Analysis
-
max time kernel
121s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 20:04
Static task
static1
Behavioral task
behavioral1
Sample
2b7787f2f15d3ba8cd134c12f74c13c9_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b7787f2f15d3ba8cd134c12f74c13c9_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2b7787f2f15d3ba8cd134c12f74c13c9_JaffaCakes118.html
-
Size
175KB
-
MD5
2b7787f2f15d3ba8cd134c12f74c13c9
-
SHA1
888fdcac9427a7dc196d8fc50f243d6808bed7bf
-
SHA256
1c40532889cfdd9f3d7c85c7ef1362a394dd17e263f677b96f77568931cfe095
-
SHA512
d88c77fcc65d22a772e27d80d9b5787ec241afe4830d6e211ef7db314eaa1de0947c7d678df6a458241cd481e8cd68c3020cd45b21072b84446d74fc24f636c5
-
SSDEEP
1536:SqtY8hd8Wu8pI8Cd8hd8dQg0H//3oS3FGNkFpYfBCJisR+aeTH+WK/Lf1/hmnVSV:SBoT3F/FMBCJiVm
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421446942" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8212" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20e4644e4ca2da01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8528" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9577" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8534" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8646" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{56C0C851-0E3F-11EF-8E7B-D20227E6D795} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "200" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8738" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000000934b87cfeb6c634142ff2b42dd5cf641f15fec657dd2817322fd66bb59e57a5000000000e80000000020000200000009124cb020593a322a0497a333ffb19e768ba4889945edf22e4b9d29fefa2647020000000d8f0510e59aad22c84866d81721cb947dfba60e18ce54a9d99d2f67daf87ada440000000a1b3901a09e8d39112cf7fb8c4ad2fb0f404f585fb0bdf4392b2978f1fd1037fc45e10246f03303ffa6938c9c9b0ab80f855b47d5c9d664a6897c29d3df757ee iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9203" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8212" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8646" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8528" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9577" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9209" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9203" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9209" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2740 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2740 iexplore.exe 2740 iexplore.exe 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2740 wrote to memory of 2112 2740 iexplore.exe 28 PID 2740 wrote to memory of 2112 2740 iexplore.exe 28 PID 2740 wrote to memory of 2112 2740 iexplore.exe 28 PID 2740 wrote to memory of 2112 2740 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b7787f2f15d3ba8cd134c12f74c13c9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2740 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2112
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b1e2ced76d51c68376ac11f9b56b326b
SHA14512a09be7b02916210ce40e23edea5537123a94
SHA2568b3c603ed4695cbd00f600ab6b36537c18fb13c02534c830fdbbf708ab4ec7c6
SHA5123757f89a130c9e8d0bd4eba77d50ffe4e3ec96d0c1fc83c6b74948044fa2be206bca8b91dc78717a52dcebbe9c1f58d3306478ac4f87b8f9433372be78f76cfd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b634e738b59354e7f14926cf30b94ecf
SHA1dee92342ea3f54ea9579dcd4752f86ab2ab3b943
SHA2566f4e13d2abafb362df7eb434626ddb9672f40d8b9663faeb0cede632995ff461
SHA512af42ed63c2609290662cd595e63859b501307e973bde0087bee8e571f1d9bc6d82b553276555fb38077897f850cbf0abb268d3fa1b125e7d6cd44bb52daace27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fabb03fa2de300d5f283d9e494cb2fe7
SHA1aafa50012df475faa18acfd4be68f5988f39cabd
SHA2563b5f633b4cc900fb0ad0bdc70b05b3e00215e2cedfda47f63f6aad8f3df57879
SHA512bd97fe4acd1f6a263338647071d4b58ba88d3166f8bd7abf8207230784b60982d2724edbc2798e58b9301311985046ea8a5b9a1f23a4029ff0a7c17637ce75af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ebf13a0aaa03f3ce9ace233465091f4f
SHA1ddea9dfac0194bb05464f7cdd8776a68f0e84679
SHA256fc03501154eb65c8828a03e011102338605507b2a2bf5c9a7758ecc14d84bb19
SHA512c5dc1a93f19022db53ddbba666b2dee8804779f1a04383dd8c0b51c89c5fbfba1c9a662f412794d7e59fffd530e8c1545756b551cef07c70617dba7dbf30bacc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57770273c816cfcfb41335f4fca9a4b92
SHA10da80983aa1ca8909e39b634f1540ed4c995589c
SHA256f84e21f5357ce5306c348027eddff1b4237f2647d1b78d6c68cfbf76f1d27fa5
SHA5126658696dfbd0af5ef7a9f82b48712da40bbf7d8f85ac40f906787ea40b84d19f2b9d5292c2ae3dd3afbaea03b30712651754bbcc3e7e7b568f7cc64d17c99575
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5acb7f604f749e2ef9a4b37577fbc9c0b
SHA141f1101f3e01f7192c26523a0db0dabe9f0e5a2c
SHA2560951a01bfbcf9c4b5fa2c35a3320772c706e86e49294fff11db740a68bd44cdb
SHA512d7701f03f64a2a19f02eeb64233d9222a467ca2ad0ae9526702c954617ac6be0a805a775f778ae4b82e2ee086eb7ba06713aa83fc8ef7f8ae37bf14db562f504
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD562b204e67f3acd0eb8e61b6cd889d49f
SHA1d53ab0b70aad89498b45de639b2dc07ae7439f1c
SHA25691c350aef805c908a0354e13d6f7c22a459264a4105a4a45651a1145531525e6
SHA5127f3d18841db87f12b9c436cef63c5456e22dc21ba05ebc39929fb95a116f7ffa50cdd749b67ec2ba3b0c1b042c9099c66526aefd531f44c90e1c1c60403a3f6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5202b9ac98c12d863545c1ac28afd9959
SHA1155eda4d1bc5f7007b0c0943a0286b9b47d492bd
SHA256778cbb96fdd64e86fa723c1ed333e528a36bf63c6073126a39121a36665ac137
SHA512f78f604c06864f8515e9660215784ed1c8697b4d004ba604077666209cb84b120c72c816ec23832163b0f70d8305c8700bae0d83b4b81c6a2a27f5b6f1da0bb2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de0df83e569c36100c3cb4c3bec781ab
SHA1d17a519258aeda11c7fd9988d617530c17b93b47
SHA256afa42c90f3d8bf81d68a3f8a51e7f96c2b84d8be1416422c78d20042dd6d14df
SHA5123ab7013578fe778fb5afa768c26ff8d56947f1e9cacd49f1e803e449ce6314e813a6af6109abd713fa6efe24fd2734377874e11a7e95e612cff1296246f5c040
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d2309ec3cfcc132576f20a39230c7445
SHA18c8d537ffa7b6fe21fdb713ac4c7c5a432ea3f23
SHA256939d3ca7795364df825e008512b24f4d59a73089c6a7f0207c5eafb4d6814f84
SHA512a6b2a2032051ae720a582fdcf9beae8c4978c2fa15faeceba3f14f23d6552b67dc3268833da353cd286e7dd1446f8a40e7865abd04e780223da2ed8c6e5a69fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5023bdc72c32afc314194115e7709d0b4
SHA1c0956d4a387f6ad90c2e06fe24742b526743c6cc
SHA2567acc9e92d5b16fd2154d85e9fabfea11c58c4bb129dc77147512a16cdae41e5b
SHA5120273c5294d13f7260dcb16beb105d6df2b72bf46ce1bca3ebc44237491c2bf01bc8ce7bdeae645089b9e78a28452f4d2dd69bfcef5e2d1e20cecbf6314ef04f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b7ccd2f4954592522febf2a4fa8692a2
SHA1fa041a869a121bc56555712ce33cf411f7fcb2e4
SHA2563f6bed38b75a69cc5332c19ad9da66d32a690eb75e957efed1e0560b5ffc3e32
SHA51210d89e11f6efc7456529f817b2119527caaa7773c9df8fd4914b7fb3a54bb35587b032dee3b64fd6b3d5355f10c76c72c31c1523cf2c176750062443ccd3e161
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a757bf6891abe12495b291bfd81807a2
SHA1bf3b269a683f6311636cd6d923505abce1de0907
SHA2566e535e2014276fe8a3cbbc6ce782f0f970e25bb4f1a5b74d1eab27bc783bd723
SHA5125f2d024b8054ba38a6e48e12f632922782bd1bd68072014cac57cad85b140df803d4c2d6deacfcb1d8778add16586fd5570ffb104d7bf7448576753d6570c2a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59637cb1e58ca0fd37cf81e1e7e2edd17
SHA1011881193f3aa15785889f80dee4e23b2e00f886
SHA2567624586bf08b18e3671acabfd70c01fee65fc4f6dd118e7dc8dce889e26363d6
SHA5126ee03d244c21430c7323036115ceb185972738f4a2a6ab5cd50145a7a75960f5c532a8008a48ac641fe5a349a15a51df5dc46b7ec691ed250e5a9da40d95f261
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5769f650a5c430f89270c1d02d3a8f07d
SHA16ee9fe83d170ad89c13055e2923d99e495041c36
SHA256c006c9cdeaa23d74f2ceb9150a477c513b6609552b4b95eb2d7a6d89210c8527
SHA51279b0edcd8fe62bfe18af9de0a28b644da247d9ca06560ca37b825bfa6963f49c9f779751f754007ecfec4b2021823b8f6abf97414c6d6fd30601e1d7dbd1f009
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD5974cb34142e10a557a54c2aa3097e1e6
SHA1c83105c7e49369fbb9c067cf403d3ea9d73162ff
SHA2567a653aff4261c56077c119fdb0afe2f40642143642e6c4fd26baae407f451af4
SHA512a6d07acd9d9ce3721b6a54842c8b3fd12196801ce0e1090ed33d2b9ca6bb2cd7e875203936e416e56f6ca8e184ab9632534ff8f7df4310acef987b13603f7010
-
Filesize
990B
MD55d563114023ff74c21c56f710a4961d3
SHA13225bb2ff06314db8a9ecd6b356af398e56d22e0
SHA256e07882b48c631462a2b5b73a2f536bbfc3a2b7f980d4aba7fa94f6f074964d87
SHA512ca4fc8e8d6eb5d78e37b168f6e4afc00f042c210da83dda7f8bb951113cbf925fc0d0a67ae0892110267505926a6e47fcd8a9e53cbe2a4b99929dfa3f11dbd3d
-
Filesize
990B
MD5fb8a23df386d78a8df18c6cca052a6ef
SHA14ee1f20a4a77641144c7c40c7f7b17c3747dba84
SHA256a8ac2a10d7ac7ba4e1b9f5338a1b5c4a6df80c59ac4a4509d4a3e0612de7358e
SHA51282e589c2c3dc08bc29ae0dd720a8a11cfbf041c879270065004ea0678e841cbded09e108174a28c1d51c234d4b42d6303238d0e8f44881c014e6dc587a804f56
-
Filesize
990B
MD58d04f62a6f01264ba9b200dae1868074
SHA1ed64bc15dce39368038bfa9ca2bd98231dfae435
SHA2568af2a56c4209fa91f636a65c7001efeabc60a3dcd4829697f4f515624ce05de4
SHA5124c91220e69e37ab3c49b00ccb4186353d081a28889b7e3700dde53cecdb1d21fc2e824b3ce43060877b0fbdbc061dea60c897070997e82456803f2049fba7296
-
Filesize
990B
MD55ac4acae458a9bb525fb30ccff00e921
SHA12efaadc89ae0b6837ad05ae7e8da66231cfe97d0
SHA25694304222c33c1fda204730b8b1b19c9b0622c398dd6c551343211d0d870a6f05
SHA512f43e35b640fbc01878b9bd16181a9b500cc76d54d90a5b06ccdb734ad964985485555735719db400caa7810fece8c0d98528001f6df8ee124d977d32ddc27211
-
Filesize
228B
MD56debe0a01f264892b0c3e1a065582a8c
SHA1caa482b079433025a030bf48b333f954b705b100
SHA2562100292b918fddbb404198be782a8a5c33b07c3dff970d8842200b717054930a
SHA512df7f67608ccb9cfa709e93eadba66a172a1ff4d60143ad9db38cdbdd4d0bf1fb656dce9fec01ded5cc80d36807dc2d89caaf5623dce11e2b53750690f7bf892e
-
Filesize
14KB
MD53005e35949d9fad54134e58c1d94c53e
SHA16f8f8ef84e886dfc831c4725a17cd8e86812265e
SHA256d540b7c61b0d5e845264758e3bbf70ca2c4df95a99144af7f65784ea0e58a8c0
SHA512bd3eb240a39f849b810100041be185a728141079ea6c8f91c83d12043a42418be89671efbe1ad4c9f1d7ad206dabfa854636cc73b5fa1bbd72ffa0575055b571
-
Filesize
990B
MD5cce6be4f044c295b8bfaeeb7568eeac5
SHA128e96e83744a2c7fc7aed78d079486df7587c550
SHA256c498e0bc58b1d5f06faa15cbfc7903b4ae8b6850f5c3cb748ad04d63f5f59a2a
SHA512a550bb13ee776fe6aacc73f2da7092b3d9457275df900c4528e7086a6796ede7449e58b95768dbb5591d3f1db32789ece5fcdcdff75fa571f59c6a5beecd54af
-
Filesize
575B
MD5d9a074a5afeaea03351edaac889cae10
SHA1e98afc8ff5deeef024955758dd70433c88889b8f
SHA2560020e67db6f722965fc917df816982f5f672c224576b924da018760ea2f47cea
SHA512fd6958e5329d2c7050f1ee90bc7e3be3da64d68d217887f1364f1f61739a5475a167abd323b0c2f9e4fb02beab3a895b43a2b900cd56255a8792082e3678b989
-
Filesize
575B
MD57fd46959073e84849506a3dd398e9e15
SHA1f0e786c62b33d8f40a5f8498c3166922ab546d39
SHA25644e8f3376343f774d4598037897b9452413376c746cda5aa991833069bbd13ac
SHA5120f9004f72f2b3b33b826ed5c6f8532ad54e7e535c78e366c140f3dd735ab083a8e9e74b716a7e774c625b858f7b94cd924b41a3e3eeec96df6f9338c6f669304
-
Filesize
360B
MD53a4275dcfe10143f21fcd26b868688d9
SHA139299cb402442bb008c7da68c55b3f012cadca74
SHA256ea12dc02fdc821256e8d9b2298206017058209213f4ef4b0f661a7d17df66d28
SHA512027d2d2bee18172389cfcb3f7629872b40c33206f952e71071a71c2edeedb4fc6f6e3080225cf93e782505a701a3cc8024d6de9ed471ff7659decd4a62c96d56
-
Filesize
400B
MD54e9dec402f4c559bab854289e813fad3
SHA18c0e8f7a2ba14582b9e3b586da8637ca8f0752a7
SHA2567eb9d27de314cb7496ff7999c2772b370b2e9ad673482ee8d06bce5fced791d2
SHA512b4c8f51cbd4c356a9eefa812b3c2ae70ffc4e24bf126f2071a3e116dd3b9c5b4be5c00ce9538d5d620bcad582b7ead3c94a742e4bcd29a69c855a2d63a4a8b9f
-
Filesize
575B
MD5b56885e02138c1be9513ad22abc48724
SHA1ae77fb8a19bcaaa0acb085a4cf1e03ce46ef9a25
SHA256b7c9fc178710cf50724071051a355e862b0349a38c35f1b0dd9f52188ec0f91e
SHA5128a806e82d9eec90be675801f73cfcb2879bf1f35c75d373d0344d60215b0caefab2e7557f5161abeb51d04e98e3cb324c8bec2dec467eb9e82db3406d6db4987
-
Filesize
575B
MD50d32b153bc7e4674bc17328a5fe53b30
SHA1f004fc235b3e299728ed830ab6ff5ac254153a55
SHA256942889cb8420930ad95cc612518acb3a0e11c883dcf64329b3b0e4140c035919
SHA51251961b1de6a8b56016c9355a28dee7051c4897ab72f92328e9bdcd07327ad7a986db7cc6a93bf831b654a88ec886ff2f1e958e6b90e67fb86af6b89474c83f89
-
Filesize
576B
MD50e5c360fd72e72c37c00e5b57cd51fba
SHA1e69695174aae103cac51f2f459c841a7b92face1
SHA25630730dd095f5468cd9e2019ff3237dd5c2abbf8b90b0db83410cf5d2de7ec4a9
SHA51234dd2bbe57ee1e05f6f464e94e0f4827d730206569d45638ccf699cc1ca7fcc3e6c9bd9f865cc9dfcb11634291f08f1b96f50d12ed0f5d99ccc655345e54029a
-
Filesize
360B
MD5dd4f1b90b5fab2139356ccfc6251b7e7
SHA17f6935c21eb5b2627a3ec6fd66f696a5e6da41cc
SHA25677dadbf3c3e809ab4d5b23d6abb28282198be30b11d9d04b3e1fa352e29d3d6d
SHA51204f374c4bf79499060e2a937e40c571223a11a1519f1c387b825292b76580d6be41f9a1a20e9cb429d1f0e31a3fb09934dc5a3a956e51abed58954634f1d01cd
-
Filesize
13KB
MD565df772df4c6970658f98d5fa47f8240
SHA133848cf775e1ed8d1111722ee413725d455d2e9b
SHA25619b8dbd6f05f83e57cf43f2d83c9d979d37ba2477e78dc436a0175adc3ad7a24
SHA512a86b08d40db51bfdf116182ac663c0b2ec24bbea283156c004ad5c93fa5bbbc20cdefcee337acc0ab784641a8eead7eb13912c0b4bc6b209b96f5296602c09ea
-
Filesize
990B
MD5512303cceaf6c67c795a9abdecc9fe36
SHA1b54df528755b0326adcfdcf038fbd48e3cd21e2b
SHA256c070ecc28d15c7fd54d68bdec0447c9661b1a01f46004e9665af8512ddf7b435
SHA512708e6d2e9c38f8569e0eefcbd12bd2e7959b13c6378895d6d9f5b3b883d8e78f441eca49f21c951ad8a8957b9aec0c8e9fc0ab8dfe08ed6bbb35b4a11293bea4
-
Filesize
990B
MD54acc47b1d55d0dc309fc2363c564a410
SHA13e7c062aff1e5f35289ce9b2a6de670cf7c96cdf
SHA2565b5ec089bbcddf2851347139066fbb9c721b69241d632331a049eeb67bcb119c
SHA512067ea22b2a7449b97257fffe66bdf1959223530018f1da2ba3c96696c3ac95ffc95825473a2ad68f0d4f82dcd74bd3fa580ff9f73563a212fda8e215217fd65d
-
Filesize
990B
MD560900cc1f062dd90c61c22753cf60456
SHA1e85e5ba95087140229d10f956a5016195f572a76
SHA2562763cde809ed671acec61494a0a629546013b009d16f1bab8b87f2dd463eccfe
SHA512665342f0a83e34a960bda74fe23480d6441fb09e4b48046a447fb0ab35740fb73ac9faa2aca5332d610d4039900cb261e0bd6a42d05434f19d29c9a728cea77e
-
Filesize
12KB
MD529574f2cace217bf63f42e699361a387
SHA13a7f143babaec8b26ba04f21d1c20120ea6c645c
SHA2563d8b30c40e9c5cb69adf7c69b2893990f35c04d227ac54b0d533a9d4a5b29a8a
SHA5129ce0a150a14dd3aeb601ce8ee5973eb937a728985c8bab7c2d812934bf0b7c31c70cb957af50b39bf21080f5cc53839275d6a6b297122ab5a05fa57afabad613
-
Filesize
814B
MD51619812787773cc08a342797d601ce2b
SHA11f55770dd8a29930fb2048ab8186cf4712863bff
SHA256b08a41583f0db84bc60534ad958394d53f5d87a5448c40e1a43dde472b00d971
SHA5127a7f51e7414ddc141d058b0e870a26cbadcfd6b7c127dddfe977333f8ef60c5b461dc9c1dbab17428f4773d1adc83913e2b1c6d7829ba5365e25c3ca48330f47
-
Filesize
990B
MD51f2a655ac80bf44e5252ac0d4196c8dd
SHA19d9dfb4cab0347fcd296dc69600fa3b81dd0ade6
SHA256bc50b21d174ed199da8740bfbfa37dee43b51d18f457e8262dd5fa1c6e0b5d5c
SHA512e46f3186814a27dec87352f034b2515ae4be61425fda3e9da3939cb116ba3861f5faf21ae7bf1799a1ee05ad0a88abb718bf9e48607d4779e2b4d217608eb20d
-
Filesize
817B
MD528ccb465186288c3477dbcca21071838
SHA15fe14a3e58907ec085cef692009eb4dff675393a
SHA256b3c9bf6becfbadc35933b53dc7fab0e00bbe5098a01d8476e4fb4d59c558a313
SHA5128ccfa25ba7e78cfb231f6826c3f241ca768c0d5ba3c459cb42ebcc6659809cc1e18597c24e616e062aa8af362b6efc6e2c63ec2ee72e4cff7c0164b41753c7fd
-
Filesize
14KB
MD5e5a735cebfcccacd0253992d5af347cc
SHA1cad857612152b71de56fa450fe8d7546d29b8476
SHA2567c665e6a4ffc0bc7b83ff8a5e2b00f3cda4d53197a74d7b2c95e0b2d70c131f6
SHA5122df55e5f989f9ee453ff09ca10678fd5ffab49e80f07fd98d162433116150a3d00b14989f6fb7ee6212e4fc55c73c5ca3fde603afc673568a4f7d288308a5691
-
Filesize
814B
MD5ec724dc9738b34a70109c8d058046aaf
SHA1fad94ddc4022cd39b82c14c4461b360db8a413d3
SHA256d47ef5b9f1b35650d243326a899bcf028fa65efe528e4bce82a1822cc2a53dc0
SHA512cdbdc0c30d8f72d16d58dad6bd556433ca3a257e820fe5d25b12e9573b0ac977d8175ffd6828dd21371f3bff4c3500de6372a58ada2192c91fe97a5752d2c544
-
Filesize
26KB
MD5bb629402d5864b3206ef27619d018257
SHA19661b5d440d162a0daf42f7ab91097f81abe0b00
SHA256752a2c8c44741424262d7409e7fcf539ce950cf85fec226dd1b9add46d234856
SHA512d5a580d720fd5c9e827290a20ef9f2b58d9ccf2e4f519c6cf9f9c6c976eb500e053e5ad120e46c057ca386e27ed0d01bcb098fe766d8837cda23d51955d90e8e
-
Filesize
990B
MD5b541d3964fee539eb63e8dc311449e57
SHA1c9361320570afe574487bcd6e8e1297a00e82433
SHA25683fa11a8d295b773ab93461fb05097093069749462e3640941a37c058b901f89
SHA512ca79ee16c1b735391348cd185c944c8eb79fe0a93c8aeae30eb3cbda418a797bd22a79846cb7f61d6f3192cc6697c703f1375f1a814f38a6c3b16601e763191c
-
Filesize
990B
MD5335544af1084a08c4f2329ffb06148f9
SHA1043fd9a55198deb4e580c39308134042a4cff4e5
SHA256a1cb4cc42a59f5d2c2e8192b085d004d90a45993e1784b0428b8ee88a5264c93
SHA51232a8c8655adaef1b68937cb5d65e8e5d549e0814d03e754f23a8608ed57f1c1f4c2c8926d32dacd13d561f11eb44b69abf1adf4775b2c65d1f1d11f1bf0c8321
-
Filesize
990B
MD5cb75c5ea9a7addfb845a3a68ab899d6d
SHA14ef981fade41a766cf0c450431d642d6d0f0183f
SHA2563c388efbb6eb2a82f6550ae94983caa618566d67cf910b1d8d9d7994148424a6
SHA5120f9f3199130fc38d46422473084f00238bb5257be29000b7c07ad10925d127186ed79fb90959d0fc356033931c9eda00ea8ac888f362abb3b9913ce504c4edbc
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\base[1].js
Filesize2.4MB
MD5ed2c629dc5e405799ef93b97876abc45
SHA10a2588c1368fe48fb433cad8acc58b1214a77495
SHA2561a552e8ddfd36edc537188b01daf4f0388bb040af577451a8d0f3fe11d538e47
SHA512990b7bb30ce84a94f364e4eaf4bded1ce041ceb3906bc253856dfa2b585e40a92e3fd658d87588b63afe35abf0111fbb616d02f28b2002ddd80e8e0e4c64b795
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\embed[1].js
Filesize61KB
MD5a10bbcb280cd85678f7fa91f5987a1b4
SHA1d03518f518678e57318f383add3c26eb4c891d96
SHA256dcd6057e903309b4cd9d73dbeb9ebb179dd625facd8d04c5578bec9e44f54e0e
SHA5126ea2764ec8b7b63c48890f15de50c936406a60bd4805abe6a90e4522eaa4aa88f3543c9f2aea7472d80608ddaf4e1444e37618533982bfaf5d168b3ea8fbaac5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\www-embed-player[1].js
Filesize319KB
MD5aafc3991a4c65c32f11e3e55af0c0acb
SHA1c77a8d5a8933d5f4189581f6b9671ff6ec91a2b4
SHA256cf3a4809b702abf801ac1d61beea76a0307884338c26c1f970e3cb6bfc0870c6
SHA512c81b05da256b4ee16d58c6a19100200d0fdc908d05d62536d1229d7f2c639faa0afa922d034f5e12ce9164160b0358df60278b937233681602cd48cda6aaf7d6
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\www-player[1].css
Filesize367KB
MD569c6c2a25cfac2a8ab7182b8a91325da
SHA176d6c2b5a85fd1cedf7ab5022084cc982ef6f11c
SHA256e4ea3085c10ebdcee3f4b16dd370f467847e40aba7fcae77d60eed0024155864
SHA512b96edfe3029c7fe69d7cc2520c07a5f229b0915aa286ad5d263f13e80c67fcb8a72220c6b9b1cb9b7a885fd8512ad8a5a3a08cf54a5956a1b4debec02c8374c3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\yV2iCa5PT2B2oWfP6PUIKpFTSawA576CFnzCrmIVLE8[1].js
Filesize52KB
MD569bd7159b63674b070f11164c138e611
SHA178b6716bc5ec12b4a7c7bd3871cff4efb0281b89
SHA256c95da209ae4f4f6076a167cfe8f5082a915349ac00e7be82167cc2ae62152c4f
SHA51265c9fa90b27df4dc8ab949e48f04bf45b53a2d1d89cb56fead3f95c9abd210b5aa88aa1de718de555445bb0570fcf9aadd06e2d226a31ef10675a73df93c48d1
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\remote[1].js
Filesize117KB
MD55d9fee2f792a3411c469f5c831f69c29
SHA14ef01de4bdd9fbaf204c53a5d03f1b3d042d4716
SHA2568f3915b4b2a22688c994c9428621f46b2f3051a315708e138f33ac3b1131b61b
SHA512b21d015add55ad00a83cebdbf9ae2c60f74cfba4e1824d248238dfde3f0a164cb410db35e08d27eec48361e9a2013b771182266f1f4df6c6265b23fe153677b4
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a