Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 02:02
Static task
static1
Behavioral task
behavioral1
Sample
22b95a04af4c0cf2f24e4d083dd0a52a_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22b95a04af4c0cf2f24e4d083dd0a52a_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
22b95a04af4c0cf2f24e4d083dd0a52a_JaffaCakes118.html
-
Size
29KB
-
MD5
22b95a04af4c0cf2f24e4d083dd0a52a
-
SHA1
fefee9f83363d54e47367d5beabfe44cbf2b1def
-
SHA256
4e8f00cffa72075326af5ed4e484cee2720d9d527b9d2a41d05d8bcd65f4ca73
-
SHA512
75c1ce0000c975df7acce4fb5722d863f5aa8c751bad5ba07c6d9b9b916827efefa7538f467d17b6fb01860728d65567329356fbf25a490654d79298765c3633
-
SSDEEP
384:SfIxI0RhwYiVXe2thOzj8MMniRkzhYD2zmCQEZz7aSaaefGUGky04PyMzgsb+/y:SfIlJMniRkzeD2z0iuSgsb+/y
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 0053e1f3eba0da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e000000000200000000001066000000010000200000007877abc7272411f7641bfd21f2d5983bf3e564adac9b8c7b2c33a73c70566b33000000000e800000000200002000000058877b6f58b4e64ca6c4891911decadf2a095cd2997da62fb44b9bdb0b1d2a9820000000afb47fd8af7a93d464673425ef323622577f73cfa64b90711d53d22585531087400000000569194499a99e81b3c1ea87a8e303d57fb4b1524dc67fc106aeb01b451bdb2215a1eed1f2034356cf79642fbd09d96bf90958220451a5210c4bcc7225bcd808 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{063F3261-0CDF-11EF-9988-CEEE273A2359} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421295617" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2724 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2724 iexplore.exe 2724 iexplore.exe 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2724 wrote to memory of 2608 2724 iexplore.exe 28 PID 2724 wrote to memory of 2608 2724 iexplore.exe 28 PID 2724 wrote to memory of 2608 2724 iexplore.exe 28 PID 2724 wrote to memory of 2608 2724 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22b95a04af4c0cf2f24e4d083dd0a52a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2724 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2724 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2608
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD513ad2e7c7ea6d871fc884c4be8390c58
SHA1b7ed38b46ccd4ec625dfc6422e1c1a4d2fced5da
SHA2567bae65328d14e2ce2c8d6faa6afde8a1eb618ba518315ee4e70ee5eab8f1f7b9
SHA512fd1a30c9155a461800ca29d315bf925bde125e4c8685007a97a0a2c4f5e0642116710b581776f1f5b13dea690a0c6c5c396d2a3d5b8a6f9a4b0d7418425b91ee
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize472B
MD5ea44005df160df5c3c1e5ffd2fb65d8e
SHA19f5dc1e2018aba37e7328c3b6709e0742074ac98
SHA256fe058741694e0c279ce6011b2aa76c1a90ec0703433beffd460531098b006423
SHA5123e78483dcd405ad8e6301daf32ca9f0cd1312a17b221e0848c8d7b05419768cedc3e33a170cbcbb2b17eb5a9a9996824a1c975b3454f83df326a64bcbd430370
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD53a5ba2d3ead1de88a9b8c061f05921cc
SHA1e104bdd8cc4e2dca6c05e04fb175f9e48739cafa
SHA256897884d8de52adf6106be7c5c477f326ace90aaaba356c8fdb139d712705e7a0
SHA512a55affbf75a083a343f17edfca85d285c5fc350b2720218c4d65bafed09d66bfd74688a3defece9290e4c73a8744cefb0fca24c56b2e55ee07941ab993ee2dd4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5af58b070639461589df89c8f2921bf6d
SHA1d78d265116ff81629dd5140a9a0b2b98b486e206
SHA256718fd2bbd863f63d67fc8d25b279655edf82f9d4a859e37b7238b97466c36ea8
SHA512060b618e6324c17b333e85377c1f9ae41161c58aaa388f39a06145202a5fcc134a3e22f89ceac0714a4a337f96e0de863841f1d3a44c9dd8426c3c79a87412c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD549a75568f4d7f0405963979dc24f38fc
SHA1ae6b72d855d56593fd2e5ada5ba7a1461c54ec46
SHA256c18e4938402ad79332a22832dd16927d1b4a3ad00e21b25123c7cc6843615a91
SHA512bbeff42b4c7511a40aac7f195ad9880667ee3ed7999774c79b5421397124e2ad7a18e0e3be46049562faaabbd4c457be89a66bf4a547d316376d473864800081
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55655be33150067fa58589aa8b702fa83
SHA166b2958366f23846315916a46d8d5eb0252d60dc
SHA2564af8a9750c6ab2a263fae7c48a5b967e7af76087e90a20dbd6e9ec8c40e4b407
SHA5124261dd57d54441bb944a2e6179bf5e2057d7be4861ed5b13fde5f8504ea096b1a195f7d29858112883e7f523f79759d5369cac8368619bb316d78358e9bf2d39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e6c127c81ad6f8930ebb14598ed8e9bb
SHA1ee4e3d80f5d8d990a4042d7c09206bbe5c11bd4d
SHA2563719e0d56c353c4c276122bfb9c33f9a231743fe5a6000a6df72a077f119cec4
SHA512a1cc4d06cbfd7195662d14af981d481737ddc9c922cf5b1aba156c45bd778f04fc5f03fc500f4d9e4d17959ce8a20abf79eb7ffeed5d9690ac83b1862c2f279e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5430e1bc2c8dd594fb6c65ca41b60ca11
SHA16911e88e40ab7a72b60874511be870858248204f
SHA25607009679f0f2efe0512657b7238e12dc5b17a888fd0eae685ed15818e01f42da
SHA512e37653ca6a2848bc29803ac3dbe2228eaf1d7d30bbaf7f1ee73e46df9cc5943e7a52f670e3644dacf2182a3bf60ac16adc1c9e831b880915876772cb4f765087
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b2dcca4457a6f04c242daf56b7b930e7
SHA158860872f297f46ddda47f18ed5c291e593e64cd
SHA256f653287ac65a3da9f430f8d3f441f73febd5ca2a22934f06ca667cb6b7f98b22
SHA51224d91265028658d0e1614959802620d2f4c86af2c0295374248b6606d07ba8c5c9bfef7c391bec372db74a7c7060d0666b87b1daf5eaaa7b5f787f0086f2bfff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f2328d9529624c160c0e05b73e9dc438
SHA1befce09b4469a5f8fa1b74b9f058f97b0ce66c67
SHA2565e4dd3743992ca02f7878d6fd651c498fb9e0931f0201eed8bf1b365c8577cae
SHA5125be4bdbf84db1f6756f08434dafce1527d2ca6c6a12296e761742f851263928a37707880f8b5a07f2a1c8fa4d1d60075188da113ef893aca37257a766210e49e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cabb6632658298ee86b6d1b809253749
SHA139d54a4c5954f80cea3fe613fa1cef4e9aa7aaf7
SHA25678e5f1e89a9149c89bb6e32fdad01014dede26c462c47e27069a9de3d50af190
SHA51287f7dc7ee228d4c0a0b35b92124ee846759623f5ad34b3f7744d61c6fb9fd59ed463ab6375820e5e26fdafab1779d45b5f4985689ff56f31c637dcb7a2a1e333
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd94ec5ab0a163f8d64f755deebef969
SHA173ffdc46d105b047f7ea2e2162f4ecda929684c4
SHA2564b814f52cc077e2a74a252b3781724c243ab2d341eb7e7b0c2291cb6d148d6a0
SHA512d8bf341e3ed173ec49af8c287dfa8416c40ce16717192bd7ee708db455b8e96268699798d9f832f243891a816d589a5f427a632d1feddcb83a8cc04429fc9a62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD567b6c5deb9558895867d9dc6dbe9bbba
SHA113c40b62802ed9a60297f19621ff2f5a424d6455
SHA25690064f53620e36c6f283ed330cb99c08376076b07ed83be45deabc6f02b34d6b
SHA512b3fa3e32d32a87d19344972da0616aed4b7008fb59367d3693cd730dd5602e62190cf12fb0098746580faeaea709c3452bddaf487a769675a3051755b8d34bd8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52931f140c55b5c3c76920dbad3855e0a
SHA1583e210fb60f44589e3acdc666877867bb020285
SHA256e66a65232e68d5c0bfd962d8d19c5fff57643df370cc20334c0f9c06936608e1
SHA512a01c1194f23f5704f335dc5887aa6b684c943b788d624ddd580b6906de7198dadffc1bd220a58821bb95d82551d8c02097de166fe49cf770b504df6f288bae09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d484a58c6132539db1851a52b49bef4
SHA1b2eccb59a5f09114f9733675040d31411897b1b0
SHA25621aa695132e5bc635272fca08a42ce21f45fe66f4970bde627a70249fc6d4837
SHA51297008fadb876163feb537eb3106d33ea6a6415181c17247cca9d921bdd0a1d43fea28420271297bbaaa690bddeba771e948d6fa9a526ac1f159ca73ea1e4c8d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b1474be4012aadba611fc4ca41038d66
SHA1d64dbd9472cac9b2a4d7c749e6fd755e8ed5bc59
SHA25643c95576f6ba58a6576c7e137cf30fce818e43497c7eec5373b10af019a710df
SHA51214f24293c8f36918b4614eeda1f9f0bdb2f83434e6e72be120216110b5ef57cd0a773b00259deb2282064bc498a9c71943f81a2fb36e39dfeaed4082d7229e70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a6a0725384534119bf1ac52531fd567
SHA1eb190bad94878a43cd0e2fbfe6bf309f72183b3f
SHA256966fb5fc6e1cd946ba135740c7d15901863dc9120e1fb10bb46a0a551af5150f
SHA5120f4c7549cc44f23598e6ce396aef3b3f99e841c34f9aec48150821332b457f4579743f40e8c1697c766e253c28027dd9a65ce133631e26c71f5d5830cdc8dfb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD561c07780bc4d9ebe94a69f9479947b16
SHA1b29ff1d6c8afc1694b0a57b70a794d18a49da214
SHA25609d6ad225f74daddcc2cd8061c9a3add465ba1d1d4dc70168ead7fdac7f3aff8
SHA512c3e7db6a1d061e23a11003f2841dca07355d9aa43a0856b6a8ba5902c2e7002a55822f46d361d5d79d1dc2553d955f5e835f3caa6af6e141b85907b3cbc8dd40
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD508fbe2fb763f927eed058590e4e4052f
SHA145b2b076e57922dac7a4d6512fbb5fbc8afea00e
SHA25678285f1db0e3c8446e147d6c510d7901ef322507118834948a9b0685a2af0d89
SHA512f74384dc376b08d1bf8e4483157d3ffbbe6bf9b6cb61cc5cef777d6a34fea5f8b43ec015a75eb6297fb302ec8b1ab87c6929b8c83c1522713018be11510ea3c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD504d009d0656f910ff1c0bfcb7b50ea79
SHA1dd0773db52efbaf3037d114fb11a47606d278e23
SHA2566b8aa5d14f6ffc3d3b185bf77c4573acb9e14c63fe835d9d60153c128a088910
SHA51234eaa5109d12ee9a16f5836e41b7a1d32468b5ba23339d7e578c149d90a8c1836d706433080c63177fc5ba98c4b263e8306b9fe2bcf40b225ab273c2be4ee16c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD574c923aa24eec1fe1ae98e7c87553857
SHA1ae693eca26eac8e85232a3c76a17051247da6124
SHA256a3eb35b745d42abc4d20e3d6935e627b17b91fe2698b7bb753691dcd834fbff1
SHA5120d3a0b0243da33726c6f4cc7f6c87cd9256472c92f338baa821ac8729d54bbd9e85fa89ff08d56509dfc72367c01b8d22835db5a66077cc011b3bb8023abf989
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ee6b95e51618815934509401de72169
SHA1766705d01a79121842cb553389e7dd7eca4b2ad2
SHA2566b8d42e464e6f5cd936a7926f430652cbedc28c69f320cbe402f04ad475dbd6f
SHA51212f2d56f96fe4d7329533f043b6046fc48dd378a363c1bca50fe19ddc5a2ef4690cc4cd382fd2875a407bcaef76d09da2da0fa20de16f4ad663ff44bff482861
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5772983a3656326a89b7cf024d2a1963e
SHA1a2b04be7ceff4a1690a63874a912cd15e5c39b67
SHA25644121eea52c0dff7053dedaddf8a00569d72666a0846761b99973c0a21d20216
SHA512ed56d7f3d5863524c501b18458fe5343a979c3dea6ff080d87df3e33dc680e5a19b492f1ad0cef9de41f64d75c549b947f09ed9b19bc1a3b1f1774199b51a76c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD503cf4c668c942ecf61e45469651b275a
SHA1b8dfb42e01dd2cdd5d4575e51032910311876777
SHA256f1b43532191e455b6e4fce94a1c9f115373f801db1f9df58bfbcdf950372d3a3
SHA51225fc41a197b6e9e0a158503aa80c2f75d28423a2d9cc13ea01b4834a820c2e6b394494f828ddda479c5cde86be16bf5a1b9e23a3413234e619d504f2cdc685b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ed74492fdf704c1fbd81e7ce5b3a53f
SHA1f84d38b00a23a5105369fec4002b15ca5611ceb7
SHA256efe92e51f373a55f76d826613fad5a3cd7836052cf26cdb1af6b851ba971c0d4
SHA5127d77471ee019124e1c9f61ef74d0d2a1f52c32a9b7ed8591a0cf63c91ae59e80df8cb3a038d6056ce581aa0f92e503b9a67ae0c407d9527376ad58e6ee55015c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565c747fc9746dfc5c5f0349d23cd3ad1
SHA1a67b994194650a408dc5b811d00d44444c6c63f6
SHA256826948071183d4c2559be90bdd636b18f554a59e09eb8c55bf240d913de0191b
SHA5127d12ab4032c1f51737cc6a66b0ed3146bab935995a062b905d07d6437b59dc44e3e3fea1821026f4f5ebf43366da106f3c6a48bbec346e42ea68ff075679ff2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c7f2efd78bb27b914133e89370fd947b
SHA1bd1075c946fa15a205918c2d4a699ee1bd262705
SHA2568261ceaae66fff497eacf770deac636ff9a55a090c2c907b3b5aec2595af6cba
SHA5125bb357c9bb4b373420ef6b0e55550d0f1f175d49036d6408193e9f72d41dced2e7950ec66638576d595fe3a5b2c1cdd87c719834273d7b35bb2c7086b9801e41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD517855f9270a43e71851006e93f6f1b1f
SHA12598db25c5e6ba5b2b1ec65eff47622c86fa6e38
SHA256a889daf4dd0df236de8aab71773a6481a342d0f9ca1c3eab84c9183a32d507ca
SHA5122f2b074c698956f41c032918d09b05a8abee9836a15de66c470012943c260cab1e70aa608571d50700b599b87c55d9ad07bceb4fecfcb46d108738f331d147e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD532cbab3fe0f2f3c67a44541a11bf5234
SHA189e1ee3c79b6b837edcd7549d87b245c39150689
SHA2568a4b5962f0e2dbd9bffaeb7b96a8c392677c78a7a4574fa63d14153bce43a5b1
SHA512298ea6eeeb74b577dea26eaeca7d1ee43c9fa3586042eb328017df4b2267072b655d5a4bb07cd48d816fb3ba222f8e9cb6b055740cfcbfb6f32110efa1dd5200
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5241ad63b30e61e746200d7157f7dab20
SHA170240a4dab48e1f66d925bfdf39c2122dc7678a8
SHA256c18f39562a60a0ddc7b932412e8ff2b04d9d335756c29930f488b6d99aab183e
SHA51244b4bf20aa9baca95db433827cd2c451220c8b70083af4d101fd52e1843db1006fbab3a220e811c5687d3962b4d930f94593104851c0c064f25eaa82a8d38fd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5164d60f19a15ef2e5e4ecb775430a2bc
SHA14672d365b813b8b9e237e4a4f59e1c4f37e3a3cc
SHA2563b8555b1093e25c480ba06f1ff5b6591bc69b21826fa4efd8d72c7542acc66d8
SHA512dda433b0924b88c386a8a58b665ef6ff6c8de920986c4f30b8d687829fe52569649c03ec6e53055f6c263325e2f741ef0aedb5b11982ef77f59ea1900ddbafeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598d3dc9a55d8fbb4e312836e4e6d3982
SHA1ccf18b15edde3fdebbf7042c0cc4cf353f52abf2
SHA25624c12b4ad12b5535b1f9ce5727972370857978503b7874dddd933d515f6d5ed2
SHA5126213b0920212865e4ae73df35b0d04e54548fa1c353aaa9527f22614ff336fad6be4cd480510e3925355e25caf99baf33bc2db59a4958bcb9c05fac52198ef7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5db3dcf4892924b09641bbcf3e971ea71
SHA12bd44a53a00c33fd85a346e5ebabf699e28e1761
SHA25689e3459196b9a12d1552ffc52d3a50bec44c33d97a8f1315f2c85ea47c2420f8
SHA51215de0f1fea58414091d4c8c79b64d18ba7242bf97856ff4375acf1e2d4a3a6d8b21f6d77b67537a09394a58a5fe7361c45efefc434e673d1f008aa3bc43cba57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5acd8726d3222ad395d097ff15040587e
SHA123f84af1116203a2029e2f8fcaea03d7c8c446cb
SHA256639b1ef9db95f7ea5f3c71f0bbb42a85687e84e2c8bde344de91a1517dcf3f96
SHA512d9e853728d3e123e243a23e865d4c954cb5989a816378fd30aff4be2c40e3b7bd6cefb374016a5d59bf0df515a5bb7d4df22ed789cdc9449c722ee81d0b49dd6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50177723094959c53879883e03e9aa8e9
SHA1eef6b0cf20a496fb095f673fd8ca6c93675e242a
SHA2567e1eca875445c318ef44310f8bcd3d946a9488e2268245f9b693b6a31c5c7395
SHA512687524ae6a330056af2cde56cfc3fd3e1fdb92a05493a9fa7bf9dcab5e6c264a45f6b71accf0ccdb61e60b0b8729ad9d12c356c01c3ce21c130155e19674488d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5378a239a950a8639e8cde25e0a9a956f
SHA1359bc18714bec8f752924a14e14a85355e04c18c
SHA256d50e6825ce65505cbaf51c8b270c0e3ffcd97f5099845872b35e8ce69df8fdb7
SHA512c4ddbb3be7b9dad44b852b8b4e9ad5e8523cfc0ddf1c6b3d003bd01745d15d0bb91f615766632f42043792b088c639d89ffecd06e6773e1102918f02001a12a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f676979fc8752a99e050495b9f2b3e64
SHA1647afe33f87ac774fb7c77e8846cd5a92ec84d93
SHA256faeb735e03d8d40feaeb143b473726b5d58c6c5e5b2ed2029649d6c5467c284a
SHA51218df8da3d9e0e67051935441a4ac5e921186ea9dddf60acb014a95560372ca2278f51a3a52035495a1b5173172988be6d729fcbb77a878a15f09a704ed61f717
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b29c644bd16a507f6395d36059ad87f
SHA142159dc5ef4b063c7efab44424142f5ee8eb4a8f
SHA256313d50ce27470fb3164e9a445ffb17a4d74c78c17af929ce8c521c777df18bc3
SHA512147652cd5c1522c64cd15556ea9171fb169df14c540c7024df15ad90b7bb27081ef39c734ce6ca081548d7dfa48f828b939ea543cc712a78b440113e963aac1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df697f63fb457fdfe22f7f8568f02086
SHA11330b8277a9c4fc7d8bed11d7ad69aae5f47915a
SHA256626f382b1731e94ce029c396d99cc9b72edd8a29b454295a69248b8f8bd036cc
SHA5127800114056d4359b3fcdd9c2602416b231255690a546ba61674e6d59356487c75900797cd30d57454d1515da85e701d7ab476cdcd99f25bc21398f1973d08533
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50eacd04adf4fbb723540fbbb018c42a3
SHA119fa6df7d03e23a37f14c142d6318860ad1da521
SHA256471e0cf92d67555402b3f72e57dcb33a8bd596a6b642c46a47300c3428e71bef
SHA512c33d18bd0ce7b647dea7e5f15ce617cc90214623696c429a6b9ebfaec7e0d1a40764f64fd95668a333b7cdf3a3fa11b00915b5fc4b7fc9c7ff1199a63a815fd8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD532cd08841372799046e32b6cfce3d2d6
SHA15eb7a89b8e5e7128ed4ff83657f64132bf47b504
SHA256895122f75d76184d5aa2bb7e86af6cedb149ba73398f5f4aec1b2e9a22370a56
SHA5121cf3ff53bf3aef29b51a83274abd0a410b655a5e6292ba07f3d01b0aa3842699f6746e0bf4070ee68985f7ca68b0bf00f2f63095cfd35089acdc164fa2c996f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59943e8de4a6f04e87f85348f9b445822
SHA147de1f601d8d03dd83f967bf811a15906afbfc53
SHA256d6aff41ad1eeb85729a99eb118c1411fcb0f060e697b8654db839b9447e018e9
SHA512bf2396777968530e8e85a095ef39cffe8e5b4d4870be085248a6b7d2faf5274cb8b7332fcbf5711b7092d3a9af98c427faf6455b29b787f5339ae59155a32910
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c416a99dfd3a57d3b70e6a4956748cee
SHA1bcd7e4aa7088d0cec0d495411e9197225eee837e
SHA2566239963b4a6d39859d252fcc2bd384948c3403c94bf4f85a3de3239f94207bf1
SHA512a3176c0a2712bb0f248fa1dda54aecc98034d3981718547144e1dbca675ee8539c3cf27a97b8c792f9728f970f6b4f280315969a67bb715753006e42e1798c9d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fc4009d5bd7414e7d9b074a19fb76b4a
SHA169384ccd26d2150991359911a048c1f7b4249606
SHA2562ef55a11b1c2861d655b16b5fcb26cf9c661706f7c3e055228b9a0da2d4f9ef6
SHA512ddb207cfa9b42213f95fec0b64ac424b2a9b465531da6e56cfa769349cc44fcc2521ac6442ecbf74f97a2898dda797a5e1dc5d260e350f7e179efc7d9891e474
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5a6dccb7f503206ae9ec7f94819244983
SHA136ac2207ec132c4414b391448b32877389d917c5
SHA2560f28d0023724083eda6e31aaa517958fce865c94a82b9d7f23d7dd094221ab24
SHA512a04cf8947a4178e916bc11d0522e4fd26a8288f017fe69697d3340ce1b69174000ddc263b144d041dfad5937c26f4bb2c6681163a6decc41f0be649e398ef246
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize402B
MD5a1b7f33cf6b3d32ca6caa95845f5f550
SHA18812442575390ccc03c8e745b0432ef99629b400
SHA2566ea0b336aa4225b422c046201693a444819fc3b850f31083cdfb081017841756
SHA512523200757c71d651e4cd8654ebf9fbbd0f8805f3a60592ef9c64109efae0b82472b4ce5fa0fd152cda5320fca8be63eb5f1769e77e4621fedc84da3d73d072e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD570fe8b5fee3f019b46acf5a0992dcbc7
SHA1de0521076cbcab75a05e4dc6a8192c19e90d0d42
SHA256f7ccf9709e69921f76046fd61ed7c8246d3da9ce85f3226784057304868cb417
SHA51269361aee60724152ffd0a454360fdf18eab9d2b91f67dd3717cd4a13173276a57ec02b3c81f7b2eb6b6cdce7e02af3865e14813700a2dedb6b3c9af4134d43b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
Filesize242B
MD52f8c0476e6add68586fc0ce41c1eff30
SHA14304de8679032633445caa0a07707eea0d43370b
SHA25657f446d4386ead694d68abe0fb6984c03b198efcbb489a12559778ec38d0d173
SHA51296c8d3609cb504c587df3d5104c04b83504b41fbfa3ec62661cdd34b00ffd33e42d49a9ac564d01f17983959149e1a3c0952dccba1783fac3980c25f41c6b1b6
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\مسلسل-سمرقند-310x165[2].htm
Filesize787B
MD5ee480b02b04a9cdb104c73cbe84ae03c
SHA1c98b4a992acd18af3c0e39dd4be40f13a24fdab8
SHA2563e9d97fa636092c5606205a339d3a091b240543558ce2fae0bc0707d0e5ad13a
SHA512760f3c4d75992fe9d26dbf8751b05ee7f7c4015c806b869e9a517acecb05b5a65c806a3a41575f276bf029a4761c37f2a6ebc66aa4b4c17523ed29c0930e6a90
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\rate_file[1].htm
Filesize114B
MD5e89f75f918dbdcee28604d4e09dd71d7
SHA1f9d9055e9878723a12063b47d4a1a5f58c3eb1e9
SHA2566dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023
SHA5128df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a