1a5a9d3fa7d5bd913d4eb19dac05a8355eca5cd1d8eeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5977e60866ee3e0f85a0690b87ec8583a
SHA17ec3f7a4a75ceb470a0462d60bf556b3dcd56347
SHA25663cfb72e21eff64bcc8ed703513c01c4115c00c23d719e1b2e7786a9a488bf9f
SHA5124e3738dd583126645e9f55d475e8b4dd32fdaf8563773724f060a8cfa1b9f26de3fbec6e3fde90cfda38a368464f0d7fa37a1570100acc90b2efe24f2a52d065
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a70a6d35490087ba2552fa9b099c1d5b
SHA11169a50dd00619ef177fa9acaccdcb32e66d4b80
SHA25660ba025b3100f0464fcf37fbf11e997fa4cdafc8a65502aba30e61ebbe5bd66b
SHA5128c27228f858967d681723a97845d78d5650413df82648d411a250526a1ee75a74b0797ef674df4948737da9f809462518438a432b19c7f11432115d0d6917596
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD584a1ec94d9be775d3069d8ee230dfd52
SHA12f5574d51e7b3578b5357708ebef82b5333e3221
SHA256c0f99c34b15e1c932c264d0890e90efe1746614904cabb1813090a7f92a158d5
SHA512923ed773a62f7dbb9196e9c90756334b6e6d2deda2ccb97c14de3bbbba127f5879dd7b9b1f9d864cf4e2be9a5d5f45eb9724da7248f820cc6350ee937bc0d157
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55af64558db36ad540af4e6bbab39ad2f
SHA19cf00ba546754410b26eb5dc708fadd73d1ec171
SHA25638eb616ae21c364abbee106c72390e0b826c0716f8f5a9fe595ff19bc2c804a9
SHA5122f1419e23dc13918199f31b35a5568ae4a94a543634cf66074b3a06e7e6519152d8fe29c86a61ec12344d28ca6c78df4df893ac672904c72bc56824231729555
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9fabbfaaf2286b666026fcd2d07b737
SHA1f0fd65ae461ae0820e29d27f57a9652cfa795b6f
SHA2561c358141643adf4d6d0ce4017e9b61b374143959d09ebafc4b166a186e4b1748
SHA512ac25245f0f1b644dad5e04d1591d738a5a7eecbb6410f277e88adcba5826466b023c7925ed9b7ab5e0643d5f0c0d3a21b36e23e10f4030a0b1a66a50ea2e5eb5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f3d552539176fb4edd92c3d60ca6a2aa
SHA1c4647c2ce103cfe5329c5dd61d1a4fe81567e594
SHA256718f5095b612a7944479afff6a56aba69a133e22f25a3188064d64ec47ab5e0d
SHA51244525a94692169e2c33c58ba672ce1c3074e77b703329fb29dc6f31761e975512c0ce4ca361ddb3b30b3d6720ad3c3776e82fe94c441c21a6b21ea9f1213c230
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1cccf9e64e70e6f62570213a66c1d56
SHA11fd0b6eb293c601e01951a83615774c8bd06a26d
SHA2566ac07612dbf87fae1314198a679ccb9e8111112a513d764482366dbeb5935b09
SHA512d729d16451ada4587281d941a2e4cc24143016129d82cd8ab78bde750690087d3f8392931d30c417bb1d4acedd082e3dec5b42a1e35ece08ad0c94e0d8c93e2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f0f53cd6aab6358675bd9faf82e2797
SHA1d0c61ebf0c885f09e773839855bba6e9355efe4a
SHA2563eab109dc2a7d6a7bbdc9113db5a1be970fe233e408d527536c53cdb02e277c5
SHA5120d5711b733f5b0c30605a97d241270b0577c53e64cc22a094ba3047427cd6870f883655a260711d199268e599da3b193ce6c8f61e733f7321a3be7c493aa6ede
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f49868a9402b2d4655c3ab5ca6c9c089
SHA10c73d9aedb77137db33f862a1eb9eb6603d58af7
SHA25659cd0d185bfef07f49d37d9abf8a2745de82eb7129eaae6958a454b6ace282ea
SHA5121603847d8b89fe12ea4a9d9f5188f7e68be0cee3663068c3773f5279245ed3fe0b0114437e0f9c51eace8a4002366277c0a1edda96fe7b55e6ff61ef20257c49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5068fe4ad498c9150071aee4c39aedbcd
SHA1ce7f153d0f2e5c6d0bf7adf3ff61faf27982bdae
SHA25607bfd556e5467b2e54a584d5c70a56b2ec1d47a1c231731e704d70adad57cad2
SHA51231984d5a16ad3c9697df439bf1830b400d5cc2049d776c451ae943364622988199ff668e99961f8ab3f47e9956a0786673f23db0b0edf019e581bd17d0c7e781
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577df2f783319be9a83911fc260b04370
SHA16a411317e4203ebbaef1be4766f35b341329af1a
SHA2563bd7070929ea5be5e210fc289e3499fba0b7bed8be3f69a2b7fc39ad223f5da0
SHA51252b99030c80832ce54d41958dc9637cd8d1a54eaf62f4e8cb8875e96dd64ea814e5041bf6c3bdf87400cafbb251bc80c048244568e1285a59365926b8a6b3c8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a52b342907b527f53215f4c56c106707
SHA1f629956f9efc1921be89b41c1004a4909b31c8cb
SHA256486b97a5a1c430a5700df6e33651351c1dfc4cf3068655967eed4d64ef02021f
SHA512b512d8e1e27de9516e00f1ae38cda41327b690c7fab3ad5192b465e63f5aeb848c877a84aa70f254e7356bf5634eab3661f15654e1e72913a701599eea04d2c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD592db4c57e00c9bd4595c28a4c4928ef8
SHA197a5fc93f4a83737466d7a10187f897c90dc7867
SHA256e4f0d084fc0e5bfa653c28c2bc9139773326bbfd8a99f390c6683f25ae2315b4
SHA51258d4c8dab690c3c199e1ef0a00632dff45b44213b07b69bb2cea947bc736b14a1347c61db84b59d0fe54922424b5bc0bc5211ec1a4641f87cb773781d7ee1f70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5293deff5ebad020752c70516caa9446b
SHA1b1e4130edeee3e7e32cb15674afd239db98916dc
SHA2561a5865b81fbb1f407c7f039deca4f3847d055dfddca234593fdaaa49481a5718
SHA5120792dec11b0fa219f8899743e631ef2f6610ab4bdff67dd78d2cf2d4e66b3e178cb5a55074ba5c8c67c5e6dec110a01015af5e8f2545af7e65ce4cb0fb4c47ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541160eb1a1c4a04d71bdc3b3cbb389cc
SHA140b62d829f350420c9f1b456d3b80faf8009d128
SHA25682e6044f67648a727ba14c74871c46521580d844e5370c61f704b74c521a6aec
SHA5125c0d3684d26d7c379ed0c7cabc5738638f19b0260e00dd5fc6e836e4b4fc5d0b9c0518ee0d4fdcbe5301b0c786a7df20610ca2c11f48dc51e9c62036d9862b47
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a12be54cdfe9ef1b5af6b65d47044b6b
SHA1f94e92c32ddeb1b5b14e39adfbd289f311fe7ef1
SHA256b584ee58662bd7b431c4c918a47037e5da2d088f9237d0d1e63c6c6adbf7d21e
SHA512522e54ca5ed2593146a7d878e8b531e9b3b747d791b30542640d096d7b06848f1a5d5dd65ca626132f13b01ceb40c60b9a97fd7b8e7e217d87c44e2c606326d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5efa021ee0110ad1a6a47822e7100eee0
SHA1395fb8b01b9b5dd05a3c584be9669849c3f15e99
SHA2562eb43ceed368b06dc309c82da5991416f30cf946eb25af4966822b06ae3b8e6a
SHA512b4eaa9ea1ed7663d4ab09cb7aab50346c01c6378382f94054c9c0215d5fe1756982c513ca7fc130d90c016f81f90c811c094adc2e632cc087645e10eb7987aa4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a8c18a09ca5d59ef971830f9cab8ab01
SHA17ed308851d897198cd8f7bfd5c1a50cbaa27004f
SHA256d545b695371d47a6e562bc51d473702b5d73613d38caa997fee556344ec04789
SHA51209e9789b1fb3fa3862704f5cdaca47d24145d8ebd5bd3a2faa767a6442b665bd42bbc02132ff00967b31f481f5adba20f0cd43f3f39c33cc6afb3c5e78824857
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51649b40e11d5c0f82d0e9c5d18a16fb7
SHA1480af83730bf9aca037e2834dca87e8384f04636
SHA2565eeaecc5a281b828cfc81cc4854a97c1c483f7acd90c74d363c868fd2c09e2b8
SHA5128db0c6c5f2c3f3d136769665ff3824927c0a6ceb802d7d1e2800d3a5101cf8081dd91c901b03f601ddf342232c8646b21f8c24de7a3dbbb0532b5d4c7b9c070e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e50c4b2772bc45a34e66624388a65f9f
SHA19dafedadb6fbbefdec58a4b8de30b922ba437b2d
SHA2560dd78ab49723a6121f59c3325f53e497a70e25db679055931a81888fa0bc4284
SHA51295812cb0ff9c4a64d67617297018fb7963c3ac893a8b681198d0fa2ea779e7abd16c7a8fa8d9fe528c292b3be59feaa94d6232e191995e0960447e623e39a4e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f93f3cebf5af6283017b028da5a4237
SHA1350d18d3d050697ed7d6f356396781e093c0893e
SHA256642797d784c3c34579ec62a2643853cfe224c3657458acec0834459abacebc54
SHA512f5b47124294392d44ad18cf90ed9729689b0ebe7567b850494c2e4d950681677c086fa98f5c1d8c0f7338121ef2fcdf3dc8b20b6c4d8e4436b8f280ea686f3f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b3f6430888c99011cc067435b8b20498
SHA1aa7977e0b2a53b34b66dee24f2591087245e8f57
SHA256e33b5c67706d646cf351b52e3ba7d49940723786852a0c5bdfe09b36e5ce5d8b
SHA512fcd034f24e08a0ed565a23f6e1c9c7d1a875807545e5d8a8881d65bbb107a542f203cf64215a5bae1e783e6dfd56333f309aae4456f2598383005107d3fe2393
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5537ccd456f82e2b3b8a3dbfcfd0deb2e
SHA10f2df21c3c0090d9c7aa86831380440432f37e23
SHA256845caa5a0a23a34b8dfb3e09c237a0e9d3a0373c1029ed0bb7e5149170395796
SHA51288d01dfb68367ff0c5230c3341ff96ee88ba2c261b23c5933d10e71fb9ff96284f542a6e28d6513ce1700a8e8a8212a6b080117268a9a4027fab65566601c7c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD53bfd64b88d6713a848eb8d1cf00ad63b
SHA107a8407df7f08058a33655dfe4cb23d4fd26840c
SHA2566207ba1eb975aaf2df6f28dc1e885cc0896722745f11685a07cfcfd51ee2d600
SHA512e2d4b14ea49a3ff2f8a9929bfed5cb67be0506c60dbda98ac1e87202a55a58cde43f3d8ddeb507a819090b4197452607da6f6acc5d282518503a04f0fe7ab284
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5a1d49817ae91fed3bf06f211bc598696
SHA1e4d2183c4c1ea0114abeba9baffc9b8bb7651b1f
SHA2564ea27804569a148eb4e2b4987389893fe8779f1b3e83581af410c9390bc21f1c
SHA512e49d1c0a90363852c4a9e1bb04f5fe8c3e8ad590453852ba4d9c2c0c74dea25194a21b06a820be3c2dff9ddadf2399eeb1745a1711be648a046e729fc0da51b4
-
Filesize
83B
MD58dd860af508e50b327e0e213598d595e
SHA17aad45f478b99db002977eef4cb2301cfa201097
SHA25639b8558af55c6ab76c6bc11937d2e4284a6a100dc7ed67a47c449bf8cc0f70d2
SHA51209736a99654154b1cf4aa072bf5e227566aadf7598891050b6d95a56f6330579e21580565be5be1fae3dbcec4a18a647cad7a73b323f8c7396cc71a86c39e678
-
Filesize
400B
MD51f2f4fa1575578b23aed4463338254b2
SHA1dd20787af663a3e19df5c1ce1668f1cbe6f6c9c3
SHA256e89bf36d6b511d0191554dc06dc3bef145683113860e99fd18181500e4d241f7
SHA512ecc8bc164e4e9a40e43154b877ff47c42e7cfe35cde82917443011b5faa0fed39abbb0d90217c29f7903a2da95b24e66cb48c0adf77a12b4f97d0a51bb4b693c
-
Filesize
447B
MD5c76fcac89324463e444c9e9bf07295f5
SHA1fc35511e322c836093a8d0c28afc36651d0d4502
SHA256e8a32c2f73f4c35a893a34bd3892da0f1f4fd143e1c6ec3b3e1a0bba2f23d5af
SHA512e84f6cf4bfd0c6c1605e99648abc03b9d10d19a315713b7fd87cdcd972374da68c19969bb769165c37845c72abb4e13a639a9b8ba605cec6402bd40dd9d28769
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\analytics[1].js
Filesize51KB
MD5575b5480531da4d14e7453e2016fe0bc
SHA1e5c5f3134fe29e60b591c87ea85951f0aea36ee1
SHA256de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd
SHA512174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\e[1].js
Filesize2KB
MD520c4317df06918eb01577871257848eb
SHA14bab2a2fe08919be4bb1f231f56f3a9158792b24
SHA256a9578b7b9a921eb03bdca64107746a4c4511797f86c3fa5a06f5c765fda9aee5
SHA5121e761b9881f225ac067b0087a49a82b8245825c513cd18463e62bc964e5f53b51c4d7ebe210d83ea8ef7dc19722dc76d0154fed3f6df255d5b5408be1ccca5bb
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\jads2[1].js
Filesize3KB
MD5bc8141c4650030c41f6a98026b12ce80
SHA1af5618f7e467a207d4c64627be580283ab5640cd
SHA2565ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
SHA51270fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a