1e700242475e022b60a8f812460c88133d5168400ef99a301e0ec8d1cdb44a30

Analysis

max time kernel
149s
max time network
149s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/04/2024, 02:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

04389e3a243b7f2e5ee8327aa4a2bd11_JaffaCakes118.html
Size

13KB
MD5

04389e3a243b7f2e5ee8327aa4a2bd11
SHA1

4d05e7ac84a1ee771f97db9e7576f8357f81d40f
SHA256

1e700242475e022b60a8f812460c88133d5168400ef99a301e0ec8d1cdb44a30
SHA512

aa1459dc6195549aece695a31812a4dc2cdfbacd9d08c555c03f9f8f75aece8ad6147875b8f30f6eebc2d296c1d79f2da8ec678e0312a10621ae7b50df14e5a8
SSDEEP

384:+YqbJUaz9LYEZxeREOVBwGeW4IzZBwf+f:+Yqb6azpYEZxeREO3wGeW4I9Bwfm

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 60 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "50"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "50"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "50"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420434851"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "29"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "22"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "6"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "29"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "22"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "39"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E4E8BAE1-050A-11EF-9A09-E25BC60B6402} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\NumberOfSubdomains = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "22"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "39"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 705888c71799da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "6"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "39"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000002ea7bfd85c955829c31a4fc9d626a18a1f956dfb47b19b05e31ecdd91aa669c2000000000e8000000002000020000000b7fa71b8d4ada3c1544ecd64d9e6c3f7613b3e124427f6e4163945e5853201d0200000008c43469d3204d0831a52d4e15240f54898ef6ab0f24a4a205ad1b121b2dd7fb740000000f63ac9bd9a00f55502ea586586c14f26c01fb7ac7494371be29cfb7a69eeacb1ba7df49c01f6fb4bba538ce33daa636f1310cdaf8e5244e644c3926b73208631	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\addictingwordgames.com\Total = "29"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.addictingwordgames.com\ = "10"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2660	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2660	iexplore.exe
2660	iexplore.exe
2560	IEXPLORE.EXE
2560	IEXPLORE.EXE
2560	IEXPLORE.EXE
2560	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2560	2660	iexplore.exe	28
PID 2660 wrote to memory of 2560	2660	iexplore.exe	28
PID 2660 wrote to memory of 2560	2660	iexplore.exe	28
PID 2660 wrote to memory of 2560	2660	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\04389e3a243b7f2e5ee8327aa4a2bd11_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
f6381160ed12534e0935fc2e7fac52d5

SHA1
1dc23eb73a80a223cb6f50f3160723ecbb894a8c

SHA256
e2b2d998121cabcb6b3a0deadd2f3df73b547a17e4df2b5bbb6315b9e734e636

SHA512
675183f3f7f935ad4b7cab833bdb5d2e65c5db0d1227dc46f0de97db2af316f2aab7d3f172e7ec4e8b115530f54ad47df809f1467c397a4dd8814897211546a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
473af8d66d20058dcc02b9e37f059f81

SHA1
b9313c85e506bc9a05d501108702956814b15689

SHA256
1a5927e2afe6e005cf24fdbd3fc0db08f285dba784f5eea57ebfcf12076a2b70

SHA512
ae5bfaa3c1454463e861de4145a952701090dae507ba353051c539845cd3e4c710c3a6420e8365f322cbcb6c80f567289879bc644a3d53bd8c478dc8afcce6c7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8372a6d0f1b8506439064e4579058dc3

SHA1
e1ef058080dd93d6dd751aafa7f1f52736b4a102

SHA256
88f16881c90bedce411fc952409685d2d036d99d4e5c349fd66aa7c86d7a952d

SHA512
cdd5c6825dd0906fafb9314205beeb750469c6ae67948da698e229c55b10f9e10aa3c397d80ec1dbb6f52f6908398adc018ba22205067ab524c2a5a1299c2691

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
117a41f9d7f4db97e46bf9f293fe5d6b

SHA1
382e3995f0ceb57a34ebbcbd564bb9ea0cb9ac89

SHA256
e0181efdc036868339d0a1461d6175edf613aeb6063fa3e7af128f04197ab508

SHA512
f9e53e3333ac804946d1e03228170aa5eeeb45d8cb34e357c7e4d50add255cb56fa65d636da418df59e1398b076b6dc425d35677df72f066fd0961f12f145f64

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9ae5383ddbcd0fb6152e43c6c922cb07

SHA1
a1357d2040398073083efeac1666b1266e36fbd3

SHA256
d40a4290236c8b1164b801b43d4e58f750110d1e3cd44b57466a0612b542167f

SHA512
4ff00b85ac920fb432acad1d01887efa873c2ce7cfd05217208c85dac96ab2ec4a5f84a81fe2df65cfab1ec8fe993117d1e6e535dfc2d8dea18cf56249f92b94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bea555c732b4040dee21da0a3ca4795a

SHA1
7749b4f382cd3dbaf7841cb9496848e1a8acfbfe

SHA256
68ee620422bef860d58a9f0f916ef013551e24b68e8be161a18a09ab93473f8a

SHA512
a14173a9190349bf325d0d47f70931a17b649c8a296bbce92fd28bd5b6dc4aad7befad4718a5c57bccb1379eb43046163b30119664b57ae96785acaa1feb708e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1189d6919ce8c0178841c537d64a4292

SHA1
ab9026a586917352c2e786826170f32620ac61ee

SHA256
c485dd99f11f87c5ee87b37b528283e8861ac13ad7e0de0f95d5a79f9539c209

SHA512
0711d40437a000d71094d3c08553b3003df50483118041ad3786846f1fad23874456bbdcd27afae4d30a28dd8091730aae956f70317d04fc93c10af486508438

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
422f4d6a07d834fe0f8d4ab475746a6c

SHA1
e2644f6f1e0c507b88cec976c7d64e1c59666b1d

SHA256
22df98fb28011d46d3c69f587c9e17ce7aca96a9985c4ee5cdf6c3681a8002dd

SHA512
1c5a2c246c483e2849b45ebeacd96fdd5afe87873b052009ccff4dcf714d66a0c93b6c9bc0e05b32a8e563c2d0d07d04c16ae8c6e185be90083ac07553537d6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6bc5953a9ff27da38f9d3723fe47cbec

SHA1
c19f23944111722ce67275afcf6bf915bf2f476f

SHA256
18c919f96ad259e69a718ac284c805224ce90ebc14d9bb2cc43e10303b1c2198

SHA512
1ec98f767eb5c6b65a48921fc7227b6d78e7c482073006181c1d95dd8edb1f2ce504a0f5678221c04da09aa6d0778068a554efd012315db85a468b1d0d689afb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c2348a659d99884493f92939d5a56f7

SHA1
8f515d2d4edb802d99ee8c014fe96ba796557a39

SHA256
3cd26d2a7ffdd64cb8961aa87d28ce0a0b2b289da1972a82acddf180e37a162e

SHA512
62f1f8a7ba552dd42783e30d01bbd20a30217c8cfca625a76320ddf4886efe553e9ecc6b5ed26d074c7eebc32520f89ccf45a7e7b72db26c719dc94c1a6a8d91

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f5d89d48dddc107c02412fcc03711e46

SHA1
e46c25c74111cbea57cb757f27d8ed84c5ab6bbb

SHA256
abc4846c4fec5f65be49ffabeb2a904b18398b5b5cc71c8322d9ee8e862975ae

SHA512
8b85c953e84efb4bc4a9fa4428c56a371e327a35483dc557f4014fbe6cebd8bb4bb47740cc45769a7c48df9ebf678af816dc86d3e5bc72392909a409485c90e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9f290e0be88ff2fb7050cd3e73f0bbcc

SHA1
144e697a4839c83990ba11469ae3c93d17be7bb4

SHA256
bc070106508a63a8bb8f94d6f06c5fb28529d1a3f3fb98036edb790a53ecbe88

SHA512
2ba48f2d08a1b1ed1ab02e3a58ecca484f8da9210877a3cccdcfc20d5afe2c1bb37b169f34e6504dba072f6ebd30634ae929502cc538fd9829288aaf08b19248

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ffd8015c1bbd6fdea4ea41bebc269ee2

SHA1
1fc25b94e4ccd38f41fb486b487093ce6a596e91

SHA256
fb163cb1d5c725e4f93eae7d2f0e3690cb50f9886be8d1049ad02b8f82753189

SHA512
4083951bf10a951ec0bed4e1ca499a99beb72034f1860c44b98a1818c613263bfd3b571b2ebe53a32ff742a876194d95ff69ef0b12f06f7cfd1d4b627e26da43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e9a8efaf4f508e9958b51c0278cebe42

SHA1
a0a669c9dceed350989ee589daab6c80459515a9

SHA256
d17c60fed78c1d1357e547fe21710c5764128b6397659820dcede8d5ea835573

SHA512
703d06c8bfbbe622c5b94f31d77ec82312a22d1618706386bea5137e03107d05dfb3c4259254c194eb3abe454c946dc217651d328b7b938137c8dfd2edf43ac9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c16603578abfe8660843c60f537b9f6

SHA1
03d42569a2d029d8899b67f6dc0552b0f1e69983

SHA256
5bd6e7939cbe5e773353da9608f1bbd5a5d766612b0a74907706f52340a1565f

SHA512
effacd0bfe1dd47e867898f122ba6128cf42be5b4342dfc65f0f6f70806951343dfa9e05fe35644d180f411701dab046ef39438eb296f22838d67ff3f4b77a2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
50de410f8d388707c6b81d298f063552

SHA1
52d2d3ccd66880fadbaa721153f618919e3007e9

SHA256
5f288c4a76a843532609b96552b43e8d33adbf52e9665ba73d623c83fbc69fab

SHA512
99667a773ed7045d5879d395771bcb0a9272a93aef57ad896336a087adcb4ba8a5974f29f70969f9cf3eb9ada94081aa2b3fb487f7b1a65b1f9c490caaea7b5a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b123f74a9a0b40852fa3ac9413867eb2

SHA1
4ee285b9c4484bd7884f1e393ab82c03d12404a9

SHA256
10bd049a3f497fb99da2f673aba5ad0c6c0e90b349810e0d5b49443a5e54133c

SHA512
157b680884d880bf6e444cbd0a7f8f41865f27a66983fc6e6720eb7d9d0c6c317f54efacded4e44cf2fb729976eb8fb0ad07372661a7d290c3c0e279aae7b01e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
02aff0ce933d688be71261547d057c38

SHA1
88c12d4d60afe8a7dfcb2a070063ee87b73a7bba

SHA256
2777e17df533c29473e8244c8aa2ebf57b3c6d32d42a6fea78aa900b42bab3dc

SHA512
4bdf7271881e986a4cbbd1089220ad0400d04ea790d793f0b13e9ecda4e75f051e14cee8cfca321fbf41ba59c6564044111f5f092f3ea0e52286354b0a111122

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c1f2249f6207bf86206f243f43d7eee6

SHA1
0e087552b65958802a945f6ada433c43e1a4aa4e

SHA256
763e10ad3b1f08493fcf568735fdc39fe25be3640a284fafc23be1471f9124dd

SHA512
53ad21f9c7bf5abff5276a31a43d32e2e3ffed055a32312b84ce5de098d8793313014dcfb09af176f8d46f637f39a39d43efc83c747086b6f76a109a50d60c81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c6fc5310b162ef9aebe9f0cc2ca1cbea

SHA1
ccf103c63348ef4002a944cc7075e13d5c021ad1

SHA256
aa950592c97f4ed423196817af14f7daeed9cad27c02cb195a3dfb828ad02886

SHA512
ea46210fcbf68470aa8c719ea0109df3411c54a56170133175804e2591199f9ea80114c580378cc45771b93e27fb9920b7c0493b084a1441415a93b20a43728f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b8c6af7234eb5563b3b3c0d302cc99b8

SHA1
3a650cb12548a2414e2ce8c01b8241c5c2dc8c3d

SHA256
9e9f0ecb94a2c25c89b386504dfeaf57a32b135f3a862ea2fcc57fedff89d19d

SHA512
58ebc3d4340d548d3cdcf0e75679f29d4da3fe89a6da2324dfd4798a1a3db8d920a355922bad7fd32daeefd707f02df9b14108626f2a0ce7343e1502bb40dfd7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d56ed72c0cd47aee91d740cccbe6ee47

SHA1
43db7d2c032392ec9d397f6ad69606809c8e472e

SHA256
babf05124d7bd0a3747b2b1da066263e5ac7ccfac86344422b6ff743607313b7

SHA512
93c16ddd0861dc470e7e456eef694232e542d223155a657735fed61ead847f9a9072825dbc375f311d861af930fe855a351bfb153425fdbd24bd896d5f8eb592

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
62ca95938e6db6395419b58da4e682b8

SHA1
ec645cfe9fb9b5dab867e134f2379b659a6d1599

SHA256
aa496fe8b454602aa254f355cf08f16bde799c1aba3f82092cff23c1df059109

SHA512
ab54a82a9c3372c0411a98ff8b6c00a7bb5c3b247dde7beab6e2db0428b60742113cbcc4f8576882db482c73073055353f5bbe35206d8e806227d1d634466866

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6a459690c1a9998b0f6816faad6e8c1f

SHA1
1af90fb5fd41b4692b85ef97bd85ad9e9b440de0

SHA256
cf10d769277a1923ff10e7722d86ed34e48aaf4d5a874de2ef8a9235a809f8d7

SHA512
cffae161be66f75ccf0dd46c2a23b47051d62b340bb444b62a1f81e5b996485449cd5dd98c70a25a3f5b6e10d335328cd151c8f2d5434be06b1bf9092e2bc876

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a6013f0e2056b0deb3e488742f38bcad

SHA1
69dc787e0d831197301cedfc798939f34f170eb4

SHA256
8db5101e0de39efcdaa46a15b9ce1d9f75473f916b24dfeed2ad114f6432f9d3

SHA512
606032e02404cb067f9737088901256c4ee916887031bbac8855cb7462df2af0025cac202ed240b83792acba03d622968445cab7935b2ada574dcc2e274ba554

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ee51c8ac55ec01e77803632a8fa7bd4c

SHA1
a86f46a1885e7c4f01ead3421482b33e2c47f456

SHA256
9d1e9fcd8c841b31fa86b7d63c8ae415b77a1de425da16adb03bb14d743c2e2a

SHA512
69acefeef4cee41bbc56dde52112dad54f1fba1a07c9a3b72705ff5e14e09dc5f3246cbec780f1bbbbb586675158a83fca4d3e61ed9c2f185f666d8f7575158a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e8de4be14da2e5fa971c5a8c10e6419f

SHA1
09d4ca92069b24e5359078fe462d5e92918b4772

SHA256
54aa1c93b8ad4530c7f72acfdfe44dbcce05036dd2bf0de85debcdaa712c0783

SHA512
9e2f348b0539983197e64ed64271d71ec82aae7e61c93de75490afc101a72e263d55d1aa4529015ce00113441df0a7ba3b2e93a5984bfd19e1baafec1ab47737

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bf5956d69e53daff1c537aadf84a2ed0

SHA1
88d9e03d49ce9261082b230ff2e3903185c733f5

SHA256
c6ee9f37f266b0fb75386a2d0081d473a99cb036422d3dbd9446b5cc305fa194

SHA512
985748219677fff370d814b7d29a6dc2d914b60ab8b794430f1588b364c3ca4399f64a58ebef06d7028301c56d654887d5f6ffbfd1e40abad3cab197a0d4cfe0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
64256089ff77cfa7a9a1bb2264bad939

SHA1
29471e351ce208778e903a36f09ee289a07828b8

SHA256
69300989878e24cf696ef90a644b508352c086a131d802798c39994ed3324b9f

SHA512
bc162349e3a19bcf9781ca5d3e10dea24c464ae5c1e85720eda604b6857dddd6b3866753e3f3afb06d074d3158365197a1d8649da4fe615cddd0ef7202371601

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
9a34e7037556039fe8e661350df04c38

SHA1
7be646305b7c30595f94bd2816e731c1d4422116

SHA256
5eb12ed0f6b1a76b57cd9b70fdd38c54cf2cf47ced08d018f0704a1477e2a311

SHA512
77f1735a9874ad6192c7a19399a374bd3d6bae45e9b3fd6aa5cdf8033892069d90741b9710c88d70f094b8ca8b16ab33c940af52d23dfd8948d5357946ea3a20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\17AR9OXX\www.addictingwordgames[1].xml

Filesize
13B

MD5
c1ddea3ef6bbef3e7060a1a9ad89e4c5

SHA1
35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

SHA256
b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

SHA512
6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\17AR9OXX\www.addictingwordgames[1].xml

Filesize
103B

MD5
25a8a3134172e94d5695f248e3da5b67

SHA1
02d64a4f4c3599a54571072ebb1c4469658deca4

SHA256
16b1b5cf68d471f00590f984732743ffc543dd21e4586bcb45ca106efbf081db

SHA512
5592615ae1685b4f09ac02836b249aca2b03071a3da2a0d096a186435f3db2f68146bebccd6449eeb7ac026acaa24283e93efb775e87c2531f1a987ad3ecee3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab7F8D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar80AE.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit