Analysis
-
max time kernel
134s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-05-2024 05:26
Static task
static1
Behavioral task
behavioral1
Sample
162c94a013fdb7dbe598e38248aa3f72_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
162c94a013fdb7dbe598e38248aa3f72_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
162c94a013fdb7dbe598e38248aa3f72_JaffaCakes118.html
-
Size
175KB
-
MD5
162c94a013fdb7dbe598e38248aa3f72
-
SHA1
2b5229ecc5e98d29f3c02d1cf4421da7e0fbbe0d
-
SHA256
3dfc5e8c9f33842f9f504b57a56c993408b5c861be738f5429f9cdb2b7207ae5
-
SHA512
6a10691a23c81016882f4fd160ed5eed678c7f78e9088fe360958fbbca385d35811b74ca8a0e7ad6387113d1aae9e12ce664dd2544db057faa831ef7ef3268e2
-
SSDEEP
1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3XGNkFVYfBCJisd0+aeTH+WK/Lf1/hmnV+:SOoT3X/FABCJiEm
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17683" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8743" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9144" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9144" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6702" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421048644" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FED1C1A1-0A9F-11EF-9969-66DD11CD6629} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6702" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8749" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8874" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8661" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8743" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9144" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6702" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "17683" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9431" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8874" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0725bf7ac9eda01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8874" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8749" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9431" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8743" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8661" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1048 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1048 iexplore.exe 1048 iexplore.exe 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1048 wrote to memory of 2112 1048 iexplore.exe 28 PID 1048 wrote to memory of 2112 1048 iexplore.exe 28 PID 1048 wrote to memory of 2112 1048 iexplore.exe 28 PID 1048 wrote to memory of 2112 1048 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\162c94a013fdb7dbe598e38248aa3f72_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1048 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1048 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2112
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD53ae9b6b5aa139f59a1f74a830b6b0111
SHA10a629f5a3aec95f8f101ecf8bcc66f4ba6943b32
SHA25607d7d65a9b1c7e3091748bbcdf13dd652ba6763c5fb35aa0d4e9ca79a01a5814
SHA5126e966fc893bae0cf693f03faecfec08f50f32116f2acbb5c6feec609274e073f2d9e5a8cf2e5cf2615a057f459737a5d0ac31abe3056eb1a4479512907450128
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_6E4381F77BE6F6EB436B295D285593C5
Filesize471B
MD527b630ace2a19cfc3c2cf2401dc8e5b5
SHA1503f072a8b4e8d0d1fcfaf94f9550751c64b4f48
SHA256d5267104785bbda96b38a3e1bf0c7c30aa4c57dd178d1cfac0fe31ed9411d185
SHA51281d2feb1641fb2001528b8ee1e682c031aaf1826ed36a581cd02326a165e0446fd6be74263c32fde3aabbe5a307c7c53676e1cd902755d1b526133cc878d007e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5ce33dc821df09d882d0d49bc6aeb8118
SHA108e31df792c3e29e726e39249fcff4d57305bed5
SHA256a2e44b0e5a48707185e23f833016ff4827c701525be3e06dd40829ead3198dcd
SHA5127ca528f9797c7993b61bdd66a96a8125870ba4e2b736121e96deed01d52b4c0aaf57b00c3eb26aec8a5e8bfb2c664cefb99450b71410d04ea45409c429b440ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a109af3dd675d255e476d59bb67f6dc
SHA148cfd6e157e45276e8ce16ed923b1597630b405f
SHA256f32d0dda8bbaa153d7ca7da243542627df7876fe5e85d89741c7d76d1e4e4708
SHA512d701bee06639401554103be843e5fc3ca55bef8e3d94a75e484ab7dc529cb2171aef38afa08366db0f7e01b6d2437689bbdba0a8d8016df8be83c58beddf1cf6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a1fcc60be468d058530ef45c2fa277f
SHA149e39082df062c51adf0d431db978fab279a6c66
SHA256b361e1dbaba3eddf2c9ccfc3c041d7542569f512cdeec052af6017adc9b49d1c
SHA512c58fe606f44c03971a15315a8be25ca71fe11c376030f2add268b3501b048d118729fffaa37853a9d6c7dbf6111aaf8a63183de8762b05b1ff8a4d507e7d89c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5104a831ff4dd499a66c2856f9a809c67
SHA1465e7fbc3bdce56a7ef057de449e2f0e1ae6b122
SHA256ac4fe0abb8ccd93e4d6dd0fe3797fbf6beeb803e6aa8ab19b0e01d186f52b1c7
SHA5120c8d9502a535c9f362a551d7ddd8d4594f568b24d7353f73447407790d260109375c460c408735816c2d556db351f1b9b6912a607c8273c936b5c01d4de4853f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5980068a2830723f2440d2c2cca188269
SHA191510e5f0c9b0052eafdd2876f63ea7f393bfcc8
SHA256a4165419153381c2b8596db4711b0de5f0bf061abafdf647c232e69841f12156
SHA512da6692d5e60ebdb99e7982eebf19bf83923f6fc9f76263c50ebd7c038140bdba29fb03c2d9ff471902eee05568d97b746b89799b8f16e9ffcb9edf2b8ca29154
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571722b5a604bb4f356eabc282403afcf
SHA19dc1ea13200afafe7166ba5dceac4c4618c99f1b
SHA2566065bd8df86b7e92f6757088d3bd8042e599f6dfffb5011e7331acba505c7d3e
SHA512eb255d250f98111e4ff839e43c731fff9e8b3c2781ac3329e5ed609f3bbc2933a946f5fc789a6fc093f2fcf566fec5273d5e7777f2c8d37890426cdfb42a0dca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f1d6ec33b747cd967a682dd8008d3fa
SHA18f3592b398e8f3dfae3e12887d785f23acb9385d
SHA256fb8c675c141c9cdcc8b4dfaa03243c39aca50b9929e91ea839e121ec4e3be424
SHA5127bbd2c26abe21c304a7591e32d9dff8335fa372d175131fe241b26836092c8e3991bc92630c89094107a3d7cff013b0f3edb4b08ea6b2a1069dab96e8101ffce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55aff5766050bfe47691119b4ea34e83e
SHA1a7cc160d4f3f8a01b6bca1d4d1d7e96613017856
SHA256121e624c24f8a2c6ecbc220f7272128acee6afc70937c968e6a21851ab0686f2
SHA5120c7ac2272412862a3a122b23bf6f188d11773e06b463334f5b2803b794b4a53c02f74245057087903cfe470247c24e5100aff71a6eb726ad4c23fd54364ceb76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c75b141995f76d4f612ea23d544d4bd4
SHA1fadb12dcf274d80f7e14b859aa428c7e83e779b0
SHA256b7d5de21c1684d93a467f6b8b36ce489000180387a6f50fc0ec63b9d7035fda2
SHA512951bcd1b4402bf9ca1fe742f13ffd9b1713ad101fdb74e75d8fdc83a6102d5f31b0b4b4051a26dce51f56cc354576ef387c21d5ffc219ef13ba206feb2403a57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD556460700ed87661225071b52beb67665
SHA1e7d6a9c1864c62b4d174932e002dc883c1173537
SHA256c9a20f86f73eb591154b1d2b0dc0e449221eabf9b77a3faa539e5531ffe5ac5e
SHA5126da1691aa16f14d89c86ee59d0875f90b2cad7133bfa06e929f17d02ce1d9cc35a2d1aa0dede5be4cdd76b4ce95341dae8a632c49afe5bd926180daf057ee310
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58faac597057a00f69ecbae175924a073
SHA10f3cc436e0654d7cbc519749472a1c83e95daa09
SHA2565f6eb6ca2635ee4cc8bf797814ff34da9269d727a32406a221a19cdd5a79d059
SHA512f4e3c869cb9f2881b726984de2a2aec397e9c8e0d1d7ac6333b8836d257df91d512c8a03c685a50eb9ad3e739533d3034d38494f1bc263426e024714c15b7141
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f9804de56a357b3e4a0b83e7abcb1a3
SHA1c27f200318db9df09a8f9c6c577fd31ab71508b0
SHA2568761de4d1c912cbb5f639cdf2659f89df7b411814607a8fa6ef49156d74ca933
SHA51236b89ba27d5d0d0c76132a3e1e6cf4346cc87ece41441f6b1f7769980c6a051b8e23be09c40278047e629f17055a8c8ed107c745e741f93ff9738bdec6b1422e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572de689cd80429787f5b242a5a1d7aee
SHA15a4fa73126d9ef0e525c9c739ea5ea7ff6d18808
SHA256b1a82f693e443220075afbc221f4640897df0e48983c1a52406480c1f227e947
SHA512b2119d91dbe613a7a7d16f2c8d5d07ebf4c754ad20e540856aca6a03b68aeecb0cf440d61833d3eb3908d9c14020dfee917d771181092ea67d20282b98863498
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522e8f1920df12b68e8bc77c960c5af0b
SHA17792e2f50f1eb44cfd5810bb768b6ac49774f350
SHA2561f8dc11db588cf5fd0644ac026c48520dd3a87b11bd8243835baa9bb2a009c74
SHA512d8c3c0be57292d6544f01c06e64765c2e024b0b2474136940c79433e535abe990377fa7db00cd789ad806edb249c0162718e1b310405a1103c0918777ec2bfc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b2fc1b5878fcf428cab606c122a50fe
SHA191de838a5b41908e7a62b88e7afe42cfd861b7d1
SHA256d9e331c1406df1a503da340d0002d4023c70ab59fb54099ae90b18f806d42050
SHA5128a9ad19a4f104441960b154d1d6c32c100cad08b7188a5750a303bef13d3ceb6580859b1867ca443b420eaf6b87267715724d12157dd41d3ad6d67887579f3be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ae44106c37e068f363049fb63804a101
SHA166bebf1db78b14cdce99c4e4aebcb5ef51dd6457
SHA256ab18e1297e5bce849fcc72462cab4a4c8fd734c2079ea9b72f974425ec4d0390
SHA512e6de0f20473c4c286fd54fb1c032b5b8a2ecc6578903042fdfa6821d7cb27e374e7329df4e2249ff722ffd9633c7854f26628b2dffd015c2d0fc9d852d4d429a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e6e14c3148eef579b4a7ba1d2e040d05
SHA1e20d6429d300096b3e90ded85894cbcd2d84ea65
SHA2563091d4adc2d57fb9a37e17f2423836778338202299778ea7f9f46432635b2ea8
SHA512243452ad1087e6ffbb8fbdd6b4138676a24b5beeef1f21c47d6c25c357774bcac845d21192533c648c5aca709928f57b797a033bf4b398474eeac8061b365a48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591096c7791c06f0a63e6bccfb94fd7d7
SHA19f056c0559de4885afed0e83af2bd311196aedf8
SHA25621c6e73ca41d23619e709ad9e163dc43808bf085d14440ce05a0d8eba4298d60
SHA512fccb9b5089b444630d91beb6260bff323a76d68afca7eee12d2dc5b1b338b27f64a4977a206da8af65b2be1780c287fe4d3e201832314ed1663170d9478420dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5afb8f82ee16ae6b1e0fd941830fc02b2
SHA1281a53c54b64e9a74745450cf3ec77faa55d350e
SHA2568d9ff89ff0ba19f030467d9a000a8c80c0be7b426716ee5f6c7369e7d5475600
SHA512636b997e3b64b89293171ce58839f259f10b005cf6cda1684264cedf4c0a8039e8b7d9f412e8cb6d6f4ded7d882ea204bdc47cfaea1fdfab992b38185b0c6eb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5623605495acd33d3560bee72165bb0b8
SHA18287b201d73d0c3890e4d7f4b53de8082e470898
SHA256abf14cd7475a231c58a20baad6586ece18ab2c01fcad02e94c6315439b0b9b27
SHA512a0572e9a55c394d4318a2aa93d8ef3edeab4f9720686bc398206bb2eec672d0ab2a35f1f032c88f07327891b13468c0f19149f2343747f9e9590e671ddff02f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dfebc59ba4debaab5261956480b02b6a
SHA1ba02a2bfba59ca3707eadb770f252a06af2deef1
SHA25601386745bde2f640682f504e79b5abf7c53fb6857db2f01f03042939dd2ec2f2
SHA512b421fc22241c404b5e2c17968155f261ca89bdc9ed884acbab7f66abe634f108fceb7bb6060ba54b3bce371fa3b3452a6ee820dc56dca2e6c2918130764621fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5d05a57c674e1d5b190b9e71ca4886e93
SHA15c65b1feac77da4792e808b2307a963b12c3ac6c
SHA256ee1437b824d26368335ced8d9f024360224fad6df539b7c19b6a0e93e148fbd6
SHA512f5abded9db4895c12f4601001143fbec86d5a4034cb53065ffb3fb74dd77351e956358348bfc97266f8890d2fdca4bc9a97e08483354bb2bd6c2d76e54e543e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_6E4381F77BE6F6EB436B295D285593C5
Filesize418B
MD5e55ef6ac81f90c3753b60afd3a70b71b
SHA12a7f002248d988a63858d56e088014c40a99243e
SHA2564a324c1cb1447d6b4d9fdc843bf99a6e19ff1d3470855228dae1cc3ab5816497
SHA51250c92089744bdd40ffe7cb28bae824815aaf2be67ae2d444c393c91fb733c99c49dcf71030017e82261ce4dcdcc643c2c826d2bf2c09d7c33af478bbf5e30b3c
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD509a9964d72e511aaaae89c1a91520a04
SHA158385966f390180f39d40963f8d28e5c1a9cbeae
SHA2561256b81daac24aecba7a7219462c5dfc89a731e512a746744f331ce69a99f147
SHA5128362fd8f99f67a3158279ce159c46998a662b8a59381f7a5623c426de881a43ed9e28e926f1299c23a415991c4f5bbcf361e1be3d9592e113817837aef946064
-
Filesize
229B
MD5f184306de580888d0e7339e80bd9c213
SHA1fde9b1a5e7f48dc4da68af48ed9376a40f077e03
SHA256d7d47d86b0da05e882d2236b316ec370cd85f359b4fe566c49afd3221c7d5221
SHA5124ad21d72c70cfc0b0e69ec5109da58e7aa627a692ad595c758b4894f940212b3c992cf257b22ea244a0b0ea716b6e99b81590fe7c00bb82195fbbffe2f416b1f
-
Filesize
229B
MD56c9133be1ef9f1026a70b0f470cb9ef7
SHA1cfeb71d090275e4f775bda8921983d133ad25159
SHA256ad9f3ca966b3da1399d86b11b172cff1dbe310b4fcb900d48f7511eb7075942f
SHA512d0a00c896043a40f0f4d36685ac1239bca1e93727cedab112412db8105e7645d7575677c84b887a82c23c2431e242650200e186ecd849a1f4ba807ab3e9b2d70
-
Filesize
229B
MD5aacd65c3dee1e4f4d4f3b4be8a4394a0
SHA11ac790ea40663c189de9bd183453f8886f083eb0
SHA2564e2f3f1abc016b140df44be38bdab8b6e31f9b6c684ab45fc19f644423816e01
SHA51234135dddd954644e8673c34720d7df3d610fc51809b64bfaf95d1ceb1f084c44960bdea8ff24b5bd2cc1e51b11f734093ba9dc90b607182baa38d659737cc09e
-
Filesize
229B
MD503e807df79d5d2db8b68c1961309a278
SHA1156e8acf23f7ca2c33fee651ab34263ec6abaf68
SHA256ac6a69703c2dd3fbf2b35b6c4d9b550d1d3ec3b86ed022a669fc5b4b0d99e814
SHA512b846c71283cbd313a36664f1afde9f562ffd11c6a65ba9349d4860783b08f78bd65e28f2023591a42f91855518bea255c46c5b6ebf0e83ff3837989e4cd44b3d
-
Filesize
10KB
MD528d2bc38093d06d8308e1b27e3cae3d3
SHA1d14c2d6f053b6ffcc9a34f9c7094fa25948a113b
SHA256283311182d63e66b5ff54a92aaa2872f8828d356f562ab633fbfc7dacae90553
SHA5122e60cbf67b064aee41e746d72728aef9d53af6a5345b4d42554c86ac3c0cc18596563fed30764d5d3d201449984b812933d83bd4205ab9bc7003764f4ccfd892
-
Filesize
10KB
MD58ef3d30d04eca8ae9b24bd153d75dd8d
SHA1d39b1f20e5195b0f194e4e61c09acc9eb85b7a45
SHA256be951b19e7895df81b3ec8739351c4f84d807db3c5795f9291b33dfc241f8793
SHA512db3a9474b4da65b0de01bf3e9a421f1557b6cca00618aaa89ea532e30ea4f5e512753d7f6533aa07195b9e0627a54a61cda9e789b3590896ec36e28df9384f09
-
Filesize
578B
MD57693e18d66c1963d6b8c19d32d894de0
SHA16761ae2fffb8ca90d56a5ea5e5973db56873ea01
SHA256e25b8b888edf93466a05c562bb76923a6151d151bb270b394f4ce8fcfe47f525
SHA512c77e71a62cb68c4847b0eaf37369a5fe05d555b98a0efb2f0fb629a6f50d831e47ecb560caba8f066fe887eee81df317de9102e6c442ad9bdbbc8fc343e29e60
-
Filesize
990B
MD56909fd840371bdffac2563084fc43a17
SHA135536d1d649aecdc5a68b3be7a2275b195799a6c
SHA2562f34690bda0f44feccff6fe2aaa50e4ea1e79680c96d88e29ad4603ea4c9a35e
SHA512f6972497c802ff1266de107e885503546e3cfdf068fd48f890581b2e5e328e2c15e8ec7dd7accf59b9db3783cfcbcff151297d087f94cf6ff0c59511678e0f18
-
Filesize
990B
MD531eeece2ee14d251788b2175f4e292ee
SHA1f097372526466f2868fc8b938047a19772b337c8
SHA25691e883d8fb221e1f2fce7637b8b6c3bee224c8b0dc3b95fc65871123e266215f
SHA5122cd348e1e0d5989a4b754393c70b919f7acfb6e9bb7cb45aea24ac9b82284d1bbe296a59f676a1ba37e3ea16073d07965825e73097c96ce1bbf54881b236f68b
-
Filesize
814B
MD5ecfbefc96bdf1b9e93043489e02edab0
SHA16068b8fc3065b47fc87fb0f690b565be800ca12f
SHA256edaa0930baf3f8e0a4b6d9f1d5db06167c14070a166f6637349abf3fa6d23e92
SHA51236ddade32ffda0342a3f3a299f24d171b43f56cec882ecf6af47997d5b74b6f462a4dfcb373f77654f52f83a8a125ce4918e5c80da20266f2bb3c1e34ac1327b
-
Filesize
27KB
MD5b8b6c258c33e9b5835ac9fff01f1afd5
SHA1c897c83d522508d252d9407fb4ea2f19f62711bf
SHA256b953c72f5da5108a466d916ae231881ea6b6812343d6fb79ad2d24328208c7a2
SHA512f344b6bfc86c4bb429ee8038eed25d5aa597c6eb0950ec71fec15becb321b5cfbebca7b182c758f77a26d8f5455d51b7165ec6e25faa9b9d926103017b603838
-
Filesize
990B
MD59679b24bc44f6fe39fa5be22b43ca733
SHA11d1c93f132e68b18b07639bcda728da6d1aa2bff
SHA2568a302a6f805d3aafebb1180b5b9a57d859f9f3e0133dbbfbf25a96687cb91753
SHA512ba6acd164e5ebe69f71840b2d789d3b74c075398cd7b959576e8038eaea0d054f786f2271f407c664e5704929b54400258f85867603830201e7d7fd893453ed5
-
Filesize
990B
MD57c8f93202febcadfcec9ead3d23aab4b
SHA1332abcc65f8b458b9851c3481868e793a123dfb8
SHA256184b0d944e415b1ed603189c79cf7962752dcb4cf9e5040c56853fe3ffbe972f
SHA512e26397da82ae4e1483ddf9d52b8fc552c8f97fea8c10401e7e4bcd367dc2cda8d44881b9295ddde06233fc1903d7287abf53c547d46455001493c3180da721f5
-
Filesize
990B
MD56047100bc1915754b5c121bfff90979b
SHA1842cc8dd9f750712fe6613892a8875011443f20b
SHA256ff4f6e9c7bba3527159b77d79ed4e70fa804212eda21a179260c06929b94e70c
SHA51201d10f9d451a40433d1a202e009d3badc4a2258e2b46e13e59385fb35157ff37284c00eb2fd3ab38badd222d904f4c910867fefe1af61afedd472982784695f8
-
Filesize
990B
MD5303750a036db9bb20deefa7f38cbf403
SHA1032292e0a2b788ccfbea21ef45f95159fa216d7f
SHA2569b8d3553d422cef523c7460e48d71182bc7e5b13c2850bf7063d555ba5504836
SHA51235fbedd026bc312f888817401a9873d66afffe7e205d99939aff25388aa969758298b4fef66635379fab57011c66a04a2a97a5874ffb9c93e06dc78059773161
-
Filesize
990B
MD55dfcfedfa7de6fa53530a97ab4433c15
SHA19698e6a69f9b4337968907a7a7bed4ab0bcde1e5
SHA2560b979d099f4adbf1587385baac333b69a585314156597993d25d10acc033558c
SHA5122ae7d6ae388711de5695bb3ad36d9ea5449ea49802bb545df6395c560707ea8a935df564494a1465211bdf7c1bc7f2623f3da1f2f96a208afc796a06900615e6
-
Filesize
14KB
MD55ef7beba891f301d448ffdeb420e3a0e
SHA14263c97ff33ebd6da79dcca79b342f194df98935
SHA256b23472940380dbd8830cf6b66638cb54ff8841ca78fb0f94c2200edfa921cacf
SHA5124cbb3ed4e171258ecf1714b81fd0e08888aaeab5bd362bb3085aee0d3bc2bd6aec6f3954d9c797d90636383bfc2ae1079c17f667cecc180e4ef3ee78226b907b
-
Filesize
990B
MD5ee7edb59ba738727b764d738b9b80732
SHA1fdf351eeb0ddbd94cabe7019cd52ba4368690cb8
SHA2567ad93b428ed00dcc29acdfb69b20b8bbf9123559a07a0ed125c7022372f9c8de
SHA512974b79c4a07b03d372920d3b0ef056cea396eed35d4ccaf2f3c778b7366aab69e2115d86155a95d5bf6bf8118ba6e8bb9b3488ff3e30cd396eee1a45337f2155
-
Filesize
990B
MD5cd7591df4d80fde04ac9365482ec6142
SHA1b8f1b272a7882667d0ff9101e38021647503eed6
SHA2565abc2cbbe24a60ea85b1efcdcbc3bcbd9d5159467d754ff3164ba102a59667cb
SHA512ee5159adf9efb6d9aab40614bea7a426c11b5ded9bd3ede01bf869526e45f4a9ff75792bb4e31d4d248b5d0f0893048914cfece2c19fbc219016c8d89901f12a
-
Filesize
990B
MD5b896dfa90dd9d993f872aaeefcf231bd
SHA16383d34479c761e5a54585157fb793958b59495a
SHA256acc9f083b46c6bd5738080214ad79aef547f1750e576f5b452ccc073974dba9d
SHA512c4481674d88fc34a1fecea102456eb93f9e60a0b9281af27823094e723982a96237482b7426744e6ddfd2f1cce009533eff1f8f5ddaddc56ae0256d10ff0b83e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\embed[2].js
Filesize57KB
MD551bf9331b7da93b74aadaed69d8ca9c5
SHA1e1a3848b74fdfbf6fe6a4d908666d0476983a95a
SHA256599aec0098f8d9eef547c3dcf1e26fb97874d28128faa617e833bd3129dc7aad
SHA51208c2b8bb6e436297f4319445fbfc57dae8c9d3cb819330c2311ca700230e4a6c201007882a878837366b0c0ec6e6b6c23549274cc7923a9cb3c86483ada22c22
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\base[1].js
Filesize2.4MB
MD53e9bcc3a02e10c215e76e8f10776aacd
SHA12d0ea8d5ac893ce05e5d5754b6c8685d8a24a614
SHA2568fad8504afcb6cf84a4671ec06aa9bb1bec195180a3bc02274c9446658991dbf
SHA51259ee0c704e8b2e9916fe60ef7de98f1260d8a5a9373f5ae11d64fdfc776694b4988294f93245de6b6e370b7bcc5d80930ed4d94d519dfd62b7ee8cf6e362243b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\www-embed-player[1].js
Filesize319KB
MD54fb9f6b90888aabba48871301e71afbf
SHA1dca16a02e74c6c571c635eb774358dd5924e7a64
SHA2563b393dcb2b2da46e964cc4dcfad2bb4a032eca390dcb259194b89a379a8f1d06
SHA51244a21e356286f121b832ef925b685da25aaca059683688faffee4d8a56865c7b91a32a0cdfbe2e3623ddc5fb61c7891a77c85e798e85368d22ab4efa4329f347
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a