Analysis
-
max time kernel
139s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 04:31
Static task
static1
Behavioral task
behavioral1
Sample
0461335691fe4be9b283612f7f21f683_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0461335691fe4be9b283612f7f21f683_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
0461335691fe4be9b283612f7f21f683_JaffaCakes118.html
-
Size
76KB
-
MD5
0461335691fe4be9b283612f7f21f683
-
SHA1
3cea5b5a0ca178bfe8ef7ced33c8641c2771830e
-
SHA256
be36d85fb3c80d02fc610cf4266162f6de94156f35c079e63dfaa560eefb7763
-
SHA512
c4895a84469e81b2958f4f616a54c1c49d67ca309b4518fc9e93ed7597d170664c586c81cf355a2c521bb6a6e83979be292ceb819f0fd1843aee1203063f98c5
-
SSDEEP
1536:yKkADkAZckABKQbZkAXhTcr0IPGNMxZPdJXxPTQakAWGSOvFS9vIpfRoUpwVoxTv:pkADkAikAIGZkARTcr0uGNMxZPdJXxPv
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000008bee7944d2657b61d7dc254e1fdc193728994e38061a87146a045266201e592b000000000e80000000020000200000005bc32bb8feb199e7eb69c2ffa49aea810321397eaf363e601bd33d3fd19f163020000000e354b33b85e5a06c8a1052bd6d41f8d91159fd3b42a1218f6ad77f15b10ed4bc40000000625db23eecbc0a02bd8dbe7760bef456ad7ca9f4779ac86d58d2f16b46bfdd7d2cb40a458121a5679a8ba804a6d8aac5eb7ffc3447ddca4c87ad2b932e6df27b iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420440560" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{308400B1-0518-11EF-BECC-D2EFD46A7D0E} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0780d1e2599da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2984 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2984 iexplore.exe 2984 iexplore.exe 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2984 wrote to memory of 2148 2984 iexplore.exe 28 PID 2984 wrote to memory of 2148 2984 iexplore.exe 28 PID 2984 wrote to memory of 2148 2984 iexplore.exe 28 PID 2984 wrote to memory of 2148 2984 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0461335691fe4be9b283612f7f21f683_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2984 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2984 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2148
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5f1725eea0f3f9892825f892bd8b59677
SHA152a1806c5d45b754016af1f70bc58004050a4854
SHA256453dc1d9052191d3bb38472a2d4c25e19bd6ad5d98c49a0921a917186ccfef9f
SHA512f9036f1e8c35307460ec9be5876a4e917bec0478f59bb0783d3bcdad6cf11b2607b36e97c0d54b33a1d2d327488f055b8a2e5eee696e3132d596e2ed02dc7360
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_056B48C93C4964C2E64C0A8958238656
Filesize1KB
MD5942f0cef10b76e41574bef14609fc2a5
SHA12dac45445059696542f9dbe9e63be8556f92461c
SHA256ce3464822176cc07310d71614d246b84dcdcd69de139283553c990261b3c4892
SHA512d9ead584750b92f150f423af371e9b6205d893bcc242fad7288d0826776f0e73135edd07ae373852951fe7c673061f4e6fd5a9a8e90a9f2d48780cfdddf191e3
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62
Filesize2KB
MD5fe16ef829f7d00550504b85cf2fc6059
SHA16f2ed70fb5d4e60199c90105ae1b410efe58ec3f
SHA256091e0dcfc6cc602498c006a3b9f1af8a6b959b9d59a0bf8344dfdd7ee522abfc
SHA512f6ffc3289a5401551ba5a4b0ab73009d2d5ee35fb7899e87b189b2ca60b134e3a23190a954edad519683d0e46246c8d74834bcd8a5fac4672f033504220a2374
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894
Filesize1KB
MD5b63898d60bbab1295f92d1a45f2d2c87
SHA19e2136fd3943e2a3de618bac9ebcfcdcfdec2da7
SHA256fb40240055a28e05e9f0fca1b020d7769ea2817d50e2f0d8373a2ba990890aa9
SHA512a34280dbe0bb0027a87c715c8ee547078baaa02ba7b23185a069e537ba7f8c5b0dfc6510af021b10c60705f605223e7e8cc0b3268ef341ffb357f7804b9cb4ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F2DDCD2B5F37625B82E81F4976CEE400_52A940BB9460A4D8B06AFDEB9AFD2659
Filesize471B
MD5389e833103ba22f55e4481dc48da1a5c
SHA176c22cfb781dfe08f435917c1a28b4dccbc2421b
SHA256e77043cb0deedc9717af6a4226ae39269794f4f6ddff39e7d2c1276fb3d20d26
SHA512f460ffd9cc5377ddc7c06c4a9e2f4dad448a30d01f2cfbead979f6ba7914e20977da94f6d0e1bc76d945b110695a09f876f75ef0ead09fd66d92f74f07789060
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD59d70ce4308657fa267df0840757f7746
SHA1467d2848e1c74e0baf04d327fed015526b3c22ae
SHA256f32ca88030a33ec51ed01b12f7c4e08735eba67ff0090d6c0323254d7184a6af
SHA5127e554d849912f1c6878faffa396cdba513f986894212eaf6fe02c6fc7c0396379b5074a201a4b490c62b44685f6f16dee7a537401fc57c50c3fbe8bfb20584d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD52008c1913541e88bc202b61a9ec537e1
SHA1b611b1323019bdb299868ffc7fd01dc12742def0
SHA256db7a949ad1ae658f7f4891f0d1a846bf124266fb6e51c375d612795af781ea8d
SHA5124138189f2fbe228b6c35083ab3e7a852baec264b84c7640187922e23d6121d712e486d22a2d1730d8d429d2eb6ffbe0700478e5d0df949ffeaafd2d53055ac83
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5b4171c90d5b4f65613643ae8739b4690
SHA11d9b214d083a81730f4e558a22fe60b92e8ad02a
SHA25638a9a7e7f9f6ef45c8ca1050ad63851c38f5185fcd6e3fd08c141529fba7d2d7
SHA512f8ebdf9022ca801aec74b92c913b35f7b096334976947d4757538ea960a5abb0fe6feebb8cfb56b30808ee774a14fab2da32d35112113d94eac721b538db388c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD51c8a85507024759146945670d1a64048
SHA1eed228defc7c077aea97dddf64e2cab779452c98
SHA2561c9235d16666cff94b0ec8233efa798e4d9170747037fe45d5ca4295c326c530
SHA5120d306d6e4f07835e0699ac17a4056052ef8e63f7bd1d7c610bd06eeb6aedca9fbba2da07c9b7fa11fd7c18a2be3d7c3053429f0bde8323a5a6304a7c28ce38ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c4e89a75fab1e50470526f293e9355d1
SHA15b115ec5ab4164390c0665269d5f896c00b41018
SHA256fbecb61dbe7be44a7de44ed179b53ae3c9c351fb78ce43f1e7480afdddd1608d
SHA5120e9195a8abf4011d62b914be5ca9c6dc9cfec23dd2966decabe9d59adebf9ec6d34a22fc853d496f8b512fd449b9fc336e324e375609e69a43a7e8cba4dca53e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552ca14002625880bcc12f4bc43276038
SHA170fe4b9027186fbaa400474d3d503548c935e653
SHA2560e017340977409ddac300349f82a4c1c8cf94a262bea807fb9bf90497bcb1c90
SHA51281684b38d6227e889f4eb41192b33686253f2b6b0e7702a83124c157594d36377803c2d02c269f4c040e39c9e768973b37b14f51c274e6588f0eb6986249b3e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD578eb74a4a997281fbade2769af32fc25
SHA169aeedc88aa10e18018526f7d3b0863d5cc9f722
SHA256cc3790371398f4d47a8490e66f8892ecc0a46ecfe0c274a32d3b00dbce9754c1
SHA512f083c01cf947a2f8369a619ede72b4288c6751a0061f3398102ce389fd72d30004575448c69eb4cde1544d4429eb0c3625e0ffb3bb94d1b53e27a99f508f42be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bfb669f6bef2be0b4b4e25cd4a8200bf
SHA1bdfd3cda10cb18f9e8726f112de9b1dc6c7adf66
SHA2565ecf572e196ac7bb18da127d73fefed434b557fe1926427762b08fb255e7ff72
SHA5124539e7cf6c35b8bb7cfbf4909fc1c2a8ee3f37d34c067214535062f8a6f00dcc8f06b5e107161111a5e2205864aa6c5e5f0c9c8b8bab1c339bb595860a584f2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572d77491dab85c4cd73cd29ca979f7ae
SHA179396b6efbc13eed2690a719e8f4ce78823a96e7
SHA2564047112b231cc8ff4a21ec9246a265a39ef8886972d82b5e4626967850e0a03b
SHA512f6c99999496ded3de75b645b68f6750cec00ffd3e89d7aa8ea851edb3188e61282c153315e52c5439a7659e993e770134e6dce88e2dc4a7a378169b742785d89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50855ea71100e62540777aa83f880b630
SHA178882d04b4cef8009fc15bae24fa8911cc1f1eb0
SHA2562fc00de1663df8ae18544d4089bfc42f6ea0edaa6fc0c4d08c52e714b3051221
SHA512c62756174bf8024dfaa14590709348567a53f9d0d7ec060112a2a63637ec027b966a7bbb5c78ea83db45b37ea125a6273ca3e0965f475fc50e5624eebc639f82
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD510abc3486769f6f2092b07f0ffb69e90
SHA1898d7df4ff01e49624517d8f1964e133c8236a28
SHA256518087794643d4922ac7033f330f24d2762078421801731a7415115f01f40e82
SHA512c311d297efeba4fc3d4ec5beb2c84b96d1ec39521e59eaae4901837d1232ab9426878fa6ac4110385168ee8abeb9e7e27debbfb8ce6e10824abb9f93764bc325
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD556da1a1e2b961d7576b61f32d46b6869
SHA1c9cc4024dcaebf2bd5b84fc089f37e2f4606e57e
SHA25646ed960244cc05e8df3c42a5edd52f76c97d05e054844b837d25b0dd856b8726
SHA5129769d2c53764390dbd4988176e58a08e401bc048fff0346dc51cec1d1dae960606f5e1a82467ead6bf20383c6e7e80520251af3ce9ade4fdb7515ce88c457fe5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52046a4ccedf5f4f40bfbefb99a9f9285
SHA186110232b2b5c4ef79215116b069583e9256d60e
SHA256d6c935061c26d5aa66c6c214c3b1a7f7651fb567bbadc68a58182ea2846711cf
SHA512bc8fcafab3fd87a3ec2324fc8d48762f796bff9746d42e55ca8c8ec6e5171139bc3bf0fa48e5de9751f9fdfaa5d7b4fc29f40592cedef7fb13970121707a7f18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5611e2463e880d6d66ba25921f2d116d6
SHA16a06288e0bc34c3164cc871f328cda0d9f1757d9
SHA2562cbc0a30c3945b5c5c986010890aaf5effc4677ba38d4031f3682251d7df5af2
SHA512faa72b8788a50b548f579a8a396a4c4a7ba550282f50d3fff869b4df9222de46ea22e8c69f3323cfe8d3c56ae66ff260ee1c07994af5376cda8acb3cbb831f5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d59b52c705ed26d689a20e0d6dbdf03b
SHA1b817a44fcd1d3f58cfd28afb62cd0d0e1261e1fe
SHA256a2671b61479023ba7cfd96496075b134fa4bf5e0d0ad174e5a205b5fd463f61c
SHA512d393e902e31d678941d1fb15a20ba6d240a4b50266ca13006e9198560abd0f01c317b5badd168a7f74b059a48ed6739ea3981444a693c2fbf7f31b4f3c4a7738
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cebf550b65d5b4dce3be475aab51db38
SHA10560db3e25be86b76b4f684e22b59727843fd4f8
SHA256b87839a66e8215f75a4b6342e71fb690f6511583c328ffdb3d0f7bb52b64a395
SHA5120c0ccc1d5abf05d9ebfd72242d1fdc687b515132667309f44c82ae975ae97bef25d89d0af312dc41b3f878cf5bf17cb0be72675fec46b66970e66694f59967a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5818a5204af487b42c21cb7f98784a8
SHA1a86ce0196cbc961753d568c18faec9019f488625
SHA2562d183d3a092818d3cfc3101a16d4fd38e7bba520f057cba60a48c769d3a32108
SHA5124584b3a45794d599d84ed66b30f896db94d280e65da2a214f6fae6e17b6fd57a2263669c529d26158abba6b46d765d86cf8ab54e0441d817d5c3162713c6ce51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5abba2ddd4faf9a18c9d8e9440f7deebf
SHA15b3ab09b1928f83d342ab1e1af0d2540f2fd190c
SHA256e8c44090b7ef412161478c3f39ad79625db4dd684dae9254fa1916e8a98d5ead
SHA512c64a58d2c609212606b5469898a78dcb861c3835828fdcce849ac835cc056b0151660acbdddb11d5652470554b0a63b4168039158a5fd7b0274a9c1ea2225f03
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD548154fd419c01b315cf244410674e56f
SHA18dfe48c53b9b024abaa722808c528b632c9a6a71
SHA2560e2739a15c8c7d514e3987ec240367f6eb7bc9523ef36dc6ba930053c8bad242
SHA512808871440c0cef4a7d2ea71f4d6331d55e83ec5c1635f5a5243c944a08d14a60f16b54c1cbe0da394bc2f663501c2c0694a66548562051397d88692b5801eb1c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5459a2bd8c3fbfa002c63c9dc8ff833a7
SHA1a32da63cd65925ae49e93e1b4ee762806dd1a648
SHA256e9adf861cea6e2dba5d6cad1762f57f91cbe60afef9edcdf2674b1efaf0d7aac
SHA512961dfe9b35f2ae34e7d5d6917649abb6e8ed73aa8048b5baf1b8b05e88c7d6a9b80ca608a4e2ce820eb77208b309eb83560ed761ee695c6c4f8c4754213c8313
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58f611003b84ef29d67105a367c1fba5c
SHA1ae2b80601ed0514de5c6b9f243c0a6a8766d064c
SHA25628a9405718aaa6c0d51130ea9bb63f50b0de559be570ff7c50beccfe05c8a355
SHA5123a3e5b03093387d95c2479c990c58816045ae389d23c7a6a5430cf83991c86111beb2cdec44568c8e418a336c1dafc6cb0d3e3884e8c47b1741214252ec2dd78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a4b9cad2e7c55202b5abb57bed1602fe
SHA16ff4d515a0f9c3db47fa0f57a42c9e8e8108fb88
SHA2562e35c88291031b39f0d96f83bebc960ee1e1f12d06e4f727def429a24e307d5f
SHA512e32b42c3cdbcab7e6ffc29b5f5a37741d81eb947d39d66d364f55196611c41f9037be8ed13af052bca98fddd4787adc3c3874e50a3dbfe60308943c91e028f31
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57cdcac8c28240dd6887fb158a5bde2f7
SHA18f40d7e63783031abd7d8f7cfd12e5b23f021b33
SHA2561a35688e854640c5c502e5f0477ce5015a7bfd754cef0d946ee3613d6af8646f
SHA51227a5c404079c02133d462ff39507db7c40d7c5fe0775e589b6558318416e463a988b5b97f3f86befa156df590a23a235ed267a1454144ecb44d3b8ba3baf05b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f56bdba7cce323ec5fe6c7883daa1775
SHA1f131f1b93e2792de443607fe4abc4ff37ff0d110
SHA2568be1ca4b2122e27accf066944c19dc88eb2334a627bf03a581b1d0ab3fc2c50d
SHA5129e40e3664552bf4768b8aa60307acc098ebcb87405cfde53c7f268c40fb3484cc68413bb46b3ec8e4bdf4bbef3fcb3a647959d70bb7ed0dab86d3d3af3c01271
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b2379e244b35b91c09bf3453a4406a3
SHA1da658aadfd6c9f9d35037cad4fe44e21b31ba1fb
SHA25699f74ed5cb24714e36e7dd2abddd6e09c90223b940d63e0ec6f9f8cdc41b54da
SHA5121399daf7d7c451a02c15d2e0dc6f5ada11350e3ffad991af845f2a75bf316089008dd3bbf48013a98a70f4c8fa9e8525c4fdd6b6ea9cf09551c5aa725072d0e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ec1d66f5fac8ee9dae4803043dc91c44
SHA14188f3f0732073102526bd249c74bb433c659937
SHA25692c8b684ffb1fc3ba0e3d6a73b0eb7bc343a8380bbaa6b1d6238b89157e2341f
SHA51211a9a304ba12d5458b81b3bd3b5527439135642dfc7654196d5b3c7f0faa7ae34c36c17395dc0a05d4e442b8706ae35b374170e15bbf1a9dd1e7a8ef7cd5aad0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505eeec3f72a55e9aed9e76ac16bed1fe
SHA1caca81df29507adcf45aec2c4537a720d0feca53
SHA2564cb8ede8302d22488aff343a79cc8573b06b75e75ec0dcf3cd65676547a41943
SHA5126e6552b9c3b8c87ea44e97e9de3a669b3d9694d43dc45d92a79d5d26cc7c26fd90693a87d39d9c9853cc810ffe6a2f8bb75d98497cce2ea391f937e9f9524d06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5c956fd0afd9ec00e408e992eb557ca
SHA1d6fc863069e468ca2f2e3c30323c2495d409611f
SHA256acc4864d61e64ff1e511a86251f799fb2384ed23555817be18fdfdfabf0ca70a
SHA5127aa0fe67bc5466f395f66ce462185d491d9c29591899f0de92607aba7ef92ca65c9cd7333341728d2103e0840d0ee6978b3681fabc3aef28977abd32a2876bc9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc35c0aa4f40e2593f78e7b9945f8ecc
SHA1844638199b00552a3f8b68d97c3568c632a4a6f8
SHA2562cdde1cced2fe4d1c62a736b9daa20f225343e53c1a9d7f73aec2ff756da4d15
SHA512186f0d2273576064ffc1bd6ad05585515d697c27a162cdc216c241311b41e0d89892d508512e450c6e5ef690fa9c2fc8413bde2fbd2e316d8a4e70d3b3497f9d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD562433451f2898e23327feb23be7bb7ee
SHA14c18388ccf586da653f84def21e6ff82014925b6
SHA2567cac41e4b4c580d11346b1c4eed157f23a4d0ceda43030cf9326abadc9417e70
SHA5121503a20c09d0730cdadb277e2e3d01980aec77e9b4310b47877d328904405586fd19f636f6c9d7f1d5d1cbbb232346be414bbd5507908551fbfadfe0cadf7a77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59369ea88b15fc080555a6b6460c195ae
SHA171a3df7ea6e5096e7bcef0bfde590e1dd3e3cce6
SHA2564ae6e360939d9803459b0ddea84298e7d6763781cf22a139010579f6fbba8e6f
SHA5127e8a37b883226ab392e12e94bee08b19a7a95968b99309e29303fc20264e742280bdf83ecc9845ce5aa3644072eb756530a5a947ee6181830cb52cfef0bc3129
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fb75ddcfc06c421ce6daffb97ff8b229
SHA116a9c09dbd3524ce8c2e547423063cc0fea61f6e
SHA2562a5f8bcb129a292b865898432b57e1177b0fe13cbdd10946ac06050d042e6c36
SHA512f962335e8fa1edcd203d0640a0ea8cc1f2caa3a63aa3d88504f7c7b94256491690515f228133ed85a5314fe3474e62741e9135c9c24b831d54fdc06bd4b3b695
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d71d74d959c9237ee34fd8380fd5df55
SHA1b7a8ab357bc640e96a61380339afa07911ee254a
SHA2567f7178465e3ffb68128035e0b912266595fa16335881e9e7c310787b69a02694
SHA5125b65a628ca374ee9c74d3220e1334ffd82be8cb6068579e51e2e1d2ccc43e57482612fde795a73c8fdd0b10bc83d9d6dc3fbedcee61ddad8b34b57d6accc459e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD562bc94be9be44bdad51f336251a4647a
SHA118273742a7a9ecc7571bfe93d7f72d713f68d221
SHA2565b31b5b48987fd1ff4fb0a6b0645b4b410c911ad9da2f923791239c2fe95bcdf
SHA512eae5ec018eb8487b61b980d761555dbc503a4750769086f6f528a6cce43611d37ea69af7ec2b9ecaa15c4face2482136f331508530b87fa24cf4caec386fa16c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d39f4bb2c2c0571b05aced382747b4e8
SHA1566b49ea1bf7e734cae16ff5923b3f1e62d7362d
SHA256a0f30f2f7989caaff9fbf821e28a3a9d2a47033fa8f2a0aecd6148c1562af3fa
SHA5121cbb9abf4054846c0d7fc1c13210d515deaf8a0d0e577ccb2a1724eca821072b18898a03036109faae120d44b55b54b6ea201ceff909022fd5e01158c38d19f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5889296d63148d079e204ae8bbee37650
SHA16164a1bca279505929e0a16b09d58899f66962a5
SHA25622fb64b75101443d932c2be28c67f13aed7d555f812f35e9a29aa299c6753261
SHA51212a6ef34893cdc18114fe300eb97b4904be31af3ec2b33bc911c31ba47d42c9cb14200ac9ec95ef787646a74ec33047feb53af0592b5e25b0356e59415dad5dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62
Filesize458B
MD53553826e36fbb80aa12baf5d5454b9be
SHA1daec49bbbeb1dd6c4d446aaa782e5ebdba345054
SHA256d37b55d21f98c4f07084310d9a04cee97ba233b29ecfde5a882df09f616be0dc
SHA512eac832f267c7f5f87af8780eafd4b6499cc8b397f0425f58e9d3b8355bf0603073b9862c05d680733b06a2f401a8822126c4fa1367647c9d21e3d7e368c4f565
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894
Filesize432B
MD5c8a3fc695597c9f4b245f9bb69b5c17b
SHA1c62d5cf39a1f2fa6087068d3b59b982abf03ad2a
SHA256b45d9c16169221c79c4e520db86d49876639c93bd896d1dd44166b0a7b562e48
SHA5121096d3c981858bfc112402791fcd522dbbba27e30b93c053c1df014e1c738ddf187327944c87ce88e07f7479b90d06e5505be7e7708df92e43b4d4b1aaec3e32
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD50101c08a8fe3e6b4a7c197479ab3270f
SHA10bf49849f47f892a4b5dcd53be92ffc0dcb4f023
SHA256ce6b47f0d3d828f035e6d57181f0bb7560c1380ed04d858079f6de1fb9cf026d
SHA5123b69dd1dac32eac9c23afbb7e3a467371794311cf8ca02bde39b1fbaff25e0b854119c6413540a40b48d2a5ccdbb25d54950dfaab6730e00b7514ada34a03938
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD511c0f9907ee6a2ade7287cab8941a016
SHA1081e93534c724d9a9ace0bf7024dfe01942e6136
SHA2563c87537489fc7a18ec7415336ab678e1439f23273104a9c9fee6b69fde763dc6
SHA512741137ebc415e0bb257373a1f10f66ae6e2e0624ae24dfa243a53446d5d0fe8c490dbe43305e4dee296cf515a1a9ec73ab523ccb5b009d6ef45d7ca161d92f29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD519d30f44e7d5f0cad41941f3b3bbaec9
SHA148504ca44c70efdbf852161e1d31d995a6555840
SHA25672ddba8d3bc6a15b769b4c4fc6f548e417584053b719d171459427bee474f987
SHA512b81d90e9d60f119990a6ae796852d5d6f569f0ad785d80420f96ae08147638646a77660beaea537172f50387b8dd3ef831fe996fce506e6d25688845ef26e230
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F2DDCD2B5F37625B82E81F4976CEE400_52A940BB9460A4D8B06AFDEB9AFD2659
Filesize406B
MD53f82413b81634607e271451c0149c960
SHA185a93618b76f25bd776953b55db19eb63d218736
SHA25608a1ef4148a8c05184f3c0c1a1fe7d97552fe96f61aba41232056dc15e867775
SHA5127961bb024857233a0e343f82c4b0a7d389ae94f98d01e26f7b7e7f9e86b28c509ab3d32af033f429ece554aa4f8e9c3bc1e805cb05153191a586f68fe12c7982
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPBB818\3604799710-postmessagerelay[1].js
Filesize11KB
MD540aaadf2a7451d276b940cddefb2d0ed
SHA1b2fc8129a4f5e5a0c8cb631218f40a4230444d9e
SHA2564b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2
SHA5126f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\cb=gapi[1].js
Filesize133KB
MD54d1bd282f5a3799d4e2880cf69af9269
SHA12ede61be138a7beaa7d6214aa278479dce258adb
SHA2565e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
SHA512615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\platform_gapi.iframes.style.common[1].js
Filesize54KB
MD57ef4bc18139bcdbdd14c5b58b0955a67
SHA1afe44fd9a877f81a3c36f571c0fc934324c6cbd7
SHA256192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
SHA5126c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\rpc_shindig_random[1].js
Filesize14KB
MD523a7ab8d8ba33d255e61be9fc36b1d16
SHA1042d8431d552c81f4e504644ac88adce7bf2b76f
SHA256127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5
SHA512e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\9615398969_ea3ed071fc[1].htm
Filesize167B
MD5f5d40b7259645010f9a248858ad14178
SHA1b3051d17a6ec8c9e166bf09a62b48261ab86957b
SHA2567f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
SHA5121e82bc2d067f726670b3e6054d73e57868f6e7c50eb979696bf927daeef699f2d8f8de201e8252b86b0e9f86dc69e5037fc9fa08ef6c271b033f29d4f0f4c1aa
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a